@axa-fr/react-oidc 7.29.3 → 7.29.5

package/dist/index.umd.cjs

@@ -1 +1 @@
-(function(e,t){typeof exports==`object`&&typeof module<`u`?t(exports,require(`@axa-fr/oidc-client`),require(`react`),require(`react/jsx-runtime`)):typeof define==`function`&&define.amd?define([`exports`,`@axa-fr/oidc-client`,`react`,`react/jsx-runtime`],t):(e=typeof globalThis<`u`?globalThis:e||self,t(e[`react-oidc`]={},e._axa_fr_oidc_client,e.React,e.react_jsx_runtime))})(this,function(e,t,n,r){Object.defineProperty(e,Symbol.toStringTag,{value:`Module`});var i=Object.create,a=Object.defineProperty,o=Object.getOwnPropertyDescriptor,s=Object.getOwnPropertyNames,c=Object.getPrototypeOf,l=Object.prototype.hasOwnProperty,u=(e,t,n,r)=>{if(t&&typeof t==`object`||typeof t==`function`)for(var i=s(t),c=0,u=i.length,d;c<u;c++)d=i[c],!l.call(e,d)&&d!==n&&a(e,d,{get:(e=>t[e]).bind(null,d),enumerable:!(r=o(t,d))||r.enumerable});return e};n=((e,t,n)=>(n=e==null?{}:i(c(e)),u(t||!e||!e.__esModule?a(n,`default`,{value:e,enumerable:!0}):n,e)))(n,1);var d=`default`,f=(e,t,n=!1)=>async(...r)=>await t().fetchWithTokens(e,n)(...r),p=(e=null,t=d,n=!1)=>i=>a=>{let{fetch:o}=m(e||a.fetch,t,n);return(0,r.jsx)(i,{...a,fetch:o})},m=(e=null,r=d,i=!1)=>{let a=e||window.fetch,o=t.OidcClient.getOrThrow;return{fetch:(0,n.useCallback)((e,t)=>f(a,()=>o(r),i)(e,t),[a,r,i])}},h=()=>(0,r.jsx)(`div`,{className:`oidc-authenticating`,children:(0,r.jsxs)(`div`,{className:`oidc-authenticating__container`,children:[(0,r.jsx)(`h1`,{className:`oidc-authenticating__title`,children:`Error authentication`}),(0,r.jsx)(`p`,{className:`oidc-authenticating__content`,children:`An error occurred during authentication.`})]})}),g=()=>(0,r.jsx)(`div`,{className:`oidc-authenticating`,children:(0,r.jsxs)(`div`,{className:`oidc-authenticating__container`,children:[(0,r.jsx)(`h1`,{className:`oidc-authenticating__title`,children:`Authentication in progress`}),(0,r.jsx)(`p`,{className:`oidc-authenticating__content`,children:`You will be redirected to the login page.`})]})}),_=()=>Math.random().toString(36).slice(2,8),v=(e,t)=>(n,r)=>{if(typeof e.CustomEvent==`function`)return new e.CustomEvent(n,r);let i=r||{bubbles:!1,cancelable:!1,detail:void 0},a=t.createEvent(`CustomEvent`);return a.initCustomEvent(n,i.bubbles,i.cancelable,i.detail),a.prototype=e.Event.prototype,a},y=(e,t,n)=>({replaceState:(r,i)=>{let a=n(),o=i||e.history.state;e.history.replaceState({key:a,state:o},null,r),e.dispatchEvent(t(`popstate`))}}),b=()=>y(window,v(window,document),_),x=()=>(0,r.jsx)(`div`,{className:`oidc-callback`,children:(0,r.jsxs)(`div`,{className:`oidc-callback__container`,children:[(0,r.jsx)(`h1`,{className:`oidc-callback__title`,children:`Authentication complete`}),(0,r.jsx)(`p`,{className:`oidc-callback__content`,children:`You will be redirected to your application.`})]})}),S=200,C=(e,t=window)=>t.location.pathname===e||e===`/`,w=({callBackError:e,callBackSuccess:i,configurationName:a,withCustomHistory:o,navigateAfterCallback:s})=>{let[c,l]=(0,n.useState)(!1);(0,n.useEffect)(()=>{let e=!0;return(async()=>{let n=t.OidcClient.getOrThrow;try{let r=n(a),{callbackPath:i}=await r.loginCallbackAsync(),c=i||`/`;if(s)try{await s(c),r.publishEvent(t.OidcClient.eventNames.loginCallbackAsync_navigated,{configurationName:a,callbackPath:c})}catch(n){r.publishEvent(t.OidcClient.eventNames.loginCallbackAsync_navigation_error,{configurationName:a,callbackPath:c,error:n}),e&&(console.warn(n),l(!0))}else (o?o():b()).replaceState(c),await new Promise(e=>{setTimeout(()=>{e()},S)}),e&&(C(c)?r.publishEvent(t.OidcClient.eventNames.loginCallbackAsync_navigated,{configurationName:a,callbackPath:c}):(r.publishEvent(t.OidcClient.eventNames.loginCallbackAsync_navigation_error,{configurationName:a,callbackPath:c,error:Error(`Navigation did not commit: expected "${c}" but found "${window.location.pathname}"`)}),l(!0)))}catch(t){e&&(console.warn(t),l(!0))}})(),()=>{e=!1}},[]);let u=e||h,d=i||x;return c?(0,r.jsx)(u,{configurationName:a}):(0,r.jsx)(d,{configurationName:a})},T=()=>(0,r.jsx)(`span`,{className:`oidc-loading`,children:`Loading`}),E=()=>(0,r.jsx)(`div`,{className:`oidc-loading-timeout`,children:(0,r.jsxs)(`div`,{className:`oidc-loading-timeout__container`,children:[(0,r.jsx)(`h1`,{className:`oidc-loading-timeout__title`,children:`Loading timeout`}),(0,r.jsx)(`p`,{className:`oidc-loading-timeout__content`,children:`Authentication is taking longer than expected. Please try refreshing the page.`})]})}),D=()=>(0,r.jsx)(`div`,{className:`oidc-serviceworker`,children:(0,r.jsxs)(`div`,{className:`oidc-serviceworker__container`,children:[(0,r.jsx)(`h1`,{className:`oidc-serviceworker__title`,children:`Unable to authenticate on this browser`}),(0,r.jsx)(`p`,{className:`oidc-serviceworker__content`,children:`Your browser is not secure enough to make authentication work. Try updating your browser or use a newer browser.`})]})}),O=()=>(0,r.jsx)(`div`,{className:`oidc-session-lost`,children:(0,r.jsxs)(`div`,{className:`oidc-session-lost__container`,children:[(0,r.jsx)(`h1`,{className:`oidc-session-lost__title`,children:`Session timed out`}),(0,r.jsx)(`p`,{className:`oidc-session-lost__content`,children:`Your session has expired. Please re-authenticate.`})]})}),k=({configurationName:e})=>((0,n.useEffect)(()=>{(async()=>{t.OidcClient.getOrThrow(e).silentLoginCallbackAsync()})().catch(e=>{console.error(`Error during silent login callback:`,e)})},[e]),null),A=({configurationName:e})=>{let i=(0,t.getParseQueryStringFromLocation)(window.location.href),a=t.OidcClient.getOrThrow,o=a(e),s=null;for(let[e,t]of Object.entries(i))e===`state`||e===`scope`||(s===null&&(s={}),s[e]=t);return(0,n.useEffect)(()=>{o.tokens||o.loginAsync(null,s,!0,i.scope)},[]),(0,r.jsx)(r.Fragment,{})},j=n.default.memo(({callbackErrorComponent:e,callbackSuccessComponent:i,redirect_uri:a,silent_redirect_uri:o,silent_login_uri:s,children:c,configurationName:l,withCustomHistory:u=null,navigateAfterCallback:d=null})=>{let[f,p]=(0,n.useState)(window?(0,t.getPath)(window.location.href):``);(0,n.useEffect)(()=>{let e=()=>p((0,t.getPath)(window.location.href));return e(),window.addEventListener(`popstate`,e,!1),()=>window.removeEventListener(`popstate`,e,!1)},[]);let m=(0,t.getPath)(a);if(o&&f===(0,t.getPath)(o))return(0,r.jsx)(k,{configurationName:l});if(s&&f===(0,t.getPath)(s))return(0,r.jsx)(A,{configurationName:l});switch(f){case m:return(0,r.jsx)(w,{callBackError:e,callBackSuccess:i,configurationName:l,withCustomHistory:u,navigateAfterCallback:d});default:return(0,r.jsx)(r.Fragment,{children:c})}}),M={name:``,data:null},N=({loadingComponent:e,children:i,configurationName:a})=>{let[o,s]=(0,n.useState)(!0),c=t.OidcClient.get,l=c(a);return(0,n.useEffect)(()=>{let e=!0;return l&&l.tryKeepExistingSessionAsync().then(()=>{e&&s(!1)}),()=>{e=!1}},[a]),(0,r.jsx)(r.Fragment,{children:o?(0,r.jsx)(e,{configurationName:a}):(0,r.jsx)(r.Fragment,{children:i})})},P=({isLoading:e,loadingComponent:t,children:n,configurationName:i})=>{let a=t;return e?(0,r.jsx)(a,{configurationName:i,children:n}):(0,r.jsx)(r.Fragment,{children:n})},F=3e4,I=e=>e===t.OidcClient.eventNames.token_acquired||e===t.OidcClient.eventNames.token_renewed||e===t.OidcClient.eventNames.loginCallbackAsync_end||e===t.OidcClient.eventNames.tryKeepExistingSessionAsync_end||e===t.OidcClient.eventNames.tryKeepExistingSessionAsync_error,L=({children:e,configuration:i,configurationName:a=`default`,callbackSuccessComponent:o=x,authenticatingComponent:s=g,loadingComponent:c=T,loadingTimeoutComponent:l=E,serviceWorkerNotSupportedComponent:u=D,authenticatingErrorComponent:d=h,sessionLostComponent:f=O,onSessionLost:p=null,onLogoutFromAnotherTab:m=null,onLogoutFromSameTab:_=null,withCustomHistory:v=null,navigateAfterCallback:y=null,onEvent:b=null,getFetch:S=null,location:C=null})=>{if(i&&i.redirect_uri&&i.silent_redirect_uri&&i.redirect_uri===i.silent_redirect_uri)throw Error(`redirect_uri and silent_redirect_uri must be different`);let w=(e=`default`)=>t.OidcClient.getOrCreate(S??t.getFetchDefault,C??new t.OidcLocation)(i,e),[k,A]=(0,n.useState)(M),[L,R]=(0,n.useState)(!0),[z,B]=(0,n.useState)(a);(0,n.useEffect)(()=>{let e=w(a).subscribeEvents((e,t)=>{b&&b(a,e,t)});return()=>{w(a).removeEventSubscription(e)}},[a,b]),(0,n.useEffect)(()=>{let e=w(a).subscribeEvents((e,n)=>{if(e===t.OidcClient.eventNames.loginAsync_begin?R(!0):I(e)&&R(!1),e===t.OidcClient.eventNames.refreshTokensAsync_error||e===t.OidcClient.eventNames.syncTokensAsync_error){if(p!=null){p();return}A({name:e,data:n})}else if(e===t.OidcClient.eventNames.logout_from_another_tab){if(m!=null){m();return}A({name:e,data:n})}else e===t.OidcClient.eventNames.logout_from_same_tab?_?.():(e===t.OidcClient.eventNames.loadingTimeout_error||e===t.OidcClient.eventNames.loginAsync_begin||e===t.OidcClient.eventNames.loginCallbackAsync_end||e===t.OidcClient.eventNames.loginAsync_error||e===t.OidcClient.eventNames.loginCallbackAsync_error||e===t.OidcClient.eventNames.service_worker_not_supported_by_browser&&i.service_worker_only===!0)&&A({name:e,data:n})});return queueMicrotask(()=>{B(a)}),()=>{w(a).removeEventSubscription(e),A(M),R(!0)}},[i,a]),(0,n.useEffect)(()=>{let e=i?.loading_timeout_ms??F;if(e<=0||!L||w(a)?.tokens!=null||!(k.name===``||k.name===t.OidcClient.eventNames.loginAsync_begin))return;let n=setTimeout(()=>{w(a).publishEvent(t.OidcClient.eventNames.loadingTimeout_error,{timeoutMs:e})},e);return()=>clearTimeout(n)},[k.name,L,a,i]);let V=f,H=s,U=c,W=l,G=u,K=d,q=z!==a,J=w(a);switch(k.name){case t.OidcClient.eventNames.service_worker_not_supported_by_browser:return(0,r.jsx)(P,{loadingComponent:U,isLoading:q,configurationName:a,children:(0,r.jsx)(G,{configurationName:a})});case t.OidcClient.eventNames.loginAsync_begin:return(0,r.jsx)(P,{loadingComponent:U,isLoading:q,configurationName:a,children:(0,r.jsx)(H,{configurationName:a})});case t.OidcClient.eventNames.loadingTimeout_error:return(0,r.jsx)(P,{loadingComponent:U,isLoading:q,configurationName:a,children:(0,r.jsx)(W,{configurationName:a})});case t.OidcClient.eventNames.loginAsync_error:case t.OidcClient.eventNames.loginCallbackAsync_error:return(0,r.jsx)(P,{loadingComponent:U,isLoading:q,configurationName:a,children:(0,r.jsx)(K,{configurationName:a})});case t.OidcClient.eventNames.refreshTokensAsync_error:case t.OidcClient.eventNames.syncTokensAsync_error:case t.OidcClient.eventNames.logout_from_another_tab:return(0,r.jsx)(P,{loadingComponent:U,isLoading:q,configurationName:a,children:(0,r.jsx)(V,{configurationName:a})});default:return(0,r.jsx)(P,{loadingComponent:U,isLoading:q,configurationName:a,children:(0,r.jsx)(j,{redirect_uri:J.configuration.redirect_uri,silent_redirect_uri:J.configuration.silent_redirect_uri,silent_login_uri:J.configuration.silent_login_uri,callbackSuccessComponent:o,callbackErrorComponent:d,authenticatingComponent:s,configurationName:a,withCustomHistory:v,navigateAfterCallback:y,location:C??new t.OidcLocation,children:(0,r.jsx)(N,{loadingComponent:U,configurationName:a,children:e})})})}},R=({children:e,callbackPath:i=null,extras:a=null,configurationName:o=`default`})=>{let s=t.OidcClient.getOrThrow,c=s(o);return(0,n.useEffect)(()=>{!c.tokens&&!c.isLoggingOut&&c.loginAsync(i,a)},[o,i,a]),c.tokens?(0,r.jsx)(r.Fragment,{children:e}):null},z=(e,t=null,n=null,i=`default`)=>a=>(0,r.jsx)(R,{callbackPath:t,extras:n,configurationName:i,children:(0,r.jsx)(e,{...a})}),B=new Set,V=e=>{B.has(e)||(B.add(e),console.warn(`@axa-fr/react-oidc: no OIDC configuration found for "${e}". Make sure to wrap your component tree with <OidcProvider configurationName="${e}">. Hooks are returning safe default values (issue #1679).`))},H=`default`,U=(e,t)=>{let n=!1,r=e(t);return r&&(n=r.tokens!=null),n},W=(e=H)=>{let r=t.OidcClient.get,[i,a]=(0,n.useState)(()=>U(r,e));return(0,n.useEffect)(()=>{let n=!0,i=r(e);if(!i){V(e);return}let o=i.subscribeEvents((i,o)=>{(i===t.OidcClient.eventNames.logout_from_another_tab||i===t.OidcClient.eventNames.logout_from_same_tab||i===t.OidcClient.eventNames.token_acquired)&&n&&a(U(r,e))});return()=>{n=!1,i.removeEventSubscription(o)}},[e]),{login:(t=void 0,n=void 0,i=!1,a=void 0)=>{let o=r(e);return o?o.loginAsync(t,n,!1,a,i):(V(e),Promise.resolve())},logout:(t=void 0,n=void 0)=>{let i=r(e);return i?i.logoutAsync(t,n):(V(e),Promise.resolve())},renewTokens:async(t=void 0)=>{let n=r(e);if(!n)return V(e),{accessToken:null,accessTokenPayload:null,idToken:null,idTokenPayload:null};let i=await n.renewTokensAsync(t);return{accessToken:i.accessToken,accessTokenPayload:i.accessTokenPayload,idToken:i.idToken,idTokenPayload:i.idTokenPayload}},isAuthenticated:i}},G={accessToken:null,accessTokenPayload:null},K=e=>{let n=t.OidcClient.get,r=n(e);if(!r)return G;if(r.tokens){let e=r.tokens;return{accessToken:e.accessToken,accessTokenPayload:e.accessTokenPayload,generateDemonstrationOfProofOfPossessionAsync:r.configuration.demonstrating_proof_of_possession?(t,n)=>r.generateDemonstrationOfProofOfPossessionAsync(e.accessToken,t,n):null}}return G};function q(e,t){return e.configuration.demonstrating_proof_of_possession?(n,r,i={})=>e.generateDemonstrationOfProofOfPossessionAsync(t.accessToken,n,r,i):null}var J=(e=H)=>{let r=t.OidcClient.get,[i,a]=(0,n.useState)(()=>K(e));return(0,n.useEffect)(()=>{let n=!0,i=r(e);if(!i){V(e);return}let o=i.subscribeEvents((e,r)=>{if((e===t.OidcClient.eventNames.token_renewed||e===t.OidcClient.eventNames.token_acquired||e===t.OidcClient.eventNames.logout_from_another_tab||e===t.OidcClient.eventNames.logout_from_same_tab||e===t.OidcClient.eventNames.refreshTokensAsync_error||e===t.OidcClient.eventNames.syncTokensAsync_error)&&n){let e=i.tokens;a(e==null?G:{accessToken:e.accessToken,accessTokenPayload:e.accessTokenPayload,generateDemonstrationOfProofOfPossessionAsync:q(i,e)})}});return()=>{n=!1,i.removeEventSubscription(o)}},[e]),i},Y={idToken:null,idTokenPayload:null},X=e=>{let n=t.OidcClient.get,r=n(e);if(!r)return Y;if(r.tokens){let e=r.tokens;return{idToken:e.idToken,idTokenPayload:e.idTokenPayload}}return Y},Z=(e=H)=>{let r=t.OidcClient.get,[i,a]=(0,n.useState)(()=>X(e));return(0,n.useEffect)(()=>{let n=!0,i=r(e);if(!i){V(e);return}let o=i.subscribeEvents((e,r)=>{if((e===t.OidcClient.eventNames.token_renewed||e===t.OidcClient.eventNames.token_acquired||e===t.OidcClient.eventNames.logout_from_another_tab||e===t.OidcClient.eventNames.logout_from_same_tab||e===t.OidcClient.eventNames.refreshTokensAsync_error||e===t.OidcClient.eventNames.syncTokensAsync_error)&&n){let e=i.tokens;a(e==null?Y:{idToken:e.idToken,idTokenPayload:e.idTokenPayload})}});return()=>{n=!1,i.removeEventSubscription(o)}},[e]),i},Q=function(e){return e.Unauthenticated=`Unauthenticated`,e.Loading=`Loading user`,e.Loaded=`User loaded`,e.LoadingError=`Error loading user`,e}({});Object.defineProperty(e,`OidcClient`,{enumerable:!0,get:function(){return t.OidcClient}}),Object.defineProperty(e,`OidcError`,{enumerable:!0,get:function(){return t.OidcError}}),Object.defineProperty(e,`OidcErrorCode`,{enumerable:!0,get:function(){return t.OidcErrorCode}}),Object.defineProperty(e,`OidcLocation`,{enumerable:!0,get:function(){return t.OidcLocation}}),e.OidcProvider=L,e.OidcSecure=R,Object.defineProperty(e,`OidcStateError`,{enumerable:!0,get:function(){return t.OidcStateError}}),Object.defineProperty(e,`OidcStateErrorCode`,{enumerable:!0,get:function(){return t.OidcStateErrorCode}}),e.OidcUserStatus=Q,Object.defineProperty(e,`PushedAuthorizationRequestError`,{enumerable:!0,get:function(){return t.PushedAuthorizationRequestError}}),Object.defineProperty(e,`PushedAuthorizationRequestErrorCode`,{enumerable:!0,get:function(){return t.PushedAuthorizationRequestErrorCode}}),Object.defineProperty(e,`TokenAutomaticRenewMode`,{enumerable:!0,get:function(){return t.TokenAutomaticRenewMode}}),Object.defineProperty(e,`TokenRenewMode`,{enumerable:!0,get:function(){return t.TokenRenewMode}}),Object.defineProperty(e,`isOidcError`,{enumerable:!0,get:function(){return t.isOidcError}}),Object.defineProperty(e,`isOidcStateError`,{enumerable:!0,get:function(){return t.isOidcStateError}}),Object.defineProperty(e,`isPushedAuthorizationRequestError`,{enumerable:!0,get:function(){return t.isPushedAuthorizationRequestError}}),e.useOidc=W,e.useOidcAccessToken=J,e.useOidcFetch=m,e.useOidcIdToken=Z,e.useOidcUser=(e=`default`,r=!1)=>{let i=t.OidcClient.get(e),a=i?i.userInfo():null,[o,s]=(0,n.useState)({user:a,status:a?`User loaded`:`Unauthenticated`}),[c,l]=(0,n.useState)(+!!a),u=(0,n.useRef)(+!!a);return(0,n.useEffect)(()=>{let n=t.OidcClient.get(e),i=!0;if(!n){V(e);return}if(n.tokens){let e=c===u.current;if(e&&n.userInfo())return;u.current=c,queueMicrotask(()=>{i&&s({...o,status:`Loading user`})}),n.userInfoAsync(!e,r).then(e=>{i&&s({user:e,status:`User loaded`})}).catch(()=>s({...o,status:`Error loading user`}))}else queueMicrotask(()=>{i&&s({user:null,status:`Unauthenticated`})});let a=n.subscribeEvents(e=>{(e===t.OidcClient.eventNames.logout_from_another_tab||e===t.OidcClient.eventNames.logout_from_same_tab)&&i&&s({user:null,status:`Unauthenticated`})});return()=>{i=!1,n.removeEventSubscription(a)}},[c,e,r]),{oidcUser:o.user,oidcUserLoadingState:o.status,reloadOidcUser:()=>{l(c+1)}}},e.withOidcFetch=p,e.withOidcSecure=z});
+(function(e,t){typeof exports==`object`&&typeof module<`u`?t(exports,require("@axa-fr/oidc-client"),require("react"),require("react/jsx-runtime")):typeof define==`function`&&define.amd?define([`exports`,`@axa-fr/oidc-client`,`react`,`react/jsx-runtime`],t):(e=typeof globalThis<`u`?globalThis:e||self,t(e[`react-oidc`]={},e._axa_fr_oidc_client,e.React,e.react_jsx_runtime))})(this,function(e,t,n,r){Object.defineProperty(e,Symbol.toStringTag,{value:`Module`});var i=Object.create,a=Object.defineProperty,o=Object.getOwnPropertyDescriptor,s=Object.getOwnPropertyNames,c=Object.getPrototypeOf,l=Object.prototype.hasOwnProperty,u=(e,t,n,r)=>{if(t&&typeof t==`object`||typeof t==`function`)for(var i=s(t),c=0,u=i.length,d;c<u;c++)d=i[c],!l.call(e,d)&&d!==n&&a(e,d,{get:(e=>t[e]).bind(null,d),enumerable:!(r=o(t,d))||r.enumerable});return e};n=((e,t,n)=>(n=e==null?{}:i(c(e)),u(t||!e||!e.__esModule||!l.call(e,`default`)?a(n,`default`,{value:e,enumerable:!0}):n,e)))(n,1);var d=`default`,f=(e=null,t=d,n=!1)=>i=>a=>{let{fetch:o}=p(e||a.fetch,t,n);return(0,r.jsx)(i,{...a,fetch:o})},p=(e=null,r=d,i=!1)=>{let a=e||window.fetch,o=t.OidcClient.getOrThrow;return{fetch:(0,n.useCallback)(async(e,t)=>await o(r).fetchWithTokens(a,i)(e,t),[a,r,i])}},m=()=>(0,r.jsx)(`div`,{className:`oidc-authenticating`,children:(0,r.jsxs)(`div`,{className:`oidc-authenticating__container`,children:[(0,r.jsx)(`h1`,{className:`oidc-authenticating__title`,children:`Error authentication`}),(0,r.jsx)(`p`,{className:`oidc-authenticating__content`,children:`An error occurred during authentication.`})]})}),h=()=>(0,r.jsx)(`div`,{className:`oidc-authenticating`,children:(0,r.jsxs)(`div`,{className:`oidc-authenticating__container`,children:[(0,r.jsx)(`h1`,{className:`oidc-authenticating__title`,children:`Authentication in progress`}),(0,r.jsx)(`p`,{className:`oidc-authenticating__content`,children:`You will be redirected to the login page.`})]})}),g=()=>Math.random().toString(36).slice(2,8),_=(e,t)=>(n,r)=>{if(typeof e.CustomEvent==`function`)return new e.CustomEvent(n,r);let i=r||{bubbles:!1,cancelable:!1,detail:void 0},a=t.createEvent(`CustomEvent`);return a.initCustomEvent(n,i.bubbles,i.cancelable,i.detail),a.prototype=e.Event.prototype,a},v=(e,t,n)=>({replaceState:(r,i)=>{let a=n(),o=i||e.history.state;e.history.replaceState({key:a,state:o},null,r),e.dispatchEvent(t(`popstate`))}}),y=()=>v(window,_(window,document),g),b=()=>(0,r.jsx)(`div`,{className:`oidc-callback`,children:(0,r.jsxs)(`div`,{className:`oidc-callback__container`,children:[(0,r.jsx)(`h1`,{className:`oidc-callback__title`,children:`Authentication complete`}),(0,r.jsx)(`p`,{className:`oidc-callback__content`,children:`You will be redirected to your application.`})]})}),x=200,S=(e,t=window)=>t.location.pathname===e||e===`/`,C=({callBackError:e,callBackSuccess:i,configurationName:a,withCustomHistory:o,navigateAfterCallback:s})=>{let[c,l]=(0,n.useState)(!1);(0,n.useEffect)(()=>{let e=!0;return(async()=>{let n=t.OidcClient.getOrThrow;try{let r=n(a),{callbackPath:i}=await r.loginCallbackAsync(),c=i||`/`;if(s)try{await s(c),r.publishEvent(t.OidcClient.eventNames.loginCallbackAsync_navigated,{configurationName:a,callbackPath:c})}catch(n){r.publishEvent(t.OidcClient.eventNames.loginCallbackAsync_navigation_error,{configurationName:a,callbackPath:c,error:n}),e&&(console.warn(n),l(!0))}else(o?o():y()).replaceState(c),await new Promise(e=>{setTimeout(()=>{e()},x)}),e&&(S(c)?r.publishEvent(t.OidcClient.eventNames.loginCallbackAsync_navigated,{configurationName:a,callbackPath:c}):(r.publishEvent(t.OidcClient.eventNames.loginCallbackAsync_navigation_error,{configurationName:a,callbackPath:c,error:Error(`Navigation did not commit: expected "${c}" but found "${window.location.pathname}"`)}),l(!0)))}catch(t){e&&(console.warn(t),l(!0))}})(),()=>{e=!1}},[]);let u=e||m,d=i||b;return c?(0,r.jsx)(u,{configurationName:a}):(0,r.jsx)(d,{configurationName:a})},w=()=>(0,r.jsx)(`span`,{className:`oidc-loading`,children:`Loading`}),T=()=>(0,r.jsx)(`div`,{className:`oidc-loading-timeout`,children:(0,r.jsxs)(`div`,{className:`oidc-loading-timeout__container`,children:[(0,r.jsx)(`h1`,{className:`oidc-loading-timeout__title`,children:`Loading timeout`}),(0,r.jsx)(`p`,{className:`oidc-loading-timeout__content`,children:`Authentication is taking longer than expected. Please try refreshing the page.`})]})}),E=()=>(0,r.jsx)(`div`,{className:`oidc-serviceworker`,children:(0,r.jsxs)(`div`,{className:`oidc-serviceworker__container`,children:[(0,r.jsx)(`h1`,{className:`oidc-serviceworker__title`,children:`Unable to authenticate on this browser`}),(0,r.jsx)(`p`,{className:`oidc-serviceworker__content`,children:`Your browser is not secure enough to make authentication work. Try updating your browser or use a newer browser.`})]})}),D=()=>(0,r.jsx)(`div`,{className:`oidc-session-lost`,children:(0,r.jsxs)(`div`,{className:`oidc-session-lost__container`,children:[(0,r.jsx)(`h1`,{className:`oidc-session-lost__title`,children:`Session timed out`}),(0,r.jsx)(`p`,{className:`oidc-session-lost__content`,children:`Your session has expired. Please re-authenticate.`})]})}),O=({configurationName:e})=>((0,n.useEffect)(()=>{(async()=>{t.OidcClient.getOrThrow(e).silentLoginCallbackAsync()})().catch(e=>{console.error(`Error during silent login callback:`,e)})},[e]),null),k=({configurationName:e})=>{let i=(0,t.getParseQueryStringFromLocation)(window.location.href),a=t.OidcClient.getOrThrow,o=a(e),s=null;for(let[e,t]of Object.entries(i))e!==`state`&&e!==`scope`&&(s??={},s[e]=t);return(0,n.useEffect)(()=>{o.tokens||o.loginAsync(null,s,!0,i.scope)},[]),(0,r.jsx)(r.Fragment,{})},A=n.default.memo(({callbackErrorComponent:e,callbackSuccessComponent:i,redirect_uri:a,silent_redirect_uri:o,silent_login_uri:s,children:c,configurationName:l,withCustomHistory:u=null,navigateAfterCallback:d=null})=>{let f=window?(0,t.getPath)(window.location.href):``,[p,m]=(0,n.useState)(f);(0,n.useEffect)(()=>{let e=()=>m((0,t.getPath)(window.location.href));return e(),window.addEventListener(`popstate`,e,!1),()=>window.removeEventListener(`popstate`,e,!1)},[]);let h=(0,t.getPath)(a);return o&&p===(0,t.getPath)(o)?(0,r.jsx)(O,{configurationName:l}):s&&p===(0,t.getPath)(s)?(0,r.jsx)(k,{configurationName:l}):p===h?(0,r.jsx)(C,{callBackError:e,callBackSuccess:i,configurationName:l,withCustomHistory:u,navigateAfterCallback:d}):(0,r.jsx)(r.Fragment,{children:c})}),j={name:``,data:null},M=({loadingComponent:e,children:i,configurationName:a})=>{let[o,s]=(0,n.useState)(!0),c=t.OidcClient.get,l=c(a);return(0,n.useEffect)(()=>{let e=!0;return l&&l.tryKeepExistingSessionAsync().then(()=>{e&&s(!1)}),()=>{e=!1}},[a]),(0,r.jsx)(r.Fragment,{children:o?(0,r.jsx)(e,{configurationName:a}):(0,r.jsx)(r.Fragment,{children:i})})},N=({isLoading:e,loadingComponent:t,children:n,configurationName:i})=>{let a=t;return e?(0,r.jsx)(a,{configurationName:i,children:n}):(0,r.jsx)(r.Fragment,{children:n})},P=3e4,F=e=>e===t.OidcClient.eventNames.token_acquired||e===t.OidcClient.eventNames.token_renewed||e===t.OidcClient.eventNames.loginCallbackAsync_end||e===t.OidcClient.eventNames.tryKeepExistingSessionAsync_end||e===t.OidcClient.eventNames.tryKeepExistingSessionAsync_error,I=({children:e,configuration:i,configurationName:a=`default`,callbackSuccessComponent:o=b,authenticatingComponent:s=h,loadingComponent:c=w,loadingTimeoutComponent:l=T,serviceWorkerNotSupportedComponent:u=E,authenticatingErrorComponent:d=m,sessionLostComponent:f=D,onSessionLost:p=null,onLogoutFromAnotherTab:g=null,onLogoutFromSameTab:_=null,withCustomHistory:v=null,navigateAfterCallback:y=null,onEvent:x=null,getFetch:S=null,location:C=null})=>{if(i&&i.redirect_uri&&i.silent_redirect_uri&&i.redirect_uri===i.silent_redirect_uri)throw Error(`redirect_uri and silent_redirect_uri must be different`);let O=(e=`default`)=>t.OidcClient.getOrCreate(S??t.getFetchDefault,C??new t.OidcLocation)(i,e),[k,I]=(0,n.useState)(j),[L,R]=(0,n.useState)(!0),[z,B]=(0,n.useState)(a);(0,n.useEffect)(()=>{let e=O(a).subscribeEvents((e,t)=>{x&&x(a,e,t)});return()=>{O(a).removeEventSubscription(e)}},[a,x]),(0,n.useEffect)(()=>{let e=O(a).subscribeEvents((e,n)=>{if(e===t.OidcClient.eventNames.loginAsync_begin?R(!0):F(e)&&R(!1),e===t.OidcClient.eventNames.refreshTokensAsync_error||e===t.OidcClient.eventNames.syncTokensAsync_error){if(p!=null){p();return}I({name:e,data:n})}else if(e===t.OidcClient.eventNames.logout_from_another_tab){if(g!=null){g();return}I({name:e,data:n})}else e===t.OidcClient.eventNames.logout_from_same_tab?_?.():(e===t.OidcClient.eventNames.loadingTimeout_error||e===t.OidcClient.eventNames.loginAsync_begin||e===t.OidcClient.eventNames.loginCallbackAsync_end||e===t.OidcClient.eventNames.loginAsync_error||e===t.OidcClient.eventNames.loginCallbackAsync_error||e===t.OidcClient.eventNames.service_worker_not_supported_by_browser&&i.service_worker_only===!0)&&I({name:e,data:n})});return queueMicrotask(()=>{B(a)}),()=>{O(a).removeEventSubscription(e),I(j),R(!0)}},[i,a]),(0,n.useEffect)(()=>{let e=i?.loading_timeout_ms??P;if(e<=0||!L||O(a)?.tokens!=null||k.name!==``&&k.name!==t.OidcClient.eventNames.loginAsync_begin)return;let n=setTimeout(()=>{O(a).publishEvent(t.OidcClient.eventNames.loadingTimeout_error,{timeoutMs:e})},e);return()=>clearTimeout(n)},[k.name,L,a,i]);let V=f,H=s,U=c,W=l,G=u,K=d,q=z!==a,J=O(a);switch(k.name){case t.OidcClient.eventNames.service_worker_not_supported_by_browser:return(0,r.jsx)(N,{loadingComponent:U,isLoading:q,configurationName:a,children:(0,r.jsx)(G,{configurationName:a})});case t.OidcClient.eventNames.loginAsync_begin:return(0,r.jsx)(N,{loadingComponent:U,isLoading:q,configurationName:a,children:(0,r.jsx)(H,{configurationName:a})});case t.OidcClient.eventNames.loadingTimeout_error:return(0,r.jsx)(N,{loadingComponent:U,isLoading:q,configurationName:a,children:(0,r.jsx)(W,{configurationName:a})});case t.OidcClient.eventNames.loginAsync_error:case t.OidcClient.eventNames.loginCallbackAsync_error:return(0,r.jsx)(N,{loadingComponent:U,isLoading:q,configurationName:a,children:(0,r.jsx)(K,{configurationName:a})});case t.OidcClient.eventNames.refreshTokensAsync_error:case t.OidcClient.eventNames.syncTokensAsync_error:case t.OidcClient.eventNames.logout_from_another_tab:return(0,r.jsx)(N,{loadingComponent:U,isLoading:q,configurationName:a,children:(0,r.jsx)(V,{configurationName:a})});default:return(0,r.jsx)(N,{loadingComponent:U,isLoading:q,configurationName:a,children:(0,r.jsx)(A,{redirect_uri:J.configuration.redirect_uri,silent_redirect_uri:J.configuration.silent_redirect_uri,silent_login_uri:J.configuration.silent_login_uri,callbackSuccessComponent:o,callbackErrorComponent:d,authenticatingComponent:s,configurationName:a,withCustomHistory:v,navigateAfterCallback:y,location:C??new t.OidcLocation,children:(0,r.jsx)(M,{loadingComponent:U,configurationName:a,children:e})})})}},L=({children:e,callbackPath:i=null,extras:a=null,configurationName:o=`default`})=>{let s=t.OidcClient.getOrThrow,c=s(o);return(0,n.useEffect)(()=>{!c.tokens&&!c.isLoggingOut&&c.loginAsync(i,a)},[o,i,a]),c.tokens?(0,r.jsx)(r.Fragment,{children:e}):null},R=(e,t=null,n=null,i=`default`)=>a=>(0,r.jsx)(L,{callbackPath:t,extras:n,configurationName:i,children:(0,r.jsx)(e,{...a})}),z=new Set,B=e=>{z.has(e)||(z.add(e),console.warn(`@axa-fr/react-oidc: no OIDC configuration found for "${e}". Make sure to wrap your component tree with <OidcProvider configurationName="${e}">. Hooks are returning safe default values (issue #1679).`))},V=`default`,H=(e,t)=>{let n=e(t);return n?n.tokens!=null:!1},U=e=>e===t.OidcClient.eventNames.token_renewed||e===t.OidcClient.eventNames.token_acquired||e===t.OidcClient.eventNames.logout_from_another_tab||e===t.OidcClient.eventNames.logout_from_same_tab||e===t.OidcClient.eventNames.refreshTokensAsync_error||e===t.OidcClient.eventNames.syncTokensAsync_error,W=(e=V)=>{let r=t.OidcClient.get,[i,a]=(0,n.useState)(()=>H(r,e));return(0,n.useEffect)(()=>{let n=!0,i=r(e);if(!i){B(e);return}let o=i.subscribeEvents((i,o)=>{(i===t.OidcClient.eventNames.logout_from_another_tab||i===t.OidcClient.eventNames.logout_from_same_tab||i===t.OidcClient.eventNames.token_acquired)&&n&&a(H(r,e))});return()=>{n=!1,i.removeEventSubscription(o)}},[e]),{login:(t=void 0,n=void 0,i=!1,a=void 0)=>{let o=r(e);return o?o.loginAsync(t,n,!1,a,i):(B(e),Promise.resolve())},logout:(t=void 0,n=void 0)=>{let i=r(e);return i?i.logoutAsync(t,n):(B(e),Promise.resolve())},renewTokens:async(t=void 0)=>{let n=r(e);if(!n)return B(e),{accessToken:null,accessTokenPayload:null,idToken:null,idTokenPayload:null};let i=await n.renewTokensAsync(t);return{accessToken:i.accessToken,accessTokenPayload:i.accessTokenPayload,idToken:i.idToken,idTokenPayload:i.idTokenPayload}},isAuthenticated:i}},G={accessToken:null,accessTokenPayload:null},K=e=>{let n=t.OidcClient.get,r=n(e);if(!r)return G;if(r.tokens){let e=r.tokens;return{accessToken:e.accessToken,accessTokenPayload:e.accessTokenPayload,generateDemonstrationOfProofOfPossessionAsync:r.configuration.demonstrating_proof_of_possession?(t,n)=>r.generateDemonstrationOfProofOfPossessionAsync(e.accessToken,t,n):null}}return G};function q(e,t){return e.configuration.demonstrating_proof_of_possession?(n,r,i={})=>e.generateDemonstrationOfProofOfPossessionAsync(t.accessToken,n,r,i):null}var J=(e=V)=>{let r=t.OidcClient.get,[i,a]=(0,n.useState)(()=>K(e));return(0,n.useEffect)(()=>{let t=!0,n=r(e);if(!n){B(e);return}let i=n.subscribeEvents((e,r)=>{if(U(e)&&t){let e=n.tokens;a(e==null?G:{accessToken:e.accessToken,accessTokenPayload:e.accessTokenPayload,generateDemonstrationOfProofOfPossessionAsync:q(n,e)})}});return()=>{t=!1,n.removeEventSubscription(i)}},[e]),i},Y={idToken:null,idTokenPayload:null},X=e=>{let n=t.OidcClient.get,r=n(e);if(!r)return Y;if(r.tokens){let e=r.tokens;return{idToken:e.idToken,idTokenPayload:e.idTokenPayload}}return Y},Z=(e=V)=>{let r=t.OidcClient.get,[i,a]=(0,n.useState)(()=>X(e));return(0,n.useEffect)(()=>{let t=!0,n=r(e);if(!n){B(e);return}let i=n.subscribeEvents((e,r)=>{if(U(e)&&t){let e=n.tokens;a(e==null?Y:{idToken:e.idToken,idTokenPayload:e.idTokenPayload})}});return()=>{t=!1,n.removeEventSubscription(i)}},[e]),i},Q=function(e){return e.Unauthenticated=`Unauthenticated`,e.Loading=`Loading user`,e.Loaded=`User loaded`,e.LoadingError=`Error loading user`,e}({});Object.defineProperty(e,"OidcClient",{enumerable:!0,get:function(){return t.OidcClient}}),Object.defineProperty(e,"OidcError",{enumerable:!0,get:function(){return t.OidcError}}),Object.defineProperty(e,"OidcErrorCode",{enumerable:!0,get:function(){return t.OidcErrorCode}}),Object.defineProperty(e,"OidcLocation",{enumerable:!0,get:function(){return t.OidcLocation}}),e.OidcProvider=I,e.OidcSecure=L,Object.defineProperty(e,"OidcStateError",{enumerable:!0,get:function(){return t.OidcStateError}}),Object.defineProperty(e,"OidcStateErrorCode",{enumerable:!0,get:function(){return t.OidcStateErrorCode}}),e.OidcUserStatus=Q,Object.defineProperty(e,"PushedAuthorizationRequestError",{enumerable:!0,get:function(){return t.PushedAuthorizationRequestError}}),Object.defineProperty(e,"PushedAuthorizationRequestErrorCode",{enumerable:!0,get:function(){return t.PushedAuthorizationRequestErrorCode}}),Object.defineProperty(e,"TokenAutomaticRenewMode",{enumerable:!0,get:function(){return t.TokenAutomaticRenewMode}}),Object.defineProperty(e,"TokenRenewMode",{enumerable:!0,get:function(){return t.TokenRenewMode}}),Object.defineProperty(e,"isOidcError",{enumerable:!0,get:function(){return t.isOidcError}}),Object.defineProperty(e,"isOidcStateError",{enumerable:!0,get:function(){return t.isOidcStateError}}),Object.defineProperty(e,"isPushedAuthorizationRequestError",{enumerable:!0,get:function(){return t.isPushedAuthorizationRequestError}}),e.useOidc=W,e.useOidcAccessToken=J,e.useOidcFetch=p,e.useOidcIdToken=Z,e.useOidcUser=(e=`default`,r=!1)=>{let i=t.OidcClient.get(e),a=i?i.userInfo():null,[o,s]=(0,n.useState)({user:a,status:a?`User loaded`:`Unauthenticated`}),[c,l]=(0,n.useState)(+!!a),u=(0,n.useRef)(+!!a);return(0,n.useEffect)(()=>{let n=t.OidcClient.get(e),i=!0;if(!n){B(e);return}if(n.tokens){let e=c===u.current;if(e&&n.userInfo())return;u.current=c,queueMicrotask(()=>{i&&s({...o,status:`Loading user`})}),n.userInfoAsync(!e,r).then(e=>{i&&s({user:e,status:`User loaded`})}).catch(()=>s({...o,status:`Error loading user`}))}else queueMicrotask(()=>{i&&s({user:null,status:`Unauthenticated`})});let a=n.subscribeEvents(e=>{(e===t.OidcClient.eventNames.logout_from_another_tab||e===t.OidcClient.eventNames.logout_from_same_tab)&&i&&s({user:null,status:`Unauthenticated`})});return()=>{i=!1,n.removeEventSubscription(a)}},[c,e,r]),{oidcUser:o.user,oidcUserLoadingState:o.status,reloadOidcUser:()=>{l(c+1)}}},e.withOidcFetch=f,e.withOidcSecure=R});

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@axa-fr/react-oidc",
-  "version": "7.29.3",
+  "version": "7.29.5",
   "private": false,
   "type": "module",
   "main": "./dist/index.umd.cjs",
@@ -39,31 +39,31 @@
     "lint": "eslint src"
   },
   "dependencies": {
-    "@axa-fr/oidc-client": "7.29.3",
-    "@axa-fr/oidc-client-service-worker": "7.29.3"
+    "@axa-fr/oidc-client": "7.29.5",
+    "@axa-fr/oidc-client-service-worker": "7.29.5"
   },
   "peerDependencies": {
     "react": "^17.0.0 || ^18.0.0 || ^19.0.0"
   },
   "devDependencies": {
-    "@testing-library/jest-dom": "6.9.1",
-    "@testing-library/react": "16.3.2",
-    "@testing-library/user-event": "14.6.1",
-    "@types/react": "19.2.14",
-    "@vitejs/plugin-react": "6.0.2",
-    "@vitest/coverage-v8": "4.1.6",
-    "cpy": "13.2.2",
+    "@testing-library/jest-dom": "7.0.1",
+    "@testing-library/react": "16.3.3",
+    "@testing-library/user-event": "14.6.7",
+    "@types/react": "19.3.0",
+    "@vitejs/plugin-react": "6.1.1",
+    "@vitest/coverage-v8": "5.0.0",
+    "cpy": "13.2.3",
     "cpy-cli": "^7.0.0",
     "cross-env": "^10.1.0",
-    "jsdom": "29.1.1",
-    "msw": "2.14.6",
-    "react": "^19.2.6",
-    "react-dom": "^19.2.6",
+    "jsdom": "30.0.1",
+    "msw": "2.15.0",
+    "react": "^19.3.0",
+    "react-dom": "^19.3.0",
     "rimraf": "6.1.3",
-    "typescript": "6.0.3",
-    "vite": "8.0.13",
-    "vite-plugin-dts": "5.0.0",
-    "vitest": "4.1.6"
+    "typescript": "npm:@typescript/typescript6@6.0.2",
+    "vite": "8.3.0",
+    "vite-plugin-dts": "5.1.0",
+    "vitest": "5.0.0"
   },
   "license": "MIT",
   "publishConfig": {

package/src/FetchToken.spec.tsx

@@ -0,0 +1,135 @@
+import type { Fetch } from '@axa-fr/oidc-client';
+import { renderHook } from '@testing-library/react';
+import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest';
+
+import { useOidcFetch } from './FetchToken';
+
+const { getOrThrow, fetchWithTokens } = vi.hoisted(() => ({
+  getOrThrow: vi.fn(),
+  fetchWithTokens: vi.fn(),
+}));
+
+vi.mock('@axa-fr/oidc-client', () => ({
+  OidcClient: { getOrThrow },
+}));
+
+describe('useOidcFetch', () => {
+  const originalFetch = vi.fn<Fetch>();
+  const authenticatedFetch = vi.fn<Fetch>();
+  const response = new Response('response');
+
+  beforeEach(() => {
+    vi.resetAllMocks();
+    getOrThrow.mockReturnValue({ fetchWithTokens });
+    fetchWithTokens.mockReturnValue(authenticatedFetch);
+    authenticatedFetch.mockResolvedValue(response);
+  });
+
+  afterEach(() => {
+    vi.unstubAllGlobals();
+  });
+
+  it('looks up the default configuration only when a request is made', async () => {
+    const { result } = renderHook(() => useOidcFetch(originalFetch));
+
+    expect(getOrThrow).not.toHaveBeenCalled();
+    await expect(result.current.fetch('/resource')).resolves.toBe(response);
+    expect(getOrThrow).toHaveBeenCalledExactlyOnceWith('default');
+    expect(fetchWithTokens).toHaveBeenCalledExactlyOnceWith(originalFetch, false);
+    expect(authenticatedFetch).toHaveBeenCalledExactlyOnceWith('/resource', undefined);
+  });
+
+  it('defaults to the browser fetch implementation', async () => {
+    vi.stubGlobal('fetch', originalFetch);
+    const { result } = renderHook(() => useOidcFetch());
+
+    await result.current.fetch('/resource');
+
+    expect(fetchWithTokens).toHaveBeenCalledExactlyOnceWith(originalFetch, false);
+  });
+
+  it.each([new URL('https://example.com/resource'), new Request('https://example.com/resource')])(
+    'forwards request objects and options unchanged: %s',
+    async input => {
+      const init: RequestInit = { method: 'POST', headers: { 'X-Custom': 'value' }, body: 'body' };
+      const { result } = renderHook(() => useOidcFetch(originalFetch, 'custom', true));
+
+      await expect(result.current.fetch(input, init)).resolves.toBe(response);
+
+      expect(getOrThrow).toHaveBeenCalledWith('custom');
+      expect(fetchWithTokens).toHaveBeenCalledWith(originalFetch, true);
+      expect(authenticatedFetch.mock.calls[0][0]).toBe(input);
+      expect(authenticatedFetch.mock.calls[0][1]).toBe(init);
+    },
+  );
+
+  it('uses the current client for each request rather than caching it', async () => {
+    const nextFetchWithTokens = vi.fn().mockReturnValue(authenticatedFetch);
+    const { result } = renderHook(() => useOidcFetch(originalFetch));
+    await result.current.fetch('/first');
+
+    getOrThrow.mockReturnValue({ fetchWithTokens: nextFetchWithTokens });
+    await result.current.fetch('/second');
+
+    expect(getOrThrow).toHaveBeenCalledTimes(2);
+    expect(fetchWithTokens).toHaveBeenCalledTimes(1);
+    expect(nextFetchWithTokens).toHaveBeenCalledExactlyOnceWith(originalFetch, false);
+  });
+
+  it('keeps the callback stable when its dependencies are unchanged', () => {
+    const { result, rerender } = renderHook(() => useOidcFetch(originalFetch));
+    const callback = result.current.fetch;
+
+    rerender();
+
+    expect(result.current.fetch).toBe(callback);
+  });
+
+  it.each([
+    { fetch: vi.fn<Fetch>(), configurationName: 'default', isDpop: false },
+    { fetch: originalFetch, configurationName: 'custom', isDpop: false },
+    { fetch: originalFetch, configurationName: 'default', isDpop: true },
+  ])('updates the callback when a dependency changes: %s', async nextProps => {
+    const { result, rerender } = renderHook(
+      ({ fetch, configurationName, isDpop }) => useOidcFetch(fetch, configurationName, isDpop),
+      { initialProps: { fetch: originalFetch, configurationName: 'default', isDpop: false } },
+    );
+    const callback = result.current.fetch;
+
+    rerender(nextProps);
+    expect(result.current.fetch).not.toBe(callback);
+    await result.current.fetch('/resource');
+
+    expect(getOrThrow).toHaveBeenCalledWith(nextProps.configurationName);
+    expect(fetchWithTokens).toHaveBeenCalledWith(nextProps.fetch, nextProps.isDpop);
+  });
+
+  it('rejects the request rather than throwing synchronously when configuration is missing', async () => {
+    const error = new Error('Missing configuration');
+    getOrThrow.mockImplementation(() => {
+      throw error;
+    });
+    const { result } = renderHook(() => useOidcFetch(originalFetch));
+
+    await expect(result.current.fetch('/resource')).rejects.toBe(error);
+    expect(fetchWithTokens).not.toHaveBeenCalled();
+  });
+
+  it('preserves errors thrown while constructing the authenticated fetch', async () => {
+    const error = new Error('Cannot construct fetch');
+    fetchWithTokens.mockImplementation(() => {
+      throw error;
+    });
+    const { result } = renderHook(() => useOidcFetch(originalFetch));
+
+    await expect(result.current.fetch('/resource')).rejects.toBe(error);
+  });
+
+  it('preserves rejected fetch errors', async () => {
+    const error = new Error('Network failure');
+    authenticatedFetch.mockRejectedValue(error);
+    const { result } = renderHook(() => useOidcFetch(originalFetch));
+
+    await expect(result.current.fetch('/resource')).rejects.toBe(error);
+  });
+});

package/src/FetchToken.tsx

@@ -7,18 +7,6 @@ export interface ComponentWithOidcFetchProps {
 
 const defaultConfigurationName = 'default';
 
-const fetchWithToken =
-  (
-    fetch: Fetch,
-    getOidcWithConfigurationName: () => OidcClient | null,
-    demonstratingProofOfPossession: boolean = false,
-  ) =>
-  async (...params: Parameters<Fetch>) => {
-    const oidc = getOidcWithConfigurationName();
-    const newFetch = oidc.fetchWithTokens(fetch, demonstratingProofOfPossession);
-    return await newFetch(...params);
-  };
-
 export const withOidcFetch =
   (
     fetch: Fetch = null,
@@ -46,14 +34,13 @@ export const useOidcFetch = (
   const getOidc = OidcClient.getOrThrow;
 
   const memoizedFetchCallback = useCallback(
-    (input: RequestInfo | URL, init?: RequestInit) => {
-      const getOidcWithConfigurationName = () => getOidc(configurationName);
-      const newFetch = fetchWithToken(
+    async (input: RequestInfo | URL, init?: RequestInit): Promise<Response> => {
+      const oidc = getOidc(configurationName);
+      const authenticatedFetch = oidc.fetchWithTokens(
         previousFetch,
-        getOidcWithConfigurationName,
         demonstratingProofOfPossession,
       );
-      return newFetch(input, init);
+      return await authenticatedFetch(input, init);
     },
     [previousFetch, configurationName, demonstratingProofOfPossession],
   );

package/src/OidcSecure.spec.tsx

@@ -0,0 +1,84 @@
+import { render, screen } from '@testing-library/react';
+import { beforeEach, describe, expect, it, vi } from 'vitest';
+
+import { OidcSecure, withOidcSecure } from './OidcSecure';
+
+const { getOrThrow, loginAsync } = vi.hoisted(() => ({
+  getOrThrow: vi.fn(),
+  loginAsync: vi.fn(),
+}));
+
+vi.mock('@axa-fr/oidc-client', () => ({ OidcClient: { getOrThrow } }));
+
+describe('OidcSecure', () => {
+  beforeEach(() => {
+    vi.resetAllMocks();
+  });
+
+  it('renders children without logging in when tokens are present', () => {
+    getOrThrow.mockReturnValue({ tokens: {}, loginAsync });
+
+    render(<OidcSecure>Protected content</OidcSecure>);
+
+    expect(screen.getByText('Protected content')).toBeDefined();
+    expect(getOrThrow).toHaveBeenCalledWith('default');
+    expect(loginAsync).not.toHaveBeenCalled();
+  });
+
+  it('hides children and starts login with the supplied configuration and arguments', () => {
+    getOrThrow.mockReturnValue({ tokens: null, loginAsync });
+    const extras = { prompt: 'login' };
+
+    render(
+      <OidcSecure configurationName="custom" callbackPath="/private" extras={extras}>
+        Protected content
+      </OidcSecure>,
+    );
+
+    expect(screen.queryByText('Protected content')).toBeNull();
+    expect(getOrThrow).toHaveBeenCalledWith('custom');
+    expect(loginAsync).toHaveBeenCalledExactlyOnceWith('/private', extras);
+  });
+
+  it('does not restart login while logout is in progress', () => {
+    getOrThrow.mockReturnValue({ tokens: null, isLoggingOut: true, loginAsync });
+
+    render(<OidcSecure>Protected content</OidcSecure>);
+
+    expect(screen.queryByText('Protected content')).toBeNull();
+    expect(loginAsync).not.toHaveBeenCalled();
+  });
+
+  it('does not repeat login on an unchanged render', () => {
+    getOrThrow.mockReturnValue({ tokens: null, loginAsync });
+    const { rerender } = render(<OidcSecure>Protected content</OidcSecure>);
+
+    rerender(<OidcSecure>Protected content</OidcSecure>);
+
+    expect(loginAsync).toHaveBeenCalledExactlyOnceWith(null, null);
+  });
+
+  it('preserves the fail-fast behavior for a missing configuration', () => {
+    const error = new Error('Missing configuration');
+    getOrThrow.mockImplementation(() => {
+      throw error;
+    });
+
+    expect(() => render(<OidcSecure>Protected content</OidcSecure>)).toThrow(error);
+  });
+
+  it('passes props through the higher-order component', () => {
+    getOrThrow.mockReturnValue({ tokens: {}, loginAsync });
+    const Component = withOidcSecure(
+      ({ children }) => <span>{children}</span>,
+      '/callback',
+      null,
+      'custom',
+    );
+
+    render(<Component>Wrapped content</Component>);
+
+    expect(screen.getByText('Wrapped content')).toBeDefined();
+    expect(getOrThrow).toHaveBeenCalledWith('custom');
+  });
+});

package/src/ReactOidc.spec.tsx

@@ -0,0 +1,222 @@
+import type { Tokens } from '@axa-fr/oidc-client';
+import { act, renderHook } from '@testing-library/react';
+import { beforeEach, describe, expect, it, vi } from 'vitest';
+
+import { useOidc, useOidcAccessToken, useOidcIdToken } from './ReactOidc';
+
+const { get, subscribeEvents, removeEventSubscription, generateProof } = vi.hoisted(() => ({
+  get: vi.fn(),
+  subscribeEvents: vi.fn<(listener: (name: string) => void) => string>(),
+  removeEventSubscription: vi.fn(),
+  generateProof: vi.fn(),
+}));
+
+vi.mock('@axa-fr/oidc-client', () => ({
+  OidcClient: {
+    get,
+    eventNames: {
+      token_renewed: 'token_renewed',
+      token_acquired: 'token_acquired',
+      logout_from_another_tab: 'logout_from_another_tab',
+      logout_from_same_tab: 'logout_from_same_tab',
+      refreshTokensAsync_error: 'refreshTokensAsync_error',
+      syncTokensAsync_error: 'syncTokensAsync_error',
+    },
+  },
+}));
+
+const initialTokens = {
+  accessToken: 'access-example',
+  accessTokenPayload: { sub: 'user' },
+  idToken: 'id-example',
+  idTokenPayload: { sub: 'user' },
+};
+
+const client = {
+  tokens: null as Pick<
+    Tokens,
+    'accessToken' | 'accessTokenPayload' | 'idToken' | 'idTokenPayload'
+  > | null,
+  configuration: { demonstrating_proof_of_possession: false },
+  subscribeEvents,
+  removeEventSubscription,
+  generateDemonstrationOfProofOfPossessionAsync: generateProof,
+  loginAsync: vi.fn(),
+  logoutAsync: vi.fn(),
+  renewTokensAsync: vi.fn(),
+};
+
+beforeEach(() => {
+  vi.resetAllMocks();
+  client.tokens = { ...initialTokens };
+  client.configuration.demonstrating_proof_of_possession = false;
+  get.mockReturnValue(client);
+  subscribeEvents.mockReturnValue('subscription');
+});
+
+describe.each([
+  {
+    name: 'access token',
+    useToken: useOidcAccessToken,
+    initial: {
+      accessToken: initialTokens.accessToken,
+      accessTokenPayload: initialTokens.accessTokenPayload,
+      generateDemonstrationOfProofOfPossessionAsync: null,
+    },
+    empty: { accessToken: null, accessTokenPayload: null },
+  },
+  {
+    name: 'ID token',
+    useToken: useOidcIdToken,
+    initial: {
+      idToken: initialTokens.idToken,
+      idTokenPayload: initialTokens.idTokenPayload,
+    },
+    empty: { idToken: null, idTokenPayload: null },
+  },
+])('$name hook', ({ useToken, initial, empty }) => {
+  it('initializes from the configured client', () => {
+    const { result } = renderHook(() => useToken('custom'));
+
+    expect(result.current).toEqual(initial);
+    expect(get).toHaveBeenCalledWith('custom');
+  });
+
+  it('uses the empty state when the client has no tokens', () => {
+    client.tokens = null;
+    const { result } = renderHook(() => useToken());
+
+    expect(result.current).toEqual(empty);
+  });
+
+  it.each([
+    'token_renewed',
+    'token_acquired',
+    'logout_from_another_tab',
+    'logout_from_same_tab',
+    'refreshTokensAsync_error',
+    'syncTokensAsync_error',
+  ])('refreshes token state on %s', eventName => {
+    const { result } = renderHook(() => useToken());
+    const listener = subscribeEvents.mock.calls[0][0];
+
+    client.tokens = null;
+    act(() => listener(eventName));
+    expect(result.current).toEqual(empty);
+
+    client.tokens = { ...initialTokens };
+    act(() => listener(eventName));
+    expect(result.current).toEqual(initial);
+  });
+
+  it('ignores unrelated events', () => {
+    const { result } = renderHook(() => useToken());
+    client.tokens = null;
+
+    act(() => subscribeEvents.mock.calls[0][0]('unrelated'));
+
+    expect(result.current).toEqual(initial);
+  });
+
+  it('cleans up subscriptions on configuration changes and unmount', () => {
+    subscribeEvents.mockReturnValueOnce('first').mockReturnValueOnce('second');
+    const { rerender, unmount } = renderHook(({ name }) => useToken(name), {
+      initialProps: { name: 'first' },
+    });
+
+    rerender({ name: 'second' });
+    expect(removeEventSubscription).toHaveBeenCalledExactlyOnceWith('first');
+    expect(subscribeEvents).toHaveBeenCalledTimes(2);
+    expect(get).toHaveBeenLastCalledWith('second');
+
+    unmount();
+    expect(removeEventSubscription.mock.calls).toEqual([['first'], ['second']]);
+  });
+});
+
+describe('access token proof generation', () => {
+  it('uses the initial access token when generating a proof', async () => {
+    client.configuration.demonstrating_proof_of_possession = true;
+    generateProof.mockResolvedValue('proof');
+    const { result } = renderHook(() => useOidcAccessToken());
+
+    await expect(
+      result.current.generateDemonstrationOfProofOfPossessionAsync(
+        'https://api.example.com',
+        'GET',
+      ),
+    ).resolves.toBe('proof');
+    expect(generateProof).toHaveBeenCalledExactlyOnceWith(
+      'access-example',
+      'https://api.example.com',
+      'GET',
+    );
+  });
+
+  it('uses refreshed tokens and forwards proof extras after a token event', async () => {
+    client.configuration.demonstrating_proof_of_possession = true;
+    const { result } = renderHook(() => useOidcAccessToken());
+    client.tokens = { ...initialTokens, accessToken: 'renewed-example' };
+    act(() => subscribeEvents.mock.calls[0][0]('token_renewed'));
+    const extras = { nonce: 'example-nonce' };
+
+    await result.current.generateDemonstrationOfProofOfPossessionAsync(
+      'https://api.example.com',
+      'POST',
+      extras,
+    );
+
+    expect(generateProof).toHaveBeenCalledExactlyOnceWith(
+      'renewed-example',
+      'https://api.example.com',
+      'POST',
+      extras,
+    );
+  });
+});
+
+describe('useOidc', () => {
+  it('tracks authentication on login and logout events', () => {
+    client.tokens = null;
+    const { result } = renderHook(() => useOidc('custom'));
+    const listener = subscribeEvents.mock.calls[0][0];
+    expect(result.current.isAuthenticated).toBe(false);
+
+    client.tokens = { ...initialTokens };
+    act(() => listener('token_acquired'));
+    expect(result.current.isAuthenticated).toBe(true);
+
+    client.tokens = null;
+    act(() => listener('logout_from_same_tab'));
+    expect(result.current.isAuthenticated).toBe(false);
+  });
+
+  it('forwards login and logout arguments and returns their promises', () => {
+    const loginPromise = Promise.resolve();
+    const logoutPromise = Promise.resolve();
+    client.loginAsync.mockReturnValue(loginPromise);
+    client.logoutAsync.mockReturnValue(logoutPromise);
+    const { result } = renderHook(() => useOidc('custom'));
+    const extras = { prompt: 'login' };
+
+    expect(result.current.login('/callback', extras, true, 'openid')).toBe(loginPromise);
+    expect(client.loginAsync).toHaveBeenCalledExactlyOnceWith(
+      '/callback',
+      extras,
+      false,
+      'openid',
+      true,
+    );
+    expect(result.current.logout('/logout', extras)).toBe(logoutPromise);
+    expect(client.logoutAsync).toHaveBeenCalledExactlyOnceWith('/logout', extras);
+  });
+
+  it('returns renewed token data without adding internal fields', async () => {
+    client.renewTokensAsync.mockResolvedValue({ ...initialTokens, internal: 'not exposed' });
+    const { result } = renderHook(() => useOidc());
+    const extras = { scope: 'openid' };
+
+    await expect(result.current.renewTokens(extras)).resolves.toEqual(initialTokens);
+    expect(client.renewTokensAsync).toHaveBeenCalledExactlyOnceWith(extras);
+  });
+});