Fix failure of calling authenticated APIs when multiple AsgardeoProvider instances are used

[kavindadimuthu]

This pull request introduces adoption of a Multiton pattern in AsgardeoSPAClient, allowing multiple authentication contexts to coexist within the same application by managing client instances via unique IDs. Several React level APIs have been updated to accept and propagate these instance IDs, ensuring correct isolation and management of authentication state per instance.

Multiton pattern implementation and API updates for instance-awareness::

• Refactored AsgardeoSPAClient in client.ts to implement a Multiton pattern, including new static methods for managing instances (getInstance, hasInstance, destroyInstance, getInstanceKeys, destroyAllInstances), and added an instance ID accessor (getInstanceId). [1] [2] [3]
• Updated AsgardeoReactClient and all organization-related API functions (createOrganization, getAllOrganizations, getMeOrganizations, getOrganization) in React to accept an optional instanceId parameter and use the correct client instance for requests. [1] [2] [3] [4] [5] [6] [7] [8] [9] [10] [11]

Related Issues

• Fixes bug: Fails Authenticated API Calls When Multiple AsgardeoProvider Instances Are Used #329

Related PRs

• Add support for multiple Asgardeo Provider instances via optional instanceID #325
• Fix isolation of login flows when Using Multiple AuthProvider Instances #327

Checklist

• Followed the CONTRIBUTING guidelines.
• Manual test round performed and verified.
• Documentation provided. (Add links if there are any)
• Unit tests provided. (Add links if there are any)

Security checks

• Followed secure coding standards in http://wso2.com/technical-reports/wso2-secure-engineering-guidelines?
• Confirmed that this PR doesn't commit any keys, passwords, tokens, usernames, or other secrets?

[DonOmalVindula]

Reviewed the changes. Left some comments. Please address them before merging.

[DonOmalVindula]

Issue: packages/browser/src/utils/http.ts was not updated

This file still has module-level getInstance() calls without an instanceId:

request: AsgardeoSPAClient.getInstance().httpRequest.bind(AsgardeoSPAClient.getInstance()),
requestAll: AsgardeoSPAClient.getInstance().httpRequestAll.bind(AsgardeoSPAClient.getInstance()),

This is the same pattern you fixed in all the packages/react/src/api/*.ts files. If anything uses this http util, it will always route to instance 0. Suggested fix — convert to a factory function that accepts instanceId:

const createHttp = (instanceId: number = 0) => {
  const client = AsgardeoSPAClient.getInstance(instanceId);
  return {
    request: client.httpRequest.bind(client),
    requestAll: client.httpRequestAll.bind(client),
  };
};

export default createHttp;

Or alternatively, if this is only used internally, pass the instanceId through from the caller.

[DonOmalVindula]

Good catch fixing instanceID !== undefined here. But the block above (lines 124-128) still has the same falsy-zero problem:

if (!this.instanceIdValue) {
  this.instanceIdValue = 0;
} else {
  this.instanceIdValue += 1;
}

If this.instanceIdValue is already 0, !this.instanceIdValue is true, so it resets to 0 instead of incrementing. Suggested fix — align with the cleaner logic in the browser package:

if (this.instanceIdValue === undefined || this.instanceIdValue === null) {
  this.instanceIdValue = 0;
} else {
  this.instanceIdValue += 1;
}

if (instanceID !== undefined) {
  this.instanceIdValue = instanceID;
}

[DonOmalVindula]

The return type of getInstance() changed from AsgardeoSPAClient | undefined to AsgardeoSPAClient, and new public methods were added (hasInstance, destroyInstance, getInstanceKeys, destroyAllInstances, getInstanceId). This is a public API surface change — should be a minor bump instead of patch:

Suggested change

	'@asgardeo/react': patch
	'@asgardeo/javascript': minor
	'@asgardeo/browser': minor
	'@asgardeo/react': patch

[asgardeo-github-bot]

🦋 Changeset detected

The changes in this PR will be included in the next version bump.

Not sure what this means? Click here to learn what changesets are.