@axa-fr/react-oidc 5.13.12 → 6.0.0-alpha1

package/dist/vanilla/oidc.js

@@ -1,4 +1,19 @@
 "use strict";
+var __extends = (this && this.__extends) || (function () {
+    var extendStatics = function (d, b) {
+        extendStatics = Object.setPrototypeOf ||
+            ({ __proto__: [] } instanceof Array && function (d, b) { d.__proto__ = b; }) ||
+            function (d, b) { for (var p in b) if (Object.prototype.hasOwnProperty.call(b, p)) d[p] = b[p]; };
+        return extendStatics(d, b);
+    };
+    return function (d, b) {
+        if (typeof b !== "function" && b !== null)
+            throw new TypeError("Class extends value " + String(b) + " is not a constructor or null");
+        extendStatics(d, b);
+        function __() { this.constructor = d; }
+        d.prototype = b === null ? Object.create(b) : (__.prototype = b.prototype, new __());
+    };
+})();
 var __assign = (this && this.__assign) || function () {
     __assign = Object.assign || function(t) {
         for (var s, i = 1, n = arguments.length; i < n; i++) {
@@ -50,21 +65,29 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
     return (mod && mod.__esModule) ? mod : { "default": mod };
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.Oidc = exports.getLoginParams = void 0;
+exports.Oidc = exports.OidcAuthorizationServiceConfiguration = void 0;
 var appauth_1 = require("@openid/appauth");
 var noHashQueryStringUtils_1 = require("./noHashQueryStringUtils");
 var initWorker_1 = require("./initWorker");
 var memoryStorageBackend_1 = require("./memoryStorageBackend");
 var initSession_1 = require("./initSession");
 var timer_1 = __importDefault(require("./timer"));
-var isInIframe = function () {
-    try {
-        return window.self !== window.top;
-    }
-    catch (e) {
-        return true;
+var checkSessionIFrame_1 = require("./checkSessionIFrame");
+var route_utils_1 = require("./route-utils");
+var OidcAuthorizationServiceConfiguration = /** @class */ (function (_super) {
+    __extends(OidcAuthorizationServiceConfiguration, _super);
+    function OidcAuthorizationServiceConfiguration(request) {
+        var _this = _super.call(this, request) || this;
+        _this.authorizationEndpoint = request.authorization_endpoint;
+        _this.tokenEndpoint = request.token_endpoint;
+        _this.revocationEndpoint = request.revocation_endpoint;
+        _this.userInfoEndpoint = request.userinfo_endpoint;
+        _this.check_session_iframe = request.check_session_iframe;
+        return _this;
     }
-};
+    return OidcAuthorizationServiceConfiguration;
+}(appauth_1.AuthorizationServiceConfiguration));
+exports.OidcAuthorizationServiceConfiguration = OidcAuthorizationServiceConfiguration;
 var idTokenPayload = function (token) {
     var base64Url = token.split('.')[1];
     var base64 = base64Url.replace(/-/g, '+').replace(/_/g, '/');
@@ -92,7 +115,6 @@ var extractAccessTokenPayload = function (tokens) {
     }
     return null;
 };
-var refresh_token_scope = "offline_access";
 var oidcDatabase = {};
 var oidcFactory = function (configuration, name) {
     if (name === void 0) { name = "default"; }
@@ -103,26 +125,14 @@ var oidcFactory = function (configuration, name) {
     return oidcDatabase[name];
 };
 var loginCallbackWithAutoTokensRenewAsync = function (oidc) { return __awaiter(void 0, void 0, void 0, function () {
-    var response, tokens, _a;
+    var _a, parsedTokens, state, callbackPath;
     return __generator(this, function (_b) {
         switch (_b.label) {
             case 0: return [4 /*yield*/, oidc.loginCallbackAsync()];
             case 1:
-                response = _b.sent();
-                tokens = response.tokens;
-                _a = oidc;
-                return [4 /*yield*/, setTokensAsync(oidc.serviceWorker, tokens)];
-            case 2:
-                _a.tokens = _b.sent();
-                if (!!oidc.serviceWorker) return [3 /*break*/, 4];
-                return [4 /*yield*/, oidc.session.setTokens(oidc.tokens)];
-            case 3:
-                _b.sent();
-                _b.label = 4;
-            case 4:
-                oidc.publishEvent(Oidc.eventNames.token_aquired, oidc.tokens);
-                oidc.timeoutId = autoRenewTokens(oidc, tokens.refreshToken, oidc.tokens.expiresAt);
-                return [2 /*return*/, { state: response.state, callbackPath: response.callbackPath }];
+                _a = _b.sent(), parsedTokens = _a.parsedTokens, state = _a.state, callbackPath = _a.callbackPath;
+                oidc.timeoutId = autoRenewTokens(oidc, parsedTokens.refreshToken, parsedTokens.expiresAt);
+                return [2 /*return*/, { state: state, callbackPath: callbackPath }];
         }
     });
 }); };
@@ -152,9 +162,13 @@ var autoRenewTokens = function (oidc, refreshToken, expiresAt) {
                     _b.label = 4;
                 case 4:
                     if (!oidc.tokens) {
+                        if (oidc.checkSessionIFrame) {
+                            oidc.checkSessionIFrame.stop();
+                            oidc.checkSessionIFrame = null;
+                        }
                         return [2 /*return*/];
                     }
-                    oidc.publishEvent(Oidc.eventNames.token_renewed, oidc.tokens);
+                    oidc.publishEvent(Oidc.eventNames.token_renewed, {});
                     if (oidc.timeoutId) {
                         oidc.timeoutId = autoRenewTokens(oidc, tokens.refreshToken, oidc.tokens.expiresAt);
                     }
@@ -171,10 +185,12 @@ var autoRenewTokens = function (oidc, refreshToken, expiresAt) {
         });
     }); }, 1000);
 };
-var getLoginParams = function (configurationName) {
-    return JSON.parse(sessionStorage["oidc_login.".concat(configurationName)]);
+var getLoginSessionKey = function (configurationName, redirectUri) {
+    return "oidc_login.".concat(configurationName, ":").concat(redirectUri);
+};
+var getLoginParams = function (configurationName, redirectUri) {
+    return JSON.parse(sessionStorage[getLoginSessionKey(configurationName, redirectUri)]);
 };
-exports.getLoginParams = getLoginParams;
 var userInfoAsync = function (oidc) { return __awaiter(void 0, void 0, void 0, function () {
     var accessToken, oidcServerConfiguration, url, fetchUserInfo, userInfo;
     return __generator(this, function (_a) {
@@ -224,7 +240,7 @@ var userInfoAsync = function (oidc) { return __awaiter(void 0, void 0, void 0, f
     });
 }); };
 var setTokensAsync = function (serviceWorker, tokens) { return __awaiter(void 0, void 0, void 0, function () {
-    var accessTokenPayload, expiresAt;
+    var accessTokenPayload, _idTokenPayload, expiresAt;
     return __generator(this, function (_a) {
         switch (_a.label) {
             case 0:
@@ -245,14 +261,16 @@ var setTokensAsync = function (serviceWorker, tokens) { return __awaiter(void 0,
                 accessTokenPayload = extractAccessTokenPayload(tokens);
                 _a.label = 6;
             case 6:
-                expiresAt = tokens.issuedAt + tokens.expiresIn;
-                return [2 /*return*/, __assign(__assign({}, tokens), { idTokenPayload: idTokenPayload(tokens.idToken), accessTokenPayload: accessTokenPayload, expiresAt: expiresAt })];
+                _idTokenPayload = idTokenPayload(tokens.idToken);
+                expiresAt = (_idTokenPayload && _idTokenPayload.exp) ? _idTokenPayload.exp : tokens.issuedAt + tokens.expiresIn;
+                return [2 /*return*/, __assign(__assign({}, tokens), { idTokenPayload: _idTokenPayload, accessTokenPayload: accessTokenPayload, expiresAt: expiresAt })];
         }
     });
 }); };
 var eventNames = {
     service_worker_not_supported_by_browser: "service_worker_not_supported_by_browser",
     token_aquired: "token_aquired",
+    logout_from_another_tab: "logout_from_another_tab",
     token_renewed: "token_renewed",
     token_timer: "token_timer",
     loginAsync_begin: "loginAsync_begin",
@@ -263,8 +281,6 @@ var eventNames = {
     refreshTokensAsync_begin: "refreshTokensAsync_begin",
     refreshTokensAsync_end: "refreshTokensAsync_end",
     refreshTokensAsync_error: "refreshTokensAsync_error",
-    refreshTokensAsync_silent_begin: "refreshTokensAsync_silent_begin",
-    refreshTokensAsync_silent_end: "refreshTokensAsync_silent_end",
     refreshTokensAsync_silent_error: "refreshTokensAsync_silent_error",
     tryKeepExistingSessionAsync_begin: "tryKeepExistingSessionAsync_begin",
     tryKeepExistingSessionAsync_end: "tryKeepExistingSessionAsync_end",
@@ -280,12 +296,61 @@ var eventNames = {
 var getRandomInt = function (max) {
     return Math.floor(Math.random() * max);
 };
+var WELL_KNOWN_PATH = '.well-known';
+var OPENID_CONFIGURATION = 'openid-configuration';
+var oneHourSecond = 60 * 60;
+var fetchFromIssuer = function (openIdIssuerUrl, timeCacheSecond) {
+    if (timeCacheSecond === void 0) { timeCacheSecond = oneHourSecond; }
+    return __awaiter(void 0, void 0, void 0, function () {
+        var fullUrl, localStorageKey, cacheJson, oneHourMinisecond, res, result;
+        return __generator(this, function (_a) {
+            switch (_a.label) {
+                case 0:
+                    fullUrl = "".concat(openIdIssuerUrl, "/").concat(WELL_KNOWN_PATH, "/").concat(OPENID_CONFIGURATION);
+                    localStorageKey = "oidc.server:".concat(openIdIssuerUrl);
+                    cacheJson = window.localStorage.getItem(localStorageKey);
+                    oneHourMinisecond = 1000 * timeCacheSecond;
+                    // @ts-ignore
+                    if (cacheJson && (cacheJson.timestamp + oneHourMinisecond) > Date.now()) {
+                        return [2 /*return*/, new OidcAuthorizationServiceConfiguration(JSON.parse(cacheJson))];
+                    }
+                    return [4 /*yield*/, fetch(fullUrl)];
+                case 1:
+                    res = _a.sent();
+                    if (res.status != 200) {
+                        return [2 /*return*/, null];
+                    }
+                    return [4 /*yield*/, res.json()];
+                case 2:
+                    result = _a.sent();
+                    window.localStorage.setItem(localStorageKey, JSON.stringify({ result: result, timestamp: Date.now() }));
+                    return [2 /*return*/, new OidcAuthorizationServiceConfiguration(result)];
+            }
+        });
+    });
+};
+var buildQueries = function (extras) {
+    var queries = '';
+    if (extras != null) {
+        for (var _i = 0, _a = Object.entries(extras); _i < _a.length; _i++) {
+            var _b = _a[_i], key = _b[0], value = _b[1];
+            if (queries === "") {
+                queries = "?".concat(encodeURIComponent(key), "=").concat(encodeURIComponent(value));
+            }
+            else {
+                queries += "&".concat(encodeURIComponent(key), "=").concat(encodeURIComponent(value));
+            }
+        }
+    }
+    return queries;
+};
 var Oidc = /** @class */ (function () {
     function Oidc(configuration, configurationName) {
         if (configurationName === void 0) { configurationName = "default"; }
-        this.iFrameSession = {};
         this.initAsyncPromise = null;
         this.tryKeepExistingSessionPromise = null;
+        this.loginPromise = null;
+        this.loginCallbackPromise = null;
         this.syncTokensAsyncPromise = null;
         this.loginCallbackWithAutoTokensRenewPromise = null;
         this.configuration = configuration;
@@ -300,6 +365,7 @@ var Oidc = /** @class */ (function () {
         this.loginCallbackWithAutoTokensRenewAsync.bind(this);
         this.initAsync.bind(this);
         this.loginCallbackAsync.bind(this);
+        this._loginCallbackAsync.bind(this);
         this.subscriveEvents.bind(this);
         this.removeEventSubscription.bind(this);
         this.publishEvent.bind(this);
@@ -333,31 +399,67 @@ var Oidc = /** @class */ (function () {
     };
     Oidc.prototype.silentSigninCallbackFromIFrame = function () {
         if (this.configuration.silent_redirect_uri) {
-            window.top.postMessage("".concat(this.configurationName, "_oidc_tokens:").concat(JSON.stringify(this.tokens)), window.location.origin);
+            var queryParams = (0, route_utils_1.getParseQueryStringFromLocation)(window.location.href);
+            window.top.postMessage("".concat(this.configurationName, "_oidc_tokens:").concat(JSON.stringify({ tokens: this.tokens, sessionState: queryParams.session_state })), window.location.origin);
+        }
+    };
+    Oidc.prototype.silentSigninErrorCallbackFromIFrame = function () {
+        if (this.configuration.silent_redirect_uri) {
+            var queryParams = (0, route_utils_1.getParseQueryStringFromLocation)(window.location.href);
+            window.top.postMessage("".concat(this.configurationName, "_oidc_error:").concat(JSON.stringify({ error: queryParams.error })), window.location.origin);
         }
     };
-    Oidc.prototype.silentSigninAsync = function () {
+    Oidc.prototype.silentSigninAsync = function (extras, state, scope) {
+        if (extras === void 0) { extras = null; }
+        if (state === void 0) { state = null; }
+        if (scope === void 0) { scope = null; }
         return __awaiter(this, void 0, void 0, function () {
-            var configuration_1, link, iframe_1, self_1;
-            return __generator(this, function (_a) {
-                switch (_a.label) {
+            var configuration_1, queries, _i, _a, _b, key, value, link, idx, iFrameOrigin_1, iframe_1, self_1;
+            return __generator(this, function (_c) {
+                switch (_c.label) {
                     case 0:
-                        if (!this.configuration.silent_redirect_uri) {
+                        if (!this.configuration.silent_redirect_uri || !this.configuration.silent_signin_uri) {
                             return [2 /*return*/, Promise.resolve(null)];
                         }
-                        _a.label = 1;
+                        _c.label = 1;
                     case 1:
                         if (!document.hidden) return [3 /*break*/, 3];
                         return [4 /*yield*/, (0, initWorker_1.sleepAsync)(1000)];
                     case 2:
-                        _a.sent();
+                        _c.sent();
                         this.publishEvent(eventNames.silentSigninAsync, { message: "wait because document is hidden" });
                         return [3 /*break*/, 1];
                     case 3:
                         try {
                             this.publishEvent(eventNames.silentSigninAsync_begin, {});
                             configuration_1 = this.configuration;
-                            link = configuration_1.silent_redirect_uri;
+                            queries = "";
+                            if (state) {
+                                if (extras == null) {
+                                    extras = {};
+                                }
+                                extras.state = state;
+                            }
+                            if (scope) {
+                                if (extras == null) {
+                                    extras = {};
+                                }
+                                extras.scope = scope;
+                            }
+                            if (extras != null) {
+                                for (_i = 0, _a = Object.entries(extras); _i < _a.length; _i++) {
+                                    _b = _a[_i], key = _b[0], value = _b[1];
+                                    if (queries === "") {
+                                        queries = "?".concat(encodeURIComponent(key), "=").concat(encodeURIComponent(value));
+                                    }
+                                    else {
+                                        queries += "&".concat(encodeURIComponent(key), "=").concat(encodeURIComponent(value));
+                                    }
+                                }
+                            }
+                            link = configuration_1.silent_signin_uri + queries;
+                            idx = link.indexOf("/", link.indexOf("//") + 2);
+                            iFrameOrigin_1 = link.substr(0, idx);
                             iframe_1 = document.createElement('iframe');
                             iframe_1.width = "0px";
                             iframe_1.height = "0px";
@@ -366,21 +468,36 @@ var Oidc = /** @class */ (function () {
                             document.body.appendChild(iframe_1);
                             self_1 = this;
                             return [2 /*return*/, new Promise(function (resolve, reject) {
+                                    var _a;
                                     try {
                                         var isResolved_1 = false;
                                         window.onmessage = function (e) {
-                                            var key = "".concat(self_1.configurationName, "_oidc_tokens:");
-                                            if (e.data && typeof (e.data) === "string" && e.data.startsWith(key)) {
-                                                if (!isResolved_1) {
-                                                    var result = JSON.parse(e.data.replace(key, ''));
-                                                    self_1.publishEvent(eventNames.silentSigninAsync_end, result);
-                                                    iframe_1.remove();
-                                                    isResolved_1 = true;
-                                                    resolve(result);
+                                            if (e.origin === iFrameOrigin_1 &&
+                                                e.source === iframe_1.contentWindow) {
+                                                var key = "".concat(self_1.configurationName, "_oidc_tokens:");
+                                                var key_error = "".concat(self_1.configurationName, "_oidc_error:");
+                                                var data = e.data;
+                                                if (data && typeof (data) === "string") {
+                                                    if (!isResolved_1) {
+                                                        if (data.startsWith(key)) {
+                                                            var result = JSON.parse(e.data.replace(key, ''));
+                                                            self_1.publishEvent(eventNames.silentSigninAsync_end, {});
+                                                            iframe_1.remove();
+                                                            isResolved_1 = true;
+                                                            resolve(result);
+                                                        }
+                                                        else if (data.startsWith(key_error)) {
+                                                            var result = JSON.parse(e.data.replace(key_error, ''));
+                                                            self_1.publishEvent(eventNames.silentSigninAsync_error, result);
+                                                            iframe_1.remove();
+                                                            isResolved_1 = true;
+                                                            reject(result);
+                                                        }
+                                                    }
                                                 }
                                             }
                                         };
-                                        var silentSigninTimeout = configuration_1.silent_signin_timeout ? configuration_1.silent_signin_timeout : 12000;
+                                        var silentSigninTimeout = (_a = configuration_1.silent_signin_timeout) !== null && _a !== void 0 ? _a : 12000;
                                         setTimeout(function () {
                                             if (!isResolved_1) {
                                                 self_1.publishEvent(eventNames.silentSigninAsync_error, "timeout");
@@ -407,27 +524,29 @@ var Oidc = /** @class */ (function () {
         });
     };
     Oidc.prototype.initAsync = function (authority, authorityConfiguration) {
+        var _a;
         return __awaiter(this, void 0, void 0, function () {
-            var _a;
-            return __generator(this, function (_b) {
-                switch (_b.label) {
+            var _b;
+            return __generator(this, function (_c) {
+                switch (_c.label) {
                     case 0:
                         if (authorityConfiguration != null) {
-                            return [2 /*return*/, new appauth_1.AuthorizationServiceConfiguration({
+                            return [2 /*return*/, new OidcAuthorizationServiceConfiguration({
                                     authorization_endpoint: authorityConfiguration.authorization_endpoint,
                                     end_session_endpoint: authorityConfiguration.end_session_endpoint,
                                     revocation_endpoint: authorityConfiguration.revocation_endpoint,
                                     token_endpoint: authorityConfiguration.token_endpoint,
-                                    userinfo_endpoint: authorityConfiguration.userinfo_endpoint
+                                    userinfo_endpoint: authorityConfiguration.userinfo_endpoint,
+                                    check_session_iframe: authorityConfiguration.check_session_iframe,
                                 })];
                         }
                         if (this.initAsyncPromise) {
                             return [2 /*return*/, this.initAsyncPromise];
                         }
-                        _a = this;
-                        return [4 /*yield*/, appauth_1.AuthorizationServiceConfiguration.fetchFromIssuer(authority, new appauth_1.FetchRequestor())];
+                        _b = this;
+                        return [4 /*yield*/, fetchFromIssuer(authority, (_a = this.configuration.authority_time_cache_wellknowurl_in_second) !== null && _a !== void 0 ? _a : 60 * 60)];
                     case 1:
-                        _a.initAsyncPromise = _b.sent();
+                        _b.initAsyncPromise = _c.sent();
                         return [2 /*return*/, this.initAsyncPromise];
                 }
             });
@@ -442,99 +561,113 @@ var Oidc = /** @class */ (function () {
                     return [2 /*return*/, this.tryKeepExistingSessionPromise];
                 }
                 funcAsync = function () { return __awaiter(_this, void 0, void 0, function () {
-                    var serviceWorker, configuration, oidcServerConfiguration, tokens, updatedTokens, _a, session, tokens, updatedTokens, _b, exception_1;
-                    return __generator(this, function (_c) {
-                        switch (_c.label) {
+                    var serviceWorker, configuration, oidcServerConfiguration, tokens, reformattedToken, _a, sessionState, session, tokens, _b, sessionState, exception_1;
+                    var _c;
+                    return __generator(this, function (_d) {
+                        switch (_d.label) {
                             case 0:
                                 if (this.tokens != null) {
                                     return [2 /*return*/, false];
                                 }
                                 this.publishEvent(eventNames.tryKeepExistingSessionAsync_begin, {});
-                                _c.label = 1;
+                                _d.label = 1;
                             case 1:
-                                _c.trys.push([1, 13, , 16]);
+                                _d.trys.push([1, 14, , 17]);
                                 configuration = this.configuration;
                                 return [4 /*yield*/, this.initAsync(configuration.authority, configuration.authority_configuration)];
                             case 2:
-                                oidcServerConfiguration = _c.sent();
+                                oidcServerConfiguration = _d.sent();
                                 return [4 /*yield*/, (0, initWorker_1.initWorkerAsync)(configuration.service_worker_relative_url, this.configurationName)];
                             case 3:
-                                serviceWorker = _c.sent();
-                                if (!serviceWorker) return [3 /*break*/, 8];
+                                serviceWorker = _d.sent();
+                                if (!serviceWorker) return [3 /*break*/, 9];
                                 return [4 /*yield*/, serviceWorker.initAsync(oidcServerConfiguration, "tryKeepExistingSessionAsync")];
                             case 4:
-                                tokens = (_c.sent()).tokens;
-                                if (!tokens) return [3 /*break*/, 7];
+                                tokens = (_d.sent()).tokens;
+                                if (!tokens) return [3 /*break*/, 8];
                                 serviceWorker.startKeepAliveServiceWorker();
-                                return [4 /*yield*/, this.refreshTokensAsync(tokens.refresh_token, true)];
-                            case 5:
-                                updatedTokens = _c.sent();
-                                // @ts-ignore
+                                reformattedToken = {
+                                    accessToken: tokens.access_token,
+                                    refreshToken: tokens.refresh_token,
+                                    expiresIn: tokens.expires_in,
+                                    idToken: tokens.id_token,
+                                    scope: tokens.scope,
+                                    tokenType: tokens.token_type
+                                };
                                 _a = this;
-                                return [4 /*yield*/, setTokensAsync(serviceWorker, updatedTokens)];
-                            case 6:
-                                // @ts-ignore
-                                _a.tokens = _c.sent();
+                                return [4 /*yield*/, setTokensAsync(serviceWorker, reformattedToken)];
+                            case 5:
+                                _a.tokens = _d.sent();
                                 this.serviceWorker = serviceWorker;
                                 // @ts-ignore
-                                this.timeoutId = autoRenewTokens(this, updatedTokens.refreshToken, this.tokens.expiresAt);
+                                this.timeoutId = autoRenewTokens(this, this.tokens.refreshToken, this.tokens.expiresAt);
+                                return [4 /*yield*/, serviceWorker.getSessionStateAsync()];
+                            case 6:
+                                sessionState = _d.sent();
+                                return [4 /*yield*/, this.startCheckSessionAsync(oidcServerConfiguration.check_session_iframe, configuration.client_id, sessionState)];
+                            case 7:
+                                _d.sent();
                                 this.publishEvent(eventNames.tryKeepExistingSessionAsync_end, {
                                     success: true,
                                     message: "tokens inside ServiceWorker are valid"
                                 });
                                 return [2 /*return*/, true];
-                            case 7:
+                            case 8:
                                 this.publishEvent(eventNames.tryKeepExistingSessionAsync_end, {
                                     success: false,
                                     message: "no exiting session found"
                                 });
-                                return [3 /*break*/, 12];
-                            case 8:
+                                return [3 /*break*/, 13];
+                            case 9:
                                 if (configuration.service_worker_relative_url) {
                                     this.publishEvent(eventNames.service_worker_not_supported_by_browser, {
                                         message: "service worker is not supported by this browser"
                                     });
                                 }
-                                session = (0, initSession_1.initSession)(this.configurationName);
+                                session = (0, initSession_1.initSession)(this.configurationName, configuration.redirect_uri, (_c = configuration.storage) !== null && _c !== void 0 ? _c : sessionStorage);
                                 return [4 /*yield*/, session.initAsync()];
-                            case 9:
-                                tokens = (_c.sent()).tokens;
-                                if (!tokens) return [3 /*break*/, 12];
-                                return [4 /*yield*/, this.refreshTokensAsync(tokens.refreshToken, true)];
                             case 10:
-                                updatedTokens = _c.sent();
+                                tokens = (_d.sent()).tokens;
+                                console.log("const {tokens} = await session.initAsync();");
+                                console.log(tokens);
+                                if (!tokens) return [3 /*break*/, 13];
                                 // @ts-ignore
                                 _b = this;
-                                return [4 /*yield*/, setTokensAsync(serviceWorker, updatedTokens)];
+                                return [4 /*yield*/, setTokensAsync(serviceWorker, tokens)];
                             case 11:
                                 // @ts-ignore
-                                _b.tokens = _c.sent();
-                                session.setTokens(this.tokens);
+                                _b.tokens = _d.sent();
+                                //session.setTokens(this.tokens);
                                 this.session = session;
                                 // @ts-ignore
-                                this.timeoutId = autoRenewTokens(this, updatedTokens.refreshToken, this.tokens.expiresAt);
+                                this.timeoutId = autoRenewTokens(this, tokens.refreshToken, this.tokens.expiresAt);
+                                sessionState = session.getSessionState();
+                                return [4 /*yield*/, this.startCheckSessionAsync(oidcServerConfiguration.check_session_iframe, configuration.client_id, sessionState)];
+                            case 12:
+                                _d.sent();
                                 this.publishEvent(eventNames.tryKeepExistingSessionAsync_end, {
                                     success: true,
-                                    message: "tokens inside ServiceWorker are valid"
+                                    message: "tokens inside storage are valid"
                                 });
                                 return [2 /*return*/, true];
-                            case 12:
+                            case 13:
                                 this.publishEvent(eventNames.tryKeepExistingSessionAsync_end, {
                                     success: false,
                                     message: serviceWorker ? "service worker sessions not retrieved" : "session storage sessions not retrieved"
                                 });
                                 return [2 /*return*/, false];
-                            case 13:
-                                exception_1 = _c.sent();
-                                if (!serviceWorker) return [3 /*break*/, 15];
-                                return [4 /*yield*/, serviceWorker.clearAsync()];
                             case 14:
-                                _c.sent();
-                                _c.label = 15;
+                                exception_1 = _d.sent();
+                                console.error(exception_1);
+                                if (!serviceWorker) return [3 /*break*/, 16];
+                                return [4 /*yield*/, serviceWorker.clearAsync()];
                             case 15:
+                                _d.sent();
+                                _d.label = 16;
+                            case 16:
                                 this.publishEvent(eventNames.tryKeepExistingSessionAsync_error, "tokens inside ServiceWorker are invalid");
                                 return [2 /*return*/, false];
-                            case 16: return [2 /*return*/];
+                            case 17: return [2 /*return*/];
                         }
                     });
                 }); };
@@ -546,195 +679,260 @@ var Oidc = /** @class */ (function () {
             });
         });
     };
-    Oidc.prototype.loginAsync = function (callbackPath, extras, installServiceWorker, state) {
+    Oidc.prototype.loginAsync = function (callbackPath, extras, installServiceWorker, state, isSilentSignin, scope) {
         if (callbackPath === void 0) { callbackPath = undefined; }
         if (extras === void 0) { extras = null; }
         if (installServiceWorker === void 0) { installServiceWorker = true; }
         if (state === void 0) { state = undefined; }
+        if (isSilentSignin === void 0) { isSilentSignin = false; }
+        if (scope === void 0) { scope = undefined; }
         return __awaiter(this, void 0, void 0, function () {
-            var location_1, url, configuration, serviceWorker, oidcServerConfiguration, isServiceWorkerProxyActive, storage, session, queryStringUtil, authorizationHandler, authRequest, exception_2;
+            var loginLocalAsync;
+            var _this = this;
             return __generator(this, function (_a) {
-                switch (_a.label) {
-                    case 0:
-                        _a.trys.push([0, 9, , 10]);
-                        location_1 = window.location;
-                        url = callbackPath || location_1.pathname + (location_1.search || '') + (location_1.hash || '');
-                        this.publishEvent(eventNames.loginAsync_begin, {});
-                        configuration = this.configuration;
-                        // Security we cannot loggin from Iframe
-                        if (!configuration.silent_redirect_uri && isInIframe()) {
-                            throw new Error("Login from iframe is forbidden");
-                        }
-                        sessionStorage["oidc_login.".concat(this.configurationName)] = JSON.stringify({ callbackPath: url, extras: extras, state: state });
-                        return [4 /*yield*/, (0, initWorker_1.initWorkerAsync)(configuration.service_worker_relative_url, this.configurationName)];
-                    case 1:
-                        serviceWorker = _a.sent();
-                        return [4 /*yield*/, this.initAsync(configuration.authority, configuration.authority_configuration)];
-                    case 2:
-                        oidcServerConfiguration = _a.sent();
-                        if (!(serviceWorker && installServiceWorker)) return [3 /*break*/, 4];
-                        return [4 /*yield*/, serviceWorker.isServiceWorkerProxyActiveAsync()];
-                    case 3:
-                        isServiceWorkerProxyActive = _a.sent();
-                        if (!isServiceWorkerProxyActive) {
-                            window.location.href = "".concat(configuration.redirect_uri, "/service-worker-install");
-                            return [2 /*return*/];
-                        }
-                        _a.label = 4;
-                    case 4:
-                        storage = void 0;
-                        if (!serviceWorker) return [3 /*break*/, 7];
-                        serviceWorker.startKeepAliveServiceWorker();
-                        return [4 /*yield*/, serviceWorker.initAsync(oidcServerConfiguration, "loginAsync")];
-                    case 5:
-                        _a.sent();
-                        storage = new memoryStorageBackend_1.MemoryStorageBackend(serviceWorker.saveItemsAsync, {});
-                        return [4 /*yield*/, storage.setItem("dummy", {})];
-                    case 6:
-                        _a.sent();
-                        return [3 /*break*/, 8];
-                    case 7:
-                        session = (0, initSession_1.initSession)(this.configurationName);
-                        storage = new memoryStorageBackend_1.MemoryStorageBackend(session.saveItemsAsync, {});
-                        _a.label = 8;
-                    case 8:
-                        queryStringUtil = configuration.redirect_uri.includes("#") ? new noHashQueryStringUtils_1.HashQueryStringUtils() : new noHashQueryStringUtils_1.NoHashQueryStringUtils();
-                        authorizationHandler = new appauth_1.RedirectRequestHandler(storage, queryStringUtil, window.location, new appauth_1.DefaultCrypto());
-                        authRequest = new appauth_1.AuthorizationRequest({
-                            client_id: configuration.client_id,
-                            redirect_uri: configuration.redirect_uri,
-                            scope: configuration.scope,
-                            response_type: appauth_1.AuthorizationRequest.RESPONSE_TYPE_CODE,
-                            state: state,
-                            extras: extras !== null && extras !== void 0 ? extras : configuration.extras
-                        });
-                        authorizationHandler.performAuthorizationRequest(oidcServerConfiguration, authRequest);
-                        return [3 /*break*/, 10];
-                    case 9:
-                        exception_2 = _a.sent();
-                        this.publishEvent(eventNames.loginAsync_error, exception_2);
-                        throw exception_2;
-                    case 10: return [2 /*return*/];
+                if (this.loginPromise !== null) {
+                    return [2 /*return*/, this.loginPromise];
                 }
+                loginLocalAsync = function () { return __awaiter(_this, void 0, void 0, function () {
+                    var location_1, url, configuration, redirectUri, sessionKey, serviceWorker, oidcServerConfiguration, isServiceWorkerProxyActive, isUnregistered, extrasQueries, queryString, storage, session, extraFinal, queryStringUtil, authorizationHandler, authRequest, exception_2;
+                    var _a;
+                    return __generator(this, function (_b) {
+                        switch (_b.label) {
+                            case 0:
+                                _b.trys.push([0, 10, , 11]);
+                                location_1 = window.location;
+                                url = callbackPath || location_1.pathname + (location_1.search || '') + (location_1.hash || '');
+                                this.publishEvent(eventNames.loginAsync_begin, {});
+                                configuration = this.configuration;
+                                redirectUri = isSilentSignin ? configuration.silent_redirect_uri : configuration.redirect_uri;
+                                if (!scope) {
+                                    scope = configuration.scope;
+                                }
+                                sessionKey = getLoginSessionKey(this.configurationName, redirectUri);
+                                sessionStorage[sessionKey] = JSON.stringify({ callbackPath: url, extras: extras, state: state });
+                                return [4 /*yield*/, (0, initWorker_1.initWorkerAsync)(configuration.service_worker_relative_url, this.configurationName)];
+                            case 1:
+                                serviceWorker = _b.sent();
+                                return [4 /*yield*/, this.initAsync(configuration.authority, configuration.authority_configuration)];
+                            case 2:
+                                oidcServerConfiguration = _b.sent();
+                                if (!(serviceWorker && installServiceWorker)) return [3 /*break*/, 5];
+                                return [4 /*yield*/, serviceWorker.isServiceWorkerProxyActiveAsync()];
+                            case 3:
+                                isServiceWorkerProxyActive = _b.sent();
+                                if (!!isServiceWorkerProxyActive) return [3 /*break*/, 5];
+                                return [4 /*yield*/, serviceWorker.unregisterAsync()];
+                            case 4:
+                                isUnregistered = _b.sent();
+                                extrasQueries = extras != null ? __assign({}, extras) : {};
+                                extrasQueries.callbackPath = url;
+                                extrasQueries.state = state;
+                                queryString = buildQueries(extrasQueries);
+                                window.location.href = "".concat(redirectUri, "/service-worker-install").concat(queryString);
+                                return [2 /*return*/];
+                            case 5:
+                                storage = void 0;
+                                if (!serviceWorker) return [3 /*break*/, 8];
+                                serviceWorker.startKeepAliveServiceWorker();
+                                return [4 /*yield*/, serviceWorker.initAsync(oidcServerConfiguration, "loginAsync")];
+                            case 6:
+                                _b.sent();
+                                storage = new memoryStorageBackend_1.MemoryStorageBackend(serviceWorker.saveItemsAsync, {});
+                                return [4 /*yield*/, storage.setItem("dummy", {})];
+                            case 7:
+                                _b.sent();
+                                return [3 /*break*/, 9];
+                            case 8:
+                                session = (0, initSession_1.initSession)(this.configurationName, redirectUri);
+                                storage = new memoryStorageBackend_1.MemoryStorageBackend(session.saveItemsAsync, {});
+                                _b.label = 9;
+                            case 9:
+                                extraFinal = (_a = extras !== null && extras !== void 0 ? extras : configuration.extras) !== null && _a !== void 0 ? _a : {};
+                                queryStringUtil = redirectUri.includes("#") ? new noHashQueryStringUtils_1.HashQueryStringUtils() : new noHashQueryStringUtils_1.NoHashQueryStringUtils();
+                                authorizationHandler = new appauth_1.RedirectRequestHandler(storage, queryStringUtil, window.location, new appauth_1.DefaultCrypto());
+                                authRequest = new appauth_1.AuthorizationRequest({
+                                    client_id: configuration.client_id,
+                                    redirect_uri: redirectUri,
+                                    scope: scope,
+                                    response_type: appauth_1.AuthorizationRequest.RESPONSE_TYPE_CODE,
+                                    state: state,
+                                    extras: extraFinal
+                                });
+                                authorizationHandler.performAuthorizationRequest(oidcServerConfiguration, authRequest);
+                                return [3 /*break*/, 11];
+                            case 10:
+                                exception_2 = _b.sent();
+                                this.publishEvent(eventNames.loginAsync_error, exception_2);
+                                throw exception_2;
+                            case 11: return [2 /*return*/];
+                        }
+                    });
+                }); };
+                this.loginPromise = loginLocalAsync();
+                return [2 /*return*/, this.loginPromise.then(function (result) {
+                        _this.loginPromise = null;
+                        return result;
+                    })];
             });
         });
     };
-    Oidc.prototype.syncTokensAsync = function () {
+    Oidc.prototype.startCheckSessionAsync = function (checkSessionIFrameUri, clientId, sessionState, isSilentSignin) {
+        if (isSilentSignin === void 0) { isSilentSignin = false; }
         return __awaiter(this, void 0, void 0, function () {
-            var configuration, oidcServerConfiguration, serviceWorker, tokens, silent_token_response, _a, exceptionSilent_1;
-            return __generator(this, function (_b) {
-                switch (_b.label) {
-                    case 0:
-                        configuration = this.configuration;
-                        if (!this.tokens) {
-                            return [2 /*return*/];
-                        }
-                        return [4 /*yield*/, this.initAsync(configuration.authority, configuration.authority_configuration)];
-                    case 1:
-                        oidcServerConfiguration = _b.sent();
-                        return [4 /*yield*/, (0, initWorker_1.initWorkerAsync)(configuration.service_worker_relative_url, this.configurationName)];
-                    case 2:
-                        serviceWorker = _b.sent();
-                        if (!serviceWorker) return [3 /*break*/, 11];
-                        return [4 /*yield*/, serviceWorker.initAsync(oidcServerConfiguration, "syncTokensAsync")];
-                    case 3:
-                        tokens = (_b.sent()).tokens;
-                        if (!!tokens) return [3 /*break*/, 11];
-                        _b.label = 4;
-                    case 4:
-                        _b.trys.push([4, 9, , 10]);
-                        this.publishEvent(eventNames.syncTokensAsync_begin, {});
-                        this.syncTokensAsyncPromise = this.silentSigninAsync();
-                        return [4 /*yield*/, this.syncTokensAsyncPromise];
-                    case 5:
-                        silent_token_response = _b.sent();
-                        console.log("silent_token_response");
-                        console.log(silent_token_response);
-                        if (!silent_token_response) return [3 /*break*/, 7];
-                        _a = this;
-                        return [4 /*yield*/, setTokensAsync(serviceWorker, silent_token_response)];
-                    case 6:
-                        _a.tokens = _b.sent();
-                        return [3 /*break*/, 8];
-                    case 7:
-                        this.publishEvent(eventNames.syncTokensAsync_error, null);
-                        if (this.timeoutId) {
-                            timer_1.default.clearTimeout(this.timeoutId);
-                            this.timeoutId = null;
+            var _this = this;
+            return __generator(this, function (_a) {
+                return [2 /*return*/, new Promise(function (resolve, reject) {
+                        if (_this.configuration.silent_signin_uri && _this.configuration.silent_redirect_uri && _this.configuration.monitor_session && checkSessionIFrameUri && sessionState && !isSilentSignin) {
+                            var checkSessionCallback = function () {
+                                _this.checkSessionIFrame.stop();
+                                if (_this.tokens === null) {
+                                    return;
+                                }
+                                // @ts-ignore
+                                var idToken = _this.tokens.idToken;
+                                // @ts-ignore
+                                var idTokenPayload = _this.tokens.idTokenPayload;
+                                _this.silentSigninAsync({
+                                    prompt: "none",
+                                    id_token_hint: idToken,
+                                    scope: "openid"
+                                }).then(function (silentSigninResponse) {
+                                    var iFrameIdTokenPayload = silentSigninResponse.tokens.idTokenPayload;
+                                    if (idTokenPayload.sub === iFrameIdTokenPayload.sub) {
+                                        var sessionState_1 = silentSigninResponse.sessionState;
+                                        _this.checkSessionIFrame.start(silentSigninResponse.sessionState);
+                                        if (idTokenPayload.sid === iFrameIdTokenPayload.sid) {
+                                            console.debug("SessionMonitor._callback: Same sub still logged in at OP, restarting check session iframe; session_state:", sessionState_1);
+                                        }
+                                        else {
+                                            console.debug("SessionMonitor._callback: Same sub still logged in at OP, session state has changed, restarting check session iframe; session_state:", sessionState_1);
+                                        }
+                                    }
+                                    else {
+                                        console.debug("SessionMonitor._callback: Different subject signed into OP:", iFrameIdTokenPayload.sub);
+                                    }
+                                }).catch(function (e) {
+                                    _this.publishEvent(eventNames.logout_from_another_tab, {});
+                                    _this.destroyAsync();
+                                });
+                            };
+                            _this.checkSessionIFrame = new checkSessionIFrame_1.CheckSessionIFrame(checkSessionCallback, clientId, checkSessionIFrameUri);
+                            _this.checkSessionIFrame.load().then(function () {
+                                _this.checkSessionIFrame.start(sessionState);
+                                resolve();
+                            }).catch(function (e) {
+                                reject(e);
+                            });
                         }
-                        return [2 /*return*/];
-                    case 8: return [3 /*break*/, 10];
-                    case 9:
-                        exceptionSilent_1 = _b.sent();
-                        console.error(exceptionSilent_1);
-                        this.publishEvent(eventNames.syncTokensAsync_error, exceptionSilent_1);
-                        if (this.timeoutId) {
-                            timer_1.default.clearTimeout(this.timeoutId);
-                            this.timeoutId = null;
+                        else {
+                            resolve();
                         }
-                        return [2 /*return*/];
-                    case 10:
-                        this.syncTokensAsyncPromise = null;
-                        this.publishEvent(eventNames.syncTokensAsync_end, {});
-                        _b.label = 11;
-                    case 11: return [2 /*return*/];
-                }
+                    })];
             });
         });
     };
-    Oidc.prototype.loginCallbackAsync = function () {
+    Oidc.prototype.loginCallbackAsync = function (isSilenSignin) {
+        if (isSilenSignin === void 0) { isSilenSignin = false; }
         return __awaiter(this, void 0, void 0, function () {
-            var configuration_2, clientId_1, redirectURL_1, authority, tokenRequestTimeout_1, oidcServerConfiguration_1, serviceWorker, storage_1, items, dummy, session, items, exception_3;
+            var loginCallbackLocalAsync;
             var _this = this;
             return __generator(this, function (_a) {
-                switch (_a.label) {
+                if (this.loginCallbackPromise !== null) {
+                    return [2 /*return*/, this.loginCallbackPromise];
+                }
+                loginCallbackLocalAsync = function () { return __awaiter(_this, void 0, void 0, function () {
+                    var response, tokens, parsedTokens;
+                    return __generator(this, function (_a) {
+                        switch (_a.label) {
+                            case 0: return [4 /*yield*/, this._loginCallbackAsync(isSilenSignin)];
+                            case 1:
+                                response = _a.sent();
+                                tokens = response.tokens;
+                                return [4 /*yield*/, setTokensAsync(this.serviceWorker, tokens)];
+                            case 2:
+                                parsedTokens = _a.sent();
+                                this.tokens = parsedTokens;
+                                if (!!this.serviceWorker) return [3 /*break*/, 4];
+                                return [4 /*yield*/, this.session.setTokens(parsedTokens)];
+                            case 3:
+                                _a.sent();
+                                _a.label = 4;
+                            case 4:
+                                this.publishEvent(Oidc.eventNames.token_aquired, parsedTokens);
+                                // @ts-ignore
+                                return [2 /*return*/, { parsedTokens: parsedTokens, state: response.state, callbackPath: response.callbackPath }];
+                        }
+                    });
+                }); };
+                this.loginCallbackPromise = loginCallbackLocalAsync();
+                return [2 /*return*/, this.loginCallbackPromise.then(function (result) {
+                        _this.loginCallbackPromise = null;
+                        return result;
+                    })];
+            });
+        });
+    };
+    Oidc.prototype._loginCallbackAsync = function (isSilentSignin) {
+        var _a;
+        if (isSilentSignin === void 0) { isSilentSignin = false; }
+        return __awaiter(this, void 0, void 0, function () {
+            var configuration_2, clientId_1, redirectUri_1, authority, tokenRequestTimeout_1, oidcServerConfiguration_1, queryParams, sessionState_2, serviceWorker, storage_1, items, dummy, session, items, exception_3;
+            var _this = this;
+            return __generator(this, function (_b) {
+                switch (_b.label) {
                     case 0:
-                        _a.trys.push([0, 10, , 11]);
+                        _b.trys.push([0, 11, , 12]);
                         this.publishEvent(eventNames.loginCallbackAsync_begin, {});
                         configuration_2 = this.configuration;
                         clientId_1 = configuration_2.client_id;
-                        redirectURL_1 = configuration_2.redirect_uri;
+                        redirectUri_1 = isSilentSignin ? configuration_2.silent_redirect_uri : configuration_2.redirect_uri;
                         authority = configuration_2.authority;
                         tokenRequestTimeout_1 = configuration_2.token_request_timeout;
                         return [4 /*yield*/, this.initAsync(authority, configuration_2.authority_configuration)];
                     case 1:
-                        oidcServerConfiguration_1 = _a.sent();
+                        oidcServerConfiguration_1 = _b.sent();
+                        queryParams = (0, route_utils_1.getParseQueryStringFromLocation)(window.location.href);
+                        sessionState_2 = queryParams.session_state;
                         return [4 /*yield*/, (0, initWorker_1.initWorkerAsync)(configuration_2.service_worker_relative_url, this.configurationName)];
                     case 2:
-                        serviceWorker = _a.sent();
+                        serviceWorker = _b.sent();
                         storage_1 = null;
-                        if (!serviceWorker) return [3 /*break*/, 7];
+                        if (!serviceWorker) return [3 /*break*/, 8];
                         serviceWorker.startKeepAliveServiceWorker();
                         this.serviceWorker = serviceWorker;
                         return [4 /*yield*/, serviceWorker.initAsync(oidcServerConfiguration_1, "loginCallbackAsync")];
                     case 3:
-                        _a.sent();
+                        _b.sent();
                         return [4 /*yield*/, serviceWorker.loadItemsAsync()];
                     case 4:
-                        items = _a.sent();
+                        items = _b.sent();
                         storage_1 = new memoryStorageBackend_1.MemoryStorageBackend(serviceWorker.saveItemsAsync, items);
                         return [4 /*yield*/, storage_1.getItem("dummy")];
                     case 5:
-                        dummy = _a.sent();
+                        dummy = _b.sent();
                         if (!dummy) {
                             throw new Error("Service Worker storage disapear");
                         }
                         return [4 /*yield*/, storage_1.removeItem("dummy")];
                     case 6:
-                        _a.sent();
-                        return [3 /*break*/, 9];
+                        _b.sent();
+                        return [4 /*yield*/, serviceWorker.setSessionStateAsync(sessionState_2)];
                     case 7:
-                        session = (0, initSession_1.initSession)(this.configurationName);
-                        this.session = session;
-                        return [4 /*yield*/, session.loadItemsAsync()];
+                        _b.sent();
+                        return [3 /*break*/, 10];
                     case 8:
-                        items = _a.sent();
+                        this.session = (0, initSession_1.initSession)(this.configurationName, redirectUri_1, (_a = configuration_2.storage) !== null && _a !== void 0 ? _a : sessionStorage);
+                        session = (0, initSession_1.initSession)(this.configurationName, redirectUri_1);
+                        session.setSessionState(sessionState_2);
+                        return [4 /*yield*/, session.loadItemsAsync()];
+                    case 9:
+                        items = _b.sent();
                         storage_1 = new memoryStorageBackend_1.MemoryStorageBackend(session.saveItemsAsync, items);
-                        _a.label = 9;
-                    case 9: return [2 /*return*/, new Promise(function (resolve, reject) {
+                        _b.label = 10;
+                    case 10: return [2 /*return*/, new Promise(function (resolve, reject) {
                             // @ts-ignore
                             var queryStringUtil = new noHashQueryStringUtils_1.NoHashQueryStringUtils();
-                            if (configuration_2.redirect_uri.includes("#")) {
+                            if (redirectUri_1.includes("#")) {
                                 var splithash = window.location.href.split("#");
                                 if (splithash.length === 2 && splithash[1].includes("?")) {
                                     queryStringUtil = new noHashQueryStringUtils_1.HashQueryStringUtils();
@@ -766,7 +964,7 @@ var Oidc = /** @class */ (function () {
                                 }
                                 var tokenRequest = new appauth_1.TokenRequest({
                                     client_id: clientId_1,
-                                    redirect_uri: redirectURL_1,
+                                    redirect_uri: redirectUri_1,
                                     grant_type: appauth_1.GRANT_TYPE_AUTHORIZATION_CODE,
                                     code: response.code,
                                     refresh_token: undefined,
@@ -780,14 +978,16 @@ var Oidc = /** @class */ (function () {
                                     var tokenHandler = new appauth_1.BaseTokenRequestHandler(new appauth_1.FetchRequestor());
                                     tokenHandler.performTokenRequest(oidcServerConfiguration_1, tokenRequest).then(function (tokenResponse) {
                                         if (timeoutId) {
-                                            var loginParams = (0, exports.getLoginParams)(_this.configurationName);
                                             clearTimeout(timeoutId);
                                             _this.timeoutId = null;
-                                            _this.publishEvent(eventNames.loginCallbackAsync_end, {});
-                                            resolve({
-                                                tokens: tokenResponse,
-                                                state: request.state,
-                                                callbackPath: loginParams.callbackPath,
+                                            var loginParams_1 = getLoginParams(_this.configurationName, redirectUri_1);
+                                            _this.startCheckSessionAsync(oidcServerConfiguration_1.check_session_iframe, clientId_1, sessionState_2, isSilentSignin).then(function () {
+                                                _this.publishEvent(eventNames.loginCallbackAsync_end, {});
+                                                resolve({
+                                                    tokens: tokenResponse,
+                                                    state: request.state,
+                                                    callbackPath: loginParams_1.callbackPath,
+                                                });
                                             });
                                         }
                                     });
@@ -804,18 +1004,17 @@ var Oidc = /** @class */ (function () {
                             });
                             authorizationHandler.completeAuthorizationRequestIfPossible();
                         })];
-                    case 10:
-                        exception_3 = _a.sent();
+                    case 11:
+                        exception_3 = _b.sent();
                         console.error(exception_3);
                         this.publishEvent(eventNames.loginCallbackAsync_error, exception_3);
                         throw exception_3;
-                    case 11: return [2 /*return*/];
+                    case 12: return [2 /*return*/];
                 }
             });
         });
     };
-    Oidc.prototype.refreshTokensAsync = function (refreshToken, silentEvent) {
-        if (silentEvent === void 0) { silentEvent = false; }
+    Oidc.prototype.refreshTokensAsync = function (refreshToken) {
         return __awaiter(this, void 0, void 0, function () {
             var localSilentSigninAsync, configuration, clientId, redirectUri, authority, tokenHandler, extras, _i, _a, _b, key, value, request, oidcServerConfiguration, token_response, exception_4;
             var _this = this;
@@ -825,7 +1024,7 @@ var Oidc = /** @class */ (function () {
                         localSilentSigninAsync = function (exception) {
                             if (exception === void 0) { exception = null; }
                             return __awaiter(_this, void 0, void 0, function () {
-                                var silent_token_response, exceptionSilent_2;
+                                var silent_token_response, exceptionSilent_1;
                                 return __generator(this, function (_a) {
                                     switch (_a.label) {
                                         case 0:
@@ -834,19 +1033,19 @@ var Oidc = /** @class */ (function () {
                                         case 1:
                                             silent_token_response = _a.sent();
                                             if (silent_token_response) {
-                                                return [2 /*return*/, silent_token_response];
+                                                return [2 /*return*/, silent_token_response.tokens];
                                             }
                                             return [3 /*break*/, 3];
                                         case 2:
-                                            exceptionSilent_2 = _a.sent();
-                                            console.error(exceptionSilent_2);
+                                            exceptionSilent_1 = _a.sent();
+                                            console.error(exceptionSilent_1);
                                             return [3 /*break*/, 3];
                                         case 3:
                                             if (this.timeoutId) {
                                                 timer_1.default.clearTimeout(this.timeoutId);
                                                 this.timeoutId = null;
                                             }
-                                            this.publishEvent(silentEvent ? eventNames.refreshTokensAsync_silent_error : eventNames.refreshTokensAsync_error, exception);
+                                            this.publishEvent(eventNames.refreshTokensAsync_error, exception);
                                             return [2 /*return*/, null];
                                     }
                                 });
@@ -855,7 +1054,7 @@ var Oidc = /** @class */ (function () {
                         _c.label = 1;
                     case 1:
                         _c.trys.push([1, 6, , 8]);
-                        this.publishEvent(silentEvent ? eventNames.refreshTokensAsync_silent_begin : eventNames.refreshTokensAsync_begin, {});
+                        this.publishEvent(eventNames.refreshTokensAsync_begin, { refreshToken: refreshToken });
                         configuration = this.configuration;
                         clientId = configuration.client_id;
                         redirectUri = configuration.redirect_uri;
@@ -887,11 +1086,12 @@ var Oidc = /** @class */ (function () {
                         return [4 /*yield*/, tokenHandler.performTokenRequest(oidcServerConfiguration, request)];
                     case 5:
                         token_response = _c.sent();
-                        this.publishEvent(silentEvent ? eventNames.refreshTokensAsync_silent_end : eventNames.refreshTokensAsync_end, { message: "success" });
+                        this.publishEvent(eventNames.refreshTokensAsync_end, { message: "success" });
                         return [2 /*return*/, token_response];
                     case 6:
                         exception_4 = _c.sent();
                         console.error(exception_4);
+                        this.publishEvent(eventNames.refreshTokensAsync_silent_error, exception_4);
                         return [4 /*yield*/, localSilentSigninAsync(exception_4)];
                     case 7: return [2 /*return*/, _c.sent()];
                     case 8: return [2 /*return*/];
@@ -899,6 +1099,87 @@ var Oidc = /** @class */ (function () {
             });
         });
     };
+    Oidc.prototype.syncTokensAsync = function () {
+        var _a;
+        return __awaiter(this, void 0, void 0, function () {
+            var configuration, oidcServerConfiguration, serviceWorker, isLogin, silent_token_response, _b, exceptionSilent_2, session, tokens;
+            return __generator(this, function (_c) {
+                switch (_c.label) {
+                    case 0:
+                        configuration = this.configuration;
+                        if (!this.tokens) {
+                            return [2 /*return*/];
+                        }
+                        return [4 /*yield*/, this.initAsync(configuration.authority, configuration.authority_configuration)];
+                    case 1:
+                        oidcServerConfiguration = _c.sent();
+                        return [4 /*yield*/, (0, initWorker_1.initWorkerAsync)(configuration.service_worker_relative_url, this.configurationName)];
+                    case 2:
+                        serviceWorker = _c.sent();
+                        if (!serviceWorker) return [3 /*break*/, 14];
+                        return [4 /*yield*/, serviceWorker.initAsync(oidcServerConfiguration, "syncTokensAsync")];
+                    case 3:
+                        isLogin = (_c.sent()).isLogin;
+                        if (!(isLogin == false)) return [3 /*break*/, 5];
+                        this.publishEvent(eventNames.logout_from_another_tab, {});
+                        return [4 /*yield*/, this.destroyAsync()];
+                    case 4:
+                        _c.sent();
+                        return [3 /*break*/, 13];
+                    case 5:
+                        if (!(isLogin == null)) return [3 /*break*/, 13];
+                        _c.label = 6;
+                    case 6:
+                        _c.trys.push([6, 11, , 12]);
+                        this.publishEvent(eventNames.syncTokensAsync_begin, {});
+                        this.syncTokensAsyncPromise = this.silentSigninAsync({ prompt: "none" });
+                        return [4 /*yield*/, this.syncTokensAsyncPromise];
+                    case 7:
+                        silent_token_response = _c.sent();
+                        if (!(silent_token_response && silent_token_response.tokens)) return [3 /*break*/, 9];
+                        _b = this;
+                        return [4 /*yield*/, setTokensAsync(serviceWorker, silent_token_response.tokens)];
+                    case 8:
+                        _b.tokens = _c.sent();
+                        return [3 /*break*/, 10];
+                    case 9:
+                        this.publishEvent(eventNames.syncTokensAsync_error, null);
+                        if (this.timeoutId) {
+                            timer_1.default.clearTimeout(this.timeoutId);
+                            this.timeoutId = null;
+                        }
+                        return [2 /*return*/];
+                    case 10: return [3 /*break*/, 12];
+                    case 11:
+                        exceptionSilent_2 = _c.sent();
+                        console.error(exceptionSilent_2);
+                        this.publishEvent(eventNames.syncTokensAsync_error, exceptionSilent_2);
+                        if (this.timeoutId) {
+                            timer_1.default.clearTimeout(this.timeoutId);
+                            this.timeoutId = null;
+                        }
+                        return [2 /*return*/];
+                    case 12:
+                        this.syncTokensAsyncPromise = null;
+                        this.publishEvent(eventNames.syncTokensAsync_end, {});
+                        _c.label = 13;
+                    case 13: return [3 /*break*/, 17];
+                    case 14:
+                        session = (0, initSession_1.initSession)(this.configurationName, configuration.redirect_uri, (_a = configuration.storage) !== null && _a !== void 0 ? _a : sessionStorage);
+                        return [4 /*yield*/, session.initAsync()];
+                    case 15:
+                        tokens = (_c.sent()).tokens;
+                        if (!!tokens) return [3 /*break*/, 17];
+                        this.publishEvent(eventNames.logout_from_another_tab, {});
+                        return [4 /*yield*/, this.destroyAsync()];
+                    case 16:
+                        _c.sent();
+                        _c.label = 17;
+                    case 17: return [2 /*return*/];
+                }
+            });
+        });
+    };
     Oidc.prototype.loginCallbackWithAutoTokensRenewAsync = function () {
         var _this = this;
         if (this.loginCallbackWithAutoTokensRenewPromise !== null) {
@@ -918,6 +1199,11 @@ var Oidc = /** @class */ (function () {
             return __generator(this, function (_a) {
                 switch (_a.label) {
                     case 0:
+                        timer_1.default.clearTimeout(this.timeoutId);
+                        this.timeoutId = null;
+                        if (this.checkSessionIFrame) {
+                            this.checkSessionIFrame.stop();
+                        }
                         if (!this.serviceWorker) return [3 /*break*/, 2];
                         return [4 /*yield*/, this.serviceWorker.clearAsync()];
                     case 1:
@@ -933,8 +1219,6 @@ var Oidc = /** @class */ (function () {
                         this.tokens = null;
                         this.userInfo = null;
                         this.events = [];
-                        timer_1.default.clearTimeout(this.timeoutId);
-                        this.timeoutId = null;
                         return [2 /*return*/];
                 }
             });