tenneo-auth-plugin 0.1.9 → 0.1.10

package/README.md

@@ -138,6 +138,7 @@ function App() {
 
 | Prop | Type | Required | Default | Description |
 |------|------|----------|---------|-------------|
+| `config` | `SDKConfig` | No | - | Pass all configuration as a single object (alternative to individual props) |
 | `tenantCode` | `string` | No | - | Tenant code for configuration resolution |
 | `apiBaseUrl` | `string` | Yes | - | Tenant resolution service base URL |
 | `authServerUrl` | `string` | Yes | - | Authorization server base URL (OIDC authorize) |

package/dist/index.d.mts

@@ -206,6 +206,80 @@ declare function isAccessTokenExpired(): boolean;
 
 declare function useAuthContext(): AuthContextValue;
 
+/**
+ * Configuration types.
+ *
+ * There is no "internal vs runtime" config anymore.
+ * Everything is provided by the host app via `AuthProvider` props / `setConfig()`.
+ */
+interface SDKConfig {
+    /** Tenant resolution service base URL. */
+    apiBaseUrl?: string;
+    /** Auth API base URL (token exchange/refresh/logout). */
+    apiAuthBaseUrl?: string;
+    /** Authorization server base URL (OIDC authorize endpoint). */
+    authServerUrl?: string;
+    /** Callback/redirect URL (full URL). */
+    callbackUrl?: string;
+    /** Optional tenant code/key (used for tenant resolution). */
+    tenantCode?: string;
+    /** Optional runtime identifiers (may be returned from tenant API). */
+    clientId?: string;
+    tenantId?: string;
+    clientCode?: string;
+    /** Optional UI/runtime overrides. */
+    basePath?: string;
+}
+type HostConfigOverride = SDKConfig;
+interface ResolvedConfig {
+    apiBaseUrl: string;
+    authServerUrl: string;
+    callbackUrl: string;
+    clientCode: string;
+}
+type ResolvedHostConfig = ResolvedConfig;
+
+/**
+ * OAuth constants and storage keys. No config resolution — pure constants.
+ */
+declare const OAUTH_CONSTANTS: {
+    readonly SCOPES: "openid profile email";
+    readonly RESPONSE_TYPE: "code";
+    readonly CODE_CHALLENGE_METHOD: "S256";
+    readonly TOKEN_GRANT_TYPE: "authorization_code";
+    readonly REFRESH_GRANT_TYPE: "refresh_token";
+};
+declare const STORAGE_KEY_PREFIX = "tenneo_auth_";
+declare const STORAGE_KEYS: {
+    readonly authServerUrl: "tenneo_auth_auth_server_url";
+    readonly clientId: "tenneo_auth_client_id";
+    readonly redirectUri: "tenneo_auth_redirect_uri";
+    readonly tenantId: "tenneo_auth_tenant_id";
+    readonly codeVerifier: "tenneo_auth_code_verifier";
+    readonly state: "tenneo_auth_state";
+    readonly accessToken: "tenneo_auth_access_token";
+    readonly refreshToken: "tenneo_auth_refresh_token";
+    readonly expiresAt: "tenneo_auth_expires_at";
+};
+
+/**
+ * Config: minimal host-driven config store + facade.
+ *
+ * No "internal" or "runtime" config separation.
+ * Everything comes from the host app via `setConfig()` / `AuthProvider` props.
+ */
+
+declare function resolveConfig(overrides?: HostConfigOverride): ResolvedConfig;
+declare function getConfig(): ResolvedConfig;
+declare function setConfig(overrides: HostConfigOverride): void;
+declare const Config: {
+    readonly getApiBaseUrl: () => string;
+    readonly getAuthServerUrl: () => string;
+    readonly getClientCode: () => string;
+    readonly getRedirectUri: () => string;
+    readonly getAll: () => ResolvedHostConfig;
+};
+
 /**
  * React Context Provider for authentication state (FINAL)
  */
@@ -213,6 +287,8 @@ declare function useAuthContext(): AuthContextValue;
 interface AuthProviderProps {
     children: React.ReactNode;
     autoInit?: boolean;
+    /** Optional config object from host app (alternative to passing individual props). */
+    config?: SDKConfig;
     /** Tenant code from host app (used to resolve tenant via GET /api/tenant/v1/public/tenants/by-code/{tenantCode}). */
     tenantCode?: string;
     /** Tenant resolution base URL (host app). */
@@ -229,7 +305,7 @@ interface AuthProviderProps {
 /**
  * AuthProvider – UI-facing auth state only
  */
-declare function AuthProvider({ children, autoInit, tenantCode, apiBaseUrl, authServerUrl, callbackUrl, appId, storageAdapter, }: AuthProviderProps): React.JSX.Element;
+declare function AuthProvider({ children, autoInit, config, tenantCode, apiBaseUrl, authServerUrl, callbackUrl, appId, storageAdapter, }: AuthProviderProps): React.JSX.Element;
 
 interface AuthCallbackProps {
     loginPath?: string;
@@ -415,80 +491,6 @@ declare function isCallbackUrl(): boolean;
 
 declare function resolveTenant(tenantKey: string): Promise<TenantConfig | null>;
 
-/**
- * Configuration types.
- *
- * There is no "internal vs runtime" config anymore.
- * Everything is provided by the host app via `AuthProvider` props / `setConfig()`.
- */
-interface SDKConfig {
-    /** Tenant resolution service base URL. */
-    apiBaseUrl?: string;
-    /** Auth API base URL (token exchange/refresh/logout). */
-    apiAuthBaseUrl?: string;
-    /** Authorization server base URL (OIDC authorize endpoint). */
-    authServerUrl?: string;
-    /** Callback/redirect URL (full URL). */
-    callbackUrl?: string;
-    /** Optional tenant code/key (used for tenant resolution). */
-    tenantCode?: string;
-    /** Optional runtime identifiers (may be returned from tenant API). */
-    clientId?: string;
-    tenantId?: string;
-    clientCode?: string;
-    /** Optional UI/runtime overrides. */
-    basePath?: string;
-}
-type HostConfigOverride = SDKConfig;
-interface ResolvedConfig {
-    apiBaseUrl: string;
-    authServerUrl: string;
-    callbackUrl: string;
-    clientCode: string;
-}
-type ResolvedHostConfig = ResolvedConfig;
-
-/**
- * OAuth constants and storage keys. No config resolution — pure constants.
- */
-declare const OAUTH_CONSTANTS: {
-    readonly SCOPES: "openid profile email";
-    readonly RESPONSE_TYPE: "code";
-    readonly CODE_CHALLENGE_METHOD: "S256";
-    readonly TOKEN_GRANT_TYPE: "authorization_code";
-    readonly REFRESH_GRANT_TYPE: "refresh_token";
-};
-declare const STORAGE_KEY_PREFIX = "tenneo_auth_";
-declare const STORAGE_KEYS: {
-    readonly authServerUrl: "tenneo_auth_auth_server_url";
-    readonly clientId: "tenneo_auth_client_id";
-    readonly redirectUri: "tenneo_auth_redirect_uri";
-    readonly tenantId: "tenneo_auth_tenant_id";
-    readonly codeVerifier: "tenneo_auth_code_verifier";
-    readonly state: "tenneo_auth_state";
-    readonly accessToken: "tenneo_auth_access_token";
-    readonly refreshToken: "tenneo_auth_refresh_token";
-    readonly expiresAt: "tenneo_auth_expires_at";
-};
-
-/**
- * Config: minimal host-driven config store + facade.
- *
- * No "internal" or "runtime" config separation.
- * Everything comes from the host app via `setConfig()` / `AuthProvider` props.
- */
-
-declare function resolveConfig(overrides?: HostConfigOverride): ResolvedConfig;
-declare function getConfig(): ResolvedConfig;
-declare function setConfig(overrides: HostConfigOverride): void;
-declare const Config: {
-    readonly getApiBaseUrl: () => string;
-    readonly getAuthServerUrl: () => string;
-    readonly getClientCode: () => string;
-    readonly getRedirectUri: () => string;
-    readonly getAll: () => ResolvedHostConfig;
-};
-
 /**
  * Security and error utilities for authentication.
  * Domain layer: sanitized errors and HTTPS enforcement.

package/dist/index.d.ts

@@ -206,6 +206,80 @@ declare function isAccessTokenExpired(): boolean;
 
 declare function useAuthContext(): AuthContextValue;
 
+/**
+ * Configuration types.
+ *
+ * There is no "internal vs runtime" config anymore.
+ * Everything is provided by the host app via `AuthProvider` props / `setConfig()`.
+ */
+interface SDKConfig {
+    /** Tenant resolution service base URL. */
+    apiBaseUrl?: string;
+    /** Auth API base URL (token exchange/refresh/logout). */
+    apiAuthBaseUrl?: string;
+    /** Authorization server base URL (OIDC authorize endpoint). */
+    authServerUrl?: string;
+    /** Callback/redirect URL (full URL). */
+    callbackUrl?: string;
+    /** Optional tenant code/key (used for tenant resolution). */
+    tenantCode?: string;
+    /** Optional runtime identifiers (may be returned from tenant API). */
+    clientId?: string;
+    tenantId?: string;
+    clientCode?: string;
+    /** Optional UI/runtime overrides. */
+    basePath?: string;
+}
+type HostConfigOverride = SDKConfig;
+interface ResolvedConfig {
+    apiBaseUrl: string;
+    authServerUrl: string;
+    callbackUrl: string;
+    clientCode: string;
+}
+type ResolvedHostConfig = ResolvedConfig;
+
+/**
+ * OAuth constants and storage keys. No config resolution — pure constants.
+ */
+declare const OAUTH_CONSTANTS: {
+    readonly SCOPES: "openid profile email";
+    readonly RESPONSE_TYPE: "code";
+    readonly CODE_CHALLENGE_METHOD: "S256";
+    readonly TOKEN_GRANT_TYPE: "authorization_code";
+    readonly REFRESH_GRANT_TYPE: "refresh_token";
+};
+declare const STORAGE_KEY_PREFIX = "tenneo_auth_";
+declare const STORAGE_KEYS: {
+    readonly authServerUrl: "tenneo_auth_auth_server_url";
+    readonly clientId: "tenneo_auth_client_id";
+    readonly redirectUri: "tenneo_auth_redirect_uri";
+    readonly tenantId: "tenneo_auth_tenant_id";
+    readonly codeVerifier: "tenneo_auth_code_verifier";
+    readonly state: "tenneo_auth_state";
+    readonly accessToken: "tenneo_auth_access_token";
+    readonly refreshToken: "tenneo_auth_refresh_token";
+    readonly expiresAt: "tenneo_auth_expires_at";
+};
+
+/**
+ * Config: minimal host-driven config store + facade.
+ *
+ * No "internal" or "runtime" config separation.
+ * Everything comes from the host app via `setConfig()` / `AuthProvider` props.
+ */
+
+declare function resolveConfig(overrides?: HostConfigOverride): ResolvedConfig;
+declare function getConfig(): ResolvedConfig;
+declare function setConfig(overrides: HostConfigOverride): void;
+declare const Config: {
+    readonly getApiBaseUrl: () => string;
+    readonly getAuthServerUrl: () => string;
+    readonly getClientCode: () => string;
+    readonly getRedirectUri: () => string;
+    readonly getAll: () => ResolvedHostConfig;
+};
+
 /**
  * React Context Provider for authentication state (FINAL)
  */
@@ -213,6 +287,8 @@ declare function useAuthContext(): AuthContextValue;
 interface AuthProviderProps {
     children: React.ReactNode;
     autoInit?: boolean;
+    /** Optional config object from host app (alternative to passing individual props). */
+    config?: SDKConfig;
     /** Tenant code from host app (used to resolve tenant via GET /api/tenant/v1/public/tenants/by-code/{tenantCode}). */
     tenantCode?: string;
     /** Tenant resolution base URL (host app). */
@@ -229,7 +305,7 @@ interface AuthProviderProps {
 /**
  * AuthProvider – UI-facing auth state only
  */
-declare function AuthProvider({ children, autoInit, tenantCode, apiBaseUrl, authServerUrl, callbackUrl, appId, storageAdapter, }: AuthProviderProps): React.JSX.Element;
+declare function AuthProvider({ children, autoInit, config, tenantCode, apiBaseUrl, authServerUrl, callbackUrl, appId, storageAdapter, }: AuthProviderProps): React.JSX.Element;
 
 interface AuthCallbackProps {
     loginPath?: string;
@@ -415,80 +491,6 @@ declare function isCallbackUrl(): boolean;
 
 declare function resolveTenant(tenantKey: string): Promise<TenantConfig | null>;
 
-/**
- * Configuration types.
- *
- * There is no "internal vs runtime" config anymore.
- * Everything is provided by the host app via `AuthProvider` props / `setConfig()`.
- */
-interface SDKConfig {
-    /** Tenant resolution service base URL. */
-    apiBaseUrl?: string;
-    /** Auth API base URL (token exchange/refresh/logout). */
-    apiAuthBaseUrl?: string;
-    /** Authorization server base URL (OIDC authorize endpoint). */
-    authServerUrl?: string;
-    /** Callback/redirect URL (full URL). */
-    callbackUrl?: string;
-    /** Optional tenant code/key (used for tenant resolution). */
-    tenantCode?: string;
-    /** Optional runtime identifiers (may be returned from tenant API). */
-    clientId?: string;
-    tenantId?: string;
-    clientCode?: string;
-    /** Optional UI/runtime overrides. */
-    basePath?: string;
-}
-type HostConfigOverride = SDKConfig;
-interface ResolvedConfig {
-    apiBaseUrl: string;
-    authServerUrl: string;
-    callbackUrl: string;
-    clientCode: string;
-}
-type ResolvedHostConfig = ResolvedConfig;
-
-/**
- * OAuth constants and storage keys. No config resolution — pure constants.
- */
-declare const OAUTH_CONSTANTS: {
-    readonly SCOPES: "openid profile email";
-    readonly RESPONSE_TYPE: "code";
-    readonly CODE_CHALLENGE_METHOD: "S256";
-    readonly TOKEN_GRANT_TYPE: "authorization_code";
-    readonly REFRESH_GRANT_TYPE: "refresh_token";
-};
-declare const STORAGE_KEY_PREFIX = "tenneo_auth_";
-declare const STORAGE_KEYS: {
-    readonly authServerUrl: "tenneo_auth_auth_server_url";
-    readonly clientId: "tenneo_auth_client_id";
-    readonly redirectUri: "tenneo_auth_redirect_uri";
-    readonly tenantId: "tenneo_auth_tenant_id";
-    readonly codeVerifier: "tenneo_auth_code_verifier";
-    readonly state: "tenneo_auth_state";
-    readonly accessToken: "tenneo_auth_access_token";
-    readonly refreshToken: "tenneo_auth_refresh_token";
-    readonly expiresAt: "tenneo_auth_expires_at";
-};
-
-/**
- * Config: minimal host-driven config store + facade.
- *
- * No "internal" or "runtime" config separation.
- * Everything comes from the host app via `setConfig()` / `AuthProvider` props.
- */
-
-declare function resolveConfig(overrides?: HostConfigOverride): ResolvedConfig;
-declare function getConfig(): ResolvedConfig;
-declare function setConfig(overrides: HostConfigOverride): void;
-declare const Config: {
-    readonly getApiBaseUrl: () => string;
-    readonly getAuthServerUrl: () => string;
-    readonly getClientCode: () => string;
-    readonly getRedirectUri: () => string;
-    readonly getAll: () => ResolvedHostConfig;
-};
-
 /**
  * Security and error utilities for authentication.
  * Domain layer: sanitized errors and HTTPS enforcement.

package/dist/index.js

@@ -2882,6 +2882,7 @@ function createAuthEngine(config) {
 function AuthProvider({
   children,
   autoInit = true,
+  config,
   tenantCode,
   apiBaseUrl,
   authServerUrl,
@@ -2889,7 +2890,11 @@ function AuthProvider({
   appId = "",
   storageAdapter
 }) {
-  const resolvedTenantKey = tenantCode ?? Config.getClientCode();
+  const mergedTenantCode = tenantCode ?? config?.tenantCode;
+  const mergedApiBaseUrl = apiBaseUrl ?? config?.apiBaseUrl;
+  const mergedAuthServerUrl = authServerUrl ?? config?.authServerUrl;
+  const mergedCallbackUrl = callbackUrl ?? config?.callbackUrl;
+  const resolvedTenantKey = mergedTenantCode ?? Config.getClientCode();
   const namespace = react.useMemo(
     () => ({ tenantId: resolvedTenantKey ?? "", appId: appId ?? "" }),
     [resolvedTenantKey, appId]
@@ -2898,39 +2903,39 @@ function AuthProvider({
   const engineRef = react.useRef(null);
   react.useLayoutEffect(() => {
     logger.debug("[AuthProvider] Host config props", {
-      tenantCode: tenantCode ?? "(not provided)",
-      apiBaseUrl: apiBaseUrl ? apiBaseUrl : "(empty)",
-      authServerUrl: authServerUrl ? authServerUrl : "(empty)",
-      callbackUrl: callbackUrl ? callbackUrl : "(empty)"
+      tenantCode: mergedTenantCode ?? "(not provided)",
+      apiBaseUrl: mergedApiBaseUrl ? mergedApiBaseUrl : "(empty)",
+      authServerUrl: mergedAuthServerUrl ? mergedAuthServerUrl : "(empty)",
+      callbackUrl: mergedCallbackUrl ? mergedCallbackUrl : "(empty)"
     });
-    if (!authServerUrl || !authServerUrl.trim()) {
+    if (!mergedAuthServerUrl || !mergedAuthServerUrl.trim()) {
       logger.warn("[AuthProvider] authServerUrl missing from host props");
     }
-    if (!callbackUrl || !callbackUrl.trim()) {
+    if (!mergedCallbackUrl || !mergedCallbackUrl.trim()) {
       logger.warn("[AuthProvider] callbackUrl missing from host props");
     }
     setConfig({
-      ...tenantCode ? { tenantCode } : {},
-      ...apiBaseUrl ? { apiBaseUrl } : {},
-      ...authServerUrl ? { authServerUrl } : {},
-      ...callbackUrl ? { callbackUrl } : {}
+      ...mergedTenantCode ? { tenantCode: mergedTenantCode } : {},
+      ...mergedApiBaseUrl ? { apiBaseUrl: mergedApiBaseUrl } : {},
+      ...mergedAuthServerUrl ? { authServerUrl: mergedAuthServerUrl } : {},
+      ...mergedCallbackUrl ? { callbackUrl: mergedCallbackUrl } : {}
     });
     return () => {
       clearConfigOverrides();
     };
-  }, [tenantCode, apiBaseUrl, authServerUrl, callbackUrl]);
+  }, [mergedTenantCode, mergedApiBaseUrl, mergedAuthServerUrl, mergedCallbackUrl]);
   react.useEffect(() => {
     try {
       const payload = {
-        tenantCode: tenantCode ?? "",
-        apiBaseUrl: apiBaseUrl ?? "",
-        authServerUrl: authServerUrl ?? "",
-        callbackUrl: callbackUrl ?? ""
+        tenantCode: mergedTenantCode ?? "",
+        apiBaseUrl: mergedApiBaseUrl ?? "",
+        authServerUrl: mergedAuthServerUrl ?? "",
+        callbackUrl: mergedCallbackUrl ?? ""
       };
       setStorage(getStorageKey("host_config"), JSON.stringify(payload));
     } catch {
     }
-  }, [tenantCode, apiBaseUrl, authServerUrl, callbackUrl]);
+  }, [mergedTenantCode, mergedApiBaseUrl, mergedAuthServerUrl, mergedCallbackUrl]);
   react.useLayoutEffect(() => {
     setStorageKeyPrefix(resolvedTenantKey ?? "");
     const adapter = storageAdapter !== void 0 && storageAdapter !== null ? storageAdapter : createSecureSessionStorageAdapter(namespace);