@axa-fr/react-oidc 7.27.11 → 7.27.13

package/dist/OidcProvider.d.ts

@@ -10,6 +10,7 @@ export type OidcProviderProps = {
     authenticatingComponent?: ComponentType<any>;
     authenticatingErrorComponent?: ComponentType<any>;
     loadingComponent?: ComponentType<any>;
+    loadingTimeoutComponent?: ComponentType<any>;
     serviceWorkerNotSupportedComponent?: ComponentType<any>;
     configurationName?: string;
     configuration?: OidcConfiguration;

package/dist/OidcProvider.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"OidcProvider.d.ts","sourceRoot":"","sources":["../src/OidcProvider.tsx"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,EAEL,cAAc,EACd,UAAU,EACV,iBAAiB,EAElB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,aAAa,EAAE,EAAE,EAAE,iBAAiB,EAAuB,MAAM,OAAO,CAAC;AAWlF,OAAO,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AAE5D,MAAM,MAAM,WAAW,GAAG;IACxB,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,UAAU,CAAC;CAC7B,CAAC;AAIF,MAAM,MAAM,iBAAiB,GAAG;IAC9B,wBAAwB,CAAC,EAAE,aAAa,CAAC,GAAG,CAAC,CAAC;IAC9C,oBAAoB,CAAC,EAAE,aAAa,CAAC,GAAG,CAAC,CAAC;IAC1C,uBAAuB,CAAC,EAAE,aAAa,CAAC,GAAG,CAAC,CAAC;IAC7C,4BAA4B,CAAC,EAAE,aAAa,CAAC,GAAG,CAAC,CAAC;IAClD,gBAAgB,CAAC,EAAE,aAAa,CAAC,GAAG,CAAC,CAAC;IACtC,kCAAkC,CAAC,EAAE,aAAa,CAAC,GAAG,CAAC,CAAC;IACxD,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,aAAa,CAAC,EAAE,iBAAiB,CAAC;IAClC,QAAQ,EAAE,GAAG,CAAC;IACd,aAAa,CAAC,EAAE,MAAM,IAAI,CAAC;IAC3B,sBAAsB,CAAC,EAAE,MAAM,IAAI,CAAC;IACpC,mBAAmB,CAAC,EAAE,MAAM,IAAI,CAAC;IACjC,iBAAiB,CAAC,EAAE,MAAM,aAAa,CAAC;IACxC,OAAO,CAAC,EAAE,CAAC,aAAa,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,KAAK,IAAI,CAAC;IACnE,QAAQ,CAAC,EAAE,MAAM,KAAK,CAAC;IACvB,QAAQ,CAAC,EAAE,cAAc,CAAC;CAC3B,CAAC;AAEF,MAAM,MAAM,gBAAgB,GAAG;IAC7B,iBAAiB,EAAE,MAAM,CAAC;IAC1B,gBAAgB,EAAE,iBAAiB,CAAC,GAAG,CAAC,CAAC;CAC1C,CAAC;AAqCF,eAAO,MAAM,YAAY,EAAE,EAAE,CAAC,iBAAiB,CAAC,iBAAiB,CAAC,CA+KjE,CAAC;AAEF,eAAe,YAAY,CAAC"}
+{"version":3,"file":"OidcProvider.d.ts","sourceRoot":"","sources":["../src/OidcProvider.tsx"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,EAEL,cAAc,EACd,UAAU,EACV,iBAAiB,EAElB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,aAAa,EAAE,EAAE,EAAE,iBAAiB,EAAuB,MAAM,OAAO,CAAC;AAYlF,OAAO,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AAE5D,MAAM,MAAM,WAAW,GAAG;IACxB,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,UAAU,CAAC;CAC7B,CAAC;AAIF,MAAM,MAAM,iBAAiB,GAAG;IAC9B,wBAAwB,CAAC,EAAE,aAAa,CAAC,GAAG,CAAC,CAAC;IAC9C,oBAAoB,CAAC,EAAE,aAAa,CAAC,GAAG,CAAC,CAAC;IAC1C,uBAAuB,CAAC,EAAE,aAAa,CAAC,GAAG,CAAC,CAAC;IAC7C,4BAA4B,CAAC,EAAE,aAAa,CAAC,GAAG,CAAC,CAAC;IAClD,gBAAgB,CAAC,EAAE,aAAa,CAAC,GAAG,CAAC,CAAC;IACtC,uBAAuB,CAAC,EAAE,aAAa,CAAC,GAAG,CAAC,CAAC;IAC7C,kCAAkC,CAAC,EAAE,aAAa,CAAC,GAAG,CAAC,CAAC;IACxD,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,aAAa,CAAC,EAAE,iBAAiB,CAAC;IAClC,QAAQ,EAAE,GAAG,CAAC;IACd,aAAa,CAAC,EAAE,MAAM,IAAI,CAAC;IAC3B,sBAAsB,CAAC,EAAE,MAAM,IAAI,CAAC;IACpC,mBAAmB,CAAC,EAAE,MAAM,IAAI,CAAC;IACjC,iBAAiB,CAAC,EAAE,MAAM,aAAa,CAAC;IACxC,OAAO,CAAC,EAAE,CAAC,aAAa,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,KAAK,IAAI,CAAC;IACnE,QAAQ,CAAC,EAAE,MAAM,KAAK,CAAC;IACvB,QAAQ,CAAC,EAAE,cAAc,CAAC;CAC3B,CAAC;AAEF,MAAM,MAAM,gBAAgB,GAAG;IAC7B,iBAAiB,EAAE,MAAM,CAAC;IAC1B,gBAAgB,EAAE,iBAAiB,CAAC,GAAG,CAAC,CAAC;CAC1C,CAAC;AAuCF,eAAO,MAAM,YAAY,EAAE,EAAE,CAAC,iBAAiB,CAAC,iBAAiB,CAAC,CA6MjE,CAAC;AAEF,eAAe,YAAY,CAAC"}

package/dist/core/default-component/LoadingTimeout.component.d.ts

@@ -0,0 +1,4 @@
+import { ComponentType } from 'react';
+declare const LoadingTimeout: ComponentType<any>;
+export default LoadingTimeout;
+//# sourceMappingURL=LoadingTimeout.component.d.ts.map

package/dist/core/default-component/LoadingTimeout.component.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"LoadingTimeout.component.d.ts","sourceRoot":"","sources":["../../../src/core/default-component/LoadingTimeout.component.tsx"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,OAAO,CAAC;AAEtC,QAAA,MAAM,cAAc,EAAE,aAAa,CAAC,GAAG,CAStC,CAAC;AAEF,eAAe,cAAc,CAAC"}

package/dist/core/default-component/index.d.ts

@@ -2,6 +2,7 @@ export { default as AuthenticateError } from './AuthenticateError.component.js';
 export { default as Authenticating } from './Authenticating.component.js';
 export { default as Callback, CallBackSuccess } from './Callback.component.js';
 export { default as Loading } from './Loading.component.js';
+export { default as LoadingTimeout } from './LoadingTimeout.component.js';
 export { default as ServiceWorkerNotSupported } from './ServiceWorkerNotSupported.component.js';
 export { default as SessionLost } from './SessionLost.component.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/core/default-component/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/core/default-component/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,IAAI,iBAAiB,EAAE,MAAM,kCAAkC,CAAC;AAChF,OAAO,EAAE,OAAO,IAAI,cAAc,EAAE,MAAM,+BAA+B,CAAC;AAC1E,OAAO,EAAE,OAAO,IAAI,QAAQ,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAC/E,OAAO,EAAE,OAAO,IAAI,OAAO,EAAE,MAAM,wBAAwB,CAAC;AAC5D,OAAO,EAAE,OAAO,IAAI,yBAAyB,EAAE,MAAM,0CAA0C,CAAC;AAChG,OAAO,EAAE,OAAO,IAAI,WAAW,EAAE,MAAM,4BAA4B,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/core/default-component/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,IAAI,iBAAiB,EAAE,MAAM,kCAAkC,CAAC;AAChF,OAAO,EAAE,OAAO,IAAI,cAAc,EAAE,MAAM,+BAA+B,CAAC;AAC1E,OAAO,EAAE,OAAO,IAAI,QAAQ,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAC/E,OAAO,EAAE,OAAO,IAAI,OAAO,EAAE,MAAM,wBAAwB,CAAC;AAC5D,OAAO,EAAE,OAAO,IAAI,cAAc,EAAE,MAAM,+BAA+B,CAAC;AAC1E,OAAO,EAAE,OAAO,IAAI,yBAAyB,EAAE,MAAM,0CAA0C,CAAC;AAChG,OAAO,EAAE,OAAO,IAAI,WAAW,EAAE,MAAM,4BAA4B,CAAC"}

package/dist/index.js

@@ -85,6 +85,18 @@ var _ = "default", v = (e, t, n = !1) => async (...r) => await t().fetchWithToke
 	className: "oidc-loading",
 	children: "Loading"
 }), A = () => /* @__PURE__ */ h("div", {
+	className: "oidc-loading-timeout",
+	children: /* @__PURE__ */ g("div", {
+		className: "oidc-loading-timeout__container",
+		children: [/* @__PURE__ */ h("h1", {
+			className: "oidc-loading-timeout__title",
+			children: "Loading timeout"
+		}), /* @__PURE__ */ h("p", {
+			className: "oidc-loading-timeout__content",
+			children: "Authentication is taking longer than expected. Please try refreshing the page."
+		})]
+	})
+}), j = () => /* @__PURE__ */ h("div", {
 	className: "oidc-serviceworker",
 	children: /* @__PURE__ */ g("div", {
 		className: "oidc-serviceworker__container",
@@ -96,7 +108,7 @@ var _ = "default", v = (e, t, n = !1) => async (...r) => await t().fetchWithToke
 			children: "Your browser is not secure enough to make authentication work. Try updating your browser or use a newer browser."
 		})]
 	})
-}), j = () => /* @__PURE__ */ h("div", {
+}), M = () => /* @__PURE__ */ h("div", {
 	className: "oidc-session-lost",
 	children: /* @__PURE__ */ g("div", {
 		className: "oidc-session-lost__container",
@@ -108,27 +120,27 @@ var _ = "default", v = (e, t, n = !1) => async (...r) => await t().fetchWithToke
 			children: "Your session has expired. Please re-authenticate."
 		})]
 	})
-}), M = ({ configurationName: e }) => (d(() => {
+}), N = ({ configurationName: e }) => (d(() => {
 	(async () => {
 		t.get(e).silentLoginCallbackAsync();
 	})().catch((e) => {
 		console.error("Error during silent login callback:", e);
 	});
-}, [e]), null), N = ({ configurationName: e }) => {
+}, [e]), null), P = ({ configurationName: e }) => {
 	let n = s(window.location.href), r = t.get, i = r(e), a = null;
 	for (let [e, t] of Object.entries(n)) e === "state" || e === "scope" || (a === null && (a = {}), a[e] = t);
 	return d(() => {
 		i.tokens || i.loginAsync(null, a, !0, n.scope);
 	}, []), /* @__PURE__ */ h(m, {});
-}, P = l.memo(({ callbackErrorComponent: e, callbackSuccessComponent: t, redirect_uri: n, silent_redirect_uri: r, silent_login_uri: i, children: a, configurationName: o, withCustomHistory: s = null }) => {
+}, F = l.memo(({ callbackErrorComponent: e, callbackSuccessComponent: t, redirect_uri: n, silent_redirect_uri: r, silent_login_uri: i, children: a, configurationName: o, withCustomHistory: s = null }) => {
 	let [l, u] = p(window ? c(window.location.href) : "");
 	d(() => {
 		let e = () => u(c(window.location.href));
 		return e(), window.addEventListener("popstate", e, !1), () => window.removeEventListener("popstate", e, !1);
 	}, []);
 	let f = c(n);
-	if (r && l === c(r)) return /* @__PURE__ */ h(M, { configurationName: o });
-	if (i && l === c(i)) return /* @__PURE__ */ h(N, { configurationName: o });
+	if (r && l === c(r)) return /* @__PURE__ */ h(N, { configurationName: o });
+	if (i && l === c(i)) return /* @__PURE__ */ h(P, { configurationName: o });
 	switch (l) {
 		case f: return /* @__PURE__ */ h(O, {
 			callBackError: e,
@@ -138,10 +150,10 @@ var _ = "default", v = (e, t, n = !1) => async (...r) => await t().fetchWithToke
 		});
 		default: return /* @__PURE__ */ h(m, { children: a });
 	}
-}), F = {
+}), I = {
 	name: "",
 	data: null
-}, I = ({ loadingComponent: e, children: n, configurationName: r }) => {
+}, L = ({ loadingComponent: e, children: n, configurationName: r }) => {
 	let [i, a] = p(!0), o = t.get, s = o(r);
 	return d(() => {
 		let e = !0;
@@ -151,102 +163,119 @@ var _ = "default", v = (e, t, n = !1) => async (...r) => await t().fetchWithToke
 			e = !1;
 		};
 	}, [r]), /* @__PURE__ */ h(m, { children: i ? /* @__PURE__ */ h(e, { configurationName: r }) : /* @__PURE__ */ h(m, { children: n }) });
-}, L = ({ isLoading: e, loadingComponent: t, children: n, configurationName: r }) => e ? /* @__PURE__ */ h(t, {
+}, R = ({ isLoading: e, loadingComponent: t, children: n, configurationName: r }) => e ? /* @__PURE__ */ h(t, {
 	configurationName: r,
 	children: n
-}) : /* @__PURE__ */ h(m, { children: n }), R = ({ children: e, configuration: n, configurationName: i = "default", callbackSuccessComponent: a = D, authenticatingComponent: s = S, loadingComponent: c = k, serviceWorkerNotSupportedComponent: l = A, authenticatingErrorComponent: u = x, sessionLostComponent: f = j, onSessionLost: m = null, onLogoutFromAnotherTab: g = null, onLogoutFromSameTab: _ = null, withCustomHistory: v = null, onEvent: y = null, getFetch: b = null, location: C = null }) => {
+}) : /* @__PURE__ */ h(m, { children: n }), z = 3e4, B = ({ children: e, configuration: n, configurationName: i = "default", callbackSuccessComponent: a = D, authenticatingComponent: s = S, loadingComponent: c = k, loadingTimeoutComponent: l = A, serviceWorkerNotSupportedComponent: u = j, authenticatingErrorComponent: f = x, sessionLostComponent: m = M, onSessionLost: g = null, onLogoutFromAnotherTab: _ = null, onLogoutFromSameTab: v = null, withCustomHistory: y = null, onEvent: b = null, getFetch: C = null, location: w = null }) => {
 	if (n && n.redirect_uri && n.silent_redirect_uri && n.redirect_uri === n.silent_redirect_uri) throw Error("redirect_uri and silent_redirect_uri must be different");
-	let w = (e = "default") => t.getOrCreate(b ?? o, C ?? new r())(n, e), [T, E] = p(F), [O, M] = p(i);
+	let T = (e = "default") => t.getOrCreate(C ?? o, w ?? new r())(n, e), [E, O] = p(I), [N, P] = p(i);
 	d(() => {
-		let e = w(i).subscribeEvents((e, t) => {
-			y && y(i, e, t);
+		let e = T(i).subscribeEvents((e, t) => {
+			b && b(i, e, t);
 		});
 		return () => {
-			w(i).removeEventSubscription(e);
+			T(i).removeEventSubscription(e);
 		};
-	}, [i, y]), d(() => {
-		let e = w(i).subscribeEvents((e, r) => {
+	}, [i, b]), d(() => {
+		let e = T(i).subscribeEvents((e, r) => {
 			if (e === t.eventNames.refreshTokensAsync_error || e === t.eventNames.syncTokensAsync_error) {
-				if (m != null) {
-					m();
+				if (g != null) {
+					g();
 					return;
 				}
-				E({
+				O({
 					name: e,
 					data: r
 				});
 			} else if (e === t.eventNames.logout_from_another_tab) {
-				if (g != null) {
-					g();
+				if (_ != null) {
+					_();
 					return;
 				}
-				E({
+				O({
 					name: e,
 					data: r
 				});
-			} else e === t.eventNames.logout_from_same_tab ? _?.() : (e === t.eventNames.loginAsync_begin || e === t.eventNames.loginCallbackAsync_end || e === t.eventNames.loginAsync_error || e === t.eventNames.loginCallbackAsync_error || e === t.eventNames.service_worker_not_supported_by_browser && n.service_worker_only === !0) && E({
+			} else e === t.eventNames.logout_from_same_tab ? v?.() : (e === t.eventNames.loadingTimeout_error || e === t.eventNames.loginAsync_begin || e === t.eventNames.loginCallbackAsync_end || e === t.eventNames.loginAsync_error || e === t.eventNames.loginCallbackAsync_error || e === t.eventNames.service_worker_not_supported_by_browser && n.service_worker_only === !0) && O({
 				name: e,
 				data: r
 			});
 		});
 		return queueMicrotask(() => {
-			M(i);
+			P(i);
 		}), () => {
-			w(i).removeEventSubscription(e), E(F);
+			T(i).removeEventSubscription(e), O(I);
 		};
-	}, [n, i]);
-	let N = f, R = s, z = c, B = l, V = u, H = O !== i, U = w(i);
-	switch (T.name) {
-		case t.eventNames.service_worker_not_supported_by_browser: return /* @__PURE__ */ h(L, {
-			loadingComponent: z,
-			isLoading: H,
+	}, [n, i]), d(() => {
+		let e = n?.loading_timeout_ms ?? z;
+		if (e <= 0 || !(E.name === "" || E.name === t.eventNames.loginAsync_begin)) return;
+		let r = setTimeout(() => {
+			T(i).publishEvent(t.eventNames.loadingTimeout_error, { timeoutMs: e });
+		}, e);
+		return () => clearTimeout(r);
+	}, [
+		E.name,
+		i,
+		n
+	]);
+	let B = m, V = s, H = c, U = l, W = u, G = f, K = N !== i, q = T(i);
+	switch (E.name) {
+		case t.eventNames.service_worker_not_supported_by_browser: return /* @__PURE__ */ h(R, {
+			loadingComponent: H,
+			isLoading: K,
 			configurationName: i,
-			children: /* @__PURE__ */ h(B, { configurationName: i })
+			children: /* @__PURE__ */ h(W, { configurationName: i })
 		});
-		case t.eventNames.loginAsync_begin: return /* @__PURE__ */ h(L, {
-			loadingComponent: z,
-			isLoading: H,
+		case t.eventNames.loginAsync_begin: return /* @__PURE__ */ h(R, {
+			loadingComponent: H,
+			isLoading: K,
 			configurationName: i,
-			children: /* @__PURE__ */ h(R, { configurationName: i })
+			children: /* @__PURE__ */ h(V, { configurationName: i })
+		});
+		case t.eventNames.loadingTimeout_error: return /* @__PURE__ */ h(R, {
+			loadingComponent: H,
+			isLoading: K,
+			configurationName: i,
+			children: /* @__PURE__ */ h(U, { configurationName: i })
 		});
 		case t.eventNames.loginAsync_error:
-		case t.eventNames.loginCallbackAsync_error: return /* @__PURE__ */ h(L, {
-			loadingComponent: z,
-			isLoading: H,
+		case t.eventNames.loginCallbackAsync_error: return /* @__PURE__ */ h(R, {
+			loadingComponent: H,
+			isLoading: K,
 			configurationName: i,
-			children: /* @__PURE__ */ h(V, { configurationName: i })
+			children: /* @__PURE__ */ h(G, { configurationName: i })
 		});
 		case t.eventNames.refreshTokensAsync_error:
 		case t.eventNames.syncTokensAsync_error:
-		case t.eventNames.logout_from_another_tab: return /* @__PURE__ */ h(L, {
-			loadingComponent: z,
-			isLoading: H,
+		case t.eventNames.logout_from_another_tab: return /* @__PURE__ */ h(R, {
+			loadingComponent: H,
+			isLoading: K,
 			configurationName: i,
-			children: /* @__PURE__ */ h(N, { configurationName: i })
+			children: /* @__PURE__ */ h(B, { configurationName: i })
 		});
-		default: return /* @__PURE__ */ h(L, {
-			loadingComponent: z,
-			isLoading: H,
+		default: return /* @__PURE__ */ h(R, {
+			loadingComponent: H,
+			isLoading: K,
 			configurationName: i,
-			children: /* @__PURE__ */ h(P, {
-				redirect_uri: U.configuration.redirect_uri,
-				silent_redirect_uri: U.configuration.silent_redirect_uri,
-				silent_login_uri: U.configuration.silent_login_uri,
+			children: /* @__PURE__ */ h(F, {
+				redirect_uri: q.configuration.redirect_uri,
+				silent_redirect_uri: q.configuration.silent_redirect_uri,
+				silent_login_uri: q.configuration.silent_login_uri,
 				callbackSuccessComponent: a,
-				callbackErrorComponent: u,
+				callbackErrorComponent: f,
 				authenticatingComponent: s,
 				configurationName: i,
-				withCustomHistory: v,
-				location: C ?? new r(),
-				children: /* @__PURE__ */ h(I, {
-					loadingComponent: z,
+				withCustomHistory: y,
+				location: w ?? new r(),
+				children: /* @__PURE__ */ h(L, {
+					loadingComponent: H,
 					configurationName: i,
 					children: e
 				})
 			})
 		});
 	}
-}, z = ({ children: e, callbackPath: n = null, extras: r = null, configurationName: i = "default" }) => {
+}, V = ({ children: e, callbackPath: n = null, extras: r = null, configurationName: i = "default" }) => {
 	let a = t.get, o = a(i);
 	return d(() => {
 		o.tokens || o.loginAsync(n, r);
@@ -255,19 +284,19 @@ var _ = "default", v = (e, t, n = !1) => async (...r) => await t().fetchWithToke
 		n,
 		r
 	]), o.tokens ? /* @__PURE__ */ h(m, { children: e }) : null;
-}, B = (e, t = null, n = null, r = "default") => (i) => /* @__PURE__ */ h(z, {
+}, H = (e, t = null, n = null, r = "default") => (i) => /* @__PURE__ */ h(V, {
 	callbackPath: t,
 	extras: n,
 	configurationName: r,
 	children: /* @__PURE__ */ h(e, { ...i })
-}), V = "default", H = (e, t) => {
+}), U = "default", W = (e, t) => {
 	let n = !1;
 	return e(t) && (n = e(t).tokens != null), n;
-}, U = (e = V) => {
-	let n = t.get, [r, i] = p(() => H(n, e));
+}, G = (e = U) => {
+	let n = t.get, [r, i] = p(() => W(n, e));
 	return d(() => {
 		let r = !0, a = n(e), o = a.subscribeEvents((a, o) => {
-			(a === t.eventNames.logout_from_another_tab || a === t.eventNames.logout_from_same_tab || a === t.eventNames.token_acquired) && r && i(H(n, e));
+			(a === t.eventNames.logout_from_another_tab || a === t.eventNames.logout_from_same_tab || a === t.eventNames.token_acquired) && r && i(W(n, e));
 		});
 		return () => {
 			r = !1, a.removeEventSubscription(o);
@@ -286,10 +315,10 @@ var _ = "default", v = (e, t, n = !1) => async (...r) => await t().fetchWithToke
 		},
 		isAuthenticated: r
 	};
-}, W = {
+}, K = {
 	accessToken: null,
 	accessTokenPayload: null
-}, G = (e) => {
+}, q = (e) => {
 	let n = t.get, r = n(e);
 	if (r.tokens) {
 		let e = r.tokens;
@@ -299,21 +328,21 @@ var _ = "default", v = (e, t, n = !1) => async (...r) => await t().fetchWithToke
 			generateDemonstrationOfProofOfPossessionAsync: r.configuration.demonstrating_proof_of_possession ? (t, n) => r.generateDemonstrationOfProofOfPossessionAsync(e.accessToken, t, n) : null
 		};
 	}
-	return W;
+	return K;
 };
-function K(e, t) {
+function J(e, t) {
 	return e.configuration.demonstrating_proof_of_possession ? (n, r, i = {}) => e.generateDemonstrationOfProofOfPossessionAsync(t.accessToken, n, r, i) : null;
 }
-var q = (e = V) => {
-	let n = t.get, [r, i] = p(() => G(e));
+var Y = (e = U) => {
+	let n = t.get, [r, i] = p(() => q(e));
 	return d(() => {
 		let r = !0, a = n(e), o = a.subscribeEvents((e, n) => {
 			if ((e === t.eventNames.token_renewed || e === t.eventNames.token_acquired || e === t.eventNames.logout_from_another_tab || e === t.eventNames.logout_from_same_tab || e === t.eventNames.refreshTokensAsync_error || e === t.eventNames.syncTokensAsync_error) && r) {
 				let e = a.tokens;
-				i(e == null ? W : {
+				i(e == null ? K : {
 					accessToken: e.accessToken,
 					accessTokenPayload: e.accessTokenPayload,
-					generateDemonstrationOfProofOfPossessionAsync: K(a, e)
+					generateDemonstrationOfProofOfPossessionAsync: J(a, e)
 				});
 			}
 		});
@@ -321,10 +350,10 @@ var q = (e = V) => {
 			r = !1, a.removeEventSubscription(o);
 		};
 	}, [e]), r;
-}, J = {
+}, X = {
 	idToken: null,
 	idTokenPayload: null
-}, Y = (e) => {
+}, Z = (e) => {
 	let n = t.get, r = n(e);
 	if (r.tokens) {
 		let e = r.tokens;
@@ -333,14 +362,14 @@ var q = (e = V) => {
 			idTokenPayload: e.idTokenPayload
 		};
 	}
-	return J;
-}, X = (e = V) => {
-	let n = t.get, [r, i] = p(() => Y(e));
+	return X;
+}, Q = (e = U) => {
+	let n = t.get, [r, i] = p(() => Z(e));
 	return d(() => {
 		let r = !0, a = n(e), o = a.subscribeEvents((e, n) => {
 			if ((e === t.eventNames.token_renewed || e === t.eventNames.token_acquired || e === t.eventNames.logout_from_another_tab || e === t.eventNames.logout_from_same_tab || e === t.eventNames.refreshTokensAsync_error || e === t.eventNames.syncTokensAsync_error) && r) {
 				let e = a.tokens;
-				i(e == null ? J : {
+				i(e == null ? X : {
 					idToken: e.idToken,
 					idTokenPayload: e.idTokenPayload
 				});
@@ -350,9 +379,9 @@ var q = (e = V) => {
 			r = !1, a.removeEventSubscription(o);
 		};
 	}, [e]), r;
-}, Z = /* @__PURE__ */ function(e) {
+}, $ = /* @__PURE__ */ function(e) {
 	return e.Unauthenticated = "Unauthenticated", e.Loading = "Loading user", e.Loaded = "User loaded", e.LoadingError = "Error loading user", e;
-}({}), Q = (e = "default", n = !1) => {
+}({}), ee = (e = "default", n = !1) => {
 	let r = t.get(e).userInfo(), [i, a] = p({
 		user: r,
 		status: r ? "User loaded" : "Unauthenticated"
@@ -404,4 +433,4 @@ var q = (e = V) => {
 	};
 };
 //#endregion
-export { e as OidcClient, n as OidcLocation, R as OidcProvider, z as OidcSecure, Z as OidcUserStatus, i as TokenAutomaticRenewMode, a as TokenRenewMode, U as useOidc, q as useOidcAccessToken, b as useOidcFetch, X as useOidcIdToken, Q as useOidcUser, y as withOidcFetch, B as withOidcSecure };
+export { e as OidcClient, n as OidcLocation, B as OidcProvider, V as OidcSecure, $ as OidcUserStatus, i as TokenAutomaticRenewMode, a as TokenRenewMode, G as useOidc, Y as useOidcAccessToken, b as useOidcFetch, Q as useOidcIdToken, ee as useOidcUser, y as withOidcFetch, H as withOidcSecure };

package/dist/index.umd.cjs

@@ -1 +1 @@
-(function(e,t){typeof exports==`object`&&typeof module<`u`?t(exports,require(`@axa-fr/oidc-client`),require(`react`),require(`react/jsx-runtime`)):typeof define==`function`&&define.amd?define([`exports`,`@axa-fr/oidc-client`,`react`,`react/jsx-runtime`],t):(e=typeof globalThis<`u`?globalThis:e||self,t(e[`react-oidc`]={},e._axa_fr_oidc_client,e.React,e.react_jsx_runtime))})(this,function(e,t,n,r){Object.defineProperty(e,Symbol.toStringTag,{value:`Module`});var i=Object.create,a=Object.defineProperty,o=Object.getOwnPropertyDescriptor,s=Object.getOwnPropertyNames,c=Object.getPrototypeOf,l=Object.prototype.hasOwnProperty,u=(e,t,n,r)=>{if(t&&typeof t==`object`||typeof t==`function`)for(var i=s(t),c=0,u=i.length,d;c<u;c++)d=i[c],!l.call(e,d)&&d!==n&&a(e,d,{get:(e=>t[e]).bind(null,d),enumerable:!(r=o(t,d))||r.enumerable});return e};n=((e,t,n)=>(n=e==null?{}:i(c(e)),u(t||!e||!e.__esModule?a(n,`default`,{value:e,enumerable:!0}):n,e)))(n,1);var d=`default`,f=(e,t,n=!1)=>async(...r)=>await t().fetchWithTokens(e,n)(...r),p=(e=null,t=d,n=!1)=>i=>a=>{let{fetch:o}=m(e||a.fetch,t,n);return(0,r.jsx)(i,{...a,fetch:o})},m=(e=null,r=d,i=!1)=>{let a=e||window.fetch,o=t.OidcClient.get;return{fetch:(0,n.useCallback)((e,t)=>f(a,()=>o(r),i)(e,t),[a,r,i])}},h=()=>(0,r.jsx)(`div`,{className:`oidc-authenticating`,children:(0,r.jsxs)(`div`,{className:`oidc-authenticating__container`,children:[(0,r.jsx)(`h1`,{className:`oidc-authenticating__title`,children:`Error authentication`}),(0,r.jsx)(`p`,{className:`oidc-authenticating__content`,children:`An error occurred during authentication.`})]})}),g=()=>(0,r.jsx)(`div`,{className:`oidc-authenticating`,children:(0,r.jsxs)(`div`,{className:`oidc-authenticating__container`,children:[(0,r.jsx)(`h1`,{className:`oidc-authenticating__title`,children:`Authentication in progress`}),(0,r.jsx)(`p`,{className:`oidc-authenticating__content`,children:`You will be redirected to the login page.`})]})}),_=()=>Math.random().toString(36).slice(2,8),v=(e,t)=>(n,r)=>{if(typeof e.CustomEvent==`function`)return new e.CustomEvent(n,r);let i=r||{bubbles:!1,cancelable:!1,detail:void 0},a=t.createEvent(`CustomEvent`);return a.initCustomEvent(n,i.bubbles,i.cancelable,i.detail),a.prototype=e.Event.prototype,a},y=(e,t,n)=>({replaceState:(r,i)=>{let a=n(),o=i||e.history.state;e.history.replaceState({key:a,state:o},null,r),e.dispatchEvent(t(`popstate`))}}),b=()=>y(window,v(window,document),_),x=()=>(0,r.jsx)(`div`,{className:`oidc-callback`,children:(0,r.jsxs)(`div`,{className:`oidc-callback__container`,children:[(0,r.jsx)(`h1`,{className:`oidc-callback__title`,children:`Authentication complete`}),(0,r.jsx)(`p`,{className:`oidc-callback__content`,children:`You will be redirected to your application.`})]})}),S=({callBackError:e,callBackSuccess:i,configurationName:a,withCustomHistory:o})=>{let[s,c]=(0,n.useState)(!1);(0,n.useEffect)(()=>{let e=!0;return(async()=>{let n=t.OidcClient.get;try{let{callbackPath:e}=await n(a).loginCallbackAsync();(o?o():b()).replaceState(e||`/`)}catch(t){e&&(console.warn(t),c(!0))}})(),()=>{e=!1}},[]);let l=e||h,u=i||x;return s?(0,r.jsx)(l,{configurationName:a}):(0,r.jsx)(u,{configurationName:a})},C=()=>(0,r.jsx)(`span`,{className:`oidc-loading`,children:`Loading`}),w=()=>(0,r.jsx)(`div`,{className:`oidc-serviceworker`,children:(0,r.jsxs)(`div`,{className:`oidc-serviceworker__container`,children:[(0,r.jsx)(`h1`,{className:`oidc-serviceworker__title`,children:`Unable to authenticate on this browser`}),(0,r.jsx)(`p`,{className:`oidc-serviceworker__content`,children:`Your browser is not secure enough to make authentication work. Try updating your browser or use a newer browser.`})]})}),T=()=>(0,r.jsx)(`div`,{className:`oidc-session-lost`,children:(0,r.jsxs)(`div`,{className:`oidc-session-lost__container`,children:[(0,r.jsx)(`h1`,{className:`oidc-session-lost__title`,children:`Session timed out`}),(0,r.jsx)(`p`,{className:`oidc-session-lost__content`,children:`Your session has expired. Please re-authenticate.`})]})}),E=({configurationName:e})=>((0,n.useEffect)(()=>{(async()=>{t.OidcClient.get(e).silentLoginCallbackAsync()})().catch(e=>{console.error(`Error during silent login callback:`,e)})},[e]),null),D=({configurationName:e})=>{let i=(0,t.getParseQueryStringFromLocation)(window.location.href),a=t.OidcClient.get,o=a(e),s=null;for(let[e,t]of Object.entries(i))e===`state`||e===`scope`||(s===null&&(s={}),s[e]=t);return(0,n.useEffect)(()=>{o.tokens||o.loginAsync(null,s,!0,i.scope)},[]),(0,r.jsx)(r.Fragment,{})},O=n.default.memo(({callbackErrorComponent:e,callbackSuccessComponent:i,redirect_uri:a,silent_redirect_uri:o,silent_login_uri:s,children:c,configurationName:l,withCustomHistory:u=null})=>{let[d,f]=(0,n.useState)(window?(0,t.getPath)(window.location.href):``);(0,n.useEffect)(()=>{let e=()=>f((0,t.getPath)(window.location.href));return e(),window.addEventListener(`popstate`,e,!1),()=>window.removeEventListener(`popstate`,e,!1)},[]);let p=(0,t.getPath)(a);if(o&&d===(0,t.getPath)(o))return(0,r.jsx)(E,{configurationName:l});if(s&&d===(0,t.getPath)(s))return(0,r.jsx)(D,{configurationName:l});switch(d){case p:return(0,r.jsx)(S,{callBackError:e,callBackSuccess:i,configurationName:l,withCustomHistory:u});default:return(0,r.jsx)(r.Fragment,{children:c})}}),k={name:``,data:null},A=({loadingComponent:e,children:i,configurationName:a})=>{let[o,s]=(0,n.useState)(!0),c=t.OidcClient.get,l=c(a);return(0,n.useEffect)(()=>{let e=!0;return l&&l.tryKeepExistingSessionAsync().then(()=>{e&&s(!1)}),()=>{e=!1}},[a]),(0,r.jsx)(r.Fragment,{children:o?(0,r.jsx)(e,{configurationName:a}):(0,r.jsx)(r.Fragment,{children:i})})},j=({isLoading:e,loadingComponent:t,children:n,configurationName:i})=>{let a=t;return e?(0,r.jsx)(a,{configurationName:i,children:n}):(0,r.jsx)(r.Fragment,{children:n})},M=({children:e,configuration:i,configurationName:a=`default`,callbackSuccessComponent:o=x,authenticatingComponent:s=g,loadingComponent:c=C,serviceWorkerNotSupportedComponent:l=w,authenticatingErrorComponent:u=h,sessionLostComponent:d=T,onSessionLost:f=null,onLogoutFromAnotherTab:p=null,onLogoutFromSameTab:m=null,withCustomHistory:_=null,onEvent:v=null,getFetch:y=null,location:b=null})=>{if(i&&i.redirect_uri&&i.silent_redirect_uri&&i.redirect_uri===i.silent_redirect_uri)throw Error(`redirect_uri and silent_redirect_uri must be different`);let S=(e=`default`)=>t.OidcClient.getOrCreate(y??t.getFetchDefault,b??new t.OidcLocation)(i,e),[E,D]=(0,n.useState)(k),[M,N]=(0,n.useState)(a);(0,n.useEffect)(()=>{let e=S(a).subscribeEvents((e,t)=>{v&&v(a,e,t)});return()=>{S(a).removeEventSubscription(e)}},[a,v]),(0,n.useEffect)(()=>{let e=S(a).subscribeEvents((e,n)=>{if(e===t.OidcClient.eventNames.refreshTokensAsync_error||e===t.OidcClient.eventNames.syncTokensAsync_error){if(f!=null){f();return}D({name:e,data:n})}else if(e===t.OidcClient.eventNames.logout_from_another_tab){if(p!=null){p();return}D({name:e,data:n})}else e===t.OidcClient.eventNames.logout_from_same_tab?m?.():(e===t.OidcClient.eventNames.loginAsync_begin||e===t.OidcClient.eventNames.loginCallbackAsync_end||e===t.OidcClient.eventNames.loginAsync_error||e===t.OidcClient.eventNames.loginCallbackAsync_error||e===t.OidcClient.eventNames.service_worker_not_supported_by_browser&&i.service_worker_only===!0)&&D({name:e,data:n})});return queueMicrotask(()=>{N(a)}),()=>{S(a).removeEventSubscription(e),D(k)}},[i,a]);let P=d,F=s,I=c,L=l,R=u,z=M!==a,B=S(a);switch(E.name){case t.OidcClient.eventNames.service_worker_not_supported_by_browser:return(0,r.jsx)(j,{loadingComponent:I,isLoading:z,configurationName:a,children:(0,r.jsx)(L,{configurationName:a})});case t.OidcClient.eventNames.loginAsync_begin:return(0,r.jsx)(j,{loadingComponent:I,isLoading:z,configurationName:a,children:(0,r.jsx)(F,{configurationName:a})});case t.OidcClient.eventNames.loginAsync_error:case t.OidcClient.eventNames.loginCallbackAsync_error:return(0,r.jsx)(j,{loadingComponent:I,isLoading:z,configurationName:a,children:(0,r.jsx)(R,{configurationName:a})});case t.OidcClient.eventNames.refreshTokensAsync_error:case t.OidcClient.eventNames.syncTokensAsync_error:case t.OidcClient.eventNames.logout_from_another_tab:return(0,r.jsx)(j,{loadingComponent:I,isLoading:z,configurationName:a,children:(0,r.jsx)(P,{configurationName:a})});default:return(0,r.jsx)(j,{loadingComponent:I,isLoading:z,configurationName:a,children:(0,r.jsx)(O,{redirect_uri:B.configuration.redirect_uri,silent_redirect_uri:B.configuration.silent_redirect_uri,silent_login_uri:B.configuration.silent_login_uri,callbackSuccessComponent:o,callbackErrorComponent:u,authenticatingComponent:s,configurationName:a,withCustomHistory:_,location:b??new t.OidcLocation,children:(0,r.jsx)(A,{loadingComponent:I,configurationName:a,children:e})})})}},N=({children:e,callbackPath:i=null,extras:a=null,configurationName:o=`default`})=>{let s=t.OidcClient.get,c=s(o);return(0,n.useEffect)(()=>{c.tokens||c.loginAsync(i,a)},[o,i,a]),c.tokens?(0,r.jsx)(r.Fragment,{children:e}):null},P=(e,t=null,n=null,i=`default`)=>a=>(0,r.jsx)(N,{callbackPath:t,extras:n,configurationName:i,children:(0,r.jsx)(e,{...a})}),F=`default`,I=(e,t)=>{let n=!1;return e(t)&&(n=e(t).tokens!=null),n},L=(e=F)=>{let r=t.OidcClient.get,[i,a]=(0,n.useState)(()=>I(r,e));return(0,n.useEffect)(()=>{let n=!0,i=r(e),o=i.subscribeEvents((i,o)=>{(i===t.OidcClient.eventNames.logout_from_another_tab||i===t.OidcClient.eventNames.logout_from_same_tab||i===t.OidcClient.eventNames.token_acquired)&&n&&a(I(r,e))});return()=>{n=!1,i.removeEventSubscription(o)}},[e]),{login:(t=void 0,n=void 0,i=!1,a=void 0)=>r(e).loginAsync(t,n,!1,a,i),logout:(t=void 0,n=void 0)=>r(e).logoutAsync(t,n),renewTokens:async(t=void 0)=>{let n=await r(e).renewTokensAsync(t);return{accessToken:n.accessToken,accessTokenPayload:n.accessTokenPayload,idToken:n.idToken,idTokenPayload:n.idTokenPayload}},isAuthenticated:i}},R={accessToken:null,accessTokenPayload:null},z=e=>{let n=t.OidcClient.get,r=n(e);if(r.tokens){let e=r.tokens;return{accessToken:e.accessToken,accessTokenPayload:e.accessTokenPayload,generateDemonstrationOfProofOfPossessionAsync:r.configuration.demonstrating_proof_of_possession?(t,n)=>r.generateDemonstrationOfProofOfPossessionAsync(e.accessToken,t,n):null}}return R};function B(e,t){return e.configuration.demonstrating_proof_of_possession?(n,r,i={})=>e.generateDemonstrationOfProofOfPossessionAsync(t.accessToken,n,r,i):null}var V=(e=F)=>{let r=t.OidcClient.get,[i,a]=(0,n.useState)(()=>z(e));return(0,n.useEffect)(()=>{let n=!0,i=r(e),o=i.subscribeEvents((e,r)=>{if((e===t.OidcClient.eventNames.token_renewed||e===t.OidcClient.eventNames.token_acquired||e===t.OidcClient.eventNames.logout_from_another_tab||e===t.OidcClient.eventNames.logout_from_same_tab||e===t.OidcClient.eventNames.refreshTokensAsync_error||e===t.OidcClient.eventNames.syncTokensAsync_error)&&n){let e=i.tokens;a(e==null?R:{accessToken:e.accessToken,accessTokenPayload:e.accessTokenPayload,generateDemonstrationOfProofOfPossessionAsync:B(i,e)})}});return()=>{n=!1,i.removeEventSubscription(o)}},[e]),i},H={idToken:null,idTokenPayload:null},U=e=>{let n=t.OidcClient.get,r=n(e);if(r.tokens){let e=r.tokens;return{idToken:e.idToken,idTokenPayload:e.idTokenPayload}}return H},W=(e=F)=>{let r=t.OidcClient.get,[i,a]=(0,n.useState)(()=>U(e));return(0,n.useEffect)(()=>{let n=!0,i=r(e),o=i.subscribeEvents((e,r)=>{if((e===t.OidcClient.eventNames.token_renewed||e===t.OidcClient.eventNames.token_acquired||e===t.OidcClient.eventNames.logout_from_another_tab||e===t.OidcClient.eventNames.logout_from_same_tab||e===t.OidcClient.eventNames.refreshTokensAsync_error||e===t.OidcClient.eventNames.syncTokensAsync_error)&&n){let e=i.tokens;a(e==null?H:{idToken:e.idToken,idTokenPayload:e.idTokenPayload})}});return()=>{n=!1,i.removeEventSubscription(o)}},[e]),i},G=function(e){return e.Unauthenticated=`Unauthenticated`,e.Loading=`Loading user`,e.Loaded=`User loaded`,e.LoadingError=`Error loading user`,e}({});Object.defineProperty(e,`OidcClient`,{enumerable:!0,get:function(){return t.OidcClient}}),Object.defineProperty(e,`OidcLocation`,{enumerable:!0,get:function(){return t.OidcLocation}}),e.OidcProvider=M,e.OidcSecure=N,e.OidcUserStatus=G,Object.defineProperty(e,`TokenAutomaticRenewMode`,{enumerable:!0,get:function(){return t.TokenAutomaticRenewMode}}),Object.defineProperty(e,`TokenRenewMode`,{enumerable:!0,get:function(){return t.TokenRenewMode}}),e.useOidc=L,e.useOidcAccessToken=V,e.useOidcFetch=m,e.useOidcIdToken=W,e.useOidcUser=(e=`default`,r=!1)=>{let i=t.OidcClient.get(e).userInfo(),[a,o]=(0,n.useState)({user:i,status:i?`User loaded`:`Unauthenticated`}),[s,c]=(0,n.useState)(+!!i),l=(0,n.useRef)(+!!i);return(0,n.useEffect)(()=>{let n=t.OidcClient.get(e),i=!0;if(n&&n.tokens){let e=s===l.current;if(e&&n.userInfo())return;l.current=s,queueMicrotask(()=>{i&&o({...a,status:`Loading user`})}),n.userInfoAsync(!e,r).then(e=>{i&&o({user:e,status:`User loaded`})}).catch(()=>o({...a,status:`Error loading user`}))}else queueMicrotask(()=>{i&&o({user:null,status:`Unauthenticated`})});let c=n.subscribeEvents(e=>{(e===t.OidcClient.eventNames.logout_from_another_tab||e===t.OidcClient.eventNames.logout_from_same_tab)&&i&&o({user:null,status:`Unauthenticated`})});return()=>{i=!1,n.removeEventSubscription(c)}},[s,e,r]),{oidcUser:a.user,oidcUserLoadingState:a.status,reloadOidcUser:()=>{c(s+1)}}},e.withOidcFetch=p,e.withOidcSecure=P});
+(function(e,t){typeof exports==`object`&&typeof module<`u`?t(exports,require(`@axa-fr/oidc-client`),require(`react`),require(`react/jsx-runtime`)):typeof define==`function`&&define.amd?define([`exports`,`@axa-fr/oidc-client`,`react`,`react/jsx-runtime`],t):(e=typeof globalThis<`u`?globalThis:e||self,t(e[`react-oidc`]={},e._axa_fr_oidc_client,e.React,e.react_jsx_runtime))})(this,function(e,t,n,r){Object.defineProperty(e,Symbol.toStringTag,{value:`Module`});var i=Object.create,a=Object.defineProperty,o=Object.getOwnPropertyDescriptor,s=Object.getOwnPropertyNames,c=Object.getPrototypeOf,l=Object.prototype.hasOwnProperty,u=(e,t,n,r)=>{if(t&&typeof t==`object`||typeof t==`function`)for(var i=s(t),c=0,u=i.length,d;c<u;c++)d=i[c],!l.call(e,d)&&d!==n&&a(e,d,{get:(e=>t[e]).bind(null,d),enumerable:!(r=o(t,d))||r.enumerable});return e};n=((e,t,n)=>(n=e==null?{}:i(c(e)),u(t||!e||!e.__esModule?a(n,`default`,{value:e,enumerable:!0}):n,e)))(n,1);var d=`default`,f=(e,t,n=!1)=>async(...r)=>await t().fetchWithTokens(e,n)(...r),p=(e=null,t=d,n=!1)=>i=>a=>{let{fetch:o}=m(e||a.fetch,t,n);return(0,r.jsx)(i,{...a,fetch:o})},m=(e=null,r=d,i=!1)=>{let a=e||window.fetch,o=t.OidcClient.get;return{fetch:(0,n.useCallback)((e,t)=>f(a,()=>o(r),i)(e,t),[a,r,i])}},h=()=>(0,r.jsx)(`div`,{className:`oidc-authenticating`,children:(0,r.jsxs)(`div`,{className:`oidc-authenticating__container`,children:[(0,r.jsx)(`h1`,{className:`oidc-authenticating__title`,children:`Error authentication`}),(0,r.jsx)(`p`,{className:`oidc-authenticating__content`,children:`An error occurred during authentication.`})]})}),g=()=>(0,r.jsx)(`div`,{className:`oidc-authenticating`,children:(0,r.jsxs)(`div`,{className:`oidc-authenticating__container`,children:[(0,r.jsx)(`h1`,{className:`oidc-authenticating__title`,children:`Authentication in progress`}),(0,r.jsx)(`p`,{className:`oidc-authenticating__content`,children:`You will be redirected to the login page.`})]})}),_=()=>Math.random().toString(36).slice(2,8),v=(e,t)=>(n,r)=>{if(typeof e.CustomEvent==`function`)return new e.CustomEvent(n,r);let i=r||{bubbles:!1,cancelable:!1,detail:void 0},a=t.createEvent(`CustomEvent`);return a.initCustomEvent(n,i.bubbles,i.cancelable,i.detail),a.prototype=e.Event.prototype,a},y=(e,t,n)=>({replaceState:(r,i)=>{let a=n(),o=i||e.history.state;e.history.replaceState({key:a,state:o},null,r),e.dispatchEvent(t(`popstate`))}}),b=()=>y(window,v(window,document),_),x=()=>(0,r.jsx)(`div`,{className:`oidc-callback`,children:(0,r.jsxs)(`div`,{className:`oidc-callback__container`,children:[(0,r.jsx)(`h1`,{className:`oidc-callback__title`,children:`Authentication complete`}),(0,r.jsx)(`p`,{className:`oidc-callback__content`,children:`You will be redirected to your application.`})]})}),S=({callBackError:e,callBackSuccess:i,configurationName:a,withCustomHistory:o})=>{let[s,c]=(0,n.useState)(!1);(0,n.useEffect)(()=>{let e=!0;return(async()=>{let n=t.OidcClient.get;try{let{callbackPath:e}=await n(a).loginCallbackAsync();(o?o():b()).replaceState(e||`/`)}catch(t){e&&(console.warn(t),c(!0))}})(),()=>{e=!1}},[]);let l=e||h,u=i||x;return s?(0,r.jsx)(l,{configurationName:a}):(0,r.jsx)(u,{configurationName:a})},C=()=>(0,r.jsx)(`span`,{className:`oidc-loading`,children:`Loading`}),w=()=>(0,r.jsx)(`div`,{className:`oidc-loading-timeout`,children:(0,r.jsxs)(`div`,{className:`oidc-loading-timeout__container`,children:[(0,r.jsx)(`h1`,{className:`oidc-loading-timeout__title`,children:`Loading timeout`}),(0,r.jsx)(`p`,{className:`oidc-loading-timeout__content`,children:`Authentication is taking longer than expected. Please try refreshing the page.`})]})}),T=()=>(0,r.jsx)(`div`,{className:`oidc-serviceworker`,children:(0,r.jsxs)(`div`,{className:`oidc-serviceworker__container`,children:[(0,r.jsx)(`h1`,{className:`oidc-serviceworker__title`,children:`Unable to authenticate on this browser`}),(0,r.jsx)(`p`,{className:`oidc-serviceworker__content`,children:`Your browser is not secure enough to make authentication work. Try updating your browser or use a newer browser.`})]})}),E=()=>(0,r.jsx)(`div`,{className:`oidc-session-lost`,children:(0,r.jsxs)(`div`,{className:`oidc-session-lost__container`,children:[(0,r.jsx)(`h1`,{className:`oidc-session-lost__title`,children:`Session timed out`}),(0,r.jsx)(`p`,{className:`oidc-session-lost__content`,children:`Your session has expired. Please re-authenticate.`})]})}),D=({configurationName:e})=>((0,n.useEffect)(()=>{(async()=>{t.OidcClient.get(e).silentLoginCallbackAsync()})().catch(e=>{console.error(`Error during silent login callback:`,e)})},[e]),null),O=({configurationName:e})=>{let i=(0,t.getParseQueryStringFromLocation)(window.location.href),a=t.OidcClient.get,o=a(e),s=null;for(let[e,t]of Object.entries(i))e===`state`||e===`scope`||(s===null&&(s={}),s[e]=t);return(0,n.useEffect)(()=>{o.tokens||o.loginAsync(null,s,!0,i.scope)},[]),(0,r.jsx)(r.Fragment,{})},k=n.default.memo(({callbackErrorComponent:e,callbackSuccessComponent:i,redirect_uri:a,silent_redirect_uri:o,silent_login_uri:s,children:c,configurationName:l,withCustomHistory:u=null})=>{let[d,f]=(0,n.useState)(window?(0,t.getPath)(window.location.href):``);(0,n.useEffect)(()=>{let e=()=>f((0,t.getPath)(window.location.href));return e(),window.addEventListener(`popstate`,e,!1),()=>window.removeEventListener(`popstate`,e,!1)},[]);let p=(0,t.getPath)(a);if(o&&d===(0,t.getPath)(o))return(0,r.jsx)(D,{configurationName:l});if(s&&d===(0,t.getPath)(s))return(0,r.jsx)(O,{configurationName:l});switch(d){case p:return(0,r.jsx)(S,{callBackError:e,callBackSuccess:i,configurationName:l,withCustomHistory:u});default:return(0,r.jsx)(r.Fragment,{children:c})}}),A={name:``,data:null},j=({loadingComponent:e,children:i,configurationName:a})=>{let[o,s]=(0,n.useState)(!0),c=t.OidcClient.get,l=c(a);return(0,n.useEffect)(()=>{let e=!0;return l&&l.tryKeepExistingSessionAsync().then(()=>{e&&s(!1)}),()=>{e=!1}},[a]),(0,r.jsx)(r.Fragment,{children:o?(0,r.jsx)(e,{configurationName:a}):(0,r.jsx)(r.Fragment,{children:i})})},M=({isLoading:e,loadingComponent:t,children:n,configurationName:i})=>{let a=t;return e?(0,r.jsx)(a,{configurationName:i,children:n}):(0,r.jsx)(r.Fragment,{children:n})},N=3e4,P=({children:e,configuration:i,configurationName:a=`default`,callbackSuccessComponent:o=x,authenticatingComponent:s=g,loadingComponent:c=C,loadingTimeoutComponent:l=w,serviceWorkerNotSupportedComponent:u=T,authenticatingErrorComponent:d=h,sessionLostComponent:f=E,onSessionLost:p=null,onLogoutFromAnotherTab:m=null,onLogoutFromSameTab:_=null,withCustomHistory:v=null,onEvent:y=null,getFetch:b=null,location:S=null})=>{if(i&&i.redirect_uri&&i.silent_redirect_uri&&i.redirect_uri===i.silent_redirect_uri)throw Error(`redirect_uri and silent_redirect_uri must be different`);let D=(e=`default`)=>t.OidcClient.getOrCreate(b??t.getFetchDefault,S??new t.OidcLocation)(i,e),[O,P]=(0,n.useState)(A),[F,I]=(0,n.useState)(a);(0,n.useEffect)(()=>{let e=D(a).subscribeEvents((e,t)=>{y&&y(a,e,t)});return()=>{D(a).removeEventSubscription(e)}},[a,y]),(0,n.useEffect)(()=>{let e=D(a).subscribeEvents((e,n)=>{if(e===t.OidcClient.eventNames.refreshTokensAsync_error||e===t.OidcClient.eventNames.syncTokensAsync_error){if(p!=null){p();return}P({name:e,data:n})}else if(e===t.OidcClient.eventNames.logout_from_another_tab){if(m!=null){m();return}P({name:e,data:n})}else e===t.OidcClient.eventNames.logout_from_same_tab?_?.():(e===t.OidcClient.eventNames.loadingTimeout_error||e===t.OidcClient.eventNames.loginAsync_begin||e===t.OidcClient.eventNames.loginCallbackAsync_end||e===t.OidcClient.eventNames.loginAsync_error||e===t.OidcClient.eventNames.loginCallbackAsync_error||e===t.OidcClient.eventNames.service_worker_not_supported_by_browser&&i.service_worker_only===!0)&&P({name:e,data:n})});return queueMicrotask(()=>{I(a)}),()=>{D(a).removeEventSubscription(e),P(A)}},[i,a]),(0,n.useEffect)(()=>{let e=i?.loading_timeout_ms??N;if(e<=0||!(O.name===``||O.name===t.OidcClient.eventNames.loginAsync_begin))return;let n=setTimeout(()=>{D(a).publishEvent(t.OidcClient.eventNames.loadingTimeout_error,{timeoutMs:e})},e);return()=>clearTimeout(n)},[O.name,a,i]);let L=f,R=s,z=c,B=l,V=u,H=d,U=F!==a,W=D(a);switch(O.name){case t.OidcClient.eventNames.service_worker_not_supported_by_browser:return(0,r.jsx)(M,{loadingComponent:z,isLoading:U,configurationName:a,children:(0,r.jsx)(V,{configurationName:a})});case t.OidcClient.eventNames.loginAsync_begin:return(0,r.jsx)(M,{loadingComponent:z,isLoading:U,configurationName:a,children:(0,r.jsx)(R,{configurationName:a})});case t.OidcClient.eventNames.loadingTimeout_error:return(0,r.jsx)(M,{loadingComponent:z,isLoading:U,configurationName:a,children:(0,r.jsx)(B,{configurationName:a})});case t.OidcClient.eventNames.loginAsync_error:case t.OidcClient.eventNames.loginCallbackAsync_error:return(0,r.jsx)(M,{loadingComponent:z,isLoading:U,configurationName:a,children:(0,r.jsx)(H,{configurationName:a})});case t.OidcClient.eventNames.refreshTokensAsync_error:case t.OidcClient.eventNames.syncTokensAsync_error:case t.OidcClient.eventNames.logout_from_another_tab:return(0,r.jsx)(M,{loadingComponent:z,isLoading:U,configurationName:a,children:(0,r.jsx)(L,{configurationName:a})});default:return(0,r.jsx)(M,{loadingComponent:z,isLoading:U,configurationName:a,children:(0,r.jsx)(k,{redirect_uri:W.configuration.redirect_uri,silent_redirect_uri:W.configuration.silent_redirect_uri,silent_login_uri:W.configuration.silent_login_uri,callbackSuccessComponent:o,callbackErrorComponent:d,authenticatingComponent:s,configurationName:a,withCustomHistory:v,location:S??new t.OidcLocation,children:(0,r.jsx)(j,{loadingComponent:z,configurationName:a,children:e})})})}},F=({children:e,callbackPath:i=null,extras:a=null,configurationName:o=`default`})=>{let s=t.OidcClient.get,c=s(o);return(0,n.useEffect)(()=>{c.tokens||c.loginAsync(i,a)},[o,i,a]),c.tokens?(0,r.jsx)(r.Fragment,{children:e}):null},I=(e,t=null,n=null,i=`default`)=>a=>(0,r.jsx)(F,{callbackPath:t,extras:n,configurationName:i,children:(0,r.jsx)(e,{...a})}),L=`default`,R=(e,t)=>{let n=!1;return e(t)&&(n=e(t).tokens!=null),n},z=(e=L)=>{let r=t.OidcClient.get,[i,a]=(0,n.useState)(()=>R(r,e));return(0,n.useEffect)(()=>{let n=!0,i=r(e),o=i.subscribeEvents((i,o)=>{(i===t.OidcClient.eventNames.logout_from_another_tab||i===t.OidcClient.eventNames.logout_from_same_tab||i===t.OidcClient.eventNames.token_acquired)&&n&&a(R(r,e))});return()=>{n=!1,i.removeEventSubscription(o)}},[e]),{login:(t=void 0,n=void 0,i=!1,a=void 0)=>r(e).loginAsync(t,n,!1,a,i),logout:(t=void 0,n=void 0)=>r(e).logoutAsync(t,n),renewTokens:async(t=void 0)=>{let n=await r(e).renewTokensAsync(t);return{accessToken:n.accessToken,accessTokenPayload:n.accessTokenPayload,idToken:n.idToken,idTokenPayload:n.idTokenPayload}},isAuthenticated:i}},B={accessToken:null,accessTokenPayload:null},V=e=>{let n=t.OidcClient.get,r=n(e);if(r.tokens){let e=r.tokens;return{accessToken:e.accessToken,accessTokenPayload:e.accessTokenPayload,generateDemonstrationOfProofOfPossessionAsync:r.configuration.demonstrating_proof_of_possession?(t,n)=>r.generateDemonstrationOfProofOfPossessionAsync(e.accessToken,t,n):null}}return B};function H(e,t){return e.configuration.demonstrating_proof_of_possession?(n,r,i={})=>e.generateDemonstrationOfProofOfPossessionAsync(t.accessToken,n,r,i):null}var U=(e=L)=>{let r=t.OidcClient.get,[i,a]=(0,n.useState)(()=>V(e));return(0,n.useEffect)(()=>{let n=!0,i=r(e),o=i.subscribeEvents((e,r)=>{if((e===t.OidcClient.eventNames.token_renewed||e===t.OidcClient.eventNames.token_acquired||e===t.OidcClient.eventNames.logout_from_another_tab||e===t.OidcClient.eventNames.logout_from_same_tab||e===t.OidcClient.eventNames.refreshTokensAsync_error||e===t.OidcClient.eventNames.syncTokensAsync_error)&&n){let e=i.tokens;a(e==null?B:{accessToken:e.accessToken,accessTokenPayload:e.accessTokenPayload,generateDemonstrationOfProofOfPossessionAsync:H(i,e)})}});return()=>{n=!1,i.removeEventSubscription(o)}},[e]),i},W={idToken:null,idTokenPayload:null},G=e=>{let n=t.OidcClient.get,r=n(e);if(r.tokens){let e=r.tokens;return{idToken:e.idToken,idTokenPayload:e.idTokenPayload}}return W},K=(e=L)=>{let r=t.OidcClient.get,[i,a]=(0,n.useState)(()=>G(e));return(0,n.useEffect)(()=>{let n=!0,i=r(e),o=i.subscribeEvents((e,r)=>{if((e===t.OidcClient.eventNames.token_renewed||e===t.OidcClient.eventNames.token_acquired||e===t.OidcClient.eventNames.logout_from_another_tab||e===t.OidcClient.eventNames.logout_from_same_tab||e===t.OidcClient.eventNames.refreshTokensAsync_error||e===t.OidcClient.eventNames.syncTokensAsync_error)&&n){let e=i.tokens;a(e==null?W:{idToken:e.idToken,idTokenPayload:e.idTokenPayload})}});return()=>{n=!1,i.removeEventSubscription(o)}},[e]),i},q=function(e){return e.Unauthenticated=`Unauthenticated`,e.Loading=`Loading user`,e.Loaded=`User loaded`,e.LoadingError=`Error loading user`,e}({});Object.defineProperty(e,`OidcClient`,{enumerable:!0,get:function(){return t.OidcClient}}),Object.defineProperty(e,`OidcLocation`,{enumerable:!0,get:function(){return t.OidcLocation}}),e.OidcProvider=P,e.OidcSecure=F,e.OidcUserStatus=q,Object.defineProperty(e,`TokenAutomaticRenewMode`,{enumerable:!0,get:function(){return t.TokenAutomaticRenewMode}}),Object.defineProperty(e,`TokenRenewMode`,{enumerable:!0,get:function(){return t.TokenRenewMode}}),e.useOidc=z,e.useOidcAccessToken=U,e.useOidcFetch=m,e.useOidcIdToken=K,e.useOidcUser=(e=`default`,r=!1)=>{let i=t.OidcClient.get(e).userInfo(),[a,o]=(0,n.useState)({user:i,status:i?`User loaded`:`Unauthenticated`}),[s,c]=(0,n.useState)(+!!i),l=(0,n.useRef)(+!!i);return(0,n.useEffect)(()=>{let n=t.OidcClient.get(e),i=!0;if(n&&n.tokens){let e=s===l.current;if(e&&n.userInfo())return;l.current=s,queueMicrotask(()=>{i&&o({...a,status:`Loading user`})}),n.userInfoAsync(!e,r).then(e=>{i&&o({user:e,status:`User loaded`})}).catch(()=>o({...a,status:`Error loading user`}))}else queueMicrotask(()=>{i&&o({user:null,status:`Unauthenticated`})});let c=n.subscribeEvents(e=>{(e===t.OidcClient.eventNames.logout_from_another_tab||e===t.OidcClient.eventNames.logout_from_same_tab)&&i&&o({user:null,status:`Unauthenticated`})});return()=>{i=!1,n.removeEventSubscription(c)}},[s,e,r]),{oidcUser:a.user,oidcUserLoadingState:a.status,reloadOidcUser:()=>{c(s+1)}}},e.withOidcFetch=p,e.withOidcSecure=I});

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@axa-fr/react-oidc",
-  "version": "7.27.11",
+  "version": "7.27.13",
   "private": false,
   "type": "module",
   "main": "./dist/index.umd.cjs",
@@ -40,8 +40,8 @@
     "lint": "eslint src"
   },
   "dependencies": {
-    "@axa-fr/oidc-client": "7.27.11",
-    "@axa-fr/oidc-client-service-worker": "7.27.11"
+    "@axa-fr/oidc-client": "7.27.13",
+    "@axa-fr/oidc-client-service-worker": "7.27.13"
   },
   "peerDependencies": {
     "react": "^17.0.0 || ^18.0.0 || ^19.0.0"

package/src/OidcProvider.spec.tsx

@@ -0,0 +1,279 @@
+import { act, render, screen } from '@testing-library/react';
+import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest';
+
+let mockEventSubscribers: Array<{ id: string; func: (name: string, data: any) => void }> = [];
+const mockPublishEvent = vi.fn((eventName, data) => {
+  mockEventSubscribers.forEach(sub => sub.func(eventName, data));
+});
+const mockSubscribeEvents = vi.fn(func => {
+  const id = Math.random().toString();
+  mockEventSubscribers.push({ id, func });
+  return id;
+});
+const mockRemoveEventSubscription = vi.fn(id => {
+  mockEventSubscribers = mockEventSubscribers.filter(e => e.id !== id);
+});
+
+vi.mock('@axa-fr/oidc-client', () => ({
+  OidcClient: {
+    getOrCreate: vi.fn(() => () => ({
+      subscribeEvents: mockSubscribeEvents,
+      removeEventSubscription: mockRemoveEventSubscription,
+      publishEvent: mockPublishEvent,
+      configuration: {
+        redirect_uri: 'http://localhost/callback',
+        silent_redirect_uri: 'http://localhost/silent-callback',
+        silent_login_uri: 'http://localhost/silent-login',
+      },
+      tryKeepExistingSessionAsync: vi.fn().mockResolvedValue(true),
+    })),
+    get: vi.fn(() => ({
+      subscribeEvents: mockSubscribeEvents,
+      removeEventSubscription: mockRemoveEventSubscription,
+      publishEvent: mockPublishEvent,
+      configuration: {
+        redirect_uri: 'http://localhost/callback',
+        silent_redirect_uri: 'http://localhost/silent-callback',
+        silent_login_uri: 'http://localhost/silent-login',
+      },
+      tryKeepExistingSessionAsync: vi.fn().mockResolvedValue(true),
+    })),
+    eventNames: {
+      service_worker_not_supported_by_browser: 'service_worker_not_supported_by_browser',
+      token_acquired: 'token_acquired',
+      logout_from_another_tab: 'logout_from_another_tab',
+      logout_from_same_tab: 'logout_from_same_tab',
+      token_renewed: 'token_renewed',
+      token_timer: 'token_timer',
+      loginAsync_begin: 'loginAsync_begin',
+      loginAsync_error: 'loginAsync_error',
+      loginCallbackAsync_begin: 'loginCallbackAsync_begin',
+      loginCallbackAsync_end: 'loginCallbackAsync_end',
+      loginCallbackAsync_error: 'loginCallbackAsync_error',
+      refreshTokensAsync_begin: 'refreshTokensAsync_begin',
+      refreshTokensAsync: 'refreshTokensAsync',
+      refreshTokensAsync_end: 'refreshTokensAsync_end',
+      refreshTokensAsync_error: 'refreshTokensAsync_error',
+      refreshTokensAsync_silent_error: 'refreshTokensAsync_silent_error',
+      tryKeepExistingSessionAsync_begin: 'tryKeepExistingSessionAsync_begin',
+      tryKeepExistingSessionAsync_end: 'tryKeepExistingSessionAsync_end',
+      tryKeepExistingSessionAsync_error: 'tryKeepExistingSessionAsync_error',
+      silentLoginAsync_begin: 'silentLoginAsync_begin',
+      silentLoginAsync: 'silentLoginAsync',
+      silentLoginAsync_end: 'silentLoginAsync_end',
+      silentLoginAsync_error: 'silentLoginAsync_error',
+      syncTokensAsync_begin: 'syncTokensAsync_begin',
+      syncTokensAsync_lock_not_available: 'syncTokensAsync_lock_not_available',
+      syncTokensAsync_end: 'syncTokensAsync_end',
+      syncTokensAsync_error: 'syncTokensAsync_error',
+      tokensInvalidAndWaitingActionsToRefresh: 'tokensInvalidAndWaitingActionsToRefresh',
+      loadingTimeout_error: 'loadingTimeout_error',
+    },
+  },
+  OidcLocation: class {
+    getCurrentHref() {
+      return 'http://localhost/';
+    }
+    getPath() {
+      return '/';
+    }
+    open() {}
+    reload() {}
+    getOrigin() {
+      return 'http://localhost';
+    }
+  },
+  getFetchDefault: vi.fn(() => fetch),
+}));
+
+vi.mock('./core/routes/OidcRoutes.js', () => ({
+  default: ({ children }: any) => <div data-testid="oidc-routes">{children}</div>,
+}));
+
+import { OidcProvider } from './OidcProvider';
+
+describe('OidcProvider loading timeout', () => {
+  beforeEach(() => {
+    vi.useFakeTimers();
+    vi.clearAllMocks();
+    mockEventSubscribers = [];
+  });
+
+  afterEach(() => {
+    vi.useRealTimers();
+  });
+
+  const baseConfiguration = {
+    client_id: 'test-client',
+    redirect_uri: 'http://localhost/callback',
+    silent_redirect_uri: 'http://localhost/silent-callback',
+    scope: 'openid',
+    authority: 'http://localhost/authority',
+  };
+
+  it('should fire loadingTimeout_error when stuck in initial loading state', async () => {
+    render(
+      <OidcProvider
+        configuration={{ ...baseConfiguration, loading_timeout_ms: 100 }}
+        configurationName="default"
+      >
+        <div>App</div>
+      </OidcProvider>,
+    );
+
+    act(() => {
+      vi.advanceTimersByTime(100);
+    });
+
+    expect(mockPublishEvent).toHaveBeenCalledWith('loadingTimeout_error', { timeoutMs: 100 });
+  });
+
+  it('should fire loadingTimeout_error when stuck in loginAsync_begin state', async () => {
+    render(
+      <OidcProvider
+        configuration={{ ...baseConfiguration, loading_timeout_ms: 200 }}
+        configurationName="default"
+      >
+        <div>App</div>
+      </OidcProvider>,
+    );
+
+    // Simulate loginAsync_begin event
+    act(() => {
+      mockEventSubscribers.forEach(sub => sub.func('loginAsync_begin', {}));
+    });
+
+    // Reset to track timeout event specifically
+    mockPublishEvent.mockClear();
+
+    act(() => {
+      vi.advanceTimersByTime(200);
+    });
+
+    expect(mockPublishEvent).toHaveBeenCalledWith('loadingTimeout_error', { timeoutMs: 200 });
+  });
+
+  it('should render loadingTimeoutComponent when loadingTimeout_error is triggered', async () => {
+    const CustomTimeoutComponent = () => <div data-testid="custom-timeout">Timeout!</div>;
+
+    render(
+      <OidcProvider
+        configuration={{ ...baseConfiguration, loading_timeout_ms: 50 }}
+        configurationName="default"
+        loadingTimeoutComponent={CustomTimeoutComponent}
+      >
+        <div>App</div>
+      </OidcProvider>,
+    );
+
+    await act(async () => {
+      vi.advanceTimersByTime(50);
+    });
+
+    expect(screen.getByTestId('custom-timeout')).toBeTruthy();
+  });
+
+  it('should NOT fire loadingTimeout_error when loading_timeout_ms is 0 (disabled)', async () => {
+    render(
+      <OidcProvider
+        configuration={{ ...baseConfiguration, loading_timeout_ms: 0 }}
+        configurationName="default"
+      >
+        <div>App</div>
+      </OidcProvider>,
+    );
+
+    act(() => {
+      vi.advanceTimersByTime(60_000);
+    });
+
+    expect(mockPublishEvent).not.toHaveBeenCalledWith('loadingTimeout_error', expect.anything());
+  });
+
+  it('should NOT fire loadingTimeout_error when loading_timeout_ms is negative (disabled)', async () => {
+    render(
+      <OidcProvider
+        configuration={{ ...baseConfiguration, loading_timeout_ms: -1 }}
+        configurationName="default"
+      >
+        <div>App</div>
+      </OidcProvider>,
+    );
+
+    act(() => {
+      vi.advanceTimersByTime(60_000);
+    });
+
+    expect(mockPublishEvent).not.toHaveBeenCalledWith('loadingTimeout_error', expect.anything());
+  });
+
+  it('should NOT fire loadingTimeout_error if provider leaves loading state before deadline', async () => {
+    render(
+      <OidcProvider
+        configuration={{ ...baseConfiguration, loading_timeout_ms: 500 }}
+        configurationName="default"
+      >
+        <div>App</div>
+      </OidcProvider>,
+    );
+
+    // Advance partway
+    act(() => {
+      vi.advanceTimersByTime(200);
+    });
+
+    // Simulate successful callback (leaving loading state)
+    act(() => {
+      mockEventSubscribers.forEach(sub => sub.func('loginCallbackAsync_end', {}));
+    });
+
+    mockPublishEvent.mockClear();
+
+    // Advance past original timeout
+    act(() => {
+      vi.advanceTimersByTime(500);
+    });
+
+    expect(mockPublishEvent).not.toHaveBeenCalledWith('loadingTimeout_error', expect.anything());
+  });
+
+  it('should use default timeout of 30000ms when loading_timeout_ms is not configured', async () => {
+    render(
+      <OidcProvider configuration={baseConfiguration} configurationName="default">
+        <div>App</div>
+      </OidcProvider>,
+    );
+
+    act(() => {
+      vi.advanceTimersByTime(29_999);
+    });
+
+    expect(mockPublishEvent).not.toHaveBeenCalledWith('loadingTimeout_error', expect.anything());
+
+    act(() => {
+      vi.advanceTimersByTime(1);
+    });
+
+    expect(mockPublishEvent).toHaveBeenCalledWith('loadingTimeout_error', { timeoutMs: 30_000 });
+  });
+
+  it('should propagate loadingTimeout_error through onEvent callback', async () => {
+    const onEvent = vi.fn();
+
+    render(
+      <OidcProvider
+        configuration={{ ...baseConfiguration, loading_timeout_ms: 100 }}
+        configurationName="default"
+        onEvent={onEvent}
+      >
+        <div>App</div>
+      </OidcProvider>,
+    );
+
+    act(() => {
+      vi.advanceTimersByTime(100);
+    });
+
+    expect(onEvent).toHaveBeenCalledWith('default', 'loadingTimeout_error', { timeoutMs: 100 });
+  });
+});

package/src/OidcProvider.tsx

@@ -13,6 +13,7 @@ import {
   Authenticating,
   CallBackSuccess,
   Loading,
+  LoadingTimeout,
   SessionLost,
 } from './core/default-component/index.js';
 import ServiceWorkerNotSupported from './core/default-component/ServiceWorkerNotSupported.component.js';
@@ -31,6 +32,7 @@ export type OidcProviderProps = {
   authenticatingComponent?: ComponentType<any>;
   authenticatingErrorComponent?: ComponentType<any>;
   loadingComponent?: ComponentType<any>;
+  loadingTimeoutComponent?: ComponentType<any>;
   serviceWorkerNotSupportedComponent?: ComponentType<any>;
   configurationName?: string;
   configuration?: OidcConfiguration;
@@ -84,6 +86,8 @@ const Switch = ({ isLoading, loadingComponent, children, configurationName }) =>
   return <>{children}</>;
 };
 
+const DEFAULT_LOADING_TIMEOUT_MS = 30_000;
+
 export const OidcProvider: FC<PropsWithChildren<OidcProviderProps>> = ({
   children,
   configuration,
@@ -91,6 +95,7 @@ export const OidcProvider: FC<PropsWithChildren<OidcProviderProps>> = ({
   callbackSuccessComponent = CallBackSuccess,
   authenticatingComponent = Authenticating,
   loadingComponent = Loading,
+  loadingTimeoutComponent = LoadingTimeout,
   serviceWorkerNotSupportedComponent = ServiceWorkerNotSupported,
   authenticatingErrorComponent = AuthenticatingError,
   sessionLostComponent = SessionLost,
@@ -155,6 +160,8 @@ export const OidcProvider: FC<PropsWithChildren<OidcProviderProps>> = ({
           onLogoutFromSameTab();
         }
         // setEvent({name, data});
+      } else if (name === OidcClient.eventNames.loadingTimeout_error) {
+        setEvent({ name, data });
       } else if (
         name === OidcClient.eventNames.loginAsync_begin ||
         name === OidcClient.eventNames.loginCallbackAsync_end ||
@@ -181,9 +188,26 @@ export const OidcProvider: FC<PropsWithChildren<OidcProviderProps>> = ({
     };
   }, [configuration, configurationName]);
 
+  useEffect(() => {
+    const timeoutMs = configuration?.loading_timeout_ms ?? DEFAULT_LOADING_TIMEOUT_MS;
+    if (timeoutMs <= 0) {
+      return;
+    }
+    const isStuck = event.name === '' || event.name === OidcClient.eventNames.loginAsync_begin;
+    if (!isStuck) {
+      return;
+    }
+    const timeoutId = setTimeout(() => {
+      const oidcInstance = getOidc(configurationName);
+      oidcInstance.publishEvent(OidcClient.eventNames.loadingTimeout_error, { timeoutMs });
+    }, timeoutMs);
+    return () => clearTimeout(timeoutId);
+  }, [event.name, configurationName, configuration]);
+
   const SessionLostComponent = sessionLostComponent;
   const AuthenticatingComponent = authenticatingComponent;
   const LoadingComponent = loadingComponent;
+  const LoadingTimeoutComponent = loadingTimeoutComponent;
   const ServiceWorkerNotSupportedComponent = serviceWorkerNotSupportedComponent;
   const AuthenticatingErrorComponent = authenticatingErrorComponent;
 
@@ -211,6 +235,16 @@ export const OidcProvider: FC<PropsWithChildren<OidcProviderProps>> = ({
           <AuthenticatingComponent configurationName={configurationName} />
         </Switch>
       );
+    case OidcClient.eventNames.loadingTimeout_error:
+      return (
+        <Switch
+          loadingComponent={LoadingComponent}
+          isLoading={isLoading}
+          configurationName={configurationName}
+        >
+          <LoadingTimeoutComponent configurationName={configurationName} />
+        </Switch>
+      );
     case OidcClient.eventNames.loginAsync_error:
     case OidcClient.eventNames.loginCallbackAsync_error:
       return (

package/src/core/default-component/LoadingTimeout.component.tsx

@@ -0,0 +1,14 @@
+import { ComponentType } from 'react';
+
+const LoadingTimeout: ComponentType<any> = () => (
+  <div className="oidc-loading-timeout">
+    <div className="oidc-loading-timeout__container">
+      <h1 className="oidc-loading-timeout__title">Loading timeout</h1>
+      <p className="oidc-loading-timeout__content">
+        Authentication is taking longer than expected. Please try refreshing the page.
+      </p>
+    </div>
+  </div>
+);
+
+export default LoadingTimeout;

package/src/core/default-component/index.ts

@@ -2,5 +2,6 @@ export { default as AuthenticateError } from './AuthenticateError.component.js';
 export { default as Authenticating } from './Authenticating.component.js';
 export { default as Callback, CallBackSuccess } from './Callback.component.js';
 export { default as Loading } from './Loading.component.js';
+export { default as LoadingTimeout } from './LoadingTimeout.component.js';
 export { default as ServiceWorkerNotSupported } from './ServiceWorkerNotSupported.component.js';
 export { default as SessionLost } from './SessionLost.component.js';