@witsauth/react-client 1.0.0

package/README.md

@@ -0,0 +1,94 @@
+# @witsauth/react-client
+
+Official React client library for integrating Witsauth Single Sign-On (SSO) authentication or similar services into your React applications.
+
+## Installation
+
+```bash
+npm install @witsauth/react-client
+# or
+yarn add @witsauth/react-client
+# or
+pnpm add @witsauth/react-client
+```
+
+## Features
+- Complete OAuth2 Authorization Code Flow with PKCE.
+- Hooks (`useAuth`) for accessing user session state securely.
+- Built-in Axios interceptors for automatic Bearer token injection.
+- Seamless integration with Witsauth Console.
+
+## Setup
+
+Wrap your application with the `AuthProvider` and pass your configuration.
+
+```tsx
+import { AuthProvider, AuthCallback } from '@witsauth/react-client';
+import { BrowserRouter, Routes, Route } from 'react-router-dom';
+
+const authConfig = {
+  clientId: 'your-client-id',
+  authorizationEndpoint: 'https://api.yourdomain.com/auth/authorize',
+  tokenEndpoint: 'https://api.yourdomain.com/auth/oauth/token',
+  redirectUri: window.location.origin + '/auth/callback',
+  scope: 'openid profile email'
+};
+
+function App() {
+  return (
+    <BrowserRouter>
+      <AuthProvider config={authConfig}>
+        <Routes>
+          <Route path="/" element={<Home />} />
+          {/* Ensure you map a route for the OAuth callback */}
+          <Route path="/auth/callback" element={<AuthCallback />} />
+        </Routes>
+      </AuthProvider>
+    </BrowserRouter>
+  );
+}
+```
+
+## Usage
+
+Use the `useAuth` hook to access user state and login/logout functions.
+
+```tsx
+import { useAuth } from '@witsauth/react-client';
+
+function Profile() {
+  const { isAuthenticated, login, logout, isLoading } = useAuth();
+
+  if (isLoading) return <div>Loading...</div>;
+
+  return (
+    <div>
+      {isAuthenticated ? (
+        <>
+          <p>Welcome!</p>
+          <button onClick={logout}>Logout</button>
+        </>
+      ) : (
+        <button onClick={login}>Login</button>
+      )}
+    </div>
+  );
+}
+```
+
+## API Interceptors
+
+To automatically attach the Bearer token to your secure API requests, use the `setupAxiosInterceptors` helper.
+
+```tsx
+import axios from 'axios';
+import { setupAxiosInterceptors } from '@witsauth/react-client';
+
+export const apiClient = axios.create({
+  baseURL: 'https://api.yourdomain.com'
+});
+
+// The interceptor will automatically inject Authorization: Bearer <token>
+// Note: You must pass the AuthClient instance, for example from useAuth().client
+// setupAxiosInterceptors(apiClient, authClient);
+```

package/dist/axios/interceptor.d.ts

@@ -0,0 +1,7 @@
+import { AxiosInstance } from 'axios';
+import { AuthClient } from '../core/AuthClient';
+/**
+ * Attaches a Request Interceptor to the provided Axios instance to inject the Bearer token,
+ * and a Response Interceptor to automatically handle 401s by refreshing the token.
+ */
+export declare function setupAxiosInterceptors(axiosInstance: AxiosInstance, authClient: AuthClient): void;

package/dist/core/AuthClient.d.ts

@@ -0,0 +1,14 @@
+import { OAuth2Config, TokenInfo } from '../models/types';
+import { TokenStorage } from './storage';
+export declare class AuthClient {
+    private config;
+    private storage;
+    constructor(config: OAuth2Config, storage?: TokenStorage);
+    startAuthorization(): Promise<void>;
+    exchangeCodeForTokens(code: string, state: string): Promise<TokenInfo>;
+    refreshAccessToken(): Promise<TokenInfo>;
+    private saveTokenInfo;
+    getAccessToken(): string | null;
+    isAuthenticated(): boolean;
+    logout(): void;
+}

package/dist/core/pkce.d.ts

@@ -0,0 +1,13 @@
+/**
+ * Generates a cryptographically secure code verifier for PKCE
+ * RFC 7636 specifies it must be 43-128 characters long
+ */
+export declare function generateCodeVerifier(): string;
+/**
+ * Generates a state parameter for CSRF protection
+ */
+export declare function generateState(): string;
+/**
+ * Creates a SHA-256 code challenge from the code verifier
+ */
+export declare function createCodeChallenge(verifier: string): Promise<string>;

package/dist/core/storage.d.ts

@@ -0,0 +1,9 @@
+export declare class TokenStorage {
+    private memoryStorage;
+    private getStorage;
+    setItem(key: string, value: string): void;
+    getItem(key: string): string | null;
+    removeItem(key: string): void;
+    clearTokens(): void;
+    clearTemporary(): void;
+}

package/dist/index.d.ts

@@ -0,0 +1,7 @@
+export * from './models/types';
+export * from './core/pkce';
+export * from './core/storage';
+export * from './core/AuthClient';
+export * from './react/AuthContext';
+export * from './react/AuthCallback';
+export * from './axios/interceptor';

package/dist/index.es.js

@@ -0,0 +1,273 @@
+import { createContext as e, useContext as t, useEffect as n, useMemo as r, useRef as i, useState as a } from "react";
+import { Fragment as o, jsx as s } from "react/jsx-runtime";
+//#region src/models/types.ts
+var c = {
+	ACCESS_TOKEN: "witsauth_access_token",
+	REFRESH_TOKEN: "witsauth_refresh_token",
+	TOKEN_EXPIRES_AT: "witsauth_expires_at",
+	TOKEN_TYPE: "witsauth_token_type",
+	SCOPE: "witsauth_scope",
+	CODE_VERIFIER: "witsauth_code_verifier",
+	STATE: "witsauth_state",
+	NONCE: "witsauth_nonce"
+};
+//#endregion
+//#region src/core/pkce.ts
+function l() {
+	let e = /* @__PURE__ */ new Uint8Array(32);
+	return crypto.getRandomValues(e), btoa(String.fromCharCode(...e)).replace(/\+/g, "-").replace(/\//g, "_").replace(/=/g, "");
+}
+function u() {
+	let e = /* @__PURE__ */ new Uint8Array(32);
+	return crypto.getRandomValues(e), btoa(String.fromCharCode(...e)).replace(/\+/g, "-").replace(/\//g, "_").replace(/=/g, "");
+}
+async function d(e) {
+	let t = new TextEncoder().encode(e), n = await crypto.subtle.digest("SHA-256", t), r = new Uint8Array(n);
+	return btoa(String.fromCharCode(...r)).replace(/\+/g, "-").replace(/\//g, "_").replace(/=/g, "");
+}
+//#endregion
+//#region src/core/storage.ts
+var f = class {
+	memoryStorage = /* @__PURE__ */ new Map();
+	getStorage() {
+		if (typeof window < "u" && window.localStorage) return window.localStorage;
+		let e = this.memoryStorage;
+		return {
+			getItem: (t) => e.has(t) ? e.get(t) : null,
+			setItem: (t, n) => {
+				e.set(t, n);
+			},
+			removeItem: (t) => {
+				e.delete(t);
+			},
+			clear: () => {
+				e.clear();
+			},
+			get length() {
+				return e.size;
+			},
+			key: (t) => Array.from(e.keys())[t] || null
+		};
+	}
+	setItem(e, t) {
+		this.getStorage().setItem(e, t);
+	}
+	getItem(e) {
+		return this.getStorage().getItem(e);
+	}
+	removeItem(e) {
+		this.getStorage().removeItem(e);
+	}
+	clearTokens() {
+		let e = this.getStorage();
+		e.removeItem(c.ACCESS_TOKEN), e.removeItem(c.REFRESH_TOKEN), e.removeItem(c.TOKEN_EXPIRES_AT), e.removeItem(c.TOKEN_TYPE), e.removeItem(c.SCOPE);
+	}
+	clearTemporary() {
+		let e = this.getStorage();
+		e.removeItem(c.CODE_VERIFIER), e.removeItem(c.STATE), e.removeItem(c.NONCE);
+	}
+}, p = class {
+	config;
+	storage;
+	constructor(e, t) {
+		this.config = e, this.storage = t || new f();
+	}
+	async startAuthorization() {
+		let e = l(), t = await d(e), n = u(), r = u();
+		this.storage.setItem(c.CODE_VERIFIER, e), this.storage.setItem(c.STATE, n), this.storage.setItem(c.NONCE, r);
+		let i = new URLSearchParams({
+			client_id: this.config.clientId,
+			redirect_uri: this.config.redirectUri,
+			response_type: this.config.responseType || "code",
+			code_challenge_method: "S256",
+			code_challenge: t,
+			state: n,
+			nonce: r
+		});
+		this.config.scope && i.append("scope", this.config.scope), this.config.audience && i.append("audience", this.config.audience);
+		let a = `${this.config.authorizationEndpoint}?${i.toString()}`;
+		if (typeof window > "u" || !window.location) throw Error("startAuthorization requires a browser environment to redirect the user.");
+		window.location.href = a;
+	}
+	async exchangeCodeForTokens(e, t) {
+		let n = this.storage.getItem(c.STATE), r = this.storage.getItem(c.CODE_VERIFIER);
+		if (t !== n) throw Error("Invalid state parameter. Possible CSRF attack.");
+		if (!r) throw Error("Code verifier missing from storage.");
+		let i = new URLSearchParams({
+			grant_type: "authorization_code",
+			client_id: this.config.clientId,
+			redirect_uri: this.config.redirectUri,
+			code: e,
+			code_verifier: r
+		}), a = await fetch(this.config.tokenEndpoint, {
+			method: "POST",
+			headers: { "Content-Type": "application/x-www-form-urlencoded" },
+			body: i.toString()
+		});
+		if (!a.ok) throw Error("Failed to exchange code for tokens");
+		let o = await a.json(), s = {
+			accessToken: o.access_token,
+			refreshToken: o.refresh_token,
+			tokenType: o.token_type || "Bearer",
+			expiresAt: Date.now() + o.expires_in * 1e3,
+			scope: o.scope,
+			idToken: o.id_token
+		};
+		return this.saveTokenInfo(s), this.storage.clearTemporary(), s;
+	}
+	async refreshAccessToken() {
+		let e = this.storage.getItem(c.REFRESH_TOKEN);
+		if (!e) throw Error("No refresh token available");
+		let t = new URLSearchParams({
+			grant_type: "refresh_token",
+			client_id: this.config.clientId,
+			refresh_token: e
+		}), n = await fetch(this.config.tokenEndpoint, {
+			method: "POST",
+			headers: { "Content-Type": "application/x-www-form-urlencoded" },
+			body: t.toString()
+		});
+		if (!n.ok) throw this.storage.clearTokens(), Error("Failed to refresh token");
+		let r = await n.json(), i = {
+			accessToken: r.access_token,
+			refreshToken: r.refresh_token || e,
+			tokenType: r.token_type || "Bearer",
+			expiresAt: Date.now() + r.expires_in * 1e3,
+			scope: r.scope,
+			idToken: r.id_token
+		};
+		return this.saveTokenInfo(i), i;
+	}
+	saveTokenInfo(e) {
+		this.storage.setItem(c.ACCESS_TOKEN, e.accessToken), this.storage.setItem(c.TOKEN_EXPIRES_AT, e.expiresAt.toString()), this.storage.setItem(c.TOKEN_TYPE, e.tokenType), e.refreshToken && this.storage.setItem(c.REFRESH_TOKEN, e.refreshToken), e.scope && this.storage.setItem(c.SCOPE, e.scope);
+	}
+	getAccessToken() {
+		return this.storage.getItem(c.ACCESS_TOKEN);
+	}
+	isAuthenticated() {
+		let e = this.storage.getItem(c.TOKEN_EXPIRES_AT);
+		return e ? Date.now() < parseInt(e, 10) - 3e4 && !!this.getAccessToken() : !1;
+	}
+	logout() {
+		this.storage.clearTokens(), this.storage.clearTemporary();
+	}
+}, m = e(null), h = ({ config: e, children: t }) => {
+	let [i, o] = a({
+		isAuthenticated: !1,
+		isLoading: !0
+	}), c = r(() => new p(e, new f()), [e]);
+	n(() => {
+		(async () => {
+			try {
+				if (c.isAuthenticated()) o({
+					isAuthenticated: !0,
+					isLoading: !1
+				});
+				else try {
+					await c.refreshAccessToken(), o({
+						isAuthenticated: !0,
+						isLoading: !1
+					});
+				} catch {
+					o({
+						isAuthenticated: !1,
+						isLoading: !1
+					});
+				}
+			} catch (e) {
+				o({
+					isAuthenticated: !1,
+					isLoading: !1,
+					error: e instanceof Error ? e.message : String(e)
+				});
+			}
+		})();
+	}, [c]);
+	let l = async () => {
+		o((e) => ({
+			...e,
+			isLoading: !0
+		})), await c.startAuthorization();
+	}, u = () => {
+		c.logout(), o({
+			isAuthenticated: !1,
+			isLoading: !1
+		});
+	}, d = async (e, t) => {
+		o((e) => ({
+			...e,
+			isLoading: !0
+		}));
+		try {
+			let n = await c.exchangeCodeForTokens(e, t);
+			return o({
+				isAuthenticated: !0,
+				isLoading: !1,
+				tokenInfo: n
+			}), n;
+		} catch (e) {
+			throw o({
+				isAuthenticated: !1,
+				isLoading: !1,
+				error: e instanceof Error ? e.message : String(e)
+			}), e;
+		}
+	}, h = {
+		...i,
+		login: l,
+		logout: u,
+		handleCallback: d,
+		client: c
+	};
+	return /* @__PURE__ */ s(m.Provider, {
+		value: h,
+		children: t
+	});
+}, g = () => {
+	let e = t(m);
+	if (!e) throw Error("useAuth must be used within an AuthProvider");
+	return e;
+}, _ = ({ onSuccess: e, onError: t, loadingComponent: r = /* @__PURE__ */ s("div", { children: "Processing authentication..." }) }) => {
+	let { handleCallback: a } = g(), c = i(!1);
+	return n(() => {
+		c.current || (c.current = !0, (async () => {
+			let n = new URLSearchParams(window.location.search), r = new URLSearchParams(window.location.hash.substring(1)), i = n.get("code") || r.get("code"), o = n.get("state") || r.get("state"), s = n.get("error") || r.get("error");
+			if (s) {
+				let e = /* @__PURE__ */ Error(`OAuth Error: ${s}`);
+				t && t(e);
+				return;
+			}
+			if (i && o) try {
+				await a(i, o), e && e();
+			} catch (e) {
+				t && t(e instanceof Error ? e : Error(String(e)));
+			}
+		})());
+	}, [
+		a,
+		e,
+		t
+	]), /* @__PURE__ */ s(o, { children: r });
+};
+//#endregion
+//#region src/axios/interceptor.ts
+function v(e, t) {
+	e.interceptors.request.use((e) => {
+		let n = t.getAccessToken();
+		return n && e.headers && (e.headers.Authorization = `Bearer ${n}`), e;
+	}, (e) => Promise.reject(e)), e.interceptors.response.use((e) => e, async (n) => {
+		let r = n.config;
+		if (n.response?.status === 401 && r && !r._retry) {
+			r._retry = !0;
+			try {
+				let n = await t.refreshAccessToken();
+				return r.headers && (r.headers.Authorization = `Bearer ${n.accessToken}`), e(r);
+			} catch (e) {
+				return t.logout(), Promise.reject(e);
+			}
+		}
+		return Promise.reject(n);
+	});
+}
+//#endregion
+export { _ as AuthCallback, p as AuthClient, h as AuthProvider, c as STORAGE_KEYS, f as TokenStorage, d as createCodeChallenge, l as generateCodeVerifier, u as generateState, v as setupAxiosInterceptors, g as useAuth };

package/dist/index.umd.js

@@ -0,0 +1 @@
+(function(e,t){typeof exports==`object`&&typeof module<`u`?t(exports,require("react"),require("react/jsx-runtime")):typeof define==`function`&&define.amd?define([`exports`,`react`,`react/jsx-runtime`],t):(e=typeof globalThis<`u`?globalThis:e||self,t(e.WitsAuthReactClient={},e.React,e.react_jsx_runtime))})(this,function(e,t,n){Object.defineProperty(e,Symbol.toStringTag,{value:`Module`});var r=Object.create,i=Object.defineProperty,a=Object.getOwnPropertyDescriptor,o=Object.getOwnPropertyNames,s=Object.getPrototypeOf,c=Object.prototype.hasOwnProperty,l=(e,t,n,r)=>{if(t&&typeof t==`object`||typeof t==`function`)for(var s=o(t),l=0,u=s.length,d;l<u;l++)d=s[l],!c.call(e,d)&&d!==n&&i(e,d,{get:(e=>t[e]).bind(null,d),enumerable:!(r=a(t,d))||r.enumerable});return e};t=((e,t,n)=>(n=e==null?{}:r(s(e)),l(t||!e||!e.__esModule?i(n,`default`,{value:e,enumerable:!0}):n,e)))(t,1);var u={ACCESS_TOKEN:`witsauth_access_token`,REFRESH_TOKEN:`witsauth_refresh_token`,TOKEN_EXPIRES_AT:`witsauth_expires_at`,TOKEN_TYPE:`witsauth_token_type`,SCOPE:`witsauth_scope`,CODE_VERIFIER:`witsauth_code_verifier`,STATE:`witsauth_state`,NONCE:`witsauth_nonce`};function d(){let e=new Uint8Array(32);return crypto.getRandomValues(e),btoa(String.fromCharCode(...e)).replace(/\+/g,`-`).replace(/\//g,`_`).replace(/=/g,``)}function f(){let e=new Uint8Array(32);return crypto.getRandomValues(e),btoa(String.fromCharCode(...e)).replace(/\+/g,`-`).replace(/\//g,`_`).replace(/=/g,``)}async function p(e){let t=new TextEncoder().encode(e),n=await crypto.subtle.digest(`SHA-256`,t),r=new Uint8Array(n);return btoa(String.fromCharCode(...r)).replace(/\+/g,`-`).replace(/\//g,`_`).replace(/=/g,``)}var m=class{memoryStorage=new Map;getStorage(){if(typeof window<`u`&&window.localStorage)return window.localStorage;let e=this.memoryStorage;return{getItem:t=>e.has(t)?e.get(t):null,setItem:(t,n)=>{e.set(t,n)},removeItem:t=>{e.delete(t)},clear:()=>{e.clear()},get length(){return e.size},key:t=>Array.from(e.keys())[t]||null}}setItem(e,t){this.getStorage().setItem(e,t)}getItem(e){return this.getStorage().getItem(e)}removeItem(e){this.getStorage().removeItem(e)}clearTokens(){let e=this.getStorage();e.removeItem(u.ACCESS_TOKEN),e.removeItem(u.REFRESH_TOKEN),e.removeItem(u.TOKEN_EXPIRES_AT),e.removeItem(u.TOKEN_TYPE),e.removeItem(u.SCOPE)}clearTemporary(){let e=this.getStorage();e.removeItem(u.CODE_VERIFIER),e.removeItem(u.STATE),e.removeItem(u.NONCE)}},h=class{config;storage;constructor(e,t){this.config=e,this.storage=t||new m}async startAuthorization(){let e=d(),t=await p(e),n=f(),r=f();this.storage.setItem(u.CODE_VERIFIER,e),this.storage.setItem(u.STATE,n),this.storage.setItem(u.NONCE,r);let i=new URLSearchParams({client_id:this.config.clientId,redirect_uri:this.config.redirectUri,response_type:this.config.responseType||`code`,code_challenge_method:`S256`,code_challenge:t,state:n,nonce:r});this.config.scope&&i.append(`scope`,this.config.scope),this.config.audience&&i.append(`audience`,this.config.audience);let a=`${this.config.authorizationEndpoint}?${i.toString()}`;if(typeof window>`u`||!window.location)throw Error(`startAuthorization requires a browser environment to redirect the user.`);window.location.href=a}async exchangeCodeForTokens(e,t){let n=this.storage.getItem(u.STATE),r=this.storage.getItem(u.CODE_VERIFIER);if(t!==n)throw Error(`Invalid state parameter. Possible CSRF attack.`);if(!r)throw Error(`Code verifier missing from storage.`);let i=new URLSearchParams({grant_type:`authorization_code`,client_id:this.config.clientId,redirect_uri:this.config.redirectUri,code:e,code_verifier:r}),a=await fetch(this.config.tokenEndpoint,{method:`POST`,headers:{"Content-Type":`application/x-www-form-urlencoded`},body:i.toString()});if(!a.ok)throw Error(`Failed to exchange code for tokens`);let o=await a.json(),s={accessToken:o.access_token,refreshToken:o.refresh_token,tokenType:o.token_type||`Bearer`,expiresAt:Date.now()+o.expires_in*1e3,scope:o.scope,idToken:o.id_token};return this.saveTokenInfo(s),this.storage.clearTemporary(),s}async refreshAccessToken(){let e=this.storage.getItem(u.REFRESH_TOKEN);if(!e)throw Error(`No refresh token available`);let t=new URLSearchParams({grant_type:`refresh_token`,client_id:this.config.clientId,refresh_token:e}),n=await fetch(this.config.tokenEndpoint,{method:`POST`,headers:{"Content-Type":`application/x-www-form-urlencoded`},body:t.toString()});if(!n.ok)throw this.storage.clearTokens(),Error(`Failed to refresh token`);let r=await n.json(),i={accessToken:r.access_token,refreshToken:r.refresh_token||e,tokenType:r.token_type||`Bearer`,expiresAt:Date.now()+r.expires_in*1e3,scope:r.scope,idToken:r.id_token};return this.saveTokenInfo(i),i}saveTokenInfo(e){this.storage.setItem(u.ACCESS_TOKEN,e.accessToken),this.storage.setItem(u.TOKEN_EXPIRES_AT,e.expiresAt.toString()),this.storage.setItem(u.TOKEN_TYPE,e.tokenType),e.refreshToken&&this.storage.setItem(u.REFRESH_TOKEN,e.refreshToken),e.scope&&this.storage.setItem(u.SCOPE,e.scope)}getAccessToken(){return this.storage.getItem(u.ACCESS_TOKEN)}isAuthenticated(){let e=this.storage.getItem(u.TOKEN_EXPIRES_AT);return e?Date.now()<parseInt(e,10)-3e4&&!!this.getAccessToken():!1}logout(){this.storage.clearTokens(),this.storage.clearTemporary()}},g=(0,t.createContext)(null),_=({config:e,children:r})=>{let[i,a]=(0,t.useState)({isAuthenticated:!1,isLoading:!0}),o=(0,t.useMemo)(()=>new h(e,new m),[e]);(0,t.useEffect)(()=>{(async()=>{try{if(o.isAuthenticated())a({isAuthenticated:!0,isLoading:!1});else try{await o.refreshAccessToken(),a({isAuthenticated:!0,isLoading:!1})}catch{a({isAuthenticated:!1,isLoading:!1})}}catch(e){a({isAuthenticated:!1,isLoading:!1,error:e instanceof Error?e.message:String(e)})}})()},[o]);let s=async()=>{a(e=>({...e,isLoading:!0})),await o.startAuthorization()},c=()=>{o.logout(),a({isAuthenticated:!1,isLoading:!1})},l=async(e,t)=>{a(e=>({...e,isLoading:!0}));try{let n=await o.exchangeCodeForTokens(e,t);return a({isAuthenticated:!0,isLoading:!1,tokenInfo:n}),n}catch(e){throw a({isAuthenticated:!1,isLoading:!1,error:e instanceof Error?e.message:String(e)}),e}},u={...i,login:s,logout:c,handleCallback:l,client:o};return(0,n.jsx)(g.Provider,{value:u,children:r})},v=()=>{let e=(0,t.useContext)(g);if(!e)throw Error(`useAuth must be used within an AuthProvider`);return e},y=({onSuccess:e,onError:r,loadingComponent:i=(0,n.jsx)(`div`,{children:`Processing authentication...`})})=>{let{handleCallback:a}=v(),o=(0,t.useRef)(!1);return(0,t.useEffect)(()=>{o.current||(o.current=!0,(async()=>{let t=new URLSearchParams(window.location.search),n=new URLSearchParams(window.location.hash.substring(1)),i=t.get(`code`)||n.get(`code`),o=t.get(`state`)||n.get(`state`),s=t.get(`error`)||n.get(`error`);if(s){let e=Error(`OAuth Error: ${s}`);r&&r(e);return}if(i&&o)try{await a(i,o),e&&e()}catch(e){r&&r(e instanceof Error?e:Error(String(e)))}})())},[a,e,r]),(0,n.jsx)(n.Fragment,{children:i})};function b(e,t){e.interceptors.request.use(e=>{let n=t.getAccessToken();return n&&e.headers&&(e.headers.Authorization=`Bearer ${n}`),e},e=>Promise.reject(e)),e.interceptors.response.use(e=>e,async n=>{let r=n.config;if(n.response?.status===401&&r&&!r._retry){r._retry=!0;try{let n=await t.refreshAccessToken();return r.headers&&(r.headers.Authorization=`Bearer ${n.accessToken}`),e(r)}catch(e){return t.logout(),Promise.reject(e)}}return Promise.reject(n)})}e.AuthCallback=y,e.AuthClient=h,e.AuthProvider=_,e.STORAGE_KEYS=u,e.TokenStorage=m,e.createCodeChallenge=p,e.generateCodeVerifier=d,e.generateState=f,e.setupAxiosInterceptors=b,e.useAuth=v});

package/dist/models/types.d.ts

@@ -0,0 +1,43 @@
+export interface OAuth2Config {
+    clientId: string;
+    authorizationEndpoint: string;
+    tokenEndpoint: string;
+    redirectUri: string;
+    userInfoEndpoint?: string;
+    scope?: string;
+    audience?: string;
+    responseType?: string;
+    autoRefresh?: boolean;
+    refreshThreshold?: number;
+    oAuthProvider?: 'witsauth' | string;
+}
+export interface TokenInfo {
+    accessToken: string;
+    refreshToken?: string;
+    tokenType: string;
+    expiresAt: number;
+    scope?: string;
+    idToken?: string;
+}
+export interface AuthState {
+    isAuthenticated: boolean;
+    isLoading: boolean;
+    tokenInfo?: TokenInfo;
+    error?: string;
+}
+export interface UserInfo {
+    sub?: string;
+    name?: string;
+    email?: string;
+    [key: string]: any;
+}
+export declare const STORAGE_KEYS: {
+    ACCESS_TOKEN: string;
+    REFRESH_TOKEN: string;
+    TOKEN_EXPIRES_AT: string;
+    TOKEN_TYPE: string;
+    SCOPE: string;
+    CODE_VERIFIER: string;
+    STATE: string;
+    NONCE: string;
+};

package/dist/react/AuthCallback.d.ts

@@ -0,0 +1,8 @@
+import { default as React } from 'react';
+interface AuthCallbackProps {
+    onSuccess?: () => void;
+    onError?: (error: Error) => void;
+    loadingComponent?: React.ReactNode;
+}
+export declare const AuthCallback: React.FC<AuthCallbackProps>;
+export {};

package/dist/react/AuthContext.d.ts

@@ -0,0 +1,15 @@
+import { default as React } from 'react';
+import { OAuth2Config, AuthState, TokenInfo } from '../models/types';
+import { AuthClient } from '../core/AuthClient';
+interface AuthContextValue extends AuthState {
+    login: () => Promise<void>;
+    logout: () => void;
+    client: AuthClient;
+    handleCallback: (code: string, state: string) => Promise<TokenInfo>;
+}
+export declare const AuthProvider: React.FC<{
+    config: OAuth2Config;
+    children: React.ReactNode;
+}>;
+export declare const useAuth: () => AuthContextValue;
+export {};

package/package.json

@@ -0,0 +1,57 @@
+{
+  "name": "@witsauth/react-client",
+  "version": "1.0.0",
+  "description": "Official React client library for integrating Witsauth Single Sign-On (SSO) authentication or similar services into your React applications.",
+  "main": "./dist/index.umd.js",
+  "module": "./dist/index.es.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "import": "./dist/index.es.js",
+      "require": "./dist/index.umd.js",
+      "types": "./dist/index.d.ts"
+    }
+  },
+  "files": [
+    "dist"
+  ],
+  "keywords": [
+    "react",
+    "auth",
+    "oauth2",
+    "pkce"
+  ],
+  "author": "",
+  "license": "ISC",
+  "devEngines": {
+    "packageManager": {
+      "name": "pnpm",
+      "version": "^11.15.1",
+      "onFail": "download"
+    }
+  },
+  "type": "module",
+  "peerDependencies": {
+    "axios": "^1.18.1",
+    "react": "^18.0.0 || ^19.0.0",
+    "react-dom": "^18.0.0 || ^19.0.0"
+  },
+  "devDependencies": {
+    "@testing-library/jest-dom": "^7.0.0",
+    "@testing-library/react": "^16.3.2",
+    "@types/node": "^26.1.1",
+    "@types/react": "^19.2.17",
+    "@types/react-dom": "^19.2.3",
+    "@typescript/typescript6": "^6.0.2",
+    "jsdom": "^29.1.1",
+    "typescript": "^7.0.2",
+    "vite": "^8.1.5",
+    "vite-plugin-dts": "^5.0.3",
+    "vitest": "^4.1.10"
+  },
+  "scripts": {
+    "dev": "vite",
+    "build": "tsc && vite build",
+    "test": "vitest run"
+  }
+}