@capgo/capacitor-social-login 1.2.6 → 6.0.1

package/dist/plugin.js

@@ -5,53 +5,350 @@ var capacitorCapacitorUpdater = (function (exports, core) {
         web: () => Promise.resolve().then(function () { return web; }).then((m) => new m.SocialLoginWeb()),
     });
 
-    class SocialLoginWeb extends core.WebPlugin {
+    class BaseSocialLogin extends core.WebPlugin {
         constructor() {
-            var _a;
             super();
-            this.googleClientId = null;
-            this.appleClientId = null;
-            this.googleScriptLoaded = false;
-            this.googleLoginType = 'online';
-            this.appleScriptLoaded = false;
-            this.appleScriptUrl = 'https://appleid.cdn-apple.com/appleauth/static/jsapi/appleid/1/en_US/appleid.auth.js';
+        }
+        parseJwt(token) {
+            const base64Url = token.split('.')[1];
+            const base64 = base64Url.replace(/-/g, '+').replace(/_/g, '/');
+            const jsonPayload = decodeURIComponent(atob(base64)
+                .split('')
+                .map((c) => {
+                return '%' + ('00' + c.charCodeAt(0).toString(16)).slice(-2);
+            })
+                .join(''));
+            return JSON.parse(jsonPayload);
+        }
+        async loadScript(src) {
+            return new Promise((resolve, reject) => {
+                const script = document.createElement('script');
+                script.src = src;
+                script.async = true;
+                script.onload = () => {
+                    resolve();
+                };
+                script.onerror = reject;
+                document.body.appendChild(script);
+            });
+        }
+    }
+    BaseSocialLogin.OAUTH_STATE_KEY = 'social_login_oauth_pending';
+
+    class AppleSocialLogin extends BaseSocialLogin {
+        constructor() {
+            super(...arguments);
+            this.clientId = null;
+            this.redirectUrl = null;
+            this.scriptLoaded = false;
+            this.scriptUrl = 'https://appleid.cdn-apple.com/appleauth/static/jsapi/appleid/1/en_US/appleid.auth.js';
+        }
+        async initialize(clientId, redirectUrl) {
+            this.clientId = clientId;
+            this.redirectUrl = redirectUrl || null;
+            if (clientId) {
+                await this.loadAppleScript();
+            }
+        }
+        async login(options) {
+            if (!this.clientId) {
+                throw new Error('Apple Client ID not set. Call initialize() first.');
+            }
+            if (!this.scriptLoaded) {
+                throw new Error('Apple Sign-In script not loaded.');
+            }
+            return new Promise((resolve, reject) => {
+                var _a;
+                AppleID.auth.init({
+                    clientId: this.clientId,
+                    scope: ((_a = options.scopes) === null || _a === void 0 ? void 0 : _a.join(' ')) || 'name email',
+                    redirectURI: this.redirectUrl || window.location.href,
+                    state: options.state,
+                    nonce: options.nonce,
+                    usePopup: true,
+                });
+                AppleID.auth
+                    .signIn()
+                    .then((res) => {
+                    var _a, _b, _c, _d, _e;
+                    const result = {
+                        profile: {
+                            user: res.user || '',
+                            email: ((_a = res.user) === null || _a === void 0 ? void 0 : _a.email) || null,
+                            givenName: ((_c = (_b = res.user) === null || _b === void 0 ? void 0 : _b.name) === null || _c === void 0 ? void 0 : _c.firstName) || null,
+                            familyName: ((_e = (_d = res.user) === null || _d === void 0 ? void 0 : _d.name) === null || _e === void 0 ? void 0 : _e.lastName) || null,
+                        },
+                        accessToken: {
+                            token: res.authorization.id_token || '',
+                        },
+                        idToken: res.authorization.code || null,
+                    };
+                    resolve({ provider: 'apple', result });
+                })
+                    .catch((error) => {
+                    reject(error);
+                });
+            });
+        }
+        async logout() {
+            // Apple doesn't provide a logout method for web
+            console.log('Apple logout: Session should be managed on the client side');
+        }
+        async isLoggedIn() {
+            // Apple doesn't provide a method to check login status on web
+            console.log('Apple login status should be managed on the client side');
+            return { isLoggedIn: false };
+        }
+        async getAuthorizationCode() {
+            // Apple authorization code should be obtained during login
+            console.log('Apple authorization code should be stored during login');
+            throw new Error('Apple authorization code not available');
+        }
+        async refresh() {
+            // Apple doesn't provide a refresh method for web
+            console.log('Apple refresh not available on web');
+        }
+        async loadAppleScript() {
+            if (this.scriptLoaded)
+                return;
+            return this.loadScript(this.scriptUrl).then(() => {
+                this.scriptLoaded = true;
+            });
+        }
+    }
+
+    class FacebookSocialLogin extends BaseSocialLogin {
+        constructor() {
+            super(...arguments);
+            this.appId = null;
+            this.scriptLoaded = false;
+        }
+        async initialize(appId) {
+            this.appId = appId;
+            if (appId) {
+                await this.loadFacebookScript();
+                FB.init({
+                    appId: this.appId,
+                    version: 'v17.0',
+                    xfbml: true,
+                    cookie: true,
+                });
+            }
+        }
+        async login(options) {
+            if (!this.appId) {
+                throw new Error('Facebook App ID not set. Call initialize() first.');
+            }
+            return new Promise((resolve, reject) => {
+                FB.login((response) => {
+                    if (response.status === 'connected') {
+                        FB.api('/me', { fields: 'id,name,email,picture' }, (userInfo) => {
+                            var _a, _b;
+                            const result = {
+                                accessToken: {
+                                    token: response.authResponse.accessToken,
+                                    userId: response.authResponse.userID,
+                                },
+                                profile: {
+                                    userID: userInfo.id,
+                                    name: userInfo.name,
+                                    email: userInfo.email || null,
+                                    imageURL: ((_b = (_a = userInfo.picture) === null || _a === void 0 ? void 0 : _a.data) === null || _b === void 0 ? void 0 : _b.url) || null,
+                                    friendIDs: [],
+                                    birthday: null,
+                                    ageRange: null,
+                                    gender: null,
+                                    location: null,
+                                    hometown: null,
+                                    profileURL: null,
+                                },
+                                idToken: null,
+                            };
+                            resolve({ provider: 'facebook', result });
+                        });
+                    }
+                    else {
+                        reject(new Error('Facebook login failed'));
+                    }
+                }, { scope: options.permissions.join(',') });
+            });
+        }
+        async logout() {
+            return new Promise((resolve) => {
+                FB.logout(() => resolve());
+            });
+        }
+        async isLoggedIn() {
+            return new Promise((resolve) => {
+                FB.getLoginStatus((response) => {
+                    resolve({ isLoggedIn: response.status === 'connected' });
+                });
+            });
+        }
+        async getAuthorizationCode() {
+            return new Promise((resolve, reject) => {
+                FB.getLoginStatus((response) => {
+                    var _a;
+                    if (response.status === 'connected') {
+                        resolve({ jwt: ((_a = response.authResponse) === null || _a === void 0 ? void 0 : _a.accessToken) || '' });
+                    }
+                    else {
+                        reject(new Error('No Facebook authorization code available'));
+                    }
+                });
+            });
+        }
+        async refresh(options) {
+            await this.login(options);
+        }
+        async loadFacebookScript() {
+            if (this.scriptLoaded)
+                return;
+            return this.loadScript('https://connect.facebook.net/en_US/sdk.js').then(() => {
+                this.scriptLoaded = true;
+            });
+        }
+    }
+
+    class GoogleSocialLogin extends BaseSocialLogin {
+        constructor() {
+            super(...arguments);
+            this.clientId = null;
+            this.loginType = 'online';
             this.GOOGLE_TOKEN_REQUEST_URL = 'https://www.googleapis.com/oauth2/v3/tokeninfo';
-            this.facebookAppId = null;
-            this.facebookScriptLoaded = false;
-            // Set up listener for OAuth redirects if we have a pending OAuth flow
-            if (localStorage.getItem(SocialLoginWeb.OAUTH_STATE_KEY)) {
-                console.log('OAUTH_STATE_KEY found');
-                const result = this.handleOAuthRedirect();
-                if (result) {
-                    (_a = window.opener) === null || _a === undefined ? undefined : _a.postMessage(Object.assign({ type: 'oauth-response' }, result.result), window.location.origin);
-                    window.close();
+            this.GOOGLE_STATE_KEY = 'capgo_social_login_google_state';
+        }
+        async initialize(clientId, mode, hostedDomain) {
+            this.clientId = clientId;
+            if (mode) {
+                this.loginType = mode;
+            }
+            this.hostedDomain = hostedDomain;
+        }
+        async login(options) {
+            if (!this.clientId) {
+                throw new Error('Google Client ID not set. Call initialize() first.');
+            }
+            let scopes = options.scopes || [];
+            if (scopes.length > 0) {
+                // If scopes are provided, directly use the traditional OAuth flow
+                if (!scopes.includes('https://www.googleapis.com/auth/userinfo.email')) {
+                    scopes.push('https://www.googleapis.com/auth/userinfo.email');
                 }
+                if (!scopes.includes('https://www.googleapis.com/auth/userinfo.profile')) {
+                    scopes.push('https://www.googleapis.com/auth/userinfo.profile');
+                }
+                if (!scopes.includes('openid')) {
+                    scopes.push('openid');
+                }
+            }
+            else {
+                scopes = [
+                    'https://www.googleapis.com/auth/userinfo.email',
+                    'https://www.googleapis.com/auth/userinfo.profile',
+                    'openid',
+                ];
             }
+            const nonce = options.nonce || Math.random().toString(36).substring(2);
+            // If scopes are provided, directly use the traditional OAuth flow
+            return this.traditionalOAuth({
+                scopes,
+                nonce,
+                hostedDomain: this.hostedDomain,
+            });
         }
-        handleOAuthRedirect() {
-            const paramsRaw = new URL(window.location.href).searchParams;
+        async logout() {
+            if (this.loginType === 'offline') {
+                return Promise.reject("Offline login doesn't store tokens. logout is not available");
+            }
+            // eslint-disable-next-line
+            const state = this.getGoogleState();
+            if (!state)
+                return;
+            await this.rawLogoutGoogle(state.accessToken);
+        }
+        async isLoggedIn() {
+            if (this.loginType === 'offline') {
+                return Promise.reject("Offline login doesn't store tokens. isLoggedIn is not available");
+            }
+            // eslint-disable-next-line
+            const state = this.getGoogleState();
+            if (!state)
+                return { isLoggedIn: false };
+            try {
+                const isValidAccessToken = await this.accessTokenIsValid(state.accessToken);
+                const isValidIdToken = this.idTokenValid(state.idToken);
+                if (isValidAccessToken && isValidIdToken) {
+                    return { isLoggedIn: true };
+                }
+                else {
+                    try {
+                        await this.rawLogoutGoogle(state.accessToken, false);
+                    }
+                    catch (e) {
+                        console.error('Access token is not valid, but cannot logout', e);
+                    }
+                    return { isLoggedIn: false };
+                }
+            }
+            catch (e) {
+                return Promise.reject(e);
+            }
+        }
+        async getAuthorizationCode() {
+            if (this.loginType === 'offline') {
+                return Promise.reject("Offline login doesn't store tokens. getAuthorizationCode is not available");
+            }
+            // eslint-disable-next-line
+            const state = this.getGoogleState();
+            if (!state)
+                throw new Error('No Google authorization code available');
+            try {
+                const isValidAccessToken = await this.accessTokenIsValid(state.accessToken);
+                const isValidIdToken = this.idTokenValid(state.idToken);
+                if (isValidAccessToken && isValidIdToken) {
+                    return { accessToken: state.accessToken, jwt: state.idToken };
+                }
+                else {
+                    try {
+                        await this.rawLogoutGoogle(state.accessToken, false);
+                    }
+                    catch (e) {
+                        console.error('Access token is not valid, but cannot logout', e);
+                    }
+                    throw new Error('No Google authorization code available');
+                }
+            }
+            catch (e) {
+                return Promise.reject(e);
+            }
+        }
+        async refresh() {
+            // For Google, we can prompt for re-authentication
+            return Promise.reject('Not implemented');
+        }
+        handleOAuthRedirect(url) {
+            const paramsRaw = url.searchParams;
             const code = paramsRaw.get('code');
             if (code && paramsRaw.has('scope')) {
                 return {
                     provider: 'google',
                     result: {
-                        provider: 'google',
-                        result: {
-                            serverAuthCode: code,
-                        },
+                        serverAuthCode: code,
+                        responseType: 'offline',
                     },
                 };
             }
-            const hash = window.location.hash.substring(1);
-            console.log('handleOAuthRedirect', window.location.hash);
+            const hash = url.hash.substring(1);
+            console.log('handleOAuthRedirect', url.hash);
             if (!hash)
-                return;
+                return null;
             console.log('handleOAuthRedirect ok');
             const params = new URLSearchParams(hash);
             const accessToken = params.get('access_token');
             const idToken = params.get('id_token');
             if (accessToken && idToken) {
-                localStorage.removeItem(SocialLoginWeb.OAUTH_STATE_KEY);
+                localStorage.removeItem(BaseSocialLogin.OAUTH_STATE_KEY);
                 const profile = this.parseJwt(idToken);
                 return {
                     provider: 'google',
@@ -68,75 +365,12 @@ var capacitorCapacitorUpdater = (function (exports, core) {
                             name: profile.name || null,
                             imageUrl: profile.picture || null,
                         },
+                        responseType: 'online',
                     },
                 };
             }
             return null;
         }
-        async initialize(options) {
-            var _a, _b, _c;
-            if ((_a = options.google) === null || _a === undefined ? undefined : _a.webClientId) {
-                this.googleClientId = options.google.webClientId;
-                if (options.google.mode) {
-                    this.googleLoginType = options.google.mode;
-                }
-                await this.loadGoogleScript();
-            }
-            if ((_b = options.apple) === null || _b === undefined ? undefined : _b.clientId) {
-                this.appleClientId = options.apple.clientId;
-                await this.loadAppleScript();
-            }
-            if ((_c = options.facebook) === null || _c === undefined ? undefined : _c.appId) {
-                this.facebookAppId = options.facebook.appId;
-                await this.loadFacebookScript();
-                FB.init({
-                    appId: this.facebookAppId,
-                    version: 'v17.0',
-                    xfbml: true,
-                    cookie: true,
-                });
-            }
-            // Implement initialization for other providers if needed
-        }
-        async login(options) {
-            switch (options.provider) {
-                case 'google':
-                    return this.loginWithGoogle(options.options);
-                case 'apple':
-                    return this.loginWithApple(options.options);
-                case 'facebook':
-                    return this.loginWithFacebook(options.options);
-                default:
-                    throw new Error(`Login for ${options.provider} is not implemented on web`);
-            }
-        }
-        async logout(options) {
-            switch (options.provider) {
-                case 'google':
-                    if (this.googleLoginType === 'offline') {
-                        return Promise.reject("Offline login doesn't store tokens. logout is not available");
-                    }
-                    // Google doesn't have a specific logout method for web
-                    // We can revoke the token if we have it stored
-                    console.log('Google logout: Id token should be revoked on the client side if stored');
-                    // eslint-disable-next-line
-                    const state = this.getGoogleState();
-                    if (!state)
-                        return;
-                    await this.rawLogoutGoogle(state.accessToken);
-                    break;
-                case 'apple':
-                    // Apple doesn't provide a logout method for web
-                    console.log('Apple logout: Session should be managed on the client side');
-                    break;
-                case 'facebook':
-                    return new Promise((resolve) => {
-                        FB.logout(() => resolve());
-                    });
-                default:
-                    throw new Error(`Logout for ${options.provider} is not implemented`);
-            }
-        }
         async accessTokenIsValid(accessToken) {
             const url = `${this.GOOGLE_TOKEN_REQUEST_URL}?access_token=${encodeURIComponent(accessToken)}`;
             try {
@@ -220,273 +454,9 @@ var capacitorCapacitorUpdater = (function (exports, core) {
                 return;
             }
         }
-        async isLoggedIn(options) {
-            switch (options.provider) {
-                case 'google':
-                    if (this.googleLoginType === 'offline') {
-                        return Promise.reject("Offline login doesn't store tokens. isLoggedIn is not available");
-                    }
-                    // For Google, we can check if there's a valid token
-                    // eslint-disable-next-line
-                    const state = this.getGoogleState();
-                    if (!state)
-                        return { isLoggedIn: false };
-                    try {
-                        // todo: cache accessTokenIsValid calls
-                        const isValidAccessToken = await this.accessTokenIsValid(state.accessToken);
-                        const isValidIdToken = this.idTokenValid(state.idToken);
-                        if (isValidAccessToken && isValidIdToken) {
-                            return { isLoggedIn: true };
-                        }
-                        else {
-                            try {
-                                await this.rawLogoutGoogle(state.accessToken, false);
-                            }
-                            catch (e) {
-                                console.error('Access token is not valid, but cannot logout', e);
-                            }
-                            return { isLoggedIn: false };
-                        }
-                    }
-                    catch (e) {
-                        return Promise.reject(e);
-                    }
-                case 'apple':
-                    // Apple doesn't provide a method to check login status on web
-                    console.log('Apple login status should be managed on the client side');
-                    return { isLoggedIn: false };
-                case 'facebook':
-                    return new Promise((resolve) => {
-                        FB.getLoginStatus((response) => {
-                            resolve({ isLoggedIn: response.status === 'connected' });
-                        });
-                    });
-                default:
-                    throw new Error(`isLoggedIn for ${options.provider} is not implemented`);
-            }
-        }
-        async getAuthorizationCode(options) {
-            switch (options.provider) {
-                case 'google':
-                    if (this.googleLoginType === 'offline') {
-                        return Promise.reject("Offline login doesn't store tokens. getAuthorizationCode is not available");
-                    }
-                    // For Google, we can use the id_token as the authorization code
-                    // eslint-disable-next-line
-                    const state = this.getGoogleState();
-                    if (!state)
-                        throw new Error('No Google authorization code available');
-                    try {
-                        // todo: cache accessTokenIsValid calls
-                        const isValidAccessToken = await this.accessTokenIsValid(state.accessToken);
-                        const isValidIdToken = this.idTokenValid(state.idToken);
-                        if (isValidAccessToken && isValidIdToken) {
-                            return { accessToken: state.accessToken, jwt: state.idToken };
-                        }
-                        else {
-                            try {
-                                await this.rawLogoutGoogle(state.accessToken, false);
-                            }
-                            catch (e) {
-                                console.error('Access token is not valid, but cannot logout', e);
-                            }
-                            throw new Error('No Google authorization code available');
-                        }
-                    }
-                    catch (e) {
-                        return Promise.reject(e);
-                    }
-                case 'apple':
-                    // Apple authorization code should be obtained during login
-                    console.log('Apple authorization code should be stored during login');
-                    throw new Error('Apple authorization code not available');
-                case 'facebook':
-                    return new Promise((resolve, reject) => {
-                        FB.getLoginStatus((response) => {
-                            var _a;
-                            if (response.status === 'connected') {
-                                resolve({ jwt: ((_a = response.authResponse) === null || _a === undefined ? undefined : _a.accessToken) || '' });
-                            }
-                            else {
-                                reject(new Error('No Facebook authorization code available'));
-                            }
-                        });
-                    });
-                default:
-                    throw new Error(`getAuthorizationCode for ${options.provider} is not implemented`);
-            }
-        }
-        async refresh(options) {
-            switch (options.provider) {
-                case 'google':
-                    // For Google, we can prompt for re-authentication
-                    return Promise.reject('Not implemented');
-                case 'apple':
-                    // Apple doesn't provide a refresh method for web
-                    console.log('Apple refresh not available on web');
-                    break;
-                case 'facebook':
-                    await this.loginWithFacebook(options.options);
-                    break;
-                default:
-                    throw new Error(`Refresh for ${options.provider} is not implemented`);
-            }
-        }
-        loginWithGoogle(options) {
-            if (!this.googleClientId) {
-                throw new Error('Google Client ID not set. Call initialize() first.');
-            }
-            let scopes = options.scopes || [];
-            if (scopes.length > 0) {
-                // If scopes are provided, directly use the traditional OAuth flow
-                if (!scopes.includes('https://www.googleapis.com/auth/userinfo.email')) {
-                    scopes.push('https://www.googleapis.com/auth/userinfo.email');
-                }
-                if (!scopes.includes('https://www.googleapis.com/auth/userinfo.profile')) {
-                    scopes.push('https://www.googleapis.com/auth/userinfo.profile');
-                }
-                if (!scopes.includes('openid')) {
-                    scopes.push('openid');
-                }
-            }
-            else {
-                scopes = [
-                    'https://www.googleapis.com/auth/userinfo.email',
-                    'https://www.googleapis.com/auth/userinfo.profile',
-                    'openid',
-                ];
-            }
-            if (scopes.length > 3 || this.googleLoginType === 'offline' || options.disableOneTap) {
-                // If scopes are provided, directly use the traditional OAuth flow
-                return this.fallbackToTraditionalOAuth(scopes);
-            }
-            return new Promise((resolve, reject) => {
-                google.accounts.id.initialize({
-                    client_id: this.googleClientId,
-                    callback: (response) => {
-                        console.log('google.accounts.id.initialize callback', response);
-                        if (response.error) {
-                            // we use any because type fail but we need to double check if that works
-                            reject(response.error);
-                        }
-                        else {
-                            const payload = this.parseJwt(response.credential);
-                            const result = {
-                                accessToken: null,
-                                responseType: 'online',
-                                idToken: response.credential,
-                                profile: {
-                                    email: payload.email || null,
-                                    familyName: payload.family_name || null,
-                                    givenName: payload.given_name || null,
-                                    id: payload.sub || null,
-                                    name: payload.name || null,
-                                    imageUrl: payload.picture || null,
-                                },
-                            };
-                            resolve({ provider: 'google', result });
-                        }
-                    },
-                    auto_select: true,
-                });
-                google.accounts.id.prompt((notification) => {
-                    if (notification.isNotDisplayed() || notification.isSkippedMoment()) {
-                        console.log('OneTap is not displayed or skipped');
-                        // Fallback to traditional OAuth if One Tap is not available
-                        this.fallbackToTraditionalOAuth(scopes)
-                            .then((r) => resolve({ provider: 'google', result: r.result }))
-                            .catch(reject);
-                    }
-                    else {
-                        console.log('OneTap is displayed');
-                    }
-                });
-            });
-        }
-        parseJwt(token) {
-            const base64Url = token.split('.')[1];
-            const base64 = base64Url.replace(/-/g, '+').replace(/_/g, '/');
-            const jsonPayload = decodeURIComponent(atob(base64)
-                .split('')
-                .map((c) => {
-                return '%' + ('00' + c.charCodeAt(0).toString(16)).slice(-2);
-            })
-                .join(''));
-            return JSON.parse(jsonPayload);
-        }
-        async loadGoogleScript() {
-            if (this.googleScriptLoaded)
-                return;
-            return new Promise((resolve, reject) => {
-                const script = document.createElement('script');
-                script.src = 'https://accounts.google.com/gsi/client';
-                script.async = true;
-                script.onload = () => {
-                    this.googleScriptLoaded = true;
-                    resolve();
-                };
-                script.onerror = reject;
-                document.body.appendChild(script);
-            });
-        }
-        async loginWithApple(options) {
-            if (!this.appleClientId) {
-                throw new Error('Apple Client ID not set. Call initialize() first.');
-            }
-            if (!this.appleScriptLoaded) {
-                throw new Error('Apple Sign-In script not loaded.');
-            }
-            return new Promise((resolve, reject) => {
-                var _a;
-                AppleID.auth.init({
-                    clientId: this.appleClientId,
-                    scope: ((_a = options.scopes) === null || _a === undefined ? undefined : _a.join(' ')) || 'name email',
-                    redirectURI: options.redirectUrl || window.location.href,
-                    state: options.state,
-                    nonce: options.nonce,
-                    usePopup: true,
-                });
-                AppleID.auth
-                    .signIn()
-                    .then((res) => {
-                    var _a, _b, _c, _d, _e, _f, _g;
-                    const result = {
-                        profile: {
-                            user: ((_b = (_a = res.user) === null || _a === undefined ? undefined : _a.name) === null || _b === undefined ? undefined : _b.firstName) ? `${res.user.name.firstName} ${res.user.name.lastName}` : '',
-                            email: ((_c = res.user) === null || _c === undefined ? undefined : _c.email) || null,
-                            givenName: ((_e = (_d = res.user) === null || _d === undefined ? undefined : _d.name) === null || _e === undefined ? undefined : _e.firstName) || null,
-                            familyName: ((_g = (_f = res.user) === null || _f === undefined ? undefined : _f.name) === null || _g === undefined ? undefined : _g.lastName) || null,
-                        },
-                        accessToken: {
-                            token: res.authorization.code, // TODO: to fix and find the correct token
-                        },
-                        idToken: res.authorization.id_token || null,
-                    };
-                    resolve({ provider: 'apple', result });
-                })
-                    .catch((error) => {
-                    reject(error);
-                });
-            });
-        }
-        async loadAppleScript() {
-            if (this.appleScriptLoaded)
-                return;
-            return new Promise((resolve, reject) => {
-                const script = document.createElement('script');
-                script.src = this.appleScriptUrl;
-                script.async = true;
-                script.onload = () => {
-                    this.appleScriptLoaded = true;
-                    resolve();
-                };
-                script.onerror = reject;
-                document.body.appendChild(script);
-            });
-        }
         persistStateGoogle(accessToken, idToken) {
             try {
-                window.localStorage.setItem('capgo_social_login_google_state', JSON.stringify({ accessToken, idToken }));
+                window.localStorage.setItem(this.GOOGLE_STATE_KEY, JSON.stringify({ accessToken, idToken }));
             }
             catch (e) {
                 console.error('Cannot persist state google', e);
@@ -494,7 +464,7 @@ var capacitorCapacitorUpdater = (function (exports, core) {
         }
         clearStateGoogle() {
             try {
-                window.localStorage.removeItem('capgo_social_login_google_state');
+                window.localStorage.removeItem(this.GOOGLE_STATE_KEY);
             }
             catch (e) {
                 console.error('Cannot clear state google', e);
@@ -502,7 +472,7 @@ var capacitorCapacitorUpdater = (function (exports, core) {
         }
         getGoogleState() {
             try {
-                const state = window.localStorage.getItem('capgo_social_login_google_state');
+                const state = window.localStorage.getItem(this.GOOGLE_STATE_KEY);
                 if (!state)
                     return null;
                 const { accessToken, idToken } = JSON.parse(state);
@@ -513,77 +483,18 @@ var capacitorCapacitorUpdater = (function (exports, core) {
                 return null;
             }
         }
-        async loadFacebookScript() {
-            if (this.facebookScriptLoaded)
-                return;
-            return new Promise((resolve, reject) => {
-                const script = document.createElement('script');
-                script.src = 'https://connect.facebook.net/en_US/sdk.js';
-                script.async = true;
-                script.defer = true;
-                script.onload = () => {
-                    this.facebookScriptLoaded = true;
-                    resolve();
-                };
-                script.onerror = reject;
-                document.body.appendChild(script);
-            });
-        }
-        async loginWithFacebook(options) {
-            if (!this.facebookAppId) {
-                throw new Error('Facebook App ID not set. Call initialize() first.');
+        async traditionalOAuth({ scopes, hostedDomain, nonce, }) {
+            const uniqueScopes = [...new Set([...(scopes || []), 'openid'])];
+            const params = new URLSearchParams(Object.assign(Object.assign({ client_id: this.clientId, redirect_uri: window.location.href, response_type: this.loginType === 'offline' ? 'code' : 'token id_token', scope: uniqueScopes.join(' ') }, (nonce && { nonce })), { include_granted_scopes: 'true', state: 'popup' }));
+            if (hostedDomain !== undefined) {
+                params.append('hd', hostedDomain);
             }
-            return new Promise((resolve, reject) => {
-                FB.login((response) => {
-                    if (response.status === 'connected') {
-                        FB.api('/me', { fields: 'id,name,email,picture' }, (userInfo) => {
-                            var _a, _b;
-                            const result = {
-                                accessToken: {
-                                    token: response.authResponse.accessToken,
-                                    userId: response.authResponse.userID,
-                                },
-                                profile: {
-                                    userID: userInfo.id,
-                                    name: userInfo.name,
-                                    email: userInfo.email || null,
-                                    imageURL: ((_b = (_a = userInfo.picture) === null || _a === undefined ? undefined : _a.data) === null || _b === undefined ? undefined : _b.url) || null,
-                                    friendIDs: [],
-                                    birthday: null,
-                                    ageRange: null,
-                                    gender: null,
-                                    location: null,
-                                    hometown: null,
-                                    profileURL: null,
-                                },
-                                idToken: null,
-                            };
-                            resolve({ provider: 'facebook', result });
-                        });
-                    }
-                    else {
-                        reject(new Error('Facebook login failed'));
-                    }
-                }, { scope: options.permissions.join(',') });
-            });
-        }
-        async fallbackToTraditionalOAuth(scopes) {
-            const uniqueScopes = [...new Set([...scopes, 'openid'])];
-            const params = new URLSearchParams({
-                client_id: this.googleClientId,
-                redirect_uri: window.location.href,
-                response_type: this.googleLoginType === 'offline' ? 'code' : 'token id_token',
-                scope: uniqueScopes.join(' '),
-                nonce: Math.random().toString(36).substring(2),
-                include_granted_scopes: 'true',
-                state: 'popup',
-            });
             const url = `https://accounts.google.com/o/oauth2/v2/auth?${params.toString()}`;
             const width = 500;
             const height = 600;
             const left = window.screenX + (window.outerWidth - width) / 2;
             const top = window.screenY + (window.outerHeight - height) / 2;
-            localStorage.setItem(SocialLoginWeb.OAUTH_STATE_KEY, 'true');
+            localStorage.setItem(BaseSocialLogin.OAUTH_STATE_KEY, 'true');
             const popup = window.open(url, 'Google Sign In', `width=${width},height=${height},left=${left},top=${top},popup=1`);
             // This may never return...
             return new Promise((resolve, reject) => {
@@ -592,12 +503,12 @@ var capacitorCapacitorUpdater = (function (exports, core) {
                     return;
                 }
                 const handleMessage = (event) => {
-                    var _a;
-                    if (event.origin !== window.location.origin)
+                    var _a, _b, _c;
+                    if (event.origin !== window.location.origin || ((_b = (_a = event.data) === null || _a === void 0 ? void 0 : _a.source) === null || _b === void 0 ? void 0 : _b.startsWith('angular')))
                         return;
-                    if (((_a = event.data) === null || _a === undefined ? undefined : _a.type) === 'oauth-response') {
+                    if (((_c = event.data) === null || _c === void 0 ? void 0 : _c.type) === 'oauth-response') {
                         window.removeEventListener('message', handleMessage);
-                        if (this.googleLoginType === 'online') {
+                        if (this.loginType === 'online') {
                             const { accessToken, idToken } = event.data;
                             if (accessToken && idToken) {
                                 const profile = this.parseJwt(idToken);
@@ -623,7 +534,7 @@ var capacitorCapacitorUpdater = (function (exports, core) {
                             }
                         }
                         else {
-                            const { serverAuthCode } = event.data.result;
+                            const { serverAuthCode } = event.data;
                             resolve({
                                 provider: 'google',
                                 result: {
@@ -647,6 +558,103 @@ var capacitorCapacitorUpdater = (function (exports, core) {
             });
         }
     }
+
+    class SocialLoginWeb extends core.WebPlugin {
+        constructor() {
+            var _a;
+            super();
+            this.googleProvider = new GoogleSocialLogin();
+            this.appleProvider = new AppleSocialLogin();
+            this.facebookProvider = new FacebookSocialLogin();
+            // Set up listener for OAuth redirects if we have a pending OAuth flow
+            if (localStorage.getItem(SocialLoginWeb.OAUTH_STATE_KEY)) {
+                console.log('OAUTH_STATE_KEY found');
+                const result = this.handleOAuthRedirect();
+                if (result) {
+                    (_a = window.opener) === null || _a === void 0 ? void 0 : _a.postMessage(Object.assign({ type: 'oauth-response' }, result.result), window.location.origin);
+                    window.close();
+                }
+            }
+        }
+        handleOAuthRedirect() {
+            const url = new URL(window.location.href);
+            return this.googleProvider.handleOAuthRedirect(url);
+        }
+        async initialize(options) {
+            var _a, _b, _c;
+            const initPromises = [];
+            if ((_a = options.google) === null || _a === void 0 ? void 0 : _a.webClientId) {
+                initPromises.push(this.googleProvider.initialize(options.google.webClientId, options.google.mode, options.google.hostedDomain));
+            }
+            if ((_b = options.apple) === null || _b === void 0 ? void 0 : _b.clientId) {
+                initPromises.push(this.appleProvider.initialize(options.apple.clientId, options.apple.redirectUrl));
+            }
+            if ((_c = options.facebook) === null || _c === void 0 ? void 0 : _c.appId) {
+                initPromises.push(this.facebookProvider.initialize(options.facebook.appId));
+            }
+            await Promise.all(initPromises);
+        }
+        async login(options) {
+            switch (options.provider) {
+                case 'google':
+                    return this.googleProvider.login(options.options);
+                case 'apple':
+                    return this.appleProvider.login(options.options);
+                case 'facebook':
+                    return this.facebookProvider.login(options.options);
+                default:
+                    throw new Error(`Login for ${options.provider} is not implemented on web`);
+            }
+        }
+        async logout(options) {
+            switch (options.provider) {
+                case 'google':
+                    return this.googleProvider.logout();
+                case 'apple':
+                    return this.appleProvider.logout();
+                case 'facebook':
+                    return this.facebookProvider.logout();
+                default:
+                    throw new Error(`Logout for ${options.provider} is not implemented`);
+            }
+        }
+        async isLoggedIn(options) {
+            switch (options.provider) {
+                case 'google':
+                    return this.googleProvider.isLoggedIn();
+                case 'apple':
+                    return this.appleProvider.isLoggedIn();
+                case 'facebook':
+                    return this.facebookProvider.isLoggedIn();
+                default:
+                    throw new Error(`isLoggedIn for ${options.provider} is not implemented`);
+            }
+        }
+        async getAuthorizationCode(options) {
+            switch (options.provider) {
+                case 'google':
+                    return this.googleProvider.getAuthorizationCode();
+                case 'apple':
+                    return this.appleProvider.getAuthorizationCode();
+                case 'facebook':
+                    return this.facebookProvider.getAuthorizationCode();
+                default:
+                    throw new Error(`getAuthorizationCode for ${options.provider} is not implemented`);
+            }
+        }
+        async refresh(options) {
+            switch (options.provider) {
+                case 'google':
+                    return this.googleProvider.refresh();
+                case 'apple':
+                    return this.appleProvider.refresh();
+                case 'facebook':
+                    return this.facebookProvider.refresh(options.options);
+                default:
+                    throw new Error(`Refresh for ${options.provider} is not implemented`);
+            }
+        }
+    }
     SocialLoginWeb.OAUTH_STATE_KEY = 'social_login_oauth_pending';
 
     var web = /*#__PURE__*/Object.freeze({