@axa-fr/react-oidc 6.0.8 → 6.0.9

package/dist/OidcServiceWorker.js

@@ -59,6 +59,9 @@ const isTokensValid= (tokens) =>{
 function hideTokens(currentDatabaseElement) {
     const configurationName = currentDatabaseElement.configurationName;
     return (response) => {
+        if(response.status !== 200){
+            return response;
+        }
         return response.json().then(tokens => {
             if(!tokens.issued_at) {
                 const currentTimeUnixSecond = new Date().getTime() /1000;
@@ -73,7 +76,7 @@ function hideTokens(currentDatabaseElement) {
             };
             tokens.accessTokenPayload = accessTokenPayload;
 
-            let _idTokenPayload = null; 
+            let _idTokenPayload = null;
             if(tokens.id_token) {
                 _idTokenPayload = extractTokenPayload(tokens.id_token);
                 secureTokens.idTokenPayload = _idTokenPayload;
@@ -113,11 +116,11 @@ const getCurrentDatabaseDomain = (database, url) => {
     }
     for (const [key, currentDatabase] of Object.entries(database)) {
         const oidcServerConfiguration = currentDatabase.oidcServerConfiguration;
-        
+
         if(!oidcServerConfiguration){
             continue;
         }
-        
+
         if(oidcServerConfiguration.tokenEndpoint && url === oidcServerConfiguration.tokenEndpoint){
             continue;
         }
@@ -184,11 +187,10 @@ const handleFetch = async (event) => {
     }
 
     const currentDatabaseForRequestAccessToken = getCurrentDatabaseDomain(database, originalRequest.url);
-    if(currentDatabaseForRequestAccessToken && currentDatabaseForRequestAccessToken.tokens) {
-
+    if(currentDatabaseForRequestAccessToken && currentDatabaseForRequestAccessToken.tokens && currentDatabaseForRequestAccessToken.tokens.access_token) {
         while (currentDatabaseForRequestAccessToken.tokens && !isTokensValid(currentDatabaseForRequestAccessToken.tokens)){
             await sleep(200);
-        } 
+        }
         const newRequest = new Request(originalRequest, {
             headers: {
                 ...serializeHeaders(originalRequest.headers),
@@ -220,7 +222,7 @@ const handleFetch = async (event) => {
                             break;
                         }
                     }
-                    
+
                     return fetch(clonedRequest, {
                         body: newBody,
                         method: clonedRequest.method,
@@ -278,11 +280,11 @@ self.addEventListener('fetch', handleFetch);
 
 
 const checkDomain =(domains, tokenEndpoint) => {
-    
+
     if(!tokenEndpoint){
         return;
     }
-    
+
     const domain = domains.find(domain => tokenEndpoint.startsWith(domain));
     if(!domain){
         throw new Error("Domain " + tokenEndpoint+ " is not trusted, please add domain in TrustedDomains.js");
@@ -332,7 +334,7 @@ addEventListener('message', event => {
             } else{
                 currentLoginCallbackConfigurationName = null;
             }
-            
+
             if(!currentDatabase.tokens){
                 port.postMessage({
                     tokens:null,
@@ -353,7 +355,7 @@ addEventListener('message', event => {
                 });
             }
             return;
-            
+
         case "setSessionState":
             currentDatabase.sessionState = data.data.sessionState;
             port.postMessage({configurationName});

package/dist/OidcTrustedDomains.js

@@ -5,7 +5,7 @@
 
 // Domains used by OIDC server must be also declared here
 const trustedDomains = {
-    default:["https://demo.duendesoftware.com"], 
+    default:["https://demo.duendesoftware.com", "https://kdhttps.auth0.com"], 
     config_classic: ["https://demo.duendesoftware.com"] ,
     config_without_refresh_token: ["https://demo.duendesoftware.com"],
     config_google: ["https://oauth2.googleapis.com", "https://openidconnect.googleapis.com"],

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@axa-fr/react-oidc",
-  "version": "6.0.8",
+  "version": "6.0.9",
   "private": false,
   "main": "dist/index.js",
   "jsnext:main": "dist/index.js",

package/src/oidc/vanilla/OidcServiceWorker.js

@@ -59,6 +59,9 @@ const isTokensValid= (tokens) =>{
 function hideTokens(currentDatabaseElement) {
     const configurationName = currentDatabaseElement.configurationName;
     return (response) => {
+        if(response.status !== 200){
+            return response;
+        }
         return response.json().then(tokens => {
             if(!tokens.issued_at) {
                 const currentTimeUnixSecond = new Date().getTime() /1000;
@@ -73,7 +76,7 @@ function hideTokens(currentDatabaseElement) {
             };
             tokens.accessTokenPayload = accessTokenPayload;
 
-            let _idTokenPayload = null; 
+            let _idTokenPayload = null;
             if(tokens.id_token) {
                 _idTokenPayload = extractTokenPayload(tokens.id_token);
                 secureTokens.idTokenPayload = _idTokenPayload;
@@ -113,11 +116,11 @@ const getCurrentDatabaseDomain = (database, url) => {
     }
     for (const [key, currentDatabase] of Object.entries(database)) {
         const oidcServerConfiguration = currentDatabase.oidcServerConfiguration;
-        
+
         if(!oidcServerConfiguration){
             continue;
         }
-        
+
         if(oidcServerConfiguration.tokenEndpoint && url === oidcServerConfiguration.tokenEndpoint){
             continue;
         }
@@ -184,11 +187,10 @@ const handleFetch = async (event) => {
     }
 
     const currentDatabaseForRequestAccessToken = getCurrentDatabaseDomain(database, originalRequest.url);
-    if(currentDatabaseForRequestAccessToken && currentDatabaseForRequestAccessToken.tokens) {
-
+    if(currentDatabaseForRequestAccessToken && currentDatabaseForRequestAccessToken.tokens && currentDatabaseForRequestAccessToken.tokens.access_token) {
         while (currentDatabaseForRequestAccessToken.tokens && !isTokensValid(currentDatabaseForRequestAccessToken.tokens)){
             await sleep(200);
-        } 
+        }
         const newRequest = new Request(originalRequest, {
             headers: {
                 ...serializeHeaders(originalRequest.headers),
@@ -220,7 +222,7 @@ const handleFetch = async (event) => {
                             break;
                         }
                     }
-                    
+
                     return fetch(clonedRequest, {
                         body: newBody,
                         method: clonedRequest.method,
@@ -278,11 +280,11 @@ self.addEventListener('fetch', handleFetch);
 
 
 const checkDomain =(domains, tokenEndpoint) => {
-    
+
     if(!tokenEndpoint){
         return;
     }
-    
+
     const domain = domains.find(domain => tokenEndpoint.startsWith(domain));
     if(!domain){
         throw new Error("Domain " + tokenEndpoint+ " is not trusted, please add domain in TrustedDomains.js");
@@ -332,7 +334,7 @@ addEventListener('message', event => {
             } else{
                 currentLoginCallbackConfigurationName = null;
             }
-            
+
             if(!currentDatabase.tokens){
                 port.postMessage({
                     tokens:null,
@@ -353,7 +355,7 @@ addEventListener('message', event => {
                 });
             }
             return;
-            
+
         case "setSessionState":
             currentDatabase.sessionState = data.data.sessionState;
             port.postMessage({configurationName});

package/src/oidc/vanilla/OidcTrustedDomains.js

@@ -5,7 +5,7 @@
 
 // Domains used by OIDC server must be also declared here
 const trustedDomains = {
-    default:["https://demo.duendesoftware.com"], 
+    default:["https://demo.duendesoftware.com", "https://kdhttps.auth0.com"], 
     config_classic: ["https://demo.duendesoftware.com"] ,
     config_without_refresh_token: ["https://demo.duendesoftware.com"],
     config_google: ["https://oauth2.googleapis.com", "https://openidconnect.googleapis.com"],