StorageManager

StorageManager is the typed storage layer used internally by ThunderIDJavaScriptClient. It namespaces all stored data under a storage key derived from the client ID and instance ID, and provides typed getters and setters for each data category: configuration, OIDC provider metadata, session data, and temporary (PKCE/state) data.

Use it directly only when building platform adapters that need fine-grained control over stored auth state.

Constructor

import StorageManager from '@thunderid/javascript'

const storage = new StorageManager<Config>('instance_0-my-client-id', store)

Parameter	Type	Description
storageKey	string	Namespace key for all stored data
store	Storage	Storage backend implementing getData, setData, removeData

Data Categories

StorageManager manages four separate namespaces:

Category	Description
Config	Application configuration (AuthClientConfig)
OIDC metadata	Discovery document from the well-known endpoint
Session	Token response data (access_token, id_token, refresh_token, expires_in, etc.)
Temporary	Short-lived PKCE code verifiers and state parameters
Persisted	Long-lived data that survives session clearing (e.g., applicationId)

Methods

Config Data

setConfigData(config)

Store the application configuration.

await storage.setConfigData({ clientId: '...', baseUrl: '...' })

getConfigData()

Retrieve the stored configuration.

const config = await storage.getConfigData()

Returns: Promise<AuthClientConfig<T>>

getConfigDataParameter(key)

Retrieve a single config field.

const clientId = await storage.getConfigDataParameter('clientId')

setConfigDataParameter(key, value)

Update a single config field.

removeConfigData()

Delete the entire stored configuration.

removeConfigDataParameter(key)

Delete a single config field.

---

OIDC Provider Metadata

setOIDCProviderMetaData(data)

Cache the OIDC discovery document.

await storage.setOIDCProviderMetaData({
  token_endpoint: 'https://...',
  authorization_endpoint: 'https://...',
})

loadOpenIDProviderConfiguration()

Retrieve the cached OIDC discovery document.

const meta = await storage.loadOpenIDProviderConfiguration()
console.log(meta.token_endpoint)

Returns: Promise<OIDCDiscoveryApiResponse>

getOIDCProviderMetaDataParameter(key)

Retrieve a single field from the cached discovery document.

setOIDCProviderMetaDataParameter(key, value)

Update a single field in the cached discovery document.

removeOIDCProviderMetaData()

Delete the cached OIDC metadata.

removeOIDCProviderMetaDataParameter(key)

Delete a single field from the OIDC metadata.

---

Session Data

setSessionData(data, userId?)

Store token response data for a session.

await storage.setSessionData(
  { access_token: '...', id_token: '...', expires_in: '3600', created_at: Date.now() },
  userId,
)

getSessionData(userId?, instanceId?)

Retrieve session data for a user.

const session = await storage.getSessionData()
console.log(session.access_token)

Returns: Promise<SessionData>

getSessionDataParameter(key, userId?)

Retrieve a single session field.

setSessionDataParameter(key, value, userId?)

Update a single session field.

removeSessionData(userId?)

Clear session data.

removeSessionDataParameter(key, userId?)

Remove a single session field.

setSessionStatus(status) / getSessionStatus() / removeSessionStatus()

Manage a plain-string session status flag (e.g., for tracking sign-in progress).

---

Temporary Data

Temporary data stores short-lived values like PKCE code verifiers and state parameters. It is keyed per user session.

setTemporaryData(data, userId?)

Write a temporary data object.

getTemporaryData(userId?)

Read the full temporary data object.

Returns: Promise<TemporaryStore>

getTemporaryDataParameter(key, userId?)

Read a single temporary value.

const codeVerifier = await storage.getTemporaryDataParameter('pkce_key', userId)

setTemporaryDataParameter(key, value, userId?)

Write a single temporary value.

removeTemporaryData(userId?)

Delete all temporary data for a user.

removeTemporaryDataParameter(key, userId?)

Delete a single temporary value.

---

Persisted Data

Persisted data survives session clearing. Use it for values that must outlive individual sessions (e.g., applicationId).

setPersistedData(data, userId?)

Write persisted data.

getPersistedData(userId?)

Read persisted data.

Returns: Promise<TemporaryStore>

---

Custom Data

setCustomData<K>(key, data, userId?)

Store arbitrary typed data under a custom key.

getCustomData<K>(key, userId?)

Retrieve data stored under a custom key.

Returns: Promise<K>

Types

Storage

The storage backend interface. Implement this to provide a custom storage mechanism.

interface Storage {
  getData(key: string): Promise<string | null>
  setData(key: string, value: string): Promise<void>
  removeData(key: string): Promise<void>
}

SessionData

The shape of a stored token response:

Property	Type	Description
access_token	string	OAuth 2.0 access token
id_token	string	OIDC ID token
refresh_token	string	Refresh token
expires_in	string	Token lifetime in seconds
created_at	number	Unix timestamp when the session was created
scope	string	Space-separated granted scopes
session_state	string	OIDC session state parameter
token_type	string	Token type (typically Bearer)