@axa-fr/react-oidc 6.0.0-beta0 → 6.0.0-beta11

package/src/oidc/vanilla/oidc.ts

@@ -21,8 +21,7 @@ import {getParseQueryStringFromLocation} from "./route-utils";
 import {AuthorizationServiceConfigurationJson} from "@openid/appauth/src/authorization_service_configuration";
 
 const performTokenRequestAsync= async (url, details, extras) => {
-
-
+    
     for (let [key, value] of Object.entries(extras)) {
         if (details[key] === undefined) {
             details[key] = value;
@@ -47,15 +46,22 @@ const performTokenRequestAsync= async (url, details, extras) => {
     if(response.status !== 200){
         return {success:false, status: response.status}
     }
-    const result = await response.json();
+    const tokens = await response.json();
+
+    if(!tokens.issued_at) {
+        const currentTimeUnixSecond = new Date().getTime() /1000;
+        tokens.issued_at = currentTimeUnixSecond;
+    }
+    
     return { success : true,
         data : {
-            accessToken: result.access_token,
-            expiresIn: result.expires_in,
-            idToken: result.id_token,
-            refreshToken: result.refresh_token,
-            scope: result.scope,
-            tokenType: result.token_type,
+            accessToken: tokens.access_token,
+            expiresIn: tokens.expires_in,
+            idToken: tokens.id_token,
+            refreshToken: tokens.refresh_token,
+            scope: tokens.scope,
+            tokenType: tokens.token_type,
+            issuedAt: tokens.issued_at
         }
     };
 }
@@ -63,14 +69,13 @@ const performTokenRequestAsync= async (url, details, extras) => {
 const internalFetch = async (url, headers, numberRetry=0) => {
     let response;
     try {
-        response = await Promise.race([
-            fetch(url, headers),
-            new Promise((_, reject) => setTimeout(
-                () => reject(new Error('Timeout')), 10000))]);
+        let controller = new AbortController();
+        setTimeout(() => controller.abort(), 10000);
+        response = await fetch(url, {...headers, signal: controller.signal});
     } catch (e) {
-        if (e.message === 'Timeout'
+        if (e.message === 'AbortError'
             || e.message === 'Network request failed') {
-            if(numberRetry <=2) {
+            if(numberRetry <=1) {
                 return await internalFetch(url, headers, numberRetry + 1);
             } 
             else {
@@ -156,8 +161,8 @@ export interface AuthorityConfiguration {
      client_id: string,
      redirect_uri: string,
      silent_redirect_uri?:string,
-     silent_signin_uri?:string,
-     silent_signin_timeout?:number,
+     silent_login_uri?:string,
+     silent_login_timeout?:number,
      scope: string,
      authority: string,
      authority_time_cache_wellknowurl_in_second?: number,
@@ -211,9 +216,9 @@ const autoRenewTokens = (oidc, refreshToken, expiresAt) => {
                 oidc.timeoutId = autoRenewTokens(oidc, tokens.refreshToken, oidc.tokens.expiresAt);
             }
         } else{
-            await oidc.syncTokensAsync();
-            if(oidc.timeoutId) {
-                oidc.timeoutId = autoRenewTokens(oidc, refreshToken, expiresAt);
+            const tokens = await oidc.syncTokensAsync();
+            if(tokens && oidc.timeoutId) {
+                oidc.timeoutId = autoRenewTokens(oidc, tokens.refreshToken, tokens.expiresAt);
             }
         }
     }, 1000);
@@ -226,7 +231,6 @@ const getLoginParams = (configurationName, redirectUri) => {
     return JSON.parse(sessionStorage[getLoginSessionKey(configurationName, redirectUri)]);
 }
 
-
 const userInfoAsync = async (oidc) => {
     if(oidc.userInfo != null){
         return oidc.userInfo;
@@ -245,7 +249,7 @@ const userInfoAsync = async (oidc) => {
        const res = await fetch(url, {
            headers: {
                authorization: `Bearer ${accessToken}`,
-               credentials: 'same-origin'
+               credentials: 'include'
            }
        });
 
@@ -275,7 +279,10 @@ const setTokensAsync = async (serviceWorker, tokens) =>{
         accessTokenPayload = extractAccessTokenPayload(tokens);
     }
     const _idTokenPayload = idTokenPayload(tokens.idToken);
-    const expiresAt =  (_idTokenPayload && _idTokenPayload.exp) ? _idTokenPayload.exp :  tokens.issuedAt + tokens.expiresIn;
+
+    const idTokenExipreAt =(_idTokenPayload && _idTokenPayload.exp) ? _idTokenPayload.exp: Number.MAX_VALUE;
+    const accessTokenExpiresAt =  (accessTokenPayload && accessTokenPayload.exp)? accessTokenPayload.exp : tokens.issuedAt + tokens.expiresIn;
+    const expiresAt = idTokenExipreAt < accessTokenExpiresAt ? idTokenExipreAt : accessTokenExpiresAt;
     return {...tokens, idTokenPayload: _idTokenPayload, accessTokenPayload, expiresAt};
 }
 
@@ -283,6 +290,7 @@ const eventNames = {
     service_worker_not_supported_by_browser: "service_worker_not_supported_by_browser",
     token_aquired: "token_aquired",
     logout_from_another_tab: "logout_from_another_tab",
+    logout_from_same_tab: "logout_from_same_tab",
     token_renewed: "token_renewed",
     token_timer: "token_timer",
     loginAsync_begin:"loginAsync_begin",
@@ -298,48 +306,50 @@ const eventNames = {
     tryKeepExistingSessionAsync_begin: "tryKeepExistingSessionAsync_begin",
     tryKeepExistingSessionAsync_end: "tryKeepExistingSessionAsync_end",
     tryKeepExistingSessionAsync_error: "tryKeepExistingSessionAsync_error",
-    silentSigninAsync_begin: "silentSigninAsync_begin",
-    silentSigninAsync: "silentSigninAsync",
-    silentSigninAsync_end: "silentSigninAsync_end",
-    silentSigninAsync_error: "silentSigninAsync_error", 
+    silentLoginAsync_begin: "silentLoginAsync_begin",
+    silentLoginAsync: "silentLoginAsync",
+    silentLoginAsync_end: "silentLoginAsync_end",
+    silentLoginAsync_error: "silentLoginAsync_error", 
     syncTokensAsync_begin: "syncTokensAsync_begin",
     syncTokensAsync_end: "syncTokensAsync_end",
     syncTokensAsync_error: "syncTokensAsync_error"
-
 }
 
 const getRandomInt = (max) => {
     return Math.floor(Math.random() * max);
 }
 
-const WELL_KNOWN_PATH = '.well-known';
-const OPENID_CONFIGURATION = 'openid-configuration';
-
-
 const oneHourSecond = 60 * 60;
-const fetchFromIssuer = async (openIdIssuerUrl: string, timeCacheSecond = oneHourSecond):
+let fetchFromIssuerCache = null;
+const fetchFromIssuer = async (openIdIssuerUrl: string, timeCacheSecond = oneHourSecond, storage= window.sessionStorage):
     Promise<OidcAuthorizationServiceConfiguration> => {
-    const fullUrl = `${openIdIssuerUrl}/${WELL_KNOWN_PATH}/${OPENID_CONFIGURATION}`;
+    const fullUrl = `${openIdIssuerUrl}/.well-known/openid-configuration`;
     
     const localStorageKey = `oidc.server:${openIdIssuerUrl}`;
-    const cacheJson = window.localStorage.getItem(localStorageKey);
-    
+    if(!fetchFromIssuerCache && storage) {
+        const cacheJson = storage.getItem(localStorageKey);
+        if(cacheJson){
+            fetchFromIssuerCache = JSON.parse(cacheJson);
+        }
+    }
     const oneHourMinisecond = 1000 * timeCacheSecond;
     // @ts-ignore
-    if(cacheJson && (cacheJson.timestamp + oneHourMinisecond) > Date.now()){
-        return new OidcAuthorizationServiceConfiguration(JSON.parse(cacheJson));
+    if(fetchFromIssuerCache && (fetchFromIssuerCache.timestamp + oneHourMinisecond) > Date.now()){
+        return new OidcAuthorizationServiceConfiguration(fetchFromIssuerCache.result);
     }
-    
     const response = await fetch(fullUrl);
 
     if (response.status != 200) {
         return null;
     }
     
-    
     const result = await response.json();
-    window.localStorage.setItem(localStorageKey, JSON.stringify({result, timestamp:Date.now()}));
     
+    const timestamp = Date.now();
+    fetchFromIssuerCache = {result, timestamp};
+    if(storage) {
+        storage.setItem(localStorageKey, JSON.stringify({result, timestamp}));
+    }
     return new OidcAuthorizationServiceConfiguration(result);
 }
 
@@ -368,7 +378,12 @@ export class Oidc {
     private session?: any;
     private checkSessionIFrame: CheckSessionIFrame;
     constructor(configuration:OidcConfiguration, configurationName="default") {
-      this.configuration = configuration
+        let silent_login_uri = configuration.silent_login_uri;
+        if(configuration.silent_redirect_uri && !configuration.silent_login_uri){
+            silent_login_uri = `${configuration.silent_redirect_uri.replace("-callback", "").replace("callback", "")}-login`; 
+        }
+        
+        this.configuration = {...configuration, silent_login_uri};
         this.configurationName= configurationName;
       this.tokens = null
       this.userInfo = null;
@@ -385,6 +400,9 @@ export class Oidc {
       this.removeEventSubscription.bind(this);
       this.publishEvent.bind(this);
       this.destroyAsync.bind(this);
+      this.logoutAsync.bind(this);
+      
+      this.initAsync(this.configuration.authority, this.configuration.authority_configuration);
     }
 
     subscriveEvents(func){
@@ -416,29 +434,47 @@ Please checkout that you are using OIDC hook inside a <OidcProvider configuratio
     }
     static eventNames = eventNames;
     
-    silentSigninCallbackFromIFrame(){
-        if (this.configuration.silent_redirect_uri && this.configuration.silent_signin_uri) {
+    _silentLoginCallbackFromIFrame(){
+        if (this.configuration.silent_redirect_uri && this.configuration.silent_login_uri) {
             const queryParams = getParseQueryStringFromLocation(window.location.href);
             window.top.postMessage(`${this.configurationName}_oidc_tokens:${JSON.stringify({tokens:this.tokens, sessionState:queryParams.session_state})}`, window.location.origin);
         }
     }
-    silentSigninErrorCallbackFromIFrame(){
-        if (this.configuration.silent_redirect_uri && this.configuration.silent_signin_uri) {
+    _silentLoginErrorCallbackFromIFrame() {
+        if (this.configuration.silent_redirect_uri && this.configuration.silent_login_uri) {
             const queryParams = getParseQueryStringFromLocation(window.location.href);
-            window.top.postMessage(`${this.configurationName}_oidc_error:${JSON.stringify({error:queryParams.error})}`, window.location.origin);
+            window.top.postMessage(`${this.configurationName}_oidc_error:${JSON.stringify({error: queryParams.error})}`, window.location.origin);
+        }
+    }
+    
+    async silentLoginCallBackAsync() {
+        try {
+            await this.loginCallbackAsync(true);
+            this._silentLoginCallbackFromIFrame();
+        } catch (error) {
+            console.error(error)
+            this._silentLoginErrorCallbackFromIFrame();
         }
     }
-    async silentSigninAsync(extras:StringMap=null, state:string=null, scope:string=null) {
-        if (!this.configuration.silent_redirect_uri || !this.configuration.silent_signin_uri) {
+    
+    async silentLoginAsync(extras:StringMap=null, state:string=null, scope:string=null) {
+        if (!this.configuration.silent_redirect_uri || !this.configuration.silent_login_uri) {
             return Promise.resolve(null);
         }
         while (document.hidden) {
             await sleepAsync(1000);
-            this.publishEvent(eventNames.silentSigninAsync, {message:"wait because document is hidden"});
+            this.publishEvent(eventNames.silentLoginAsync, {message:"wait because document is hidden"});
+        }
+
+        let numberTryOnline = 6;
+        while (!navigator.onLine && numberTryOnline > 0) {
+            await sleepAsync(1000);
+            numberTryOnline--;
+            this.publishEvent(eventNames.refreshTokensAsync, {message: `wait because navigator is offline try ${numberTryOnline}` });
         }
             
         try {
-            this.publishEvent(eventNames.silentSigninAsync_begin, {});
+            this.publishEvent(eventNames.silentLoginAsync_begin, {});
             const configuration = this.configuration
             let queries = "";
             
@@ -465,7 +501,7 @@ Please checkout that you are using OIDC hook inside a <OidcProvider configuratio
                     }
                 }
             }
-            const link = configuration.silent_signin_uri  + queries;
+            const link = configuration.silent_login_uri  + queries;
             const idx = link.indexOf("/", link.indexOf("//") + 2);
             const iFrameOrigin = link.substr(0, idx);
             const iframe = document.createElement('iframe');
@@ -490,43 +526,42 @@ Please checkout that you are using OIDC hook inside a <OidcProvider configuratio
                                 if (!isResolved) {
                                     if(data.startsWith(key)) {
                                         const result = JSON.parse(e.data.replace(key, ''));
-                                        self.publishEvent(eventNames.silentSigninAsync_end, {});
+                                        self.publishEvent(eventNames.silentLoginAsync_end, {});
                                         iframe.remove();
                                         isResolved = true;
                                         resolve(result);
                                     }
                                     else if(data.startsWith(key_error)) {
                                         const result = JSON.parse(e.data.replace(key_error, ''));
-                                        self.publishEvent(eventNames.silentSigninAsync_error, result);
+                                        self.publishEvent(eventNames.silentLoginAsync_error, result);
                                         iframe.remove();
                                         isResolved = true;
-                                        reject(result);
+                                        reject(new Error("oidc_"+result.error));
                                     }
                                 }
                             }
                         }
                     };
-                    const silentSigninTimeout = configuration.silent_signin_timeout ?? 12000
+                    const silentSigninTimeout = configuration.silent_login_timeout ?? 12000
                     setTimeout(() => {
                         if (!isResolved) {
-                            self.publishEvent(eventNames.silentSigninAsync_error, "timeout");
+                            self.publishEvent(eventNames.silentLoginAsync_error, {reason: "timeout"});
                             iframe.remove();
                             isResolved = true;
-                            reject("timeout");
+                            reject(new Error("timeout"));
                         }
                     }, silentSigninTimeout);
                 } catch (e) {
                     iframe.remove();
-                    self.publishEvent(eventNames.silentSigninAsync_error, e);
+                    self.publishEvent(eventNames.silentLoginAsync_error, e);
                     reject(e);
                 }
             });
         } catch (e) {
-            this.publishEvent(eventNames.silentSigninAsync_error, e);
+            this.publishEvent(eventNames.silentLoginAsync_error, e);
             throw e;
         }
     }
-    initAsyncPromise = null;
     async initAsync(authority:string, authorityConfiguration:AuthorityConfiguration) {
         if (authorityConfiguration != null) {
             return new OidcAuthorizationServiceConfiguration( {
@@ -538,12 +573,11 @@ Please checkout that you are using OIDC hook inside a <OidcProvider configuratio
                 check_session_iframe:authorityConfiguration.check_session_iframe,
             });
         }
-        if(this.initAsyncPromise){
-            return this.initAsyncPromise;
-        }
-        
-        this.initAsyncPromise = await fetchFromIssuer(authority, this.configuration.authority_time_cache_wellknowurl_in_second ?? 60 * 60);
-        return this.initAsyncPromise;
+
+        const serviceWorker = await initWorkerAsync(this.configuration.service_worker_relative_url, this.configurationName);
+        const storage = serviceWorker ? window.localStorage : null;
+        const initAsyncPromise = await fetchFromIssuer(authority, this.configuration.authority_time_cache_wellknowurl_in_second ?? 60 * 60, storage);
+        return initAsyncPromise;
     }
 
     tryKeepExistingSessionPromise = null;
@@ -573,13 +607,15 @@ Please checkout that you are using OIDC hook inside a <OidcProvider configuratio
                             expiresIn: tokens.expires_in,
                             idToken: tokens.id_token,
                             scope: tokens.scope,
-                            tokenType: tokens.token_type
+                            tokenType: tokens.token_type,
+                            issuedAt: tokens.issued_at
                         }
                         this.tokens = await setTokensAsync(serviceWorker, reformattedToken);
                         this.serviceWorker = serviceWorker;
                         // @ts-ignore
                         this.timeoutId = autoRenewTokens(this, this.tokens.refreshToken, this.tokens.expiresAt);
                         const sessionState = await serviceWorker.getSessionStateAsync();
+                        // @ts-ignore
                         await this.startCheckSessionAsync(oidcServerConfiguration.check_session_iframe, configuration.client_id, sessionState);
                         this.publishEvent(eventNames.tryKeepExistingSessionAsync_end, {
                             success: true,
@@ -607,6 +643,7 @@ Please checkout that you are using OIDC hook inside a <OidcProvider configuratio
                         // @ts-ignore
                         this.timeoutId = autoRenewTokens(this, tokens.refreshToken, this.tokens.expiresAt);
                         const sessionState = session.getSessionState();
+                        // @ts-ignore
                         await this.startCheckSessionAsync(oidcServerConfiguration.check_session_iframe, configuration.client_id, sessionState);
                         this.publishEvent(eventNames.tryKeepExistingSessionAsync_end, {
                             success: true,
@@ -660,23 +697,6 @@ Please checkout that you are using OIDC hook inside a <OidcProvider configuratio
 
                 let serviceWorker = await initWorkerAsync(configuration.service_worker_relative_url, this.configurationName);
                 const oidcServerConfiguration = await this.initAsync(configuration.authority, configuration.authority_configuration);
-                /*if (serviceWorker && installServiceWorker) {
-                    const isServiceWorkerProxyActive = await serviceWorker.isServiceWorkerProxyActiveAsync();
-                    if (!isServiceWorkerProxyActive) {
-                        const isUnregistered = await serviceWorker.unregisterAsync();
-                        console.log("isUnregistered")
-                        console.log(isUnregistered)
-                        if(isUnregistered){
-                            serviceWorker = await initWorkerAsync(configuration.service_worker_relative_url, this.configurationName);
-                        }
-                        const extrasQueries = extras != null ? {...extras}: {};
-                        extrasQueries.callbackPath = url;
-                        extrasQueries.state = state;
-                        const queryString = buildQueries(extrasQueries);
-                        window.location.href = `${redirectUri}/service-worker-install${queryString}`;
-                        //return;
-                    }
-                }*/
                 let storage;
                 if (serviceWorker) {
                     serviceWorker.startKeepAliveServiceWorker();
@@ -712,12 +732,11 @@ Please checkout that you are using OIDC hook inside a <OidcProvider configuratio
             this.loginPromise = null;
             return result;
         });
-
     }
     
     async startCheckSessionAsync(checkSessionIFrameUri, clientId, sessionState, isSilentSignin=false){
         return new Promise((resolve:Function, reject) => {
-            if (this.configuration.silent_signin_uri && this.configuration.silent_redirect_uri && this.configuration.monitor_session && checkSessionIFrameUri && sessionState && !isSilentSignin) {
+            if (this.configuration.silent_login_uri && this.configuration.silent_redirect_uri && this.configuration.monitor_session && checkSessionIFrameUri && sessionState && !isSilentSignin) {
                 const checkSessionCallback = () => {
                     this.checkSessionIFrame.stop();
                     
@@ -728,7 +747,7 @@ Please checkout that you are using OIDC hook inside a <OidcProvider configuratio
                     const idToken = this.tokens.idToken;
                     // @ts-ignore
                     const idTokenPayload = this.tokens.idTokenPayload;
-                    this.silentSigninAsync({
+                    this.silentLoginAsync({
                         prompt: "none",
                         id_token_hint: idToken,
                         scope: "openid"
@@ -747,7 +766,7 @@ Please checkout that you are using OIDC hook inside a <OidcProvider configuratio
                             console.debug("SessionMonitor._callback: Different subject signed into OP:", iFrameIdTokenPayload.sub);
                         }
                     }).catch((e) => {
-                        this.publishEvent(eventNames.logout_from_another_tab, {});
+                        this.publishEvent(eventNames.logout_from_another_tab, {message : "SessionMonitor"});
                         this.destroyAsync();
                     });
                 };
@@ -880,6 +899,7 @@ Please checkout that you are using OIDC hook inside a <OidcProvider configuratio
                                 clearTimeout(timeoutId);
                                 this.timeoutId=null;
                                 const loginParams = getLoginParams(this.configurationName, redirectUri);
+                                // @ts-ignore
                                 this.startCheckSessionAsync(oidcServerConfiguration.check_session_iframe, clientId, sessionState, isSilentSignin).then(() =>{
                                     this.publishEvent(eventNames.loginCallbackAsync_end, {});
                                     resolve({
@@ -911,9 +931,10 @@ Please checkout that you are using OIDC hook inside a <OidcProvider configuratio
 
     async refreshTokensAsync(refreshToken) {
         
-        const localSilentSigninAsync= async () => {
+        const localsilentLoginAsync= async () => {
             try {
-                const silent_token_response = await this.silentSigninAsync();
+                const loginParams = getLoginParams(this.configurationName, configuration.redirect_uri);
+                const silent_token_response = await this.silentLoginAsync(loginParams.extras, loginParams.state);
                 if (silent_token_response) {
                     return silent_token_response.tokens;
                 }
@@ -935,7 +956,7 @@ Please checkout that you are using OIDC hook inside a <OidcProvider configuratio
             
             if(!refreshToken)
             {
-                return await localSilentSigninAsync();
+                return await localsilentLoginAsync();
             }
             
             let extras = {};
@@ -954,7 +975,7 @@ Please checkout that you are using OIDC hook inside a <OidcProvider configuratio
             };
             
             let index = 0;
-            while (index <=2) {
+            while (index <=4) {
                 try {
                     this.publishEvent(eventNames.refreshTokensAsync_begin, {refreshToken:refreshToken, tryNumber: index});
                     if(index > 1) {
@@ -962,6 +983,12 @@ Please checkout that you are using OIDC hook inside a <OidcProvider configuratio
                             await sleepAsync(1000);
                             this.publishEvent(eventNames.refreshTokensAsync, {message: "wait because document is hidden"});
                         }
+                        let numberTryOnline = 6;
+                        while (!navigator.onLine && numberTryOnline > 0) {
+                            await sleepAsync(1000);
+                            numberTryOnline--;
+                            this.publishEvent(eventNames.refreshTokensAsync, {message: `wait because navigator is offline try ${numberTryOnline}` });
+                        }
                     }
                     const tokenResponse = await performTokenRequestAsync(oidcServerConfiguration.tokenEndpoint, details, extras)
                     if (tokenResponse.success) {
@@ -969,11 +996,11 @@ Please checkout that you are using OIDC hook inside a <OidcProvider configuratio
                         return tokenResponse.data;
                     } else {
                         this.publishEvent(eventNames.refreshTokensAsync_silent_error, {message: "bad request" , tokenResponse: tokenResponse});
-                        return await localSilentSigninAsync();
+                        return await localsilentLoginAsync();
                     }
                 } catch (exception) {
                     console.error(exception);
-                    this.publishEvent(eventNames.refreshTokensAsync_silent_error, {message: "exception" ,exception: exception});
+                    this.publishEvent(eventNames.refreshTokensAsync_silent_error, {message: "exception" ,exception: exception.message});
                 }
                 index++;
             }
@@ -982,55 +1009,75 @@ Please checkout that you are using OIDC hook inside a <OidcProvider configuratio
 
     syncTokensAsyncPromise=null;
     async syncTokensAsync() {
-        // Service Worker can be killed by the browser (when it wants,for example after 10 seconds of inactivity, so we retreieve the session if it happen)
-        const configuration = this.configuration;
-        if(!this.tokens){
-            return;
-        }
-
-        const oidcServerConfiguration = await this.initAsync(configuration.authority, configuration.authority_configuration);
-        const serviceWorker = await initWorkerAsync(configuration.service_worker_relative_url, this.configurationName);
-        if (serviceWorker) {
-            const { isLogin } = await serviceWorker.initAsync(oidcServerConfiguration, "syncTokensAsync");
-            if(isLogin == false){
-                this.publishEvent(eventNames.logout_from_another_tab, {});
-                await this.destroyAsync();
+        
+        const localSyncTokensAsync = async () => {
+            // Service Worker can be killed by the browser (when it wants,for example after 10 seconds of inactivity, so we retreieve the session if it happen)
+            const configuration = this.configuration;
+            if (!this.tokens) {
+                return null;
             }
-            else if (isLogin == null){
-                try {
-                    this.publishEvent(eventNames.syncTokensAsync_begin, {});
-                    this.syncTokensAsyncPromise = this.silentSigninAsync({prompt:"none"});
-                    const silent_token_response = await this.syncTokensAsyncPromise;
-                    if (silent_token_response && silent_token_response.tokens) {
-                        this.tokens = await setTokensAsync(serviceWorker, silent_token_response.tokens);
-                    } else{
-                        this.publishEvent(eventNames.syncTokensAsync_error, {message:"no token found in result"});
-                        if(this.timeoutId){
+
+            const oidcServerConfiguration = await this.initAsync(configuration.authority, configuration.authority_configuration);
+            const serviceWorker = await initWorkerAsync(configuration.service_worker_relative_url, this.configurationName);
+            if (serviceWorker) {
+                const {isLogin} = await serviceWorker.initAsync(oidcServerConfiguration, "syncTokensAsync");
+                if (isLogin == false) {
+                    this.publishEvent(eventNames.logout_from_another_tab, {"message": "service worker syncTokensAsync"});
+                    await this.destroyAsync();
+                    return null;
+                } else if (isLogin == null) {
+                    try {
+                        this.publishEvent(eventNames.syncTokensAsync_begin, {});
+                        const loginParams = getLoginParams(this.configurationName, configuration.redirect_uri);
+                        const silent_token_response = await this.silentLoginAsync({...loginParams.extras,prompt: "none"}, loginParams.state);
+                        if (silent_token_response && silent_token_response.tokens) {
+                            this.tokens = await setTokensAsync(serviceWorker, silent_token_response.tokens);
+                            this.publishEvent(eventNames.syncTokensAsync_end, {});
+                            return this.tokens;
+                        } else {
+                            this.publishEvent(eventNames.syncTokensAsync_error, {message: "no token found in result"});
+                            if (this.timeoutId) {
+                                timer.clearTimeout(this.timeoutId);
+                                this.timeoutId = null;
+                            }
+                            this.publishEvent(eventNames.syncTokensAsync_end, {});
+                            return null;
+                        }
+                    } catch (exceptionSilent) {
+                        console.error(exceptionSilent);
+                        this.publishEvent(eventNames.syncTokensAsync_error, exceptionSilent);
+                        if (this.timeoutId) {
                             timer.clearTimeout(this.timeoutId);
-                            this.timeoutId=null;
+                            this.timeoutId = null;
                         }
-                        return;
-                    }
-                } catch (exceptionSilent) {
-                    console.error(exceptionSilent);
-                    this.publishEvent(eventNames.syncTokensAsync_error, exceptionSilent);
-                    if(this.timeoutId){
-                        timer.clearTimeout(this.timeoutId);
-                        this.timeoutId=null;
+                        this.publishEvent(eventNames.syncTokensAsync_end, {});
+                        return null;
                     }
-                    return;
                 }
-                this.syncTokensAsyncPromise = null;
-                this.publishEvent(eventNames.syncTokensAsync_end, {});
-            }
-        } else {
-            const session = initSession(this.configurationName, configuration.redirect_uri, configuration.storage ?? sessionStorage);
-            const {tokens} = await session.initAsync();
-            if(!tokens){
-                this.publishEvent(eventNames.logout_from_another_tab, {});
-                await this.destroyAsync();
+            } else {
+                const session = initSession(this.configurationName, configuration.redirect_uri, configuration.storage ?? sessionStorage);
+                const {tokens} = await session.initAsync();
+                if (!tokens) {
+                    this.publishEvent(eventNames.logout_from_another_tab, {"message": "session syncTokensAsync"});
+                    await this.destroyAsync();
+                    return null;
+                }
             }
+            return this.tokens;
+        }
+        
+        if(this.syncTokensAsyncPromise){
+            return this.syncTokensAsyncPromise;
         }
+
+        this.syncTokensAsyncPromise = localSyncTokensAsync().then(result =>{
+            if(this.syncTokensAsyncPromise){
+                this.syncTokensAsyncPromise = null;
+            }
+            return result;
+        });
+        
+        return this.syncTokensAsyncPromise
     }
 
 
@@ -1065,7 +1112,14 @@ Please checkout that you are using OIDC hook inside a <OidcProvider configuratio
          this.tokens = null;
          this.userInfo = null;
          this.events = [];
-         
+     }
+     
+     async logoutSameTabAsync(sub){
+         // @ts-ignore
+         if(this.configuration.monitor_session && sub && this.tokens && this.tokens.idTokenPayload && this.tokens.idTokenPayload.sub === sub) {
+             this.publishEvent(eventNames.logout_from_same_tab, {"message": sub});
+             await this.destroyAsync();
+         }
      }
      
     async logoutAsync(callbackPathOrUrl: string | undefined = undefined, extras: StringMap = null) {
@@ -1084,7 +1138,16 @@ Please checkout that you are using OIDC hook inside a <OidcProvider configuratio
 		const url = isUri ? callbackPathOrUrl : window.location.origin + path;
         // @ts-ignore
         const idToken = this.tokens ? this.tokens.idToken : "";
-        await this.destroyAsync();  
+        // @ts-ignore
+        const sub = this.tokens && this.tokens.idTokenPayload ? this.tokens.idTokenPayload.sub : null;
+        await this.destroyAsync();
+        for (const [key, oidc] of Object.entries(oidcDatabase)) {
+            if(oidc !== this) {
+                // @ts-ignore
+                await oidc.logoutSameTabAsync(sub);
+            }
+        }
+        
         if(oidcServerConfiguration.endSessionEndpoint) {
             let extraQueryString = "";
             if(extras){

package/dist/core/default-component/ServiceWorkerInstall.component.d.ts

@@ -1,4 +0,0 @@
-import { ComponentType } from 'react';
-declare const ServiceWorkerInstall: ComponentType<any>;
-export default ServiceWorkerInstall;
-//# sourceMappingURL=ServiceWorkerInstall.component.d.ts.map

package/dist/core/default-component/ServiceWorkerInstall.component.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"ServiceWorkerInstall.component.d.ts","sourceRoot":"","sources":["../../../src/oidc/core/default-component/ServiceWorkerInstall.component.tsx"],"names":[],"mappings":"AAAA,OAAc,EAAsB,aAAa,EAAC,MAAM,OAAO,CAAC;AAMhE,QAAA,MAAM,oBAAoB,EAAE,aAAa,CAAC,GAAG,CAmD5C,CAAC;AAEF,eAAe,oBAAoB,CAAC"}