@thunderid/react 1.14.0 → 1.15.1

package/dist/cjs/components/account/OrganizationUnitSwitcher/BaseOrganizationUnitSwitcher.styles.cjs

@@ -0,0 +1,184 @@
+const require_emotion = require('../../../styles/emotion.cjs');
+
+//#region src/components/account/OrganizationUnitSwitcher/BaseOrganizationUnitSwitcher.styles.ts
+/**
+* Creates styles for the BaseOrganizationUnitSwitcher component.
+*
+* @param theme - The theme object containing design tokens
+* @param colorScheme - The current color scheme (used for memoization)
+* @returns Object containing CSS class names for component styling
+*/
+const useStyles = (theme, colorScheme) => {
+	const hover = theme.vars.colors.action?.hover || "rgba(0, 0, 0, 0.04)";
+	const root = require_emotion.css`
+    display: inline-flex;
+    flex-direction: column;
+    gap: calc(${theme.vars.spacing.unit} * 0.5);
+    min-width: 240px;
+    max-width: 100%;
+    font-family: ${theme.vars.typography.fontFamily};
+  `;
+	const field = require_emotion.css`
+    display: flex;
+    align-items: center;
+    justify-content: space-between;
+    gap: calc(${theme.vars.spacing.unit} * 1.5);
+    width: 100%;
+    box-sizing: border-box;
+    padding: calc(${theme.vars.spacing.unit} * 0.75) calc(${theme.vars.spacing.unit} * 1.5);
+    border: 1px solid ${theme.vars.colors.border};
+    border-radius: ${theme.vars.borderRadius.medium};
+    background: ${theme.vars.colors.background.surface};
+    color: ${theme.vars.colors.text.primary};
+    font: inherit;
+    text-align: start;
+    cursor: pointer;
+
+    &:hover:not(:disabled) {
+      background-color: ${hover};
+    }
+
+    &:focus-visible {
+      outline: 2px solid ${theme.vars.colors.primary.main};
+      outline-offset: 1px;
+    }
+
+    &:disabled {
+      cursor: default;
+      opacity: 0.7;
+    }
+  `;
+	const fieldText = require_emotion.css`
+    display: flex;
+    flex-direction: column;
+    min-width: 0;
+  `;
+	const label = require_emotion.css`
+    display: block;
+    font-size: 0.75rem;
+    line-height: 1rem;
+    color: ${theme.vars.colors.text.secondary};
+  `;
+	const value = require_emotion.css`
+    display: block;
+    overflow: hidden;
+    font-size: 1rem;
+    line-height: 1.375rem;
+    text-overflow: ellipsis;
+    white-space: nowrap;
+  `;
+	const chevron = require_emotion.css`
+    display: flex;
+    flex-shrink: 0;
+    color: ${theme.vars.colors.text.secondary};
+    transition: transform 0.12s ease-in-out;
+  `;
+	const chevronOpen = require_emotion.css`
+    transform: rotate(180deg);
+  `;
+	const error = require_emotion.css`
+    font-size: 0.75rem;
+    color: ${theme.vars.colors.error.main};
+  `;
+	const menu = require_emotion.css`
+    box-sizing: border-box;
+    max-height: 320px;
+    overflow-y: auto;
+    padding: calc(${theme.vars.spacing.unit} * 0.5);
+    border: 1px solid ${theme.vars.colors.border};
+    border-radius: ${theme.vars.borderRadius.medium};
+    background-color: ${theme.vars.colors.background.surface};
+    box-shadow: ${theme.vars.shadows.medium};
+    font-family: ${theme.vars.typography.fontFamily};
+    outline: none;
+    z-index: 1000;
+  `;
+	const list = require_emotion.css`
+    display: flex;
+    flex-direction: column;
+  `;
+	const option = require_emotion.css`
+    display: flex;
+    align-items: center;
+    justify-content: space-between;
+    gap: ${theme.vars.spacing.unit};
+    width: 100%;
+    padding: ${theme.vars.spacing.unit} calc(${theme.vars.spacing.unit} * 1.25);
+    border: none;
+    border-radius: ${theme.vars.borderRadius.small};
+    background-color: transparent;
+    color: ${theme.vars.colors.text.primary};
+    font: inherit;
+    text-align: start;
+    cursor: pointer;
+    outline: none;
+
+    &:hover,
+    &:focus-visible {
+      background-color: ${hover};
+    }
+  `;
+	const optionCurrent = require_emotion.css`
+    font-weight: 600;
+  `;
+	const optionText = require_emotion.css`
+    display: flex;
+    flex-direction: column;
+    min-width: 0;
+  `;
+	const optionName = require_emotion.css`
+    font-size: 0.875rem;
+  `;
+	const optionHandle = require_emotion.css`
+    font-size: 0.75rem;
+    font-weight: 400;
+    color: ${theme.vars.colors.text.secondary};
+  `;
+	const check = require_emotion.css`
+    display: flex;
+    flex-shrink: 0;
+    color: ${theme.vars.colors.primary.main};
+  `;
+	const status = require_emotion.css`
+    display: flex;
+    align-items: center;
+    gap: ${theme.vars.spacing.unit};
+    margin: 0;
+    padding: ${theme.vars.spacing.unit} calc(${theme.vars.spacing.unit} * 1.25);
+    font-size: 0.875rem;
+    color: ${theme.vars.colors.text.secondary};
+  `;
+	return {
+		check,
+		chevron,
+		chevronOpen,
+		colorScheme,
+		error,
+		field,
+		fieldText,
+		label,
+		list,
+		menu,
+		option,
+		optionCurrent,
+		optionHandle,
+		optionName,
+		optionText,
+		pagination: require_emotion.css`
+    display: flex;
+    justify-content: flex-end;
+    gap: ${theme.vars.spacing.unit};
+    margin-top: calc(${theme.vars.spacing.unit} * 0.5);
+    padding-top: calc(${theme.vars.spacing.unit} * 0.5);
+    border-top: 1px solid ${theme.vars.colors.border};
+  `,
+		root,
+		status,
+		value
+	};
+};
+var BaseOrganizationUnitSwitcher_styles_default = useStyles;
+
+//#endregion
+exports.default = BaseOrganizationUnitSwitcher_styles_default;
+//# sourceMappingURL=BaseOrganizationUnitSwitcher.styles.cjs.map

package/dist/cjs/components/account/OrganizationUnitSwitcher/BaseOrganizationUnitSwitcher.styles.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"BaseOrganizationUnitSwitcher.styles.cjs","names":["hover: string","root: string","field: string","fieldText: string","label: string","value: string","chevron: string","chevronOpen: string","error: string","menu: string","list: string","option: string","optionCurrent: string","optionText: string","optionName: string","optionHandle: string","check: string","status: string"],"sources":["../../../../../src/components/account/OrganizationUnitSwitcher/BaseOrganizationUnitSwitcher.styles.ts"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\nimport {Theme} from '@thunderid/browser';\nimport {css} from '../../../styles/emotion';\n\n/**\n * Creates styles for the BaseOrganizationUnitSwitcher component.\n *\n * @param theme - The theme object containing design tokens\n * @param colorScheme - The current color scheme (used for memoization)\n * @returns Object containing CSS class names for component styling\n */\nconst useStyles = (theme: Theme, colorScheme: string): Record<string, string> => {\n  const hover: string = theme.vars.colors.action?.hover || 'rgba(0, 0, 0, 0.04)';\n\n  const root: string = css`\n    display: inline-flex;\n    flex-direction: column;\n    gap: calc(${theme.vars.spacing.unit} * 0.5);\n    min-width: 240px;\n    max-width: 100%;\n    font-family: ${theme.vars.typography.fontFamily};\n  `;\n\n  const field: string = css`\n    display: flex;\n    align-items: center;\n    justify-content: space-between;\n    gap: calc(${theme.vars.spacing.unit} * 1.5);\n    width: 100%;\n    box-sizing: border-box;\n    padding: calc(${theme.vars.spacing.unit} * 0.75) calc(${theme.vars.spacing.unit} * 1.5);\n    border: 1px solid ${theme.vars.colors.border};\n    border-radius: ${theme.vars.borderRadius.medium};\n    background: ${theme.vars.colors.background.surface};\n    color: ${theme.vars.colors.text.primary};\n    font: inherit;\n    text-align: start;\n    cursor: pointer;\n\n    &:hover:not(:disabled) {\n      background-color: ${hover};\n    }\n\n    &:focus-visible {\n      outline: 2px solid ${theme.vars.colors.primary.main};\n      outline-offset: 1px;\n    }\n\n    &:disabled {\n      cursor: default;\n      opacity: 0.7;\n    }\n  `;\n\n  const fieldText: string = css`\n    display: flex;\n    flex-direction: column;\n    min-width: 0;\n  `;\n\n  const label: string = css`\n    display: block;\n    font-size: 0.75rem;\n    line-height: 1rem;\n    color: ${theme.vars.colors.text.secondary};\n  `;\n\n  const value: string = css`\n    display: block;\n    overflow: hidden;\n    font-size: 1rem;\n    line-height: 1.375rem;\n    text-overflow: ellipsis;\n    white-space: nowrap;\n  `;\n\n  const chevron: string = css`\n    display: flex;\n    flex-shrink: 0;\n    color: ${theme.vars.colors.text.secondary};\n    transition: transform 0.12s ease-in-out;\n  `;\n\n  const chevronOpen: string = css`\n    transform: rotate(180deg);\n  `;\n\n  const error: string = css`\n    font-size: 0.75rem;\n    color: ${theme.vars.colors.error.main};\n  `;\n\n  const menu: string = css`\n    box-sizing: border-box;\n    max-height: 320px;\n    overflow-y: auto;\n    padding: calc(${theme.vars.spacing.unit} * 0.5);\n    border: 1px solid ${theme.vars.colors.border};\n    border-radius: ${theme.vars.borderRadius.medium};\n    background-color: ${theme.vars.colors.background.surface};\n    box-shadow: ${theme.vars.shadows.medium};\n    font-family: ${theme.vars.typography.fontFamily};\n    outline: none;\n    z-index: 1000;\n  `;\n\n  const list: string = css`\n    display: flex;\n    flex-direction: column;\n  `;\n\n  const option: string = css`\n    display: flex;\n    align-items: center;\n    justify-content: space-between;\n    gap: ${theme.vars.spacing.unit};\n    width: 100%;\n    padding: ${theme.vars.spacing.unit} calc(${theme.vars.spacing.unit} * 1.25);\n    border: none;\n    border-radius: ${theme.vars.borderRadius.small};\n    background-color: transparent;\n    color: ${theme.vars.colors.text.primary};\n    font: inherit;\n    text-align: start;\n    cursor: pointer;\n    outline: none;\n\n    &:hover,\n    &:focus-visible {\n      background-color: ${hover};\n    }\n  `;\n\n  const optionCurrent: string = css`\n    font-weight: 600;\n  `;\n\n  const optionText: string = css`\n    display: flex;\n    flex-direction: column;\n    min-width: 0;\n  `;\n\n  const optionName: string = css`\n    font-size: 0.875rem;\n  `;\n\n  const optionHandle: string = css`\n    font-size: 0.75rem;\n    font-weight: 400;\n    color: ${theme.vars.colors.text.secondary};\n  `;\n\n  const check: string = css`\n    display: flex;\n    flex-shrink: 0;\n    color: ${theme.vars.colors.primary.main};\n  `;\n\n  const status: string = css`\n    display: flex;\n    align-items: center;\n    gap: ${theme.vars.spacing.unit};\n    margin: 0;\n    padding: ${theme.vars.spacing.unit} calc(${theme.vars.spacing.unit} * 1.25);\n    font-size: 0.875rem;\n    color: ${theme.vars.colors.text.secondary};\n  `;\n\n  const pagination: string = css`\n    display: flex;\n    justify-content: flex-end;\n    gap: ${theme.vars.spacing.unit};\n    margin-top: calc(${theme.vars.spacing.unit} * 0.5);\n    padding-top: calc(${theme.vars.spacing.unit} * 0.5);\n    border-top: 1px solid ${theme.vars.colors.border};\n  `;\n\n  return {\n    check,\n    chevron,\n    chevronOpen,\n    colorScheme,\n    error,\n    field,\n    fieldText,\n    label,\n    list,\n    menu,\n    option,\n    optionCurrent,\n    optionHandle,\n    optionName,\n    optionText,\n    pagination,\n    root,\n    status,\n    value,\n  };\n};\n\nexport default useStyles;\n"],"mappings":";;;;;;;;;;AAaA,MAAM,aAAa,OAAc,gBAAgD;CAC/E,MAAMA,QAAgB,MAAM,KAAK,OAAO,QAAQ,SAAS;CAEzD,MAAMC,OAAe,mBAAG;;;gBAGV,MAAM,KAAK,QAAQ,KAAK;;;mBAGrB,MAAM,KAAK,WAAW,WAAW;;CAGlD,MAAMC,QAAgB,mBAAG;;;;gBAIX,MAAM,KAAK,QAAQ,KAAK;;;oBAGpB,MAAM,KAAK,QAAQ,KAAK,gBAAgB,MAAM,KAAK,QAAQ,KAAK;wBAC5D,MAAM,KAAK,OAAO,OAAO;qBAC5B,MAAM,KAAK,aAAa,OAAO;kBAClC,MAAM,KAAK,OAAO,WAAW,QAAQ;aAC1C,MAAM,KAAK,OAAO,KAAK,QAAQ;;;;;;0BAMlB,MAAM;;;;2BAIL,MAAM,KAAK,OAAO,QAAQ,KAAK;;;;;;;;;CAUxD,MAAMC,YAAoB,mBAAG;;;;;CAM7B,MAAMC,QAAgB,mBAAG;;;;aAId,MAAM,KAAK,OAAO,KAAK,UAAU;;CAG5C,MAAMC,QAAgB,mBAAG;;;;;;;;CASzB,MAAMC,UAAkB,mBAAG;;;aAGhB,MAAM,KAAK,OAAO,KAAK,UAAU;;;CAI5C,MAAMC,cAAsB,mBAAG;;;CAI/B,MAAMC,QAAgB,mBAAG;;aAEd,MAAM,KAAK,OAAO,MAAM,KAAK;;CAGxC,MAAMC,OAAe,mBAAG;;;;oBAIN,MAAM,KAAK,QAAQ,KAAK;wBACpB,MAAM,KAAK,OAAO,OAAO;qBAC5B,MAAM,KAAK,aAAa,OAAO;wBAC5B,MAAM,KAAK,OAAO,WAAW,QAAQ;kBAC3C,MAAM,KAAK,QAAQ,OAAO;mBACzB,MAAM,KAAK,WAAW,WAAW;;;;CAKlD,MAAMC,OAAe,mBAAG;;;;CAKxB,MAAMC,SAAiB,mBAAG;;;;WAIjB,MAAM,KAAK,QAAQ,KAAK;;eAEpB,MAAM,KAAK,QAAQ,KAAK,QAAQ,MAAM,KAAK,QAAQ,KAAK;;qBAElD,MAAM,KAAK,aAAa,MAAM;;aAEtC,MAAM,KAAK,OAAO,KAAK,QAAQ;;;;;;;;0BAQlB,MAAM;;;CAI9B,MAAMC,gBAAwB,mBAAG;;;CAIjC,MAAMC,aAAqB,mBAAG;;;;;CAM9B,MAAMC,aAAqB,mBAAG;;;CAI9B,MAAMC,eAAuB,mBAAG;;;aAGrB,MAAM,KAAK,OAAO,KAAK,UAAU;;CAG5C,MAAMC,QAAgB,mBAAG;;;aAGd,MAAM,KAAK,OAAO,QAAQ,KAAK;;CAG1C,MAAMC,SAAiB,mBAAG;;;WAGjB,MAAM,KAAK,QAAQ,KAAK;;eAEpB,MAAM,KAAK,QAAQ,KAAK,QAAQ,MAAM,KAAK,QAAQ,KAAK;;aAE1D,MAAM,KAAK,OAAO,KAAK,UAAU;;AAY5C,QAAO;EACL;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA,YAzByB,mBAAG;;;WAGrB,MAAM,KAAK,QAAQ,KAAK;uBACZ,MAAM,KAAK,QAAQ,KAAK;wBACvB,MAAM,KAAK,QAAQ,KAAK;4BACpB,MAAM,KAAK,OAAO,OAAO;;EAoBjD;EACA;EACA;EACD;;AAGH,kDAAe"}

package/dist/cjs/components/account/OrganizationUnitSwitcher/OrganizationUnitSwitcher.cjs

@@ -0,0 +1,139 @@
+const require_rolldown_runtime = require('../../../_virtual/rolldown_runtime.cjs');
+const require_useThunderID = require('../../../contexts/ThunderID/useThunderID.cjs');
+const require_useTranslation = require('../../../hooks/useTranslation.cjs');
+const require_BaseOrganizationUnitSwitcher = require('./BaseOrganizationUnitSwitcher.cjs');
+const require_getAccessibleOrganizationUnits = require('../../../api/account/getAccessibleOrganizationUnits.cjs');
+const require_getOrganizationUnitSwitchErrorKey = require('../../../utils/getOrganizationUnitSwitchErrorKey.cjs');
+let __thunderid_browser = require("@thunderid/browser");
+__thunderid_browser = require_rolldown_runtime.__toESM(__thunderid_browser);
+let react = require("react");
+react = require_rolldown_runtime.__toESM(react);
+let react_jsx_runtime = require("react/jsx-runtime");
+react_jsx_runtime = require_rolldown_runtime.__toESM(react_jsx_runtime);
+
+//#region src/components/account/OrganizationUnitSwitcher/OrganizationUnitSwitcher.tsx
+/**
+* Shows the current organization unit in a field that opens a menu of the units the signed-in user can
+* access (`/users/me/ous`), and switches the session to the one picked: it signs in again bounded to that unit through
+* `switchOrganizationUnit`, which reuses the SSO session so normally no credentials are asked. A failed
+* switch keeps the session as it was and shows a translated message.
+*
+* @example
+* ```tsx
+* <OrganizationUnitSwitcher scope="siblings" />
+*
+* // Let the app take over the pick
+* <OrganizationUnitSwitcher onSelect={(unit) => navigate(`/orgs/${unit.handle}`)} />
+*
+* // Custom rendering
+* <OrganizationUnitSwitcher>
+*   {({organizationUnits, current, onSwitch}) => (
+*     <select value={current ?? ''} onChange={(e) => onSwitch(organizationUnits.find((u) => u.id === e.target.value)!)}>
+*       {organizationUnits.map((u) => <option key={u.id} value={u.id}>{u.name}</option>)}
+*     </select>
+*   )}
+* </OrganizationUnitSwitcher>
+* ```
+*/
+const OrganizationUnitSwitcher = ({ limit = 10, onError = void 0, onSelect = void 0, onSwitch = void 0, preferences = void 0, scope = void 0, switchOptions = void 0,...rest }) => {
+	const { baseUrl, currentOrganizationUnit, endpoints, instanceId, isSignedIn, preferences: contextPreferences, switchOrganizationUnit } = require_useThunderID.default();
+	const resolvedPreferences = (0, react.useMemo)(() => ({
+		...contextPreferences,
+		...preferences
+	}), [contextPreferences, preferences]);
+	const { t } = require_useTranslation.default(resolvedPreferences?.i18n);
+	const [list, setList] = (0, react.useState)(null);
+	const [offset, setOffset] = (0, react.useState)(0);
+	const [isLoading, setIsLoading] = (0, react.useState)(false);
+	const [error, setError] = (0, react.useState)(null);
+	const [switchingId, setSwitchingId] = (0, react.useState)(null);
+	const requestRef = (0, react.useRef)(0);
+	const latestRef = (0, react.useRef)({
+		onError,
+		t
+	});
+	latestRef.current = {
+		onError,
+		t
+	};
+	const load = (0, react.useCallback)(async (pageOffset) => {
+		const request = requestRef.current + 1;
+		requestRef.current = request;
+		setIsLoading(true);
+		setError(null);
+		try {
+			const page = await require_getAccessibleOrganizationUnits.default({
+				baseUrl,
+				instanceId,
+				limit,
+				offset: pageOffset,
+				scope,
+				url: (0, __thunderid_browser.resolveResourceEndpoint)("usersMeOrganizationUnits", { endpoints })
+			});
+			if (requestRef.current === request) setList(page);
+		} catch (caught) {
+			if (requestRef.current === request) {
+				setError(latestRef.current.t("organization_unit.switcher.error.load"));
+				latestRef.current.onError?.(caught);
+			}
+		} finally {
+			if (requestRef.current === request) setIsLoading(false);
+		}
+	}, [
+		baseUrl,
+		endpoints,
+		instanceId,
+		limit,
+		scope
+	]);
+	(0, react.useEffect)(() => {
+		if (isSignedIn) load(offset);
+	}, [
+		isSignedIn,
+		load,
+		offset
+	]);
+	const handleSwitch = async (unit) => {
+		if (onSelect) {
+			onSelect(unit);
+			return;
+		}
+		setError(null);
+		setSwitchingId(unit.id);
+		try {
+			const user = await switchOrganizationUnit(unit.id, switchOptions);
+			if (user) {
+				onSwitch?.(unit, user);
+				await load(offset);
+			}
+		} catch (caught) {
+			setError(t(require_getOrganizationUnitSwitchErrorKey.default(caught), { name: unit.name }));
+			onError?.(caught);
+		} finally {
+			setSwitchingId(null);
+		}
+	};
+	const current = (list?.current === "" ? void 0 : list?.current) ?? currentOrganizationUnit?.id ?? null;
+	return /* @__PURE__ */ (0, react_jsx_runtime.jsx)(require_BaseOrganizationUnitSwitcher.default, {
+		...rest,
+		current,
+		currentName: currentOrganizationUnit?.id === current ? currentOrganizationUnit?.name ?? null : null,
+		error,
+		isLoading,
+		limit,
+		offset,
+		organizationUnits: list?.organizationUnits ?? [],
+		preferences: resolvedPreferences,
+		switchingId,
+		totalResults: list?.totalResults ?? 0,
+		onPageChange: setOffset,
+		onSwitch: (unit) => {
+			handleSwitch(unit);
+		}
+	});
+};
+var OrganizationUnitSwitcher_default = OrganizationUnitSwitcher;
+
+//#endregion
+exports.default = OrganizationUnitSwitcher_default;
+//# sourceMappingURL=OrganizationUnitSwitcher.cjs.map

package/dist/cjs/components/account/OrganizationUnitSwitcher/OrganizationUnitSwitcher.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"OrganizationUnitSwitcher.cjs","names":["OrganizationUnitSwitcher: FC<OrganizationUnitSwitcherProps>","useThunderID","useTranslation","request: number","page: AccessibleOrganizationUnitList","getAccessibleOrganizationUnits","caught: unknown","user: User | undefined","getOrganizationUnitSwitchErrorKey","current: string | null","BaseOrganizationUnitSwitcher"],"sources":["../../../../../src/components/account/OrganizationUnitSwitcher/OrganizationUnitSwitcher.tsx"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\nimport {\n  AccessibleOrganizationUnit,\n  AccessibleOrganizationUnitList,\n  AccessibleOrganizationUnitScope,\n  SwitchOrganizationUnitOptions,\n  User,\n  resolveResourceEndpoint,\n} from '@thunderid/browser';\nimport {FC, ReactElement, useCallback, useEffect, useMemo, useRef, useState} from 'react';\nimport BaseOrganizationUnitSwitcher, {BaseOrganizationUnitSwitcherProps} from './BaseOrganizationUnitSwitcher';\nimport getAccessibleOrganizationUnits from '../../../api/account/getAccessibleOrganizationUnits';\nimport useThunderID from '../../../contexts/ThunderID/useThunderID';\nimport useTranslation from '../../../hooks/useTranslation';\nimport getOrganizationUnitSwitchErrorKey from '../../../utils/getOrganizationUnitSwitchErrorKey';\n\nexport interface OrganizationUnitSwitcherProps\n  extends Omit<\n    BaseOrganizationUnitSwitcherProps,\n    | 'current'\n    | 'currentName'\n    | 'error'\n    | 'isLoading'\n    | 'offset'\n    | 'onPageChange'\n    | 'onSwitch'\n    | 'organizationUnits'\n    | 'switchingId'\n    | 'totalResults'\n  > {\n  /**\n   * Called when a switch or a load fails, with the SDK error. The message is shown either way.\n   */\n  onError?: (error: unknown) => void;\n  /**\n   * Takes over a pick: called with the unit instead of switching to it, so the app decides what\n   * happens (for example navigating to a unit-specific entry point).\n   */\n  onSelect?: (unit: AccessibleOrganizationUnit) => void;\n  /**\n   * Called after a switch completed in place, with the refreshed user. A switch that leaves the page\n   * completes on the callback instead.\n   */\n  onSwitch?: (unit: AccessibleOrganizationUnit, user: User) => void;\n  /**\n   * Narrows the list relative to the current unit. `siblings` lists the current unit and the units that\n   * share its parent. Omit to list every accessible unit.\n   */\n  scope?: AccessibleOrganizationUnitScope;\n  /**\n   * Options passed to `switchOrganizationUnit`, such as `redirect: false`.\n   */\n  switchOptions?: SwitchOrganizationUnitOptions;\n}\n\n/**\n * Shows the current organization unit in a field that opens a menu of the units the signed-in user can\n * access (`/users/me/ous`), and switches the session to the one picked: it signs in again bounded to that unit through\n * `switchOrganizationUnit`, which reuses the SSO session so normally no credentials are asked. A failed\n * switch keeps the session as it was and shows a translated message.\n *\n * @example\n * ```tsx\n * <OrganizationUnitSwitcher scope=\"siblings\" />\n *\n * // Let the app take over the pick\n * <OrganizationUnitSwitcher onSelect={(unit) => navigate(`/orgs/${unit.handle}`)} />\n *\n * // Custom rendering\n * <OrganizationUnitSwitcher>\n *   {({organizationUnits, current, onSwitch}) => (\n *     <select value={current ?? ''} onChange={(e) => onSwitch(organizationUnits.find((u) => u.id === e.target.value)!)}>\n *       {organizationUnits.map((u) => <option key={u.id} value={u.id}>{u.name}</option>)}\n *     </select>\n *   )}\n * </OrganizationUnitSwitcher>\n * ```\n */\nconst OrganizationUnitSwitcher: FC<OrganizationUnitSwitcherProps> = ({\n  limit = 10,\n  onError = undefined,\n  onSelect = undefined,\n  onSwitch = undefined,\n  preferences = undefined,\n  scope = undefined,\n  switchOptions = undefined,\n  ...rest\n}: OrganizationUnitSwitcherProps): ReactElement => {\n  const {\n    baseUrl,\n    currentOrganizationUnit,\n    endpoints,\n    instanceId,\n    isSignedIn,\n    preferences: contextPreferences,\n    switchOrganizationUnit,\n  } = useThunderID();\n\n  const resolvedPreferences = useMemo(\n    () => ({...contextPreferences, ...preferences}),\n    [contextPreferences, preferences],\n  );\n  const {t} = useTranslation(resolvedPreferences?.i18n);\n\n  const [list, setList] = useState<AccessibleOrganizationUnitList | null>(null);\n  const [offset, setOffset] = useState<number>(0);\n  const [isLoading, setIsLoading] = useState<boolean>(false);\n  const [error, setError] = useState<string | null>(null);\n  const [switchingId, setSwitchingId] = useState<string | null>(null);\n  const requestRef = useRef<number>(0);\n  // The latest callbacks, read when a load settles, so a new `onError` on each render does not reload.\n  const latestRef = useRef<{onError?: (error: unknown) => void; t: typeof t}>({onError, t});\n  latestRef.current = {onError, t};\n\n  const load = useCallback(\n    async (pageOffset: number): Promise<void> => {\n      const request: number = requestRef.current + 1;\n      requestRef.current = request;\n      setIsLoading(true);\n      setError(null);\n\n      try {\n        const page: AccessibleOrganizationUnitList = await getAccessibleOrganizationUnits({\n          baseUrl,\n          instanceId,\n          limit,\n          offset: pageOffset,\n          scope,\n          url: resolveResourceEndpoint('usersMeOrganizationUnits', {endpoints}),\n        });\n\n        if (requestRef.current === request) {\n          setList(page);\n        }\n      } catch (caught: unknown) {\n        if (requestRef.current === request) {\n          setError(latestRef.current.t('organization_unit.switcher.error.load'));\n          latestRef.current.onError?.(caught);\n        }\n      } finally {\n        if (requestRef.current === request) {\n          setIsLoading(false);\n        }\n      }\n    },\n    [baseUrl, endpoints, instanceId, limit, scope],\n  );\n\n  useEffect(() => {\n    if (isSignedIn) {\n      void load(offset);\n    }\n  }, [isSignedIn, load, offset]);\n\n  const handleSwitch = async (unit: AccessibleOrganizationUnit): Promise<void> => {\n    if (onSelect) {\n      onSelect(unit);\n\n      return;\n    }\n\n    setError(null);\n    setSwitchingId(unit.id);\n\n    try {\n      const user: User | undefined = await switchOrganizationUnit(unit.id, switchOptions);\n\n      if (user) {\n        onSwitch?.(unit, user);\n        await load(offset);\n      }\n    } catch (caught: unknown) {\n      setError(t(getOrganizationUnitSwitchErrorKey(caught), {name: unit.name}));\n      onError?.(caught);\n    } finally {\n      setSwitchingId(null);\n    }\n  };\n\n  const current: string | null =\n    (list?.current === '' ? undefined : list?.current) ?? currentOrganizationUnit?.id ?? null;\n\n  return (\n    <BaseOrganizationUnitSwitcher\n      {...rest}\n      current={current}\n      // The session's unit names the field when the page does not list the current unit.\n      currentName={currentOrganizationUnit?.id === current ? (currentOrganizationUnit?.name ?? null) : null}\n      error={error}\n      isLoading={isLoading}\n      limit={limit}\n      offset={offset}\n      organizationUnits={list?.organizationUnits ?? []}\n      preferences={resolvedPreferences}\n      switchingId={switchingId}\n      totalResults={list?.totalResults ?? 0}\n      onPageChange={setOffset}\n      onSwitch={(unit: AccessibleOrganizationUnit): void => {\n        void handleSwitch(unit);\n      }}\n    />\n  );\n};\n\nexport default OrganizationUnitSwitcher;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAgFA,MAAMA,4BAA+D,EACnE,QAAQ,IACR,UAAU,QACV,WAAW,QACX,WAAW,QACX,cAAc,QACd,QAAQ,QACR,gBAAgB,OAChB,GAAG,WAC8C;CACjD,MAAM,EACJ,SACA,yBACA,WACA,YACA,YACA,aAAa,oBACb,2BACEC,8BAAc;CAElB,MAAM,gDACG;EAAC,GAAG;EAAoB,GAAG;EAAY,GAC9C,CAAC,oBAAoB,YAAY,CAClC;CACD,MAAM,EAAC,MAAKC,+BAAe,qBAAqB,KAAK;CAErD,MAAM,CAAC,MAAM,+BAA2D,KAAK;CAC7E,MAAM,CAAC,QAAQ,iCAA8B,EAAE;CAC/C,MAAM,CAAC,WAAW,oCAAkC,MAAM;CAC1D,MAAM,CAAC,OAAO,gCAAoC,KAAK;CACvD,MAAM,CAAC,aAAa,sCAA0C,KAAK;CACnE,MAAM,+BAA4B,EAAE;CAEpC,MAAM,8BAAsE;EAAC;EAAS;EAAE,CAAC;AACzF,WAAU,UAAU;EAAC;EAAS;EAAE;CAEhC,MAAM,8BACJ,OAAO,eAAsC;EAC3C,MAAMC,UAAkB,WAAW,UAAU;AAC7C,aAAW,UAAU;AACrB,eAAa,KAAK;AAClB,WAAS,KAAK;AAEd,MAAI;GACF,MAAMC,OAAuC,MAAMC,+CAA+B;IAChF;IACA;IACA;IACA,QAAQ;IACR;IACA,sDAA6B,4BAA4B,EAAC,WAAU,CAAC;IACtE,CAAC;AAEF,OAAI,WAAW,YAAY,QACzB,SAAQ,KAAK;WAERC,QAAiB;AACxB,OAAI,WAAW,YAAY,SAAS;AAClC,aAAS,UAAU,QAAQ,EAAE,wCAAwC,CAAC;AACtE,cAAU,QAAQ,UAAU,OAAO;;YAE7B;AACR,OAAI,WAAW,YAAY,QACzB,cAAa,MAAM;;IAIzB;EAAC;EAAS;EAAW;EAAY;EAAO;EAAM,CAC/C;AAED,4BAAgB;AACd,MAAI,WACF,CAAK,KAAK,OAAO;IAElB;EAAC;EAAY;EAAM;EAAO,CAAC;CAE9B,MAAM,eAAe,OAAO,SAAoD;AAC9E,MAAI,UAAU;AACZ,YAAS,KAAK;AAEd;;AAGF,WAAS,KAAK;AACd,iBAAe,KAAK,GAAG;AAEvB,MAAI;GACF,MAAMC,OAAyB,MAAM,uBAAuB,KAAK,IAAI,cAAc;AAEnF,OAAI,MAAM;AACR,eAAW,MAAM,KAAK;AACtB,UAAM,KAAK,OAAO;;WAEbD,QAAiB;AACxB,YAAS,EAAEE,kDAAkC,OAAO,EAAE,EAAC,MAAM,KAAK,MAAK,CAAC,CAAC;AACzE,aAAU,OAAO;YACT;AACR,kBAAe,KAAK;;;CAIxB,MAAMC,WACH,MAAM,YAAY,KAAK,SAAY,MAAM,YAAY,yBAAyB,MAAM;AAEvF,QACE,2CAACC;EACC,GAAI;EACK;EAET,aAAa,yBAAyB,OAAO,UAAW,yBAAyB,QAAQ,OAAQ;EAC1F;EACI;EACJ;EACC;EACR,mBAAmB,MAAM,qBAAqB,EAAE;EAChD,aAAa;EACA;EACb,cAAc,MAAM,gBAAgB;EACpC,cAAc;EACd,WAAW,SAA2C;AACpD,GAAK,aAAa,KAAK;;GAEzB;;AAIN,uCAAe"}

package/dist/cjs/components/auth/Callback/TokenCallback.cjs

@@ -82,7 +82,7 @@ const TokenCallback = ({ onNavigate, onError, onSuccess, signInPath = "/signin",
 				if (response.flowStatus === __thunderid_browser.EmbeddedSignInFlowStatus.Complete) {
 					const redirectUrl = response?.redirectUrl || response?.redirect_uri;
 					sessionStorage.removeItem(`${vendor}_execution_id`);
-					await storageManager.removeHybridDataParameter("authId");
+					await storageManager.removeFlowAuthId(executionId);
 					onSuccess?.({
 						redirectUrl,
 						...response.data || {}
@@ -97,7 +97,7 @@ const TokenCallback = ({ onNavigate, onError, onSuccess, signInPath = "/signin",
 				if (response.flowStatus === __thunderid_browser.EmbeddedSignInFlowStatus.Error) {
 					const failureReason = response?.failureReason;
 					const error = new Error(failureReason || "Token validation failed. Please try again.");
-					await storageManager.removeHybridDataParameter("authId");
+					await storageManager.removeFlowAuthId(executionId);
 					redirectWithError(error, isRegistrationFlow);
 					return;
 				}
@@ -109,7 +109,7 @@ const TokenCallback = ({ onNavigate, onError, onSuccess, signInPath = "/signin",
 				const error = err instanceof Error ? err : /* @__PURE__ */ new Error("Token callback processing failed");
 				console.error("Token callback error:", err);
 				const storageManager = await getStorageManager();
-				if (storageManager) await storageManager.removeHybridDataParameter("authId");
+				if (storageManager && executionId) await storageManager.removeFlowAuthId(executionId);
 				redirectWithError(error, isRegistrationFlow);
 			}
 		};

package/dist/cjs/components/auth/Callback/TokenCallback.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"TokenCallback.cjs","names":["TokenCallback: FC<TokenCallbackProps>","processingRef: any","useThunderID","url: URL","redirectUrlObj: URL","state: string","params: URLSearchParams","searchParams: URLSearchParams","executionId: string | null","token: string | null","applicationId: string | null","isRegistrationFlow: boolean","storageManager: any","response: any","EmbeddedSignInFlowType","redirectURL: string | undefined","nextExecutionId: string","nextExecutionId","EmbeddedSignInFlowStatus","redirectUrl: string | undefined","failureReason: string | undefined","error: Error"],"sources":["../../../../../src/components/auth/Callback/TokenCallback.tsx"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\nimport {EmbeddedSignInFlowStatus, EmbeddedSignInFlowType, navigate as browserNavigate} from '@thunderid/browser';\nimport {FC, useEffect, useRef} from 'react';\nimport useThunderID from '../../../contexts/ThunderID/useThunderID';\n\nexport interface TokenCallbackProps {\n  /**\n   * Callback function called when an error occurs\n   */\n  onError?: (error: Error) => void;\n\n  /**\n   * Function to navigate to a different path.\n   * If not provided, falls back to the browser navigate utility (SPA navigation via History API for same-origin paths).\n   * Provide this prop to enable framework-specific navigation (e.g., from React Router).\n   */\n  onNavigate?: (path: string) => void;\n\n  /**\n   * Callback function called when authentication is successful\n   */\n  onSuccess?: (authData: Record<string, any>) => void;\n\n  /**\n   * Custom path for the sign-in page. Defaults to '/signin'\n   */\n  signInPath?: string;\n\n  /**\n   * Custom path for the sign-up page. Defaults to '/signup'\n   */\n  signUpPath?: string;\n}\n\nexport const TokenCallback: FC<TokenCallbackProps> = ({\n  onNavigate,\n  onError,\n  onSuccess,\n  signInPath = '/signin',\n  signUpPath = '/signup',\n}: TokenCallbackProps) => {\n  const processingRef: any = useRef(false);\n  const {isInitialized, isLoading, signIn, signUp, getStorageManager, vendor} = useThunderID();\n\n  const navigate = (path: string): void => {\n    if (onNavigate) {\n      onNavigate(path);\n    } else {\n      browserNavigate(path);\n    }\n  };\n\n  const clearTokenFromUrl = (): void => {\n    if (!window?.location?.href) {\n      return;\n    }\n\n    const url: URL = new URL(window.location.href);\n    url.searchParams.delete('token');\n    url.searchParams.delete('type');\n    window.history.replaceState({}, '', url.toString());\n  };\n\n  const initiateOAuthRedirect = (redirectURL: string, isRegistrationFlow?: boolean): void => {\n    const redirectUrlObj: URL = new URL(redirectURL);\n    const state: string = redirectUrlObj.searchParams.get('state') || crypto.randomUUID();\n\n    sessionStorage.setItem(\n      `${vendor}_oauth_${state}`,\n      JSON.stringify({\n        path: isRegistrationFlow ? signUpPath : signInPath,\n        timestamp: Date.now(),\n      }),\n    );\n\n    browserNavigate(redirectUrlObj.toString());\n  };\n\n  const buildSignInPath = (\n    executionId?: string | null,\n    applicationId?: string | null,\n    isRegistrationFlow?: boolean,\n  ): string => {\n    const params: URLSearchParams = new URLSearchParams();\n    if (executionId) {\n      params.set('executionId', executionId);\n    }\n    if (applicationId) {\n      params.set('applicationId', applicationId);\n    }\n\n    const basePath = isRegistrationFlow ? signUpPath : signInPath;\n    return params.toString() ? `${basePath}?${params.toString()}` : basePath;\n  };\n\n  const redirectWithError = (error: Error, isRegistrationFlow?: boolean): void => {\n    sessionStorage.removeItem(`${vendor}_execution_id`);\n\n    onError?.(error);\n\n    const params: URLSearchParams = new URLSearchParams();\n    params.set('error', 'token_verification_failed');\n    params.set('error_description', error.message);\n    const basePath = isRegistrationFlow ? signUpPath : signInPath;\n    navigate(`${basePath}?${params.toString()}`);\n  };\n\n  useEffect(() => {\n    if (!isInitialized || isLoading) {\n      return;\n    }\n\n    const processTokenCallback = async (): Promise<void> => {\n      if (processingRef.current) {\n        return;\n      }\n      processingRef.current = true;\n\n      // Read URL params before clearing them so they're accessible in both try and catch.\n      const searchParams: URLSearchParams = new URLSearchParams(window.location.search);\n      const executionId: string | null = searchParams.get('id') || searchParams.get('executionId');\n      const token: string | null = searchParams.get('token');\n      const applicationId: string | null = searchParams.get('applicationId');\n      const isRegistrationFlow: boolean = searchParams.get('type') === 'REGISTRATION';\n\n      clearTokenFromUrl();\n\n      try {\n        const storageManager: any = await getStorageManager();\n\n        if (!executionId || !token) {\n          const error: Error = new Error('Missing executionId or token in callback URL');\n          redirectWithError(error, isRegistrationFlow);\n          return;\n        }\n\n        let response: any;\n\n        if (isRegistrationFlow) {\n          response = await signUp({executionId, inputs: {token}});\n        } else {\n          response = await signIn({executionId, inputs: {token}});\n        }\n\n        if (response.type === EmbeddedSignInFlowType.Redirection) {\n          const redirectURL: string | undefined = response.data?.redirectURL || response?.redirectURL;\n          const nextExecutionId: string = response.executionId || executionId;\n          sessionStorage.setItem(`${vendor}_execution_id`, nextExecutionId);\n\n          if (redirectURL) {\n            initiateOAuthRedirect(redirectURL, isRegistrationFlow);\n            return;\n          }\n        }\n\n        if (response.flowStatus === EmbeddedSignInFlowStatus.Complete) {\n          const redirectUrl: string | undefined = response?.redirectUrl || response?.redirect_uri;\n\n          sessionStorage.removeItem(`${vendor}_execution_id`);\n          await storageManager.removeHybridDataParameter('authId');\n\n          onSuccess?.({\n            redirectUrl,\n            ...((response.data as Record<string, any>) || {}),\n          });\n\n          if (redirectUrl) {\n            window.location.href = redirectUrl;\n            return;\n          }\n\n          navigate(isRegistrationFlow ? signUpPath : signInPath);\n          return;\n        }\n\n        if (response.flowStatus === EmbeddedSignInFlowStatus.Error) {\n          const failureReason: string | undefined = response?.failureReason;\n          const error: Error = new Error(failureReason || 'Token validation failed. Please try again.');\n          await storageManager.removeHybridDataParameter('authId');\n          redirectWithError(error, isRegistrationFlow);\n          return;\n        }\n\n        const nextExecutionId: string = response.executionId || executionId;\n        sessionStorage.setItem(`${vendor}_execution_id`, nextExecutionId);\n\n        if (response.challengeToken) {\n          await storageManager.setTemporaryDataParameter('challengeToken', response.challengeToken);\n        }\n\n        navigate(buildSignInPath(nextExecutionId, applicationId, isRegistrationFlow));\n      } catch (err) {\n        const error: Error = err instanceof Error ? err : new Error('Token callback processing failed');\n        // eslint-disable-next-line no-console\n        console.error('Token callback error:', err);\n        const storageManager: any = await getStorageManager();\n        if (storageManager) {\n          await storageManager.removeHybridDataParameter('authId');\n        }\n        redirectWithError(error, isRegistrationFlow);\n      }\n    };\n\n    processTokenCallback();\n  }, [\n    getStorageManager,\n    isInitialized,\n    isLoading,\n    onError,\n    onNavigate,\n    onSuccess,\n    signIn,\n    signUp,\n    signInPath,\n    signUpPath,\n    vendor,\n  ]);\n\n  return null;\n};\n\nexport default TokenCallback;\n"],"mappings":";;;;;;;;AAoCA,MAAaA,iBAAyC,EACpD,YACA,SACA,WACA,aAAa,WACb,aAAa,gBACW;CACxB,MAAMC,kCAA4B,MAAM;CACxC,MAAM,EAAC,eAAe,WAAW,QAAQ,QAAQ,mBAAmB,WAAUC,8BAAc;CAE5F,MAAM,YAAY,SAAuB;AACvC,MAAI,WACF,YAAW,KAAK;MAEhB,mCAAgB,KAAK;;CAIzB,MAAM,0BAAgC;AACpC,MAAI,CAAC,QAAQ,UAAU,KACrB;EAGF,MAAMC,MAAW,IAAI,IAAI,OAAO,SAAS,KAAK;AAC9C,MAAI,aAAa,OAAO,QAAQ;AAChC,MAAI,aAAa,OAAO,OAAO;AAC/B,SAAO,QAAQ,aAAa,EAAE,EAAE,IAAI,IAAI,UAAU,CAAC;;CAGrD,MAAM,yBAAyB,aAAqB,uBAAuC;EACzF,MAAMC,iBAAsB,IAAI,IAAI,YAAY;EAChD,MAAMC,QAAgB,eAAe,aAAa,IAAI,QAAQ,IAAI,OAAO,YAAY;AAErF,iBAAe,QACb,GAAG,OAAO,SAAS,SACnB,KAAK,UAAU;GACb,MAAM,qBAAqB,aAAa;GACxC,WAAW,KAAK,KAAK;GACtB,CAAC,CACH;AAED,oCAAgB,eAAe,UAAU,CAAC;;CAG5C,MAAM,mBACJ,aACA,eACA,uBACW;EACX,MAAMC,SAA0B,IAAI,iBAAiB;AACrD,MAAI,YACF,QAAO,IAAI,eAAe,YAAY;AAExC,MAAI,cACF,QAAO,IAAI,iBAAiB,cAAc;EAG5C,MAAM,WAAW,qBAAqB,aAAa;AACnD,SAAO,OAAO,UAAU,GAAG,GAAG,SAAS,GAAG,OAAO,UAAU,KAAK;;CAGlE,MAAM,qBAAqB,OAAc,uBAAuC;AAC9E,iBAAe,WAAW,GAAG,OAAO,eAAe;AAEnD,YAAU,MAAM;EAEhB,MAAMA,SAA0B,IAAI,iBAAiB;AACrD,SAAO,IAAI,SAAS,4BAA4B;AAChD,SAAO,IAAI,qBAAqB,MAAM,QAAQ;AAE9C,WAAS,GADQ,qBAAqB,aAAa,WAC9B,GAAG,OAAO,UAAU,GAAG;;AAG9C,4BAAgB;AACd,MAAI,CAAC,iBAAiB,UACpB;EAGF,MAAM,uBAAuB,YAA2B;AACtD,OAAI,cAAc,QAChB;AAEF,iBAAc,UAAU;GAGxB,MAAMC,eAAgC,IAAI,gBAAgB,OAAO,SAAS,OAAO;GACjF,MAAMC,cAA6B,aAAa,IAAI,KAAK,IAAI,aAAa,IAAI,cAAc;GAC5F,MAAMC,QAAuB,aAAa,IAAI,QAAQ;GACtD,MAAMC,gBAA+B,aAAa,IAAI,gBAAgB;GACtE,MAAMC,qBAA8B,aAAa,IAAI,OAAO,KAAK;AAEjE,sBAAmB;AAEnB,OAAI;IACF,MAAMC,iBAAsB,MAAM,mBAAmB;AAErD,QAAI,CAAC,eAAe,CAAC,OAAO;AAE1B,uCADqB,IAAI,MAAM,+CAA+C,EACrD,mBAAmB;AAC5C;;IAGF,IAAIC;AAEJ,QAAI,mBACF,YAAW,MAAM,OAAO;KAAC;KAAa,QAAQ,EAAC,OAAM;KAAC,CAAC;QAEvD,YAAW,MAAM,OAAO;KAAC;KAAa,QAAQ,EAAC,OAAM;KAAC,CAAC;AAGzD,QAAI,SAAS,SAASC,2CAAuB,aAAa;KACxD,MAAMC,cAAkC,SAAS,MAAM,eAAe,UAAU;KAChF,MAAMC,oBAA0B,SAAS,eAAe;AACxD,oBAAe,QAAQ,GAAG,OAAO,gBAAgBC,kBAAgB;AAEjE,SAAI,aAAa;AACf,4BAAsB,aAAa,mBAAmB;AACtD;;;AAIJ,QAAI,SAAS,eAAeC,6CAAyB,UAAU;KAC7D,MAAMC,cAAkC,UAAU,eAAe,UAAU;AAE3E,oBAAe,WAAW,GAAG,OAAO,eAAe;AACnD,WAAM,eAAe,0BAA0B,SAAS;AAExD,iBAAY;MACV;MACA,GAAK,SAAS,QAAgC,EAAE;MACjD,CAAC;AAEF,SAAI,aAAa;AACf,aAAO,SAAS,OAAO;AACvB;;AAGF,cAAS,qBAAqB,aAAa,WAAW;AACtD;;AAGF,QAAI,SAAS,eAAeD,6CAAyB,OAAO;KAC1D,MAAME,gBAAoC,UAAU;KACpD,MAAMC,QAAe,IAAI,MAAM,iBAAiB,6CAA6C;AAC7F,WAAM,eAAe,0BAA0B,SAAS;AACxD,uBAAkB,OAAO,mBAAmB;AAC5C;;IAGF,MAAML,kBAA0B,SAAS,eAAe;AACxD,mBAAe,QAAQ,GAAG,OAAO,gBAAgB,gBAAgB;AAEjE,QAAI,SAAS,eACX,OAAM,eAAe,0BAA0B,kBAAkB,SAAS,eAAe;AAG3F,aAAS,gBAAgB,iBAAiB,eAAe,mBAAmB,CAAC;YACtE,KAAK;IACZ,MAAMK,QAAe,eAAe,QAAQ,sBAAM,IAAI,MAAM,mCAAmC;AAE/F,YAAQ,MAAM,yBAAyB,IAAI;IAC3C,MAAMT,iBAAsB,MAAM,mBAAmB;AACrD,QAAI,eACF,OAAM,eAAe,0BAA0B,SAAS;AAE1D,sBAAkB,OAAO,mBAAmB;;;AAIhD,wBAAsB;IACrB;EACD;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACD,CAAC;AAEF,QAAO"}
+{"version":3,"file":"TokenCallback.cjs","names":["TokenCallback: FC<TokenCallbackProps>","processingRef: any","useThunderID","url: URL","redirectUrlObj: URL","state: string","params: URLSearchParams","searchParams: URLSearchParams","executionId: string | null","token: string | null","applicationId: string | null","isRegistrationFlow: boolean","storageManager: any","response: any","EmbeddedSignInFlowType","redirectURL: string | undefined","nextExecutionId: string","nextExecutionId","EmbeddedSignInFlowStatus","redirectUrl: string | undefined","failureReason: string | undefined","error: Error"],"sources":["../../../../../src/components/auth/Callback/TokenCallback.tsx"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\nimport {EmbeddedSignInFlowStatus, EmbeddedSignInFlowType, navigate as browserNavigate} from '@thunderid/browser';\nimport {FC, useEffect, useRef} from 'react';\nimport useThunderID from '../../../contexts/ThunderID/useThunderID';\n\nexport interface TokenCallbackProps {\n  /**\n   * Callback function called when an error occurs\n   */\n  onError?: (error: Error) => void;\n\n  /**\n   * Function to navigate to a different path.\n   * If not provided, falls back to the browser navigate utility (SPA navigation via History API for same-origin paths).\n   * Provide this prop to enable framework-specific navigation (e.g., from React Router).\n   */\n  onNavigate?: (path: string) => void;\n\n  /**\n   * Callback function called when authentication is successful\n   */\n  onSuccess?: (authData: Record<string, any>) => void;\n\n  /**\n   * Custom path for the sign-in page. Defaults to '/signin'\n   */\n  signInPath?: string;\n\n  /**\n   * Custom path for the sign-up page. Defaults to '/signup'\n   */\n  signUpPath?: string;\n}\n\nexport const TokenCallback: FC<TokenCallbackProps> = ({\n  onNavigate,\n  onError,\n  onSuccess,\n  signInPath = '/signin',\n  signUpPath = '/signup',\n}: TokenCallbackProps) => {\n  const processingRef: any = useRef(false);\n  const {isInitialized, isLoading, signIn, signUp, getStorageManager, vendor} = useThunderID();\n\n  const navigate = (path: string): void => {\n    if (onNavigate) {\n      onNavigate(path);\n    } else {\n      browserNavigate(path);\n    }\n  };\n\n  const clearTokenFromUrl = (): void => {\n    if (!window?.location?.href) {\n      return;\n    }\n\n    const url: URL = new URL(window.location.href);\n    url.searchParams.delete('token');\n    url.searchParams.delete('type');\n    window.history.replaceState({}, '', url.toString());\n  };\n\n  const initiateOAuthRedirect = (redirectURL: string, isRegistrationFlow?: boolean): void => {\n    const redirectUrlObj: URL = new URL(redirectURL);\n    const state: string = redirectUrlObj.searchParams.get('state') || crypto.randomUUID();\n\n    sessionStorage.setItem(\n      `${vendor}_oauth_${state}`,\n      JSON.stringify({\n        path: isRegistrationFlow ? signUpPath : signInPath,\n        timestamp: Date.now(),\n      }),\n    );\n\n    browserNavigate(redirectUrlObj.toString());\n  };\n\n  const buildSignInPath = (\n    executionId?: string | null,\n    applicationId?: string | null,\n    isRegistrationFlow?: boolean,\n  ): string => {\n    const params: URLSearchParams = new URLSearchParams();\n    if (executionId) {\n      params.set('executionId', executionId);\n    }\n    if (applicationId) {\n      params.set('applicationId', applicationId);\n    }\n\n    const basePath = isRegistrationFlow ? signUpPath : signInPath;\n    return params.toString() ? `${basePath}?${params.toString()}` : basePath;\n  };\n\n  const redirectWithError = (error: Error, isRegistrationFlow?: boolean): void => {\n    sessionStorage.removeItem(`${vendor}_execution_id`);\n\n    onError?.(error);\n\n    const params: URLSearchParams = new URLSearchParams();\n    params.set('error', 'token_verification_failed');\n    params.set('error_description', error.message);\n    const basePath = isRegistrationFlow ? signUpPath : signInPath;\n    navigate(`${basePath}?${params.toString()}`);\n  };\n\n  useEffect(() => {\n    if (!isInitialized || isLoading) {\n      return;\n    }\n\n    const processTokenCallback = async (): Promise<void> => {\n      if (processingRef.current) {\n        return;\n      }\n      processingRef.current = true;\n\n      // Read URL params before clearing them so they're accessible in both try and catch.\n      const searchParams: URLSearchParams = new URLSearchParams(window.location.search);\n      const executionId: string | null = searchParams.get('id') || searchParams.get('executionId');\n      const token: string | null = searchParams.get('token');\n      const applicationId: string | null = searchParams.get('applicationId');\n      const isRegistrationFlow: boolean = searchParams.get('type') === 'REGISTRATION';\n\n      clearTokenFromUrl();\n\n      try {\n        const storageManager: any = await getStorageManager();\n\n        if (!executionId || !token) {\n          const error: Error = new Error('Missing executionId or token in callback URL');\n          redirectWithError(error, isRegistrationFlow);\n          return;\n        }\n\n        let response: any;\n\n        if (isRegistrationFlow) {\n          response = await signUp({executionId, inputs: {token}});\n        } else {\n          response = await signIn({executionId, inputs: {token}});\n        }\n\n        if (response.type === EmbeddedSignInFlowType.Redirection) {\n          const redirectURL: string | undefined = response.data?.redirectURL || response?.redirectURL;\n          const nextExecutionId: string = response.executionId || executionId;\n          sessionStorage.setItem(`${vendor}_execution_id`, nextExecutionId);\n\n          if (redirectURL) {\n            initiateOAuthRedirect(redirectURL, isRegistrationFlow);\n            return;\n          }\n        }\n\n        if (response.flowStatus === EmbeddedSignInFlowStatus.Complete) {\n          const redirectUrl: string | undefined = response?.redirectUrl || response?.redirect_uri;\n\n          sessionStorage.removeItem(`${vendor}_execution_id`);\n          await storageManager.removeFlowAuthId(executionId);\n\n          onSuccess?.({\n            redirectUrl,\n            ...((response.data as Record<string, any>) || {}),\n          });\n\n          if (redirectUrl) {\n            window.location.href = redirectUrl;\n            return;\n          }\n\n          navigate(isRegistrationFlow ? signUpPath : signInPath);\n          return;\n        }\n\n        if (response.flowStatus === EmbeddedSignInFlowStatus.Error) {\n          const failureReason: string | undefined = response?.failureReason;\n          const error: Error = new Error(failureReason || 'Token validation failed. Please try again.');\n          await storageManager.removeFlowAuthId(executionId);\n          redirectWithError(error, isRegistrationFlow);\n          return;\n        }\n\n        const nextExecutionId: string = response.executionId || executionId;\n        sessionStorage.setItem(`${vendor}_execution_id`, nextExecutionId);\n\n        if (response.challengeToken) {\n          await storageManager.setTemporaryDataParameter('challengeToken', response.challengeToken);\n        }\n\n        navigate(buildSignInPath(nextExecutionId, applicationId, isRegistrationFlow));\n      } catch (err) {\n        const error: Error = err instanceof Error ? err : new Error('Token callback processing failed');\n        // eslint-disable-next-line no-console\n        console.error('Token callback error:', err);\n        const storageManager: any = await getStorageManager();\n        if (storageManager && executionId) {\n          await storageManager.removeFlowAuthId(executionId);\n        }\n        redirectWithError(error, isRegistrationFlow);\n      }\n    };\n\n    processTokenCallback();\n  }, [\n    getStorageManager,\n    isInitialized,\n    isLoading,\n    onError,\n    onNavigate,\n    onSuccess,\n    signIn,\n    signUp,\n    signInPath,\n    signUpPath,\n    vendor,\n  ]);\n\n  return null;\n};\n\nexport default TokenCallback;\n"],"mappings":";;;;;;;;AAoCA,MAAaA,iBAAyC,EACpD,YACA,SACA,WACA,aAAa,WACb,aAAa,gBACW;CACxB,MAAMC,kCAA4B,MAAM;CACxC,MAAM,EAAC,eAAe,WAAW,QAAQ,QAAQ,mBAAmB,WAAUC,8BAAc;CAE5F,MAAM,YAAY,SAAuB;AACvC,MAAI,WACF,YAAW,KAAK;MAEhB,mCAAgB,KAAK;;CAIzB,MAAM,0BAAgC;AACpC,MAAI,CAAC,QAAQ,UAAU,KACrB;EAGF,MAAMC,MAAW,IAAI,IAAI,OAAO,SAAS,KAAK;AAC9C,MAAI,aAAa,OAAO,QAAQ;AAChC,MAAI,aAAa,OAAO,OAAO;AAC/B,SAAO,QAAQ,aAAa,EAAE,EAAE,IAAI,IAAI,UAAU,CAAC;;CAGrD,MAAM,yBAAyB,aAAqB,uBAAuC;EACzF,MAAMC,iBAAsB,IAAI,IAAI,YAAY;EAChD,MAAMC,QAAgB,eAAe,aAAa,IAAI,QAAQ,IAAI,OAAO,YAAY;AAErF,iBAAe,QACb,GAAG,OAAO,SAAS,SACnB,KAAK,UAAU;GACb,MAAM,qBAAqB,aAAa;GACxC,WAAW,KAAK,KAAK;GACtB,CAAC,CACH;AAED,oCAAgB,eAAe,UAAU,CAAC;;CAG5C,MAAM,mBACJ,aACA,eACA,uBACW;EACX,MAAMC,SAA0B,IAAI,iBAAiB;AACrD,MAAI,YACF,QAAO,IAAI,eAAe,YAAY;AAExC,MAAI,cACF,QAAO,IAAI,iBAAiB,cAAc;EAG5C,MAAM,WAAW,qBAAqB,aAAa;AACnD,SAAO,OAAO,UAAU,GAAG,GAAG,SAAS,GAAG,OAAO,UAAU,KAAK;;CAGlE,MAAM,qBAAqB,OAAc,uBAAuC;AAC9E,iBAAe,WAAW,GAAG,OAAO,eAAe;AAEnD,YAAU,MAAM;EAEhB,MAAMA,SAA0B,IAAI,iBAAiB;AACrD,SAAO,IAAI,SAAS,4BAA4B;AAChD,SAAO,IAAI,qBAAqB,MAAM,QAAQ;AAE9C,WAAS,GADQ,qBAAqB,aAAa,WAC9B,GAAG,OAAO,UAAU,GAAG;;AAG9C,4BAAgB;AACd,MAAI,CAAC,iBAAiB,UACpB;EAGF,MAAM,uBAAuB,YAA2B;AACtD,OAAI,cAAc,QAChB;AAEF,iBAAc,UAAU;GAGxB,MAAMC,eAAgC,IAAI,gBAAgB,OAAO,SAAS,OAAO;GACjF,MAAMC,cAA6B,aAAa,IAAI,KAAK,IAAI,aAAa,IAAI,cAAc;GAC5F,MAAMC,QAAuB,aAAa,IAAI,QAAQ;GACtD,MAAMC,gBAA+B,aAAa,IAAI,gBAAgB;GACtE,MAAMC,qBAA8B,aAAa,IAAI,OAAO,KAAK;AAEjE,sBAAmB;AAEnB,OAAI;IACF,MAAMC,iBAAsB,MAAM,mBAAmB;AAErD,QAAI,CAAC,eAAe,CAAC,OAAO;AAE1B,uCADqB,IAAI,MAAM,+CAA+C,EACrD,mBAAmB;AAC5C;;IAGF,IAAIC;AAEJ,QAAI,mBACF,YAAW,MAAM,OAAO;KAAC;KAAa,QAAQ,EAAC,OAAM;KAAC,CAAC;QAEvD,YAAW,MAAM,OAAO;KAAC;KAAa,QAAQ,EAAC,OAAM;KAAC,CAAC;AAGzD,QAAI,SAAS,SAASC,2CAAuB,aAAa;KACxD,MAAMC,cAAkC,SAAS,MAAM,eAAe,UAAU;KAChF,MAAMC,oBAA0B,SAAS,eAAe;AACxD,oBAAe,QAAQ,GAAG,OAAO,gBAAgBC,kBAAgB;AAEjE,SAAI,aAAa;AACf,4BAAsB,aAAa,mBAAmB;AACtD;;;AAIJ,QAAI,SAAS,eAAeC,6CAAyB,UAAU;KAC7D,MAAMC,cAAkC,UAAU,eAAe,UAAU;AAE3E,oBAAe,WAAW,GAAG,OAAO,eAAe;AACnD,WAAM,eAAe,iBAAiB,YAAY;AAElD,iBAAY;MACV;MACA,GAAK,SAAS,QAAgC,EAAE;MACjD,CAAC;AAEF,SAAI,aAAa;AACf,aAAO,SAAS,OAAO;AACvB;;AAGF,cAAS,qBAAqB,aAAa,WAAW;AACtD;;AAGF,QAAI,SAAS,eAAeD,6CAAyB,OAAO;KAC1D,MAAME,gBAAoC,UAAU;KACpD,MAAMC,QAAe,IAAI,MAAM,iBAAiB,6CAA6C;AAC7F,WAAM,eAAe,iBAAiB,YAAY;AAClD,uBAAkB,OAAO,mBAAmB;AAC5C;;IAGF,MAAML,kBAA0B,SAAS,eAAe;AACxD,mBAAe,QAAQ,GAAG,OAAO,gBAAgB,gBAAgB;AAEjE,QAAI,SAAS,eACX,OAAM,eAAe,0BAA0B,kBAAkB,SAAS,eAAe;AAG3F,aAAS,gBAAgB,iBAAiB,eAAe,mBAAmB,CAAC;YACtE,KAAK;IACZ,MAAMK,QAAe,eAAe,QAAQ,sBAAM,IAAI,MAAM,mCAAmC;AAE/F,YAAQ,MAAM,yBAAyB,IAAI;IAC3C,MAAMT,iBAAsB,MAAM,mBAAmB;AACrD,QAAI,kBAAkB,YACpB,OAAM,eAAe,iBAAiB,YAAY;AAEpD,sBAAkB,OAAO,mBAAmB;;;AAIhD,wBAAsB;IACrB;EACD;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACD,CAAC;AAEF,QAAO"}