@versini/auth0-react-thin 2.24.1 → 2.27.0

package/dist/index.d.ts

@@ -1,10 +1,11 @@
 export { default as Auth0Provider, Auth0ProviderOptions, Auth0ProviderWithConfigOptions, Auth0ProviderWithClientOptions, AppState, ConnectedAccount } from './auth0-provider';
 export { default as useAuth0 } from './use-auth0';
 export { default as useAuth0Suspense, Auth0SuspenseContextInterface, } from './use-auth0-suspense';
+export { default as useEnterpriseConnect, UseEnterpriseConnect, } from './use-enterprise-connect';
 export { default as withAuth0, WithAuth0Props } from './with-auth0';
 export { default as withAuthenticationRequired, WithAuthenticationRequiredOptions, } from './with-authentication-required';
 export { default as Auth0Context, Auth0ContextInterface, initialContext, LogoutOptions, RedirectLoginOptions, } from './auth0-context';
-export { AuthorizationParams, PopupLoginOptions, PopupConfigOptions, GetTokenWithPopupOptions, LogoutUrlOptions, CacheLocation, GetTokenSilentlyOptions, IdToken, User, ICache, InMemoryCache, LocalStorageCache, Cacheable, TimeoutError, MfaRequiredError, PopupCancelledError, PopupTimeoutError, PopupOpenError, AuthenticationError, MissingRefreshTokenError, MissingScopesError, InvalidConfigurationError, GenericError, UseDpopNonceError, RedirectConnectAccountOptions, ConnectAccountRedirectResult, ResponseType, ConnectError, CustomTokenExchangeOptions, TokenEndpointResponse, ActClaim, ClientConfiguration, RefreshTokenMode, MfaError, MfaListAuthenticatorsError, MfaEnrollmentError, MfaChallengeError, MfaVerifyError, MfaEnrollmentFactorsError, PasskeyError, PasskeyRegisterError, PasskeyChallengeError, PasskeyGetTokenError, MyAccountApiError, } from '@auth0/auth0-spa-js';
-export type { RevokeRefreshTokenOptions, FetcherConfig, InteractiveErrorHandler, MfaApiClient, Authenticator, MfaFactorType, EnrollParams, EnrollOtpParams, EnrollSmsParams, EnrollVoiceParams, EnrollEmailParams, EnrollPushParams, EnrollmentResponse, ChallengeAuthenticatorParams, ChallengeResponse, VerifyParams, EnrollmentFactor, PasskeyApiClient, PasskeySignupOptions, PasskeyLoginOptions, MyAccountApiClient, AuthenticationMethod, AuthenticationMethodType, Factor, UpdateAuthenticationMethodRequest, EnrollmentChallengeOptions, EnrollmentChallengeResponse, EnrollmentVerifyOptions, } from '@auth0/auth0-spa-js';
+export { AuthorizationParams, PopupLoginOptions, PopupConfigOptions, GetTokenWithPopupOptions, LogoutUrlOptions, CacheLocation, GetTokenSilentlyOptions, IdToken, User, ICache, InMemoryCache, LocalStorageCache, Cacheable, TimeoutError, MfaRequiredError, PopupCancelledError, PopupTimeoutError, PopupOpenError, AuthenticationError, MissingRefreshTokenError, MissingScopesError, InvalidConfigurationError, GenericError, UseDpopNonceError, RedirectConnectAccountOptions, ConnectAccountRedirectResult, ResponseType, ConnectError, CustomTokenExchangeOptions, TokenEndpointResponse, ActClaim, ClientConfiguration, RefreshTokenMode, MfaError, MfaListAuthenticatorsError, MfaEnrollmentError, MfaChallengeError, MfaVerifyError, MfaEnrollmentFactorsError, PasskeyError, PasskeyRegisterError, PasskeyChallengeError, PasskeyGetTokenError, MyAccountApiError, AnonymousSessionError, } from '@auth0/auth0-spa-js';
+export type { RevokeRefreshTokenOptions, FetcherConfig, InteractiveErrorHandler, IsFederatedDomainOptions, MfaApiClient, Authenticator, MfaFactorType, EnrollParams, EnrollOtpParams, EnrollSmsParams, EnrollVoiceParams, EnrollEmailParams, EnrollPushParams, EnrollmentResponse, ChallengeAuthenticatorParams, ChallengeResponse, VerifyParams, EnrollmentFactor, PasskeyApiClient, PasskeySignupOptions, PasskeyLoginOptions, MyAccountApiClient, AuthenticationMethod, AuthenticationMethodType, Factor, UpdateAuthenticationMethodRequest, EnrollmentChallengeOptions, EnrollmentChallengeResponse, EnrollmentVerifyOptions, AnonymousSessionApiClient, AnonymousGetTokenSilentlyOptions, AnonymousSession, AnonymousSessionClaims, AnonymousSessionErrorCode, CreateAnonymousSessionOptions, } from '@auth0/auth0-spa-js';
 export { OAuthError } from './errors';
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.tsx"],"names":[],"mappings":"AAAA,OAAO,EACL,OAAO,IAAI,aAAa,EACxB,oBAAoB,EACpB,8BAA8B,EAC9B,8BAA8B,EAC9B,QAAQ,EACR,gBAAgB,EACjB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,OAAO,IAAI,QAAQ,EAAE,MAAM,aAAa,CAAC;AAClD,OAAO,EACL,OAAO,IAAI,gBAAgB,EAC3B,6BAA6B,GAC9B,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,OAAO,IAAI,SAAS,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AACpE,OAAO,EACL,OAAO,IAAI,0BAA0B,EACrC,iCAAiC,GAClC,MAAM,gCAAgC,CAAC;AACxC,OAAO,EACL,OAAO,IAAI,YAAY,EACvB,qBAAqB,EACrB,cAAc,EACd,aAAa,EACb,oBAAoB,GACrB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACL,mBAAmB,EACnB,iBAAiB,EACjB,kBAAkB,EAClB,wBAAwB,EACxB,gBAAgB,EAChB,aAAa,EACb,uBAAuB,EACvB,OAAO,EACP,IAAI,EACJ,MAAM,EACN,aAAa,EACb,iBAAiB,EACjB,SAAS,EACT,YAAY,EACZ,gBAAgB,EAChB,mBAAmB,EACnB,iBAAiB,EACjB,cAAc,EACd,mBAAmB,EACnB,wBAAwB,EACxB,kBAAkB,EAClB,yBAAyB,EACzB,YAAY,EACZ,iBAAiB,EACjB,6BAA6B,EAC7B,4BAA4B,EAC5B,YAAY,EACZ,YAAY,EACZ,0BAA0B,EAC1B,qBAAqB,EACrB,QAAQ,EACR,mBAAmB,EACnB,gBAAgB,EAEhB,QAAQ,EACR,0BAA0B,EAC1B,kBAAkB,EAClB,iBAAiB,EACjB,cAAc,EACd,yBAAyB,EAEzB,YAAY,EACZ,oBAAoB,EACpB,qBAAqB,EACrB,oBAAoB,EAEpB,iBAAiB,GAClB,MAAM,qBAAqB,CAAC;AAC7B,YAAY,EACV,yBAAyB,EACzB,aAAa,EACb,uBAAuB,EAEvB,YAAY,EACZ,aAAa,EACb,aAAa,EACb,YAAY,EACZ,eAAe,EACf,eAAe,EACf,iBAAiB,EACjB,iBAAiB,EACjB,gBAAgB,EAChB,kBAAkB,EAClB,4BAA4B,EAC5B,iBAAiB,EACjB,YAAY,EACZ,gBAAgB,EAEhB,gBAAgB,EAChB,oBAAoB,EACpB,mBAAmB,EAEnB,kBAAkB,EAClB,oBAAoB,EACpB,wBAAwB,EACxB,MAAM,EACN,iCAAiC,EACjC,0BAA0B,EAC1B,2BAA2B,EAC3B,uBAAuB,GACxB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,UAAU,EAAE,MAAM,UAAU,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.tsx"],"names":[],"mappings":"AAAA,OAAO,EACL,OAAO,IAAI,aAAa,EACxB,oBAAoB,EACpB,8BAA8B,EAC9B,8BAA8B,EAC9B,QAAQ,EACR,gBAAgB,EACjB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,OAAO,IAAI,QAAQ,EAAE,MAAM,aAAa,CAAC;AAClD,OAAO,EACL,OAAO,IAAI,gBAAgB,EAC3B,6BAA6B,GAC9B,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,OAAO,IAAI,oBAAoB,EAC/B,oBAAoB,GACrB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,OAAO,IAAI,SAAS,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AACpE,OAAO,EACL,OAAO,IAAI,0BAA0B,EACrC,iCAAiC,GAClC,MAAM,gCAAgC,CAAC;AACxC,OAAO,EACL,OAAO,IAAI,YAAY,EACvB,qBAAqB,EACrB,cAAc,EACd,aAAa,EACb,oBAAoB,GACrB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACL,mBAAmB,EACnB,iBAAiB,EACjB,kBAAkB,EAClB,wBAAwB,EACxB,gBAAgB,EAChB,aAAa,EACb,uBAAuB,EACvB,OAAO,EACP,IAAI,EACJ,MAAM,EACN,aAAa,EACb,iBAAiB,EACjB,SAAS,EACT,YAAY,EACZ,gBAAgB,EAChB,mBAAmB,EACnB,iBAAiB,EACjB,cAAc,EACd,mBAAmB,EACnB,wBAAwB,EACxB,kBAAkB,EAClB,yBAAyB,EACzB,YAAY,EACZ,iBAAiB,EACjB,6BAA6B,EAC7B,4BAA4B,EAC5B,YAAY,EACZ,YAAY,EACZ,0BAA0B,EAC1B,qBAAqB,EACrB,QAAQ,EACR,mBAAmB,EACnB,gBAAgB,EAEhB,QAAQ,EACR,0BAA0B,EAC1B,kBAAkB,EAClB,iBAAiB,EACjB,cAAc,EACd,yBAAyB,EAEzB,YAAY,EACZ,oBAAoB,EACpB,qBAAqB,EACrB,oBAAoB,EAEpB,iBAAiB,EAEjB,qBAAqB,GACtB,MAAM,qBAAqB,CAAC;AAC7B,YAAY,EACV,yBAAyB,EACzB,aAAa,EACb,uBAAuB,EACvB,wBAAwB,EAExB,YAAY,EACZ,aAAa,EACb,aAAa,EACb,YAAY,EACZ,eAAe,EACf,eAAe,EACf,iBAAiB,EACjB,iBAAiB,EACjB,gBAAgB,EAChB,kBAAkB,EAClB,4BAA4B,EAC5B,iBAAiB,EACjB,YAAY,EACZ,gBAAgB,EAEhB,gBAAgB,EAChB,oBAAoB,EACpB,mBAAmB,EAEnB,kBAAkB,EAClB,oBAAoB,EACpB,wBAAwB,EACxB,MAAM,EACN,iCAAiC,EACjC,0BAA0B,EAC1B,2BAA2B,EAC3B,uBAAuB,EAEvB,yBAAyB,EACzB,gCAAgC,EAChC,gBAAgB,EAChB,sBAAsB,EACtB,yBAAyB,EACzB,6BAA6B,GAC9B,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,UAAU,EAAE,MAAM,UAAU,CAAC"}

package/dist/use-enterprise-connect.d.ts

@@ -0,0 +1,33 @@
+import { IsFederatedDomainOptions } from '@auth0/auth0-spa-js';
+import { Auth0ContextInterface, RedirectLoginOptions } from './auth0-context';
+/**
+ * The shape returned by the `useEnterpriseConnect` hook.
+ */
+export interface UseEnterpriseConnect {
+    /**
+     * Runs WebFinger domain discovery for the given email domain against the
+     * Auth0 domain configured on the `Auth0Provider`. Returns `true` only if
+     * the domain is managed by Auth0 for enterprise SSO. A routing hint, not a
+     * security control: it returns `false` on any failure.
+     */
+    isFederatedDomain: (emailDomain: string, options?: IsFederatedDomainOptions) => Promise<boolean>;
+    /**
+     * Starts the enterprise SSO redirect, passing the email as `login_hint`
+     * so Home Realm Discovery can resolve the connection and organization. Any
+     * `authorizationParams` supplied by the caller are preserved.
+     */
+    loginWithSSO: (email: string, options?: RedirectLoginOptions) => Promise<void>;
+}
+/**
+ * ```js
+ * const { isFederatedDomain, loginWithSSO } = useEnterpriseConnect();
+ * ```
+ *
+ * Convenience hook for the Enterprise Connect flow. `isFederatedDomain` reads
+ * the Auth0 domain from the `Auth0Provider` configuration, so callers pass
+ * only the email domain. `loginWithSSO` is sugar over `loginWithRedirect`
+ * that sets `login_hint` to the provided email.
+ */
+declare const useEnterpriseConnect: (context?: import("react").Context<Auth0ContextInterface<import("@auth0/auth0-spa-js").User>>) => UseEnterpriseConnect;
+export default useEnterpriseConnect;
+//# sourceMappingURL=use-enterprise-connect.d.ts.map

package/dist/use-enterprise-connect.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"use-enterprise-connect.d.ts","sourceRoot":"","sources":["../src/use-enterprise-connect.tsx"],"names":[],"mappings":"AACA,OAAO,EAEL,wBAAwB,EACzB,MAAM,qBAAqB,CAAC;AAC7B,OAAqB,EACnB,qBAAqB,EACrB,oBAAoB,EACrB,MAAM,iBAAiB,CAAC;AAEzB;;GAEG;AACH,MAAM,WAAW,oBAAoB;IACnC;;;;;OAKG;IACH,iBAAiB,EAAE,CACjB,WAAW,EAAE,MAAM,EACnB,OAAO,CAAC,EAAE,wBAAwB,KAC/B,OAAO,CAAC,OAAO,CAAC,CAAC;IACtB;;;;OAIG;IACH,YAAY,EAAE,CACZ,KAAK,EAAE,MAAM,EACb,OAAO,CAAC,EAAE,oBAAoB,KAC3B,OAAO,CAAC,IAAI,CAAC,CAAC;CACpB;AAED;;;;;;;;;GASG;AACH,QAAA,MAAM,oBAAoB,GACxB,4FAAsB,KACrB,oBAyBF,CAAC;AAEF,eAAe,oBAAoB,CAAC"}

package/package.json

@@ -1,8 +1,8 @@
 {
   "author": "Auth0",
   "name": "@versini/auth0-react-thin",
-  "version": "2.24.1",
-  "description": "Unofficial slim fork of @auth0/auth0-react@2.24.1 — bundle-size build, not affiliated with Auth0/Okta. See @versini/auth0-thin.",
+  "version": "2.27.0",
+  "description": "Unofficial slim fork of @auth0/auth0-react@2.27.0 — bundle-size build, not affiliated with Auth0/Okta. See @versini/auth0-thin.",
   "keywords": [
     "auth0",
     "fork",
@@ -32,9 +32,9 @@
     "react-dom": "^16.11.0 || ^17 || ^18 || ~19.0.1 || ~19.1.2 || ^19.2.1"
   },
   "dependencies": {
-    "@auth0/auth0-spa-js": "^2.24.1"
+    "@auth0/auth0-spa-js": "^2.27.0"
   },
-  "forkedFrom": "@auth0/auth0-react@2.24.1",
+  "forkedFrom": "@auth0/auth0-react@2.27.0",
   "publishConfig": {
     "access": "public"
   }

package/src/auth0-context.tsx

@@ -1,5 +1,4 @@
 import {
-  GetTokenSilentlyOptions,
   GetTokenWithPopupOptions,
   IdToken,
   LogoutOptions as SPALogoutOptions,
@@ -7,7 +6,6 @@ import {
   PopupConfigOptions,
   RedirectLoginResult,
   User,
-  GetTokenSilentlyVerboseResponse,
   RedirectLoginOptions as SPARedirectLoginOptions,
   type Auth0Client,
   RedirectConnectAccountOptions,
@@ -17,7 +15,8 @@ import {
   type RevokeRefreshTokenOptions,
   type MfaApiClient,
   type PasskeyApiClient,
-  type MyAccountApiClient
+  type MyAccountApiClient,
+  type AnonymousSessionApiClient
 } from '@auth0/auth0-spa-js';
 import { createContext } from 'react';
 import { AuthState, initialAuthState } from './auth-state';
@@ -47,7 +46,7 @@ export interface Auth0ContextInterface<TUser extends User = User>
    *
    * If refresh tokens are used, the token endpoint is called directly with the
    * 'refresh_token' grant. If no refresh token is available to make this call,
-   * the SDK will only fall back to using an iframe to the '/authorize' URL if 
+   * the SDK will only fall back to using an iframe to the '/authorize' URL if
    * the `useRefreshTokensFallback` setting has been set to `true`. By default this
    * setting is `false`.
    *
@@ -60,15 +59,7 @@ export interface Auth0ContextInterface<TUser extends User = User>
    * Note that in all cases, falling back to an iframe requires access to
    * the `auth0` cookie.
    */
-  getAccessTokenSilently: {
-    (
-      options: GetTokenSilentlyOptions & { detailedResponse: true }
-    ): Promise<GetTokenSilentlyVerboseResponse>;
-    (options?: GetTokenSilentlyOptions): Promise<string>;
-    (options: GetTokenSilentlyOptions): Promise<
-      GetTokenSilentlyVerboseResponse | string
-    >;
-  };
+  getAccessTokenSilently: Auth0Client['getTokenSilently'];
 
   /**
    * ```js
@@ -475,6 +466,21 @@ export interface Auth0ContextInterface<TUser extends User = User>
    */
   myAccount: MyAccountApiClient;
 
+  /**
+   * ```js
+   * const { anonymous } = useAuth0();
+   * const { accessToken } = await anonymous.getTokenSilently({ audience: 'https://api.example.com' });
+   * ```
+   *
+   * Anonymous session client for pre-authentication identity management.
+   *
+   * - `createSession(options?)` - Create a new anonymous session
+   * - `getTokenSilently(options?)` - Get or renew an anonymous access token
+   * - `logout()` - End the anonymous session and clear stored tokens
+   * - `getClaims()` - Always returns `null` in EA
+   */
+  anonymous: AnonymousSessionApiClient;
+
   /**
    * Internal. A promise that resolves when Auth0 initialization completes and
    * rejects with the initialization error if it fails. Consumed by
@@ -537,6 +543,13 @@ export const initialContext = {
     enrollmentChallenge: stub,
     enrollmentVerify: stub,
   } as unknown as MyAccountApiClient,
+  anonymous: {
+    createSession: stub,
+    getTokenSilently: stub,
+    logout: stub,
+    hasSession: stub,
+    getClaims: stub,
+  } as unknown as AnonymousSessionApiClient,
 };
 
 /**

package/src/auth0-provider.tsx

@@ -490,6 +490,7 @@ const Auth0Provider = <TUser extends User = User>(opts: Auth0ProviderOptions<TUs
 
   const mfa = useMemo(() => client.mfa, [client]);
   const myAccount = useMemo(() => client.myAccount, [client]);
+  const anonymous = useMemo(() => client.anonymous, [client]);
 
   const passkeySignup = useCallback(
     async (options: PasskeySignupOptions): Promise<TokenEndpointResponse> => {
@@ -555,6 +556,7 @@ const Auth0Provider = <TUser extends User = User>(opts: Auth0ProviderOptions<TUs
       mfa,
       passkey,
       myAccount,
+      anonymous,
       _initPromise: initDeferred.promise,
     };
   }, [
@@ -579,6 +581,7 @@ const Auth0Provider = <TUser extends User = User>(opts: Auth0ProviderOptions<TUs
     mfa,
     passkey,
     myAccount,
+    anonymous,
     initDeferred,
   ]);
 

package/src/index.tsx

@@ -11,6 +11,10 @@ export {
   default as useAuth0Suspense,
   Auth0SuspenseContextInterface,
 } from './use-auth0-suspense';
+export {
+  default as useEnterpriseConnect,
+  UseEnterpriseConnect,
+} from './use-enterprise-connect';
 export { default as withAuth0, WithAuth0Props } from './with-auth0';
 export {
   default as withAuthenticationRequired,
@@ -71,11 +75,14 @@ export {
   PasskeyGetTokenError,
   // MyAccount Errors
   MyAccountApiError,
+  // Anonymous Session Errors
+  AnonymousSessionError,
 } from '@auth0/auth0-spa-js';
 export type {
   RevokeRefreshTokenOptions,
   FetcherConfig,
   InteractiveErrorHandler,
+  IsFederatedDomainOptions,
   // MFA Types
   MfaApiClient,
   Authenticator,
@@ -104,5 +111,12 @@ export type {
   EnrollmentChallengeOptions,
   EnrollmentChallengeResponse,
   EnrollmentVerifyOptions,
+  // Anonymous Session Types
+  AnonymousSessionApiClient,
+  AnonymousGetTokenSilentlyOptions,
+  AnonymousSession,
+  AnonymousSessionClaims,
+  AnonymousSessionErrorCode,
+  CreateAnonymousSessionOptions,
 } from '@auth0/auth0-spa-js';
 export { OAuthError } from './errors';

package/src/use-enterprise-connect.tsx

@@ -0,0 +1,75 @@
+import { useCallback, useContext } from 'react';
+import {
+  isFederatedDomain as spaIsFederatedDomain,
+  IsFederatedDomainOptions,
+} from '@auth0/auth0-spa-js';
+import Auth0Context, {
+  Auth0ContextInterface,
+  RedirectLoginOptions,
+} from './auth0-context';
+
+/**
+ * The shape returned by the `useEnterpriseConnect` hook.
+ */
+export interface UseEnterpriseConnect {
+  /**
+   * Runs WebFinger domain discovery for the given email domain against the
+   * Auth0 domain configured on the `Auth0Provider`. Returns `true` only if
+   * the domain is managed by Auth0 for enterprise SSO. A routing hint, not a
+   * security control: it returns `false` on any failure.
+   */
+  isFederatedDomain: (
+    emailDomain: string,
+    options?: IsFederatedDomainOptions
+  ) => Promise<boolean>;
+  /**
+   * Starts the enterprise SSO redirect, passing the email as `login_hint`
+   * so Home Realm Discovery can resolve the connection and organization. Any
+   * `authorizationParams` supplied by the caller are preserved.
+   */
+  loginWithSSO: (
+    email: string,
+    options?: RedirectLoginOptions
+  ) => Promise<void>;
+}
+
+/**
+ * ```js
+ * const { isFederatedDomain, loginWithSSO } = useEnterpriseConnect();
+ * ```
+ *
+ * Convenience hook for the Enterprise Connect flow. `isFederatedDomain` reads
+ * the Auth0 domain from the `Auth0Provider` configuration, so callers pass
+ * only the email domain. `loginWithSSO` is sugar over `loginWithRedirect`
+ * that sets `login_hint` to the provided email.
+ */
+const useEnterpriseConnect = (
+  context = Auth0Context
+): UseEnterpriseConnect => {
+  const { getConfiguration, loginWithRedirect } = useContext(
+    context
+  ) as Auth0ContextInterface;
+
+  const isFederatedDomain = useCallback(
+    // domain is read at call time, not when the callback is memoized
+    (emailDomain: string, options?: IsFederatedDomainOptions) =>
+      spaIsFederatedDomain(getConfiguration().domain, emailDomain, options),
+    [getConfiguration]
+  );
+
+  const loginWithSSO = useCallback(
+    (email: string, options?: RedirectLoginOptions) =>
+      loginWithRedirect({
+        ...options,
+        authorizationParams: {
+          ...options?.authorizationParams,
+          login_hint: email,
+        },
+      }),
+    [loginWithRedirect]
+  );
+
+  return { isFederatedDomain, loginWithSSO };
+};
+
+export default useEnterpriseConnect;