@axa-fr/react-oidc 6.24.27-beta929 → 6.25.0-alpha939

package/dist/vanilla/vanillaOidc.js

@@ -1,71 +0,0 @@
-"use strict";
-var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
-    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
-    return new (P || (P = Promise))(function (resolve, reject) {
-        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
-        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
-        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
-        step((generator = generator.apply(thisArg, _arguments || [])).next());
-    });
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.VanillaOidc = void 0;
-const oidc_js_1 = require("./oidc.js");
-const parseTokens_js_1 = require("./parseTokens.js");
-class VanillaOidc {
-    constructor(oidc) {
-        this._oidc = oidc;
-    }
-    subscribeEvents(func) {
-        return this._oidc.subscribeEvents(func);
-    }
-    removeEventSubscription(id) {
-        this._oidc.removeEventSubscription(id);
-    }
-    publishEvent(eventName, data) {
-        this._oidc.publishEvent(eventName, data);
-    }
-    static get(name = 'default') {
-        return new VanillaOidc(oidc_js_1.Oidc.get(name));
-    }
-    tryKeepExistingSessionAsync() {
-        return this._oidc.tryKeepExistingSessionAsync();
-    }
-    loginAsync(callbackPath = undefined, extras = null, isSilentSignin = false, scope = undefined, silentLoginOnly = false) {
-        return this._oidc.loginAsync(callbackPath, extras, isSilentSignin, scope, silentLoginOnly);
-    }
-    logoutAsync(callbackPathOrUrl = undefined, extras = null) {
-        return this._oidc.logoutAsync(callbackPathOrUrl, extras);
-    }
-    silentLoginCallbackAsync() {
-        return this._oidc.silentLoginCallbackAsync();
-    }
-    renewTokensAsync(extras = null) {
-        return this._oidc.renewTokensAsync(extras);
-    }
-    loginCallbackAsync() {
-        return this._oidc.loginCallbackWithAutoTokensRenewAsync();
-    }
-    get tokens() {
-        return this._oidc.tokens;
-    }
-    get configuration() {
-        return this._oidc.configuration;
-    }
-    getValidTokenAsync(waitMs = 200, numberWait = 50) {
-        return __awaiter(this, void 0, void 0, function* () {
-            return (0, parseTokens_js_1.getValidTokenAsync)(this._oidc, waitMs, numberWait);
-        });
-    }
-    userInfoAsync(noCache = false) {
-        return __awaiter(this, void 0, void 0, function* () {
-            return this._oidc.userInfoAsync(noCache);
-        });
-    }
-}
-exports.VanillaOidc = VanillaOidc;
-VanillaOidc.getOrCreate = (getFetch) => (configuration, name = 'default') => {
-    return new VanillaOidc(oidc_js_1.Oidc.getOrCreate(getFetch)(configuration, name));
-};
-VanillaOidc.eventNames = oidc_js_1.Oidc.eventNames;
-//# sourceMappingURL=vanillaOidc.js.map

package/dist/vanilla/vanillaOidc.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"vanillaOidc.js","sourceRoot":"","sources":["../../src/oidc/vanilla/vanillaOidc.ts"],"names":[],"mappings":";;;;;;;;;;;;AACA,uCAAgD;AAChD,qDAA0E;AAO1E,MAAa,WAAW;IAEpB,YAAY,IAAU;QAClB,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;IACtB,CAAC;IAED,eAAe,CAAC,IAAoB;QAChC,OAAO,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;IAC5C,CAAC;IAED,uBAAuB,CAAC,EAAS;QAC7B,IAAI,CAAC,KAAK,CAAC,uBAAuB,CAAC,EAAE,CAAC,CAAC;IAC3C,CAAC;IAED,YAAY,CAAC,SAAgB,EAAE,IAAQ;QACnC,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IAC7C,CAAC;IAMD,MAAM,CAAC,GAAG,CAAC,IAAI,GAAG,SAAS;QACvB,OAAO,IAAI,WAAW,CAAC,cAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;IAC3C,CAAC;IAGD,2BAA2B;QACvB,OAAO,IAAI,CAAC,KAAK,CAAC,2BAA2B,EAAE,CAAC;IACpD,CAAC;IAED,UAAU,CAAC,eAAsB,SAAS,EAAE,SAAmB,IAAI,EAAE,cAAc,GAAG,KAAK,EAAE,QAAe,SAAS,EAAE,eAAe,GAAG,KAAK;QAC1I,OAAO,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,YAAY,EAAE,MAAM,EAAE,cAAc,EAAE,KAAK,EAAE,eAAe,CAAC,CAAC;IAC/F,CAAC;IAED,WAAW,CAAC,oBAA+C,SAAS,EAAE,SAAoB,IAAI;QAC1F,OAAO,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,iBAAiB,EAAE,MAAM,CAAC,CAAC;IAC7D,CAAC;IAED,wBAAwB;QACpB,OAAO,IAAI,CAAC,KAAK,CAAC,wBAAwB,EAAE,CAAC;IACjD,CAAC;IAED,gBAAgB,CAAC,SAAmB,IAAI;QACpC,OAAO,IAAI,CAAC,KAAK,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC;IAC/C,CAAC;IAED,kBAAkB;QACd,OAAO,IAAI,CAAC,KAAK,CAAC,qCAAqC,EAAE,CAAC;IAC9D,CAAC;IAED,IAAI,MAAM;QACN,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC;IAC7B,CAAC;IAED,IAAI,aAAa;QACb,OAAO,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC;IACpC,CAAC;IAEK,kBAAkB,CAAC,MAAM,GAAG,GAAG,EAAE,UAAU,GAAG,EAAE;;YAClD,OAAO,IAAA,mCAAkB,EAAC,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC;QAC9D,CAAC;KAAA;IAEK,aAAa,CAAwC,OAAO,GAAG,KAAK;;YACtE,OAAO,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;QAC7C,CAAC;KAAA;;AAjEL,kCAkEC;AAhDU,uBAAW,GAAG,CAAC,QAAsB,EAAE,EAAE,CAAC,CAAC,aAA+B,EAAE,IAAI,GAAG,SAAS,EAAe,EAAE;IAChH,OAAO,IAAI,WAAW,CAAC,cAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC,aAAa,EAAE,IAAI,CAAC,CAAC,CAAC;AAC5E,CAAC,CAAC;AAMK,sBAAU,GAAG,cAAI,CAAC,UAAU,CAAC"}

package/service_worker/.eslintrc.cjs

@@ -1,18 +0,0 @@
-module.exports = {
-  extends: [__dirname + '/config/defaultEslintConfig'],
-  parserOptions: {
-    project: '../tsconfig.eslint.json',
-    tsconfigRootDir: __dirname,
-  },
-  rules: {
-    '@typescript-eslint/naming-convention': [
-      'error',
-      {
-        selector: 'variable',
-        types: ['boolean'],
-        format: ['PascalCase'],
-        prefix: ['is', 'with', 'should', 'has', 'can', 'did', 'will'],
-      },
-    ],
-  },
-};

package/service_worker/OidcServiceWorker.ts

@@ -1,424 +0,0 @@
-import { acceptAnyDomainToken, TOKEN, scriptFilename } from './constants';
-import {
-  TrustedDomains,
-  Database,
-  OidcConfig,
-  OidcConfiguration,
-  MessageEventData,
-  // TrustedDomainsShowAccessToken,
-} from './types';
-import {
-  checkDomain,
-  getCurrentDatabaseDomain,
-  hideTokens,
-  isTokensValid,
-  serializeHeaders,
-  sleep,
-  getDomains,
-} from './utils';
-import {replaceCodeVerifier} from "./utils/codeVerifier";
-
-const _self = self as ServiceWorkerGlobalScope & typeof globalThis;
-
-declare let trustedDomains: TrustedDomains;
-
-_self.importScripts(scriptFilename);
-
-const id = Math.round(new Date().getTime() / 1000).toString();
-
-const keepAliveJsonFilename = 'OidcKeepAliveServiceWorker.json';
-const handleInstall = (event: ExtendableEvent) => {
-  console.log('[OidcServiceWorker] service worker installed ' + id);
-  event.waitUntil(_self.skipWaiting());
-};
-
-const handleActivate = (event: ExtendableEvent) => {
-  console.log('[OidcServiceWorker] service worker activated ' + id);
-  event.waitUntil(_self.clients.claim());
-};
-
-let currentLoginCallbackConfigurationName: string | null = null;
-const database: Database = {
-  default: {
-    configurationName: 'default',
-    tokens: null,
-    status: null,
-    state: null,
-    codeVerifier: null,
-    nonce: null,
-    oidcServerConfiguration: null,
-    hideAccessToken: true,
-  },
-};
-
-const getCurrentDatabasesTokenEndpoint = (database: Database, url: string) => {
-  const databases: OidcConfig[] = [];
-  for (const [, value] of Object.entries<OidcConfig>(database)) {
-    if (
-      value.oidcServerConfiguration != null &&
-      url.startsWith(value.oidcServerConfiguration.tokenEndpoint)
-    ) {
-      databases.push(value);
-    } else if (
-      value.oidcServerConfiguration != null &&
-      value.oidcServerConfiguration.revocationEndpoint &&
-      url.startsWith(value.oidcServerConfiguration.revocationEndpoint)
-    ) {
-      databases.push(value);
-    }
-  }
-  return databases;
-};
-
-const keepAliveAsync = async (event: FetchEvent) => {
-  const originalRequest = event.request;
-  const isFromVanilla = originalRequest.headers.has('oidc-vanilla');
-  const init = { status: 200, statusText: 'oidc-service-worker' };
-  const response = new Response('{}', init);
-  if (!isFromVanilla) {
-    const originalRequestUrl = new URL(originalRequest.url);
-    const minSleepSeconds = Number(originalRequestUrl.searchParams.get('minSleepSeconds')) || 240;
-    for (let i = 0; i < minSleepSeconds; i++) {
-      await sleep(1000 + Math.floor(Math.random() * 1000));
-      const cache = await caches.open('oidc_dummy_cache');
-      await cache.put(event.request, response.clone());
-    }
-  }
-  return response;
-};
-
-const handleFetch = async (event: FetchEvent) => {
-  const originalRequest = event.request;
-  const url = originalRequest.url;
-  if (originalRequest.url.includes(keepAliveJsonFilename)) {
-    event.respondWith(keepAliveAsync(event));
-    return;
-  }
-
-  const currentDatabaseForRequestAccessToken = getCurrentDatabaseDomain(
-    database,
-    originalRequest.url,
-    trustedDomains
-  );
-  if (
-    currentDatabaseForRequestAccessToken &&
-    currentDatabaseForRequestAccessToken.tokens &&
-    currentDatabaseForRequestAccessToken.tokens.access_token
-  ) {
-    while (
-      currentDatabaseForRequestAccessToken.tokens &&
-      !isTokensValid(currentDatabaseForRequestAccessToken.tokens)
-    ) {
-      await sleep(200);
-    }
-    const newRequest =
-      originalRequest.mode == 'navigate'
-        ? new Request(originalRequest, {
-            headers: {
-              ...serializeHeaders(originalRequest.headers),
-              authorization:
-                'Bearer ' +
-                currentDatabaseForRequestAccessToken.tokens.access_token,
-            },
-          })
-        : new Request(originalRequest, {
-            headers: {
-              ...serializeHeaders(originalRequest.headers),
-              authorization:
-                'Bearer ' +
-                currentDatabaseForRequestAccessToken.tokens.access_token,
-            },
-            mode: (
-              currentDatabaseForRequestAccessToken.oidcConfiguration as OidcConfiguration
-            ).service_worker_convert_all_requests_to_cors
-              ? 'cors'
-              : originalRequest.mode,
-          });
-
-    //@ts-ignore -- TODO: review, waitUntil takes a promise, this returns a void
-    event.waitUntil(event.respondWith(fetch(newRequest)));
-
-    return;
-  }
-
-  if (event.request.method !== 'POST') {
-    return;
-  }
-
-  let currentDatabase: OidcConfig | null = null;
-  const currentDatabases = getCurrentDatabasesTokenEndpoint(
-    database,
-    originalRequest.url
-  );
-  const numberDatabase = currentDatabases.length;
-  if (numberDatabase > 0) {
-    const maPromesse = new Promise<Response>((resolve, reject) => {
-      const clonedRequest = originalRequest.clone();
-      const response = clonedRequest.text().then((actualBody) => {
-        if (
-          actualBody.includes(TOKEN.REFRESH_TOKEN) ||
-          actualBody.includes(TOKEN.ACCESS_TOKEN)
-        ) {
-          let newBody = actualBody;
-          for (let i = 0; i < numberDatabase; i++) {
-            const currentDb = currentDatabases[i];
-
-            if (currentDb && currentDb.tokens != null) {
-              const keyRefreshToken =
-                TOKEN.REFRESH_TOKEN + '_' + currentDb.configurationName;
-              if (actualBody.includes(keyRefreshToken)) {
-                newBody = newBody.replace(
-                  keyRefreshToken,
-                  encodeURIComponent(currentDb.tokens.refresh_token as string)
-                );
-                currentDatabase = currentDb;
-                break;
-              }
-              const keyAccessToken =
-                TOKEN.ACCESS_TOKEN + '_' + currentDb.configurationName;
-              if (actualBody.includes(keyAccessToken)) {
-                newBody = newBody.replace(
-                  keyAccessToken,
-                  encodeURIComponent(currentDb.tokens.access_token)
-                );
-                currentDatabase = currentDb;
-                break;
-              }
-            }
-          }
-          const fetchPromise = fetch(originalRequest, {
-            body: newBody,
-            method: clonedRequest.method,
-            headers: {
-              ...serializeHeaders(originalRequest.headers),
-            },
-            mode: clonedRequest.mode,
-            cache: clonedRequest.cache,
-            redirect: clonedRequest.redirect,
-            referrer: clonedRequest.referrer,
-            credentials: clonedRequest.credentials,
-            integrity: clonedRequest.integrity,
-          });
-
-          if (
-            currentDatabase &&
-            currentDatabase.oidcServerConfiguration != null &&
-            currentDatabase.oidcServerConfiguration.revocationEndpoint &&
-            url.startsWith(
-              currentDatabase.oidcServerConfiguration.revocationEndpoint
-            )
-          ) {
-            return fetchPromise.then(async (response) => {
-              const text = await response.text();
-              return new Response(text, response);
-            });
-          }
-          return fetchPromise.then(hideTokens(currentDatabase as OidcConfig)); //todo type assertion to OidcConfig but could be null, NEEDS REVIEW
-        } else if (
-          actualBody.includes('code_verifier=') &&
-          currentLoginCallbackConfigurationName
-        ) {
-          currentDatabase = database[currentLoginCallbackConfigurationName];
-          currentLoginCallbackConfigurationName = null;
-          let newBody = actualBody;
-          if (currentDatabase && currentDatabase.codeVerifier != null) {
-            newBody = replaceCodeVerifier(newBody, currentDatabase.codeVerifier);
-          }
-
-          return fetch(originalRequest, {
-            body: newBody,
-            method: clonedRequest.method,
-            headers: {
-              ...serializeHeaders(originalRequest.headers),
-            },
-            mode: clonedRequest.mode,
-            cache: clonedRequest.cache,
-            redirect: clonedRequest.redirect,
-            referrer: clonedRequest.referrer,
-            credentials: clonedRequest.credentials,
-            integrity: clonedRequest.integrity,
-          }).then(hideTokens(currentDatabase));
-        }
-        return undefined;
-      });
-      response
-        .then((r) => {
-          if (r !== undefined) {
-            resolve(r);
-          } else {
-            console.log('success undefined');
-            reject(new Error('Response is undefined inside a success'));
-          }
-        })
-        .catch((err) => {
-          if (err !== undefined) {
-            reject(err);
-          } else {
-            console.log('error undefined');
-            reject(new Error('Response is undefined inside a error'));
-          }
-        });
-    });
-
-    //@ts-ignore -- TODO: review, waitUntil takes a promise, this returns a void
-    event.waitUntil(event.respondWith(maPromesse));
-  }
-};
-
-type TrustedDomainsShowAccessToken = {
-  [key: string]: boolean
-}
-
-const trustedDomainsShowAccessToken: TrustedDomainsShowAccessToken = {};
-
-const handleMessage = (event: ExtendableMessageEvent) => {
-  const port = event.ports[0];
-  const data = event.data as MessageEventData;
-  const configurationName = data.configurationName;
-  let currentDatabase = database[configurationName];
-  if(trustedDomains== null){
-    trustedDomains = {};
-  }
-  if (!currentDatabase) {
-    
-    if (trustedDomainsShowAccessToken[configurationName] === undefined) {
-      let trustedDomain = trustedDomains[configurationName];
-      trustedDomainsShowAccessToken[configurationName] = Array.isArray(trustedDomain) ? false : trustedDomain.showAccessToken;
-    }
-    database[configurationName] = {
-      tokens: null,
-      state: null,
-      codeVerifier: null,
-      oidcServerConfiguration: null,
-      oidcConfiguration: undefined,
-      nonce: null,
-      status: null,
-      configurationName,
-      hideAccessToken: !trustedDomainsShowAccessToken[configurationName],
-    };
-    currentDatabase = database[configurationName];
-    
-    if (!trustedDomains[configurationName]) {
-      trustedDomains[configurationName] = [];
-    }
-  }
-
-  switch (data.type) {
-    case 'clear':
-      currentDatabase.tokens = null;
-      currentDatabase.state = null;
-      currentDatabase.codeVerifier = null;
-      currentDatabase.status = data.data.status;
-      port.postMessage({ configurationName });
-      return;
-    case 'init': {
-      const oidcServerConfiguration = data.data.oidcServerConfiguration;
-      let trustedDomain = trustedDomains[configurationName];
-      const domains = getDomains(trustedDomain, 'oidc');
-      if (!domains.find((f) => f === acceptAnyDomainToken)) {
-        [
-          oidcServerConfiguration.tokenEndpoint,
-          oidcServerConfiguration.revocationEndpoint,
-          oidcServerConfiguration.userInfoEndpoint,
-          oidcServerConfiguration.issuer,
-        ].forEach((url) => {
-          checkDomain(domains, url);
-        });
-      }
-    currentDatabase.oidcServerConfiguration = oidcServerConfiguration;
-      currentDatabase.oidcConfiguration = data.data.oidcConfiguration;
-      const where = data.data.where;
-      if (
-        where === 'loginCallbackAsync' ||
-        where === 'tryKeepExistingSessionAsync'
-      ) {
-        currentLoginCallbackConfigurationName = configurationName;
-      } else {
-        currentLoginCallbackConfigurationName = null;
-      }
-
-      if (!currentDatabase.tokens) {
-        port.postMessage({
-          tokens: null,
-          status: currentDatabase.status,
-          configurationName,
-        });
-      } else {
-        const tokens = {
-          ...currentDatabase.tokens,
-        };
-        if(currentDatabase.hideAccessToken) {
-          tokens.access_token = TOKEN.ACCESS_TOKEN + '_' + configurationName;
-        }
-        if (tokens.refresh_token) {
-          tokens.refresh_token = TOKEN.REFRESH_TOKEN + '_' + configurationName;
-        }
-        if (
-          tokens.idTokenPayload &&
-          tokens.idTokenPayload.nonce &&
-          currentDatabase.nonce != null
-        ) {
-          tokens.idTokenPayload.nonce =
-            TOKEN.NONCE_TOKEN + '_' + configurationName;
-        }
-        port.postMessage({
-          tokens,
-          status: currentDatabase.status,
-          configurationName,
-        });
-      }
-      return;
-    }
-    case 'setState':
-      currentDatabase.state = data.data.state;
-      port.postMessage({ configurationName });
-      return;
-    case 'getState': {
-      const state = currentDatabase.state;
-      port.postMessage({ configurationName, state });
-      return;
-    }
-    case 'setCodeVerifier':
-      currentDatabase.codeVerifier = data.data.codeVerifier;
-      port.postMessage({ configurationName });
-      return;
-    case 'getCodeVerifier': {
-      port.postMessage({
-        configurationName,
-        codeVerifier: currentDatabase.codeVerifier != null ? TOKEN.CODE_VERIFIER + '_' + configurationName : null,
-      });
-      return;
-    }
-    case 'setSessionState':
-      currentDatabase.sessionState = data.data.sessionState;
-      port.postMessage({ configurationName });
-      return;
-    case 'getSessionState': {
-      const sessionState = currentDatabase.sessionState;
-      port.postMessage({ configurationName, sessionState });
-      return;
-    }
-    case 'setNonce': {
-      let nonce = data.data.nonce;
-      if (nonce) {
-        currentDatabase.nonce = nonce;
-      }
-      port.postMessage({configurationName});
-      return;
-    }
-    case 'getNonce': {
-      const keyNonce = TOKEN.NONCE_TOKEN + '_' + configurationName;
-      const nonce = currentDatabase.nonce ? keyNonce : null;
-      port.postMessage({configurationName, nonce});
-      return;
-    }
-    default:
-      currentDatabase.items = { ...data.data };
-      port.postMessage({ configurationName });
-  }
-};
-
-_self.addEventListener('install', handleInstall);
-_self.addEventListener('activate', handleActivate);
-_self.addEventListener('fetch', handleFetch);
-_self.addEventListener('message', handleMessage);

package/service_worker/constants.ts

@@ -1,32 +0,0 @@
-const scriptFilename = 'OidcTrustedDomains.js'; /* global trustedDomains */
-const acceptAnyDomainToken = '*';
-
-type TokenType = {
-  readonly REFRESH_TOKEN: string;
-  readonly ACCESS_TOKEN: string;
-  readonly NONCE_TOKEN: string;
-  readonly CODE_VERIFIER: string;
-};
-
-const TOKEN: TokenType = {
-  REFRESH_TOKEN: 'REFRESH_TOKEN_SECURED_BY_OIDC_SERVICE_WORKER',
-  ACCESS_TOKEN: 'ACCESS_TOKEN_SECURED_BY_OIDC_SERVICE_WORKER',
-  NONCE_TOKEN: 'NONCE_SECURED_BY_OIDC_SERVICE_WORKER',
-  CODE_VERIFIER: 'CODE_VERIFIER_SECURED_BY_OIDC_SERVICE_WORKER',
-};
-
-type TokenRenewModeType = {
-  readonly access_token_or_id_token_invalid: string;
-  readonly access_token_invalid: string;
-  readonly id_token_invalid: string;
-};
-
-const TokenRenewMode: TokenRenewModeType = {
-  access_token_or_id_token_invalid: 'access_token_or_id_token_invalid',
-  access_token_invalid: 'access_token_invalid',
-  id_token_invalid: 'id_token_invalid',
-};
-
-const openidWellknownUrlEndWith = '/.well-known/openid-configuration';
-
-export { scriptFilename, acceptAnyDomainToken, TOKEN, TokenRenewMode, openidWellknownUrlEndWith };

package/service_worker/dist/OidcServiceWorker.d.ts

@@ -1,2 +0,0 @@
-export {};
-//# sourceMappingURL=OidcServiceWorker.d.ts.map

package/service_worker/dist/OidcServiceWorker.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"OidcServiceWorker.d.ts","sourceRoot":"","sources":["../OidcServiceWorker.ts"],"names":[],"mappings":""}

package/service_worker/dist/OidcServiceWorker.js

@@ -1,2 +0,0 @@
-"use strict";const y="OidcTrustedDomains.js",A="*",_={REFRESH_TOKEN:"REFRESH_TOKEN_SECURED_BY_OIDC_SERVICE_WORKER",ACCESS_TOKEN:"ACCESS_TOKEN_SECURED_BY_OIDC_SERVICE_WORKER",NONCE_TOKEN:"NONCE_SECURED_BY_OIDC_SERVICE_WORKER",CODE_VERIFIER:"CODE_VERIFIER_SECURED_BY_OIDC_SERVICE_WORKER"},w={access_token_or_id_token_invalid:"access_token_or_id_token_invalid",access_token_invalid:"access_token_invalid",id_token_invalid:"id_token_invalid"},I="/.well-known/openid-configuration";function K(n,e){if(!e)return;if(!n.find(o=>{var s;let t;return typeof o=="string"?t=new RegExp(`^${o}`):t=o,(s=t.test)==null?void 0:s.call(t,e)}))throw new Error("Domain "+e+" is not trusted, please add domain in "+y)}const D=(n,e)=>Array.isArray(n)?n:n[`${e}Domains`]??n.domains??[],M=(n,e,i)=>{var o;if(e.endsWith(I))return null;for(const[t,s]of Object.entries(n)){const d=s.oidcServerConfiguration;if(!d||d.tokenEndpoint&&e===d.tokenEndpoint||d.revocationEndpoint&&e===d.revocationEndpoint)continue;const l=i==null?[]:i[t],f=D(l,"accessToken"),r=d.userInfoEndpoint?[d.userInfoEndpoint,...f]:[...f];let a=!1;if(r.find(h=>h===A))a=!0;else for(let h=0;h<r.length;h++){let c=r[h];if(typeof c=="string"&&(c=new RegExp(`^${c}`)),(o=c.test)!=null&&o.call(c,e)){a=!0;break}}if(a)return s.tokens?s:null}return null};function U(n,e){return n.split(e).length-1}function P(n){return JSON.parse(W(n.split(".")[1].replace("-","+").replace("_","/")))}function W(n){return decodeURIComponent(Array.prototype.map.call(atob(n),e=>"%"+("00"+e.charCodeAt(0).toString(16)).slice(-2)).join(""))}function F(n,e){const i=new Date().getTime()/1e3;return Math.round(e-n-i)}function b(n){return n?F(0,n.expiresAt)>0:!1}const O=n=>{try{return n&&U(n,".")===2?P(n):null}catch(e){console.warn(e)}return null},q=(n,e,i)=>{if(n.idTokenPayload){const o=n.idTokenPayload;if(i.issuer!==o.iss)return{isValid:!1,reason:"Issuer does not match"};const t=new Date().getTime()/1e3;if(o.exp&&o.exp<t)return{isValid:!1,reason:"Token expired"};const s=60*60*24*7;if(o.iat&&o.iat+s<t)return{isValid:!1,reason:"Token is used from too long time"};if(e&&o.nonce&&o.nonce!==e)return{isValid:!1,reason:"Nonce does not match"}}return{isValid:!0,reason:""}};function L(n,e,i){if(!n.issued_at){const u=new Date().getTime()/1e3;n.issued_at=u}const o=O(n.access_token),t={...n,accessTokenPayload:o};e.hideAccessToken&&(t.access_token=_.ACCESS_TOKEN+"_"+i),n.accessTokenPayload=o;let s=null;if(n.id_token){if(s=O(n.id_token),n.idTokenPayload={...s},s.nonce&&e.nonce!=null){const u=_.NONCE_TOKEN+"_"+e.configurationName;s.nonce=u}t.idTokenPayload=s}n.refresh_token&&(t.refresh_token=_.REFRESH_TOKEN+"_"+i);const d=s&&s.exp?s.exp:Number.MAX_VALUE,l=o&&o.exp?o.exp:n.issued_at+n.expires_in;let f;const r=e.oidcConfiguration.token_renew_mode;r===w.access_token_invalid?f=l:r===w.id_token_invalid?f=d:f=d<l?d:l,t.expiresAt=f,n.expiresAt=f;const a=e.nonce?e.nonce.nonce:null,{isValid:h,reason:c}=q(n,a,e.oidcServerConfiguration);if(!h)throw Error(`Tokens are not OpenID valid, reason: ${c}`);if(e.tokens!=null&&"refresh_token"in e.tokens&&!("refresh_token"in n)){const u=e.tokens.refresh_token;e.tokens={...n,refresh_token:u}}else e.tokens=n;return e.status="LOGGED_IN",t}function N(n){const e=n.configurationName;return i=>i.status!==200?i:i.json().then(o=>{const t=L(o,n,e),s=JSON.stringify(t);return new Response(s,i)})}function T(n){const e={};for(const i of n.keys())n.has(i)&&(e[i]=n.get(i));return e}const V=n=>new Promise(e=>setTimeout(e,n));function H(n,e){const i=/code_verifier=[A-Za-z0-9_-]+/i;return n.replace(i,`code_verifier=${e}`)}const p=self;p.importScripts(y);const x=Math.round(new Date().getTime()/1e3).toString(),j="OidcKeepAliveServiceWorker.json",$=n=>{console.log("[OidcServiceWorker] service worker installed "+x),n.waitUntil(p.skipWaiting())},z=n=>{console.log("[OidcServiceWorker] service worker activated "+x),n.waitUntil(p.clients.claim())};let S=null;const g={default:{configurationName:"default",tokens:null,status:null,state:null,codeVerifier:null,nonce:null,oidcServerConfiguration:null,hideAccessToken:!0}},J=(n,e)=>{const i=[];for(const[,o]of Object.entries(n))(o.oidcServerConfiguration!=null&&e.startsWith(o.oidcServerConfiguration.tokenEndpoint)||o.oidcServerConfiguration!=null&&o.oidcServerConfiguration.revocationEndpoint&&e.startsWith(o.oidcServerConfiguration.revocationEndpoint))&&i.push(o);return i},Y=async n=>{const e=n.request,i=e.headers.has("oidc-vanilla"),o={status:200,statusText:"oidc-service-worker"},t=new Response("{}",o);if(!i){const s=new URL(e.url),d=Number(s.searchParams.get("minSleepSeconds"))||240;for(let l=0;l<d;l++)await V(1e3+Math.floor(Math.random()*1e3)),await(await caches.open("oidc_dummy_cache")).put(n.request,t.clone())}return t},B=async n=>{const e=n.request,i=e.url;if(e.url.includes(j)){n.respondWith(Y(n));return}const o=M(g,e.url,trustedDomains);if(o&&o.tokens&&o.tokens.access_token){for(;o.tokens&&!b(o.tokens);)await V(200);const l=e.mode=="navigate"?new Request(e,{headers:{...T(e.headers),authorization:"Bearer "+o.tokens.access_token}}):new Request(e,{headers:{...T(e.headers),authorization:"Bearer "+o.tokens.access_token},mode:o.oidcConfiguration.service_worker_convert_all_requests_to_cors?"cors":e.mode});n.waitUntil(n.respondWith(fetch(l)));return}if(n.request.method!=="POST")return;let t=null;const s=J(g,e.url),d=s.length;if(d>0){const l=new Promise((f,r)=>{const a=e.clone();a.text().then(c=>{if(c.includes(_.REFRESH_TOKEN)||c.includes(_.ACCESS_TOKEN)){let u=c;for(let E=0;E<d;E++){const k=s[E];if(k&&k.tokens!=null){const R=_.REFRESH_TOKEN+"_"+k.configurationName;if(c.includes(R)){u=u.replace(R,encodeURIComponent(k.tokens.refresh_token)),t=k;break}const v=_.ACCESS_TOKEN+"_"+k.configurationName;if(c.includes(v)){u=u.replace(v,encodeURIComponent(k.tokens.access_token)),t=k;break}}}const C=fetch(e,{body:u,method:a.method,headers:{...T(e.headers)},mode:a.mode,cache:a.cache,redirect:a.redirect,referrer:a.referrer,credentials:a.credentials,integrity:a.integrity});return t&&t.oidcServerConfiguration!=null&&t.oidcServerConfiguration.revocationEndpoint&&i.startsWith(t.oidcServerConfiguration.revocationEndpoint)?C.then(async E=>{const k=await E.text();return new Response(k,E)}):C.then(N(t))}else if(c.includes("code_verifier=")&&S){t=g[S],S=null;let u=c;return t&&t.codeVerifier!=null&&(u=H(u,t.codeVerifier)),fetch(e,{body:u,method:a.method,headers:{...T(e.headers)},mode:a.mode,cache:a.cache,redirect:a.redirect,referrer:a.referrer,credentials:a.credentials,integrity:a.integrity}).then(N(t))}}).then(c=>{c!==void 0?f(c):(console.log("success undefined"),r(new Error("Response is undefined inside a success")))}).catch(c=>{c!==void 0?r(c):(console.log("error undefined"),r(new Error("Response is undefined inside a error")))})});n.waitUntil(n.respondWith(l))}},m={},G=n=>{const e=n.ports[0],i=n.data,o=i.configurationName;let t=g[o];if(trustedDomains==null&&(trustedDomains={}),!t){if(m[o]===void 0){let s=trustedDomains[o];m[o]=Array.isArray(s)?!1:s.showAccessToken}g[o]={tokens:null,state:null,codeVerifier:null,oidcServerConfiguration:null,oidcConfiguration:void 0,nonce:null,status:null,configurationName:o,hideAccessToken:!m[o]},t=g[o],trustedDomains[o]||(trustedDomains[o]=[])}switch(i.type){case"clear":t.tokens=null,t.state=null,t.codeVerifier=null,t.status=i.data.status,e.postMessage({configurationName:o});return;case"init":{const s=i.data.oidcServerConfiguration;let d=trustedDomains[o];const l=D(d,"oidc");l.find(r=>r===A)||[s.tokenEndpoint,s.revocationEndpoint,s.userInfoEndpoint,s.issuer].forEach(r=>{K(l,r)}),t.oidcServerConfiguration=s,t.oidcConfiguration=i.data.oidcConfiguration;const f=i.data.where;if(f==="loginCallbackAsync"||f==="tryKeepExistingSessionAsync"?S=o:S=null,!t.tokens)e.postMessage({tokens:null,status:t.status,configurationName:o});else{const r={...t.tokens};t.hideAccessToken&&(r.access_token=_.ACCESS_TOKEN+"_"+o),r.refresh_token&&(r.refresh_token=_.REFRESH_TOKEN+"_"+o),r.idTokenPayload&&r.idTokenPayload.nonce&&t.nonce!=null&&(r.idTokenPayload.nonce=_.NONCE_TOKEN+"_"+o),e.postMessage({tokens:r,status:t.status,configurationName:o})}return}case"setState":t.state=i.data.state,e.postMessage({configurationName:o});return;case"getState":{const s=t.state;e.postMessage({configurationName:o,state:s});return}case"setCodeVerifier":t.codeVerifier=i.data.codeVerifier,e.postMessage({configurationName:o});return;case"getCodeVerifier":{e.postMessage({configurationName:o,codeVerifier:t.codeVerifier!=null?_.CODE_VERIFIER+"_"+o:null});return}case"setSessionState":t.sessionState=i.data.sessionState,e.postMessage({configurationName:o});return;case"getSessionState":{const s=t.sessionState;e.postMessage({configurationName:o,sessionState:s});return}case"setNonce":{let s=i.data.nonce;s&&(t.nonce=s),e.postMessage({configurationName:o});return}case"getNonce":{const s=_.NONCE_TOKEN+"_"+o,d=t.nonce?s:null;e.postMessage({configurationName:o,nonce:d});return}default:t.items={...i.data},e.postMessage({configurationName:o})}};p.addEventListener("install",$);p.addEventListener("activate",z);p.addEventListener("fetch",B);p.addEventListener("message",G);
-//# sourceMappingURL=OidcServiceWorker.js.map