@axa-fr/react-oidc 6.0.0-beta1 → 6.0.0-beta12

package/dist/vanilla/oidc.js

@@ -75,7 +75,7 @@ var timer_1 = __importDefault(require("./timer"));
 var checkSessionIFrame_1 = require("./checkSessionIFrame");
 var route_utils_1 = require("./route-utils");
 var performTokenRequestAsync = function (url, details, extras) { return __awaiter(void 0, void 0, void 0, function () {
-    var _i, _a, _b, key, value, formBody, property, encodedKey, encodedValue, formBodyString, response, result;
+    var _i, _a, _b, key, value, formBody, property, encodedKey, encodedValue, formBodyString, response, tokens, currentTimeUnixSecond;
     return __generator(this, function (_c) {
         switch (_c.label) {
             case 0:
@@ -106,15 +106,20 @@ var performTokenRequestAsync = function (url, details, extras) { return __awaite
                 }
                 return [4 /*yield*/, response.json()];
             case 2:
-                result = _c.sent();
+                tokens = _c.sent();
+                if (!tokens.issued_at) {
+                    currentTimeUnixSecond = new Date().getTime() / 1000;
+                    tokens.issued_at = currentTimeUnixSecond;
+                }
                 return [2 /*return*/, { success: true,
                         data: {
-                            accessToken: result.access_token,
-                            expiresIn: result.expires_in,
-                            idToken: result.id_token,
-                            refreshToken: result.refresh_token,
-                            scope: result.scope,
-                            tokenType: result.token_type,
+                            accessToken: tokens.access_token,
+                            expiresIn: tokens.expires_in,
+                            idToken: tokens.id_token,
+                            refreshToken: tokens.refresh_token,
+                            scope: tokens.scope,
+                            tokenType: tokens.token_type,
+                            issuedAt: tokens.issued_at
                         }
                     }];
         }
@@ -218,7 +223,7 @@ var autoRenewTokens = function (oidc, refreshToken, expiresAt) {
     var _a;
     var refreshTimeBeforeTokensExpirationInSecond = (_a = oidc.configuration.refresh_time_before_tokens_expiration_in_second) !== null && _a !== void 0 ? _a : 60;
     return timer_1.default.setTimeout(function () { return __awaiter(void 0, void 0, void 0, function () {
-        var currentTimeUnixSecond, timeInfo, tokens, _a;
+        var currentTimeUnixSecond, timeInfo, tokens, _a, tokens;
         return __generator(this, function (_b) {
             switch (_b.label) {
                 case 0:
@@ -253,9 +258,9 @@ var autoRenewTokens = function (oidc, refreshToken, expiresAt) {
                     return [3 /*break*/, 7];
                 case 5: return [4 /*yield*/, oidc.syncTokensAsync()];
                 case 6:
-                    _b.sent();
-                    if (oidc.timeoutId) {
-                        oidc.timeoutId = autoRenewTokens(oidc, refreshToken, expiresAt);
+                    tokens = _b.sent();
+                    if (tokens && oidc.timeoutId) {
+                        oidc.timeoutId = autoRenewTokens(oidc, tokens.refreshToken, tokens.expiresAt);
                     }
                     _b.label = 7;
                 case 7: return [2 /*return*/];
@@ -298,7 +303,7 @@ var userInfoAsync = function (oidc) { return __awaiter(void 0, void 0, void 0, f
                             case 0: return [4 /*yield*/, fetch(url, {
                                     headers: {
                                         authorization: "Bearer ".concat(accessToken),
-                                        credentials: 'same-origin'
+                                        credentials: 'include'
                                     }
                                 })];
                             case 1:
@@ -319,7 +324,7 @@ var userInfoAsync = function (oidc) { return __awaiter(void 0, void 0, void 0, f
     });
 }); };
 var setTokensAsync = function (serviceWorker, tokens) { return __awaiter(void 0, void 0, void 0, function () {
-    var accessTokenPayload, _idTokenPayload, expiresAt;
+    var accessTokenPayload, _idTokenPayload, idTokenExipreAt, accessTokenExpiresAt, expiresAt;
     return __generator(this, function (_a) {
         switch (_a.label) {
             case 0:
@@ -341,7 +346,9 @@ var setTokensAsync = function (serviceWorker, tokens) { return __awaiter(void 0,
                 _a.label = 6;
             case 6:
                 _idTokenPayload = idTokenPayload(tokens.idToken);
-                expiresAt = (_idTokenPayload && _idTokenPayload.exp) ? _idTokenPayload.exp : tokens.issuedAt + tokens.expiresIn;
+                idTokenExipreAt = (_idTokenPayload && _idTokenPayload.exp) ? _idTokenPayload.exp : Number.MAX_VALUE;
+                accessTokenExpiresAt = (accessTokenPayload && accessTokenPayload.exp) ? accessTokenPayload.exp : tokens.issuedAt + tokens.expiresIn;
+                expiresAt = idTokenExipreAt < accessTokenExpiresAt ? idTokenExipreAt : accessTokenExpiresAt;
                 return [2 /*return*/, __assign(__assign({}, tokens), { idTokenPayload: _idTokenPayload, accessTokenPayload: accessTokenPayload, expiresAt: expiresAt })];
         }
     });
@@ -350,6 +357,7 @@ var eventNames = {
     service_worker_not_supported_by_browser: "service_worker_not_supported_by_browser",
     token_aquired: "token_aquired",
     logout_from_another_tab: "logout_from_another_tab",
+    logout_from_same_tab: "logout_from_same_tab",
     token_renewed: "token_renewed",
     token_timer: "token_timer",
     loginAsync_begin: "loginAsync_begin",
@@ -376,23 +384,28 @@ var eventNames = {
 var getRandomInt = function (max) {
     return Math.floor(Math.random() * max);
 };
-var WELL_KNOWN_PATH = '.well-known';
-var OPENID_CONFIGURATION = 'openid-configuration';
 var oneHourSecond = 60 * 60;
-var fetchFromIssuer = function (openIdIssuerUrl, timeCacheSecond) {
+var fetchFromIssuerCache = null;
+var fetchFromIssuer = function (openIdIssuerUrl, timeCacheSecond, storage) {
     if (timeCacheSecond === void 0) { timeCacheSecond = oneHourSecond; }
+    if (storage === void 0) { storage = window.sessionStorage; }
     return __awaiter(void 0, void 0, void 0, function () {
-        var fullUrl, localStorageKey, cacheJson, oneHourMinisecond, response, result;
+        var fullUrl, localStorageKey, cacheJson, oneHourMinisecond, response, result, timestamp;
         return __generator(this, function (_a) {
             switch (_a.label) {
                 case 0:
-                    fullUrl = "".concat(openIdIssuerUrl, "/").concat(WELL_KNOWN_PATH, "/").concat(OPENID_CONFIGURATION);
+                    fullUrl = "".concat(openIdIssuerUrl, "/.well-known/openid-configuration");
                     localStorageKey = "oidc.server:".concat(openIdIssuerUrl);
-                    cacheJson = window.sessionStorage.getItem(localStorageKey);
+                    if (!fetchFromIssuerCache && storage) {
+                        cacheJson = storage.getItem(localStorageKey);
+                        if (cacheJson) {
+                            fetchFromIssuerCache = JSON.parse(cacheJson);
+                        }
+                    }
                     oneHourMinisecond = 1000 * timeCacheSecond;
                     // @ts-ignore
-                    if (cacheJson && (cacheJson.timestamp + oneHourMinisecond) > Date.now()) {
-                        return [2 /*return*/, new OidcAuthorizationServiceConfiguration(JSON.parse(cacheJson))];
+                    if (fetchFromIssuerCache && (fetchFromIssuerCache.timestamp + oneHourMinisecond) > Date.now()) {
+                        return [2 /*return*/, new OidcAuthorizationServiceConfiguration(fetchFromIssuerCache.result)];
                     }
                     return [4 /*yield*/, fetch(fullUrl)];
                 case 1:
@@ -403,7 +416,11 @@ var fetchFromIssuer = function (openIdIssuerUrl, timeCacheSecond) {
                     return [4 /*yield*/, response.json()];
                 case 2:
                     result = _a.sent();
-                    window.sessionStorage.setItem(localStorageKey, JSON.stringify({ result: result, timestamp: Date.now() }));
+                    timestamp = Date.now();
+                    fetchFromIssuerCache = { result: result, timestamp: timestamp };
+                    if (storage) {
+                        storage.setItem(localStorageKey, JSON.stringify({ result: result, timestamp: timestamp }));
+                    }
                     return [2 /*return*/, new OidcAuthorizationServiceConfiguration(result)];
             }
         });
@@ -427,13 +444,16 @@ var buildQueries = function (extras) {
 var Oidc = /** @class */ (function () {
     function Oidc(configuration, configurationName) {
         if (configurationName === void 0) { configurationName = "default"; }
-        this.initAsyncPromise = null;
         this.tryKeepExistingSessionPromise = null;
         this.loginPromise = null;
         this.loginCallbackPromise = null;
         this.syncTokensAsyncPromise = null;
         this.loginCallbackWithAutoTokensRenewPromise = null;
-        this.configuration = configuration;
+        var silent_login_uri = configuration.silent_login_uri;
+        if (configuration.silent_redirect_uri && !configuration.silent_login_uri) {
+            silent_login_uri = "".concat(configuration.silent_redirect_uri.replace("-callback", "").replace("callback", ""), "-login");
+        }
+        this.configuration = __assign(__assign({}, configuration), { silent_login_uri: silent_login_uri });
         this.configurationName = configurationName;
         this.tokens = null;
         this.userInfo = null;
@@ -451,6 +471,7 @@ var Oidc = /** @class */ (function () {
         this.publishEvent.bind(this);
         this.destroyAsync.bind(this);
         this.logoutAsync.bind(this);
+        this.initAsync(this.configuration.authority, this.configuration.authority_configuration);
     }
     Oidc.prototype.subscriveEvents = function (func) {
         var id = getRandomInt(9999999999999).toString();
@@ -478,24 +499,46 @@ var Oidc = /** @class */ (function () {
         }
         return oidcDatabase[name];
     };
-    Oidc.prototype.silentLoginCallbackFromIFrame = function () {
+    Oidc.prototype._silentLoginCallbackFromIFrame = function () {
         if (this.configuration.silent_redirect_uri && this.configuration.silent_login_uri) {
             var queryParams = (0, route_utils_1.getParseQueryStringFromLocation)(window.location.href);
             window.top.postMessage("".concat(this.configurationName, "_oidc_tokens:").concat(JSON.stringify({ tokens: this.tokens, sessionState: queryParams.session_state })), window.location.origin);
         }
     };
-    Oidc.prototype.silentLoginErrorCallbackFromIFrame = function () {
+    Oidc.prototype._silentLoginErrorCallbackFromIFrame = function () {
         if (this.configuration.silent_redirect_uri && this.configuration.silent_login_uri) {
             var queryParams = (0, route_utils_1.getParseQueryStringFromLocation)(window.location.href);
             window.top.postMessage("".concat(this.configurationName, "_oidc_error:").concat(JSON.stringify({ error: queryParams.error })), window.location.origin);
         }
     };
+    Oidc.prototype.silentLoginCallBackAsync = function () {
+        return __awaiter(this, void 0, void 0, function () {
+            var error_1;
+            return __generator(this, function (_a) {
+                switch (_a.label) {
+                    case 0:
+                        _a.trys.push([0, 2, , 3]);
+                        return [4 /*yield*/, this.loginCallbackAsync(true)];
+                    case 1:
+                        _a.sent();
+                        this._silentLoginCallbackFromIFrame();
+                        return [3 /*break*/, 3];
+                    case 2:
+                        error_1 = _a.sent();
+                        console.error(error_1);
+                        this._silentLoginErrorCallbackFromIFrame();
+                        return [3 /*break*/, 3];
+                    case 3: return [2 /*return*/];
+                }
+            });
+        });
+    };
     Oidc.prototype.silentLoginAsync = function (extras, state, scope) {
         if (extras === void 0) { extras = null; }
         if (state === void 0) { state = null; }
         if (scope === void 0) { scope = null; }
         return __awaiter(this, void 0, void 0, function () {
-            var configuration_1, queries, _i, _a, _b, key, value, link, idx, iFrameOrigin_1, iframe_1, self_1;
+            var numberTryOnline, configuration_1, queries, _i, _a, _b, key, value, link, idx, iFrameOrigin_1, iframe_1, self_1;
             return __generator(this, function (_c) {
                 switch (_c.label) {
                     case 0:
@@ -511,6 +554,17 @@ var Oidc = /** @class */ (function () {
                         this.publishEvent(eventNames.silentLoginAsync, { message: "wait because document is hidden" });
                         return [3 /*break*/, 1];
                     case 3:
+                        numberTryOnline = 6;
+                        _c.label = 4;
+                    case 4:
+                        if (!(!navigator.onLine && numberTryOnline > 0)) return [3 /*break*/, 6];
+                        return [4 /*yield*/, (0, initWorker_1.sleepAsync)(1000)];
+                    case 5:
+                        _c.sent();
+                        numberTryOnline--;
+                        this.publishEvent(eventNames.refreshTokensAsync, { message: "wait because navigator is offline try ".concat(numberTryOnline) });
+                        return [3 /*break*/, 4];
+                    case 6:
                         try {
                             this.publishEvent(eventNames.silentLoginAsync_begin, {});
                             configuration_1 = this.configuration;
@@ -572,7 +626,7 @@ var Oidc = /** @class */ (function () {
                                                             self_1.publishEvent(eventNames.silentLoginAsync_error, result);
                                                             iframe_1.remove();
                                                             isResolved_1 = true;
-                                                            reject(result);
+                                                            reject(new Error("oidc_" + result.error));
                                                         }
                                                     }
                                                 }
@@ -581,10 +635,10 @@ var Oidc = /** @class */ (function () {
                                         var silentSigninTimeout = (_a = configuration_1.silent_login_timeout) !== null && _a !== void 0 ? _a : 12000;
                                         setTimeout(function () {
                                             if (!isResolved_1) {
-                                                self_1.publishEvent(eventNames.silentLoginAsync_error, "timeout");
+                                                self_1.publishEvent(eventNames.silentLoginAsync_error, { reason: "timeout" });
                                                 iframe_1.remove();
                                                 isResolved_1 = true;
-                                                reject("timeout");
+                                                reject(new Error("timeout"));
                                             }
                                         }, silentSigninTimeout);
                                     }
@@ -607,9 +661,9 @@ var Oidc = /** @class */ (function () {
     Oidc.prototype.initAsync = function (authority, authorityConfiguration) {
         var _a;
         return __awaiter(this, void 0, void 0, function () {
-            var _b;
-            return __generator(this, function (_c) {
-                switch (_c.label) {
+            var serviceWorker, storage, initAsyncPromise;
+            return __generator(this, function (_b) {
+                switch (_b.label) {
                     case 0:
                         if (authorityConfiguration != null) {
                             return [2 /*return*/, new OidcAuthorizationServiceConfiguration({
@@ -621,14 +675,14 @@ var Oidc = /** @class */ (function () {
                                     check_session_iframe: authorityConfiguration.check_session_iframe,
                                 })];
                         }
-                        if (this.initAsyncPromise) {
-                            return [2 /*return*/, this.initAsyncPromise];
-                        }
-                        _b = this;
-                        return [4 /*yield*/, fetchFromIssuer(authority, (_a = this.configuration.authority_time_cache_wellknowurl_in_second) !== null && _a !== void 0 ? _a : 60 * 60)];
+                        return [4 /*yield*/, (0, initWorker_1.initWorkerAsync)(this.configuration.service_worker_relative_url, this.configurationName)];
                     case 1:
-                        _b.initAsyncPromise = _c.sent();
-                        return [2 /*return*/, this.initAsyncPromise];
+                        serviceWorker = _b.sent();
+                        storage = serviceWorker ? window.localStorage : null;
+                        return [4 /*yield*/, fetchFromIssuer(authority, (_a = this.configuration.authority_time_cache_wellknowurl_in_second) !== null && _a !== void 0 ? _a : 60 * 60, storage)];
+                    case 2:
+                        initAsyncPromise = _b.sent();
+                        return [2 /*return*/, initAsyncPromise];
                 }
             });
         });
@@ -673,7 +727,8 @@ var Oidc = /** @class */ (function () {
                                     expiresIn: tokens.expires_in,
                                     idToken: tokens.id_token,
                                     scope: tokens.scope,
-                                    tokenType: tokens.token_type
+                                    tokenType: tokens.token_type,
+                                    issuedAt: tokens.issued_at
                                 };
                                 _a = this;
                                 return [4 /*yield*/, setTokensAsync(serviceWorker, reformattedToken)];
@@ -685,8 +740,10 @@ var Oidc = /** @class */ (function () {
                                 return [4 /*yield*/, serviceWorker.getSessionStateAsync()];
                             case 6:
                                 sessionState = _d.sent();
+                                // @ts-ignore
                                 return [4 /*yield*/, this.startCheckSessionAsync(oidcServerConfiguration.check_session_iframe, configuration.client_id, sessionState)];
                             case 7:
+                                // @ts-ignore
                                 _d.sent();
                                 this.publishEvent(eventNames.tryKeepExistingSessionAsync_end, {
                                     success: true,
@@ -721,8 +778,10 @@ var Oidc = /** @class */ (function () {
                                 // @ts-ignore
                                 this.timeoutId = autoRenewTokens(this, tokens.refreshToken, this.tokens.expiresAt);
                                 sessionState = session.getSessionState();
+                                // @ts-ignore
                                 return [4 /*yield*/, this.startCheckSessionAsync(oidcServerConfiguration.check_session_iframe, configuration.client_id, sessionState)];
                             case 12:
+                                // @ts-ignore
                                 _d.sent();
                                 this.publishEvent(eventNames.tryKeepExistingSessionAsync_end, {
                                     success: true,
@@ -875,10 +934,31 @@ var Oidc = /** @class */ (function () {
                                     else {
                                         console.debug("SessionMonitor._callback: Different subject signed into OP:", iFrameIdTokenPayload.sub);
                                     }
-                                }).catch(function (e) {
-                                    _this.publishEvent(eventNames.logout_from_another_tab, {});
-                                    _this.destroyAsync();
-                                });
+                                }).catch(function (e) { return __awaiter(_this, void 0, void 0, function () {
+                                    var _i, _a, _b, key, oidc;
+                                    return __generator(this, function (_c) {
+                                        switch (_c.label) {
+                                            case 0:
+                                                _i = 0, _a = Object.entries(oidcDatabase);
+                                                _c.label = 1;
+                                            case 1:
+                                                if (!(_i < _a.length)) return [3 /*break*/, 4];
+                                                _b = _a[_i], key = _b[0], oidc = _b[1];
+                                                //if(oidc !== this) {
+                                                // @ts-ignore
+                                                return [4 /*yield*/, oidc.logoutOtherTabAsync(idTokenPayload.sub)];
+                                            case 2:
+                                                //if(oidc !== this) {
+                                                // @ts-ignore
+                                                _c.sent();
+                                                _c.label = 3;
+                                            case 3:
+                                                _i++;
+                                                return [3 /*break*/, 1];
+                                            case 4: return [2 /*return*/];
+                                        }
+                                    });
+                                }); });
                             };
                             _this.checkSessionIFrame = new checkSessionIFrame_1.CheckSessionIFrame(checkSessionCallback, clientId, checkSessionIFrameUri);
                             _this.checkSessionIFrame.load().then(function () {
@@ -1045,6 +1125,7 @@ var Oidc = /** @class */ (function () {
                                             clearTimeout(timeoutId);
                                             _this.timeoutId = null;
                                             var loginParams_1 = getLoginParams(_this.configurationName, redirectUri_1);
+                                            // @ts-ignore
                                             _this.startCheckSessionAsync(oidcServerConfiguration_1.check_session_iframe, clientId_1, sessionState_2, isSilentSignin).then(function () {
                                                 _this.publishEvent(eventNames.loginCallbackAsync_end, {});
                                                 resolve({
@@ -1080,18 +1161,19 @@ var Oidc = /** @class */ (function () {
     };
     Oidc.prototype.refreshTokensAsync = function (refreshToken) {
         return __awaiter(this, void 0, void 0, function () {
-            var localsilentLoginAsync, configuration, clientId, redirectUri, authority, extras, _i, _a, _b, key, value, oidcServerConfiguration, details, index, tokenResponse, exception_4;
+            var localsilentLoginAsync, configuration, clientId, redirectUri, authority, extras, _i, _a, _b, key, value, oidcServerConfiguration, details, index, numberTryOnline, tokenResponse, exception_4;
             var _this = this;
             return __generator(this, function (_c) {
                 switch (_c.label) {
                     case 0:
                         localsilentLoginAsync = function () { return __awaiter(_this, void 0, void 0, function () {
-                            var silent_token_response, exceptionSilent_1;
+                            var loginParams, silent_token_response, exceptionSilent_1;
                             return __generator(this, function (_a) {
                                 switch (_a.label) {
                                     case 0:
                                         _a.trys.push([0, 2, , 3]);
-                                        return [4 /*yield*/, this.silentLoginAsync()];
+                                        loginParams = getLoginParams(this.configurationName, configuration.redirect_uri);
+                                        return [4 /*yield*/, this.silentLoginAsync(loginParams.extras, loginParams.state)];
                                     case 1:
                                         silent_token_response = _a.sent();
                                         if (silent_token_response) {
@@ -1139,12 +1221,12 @@ var Oidc = /** @class */ (function () {
                         index = 0;
                         _c.label = 4;
                     case 4:
-                        if (!(index <= 2)) return [3 /*break*/, 15];
+                        if (!(index <= 4)) return [3 /*break*/, 18];
                         _c.label = 5;
                     case 5:
-                        _c.trys.push([5, 13, , 14]);
+                        _c.trys.push([5, 16, , 17]);
                         this.publishEvent(eventNames.refreshTokensAsync_begin, { refreshToken: refreshToken, tryNumber: index });
-                        if (!(index > 1)) return [3 /*break*/, 8];
+                        if (!(index > 1)) return [3 /*break*/, 11];
                         _c.label = 6;
                     case 6:
                         if (!document.hidden) return [3 /*break*/, 8];
@@ -1153,108 +1235,134 @@ var Oidc = /** @class */ (function () {
                         _c.sent();
                         this.publishEvent(eventNames.refreshTokensAsync, { message: "wait because document is hidden" });
                         return [3 /*break*/, 6];
-                    case 8: return [4 /*yield*/, performTokenRequestAsync(oidcServerConfiguration.tokenEndpoint, details, extras)];
+                    case 8:
+                        numberTryOnline = 6;
+                        _c.label = 9;
                     case 9:
+                        if (!(!navigator.onLine && numberTryOnline > 0)) return [3 /*break*/, 11];
+                        return [4 /*yield*/, (0, initWorker_1.sleepAsync)(1000)];
+                    case 10:
+                        _c.sent();
+                        numberTryOnline--;
+                        this.publishEvent(eventNames.refreshTokensAsync, { message: "wait because navigator is offline try ".concat(numberTryOnline) });
+                        return [3 /*break*/, 9];
+                    case 11: return [4 /*yield*/, performTokenRequestAsync(oidcServerConfiguration.tokenEndpoint, details, extras)];
+                    case 12:
                         tokenResponse = _c.sent();
-                        if (!tokenResponse.success) return [3 /*break*/, 10];
+                        if (!tokenResponse.success) return [3 /*break*/, 13];
                         this.publishEvent(eventNames.refreshTokensAsync_end, { success: tokenResponse.success });
                         return [2 /*return*/, tokenResponse.data];
-                    case 10:
+                    case 13:
                         this.publishEvent(eventNames.refreshTokensAsync_silent_error, { message: "bad request", tokenResponse: tokenResponse });
                         return [4 /*yield*/, localsilentLoginAsync()];
-                    case 11: return [2 /*return*/, _c.sent()];
-                    case 12: return [3 /*break*/, 14];
-                    case 13:
+                    case 14: return [2 /*return*/, _c.sent()];
+                    case 15: return [3 /*break*/, 17];
+                    case 16:
                         exception_4 = _c.sent();
                         console.error(exception_4);
                         this.publishEvent(eventNames.refreshTokensAsync_silent_error, { message: "exception", exception: exception_4.message });
-                        return [3 /*break*/, 14];
-                    case 14:
+                        return [3 /*break*/, 17];
+                    case 17:
                         index++;
                         return [3 /*break*/, 4];
-                    case 15: return [2 /*return*/];
+                    case 18: return [2 /*return*/];
                 }
             });
         });
     };
     Oidc.prototype.syncTokensAsync = function () {
-        var _a;
         return __awaiter(this, void 0, void 0, function () {
-            var configuration, oidcServerConfiguration, serviceWorker, isLogin, silent_token_response, _b, exceptionSilent_2, session, tokens;
-            return __generator(this, function (_c) {
-                switch (_c.label) {
-                    case 0:
-                        configuration = this.configuration;
-                        if (!this.tokens) {
-                            return [2 /*return*/];
-                        }
-                        return [4 /*yield*/, this.initAsync(configuration.authority, configuration.authority_configuration)];
-                    case 1:
-                        oidcServerConfiguration = _c.sent();
-                        return [4 /*yield*/, (0, initWorker_1.initWorkerAsync)(configuration.service_worker_relative_url, this.configurationName)];
-                    case 2:
-                        serviceWorker = _c.sent();
-                        if (!serviceWorker) return [3 /*break*/, 14];
-                        return [4 /*yield*/, serviceWorker.initAsync(oidcServerConfiguration, "syncTokensAsync")];
-                    case 3:
-                        isLogin = (_c.sent()).isLogin;
-                        if (!(isLogin == false)) return [3 /*break*/, 5];
-                        this.publishEvent(eventNames.logout_from_another_tab, {});
-                        return [4 /*yield*/, this.destroyAsync()];
-                    case 4:
-                        _c.sent();
-                        return [3 /*break*/, 13];
-                    case 5:
-                        if (!(isLogin == null)) return [3 /*break*/, 13];
-                        _c.label = 6;
-                    case 6:
-                        _c.trys.push([6, 11, , 12]);
-                        this.publishEvent(eventNames.syncTokensAsync_begin, {});
-                        this.syncTokensAsyncPromise = this.silentLoginAsync({ prompt: "none" });
-                        return [4 /*yield*/, this.syncTokensAsyncPromise];
-                    case 7:
-                        silent_token_response = _c.sent();
-                        if (!(silent_token_response && silent_token_response.tokens)) return [3 /*break*/, 9];
-                        _b = this;
-                        return [4 /*yield*/, setTokensAsync(serviceWorker, silent_token_response.tokens)];
-                    case 8:
-                        _b.tokens = _c.sent();
-                        return [3 /*break*/, 10];
-                    case 9:
-                        this.publishEvent(eventNames.syncTokensAsync_error, { message: "no token found in result" });
-                        if (this.timeoutId) {
-                            timer_1.default.clearTimeout(this.timeoutId);
-                            this.timeoutId = null;
-                        }
-                        return [2 /*return*/];
-                    case 10: return [3 /*break*/, 12];
-                    case 11:
-                        exceptionSilent_2 = _c.sent();
-                        console.error(exceptionSilent_2);
-                        this.publishEvent(eventNames.syncTokensAsync_error, exceptionSilent_2);
-                        if (this.timeoutId) {
-                            timer_1.default.clearTimeout(this.timeoutId);
-                            this.timeoutId = null;
+            var localSyncTokensAsync;
+            var _this = this;
+            return __generator(this, function (_a) {
+                localSyncTokensAsync = function () { return __awaiter(_this, void 0, void 0, function () {
+                    var configuration, oidcServerConfiguration, serviceWorker, isLogin, loginParams, silent_token_response, _a, exceptionSilent_2, session, tokens;
+                    var _b;
+                    return __generator(this, function (_c) {
+                        switch (_c.label) {
+                            case 0:
+                                configuration = this.configuration;
+                                if (!this.tokens) {
+                                    return [2 /*return*/, null];
+                                }
+                                return [4 /*yield*/, this.initAsync(configuration.authority, configuration.authority_configuration)];
+                            case 1:
+                                oidcServerConfiguration = _c.sent();
+                                return [4 /*yield*/, (0, initWorker_1.initWorkerAsync)(configuration.service_worker_relative_url, this.configurationName)];
+                            case 2:
+                                serviceWorker = _c.sent();
+                                if (!serviceWorker) return [3 /*break*/, 13];
+                                return [4 /*yield*/, serviceWorker.initAsync(oidcServerConfiguration, "syncTokensAsync")];
+                            case 3:
+                                isLogin = (_c.sent()).isLogin;
+                                if (!(isLogin == false)) return [3 /*break*/, 5];
+                                this.publishEvent(eventNames.logout_from_another_tab, { "message": "service worker syncTokensAsync" });
+                                return [4 /*yield*/, this.destroyAsync()];
+                            case 4:
+                                _c.sent();
+                                return [2 /*return*/, null];
+                            case 5:
+                                if (!(isLogin == null)) return [3 /*break*/, 12];
+                                _c.label = 6;
+                            case 6:
+                                _c.trys.push([6, 11, , 12]);
+                                this.publishEvent(eventNames.syncTokensAsync_begin, {});
+                                loginParams = getLoginParams(this.configurationName, configuration.redirect_uri);
+                                return [4 /*yield*/, this.silentLoginAsync(__assign(__assign({}, loginParams.extras), { prompt: "none" }), loginParams.state)];
+                            case 7:
+                                silent_token_response = _c.sent();
+                                if (!(silent_token_response && silent_token_response.tokens)) return [3 /*break*/, 9];
+                                _a = this;
+                                return [4 /*yield*/, setTokensAsync(serviceWorker, silent_token_response.tokens)];
+                            case 8:
+                                _a.tokens = _c.sent();
+                                this.publishEvent(eventNames.syncTokensAsync_end, {});
+                                return [2 /*return*/, this.tokens];
+                            case 9:
+                                this.publishEvent(eventNames.syncTokensAsync_error, { message: "no token found in result" });
+                                if (this.timeoutId) {
+                                    timer_1.default.clearTimeout(this.timeoutId);
+                                    this.timeoutId = null;
+                                }
+                                this.publishEvent(eventNames.syncTokensAsync_end, {});
+                                return [2 /*return*/, null];
+                            case 10: return [3 /*break*/, 12];
+                            case 11:
+                                exceptionSilent_2 = _c.sent();
+                                console.error(exceptionSilent_2);
+                                this.publishEvent(eventNames.syncTokensAsync_error, exceptionSilent_2);
+                                if (this.timeoutId) {
+                                    timer_1.default.clearTimeout(this.timeoutId);
+                                    this.timeoutId = null;
+                                }
+                                this.publishEvent(eventNames.syncTokensAsync_end, {});
+                                return [2 /*return*/, null];
+                            case 12: return [3 /*break*/, 16];
+                            case 13:
+                                session = (0, initSession_1.initSession)(this.configurationName, configuration.redirect_uri, (_b = configuration.storage) !== null && _b !== void 0 ? _b : sessionStorage);
+                                return [4 /*yield*/, session.initAsync()];
+                            case 14:
+                                tokens = (_c.sent()).tokens;
+                                if (!!tokens) return [3 /*break*/, 16];
+                                this.publishEvent(eventNames.logout_from_another_tab, { "message": "session syncTokensAsync" });
+                                return [4 /*yield*/, this.destroyAsync()];
+                            case 15:
+                                _c.sent();
+                                return [2 /*return*/, null];
+                            case 16: return [2 /*return*/, this.tokens];
                         }
-                        return [2 /*return*/];
-                    case 12:
-                        this.syncTokensAsyncPromise = null;
-                        this.publishEvent(eventNames.syncTokensAsync_end, {});
-                        _c.label = 13;
-                    case 13: return [3 /*break*/, 17];
-                    case 14:
-                        session = (0, initSession_1.initSession)(this.configurationName, configuration.redirect_uri, (_a = configuration.storage) !== null && _a !== void 0 ? _a : sessionStorage);
-                        return [4 /*yield*/, session.initAsync()];
-                    case 15:
-                        tokens = (_c.sent()).tokens;
-                        if (!!tokens) return [3 /*break*/, 17];
-                        this.publishEvent(eventNames.logout_from_another_tab, {});
-                        return [4 /*yield*/, this.destroyAsync()];
-                    case 16:
-                        _c.sent();
-                        _c.label = 17;
-                    case 17: return [2 /*return*/];
+                    });
+                }); };
+                if (this.syncTokensAsyncPromise) {
+                    return [2 /*return*/, this.syncTokensAsyncPromise];
                 }
+                this.syncTokensAsyncPromise = localSyncTokensAsync().then(function (result) {
+                    if (_this.syncTokensAsyncPromise) {
+                        _this.syncTokensAsyncPromise = null;
+                    }
+                    return result;
+                });
+                return [2 /*return*/, this.syncTokensAsyncPromise];
             });
         });
     };
@@ -1296,24 +1404,56 @@ var Oidc = /** @class */ (function () {
                     case 4:
                         this.tokens = null;
                         this.userInfo = null;
-                        this.events = [];
                         return [2 /*return*/];
                 }
             });
         });
     };
+    Oidc.prototype.logoutSameTabAsync = function (sub) {
+        return __awaiter(this, void 0, void 0, function () {
+            return __generator(this, function (_a) {
+                switch (_a.label) {
+                    case 0:
+                        if (!(this.configuration.monitor_session && sub && this.tokens && this.tokens.idTokenPayload && this.tokens.idTokenPayload.sub === sub)) return [3 /*break*/, 2];
+                        this.publishEvent(eventNames.logout_from_same_tab, { "message": sub });
+                        return [4 /*yield*/, this.destroyAsync()];
+                    case 1:
+                        _a.sent();
+                        _a.label = 2;
+                    case 2: return [2 /*return*/];
+                }
+            });
+        });
+    };
+    Oidc.prototype.logoutOtherTabAsync = function (sub) {
+        return __awaiter(this, void 0, void 0, function () {
+            return __generator(this, function (_a) {
+                switch (_a.label) {
+                    case 0:
+                        if (!(this.configuration.monitor_session && sub && this.tokens && this.tokens.idTokenPayload && this.tokens.idTokenPayload.sub === sub)) return [3 /*break*/, 2];
+                        return [4 /*yield*/, this.destroyAsync()];
+                    case 1:
+                        _a.sent();
+                        console.log("logoutOtherTabAsync(sub)" + this.configurationName);
+                        this.publishEvent(eventNames.logout_from_another_tab, { message: "SessionMonitor", "sub": sub });
+                        _a.label = 2;
+                    case 2: return [2 /*return*/];
+                }
+            });
+        });
+    };
     Oidc.prototype.logoutAsync = function (callbackPathOrUrl, extras) {
         if (callbackPathOrUrl === void 0) { callbackPathOrUrl = undefined; }
         if (extras === void 0) { extras = null; }
         return __awaiter(this, void 0, void 0, function () {
-            var configuration, oidcServerConfiguration, path, isUri, url, idToken, extraQueryString, _i, _a, _b, key, value;
-            return __generator(this, function (_c) {
-                switch (_c.label) {
+            var configuration, oidcServerConfiguration, path, isUri, url, idToken, sub, _i, _a, _b, key, oidc, extraQueryString, _c, _d, _e, key, value;
+            return __generator(this, function (_f) {
+                switch (_f.label) {
                     case 0:
                         configuration = this.configuration;
                         return [4 /*yield*/, this.initAsync(configuration.authority, configuration.authority_configuration)];
                     case 1:
-                        oidcServerConfiguration = _c.sent();
+                        oidcServerConfiguration = _f.sent();
                         if (callbackPathOrUrl && (typeof callbackPathOrUrl !== 'string')) {
                             callbackPathOrUrl = undefined;
                             console.warn('callbackPathOrUrl path is not a string');
@@ -1325,14 +1465,31 @@ var Oidc = /** @class */ (function () {
                         }
                         url = isUri ? callbackPathOrUrl : window.location.origin + path;
                         idToken = this.tokens ? this.tokens.idToken : "";
+                        sub = this.tokens && this.tokens.idTokenPayload ? this.tokens.idTokenPayload.sub : null;
                         return [4 /*yield*/, this.destroyAsync()];
                     case 2:
-                        _c.sent();
+                        _f.sent();
+                        _i = 0, _a = Object.entries(oidcDatabase);
+                        _f.label = 3;
+                    case 3:
+                        if (!(_i < _a.length)) return [3 /*break*/, 6];
+                        _b = _a[_i], key = _b[0], oidc = _b[1];
+                        if (!(oidc !== this)) return [3 /*break*/, 5];
+                        // @ts-ignore
+                        return [4 /*yield*/, oidc.logoutSameTabAsync(sub)];
+                    case 4:
+                        // @ts-ignore
+                        _f.sent();
+                        _f.label = 5;
+                    case 5:
+                        _i++;
+                        return [3 /*break*/, 3];
+                    case 6:
                         if (oidcServerConfiguration.endSessionEndpoint) {
                             extraQueryString = "";
                             if (extras) {
-                                for (_i = 0, _a = Object.entries(extras); _i < _a.length; _i++) {
-                                    _b = _a[_i], key = _b[0], value = _b[1];
+                                for (_c = 0, _d = Object.entries(extras); _c < _d.length; _c++) {
+                                    _e = _d[_c], key = _e[0], value = _e[1];
                                     extraQueryString += "&".concat(key, "=").concat(encodeURIComponent(value));
                                 }
                             }