@bmc-soft/keycloak-auth 1.0.11 → 2.0.1

package/dist/core/sessionPolicy.js

@@ -0,0 +1,63 @@
+export const OFFLINE_ACCESS_SCOPE = 'offline_access';
+const OPENID_SCOPE = 'openid';
+const DEFAULT_BACKGROUND_REAUTH_THRESHOLD_MS = 60000;
+export function withOfflineAccessScope(options = {}, enabled = true) {
+    if (!enabled)
+        return { ...options };
+    const scopes = (options.scope ?? '')
+        .split(/\s+/)
+        .map(scope => scope.trim())
+        .filter(Boolean);
+    if (!scopes.includes(OPENID_SCOPE)) {
+        scopes.unshift(OPENID_SCOPE);
+    }
+    if (!scopes.includes(OFFLINE_ACCESS_SCOPE)) {
+        scopes.push(OFFLINE_ACCESS_SCOPE);
+    }
+    return {
+        ...options,
+        scope: scopes.join(' '),
+    };
+}
+export function isIpAddressHost(host) {
+    const normalizedHost = host.replace(/^\[/, '').replace(/\]$/, '');
+    const ipv4Parts = normalizedHost.split('.');
+    if (ipv4Parts.length === 4) {
+        return ipv4Parts.every(part => {
+            if (!/^\d{1,3}$/.test(part))
+                return false;
+            const value = Number(part);
+            return value >= 0 && value <= 255;
+        });
+    }
+    return /^[0-9a-fA-F:]+$/.test(normalizedHost) && normalizedHost.includes(':');
+}
+export function getUrlHost(url) {
+    if (!url)
+        return null;
+    try {
+        return new URL(url).hostname;
+    }
+    catch {
+        return null;
+    }
+}
+export function isInternalNetworkUrl(url) {
+    const host = getUrlHost(url);
+    return host ? isIpAddressHost(host) : false;
+}
+export function shouldShowBackgroundReauth({ enabled = true, thresholdMs = DEFAULT_BACKGROUND_REAUTH_THRESHOLD_MS, authServerUrl, backgroundedAt, now = Date.now(), }) {
+    if (!enabled || backgroundedAt == null)
+        return false;
+    if (isInternalNetworkUrl(authServerUrl))
+        return false;
+    return now - backgroundedAt > thresholdMs;
+}
+export function resolveBackgroundReauthConfig(config) {
+    return {
+        enabled: config?.enabled ?? true,
+        thresholdMs: config?.thresholdMs ?? DEFAULT_BACKGROUND_REAUTH_THRESHOLD_MS,
+        internalNetworkMode: config?.internalNetworkMode ?? 'ip-host-is-internal',
+    };
+}
+//# sourceMappingURL=sessionPolicy.js.map

package/dist/core/sessionPolicy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sessionPolicy.js","sourceRoot":"","sources":["../../src/core/sessionPolicy.ts"],"names":[],"mappings":"AAEA,MAAM,CAAC,MAAM,oBAAoB,GAAG,gBAAgB,CAAC;AAgBrD,MAAM,YAAY,GAAG,QAAQ,CAAC;AAC9B,MAAM,sCAAsC,GAAG,KAAK,CAAC;AAErD,MAAM,UAAU,sBAAsB,CACpC,UAAgC,EAAE,EAClC,OAAO,GAAG,IAAI;IAEd,IAAI,CAAC,OAAO;QAAE,OAAO,EAAC,GAAG,OAAO,EAAC,CAAC;IAElC,MAAM,MAAM,GAAG,CAAC,OAAO,CAAC,KAAK,IAAI,EAAE,CAAC;SACjC,KAAK,CAAC,KAAK,CAAC;SACZ,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;SAC1B,MAAM,CAAC,OAAO,CAAC,CAAC;IAEnB,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;QACnC,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;IAC/B,CAAC;IAED,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,oBAAoB,CAAC,EAAE,CAAC;QAC3C,MAAM,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;IACpC,CAAC;IAED,OAAO;QACL,GAAG,OAAO;QACV,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC;KACxB,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,IAAY;IAC1C,MAAM,cAAc,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAElE,MAAM,SAAS,GAAG,cAAc,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC5C,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3B,OAAO,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE;YAC5B,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC;gBAAE,OAAO,KAAK,CAAC;YAC1C,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;YAC3B,OAAO,KAAK,IAAI,CAAC,IAAI,KAAK,IAAI,GAAG,CAAC;QACpC,CAAC,CAAC,CAAC;IACL,CAAC;IAED,OAAO,iBAAiB,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,cAAc,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;AAChF,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,GAAY;IACrC,IAAI,CAAC,GAAG;QAAE,OAAO,IAAI,CAAC;IAEtB,IAAI,CAAC;QACH,OAAO,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC;IAC/B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,GAAY;IAC/C,MAAM,IAAI,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;IAC7B,OAAO,IAAI,CAAC,CAAC,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;AAC9C,CAAC;AAED,MAAM,UAAU,0BAA0B,CAAC,EACzC,OAAO,GAAG,IAAI,EACd,WAAW,GAAG,sCAAsC,EACpD,aAAa,EACb,cAAc,EACd,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,GACM;IACtB,IAAI,CAAC,OAAO,IAAI,cAAc,IAAI,IAAI;QAAE,OAAO,KAAK,CAAC;IACrD,IAAI,oBAAoB,CAAC,aAAa,CAAC;QAAE,OAAO,KAAK,CAAC;IACtD,OAAO,GAAG,GAAG,cAAc,GAAG,WAAW,CAAC;AAC5C,CAAC;AAED,MAAM,UAAU,6BAA6B,CAC3C,MAA+B;IAE/B,OAAO;QACL,OAAO,EAAE,MAAM,EAAE,OAAO,IAAI,IAAI;QAChC,WAAW,EAAE,MAAM,EAAE,WAAW,IAAI,sCAAsC;QAC1E,mBAAmB,EAAE,MAAM,EAAE,mBAAmB,IAAI,qBAAqB;KAC1E,CAAC;AACJ,CAAC"}

package/dist/core/types.d.ts

@@ -1,8 +1,14 @@
 import type { KeycloakConfig, KeycloakInitOptions, KeycloakLoginOptions, KeycloakProfile } from '@react-keycloak/keycloak-ts';
+import type { BackgroundReauthConfig } from './sessionPolicy';
 export type { KeycloakConfig, KeycloakLoginOptions, KeycloakProfile };
 export interface KeycloakConfigWith2FA extends KeycloakConfig {
     clientId2fa?: string;
+    offlineAccessEnabled?: boolean;
+    backgroundReauth?: BackgroundReauthConfig;
+    clientSecret?: string;
+    getClientSecret?: () => string | undefined | Promise<string | undefined>;
 }
+export type InitRecoveryStrategy = 'none' | 'clear-tokens-and-retry';
 export interface RNKeycloakInitOptions extends KeycloakInitOptions {
     redirectUri?: string;
     onAuthError?: (errorData: {
@@ -11,21 +17,29 @@ export interface RNKeycloakInitOptions extends KeycloakInitOptions {
     }) => void;
     onReady?: (authenticated?: boolean) => void;
     onTokensChanged?: () => void;
+    clientSecret?: string;
+    getClientSecret?: () => string | undefined | Promise<string | undefined>;
 }
 export interface TokenUpdateResult {
     token: string;
+    accessToken?: string;
     refreshToken?: string;
+    offlineToken?: string;
     idToken?: string;
 }
 export interface KeycloakTokens {
     token: string | null;
+    accessToken: string | null;
     refreshToken: string | null;
+    offlineToken: string | null;
     idToken: string | null;
 }
 export interface AuthState {
     isAuthenticated: boolean;
     token: string | null;
+    accessToken: string | null;
     refreshToken: string | null;
+    offlineToken: string | null;
     idToken: string | null;
     profile: KeycloakProfile | null;
 }

package/dist/core/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/core/types.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EACV,cAAc,EACd,mBAAmB,EACnB,oBAAoB,EACpB,eAAe,EAChB,MAAM,6BAA6B,CAAC;AAErC,YAAY,EAAC,cAAc,EAAE,oBAAoB,EAAE,eAAe,EAAC,CAAC;AAQpE,MAAM,WAAW,qBAAsB,SAAQ,cAAc;IAE3D,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAKD,MAAM,WAAW,qBAAsB,SAAQ,mBAAmB;IAEhE,WAAW,CAAC,EAAE,MAAM,CAAC;IAErB,WAAW,CAAC,EAAE,CAAC,SAAS,EAAE;QAAC,KAAK,EAAE,OAAO,CAAC;QAAC,iBAAiB,CAAC,EAAE,MAAM,CAAA;KAAC,KAAK,IAAI,CAAC;IAEhF,OAAO,CAAC,EAAE,CAAC,aAAa,CAAC,EAAE,OAAO,KAAK,IAAI,CAAC;IAE5C,eAAe,CAAC,EAAE,MAAM,IAAI,CAAC;CAC9B;AAKD,MAAM,WAAW,iBAAiB;IAChC,KAAK,EAAE,MAAM,CAAC;IACd,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAKD,MAAM,WAAW,cAAc;IAC7B,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;CACxB;AAKD,MAAM,WAAW,SAAS;IACxB,eAAe,EAAE,OAAO,CAAC;IACzB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,OAAO,EAAE,eAAe,GAAG,IAAI,CAAC;CACjC"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/core/types.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EACV,cAAc,EACd,mBAAmB,EACnB,oBAAoB,EACpB,eAAe,EAChB,MAAM,6BAA6B,CAAC;AACrC,OAAO,KAAK,EAAC,sBAAsB,EAAC,MAAM,iBAAiB,CAAC;AAE5D,YAAY,EAAC,cAAc,EAAE,oBAAoB,EAAE,eAAe,EAAC,CAAC;AAQpE,MAAM,WAAW,qBAAsB,SAAQ,cAAc;IAK3D,WAAW,CAAC,EAAE,MAAM,CAAC;IAErB,oBAAoB,CAAC,EAAE,OAAO,CAAC;IAE/B,gBAAgB,CAAC,EAAE,sBAAsB,CAAC;IAK1C,YAAY,CAAC,EAAE,MAAM,CAAC;IAItB,eAAe,CAAC,EAAE,MAAM,MAAM,GAAG,SAAS,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;CAC1E;AAED,MAAM,MAAM,oBAAoB,GAAG,MAAM,GAAG,wBAAwB,CAAC;AAKrE,MAAM,WAAW,qBAAsB,SAAQ,mBAAmB;IAEhE,WAAW,CAAC,EAAE,MAAM,CAAC;IAErB,WAAW,CAAC,EAAE,CAAC,SAAS,EAAE;QAAC,KAAK,EAAE,OAAO,CAAC;QAAC,iBAAiB,CAAC,EAAE,MAAM,CAAA;KAAC,KAAK,IAAI,CAAC;IAEhF,OAAO,CAAC,EAAE,CAAC,aAAa,CAAC,EAAE,OAAO,KAAK,IAAI,CAAC;IAE5C,eAAe,CAAC,EAAE,MAAM,IAAI,CAAC;IAE7B,YAAY,CAAC,EAAE,MAAM,CAAC;IAEtB,eAAe,CAAC,EAAE,MAAM,MAAM,GAAG,SAAS,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;CAC1E;AAKD,MAAM,WAAW,iBAAiB;IAChC,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAKD,MAAM,WAAW,cAAc;IAC7B,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;CACxB;AAKD,MAAM,WAAW,SAAS;IACxB,eAAe,EAAE,OAAO,CAAC;IACzB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,OAAO,EAAE,eAAe,GAAG,IAAI,CAAC;CACjC"}

package/dist/hooks/useKeycloakAuth.d.ts

@@ -5,7 +5,10 @@ export interface UseKeycloakAuthResult {
     isInitialized: boolean;
     isLoading: boolean;
     error: Error | null;
+    accessToken: string | null;
     token: string | null;
+    offlineToken: string | null;
+    refreshToken: string | null;
     isExpired: boolean;
     isAuthenticated: boolean;
     updateToken: (minValidity?: number) => Promise<string>;

package/dist/hooks/useKeycloakAuth.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"useKeycloakAuth.d.ts","sourceRoot":"","sources":["../../src/hooks/useKeycloakAuth.ts"],"names":[],"mappings":"AAMA,OAAO,EAAC,mBAAmB,EAAsB,MAAM,YAAY,CAAC;AACpE,OAAO,KAAK,EAAC,oBAAoB,EAAE,eAAe,EAAC,MAAM,SAAS,CAAC;AAGnE,MAAM,WAAW,qBAAqB;IAEpC,QAAQ,EAAE,UAAU,CAAC,OAAO,mBAAmB,CAAC,CAAC,UAAU,CAAC,CAAC;IAE7D,aAAa,EAAE,OAAO,CAAC;IAEvB,SAAS,EAAE,OAAO,CAAC;IAEnB,KAAK,EAAE,KAAK,GAAG,IAAI,CAAC;IAEpB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IAErB,SAAS,EAAE,OAAO,CAAC;IAEnB,eAAe,EAAE,OAAO,CAAC;IAEzB,WAAW,EAAE,CAAC,WAAW,CAAC,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IAEvD,KAAK,EAAE,CAAC,OAAO,EAAE,oBAAoB,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAExD,MAAM,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IAE5B,eAAe,EAAE,MAAM,OAAO,CAAC,eAAe,CAAC,CAAC;IAEhD,cAAc,EAAE,CAAC,OAAO,CAAC,EAAE,oBAAoB,KAAK,MAAM,CAAC;IAE3D,eAAe,EAAE,CAAC,WAAW,CAAC,EAAE,MAAM,KAAK,MAAM,CAAC;IAElD,WAAW,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IAMjC,gBAAgB,EAAE,OAAO,CAAC;IAE1B,UAAU,EAAE,MAAM,IAAI,CAAC;IAEvB,UAAU,EAAE,MAAM,IAAI,CAAC;CACxB;AAMD,eAAO,MAAM,eAAe,QAAO,qBAwElC,CAAC"}
+{"version":3,"file":"useKeycloakAuth.d.ts","sourceRoot":"","sources":["../../src/hooks/useKeycloakAuth.ts"],"names":[],"mappings":"AAMA,OAAO,EAAC,mBAAmB,EAAiD,MAAM,YAAY,CAAC;AAC/F,OAAO,KAAK,EAAC,oBAAoB,EAAE,eAAe,EAAC,MAAM,SAAS,CAAC;AAInE,MAAM,WAAW,qBAAqB;IAEpC,QAAQ,EAAE,UAAU,CAAC,OAAO,mBAAmB,CAAC,CAAC,UAAU,CAAC,CAAC;IAE7D,aAAa,EAAE,OAAO,CAAC;IAEvB,SAAS,EAAE,OAAO,CAAC;IAEnB,KAAK,EAAE,KAAK,GAAG,IAAI,CAAC;IAEpB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IAErB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAE5B,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAE5B,SAAS,EAAE,OAAO,CAAC;IAEnB,eAAe,EAAE,OAAO,CAAC;IAEzB,WAAW,EAAE,CAAC,WAAW,CAAC,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IAEvD,KAAK,EAAE,CAAC,OAAO,EAAE,oBAAoB,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAExD,MAAM,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IAE5B,eAAe,EAAE,MAAM,OAAO,CAAC,eAAe,CAAC,CAAC;IAEhD,cAAc,EAAE,CAAC,OAAO,CAAC,EAAE,oBAAoB,KAAK,MAAM,CAAC;IAE3D,eAAe,EAAE,CAAC,WAAW,CAAC,EAAE,MAAM,KAAK,MAAM,CAAC;IAElD,WAAW,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IAMjC,gBAAgB,EAAE,OAAO,CAAC;IAE1B,UAAU,EAAE,MAAM,IAAI,CAAC;IAEvB,UAAU,EAAE,MAAM,IAAI,CAAC;CACxB;AAMD,eAAO,MAAM,eAAe,QAAO,qBAiFlC,CAAC"}

package/dist/hooks/useKeycloakAuth.js

@@ -1,10 +1,12 @@
 import { useCallback } from 'react';
-import { useKeycloakInstance, useReauth, useToken } from '../context';
+import { useKeycloakInstance, useKeycloakSessionOptions, useReauth, useToken } from '../context';
+import { withOfflineAccessScope } from '../core';
 import { tokenStorage } from '../storage';
 export const useKeycloakAuth = () => {
     const { keycloak, isInitialized, isLoading, error, redirectUri } = useKeycloakInstance();
-    const { token, isExpired, updateToken, clearTokens } = useToken();
+    const { token, refreshToken, isExpired, updateToken, clearTokens } = useToken();
     const { isReauthRequired, showReauth, hideReauth } = useReauth();
+    const { offlineAccessEnabled } = useKeycloakSessionOptions();
     const login = useCallback(async (options) => {
         if (!keycloak) {
             throw new Error('[useKeycloakAuth] Keycloak not initialized');
@@ -12,8 +14,8 @@ export const useKeycloakAuth = () => {
         await keycloak.login({ ...options, redirectUri });
         if (keycloak.token) {
             await tokenStorage.saveTokens({
-                token: keycloak.token,
-                refreshToken: keycloak.refreshToken ?? undefined,
+                accessToken: keycloak.token,
+                offlineToken: keycloak.refreshToken ?? undefined,
                 idToken: keycloak.idToken ?? undefined,
             });
         }
@@ -31,12 +33,12 @@ export const useKeycloakAuth = () => {
         }
         return await keycloak.loadUserProfile();
     }, [keycloak]);
-    const createLoginUrl = useCallback(() => {
+    const createLoginUrl = useCallback((options = {}) => {
         if (!keycloak) {
             throw new Error('[useKeycloakAuth] Keycloak not initialized');
         }
-        return keycloak.createLoginUrl({ redirectUri });
-    }, [keycloak, redirectUri]);
+        return keycloak.createLoginUrl(withOfflineAccessScope({ ...options, redirectUri }, offlineAccessEnabled));
+    }, [keycloak, offlineAccessEnabled, redirectUri]);
     const createLogoutUrl = useCallback(() => {
         if (!keycloak) {
             throw new Error('[useKeycloakAuth] Keycloak not initialized');
@@ -49,7 +51,10 @@ export const useKeycloakAuth = () => {
         isInitialized,
         isLoading,
         error,
+        accessToken: token,
         token,
+        offlineToken: refreshToken,
+        refreshToken,
         isExpired,
         isAuthenticated,
         updateToken,

package/dist/hooks/useKeycloakAuth.js.map

@@ -1 +1 @@
-{"version":3,"file":"useKeycloakAuth.js","sourceRoot":"","sources":["../../src/hooks/useKeycloakAuth.ts"],"names":[],"mappings":"AAIA,OAAO,EAAC,WAAW,EAAC,MAAM,OAAO,CAAC;AAElC,OAAO,EAAC,mBAAmB,EAAE,SAAS,EAAE,QAAQ,EAAC,MAAM,YAAY,CAAC;AAEpE,OAAO,EAAC,YAAY,EAAC,MAAM,YAAY,CAAC;AA+CxC,MAAM,CAAC,MAAM,eAAe,GAAG,GAA0B,EAAE;IACzD,MAAM,EAAC,QAAQ,EAAE,aAAa,EAAE,SAAS,EAAE,KAAK,EAAE,WAAW,EAAC,GAAG,mBAAmB,EAAE,CAAC;IACvF,MAAM,EAAC,KAAK,EAAE,SAAS,EAAE,WAAW,EAAE,WAAW,EAAC,GAAG,QAAQ,EAAE,CAAC;IAChE,MAAM,EAAC,gBAAgB,EAAE,UAAU,EAAE,UAAU,EAAC,GAAG,SAAS,EAAE,CAAC;IAE/D,MAAM,KAAK,GAAG,WAAW,CACvB,KAAK,EAAE,OAA6B,EAAE,EAAE;QACtC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;QAChE,CAAC;QACD,MAAM,QAAQ,CAAC,KAAK,CAAC,EAAC,GAAG,OAAO,EAAE,WAAW,EAAC,CAAC,CAAC;QAChD,IAAI,QAAQ,CAAC,KAAK,EAAE,CAAC;YACnB,MAAM,YAAY,CAAC,UAAU,CAAC;gBAC5B,KAAK,EAAE,QAAQ,CAAC,KAAK;gBACrB,YAAY,EAAE,QAAQ,CAAC,YAAY,IAAI,SAAS;gBAChD,OAAO,EAAE,QAAQ,CAAC,OAAO,IAAI,SAAS;aACvC,CAAC,CAAC;QACL,CAAC;IACH,CAAC,EACD,CAAC,QAAQ,EAAE,WAAW,CAAC,CACxB,CAAC;IAEF,MAAM,MAAM,GAAG,WAAW,CAAC,KAAK,IAAI,EAAE;QACpC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;QAChE,CAAC;QACD,MAAM,QAAQ,CAAC,MAAM,EAAE,CAAC;QACxB,MAAM,WAAW,EAAE,CAAC;IACtB,CAAC,EAAE,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC,CAAC;IAE5B,MAAM,eAAe,GAAG,WAAW,CAAC,KAAK,IAA8B,EAAE;QACvE,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;QAChE,CAAC;QACD,OAAO,MAAM,QAAQ,CAAC,eAAe,EAAE,CAAC;IAC1C,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC;IAEf,MAAM,cAAc,GAAG,WAAW,CAAC,GAAW,EAAE;QAC9C,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;QAChE,CAAC;QACD,OAAO,QAAQ,CAAC,cAAc,CAAC,EAAC,WAAW,EAAC,CAAC,CAAC;IAChD,CAAC,EAAE,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC,CAAC;IAE5B,MAAM,eAAe,GAAG,WAAW,CAAC,GAAW,EAAE;QAC/C,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;QAChE,CAAC;QACD,OAAO,QAAQ,CAAC,eAAe,CAAC,EAAC,WAAW,EAAC,CAAC,CAAC;IACjD,CAAC,EAAE,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC,CAAC;IAE5B,MAAM,eAAe,GAAG,OAAO,CAAC,QAAQ,EAAE,aAAa,IAAI,KAAK,CAAC,CAAC;IAElE,OAAO;QACL,QAAQ;QACR,aAAa;QACb,SAAS;QACT,KAAK;QACL,KAAK;QACL,SAAS;QACT,eAAe;QACf,WAAW;QACX,KAAK;QACL,MAAM;QACN,eAAe;QACf,cAAc;QACd,eAAe;QACf,WAAW;QACX,gBAAgB;QAChB,UAAU;QACV,UAAU;KACX,CAAC;AACJ,CAAC,CAAC"}
+{"version":3,"file":"useKeycloakAuth.js","sourceRoot":"","sources":["../../src/hooks/useKeycloakAuth.ts"],"names":[],"mappings":"AAIA,OAAO,EAAC,WAAW,EAAC,MAAM,OAAO,CAAC;AAElC,OAAO,EAAC,mBAAmB,EAAE,yBAAyB,EAAE,SAAS,EAAE,QAAQ,EAAC,MAAM,YAAY,CAAC;AAE/F,OAAO,EAAC,sBAAsB,EAAC,MAAM,SAAS,CAAC;AAC/C,OAAO,EAAC,YAAY,EAAC,MAAM,YAAY,CAAC;AAoDxC,MAAM,CAAC,MAAM,eAAe,GAAG,GAA0B,EAAE;IACzD,MAAM,EAAC,QAAQ,EAAE,aAAa,EAAE,SAAS,EAAE,KAAK,EAAE,WAAW,EAAC,GAAG,mBAAmB,EAAE,CAAC;IACvF,MAAM,EAAC,KAAK,EAAE,YAAY,EAAE,SAAS,EAAE,WAAW,EAAE,WAAW,EAAC,GAAG,QAAQ,EAAE,CAAC;IAC9E,MAAM,EAAC,gBAAgB,EAAE,UAAU,EAAE,UAAU,EAAC,GAAG,SAAS,EAAE,CAAC;IAC/D,MAAM,EAAC,oBAAoB,EAAC,GAAG,yBAAyB,EAAE,CAAC;IAE3D,MAAM,KAAK,GAAG,WAAW,CACvB,KAAK,EAAE,OAA6B,EAAE,EAAE;QACtC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;QAChE,CAAC;QACD,MAAM,QAAQ,CAAC,KAAK,CAAC,EAAC,GAAG,OAAO,EAAE,WAAW,EAAC,CAAC,CAAC;QAChD,IAAI,QAAQ,CAAC,KAAK,EAAE,CAAC;YACnB,MAAM,YAAY,CAAC,UAAU,CAAC;gBAC5B,WAAW,EAAE,QAAQ,CAAC,KAAK;gBAC3B,YAAY,EAAE,QAAQ,CAAC,YAAY,IAAI,SAAS;gBAChD,OAAO,EAAE,QAAQ,CAAC,OAAO,IAAI,SAAS;aACvC,CAAC,CAAC;QACL,CAAC;IACH,CAAC,EACD,CAAC,QAAQ,EAAE,WAAW,CAAC,CACxB,CAAC;IAEF,MAAM,MAAM,GAAG,WAAW,CAAC,KAAK,IAAI,EAAE;QACpC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;QAChE,CAAC;QACD,MAAM,QAAQ,CAAC,MAAM,EAAE,CAAC;QACxB,MAAM,WAAW,EAAE,CAAC;IACtB,CAAC,EAAE,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC,CAAC;IAE5B,MAAM,eAAe,GAAG,WAAW,CAAC,KAAK,IAA8B,EAAE;QACvE,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;QAChE,CAAC;QACD,OAAO,MAAM,QAAQ,CAAC,eAAe,EAAE,CAAC;IAC1C,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC;IAEf,MAAM,cAAc,GAAG,WAAW,CAChC,CAAC,UAAgC,EAAE,EAAU,EAAE;QAC/C,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;QAChE,CAAC;QACC,OAAO,QAAQ,CAAC,cAAc,CAC5B,sBAAsB,CAAC,EAAC,GAAG,OAAO,EAAE,WAAW,EAAC,EAAE,oBAAoB,CAAC,CACxE,CAAC;IACJ,CAAC,EACD,CAAC,QAAQ,EAAE,oBAAoB,EAAE,WAAW,CAAC,CAC9C,CAAC;IAEF,MAAM,eAAe,GAAG,WAAW,CAAC,GAAW,EAAE;QAC/C,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;QAChE,CAAC;QACD,OAAO,QAAQ,CAAC,eAAe,CAAC,EAAC,WAAW,EAAC,CAAC,CAAC;IACjD,CAAC,EAAE,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC,CAAC;IAE5B,MAAM,eAAe,GAAG,OAAO,CAAC,QAAQ,EAAE,aAAa,IAAI,KAAK,CAAC,CAAC;IAElE,OAAO;QACL,QAAQ;QACR,aAAa;QACb,SAAS;QACT,KAAK;QACL,WAAW,EAAE,KAAK;QAClB,KAAK;QACL,YAAY,EAAE,YAAY;QAC1B,YAAY;QACZ,SAAS;QACT,eAAe;QACf,WAAW;QACX,KAAK;QACL,MAAM;QACN,eAAe;QACf,cAAc;QACd,eAAe;QACf,WAAW;QACX,gBAAgB;QAChB,UAAU;QACV,UAAU;KACX,CAAC;AACJ,CAAC,CAAC"}

package/dist/index.d.ts

@@ -1,6 +1,6 @@
 import 'react-native-get-random-values';
 import KeycloakReactNativeClient from './core/client';
-export type { KeycloakConfig, KeycloakConfigWith2FA, KeycloakTokens, RNKeycloakInitOptions, KeycloakLoginOptions, TokenUpdateResult, KeycloakProfile, AuthState, } from './core/types';
+export type { KeycloakConfig, KeycloakConfigWith2FA, KeycloakTokens, RNKeycloakInitOptions, KeycloakLoginOptions, TokenUpdateResult, KeycloakProfile, AuthState, InitRecoveryStrategy, } from './core/types';
 export { KeycloakReactNativeClient };
 export { KeycloakProvider, useKeycloakTheme } from './context';
 export type { KeycloakProviderProps, KeycloakTheme, KeycloakThemeButtonProps, KeycloakThemeIconButtonProps, } from './context';

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAaA,OAAO,gCAAgC,CAAC;AAExC,OAAO,yBAAyB,MAAM,eAAe,CAAC;AAGtD,YAAY,EACV,cAAc,EACd,qBAAqB,EACrB,cAAc,EACd,qBAAqB,EACrB,oBAAoB,EACpB,iBAAiB,EACjB,eAAe,EACf,SAAS,GACV,MAAM,cAAc,CAAC;AAEtB,OAAO,EAAC,yBAAyB,EAAC,CAAC;AAGnC,OAAO,EAAC,gBAAgB,EAAE,gBAAgB,EAAC,MAAM,WAAW,CAAC;AAC7D,YAAY,EACV,qBAAqB,EACrB,aAAa,EACb,wBAAwB,EACxB,4BAA4B,GAC7B,MAAM,WAAW,CAAC;AAGnB,OAAO,EAAC,eAAe,EAAE,QAAQ,EAAE,SAAS,EAAE,qBAAqB,EAAC,MAAM,SAAS,CAAC;AACpF,YAAY,EACV,qBAAqB,EACrB,kBAAkB,EAClB,4BAA4B,EAC5B,2BAA2B,GAC5B,MAAM,SAAS,CAAC;AAGjB,OAAO,EAAC,YAAY,EAAE,iBAAiB,EAAC,MAAM,WAAW,CAAC;AAC1D,YAAY,EAAC,SAAS,EAAE,iBAAiB,EAAC,MAAM,WAAW,CAAC;AAG5D,OAAO,EACL,YAAY,EACZ,aAAa,EACb,SAAS,EACT,YAAY,EACZ,QAAQ,EACR,UAAU,EACV,gBAAgB,EAChB,gBAAgB,GACjB,MAAM,MAAM,CAAC;AAGd,OAAO,EAAC,QAAQ,EAAE,eAAe,EAAC,MAAM,WAAW,CAAC;AAGpD,OAAO,EAAC,iBAAiB,EAAC,MAAM,WAAW,CAAC;AAG5C,OAAO,EAAC,sBAAsB,EAAE,oBAAoB,EAAC,MAAM,SAAS,CAAC;AACrE,YAAY,EAAC,uBAAuB,EAAE,mBAAmB,EAAC,MAAM,SAAS,CAAC;AAC1E,YAAY,EAAC,aAAa,EAAC,MAAM,SAAS,CAAC;AAC3C,OAAO,EAAC,qBAAqB,EAAC,MAAM,SAAS,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAaA,OAAO,gCAAgC,CAAC;AAExC,OAAO,yBAAyB,MAAM,eAAe,CAAC;AAGtD,YAAY,EACV,cAAc,EACd,qBAAqB,EACrB,cAAc,EACd,qBAAqB,EACrB,oBAAoB,EACpB,iBAAiB,EACjB,eAAe,EACf,SAAS,EACT,oBAAoB,GACrB,MAAM,cAAc,CAAC;AAEtB,OAAO,EAAC,yBAAyB,EAAC,CAAC;AAGnC,OAAO,EAAC,gBAAgB,EAAE,gBAAgB,EAAC,MAAM,WAAW,CAAC;AAC7D,YAAY,EACV,qBAAqB,EACrB,aAAa,EACb,wBAAwB,EACxB,4BAA4B,GAC7B,MAAM,WAAW,CAAC;AAGnB,OAAO,EAAC,eAAe,EAAE,QAAQ,EAAE,SAAS,EAAE,qBAAqB,EAAC,MAAM,SAAS,CAAC;AACpF,YAAY,EACV,qBAAqB,EACrB,kBAAkB,EAClB,4BAA4B,EAC5B,2BAA2B,GAC5B,MAAM,SAAS,CAAC;AAGjB,OAAO,EAAC,YAAY,EAAE,iBAAiB,EAAC,MAAM,WAAW,CAAC;AAC1D,YAAY,EAAC,SAAS,EAAE,iBAAiB,EAAC,MAAM,WAAW,CAAC;AAG5D,OAAO,EACL,YAAY,EACZ,aAAa,EACb,SAAS,EACT,YAAY,EACZ,QAAQ,EACR,UAAU,EACV,gBAAgB,EAChB,gBAAgB,GACjB,MAAM,MAAM,CAAC;AAGd,OAAO,EAAC,QAAQ,EAAE,eAAe,EAAC,MAAM,WAAW,CAAC;AAGpD,OAAO,EAAC,iBAAiB,EAAC,MAAM,WAAW,CAAC;AAG5C,OAAO,EAAC,sBAAsB,EAAE,oBAAoB,EAAC,MAAM,SAAS,CAAC;AACrE,YAAY,EAAC,uBAAuB,EAAE,mBAAmB,EAAC,MAAM,SAAS,CAAC;AAC1E,YAAY,EAAC,aAAa,EAAC,MAAM,SAAS,CAAC;AAC3C,OAAO,EAAC,qBAAqB,EAAC,MAAM,SAAS,CAAC"}

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAaA,OAAO,gCAAgC,CAAC;AAExC,OAAO,yBAAyB,MAAM,eAAe,CAAC;AActD,OAAO,EAAC,yBAAyB,EAAC,CAAC;AAGnC,OAAO,EAAC,gBAAgB,EAAE,gBAAgB,EAAC,MAAM,WAAW,CAAC;AAS7D,OAAO,EAAC,eAAe,EAAE,QAAQ,EAAE,SAAS,EAAE,qBAAqB,EAAC,MAAM,SAAS,CAAC;AASpF,OAAO,EAAC,YAAY,EAAE,iBAAiB,EAAC,MAAM,WAAW,CAAC;AAI1D,OAAO,EACL,YAAY,EACZ,aAAa,EACb,SAAS,EACT,YAAY,EACZ,QAAQ,EACR,UAAU,EACV,gBAAgB,EAChB,gBAAgB,GACjB,MAAM,MAAM,CAAC;AAGd,OAAO,EAAC,QAAQ,EAAE,eAAe,EAAC,MAAM,WAAW,CAAC;AAGpD,OAAO,EAAC,iBAAiB,EAAC,MAAM,WAAW,CAAC;AAG5C,OAAO,EAAC,sBAAsB,EAAE,oBAAoB,EAAC,MAAM,SAAS,CAAC;AAGrE,OAAO,EAAC,qBAAqB,EAAC,MAAM,SAAS,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAaA,OAAO,gCAAgC,CAAC;AAExC,OAAO,yBAAyB,MAAM,eAAe,CAAC;AAetD,OAAO,EAAC,yBAAyB,EAAC,CAAC;AAGnC,OAAO,EAAC,gBAAgB,EAAE,gBAAgB,EAAC,MAAM,WAAW,CAAC;AAS7D,OAAO,EAAC,eAAe,EAAE,QAAQ,EAAE,SAAS,EAAE,qBAAqB,EAAC,MAAM,SAAS,CAAC;AASpF,OAAO,EAAC,YAAY,EAAE,iBAAiB,EAAC,MAAM,WAAW,CAAC;AAI1D,OAAO,EACL,YAAY,EACZ,aAAa,EACb,SAAS,EACT,YAAY,EACZ,QAAQ,EACR,UAAU,EACV,gBAAgB,EAChB,gBAAgB,GACjB,MAAM,MAAM,CAAC;AAGd,OAAO,EAAC,QAAQ,EAAE,eAAe,EAAC,MAAM,WAAW,CAAC;AAGpD,OAAO,EAAC,iBAAiB,EAAC,MAAM,WAAW,CAAC;AAG5C,OAAO,EAAC,sBAAsB,EAAE,oBAAoB,EAAC,MAAM,SAAS,CAAC;AAGrE,OAAO,EAAC,qBAAqB,EAAC,MAAM,SAAS,CAAC"}

package/dist/screens/AuthPage/AuthPage.d.ts

@@ -1,8 +1,10 @@
 import React from 'react';
 import { ImageSourcePropType, ViewStyle } from 'react-native';
+import { type AuthStage } from '../../_lib';
 interface AuthPageProps {
     onSuccess?: (token: string) => void;
     onError?: (error: Error) => void;
+    onStageChange?: (stage: AuthStage) => void;
     logo?: React.ReactNode | ImageSourcePropType;
     logoHeight?: number;
     logoWidth?: number;

package/dist/screens/AuthPage/AuthPage.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"AuthPage.d.ts","sourceRoot":"","sources":["../../../src/screens/AuthPage/AuthPage.tsx"],"names":[],"mappings":"AAAA,OAAO,KAA8B,MAAM,OAAO,CAAC;AACnD,OAAO,EAAQ,mBAAmB,EAAoB,SAAS,EAAC,MAAM,cAAc,CAAC;AAQrF,UAAU,aAAa;IAKrB,SAAS,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,IAAI,CAAC;IAKpC,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,KAAK,KAAK,IAAI,CAAC;IAMjC,IAAI,CAAC,EAAE,KAAK,CAAC,SAAS,GAAG,mBAAmB,CAAC;IAM7C,UAAU,CAAC,EAAE,MAAM,CAAC;IAMpB,SAAS,CAAC,EAAE,MAAM,CAAC;IAMnB,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAM7B,SAAS,CAAC,EAAE,MAAM,CAAC;IAKnB,KAAK,CAAC,EAAE,SAAS,CAAC;IAKlB,UAAU,CAAC,EAAE,MAAM,CAAC;IAKpB,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAkBD,eAAO,MAAM,QAAQ,EAAE,KAAK,CAAC,EAAE,CAAC,aAAa,CA8J5C,CAAC"}
+{"version":3,"file":"AuthPage.d.ts","sourceRoot":"","sources":["../../../src/screens/AuthPage/AuthPage.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAyC,MAAM,OAAO,CAAC;AAC9D,OAAO,EAAQ,mBAAmB,EAAoB,SAAS,EAAC,MAAM,cAAc,CAAC;AAErF,OAAO,EAAa,KAAK,SAAS,EAAC,MAAM,YAAY,CAAC;AAMtD,UAAU,aAAa;IAKrB,SAAS,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,IAAI,CAAC;IAKpC,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,KAAK,KAAK,IAAI,CAAC;IAKjC,aAAa,CAAC,EAAE,CAAC,KAAK,EAAE,SAAS,KAAK,IAAI,CAAC;IAM3C,IAAI,CAAC,EAAE,KAAK,CAAC,SAAS,GAAG,mBAAmB,CAAC;IAM7C,UAAU,CAAC,EAAE,MAAM,CAAC;IAMpB,SAAS,CAAC,EAAE,MAAM,CAAC;IAMnB,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAM7B,SAAS,CAAC,EAAE,MAAM,CAAC;IAKnB,KAAK,CAAC,EAAE,SAAS,CAAC;IAKlB,UAAU,CAAC,EAAE,MAAM,CAAC;IAKpB,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAkBD,eAAO,MAAM,QAAQ,EAAE,KAAK,CAAC,EAAE,CAAC,aAAa,CA4J5C,CAAC"}

package/dist/screens/AuthPage/AuthPage.js

@@ -1,15 +1,18 @@
-import React, { useCallback, useState } from 'react';
+import React, { useCallback, useEffect, useState } from 'react';
 import { Image, StyleSheet, View } from 'react-native';
 import { AUTH_STAGE } from '../../_lib';
 import { useKeycloakTheme } from '../../context';
 import { useKeycloakAuth } from '../../hooks';
-import { credentialStorage } from '../../storage';
+import { credentialStorage, tokenStorage } from '../../storage';
 import { PINSetup, WebViewLogin } from '../../ui';
-export const AuthPage = ({ onSuccess, onError, logo, logoHeight = 80, logoWidth = 80, showBiometryPrompt = true, pinLength = 4, style, paddingTop, paddingBottom, }) => {
+export const AuthPage = ({ onSuccess, onError, onStageChange, logo, logoHeight = 80, logoWidth = 80, showBiometryPrompt = true, pinLength = 4, style, paddingTop, paddingBottom, }) => {
     const { colors: { background: backgroundColor }, LoaderComponent, } = useKeycloakTheme();
     const [stage, setStage] = useState(AUTH_STAGE.LOGIN);
     const [loginData, setLoginData] = useState(null);
     const { keycloak, login } = useKeycloakAuth();
+    useEffect(() => {
+        onStageChange?.(stage);
+    }, [onStageChange, stage]);
     const handleLoginSuccess = useCallback((data) => {
         console.log('[AuthPage] Login success, saving data and proceeding to PIN setup');
         setLoginData(data);
@@ -17,11 +20,11 @@ export const AuthPage = ({ onSuccess, onError, logo, logoHeight = 80, logoWidth
     }, []);
     const handleSaveCredentialsSuccess = useCallback(async (url) => {
         try {
-            console.log('[AuthPage] Saving credentials and exchanging authorization code for tokens...');
+            console.log('[AuthPage] Saving PIN and exchanging authorization code for tokens...');
             setStage(AUTH_STAGE.PROCESSING);
             await login({ url });
             console.log('[AuthPage] Tokens obtained successfully');
-            const accessToken = keycloak?.token;
+            const accessToken = keycloak?.token ?? (await tokenStorage.getToken());
             if (accessToken) {
                 console.log('[AuthPage] Access token received, calling onSuccess');
                 onSuccess?.(accessToken);
@@ -36,23 +39,17 @@ export const AuthPage = ({ onSuccess, onError, logo, logoHeight = 80, logoWidth
             onError?.(error);
         }
     }, [keycloak, login, onSuccess, onError]);
-    const saveCredentials = useCallback(async (pin) => {
+    const savePIN = useCallback(async (pin) => {
         if (!loginData || !keycloak) {
             const error = new Error('[AuthPage] No login data or keycloak instance available');
             console.error(error.message);
             onError?.(error);
             return;
         }
-        await credentialStorage.saveEncryptedCredentials(pin, {
-            username: loginData.username,
-            password: loginData.password,
-        });
+        await credentialStorage.savePIN(pin);
         const biometryEnabled = await credentialStorage.getBiometryEnabled();
         if (biometryEnabled) {
-            await credentialStorage.saveCredentialsForBiometry({
-                username: loginData.username,
-                password: loginData.password,
-            });
+            await credentialStorage.savePINForBiometry();
         }
         handleSaveCredentialsSuccess(loginData.url);
     }, [loginData, handleSaveCredentialsSuccess, keycloak, onError]);
@@ -79,7 +76,7 @@ export const AuthPage = ({ onSuccess, onError, logo, logoHeight = 80, logoWidth
 
       
       {stage === AUTH_STAGE.SETUP_PIN && (<View style={styles.pinContainer}>
-          <PINSetup pinLength={pinLength} onSuccess={saveCredentials} onError={handlePINSetupError} showBiometryPrompt={showBiometryPrompt}/>
+          <PINSetup pinLength={pinLength} onSuccess={savePIN} onError={handlePINSetupError} showBiometryPrompt={showBiometryPrompt}/>
         </View>)}
 
       

package/dist/screens/AuthPage/AuthPage.js.map

@@ -1 +1 @@
-{"version":3,"file":"AuthPage.js","sourceRoot":"","sources":["../../../src/screens/AuthPage/AuthPage.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,EAAC,WAAW,EAAE,QAAQ,EAAC,MAAM,OAAO,CAAC;AACnD,OAAO,EAAC,KAAK,EAAuB,UAAU,EAAE,IAAI,EAAY,MAAM,cAAc,CAAC;AAErF,OAAO,EAAC,UAAU,EAAiB,MAAM,YAAY,CAAC;AACtD,OAAO,EAAC,gBAAgB,EAAC,MAAM,eAAe,CAAC;AAC/C,OAAO,EAAC,eAAe,EAAC,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAC,iBAAiB,EAAC,MAAM,eAAe,CAAC;AAChD,OAAO,EAAC,QAAQ,EAAE,YAAY,EAAC,MAAM,UAAU,CAAC;AA4EhD,MAAM,CAAC,MAAM,QAAQ,GAA4B,CAAC,EAChD,SAAS,EACT,OAAO,EACP,IAAI,EACJ,UAAU,GAAG,EAAE,EACf,SAAS,GAAG,EAAE,EACd,kBAAkB,GAAG,IAAI,EACzB,SAAS,GAAG,CAAC,EACb,KAAK,EACL,UAAU,EACV,aAAa,GACd,EAAE,EAAE;IACH,MAAM,EACJ,MAAM,EAAE,EAAC,UAAU,EAAE,eAAe,EAAC,EACrC,eAAe,GAChB,GAAG,gBAAgB,EAAE,CAAC;IACvB,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,QAAQ,CAAY,UAAU,CAAC,KAAK,CAAC,CAAC;IAChE,MAAM,CAAC,SAAS,EAAE,YAAY,CAAC,GAAG,QAAQ,CAIhC,IAAI,CAAC,CAAC;IAEhB,MAAM,EAAC,QAAQ,EAAE,KAAK,EAAC,GAAG,eAAe,EAAE,CAAC;IAG5C,MAAM,kBAAkB,GAAG,WAAW,CACpC,CAAC,IAAuD,EAAE,EAAE;QAC1D,OAAO,CAAC,GAAG,CAAC,mEAAmE,CAAC,CAAC;QAEjF,YAAY,CAAC,IAAI,CAAC,CAAC;QACnB,QAAQ,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;IACjC,CAAC,EACD,EAAE,CACH,CAAC;IAGF,MAAM,4BAA4B,GAAG,WAAW,CAC9C,KAAK,EAAE,GAAW,EAAE,EAAE;QACpB,IAAI,CAAC;YACH,OAAO,CAAC,GAAG,CACT,+EAA+E,CAChF,CAAC;YAEF,QAAQ,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;YAEhC,MAAM,KAAK,CAAC,EAAC,GAAG,EAAC,CAAC,CAAC;YAEnB,OAAO,CAAC,GAAG,CAAC,yCAAyC,CAAC,CAAC;YAEvD,MAAM,WAAW,GAAG,QAAQ,EAAE,KAAK,CAAC;YAEpC,IAAI,WAAW,EAAE,CAAC;gBAChB,OAAO,CAAC,GAAG,CAAC,qDAAqD,CAAC,CAAC;gBACnE,SAAS,EAAE,CAAC,WAAW,CAAC,CAAC;YAC3B,CAAC;iBAAM,CAAC;gBACN,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;YAC5D,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,KAAK,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;YAClE,OAAO,CAAC,KAAK,CAAC,kCAAkC,EAAE,KAAK,CAAC,CAAC;YACzD,OAAO,EAAE,CAAC,KAAK,CAAC,CAAC;QACnB,CAAC;IACH,CAAC,EACD,CAAC,QAAQ,EAAE,KAAK,EAAE,SAAS,EAAE,OAAO,CAAC,CACtC,CAAC;IAEF,MAAM,eAAe,GAAG,WAAW,CACjC,KAAK,EAAE,GAAW,EAAE,EAAE;QACpB,IAAI,CAAC,SAAS,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC5B,MAAM,KAAK,GAAG,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAC;YACnF,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YAC7B,OAAO,EAAE,CAAC,KAAK,CAAC,CAAC;YACjB,OAAO;QACT,CAAC;QAED,MAAM,iBAAiB,CAAC,wBAAwB,CAAC,GAAG,EAAE;YACpD,QAAQ,EAAE,SAAS,CAAC,QAAQ;YAC5B,QAAQ,EAAE,SAAS,CAAC,QAAQ;SAC7B,CAAC,CAAC;QACH,MAAM,eAAe,GAAG,MAAM,iBAAiB,CAAC,kBAAkB,EAAE,CAAC;QACrE,IAAI,eAAe,EAAE,CAAC;YACpB,MAAM,iBAAiB,CAAC,0BAA0B,CAAC;gBACjD,QAAQ,EAAE,SAAS,CAAC,QAAQ;gBAC5B,QAAQ,EAAE,SAAS,CAAC,QAAQ;aAC7B,CAAC,CAAC;QACL,CAAC;QACD,4BAA4B,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IAC9C,CAAC,EACD,CAAC,SAAS,EAAE,4BAA4B,EAAE,QAAQ,EAAE,OAAO,CAAC,CAC7D,CAAC;IAGF,MAAM,mBAAmB,GAAG,WAAW,CACrC,CAAC,KAAY,EAAE,EAAE;QACf,IAAI,OAAO,EAAE,CAAC;YACZ,OAAO,CAAC,KAAK,CAAC,CAAC;QACjB,CAAC;IACH,CAAC,EACD,CAAC,OAAO,CAAC,CACV,CAAC;IAGF,MAAM,UAAU,GAAG,WAAW,CAAC,GAAG,EAAE;QAClC,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,OAAO,IAAI,CAAC;QACd,CAAC;QAGD,IAAI,KAAK,CAAC,cAAc,CAAC,IAAI,CAAC,EAAE,CAAC;YAC/B,OAAO,IAAI,CAAC;QACd,CAAC;QAGD,OAAO,CACL,CAAC,KAAK,CACJ,MAAM,CAAC,CAAC,IAA2B,CAAC,CACpC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,EAAC,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,UAAU,EAAC,CAAC,CAAC,CAC7D,UAAU,CAAC,SAAS,EACpB,CACH,CAAC;IACJ,CAAC,EAAE,CAAC,IAAI,EAAE,UAAU,EAAE,SAAS,CAAC,CAAC,CAAC;IAElC,OAAO,CACL,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,EAAE,EAAC,eAAe,EAAC,EAAE,KAAK,CAAC,CAAC,CACxD;MACA;MAAA,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC,EAAE,IAAI,CAAC,CAEjE;;MACA;MAAA,CAAC,KAAK,KAAK,UAAU,CAAC,KAAK,IAAI,CAC7B,CAAC,YAAY,CACX,cAAc,CAAC,CAAC,kBAAkB,CAAC,CACnC,UAAU,CAAC,CAAC,UAAU,CAAC,CACvB,aAAa,CAAC,CAAC,aAAa,CAAC,CAC7B,KAAK,CAAC,CAAC,MAAM,CAAC,gBAAgB,CAAC,EAC/B,CACH,CAED;;MACA;MAAA,CAAC,KAAK,KAAK,UAAU,CAAC,SAAS,IAAI,CACjC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,CAC/B;UAAA,CAAC,QAAQ,CACP,SAAS,CAAC,CAAC,SAAS,CAAC,CACrB,SAAS,CAAC,CAAC,eAAe,CAAC,CAC3B,OAAO,CAAC,CAAC,mBAAmB,CAAC,CAC7B,kBAAkB,CAAC,CAAC,kBAAkB,CAAC,EAE3C;QAAA,EAAE,IAAI,CAAC,CACR,CAED;;MACA;MAAA,CAAC,KAAK,KAAK,UAAU,CAAC,UAAU,IAAI,CAClC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC,kBAAkB,EAAE,EAAC,eAAe,EAAC,CAAC,CAAC,CAC9D;UAAA,CAAC,eAAe,CAAC,AAAD,EAClB;QAAA,EAAE,IAAI,CAAC,CACR,CACH;IAAA,EAAE,IAAI,CAAC,CACR,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC;IAC/B,SAAS,EAAE;QACT,IAAI,EAAE,CAAC;KACR;IACD,aAAa,EAAE;QACb,UAAU,EAAE,QAAQ;QACpB,cAAc,EAAE,QAAQ;QACxB,UAAU,EAAE,EAAE;QACd,aAAa,EAAE,EAAE;KAClB;IACD,IAAI,EAAE,EAEL;IACD,gBAAgB,EAAE;QAChB,IAAI,EAAE,CAAC;KACR;IACD,YAAY,EAAE;QACZ,IAAI,EAAE,CAAC;QACP,cAAc,EAAE,QAAQ;KACzB;IACD,UAAU,EAAE;QACV,IAAI,EAAE,CAAC;QACP,cAAc,EAAE,QAAQ;QACxB,UAAU,EAAE,QAAQ;KACrB;CACF,CAAC,CAAC"}
+{"version":3,"file":"AuthPage.js","sourceRoot":"","sources":["../../../src/screens/AuthPage/AuthPage.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,EAAC,WAAW,EAAE,SAAS,EAAE,QAAQ,EAAC,MAAM,OAAO,CAAC;AAC9D,OAAO,EAAC,KAAK,EAAuB,UAAU,EAAE,IAAI,EAAY,MAAM,cAAc,CAAC;AAErF,OAAO,EAAC,UAAU,EAAiB,MAAM,YAAY,CAAC;AACtD,OAAO,EAAC,gBAAgB,EAAC,MAAM,eAAe,CAAC;AAC/C,OAAO,EAAC,eAAe,EAAC,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAC,iBAAiB,EAAE,YAAY,EAAC,MAAM,eAAe,CAAC;AAC9D,OAAO,EAAC,QAAQ,EAAE,YAAY,EAAC,MAAM,UAAU,CAAC;AAiFhD,MAAM,CAAC,MAAM,QAAQ,GAA4B,CAAC,EAChD,SAAS,EACT,OAAO,EACP,aAAa,EACb,IAAI,EACJ,UAAU,GAAG,EAAE,EACf,SAAS,GAAG,EAAE,EACd,kBAAkB,GAAG,IAAI,EACzB,SAAS,GAAG,CAAC,EACb,KAAK,EACL,UAAU,EACV,aAAa,GACd,EAAE,EAAE;IACH,MAAM,EACJ,MAAM,EAAE,EAAC,UAAU,EAAE,eAAe,EAAC,EACrC,eAAe,GAChB,GAAG,gBAAgB,EAAE,CAAC;IACvB,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,QAAQ,CAAY,UAAU,CAAC,KAAK,CAAC,CAAC;IAChE,MAAM,CAAC,SAAS,EAAE,YAAY,CAAC,GAAG,QAAQ,CAIhC,IAAI,CAAC,CAAC;IAEhB,MAAM,EAAC,QAAQ,EAAE,KAAK,EAAC,GAAG,eAAe,EAAE,CAAC;IAE5C,SAAS,CAAC,GAAG,EAAE;QACb,aAAa,EAAE,CAAC,KAAK,CAAC,CAAC;IACzB,CAAC,EAAE,CAAC,aAAa,EAAE,KAAK,CAAC,CAAC,CAAC;IAG3B,MAAM,kBAAkB,GAAG,WAAW,CACpC,CAAC,IAAuD,EAAE,EAAE;QAC1D,OAAO,CAAC,GAAG,CAAC,mEAAmE,CAAC,CAAC;QAEjF,YAAY,CAAC,IAAI,CAAC,CAAC;QACnB,QAAQ,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;IACjC,CAAC,EACD,EAAE,CACH,CAAC;IAGF,MAAM,4BAA4B,GAAG,WAAW,CAC9C,KAAK,EAAE,GAAW,EAAE,EAAE;QACpB,IAAI,CAAC;YACH,OAAO,CAAC,GAAG,CACT,uEAAuE,CACxE,CAAC;YAEF,QAAQ,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;YAEhC,MAAM,KAAK,CAAC,EAAC,GAAG,EAAC,CAAC,CAAC;YAEnB,OAAO,CAAC,GAAG,CAAC,yCAAyC,CAAC,CAAC;YAEvD,MAAM,WAAW,GAAG,QAAQ,EAAE,KAAK,IAAI,CAAC,MAAM,YAAY,CAAC,QAAQ,EAAE,CAAC,CAAC;YAEvE,IAAI,WAAW,EAAE,CAAC;gBAChB,OAAO,CAAC,GAAG,CAAC,qDAAqD,CAAC,CAAC;gBACnE,SAAS,EAAE,CAAC,WAAW,CAAC,CAAC;YAC3B,CAAC;iBAAM,CAAC;gBACN,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;YAC5D,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,KAAK,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;YAClE,OAAO,CAAC,KAAK,CAAC,kCAAkC,EAAE,KAAK,CAAC,CAAC;YACzD,OAAO,EAAE,CAAC,KAAK,CAAC,CAAC;QACnB,CAAC;IACH,CAAC,EACD,CAAC,QAAQ,EAAE,KAAK,EAAE,SAAS,EAAE,OAAO,CAAC,CACtC,CAAC;IAEF,MAAM,OAAO,GAAG,WAAW,CACzB,KAAK,EAAE,GAAW,EAAE,EAAE;QACpB,IAAI,CAAC,SAAS,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC5B,MAAM,KAAK,GAAG,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAC;YACnF,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YAC7B,OAAO,EAAE,CAAC,KAAK,CAAC,CAAC;YACjB,OAAO;QACT,CAAC;QACD,MAAM,iBAAiB,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACrC,MAAM,eAAe,GAAG,MAAM,iBAAiB,CAAC,kBAAkB,EAAE,CAAC;QACrE,IAAI,eAAe,EAAE,CAAC;YACpB,MAAM,iBAAiB,CAAC,kBAAkB,EAAE,CAAC;QAC/C,CAAC;QACD,4BAA4B,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IAC9C,CAAC,EACD,CAAC,SAAS,EAAE,4BAA4B,EAAE,QAAQ,EAAE,OAAO,CAAC,CAC7D,CAAC;IAGF,MAAM,mBAAmB,GAAG,WAAW,CACrC,CAAC,KAAY,EAAE,EAAE;QACf,IAAI,OAAO,EAAE,CAAC;YACZ,OAAO,CAAC,KAAK,CAAC,CAAC;QACjB,CAAC;IACH,CAAC,EACD,CAAC,OAAO,CAAC,CACV,CAAC;IAGF,MAAM,UAAU,GAAG,WAAW,CAAC,GAAG,EAAE;QAClC,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,OAAO,IAAI,CAAC;QACd,CAAC;QAGD,IAAI,KAAK,CAAC,cAAc,CAAC,IAAI,CAAC,EAAE,CAAC;YAC/B,OAAO,IAAI,CAAC;QACd,CAAC;QAGD,OAAO,CACL,CAAC,KAAK,CACJ,MAAM,CAAC,CAAC,IAA2B,CAAC,CACpC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,EAAC,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,UAAU,EAAC,CAAC,CAAC,CAC7D,UAAU,CAAC,SAAS,EACpB,CACH,CAAC;IACJ,CAAC,EAAE,CAAC,IAAI,EAAE,UAAU,EAAE,SAAS,CAAC,CAAC,CAAC;IAElC,OAAO,CACL,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,EAAE,EAAC,eAAe,EAAC,EAAE,KAAK,CAAC,CAAC,CACxD;MACA;MAAA,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC,EAAE,IAAI,CAAC,CAEjE;;MACA;MAAA,CAAC,KAAK,KAAK,UAAU,CAAC,KAAK,IAAI,CAC7B,CAAC,YAAY,CACX,cAAc,CAAC,CAAC,kBAAkB,CAAC,CACnC,UAAU,CAAC,CAAC,UAAU,CAAC,CACvB,aAAa,CAAC,CAAC,aAAa,CAAC,CAC7B,KAAK,CAAC,CAAC,MAAM,CAAC,gBAAgB,CAAC,EAC/B,CACH,CAED;;MACA;MAAA,CAAC,KAAK,KAAK,UAAU,CAAC,SAAS,IAAI,CACjC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,CAC/B;UAAA,CAAC,QAAQ,CACP,SAAS,CAAC,CAAC,SAAS,CAAC,CACrB,SAAS,CAAC,CAAC,OAAO,CAAC,CACnB,OAAO,CAAC,CAAC,mBAAmB,CAAC,CAC7B,kBAAkB,CAAC,CAAC,kBAAkB,CAAC,EAE3C;QAAA,EAAE,IAAI,CAAC,CACR,CAED;;MACA;MAAA,CAAC,KAAK,KAAK,UAAU,CAAC,UAAU,IAAI,CAClC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC,kBAAkB,EAAE,EAAC,eAAe,EAAC,CAAC,CAAC,CAC9D;UAAA,CAAC,eAAe,CAAC,AAAD,EAClB;QAAA,EAAE,IAAI,CAAC,CACR,CACH;IAAA,EAAE,IAAI,CAAC,CACR,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC;IAC/B,SAAS,EAAE;QACT,IAAI,EAAE,CAAC;KACR;IACD,aAAa,EAAE;QACb,UAAU,EAAE,QAAQ;QACpB,cAAc,EAAE,QAAQ;QACxB,UAAU,EAAE,EAAE;QACd,aAAa,EAAE,EAAE;KAClB;IACD,IAAI,EAAE,EAEL;IACD,gBAAgB,EAAE;QAChB,IAAI,EAAE,CAAC;KACR;IACD,YAAY,EAAE;QACZ,IAAI,EAAE,CAAC;QACP,cAAc,EAAE,QAAQ;KACzB;IACD,UAAU,EAAE;QACV,IAAI,EAAE,CAAC;QACP,cAAc,EAAE,QAAQ;QACxB,UAAU,EAAE,QAAQ;KACrB;CACF,CAAC,CAAC"}

package/dist/screens/ConfirmAuthPage/ConfirmAuthPage.d.ts

@@ -1,9 +1,11 @@
 import React from 'react';
 import { ImageSourcePropType, ViewStyle } from 'react-native';
+export type ConfirmAuthMode = 'login' | 'unlock' | 'reauth';
 interface ConfirmAuthPageProps {
     onSuccess?: () => void;
     onError?: (error: Error) => void;
     onLogout?: () => void;
+    mode?: ConfirmAuthMode;
     logoutText?: string;
     logo?: React.ReactNode | ImageSourcePropType;
     logoHeight?: number;
@@ -14,7 +16,6 @@ interface ConfirmAuthPageProps {
     title?: string;
     description?: string;
     style?: ViewStyle;
-    webViewTimeoutMs?: number;
 }
 export declare const ConfirmAuthPage: React.FC<ConfirmAuthPageProps>;
 export {};

package/dist/screens/ConfirmAuthPage/ConfirmAuthPage.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ConfirmAuthPage.d.ts","sourceRoot":"","sources":["../../../src/screens/ConfirmAuthPage/ConfirmAuthPage.tsx"],"names":[],"mappings":"AAAA,OAAO,KAA0D,MAAM,OAAO,CAAC;AAC/E,OAAO,EAEL,mBAAmB,EAOnB,SAAS,EACV,MAAM,cAAc,CAAC;AAetB,UAAU,oBAAoB;IAI5B,SAAS,CAAC,EAAE,MAAM,IAAI,CAAC;IAKvB,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,KAAK,KAAK,IAAI,CAAC;IAKjC,QAAQ,CAAC,EAAE,MAAM,IAAI,CAAC;IAMtB,UAAU,CAAC,EAAE,MAAM,CAAC;IAKpB,IAAI,CAAC,EAAE,KAAK,CAAC,SAAS,GAAG,mBAAmB,CAAC;IAE7C,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,KAAK,CAAC,EAAE,SAAS,CAAC;IAQlB,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B;AASD,eAAO,MAAM,eAAe,EAAE,KAAK,CAAC,EAAE,CAAC,oBAAoB,CAoQ1D,CAAC"}
+{"version":3,"file":"ConfirmAuthPage.d.ts","sourceRoot":"","sources":["../../../src/screens/ConfirmAuthPage/ConfirmAuthPage.tsx"],"names":[],"mappings":"AAAA,OAAO,KAA0D,MAAM,OAAO,CAAC;AAC/E,OAAO,EAEL,mBAAmB,EAOnB,SAAS,EACV,MAAM,cAAc,CAAC;AAUtB,MAAM,MAAM,eAAe,GAAG,OAAO,GAAG,QAAQ,GAAG,QAAQ,CAAC;AAE5D,UAAU,oBAAoB;IAI5B,SAAS,CAAC,EAAE,MAAM,IAAI,CAAC;IAKvB,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,KAAK,KAAK,IAAI,CAAC;IAKjC,QAAQ,CAAC,EAAE,MAAM,IAAI,CAAC;IAStB,IAAI,CAAC,EAAE,eAAe,CAAC;IAMvB,UAAU,CAAC,EAAE,MAAM,CAAC;IAKpB,IAAI,CAAC,EAAE,KAAK,CAAC,SAAS,GAAG,mBAAmB,CAAC;IAE7C,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,KAAK,CAAC,EAAE,SAAS,CAAC;CACnB;AASD,eAAO,MAAM,eAAe,EAAE,KAAK,CAAC,EAAE,CAAC,oBAAoB,CAiQ1D,CAAC"}

package/dist/screens/ConfirmAuthPage/ConfirmAuthPage.js

@@ -2,25 +2,25 @@ import React, { useCallback, useEffect, useMemo, useRef, useState } from 'react'
 import { Image, Linking, Platform, StyleSheet, Text, TouchableOpacity, View, } from 'react-native';
 import { useSafeAreaInsets } from 'react-native-safe-area-context';
 import WebView from 'react-native-webview';
-import { CONFIRM_AUTH_PHASE, getInjectedJSForDetect, getInjectedJSForLogin, } from '../../_lib';
+import { CONFIRM_AUTH_PHASE } from '../../_lib';
 import { useKeycloakConfigRefresh, useKeycloakInstance, useKeycloakTheme } from '../../context';
 import { useKeycloakAuth } from '../../hooks';
 import { credentialStorage, tokenStorage } from '../../storage';
 import { LogoutConfirmSheet, PINConfirm } from '../../ui';
-export const ConfirmAuthPage = ({ onSuccess, onError, onLogout, logo, logoHeight = 80, logoWidth = 80, pinLength = 4, allowBiometry = true, autoShowBiometry = true, title, description, logoutText = 'Выйти из аккаунта', style, webViewTimeoutMs = 3000, }) => {
+export const ConfirmAuthPage = ({ onSuccess, onError, onLogout, mode = 'login', logo, logoHeight = 80, logoWidth = 80, pinLength = 4, allowBiometry = true, autoShowBiometry = true, title, description, logoutText = 'Выйти из аккаунта', style, }) => {
     const { redirectUri, keycloak, isInitialized } = useKeycloakInstance();
     const refreshPinCheck = useKeycloakConfigRefresh();
     const { colors: { background: backgroundColor, error }, LoaderComponent, } = useKeycloakTheme();
-    const { createLoginUrl, login, hideReauth } = useKeycloakAuth();
+    const { createLoginUrl, hideReauth, isExpired, login, offlineToken, token, updateToken } = useKeycloakAuth();
     const insets = useSafeAreaInsets();
     const containerStyleWithInsets = useMemo(() => [
         styles.container,
         { backgroundColor, paddingTop: insets.top, paddingBottom: insets.bottom },
         style,
     ], [backgroundColor, insets.top, insets.bottom, style]);
-    const [phase, setPhase] = useState(CONFIRM_AUTH_PHASE.WEBVIEW_DETECT);
-    const [credentials, setCredentials] = useState(null);
+    const [phase, setPhase] = useState(CONFIRM_AUTH_PHASE.PIN);
     const [webViewError, setWebViewError] = useState(null);
+    const [isProcessingPIN, setIsProcessingPIN] = useState(false);
     const loginSuccessHandled = useRef(false);
     const logoutSheetRef = useRef(null);
     const loginUrl = createLoginUrl() ?? '';
@@ -57,7 +57,7 @@ export const ConfirmAuthPage = ({ onSuccess, onError, onLogout, logo, logoHeight
             setPhase(CONFIRM_AUTH_PHASE.PIN);
         }
     }, [isInitialized, keycloak, redirectUri]);
-    const handleLoginSuccess = useCallback(() => {
+    const handleSuccess = useCallback(() => {
         if (loginSuccessHandled.current)
             return;
         loginSuccessHandled.current = true;
@@ -69,21 +69,25 @@ export const ConfirmAuthPage = ({ onSuccess, onError, onLogout, logo, logoHeight
             return;
         try {
             await login({ url });
-            handleLoginSuccess();
+            handleSuccess();
         }
         catch (err) {
-            console.error('[ConfirmAuthPage] login error:', err);
-            setWebViewError(err instanceof Error ? err.message : 'Ошибка входа');
+            const loginError = err instanceof Error ? err : new Error('Ошибка входа');
+            console.error('[ConfirmAuthPage] login error:', loginError);
+            setWebViewError(loginError.message);
+            setPhase(CONFIRM_AUTH_PHASE.PIN);
+            onError?.(loginError);
         }
-    }, [redirectUri, login, handleLoginSuccess]);
+    }, [redirectUri, login, handleSuccess, onError]);
     const handleNavigationStateChange = useCallback((nav) => {
         if (nav.url && redirectUri && nav.url.startsWith(redirectUri)) {
             handleRedirect(nav.url);
         }
     }, [redirectUri, handleRedirect]);
     useEffect(() => {
-        if (Platform.OS !== 'ios' || !redirectUri)
+        if (Platform.OS !== 'ios' || !redirectUri || phase !== CONFIRM_AUTH_PHASE.WEBVIEW_LOGIN) {
             return undefined;
+        }
         const handleDeepLink = (event) => {
             if (event.url.startsWith(redirectUri)) {
                 handleRedirect(event.url);
@@ -96,32 +100,60 @@ export const ConfirmAuthPage = ({ onSuccess, onError, onLogout, logo, logoHeight
         });
         const subscription = Linking.addEventListener('url', handleDeepLink);
         return () => subscription.remove();
-    }, [redirectUri, handleRedirect]);
-    const handlePINSuccess = useCallback((creds) => {
-        if (creds) {
-            setCredentials(creds);
-            setPhase(CONFIRM_AUTH_PHASE.WEBVIEW_WITH_CREDENTIALS);
-            setWebViewError(null);
-        }
-        else {
-            hideReauth();
-            onSuccess?.();
-        }
-    }, [hideReauth, onSuccess]);
-    const handleWebViewMessage = useCallback((event) => {
+    }, [phase, redirectUri, handleRedirect]);
+    const openLoginFallback = useCallback(() => {
+        setWebViewError(null);
+        setPhase(CONFIRM_AUTH_PHASE.WEBVIEW_LOGIN);
+    }, []);
+    const finishAfterPIN = useCallback(async () => {
+        if (isProcessingPIN)
+            return;
+        setIsProcessingPIN(true);
+        setWebViewError(null);
         try {
-            const data = JSON.parse(event.nativeEvent.data);
-            if (data.showPIN) {
-                setPhase(CONFIRM_AUTH_PHASE.PIN);
+            const forceRefresh = mode === 'reauth';
+            const refreshNeeded = forceRefresh || !token || isExpired;
+            if (!refreshNeeded) {
+                handleSuccess();
+                return;
+            }
+            if (!offlineToken) {
+                if (mode === 'login') {
+                    openLoginFallback();
+                    return;
+                }
+                throw new Error('Offline token is missing');
             }
-            else if (data.requestPIN) {
-                setPhase(CONFIRM_AUTH_PHASE.PIN);
-                setWebViewError(data.errorText || data.reason || 'Ошибка авторизации');
+            const nextToken = await updateToken(forceRefresh ? -1 : 120);
+            if (!nextToken) {
+                throw new Error('Access token is missing after refresh');
             }
+            handleSuccess();
         }
-        catch {
+        catch (err) {
+            const refreshError = err instanceof Error ? err : new Error('Ошибка обновления сессии');
+            console.error('[ConfirmAuthPage] token refresh error:', refreshError);
+            if (mode === 'login') {
+                openLoginFallback();
+                return;
+            }
+            setWebViewError(refreshError.message);
+            onError?.(refreshError);
         }
-    }, []);
+        finally {
+            setIsProcessingPIN(false);
+        }
+    }, [
+        handleSuccess,
+        isExpired,
+        isProcessingPIN,
+        mode,
+        offlineToken,
+        onError,
+        openLoginFallback,
+        token,
+        updateToken,
+    ]);
     const renderLogo = useCallback(() => {
         if (!logo)
             return null;
@@ -129,22 +161,10 @@ export const ConfirmAuthPage = ({ onSuccess, onError, onLogout, logo, logoHeight
             return logo;
         return (<Image source={logo} style={[styles.logo, { width: logoWidth, height: logoHeight }]} resizeMode="contain"/>);
     }, [logo, logoWidth, logoHeight]);
-    const injectedJSForDetect = useMemo(() => getInjectedJSForDetect(webViewTimeoutMs), [webViewTimeoutMs]);
-    if (phase === CONFIRM_AUTH_PHASE.WEBVIEW_DETECT) {
-        return (<View style={containerStyleWithInsets}>
-        {loginUrl ? (<View style={styles.webViewHidden}>
-            <WebView source={{ uri: loginUrl }} injectedJavaScript={injectedJSForDetect} onNavigationStateChange={handleNavigationStateChange} onMessage={handleWebViewMessage} javaScriptEnabled={true} sharedCookiesEnabled={true} cacheEnabled={true} thirdPartyCookiesEnabled={true} style={styles.webView}/>
-          </View>) : null}
-        <View style={[StyleSheet.absoluteFillObject, { backgroundColor }]} pointerEvents="none">
-          <LoaderComponent />
-        </View>
-      </View>);
-    }
-    if (phase === CONFIRM_AUTH_PHASE.WEBVIEW_WITH_CREDENTIALS && credentials && loginUrl) {
-        const injectedJS = getInjectedJSForLogin(credentials.username, credentials.password);
+    if (phase === CONFIRM_AUTH_PHASE.WEBVIEW_LOGIN && loginUrl) {
         return (<View style={containerStyleWithInsets}>
         <View style={styles.webViewHidden}>
-          <WebView source={{ uri: loginUrl }} injectedJavaScript={injectedJS} onNavigationStateChange={handleNavigationStateChange} onMessage={handleWebViewMessage} javaScriptEnabled={true} sharedCookiesEnabled={true} cacheEnabled={true} thirdPartyCookiesEnabled={true} style={styles.webView}/>
+          <WebView source={{ uri: loginUrl }} onNavigationStateChange={handleNavigationStateChange} javaScriptEnabled={true} sharedCookiesEnabled={true} cacheEnabled={true} thirdPartyCookiesEnabled={true} style={styles.webView}/>
         </View>
         <View style={[StyleSheet.absoluteFillObject, { backgroundColor }]} pointerEvents="none">
           <LoaderComponent />
@@ -157,7 +177,7 @@ export const ConfirmAuthPage = ({ onSuccess, onError, onLogout, logo, logoHeight
           <Text style={[styles.errorText, { color: error }]}>{webViewError}</Text>
         </View>) : null}
       <View style={styles.pinContainer}>
-        <PINConfirm pinLength={pinLength} onSuccess={handlePINSuccess} onError={onError} allowBiometry={allowBiometry} autoShowBiometry={autoShowBiometry} title={title} description={description}/>
+        <PINConfirm pinLength={pinLength} onSuccess={finishAfterPIN} onError={onError} allowBiometry={allowBiometry} autoShowBiometry={autoShowBiometry} title={title} description={description}/>
         <TouchableOpacity onPress={openLogoutSheet} style={styles.logoutLinkContainer} activeOpacity={0.7}>
           <Text style={[styles.logoutLinkText, { color: error }]}>{logoutText}</Text>
         </TouchableOpacity>
@@ -181,11 +201,6 @@ const styles = StyleSheet.create({
     webView: {
         flex: 1,
     },
-    loaderWrap: {
-        flex: 1,
-        justifyContent: 'center',
-        alignItems: 'center',
-    },
     logoContainer: {
         alignItems: 'center',
         justifyContent: 'center',