@turnkey/react-wallet-kit 1.11.0 → 2.0.0

package/dist/utils/oauth/url.js

@@ -0,0 +1,231 @@
+'use strict';
+
+var sdkTypes = require('@turnkey/sdk-types');
+var config = require('./config.js');
+var storage = require('./storage.js');
+
+/**
+ * Builds the OAuth state parameter string
+ */
+function buildOAuthState(params) {
+  const {
+    provider,
+    flow,
+    publicKey,
+    nonce,
+    additionalState
+  } = params;
+  let state = `provider=${provider}&flow=${flow}&publicKey=${encodeURIComponent(publicKey)}`;
+  if (nonce) {
+    state += `&nonce=${nonce}`;
+  }
+  if (additionalState) {
+    const extra = Object.entries(additionalState).map(([k, v]) => `${encodeURIComponent(k)}=${encodeURIComponent(v)}`).join("&");
+    if (extra) {
+      state += `&${extra}`;
+    }
+  }
+  return state;
+}
+/**
+ * Opens a centered OAuth popup window
+ */
+function openOAuthPopup() {
+  const width = config.popupWidth;
+  const height = config.popupHeight;
+  const left = window.screenX + (window.innerWidth - width) / 2;
+  const top = window.screenY + (window.innerHeight - height) / 2;
+  return window.open("about:blank", "_blank", `width=${width},height=${height},top=${top},left=${left},scrollbars=yes,resizable=yes`);
+}
+/**
+ * Redirects to OAuth provider URL
+ */
+function redirectToOAuthProvider(url) {
+  window.location.href = url;
+  const timeLimit = 5 * 60 * 1000; // 5 minutes
+  return new Promise((_, reject) => {
+    const timeout = setTimeout(() => {
+      reject(new Error("Authentication timed out."));
+    }, timeLimit);
+    window.addEventListener("beforeunload", () => clearTimeout(timeout));
+  });
+}
+/**
+ * Cleans up OAuth parameters from URL (removes hash and search)
+ */
+function cleanupOAuthUrl() {
+  window.history.replaceState(null, document.title, window.location.pathname);
+}
+/**
+ * Cleans up OAuth hash from URL but preserves search parameters
+ */
+function cleanupOAuthUrlPreserveSearch() {
+  window.history.replaceState(null, document.title, window.location.pathname + window.location.search);
+}
+/**
+ * Parses the OAuth state parameter string into an object
+ */
+function parseStateParam(stateParam) {
+  if (!stateParam) return {};
+  const result = {};
+  const pairs = stateParam.split("&");
+  for (const pair of pairs) {
+    const [key, value] = pair.split("=");
+    if (key && value !== undefined) {
+      result[key] = decodeURIComponent(value);
+    }
+  }
+  return result;
+}
+/**
+ * Unified OAuth response parser for both popup and redirect flows.
+ * Handles both:
+ * - PKCE flows (Facebook, Discord, X): code in search parameters
+ * - Non-PKCE flows (Google, Apple): id_token in hash parameters
+ * - Apple's non-standard hash format where state parameters are directly embedded
+ *
+ * @param url - The full URL to parse (from popup or redirect)
+ * @param expectedProvider - Optional provider if already known (for popup flows)
+ * @returns Parsed OAuth response data including tokens, codes, and state parameters, or null if invalid
+ */
+function parseOAuthResponse(url, expectedProvider) {
+  let idToken = null;
+  let authCode = null;
+  let stateString = null;
+  const parsedUrl = new URL(url);
+  const search = parsedUrl.search.substring(1); // Remove leading '?'
+  const hash = parsedUrl.hash.substring(1); // Remove leading '#'
+  // Handle PKCE flows (code in search parameters)
+  if (search && search.includes("code=")) {
+    const searchParams = new URLSearchParams(search);
+    authCode = searchParams.get("code");
+    stateString = searchParams.get("state");
+  }
+  // Handle non-PKCE flows (id_token in hash)
+  else if (hash) {
+    // Handle Apple's non-standard format: state=provider=apple&flow=redirect&...&code=...&id_token=...
+    if (hash.startsWith("state=provider=apple")) {
+      // Extract id_token from the end
+      const idTokenMatch = hash.match(/id_token=([^&]+)$/);
+      idToken = idTokenMatch ? idTokenMatch[1] : null;
+      // Extract state content between "state=" and "&code="
+      const stateEndIndex = hash.indexOf("&code=");
+      if (stateEndIndex !== -1) {
+        stateString = hash.substring(6, stateEndIndex); // Remove "state=" prefix
+      }
+    } else {
+      // Standard OAuth format - parse as URLSearchParams
+      const hashParams = new URLSearchParams(hash);
+      idToken = hashParams.get("id_token");
+      stateString = hashParams.get("state");
+    }
+  }
+  if (!stateString) {
+    throw new sdkTypes.TurnkeyError("Missing OAuth state in redirect response", sdkTypes.TurnkeyErrorCodes.INVALID_OAUTH_STATE);
+  }
+  // Validate state parameter
+  storage.consumeOAuthState(stateString);
+  // Parse state parameters
+  const {
+    provider,
+    flow,
+    publicKey,
+    openModal,
+    sessionKey,
+    oauthIntent,
+    nonce
+  } = parseStateParam(stateString);
+  // If we have an expected provider (popup flow), validate it matches
+  if (expectedProvider) {
+    const config$1 = config.OAUTH_PROVIDER_CONFIGS[expectedProvider];
+    if (config$1.usesPKCE) {
+      // PKCE providers must have authCode and matching provider in state
+      if (!authCode || !stateString || provider !== expectedProvider) {
+        return null;
+      }
+    } else {
+      // Non-PKCE providers must have idToken
+      if (!idToken) {
+        return null;
+      }
+    }
+  }
+  return {
+    idToken,
+    authCode,
+    provider: provider ?? null,
+    flow: flow ?? null,
+    publicKey: publicKey ?? null,
+    openModal: openModal ?? null,
+    sessionKey: sessionKey ?? undefined,
+    oauthIntent: oauthIntent ?? null,
+    nonce: nonce ?? null
+  };
+}
+/**
+ * Builds the complete OAuth authorization URL for a provider
+ */
+function buildOAuthUrl(params) {
+  const {
+    provider,
+    clientId,
+    redirectUri,
+    publicKey,
+    nonce,
+    flow,
+    codeChallenge,
+    additionalState
+  } = params;
+  const config$1 = config.OAUTH_PROVIDER_CONFIGS[provider];
+  const authUrl = new URL(config$1.authUrl);
+  authUrl.searchParams.set("client_id", clientId);
+  authUrl.searchParams.set("redirect_uri", redirectUri);
+  authUrl.searchParams.set("response_type", config$1.responseType);
+  if (config$1.scopes) {
+    authUrl.searchParams.set("scope", config$1.scopes);
+  }
+  if (config$1.responseMode) {
+    authUrl.searchParams.set("response_mode", config$1.responseMode);
+  }
+  // PKCE parameters
+  if (config$1.usesPKCE && codeChallenge) {
+    authUrl.searchParams.set("code_challenge", codeChallenge);
+    authUrl.searchParams.set("code_challenge_method", "S256");
+  }
+  // Nonce handling - some providers want it in URL params, others in state
+  if (config$1.nonceInParams) {
+    authUrl.searchParams.set("nonce", nonce);
+  }
+  // Google-specific: prompt for account selection
+  if (provider === sdkTypes.OAuthProviders.GOOGLE) {
+    authUrl.searchParams.set("prompt", "select_account");
+  }
+  // Build state parameter
+  const stateParams = {
+    provider,
+    flow,
+    publicKey
+  };
+  // Include nonce in state for providers that need it there (not in URL params)
+  if (!config$1.nonceInParams) {
+    stateParams.nonce = nonce;
+  }
+  if (additionalState) {
+    stateParams.additionalState = additionalState;
+  }
+  // Generate state string and store for validation
+  const state = buildOAuthState(stateParams);
+  authUrl.searchParams.set("state", state);
+  storage.storeOAuthState(state);
+  return authUrl.toString();
+}
+
+exports.buildOAuthState = buildOAuthState;
+exports.buildOAuthUrl = buildOAuthUrl;
+exports.cleanupOAuthUrl = cleanupOAuthUrl;
+exports.cleanupOAuthUrlPreserveSearch = cleanupOAuthUrlPreserveSearch;
+exports.openOAuthPopup = openOAuthPopup;
+exports.parseOAuthResponse = parseOAuthResponse;
+exports.parseStateParam = parseStateParam;
+exports.redirectToOAuthProvider = redirectToOAuthProvider;
+//# sourceMappingURL=url.js.map

package/dist/utils/oauth/url.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"url.js","sources":["../../../src/utils/oauth/url.ts"],"sourcesContent":[null],"names":["buildOAuthState","params","provider","flow","publicKey","nonce","additionalState","state","encodeURIComponent","extra","Object","entries","map","k","v","join","openOAuthPopup","width","popupWidth","height","popupHeight","left","window","screenX","innerWidth","top","screenY","innerHeight","open","redirectToOAuthProvider","url","location","href","timeLimit","Promise","_","reject","timeout","setTimeout","Error","addEventListener","clearTimeout","cleanupOAuthUrl","history","replaceState","document","title","pathname","cleanupOAuthUrlPreserveSearch","search","parseStateParam","stateParam","result","pairs","split","pair","key","value","undefined","decodeURIComponent","parseOAuthResponse","expectedProvider","idToken","authCode","stateString","parsedUrl","URL","substring","hash","includes","searchParams","URLSearchParams","get","startsWith","idTokenMatch","match","stateEndIndex","indexOf","hashParams","TurnkeyError","TurnkeyErrorCodes","INVALID_OAUTH_STATE","consumeOAuthState","openModal","sessionKey","oauthIntent","config","OAUTH_PROVIDER_CONFIGS","usesPKCE","buildOAuthUrl","clientId","redirectUri","codeChallenge","authUrl","set","responseType","scopes","responseMode","nonceInParams","OAuthProviders","GOOGLE","stateParams","storeOAuthState","toString"],"mappings":";;;;;;AAQA;;AAEG;AACG,SAAUA,eAAeA,CAACC,MAM/B,EAAA;EACC,MAAM;IAAEC,QAAQ;IAAEC,IAAI;IAAEC,SAAS;IAAEC,KAAK;AAAEC,IAAAA;AAAe,GAAE,GAAGL,MAAM;EACpE,IAAIM,KAAK,GAAG,CAAA,SAAA,EAAYL,QAAQ,CAAA,MAAA,EAASC,IAAI,CAAA,WAAA,EAAcK,kBAAkB,CAACJ,SAAS,CAAC,CAAA,CAAE;AAE1F,EAAA,IAAIC,KAAK,EAAE;IACTE,KAAK,IAAI,CAAA,OAAA,EAAUF,KAAK,CAAA,CAAE;AAC5B,EAAA;AAEA,EAAA,IAAIC,eAAe,EAAE;AACnB,IAAA,MAAMG,KAAK,GAAGC,MAAM,CAACC,OAAO,CAACL,eAAe,CAAC,CAC1CM,GAAG,CAAC,CAAC,CAACC,CAAC,EAAEC,CAAC,CAAC,KAAK,CAAA,EAAGN,kBAAkB,CAACK,CAAC,CAAC,IAAIL,kBAAkB,CAACM,CAAC,CAAC,EAAE,CAAC,CACpEC,IAAI,CAAC,GAAG,CAAC;AACZ,IAAA,IAAIN,KAAK,EAAE;MACTF,KAAK,IAAI,CAAA,CAAA,EAAIE,KAAK,CAAA,CAAE;AACtB,IAAA;AACF,EAAA;AAEA,EAAA,OAAOF,KAAK;AACd;AAEA;;AAEG;SACaS,cAAcA,GAAA;EAC5B,MAAMC,KAAK,GAAGC,iBAAU;EACxB,MAAMC,MAAM,GAAGC,kBAAW;AAC1B,EAAA,MAAMC,IAAI,GAAGC,MAAM,CAACC,OAAO,GAAG,CAACD,MAAM,CAACE,UAAU,GAAGP,KAAK,IAAI,CAAC;AAC7D,EAAA,MAAMQ,GAAG,GAAGH,MAAM,CAACI,OAAO,GAAG,CAACJ,MAAM,CAACK,WAAW,GAAGR,MAAM,IAAI,CAAC;AAE9D,EAAA,OAAOG,MAAM,CAACM,IAAI,CAChB,aAAa,EACb,QAAQ,EACR,CAAA,MAAA,EAASX,KAAK,WAAWE,MAAM,CAAA,KAAA,EAAQM,GAAG,CAAA,MAAA,EAASJ,IAAI,+BAA+B,CACvF;AACH;AAEA;;AAEG;AACG,SAAUQ,uBAAuBA,CAACC,GAAW,EAAA;AACjDR,EAAAA,MAAM,CAACS,QAAQ,CAACC,IAAI,GAAGF,GAAG;EAC1B,MAAMG,SAAS,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;AAChC,EAAA,OAAO,IAAIC,OAAO,CAAC,CAACC,CAAC,EAAEC,MAAM,KAAI;AAC/B,IAAA,MAAMC,OAAO,GAAGC,UAAU,CAAC,MAAK;AAC9BF,MAAAA,MAAM,CAAC,IAAIG,KAAK,CAAC,2BAA2B,CAAC,CAAC;IAChD,CAAC,EAAEN,SAAS,CAAC;IACbX,MAAM,CAACkB,gBAAgB,CAAC,cAAc,EAAE,MAAMC,YAAY,CAACJ,OAAO,CAAC,CAAC;AACtE,EAAA,CAAC,CAAC;AACJ;AAEA;;AAEG;SACaK,eAAeA,GAAA;AAC7BpB,EAAAA,MAAM,CAACqB,OAAO,CAACC,YAAY,CAAC,IAAI,EAAEC,QAAQ,CAACC,KAAK,EAAExB,MAAM,CAACS,QAAQ,CAACgB,QAAQ,CAAC;AAC7E;AAEA;;AAEG;SACaC,6BAA6BA,GAAA;EAC3C1B,MAAM,CAACqB,OAAO,CAACC,YAAY,CACzB,IAAI,EACJC,QAAQ,CAACC,KAAK,EACdxB,MAAM,CAACS,QAAQ,CAACgB,QAAQ,GAAGzB,MAAM,CAACS,QAAQ,CAACkB,MAAM,CAClD;AACH;AAEA;;AAEG;AACG,SAAUC,eAAeA,CAACC,UAAqC,EAAA;AASnE,EAAA,IAAI,CAACA,UAAU,EAAE,OAAO,EAAE;EAE1B,MAAMC,MAAM,GAA0C,EAAE;AACxD,EAAA,MAAMC,KAAK,GAAGF,UAAU,CAACG,KAAK,CAAC,GAAG,CAAC;AAEnC,EAAA,KAAK,MAAMC,IAAI,IAAIF,KAAK,EAAE;IACxB,MAAM,CAACG,GAAG,EAAEC,KAAK,CAAC,GAAGF,IAAI,CAACD,KAAK,CAAC,GAAG,CAAC;AACpC,IAAA,IAAIE,GAAG,IAAIC,KAAK,KAAKC,SAAS,EAAE;AAC9BN,MAAAA,MAAM,CAACI,GAAG,CAAC,GAAGG,kBAAkB,CAACF,KAAK,CAAC;AACzC,IAAA;AACF,EAAA;AAEA,EAAA,OAAOL,MAAM;AACf;AA0BA;;;;;;;;;;AAUG;AACG,SAAUQ,kBAAkBA,CAChC9B,GAAW,EACX+B,gBAAiC,EAAA;EAEjC,IAAIC,OAAO,GAA8B,IAAI;EAC7C,IAAIC,QAAQ,GAA8B,IAAI;EAC9C,IAAIC,WAAW,GAAkB,IAAI;AAErC,EAAA,MAAMC,SAAS,GAAG,IAAIC,GAAG,CAACpC,GAAG,CAAC;EAC9B,MAAMmB,MAAM,GAAGgB,SAAS,CAAChB,MAAM,CAACkB,SAAS,CAAC,CAAC,CAAC,CAAC;EAC7C,MAAMC,IAAI,GAAGH,SAAS,CAACG,IAAI,CAACD,SAAS,CAAC,CAAC,CAAC,CAAC;AAEzC;EACA,IAAIlB,MAAM,IAAIA,MAAM,CAACoB,QAAQ,CAAC,OAAO,CAAC,EAAE;AACtC,IAAA,MAAMC,YAAY,GAAG,IAAIC,eAAe,CAACtB,MAAM,CAAC;AAChDc,IAAAA,QAAQ,GAAGO,YAAY,CAACE,GAAG,CAAC,MAAM,CAAC;AACnCR,IAAAA,WAAW,GAAGM,YAAY,CAACE,GAAG,CAAC,OAAO,CAAC;AACzC,EAAA;AACA;OACK,IAAIJ,IAAI,EAAE;AACb;AACA,IAAA,IAAIA,IAAI,CAACK,UAAU,CAAC,sBAAsB,CAAC,EAAE;AAC3C;AACA,MAAA,MAAMC,YAAY,GAAGN,IAAI,CAACO,KAAK,CAAC,mBAAmB,CAAC;MACpDb,OAAO,GAAGY,YAAY,GAAGA,YAAY,CAAC,CAAC,CAAC,GAAG,IAAI;AAE/C;AACA,MAAA,MAAME,aAAa,GAAGR,IAAI,CAACS,OAAO,CAAC,QAAQ,CAAC;AAC5C,MAAA,IAAID,aAAa,KAAK,EAAE,EAAE;QACxBZ,WAAW,GAAGI,IAAI,CAACD,SAAS,CAAC,CAAC,EAAES,aAAa,CAAC,CAAC;AACjD,MAAA;AACF,IAAA,CAAC,MAAM;AACL;AACA,MAAA,MAAME,UAAU,GAAG,IAAIP,eAAe,CAACH,IAAI,CAAC;AAC5CN,MAAAA,OAAO,GAAGgB,UAAU,CAACN,GAAG,CAAC,UAAU,CAAC;AACpCR,MAAAA,WAAW,GAAGc,UAAU,CAACN,GAAG,CAAC,OAAO,CAAC;AACvC,IAAA;AACF,EAAA;EAEA,IAAI,CAACR,WAAW,EAAE;IAChB,MAAM,IAAIe,qBAAY,CACpB,0CAA0C,EAC1CC,0BAAiB,CAACC,mBAAmB,CACtC;AACH,EAAA;AAEA;EACAC,yBAAiB,CAAClB,WAAW,CAAC;AAE9B;EACA,MAAM;IACJ9D,QAAQ;IACRC,IAAI;IACJC,SAAS;IACT+E,SAAS;IACTC,UAAU;IACVC,WAAW;AACXhF,IAAAA;AAAK,GACN,GAAG6C,eAAe,CAACc,WAAW,CAAC;AAEhC;AACA,EAAA,IAAIH,gBAAgB,EAAE;AACpB,IAAA,MAAMyB,QAAM,GAAGC,6BAAsB,CAAC1B,gBAAgB,CAAC;IAEvD,IAAIyB,QAAM,CAACE,QAAQ,EAAE;AACnB;MACA,IAAI,CAACzB,QAAQ,IAAI,CAACC,WAAW,IAAI9D,QAAQ,KAAK2D,gBAAgB,EAAE;AAC9D,QAAA,OAAO,IAAI;AACb,MAAA;AACF,IAAA,CAAC,MAAM;AACL;MACA,IAAI,CAACC,OAAO,EAAE;AACZ,QAAA,OAAO,IAAI;AACb,MAAA;AACF,IAAA;AACF,EAAA;EAEA,OAAO;IACLA,OAAO;IACPC,QAAQ;IACR7D,QAAQ,EAAEA,QAAQ,IAAI,IAAI;IAC1BC,IAAI,EAAEA,IAAI,IAAI,IAAI;IAClBC,SAAS,EAAEA,SAAS,IAAI,IAAI;IAC5B+E,SAAS,EAAEA,SAAS,IAAI,IAAI;IAC5BC,UAAU,EAAEA,UAAU,IAAI1B,SAAS;IACnC2B,WAAW,EAAEA,WAAW,IAAI,IAAI;IAChChF,KAAK,EAAEA,KAAK,IAAI;GACjB;AACH;AAgBA;;AAEG;AACG,SAAUoF,aAAaA,CAACxF,MAA2B,EAAA;EACvD,MAAM;IACJC,QAAQ;IACRwF,QAAQ;IACRC,WAAW;IACXvF,SAAS;IACTC,KAAK;IACLF,IAAI;IACJyF,aAAa;AACbtF,IAAAA;AAAe,GAChB,GAAGL,MAAM;AAEV,EAAA,MAAMqF,QAAM,GAAGC,6BAAsB,CAACrF,QAAQ,CAAC;EAC/C,MAAM2F,OAAO,GAAG,IAAI3B,GAAG,CAACoB,QAAM,CAACO,OAAO,CAAC;EAEvCA,OAAO,CAACvB,YAAY,CAACwB,GAAG,CAAC,WAAW,EAAEJ,QAAQ,CAAC;EAC/CG,OAAO,CAACvB,YAAY,CAACwB,GAAG,CAAC,cAAc,EAAEH,WAAW,CAAC;EACrDE,OAAO,CAACvB,YAAY,CAACwB,GAAG,CAAC,eAAe,EAAER,QAAM,CAACS,YAAY,CAAC;EAE9D,IAAIT,QAAM,CAACU,MAAM,EAAE;IACjBH,OAAO,CAACvB,YAAY,CAACwB,GAAG,CAAC,OAAO,EAAER,QAAM,CAACU,MAAM,CAAC;AAClD,EAAA;EAEA,IAAIV,QAAM,CAACW,YAAY,EAAE;IACvBJ,OAAO,CAACvB,YAAY,CAACwB,GAAG,CAAC,eAAe,EAAER,QAAM,CAACW,YAAY,CAAC;AAChE,EAAA;AAEA;AACA,EAAA,IAAIX,QAAM,CAACE,QAAQ,IAAII,aAAa,EAAE;IACpCC,OAAO,CAACvB,YAAY,CAACwB,GAAG,CAAC,gBAAgB,EAAEF,aAAa,CAAC;IACzDC,OAAO,CAACvB,YAAY,CAACwB,GAAG,CAAC,uBAAuB,EAAE,MAAM,CAAC;AAC3D,EAAA;AAEA;EACA,IAAIR,QAAM,CAACY,aAAa,EAAE;IACxBL,OAAO,CAACvB,YAAY,CAACwB,GAAG,CAAC,OAAO,EAAEzF,KAAK,CAAC;AAC1C,EAAA;AAEA;AACA,EAAA,IAAIH,QAAQ,KAAKiG,uBAAc,CAACC,MAAM,EAAE;IACtCP,OAAO,CAACvB,YAAY,CAACwB,GAAG,CAAC,QAAQ,EAAE,gBAAgB,CAAC;AACtD,EAAA;AAEA;AACA,EAAA,MAAMO,WAAW,GAA0C;IACzDnG,QAAQ;IACRC,IAAI;AACJC,IAAAA;GACD;AACD;AACA,EAAA,IAAI,CAACkF,QAAM,CAACY,aAAa,EAAE;IACzBG,WAAW,CAAChG,KAAK,GAAGA,KAAK;AAC3B,EAAA;AACA,EAAA,IAAIC,eAAe,EAAE;IACnB+F,WAAW,CAAC/F,eAAe,GAAGA,eAAe;AAC/C,EAAA;AACA;AACA,EAAA,MAAMC,KAAK,GAAGP,eAAe,CAACqG,WAAW,CAAC;EAC1CR,OAAO,CAACvB,YAAY,CAACwB,GAAG,CAAC,OAAO,EAAEvF,KAAK,CAAC;EACxC+F,uBAAe,CAAC/F,KAAK,CAAC;AAEtB,EAAA,OAAOsF,OAAO,CAACU,QAAQ,EAAE;AAC3B;;;;;;;;;;;"}

package/dist/utils/oauth/url.mjs

@@ -0,0 +1,237 @@
+import { createForOfIteratorHelper as _createForOfIteratorHelper, slicedToArray as _slicedToArray } from '../../_virtual/_rollupPluginBabelHelpers.mjs';
+import { TurnkeyError, TurnkeyErrorCodes, OAuthProviders } from '@turnkey/sdk-types';
+import { OAUTH_PROVIDER_CONFIGS, popupWidth, popupHeight } from './config.mjs';
+import { consumeOAuthState, storeOAuthState } from './storage.mjs';
+
+/**
+ * Builds the OAuth state parameter string
+ */
+function buildOAuthState(params) {
+  var provider = params.provider,
+    flow = params.flow,
+    publicKey = params.publicKey,
+    nonce = params.nonce,
+    additionalState = params.additionalState;
+  var state = "provider=".concat(provider, "&flow=").concat(flow, "&publicKey=").concat(encodeURIComponent(publicKey));
+  if (nonce) {
+    state += "&nonce=".concat(nonce);
+  }
+  if (additionalState) {
+    var extra = Object.entries(additionalState).map(function (_ref) {
+      var _ref2 = _slicedToArray(_ref, 2),
+        k = _ref2[0],
+        v = _ref2[1];
+      return "".concat(encodeURIComponent(k), "=").concat(encodeURIComponent(v));
+    }).join("&");
+    if (extra) {
+      state += "&".concat(extra);
+    }
+  }
+  return state;
+}
+/**
+ * Opens a centered OAuth popup window
+ */
+function openOAuthPopup() {
+  var width = popupWidth;
+  var height = popupHeight;
+  var left = window.screenX + (window.innerWidth - width) / 2;
+  var top = window.screenY + (window.innerHeight - height) / 2;
+  return window.open("about:blank", "_blank", "width=".concat(width, ",height=").concat(height, ",top=").concat(top, ",left=").concat(left, ",scrollbars=yes,resizable=yes"));
+}
+/**
+ * Redirects to OAuth provider URL
+ */
+function redirectToOAuthProvider(url) {
+  window.location.href = url;
+  var timeLimit = 5 * 60 * 1000; // 5 minutes
+  return new Promise(function (_, reject) {
+    var timeout = setTimeout(function () {
+      reject(new Error("Authentication timed out."));
+    }, timeLimit);
+    window.addEventListener("beforeunload", function () {
+      return clearTimeout(timeout);
+    });
+  });
+}
+/**
+ * Cleans up OAuth parameters from URL (removes hash and search)
+ */
+function cleanupOAuthUrl() {
+  window.history.replaceState(null, document.title, window.location.pathname);
+}
+/**
+ * Cleans up OAuth hash from URL but preserves search parameters
+ */
+function cleanupOAuthUrlPreserveSearch() {
+  window.history.replaceState(null, document.title, window.location.pathname + window.location.search);
+}
+/**
+ * Parses the OAuth state parameter string into an object
+ */
+function parseStateParam(stateParam) {
+  if (!stateParam) return {};
+  var result = {};
+  var pairs = stateParam.split("&");
+  var _iterator = _createForOfIteratorHelper(pairs),
+    _step;
+  try {
+    for (_iterator.s(); !(_step = _iterator.n()).done;) {
+      var pair = _step.value;
+      var _pair$split = pair.split("="),
+        _pair$split2 = _slicedToArray(_pair$split, 2),
+        key = _pair$split2[0],
+        value = _pair$split2[1];
+      if (key && value !== undefined) {
+        result[key] = decodeURIComponent(value);
+      }
+    }
+  } catch (err) {
+    _iterator.e(err);
+  } finally {
+    _iterator.f();
+  }
+  return result;
+}
+/**
+ * Unified OAuth response parser for both popup and redirect flows.
+ * Handles both:
+ * - PKCE flows (Facebook, Discord, X): code in search parameters
+ * - Non-PKCE flows (Google, Apple): id_token in hash parameters
+ * - Apple's non-standard hash format where state parameters are directly embedded
+ *
+ * @param url - The full URL to parse (from popup or redirect)
+ * @param expectedProvider - Optional provider if already known (for popup flows)
+ * @returns Parsed OAuth response data including tokens, codes, and state parameters, or null if invalid
+ */
+function parseOAuthResponse(url, expectedProvider) {
+  var idToken = null;
+  var authCode = null;
+  var stateString = null;
+  var parsedUrl = new URL(url);
+  var search = parsedUrl.search.substring(1); // Remove leading '?'
+  var hash = parsedUrl.hash.substring(1); // Remove leading '#'
+  // Handle PKCE flows (code in search parameters)
+  if (search && search.includes("code=")) {
+    var searchParams = new URLSearchParams(search);
+    authCode = searchParams.get("code");
+    stateString = searchParams.get("state");
+  }
+  // Handle non-PKCE flows (id_token in hash)
+  else if (hash) {
+    // Handle Apple's non-standard format: state=provider=apple&flow=redirect&...&code=...&id_token=...
+    if (hash.startsWith("state=provider=apple")) {
+      // Extract id_token from the end
+      var idTokenMatch = hash.match(/id_token=([^&]+)$/);
+      idToken = idTokenMatch ? idTokenMatch[1] : null;
+      // Extract state content between "state=" and "&code="
+      var stateEndIndex = hash.indexOf("&code=");
+      if (stateEndIndex !== -1) {
+        stateString = hash.substring(6, stateEndIndex); // Remove "state=" prefix
+      }
+    } else {
+      // Standard OAuth format - parse as URLSearchParams
+      var hashParams = new URLSearchParams(hash);
+      idToken = hashParams.get("id_token");
+      stateString = hashParams.get("state");
+    }
+  }
+  if (!stateString) {
+    throw new TurnkeyError("Missing OAuth state in redirect response", TurnkeyErrorCodes.INVALID_OAUTH_STATE);
+  }
+  // Validate state parameter
+  consumeOAuthState(stateString);
+  // Parse state parameters
+  var _parseStateParam = parseStateParam(stateString),
+    provider = _parseStateParam.provider,
+    flow = _parseStateParam.flow,
+    publicKey = _parseStateParam.publicKey,
+    openModal = _parseStateParam.openModal,
+    sessionKey = _parseStateParam.sessionKey,
+    oauthIntent = _parseStateParam.oauthIntent,
+    nonce = _parseStateParam.nonce;
+  // If we have an expected provider (popup flow), validate it matches
+  if (expectedProvider) {
+    var config = OAUTH_PROVIDER_CONFIGS[expectedProvider];
+    if (config.usesPKCE) {
+      // PKCE providers must have authCode and matching provider in state
+      if (!authCode || !stateString || provider !== expectedProvider) {
+        return null;
+      }
+    } else {
+      // Non-PKCE providers must have idToken
+      if (!idToken) {
+        return null;
+      }
+    }
+  }
+  return {
+    idToken: idToken,
+    authCode: authCode,
+    provider: provider !== null && provider !== void 0 ? provider : null,
+    flow: flow !== null && flow !== void 0 ? flow : null,
+    publicKey: publicKey !== null && publicKey !== void 0 ? publicKey : null,
+    openModal: openModal !== null && openModal !== void 0 ? openModal : null,
+    sessionKey: sessionKey !== null && sessionKey !== void 0 ? sessionKey : undefined,
+    oauthIntent: oauthIntent !== null && oauthIntent !== void 0 ? oauthIntent : null,
+    nonce: nonce !== null && nonce !== void 0 ? nonce : null
+  };
+}
+/**
+ * Builds the complete OAuth authorization URL for a provider
+ */
+function buildOAuthUrl(params) {
+  var provider = params.provider,
+    clientId = params.clientId,
+    redirectUri = params.redirectUri,
+    publicKey = params.publicKey,
+    nonce = params.nonce,
+    flow = params.flow,
+    codeChallenge = params.codeChallenge,
+    additionalState = params.additionalState;
+  var config = OAUTH_PROVIDER_CONFIGS[provider];
+  var authUrl = new URL(config.authUrl);
+  authUrl.searchParams.set("client_id", clientId);
+  authUrl.searchParams.set("redirect_uri", redirectUri);
+  authUrl.searchParams.set("response_type", config.responseType);
+  if (config.scopes) {
+    authUrl.searchParams.set("scope", config.scopes);
+  }
+  if (config.responseMode) {
+    authUrl.searchParams.set("response_mode", config.responseMode);
+  }
+  // PKCE parameters
+  if (config.usesPKCE && codeChallenge) {
+    authUrl.searchParams.set("code_challenge", codeChallenge);
+    authUrl.searchParams.set("code_challenge_method", "S256");
+  }
+  // Nonce handling - some providers want it in URL params, others in state
+  if (config.nonceInParams) {
+    authUrl.searchParams.set("nonce", nonce);
+  }
+  // Google-specific: prompt for account selection
+  if (provider === OAuthProviders.GOOGLE) {
+    authUrl.searchParams.set("prompt", "select_account");
+  }
+  // Build state parameter
+  var stateParams = {
+    provider: provider,
+    flow: flow,
+    publicKey: publicKey
+  };
+  // Include nonce in state for providers that need it there (not in URL params)
+  if (!config.nonceInParams) {
+    stateParams.nonce = nonce;
+  }
+  if (additionalState) {
+    stateParams.additionalState = additionalState;
+  }
+  // Generate state string and store for validation
+  var state = buildOAuthState(stateParams);
+  authUrl.searchParams.set("state", state);
+  storeOAuthState(state);
+  return authUrl.toString();
+}
+
+export { buildOAuthState, buildOAuthUrl, cleanupOAuthUrl, cleanupOAuthUrlPreserveSearch, openOAuthPopup, parseOAuthResponse, parseStateParam, redirectToOAuthProvider };
+//# sourceMappingURL=url.mjs.map

package/dist/utils/oauth/url.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"url.mjs","sources":["../../../src/utils/oauth/url.ts"],"sourcesContent":[null],"names":["buildOAuthState","params","provider","flow","publicKey","nonce","additionalState","state","concat","encodeURIComponent","extra","Object","entries","map","_ref","_ref2","_slicedToArray","k","v","join","openOAuthPopup","width","popupWidth","height","popupHeight","left","window","screenX","innerWidth","top","screenY","innerHeight","open","redirectToOAuthProvider","url","location","href","timeLimit","Promise","_","reject","timeout","setTimeout","Error","addEventListener","clearTimeout","cleanupOAuthUrl","history","replaceState","document","title","pathname","cleanupOAuthUrlPreserveSearch","search","parseStateParam","stateParam","result","pairs","split","_iterator","_createForOfIteratorHelper","_step","s","n","done","pair","value","_pair$split","_pair$split2","key","undefined","decodeURIComponent","err","e","f","parseOAuthResponse","expectedProvider","idToken","authCode","stateString","parsedUrl","URL","substring","hash","includes","searchParams","URLSearchParams","get","startsWith","idTokenMatch","match","stateEndIndex","indexOf","hashParams","TurnkeyError","TurnkeyErrorCodes","INVALID_OAUTH_STATE","consumeOAuthState","_parseStateParam","openModal","sessionKey","oauthIntent","config","OAUTH_PROVIDER_CONFIGS","usesPKCE","buildOAuthUrl","clientId","redirectUri","codeChallenge","authUrl","set","responseType","scopes","responseMode","nonceInParams","OAuthProviders","GOOGLE","stateParams","storeOAuthState","toString"],"mappings":";;;;;AAQA;;AAEG;AACG,SAAUA,eAAeA,CAACC,MAM/B,EAAA;AACC,EAAA,IAAQC,QAAQ,GAA8CD,MAAM,CAA5DC,QAAQ;IAAEC,IAAI,GAAwCF,MAAM,CAAlDE,IAAI;IAAEC,SAAS,GAA6BH,MAAM,CAA5CG,SAAS;IAAEC,KAAK,GAAsBJ,MAAM,CAAjCI,KAAK;IAAEC,eAAe,GAAKL,MAAM,CAA1BK,eAAe;AACzD,EAAA,IAAIC,KAAK,GAAA,WAAA,CAAAC,MAAA,CAAeN,QAAQ,YAAAM,MAAA,CAASL,IAAI,EAAA,aAAA,CAAA,CAAAK,MAAA,CAAcC,kBAAkB,CAACL,SAAS,CAAC,CAAE;AAE1F,EAAA,IAAIC,KAAK,EAAE;AACTE,IAAAA,KAAK,IAAA,SAAA,CAAAC,MAAA,CAAcH,KAAK,CAAE;AAC5B,EAAA;AAEA,EAAA,IAAIC,eAAe,EAAE;AACnB,IAAA,IAAMI,KAAK,GAAGC,MAAM,CAACC,OAAO,CAACN,eAAe,CAAC,CAC1CO,GAAG,CAAC,UAAAC,IAAA,EAAA;AAAA,MAAA,IAAAC,KAAA,GAAAC,cAAA,CAAAF,IAAA,EAAA,CAAA,CAAA;AAAEG,QAAAA,CAAC,GAAAF,KAAA,CAAA,CAAA,CAAA;AAAEG,QAAAA,CAAC,GAAAH,KAAA,CAAA,CAAA,CAAA;AAAA,MAAA,OAAA,EAAA,CAAAP,MAAA,CAASC,kBAAkB,CAACQ,CAAC,CAAC,EAAA,GAAA,CAAA,CAAAT,MAAA,CAAIC,kBAAkB,CAACS,CAAC,CAAC,CAAA;AAAA,IAAA,CAAE,CAAC,CACpEC,IAAI,CAAC,GAAG,CAAC;AACZ,IAAA,IAAIT,KAAK,EAAE;AACTH,MAAAA,KAAK,IAAA,GAAA,CAAAC,MAAA,CAAQE,KAAK,CAAE;AACtB,IAAA;AACF,EAAA;AAEA,EAAA,OAAOH,KAAK;AACd;AAEA;;AAEG;SACaa,cAAcA,GAAA;EAC5B,IAAMC,KAAK,GAAGC,UAAU;EACxB,IAAMC,MAAM,GAAGC,WAAW;AAC1B,EAAA,IAAMC,IAAI,GAAGC,MAAM,CAACC,OAAO,GAAG,CAACD,MAAM,CAACE,UAAU,GAAGP,KAAK,IAAI,CAAC;AAC7D,EAAA,IAAMQ,GAAG,GAAGH,MAAM,CAACI,OAAO,GAAG,CAACJ,MAAM,CAACK,WAAW,GAAGR,MAAM,IAAI,CAAC;EAE9D,OAAOG,MAAM,CAACM,IAAI,CAChB,aAAa,EACb,QAAQ,EAAA,QAAA,CAAAxB,MAAA,CACCa,KAAK,EAAA,UAAA,CAAA,CAAAb,MAAA,CAAWe,MAAM,EAAA,OAAA,CAAA,CAAAf,MAAA,CAAQqB,GAAG,YAAArB,MAAA,CAASiB,IAAI,EAAA,+BAAA,CAA+B,CACvF;AACH;AAEA;;AAEG;AACG,SAAUQ,uBAAuBA,CAACC,GAAW,EAAA;AACjDR,EAAAA,MAAM,CAACS,QAAQ,CAACC,IAAI,GAAGF,GAAG;EAC1B,IAAMG,SAAS,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;AAChC,EAAA,OAAO,IAAIC,OAAO,CAAC,UAACC,CAAC,EAAEC,MAAM,EAAI;AAC/B,IAAA,IAAMC,OAAO,GAAGC,UAAU,CAAC,YAAK;AAC9BF,MAAAA,MAAM,CAAC,IAAIG,KAAK,CAAC,2BAA2B,CAAC,CAAC;IAChD,CAAC,EAAEN,SAAS,CAAC;AACbX,IAAAA,MAAM,CAACkB,gBAAgB,CAAC,cAAc,EAAE,YAAA;MAAA,OAAMC,YAAY,CAACJ,OAAO,CAAC;IAAA,CAAA,CAAC;AACtE,EAAA,CAAC,CAAC;AACJ;AAEA;;AAEG;SACaK,eAAeA,GAAA;AAC7BpB,EAAAA,MAAM,CAACqB,OAAO,CAACC,YAAY,CAAC,IAAI,EAAEC,QAAQ,CAACC,KAAK,EAAExB,MAAM,CAACS,QAAQ,CAACgB,QAAQ,CAAC;AAC7E;AAEA;;AAEG;SACaC,6BAA6BA,GAAA;EAC3C1B,MAAM,CAACqB,OAAO,CAACC,YAAY,CACzB,IAAI,EACJC,QAAQ,CAACC,KAAK,EACdxB,MAAM,CAACS,QAAQ,CAACgB,QAAQ,GAAGzB,MAAM,CAACS,QAAQ,CAACkB,MAAM,CAClD;AACH;AAEA;;AAEG;AACG,SAAUC,eAAeA,CAACC,UAAqC,EAAA;AASnE,EAAA,IAAI,CAACA,UAAU,EAAE,OAAO,EAAE;EAE1B,IAAMC,MAAM,GAA0C,EAAE;AACxD,EAAA,IAAMC,KAAK,GAAGF,UAAU,CAACG,KAAK,CAAC,GAAG,CAAC;AAAC,EAAA,IAAAC,SAAA,GAAAC,0BAAA,CAEjBH,KAAK,CAAA;IAAAI,KAAA;AAAA,EAAA,IAAA;IAAxB,KAAAF,SAAA,CAAAG,CAAA,EAAA,EAAA,CAAA,CAAAD,KAAA,GAAAF,SAAA,CAAAI,CAAA,EAAA,EAAAC,IAAA,GAA0B;AAAA,MAAA,IAAfC,IAAI,GAAAJ,KAAA,CAAAK,KAAA;AACb,MAAA,IAAAC,WAAA,GAAqBF,IAAI,CAACP,KAAK,CAAC,GAAG,CAAC;QAAAU,YAAA,GAAApD,cAAA,CAAAmD,WAAA,EAAA,CAAA,CAAA;AAA7BE,QAAAA,GAAG,GAAAD,YAAA,CAAA,CAAA,CAAA;AAAEF,QAAAA,KAAK,GAAAE,YAAA,CAAA,CAAA,CAAA;AACjB,MAAA,IAAIC,GAAG,IAAIH,KAAK,KAAKI,SAAS,EAAE;AAC9Bd,QAAAA,MAAM,CAACa,GAAG,CAAC,GAAGE,kBAAkB,CAACL,KAAK,CAAC;AACzC,MAAA;AACF,IAAA;AAAC,EAAA,CAAA,CAAA,OAAAM,GAAA,EAAA;IAAAb,SAAA,CAAAc,CAAA,CAAAD,GAAA,CAAA;AAAA,EAAA,CAAA,SAAA;AAAAb,IAAAA,SAAA,CAAAe,CAAA,EAAA;AAAA,EAAA;AAED,EAAA,OAAOlB,MAAM;AACf;AA0BA;;;;;;;;;;AAUG;AACG,SAAUmB,kBAAkBA,CAChCzC,GAAW,EACX0C,gBAAiC,EAAA;EAEjC,IAAIC,OAAO,GAA8B,IAAI;EAC7C,IAAIC,QAAQ,GAA8B,IAAI;EAC9C,IAAIC,WAAW,GAAkB,IAAI;AAErC,EAAA,IAAMC,SAAS,GAAG,IAAIC,GAAG,CAAC/C,GAAG,CAAC;EAC9B,IAAMmB,MAAM,GAAG2B,SAAS,CAAC3B,MAAM,CAAC6B,SAAS,CAAC,CAAC,CAAC,CAAC;EAC7C,IAAMC,IAAI,GAAGH,SAAS,CAACG,IAAI,CAACD,SAAS,CAAC,CAAC,CAAC,CAAC;AAEzC;EACA,IAAI7B,MAAM,IAAIA,MAAM,CAAC+B,QAAQ,CAAC,OAAO,CAAC,EAAE;AACtC,IAAA,IAAMC,YAAY,GAAG,IAAIC,eAAe,CAACjC,MAAM,CAAC;AAChDyB,IAAAA,QAAQ,GAAGO,YAAY,CAACE,GAAG,CAAC,MAAM,CAAC;AACnCR,IAAAA,WAAW,GAAGM,YAAY,CAACE,GAAG,CAAC,OAAO,CAAC;AACzC,EAAA;AACA;OACK,IAAIJ,IAAI,EAAE;AACb;AACA,IAAA,IAAIA,IAAI,CAACK,UAAU,CAAC,sBAAsB,CAAC,EAAE;AAC3C;AACA,MAAA,IAAMC,YAAY,GAAGN,IAAI,CAACO,KAAK,CAAC,mBAAmB,CAAC;MACpDb,OAAO,GAAGY,YAAY,GAAGA,YAAY,CAAC,CAAC,CAAC,GAAG,IAAI;AAE/C;AACA,MAAA,IAAME,aAAa,GAAGR,IAAI,CAACS,OAAO,CAAC,QAAQ,CAAC;AAC5C,MAAA,IAAID,aAAa,KAAK,EAAE,EAAE;QACxBZ,WAAW,GAAGI,IAAI,CAACD,SAAS,CAAC,CAAC,EAAES,aAAa,CAAC,CAAC;AACjD,MAAA;AACF,IAAA,CAAC,MAAM;AACL;AACA,MAAA,IAAME,UAAU,GAAG,IAAIP,eAAe,CAACH,IAAI,CAAC;AAC5CN,MAAAA,OAAO,GAAGgB,UAAU,CAACN,GAAG,CAAC,UAAU,CAAC;AACpCR,MAAAA,WAAW,GAAGc,UAAU,CAACN,GAAG,CAAC,OAAO,CAAC;AACvC,IAAA;AACF,EAAA;EAEA,IAAI,CAACR,WAAW,EAAE;IAChB,MAAM,IAAIe,YAAY,CACpB,0CAA0C,EAC1CC,iBAAiB,CAACC,mBAAmB,CACtC;AACH,EAAA;AAEA;EACAC,iBAAiB,CAAClB,WAAW,CAAC;AAE9B;AACA,EAAA,IAAAmB,gBAAA,GAQI5C,eAAe,CAACyB,WAAW,CAAC;IAP9B7E,QAAQ,GAAAgG,gBAAA,CAARhG,QAAQ;IACRC,IAAI,GAAA+F,gBAAA,CAAJ/F,IAAI;IACJC,SAAS,GAAA8F,gBAAA,CAAT9F,SAAS;IACT+F,SAAS,GAAAD,gBAAA,CAATC,SAAS;IACTC,UAAU,GAAAF,gBAAA,CAAVE,UAAU;IACVC,WAAW,GAAAH,gBAAA,CAAXG,WAAW;IACXhG,KAAK,GAAA6F,gBAAA,CAAL7F,KAAK;AAGP;AACA,EAAA,IAAIuE,gBAAgB,EAAE;AACpB,IAAA,IAAM0B,MAAM,GAAGC,sBAAsB,CAAC3B,gBAAgB,CAAC;IAEvD,IAAI0B,MAAM,CAACE,QAAQ,EAAE;AACnB;MACA,IAAI,CAAC1B,QAAQ,IAAI,CAACC,WAAW,IAAI7E,QAAQ,KAAK0E,gBAAgB,EAAE;AAC9D,QAAA,OAAO,IAAI;AACb,MAAA;AACF,IAAA,CAAC,MAAM;AACL;MACA,IAAI,CAACC,OAAO,EAAE;AACZ,QAAA,OAAO,IAAI;AACb,MAAA;AACF,IAAA;AACF,EAAA;EAEA,OAAO;AACLA,IAAAA,OAAO,EAAPA,OAAO;AACPC,IAAAA,QAAQ,EAARA,QAAQ;AACR5E,IAAAA,QAAQ,EAAEA,QAAQ,KAAA,IAAA,IAARA,QAAQ,KAAA,MAAA,GAARA,QAAQ,GAAI,IAAI;AAC1BC,IAAAA,IAAI,EAAEA,IAAI,KAAA,IAAA,IAAJA,IAAI,KAAA,MAAA,GAAJA,IAAI,GAAI,IAAI;AAClBC,IAAAA,SAAS,EAAEA,SAAS,KAAA,IAAA,IAATA,SAAS,KAAA,MAAA,GAATA,SAAS,GAAI,IAAI;AAC5B+F,IAAAA,SAAS,EAAEA,SAAS,KAAA,IAAA,IAATA,SAAS,KAAA,MAAA,GAATA,SAAS,GAAI,IAAI;AAC5BC,IAAAA,UAAU,EAAEA,UAAU,KAAA,IAAA,IAAVA,UAAU,KAAA,MAAA,GAAVA,UAAU,GAAI9B,SAAS;AACnC+B,IAAAA,WAAW,EAAEA,WAAW,KAAA,IAAA,IAAXA,WAAW,KAAA,MAAA,GAAXA,WAAW,GAAI,IAAI;AAChChG,IAAAA,KAAK,EAAEA,KAAK,KAAA,IAAA,IAALA,KAAK,KAAA,MAAA,GAALA,KAAK,GAAI;GACjB;AACH;AAgBA;;AAEG;AACG,SAAUoG,aAAaA,CAACxG,MAA2B,EAAA;AACvD,EAAA,IACEC,QAAQ,GAQND,MAAM,CARRC,QAAQ;IACRwG,QAAQ,GAONzG,MAAM,CAPRyG,QAAQ;IACRC,WAAW,GAMT1G,MAAM,CANR0G,WAAW;IACXvG,SAAS,GAKPH,MAAM,CALRG,SAAS;IACTC,KAAK,GAIHJ,MAAM,CAJRI,KAAK;IACLF,IAAI,GAGFF,MAAM,CAHRE,IAAI;IACJyG,aAAa,GAEX3G,MAAM,CAFR2G,aAAa;IACbtG,eAAe,GACbL,MAAM,CADRK,eAAe;AAGjB,EAAA,IAAMgG,MAAM,GAAGC,sBAAsB,CAACrG,QAAQ,CAAC;EAC/C,IAAM2G,OAAO,GAAG,IAAI5B,GAAG,CAACqB,MAAM,CAACO,OAAO,CAAC;EAEvCA,OAAO,CAACxB,YAAY,CAACyB,GAAG,CAAC,WAAW,EAAEJ,QAAQ,CAAC;EAC/CG,OAAO,CAACxB,YAAY,CAACyB,GAAG,CAAC,cAAc,EAAEH,WAAW,CAAC;EACrDE,OAAO,CAACxB,YAAY,CAACyB,GAAG,CAAC,eAAe,EAAER,MAAM,CAACS,YAAY,CAAC;EAE9D,IAAIT,MAAM,CAACU,MAAM,EAAE;IACjBH,OAAO,CAACxB,YAAY,CAACyB,GAAG,CAAC,OAAO,EAAER,MAAM,CAACU,MAAM,CAAC;AAClD,EAAA;EAEA,IAAIV,MAAM,CAACW,YAAY,EAAE;IACvBJ,OAAO,CAACxB,YAAY,CAACyB,GAAG,CAAC,eAAe,EAAER,MAAM,CAACW,YAAY,CAAC;AAChE,EAAA;AAEA;AACA,EAAA,IAAIX,MAAM,CAACE,QAAQ,IAAII,aAAa,EAAE;IACpCC,OAAO,CAACxB,YAAY,CAACyB,GAAG,CAAC,gBAAgB,EAAEF,aAAa,CAAC;IACzDC,OAAO,CAACxB,YAAY,CAACyB,GAAG,CAAC,uBAAuB,EAAE,MAAM,CAAC;AAC3D,EAAA;AAEA;EACA,IAAIR,MAAM,CAACY,aAAa,EAAE;IACxBL,OAAO,CAACxB,YAAY,CAACyB,GAAG,CAAC,OAAO,EAAEzG,KAAK,CAAC;AAC1C,EAAA;AAEA;AACA,EAAA,IAAIH,QAAQ,KAAKiH,cAAc,CAACC,MAAM,EAAE;IACtCP,OAAO,CAACxB,YAAY,CAACyB,GAAG,CAAC,QAAQ,EAAE,gBAAgB,CAAC;AACtD,EAAA;AAEA;AACA,EAAA,IAAMO,WAAW,GAA0C;AACzDnH,IAAAA,QAAQ,EAARA,QAAQ;AACRC,IAAAA,IAAI,EAAJA,IAAI;AACJC,IAAAA,SAAS,EAATA;GACD;AACD;AACA,EAAA,IAAI,CAACkG,MAAM,CAACY,aAAa,EAAE;IACzBG,WAAW,CAAChH,KAAK,GAAGA,KAAK;AAC3B,EAAA;AACA,EAAA,IAAIC,eAAe,EAAE;IACnB+G,WAAW,CAAC/G,eAAe,GAAGA,eAAe;AAC/C,EAAA;AACA;AACA,EAAA,IAAMC,KAAK,GAAGP,eAAe,CAACqH,WAAW,CAAC;EAC1CR,OAAO,CAACxB,YAAY,CAACyB,GAAG,CAAC,OAAO,EAAEvG,KAAK,CAAC;EACxC+G,eAAe,CAAC/G,KAAK,CAAC;AAEtB,EAAA,OAAOsG,OAAO,CAACU,QAAQ,EAAE;AAC3B;;;;"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@turnkey/react-wallet-kit",
-  "version": "1.11.0",
+  "version": "2.0.0",
   "description": "The easiest and most powerful way to integrate Turnkey's Embedded Wallets into your React applications.",
   "main": "./dist/index.js",
   "module": "./dist/index.mjs",
@@ -48,9 +48,9 @@
     "qrcode.react": "^4.2.0",
     "react-international-phone": "^4.3.0",
     "viem": "^2.40.2",
-    "@turnkey/core": "1.14.0",
     "@turnkey/iframe-stamper": "^2.11.0",
-    "@turnkey/sdk-types": "0.13.0"
+    "@turnkey/core": "2.0.0",
+    "@turnkey/sdk-types": "1.0.0"
   },
   "devDependencies": {
     "@rollup/plugin-babel": "5.3.0",