@capgo/capacitor-social-login 1.2.5 → 6.0.1

package/dist/plugin.cjs.js

@@ -6,53 +6,350 @@ const SocialLogin = core.registerPlugin('SocialLogin', {
     web: () => Promise.resolve().then(function () { return web; }).then((m) => new m.SocialLoginWeb()),
 });
 
-class SocialLoginWeb extends core.WebPlugin {
+class BaseSocialLogin extends core.WebPlugin {
     constructor() {
-        var _a;
         super();
-        this.googleClientId = null;
-        this.appleClientId = null;
-        this.googleScriptLoaded = false;
-        this.googleLoginType = 'online';
-        this.appleScriptLoaded = false;
-        this.appleScriptUrl = 'https://appleid.cdn-apple.com/appleauth/static/jsapi/appleid/1/en_US/appleid.auth.js';
+    }
+    parseJwt(token) {
+        const base64Url = token.split('.')[1];
+        const base64 = base64Url.replace(/-/g, '+').replace(/_/g, '/');
+        const jsonPayload = decodeURIComponent(atob(base64)
+            .split('')
+            .map((c) => {
+            return '%' + ('00' + c.charCodeAt(0).toString(16)).slice(-2);
+        })
+            .join(''));
+        return JSON.parse(jsonPayload);
+    }
+    async loadScript(src) {
+        return new Promise((resolve, reject) => {
+            const script = document.createElement('script');
+            script.src = src;
+            script.async = true;
+            script.onload = () => {
+                resolve();
+            };
+            script.onerror = reject;
+            document.body.appendChild(script);
+        });
+    }
+}
+BaseSocialLogin.OAUTH_STATE_KEY = 'social_login_oauth_pending';
+
+class AppleSocialLogin extends BaseSocialLogin {
+    constructor() {
+        super(...arguments);
+        this.clientId = null;
+        this.redirectUrl = null;
+        this.scriptLoaded = false;
+        this.scriptUrl = 'https://appleid.cdn-apple.com/appleauth/static/jsapi/appleid/1/en_US/appleid.auth.js';
+    }
+    async initialize(clientId, redirectUrl) {
+        this.clientId = clientId;
+        this.redirectUrl = redirectUrl || null;
+        if (clientId) {
+            await this.loadAppleScript();
+        }
+    }
+    async login(options) {
+        if (!this.clientId) {
+            throw new Error('Apple Client ID not set. Call initialize() first.');
+        }
+        if (!this.scriptLoaded) {
+            throw new Error('Apple Sign-In script not loaded.');
+        }
+        return new Promise((resolve, reject) => {
+            var _a;
+            AppleID.auth.init({
+                clientId: this.clientId,
+                scope: ((_a = options.scopes) === null || _a === void 0 ? void 0 : _a.join(' ')) || 'name email',
+                redirectURI: this.redirectUrl || window.location.href,
+                state: options.state,
+                nonce: options.nonce,
+                usePopup: true,
+            });
+            AppleID.auth
+                .signIn()
+                .then((res) => {
+                var _a, _b, _c, _d, _e;
+                const result = {
+                    profile: {
+                        user: res.user || '',
+                        email: ((_a = res.user) === null || _a === void 0 ? void 0 : _a.email) || null,
+                        givenName: ((_c = (_b = res.user) === null || _b === void 0 ? void 0 : _b.name) === null || _c === void 0 ? void 0 : _c.firstName) || null,
+                        familyName: ((_e = (_d = res.user) === null || _d === void 0 ? void 0 : _d.name) === null || _e === void 0 ? void 0 : _e.lastName) || null,
+                    },
+                    accessToken: {
+                        token: res.authorization.id_token || '',
+                    },
+                    idToken: res.authorization.code || null,
+                };
+                resolve({ provider: 'apple', result });
+            })
+                .catch((error) => {
+                reject(error);
+            });
+        });
+    }
+    async logout() {
+        // Apple doesn't provide a logout method for web
+        console.log('Apple logout: Session should be managed on the client side');
+    }
+    async isLoggedIn() {
+        // Apple doesn't provide a method to check login status on web
+        console.log('Apple login status should be managed on the client side');
+        return { isLoggedIn: false };
+    }
+    async getAuthorizationCode() {
+        // Apple authorization code should be obtained during login
+        console.log('Apple authorization code should be stored during login');
+        throw new Error('Apple authorization code not available');
+    }
+    async refresh() {
+        // Apple doesn't provide a refresh method for web
+        console.log('Apple refresh not available on web');
+    }
+    async loadAppleScript() {
+        if (this.scriptLoaded)
+            return;
+        return this.loadScript(this.scriptUrl).then(() => {
+            this.scriptLoaded = true;
+        });
+    }
+}
+
+class FacebookSocialLogin extends BaseSocialLogin {
+    constructor() {
+        super(...arguments);
+        this.appId = null;
+        this.scriptLoaded = false;
+    }
+    async initialize(appId) {
+        this.appId = appId;
+        if (appId) {
+            await this.loadFacebookScript();
+            FB.init({
+                appId: this.appId,
+                version: 'v17.0',
+                xfbml: true,
+                cookie: true,
+            });
+        }
+    }
+    async login(options) {
+        if (!this.appId) {
+            throw new Error('Facebook App ID not set. Call initialize() first.');
+        }
+        return new Promise((resolve, reject) => {
+            FB.login((response) => {
+                if (response.status === 'connected') {
+                    FB.api('/me', { fields: 'id,name,email,picture' }, (userInfo) => {
+                        var _a, _b;
+                        const result = {
+                            accessToken: {
+                                token: response.authResponse.accessToken,
+                                userId: response.authResponse.userID,
+                            },
+                            profile: {
+                                userID: userInfo.id,
+                                name: userInfo.name,
+                                email: userInfo.email || null,
+                                imageURL: ((_b = (_a = userInfo.picture) === null || _a === void 0 ? void 0 : _a.data) === null || _b === void 0 ? void 0 : _b.url) || null,
+                                friendIDs: [],
+                                birthday: null,
+                                ageRange: null,
+                                gender: null,
+                                location: null,
+                                hometown: null,
+                                profileURL: null,
+                            },
+                            idToken: null,
+                        };
+                        resolve({ provider: 'facebook', result });
+                    });
+                }
+                else {
+                    reject(new Error('Facebook login failed'));
+                }
+            }, { scope: options.permissions.join(',') });
+        });
+    }
+    async logout() {
+        return new Promise((resolve) => {
+            FB.logout(() => resolve());
+        });
+    }
+    async isLoggedIn() {
+        return new Promise((resolve) => {
+            FB.getLoginStatus((response) => {
+                resolve({ isLoggedIn: response.status === 'connected' });
+            });
+        });
+    }
+    async getAuthorizationCode() {
+        return new Promise((resolve, reject) => {
+            FB.getLoginStatus((response) => {
+                var _a;
+                if (response.status === 'connected') {
+                    resolve({ jwt: ((_a = response.authResponse) === null || _a === void 0 ? void 0 : _a.accessToken) || '' });
+                }
+                else {
+                    reject(new Error('No Facebook authorization code available'));
+                }
+            });
+        });
+    }
+    async refresh(options) {
+        await this.login(options);
+    }
+    async loadFacebookScript() {
+        if (this.scriptLoaded)
+            return;
+        return this.loadScript('https://connect.facebook.net/en_US/sdk.js').then(() => {
+            this.scriptLoaded = true;
+        });
+    }
+}
+
+class GoogleSocialLogin extends BaseSocialLogin {
+    constructor() {
+        super(...arguments);
+        this.clientId = null;
+        this.loginType = 'online';
         this.GOOGLE_TOKEN_REQUEST_URL = 'https://www.googleapis.com/oauth2/v3/tokeninfo';
-        this.facebookAppId = null;
-        this.facebookScriptLoaded = false;
-        // Set up listener for OAuth redirects if we have a pending OAuth flow
-        if (localStorage.getItem(SocialLoginWeb.OAUTH_STATE_KEY)) {
-            console.log('OAUTH_STATE_KEY found');
-            const result = this.handleOAuthRedirect();
-            if (result) {
-                (_a = window.opener) === null || _a === undefined ? undefined : _a.postMessage(Object.assign({ type: 'oauth-response' }, result.result), window.location.origin);
-                window.close();
+        this.GOOGLE_STATE_KEY = 'capgo_social_login_google_state';
+    }
+    async initialize(clientId, mode, hostedDomain) {
+        this.clientId = clientId;
+        if (mode) {
+            this.loginType = mode;
+        }
+        this.hostedDomain = hostedDomain;
+    }
+    async login(options) {
+        if (!this.clientId) {
+            throw new Error('Google Client ID not set. Call initialize() first.');
+        }
+        let scopes = options.scopes || [];
+        if (scopes.length > 0) {
+            // If scopes are provided, directly use the traditional OAuth flow
+            if (!scopes.includes('https://www.googleapis.com/auth/userinfo.email')) {
+                scopes.push('https://www.googleapis.com/auth/userinfo.email');
             }
+            if (!scopes.includes('https://www.googleapis.com/auth/userinfo.profile')) {
+                scopes.push('https://www.googleapis.com/auth/userinfo.profile');
+            }
+            if (!scopes.includes('openid')) {
+                scopes.push('openid');
+            }
+        }
+        else {
+            scopes = [
+                'https://www.googleapis.com/auth/userinfo.email',
+                'https://www.googleapis.com/auth/userinfo.profile',
+                'openid',
+            ];
         }
+        const nonce = options.nonce || Math.random().toString(36).substring(2);
+        // If scopes are provided, directly use the traditional OAuth flow
+        return this.traditionalOAuth({
+            scopes,
+            nonce,
+            hostedDomain: this.hostedDomain,
+        });
     }
-    handleOAuthRedirect() {
-        const paramsRaw = new URL(window.location.href).searchParams;
+    async logout() {
+        if (this.loginType === 'offline') {
+            return Promise.reject("Offline login doesn't store tokens. logout is not available");
+        }
+        // eslint-disable-next-line
+        const state = this.getGoogleState();
+        if (!state)
+            return;
+        await this.rawLogoutGoogle(state.accessToken);
+    }
+    async isLoggedIn() {
+        if (this.loginType === 'offline') {
+            return Promise.reject("Offline login doesn't store tokens. isLoggedIn is not available");
+        }
+        // eslint-disable-next-line
+        const state = this.getGoogleState();
+        if (!state)
+            return { isLoggedIn: false };
+        try {
+            const isValidAccessToken = await this.accessTokenIsValid(state.accessToken);
+            const isValidIdToken = this.idTokenValid(state.idToken);
+            if (isValidAccessToken && isValidIdToken) {
+                return { isLoggedIn: true };
+            }
+            else {
+                try {
+                    await this.rawLogoutGoogle(state.accessToken, false);
+                }
+                catch (e) {
+                    console.error('Access token is not valid, but cannot logout', e);
+                }
+                return { isLoggedIn: false };
+            }
+        }
+        catch (e) {
+            return Promise.reject(e);
+        }
+    }
+    async getAuthorizationCode() {
+        if (this.loginType === 'offline') {
+            return Promise.reject("Offline login doesn't store tokens. getAuthorizationCode is not available");
+        }
+        // eslint-disable-next-line
+        const state = this.getGoogleState();
+        if (!state)
+            throw new Error('No Google authorization code available');
+        try {
+            const isValidAccessToken = await this.accessTokenIsValid(state.accessToken);
+            const isValidIdToken = this.idTokenValid(state.idToken);
+            if (isValidAccessToken && isValidIdToken) {
+                return { accessToken: state.accessToken, jwt: state.idToken };
+            }
+            else {
+                try {
+                    await this.rawLogoutGoogle(state.accessToken, false);
+                }
+                catch (e) {
+                    console.error('Access token is not valid, but cannot logout', e);
+                }
+                throw new Error('No Google authorization code available');
+            }
+        }
+        catch (e) {
+            return Promise.reject(e);
+        }
+    }
+    async refresh() {
+        // For Google, we can prompt for re-authentication
+        return Promise.reject('Not implemented');
+    }
+    handleOAuthRedirect(url) {
+        const paramsRaw = url.searchParams;
         const code = paramsRaw.get('code');
         if (code && paramsRaw.has('scope')) {
             return {
                 provider: 'google',
                 result: {
-                    provider: 'google',
-                    result: {
-                        serverAuthCode: code,
-                    },
+                    serverAuthCode: code,
+                    responseType: 'offline',
                 },
             };
         }
-        const hash = window.location.hash.substring(1);
-        console.log('handleOAuthRedirect', window.location.hash);
+        const hash = url.hash.substring(1);
+        console.log('handleOAuthRedirect', url.hash);
         if (!hash)
-            return;
+            return null;
         console.log('handleOAuthRedirect ok');
         const params = new URLSearchParams(hash);
         const accessToken = params.get('access_token');
         const idToken = params.get('id_token');
         if (accessToken && idToken) {
-            localStorage.removeItem(SocialLoginWeb.OAUTH_STATE_KEY);
+            localStorage.removeItem(BaseSocialLogin.OAUTH_STATE_KEY);
             const profile = this.parseJwt(idToken);
             return {
                 provider: 'google',
@@ -69,75 +366,12 @@ class SocialLoginWeb extends core.WebPlugin {
                         name: profile.name || null,
                         imageUrl: profile.picture || null,
                     },
+                    responseType: 'online',
                 },
             };
         }
         return null;
     }
-    async initialize(options) {
-        var _a, _b, _c;
-        if ((_a = options.google) === null || _a === undefined ? undefined : _a.webClientId) {
-            this.googleClientId = options.google.webClientId;
-            if (options.google.mode) {
-                this.googleLoginType = options.google.mode;
-            }
-            await this.loadGoogleScript();
-        }
-        if ((_b = options.apple) === null || _b === undefined ? undefined : _b.clientId) {
-            this.appleClientId = options.apple.clientId;
-            await this.loadAppleScript();
-        }
-        if ((_c = options.facebook) === null || _c === undefined ? undefined : _c.appId) {
-            this.facebookAppId = options.facebook.appId;
-            await this.loadFacebookScript();
-            FB.init({
-                appId: this.facebookAppId,
-                version: 'v17.0',
-                xfbml: true,
-                cookie: true,
-            });
-        }
-        // Implement initialization for other providers if needed
-    }
-    async login(options) {
-        switch (options.provider) {
-            case 'google':
-                return this.loginWithGoogle(options.options);
-            case 'apple':
-                return this.loginWithApple(options.options);
-            case 'facebook':
-                return this.loginWithFacebook(options.options);
-            default:
-                throw new Error(`Login for ${options.provider} is not implemented on web`);
-        }
-    }
-    async logout(options) {
-        switch (options.provider) {
-            case 'google':
-                if (this.googleLoginType === 'offline') {
-                    return Promise.reject("Offline login doesn't store tokens. logout is not available");
-                }
-                // Google doesn't have a specific logout method for web
-                // We can revoke the token if we have it stored
-                console.log('Google logout: Id token should be revoked on the client side if stored');
-                // eslint-disable-next-line
-                const state = this.getGoogleState();
-                if (!state)
-                    return;
-                await this.rawLogoutGoogle(state.accessToken);
-                break;
-            case 'apple':
-                // Apple doesn't provide a logout method for web
-                console.log('Apple logout: Session should be managed on the client side');
-                break;
-            case 'facebook':
-                return new Promise((resolve) => {
-                    FB.logout(() => resolve());
-                });
-            default:
-                throw new Error(`Logout for ${options.provider} is not implemented`);
-        }
-    }
     async accessTokenIsValid(accessToken) {
         const url = `${this.GOOGLE_TOKEN_REQUEST_URL}?access_token=${encodeURIComponent(accessToken)}`;
         try {
@@ -221,273 +455,9 @@ class SocialLoginWeb extends core.WebPlugin {
             return;
         }
     }
-    async isLoggedIn(options) {
-        switch (options.provider) {
-            case 'google':
-                if (this.googleLoginType === 'offline') {
-                    return Promise.reject("Offline login doesn't store tokens. isLoggedIn is not available");
-                }
-                // For Google, we can check if there's a valid token
-                // eslint-disable-next-line
-                const state = this.getGoogleState();
-                if (!state)
-                    return { isLoggedIn: false };
-                try {
-                    // todo: cache accessTokenIsValid calls
-                    const isValidAccessToken = await this.accessTokenIsValid(state.accessToken);
-                    const isValidIdToken = this.idTokenValid(state.idToken);
-                    if (isValidAccessToken && isValidIdToken) {
-                        return { isLoggedIn: true };
-                    }
-                    else {
-                        try {
-                            await this.rawLogoutGoogle(state.accessToken, false);
-                        }
-                        catch (e) {
-                            console.error('Access token is not valid, but cannot logout', e);
-                        }
-                        return { isLoggedIn: false };
-                    }
-                }
-                catch (e) {
-                    return Promise.reject(e);
-                }
-            case 'apple':
-                // Apple doesn't provide a method to check login status on web
-                console.log('Apple login status should be managed on the client side');
-                return { isLoggedIn: false };
-            case 'facebook':
-                return new Promise((resolve) => {
-                    FB.getLoginStatus((response) => {
-                        resolve({ isLoggedIn: response.status === 'connected' });
-                    });
-                });
-            default:
-                throw new Error(`isLoggedIn for ${options.provider} is not implemented`);
-        }
-    }
-    async getAuthorizationCode(options) {
-        switch (options.provider) {
-            case 'google':
-                if (this.googleLoginType === 'offline') {
-                    return Promise.reject("Offline login doesn't store tokens. getAuthorizationCode is not available");
-                }
-                // For Google, we can use the id_token as the authorization code
-                // eslint-disable-next-line
-                const state = this.getGoogleState();
-                if (!state)
-                    throw new Error('No Google authorization code available');
-                try {
-                    // todo: cache accessTokenIsValid calls
-                    const isValidAccessToken = await this.accessTokenIsValid(state.accessToken);
-                    const isValidIdToken = this.idTokenValid(state.idToken);
-                    if (isValidAccessToken && isValidIdToken) {
-                        return { accessToken: state.accessToken, jwt: state.idToken };
-                    }
-                    else {
-                        try {
-                            await this.rawLogoutGoogle(state.accessToken, false);
-                        }
-                        catch (e) {
-                            console.error('Access token is not valid, but cannot logout', e);
-                        }
-                        throw new Error('No Google authorization code available');
-                    }
-                }
-                catch (e) {
-                    return Promise.reject(e);
-                }
-            case 'apple':
-                // Apple authorization code should be obtained during login
-                console.log('Apple authorization code should be stored during login');
-                throw new Error('Apple authorization code not available');
-            case 'facebook':
-                return new Promise((resolve, reject) => {
-                    FB.getLoginStatus((response) => {
-                        var _a;
-                        if (response.status === 'connected') {
-                            resolve({ jwt: ((_a = response.authResponse) === null || _a === undefined ? undefined : _a.accessToken) || '' });
-                        }
-                        else {
-                            reject(new Error('No Facebook authorization code available'));
-                        }
-                    });
-                });
-            default:
-                throw new Error(`getAuthorizationCode for ${options.provider} is not implemented`);
-        }
-    }
-    async refresh(options) {
-        switch (options.provider) {
-            case 'google':
-                // For Google, we can prompt for re-authentication
-                return Promise.reject('Not implemented');
-            case 'apple':
-                // Apple doesn't provide a refresh method for web
-                console.log('Apple refresh not available on web');
-                break;
-            case 'facebook':
-                await this.loginWithFacebook(options.options);
-                break;
-            default:
-                throw new Error(`Refresh for ${options.provider} is not implemented`);
-        }
-    }
-    loginWithGoogle(options) {
-        if (!this.googleClientId) {
-            throw new Error('Google Client ID not set. Call initialize() first.');
-        }
-        let scopes = options.scopes || [];
-        if (scopes.length > 0) {
-            // If scopes are provided, directly use the traditional OAuth flow
-            if (!scopes.includes('https://www.googleapis.com/auth/userinfo.email')) {
-                scopes.push('https://www.googleapis.com/auth/userinfo.email');
-            }
-            if (!scopes.includes('https://www.googleapis.com/auth/userinfo.profile')) {
-                scopes.push('https://www.googleapis.com/auth/userinfo.profile');
-            }
-            if (!scopes.includes('openid')) {
-                scopes.push('openid');
-            }
-        }
-        else {
-            scopes = [
-                'https://www.googleapis.com/auth/userinfo.email',
-                'https://www.googleapis.com/auth/userinfo.profile',
-                'openid',
-            ];
-        }
-        if (scopes.length > 3 || this.googleLoginType === 'offline' || options.disableOneTap) {
-            // If scopes are provided, directly use the traditional OAuth flow
-            return this.fallbackToTraditionalOAuth(scopes);
-        }
-        return new Promise((resolve, reject) => {
-            google.accounts.id.initialize({
-                client_id: this.googleClientId,
-                callback: (response) => {
-                    console.log('google.accounts.id.initialize callback', response);
-                    if (response.error) {
-                        // we use any because type fail but we need to double check if that works
-                        reject(response.error);
-                    }
-                    else {
-                        const payload = this.parseJwt(response.credential);
-                        const result = {
-                            accessToken: null,
-                            responseType: 'online',
-                            idToken: response.credential,
-                            profile: {
-                                email: payload.email || null,
-                                familyName: payload.family_name || null,
-                                givenName: payload.given_name || null,
-                                id: payload.sub || null,
-                                name: payload.name || null,
-                                imageUrl: payload.picture || null,
-                            },
-                        };
-                        resolve({ provider: 'google', result });
-                    }
-                },
-                auto_select: true,
-            });
-            google.accounts.id.prompt((notification) => {
-                if (notification.isNotDisplayed() || notification.isSkippedMoment()) {
-                    console.log('OneTap is not displayed or skipped');
-                    // Fallback to traditional OAuth if One Tap is not available
-                    this.fallbackToTraditionalOAuth(scopes)
-                        .then((r) => resolve({ provider: 'google', result: r.result }))
-                        .catch(reject);
-                }
-                else {
-                    console.log('OneTap is displayed');
-                }
-            });
-        });
-    }
-    parseJwt(token) {
-        const base64Url = token.split('.')[1];
-        const base64 = base64Url.replace(/-/g, '+').replace(/_/g, '/');
-        const jsonPayload = decodeURIComponent(atob(base64)
-            .split('')
-            .map((c) => {
-            return '%' + ('00' + c.charCodeAt(0).toString(16)).slice(-2);
-        })
-            .join(''));
-        return JSON.parse(jsonPayload);
-    }
-    async loadGoogleScript() {
-        if (this.googleScriptLoaded)
-            return;
-        return new Promise((resolve, reject) => {
-            const script = document.createElement('script');
-            script.src = 'https://accounts.google.com/gsi/client';
-            script.async = true;
-            script.onload = () => {
-                this.googleScriptLoaded = true;
-                resolve();
-            };
-            script.onerror = reject;
-            document.body.appendChild(script);
-        });
-    }
-    async loginWithApple(options) {
-        if (!this.appleClientId) {
-            throw new Error('Apple Client ID not set. Call initialize() first.');
-        }
-        if (!this.appleScriptLoaded) {
-            throw new Error('Apple Sign-In script not loaded.');
-        }
-        return new Promise((resolve, reject) => {
-            var _a;
-            AppleID.auth.init({
-                clientId: this.appleClientId,
-                scope: ((_a = options.scopes) === null || _a === undefined ? undefined : _a.join(' ')) || 'name email',
-                redirectURI: options.redirectUrl || window.location.href,
-                state: options.state,
-                nonce: options.nonce,
-                usePopup: true,
-            });
-            AppleID.auth
-                .signIn()
-                .then((res) => {
-                var _a, _b, _c, _d, _e, _f, _g;
-                const result = {
-                    profile: {
-                        user: ((_b = (_a = res.user) === null || _a === undefined ? undefined : _a.name) === null || _b === undefined ? undefined : _b.firstName) ? `${res.user.name.firstName} ${res.user.name.lastName}` : '',
-                        email: ((_c = res.user) === null || _c === undefined ? undefined : _c.email) || null,
-                        givenName: ((_e = (_d = res.user) === null || _d === undefined ? undefined : _d.name) === null || _e === undefined ? undefined : _e.firstName) || null,
-                        familyName: ((_g = (_f = res.user) === null || _f === undefined ? undefined : _f.name) === null || _g === undefined ? undefined : _g.lastName) || null,
-                    },
-                    accessToken: {
-                        token: res.authorization.code, // TODO: to fix and find the correct token
-                    },
-                    idToken: res.authorization.id_token || null,
-                };
-                resolve({ provider: 'apple', result });
-            })
-                .catch((error) => {
-                reject(error);
-            });
-        });
-    }
-    async loadAppleScript() {
-        if (this.appleScriptLoaded)
-            return;
-        return new Promise((resolve, reject) => {
-            const script = document.createElement('script');
-            script.src = this.appleScriptUrl;
-            script.async = true;
-            script.onload = () => {
-                this.appleScriptLoaded = true;
-                resolve();
-            };
-            script.onerror = reject;
-            document.body.appendChild(script);
-        });
-    }
     persistStateGoogle(accessToken, idToken) {
         try {
-            window.localStorage.setItem('capgo_social_login_google_state', JSON.stringify({ accessToken, idToken }));
+            window.localStorage.setItem(this.GOOGLE_STATE_KEY, JSON.stringify({ accessToken, idToken }));
         }
         catch (e) {
             console.error('Cannot persist state google', e);
@@ -495,7 +465,7 @@ class SocialLoginWeb extends core.WebPlugin {
     }
     clearStateGoogle() {
         try {
-            window.localStorage.removeItem('capgo_social_login_google_state');
+            window.localStorage.removeItem(this.GOOGLE_STATE_KEY);
         }
         catch (e) {
             console.error('Cannot clear state google', e);
@@ -503,7 +473,7 @@ class SocialLoginWeb extends core.WebPlugin {
     }
     getGoogleState() {
         try {
-            const state = window.localStorage.getItem('capgo_social_login_google_state');
+            const state = window.localStorage.getItem(this.GOOGLE_STATE_KEY);
             if (!state)
                 return null;
             const { accessToken, idToken } = JSON.parse(state);
@@ -514,77 +484,18 @@ class SocialLoginWeb extends core.WebPlugin {
             return null;
         }
     }
-    async loadFacebookScript() {
-        if (this.facebookScriptLoaded)
-            return;
-        return new Promise((resolve, reject) => {
-            const script = document.createElement('script');
-            script.src = 'https://connect.facebook.net/en_US/sdk.js';
-            script.async = true;
-            script.defer = true;
-            script.onload = () => {
-                this.facebookScriptLoaded = true;
-                resolve();
-            };
-            script.onerror = reject;
-            document.body.appendChild(script);
-        });
-    }
-    async loginWithFacebook(options) {
-        if (!this.facebookAppId) {
-            throw new Error('Facebook App ID not set. Call initialize() first.');
+    async traditionalOAuth({ scopes, hostedDomain, nonce, }) {
+        const uniqueScopes = [...new Set([...(scopes || []), 'openid'])];
+        const params = new URLSearchParams(Object.assign(Object.assign({ client_id: this.clientId, redirect_uri: window.location.href, response_type: this.loginType === 'offline' ? 'code' : 'token id_token', scope: uniqueScopes.join(' ') }, (nonce && { nonce })), { include_granted_scopes: 'true', state: 'popup' }));
+        if (hostedDomain !== undefined) {
+            params.append('hd', hostedDomain);
         }
-        return new Promise((resolve, reject) => {
-            FB.login((response) => {
-                if (response.status === 'connected') {
-                    FB.api('/me', { fields: 'id,name,email,picture' }, (userInfo) => {
-                        var _a, _b;
-                        const result = {
-                            accessToken: {
-                                token: response.authResponse.accessToken,
-                                userId: response.authResponse.userID,
-                            },
-                            profile: {
-                                userID: userInfo.id,
-                                name: userInfo.name,
-                                email: userInfo.email || null,
-                                imageURL: ((_b = (_a = userInfo.picture) === null || _a === undefined ? undefined : _a.data) === null || _b === undefined ? undefined : _b.url) || null,
-                                friendIDs: [],
-                                birthday: null,
-                                ageRange: null,
-                                gender: null,
-                                location: null,
-                                hometown: null,
-                                profileURL: null,
-                            },
-                            idToken: null,
-                        };
-                        resolve({ provider: 'facebook', result });
-                    });
-                }
-                else {
-                    reject(new Error('Facebook login failed'));
-                }
-            }, { scope: options.permissions.join(',') });
-        });
-    }
-    async fallbackToTraditionalOAuth(scopes) {
-        const uniqueScopes = [...new Set([...scopes, 'openid'])];
-        const params = new URLSearchParams({
-            client_id: this.googleClientId,
-            redirect_uri: window.location.href,
-            response_type: this.googleLoginType === 'offline' ? 'code' : 'token id_token',
-            scope: uniqueScopes.join(' '),
-            nonce: Math.random().toString(36).substring(2),
-            include_granted_scopes: 'true',
-            state: 'popup',
-        });
         const url = `https://accounts.google.com/o/oauth2/v2/auth?${params.toString()}`;
         const width = 500;
         const height = 600;
         const left = window.screenX + (window.outerWidth - width) / 2;
         const top = window.screenY + (window.outerHeight - height) / 2;
-        localStorage.setItem(SocialLoginWeb.OAUTH_STATE_KEY, 'true');
+        localStorage.setItem(BaseSocialLogin.OAUTH_STATE_KEY, 'true');
         const popup = window.open(url, 'Google Sign In', `width=${width},height=${height},left=${left},top=${top},popup=1`);
         // This may never return...
         return new Promise((resolve, reject) => {
@@ -593,12 +504,12 @@ class SocialLoginWeb extends core.WebPlugin {
                 return;
             }
             const handleMessage = (event) => {
-                var _a;
-                if (event.origin !== window.location.origin)
+                var _a, _b, _c;
+                if (event.origin !== window.location.origin || ((_b = (_a = event.data) === null || _a === void 0 ? void 0 : _a.source) === null || _b === void 0 ? void 0 : _b.startsWith('angular')))
                     return;
-                if (((_a = event.data) === null || _a === undefined ? undefined : _a.type) === 'oauth-response') {
+                if (((_c = event.data) === null || _c === void 0 ? void 0 : _c.type) === 'oauth-response') {
                     window.removeEventListener('message', handleMessage);
-                    if (this.googleLoginType === 'online') {
+                    if (this.loginType === 'online') {
                         const { accessToken, idToken } = event.data;
                         if (accessToken && idToken) {
                             const profile = this.parseJwt(idToken);
@@ -624,7 +535,7 @@ class SocialLoginWeb extends core.WebPlugin {
                         }
                     }
                     else {
-                        const { serverAuthCode } = event.data.result;
+                        const { serverAuthCode } = event.data;
                         resolve({
                             provider: 'google',
                             result: {
@@ -648,6 +559,103 @@ class SocialLoginWeb extends core.WebPlugin {
         });
     }
 }
+
+class SocialLoginWeb extends core.WebPlugin {
+    constructor() {
+        var _a;
+        super();
+        this.googleProvider = new GoogleSocialLogin();
+        this.appleProvider = new AppleSocialLogin();
+        this.facebookProvider = new FacebookSocialLogin();
+        // Set up listener for OAuth redirects if we have a pending OAuth flow
+        if (localStorage.getItem(SocialLoginWeb.OAUTH_STATE_KEY)) {
+            console.log('OAUTH_STATE_KEY found');
+            const result = this.handleOAuthRedirect();
+            if (result) {
+                (_a = window.opener) === null || _a === void 0 ? void 0 : _a.postMessage(Object.assign({ type: 'oauth-response' }, result.result), window.location.origin);
+                window.close();
+            }
+        }
+    }
+    handleOAuthRedirect() {
+        const url = new URL(window.location.href);
+        return this.googleProvider.handleOAuthRedirect(url);
+    }
+    async initialize(options) {
+        var _a, _b, _c;
+        const initPromises = [];
+        if ((_a = options.google) === null || _a === void 0 ? void 0 : _a.webClientId) {
+            initPromises.push(this.googleProvider.initialize(options.google.webClientId, options.google.mode, options.google.hostedDomain));
+        }
+        if ((_b = options.apple) === null || _b === void 0 ? void 0 : _b.clientId) {
+            initPromises.push(this.appleProvider.initialize(options.apple.clientId, options.apple.redirectUrl));
+        }
+        if ((_c = options.facebook) === null || _c === void 0 ? void 0 : _c.appId) {
+            initPromises.push(this.facebookProvider.initialize(options.facebook.appId));
+        }
+        await Promise.all(initPromises);
+    }
+    async login(options) {
+        switch (options.provider) {
+            case 'google':
+                return this.googleProvider.login(options.options);
+            case 'apple':
+                return this.appleProvider.login(options.options);
+            case 'facebook':
+                return this.facebookProvider.login(options.options);
+            default:
+                throw new Error(`Login for ${options.provider} is not implemented on web`);
+        }
+    }
+    async logout(options) {
+        switch (options.provider) {
+            case 'google':
+                return this.googleProvider.logout();
+            case 'apple':
+                return this.appleProvider.logout();
+            case 'facebook':
+                return this.facebookProvider.logout();
+            default:
+                throw new Error(`Logout for ${options.provider} is not implemented`);
+        }
+    }
+    async isLoggedIn(options) {
+        switch (options.provider) {
+            case 'google':
+                return this.googleProvider.isLoggedIn();
+            case 'apple':
+                return this.appleProvider.isLoggedIn();
+            case 'facebook':
+                return this.facebookProvider.isLoggedIn();
+            default:
+                throw new Error(`isLoggedIn for ${options.provider} is not implemented`);
+        }
+    }
+    async getAuthorizationCode(options) {
+        switch (options.provider) {
+            case 'google':
+                return this.googleProvider.getAuthorizationCode();
+            case 'apple':
+                return this.appleProvider.getAuthorizationCode();
+            case 'facebook':
+                return this.facebookProvider.getAuthorizationCode();
+            default:
+                throw new Error(`getAuthorizationCode for ${options.provider} is not implemented`);
+        }
+    }
+    async refresh(options) {
+        switch (options.provider) {
+            case 'google':
+                return this.googleProvider.refresh();
+            case 'apple':
+                return this.appleProvider.refresh();
+            case 'facebook':
+                return this.facebookProvider.refresh(options.options);
+            default:
+                throw new Error(`Refresh for ${options.provider} is not implemented`);
+        }
+    }
+}
 SocialLoginWeb.OAUTH_STATE_KEY = 'social_login_oauth_pending';
 
 var web = /*#__PURE__*/Object.freeze({