@axa-fr/react-oidc 6.0.0-alpha9 → 6.0.0-beta10

package/dist/vanilla/oidc.js

@@ -74,26 +74,76 @@ var initSession_1 = require("./initSession");
 var timer_1 = __importDefault(require("./timer"));
 var checkSessionIFrame_1 = require("./checkSessionIFrame");
 var route_utils_1 = require("./route-utils");
+var performTokenRequestAsync = function (url, details, extras) { return __awaiter(void 0, void 0, void 0, function () {
+    var _i, _a, _b, key, value, formBody, property, encodedKey, encodedValue, formBodyString, response, tokens, currentTimeUnixSecond;
+    return __generator(this, function (_c) {
+        switch (_c.label) {
+            case 0:
+                for (_i = 0, _a = Object.entries(extras); _i < _a.length; _i++) {
+                    _b = _a[_i], key = _b[0], value = _b[1];
+                    if (details[key] === undefined) {
+                        details[key] = value;
+                    }
+                }
+                formBody = [];
+                for (property in details) {
+                    encodedKey = encodeURIComponent(property);
+                    encodedValue = encodeURIComponent(details[property]);
+                    formBody.push("".concat(encodedKey, "=").concat(encodedValue));
+                }
+                formBodyString = formBody.join("&");
+                return [4 /*yield*/, internalFetch(url, {
+                        method: 'POST',
+                        headers: {
+                            'Content-Type': 'application/x-www-form-urlencoded;charset=UTF-8',
+                        },
+                        body: formBodyString,
+                    })];
+            case 1:
+                response = _c.sent();
+                if (response.status !== 200) {
+                    return [2 /*return*/, { success: false, status: response.status }];
+                }
+                return [4 /*yield*/, response.json()];
+            case 2:
+                tokens = _c.sent();
+                if (!tokens.issued_at) {
+                    currentTimeUnixSecond = new Date().getTime() / 1000;
+                    tokens.issued_at = currentTimeUnixSecond;
+                }
+                return [2 /*return*/, { success: true,
+                        data: {
+                            accessToken: tokens.access_token,
+                            expiresIn: tokens.expires_in,
+                            idToken: tokens.id_token,
+                            refreshToken: tokens.refresh_token,
+                            scope: tokens.scope,
+                            tokenType: tokens.token_type,
+                            issuedAt: tokens.issued_at
+                        }
+                    }];
+        }
+    });
+}); };
 var internalFetch = function (url, headers, numberRetry) {
     if (numberRetry === void 0) { numberRetry = 0; }
     return __awaiter(void 0, void 0, void 0, function () {
-        var response, e_1;
+        var response, controller_1, e_1;
         return __generator(this, function (_a) {
             switch (_a.label) {
                 case 0:
                     _a.trys.push([0, 2, , 8]);
-                    return [4 /*yield*/, Promise.race([
-                            fetch(url, headers),
-                            new Promise(function (_, reject) { return setTimeout(function () { return reject(new Error('Timeout')); }, 10000); })
-                        ])];
+                    controller_1 = new AbortController();
+                    setTimeout(function () { return controller_1.abort(); }, 10000);
+                    return [4 /*yield*/, fetch(url, __assign(__assign({}, headers), { signal: controller_1.signal }))];
                 case 1:
                     response = _a.sent();
                     return [3 /*break*/, 8];
                 case 2:
                     e_1 = _a.sent();
-                    if (!(e_1.message === 'Timeout'
-                        || e_1.message === 'Network request failed' || e_1.message === "Failed to fetch")) return [3 /*break*/, 6];
-                    if (!(numberRetry <= 2)) return [3 /*break*/, 4];
+                    if (!(e_1.message === 'AbortError'
+                        || e_1.message === 'Network request failed')) return [3 /*break*/, 6];
+                    if (!(numberRetry <= 1)) return [3 /*break*/, 4];
                     return [4 /*yield*/, internalFetch(url, headers, numberRetry + 1)];
                 case 3: return [2 /*return*/, _a.sent()];
                 case 4: throw e_1;
@@ -173,7 +223,7 @@ var autoRenewTokens = function (oidc, refreshToken, expiresAt) {
     var _a;
     var refreshTimeBeforeTokensExpirationInSecond = (_a = oidc.configuration.refresh_time_before_tokens_expiration_in_second) !== null && _a !== void 0 ? _a : 60;
     return timer_1.default.setTimeout(function () { return __awaiter(void 0, void 0, void 0, function () {
-        var currentTimeUnixSecond, timeInfo, tokens, _a;
+        var currentTimeUnixSecond, timeInfo, tokens, _a, tokens;
         return __generator(this, function (_b) {
             switch (_b.label) {
                 case 0:
@@ -208,9 +258,9 @@ var autoRenewTokens = function (oidc, refreshToken, expiresAt) {
                     return [3 /*break*/, 7];
                 case 5: return [4 /*yield*/, oidc.syncTokensAsync()];
                 case 6:
-                    _b.sent();
-                    if (oidc.timeoutId) {
-                        oidc.timeoutId = autoRenewTokens(oidc, refreshToken, expiresAt);
+                    tokens = _b.sent();
+                    if (tokens && oidc.timeoutId) {
+                        oidc.timeoutId = autoRenewTokens(oidc, tokens.refreshToken, tokens.expiresAt);
                     }
                     _b.label = 7;
                 case 7: return [2 /*return*/];
@@ -253,7 +303,7 @@ var userInfoAsync = function (oidc) { return __awaiter(void 0, void 0, void 0, f
                             case 0: return [4 /*yield*/, fetch(url, {
                                     headers: {
                                         authorization: "Bearer ".concat(accessToken),
-                                        credentials: 'same-origin'
+                                        credentials: 'include'
                                     }
                                 })];
                             case 1:
@@ -274,7 +324,7 @@ var userInfoAsync = function (oidc) { return __awaiter(void 0, void 0, void 0, f
     });
 }); };
 var setTokensAsync = function (serviceWorker, tokens) { return __awaiter(void 0, void 0, void 0, function () {
-    var accessTokenPayload, _idTokenPayload, expiresAt;
+    var accessTokenPayload, _idTokenPayload, idTokenExipreAt, accessTokenExpiresAt, expiresAt;
     return __generator(this, function (_a) {
         switch (_a.label) {
             case 0:
@@ -296,7 +346,9 @@ var setTokensAsync = function (serviceWorker, tokens) { return __awaiter(void 0,
                 _a.label = 6;
             case 6:
                 _idTokenPayload = idTokenPayload(tokens.idToken);
-                expiresAt = (_idTokenPayload && _idTokenPayload.exp) ? _idTokenPayload.exp : tokens.issuedAt + tokens.expiresIn;
+                idTokenExipreAt = (_idTokenPayload && _idTokenPayload.exp) ? _idTokenPayload.exp : Number.MAX_VALUE;
+                accessTokenExpiresAt = (accessTokenPayload && accessTokenPayload.exp) ? accessTokenPayload.exp : tokens.issuedAt + tokens.expiresIn;
+                expiresAt = idTokenExipreAt < accessTokenExpiresAt ? idTokenExipreAt : accessTokenExpiresAt;
                 return [2 /*return*/, __assign(__assign({}, tokens), { idTokenPayload: _idTokenPayload, accessTokenPayload: accessTokenPayload, expiresAt: expiresAt })];
         }
     });
@@ -320,10 +372,10 @@ var eventNames = {
     tryKeepExistingSessionAsync_begin: "tryKeepExistingSessionAsync_begin",
     tryKeepExistingSessionAsync_end: "tryKeepExistingSessionAsync_end",
     tryKeepExistingSessionAsync_error: "tryKeepExistingSessionAsync_error",
-    silentSigninAsync_begin: "silentSigninAsync_begin",
-    silentSigninAsync: "silentSigninAsync",
-    silentSigninAsync_end: "silentSigninAsync_end",
-    silentSigninAsync_error: "silentSigninAsync_error",
+    silentLoginAsync_begin: "silentLoginAsync_begin",
+    silentLoginAsync: "silentLoginAsync",
+    silentLoginAsync_end: "silentLoginAsync_end",
+    silentLoginAsync_error: "silentLoginAsync_error",
     syncTokensAsync_begin: "syncTokensAsync_begin",
     syncTokensAsync_end: "syncTokensAsync_end",
     syncTokensAsync_error: "syncTokensAsync_error"
@@ -331,23 +383,28 @@ var eventNames = {
 var getRandomInt = function (max) {
     return Math.floor(Math.random() * max);
 };
-var WELL_KNOWN_PATH = '.well-known';
-var OPENID_CONFIGURATION = 'openid-configuration';
 var oneHourSecond = 60 * 60;
-var fetchFromIssuer = function (openIdIssuerUrl, timeCacheSecond) {
+var fetchFromIssuerCache = null;
+var fetchFromIssuer = function (openIdIssuerUrl, timeCacheSecond, storage) {
     if (timeCacheSecond === void 0) { timeCacheSecond = oneHourSecond; }
+    if (storage === void 0) { storage = window.sessionStorage; }
     return __awaiter(void 0, void 0, void 0, function () {
-        var fullUrl, localStorageKey, cacheJson, oneHourMinisecond, response, result;
+        var fullUrl, localStorageKey, cacheJson, oneHourMinisecond, response, result, timestamp;
         return __generator(this, function (_a) {
             switch (_a.label) {
                 case 0:
-                    fullUrl = "".concat(openIdIssuerUrl, "/").concat(WELL_KNOWN_PATH, "/").concat(OPENID_CONFIGURATION);
+                    fullUrl = "".concat(openIdIssuerUrl, "/.well-known/openid-configuration");
                     localStorageKey = "oidc.server:".concat(openIdIssuerUrl);
-                    cacheJson = window.localStorage.getItem(localStorageKey);
+                    if (!fetchFromIssuerCache && storage) {
+                        cacheJson = storage.getItem(localStorageKey);
+                        if (cacheJson) {
+                            fetchFromIssuerCache = JSON.parse(cacheJson);
+                        }
+                    }
                     oneHourMinisecond = 1000 * timeCacheSecond;
                     // @ts-ignore
-                    if (cacheJson && (cacheJson.timestamp + oneHourMinisecond) > Date.now()) {
-                        return [2 /*return*/, new OidcAuthorizationServiceConfiguration(JSON.parse(cacheJson))];
+                    if (fetchFromIssuerCache && (fetchFromIssuerCache.timestamp + oneHourMinisecond) > Date.now()) {
+                        return [2 /*return*/, new OidcAuthorizationServiceConfiguration(fetchFromIssuerCache.result)];
                     }
                     return [4 /*yield*/, fetch(fullUrl)];
                 case 1:
@@ -358,7 +415,11 @@ var fetchFromIssuer = function (openIdIssuerUrl, timeCacheSecond) {
                     return [4 /*yield*/, response.json()];
                 case 2:
                     result = _a.sent();
-                    window.localStorage.setItem(localStorageKey, JSON.stringify({ result: result, timestamp: Date.now() }));
+                    timestamp = Date.now();
+                    fetchFromIssuerCache = { result: result, timestamp: timestamp };
+                    if (storage) {
+                        storage.setItem(localStorageKey, JSON.stringify({ result: result, timestamp: timestamp }));
+                    }
                     return [2 /*return*/, new OidcAuthorizationServiceConfiguration(result)];
             }
         });
@@ -382,13 +443,16 @@ var buildQueries = function (extras) {
 var Oidc = /** @class */ (function () {
     function Oidc(configuration, configurationName) {
         if (configurationName === void 0) { configurationName = "default"; }
-        this.initAsyncPromise = null;
         this.tryKeepExistingSessionPromise = null;
         this.loginPromise = null;
         this.loginCallbackPromise = null;
         this.syncTokensAsyncPromise = null;
         this.loginCallbackWithAutoTokensRenewPromise = null;
-        this.configuration = configuration;
+        var silent_login_uri = configuration.silent_login_uri;
+        if (configuration.silent_redirect_uri && !configuration.silent_login_uri) {
+            silent_login_uri = "".concat(configuration.silent_redirect_uri.replace("-callback", "").replace("callback", ""), "-login");
+        }
+        this.configuration = __assign(__assign({}, configuration), { silent_login_uri: silent_login_uri });
         this.configurationName = configurationName;
         this.tokens = null;
         this.userInfo = null;
@@ -405,6 +469,8 @@ var Oidc = /** @class */ (function () {
         this.removeEventSubscription.bind(this);
         this.publishEvent.bind(this);
         this.destroyAsync.bind(this);
+        this.logoutAsync.bind(this);
+        this.initAsync(this.configuration.authority, this.configuration.authority_configuration);
     }
     Oidc.prototype.subscriveEvents = function (func) {
         var id = getRandomInt(9999999999999).toString();
@@ -432,28 +498,50 @@ var Oidc = /** @class */ (function () {
         }
         return oidcDatabase[name];
     };
-    Oidc.prototype.silentSigninCallbackFromIFrame = function () {
-        if (this.configuration.silent_redirect_uri) {
+    Oidc.prototype._silentLoginCallbackFromIFrame = function () {
+        if (this.configuration.silent_redirect_uri && this.configuration.silent_login_uri) {
             var queryParams = (0, route_utils_1.getParseQueryStringFromLocation)(window.location.href);
             window.top.postMessage("".concat(this.configurationName, "_oidc_tokens:").concat(JSON.stringify({ tokens: this.tokens, sessionState: queryParams.session_state })), window.location.origin);
         }
     };
-    Oidc.prototype.silentSigninErrorCallbackFromIFrame = function () {
-        if (this.configuration.silent_redirect_uri) {
+    Oidc.prototype._silentLoginErrorCallbackFromIFrame = function () {
+        if (this.configuration.silent_redirect_uri && this.configuration.silent_login_uri) {
             var queryParams = (0, route_utils_1.getParseQueryStringFromLocation)(window.location.href);
             window.top.postMessage("".concat(this.configurationName, "_oidc_error:").concat(JSON.stringify({ error: queryParams.error })), window.location.origin);
         }
     };
-    Oidc.prototype.silentSigninAsync = function (extras, state, scope) {
+    Oidc.prototype.silentLoginCallBackAsync = function () {
+        return __awaiter(this, void 0, void 0, function () {
+            var error_1;
+            return __generator(this, function (_a) {
+                switch (_a.label) {
+                    case 0:
+                        _a.trys.push([0, 2, , 3]);
+                        return [4 /*yield*/, this.loginCallbackAsync(true)];
+                    case 1:
+                        _a.sent();
+                        this._silentLoginCallbackFromIFrame();
+                        return [3 /*break*/, 3];
+                    case 2:
+                        error_1 = _a.sent();
+                        console.error(error_1);
+                        this._silentLoginErrorCallbackFromIFrame();
+                        return [3 /*break*/, 3];
+                    case 3: return [2 /*return*/];
+                }
+            });
+        });
+    };
+    Oidc.prototype.silentLoginAsync = function (extras, state, scope) {
         if (extras === void 0) { extras = null; }
         if (state === void 0) { state = null; }
         if (scope === void 0) { scope = null; }
         return __awaiter(this, void 0, void 0, function () {
-            var configuration_1, queries, _i, _a, _b, key, value, link, idx, iFrameOrigin_1, iframe_1, self_1;
+            var numberTryOnline, configuration_1, queries, _i, _a, _b, key, value, link, idx, iFrameOrigin_1, iframe_1, self_1;
             return __generator(this, function (_c) {
                 switch (_c.label) {
                     case 0:
-                        if (!this.configuration.silent_redirect_uri || !this.configuration.silent_signin_uri) {
+                        if (!this.configuration.silent_redirect_uri || !this.configuration.silent_login_uri) {
                             return [2 /*return*/, Promise.resolve(null)];
                         }
                         _c.label = 1;
@@ -462,11 +550,22 @@ var Oidc = /** @class */ (function () {
                         return [4 /*yield*/, (0, initWorker_1.sleepAsync)(1000)];
                     case 2:
                         _c.sent();
-                        this.publishEvent(eventNames.silentSigninAsync, { message: "wait because document is hidden" });
+                        this.publishEvent(eventNames.silentLoginAsync, { message: "wait because document is hidden" });
                         return [3 /*break*/, 1];
                     case 3:
+                        numberTryOnline = 6;
+                        _c.label = 4;
+                    case 4:
+                        if (!(!navigator.onLine && numberTryOnline > 0)) return [3 /*break*/, 6];
+                        return [4 /*yield*/, (0, initWorker_1.sleepAsync)(1000)];
+                    case 5:
+                        _c.sent();
+                        numberTryOnline--;
+                        this.publishEvent(eventNames.refreshTokensAsync, { message: "wait because navigator is offline try ".concat(numberTryOnline) });
+                        return [3 /*break*/, 4];
+                    case 6:
                         try {
-                            this.publishEvent(eventNames.silentSigninAsync_begin, {});
+                            this.publishEvent(eventNames.silentLoginAsync_begin, {});
                             configuration_1 = this.configuration;
                             queries = "";
                             if (state) {
@@ -492,7 +591,7 @@ var Oidc = /** @class */ (function () {
                                     }
                                 }
                             }
-                            link = configuration_1.silent_signin_uri + queries;
+                            link = configuration_1.silent_login_uri + queries;
                             idx = link.indexOf("/", link.indexOf("//") + 2);
                             iFrameOrigin_1 = link.substr(0, idx);
                             iframe_1 = document.createElement('iframe');
@@ -516,41 +615,41 @@ var Oidc = /** @class */ (function () {
                                                     if (!isResolved_1) {
                                                         if (data.startsWith(key)) {
                                                             var result = JSON.parse(e.data.replace(key, ''));
-                                                            self_1.publishEvent(eventNames.silentSigninAsync_end, {});
+                                                            self_1.publishEvent(eventNames.silentLoginAsync_end, {});
                                                             iframe_1.remove();
                                                             isResolved_1 = true;
                                                             resolve(result);
                                                         }
                                                         else if (data.startsWith(key_error)) {
                                                             var result = JSON.parse(e.data.replace(key_error, ''));
-                                                            self_1.publishEvent(eventNames.silentSigninAsync_error, result);
+                                                            self_1.publishEvent(eventNames.silentLoginAsync_error, result);
                                                             iframe_1.remove();
                                                             isResolved_1 = true;
-                                                            reject(result);
+                                                            reject(new Error("oidc_" + result.error));
                                                         }
                                                     }
                                                 }
                                             }
                                         };
-                                        var silentSigninTimeout = (_a = configuration_1.silent_signin_timeout) !== null && _a !== void 0 ? _a : 12000;
+                                        var silentSigninTimeout = (_a = configuration_1.silent_login_timeout) !== null && _a !== void 0 ? _a : 12000;
                                         setTimeout(function () {
                                             if (!isResolved_1) {
-                                                self_1.publishEvent(eventNames.silentSigninAsync_error, "timeout");
+                                                self_1.publishEvent(eventNames.silentLoginAsync_error, { reason: "timeout" });
                                                 iframe_1.remove();
                                                 isResolved_1 = true;
-                                                reject("timeout");
+                                                reject(new Error("timeout"));
                                             }
                                         }, silentSigninTimeout);
                                     }
                                     catch (e) {
                                         iframe_1.remove();
-                                        self_1.publishEvent(eventNames.silentSigninAsync_error, e);
+                                        self_1.publishEvent(eventNames.silentLoginAsync_error, e);
                                         reject(e);
                                     }
                                 })];
                         }
                         catch (e) {
-                            this.publishEvent(eventNames.silentSigninAsync_error, e);
+                            this.publishEvent(eventNames.silentLoginAsync_error, e);
                             throw e;
                         }
                         return [2 /*return*/];
@@ -561,9 +660,9 @@ var Oidc = /** @class */ (function () {
     Oidc.prototype.initAsync = function (authority, authorityConfiguration) {
         var _a;
         return __awaiter(this, void 0, void 0, function () {
-            var _b;
-            return __generator(this, function (_c) {
-                switch (_c.label) {
+            var serviceWorker, storage, initAsyncPromise;
+            return __generator(this, function (_b) {
+                switch (_b.label) {
                     case 0:
                         if (authorityConfiguration != null) {
                             return [2 /*return*/, new OidcAuthorizationServiceConfiguration({
@@ -575,14 +674,14 @@ var Oidc = /** @class */ (function () {
                                     check_session_iframe: authorityConfiguration.check_session_iframe,
                                 })];
                         }
-                        if (this.initAsyncPromise) {
-                            return [2 /*return*/, this.initAsyncPromise];
-                        }
-                        _b = this;
-                        return [4 /*yield*/, fetchFromIssuer(authority, (_a = this.configuration.authority_time_cache_wellknowurl_in_second) !== null && _a !== void 0 ? _a : 60 * 60)];
+                        return [4 /*yield*/, (0, initWorker_1.initWorkerAsync)(this.configuration.service_worker_relative_url, this.configurationName)];
                     case 1:
-                        _b.initAsyncPromise = _c.sent();
-                        return [2 /*return*/, this.initAsyncPromise];
+                        serviceWorker = _b.sent();
+                        storage = serviceWorker ? window.localStorage : null;
+                        return [4 /*yield*/, fetchFromIssuer(authority, (_a = this.configuration.authority_time_cache_wellknowurl_in_second) !== null && _a !== void 0 ? _a : 60 * 60, storage)];
+                    case 2:
+                        initAsyncPromise = _b.sent();
+                        return [2 /*return*/, initAsyncPromise];
                 }
             });
         });
@@ -627,7 +726,8 @@ var Oidc = /** @class */ (function () {
                                     expiresIn: tokens.expires_in,
                                     idToken: tokens.id_token,
                                     scope: tokens.scope,
-                                    tokenType: tokens.token_type
+                                    tokenType: tokens.token_type,
+                                    issuedAt: tokens.issued_at
                                 };
                                 _a = this;
                                 return [4 /*yield*/, setTokensAsync(serviceWorker, reformattedToken)];
@@ -639,8 +739,10 @@ var Oidc = /** @class */ (function () {
                                 return [4 /*yield*/, serviceWorker.getSessionStateAsync()];
                             case 6:
                                 sessionState = _d.sent();
+                                // @ts-ignore
                                 return [4 /*yield*/, this.startCheckSessionAsync(oidcServerConfiguration.check_session_iframe, configuration.client_id, sessionState)];
                             case 7:
+                                // @ts-ignore
                                 _d.sent();
                                 this.publishEvent(eventNames.tryKeepExistingSessionAsync_end, {
                                     success: true,
@@ -675,8 +777,10 @@ var Oidc = /** @class */ (function () {
                                 // @ts-ignore
                                 this.timeoutId = autoRenewTokens(this, tokens.refreshToken, this.tokens.expiresAt);
                                 sessionState = session.getSessionState();
+                                // @ts-ignore
                                 return [4 /*yield*/, this.startCheckSessionAsync(oidcServerConfiguration.check_session_iframe, configuration.client_id, sessionState)];
                             case 12:
+                                // @ts-ignore
                                 _d.sent();
                                 this.publishEvent(eventNames.tryKeepExistingSessionAsync_end, {
                                     success: true,
@@ -800,7 +904,7 @@ var Oidc = /** @class */ (function () {
             var _this = this;
             return __generator(this, function (_a) {
                 return [2 /*return*/, new Promise(function (resolve, reject) {
-                        if (_this.configuration.silent_signin_uri && _this.configuration.silent_redirect_uri && _this.configuration.monitor_session && checkSessionIFrameUri && sessionState && !isSilentSignin) {
+                        if (_this.configuration.silent_login_uri && _this.configuration.silent_redirect_uri && _this.configuration.monitor_session && checkSessionIFrameUri && sessionState && !isSilentSignin) {
                             var checkSessionCallback = function () {
                                 _this.checkSessionIFrame.stop();
                                 if (_this.tokens === null) {
@@ -810,7 +914,7 @@ var Oidc = /** @class */ (function () {
                                 var idToken = _this.tokens.idToken;
                                 // @ts-ignore
                                 var idTokenPayload = _this.tokens.idTokenPayload;
-                                _this.silentSigninAsync({
+                                _this.silentLoginAsync({
                                     prompt: "none",
                                     id_token_hint: idToken,
                                     scope: "openid"
@@ -999,6 +1103,7 @@ var Oidc = /** @class */ (function () {
                                             clearTimeout(timeoutId);
                                             _this.timeoutId = null;
                                             var loginParams_1 = getLoginParams(_this.configurationName, redirectUri_1);
+                                            // @ts-ignore
                                             _this.startCheckSessionAsync(oidcServerConfiguration_1.check_session_iframe, clientId_1, sessionState_2, isSilentSignin).then(function () {
                                                 _this.publishEvent(eventNames.loginCallbackAsync_end, {});
                                                 resolve({
@@ -1034,207 +1139,208 @@ var Oidc = /** @class */ (function () {
     };
     Oidc.prototype.refreshTokensAsync = function (refreshToken) {
         return __awaiter(this, void 0, void 0, function () {
-            var localSilentSigninAsync, configuration, clientId_2, redirectUri_2, authority, extras_1, _i, _a, _b, key, value, oidcServerConfiguration, performTokenRequestAsync, tokenResponse, exception_4;
+            var localsilentLoginAsync, configuration, clientId, redirectUri, authority, extras, _i, _a, _b, key, value, oidcServerConfiguration, details, index, numberTryOnline, tokenResponse, exception_4;
             var _this = this;
             return __generator(this, function (_c) {
                 switch (_c.label) {
                     case 0:
-                        localSilentSigninAsync = function (exception) {
-                            if (exception === void 0) { exception = null; }
-                            return __awaiter(_this, void 0, void 0, function () {
-                                var silent_token_response, exceptionSilent_1;
-                                return __generator(this, function (_a) {
-                                    switch (_a.label) {
-                                        case 0:
-                                            _a.trys.push([0, 2, , 3]);
-                                            return [4 /*yield*/, this.silentSigninAsync()];
-                                        case 1:
-                                            silent_token_response = _a.sent();
-                                            if (silent_token_response) {
-                                                return [2 /*return*/, silent_token_response.tokens];
-                                            }
-                                            return [3 /*break*/, 3];
-                                        case 2:
-                                            exceptionSilent_1 = _a.sent();
-                                            console.error(exceptionSilent_1);
-                                            return [3 /*break*/, 3];
-                                        case 3:
-                                            if (this.timeoutId) {
-                                                timer_1.default.clearTimeout(this.timeoutId);
-                                                this.timeoutId = null;
-                                            }
-                                            this.publishEvent(eventNames.refreshTokensAsync_error, exception);
-                                            return [2 /*return*/, null];
-                                    }
-                                });
+                        localsilentLoginAsync = function () { return __awaiter(_this, void 0, void 0, function () {
+                            var loginParams, silent_token_response, exceptionSilent_1;
+                            return __generator(this, function (_a) {
+                                switch (_a.label) {
+                                    case 0:
+                                        _a.trys.push([0, 2, , 3]);
+                                        loginParams = getLoginParams(this.configurationName, configuration.redirect_uri);
+                                        return [4 /*yield*/, this.silentLoginAsync(loginParams.extras, loginParams.state)];
+                                    case 1:
+                                        silent_token_response = _a.sent();
+                                        if (silent_token_response) {
+                                            return [2 /*return*/, silent_token_response.tokens];
+                                        }
+                                        return [3 /*break*/, 3];
+                                    case 2:
+                                        exceptionSilent_1 = _a.sent();
+                                        console.error(exceptionSilent_1);
+                                        return [3 /*break*/, 3];
+                                    case 3:
+                                        if (this.timeoutId) {
+                                            timer_1.default.clearTimeout(this.timeoutId);
+                                            this.timeoutId = null;
+                                        }
+                                        this.publishEvent(eventNames.refreshTokensAsync_error, { message: "refresh token and silent refresh failed" });
+                                        return [2 /*return*/, null];
+                                }
                             });
-                        };
-                        _c.label = 1;
-                    case 1:
-                        _c.trys.push([1, 6, , 8]);
-                        this.publishEvent(eventNames.refreshTokensAsync_begin, { refreshToken: refreshToken });
+                        }); };
                         configuration = this.configuration;
-                        clientId_2 = configuration.client_id;
-                        redirectUri_2 = configuration.redirect_uri;
+                        clientId = configuration.client_id;
+                        redirectUri = configuration.redirect_uri;
                         authority = configuration.authority;
-                        if (!!refreshToken) return [3 /*break*/, 3];
-                        return [4 /*yield*/, localSilentSigninAsync()];
-                    case 2: return [2 /*return*/, _c.sent()];
-                    case 3:
-                        extras_1 = {};
+                        if (!!refreshToken) return [3 /*break*/, 2];
+                        return [4 /*yield*/, localsilentLoginAsync()];
+                    case 1: return [2 /*return*/, _c.sent()];
+                    case 2:
+                        extras = {};
                         if (configuration.token_request_extras) {
                             for (_i = 0, _a = Object.entries(configuration.token_request_extras); _i < _a.length; _i++) {
                                 _b = _a[_i], key = _b[0], value = _b[1];
-                                extras_1[key] = value;
+                                extras[key] = value;
                             }
                         }
                         return [4 /*yield*/, this.initAsync(authority, configuration.authority_configuration)];
-                    case 4:
+                    case 3:
                         oidcServerConfiguration = _c.sent();
-                        performTokenRequestAsync = function (url) { return __awaiter(_this, void 0, void 0, function () {
-                            var details, _i, _a, _b, key, value, formBody, property, encodedKey, encodedValue, formBodyString, response, result;
-                            return __generator(this, function (_c) {
-                                switch (_c.label) {
-                                    case 0:
-                                        details = {
-                                            client_id: clientId_2,
-                                            redirect_uri: redirectUri_2,
-                                            grant_type: appauth_1.GRANT_TYPE_REFRESH_TOKEN,
-                                            refresh_token: refreshToken,
-                                        };
-                                        for (_i = 0, _a = Object.entries(extras_1); _i < _a.length; _i++) {
-                                            _b = _a[_i], key = _b[0], value = _b[1];
-                                            if (details[key] === undefined) {
-                                                details[key] = value;
-                                            }
-                                        }
-                                        formBody = [];
-                                        for (property in details) {
-                                            encodedKey = encodeURIComponent(property);
-                                            encodedValue = encodeURIComponent(details[property]);
-                                            formBody.push("".concat(encodedKey, "=").concat(encodedValue));
-                                        }
-                                        formBodyString = formBody.join("&");
-                                        return [4 /*yield*/, internalFetch(url, {
-                                                method: 'POST',
-                                                headers: {
-                                                    'Content-Type': 'application/x-www-form-urlencoded;charset=UTF-8',
-                                                },
-                                                body: formBodyString,
-                                            })];
-                                    case 1:
-                                        response = _c.sent();
-                                        if (response.status >= 299) {
-                                            throw new Error("Error refreshing token");
-                                        }
-                                        return [4 /*yield*/, response.json()];
-                                    case 2:
-                                        result = _c.sent();
-                                        return [2 /*return*/, {
-                                                accessToken: result.access_token,
-                                                expiresIn: result.expires_in,
-                                                idToken: result.id_token,
-                                                refreshToken: result.refresh_token,
-                                                scope: result.scope,
-                                                tokenType: result.token_type,
-                                            }];
-                                }
-                            });
-                        }); };
-                        return [4 /*yield*/, performTokenRequestAsync(oidcServerConfiguration.tokenEndpoint)];
+                        details = {
+                            client_id: clientId,
+                            redirect_uri: redirectUri,
+                            grant_type: appauth_1.GRANT_TYPE_REFRESH_TOKEN,
+                            refresh_token: refreshToken,
+                        };
+                        index = 0;
+                        _c.label = 4;
+                    case 4:
+                        if (!(index <= 4)) return [3 /*break*/, 18];
+                        _c.label = 5;
                     case 5:
-                        tokenResponse = _c.sent();
-                        this.publishEvent(eventNames.refreshTokensAsync_end, { message: "success" });
-                        return [2 /*return*/, tokenResponse];
+                        _c.trys.push([5, 16, , 17]);
+                        this.publishEvent(eventNames.refreshTokensAsync_begin, { refreshToken: refreshToken, tryNumber: index });
+                        if (!(index > 1)) return [3 /*break*/, 11];
+                        _c.label = 6;
                     case 6:
+                        if (!document.hidden) return [3 /*break*/, 8];
+                        return [4 /*yield*/, (0, initWorker_1.sleepAsync)(1000)];
+                    case 7:
+                        _c.sent();
+                        this.publishEvent(eventNames.refreshTokensAsync, { message: "wait because document is hidden" });
+                        return [3 /*break*/, 6];
+                    case 8:
+                        numberTryOnline = 6;
+                        _c.label = 9;
+                    case 9:
+                        if (!(!navigator.onLine && numberTryOnline > 0)) return [3 /*break*/, 11];
+                        return [4 /*yield*/, (0, initWorker_1.sleepAsync)(1000)];
+                    case 10:
+                        _c.sent();
+                        numberTryOnline--;
+                        this.publishEvent(eventNames.refreshTokensAsync, { message: "wait because navigator is offline try ".concat(numberTryOnline) });
+                        return [3 /*break*/, 9];
+                    case 11: return [4 /*yield*/, performTokenRequestAsync(oidcServerConfiguration.tokenEndpoint, details, extras)];
+                    case 12:
+                        tokenResponse = _c.sent();
+                        if (!tokenResponse.success) return [3 /*break*/, 13];
+                        this.publishEvent(eventNames.refreshTokensAsync_end, { success: tokenResponse.success });
+                        return [2 /*return*/, tokenResponse.data];
+                    case 13:
+                        this.publishEvent(eventNames.refreshTokensAsync_silent_error, { message: "bad request", tokenResponse: tokenResponse });
+                        return [4 /*yield*/, localsilentLoginAsync()];
+                    case 14: return [2 /*return*/, _c.sent()];
+                    case 15: return [3 /*break*/, 17];
+                    case 16:
                         exception_4 = _c.sent();
                         console.error(exception_4);
-                        this.publishEvent(eventNames.refreshTokensAsync_silent_error, exception_4);
-                        return [4 /*yield*/, localSilentSigninAsync(exception_4)];
-                    case 7: return [2 /*return*/, _c.sent()];
-                    case 8: return [2 /*return*/];
+                        this.publishEvent(eventNames.refreshTokensAsync_silent_error, { message: "exception", exception: exception_4.message });
+                        return [3 /*break*/, 17];
+                    case 17:
+                        index++;
+                        return [3 /*break*/, 4];
+                    case 18: return [2 /*return*/];
                 }
             });
         });
     };
     Oidc.prototype.syncTokensAsync = function () {
-        var _a;
         return __awaiter(this, void 0, void 0, function () {
-            var configuration, oidcServerConfiguration, serviceWorker, isLogin, silent_token_response, _b, exceptionSilent_2, session, tokens;
-            return __generator(this, function (_c) {
-                switch (_c.label) {
-                    case 0:
-                        configuration = this.configuration;
-                        if (!this.tokens) {
-                            return [2 /*return*/];
-                        }
-                        return [4 /*yield*/, this.initAsync(configuration.authority, configuration.authority_configuration)];
-                    case 1:
-                        oidcServerConfiguration = _c.sent();
-                        return [4 /*yield*/, (0, initWorker_1.initWorkerAsync)(configuration.service_worker_relative_url, this.configurationName)];
-                    case 2:
-                        serviceWorker = _c.sent();
-                        if (!serviceWorker) return [3 /*break*/, 14];
-                        return [4 /*yield*/, serviceWorker.initAsync(oidcServerConfiguration, "syncTokensAsync")];
-                    case 3:
-                        isLogin = (_c.sent()).isLogin;
-                        if (!(isLogin == false)) return [3 /*break*/, 5];
-                        this.publishEvent(eventNames.logout_from_another_tab, {});
-                        return [4 /*yield*/, this.destroyAsync()];
-                    case 4:
-                        _c.sent();
-                        return [3 /*break*/, 13];
-                    case 5:
-                        if (!(isLogin == null)) return [3 /*break*/, 13];
-                        _c.label = 6;
-                    case 6:
-                        _c.trys.push([6, 11, , 12]);
-                        this.publishEvent(eventNames.syncTokensAsync_begin, {});
-                        this.syncTokensAsyncPromise = this.silentSigninAsync({ prompt: "none" });
-                        return [4 /*yield*/, this.syncTokensAsyncPromise];
-                    case 7:
-                        silent_token_response = _c.sent();
-                        if (!(silent_token_response && silent_token_response.tokens)) return [3 /*break*/, 9];
-                        _b = this;
-                        return [4 /*yield*/, setTokensAsync(serviceWorker, silent_token_response.tokens)];
-                    case 8:
-                        _b.tokens = _c.sent();
-                        return [3 /*break*/, 10];
-                    case 9:
-                        this.publishEvent(eventNames.syncTokensAsync_error, null);
-                        if (this.timeoutId) {
-                            timer_1.default.clearTimeout(this.timeoutId);
-                            this.timeoutId = null;
-                        }
-                        return [2 /*return*/];
-                    case 10: return [3 /*break*/, 12];
-                    case 11:
-                        exceptionSilent_2 = _c.sent();
-                        console.error(exceptionSilent_2);
-                        this.publishEvent(eventNames.syncTokensAsync_error, exceptionSilent_2);
-                        if (this.timeoutId) {
-                            timer_1.default.clearTimeout(this.timeoutId);
-                            this.timeoutId = null;
+            var localSyncTokensAsync;
+            var _this = this;
+            return __generator(this, function (_a) {
+                localSyncTokensAsync = function () { return __awaiter(_this, void 0, void 0, function () {
+                    var configuration, oidcServerConfiguration, serviceWorker, isLogin, loginParams, silent_token_response, _a, exceptionSilent_2, session, tokens;
+                    var _b;
+                    return __generator(this, function (_c) {
+                        switch (_c.label) {
+                            case 0:
+                                configuration = this.configuration;
+                                if (!this.tokens) {
+                                    return [2 /*return*/, null];
+                                }
+                                return [4 /*yield*/, this.initAsync(configuration.authority, configuration.authority_configuration)];
+                            case 1:
+                                oidcServerConfiguration = _c.sent();
+                                return [4 /*yield*/, (0, initWorker_1.initWorkerAsync)(configuration.service_worker_relative_url, this.configurationName)];
+                            case 2:
+                                serviceWorker = _c.sent();
+                                if (!serviceWorker) return [3 /*break*/, 13];
+                                return [4 /*yield*/, serviceWorker.initAsync(oidcServerConfiguration, "syncTokensAsync")];
+                            case 3:
+                                isLogin = (_c.sent()).isLogin;
+                                if (!(isLogin == false)) return [3 /*break*/, 5];
+                                this.publishEvent(eventNames.logout_from_another_tab, {});
+                                return [4 /*yield*/, this.destroyAsync()];
+                            case 4:
+                                _c.sent();
+                                return [2 /*return*/, null];
+                            case 5:
+                                if (!(isLogin == null)) return [3 /*break*/, 12];
+                                _c.label = 6;
+                            case 6:
+                                _c.trys.push([6, 11, , 12]);
+                                this.publishEvent(eventNames.syncTokensAsync_begin, {});
+                                loginParams = getLoginParams(this.configurationName, configuration.redirect_uri);
+                                return [4 /*yield*/, this.silentLoginAsync(__assign(__assign({}, loginParams.extras), { prompt: "none" }), loginParams.state)];
+                            case 7:
+                                silent_token_response = _c.sent();
+                                if (!(silent_token_response && silent_token_response.tokens)) return [3 /*break*/, 9];
+                                _a = this;
+                                return [4 /*yield*/, setTokensAsync(serviceWorker, silent_token_response.tokens)];
+                            case 8:
+                                _a.tokens = _c.sent();
+                                this.publishEvent(eventNames.syncTokensAsync_end, {});
+                                return [2 /*return*/, this.tokens];
+                            case 9:
+                                this.publishEvent(eventNames.syncTokensAsync_error, { message: "no token found in result" });
+                                if (this.timeoutId) {
+                                    timer_1.default.clearTimeout(this.timeoutId);
+                                    this.timeoutId = null;
+                                }
+                                this.publishEvent(eventNames.syncTokensAsync_end, {});
+                                return [2 /*return*/, null];
+                            case 10: return [3 /*break*/, 12];
+                            case 11:
+                                exceptionSilent_2 = _c.sent();
+                                console.error(exceptionSilent_2);
+                                this.publishEvent(eventNames.syncTokensAsync_error, exceptionSilent_2);
+                                if (this.timeoutId) {
+                                    timer_1.default.clearTimeout(this.timeoutId);
+                                    this.timeoutId = null;
+                                }
+                                this.publishEvent(eventNames.syncTokensAsync_end, {});
+                                return [2 /*return*/, null];
+                            case 12: return [3 /*break*/, 16];
+                            case 13:
+                                session = (0, initSession_1.initSession)(this.configurationName, configuration.redirect_uri, (_b = configuration.storage) !== null && _b !== void 0 ? _b : sessionStorage);
+                                return [4 /*yield*/, session.initAsync()];
+                            case 14:
+                                tokens = (_c.sent()).tokens;
+                                if (!!tokens) return [3 /*break*/, 16];
+                                this.publishEvent(eventNames.logout_from_another_tab, {});
+                                return [4 /*yield*/, this.destroyAsync()];
+                            case 15:
+                                _c.sent();
+                                return [2 /*return*/, null];
+                            case 16: return [2 /*return*/, this.tokens];
                         }
-                        return [2 /*return*/];
-                    case 12:
-                        this.syncTokensAsyncPromise = null;
-                        this.publishEvent(eventNames.syncTokensAsync_end, {});
-                        _c.label = 13;
-                    case 13: return [3 /*break*/, 17];
-                    case 14:
-                        session = (0, initSession_1.initSession)(this.configurationName, configuration.redirect_uri, (_a = configuration.storage) !== null && _a !== void 0 ? _a : sessionStorage);
-                        return [4 /*yield*/, session.initAsync()];
-                    case 15:
-                        tokens = (_c.sent()).tokens;
-                        if (!!tokens) return [3 /*break*/, 17];
-                        this.publishEvent(eventNames.logout_from_another_tab, {});
-                        return [4 /*yield*/, this.destroyAsync()];
-                    case 16:
-                        _c.sent();
-                        _c.label = 17;
-                    case 17: return [2 /*return*/];
+                    });
+                }); };
+                if (this.syncTokensAsyncPromise) {
+                    return [2 /*return*/, this.syncTokensAsyncPromise];
                 }
+                this.syncTokensAsyncPromise = localSyncTokensAsync().then(function (result) {
+                    if (_this.syncTokensAsyncPromise) {
+                        _this.syncTokensAsyncPromise = null;
+                    }
+                    return result;
+                });
+                return [2 /*return*/, this.syncTokensAsyncPromise];
             });
         });
     };