@tonycodes/auth-react 1.1.0 → 1.1.1

package/dist/AuthProvider.js

@@ -264,7 +264,7 @@ export function AuthProvider({ config, children }) {
         return refreshToken();
     }, [accessToken, refreshToken]);
     const value = {
-        isAuthenticated: !!accessToken && !!organization,
+        isAuthenticated: !!accessToken && (config.requireOrg === false || !!organization),
         isLoading: isLoading || !resolved,
         user,
         organization,

package/dist/AuthProvider.js.map

@@ -1 +1 @@
-{"version":3,"file":"AuthProvider.js","sourceRoot":"","sources":["../src/AuthProvider.tsx"],"names":[],"mappings":";AAAA,OAAO,EAAE,aAAa,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAkB,MAAM,OAAO,CAAC;AAEhG,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAErD,MAAM,gBAAgB,GAAG,yBAAyB,CAAC;AAYnD,SAAS,SAAS,CAAC,KAAa;IAC9B,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QACnC,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;QACxD,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC;QAChE,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,4DAA4D,CAAC,CAAC;IAChF,CAAC;AACH,CAAC;AAED,MAAM,CAAC,MAAM,WAAW,GAAG,aAAa,CAAmB,IAAI,CAAC,CAAC;AACjE,MAAM,CAAC,MAAM,iBAAiB,GAAG,aAAa,CAA4B,IAAI,CAAC,CAAC;AAOhF;;;;;GAKG;AACH,KAAK,UAAU,aAAa,CAAC,MAAkB;IAC7C,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,IAAI,gBAAgB,CAAC;IACnD,IAAI,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;IAC3B,IAAI,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;IAE3B,gDAAgD;IAChD,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,OAAO,oBAAoB,MAAM,CAAC,QAAQ,SAAS,CAAC,CAAC;YAChF,IAAI,GAAG,CAAC,EAAE,EAAE,CAAC;gBACX,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;gBAC9B,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,SAAS,CAAC;gBAClC,IAAI,CAAC,MAAM;oBAAE,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,SAAS,CAAC;YACjD,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,kCAAkC;QACpC,CAAC;IACH,CAAC;IAED,qCAAqC;IACrC,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,WAAW,EAAE,CAAC;QAC7C,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC;IAClC,CAAC;IAED,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,GAAG,OAAO,CAAC,CAAC,cAAc;IAClC,CAAC;IAED,OAAO;QACL,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,OAAO;QACP,MAAM;QACN,MAAM,EAAE,MAAM,IAAI,MAAM;KACzB,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAqB;IAClE,wDAAwD;IACxD,cAAc,CAAC,MAAM,CAAC,CAAC;IAEvB,MAAM,CAAC,QAAQ,EAAE,WAAW,CAAC,GAAG,QAAQ,CAA4B,GAAG,EAAE;QACvE,kDAAkD;QAClD,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,IAAI,gBAAgB,CAAC;QACnD,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;YAClB,OAAO;gBACL,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,OAAO;gBACP,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM;aACvC,CAAC;QACJ,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,WAAW,EAAE,cAAc,CAAC,GAAG,QAAQ,CAAgB,IAAI,CAAC,CAAC;IACpE,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,QAAQ,CAAkB,IAAI,CAAC,CAAC;IACxD,MAAM,CAAC,YAAY,EAAE,eAAe,CAAC,GAAG,QAAQ,CAA0B,IAAI,CAAC,CAAC;IAChF,MAAM,CAAC,aAAa,EAAE,gBAAgB,CAAC,GAAG,QAAQ,CAAqB,EAAE,CAAC,CAAC;IAC3E,MAAM,CAAC,OAAO,EAAE,UAAU,CAAC,GAAG,QAAQ,CAAS,QAAQ,CAAC,CAAC;IACzD,MAAM,CAAC,YAAY,EAAE,eAAe,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IACxD,MAAM,CAAC,SAAS,EAAE,YAAY,CAAC,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;IACjD,MAAM,CAAC,YAAY,EAAE,eAAe,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IACxD,MAAM,eAAe,GAAG,MAAM,EAAiC,CAAC;IAChE,MAAM,cAAc,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAErC,4BAA4B;IAC5B,SAAS,CAAC,GAAG,EAAE;QACb,IAAI,QAAQ;YAAE,OAAO,CAAC,iCAAiC;QACvD,IAAI,OAAO,GAAG,IAAI,CAAC;QACnB,aAAa,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE;YAC/B,IAAI,OAAO;gBAAE,WAAW,CAAC,CAAC,CAAC,CAAC;QAC9B,CAAC,CAAC,CAAC;QACH,OAAO,GAAG,EAAE,GAAG,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;IACpC,CAAC,EAAE,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC;IAEvB,MAAM,eAAe,GAAG,WAAW,CAAC,CAAC,KAAa,EAAE,EAAE;QACpD,MAAM,OAAO,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;QAEjC,OAAO,CAAC;YACN,EAAE,EAAE,OAAO,CAAC,GAAG;YACf,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,MAAM;YAC5B,IAAI,EAAE,OAAO,CAAC,GAAG,EAAE,IAAI,KAAK,OAAO,IAAI,OAAO,CAAC,GAAG,EAAE,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ;YACzF,QAAQ,EAAE,OAAO,CAAC,SAAS;SAC5B,CAAC,CAAC;QAEH,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;YAChB,eAAe,CAAC;gBACd,EAAE,EAAE,OAAO,CAAC,GAAG,CAAC,EAAE;gBAClB,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,IAAI;gBACtB,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,IAAI;gBACtB,QAAQ,EAAE,IAAI;aACf,CAAC,CAAC;YACH,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC/B,CAAC;aAAM,CAAC;YACN,eAAe,CAAC,IAAI,CAAC,CAAC;YACtB,UAAU,CAAC,QAAQ,CAAC,CAAC;QACvB,CAAC;QAED,eAAe,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;QACtC,cAAc,CAAC,KAAK,CAAC,CAAC;QAEtB,OAAO,OAAO,CAAC;IACjB,CAAC,EAAE,EAAE,CAAC,CAAC;IAEP,MAAM,YAAY,GAAG,WAAW,CAAC,KAAK,IAA4B,EAAE;QAClE,IAAI,CAAC,QAAQ;YAAE,OAAO,IAAI,CAAC;QAC3B,IAAI,cAAc,CAAC,OAAO;YAAE,OAAO,IAAI,CAAC;QACxC,cAAc,CAAC,OAAO,GAAG,IAAI,CAAC;QAE9B,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,QAAQ,CAAC,MAAM,eAAe,EAAE;gBACzD,MAAM,EAAE,MAAM;gBACd,WAAW,EAAE,SAAS;gBACtB,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;aAChD,CAAC,CAAC;YAEH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;gBACZ,cAAc,CAAC,IAAI,CAAC,CAAC;gBACrB,OAAO,CAAC,IAAI,CAAC,CAAC;gBACd,eAAe,CAAC,IAAI,CAAC,CAAC;gBACtB,OAAO,IAAI,CAAC;YACd,CAAC;YAED,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;YAC9B,MAAM,OAAO,GAAG,eAAe,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;YAEnD,+CAA+C;YAC/C,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,GAAG,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YAClD,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,SAAS,GAAG,KAAM,EAAE,KAAM,CAAC,CAAC;YACvD,IAAI,eAAe,CAAC,OAAO;gBAAE,YAAY,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC;YACnE,eAAe,CAAC,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE;gBACxC,YAAY,EAAE,CAAC;YACjB,CAAC,EAAE,SAAS,CAAC,CAAC;YAEd,OAAO,IAAI,CAAC,YAAY,CAAC;QAC3B,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;gBAAS,CAAC;YACT,cAAc,CAAC,OAAO,GAAG,KAAK,CAAC;QACjC,CAAC;IACH,CAAC,EAAE,CAAC,QAAQ,EAAE,eAAe,CAAC,CAAC,CAAC;IAEhC,gCAAgC;IAChC,MAAM,kBAAkB,GAAG,WAAW,CAAC,KAAK,EAAE,KAAa,EAAE,EAAE;QAC7D,IAAI,CAAC,QAAQ;YAAE,OAAO;QACtB,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,QAAQ,CAAC,OAAO,oBAAoB,EAAE;gBAC/D,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,KAAK,EAAE,EAAE;aAC9C,CAAC,CAAC;YACH,IAAI,GAAG,CAAC,EAAE,EAAE,CAAC;gBACX,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;gBAC9B,gBAAgB,CAAC,IAAI,CAAC,aAAa,IAAI,EAAE,CAAC,CAAC;YAC7C,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,8CAA8C;QAChD,CAAC;IACH,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC;IAEf,uEAAuE;IACvE,SAAS,CAAC,GAAG,EAAE;QACb,IAAI,CAAC,QAAQ;YAAE,OAAO;QACtB,IAAI,OAAO,GAAG,IAAI,CAAC;QAEnB,KAAK,UAAU,IAAI;YACjB,MAAM,KAAK,GAAG,MAAM,YAAY,EAAE,CAAC;YACnC,IAAI,OAAO,EAAE,CAAC;gBACZ,IAAI,KAAK,EAAE,CAAC;oBACV,MAAM,kBAAkB,CAAC,KAAK,CAAC,CAAC;gBAClC,CAAC;gBACD,YAAY,CAAC,KAAK,CAAC,CAAC;YACtB,CAAC;QACH,CAAC;QAED,IAAI,EAAE,CAAC;QAEP,OAAO,GAAG,EAAE;YACV,OAAO,GAAG,KAAK,CAAC;YAChB,IAAI,eAAe,CAAC,OAAO;gBAAE,YAAY,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC;QACrE,CAAC,CAAC;IACJ,CAAC,EAAE,CAAC,QAAQ,EAAE,YAAY,EAAE,kBAAkB,CAAC,CAAC,CAAC;IAEjD,MAAM,KAAK,GAAG,WAAW,CAAC,CAAC,QAAiB,EAAE,EAAE;QAC9C,IAAI,CAAC,QAAQ;YAAE,OAAO;QACtB,MAAM,WAAW,GAAG,GAAG,QAAQ,CAAC,MAAM,gBAAgB,CAAC;QACvD,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;QAC3E,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC;YACjC,SAAS,EAAE,QAAQ,CAAC,QAAQ;YAC5B,YAAY,EAAE,WAAW;YACzB,KAAK;SACN,CAAC,CAAC;QACH,IAAI,QAAQ;YAAE,MAAM,CAAC,GAAG,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;QAC/C,MAAM,CAAC,QAAQ,CAAC,IAAI,GAAG,GAAG,QAAQ,CAAC,OAAO,cAAc,MAAM,EAAE,CAAC;IACnE,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC;IAEf,MAAM,MAAM,GAAG,WAAW,CAAC,KAAK,IAAI,EAAE;QACpC,IAAI,CAAC,QAAQ;YAAE,OAAO;QACtB,eAAe,CAAC,IAAI,CAAC,CAAC;QACtB,IAAI,CAAC;YACH,MAAM,KAAK,CAAC,GAAG,QAAQ,CAAC,MAAM,cAAc,EAAE;gBAC5C,MAAM,EAAE,MAAM;gBACd,WAAW,EAAE,SAAS;aACvB,CAAC,CAAC;QACL,CAAC;QAAC,MAAM,CAAC;YACP,cAAc;QAChB,CAAC;QACD,IAAI,eAAe,CAAC,OAAO;YAAE,YAAY,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC;QACnE,cAAc,CAAC,IAAI,CAAC,CAAC;QACrB,OAAO,CAAC,IAAI,CAAC,CAAC;QACd,eAAe,CAAC,IAAI,CAAC,CAAC;QACtB,gBAAgB,CAAC,EAAE,CAAC,CAAC;QACrB,eAAe,CAAC,KAAK,CAAC,CAAC;IACzB,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC;IAEf,MAAM,kBAAkB,GAAG,WAAW,CACpC,KAAK,EAAE,KAAa,EAAE,EAAE;QACtB,IAAI,CAAC,QAAQ;YAAE,OAAO;QACtB,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,QAAQ,CAAC,MAAM,kBAAkB,EAAE;gBAC5D,MAAM,EAAE,MAAM;gBACd,WAAW,EAAE,SAAS;gBACtB,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;gBAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;aACxC,CAAC,CAAC;YAEH,IAAI,GAAG,CAAC,EAAE,EAAE,CAAC;gBACX,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;gBAC9B,eAAe,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;YACrC,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,iBAAiB;QACnB,CAAC;IACH,CAAC,EACD,CAAC,QAAQ,EAAE,eAAe,CAAC,CAC5B,CAAC;IAEF,MAAM,OAAO,GAAG,OAAO,KAAK,OAAO,IAAI,OAAO,KAAK,OAAO,CAAC;IAC3D,MAAM,OAAO,GAAG,OAAO,KAAK,OAAO,CAAC;IAEpC,MAAM,cAAc,GAAG,WAAW,CAAC,KAAK,IAA4B,EAAE;QACpE,IAAI,WAAW,EAAE,CAAC;YAChB,IAAI,CAAC;gBACH,MAAM,OAAO,GAAG,SAAS,CAAC,WAAW,CAAC,CAAC;gBACvC,IAAI,OAAO,CAAC,GAAG,GAAG,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,KAAM,EAAE,CAAC;oBAC7C,OAAO,WAAW,CAAC;gBACrB,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,0BAA0B;YAC5B,CAAC;QACH,CAAC;QACD,OAAO,YAAY,EAAE,CAAC;IACxB,CAAC,EAAE,CAAC,WAAW,EAAE,YAAY,CAAC,CAAC,CAAC;IAEhC,MAAM,KAAK,GAAc;QACvB,eAAe,EAAE,CAAC,CAAC,WAAW,IAAI,CAAC,CAAC,YAAY;QAChD,SAAS,EAAE,SAAS,IAAI,CAAC,QAAQ;QACjC,IAAI;QACJ,YAAY;QACZ,MAAM,EAAE,YAAY,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,YAAY,CAAC,EAAE,EAAE,IAAI,EAAE,YAAY,CAAC,IAAI,EAAE,IAAI,EAAE,YAAY,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI;QACvG,OAAO;QACP,OAAO;QACP,OAAO;QACP,YAAY;QACZ,eAAe,EAAE,YAAY;QAC7B,WAAW;QACX,cAAc;QACd,KAAK;QACL,MAAM;QACN,kBAAkB;QAClB,aAAa;QACb,YAAY;QACZ,WAAW,EAAE,KAAK;QAClB,UAAU,EAAE,IAAI;QAChB,aAAa,EAAE,KAAK;KACrB,CAAC;IAEF,qEAAqE;IACrE,MAAM,WAAW,GAAuB,QAAQ,IAAI;QAClD,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,OAAO,EAAE,MAAM,CAAC,OAAO,IAAI,gBAAgB;QAC3C,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,EAAE;QAC3B,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,IAAI,EAAE;KAC7C,CAAC;IAEF,OAAO,CACL,KAAC,iBAAiB,CAAC,QAAQ,IAAC,KAAK,EAAE,WAAW,YAC5C,KAAC,WAAW,CAAC,QAAQ,IAAC,KAAK,EAAE,KAAK,YAAG,QAAQ,GAAwB,GAC1C,CAC9B,CAAC;AACJ,CAAC"}
+{"version":3,"file":"AuthProvider.js","sourceRoot":"","sources":["../src/AuthProvider.tsx"],"names":[],"mappings":";AAAA,OAAO,EAAE,aAAa,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAkB,MAAM,OAAO,CAAC;AAEhG,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAErD,MAAM,gBAAgB,GAAG,yBAAyB,CAAC;AAYnD,SAAS,SAAS,CAAC,KAAa;IAC9B,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QACnC,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;QACxD,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC;QAChE,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,4DAA4D,CAAC,CAAC;IAChF,CAAC;AACH,CAAC;AAED,MAAM,CAAC,MAAM,WAAW,GAAG,aAAa,CAAmB,IAAI,CAAC,CAAC;AACjE,MAAM,CAAC,MAAM,iBAAiB,GAAG,aAAa,CAA4B,IAAI,CAAC,CAAC;AAOhF;;;;;GAKG;AACH,KAAK,UAAU,aAAa,CAAC,MAAkB;IAC7C,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,IAAI,gBAAgB,CAAC;IACnD,IAAI,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;IAC3B,IAAI,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;IAE3B,gDAAgD;IAChD,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,OAAO,oBAAoB,MAAM,CAAC,QAAQ,SAAS,CAAC,CAAC;YAChF,IAAI,GAAG,CAAC,EAAE,EAAE,CAAC;gBACX,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;gBAC9B,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,SAAS,CAAC;gBAClC,IAAI,CAAC,MAAM;oBAAE,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,SAAS,CAAC;YACjD,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,kCAAkC;QACpC,CAAC;IACH,CAAC;IAED,qCAAqC;IACrC,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,WAAW,EAAE,CAAC;QAC7C,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC;IAClC,CAAC;IAED,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,GAAG,OAAO,CAAC,CAAC,cAAc;IAClC,CAAC;IAED,OAAO;QACL,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,OAAO;QACP,MAAM;QACN,MAAM,EAAE,MAAM,IAAI,MAAM;KACzB,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAqB;IAClE,wDAAwD;IACxD,cAAc,CAAC,MAAM,CAAC,CAAC;IAEvB,MAAM,CAAC,QAAQ,EAAE,WAAW,CAAC,GAAG,QAAQ,CAA4B,GAAG,EAAE;QACvE,kDAAkD;QAClD,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,IAAI,gBAAgB,CAAC;QACnD,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;YAClB,OAAO;gBACL,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,OAAO;gBACP,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM;aACvC,CAAC;QACJ,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,WAAW,EAAE,cAAc,CAAC,GAAG,QAAQ,CAAgB,IAAI,CAAC,CAAC;IACpE,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,QAAQ,CAAkB,IAAI,CAAC,CAAC;IACxD,MAAM,CAAC,YAAY,EAAE,eAAe,CAAC,GAAG,QAAQ,CAA0B,IAAI,CAAC,CAAC;IAChF,MAAM,CAAC,aAAa,EAAE,gBAAgB,CAAC,GAAG,QAAQ,CAAqB,EAAE,CAAC,CAAC;IAC3E,MAAM,CAAC,OAAO,EAAE,UAAU,CAAC,GAAG,QAAQ,CAAS,QAAQ,CAAC,CAAC;IACzD,MAAM,CAAC,YAAY,EAAE,eAAe,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IACxD,MAAM,CAAC,SAAS,EAAE,YAAY,CAAC,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;IACjD,MAAM,CAAC,YAAY,EAAE,eAAe,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IACxD,MAAM,eAAe,GAAG,MAAM,EAAiC,CAAC;IAChE,MAAM,cAAc,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAErC,4BAA4B;IAC5B,SAAS,CAAC,GAAG,EAAE;QACb,IAAI,QAAQ;YAAE,OAAO,CAAC,iCAAiC;QACvD,IAAI,OAAO,GAAG,IAAI,CAAC;QACnB,aAAa,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE;YAC/B,IAAI,OAAO;gBAAE,WAAW,CAAC,CAAC,CAAC,CAAC;QAC9B,CAAC,CAAC,CAAC;QACH,OAAO,GAAG,EAAE,GAAG,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;IACpC,CAAC,EAAE,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC;IAEvB,MAAM,eAAe,GAAG,WAAW,CAAC,CAAC,KAAa,EAAE,EAAE;QACpD,MAAM,OAAO,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;QAEjC,OAAO,CAAC;YACN,EAAE,EAAE,OAAO,CAAC,GAAG;YACf,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,MAAM;YAC5B,IAAI,EAAE,OAAO,CAAC,GAAG,EAAE,IAAI,KAAK,OAAO,IAAI,OAAO,CAAC,GAAG,EAAE,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ;YACzF,QAAQ,EAAE,OAAO,CAAC,SAAS;SAC5B,CAAC,CAAC;QAEH,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;YAChB,eAAe,CAAC;gBACd,EAAE,EAAE,OAAO,CAAC,GAAG,CAAC,EAAE;gBAClB,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,IAAI;gBACtB,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,IAAI;gBACtB,QAAQ,EAAE,IAAI;aACf,CAAC,CAAC;YACH,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC/B,CAAC;aAAM,CAAC;YACN,eAAe,CAAC,IAAI,CAAC,CAAC;YACtB,UAAU,CAAC,QAAQ,CAAC,CAAC;QACvB,CAAC;QAED,eAAe,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;QACtC,cAAc,CAAC,KAAK,CAAC,CAAC;QAEtB,OAAO,OAAO,CAAC;IACjB,CAAC,EAAE,EAAE,CAAC,CAAC;IAEP,MAAM,YAAY,GAAG,WAAW,CAAC,KAAK,IAA4B,EAAE;QAClE,IAAI,CAAC,QAAQ;YAAE,OAAO,IAAI,CAAC;QAC3B,IAAI,cAAc,CAAC,OAAO;YAAE,OAAO,IAAI,CAAC;QACxC,cAAc,CAAC,OAAO,GAAG,IAAI,CAAC;QAE9B,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,QAAQ,CAAC,MAAM,eAAe,EAAE;gBACzD,MAAM,EAAE,MAAM;gBACd,WAAW,EAAE,SAAS;gBACtB,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;aAChD,CAAC,CAAC;YAEH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;gBACZ,cAAc,CAAC,IAAI,CAAC,CAAC;gBACrB,OAAO,CAAC,IAAI,CAAC,CAAC;gBACd,eAAe,CAAC,IAAI,CAAC,CAAC;gBACtB,OAAO,IAAI,CAAC;YACd,CAAC;YAED,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;YAC9B,MAAM,OAAO,GAAG,eAAe,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;YAEnD,+CAA+C;YAC/C,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,GAAG,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YAClD,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,SAAS,GAAG,KAAM,EAAE,KAAM,CAAC,CAAC;YACvD,IAAI,eAAe,CAAC,OAAO;gBAAE,YAAY,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC;YACnE,eAAe,CAAC,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE;gBACxC,YAAY,EAAE,CAAC;YACjB,CAAC,EAAE,SAAS,CAAC,CAAC;YAEd,OAAO,IAAI,CAAC,YAAY,CAAC;QAC3B,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;gBAAS,CAAC;YACT,cAAc,CAAC,OAAO,GAAG,KAAK,CAAC;QACjC,CAAC;IACH,CAAC,EAAE,CAAC,QAAQ,EAAE,eAAe,CAAC,CAAC,CAAC;IAEhC,gCAAgC;IAChC,MAAM,kBAAkB,GAAG,WAAW,CAAC,KAAK,EAAE,KAAa,EAAE,EAAE;QAC7D,IAAI,CAAC,QAAQ;YAAE,OAAO;QACtB,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,QAAQ,CAAC,OAAO,oBAAoB,EAAE;gBAC/D,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,KAAK,EAAE,EAAE;aAC9C,CAAC,CAAC;YACH,IAAI,GAAG,CAAC,EAAE,EAAE,CAAC;gBACX,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;gBAC9B,gBAAgB,CAAC,IAAI,CAAC,aAAa,IAAI,EAAE,CAAC,CAAC;YAC7C,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,8CAA8C;QAChD,CAAC;IACH,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC;IAEf,uEAAuE;IACvE,SAAS,CAAC,GAAG,EAAE;QACb,IAAI,CAAC,QAAQ;YAAE,OAAO;QACtB,IAAI,OAAO,GAAG,IAAI,CAAC;QAEnB,KAAK,UAAU,IAAI;YACjB,MAAM,KAAK,GAAG,MAAM,YAAY,EAAE,CAAC;YACnC,IAAI,OAAO,EAAE,CAAC;gBACZ,IAAI,KAAK,EAAE,CAAC;oBACV,MAAM,kBAAkB,CAAC,KAAK,CAAC,CAAC;gBAClC,CAAC;gBACD,YAAY,CAAC,KAAK,CAAC,CAAC;YACtB,CAAC;QACH,CAAC;QAED,IAAI,EAAE,CAAC;QAEP,OAAO,GAAG,EAAE;YACV,OAAO,GAAG,KAAK,CAAC;YAChB,IAAI,eAAe,CAAC,OAAO;gBAAE,YAAY,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC;QACrE,CAAC,CAAC;IACJ,CAAC,EAAE,CAAC,QAAQ,EAAE,YAAY,EAAE,kBAAkB,CAAC,CAAC,CAAC;IAEjD,MAAM,KAAK,GAAG,WAAW,CAAC,CAAC,QAAiB,EAAE,EAAE;QAC9C,IAAI,CAAC,QAAQ;YAAE,OAAO;QACtB,MAAM,WAAW,GAAG,GAAG,QAAQ,CAAC,MAAM,gBAAgB,CAAC;QACvD,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;QAC3E,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC;YACjC,SAAS,EAAE,QAAQ,CAAC,QAAQ;YAC5B,YAAY,EAAE,WAAW;YACzB,KAAK;SACN,CAAC,CAAC;QACH,IAAI,QAAQ;YAAE,MAAM,CAAC,GAAG,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;QAC/C,MAAM,CAAC,QAAQ,CAAC,IAAI,GAAG,GAAG,QAAQ,CAAC,OAAO,cAAc,MAAM,EAAE,CAAC;IACnE,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC;IAEf,MAAM,MAAM,GAAG,WAAW,CAAC,KAAK,IAAI,EAAE;QACpC,IAAI,CAAC,QAAQ;YAAE,OAAO;QACtB,eAAe,CAAC,IAAI,CAAC,CAAC;QACtB,IAAI,CAAC;YACH,MAAM,KAAK,CAAC,GAAG,QAAQ,CAAC,MAAM,cAAc,EAAE;gBAC5C,MAAM,EAAE,MAAM;gBACd,WAAW,EAAE,SAAS;aACvB,CAAC,CAAC;QACL,CAAC;QAAC,MAAM,CAAC;YACP,cAAc;QAChB,CAAC;QACD,IAAI,eAAe,CAAC,OAAO;YAAE,YAAY,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC;QACnE,cAAc,CAAC,IAAI,CAAC,CAAC;QACrB,OAAO,CAAC,IAAI,CAAC,CAAC;QACd,eAAe,CAAC,IAAI,CAAC,CAAC;QACtB,gBAAgB,CAAC,EAAE,CAAC,CAAC;QACrB,eAAe,CAAC,KAAK,CAAC,CAAC;IACzB,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC;IAEf,MAAM,kBAAkB,GAAG,WAAW,CACpC,KAAK,EAAE,KAAa,EAAE,EAAE;QACtB,IAAI,CAAC,QAAQ;YAAE,OAAO;QACtB,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,QAAQ,CAAC,MAAM,kBAAkB,EAAE;gBAC5D,MAAM,EAAE,MAAM;gBACd,WAAW,EAAE,SAAS;gBACtB,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;gBAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;aACxC,CAAC,CAAC;YAEH,IAAI,GAAG,CAAC,EAAE,EAAE,CAAC;gBACX,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;gBAC9B,eAAe,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;YACrC,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,iBAAiB;QACnB,CAAC;IACH,CAAC,EACD,CAAC,QAAQ,EAAE,eAAe,CAAC,CAC5B,CAAC;IAEF,MAAM,OAAO,GAAG,OAAO,KAAK,OAAO,IAAI,OAAO,KAAK,OAAO,CAAC;IAC3D,MAAM,OAAO,GAAG,OAAO,KAAK,OAAO,CAAC;IAEpC,MAAM,cAAc,GAAG,WAAW,CAAC,KAAK,IAA4B,EAAE;QACpE,IAAI,WAAW,EAAE,CAAC;YAChB,IAAI,CAAC;gBACH,MAAM,OAAO,GAAG,SAAS,CAAC,WAAW,CAAC,CAAC;gBACvC,IAAI,OAAO,CAAC,GAAG,GAAG,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,KAAM,EAAE,CAAC;oBAC7C,OAAO,WAAW,CAAC;gBACrB,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,0BAA0B;YAC5B,CAAC;QACH,CAAC;QACD,OAAO,YAAY,EAAE,CAAC;IACxB,CAAC,EAAE,CAAC,WAAW,EAAE,YAAY,CAAC,CAAC,CAAC;IAEhC,MAAM,KAAK,GAAc;QACvB,eAAe,EAAE,CAAC,CAAC,WAAW,IAAI,CAAC,MAAM,CAAC,UAAU,KAAK,KAAK,IAAI,CAAC,CAAC,YAAY,CAAC;QACjF,SAAS,EAAE,SAAS,IAAI,CAAC,QAAQ;QACjC,IAAI;QACJ,YAAY;QACZ,MAAM,EAAE,YAAY,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,YAAY,CAAC,EAAE,EAAE,IAAI,EAAE,YAAY,CAAC,IAAI,EAAE,IAAI,EAAE,YAAY,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI;QACvG,OAAO;QACP,OAAO;QACP,OAAO;QACP,YAAY;QACZ,eAAe,EAAE,YAAY;QAC7B,WAAW;QACX,cAAc;QACd,KAAK;QACL,MAAM;QACN,kBAAkB;QAClB,aAAa;QACb,YAAY;QACZ,WAAW,EAAE,KAAK;QAClB,UAAU,EAAE,IAAI;QAChB,aAAa,EAAE,KAAK;KACrB,CAAC;IAEF,qEAAqE;IACrE,MAAM,WAAW,GAAuB,QAAQ,IAAI;QAClD,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,OAAO,EAAE,MAAM,CAAC,OAAO,IAAI,gBAAgB;QAC3C,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,EAAE;QAC3B,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,IAAI,EAAE;KAC7C,CAAC;IAEF,OAAO,CACL,KAAC,iBAAiB,CAAC,QAAQ,IAAC,KAAK,EAAE,WAAW,YAC5C,KAAC,WAAW,CAAC,QAAQ,IAAC,KAAK,EAAE,KAAK,YAAG,QAAQ,GAAwB,GAC1C,CAC9B,CAAC;AACJ,CAAC"}

package/dist/types.d.ts

@@ -12,6 +12,11 @@ export interface AuthConfig {
      * Auto-discovered from server or defaults to appUrl.
      */
     apiUrl?: string;
+    /**
+     * Whether to require an organization for the user to be considered authenticated.
+     * Defaults to true. Set to false for single-user apps without org context.
+     */
+    requireOrg?: boolean;
 }
 /** Resolved config with all URLs populated (after discovery) */
 export interface ResolvedAuthConfig {

package/dist/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,UAAU;IACzB,6CAA6C;IAC7C,QAAQ,EAAE,MAAM,CAAC;IACjB,4DAA4D;IAC5D,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,6FAA6F;IAC7F,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;;;;;OAKG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,gEAAgE;AAChE,MAAM,WAAW,kBAAkB;IACjC,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,QAAQ;IACvB,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;CACzB;AAED,MAAM,WAAW,gBAAgB;IAC/B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;CACzB;AAED,MAAM,WAAW,SAAS;IACxB,eAAe,EAAE,OAAO,CAAC;IACzB,SAAS,EAAE,OAAO,CAAC;IACnB,IAAI,EAAE,QAAQ,GAAG,IAAI,CAAC;IACtB,YAAY,EAAE,gBAAgB,GAAG,IAAI,CAAC;IACtC,MAAM,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;IAC1D,OAAO,EAAE,OAAO,CAAC;IACjB,OAAO,EAAE,OAAO,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,YAAY,EAAE,OAAO,CAAC;IACtB,eAAe,EAAE,OAAO,CAAC;IACzB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,cAAc,EAAE,MAAM,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IAC7C,KAAK,EAAE,CAAC,QAAQ,CAAC,EAAE,MAAM,KAAK,IAAI,CAAC;IACnC,MAAM,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5B,kBAAkB,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACrD,aAAa,EAAE,gBAAgB,EAAE,CAAC;IAClC,YAAY,EAAE,OAAO,CAAC;IACtB,WAAW,EAAE,OAAO,CAAC;IACrB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,aAAa,EAAE,OAAO,CAAC;CACxB"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,UAAU;IACzB,6CAA6C;IAC7C,QAAQ,EAAE,MAAM,CAAC;IACjB,4DAA4D;IAC5D,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,6FAA6F;IAC7F,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;;;;;OAKG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;;;OAGG;IACH,UAAU,CAAC,EAAE,OAAO,CAAC;CACtB;AAED,gEAAgE;AAChE,MAAM,WAAW,kBAAkB;IACjC,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,QAAQ;IACvB,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;CACzB;AAED,MAAM,WAAW,gBAAgB;IAC/B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;CACzB;AAED,MAAM,WAAW,SAAS;IACxB,eAAe,EAAE,OAAO,CAAC;IACzB,SAAS,EAAE,OAAO,CAAC;IACnB,IAAI,EAAE,QAAQ,GAAG,IAAI,CAAC;IACtB,YAAY,EAAE,gBAAgB,GAAG,IAAI,CAAC;IACtC,MAAM,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;IAC1D,OAAO,EAAE,OAAO,CAAC;IACjB,OAAO,EAAE,OAAO,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,YAAY,EAAE,OAAO,CAAC;IACtB,eAAe,EAAE,OAAO,CAAC;IACzB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,cAAc,EAAE,MAAM,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IAC7C,KAAK,EAAE,CAAC,QAAQ,CAAC,EAAE,MAAM,KAAK,IAAI,CAAC;IACnC,MAAM,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5B,kBAAkB,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACrD,aAAa,EAAE,gBAAgB,EAAE,CAAC;IAClC,YAAY,EAAE,OAAO,CAAC;IACtB,WAAW,EAAE,OAAO,CAAC;IACrB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,aAAa,EAAE,OAAO,CAAC;CACxB"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tonycodes/auth-react",
-  "version": "1.1.0",
+  "version": "1.1.1",
   "description": "React SDK for Tony Auth service",
   "type": "module",
   "main": "dist/index.js",
@@ -12,32 +12,9 @@
     },
     "./style.css": "./dist/style.css"
   },
-  "files": [
-    "dist"
-  ],
   "scripts": {
     "build": "tsc && npx tailwindcss -i src/style.css -o dist/style.css --minify",
-    "dev": "tsc --watch",
-    "prepublishOnly": "npm run build"
-  },
-  "keywords": [
-    "react",
-    "auth",
-    "authentication",
-    "sdk"
-  ],
-  "author": "Tony <tony@tony.codes>",
-  "license": "MIT",
-  "repository": {
-    "type": "git",
-    "url": "git+https://github.com/tonycodes/auth-react.git"
-  },
-  "homepage": "https://github.com/tonycodes/auth-react#readme",
-  "bugs": {
-    "url": "https://github.com/tonycodes/auth-react/issues"
-  },
-  "publishConfig": {
-    "access": "public"
+    "dev": "tsc --watch"
   },
   "peerDependencies": {
     "react": ">=18.0.0",

package/src/AuthCallback.tsx

@@ -0,0 +1,128 @@
+import { useContext, useEffect, useRef, useState } from 'react';
+import { AuthConfigContext } from './AuthProvider.js';
+
+interface AuthCallbackProps {
+  /** API URL to exchange code (overrides config.apiUrl, defaults to current origin) */
+  apiUrl?: string;
+  /** Where to redirect after successful auth */
+  onSuccess?: (returnTo: string) => void;
+  /** Called on auth failure */
+  onError?: (error: string) => void;
+}
+
+/**
+ * Component that handles the OAuth callback.
+ * Mount at /auth/callback route in your React router.
+ *
+ * When mounted, this component:
+ * 1. Extracts the authorization code from the URL
+ * 2. Calls /api/auth/callback on the backend to exchange the code for tokens
+ * 3. Redirects to the original page (from state)
+ *
+ * Your Express backend should mount callbackHandler() at /api/auth/callback.
+ *
+ * The API URL is resolved in this order:
+ * 1. `apiUrl` prop (explicit override)
+ * 2. `config.apiUrl` from AuthProvider
+ * 3. `config.appUrl` from AuthProvider
+ * 4. Current window origin (fallback)
+ */
+export function AuthCallback({ apiUrl: apiUrlProp, onSuccess, onError }: AuthCallbackProps) {
+  const config = useContext(AuthConfigContext);
+  const [error, setError] = useState<string | null>(null);
+  const exchangedRef = useRef(false);
+
+  useEffect(() => {
+    // Guard against React 18 strict mode double-firing
+    if (exchangedRef.current) return;
+    exchangedRef.current = true;
+
+    const params = new URLSearchParams(window.location.search);
+    const code = params.get('code');
+    const state = params.get('state');
+    const errorParam = params.get('error');
+
+    if (errorParam) {
+      setError(errorParam);
+      if (onError) {
+        onError(errorParam);
+      } else {
+        let redirectReturnTo = '/';
+        if (state) {
+          try {
+            const decoded = JSON.parse(atob(state));
+            redirectReturnTo = decoded.returnTo || '/';
+          } catch {
+            // Invalid state — default to /
+          }
+        }
+        const loginUrl = new URL('/login', window.location.origin);
+        loginUrl.searchParams.set('error', errorParam);
+        if (redirectReturnTo !== '/') loginUrl.searchParams.set('returnTo', redirectReturnTo);
+        window.location.href = loginUrl.toString();
+      }
+      return;
+    }
+
+    if (!code) {
+      setError('Missing authorization code');
+      onError?.('Missing authorization code');
+      return;
+    }
+
+    // Resolve API URL: prop > config.apiUrl > config.appUrl > current origin
+    const baseUrl = apiUrlProp || config?.apiUrl || config?.appUrl || window.location.origin;
+
+    async function exchange() {
+      try {
+        const res = await fetch(`${baseUrl}/api/auth/callback?code=${encodeURIComponent(code!)}`, {
+          credentials: 'include',
+        });
+
+        if (!res.ok) {
+          const data = await res.json();
+          throw new Error(data.error || 'Authentication failed');
+        }
+
+        // Decode state to get returnTo path
+        let returnTo = '/';
+        if (state) {
+          try {
+            const decoded = JSON.parse(atob(state));
+            returnTo = decoded.returnTo || '/';
+          } catch {
+            // Invalid state — default to /
+          }
+        }
+
+        if (onSuccess) {
+          onSuccess(returnTo);
+        } else {
+          window.location.href = returnTo;
+        }
+      } catch (err) {
+        const message = err instanceof Error ? err.message : 'Authentication failed';
+        setError(message);
+        onError?.(message);
+      }
+    }
+
+    exchange();
+  }, [apiUrlProp, config, onSuccess, onError]);
+
+  if (error) {
+    return (
+      <div style={{ padding: '2rem', textAlign: 'center' }}>
+        <h2>Authentication Failed</h2>
+        <p>{error}</p>
+        <a href="/">Go Home</a>
+      </div>
+    );
+  }
+
+  return (
+    <div style={{ padding: '2rem', textAlign: 'center' }}>
+      <p>Signing in...</p>
+    </div>
+  );
+}

package/src/AuthProvider.tsx

@@ -0,0 +1,331 @@
+import { createContext, useCallback, useEffect, useRef, useState, type ReactNode } from 'react';
+import type { AuthConfig, ResolvedAuthConfig, AuthUser, AuthOrganization, AuthState } from './types.js';
+import { validateConfig } from './validateConfig.js';
+
+const DEFAULT_AUTH_URL = 'https://auth.tony.codes';
+
+interface JWTPayload {
+  sub: string;
+  email: string;
+  name: string | null;
+  avatarUrl: string | null;
+  org: { id: string; name: string; slug: string; role: string } | null;
+  isSuperAdmin: boolean;
+  exp: number;
+}
+
+function decodeJWT(token: string): JWTPayload {
+  try {
+    const base64 = token.split('.')[1];
+    if (!base64) throw new Error('Invalid token structure');
+    const json = atob(base64.replace(/-/g, '+').replace(/_/g, '/'));
+    return JSON.parse(json);
+  } catch {
+    throw new Error('Failed to decode access token — the token may be malformed');
+  }
+}
+
+export const AuthContext = createContext<AuthState | null>(null);
+export const AuthConfigContext = createContext<ResolvedAuthConfig | null>(null);
+
+interface AuthProviderProps {
+  config: AuthConfig;
+  children: ReactNode;
+}
+
+/**
+ * Resolve config by discovering missing URLs from the auth service.
+ * 1. If appUrl provided explicitly → use it, skip discovery
+ * 2. Otherwise → fetch from /api/client-apps/:clientId/config
+ * 3. Fallback → use window.location.origin
+ */
+async function resolveConfig(config: AuthConfig): Promise<ResolvedAuthConfig> {
+  const authUrl = config.authUrl || DEFAULT_AUTH_URL;
+  let appUrl = config.appUrl;
+  let apiUrl = config.apiUrl;
+
+  // If appUrl is already provided, skip discovery
+  if (!appUrl) {
+    try {
+      const res = await fetch(`${authUrl}/api/client-apps/${config.clientId}/config`);
+      if (res.ok) {
+        const data = await res.json();
+        appUrl = data.appUrl || undefined;
+        if (!apiUrl) apiUrl = data.apiUrl || undefined;
+      }
+    } catch {
+      // Discovery failed — use fallback
+    }
+  }
+
+  // Fallback to window.location.origin
+  if (!appUrl && typeof window !== 'undefined') {
+    appUrl = window.location.origin;
+  }
+
+  if (!appUrl) {
+    appUrl = authUrl; // Last resort
+  }
+
+  return {
+    clientId: config.clientId,
+    authUrl,
+    appUrl,
+    apiUrl: apiUrl || appUrl,
+  };
+}
+
+export function AuthProvider({ config, children }: AuthProviderProps) {
+  // Validate config on initialization (throws if invalid)
+  validateConfig(config);
+
+  const [resolved, setResolved] = useState<ResolvedAuthConfig | null>(() => {
+    // If all URLs are provided, resolve synchronously
+    const authUrl = config.authUrl || DEFAULT_AUTH_URL;
+    if (config.appUrl) {
+      return {
+        clientId: config.clientId,
+        authUrl,
+        appUrl: config.appUrl,
+        apiUrl: config.apiUrl || config.appUrl,
+      };
+    }
+    return null;
+  });
+
+  const [accessToken, setAccessToken] = useState<string | null>(null);
+  const [user, setUser] = useState<AuthUser | null>(null);
+  const [organization, setOrganization] = useState<AuthOrganization | null>(null);
+  const [organizations, setOrganizations] = useState<AuthOrganization[]>([]);
+  const [orgRole, setOrgRole] = useState<string>('member');
+  const [isSuperAdmin, setIsSuperAdmin] = useState(false);
+  const [isLoading, setIsLoading] = useState(true);
+  const [isLoggingOut, setIsLoggingOut] = useState(false);
+  const refreshTimerRef = useRef<ReturnType<typeof setTimeout>>();
+  const refreshLockRef = useRef(false);
+
+  // Discover config if needed
+  useEffect(() => {
+    if (resolved) return; // Already resolved synchronously
+    let mounted = true;
+    resolveConfig(config).then((r) => {
+      if (mounted) setResolved(r);
+    });
+    return () => { mounted = false; };
+  }, [config, resolved]);
+
+  const updateFromToken = useCallback((token: string) => {
+    const payload = decodeJWT(token);
+
+    setUser({
+      id: payload.sub,
+      email: payload.email,
+      name: payload.name || 'User',
+      role: payload.org?.role === 'owner' || payload.org?.role === 'admin' ? 'admin' : 'member',
+      imageUrl: payload.avatarUrl,
+    });
+
+    if (payload.org) {
+      setOrganization({
+        id: payload.org.id,
+        name: payload.org.name,
+        slug: payload.org.slug,
+        imageUrl: null,
+      });
+      setOrgRole(payload.org.role);
+    } else {
+      setOrganization(null);
+      setOrgRole('member');
+    }
+
+    setIsSuperAdmin(payload.isSuperAdmin);
+    setAccessToken(token);
+
+    return payload;
+  }, []);
+
+  const refreshToken = useCallback(async (): Promise<string | null> => {
+    if (!resolved) return null;
+    if (refreshLockRef.current) return null;
+    refreshLockRef.current = true;
+
+    try {
+      const res = await fetch(`${resolved.apiUrl}/auth/refresh`, {
+        method: 'POST',
+        credentials: 'include',
+        headers: { 'Content-Type': 'application/json' },
+      });
+
+      if (!res.ok) {
+        setAccessToken(null);
+        setUser(null);
+        setOrganization(null);
+        return null;
+      }
+
+      const data = await res.json();
+      const payload = updateFromToken(data.access_token);
+
+      // Schedule next refresh 1 minute before expiry
+      const expiresIn = payload.exp * 1000 - Date.now();
+      const refreshIn = Math.max(expiresIn - 60_000, 10_000);
+      if (refreshTimerRef.current) clearTimeout(refreshTimerRef.current);
+      refreshTimerRef.current = setTimeout(() => {
+        refreshToken();
+      }, refreshIn);
+
+      return data.access_token;
+    } catch {
+      return null;
+    } finally {
+      refreshLockRef.current = false;
+    }
+  }, [resolved, updateFromToken]);
+
+  // Fetch user organizations list
+  const fetchOrganizations = useCallback(async (token: string) => {
+    if (!resolved) return;
+    try {
+      const res = await fetch(`${resolved.authUrl}/api/organizations`, {
+        headers: { Authorization: `Bearer ${token}` },
+      });
+      if (res.ok) {
+        const data = await res.json();
+        setOrganizations(data.organizations || []);
+      }
+    } catch {
+      // Silent failure — orgs list is supplementary
+    }
+  }, [resolved]);
+
+  // Initial auth check — try to refresh on mount (after config resolves)
+  useEffect(() => {
+    if (!resolved) return;
+    let mounted = true;
+
+    async function init() {
+      const token = await refreshToken();
+      if (mounted) {
+        if (token) {
+          await fetchOrganizations(token);
+        }
+        setIsLoading(false);
+      }
+    }
+
+    init();
+
+    return () => {
+      mounted = false;
+      if (refreshTimerRef.current) clearTimeout(refreshTimerRef.current);
+    };
+  }, [resolved, refreshToken, fetchOrganizations]);
+
+  const login = useCallback((provider?: string) => {
+    if (!resolved) return;
+    const redirectUri = `${resolved.appUrl}/auth/callback`;
+    const state = btoa(JSON.stringify({ returnTo: window.location.pathname }));
+    const params = new URLSearchParams({
+      client_id: resolved.clientId,
+      redirect_uri: redirectUri,
+      state,
+    });
+    if (provider) params.set('provider', provider);
+    window.location.href = `${resolved.authUrl}/authorize?${params}`;
+  }, [resolved]);
+
+  const logout = useCallback(async () => {
+    if (!resolved) return;
+    setIsLoggingOut(true);
+    try {
+      await fetch(`${resolved.apiUrl}/auth/logout`, {
+        method: 'POST',
+        credentials: 'include',
+      });
+    } catch {
+      // Best-effort
+    }
+    if (refreshTimerRef.current) clearTimeout(refreshTimerRef.current);
+    setAccessToken(null);
+    setUser(null);
+    setOrganization(null);
+    setOrganizations([]);
+    setIsLoggingOut(false);
+  }, [resolved]);
+
+  const switchOrganization = useCallback(
+    async (orgId: string) => {
+      if (!resolved) return;
+      try {
+        const res = await fetch(`${resolved.apiUrl}/auth/switch-org`, {
+          method: 'POST',
+          credentials: 'include',
+          headers: { 'Content-Type': 'application/json' },
+          body: JSON.stringify({ org_id: orgId }),
+        });
+
+        if (res.ok) {
+          const data = await res.json();
+          updateFromToken(data.access_token);
+        }
+      } catch {
+        // Silent failure
+      }
+    },
+    [resolved, updateFromToken],
+  );
+
+  const isAdmin = orgRole === 'admin' || orgRole === 'owner';
+  const isOwner = orgRole === 'owner';
+
+  const getAccessToken = useCallback(async (): Promise<string | null> => {
+    if (accessToken) {
+      try {
+        const payload = decodeJWT(accessToken);
+        if (payload.exp * 1000 - Date.now() > 60_000) {
+          return accessToken;
+        }
+      } catch {
+        // Fall through to refresh
+      }
+    }
+    return refreshToken();
+  }, [accessToken, refreshToken]);
+
+  const value: AuthState = {
+    isAuthenticated: !!accessToken && (config.requireOrg === false || !!organization),
+    isLoading: isLoading || !resolved,
+    user,
+    organization,
+    tenant: organization ? { id: organization.id, name: organization.name, slug: organization.slug } : null,
+    isAdmin,
+    isOwner,
+    orgRole,
+    isSuperAdmin,
+    isPlatformAdmin: isSuperAdmin,
+    accessToken,
+    getAccessToken,
+    login,
+    logout,
+    switchOrganization,
+    organizations,
+    isLoggingOut,
+    isLoggingIn: false,
+    loginError: null,
+    impersonating: false,
+  };
+
+  // Use resolved config for context, or a placeholder during discovery
+  const configValue: ResolvedAuthConfig = resolved || {
+    clientId: config.clientId,
+    authUrl: config.authUrl || DEFAULT_AUTH_URL,
+    appUrl: config.appUrl || '',
+    apiUrl: config.apiUrl || config.appUrl || '',
+  };
+
+  return (
+    <AuthConfigContext.Provider value={configValue}>
+      <AuthContext.Provider value={value}>{children}</AuthContext.Provider>
+    </AuthConfigContext.Provider>
+  );
+}

package/src/OrganizationSwitcher.tsx

@@ -0,0 +1,75 @@
+import { useState, useRef, useEffect } from 'react';
+import { useAuth } from './useAuth.js';
+
+interface OrganizationSwitcherProps {
+  className?: string;
+}
+
+export function OrganizationSwitcher({ className = '' }: OrganizationSwitcherProps) {
+  const { organization, organizations, switchOrganization } = useAuth();
+  const [isOpen, setIsOpen] = useState(false);
+  const dropdownRef = useRef<HTMLDivElement>(null);
+
+  // Close dropdown when clicking outside
+  useEffect(() => {
+    function handleClickOutside(event: MouseEvent) {
+      if (dropdownRef.current && !dropdownRef.current.contains(event.target as Node)) {
+        setIsOpen(false);
+      }
+    }
+    document.addEventListener('mousedown', handleClickOutside);
+    return () => document.removeEventListener('mousedown', handleClickOutside);
+  }, []);
+
+  if (organizations.length <= 1) {
+    // Single org — just display name
+    return (
+      <div className={className}>
+        <span>{organization?.name || 'No organization'}</span>
+      </div>
+    );
+  }
+
+  return (
+    <div ref={dropdownRef} className={`relative ${className}`}>
+      <button
+        onClick={() => setIsOpen(!isOpen)}
+        className="flex items-center gap-2 px-3 py-2 text-sm border border-gray-200 dark:border-gray-700 rounded-lg hover:bg-gray-50 dark:hover:bg-gray-800 transition-colors"
+      >
+        <span className="font-medium">{organization?.name || 'Select org'}</span>
+        <svg
+          className={`w-4 h-4 transition-transform ${isOpen ? 'rotate-180' : ''}`}
+          fill="none"
+          viewBox="0 0 24 24"
+          stroke="currentColor"
+        >
+          <path strokeLinecap="round" strokeLinejoin="round" strokeWidth={2} d="M19 9l-7 7-7-7" />
+        </svg>
+      </button>
+
+      {isOpen && (
+        <div className="absolute top-full left-0 mt-1 w-64 bg-white dark:bg-gray-900 border border-gray-200 dark:border-gray-700 rounded-lg shadow-lg z-50">
+          <div className="py-1">
+            {organizations.map((org) => (
+              <button
+                key={org.id}
+                onClick={() => {
+                  switchOrganization(org.id);
+                  setIsOpen(false);
+                }}
+                className={`w-full text-left px-4 py-2 text-sm hover:bg-gray-50 dark:hover:bg-gray-800 transition-colors ${
+                  org.id === organization?.id
+                    ? 'bg-blue-50 dark:bg-blue-900/20 text-blue-600 dark:text-blue-400'
+                    : 'text-gray-700 dark:text-gray-300'
+                }`}
+              >
+                <div className="font-medium">{org.name}</div>
+                <div className="text-xs text-gray-400">{org.slug}</div>
+              </button>
+            ))}
+          </div>
+        </div>
+      )}
+    </div>
+  );
+}

package/src/SignInForm.tsx

@@ -0,0 +1,202 @@
+import { useEffect, useState } from 'react';
+import { useAuthConfig } from './useAuth.js';
+import { useProviders, type SSOProvider } from './useProviders.js';
+
+type Mode = 'signin' | 'signup';
+
+const ERROR_MESSAGES: Record<string, string> = {
+  account_not_found: 'No account found with that login. Sign up to create one.',
+  oauth_failed: 'Something went wrong during sign in. Please try again.',
+  missing_code: 'Authorization failed. Please try again.',
+  invalid_state: 'Session expired. Please try again.',
+};
+
+const GITHUB_ICON = (
+  <svg viewBox="0 0 24 24" width="20" height="20" fill="currentColor">
+    <path d="M12 2C6.477 2 2 6.484 2 12.017c0 4.425 2.865 8.18 6.839 9.504.5.092.682-.217.682-.483 0-.237-.008-.868-.013-1.703-2.782.605-3.369-1.343-3.369-1.343-.454-1.158-1.11-1.466-1.11-1.466-.908-.62.069-.608.069-.608 1.003.07 1.531 1.032 1.531 1.032.892 1.53 2.341 1.088 2.91.832.092-.647.35-1.088.636-1.338-2.22-.253-4.555-1.113-4.555-4.951 0-1.093.39-1.988 1.029-2.688-.103-.253-.446-1.272.098-2.65 0 0 .84-.27 2.75 1.026A9.564 9.564 0 0 1 12 6.844a9.59 9.59 0 0 1 2.504.337c1.909-1.296 2.747-1.027 2.747-1.027.546 1.379.202 2.398.1 2.651.64.7 1.028 1.595 1.028 2.688 0 3.848-2.339 4.695-4.566 4.943.359.309.678.92.678 1.855 0 1.338-.012 2.419-.012 2.747 0 .268.18.58.688.482A10.02 10.02 0 0 0 22 12.017C22 6.484 17.522 2 12 2z" />
+  </svg>
+);
+
+const GOOGLE_ICON = (
+  <svg viewBox="0 0 24 24" width="20" height="20">
+    <path fill="#4285F4" d="M22.56 12.25c0-.78-.07-1.53-.2-2.25H12v4.26h5.92c-.26 1.37-1.04 2.53-2.21 3.31v2.77h3.57c2.08-1.92 3.28-4.74 3.28-8.09z" />
+    <path fill="#34A853" d="M12 23c2.97 0 5.46-.98 7.28-2.66l-3.57-2.77c-.98.66-2.23 1.06-3.71 1.06-2.86 0-5.29-1.93-6.16-4.53H2.18v2.84C3.99 20.53 7.7 23 12 23z" />
+    <path fill="#FBBC05" d="M5.84 14.09c-.22-.66-.35-1.36-.35-2.09s.13-1.43.35-2.09V7.07H2.18C1.43 8.55 1 10.22 1 12s.43 3.45 1.18 4.93l2.85-2.22.81-.62z" />
+    <path fill="#EA4335" d="M12 5.38c1.62 0 3.06.56 4.21 1.64l3.15-3.15C17.45 2.09 14.97 1 12 1 7.7 1 3.99 3.47 2.18 7.07l3.66 2.84c.87-2.6 3.3-4.53 6.16-4.53z" />
+  </svg>
+);
+
+const APPLE_ICON = (
+  <svg viewBox="0 0 24 24" width="20" height="20" fill="currentColor">
+    <path d="M17.05 20.28c-.98.95-2.05.8-3.08.35-1.09-.46-2.09-.48-3.24 0-1.44.62-2.2.44-3.06-.35C2.79 15.25 3.51 7.59 9.05 7.31c1.35.07 2.29.74 3.08.8 1.18-.24 2.31-.93 3.57-.84 1.51.12 2.65.72 3.4 1.8-3.12 1.87-2.38 5.98.48 7.13-.57 1.5-1.31 2.99-2.54 4.09l.01-.01zM12.03 7.25c-.15-2.23 1.66-4.07 3.74-4.25.29 2.58-2.34 4.5-3.74 4.25z" />
+  </svg>
+);
+
+const BITBUCKET_ICON = (
+  <svg viewBox="0 0 24 24" width="20" height="20" fill="currentColor">
+    <path d="M.778 1.213a.768.768 0 0 0-.768.892l3.263 19.81c.084.5.515.868 1.022.873H19.95a.772.772 0 0 0 .77-.646l3.27-20.03a.768.768 0 0 0-.768-.891L.778 1.213zM14.52 15.53H9.522L8.17 8.466h7.561l-1.211 7.064z" />
+  </svg>
+);
+
+interface SignInFormProps {
+  /** List of provider IDs to show (for manual control). Overrides autoFetch when provided. */
+  providers?: SSOProvider[];
+  /** Whether to automatically fetch providers from the auth service. Defaults to true. */
+  autoFetch?: boolean;
+  className?: string;
+}
+
+export function SignInForm({ providers: propProviders, autoFetch = true, className }: SignInFormProps) {
+  const config = useAuthConfig();
+  const { providers: fetchedProviders, isLoading: providersLoading } = useProviders();
+  const [activeTab, setActiveTab] = useState<Mode>('signin');
+  const [errorMessage, setErrorMessage] = useState<string | null>(null);
+  const [returnTo, setReturnTo] = useState('/');
+
+  // Use prop providers if explicitly provided, otherwise use fetched providers
+  const enabledProviders: SSOProvider[] = propProviders
+    ? propProviders
+    : autoFetch
+      ? fetchedProviders.map((p) => p.id)
+      : ['github']; // fallback default
+
+  useEffect(() => {
+    const params = new URLSearchParams(window.location.search);
+    const errorParam = params.get('error');
+    const tabParam = params.get('tab') as Mode | null;
+    const returnToParam = params.get('returnTo');
+
+    if (returnToParam) setReturnTo(returnToParam);
+
+    if (errorParam) {
+      setErrorMessage(ERROR_MESSAGES[errorParam] || `Authentication error: ${errorParam}`);
+      if (errorParam === 'account_not_found') {
+        setActiveTab('signup');
+      }
+    }
+
+    if (tabParam === 'signin' || tabParam === 'signup') {
+      setActiveTab(tabParam);
+    }
+  }, []);
+
+  function handleOAuth(provider: string) {
+    const redirectUri = `${config.appUrl}/auth/callback`;
+    const state = btoa(JSON.stringify({ returnTo }));
+    const params = new URLSearchParams({
+      client_id: config.clientId,
+      redirect_uri: redirectUri,
+      state,
+      provider,
+      mode: activeTab,
+    });
+    window.location.href = `${config.authUrl}/authorize?${params}`;
+  }
+
+  function switchTab(tab: Mode) {
+    setActiveTab(tab);
+    setErrorMessage(null);
+  }
+
+  function tabClass(tab: Mode): string {
+    const isActive = activeTab === tab;
+    return [
+      'flex-1 py-2 text-sm font-medium rounded-lg text-center cursor-pointer transition-colors',
+      isActive ? 'bg-white text-zinc-900 shadow-sm' : 'text-zinc-500 hover:text-zinc-700',
+    ].join(' ');
+  }
+
+  const buttonText = (provider: string) => {
+    const providerNames: Record<string, string> = {
+      github: 'GitHub',
+      google: 'Google',
+      apple: 'Apple',
+      bitbucket: 'Bitbucket',
+    };
+    const name = providerNames[provider] || provider;
+    return activeTab === 'signin' ? `Sign in with ${name}` : `Sign up with ${name}`;
+  };
+
+  return (
+    <div className={className || ''}>
+      {/* Tab toggle */}
+      <div className="flex gap-1 p-1 bg-zinc-100 rounded-xl mb-6">
+        <button type="button" className={tabClass('signin')} onClick={() => switchTab('signin')}>
+          Sign In
+        </button>
+        <button type="button" className={tabClass('signup')} onClick={() => switchTab('signup')}>
+          Sign Up
+        </button>
+      </div>
+
+      {/* Error message */}
+      {errorMessage && (
+        <div className="mb-4 p-3 rounded-lg bg-red-50 border border-red-200 text-red-700 text-sm">
+          {errorMessage}
+        </div>
+      )}
+
+      {/* Loading state */}
+      {autoFetch && !propProviders && providersLoading ? (
+        <div className="flex items-center justify-center py-4">
+          <div className="h-5 w-5 animate-spin rounded-full border-2 border-zinc-300 border-t-zinc-600" />
+        </div>
+      ) : (
+        <div className="space-y-3">
+          {/* GitHub */}
+          {enabledProviders.includes('github') && (
+            <button
+              type="button"
+              className="w-full flex items-center justify-center gap-3 px-6 py-3 bg-zinc-900 text-white font-medium rounded-xl hover:bg-zinc-800 transition-colors cursor-pointer"
+              onClick={() => handleOAuth('github')}
+            >
+              {GITHUB_ICON}
+              <span>{buttonText('github')}</span>
+            </button>
+          )}
+
+          {/* Google */}
+          {enabledProviders.includes('google') && (
+            <button
+              type="button"
+              className="w-full flex items-center justify-center gap-3 px-6 py-3 bg-white text-zinc-900 font-medium rounded-xl border border-zinc-300 hover:bg-zinc-50 transition-colors cursor-pointer"
+              onClick={() => handleOAuth('google')}
+            >
+              {GOOGLE_ICON}
+              <span>{buttonText('google')}</span>
+            </button>
+          )}
+
+          {/* Apple */}
+          {enabledProviders.includes('apple') && (
+            <button
+              type="button"
+              className="w-full flex items-center justify-center gap-3 px-6 py-3 bg-black text-white font-medium rounded-xl hover:bg-zinc-900 transition-colors cursor-pointer"
+              onClick={() => handleOAuth('apple')}
+            >
+              {APPLE_ICON}
+              <span>{buttonText('apple')}</span>
+            </button>
+          )}
+
+          {/* Bitbucket */}
+          {enabledProviders.includes('bitbucket') && (
+            <button
+              type="button"
+              className="w-full flex items-center justify-center gap-3 px-6 py-3 bg-blue-600 text-white font-medium rounded-xl hover:bg-blue-700 transition-colors cursor-pointer"
+              onClick={() => handleOAuth('bitbucket')}
+            >
+              {BITBUCKET_ICON}
+              <span>{buttonText('bitbucket')}</span>
+            </button>
+          )}
+        </div>
+      )}
+
+      {/* Terms */}
+      <p className="mt-6 text-center text-xs text-zinc-400">
+        By continuing, you agree to our terms of service.
+      </p>
+    </div>
+  );
+}

package/src/components.tsx

@@ -0,0 +1,40 @@
+import type { ReactNode } from 'react';
+import { useAuth } from './useAuth.js';
+
+interface AuthGateProps {
+  children: ReactNode;
+}
+
+/**
+ * Renders children only when user is authenticated
+ */
+export function SignedIn({ children }: AuthGateProps) {
+  const { isAuthenticated, isLoading } = useAuth();
+  if (isLoading || !isAuthenticated) return null;
+  return <>{children}</>;
+}
+
+/**
+ * Renders children only when user is NOT authenticated
+ */
+export function SignedOut({ children }: AuthGateProps) {
+  const { isAuthenticated, isLoading } = useAuth();
+  if (isLoading || isAuthenticated) return null;
+  return <>{children}</>;
+}
+
+/**
+ * Redirects to auth service sign-in when user is not authenticated
+ */
+export function RedirectToSignIn() {
+  const { isAuthenticated, isLoading, login } = useAuth();
+
+  if (isLoading) return null;
+
+  if (!isAuthenticated) {
+    login();
+    return null;
+  }
+
+  return null;
+}

package/src/index.ts

@@ -0,0 +1,9 @@
+export { AuthProvider } from './AuthProvider.js';
+export { useAuth, useAuthConfig } from './useAuth.js';
+export { useProviders, type SSOProvider, type ProviderInfo, type UseProvidersResult } from './useProviders.js';
+export { SignedIn, SignedOut, RedirectToSignIn } from './components.js';
+export { OrganizationSwitcher } from './OrganizationSwitcher.js';
+export { AuthCallback } from './AuthCallback.js';
+export { SignInForm } from './SignInForm.js';
+export { AuthConfigError } from './validateConfig.js';
+export type { AuthConfig, ResolvedAuthConfig, AuthUser, AuthOrganization, AuthState } from './types.js';

package/src/style.css

@@ -0,0 +1 @@
+@tailwind utilities;

package/src/types.ts

@@ -0,0 +1,66 @@
+export interface AuthConfig {
+  /** Client ID registered with auth service */
+  clientId: string;
+  /** Auth service URL. Defaults to https://auth.tony.codes */
+  authUrl?: string;
+  /** This app's base URL. Auto-discovered from server or defaults to window.location.origin */
+  appUrl?: string;
+  /**
+   * API base URL for proxied auth endpoints (callback, refresh, logout).
+   * Required if your API runs on a different subdomain than your frontend
+   * (e.g., api.myapp.test vs myapp.test).
+   * Auto-discovered from server or defaults to appUrl.
+   */
+  apiUrl?: string;
+  /**
+   * Whether to require an organization for the user to be considered authenticated.
+   * Defaults to true. Set to false for single-user apps without org context.
+   */
+  requireOrg?: boolean;
+}
+
+/** Resolved config with all URLs populated (after discovery) */
+export interface ResolvedAuthConfig {
+  clientId: string;
+  authUrl: string;
+  appUrl: string;
+  apiUrl: string;
+}
+
+export interface AuthUser {
+  id: string;
+  email: string;
+  name: string;
+  role: string;
+  imageUrl: string | null;
+}
+
+export interface AuthOrganization {
+  id: string;
+  name: string;
+  slug: string;
+  imageUrl: string | null;
+}
+
+export interface AuthState {
+  isAuthenticated: boolean;
+  isLoading: boolean;
+  user: AuthUser | null;
+  organization: AuthOrganization | null;
+  tenant: { id: string; name: string; slug: string } | null; // legacy alias
+  isAdmin: boolean;
+  isOwner: boolean;
+  orgRole: string;
+  isSuperAdmin: boolean;
+  isPlatformAdmin: boolean;
+  accessToken: string | null;
+  getAccessToken: () => Promise<string | null>;
+  login: (provider?: string) => void;
+  logout: () => Promise<void>;
+  switchOrganization: (orgId: string) => Promise<void>;
+  organizations: AuthOrganization[];
+  isLoggingOut: boolean;
+  isLoggingIn: boolean;
+  loginError: string | null;
+  impersonating: boolean;
+}

package/src/useAuth.ts

@@ -0,0 +1,19 @@
+import { useContext } from 'react';
+import { AuthContext, AuthConfigContext } from './AuthProvider.js';
+import type { ResolvedAuthConfig, AuthState } from './types.js';
+
+export function useAuth(): AuthState {
+  const context = useContext(AuthContext);
+  if (!context) {
+    throw new Error('useAuth must be used within an AuthProvider');
+  }
+  return context;
+}
+
+export function useAuthConfig(): ResolvedAuthConfig {
+  const config = useContext(AuthConfigContext);
+  if (!config) {
+    throw new Error('useAuthConfig must be used within an AuthProvider');
+  }
+  return config;
+}

package/src/useProviders.ts

@@ -0,0 +1,136 @@
+import { useCallback, useEffect, useState } from 'react';
+import { useAuthConfig } from './useAuth.js';
+
+export type SSOProvider = 'github' | 'google' | 'apple' | 'bitbucket';
+
+export interface ProviderInfo {
+  id: SSOProvider;
+  name: string;
+  enabled: boolean;
+}
+
+export interface UseProvidersResult {
+  providers: ProviderInfo[];
+  isLoading: boolean;
+  error: string | null;
+  /** Force refetch, bypassing cache */
+  refresh: () => void;
+}
+
+// ─── Module-level cache ──────────────────────────────────────────────────
+
+interface CacheEntry {
+  providers: ProviderInfo[];
+  fetchedAt: number;
+}
+
+const CACHE_TTL = 60_000; // 60 seconds
+const cache = new Map<string, CacheEntry>();
+
+function getCacheKey(authUrl: string, clientId: string): string {
+  return `${authUrl}::${clientId}`;
+}
+
+function getCachedProviders(key: string): CacheEntry | null {
+  const entry = cache.get(key);
+  if (!entry) return null;
+  return entry;
+}
+
+function isStale(entry: CacheEntry): boolean {
+  return Date.now() - entry.fetchedAt > CACHE_TTL;
+}
+
+async function fetchProviders(authUrl: string, clientId: string): Promise<ProviderInfo[]> {
+  const url = new URL(`${authUrl}/providers`);
+  url.searchParams.set('client_id', clientId);
+
+  const res = await fetch(url.toString());
+  if (!res.ok) {
+    throw new Error('Failed to fetch providers');
+  }
+
+  const data = await res.json();
+  return data.providers || [];
+}
+
+// ─── Hook ────────────────────────────────────────────────────────────────
+
+/**
+ * Hook to fetch available SSO providers from the auth service.
+ * Uses module-level cache with 60s TTL and stale-while-revalidate.
+ * Clears cache on window.focus for admin changes to take effect.
+ */
+export function useProviders(): UseProvidersResult {
+  const config = useAuthConfig();
+  const cacheKey = getCacheKey(config.authUrl, config.clientId);
+
+  // Initialize from cache if available
+  const cached = getCachedProviders(cacheKey);
+  const [providers, setProviders] = useState<ProviderInfo[]>(cached?.providers || []);
+  const [isLoading, setIsLoading] = useState(!cached);
+  const [error, setError] = useState<string | null>(null);
+  const [refreshCounter, setRefreshCounter] = useState(0);
+
+  const refresh = useCallback(() => {
+    cache.delete(cacheKey);
+    setRefreshCounter((c: number) => c + 1);
+  }, [cacheKey]);
+
+  useEffect(() => {
+    let mounted = true;
+
+    async function doFetch(showLoading: boolean) {
+      if (showLoading) setIsLoading(true);
+      try {
+        const result = await fetchProviders(config.authUrl, config.clientId);
+        cache.set(cacheKey, { providers: result, fetchedAt: Date.now() });
+        if (mounted) {
+          setProviders(result);
+          setError(null);
+        }
+      } catch (err) {
+        if (mounted) {
+          setError(err instanceof Error ? err.message : 'Failed to fetch providers');
+          // Keep stale data if we have it
+          if (!cached) setProviders([]);
+        }
+      } finally {
+        if (mounted) setIsLoading(false);
+      }
+    }
+
+    const entry = getCachedProviders(cacheKey);
+
+    if (!entry) {
+      // No cache — fetch with loading state
+      doFetch(true);
+    } else if (isStale(entry)) {
+      // Stale cache — show cached data, refresh in background
+      setProviders(entry.providers);
+      setIsLoading(false);
+      doFetch(false);
+    } else {
+      // Fresh cache — use it directly
+      setProviders(entry.providers);
+      setIsLoading(false);
+    }
+
+    // Refetch on window focus (admin changes take effect when tab refocused)
+    function handleFocus() {
+      const current = getCachedProviders(cacheKey);
+      if (!current || isStale(current)) {
+        doFetch(false);
+      }
+    }
+
+    window.addEventListener('focus', handleFocus);
+
+    return () => {
+      mounted = false;
+      window.removeEventListener('focus', handleFocus);
+    };
+  }, [config.authUrl, config.clientId, cacheKey, refreshCounter]);
+
+  return { providers, isLoading, error, refresh };
+}

package/src/validateConfig.ts

@@ -0,0 +1,94 @@
+import type { AuthConfig } from './types.js';
+
+/**
+ * Configuration validation errors for better developer experience.
+ */
+export class AuthConfigError extends Error {
+  constructor(message: string) {
+    super(message);
+    this.name = 'AuthConfigError';
+  }
+}
+
+/**
+ * Validates AuthConfig and throws descriptive errors if invalid.
+ * Called at initialization time to fail fast with helpful messages.
+ * Only clientId is required — authUrl and appUrl can be auto-discovered.
+ */
+export function validateConfig(config: AuthConfig): void {
+  if (!config) {
+    throw new AuthConfigError(
+      'AuthProvider requires a config prop. ' +
+        'At minimum, provide { clientId: "your-app-id" }.',
+    );
+  }
+
+  // Required field
+  if (!config.clientId) {
+    throw new AuthConfigError(
+      'Missing required config: clientId. ' +
+        'This is the client ID registered with the auth service.',
+    );
+  }
+
+  // URL format validation (only if provided)
+  if (config.authUrl) {
+    try {
+      new URL(config.authUrl);
+    } catch {
+      throw new AuthConfigError(
+        `Invalid authUrl: "${config.authUrl}" is not a valid URL. ` +
+          'It should include the protocol (e.g., "https://auth.tony.codes").',
+      );
+    }
+  }
+
+  if (config.appUrl) {
+    try {
+      new URL(config.appUrl);
+    } catch {
+      throw new AuthConfigError(
+        `Invalid appUrl: "${config.appUrl}" is not a valid URL. ` +
+          'It should include the protocol (e.g., "https://myapp.tony.codes").',
+      );
+    }
+  }
+
+  if (config.apiUrl) {
+    try {
+      new URL(config.apiUrl);
+    } catch {
+      throw new AuthConfigError(
+        `Invalid apiUrl: "${config.apiUrl}" is not a valid URL. ` +
+          'It should include the protocol (e.g., "https://api.myapp.tony.codes").',
+      );
+    }
+  }
+
+  // Common misconfiguration warnings (logged but don't throw)
+  if (typeof window !== 'undefined') {
+    const isProduction = !window.location.hostname.includes('test') &&
+                         !window.location.hostname.includes('localhost');
+
+    if (isProduction && config.authUrl?.includes('localhost')) {
+      console.warn(
+        '[auth-react] Warning: authUrl contains "localhost" but app appears to be in production. ' +
+          'Make sure to update authUrl for production.',
+      );
+    }
+
+    if (config.authUrl?.endsWith('/')) {
+      console.warn(
+        '[auth-react] Warning: authUrl has a trailing slash. ' +
+          'This may cause double slashes in URLs.',
+      );
+    }
+
+    if (config.appUrl?.endsWith('/')) {
+      console.warn(
+        '[auth-react] Warning: appUrl has a trailing slash. ' +
+          'This may cause double slashes in URLs.',
+      );
+    }
+  }
+}

package/tailwind.config.js

@@ -0,0 +1,7 @@
+/** @type {import('tailwindcss').Config} */
+export default {
+  content: ['./src/**/*.tsx'],
+  theme: { extend: {} },
+  plugins: [],
+  corePlugins: { preflight: false },
+};

package/tsconfig.json

@@ -0,0 +1,18 @@
+{
+  "compilerOptions": {
+    "target": "ES2020",
+    "module": "ESNext",
+    "moduleResolution": "bundler",
+    "jsx": "react-jsx",
+    "strict": true,
+    "esModuleInterop": true,
+    "outDir": "dist",
+    "rootDir": "src",
+    "skipLibCheck": true,
+    "declaration": true,
+    "declarationMap": true,
+    "sourceMap": true
+  },
+  "include": ["src"],
+  "exclude": ["node_modules", "dist"]
+}

package/LICENSE

@@ -1,21 +0,0 @@
-MIT License
-
-Copyright (c) 2024 Tony
-
-Permission is hereby granted, free of charge, to any person obtaining a copy
-of this software and associated documentation files (the "Software"), to deal
-in the Software without restriction, including without limitation the rights
-to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
-copies of the Software, and to permit persons to whom the Software is
-furnished to do so, subject to the following conditions:
-
-The above copyright notice and this permission notice shall be included in all
-copies or substantial portions of the Software.
-
-THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
-IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
-FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
-AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
-LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
-OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
-SOFTWARE.