@thunderid/react 1.3.2 → 1.4.0

package/dist/ThunderIDReactClient.d.ts

@@ -6,6 +6,15 @@ declare class ThunderIDReactClient<T extends ThunderIDReactConfig = ThunderIDRea
     constructor(instanceId?: number);
     private setLoading;
     private withLoading;
+    /**
+     * Returns the stored config, re-running initialization first when it has gone missing.
+     *
+     * NOTE: With React 19 strict mode, the initialization logic runs twice, and there's an intermittent
+     * issue where the config object is not getting stored in the storage layer with Vite scaffolding.
+     * An operation that resolves endpoints from a lost config fails (for example "required endpoints
+     * are missing"), so recover it from the config this client was initialized with.
+     */
+    private ensureConfigData;
     initialize(config: ThunderIDReactConfig): Promise<boolean>;
     reInitialize(config: Partial<ThunderIDReactConfig>): Promise<boolean>;
     updateUserProfile(): Promise<User>;

package/dist/ThunderIDReactClient.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ThunderIDReactClient.d.ts","sourceRoot":"","sources":["../src/ThunderIDReactClient.ts"],"names":[],"mappings":"AAGA,OAAO,EACL,sBAAsB,EACtB,WAAW,EACX,aAAa,EACb,IAAI,EACJ,aAAa,EAGb,OAAO,EAEP,aAAa,EACb,iBAAiB,EACjB,YAAY,EACZ,0BAA0B,EAE1B,0BAA0B,EAM3B,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAC,oBAAoB,EAAC,MAAM,iBAAiB,CAAC;AAErD,cAAM,oBAAoB,CAAC,CAAC,SAAS,oBAAoB,GAAG,oBAAoB,CAAE,SAAQ,sBAAsB,CAAC,CAAC,CAAC;IACjH,OAAO,CAAC,YAAY,CAAS;IAE7B,OAAO,CAAC,iBAAiB,CAAmC;gBAEhD,UAAU,SAAI;IAI1B,OAAO,CAAC,UAAU;YAIJ,WAAW;IAUhB,UAAU,CAAC,MAAM,EAAE,oBAAoB,GAAG,OAAO,CAAC,OAAO,CAAC;IAY1D,YAAY,CAAC,MAAM,EAAE,OAAO,CAAC,oBAAoB,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC;IAoB/D,iBAAiB,IAAI,OAAO,CAAC,IAAI,CAAC;IAIlC,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;IAIxB,iBAAiB,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAIvD,UAAU,IAAI,OAAO,CAAC,MAAM,CAAC;IAI7B,cAAc,IAAI,OAAO,CAAC,WAAW,CAAC;IAW5C,SAAS,IAAI,OAAO;IAId,UAAU,IAAI,OAAO,CAAC,OAAO,CAAC;IAI9B,aAAa,CAAC,MAAM,EAAE,0BAA0B,GAAG,OAAO,CAAC,aAAa,GAAG,QAAQ,CAAC;IAIpF,MAAM,CAAC,GAAG,IAAI,EAAE,GAAG,EAAE,GAAG,OAAO,CAAC,IAAI,GAAG,0BAA0B,CAAC;IAmFlE,cAAc,CAAC,OAAO,CAAC,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,GAAG,OAAO,CAAC;IAIhE,MAAM,CAAC,OAAO,CAAC,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC;IAC9C,MAAM,CAAC,OAAO,EAAE,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC;IAoDlC,OAAO,CAAC,OAAO,CAAC,EAAE,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC;IAUnC,iBAAiB,IAAI,GAAG;IAIlC,OAAO,CAAC,aAAa,CAAC,EAAE,iBAAiB,GAAG,OAAO,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;IAItE,UAAU,CAAC,cAAc,CAAC,EAAE,iBAAiB,EAAE,GAAG,OAAO,CAAC,YAAY,CAAC,GAAG,CAAC,EAAE,CAAC;CAGrF;AAED,eAAe,oBAAoB,CAAC"}
+{"version":3,"file":"ThunderIDReactClient.d.ts","sourceRoot":"","sources":["../src/ThunderIDReactClient.ts"],"names":[],"mappings":"AAGA,OAAO,EACL,sBAAsB,EACtB,WAAW,EACX,aAAa,EACb,IAAI,EACJ,aAAa,EAGb,OAAO,EAEP,aAAa,EACb,iBAAiB,EACjB,YAAY,EACZ,0BAA0B,EAE1B,0BAA0B,EAM3B,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAC,oBAAoB,EAAC,MAAM,iBAAiB,CAAC;AAErD,cAAM,oBAAoB,CAAC,CAAC,SAAS,oBAAoB,GAAG,oBAAoB,CAAE,SAAQ,sBAAsB,CAAC,CAAC,CAAC;IACjH,OAAO,CAAC,YAAY,CAAS;IAE7B,OAAO,CAAC,iBAAiB,CAAmC;gBAEhD,UAAU,SAAI;IAI1B,OAAO,CAAC,UAAU;YAIJ,WAAW;IAUzB;;;;;;;OAOG;YACW,gBAAgB;IAkBrB,UAAU,CAAC,MAAM,EAAE,oBAAoB,GAAG,OAAO,CAAC,OAAO,CAAC;IAY1D,YAAY,CAAC,MAAM,EAAE,OAAO,CAAC,oBAAoB,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC;IAoB/D,iBAAiB,IAAI,OAAO,CAAC,IAAI,CAAC;IAIlC,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;IAIxB,iBAAiB,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAIvD,UAAU,IAAI,OAAO,CAAC,MAAM,CAAC;IAI7B,cAAc,IAAI,OAAO,CAAC,WAAW,CAAC;IAW5C,SAAS,IAAI,OAAO;IAId,UAAU,IAAI,OAAO,CAAC,OAAO,CAAC;IAI9B,aAAa,CAAC,MAAM,EAAE,0BAA0B,GAAG,OAAO,CAAC,aAAa,GAAG,QAAQ,CAAC;IAIpF,MAAM,CAAC,GAAG,IAAI,EAAE,GAAG,EAAE,GAAG,OAAO,CAAC,IAAI,GAAG,0BAA0B,CAAC;IAuElE,cAAc,CAAC,OAAO,CAAC,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,GAAG,OAAO,CAAC;IAMhE,MAAM,CAAC,OAAO,CAAC,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC;IAC9C,MAAM,CAAC,OAAO,EAAE,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC;IAoDlC,OAAO,CAAC,OAAO,CAAC,EAAE,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC;IAUnC,iBAAiB,IAAI,GAAG;IAIlC,OAAO,CAAC,aAAa,CAAC,EAAE,iBAAiB,GAAG,OAAO,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;IAItE,UAAU,CAAC,cAAc,CAAC,EAAE,iBAAiB,EAAE,GAAG,OAAO,CAAC,YAAY,CAAC,GAAG,CAAC,EAAE,CAAC;CAGrF;AAED,eAAe,oBAAoB,CAAC"}

package/dist/ThunderIDReactClient.js

@@ -18,6 +18,20 @@ var ThunderIDReactClient = class extends ThunderIDBrowserClient {
 			this.setLoading(false);
 		}
 	}
+	/**
+	* Returns the stored config, re-running initialization first when it has gone missing.
+	*
+	* NOTE: With React 19 strict mode, the initialization logic runs twice, and there's an intermittent
+	* issue where the config object is not getting stored in the storage layer with Vite scaffolding.
+	* An operation that resolves endpoints from a lost config fails (for example "required endpoints
+	* are missing"), so recover it from the config this client was initialized with.
+	*/
+	async ensureConfigData() {
+		const config = await this.getStorageManager().getConfigData();
+		if (!(!config || Object.keys(config).length === 0 || Boolean(this._initializeConfig?.baseUrl) && !config.baseUrl) || !this._initializeConfig) return config;
+		await this.initialize(this._initializeConfig);
+		return await this.getStorageManager().getConfigData();
+	}
 	initialize(config) {
 		return this.withLoading(async () => {
 			this._initializeConfig = {
@@ -74,11 +88,7 @@ var ThunderIDReactClient = class extends ThunderIDBrowserClient {
 		return this.withLoading(async () => {
 			const arg1 = args[0];
 			const arg2 = args[1];
-			let config = await this.getStorageManager().getConfigData();
-			if (!config || Object.keys(config).length === 0) {
-				await this.initialize(this._initializeConfig);
-				config = await this.getStorageManager().getConfigData();
-			}
+			const config = await this.ensureConfigData();
 			if (typeof arg1 === "object" && arg1 !== null && arg1.callOnlyOnRedirect === true) return;
 			if (typeof arg1 === "object" && arg1 !== null && !isEmpty(arg1) && ("executionId" in arg1 || "applicationId" in arg1)) {
 				const authIdFromUrl = new URL(window.location.href).searchParams.get("authId") ?? "";
@@ -109,6 +119,7 @@ var ThunderIDReactClient = class extends ThunderIDBrowserClient {
 		});
 	}
 	async signInSilently(options) {
+		await this.ensureConfigData();
 		return super.signInSilently(options);
 	}
 	async signUp(...args) {

package/dist/ThunderIDReactClient.js.map

@@ -1 +1 @@
-{"version":3,"file":"ThunderIDReactClient.js","names":["isInitialized: boolean","claims: User","arg1: any","arg2: any","config: ThunderIDReactConfig | undefined","authIdFromUrl: string","authIdFromStorage: string","response: EmbeddedSignInFlowResponse","decodedAssertion: {\n            [key: string]: unknown;\n            exp?: number;\n            iat?: number;\n            scope?: string;\n          }","createdAt: number","expiresIn: number","config: ThunderIDReactConfig","firstArg: any","baseUrl: string","response: any","decodedAssertion: {\n        [key: string]: unknown;\n        exp?: number;\n        iat?: number;\n        scope?: string;\n      }"],"sources":["../src/ThunderIDReactClient.ts"],"sourcesContent":["// Copyright 2025-2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\nimport {\n  ThunderIDBrowserClient,\n  UserProfile,\n  SignInOptions,\n  User,\n  SignUpOptions,\n  ThunderIDRuntimeError,\n  executeEmbeddedSignInFlow,\n  IdToken,\n  extractUserClaimsFromIdToken,\n  TokenResponse,\n  HttpRequestConfig,\n  HttpResponse,\n  TokenExchangeRequestConfig,\n  isEmpty,\n  EmbeddedSignInFlowResponse,\n  executeEmbeddedSignUpFlow,\n  executeEmbeddedRecoveryFlow,\n  EmbeddedSignInFlowStatus,\n  EmbeddedSignUpFlowStatus,\n  resolveResourceEndpoint,\n} from '@thunderid/browser';\nimport {ThunderIDReactConfig} from './models/config';\n\nclass ThunderIDReactClient<T extends ThunderIDReactConfig = ThunderIDReactConfig> extends ThunderIDBrowserClient<T> {\n  private loadingState = false;\n\n  private _initializeConfig: ThunderIDReactConfig | undefined;\n\n  constructor(instanceId = 0) {\n    super(instanceId);\n  }\n\n  private setLoading(loading: boolean): void {\n    this.loadingState = loading;\n  }\n\n  private async withLoading<TResult>(operation: () => Promise<TResult>): Promise<TResult> {\n    this.setLoading(true);\n    try {\n      const result: TResult = await operation();\n      return result;\n    } finally {\n      this.setLoading(false);\n    }\n  }\n\n  override initialize(config: ThunderIDReactConfig): Promise<boolean> {\n    return this.withLoading(async () => {\n      this._initializeConfig = {\n        ...config,\n        periodicTokenRefresh:\n          config?.tokenLifecycle?.refreshToken?.autoRefresh ?? (config as any)?.periodicTokenRefresh,\n      } as any;\n\n      return super.initialize(this._initializeConfig as unknown as T);\n    });\n  }\n\n  override reInitialize(config: Partial<ThunderIDReactConfig>): Promise<boolean> {\n    return this.withLoading(async () => {\n      let isInitialized: boolean;\n\n      try {\n        await super.reInitialize(config as Partial<T>);\n        isInitialized = true;\n      } catch (error) {\n        throw new ThunderIDRuntimeError(\n          `Failed to check if the client is initialized: ${error instanceof Error ? error.message : String(error)}`,\n          'ThunderIDReactClient-reInitialize-RuntimeError-001',\n          'react',\n          'An error occurred while checking the initialization status of the client.',\n        );\n      }\n\n      return isInitialized;\n    });\n  }\n\n  override async updateUserProfile(): Promise<User> {\n    throw new Error('Not implemented');\n  }\n\n  override async getUser(): Promise<User> {\n    return extractUserClaimsFromIdToken(await this.getDecodedIdToken());\n  }\n\n  override async getDecodedIdToken(sessionId?: string): Promise<IdToken> {\n    return super.getDecodedIdToken(sessionId);\n  }\n\n  override async getIdToken(): Promise<string> {\n    return this.withLoading(async () => super.getIdToken());\n  }\n\n  override async getUserProfile(): Promise<UserProfile> {\n    return this.withLoading(async () => {\n      const claims: User = extractUserClaimsFromIdToken(await this.getDecodedIdToken());\n      return {\n        flattenedProfile: claims,\n        profile: claims,\n        schemas: [],\n      };\n    });\n  }\n\n  override isLoading(): boolean {\n    return this.loadingState;\n  }\n\n  override async isSignedIn(): Promise<boolean> {\n    return super.isSignedIn();\n  }\n\n  override async exchangeToken(config: TokenExchangeRequestConfig): Promise<TokenResponse | Response> {\n    return this.withLoading(async () => super.exchangeToken(config) as unknown as TokenResponse | Response);\n  }\n\n  override async signIn(...args: any[]): Promise<User | EmbeddedSignInFlowResponse> {\n    return this.withLoading(async () => {\n      const arg1: any = args[0];\n      const arg2: any = args[1];\n\n      let config: ThunderIDReactConfig | undefined = (await this.getStorageManager().getConfigData()) as\n        | ThunderIDReactConfig\n        | undefined;\n\n      // NOTE: With React 19 strict mode, the initialization logic runs twice, and there's an intermittent\n      // issue where the config object is not getting stored in the storage layer with Vite scaffolding.\n      // Hence, we need to check if the client is initialized but the config object is empty, and reinitialize.\n      if (!config || Object.keys(config).length === 0) {\n        await this.initialize(this._initializeConfig!);\n        // Reload the config persisted by initialization so downstream endpoint resolution\n        // (baseUrl and the flowExecute override) uses the recovered values, not the stale empty config.\n        config = (await this.getStorageManager().getConfigData()) as ThunderIDReactConfig | undefined;\n      }\n\n      if (typeof arg1 === 'object' && arg1 !== null && arg1.callOnlyOnRedirect === true) {\n        return undefined as any;\n      }\n\n      if (\n        typeof arg1 === 'object' &&\n        arg1 !== null &&\n        !isEmpty(arg1) &&\n        ('executionId' in arg1 || 'applicationId' in arg1)\n      ) {\n        const authIdFromUrl: string = new URL(window.location.href).searchParams.get('authId') ?? '';\n        const authIdFromStorage: string =\n          ((await this.getStorageManager().getHybridDataParameter('authId')) as string) ?? '';\n        const authId: string = authIdFromUrl || authIdFromStorage;\n        const baseUrl: string = config?.baseUrl ?? '';\n\n        const response: EmbeddedSignInFlowResponse = await executeEmbeddedSignInFlow({\n          authId,\n          baseUrl,\n          payload: arg1,\n          url: resolveResourceEndpoint('flowExecute', config, arg2?.url),\n        });\n\n        if (\n          response &&\n          typeof response === 'object' &&\n          response.flowStatus === EmbeddedSignInFlowStatus.Complete &&\n          response.assertion\n        ) {\n          const decodedAssertion: {\n            [key: string]: unknown;\n            exp?: number;\n            iat?: number;\n            scope?: string;\n          } = await this.decodeJwtToken<{\n            [key: string]: unknown;\n            exp?: number;\n            iat?: number;\n            scope?: string;\n          }>(response.assertion);\n\n          const createdAt: number = decodedAssertion.iat ? decodedAssertion.iat * 1000 : Date.now();\n          const expiresIn: number =\n            decodedAssertion.exp && decodedAssertion.iat ? decodedAssertion.exp - decodedAssertion.iat : 3600;\n\n          await this.setSession({\n            access_token: response.assertion,\n            created_at: createdAt,\n            expires_in: expiresIn,\n            id_token: response.assertion,\n            scope: decodedAssertion.scope,\n            token_type: 'Bearer',\n          });\n\n          this.notifySignIn(extractUserClaimsFromIdToken(decodedAssertion as IdToken) as User);\n        }\n\n        return response;\n      }\n\n      return (await super.signIn(...args)) as unknown as User;\n    });\n  }\n\n  override async signInSilently(options?: SignInOptions): Promise<User | boolean> {\n    return super.signInSilently(options as Record<string, string | boolean>) as Promise<User | boolean>;\n  }\n\n  override async signUp(options?: SignUpOptions): Promise<void>;\n  override async signUp(payload: any): Promise<any>;\n  override async signUp(...args: any[]): Promise<void | any> {\n    const config: ThunderIDReactConfig = (await this.getStorageManager().getConfigData()) as ThunderIDReactConfig;\n    const firstArg: any = args[0];\n    const baseUrl: string = config?.baseUrl ?? '';\n\n    const authId: string = new URL(window.location.href).searchParams.get('authId') ?? '';\n\n    const response: any = await executeEmbeddedSignUpFlow({\n      authId,\n      baseUrl,\n      payload: typeof firstArg === 'object' && 'flowType' in firstArg ? {...firstArg, verbose: true} : firstArg,\n      url: resolveResourceEndpoint('flowExecute', config),\n    });\n\n    if (\n      response &&\n      typeof response === 'object' &&\n      response.flowStatus === EmbeddedSignUpFlowStatus.Complete &&\n      response.assertion\n    ) {\n      const decodedAssertion: {\n        [key: string]: unknown;\n        exp?: number;\n        iat?: number;\n        scope?: string;\n      } = await this.decodeJwtToken<{\n        [key: string]: unknown;\n        exp?: number;\n        iat?: number;\n        scope?: string;\n      }>(response.assertion);\n\n      const createdAt: number = decodedAssertion.iat ? decodedAssertion.iat * 1000 : Date.now();\n      const expiresIn: number =\n        decodedAssertion.exp && decodedAssertion.iat ? decodedAssertion.exp - decodedAssertion.iat : 3600;\n\n      await this.setSession({\n        access_token: response.assertion,\n        created_at: createdAt,\n        expires_in: expiresIn,\n        id_token: response.assertion,\n        scope: decodedAssertion.scope,\n        token_type: 'Bearer',\n      });\n\n      this.notifySignIn(extractUserClaimsFromIdToken(decodedAssertion as IdToken) as User);\n    }\n\n    return response;\n  }\n\n  override async recover(payload?: any): Promise<any> {\n    const config: ThunderIDReactConfig = (await this.getStorageManager().getConfigData()) as ThunderIDReactConfig;\n\n    return executeEmbeddedRecoveryFlow({\n      baseUrl: config?.baseUrl,\n      payload: {...payload, verbose: true},\n      url: resolveResourceEndpoint('flowExecute', config),\n    }) as any;\n  }\n\n  public override getStorageManager(): any {\n    return super.getStorageManager();\n  }\n\n  async request(requestConfig?: HttpRequestConfig): Promise<HttpResponse<any>> {\n    return super.httpRequest(requestConfig!) as Promise<HttpResponse<any>>;\n  }\n\n  async requestAll(requestConfigs?: HttpRequestConfig[]): Promise<HttpResponse<any>[]> {\n    return super.httpRequestAll(requestConfigs!) as Promise<HttpResponse<any>[]>;\n  }\n}\n\nexport default ThunderIDReactClient;\n"],"mappings":";;;AA2BA,IAAM,uBAAN,cAA0F,uBAA0B;CAClH,AAAQ,eAAe;CAEvB,AAAQ;CAER,YAAY,aAAa,GAAG;AAC1B,QAAM,WAAW;;CAGnB,AAAQ,WAAW,SAAwB;AACzC,OAAK,eAAe;;CAGtB,MAAc,YAAqB,WAAqD;AACtF,OAAK,WAAW,KAAK;AACrB,MAAI;AAEF,UADwB,MAAM,WAAW;YAEjC;AACR,QAAK,WAAW,MAAM;;;CAI1B,AAAS,WAAW,QAAgD;AAClE,SAAO,KAAK,YAAY,YAAY;AAClC,QAAK,oBAAoB;IACvB,GAAG;IACH,sBACE,QAAQ,gBAAgB,cAAc,eAAgB,QAAgB;IACzE;AAED,UAAO,MAAM,WAAW,KAAK,kBAAkC;IAC/D;;CAGJ,AAAS,aAAa,QAAyD;AAC7E,SAAO,KAAK,YAAY,YAAY;GAClC,IAAIA;AAEJ,OAAI;AACF,UAAM,MAAM,aAAa,OAAqB;AAC9C,oBAAgB;YACT,OAAO;AACd,UAAM,IAAI,sBACR,iDAAiD,iBAAiB,QAAQ,MAAM,UAAU,OAAO,MAAM,IACvG,sDACA,SACA,4EACD;;AAGH,UAAO;IACP;;CAGJ,MAAe,oBAAmC;AAChD,QAAM,IAAI,MAAM,kBAAkB;;CAGpC,MAAe,UAAyB;AACtC,SAAO,6BAA6B,MAAM,KAAK,mBAAmB,CAAC;;CAGrE,MAAe,kBAAkB,WAAsC;AACrE,SAAO,MAAM,kBAAkB,UAAU;;CAG3C,MAAe,aAA8B;AAC3C,SAAO,KAAK,YAAY,YAAY,MAAM,YAAY,CAAC;;CAGzD,MAAe,iBAAuC;AACpD,SAAO,KAAK,YAAY,YAAY;GAClC,MAAMC,SAAe,6BAA6B,MAAM,KAAK,mBAAmB,CAAC;AACjF,UAAO;IACL,kBAAkB;IAClB,SAAS;IACT,SAAS,EAAE;IACZ;IACD;;CAGJ,AAAS,YAAqB;AAC5B,SAAO,KAAK;;CAGd,MAAe,aAA+B;AAC5C,SAAO,MAAM,YAAY;;CAG3B,MAAe,cAAc,QAAuE;AAClG,SAAO,KAAK,YAAY,YAAY,MAAM,cAAc,OAAO,CAAwC;;CAGzG,MAAe,OAAO,GAAG,MAAyD;AAChF,SAAO,KAAK,YAAY,YAAY;GAClC,MAAMC,OAAY,KAAK;GACvB,MAAMC,OAAY,KAAK;GAEvB,IAAIC,SAA4C,MAAM,KAAK,mBAAmB,CAAC,eAAe;AAO9F,OAAI,CAAC,UAAU,OAAO,KAAK,OAAO,CAAC,WAAW,GAAG;AAC/C,UAAM,KAAK,WAAW,KAAK,kBAAmB;AAG9C,aAAU,MAAM,KAAK,mBAAmB,CAAC,eAAe;;AAG1D,OAAI,OAAO,SAAS,YAAY,SAAS,QAAQ,KAAK,uBAAuB,KAC3E;AAGF,OACE,OAAO,SAAS,YAChB,SAAS,QACT,CAAC,QAAQ,KAAK,KACb,iBAAiB,QAAQ,mBAAmB,OAC7C;IACA,MAAMC,gBAAwB,IAAI,IAAI,OAAO,SAAS,KAAK,CAAC,aAAa,IAAI,SAAS,IAAI;IAC1F,MAAMC,oBACF,MAAM,KAAK,mBAAmB,CAAC,uBAAuB,SAAS,IAAgB;IAInF,MAAMC,WAAuC,MAAM,0BAA0B;KAC3E,QAJqB,iBAAiB;KAKtC,SAJsB,QAAQ,WAAW;KAKzC,SAAS;KACT,KAAK,wBAAwB,eAAe,QAAQ,MAAM,IAAI;KAC/D,CAAC;AAEF,QACE,YACA,OAAO,aAAa,YACpB,SAAS,eAAe,yBAAyB,YACjD,SAAS,WACT;KACA,MAAMC,mBAKF,MAAM,KAAK,eAKZ,SAAS,UAAU;KAEtB,MAAMC,YAAoB,iBAAiB,MAAM,iBAAiB,MAAM,MAAO,KAAK,KAAK;KACzF,MAAMC,YACJ,iBAAiB,OAAO,iBAAiB,MAAM,iBAAiB,MAAM,iBAAiB,MAAM;AAE/F,WAAM,KAAK,WAAW;MACpB,cAAc,SAAS;MACvB,YAAY;MACZ,YAAY;MACZ,UAAU,SAAS;MACnB,OAAO,iBAAiB;MACxB,YAAY;MACb,CAAC;AAEF,UAAK,aAAa,6BAA6B,iBAA4B,CAAS;;AAGtF,WAAO;;AAGT,UAAQ,MAAM,MAAM,OAAO,GAAG,KAAK;IACnC;;CAGJ,MAAe,eAAe,SAAkD;AAC9E,SAAO,MAAM,eAAe,QAA4C;;CAK1E,MAAe,OAAO,GAAG,MAAkC;EACzD,MAAMC,SAAgC,MAAM,KAAK,mBAAmB,CAAC,eAAe;EACpF,MAAMC,WAAgB,KAAK;EAC3B,MAAMC,UAAkB,QAAQ,WAAW;EAI3C,MAAMC,WAAgB,MAAM,0BAA0B;GACpD,QAHqB,IAAI,IAAI,OAAO,SAAS,KAAK,CAAC,aAAa,IAAI,SAAS,IAAI;GAIjF;GACA,SAAS,OAAO,aAAa,YAAY,cAAc,WAAW;IAAC,GAAG;IAAU,SAAS;IAAK,GAAG;GACjG,KAAK,wBAAwB,eAAe,OAAO;GACpD,CAAC;AAEF,MACE,YACA,OAAO,aAAa,YACpB,SAAS,eAAe,yBAAyB,YACjD,SAAS,WACT;GACA,MAAMC,mBAKF,MAAM,KAAK,eAKZ,SAAS,UAAU;GAEtB,MAAMN,YAAoB,iBAAiB,MAAM,iBAAiB,MAAM,MAAO,KAAK,KAAK;GACzF,MAAMC,YACJ,iBAAiB,OAAO,iBAAiB,MAAM,iBAAiB,MAAM,iBAAiB,MAAM;AAE/F,SAAM,KAAK,WAAW;IACpB,cAAc,SAAS;IACvB,YAAY;IACZ,YAAY;IACZ,UAAU,SAAS;IACnB,OAAO,iBAAiB;IACxB,YAAY;IACb,CAAC;AAEF,QAAK,aAAa,6BAA6B,iBAA4B,CAAS;;AAGtF,SAAO;;CAGT,MAAe,QAAQ,SAA6B;EAClD,MAAMC,SAAgC,MAAM,KAAK,mBAAmB,CAAC,eAAe;AAEpF,SAAO,4BAA4B;GACjC,SAAS,QAAQ;GACjB,SAAS;IAAC,GAAG;IAAS,SAAS;IAAK;GACpC,KAAK,wBAAwB,eAAe,OAAO;GACpD,CAAC;;CAGJ,AAAgB,oBAAyB;AACvC,SAAO,MAAM,mBAAmB;;CAGlC,MAAM,QAAQ,eAA+D;AAC3E,SAAO,MAAM,YAAY,cAAe;;CAG1C,MAAM,WAAW,gBAAoE;AACnF,SAAO,MAAM,eAAe,eAAgB;;;AAIhD,mCAAe"}
+{"version":3,"file":"ThunderIDReactClient.js","names":["config: ThunderIDReactConfig | undefined","isInitialized: boolean","claims: User","arg1: any","arg2: any","authIdFromUrl: string","authIdFromStorage: string","response: EmbeddedSignInFlowResponse","decodedAssertion: {\n            [key: string]: unknown;\n            exp?: number;\n            iat?: number;\n            scope?: string;\n          }","createdAt: number","expiresIn: number","config: ThunderIDReactConfig","firstArg: any","baseUrl: string","response: any","decodedAssertion: {\n        [key: string]: unknown;\n        exp?: number;\n        iat?: number;\n        scope?: string;\n      }"],"sources":["../src/ThunderIDReactClient.ts"],"sourcesContent":["// Copyright 2025-2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\nimport {\n  ThunderIDBrowserClient,\n  UserProfile,\n  SignInOptions,\n  User,\n  SignUpOptions,\n  ThunderIDRuntimeError,\n  executeEmbeddedSignInFlow,\n  IdToken,\n  extractUserClaimsFromIdToken,\n  TokenResponse,\n  HttpRequestConfig,\n  HttpResponse,\n  TokenExchangeRequestConfig,\n  isEmpty,\n  EmbeddedSignInFlowResponse,\n  executeEmbeddedSignUpFlow,\n  executeEmbeddedRecoveryFlow,\n  EmbeddedSignInFlowStatus,\n  EmbeddedSignUpFlowStatus,\n  resolveResourceEndpoint,\n} from '@thunderid/browser';\nimport {ThunderIDReactConfig} from './models/config';\n\nclass ThunderIDReactClient<T extends ThunderIDReactConfig = ThunderIDReactConfig> extends ThunderIDBrowserClient<T> {\n  private loadingState = false;\n\n  private _initializeConfig: ThunderIDReactConfig | undefined;\n\n  constructor(instanceId = 0) {\n    super(instanceId);\n  }\n\n  private setLoading(loading: boolean): void {\n    this.loadingState = loading;\n  }\n\n  private async withLoading<TResult>(operation: () => Promise<TResult>): Promise<TResult> {\n    this.setLoading(true);\n    try {\n      const result: TResult = await operation();\n      return result;\n    } finally {\n      this.setLoading(false);\n    }\n  }\n\n  /**\n   * Returns the stored config, re-running initialization first when it has gone missing.\n   *\n   * NOTE: With React 19 strict mode, the initialization logic runs twice, and there's an intermittent\n   * issue where the config object is not getting stored in the storage layer with Vite scaffolding.\n   * An operation that resolves endpoints from a lost config fails (for example \"required endpoints\n   * are missing\"), so recover it from the config this client was initialized with.\n   */\n  private async ensureConfigData(): Promise<ThunderIDReactConfig | undefined> {\n    const config: ThunderIDReactConfig | undefined = (await this.getStorageManager().getConfigData()) as\n      | ThunderIDReactConfig\n      | undefined;\n    const isConfigLost: boolean =\n      !config || Object.keys(config).length === 0 || (Boolean(this._initializeConfig?.baseUrl) && !config.baseUrl);\n\n    if (!isConfigLost || !this._initializeConfig) {\n      return config;\n    }\n\n    await this.initialize(this._initializeConfig);\n\n    // Reload the config persisted by initialization so downstream endpoint resolution\n    // (baseUrl and the flowExecute override) uses the recovered values, not the stale empty config.\n    return (await this.getStorageManager().getConfigData()) as ThunderIDReactConfig | undefined;\n  }\n\n  override initialize(config: ThunderIDReactConfig): Promise<boolean> {\n    return this.withLoading(async () => {\n      this._initializeConfig = {\n        ...config,\n        periodicTokenRefresh:\n          config?.tokenLifecycle?.refreshToken?.autoRefresh ?? (config as any)?.periodicTokenRefresh,\n      } as any;\n\n      return super.initialize(this._initializeConfig as unknown as T);\n    });\n  }\n\n  override reInitialize(config: Partial<ThunderIDReactConfig>): Promise<boolean> {\n    return this.withLoading(async () => {\n      let isInitialized: boolean;\n\n      try {\n        await super.reInitialize(config as Partial<T>);\n        isInitialized = true;\n      } catch (error) {\n        throw new ThunderIDRuntimeError(\n          `Failed to check if the client is initialized: ${error instanceof Error ? error.message : String(error)}`,\n          'ThunderIDReactClient-reInitialize-RuntimeError-001',\n          'react',\n          'An error occurred while checking the initialization status of the client.',\n        );\n      }\n\n      return isInitialized;\n    });\n  }\n\n  override async updateUserProfile(): Promise<User> {\n    throw new Error('Not implemented');\n  }\n\n  override async getUser(): Promise<User> {\n    return extractUserClaimsFromIdToken(await this.getDecodedIdToken());\n  }\n\n  override async getDecodedIdToken(sessionId?: string): Promise<IdToken> {\n    return super.getDecodedIdToken(sessionId);\n  }\n\n  override async getIdToken(): Promise<string> {\n    return this.withLoading(async () => super.getIdToken());\n  }\n\n  override async getUserProfile(): Promise<UserProfile> {\n    return this.withLoading(async () => {\n      const claims: User = extractUserClaimsFromIdToken(await this.getDecodedIdToken());\n      return {\n        flattenedProfile: claims,\n        profile: claims,\n        schemas: [],\n      };\n    });\n  }\n\n  override isLoading(): boolean {\n    return this.loadingState;\n  }\n\n  override async isSignedIn(): Promise<boolean> {\n    return super.isSignedIn();\n  }\n\n  override async exchangeToken(config: TokenExchangeRequestConfig): Promise<TokenResponse | Response> {\n    return this.withLoading(async () => super.exchangeToken(config) as unknown as TokenResponse | Response);\n  }\n\n  override async signIn(...args: any[]): Promise<User | EmbeddedSignInFlowResponse> {\n    return this.withLoading(async () => {\n      const arg1: any = args[0];\n      const arg2: any = args[1];\n\n      const config: ThunderIDReactConfig | undefined = await this.ensureConfigData();\n\n      if (typeof arg1 === 'object' && arg1 !== null && arg1.callOnlyOnRedirect === true) {\n        return undefined as any;\n      }\n\n      if (\n        typeof arg1 === 'object' &&\n        arg1 !== null &&\n        !isEmpty(arg1) &&\n        ('executionId' in arg1 || 'applicationId' in arg1)\n      ) {\n        const authIdFromUrl: string = new URL(window.location.href).searchParams.get('authId') ?? '';\n        const authIdFromStorage: string =\n          ((await this.getStorageManager().getHybridDataParameter('authId')) as string) ?? '';\n        const authId: string = authIdFromUrl || authIdFromStorage;\n        const baseUrl: string = config?.baseUrl ?? '';\n\n        const response: EmbeddedSignInFlowResponse = await executeEmbeddedSignInFlow({\n          authId,\n          baseUrl,\n          payload: arg1,\n          url: resolveResourceEndpoint('flowExecute', config, arg2?.url),\n        });\n\n        if (\n          response &&\n          typeof response === 'object' &&\n          response.flowStatus === EmbeddedSignInFlowStatus.Complete &&\n          response.assertion\n        ) {\n          const decodedAssertion: {\n            [key: string]: unknown;\n            exp?: number;\n            iat?: number;\n            scope?: string;\n          } = await this.decodeJwtToken<{\n            [key: string]: unknown;\n            exp?: number;\n            iat?: number;\n            scope?: string;\n          }>(response.assertion);\n\n          const createdAt: number = decodedAssertion.iat ? decodedAssertion.iat * 1000 : Date.now();\n          const expiresIn: number =\n            decodedAssertion.exp && decodedAssertion.iat ? decodedAssertion.exp - decodedAssertion.iat : 3600;\n\n          await this.setSession({\n            access_token: response.assertion,\n            created_at: createdAt,\n            expires_in: expiresIn,\n            id_token: response.assertion,\n            scope: decodedAssertion.scope,\n            token_type: 'Bearer',\n          });\n\n          this.notifySignIn(extractUserClaimsFromIdToken(decodedAssertion as IdToken) as User);\n        }\n\n        return response;\n      }\n\n      return (await super.signIn(...args)) as unknown as User;\n    });\n  }\n\n  override async signInSilently(options?: SignInOptions): Promise<User | boolean> {\n    await this.ensureConfigData();\n\n    return super.signInSilently(options as Record<string, string | boolean>) as Promise<User | boolean>;\n  }\n\n  override async signUp(options?: SignUpOptions): Promise<void>;\n  override async signUp(payload: any): Promise<any>;\n  override async signUp(...args: any[]): Promise<void | any> {\n    const config: ThunderIDReactConfig = (await this.getStorageManager().getConfigData()) as ThunderIDReactConfig;\n    const firstArg: any = args[0];\n    const baseUrl: string = config?.baseUrl ?? '';\n\n    const authId: string = new URL(window.location.href).searchParams.get('authId') ?? '';\n\n    const response: any = await executeEmbeddedSignUpFlow({\n      authId,\n      baseUrl,\n      payload: typeof firstArg === 'object' && 'flowType' in firstArg ? {...firstArg, verbose: true} : firstArg,\n      url: resolveResourceEndpoint('flowExecute', config),\n    });\n\n    if (\n      response &&\n      typeof response === 'object' &&\n      response.flowStatus === EmbeddedSignUpFlowStatus.Complete &&\n      response.assertion\n    ) {\n      const decodedAssertion: {\n        [key: string]: unknown;\n        exp?: number;\n        iat?: number;\n        scope?: string;\n      } = await this.decodeJwtToken<{\n        [key: string]: unknown;\n        exp?: number;\n        iat?: number;\n        scope?: string;\n      }>(response.assertion);\n\n      const createdAt: number = decodedAssertion.iat ? decodedAssertion.iat * 1000 : Date.now();\n      const expiresIn: number =\n        decodedAssertion.exp && decodedAssertion.iat ? decodedAssertion.exp - decodedAssertion.iat : 3600;\n\n      await this.setSession({\n        access_token: response.assertion,\n        created_at: createdAt,\n        expires_in: expiresIn,\n        id_token: response.assertion,\n        scope: decodedAssertion.scope,\n        token_type: 'Bearer',\n      });\n\n      this.notifySignIn(extractUserClaimsFromIdToken(decodedAssertion as IdToken) as User);\n    }\n\n    return response;\n  }\n\n  override async recover(payload?: any): Promise<any> {\n    const config: ThunderIDReactConfig = (await this.getStorageManager().getConfigData()) as ThunderIDReactConfig;\n\n    return executeEmbeddedRecoveryFlow({\n      baseUrl: config?.baseUrl,\n      payload: {...payload, verbose: true},\n      url: resolveResourceEndpoint('flowExecute', config),\n    }) as any;\n  }\n\n  public override getStorageManager(): any {\n    return super.getStorageManager();\n  }\n\n  async request(requestConfig?: HttpRequestConfig): Promise<HttpResponse<any>> {\n    return super.httpRequest(requestConfig!) as Promise<HttpResponse<any>>;\n  }\n\n  async requestAll(requestConfigs?: HttpRequestConfig[]): Promise<HttpResponse<any>[]> {\n    return super.httpRequestAll(requestConfigs!) as Promise<HttpResponse<any>[]>;\n  }\n}\n\nexport default ThunderIDReactClient;\n"],"mappings":";;;AA2BA,IAAM,uBAAN,cAA0F,uBAA0B;CAClH,AAAQ,eAAe;CAEvB,AAAQ;CAER,YAAY,aAAa,GAAG;AAC1B,QAAM,WAAW;;CAGnB,AAAQ,WAAW,SAAwB;AACzC,OAAK,eAAe;;CAGtB,MAAc,YAAqB,WAAqD;AACtF,OAAK,WAAW,KAAK;AACrB,MAAI;AAEF,UADwB,MAAM,WAAW;YAEjC;AACR,QAAK,WAAW,MAAM;;;;;;;;;;;CAY1B,MAAc,mBAA8D;EAC1E,MAAMA,SAA4C,MAAM,KAAK,mBAAmB,CAAC,eAAe;AAMhG,MAAI,EAFF,CAAC,UAAU,OAAO,KAAK,OAAO,CAAC,WAAW,KAAM,QAAQ,KAAK,mBAAmB,QAAQ,IAAI,CAAC,OAAO,YAEjF,CAAC,KAAK,kBACzB,QAAO;AAGT,QAAM,KAAK,WAAW,KAAK,kBAAkB;AAI7C,SAAQ,MAAM,KAAK,mBAAmB,CAAC,eAAe;;CAGxD,AAAS,WAAW,QAAgD;AAClE,SAAO,KAAK,YAAY,YAAY;AAClC,QAAK,oBAAoB;IACvB,GAAG;IACH,sBACE,QAAQ,gBAAgB,cAAc,eAAgB,QAAgB;IACzE;AAED,UAAO,MAAM,WAAW,KAAK,kBAAkC;IAC/D;;CAGJ,AAAS,aAAa,QAAyD;AAC7E,SAAO,KAAK,YAAY,YAAY;GAClC,IAAIC;AAEJ,OAAI;AACF,UAAM,MAAM,aAAa,OAAqB;AAC9C,oBAAgB;YACT,OAAO;AACd,UAAM,IAAI,sBACR,iDAAiD,iBAAiB,QAAQ,MAAM,UAAU,OAAO,MAAM,IACvG,sDACA,SACA,4EACD;;AAGH,UAAO;IACP;;CAGJ,MAAe,oBAAmC;AAChD,QAAM,IAAI,MAAM,kBAAkB;;CAGpC,MAAe,UAAyB;AACtC,SAAO,6BAA6B,MAAM,KAAK,mBAAmB,CAAC;;CAGrE,MAAe,kBAAkB,WAAsC;AACrE,SAAO,MAAM,kBAAkB,UAAU;;CAG3C,MAAe,aAA8B;AAC3C,SAAO,KAAK,YAAY,YAAY,MAAM,YAAY,CAAC;;CAGzD,MAAe,iBAAuC;AACpD,SAAO,KAAK,YAAY,YAAY;GAClC,MAAMC,SAAe,6BAA6B,MAAM,KAAK,mBAAmB,CAAC;AACjF,UAAO;IACL,kBAAkB;IAClB,SAAS;IACT,SAAS,EAAE;IACZ;IACD;;CAGJ,AAAS,YAAqB;AAC5B,SAAO,KAAK;;CAGd,MAAe,aAA+B;AAC5C,SAAO,MAAM,YAAY;;CAG3B,MAAe,cAAc,QAAuE;AAClG,SAAO,KAAK,YAAY,YAAY,MAAM,cAAc,OAAO,CAAwC;;CAGzG,MAAe,OAAO,GAAG,MAAyD;AAChF,SAAO,KAAK,YAAY,YAAY;GAClC,MAAMC,OAAY,KAAK;GACvB,MAAMC,OAAY,KAAK;GAEvB,MAAMJ,SAA2C,MAAM,KAAK,kBAAkB;AAE9E,OAAI,OAAO,SAAS,YAAY,SAAS,QAAQ,KAAK,uBAAuB,KAC3E;AAGF,OACE,OAAO,SAAS,YAChB,SAAS,QACT,CAAC,QAAQ,KAAK,KACb,iBAAiB,QAAQ,mBAAmB,OAC7C;IACA,MAAMK,gBAAwB,IAAI,IAAI,OAAO,SAAS,KAAK,CAAC,aAAa,IAAI,SAAS,IAAI;IAC1F,MAAMC,oBACF,MAAM,KAAK,mBAAmB,CAAC,uBAAuB,SAAS,IAAgB;IAInF,MAAMC,WAAuC,MAAM,0BAA0B;KAC3E,QAJqB,iBAAiB;KAKtC,SAJsB,QAAQ,WAAW;KAKzC,SAAS;KACT,KAAK,wBAAwB,eAAe,QAAQ,MAAM,IAAI;KAC/D,CAAC;AAEF,QACE,YACA,OAAO,aAAa,YACpB,SAAS,eAAe,yBAAyB,YACjD,SAAS,WACT;KACA,MAAMC,mBAKF,MAAM,KAAK,eAKZ,SAAS,UAAU;KAEtB,MAAMC,YAAoB,iBAAiB,MAAM,iBAAiB,MAAM,MAAO,KAAK,KAAK;KACzF,MAAMC,YACJ,iBAAiB,OAAO,iBAAiB,MAAM,iBAAiB,MAAM,iBAAiB,MAAM;AAE/F,WAAM,KAAK,WAAW;MACpB,cAAc,SAAS;MACvB,YAAY;MACZ,YAAY;MACZ,UAAU,SAAS;MACnB,OAAO,iBAAiB;MACxB,YAAY;MACb,CAAC;AAEF,UAAK,aAAa,6BAA6B,iBAA4B,CAAS;;AAGtF,WAAO;;AAGT,UAAQ,MAAM,MAAM,OAAO,GAAG,KAAK;IACnC;;CAGJ,MAAe,eAAe,SAAkD;AAC9E,QAAM,KAAK,kBAAkB;AAE7B,SAAO,MAAM,eAAe,QAA4C;;CAK1E,MAAe,OAAO,GAAG,MAAkC;EACzD,MAAMC,SAAgC,MAAM,KAAK,mBAAmB,CAAC,eAAe;EACpF,MAAMC,WAAgB,KAAK;EAC3B,MAAMC,UAAkB,QAAQ,WAAW;EAI3C,MAAMC,WAAgB,MAAM,0BAA0B;GACpD,QAHqB,IAAI,IAAI,OAAO,SAAS,KAAK,CAAC,aAAa,IAAI,SAAS,IAAI;GAIjF;GACA,SAAS,OAAO,aAAa,YAAY,cAAc,WAAW;IAAC,GAAG;IAAU,SAAS;IAAK,GAAG;GACjG,KAAK,wBAAwB,eAAe,OAAO;GACpD,CAAC;AAEF,MACE,YACA,OAAO,aAAa,YACpB,SAAS,eAAe,yBAAyB,YACjD,SAAS,WACT;GACA,MAAMC,mBAKF,MAAM,KAAK,eAKZ,SAAS,UAAU;GAEtB,MAAMN,YAAoB,iBAAiB,MAAM,iBAAiB,MAAM,MAAO,KAAK,KAAK;GACzF,MAAMC,YACJ,iBAAiB,OAAO,iBAAiB,MAAM,iBAAiB,MAAM,iBAAiB,MAAM;AAE/F,SAAM,KAAK,WAAW;IACpB,cAAc,SAAS;IACvB,YAAY;IACZ,YAAY;IACZ,UAAU,SAAS;IACnB,OAAO,iBAAiB;IACxB,YAAY;IACb,CAAC;AAEF,QAAK,aAAa,6BAA6B,iBAA4B,CAAS;;AAGtF,SAAO;;CAGT,MAAe,QAAQ,SAA6B;EAClD,MAAMC,SAAgC,MAAM,KAAK,mBAAmB,CAAC,eAAe;AAEpF,SAAO,4BAA4B;GACjC,SAAS,QAAQ;GACjB,SAAS;IAAC,GAAG;IAAS,SAAS;IAAK;GACpC,KAAK,wBAAwB,eAAe,OAAO;GACpD,CAAC;;CAGJ,AAAgB,oBAAyB;AACvC,SAAO,MAAM,mBAAmB;;CAGlC,MAAM,QAAQ,eAA+D;AAC3E,SAAO,MAAM,YAAY,cAAe;;CAG1C,MAAM,WAAW,gBAAoE;AACnF,SAAO,MAAM,eAAe,eAAgB;;;AAIhD,mCAAe"}

package/dist/cjs/ThunderIDReactClient.cjs

@@ -20,6 +20,20 @@ var ThunderIDReactClient = class extends __thunderid_browser.ThunderIDBrowserCli
 			this.setLoading(false);
 		}
 	}
+	/**
+	* Returns the stored config, re-running initialization first when it has gone missing.
+	*
+	* NOTE: With React 19 strict mode, the initialization logic runs twice, and there's an intermittent
+	* issue where the config object is not getting stored in the storage layer with Vite scaffolding.
+	* An operation that resolves endpoints from a lost config fails (for example "required endpoints
+	* are missing"), so recover it from the config this client was initialized with.
+	*/
+	async ensureConfigData() {
+		const config = await this.getStorageManager().getConfigData();
+		if (!(!config || Object.keys(config).length === 0 || Boolean(this._initializeConfig?.baseUrl) && !config.baseUrl) || !this._initializeConfig) return config;
+		await this.initialize(this._initializeConfig);
+		return await this.getStorageManager().getConfigData();
+	}
 	initialize(config) {
 		return this.withLoading(async () => {
 			this._initializeConfig = {
@@ -76,11 +90,7 @@ var ThunderIDReactClient = class extends __thunderid_browser.ThunderIDBrowserCli
 		return this.withLoading(async () => {
 			const arg1 = args[0];
 			const arg2 = args[1];
-			let config = await this.getStorageManager().getConfigData();
-			if (!config || Object.keys(config).length === 0) {
-				await this.initialize(this._initializeConfig);
-				config = await this.getStorageManager().getConfigData();
-			}
+			const config = await this.ensureConfigData();
 			if (typeof arg1 === "object" && arg1 !== null && arg1.callOnlyOnRedirect === true) return;
 			if (typeof arg1 === "object" && arg1 !== null && !(0, __thunderid_browser.isEmpty)(arg1) && ("executionId" in arg1 || "applicationId" in arg1)) {
 				const authIdFromUrl = new URL(window.location.href).searchParams.get("authId") ?? "";
@@ -111,6 +121,7 @@ var ThunderIDReactClient = class extends __thunderid_browser.ThunderIDBrowserCli
 		});
 	}
 	async signInSilently(options) {
+		await this.ensureConfigData();
 		return super.signInSilently(options);
 	}
 	async signUp(...args) {

package/dist/cjs/ThunderIDReactClient.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"ThunderIDReactClient.cjs","names":["ThunderIDBrowserClient","isInitialized: boolean","ThunderIDRuntimeError","claims: User","arg1: any","arg2: any","config: ThunderIDReactConfig | undefined","authIdFromUrl: string","authIdFromStorage: string","response: EmbeddedSignInFlowResponse","EmbeddedSignInFlowStatus","decodedAssertion: {\n            [key: string]: unknown;\n            exp?: number;\n            iat?: number;\n            scope?: string;\n          }","createdAt: number","expiresIn: number","config: ThunderIDReactConfig","firstArg: any","baseUrl: string","response: any","EmbeddedSignUpFlowStatus","decodedAssertion: {\n        [key: string]: unknown;\n        exp?: number;\n        iat?: number;\n        scope?: string;\n      }"],"sources":["../../src/ThunderIDReactClient.ts"],"sourcesContent":["// Copyright 2025-2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\nimport {\n  ThunderIDBrowserClient,\n  UserProfile,\n  SignInOptions,\n  User,\n  SignUpOptions,\n  ThunderIDRuntimeError,\n  executeEmbeddedSignInFlow,\n  IdToken,\n  extractUserClaimsFromIdToken,\n  TokenResponse,\n  HttpRequestConfig,\n  HttpResponse,\n  TokenExchangeRequestConfig,\n  isEmpty,\n  EmbeddedSignInFlowResponse,\n  executeEmbeddedSignUpFlow,\n  executeEmbeddedRecoveryFlow,\n  EmbeddedSignInFlowStatus,\n  EmbeddedSignUpFlowStatus,\n  resolveResourceEndpoint,\n} from '@thunderid/browser';\nimport {ThunderIDReactConfig} from './models/config';\n\nclass ThunderIDReactClient<T extends ThunderIDReactConfig = ThunderIDReactConfig> extends ThunderIDBrowserClient<T> {\n  private loadingState = false;\n\n  private _initializeConfig: ThunderIDReactConfig | undefined;\n\n  constructor(instanceId = 0) {\n    super(instanceId);\n  }\n\n  private setLoading(loading: boolean): void {\n    this.loadingState = loading;\n  }\n\n  private async withLoading<TResult>(operation: () => Promise<TResult>): Promise<TResult> {\n    this.setLoading(true);\n    try {\n      const result: TResult = await operation();\n      return result;\n    } finally {\n      this.setLoading(false);\n    }\n  }\n\n  override initialize(config: ThunderIDReactConfig): Promise<boolean> {\n    return this.withLoading(async () => {\n      this._initializeConfig = {\n        ...config,\n        periodicTokenRefresh:\n          config?.tokenLifecycle?.refreshToken?.autoRefresh ?? (config as any)?.periodicTokenRefresh,\n      } as any;\n\n      return super.initialize(this._initializeConfig as unknown as T);\n    });\n  }\n\n  override reInitialize(config: Partial<ThunderIDReactConfig>): Promise<boolean> {\n    return this.withLoading(async () => {\n      let isInitialized: boolean;\n\n      try {\n        await super.reInitialize(config as Partial<T>);\n        isInitialized = true;\n      } catch (error) {\n        throw new ThunderIDRuntimeError(\n          `Failed to check if the client is initialized: ${error instanceof Error ? error.message : String(error)}`,\n          'ThunderIDReactClient-reInitialize-RuntimeError-001',\n          'react',\n          'An error occurred while checking the initialization status of the client.',\n        );\n      }\n\n      return isInitialized;\n    });\n  }\n\n  override async updateUserProfile(): Promise<User> {\n    throw new Error('Not implemented');\n  }\n\n  override async getUser(): Promise<User> {\n    return extractUserClaimsFromIdToken(await this.getDecodedIdToken());\n  }\n\n  override async getDecodedIdToken(sessionId?: string): Promise<IdToken> {\n    return super.getDecodedIdToken(sessionId);\n  }\n\n  override async getIdToken(): Promise<string> {\n    return this.withLoading(async () => super.getIdToken());\n  }\n\n  override async getUserProfile(): Promise<UserProfile> {\n    return this.withLoading(async () => {\n      const claims: User = extractUserClaimsFromIdToken(await this.getDecodedIdToken());\n      return {\n        flattenedProfile: claims,\n        profile: claims,\n        schemas: [],\n      };\n    });\n  }\n\n  override isLoading(): boolean {\n    return this.loadingState;\n  }\n\n  override async isSignedIn(): Promise<boolean> {\n    return super.isSignedIn();\n  }\n\n  override async exchangeToken(config: TokenExchangeRequestConfig): Promise<TokenResponse | Response> {\n    return this.withLoading(async () => super.exchangeToken(config) as unknown as TokenResponse | Response);\n  }\n\n  override async signIn(...args: any[]): Promise<User | EmbeddedSignInFlowResponse> {\n    return this.withLoading(async () => {\n      const arg1: any = args[0];\n      const arg2: any = args[1];\n\n      let config: ThunderIDReactConfig | undefined = (await this.getStorageManager().getConfigData()) as\n        | ThunderIDReactConfig\n        | undefined;\n\n      // NOTE: With React 19 strict mode, the initialization logic runs twice, and there's an intermittent\n      // issue where the config object is not getting stored in the storage layer with Vite scaffolding.\n      // Hence, we need to check if the client is initialized but the config object is empty, and reinitialize.\n      if (!config || Object.keys(config).length === 0) {\n        await this.initialize(this._initializeConfig!);\n        // Reload the config persisted by initialization so downstream endpoint resolution\n        // (baseUrl and the flowExecute override) uses the recovered values, not the stale empty config.\n        config = (await this.getStorageManager().getConfigData()) as ThunderIDReactConfig | undefined;\n      }\n\n      if (typeof arg1 === 'object' && arg1 !== null && arg1.callOnlyOnRedirect === true) {\n        return undefined as any;\n      }\n\n      if (\n        typeof arg1 === 'object' &&\n        arg1 !== null &&\n        !isEmpty(arg1) &&\n        ('executionId' in arg1 || 'applicationId' in arg1)\n      ) {\n        const authIdFromUrl: string = new URL(window.location.href).searchParams.get('authId') ?? '';\n        const authIdFromStorage: string =\n          ((await this.getStorageManager().getHybridDataParameter('authId')) as string) ?? '';\n        const authId: string = authIdFromUrl || authIdFromStorage;\n        const baseUrl: string = config?.baseUrl ?? '';\n\n        const response: EmbeddedSignInFlowResponse = await executeEmbeddedSignInFlow({\n          authId,\n          baseUrl,\n          payload: arg1,\n          url: resolveResourceEndpoint('flowExecute', config, arg2?.url),\n        });\n\n        if (\n          response &&\n          typeof response === 'object' &&\n          response.flowStatus === EmbeddedSignInFlowStatus.Complete &&\n          response.assertion\n        ) {\n          const decodedAssertion: {\n            [key: string]: unknown;\n            exp?: number;\n            iat?: number;\n            scope?: string;\n          } = await this.decodeJwtToken<{\n            [key: string]: unknown;\n            exp?: number;\n            iat?: number;\n            scope?: string;\n          }>(response.assertion);\n\n          const createdAt: number = decodedAssertion.iat ? decodedAssertion.iat * 1000 : Date.now();\n          const expiresIn: number =\n            decodedAssertion.exp && decodedAssertion.iat ? decodedAssertion.exp - decodedAssertion.iat : 3600;\n\n          await this.setSession({\n            access_token: response.assertion,\n            created_at: createdAt,\n            expires_in: expiresIn,\n            id_token: response.assertion,\n            scope: decodedAssertion.scope,\n            token_type: 'Bearer',\n          });\n\n          this.notifySignIn(extractUserClaimsFromIdToken(decodedAssertion as IdToken) as User);\n        }\n\n        return response;\n      }\n\n      return (await super.signIn(...args)) as unknown as User;\n    });\n  }\n\n  override async signInSilently(options?: SignInOptions): Promise<User | boolean> {\n    return super.signInSilently(options as Record<string, string | boolean>) as Promise<User | boolean>;\n  }\n\n  override async signUp(options?: SignUpOptions): Promise<void>;\n  override async signUp(payload: any): Promise<any>;\n  override async signUp(...args: any[]): Promise<void | any> {\n    const config: ThunderIDReactConfig = (await this.getStorageManager().getConfigData()) as ThunderIDReactConfig;\n    const firstArg: any = args[0];\n    const baseUrl: string = config?.baseUrl ?? '';\n\n    const authId: string = new URL(window.location.href).searchParams.get('authId') ?? '';\n\n    const response: any = await executeEmbeddedSignUpFlow({\n      authId,\n      baseUrl,\n      payload: typeof firstArg === 'object' && 'flowType' in firstArg ? {...firstArg, verbose: true} : firstArg,\n      url: resolveResourceEndpoint('flowExecute', config),\n    });\n\n    if (\n      response &&\n      typeof response === 'object' &&\n      response.flowStatus === EmbeddedSignUpFlowStatus.Complete &&\n      response.assertion\n    ) {\n      const decodedAssertion: {\n        [key: string]: unknown;\n        exp?: number;\n        iat?: number;\n        scope?: string;\n      } = await this.decodeJwtToken<{\n        [key: string]: unknown;\n        exp?: number;\n        iat?: number;\n        scope?: string;\n      }>(response.assertion);\n\n      const createdAt: number = decodedAssertion.iat ? decodedAssertion.iat * 1000 : Date.now();\n      const expiresIn: number =\n        decodedAssertion.exp && decodedAssertion.iat ? decodedAssertion.exp - decodedAssertion.iat : 3600;\n\n      await this.setSession({\n        access_token: response.assertion,\n        created_at: createdAt,\n        expires_in: expiresIn,\n        id_token: response.assertion,\n        scope: decodedAssertion.scope,\n        token_type: 'Bearer',\n      });\n\n      this.notifySignIn(extractUserClaimsFromIdToken(decodedAssertion as IdToken) as User);\n    }\n\n    return response;\n  }\n\n  override async recover(payload?: any): Promise<any> {\n    const config: ThunderIDReactConfig = (await this.getStorageManager().getConfigData()) as ThunderIDReactConfig;\n\n    return executeEmbeddedRecoveryFlow({\n      baseUrl: config?.baseUrl,\n      payload: {...payload, verbose: true},\n      url: resolveResourceEndpoint('flowExecute', config),\n    }) as any;\n  }\n\n  public override getStorageManager(): any {\n    return super.getStorageManager();\n  }\n\n  async request(requestConfig?: HttpRequestConfig): Promise<HttpResponse<any>> {\n    return super.httpRequest(requestConfig!) as Promise<HttpResponse<any>>;\n  }\n\n  async requestAll(requestConfigs?: HttpRequestConfig[]): Promise<HttpResponse<any>[]> {\n    return super.httpRequestAll(requestConfigs!) as Promise<HttpResponse<any>[]>;\n  }\n}\n\nexport default ThunderIDReactClient;\n"],"mappings":";;;;;AA2BA,IAAM,uBAAN,cAA0FA,2CAA0B;CAClH,AAAQ,eAAe;CAEvB,AAAQ;CAER,YAAY,aAAa,GAAG;AAC1B,QAAM,WAAW;;CAGnB,AAAQ,WAAW,SAAwB;AACzC,OAAK,eAAe;;CAGtB,MAAc,YAAqB,WAAqD;AACtF,OAAK,WAAW,KAAK;AACrB,MAAI;AAEF,UADwB,MAAM,WAAW;YAEjC;AACR,QAAK,WAAW,MAAM;;;CAI1B,AAAS,WAAW,QAAgD;AAClE,SAAO,KAAK,YAAY,YAAY;AAClC,QAAK,oBAAoB;IACvB,GAAG;IACH,sBACE,QAAQ,gBAAgB,cAAc,eAAgB,QAAgB;IACzE;AAED,UAAO,MAAM,WAAW,KAAK,kBAAkC;IAC/D;;CAGJ,AAAS,aAAa,QAAyD;AAC7E,SAAO,KAAK,YAAY,YAAY;GAClC,IAAIC;AAEJ,OAAI;AACF,UAAM,MAAM,aAAa,OAAqB;AAC9C,oBAAgB;YACT,OAAO;AACd,UAAM,IAAIC,0CACR,iDAAiD,iBAAiB,QAAQ,MAAM,UAAU,OAAO,MAAM,IACvG,sDACA,SACA,4EACD;;AAGH,UAAO;IACP;;CAGJ,MAAe,oBAAmC;AAChD,QAAM,IAAI,MAAM,kBAAkB;;CAGpC,MAAe,UAAyB;AACtC,+DAAoC,MAAM,KAAK,mBAAmB,CAAC;;CAGrE,MAAe,kBAAkB,WAAsC;AACrE,SAAO,MAAM,kBAAkB,UAAU;;CAG3C,MAAe,aAA8B;AAC3C,SAAO,KAAK,YAAY,YAAY,MAAM,YAAY,CAAC;;CAGzD,MAAe,iBAAuC;AACpD,SAAO,KAAK,YAAY,YAAY;GAClC,MAAMC,+DAA4C,MAAM,KAAK,mBAAmB,CAAC;AACjF,UAAO;IACL,kBAAkB;IAClB,SAAS;IACT,SAAS,EAAE;IACZ;IACD;;CAGJ,AAAS,YAAqB;AAC5B,SAAO,KAAK;;CAGd,MAAe,aAA+B;AAC5C,SAAO,MAAM,YAAY;;CAG3B,MAAe,cAAc,QAAuE;AAClG,SAAO,KAAK,YAAY,YAAY,MAAM,cAAc,OAAO,CAAwC;;CAGzG,MAAe,OAAO,GAAG,MAAyD;AAChF,SAAO,KAAK,YAAY,YAAY;GAClC,MAAMC,OAAY,KAAK;GACvB,MAAMC,OAAY,KAAK;GAEvB,IAAIC,SAA4C,MAAM,KAAK,mBAAmB,CAAC,eAAe;AAO9F,OAAI,CAAC,UAAU,OAAO,KAAK,OAAO,CAAC,WAAW,GAAG;AAC/C,UAAM,KAAK,WAAW,KAAK,kBAAmB;AAG9C,aAAU,MAAM,KAAK,mBAAmB,CAAC,eAAe;;AAG1D,OAAI,OAAO,SAAS,YAAY,SAAS,QAAQ,KAAK,uBAAuB,KAC3E;AAGF,OACE,OAAO,SAAS,YAChB,SAAS,QACT,kCAAS,KAAK,KACb,iBAAiB,QAAQ,mBAAmB,OAC7C;IACA,MAAMC,gBAAwB,IAAI,IAAI,OAAO,SAAS,KAAK,CAAC,aAAa,IAAI,SAAS,IAAI;IAC1F,MAAMC,oBACF,MAAM,KAAK,mBAAmB,CAAC,uBAAuB,SAAS,IAAgB;IAInF,MAAMC,WAAuC,yDAAgC;KAC3E,QAJqB,iBAAiB;KAKtC,SAJsB,QAAQ,WAAW;KAKzC,SAAS;KACT,sDAA6B,eAAe,QAAQ,MAAM,IAAI;KAC/D,CAAC;AAEF,QACE,YACA,OAAO,aAAa,YACpB,SAAS,eAAeC,6CAAyB,YACjD,SAAS,WACT;KACA,MAAMC,mBAKF,MAAM,KAAK,eAKZ,SAAS,UAAU;KAEtB,MAAMC,YAAoB,iBAAiB,MAAM,iBAAiB,MAAM,MAAO,KAAK,KAAK;KACzF,MAAMC,YACJ,iBAAiB,OAAO,iBAAiB,MAAM,iBAAiB,MAAM,iBAAiB,MAAM;AAE/F,WAAM,KAAK,WAAW;MACpB,cAAc,SAAS;MACvB,YAAY;MACZ,YAAY;MACZ,UAAU,SAAS;MACnB,OAAO,iBAAiB;MACxB,YAAY;MACb,CAAC;AAEF,UAAK,mEAA0C,iBAA4B,CAAS;;AAGtF,WAAO;;AAGT,UAAQ,MAAM,MAAM,OAAO,GAAG,KAAK;IACnC;;CAGJ,MAAe,eAAe,SAAkD;AAC9E,SAAO,MAAM,eAAe,QAA4C;;CAK1E,MAAe,OAAO,GAAG,MAAkC;EACzD,MAAMC,SAAgC,MAAM,KAAK,mBAAmB,CAAC,eAAe;EACpF,MAAMC,WAAgB,KAAK;EAC3B,MAAMC,UAAkB,QAAQ,WAAW;EAI3C,MAAMC,WAAgB,yDAAgC;GACpD,QAHqB,IAAI,IAAI,OAAO,SAAS,KAAK,CAAC,aAAa,IAAI,SAAS,IAAI;GAIjF;GACA,SAAS,OAAO,aAAa,YAAY,cAAc,WAAW;IAAC,GAAG;IAAU,SAAS;IAAK,GAAG;GACjG,sDAA6B,eAAe,OAAO;GACpD,CAAC;AAEF,MACE,YACA,OAAO,aAAa,YACpB,SAAS,eAAeC,6CAAyB,YACjD,SAAS,WACT;GACA,MAAMC,mBAKF,MAAM,KAAK,eAKZ,SAAS,UAAU;GAEtB,MAAMP,YAAoB,iBAAiB,MAAM,iBAAiB,MAAM,MAAO,KAAK,KAAK;GACzF,MAAMC,YACJ,iBAAiB,OAAO,iBAAiB,MAAM,iBAAiB,MAAM,iBAAiB,MAAM;AAE/F,SAAM,KAAK,WAAW;IACpB,cAAc,SAAS;IACvB,YAAY;IACZ,YAAY;IACZ,UAAU,SAAS;IACnB,OAAO,iBAAiB;IACxB,YAAY;IACb,CAAC;AAEF,QAAK,mEAA0C,iBAA4B,CAAS;;AAGtF,SAAO;;CAGT,MAAe,QAAQ,SAA6B;EAClD,MAAMC,SAAgC,MAAM,KAAK,mBAAmB,CAAC,eAAe;AAEpF,8DAAmC;GACjC,SAAS,QAAQ;GACjB,SAAS;IAAC,GAAG;IAAS,SAAS;IAAK;GACpC,sDAA6B,eAAe,OAAO;GACpD,CAAC;;CAGJ,AAAgB,oBAAyB;AACvC,SAAO,MAAM,mBAAmB;;CAGlC,MAAM,QAAQ,eAA+D;AAC3E,SAAO,MAAM,YAAY,cAAe;;CAG1C,MAAM,WAAW,gBAAoE;AACnF,SAAO,MAAM,eAAe,eAAgB;;;AAIhD,mCAAe"}
+{"version":3,"file":"ThunderIDReactClient.cjs","names":["ThunderIDBrowserClient","config: ThunderIDReactConfig | undefined","isInitialized: boolean","ThunderIDRuntimeError","claims: User","arg1: any","arg2: any","authIdFromUrl: string","authIdFromStorage: string","response: EmbeddedSignInFlowResponse","EmbeddedSignInFlowStatus","decodedAssertion: {\n            [key: string]: unknown;\n            exp?: number;\n            iat?: number;\n            scope?: string;\n          }","createdAt: number","expiresIn: number","config: ThunderIDReactConfig","firstArg: any","baseUrl: string","response: any","EmbeddedSignUpFlowStatus","decodedAssertion: {\n        [key: string]: unknown;\n        exp?: number;\n        iat?: number;\n        scope?: string;\n      }"],"sources":["../../src/ThunderIDReactClient.ts"],"sourcesContent":["// Copyright 2025-2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\nimport {\n  ThunderIDBrowserClient,\n  UserProfile,\n  SignInOptions,\n  User,\n  SignUpOptions,\n  ThunderIDRuntimeError,\n  executeEmbeddedSignInFlow,\n  IdToken,\n  extractUserClaimsFromIdToken,\n  TokenResponse,\n  HttpRequestConfig,\n  HttpResponse,\n  TokenExchangeRequestConfig,\n  isEmpty,\n  EmbeddedSignInFlowResponse,\n  executeEmbeddedSignUpFlow,\n  executeEmbeddedRecoveryFlow,\n  EmbeddedSignInFlowStatus,\n  EmbeddedSignUpFlowStatus,\n  resolveResourceEndpoint,\n} from '@thunderid/browser';\nimport {ThunderIDReactConfig} from './models/config';\n\nclass ThunderIDReactClient<T extends ThunderIDReactConfig = ThunderIDReactConfig> extends ThunderIDBrowserClient<T> {\n  private loadingState = false;\n\n  private _initializeConfig: ThunderIDReactConfig | undefined;\n\n  constructor(instanceId = 0) {\n    super(instanceId);\n  }\n\n  private setLoading(loading: boolean): void {\n    this.loadingState = loading;\n  }\n\n  private async withLoading<TResult>(operation: () => Promise<TResult>): Promise<TResult> {\n    this.setLoading(true);\n    try {\n      const result: TResult = await operation();\n      return result;\n    } finally {\n      this.setLoading(false);\n    }\n  }\n\n  /**\n   * Returns the stored config, re-running initialization first when it has gone missing.\n   *\n   * NOTE: With React 19 strict mode, the initialization logic runs twice, and there's an intermittent\n   * issue where the config object is not getting stored in the storage layer with Vite scaffolding.\n   * An operation that resolves endpoints from a lost config fails (for example \"required endpoints\n   * are missing\"), so recover it from the config this client was initialized with.\n   */\n  private async ensureConfigData(): Promise<ThunderIDReactConfig | undefined> {\n    const config: ThunderIDReactConfig | undefined = (await this.getStorageManager().getConfigData()) as\n      | ThunderIDReactConfig\n      | undefined;\n    const isConfigLost: boolean =\n      !config || Object.keys(config).length === 0 || (Boolean(this._initializeConfig?.baseUrl) && !config.baseUrl);\n\n    if (!isConfigLost || !this._initializeConfig) {\n      return config;\n    }\n\n    await this.initialize(this._initializeConfig);\n\n    // Reload the config persisted by initialization so downstream endpoint resolution\n    // (baseUrl and the flowExecute override) uses the recovered values, not the stale empty config.\n    return (await this.getStorageManager().getConfigData()) as ThunderIDReactConfig | undefined;\n  }\n\n  override initialize(config: ThunderIDReactConfig): Promise<boolean> {\n    return this.withLoading(async () => {\n      this._initializeConfig = {\n        ...config,\n        periodicTokenRefresh:\n          config?.tokenLifecycle?.refreshToken?.autoRefresh ?? (config as any)?.periodicTokenRefresh,\n      } as any;\n\n      return super.initialize(this._initializeConfig as unknown as T);\n    });\n  }\n\n  override reInitialize(config: Partial<ThunderIDReactConfig>): Promise<boolean> {\n    return this.withLoading(async () => {\n      let isInitialized: boolean;\n\n      try {\n        await super.reInitialize(config as Partial<T>);\n        isInitialized = true;\n      } catch (error) {\n        throw new ThunderIDRuntimeError(\n          `Failed to check if the client is initialized: ${error instanceof Error ? error.message : String(error)}`,\n          'ThunderIDReactClient-reInitialize-RuntimeError-001',\n          'react',\n          'An error occurred while checking the initialization status of the client.',\n        );\n      }\n\n      return isInitialized;\n    });\n  }\n\n  override async updateUserProfile(): Promise<User> {\n    throw new Error('Not implemented');\n  }\n\n  override async getUser(): Promise<User> {\n    return extractUserClaimsFromIdToken(await this.getDecodedIdToken());\n  }\n\n  override async getDecodedIdToken(sessionId?: string): Promise<IdToken> {\n    return super.getDecodedIdToken(sessionId);\n  }\n\n  override async getIdToken(): Promise<string> {\n    return this.withLoading(async () => super.getIdToken());\n  }\n\n  override async getUserProfile(): Promise<UserProfile> {\n    return this.withLoading(async () => {\n      const claims: User = extractUserClaimsFromIdToken(await this.getDecodedIdToken());\n      return {\n        flattenedProfile: claims,\n        profile: claims,\n        schemas: [],\n      };\n    });\n  }\n\n  override isLoading(): boolean {\n    return this.loadingState;\n  }\n\n  override async isSignedIn(): Promise<boolean> {\n    return super.isSignedIn();\n  }\n\n  override async exchangeToken(config: TokenExchangeRequestConfig): Promise<TokenResponse | Response> {\n    return this.withLoading(async () => super.exchangeToken(config) as unknown as TokenResponse | Response);\n  }\n\n  override async signIn(...args: any[]): Promise<User | EmbeddedSignInFlowResponse> {\n    return this.withLoading(async () => {\n      const arg1: any = args[0];\n      const arg2: any = args[1];\n\n      const config: ThunderIDReactConfig | undefined = await this.ensureConfigData();\n\n      if (typeof arg1 === 'object' && arg1 !== null && arg1.callOnlyOnRedirect === true) {\n        return undefined as any;\n      }\n\n      if (\n        typeof arg1 === 'object' &&\n        arg1 !== null &&\n        !isEmpty(arg1) &&\n        ('executionId' in arg1 || 'applicationId' in arg1)\n      ) {\n        const authIdFromUrl: string = new URL(window.location.href).searchParams.get('authId') ?? '';\n        const authIdFromStorage: string =\n          ((await this.getStorageManager().getHybridDataParameter('authId')) as string) ?? '';\n        const authId: string = authIdFromUrl || authIdFromStorage;\n        const baseUrl: string = config?.baseUrl ?? '';\n\n        const response: EmbeddedSignInFlowResponse = await executeEmbeddedSignInFlow({\n          authId,\n          baseUrl,\n          payload: arg1,\n          url: resolveResourceEndpoint('flowExecute', config, arg2?.url),\n        });\n\n        if (\n          response &&\n          typeof response === 'object' &&\n          response.flowStatus === EmbeddedSignInFlowStatus.Complete &&\n          response.assertion\n        ) {\n          const decodedAssertion: {\n            [key: string]: unknown;\n            exp?: number;\n            iat?: number;\n            scope?: string;\n          } = await this.decodeJwtToken<{\n            [key: string]: unknown;\n            exp?: number;\n            iat?: number;\n            scope?: string;\n          }>(response.assertion);\n\n          const createdAt: number = decodedAssertion.iat ? decodedAssertion.iat * 1000 : Date.now();\n          const expiresIn: number =\n            decodedAssertion.exp && decodedAssertion.iat ? decodedAssertion.exp - decodedAssertion.iat : 3600;\n\n          await this.setSession({\n            access_token: response.assertion,\n            created_at: createdAt,\n            expires_in: expiresIn,\n            id_token: response.assertion,\n            scope: decodedAssertion.scope,\n            token_type: 'Bearer',\n          });\n\n          this.notifySignIn(extractUserClaimsFromIdToken(decodedAssertion as IdToken) as User);\n        }\n\n        return response;\n      }\n\n      return (await super.signIn(...args)) as unknown as User;\n    });\n  }\n\n  override async signInSilently(options?: SignInOptions): Promise<User | boolean> {\n    await this.ensureConfigData();\n\n    return super.signInSilently(options as Record<string, string | boolean>) as Promise<User | boolean>;\n  }\n\n  override async signUp(options?: SignUpOptions): Promise<void>;\n  override async signUp(payload: any): Promise<any>;\n  override async signUp(...args: any[]): Promise<void | any> {\n    const config: ThunderIDReactConfig = (await this.getStorageManager().getConfigData()) as ThunderIDReactConfig;\n    const firstArg: any = args[0];\n    const baseUrl: string = config?.baseUrl ?? '';\n\n    const authId: string = new URL(window.location.href).searchParams.get('authId') ?? '';\n\n    const response: any = await executeEmbeddedSignUpFlow({\n      authId,\n      baseUrl,\n      payload: typeof firstArg === 'object' && 'flowType' in firstArg ? {...firstArg, verbose: true} : firstArg,\n      url: resolveResourceEndpoint('flowExecute', config),\n    });\n\n    if (\n      response &&\n      typeof response === 'object' &&\n      response.flowStatus === EmbeddedSignUpFlowStatus.Complete &&\n      response.assertion\n    ) {\n      const decodedAssertion: {\n        [key: string]: unknown;\n        exp?: number;\n        iat?: number;\n        scope?: string;\n      } = await this.decodeJwtToken<{\n        [key: string]: unknown;\n        exp?: number;\n        iat?: number;\n        scope?: string;\n      }>(response.assertion);\n\n      const createdAt: number = decodedAssertion.iat ? decodedAssertion.iat * 1000 : Date.now();\n      const expiresIn: number =\n        decodedAssertion.exp && decodedAssertion.iat ? decodedAssertion.exp - decodedAssertion.iat : 3600;\n\n      await this.setSession({\n        access_token: response.assertion,\n        created_at: createdAt,\n        expires_in: expiresIn,\n        id_token: response.assertion,\n        scope: decodedAssertion.scope,\n        token_type: 'Bearer',\n      });\n\n      this.notifySignIn(extractUserClaimsFromIdToken(decodedAssertion as IdToken) as User);\n    }\n\n    return response;\n  }\n\n  override async recover(payload?: any): Promise<any> {\n    const config: ThunderIDReactConfig = (await this.getStorageManager().getConfigData()) as ThunderIDReactConfig;\n\n    return executeEmbeddedRecoveryFlow({\n      baseUrl: config?.baseUrl,\n      payload: {...payload, verbose: true},\n      url: resolveResourceEndpoint('flowExecute', config),\n    }) as any;\n  }\n\n  public override getStorageManager(): any {\n    return super.getStorageManager();\n  }\n\n  async request(requestConfig?: HttpRequestConfig): Promise<HttpResponse<any>> {\n    return super.httpRequest(requestConfig!) as Promise<HttpResponse<any>>;\n  }\n\n  async requestAll(requestConfigs?: HttpRequestConfig[]): Promise<HttpResponse<any>[]> {\n    return super.httpRequestAll(requestConfigs!) as Promise<HttpResponse<any>[]>;\n  }\n}\n\nexport default ThunderIDReactClient;\n"],"mappings":";;;;;AA2BA,IAAM,uBAAN,cAA0FA,2CAA0B;CAClH,AAAQ,eAAe;CAEvB,AAAQ;CAER,YAAY,aAAa,GAAG;AAC1B,QAAM,WAAW;;CAGnB,AAAQ,WAAW,SAAwB;AACzC,OAAK,eAAe;;CAGtB,MAAc,YAAqB,WAAqD;AACtF,OAAK,WAAW,KAAK;AACrB,MAAI;AAEF,UADwB,MAAM,WAAW;YAEjC;AACR,QAAK,WAAW,MAAM;;;;;;;;;;;CAY1B,MAAc,mBAA8D;EAC1E,MAAMC,SAA4C,MAAM,KAAK,mBAAmB,CAAC,eAAe;AAMhG,MAAI,EAFF,CAAC,UAAU,OAAO,KAAK,OAAO,CAAC,WAAW,KAAM,QAAQ,KAAK,mBAAmB,QAAQ,IAAI,CAAC,OAAO,YAEjF,CAAC,KAAK,kBACzB,QAAO;AAGT,QAAM,KAAK,WAAW,KAAK,kBAAkB;AAI7C,SAAQ,MAAM,KAAK,mBAAmB,CAAC,eAAe;;CAGxD,AAAS,WAAW,QAAgD;AAClE,SAAO,KAAK,YAAY,YAAY;AAClC,QAAK,oBAAoB;IACvB,GAAG;IACH,sBACE,QAAQ,gBAAgB,cAAc,eAAgB,QAAgB;IACzE;AAED,UAAO,MAAM,WAAW,KAAK,kBAAkC;IAC/D;;CAGJ,AAAS,aAAa,QAAyD;AAC7E,SAAO,KAAK,YAAY,YAAY;GAClC,IAAIC;AAEJ,OAAI;AACF,UAAM,MAAM,aAAa,OAAqB;AAC9C,oBAAgB;YACT,OAAO;AACd,UAAM,IAAIC,0CACR,iDAAiD,iBAAiB,QAAQ,MAAM,UAAU,OAAO,MAAM,IACvG,sDACA,SACA,4EACD;;AAGH,UAAO;IACP;;CAGJ,MAAe,oBAAmC;AAChD,QAAM,IAAI,MAAM,kBAAkB;;CAGpC,MAAe,UAAyB;AACtC,+DAAoC,MAAM,KAAK,mBAAmB,CAAC;;CAGrE,MAAe,kBAAkB,WAAsC;AACrE,SAAO,MAAM,kBAAkB,UAAU;;CAG3C,MAAe,aAA8B;AAC3C,SAAO,KAAK,YAAY,YAAY,MAAM,YAAY,CAAC;;CAGzD,MAAe,iBAAuC;AACpD,SAAO,KAAK,YAAY,YAAY;GAClC,MAAMC,+DAA4C,MAAM,KAAK,mBAAmB,CAAC;AACjF,UAAO;IACL,kBAAkB;IAClB,SAAS;IACT,SAAS,EAAE;IACZ;IACD;;CAGJ,AAAS,YAAqB;AAC5B,SAAO,KAAK;;CAGd,MAAe,aAA+B;AAC5C,SAAO,MAAM,YAAY;;CAG3B,MAAe,cAAc,QAAuE;AAClG,SAAO,KAAK,YAAY,YAAY,MAAM,cAAc,OAAO,CAAwC;;CAGzG,MAAe,OAAO,GAAG,MAAyD;AAChF,SAAO,KAAK,YAAY,YAAY;GAClC,MAAMC,OAAY,KAAK;GACvB,MAAMC,OAAY,KAAK;GAEvB,MAAML,SAA2C,MAAM,KAAK,kBAAkB;AAE9E,OAAI,OAAO,SAAS,YAAY,SAAS,QAAQ,KAAK,uBAAuB,KAC3E;AAGF,OACE,OAAO,SAAS,YAChB,SAAS,QACT,kCAAS,KAAK,KACb,iBAAiB,QAAQ,mBAAmB,OAC7C;IACA,MAAMM,gBAAwB,IAAI,IAAI,OAAO,SAAS,KAAK,CAAC,aAAa,IAAI,SAAS,IAAI;IAC1F,MAAMC,oBACF,MAAM,KAAK,mBAAmB,CAAC,uBAAuB,SAAS,IAAgB;IAInF,MAAMC,WAAuC,yDAAgC;KAC3E,QAJqB,iBAAiB;KAKtC,SAJsB,QAAQ,WAAW;KAKzC,SAAS;KACT,sDAA6B,eAAe,QAAQ,MAAM,IAAI;KAC/D,CAAC;AAEF,QACE,YACA,OAAO,aAAa,YACpB,SAAS,eAAeC,6CAAyB,YACjD,SAAS,WACT;KACA,MAAMC,mBAKF,MAAM,KAAK,eAKZ,SAAS,UAAU;KAEtB,MAAMC,YAAoB,iBAAiB,MAAM,iBAAiB,MAAM,MAAO,KAAK,KAAK;KACzF,MAAMC,YACJ,iBAAiB,OAAO,iBAAiB,MAAM,iBAAiB,MAAM,iBAAiB,MAAM;AAE/F,WAAM,KAAK,WAAW;MACpB,cAAc,SAAS;MACvB,YAAY;MACZ,YAAY;MACZ,UAAU,SAAS;MACnB,OAAO,iBAAiB;MACxB,YAAY;MACb,CAAC;AAEF,UAAK,mEAA0C,iBAA4B,CAAS;;AAGtF,WAAO;;AAGT,UAAQ,MAAM,MAAM,OAAO,GAAG,KAAK;IACnC;;CAGJ,MAAe,eAAe,SAAkD;AAC9E,QAAM,KAAK,kBAAkB;AAE7B,SAAO,MAAM,eAAe,QAA4C;;CAK1E,MAAe,OAAO,GAAG,MAAkC;EACzD,MAAMC,SAAgC,MAAM,KAAK,mBAAmB,CAAC,eAAe;EACpF,MAAMC,WAAgB,KAAK;EAC3B,MAAMC,UAAkB,QAAQ,WAAW;EAI3C,MAAMC,WAAgB,yDAAgC;GACpD,QAHqB,IAAI,IAAI,OAAO,SAAS,KAAK,CAAC,aAAa,IAAI,SAAS,IAAI;GAIjF;GACA,SAAS,OAAO,aAAa,YAAY,cAAc,WAAW;IAAC,GAAG;IAAU,SAAS;IAAK,GAAG;GACjG,sDAA6B,eAAe,OAAO;GACpD,CAAC;AAEF,MACE,YACA,OAAO,aAAa,YACpB,SAAS,eAAeC,6CAAyB,YACjD,SAAS,WACT;GACA,MAAMC,mBAKF,MAAM,KAAK,eAKZ,SAAS,UAAU;GAEtB,MAAMP,YAAoB,iBAAiB,MAAM,iBAAiB,MAAM,MAAO,KAAK,KAAK;GACzF,MAAMC,YACJ,iBAAiB,OAAO,iBAAiB,MAAM,iBAAiB,MAAM,iBAAiB,MAAM;AAE/F,SAAM,KAAK,WAAW;IACpB,cAAc,SAAS;IACvB,YAAY;IACZ,YAAY;IACZ,UAAU,SAAS;IACnB,OAAO,iBAAiB;IACxB,YAAY;IACb,CAAC;AAEF,QAAK,mEAA0C,iBAA4B,CAAS;;AAGtF,SAAO;;CAGT,MAAe,QAAQ,SAA6B;EAClD,MAAMC,SAAgC,MAAM,KAAK,mBAAmB,CAAC,eAAe;AAEpF,8DAAmC;GACjC,SAAS,QAAQ;GACjB,SAAS;IAAC,GAAG;IAAS,SAAS;IAAK;GACpC,sDAA6B,eAAe,OAAO;GACpD,CAAC;;CAGJ,AAAgB,oBAAyB;AACvC,SAAO,MAAM,mBAAmB;;CAGlC,MAAM,QAAQ,eAA+D;AAC3E,SAAO,MAAM,YAAY,cAAe;;CAG1C,MAAM,WAAW,gBAAoE;AACnF,SAAO,MAAM,eAAe,eAAgB;;;AAIhD,mCAAe"}

package/dist/cjs/components/presentation/ChangeCredential/BaseChangeCredential.cjs

@@ -7,8 +7,8 @@ const require_Typography = require('../../primitives/Typography/Typography.cjs')
 const require_Alert = require('../../primitives/Alert/Alert.cjs');
 const require_X = require('../../primitives/Icons/X.cjs');
 const require_PasswordField = require('../../primitives/PasswordField/PasswordField.cjs');
-const require_BaseChangeCredential_styles = require('./BaseChangeCredential.styles.cjs');
 const require_Check = require('../../primitives/Icons/Check.cjs');
+const require_BaseChangeCredential_styles = require('./BaseChangeCredential.styles.cjs');
 let __thunderid_browser = require("@thunderid/browser");
 __thunderid_browser = require_rolldown_runtime.__toESM(__thunderid_browser);
 let react = require("react");

package/dist/cjs/components/presentation/auth/AcceptInvite/BaseAcceptInvite.cjs

@@ -205,7 +205,7 @@ const BaseAcceptInvite = ({ executionId, inviteToken, onSubmit, onComplete, onEr
 		const errors = {};
 		const validateComponents = (comps) => {
 			comps.forEach((comp) => {
-				if ((comp.type === "PASSWORD_INPUT" || comp.type === "TEXT_INPUT" || comp.type === "EMAIL_INPUT" || comp.type === "PHONE_INPUT" || comp.type === "OTP_INPUT" || comp.type === "DATE_INPUT") && comp.ref) {
+				if ((comp.type === "PASSWORD_INPUT" || comp.type === "TEXT_INPUT" || comp.type === "EMAIL_INPUT" || comp.type === "PHONE_INPUT" || comp.type === "OTP_INPUT" || comp.type === "DATE_INPUT" || comp.type === "SELECT") && comp.ref) {
 					const value = formValues[comp.ref];
 					if (comp.required && (!value || value.trim() === "")) errors[comp.ref] = t("validations.required.field.error");
 					else if (value) {

package/dist/cjs/components/presentation/auth/AcceptInvite/BaseAcceptInvite.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"BaseAcceptInvite.cjs","names":["BaseAcceptInvite: FC<BaseAcceptInviteProps>","useThunderID","useTranslation","useTheme","customRenderers: ComponentRendererMap","ComponentRendererContext","styles: any","useStyles","challengeTokenRef: any","responseFieldErrors: FieldError[] | undefined","errors: Record<string, string>","touched: Record<string, boolean>","tokenValidationAttemptedRef: any","tempData: any","storageManager: any","handleError: any","errorMessage: string","extractErrorMessage","normalizeFlowResponseLocal: any","normalizeFlowResponse","components","response: any","handleInputChange: any","newErrors: any","handleInputBlur: any","validateForm: any","value: any","handleSubmit: any","validation: any","inputs: any","raw: any","purposes: any[]","ConsentConstants","payload: Record<string, any>","redirectURL: any","extractHeadings: any","title: string | undefined","subtitle: string | undefined","title","subtitle","filterHeadings: any","components: any","componentsWithoutHeadings: any","renderProps: BaseAcceptInviteRenderProps","CardPrimitive","cx","Spinner","Typography","AlertPrimitive","Button","renderInviteUserComponents"],"sources":["../../../../../../src/components/presentation/auth/AcceptInvite/BaseAcceptInvite.tsx"],"sourcesContent":["// Copyright 2025-2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\nimport {\n  ConsentConstants,\n  FieldError,\n  FlowExecutionError,\n  FlowMetadataResponse,\n  Preferences,\n  buildValidatorFromRules,\n} from '@thunderid/browser';\nimport {FC, ReactElement, ReactNode, useCallback, useContext, useEffect, useRef, useState} from 'react';\nimport useStyles from './BaseAcceptInvite.styles';\nimport ComponentRendererContext, {\n  ComponentRendererMap,\n} from '../../../../contexts/ComponentRenderer/ComponentRendererContext';\nimport useTheme from '../../../../contexts/Theme/useTheme';\nimport useThunderID from '../../../../contexts/ThunderID/useThunderID';\nimport {useOAuthCallback} from '../../../../hooks/useOAuthCallback';\nimport useTranslation from '../../../../hooks/useTranslation';\nimport {cx} from '../../../../styles/emotion';\nimport {normalizeFlowResponse, extractErrorMessage} from '../../../../utils/flowTransformer';\nimport {initiateOAuthRedirect} from '../../../../utils/oauth';\nimport AlertPrimitive from '../../../primitives/Alert/Alert';\nimport Button from '../../../primitives/Button/Button';\n// eslint-disable-next-line import/no-named-as-default\nimport CardPrimitive, {CardProps} from '../../../primitives/Card/Card';\nimport Spinner from '../../../primitives/Spinner/Spinner';\nimport Typography from '../../../primitives/Typography/Typography';\nimport {renderInviteUserComponents} from '../AuthOptionFactory';\n\n/**\n * Flow response structure from the backend.\n */\nexport interface AcceptInviteFlowResponse {\n  challengeToken?: string;\n  data?: {\n    additionalData?: Record<string, string>;\n    components?: any[];\n    fieldErrors?: FieldError[];\n    meta?: {\n      components?: any[];\n    };\n    redirectURL?: string;\n  };\n  error?: FlowExecutionError;\n  executionId: string;\n  flowStatus: 'INCOMPLETE' | 'COMPLETE' | 'ERROR';\n  type?: 'VIEW' | 'REDIRECTION';\n}\n\n/**\n * Render props for custom UI rendering of AcceptInvite.\n */\nexport interface BaseAcceptInviteRenderProps {\n  /**\n   * Additional data from the current flow step (e.g. consentPrompt for consent nodes).\n   */\n  additionalData: Record<string, any>;\n\n  /**\n   * Flow components from the current step.\n   */\n  components: any[];\n\n  /**\n   * API error (if any).\n   */\n  error?: Error | null;\n\n  /**\n   * Current flow ID from URL.\n   */\n  executionId?: string;\n\n  /**\n   * Field validation errors.\n   */\n  fieldErrors: Record<string, string>;\n\n  /**\n   * Navigate to sign in page.\n   */\n  goToSignIn?: () => void;\n\n  /**\n   * Function to handle input blur.\n   */\n  handleInputBlur: (name: string) => void;\n\n  /**\n   * Function to handle input changes.\n   */\n  handleInputChange: (name: string, value: string) => void;\n\n  /**\n   * Function to handle form submission.\n   */\n  handleSubmit: (component: any, data?: Record<string, any>) => Promise<void>;\n\n  /**\n   * Invite token from URL.\n   */\n  inviteToken?: string;\n\n  /**\n   * Whether the flow has completed successfully.\n   */\n  isComplete: boolean;\n\n  /**\n   * Loading state.\n   */\n  isLoading: boolean;\n\n  /**\n   * Whether the token validation failed.\n   */\n  isTokenInvalid: boolean;\n\n  /**\n   * Whether the form is valid.\n   */\n  isValid: boolean;\n\n  /**\n   * Whether the invite token is being validated.\n   */\n  isValidatingToken: boolean;\n\n  /**\n   * Flow metadata returned by the platform (v2 only). `null` while loading or unavailable.\n   */\n  meta: FlowMetadataResponse | null;\n\n  /**\n   * Subtitle for the current step.\n   */\n  subtitle?: string;\n\n  /**\n   * Title for the current step.\n   */\n  title?: string;\n\n  /**\n   * Touched fields.\n   */\n  touched: Record<string, boolean>;\n\n  /**\n   * Form values for the current step.\n   */\n  values: Record<string, string>;\n}\n\n/**\n * Props for the BaseAcceptInvite component.\n */\nexport interface BaseAcceptInviteProps {\n  /**\n   * Render props function for custom UI.\n   * If not provided, default UI will be rendered.\n   */\n  children?: (props: BaseAcceptInviteRenderProps) => ReactNode;\n\n  /**\n   * Custom CSS class name.\n   */\n  className?: string;\n\n  /**\n   * Flow ID from the invite link URL.\n   */\n  executionId?: string;\n\n  /**\n   * Invite token from the invite link URL.\n   */\n  inviteToken?: string;\n\n  /**\n   * Callback when the flow completes successfully.\n   */\n  onComplete?: () => void;\n\n  /**\n   * Callback when an error occurs.\n   */\n  onError?: (error: Error) => void;\n\n  /**\n   * Callback when the flow state changes.\n   */\n  onFlowChange?: (response: AcceptInviteFlowResponse) => void;\n\n  /**\n   * Callback to navigate to sign in page.\n   */\n  onGoToSignIn?: () => void;\n\n  /**\n   * Function to submit flow step data.\n   * This makes a request to the flow/execute endpoint.\n   */\n  onSubmit: (payload: Record<string, any>) => Promise<AcceptInviteFlowResponse>;\n\n  /**\n   * Component-level preferences to override global i18n and theme settings.\n   * Preferences are deep-merged with global ones, with component preferences\n   * taking precedence. Affects this component and all its descendants.\n   */\n  preferences?: Preferences;\n\n  /**\n   * Whether to show the subtitle.\n   */\n  showSubtitle?: boolean;\n\n  /**\n   * Whether to show the title.\n   */\n  showTitle?: boolean;\n\n  /**\n   * Size variant for the component.\n   */\n  size?: 'small' | 'medium' | 'large';\n\n  /**\n   * Theme variant for the component.\n   */\n  variant?: CardProps['variant'];\n}\n\n/**\n * Base component for accept invite flow (end-user).\n * Handles the flow logic for validating an invite token and setting a password.\n *\n * When no children are provided, renders a default UI with:\n * - Loading spinner during token validation\n * - Error alerts for invalid/expired tokens\n * - Password form with validation\n * - Success state with sign-in redirect\n *\n * Flow steps handled:\n * 1. Validate invite token (automatic on mount)\n * 2. Password input\n * 3. Flow completion\n */\nconst BaseAcceptInvite: FC<BaseAcceptInviteProps> = ({\n  executionId,\n  inviteToken,\n  onSubmit,\n  onComplete,\n  onError,\n  onFlowChange,\n  onGoToSignIn,\n  className = '',\n  children,\n  preferences,\n  size = 'medium',\n  variant = 'outlined',\n  showTitle = true,\n  showSubtitle = true,\n}: BaseAcceptInviteProps): ReactElement => {\n  const {meta, isInitialized, getStorageManager, vendor} = useThunderID();\n  const {t} = useTranslation(preferences?.i18n);\n  const {theme} = useTheme();\n  const customRenderers: ComponentRendererMap = useContext(ComponentRendererContext);\n  const styles: any = useStyles(theme, theme.vars.colors.text.primary);\n  const [isLoading, setIsLoading] = useState(false);\n  const [isValidatingToken, setIsValidatingToken] = useState(true);\n  const [isTokenInvalid, setIsTokenInvalid] = useState(false);\n  const [isComplete, setIsComplete] = useState(false);\n  const [currentFlow, setCurrentFlow] = useState<AcceptInviteFlowResponse | null>(null);\n  const [apiError, setApiError] = useState<Error | null>(null);\n  const [formValues, setFormValues] = useState<Record<string, string>>({});\n  const [formErrors, setFormErrors] = useState<Record<string, string>>({});\n  const [touchedFields, setTouchedFields] = useState<Record<string, boolean>>({});\n  const [isFormValid, setIsFormValid] = useState(true);\n  const [isStorageReady, setIsStorageReady] = useState(false);\n  const challengeTokenRef: any = useRef<string | null>(null);\n\n  /**\n   * Project server-side validation errors from the most recent flow response into\n   * the local formErrors state. First error per field wins; affected fields are\n   * marked touched so errors render immediately.\n   */\n  useEffect(() => {\n    const responseFieldErrors: FieldError[] | undefined = (currentFlow?.data as any)?.fieldErrors;\n    if (!responseFieldErrors || responseFieldErrors.length === 0) {\n      return;\n    }\n    const errors: Record<string, string> = {};\n    const touched: Record<string, boolean> = {};\n    for (const fe of responseFieldErrors) {\n      if (!(fe.identifier in errors)) {\n        errors[fe.identifier] = fe.message;\n        touched[fe.identifier] = true;\n      }\n    }\n    setFormErrors(errors);\n    setTouchedFields((prev: Record<string, boolean>) => ({...prev, ...touched}));\n  }, [currentFlow]);\n\n  const tokenValidationAttemptedRef: any = useRef(false);\n\n  /**\n   * Restore any challenge token persisted before an OAuth redirect.\n   * Waits for SDK initialization before reading from storage.\n   */\n  useEffect(() => {\n    if (!isInitialized) return;\n\n    (async (): Promise<void> => {\n      try {\n        const storageManager: any = await getStorageManager();\n        const tempData: any = await storageManager?.getTemporaryData();\n        if (tempData?.challengeToken) {\n          challengeTokenRef.current = tempData.challengeToken as string;\n        }\n      } finally {\n        setIsStorageReady(true);\n      }\n    })();\n  }, [isInitialized]);\n\n  /**\n   * Updates challengeTokenRef immediately (stale-closure safe) and persists via\n   * the provider's StorageManager so the token survives OAuth redirects.\n   */\n  const setChallengeToken = async (challengeToken: string | null): Promise<void> => {\n    challengeTokenRef.current = challengeToken;\n    const storageManager: any = await getStorageManager();\n    if (storageManager) {\n      if (challengeToken) {\n        await storageManager.setTemporaryDataParameter('challengeToken', challengeToken);\n      } else {\n        await storageManager.removeTemporaryDataParameter('challengeToken');\n      }\n    }\n  };\n\n  /**\n   * Handle error responses and extract meaningful error messages.\n   * Uses the transformer's extractErrorMessage function for consistency.\n   */\n  const handleError: any = useCallback(\n    (error: any) => {\n      const errorMessage: string = extractErrorMessage(error, t, 'components.acceptInvite.errors.generic');\n\n      // Set the API error state\n      setApiError(error instanceof Error ? error : new Error(errorMessage));\n\n      // Call the onError callback if provided\n      onError?.(error instanceof Error ? error : new Error(errorMessage));\n    },\n    [t, onError],\n  );\n\n  /**\n   * Normalize flow response to ensure component-driven format.\n   * Transforms data.meta.components to data.components.\n   */\n  const normalizeFlowResponseLocal: any = useCallback(\n    (response: AcceptInviteFlowResponse): AcceptInviteFlowResponse => {\n      if (!response?.data?.meta?.components) {\n        return response;\n      }\n\n      try {\n        const {components} = normalizeFlowResponse(\n          response,\n          t,\n          {\n            defaultErrorKey: 'components.acceptInvite.errors.generic',\n            resolveTranslations: false,\n          },\n          meta,\n        );\n\n        return {\n          ...response,\n          data: {\n            ...response.data,\n            components: components as any,\n          },\n        };\n      } catch {\n        // If transformer throws (e.g., error response), return as-is\n        return response;\n      }\n    },\n    [t, children],\n  );\n\n  /**\n   * Handle OAuth callback when returning from OAuth provider.\n   * This hook processes the authorization code and continues the flow.\n   */\n  useOAuthCallback({\n    currentExecutionId: executionId ?? null,\n    executionIdStorageKey: `${vendor}_execution_id`,\n    isInitialized: isStorageReady,\n    onComplete: () => {\n      setIsValidatingToken(false);\n      onComplete?.();\n    },\n    onError: (error: any) => {\n      if (!error?.flowStatus) {\n        setIsTokenInvalid(true);\n      }\n      setIsValidatingToken(false);\n      handleError(error);\n    },\n    onFlowChange: (response: any) => {\n      onFlowChange?.(response);\n      if (response.flowStatus === 'COMPLETE') {\n        setIsComplete(true);\n        const completionComponents: any[] = response.data?.components || response.data?.meta?.components || [];\n        if (completionComponents.length > 0) {\n          setCurrentFlow(response);\n        }\n      } else {\n        // Initialize currentFlow for next steps if not complete\n        setCurrentFlow(response);\n        setFormValues({});\n        setFormErrors({});\n        setTouchedFields({});\n      }\n    },\n    onProcessingStart: () => {\n      setIsValidatingToken(true);\n    },\n    onSubmit: async (payload: any) => {\n      const rawResponse: any = await onSubmit({\n        ...payload,\n        ...(challengeTokenRef.current ? {challengeToken: challengeTokenRef.current} : {}),\n      });\n      const response: any = normalizeFlowResponseLocal(rawResponse);\n      await setChallengeToken(response.challengeToken ?? null);\n      return response;\n    },\n    tokenValidationAttemptedRef,\n  });\n\n  /**\n   * Handle input value changes.\n   */\n  const handleInputChange: any = useCallback((name: string, value: string) => {\n    setFormValues((prev: any) => ({...prev, [name]: value}));\n    // Clear error when user starts typing\n    setFormErrors((prev: any) => {\n      const newErrors: any = {...prev};\n      delete newErrors[name];\n      return newErrors;\n    });\n    setIsFormValid(true);\n  }, []);\n\n  /**\n   * Handle input blur.\n   */\n  const handleInputBlur: any = useCallback((name: string) => {\n    setTouchedFields((prev: any) => ({...prev, [name]: true}));\n  }, []);\n\n  /**\n   * Validate required fields based on components.\n   */\n  const validateForm: any = useCallback(\n    (components: any[]): {errors: Record<string, string>; isValid: boolean} => {\n      const errors: Record<string, string> = {};\n\n      const validateComponents = (comps: any[]): any => {\n        comps.forEach((comp: any) => {\n          if (\n            (comp.type === 'PASSWORD_INPUT' ||\n              comp.type === 'TEXT_INPUT' ||\n              comp.type === 'EMAIL_INPUT' ||\n              comp.type === 'PHONE_INPUT' ||\n              comp.type === 'OTP_INPUT' ||\n              comp.type === 'DATE_INPUT') &&\n            comp.ref\n          ) {\n            const value: any = formValues[comp.ref];\n            if (comp.required && (!value || value.trim() === '')) {\n              errors[comp.ref] = t('validations.required.field.error');\n            } else if (value) {\n              // Evaluate declarative validation rules from meta.components[].validation.\n              const ruleValidator = buildValidatorFromRules(comp.validation);\n              if (ruleValidator) {\n                const message = ruleValidator(value);\n                if (message) {\n                  errors[comp.ref] = t(message);\n                }\n              }\n            }\n          }\n          if (comp.components && Array.isArray(comp.components)) {\n            validateComponents(comp.components);\n          }\n        });\n      };\n\n      validateComponents(components);\n\n      return {errors, isValid: Object.keys(errors).length === 0};\n    },\n    [formValues, t],\n  );\n\n  /**\n   * Handle form submission.\n   */\n  const handleSubmit: any = useCallback(\n    async (component: any, data?: Record<string, any>) => {\n      if (!currentFlow) {\n        return;\n      }\n\n      // Validate form before submission\n      const components: any = currentFlow.data?.components || [];\n      const validation: any = validateForm(components);\n\n      if (!validation.isValid) {\n        setIsFormValid(false);\n        setFormErrors(validation.errors);\n        // Mark all fields as touched\n        const touched: Record<string, boolean> = {};\n        Object.keys(validation.errors).forEach((key: any) => {\n          touched[key] = true;\n        });\n        setTouchedFields((prev: any) => ({...prev, ...touched}));\n        return;\n      }\n\n      setIsLoading(true);\n      setApiError(null);\n\n      try {\n        // Build payload with form values\n        const inputs: any = {...(data || formValues)};\n\n        // Auto-compile consent_decisions if we are on a consent prompt step.\n        // Mirrors the same logic in SignIn to ensure the server receives a\n        // properly structured JSON payload rather than individual checkbox keys.\n        const currentAdditionalData = (currentFlow?.data?.additionalData as Record<string, any>) ?? {};\n        if (currentAdditionalData['consentPrompt']) {\n          try {\n            const raw: any = currentAdditionalData['consentPrompt'];\n            const purposes: any[] = typeof raw === 'string' ? JSON.parse(raw) : raw.purposes || raw;\n            const isDeny = component?.variant?.toLowerCase() !== 'primary';\n            const decisions = {\n              approved: !isDeny,\n              ...(isDeny ? {reason: ConsentConstants.REASON_USER_DENIED} : {}),\n              purposes: purposes.map((p: any) => ({\n                approved: !isDeny,\n                purposeName: p.purposeName,\n                elements: [\n                  ...(p.essential || []).map((e: any) => ({approved: !isDeny, name: e.name})),\n                  ...(p.optional || []).map((e: any) => {\n                    const key = `__consent_opt__${p.purposeId}__${e.name}`;\n                    return {approved: !isDeny && inputs[key] === 'true', name: e.name};\n                  }),\n                ],\n              })),\n            };\n            inputs.consent_decisions = JSON.stringify(decisions);\n            Object.keys(inputs).forEach((k: string) => {\n              if (k.startsWith('__consent_opt__')) delete inputs[k];\n            });\n          } catch {\n            // Leave inputs as-is if consent building fails\n          }\n        }\n\n        const payload: Record<string, any> = {\n          executionId: currentFlow.executionId,\n          inputs,\n          verbose: true,\n          ...(challengeTokenRef.current ? {challengeToken: challengeTokenRef.current} : {}),\n        };\n\n        // Add action ID if component has one\n        if (component?.id) {\n          payload['action'] = component.id;\n        }\n\n        const rawResponse: any = await onSubmit(payload);\n        const response: any = normalizeFlowResponseLocal(rawResponse);\n        onFlowChange?.(response);\n\n        await setChallengeToken(response.challengeToken ?? null);\n\n        // Handle OAuth redirect response\n        if (response.type === 'REDIRECTION') {\n          const redirectURL: any = response.data?.redirectURL || response?.redirectURL;\n          if (redirectURL && typeof window !== 'undefined') {\n            // Initiate OAuth redirect with secure state management\n            initiateOAuthRedirect(redirectURL, vendor);\n            return;\n          }\n        }\n\n        // Check for completion\n        if (response.flowStatus === 'COMPLETE') {\n          setIsComplete(true);\n          const completionComponents: any[] = response.data?.components || response.data?.meta?.components || [];\n          if (completionComponents.length > 0) {\n            setCurrentFlow(response);\n          } else {\n            onComplete?.();\n          }\n          return;\n        }\n\n        // Check for error status\n        if (response.flowStatus === 'ERROR') {\n          handleError(response);\n          return;\n        }\n\n        // Update current flow and reset form state for next step, preserving input values\n        setCurrentFlow(response);\n        setFormErrors({});\n        setTouchedFields({});\n\n        // Display error from INCOMPLETE response\n        if (response?.error) {\n          handleError(response);\n        }\n      } catch (err) {\n        handleError(err);\n      } finally {\n        setIsLoading(false);\n      }\n    },\n    [\n      currentFlow,\n      formValues,\n      validateForm,\n      onSubmit,\n      onFlowChange,\n      onComplete,\n      handleError,\n      normalizeFlowResponseLocal,\n    ],\n  );\n\n  /**\n   * reset form values, errors, and touched fields to initial state\n   */\n  const resetForm = useCallback(() => {\n    setFormValues({});\n    setFormErrors({});\n    setTouchedFields({});\n  }, []);\n\n  /**\n   * Validate invite token on component mount.\n   */\n  useEffect(() => {\n    // Skip validation if already validated\n    if (tokenValidationAttemptedRef.current) {\n      return;\n    }\n\n    // If an OAuth code is present, this is a return from an OAuth redirect.\n    // useOAuthCallback will handle the code — skip the initial invite validation.\n    const urlParams: URLSearchParams = new URLSearchParams(window.location.search);\n    if (urlParams.get('code')) {\n      return;\n    }\n\n    // Validate required params for initial invite link\n    if (!executionId || !inviteToken) {\n      setIsValidatingToken(false);\n      setIsTokenInvalid(true);\n      handleError(new Error('Invalid invite link. Missing executionId or inviteToken.'));\n      return;\n    }\n\n    tokenValidationAttemptedRef.current = true;\n\n    (async (): Promise<void> => {\n      setIsValidatingToken(true);\n      setApiError(null);\n\n      try {\n        // Store executionId in sessionStorage for OAuth callback\n        if (executionId) {\n          sessionStorage.setItem(`${vendor}_execution_id`, executionId);\n        }\n\n        // Send the invite token to validate and continue the flow\n        const payload: any = {\n          executionId,\n          inputs: {\n            inviteToken,\n          },\n          verbose: true,\n        };\n\n        const rawResponse: any = await onSubmit(payload);\n        const response: any = normalizeFlowResponseLocal(rawResponse);\n        onFlowChange?.(response);\n\n        await setChallengeToken(response.challengeToken ?? null);\n\n        // Check for error (invalid token)\n        if (response.flowStatus === 'ERROR') {\n          setIsTokenInvalid(true);\n          handleError(response);\n          return;\n        }\n\n        // Token is valid, show the password form\n        setCurrentFlow(response);\n\n        // Display error from INCOMPLETE response\n        if (response?.error) {\n          handleError(response);\n        }\n      } catch (err) {\n        setIsTokenInvalid(true);\n        handleError(err);\n      } finally {\n        setIsValidatingToken(false);\n      }\n    })();\n  }, [executionId, inviteToken, onSubmit, onFlowChange, handleError, normalizeFlowResponseLocal]);\n\n  /**\n   * Extract title and subtitle from components.\n   */\n  const extractHeadings: any = useCallback((components: any[]): {subtitle?: string; title?: string} => {\n    let title: string | undefined;\n    let subtitle: string | undefined;\n\n    components.forEach((comp: any) => {\n      if (comp.type === 'TEXT') {\n        if (comp.variant === 'HEADING_1' && !title) {\n          title = comp.label;\n        } else if ((comp.variant === 'HEADING_2' || comp.variant === 'SUBTITLE_1') && !subtitle) {\n          subtitle = comp.label;\n        }\n      }\n    });\n\n    return {subtitle, title};\n  }, []);\n\n  /**\n   * Filter out heading components for default rendering.\n   */\n  const filterHeadings: any = useCallback(\n    (components: any[]): any[] =>\n      components.filter(\n        (comp: any) => !(comp.type === 'TEXT' && (comp.variant === 'HEADING_1' || comp.variant === 'HEADING_2')),\n      ),\n    [],\n  );\n\n  // Get components from normalized response, with fallback to meta.components\n  const components: any = currentFlow?.data?.components || currentFlow?.data?.meta?.components || [];\n  const {title, subtitle} = extractHeadings(components);\n  const componentsWithoutHeadings: any = filterHeadings(components);\n  const additionalData: Record<string, any> = (currentFlow?.data?.additionalData as Record<string, any>) ?? {};\n\n  // Render props\n  const renderProps: BaseAcceptInviteRenderProps = {\n    additionalData,\n    components,\n    error: apiError,\n    executionId,\n    fieldErrors: formErrors,\n    goToSignIn: onGoToSignIn,\n    handleInputBlur,\n    handleInputChange,\n    handleSubmit,\n    inviteToken,\n    isComplete,\n    isLoading,\n    isTokenInvalid,\n    isValid: isFormValid,\n    isValidatingToken,\n    meta,\n    subtitle,\n    title,\n    touched: touchedFields,\n    values: formValues,\n  };\n\n  // If children render prop is provided, use it for custom UI\n  if (children) {\n    return <div className={className}>{children(renderProps)}</div>;\n  }\n\n  // Default rendering\n\n  // Loading state during token validation\n  if (isValidatingToken) {\n    return (\n      <CardPrimitive className={cx(className, styles.card)} variant={variant}>\n        <CardPrimitive.Content>\n          <div className={(styles as Record<string, string>)['tokenValidationContainer']}>\n            <Spinner size=\"medium\" />\n            <Typography variant=\"body1\">Validating your invite link...</Typography>\n          </div>\n        </CardPrimitive.Content>\n      </CardPrimitive>\n    );\n  }\n\n  // Invalid token state\n  if (isTokenInvalid) {\n    return (\n      <CardPrimitive className={cx(className, styles.card)} variant={variant}>\n        <CardPrimitive.Header className={styles.header}>\n          <CardPrimitive.Title level={2} className={styles.title}>\n            Invalid Invite Link\n          </CardPrimitive.Title>\n        </CardPrimitive.Header>\n        <CardPrimitive.Content>\n          <AlertPrimitive variant=\"error\">\n            <AlertPrimitive.Title>Unable to verify invite</AlertPrimitive.Title>\n            <AlertPrimitive.Description>\n              {apiError?.message ||\n                'This invite link is invalid or has expired. Please contact your administrator for a new invite.'}\n            </AlertPrimitive.Description>\n          </AlertPrimitive>\n          {onGoToSignIn && (\n            <div className={(styles as Record<string, string>)['goToSignInContainer']}>\n              <Button variant=\"outline\" onClick={onGoToSignIn}>\n                Go to Sign In\n              </Button>\n            </div>\n          )}\n        </CardPrimitive.Content>\n      </CardPrimitive>\n    );\n  }\n\n  // Flow components (password form)\n  return (\n    <CardPrimitive className={cx(className, styles.card)} variant={variant}>\n      {(showTitle || showSubtitle) && (title || subtitle) && (\n        <CardPrimitive.Header className={styles.header}>\n          {showTitle && title && (\n            <CardPrimitive.Title level={2} className={styles.title}>\n              {title}\n            </CardPrimitive.Title>\n          )}\n          {showSubtitle && subtitle && (\n            <Typography variant=\"body1\" className={styles.subtitle}>\n              {subtitle}\n            </Typography>\n          )}\n        </CardPrimitive.Header>\n      )}\n      <CardPrimitive.Content>\n        {apiError && (\n          <div className={(styles as Record<string, string>)['errorContainer']}>\n            <AlertPrimitive variant=\"error\">\n              <AlertPrimitive.Description>{apiError.message}</AlertPrimitive.Description>\n            </AlertPrimitive>\n          </div>\n        )}\n        <div>\n          {componentsWithoutHeadings && componentsWithoutHeadings.length > 0\n            ? renderInviteUserComponents(\n                componentsWithoutHeadings,\n                formValues,\n                touchedFields,\n                formErrors,\n                isLoading,\n                isFormValid,\n                resetForm,\n                handleInputChange,\n                {\n                  _customRenderers: customRenderers,\n                  _theme: theme,\n                  onInputBlur: handleInputBlur,\n                  onSubmit: handleSubmit,\n                  size,\n                  variant,\n                },\n              )\n            : !isLoading && (\n                <AlertPrimitive variant=\"warning\">\n                  <Typography variant=\"body1\">No form components available</Typography>\n                </AlertPrimitive>\n              )}\n          {isLoading && (\n            <div className={(styles as Record<string, string>)['centeredSpinnerContainerSmall']}>\n              <Spinner size=\"small\" />\n            </div>\n          )}\n        </div>\n        {onGoToSignIn && (\n          <div className={(styles as Record<string, string>)['alreadyHaveAccountContainer']}>\n            <Typography variant=\"body2\">\n              Already have an account?{' '}\n              <Button\n                variant=\"text\"\n                onClick={onGoToSignIn}\n                className={(styles as Record<string, string>)['signInInlineButton']}\n              >\n                Sign In\n              </Button>\n            </Typography>\n          </div>\n        )}\n      </CardPrimitive.Content>\n    </CardPrimitive>\n  );\n};\n\nexport default BaseAcceptInvite;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA0PA,MAAMA,oBAA+C,EACnD,aACA,aACA,UACA,YACA,SACA,cACA,cACA,YAAY,IACZ,UACA,aACA,OAAO,UACP,UAAU,YACV,YAAY,MACZ,eAAe,WAC0B;CACzC,MAAM,EAAC,MAAM,eAAe,mBAAmB,WAAUC,8BAAc;CACvE,MAAM,EAAC,MAAKC,+BAAe,aAAa,KAAK;CAC7C,MAAM,EAAC,UAASC,0BAAU;CAC1B,MAAMC,wCAAmDC,yCAAyB;CAClF,MAAMC,SAAcC,wCAAU,OAAO,MAAM,KAAK,OAAO,KAAK,QAAQ;CACpE,MAAM,CAAC,WAAW,oCAAyB,MAAM;CACjD,MAAM,CAAC,mBAAmB,4CAAiC,KAAK;CAChE,MAAM,CAAC,gBAAgB,yCAA8B,MAAM;CAC3D,MAAM,CAAC,YAAY,qCAA0B,MAAM;CACnD,MAAM,CAAC,aAAa,sCAA4D,KAAK;CACrF,MAAM,CAAC,UAAU,mCAAsC,KAAK;CAC5D,MAAM,CAAC,YAAY,qCAAkD,EAAE,CAAC;CACxE,MAAM,CAAC,YAAY,qCAAkD,EAAE,CAAC;CACxE,MAAM,CAAC,eAAe,wCAAsD,EAAE,CAAC;CAC/E,MAAM,CAAC,aAAa,sCAA2B,KAAK;CACpD,MAAM,CAAC,gBAAgB,yCAA8B,MAAM;CAC3D,MAAMC,sCAA+C,KAAK;;;;;;AAO1D,4BAAgB;EACd,MAAMC,uBAAiD,aAAa,OAAc;AAClF,MAAI,CAAC,uBAAuB,oBAAoB,WAAW,EACzD;EAEF,MAAMC,SAAiC,EAAE;EACzC,MAAMC,UAAmC,EAAE;AAC3C,OAAK,MAAM,MAAM,oBACf,KAAI,EAAE,GAAG,cAAc,SAAS;AAC9B,UAAO,GAAG,cAAc,GAAG;AAC3B,WAAQ,GAAG,cAAc;;AAG7B,gBAAc,OAAO;AACrB,oBAAkB,UAAmC;GAAC,GAAG;GAAM,GAAG;GAAQ,EAAE;IAC3E,CAAC,YAAY,CAAC;CAEjB,MAAMC,gDAA0C,MAAM;;;;;AAMtD,4BAAgB;AACd,MAAI,CAAC,cAAe;AAEpB,GAAC,YAA2B;AAC1B,OAAI;IAEF,MAAMC,WAAgB,OADM,MAAM,mBAAmB,GACT,kBAAkB;AAC9D,QAAI,UAAU,eACZ,mBAAkB,UAAU,SAAS;aAE/B;AACR,sBAAkB,KAAK;;MAEvB;IACH,CAAC,cAAc,CAAC;;;;;CAMnB,MAAM,oBAAoB,OAAO,mBAAiD;AAChF,oBAAkB,UAAU;EAC5B,MAAMC,iBAAsB,MAAM,mBAAmB;AACrD,MAAI,eACF,KAAI,eACF,OAAM,eAAe,0BAA0B,kBAAkB,eAAe;MAEhF,OAAM,eAAe,6BAA6B,iBAAiB;;;;;;CASzE,MAAMC,sCACH,UAAe;EACd,MAAMC,eAAuBC,4CAAoB,OAAO,GAAG,yCAAyC;AAGpG,cAAY,iBAAiB,QAAQ,QAAQ,IAAI,MAAM,aAAa,CAAC;AAGrE,YAAU,iBAAiB,QAAQ,QAAQ,IAAI,MAAM,aAAa,CAAC;IAErE,CAAC,GAAG,QAAQ,CACb;;;;;CAMD,MAAMC,qDACH,aAAiE;AAChE,MAAI,CAAC,UAAU,MAAM,MAAM,WACzB,QAAO;AAGT,MAAI;GACF,MAAM,EAAC,6BAAcC,8CACnB,UACA,GACA;IACE,iBAAiB;IACjB,qBAAqB;IACtB,EACD,KACD;AAED,UAAO;IACL,GAAG;IACH,MAAM;KACJ,GAAG,SAAS;KACZ,YAAYC;KACb;IACF;UACK;AAEN,UAAO;;IAGX,CAAC,GAAG,SAAS,CACd;;;;;AAMD,2CAAiB;EACf,oBAAoB,eAAe;EACnC,uBAAuB,GAAG,OAAO;EACjC,eAAe;EACf,kBAAkB;AAChB,wBAAqB,MAAM;AAC3B,iBAAc;;EAEhB,UAAU,UAAe;AACvB,OAAI,CAAC,OAAO,WACV,mBAAkB,KAAK;AAEzB,wBAAqB,MAAM;AAC3B,eAAY,MAAM;;EAEpB,eAAe,aAAkB;AAC/B,kBAAe,SAAS;AACxB,OAAI,SAAS,eAAe,YAAY;AACtC,kBAAc,KAAK;AAEnB,SADoC,SAAS,MAAM,cAAc,SAAS,MAAM,MAAM,cAAc,EAAE,EAC7E,SAAS,EAChC,gBAAe,SAAS;UAErB;AAEL,mBAAe,SAAS;AACxB,kBAAc,EAAE,CAAC;AACjB,kBAAc,EAAE,CAAC;AACjB,qBAAiB,EAAE,CAAC;;;EAGxB,yBAAyB;AACvB,wBAAqB,KAAK;;EAE5B,UAAU,OAAO,YAAiB;GAKhC,MAAMC,WAAgB,2BAJG,MAAM,SAAS;IACtC,GAAG;IACH,GAAI,kBAAkB,UAAU,EAAC,gBAAgB,kBAAkB,SAAQ,GAAG,EAAE;IACjF,CAAC,CAC2D;AAC7D,SAAM,kBAAkB,SAAS,kBAAkB,KAAK;AACxD,UAAO;;EAET;EACD,CAAC;;;;CAKF,MAAMC,4CAAsC,MAAc,UAAkB;AAC1E,iBAAe,UAAe;GAAC,GAAG;IAAO,OAAO;GAAM,EAAE;AAExD,iBAAe,SAAc;GAC3B,MAAMC,YAAiB,EAAC,GAAG,MAAK;AAChC,UAAO,UAAU;AACjB,UAAO;IACP;AACF,iBAAe,KAAK;IACnB,EAAE,CAAC;;;;CAKN,MAAMC,0CAAoC,SAAiB;AACzD,oBAAkB,UAAe;GAAC,GAAG;IAAO,OAAO;GAAK,EAAE;IACzD,EAAE,CAAC;;;;CAKN,MAAMC,uCACH,iBAA0E;EACzE,MAAMf,SAAiC,EAAE;EAEzC,MAAM,sBAAsB,UAAsB;AAChD,SAAM,SAAS,SAAc;AAC3B,SACG,KAAK,SAAS,oBACb,KAAK,SAAS,gBACd,KAAK,SAAS,iBACd,KAAK,SAAS,iBACd,KAAK,SAAS,eACd,KAAK,SAAS,iBAChB,KAAK,KACL;KACA,MAAMgB,QAAa,WAAW,KAAK;AACnC,SAAI,KAAK,aAAa,CAAC,SAAS,MAAM,MAAM,KAAK,IAC/C,QAAO,KAAK,OAAO,EAAE,mCAAmC;cAC/C,OAAO;MAEhB,MAAM,iEAAwC,KAAK,WAAW;AAC9D,UAAI,eAAe;OACjB,MAAM,UAAU,cAAc,MAAM;AACpC,WAAI,QACF,QAAO,KAAK,OAAO,EAAE,QAAQ;;;;AAKrC,QAAI,KAAK,cAAc,MAAM,QAAQ,KAAK,WAAW,CACnD,oBAAmB,KAAK,WAAW;KAErC;;AAGJ,qBAAmBN,aAAW;AAE9B,SAAO;GAAC;GAAQ,SAAS,OAAO,KAAK,OAAO,CAAC,WAAW;GAAE;IAE5D,CAAC,YAAY,EAAE,CAChB;;;;CAKD,MAAMO,sCACJ,OAAO,WAAgB,SAA+B;AACpD,MAAI,CAAC,YACH;EAKF,MAAMC,aAAkB,aADA,YAAY,MAAM,cAAc,EAAE,CACV;AAEhD,MAAI,CAAC,WAAW,SAAS;AACvB,kBAAe,MAAM;AACrB,iBAAc,WAAW,OAAO;GAEhC,MAAMjB,UAAmC,EAAE;AAC3C,UAAO,KAAK,WAAW,OAAO,CAAC,SAAS,QAAa;AACnD,YAAQ,OAAO;KACf;AACF,qBAAkB,UAAe;IAAC,GAAG;IAAM,GAAG;IAAQ,EAAE;AACxD;;AAGF,eAAa,KAAK;AAClB,cAAY,KAAK;AAEjB,MAAI;GAEF,MAAMkB,SAAc,EAAC,GAAI,QAAQ,YAAY;GAK7C,MAAM,wBAAyB,aAAa,MAAM,kBAA0C,EAAE;AAC9F,OAAI,sBAAsB,iBACxB,KAAI;IACF,MAAMC,MAAW,sBAAsB;IACvC,MAAMC,WAAkB,OAAO,QAAQ,WAAW,KAAK,MAAM,IAAI,GAAG,IAAI,YAAY;IACpF,MAAM,SAAS,WAAW,SAAS,aAAa,KAAK;IACrD,MAAM,YAAY;KAChB,UAAU,CAAC;KACX,GAAI,SAAS,EAAC,QAAQC,qCAAiB,oBAAmB,GAAG,EAAE;KAC/D,UAAU,SAAS,KAAK,OAAY;MAClC,UAAU,CAAC;MACX,aAAa,EAAE;MACf,UAAU,CACR,IAAI,EAAE,aAAa,EAAE,EAAE,KAAK,OAAY;OAAC,UAAU,CAAC;OAAQ,MAAM,EAAE;OAAK,EAAE,EAC3E,IAAI,EAAE,YAAY,EAAE,EAAE,KAAK,MAAW;OACpC,MAAM,MAAM,kBAAkB,EAAE,UAAU,IAAI,EAAE;AAChD,cAAO;QAAC,UAAU,CAAC,UAAU,OAAO,SAAS;QAAQ,MAAM,EAAE;QAAK;QAClE,CACH;MACF,EAAE;KACJ;AACD,WAAO,oBAAoB,KAAK,UAAU,UAAU;AACpD,WAAO,KAAK,OAAO,CAAC,SAAS,MAAc;AACzC,SAAI,EAAE,WAAW,kBAAkB,CAAE,QAAO,OAAO;MACnD;WACI;GAKV,MAAMC,UAA+B;IACnC,aAAa,YAAY;IACzB;IACA,SAAS;IACT,GAAI,kBAAkB,UAAU,EAAC,gBAAgB,kBAAkB,SAAQ,GAAG,EAAE;IACjF;AAGD,OAAI,WAAW,GACb,SAAQ,YAAY,UAAU;GAIhC,MAAMZ,WAAgB,2BADG,MAAM,SAAS,QAAQ,CACa;AAC7D,kBAAe,SAAS;AAExB,SAAM,kBAAkB,SAAS,kBAAkB,KAAK;AAGxD,OAAI,SAAS,SAAS,eAAe;IACnC,MAAMa,cAAmB,SAAS,MAAM,eAAe,UAAU;AACjE,QAAI,eAAe,OAAO,WAAW,aAAa;AAEhD,yCAAsB,aAAa,OAAO;AAC1C;;;AAKJ,OAAI,SAAS,eAAe,YAAY;AACtC,kBAAc,KAAK;AAEnB,SADoC,SAAS,MAAM,cAAc,SAAS,MAAM,MAAM,cAAc,EAAE,EAC7E,SAAS,EAChC,gBAAe,SAAS;QAExB,eAAc;AAEhB;;AAIF,OAAI,SAAS,eAAe,SAAS;AACnC,gBAAY,SAAS;AACrB;;AAIF,kBAAe,SAAS;AACxB,iBAAc,EAAE,CAAC;AACjB,oBAAiB,EAAE,CAAC;AAGpB,OAAI,UAAU,MACZ,aAAY,SAAS;WAEhB,KAAK;AACZ,eAAY,IAAI;YACR;AACR,gBAAa,MAAM;;IAGvB;EACE;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACD,CACF;;;;CAKD,MAAM,yCAA8B;AAClC,gBAAc,EAAE,CAAC;AACjB,gBAAc,EAAE,CAAC;AACjB,mBAAiB,EAAE,CAAC;IACnB,EAAE,CAAC;;;;AAKN,4BAAgB;AAEd,MAAI,4BAA4B,QAC9B;AAMF,MADmC,IAAI,gBAAgB,OAAO,SAAS,OAAO,CAChE,IAAI,OAAO,CACvB;AAIF,MAAI,CAAC,eAAe,CAAC,aAAa;AAChC,wBAAqB,MAAM;AAC3B,qBAAkB,KAAK;AACvB,+BAAY,IAAI,MAAM,2DAA2D,CAAC;AAClF;;AAGF,8BAA4B,UAAU;AAEtC,GAAC,YAA2B;AAC1B,wBAAqB,KAAK;AAC1B,eAAY,KAAK;AAEjB,OAAI;AAEF,QAAI,YACF,gBAAe,QAAQ,GAAG,OAAO,gBAAgB,YAAY;IAa/D,MAAMb,WAAgB,2BADG,MAAM,SARV;KACnB;KACA,QAAQ,EACN,aACD;KACD,SAAS;KACV,CAE+C,CACa;AAC7D,mBAAe,SAAS;AAExB,UAAM,kBAAkB,SAAS,kBAAkB,KAAK;AAGxD,QAAI,SAAS,eAAe,SAAS;AACnC,uBAAkB,KAAK;AACvB,iBAAY,SAAS;AACrB;;AAIF,mBAAe,SAAS;AAGxB,QAAI,UAAU,MACZ,aAAY,SAAS;YAEhB,KAAK;AACZ,sBAAkB,KAAK;AACvB,gBAAY,IAAI;aACR;AACR,yBAAqB,MAAM;;MAE3B;IACH;EAAC;EAAa;EAAa;EAAU;EAAc;EAAa;EAA2B,CAAC;;;;CAK/F,MAAMc,0CAAoC,iBAA2D;EACnG,IAAIC;EACJ,IAAIC;AAEJ,eAAW,SAAS,SAAc;AAChC,OAAI,KAAK,SAAS,QAChB;QAAI,KAAK,YAAY,eAAe,CAACC,QACnC,WAAQ,KAAK;cACH,KAAK,YAAY,eAAe,KAAK,YAAY,iBAAiB,CAACC,WAC7E,cAAW,KAAK;;IAGpB;AAEF,SAAO;GAAC;GAAU;GAAM;IACvB,EAAE,CAAC;;;;CAKN,MAAMC,yCACH,iBACCpB,aAAW,QACR,SAAc,EAAE,KAAK,SAAS,WAAW,KAAK,YAAY,eAAe,KAAK,YAAY,cAC5F,EACH,EAAE,CACH;CAGD,MAAMqB,aAAkB,aAAa,MAAM,cAAc,aAAa,MAAM,MAAM,cAAc,EAAE;CAClG,MAAM,EAAC,OAAO,aAAY,gBAAgB,WAAW;CACrD,MAAMC,4BAAiC,eAAe,WAAW;CAIjE,MAAMC,cAA2C;EAC/C,gBAJ2C,aAAa,MAAM,kBAA0C,EAAE;EAK1G;EACA,OAAO;EACP;EACA,aAAa;EACb,YAAY;EACZ;EACA;EACA;EACA;EACA;EACA;EACA;EACA,SAAS;EACT;EACA;EACA;EACA;EACA,SAAS;EACT,QAAQ;EACT;AAGD,KAAI,SACF,QAAO,2CAAC;EAAe;YAAY,SAAS,YAAY;GAAO;AAMjE,KAAI,kBACF,QACE,2CAACC;EAAc,WAAWC,mBAAG,WAAW,OAAO,KAAK;EAAW;YAC7D,2CAACD,qBAAc,qBACb,4CAAC;GAAI,WAAY,OAAkC;cACjD,2CAACE,2BAAQ,MAAK,WAAW,EACzB,2CAACC;IAAW,SAAQ;cAAQ;KAA2C;IACnE,GACgB;GACV;AAKpB,KAAI,eACF,QACE,4CAACH;EAAc,WAAWC,mBAAG,WAAW,OAAO,KAAK;EAAW;aAC7D,2CAACD,qBAAc;GAAO,WAAW,OAAO;aACtC,2CAACA,qBAAc;IAAM,OAAO;IAAG,WAAW,OAAO;cAAO;KAElC;IACD,EACvB,4CAACA,qBAAc,sBACb,4CAACI;GAAe,SAAQ;cACtB,2CAACA,sBAAe,mBAAM,4BAA8C,EACpE,2CAACA,sBAAe,yBACb,UAAU,WACT,oGACyB;IACd,EAChB,gBACC,2CAAC;GAAI,WAAY,OAAkC;aACjD,2CAACC;IAAO,SAAQ;IAAU,SAAS;cAAc;KAExC;IACL,IAEc;GACV;AAKpB,QACE,4CAACL;EAAc,WAAWC,mBAAG,WAAW,OAAO,KAAK;EAAW;cAC3D,aAAa,kBAAkB,SAAS,aACxC,4CAACD,qBAAc;GAAO,WAAW,OAAO;cACrC,aAAa,SACZ,2CAACA,qBAAc;IAAM,OAAO;IAAG,WAAW,OAAO;cAC9C;KACmB,EAEvB,gBAAgB,YACf,2CAACG;IAAW,SAAQ;IAAQ,WAAW,OAAO;cAC3C;KACU;IAEM,EAEzB,4CAACH,qBAAc;GACZ,YACC,2CAAC;IAAI,WAAY,OAAkC;cACjD,2CAACI;KAAe,SAAQ;eACtB,2CAACA,sBAAe,yBAAa,SAAS,UAAqC;MAC5D;KACb;GAER,4CAAC,oBACE,6BAA6B,0BAA0B,SAAS,IAC7DE,qDACE,2BACA,YACA,eACA,YACA,WACA,aACA,WACA,mBACA;IACE,kBAAkB;IAClB,QAAQ;IACR,aAAa;IACb,UAAU;IACV;IACA;IACD,CACF,GACD,CAAC,aACC,2CAACF;IAAe,SAAQ;cACtB,2CAACD;KAAW,SAAQ;eAAQ;MAAyC;KACtD,EAEtB,aACC,2CAAC;IAAI,WAAY,OAAkC;cACjD,2CAACD,2BAAQ,MAAK,UAAU;KACpB,IAEJ;GACL,gBACC,2CAAC;IAAI,WAAY,OAAkC;cACjD,4CAACC;KAAW,SAAQ;;MAAQ;MACD;MACzB,2CAACE;OACC,SAAQ;OACR,SAAS;OACT,WAAY,OAAkC;iBAC/C;QAEQ;;MACE;KACT;MAEc;GACV;;AAIpB,+BAAe"}
+{"version":3,"file":"BaseAcceptInvite.cjs","names":["BaseAcceptInvite: FC<BaseAcceptInviteProps>","useThunderID","useTranslation","useTheme","customRenderers: ComponentRendererMap","ComponentRendererContext","styles: any","useStyles","challengeTokenRef: any","responseFieldErrors: FieldError[] | undefined","errors: Record<string, string>","touched: Record<string, boolean>","tokenValidationAttemptedRef: any","tempData: any","storageManager: any","handleError: any","errorMessage: string","extractErrorMessage","normalizeFlowResponseLocal: any","normalizeFlowResponse","components","response: any","handleInputChange: any","newErrors: any","handleInputBlur: any","validateForm: any","value: any","handleSubmit: any","validation: any","inputs: any","raw: any","purposes: any[]","ConsentConstants","payload: Record<string, any>","redirectURL: any","extractHeadings: any","title: string | undefined","subtitle: string | undefined","title","subtitle","filterHeadings: any","components: any","componentsWithoutHeadings: any","renderProps: BaseAcceptInviteRenderProps","CardPrimitive","cx","Spinner","Typography","AlertPrimitive","Button","renderInviteUserComponents"],"sources":["../../../../../../src/components/presentation/auth/AcceptInvite/BaseAcceptInvite.tsx"],"sourcesContent":["// Copyright 2025-2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\nimport {\n  ConsentConstants,\n  FieldError,\n  FlowExecutionError,\n  FlowMetadataResponse,\n  Preferences,\n  buildValidatorFromRules,\n} from '@thunderid/browser';\nimport {FC, ReactElement, ReactNode, useCallback, useContext, useEffect, useRef, useState} from 'react';\nimport useStyles from './BaseAcceptInvite.styles';\nimport ComponentRendererContext, {\n  ComponentRendererMap,\n} from '../../../../contexts/ComponentRenderer/ComponentRendererContext';\nimport useTheme from '../../../../contexts/Theme/useTheme';\nimport useThunderID from '../../../../contexts/ThunderID/useThunderID';\nimport {useOAuthCallback} from '../../../../hooks/useOAuthCallback';\nimport useTranslation from '../../../../hooks/useTranslation';\nimport {cx} from '../../../../styles/emotion';\nimport {normalizeFlowResponse, extractErrorMessage} from '../../../../utils/flowTransformer';\nimport {initiateOAuthRedirect} from '../../../../utils/oauth';\nimport AlertPrimitive from '../../../primitives/Alert/Alert';\nimport Button from '../../../primitives/Button/Button';\n// eslint-disable-next-line import/no-named-as-default\nimport CardPrimitive, {CardProps} from '../../../primitives/Card/Card';\nimport Spinner from '../../../primitives/Spinner/Spinner';\nimport Typography from '../../../primitives/Typography/Typography';\nimport {renderInviteUserComponents} from '../AuthOptionFactory';\n\n/**\n * Flow response structure from the backend.\n */\nexport interface AcceptInviteFlowResponse {\n  challengeToken?: string;\n  data?: {\n    additionalData?: Record<string, string>;\n    components?: any[];\n    fieldErrors?: FieldError[];\n    meta?: {\n      components?: any[];\n    };\n    redirectURL?: string;\n  };\n  error?: FlowExecutionError;\n  executionId: string;\n  flowStatus: 'INCOMPLETE' | 'COMPLETE' | 'ERROR';\n  type?: 'VIEW' | 'REDIRECTION';\n}\n\n/**\n * Render props for custom UI rendering of AcceptInvite.\n */\nexport interface BaseAcceptInviteRenderProps {\n  /**\n   * Additional data from the current flow step (e.g. consentPrompt for consent nodes).\n   */\n  additionalData: Record<string, any>;\n\n  /**\n   * Flow components from the current step.\n   */\n  components: any[];\n\n  /**\n   * API error (if any).\n   */\n  error?: Error | null;\n\n  /**\n   * Current flow ID from URL.\n   */\n  executionId?: string;\n\n  /**\n   * Field validation errors.\n   */\n  fieldErrors: Record<string, string>;\n\n  /**\n   * Navigate to sign in page.\n   */\n  goToSignIn?: () => void;\n\n  /**\n   * Function to handle input blur.\n   */\n  handleInputBlur: (name: string) => void;\n\n  /**\n   * Function to handle input changes.\n   */\n  handleInputChange: (name: string, value: string) => void;\n\n  /**\n   * Function to handle form submission.\n   */\n  handleSubmit: (component: any, data?: Record<string, any>) => Promise<void>;\n\n  /**\n   * Invite token from URL.\n   */\n  inviteToken?: string;\n\n  /**\n   * Whether the flow has completed successfully.\n   */\n  isComplete: boolean;\n\n  /**\n   * Loading state.\n   */\n  isLoading: boolean;\n\n  /**\n   * Whether the token validation failed.\n   */\n  isTokenInvalid: boolean;\n\n  /**\n   * Whether the form is valid.\n   */\n  isValid: boolean;\n\n  /**\n   * Whether the invite token is being validated.\n   */\n  isValidatingToken: boolean;\n\n  /**\n   * Flow metadata returned by the platform (v2 only). `null` while loading or unavailable.\n   */\n  meta: FlowMetadataResponse | null;\n\n  /**\n   * Subtitle for the current step.\n   */\n  subtitle?: string;\n\n  /**\n   * Title for the current step.\n   */\n  title?: string;\n\n  /**\n   * Touched fields.\n   */\n  touched: Record<string, boolean>;\n\n  /**\n   * Form values for the current step.\n   */\n  values: Record<string, string>;\n}\n\n/**\n * Props for the BaseAcceptInvite component.\n */\nexport interface BaseAcceptInviteProps {\n  /**\n   * Render props function for custom UI.\n   * If not provided, default UI will be rendered.\n   */\n  children?: (props: BaseAcceptInviteRenderProps) => ReactNode;\n\n  /**\n   * Custom CSS class name.\n   */\n  className?: string;\n\n  /**\n   * Flow ID from the invite link URL.\n   */\n  executionId?: string;\n\n  /**\n   * Invite token from the invite link URL.\n   */\n  inviteToken?: string;\n\n  /**\n   * Callback when the flow completes successfully.\n   */\n  onComplete?: () => void;\n\n  /**\n   * Callback when an error occurs.\n   */\n  onError?: (error: Error) => void;\n\n  /**\n   * Callback when the flow state changes.\n   */\n  onFlowChange?: (response: AcceptInviteFlowResponse) => void;\n\n  /**\n   * Callback to navigate to sign in page.\n   */\n  onGoToSignIn?: () => void;\n\n  /**\n   * Function to submit flow step data.\n   * This makes a request to the flow/execute endpoint.\n   */\n  onSubmit: (payload: Record<string, any>) => Promise<AcceptInviteFlowResponse>;\n\n  /**\n   * Component-level preferences to override global i18n and theme settings.\n   * Preferences are deep-merged with global ones, with component preferences\n   * taking precedence. Affects this component and all its descendants.\n   */\n  preferences?: Preferences;\n\n  /**\n   * Whether to show the subtitle.\n   */\n  showSubtitle?: boolean;\n\n  /**\n   * Whether to show the title.\n   */\n  showTitle?: boolean;\n\n  /**\n   * Size variant for the component.\n   */\n  size?: 'small' | 'medium' | 'large';\n\n  /**\n   * Theme variant for the component.\n   */\n  variant?: CardProps['variant'];\n}\n\n/**\n * Base component for accept invite flow (end-user).\n * Handles the flow logic for validating an invite token and setting a password.\n *\n * When no children are provided, renders a default UI with:\n * - Loading spinner during token validation\n * - Error alerts for invalid/expired tokens\n * - Password form with validation\n * - Success state with sign-in redirect\n *\n * Flow steps handled:\n * 1. Validate invite token (automatic on mount)\n * 2. Password input\n * 3. Flow completion\n */\nconst BaseAcceptInvite: FC<BaseAcceptInviteProps> = ({\n  executionId,\n  inviteToken,\n  onSubmit,\n  onComplete,\n  onError,\n  onFlowChange,\n  onGoToSignIn,\n  className = '',\n  children,\n  preferences,\n  size = 'medium',\n  variant = 'outlined',\n  showTitle = true,\n  showSubtitle = true,\n}: BaseAcceptInviteProps): ReactElement => {\n  const {meta, isInitialized, getStorageManager, vendor} = useThunderID();\n  const {t} = useTranslation(preferences?.i18n);\n  const {theme} = useTheme();\n  const customRenderers: ComponentRendererMap = useContext(ComponentRendererContext);\n  const styles: any = useStyles(theme, theme.vars.colors.text.primary);\n  const [isLoading, setIsLoading] = useState(false);\n  const [isValidatingToken, setIsValidatingToken] = useState(true);\n  const [isTokenInvalid, setIsTokenInvalid] = useState(false);\n  const [isComplete, setIsComplete] = useState(false);\n  const [currentFlow, setCurrentFlow] = useState<AcceptInviteFlowResponse | null>(null);\n  const [apiError, setApiError] = useState<Error | null>(null);\n  const [formValues, setFormValues] = useState<Record<string, string>>({});\n  const [formErrors, setFormErrors] = useState<Record<string, string>>({});\n  const [touchedFields, setTouchedFields] = useState<Record<string, boolean>>({});\n  const [isFormValid, setIsFormValid] = useState(true);\n  const [isStorageReady, setIsStorageReady] = useState(false);\n  const challengeTokenRef: any = useRef<string | null>(null);\n\n  /**\n   * Project server-side validation errors from the most recent flow response into\n   * the local formErrors state. First error per field wins; affected fields are\n   * marked touched so errors render immediately.\n   */\n  useEffect(() => {\n    const responseFieldErrors: FieldError[] | undefined = (currentFlow?.data as any)?.fieldErrors;\n    if (!responseFieldErrors || responseFieldErrors.length === 0) {\n      return;\n    }\n    const errors: Record<string, string> = {};\n    const touched: Record<string, boolean> = {};\n    for (const fe of responseFieldErrors) {\n      if (!(fe.identifier in errors)) {\n        errors[fe.identifier] = fe.message;\n        touched[fe.identifier] = true;\n      }\n    }\n    setFormErrors(errors);\n    setTouchedFields((prev: Record<string, boolean>) => ({...prev, ...touched}));\n  }, [currentFlow]);\n\n  const tokenValidationAttemptedRef: any = useRef(false);\n\n  /**\n   * Restore any challenge token persisted before an OAuth redirect.\n   * Waits for SDK initialization before reading from storage.\n   */\n  useEffect(() => {\n    if (!isInitialized) return;\n\n    (async (): Promise<void> => {\n      try {\n        const storageManager: any = await getStorageManager();\n        const tempData: any = await storageManager?.getTemporaryData();\n        if (tempData?.challengeToken) {\n          challengeTokenRef.current = tempData.challengeToken as string;\n        }\n      } finally {\n        setIsStorageReady(true);\n      }\n    })();\n  }, [isInitialized]);\n\n  /**\n   * Updates challengeTokenRef immediately (stale-closure safe) and persists via\n   * the provider's StorageManager so the token survives OAuth redirects.\n   */\n  const setChallengeToken = async (challengeToken: string | null): Promise<void> => {\n    challengeTokenRef.current = challengeToken;\n    const storageManager: any = await getStorageManager();\n    if (storageManager) {\n      if (challengeToken) {\n        await storageManager.setTemporaryDataParameter('challengeToken', challengeToken);\n      } else {\n        await storageManager.removeTemporaryDataParameter('challengeToken');\n      }\n    }\n  };\n\n  /**\n   * Handle error responses and extract meaningful error messages.\n   * Uses the transformer's extractErrorMessage function for consistency.\n   */\n  const handleError: any = useCallback(\n    (error: any) => {\n      const errorMessage: string = extractErrorMessage(error, t, 'components.acceptInvite.errors.generic');\n\n      // Set the API error state\n      setApiError(error instanceof Error ? error : new Error(errorMessage));\n\n      // Call the onError callback if provided\n      onError?.(error instanceof Error ? error : new Error(errorMessage));\n    },\n    [t, onError],\n  );\n\n  /**\n   * Normalize flow response to ensure component-driven format.\n   * Transforms data.meta.components to data.components.\n   */\n  const normalizeFlowResponseLocal: any = useCallback(\n    (response: AcceptInviteFlowResponse): AcceptInviteFlowResponse => {\n      if (!response?.data?.meta?.components) {\n        return response;\n      }\n\n      try {\n        const {components} = normalizeFlowResponse(\n          response,\n          t,\n          {\n            defaultErrorKey: 'components.acceptInvite.errors.generic',\n            resolveTranslations: false,\n          },\n          meta,\n        );\n\n        return {\n          ...response,\n          data: {\n            ...response.data,\n            components: components as any,\n          },\n        };\n      } catch {\n        // If transformer throws (e.g., error response), return as-is\n        return response;\n      }\n    },\n    [t, children],\n  );\n\n  /**\n   * Handle OAuth callback when returning from OAuth provider.\n   * This hook processes the authorization code and continues the flow.\n   */\n  useOAuthCallback({\n    currentExecutionId: executionId ?? null,\n    executionIdStorageKey: `${vendor}_execution_id`,\n    isInitialized: isStorageReady,\n    onComplete: () => {\n      setIsValidatingToken(false);\n      onComplete?.();\n    },\n    onError: (error: any) => {\n      if (!error?.flowStatus) {\n        setIsTokenInvalid(true);\n      }\n      setIsValidatingToken(false);\n      handleError(error);\n    },\n    onFlowChange: (response: any) => {\n      onFlowChange?.(response);\n      if (response.flowStatus === 'COMPLETE') {\n        setIsComplete(true);\n        const completionComponents: any[] = response.data?.components || response.data?.meta?.components || [];\n        if (completionComponents.length > 0) {\n          setCurrentFlow(response);\n        }\n      } else {\n        // Initialize currentFlow for next steps if not complete\n        setCurrentFlow(response);\n        setFormValues({});\n        setFormErrors({});\n        setTouchedFields({});\n      }\n    },\n    onProcessingStart: () => {\n      setIsValidatingToken(true);\n    },\n    onSubmit: async (payload: any) => {\n      const rawResponse: any = await onSubmit({\n        ...payload,\n        ...(challengeTokenRef.current ? {challengeToken: challengeTokenRef.current} : {}),\n      });\n      const response: any = normalizeFlowResponseLocal(rawResponse);\n      await setChallengeToken(response.challengeToken ?? null);\n      return response;\n    },\n    tokenValidationAttemptedRef,\n  });\n\n  /**\n   * Handle input value changes.\n   */\n  const handleInputChange: any = useCallback((name: string, value: string) => {\n    setFormValues((prev: any) => ({...prev, [name]: value}));\n    // Clear error when user starts typing\n    setFormErrors((prev: any) => {\n      const newErrors: any = {...prev};\n      delete newErrors[name];\n      return newErrors;\n    });\n    setIsFormValid(true);\n  }, []);\n\n  /**\n   * Handle input blur.\n   */\n  const handleInputBlur: any = useCallback((name: string) => {\n    setTouchedFields((prev: any) => ({...prev, [name]: true}));\n  }, []);\n\n  /**\n   * Validate required fields based on components.\n   */\n  const validateForm: any = useCallback(\n    (components: any[]): {errors: Record<string, string>; isValid: boolean} => {\n      const errors: Record<string, string> = {};\n\n      const validateComponents = (comps: any[]): any => {\n        comps.forEach((comp: any) => {\n          if (\n            (comp.type === 'PASSWORD_INPUT' ||\n              comp.type === 'TEXT_INPUT' ||\n              comp.type === 'EMAIL_INPUT' ||\n              comp.type === 'PHONE_INPUT' ||\n              comp.type === 'OTP_INPUT' ||\n              comp.type === 'DATE_INPUT' ||\n              comp.type === 'SELECT') &&\n            comp.ref\n          ) {\n            const value: any = formValues[comp.ref];\n            if (comp.required && (!value || value.trim() === '')) {\n              errors[comp.ref] = t('validations.required.field.error');\n            } else if (value) {\n              // Evaluate declarative validation rules from meta.components[].validation.\n              const ruleValidator = buildValidatorFromRules(comp.validation);\n              if (ruleValidator) {\n                const message = ruleValidator(value);\n                if (message) {\n                  errors[comp.ref] = t(message);\n                }\n              }\n            }\n          }\n          if (comp.components && Array.isArray(comp.components)) {\n            validateComponents(comp.components);\n          }\n        });\n      };\n\n      validateComponents(components);\n\n      return {errors, isValid: Object.keys(errors).length === 0};\n    },\n    [formValues, t],\n  );\n\n  /**\n   * Handle form submission.\n   */\n  const handleSubmit: any = useCallback(\n    async (component: any, data?: Record<string, any>) => {\n      if (!currentFlow) {\n        return;\n      }\n\n      // Validate form before submission\n      const components: any = currentFlow.data?.components || [];\n      const validation: any = validateForm(components);\n\n      if (!validation.isValid) {\n        setIsFormValid(false);\n        setFormErrors(validation.errors);\n        // Mark all fields as touched\n        const touched: Record<string, boolean> = {};\n        Object.keys(validation.errors).forEach((key: any) => {\n          touched[key] = true;\n        });\n        setTouchedFields((prev: any) => ({...prev, ...touched}));\n        return;\n      }\n\n      setIsLoading(true);\n      setApiError(null);\n\n      try {\n        // Build payload with form values\n        const inputs: any = {...(data || formValues)};\n\n        // Auto-compile consent_decisions if we are on a consent prompt step.\n        // Mirrors the same logic in SignIn to ensure the server receives a\n        // properly structured JSON payload rather than individual checkbox keys.\n        const currentAdditionalData = (currentFlow?.data?.additionalData as Record<string, any>) ?? {};\n        if (currentAdditionalData['consentPrompt']) {\n          try {\n            const raw: any = currentAdditionalData['consentPrompt'];\n            const purposes: any[] = typeof raw === 'string' ? JSON.parse(raw) : raw.purposes || raw;\n            const isDeny = component?.variant?.toLowerCase() !== 'primary';\n            const decisions = {\n              approved: !isDeny,\n              ...(isDeny ? {reason: ConsentConstants.REASON_USER_DENIED} : {}),\n              purposes: purposes.map((p: any) => ({\n                approved: !isDeny,\n                purposeName: p.purposeName,\n                elements: [\n                  ...(p.essential || []).map((e: any) => ({approved: !isDeny, name: e.name})),\n                  ...(p.optional || []).map((e: any) => {\n                    const key = `__consent_opt__${p.purposeId}__${e.name}`;\n                    return {approved: !isDeny && inputs[key] === 'true', name: e.name};\n                  }),\n                ],\n              })),\n            };\n            inputs.consent_decisions = JSON.stringify(decisions);\n            Object.keys(inputs).forEach((k: string) => {\n              if (k.startsWith('__consent_opt__')) delete inputs[k];\n            });\n          } catch {\n            // Leave inputs as-is if consent building fails\n          }\n        }\n\n        const payload: Record<string, any> = {\n          executionId: currentFlow.executionId,\n          inputs,\n          verbose: true,\n          ...(challengeTokenRef.current ? {challengeToken: challengeTokenRef.current} : {}),\n        };\n\n        // Add action ID if component has one\n        if (component?.id) {\n          payload['action'] = component.id;\n        }\n\n        const rawResponse: any = await onSubmit(payload);\n        const response: any = normalizeFlowResponseLocal(rawResponse);\n        onFlowChange?.(response);\n\n        await setChallengeToken(response.challengeToken ?? null);\n\n        // Handle OAuth redirect response\n        if (response.type === 'REDIRECTION') {\n          const redirectURL: any = response.data?.redirectURL || response?.redirectURL;\n          if (redirectURL && typeof window !== 'undefined') {\n            // Initiate OAuth redirect with secure state management\n            initiateOAuthRedirect(redirectURL, vendor);\n            return;\n          }\n        }\n\n        // Check for completion\n        if (response.flowStatus === 'COMPLETE') {\n          setIsComplete(true);\n          const completionComponents: any[] = response.data?.components || response.data?.meta?.components || [];\n          if (completionComponents.length > 0) {\n            setCurrentFlow(response);\n          } else {\n            onComplete?.();\n          }\n          return;\n        }\n\n        // Check for error status\n        if (response.flowStatus === 'ERROR') {\n          handleError(response);\n          return;\n        }\n\n        // Update current flow and reset form state for next step, preserving input values\n        setCurrentFlow(response);\n        setFormErrors({});\n        setTouchedFields({});\n\n        // Display error from INCOMPLETE response\n        if (response?.error) {\n          handleError(response);\n        }\n      } catch (err) {\n        handleError(err);\n      } finally {\n        setIsLoading(false);\n      }\n    },\n    [\n      currentFlow,\n      formValues,\n      validateForm,\n      onSubmit,\n      onFlowChange,\n      onComplete,\n      handleError,\n      normalizeFlowResponseLocal,\n    ],\n  );\n\n  /**\n   * reset form values, errors, and touched fields to initial state\n   */\n  const resetForm = useCallback(() => {\n    setFormValues({});\n    setFormErrors({});\n    setTouchedFields({});\n  }, []);\n\n  /**\n   * Validate invite token on component mount.\n   */\n  useEffect(() => {\n    // Skip validation if already validated\n    if (tokenValidationAttemptedRef.current) {\n      return;\n    }\n\n    // If an OAuth code is present, this is a return from an OAuth redirect.\n    // useOAuthCallback will handle the code — skip the initial invite validation.\n    const urlParams: URLSearchParams = new URLSearchParams(window.location.search);\n    if (urlParams.get('code')) {\n      return;\n    }\n\n    // Validate required params for initial invite link\n    if (!executionId || !inviteToken) {\n      setIsValidatingToken(false);\n      setIsTokenInvalid(true);\n      handleError(new Error('Invalid invite link. Missing executionId or inviteToken.'));\n      return;\n    }\n\n    tokenValidationAttemptedRef.current = true;\n\n    (async (): Promise<void> => {\n      setIsValidatingToken(true);\n      setApiError(null);\n\n      try {\n        // Store executionId in sessionStorage for OAuth callback\n        if (executionId) {\n          sessionStorage.setItem(`${vendor}_execution_id`, executionId);\n        }\n\n        // Send the invite token to validate and continue the flow\n        const payload: any = {\n          executionId,\n          inputs: {\n            inviteToken,\n          },\n          verbose: true,\n        };\n\n        const rawResponse: any = await onSubmit(payload);\n        const response: any = normalizeFlowResponseLocal(rawResponse);\n        onFlowChange?.(response);\n\n        await setChallengeToken(response.challengeToken ?? null);\n\n        // Check for error (invalid token)\n        if (response.flowStatus === 'ERROR') {\n          setIsTokenInvalid(true);\n          handleError(response);\n          return;\n        }\n\n        // Token is valid, show the password form\n        setCurrentFlow(response);\n\n        // Display error from INCOMPLETE response\n        if (response?.error) {\n          handleError(response);\n        }\n      } catch (err) {\n        setIsTokenInvalid(true);\n        handleError(err);\n      } finally {\n        setIsValidatingToken(false);\n      }\n    })();\n  }, [executionId, inviteToken, onSubmit, onFlowChange, handleError, normalizeFlowResponseLocal]);\n\n  /**\n   * Extract title and subtitle from components.\n   */\n  const extractHeadings: any = useCallback((components: any[]): {subtitle?: string; title?: string} => {\n    let title: string | undefined;\n    let subtitle: string | undefined;\n\n    components.forEach((comp: any) => {\n      if (comp.type === 'TEXT') {\n        if (comp.variant === 'HEADING_1' && !title) {\n          title = comp.label;\n        } else if ((comp.variant === 'HEADING_2' || comp.variant === 'SUBTITLE_1') && !subtitle) {\n          subtitle = comp.label;\n        }\n      }\n    });\n\n    return {subtitle, title};\n  }, []);\n\n  /**\n   * Filter out heading components for default rendering.\n   */\n  const filterHeadings: any = useCallback(\n    (components: any[]): any[] =>\n      components.filter(\n        (comp: any) => !(comp.type === 'TEXT' && (comp.variant === 'HEADING_1' || comp.variant === 'HEADING_2')),\n      ),\n    [],\n  );\n\n  // Get components from normalized response, with fallback to meta.components\n  const components: any = currentFlow?.data?.components || currentFlow?.data?.meta?.components || [];\n  const {title, subtitle} = extractHeadings(components);\n  const componentsWithoutHeadings: any = filterHeadings(components);\n  const additionalData: Record<string, any> = (currentFlow?.data?.additionalData as Record<string, any>) ?? {};\n\n  // Render props\n  const renderProps: BaseAcceptInviteRenderProps = {\n    additionalData,\n    components,\n    error: apiError,\n    executionId,\n    fieldErrors: formErrors,\n    goToSignIn: onGoToSignIn,\n    handleInputBlur,\n    handleInputChange,\n    handleSubmit,\n    inviteToken,\n    isComplete,\n    isLoading,\n    isTokenInvalid,\n    isValid: isFormValid,\n    isValidatingToken,\n    meta,\n    subtitle,\n    title,\n    touched: touchedFields,\n    values: formValues,\n  };\n\n  // If children render prop is provided, use it for custom UI\n  if (children) {\n    return <div className={className}>{children(renderProps)}</div>;\n  }\n\n  // Default rendering\n\n  // Loading state during token validation\n  if (isValidatingToken) {\n    return (\n      <CardPrimitive className={cx(className, styles.card)} variant={variant}>\n        <CardPrimitive.Content>\n          <div className={(styles as Record<string, string>)['tokenValidationContainer']}>\n            <Spinner size=\"medium\" />\n            <Typography variant=\"body1\">Validating your invite link...</Typography>\n          </div>\n        </CardPrimitive.Content>\n      </CardPrimitive>\n    );\n  }\n\n  // Invalid token state\n  if (isTokenInvalid) {\n    return (\n      <CardPrimitive className={cx(className, styles.card)} variant={variant}>\n        <CardPrimitive.Header className={styles.header}>\n          <CardPrimitive.Title level={2} className={styles.title}>\n            Invalid Invite Link\n          </CardPrimitive.Title>\n        </CardPrimitive.Header>\n        <CardPrimitive.Content>\n          <AlertPrimitive variant=\"error\">\n            <AlertPrimitive.Title>Unable to verify invite</AlertPrimitive.Title>\n            <AlertPrimitive.Description>\n              {apiError?.message ||\n                'This invite link is invalid or has expired. Please contact your administrator for a new invite.'}\n            </AlertPrimitive.Description>\n          </AlertPrimitive>\n          {onGoToSignIn && (\n            <div className={(styles as Record<string, string>)['goToSignInContainer']}>\n              <Button variant=\"outline\" onClick={onGoToSignIn}>\n                Go to Sign In\n              </Button>\n            </div>\n          )}\n        </CardPrimitive.Content>\n      </CardPrimitive>\n    );\n  }\n\n  // Flow components (password form)\n  return (\n    <CardPrimitive className={cx(className, styles.card)} variant={variant}>\n      {(showTitle || showSubtitle) && (title || subtitle) && (\n        <CardPrimitive.Header className={styles.header}>\n          {showTitle && title && (\n            <CardPrimitive.Title level={2} className={styles.title}>\n              {title}\n            </CardPrimitive.Title>\n          )}\n          {showSubtitle && subtitle && (\n            <Typography variant=\"body1\" className={styles.subtitle}>\n              {subtitle}\n            </Typography>\n          )}\n        </CardPrimitive.Header>\n      )}\n      <CardPrimitive.Content>\n        {apiError && (\n          <div className={(styles as Record<string, string>)['errorContainer']}>\n            <AlertPrimitive variant=\"error\">\n              <AlertPrimitive.Description>{apiError.message}</AlertPrimitive.Description>\n            </AlertPrimitive>\n          </div>\n        )}\n        <div>\n          {componentsWithoutHeadings && componentsWithoutHeadings.length > 0\n            ? renderInviteUserComponents(\n                componentsWithoutHeadings,\n                formValues,\n                touchedFields,\n                formErrors,\n                isLoading,\n                isFormValid,\n                resetForm,\n                handleInputChange,\n                {\n                  _customRenderers: customRenderers,\n                  _theme: theme,\n                  onInputBlur: handleInputBlur,\n                  onSubmit: handleSubmit,\n                  size,\n                  variant,\n                },\n              )\n            : !isLoading && (\n                <AlertPrimitive variant=\"warning\">\n                  <Typography variant=\"body1\">No form components available</Typography>\n                </AlertPrimitive>\n              )}\n          {isLoading && (\n            <div className={(styles as Record<string, string>)['centeredSpinnerContainerSmall']}>\n              <Spinner size=\"small\" />\n            </div>\n          )}\n        </div>\n        {onGoToSignIn && (\n          <div className={(styles as Record<string, string>)['alreadyHaveAccountContainer']}>\n            <Typography variant=\"body2\">\n              Already have an account?{' '}\n              <Button\n                variant=\"text\"\n                onClick={onGoToSignIn}\n                className={(styles as Record<string, string>)['signInInlineButton']}\n              >\n                Sign In\n              </Button>\n            </Typography>\n          </div>\n        )}\n      </CardPrimitive.Content>\n    </CardPrimitive>\n  );\n};\n\nexport default BaseAcceptInvite;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA0PA,MAAMA,oBAA+C,EACnD,aACA,aACA,UACA,YACA,SACA,cACA,cACA,YAAY,IACZ,UACA,aACA,OAAO,UACP,UAAU,YACV,YAAY,MACZ,eAAe,WAC0B;CACzC,MAAM,EAAC,MAAM,eAAe,mBAAmB,WAAUC,8BAAc;CACvE,MAAM,EAAC,MAAKC,+BAAe,aAAa,KAAK;CAC7C,MAAM,EAAC,UAASC,0BAAU;CAC1B,MAAMC,wCAAmDC,yCAAyB;CAClF,MAAMC,SAAcC,wCAAU,OAAO,MAAM,KAAK,OAAO,KAAK,QAAQ;CACpE,MAAM,CAAC,WAAW,oCAAyB,MAAM;CACjD,MAAM,CAAC,mBAAmB,4CAAiC,KAAK;CAChE,MAAM,CAAC,gBAAgB,yCAA8B,MAAM;CAC3D,MAAM,CAAC,YAAY,qCAA0B,MAAM;CACnD,MAAM,CAAC,aAAa,sCAA4D,KAAK;CACrF,MAAM,CAAC,UAAU,mCAAsC,KAAK;CAC5D,MAAM,CAAC,YAAY,qCAAkD,EAAE,CAAC;CACxE,MAAM,CAAC,YAAY,qCAAkD,EAAE,CAAC;CACxE,MAAM,CAAC,eAAe,wCAAsD,EAAE,CAAC;CAC/E,MAAM,CAAC,aAAa,sCAA2B,KAAK;CACpD,MAAM,CAAC,gBAAgB,yCAA8B,MAAM;CAC3D,MAAMC,sCAA+C,KAAK;;;;;;AAO1D,4BAAgB;EACd,MAAMC,uBAAiD,aAAa,OAAc;AAClF,MAAI,CAAC,uBAAuB,oBAAoB,WAAW,EACzD;EAEF,MAAMC,SAAiC,EAAE;EACzC,MAAMC,UAAmC,EAAE;AAC3C,OAAK,MAAM,MAAM,oBACf,KAAI,EAAE,GAAG,cAAc,SAAS;AAC9B,UAAO,GAAG,cAAc,GAAG;AAC3B,WAAQ,GAAG,cAAc;;AAG7B,gBAAc,OAAO;AACrB,oBAAkB,UAAmC;GAAC,GAAG;GAAM,GAAG;GAAQ,EAAE;IAC3E,CAAC,YAAY,CAAC;CAEjB,MAAMC,gDAA0C,MAAM;;;;;AAMtD,4BAAgB;AACd,MAAI,CAAC,cAAe;AAEpB,GAAC,YAA2B;AAC1B,OAAI;IAEF,MAAMC,WAAgB,OADM,MAAM,mBAAmB,GACT,kBAAkB;AAC9D,QAAI,UAAU,eACZ,mBAAkB,UAAU,SAAS;aAE/B;AACR,sBAAkB,KAAK;;MAEvB;IACH,CAAC,cAAc,CAAC;;;;;CAMnB,MAAM,oBAAoB,OAAO,mBAAiD;AAChF,oBAAkB,UAAU;EAC5B,MAAMC,iBAAsB,MAAM,mBAAmB;AACrD,MAAI,eACF,KAAI,eACF,OAAM,eAAe,0BAA0B,kBAAkB,eAAe;MAEhF,OAAM,eAAe,6BAA6B,iBAAiB;;;;;;CASzE,MAAMC,sCACH,UAAe;EACd,MAAMC,eAAuBC,4CAAoB,OAAO,GAAG,yCAAyC;AAGpG,cAAY,iBAAiB,QAAQ,QAAQ,IAAI,MAAM,aAAa,CAAC;AAGrE,YAAU,iBAAiB,QAAQ,QAAQ,IAAI,MAAM,aAAa,CAAC;IAErE,CAAC,GAAG,QAAQ,CACb;;;;;CAMD,MAAMC,qDACH,aAAiE;AAChE,MAAI,CAAC,UAAU,MAAM,MAAM,WACzB,QAAO;AAGT,MAAI;GACF,MAAM,EAAC,6BAAcC,8CACnB,UACA,GACA;IACE,iBAAiB;IACjB,qBAAqB;IACtB,EACD,KACD;AAED,UAAO;IACL,GAAG;IACH,MAAM;KACJ,GAAG,SAAS;KACZ,YAAYC;KACb;IACF;UACK;AAEN,UAAO;;IAGX,CAAC,GAAG,SAAS,CACd;;;;;AAMD,2CAAiB;EACf,oBAAoB,eAAe;EACnC,uBAAuB,GAAG,OAAO;EACjC,eAAe;EACf,kBAAkB;AAChB,wBAAqB,MAAM;AAC3B,iBAAc;;EAEhB,UAAU,UAAe;AACvB,OAAI,CAAC,OAAO,WACV,mBAAkB,KAAK;AAEzB,wBAAqB,MAAM;AAC3B,eAAY,MAAM;;EAEpB,eAAe,aAAkB;AAC/B,kBAAe,SAAS;AACxB,OAAI,SAAS,eAAe,YAAY;AACtC,kBAAc,KAAK;AAEnB,SADoC,SAAS,MAAM,cAAc,SAAS,MAAM,MAAM,cAAc,EAAE,EAC7E,SAAS,EAChC,gBAAe,SAAS;UAErB;AAEL,mBAAe,SAAS;AACxB,kBAAc,EAAE,CAAC;AACjB,kBAAc,EAAE,CAAC;AACjB,qBAAiB,EAAE,CAAC;;;EAGxB,yBAAyB;AACvB,wBAAqB,KAAK;;EAE5B,UAAU,OAAO,YAAiB;GAKhC,MAAMC,WAAgB,2BAJG,MAAM,SAAS;IACtC,GAAG;IACH,GAAI,kBAAkB,UAAU,EAAC,gBAAgB,kBAAkB,SAAQ,GAAG,EAAE;IACjF,CAAC,CAC2D;AAC7D,SAAM,kBAAkB,SAAS,kBAAkB,KAAK;AACxD,UAAO;;EAET;EACD,CAAC;;;;CAKF,MAAMC,4CAAsC,MAAc,UAAkB;AAC1E,iBAAe,UAAe;GAAC,GAAG;IAAO,OAAO;GAAM,EAAE;AAExD,iBAAe,SAAc;GAC3B,MAAMC,YAAiB,EAAC,GAAG,MAAK;AAChC,UAAO,UAAU;AACjB,UAAO;IACP;AACF,iBAAe,KAAK;IACnB,EAAE,CAAC;;;;CAKN,MAAMC,0CAAoC,SAAiB;AACzD,oBAAkB,UAAe;GAAC,GAAG;IAAO,OAAO;GAAK,EAAE;IACzD,EAAE,CAAC;;;;CAKN,MAAMC,uCACH,iBAA0E;EACzE,MAAMf,SAAiC,EAAE;EAEzC,MAAM,sBAAsB,UAAsB;AAChD,SAAM,SAAS,SAAc;AAC3B,SACG,KAAK,SAAS,oBACb,KAAK,SAAS,gBACd,KAAK,SAAS,iBACd,KAAK,SAAS,iBACd,KAAK,SAAS,eACd,KAAK,SAAS,gBACd,KAAK,SAAS,aAChB,KAAK,KACL;KACA,MAAMgB,QAAa,WAAW,KAAK;AACnC,SAAI,KAAK,aAAa,CAAC,SAAS,MAAM,MAAM,KAAK,IAC/C,QAAO,KAAK,OAAO,EAAE,mCAAmC;cAC/C,OAAO;MAEhB,MAAM,iEAAwC,KAAK,WAAW;AAC9D,UAAI,eAAe;OACjB,MAAM,UAAU,cAAc,MAAM;AACpC,WAAI,QACF,QAAO,KAAK,OAAO,EAAE,QAAQ;;;;AAKrC,QAAI,KAAK,cAAc,MAAM,QAAQ,KAAK,WAAW,CACnD,oBAAmB,KAAK,WAAW;KAErC;;AAGJ,qBAAmBN,aAAW;AAE9B,SAAO;GAAC;GAAQ,SAAS,OAAO,KAAK,OAAO,CAAC,WAAW;GAAE;IAE5D,CAAC,YAAY,EAAE,CAChB;;;;CAKD,MAAMO,sCACJ,OAAO,WAAgB,SAA+B;AACpD,MAAI,CAAC,YACH;EAKF,MAAMC,aAAkB,aADA,YAAY,MAAM,cAAc,EAAE,CACV;AAEhD,MAAI,CAAC,WAAW,SAAS;AACvB,kBAAe,MAAM;AACrB,iBAAc,WAAW,OAAO;GAEhC,MAAMjB,UAAmC,EAAE;AAC3C,UAAO,KAAK,WAAW,OAAO,CAAC,SAAS,QAAa;AACnD,YAAQ,OAAO;KACf;AACF,qBAAkB,UAAe;IAAC,GAAG;IAAM,GAAG;IAAQ,EAAE;AACxD;;AAGF,eAAa,KAAK;AAClB,cAAY,KAAK;AAEjB,MAAI;GAEF,MAAMkB,SAAc,EAAC,GAAI,QAAQ,YAAY;GAK7C,MAAM,wBAAyB,aAAa,MAAM,kBAA0C,EAAE;AAC9F,OAAI,sBAAsB,iBACxB,KAAI;IACF,MAAMC,MAAW,sBAAsB;IACvC,MAAMC,WAAkB,OAAO,QAAQ,WAAW,KAAK,MAAM,IAAI,GAAG,IAAI,YAAY;IACpF,MAAM,SAAS,WAAW,SAAS,aAAa,KAAK;IACrD,MAAM,YAAY;KAChB,UAAU,CAAC;KACX,GAAI,SAAS,EAAC,QAAQC,qCAAiB,oBAAmB,GAAG,EAAE;KAC/D,UAAU,SAAS,KAAK,OAAY;MAClC,UAAU,CAAC;MACX,aAAa,EAAE;MACf,UAAU,CACR,IAAI,EAAE,aAAa,EAAE,EAAE,KAAK,OAAY;OAAC,UAAU,CAAC;OAAQ,MAAM,EAAE;OAAK,EAAE,EAC3E,IAAI,EAAE,YAAY,EAAE,EAAE,KAAK,MAAW;OACpC,MAAM,MAAM,kBAAkB,EAAE,UAAU,IAAI,EAAE;AAChD,cAAO;QAAC,UAAU,CAAC,UAAU,OAAO,SAAS;QAAQ,MAAM,EAAE;QAAK;QAClE,CACH;MACF,EAAE;KACJ;AACD,WAAO,oBAAoB,KAAK,UAAU,UAAU;AACpD,WAAO,KAAK,OAAO,CAAC,SAAS,MAAc;AACzC,SAAI,EAAE,WAAW,kBAAkB,CAAE,QAAO,OAAO;MACnD;WACI;GAKV,MAAMC,UAA+B;IACnC,aAAa,YAAY;IACzB;IACA,SAAS;IACT,GAAI,kBAAkB,UAAU,EAAC,gBAAgB,kBAAkB,SAAQ,GAAG,EAAE;IACjF;AAGD,OAAI,WAAW,GACb,SAAQ,YAAY,UAAU;GAIhC,MAAMZ,WAAgB,2BADG,MAAM,SAAS,QAAQ,CACa;AAC7D,kBAAe,SAAS;AAExB,SAAM,kBAAkB,SAAS,kBAAkB,KAAK;AAGxD,OAAI,SAAS,SAAS,eAAe;IACnC,MAAMa,cAAmB,SAAS,MAAM,eAAe,UAAU;AACjE,QAAI,eAAe,OAAO,WAAW,aAAa;AAEhD,yCAAsB,aAAa,OAAO;AAC1C;;;AAKJ,OAAI,SAAS,eAAe,YAAY;AACtC,kBAAc,KAAK;AAEnB,SADoC,SAAS,MAAM,cAAc,SAAS,MAAM,MAAM,cAAc,EAAE,EAC7E,SAAS,EAChC,gBAAe,SAAS;QAExB,eAAc;AAEhB;;AAIF,OAAI,SAAS,eAAe,SAAS;AACnC,gBAAY,SAAS;AACrB;;AAIF,kBAAe,SAAS;AACxB,iBAAc,EAAE,CAAC;AACjB,oBAAiB,EAAE,CAAC;AAGpB,OAAI,UAAU,MACZ,aAAY,SAAS;WAEhB,KAAK;AACZ,eAAY,IAAI;YACR;AACR,gBAAa,MAAM;;IAGvB;EACE;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACD,CACF;;;;CAKD,MAAM,yCAA8B;AAClC,gBAAc,EAAE,CAAC;AACjB,gBAAc,EAAE,CAAC;AACjB,mBAAiB,EAAE,CAAC;IACnB,EAAE,CAAC;;;;AAKN,4BAAgB;AAEd,MAAI,4BAA4B,QAC9B;AAMF,MADmC,IAAI,gBAAgB,OAAO,SAAS,OAAO,CAChE,IAAI,OAAO,CACvB;AAIF,MAAI,CAAC,eAAe,CAAC,aAAa;AAChC,wBAAqB,MAAM;AAC3B,qBAAkB,KAAK;AACvB,+BAAY,IAAI,MAAM,2DAA2D,CAAC;AAClF;;AAGF,8BAA4B,UAAU;AAEtC,GAAC,YAA2B;AAC1B,wBAAqB,KAAK;AAC1B,eAAY,KAAK;AAEjB,OAAI;AAEF,QAAI,YACF,gBAAe,QAAQ,GAAG,OAAO,gBAAgB,YAAY;IAa/D,MAAMb,WAAgB,2BADG,MAAM,SARV;KACnB;KACA,QAAQ,EACN,aACD;KACD,SAAS;KACV,CAE+C,CACa;AAC7D,mBAAe,SAAS;AAExB,UAAM,kBAAkB,SAAS,kBAAkB,KAAK;AAGxD,QAAI,SAAS,eAAe,SAAS;AACnC,uBAAkB,KAAK;AACvB,iBAAY,SAAS;AACrB;;AAIF,mBAAe,SAAS;AAGxB,QAAI,UAAU,MACZ,aAAY,SAAS;YAEhB,KAAK;AACZ,sBAAkB,KAAK;AACvB,gBAAY,IAAI;aACR;AACR,yBAAqB,MAAM;;MAE3B;IACH;EAAC;EAAa;EAAa;EAAU;EAAc;EAAa;EAA2B,CAAC;;;;CAK/F,MAAMc,0CAAoC,iBAA2D;EACnG,IAAIC;EACJ,IAAIC;AAEJ,eAAW,SAAS,SAAc;AAChC,OAAI,KAAK,SAAS,QAChB;QAAI,KAAK,YAAY,eAAe,CAACC,QACnC,WAAQ,KAAK;cACH,KAAK,YAAY,eAAe,KAAK,YAAY,iBAAiB,CAACC,WAC7E,cAAW,KAAK;;IAGpB;AAEF,SAAO;GAAC;GAAU;GAAM;IACvB,EAAE,CAAC;;;;CAKN,MAAMC,yCACH,iBACCpB,aAAW,QACR,SAAc,EAAE,KAAK,SAAS,WAAW,KAAK,YAAY,eAAe,KAAK,YAAY,cAC5F,EACH,EAAE,CACH;CAGD,MAAMqB,aAAkB,aAAa,MAAM,cAAc,aAAa,MAAM,MAAM,cAAc,EAAE;CAClG,MAAM,EAAC,OAAO,aAAY,gBAAgB,WAAW;CACrD,MAAMC,4BAAiC,eAAe,WAAW;CAIjE,MAAMC,cAA2C;EAC/C,gBAJ2C,aAAa,MAAM,kBAA0C,EAAE;EAK1G;EACA,OAAO;EACP;EACA,aAAa;EACb,YAAY;EACZ;EACA;EACA;EACA;EACA;EACA;EACA;EACA,SAAS;EACT;EACA;EACA;EACA;EACA,SAAS;EACT,QAAQ;EACT;AAGD,KAAI,SACF,QAAO,2CAAC;EAAe;YAAY,SAAS,YAAY;GAAO;AAMjE,KAAI,kBACF,QACE,2CAACC;EAAc,WAAWC,mBAAG,WAAW,OAAO,KAAK;EAAW;YAC7D,2CAACD,qBAAc,qBACb,4CAAC;GAAI,WAAY,OAAkC;cACjD,2CAACE,2BAAQ,MAAK,WAAW,EACzB,2CAACC;IAAW,SAAQ;cAAQ;KAA2C;IACnE,GACgB;GACV;AAKpB,KAAI,eACF,QACE,4CAACH;EAAc,WAAWC,mBAAG,WAAW,OAAO,KAAK;EAAW;aAC7D,2CAACD,qBAAc;GAAO,WAAW,OAAO;aACtC,2CAACA,qBAAc;IAAM,OAAO;IAAG,WAAW,OAAO;cAAO;KAElC;IACD,EACvB,4CAACA,qBAAc,sBACb,4CAACI;GAAe,SAAQ;cACtB,2CAACA,sBAAe,mBAAM,4BAA8C,EACpE,2CAACA,sBAAe,yBACb,UAAU,WACT,oGACyB;IACd,EAChB,gBACC,2CAAC;GAAI,WAAY,OAAkC;aACjD,2CAACC;IAAO,SAAQ;IAAU,SAAS;cAAc;KAExC;IACL,IAEc;GACV;AAKpB,QACE,4CAACL;EAAc,WAAWC,mBAAG,WAAW,OAAO,KAAK;EAAW;cAC3D,aAAa,kBAAkB,SAAS,aACxC,4CAACD,qBAAc;GAAO,WAAW,OAAO;cACrC,aAAa,SACZ,2CAACA,qBAAc;IAAM,OAAO;IAAG,WAAW,OAAO;cAC9C;KACmB,EAEvB,gBAAgB,YACf,2CAACG;IAAW,SAAQ;IAAQ,WAAW,OAAO;cAC3C;KACU;IAEM,EAEzB,4CAACH,qBAAc;GACZ,YACC,2CAAC;IAAI,WAAY,OAAkC;cACjD,2CAACI;KAAe,SAAQ;eACtB,2CAACA,sBAAe,yBAAa,SAAS,UAAqC;MAC5D;KACb;GAER,4CAAC,oBACE,6BAA6B,0BAA0B,SAAS,IAC7DE,qDACE,2BACA,YACA,eACA,YACA,WACA,aACA,WACA,mBACA;IACE,kBAAkB;IAClB,QAAQ;IACR,aAAa;IACb,UAAU;IACV;IACA;IACD,CACF,GACD,CAAC,aACC,2CAACF;IAAe,SAAQ;cACtB,2CAACD;KAAW,SAAQ;eAAQ;MAAyC;KACtD,EAEtB,aACC,2CAAC;IAAI,WAAY,OAAkC;cACjD,2CAACD,2BAAQ,MAAK,UAAU;KACpB,IAEJ;GACL,gBACC,2CAAC;IAAI,WAAY,OAAkC;cACjD,4CAACC;KAAW,SAAQ;;MAAQ;MACD;MACzB,2CAACE;OACC,SAAQ;OACR,SAAS;OACT,WAAY,OAAkC;iBAC/C;QAEQ;;MACE;KACT;MAEc;GACV;;AAIpB,+BAAe"}

package/dist/cjs/components/presentation/auth/AuthOptionFactory.cjs

@@ -22,6 +22,9 @@ const require_Divider = require('../../primitives/Divider/Divider.cjs');
 const require_flowIconRegistry = require('../../primitives/Icons/flowIconRegistry.cjs');
 const require_KeyValueList = require('../../primitives/KeyValueList/KeyValueList.cjs');
 const require_AffixedField = require('../../primitives/AffixedField/AffixedField.cjs');
+const require_BaseAuthFlowSelect = require('../../primitives/AuthFlowSelect/BaseAuthFlowSelect.cjs');
+const require_BaseUserSelect = require('../../primitives/UserSelect/BaseUserSelect.cjs');
+const require_BaseUserTypeSelect = require('../../primitives/UserTypeSelect/BaseUserTypeSelect.cjs');
 let __thunderid_browser = require("@thunderid/browser");
 __thunderid_browser = require_rolldown_runtime.__toESM(__thunderid_browser);
 let react = require("react");
@@ -133,20 +136,23 @@ const createAuthComponentFromFlow = (component, formValues, touchedFields, formE
 	const customRenderers = options._customRenderers ?? {};
 	const key = options.key || component.id;
 	const customRenderer = customRenderers[component.id] ?? customRenderers[component.type];
-	if (customRenderer) return customRenderer(component, {
-		additionalData: options.additionalData,
-		authType,
-		formErrors,
-		formValues,
-		isFormValid,
-		isLoading,
-		meta: options.meta,
-		resetForm,
-		onInputBlur: options.onInputBlur,
-		onInputChange,
-		onSubmit: options.onSubmit,
-		touchedFields
-	});
+	if (customRenderer) {
+		const rendered = customRenderer(component, {
+			additionalData: options.additionalData,
+			authType,
+			formErrors,
+			formValues,
+			isFormValid,
+			isLoading,
+			meta: options.meta,
+			resetForm,
+			onInputBlur: options.onInputBlur,
+			onInputChange,
+			onSubmit: options.onSubmit,
+			touchedFields
+		});
+		return rendered ? (0, react.cloneElement)(rendered, { key }) : null;
+	}
 	/** Resolve any remaining {{t()}} or {{meta()}} template expressions in a string at render time. */
 	const resolve = (text) => {
 		if (!text || !options.t && !options.meta) return text || "";
@@ -155,6 +161,28 @@ const createAuthComponentFromFlow = (component, formValues, touchedFields, formE
 			t: options.t || ((k) => k)
 		});
 	};
+	const resourceSelectProps = () => {
+		const identifier = component.ref;
+		const isTouched = touchedFields[identifier] || false;
+		return {
+			className: require_emotion.cx(options.inputClassName, component.classes),
+			component,
+			error: isTouched ? formErrors[identifier] : void 0,
+			id: component.id,
+			label: resolve(component.label) || "",
+			name: identifier,
+			onBlur: () => options.onInputBlur?.(identifier),
+			onChange: (event) => onInputChange(identifier, event.target.value),
+			onError: options.onPickerError,
+			placeholder: resolve(component.placeholder),
+			required: component.required,
+			value: formValues[identifier] || ""
+		};
+	};
+	const skipUnsupported = (typeName) => {
+		logger.warn(`${typeName} component type is not supported. Skipping render.`);
+		return null;
+	};
 	switch (component.type) {
 		case __thunderid_browser.EmbeddedFlowComponentType.TextInput:
 		case __thunderid_browser.EmbeddedFlowComponentType.PasswordInput:
@@ -392,9 +420,19 @@ const createAuthComponentFromFlow = (component, formValues, touchedFields, formE
 				className: require_emotion.cx(options.inputClassName, component.classes)
 			}, key);
 		}
-		case __thunderid_browser.EmbeddedFlowComponentType.OuSelect:
-			logger.warn("OU_SELECT component type is not supported. Skipping render.");
-			return null;
+		case __thunderid_browser.EmbeddedFlowComponentType.OuSelect: return skipUnsupported("OU_SELECT");
+		case __thunderid_browser.EmbeddedFlowComponentType.UserSelect: return options.fetchUsers ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)(require_BaseUserSelect.default, {
+			...resourceSelectProps(),
+			fetchUsers: options.fetchUsers
+		}, key) : skipUnsupported("USER_SELECT");
+		case __thunderid_browser.EmbeddedFlowComponentType.AuthFlowSelect: return options.fetchAuthFlows ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)(require_BaseAuthFlowSelect.default, {
+			...resourceSelectProps(),
+			fetchAuthFlows: options.fetchAuthFlows
+		}, key) : skipUnsupported("AUTH_FLOW_SELECT");
+		case __thunderid_browser.EmbeddedFlowComponentType.UserTypeSelect: return options.fetchUserTypes ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)(require_BaseUserTypeSelect.default, {
+			...resourceSelectProps(),
+			fetchUserTypes: options.fetchUserTypes
+		}, key) : skipUnsupported("USER_TYPE_SELECT");
 		case __thunderid_browser.EmbeddedFlowComponentType.Block:
 			if (component.components && component.components.length > 0) {
 				const formClass = require_emotion.css({
@@ -545,6 +583,7 @@ const createAuthComponentFromFlow = (component, formValues, touchedFields, formE
 			const value = sourceKey && options.additionalData ? String(options.additionalData[sourceKey] ?? "") : "";
 			return /* @__PURE__ */ (0, react_jsx_runtime.jsx)(require_CopyableText.default, {
 				label: resolve(component.label) || void 0,
+				masked: Boolean(component.masked),
 				value
 			}, key);
 		}