@axa-fr/react-oidc 6.0.0-alpha9 → 6.0.0-beta10

package/src/oidc/vanilla/oidc.ts

@@ -20,18 +20,62 @@ import {CheckSessionIFrame} from "./checkSessionIFrame"
 import {getParseQueryStringFromLocation} from "./route-utils";
 import {AuthorizationServiceConfigurationJson} from "@openid/appauth/src/authorization_service_configuration";
 
+const performTokenRequestAsync= async (url, details, extras) => {
+    
+    for (let [key, value] of Object.entries(extras)) {
+        if (details[key] === undefined) {
+            details[key] = value;
+        }
+    }
+
+    let formBody = [];
+    for (const property in details) {
+        const encodedKey = encodeURIComponent(property);
+        const encodedValue = encodeURIComponent(details[property]);
+        formBody.push(`${encodedKey}=${encodedValue}`);
+    }
+    const formBodyString = formBody.join("&");
+
+    const response = await internalFetch(url, {
+        method: 'POST',
+        headers: {
+            'Content-Type': 'application/x-www-form-urlencoded;charset=UTF-8',
+        },
+        body: formBodyString,
+    });
+    if(response.status !== 200){
+        return {success:false, status: response.status}
+    }
+    const tokens = await response.json();
+
+    if(!tokens.issued_at) {
+        const currentTimeUnixSecond = new Date().getTime() /1000;
+        tokens.issued_at = currentTimeUnixSecond;
+    }
+    
+    return { success : true,
+        data : {
+            accessToken: tokens.access_token,
+            expiresIn: tokens.expires_in,
+            idToken: tokens.id_token,
+            refreshToken: tokens.refresh_token,
+            scope: tokens.scope,
+            tokenType: tokens.token_type,
+            issuedAt: tokens.issued_at
+        }
+    };
+}
 
 const internalFetch = async (url, headers, numberRetry=0) => {
     let response;
     try {
-        response = await Promise.race([
-            fetch(url, headers),
-            new Promise((_, reject) => setTimeout(
-                () => reject(new Error('Timeout')), 10000))]);
+        let controller = new AbortController();
+        setTimeout(() => controller.abort(), 10000);
+        response = await fetch(url, {...headers, signal: controller.signal});
     } catch (e) {
-        if (e.message === 'Timeout'
-            || e.message === 'Network request failed' || e.message === "Failed to fetch") {
-            if(numberRetry <=2) {
+        if (e.message === 'AbortError'
+            || e.message === 'Network request failed') {
+            if(numberRetry <=1) {
                 return await internalFetch(url, headers, numberRetry + 1);
             } 
             else {
@@ -117,8 +161,8 @@ export interface AuthorityConfiguration {
      client_id: string,
      redirect_uri: string,
      silent_redirect_uri?:string,
-     silent_signin_uri?:string,
-     silent_signin_timeout?:number,
+     silent_login_uri?:string,
+     silent_login_timeout?:number,
      scope: string,
      authority: string,
      authority_time_cache_wellknowurl_in_second?: number,
@@ -172,9 +216,9 @@ const autoRenewTokens = (oidc, refreshToken, expiresAt) => {
                 oidc.timeoutId = autoRenewTokens(oidc, tokens.refreshToken, oidc.tokens.expiresAt);
             }
         } else{
-            await oidc.syncTokensAsync();
-            if(oidc.timeoutId) {
-                oidc.timeoutId = autoRenewTokens(oidc, refreshToken, expiresAt);
+            const tokens = await oidc.syncTokensAsync();
+            if(tokens && oidc.timeoutId) {
+                oidc.timeoutId = autoRenewTokens(oidc, tokens.refreshToken, tokens.expiresAt);
             }
         }
     }, 1000);
@@ -187,7 +231,6 @@ const getLoginParams = (configurationName, redirectUri) => {
     return JSON.parse(sessionStorage[getLoginSessionKey(configurationName, redirectUri)]);
 }
 
-
 const userInfoAsync = async (oidc) => {
     if(oidc.userInfo != null){
         return oidc.userInfo;
@@ -206,7 +249,7 @@ const userInfoAsync = async (oidc) => {
        const res = await fetch(url, {
            headers: {
                authorization: `Bearer ${accessToken}`,
-               credentials: 'same-origin'
+               credentials: 'include'
            }
        });
 
@@ -236,7 +279,10 @@ const setTokensAsync = async (serviceWorker, tokens) =>{
         accessTokenPayload = extractAccessTokenPayload(tokens);
     }
     const _idTokenPayload = idTokenPayload(tokens.idToken);
-    const expiresAt =  (_idTokenPayload && _idTokenPayload.exp) ? _idTokenPayload.exp :  tokens.issuedAt + tokens.expiresIn;
+
+    const idTokenExipreAt =(_idTokenPayload && _idTokenPayload.exp) ? _idTokenPayload.exp: Number.MAX_VALUE;
+    const accessTokenExpiresAt =  (accessTokenPayload && accessTokenPayload.exp)? accessTokenPayload.exp : tokens.issuedAt + tokens.expiresIn;
+    const expiresAt = idTokenExipreAt < accessTokenExpiresAt ? idTokenExipreAt : accessTokenExpiresAt;
     return {...tokens, idTokenPayload: _idTokenPayload, accessTokenPayload, expiresAt};
 }
 
@@ -259,48 +305,50 @@ const eventNames = {
     tryKeepExistingSessionAsync_begin: "tryKeepExistingSessionAsync_begin",
     tryKeepExistingSessionAsync_end: "tryKeepExistingSessionAsync_end",
     tryKeepExistingSessionAsync_error: "tryKeepExistingSessionAsync_error",
-    silentSigninAsync_begin: "silentSigninAsync_begin",
-    silentSigninAsync: "silentSigninAsync",
-    silentSigninAsync_end: "silentSigninAsync_end",
-    silentSigninAsync_error: "silentSigninAsync_error", 
+    silentLoginAsync_begin: "silentLoginAsync_begin",
+    silentLoginAsync: "silentLoginAsync",
+    silentLoginAsync_end: "silentLoginAsync_end",
+    silentLoginAsync_error: "silentLoginAsync_error", 
     syncTokensAsync_begin: "syncTokensAsync_begin",
     syncTokensAsync_end: "syncTokensAsync_end",
     syncTokensAsync_error: "syncTokensAsync_error"
-
 }
 
 const getRandomInt = (max) => {
     return Math.floor(Math.random() * max);
 }
 
-const WELL_KNOWN_PATH = '.well-known';
-const OPENID_CONFIGURATION = 'openid-configuration';
-
-
 const oneHourSecond = 60 * 60;
-const fetchFromIssuer = async (openIdIssuerUrl: string, timeCacheSecond = oneHourSecond):
+let fetchFromIssuerCache = null;
+const fetchFromIssuer = async (openIdIssuerUrl: string, timeCacheSecond = oneHourSecond, storage= window.sessionStorage):
     Promise<OidcAuthorizationServiceConfiguration> => {
-    const fullUrl = `${openIdIssuerUrl}/${WELL_KNOWN_PATH}/${OPENID_CONFIGURATION}`;
+    const fullUrl = `${openIdIssuerUrl}/.well-known/openid-configuration`;
     
     const localStorageKey = `oidc.server:${openIdIssuerUrl}`;
-    const cacheJson = window.localStorage.getItem(localStorageKey);
-    
+    if(!fetchFromIssuerCache && storage) {
+        const cacheJson = storage.getItem(localStorageKey);
+        if(cacheJson){
+            fetchFromIssuerCache = JSON.parse(cacheJson);
+        }
+    }
     const oneHourMinisecond = 1000 * timeCacheSecond;
     // @ts-ignore
-    if(cacheJson && (cacheJson.timestamp + oneHourMinisecond) > Date.now()){
-        return new OidcAuthorizationServiceConfiguration(JSON.parse(cacheJson));
+    if(fetchFromIssuerCache && (fetchFromIssuerCache.timestamp + oneHourMinisecond) > Date.now()){
+        return new OidcAuthorizationServiceConfiguration(fetchFromIssuerCache.result);
     }
-    
     const response = await fetch(fullUrl);
 
     if (response.status != 200) {
         return null;
     }
     
-    
     const result = await response.json();
-    window.localStorage.setItem(localStorageKey, JSON.stringify({result, timestamp:Date.now()}));
     
+    const timestamp = Date.now();
+    fetchFromIssuerCache = {result, timestamp};
+    if(storage) {
+        storage.setItem(localStorageKey, JSON.stringify({result, timestamp}));
+    }
     return new OidcAuthorizationServiceConfiguration(result);
 }
 
@@ -329,7 +377,12 @@ export class Oidc {
     private session?: any;
     private checkSessionIFrame: CheckSessionIFrame;
     constructor(configuration:OidcConfiguration, configurationName="default") {
-      this.configuration = configuration
+        let silent_login_uri = configuration.silent_login_uri;
+        if(configuration.silent_redirect_uri && !configuration.silent_login_uri){
+            silent_login_uri = `${configuration.silent_redirect_uri.replace("-callback", "").replace("callback", "")}-login`; 
+        }
+        
+        this.configuration = {...configuration, silent_login_uri};
         this.configurationName= configurationName;
       this.tokens = null
       this.userInfo = null;
@@ -346,6 +399,9 @@ export class Oidc {
       this.removeEventSubscription.bind(this);
       this.publishEvent.bind(this);
       this.destroyAsync.bind(this);
+      this.logoutAsync.bind(this);
+      
+      this.initAsync(this.configuration.authority, this.configuration.authority_configuration);
     }
 
     subscriveEvents(func){
@@ -377,29 +433,47 @@ Please checkout that you are using OIDC hook inside a <OidcProvider configuratio
     }
     static eventNames = eventNames;
     
-    silentSigninCallbackFromIFrame(){
-        if (this.configuration.silent_redirect_uri) {
+    _silentLoginCallbackFromIFrame(){
+        if (this.configuration.silent_redirect_uri && this.configuration.silent_login_uri) {
             const queryParams = getParseQueryStringFromLocation(window.location.href);
             window.top.postMessage(`${this.configurationName}_oidc_tokens:${JSON.stringify({tokens:this.tokens, sessionState:queryParams.session_state})}`, window.location.origin);
         }
     }
-    silentSigninErrorCallbackFromIFrame(){
-        if (this.configuration.silent_redirect_uri) {
+    _silentLoginErrorCallbackFromIFrame() {
+        if (this.configuration.silent_redirect_uri && this.configuration.silent_login_uri) {
             const queryParams = getParseQueryStringFromLocation(window.location.href);
-            window.top.postMessage(`${this.configurationName}_oidc_error:${JSON.stringify({error:queryParams.error})}`, window.location.origin);
+            window.top.postMessage(`${this.configurationName}_oidc_error:${JSON.stringify({error: queryParams.error})}`, window.location.origin);
         }
     }
-    async silentSigninAsync(extras:StringMap=null, state:string=null, scope:string=null) {
-        if (!this.configuration.silent_redirect_uri || !this.configuration.silent_signin_uri) {
+    
+    async silentLoginCallBackAsync() {
+        try {
+            await this.loginCallbackAsync(true);
+            this._silentLoginCallbackFromIFrame();
+        } catch (error) {
+            console.error(error)
+            this._silentLoginErrorCallbackFromIFrame();
+        }
+    }
+    
+    async silentLoginAsync(extras:StringMap=null, state:string=null, scope:string=null) {
+        if (!this.configuration.silent_redirect_uri || !this.configuration.silent_login_uri) {
             return Promise.resolve(null);
         }
         while (document.hidden) {
             await sleepAsync(1000);
-            this.publishEvent(eventNames.silentSigninAsync, {message:"wait because document is hidden"});
+            this.publishEvent(eventNames.silentLoginAsync, {message:"wait because document is hidden"});
+        }
+
+        let numberTryOnline = 6;
+        while (!navigator.onLine && numberTryOnline > 0) {
+            await sleepAsync(1000);
+            numberTryOnline--;
+            this.publishEvent(eventNames.refreshTokensAsync, {message: `wait because navigator is offline try ${numberTryOnline}` });
         }
             
         try {
-            this.publishEvent(eventNames.silentSigninAsync_begin, {});
+            this.publishEvent(eventNames.silentLoginAsync_begin, {});
             const configuration = this.configuration
             let queries = "";
             
@@ -426,7 +500,7 @@ Please checkout that you are using OIDC hook inside a <OidcProvider configuratio
                     }
                 }
             }
-            const link = configuration.silent_signin_uri  + queries;
+            const link = configuration.silent_login_uri  + queries;
             const idx = link.indexOf("/", link.indexOf("//") + 2);
             const iFrameOrigin = link.substr(0, idx);
             const iframe = document.createElement('iframe');
@@ -451,43 +525,42 @@ Please checkout that you are using OIDC hook inside a <OidcProvider configuratio
                                 if (!isResolved) {
                                     if(data.startsWith(key)) {
                                         const result = JSON.parse(e.data.replace(key, ''));
-                                        self.publishEvent(eventNames.silentSigninAsync_end, {});
+                                        self.publishEvent(eventNames.silentLoginAsync_end, {});
                                         iframe.remove();
                                         isResolved = true;
                                         resolve(result);
                                     }
                                     else if(data.startsWith(key_error)) {
                                         const result = JSON.parse(e.data.replace(key_error, ''));
-                                        self.publishEvent(eventNames.silentSigninAsync_error, result);
+                                        self.publishEvent(eventNames.silentLoginAsync_error, result);
                                         iframe.remove();
                                         isResolved = true;
-                                        reject(result);
+                                        reject(new Error("oidc_"+result.error));
                                     }
                                 }
                             }
                         }
                     };
-                    const silentSigninTimeout = configuration.silent_signin_timeout ?? 12000
+                    const silentSigninTimeout = configuration.silent_login_timeout ?? 12000
                     setTimeout(() => {
                         if (!isResolved) {
-                            self.publishEvent(eventNames.silentSigninAsync_error, "timeout");
+                            self.publishEvent(eventNames.silentLoginAsync_error, {reason: "timeout"});
                             iframe.remove();
                             isResolved = true;
-                            reject("timeout");
+                            reject(new Error("timeout"));
                         }
                     }, silentSigninTimeout);
                 } catch (e) {
                     iframe.remove();
-                    self.publishEvent(eventNames.silentSigninAsync_error, e);
+                    self.publishEvent(eventNames.silentLoginAsync_error, e);
                     reject(e);
                 }
             });
         } catch (e) {
-            this.publishEvent(eventNames.silentSigninAsync_error, e);
+            this.publishEvent(eventNames.silentLoginAsync_error, e);
             throw e;
         }
     }
-    initAsyncPromise = null;
     async initAsync(authority:string, authorityConfiguration:AuthorityConfiguration) {
         if (authorityConfiguration != null) {
             return new OidcAuthorizationServiceConfiguration( {
@@ -499,12 +572,11 @@ Please checkout that you are using OIDC hook inside a <OidcProvider configuratio
                 check_session_iframe:authorityConfiguration.check_session_iframe,
             });
         }
-        if(this.initAsyncPromise){
-            return this.initAsyncPromise;
-        }
-        
-        this.initAsyncPromise = await fetchFromIssuer(authority, this.configuration.authority_time_cache_wellknowurl_in_second ?? 60 * 60);
-        return this.initAsyncPromise;
+
+        const serviceWorker = await initWorkerAsync(this.configuration.service_worker_relative_url, this.configurationName);
+        const storage = serviceWorker ? window.localStorage : null;
+        const initAsyncPromise = await fetchFromIssuer(authority, this.configuration.authority_time_cache_wellknowurl_in_second ?? 60 * 60, storage);
+        return initAsyncPromise;
     }
 
     tryKeepExistingSessionPromise = null;
@@ -534,13 +606,15 @@ Please checkout that you are using OIDC hook inside a <OidcProvider configuratio
                             expiresIn: tokens.expires_in,
                             idToken: tokens.id_token,
                             scope: tokens.scope,
-                            tokenType: tokens.token_type
+                            tokenType: tokens.token_type,
+                            issuedAt: tokens.issued_at
                         }
                         this.tokens = await setTokensAsync(serviceWorker, reformattedToken);
                         this.serviceWorker = serviceWorker;
                         // @ts-ignore
                         this.timeoutId = autoRenewTokens(this, this.tokens.refreshToken, this.tokens.expiresAt);
                         const sessionState = await serviceWorker.getSessionStateAsync();
+                        // @ts-ignore
                         await this.startCheckSessionAsync(oidcServerConfiguration.check_session_iframe, configuration.client_id, sessionState);
                         this.publishEvent(eventNames.tryKeepExistingSessionAsync_end, {
                             success: true,
@@ -568,6 +642,7 @@ Please checkout that you are using OIDC hook inside a <OidcProvider configuratio
                         // @ts-ignore
                         this.timeoutId = autoRenewTokens(this, tokens.refreshToken, this.tokens.expiresAt);
                         const sessionState = session.getSessionState();
+                        // @ts-ignore
                         await this.startCheckSessionAsync(oidcServerConfiguration.check_session_iframe, configuration.client_id, sessionState);
                         this.publishEvent(eventNames.tryKeepExistingSessionAsync_end, {
                             success: true,
@@ -621,23 +696,6 @@ Please checkout that you are using OIDC hook inside a <OidcProvider configuratio
 
                 let serviceWorker = await initWorkerAsync(configuration.service_worker_relative_url, this.configurationName);
                 const oidcServerConfiguration = await this.initAsync(configuration.authority, configuration.authority_configuration);
-                /*if (serviceWorker && installServiceWorker) {
-                    const isServiceWorkerProxyActive = await serviceWorker.isServiceWorkerProxyActiveAsync();
-                    if (!isServiceWorkerProxyActive) {
-                        const isUnregistered = await serviceWorker.unregisterAsync();
-                        console.log("isUnregistered")
-                        console.log(isUnregistered)
-                        if(isUnregistered){
-                            serviceWorker = await initWorkerAsync(configuration.service_worker_relative_url, this.configurationName);
-                        }
-                        const extrasQueries = extras != null ? {...extras}: {};
-                        extrasQueries.callbackPath = url;
-                        extrasQueries.state = state;
-                        const queryString = buildQueries(extrasQueries);
-                        window.location.href = `${redirectUri}/service-worker-install${queryString}`;
-                        //return;
-                    }
-                }*/
                 let storage;
                 if (serviceWorker) {
                     serviceWorker.startKeepAliveServiceWorker();
@@ -673,12 +731,11 @@ Please checkout that you are using OIDC hook inside a <OidcProvider configuratio
             this.loginPromise = null;
             return result;
         });
-
     }
     
     async startCheckSessionAsync(checkSessionIFrameUri, clientId, sessionState, isSilentSignin=false){
         return new Promise((resolve:Function, reject) => {
-            if (this.configuration.silent_signin_uri && this.configuration.silent_redirect_uri && this.configuration.monitor_session && checkSessionIFrameUri && sessionState && !isSilentSignin) {
+            if (this.configuration.silent_login_uri && this.configuration.silent_redirect_uri && this.configuration.monitor_session && checkSessionIFrameUri && sessionState && !isSilentSignin) {
                 const checkSessionCallback = () => {
                     this.checkSessionIFrame.stop();
                     
@@ -689,7 +746,7 @@ Please checkout that you are using OIDC hook inside a <OidcProvider configuratio
                     const idToken = this.tokens.idToken;
                     // @ts-ignore
                     const idTokenPayload = this.tokens.idTokenPayload;
-                    this.silentSigninAsync({
+                    this.silentLoginAsync({
                         prompt: "none",
                         id_token_hint: idToken,
                         scope: "openid"
@@ -841,6 +898,7 @@ Please checkout that you are using OIDC hook inside a <OidcProvider configuratio
                                 clearTimeout(timeoutId);
                                 this.timeoutId=null;
                                 const loginParams = getLoginParams(this.configurationName, redirectUri);
+                                // @ts-ignore
                                 this.startCheckSessionAsync(oidcServerConfiguration.check_session_iframe, clientId, sessionState, isSilentSignin).then(() =>{
                                     this.publishEvent(eventNames.loginCallbackAsync_end, {});
                                     resolve({
@@ -871,15 +929,11 @@ Please checkout that you are using OIDC hook inside a <OidcProvider configuratio
     }
 
     async refreshTokensAsync(refreshToken) {
-
-        /*while (document.hidden) {
-            await sleepAsync(1000);
-            this.publishEvent(eventNames.refreshTokensAsync, {message:"wait because document is hidden"});
-        }*/
         
-        const localSilentSigninAsync= async (exception=null) => {
+        const localsilentLoginAsync= async () => {
             try {
-                const silent_token_response = await this.silentSigninAsync();
+                const loginParams = getLoginParams(this.configurationName, configuration.redirect_uri);
+                const silent_token_response = await this.silentLoginAsync(loginParams.extras, loginParams.state);
                 if (silent_token_response) {
                     return silent_token_response.tokens;
                 }
@@ -890,13 +944,10 @@ Please checkout that you are using OIDC hook inside a <OidcProvider configuratio
                 timer.clearTimeout(this.timeoutId);
                 this.timeoutId=null;
             }
-            this.publishEvent(eventNames.refreshTokensAsync_error, exception);
+            this.publishEvent(eventNames.refreshTokensAsync_error, {message: "refresh token and silent refresh failed"});
             return null;
         }
-
-        try{
-            this.publishEvent(eventNames.refreshTokensAsync_begin, {refreshToken:refreshToken});
-            
+        
             const configuration = this.configuration;
             const clientId = configuration.client_id;
             const redirectUri = configuration.redirect_uri;
@@ -904,10 +955,9 @@ Please checkout that you are using OIDC hook inside a <OidcProvider configuratio
             
             if(!refreshToken)
             {
-                return await localSilentSigninAsync();
+                return await localsilentLoginAsync();
             }
             
-
             let extras = {};
             if(configuration.token_request_extras) {
                 for (let [key, value] of Object.entries(configuration.token_request_extras)) {
@@ -915,126 +965,119 @@ Please checkout that you are using OIDC hook inside a <OidcProvider configuratio
                 }
             }
             const oidcServerConfiguration = await this.initAsync(authority, configuration.authority_configuration);
-            
-            /*const tokenHandler = new BaseTokenRequestHandler(new FetchRequestor());
-            // use the token response to make a request for an access token
-            const request = new TokenRequest({
+
+            const details = {
                 client_id: clientId,
                 redirect_uri: redirectUri,
                 grant_type: GRANT_TYPE_REFRESH_TOKEN,
-                code: undefined,
                 refresh_token: refreshToken,
-                extras
-                });
+            };
             
-           
-            const token_response = await tokenHandler.performTokenRequest(oidcServerConfiguration, request);
-            */
-            const performTokenRequestAsync= async (url) => {
-                const details = {
-                    client_id: clientId,
-                    redirect_uri: redirectUri,
-                    grant_type: GRANT_TYPE_REFRESH_TOKEN,
-                    refresh_token: refreshToken,
-                };
-
-                for (let [key, value] of Object.entries(extras)) {
-                    if (details[key] === undefined) {
-                        details[key] = value;
+            let index = 0;
+            while (index <=4) {
+                try {
+                    this.publishEvent(eventNames.refreshTokensAsync_begin, {refreshToken:refreshToken, tryNumber: index});
+                    if(index > 1) {
+                        while (document.hidden) {
+                            await sleepAsync(1000);
+                            this.publishEvent(eventNames.refreshTokensAsync, {message: "wait because document is hidden"});
+                        }
+                        let numberTryOnline = 6;
+                        while (!navigator.onLine && numberTryOnline > 0) {
+                            await sleepAsync(1000);
+                            numberTryOnline--;
+                            this.publishEvent(eventNames.refreshTokensAsync, {message: `wait because navigator is offline try ${numberTryOnline}` });
+                        }
                     }
+                    const tokenResponse = await performTokenRequestAsync(oidcServerConfiguration.tokenEndpoint, details, extras)
+                    if (tokenResponse.success) {
+                        this.publishEvent(eventNames.refreshTokensAsync_end, {success: tokenResponse.success});
+                        return tokenResponse.data;
+                    } else {
+                        this.publishEvent(eventNames.refreshTokensAsync_silent_error, {message: "bad request" , tokenResponse: tokenResponse});
+                        return await localsilentLoginAsync();
+                    }
+                } catch (exception) {
+                    console.error(exception);
+                    this.publishEvent(eventNames.refreshTokensAsync_silent_error, {message: "exception" ,exception: exception.message});
                 }
-
-                let formBody = [];
-                for (const property in details) {
-                    const encodedKey = encodeURIComponent(property);
-                    const encodedValue = encodeURIComponent(details[property]);
-                    formBody.push(`${encodedKey}=${encodedValue}`);
-                }
-                const formBodyString = formBody.join("&");
-
-                const response = await internalFetch(url, {
-                    method: 'POST',
-                    headers: {
-                        'Content-Type': 'application/x-www-form-urlencoded;charset=UTF-8',
-                    },
-                    body: formBodyString,
-                });
-                if(response.status >= 299){
-                    throw new Error("Error refreshing token");
-                }
-                const result = await response.json();
-                return {
-                    accessToken: result.access_token,
-                    expiresIn: result.expires_in,
-                    idToken: result.id_token, 
-                    refreshToken: result.refresh_token,
-                    scope: result.scope,
-                    tokenType: result.token_type,
-                };
+                index++;
             }
-            
-            const tokenResponse = await performTokenRequestAsync(oidcServerConfiguration.tokenEndpoint)
-            
-            this.publishEvent(eventNames.refreshTokensAsync_end,  {message:"success"});
-            return tokenResponse;
-        } catch(exception) {
-            console.error(exception);
-            this.publishEvent(eventNames.refreshTokensAsync_silent_error, exception);
-            return await localSilentSigninAsync(exception);
-        }
+        
      }
 
     syncTokensAsyncPromise=null;
     async syncTokensAsync() {
-        // Service Worker can be killed by the browser (when it wants,for example after 10 seconds of inactivity, so we retreieve the session if it happen)
-        const configuration = this.configuration;
-        if(!this.tokens){
-            return;
-        }
-
-        const oidcServerConfiguration = await this.initAsync(configuration.authority, configuration.authority_configuration);
-        const serviceWorker = await initWorkerAsync(configuration.service_worker_relative_url, this.configurationName);
-        if (serviceWorker) {
-            const { isLogin } = await serviceWorker.initAsync(oidcServerConfiguration, "syncTokensAsync");
-            if(isLogin == false){
-                this.publishEvent(eventNames.logout_from_another_tab, {});
-                await this.destroyAsync();
+        
+        const localSyncTokensAsync = async () => {
+            // Service Worker can be killed by the browser (when it wants,for example after 10 seconds of inactivity, so we retreieve the session if it happen)
+            const configuration = this.configuration;
+            if (!this.tokens) {
+                return null;
             }
-            else if (isLogin == null){
-                try {
-                    this.publishEvent(eventNames.syncTokensAsync_begin, {});
-                    this.syncTokensAsyncPromise = this.silentSigninAsync({prompt:"none"});
-                    const silent_token_response = await this.syncTokensAsyncPromise;
-                    if (silent_token_response && silent_token_response.tokens) {
-                        this.tokens = await setTokensAsync(serviceWorker, silent_token_response.tokens);
-                    } else{
-                        this.publishEvent(eventNames.syncTokensAsync_error, null);
-                        if(this.timeoutId){
+
+            const oidcServerConfiguration = await this.initAsync(configuration.authority, configuration.authority_configuration);
+            const serviceWorker = await initWorkerAsync(configuration.service_worker_relative_url, this.configurationName);
+            if (serviceWorker) {
+                const {isLogin} = await serviceWorker.initAsync(oidcServerConfiguration, "syncTokensAsync");
+                if (isLogin == false) {
+                    this.publishEvent(eventNames.logout_from_another_tab, {});
+                    await this.destroyAsync();
+                    return null;
+                } else if (isLogin == null) {
+                    try {
+                        this.publishEvent(eventNames.syncTokensAsync_begin, {});
+                        const loginParams = getLoginParams(this.configurationName, configuration.redirect_uri);
+                        const silent_token_response = await this.silentLoginAsync({...loginParams.extras,prompt: "none"}, loginParams.state);
+                        if (silent_token_response && silent_token_response.tokens) {
+                            this.tokens = await setTokensAsync(serviceWorker, silent_token_response.tokens);
+                            this.publishEvent(eventNames.syncTokensAsync_end, {});
+                            return this.tokens;
+                        } else {
+                            this.publishEvent(eventNames.syncTokensAsync_error, {message: "no token found in result"});
+                            if (this.timeoutId) {
+                                timer.clearTimeout(this.timeoutId);
+                                this.timeoutId = null;
+                            }
+                            this.publishEvent(eventNames.syncTokensAsync_end, {});
+                            return null;
+                        }
+                    } catch (exceptionSilent) {
+                        console.error(exceptionSilent);
+                        this.publishEvent(eventNames.syncTokensAsync_error, exceptionSilent);
+                        if (this.timeoutId) {
                             timer.clearTimeout(this.timeoutId);
-                            this.timeoutId=null;
+                            this.timeoutId = null;
                         }
-                        return;
+                        this.publishEvent(eventNames.syncTokensAsync_end, {});
+                        return null;
                     }
-                } catch (exceptionSilent) {
-                    console.error(exceptionSilent);
-                    this.publishEvent(eventNames.syncTokensAsync_error, exceptionSilent);
-                    if(this.timeoutId){
-                        timer.clearTimeout(this.timeoutId);
-                        this.timeoutId=null;
-                    }
-                    return;
+
+                }
+            } else {
+                const session = initSession(this.configurationName, configuration.redirect_uri, configuration.storage ?? sessionStorage);
+                const {tokens} = await session.initAsync();
+                if (!tokens) {
+                    this.publishEvent(eventNames.logout_from_another_tab, {});
+                    await this.destroyAsync();
+                    return null;
                 }
-                this.syncTokensAsyncPromise = null;
-                this.publishEvent(eventNames.syncTokensAsync_end, {});
-            }
-        } else {
-            const session = initSession(this.configurationName, configuration.redirect_uri, configuration.storage ?? sessionStorage);
-            const {tokens} = await session.initAsync();
-            if(!tokens){
-                this.publishEvent(eventNames.logout_from_another_tab, {});
-                await this.destroyAsync();
             }
+            return this.tokens;
+        }
+        
+        if(this.syncTokensAsyncPromise){
+            return this.syncTokensAsyncPromise;
         }
+
+        this.syncTokensAsyncPromise = localSyncTokensAsync().then(result =>{
+            if(this.syncTokensAsyncPromise){
+                this.syncTokensAsyncPromise = null;
+            }
+            return result;
+        });
+        
+        return this.syncTokensAsyncPromise
     }