@axa-fr/react-oidc 7.27.19 → 7.29.2

package/README.md

@@ -173,6 +173,7 @@ const configuration = {
   silent_redirect_uri: window.location.origin + '/authentication/silent-callback',
   scope: 'openid profile email api offline_access', // offline_access scope allow your client to retrieve the refresh_token
   authority: 'https://demo.duendesoftware.com',
+  par: 'auto',
   service_worker_relative_url: '/OidcServiceWorker.js', // just comment that line to disable service worker mode
   service_worker_only: false,
   demonstrating_proof_of_possession: false,
@@ -219,6 +220,8 @@ const configuration = {
       userinfo_endpoint: String,
       end_session_endpoint: String,
       revocation_endpoint: String,
+      pushed_authorization_request_endpoint: String,
+      require_pushed_authorization_requests: Boolean,
       check_session_iframe: String,
       issuer: String,
     },
@@ -233,6 +236,8 @@ const configuration = {
     withCustomHistory: Function, // Override history modification, return an instance with replaceState(url, stateHistory) implemented (like History.replaceState())
     authority_time_cache_wellknowurl_in_second: 60 * 60, // Time to cache in seconds of the openid well-known URL, default is 1 hour
     authority_timeout_wellknowurl_in_millisecond: 10000, // Timeout in milliseconds of the openid well-known URL, default is 10 seconds, then an error is thrown
+    par: 'disabled' | 'auto' | 'required', // Pushed Authorization Requests mode, default is 'disabled'
+    par_request_timeout: Number, // PAR endpoint timeout in milliseconds, default is 10000
     monitor_session: Boolean, // Add OpenID monitor session, default is false (more information https://openid.net/specs/openid-connect-session-1_0.html), if you need to set it to true consider https://infi.nl/nieuws/spa-necromancy/
     onLogoutFromAnotherTab: Function, // Optional, can be set to override the default behavior, this function is triggered when a user with the same subject is logged out from another tab when session_monitor is active
     onLogoutFromSameTab: Function, // Optional, can be set to override the default behavior, this function is triggered when a user is logged out from the same tab when session_monitor is active
@@ -279,6 +284,29 @@ const defaultDemonstratingProofOfPossessionConfiguration: DemonstratingProofOfPo
 
 ```
 
+### Pushed Authorization Requests (PAR)
+
+PAR is configured on the nested OIDC `configuration` object:
+
+```tsx
+const configuration = {
+  client_id: 'spa-client',
+  redirect_uri: `${window.location.origin}/authentication/callback`,
+  scope: 'openid profile',
+  authority: 'https://issuer.example.com',
+  par: 'auto', // 'disabled' (default), 'auto', or 'required'
+};
+```
+
+`auto` uses the discovered `pushed_authorization_request_endpoint` when it is
+available. `required` fails before navigation if no endpoint is available.
+Once PAR is selected, a PAR endpoint error is surfaced and never silently
+downgraded. Browser deployments require the issuer's PAR endpoint to allow
+CORS from the application origin. See the
+[`@axa-fr/oidc-client` PAR documentation](../oidc-client/README.md#pushed-authorization-requests-par)
+for complete mode semantics, custom authority metadata, error handling, and
+security guidance.
+
 ## How to consume
 
 > **Note (issue #1679):** `useOidc`, `useOidcUser`, `useOidcAccessToken` and
@@ -663,6 +691,7 @@ const configuration = {
   silent_redirect_uri: 'http://localhost:3001/#authentication/silent-callback', // Optional activate silent-login that use cookies between OIDC server and client javascript to restore the session
   scope: 'openid profile email api offline_access',
   authority: 'https://demo.duendesoftware.com',
+  par: 'auto',
 };
 
 const onEvent = (configurationName, eventName, data) => {
@@ -712,6 +741,7 @@ export const configurationIdentityServerWithHash = {
   silent_redirect_uri: window.location.origin + '#authentication-silent-callback',
   scope: 'openid profile email api offline_access',
   authority: 'https://demo.duendesoftware.com',
+  par: 'auto',
   refresh_time_before_tokens_expiration_in_second: 70,
   service_worker_relative_url: '/OidcServiceWorker.js',
   service_worker_only: false,

package/dist/OidcProvider.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"OidcProvider.d.ts","sourceRoot":"","sources":["../src/OidcProvider.tsx"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,EAEL,cAAc,EACd,UAAU,EACV,iBAAiB,EAElB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,aAAa,EAAE,EAAE,EAAE,iBAAiB,EAAuB,MAAM,OAAO,CAAC;AAYlF,OAAO,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AAE5D,MAAM,MAAM,WAAW,GAAG;IACxB,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,UAAU,CAAC;CAC7B,CAAC;AAIF,MAAM,MAAM,iBAAiB,GAAG;IAC9B,wBAAwB,CAAC,EAAE,aAAa,CAAC,GAAG,CAAC,CAAC;IAC9C,oBAAoB,CAAC,EAAE,aAAa,CAAC,GAAG,CAAC,CAAC;IAC1C,uBAAuB,CAAC,EAAE,aAAa,CAAC,GAAG,CAAC,CAAC;IAC7C,4BAA4B,CAAC,EAAE,aAAa,CAAC,GAAG,CAAC,CAAC;IAClD,gBAAgB,CAAC,EAAE,aAAa,CAAC,GAAG,CAAC,CAAC;IACtC,uBAAuB,CAAC,EAAE,aAAa,CAAC,GAAG,CAAC,CAAC;IAC7C,kCAAkC,CAAC,EAAE,aAAa,CAAC,GAAG,CAAC,CAAC;IACxD,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,aAAa,CAAC,EAAE,iBAAiB,CAAC;IAClC,QAAQ,EAAE,GAAG,CAAC;IACd,aAAa,CAAC,EAAE,MAAM,IAAI,CAAC;IAC3B,sBAAsB,CAAC,EAAE,MAAM,IAAI,CAAC;IACpC,mBAAmB,CAAC,EAAE,MAAM,IAAI,CAAC;IACjC,iBAAiB,CAAC,EAAE,MAAM,aAAa,CAAC;IACxC,qBAAqB,CAAC,EAAE,CAAC,YAAY,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAChE,OAAO,CAAC,EAAE,CAAC,aAAa,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,KAAK,IAAI,CAAC;IACnE,QAAQ,CAAC,EAAE,MAAM,KAAK,CAAC;IACvB,QAAQ,CAAC,EAAE,cAAc,CAAC;CAC3B,CAAC;AAEF,MAAM,MAAM,gBAAgB,GAAG;IAC7B,iBAAiB,EAAE,MAAM,CAAC;IAC1B,gBAAgB,EAAE,iBAAiB,CAAC,GAAG,CAAC,CAAC;CAC1C,CAAC;AA+DF,eAAO,MAAM,YAAY,EAAE,EAAE,CAAC,iBAAiB,CAAC,iBAAiB,CAAC,CA4NjE,CAAC;AAEF,eAAe,YAAY,CAAC"}
+{"version":3,"file":"OidcProvider.d.ts","sourceRoot":"","sources":["../src/OidcProvider.tsx"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,EAEL,cAAc,EACd,UAAU,EACV,iBAAiB,EAElB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,aAAa,EAAE,EAAE,EAAE,iBAAiB,EAAuB,MAAM,OAAO,CAAC;AAYlF,OAAO,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AAE5D,MAAM,MAAM,WAAW,GAAG;IACxB,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,UAAU,CAAC;CAC7B,CAAC;AAIF,MAAM,MAAM,iBAAiB,GAAG;IAC9B,wBAAwB,CAAC,EAAE,aAAa,CAAC,GAAG,CAAC,CAAC;IAC9C,oBAAoB,CAAC,EAAE,aAAa,CAAC,GAAG,CAAC,CAAC;IAC1C,uBAAuB,CAAC,EAAE,aAAa,CAAC,GAAG,CAAC,CAAC;IAC7C,4BAA4B,CAAC,EAAE,aAAa,CAAC,GAAG,CAAC,CAAC;IAClD,gBAAgB,CAAC,EAAE,aAAa,CAAC,GAAG,CAAC,CAAC;IACtC,uBAAuB,CAAC,EAAE,aAAa,CAAC,GAAG,CAAC,CAAC;IAC7C,kCAAkC,CAAC,EAAE,aAAa,CAAC,GAAG,CAAC,CAAC;IACxD,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,aAAa,CAAC,EAAE,iBAAiB,CAAC;IAClC,QAAQ,EAAE,GAAG,CAAC;IACd,aAAa,CAAC,EAAE,MAAM,IAAI,CAAC;IAC3B,sBAAsB,CAAC,EAAE,MAAM,IAAI,CAAC;IACpC,mBAAmB,CAAC,EAAE,MAAM,IAAI,CAAC;IACjC,iBAAiB,CAAC,EAAE,MAAM,aAAa,CAAC;IACxC,qBAAqB,CAAC,EAAE,CAAC,YAAY,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAChE,OAAO,CAAC,EAAE,CAAC,aAAa,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,KAAK,IAAI,CAAC;IACnE,QAAQ,CAAC,EAAE,MAAM,KAAK,CAAC;IACvB,QAAQ,CAAC,EAAE,cAAc,CAAC;CAC3B,CAAC;AAEF,MAAM,MAAM,gBAAgB,GAAG;IAC7B,iBAAiB,EAAE,MAAM,CAAC;IAC1B,gBAAgB,EAAE,iBAAiB,CAAC,GAAG,CAAC,CAAC;CAC1C,CAAC;AAoDF,eAAO,MAAM,YAAY,EAAE,EAAE,CAAC,iBAAiB,CAAC,iBAAiB,CAAC,CA8NjE,CAAC;AAEF,eAAe,YAAY,CAAC"}

package/dist/index.d.ts

@@ -4,7 +4,7 @@ export { OidcProvider } from './OidcProvider.js';
 export { OidcSecure, withOidcSecure } from './OidcSecure.js';
 export { useOidc, useOidcAccessToken, useOidcIdToken } from './ReactOidc.js';
 export { OidcUserStatus, useOidcUser } from './User.js';
-export type { AuthorityConfiguration, Fetch, ILOidcLocation, OidcConfiguration, StringMap, } from '@axa-fr/oidc-client';
+export type { AuthorityConfiguration, Fetch, ILOidcLocation, OidcConfiguration, OidcErrorOptions, OidcErrorPhase, PushedAuthorizationRequestMode, StringMap, } from '@axa-fr/oidc-client';
 export type { OidcUserInfo } from '@axa-fr/oidc-client';
-export { isOidcStateError, OidcClient, OidcLocation, OidcStateError, OidcStateErrorCode, TokenAutomaticRenewMode, TokenRenewMode, } from '@axa-fr/oidc-client';
+export { isOidcError, isOidcStateError, isPushedAuthorizationRequestError, OidcClient, OidcError, OidcErrorCode, OidcLocation, OidcStateError, OidcStateErrorCode, PushedAuthorizationRequestError, PushedAuthorizationRequestErrorCode, TokenAutomaticRenewMode, TokenRenewMode, } from '@axa-fr/oidc-client';
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAC9D,YAAY,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAC3D,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACjD,OAAO,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AAC7D,OAAO,EAAE,OAAO,EAAE,kBAAkB,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAC7E,OAAO,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AACxD,YAAY,EACV,sBAAsB,EACtB,KAAK,EACL,cAAc,EACd,iBAAiB,EACjB,SAAS,GACV,MAAM,qBAAqB,CAAC;AAC7B,YAAY,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACxD,OAAO,EACL,gBAAgB,EAChB,UAAU,EACV,YAAY,EACZ,cAAc,EACd,kBAAkB,EAClB,uBAAuB,EACvB,cAAc,GACf,MAAM,qBAAqB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAC9D,YAAY,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAC3D,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACjD,OAAO,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AAC7D,OAAO,EAAE,OAAO,EAAE,kBAAkB,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAC7E,OAAO,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AACxD,YAAY,EACV,sBAAsB,EACtB,KAAK,EACL,cAAc,EACd,iBAAiB,EACjB,gBAAgB,EAChB,cAAc,EACd,8BAA8B,EAC9B,SAAS,GACV,MAAM,qBAAqB,CAAC;AAC7B,YAAY,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACxD,OAAO,EACL,WAAW,EACX,gBAAgB,EAChB,iCAAiC,EACjC,UAAU,EACV,SAAS,EACT,aAAa,EACb,YAAY,EACZ,cAAc,EACd,kBAAkB,EAClB,+BAA+B,EAC/B,mCAAmC,EACnC,uBAAuB,EACvB,cAAc,GACf,MAAM,qBAAqB,CAAC"}

package/dist/index.js

@@ -1,45 +1,45 @@
-import { OidcClient as e, OidcClient as t, OidcLocation as n, OidcLocation as r, OidcStateError as i, OidcStateErrorCode as a, TokenAutomaticRenewMode as o, TokenRenewMode as s, getFetchDefault as c, getParseQueryStringFromLocation as l, getPath as u, isOidcStateError as d } from "@axa-fr/oidc-client";
-import f, { useCallback as p, useEffect as m, useRef as h, useState as g } from "react";
-import { Fragment as _, jsx as v, jsxs as y } from "react/jsx-runtime";
+import { OidcClient as e, OidcClient as t, OidcError as n, OidcErrorCode as r, OidcLocation as i, OidcLocation as a, OidcStateError as o, OidcStateErrorCode as s, PushedAuthorizationRequestError as c, PushedAuthorizationRequestErrorCode as l, TokenAutomaticRenewMode as u, TokenRenewMode as d, getFetchDefault as ee, getParseQueryStringFromLocation as f, getPath as p, isOidcError as m, isOidcStateError as h, isPushedAuthorizationRequestError as g } from "@axa-fr/oidc-client";
+import _, { useCallback as v, useEffect as y, useRef as b, useState as x } from "react";
+import { Fragment as S, jsx as C, jsxs as w } from "react/jsx-runtime";
 //#region src/FetchToken.tsx
-var b = "default", x = (e, t, n = !1) => async (...r) => await t().fetchWithTokens(e, n)(...r), S = (e = null, t = b, n = !1) => (r) => (i) => {
-	let { fetch: a } = C(e || i.fetch, t, n);
-	return /* @__PURE__ */ v(r, {
+var T = "default", E = (e, t, n = !1) => async (...r) => await t().fetchWithTokens(e, n)(...r), D = (e = null, t = T, n = !1) => (r) => (i) => {
+	let { fetch: a } = O(e || i.fetch, t, n);
+	return /* @__PURE__ */ C(r, {
 		...i,
 		fetch: a
 	});
-}, C = (e = null, n = b, r = !1) => {
+}, O = (e = null, n = T, r = !1) => {
 	let i = e || window.fetch, a = t.getOrThrow;
-	return { fetch: p((e, t) => x(i, () => a(n), r)(e, t), [
+	return { fetch: v((e, t) => E(i, () => a(n), r)(e, t), [
 		i,
 		n,
 		r
 	]) };
-}, w = () => /* @__PURE__ */ v("div", {
+}, k = () => /* @__PURE__ */ C("div", {
 	className: "oidc-authenticating",
-	children: /* @__PURE__ */ y("div", {
+	children: /* @__PURE__ */ w("div", {
 		className: "oidc-authenticating__container",
-		children: [/* @__PURE__ */ v("h1", {
+		children: [/* @__PURE__ */ C("h1", {
 			className: "oidc-authenticating__title",
 			children: "Error authentication"
-		}), /* @__PURE__ */ v("p", {
+		}), /* @__PURE__ */ C("p", {
 			className: "oidc-authenticating__content",
 			children: "An error occurred during authentication."
 		})]
 	})
-}), T = () => /* @__PURE__ */ v("div", {
+}), te = () => /* @__PURE__ */ C("div", {
 	className: "oidc-authenticating",
-	children: /* @__PURE__ */ y("div", {
+	children: /* @__PURE__ */ w("div", {
 		className: "oidc-authenticating__container",
-		children: [/* @__PURE__ */ v("h1", {
+		children: [/* @__PURE__ */ C("h1", {
 			className: "oidc-authenticating__title",
 			children: "Authentication in progress"
-		}), /* @__PURE__ */ v("p", {
+		}), /* @__PURE__ */ C("p", {
 			className: "oidc-authenticating__content",
 			children: "You will be redirected to the login page."
 		})]
 	})
-}), E = () => Math.random().toString(36).slice(2, 8), D = (e, t) => (n, r) => {
+}), A = () => Math.random().toString(36).slice(2, 8), j = (e, t) => (n, r) => {
 	if (typeof e.CustomEvent == "function") return new e.CustomEvent(n, r);
 	let i = r || {
 		bubbles: !1,
@@ -47,27 +47,27 @@ var b = "default", x = (e, t, n = !1) => async (...r) => await t().fetchWithToke
 		detail: void 0
 	}, a = t.createEvent("CustomEvent");
 	return a.initCustomEvent(n, i.bubbles, i.cancelable, i.detail), a.prototype = e.Event.prototype, a;
-}, O = (e, t, n) => ({ replaceState: (r, i) => {
+}, M = (e, t, n) => ({ replaceState: (r, i) => {
 	let a = n(), o = i || e.history.state;
 	e.history.replaceState({
 		key: a,
 		state: o
 	}, null, r), e.dispatchEvent(t("popstate"));
-} }), k = () => O(window, D(window, document), E), A = () => /* @__PURE__ */ v("div", {
+} }), N = () => M(window, j(window, document), A), P = () => /* @__PURE__ */ C("div", {
 	className: "oidc-callback",
-	children: /* @__PURE__ */ y("div", {
+	children: /* @__PURE__ */ w("div", {
 		className: "oidc-callback__container",
-		children: [/* @__PURE__ */ v("h1", {
+		children: [/* @__PURE__ */ C("h1", {
 			className: "oidc-callback__title",
 			children: "Authentication complete"
-		}), /* @__PURE__ */ v("p", {
+		}), /* @__PURE__ */ C("p", {
 			className: "oidc-callback__content",
 			children: "You will be redirected to your application."
 		})]
 	})
-}), j = 200, M = (e, t = window) => t.location.pathname === e || e === "/", N = ({ callBackError: e, callBackSuccess: n, configurationName: r, withCustomHistory: i, navigateAfterCallback: a }) => {
-	let [o, s] = g(!1);
-	return m(() => {
+}), F = 200, I = (e, t = window) => t.location.pathname === e || e === "/", L = ({ callBackError: e, callBackSuccess: n, configurationName: r, withCustomHistory: i, navigateAfterCallback: a }) => {
+	let [o, s] = x(!1);
+	return y(() => {
 		let e = !0;
 		return (async () => {
 			let n = t.getOrThrow;
@@ -85,11 +85,11 @@ var b = "default", x = (e, t, n = !1) => async (...r) => await t().fetchWithToke
 						error: n
 					}), e && (console.warn(n), s(!0));
 				}
-				else (i ? i() : k()).replaceState(l), await new Promise((e) => {
+				else (i ? i() : N()).replaceState(l), await new Promise((e) => {
 					setTimeout(() => {
 						e();
-					}, j);
-				}), e && (M(l) ? o.publishEvent(t.eventNames.loginCallbackAsync_navigated, {
+					}, F);
+				}), e && (I(l) ? o.publishEvent(t.eventNames.loginCallbackAsync_navigated, {
 					configurationName: r,
 					callbackPath: l
 				}) : (o.publishEvent(t.eventNames.loginCallbackAsync_navigation_error, {
@@ -103,233 +103,233 @@ var b = "default", x = (e, t, n = !1) => async (...r) => await t().fetchWithToke
 		})(), () => {
 			e = !1;
 		};
-	}, []), v(o ? e || w : n || A, { configurationName: r });
-}, P = () => /* @__PURE__ */ v("span", {
+	}, []), C(o ? e || k : n || P, { configurationName: r });
+}, ne = () => /* @__PURE__ */ C("span", {
 	className: "oidc-loading",
 	children: "Loading"
-}), F = () => /* @__PURE__ */ v("div", {
+}), re = () => /* @__PURE__ */ C("div", {
 	className: "oidc-loading-timeout",
-	children: /* @__PURE__ */ y("div", {
+	children: /* @__PURE__ */ w("div", {
 		className: "oidc-loading-timeout__container",
-		children: [/* @__PURE__ */ v("h1", {
+		children: [/* @__PURE__ */ C("h1", {
 			className: "oidc-loading-timeout__title",
 			children: "Loading timeout"
-		}), /* @__PURE__ */ v("p", {
+		}), /* @__PURE__ */ C("p", {
 			className: "oidc-loading-timeout__content",
 			children: "Authentication is taking longer than expected. Please try refreshing the page."
 		})]
 	})
-}), ee = () => /* @__PURE__ */ v("div", {
+}), ie = () => /* @__PURE__ */ C("div", {
 	className: "oidc-serviceworker",
-	children: /* @__PURE__ */ y("div", {
+	children: /* @__PURE__ */ w("div", {
 		className: "oidc-serviceworker__container",
-		children: [/* @__PURE__ */ v("h1", {
+		children: [/* @__PURE__ */ C("h1", {
 			className: "oidc-serviceworker__title",
 			children: "Unable to authenticate on this browser"
-		}), /* @__PURE__ */ v("p", {
+		}), /* @__PURE__ */ C("p", {
 			className: "oidc-serviceworker__content",
 			children: "Your browser is not secure enough to make authentication work. Try updating your browser or use a newer browser."
 		})]
 	})
-}), te = () => /* @__PURE__ */ v("div", {
+}), R = () => /* @__PURE__ */ C("div", {
 	className: "oidc-session-lost",
-	children: /* @__PURE__ */ y("div", {
+	children: /* @__PURE__ */ w("div", {
 		className: "oidc-session-lost__container",
-		children: [/* @__PURE__ */ v("h1", {
+		children: [/* @__PURE__ */ C("h1", {
 			className: "oidc-session-lost__title",
 			children: "Session timed out"
-		}), /* @__PURE__ */ v("p", {
+		}), /* @__PURE__ */ C("p", {
 			className: "oidc-session-lost__content",
 			children: "Your session has expired. Please re-authenticate."
 		})]
 	})
-}), I = ({ configurationName: e }) => (m(() => {
+}), z = ({ configurationName: e }) => (y(() => {
 	(async () => {
 		t.getOrThrow(e).silentLoginCallbackAsync();
 	})().catch((e) => {
 		console.error("Error during silent login callback:", e);
 	});
-}, [e]), null), L = ({ configurationName: e }) => {
-	let n = l(window.location.href), r = t.getOrThrow, i = r(e), a = null;
+}, [e]), null), B = ({ configurationName: e }) => {
+	let n = f(window.location.href), r = t.getOrThrow, i = r(e), a = null;
 	for (let [e, t] of Object.entries(n)) e === "state" || e === "scope" || (a === null && (a = {}), a[e] = t);
-	return m(() => {
+	return y(() => {
 		i.tokens || i.loginAsync(null, a, !0, n.scope);
-	}, []), /* @__PURE__ */ v(_, {});
-}, R = f.memo(({ callbackErrorComponent: e, callbackSuccessComponent: t, redirect_uri: n, silent_redirect_uri: r, silent_login_uri: i, children: a, configurationName: o, withCustomHistory: s = null, navigateAfterCallback: c = null }) => {
-	let [l, d] = g(window ? u(window.location.href) : "");
-	m(() => {
-		let e = () => d(u(window.location.href));
+	}, []), /* @__PURE__ */ C(S, {});
+}, V = _.memo(({ callbackErrorComponent: e, callbackSuccessComponent: t, redirect_uri: n, silent_redirect_uri: r, silent_login_uri: i, children: a, configurationName: o, withCustomHistory: s = null, navigateAfterCallback: c = null }) => {
+	let [l, u] = x(window ? p(window.location.href) : "");
+	y(() => {
+		let e = () => u(p(window.location.href));
 		return e(), window.addEventListener("popstate", e, !1), () => window.removeEventListener("popstate", e, !1);
 	}, []);
-	let f = u(n);
-	if (r && l === u(r)) return /* @__PURE__ */ v(I, { configurationName: o });
-	if (i && l === u(i)) return /* @__PURE__ */ v(L, { configurationName: o });
+	let d = p(n);
+	if (r && l === p(r)) return /* @__PURE__ */ C(z, { configurationName: o });
+	if (i && l === p(i)) return /* @__PURE__ */ C(B, { configurationName: o });
 	switch (l) {
-		case f: return /* @__PURE__ */ v(N, {
+		case d: return /* @__PURE__ */ C(L, {
 			callBackError: e,
 			callBackSuccess: t,
 			configurationName: o,
 			withCustomHistory: s,
 			navigateAfterCallback: c
 		});
-		default: return /* @__PURE__ */ v(_, { children: a });
+		default: return /* @__PURE__ */ C(S, { children: a });
 	}
-}), z = {
+}), H = {
 	name: "",
 	data: null
-}, B = ({ loadingComponent: e, children: n, configurationName: r }) => {
-	let [i, a] = g(!0), o = t.get, s = o(r);
-	return m(() => {
+}, ae = ({ loadingComponent: e, children: n, configurationName: r }) => {
+	let [i, a] = x(!0), o = t.get, s = o(r);
+	return y(() => {
 		let e = !0;
 		return s && s.tryKeepExistingSessionAsync().then(() => {
 			e && a(!1);
 		}), () => {
 			e = !1;
 		};
-	}, [r]), /* @__PURE__ */ v(_, { children: i ? /* @__PURE__ */ v(e, { configurationName: r }) : /* @__PURE__ */ v(_, { children: n }) });
-}, V = ({ isLoading: e, loadingComponent: t, children: n, configurationName: r }) => e ? /* @__PURE__ */ v(t, {
+	}, [r]), /* @__PURE__ */ C(S, { children: i ? /* @__PURE__ */ C(e, { configurationName: r }) : /* @__PURE__ */ C(S, { children: n }) });
+}, U = ({ isLoading: e, loadingComponent: t, children: n, configurationName: r }) => e ? /* @__PURE__ */ C(t, {
 	configurationName: r,
 	children: n
-}) : /* @__PURE__ */ v(_, { children: n }), H = 3e4, U = (e, n) => e === t.eventNames.token_acquired || e === t.eventNames.token_renewed || e === t.eventNames.loginCallbackAsync_end ? !0 : e === t.eventNames.tryKeepExistingSessionAsync_end ? n?.success === !0 : !1, W = ({ children: e, configuration: n, configurationName: i = "default", callbackSuccessComponent: a = A, authenticatingComponent: o = T, loadingComponent: s = P, loadingTimeoutComponent: l = F, serviceWorkerNotSupportedComponent: u = ee, authenticatingErrorComponent: d = w, sessionLostComponent: f = te, onSessionLost: p = null, onLogoutFromAnotherTab: h = null, onLogoutFromSameTab: _ = null, withCustomHistory: y = null, navigateAfterCallback: b = null, onEvent: x = null, getFetch: S = null, location: C = null }) => {
+}) : /* @__PURE__ */ C(S, { children: n }), W = 3e4, G = (e) => e === t.eventNames.token_acquired || e === t.eventNames.token_renewed || e === t.eventNames.loginCallbackAsync_end || e === t.eventNames.tryKeepExistingSessionAsync_end || e === t.eventNames.tryKeepExistingSessionAsync_error, K = ({ children: e, configuration: n, configurationName: r = "default", callbackSuccessComponent: i = P, authenticatingComponent: o = te, loadingComponent: s = ne, loadingTimeoutComponent: c = re, serviceWorkerNotSupportedComponent: l = ie, authenticatingErrorComponent: u = k, sessionLostComponent: d = R, onSessionLost: f = null, onLogoutFromAnotherTab: p = null, onLogoutFromSameTab: m = null, withCustomHistory: h = null, navigateAfterCallback: g = null, onEvent: _ = null, getFetch: v = null, location: b = null }) => {
 	if (n && n.redirect_uri && n.silent_redirect_uri && n.redirect_uri === n.silent_redirect_uri) throw Error("redirect_uri and silent_redirect_uri must be different");
-	let E = (e = "default") => t.getOrCreate(S ?? c, C ?? new r())(n, e), [D, O] = g(z), [k, j] = g(!1), [M, N] = g(i);
-	m(() => {
-		let e = E(i).subscribeEvents((e, t) => {
-			x && x(i, e, t);
+	let S = (e = "default") => t.getOrCreate(v ?? ee, b ?? new a())(n, e), [w, T] = x(H), [E, D] = x(!0), [O, A] = x(r);
+	y(() => {
+		let e = S(r).subscribeEvents((e, t) => {
+			_ && _(r, e, t);
 		});
 		return () => {
-			E(i).removeEventSubscription(e);
+			S(r).removeEventSubscription(e);
 		};
-	}, [i, x]), m(() => {
-		let e = E(i).subscribeEvents((e, r) => {
-			if (U(e, r) && j(!0), e === t.eventNames.refreshTokensAsync_error || e === t.eventNames.syncTokensAsync_error) {
-				if (p != null) {
-					p();
+	}, [r, _]), y(() => {
+		let e = S(r).subscribeEvents((e, r) => {
+			if (e === t.eventNames.loginAsync_begin ? D(!0) : G(e) && D(!1), e === t.eventNames.refreshTokensAsync_error || e === t.eventNames.syncTokensAsync_error) {
+				if (f != null) {
+					f();
 					return;
 				}
-				O({
+				T({
 					name: e,
 					data: r
 				});
 			} else if (e === t.eventNames.logout_from_another_tab) {
-				if (h != null) {
-					h();
+				if (p != null) {
+					p();
 					return;
 				}
-				O({
+				T({
 					name: e,
 					data: r
 				});
-			} else e === t.eventNames.logout_from_same_tab ? _?.() : (e === t.eventNames.loadingTimeout_error || e === t.eventNames.loginAsync_begin || e === t.eventNames.loginCallbackAsync_end || e === t.eventNames.loginAsync_error || e === t.eventNames.loginCallbackAsync_error || e === t.eventNames.service_worker_not_supported_by_browser && n.service_worker_only === !0) && O({
+			} else e === t.eventNames.logout_from_same_tab ? m?.() : (e === t.eventNames.loadingTimeout_error || e === t.eventNames.loginAsync_begin || e === t.eventNames.loginCallbackAsync_end || e === t.eventNames.loginAsync_error || e === t.eventNames.loginCallbackAsync_error || e === t.eventNames.service_worker_not_supported_by_browser && n.service_worker_only === !0) && T({
 				name: e,
 				data: r
 			});
 		});
 		return queueMicrotask(() => {
-			N(i);
+			A(r);
 		}), () => {
-			E(i).removeEventSubscription(e), O(z), j(!1);
+			S(r).removeEventSubscription(e), T(H), D(!0);
 		};
-	}, [n, i]), m(() => {
-		let e = n?.loading_timeout_ms ?? H;
-		if (e <= 0 || k || E(i)?.tokens != null || !(D.name === "" || D.name === t.eventNames.loginAsync_begin)) return;
-		let r = setTimeout(() => {
-			E(i).publishEvent(t.eventNames.loadingTimeout_error, { timeoutMs: e });
+	}, [n, r]), y(() => {
+		let e = n?.loading_timeout_ms ?? W;
+		if (e <= 0 || !E || S(r)?.tokens != null || !(w.name === "" || w.name === t.eventNames.loginAsync_begin)) return;
+		let i = setTimeout(() => {
+			S(r).publishEvent(t.eventNames.loadingTimeout_error, { timeoutMs: e });
 		}, e);
-		return () => clearTimeout(r);
+		return () => clearTimeout(i);
 	}, [
-		D.name,
-		k,
-		i,
+		w.name,
+		E,
+		r,
 		n
 	]);
-	let I = f, L = o, W = s, G = l, K = u, q = d, J = M !== i, Y = E(i);
-	switch (D.name) {
-		case t.eventNames.service_worker_not_supported_by_browser: return /* @__PURE__ */ v(V, {
-			loadingComponent: W,
-			isLoading: J,
-			configurationName: i,
-			children: /* @__PURE__ */ v(K, { configurationName: i })
+	let j = d, M = o, N = s, F = c, I = l, L = u, z = O !== r, B = S(r);
+	switch (w.name) {
+		case t.eventNames.service_worker_not_supported_by_browser: return /* @__PURE__ */ C(U, {
+			loadingComponent: N,
+			isLoading: z,
+			configurationName: r,
+			children: /* @__PURE__ */ C(I, { configurationName: r })
 		});
-		case t.eventNames.loginAsync_begin: return /* @__PURE__ */ v(V, {
-			loadingComponent: W,
-			isLoading: J,
-			configurationName: i,
-			children: /* @__PURE__ */ v(L, { configurationName: i })
+		case t.eventNames.loginAsync_begin: return /* @__PURE__ */ C(U, {
+			loadingComponent: N,
+			isLoading: z,
+			configurationName: r,
+			children: /* @__PURE__ */ C(M, { configurationName: r })
 		});
-		case t.eventNames.loadingTimeout_error: return /* @__PURE__ */ v(V, {
-			loadingComponent: W,
-			isLoading: J,
-			configurationName: i,
-			children: /* @__PURE__ */ v(G, { configurationName: i })
+		case t.eventNames.loadingTimeout_error: return /* @__PURE__ */ C(U, {
+			loadingComponent: N,
+			isLoading: z,
+			configurationName: r,
+			children: /* @__PURE__ */ C(F, { configurationName: r })
 		});
 		case t.eventNames.loginAsync_error:
-		case t.eventNames.loginCallbackAsync_error: return /* @__PURE__ */ v(V, {
-			loadingComponent: W,
-			isLoading: J,
-			configurationName: i,
-			children: /* @__PURE__ */ v(q, { configurationName: i })
+		case t.eventNames.loginCallbackAsync_error: return /* @__PURE__ */ C(U, {
+			loadingComponent: N,
+			isLoading: z,
+			configurationName: r,
+			children: /* @__PURE__ */ C(L, { configurationName: r })
 		});
 		case t.eventNames.refreshTokensAsync_error:
 		case t.eventNames.syncTokensAsync_error:
-		case t.eventNames.logout_from_another_tab: return /* @__PURE__ */ v(V, {
-			loadingComponent: W,
-			isLoading: J,
-			configurationName: i,
-			children: /* @__PURE__ */ v(I, { configurationName: i })
+		case t.eventNames.logout_from_another_tab: return /* @__PURE__ */ C(U, {
+			loadingComponent: N,
+			isLoading: z,
+			configurationName: r,
+			children: /* @__PURE__ */ C(j, { configurationName: r })
 		});
-		default: return /* @__PURE__ */ v(V, {
-			loadingComponent: W,
-			isLoading: J,
-			configurationName: i,
-			children: /* @__PURE__ */ v(R, {
-				redirect_uri: Y.configuration.redirect_uri,
-				silent_redirect_uri: Y.configuration.silent_redirect_uri,
-				silent_login_uri: Y.configuration.silent_login_uri,
-				callbackSuccessComponent: a,
-				callbackErrorComponent: d,
+		default: return /* @__PURE__ */ C(U, {
+			loadingComponent: N,
+			isLoading: z,
+			configurationName: r,
+			children: /* @__PURE__ */ C(V, {
+				redirect_uri: B.configuration.redirect_uri,
+				silent_redirect_uri: B.configuration.silent_redirect_uri,
+				silent_login_uri: B.configuration.silent_login_uri,
+				callbackSuccessComponent: i,
+				callbackErrorComponent: u,
 				authenticatingComponent: o,
-				configurationName: i,
-				withCustomHistory: y,
-				navigateAfterCallback: b,
-				location: C ?? new r(),
-				children: /* @__PURE__ */ v(B, {
-					loadingComponent: W,
-					configurationName: i,
+				configurationName: r,
+				withCustomHistory: h,
+				navigateAfterCallback: g,
+				location: b ?? new a(),
+				children: /* @__PURE__ */ C(ae, {
+					loadingComponent: N,
+					configurationName: r,
 					children: e
 				})
 			})
 		});
 	}
-}, G = ({ children: e, callbackPath: n = null, extras: r = null, configurationName: i = "default" }) => {
+}, q = ({ children: e, callbackPath: n = null, extras: r = null, configurationName: i = "default" }) => {
 	let a = t.getOrThrow, o = a(i);
-	return m(() => {
+	return y(() => {
 		!o.tokens && !o.isLoggingOut && o.loginAsync(n, r);
 	}, [
 		i,
 		n,
 		r
-	]), o.tokens ? /* @__PURE__ */ v(_, { children: e }) : null;
-}, K = (e, t = null, n = null, r = "default") => (i) => /* @__PURE__ */ v(G, {
+	]), o.tokens ? /* @__PURE__ */ C(S, { children: e }) : null;
+}, oe = (e, t = null, n = null, r = "default") => (i) => /* @__PURE__ */ C(q, {
 	callbackPath: t,
 	extras: n,
 	configurationName: r,
-	children: /* @__PURE__ */ v(e, { ...i })
-}), q = /* @__PURE__ */ new Set(), J = (e) => {
-	q.has(e) || (q.add(e), console.warn(`@axa-fr/react-oidc: no OIDC configuration found for "${e}". Make sure to wrap your component tree with <OidcProvider configurationName="${e}">. Hooks are returning safe default values (issue #1679).`));
-}, Y = "default", X = (e, t) => {
+	children: /* @__PURE__ */ C(e, { ...i })
+}), J = /* @__PURE__ */ new Set(), Y = (e) => {
+	J.has(e) || (J.add(e), console.warn(`@axa-fr/react-oidc: no OIDC configuration found for "${e}". Make sure to wrap your component tree with <OidcProvider configurationName="${e}">. Hooks are returning safe default values (issue #1679).`));
+}, X = "default", Z = (e, t) => {
 	let n = !1, r = e(t);
 	return r && (n = r.tokens != null), n;
-}, Z = (e = Y) => {
-	let n = t.get, [r, i] = g(() => X(n, e));
-	return m(() => {
+}, se = (e = X) => {
+	let n = t.get, [r, i] = x(() => Z(n, e));
+	return y(() => {
 		let r = !0, a = n(e);
 		if (!a) {
-			J(e);
+			Y(e);
 			return;
 		}
 		let o = a.subscribeEvents((a, o) => {
-			(a === t.eventNames.logout_from_another_tab || a === t.eventNames.logout_from_same_tab || a === t.eventNames.token_acquired) && r && i(X(n, e));
+			(a === t.eventNames.logout_from_another_tab || a === t.eventNames.logout_from_same_tab || a === t.eventNames.token_acquired) && r && i(Z(n, e));
 		});
 		return () => {
 			r = !1, a.removeEventSubscription(o);
@@ -337,15 +337,15 @@ var b = "default", x = (e, t, n = !1) => async (...r) => await t().fetchWithToke
 	}, [e]), {
 		login: (t = void 0, r = void 0, i = !1, a = void 0) => {
 			let o = n(e);
-			return o ? o.loginAsync(t, r, !1, a, i) : (J(e), Promise.resolve());
+			return o ? o.loginAsync(t, r, !1, a, i) : (Y(e), Promise.resolve());
 		},
 		logout: (t = void 0, r = void 0) => {
 			let i = n(e);
-			return i ? i.logoutAsync(t, r) : (J(e), Promise.resolve());
+			return i ? i.logoutAsync(t, r) : (Y(e), Promise.resolve());
 		},
 		renewTokens: async (t = void 0) => {
 			let r = n(e);
-			if (!r) return J(e), {
+			if (!r) return Y(e), {
 				accessToken: null,
 				accessTokenPayload: null,
 				idToken: null,
@@ -364,7 +364,7 @@ var b = "default", x = (e, t, n = !1) => async (...r) => await t().fetchWithToke
 }, Q = {
 	accessToken: null,
 	accessTokenPayload: null
-}, ne = (e) => {
+}, ce = (e) => {
 	let n = t.get, r = n(e);
 	if (!r) return Q;
 	if (r.tokens) {
@@ -377,15 +377,15 @@ var b = "default", x = (e, t, n = !1) => async (...r) => await t().fetchWithToke
 	}
 	return Q;
 };
-function re(e, t) {
+function le(e, t) {
 	return e.configuration.demonstrating_proof_of_possession ? (n, r, i = {}) => e.generateDemonstrationOfProofOfPossessionAsync(t.accessToken, n, r, i) : null;
 }
-var ie = (e = Y) => {
-	let n = t.get, [r, i] = g(() => ne(e));
-	return m(() => {
+var ue = (e = X) => {
+	let n = t.get, [r, i] = x(() => ce(e));
+	return y(() => {
 		let r = !0, a = n(e);
 		if (!a) {
-			J(e);
+			Y(e);
 			return;
 		}
 		let o = a.subscribeEvents((e, n) => {
@@ -394,7 +394,7 @@ var ie = (e = Y) => {
 				i(e == null ? Q : {
 					accessToken: e.accessToken,
 					accessTokenPayload: e.accessTokenPayload,
-					generateDemonstrationOfProofOfPossessionAsync: re(a, e)
+					generateDemonstrationOfProofOfPossessionAsync: le(a, e)
 				});
 			}
 		});
@@ -405,7 +405,7 @@ var ie = (e = Y) => {
 }, $ = {
 	idToken: null,
 	idTokenPayload: null
-}, ae = (e) => {
+}, de = (e) => {
 	let n = t.get, r = n(e);
 	if (!r) return $;
 	if (r.tokens) {
@@ -416,12 +416,12 @@ var ie = (e = Y) => {
 		};
 	}
 	return $;
-}, oe = (e = Y) => {
-	let n = t.get, [r, i] = g(() => ae(e));
-	return m(() => {
+}, fe = (e = X) => {
+	let n = t.get, [r, i] = x(() => de(e));
+	return y(() => {
 		let r = !0, a = n(e);
 		if (!a) {
-			J(e);
+			Y(e);
 			return;
 		}
 		let o = a.subscribeEvents((e, n) => {
@@ -437,17 +437,17 @@ var ie = (e = Y) => {
 			r = !1, a.removeEventSubscription(o);
 		};
 	}, [e]), r;
-}, se = /* @__PURE__ */ function(e) {
+}, pe = /* @__PURE__ */ function(e) {
 	return e.Unauthenticated = "Unauthenticated", e.Loading = "Loading user", e.Loaded = "User loaded", e.LoadingError = "Error loading user", e;
-}({}), ce = (e = "default", n = !1) => {
-	let r = t.get(e), i = r ? r.userInfo() : null, [a, o] = g({
+}({}), me = (e = "default", n = !1) => {
+	let r = t.get(e), i = r ? r.userInfo() : null, [a, o] = x({
 		user: i,
 		status: i ? "User loaded" : "Unauthenticated"
-	}), [s, c] = g(+!!i), l = h(+!!i);
-	return m(() => {
+	}), [s, c] = x(+!!i), l = b(+!!i);
+	return y(() => {
 		let r = t.get(e), i = !0;
 		if (!r) {
-			J(e);
+			Y(e);
 			return;
 		}
 		if (r.tokens) {
@@ -495,4 +495,4 @@ var ie = (e = Y) => {
 	};
 };
 //#endregion
-export { e as OidcClient, n as OidcLocation, W as OidcProvider, G as OidcSecure, i as OidcStateError, a as OidcStateErrorCode, se as OidcUserStatus, o as TokenAutomaticRenewMode, s as TokenRenewMode, d as isOidcStateError, Z as useOidc, ie as useOidcAccessToken, C as useOidcFetch, oe as useOidcIdToken, ce as useOidcUser, S as withOidcFetch, K as withOidcSecure };
+export { e as OidcClient, n as OidcError, r as OidcErrorCode, i as OidcLocation, K as OidcProvider, q as OidcSecure, o as OidcStateError, s as OidcStateErrorCode, pe as OidcUserStatus, c as PushedAuthorizationRequestError, l as PushedAuthorizationRequestErrorCode, u as TokenAutomaticRenewMode, d as TokenRenewMode, m as isOidcError, h as isOidcStateError, g as isPushedAuthorizationRequestError, se as useOidc, ue as useOidcAccessToken, O as useOidcFetch, fe as useOidcIdToken, me as useOidcUser, D as withOidcFetch, oe as withOidcSecure };

package/dist/index.umd.cjs

@@ -1 +1 @@
-(function(e,t){typeof exports==`object`&&typeof module<`u`?t(exports,require(`@axa-fr/oidc-client`),require(`react`),require(`react/jsx-runtime`)):typeof define==`function`&&define.amd?define([`exports`,`@axa-fr/oidc-client`,`react`,`react/jsx-runtime`],t):(e=typeof globalThis<`u`?globalThis:e||self,t(e[`react-oidc`]={},e._axa_fr_oidc_client,e.React,e.react_jsx_runtime))})(this,function(e,t,n,r){Object.defineProperty(e,Symbol.toStringTag,{value:`Module`});var i=Object.create,a=Object.defineProperty,o=Object.getOwnPropertyDescriptor,s=Object.getOwnPropertyNames,c=Object.getPrototypeOf,l=Object.prototype.hasOwnProperty,u=(e,t,n,r)=>{if(t&&typeof t==`object`||typeof t==`function`)for(var i=s(t),c=0,u=i.length,d;c<u;c++)d=i[c],!l.call(e,d)&&d!==n&&a(e,d,{get:(e=>t[e]).bind(null,d),enumerable:!(r=o(t,d))||r.enumerable});return e};n=((e,t,n)=>(n=e==null?{}:i(c(e)),u(t||!e||!e.__esModule?a(n,`default`,{value:e,enumerable:!0}):n,e)))(n,1);var d=`default`,f=(e,t,n=!1)=>async(...r)=>await t().fetchWithTokens(e,n)(...r),p=(e=null,t=d,n=!1)=>i=>a=>{let{fetch:o}=m(e||a.fetch,t,n);return(0,r.jsx)(i,{...a,fetch:o})},m=(e=null,r=d,i=!1)=>{let a=e||window.fetch,o=t.OidcClient.getOrThrow;return{fetch:(0,n.useCallback)((e,t)=>f(a,()=>o(r),i)(e,t),[a,r,i])}},h=()=>(0,r.jsx)(`div`,{className:`oidc-authenticating`,children:(0,r.jsxs)(`div`,{className:`oidc-authenticating__container`,children:[(0,r.jsx)(`h1`,{className:`oidc-authenticating__title`,children:`Error authentication`}),(0,r.jsx)(`p`,{className:`oidc-authenticating__content`,children:`An error occurred during authentication.`})]})}),g=()=>(0,r.jsx)(`div`,{className:`oidc-authenticating`,children:(0,r.jsxs)(`div`,{className:`oidc-authenticating__container`,children:[(0,r.jsx)(`h1`,{className:`oidc-authenticating__title`,children:`Authentication in progress`}),(0,r.jsx)(`p`,{className:`oidc-authenticating__content`,children:`You will be redirected to the login page.`})]})}),_=()=>Math.random().toString(36).slice(2,8),v=(e,t)=>(n,r)=>{if(typeof e.CustomEvent==`function`)return new e.CustomEvent(n,r);let i=r||{bubbles:!1,cancelable:!1,detail:void 0},a=t.createEvent(`CustomEvent`);return a.initCustomEvent(n,i.bubbles,i.cancelable,i.detail),a.prototype=e.Event.prototype,a},y=(e,t,n)=>({replaceState:(r,i)=>{let a=n(),o=i||e.history.state;e.history.replaceState({key:a,state:o},null,r),e.dispatchEvent(t(`popstate`))}}),b=()=>y(window,v(window,document),_),x=()=>(0,r.jsx)(`div`,{className:`oidc-callback`,children:(0,r.jsxs)(`div`,{className:`oidc-callback__container`,children:[(0,r.jsx)(`h1`,{className:`oidc-callback__title`,children:`Authentication complete`}),(0,r.jsx)(`p`,{className:`oidc-callback__content`,children:`You will be redirected to your application.`})]})}),S=200,C=(e,t=window)=>t.location.pathname===e||e===`/`,w=({callBackError:e,callBackSuccess:i,configurationName:a,withCustomHistory:o,navigateAfterCallback:s})=>{let[c,l]=(0,n.useState)(!1);(0,n.useEffect)(()=>{let e=!0;return(async()=>{let n=t.OidcClient.getOrThrow;try{let r=n(a),{callbackPath:i}=await r.loginCallbackAsync(),c=i||`/`;if(s)try{await s(c),r.publishEvent(t.OidcClient.eventNames.loginCallbackAsync_navigated,{configurationName:a,callbackPath:c})}catch(n){r.publishEvent(t.OidcClient.eventNames.loginCallbackAsync_navigation_error,{configurationName:a,callbackPath:c,error:n}),e&&(console.warn(n),l(!0))}else (o?o():b()).replaceState(c),await new Promise(e=>{setTimeout(()=>{e()},S)}),e&&(C(c)?r.publishEvent(t.OidcClient.eventNames.loginCallbackAsync_navigated,{configurationName:a,callbackPath:c}):(r.publishEvent(t.OidcClient.eventNames.loginCallbackAsync_navigation_error,{configurationName:a,callbackPath:c,error:Error(`Navigation did not commit: expected "${c}" but found "${window.location.pathname}"`)}),l(!0)))}catch(t){e&&(console.warn(t),l(!0))}})(),()=>{e=!1}},[]);let u=e||h,d=i||x;return c?(0,r.jsx)(u,{configurationName:a}):(0,r.jsx)(d,{configurationName:a})},T=()=>(0,r.jsx)(`span`,{className:`oidc-loading`,children:`Loading`}),E=()=>(0,r.jsx)(`div`,{className:`oidc-loading-timeout`,children:(0,r.jsxs)(`div`,{className:`oidc-loading-timeout__container`,children:[(0,r.jsx)(`h1`,{className:`oidc-loading-timeout__title`,children:`Loading timeout`}),(0,r.jsx)(`p`,{className:`oidc-loading-timeout__content`,children:`Authentication is taking longer than expected. Please try refreshing the page.`})]})}),D=()=>(0,r.jsx)(`div`,{className:`oidc-serviceworker`,children:(0,r.jsxs)(`div`,{className:`oidc-serviceworker__container`,children:[(0,r.jsx)(`h1`,{className:`oidc-serviceworker__title`,children:`Unable to authenticate on this browser`}),(0,r.jsx)(`p`,{className:`oidc-serviceworker__content`,children:`Your browser is not secure enough to make authentication work. Try updating your browser or use a newer browser.`})]})}),O=()=>(0,r.jsx)(`div`,{className:`oidc-session-lost`,children:(0,r.jsxs)(`div`,{className:`oidc-session-lost__container`,children:[(0,r.jsx)(`h1`,{className:`oidc-session-lost__title`,children:`Session timed out`}),(0,r.jsx)(`p`,{className:`oidc-session-lost__content`,children:`Your session has expired. Please re-authenticate.`})]})}),k=({configurationName:e})=>((0,n.useEffect)(()=>{(async()=>{t.OidcClient.getOrThrow(e).silentLoginCallbackAsync()})().catch(e=>{console.error(`Error during silent login callback:`,e)})},[e]),null),A=({configurationName:e})=>{let i=(0,t.getParseQueryStringFromLocation)(window.location.href),a=t.OidcClient.getOrThrow,o=a(e),s=null;for(let[e,t]of Object.entries(i))e===`state`||e===`scope`||(s===null&&(s={}),s[e]=t);return(0,n.useEffect)(()=>{o.tokens||o.loginAsync(null,s,!0,i.scope)},[]),(0,r.jsx)(r.Fragment,{})},j=n.default.memo(({callbackErrorComponent:e,callbackSuccessComponent:i,redirect_uri:a,silent_redirect_uri:o,silent_login_uri:s,children:c,configurationName:l,withCustomHistory:u=null,navigateAfterCallback:d=null})=>{let[f,p]=(0,n.useState)(window?(0,t.getPath)(window.location.href):``);(0,n.useEffect)(()=>{let e=()=>p((0,t.getPath)(window.location.href));return e(),window.addEventListener(`popstate`,e,!1),()=>window.removeEventListener(`popstate`,e,!1)},[]);let m=(0,t.getPath)(a);if(o&&f===(0,t.getPath)(o))return(0,r.jsx)(k,{configurationName:l});if(s&&f===(0,t.getPath)(s))return(0,r.jsx)(A,{configurationName:l});switch(f){case m:return(0,r.jsx)(w,{callBackError:e,callBackSuccess:i,configurationName:l,withCustomHistory:u,navigateAfterCallback:d});default:return(0,r.jsx)(r.Fragment,{children:c})}}),M={name:``,data:null},N=({loadingComponent:e,children:i,configurationName:a})=>{let[o,s]=(0,n.useState)(!0),c=t.OidcClient.get,l=c(a);return(0,n.useEffect)(()=>{let e=!0;return l&&l.tryKeepExistingSessionAsync().then(()=>{e&&s(!1)}),()=>{e=!1}},[a]),(0,r.jsx)(r.Fragment,{children:o?(0,r.jsx)(e,{configurationName:a}):(0,r.jsx)(r.Fragment,{children:i})})},P=({isLoading:e,loadingComponent:t,children:n,configurationName:i})=>{let a=t;return e?(0,r.jsx)(a,{configurationName:i,children:n}):(0,r.jsx)(r.Fragment,{children:n})},F=3e4,I=(e,n)=>e===t.OidcClient.eventNames.token_acquired||e===t.OidcClient.eventNames.token_renewed||e===t.OidcClient.eventNames.loginCallbackAsync_end?!0:e===t.OidcClient.eventNames.tryKeepExistingSessionAsync_end?n?.success===!0:!1,L=({children:e,configuration:i,configurationName:a=`default`,callbackSuccessComponent:o=x,authenticatingComponent:s=g,loadingComponent:c=T,loadingTimeoutComponent:l=E,serviceWorkerNotSupportedComponent:u=D,authenticatingErrorComponent:d=h,sessionLostComponent:f=O,onSessionLost:p=null,onLogoutFromAnotherTab:m=null,onLogoutFromSameTab:_=null,withCustomHistory:v=null,navigateAfterCallback:y=null,onEvent:b=null,getFetch:S=null,location:C=null})=>{if(i&&i.redirect_uri&&i.silent_redirect_uri&&i.redirect_uri===i.silent_redirect_uri)throw Error(`redirect_uri and silent_redirect_uri must be different`);let w=(e=`default`)=>t.OidcClient.getOrCreate(S??t.getFetchDefault,C??new t.OidcLocation)(i,e),[k,A]=(0,n.useState)(M),[L,R]=(0,n.useState)(!1),[z,B]=(0,n.useState)(a);(0,n.useEffect)(()=>{let e=w(a).subscribeEvents((e,t)=>{b&&b(a,e,t)});return()=>{w(a).removeEventSubscription(e)}},[a,b]),(0,n.useEffect)(()=>{let e=w(a).subscribeEvents((e,n)=>{if(I(e,n)&&R(!0),e===t.OidcClient.eventNames.refreshTokensAsync_error||e===t.OidcClient.eventNames.syncTokensAsync_error){if(p!=null){p();return}A({name:e,data:n})}else if(e===t.OidcClient.eventNames.logout_from_another_tab){if(m!=null){m();return}A({name:e,data:n})}else e===t.OidcClient.eventNames.logout_from_same_tab?_?.():(e===t.OidcClient.eventNames.loadingTimeout_error||e===t.OidcClient.eventNames.loginAsync_begin||e===t.OidcClient.eventNames.loginCallbackAsync_end||e===t.OidcClient.eventNames.loginAsync_error||e===t.OidcClient.eventNames.loginCallbackAsync_error||e===t.OidcClient.eventNames.service_worker_not_supported_by_browser&&i.service_worker_only===!0)&&A({name:e,data:n})});return queueMicrotask(()=>{B(a)}),()=>{w(a).removeEventSubscription(e),A(M),R(!1)}},[i,a]),(0,n.useEffect)(()=>{let e=i?.loading_timeout_ms??F;if(e<=0||L||w(a)?.tokens!=null||!(k.name===``||k.name===t.OidcClient.eventNames.loginAsync_begin))return;let n=setTimeout(()=>{w(a).publishEvent(t.OidcClient.eventNames.loadingTimeout_error,{timeoutMs:e})},e);return()=>clearTimeout(n)},[k.name,L,a,i]);let V=f,H=s,U=c,W=l,G=u,K=d,q=z!==a,J=w(a);switch(k.name){case t.OidcClient.eventNames.service_worker_not_supported_by_browser:return(0,r.jsx)(P,{loadingComponent:U,isLoading:q,configurationName:a,children:(0,r.jsx)(G,{configurationName:a})});case t.OidcClient.eventNames.loginAsync_begin:return(0,r.jsx)(P,{loadingComponent:U,isLoading:q,configurationName:a,children:(0,r.jsx)(H,{configurationName:a})});case t.OidcClient.eventNames.loadingTimeout_error:return(0,r.jsx)(P,{loadingComponent:U,isLoading:q,configurationName:a,children:(0,r.jsx)(W,{configurationName:a})});case t.OidcClient.eventNames.loginAsync_error:case t.OidcClient.eventNames.loginCallbackAsync_error:return(0,r.jsx)(P,{loadingComponent:U,isLoading:q,configurationName:a,children:(0,r.jsx)(K,{configurationName:a})});case t.OidcClient.eventNames.refreshTokensAsync_error:case t.OidcClient.eventNames.syncTokensAsync_error:case t.OidcClient.eventNames.logout_from_another_tab:return(0,r.jsx)(P,{loadingComponent:U,isLoading:q,configurationName:a,children:(0,r.jsx)(V,{configurationName:a})});default:return(0,r.jsx)(P,{loadingComponent:U,isLoading:q,configurationName:a,children:(0,r.jsx)(j,{redirect_uri:J.configuration.redirect_uri,silent_redirect_uri:J.configuration.silent_redirect_uri,silent_login_uri:J.configuration.silent_login_uri,callbackSuccessComponent:o,callbackErrorComponent:d,authenticatingComponent:s,configurationName:a,withCustomHistory:v,navigateAfterCallback:y,location:C??new t.OidcLocation,children:(0,r.jsx)(N,{loadingComponent:U,configurationName:a,children:e})})})}},R=({children:e,callbackPath:i=null,extras:a=null,configurationName:o=`default`})=>{let s=t.OidcClient.getOrThrow,c=s(o);return(0,n.useEffect)(()=>{!c.tokens&&!c.isLoggingOut&&c.loginAsync(i,a)},[o,i,a]),c.tokens?(0,r.jsx)(r.Fragment,{children:e}):null},z=(e,t=null,n=null,i=`default`)=>a=>(0,r.jsx)(R,{callbackPath:t,extras:n,configurationName:i,children:(0,r.jsx)(e,{...a})}),B=new Set,V=e=>{B.has(e)||(B.add(e),console.warn(`@axa-fr/react-oidc: no OIDC configuration found for "${e}". Make sure to wrap your component tree with <OidcProvider configurationName="${e}">. Hooks are returning safe default values (issue #1679).`))},H=`default`,U=(e,t)=>{let n=!1,r=e(t);return r&&(n=r.tokens!=null),n},W=(e=H)=>{let r=t.OidcClient.get,[i,a]=(0,n.useState)(()=>U(r,e));return(0,n.useEffect)(()=>{let n=!0,i=r(e);if(!i){V(e);return}let o=i.subscribeEvents((i,o)=>{(i===t.OidcClient.eventNames.logout_from_another_tab||i===t.OidcClient.eventNames.logout_from_same_tab||i===t.OidcClient.eventNames.token_acquired)&&n&&a(U(r,e))});return()=>{n=!1,i.removeEventSubscription(o)}},[e]),{login:(t=void 0,n=void 0,i=!1,a=void 0)=>{let o=r(e);return o?o.loginAsync(t,n,!1,a,i):(V(e),Promise.resolve())},logout:(t=void 0,n=void 0)=>{let i=r(e);return i?i.logoutAsync(t,n):(V(e),Promise.resolve())},renewTokens:async(t=void 0)=>{let n=r(e);if(!n)return V(e),{accessToken:null,accessTokenPayload:null,idToken:null,idTokenPayload:null};let i=await n.renewTokensAsync(t);return{accessToken:i.accessToken,accessTokenPayload:i.accessTokenPayload,idToken:i.idToken,idTokenPayload:i.idTokenPayload}},isAuthenticated:i}},G={accessToken:null,accessTokenPayload:null},K=e=>{let n=t.OidcClient.get,r=n(e);if(!r)return G;if(r.tokens){let e=r.tokens;return{accessToken:e.accessToken,accessTokenPayload:e.accessTokenPayload,generateDemonstrationOfProofOfPossessionAsync:r.configuration.demonstrating_proof_of_possession?(t,n)=>r.generateDemonstrationOfProofOfPossessionAsync(e.accessToken,t,n):null}}return G};function q(e,t){return e.configuration.demonstrating_proof_of_possession?(n,r,i={})=>e.generateDemonstrationOfProofOfPossessionAsync(t.accessToken,n,r,i):null}var J=(e=H)=>{let r=t.OidcClient.get,[i,a]=(0,n.useState)(()=>K(e));return(0,n.useEffect)(()=>{let n=!0,i=r(e);if(!i){V(e);return}let o=i.subscribeEvents((e,r)=>{if((e===t.OidcClient.eventNames.token_renewed||e===t.OidcClient.eventNames.token_acquired||e===t.OidcClient.eventNames.logout_from_another_tab||e===t.OidcClient.eventNames.logout_from_same_tab||e===t.OidcClient.eventNames.refreshTokensAsync_error||e===t.OidcClient.eventNames.syncTokensAsync_error)&&n){let e=i.tokens;a(e==null?G:{accessToken:e.accessToken,accessTokenPayload:e.accessTokenPayload,generateDemonstrationOfProofOfPossessionAsync:q(i,e)})}});return()=>{n=!1,i.removeEventSubscription(o)}},[e]),i},Y={idToken:null,idTokenPayload:null},X=e=>{let n=t.OidcClient.get,r=n(e);if(!r)return Y;if(r.tokens){let e=r.tokens;return{idToken:e.idToken,idTokenPayload:e.idTokenPayload}}return Y},Z=(e=H)=>{let r=t.OidcClient.get,[i,a]=(0,n.useState)(()=>X(e));return(0,n.useEffect)(()=>{let n=!0,i=r(e);if(!i){V(e);return}let o=i.subscribeEvents((e,r)=>{if((e===t.OidcClient.eventNames.token_renewed||e===t.OidcClient.eventNames.token_acquired||e===t.OidcClient.eventNames.logout_from_another_tab||e===t.OidcClient.eventNames.logout_from_same_tab||e===t.OidcClient.eventNames.refreshTokensAsync_error||e===t.OidcClient.eventNames.syncTokensAsync_error)&&n){let e=i.tokens;a(e==null?Y:{idToken:e.idToken,idTokenPayload:e.idTokenPayload})}});return()=>{n=!1,i.removeEventSubscription(o)}},[e]),i},Q=function(e){return e.Unauthenticated=`Unauthenticated`,e.Loading=`Loading user`,e.Loaded=`User loaded`,e.LoadingError=`Error loading user`,e}({});Object.defineProperty(e,`OidcClient`,{enumerable:!0,get:function(){return t.OidcClient}}),Object.defineProperty(e,`OidcLocation`,{enumerable:!0,get:function(){return t.OidcLocation}}),e.OidcProvider=L,e.OidcSecure=R,Object.defineProperty(e,`OidcStateError`,{enumerable:!0,get:function(){return t.OidcStateError}}),Object.defineProperty(e,`OidcStateErrorCode`,{enumerable:!0,get:function(){return t.OidcStateErrorCode}}),e.OidcUserStatus=Q,Object.defineProperty(e,`TokenAutomaticRenewMode`,{enumerable:!0,get:function(){return t.TokenAutomaticRenewMode}}),Object.defineProperty(e,`TokenRenewMode`,{enumerable:!0,get:function(){return t.TokenRenewMode}}),Object.defineProperty(e,`isOidcStateError`,{enumerable:!0,get:function(){return t.isOidcStateError}}),e.useOidc=W,e.useOidcAccessToken=J,e.useOidcFetch=m,e.useOidcIdToken=Z,e.useOidcUser=(e=`default`,r=!1)=>{let i=t.OidcClient.get(e),a=i?i.userInfo():null,[o,s]=(0,n.useState)({user:a,status:a?`User loaded`:`Unauthenticated`}),[c,l]=(0,n.useState)(+!!a),u=(0,n.useRef)(+!!a);return(0,n.useEffect)(()=>{let n=t.OidcClient.get(e),i=!0;if(!n){V(e);return}if(n.tokens){let e=c===u.current;if(e&&n.userInfo())return;u.current=c,queueMicrotask(()=>{i&&s({...o,status:`Loading user`})}),n.userInfoAsync(!e,r).then(e=>{i&&s({user:e,status:`User loaded`})}).catch(()=>s({...o,status:`Error loading user`}))}else queueMicrotask(()=>{i&&s({user:null,status:`Unauthenticated`})});let a=n.subscribeEvents(e=>{(e===t.OidcClient.eventNames.logout_from_another_tab||e===t.OidcClient.eventNames.logout_from_same_tab)&&i&&s({user:null,status:`Unauthenticated`})});return()=>{i=!1,n.removeEventSubscription(a)}},[c,e,r]),{oidcUser:o.user,oidcUserLoadingState:o.status,reloadOidcUser:()=>{l(c+1)}}},e.withOidcFetch=p,e.withOidcSecure=z});
+(function(e,t){typeof exports==`object`&&typeof module<`u`?t(exports,require(`@axa-fr/oidc-client`),require(`react`),require(`react/jsx-runtime`)):typeof define==`function`&&define.amd?define([`exports`,`@axa-fr/oidc-client`,`react`,`react/jsx-runtime`],t):(e=typeof globalThis<`u`?globalThis:e||self,t(e[`react-oidc`]={},e._axa_fr_oidc_client,e.React,e.react_jsx_runtime))})(this,function(e,t,n,r){Object.defineProperty(e,Symbol.toStringTag,{value:`Module`});var i=Object.create,a=Object.defineProperty,o=Object.getOwnPropertyDescriptor,s=Object.getOwnPropertyNames,c=Object.getPrototypeOf,l=Object.prototype.hasOwnProperty,u=(e,t,n,r)=>{if(t&&typeof t==`object`||typeof t==`function`)for(var i=s(t),c=0,u=i.length,d;c<u;c++)d=i[c],!l.call(e,d)&&d!==n&&a(e,d,{get:(e=>t[e]).bind(null,d),enumerable:!(r=o(t,d))||r.enumerable});return e};n=((e,t,n)=>(n=e==null?{}:i(c(e)),u(t||!e||!e.__esModule?a(n,`default`,{value:e,enumerable:!0}):n,e)))(n,1);var d=`default`,f=(e,t,n=!1)=>async(...r)=>await t().fetchWithTokens(e,n)(...r),p=(e=null,t=d,n=!1)=>i=>a=>{let{fetch:o}=m(e||a.fetch,t,n);return(0,r.jsx)(i,{...a,fetch:o})},m=(e=null,r=d,i=!1)=>{let a=e||window.fetch,o=t.OidcClient.getOrThrow;return{fetch:(0,n.useCallback)((e,t)=>f(a,()=>o(r),i)(e,t),[a,r,i])}},h=()=>(0,r.jsx)(`div`,{className:`oidc-authenticating`,children:(0,r.jsxs)(`div`,{className:`oidc-authenticating__container`,children:[(0,r.jsx)(`h1`,{className:`oidc-authenticating__title`,children:`Error authentication`}),(0,r.jsx)(`p`,{className:`oidc-authenticating__content`,children:`An error occurred during authentication.`})]})}),g=()=>(0,r.jsx)(`div`,{className:`oidc-authenticating`,children:(0,r.jsxs)(`div`,{className:`oidc-authenticating__container`,children:[(0,r.jsx)(`h1`,{className:`oidc-authenticating__title`,children:`Authentication in progress`}),(0,r.jsx)(`p`,{className:`oidc-authenticating__content`,children:`You will be redirected to the login page.`})]})}),_=()=>Math.random().toString(36).slice(2,8),v=(e,t)=>(n,r)=>{if(typeof e.CustomEvent==`function`)return new e.CustomEvent(n,r);let i=r||{bubbles:!1,cancelable:!1,detail:void 0},a=t.createEvent(`CustomEvent`);return a.initCustomEvent(n,i.bubbles,i.cancelable,i.detail),a.prototype=e.Event.prototype,a},y=(e,t,n)=>({replaceState:(r,i)=>{let a=n(),o=i||e.history.state;e.history.replaceState({key:a,state:o},null,r),e.dispatchEvent(t(`popstate`))}}),b=()=>y(window,v(window,document),_),x=()=>(0,r.jsx)(`div`,{className:`oidc-callback`,children:(0,r.jsxs)(`div`,{className:`oidc-callback__container`,children:[(0,r.jsx)(`h1`,{className:`oidc-callback__title`,children:`Authentication complete`}),(0,r.jsx)(`p`,{className:`oidc-callback__content`,children:`You will be redirected to your application.`})]})}),S=200,C=(e,t=window)=>t.location.pathname===e||e===`/`,w=({callBackError:e,callBackSuccess:i,configurationName:a,withCustomHistory:o,navigateAfterCallback:s})=>{let[c,l]=(0,n.useState)(!1);(0,n.useEffect)(()=>{let e=!0;return(async()=>{let n=t.OidcClient.getOrThrow;try{let r=n(a),{callbackPath:i}=await r.loginCallbackAsync(),c=i||`/`;if(s)try{await s(c),r.publishEvent(t.OidcClient.eventNames.loginCallbackAsync_navigated,{configurationName:a,callbackPath:c})}catch(n){r.publishEvent(t.OidcClient.eventNames.loginCallbackAsync_navigation_error,{configurationName:a,callbackPath:c,error:n}),e&&(console.warn(n),l(!0))}else (o?o():b()).replaceState(c),await new Promise(e=>{setTimeout(()=>{e()},S)}),e&&(C(c)?r.publishEvent(t.OidcClient.eventNames.loginCallbackAsync_navigated,{configurationName:a,callbackPath:c}):(r.publishEvent(t.OidcClient.eventNames.loginCallbackAsync_navigation_error,{configurationName:a,callbackPath:c,error:Error(`Navigation did not commit: expected "${c}" but found "${window.location.pathname}"`)}),l(!0)))}catch(t){e&&(console.warn(t),l(!0))}})(),()=>{e=!1}},[]);let u=e||h,d=i||x;return c?(0,r.jsx)(u,{configurationName:a}):(0,r.jsx)(d,{configurationName:a})},T=()=>(0,r.jsx)(`span`,{className:`oidc-loading`,children:`Loading`}),E=()=>(0,r.jsx)(`div`,{className:`oidc-loading-timeout`,children:(0,r.jsxs)(`div`,{className:`oidc-loading-timeout__container`,children:[(0,r.jsx)(`h1`,{className:`oidc-loading-timeout__title`,children:`Loading timeout`}),(0,r.jsx)(`p`,{className:`oidc-loading-timeout__content`,children:`Authentication is taking longer than expected. Please try refreshing the page.`})]})}),D=()=>(0,r.jsx)(`div`,{className:`oidc-serviceworker`,children:(0,r.jsxs)(`div`,{className:`oidc-serviceworker__container`,children:[(0,r.jsx)(`h1`,{className:`oidc-serviceworker__title`,children:`Unable to authenticate on this browser`}),(0,r.jsx)(`p`,{className:`oidc-serviceworker__content`,children:`Your browser is not secure enough to make authentication work. Try updating your browser or use a newer browser.`})]})}),O=()=>(0,r.jsx)(`div`,{className:`oidc-session-lost`,children:(0,r.jsxs)(`div`,{className:`oidc-session-lost__container`,children:[(0,r.jsx)(`h1`,{className:`oidc-session-lost__title`,children:`Session timed out`}),(0,r.jsx)(`p`,{className:`oidc-session-lost__content`,children:`Your session has expired. Please re-authenticate.`})]})}),k=({configurationName:e})=>((0,n.useEffect)(()=>{(async()=>{t.OidcClient.getOrThrow(e).silentLoginCallbackAsync()})().catch(e=>{console.error(`Error during silent login callback:`,e)})},[e]),null),A=({configurationName:e})=>{let i=(0,t.getParseQueryStringFromLocation)(window.location.href),a=t.OidcClient.getOrThrow,o=a(e),s=null;for(let[e,t]of Object.entries(i))e===`state`||e===`scope`||(s===null&&(s={}),s[e]=t);return(0,n.useEffect)(()=>{o.tokens||o.loginAsync(null,s,!0,i.scope)},[]),(0,r.jsx)(r.Fragment,{})},j=n.default.memo(({callbackErrorComponent:e,callbackSuccessComponent:i,redirect_uri:a,silent_redirect_uri:o,silent_login_uri:s,children:c,configurationName:l,withCustomHistory:u=null,navigateAfterCallback:d=null})=>{let[f,p]=(0,n.useState)(window?(0,t.getPath)(window.location.href):``);(0,n.useEffect)(()=>{let e=()=>p((0,t.getPath)(window.location.href));return e(),window.addEventListener(`popstate`,e,!1),()=>window.removeEventListener(`popstate`,e,!1)},[]);let m=(0,t.getPath)(a);if(o&&f===(0,t.getPath)(o))return(0,r.jsx)(k,{configurationName:l});if(s&&f===(0,t.getPath)(s))return(0,r.jsx)(A,{configurationName:l});switch(f){case m:return(0,r.jsx)(w,{callBackError:e,callBackSuccess:i,configurationName:l,withCustomHistory:u,navigateAfterCallback:d});default:return(0,r.jsx)(r.Fragment,{children:c})}}),M={name:``,data:null},N=({loadingComponent:e,children:i,configurationName:a})=>{let[o,s]=(0,n.useState)(!0),c=t.OidcClient.get,l=c(a);return(0,n.useEffect)(()=>{let e=!0;return l&&l.tryKeepExistingSessionAsync().then(()=>{e&&s(!1)}),()=>{e=!1}},[a]),(0,r.jsx)(r.Fragment,{children:o?(0,r.jsx)(e,{configurationName:a}):(0,r.jsx)(r.Fragment,{children:i})})},P=({isLoading:e,loadingComponent:t,children:n,configurationName:i})=>{let a=t;return e?(0,r.jsx)(a,{configurationName:i,children:n}):(0,r.jsx)(r.Fragment,{children:n})},F=3e4,I=e=>e===t.OidcClient.eventNames.token_acquired||e===t.OidcClient.eventNames.token_renewed||e===t.OidcClient.eventNames.loginCallbackAsync_end||e===t.OidcClient.eventNames.tryKeepExistingSessionAsync_end||e===t.OidcClient.eventNames.tryKeepExistingSessionAsync_error,L=({children:e,configuration:i,configurationName:a=`default`,callbackSuccessComponent:o=x,authenticatingComponent:s=g,loadingComponent:c=T,loadingTimeoutComponent:l=E,serviceWorkerNotSupportedComponent:u=D,authenticatingErrorComponent:d=h,sessionLostComponent:f=O,onSessionLost:p=null,onLogoutFromAnotherTab:m=null,onLogoutFromSameTab:_=null,withCustomHistory:v=null,navigateAfterCallback:y=null,onEvent:b=null,getFetch:S=null,location:C=null})=>{if(i&&i.redirect_uri&&i.silent_redirect_uri&&i.redirect_uri===i.silent_redirect_uri)throw Error(`redirect_uri and silent_redirect_uri must be different`);let w=(e=`default`)=>t.OidcClient.getOrCreate(S??t.getFetchDefault,C??new t.OidcLocation)(i,e),[k,A]=(0,n.useState)(M),[L,R]=(0,n.useState)(!0),[z,B]=(0,n.useState)(a);(0,n.useEffect)(()=>{let e=w(a).subscribeEvents((e,t)=>{b&&b(a,e,t)});return()=>{w(a).removeEventSubscription(e)}},[a,b]),(0,n.useEffect)(()=>{let e=w(a).subscribeEvents((e,n)=>{if(e===t.OidcClient.eventNames.loginAsync_begin?R(!0):I(e)&&R(!1),e===t.OidcClient.eventNames.refreshTokensAsync_error||e===t.OidcClient.eventNames.syncTokensAsync_error){if(p!=null){p();return}A({name:e,data:n})}else if(e===t.OidcClient.eventNames.logout_from_another_tab){if(m!=null){m();return}A({name:e,data:n})}else e===t.OidcClient.eventNames.logout_from_same_tab?_?.():(e===t.OidcClient.eventNames.loadingTimeout_error||e===t.OidcClient.eventNames.loginAsync_begin||e===t.OidcClient.eventNames.loginCallbackAsync_end||e===t.OidcClient.eventNames.loginAsync_error||e===t.OidcClient.eventNames.loginCallbackAsync_error||e===t.OidcClient.eventNames.service_worker_not_supported_by_browser&&i.service_worker_only===!0)&&A({name:e,data:n})});return queueMicrotask(()=>{B(a)}),()=>{w(a).removeEventSubscription(e),A(M),R(!0)}},[i,a]),(0,n.useEffect)(()=>{let e=i?.loading_timeout_ms??F;if(e<=0||!L||w(a)?.tokens!=null||!(k.name===``||k.name===t.OidcClient.eventNames.loginAsync_begin))return;let n=setTimeout(()=>{w(a).publishEvent(t.OidcClient.eventNames.loadingTimeout_error,{timeoutMs:e})},e);return()=>clearTimeout(n)},[k.name,L,a,i]);let V=f,H=s,U=c,W=l,G=u,K=d,q=z!==a,J=w(a);switch(k.name){case t.OidcClient.eventNames.service_worker_not_supported_by_browser:return(0,r.jsx)(P,{loadingComponent:U,isLoading:q,configurationName:a,children:(0,r.jsx)(G,{configurationName:a})});case t.OidcClient.eventNames.loginAsync_begin:return(0,r.jsx)(P,{loadingComponent:U,isLoading:q,configurationName:a,children:(0,r.jsx)(H,{configurationName:a})});case t.OidcClient.eventNames.loadingTimeout_error:return(0,r.jsx)(P,{loadingComponent:U,isLoading:q,configurationName:a,children:(0,r.jsx)(W,{configurationName:a})});case t.OidcClient.eventNames.loginAsync_error:case t.OidcClient.eventNames.loginCallbackAsync_error:return(0,r.jsx)(P,{loadingComponent:U,isLoading:q,configurationName:a,children:(0,r.jsx)(K,{configurationName:a})});case t.OidcClient.eventNames.refreshTokensAsync_error:case t.OidcClient.eventNames.syncTokensAsync_error:case t.OidcClient.eventNames.logout_from_another_tab:return(0,r.jsx)(P,{loadingComponent:U,isLoading:q,configurationName:a,children:(0,r.jsx)(V,{configurationName:a})});default:return(0,r.jsx)(P,{loadingComponent:U,isLoading:q,configurationName:a,children:(0,r.jsx)(j,{redirect_uri:J.configuration.redirect_uri,silent_redirect_uri:J.configuration.silent_redirect_uri,silent_login_uri:J.configuration.silent_login_uri,callbackSuccessComponent:o,callbackErrorComponent:d,authenticatingComponent:s,configurationName:a,withCustomHistory:v,navigateAfterCallback:y,location:C??new t.OidcLocation,children:(0,r.jsx)(N,{loadingComponent:U,configurationName:a,children:e})})})}},R=({children:e,callbackPath:i=null,extras:a=null,configurationName:o=`default`})=>{let s=t.OidcClient.getOrThrow,c=s(o);return(0,n.useEffect)(()=>{!c.tokens&&!c.isLoggingOut&&c.loginAsync(i,a)},[o,i,a]),c.tokens?(0,r.jsx)(r.Fragment,{children:e}):null},z=(e,t=null,n=null,i=`default`)=>a=>(0,r.jsx)(R,{callbackPath:t,extras:n,configurationName:i,children:(0,r.jsx)(e,{...a})}),B=new Set,V=e=>{B.has(e)||(B.add(e),console.warn(`@axa-fr/react-oidc: no OIDC configuration found for "${e}". Make sure to wrap your component tree with <OidcProvider configurationName="${e}">. Hooks are returning safe default values (issue #1679).`))},H=`default`,U=(e,t)=>{let n=!1,r=e(t);return r&&(n=r.tokens!=null),n},W=(e=H)=>{let r=t.OidcClient.get,[i,a]=(0,n.useState)(()=>U(r,e));return(0,n.useEffect)(()=>{let n=!0,i=r(e);if(!i){V(e);return}let o=i.subscribeEvents((i,o)=>{(i===t.OidcClient.eventNames.logout_from_another_tab||i===t.OidcClient.eventNames.logout_from_same_tab||i===t.OidcClient.eventNames.token_acquired)&&n&&a(U(r,e))});return()=>{n=!1,i.removeEventSubscription(o)}},[e]),{login:(t=void 0,n=void 0,i=!1,a=void 0)=>{let o=r(e);return o?o.loginAsync(t,n,!1,a,i):(V(e),Promise.resolve())},logout:(t=void 0,n=void 0)=>{let i=r(e);return i?i.logoutAsync(t,n):(V(e),Promise.resolve())},renewTokens:async(t=void 0)=>{let n=r(e);if(!n)return V(e),{accessToken:null,accessTokenPayload:null,idToken:null,idTokenPayload:null};let i=await n.renewTokensAsync(t);return{accessToken:i.accessToken,accessTokenPayload:i.accessTokenPayload,idToken:i.idToken,idTokenPayload:i.idTokenPayload}},isAuthenticated:i}},G={accessToken:null,accessTokenPayload:null},K=e=>{let n=t.OidcClient.get,r=n(e);if(!r)return G;if(r.tokens){let e=r.tokens;return{accessToken:e.accessToken,accessTokenPayload:e.accessTokenPayload,generateDemonstrationOfProofOfPossessionAsync:r.configuration.demonstrating_proof_of_possession?(t,n)=>r.generateDemonstrationOfProofOfPossessionAsync(e.accessToken,t,n):null}}return G};function q(e,t){return e.configuration.demonstrating_proof_of_possession?(n,r,i={})=>e.generateDemonstrationOfProofOfPossessionAsync(t.accessToken,n,r,i):null}var J=(e=H)=>{let r=t.OidcClient.get,[i,a]=(0,n.useState)(()=>K(e));return(0,n.useEffect)(()=>{let n=!0,i=r(e);if(!i){V(e);return}let o=i.subscribeEvents((e,r)=>{if((e===t.OidcClient.eventNames.token_renewed||e===t.OidcClient.eventNames.token_acquired||e===t.OidcClient.eventNames.logout_from_another_tab||e===t.OidcClient.eventNames.logout_from_same_tab||e===t.OidcClient.eventNames.refreshTokensAsync_error||e===t.OidcClient.eventNames.syncTokensAsync_error)&&n){let e=i.tokens;a(e==null?G:{accessToken:e.accessToken,accessTokenPayload:e.accessTokenPayload,generateDemonstrationOfProofOfPossessionAsync:q(i,e)})}});return()=>{n=!1,i.removeEventSubscription(o)}},[e]),i},Y={idToken:null,idTokenPayload:null},X=e=>{let n=t.OidcClient.get,r=n(e);if(!r)return Y;if(r.tokens){let e=r.tokens;return{idToken:e.idToken,idTokenPayload:e.idTokenPayload}}return Y},Z=(e=H)=>{let r=t.OidcClient.get,[i,a]=(0,n.useState)(()=>X(e));return(0,n.useEffect)(()=>{let n=!0,i=r(e);if(!i){V(e);return}let o=i.subscribeEvents((e,r)=>{if((e===t.OidcClient.eventNames.token_renewed||e===t.OidcClient.eventNames.token_acquired||e===t.OidcClient.eventNames.logout_from_another_tab||e===t.OidcClient.eventNames.logout_from_same_tab||e===t.OidcClient.eventNames.refreshTokensAsync_error||e===t.OidcClient.eventNames.syncTokensAsync_error)&&n){let e=i.tokens;a(e==null?Y:{idToken:e.idToken,idTokenPayload:e.idTokenPayload})}});return()=>{n=!1,i.removeEventSubscription(o)}},[e]),i},Q=function(e){return e.Unauthenticated=`Unauthenticated`,e.Loading=`Loading user`,e.Loaded=`User loaded`,e.LoadingError=`Error loading user`,e}({});Object.defineProperty(e,`OidcClient`,{enumerable:!0,get:function(){return t.OidcClient}}),Object.defineProperty(e,`OidcError`,{enumerable:!0,get:function(){return t.OidcError}}),Object.defineProperty(e,`OidcErrorCode`,{enumerable:!0,get:function(){return t.OidcErrorCode}}),Object.defineProperty(e,`OidcLocation`,{enumerable:!0,get:function(){return t.OidcLocation}}),e.OidcProvider=L,e.OidcSecure=R,Object.defineProperty(e,`OidcStateError`,{enumerable:!0,get:function(){return t.OidcStateError}}),Object.defineProperty(e,`OidcStateErrorCode`,{enumerable:!0,get:function(){return t.OidcStateErrorCode}}),e.OidcUserStatus=Q,Object.defineProperty(e,`PushedAuthorizationRequestError`,{enumerable:!0,get:function(){return t.PushedAuthorizationRequestError}}),Object.defineProperty(e,`PushedAuthorizationRequestErrorCode`,{enumerable:!0,get:function(){return t.PushedAuthorizationRequestErrorCode}}),Object.defineProperty(e,`TokenAutomaticRenewMode`,{enumerable:!0,get:function(){return t.TokenAutomaticRenewMode}}),Object.defineProperty(e,`TokenRenewMode`,{enumerable:!0,get:function(){return t.TokenRenewMode}}),Object.defineProperty(e,`isOidcError`,{enumerable:!0,get:function(){return t.isOidcError}}),Object.defineProperty(e,`isOidcStateError`,{enumerable:!0,get:function(){return t.isOidcStateError}}),Object.defineProperty(e,`isPushedAuthorizationRequestError`,{enumerable:!0,get:function(){return t.isPushedAuthorizationRequestError}}),e.useOidc=W,e.useOidcAccessToken=J,e.useOidcFetch=m,e.useOidcIdToken=Z,e.useOidcUser=(e=`default`,r=!1)=>{let i=t.OidcClient.get(e),a=i?i.userInfo():null,[o,s]=(0,n.useState)({user:a,status:a?`User loaded`:`Unauthenticated`}),[c,l]=(0,n.useState)(+!!a),u=(0,n.useRef)(+!!a);return(0,n.useEffect)(()=>{let n=t.OidcClient.get(e),i=!0;if(!n){V(e);return}if(n.tokens){let e=c===u.current;if(e&&n.userInfo())return;u.current=c,queueMicrotask(()=>{i&&s({...o,status:`Loading user`})}),n.userInfoAsync(!e,r).then(e=>{i&&s({user:e,status:`User loaded`})}).catch(()=>s({...o,status:`Error loading user`}))}else queueMicrotask(()=>{i&&s({user:null,status:`Unauthenticated`})});let a=n.subscribeEvents(e=>{(e===t.OidcClient.eventNames.logout_from_another_tab||e===t.OidcClient.eventNames.logout_from_same_tab)&&i&&s({user:null,status:`Unauthenticated`})});return()=>{i=!1,n.removeEventSubscription(a)}},[c,e,r]),{oidcUser:o.user,oidcUserLoadingState:o.status,reloadOidcUser:()=>{l(c+1)}}},e.withOidcFetch=p,e.withOidcSecure=z});

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@axa-fr/react-oidc",
-  "version": "7.27.19",
+  "version": "7.29.2",
   "private": false,
   "type": "module",
   "main": "./dist/index.umd.cjs",
@@ -36,12 +36,11 @@
     "test": "vitest --root . --coverage",
     "clean": "rimraf dist",
     "postinstall": "echo 'WARNING keep sink OidcServiceWorker.js version file'",
-    "prepare": "pnpm run clean && pnpm run copy-service-worker && pnpm run build",
     "lint": "eslint src"
   },
   "dependencies": {
-    "@axa-fr/oidc-client": "7.27.19",
-    "@axa-fr/oidc-client-service-worker": "7.27.19"
+    "@axa-fr/oidc-client": "7.29.2",
+    "@axa-fr/oidc-client-service-worker": "7.29.2"
   },
   "peerDependencies": {
     "react": "^17.0.0 || ^18.0.0 || ^19.0.0"

package/src/OidcProvider.spec.tsx

@@ -288,7 +288,7 @@ describe('OidcProvider loading timeout', () => {
     expect(mockPublishEvent).not.toHaveBeenCalledWith('loadingTimeout_error', expect.anything());
   });
 
-  it('should still fire loadingTimeout_error when silent session restore reports no existing session', async () => {
+  it('should NOT fire loadingTimeout_error on an anonymous route when no session exists', async () => {
     render(
       <OidcProvider
         configuration={{ ...baseConfiguration, loading_timeout_ms: 300 }}
@@ -310,9 +310,63 @@ describe('OidcProvider loading timeout', () => {
       vi.advanceTimersByTime(300);
     });
 
+    expect(mockPublishEvent).not.toHaveBeenCalledWith('loadingTimeout_error', expect.anything());
+  });
+
+  it('should fire loadingTimeout_error when a protected route starts login after no session was found', async () => {
+    render(
+      <OidcProvider
+        configuration={{ ...baseConfiguration, loading_timeout_ms: 300 }}
+        configurationName="default"
+      >
+        <div>App</div>
+      </OidcProvider>,
+    );
+
+    act(() => {
+      mockEventSubscribers.forEach(sub =>
+        sub.func('tryKeepExistingSessionAsync_end', { success: false }),
+      );
+    });
+
+    act(() => {
+      mockEventSubscribers.forEach(sub => sub.func('loginAsync_begin', {}));
+    });
+
+    mockPublishEvent.mockClear();
+
+    act(() => {
+      vi.advanceTimersByTime(300);
+    });
+
     expect(mockPublishEvent).toHaveBeenCalledWith('loadingTimeout_error', { timeoutMs: 300 });
   });
 
+  it('should NOT fire loadingTimeout_error on an anonymous route when session restore fails', async () => {
+    render(
+      <OidcProvider
+        configuration={{ ...baseConfiguration, loading_timeout_ms: 300 }}
+        configurationName="default"
+      >
+        <div>App</div>
+      </OidcProvider>,
+    );
+
+    act(() => {
+      mockEventSubscribers.forEach(sub =>
+        sub.func('tryKeepExistingSessionAsync_error', { message: 'session restore failed' }),
+      );
+    });
+
+    mockPublishEvent.mockClear();
+
+    act(() => {
+      vi.advanceTimersByTime(300);
+    });
+
+    expect(mockPublishEvent).not.toHaveBeenCalledWith('loadingTimeout_error', expect.anything());
+  });
+
   it('should NOT fire loadingTimeout_error when token_acquired fires before the deadline', async () => {
     render(
       <OidcProvider

package/src/OidcProvider.tsx

@@ -90,28 +90,17 @@ const Switch = ({ isLoading, loadingComponent, children, configurationName }) =>
 const DEFAULT_LOADING_TIMEOUT_MS = 30_000;
 
 /**
- * Returns true when an event signals that the OIDC client has reached an
- * authenticated, idle state and the loading watchdog should be disarmed.
- *
- * The default `event.name === ''` state in {@link OidcProvider} is overloaded:
- * it represents both "not started yet" and "done and idle". A silent session
- * restore via `tryKeepExistingSessionAsync` does not emit
- * `loginCallbackAsync_end`, so without these explicit ready signals the
- * watchdog would fire against a fully authenticated app.
+ * Returns true when an event signals that the OIDC client is no longer
+ * loading. Restoring the existing session is complete even when no session was
+ * found: an OidcSecure child will emit `loginAsync_begin` if the current route
+ * actually requires authentication.
  */
-const isReadySignal = (name: string, data: unknown): boolean => {
-  if (
-    name === OidcClient.eventNames.token_acquired ||
-    name === OidcClient.eventNames.token_renewed ||
-    name === OidcClient.eventNames.loginCallbackAsync_end
-  ) {
-    return true;
-  }
-  if (name === OidcClient.eventNames.tryKeepExistingSessionAsync_end) {
-    return (data as { success?: boolean } | null)?.success === true;
-  }
-  return false;
-};
+const isLoadingEndSignal = (name: string): boolean =>
+  name === OidcClient.eventNames.token_acquired ||
+  name === OidcClient.eventNames.token_renewed ||
+  name === OidcClient.eventNames.loginCallbackAsync_end ||
+  name === OidcClient.eventNames.tryKeepExistingSessionAsync_end ||
+  name === OidcClient.eventNames.tryKeepExistingSessionAsync_error;
 
 export const OidcProvider: FC<PropsWithChildren<OidcProviderProps>> = ({
   children,
@@ -148,7 +137,7 @@ export const OidcProvider: FC<PropsWithChildren<OidcProviderProps>> = ({
 
   const loading = false;
   const [event, setEvent] = useState(defaultEventState);
-  const [isAuthenticatedAndIdle, setIsAuthenticatedAndIdle] = useState<boolean>(false);
+  const [isLoadingWatchdogActive, setIsLoadingWatchdogActive] = useState<boolean>(true);
   const [currentConfigurationName, setConfigurationName] = useState(configurationName);
 
   useEffect(() => {
@@ -167,8 +156,10 @@ export const OidcProvider: FC<PropsWithChildren<OidcProviderProps>> = ({
   useEffect(() => {
     const oidc = getOidc(configurationName);
     const newSubscriptionId = oidc.subscribeEvents((name, data) => {
-      if (isReadySignal(name, data)) {
-        setIsAuthenticatedAndIdle(true);
+      if (name === OidcClient.eventNames.loginAsync_begin) {
+        setIsLoadingWatchdogActive(true);
+      } else if (isLoadingEndSignal(name)) {
+        setIsLoadingWatchdogActive(false);
       }
       if (
         name === OidcClient.eventNames.refreshTokensAsync_error ||
@@ -215,7 +206,7 @@ export const OidcProvider: FC<PropsWithChildren<OidcProviderProps>> = ({
       const previousOidc = getOidc(configurationName);
       previousOidc.removeEventSubscription(newSubscriptionId);
       setEvent(defaultEventState);
-      setIsAuthenticatedAndIdle(false);
+      setIsLoadingWatchdogActive(true);
     };
   }, [configuration, configurationName]);
 
@@ -224,7 +215,7 @@ export const OidcProvider: FC<PropsWithChildren<OidcProviderProps>> = ({
     if (timeoutMs <= 0) {
       return;
     }
-    if (isAuthenticatedAndIdle) {
+    if (!isLoadingWatchdogActive) {
       return;
     }
     const oidcInstance = getOidc(configurationName);
@@ -241,7 +232,7 @@ export const OidcProvider: FC<PropsWithChildren<OidcProviderProps>> = ({
       });
     }, timeoutMs);
     return () => clearTimeout(timeoutId);
-  }, [event.name, isAuthenticatedAndIdle, configurationName, configuration]);
+  }, [event.name, isLoadingWatchdogActive, configurationName, configuration]);
 
   const SessionLostComponent = sessionLostComponent;
   const AuthenticatingComponent = authenticatingComponent;

package/src/index.ts

@@ -9,15 +9,24 @@ export type {
   Fetch,
   ILOidcLocation,
   OidcConfiguration,
+  OidcErrorOptions,
+  OidcErrorPhase,
+  PushedAuthorizationRequestMode,
   StringMap,
 } from '@axa-fr/oidc-client';
 export type { OidcUserInfo } from '@axa-fr/oidc-client';
 export {
+  isOidcError,
   isOidcStateError,
+  isPushedAuthorizationRequestError,
   OidcClient,
+  OidcError,
+  OidcErrorCode,
   OidcLocation,
   OidcStateError,
   OidcStateErrorCode,
+  PushedAuthorizationRequestError,
+  PushedAuthorizationRequestErrorCode,
   TokenAutomaticRenewMode,
   TokenRenewMode,
 } from '@axa-fr/oidc-client';