@thunderid/react 1.4.1 → 1.5.0

package/dist/ThunderIDReactClient.d.ts

@@ -30,6 +30,11 @@ declare class ThunderIDReactClient<T extends ThunderIDReactConfig = ThunderIDRea
     signUp(options?: SignUpOptions): Promise<void>;
     signUp(payload: any): Promise<any>;
     recover(payload?: any): Promise<any>;
+    /**
+     * The embedded flows keep their result in the browser, which running sign-in on the backend rules
+     * out. Running them through the backend is not supported yet.
+     */
+    private rejectEmbeddedFlowInBackendMode;
     getStorageManager(): any;
     request(requestConfig?: HttpRequestConfig): Promise<HttpResponse<any>>;
     requestAll(requestConfigs?: HttpRequestConfig[]): Promise<HttpResponse<any>[]>;

package/dist/ThunderIDReactClient.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ThunderIDReactClient.d.ts","sourceRoot":"","sources":["../src/ThunderIDReactClient.ts"],"names":[],"mappings":"AAGA,OAAO,EACL,sBAAsB,EACtB,WAAW,EACX,aAAa,EACb,IAAI,EACJ,aAAa,EAGb,OAAO,EAEP,aAAa,EACb,iBAAiB,EACjB,YAAY,EACZ,0BAA0B,EAE1B,0BAA0B,EAM3B,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAC,oBAAoB,EAAC,MAAM,iBAAiB,CAAC;AAErD,cAAM,oBAAoB,CAAC,CAAC,SAAS,oBAAoB,GAAG,oBAAoB,CAAE,SAAQ,sBAAsB,CAAC,CAAC,CAAC;IACjH,OAAO,CAAC,YAAY,CAAS;IAE7B,OAAO,CAAC,iBAAiB,CAAmC;gBAEhD,UAAU,SAAI;IAI1B,OAAO,CAAC,UAAU;YAIJ,WAAW;IAUzB;;;;;;;OAOG;YACW,gBAAgB;IAkBrB,UAAU,CAAC,MAAM,EAAE,oBAAoB,GAAG,OAAO,CAAC,OAAO,CAAC;IAY1D,YAAY,CAAC,MAAM,EAAE,OAAO,CAAC,oBAAoB,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC;IAoB/D,iBAAiB,IAAI,OAAO,CAAC,IAAI,CAAC;IAIlC,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;IAIxB,iBAAiB,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAIvD,UAAU,IAAI,OAAO,CAAC,MAAM,CAAC;IAI7B,cAAc,IAAI,OAAO,CAAC,WAAW,CAAC;IAW5C,SAAS,IAAI,OAAO;IAId,UAAU,IAAI,OAAO,CAAC,OAAO,CAAC;IAI9B,aAAa,CAAC,MAAM,EAAE,0BAA0B,GAAG,OAAO,CAAC,aAAa,GAAG,QAAQ,CAAC;IAIpF,MAAM,CAAC,GAAG,IAAI,EAAE,GAAG,EAAE,GAAG,OAAO,CAAC,IAAI,GAAG,0BAA0B,CAAC;IAuElE,cAAc,CAAC,OAAO,CAAC,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,GAAG,OAAO,CAAC;IAMhE,MAAM,CAAC,OAAO,CAAC,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC;IAC9C,MAAM,CAAC,OAAO,EAAE,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC;IAoDlC,OAAO,CAAC,OAAO,CAAC,EAAE,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC;IAUnC,iBAAiB,IAAI,GAAG;IAIlC,OAAO,CAAC,aAAa,CAAC,EAAE,iBAAiB,GAAG,OAAO,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;IAItE,UAAU,CAAC,cAAc,CAAC,EAAE,iBAAiB,EAAE,GAAG,OAAO,CAAC,YAAY,CAAC,GAAG,CAAC,EAAE,CAAC;CAGrF;AAED,eAAe,oBAAoB,CAAC"}
+{"version":3,"file":"ThunderIDReactClient.d.ts","sourceRoot":"","sources":["../src/ThunderIDReactClient.ts"],"names":[],"mappings":"AAGA,OAAO,EACL,sBAAsB,EACtB,WAAW,EACX,aAAa,EACb,IAAI,EACJ,aAAa,EAGb,OAAO,EAEP,aAAa,EACb,iBAAiB,EACjB,YAAY,EACZ,0BAA0B,EAE1B,0BAA0B,EAM3B,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAC,oBAAoB,EAAC,MAAM,iBAAiB,CAAC;AAErD,cAAM,oBAAoB,CAAC,CAAC,SAAS,oBAAoB,GAAG,oBAAoB,CAAE,SAAQ,sBAAsB,CAAC,CAAC,CAAC;IACjH,OAAO,CAAC,YAAY,CAAS;IAE7B,OAAO,CAAC,iBAAiB,CAAmC;gBAEhD,UAAU,SAAI;IAI1B,OAAO,CAAC,UAAU;YAIJ,WAAW;IAUzB;;;;;;;OAOG;YACW,gBAAgB;IAkBrB,UAAU,CAAC,MAAM,EAAE,oBAAoB,GAAG,OAAO,CAAC,OAAO,CAAC;IAY1D,YAAY,CAAC,MAAM,EAAE,OAAO,CAAC,oBAAoB,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC;IAoB/D,iBAAiB,IAAI,OAAO,CAAC,IAAI,CAAC;IAIlC,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;IAIxB,iBAAiB,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAIvD,UAAU,IAAI,OAAO,CAAC,MAAM,CAAC;IAI7B,cAAc,IAAI,OAAO,CAAC,WAAW,CAAC;IAW5C,SAAS,IAAI,OAAO;IAId,UAAU,IAAI,OAAO,CAAC,OAAO,CAAC;IAI9B,aAAa,CAAC,MAAM,EAAE,0BAA0B,GAAG,OAAO,CAAC,aAAa,GAAG,QAAQ,CAAC;IAIpF,MAAM,CAAC,GAAG,IAAI,EAAE,GAAG,EAAE,GAAG,OAAO,CAAC,IAAI,GAAG,0BAA0B,CAAC;IAyElE,cAAc,CAAC,OAAO,CAAC,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,GAAG,OAAO,CAAC;IAMhE,MAAM,CAAC,OAAO,CAAC,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC;IAC9C,MAAM,CAAC,OAAO,EAAE,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC;IAsDlC,OAAO,CAAC,OAAO,CAAC,EAAE,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC;IAYnD;;;OAGG;IACH,OAAO,CAAC,+BAA+B;IAWvB,iBAAiB,IAAI,GAAG;IAIlC,OAAO,CAAC,aAAa,CAAC,EAAE,iBAAiB,GAAG,OAAO,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;IAItE,UAAU,CAAC,cAAc,CAAC,EAAE,iBAAiB,EAAE,GAAG,OAAO,CAAC,YAAY,CAAC,GAAG,CAAC,EAAE,CAAC;CAGrF;AAED,eAAe,oBAAoB,CAAC"}

package/dist/ThunderIDReactClient.js

@@ -76,7 +76,7 @@ var ThunderIDReactClient = class extends ThunderIDBrowserClient {
 		});
 	}
 	isLoading() {
-		return this.loadingState;
+		return this.loadingState || super.isLoading();
 	}
 	async isSignedIn() {
 		return super.isSignedIn();
@@ -91,6 +91,7 @@ var ThunderIDReactClient = class extends ThunderIDBrowserClient {
 			const config = await this.ensureConfigData();
 			if (typeof arg1 === "object" && arg1 !== null && arg1.callOnlyOnRedirect === true) return;
 			if (typeof arg1 === "object" && arg1 !== null && !isEmpty(arg1) && ("executionId" in arg1 || "applicationId" in arg1)) {
+				this.rejectEmbeddedFlowInBackendMode();
 				const authIdFromUrl = new URL(window.location.href).searchParams.get("authId") ?? "";
 				const authIdFromStorage = await this.getStorageManager().getHybridDataParameter("authId") ?? "";
 				const response = await executeEmbeddedSignInFlow({
@@ -123,6 +124,7 @@ var ThunderIDReactClient = class extends ThunderIDBrowserClient {
 		return super.signInSilently(options);
 	}
 	async signUp(...args) {
+		this.rejectEmbeddedFlowInBackendMode();
 		const config = await this.getStorageManager().getConfigData();
 		const firstArg = args[0];
 		const baseUrl = config?.baseUrl ?? "";
@@ -152,6 +154,7 @@ var ThunderIDReactClient = class extends ThunderIDBrowserClient {
 		return response;
 	}
 	async recover(payload) {
+		this.rejectEmbeddedFlowInBackendMode();
 		const config = await this.getStorageManager().getConfigData();
 		return executeEmbeddedRecoveryFlow({
 			baseUrl: config?.baseUrl,
@@ -162,6 +165,13 @@ var ThunderIDReactClient = class extends ThunderIDBrowserClient {
 			url: resolveResourceEndpoint("flowExecute", config)
 		});
 	}
+	/**
+	* The embedded flows keep their result in the browser, which running sign-in on the backend rules
+	* out. Running them through the backend is not supported yet.
+	*/
+	rejectEmbeddedFlowInBackendMode() {
+		if (this.isBackendMode()) throw new ThunderIDRuntimeError("Embedded sign-in, sign-up, and recovery flows are not supported when sign-in runs on the backend.", "ThunderIDReactClient-embeddedFlow-RuntimeError-001", "react", "Use redirect sign-in with the backend.");
+	}
 	getStorageManager() {
 		return super.getStorageManager();
 	}

package/dist/ThunderIDReactClient.js.map

@@ -1 +1 @@
-{"version":3,"file":"ThunderIDReactClient.js","names":["config: ThunderIDReactConfig | undefined","isInitialized: boolean","claims: User","arg1: any","arg2: any","authIdFromUrl: string","authIdFromStorage: string","response: EmbeddedSignInFlowResponse","decodedAssertion: {\n            [key: string]: unknown;\n            exp?: number;\n            iat?: number;\n            scope?: string;\n          }","createdAt: number","expiresIn: number","config: ThunderIDReactConfig","firstArg: any","baseUrl: string","response: any","decodedAssertion: {\n        [key: string]: unknown;\n        exp?: number;\n        iat?: number;\n        scope?: string;\n      }"],"sources":["../src/ThunderIDReactClient.ts"],"sourcesContent":["// Copyright 2025-2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\nimport {\n  ThunderIDBrowserClient,\n  UserProfile,\n  SignInOptions,\n  User,\n  SignUpOptions,\n  ThunderIDRuntimeError,\n  executeEmbeddedSignInFlow,\n  IdToken,\n  extractUserClaimsFromIdToken,\n  TokenResponse,\n  HttpRequestConfig,\n  HttpResponse,\n  TokenExchangeRequestConfig,\n  isEmpty,\n  EmbeddedSignInFlowResponse,\n  executeEmbeddedSignUpFlow,\n  executeEmbeddedRecoveryFlow,\n  EmbeddedSignInFlowStatus,\n  EmbeddedSignUpFlowStatus,\n  resolveResourceEndpoint,\n} from '@thunderid/browser';\nimport {ThunderIDReactConfig} from './models/config';\n\nclass ThunderIDReactClient<T extends ThunderIDReactConfig = ThunderIDReactConfig> extends ThunderIDBrowserClient<T> {\n  private loadingState = false;\n\n  private _initializeConfig: ThunderIDReactConfig | undefined;\n\n  constructor(instanceId = 0) {\n    super(instanceId);\n  }\n\n  private setLoading(loading: boolean): void {\n    this.loadingState = loading;\n  }\n\n  private async withLoading<TResult>(operation: () => Promise<TResult>): Promise<TResult> {\n    this.setLoading(true);\n    try {\n      const result: TResult = await operation();\n      return result;\n    } finally {\n      this.setLoading(false);\n    }\n  }\n\n  /**\n   * Returns the stored config, re-running initialization first when it has gone missing.\n   *\n   * NOTE: With React 19 strict mode, the initialization logic runs twice, and there's an intermittent\n   * issue where the config object is not getting stored in the storage layer with Vite scaffolding.\n   * An operation that resolves endpoints from a lost config fails (for example \"required endpoints\n   * are missing\"), so recover it from the config this client was initialized with.\n   */\n  private async ensureConfigData(): Promise<ThunderIDReactConfig | undefined> {\n    const config: ThunderIDReactConfig | undefined = (await this.getStorageManager().getConfigData()) as\n      | ThunderIDReactConfig\n      | undefined;\n    const isConfigLost: boolean =\n      !config || Object.keys(config).length === 0 || (Boolean(this._initializeConfig?.baseUrl) && !config.baseUrl);\n\n    if (!isConfigLost || !this._initializeConfig) {\n      return config;\n    }\n\n    await this.initialize(this._initializeConfig);\n\n    // Reload the config persisted by initialization so downstream endpoint resolution\n    // (baseUrl and the flowExecute override) uses the recovered values, not the stale empty config.\n    return (await this.getStorageManager().getConfigData()) as ThunderIDReactConfig | undefined;\n  }\n\n  override initialize(config: ThunderIDReactConfig): Promise<boolean> {\n    return this.withLoading(async () => {\n      this._initializeConfig = {\n        ...config,\n        periodicTokenRefresh:\n          config?.tokenLifecycle?.refreshToken?.autoRefresh ?? (config as any)?.periodicTokenRefresh,\n      } as any;\n\n      return super.initialize(this._initializeConfig as unknown as T);\n    });\n  }\n\n  override reInitialize(config: Partial<ThunderIDReactConfig>): Promise<boolean> {\n    return this.withLoading(async () => {\n      let isInitialized: boolean;\n\n      try {\n        await super.reInitialize(config as Partial<T>);\n        isInitialized = true;\n      } catch (error) {\n        throw new ThunderIDRuntimeError(\n          `Failed to check if the client is initialized: ${error instanceof Error ? error.message : String(error)}`,\n          'ThunderIDReactClient-reInitialize-RuntimeError-001',\n          'react',\n          'An error occurred while checking the initialization status of the client.',\n        );\n      }\n\n      return isInitialized;\n    });\n  }\n\n  override async updateUserProfile(): Promise<User> {\n    throw new Error('Not implemented');\n  }\n\n  override async getUser(): Promise<User> {\n    return extractUserClaimsFromIdToken(await this.getDecodedIdToken());\n  }\n\n  override async getDecodedIdToken(sessionId?: string): Promise<IdToken> {\n    return super.getDecodedIdToken(sessionId);\n  }\n\n  override async getIdToken(): Promise<string> {\n    return this.withLoading(async () => super.getIdToken());\n  }\n\n  override async getUserProfile(): Promise<UserProfile> {\n    return this.withLoading(async () => {\n      const claims: User = extractUserClaimsFromIdToken(await this.getDecodedIdToken());\n      return {\n        flattenedProfile: claims,\n        profile: claims,\n        schemas: [],\n      };\n    });\n  }\n\n  override isLoading(): boolean {\n    return this.loadingState;\n  }\n\n  override async isSignedIn(): Promise<boolean> {\n    return super.isSignedIn();\n  }\n\n  override async exchangeToken(config: TokenExchangeRequestConfig): Promise<TokenResponse | Response> {\n    return this.withLoading(async () => super.exchangeToken(config) as unknown as TokenResponse | Response);\n  }\n\n  override async signIn(...args: any[]): Promise<User | EmbeddedSignInFlowResponse> {\n    return this.withLoading(async () => {\n      const arg1: any = args[0];\n      const arg2: any = args[1];\n\n      const config: ThunderIDReactConfig | undefined = await this.ensureConfigData();\n\n      if (typeof arg1 === 'object' && arg1 !== null && arg1.callOnlyOnRedirect === true) {\n        return undefined as any;\n      }\n\n      if (\n        typeof arg1 === 'object' &&\n        arg1 !== null &&\n        !isEmpty(arg1) &&\n        ('executionId' in arg1 || 'applicationId' in arg1)\n      ) {\n        const authIdFromUrl: string = new URL(window.location.href).searchParams.get('authId') ?? '';\n        const authIdFromStorage: string =\n          ((await this.getStorageManager().getHybridDataParameter('authId')) as string) ?? '';\n        const authId: string = authIdFromUrl || authIdFromStorage;\n        const baseUrl: string = config?.baseUrl ?? '';\n\n        const response: EmbeddedSignInFlowResponse = await executeEmbeddedSignInFlow({\n          authId,\n          baseUrl,\n          payload: arg1,\n          url: resolveResourceEndpoint('flowExecute', config, arg2?.url),\n        });\n\n        if (\n          response &&\n          typeof response === 'object' &&\n          response.flowStatus === EmbeddedSignInFlowStatus.Complete &&\n          response.assertion\n        ) {\n          const decodedAssertion: {\n            [key: string]: unknown;\n            exp?: number;\n            iat?: number;\n            scope?: string;\n          } = await this.decodeJwtToken<{\n            [key: string]: unknown;\n            exp?: number;\n            iat?: number;\n            scope?: string;\n          }>(response.assertion);\n\n          const createdAt: number = decodedAssertion.iat ? decodedAssertion.iat * 1000 : Date.now();\n          const expiresIn: number =\n            decodedAssertion.exp && decodedAssertion.iat ? decodedAssertion.exp - decodedAssertion.iat : 3600;\n\n          await this.setSession({\n            access_token: response.assertion,\n            created_at: createdAt,\n            expires_in: expiresIn,\n            id_token: response.assertion,\n            scope: decodedAssertion.scope,\n            token_type: 'Bearer',\n          });\n\n          this.notifySignIn(extractUserClaimsFromIdToken(decodedAssertion as IdToken) as User);\n        }\n\n        return response;\n      }\n\n      return (await super.signIn(...args)) as unknown as User;\n    });\n  }\n\n  override async signInSilently(options?: SignInOptions): Promise<User | boolean> {\n    await this.ensureConfigData();\n\n    return super.signInSilently(options as Record<string, string | boolean>) as Promise<User | boolean>;\n  }\n\n  override async signUp(options?: SignUpOptions): Promise<void>;\n  override async signUp(payload: any): Promise<any>;\n  override async signUp(...args: any[]): Promise<void | any> {\n    const config: ThunderIDReactConfig = (await this.getStorageManager().getConfigData()) as ThunderIDReactConfig;\n    const firstArg: any = args[0];\n    const baseUrl: string = config?.baseUrl ?? '';\n\n    const authId: string = new URL(window.location.href).searchParams.get('authId') ?? '';\n\n    const response: any = await executeEmbeddedSignUpFlow({\n      authId,\n      baseUrl,\n      payload: typeof firstArg === 'object' && 'flowType' in firstArg ? {...firstArg, verbose: true} : firstArg,\n      url: resolveResourceEndpoint('flowExecute', config),\n    });\n\n    if (\n      response &&\n      typeof response === 'object' &&\n      response.flowStatus === EmbeddedSignUpFlowStatus.Complete &&\n      response.assertion\n    ) {\n      const decodedAssertion: {\n        [key: string]: unknown;\n        exp?: number;\n        iat?: number;\n        scope?: string;\n      } = await this.decodeJwtToken<{\n        [key: string]: unknown;\n        exp?: number;\n        iat?: number;\n        scope?: string;\n      }>(response.assertion);\n\n      const createdAt: number = decodedAssertion.iat ? decodedAssertion.iat * 1000 : Date.now();\n      const expiresIn: number =\n        decodedAssertion.exp && decodedAssertion.iat ? decodedAssertion.exp - decodedAssertion.iat : 3600;\n\n      await this.setSession({\n        access_token: response.assertion,\n        created_at: createdAt,\n        expires_in: expiresIn,\n        id_token: response.assertion,\n        scope: decodedAssertion.scope,\n        token_type: 'Bearer',\n      });\n\n      this.notifySignIn(extractUserClaimsFromIdToken(decodedAssertion as IdToken) as User);\n    }\n\n    return response;\n  }\n\n  override async recover(payload?: any): Promise<any> {\n    const config: ThunderIDReactConfig = (await this.getStorageManager().getConfigData()) as ThunderIDReactConfig;\n\n    return executeEmbeddedRecoveryFlow({\n      baseUrl: config?.baseUrl,\n      payload: {...payload, verbose: true},\n      url: resolveResourceEndpoint('flowExecute', config),\n    }) as any;\n  }\n\n  public override getStorageManager(): any {\n    return super.getStorageManager();\n  }\n\n  async request(requestConfig?: HttpRequestConfig): Promise<HttpResponse<any>> {\n    return super.httpRequest(requestConfig!) as Promise<HttpResponse<any>>;\n  }\n\n  async requestAll(requestConfigs?: HttpRequestConfig[]): Promise<HttpResponse<any>[]> {\n    return super.httpRequestAll(requestConfigs!) as Promise<HttpResponse<any>[]>;\n  }\n}\n\nexport default ThunderIDReactClient;\n"],"mappings":";;;AA2BA,IAAM,uBAAN,cAA0F,uBAA0B;CAClH,AAAQ,eAAe;CAEvB,AAAQ;CAER,YAAY,aAAa,GAAG;AAC1B,QAAM,WAAW;;CAGnB,AAAQ,WAAW,SAAwB;AACzC,OAAK,eAAe;;CAGtB,MAAc,YAAqB,WAAqD;AACtF,OAAK,WAAW,KAAK;AACrB,MAAI;AAEF,UADwB,MAAM,WAAW;YAEjC;AACR,QAAK,WAAW,MAAM;;;;;;;;;;;CAY1B,MAAc,mBAA8D;EAC1E,MAAMA,SAA4C,MAAM,KAAK,mBAAmB,CAAC,eAAe;AAMhG,MAAI,EAFF,CAAC,UAAU,OAAO,KAAK,OAAO,CAAC,WAAW,KAAM,QAAQ,KAAK,mBAAmB,QAAQ,IAAI,CAAC,OAAO,YAEjF,CAAC,KAAK,kBACzB,QAAO;AAGT,QAAM,KAAK,WAAW,KAAK,kBAAkB;AAI7C,SAAQ,MAAM,KAAK,mBAAmB,CAAC,eAAe;;CAGxD,AAAS,WAAW,QAAgD;AAClE,SAAO,KAAK,YAAY,YAAY;AAClC,QAAK,oBAAoB;IACvB,GAAG;IACH,sBACE,QAAQ,gBAAgB,cAAc,eAAgB,QAAgB;IACzE;AAED,UAAO,MAAM,WAAW,KAAK,kBAAkC;IAC/D;;CAGJ,AAAS,aAAa,QAAyD;AAC7E,SAAO,KAAK,YAAY,YAAY;GAClC,IAAIC;AAEJ,OAAI;AACF,UAAM,MAAM,aAAa,OAAqB;AAC9C,oBAAgB;YACT,OAAO;AACd,UAAM,IAAI,sBACR,iDAAiD,iBAAiB,QAAQ,MAAM,UAAU,OAAO,MAAM,IACvG,sDACA,SACA,4EACD;;AAGH,UAAO;IACP;;CAGJ,MAAe,oBAAmC;AAChD,QAAM,IAAI,MAAM,kBAAkB;;CAGpC,MAAe,UAAyB;AACtC,SAAO,6BAA6B,MAAM,KAAK,mBAAmB,CAAC;;CAGrE,MAAe,kBAAkB,WAAsC;AACrE,SAAO,MAAM,kBAAkB,UAAU;;CAG3C,MAAe,aAA8B;AAC3C,SAAO,KAAK,YAAY,YAAY,MAAM,YAAY,CAAC;;CAGzD,MAAe,iBAAuC;AACpD,SAAO,KAAK,YAAY,YAAY;GAClC,MAAMC,SAAe,6BAA6B,MAAM,KAAK,mBAAmB,CAAC;AACjF,UAAO;IACL,kBAAkB;IAClB,SAAS;IACT,SAAS,EAAE;IACZ;IACD;;CAGJ,AAAS,YAAqB;AAC5B,SAAO,KAAK;;CAGd,MAAe,aAA+B;AAC5C,SAAO,MAAM,YAAY;;CAG3B,MAAe,cAAc,QAAuE;AAClG,SAAO,KAAK,YAAY,YAAY,MAAM,cAAc,OAAO,CAAwC;;CAGzG,MAAe,OAAO,GAAG,MAAyD;AAChF,SAAO,KAAK,YAAY,YAAY;GAClC,MAAMC,OAAY,KAAK;GACvB,MAAMC,OAAY,KAAK;GAEvB,MAAMJ,SAA2C,MAAM,KAAK,kBAAkB;AAE9E,OAAI,OAAO,SAAS,YAAY,SAAS,QAAQ,KAAK,uBAAuB,KAC3E;AAGF,OACE,OAAO,SAAS,YAChB,SAAS,QACT,CAAC,QAAQ,KAAK,KACb,iBAAiB,QAAQ,mBAAmB,OAC7C;IACA,MAAMK,gBAAwB,IAAI,IAAI,OAAO,SAAS,KAAK,CAAC,aAAa,IAAI,SAAS,IAAI;IAC1F,MAAMC,oBACF,MAAM,KAAK,mBAAmB,CAAC,uBAAuB,SAAS,IAAgB;IAInF,MAAMC,WAAuC,MAAM,0BAA0B;KAC3E,QAJqB,iBAAiB;KAKtC,SAJsB,QAAQ,WAAW;KAKzC,SAAS;KACT,KAAK,wBAAwB,eAAe,QAAQ,MAAM,IAAI;KAC/D,CAAC;AAEF,QACE,YACA,OAAO,aAAa,YACpB,SAAS,eAAe,yBAAyB,YACjD,SAAS,WACT;KACA,MAAMC,mBAKF,MAAM,KAAK,eAKZ,SAAS,UAAU;KAEtB,MAAMC,YAAoB,iBAAiB,MAAM,iBAAiB,MAAM,MAAO,KAAK,KAAK;KACzF,MAAMC,YACJ,iBAAiB,OAAO,iBAAiB,MAAM,iBAAiB,MAAM,iBAAiB,MAAM;AAE/F,WAAM,KAAK,WAAW;MACpB,cAAc,SAAS;MACvB,YAAY;MACZ,YAAY;MACZ,UAAU,SAAS;MACnB,OAAO,iBAAiB;MACxB,YAAY;MACb,CAAC;AAEF,UAAK,aAAa,6BAA6B,iBAA4B,CAAS;;AAGtF,WAAO;;AAGT,UAAQ,MAAM,MAAM,OAAO,GAAG,KAAK;IACnC;;CAGJ,MAAe,eAAe,SAAkD;AAC9E,QAAM,KAAK,kBAAkB;AAE7B,SAAO,MAAM,eAAe,QAA4C;;CAK1E,MAAe,OAAO,GAAG,MAAkC;EACzD,MAAMC,SAAgC,MAAM,KAAK,mBAAmB,CAAC,eAAe;EACpF,MAAMC,WAAgB,KAAK;EAC3B,MAAMC,UAAkB,QAAQ,WAAW;EAI3C,MAAMC,WAAgB,MAAM,0BAA0B;GACpD,QAHqB,IAAI,IAAI,OAAO,SAAS,KAAK,CAAC,aAAa,IAAI,SAAS,IAAI;GAIjF;GACA,SAAS,OAAO,aAAa,YAAY,cAAc,WAAW;IAAC,GAAG;IAAU,SAAS;IAAK,GAAG;GACjG,KAAK,wBAAwB,eAAe,OAAO;GACpD,CAAC;AAEF,MACE,YACA,OAAO,aAAa,YACpB,SAAS,eAAe,yBAAyB,YACjD,SAAS,WACT;GACA,MAAMC,mBAKF,MAAM,KAAK,eAKZ,SAAS,UAAU;GAEtB,MAAMN,YAAoB,iBAAiB,MAAM,iBAAiB,MAAM,MAAO,KAAK,KAAK;GACzF,MAAMC,YACJ,iBAAiB,OAAO,iBAAiB,MAAM,iBAAiB,MAAM,iBAAiB,MAAM;AAE/F,SAAM,KAAK,WAAW;IACpB,cAAc,SAAS;IACvB,YAAY;IACZ,YAAY;IACZ,UAAU,SAAS;IACnB,OAAO,iBAAiB;IACxB,YAAY;IACb,CAAC;AAEF,QAAK,aAAa,6BAA6B,iBAA4B,CAAS;;AAGtF,SAAO;;CAGT,MAAe,QAAQ,SAA6B;EAClD,MAAMC,SAAgC,MAAM,KAAK,mBAAmB,CAAC,eAAe;AAEpF,SAAO,4BAA4B;GACjC,SAAS,QAAQ;GACjB,SAAS;IAAC,GAAG;IAAS,SAAS;IAAK;GACpC,KAAK,wBAAwB,eAAe,OAAO;GACpD,CAAC;;CAGJ,AAAgB,oBAAyB;AACvC,SAAO,MAAM,mBAAmB;;CAGlC,MAAM,QAAQ,eAA+D;AAC3E,SAAO,MAAM,YAAY,cAAe;;CAG1C,MAAM,WAAW,gBAAoE;AACnF,SAAO,MAAM,eAAe,eAAgB;;;AAIhD,mCAAe"}
+{"version":3,"file":"ThunderIDReactClient.js","names":["config: ThunderIDReactConfig | undefined","isInitialized: boolean","claims: User","arg1: any","arg2: any","authIdFromUrl: string","authIdFromStorage: string","response: EmbeddedSignInFlowResponse","decodedAssertion: {\n            [key: string]: unknown;\n            exp?: number;\n            iat?: number;\n            scope?: string;\n          }","createdAt: number","expiresIn: number","config: ThunderIDReactConfig","firstArg: any","baseUrl: string","response: any","decodedAssertion: {\n        [key: string]: unknown;\n        exp?: number;\n        iat?: number;\n        scope?: string;\n      }"],"sources":["../src/ThunderIDReactClient.ts"],"sourcesContent":["// Copyright 2025-2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\nimport {\n  ThunderIDBrowserClient,\n  UserProfile,\n  SignInOptions,\n  User,\n  SignUpOptions,\n  ThunderIDRuntimeError,\n  executeEmbeddedSignInFlow,\n  IdToken,\n  extractUserClaimsFromIdToken,\n  TokenResponse,\n  HttpRequestConfig,\n  HttpResponse,\n  TokenExchangeRequestConfig,\n  isEmpty,\n  EmbeddedSignInFlowResponse,\n  executeEmbeddedSignUpFlow,\n  executeEmbeddedRecoveryFlow,\n  EmbeddedSignInFlowStatus,\n  EmbeddedSignUpFlowStatus,\n  resolveResourceEndpoint,\n} from '@thunderid/browser';\nimport {ThunderIDReactConfig} from './models/config';\n\nclass ThunderIDReactClient<T extends ThunderIDReactConfig = ThunderIDReactConfig> extends ThunderIDBrowserClient<T> {\n  private loadingState = false;\n\n  private _initializeConfig: ThunderIDReactConfig | undefined;\n\n  constructor(instanceId = 0) {\n    super(instanceId);\n  }\n\n  private setLoading(loading: boolean): void {\n    this.loadingState = loading;\n  }\n\n  private async withLoading<TResult>(operation: () => Promise<TResult>): Promise<TResult> {\n    this.setLoading(true);\n    try {\n      const result: TResult = await operation();\n      return result;\n    } finally {\n      this.setLoading(false);\n    }\n  }\n\n  /**\n   * Returns the stored config, re-running initialization first when it has gone missing.\n   *\n   * NOTE: With React 19 strict mode, the initialization logic runs twice, and there's an intermittent\n   * issue where the config object is not getting stored in the storage layer with Vite scaffolding.\n   * An operation that resolves endpoints from a lost config fails (for example \"required endpoints\n   * are missing\"), so recover it from the config this client was initialized with.\n   */\n  private async ensureConfigData(): Promise<ThunderIDReactConfig | undefined> {\n    const config: ThunderIDReactConfig | undefined = (await this.getStorageManager().getConfigData()) as\n      | ThunderIDReactConfig\n      | undefined;\n    const isConfigLost: boolean =\n      !config || Object.keys(config).length === 0 || (Boolean(this._initializeConfig?.baseUrl) && !config.baseUrl);\n\n    if (!isConfigLost || !this._initializeConfig) {\n      return config;\n    }\n\n    await this.initialize(this._initializeConfig);\n\n    // Reload the config persisted by initialization so downstream endpoint resolution\n    // (baseUrl and the flowExecute override) uses the recovered values, not the stale empty config.\n    return (await this.getStorageManager().getConfigData()) as ThunderIDReactConfig | undefined;\n  }\n\n  override initialize(config: ThunderIDReactConfig): Promise<boolean> {\n    return this.withLoading(async () => {\n      this._initializeConfig = {\n        ...config,\n        periodicTokenRefresh:\n          config?.tokenLifecycle?.refreshToken?.autoRefresh ?? (config as any)?.periodicTokenRefresh,\n      } as any;\n\n      return super.initialize(this._initializeConfig as unknown as T);\n    });\n  }\n\n  override reInitialize(config: Partial<ThunderIDReactConfig>): Promise<boolean> {\n    return this.withLoading(async () => {\n      let isInitialized: boolean;\n\n      try {\n        await super.reInitialize(config as Partial<T>);\n        isInitialized = true;\n      } catch (error) {\n        throw new ThunderIDRuntimeError(\n          `Failed to check if the client is initialized: ${error instanceof Error ? error.message : String(error)}`,\n          'ThunderIDReactClient-reInitialize-RuntimeError-001',\n          'react',\n          'An error occurred while checking the initialization status of the client.',\n        );\n      }\n\n      return isInitialized;\n    });\n  }\n\n  override async updateUserProfile(): Promise<User> {\n    throw new Error('Not implemented');\n  }\n\n  override async getUser(): Promise<User> {\n    return extractUserClaimsFromIdToken(await this.getDecodedIdToken());\n  }\n\n  override async getDecodedIdToken(sessionId?: string): Promise<IdToken> {\n    return super.getDecodedIdToken(sessionId);\n  }\n\n  override async getIdToken(): Promise<string> {\n    return this.withLoading(async () => super.getIdToken());\n  }\n\n  override async getUserProfile(): Promise<UserProfile> {\n    return this.withLoading(async () => {\n      const claims: User = extractUserClaimsFromIdToken(await this.getDecodedIdToken());\n      return {\n        flattenedProfile: claims,\n        profile: claims,\n        schemas: [],\n      };\n    });\n  }\n\n  override isLoading(): boolean {\n    return this.loadingState || super.isLoading();\n  }\n\n  override async isSignedIn(): Promise<boolean> {\n    return super.isSignedIn();\n  }\n\n  override async exchangeToken(config: TokenExchangeRequestConfig): Promise<TokenResponse | Response> {\n    return this.withLoading(async () => super.exchangeToken(config) as unknown as TokenResponse | Response);\n  }\n\n  override async signIn(...args: any[]): Promise<User | EmbeddedSignInFlowResponse> {\n    return this.withLoading(async () => {\n      const arg1: any = args[0];\n      const arg2: any = args[1];\n\n      const config: ThunderIDReactConfig | undefined = await this.ensureConfigData();\n\n      if (typeof arg1 === 'object' && arg1 !== null && arg1.callOnlyOnRedirect === true) {\n        return undefined as any;\n      }\n\n      if (\n        typeof arg1 === 'object' &&\n        arg1 !== null &&\n        !isEmpty(arg1) &&\n        ('executionId' in arg1 || 'applicationId' in arg1)\n      ) {\n        this.rejectEmbeddedFlowInBackendMode();\n\n        const authIdFromUrl: string = new URL(window.location.href).searchParams.get('authId') ?? '';\n        const authIdFromStorage: string =\n          ((await this.getStorageManager().getHybridDataParameter('authId')) as string) ?? '';\n        const authId: string = authIdFromUrl || authIdFromStorage;\n        const baseUrl: string = config?.baseUrl ?? '';\n\n        const response: EmbeddedSignInFlowResponse = await executeEmbeddedSignInFlow({\n          authId,\n          baseUrl,\n          payload: arg1,\n          url: resolveResourceEndpoint('flowExecute', config, arg2?.url),\n        });\n\n        if (\n          response &&\n          typeof response === 'object' &&\n          response.flowStatus === EmbeddedSignInFlowStatus.Complete &&\n          response.assertion\n        ) {\n          const decodedAssertion: {\n            [key: string]: unknown;\n            exp?: number;\n            iat?: number;\n            scope?: string;\n          } = await this.decodeJwtToken<{\n            [key: string]: unknown;\n            exp?: number;\n            iat?: number;\n            scope?: string;\n          }>(response.assertion);\n\n          const createdAt: number = decodedAssertion.iat ? decodedAssertion.iat * 1000 : Date.now();\n          const expiresIn: number =\n            decodedAssertion.exp && decodedAssertion.iat ? decodedAssertion.exp - decodedAssertion.iat : 3600;\n\n          await this.setSession({\n            access_token: response.assertion,\n            created_at: createdAt,\n            expires_in: expiresIn,\n            id_token: response.assertion,\n            scope: decodedAssertion.scope,\n            token_type: 'Bearer',\n          });\n\n          this.notifySignIn(extractUserClaimsFromIdToken(decodedAssertion as IdToken) as User);\n        }\n\n        return response;\n      }\n\n      return (await super.signIn(...args)) as unknown as User;\n    });\n  }\n\n  override async signInSilently(options?: SignInOptions): Promise<User | boolean> {\n    await this.ensureConfigData();\n\n    return super.signInSilently(options as Record<string, string | boolean>) as Promise<User | boolean>;\n  }\n\n  override async signUp(options?: SignUpOptions): Promise<void>;\n  override async signUp(payload: any): Promise<any>;\n  override async signUp(...args: any[]): Promise<void | any> {\n    this.rejectEmbeddedFlowInBackendMode();\n\n    const config: ThunderIDReactConfig = (await this.getStorageManager().getConfigData()) as ThunderIDReactConfig;\n    const firstArg: any = args[0];\n    const baseUrl: string = config?.baseUrl ?? '';\n\n    const authId: string = new URL(window.location.href).searchParams.get('authId') ?? '';\n\n    const response: any = await executeEmbeddedSignUpFlow({\n      authId,\n      baseUrl,\n      payload: typeof firstArg === 'object' && 'flowType' in firstArg ? {...firstArg, verbose: true} : firstArg,\n      url: resolveResourceEndpoint('flowExecute', config),\n    });\n\n    if (\n      response &&\n      typeof response === 'object' &&\n      response.flowStatus === EmbeddedSignUpFlowStatus.Complete &&\n      response.assertion\n    ) {\n      const decodedAssertion: {\n        [key: string]: unknown;\n        exp?: number;\n        iat?: number;\n        scope?: string;\n      } = await this.decodeJwtToken<{\n        [key: string]: unknown;\n        exp?: number;\n        iat?: number;\n        scope?: string;\n      }>(response.assertion);\n\n      const createdAt: number = decodedAssertion.iat ? decodedAssertion.iat * 1000 : Date.now();\n      const expiresIn: number =\n        decodedAssertion.exp && decodedAssertion.iat ? decodedAssertion.exp - decodedAssertion.iat : 3600;\n\n      await this.setSession({\n        access_token: response.assertion,\n        created_at: createdAt,\n        expires_in: expiresIn,\n        id_token: response.assertion,\n        scope: decodedAssertion.scope,\n        token_type: 'Bearer',\n      });\n\n      this.notifySignIn(extractUserClaimsFromIdToken(decodedAssertion as IdToken) as User);\n    }\n\n    return response;\n  }\n\n  override async recover(payload?: any): Promise<any> {\n    this.rejectEmbeddedFlowInBackendMode();\n\n    const config: ThunderIDReactConfig = (await this.getStorageManager().getConfigData()) as ThunderIDReactConfig;\n\n    return executeEmbeddedRecoveryFlow({\n      baseUrl: config?.baseUrl,\n      payload: {...payload, verbose: true},\n      url: resolveResourceEndpoint('flowExecute', config),\n    }) as any;\n  }\n\n  /**\n   * The embedded flows keep their result in the browser, which running sign-in on the backend rules\n   * out. Running them through the backend is not supported yet.\n   */\n  private rejectEmbeddedFlowInBackendMode(): void {\n    if (this.isBackendMode()) {\n      throw new ThunderIDRuntimeError(\n        'Embedded sign-in, sign-up, and recovery flows are not supported when sign-in runs on the backend.',\n        'ThunderIDReactClient-embeddedFlow-RuntimeError-001',\n        'react',\n        'Use redirect sign-in with the backend.',\n      );\n    }\n  }\n\n  public override getStorageManager(): any {\n    return super.getStorageManager();\n  }\n\n  async request(requestConfig?: HttpRequestConfig): Promise<HttpResponse<any>> {\n    return super.httpRequest(requestConfig!) as Promise<HttpResponse<any>>;\n  }\n\n  async requestAll(requestConfigs?: HttpRequestConfig[]): Promise<HttpResponse<any>[]> {\n    return super.httpRequestAll(requestConfigs!) as Promise<HttpResponse<any>[]>;\n  }\n}\n\nexport default ThunderIDReactClient;\n"],"mappings":";;;AA2BA,IAAM,uBAAN,cAA0F,uBAA0B;CAClH,AAAQ,eAAe;CAEvB,AAAQ;CAER,YAAY,aAAa,GAAG;AAC1B,QAAM,WAAW;;CAGnB,AAAQ,WAAW,SAAwB;AACzC,OAAK,eAAe;;CAGtB,MAAc,YAAqB,WAAqD;AACtF,OAAK,WAAW,KAAK;AACrB,MAAI;AAEF,UADwB,MAAM,WAAW;YAEjC;AACR,QAAK,WAAW,MAAM;;;;;;;;;;;CAY1B,MAAc,mBAA8D;EAC1E,MAAMA,SAA4C,MAAM,KAAK,mBAAmB,CAAC,eAAe;AAMhG,MAAI,EAFF,CAAC,UAAU,OAAO,KAAK,OAAO,CAAC,WAAW,KAAM,QAAQ,KAAK,mBAAmB,QAAQ,IAAI,CAAC,OAAO,YAEjF,CAAC,KAAK,kBACzB,QAAO;AAGT,QAAM,KAAK,WAAW,KAAK,kBAAkB;AAI7C,SAAQ,MAAM,KAAK,mBAAmB,CAAC,eAAe;;CAGxD,AAAS,WAAW,QAAgD;AAClE,SAAO,KAAK,YAAY,YAAY;AAClC,QAAK,oBAAoB;IACvB,GAAG;IACH,sBACE,QAAQ,gBAAgB,cAAc,eAAgB,QAAgB;IACzE;AAED,UAAO,MAAM,WAAW,KAAK,kBAAkC;IAC/D;;CAGJ,AAAS,aAAa,QAAyD;AAC7E,SAAO,KAAK,YAAY,YAAY;GAClC,IAAIC;AAEJ,OAAI;AACF,UAAM,MAAM,aAAa,OAAqB;AAC9C,oBAAgB;YACT,OAAO;AACd,UAAM,IAAI,sBACR,iDAAiD,iBAAiB,QAAQ,MAAM,UAAU,OAAO,MAAM,IACvG,sDACA,SACA,4EACD;;AAGH,UAAO;IACP;;CAGJ,MAAe,oBAAmC;AAChD,QAAM,IAAI,MAAM,kBAAkB;;CAGpC,MAAe,UAAyB;AACtC,SAAO,6BAA6B,MAAM,KAAK,mBAAmB,CAAC;;CAGrE,MAAe,kBAAkB,WAAsC;AACrE,SAAO,MAAM,kBAAkB,UAAU;;CAG3C,MAAe,aAA8B;AAC3C,SAAO,KAAK,YAAY,YAAY,MAAM,YAAY,CAAC;;CAGzD,MAAe,iBAAuC;AACpD,SAAO,KAAK,YAAY,YAAY;GAClC,MAAMC,SAAe,6BAA6B,MAAM,KAAK,mBAAmB,CAAC;AACjF,UAAO;IACL,kBAAkB;IAClB,SAAS;IACT,SAAS,EAAE;IACZ;IACD;;CAGJ,AAAS,YAAqB;AAC5B,SAAO,KAAK,gBAAgB,MAAM,WAAW;;CAG/C,MAAe,aAA+B;AAC5C,SAAO,MAAM,YAAY;;CAG3B,MAAe,cAAc,QAAuE;AAClG,SAAO,KAAK,YAAY,YAAY,MAAM,cAAc,OAAO,CAAwC;;CAGzG,MAAe,OAAO,GAAG,MAAyD;AAChF,SAAO,KAAK,YAAY,YAAY;GAClC,MAAMC,OAAY,KAAK;GACvB,MAAMC,OAAY,KAAK;GAEvB,MAAMJ,SAA2C,MAAM,KAAK,kBAAkB;AAE9E,OAAI,OAAO,SAAS,YAAY,SAAS,QAAQ,KAAK,uBAAuB,KAC3E;AAGF,OACE,OAAO,SAAS,YAChB,SAAS,QACT,CAAC,QAAQ,KAAK,KACb,iBAAiB,QAAQ,mBAAmB,OAC7C;AACA,SAAK,iCAAiC;IAEtC,MAAMK,gBAAwB,IAAI,IAAI,OAAO,SAAS,KAAK,CAAC,aAAa,IAAI,SAAS,IAAI;IAC1F,MAAMC,oBACF,MAAM,KAAK,mBAAmB,CAAC,uBAAuB,SAAS,IAAgB;IAInF,MAAMC,WAAuC,MAAM,0BAA0B;KAC3E,QAJqB,iBAAiB;KAKtC,SAJsB,QAAQ,WAAW;KAKzC,SAAS;KACT,KAAK,wBAAwB,eAAe,QAAQ,MAAM,IAAI;KAC/D,CAAC;AAEF,QACE,YACA,OAAO,aAAa,YACpB,SAAS,eAAe,yBAAyB,YACjD,SAAS,WACT;KACA,MAAMC,mBAKF,MAAM,KAAK,eAKZ,SAAS,UAAU;KAEtB,MAAMC,YAAoB,iBAAiB,MAAM,iBAAiB,MAAM,MAAO,KAAK,KAAK;KACzF,MAAMC,YACJ,iBAAiB,OAAO,iBAAiB,MAAM,iBAAiB,MAAM,iBAAiB,MAAM;AAE/F,WAAM,KAAK,WAAW;MACpB,cAAc,SAAS;MACvB,YAAY;MACZ,YAAY;MACZ,UAAU,SAAS;MACnB,OAAO,iBAAiB;MACxB,YAAY;MACb,CAAC;AAEF,UAAK,aAAa,6BAA6B,iBAA4B,CAAS;;AAGtF,WAAO;;AAGT,UAAQ,MAAM,MAAM,OAAO,GAAG,KAAK;IACnC;;CAGJ,MAAe,eAAe,SAAkD;AAC9E,QAAM,KAAK,kBAAkB;AAE7B,SAAO,MAAM,eAAe,QAA4C;;CAK1E,MAAe,OAAO,GAAG,MAAkC;AACzD,OAAK,iCAAiC;EAEtC,MAAMC,SAAgC,MAAM,KAAK,mBAAmB,CAAC,eAAe;EACpF,MAAMC,WAAgB,KAAK;EAC3B,MAAMC,UAAkB,QAAQ,WAAW;EAI3C,MAAMC,WAAgB,MAAM,0BAA0B;GACpD,QAHqB,IAAI,IAAI,OAAO,SAAS,KAAK,CAAC,aAAa,IAAI,SAAS,IAAI;GAIjF;GACA,SAAS,OAAO,aAAa,YAAY,cAAc,WAAW;IAAC,GAAG;IAAU,SAAS;IAAK,GAAG;GACjG,KAAK,wBAAwB,eAAe,OAAO;GACpD,CAAC;AAEF,MACE,YACA,OAAO,aAAa,YACpB,SAAS,eAAe,yBAAyB,YACjD,SAAS,WACT;GACA,MAAMC,mBAKF,MAAM,KAAK,eAKZ,SAAS,UAAU;GAEtB,MAAMN,YAAoB,iBAAiB,MAAM,iBAAiB,MAAM,MAAO,KAAK,KAAK;GACzF,MAAMC,YACJ,iBAAiB,OAAO,iBAAiB,MAAM,iBAAiB,MAAM,iBAAiB,MAAM;AAE/F,SAAM,KAAK,WAAW;IACpB,cAAc,SAAS;IACvB,YAAY;IACZ,YAAY;IACZ,UAAU,SAAS;IACnB,OAAO,iBAAiB;IACxB,YAAY;IACb,CAAC;AAEF,QAAK,aAAa,6BAA6B,iBAA4B,CAAS;;AAGtF,SAAO;;CAGT,MAAe,QAAQ,SAA6B;AAClD,OAAK,iCAAiC;EAEtC,MAAMC,SAAgC,MAAM,KAAK,mBAAmB,CAAC,eAAe;AAEpF,SAAO,4BAA4B;GACjC,SAAS,QAAQ;GACjB,SAAS;IAAC,GAAG;IAAS,SAAS;IAAK;GACpC,KAAK,wBAAwB,eAAe,OAAO;GACpD,CAAC;;;;;;CAOJ,AAAQ,kCAAwC;AAC9C,MAAI,KAAK,eAAe,CACtB,OAAM,IAAI,sBACR,qGACA,sDACA,SACA,yCACD;;CAIL,AAAgB,oBAAyB;AACvC,SAAO,MAAM,mBAAmB;;CAGlC,MAAM,QAAQ,eAA+D;AAC3E,SAAO,MAAM,YAAY,cAAe;;CAG1C,MAAM,WAAW,gBAAoE;AACnF,SAAO,MAAM,eAAe,eAAgB;;;AAIhD,mCAAe"}

package/dist/cjs/ThunderIDReactClient.cjs

@@ -78,7 +78,7 @@ var ThunderIDReactClient = class extends __thunderid_browser.ThunderIDBrowserCli
 		});
 	}
 	isLoading() {
-		return this.loadingState;
+		return this.loadingState || super.isLoading();
 	}
 	async isSignedIn() {
 		return super.isSignedIn();
@@ -93,6 +93,7 @@ var ThunderIDReactClient = class extends __thunderid_browser.ThunderIDBrowserCli
 			const config = await this.ensureConfigData();
 			if (typeof arg1 === "object" && arg1 !== null && arg1.callOnlyOnRedirect === true) return;
 			if (typeof arg1 === "object" && arg1 !== null && !(0, __thunderid_browser.isEmpty)(arg1) && ("executionId" in arg1 || "applicationId" in arg1)) {
+				this.rejectEmbeddedFlowInBackendMode();
 				const authIdFromUrl = new URL(window.location.href).searchParams.get("authId") ?? "";
 				const authIdFromStorage = await this.getStorageManager().getHybridDataParameter("authId") ?? "";
 				const response = await (0, __thunderid_browser.executeEmbeddedSignInFlow)({
@@ -125,6 +126,7 @@ var ThunderIDReactClient = class extends __thunderid_browser.ThunderIDBrowserCli
 		return super.signInSilently(options);
 	}
 	async signUp(...args) {
+		this.rejectEmbeddedFlowInBackendMode();
 		const config = await this.getStorageManager().getConfigData();
 		const firstArg = args[0];
 		const baseUrl = config?.baseUrl ?? "";
@@ -154,6 +156,7 @@ var ThunderIDReactClient = class extends __thunderid_browser.ThunderIDBrowserCli
 		return response;
 	}
 	async recover(payload) {
+		this.rejectEmbeddedFlowInBackendMode();
 		const config = await this.getStorageManager().getConfigData();
 		return (0, __thunderid_browser.executeEmbeddedRecoveryFlow)({
 			baseUrl: config?.baseUrl,
@@ -164,6 +167,13 @@ var ThunderIDReactClient = class extends __thunderid_browser.ThunderIDBrowserCli
 			url: (0, __thunderid_browser.resolveResourceEndpoint)("flowExecute", config)
 		});
 	}
+	/**
+	* The embedded flows keep their result in the browser, which running sign-in on the backend rules
+	* out. Running them through the backend is not supported yet.
+	*/
+	rejectEmbeddedFlowInBackendMode() {
+		if (this.isBackendMode()) throw new __thunderid_browser.ThunderIDRuntimeError("Embedded sign-in, sign-up, and recovery flows are not supported when sign-in runs on the backend.", "ThunderIDReactClient-embeddedFlow-RuntimeError-001", "react", "Use redirect sign-in with the backend.");
+	}
 	getStorageManager() {
 		return super.getStorageManager();
 	}

package/dist/cjs/ThunderIDReactClient.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"ThunderIDReactClient.cjs","names":["ThunderIDBrowserClient","config: ThunderIDReactConfig | undefined","isInitialized: boolean","ThunderIDRuntimeError","claims: User","arg1: any","arg2: any","authIdFromUrl: string","authIdFromStorage: string","response: EmbeddedSignInFlowResponse","EmbeddedSignInFlowStatus","decodedAssertion: {\n            [key: string]: unknown;\n            exp?: number;\n            iat?: number;\n            scope?: string;\n          }","createdAt: number","expiresIn: number","config: ThunderIDReactConfig","firstArg: any","baseUrl: string","response: any","EmbeddedSignUpFlowStatus","decodedAssertion: {\n        [key: string]: unknown;\n        exp?: number;\n        iat?: number;\n        scope?: string;\n      }"],"sources":["../../src/ThunderIDReactClient.ts"],"sourcesContent":["// Copyright 2025-2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\nimport {\n  ThunderIDBrowserClient,\n  UserProfile,\n  SignInOptions,\n  User,\n  SignUpOptions,\n  ThunderIDRuntimeError,\n  executeEmbeddedSignInFlow,\n  IdToken,\n  extractUserClaimsFromIdToken,\n  TokenResponse,\n  HttpRequestConfig,\n  HttpResponse,\n  TokenExchangeRequestConfig,\n  isEmpty,\n  EmbeddedSignInFlowResponse,\n  executeEmbeddedSignUpFlow,\n  executeEmbeddedRecoveryFlow,\n  EmbeddedSignInFlowStatus,\n  EmbeddedSignUpFlowStatus,\n  resolveResourceEndpoint,\n} from '@thunderid/browser';\nimport {ThunderIDReactConfig} from './models/config';\n\nclass ThunderIDReactClient<T extends ThunderIDReactConfig = ThunderIDReactConfig> extends ThunderIDBrowserClient<T> {\n  private loadingState = false;\n\n  private _initializeConfig: ThunderIDReactConfig | undefined;\n\n  constructor(instanceId = 0) {\n    super(instanceId);\n  }\n\n  private setLoading(loading: boolean): void {\n    this.loadingState = loading;\n  }\n\n  private async withLoading<TResult>(operation: () => Promise<TResult>): Promise<TResult> {\n    this.setLoading(true);\n    try {\n      const result: TResult = await operation();\n      return result;\n    } finally {\n      this.setLoading(false);\n    }\n  }\n\n  /**\n   * Returns the stored config, re-running initialization first when it has gone missing.\n   *\n   * NOTE: With React 19 strict mode, the initialization logic runs twice, and there's an intermittent\n   * issue where the config object is not getting stored in the storage layer with Vite scaffolding.\n   * An operation that resolves endpoints from a lost config fails (for example \"required endpoints\n   * are missing\"), so recover it from the config this client was initialized with.\n   */\n  private async ensureConfigData(): Promise<ThunderIDReactConfig | undefined> {\n    const config: ThunderIDReactConfig | undefined = (await this.getStorageManager().getConfigData()) as\n      | ThunderIDReactConfig\n      | undefined;\n    const isConfigLost: boolean =\n      !config || Object.keys(config).length === 0 || (Boolean(this._initializeConfig?.baseUrl) && !config.baseUrl);\n\n    if (!isConfigLost || !this._initializeConfig) {\n      return config;\n    }\n\n    await this.initialize(this._initializeConfig);\n\n    // Reload the config persisted by initialization so downstream endpoint resolution\n    // (baseUrl and the flowExecute override) uses the recovered values, not the stale empty config.\n    return (await this.getStorageManager().getConfigData()) as ThunderIDReactConfig | undefined;\n  }\n\n  override initialize(config: ThunderIDReactConfig): Promise<boolean> {\n    return this.withLoading(async () => {\n      this._initializeConfig = {\n        ...config,\n        periodicTokenRefresh:\n          config?.tokenLifecycle?.refreshToken?.autoRefresh ?? (config as any)?.periodicTokenRefresh,\n      } as any;\n\n      return super.initialize(this._initializeConfig as unknown as T);\n    });\n  }\n\n  override reInitialize(config: Partial<ThunderIDReactConfig>): Promise<boolean> {\n    return this.withLoading(async () => {\n      let isInitialized: boolean;\n\n      try {\n        await super.reInitialize(config as Partial<T>);\n        isInitialized = true;\n      } catch (error) {\n        throw new ThunderIDRuntimeError(\n          `Failed to check if the client is initialized: ${error instanceof Error ? error.message : String(error)}`,\n          'ThunderIDReactClient-reInitialize-RuntimeError-001',\n          'react',\n          'An error occurred while checking the initialization status of the client.',\n        );\n      }\n\n      return isInitialized;\n    });\n  }\n\n  override async updateUserProfile(): Promise<User> {\n    throw new Error('Not implemented');\n  }\n\n  override async getUser(): Promise<User> {\n    return extractUserClaimsFromIdToken(await this.getDecodedIdToken());\n  }\n\n  override async getDecodedIdToken(sessionId?: string): Promise<IdToken> {\n    return super.getDecodedIdToken(sessionId);\n  }\n\n  override async getIdToken(): Promise<string> {\n    return this.withLoading(async () => super.getIdToken());\n  }\n\n  override async getUserProfile(): Promise<UserProfile> {\n    return this.withLoading(async () => {\n      const claims: User = extractUserClaimsFromIdToken(await this.getDecodedIdToken());\n      return {\n        flattenedProfile: claims,\n        profile: claims,\n        schemas: [],\n      };\n    });\n  }\n\n  override isLoading(): boolean {\n    return this.loadingState;\n  }\n\n  override async isSignedIn(): Promise<boolean> {\n    return super.isSignedIn();\n  }\n\n  override async exchangeToken(config: TokenExchangeRequestConfig): Promise<TokenResponse | Response> {\n    return this.withLoading(async () => super.exchangeToken(config) as unknown as TokenResponse | Response);\n  }\n\n  override async signIn(...args: any[]): Promise<User | EmbeddedSignInFlowResponse> {\n    return this.withLoading(async () => {\n      const arg1: any = args[0];\n      const arg2: any = args[1];\n\n      const config: ThunderIDReactConfig | undefined = await this.ensureConfigData();\n\n      if (typeof arg1 === 'object' && arg1 !== null && arg1.callOnlyOnRedirect === true) {\n        return undefined as any;\n      }\n\n      if (\n        typeof arg1 === 'object' &&\n        arg1 !== null &&\n        !isEmpty(arg1) &&\n        ('executionId' in arg1 || 'applicationId' in arg1)\n      ) {\n        const authIdFromUrl: string = new URL(window.location.href).searchParams.get('authId') ?? '';\n        const authIdFromStorage: string =\n          ((await this.getStorageManager().getHybridDataParameter('authId')) as string) ?? '';\n        const authId: string = authIdFromUrl || authIdFromStorage;\n        const baseUrl: string = config?.baseUrl ?? '';\n\n        const response: EmbeddedSignInFlowResponse = await executeEmbeddedSignInFlow({\n          authId,\n          baseUrl,\n          payload: arg1,\n          url: resolveResourceEndpoint('flowExecute', config, arg2?.url),\n        });\n\n        if (\n          response &&\n          typeof response === 'object' &&\n          response.flowStatus === EmbeddedSignInFlowStatus.Complete &&\n          response.assertion\n        ) {\n          const decodedAssertion: {\n            [key: string]: unknown;\n            exp?: number;\n            iat?: number;\n            scope?: string;\n          } = await this.decodeJwtToken<{\n            [key: string]: unknown;\n            exp?: number;\n            iat?: number;\n            scope?: string;\n          }>(response.assertion);\n\n          const createdAt: number = decodedAssertion.iat ? decodedAssertion.iat * 1000 : Date.now();\n          const expiresIn: number =\n            decodedAssertion.exp && decodedAssertion.iat ? decodedAssertion.exp - decodedAssertion.iat : 3600;\n\n          await this.setSession({\n            access_token: response.assertion,\n            created_at: createdAt,\n            expires_in: expiresIn,\n            id_token: response.assertion,\n            scope: decodedAssertion.scope,\n            token_type: 'Bearer',\n          });\n\n          this.notifySignIn(extractUserClaimsFromIdToken(decodedAssertion as IdToken) as User);\n        }\n\n        return response;\n      }\n\n      return (await super.signIn(...args)) as unknown as User;\n    });\n  }\n\n  override async signInSilently(options?: SignInOptions): Promise<User | boolean> {\n    await this.ensureConfigData();\n\n    return super.signInSilently(options as Record<string, string | boolean>) as Promise<User | boolean>;\n  }\n\n  override async signUp(options?: SignUpOptions): Promise<void>;\n  override async signUp(payload: any): Promise<any>;\n  override async signUp(...args: any[]): Promise<void | any> {\n    const config: ThunderIDReactConfig = (await this.getStorageManager().getConfigData()) as ThunderIDReactConfig;\n    const firstArg: any = args[0];\n    const baseUrl: string = config?.baseUrl ?? '';\n\n    const authId: string = new URL(window.location.href).searchParams.get('authId') ?? '';\n\n    const response: any = await executeEmbeddedSignUpFlow({\n      authId,\n      baseUrl,\n      payload: typeof firstArg === 'object' && 'flowType' in firstArg ? {...firstArg, verbose: true} : firstArg,\n      url: resolveResourceEndpoint('flowExecute', config),\n    });\n\n    if (\n      response &&\n      typeof response === 'object' &&\n      response.flowStatus === EmbeddedSignUpFlowStatus.Complete &&\n      response.assertion\n    ) {\n      const decodedAssertion: {\n        [key: string]: unknown;\n        exp?: number;\n        iat?: number;\n        scope?: string;\n      } = await this.decodeJwtToken<{\n        [key: string]: unknown;\n        exp?: number;\n        iat?: number;\n        scope?: string;\n      }>(response.assertion);\n\n      const createdAt: number = decodedAssertion.iat ? decodedAssertion.iat * 1000 : Date.now();\n      const expiresIn: number =\n        decodedAssertion.exp && decodedAssertion.iat ? decodedAssertion.exp - decodedAssertion.iat : 3600;\n\n      await this.setSession({\n        access_token: response.assertion,\n        created_at: createdAt,\n        expires_in: expiresIn,\n        id_token: response.assertion,\n        scope: decodedAssertion.scope,\n        token_type: 'Bearer',\n      });\n\n      this.notifySignIn(extractUserClaimsFromIdToken(decodedAssertion as IdToken) as User);\n    }\n\n    return response;\n  }\n\n  override async recover(payload?: any): Promise<any> {\n    const config: ThunderIDReactConfig = (await this.getStorageManager().getConfigData()) as ThunderIDReactConfig;\n\n    return executeEmbeddedRecoveryFlow({\n      baseUrl: config?.baseUrl,\n      payload: {...payload, verbose: true},\n      url: resolveResourceEndpoint('flowExecute', config),\n    }) as any;\n  }\n\n  public override getStorageManager(): any {\n    return super.getStorageManager();\n  }\n\n  async request(requestConfig?: HttpRequestConfig): Promise<HttpResponse<any>> {\n    return super.httpRequest(requestConfig!) as Promise<HttpResponse<any>>;\n  }\n\n  async requestAll(requestConfigs?: HttpRequestConfig[]): Promise<HttpResponse<any>[]> {\n    return super.httpRequestAll(requestConfigs!) as Promise<HttpResponse<any>[]>;\n  }\n}\n\nexport default ThunderIDReactClient;\n"],"mappings":";;;;;AA2BA,IAAM,uBAAN,cAA0FA,2CAA0B;CAClH,AAAQ,eAAe;CAEvB,AAAQ;CAER,YAAY,aAAa,GAAG;AAC1B,QAAM,WAAW;;CAGnB,AAAQ,WAAW,SAAwB;AACzC,OAAK,eAAe;;CAGtB,MAAc,YAAqB,WAAqD;AACtF,OAAK,WAAW,KAAK;AACrB,MAAI;AAEF,UADwB,MAAM,WAAW;YAEjC;AACR,QAAK,WAAW,MAAM;;;;;;;;;;;CAY1B,MAAc,mBAA8D;EAC1E,MAAMC,SAA4C,MAAM,KAAK,mBAAmB,CAAC,eAAe;AAMhG,MAAI,EAFF,CAAC,UAAU,OAAO,KAAK,OAAO,CAAC,WAAW,KAAM,QAAQ,KAAK,mBAAmB,QAAQ,IAAI,CAAC,OAAO,YAEjF,CAAC,KAAK,kBACzB,QAAO;AAGT,QAAM,KAAK,WAAW,KAAK,kBAAkB;AAI7C,SAAQ,MAAM,KAAK,mBAAmB,CAAC,eAAe;;CAGxD,AAAS,WAAW,QAAgD;AAClE,SAAO,KAAK,YAAY,YAAY;AAClC,QAAK,oBAAoB;IACvB,GAAG;IACH,sBACE,QAAQ,gBAAgB,cAAc,eAAgB,QAAgB;IACzE;AAED,UAAO,MAAM,WAAW,KAAK,kBAAkC;IAC/D;;CAGJ,AAAS,aAAa,QAAyD;AAC7E,SAAO,KAAK,YAAY,YAAY;GAClC,IAAIC;AAEJ,OAAI;AACF,UAAM,MAAM,aAAa,OAAqB;AAC9C,oBAAgB;YACT,OAAO;AACd,UAAM,IAAIC,0CACR,iDAAiD,iBAAiB,QAAQ,MAAM,UAAU,OAAO,MAAM,IACvG,sDACA,SACA,4EACD;;AAGH,UAAO;IACP;;CAGJ,MAAe,oBAAmC;AAChD,QAAM,IAAI,MAAM,kBAAkB;;CAGpC,MAAe,UAAyB;AACtC,+DAAoC,MAAM,KAAK,mBAAmB,CAAC;;CAGrE,MAAe,kBAAkB,WAAsC;AACrE,SAAO,MAAM,kBAAkB,UAAU;;CAG3C,MAAe,aAA8B;AAC3C,SAAO,KAAK,YAAY,YAAY,MAAM,YAAY,CAAC;;CAGzD,MAAe,iBAAuC;AACpD,SAAO,KAAK,YAAY,YAAY;GAClC,MAAMC,+DAA4C,MAAM,KAAK,mBAAmB,CAAC;AACjF,UAAO;IACL,kBAAkB;IAClB,SAAS;IACT,SAAS,EAAE;IACZ;IACD;;CAGJ,AAAS,YAAqB;AAC5B,SAAO,KAAK;;CAGd,MAAe,aAA+B;AAC5C,SAAO,MAAM,YAAY;;CAG3B,MAAe,cAAc,QAAuE;AAClG,SAAO,KAAK,YAAY,YAAY,MAAM,cAAc,OAAO,CAAwC;;CAGzG,MAAe,OAAO,GAAG,MAAyD;AAChF,SAAO,KAAK,YAAY,YAAY;GAClC,MAAMC,OAAY,KAAK;GACvB,MAAMC,OAAY,KAAK;GAEvB,MAAML,SAA2C,MAAM,KAAK,kBAAkB;AAE9E,OAAI,OAAO,SAAS,YAAY,SAAS,QAAQ,KAAK,uBAAuB,KAC3E;AAGF,OACE,OAAO,SAAS,YAChB,SAAS,QACT,kCAAS,KAAK,KACb,iBAAiB,QAAQ,mBAAmB,OAC7C;IACA,MAAMM,gBAAwB,IAAI,IAAI,OAAO,SAAS,KAAK,CAAC,aAAa,IAAI,SAAS,IAAI;IAC1F,MAAMC,oBACF,MAAM,KAAK,mBAAmB,CAAC,uBAAuB,SAAS,IAAgB;IAInF,MAAMC,WAAuC,yDAAgC;KAC3E,QAJqB,iBAAiB;KAKtC,SAJsB,QAAQ,WAAW;KAKzC,SAAS;KACT,sDAA6B,eAAe,QAAQ,MAAM,IAAI;KAC/D,CAAC;AAEF,QACE,YACA,OAAO,aAAa,YACpB,SAAS,eAAeC,6CAAyB,YACjD,SAAS,WACT;KACA,MAAMC,mBAKF,MAAM,KAAK,eAKZ,SAAS,UAAU;KAEtB,MAAMC,YAAoB,iBAAiB,MAAM,iBAAiB,MAAM,MAAO,KAAK,KAAK;KACzF,MAAMC,YACJ,iBAAiB,OAAO,iBAAiB,MAAM,iBAAiB,MAAM,iBAAiB,MAAM;AAE/F,WAAM,KAAK,WAAW;MACpB,cAAc,SAAS;MACvB,YAAY;MACZ,YAAY;MACZ,UAAU,SAAS;MACnB,OAAO,iBAAiB;MACxB,YAAY;MACb,CAAC;AAEF,UAAK,mEAA0C,iBAA4B,CAAS;;AAGtF,WAAO;;AAGT,UAAQ,MAAM,MAAM,OAAO,GAAG,KAAK;IACnC;;CAGJ,MAAe,eAAe,SAAkD;AAC9E,QAAM,KAAK,kBAAkB;AAE7B,SAAO,MAAM,eAAe,QAA4C;;CAK1E,MAAe,OAAO,GAAG,MAAkC;EACzD,MAAMC,SAAgC,MAAM,KAAK,mBAAmB,CAAC,eAAe;EACpF,MAAMC,WAAgB,KAAK;EAC3B,MAAMC,UAAkB,QAAQ,WAAW;EAI3C,MAAMC,WAAgB,yDAAgC;GACpD,QAHqB,IAAI,IAAI,OAAO,SAAS,KAAK,CAAC,aAAa,IAAI,SAAS,IAAI;GAIjF;GACA,SAAS,OAAO,aAAa,YAAY,cAAc,WAAW;IAAC,GAAG;IAAU,SAAS;IAAK,GAAG;GACjG,sDAA6B,eAAe,OAAO;GACpD,CAAC;AAEF,MACE,YACA,OAAO,aAAa,YACpB,SAAS,eAAeC,6CAAyB,YACjD,SAAS,WACT;GACA,MAAMC,mBAKF,MAAM,KAAK,eAKZ,SAAS,UAAU;GAEtB,MAAMP,YAAoB,iBAAiB,MAAM,iBAAiB,MAAM,MAAO,KAAK,KAAK;GACzF,MAAMC,YACJ,iBAAiB,OAAO,iBAAiB,MAAM,iBAAiB,MAAM,iBAAiB,MAAM;AAE/F,SAAM,KAAK,WAAW;IACpB,cAAc,SAAS;IACvB,YAAY;IACZ,YAAY;IACZ,UAAU,SAAS;IACnB,OAAO,iBAAiB;IACxB,YAAY;IACb,CAAC;AAEF,QAAK,mEAA0C,iBAA4B,CAAS;;AAGtF,SAAO;;CAGT,MAAe,QAAQ,SAA6B;EAClD,MAAMC,SAAgC,MAAM,KAAK,mBAAmB,CAAC,eAAe;AAEpF,8DAAmC;GACjC,SAAS,QAAQ;GACjB,SAAS;IAAC,GAAG;IAAS,SAAS;IAAK;GACpC,sDAA6B,eAAe,OAAO;GACpD,CAAC;;CAGJ,AAAgB,oBAAyB;AACvC,SAAO,MAAM,mBAAmB;;CAGlC,MAAM,QAAQ,eAA+D;AAC3E,SAAO,MAAM,YAAY,cAAe;;CAG1C,MAAM,WAAW,gBAAoE;AACnF,SAAO,MAAM,eAAe,eAAgB;;;AAIhD,mCAAe"}
+{"version":3,"file":"ThunderIDReactClient.cjs","names":["ThunderIDBrowserClient","config: ThunderIDReactConfig | undefined","isInitialized: boolean","ThunderIDRuntimeError","claims: User","arg1: any","arg2: any","authIdFromUrl: string","authIdFromStorage: string","response: EmbeddedSignInFlowResponse","EmbeddedSignInFlowStatus","decodedAssertion: {\n            [key: string]: unknown;\n            exp?: number;\n            iat?: number;\n            scope?: string;\n          }","createdAt: number","expiresIn: number","config: ThunderIDReactConfig","firstArg: any","baseUrl: string","response: any","EmbeddedSignUpFlowStatus","decodedAssertion: {\n        [key: string]: unknown;\n        exp?: number;\n        iat?: number;\n        scope?: string;\n      }"],"sources":["../../src/ThunderIDReactClient.ts"],"sourcesContent":["// Copyright 2025-2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\nimport {\n  ThunderIDBrowserClient,\n  UserProfile,\n  SignInOptions,\n  User,\n  SignUpOptions,\n  ThunderIDRuntimeError,\n  executeEmbeddedSignInFlow,\n  IdToken,\n  extractUserClaimsFromIdToken,\n  TokenResponse,\n  HttpRequestConfig,\n  HttpResponse,\n  TokenExchangeRequestConfig,\n  isEmpty,\n  EmbeddedSignInFlowResponse,\n  executeEmbeddedSignUpFlow,\n  executeEmbeddedRecoveryFlow,\n  EmbeddedSignInFlowStatus,\n  EmbeddedSignUpFlowStatus,\n  resolveResourceEndpoint,\n} from '@thunderid/browser';\nimport {ThunderIDReactConfig} from './models/config';\n\nclass ThunderIDReactClient<T extends ThunderIDReactConfig = ThunderIDReactConfig> extends ThunderIDBrowserClient<T> {\n  private loadingState = false;\n\n  private _initializeConfig: ThunderIDReactConfig | undefined;\n\n  constructor(instanceId = 0) {\n    super(instanceId);\n  }\n\n  private setLoading(loading: boolean): void {\n    this.loadingState = loading;\n  }\n\n  private async withLoading<TResult>(operation: () => Promise<TResult>): Promise<TResult> {\n    this.setLoading(true);\n    try {\n      const result: TResult = await operation();\n      return result;\n    } finally {\n      this.setLoading(false);\n    }\n  }\n\n  /**\n   * Returns the stored config, re-running initialization first when it has gone missing.\n   *\n   * NOTE: With React 19 strict mode, the initialization logic runs twice, and there's an intermittent\n   * issue where the config object is not getting stored in the storage layer with Vite scaffolding.\n   * An operation that resolves endpoints from a lost config fails (for example \"required endpoints\n   * are missing\"), so recover it from the config this client was initialized with.\n   */\n  private async ensureConfigData(): Promise<ThunderIDReactConfig | undefined> {\n    const config: ThunderIDReactConfig | undefined = (await this.getStorageManager().getConfigData()) as\n      | ThunderIDReactConfig\n      | undefined;\n    const isConfigLost: boolean =\n      !config || Object.keys(config).length === 0 || (Boolean(this._initializeConfig?.baseUrl) && !config.baseUrl);\n\n    if (!isConfigLost || !this._initializeConfig) {\n      return config;\n    }\n\n    await this.initialize(this._initializeConfig);\n\n    // Reload the config persisted by initialization so downstream endpoint resolution\n    // (baseUrl and the flowExecute override) uses the recovered values, not the stale empty config.\n    return (await this.getStorageManager().getConfigData()) as ThunderIDReactConfig | undefined;\n  }\n\n  override initialize(config: ThunderIDReactConfig): Promise<boolean> {\n    return this.withLoading(async () => {\n      this._initializeConfig = {\n        ...config,\n        periodicTokenRefresh:\n          config?.tokenLifecycle?.refreshToken?.autoRefresh ?? (config as any)?.periodicTokenRefresh,\n      } as any;\n\n      return super.initialize(this._initializeConfig as unknown as T);\n    });\n  }\n\n  override reInitialize(config: Partial<ThunderIDReactConfig>): Promise<boolean> {\n    return this.withLoading(async () => {\n      let isInitialized: boolean;\n\n      try {\n        await super.reInitialize(config as Partial<T>);\n        isInitialized = true;\n      } catch (error) {\n        throw new ThunderIDRuntimeError(\n          `Failed to check if the client is initialized: ${error instanceof Error ? error.message : String(error)}`,\n          'ThunderIDReactClient-reInitialize-RuntimeError-001',\n          'react',\n          'An error occurred while checking the initialization status of the client.',\n        );\n      }\n\n      return isInitialized;\n    });\n  }\n\n  override async updateUserProfile(): Promise<User> {\n    throw new Error('Not implemented');\n  }\n\n  override async getUser(): Promise<User> {\n    return extractUserClaimsFromIdToken(await this.getDecodedIdToken());\n  }\n\n  override async getDecodedIdToken(sessionId?: string): Promise<IdToken> {\n    return super.getDecodedIdToken(sessionId);\n  }\n\n  override async getIdToken(): Promise<string> {\n    return this.withLoading(async () => super.getIdToken());\n  }\n\n  override async getUserProfile(): Promise<UserProfile> {\n    return this.withLoading(async () => {\n      const claims: User = extractUserClaimsFromIdToken(await this.getDecodedIdToken());\n      return {\n        flattenedProfile: claims,\n        profile: claims,\n        schemas: [],\n      };\n    });\n  }\n\n  override isLoading(): boolean {\n    return this.loadingState || super.isLoading();\n  }\n\n  override async isSignedIn(): Promise<boolean> {\n    return super.isSignedIn();\n  }\n\n  override async exchangeToken(config: TokenExchangeRequestConfig): Promise<TokenResponse | Response> {\n    return this.withLoading(async () => super.exchangeToken(config) as unknown as TokenResponse | Response);\n  }\n\n  override async signIn(...args: any[]): Promise<User | EmbeddedSignInFlowResponse> {\n    return this.withLoading(async () => {\n      const arg1: any = args[0];\n      const arg2: any = args[1];\n\n      const config: ThunderIDReactConfig | undefined = await this.ensureConfigData();\n\n      if (typeof arg1 === 'object' && arg1 !== null && arg1.callOnlyOnRedirect === true) {\n        return undefined as any;\n      }\n\n      if (\n        typeof arg1 === 'object' &&\n        arg1 !== null &&\n        !isEmpty(arg1) &&\n        ('executionId' in arg1 || 'applicationId' in arg1)\n      ) {\n        this.rejectEmbeddedFlowInBackendMode();\n\n        const authIdFromUrl: string = new URL(window.location.href).searchParams.get('authId') ?? '';\n        const authIdFromStorage: string =\n          ((await this.getStorageManager().getHybridDataParameter('authId')) as string) ?? '';\n        const authId: string = authIdFromUrl || authIdFromStorage;\n        const baseUrl: string = config?.baseUrl ?? '';\n\n        const response: EmbeddedSignInFlowResponse = await executeEmbeddedSignInFlow({\n          authId,\n          baseUrl,\n          payload: arg1,\n          url: resolveResourceEndpoint('flowExecute', config, arg2?.url),\n        });\n\n        if (\n          response &&\n          typeof response === 'object' &&\n          response.flowStatus === EmbeddedSignInFlowStatus.Complete &&\n          response.assertion\n        ) {\n          const decodedAssertion: {\n            [key: string]: unknown;\n            exp?: number;\n            iat?: number;\n            scope?: string;\n          } = await this.decodeJwtToken<{\n            [key: string]: unknown;\n            exp?: number;\n            iat?: number;\n            scope?: string;\n          }>(response.assertion);\n\n          const createdAt: number = decodedAssertion.iat ? decodedAssertion.iat * 1000 : Date.now();\n          const expiresIn: number =\n            decodedAssertion.exp && decodedAssertion.iat ? decodedAssertion.exp - decodedAssertion.iat : 3600;\n\n          await this.setSession({\n            access_token: response.assertion,\n            created_at: createdAt,\n            expires_in: expiresIn,\n            id_token: response.assertion,\n            scope: decodedAssertion.scope,\n            token_type: 'Bearer',\n          });\n\n          this.notifySignIn(extractUserClaimsFromIdToken(decodedAssertion as IdToken) as User);\n        }\n\n        return response;\n      }\n\n      return (await super.signIn(...args)) as unknown as User;\n    });\n  }\n\n  override async signInSilently(options?: SignInOptions): Promise<User | boolean> {\n    await this.ensureConfigData();\n\n    return super.signInSilently(options as Record<string, string | boolean>) as Promise<User | boolean>;\n  }\n\n  override async signUp(options?: SignUpOptions): Promise<void>;\n  override async signUp(payload: any): Promise<any>;\n  override async signUp(...args: any[]): Promise<void | any> {\n    this.rejectEmbeddedFlowInBackendMode();\n\n    const config: ThunderIDReactConfig = (await this.getStorageManager().getConfigData()) as ThunderIDReactConfig;\n    const firstArg: any = args[0];\n    const baseUrl: string = config?.baseUrl ?? '';\n\n    const authId: string = new URL(window.location.href).searchParams.get('authId') ?? '';\n\n    const response: any = await executeEmbeddedSignUpFlow({\n      authId,\n      baseUrl,\n      payload: typeof firstArg === 'object' && 'flowType' in firstArg ? {...firstArg, verbose: true} : firstArg,\n      url: resolveResourceEndpoint('flowExecute', config),\n    });\n\n    if (\n      response &&\n      typeof response === 'object' &&\n      response.flowStatus === EmbeddedSignUpFlowStatus.Complete &&\n      response.assertion\n    ) {\n      const decodedAssertion: {\n        [key: string]: unknown;\n        exp?: number;\n        iat?: number;\n        scope?: string;\n      } = await this.decodeJwtToken<{\n        [key: string]: unknown;\n        exp?: number;\n        iat?: number;\n        scope?: string;\n      }>(response.assertion);\n\n      const createdAt: number = decodedAssertion.iat ? decodedAssertion.iat * 1000 : Date.now();\n      const expiresIn: number =\n        decodedAssertion.exp && decodedAssertion.iat ? decodedAssertion.exp - decodedAssertion.iat : 3600;\n\n      await this.setSession({\n        access_token: response.assertion,\n        created_at: createdAt,\n        expires_in: expiresIn,\n        id_token: response.assertion,\n        scope: decodedAssertion.scope,\n        token_type: 'Bearer',\n      });\n\n      this.notifySignIn(extractUserClaimsFromIdToken(decodedAssertion as IdToken) as User);\n    }\n\n    return response;\n  }\n\n  override async recover(payload?: any): Promise<any> {\n    this.rejectEmbeddedFlowInBackendMode();\n\n    const config: ThunderIDReactConfig = (await this.getStorageManager().getConfigData()) as ThunderIDReactConfig;\n\n    return executeEmbeddedRecoveryFlow({\n      baseUrl: config?.baseUrl,\n      payload: {...payload, verbose: true},\n      url: resolveResourceEndpoint('flowExecute', config),\n    }) as any;\n  }\n\n  /**\n   * The embedded flows keep their result in the browser, which running sign-in on the backend rules\n   * out. Running them through the backend is not supported yet.\n   */\n  private rejectEmbeddedFlowInBackendMode(): void {\n    if (this.isBackendMode()) {\n      throw new ThunderIDRuntimeError(\n        'Embedded sign-in, sign-up, and recovery flows are not supported when sign-in runs on the backend.',\n        'ThunderIDReactClient-embeddedFlow-RuntimeError-001',\n        'react',\n        'Use redirect sign-in with the backend.',\n      );\n    }\n  }\n\n  public override getStorageManager(): any {\n    return super.getStorageManager();\n  }\n\n  async request(requestConfig?: HttpRequestConfig): Promise<HttpResponse<any>> {\n    return super.httpRequest(requestConfig!) as Promise<HttpResponse<any>>;\n  }\n\n  async requestAll(requestConfigs?: HttpRequestConfig[]): Promise<HttpResponse<any>[]> {\n    return super.httpRequestAll(requestConfigs!) as Promise<HttpResponse<any>[]>;\n  }\n}\n\nexport default ThunderIDReactClient;\n"],"mappings":";;;;;AA2BA,IAAM,uBAAN,cAA0FA,2CAA0B;CAClH,AAAQ,eAAe;CAEvB,AAAQ;CAER,YAAY,aAAa,GAAG;AAC1B,QAAM,WAAW;;CAGnB,AAAQ,WAAW,SAAwB;AACzC,OAAK,eAAe;;CAGtB,MAAc,YAAqB,WAAqD;AACtF,OAAK,WAAW,KAAK;AACrB,MAAI;AAEF,UADwB,MAAM,WAAW;YAEjC;AACR,QAAK,WAAW,MAAM;;;;;;;;;;;CAY1B,MAAc,mBAA8D;EAC1E,MAAMC,SAA4C,MAAM,KAAK,mBAAmB,CAAC,eAAe;AAMhG,MAAI,EAFF,CAAC,UAAU,OAAO,KAAK,OAAO,CAAC,WAAW,KAAM,QAAQ,KAAK,mBAAmB,QAAQ,IAAI,CAAC,OAAO,YAEjF,CAAC,KAAK,kBACzB,QAAO;AAGT,QAAM,KAAK,WAAW,KAAK,kBAAkB;AAI7C,SAAQ,MAAM,KAAK,mBAAmB,CAAC,eAAe;;CAGxD,AAAS,WAAW,QAAgD;AAClE,SAAO,KAAK,YAAY,YAAY;AAClC,QAAK,oBAAoB;IACvB,GAAG;IACH,sBACE,QAAQ,gBAAgB,cAAc,eAAgB,QAAgB;IACzE;AAED,UAAO,MAAM,WAAW,KAAK,kBAAkC;IAC/D;;CAGJ,AAAS,aAAa,QAAyD;AAC7E,SAAO,KAAK,YAAY,YAAY;GAClC,IAAIC;AAEJ,OAAI;AACF,UAAM,MAAM,aAAa,OAAqB;AAC9C,oBAAgB;YACT,OAAO;AACd,UAAM,IAAIC,0CACR,iDAAiD,iBAAiB,QAAQ,MAAM,UAAU,OAAO,MAAM,IACvG,sDACA,SACA,4EACD;;AAGH,UAAO;IACP;;CAGJ,MAAe,oBAAmC;AAChD,QAAM,IAAI,MAAM,kBAAkB;;CAGpC,MAAe,UAAyB;AACtC,+DAAoC,MAAM,KAAK,mBAAmB,CAAC;;CAGrE,MAAe,kBAAkB,WAAsC;AACrE,SAAO,MAAM,kBAAkB,UAAU;;CAG3C,MAAe,aAA8B;AAC3C,SAAO,KAAK,YAAY,YAAY,MAAM,YAAY,CAAC;;CAGzD,MAAe,iBAAuC;AACpD,SAAO,KAAK,YAAY,YAAY;GAClC,MAAMC,+DAA4C,MAAM,KAAK,mBAAmB,CAAC;AACjF,UAAO;IACL,kBAAkB;IAClB,SAAS;IACT,SAAS,EAAE;IACZ;IACD;;CAGJ,AAAS,YAAqB;AAC5B,SAAO,KAAK,gBAAgB,MAAM,WAAW;;CAG/C,MAAe,aAA+B;AAC5C,SAAO,MAAM,YAAY;;CAG3B,MAAe,cAAc,QAAuE;AAClG,SAAO,KAAK,YAAY,YAAY,MAAM,cAAc,OAAO,CAAwC;;CAGzG,MAAe,OAAO,GAAG,MAAyD;AAChF,SAAO,KAAK,YAAY,YAAY;GAClC,MAAMC,OAAY,KAAK;GACvB,MAAMC,OAAY,KAAK;GAEvB,MAAML,SAA2C,MAAM,KAAK,kBAAkB;AAE9E,OAAI,OAAO,SAAS,YAAY,SAAS,QAAQ,KAAK,uBAAuB,KAC3E;AAGF,OACE,OAAO,SAAS,YAChB,SAAS,QACT,kCAAS,KAAK,KACb,iBAAiB,QAAQ,mBAAmB,OAC7C;AACA,SAAK,iCAAiC;IAEtC,MAAMM,gBAAwB,IAAI,IAAI,OAAO,SAAS,KAAK,CAAC,aAAa,IAAI,SAAS,IAAI;IAC1F,MAAMC,oBACF,MAAM,KAAK,mBAAmB,CAAC,uBAAuB,SAAS,IAAgB;IAInF,MAAMC,WAAuC,yDAAgC;KAC3E,QAJqB,iBAAiB;KAKtC,SAJsB,QAAQ,WAAW;KAKzC,SAAS;KACT,sDAA6B,eAAe,QAAQ,MAAM,IAAI;KAC/D,CAAC;AAEF,QACE,YACA,OAAO,aAAa,YACpB,SAAS,eAAeC,6CAAyB,YACjD,SAAS,WACT;KACA,MAAMC,mBAKF,MAAM,KAAK,eAKZ,SAAS,UAAU;KAEtB,MAAMC,YAAoB,iBAAiB,MAAM,iBAAiB,MAAM,MAAO,KAAK,KAAK;KACzF,MAAMC,YACJ,iBAAiB,OAAO,iBAAiB,MAAM,iBAAiB,MAAM,iBAAiB,MAAM;AAE/F,WAAM,KAAK,WAAW;MACpB,cAAc,SAAS;MACvB,YAAY;MACZ,YAAY;MACZ,UAAU,SAAS;MACnB,OAAO,iBAAiB;MACxB,YAAY;MACb,CAAC;AAEF,UAAK,mEAA0C,iBAA4B,CAAS;;AAGtF,WAAO;;AAGT,UAAQ,MAAM,MAAM,OAAO,GAAG,KAAK;IACnC;;CAGJ,MAAe,eAAe,SAAkD;AAC9E,QAAM,KAAK,kBAAkB;AAE7B,SAAO,MAAM,eAAe,QAA4C;;CAK1E,MAAe,OAAO,GAAG,MAAkC;AACzD,OAAK,iCAAiC;EAEtC,MAAMC,SAAgC,MAAM,KAAK,mBAAmB,CAAC,eAAe;EACpF,MAAMC,WAAgB,KAAK;EAC3B,MAAMC,UAAkB,QAAQ,WAAW;EAI3C,MAAMC,WAAgB,yDAAgC;GACpD,QAHqB,IAAI,IAAI,OAAO,SAAS,KAAK,CAAC,aAAa,IAAI,SAAS,IAAI;GAIjF;GACA,SAAS,OAAO,aAAa,YAAY,cAAc,WAAW;IAAC,GAAG;IAAU,SAAS;IAAK,GAAG;GACjG,sDAA6B,eAAe,OAAO;GACpD,CAAC;AAEF,MACE,YACA,OAAO,aAAa,YACpB,SAAS,eAAeC,6CAAyB,YACjD,SAAS,WACT;GACA,MAAMC,mBAKF,MAAM,KAAK,eAKZ,SAAS,UAAU;GAEtB,MAAMP,YAAoB,iBAAiB,MAAM,iBAAiB,MAAM,MAAO,KAAK,KAAK;GACzF,MAAMC,YACJ,iBAAiB,OAAO,iBAAiB,MAAM,iBAAiB,MAAM,iBAAiB,MAAM;AAE/F,SAAM,KAAK,WAAW;IACpB,cAAc,SAAS;IACvB,YAAY;IACZ,YAAY;IACZ,UAAU,SAAS;IACnB,OAAO,iBAAiB;IACxB,YAAY;IACb,CAAC;AAEF,QAAK,mEAA0C,iBAA4B,CAAS;;AAGtF,SAAO;;CAGT,MAAe,QAAQ,SAA6B;AAClD,OAAK,iCAAiC;EAEtC,MAAMC,SAAgC,MAAM,KAAK,mBAAmB,CAAC,eAAe;AAEpF,8DAAmC;GACjC,SAAS,QAAQ;GACjB,SAAS;IAAC,GAAG;IAAS,SAAS;IAAK;GACpC,sDAA6B,eAAe,OAAO;GACpD,CAAC;;;;;;CAOJ,AAAQ,kCAAwC;AAC9C,MAAI,KAAK,eAAe,CACtB,OAAM,IAAIX,0CACR,qGACA,sDACA,SACA,yCACD;;CAIL,AAAgB,oBAAyB;AACvC,SAAO,MAAM,mBAAmB;;CAGlC,MAAM,QAAQ,eAA+D;AAC3E,SAAO,MAAM,YAAY,cAAe;;CAG1C,MAAM,WAAW,gBAAoE;AACnF,SAAO,MAAM,eAAe,eAAgB;;;AAIhD,mCAAe"}

package/dist/cjs/contexts/ThunderID/ThunderIDProvider.cjs

@@ -158,6 +158,11 @@ const ThunderIDProvider = ({ afterSignInUrl, afterSignOutUrl, baseUrl: initialBa
 			await client.on("sign-in", async () => {
 				await updateSession();
 			});
+			await client.on("sign-out", () => {
+				setUser(null);
+				setUserProfile(null);
+				setIsSignedInSync(false);
+			});
 			try {
 				await client.startAutoRefreshToken();
 			} catch (error) {

package/dist/cjs/contexts/ThunderID/ThunderIDProvider.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"ThunderIDProvider.cjs","names":["logger: ReturnType<typeof createPackageComponentLogger>","ThunderIDProvider: FC<PropsWithChildren<ThunderIDProviderProps>>","reRenderCheckRef: RefObject<boolean>","client: ThunderIDReactClient","ThunderIDReactClient","invalidator: ResourceInvalidator","createResourceInvalidator","storageManagerRef: any","useBrowserUrl","pendingSessionUpdateRef: RefObject<Promise<void> | null>","resolvedBaseUrl: string","decodedToken: IdToken","shouldFetchProfile: boolean","claims: User","currentSignInStatus: boolean","getUsersMe","getUsersMeMeta","arg1: any","isV2FlowRequest: boolean","ThunderIDRuntimeError","currentUrl: URL","urlParams: URLSearchParams","code: string | null","executionIdFromUrl: string | null","storedExecutionId: string | null","SPAUtils","interval: NodeJS.Timeout","status: boolean","getDecodedIdToken: () => Promise<IdToken>","getIdToken: () => Promise<string>","getAccessToken: () => Promise<string>","getStorageManager: ThunderIDContextProps['getStorageManager']","storageManager: Awaited<ReturnType<ThunderIDContextProps['getStorageManager']>>","request: (...args: any[]) => Promise<any>","requestAll: (...args: any[]) => Promise<any>","exchangeToken: (exchangeConfig: any) => Promise<any>","signOut: (...args: any[]) => Promise<any>","recover: ThunderIDContextProps['recover']","signUp: (...args: any[]) => Promise<any>","clearSession: (...args: any[]) => Promise<any>","reInitialize: (reInitConfig: any) => Promise<any>","result: any","reinitializedConfig: ThunderIDReactConfig","value: any","ThunderIDContext","I18nProvider","FlowMetaProvider","ThemeProvider","FlowProvider","UserProvider","ComponentRendererProvider"],"sources":["../../../../src/contexts/ThunderID/ThunderIDProvider.tsx"],"sourcesContent":["// Copyright 2025-2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\nimport {\n  ThunderIDRuntimeError,\n  generateFlattenedUserProfile,\n  OIDCDiscoveryApiResponse,\n  SignInOptions,\n  User,\n  UserProfile,\n  IdToken,\n  extractUserClaimsFromIdToken,\n  EmbeddedSignInFlowResponse,\n  EmbeddedRecoveryFlowRequest,\n  EmbeddedRecoveryFlowResponse,\n  createPackageComponentLogger,\n  getVendorPrefix,\n  resolveResourceEndpoint,\n  AttributeSchema,\n  SPAUtils,\n} from '@thunderid/browser';\nimport {FC, RefObject, PropsWithChildren, ReactElement, useEffect, useMemo, useRef, useState, useCallback} from 'react';\nimport ThunderIDContext, {ThunderIDContextProps} from './ThunderIDContext';\nimport useBrowserUrl from '../../hooks/useBrowserUrl';\nimport {ThunderIDReactConfig} from '../../models/config';\nimport {configureEmotionNonce} from '../../styles/emotion';\nimport ThunderIDReactClient from '../../ThunderIDReactClient';\nimport createResourceInvalidator, {ResourceInvalidator} from '../../utils/createResourceInvalidator';\nimport ComponentRendererProvider from '../ComponentRenderer/ComponentRendererProvider';\nimport FlowProvider from '../Flow/FlowProvider';\nimport FlowMetaProvider from '../FlowMeta/FlowMetaProvider';\nimport I18nProvider from '../I18n/I18nProvider';\nimport ThemeProvider from '../Theme/ThemeProvider';\nimport UserProvider from '../User/UserProvider';\nimport getUsersMe from '../../api/getUsersMe';\nimport getUsersMeMeta from '../../api/getUsersMeMeta';\n\nconst logger: ReturnType<typeof createPackageComponentLogger> = createPackageComponentLogger(\n  '@thunderid/react',\n  'ThunderIDProvider',\n);\n\n/**\n * Props interface of {@link ThunderIDProvider}\n */\nexport type ThunderIDProviderProps = ThunderIDReactConfig;\n\nconst ThunderIDProvider: FC<PropsWithChildren<ThunderIDProviderProps>> = ({\n  afterSignInUrl,\n  afterSignOutUrl,\n  baseUrl: initialBaseUrl,\n  clientId,\n  children,\n  extensions,\n  scopes,\n  preferences,\n  signInUrl,\n  signUpUrl,\n  organizationHandle,\n  applicationId,\n  signInOptions,\n  tokenRequest,\n  instanceId = 0,\n  organizationChain,\n  cspNonce,\n  vendor,\n  namespace,\n  http: httpOptions,\n  ...rest\n}: PropsWithChildren<ThunderIDProviderProps>): ReactElement => {\n  // Must run synchronously here, in the render body, before any descendant's css()/cx()/\n  // keyframes() calls execute during this same render pass - see the doc comment on\n  // `configureEmotionNonce` for why a `useEffect` would be too late.\n  configureEmotionNonce(cspNonce, vendor);\n\n  const reRenderCheckRef: RefObject<boolean> = useRef(false);\n  const client: ThunderIDReactClient = useMemo(() => new ThunderIDReactClient(instanceId), [instanceId]);\n  const invalidator: ResourceInvalidator = useMemo(() => createResourceInvalidator(), []);\n  const storageManagerRef: any = useRef<any>(null);\n  const {hasAuthParams, hasCalledForThisInstance} = useBrowserUrl();\n  const [user, setUser] = useState<User | null>(null);\n  const [isSignedInSync, setIsSignedInSync] = useState<boolean>(false);\n  const [isInitializedSync, setIsInitializedSync] = useState<boolean>(false);\n  const [isLoadingSync, setIsLoadingSync] = useState<boolean>(true);\n\n  const [userProfile, setUserProfile] = useState<UserProfile | null>(null);\n  const [userSchema, setUserSchema] = useState<Record<string, AttributeSchema> | null>(null);\n  const [baseUrl, setBaseUrl] = useState<string>(initialBaseUrl ?? '');\n  const [config, setConfig] = useState<ThunderIDReactConfig>({\n    afterSignInUrl: afterSignInUrl ?? window.location.origin,\n    afterSignOutUrl: afterSignOutUrl ?? window.location.origin,\n    applicationId,\n    baseUrl,\n    clientId,\n    organizationChain,\n    organizationHandle,\n    scopes,\n    signInOptions,\n    tokenRequest,\n    signInUrl,\n    signUpUrl,\n    vendor,\n    ...rest,\n  });\n\n  const [isUpdatingSession, setIsUpdatingSession] = useState<boolean>(false);\n  const [wellKnown, setWellKnown] = useState<OIDCDiscoveryApiResponse | null>(null);\n\n  // Holds the in-flight `updateSession()` promise so concurrent callers coalesce onto a single\n  // `/users/me` request instead of issuing one each.\n  const pendingSessionUpdateRef: RefObject<Promise<void> | null> = useRef<Promise<void> | null>(null);\n\n  useEffect(() => {\n    setBaseUrl(initialBaseUrl ?? '');\n  }, [initialBaseUrl]);\n\n  useEffect(() => {\n    (async (): Promise<void> => {\n      await client.initialize(config);\n      const initializedConfig: ThunderIDReactConfig = await client.getConfiguration();\n      setConfig(initializedConfig);\n      setWellKnown(await client.getDiscoveryResponse());\n    })();\n  }, []);\n\n  async function performSessionUpdate(): Promise<void> {\n    try {\n      // Set flag to prevent loading state tracking from interfering\n      setIsUpdatingSession(true);\n      setIsLoadingSync(true);\n      let resolvedBaseUrl: string = baseUrl;\n\n      const decodedToken: IdToken = await client.getDecodedIdToken();\n\n      // If there's a `user_org` claim in the ID token,\n      // Treat this login as a organization login.\n      if (decodedToken?.['user_org']) {\n        resolvedBaseUrl = `${(await client.getConfiguration()).baseUrl}/o`;\n        setBaseUrl(resolvedBaseUrl);\n      }\n\n      const shouldFetchProfile: boolean = preferences?.user?.fetchUserProfile !== false;\n      const claims: User = extractUserClaimsFromIdToken(decodedToken) as User;\n      let profileData = claims;\n      const currentSignInStatus: boolean = await client.isSignedIn();\n\n      if (currentSignInStatus && shouldFetchProfile) {\n        try {\n          const fetchedProfile = await getUsersMe({\n            baseUrl: resolvedBaseUrl,\n            url: resolveResourceEndpoint('usersMe', config),\n            instanceId,\n          });\n          profileData = {...claims, ...fetchedProfile};\n        } catch (err) {\n          logger.warn('Failed to fetch user profile from /users/me:', err);\n        }\n\n        try {\n          const metaRes = await getUsersMeMeta({\n            baseUrl: resolvedBaseUrl,\n            url: resolveResourceEndpoint('usersMeMeta', config),\n            instanceId,\n          });\n          if (metaRes?.schema) {\n            setUserSchema(metaRes.schema);\n          } else {\n            setUserSchema(null);\n          }\n        } catch (err) {\n          setUserSchema(null);\n          logger.warn('Failed to fetch user schema metadata from /users/me/meta:', err);\n        }\n      } else {\n        setUserSchema(null);\n      }\n\n      setUser(profileData);\n      setUserProfile({\n        flattenedProfile: generateFlattenedUserProfile(profileData, []),\n        profile: profileData,\n      });\n\n      // CRITICAL: Update sign-in status BEFORE setting loading to false\n      // This prevents the race condition where ProtectedRoute sees isLoading=false but isSignedIn=false\n      setIsSignedInSync(currentSignInStatus);\n    } catch (error) {\n      // TODO: Add an error log.\n    } finally {\n      // Clear the flag and set final loading state\n      setIsUpdatingSession(false);\n      setIsLoadingSync(client.isLoading());\n    }\n  }\n\n  /**\n   * Single-flight wrapper around {@link performSessionUpdate}.\n   *\n   * Concurrent callers share the in-flight request instead of each issuing their own `/users/me`.\n   * This is not a cache: once the request settles the ref is cleared, so a later caller (e.g.\n   * revalidation after a profile update) fetches again.\n   */\n  async function updateSession(): Promise<void> {\n    if (pendingSessionUpdateRef.current) {\n      return pendingSessionUpdateRef.current;\n    }\n\n    pendingSessionUpdateRef.current = performSessionUpdate().finally(() => {\n      pendingSessionUpdateRef.current = null;\n    });\n\n    return pendingSessionUpdateRef.current;\n  }\n\n  async function signIn(...args: any): Promise<User | EmbeddedSignInFlowResponse> {\n    // Check if this is a V2 embedded flow request BEFORE calling signIn\n    // This allows us to skip session checks entirely for V2 flows\n    const arg1: any = args[0];\n    const isV2FlowRequest: boolean =\n      typeof arg1 === 'object' && arg1 !== null && ('executionId' in arg1 || 'applicationId' in arg1);\n\n    try {\n      if (!isV2FlowRequest) {\n        setIsUpdatingSession(true);\n        setIsLoadingSync(true);\n      }\n\n      return await client.signIn(...args);\n    } catch (error) {\n      throw new ThunderIDRuntimeError(\n        `Sign in failed: ${error instanceof Error ? error.message : String(JSON.stringify(error))}`,\n        'thunderid-signIn-Error',\n        'react',\n        'An error occurred while trying to sign in.',\n      );\n    } finally {\n      if (!isV2FlowRequest) {\n        setIsUpdatingSession(false);\n        setIsLoadingSync(client.isLoading());\n      }\n    }\n  }\n\n  /**\n   * Try signing in when the component is mounted.\n   */\n  useEffect(() => {\n    // React 18.x Strict.Mode has a new check for `Ensuring reusable state` to facilitate an upcoming react feature.\n    // https://reactjs.org/docs/strict-mode.html#ensuring-reusable-state\n    // This will remount all the useEffects to ensure that there are no unexpected side effects.\n    // When react remounts the signIn hook of the AuthProvider, it will cause a race condition. Hence, we have to\n    // prevent the re-render of this hook as suggested in the following discussion.\n    // https://github.com/reactwg/react-18/discussions/18#discussioncomment-795623\n    if (reRenderCheckRef.current) {\n      return;\n    }\n\n    reRenderCheckRef.current = true;\n\n    (async (): Promise<void> => {\n      // Sync session state whenever sign-in completes (both redirect and embedded V2 flows).\n      // Pass the user returned by the SDK's sign-in flow so users/me result is not discarded.\n      await client.on('sign-in', async () => {\n        await updateSession();\n      });\n\n      // Start auto-refresh with a soft failure. This also covers the case where the access token\n      // expired while the refresh token is still valid — startAutoRefreshToken() calls\n      // refreshAccessToken() immediately when timeUntilRefresh <= 0 — so the sign-in check below\n      // sees the refreshed state.\n      try {\n        await client.startAutoRefreshToken();\n      } catch (error) {\n        logger.warn('Failed to schedule automatic token refresh.', error);\n      }\n\n      // User is already authenticated. Restore the session and skip the sign-in path.\n      if (await client.isSignedIn()) {\n        await updateSession();\n\n        return;\n      }\n\n      const currentUrl: URL = new URL(window.location.href);\n      const hasAuthParamsResult: boolean =\n        hasAuthParams(currentUrl, config.afterSignInUrl!) && hasCalledForThisInstance(currentUrl, instanceId ?? 0);\n\n      if (hasAuthParamsResult) {\n        try {\n          const urlParams: URLSearchParams = currentUrl.searchParams;\n          const code: string | null = urlParams.get('code');\n          const executionIdFromUrl: string | null = urlParams.get('executionId');\n          const storedExecutionId: string | null = sessionStorage.getItem(\n            `${getVendorPrefix(config.vendor)}_execution_id`,\n          );\n\n          // A silent sign-in response is handled even without a code: an error such as\n          // login_required must still be relayed from the iframe to the waiting parent.\n          if ((code || SPAUtils.isSilentStatePresentInURL()) && !executionIdFromUrl && !storedExecutionId) {\n            await signIn();\n          }\n        } catch (error) {\n          throw new ThunderIDRuntimeError(\n            `Sign in failed: ${error instanceof Error ? error.message : String(JSON.stringify(error))}`,\n            'thunderid-signIn-Error',\n            'react',\n            'An error occurred while trying to sign in.',\n          );\n        }\n      }\n    })();\n  }, []);\n\n  /**\n   * Check if the user is signed in and update the state accordingly.\n   * This will also set an interval to check for the sign-in status every second\n   * until the user is signed in.\n   */\n  useEffect(() => {\n    let interval: NodeJS.Timeout;\n\n    (async (): Promise<void> => {\n      try {\n        const status: boolean = await client.isSignedIn();\n\n        setIsSignedInSync(status);\n\n        if (!status) {\n          interval = setInterval(async () => {\n            const newStatus: boolean = await client.isSignedIn();\n\n            if (newStatus) {\n              setIsSignedInSync(true);\n              clearInterval(interval);\n            }\n          }, 1000);\n        } else {\n          // TODO: Add a debug log to indicate that the user is already signed in.\n        }\n      } catch (error) {\n        setIsSignedInSync(false);\n      }\n    })();\n\n    return (): void => {\n      if (interval) {\n        clearInterval(interval);\n      }\n    };\n  }, [client]);\n\n  useEffect(() => {\n    (async (): Promise<void> => {\n      try {\n        const status: boolean = await client.isInitialized();\n\n        setIsInitializedSync(status);\n      } catch (error) {\n        setIsInitializedSync(false);\n      }\n    })();\n  }, [client]);\n\n  /**\n   * Track loading state changes from the ThunderID client\n   */\n  useEffect(() => {\n    const checkLoadingState = (): void => {\n      // Don't override loading state during critical session updates\n      if (isUpdatingSession) {\n        return;\n      }\n\n      // Don't set loading=false while auth params are in the URL and user isn't signed in yet.\n      // This prevents ProtectedRoute from redirecting before the sign-in effect processes the auth code.\n      const currentUrl: URL = new URL(window.location.href);\n      if (!isSignedInSync && hasAuthParams(currentUrl, config.afterSignInUrl!)) {\n        return;\n      }\n\n      setIsLoadingSync(client.isLoading());\n    };\n\n    // Initial check\n    checkLoadingState();\n\n    // Set up an interval to check for loading state changes\n    const interval: NodeJS.Timeout = setInterval(checkLoadingState, 100);\n\n    return (): void => {\n      clearInterval(interval);\n    };\n  }, [client, isLoadingSync, isSignedInSync, isUpdatingSession]);\n\n  const signInSilently = async (options?: SignInOptions): Promise<User | boolean> => {\n    try {\n      setIsUpdatingSession(true);\n      setIsLoadingSync(true);\n      return await client.signInSilently(options);\n    } catch (error) {\n      throw new ThunderIDRuntimeError(\n        `Error while signing in silently: ${error instanceof Error ? error.message : String(JSON.stringify(error))}`,\n        'thunderid-signInSilently-Error',\n        'react',\n        'An error occurred while trying to sign in silently.',\n      );\n    } finally {\n      setIsUpdatingSession(false);\n      setIsLoadingSync(client.isLoading());\n    }\n  };\n\n  const handleProfileUpdate = (payload: User): void => {\n    setUser(payload);\n    setUserProfile((prev: UserProfile | null) => ({\n      flattenedProfile: generateFlattenedUserProfile(payload),\n      profile: payload,\n    }));\n  };\n\n  const getDecodedIdToken: () => Promise<IdToken> = useCallback(\n    async (): Promise<IdToken> => client.getDecodedIdToken(),\n    [client],\n  );\n\n  const getIdToken: () => Promise<string> = useCallback(async (): Promise<string> => client.getIdToken(), [client]);\n\n  const getAccessToken: () => Promise<string> = useCallback(\n    async (): Promise<string> => client.getAccessToken(),\n    [client],\n  );\n\n  const getStorageManager: ThunderIDContextProps['getStorageManager'] = useCallback(async () => {\n    const storageManager: Awaited<ReturnType<ThunderIDContextProps['getStorageManager']>> =\n      storageManagerRef.current ?? (await client.getStorageManager());\n    if (storageManager) {\n      storageManagerRef.current = storageManager;\n    }\n    return storageManager;\n  }, [client]);\n\n  const request: (...args: any[]) => Promise<any> = useCallback(\n    async (...args: any[]): Promise<any> => client.request(...args),\n    [client],\n  );\n\n  const requestAll: (...args: any[]) => Promise<any> = useCallback(\n    async (...args: any[]): Promise<any> => client.requestAll(...args),\n    [client],\n  );\n\n  const exchangeToken: (exchangeConfig: any) => Promise<any> = useCallback(\n    async (exchangeConfig: any): Promise<any> => client.exchangeToken(exchangeConfig),\n    [client],\n  );\n\n  const signOut: (...args: any[]) => Promise<any> = useCallback(\n    async (...args: any[]): Promise<any> => client.signOut(...args),\n    [client],\n  );\n\n  const recover: ThunderIDContextProps['recover'] = useCallback(\n    async (payload?: EmbeddedRecoveryFlowRequest): Promise<EmbeddedRecoveryFlowResponse> =>\n      (await client.recover(payload)) as EmbeddedRecoveryFlowResponse,\n    [client],\n  );\n\n  const signUp: (...args: any[]) => Promise<any> = useCallback(\n    async (...args: any[]): Promise<any> => client.signUp(...args),\n    [client],\n  );\n\n  const clearSession: (...args: any[]) => Promise<any> = useCallback(\n    async (...args: any[]): Promise<any> => client.clearSession(...args),\n    [client],\n  );\n\n  const reInitialize: (reInitConfig: any) => Promise<any> = useCallback(\n    async (reInitConfig: any): Promise<any> => {\n      const result: any = await client.reInitialize(reInitConfig);\n\n      // Refresh React state from the reinitialized client so the context (config.endpoints,\n      // baseUrl, discovery) reflects the new configuration instead of the pre-reinitialization state.\n      const reinitializedConfig: ThunderIDReactConfig = await client.getConfiguration();\n      setConfig(reinitializedConfig);\n      setBaseUrl(reinitializedConfig.baseUrl ?? '');\n      setWellKnown(await client.getDiscoveryResponse());\n\n      return result;\n    },\n    [client],\n  );\n\n  const value: any = useMemo(\n    () => ({\n      afterSignInUrl: config.afterSignInUrl,\n      applicationId: config.applicationId,\n      baseUrl,\n      endpoints: config.endpoints,\n      scopes: config.scopes,\n      clearSession,\n      clientId,\n      discovery: {\n        wellKnown,\n      },\n      exchangeToken,\n      getAccessToken,\n      getDecodedIdToken,\n      getIdToken,\n      getStorageManager,\n      http: {\n        fetcher: httpOptions?.fetcher,\n        request,\n        requestAll,\n      },\n      instanceId,\n      invalidator,\n      isInitialized: isInitializedSync,\n      isLoading: isLoadingSync,\n      isSignedIn: isSignedInSync,\n      organizationChain,\n      organizationHandle: config?.organizationHandle,\n      preferences,\n      reInitialize,\n      recover,\n      signIn,\n      signInOptions,\n      tokenRequest,\n      signInSilently,\n      signInUrl,\n      signOut,\n      signUp,\n      signUpUrl,\n      user,\n      userSchema,\n      vendor: getVendorPrefix(config.vendor),\n    }),\n    [\n      applicationId,\n      config?.organizationHandle,\n      config.vendor,\n      config.afterSignInUrl,\n      config.endpoints,\n      config.scopes,\n      signInUrl,\n      signUpUrl,\n      baseUrl,\n      clientId,\n      wellKnown,\n      isInitializedSync,\n      isLoadingSync,\n      isSignedInSync,\n      signIn,\n      signInSilently,\n      user,\n      userSchema,\n      client,\n      signInOptions,\n      tokenRequest,\n      getDecodedIdToken,\n      clearSession,\n      exchangeToken,\n      httpOptions?.fetcher,\n      getAccessToken,\n      getStorageManager,\n      instanceId,\n      invalidator,\n      organizationChain,\n      preferences,\n      recover,\n      reInitialize,\n      request,\n      requestAll,\n      signOut,\n      signUp,\n    ],\n  );\n\n  return (\n    <ThunderIDContext.Provider value={value}>\n      <I18nProvider preferences={preferences?.i18n} vendor={getVendorPrefix(config.vendor)}>\n        <FlowMetaProvider enabled={preferences?.resolveFromMeta !== false} namespace={namespace}>\n          <ThemeProvider\n            theme={{\n              ...preferences?.theme?.overrides,\n              direction: preferences?.theme?.direction,\n            }}\n          >\n            <FlowProvider>\n              <UserProvider\n                profile={userProfile as UserProfile}\n                userSchema={userSchema}\n                onUpdateProfile={handleProfileUpdate}\n              >\n                <ComponentRendererProvider renderers={(extensions?.components?.renderers ?? {}) as any}>\n                  {children}\n                </ComponentRendererProvider>\n              </UserProvider>\n            </FlowProvider>\n          </ThemeProvider>\n        </FlowMetaProvider>\n      </I18nProvider>\n    </ThunderIDContext.Provider>\n  );\n};\n\nexport default ThunderIDProvider;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;AAqCA,MAAMA,+DACJ,oBACA,oBACD;AAOD,MAAMC,qBAAoE,EACxE,gBACA,iBACA,SAAS,gBACT,UACA,UACA,YACA,QACA,aACA,WACA,WACA,oBACA,eACA,eACA,cACA,aAAa,GACb,mBACA,UACA,QACA,WACA,MAAM,YACN,GAAG,WAC0D;AAI7D,uCAAsB,UAAU,OAAO;CAEvC,MAAMC,qCAA8C,MAAM;CAC1D,MAAMC,kCAA6C,IAAIC,qCAAqB,WAAW,EAAE,CAAC,WAAW,CAAC;CACtG,MAAMC,uCAAiDC,2CAA2B,EAAE,EAAE,CAAC;CACvF,MAAMC,sCAAqC,KAAK;CAChD,MAAM,EAAC,eAAe,6BAA4BC,+BAAe;CACjE,MAAM,CAAC,MAAM,+BAAiC,KAAK;CACnD,MAAM,CAAC,gBAAgB,yCAAuC,MAAM;CACpE,MAAM,CAAC,mBAAmB,4CAA0C,MAAM;CAC1E,MAAM,CAAC,eAAe,wCAAsC,KAAK;CAEjE,MAAM,CAAC,aAAa,sCAA+C,KAAK;CACxE,MAAM,CAAC,YAAY,qCAAkE,KAAK;CAC1F,MAAM,CAAC,SAAS,kCAA+B,kBAAkB,GAAG;CACpE,MAAM,CAAC,QAAQ,iCAA4C;EACzD,gBAAgB,kBAAkB,OAAO,SAAS;EAClD,iBAAiB,mBAAmB,OAAO,SAAS;EACpD;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA,GAAG;EACJ,CAAC;CAEF,MAAM,CAAC,mBAAmB,4CAA0C,MAAM;CAC1E,MAAM,CAAC,WAAW,oCAA0D,KAAK;CAIjF,MAAMC,4CAAwF,KAAK;AAEnG,4BAAgB;AACd,aAAW,kBAAkB,GAAG;IAC/B,CAAC,eAAe,CAAC;AAEpB,4BAAgB;AACd,GAAC,YAA2B;AAC1B,SAAM,OAAO,WAAW,OAAO;AAE/B,aADgD,MAAM,OAAO,kBAAkB,CACnD;AAC5B,gBAAa,MAAM,OAAO,sBAAsB,CAAC;MAC/C;IACH,EAAE,CAAC;CAEN,eAAe,uBAAsC;AACnD,MAAI;AAEF,wBAAqB,KAAK;AAC1B,oBAAiB,KAAK;GACtB,IAAIC,kBAA0B;GAE9B,MAAMC,eAAwB,MAAM,OAAO,mBAAmB;AAI9D,OAAI,eAAe,aAAa;AAC9B,sBAAkB,IAAI,MAAM,OAAO,kBAAkB,EAAE,QAAQ;AAC/D,eAAW,gBAAgB;;GAG7B,MAAMC,qBAA8B,aAAa,MAAM,qBAAqB;GAC5E,MAAMC,+DAA4C,aAAa;GAC/D,IAAI,cAAc;GAClB,MAAMC,sBAA+B,MAAM,OAAO,YAAY;AAE9D,OAAI,uBAAuB,oBAAoB;AAC7C,QAAI;KACF,MAAM,iBAAiB,MAAMC,2BAAW;MACtC,SAAS;MACT,sDAA6B,WAAW,OAAO;MAC/C;MACD,CAAC;AACF,mBAAc;MAAC,GAAG;MAAQ,GAAG;MAAe;aACrC,KAAK;AACZ,YAAO,KAAK,gDAAgD,IAAI;;AAGlE,QAAI;KACF,MAAM,UAAU,MAAMC,+BAAe;MACnC,SAAS;MACT,sDAA6B,eAAe,OAAO;MACnD;MACD,CAAC;AACF,SAAI,SAAS,OACX,eAAc,QAAQ,OAAO;SAE7B,eAAc,KAAK;aAEd,KAAK;AACZ,mBAAc,KAAK;AACnB,YAAO,KAAK,6DAA6D,IAAI;;SAG/E,eAAc,KAAK;AAGrB,WAAQ,YAAY;AACpB,kBAAe;IACb,wEAA+C,aAAa,EAAE,CAAC;IAC/D,SAAS;IACV,CAAC;AAIF,qBAAkB,oBAAoB;WAC/B,OAAO,WAEN;AAER,wBAAqB,MAAM;AAC3B,oBAAiB,OAAO,WAAW,CAAC;;;;;;;;;;CAWxC,eAAe,gBAA+B;AAC5C,MAAI,wBAAwB,QAC1B,QAAO,wBAAwB;AAGjC,0BAAwB,UAAU,sBAAsB,CAAC,cAAc;AACrE,2BAAwB,UAAU;IAClC;AAEF,SAAO,wBAAwB;;CAGjC,eAAe,OAAO,GAAG,MAAuD;EAG9E,MAAMC,OAAY,KAAK;EACvB,MAAMC,kBACJ,OAAO,SAAS,YAAY,SAAS,SAAS,iBAAiB,QAAQ,mBAAmB;AAE5F,MAAI;AACF,OAAI,CAAC,iBAAiB;AACpB,yBAAqB,KAAK;AAC1B,qBAAiB,KAAK;;AAGxB,UAAO,MAAM,OAAO,OAAO,GAAG,KAAK;WAC5B,OAAO;AACd,SAAM,IAAIC,0CACR,mBAAmB,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,UAAU,MAAM,CAAC,IACzF,0BACA,SACA,6CACD;YACO;AACR,OAAI,CAAC,iBAAiB;AACpB,yBAAqB,MAAM;AAC3B,qBAAiB,OAAO,WAAW,CAAC;;;;;;;AAQ1C,4BAAgB;AAOd,MAAI,iBAAiB,QACnB;AAGF,mBAAiB,UAAU;AAE3B,GAAC,YAA2B;AAG1B,SAAM,OAAO,GAAG,WAAW,YAAY;AACrC,UAAM,eAAe;KACrB;AAMF,OAAI;AACF,UAAM,OAAO,uBAAuB;YAC7B,OAAO;AACd,WAAO,KAAK,+CAA+C,MAAM;;AAInE,OAAI,MAAM,OAAO,YAAY,EAAE;AAC7B,UAAM,eAAe;AAErB;;GAGF,MAAMC,aAAkB,IAAI,IAAI,OAAO,SAAS,KAAK;AAIrD,OAFE,cAAc,YAAY,OAAO,eAAgB,IAAI,yBAAyB,YAAY,cAAc,EAAE,CAG1G,KAAI;IACF,MAAMC,YAA6B,WAAW;IAC9C,MAAMC,OAAsB,UAAU,IAAI,OAAO;IACjD,MAAMC,qBAAoC,UAAU,IAAI,cAAc;IACtE,MAAMC,oBAAmC,eAAe,QACtD,4CAAmB,OAAO,OAAO,CAAC,eACnC;AAID,SAAK,QAAQC,6BAAS,2BAA2B,KAAK,CAAC,sBAAsB,CAAC,kBAC5E,OAAM,QAAQ;YAET,OAAO;AACd,UAAM,IAAIN,0CACR,mBAAmB,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,UAAU,MAAM,CAAC,IACzF,0BACA,SACA,6CACD;;MAGH;IACH,EAAE,CAAC;;;;;;AAON,4BAAgB;EACd,IAAIO;AAEJ,GAAC,YAA2B;AAC1B,OAAI;IACF,MAAMC,SAAkB,MAAM,OAAO,YAAY;AAEjD,sBAAkB,OAAO;AAEzB,QAAI,CAAC,OACH,YAAW,YAAY,YAAY;AAGjC,SAF2B,MAAM,OAAO,YAAY,EAErC;AACb,wBAAkB,KAAK;AACvB,oBAAc,SAAS;;OAExB,IAAK;YAIH,OAAO;AACd,sBAAkB,MAAM;;MAExB;AAEJ,eAAmB;AACjB,OAAI,SACF,eAAc,SAAS;;IAG1B,CAAC,OAAO,CAAC;AAEZ,4BAAgB;AACd,GAAC,YAA2B;AAC1B,OAAI;AAGF,yBAFwB,MAAM,OAAO,eAAe,CAExB;YACrB,OAAO;AACd,yBAAqB,MAAM;;MAE3B;IACH,CAAC,OAAO,CAAC;;;;AAKZ,4BAAgB;EACd,MAAM,0BAAgC;AAEpC,OAAI,kBACF;GAKF,MAAMP,aAAkB,IAAI,IAAI,OAAO,SAAS,KAAK;AACrD,OAAI,CAAC,kBAAkB,cAAc,YAAY,OAAO,eAAgB,CACtE;AAGF,oBAAiB,OAAO,WAAW,CAAC;;AAItC,qBAAmB;EAGnB,MAAMM,WAA2B,YAAY,mBAAmB,IAAI;AAEpE,eAAmB;AACjB,iBAAc,SAAS;;IAExB;EAAC;EAAQ;EAAe;EAAgB;EAAkB,CAAC;CAE9D,MAAM,iBAAiB,OAAO,YAAqD;AACjF,MAAI;AACF,wBAAqB,KAAK;AAC1B,oBAAiB,KAAK;AACtB,UAAO,MAAM,OAAO,eAAe,QAAQ;WACpC,OAAO;AACd,SAAM,IAAIP,0CACR,oCAAoC,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,UAAU,MAAM,CAAC,IAC1G,kCACA,SACA,sDACD;YACO;AACR,wBAAqB,MAAM;AAC3B,oBAAiB,OAAO,WAAW,CAAC;;;CAIxC,MAAM,uBAAuB,YAAwB;AACnD,UAAQ,QAAQ;AAChB,kBAAgB,UAA8B;GAC5C,wEAA+C,QAAQ;GACvD,SAAS;GACV,EAAE;;CAGL,MAAMS,2CACJ,YAA8B,OAAO,mBAAmB,EACxD,CAAC,OAAO,CACT;CAED,MAAMC,oCAAgD,YAA6B,OAAO,YAAY,EAAE,CAAC,OAAO,CAAC;CAEjH,MAAMC,wCACJ,YAA6B,OAAO,gBAAgB,EACpD,CAAC,OAAO,CACT;CAED,MAAMC,2CAA4E,YAAY;EAC5F,MAAMC,iBACJ,kBAAkB,WAAY,MAAM,OAAO,mBAAmB;AAChE,MAAI,eACF,mBAAkB,UAAU;AAE9B,SAAO;IACN,CAAC,OAAO,CAAC;CAEZ,MAAMC,iCACJ,OAAO,GAAG,SAA8B,OAAO,QAAQ,GAAG,KAAK,EAC/D,CAAC,OAAO,CACT;CAED,MAAMC,oCACJ,OAAO,GAAG,SAA8B,OAAO,WAAW,GAAG,KAAK,EAClE,CAAC,OAAO,CACT;CAED,MAAMC,uCACJ,OAAO,mBAAsC,OAAO,cAAc,eAAe,EACjF,CAAC,OAAO,CACT;CAED,MAAMC,iCACJ,OAAO,GAAG,SAA8B,OAAO,QAAQ,GAAG,KAAK,EAC/D,CAAC,OAAO,CACT;CAED,MAAMC,iCACJ,OAAO,YACJ,MAAM,OAAO,QAAQ,QAAQ,EAChC,CAAC,OAAO,CACT;CAED,MAAMC,gCACJ,OAAO,GAAG,SAA8B,OAAO,OAAO,GAAG,KAAK,EAC9D,CAAC,OAAO,CACT;CAED,MAAMC,sCACJ,OAAO,GAAG,SAA8B,OAAO,aAAa,GAAG,KAAK,EACpE,CAAC,OAAO,CACT;CAED,MAAMC,sCACJ,OAAO,iBAAoC;EACzC,MAAMC,SAAc,MAAM,OAAO,aAAa,aAAa;EAI3D,MAAMC,sBAA4C,MAAM,OAAO,kBAAkB;AACjF,YAAU,oBAAoB;AAC9B,aAAW,oBAAoB,WAAW,GAAG;AAC7C,eAAa,MAAM,OAAO,sBAAsB,CAAC;AAEjD,SAAO;IAET,CAAC,OAAO,CACT;CAED,MAAMC,kCACG;EACL,gBAAgB,OAAO;EACvB,eAAe,OAAO;EACtB;EACA,WAAW,OAAO;EAClB,QAAQ,OAAO;EACf;EACA;EACA,WAAW,EACT,WACD;EACD;EACA;EACA;EACA;EACA;EACA,MAAM;GACJ,SAAS,aAAa;GACtB;GACA;GACD;EACD;EACA;EACA,eAAe;EACf,WAAW;EACX,YAAY;EACZ;EACA,oBAAoB,QAAQ;EAC5B;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA,iDAAwB,OAAO,OAAO;EACvC,GACD;EACE;EACA,QAAQ;EACR,OAAO;EACP,OAAO;EACP,OAAO;EACP,OAAO;EACP;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA,aAAa;EACb;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACD,CACF;AAED,QACE,2CAACC,iCAAiB;EAAgB;YAChC,2CAACC;GAAa,aAAa,aAAa;GAAM,iDAAwB,OAAO,OAAO;aAClF,2CAACC;IAAiB,SAAS,aAAa,oBAAoB;IAAkB;cAC5E,2CAACC;KACC,OAAO;MACL,GAAG,aAAa,OAAO;MACvB,WAAW,aAAa,OAAO;MAChC;eAED,2CAACC,0CACC,2CAACC;MACC,SAAS;MACG;MACZ,iBAAiB;gBAEjB,2CAACC;OAA0B,WAAY,YAAY,YAAY,aAAa,EAAE;OAC3E;QACyB;OACf,GACF;MACD;KACC;IACN;GACW;;AAIhC,gCAAe"}
+{"version":3,"file":"ThunderIDProvider.cjs","names":["logger: ReturnType<typeof createPackageComponentLogger>","ThunderIDProvider: FC<PropsWithChildren<ThunderIDProviderProps>>","reRenderCheckRef: RefObject<boolean>","client: ThunderIDReactClient","ThunderIDReactClient","invalidator: ResourceInvalidator","createResourceInvalidator","storageManagerRef: any","useBrowserUrl","pendingSessionUpdateRef: RefObject<Promise<void> | null>","resolvedBaseUrl: string","decodedToken: IdToken","shouldFetchProfile: boolean","claims: User","currentSignInStatus: boolean","getUsersMe","getUsersMeMeta","arg1: any","isV2FlowRequest: boolean","ThunderIDRuntimeError","currentUrl: URL","urlParams: URLSearchParams","code: string | null","executionIdFromUrl: string | null","storedExecutionId: string | null","SPAUtils","interval: NodeJS.Timeout","status: boolean","getDecodedIdToken: () => Promise<IdToken>","getIdToken: () => Promise<string>","getAccessToken: () => Promise<string>","getStorageManager: ThunderIDContextProps['getStorageManager']","storageManager: Awaited<ReturnType<ThunderIDContextProps['getStorageManager']>>","request: (...args: any[]) => Promise<any>","requestAll: (...args: any[]) => Promise<any>","exchangeToken: (exchangeConfig: any) => Promise<any>","signOut: (...args: any[]) => Promise<any>","recover: ThunderIDContextProps['recover']","signUp: (...args: any[]) => Promise<any>","clearSession: (...args: any[]) => Promise<any>","reInitialize: (reInitConfig: any) => Promise<any>","result: any","reinitializedConfig: ThunderIDReactConfig","value: any","ThunderIDContext","I18nProvider","FlowMetaProvider","ThemeProvider","FlowProvider","UserProvider","ComponentRendererProvider"],"sources":["../../../../src/contexts/ThunderID/ThunderIDProvider.tsx"],"sourcesContent":["// Copyright 2025-2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\nimport {\n  ThunderIDRuntimeError,\n  generateFlattenedUserProfile,\n  OIDCDiscoveryApiResponse,\n  SignInOptions,\n  User,\n  UserProfile,\n  IdToken,\n  extractUserClaimsFromIdToken,\n  EmbeddedSignInFlowResponse,\n  EmbeddedRecoveryFlowRequest,\n  EmbeddedRecoveryFlowResponse,\n  createPackageComponentLogger,\n  getVendorPrefix,\n  resolveResourceEndpoint,\n  AttributeSchema,\n  SPAUtils,\n} from '@thunderid/browser';\nimport {FC, RefObject, PropsWithChildren, ReactElement, useEffect, useMemo, useRef, useState, useCallback} from 'react';\nimport ThunderIDContext, {ThunderIDContextProps} from './ThunderIDContext';\nimport useBrowserUrl from '../../hooks/useBrowserUrl';\nimport {ThunderIDReactConfig} from '../../models/config';\nimport {configureEmotionNonce} from '../../styles/emotion';\nimport ThunderIDReactClient from '../../ThunderIDReactClient';\nimport createResourceInvalidator, {ResourceInvalidator} from '../../utils/createResourceInvalidator';\nimport ComponentRendererProvider from '../ComponentRenderer/ComponentRendererProvider';\nimport FlowProvider from '../Flow/FlowProvider';\nimport FlowMetaProvider from '../FlowMeta/FlowMetaProvider';\nimport I18nProvider from '../I18n/I18nProvider';\nimport ThemeProvider from '../Theme/ThemeProvider';\nimport UserProvider from '../User/UserProvider';\nimport getUsersMe from '../../api/getUsersMe';\nimport getUsersMeMeta from '../../api/getUsersMeMeta';\n\nconst logger: ReturnType<typeof createPackageComponentLogger> = createPackageComponentLogger(\n  '@thunderid/react',\n  'ThunderIDProvider',\n);\n\n/**\n * Props interface of {@link ThunderIDProvider}\n */\nexport type ThunderIDProviderProps = ThunderIDReactConfig;\n\nconst ThunderIDProvider: FC<PropsWithChildren<ThunderIDProviderProps>> = ({\n  afterSignInUrl,\n  afterSignOutUrl,\n  baseUrl: initialBaseUrl,\n  clientId,\n  children,\n  extensions,\n  scopes,\n  preferences,\n  signInUrl,\n  signUpUrl,\n  organizationHandle,\n  applicationId,\n  signInOptions,\n  tokenRequest,\n  instanceId = 0,\n  organizationChain,\n  cspNonce,\n  vendor,\n  namespace,\n  http: httpOptions,\n  ...rest\n}: PropsWithChildren<ThunderIDProviderProps>): ReactElement => {\n  // Must run synchronously here, in the render body, before any descendant's css()/cx()/\n  // keyframes() calls execute during this same render pass - see the doc comment on\n  // `configureEmotionNonce` for why a `useEffect` would be too late.\n  configureEmotionNonce(cspNonce, vendor);\n\n  const reRenderCheckRef: RefObject<boolean> = useRef(false);\n  const client: ThunderIDReactClient = useMemo(() => new ThunderIDReactClient(instanceId), [instanceId]);\n  const invalidator: ResourceInvalidator = useMemo(() => createResourceInvalidator(), []);\n  const storageManagerRef: any = useRef<any>(null);\n  const {hasAuthParams, hasCalledForThisInstance} = useBrowserUrl();\n  const [user, setUser] = useState<User | null>(null);\n  const [isSignedInSync, setIsSignedInSync] = useState<boolean>(false);\n  const [isInitializedSync, setIsInitializedSync] = useState<boolean>(false);\n  const [isLoadingSync, setIsLoadingSync] = useState<boolean>(true);\n\n  const [userProfile, setUserProfile] = useState<UserProfile | null>(null);\n  const [userSchema, setUserSchema] = useState<Record<string, AttributeSchema> | null>(null);\n  const [baseUrl, setBaseUrl] = useState<string>(initialBaseUrl ?? '');\n  const [config, setConfig] = useState<ThunderIDReactConfig>({\n    afterSignInUrl: afterSignInUrl ?? window.location.origin,\n    afterSignOutUrl: afterSignOutUrl ?? window.location.origin,\n    applicationId,\n    baseUrl,\n    clientId,\n    organizationChain,\n    organizationHandle,\n    scopes,\n    signInOptions,\n    tokenRequest,\n    signInUrl,\n    signUpUrl,\n    vendor,\n    ...rest,\n  });\n\n  const [isUpdatingSession, setIsUpdatingSession] = useState<boolean>(false);\n  const [wellKnown, setWellKnown] = useState<OIDCDiscoveryApiResponse | null>(null);\n\n  // Holds the in-flight `updateSession()` promise so concurrent callers coalesce onto a single\n  // `/users/me` request instead of issuing one each.\n  const pendingSessionUpdateRef: RefObject<Promise<void> | null> = useRef<Promise<void> | null>(null);\n\n  useEffect(() => {\n    setBaseUrl(initialBaseUrl ?? '');\n  }, [initialBaseUrl]);\n\n  useEffect(() => {\n    (async (): Promise<void> => {\n      await client.initialize(config);\n      const initializedConfig: ThunderIDReactConfig = await client.getConfiguration();\n      setConfig(initializedConfig);\n      setWellKnown(await client.getDiscoveryResponse());\n    })();\n  }, []);\n\n  async function performSessionUpdate(): Promise<void> {\n    try {\n      // Set flag to prevent loading state tracking from interfering\n      setIsUpdatingSession(true);\n      setIsLoadingSync(true);\n      let resolvedBaseUrl: string = baseUrl;\n\n      const decodedToken: IdToken = await client.getDecodedIdToken();\n\n      // If there's a `user_org` claim in the ID token,\n      // Treat this login as a organization login.\n      if (decodedToken?.['user_org']) {\n        resolvedBaseUrl = `${(await client.getConfiguration()).baseUrl}/o`;\n        setBaseUrl(resolvedBaseUrl);\n      }\n\n      const shouldFetchProfile: boolean = preferences?.user?.fetchUserProfile !== false;\n      const claims: User = extractUserClaimsFromIdToken(decodedToken) as User;\n      let profileData = claims;\n      const currentSignInStatus: boolean = await client.isSignedIn();\n\n      if (currentSignInStatus && shouldFetchProfile) {\n        try {\n          const fetchedProfile = await getUsersMe({\n            baseUrl: resolvedBaseUrl,\n            url: resolveResourceEndpoint('usersMe', config),\n            instanceId,\n          });\n          profileData = {...claims, ...fetchedProfile};\n        } catch (err) {\n          logger.warn('Failed to fetch user profile from /users/me:', err);\n        }\n\n        try {\n          const metaRes = await getUsersMeMeta({\n            baseUrl: resolvedBaseUrl,\n            url: resolveResourceEndpoint('usersMeMeta', config),\n            instanceId,\n          });\n          if (metaRes?.schema) {\n            setUserSchema(metaRes.schema);\n          } else {\n            setUserSchema(null);\n          }\n        } catch (err) {\n          setUserSchema(null);\n          logger.warn('Failed to fetch user schema metadata from /users/me/meta:', err);\n        }\n      } else {\n        setUserSchema(null);\n      }\n\n      setUser(profileData);\n      setUserProfile({\n        flattenedProfile: generateFlattenedUserProfile(profileData, []),\n        profile: profileData,\n      });\n\n      // CRITICAL: Update sign-in status BEFORE setting loading to false\n      // This prevents the race condition where ProtectedRoute sees isLoading=false but isSignedIn=false\n      setIsSignedInSync(currentSignInStatus);\n    } catch (error) {\n      // TODO: Add an error log.\n    } finally {\n      // Clear the flag and set final loading state\n      setIsUpdatingSession(false);\n      setIsLoadingSync(client.isLoading());\n    }\n  }\n\n  /**\n   * Single-flight wrapper around {@link performSessionUpdate}.\n   *\n   * Concurrent callers share the in-flight request instead of each issuing their own `/users/me`.\n   * This is not a cache: once the request settles the ref is cleared, so a later caller (e.g.\n   * revalidation after a profile update) fetches again.\n   */\n  async function updateSession(): Promise<void> {\n    if (pendingSessionUpdateRef.current) {\n      return pendingSessionUpdateRef.current;\n    }\n\n    pendingSessionUpdateRef.current = performSessionUpdate().finally(() => {\n      pendingSessionUpdateRef.current = null;\n    });\n\n    return pendingSessionUpdateRef.current;\n  }\n\n  async function signIn(...args: any): Promise<User | EmbeddedSignInFlowResponse> {\n    // Check if this is a V2 embedded flow request BEFORE calling signIn\n    // This allows us to skip session checks entirely for V2 flows\n    const arg1: any = args[0];\n    const isV2FlowRequest: boolean =\n      typeof arg1 === 'object' && arg1 !== null && ('executionId' in arg1 || 'applicationId' in arg1);\n\n    try {\n      if (!isV2FlowRequest) {\n        setIsUpdatingSession(true);\n        setIsLoadingSync(true);\n      }\n\n      return await client.signIn(...args);\n    } catch (error) {\n      throw new ThunderIDRuntimeError(\n        `Sign in failed: ${error instanceof Error ? error.message : String(JSON.stringify(error))}`,\n        'thunderid-signIn-Error',\n        'react',\n        'An error occurred while trying to sign in.',\n      );\n    } finally {\n      if (!isV2FlowRequest) {\n        setIsUpdatingSession(false);\n        setIsLoadingSync(client.isLoading());\n      }\n    }\n  }\n\n  /**\n   * Try signing in when the component is mounted.\n   */\n  useEffect(() => {\n    // React 18.x Strict.Mode has a new check for `Ensuring reusable state` to facilitate an upcoming react feature.\n    // https://reactjs.org/docs/strict-mode.html#ensuring-reusable-state\n    // This will remount all the useEffects to ensure that there are no unexpected side effects.\n    // When react remounts the signIn hook of the AuthProvider, it will cause a race condition. Hence, we have to\n    // prevent the re-render of this hook as suggested in the following discussion.\n    // https://github.com/reactwg/react-18/discussions/18#discussioncomment-795623\n    if (reRenderCheckRef.current) {\n      return;\n    }\n\n    reRenderCheckRef.current = true;\n\n    (async (): Promise<void> => {\n      // Sync session state whenever sign-in completes (both redirect and embedded V2 flows).\n      // Pass the user returned by the SDK's sign-in flow so users/me result is not discarded.\n      await client.on('sign-in', async () => {\n        await updateSession();\n      });\n\n      // A session that ends elsewhere, such as a sign-out in another app, signs this app out too.\n      await client.on('sign-out', () => {\n        setUser(null);\n        setUserProfile(null);\n        setIsSignedInSync(false);\n      });\n\n      // Start auto-refresh with a soft failure. This also covers the case where the access token\n      // expired while the refresh token is still valid — startAutoRefreshToken() calls\n      // refreshAccessToken() immediately when timeUntilRefresh <= 0 — so the sign-in check below\n      // sees the refreshed state.\n      try {\n        await client.startAutoRefreshToken();\n      } catch (error) {\n        logger.warn('Failed to schedule automatic token refresh.', error);\n      }\n\n      // User is already authenticated. Restore the session and skip the sign-in path.\n      if (await client.isSignedIn()) {\n        await updateSession();\n\n        return;\n      }\n\n      const currentUrl: URL = new URL(window.location.href);\n      const hasAuthParamsResult: boolean =\n        hasAuthParams(currentUrl, config.afterSignInUrl!) && hasCalledForThisInstance(currentUrl, instanceId ?? 0);\n\n      if (hasAuthParamsResult) {\n        try {\n          const urlParams: URLSearchParams = currentUrl.searchParams;\n          const code: string | null = urlParams.get('code');\n          const executionIdFromUrl: string | null = urlParams.get('executionId');\n          const storedExecutionId: string | null = sessionStorage.getItem(\n            `${getVendorPrefix(config.vendor)}_execution_id`,\n          );\n\n          // A silent sign-in response is handled even without a code: an error such as\n          // login_required must still be relayed from the iframe to the waiting parent.\n          if ((code || SPAUtils.isSilentStatePresentInURL()) && !executionIdFromUrl && !storedExecutionId) {\n            await signIn();\n          }\n        } catch (error) {\n          throw new ThunderIDRuntimeError(\n            `Sign in failed: ${error instanceof Error ? error.message : String(JSON.stringify(error))}`,\n            'thunderid-signIn-Error',\n            'react',\n            'An error occurred while trying to sign in.',\n          );\n        }\n      }\n    })();\n  }, []);\n\n  /**\n   * Check if the user is signed in and update the state accordingly.\n   * This will also set an interval to check for the sign-in status every second\n   * until the user is signed in.\n   */\n  useEffect(() => {\n    let interval: NodeJS.Timeout;\n\n    (async (): Promise<void> => {\n      try {\n        const status: boolean = await client.isSignedIn();\n\n        setIsSignedInSync(status);\n\n        if (!status) {\n          interval = setInterval(async () => {\n            const newStatus: boolean = await client.isSignedIn();\n\n            if (newStatus) {\n              setIsSignedInSync(true);\n              clearInterval(interval);\n            }\n          }, 1000);\n        } else {\n          // TODO: Add a debug log to indicate that the user is already signed in.\n        }\n      } catch (error) {\n        setIsSignedInSync(false);\n      }\n    })();\n\n    return (): void => {\n      if (interval) {\n        clearInterval(interval);\n      }\n    };\n  }, [client]);\n\n  useEffect(() => {\n    (async (): Promise<void> => {\n      try {\n        const status: boolean = await client.isInitialized();\n\n        setIsInitializedSync(status);\n      } catch (error) {\n        setIsInitializedSync(false);\n      }\n    })();\n  }, [client]);\n\n  /**\n   * Track loading state changes from the ThunderID client\n   */\n  useEffect(() => {\n    const checkLoadingState = (): void => {\n      // Don't override loading state during critical session updates\n      if (isUpdatingSession) {\n        return;\n      }\n\n      // Don't set loading=false while auth params are in the URL and user isn't signed in yet.\n      // This prevents ProtectedRoute from redirecting before the sign-in effect processes the auth code.\n      const currentUrl: URL = new URL(window.location.href);\n      if (!isSignedInSync && hasAuthParams(currentUrl, config.afterSignInUrl!)) {\n        return;\n      }\n\n      setIsLoadingSync(client.isLoading());\n    };\n\n    // Initial check\n    checkLoadingState();\n\n    // Set up an interval to check for loading state changes\n    const interval: NodeJS.Timeout = setInterval(checkLoadingState, 100);\n\n    return (): void => {\n      clearInterval(interval);\n    };\n  }, [client, isLoadingSync, isSignedInSync, isUpdatingSession]);\n\n  const signInSilently = async (options?: SignInOptions): Promise<User | boolean> => {\n    try {\n      setIsUpdatingSession(true);\n      setIsLoadingSync(true);\n      return await client.signInSilently(options);\n    } catch (error) {\n      throw new ThunderIDRuntimeError(\n        `Error while signing in silently: ${error instanceof Error ? error.message : String(JSON.stringify(error))}`,\n        'thunderid-signInSilently-Error',\n        'react',\n        'An error occurred while trying to sign in silently.',\n      );\n    } finally {\n      setIsUpdatingSession(false);\n      setIsLoadingSync(client.isLoading());\n    }\n  };\n\n  const handleProfileUpdate = (payload: User): void => {\n    setUser(payload);\n    setUserProfile((prev: UserProfile | null) => ({\n      flattenedProfile: generateFlattenedUserProfile(payload),\n      profile: payload,\n    }));\n  };\n\n  const getDecodedIdToken: () => Promise<IdToken> = useCallback(\n    async (): Promise<IdToken> => client.getDecodedIdToken(),\n    [client],\n  );\n\n  const getIdToken: () => Promise<string> = useCallback(async (): Promise<string> => client.getIdToken(), [client]);\n\n  const getAccessToken: () => Promise<string> = useCallback(\n    async (): Promise<string> => client.getAccessToken(),\n    [client],\n  );\n\n  const getStorageManager: ThunderIDContextProps['getStorageManager'] = useCallback(async () => {\n    const storageManager: Awaited<ReturnType<ThunderIDContextProps['getStorageManager']>> =\n      storageManagerRef.current ?? (await client.getStorageManager());\n    if (storageManager) {\n      storageManagerRef.current = storageManager;\n    }\n    return storageManager;\n  }, [client]);\n\n  const request: (...args: any[]) => Promise<any> = useCallback(\n    async (...args: any[]): Promise<any> => client.request(...args),\n    [client],\n  );\n\n  const requestAll: (...args: any[]) => Promise<any> = useCallback(\n    async (...args: any[]): Promise<any> => client.requestAll(...args),\n    [client],\n  );\n\n  const exchangeToken: (exchangeConfig: any) => Promise<any> = useCallback(\n    async (exchangeConfig: any): Promise<any> => client.exchangeToken(exchangeConfig),\n    [client],\n  );\n\n  const signOut: (...args: any[]) => Promise<any> = useCallback(\n    async (...args: any[]): Promise<any> => client.signOut(...args),\n    [client],\n  );\n\n  const recover: ThunderIDContextProps['recover'] = useCallback(\n    async (payload?: EmbeddedRecoveryFlowRequest): Promise<EmbeddedRecoveryFlowResponse> =>\n      (await client.recover(payload)) as EmbeddedRecoveryFlowResponse,\n    [client],\n  );\n\n  const signUp: (...args: any[]) => Promise<any> = useCallback(\n    async (...args: any[]): Promise<any> => client.signUp(...args),\n    [client],\n  );\n\n  const clearSession: (...args: any[]) => Promise<any> = useCallback(\n    async (...args: any[]): Promise<any> => client.clearSession(...args),\n    [client],\n  );\n\n  const reInitialize: (reInitConfig: any) => Promise<any> = useCallback(\n    async (reInitConfig: any): Promise<any> => {\n      const result: any = await client.reInitialize(reInitConfig);\n\n      // Refresh React state from the reinitialized client so the context (config.endpoints,\n      // baseUrl, discovery) reflects the new configuration instead of the pre-reinitialization state.\n      const reinitializedConfig: ThunderIDReactConfig = await client.getConfiguration();\n      setConfig(reinitializedConfig);\n      setBaseUrl(reinitializedConfig.baseUrl ?? '');\n      setWellKnown(await client.getDiscoveryResponse());\n\n      return result;\n    },\n    [client],\n  );\n\n  const value: any = useMemo(\n    () => ({\n      afterSignInUrl: config.afterSignInUrl,\n      applicationId: config.applicationId,\n      baseUrl,\n      endpoints: config.endpoints,\n      scopes: config.scopes,\n      clearSession,\n      clientId,\n      discovery: {\n        wellKnown,\n      },\n      exchangeToken,\n      getAccessToken,\n      getDecodedIdToken,\n      getIdToken,\n      getStorageManager,\n      http: {\n        fetcher: httpOptions?.fetcher,\n        request,\n        requestAll,\n      },\n      instanceId,\n      invalidator,\n      isInitialized: isInitializedSync,\n      isLoading: isLoadingSync,\n      isSignedIn: isSignedInSync,\n      organizationChain,\n      organizationHandle: config?.organizationHandle,\n      preferences,\n      reInitialize,\n      recover,\n      signIn,\n      signInOptions,\n      tokenRequest,\n      signInSilently,\n      signInUrl,\n      signOut,\n      signUp,\n      signUpUrl,\n      user,\n      userSchema,\n      vendor: getVendorPrefix(config.vendor),\n    }),\n    [\n      applicationId,\n      config?.organizationHandle,\n      config.vendor,\n      config.afterSignInUrl,\n      config.endpoints,\n      config.scopes,\n      signInUrl,\n      signUpUrl,\n      baseUrl,\n      clientId,\n      wellKnown,\n      isInitializedSync,\n      isLoadingSync,\n      isSignedInSync,\n      signIn,\n      signInSilently,\n      user,\n      userSchema,\n      client,\n      signInOptions,\n      tokenRequest,\n      getDecodedIdToken,\n      clearSession,\n      exchangeToken,\n      httpOptions?.fetcher,\n      getAccessToken,\n      getStorageManager,\n      instanceId,\n      invalidator,\n      organizationChain,\n      preferences,\n      recover,\n      reInitialize,\n      request,\n      requestAll,\n      signOut,\n      signUp,\n    ],\n  );\n\n  return (\n    <ThunderIDContext.Provider value={value}>\n      <I18nProvider preferences={preferences?.i18n} vendor={getVendorPrefix(config.vendor)}>\n        <FlowMetaProvider enabled={preferences?.resolveFromMeta !== false} namespace={namespace}>\n          <ThemeProvider\n            theme={{\n              ...preferences?.theme?.overrides,\n              direction: preferences?.theme?.direction,\n            }}\n          >\n            <FlowProvider>\n              <UserProvider\n                profile={userProfile as UserProfile}\n                userSchema={userSchema}\n                onUpdateProfile={handleProfileUpdate}\n              >\n                <ComponentRendererProvider renderers={(extensions?.components?.renderers ?? {}) as any}>\n                  {children}\n                </ComponentRendererProvider>\n              </UserProvider>\n            </FlowProvider>\n          </ThemeProvider>\n        </FlowMetaProvider>\n      </I18nProvider>\n    </ThunderIDContext.Provider>\n  );\n};\n\nexport default ThunderIDProvider;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;AAqCA,MAAMA,+DACJ,oBACA,oBACD;AAOD,MAAMC,qBAAoE,EACxE,gBACA,iBACA,SAAS,gBACT,UACA,UACA,YACA,QACA,aACA,WACA,WACA,oBACA,eACA,eACA,cACA,aAAa,GACb,mBACA,UACA,QACA,WACA,MAAM,YACN,GAAG,WAC0D;AAI7D,uCAAsB,UAAU,OAAO;CAEvC,MAAMC,qCAA8C,MAAM;CAC1D,MAAMC,kCAA6C,IAAIC,qCAAqB,WAAW,EAAE,CAAC,WAAW,CAAC;CACtG,MAAMC,uCAAiDC,2CAA2B,EAAE,EAAE,CAAC;CACvF,MAAMC,sCAAqC,KAAK;CAChD,MAAM,EAAC,eAAe,6BAA4BC,+BAAe;CACjE,MAAM,CAAC,MAAM,+BAAiC,KAAK;CACnD,MAAM,CAAC,gBAAgB,yCAAuC,MAAM;CACpE,MAAM,CAAC,mBAAmB,4CAA0C,MAAM;CAC1E,MAAM,CAAC,eAAe,wCAAsC,KAAK;CAEjE,MAAM,CAAC,aAAa,sCAA+C,KAAK;CACxE,MAAM,CAAC,YAAY,qCAAkE,KAAK;CAC1F,MAAM,CAAC,SAAS,kCAA+B,kBAAkB,GAAG;CACpE,MAAM,CAAC,QAAQ,iCAA4C;EACzD,gBAAgB,kBAAkB,OAAO,SAAS;EAClD,iBAAiB,mBAAmB,OAAO,SAAS;EACpD;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA,GAAG;EACJ,CAAC;CAEF,MAAM,CAAC,mBAAmB,4CAA0C,MAAM;CAC1E,MAAM,CAAC,WAAW,oCAA0D,KAAK;CAIjF,MAAMC,4CAAwF,KAAK;AAEnG,4BAAgB;AACd,aAAW,kBAAkB,GAAG;IAC/B,CAAC,eAAe,CAAC;AAEpB,4BAAgB;AACd,GAAC,YAA2B;AAC1B,SAAM,OAAO,WAAW,OAAO;AAE/B,aADgD,MAAM,OAAO,kBAAkB,CACnD;AAC5B,gBAAa,MAAM,OAAO,sBAAsB,CAAC;MAC/C;IACH,EAAE,CAAC;CAEN,eAAe,uBAAsC;AACnD,MAAI;AAEF,wBAAqB,KAAK;AAC1B,oBAAiB,KAAK;GACtB,IAAIC,kBAA0B;GAE9B,MAAMC,eAAwB,MAAM,OAAO,mBAAmB;AAI9D,OAAI,eAAe,aAAa;AAC9B,sBAAkB,IAAI,MAAM,OAAO,kBAAkB,EAAE,QAAQ;AAC/D,eAAW,gBAAgB;;GAG7B,MAAMC,qBAA8B,aAAa,MAAM,qBAAqB;GAC5E,MAAMC,+DAA4C,aAAa;GAC/D,IAAI,cAAc;GAClB,MAAMC,sBAA+B,MAAM,OAAO,YAAY;AAE9D,OAAI,uBAAuB,oBAAoB;AAC7C,QAAI;KACF,MAAM,iBAAiB,MAAMC,2BAAW;MACtC,SAAS;MACT,sDAA6B,WAAW,OAAO;MAC/C;MACD,CAAC;AACF,mBAAc;MAAC,GAAG;MAAQ,GAAG;MAAe;aACrC,KAAK;AACZ,YAAO,KAAK,gDAAgD,IAAI;;AAGlE,QAAI;KACF,MAAM,UAAU,MAAMC,+BAAe;MACnC,SAAS;MACT,sDAA6B,eAAe,OAAO;MACnD;MACD,CAAC;AACF,SAAI,SAAS,OACX,eAAc,QAAQ,OAAO;SAE7B,eAAc,KAAK;aAEd,KAAK;AACZ,mBAAc,KAAK;AACnB,YAAO,KAAK,6DAA6D,IAAI;;SAG/E,eAAc,KAAK;AAGrB,WAAQ,YAAY;AACpB,kBAAe;IACb,wEAA+C,aAAa,EAAE,CAAC;IAC/D,SAAS;IACV,CAAC;AAIF,qBAAkB,oBAAoB;WAC/B,OAAO,WAEN;AAER,wBAAqB,MAAM;AAC3B,oBAAiB,OAAO,WAAW,CAAC;;;;;;;;;;CAWxC,eAAe,gBAA+B;AAC5C,MAAI,wBAAwB,QAC1B,QAAO,wBAAwB;AAGjC,0BAAwB,UAAU,sBAAsB,CAAC,cAAc;AACrE,2BAAwB,UAAU;IAClC;AAEF,SAAO,wBAAwB;;CAGjC,eAAe,OAAO,GAAG,MAAuD;EAG9E,MAAMC,OAAY,KAAK;EACvB,MAAMC,kBACJ,OAAO,SAAS,YAAY,SAAS,SAAS,iBAAiB,QAAQ,mBAAmB;AAE5F,MAAI;AACF,OAAI,CAAC,iBAAiB;AACpB,yBAAqB,KAAK;AAC1B,qBAAiB,KAAK;;AAGxB,UAAO,MAAM,OAAO,OAAO,GAAG,KAAK;WAC5B,OAAO;AACd,SAAM,IAAIC,0CACR,mBAAmB,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,UAAU,MAAM,CAAC,IACzF,0BACA,SACA,6CACD;YACO;AACR,OAAI,CAAC,iBAAiB;AACpB,yBAAqB,MAAM;AAC3B,qBAAiB,OAAO,WAAW,CAAC;;;;;;;AAQ1C,4BAAgB;AAOd,MAAI,iBAAiB,QACnB;AAGF,mBAAiB,UAAU;AAE3B,GAAC,YAA2B;AAG1B,SAAM,OAAO,GAAG,WAAW,YAAY;AACrC,UAAM,eAAe;KACrB;AAGF,SAAM,OAAO,GAAG,kBAAkB;AAChC,YAAQ,KAAK;AACb,mBAAe,KAAK;AACpB,sBAAkB,MAAM;KACxB;AAMF,OAAI;AACF,UAAM,OAAO,uBAAuB;YAC7B,OAAO;AACd,WAAO,KAAK,+CAA+C,MAAM;;AAInE,OAAI,MAAM,OAAO,YAAY,EAAE;AAC7B,UAAM,eAAe;AAErB;;GAGF,MAAMC,aAAkB,IAAI,IAAI,OAAO,SAAS,KAAK;AAIrD,OAFE,cAAc,YAAY,OAAO,eAAgB,IAAI,yBAAyB,YAAY,cAAc,EAAE,CAG1G,KAAI;IACF,MAAMC,YAA6B,WAAW;IAC9C,MAAMC,OAAsB,UAAU,IAAI,OAAO;IACjD,MAAMC,qBAAoC,UAAU,IAAI,cAAc;IACtE,MAAMC,oBAAmC,eAAe,QACtD,4CAAmB,OAAO,OAAO,CAAC,eACnC;AAID,SAAK,QAAQC,6BAAS,2BAA2B,KAAK,CAAC,sBAAsB,CAAC,kBAC5E,OAAM,QAAQ;YAET,OAAO;AACd,UAAM,IAAIN,0CACR,mBAAmB,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,UAAU,MAAM,CAAC,IACzF,0BACA,SACA,6CACD;;MAGH;IACH,EAAE,CAAC;;;;;;AAON,4BAAgB;EACd,IAAIO;AAEJ,GAAC,YAA2B;AAC1B,OAAI;IACF,MAAMC,SAAkB,MAAM,OAAO,YAAY;AAEjD,sBAAkB,OAAO;AAEzB,QAAI,CAAC,OACH,YAAW,YAAY,YAAY;AAGjC,SAF2B,MAAM,OAAO,YAAY,EAErC;AACb,wBAAkB,KAAK;AACvB,oBAAc,SAAS;;OAExB,IAAK;YAIH,OAAO;AACd,sBAAkB,MAAM;;MAExB;AAEJ,eAAmB;AACjB,OAAI,SACF,eAAc,SAAS;;IAG1B,CAAC,OAAO,CAAC;AAEZ,4BAAgB;AACd,GAAC,YAA2B;AAC1B,OAAI;AAGF,yBAFwB,MAAM,OAAO,eAAe,CAExB;YACrB,OAAO;AACd,yBAAqB,MAAM;;MAE3B;IACH,CAAC,OAAO,CAAC;;;;AAKZ,4BAAgB;EACd,MAAM,0BAAgC;AAEpC,OAAI,kBACF;GAKF,MAAMP,aAAkB,IAAI,IAAI,OAAO,SAAS,KAAK;AACrD,OAAI,CAAC,kBAAkB,cAAc,YAAY,OAAO,eAAgB,CACtE;AAGF,oBAAiB,OAAO,WAAW,CAAC;;AAItC,qBAAmB;EAGnB,MAAMM,WAA2B,YAAY,mBAAmB,IAAI;AAEpE,eAAmB;AACjB,iBAAc,SAAS;;IAExB;EAAC;EAAQ;EAAe;EAAgB;EAAkB,CAAC;CAE9D,MAAM,iBAAiB,OAAO,YAAqD;AACjF,MAAI;AACF,wBAAqB,KAAK;AAC1B,oBAAiB,KAAK;AACtB,UAAO,MAAM,OAAO,eAAe,QAAQ;WACpC,OAAO;AACd,SAAM,IAAIP,0CACR,oCAAoC,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,UAAU,MAAM,CAAC,IAC1G,kCACA,SACA,sDACD;YACO;AACR,wBAAqB,MAAM;AAC3B,oBAAiB,OAAO,WAAW,CAAC;;;CAIxC,MAAM,uBAAuB,YAAwB;AACnD,UAAQ,QAAQ;AAChB,kBAAgB,UAA8B;GAC5C,wEAA+C,QAAQ;GACvD,SAAS;GACV,EAAE;;CAGL,MAAMS,2CACJ,YAA8B,OAAO,mBAAmB,EACxD,CAAC,OAAO,CACT;CAED,MAAMC,oCAAgD,YAA6B,OAAO,YAAY,EAAE,CAAC,OAAO,CAAC;CAEjH,MAAMC,wCACJ,YAA6B,OAAO,gBAAgB,EACpD,CAAC,OAAO,CACT;CAED,MAAMC,2CAA4E,YAAY;EAC5F,MAAMC,iBACJ,kBAAkB,WAAY,MAAM,OAAO,mBAAmB;AAChE,MAAI,eACF,mBAAkB,UAAU;AAE9B,SAAO;IACN,CAAC,OAAO,CAAC;CAEZ,MAAMC,iCACJ,OAAO,GAAG,SAA8B,OAAO,QAAQ,GAAG,KAAK,EAC/D,CAAC,OAAO,CACT;CAED,MAAMC,oCACJ,OAAO,GAAG,SAA8B,OAAO,WAAW,GAAG,KAAK,EAClE,CAAC,OAAO,CACT;CAED,MAAMC,uCACJ,OAAO,mBAAsC,OAAO,cAAc,eAAe,EACjF,CAAC,OAAO,CACT;CAED,MAAMC,iCACJ,OAAO,GAAG,SAA8B,OAAO,QAAQ,GAAG,KAAK,EAC/D,CAAC,OAAO,CACT;CAED,MAAMC,iCACJ,OAAO,YACJ,MAAM,OAAO,QAAQ,QAAQ,EAChC,CAAC,OAAO,CACT;CAED,MAAMC,gCACJ,OAAO,GAAG,SAA8B,OAAO,OAAO,GAAG,KAAK,EAC9D,CAAC,OAAO,CACT;CAED,MAAMC,sCACJ,OAAO,GAAG,SAA8B,OAAO,aAAa,GAAG,KAAK,EACpE,CAAC,OAAO,CACT;CAED,MAAMC,sCACJ,OAAO,iBAAoC;EACzC,MAAMC,SAAc,MAAM,OAAO,aAAa,aAAa;EAI3D,MAAMC,sBAA4C,MAAM,OAAO,kBAAkB;AACjF,YAAU,oBAAoB;AAC9B,aAAW,oBAAoB,WAAW,GAAG;AAC7C,eAAa,MAAM,OAAO,sBAAsB,CAAC;AAEjD,SAAO;IAET,CAAC,OAAO,CACT;CAED,MAAMC,kCACG;EACL,gBAAgB,OAAO;EACvB,eAAe,OAAO;EACtB;EACA,WAAW,OAAO;EAClB,QAAQ,OAAO;EACf;EACA;EACA,WAAW,EACT,WACD;EACD;EACA;EACA;EACA;EACA;EACA,MAAM;GACJ,SAAS,aAAa;GACtB;GACA;GACD;EACD;EACA;EACA,eAAe;EACf,WAAW;EACX,YAAY;EACZ;EACA,oBAAoB,QAAQ;EAC5B;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA,iDAAwB,OAAO,OAAO;EACvC,GACD;EACE;EACA,QAAQ;EACR,OAAO;EACP,OAAO;EACP,OAAO;EACP,OAAO;EACP;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA,aAAa;EACb;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACD,CACF;AAED,QACE,2CAACC,iCAAiB;EAAgB;YAChC,2CAACC;GAAa,aAAa,aAAa;GAAM,iDAAwB,OAAO,OAAO;aAClF,2CAACC;IAAiB,SAAS,aAAa,oBAAoB;IAAkB;cAC5E,2CAACC;KACC,OAAO;MACL,GAAG,aAAa,OAAO;MACvB,WAAW,aAAa,OAAO;MAChC;eAED,2CAACC,0CACC,2CAACC;MACC,SAAS;MACG;MACZ,iBAAiB;gBAEjB,2CAACC;OAA0B,WAAY,YAAY,YAAY,aAAa,EAAE;OAC3E;QACyB;OACf,GACF;MACD;KACC;IACN;GACW;;AAIhC,gCAAe"}

package/dist/contexts/ThunderID/ThunderIDProvider.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ThunderIDProvider.d.ts","sourceRoot":"","sources":["../../../src/contexts/ThunderID/ThunderIDProvider.tsx"],"names":[],"mappings":"AAqBA,OAAO,EAAC,EAAE,EAAa,iBAAiB,EAAkE,MAAM,OAAO,CAAC;AAGxH,OAAO,EAAC,oBAAoB,EAAC,MAAM,qBAAqB,CAAC;AAkBzD;;GAEG;AACH,MAAM,MAAM,sBAAsB,GAAG,oBAAoB,CAAC;AAE1D,QAAA,MAAM,iBAAiB,EAAE,EAAE,CAAC,iBAAiB,CAAC,sBAAsB,CAAC,CA6iBpE,CAAC;AAEF,eAAe,iBAAiB,CAAC"}
+{"version":3,"file":"ThunderIDProvider.d.ts","sourceRoot":"","sources":["../../../src/contexts/ThunderID/ThunderIDProvider.tsx"],"names":[],"mappings":"AAqBA,OAAO,EAAC,EAAE,EAAa,iBAAiB,EAAkE,MAAM,OAAO,CAAC;AAGxH,OAAO,EAAC,oBAAoB,EAAC,MAAM,qBAAqB,CAAC;AAkBzD;;GAEG;AACH,MAAM,MAAM,sBAAsB,GAAG,oBAAoB,CAAC;AAE1D,QAAA,MAAM,iBAAiB,EAAE,EAAE,CAAC,iBAAiB,CAAC,sBAAsB,CAAC,CAojBpE,CAAC;AAEF,eAAe,iBAAiB,CAAC"}

package/dist/contexts/ThunderID/ThunderIDProvider.js

@@ -154,6 +154,11 @@ const ThunderIDProvider = ({ afterSignInUrl, afterSignOutUrl, baseUrl: initialBa
 			await client.on("sign-in", async () => {
 				await updateSession();
 			});
+			await client.on("sign-out", () => {
+				setUser(null);
+				setUserProfile(null);
+				setIsSignedInSync(false);
+			});
 			try {
 				await client.startAutoRefreshToken();
 			} catch (error) {

package/dist/contexts/ThunderID/ThunderIDProvider.js.map

@@ -1 +1 @@
-{"version":3,"file":"ThunderIDProvider.js","names":["logger: ReturnType<typeof createPackageComponentLogger>","ThunderIDProvider: FC<PropsWithChildren<ThunderIDProviderProps>>","reRenderCheckRef: RefObject<boolean>","client: ThunderIDReactClient","ThunderIDReactClient","invalidator: ResourceInvalidator","createResourceInvalidator","storageManagerRef: any","useBrowserUrl","pendingSessionUpdateRef: RefObject<Promise<void> | null>","resolvedBaseUrl: string","decodedToken: IdToken","shouldFetchProfile: boolean","claims: User","currentSignInStatus: boolean","getUsersMe","getUsersMeMeta","arg1: any","isV2FlowRequest: boolean","currentUrl: URL","urlParams: URLSearchParams","code: string | null","executionIdFromUrl: string | null","storedExecutionId: string | null","interval: NodeJS.Timeout","status: boolean","getDecodedIdToken: () => Promise<IdToken>","getIdToken: () => Promise<string>","getAccessToken: () => Promise<string>","getStorageManager: ThunderIDContextProps['getStorageManager']","storageManager: Awaited<ReturnType<ThunderIDContextProps['getStorageManager']>>","request: (...args: any[]) => Promise<any>","requestAll: (...args: any[]) => Promise<any>","exchangeToken: (exchangeConfig: any) => Promise<any>","signOut: (...args: any[]) => Promise<any>","recover: ThunderIDContextProps['recover']","signUp: (...args: any[]) => Promise<any>","clearSession: (...args: any[]) => Promise<any>","reInitialize: (reInitConfig: any) => Promise<any>","result: any","reinitializedConfig: ThunderIDReactConfig","value: any","ThunderIDContext","I18nProvider","FlowMetaProvider","ThemeProvider","FlowProvider","UserProvider","ComponentRendererProvider"],"sources":["../../../src/contexts/ThunderID/ThunderIDProvider.tsx"],"sourcesContent":["// Copyright 2025-2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\nimport {\n  ThunderIDRuntimeError,\n  generateFlattenedUserProfile,\n  OIDCDiscoveryApiResponse,\n  SignInOptions,\n  User,\n  UserProfile,\n  IdToken,\n  extractUserClaimsFromIdToken,\n  EmbeddedSignInFlowResponse,\n  EmbeddedRecoveryFlowRequest,\n  EmbeddedRecoveryFlowResponse,\n  createPackageComponentLogger,\n  getVendorPrefix,\n  resolveResourceEndpoint,\n  AttributeSchema,\n  SPAUtils,\n} from '@thunderid/browser';\nimport {FC, RefObject, PropsWithChildren, ReactElement, useEffect, useMemo, useRef, useState, useCallback} from 'react';\nimport ThunderIDContext, {ThunderIDContextProps} from './ThunderIDContext';\nimport useBrowserUrl from '../../hooks/useBrowserUrl';\nimport {ThunderIDReactConfig} from '../../models/config';\nimport {configureEmotionNonce} from '../../styles/emotion';\nimport ThunderIDReactClient from '../../ThunderIDReactClient';\nimport createResourceInvalidator, {ResourceInvalidator} from '../../utils/createResourceInvalidator';\nimport ComponentRendererProvider from '../ComponentRenderer/ComponentRendererProvider';\nimport FlowProvider from '../Flow/FlowProvider';\nimport FlowMetaProvider from '../FlowMeta/FlowMetaProvider';\nimport I18nProvider from '../I18n/I18nProvider';\nimport ThemeProvider from '../Theme/ThemeProvider';\nimport UserProvider from '../User/UserProvider';\nimport getUsersMe from '../../api/getUsersMe';\nimport getUsersMeMeta from '../../api/getUsersMeMeta';\n\nconst logger: ReturnType<typeof createPackageComponentLogger> = createPackageComponentLogger(\n  '@thunderid/react',\n  'ThunderIDProvider',\n);\n\n/**\n * Props interface of {@link ThunderIDProvider}\n */\nexport type ThunderIDProviderProps = ThunderIDReactConfig;\n\nconst ThunderIDProvider: FC<PropsWithChildren<ThunderIDProviderProps>> = ({\n  afterSignInUrl,\n  afterSignOutUrl,\n  baseUrl: initialBaseUrl,\n  clientId,\n  children,\n  extensions,\n  scopes,\n  preferences,\n  signInUrl,\n  signUpUrl,\n  organizationHandle,\n  applicationId,\n  signInOptions,\n  tokenRequest,\n  instanceId = 0,\n  organizationChain,\n  cspNonce,\n  vendor,\n  namespace,\n  http: httpOptions,\n  ...rest\n}: PropsWithChildren<ThunderIDProviderProps>): ReactElement => {\n  // Must run synchronously here, in the render body, before any descendant's css()/cx()/\n  // keyframes() calls execute during this same render pass - see the doc comment on\n  // `configureEmotionNonce` for why a `useEffect` would be too late.\n  configureEmotionNonce(cspNonce, vendor);\n\n  const reRenderCheckRef: RefObject<boolean> = useRef(false);\n  const client: ThunderIDReactClient = useMemo(() => new ThunderIDReactClient(instanceId), [instanceId]);\n  const invalidator: ResourceInvalidator = useMemo(() => createResourceInvalidator(), []);\n  const storageManagerRef: any = useRef<any>(null);\n  const {hasAuthParams, hasCalledForThisInstance} = useBrowserUrl();\n  const [user, setUser] = useState<User | null>(null);\n  const [isSignedInSync, setIsSignedInSync] = useState<boolean>(false);\n  const [isInitializedSync, setIsInitializedSync] = useState<boolean>(false);\n  const [isLoadingSync, setIsLoadingSync] = useState<boolean>(true);\n\n  const [userProfile, setUserProfile] = useState<UserProfile | null>(null);\n  const [userSchema, setUserSchema] = useState<Record<string, AttributeSchema> | null>(null);\n  const [baseUrl, setBaseUrl] = useState<string>(initialBaseUrl ?? '');\n  const [config, setConfig] = useState<ThunderIDReactConfig>({\n    afterSignInUrl: afterSignInUrl ?? window.location.origin,\n    afterSignOutUrl: afterSignOutUrl ?? window.location.origin,\n    applicationId,\n    baseUrl,\n    clientId,\n    organizationChain,\n    organizationHandle,\n    scopes,\n    signInOptions,\n    tokenRequest,\n    signInUrl,\n    signUpUrl,\n    vendor,\n    ...rest,\n  });\n\n  const [isUpdatingSession, setIsUpdatingSession] = useState<boolean>(false);\n  const [wellKnown, setWellKnown] = useState<OIDCDiscoveryApiResponse | null>(null);\n\n  // Holds the in-flight `updateSession()` promise so concurrent callers coalesce onto a single\n  // `/users/me` request instead of issuing one each.\n  const pendingSessionUpdateRef: RefObject<Promise<void> | null> = useRef<Promise<void> | null>(null);\n\n  useEffect(() => {\n    setBaseUrl(initialBaseUrl ?? '');\n  }, [initialBaseUrl]);\n\n  useEffect(() => {\n    (async (): Promise<void> => {\n      await client.initialize(config);\n      const initializedConfig: ThunderIDReactConfig = await client.getConfiguration();\n      setConfig(initializedConfig);\n      setWellKnown(await client.getDiscoveryResponse());\n    })();\n  }, []);\n\n  async function performSessionUpdate(): Promise<void> {\n    try {\n      // Set flag to prevent loading state tracking from interfering\n      setIsUpdatingSession(true);\n      setIsLoadingSync(true);\n      let resolvedBaseUrl: string = baseUrl;\n\n      const decodedToken: IdToken = await client.getDecodedIdToken();\n\n      // If there's a `user_org` claim in the ID token,\n      // Treat this login as a organization login.\n      if (decodedToken?.['user_org']) {\n        resolvedBaseUrl = `${(await client.getConfiguration()).baseUrl}/o`;\n        setBaseUrl(resolvedBaseUrl);\n      }\n\n      const shouldFetchProfile: boolean = preferences?.user?.fetchUserProfile !== false;\n      const claims: User = extractUserClaimsFromIdToken(decodedToken) as User;\n      let profileData = claims;\n      const currentSignInStatus: boolean = await client.isSignedIn();\n\n      if (currentSignInStatus && shouldFetchProfile) {\n        try {\n          const fetchedProfile = await getUsersMe({\n            baseUrl: resolvedBaseUrl,\n            url: resolveResourceEndpoint('usersMe', config),\n            instanceId,\n          });\n          profileData = {...claims, ...fetchedProfile};\n        } catch (err) {\n          logger.warn('Failed to fetch user profile from /users/me:', err);\n        }\n\n        try {\n          const metaRes = await getUsersMeMeta({\n            baseUrl: resolvedBaseUrl,\n            url: resolveResourceEndpoint('usersMeMeta', config),\n            instanceId,\n          });\n          if (metaRes?.schema) {\n            setUserSchema(metaRes.schema);\n          } else {\n            setUserSchema(null);\n          }\n        } catch (err) {\n          setUserSchema(null);\n          logger.warn('Failed to fetch user schema metadata from /users/me/meta:', err);\n        }\n      } else {\n        setUserSchema(null);\n      }\n\n      setUser(profileData);\n      setUserProfile({\n        flattenedProfile: generateFlattenedUserProfile(profileData, []),\n        profile: profileData,\n      });\n\n      // CRITICAL: Update sign-in status BEFORE setting loading to false\n      // This prevents the race condition where ProtectedRoute sees isLoading=false but isSignedIn=false\n      setIsSignedInSync(currentSignInStatus);\n    } catch (error) {\n      // TODO: Add an error log.\n    } finally {\n      // Clear the flag and set final loading state\n      setIsUpdatingSession(false);\n      setIsLoadingSync(client.isLoading());\n    }\n  }\n\n  /**\n   * Single-flight wrapper around {@link performSessionUpdate}.\n   *\n   * Concurrent callers share the in-flight request instead of each issuing their own `/users/me`.\n   * This is not a cache: once the request settles the ref is cleared, so a later caller (e.g.\n   * revalidation after a profile update) fetches again.\n   */\n  async function updateSession(): Promise<void> {\n    if (pendingSessionUpdateRef.current) {\n      return pendingSessionUpdateRef.current;\n    }\n\n    pendingSessionUpdateRef.current = performSessionUpdate().finally(() => {\n      pendingSessionUpdateRef.current = null;\n    });\n\n    return pendingSessionUpdateRef.current;\n  }\n\n  async function signIn(...args: any): Promise<User | EmbeddedSignInFlowResponse> {\n    // Check if this is a V2 embedded flow request BEFORE calling signIn\n    // This allows us to skip session checks entirely for V2 flows\n    const arg1: any = args[0];\n    const isV2FlowRequest: boolean =\n      typeof arg1 === 'object' && arg1 !== null && ('executionId' in arg1 || 'applicationId' in arg1);\n\n    try {\n      if (!isV2FlowRequest) {\n        setIsUpdatingSession(true);\n        setIsLoadingSync(true);\n      }\n\n      return await client.signIn(...args);\n    } catch (error) {\n      throw new ThunderIDRuntimeError(\n        `Sign in failed: ${error instanceof Error ? error.message : String(JSON.stringify(error))}`,\n        'thunderid-signIn-Error',\n        'react',\n        'An error occurred while trying to sign in.',\n      );\n    } finally {\n      if (!isV2FlowRequest) {\n        setIsUpdatingSession(false);\n        setIsLoadingSync(client.isLoading());\n      }\n    }\n  }\n\n  /**\n   * Try signing in when the component is mounted.\n   */\n  useEffect(() => {\n    // React 18.x Strict.Mode has a new check for `Ensuring reusable state` to facilitate an upcoming react feature.\n    // https://reactjs.org/docs/strict-mode.html#ensuring-reusable-state\n    // This will remount all the useEffects to ensure that there are no unexpected side effects.\n    // When react remounts the signIn hook of the AuthProvider, it will cause a race condition. Hence, we have to\n    // prevent the re-render of this hook as suggested in the following discussion.\n    // https://github.com/reactwg/react-18/discussions/18#discussioncomment-795623\n    if (reRenderCheckRef.current) {\n      return;\n    }\n\n    reRenderCheckRef.current = true;\n\n    (async (): Promise<void> => {\n      // Sync session state whenever sign-in completes (both redirect and embedded V2 flows).\n      // Pass the user returned by the SDK's sign-in flow so users/me result is not discarded.\n      await client.on('sign-in', async () => {\n        await updateSession();\n      });\n\n      // Start auto-refresh with a soft failure. This also covers the case where the access token\n      // expired while the refresh token is still valid — startAutoRefreshToken() calls\n      // refreshAccessToken() immediately when timeUntilRefresh <= 0 — so the sign-in check below\n      // sees the refreshed state.\n      try {\n        await client.startAutoRefreshToken();\n      } catch (error) {\n        logger.warn('Failed to schedule automatic token refresh.', error);\n      }\n\n      // User is already authenticated. Restore the session and skip the sign-in path.\n      if (await client.isSignedIn()) {\n        await updateSession();\n\n        return;\n      }\n\n      const currentUrl: URL = new URL(window.location.href);\n      const hasAuthParamsResult: boolean =\n        hasAuthParams(currentUrl, config.afterSignInUrl!) && hasCalledForThisInstance(currentUrl, instanceId ?? 0);\n\n      if (hasAuthParamsResult) {\n        try {\n          const urlParams: URLSearchParams = currentUrl.searchParams;\n          const code: string | null = urlParams.get('code');\n          const executionIdFromUrl: string | null = urlParams.get('executionId');\n          const storedExecutionId: string | null = sessionStorage.getItem(\n            `${getVendorPrefix(config.vendor)}_execution_id`,\n          );\n\n          // A silent sign-in response is handled even without a code: an error such as\n          // login_required must still be relayed from the iframe to the waiting parent.\n          if ((code || SPAUtils.isSilentStatePresentInURL()) && !executionIdFromUrl && !storedExecutionId) {\n            await signIn();\n          }\n        } catch (error) {\n          throw new ThunderIDRuntimeError(\n            `Sign in failed: ${error instanceof Error ? error.message : String(JSON.stringify(error))}`,\n            'thunderid-signIn-Error',\n            'react',\n            'An error occurred while trying to sign in.',\n          );\n        }\n      }\n    })();\n  }, []);\n\n  /**\n   * Check if the user is signed in and update the state accordingly.\n   * This will also set an interval to check for the sign-in status every second\n   * until the user is signed in.\n   */\n  useEffect(() => {\n    let interval: NodeJS.Timeout;\n\n    (async (): Promise<void> => {\n      try {\n        const status: boolean = await client.isSignedIn();\n\n        setIsSignedInSync(status);\n\n        if (!status) {\n          interval = setInterval(async () => {\n            const newStatus: boolean = await client.isSignedIn();\n\n            if (newStatus) {\n              setIsSignedInSync(true);\n              clearInterval(interval);\n            }\n          }, 1000);\n        } else {\n          // TODO: Add a debug log to indicate that the user is already signed in.\n        }\n      } catch (error) {\n        setIsSignedInSync(false);\n      }\n    })();\n\n    return (): void => {\n      if (interval) {\n        clearInterval(interval);\n      }\n    };\n  }, [client]);\n\n  useEffect(() => {\n    (async (): Promise<void> => {\n      try {\n        const status: boolean = await client.isInitialized();\n\n        setIsInitializedSync(status);\n      } catch (error) {\n        setIsInitializedSync(false);\n      }\n    })();\n  }, [client]);\n\n  /**\n   * Track loading state changes from the ThunderID client\n   */\n  useEffect(() => {\n    const checkLoadingState = (): void => {\n      // Don't override loading state during critical session updates\n      if (isUpdatingSession) {\n        return;\n      }\n\n      // Don't set loading=false while auth params are in the URL and user isn't signed in yet.\n      // This prevents ProtectedRoute from redirecting before the sign-in effect processes the auth code.\n      const currentUrl: URL = new URL(window.location.href);\n      if (!isSignedInSync && hasAuthParams(currentUrl, config.afterSignInUrl!)) {\n        return;\n      }\n\n      setIsLoadingSync(client.isLoading());\n    };\n\n    // Initial check\n    checkLoadingState();\n\n    // Set up an interval to check for loading state changes\n    const interval: NodeJS.Timeout = setInterval(checkLoadingState, 100);\n\n    return (): void => {\n      clearInterval(interval);\n    };\n  }, [client, isLoadingSync, isSignedInSync, isUpdatingSession]);\n\n  const signInSilently = async (options?: SignInOptions): Promise<User | boolean> => {\n    try {\n      setIsUpdatingSession(true);\n      setIsLoadingSync(true);\n      return await client.signInSilently(options);\n    } catch (error) {\n      throw new ThunderIDRuntimeError(\n        `Error while signing in silently: ${error instanceof Error ? error.message : String(JSON.stringify(error))}`,\n        'thunderid-signInSilently-Error',\n        'react',\n        'An error occurred while trying to sign in silently.',\n      );\n    } finally {\n      setIsUpdatingSession(false);\n      setIsLoadingSync(client.isLoading());\n    }\n  };\n\n  const handleProfileUpdate = (payload: User): void => {\n    setUser(payload);\n    setUserProfile((prev: UserProfile | null) => ({\n      flattenedProfile: generateFlattenedUserProfile(payload),\n      profile: payload,\n    }));\n  };\n\n  const getDecodedIdToken: () => Promise<IdToken> = useCallback(\n    async (): Promise<IdToken> => client.getDecodedIdToken(),\n    [client],\n  );\n\n  const getIdToken: () => Promise<string> = useCallback(async (): Promise<string> => client.getIdToken(), [client]);\n\n  const getAccessToken: () => Promise<string> = useCallback(\n    async (): Promise<string> => client.getAccessToken(),\n    [client],\n  );\n\n  const getStorageManager: ThunderIDContextProps['getStorageManager'] = useCallback(async () => {\n    const storageManager: Awaited<ReturnType<ThunderIDContextProps['getStorageManager']>> =\n      storageManagerRef.current ?? (await client.getStorageManager());\n    if (storageManager) {\n      storageManagerRef.current = storageManager;\n    }\n    return storageManager;\n  }, [client]);\n\n  const request: (...args: any[]) => Promise<any> = useCallback(\n    async (...args: any[]): Promise<any> => client.request(...args),\n    [client],\n  );\n\n  const requestAll: (...args: any[]) => Promise<any> = useCallback(\n    async (...args: any[]): Promise<any> => client.requestAll(...args),\n    [client],\n  );\n\n  const exchangeToken: (exchangeConfig: any) => Promise<any> = useCallback(\n    async (exchangeConfig: any): Promise<any> => client.exchangeToken(exchangeConfig),\n    [client],\n  );\n\n  const signOut: (...args: any[]) => Promise<any> = useCallback(\n    async (...args: any[]): Promise<any> => client.signOut(...args),\n    [client],\n  );\n\n  const recover: ThunderIDContextProps['recover'] = useCallback(\n    async (payload?: EmbeddedRecoveryFlowRequest): Promise<EmbeddedRecoveryFlowResponse> =>\n      (await client.recover(payload)) as EmbeddedRecoveryFlowResponse,\n    [client],\n  );\n\n  const signUp: (...args: any[]) => Promise<any> = useCallback(\n    async (...args: any[]): Promise<any> => client.signUp(...args),\n    [client],\n  );\n\n  const clearSession: (...args: any[]) => Promise<any> = useCallback(\n    async (...args: any[]): Promise<any> => client.clearSession(...args),\n    [client],\n  );\n\n  const reInitialize: (reInitConfig: any) => Promise<any> = useCallback(\n    async (reInitConfig: any): Promise<any> => {\n      const result: any = await client.reInitialize(reInitConfig);\n\n      // Refresh React state from the reinitialized client so the context (config.endpoints,\n      // baseUrl, discovery) reflects the new configuration instead of the pre-reinitialization state.\n      const reinitializedConfig: ThunderIDReactConfig = await client.getConfiguration();\n      setConfig(reinitializedConfig);\n      setBaseUrl(reinitializedConfig.baseUrl ?? '');\n      setWellKnown(await client.getDiscoveryResponse());\n\n      return result;\n    },\n    [client],\n  );\n\n  const value: any = useMemo(\n    () => ({\n      afterSignInUrl: config.afterSignInUrl,\n      applicationId: config.applicationId,\n      baseUrl,\n      endpoints: config.endpoints,\n      scopes: config.scopes,\n      clearSession,\n      clientId,\n      discovery: {\n        wellKnown,\n      },\n      exchangeToken,\n      getAccessToken,\n      getDecodedIdToken,\n      getIdToken,\n      getStorageManager,\n      http: {\n        fetcher: httpOptions?.fetcher,\n        request,\n        requestAll,\n      },\n      instanceId,\n      invalidator,\n      isInitialized: isInitializedSync,\n      isLoading: isLoadingSync,\n      isSignedIn: isSignedInSync,\n      organizationChain,\n      organizationHandle: config?.organizationHandle,\n      preferences,\n      reInitialize,\n      recover,\n      signIn,\n      signInOptions,\n      tokenRequest,\n      signInSilently,\n      signInUrl,\n      signOut,\n      signUp,\n      signUpUrl,\n      user,\n      userSchema,\n      vendor: getVendorPrefix(config.vendor),\n    }),\n    [\n      applicationId,\n      config?.organizationHandle,\n      config.vendor,\n      config.afterSignInUrl,\n      config.endpoints,\n      config.scopes,\n      signInUrl,\n      signUpUrl,\n      baseUrl,\n      clientId,\n      wellKnown,\n      isInitializedSync,\n      isLoadingSync,\n      isSignedInSync,\n      signIn,\n      signInSilently,\n      user,\n      userSchema,\n      client,\n      signInOptions,\n      tokenRequest,\n      getDecodedIdToken,\n      clearSession,\n      exchangeToken,\n      httpOptions?.fetcher,\n      getAccessToken,\n      getStorageManager,\n      instanceId,\n      invalidator,\n      organizationChain,\n      preferences,\n      recover,\n      reInitialize,\n      request,\n      requestAll,\n      signOut,\n      signUp,\n    ],\n  );\n\n  return (\n    <ThunderIDContext.Provider value={value}>\n      <I18nProvider preferences={preferences?.i18n} vendor={getVendorPrefix(config.vendor)}>\n        <FlowMetaProvider enabled={preferences?.resolveFromMeta !== false} namespace={namespace}>\n          <ThemeProvider\n            theme={{\n              ...preferences?.theme?.overrides,\n              direction: preferences?.theme?.direction,\n            }}\n          >\n            <FlowProvider>\n              <UserProvider\n                profile={userProfile as UserProfile}\n                userSchema={userSchema}\n                onUpdateProfile={handleProfileUpdate}\n              >\n                <ComponentRendererProvider renderers={(extensions?.components?.renderers ?? {}) as any}>\n                  {children}\n                </ComponentRendererProvider>\n              </UserProvider>\n            </FlowProvider>\n          </ThemeProvider>\n        </FlowMetaProvider>\n      </I18nProvider>\n    </ThunderIDContext.Provider>\n  );\n};\n\nexport default ThunderIDProvider;\n"],"mappings":";;;;;;;;;;;;;;;;;;AAqCA,MAAMA,WAA0D,6BAC9D,oBACA,oBACD;AAOD,MAAMC,qBAAoE,EACxE,gBACA,iBACA,SAAS,gBACT,UACA,UACA,YACA,QACA,aACA,WACA,WACA,oBACA,eACA,eACA,cACA,aAAa,GACb,mBACA,UACA,QACA,WACA,MAAM,YACN,GAAG,WAC0D;AAI7D,uBAAsB,UAAU,OAAO;CAEvC,MAAMC,mBAAuC,OAAO,MAAM;CAC1D,MAAMC,SAA+B,cAAc,IAAIC,6BAAqB,WAAW,EAAE,CAAC,WAAW,CAAC;CACtG,MAAMC,cAAmC,cAAcC,mCAA2B,EAAE,EAAE,CAAC;CACvF,MAAMC,oBAAyB,OAAY,KAAK;CAChD,MAAM,EAAC,eAAe,6BAA4BC,uBAAe;CACjE,MAAM,CAAC,MAAM,WAAW,SAAsB,KAAK;CACnD,MAAM,CAAC,gBAAgB,qBAAqB,SAAkB,MAAM;CACpE,MAAM,CAAC,mBAAmB,wBAAwB,SAAkB,MAAM;CAC1E,MAAM,CAAC,eAAe,oBAAoB,SAAkB,KAAK;CAEjE,MAAM,CAAC,aAAa,kBAAkB,SAA6B,KAAK;CACxE,MAAM,CAAC,YAAY,iBAAiB,SAAiD,KAAK;CAC1F,MAAM,CAAC,SAAS,cAAc,SAAiB,kBAAkB,GAAG;CACpE,MAAM,CAAC,QAAQ,aAAa,SAA+B;EACzD,gBAAgB,kBAAkB,OAAO,SAAS;EAClD,iBAAiB,mBAAmB,OAAO,SAAS;EACpD;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA,GAAG;EACJ,CAAC;CAEF,MAAM,CAAC,mBAAmB,wBAAwB,SAAkB,MAAM;CAC1E,MAAM,CAAC,WAAW,gBAAgB,SAA0C,KAAK;CAIjF,MAAMC,0BAA2D,OAA6B,KAAK;AAEnG,iBAAgB;AACd,aAAW,kBAAkB,GAAG;IAC/B,CAAC,eAAe,CAAC;AAEpB,iBAAgB;AACd,GAAC,YAA2B;AAC1B,SAAM,OAAO,WAAW,OAAO;AAE/B,aADgD,MAAM,OAAO,kBAAkB,CACnD;AAC5B,gBAAa,MAAM,OAAO,sBAAsB,CAAC;MAC/C;IACH,EAAE,CAAC;CAEN,eAAe,uBAAsC;AACnD,MAAI;AAEF,wBAAqB,KAAK;AAC1B,oBAAiB,KAAK;GACtB,IAAIC,kBAA0B;GAE9B,MAAMC,eAAwB,MAAM,OAAO,mBAAmB;AAI9D,OAAI,eAAe,aAAa;AAC9B,sBAAkB,IAAI,MAAM,OAAO,kBAAkB,EAAE,QAAQ;AAC/D,eAAW,gBAAgB;;GAG7B,MAAMC,qBAA8B,aAAa,MAAM,qBAAqB;GAC5E,MAAMC,SAAe,6BAA6B,aAAa;GAC/D,IAAI,cAAc;GAClB,MAAMC,sBAA+B,MAAM,OAAO,YAAY;AAE9D,OAAI,uBAAuB,oBAAoB;AAC7C,QAAI;KACF,MAAM,iBAAiB,MAAMC,mBAAW;MACtC,SAAS;MACT,KAAK,wBAAwB,WAAW,OAAO;MAC/C;MACD,CAAC;AACF,mBAAc;MAAC,GAAG;MAAQ,GAAG;MAAe;aACrC,KAAK;AACZ,cAAO,KAAK,gDAAgD,IAAI;;AAGlE,QAAI;KACF,MAAM,UAAU,MAAMC,uBAAe;MACnC,SAAS;MACT,KAAK,wBAAwB,eAAe,OAAO;MACnD;MACD,CAAC;AACF,SAAI,SAAS,OACX,eAAc,QAAQ,OAAO;SAE7B,eAAc,KAAK;aAEd,KAAK;AACZ,mBAAc,KAAK;AACnB,cAAO,KAAK,6DAA6D,IAAI;;SAG/E,eAAc,KAAK;AAGrB,WAAQ,YAAY;AACpB,kBAAe;IACb,kBAAkB,6BAA6B,aAAa,EAAE,CAAC;IAC/D,SAAS;IACV,CAAC;AAIF,qBAAkB,oBAAoB;WAC/B,OAAO,WAEN;AAER,wBAAqB,MAAM;AAC3B,oBAAiB,OAAO,WAAW,CAAC;;;;;;;;;;CAWxC,eAAe,gBAA+B;AAC5C,MAAI,wBAAwB,QAC1B,QAAO,wBAAwB;AAGjC,0BAAwB,UAAU,sBAAsB,CAAC,cAAc;AACrE,2BAAwB,UAAU;IAClC;AAEF,SAAO,wBAAwB;;CAGjC,eAAe,OAAO,GAAG,MAAuD;EAG9E,MAAMC,OAAY,KAAK;EACvB,MAAMC,kBACJ,OAAO,SAAS,YAAY,SAAS,SAAS,iBAAiB,QAAQ,mBAAmB;AAE5F,MAAI;AACF,OAAI,CAAC,iBAAiB;AACpB,yBAAqB,KAAK;AAC1B,qBAAiB,KAAK;;AAGxB,UAAO,MAAM,OAAO,OAAO,GAAG,KAAK;WAC5B,OAAO;AACd,SAAM,IAAI,sBACR,mBAAmB,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,UAAU,MAAM,CAAC,IACzF,0BACA,SACA,6CACD;YACO;AACR,OAAI,CAAC,iBAAiB;AACpB,yBAAqB,MAAM;AAC3B,qBAAiB,OAAO,WAAW,CAAC;;;;;;;AAQ1C,iBAAgB;AAOd,MAAI,iBAAiB,QACnB;AAGF,mBAAiB,UAAU;AAE3B,GAAC,YAA2B;AAG1B,SAAM,OAAO,GAAG,WAAW,YAAY;AACrC,UAAM,eAAe;KACrB;AAMF,OAAI;AACF,UAAM,OAAO,uBAAuB;YAC7B,OAAO;AACd,aAAO,KAAK,+CAA+C,MAAM;;AAInE,OAAI,MAAM,OAAO,YAAY,EAAE;AAC7B,UAAM,eAAe;AAErB;;GAGF,MAAMC,aAAkB,IAAI,IAAI,OAAO,SAAS,KAAK;AAIrD,OAFE,cAAc,YAAY,OAAO,eAAgB,IAAI,yBAAyB,YAAY,cAAc,EAAE,CAG1G,KAAI;IACF,MAAMC,YAA6B,WAAW;IAC9C,MAAMC,OAAsB,UAAU,IAAI,OAAO;IACjD,MAAMC,qBAAoC,UAAU,IAAI,cAAc;IACtE,MAAMC,oBAAmC,eAAe,QACtD,GAAG,gBAAgB,OAAO,OAAO,CAAC,eACnC;AAID,SAAK,QAAQ,SAAS,2BAA2B,KAAK,CAAC,sBAAsB,CAAC,kBAC5E,OAAM,QAAQ;YAET,OAAO;AACd,UAAM,IAAI,sBACR,mBAAmB,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,UAAU,MAAM,CAAC,IACzF,0BACA,SACA,6CACD;;MAGH;IACH,EAAE,CAAC;;;;;;AAON,iBAAgB;EACd,IAAIC;AAEJ,GAAC,YAA2B;AAC1B,OAAI;IACF,MAAMC,SAAkB,MAAM,OAAO,YAAY;AAEjD,sBAAkB,OAAO;AAEzB,QAAI,CAAC,OACH,YAAW,YAAY,YAAY;AAGjC,SAF2B,MAAM,OAAO,YAAY,EAErC;AACb,wBAAkB,KAAK;AACvB,oBAAc,SAAS;;OAExB,IAAK;YAIH,OAAO;AACd,sBAAkB,MAAM;;MAExB;AAEJ,eAAmB;AACjB,OAAI,SACF,eAAc,SAAS;;IAG1B,CAAC,OAAO,CAAC;AAEZ,iBAAgB;AACd,GAAC,YAA2B;AAC1B,OAAI;AAGF,yBAFwB,MAAM,OAAO,eAAe,CAExB;YACrB,OAAO;AACd,yBAAqB,MAAM;;MAE3B;IACH,CAAC,OAAO,CAAC;;;;AAKZ,iBAAgB;EACd,MAAM,0BAAgC;AAEpC,OAAI,kBACF;GAKF,MAAMN,aAAkB,IAAI,IAAI,OAAO,SAAS,KAAK;AACrD,OAAI,CAAC,kBAAkB,cAAc,YAAY,OAAO,eAAgB,CACtE;AAGF,oBAAiB,OAAO,WAAW,CAAC;;AAItC,qBAAmB;EAGnB,MAAMK,WAA2B,YAAY,mBAAmB,IAAI;AAEpE,eAAmB;AACjB,iBAAc,SAAS;;IAExB;EAAC;EAAQ;EAAe;EAAgB;EAAkB,CAAC;CAE9D,MAAM,iBAAiB,OAAO,YAAqD;AACjF,MAAI;AACF,wBAAqB,KAAK;AAC1B,oBAAiB,KAAK;AACtB,UAAO,MAAM,OAAO,eAAe,QAAQ;WACpC,OAAO;AACd,SAAM,IAAI,sBACR,oCAAoC,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,UAAU,MAAM,CAAC,IAC1G,kCACA,SACA,sDACD;YACO;AACR,wBAAqB,MAAM;AAC3B,oBAAiB,OAAO,WAAW,CAAC;;;CAIxC,MAAM,uBAAuB,YAAwB;AACnD,UAAQ,QAAQ;AAChB,kBAAgB,UAA8B;GAC5C,kBAAkB,6BAA6B,QAAQ;GACvD,SAAS;GACV,EAAE;;CAGL,MAAME,oBAA4C,YAChD,YAA8B,OAAO,mBAAmB,EACxD,CAAC,OAAO,CACT;CAED,MAAMC,aAAoC,YAAY,YAA6B,OAAO,YAAY,EAAE,CAAC,OAAO,CAAC;CAEjH,MAAMC,iBAAwC,YAC5C,YAA6B,OAAO,gBAAgB,EACpD,CAAC,OAAO,CACT;CAED,MAAMC,oBAAgE,YAAY,YAAY;EAC5F,MAAMC,iBACJ,kBAAkB,WAAY,MAAM,OAAO,mBAAmB;AAChE,MAAI,eACF,mBAAkB,UAAU;AAE9B,SAAO;IACN,CAAC,OAAO,CAAC;CAEZ,MAAMC,UAA4C,YAChD,OAAO,GAAG,SAA8B,OAAO,QAAQ,GAAG,KAAK,EAC/D,CAAC,OAAO,CACT;CAED,MAAMC,aAA+C,YACnD,OAAO,GAAG,SAA8B,OAAO,WAAW,GAAG,KAAK,EAClE,CAAC,OAAO,CACT;CAED,MAAMC,gBAAuD,YAC3D,OAAO,mBAAsC,OAAO,cAAc,eAAe,EACjF,CAAC,OAAO,CACT;CAED,MAAMC,UAA4C,YAChD,OAAO,GAAG,SAA8B,OAAO,QAAQ,GAAG,KAAK,EAC/D,CAAC,OAAO,CACT;CAED,MAAMC,UAA4C,YAChD,OAAO,YACJ,MAAM,OAAO,QAAQ,QAAQ,EAChC,CAAC,OAAO,CACT;CAED,MAAMC,SAA2C,YAC/C,OAAO,GAAG,SAA8B,OAAO,OAAO,GAAG,KAAK,EAC9D,CAAC,OAAO,CACT;CAED,MAAMC,eAAiD,YACrD,OAAO,GAAG,SAA8B,OAAO,aAAa,GAAG,KAAK,EACpE,CAAC,OAAO,CACT;CAED,MAAMC,eAAoD,YACxD,OAAO,iBAAoC;EACzC,MAAMC,SAAc,MAAM,OAAO,aAAa,aAAa;EAI3D,MAAMC,sBAA4C,MAAM,OAAO,kBAAkB;AACjF,YAAU,oBAAoB;AAC9B,aAAW,oBAAoB,WAAW,GAAG;AAC7C,eAAa,MAAM,OAAO,sBAAsB,CAAC;AAEjD,SAAO;IAET,CAAC,OAAO,CACT;CAED,MAAMC,QAAa,eACV;EACL,gBAAgB,OAAO;EACvB,eAAe,OAAO;EACtB;EACA,WAAW,OAAO;EAClB,QAAQ,OAAO;EACf;EACA;EACA,WAAW,EACT,WACD;EACD;EACA;EACA;EACA;EACA;EACA,MAAM;GACJ,SAAS,aAAa;GACtB;GACA;GACD;EACD;EACA;EACA,eAAe;EACf,WAAW;EACX,YAAY;EACZ;EACA,oBAAoB,QAAQ;EAC5B;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA,QAAQ,gBAAgB,OAAO,OAAO;EACvC,GACD;EACE;EACA,QAAQ;EACR,OAAO;EACP,OAAO;EACP,OAAO;EACP,OAAO;EACP;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA,aAAa;EACb;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACD,CACF;AAED,QACE,oBAACC,yBAAiB;EAAgB;YAChC,oBAACC;GAAa,aAAa,aAAa;GAAM,QAAQ,gBAAgB,OAAO,OAAO;aAClF,oBAACC;IAAiB,SAAS,aAAa,oBAAoB;IAAkB;cAC5E,oBAACC;KACC,OAAO;MACL,GAAG,aAAa,OAAO;MACvB,WAAW,aAAa,OAAO;MAChC;eAED,oBAACC,kCACC,oBAACC;MACC,SAAS;MACG;MACZ,iBAAiB;gBAEjB,oBAACC;OAA0B,WAAY,YAAY,YAAY,aAAa,EAAE;OAC3E;QACyB;OACf,GACF;MACD;KACC;IACN;GACW;;AAIhC,gCAAe"}
+{"version":3,"file":"ThunderIDProvider.js","names":["logger: ReturnType<typeof createPackageComponentLogger>","ThunderIDProvider: FC<PropsWithChildren<ThunderIDProviderProps>>","reRenderCheckRef: RefObject<boolean>","client: ThunderIDReactClient","ThunderIDReactClient","invalidator: ResourceInvalidator","createResourceInvalidator","storageManagerRef: any","useBrowserUrl","pendingSessionUpdateRef: RefObject<Promise<void> | null>","resolvedBaseUrl: string","decodedToken: IdToken","shouldFetchProfile: boolean","claims: User","currentSignInStatus: boolean","getUsersMe","getUsersMeMeta","arg1: any","isV2FlowRequest: boolean","currentUrl: URL","urlParams: URLSearchParams","code: string | null","executionIdFromUrl: string | null","storedExecutionId: string | null","interval: NodeJS.Timeout","status: boolean","getDecodedIdToken: () => Promise<IdToken>","getIdToken: () => Promise<string>","getAccessToken: () => Promise<string>","getStorageManager: ThunderIDContextProps['getStorageManager']","storageManager: Awaited<ReturnType<ThunderIDContextProps['getStorageManager']>>","request: (...args: any[]) => Promise<any>","requestAll: (...args: any[]) => Promise<any>","exchangeToken: (exchangeConfig: any) => Promise<any>","signOut: (...args: any[]) => Promise<any>","recover: ThunderIDContextProps['recover']","signUp: (...args: any[]) => Promise<any>","clearSession: (...args: any[]) => Promise<any>","reInitialize: (reInitConfig: any) => Promise<any>","result: any","reinitializedConfig: ThunderIDReactConfig","value: any","ThunderIDContext","I18nProvider","FlowMetaProvider","ThemeProvider","FlowProvider","UserProvider","ComponentRendererProvider"],"sources":["../../../src/contexts/ThunderID/ThunderIDProvider.tsx"],"sourcesContent":["// Copyright 2025-2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\nimport {\n  ThunderIDRuntimeError,\n  generateFlattenedUserProfile,\n  OIDCDiscoveryApiResponse,\n  SignInOptions,\n  User,\n  UserProfile,\n  IdToken,\n  extractUserClaimsFromIdToken,\n  EmbeddedSignInFlowResponse,\n  EmbeddedRecoveryFlowRequest,\n  EmbeddedRecoveryFlowResponse,\n  createPackageComponentLogger,\n  getVendorPrefix,\n  resolveResourceEndpoint,\n  AttributeSchema,\n  SPAUtils,\n} from '@thunderid/browser';\nimport {FC, RefObject, PropsWithChildren, ReactElement, useEffect, useMemo, useRef, useState, useCallback} from 'react';\nimport ThunderIDContext, {ThunderIDContextProps} from './ThunderIDContext';\nimport useBrowserUrl from '../../hooks/useBrowserUrl';\nimport {ThunderIDReactConfig} from '../../models/config';\nimport {configureEmotionNonce} from '../../styles/emotion';\nimport ThunderIDReactClient from '../../ThunderIDReactClient';\nimport createResourceInvalidator, {ResourceInvalidator} from '../../utils/createResourceInvalidator';\nimport ComponentRendererProvider from '../ComponentRenderer/ComponentRendererProvider';\nimport FlowProvider from '../Flow/FlowProvider';\nimport FlowMetaProvider from '../FlowMeta/FlowMetaProvider';\nimport I18nProvider from '../I18n/I18nProvider';\nimport ThemeProvider from '../Theme/ThemeProvider';\nimport UserProvider from '../User/UserProvider';\nimport getUsersMe from '../../api/getUsersMe';\nimport getUsersMeMeta from '../../api/getUsersMeMeta';\n\nconst logger: ReturnType<typeof createPackageComponentLogger> = createPackageComponentLogger(\n  '@thunderid/react',\n  'ThunderIDProvider',\n);\n\n/**\n * Props interface of {@link ThunderIDProvider}\n */\nexport type ThunderIDProviderProps = ThunderIDReactConfig;\n\nconst ThunderIDProvider: FC<PropsWithChildren<ThunderIDProviderProps>> = ({\n  afterSignInUrl,\n  afterSignOutUrl,\n  baseUrl: initialBaseUrl,\n  clientId,\n  children,\n  extensions,\n  scopes,\n  preferences,\n  signInUrl,\n  signUpUrl,\n  organizationHandle,\n  applicationId,\n  signInOptions,\n  tokenRequest,\n  instanceId = 0,\n  organizationChain,\n  cspNonce,\n  vendor,\n  namespace,\n  http: httpOptions,\n  ...rest\n}: PropsWithChildren<ThunderIDProviderProps>): ReactElement => {\n  // Must run synchronously here, in the render body, before any descendant's css()/cx()/\n  // keyframes() calls execute during this same render pass - see the doc comment on\n  // `configureEmotionNonce` for why a `useEffect` would be too late.\n  configureEmotionNonce(cspNonce, vendor);\n\n  const reRenderCheckRef: RefObject<boolean> = useRef(false);\n  const client: ThunderIDReactClient = useMemo(() => new ThunderIDReactClient(instanceId), [instanceId]);\n  const invalidator: ResourceInvalidator = useMemo(() => createResourceInvalidator(), []);\n  const storageManagerRef: any = useRef<any>(null);\n  const {hasAuthParams, hasCalledForThisInstance} = useBrowserUrl();\n  const [user, setUser] = useState<User | null>(null);\n  const [isSignedInSync, setIsSignedInSync] = useState<boolean>(false);\n  const [isInitializedSync, setIsInitializedSync] = useState<boolean>(false);\n  const [isLoadingSync, setIsLoadingSync] = useState<boolean>(true);\n\n  const [userProfile, setUserProfile] = useState<UserProfile | null>(null);\n  const [userSchema, setUserSchema] = useState<Record<string, AttributeSchema> | null>(null);\n  const [baseUrl, setBaseUrl] = useState<string>(initialBaseUrl ?? '');\n  const [config, setConfig] = useState<ThunderIDReactConfig>({\n    afterSignInUrl: afterSignInUrl ?? window.location.origin,\n    afterSignOutUrl: afterSignOutUrl ?? window.location.origin,\n    applicationId,\n    baseUrl,\n    clientId,\n    organizationChain,\n    organizationHandle,\n    scopes,\n    signInOptions,\n    tokenRequest,\n    signInUrl,\n    signUpUrl,\n    vendor,\n    ...rest,\n  });\n\n  const [isUpdatingSession, setIsUpdatingSession] = useState<boolean>(false);\n  const [wellKnown, setWellKnown] = useState<OIDCDiscoveryApiResponse | null>(null);\n\n  // Holds the in-flight `updateSession()` promise so concurrent callers coalesce onto a single\n  // `/users/me` request instead of issuing one each.\n  const pendingSessionUpdateRef: RefObject<Promise<void> | null> = useRef<Promise<void> | null>(null);\n\n  useEffect(() => {\n    setBaseUrl(initialBaseUrl ?? '');\n  }, [initialBaseUrl]);\n\n  useEffect(() => {\n    (async (): Promise<void> => {\n      await client.initialize(config);\n      const initializedConfig: ThunderIDReactConfig = await client.getConfiguration();\n      setConfig(initializedConfig);\n      setWellKnown(await client.getDiscoveryResponse());\n    })();\n  }, []);\n\n  async function performSessionUpdate(): Promise<void> {\n    try {\n      // Set flag to prevent loading state tracking from interfering\n      setIsUpdatingSession(true);\n      setIsLoadingSync(true);\n      let resolvedBaseUrl: string = baseUrl;\n\n      const decodedToken: IdToken = await client.getDecodedIdToken();\n\n      // If there's a `user_org` claim in the ID token,\n      // Treat this login as a organization login.\n      if (decodedToken?.['user_org']) {\n        resolvedBaseUrl = `${(await client.getConfiguration()).baseUrl}/o`;\n        setBaseUrl(resolvedBaseUrl);\n      }\n\n      const shouldFetchProfile: boolean = preferences?.user?.fetchUserProfile !== false;\n      const claims: User = extractUserClaimsFromIdToken(decodedToken) as User;\n      let profileData = claims;\n      const currentSignInStatus: boolean = await client.isSignedIn();\n\n      if (currentSignInStatus && shouldFetchProfile) {\n        try {\n          const fetchedProfile = await getUsersMe({\n            baseUrl: resolvedBaseUrl,\n            url: resolveResourceEndpoint('usersMe', config),\n            instanceId,\n          });\n          profileData = {...claims, ...fetchedProfile};\n        } catch (err) {\n          logger.warn('Failed to fetch user profile from /users/me:', err);\n        }\n\n        try {\n          const metaRes = await getUsersMeMeta({\n            baseUrl: resolvedBaseUrl,\n            url: resolveResourceEndpoint('usersMeMeta', config),\n            instanceId,\n          });\n          if (metaRes?.schema) {\n            setUserSchema(metaRes.schema);\n          } else {\n            setUserSchema(null);\n          }\n        } catch (err) {\n          setUserSchema(null);\n          logger.warn('Failed to fetch user schema metadata from /users/me/meta:', err);\n        }\n      } else {\n        setUserSchema(null);\n      }\n\n      setUser(profileData);\n      setUserProfile({\n        flattenedProfile: generateFlattenedUserProfile(profileData, []),\n        profile: profileData,\n      });\n\n      // CRITICAL: Update sign-in status BEFORE setting loading to false\n      // This prevents the race condition where ProtectedRoute sees isLoading=false but isSignedIn=false\n      setIsSignedInSync(currentSignInStatus);\n    } catch (error) {\n      // TODO: Add an error log.\n    } finally {\n      // Clear the flag and set final loading state\n      setIsUpdatingSession(false);\n      setIsLoadingSync(client.isLoading());\n    }\n  }\n\n  /**\n   * Single-flight wrapper around {@link performSessionUpdate}.\n   *\n   * Concurrent callers share the in-flight request instead of each issuing their own `/users/me`.\n   * This is not a cache: once the request settles the ref is cleared, so a later caller (e.g.\n   * revalidation after a profile update) fetches again.\n   */\n  async function updateSession(): Promise<void> {\n    if (pendingSessionUpdateRef.current) {\n      return pendingSessionUpdateRef.current;\n    }\n\n    pendingSessionUpdateRef.current = performSessionUpdate().finally(() => {\n      pendingSessionUpdateRef.current = null;\n    });\n\n    return pendingSessionUpdateRef.current;\n  }\n\n  async function signIn(...args: any): Promise<User | EmbeddedSignInFlowResponse> {\n    // Check if this is a V2 embedded flow request BEFORE calling signIn\n    // This allows us to skip session checks entirely for V2 flows\n    const arg1: any = args[0];\n    const isV2FlowRequest: boolean =\n      typeof arg1 === 'object' && arg1 !== null && ('executionId' in arg1 || 'applicationId' in arg1);\n\n    try {\n      if (!isV2FlowRequest) {\n        setIsUpdatingSession(true);\n        setIsLoadingSync(true);\n      }\n\n      return await client.signIn(...args);\n    } catch (error) {\n      throw new ThunderIDRuntimeError(\n        `Sign in failed: ${error instanceof Error ? error.message : String(JSON.stringify(error))}`,\n        'thunderid-signIn-Error',\n        'react',\n        'An error occurred while trying to sign in.',\n      );\n    } finally {\n      if (!isV2FlowRequest) {\n        setIsUpdatingSession(false);\n        setIsLoadingSync(client.isLoading());\n      }\n    }\n  }\n\n  /**\n   * Try signing in when the component is mounted.\n   */\n  useEffect(() => {\n    // React 18.x Strict.Mode has a new check for `Ensuring reusable state` to facilitate an upcoming react feature.\n    // https://reactjs.org/docs/strict-mode.html#ensuring-reusable-state\n    // This will remount all the useEffects to ensure that there are no unexpected side effects.\n    // When react remounts the signIn hook of the AuthProvider, it will cause a race condition. Hence, we have to\n    // prevent the re-render of this hook as suggested in the following discussion.\n    // https://github.com/reactwg/react-18/discussions/18#discussioncomment-795623\n    if (reRenderCheckRef.current) {\n      return;\n    }\n\n    reRenderCheckRef.current = true;\n\n    (async (): Promise<void> => {\n      // Sync session state whenever sign-in completes (both redirect and embedded V2 flows).\n      // Pass the user returned by the SDK's sign-in flow so users/me result is not discarded.\n      await client.on('sign-in', async () => {\n        await updateSession();\n      });\n\n      // A session that ends elsewhere, such as a sign-out in another app, signs this app out too.\n      await client.on('sign-out', () => {\n        setUser(null);\n        setUserProfile(null);\n        setIsSignedInSync(false);\n      });\n\n      // Start auto-refresh with a soft failure. This also covers the case where the access token\n      // expired while the refresh token is still valid — startAutoRefreshToken() calls\n      // refreshAccessToken() immediately when timeUntilRefresh <= 0 — so the sign-in check below\n      // sees the refreshed state.\n      try {\n        await client.startAutoRefreshToken();\n      } catch (error) {\n        logger.warn('Failed to schedule automatic token refresh.', error);\n      }\n\n      // User is already authenticated. Restore the session and skip the sign-in path.\n      if (await client.isSignedIn()) {\n        await updateSession();\n\n        return;\n      }\n\n      const currentUrl: URL = new URL(window.location.href);\n      const hasAuthParamsResult: boolean =\n        hasAuthParams(currentUrl, config.afterSignInUrl!) && hasCalledForThisInstance(currentUrl, instanceId ?? 0);\n\n      if (hasAuthParamsResult) {\n        try {\n          const urlParams: URLSearchParams = currentUrl.searchParams;\n          const code: string | null = urlParams.get('code');\n          const executionIdFromUrl: string | null = urlParams.get('executionId');\n          const storedExecutionId: string | null = sessionStorage.getItem(\n            `${getVendorPrefix(config.vendor)}_execution_id`,\n          );\n\n          // A silent sign-in response is handled even without a code: an error such as\n          // login_required must still be relayed from the iframe to the waiting parent.\n          if ((code || SPAUtils.isSilentStatePresentInURL()) && !executionIdFromUrl && !storedExecutionId) {\n            await signIn();\n          }\n        } catch (error) {\n          throw new ThunderIDRuntimeError(\n            `Sign in failed: ${error instanceof Error ? error.message : String(JSON.stringify(error))}`,\n            'thunderid-signIn-Error',\n            'react',\n            'An error occurred while trying to sign in.',\n          );\n        }\n      }\n    })();\n  }, []);\n\n  /**\n   * Check if the user is signed in and update the state accordingly.\n   * This will also set an interval to check for the sign-in status every second\n   * until the user is signed in.\n   */\n  useEffect(() => {\n    let interval: NodeJS.Timeout;\n\n    (async (): Promise<void> => {\n      try {\n        const status: boolean = await client.isSignedIn();\n\n        setIsSignedInSync(status);\n\n        if (!status) {\n          interval = setInterval(async () => {\n            const newStatus: boolean = await client.isSignedIn();\n\n            if (newStatus) {\n              setIsSignedInSync(true);\n              clearInterval(interval);\n            }\n          }, 1000);\n        } else {\n          // TODO: Add a debug log to indicate that the user is already signed in.\n        }\n      } catch (error) {\n        setIsSignedInSync(false);\n      }\n    })();\n\n    return (): void => {\n      if (interval) {\n        clearInterval(interval);\n      }\n    };\n  }, [client]);\n\n  useEffect(() => {\n    (async (): Promise<void> => {\n      try {\n        const status: boolean = await client.isInitialized();\n\n        setIsInitializedSync(status);\n      } catch (error) {\n        setIsInitializedSync(false);\n      }\n    })();\n  }, [client]);\n\n  /**\n   * Track loading state changes from the ThunderID client\n   */\n  useEffect(() => {\n    const checkLoadingState = (): void => {\n      // Don't override loading state during critical session updates\n      if (isUpdatingSession) {\n        return;\n      }\n\n      // Don't set loading=false while auth params are in the URL and user isn't signed in yet.\n      // This prevents ProtectedRoute from redirecting before the sign-in effect processes the auth code.\n      const currentUrl: URL = new URL(window.location.href);\n      if (!isSignedInSync && hasAuthParams(currentUrl, config.afterSignInUrl!)) {\n        return;\n      }\n\n      setIsLoadingSync(client.isLoading());\n    };\n\n    // Initial check\n    checkLoadingState();\n\n    // Set up an interval to check for loading state changes\n    const interval: NodeJS.Timeout = setInterval(checkLoadingState, 100);\n\n    return (): void => {\n      clearInterval(interval);\n    };\n  }, [client, isLoadingSync, isSignedInSync, isUpdatingSession]);\n\n  const signInSilently = async (options?: SignInOptions): Promise<User | boolean> => {\n    try {\n      setIsUpdatingSession(true);\n      setIsLoadingSync(true);\n      return await client.signInSilently(options);\n    } catch (error) {\n      throw new ThunderIDRuntimeError(\n        `Error while signing in silently: ${error instanceof Error ? error.message : String(JSON.stringify(error))}`,\n        'thunderid-signInSilently-Error',\n        'react',\n        'An error occurred while trying to sign in silently.',\n      );\n    } finally {\n      setIsUpdatingSession(false);\n      setIsLoadingSync(client.isLoading());\n    }\n  };\n\n  const handleProfileUpdate = (payload: User): void => {\n    setUser(payload);\n    setUserProfile((prev: UserProfile | null) => ({\n      flattenedProfile: generateFlattenedUserProfile(payload),\n      profile: payload,\n    }));\n  };\n\n  const getDecodedIdToken: () => Promise<IdToken> = useCallback(\n    async (): Promise<IdToken> => client.getDecodedIdToken(),\n    [client],\n  );\n\n  const getIdToken: () => Promise<string> = useCallback(async (): Promise<string> => client.getIdToken(), [client]);\n\n  const getAccessToken: () => Promise<string> = useCallback(\n    async (): Promise<string> => client.getAccessToken(),\n    [client],\n  );\n\n  const getStorageManager: ThunderIDContextProps['getStorageManager'] = useCallback(async () => {\n    const storageManager: Awaited<ReturnType<ThunderIDContextProps['getStorageManager']>> =\n      storageManagerRef.current ?? (await client.getStorageManager());\n    if (storageManager) {\n      storageManagerRef.current = storageManager;\n    }\n    return storageManager;\n  }, [client]);\n\n  const request: (...args: any[]) => Promise<any> = useCallback(\n    async (...args: any[]): Promise<any> => client.request(...args),\n    [client],\n  );\n\n  const requestAll: (...args: any[]) => Promise<any> = useCallback(\n    async (...args: any[]): Promise<any> => client.requestAll(...args),\n    [client],\n  );\n\n  const exchangeToken: (exchangeConfig: any) => Promise<any> = useCallback(\n    async (exchangeConfig: any): Promise<any> => client.exchangeToken(exchangeConfig),\n    [client],\n  );\n\n  const signOut: (...args: any[]) => Promise<any> = useCallback(\n    async (...args: any[]): Promise<any> => client.signOut(...args),\n    [client],\n  );\n\n  const recover: ThunderIDContextProps['recover'] = useCallback(\n    async (payload?: EmbeddedRecoveryFlowRequest): Promise<EmbeddedRecoveryFlowResponse> =>\n      (await client.recover(payload)) as EmbeddedRecoveryFlowResponse,\n    [client],\n  );\n\n  const signUp: (...args: any[]) => Promise<any> = useCallback(\n    async (...args: any[]): Promise<any> => client.signUp(...args),\n    [client],\n  );\n\n  const clearSession: (...args: any[]) => Promise<any> = useCallback(\n    async (...args: any[]): Promise<any> => client.clearSession(...args),\n    [client],\n  );\n\n  const reInitialize: (reInitConfig: any) => Promise<any> = useCallback(\n    async (reInitConfig: any): Promise<any> => {\n      const result: any = await client.reInitialize(reInitConfig);\n\n      // Refresh React state from the reinitialized client so the context (config.endpoints,\n      // baseUrl, discovery) reflects the new configuration instead of the pre-reinitialization state.\n      const reinitializedConfig: ThunderIDReactConfig = await client.getConfiguration();\n      setConfig(reinitializedConfig);\n      setBaseUrl(reinitializedConfig.baseUrl ?? '');\n      setWellKnown(await client.getDiscoveryResponse());\n\n      return result;\n    },\n    [client],\n  );\n\n  const value: any = useMemo(\n    () => ({\n      afterSignInUrl: config.afterSignInUrl,\n      applicationId: config.applicationId,\n      baseUrl,\n      endpoints: config.endpoints,\n      scopes: config.scopes,\n      clearSession,\n      clientId,\n      discovery: {\n        wellKnown,\n      },\n      exchangeToken,\n      getAccessToken,\n      getDecodedIdToken,\n      getIdToken,\n      getStorageManager,\n      http: {\n        fetcher: httpOptions?.fetcher,\n        request,\n        requestAll,\n      },\n      instanceId,\n      invalidator,\n      isInitialized: isInitializedSync,\n      isLoading: isLoadingSync,\n      isSignedIn: isSignedInSync,\n      organizationChain,\n      organizationHandle: config?.organizationHandle,\n      preferences,\n      reInitialize,\n      recover,\n      signIn,\n      signInOptions,\n      tokenRequest,\n      signInSilently,\n      signInUrl,\n      signOut,\n      signUp,\n      signUpUrl,\n      user,\n      userSchema,\n      vendor: getVendorPrefix(config.vendor),\n    }),\n    [\n      applicationId,\n      config?.organizationHandle,\n      config.vendor,\n      config.afterSignInUrl,\n      config.endpoints,\n      config.scopes,\n      signInUrl,\n      signUpUrl,\n      baseUrl,\n      clientId,\n      wellKnown,\n      isInitializedSync,\n      isLoadingSync,\n      isSignedInSync,\n      signIn,\n      signInSilently,\n      user,\n      userSchema,\n      client,\n      signInOptions,\n      tokenRequest,\n      getDecodedIdToken,\n      clearSession,\n      exchangeToken,\n      httpOptions?.fetcher,\n      getAccessToken,\n      getStorageManager,\n      instanceId,\n      invalidator,\n      organizationChain,\n      preferences,\n      recover,\n      reInitialize,\n      request,\n      requestAll,\n      signOut,\n      signUp,\n    ],\n  );\n\n  return (\n    <ThunderIDContext.Provider value={value}>\n      <I18nProvider preferences={preferences?.i18n} vendor={getVendorPrefix(config.vendor)}>\n        <FlowMetaProvider enabled={preferences?.resolveFromMeta !== false} namespace={namespace}>\n          <ThemeProvider\n            theme={{\n              ...preferences?.theme?.overrides,\n              direction: preferences?.theme?.direction,\n            }}\n          >\n            <FlowProvider>\n              <UserProvider\n                profile={userProfile as UserProfile}\n                userSchema={userSchema}\n                onUpdateProfile={handleProfileUpdate}\n              >\n                <ComponentRendererProvider renderers={(extensions?.components?.renderers ?? {}) as any}>\n                  {children}\n                </ComponentRendererProvider>\n              </UserProvider>\n            </FlowProvider>\n          </ThemeProvider>\n        </FlowMetaProvider>\n      </I18nProvider>\n    </ThunderIDContext.Provider>\n  );\n};\n\nexport default ThunderIDProvider;\n"],"mappings":";;;;;;;;;;;;;;;;;;AAqCA,MAAMA,WAA0D,6BAC9D,oBACA,oBACD;AAOD,MAAMC,qBAAoE,EACxE,gBACA,iBACA,SAAS,gBACT,UACA,UACA,YACA,QACA,aACA,WACA,WACA,oBACA,eACA,eACA,cACA,aAAa,GACb,mBACA,UACA,QACA,WACA,MAAM,YACN,GAAG,WAC0D;AAI7D,uBAAsB,UAAU,OAAO;CAEvC,MAAMC,mBAAuC,OAAO,MAAM;CAC1D,MAAMC,SAA+B,cAAc,IAAIC,6BAAqB,WAAW,EAAE,CAAC,WAAW,CAAC;CACtG,MAAMC,cAAmC,cAAcC,mCAA2B,EAAE,EAAE,CAAC;CACvF,MAAMC,oBAAyB,OAAY,KAAK;CAChD,MAAM,EAAC,eAAe,6BAA4BC,uBAAe;CACjE,MAAM,CAAC,MAAM,WAAW,SAAsB,KAAK;CACnD,MAAM,CAAC,gBAAgB,qBAAqB,SAAkB,MAAM;CACpE,MAAM,CAAC,mBAAmB,wBAAwB,SAAkB,MAAM;CAC1E,MAAM,CAAC,eAAe,oBAAoB,SAAkB,KAAK;CAEjE,MAAM,CAAC,aAAa,kBAAkB,SAA6B,KAAK;CACxE,MAAM,CAAC,YAAY,iBAAiB,SAAiD,KAAK;CAC1F,MAAM,CAAC,SAAS,cAAc,SAAiB,kBAAkB,GAAG;CACpE,MAAM,CAAC,QAAQ,aAAa,SAA+B;EACzD,gBAAgB,kBAAkB,OAAO,SAAS;EAClD,iBAAiB,mBAAmB,OAAO,SAAS;EACpD;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA,GAAG;EACJ,CAAC;CAEF,MAAM,CAAC,mBAAmB,wBAAwB,SAAkB,MAAM;CAC1E,MAAM,CAAC,WAAW,gBAAgB,SAA0C,KAAK;CAIjF,MAAMC,0BAA2D,OAA6B,KAAK;AAEnG,iBAAgB;AACd,aAAW,kBAAkB,GAAG;IAC/B,CAAC,eAAe,CAAC;AAEpB,iBAAgB;AACd,GAAC,YAA2B;AAC1B,SAAM,OAAO,WAAW,OAAO;AAE/B,aADgD,MAAM,OAAO,kBAAkB,CACnD;AAC5B,gBAAa,MAAM,OAAO,sBAAsB,CAAC;MAC/C;IACH,EAAE,CAAC;CAEN,eAAe,uBAAsC;AACnD,MAAI;AAEF,wBAAqB,KAAK;AAC1B,oBAAiB,KAAK;GACtB,IAAIC,kBAA0B;GAE9B,MAAMC,eAAwB,MAAM,OAAO,mBAAmB;AAI9D,OAAI,eAAe,aAAa;AAC9B,sBAAkB,IAAI,MAAM,OAAO,kBAAkB,EAAE,QAAQ;AAC/D,eAAW,gBAAgB;;GAG7B,MAAMC,qBAA8B,aAAa,MAAM,qBAAqB;GAC5E,MAAMC,SAAe,6BAA6B,aAAa;GAC/D,IAAI,cAAc;GAClB,MAAMC,sBAA+B,MAAM,OAAO,YAAY;AAE9D,OAAI,uBAAuB,oBAAoB;AAC7C,QAAI;KACF,MAAM,iBAAiB,MAAMC,mBAAW;MACtC,SAAS;MACT,KAAK,wBAAwB,WAAW,OAAO;MAC/C;MACD,CAAC;AACF,mBAAc;MAAC,GAAG;MAAQ,GAAG;MAAe;aACrC,KAAK;AACZ,cAAO,KAAK,gDAAgD,IAAI;;AAGlE,QAAI;KACF,MAAM,UAAU,MAAMC,uBAAe;MACnC,SAAS;MACT,KAAK,wBAAwB,eAAe,OAAO;MACnD;MACD,CAAC;AACF,SAAI,SAAS,OACX,eAAc,QAAQ,OAAO;SAE7B,eAAc,KAAK;aAEd,KAAK;AACZ,mBAAc,KAAK;AACnB,cAAO,KAAK,6DAA6D,IAAI;;SAG/E,eAAc,KAAK;AAGrB,WAAQ,YAAY;AACpB,kBAAe;IACb,kBAAkB,6BAA6B,aAAa,EAAE,CAAC;IAC/D,SAAS;IACV,CAAC;AAIF,qBAAkB,oBAAoB;WAC/B,OAAO,WAEN;AAER,wBAAqB,MAAM;AAC3B,oBAAiB,OAAO,WAAW,CAAC;;;;;;;;;;CAWxC,eAAe,gBAA+B;AAC5C,MAAI,wBAAwB,QAC1B,QAAO,wBAAwB;AAGjC,0BAAwB,UAAU,sBAAsB,CAAC,cAAc;AACrE,2BAAwB,UAAU;IAClC;AAEF,SAAO,wBAAwB;;CAGjC,eAAe,OAAO,GAAG,MAAuD;EAG9E,MAAMC,OAAY,KAAK;EACvB,MAAMC,kBACJ,OAAO,SAAS,YAAY,SAAS,SAAS,iBAAiB,QAAQ,mBAAmB;AAE5F,MAAI;AACF,OAAI,CAAC,iBAAiB;AACpB,yBAAqB,KAAK;AAC1B,qBAAiB,KAAK;;AAGxB,UAAO,MAAM,OAAO,OAAO,GAAG,KAAK;WAC5B,OAAO;AACd,SAAM,IAAI,sBACR,mBAAmB,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,UAAU,MAAM,CAAC,IACzF,0BACA,SACA,6CACD;YACO;AACR,OAAI,CAAC,iBAAiB;AACpB,yBAAqB,MAAM;AAC3B,qBAAiB,OAAO,WAAW,CAAC;;;;;;;AAQ1C,iBAAgB;AAOd,MAAI,iBAAiB,QACnB;AAGF,mBAAiB,UAAU;AAE3B,GAAC,YAA2B;AAG1B,SAAM,OAAO,GAAG,WAAW,YAAY;AACrC,UAAM,eAAe;KACrB;AAGF,SAAM,OAAO,GAAG,kBAAkB;AAChC,YAAQ,KAAK;AACb,mBAAe,KAAK;AACpB,sBAAkB,MAAM;KACxB;AAMF,OAAI;AACF,UAAM,OAAO,uBAAuB;YAC7B,OAAO;AACd,aAAO,KAAK,+CAA+C,MAAM;;AAInE,OAAI,MAAM,OAAO,YAAY,EAAE;AAC7B,UAAM,eAAe;AAErB;;GAGF,MAAMC,aAAkB,IAAI,IAAI,OAAO,SAAS,KAAK;AAIrD,OAFE,cAAc,YAAY,OAAO,eAAgB,IAAI,yBAAyB,YAAY,cAAc,EAAE,CAG1G,KAAI;IACF,MAAMC,YAA6B,WAAW;IAC9C,MAAMC,OAAsB,UAAU,IAAI,OAAO;IACjD,MAAMC,qBAAoC,UAAU,IAAI,cAAc;IACtE,MAAMC,oBAAmC,eAAe,QACtD,GAAG,gBAAgB,OAAO,OAAO,CAAC,eACnC;AAID,SAAK,QAAQ,SAAS,2BAA2B,KAAK,CAAC,sBAAsB,CAAC,kBAC5E,OAAM,QAAQ;YAET,OAAO;AACd,UAAM,IAAI,sBACR,mBAAmB,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,UAAU,MAAM,CAAC,IACzF,0BACA,SACA,6CACD;;MAGH;IACH,EAAE,CAAC;;;;;;AAON,iBAAgB;EACd,IAAIC;AAEJ,GAAC,YAA2B;AAC1B,OAAI;IACF,MAAMC,SAAkB,MAAM,OAAO,YAAY;AAEjD,sBAAkB,OAAO;AAEzB,QAAI,CAAC,OACH,YAAW,YAAY,YAAY;AAGjC,SAF2B,MAAM,OAAO,YAAY,EAErC;AACb,wBAAkB,KAAK;AACvB,oBAAc,SAAS;;OAExB,IAAK;YAIH,OAAO;AACd,sBAAkB,MAAM;;MAExB;AAEJ,eAAmB;AACjB,OAAI,SACF,eAAc,SAAS;;IAG1B,CAAC,OAAO,CAAC;AAEZ,iBAAgB;AACd,GAAC,YAA2B;AAC1B,OAAI;AAGF,yBAFwB,MAAM,OAAO,eAAe,CAExB;YACrB,OAAO;AACd,yBAAqB,MAAM;;MAE3B;IACH,CAAC,OAAO,CAAC;;;;AAKZ,iBAAgB;EACd,MAAM,0BAAgC;AAEpC,OAAI,kBACF;GAKF,MAAMN,aAAkB,IAAI,IAAI,OAAO,SAAS,KAAK;AACrD,OAAI,CAAC,kBAAkB,cAAc,YAAY,OAAO,eAAgB,CACtE;AAGF,oBAAiB,OAAO,WAAW,CAAC;;AAItC,qBAAmB;EAGnB,MAAMK,WAA2B,YAAY,mBAAmB,IAAI;AAEpE,eAAmB;AACjB,iBAAc,SAAS;;IAExB;EAAC;EAAQ;EAAe;EAAgB;EAAkB,CAAC;CAE9D,MAAM,iBAAiB,OAAO,YAAqD;AACjF,MAAI;AACF,wBAAqB,KAAK;AAC1B,oBAAiB,KAAK;AACtB,UAAO,MAAM,OAAO,eAAe,QAAQ;WACpC,OAAO;AACd,SAAM,IAAI,sBACR,oCAAoC,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,UAAU,MAAM,CAAC,IAC1G,kCACA,SACA,sDACD;YACO;AACR,wBAAqB,MAAM;AAC3B,oBAAiB,OAAO,WAAW,CAAC;;;CAIxC,MAAM,uBAAuB,YAAwB;AACnD,UAAQ,QAAQ;AAChB,kBAAgB,UAA8B;GAC5C,kBAAkB,6BAA6B,QAAQ;GACvD,SAAS;GACV,EAAE;;CAGL,MAAME,oBAA4C,YAChD,YAA8B,OAAO,mBAAmB,EACxD,CAAC,OAAO,CACT;CAED,MAAMC,aAAoC,YAAY,YAA6B,OAAO,YAAY,EAAE,CAAC,OAAO,CAAC;CAEjH,MAAMC,iBAAwC,YAC5C,YAA6B,OAAO,gBAAgB,EACpD,CAAC,OAAO,CACT;CAED,MAAMC,oBAAgE,YAAY,YAAY;EAC5F,MAAMC,iBACJ,kBAAkB,WAAY,MAAM,OAAO,mBAAmB;AAChE,MAAI,eACF,mBAAkB,UAAU;AAE9B,SAAO;IACN,CAAC,OAAO,CAAC;CAEZ,MAAMC,UAA4C,YAChD,OAAO,GAAG,SAA8B,OAAO,QAAQ,GAAG,KAAK,EAC/D,CAAC,OAAO,CACT;CAED,MAAMC,aAA+C,YACnD,OAAO,GAAG,SAA8B,OAAO,WAAW,GAAG,KAAK,EAClE,CAAC,OAAO,CACT;CAED,MAAMC,gBAAuD,YAC3D,OAAO,mBAAsC,OAAO,cAAc,eAAe,EACjF,CAAC,OAAO,CACT;CAED,MAAMC,UAA4C,YAChD,OAAO,GAAG,SAA8B,OAAO,QAAQ,GAAG,KAAK,EAC/D,CAAC,OAAO,CACT;CAED,MAAMC,UAA4C,YAChD,OAAO,YACJ,MAAM,OAAO,QAAQ,QAAQ,EAChC,CAAC,OAAO,CACT;CAED,MAAMC,SAA2C,YAC/C,OAAO,GAAG,SAA8B,OAAO,OAAO,GAAG,KAAK,EAC9D,CAAC,OAAO,CACT;CAED,MAAMC,eAAiD,YACrD,OAAO,GAAG,SAA8B,OAAO,aAAa,GAAG,KAAK,EACpE,CAAC,OAAO,CACT;CAED,MAAMC,eAAoD,YACxD,OAAO,iBAAoC;EACzC,MAAMC,SAAc,MAAM,OAAO,aAAa,aAAa;EAI3D,MAAMC,sBAA4C,MAAM,OAAO,kBAAkB;AACjF,YAAU,oBAAoB;AAC9B,aAAW,oBAAoB,WAAW,GAAG;AAC7C,eAAa,MAAM,OAAO,sBAAsB,CAAC;AAEjD,SAAO;IAET,CAAC,OAAO,CACT;CAED,MAAMC,QAAa,eACV;EACL,gBAAgB,OAAO;EACvB,eAAe,OAAO;EACtB;EACA,WAAW,OAAO;EAClB,QAAQ,OAAO;EACf;EACA;EACA,WAAW,EACT,WACD;EACD;EACA;EACA;EACA;EACA;EACA,MAAM;GACJ,SAAS,aAAa;GACtB;GACA;GACD;EACD;EACA;EACA,eAAe;EACf,WAAW;EACX,YAAY;EACZ;EACA,oBAAoB,QAAQ;EAC5B;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA,QAAQ,gBAAgB,OAAO,OAAO;EACvC,GACD;EACE;EACA,QAAQ;EACR,OAAO;EACP,OAAO;EACP,OAAO;EACP,OAAO;EACP;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA,aAAa;EACb;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACD,CACF;AAED,QACE,oBAACC,yBAAiB;EAAgB;YAChC,oBAACC;GAAa,aAAa,aAAa;GAAM,QAAQ,gBAAgB,OAAO,OAAO;aAClF,oBAACC;IAAiB,SAAS,aAAa,oBAAoB;IAAkB;cAC5E,oBAACC;KACC,OAAO;MACL,GAAG,aAAa,OAAO;MACvB,WAAW,aAAa,OAAO;MAChC;eAED,oBAACC,kCACC,oBAACC;MACC,SAAS;MACG;MACZ,iBAAiB;gBAEjB,oBAACC;OAA0B,WAAY,YAAY,YAAY,aAAa,EAAE;OAC3E;QACyB;OACf,GACF;MACD;KACC;IACN;GACW;;AAIhC,gCAAe"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@thunderid/react",
-  "version": "1.4.1",
+  "version": "1.5.0",
   "description": "React SDK for ThunderID",
   "keywords": [
     "thunderid",
@@ -60,7 +60,7 @@
   "dependencies": {
     "@emotion/css": "11.13.5",
     "@floating-ui/react": "0.27.12",
-    "@thunderid/browser": "^1.3.1",
+    "@thunderid/browser": "^1.4.0",
     "dompurify": "3.4.17",
     "tslib": "2.8.1"
   },