=> {
+ const response: globalThis.Response = await fetch(url, config);
+ const data: unknown = await response.json();
+ return {
+ json: () => Promise.resolve(data),
+ ok: response.ok,
+ status: response.status,
+ statusText: response.statusText,
+ text: () => Promise.resolve(typeof data === 'string' ? data : JSON.stringify(data)),
+ } as Response;
+ };
+
+ return baseGetScim2Me({
+ ...requestConfig,
+ fetcher: fetcher || defaultFetcher,
+ });
+};
+
+export default getScim2Me;
diff --git a/packages/sveltekit/src/api/index.ts b/packages/sveltekit/src/api/index.ts
new file mode 100644
index 0000000..ba2fe36
--- /dev/null
+++ b/packages/sveltekit/src/api/index.ts
@@ -0,0 +1,2 @@
+export {default as getSchemas} from './getSchemas';
+export {default as getScim2Me} from './getScim2Me';
diff --git a/packages/sveltekit/src/components/actions/BaseSignInButton.svelte b/packages/sveltekit/src/components/actions/BaseSignInButton.svelte
new file mode 100644
index 0000000..fb4c655
--- /dev/null
+++ b/packages/sveltekit/src/components/actions/BaseSignInButton.svelte
@@ -0,0 +1,46 @@
+
+
+{@render children({loading, handleClick})}
diff --git a/packages/sveltekit/src/components/actions/BaseSignOutButton.svelte b/packages/sveltekit/src/components/actions/BaseSignOutButton.svelte
new file mode 100644
index 0000000..97372b1
--- /dev/null
+++ b/packages/sveltekit/src/components/actions/BaseSignOutButton.svelte
@@ -0,0 +1,45 @@
+
+
+{@render children({loading, handleClick})}
diff --git a/packages/sveltekit/src/components/actions/BaseSignUpButton.svelte b/packages/sveltekit/src/components/actions/BaseSignUpButton.svelte
new file mode 100644
index 0000000..be895d4
--- /dev/null
+++ b/packages/sveltekit/src/components/actions/BaseSignUpButton.svelte
@@ -0,0 +1,46 @@
+
+
+{@render children({loading, handleClick})}
diff --git a/packages/sveltekit/src/components/actions/SignInButton.svelte b/packages/sveltekit/src/components/actions/SignInButton.svelte
new file mode 100644
index 0000000..fd9e139
--- /dev/null
+++ b/packages/sveltekit/src/components/actions/SignInButton.svelte
@@ -0,0 +1,55 @@
+
+
+
diff --git a/packages/sveltekit/src/components/actions/SignOutButton.svelte b/packages/sveltekit/src/components/actions/SignOutButton.svelte
new file mode 100644
index 0000000..eb8c5c2
--- /dev/null
+++ b/packages/sveltekit/src/components/actions/SignOutButton.svelte
@@ -0,0 +1,54 @@
+
+
+
diff --git a/packages/sveltekit/src/components/actions/SignUpButton.svelte b/packages/sveltekit/src/components/actions/SignUpButton.svelte
new file mode 100644
index 0000000..1be2b5c
--- /dev/null
+++ b/packages/sveltekit/src/components/actions/SignUpButton.svelte
@@ -0,0 +1,54 @@
+
+
+
diff --git a/packages/sveltekit/src/components/auth/Callback.svelte b/packages/sveltekit/src/components/auth/Callback.svelte
new file mode 100644
index 0000000..ecd93a5
--- /dev/null
+++ b/packages/sveltekit/src/components/auth/Callback.svelte
@@ -0,0 +1,122 @@
+
+
+{#if status === 'loading'}
+
+ {#if loadingComponent}
+ {@render loadingComponent()}
+ {:else if children}
+ {@render children()}
+ {:else}
+ {tid.t('callback.signingIn')}
+ {/if}
+
+{:else if status === 'error'}
+
+ {#if errorComponent}
+ {@render errorComponent({error: error ?? ''})}
+ {:else}
+ {tid.t('callback.signInFailed', {error: error ?? ''})}
+ {/if}
+
+{:else if status === 'success'}
+
+ {#if children}
+ {@render children()}
+ {:else}
+ {tid.t('callback.signedIn')}
+ {/if}
+
+{/if}
diff --git a/packages/sveltekit/src/components/control/Loading.svelte b/packages/sveltekit/src/components/control/Loading.svelte
new file mode 100644
index 0000000..7a8c1f1
--- /dev/null
+++ b/packages/sveltekit/src/components/control/Loading.svelte
@@ -0,0 +1,36 @@
+
+
+{#if tid.isLoading}
+ {@render children?.()}
+{:else}
+ {@render fallback?.()}
+{/if}
diff --git a/packages/sveltekit/src/components/control/SignedIn.svelte b/packages/sveltekit/src/components/control/SignedIn.svelte
new file mode 100644
index 0000000..e044cd7
--- /dev/null
+++ b/packages/sveltekit/src/components/control/SignedIn.svelte
@@ -0,0 +1,36 @@
+
+
+{#if tid.isSignedIn}
+ {@render children?.()}
+{:else}
+ {@render fallback?.()}
+{/if}
diff --git a/packages/sveltekit/src/components/control/SignedOut.svelte b/packages/sveltekit/src/components/control/SignedOut.svelte
new file mode 100644
index 0000000..df2dda9
--- /dev/null
+++ b/packages/sveltekit/src/components/control/SignedOut.svelte
@@ -0,0 +1,36 @@
+
+
+{#if !tid.isSignedIn}
+ {@render children?.()}
+{:else}
+ {@render fallback?.()}
+{/if}
diff --git a/packages/sveltekit/src/components/presentation/AcceptInvite.svelte b/packages/sveltekit/src/components/presentation/AcceptInvite.svelte
new file mode 100644
index 0000000..9f5952d
--- /dev/null
+++ b/packages/sveltekit/src/components/presentation/AcceptInvite.svelte
@@ -0,0 +1,31 @@
+
+
+
+ {#snippet children({acceptInvite, loading, error})}
+ {#if customChildren}
+ {@render customChildren({acceptInvite, loading, error})}
+ {:else}
+
+
{tid.t('acceptInvite.title')}
+ {#if error}
+
{error}
+ {/if}
+
+
+
{tid.t('inviteUser.title')}
+ {#if error}
+
{error}
+ {/if}
+
+
+
+
{tid.t('signIn.title')}
+ {#if error}
+
{tid.t('signIn.error', {error: error ?? ''})}
+ {/if}
+
+
+
{tid.t('signUp.title')}
+ {#if error}
+
{tid.t('signUp.error', {error: error ?? ''})}
+ {/if}
+
+
+ {userData['displayName'] ?? userData['userName'] ?? tid.t('user.displayName')}
+
+{:else}
+ {tid.t('user.notSignedIn')}
+{/if}
diff --git a/packages/sveltekit/src/components/presentation/UserDropdown.svelte b/packages/sveltekit/src/components/presentation/UserDropdown.svelte
new file mode 100644
index 0000000..09b9c6c
--- /dev/null
+++ b/packages/sveltekit/src/components/presentation/UserDropdown.svelte
@@ -0,0 +1,52 @@
+
+
+
+ {#snippet children({user, isSignedIn, open, toggle, close, triggerRef, menuRef, triggerId, menuId, signOut, handleTriggerKeydown, handleMenuKeydown})}
+ {#if customChildren}
+ {@render customChildren({user, isSignedIn, open, toggle, close, triggerRef, menuRef, triggerId, menuId, signOut, handleTriggerKeydown, handleMenuKeydown})}
+ {:else if isSignedIn}
+
+
+ {#if open}
+
+ {/if}
+
+ {/if}
+ {/snippet}
+
diff --git a/packages/sveltekit/src/components/presentation/UserProfile.svelte b/packages/sveltekit/src/components/presentation/UserProfile.svelte
new file mode 100644
index 0000000..00d058d
--- /dev/null
+++ b/packages/sveltekit/src/components/presentation/UserProfile.svelte
@@ -0,0 +1,44 @@
+
+
+{#if children}
+ {@render children({profile: tid.userProfile, user: tid.user})}
+{:else}
+
+ {#if tid.user}
+
{tid.user['displayName'] ?? tid.user['userName'] ?? tid.t('user.displayName')}
+ {#if tid.user['emails']?.length}
+
{tid.user['emails'][0]}
+ {/if}
+ {:else}
+
{tid.t('userProfile.empty')}
+ {/if}
+
%sveltekit.body%
+
+
diff --git a/samples/sveltekit/quickstart/src/hooks.server.ts b/samples/sveltekit/quickstart/src/hooks.server.ts
new file mode 100644
index 0000000..a25df42
--- /dev/null
+++ b/samples/sveltekit/quickstart/src/hooks.server.ts
@@ -0,0 +1,14 @@
+import {THUNDERID_BASE_URL, THUNDERID_CLIENT_ID, THUNDERID_CLIENT_SECRET, THUNDERID_SESSION_SECRET} from '$env/static/private';
+import {createThunderIDHandle} from '@thunderid/sveltekit/server';
+
+export const handle = createThunderIDHandle({
+ baseUrl: THUNDERID_BASE_URL,
+ clientId: THUNDERID_CLIENT_ID,
+ clientSecret: THUNDERID_CLIENT_SECRET,
+ sessionSecret: THUNDERID_SESSION_SECRET,
+ afterSignInUrl: '/',
+ afterSignOutUrl: '/',
+ preferences: {
+ theme: {inheritFromBranding: false},
+ },
+});
diff --git a/samples/sveltekit/quickstart/src/lib/AppShell.svelte b/samples/sveltekit/quickstart/src/lib/AppShell.svelte
new file mode 100644
index 0000000..658f770
--- /dev/null
+++ b/samples/sveltekit/quickstart/src/lib/AppShell.svelte
@@ -0,0 +1,65 @@
+
+
+
+
+
+{#if eventLog.length > 0}
+
+ SDK Events ({eventLog.length})
+
+{#each eventLog as evt}{evt}
+{/each}
+
+
+{/if}
+
+{@render children()}
diff --git a/samples/sveltekit/quickstart/src/lib/assets/favicon.svg b/samples/sveltekit/quickstart/src/lib/assets/favicon.svg
new file mode 100644
index 0000000..cc5dc66
--- /dev/null
+++ b/samples/sveltekit/quickstart/src/lib/assets/favicon.svg
@@ -0,0 +1 @@
+
\ No newline at end of file
diff --git a/samples/sveltekit/quickstart/src/lib/index.ts b/samples/sveltekit/quickstart/src/lib/index.ts
new file mode 100644
index 0000000..856f2b6
--- /dev/null
+++ b/samples/sveltekit/quickstart/src/lib/index.ts
@@ -0,0 +1 @@
+// place files you want to import through the `$lib` alias in this folder.
diff --git a/samples/sveltekit/quickstart/src/routes/+layout.server.ts b/samples/sveltekit/quickstart/src/routes/+layout.server.ts
new file mode 100644
index 0000000..611031b
--- /dev/null
+++ b/samples/sveltekit/quickstart/src/routes/+layout.server.ts
@@ -0,0 +1,6 @@
+import {loadThunderID} from '@thunderid/sveltekit/server';
+import type {LayoutServerLoad} from './$types';
+
+export const load: LayoutServerLoad = (event) => {
+ return {thunderid: loadThunderID(event)};
+};
diff --git a/samples/sveltekit/quickstart/src/routes/+layout.svelte b/samples/sveltekit/quickstart/src/routes/+layout.svelte
new file mode 100644
index 0000000..8d4006b
--- /dev/null
+++ b/samples/sveltekit/quickstart/src/routes/+layout.svelte
@@ -0,0 +1,13 @@
+
+
+
+
+ {@render children()}
+
+
diff --git a/samples/sveltekit/quickstart/src/routes/+page.svelte b/samples/sveltekit/quickstart/src/routes/+page.svelte
new file mode 100644
index 0000000..ad3a147
--- /dev/null
+++ b/samples/sveltekit/quickstart/src/routes/+page.svelte
@@ -0,0 +1,92 @@
+
+
+ThunderID SDK Test App
+
+
+ Initializing...
+
+
+
+ Welcome!
+
+
+
+
+
+
+ Actions
+
+
+
+
+
+
+ {#if accessToken}
+
+ Access Token
+ {accessToken}
+ {/if}
+
+ {#if idToken}
+
+ ID Token (raw)
+ {idToken}
+ {/if}
+
+ {#if userInfo}
+
+ UserInfo
+ {JSON.stringify(userInfo, null, 2)}
+ {/if}
+
+
+ Raw user data
+ {JSON.stringify(tid.user, null, 2)}
+
+
+ Raw user profile
+ {JSON.stringify(tid.userProfile, null, 2)}
+
+
+ Configuration
+ {JSON.stringify({locale: tid.locale, isInitialized: tid.isInitialized, isSignedIn: tid.isSignedIn, resolvedBaseUrl: tid.resolvedBaseUrl, clientId: tid.clientId, scopes: tid.scopes}, null, 2)}
+
+
+
+ You are not signed in.
+
+
+
diff --git a/samples/sveltekit/quickstart/src/routes/api/auth/callback/+server.ts b/samples/sveltekit/quickstart/src/routes/api/auth/callback/+server.ts
new file mode 100644
index 0000000..baeabb9
--- /dev/null
+++ b/samples/sveltekit/quickstart/src/routes/api/auth/callback/+server.ts
@@ -0,0 +1,10 @@
+import {THUNDERID_BASE_URL, THUNDERID_CLIENT_ID, THUNDERID_CLIENT_SECRET, THUNDERID_SESSION_SECRET} from '$env/static/private';
+import {createCallbackHandler} from '@thunderid/sveltekit/server';
+
+export const GET = createCallbackHandler({
+ baseUrl: THUNDERID_BASE_URL,
+ clientId: THUNDERID_CLIENT_ID,
+ clientSecret: THUNDERID_CLIENT_SECRET,
+ sessionSecret: THUNDERID_SESSION_SECRET,
+ afterSignInUrl: '/',
+});
diff --git a/samples/sveltekit/quickstart/src/routes/api/auth/signin/+server.ts b/samples/sveltekit/quickstart/src/routes/api/auth/signin/+server.ts
new file mode 100644
index 0000000..f4b16ce
--- /dev/null
+++ b/samples/sveltekit/quickstart/src/routes/api/auth/signin/+server.ts
@@ -0,0 +1,10 @@
+import {THUNDERID_BASE_URL, THUNDERID_CLIENT_ID, THUNDERID_CLIENT_SECRET, THUNDERID_SESSION_SECRET} from '$env/static/private';
+import {createSignInHandler} from '@thunderid/sveltekit/server';
+
+export const GET = createSignInHandler({
+ baseUrl: THUNDERID_BASE_URL,
+ clientId: THUNDERID_CLIENT_ID,
+ clientSecret: THUNDERID_CLIENT_SECRET,
+ sessionSecret: THUNDERID_SESSION_SECRET,
+ afterSignInUrl: 'http://localhost:5173/api/auth/callback',
+});
diff --git a/samples/sveltekit/quickstart/src/routes/api/auth/signout/+server.ts b/samples/sveltekit/quickstart/src/routes/api/auth/signout/+server.ts
new file mode 100644
index 0000000..dd672fd
--- /dev/null
+++ b/samples/sveltekit/quickstart/src/routes/api/auth/signout/+server.ts
@@ -0,0 +1,10 @@
+import {THUNDERID_BASE_URL, THUNDERID_CLIENT_ID, THUNDERID_CLIENT_SECRET, THUNDERID_SESSION_SECRET} from '$env/static/private';
+import {createSignOutHandler} from '@thunderid/sveltekit/server';
+
+export const GET = createSignOutHandler({
+ baseUrl: THUNDERID_BASE_URL,
+ clientId: THUNDERID_CLIENT_ID,
+ clientSecret: THUNDERID_CLIENT_SECRET,
+ sessionSecret: THUNDERID_SESSION_SECRET,
+ afterSignOutUrl: '/',
+});
diff --git a/samples/sveltekit/quickstart/src/routes/callback/+page.svelte b/samples/sveltekit/quickstart/src/routes/callback/+page.svelte
new file mode 100644
index 0000000..8a0b0ec
--- /dev/null
+++ b/samples/sveltekit/quickstart/src/routes/callback/+page.svelte
@@ -0,0 +1,6 @@
+
+
+Signing you in...
+
diff --git a/samples/sveltekit/quickstart/src/routes/protected/+page.server.ts b/samples/sveltekit/quickstart/src/routes/protected/+page.server.ts
new file mode 100644
index 0000000..173f464
--- /dev/null
+++ b/samples/sveltekit/quickstart/src/routes/protected/+page.server.ts
@@ -0,0 +1,19 @@
+import {requireServerSession} from '@thunderid/sveltekit/server';
+import {redirect} from '@sveltejs/kit';
+import {isGuardRedirect} from '@thunderid/sveltekit/server';
+import type {PageServerLoad} from './$types';
+
+export const load: PageServerLoad = (event) => {
+ try {
+ const ssrData = requireServerSession(event, '/api/auth/signin');
+ return {
+ user: ssrData.user,
+ session: ssrData.session,
+ };
+ } catch (e) {
+ if (isGuardRedirect(e)) {
+ throw redirect(e.status, e.location);
+ }
+ throw e;
+ }
+};
diff --git a/samples/sveltekit/quickstart/src/routes/protected/+page.svelte b/samples/sveltekit/quickstart/src/routes/protected/+page.svelte
new file mode 100644
index 0000000..df60d88
--- /dev/null
+++ b/samples/sveltekit/quickstart/src/routes/protected/+page.svelte
@@ -0,0 +1,29 @@
+
+
+Protected Page
+
+
+
+
+ Back to home
+
+
+
+
+ SSR Session Data
+ {JSON.stringify({
+ session: {
+ sub: data.session?.sub,
+ scopes: data.session?.scopes,
+ exp: data.session?.exp ? new Date((data.session.exp as number) * 1000).toISOString() : null,
+ iat: data.session?.iat ? new Date((data.session.iat as number) * 1000).toISOString() : null,
+ sessionId: data.session?.sessionId,
+ accessToken: (data.session?.accessToken as string)?.slice(0, 30) + '...',
+ },
+ user: data.user,
+ }, null, 2)}
+
diff --git a/samples/sveltekit/quickstart/static/robots.txt b/samples/sveltekit/quickstart/static/robots.txt
new file mode 100644
index 0000000..b6dd667
--- /dev/null
+++ b/samples/sveltekit/quickstart/static/robots.txt
@@ -0,0 +1,3 @@
+# allow crawling everything by default
+User-agent: *
+Disallow:
diff --git a/samples/sveltekit/quickstart/thunderid-config/thunderid-config.yaml b/samples/sveltekit/quickstart/thunderid-config/thunderid-config.yaml
new file mode 100644
index 0000000..7393fac
--- /dev/null
+++ b/samples/sveltekit/quickstart/thunderid-config/thunderid-config.yaml
@@ -0,0 +1,128 @@
+# resource_type: user_type
+id: 019e3a5c-04ea-7d18-8ae6-f828b1f3d60f
+category: user
+name: Customer
+ouHandle: default
+allowSelfRegistration: true
+systemAttributes:
+ display: username
+schema: {
+ "username": {
+ "type": "string",
+ "displayName": "Username",
+ "required": true,
+ "unique": true
+ },
+ "password": {
+ "type": "string",
+ "displayName": "Password",
+ "required": false,
+ "credential": true
+ },
+ "email": {
+ "type": "string",
+ "displayName": "Email",
+ "required": true,
+ "unique": true,
+ "regex": "^[a-zA-Z0-9._%+-]+@[a-zA-Z0-9.-]+\\.[a-zA-Z]{2,}$"
+ },
+ "given_name": {
+ "type": "string",
+ "displayName": "First Name",
+ "required": false
+ },
+ "family_name": {
+ "type": "string",
+ "displayName": "Last Name",
+ "required": false
+ },
+ "name": {
+ "type": "string",
+ "displayName": "Full Name",
+ "required": false
+ },
+ "mobile_number": {
+ "type": "string",
+ "displayName": "Mobile Number",
+ "required": false
+ }
+ }
+
+---
+# resource_type: application
+id: 2971eb55-7673-4bd0-9ef8-2ed8b53e388f
+ouHandle: default
+name: sveltekit-quickstart
+description: Sample SvelteKit application using the @thunderid/sveltekit SDK
+url: http://localhost:5173
+logoUrl: emoji:๐
+authFlowHandle: default-basic-flow
+isRegistrationFlowEnabled: true
+isRecoveryFlowEnabled: false
+assertion:
+ validityPeriod: 3600
+allowedUserTypes:
+ - Customer
+inboundAuthConfig:
+ - type: oauth2
+ config:
+ clientId: {{.SVELTEKIT_QUICKSTART_CLIENT_ID}}
+ redirectUris:
+ {{- range .SVELTEKIT_QUICKSTART_REDIRECT_URIS}}
+ - {{.}}
+ {{- end}}
+ grantTypes:
+ - authorization_code
+ responseTypes:
+ - code
+ tokenEndpointAuthMethod: client_secret_post
+ pkceRequired: true
+ publicClient: false
+ requirePushedAuthorizationRequests: false
+ token:
+ accessToken:
+ validityPeriod: 3600
+ userAttributes:
+ - given_name
+ - family_name
+ - email
+ - groups
+ - name
+ idToken:
+ validityPeriod: 3600
+ userAttributes:
+ - given_name
+ - family_name
+ - email
+ - groups
+ - name
+ responseType: JWT
+ userInfo:
+ responseType: JSON
+ userAttributes:
+ - given_name
+ - family_name
+ - email
+ - groups
+ - name
+ scopeClaims:
+ email:
+ - email
+ - email_verified
+ group:
+ - groups
+ phone:
+ - phone_number
+ - phone_number_verified
+ profile:
+ - name
+ - given_name
+ - family_name
+ - picture
+
+---
+# resource_type: server_config
+name: cors
+value:
+ allowedOrigins:
+ - "http://localhost:5173"
diff --git a/samples/sveltekit/quickstart/thunderid-config/thunderid.env b/samples/sveltekit/quickstart/thunderid-config/thunderid.env
new file mode 100644
index 0000000..b3cd029
--- /dev/null
+++ b/samples/sveltekit/quickstart/thunderid-config/thunderid.env
@@ -0,0 +1,2 @@
+SVELTEKIT_QUICKSTART_CLIENT_ID=SVELTEKIT_QUICKSTART
+SVELTEKIT_QUICKSTART_REDIRECT_URIS=["http://localhost:5173"]
diff --git a/samples/sveltekit/quickstart/tsconfig.json b/samples/sveltekit/quickstart/tsconfig.json
new file mode 100644
index 0000000..2c2ed3c
--- /dev/null
+++ b/samples/sveltekit/quickstart/tsconfig.json
@@ -0,0 +1,20 @@
+{
+ "extends": "./.svelte-kit/tsconfig.json",
+ "compilerOptions": {
+ "rewriteRelativeImportExtensions": true,
+ "allowJs": true,
+ "checkJs": true,
+ "esModuleInterop": true,
+ "forceConsistentCasingInFileNames": true,
+ "resolveJsonModule": true,
+ "skipLibCheck": true,
+ "sourceMap": true,
+ "strict": true,
+ "moduleResolution": "bundler"
+ }
+ // Path aliases are handled by https://svelte.dev/docs/kit/configuration#alias
+ // except $lib which is handled by https://svelte.dev/docs/kit/configuration#files
+ //
+ // To make changes to top-level options such as include and exclude, we recommend extending
+ // the generated config; see https://svelte.dev/docs/kit/configuration#typescript
+}
diff --git a/samples/sveltekit/quickstart/vite.config.ts b/samples/sveltekit/quickstart/vite.config.ts
new file mode 100644
index 0000000..cb76b81
--- /dev/null
+++ b/samples/sveltekit/quickstart/vite.config.ts
@@ -0,0 +1,20 @@
+import adapter from '@sveltejs/adapter-auto';
+import { sveltekit } from '@sveltejs/kit/vite';
+import { defineConfig } from 'vite';
+
+export default defineConfig({
+ plugins: [
+ sveltekit({
+ compilerOptions: {
+ // Force runes mode for the project, except for libraries. Can be removed in svelte 6.
+ runes: ({ filename }) =>
+ filename.split(/[/\\]/).includes('node_modules') ? undefined : true
+ },
+
+ // adapter-auto only supports some environments, see https://svelte.dev/docs/kit/adapter-auto for a list.
+ // If your environment is not supported, or you settled on a specific environment, switch out the adapter.
+ // See https://svelte.dev/docs/kit/adapters for more information about adapters.
+ adapter: adapter()
+ })
+ ]
+});