@turnkey/react-wallet-kit 2.3.0 → 2.3.2

package/dist/utils/oauth/config.d.ts

@@ -8,6 +8,10 @@ export declare const FACEBOOK_AUTH_URL = "https://www.facebook.com/v11.0/dialog/
 export declare const FACEBOOK_GRAPH_URL = "https://graph.facebook.com/v11.0/oauth/access_token";
 export declare const popupWidth = 500;
 export declare const popupHeight = 600;
+export declare enum OAuthResponseMode {
+    Query = "query",
+    Fragment = "fragment"
+}
 /**
  * OAuth provider configuration for unified OAuth flow handling
  */
@@ -22,8 +26,10 @@ export interface OAuthProviderConfig {
     usesPKCE: boolean;
     /** Response type for the OAuth request */
     responseType: string;
+    /** Response mode expected from this provider, including protocol defaults */
+    expectedResponseMode: OAuthResponseMode;
     /** Optional response mode (e.g., 'fragment' for Apple) */
-    responseMode?: string;
+    responseMode?: OAuthResponseMode;
     /** Whether to include nonce in the URL params (vs state) */
     nonceInParams?: boolean;
 }

package/dist/utils/oauth/config.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../../src/utils/oauth/config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAEpD,eAAO,MAAM,gBAAgB,yCAAyC,CAAC;AACvE,eAAO,MAAM,UAAU,qCAAqC,CAAC;AAC7D,eAAO,MAAM,eAAe,iDAAiD,CAAC;AAC9E,eAAO,MAAM,cAAc,6CAA6C,CAAC;AACzE,eAAO,MAAM,qBAAqB,yFACsD,CAAC;AACzF,eAAO,MAAM,iBAAiB,gDAAgD,CAAC;AAC/E,eAAO,MAAM,kBAAkB,wDACwB,CAAC;AAExD,eAAO,MAAM,UAAU,MAAM,CAAC;AAC9B,eAAO,MAAM,WAAW,MAAM,CAAC;AAE/B;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAClC,8BAA8B;IAC9B,QAAQ,EAAE,cAAc,CAAC;IACzB,uCAAuC;IACvC,OAAO,EAAE,MAAM,CAAC;IAChB,8BAA8B;IAC9B,MAAM,EAAE,MAAM,CAAC;IACf,sCAAsC;IACtC,QAAQ,EAAE,OAAO,CAAC;IAClB,0CAA0C;IAC1C,YAAY,EAAE,MAAM,CAAC;IACrB,0DAA0D;IAC1D,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,4DAA4D;IAC5D,aAAa,CAAC,EAAE,OAAO,CAAC;CACzB;AAED;;GAEG;AACH,eAAO,MAAM,sBAAsB,EAAE,MAAM,CACzC,cAAc,EACd,mBAAmB,CA2CpB,CAAC"}
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../../src/utils/oauth/config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAEpD,eAAO,MAAM,gBAAgB,yCAAyC,CAAC;AACvE,eAAO,MAAM,UAAU,qCAAqC,CAAC;AAC7D,eAAO,MAAM,eAAe,iDAAiD,CAAC;AAC9E,eAAO,MAAM,cAAc,6CAA6C,CAAC;AACzE,eAAO,MAAM,qBAAqB,yFACsD,CAAC;AACzF,eAAO,MAAM,iBAAiB,gDAAgD,CAAC;AAC/E,eAAO,MAAM,kBAAkB,wDACwB,CAAC;AAExD,eAAO,MAAM,UAAU,MAAM,CAAC;AAC9B,eAAO,MAAM,WAAW,MAAM,CAAC;AAE/B,oBAAY,iBAAiB;IAC3B,KAAK,UAAU;IACf,QAAQ,aAAa;CACtB;AAED;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAClC,8BAA8B;IAC9B,QAAQ,EAAE,cAAc,CAAC;IACzB,uCAAuC;IACvC,OAAO,EAAE,MAAM,CAAC;IAChB,8BAA8B;IAC9B,MAAM,EAAE,MAAM,CAAC;IACf,sCAAsC;IACtC,QAAQ,EAAE,OAAO,CAAC;IAClB,0CAA0C;IAC1C,YAAY,EAAE,MAAM,CAAC;IACrB,6EAA6E;IAC7E,oBAAoB,EAAE,iBAAiB,CAAC;IACxC,0DAA0D;IAC1D,YAAY,CAAC,EAAE,iBAAiB,CAAC;IACjC,4DAA4D;IAC5D,aAAa,CAAC,EAAE,OAAO,CAAC;CACzB;AAED;;GAEG;AACH,eAAO,MAAM,sBAAsB,EAAE,MAAM,CACzC,cAAc,EACd,mBAAmB,CAgDpB,CAAC"}

package/dist/utils/oauth/config.js

@@ -10,6 +10,11 @@ const FACEBOOK_AUTH_URL = "https://www.facebook.com/v11.0/dialog/oauth";
 const FACEBOOK_GRAPH_URL = "https://graph.facebook.com/v11.0/oauth/access_token";
 const popupWidth = 500;
 const popupHeight = 600;
+exports.OAuthResponseMode = void 0;
+(function (OAuthResponseMode) {
+  OAuthResponseMode["Query"] = "query";
+  OAuthResponseMode["Fragment"] = "fragment";
+})(exports.OAuthResponseMode || (exports.OAuthResponseMode = {}));
 /**
  * Pre-configured OAuth provider settings
  */
@@ -20,6 +25,7 @@ const OAUTH_PROVIDER_CONFIGS = {
     scopes: "openid email profile",
     usesPKCE: false,
     responseType: "id_token",
+    expectedResponseMode: exports.OAuthResponseMode.Fragment,
     nonceInParams: true
   },
   [sdkTypes.OAuthProviders.APPLE]: {
@@ -28,7 +34,8 @@ const OAUTH_PROVIDER_CONFIGS = {
     scopes: "",
     usesPKCE: false,
     responseType: "code id_token",
-    responseMode: "fragment",
+    expectedResponseMode: exports.OAuthResponseMode.Fragment,
+    responseMode: exports.OAuthResponseMode.Fragment,
     nonceInParams: true
   },
   [sdkTypes.OAuthProviders.FACEBOOK]: {
@@ -37,6 +44,7 @@ const OAUTH_PROVIDER_CONFIGS = {
     scopes: "openid",
     usesPKCE: true,
     responseType: "code",
+    expectedResponseMode: exports.OAuthResponseMode.Query,
     nonceInParams: true
   },
   [sdkTypes.OAuthProviders.DISCORD]: {
@@ -45,6 +53,7 @@ const OAUTH_PROVIDER_CONFIGS = {
     scopes: "identify email",
     usesPKCE: true,
     responseType: "code",
+    expectedResponseMode: exports.OAuthResponseMode.Query,
     nonceInParams: false
   },
   [sdkTypes.OAuthProviders.X]: {
@@ -53,6 +62,7 @@ const OAUTH_PROVIDER_CONFIGS = {
     scopes: "tweet.read users.read",
     usesPKCE: true,
     responseType: "code",
+    expectedResponseMode: exports.OAuthResponseMode.Query,
     nonceInParams: false
   }
 };

package/dist/utils/oauth/config.js.map

@@ -1 +1 @@
-{"version":3,"file":"config.js","sources":["../../../src/utils/oauth/config.ts"],"sourcesContent":[null],"names":["DISCORD_AUTH_URL","X_AUTH_URL","GOOGLE_AUTH_URL","APPLE_AUTH_URL","FACEBOOK_AUTH_URL","FACEBOOK_GRAPH_URL","popupWidth","popupHeight","OAUTH_PROVIDER_CONFIGS","OAuthProviders","GOOGLE","provider","authUrl","scopes","usesPKCE","responseType","nonceInParams","APPLE","responseMode","FACEBOOK","DISCORD","X"],"mappings":";;;;AAEO,MAAMA,gBAAgB,GAAG;AACzB,MAAMC,UAAU,GAAG;AACnB,MAAMC,eAAe,GAAG;AACxB,MAAMC,cAAc,GAAG;AAGvB,MAAMC,iBAAiB,GAAG;AAC1B,MAAMC,kBAAkB,GAC7B;AAEK,MAAMC,UAAU,GAAG;AACnB,MAAMC,WAAW,GAAG;AAsB3B;;AAEG;AACI,MAAMC,sBAAsB,GAG/B;EACF,CAACC,uBAAc,CAACC,MAAM,GAAG;IACvBC,QAAQ,EAAEF,uBAAc,CAACC,MAAM;AAC/BE,IAAAA,OAAO,EAAEV,eAAe;AACxBW,IAAAA,MAAM,EAAE,sBAAsB;AAC9BC,IAAAA,QAAQ,EAAE,KAAK;AACfC,IAAAA,YAAY,EAAE,UAAU;AACxBC,IAAAA,aAAa,EAAE;GAChB;EACD,CAACP,uBAAc,CAACQ,KAAK,GAAG;IACtBN,QAAQ,EAAEF,uBAAc,CAACQ,KAAK;AAC9BL,IAAAA,OAAO,EAAET,cAAc;AACvBU,IAAAA,MAAM,EAAE,EAAE;AACVC,IAAAA,QAAQ,EAAE,KAAK;AACfC,IAAAA,YAAY,EAAE,eAAe;AAC7BG,IAAAA,YAAY,EAAE,UAAU;AACxBF,IAAAA,aAAa,EAAE;GAChB;EACD,CAACP,uBAAc,CAACU,QAAQ,GAAG;IACzBR,QAAQ,EAAEF,uBAAc,CAACU,QAAQ;AACjCP,IAAAA,OAAO,EAAER,iBAAiB;AAC1BS,IAAAA,MAAM,EAAE,QAAQ;AAChBC,IAAAA,QAAQ,EAAE,IAAI;AACdC,IAAAA,YAAY,EAAE,MAAM;AACpBC,IAAAA,aAAa,EAAE;GAChB;EACD,CAACP,uBAAc,CAACW,OAAO,GAAG;IACxBT,QAAQ,EAAEF,uBAAc,CAACW,OAAO;AAChCR,IAAAA,OAAO,EAAEZ,gBAAgB;AACzBa,IAAAA,MAAM,EAAE,gBAAgB;AACxBC,IAAAA,QAAQ,EAAE,IAAI;AACdC,IAAAA,YAAY,EAAE,MAAM;AACpBC,IAAAA,aAAa,EAAE;GAChB;EACD,CAACP,uBAAc,CAACY,CAAC,GAAG;IAClBV,QAAQ,EAAEF,uBAAc,CAACY,CAAC;AAC1BT,IAAAA,OAAO,EAAEX,UAAU;AACnBY,IAAAA,MAAM,EAAE,uBAAuB;AAC/BC,IAAAA,QAAQ,EAAE,IAAI;AACdC,IAAAA,YAAY,EAAE,MAAM;AACpBC,IAAAA,aAAa,EAAE;AAChB;;;;;;;;;;;;;"}
+{"version":3,"file":"config.js","sources":["../../../src/utils/oauth/config.ts"],"sourcesContent":[null],"names":["DISCORD_AUTH_URL","X_AUTH_URL","GOOGLE_AUTH_URL","APPLE_AUTH_URL","FACEBOOK_AUTH_URL","FACEBOOK_GRAPH_URL","popupWidth","popupHeight","OAuthResponseMode","OAUTH_PROVIDER_CONFIGS","OAuthProviders","GOOGLE","provider","authUrl","scopes","usesPKCE","responseType","expectedResponseMode","Fragment","nonceInParams","APPLE","responseMode","FACEBOOK","Query","DISCORD","X"],"mappings":";;;;AAEO,MAAMA,gBAAgB,GAAG;AACzB,MAAMC,UAAU,GAAG;AACnB,MAAMC,eAAe,GAAG;AACxB,MAAMC,cAAc,GAAG;AAGvB,MAAMC,iBAAiB,GAAG;AAC1B,MAAMC,kBAAkB,GAC7B;AAEK,MAAMC,UAAU,GAAG;AACnB,MAAMC,WAAW,GAAG;AAEfC;AAAZ,CAAA,UAAYA,iBAAiB,EAAA;AAC3BA,EAAAA,iBAAA,CAAA,OAAA,CAAA,GAAA,OAAe;AACfA,EAAAA,iBAAA,CAAA,UAAA,CAAA,GAAA,UAAqB;AACvB,CAAC,EAHWA,yBAAiB,KAAjBA,yBAAiB,GAAA,EAAA,CAAA,CAAA;AA2B7B;;AAEG;AACI,MAAMC,sBAAsB,GAG/B;EACF,CAACC,uBAAc,CAACC,MAAM,GAAG;IACvBC,QAAQ,EAAEF,uBAAc,CAACC,MAAM;AAC/BE,IAAAA,OAAO,EAAEX,eAAe;AACxBY,IAAAA,MAAM,EAAE,sBAAsB;AAC9BC,IAAAA,QAAQ,EAAE,KAAK;AACfC,IAAAA,YAAY,EAAE,UAAU;IACxBC,oBAAoB,EAAET,yBAAiB,CAACU,QAAQ;AAChDC,IAAAA,aAAa,EAAE;GAChB;EACD,CAACT,uBAAc,CAACU,KAAK,GAAG;IACtBR,QAAQ,EAAEF,uBAAc,CAACU,KAAK;AAC9BP,IAAAA,OAAO,EAAEV,cAAc;AACvBW,IAAAA,MAAM,EAAE,EAAE;AACVC,IAAAA,QAAQ,EAAE,KAAK;AACfC,IAAAA,YAAY,EAAE,eAAe;IAC7BC,oBAAoB,EAAET,yBAAiB,CAACU,QAAQ;IAChDG,YAAY,EAAEb,yBAAiB,CAACU,QAAQ;AACxCC,IAAAA,aAAa,EAAE;GAChB;EACD,CAACT,uBAAc,CAACY,QAAQ,GAAG;IACzBV,QAAQ,EAAEF,uBAAc,CAACY,QAAQ;AACjCT,IAAAA,OAAO,EAAET,iBAAiB;AAC1BU,IAAAA,MAAM,EAAE,QAAQ;AAChBC,IAAAA,QAAQ,EAAE,IAAI;AACdC,IAAAA,YAAY,EAAE,MAAM;IACpBC,oBAAoB,EAAET,yBAAiB,CAACe,KAAK;AAC7CJ,IAAAA,aAAa,EAAE;GAChB;EACD,CAACT,uBAAc,CAACc,OAAO,GAAG;IACxBZ,QAAQ,EAAEF,uBAAc,CAACc,OAAO;AAChCX,IAAAA,OAAO,EAAEb,gBAAgB;AACzBc,IAAAA,MAAM,EAAE,gBAAgB;AACxBC,IAAAA,QAAQ,EAAE,IAAI;AACdC,IAAAA,YAAY,EAAE,MAAM;IACpBC,oBAAoB,EAAET,yBAAiB,CAACe,KAAK;AAC7CJ,IAAAA,aAAa,EAAE;GAChB;EACD,CAACT,uBAAc,CAACe,CAAC,GAAG;IAClBb,QAAQ,EAAEF,uBAAc,CAACe,CAAC;AAC1BZ,IAAAA,OAAO,EAAEZ,UAAU;AACnBa,IAAAA,MAAM,EAAE,uBAAuB;AAC/BC,IAAAA,QAAQ,EAAE,IAAI;AACdC,IAAAA,YAAY,EAAE,MAAM;IACpBC,oBAAoB,EAAET,yBAAiB,CAACe,KAAK;AAC7CJ,IAAAA,aAAa,EAAE;AAChB;;;;;;;;;;;;;"}

package/dist/utils/oauth/config.mjs

@@ -9,6 +9,11 @@ var FACEBOOK_AUTH_URL = "https://www.facebook.com/v11.0/dialog/oauth";
 var FACEBOOK_GRAPH_URL = "https://graph.facebook.com/v11.0/oauth/access_token";
 var popupWidth = 500;
 var popupHeight = 600;
+var OAuthResponseMode;
+(function (OAuthResponseMode) {
+  OAuthResponseMode["Query"] = "query";
+  OAuthResponseMode["Fragment"] = "fragment";
+})(OAuthResponseMode || (OAuthResponseMode = {}));
 /**
  * Pre-configured OAuth provider settings
  */
@@ -18,6 +23,7 @@ var OAUTH_PROVIDER_CONFIGS = _defineProperty(_defineProperty(_defineProperty(_de
   scopes: "openid email profile",
   usesPKCE: false,
   responseType: "id_token",
+  expectedResponseMode: OAuthResponseMode.Fragment,
   nonceInParams: true
 }), OAuthProviders.APPLE, {
   provider: OAuthProviders.APPLE,
@@ -25,7 +31,8 @@ var OAUTH_PROVIDER_CONFIGS = _defineProperty(_defineProperty(_defineProperty(_de
   scopes: "",
   usesPKCE: false,
   responseType: "code id_token",
-  responseMode: "fragment",
+  expectedResponseMode: OAuthResponseMode.Fragment,
+  responseMode: OAuthResponseMode.Fragment,
   nonceInParams: true
 }), OAuthProviders.FACEBOOK, {
   provider: OAuthProviders.FACEBOOK,
@@ -33,6 +40,7 @@ var OAUTH_PROVIDER_CONFIGS = _defineProperty(_defineProperty(_defineProperty(_de
   scopes: "openid",
   usesPKCE: true,
   responseType: "code",
+  expectedResponseMode: OAuthResponseMode.Query,
   nonceInParams: true
 }), OAuthProviders.DISCORD, {
   provider: OAuthProviders.DISCORD,
@@ -40,6 +48,7 @@ var OAUTH_PROVIDER_CONFIGS = _defineProperty(_defineProperty(_defineProperty(_de
   scopes: "identify email",
   usesPKCE: true,
   responseType: "code",
+  expectedResponseMode: OAuthResponseMode.Query,
   nonceInParams: false
 }), OAuthProviders.X, {
   provider: OAuthProviders.X,
@@ -47,8 +56,9 @@ var OAUTH_PROVIDER_CONFIGS = _defineProperty(_defineProperty(_defineProperty(_de
   scopes: "tweet.read users.read",
   usesPKCE: true,
   responseType: "code",
+  expectedResponseMode: OAuthResponseMode.Query,
   nonceInParams: false
 });
 
-export { APPLE_AUTH_URL, DISCORD_AUTH_URL, FACEBOOK_AUTH_URL, FACEBOOK_GRAPH_URL, GOOGLE_AUTH_URL, OAUTH_PROVIDER_CONFIGS, X_AUTH_URL, popupHeight, popupWidth };
+export { APPLE_AUTH_URL, DISCORD_AUTH_URL, FACEBOOK_AUTH_URL, FACEBOOK_GRAPH_URL, GOOGLE_AUTH_URL, OAUTH_PROVIDER_CONFIGS, OAuthResponseMode, X_AUTH_URL, popupHeight, popupWidth };
 //# sourceMappingURL=config.mjs.map

package/dist/utils/oauth/config.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"config.mjs","sources":["../../../src/utils/oauth/config.ts"],"sourcesContent":[null],"names":["DISCORD_AUTH_URL","X_AUTH_URL","GOOGLE_AUTH_URL","APPLE_AUTH_URL","FACEBOOK_AUTH_URL","FACEBOOK_GRAPH_URL","popupWidth","popupHeight","OAUTH_PROVIDER_CONFIGS","_defineProperty","OAuthProviders","GOOGLE","provider","authUrl","scopes","usesPKCE","responseType","nonceInParams","APPLE","responseMode","FACEBOOK","DISCORD","X"],"mappings":";;;AAEO,IAAMA,gBAAgB,GAAG;AACzB,IAAMC,UAAU,GAAG;AACnB,IAAMC,eAAe,GAAG;AACxB,IAAMC,cAAc,GAAG;AAGvB,IAAMC,iBAAiB,GAAG;AAC1B,IAAMC,kBAAkB,GAC7B;AAEK,IAAMC,UAAU,GAAG;AACnB,IAAMC,WAAW,GAAG;AAsB3B;;AAEG;IACUC,sBAAsB,GAAAC,eAAA,CAAAA,eAAA,CAAAA,eAAA,CAAAA,eAAA,CAAAA,eAAA,CAAA,EAAA,EAIhCC,cAAc,CAACC,MAAM,EAAG;EACvBC,QAAQ,EAAEF,cAAc,CAACC,MAAM;AAC/BE,EAAAA,OAAO,EAAEX,eAAe;AACxBY,EAAAA,MAAM,EAAE,sBAAsB;AAC9BC,EAAAA,QAAQ,EAAE,KAAK;AACfC,EAAAA,YAAY,EAAE,UAAU;AACxBC,EAAAA,aAAa,EAAE;AAChB,CAAA,CAAA,EACAP,cAAc,CAACQ,KAAK,EAAG;EACtBN,QAAQ,EAAEF,cAAc,CAACQ,KAAK;AAC9BL,EAAAA,OAAO,EAAEV,cAAc;AACvBW,EAAAA,MAAM,EAAE,EAAE;AACVC,EAAAA,QAAQ,EAAE,KAAK;AACfC,EAAAA,YAAY,EAAE,eAAe;AAC7BG,EAAAA,YAAY,EAAE,UAAU;AACxBF,EAAAA,aAAa,EAAE;AAChB,CAAA,CAAA,EACAP,cAAc,CAACU,QAAQ,EAAG;EACzBR,QAAQ,EAAEF,cAAc,CAACU,QAAQ;AACjCP,EAAAA,OAAO,EAAET,iBAAiB;AAC1BU,EAAAA,MAAM,EAAE,QAAQ;AAChBC,EAAAA,QAAQ,EAAE,IAAI;AACdC,EAAAA,YAAY,EAAE,MAAM;AACpBC,EAAAA,aAAa,EAAE;AAChB,CAAA,CAAA,EACAP,cAAc,CAACW,OAAO,EAAG;EACxBT,QAAQ,EAAEF,cAAc,CAACW,OAAO;AAChCR,EAAAA,OAAO,EAAEb,gBAAgB;AACzBc,EAAAA,MAAM,EAAE,gBAAgB;AACxBC,EAAAA,QAAQ,EAAE,IAAI;AACdC,EAAAA,YAAY,EAAE,MAAM;AACpBC,EAAAA,aAAa,EAAE;AAChB,CAAA,CAAA,EACAP,cAAc,CAACY,CAAC,EAAG;EAClBV,QAAQ,EAAEF,cAAc,CAACY,CAAC;AAC1BT,EAAAA,OAAO,EAAEZ,UAAU;AACnBa,EAAAA,MAAM,EAAE,uBAAuB;AAC/BC,EAAAA,QAAQ,EAAE,IAAI;AACdC,EAAAA,YAAY,EAAE,MAAM;AACpBC,EAAAA,aAAa,EAAE;AAChB,CAAA;;;;"}
+{"version":3,"file":"config.mjs","sources":["../../../src/utils/oauth/config.ts"],"sourcesContent":[null],"names":["DISCORD_AUTH_URL","X_AUTH_URL","GOOGLE_AUTH_URL","APPLE_AUTH_URL","FACEBOOK_AUTH_URL","FACEBOOK_GRAPH_URL","popupWidth","popupHeight","OAuthResponseMode","OAUTH_PROVIDER_CONFIGS","_defineProperty","OAuthProviders","GOOGLE","provider","authUrl","scopes","usesPKCE","responseType","expectedResponseMode","Fragment","nonceInParams","APPLE","responseMode","FACEBOOK","Query","DISCORD","X"],"mappings":";;;AAEO,IAAMA,gBAAgB,GAAG;AACzB,IAAMC,UAAU,GAAG;AACnB,IAAMC,eAAe,GAAG;AACxB,IAAMC,cAAc,GAAG;AAGvB,IAAMC,iBAAiB,GAAG;AAC1B,IAAMC,kBAAkB,GAC7B;AAEK,IAAMC,UAAU,GAAG;AACnB,IAAMC,WAAW,GAAG;IAEfC;AAAZ,CAAA,UAAYA,iBAAiB,EAAA;AAC3BA,EAAAA,iBAAA,CAAA,OAAA,CAAA,GAAA,OAAe;AACfA,EAAAA,iBAAA,CAAA,UAAA,CAAA,GAAA,UAAqB;AACvB,CAAC,EAHWA,iBAAiB,KAAjBA,iBAAiB,GAAA,EAAA,CAAA,CAAA;AA2B7B;;AAEG;IACUC,sBAAsB,GAAAC,eAAA,CAAAA,eAAA,CAAAA,eAAA,CAAAA,eAAA,CAAAA,eAAA,CAAA,EAAA,EAIhCC,cAAc,CAACC,MAAM,EAAG;EACvBC,QAAQ,EAAEF,cAAc,CAACC,MAAM;AAC/BE,EAAAA,OAAO,EAAEZ,eAAe;AACxBa,EAAAA,MAAM,EAAE,sBAAsB;AAC9BC,EAAAA,QAAQ,EAAE,KAAK;AACfC,EAAAA,YAAY,EAAE,UAAU;EACxBC,oBAAoB,EAAEV,iBAAiB,CAACW,QAAQ;AAChDC,EAAAA,aAAa,EAAE;AAChB,CAAA,CAAA,EACAT,cAAc,CAACU,KAAK,EAAG;EACtBR,QAAQ,EAAEF,cAAc,CAACU,KAAK;AAC9BP,EAAAA,OAAO,EAAEX,cAAc;AACvBY,EAAAA,MAAM,EAAE,EAAE;AACVC,EAAAA,QAAQ,EAAE,KAAK;AACfC,EAAAA,YAAY,EAAE,eAAe;EAC7BC,oBAAoB,EAAEV,iBAAiB,CAACW,QAAQ;EAChDG,YAAY,EAAEd,iBAAiB,CAACW,QAAQ;AACxCC,EAAAA,aAAa,EAAE;AAChB,CAAA,CAAA,EACAT,cAAc,CAACY,QAAQ,EAAG;EACzBV,QAAQ,EAAEF,cAAc,CAACY,QAAQ;AACjCT,EAAAA,OAAO,EAAEV,iBAAiB;AAC1BW,EAAAA,MAAM,EAAE,QAAQ;AAChBC,EAAAA,QAAQ,EAAE,IAAI;AACdC,EAAAA,YAAY,EAAE,MAAM;EACpBC,oBAAoB,EAAEV,iBAAiB,CAACgB,KAAK;AAC7CJ,EAAAA,aAAa,EAAE;AAChB,CAAA,CAAA,EACAT,cAAc,CAACc,OAAO,EAAG;EACxBZ,QAAQ,EAAEF,cAAc,CAACc,OAAO;AAChCX,EAAAA,OAAO,EAAEd,gBAAgB;AACzBe,EAAAA,MAAM,EAAE,gBAAgB;AACxBC,EAAAA,QAAQ,EAAE,IAAI;AACdC,EAAAA,YAAY,EAAE,MAAM;EACpBC,oBAAoB,EAAEV,iBAAiB,CAACgB,KAAK;AAC7CJ,EAAAA,aAAa,EAAE;AAChB,CAAA,CAAA,EACAT,cAAc,CAACe,CAAC,EAAG;EAClBb,QAAQ,EAAEF,cAAc,CAACe,CAAC;AAC1BZ,EAAAA,OAAO,EAAEb,UAAU;AACnBc,EAAAA,MAAM,EAAE,uBAAuB;AAC/BC,EAAAA,QAAQ,EAAE,IAAI;AACdC,EAAAA,YAAY,EAAE,MAAM;EACpBC,oBAAoB,EAAEV,iBAAiB,CAACgB,KAAK;AAC7CJ,EAAAA,aAAa,EAAE;AAChB,CAAA;;;;"}

package/dist/utils/oauth/url.d.ts

@@ -1,4 +1,5 @@
 import { OAuthProviders } from "@turnkey/sdk-types";
+import { OAuthResponseMode } from "./config";
 /**
  * Builds the OAuth state parameter string
  */
@@ -17,6 +18,8 @@ export declare function openOAuthPopup(): Window | null;
  * Redirects to OAuth provider URL
  */
 export declare function redirectToOAuthProvider(url: string): Promise<never>;
+/** Checks that an OAuth response used the expected mode and redirect URI. */
+export declare function isExpectedOAuthRedirectUrl(responseUrl: string, redirectUri: string, responseMode: OAuthResponseMode): boolean;
 /**
  * Cleans up OAuth parameters from URL (removes hash and search)
  */

package/dist/utils/oauth/url.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"url.d.ts","sourceRoot":"","sources":["../../../src/utils/oauth/url.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,cAAc,EAGf,MAAM,oBAAoB,CAAC;AAQ5B;;GAEG;AACH,wBAAgB,eAAe,CAAC,MAAM,EAAE;IACtC,QAAQ,EAAE,cAAc,CAAC;IACzB,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC;IAC3B,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,eAAe,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,SAAS,CAAC;CACtD,GAAG,MAAM,CAkBT;AAED;;GAEG;AACH,wBAAgB,cAAc,IAAI,MAAM,GAAG,IAAI,CAW9C;AAED;;GAEG;AACH,wBAAgB,uBAAuB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,CASnE;AAED;;GAEG;AACH,wBAAgB,eAAe,IAAI,IAAI,CAEtC;AAED;;GAEG;AACH,wBAAgB,6BAA6B,IAAI,IAAI,CAMpD;AAED;;GAEG;AACH,wBAAgB,eAAe,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG;IACtE,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAAC;CACnC,CAcA;AAED;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAClC,8CAA8C;IAC9C,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC;IACpC,kDAAkD;IAClD,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC;IACrC,6BAA6B;IAC7B,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAChC,8BAA8B;IAC9B,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,2BAA2B;IAC3B,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,4BAA4B;IAC5B,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,iCAAiC;IACjC,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,8BAA8B;IAC9B,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,uBAAuB;IACvB,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,2DAA2D;IAC3D,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC9B;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,kBAAkB,CAChC,GAAG,EAAE,MAAM,EACX,gBAAgB,CAAC,EAAE,cAAc,GAChC,mBAAmB,GAAG,IAAI,CAsF5B;AAED;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAClC,QAAQ,EAAE,cAAc,CAAC;IACzB,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC;IAC3B,aAAa,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACnC,eAAe,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,SAAS,CAAC;CACtD;AAED;;GAEG;AACH,wBAAgB,aAAa,CAAC,MAAM,EAAE,mBAAmB,GAAG,MAAM,CA8DjE"}
+{"version":3,"file":"url.d.ts","sourceRoot":"","sources":["../../../src/utils/oauth/url.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,cAAc,EAGf,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAEL,iBAAiB,EAGlB,MAAM,UAAU,CAAC;AAOlB;;GAEG;AACH,wBAAgB,eAAe,CAAC,MAAM,EAAE;IACtC,QAAQ,EAAE,cAAc,CAAC;IACzB,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC;IAC3B,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,eAAe,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,SAAS,CAAC;CACtD,GAAG,MAAM,CAkBT;AAED;;GAEG;AACH,wBAAgB,cAAc,IAAI,MAAM,GAAG,IAAI,CAW9C;AAED;;GAEG;AACH,wBAAgB,uBAAuB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,CASnE;AAyED,6EAA6E;AAC7E,wBAAgB,0BAA0B,CACxC,WAAW,EAAE,MAAM,EACnB,WAAW,EAAE,MAAM,EACnB,YAAY,EAAE,iBAAiB,GAC9B,OAAO,CAmBT;AAED;;GAEG;AACH,wBAAgB,eAAe,IAAI,IAAI,CAEtC;AAED;;GAEG;AACH,wBAAgB,6BAA6B,IAAI,IAAI,CAMpD;AAED;;GAEG;AACH,wBAAgB,eAAe,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG;IACtE,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAAC;CACnC,CAcA;AAED;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAClC,8CAA8C;IAC9C,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC;IACpC,kDAAkD;IAClD,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC;IACrC,6BAA6B;IAC7B,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAChC,8BAA8B;IAC9B,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,2BAA2B;IAC3B,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,4BAA4B;IAC5B,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,iCAAiC;IACjC,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,8BAA8B;IAC9B,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,uBAAuB;IACvB,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,2DAA2D;IAC3D,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC9B;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,kBAAkB,CAChC,GAAG,EAAE,MAAM,EACX,gBAAgB,CAAC,EAAE,cAAc,GAChC,mBAAmB,GAAG,IAAI,CAsF5B;AAED;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAClC,QAAQ,EAAE,cAAc,CAAC;IACzB,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC;IAC3B,aAAa,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACnC,eAAe,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,SAAS,CAAC;CACtD;AAED;;GAEG;AACH,wBAAgB,aAAa,CAAC,MAAM,EAAE,mBAAmB,GAAG,MAAM,CA8DjE"}

package/dist/utils/oauth/url.js

@@ -50,6 +50,52 @@ function redirectToOAuthProvider(url) {
     window.addEventListener("beforeunload", () => clearTimeout(timeout));
   });
 }
+const OAUTH_QUERY_RESPONSE_PARAMS = new Set(["code", "error", "error_description", "error_uri", "iss", "scope", "session_state", "state"]);
+function hasSameUrlBase(response, expected) {
+  return response.protocol === expected.protocol && response.username === expected.username && response.password === expected.password && response.host === expected.host && response.pathname === expected.pathname;
+}
+function isExpectedFragmentResponse(response, expected) {
+  return response.hash !== "" && hasSameUrlBase(response, expected) && response.search === expected.search;
+}
+function hasValidQueryResponseParams(appendedParams, expectedNames) {
+  const responseNames = appendedParams.map(([name]) => name);
+  if (responseNames.some(name => expectedNames.has(name))) return false;
+  const recognizedNames = responseNames.filter(name => OAUTH_QUERY_RESPONSE_PARAMS.has(name));
+  const uniqueNames = new Set(recognizedNames);
+  if (recognizedNames.length !== uniqueNames.size) return false;
+  const hasCode = uniqueNames.has("code");
+  const hasError = uniqueNames.has("error");
+  // Every authorization request built by this package includes state. Its
+  // exact value is validated by parseOAuthResponse immediately afterward.
+  return uniqueNames.has("state") && hasCode !== hasError;
+}
+function isExpectedQueryResponse(response, expected) {
+  if (!hasSameUrlBase(response, expected)) return false;
+  const expectedParams = Array.from(expected.searchParams.entries());
+  const expectedNames = new Set(expectedParams.map(([name]) => name));
+  const hasReservedName = expectedParams.some(([name]) => OAUTH_QUERY_RESPONSE_PARAMS.has(name));
+  if (hasReservedName) return false;
+  const responseParams = Array.from(response.searchParams.entries());
+  const configuredQuery = new URLSearchParams(responseParams.slice(0, expectedParams.length)).toString();
+  if (configuredQuery !== expected.searchParams.toString()) return false;
+  const oauthParams = responseParams.slice(expectedParams.length);
+  return hasValidQueryResponseParams(oauthParams, expectedNames);
+}
+/** Checks that an OAuth response used the expected mode and redirect URI. */
+function isExpectedOAuthRedirectUrl(responseUrl, redirectUri, responseMode) {
+  // OAuth redirect URIs cannot contain fragments, including an empty one.
+  if (redirectUri.includes("#")) return false;
+  if (responseMode !== config.OAuthResponseMode.Fragment && responseUrl.includes("#")) return false;
+  let response;
+  let expected;
+  try {
+    response = new URL(responseUrl);
+    expected = new URL(redirectUri);
+  } catch {
+    return false;
+  }
+  return responseMode === config.OAuthResponseMode.Fragment ? isExpectedFragmentResponse(response, expected) : isExpectedQueryResponse(response, expected);
+}
 /**
  * Cleans up OAuth parameters from URL (removes hash and search)
  */
@@ -225,6 +271,7 @@ exports.buildOAuthState = buildOAuthState;
 exports.buildOAuthUrl = buildOAuthUrl;
 exports.cleanupOAuthUrl = cleanupOAuthUrl;
 exports.cleanupOAuthUrlPreserveSearch = cleanupOAuthUrlPreserveSearch;
+exports.isExpectedOAuthRedirectUrl = isExpectedOAuthRedirectUrl;
 exports.openOAuthPopup = openOAuthPopup;
 exports.parseOAuthResponse = parseOAuthResponse;
 exports.parseStateParam = parseStateParam;

package/dist/utils/oauth/url.js.map

@@ -1 +1 @@
-{"version":3,"file":"url.js","sources":["../../../src/utils/oauth/url.ts"],"sourcesContent":[null],"names":["buildOAuthState","params","provider","flow","publicKey","nonce","additionalState","state","encodeURIComponent","extra","Object","entries","map","k","v","join","openOAuthPopup","width","popupWidth","height","popupHeight","left","window","screenX","innerWidth","top","screenY","innerHeight","open","redirectToOAuthProvider","url","location","href","timeLimit","Promise","_","reject","timeout","setTimeout","Error","addEventListener","clearTimeout","cleanupOAuthUrl","history","replaceState","document","title","pathname","cleanupOAuthUrlPreserveSearch","search","parseStateParam","stateParam","result","pairs","split","pair","key","value","undefined","decodeURIComponent","parseOAuthResponse","expectedProvider","idToken","authCode","stateString","parsedUrl","URL","substring","hash","includes","searchParams","URLSearchParams","get","startsWith","idTokenMatch","match","stateEndIndex","indexOf","hashParams","TurnkeyError","TurnkeyErrorCodes","INVALID_OAUTH_STATE","consumeOAuthState","openModal","sessionKey","oauthIntent","config","OAUTH_PROVIDER_CONFIGS","usesPKCE","captchaToken","consumeOAuthCaptchaToken","buildOAuthUrl","clientId","redirectUri","codeChallenge","authUrl","set","responseType","scopes","responseMode","nonceInParams","OAuthProviders","GOOGLE","stateParams","storeOAuthState","toString"],"mappings":";;;;;;AAYA;;AAEG;AACG,SAAUA,eAAeA,CAACC,MAM/B,EAAA;EACC,MAAM;IAAEC,QAAQ;IAAEC,IAAI;IAAEC,SAAS;IAAEC,KAAK;AAAEC,IAAAA;AAAe,GAAE,GAAGL,MAAM;EACpE,IAAIM,KAAK,GAAG,CAAA,SAAA,EAAYL,QAAQ,CAAA,MAAA,EAASC,IAAI,CAAA,WAAA,EAAcK,kBAAkB,CAACJ,SAAS,CAAC,CAAA,CAAE;AAE1F,EAAA,IAAIC,KAAK,EAAE;IACTE,KAAK,IAAI,CAAA,OAAA,EAAUF,KAAK,CAAA,CAAE;AAC5B,EAAA;AAEA,EAAA,IAAIC,eAAe,EAAE;AACnB,IAAA,MAAMG,KAAK,GAAGC,MAAM,CAACC,OAAO,CAACL,eAAe,CAAC,CAC1CM,GAAG,CAAC,CAAC,CAACC,CAAC,EAAEC,CAAC,CAAC,KAAK,CAAA,EAAGN,kBAAkB,CAACK,CAAC,CAAC,IAAIL,kBAAkB,CAACM,CAAC,CAAC,EAAE,CAAC,CACpEC,IAAI,CAAC,GAAG,CAAC;AACZ,IAAA,IAAIN,KAAK,EAAE;MACTF,KAAK,IAAI,CAAA,CAAA,EAAIE,KAAK,CAAA,CAAE;AACtB,IAAA;AACF,EAAA;AAEA,EAAA,OAAOF,KAAK;AACd;AAEA;;AAEG;SACaS,cAAcA,GAAA;EAC5B,MAAMC,KAAK,GAAGC,iBAAU;EACxB,MAAMC,MAAM,GAAGC,kBAAW;AAC1B,EAAA,MAAMC,IAAI,GAAGC,MAAM,CAACC,OAAO,GAAG,CAACD,MAAM,CAACE,UAAU,GAAGP,KAAK,IAAI,CAAC;AAC7D,EAAA,MAAMQ,GAAG,GAAGH,MAAM,CAACI,OAAO,GAAG,CAACJ,MAAM,CAACK,WAAW,GAAGR,MAAM,IAAI,CAAC;AAE9D,EAAA,OAAOG,MAAM,CAACM,IAAI,CAChB,aAAa,EACb,QAAQ,EACR,CAAA,MAAA,EAASX,KAAK,WAAWE,MAAM,CAAA,KAAA,EAAQM,GAAG,CAAA,MAAA,EAASJ,IAAI,+BAA+B,CACvF;AACH;AAEA;;AAEG;AACG,SAAUQ,uBAAuBA,CAACC,GAAW,EAAA;AACjDR,EAAAA,MAAM,CAACS,QAAQ,CAACC,IAAI,GAAGF,GAAG;EAC1B,MAAMG,SAAS,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;AAChC,EAAA,OAAO,IAAIC,OAAO,CAAC,CAACC,CAAC,EAAEC,MAAM,KAAI;AAC/B,IAAA,MAAMC,OAAO,GAAGC,UAAU,CAAC,MAAK;AAC9BF,MAAAA,MAAM,CAAC,IAAIG,KAAK,CAAC,2BAA2B,CAAC,CAAC;IAChD,CAAC,EAAEN,SAAS,CAAC;IACbX,MAAM,CAACkB,gBAAgB,CAAC,cAAc,EAAE,MAAMC,YAAY,CAACJ,OAAO,CAAC,CAAC;AACtE,EAAA,CAAC,CAAC;AACJ;AAEA;;AAEG;SACaK,eAAeA,GAAA;AAC7BpB,EAAAA,MAAM,CAACqB,OAAO,CAACC,YAAY,CAAC,IAAI,EAAEC,QAAQ,CAACC,KAAK,EAAExB,MAAM,CAACS,QAAQ,CAACgB,QAAQ,CAAC;AAC7E;AAEA;;AAEG;SACaC,6BAA6BA,GAAA;EAC3C1B,MAAM,CAACqB,OAAO,CAACC,YAAY,CACzB,IAAI,EACJC,QAAQ,CAACC,KAAK,EACdxB,MAAM,CAACS,QAAQ,CAACgB,QAAQ,GAAGzB,MAAM,CAACS,QAAQ,CAACkB,MAAM,CAClD;AACH;AAEA;;AAEG;AACG,SAAUC,eAAeA,CAACC,UAAqC,EAAA;AASnE,EAAA,IAAI,CAACA,UAAU,EAAE,OAAO,EAAE;EAE1B,MAAMC,MAAM,GAA0C,EAAE;AACxD,EAAA,MAAMC,KAAK,GAAGF,UAAU,CAACG,KAAK,CAAC,GAAG,CAAC;AAEnC,EAAA,KAAK,MAAMC,IAAI,IAAIF,KAAK,EAAE;IACxB,MAAM,CAACG,GAAG,EAAEC,KAAK,CAAC,GAAGF,IAAI,CAACD,KAAK,CAAC,GAAG,CAAC;AACpC,IAAA,IAAIE,GAAG,IAAIC,KAAK,KAAKC,SAAS,EAAE;AAC9BN,MAAAA,MAAM,CAACI,GAAG,CAAC,GAAGG,kBAAkB,CAACF,KAAK,CAAC;AACzC,IAAA;AACF,EAAA;AAEA,EAAA,OAAOL,MAAM;AACf;AA4BA;;;;;;;;;;AAUG;AACG,SAAUQ,kBAAkBA,CAChC9B,GAAW,EACX+B,gBAAiC,EAAA;EAEjC,IAAIC,OAAO,GAA8B,IAAI;EAC7C,IAAIC,QAAQ,GAA8B,IAAI;EAC9C,IAAIC,WAAW,GAAkB,IAAI;AAErC,EAAA,MAAMC,SAAS,GAAG,IAAIC,GAAG,CAACpC,GAAG,CAAC;EAC9B,MAAMmB,MAAM,GAAGgB,SAAS,CAAChB,MAAM,CAACkB,SAAS,CAAC,CAAC,CAAC,CAAC;EAC7C,MAAMC,IAAI,GAAGH,SAAS,CAACG,IAAI,CAACD,SAAS,CAAC,CAAC,CAAC,CAAC;AAEzC;EACA,IAAIlB,MAAM,IAAIA,MAAM,CAACoB,QAAQ,CAAC,OAAO,CAAC,EAAE;AACtC,IAAA,MAAMC,YAAY,GAAG,IAAIC,eAAe,CAACtB,MAAM,CAAC;AAChDc,IAAAA,QAAQ,GAAGO,YAAY,CAACE,GAAG,CAAC,MAAM,CAAC;AACnCR,IAAAA,WAAW,GAAGM,YAAY,CAACE,GAAG,CAAC,OAAO,CAAC;AACzC,EAAA;AACA;OACK,IAAIJ,IAAI,EAAE;AACb;AACA,IAAA,IAAIA,IAAI,CAACK,UAAU,CAAC,sBAAsB,CAAC,EAAE;AAC3C;AACA,MAAA,MAAMC,YAAY,GAAGN,IAAI,CAACO,KAAK,CAAC,mBAAmB,CAAC;MACpDb,OAAO,GAAGY,YAAY,GAAGA,YAAY,CAAC,CAAC,CAAC,GAAG,IAAI;AAE/C;AACA,MAAA,MAAME,aAAa,GAAGR,IAAI,CAACS,OAAO,CAAC,QAAQ,CAAC;AAC5C,MAAA,IAAID,aAAa,KAAK,EAAE,EAAE;QACxBZ,WAAW,GAAGI,IAAI,CAACD,SAAS,CAAC,CAAC,EAAES,aAAa,CAAC,CAAC;AACjD,MAAA;AACF,IAAA,CAAC,MAAM;AACL;AACA,MAAA,MAAME,UAAU,GAAG,IAAIP,eAAe,CAACH,IAAI,CAAC;AAC5CN,MAAAA,OAAO,GAAGgB,UAAU,CAACN,GAAG,CAAC,UAAU,CAAC;AACpCR,MAAAA,WAAW,GAAGc,UAAU,CAACN,GAAG,CAAC,OAAO,CAAC;AACvC,IAAA;AACF,EAAA;EAEA,IAAI,CAACR,WAAW,EAAE;IAChB,MAAM,IAAIe,qBAAY,CACpB,0CAA0C,EAC1CC,0BAAiB,CAACC,mBAAmB,CACtC;AACH,EAAA;AAEA;EACAC,yBAAiB,CAAClB,WAAW,CAAC;AAE9B;EACA,MAAM;IACJ9D,QAAQ;IACRC,IAAI;IACJC,SAAS;IACT+E,SAAS;IACTC,UAAU;IACVC,WAAW;AACXhF,IAAAA;AAAK,GACN,GAAG6C,eAAe,CAACc,WAAW,CAAC;AAEhC;AACA,EAAA,IAAIH,gBAAgB,EAAE;AACpB,IAAA,MAAMyB,QAAM,GAAGC,6BAAsB,CAAC1B,gBAAgB,CAAC;IAEvD,IAAIyB,QAAM,CAACE,QAAQ,EAAE;AACnB;MACA,IAAI,CAACzB,QAAQ,IAAI,CAACC,WAAW,IAAI9D,QAAQ,KAAK2D,gBAAgB,EAAE;AAC9D,QAAA,OAAO,IAAI;AACb,MAAA;AACF,IAAA,CAAC,MAAM;AACL;MACA,IAAI,CAACC,OAAO,EAAE;AACZ,QAAA,OAAO,IAAI;AACb,MAAA;AACF,IAAA;AACF,EAAA;EAEA,OAAO;IACLA,OAAO;IACPC,QAAQ;IACR7D,QAAQ,EAAEA,QAAQ,IAAI,IAAI;IAC1BC,IAAI,EAAEA,IAAI,IAAI,IAAI;IAClBC,SAAS,EAAEA,SAAS,IAAI,IAAI;IAC5B+E,SAAS,EAAEA,SAAS,IAAI,IAAI;IAC5BC,UAAU,EAAEA,UAAU,IAAI1B,SAAS;IACnC2B,WAAW,EAAEA,WAAW,IAAI,IAAI;IAChChF,KAAK,EAAEA,KAAK,IAAI,IAAI;IACpBoF,YAAY,EAAEC,gCAAwB;GACvC;AACH;AAgBA;;AAEG;AACG,SAAUC,aAAaA,CAAC1F,MAA2B,EAAA;EACvD,MAAM;IACJC,QAAQ;IACR0F,QAAQ;IACRC,WAAW;IACXzF,SAAS;IACTC,KAAK;IACLF,IAAI;IACJ2F,aAAa;AACbxF,IAAAA;AAAe,GAChB,GAAGL,MAAM;AAEV,EAAA,MAAMqF,QAAM,GAAGC,6BAAsB,CAACrF,QAAQ,CAAC;EAC/C,MAAM6F,OAAO,GAAG,IAAI7B,GAAG,CAACoB,QAAM,CAACS,OAAO,CAAC;EAEvCA,OAAO,CAACzB,YAAY,CAAC0B,GAAG,CAAC,WAAW,EAAEJ,QAAQ,CAAC;EAC/CG,OAAO,CAACzB,YAAY,CAAC0B,GAAG,CAAC,cAAc,EAAEH,WAAW,CAAC;EACrDE,OAAO,CAACzB,YAAY,CAAC0B,GAAG,CAAC,eAAe,EAAEV,QAAM,CAACW,YAAY,CAAC;EAE9D,IAAIX,QAAM,CAACY,MAAM,EAAE;IACjBH,OAAO,CAACzB,YAAY,CAAC0B,GAAG,CAAC,OAAO,EAAEV,QAAM,CAACY,MAAM,CAAC;AAClD,EAAA;EAEA,IAAIZ,QAAM,CAACa,YAAY,EAAE;IACvBJ,OAAO,CAACzB,YAAY,CAAC0B,GAAG,CAAC,eAAe,EAAEV,QAAM,CAACa,YAAY,CAAC;AAChE,EAAA;AAEA;AACA,EAAA,IAAIb,QAAM,CAACE,QAAQ,IAAIM,aAAa,EAAE;IACpCC,OAAO,CAACzB,YAAY,CAAC0B,GAAG,CAAC,gBAAgB,EAAEF,aAAa,CAAC;IACzDC,OAAO,CAACzB,YAAY,CAAC0B,GAAG,CAAC,uBAAuB,EAAE,MAAM,CAAC;AAC3D,EAAA;AAEA;EACA,IAAIV,QAAM,CAACc,aAAa,EAAE;IACxBL,OAAO,CAACzB,YAAY,CAAC0B,GAAG,CAAC,OAAO,EAAE3F,KAAK,CAAC;AAC1C,EAAA;AAEA;AACA,EAAA,IAAIH,QAAQ,KAAKmG,uBAAc,CAACC,MAAM,EAAE;IACtCP,OAAO,CAACzB,YAAY,CAAC0B,GAAG,CAAC,QAAQ,EAAE,gBAAgB,CAAC;AACtD,EAAA;AAEA;AACA,EAAA,MAAMO,WAAW,GAA0C;IACzDrG,QAAQ;IACRC,IAAI;AACJC,IAAAA;GACD;AACD;AACA,EAAA,IAAI,CAACkF,QAAM,CAACc,aAAa,EAAE;IACzBG,WAAW,CAAClG,KAAK,GAAGA,KAAK;AAC3B,EAAA;AACA,EAAA,IAAIC,eAAe,EAAE;IACnBiG,WAAW,CAACjG,eAAe,GAAGA,eAAe;AAC/C,EAAA;AACA;AACA,EAAA,MAAMC,KAAK,GAAGP,eAAe,CAACuG,WAAW,CAAC;EAC1CR,OAAO,CAACzB,YAAY,CAAC0B,GAAG,CAAC,OAAO,EAAEzF,KAAK,CAAC;EACxCiG,uBAAe,CAACjG,KAAK,CAAC;AAEtB,EAAA,OAAOwF,OAAO,CAACU,QAAQ,EAAE;AAC3B;;;;;;;;;;;"}
+{"version":3,"file":"url.js","sources":["../../../src/utils/oauth/url.ts"],"sourcesContent":[null],"names":["buildOAuthState","params","provider","flow","publicKey","nonce","additionalState","state","encodeURIComponent","extra","Object","entries","map","k","v","join","openOAuthPopup","width","popupWidth","height","popupHeight","left","window","screenX","innerWidth","top","screenY","innerHeight","open","redirectToOAuthProvider","url","location","href","timeLimit","Promise","_","reject","timeout","setTimeout","Error","addEventListener","clearTimeout","OAUTH_QUERY_RESPONSE_PARAMS","Set","hasSameUrlBase","response","expected","protocol","username","password","host","pathname","isExpectedFragmentResponse","hash","search","hasValidQueryResponseParams","appendedParams","expectedNames","responseNames","name","some","has","recognizedNames","filter","uniqueNames","length","size","hasCode","hasError","isExpectedQueryResponse","expectedParams","Array","from","searchParams","hasReservedName","responseParams","configuredQuery","URLSearchParams","slice","toString","oauthParams","isExpectedOAuthRedirectUrl","responseUrl","redirectUri","responseMode","includes","OAuthResponseMode","Fragment","URL","cleanupOAuthUrl","history","replaceState","document","title","cleanupOAuthUrlPreserveSearch","parseStateParam","stateParam","result","pairs","split","pair","key","value","undefined","decodeURIComponent","parseOAuthResponse","expectedProvider","idToken","authCode","stateString","parsedUrl","substring","get","startsWith","idTokenMatch","match","stateEndIndex","indexOf","hashParams","TurnkeyError","TurnkeyErrorCodes","INVALID_OAUTH_STATE","consumeOAuthState","openModal","sessionKey","oauthIntent","config","OAUTH_PROVIDER_CONFIGS","usesPKCE","captchaToken","consumeOAuthCaptchaToken","buildOAuthUrl","clientId","codeChallenge","authUrl","set","responseType","scopes","nonceInParams","OAuthProviders","GOOGLE","stateParams","storeOAuthState"],"mappings":";;;;;;AAiBA;;AAEG;AACG,SAAUA,eAAeA,CAACC,MAM/B,EAAA;EACC,MAAM;IAAEC,QAAQ;IAAEC,IAAI;IAAEC,SAAS;IAAEC,KAAK;AAAEC,IAAAA;AAAe,GAAE,GAAGL,MAAM;EACpE,IAAIM,KAAK,GAAG,CAAA,SAAA,EAAYL,QAAQ,CAAA,MAAA,EAASC,IAAI,CAAA,WAAA,EAAcK,kBAAkB,CAACJ,SAAS,CAAC,CAAA,CAAE;AAE1F,EAAA,IAAIC,KAAK,EAAE;IACTE,KAAK,IAAI,CAAA,OAAA,EAAUF,KAAK,CAAA,CAAE;AAC5B,EAAA;AAEA,EAAA,IAAIC,eAAe,EAAE;AACnB,IAAA,MAAMG,KAAK,GAAGC,MAAM,CAACC,OAAO,CAACL,eAAe,CAAC,CAC1CM,GAAG,CAAC,CAAC,CAACC,CAAC,EAAEC,CAAC,CAAC,KAAK,CAAA,EAAGN,kBAAkB,CAACK,CAAC,CAAC,IAAIL,kBAAkB,CAACM,CAAC,CAAC,EAAE,CAAC,CACpEC,IAAI,CAAC,GAAG,CAAC;AACZ,IAAA,IAAIN,KAAK,EAAE;MACTF,KAAK,IAAI,CAAA,CAAA,EAAIE,KAAK,CAAA,CAAE;AACtB,IAAA;AACF,EAAA;AAEA,EAAA,OAAOF,KAAK;AACd;AAEA;;AAEG;SACaS,cAAcA,GAAA;EAC5B,MAAMC,KAAK,GAAGC,iBAAU;EACxB,MAAMC,MAAM,GAAGC,kBAAW;AAC1B,EAAA,MAAMC,IAAI,GAAGC,MAAM,CAACC,OAAO,GAAG,CAACD,MAAM,CAACE,UAAU,GAAGP,KAAK,IAAI,CAAC;AAC7D,EAAA,MAAMQ,GAAG,GAAGH,MAAM,CAACI,OAAO,GAAG,CAACJ,MAAM,CAACK,WAAW,GAAGR,MAAM,IAAI,CAAC;AAE9D,EAAA,OAAOG,MAAM,CAACM,IAAI,CAChB,aAAa,EACb,QAAQ,EACR,CAAA,MAAA,EAASX,KAAK,WAAWE,MAAM,CAAA,KAAA,EAAQM,GAAG,CAAA,MAAA,EAASJ,IAAI,+BAA+B,CACvF;AACH;AAEA;;AAEG;AACG,SAAUQ,uBAAuBA,CAACC,GAAW,EAAA;AACjDR,EAAAA,MAAM,CAACS,QAAQ,CAACC,IAAI,GAAGF,GAAG;EAC1B,MAAMG,SAAS,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;AAChC,EAAA,OAAO,IAAIC,OAAO,CAAC,CAACC,CAAC,EAAEC,MAAM,KAAI;AAC/B,IAAA,MAAMC,OAAO,GAAGC,UAAU,CAAC,MAAK;AAC9BF,MAAAA,MAAM,CAAC,IAAIG,KAAK,CAAC,2BAA2B,CAAC,CAAC;IAChD,CAAC,EAAEN,SAAS,CAAC;IACbX,MAAM,CAACkB,gBAAgB,CAAC,cAAc,EAAE,MAAMC,YAAY,CAACJ,OAAO,CAAC,CAAC;AACtE,EAAA,CAAC,CAAC;AACJ;AAEA,MAAMK,2BAA2B,GAAG,IAAIC,GAAG,CAAC,CAC1C,MAAM,EACN,OAAO,EACP,mBAAmB,EACnB,WAAW,EACX,KAAK,EACL,OAAO,EACP,eAAe,EACf,OAAO,CACR,CAAC;AAIF,SAASC,cAAcA,CAACC,QAAa,EAAEC,QAAa,EAAA;AAClD,EAAA,OACED,QAAQ,CAACE,QAAQ,KAAKD,QAAQ,CAACC,QAAQ,IACvCF,QAAQ,CAACG,QAAQ,KAAKF,QAAQ,CAACE,QAAQ,IACvCH,QAAQ,CAACI,QAAQ,KAAKH,QAAQ,CAACG,QAAQ,IACvCJ,QAAQ,CAACK,IAAI,KAAKJ,QAAQ,CAACI,IAAI,IAC/BL,QAAQ,CAACM,QAAQ,KAAKL,QAAQ,CAACK,QAAQ;AAE3C;AAEA,SAASC,0BAA0BA,CAACP,QAAa,EAAEC,QAAa,EAAA;AAC9D,EAAA,OACED,QAAQ,CAACQ,IAAI,KAAK,EAAE,IACpBT,cAAc,CAACC,QAAQ,EAAEC,QAAQ,CAAC,IAClCD,QAAQ,CAACS,MAAM,KAAKR,QAAQ,CAACQ,MAAM;AAEvC;AAEA,SAASC,2BAA2BA,CAClCC,cAA4B,EAC5BC,aAA0B,EAAA;AAE1B,EAAA,MAAMC,aAAa,GAAGF,cAAc,CAAC5C,GAAG,CAAC,CAAC,CAAC+C,IAAI,CAAC,KAAKA,IAAI,CAAC;AAC1D,EAAA,IAAID,aAAa,CAACE,IAAI,CAAED,IAAI,IAAKF,aAAa,CAACI,GAAG,CAACF,IAAI,CAAC,CAAC,EAAE,OAAO,KAAK;AAEvE,EAAA,MAAMG,eAAe,GAAGJ,aAAa,CAACK,MAAM,CAAEJ,IAAI,IAChDjB,2BAA2B,CAACmB,GAAG,CAACF,IAAI,CAAC,CACtC;AACD,EAAA,MAAMK,WAAW,GAAG,IAAIrB,GAAG,CAACmB,eAAe,CAAC;EAC5C,IAAIA,eAAe,CAACG,MAAM,KAAKD,WAAW,CAACE,IAAI,EAAE,OAAO,KAAK;AAE7D,EAAA,MAAMC,OAAO,GAAGH,WAAW,CAACH,GAAG,CAAC,MAAM,CAAC;AACvC,EAAA,MAAMO,QAAQ,GAAGJ,WAAW,CAACH,GAAG,CAAC,OAAO,CAAC;AACzC;AACA;EACA,OAAOG,WAAW,CAACH,GAAG,CAAC,OAAO,CAAC,IAAIM,OAAO,KAAKC,QAAQ;AACzD;AAEA,SAASC,uBAAuBA,CAACxB,QAAa,EAAEC,QAAa,EAAA;EAC3D,IAAI,CAACF,cAAc,CAACC,QAAQ,EAAEC,QAAQ,CAAC,EAAE,OAAO,KAAK;AAErD,EAAA,MAAMwB,cAAc,GAAGC,KAAK,CAACC,IAAI,CAAC1B,QAAQ,CAAC2B,YAAY,CAAC9D,OAAO,EAAE,CAAC;AAClE,EAAA,MAAM8C,aAAa,GAAG,IAAId,GAAG,CAAC2B,cAAc,CAAC1D,GAAG,CAAC,CAAC,CAAC+C,IAAI,CAAC,KAAKA,IAAI,CAAC,CAAC;AACnE,EAAA,MAAMe,eAAe,GAAGJ,cAAc,CAACV,IAAI,CAAC,CAAC,CAACD,IAAI,CAAC,KACjDjB,2BAA2B,CAACmB,GAAG,CAACF,IAAI,CAAC,CACtC;EACD,IAAIe,eAAe,EAAE,OAAO,KAAK;AAEjC,EAAA,MAAMC,cAAc,GAAGJ,KAAK,CAACC,IAAI,CAAC3B,QAAQ,CAAC4B,YAAY,CAAC9D,OAAO,EAAE,CAAC;AAClE,EAAA,MAAMiE,eAAe,GAAG,IAAIC,eAAe,CACzCF,cAAc,CAACG,KAAK,CAAC,CAAC,EAAER,cAAc,CAACL,MAAM,CAAC,CAC/C,CAACc,QAAQ,EAAE;EACZ,IAAIH,eAAe,KAAK9B,QAAQ,CAAC2B,YAAY,CAACM,QAAQ,EAAE,EAAE,OAAO,KAAK;EAEtE,MAAMC,WAAW,GAAGL,cAAc,CAACG,KAAK,CAACR,cAAc,CAACL,MAAM,CAAC;AAC/D,EAAA,OAAOV,2BAA2B,CAACyB,WAAW,EAAEvB,aAAa,CAAC;AAChE;AAEA;SACgBwB,0BAA0BA,CACxCC,WAAmB,EACnBC,WAAmB,EACnBC,YAA+B,EAAA;AAE/B;EACA,IAAID,WAAW,CAACE,QAAQ,CAAC,GAAG,CAAC,EAAE,OAAO,KAAK;AAC3C,EAAA,IAAID,YAAY,KAAKE,wBAAiB,CAACC,QAAQ,IAAIL,WAAW,CAACG,QAAQ,CAAC,GAAG,CAAC,EAC1E,OAAO,KAAK;AAEd,EAAA,IAAIxC,QAAa;AACjB,EAAA,IAAIC,QAAa;EAEjB,IAAI;AACFD,IAAAA,QAAQ,GAAG,IAAI2C,GAAG,CAACN,WAAW,CAAC;AAC/BpC,IAAAA,QAAQ,GAAG,IAAI0C,GAAG,CAACL,WAAW,CAAC;AACjC,EAAA,CAAC,CAAC,MAAM;AACN,IAAA,OAAO,KAAK;AACd,EAAA;AAEA,EAAA,OAAOC,YAAY,KAAKE,wBAAiB,CAACC,QAAQ,GAC9CnC,0BAA0B,CAACP,QAAQ,EAAEC,QAAQ,CAAC,GAC9CuB,uBAAuB,CAACxB,QAAQ,EAAEC,QAAQ,CAAC;AACjD;AAEA;;AAEG;SACa2C,eAAeA,GAAA;AAC7BnE,EAAAA,MAAM,CAACoE,OAAO,CAACC,YAAY,CAAC,IAAI,EAAEC,QAAQ,CAACC,KAAK,EAAEvE,MAAM,CAACS,QAAQ,CAACoB,QAAQ,CAAC;AAC7E;AAEA;;AAEG;SACa2C,6BAA6BA,GAAA;EAC3CxE,MAAM,CAACoE,OAAO,CAACC,YAAY,CACzB,IAAI,EACJC,QAAQ,CAACC,KAAK,EACdvE,MAAM,CAACS,QAAQ,CAACoB,QAAQ,GAAG7B,MAAM,CAACS,QAAQ,CAACuB,MAAM,CAClD;AACH;AAEA;;AAEG;AACG,SAAUyC,eAAeA,CAACC,UAAqC,EAAA;AASnE,EAAA,IAAI,CAACA,UAAU,EAAE,OAAO,EAAE;EAE1B,MAAMC,MAAM,GAA0C,EAAE;AACxD,EAAA,MAAMC,KAAK,GAAGF,UAAU,CAACG,KAAK,CAAC,GAAG,CAAC;AAEnC,EAAA,KAAK,MAAMC,IAAI,IAAIF,KAAK,EAAE;IACxB,MAAM,CAACG,GAAG,EAAEC,KAAK,CAAC,GAAGF,IAAI,CAACD,KAAK,CAAC,GAAG,CAAC;AACpC,IAAA,IAAIE,GAAG,IAAIC,KAAK,KAAKC,SAAS,EAAE;AAC9BN,MAAAA,MAAM,CAACI,GAAG,CAAC,GAAGG,kBAAkB,CAACF,KAAK,CAAC;AACzC,IAAA;AACF,EAAA;AAEA,EAAA,OAAOL,MAAM;AACf;AA4BA;;;;;;;;;;AAUG;AACG,SAAUQ,kBAAkBA,CAChC3E,GAAW,EACX4E,gBAAiC,EAAA;EAEjC,IAAIC,OAAO,GAA8B,IAAI;EAC7C,IAAIC,QAAQ,GAA8B,IAAI;EAC9C,IAAIC,WAAW,GAAkB,IAAI;AAErC,EAAA,MAAMC,SAAS,GAAG,IAAItB,GAAG,CAAC1D,GAAG,CAAC;EAC9B,MAAMwB,MAAM,GAAGwD,SAAS,CAACxD,MAAM,CAACyD,SAAS,CAAC,CAAC,CAAC,CAAC;EAC7C,MAAM1D,IAAI,GAAGyD,SAAS,CAACzD,IAAI,CAAC0D,SAAS,CAAC,CAAC,CAAC,CAAC;AAEzC;EACA,IAAIzD,MAAM,IAAIA,MAAM,CAAC+B,QAAQ,CAAC,OAAO,CAAC,EAAE;AACtC,IAAA,MAAMZ,YAAY,GAAG,IAAII,eAAe,CAACvB,MAAM,CAAC;AAChDsD,IAAAA,QAAQ,GAAGnC,YAAY,CAACuC,GAAG,CAAC,MAAM,CAAC;AACnCH,IAAAA,WAAW,GAAGpC,YAAY,CAACuC,GAAG,CAAC,OAAO,CAAC;AACzC,EAAA;AACA;OACK,IAAI3D,IAAI,EAAE;AACb;AACA,IAAA,IAAIA,IAAI,CAAC4D,UAAU,CAAC,sBAAsB,CAAC,EAAE;AAC3C;AACA,MAAA,MAAMC,YAAY,GAAG7D,IAAI,CAAC8D,KAAK,CAAC,mBAAmB,CAAC;MACpDR,OAAO,GAAGO,YAAY,GAAGA,YAAY,CAAC,CAAC,CAAC,GAAG,IAAI;AAE/C;AACA,MAAA,MAAME,aAAa,GAAG/D,IAAI,CAACgE,OAAO,CAAC,QAAQ,CAAC;AAC5C,MAAA,IAAID,aAAa,KAAK,EAAE,EAAE;QACxBP,WAAW,GAAGxD,IAAI,CAAC0D,SAAS,CAAC,CAAC,EAAEK,aAAa,CAAC,CAAC;AACjD,MAAA;AACF,IAAA,CAAC,MAAM;AACL;AACA,MAAA,MAAME,UAAU,GAAG,IAAIzC,eAAe,CAACxB,IAAI,CAAC;AAC5CsD,MAAAA,OAAO,GAAGW,UAAU,CAACN,GAAG,CAAC,UAAU,CAAC;AACpCH,MAAAA,WAAW,GAAGS,UAAU,CAACN,GAAG,CAAC,OAAO,CAAC;AACvC,IAAA;AACF,EAAA;EAEA,IAAI,CAACH,WAAW,EAAE;IAChB,MAAM,IAAIU,qBAAY,CACpB,0CAA0C,EAC1CC,0BAAiB,CAACC,mBAAmB,CACtC;AACH,EAAA;AAEA;EACAC,yBAAiB,CAACb,WAAW,CAAC;AAE9B;EACA,MAAM;IACJ3G,QAAQ;IACRC,IAAI;IACJC,SAAS;IACTuH,SAAS;IACTC,UAAU;IACVC,WAAW;AACXxH,IAAAA;AAAK,GACN,GAAG0F,eAAe,CAACc,WAAW,CAAC;AAEhC;AACA,EAAA,IAAIH,gBAAgB,EAAE;AACpB,IAAA,MAAMoB,QAAM,GAAGC,6BAAsB,CAACrB,gBAAgB,CAAC;IAEvD,IAAIoB,QAAM,CAACE,QAAQ,EAAE;AACnB;MACA,IAAI,CAACpB,QAAQ,IAAI,CAACC,WAAW,IAAI3G,QAAQ,KAAKwG,gBAAgB,EAAE;AAC9D,QAAA,OAAO,IAAI;AACb,MAAA;AACF,IAAA,CAAC,MAAM;AACL;MACA,IAAI,CAACC,OAAO,EAAE;AACZ,QAAA,OAAO,IAAI;AACb,MAAA;AACF,IAAA;AACF,EAAA;EAEA,OAAO;IACLA,OAAO;IACPC,QAAQ;IACR1G,QAAQ,EAAEA,QAAQ,IAAI,IAAI;IAC1BC,IAAI,EAAEA,IAAI,IAAI,IAAI;IAClBC,SAAS,EAAEA,SAAS,IAAI,IAAI;IAC5BuH,SAAS,EAAEA,SAAS,IAAI,IAAI;IAC5BC,UAAU,EAAEA,UAAU,IAAIrB,SAAS;IACnCsB,WAAW,EAAEA,WAAW,IAAI,IAAI;IAChCxH,KAAK,EAAEA,KAAK,IAAI,IAAI;IACpB4H,YAAY,EAAEC,gCAAwB;GACvC;AACH;AAgBA;;AAEG;AACG,SAAUC,aAAaA,CAAClI,MAA2B,EAAA;EACvD,MAAM;IACJC,QAAQ;IACRkI,QAAQ;IACRjD,WAAW;IACX/E,SAAS;IACTC,KAAK;IACLF,IAAI;IACJkI,aAAa;AACb/H,IAAAA;AAAe,GAChB,GAAGL,MAAM;AAEV,EAAA,MAAM6H,QAAM,GAAGC,6BAAsB,CAAC7H,QAAQ,CAAC;EAC/C,MAAMoI,OAAO,GAAG,IAAI9C,GAAG,CAACsC,QAAM,CAACQ,OAAO,CAAC;EAEvCA,OAAO,CAAC7D,YAAY,CAAC8D,GAAG,CAAC,WAAW,EAAEH,QAAQ,CAAC;EAC/CE,OAAO,CAAC7D,YAAY,CAAC8D,GAAG,CAAC,cAAc,EAAEpD,WAAW,CAAC;EACrDmD,OAAO,CAAC7D,YAAY,CAAC8D,GAAG,CAAC,eAAe,EAAET,QAAM,CAACU,YAAY,CAAC;EAE9D,IAAIV,QAAM,CAACW,MAAM,EAAE;IACjBH,OAAO,CAAC7D,YAAY,CAAC8D,GAAG,CAAC,OAAO,EAAET,QAAM,CAACW,MAAM,CAAC;AAClD,EAAA;EAEA,IAAIX,QAAM,CAAC1C,YAAY,EAAE;IACvBkD,OAAO,CAAC7D,YAAY,CAAC8D,GAAG,CAAC,eAAe,EAAET,QAAM,CAAC1C,YAAY,CAAC;AAChE,EAAA;AAEA;AACA,EAAA,IAAI0C,QAAM,CAACE,QAAQ,IAAIK,aAAa,EAAE;IACpCC,OAAO,CAAC7D,YAAY,CAAC8D,GAAG,CAAC,gBAAgB,EAAEF,aAAa,CAAC;IACzDC,OAAO,CAAC7D,YAAY,CAAC8D,GAAG,CAAC,uBAAuB,EAAE,MAAM,CAAC;AAC3D,EAAA;AAEA;EACA,IAAIT,QAAM,CAACY,aAAa,EAAE;IACxBJ,OAAO,CAAC7D,YAAY,CAAC8D,GAAG,CAAC,OAAO,EAAElI,KAAK,CAAC;AAC1C,EAAA;AAEA;AACA,EAAA,IAAIH,QAAQ,KAAKyI,uBAAc,CAACC,MAAM,EAAE;IACtCN,OAAO,CAAC7D,YAAY,CAAC8D,GAAG,CAAC,QAAQ,EAAE,gBAAgB,CAAC;AACtD,EAAA;AAEA;AACA,EAAA,MAAMM,WAAW,GAA0C;IACzD3I,QAAQ;IACRC,IAAI;AACJC,IAAAA;GACD;AACD;AACA,EAAA,IAAI,CAAC0H,QAAM,CAACY,aAAa,EAAE;IACzBG,WAAW,CAACxI,KAAK,GAAGA,KAAK;AAC3B,EAAA;AACA,EAAA,IAAIC,eAAe,EAAE;IACnBuI,WAAW,CAACvI,eAAe,GAAGA,eAAe;AAC/C,EAAA;AACA;AACA,EAAA,MAAMC,KAAK,GAAGP,eAAe,CAAC6I,WAAW,CAAC;EAC1CP,OAAO,CAAC7D,YAAY,CAAC8D,GAAG,CAAC,OAAO,EAAEhI,KAAK,CAAC;EACxCuI,uBAAe,CAACvI,KAAK,CAAC;AAEtB,EAAA,OAAO+H,OAAO,CAACvD,QAAQ,EAAE;AAC3B;;;;;;;;;;;;"}

package/dist/utils/oauth/url.mjs

@@ -1,6 +1,6 @@
-import { createForOfIteratorHelper as _createForOfIteratorHelper, slicedToArray as _slicedToArray } from '../../_virtual/_rollupPluginBabelHelpers.mjs';
+import { slicedToArray as _slicedToArray, createForOfIteratorHelper as _createForOfIteratorHelper } from '../../_virtual/_rollupPluginBabelHelpers.mjs';
 import { TurnkeyError, TurnkeyErrorCodes, OAuthProviders } from '@turnkey/sdk-types';
-import { OAUTH_PROVIDER_CONFIGS, popupWidth, popupHeight } from './config.mjs';
+import { OAuthResponseMode, OAUTH_PROVIDER_CONFIGS, popupWidth, popupHeight } from './config.mjs';
 import { consumeOAuthState, consumeOAuthCaptchaToken, storeOAuthState } from './storage.mjs';
 
 /**
@@ -54,6 +54,68 @@ function redirectToOAuthProvider(url) {
     });
   });
 }
+var OAUTH_QUERY_RESPONSE_PARAMS = new Set(["code", "error", "error_description", "error_uri", "iss", "scope", "session_state", "state"]);
+function hasSameUrlBase(response, expected) {
+  return response.protocol === expected.protocol && response.username === expected.username && response.password === expected.password && response.host === expected.host && response.pathname === expected.pathname;
+}
+function isExpectedFragmentResponse(response, expected) {
+  return response.hash !== "" && hasSameUrlBase(response, expected) && response.search === expected.search;
+}
+function hasValidQueryResponseParams(appendedParams, expectedNames) {
+  var responseNames = appendedParams.map(function (_ref3) {
+    var _ref4 = _slicedToArray(_ref3, 1),
+      name = _ref4[0];
+    return name;
+  });
+  if (responseNames.some(function (name) {
+    return expectedNames.has(name);
+  })) return false;
+  var recognizedNames = responseNames.filter(function (name) {
+    return OAUTH_QUERY_RESPONSE_PARAMS.has(name);
+  });
+  var uniqueNames = new Set(recognizedNames);
+  if (recognizedNames.length !== uniqueNames.size) return false;
+  var hasCode = uniqueNames.has("code");
+  var hasError = uniqueNames.has("error");
+  // Every authorization request built by this package includes state. Its
+  // exact value is validated by parseOAuthResponse immediately afterward.
+  return uniqueNames.has("state") && hasCode !== hasError;
+}
+function isExpectedQueryResponse(response, expected) {
+  if (!hasSameUrlBase(response, expected)) return false;
+  var expectedParams = Array.from(expected.searchParams.entries());
+  var expectedNames = new Set(expectedParams.map(function (_ref5) {
+    var _ref6 = _slicedToArray(_ref5, 1),
+      name = _ref6[0];
+    return name;
+  }));
+  var hasReservedName = expectedParams.some(function (_ref7) {
+    var _ref8 = _slicedToArray(_ref7, 1),
+      name = _ref8[0];
+    return OAUTH_QUERY_RESPONSE_PARAMS.has(name);
+  });
+  if (hasReservedName) return false;
+  var responseParams = Array.from(response.searchParams.entries());
+  var configuredQuery = new URLSearchParams(responseParams.slice(0, expectedParams.length)).toString();
+  if (configuredQuery !== expected.searchParams.toString()) return false;
+  var oauthParams = responseParams.slice(expectedParams.length);
+  return hasValidQueryResponseParams(oauthParams, expectedNames);
+}
+/** Checks that an OAuth response used the expected mode and redirect URI. */
+function isExpectedOAuthRedirectUrl(responseUrl, redirectUri, responseMode) {
+  // OAuth redirect URIs cannot contain fragments, including an empty one.
+  if (redirectUri.includes("#")) return false;
+  if (responseMode !== OAuthResponseMode.Fragment && responseUrl.includes("#")) return false;
+  var response;
+  var expected;
+  try {
+    response = new URL(responseUrl);
+    expected = new URL(redirectUri);
+  } catch (_unused) {
+    return false;
+  }
+  return responseMode === OAuthResponseMode.Fragment ? isExpectedFragmentResponse(response, expected) : isExpectedQueryResponse(response, expected);
+}
 /**
  * Cleans up OAuth parameters from URL (removes hash and search)
  */
@@ -234,5 +296,5 @@ function buildOAuthUrl(params) {
   return authUrl.toString();
 }
 
-export { buildOAuthState, buildOAuthUrl, cleanupOAuthUrl, cleanupOAuthUrlPreserveSearch, openOAuthPopup, parseOAuthResponse, parseStateParam, redirectToOAuthProvider };
+export { buildOAuthState, buildOAuthUrl, cleanupOAuthUrl, cleanupOAuthUrlPreserveSearch, isExpectedOAuthRedirectUrl, openOAuthPopup, parseOAuthResponse, parseStateParam, redirectToOAuthProvider };
 //# sourceMappingURL=url.mjs.map

package/dist/utils/oauth/url.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"url.mjs","sources":["../../../src/utils/oauth/url.ts"],"sourcesContent":[null],"names":["buildOAuthState","params","provider","flow","publicKey","nonce","additionalState","state","concat","encodeURIComponent","extra","Object","entries","map","_ref","_ref2","_slicedToArray","k","v","join","openOAuthPopup","width","popupWidth","height","popupHeight","left","window","screenX","innerWidth","top","screenY","innerHeight","open","redirectToOAuthProvider","url","location","href","timeLimit","Promise","_","reject","timeout","setTimeout","Error","addEventListener","clearTimeout","cleanupOAuthUrl","history","replaceState","document","title","pathname","cleanupOAuthUrlPreserveSearch","search","parseStateParam","stateParam","result","pairs","split","_iterator","_createForOfIteratorHelper","_step","s","n","done","pair","value","_pair$split","_pair$split2","key","undefined","decodeURIComponent","err","e","f","parseOAuthResponse","expectedProvider","idToken","authCode","stateString","parsedUrl","URL","substring","hash","includes","searchParams","URLSearchParams","get","startsWith","idTokenMatch","match","stateEndIndex","indexOf","hashParams","TurnkeyError","TurnkeyErrorCodes","INVALID_OAUTH_STATE","consumeOAuthState","_parseStateParam","openModal","sessionKey","oauthIntent","config","OAUTH_PROVIDER_CONFIGS","usesPKCE","captchaToken","consumeOAuthCaptchaToken","buildOAuthUrl","clientId","redirectUri","codeChallenge","authUrl","set","responseType","scopes","responseMode","nonceInParams","OAuthProviders","GOOGLE","stateParams","storeOAuthState","toString"],"mappings":";;;;;AAYA;;AAEG;AACG,SAAUA,eAAeA,CAACC,MAM/B,EAAA;AACC,EAAA,IAAQC,QAAQ,GAA8CD,MAAM,CAA5DC,QAAQ;IAAEC,IAAI,GAAwCF,MAAM,CAAlDE,IAAI;IAAEC,SAAS,GAA6BH,MAAM,CAA5CG,SAAS;IAAEC,KAAK,GAAsBJ,MAAM,CAAjCI,KAAK;IAAEC,eAAe,GAAKL,MAAM,CAA1BK,eAAe;AACzD,EAAA,IAAIC,KAAK,GAAA,WAAA,CAAAC,MAAA,CAAeN,QAAQ,YAAAM,MAAA,CAASL,IAAI,EAAA,aAAA,CAAA,CAAAK,MAAA,CAAcC,kBAAkB,CAACL,SAAS,CAAC,CAAE;AAE1F,EAAA,IAAIC,KAAK,EAAE;AACTE,IAAAA,KAAK,IAAA,SAAA,CAAAC,MAAA,CAAcH,KAAK,CAAE;AAC5B,EAAA;AAEA,EAAA,IAAIC,eAAe,EAAE;AACnB,IAAA,IAAMI,KAAK,GAAGC,MAAM,CAACC,OAAO,CAACN,eAAe,CAAC,CAC1CO,GAAG,CAAC,UAAAC,IAAA,EAAA;AAAA,MAAA,IAAAC,KAAA,GAAAC,cAAA,CAAAF,IAAA,EAAA,CAAA,CAAA;AAAEG,QAAAA,CAAC,GAAAF,KAAA,CAAA,CAAA,CAAA;AAAEG,QAAAA,CAAC,GAAAH,KAAA,CAAA,CAAA,CAAA;AAAA,MAAA,OAAA,EAAA,CAAAP,MAAA,CAASC,kBAAkB,CAACQ,CAAC,CAAC,EAAA,GAAA,CAAA,CAAAT,MAAA,CAAIC,kBAAkB,CAACS,CAAC,CAAC,CAAA;AAAA,IAAA,CAAE,CAAC,CACpEC,IAAI,CAAC,GAAG,CAAC;AACZ,IAAA,IAAIT,KAAK,EAAE;AACTH,MAAAA,KAAK,IAAA,GAAA,CAAAC,MAAA,CAAQE,KAAK,CAAE;AACtB,IAAA;AACF,EAAA;AAEA,EAAA,OAAOH,KAAK;AACd;AAEA;;AAEG;SACaa,cAAcA,GAAA;EAC5B,IAAMC,KAAK,GAAGC,UAAU;EACxB,IAAMC,MAAM,GAAGC,WAAW;AAC1B,EAAA,IAAMC,IAAI,GAAGC,MAAM,CAACC,OAAO,GAAG,CAACD,MAAM,CAACE,UAAU,GAAGP,KAAK,IAAI,CAAC;AAC7D,EAAA,IAAMQ,GAAG,GAAGH,MAAM,CAACI,OAAO,GAAG,CAACJ,MAAM,CAACK,WAAW,GAAGR,MAAM,IAAI,CAAC;EAE9D,OAAOG,MAAM,CAACM,IAAI,CAChB,aAAa,EACb,QAAQ,EAAA,QAAA,CAAAxB,MAAA,CACCa,KAAK,EAAA,UAAA,CAAA,CAAAb,MAAA,CAAWe,MAAM,EAAA,OAAA,CAAA,CAAAf,MAAA,CAAQqB,GAAG,YAAArB,MAAA,CAASiB,IAAI,EAAA,+BAAA,CAA+B,CACvF;AACH;AAEA;;AAEG;AACG,SAAUQ,uBAAuBA,CAACC,GAAW,EAAA;AACjDR,EAAAA,MAAM,CAACS,QAAQ,CAACC,IAAI,GAAGF,GAAG;EAC1B,IAAMG,SAAS,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;AAChC,EAAA,OAAO,IAAIC,OAAO,CAAC,UAACC,CAAC,EAAEC,MAAM,EAAI;AAC/B,IAAA,IAAMC,OAAO,GAAGC,UAAU,CAAC,YAAK;AAC9BF,MAAAA,MAAM,CAAC,IAAIG,KAAK,CAAC,2BAA2B,CAAC,CAAC;IAChD,CAAC,EAAEN,SAAS,CAAC;AACbX,IAAAA,MAAM,CAACkB,gBAAgB,CAAC,cAAc,EAAE,YAAA;MAAA,OAAMC,YAAY,CAACJ,OAAO,CAAC;IAAA,CAAA,CAAC;AACtE,EAAA,CAAC,CAAC;AACJ;AAEA;;AAEG;SACaK,eAAeA,GAAA;AAC7BpB,EAAAA,MAAM,CAACqB,OAAO,CAACC,YAAY,CAAC,IAAI,EAAEC,QAAQ,CAACC,KAAK,EAAExB,MAAM,CAACS,QAAQ,CAACgB,QAAQ,CAAC;AAC7E;AAEA;;AAEG;SACaC,6BAA6BA,GAAA;EAC3C1B,MAAM,CAACqB,OAAO,CAACC,YAAY,CACzB,IAAI,EACJC,QAAQ,CAACC,KAAK,EACdxB,MAAM,CAACS,QAAQ,CAACgB,QAAQ,GAAGzB,MAAM,CAACS,QAAQ,CAACkB,MAAM,CAClD;AACH;AAEA;;AAEG;AACG,SAAUC,eAAeA,CAACC,UAAqC,EAAA;AASnE,EAAA,IAAI,CAACA,UAAU,EAAE,OAAO,EAAE;EAE1B,IAAMC,MAAM,GAA0C,EAAE;AACxD,EAAA,IAAMC,KAAK,GAAGF,UAAU,CAACG,KAAK,CAAC,GAAG,CAAC;AAAC,EAAA,IAAAC,SAAA,GAAAC,0BAAA,CAEjBH,KAAK,CAAA;IAAAI,KAAA;AAAA,EAAA,IAAA;IAAxB,KAAAF,SAAA,CAAAG,CAAA,EAAA,EAAA,CAAA,CAAAD,KAAA,GAAAF,SAAA,CAAAI,CAAA,EAAA,EAAAC,IAAA,GAA0B;AAAA,MAAA,IAAfC,IAAI,GAAAJ,KAAA,CAAAK,KAAA;AACb,MAAA,IAAAC,WAAA,GAAqBF,IAAI,CAACP,KAAK,CAAC,GAAG,CAAC;QAAAU,YAAA,GAAApD,cAAA,CAAAmD,WAAA,EAAA,CAAA,CAAA;AAA7BE,QAAAA,GAAG,GAAAD,YAAA,CAAA,CAAA,CAAA;AAAEF,QAAAA,KAAK,GAAAE,YAAA,CAAA,CAAA,CAAA;AACjB,MAAA,IAAIC,GAAG,IAAIH,KAAK,KAAKI,SAAS,EAAE;AAC9Bd,QAAAA,MAAM,CAACa,GAAG,CAAC,GAAGE,kBAAkB,CAACL,KAAK,CAAC;AACzC,MAAA;AACF,IAAA;AAAC,EAAA,CAAA,CAAA,OAAAM,GAAA,EAAA;IAAAb,SAAA,CAAAc,CAAA,CAAAD,GAAA,CAAA;AAAA,EAAA,CAAA,SAAA;AAAAb,IAAAA,SAAA,CAAAe,CAAA,EAAA;AAAA,EAAA;AAED,EAAA,OAAOlB,MAAM;AACf;AA4BA;;;;;;;;;;AAUG;AACG,SAAUmB,kBAAkBA,CAChCzC,GAAW,EACX0C,gBAAiC,EAAA;EAEjC,IAAIC,OAAO,GAA8B,IAAI;EAC7C,IAAIC,QAAQ,GAA8B,IAAI;EAC9C,IAAIC,WAAW,GAAkB,IAAI;AAErC,EAAA,IAAMC,SAAS,GAAG,IAAIC,GAAG,CAAC/C,GAAG,CAAC;EAC9B,IAAMmB,MAAM,GAAG2B,SAAS,CAAC3B,MAAM,CAAC6B,SAAS,CAAC,CAAC,CAAC,CAAC;EAC7C,IAAMC,IAAI,GAAGH,SAAS,CAACG,IAAI,CAACD,SAAS,CAAC,CAAC,CAAC,CAAC;AAEzC;EACA,IAAI7B,MAAM,IAAIA,MAAM,CAAC+B,QAAQ,CAAC,OAAO,CAAC,EAAE;AACtC,IAAA,IAAMC,YAAY,GAAG,IAAIC,eAAe,CAACjC,MAAM,CAAC;AAChDyB,IAAAA,QAAQ,GAAGO,YAAY,CAACE,GAAG,CAAC,MAAM,CAAC;AACnCR,IAAAA,WAAW,GAAGM,YAAY,CAACE,GAAG,CAAC,OAAO,CAAC;AACzC,EAAA;AACA;OACK,IAAIJ,IAAI,EAAE;AACb;AACA,IAAA,IAAIA,IAAI,CAACK,UAAU,CAAC,sBAAsB,CAAC,EAAE;AAC3C;AACA,MAAA,IAAMC,YAAY,GAAGN,IAAI,CAACO,KAAK,CAAC,mBAAmB,CAAC;MACpDb,OAAO,GAAGY,YAAY,GAAGA,YAAY,CAAC,CAAC,CAAC,GAAG,IAAI;AAE/C;AACA,MAAA,IAAME,aAAa,GAAGR,IAAI,CAACS,OAAO,CAAC,QAAQ,CAAC;AAC5C,MAAA,IAAID,aAAa,KAAK,EAAE,EAAE;QACxBZ,WAAW,GAAGI,IAAI,CAACD,SAAS,CAAC,CAAC,EAAES,aAAa,CAAC,CAAC;AACjD,MAAA;AACF,IAAA,CAAC,MAAM;AACL;AACA,MAAA,IAAME,UAAU,GAAG,IAAIP,eAAe,CAACH,IAAI,CAAC;AAC5CN,MAAAA,OAAO,GAAGgB,UAAU,CAACN,GAAG,CAAC,UAAU,CAAC;AACpCR,MAAAA,WAAW,GAAGc,UAAU,CAACN,GAAG,CAAC,OAAO,CAAC;AACvC,IAAA;AACF,EAAA;EAEA,IAAI,CAACR,WAAW,EAAE;IAChB,MAAM,IAAIe,YAAY,CACpB,0CAA0C,EAC1CC,iBAAiB,CAACC,mBAAmB,CACtC;AACH,EAAA;AAEA;EACAC,iBAAiB,CAAClB,WAAW,CAAC;AAE9B;AACA,EAAA,IAAAmB,gBAAA,GAQI5C,eAAe,CAACyB,WAAW,CAAC;IAP9B7E,QAAQ,GAAAgG,gBAAA,CAARhG,QAAQ;IACRC,IAAI,GAAA+F,gBAAA,CAAJ/F,IAAI;IACJC,SAAS,GAAA8F,gBAAA,CAAT9F,SAAS;IACT+F,SAAS,GAAAD,gBAAA,CAATC,SAAS;IACTC,UAAU,GAAAF,gBAAA,CAAVE,UAAU;IACVC,WAAW,GAAAH,gBAAA,CAAXG,WAAW;IACXhG,KAAK,GAAA6F,gBAAA,CAAL7F,KAAK;AAGP;AACA,EAAA,IAAIuE,gBAAgB,EAAE;AACpB,IAAA,IAAM0B,MAAM,GAAGC,sBAAsB,CAAC3B,gBAAgB,CAAC;IAEvD,IAAI0B,MAAM,CAACE,QAAQ,EAAE;AACnB;MACA,IAAI,CAAC1B,QAAQ,IAAI,CAACC,WAAW,IAAI7E,QAAQ,KAAK0E,gBAAgB,EAAE;AAC9D,QAAA,OAAO,IAAI;AACb,MAAA;AACF,IAAA,CAAC,MAAM;AACL;MACA,IAAI,CAACC,OAAO,EAAE;AACZ,QAAA,OAAO,IAAI;AACb,MAAA;AACF,IAAA;AACF,EAAA;EAEA,OAAO;AACLA,IAAAA,OAAO,EAAPA,OAAO;AACPC,IAAAA,QAAQ,EAARA,QAAQ;AACR5E,IAAAA,QAAQ,EAAEA,QAAQ,KAAA,IAAA,IAARA,QAAQ,KAAA,MAAA,GAARA,QAAQ,GAAI,IAAI;AAC1BC,IAAAA,IAAI,EAAEA,IAAI,KAAA,IAAA,IAAJA,IAAI,KAAA,MAAA,GAAJA,IAAI,GAAI,IAAI;AAClBC,IAAAA,SAAS,EAAEA,SAAS,KAAA,IAAA,IAATA,SAAS,KAAA,MAAA,GAATA,SAAS,GAAI,IAAI;AAC5B+F,IAAAA,SAAS,EAAEA,SAAS,KAAA,IAAA,IAATA,SAAS,KAAA,MAAA,GAATA,SAAS,GAAI,IAAI;AAC5BC,IAAAA,UAAU,EAAEA,UAAU,KAAA,IAAA,IAAVA,UAAU,KAAA,MAAA,GAAVA,UAAU,GAAI9B,SAAS;AACnC+B,IAAAA,WAAW,EAAEA,WAAW,KAAA,IAAA,IAAXA,WAAW,KAAA,MAAA,GAAXA,WAAW,GAAI,IAAI;AAChChG,IAAAA,KAAK,EAAEA,KAAK,KAAA,IAAA,IAALA,KAAK,KAAA,MAAA,GAALA,KAAK,GAAI,IAAI;IACpBoG,YAAY,EAAEC,wBAAwB;GACvC;AACH;AAgBA;;AAEG;AACG,SAAUC,aAAaA,CAAC1G,MAA2B,EAAA;AACvD,EAAA,IACEC,QAAQ,GAQND,MAAM,CARRC,QAAQ;IACR0G,QAAQ,GAON3G,MAAM,CAPR2G,QAAQ;IACRC,WAAW,GAMT5G,MAAM,CANR4G,WAAW;IACXzG,SAAS,GAKPH,MAAM,CALRG,SAAS;IACTC,KAAK,GAIHJ,MAAM,CAJRI,KAAK;IACLF,IAAI,GAGFF,MAAM,CAHRE,IAAI;IACJ2G,aAAa,GAEX7G,MAAM,CAFR6G,aAAa;IACbxG,eAAe,GACbL,MAAM,CADRK,eAAe;AAGjB,EAAA,IAAMgG,MAAM,GAAGC,sBAAsB,CAACrG,QAAQ,CAAC;EAC/C,IAAM6G,OAAO,GAAG,IAAI9B,GAAG,CAACqB,MAAM,CAACS,OAAO,CAAC;EAEvCA,OAAO,CAAC1B,YAAY,CAAC2B,GAAG,CAAC,WAAW,EAAEJ,QAAQ,CAAC;EAC/CG,OAAO,CAAC1B,YAAY,CAAC2B,GAAG,CAAC,cAAc,EAAEH,WAAW,CAAC;EACrDE,OAAO,CAAC1B,YAAY,CAAC2B,GAAG,CAAC,eAAe,EAAEV,MAAM,CAACW,YAAY,CAAC;EAE9D,IAAIX,MAAM,CAACY,MAAM,EAAE;IACjBH,OAAO,CAAC1B,YAAY,CAAC2B,GAAG,CAAC,OAAO,EAAEV,MAAM,CAACY,MAAM,CAAC;AAClD,EAAA;EAEA,IAAIZ,MAAM,CAACa,YAAY,EAAE;IACvBJ,OAAO,CAAC1B,YAAY,CAAC2B,GAAG,CAAC,eAAe,EAAEV,MAAM,CAACa,YAAY,CAAC;AAChE,EAAA;AAEA;AACA,EAAA,IAAIb,MAAM,CAACE,QAAQ,IAAIM,aAAa,EAAE;IACpCC,OAAO,CAAC1B,YAAY,CAAC2B,GAAG,CAAC,gBAAgB,EAAEF,aAAa,CAAC;IACzDC,OAAO,CAAC1B,YAAY,CAAC2B,GAAG,CAAC,uBAAuB,EAAE,MAAM,CAAC;AAC3D,EAAA;AAEA;EACA,IAAIV,MAAM,CAACc,aAAa,EAAE;IACxBL,OAAO,CAAC1B,YAAY,CAAC2B,GAAG,CAAC,OAAO,EAAE3G,KAAK,CAAC;AAC1C,EAAA;AAEA;AACA,EAAA,IAAIH,QAAQ,KAAKmH,cAAc,CAACC,MAAM,EAAE;IACtCP,OAAO,CAAC1B,YAAY,CAAC2B,GAAG,CAAC,QAAQ,EAAE,gBAAgB,CAAC;AACtD,EAAA;AAEA;AACA,EAAA,IAAMO,WAAW,GAA0C;AACzDrH,IAAAA,QAAQ,EAARA,QAAQ;AACRC,IAAAA,IAAI,EAAJA,IAAI;AACJC,IAAAA,SAAS,EAATA;GACD;AACD;AACA,EAAA,IAAI,CAACkG,MAAM,CAACc,aAAa,EAAE;IACzBG,WAAW,CAAClH,KAAK,GAAGA,KAAK;AAC3B,EAAA;AACA,EAAA,IAAIC,eAAe,EAAE;IACnBiH,WAAW,CAACjH,eAAe,GAAGA,eAAe;AAC/C,EAAA;AACA;AACA,EAAA,IAAMC,KAAK,GAAGP,eAAe,CAACuH,WAAW,CAAC;EAC1CR,OAAO,CAAC1B,YAAY,CAAC2B,GAAG,CAAC,OAAO,EAAEzG,KAAK,CAAC;EACxCiH,eAAe,CAACjH,KAAK,CAAC;AAEtB,EAAA,OAAOwG,OAAO,CAACU,QAAQ,EAAE;AAC3B;;;;"}
+{"version":3,"file":"url.mjs","sources":["../../../src/utils/oauth/url.ts"],"sourcesContent":[null],"names":["buildOAuthState","params","provider","flow","publicKey","nonce","additionalState","state","concat","encodeURIComponent","extra","Object","entries","map","_ref","_ref2","_slicedToArray","k","v","join","openOAuthPopup","width","popupWidth","height","popupHeight","left","window","screenX","innerWidth","top","screenY","innerHeight","open","redirectToOAuthProvider","url","location","href","timeLimit","Promise","_","reject","timeout","setTimeout","Error","addEventListener","clearTimeout","OAUTH_QUERY_RESPONSE_PARAMS","Set","hasSameUrlBase","response","expected","protocol","username","password","host","pathname","isExpectedFragmentResponse","hash","search","hasValidQueryResponseParams","appendedParams","expectedNames","responseNames","_ref3","_ref4","name","some","has","recognizedNames","filter","uniqueNames","length","size","hasCode","hasError","isExpectedQueryResponse","expectedParams","Array","from","searchParams","_ref5","_ref6","hasReservedName","_ref7","_ref8","responseParams","configuredQuery","URLSearchParams","slice","toString","oauthParams","isExpectedOAuthRedirectUrl","responseUrl","redirectUri","responseMode","includes","OAuthResponseMode","Fragment","URL","_unused","cleanupOAuthUrl","history","replaceState","document","title","cleanupOAuthUrlPreserveSearch","parseStateParam","stateParam","result","pairs","split","_iterator","_createForOfIteratorHelper","_step","s","n","done","pair","value","_pair$split","_pair$split2","key","undefined","decodeURIComponent","err","e","f","parseOAuthResponse","expectedProvider","idToken","authCode","stateString","parsedUrl","substring","get","startsWith","idTokenMatch","match","stateEndIndex","indexOf","hashParams","TurnkeyError","TurnkeyErrorCodes","INVALID_OAUTH_STATE","consumeOAuthState","_parseStateParam","openModal","sessionKey","oauthIntent","config","OAUTH_PROVIDER_CONFIGS","usesPKCE","captchaToken","consumeOAuthCaptchaToken","buildOAuthUrl","clientId","codeChallenge","authUrl","set","responseType","scopes","nonceInParams","OAuthProviders","GOOGLE","stateParams","storeOAuthState"],"mappings":";;;;;AAiBA;;AAEG;AACG,SAAUA,eAAeA,CAACC,MAM/B,EAAA;AACC,EAAA,IAAQC,QAAQ,GAA8CD,MAAM,CAA5DC,QAAQ;IAAEC,IAAI,GAAwCF,MAAM,CAAlDE,IAAI;IAAEC,SAAS,GAA6BH,MAAM,CAA5CG,SAAS;IAAEC,KAAK,GAAsBJ,MAAM,CAAjCI,KAAK;IAAEC,eAAe,GAAKL,MAAM,CAA1BK,eAAe;AACzD,EAAA,IAAIC,KAAK,GAAA,WAAA,CAAAC,MAAA,CAAeN,QAAQ,YAAAM,MAAA,CAASL,IAAI,EAAA,aAAA,CAAA,CAAAK,MAAA,CAAcC,kBAAkB,CAACL,SAAS,CAAC,CAAE;AAE1F,EAAA,IAAIC,KAAK,EAAE;AACTE,IAAAA,KAAK,IAAA,SAAA,CAAAC,MAAA,CAAcH,KAAK,CAAE;AAC5B,EAAA;AAEA,EAAA,IAAIC,eAAe,EAAE;AACnB,IAAA,IAAMI,KAAK,GAAGC,MAAM,CAACC,OAAO,CAACN,eAAe,CAAC,CAC1CO,GAAG,CAAC,UAAAC,IAAA,EAAA;AAAA,MAAA,IAAAC,KAAA,GAAAC,cAAA,CAAAF,IAAA,EAAA,CAAA,CAAA;AAAEG,QAAAA,CAAC,GAAAF,KAAA,CAAA,CAAA,CAAA;AAAEG,QAAAA,CAAC,GAAAH,KAAA,CAAA,CAAA,CAAA;AAAA,MAAA,OAAA,EAAA,CAAAP,MAAA,CAASC,kBAAkB,CAACQ,CAAC,CAAC,EAAA,GAAA,CAAA,CAAAT,MAAA,CAAIC,kBAAkB,CAACS,CAAC,CAAC,CAAA;AAAA,IAAA,CAAE,CAAC,CACpEC,IAAI,CAAC,GAAG,CAAC;AACZ,IAAA,IAAIT,KAAK,EAAE;AACTH,MAAAA,KAAK,IAAA,GAAA,CAAAC,MAAA,CAAQE,KAAK,CAAE;AACtB,IAAA;AACF,EAAA;AAEA,EAAA,OAAOH,KAAK;AACd;AAEA;;AAEG;SACaa,cAAcA,GAAA;EAC5B,IAAMC,KAAK,GAAGC,UAAU;EACxB,IAAMC,MAAM,GAAGC,WAAW;AAC1B,EAAA,IAAMC,IAAI,GAAGC,MAAM,CAACC,OAAO,GAAG,CAACD,MAAM,CAACE,UAAU,GAAGP,KAAK,IAAI,CAAC;AAC7D,EAAA,IAAMQ,GAAG,GAAGH,MAAM,CAACI,OAAO,GAAG,CAACJ,MAAM,CAACK,WAAW,GAAGR,MAAM,IAAI,CAAC;EAE9D,OAAOG,MAAM,CAACM,IAAI,CAChB,aAAa,EACb,QAAQ,EAAA,QAAA,CAAAxB,MAAA,CACCa,KAAK,EAAA,UAAA,CAAA,CAAAb,MAAA,CAAWe,MAAM,EAAA,OAAA,CAAA,CAAAf,MAAA,CAAQqB,GAAG,YAAArB,MAAA,CAASiB,IAAI,EAAA,+BAAA,CAA+B,CACvF;AACH;AAEA;;AAEG;AACG,SAAUQ,uBAAuBA,CAACC,GAAW,EAAA;AACjDR,EAAAA,MAAM,CAACS,QAAQ,CAACC,IAAI,GAAGF,GAAG;EAC1B,IAAMG,SAAS,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;AAChC,EAAA,OAAO,IAAIC,OAAO,CAAC,UAACC,CAAC,EAAEC,MAAM,EAAI;AAC/B,IAAA,IAAMC,OAAO,GAAGC,UAAU,CAAC,YAAK;AAC9BF,MAAAA,MAAM,CAAC,IAAIG,KAAK,CAAC,2BAA2B,CAAC,CAAC;IAChD,CAAC,EAAEN,SAAS,CAAC;AACbX,IAAAA,MAAM,CAACkB,gBAAgB,CAAC,cAAc,EAAE,YAAA;MAAA,OAAMC,YAAY,CAACJ,OAAO,CAAC;IAAA,CAAA,CAAC;AACtE,EAAA,CAAC,CAAC;AACJ;AAEA,IAAMK,2BAA2B,GAAG,IAAIC,GAAG,CAAC,CAC1C,MAAM,EACN,OAAO,EACP,mBAAmB,EACnB,WAAW,EACX,KAAK,EACL,OAAO,EACP,eAAe,EACf,OAAO,CACR,CAAC;AAIF,SAASC,cAAcA,CAACC,QAAa,EAAEC,QAAa,EAAA;AAClD,EAAA,OACED,QAAQ,CAACE,QAAQ,KAAKD,QAAQ,CAACC,QAAQ,IACvCF,QAAQ,CAACG,QAAQ,KAAKF,QAAQ,CAACE,QAAQ,IACvCH,QAAQ,CAACI,QAAQ,KAAKH,QAAQ,CAACG,QAAQ,IACvCJ,QAAQ,CAACK,IAAI,KAAKJ,QAAQ,CAACI,IAAI,IAC/BL,QAAQ,CAACM,QAAQ,KAAKL,QAAQ,CAACK,QAAQ;AAE3C;AAEA,SAASC,0BAA0BA,CAACP,QAAa,EAAEC,QAAa,EAAA;AAC9D,EAAA,OACED,QAAQ,CAACQ,IAAI,KAAK,EAAE,IACpBT,cAAc,CAACC,QAAQ,EAAEC,QAAQ,CAAC,IAClCD,QAAQ,CAACS,MAAM,KAAKR,QAAQ,CAACQ,MAAM;AAEvC;AAEA,SAASC,2BAA2BA,CAClCC,cAA4B,EAC5BC,aAA0B,EAAA;AAE1B,EAAA,IAAMC,aAAa,GAAGF,cAAc,CAAC/C,GAAG,CAAC,UAAAkD,KAAA,EAAA;AAAA,IAAA,IAAAC,KAAA,GAAAhD,cAAA,CAAA+C,KAAA,EAAA,CAAA,CAAA;AAAEE,MAAAA,IAAI,GAAAD,KAAA,CAAA,CAAA,CAAA;AAAA,IAAA,OAAMC,IAAI;EAAA,CAAA,CAAC;AAC1D,EAAA,IAAIH,aAAa,CAACI,IAAI,CAAC,UAACD,IAAI,EAAA;AAAA,IAAA,OAAKJ,aAAa,CAACM,GAAG,CAACF,IAAI,CAAC;EAAA,CAAA,CAAC,EAAE,OAAO,KAAK;AAEvE,EAAA,IAAMG,eAAe,GAAGN,aAAa,CAACO,MAAM,CAAC,UAACJ,IAAI,EAAA;AAAA,IAAA,OAChDnB,2BAA2B,CAACqB,GAAG,CAACF,IAAI,CAAC;EAAA,CAAA,CACtC;AACD,EAAA,IAAMK,WAAW,GAAG,IAAIvB,GAAG,CAACqB,eAAe,CAAC;EAC5C,IAAIA,eAAe,CAACG,MAAM,KAAKD,WAAW,CAACE,IAAI,EAAE,OAAO,KAAK;AAE7D,EAAA,IAAMC,OAAO,GAAGH,WAAW,CAACH,GAAG,CAAC,MAAM,CAAC;AACvC,EAAA,IAAMO,QAAQ,GAAGJ,WAAW,CAACH,GAAG,CAAC,OAAO,CAAC;AACzC;AACA;EACA,OAAOG,WAAW,CAACH,GAAG,CAAC,OAAO,CAAC,IAAIM,OAAO,KAAKC,QAAQ;AACzD;AAEA,SAASC,uBAAuBA,CAAC1B,QAAa,EAAEC,QAAa,EAAA;EAC3D,IAAI,CAACF,cAAc,CAACC,QAAQ,EAAEC,QAAQ,CAAC,EAAE,OAAO,KAAK;AAErD,EAAA,IAAM0B,cAAc,GAAGC,KAAK,CAACC,IAAI,CAAC5B,QAAQ,CAAC6B,YAAY,CAACnE,OAAO,EAAE,CAAC;EAClE,IAAMiD,aAAa,GAAG,IAAId,GAAG,CAAC6B,cAAc,CAAC/D,GAAG,CAAC,UAAAmE,KAAA,EAAA;AAAA,IAAA,IAAAC,KAAA,GAAAjE,cAAA,CAAAgE,KAAA,EAAA,CAAA,CAAA;AAAEf,MAAAA,IAAI,GAAAgB,KAAA,CAAA,CAAA,CAAA;AAAA,IAAA,OAAMhB,IAAI;AAAA,EAAA,CAAA,CAAC,CAAC;AACnE,EAAA,IAAMiB,eAAe,GAAGN,cAAc,CAACV,IAAI,CAAC,UAAAiB,KAAA,EAAA;AAAA,IAAA,IAAAC,KAAA,GAAApE,cAAA,CAAAmE,KAAA,EAAA,CAAA,CAAA;AAAElB,MAAAA,IAAI,GAAAmB,KAAA,CAAA,CAAA,CAAA;AAAA,IAAA,OAChDtC,2BAA2B,CAACqB,GAAG,CAACF,IAAI,CAAC;EAAA,CAAA,CACtC;EACD,IAAIiB,eAAe,EAAE,OAAO,KAAK;AAEjC,EAAA,IAAMG,cAAc,GAAGR,KAAK,CAACC,IAAI,CAAC7B,QAAQ,CAAC8B,YAAY,CAACnE,OAAO,EAAE,CAAC;AAClE,EAAA,IAAM0E,eAAe,GAAG,IAAIC,eAAe,CACzCF,cAAc,CAACG,KAAK,CAAC,CAAC,EAAEZ,cAAc,CAACL,MAAM,CAAC,CAC/C,CAACkB,QAAQ,EAAE;EACZ,IAAIH,eAAe,KAAKpC,QAAQ,CAAC6B,YAAY,CAACU,QAAQ,EAAE,EAAE,OAAO,KAAK;EAEtE,IAAMC,WAAW,GAAGL,cAAc,CAACG,KAAK,CAACZ,cAAc,CAACL,MAAM,CAAC;AAC/D,EAAA,OAAOZ,2BAA2B,CAAC+B,WAAW,EAAE7B,aAAa,CAAC;AAChE;AAEA;SACgB8B,0BAA0BA,CACxCC,WAAmB,EACnBC,WAAmB,EACnBC,YAA+B,EAAA;AAE/B;EACA,IAAID,WAAW,CAACE,QAAQ,CAAC,GAAG,CAAC,EAAE,OAAO,KAAK;AAC3C,EAAA,IAAID,YAAY,KAAKE,iBAAiB,CAACC,QAAQ,IAAIL,WAAW,CAACG,QAAQ,CAAC,GAAG,CAAC,EAC1E,OAAO,KAAK;AAEd,EAAA,IAAI9C,QAAa;AACjB,EAAA,IAAIC,QAAa;EAEjB,IAAI;AACFD,IAAAA,QAAQ,GAAG,IAAIiD,GAAG,CAACN,WAAW,CAAC;AAC/B1C,IAAAA,QAAQ,GAAG,IAAIgD,GAAG,CAACL,WAAW,CAAC;EACjC,CAAC,CAAC,OAAAM,OAAA,EAAM;AACN,IAAA,OAAO,KAAK;AACd,EAAA;AAEA,EAAA,OAAOL,YAAY,KAAKE,iBAAiB,CAACC,QAAQ,GAC9CzC,0BAA0B,CAACP,QAAQ,EAAEC,QAAQ,CAAC,GAC9CyB,uBAAuB,CAAC1B,QAAQ,EAAEC,QAAQ,CAAC;AACjD;AAEA;;AAEG;SACakD,eAAeA,GAAA;AAC7B1E,EAAAA,MAAM,CAAC2E,OAAO,CAACC,YAAY,CAAC,IAAI,EAAEC,QAAQ,CAACC,KAAK,EAAE9E,MAAM,CAACS,QAAQ,CAACoB,QAAQ,CAAC;AAC7E;AAEA;;AAEG;SACakD,6BAA6BA,GAAA;EAC3C/E,MAAM,CAAC2E,OAAO,CAACC,YAAY,CACzB,IAAI,EACJC,QAAQ,CAACC,KAAK,EACd9E,MAAM,CAACS,QAAQ,CAACoB,QAAQ,GAAG7B,MAAM,CAACS,QAAQ,CAACuB,MAAM,CAClD;AACH;AAEA;;AAEG;AACG,SAAUgD,eAAeA,CAACC,UAAqC,EAAA;AASnE,EAAA,IAAI,CAACA,UAAU,EAAE,OAAO,EAAE;EAE1B,IAAMC,MAAM,GAA0C,EAAE;AACxD,EAAA,IAAMC,KAAK,GAAGF,UAAU,CAACG,KAAK,CAAC,GAAG,CAAC;AAAC,EAAA,IAAAC,SAAA,GAAAC,0BAAA,CAEjBH,KAAK,CAAA;IAAAI,KAAA;AAAA,EAAA,IAAA;IAAxB,KAAAF,SAAA,CAAAG,CAAA,EAAA,EAAA,CAAA,CAAAD,KAAA,GAAAF,SAAA,CAAAI,CAAA,EAAA,EAAAC,IAAA,GAA0B;AAAA,MAAA,IAAfC,IAAI,GAAAJ,KAAA,CAAAK,KAAA;AACb,MAAA,IAAAC,WAAA,GAAqBF,IAAI,CAACP,KAAK,CAAC,GAAG,CAAC;QAAAU,YAAA,GAAAxG,cAAA,CAAAuG,WAAA,EAAA,CAAA,CAAA;AAA7BE,QAAAA,GAAG,GAAAD,YAAA,CAAA,CAAA,CAAA;AAAEF,QAAAA,KAAK,GAAAE,YAAA,CAAA,CAAA,CAAA;AACjB,MAAA,IAAIC,GAAG,IAAIH,KAAK,KAAKI,SAAS,EAAE;AAC9Bd,QAAAA,MAAM,CAACa,GAAG,CAAC,GAAGE,kBAAkB,CAACL,KAAK,CAAC;AACzC,MAAA;AACF,IAAA;AAAC,EAAA,CAAA,CAAA,OAAAM,GAAA,EAAA;IAAAb,SAAA,CAAAc,CAAA,CAAAD,GAAA,CAAA;AAAA,EAAA,CAAA,SAAA;AAAAb,IAAAA,SAAA,CAAAe,CAAA,EAAA;AAAA,EAAA;AAED,EAAA,OAAOlB,MAAM;AACf;AA4BA;;;;;;;;;;AAUG;AACG,SAAUmB,kBAAkBA,CAChC7F,GAAW,EACX8F,gBAAiC,EAAA;EAEjC,IAAIC,OAAO,GAA8B,IAAI;EAC7C,IAAIC,QAAQ,GAA8B,IAAI;EAC9C,IAAIC,WAAW,GAAkB,IAAI;AAErC,EAAA,IAAMC,SAAS,GAAG,IAAIlC,GAAG,CAAChE,GAAG,CAAC;EAC9B,IAAMwB,MAAM,GAAG0E,SAAS,CAAC1E,MAAM,CAAC2E,SAAS,CAAC,CAAC,CAAC,CAAC;EAC7C,IAAM5E,IAAI,GAAG2E,SAAS,CAAC3E,IAAI,CAAC4E,SAAS,CAAC,CAAC,CAAC,CAAC;AAEzC;EACA,IAAI3E,MAAM,IAAIA,MAAM,CAACqC,QAAQ,CAAC,OAAO,CAAC,EAAE;AACtC,IAAA,IAAMhB,YAAY,GAAG,IAAIQ,eAAe,CAAC7B,MAAM,CAAC;AAChDwE,IAAAA,QAAQ,GAAGnD,YAAY,CAACuD,GAAG,CAAC,MAAM,CAAC;AACnCH,IAAAA,WAAW,GAAGpD,YAAY,CAACuD,GAAG,CAAC,OAAO,CAAC;AACzC,EAAA;AACA;OACK,IAAI7E,IAAI,EAAE;AACb;AACA,IAAA,IAAIA,IAAI,CAAC8E,UAAU,CAAC,sBAAsB,CAAC,EAAE;AAC3C;AACA,MAAA,IAAMC,YAAY,GAAG/E,IAAI,CAACgF,KAAK,CAAC,mBAAmB,CAAC;MACpDR,OAAO,GAAGO,YAAY,GAAGA,YAAY,CAAC,CAAC,CAAC,GAAG,IAAI;AAE/C;AACA,MAAA,IAAME,aAAa,GAAGjF,IAAI,CAACkF,OAAO,CAAC,QAAQ,CAAC;AAC5C,MAAA,IAAID,aAAa,KAAK,EAAE,EAAE;QACxBP,WAAW,GAAG1E,IAAI,CAAC4E,SAAS,CAAC,CAAC,EAAEK,aAAa,CAAC,CAAC;AACjD,MAAA;AACF,IAAA,CAAC,MAAM;AACL;AACA,MAAA,IAAME,UAAU,GAAG,IAAIrD,eAAe,CAAC9B,IAAI,CAAC;AAC5CwE,MAAAA,OAAO,GAAGW,UAAU,CAACN,GAAG,CAAC,UAAU,CAAC;AACpCH,MAAAA,WAAW,GAAGS,UAAU,CAACN,GAAG,CAAC,OAAO,CAAC;AACvC,IAAA;AACF,EAAA;EAEA,IAAI,CAACH,WAAW,EAAE;IAChB,MAAM,IAAIU,YAAY,CACpB,0CAA0C,EAC1CC,iBAAiB,CAACC,mBAAmB,CACtC;AACH,EAAA;AAEA;EACAC,iBAAiB,CAACb,WAAW,CAAC;AAE9B;AACA,EAAA,IAAAc,gBAAA,GAQIvC,eAAe,CAACyB,WAAW,CAAC;IAP9BjI,QAAQ,GAAA+I,gBAAA,CAAR/I,QAAQ;IACRC,IAAI,GAAA8I,gBAAA,CAAJ9I,IAAI;IACJC,SAAS,GAAA6I,gBAAA,CAAT7I,SAAS;IACT8I,SAAS,GAAAD,gBAAA,CAATC,SAAS;IACTC,UAAU,GAAAF,gBAAA,CAAVE,UAAU;IACVC,WAAW,GAAAH,gBAAA,CAAXG,WAAW;IACX/I,KAAK,GAAA4I,gBAAA,CAAL5I,KAAK;AAGP;AACA,EAAA,IAAI2H,gBAAgB,EAAE;AACpB,IAAA,IAAMqB,MAAM,GAAGC,sBAAsB,CAACtB,gBAAgB,CAAC;IAEvD,IAAIqB,MAAM,CAACE,QAAQ,EAAE;AACnB;MACA,IAAI,CAACrB,QAAQ,IAAI,CAACC,WAAW,IAAIjI,QAAQ,KAAK8H,gBAAgB,EAAE;AAC9D,QAAA,OAAO,IAAI;AACb,MAAA;AACF,IAAA,CAAC,MAAM;AACL;MACA,IAAI,CAACC,OAAO,EAAE;AACZ,QAAA,OAAO,IAAI;AACb,MAAA;AACF,IAAA;AACF,EAAA;EAEA,OAAO;AACLA,IAAAA,OAAO,EAAPA,OAAO;AACPC,IAAAA,QAAQ,EAARA,QAAQ;AACRhI,IAAAA,QAAQ,EAAEA,QAAQ,KAAA,IAAA,IAARA,QAAQ,KAAA,MAAA,GAARA,QAAQ,GAAI,IAAI;AAC1BC,IAAAA,IAAI,EAAEA,IAAI,KAAA,IAAA,IAAJA,IAAI,KAAA,MAAA,GAAJA,IAAI,GAAI,IAAI;AAClBC,IAAAA,SAAS,EAAEA,SAAS,KAAA,IAAA,IAATA,SAAS,KAAA,MAAA,GAATA,SAAS,GAAI,IAAI;AAC5B8I,IAAAA,SAAS,EAAEA,SAAS,KAAA,IAAA,IAATA,SAAS,KAAA,MAAA,GAATA,SAAS,GAAI,IAAI;AAC5BC,IAAAA,UAAU,EAAEA,UAAU,KAAA,IAAA,IAAVA,UAAU,KAAA,MAAA,GAAVA,UAAU,GAAIzB,SAAS;AACnC0B,IAAAA,WAAW,EAAEA,WAAW,KAAA,IAAA,IAAXA,WAAW,KAAA,MAAA,GAAXA,WAAW,GAAI,IAAI;AAChC/I,IAAAA,KAAK,EAAEA,KAAK,KAAA,IAAA,IAALA,KAAK,KAAA,MAAA,GAALA,KAAK,GAAI,IAAI;IACpBmJ,YAAY,EAAEC,wBAAwB;GACvC;AACH;AAgBA;;AAEG;AACG,SAAUC,aAAaA,CAACzJ,MAA2B,EAAA;AACvD,EAAA,IACEC,QAAQ,GAQND,MAAM,CARRC,QAAQ;IACRyJ,QAAQ,GAON1J,MAAM,CAPR0J,QAAQ;IACR9D,WAAW,GAMT5F,MAAM,CANR4F,WAAW;IACXzF,SAAS,GAKPH,MAAM,CALRG,SAAS;IACTC,KAAK,GAIHJ,MAAM,CAJRI,KAAK;IACLF,IAAI,GAGFF,MAAM,CAHRE,IAAI;IACJyJ,aAAa,GAEX3J,MAAM,CAFR2J,aAAa;IACbtJ,eAAe,GACbL,MAAM,CADRK,eAAe;AAGjB,EAAA,IAAM+I,MAAM,GAAGC,sBAAsB,CAACpJ,QAAQ,CAAC;EAC/C,IAAM2J,OAAO,GAAG,IAAI3D,GAAG,CAACmD,MAAM,CAACQ,OAAO,CAAC;EAEvCA,OAAO,CAAC9E,YAAY,CAAC+E,GAAG,CAAC,WAAW,EAAEH,QAAQ,CAAC;EAC/CE,OAAO,CAAC9E,YAAY,CAAC+E,GAAG,CAAC,cAAc,EAAEjE,WAAW,CAAC;EACrDgE,OAAO,CAAC9E,YAAY,CAAC+E,GAAG,CAAC,eAAe,EAAET,MAAM,CAACU,YAAY,CAAC;EAE9D,IAAIV,MAAM,CAACW,MAAM,EAAE;IACjBH,OAAO,CAAC9E,YAAY,CAAC+E,GAAG,CAAC,OAAO,EAAET,MAAM,CAACW,MAAM,CAAC;AAClD,EAAA;EAEA,IAAIX,MAAM,CAACvD,YAAY,EAAE;IACvB+D,OAAO,CAAC9E,YAAY,CAAC+E,GAAG,CAAC,eAAe,EAAET,MAAM,CAACvD,YAAY,CAAC;AAChE,EAAA;AAEA;AACA,EAAA,IAAIuD,MAAM,CAACE,QAAQ,IAAIK,aAAa,EAAE;IACpCC,OAAO,CAAC9E,YAAY,CAAC+E,GAAG,CAAC,gBAAgB,EAAEF,aAAa,CAAC;IACzDC,OAAO,CAAC9E,YAAY,CAAC+E,GAAG,CAAC,uBAAuB,EAAE,MAAM,CAAC;AAC3D,EAAA;AAEA;EACA,IAAIT,MAAM,CAACY,aAAa,EAAE;IACxBJ,OAAO,CAAC9E,YAAY,CAAC+E,GAAG,CAAC,OAAO,EAAEzJ,KAAK,CAAC;AAC1C,EAAA;AAEA;AACA,EAAA,IAAIH,QAAQ,KAAKgK,cAAc,CAACC,MAAM,EAAE;IACtCN,OAAO,CAAC9E,YAAY,CAAC+E,GAAG,CAAC,QAAQ,EAAE,gBAAgB,CAAC;AACtD,EAAA;AAEA;AACA,EAAA,IAAMM,WAAW,GAA0C;AACzDlK,IAAAA,QAAQ,EAARA,QAAQ;AACRC,IAAAA,IAAI,EAAJA,IAAI;AACJC,IAAAA,SAAS,EAATA;GACD;AACD;AACA,EAAA,IAAI,CAACiJ,MAAM,CAACY,aAAa,EAAE;IACzBG,WAAW,CAAC/J,KAAK,GAAGA,KAAK;AAC3B,EAAA;AACA,EAAA,IAAIC,eAAe,EAAE;IACnB8J,WAAW,CAAC9J,eAAe,GAAGA,eAAe;AAC/C,EAAA;AACA;AACA,EAAA,IAAMC,KAAK,GAAGP,eAAe,CAACoK,WAAW,CAAC;EAC1CP,OAAO,CAAC9E,YAAY,CAAC+E,GAAG,CAAC,OAAO,EAAEvJ,KAAK,CAAC;EACxC8J,eAAe,CAAC9J,KAAK,CAAC;AAEtB,EAAA,OAAOsJ,OAAO,CAACpE,QAAQ,EAAE;AAC3B;;;;"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@turnkey/react-wallet-kit",
-  "version": "2.3.0",
+  "version": "2.3.2",
   "description": "The easiest and most powerful way to integrate Turnkey's Embedded Wallets into your React applications.",
   "main": "./dist/index.js",
   "module": "./dist/index.mjs",
@@ -49,9 +49,9 @@
     "qrcode.react": "^4.2.0",
     "react-international-phone": "^4.3.0",
     "viem": "^2.40.2",
-    "@turnkey/core": "2.4.0",
+    "@turnkey/core": "2.6.0",
     "@turnkey/iframe-stamper": "^2.11.1",
-    "@turnkey/sdk-types": "1.3.0"
+    "@turnkey/sdk-types": "1.5.0"
   },
   "devDependencies": {
     "@rollup/plugin-babel": "5.3.0",