Skip to content

fix(widget): restore v1.3.0 config parity and expose OIDC passthrough options - #563

Open
vatsalparikh wants to merge 1 commit into
mainfrom
SDKS-5216-fix-widget-config
Open

fix(widget): restore v1.3.0 config parity and expose OIDC passthrough options#563
vatsalparikh wants to merge 1 commit into
mainfrom
SDKS-5216-fix-widget-config

Conversation

@vatsalparikh

Copy link
Copy Markdown
Contributor

Summary

Restores the config options that v1.3.0 (sdk.config.ts) exposed but the 2.0.0 rewrite dropped, and additionally exposes the OIDC client passthrough options that are reachable through the widget's authorize/logout flow. All new options are optional; existing behavior is unchanged when they are omitted.

v1.3.0 parity keys

Option Where Maps to
logLevel top level each client's config.log
middleware top level requestMiddleware on both clients
oidcClient.oauthThreshold oidcClient config.oauthThreshold
oidcClient.tokenStore oidcClient storage.type ('localStorage' / 'sessionStorage' only)
oidcClient.prefix oidcClient storage.prefix (new in v2)

OIDC passthrough options (new)

Forwarded verbatim to the SDK — all confirmed consumed at runtime by @forgerock/oidc-client 2.1.0:

Option SDK type Effect
oidcClient.par boolean Pushed Authorization Requests for the authorize flow (client.store.js)
oidcClient.signOutRedirectUri string post_logout_redirect_uri for user.logout() (logout.request.js)
oidcClient.loginHint string Pre-fill username on the authorize request (client.store.js)
oidcClient.acrValues string Authentication context class values / step-up (client.store.js)
oidcClient.query Record<string, string> Generic params appended to the authorize URL — escape hatch (client.store.js)

Notes

  • middleware keeps the v1.3.0 option name but uses the v2 RequestMiddleware signature (req, action, next) => void.
  • tokenStore accepts the two string literals only; the v1.3.0 custom token-object store is not supported (v2 persists serialized strings).

Testing

  • pnpm --filter @forgerock/login-widget exec vitest run — 346 tests pass (24 files).
  • svelte-check — 48 errors before and after this change (all pre-existing); zero new type errors introduced.
  • prettier --check . + eslint . — clean.
  • Changeset included (patch).

@changeset-bot

changeset-bot Bot commented Jul 31, 2026

Copy link
Copy Markdown

🦋 Changeset detected

Latest commit: 603f2e1

The changes in this PR will be included in the next version bump.

This PR includes changesets to release 1 package
Name Type
@forgerock/login-widget Patch

Not sure what this means? Click here to learn what changesets are.

Click here if you're a maintainer who wants to add another changeset to this PR

… options

Restore logLevel, middleware, oauthThreshold, tokenStore, prefix for v1.3.0
parity, and expose the OIDC passthrough options par, signOutRedirectUri,
loginHint, acrValues, and query on oidcClient.
@vatsalparikh
vatsalparikh force-pushed the SDKS-5216-fix-widget-config branch from fdccd39 to 603f2e1 Compare July 31, 2026 22:57
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Development

Successfully merging this pull request may close these issues.

1 participant