@capgo/capacitor-social-login 8.1.1 → 8.2.1

package/dist/esm/web.js.map

@@ -1 +1 @@
-{"version":3,"file":"web.js","sourceRoot":"","sources":["../../src/web.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAE5C,OAAO,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AAepD,OAAO,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAC1D,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AACtD,OAAO,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AAExD,MAAM,OAAO,cAAe,SAAQ,SAAS;IAQ3C;QACE,KAAK,EAAE,CAAC;QAER,IAAI,CAAC,cAAc,GAAG,IAAI,iBAAiB,EAAE,CAAC;QAC9C,IAAI,CAAC,aAAa,GAAG,IAAI,gBAAgB,EAAE,CAAC;QAC5C,IAAI,CAAC,gBAAgB,GAAG,IAAI,mBAAmB,EAAE,CAAC;QAClD,IAAI,CAAC,eAAe,GAAG,IAAI,kBAAkB,EAAE,CAAC;QAEhD,sEAAsE;QACtE,IAAI,YAAY,CAAC,OAAO,CAAC,cAAc,CAAC,eAAe,CAAC,EAAE,CAAC;YACzD,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC;YACrC,IAAI,CAAC,mBAAmB,EAAE,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;gBACzC,OAAO,CAAC,KAAK,CAAC,iCAAiC,EAAE,KAAK,CAAC,CAAC;gBACxD,MAAM,CAAC,KAAK,EAAE,CAAC;YACjB,CAAC,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,mBAAmB;;QAC/B,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAC1C,MAAM,QAAQ,GAAG,YAAY,CAAC,OAAO,CAAC,cAAc,CAAC,eAAe,CAAC,CAAC;QACtE,IAAI,QAAQ,GAAkB,IAAI,CAAC;QACnC,IAAI,KAAyB,CAAC;QAE9B,IAAI,QAAQ,EAAE,CAAC;YACb,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;gBACpC,QAAQ,GAAG,MAAA,MAAM,CAAC,QAAQ,mCAAI,IAAI,CAAC;gBACnC,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC;YACvB,CAAC;YAAC,WAAM,CAAC;gBACP,QAAQ,GAAG,QAAQ,KAAK,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC;YACnD,CAAC;QACH,CAAC;QAED,IAAI,MAAM,GAA2C,IAAI,CAAC;QAE1D,QAAQ,QAAQ,EAAE,CAAC;YACjB,KAAK,SAAS;gBACZ,MAAM,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,mBAAmB,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;gBACpE,MAAM;YACR,KAAK,QAAQ,CAAC;YACd;gBACE,MAAM,GAAG,IAAI,CAAC,cAAc,CAAC,mBAAmB,CAAC,GAAG,CAAC,CAAC;gBACtD,MAAM;QACV,CAAC;QAED,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO;QACT,CAAC;QAED,IAAI,OAAO,IAAI,MAAM,EAAE,CAAC;YACtB,MAAM,gBAAgB,GAAG,QAAQ,aAAR,QAAQ,cAAR,QAAQ,GAAI,IAAI,CAAC;YAC1C,MAAA,MAAM,CAAC,MAAM,0CAAE,WAAW,CACxB;gBACE,IAAI,EAAE,aAAa;gBACnB,QAAQ,EAAE,gBAAgB;gBAC1B,KAAK,EAAE,MAAM,CAAC,KAAK;aACpB,EACD,MAAM,CAAC,QAAQ,CAAC,MAAM,CACvB,CAAC;QACJ,CAAC;aAAM,CAAC;YACN,MAAA,MAAM,CAAC,MAAM,0CAAE,WAAW,iBAEtB,IAAI,EAAE,gBAAgB,EACtB,QAAQ,EAAE,MAAM,CAAC,QAAQ,IACtB,MAAM,CAAC,MAAM,GAElB,MAAM,CAAC,QAAQ,CAAC,MAAM,CACvB,CAAC;QACJ,CAAC;QAED,MAAM,CAAC,KAAK,EAAE,CAAC;IACjB,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,OAA0B;;QACzC,MAAM,YAAY,GAAoB,EAAE,CAAC;QAEzC,IAAI,MAAA,OAAO,CAAC,MAAM,0CAAE,WAAW,EAAE,CAAC;YAChC,YAAY,CAAC,IAAI,CACf,IAAI,CAAC,cAAc,CAAC,UAAU,CAC5B,OAAO,CAAC,MAAM,CAAC,WAAW,EAC1B,OAAO,CAAC,MAAM,CAAC,IAAI,EACnB,OAAO,CAAC,MAAM,CAAC,YAAY,EAC3B,OAAO,CAAC,MAAM,CAAC,WAAW,CAC3B,CACF,CAAC;QACJ,CAAC;QAED,IAAI,MAAA,OAAO,CAAC,KAAK,0CAAE,QAAQ,EAAE,CAAC;YAC5B,YAAY,CAAC,IAAI,CACf,IAAI,CAAC,aAAa,CAAC,UAAU,CAC3B,OAAO,CAAC,KAAK,CAAC,QAAQ,EACtB,OAAO,CAAC,KAAK,CAAC,WAAW,EACzB,OAAO,CAAC,KAAK,CAAC,sBAAsB,CACrC,CACF,CAAC;QACJ,CAAC;QAED,IAAI,MAAA,OAAO,CAAC,QAAQ,0CAAE,KAAK,EAAE,CAAC;YAC5B,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,UAAU,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;QACvG,CAAC;QAED,IAAI,MAAA,OAAO,CAAC,OAAO,0CAAE,QAAQ,EAAE,CAAC;YAC9B,YAAY,CAAC,IAAI,CACf,IAAI,CAAC,eAAe,CAAC,UAAU,CAC7B,OAAO,CAAC,OAAO,CAAC,QAAQ,EACxB,OAAO,CAAC,OAAO,CAAC,WAAW,EAC3B,OAAO,CAAC,OAAO,CAAC,aAAa,EAC7B,OAAO,CAAC,OAAO,CAAC,UAAU,EAC1B,OAAO,CAAC,OAAO,CAAC,QAAQ,CACzB,CACF,CAAC;QACJ,CAAC;QAED,MAAM,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;IAClC,CAAC;IAED,KAAK,CAAC,KAAK,CACT,OAA+C;QAE/C,QAAQ,OAAO,CAAC,QAAQ,EAAE,CAAC;YACzB,KAAK,QAAQ;gBACX,OAAO,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAA6D,CAAC;YAChH,KAAK,OAAO;gBACV,OAAO,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAA6D,CAAC;YAC/G,KAAK,UAAU;gBACb,OAAO,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,OAAO,CAAC,OAA+B,CAGxE,CAAC;YACL,KAAK,SAAS;gBACZ,OAAO,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,OAAO,CAAC,OAAc,CAGtD,CAAC;YACL;gBACE,MAAM,IAAI,KAAK,CAAC,aAAa,OAAO,CAAC,QAAQ,4BAA4B,CAAC,CAAC;QAC/E,CAAC;IACH,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,OAAkE;QAC7E,QAAQ,OAAO,CAAC,QAAQ,EAAE,CAAC;YACzB,KAAK,QAAQ;gBACX,OAAO,IAAI,CAAC,cAAc,CAAC,MAAM,EAAE,CAAC;YACtC,KAAK,OAAO;gBACV,OAAO,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE,CAAC;YACrC,KAAK,UAAU;gBACb,OAAO,IAAI,CAAC,gBAAgB,CAAC,MAAM,EAAE,CAAC;YACxC,KAAK,SAAS;gBACZ,OAAO,IAAI,CAAC,eAAe,CAAC,MAAM,EAAE,CAAC;YACvC;gBACE,MAAM,IAAI,KAAK,CAAC,cAAc,OAAO,CAAC,QAAQ,qBAAqB,CAAC,CAAC;QACzE,CAAC;IACH,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,OAA0B;QACzC,QAAQ,OAAO,CAAC,QAAQ,EAAE,CAAC;YACzB,KAAK,QAAQ;gBACX,OAAO,IAAI,CAAC,cAAc,CAAC,UAAU,EAAE,CAAC;YAC1C,KAAK,OAAO;gBACV,OAAO,IAAI,CAAC,aAAa,CAAC,UAAU,EAAE,CAAC;YACzC,KAAK,UAAU;gBACb,OAAO,IAAI,CAAC,gBAAgB,CAAC,UAAU,EAAE,CAAC;YAC5C,KAAK,SAAS;gBACZ,OAAO,IAAI,CAAC,eAAe,CAAC,UAAU,EAAE,CAAC;YAC3C;gBACE,MAAM,IAAI,KAAK,CAAC,kBAAkB,OAAO,CAAC,QAAQ,qBAAqB,CAAC,CAAC;QAC7E,CAAC;IACH,CAAC;IAED,KAAK,CAAC,oBAAoB,CAAC,OAAiC;QAC1D,QAAQ,OAAO,CAAC,QAAQ,EAAE,CAAC;YACzB,KAAK,QAAQ;gBACX,OAAO,IAAI,CAAC,cAAc,CAAC,oBAAoB,EAAE,CAAC;YACpD,KAAK,OAAO;gBACV,OAAO,IAAI,CAAC,aAAa,CAAC,oBAAoB,EAAE,CAAC;YACnD,KAAK,UAAU;gBACb,OAAO,IAAI,CAAC,gBAAgB,CAAC,oBAAoB,EAAE,CAAC;YACtD,KAAK,SAAS;gBACZ,OAAO,IAAI,CAAC,eAAe,CAAC,oBAAoB,EAAE,CAAC;YACrD;gBACE,MAAM,IAAI,KAAK,CAAC,4BAA4B,OAAO,CAAC,QAAQ,qBAAqB,CAAC,CAAC;QACvF,CAAC;IACH,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,OAAqB;QACjC,QAAQ,OAAO,CAAC,QAAQ,EAAE,CAAC;YACzB,KAAK,QAAQ;gBACX,OAAO,IAAI,CAAC,cAAc,CAAC,OAAO,EAAE,CAAC;YACvC,KAAK,OAAO;gBACV,OAAO,IAAI,CAAC,aAAa,CAAC,OAAO,EAAE,CAAC;YACtC,KAAK,UAAU;gBACb,OAAO,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,OAAO,CAAC,OAA+B,CAAC,CAAC;YAChF,KAAK,SAAS;gBACZ,OAAO,IAAI,CAAC,eAAe,CAAC,OAAO,EAAE,CAAC;YACxC;gBACE,MAAM,IAAI,KAAK,CAAC,eAAgB,OAAe,CAAC,QAAQ,qBAAqB,CAAC,CAAC;QACnF,CAAC;IACH,CAAC;IAED,KAAK,CAAC,oBAAoB,CAAiC,OAG1D;QACC,MAAM,IAAI,KAAK,CAAC,8BAA8B,OAAO,CAAC,IAAI,qBAAqB,CAAC,CAAC;IACnF,CAAC;IAED,KAAK,CAAC,gBAAgB;QACpB,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAC5B,CAAC;;AAxNuB,8BAAe,GAAG,4BAA4B,CAAC","sourcesContent":["import { WebPlugin } from '@capacitor/core';\n\nimport { AppleSocialLogin } from './apple-provider';\nimport type {\n  SocialLoginPlugin,\n  InitializeOptions,\n  LoginOptions,\n  AuthorizationCode,\n  AuthorizationCodeOptions,\n  isLoggedInOptions,\n  ProviderResponseMap,\n  FacebookLoginOptions,\n  ProviderSpecificCall,\n  ProviderSpecificCallOptionsMap,\n  ProviderSpecificCallResponseMap,\n  LoginResult,\n} from './definitions';\nimport { FacebookSocialLogin } from './facebook-provider';\nimport { GoogleSocialLogin } from './google-provider';\nimport { TwitterSocialLogin } from './twitter-provider';\n\nexport class SocialLoginWeb extends WebPlugin implements SocialLoginPlugin {\n  private static readonly OAUTH_STATE_KEY = 'social_login_oauth_pending';\n\n  private googleProvider: GoogleSocialLogin;\n  private appleProvider: AppleSocialLogin;\n  private facebookProvider: FacebookSocialLogin;\n  private twitterProvider: TwitterSocialLogin;\n\n  constructor() {\n    super();\n\n    this.googleProvider = new GoogleSocialLogin();\n    this.appleProvider = new AppleSocialLogin();\n    this.facebookProvider = new FacebookSocialLogin();\n    this.twitterProvider = new TwitterSocialLogin();\n\n    // Set up listener for OAuth redirects if we have a pending OAuth flow\n    if (localStorage.getItem(SocialLoginWeb.OAUTH_STATE_KEY)) {\n      console.log('OAUTH_STATE_KEY found');\n      this.handleOAuthRedirect().catch((error) => {\n        console.error('Failed to finish OAuth redirect', error);\n        window.close();\n      });\n    }\n  }\n\n  private async handleOAuthRedirect(): Promise<void> {\n    const url = new URL(window.location.href);\n    const stateRaw = localStorage.getItem(SocialLoginWeb.OAUTH_STATE_KEY);\n    let provider: string | null = null;\n    let state: string | undefined;\n\n    if (stateRaw) {\n      try {\n        const parsed = JSON.parse(stateRaw);\n        provider = parsed.provider ?? null;\n        state = parsed.state;\n      } catch {\n        provider = stateRaw === 'true' ? 'google' : null;\n      }\n    }\n\n    let result: LoginResult | { error: string } | null = null;\n\n    switch (provider) {\n      case 'twitter':\n        result = await this.twitterProvider.handleOAuthRedirect(url, state);\n        break;\n      case 'google':\n      default:\n        result = this.googleProvider.handleOAuthRedirect(url);\n        break;\n    }\n\n    if (!result) {\n      return;\n    }\n\n    if ('error' in result) {\n      const resolvedProvider = provider ?? null;\n      window.opener?.postMessage(\n        {\n          type: 'oauth-error',\n          provider: resolvedProvider,\n          error: result.error,\n        },\n        window.location.origin,\n      );\n    } else {\n      window.opener?.postMessage(\n        {\n          type: 'oauth-response',\n          provider: result.provider,\n          ...result.result,\n        },\n        window.location.origin,\n      );\n    }\n\n    window.close();\n  }\n\n  async initialize(options: InitializeOptions): Promise<void> {\n    const initPromises: Promise<void>[] = [];\n\n    if (options.google?.webClientId) {\n      initPromises.push(\n        this.googleProvider.initialize(\n          options.google.webClientId,\n          options.google.mode,\n          options.google.hostedDomain,\n          options.google.redirectUrl,\n        ),\n      );\n    }\n\n    if (options.apple?.clientId) {\n      initPromises.push(\n        this.appleProvider.initialize(\n          options.apple.clientId,\n          options.apple.redirectUrl,\n          options.apple.useProperTokenExchange,\n        ),\n      );\n    }\n\n    if (options.facebook?.appId) {\n      initPromises.push(this.facebookProvider.initialize(options.facebook.appId, options.facebook.locale));\n    }\n\n    if (options.twitter?.clientId) {\n      initPromises.push(\n        this.twitterProvider.initialize(\n          options.twitter.clientId,\n          options.twitter.redirectUrl,\n          options.twitter.defaultScopes,\n          options.twitter.forceLogin,\n          options.twitter.audience,\n        ),\n      );\n    }\n\n    await Promise.all(initPromises);\n  }\n\n  async login<T extends LoginOptions['provider']>(\n    options: Extract<LoginOptions, { provider: T }>,\n  ): Promise<{ provider: T; result: ProviderResponseMap[T] }> {\n    switch (options.provider) {\n      case 'google':\n        return this.googleProvider.login(options.options) as Promise<{ provider: T; result: ProviderResponseMap[T] }>;\n      case 'apple':\n        return this.appleProvider.login(options.options) as Promise<{ provider: T; result: ProviderResponseMap[T] }>;\n      case 'facebook':\n        return this.facebookProvider.login(options.options as FacebookLoginOptions) as Promise<{\n          provider: T;\n          result: ProviderResponseMap[T];\n        }>;\n      case 'twitter':\n        return this.twitterProvider.login(options.options as any) as Promise<{\n          provider: T;\n          result: ProviderResponseMap[T];\n        }>;\n      default:\n        throw new Error(`Login for ${options.provider} is not implemented on web`);\n    }\n  }\n\n  async logout(options: { provider: 'apple' | 'google' | 'facebook' | 'twitter' }): Promise<void> {\n    switch (options.provider) {\n      case 'google':\n        return this.googleProvider.logout();\n      case 'apple':\n        return this.appleProvider.logout();\n      case 'facebook':\n        return this.facebookProvider.logout();\n      case 'twitter':\n        return this.twitterProvider.logout();\n      default:\n        throw new Error(`Logout for ${options.provider} is not implemented`);\n    }\n  }\n\n  async isLoggedIn(options: isLoggedInOptions): Promise<{ isLoggedIn: boolean }> {\n    switch (options.provider) {\n      case 'google':\n        return this.googleProvider.isLoggedIn();\n      case 'apple':\n        return this.appleProvider.isLoggedIn();\n      case 'facebook':\n        return this.facebookProvider.isLoggedIn();\n      case 'twitter':\n        return this.twitterProvider.isLoggedIn();\n      default:\n        throw new Error(`isLoggedIn for ${options.provider} is not implemented`);\n    }\n  }\n\n  async getAuthorizationCode(options: AuthorizationCodeOptions): Promise<AuthorizationCode> {\n    switch (options.provider) {\n      case 'google':\n        return this.googleProvider.getAuthorizationCode();\n      case 'apple':\n        return this.appleProvider.getAuthorizationCode();\n      case 'facebook':\n        return this.facebookProvider.getAuthorizationCode();\n      case 'twitter':\n        return this.twitterProvider.getAuthorizationCode();\n      default:\n        throw new Error(`getAuthorizationCode for ${options.provider} is not implemented`);\n    }\n  }\n\n  async refresh(options: LoginOptions): Promise<void> {\n    switch (options.provider) {\n      case 'google':\n        return this.googleProvider.refresh();\n      case 'apple':\n        return this.appleProvider.refresh();\n      case 'facebook':\n        return this.facebookProvider.refresh(options.options as FacebookLoginOptions);\n      case 'twitter':\n        return this.twitterProvider.refresh();\n      default:\n        throw new Error(`Refresh for ${(options as any).provider} is not implemented`);\n    }\n  }\n\n  async providerSpecificCall<T extends ProviderSpecificCall>(options: {\n    call: T;\n    options: ProviderSpecificCallOptionsMap[T];\n  }): Promise<ProviderSpecificCallResponseMap[T]> {\n    throw new Error(`Provider specific call for ${options.call} is not implemented`);\n  }\n\n  async getPluginVersion(): Promise<{ version: string }> {\n    return { version: 'web' };\n  }\n}\n"]}
+{"version":3,"file":"web.js","sourceRoot":"","sources":["../../src/web.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAE5C,OAAO,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AAgBpD,OAAO,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAC1D,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AACtD,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AACtD,OAAO,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AAExD,MAAM,OAAO,cAAe,SAAQ,SAAS;IAS3C;QACE,KAAK,EAAE,CAAC;QAER,IAAI,CAAC,cAAc,GAAG,IAAI,iBAAiB,EAAE,CAAC;QAC9C,IAAI,CAAC,aAAa,GAAG,IAAI,gBAAgB,EAAE,CAAC;QAC5C,IAAI,CAAC,gBAAgB,GAAG,IAAI,mBAAmB,EAAE,CAAC;QAClD,IAAI,CAAC,eAAe,GAAG,IAAI,kBAAkB,EAAE,CAAC;QAChD,IAAI,CAAC,cAAc,GAAG,IAAI,iBAAiB,EAAE,CAAC;QAE9C,sEAAsE;QACtE,IAAI,YAAY,CAAC,OAAO,CAAC,cAAc,CAAC,eAAe,CAAC,EAAE,CAAC;YACzD,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC;YACrC,IAAI,CAAC,mBAAmB,EAAE,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;gBACzC,OAAO,CAAC,KAAK,CAAC,iCAAiC,EAAE,KAAK,CAAC,CAAC;gBACxD,MAAM,CAAC,KAAK,EAAE,CAAC;YACjB,CAAC,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,mBAAmB;;QAC/B,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAC1C,MAAM,QAAQ,GAAG,YAAY,CAAC,OAAO,CAAC,cAAc,CAAC,eAAe,CAAC,CAAC;QACtE,IAAI,QAAQ,GAAkB,IAAI,CAAC;QACnC,IAAI,KAAyB,CAAC;QAE9B,IAAI,QAAQ,EAAE,CAAC;YACb,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;gBACpC,QAAQ,GAAG,MAAA,MAAM,CAAC,QAAQ,mCAAI,IAAI,CAAC;gBACnC,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC;YACvB,CAAC;YAAC,WAAM,CAAC;gBACP,QAAQ,GAAG,QAAQ,KAAK,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC;YACnD,CAAC;QACH,CAAC;QAED,IAAI,MAAM,GAA2C,IAAI,CAAC;QAE1D,QAAQ,QAAQ,EAAE,CAAC;YACjB,KAAK,SAAS;gBACZ,MAAM,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,mBAAmB,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;gBACpE,MAAM;YACR,KAAK,QAAQ;gBACX,MAAM,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,mBAAmB,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;gBACnE,MAAM;YACR,KAAK,QAAQ,CAAC;YACd;gBACE,MAAM,GAAG,IAAI,CAAC,cAAc,CAAC,mBAAmB,CAAC,GAAG,CAAC,CAAC;gBACtD,MAAM;QACV,CAAC;QAED,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO;QACT,CAAC;QAED,IAAI,OAAO,IAAI,MAAM,EAAE,CAAC;YACtB,MAAM,gBAAgB,GAAG,QAAQ,aAAR,QAAQ,cAAR,QAAQ,GAAI,IAAI,CAAC;YAC1C,MAAA,MAAM,CAAC,MAAM,0CAAE,WAAW,CACxB;gBACE,IAAI,EAAE,aAAa;gBACnB,QAAQ,EAAE,gBAAgB;gBAC1B,KAAK,EAAE,MAAM,CAAC,KAAK;aACpB,EACD,MAAM,CAAC,QAAQ,CAAC,MAAM,CACvB,CAAC;QACJ,CAAC;aAAM,CAAC;YACN,MAAA,MAAM,CAAC,MAAM,0CAAE,WAAW,iBAEtB,IAAI,EAAE,gBAAgB,EACtB,QAAQ,EAAE,MAAM,CAAC,QAAQ,IACtB,MAAM,CAAC,MAAM,GAElB,MAAM,CAAC,QAAQ,CAAC,MAAM,CACvB,CAAC;QACJ,CAAC;QAED,MAAM,CAAC,KAAK,EAAE,CAAC;IACjB,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,OAA0B;;QACzC,MAAM,YAAY,GAAoB,EAAE,CAAC;QAEzC,IAAI,MAAA,OAAO,CAAC,MAAM,0CAAE,WAAW,EAAE,CAAC;YAChC,YAAY,CAAC,IAAI,CACf,IAAI,CAAC,cAAc,CAAC,UAAU,CAC5B,OAAO,CAAC,MAAM,CAAC,WAAW,EAC1B,OAAO,CAAC,MAAM,CAAC,IAAI,EACnB,OAAO,CAAC,MAAM,CAAC,YAAY,EAC3B,OAAO,CAAC,MAAM,CAAC,WAAW,CAC3B,CACF,CAAC;QACJ,CAAC;QAED,IAAI,MAAA,OAAO,CAAC,KAAK,0CAAE,QAAQ,EAAE,CAAC;YAC5B,YAAY,CAAC,IAAI,CACf,IAAI,CAAC,aAAa,CAAC,UAAU,CAC3B,OAAO,CAAC,KAAK,CAAC,QAAQ,EACtB,OAAO,CAAC,KAAK,CAAC,WAAW,EACzB,OAAO,CAAC,KAAK,CAAC,sBAAsB,CACrC,CACF,CAAC;QACJ,CAAC;QAED,IAAI,MAAA,OAAO,CAAC,QAAQ,0CAAE,KAAK,EAAE,CAAC;YAC5B,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,UAAU,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;QACvG,CAAC;QAED,IAAI,MAAA,OAAO,CAAC,OAAO,0CAAE,QAAQ,EAAE,CAAC;YAC9B,YAAY,CAAC,IAAI,CACf,IAAI,CAAC,eAAe,CAAC,UAAU,CAC7B,OAAO,CAAC,OAAO,CAAC,QAAQ,EACxB,OAAO,CAAC,OAAO,CAAC,WAAW,EAC3B,OAAO,CAAC,OAAO,CAAC,aAAa,EAC7B,OAAO,CAAC,OAAO,CAAC,UAAU,EAC1B,OAAO,CAAC,OAAO,CAAC,QAAQ,CACzB,CACF,CAAC;QACJ,CAAC;QAED,IAAI,OAAO,CAAC,MAAM,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC7D,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,mBAAmB,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;QAC7E,CAAC;QAED,MAAM,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;IAClC,CAAC;IAED,KAAK,CAAC,KAAK,CACT,OAA+C;QAE/C,QAAQ,OAAO,CAAC,QAAQ,EAAE,CAAC;YACzB,KAAK,QAAQ;gBACX,OAAO,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,OAAO,CAAC,OAAc,CAGrD,CAAC;YACL,KAAK,OAAO;gBACV,OAAO,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,OAAO,CAAC,OAAc,CAGpD,CAAC;YACL,KAAK,UAAU;gBACb,OAAO,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,OAAO,CAAC,OAA+B,CAGxE,CAAC;YACL,KAAK,SAAS;gBACZ,OAAO,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,OAAO,CAAC,OAAc,CAGtD,CAAC;YACL,KAAK,QAAQ;gBACX,OAAO,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,OAAO,CAAC,OAA6B,CAGpE,CAAC;YACL;gBACE,MAAM,IAAI,KAAK,CAAC,aAAa,OAAO,CAAC,QAAQ,4BAA4B,CAAC,CAAC;QAC/E,CAAC;IACH,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,OAGZ;QACC,QAAQ,OAAO,CAAC,QAAQ,EAAE,CAAC;YACzB,KAAK,QAAQ;gBACX,OAAO,IAAI,CAAC,cAAc,CAAC,MAAM,EAAE,CAAC;YACtC,KAAK,OAAO;gBACV,OAAO,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE,CAAC;YACrC,KAAK,UAAU;gBACb,OAAO,IAAI,CAAC,gBAAgB,CAAC,MAAM,EAAE,CAAC;YACxC,KAAK,SAAS;gBACZ,OAAO,IAAI,CAAC,eAAe,CAAC,MAAM,EAAE,CAAC;YACvC,KAAK,QAAQ;gBACX,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC;oBACxB,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;gBAC9D,CAAC;gBACD,OAAO,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;YACxD;gBACE,MAAM,IAAI,KAAK,CAAC,cAAc,OAAO,CAAC,QAAQ,qBAAqB,CAAC,CAAC;QACzE,CAAC;IACH,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,OAA0B;QACzC,QAAQ,OAAO,CAAC,QAAQ,EAAE,CAAC;YACzB,KAAK,QAAQ;gBACX,OAAO,IAAI,CAAC,cAAc,CAAC,UAAU,EAAE,CAAC;YAC1C,KAAK,OAAO;gBACV,OAAO,IAAI,CAAC,aAAa,CAAC,UAAU,EAAE,CAAC;YACzC,KAAK,UAAU;gBACb,OAAO,IAAI,CAAC,gBAAgB,CAAC,UAAU,EAAE,CAAC;YAC5C,KAAK,SAAS;gBACZ,OAAO,IAAI,CAAC,eAAe,CAAC,UAAU,EAAE,CAAC;YAC3C,KAAK,QAAQ;gBACX,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC;oBACxB,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;gBAClE,CAAC;gBACD,OAAO,IAAI,CAAC,cAAc,CAAC,UAAU,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;YAC5D;gBACE,MAAM,IAAI,KAAK,CAAC,kBAAkB,OAAO,CAAC,QAAQ,qBAAqB,CAAC,CAAC;QAC7E,CAAC;IACH,CAAC;IAED,KAAK,CAAC,oBAAoB,CAAC,OAAiC;QAC1D,QAAQ,OAAO,CAAC,QAAQ,EAAE,CAAC;YACzB,KAAK,QAAQ;gBACX,OAAO,IAAI,CAAC,cAAc,CAAC,oBAAoB,EAAE,CAAC;YACpD,KAAK,OAAO;gBACV,OAAO,IAAI,CAAC,aAAa,CAAC,oBAAoB,EAAE,CAAC;YACnD,KAAK,UAAU;gBACb,OAAO,IAAI,CAAC,gBAAgB,CAAC,oBAAoB,EAAE,CAAC;YACtD,KAAK,SAAS;gBACZ,OAAO,IAAI,CAAC,eAAe,CAAC,oBAAoB,EAAE,CAAC;YACrD,KAAK,QAAQ;gBACX,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC;oBACxB,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;gBAC5E,CAAC;gBACD,OAAO,IAAI,CAAC,cAAc,CAAC,oBAAoB,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;YACtE;gBACE,MAAM,IAAI,KAAK,CAAC,4BAA4B,OAAO,CAAC,QAAQ,qBAAqB,CAAC,CAAC;QACvF,CAAC;IACH,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,OAAqB;QACjC,QAAQ,OAAO,CAAC,QAAQ,EAAE,CAAC;YACzB,KAAK,QAAQ;gBACX,OAAO,IAAI,CAAC,cAAc,CAAC,OAAO,EAAE,CAAC;YACvC,KAAK,OAAO;gBACV,OAAO,IAAI,CAAC,aAAa,CAAC,OAAO,EAAE,CAAC;YACtC,KAAK,UAAU;gBACb,OAAO,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,OAAO,CAAC,OAA+B,CAAC,CAAC;YAChF,KAAK,SAAS;gBACZ,OAAO,IAAI,CAAC,eAAe,CAAC,OAAO,EAAE,CAAC;YACxC,KAAK,QAAQ,CAAC,CAAC,CAAC;gBACd,MAAM,aAAa,GAAG,OAAO,CAAC,OAA6B,CAAC;gBAC5D,IAAI,CAAC,CAAA,aAAa,aAAb,aAAa,uBAAb,aAAa,CAAE,UAAU,CAAA,EAAE,CAAC;oBAC/B,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;gBAC/D,CAAC;gBACD,OAAO,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,aAAa,CAAC,UAAU,CAAC,CAAC;YAC/D,CAAC;YACD;gBACE,MAAM,IAAI,KAAK,CAAC,eAAgB,OAAe,CAAC,QAAQ,qBAAqB,CAAC,CAAC;QACnF,CAAC;IACH,CAAC;IAED,KAAK,CAAC,oBAAoB,CAAiC,OAG1D;QACC,MAAM,IAAI,KAAK,CAAC,8BAA8B,OAAO,CAAC,IAAI,qBAAqB,CAAC,CAAC;IACnF,CAAC;IAED,KAAK,CAAC,gBAAgB;QACpB,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAC5B,CAAC;;AArQuB,8BAAe,GAAG,4BAA4B,CAAC","sourcesContent":["import { WebPlugin } from '@capacitor/core';\n\nimport { AppleSocialLogin } from './apple-provider';\nimport type {\n  SocialLoginPlugin,\n  InitializeOptions,\n  LoginOptions,\n  AuthorizationCode,\n  AuthorizationCodeOptions,\n  isLoggedInOptions,\n  ProviderResponseMap,\n  FacebookLoginOptions,\n  ProviderSpecificCall,\n  ProviderSpecificCallOptionsMap,\n  ProviderSpecificCallResponseMap,\n  LoginResult,\n  OAuth2LoginOptions,\n} from './definitions';\nimport { FacebookSocialLogin } from './facebook-provider';\nimport { GoogleSocialLogin } from './google-provider';\nimport { OAuth2SocialLogin } from './oauth2-provider';\nimport { TwitterSocialLogin } from './twitter-provider';\n\nexport class SocialLoginWeb extends WebPlugin implements SocialLoginPlugin {\n  private static readonly OAUTH_STATE_KEY = 'social_login_oauth_pending';\n\n  private googleProvider: GoogleSocialLogin;\n  private appleProvider: AppleSocialLogin;\n  private facebookProvider: FacebookSocialLogin;\n  private twitterProvider: TwitterSocialLogin;\n  private oauth2Provider: OAuth2SocialLogin;\n\n  constructor() {\n    super();\n\n    this.googleProvider = new GoogleSocialLogin();\n    this.appleProvider = new AppleSocialLogin();\n    this.facebookProvider = new FacebookSocialLogin();\n    this.twitterProvider = new TwitterSocialLogin();\n    this.oauth2Provider = new OAuth2SocialLogin();\n\n    // Set up listener for OAuth redirects if we have a pending OAuth flow\n    if (localStorage.getItem(SocialLoginWeb.OAUTH_STATE_KEY)) {\n      console.log('OAUTH_STATE_KEY found');\n      this.handleOAuthRedirect().catch((error) => {\n        console.error('Failed to finish OAuth redirect', error);\n        window.close();\n      });\n    }\n  }\n\n  private async handleOAuthRedirect(): Promise<void> {\n    const url = new URL(window.location.href);\n    const stateRaw = localStorage.getItem(SocialLoginWeb.OAUTH_STATE_KEY);\n    let provider: string | null = null;\n    let state: string | undefined;\n\n    if (stateRaw) {\n      try {\n        const parsed = JSON.parse(stateRaw);\n        provider = parsed.provider ?? null;\n        state = parsed.state;\n      } catch {\n        provider = stateRaw === 'true' ? 'google' : null;\n      }\n    }\n\n    let result: LoginResult | { error: string } | null = null;\n\n    switch (provider) {\n      case 'twitter':\n        result = await this.twitterProvider.handleOAuthRedirect(url, state);\n        break;\n      case 'oauth2':\n        result = await this.oauth2Provider.handleOAuthRedirect(url, state);\n        break;\n      case 'google':\n      default:\n        result = this.googleProvider.handleOAuthRedirect(url);\n        break;\n    }\n\n    if (!result) {\n      return;\n    }\n\n    if ('error' in result) {\n      const resolvedProvider = provider ?? null;\n      window.opener?.postMessage(\n        {\n          type: 'oauth-error',\n          provider: resolvedProvider,\n          error: result.error,\n        },\n        window.location.origin,\n      );\n    } else {\n      window.opener?.postMessage(\n        {\n          type: 'oauth-response',\n          provider: result.provider,\n          ...result.result,\n        },\n        window.location.origin,\n      );\n    }\n\n    window.close();\n  }\n\n  async initialize(options: InitializeOptions): Promise<void> {\n    const initPromises: Promise<void>[] = [];\n\n    if (options.google?.webClientId) {\n      initPromises.push(\n        this.googleProvider.initialize(\n          options.google.webClientId,\n          options.google.mode,\n          options.google.hostedDomain,\n          options.google.redirectUrl,\n        ),\n      );\n    }\n\n    if (options.apple?.clientId) {\n      initPromises.push(\n        this.appleProvider.initialize(\n          options.apple.clientId,\n          options.apple.redirectUrl,\n          options.apple.useProperTokenExchange,\n        ),\n      );\n    }\n\n    if (options.facebook?.appId) {\n      initPromises.push(this.facebookProvider.initialize(options.facebook.appId, options.facebook.locale));\n    }\n\n    if (options.twitter?.clientId) {\n      initPromises.push(\n        this.twitterProvider.initialize(\n          options.twitter.clientId,\n          options.twitter.redirectUrl,\n          options.twitter.defaultScopes,\n          options.twitter.forceLogin,\n          options.twitter.audience,\n        ),\n      );\n    }\n\n    if (options.oauth2 && Object.keys(options.oauth2).length > 0) {\n      initPromises.push(this.oauth2Provider.initializeProviders(options.oauth2));\n    }\n\n    await Promise.all(initPromises);\n  }\n\n  async login<T extends LoginOptions['provider']>(\n    options: Extract<LoginOptions, { provider: T }>,\n  ): Promise<{ provider: T; result: ProviderResponseMap[T] }> {\n    switch (options.provider) {\n      case 'google':\n        return this.googleProvider.login(options.options as any) as Promise<{\n          provider: T;\n          result: ProviderResponseMap[T];\n        }>;\n      case 'apple':\n        return this.appleProvider.login(options.options as any) as Promise<{\n          provider: T;\n          result: ProviderResponseMap[T];\n        }>;\n      case 'facebook':\n        return this.facebookProvider.login(options.options as FacebookLoginOptions) as Promise<{\n          provider: T;\n          result: ProviderResponseMap[T];\n        }>;\n      case 'twitter':\n        return this.twitterProvider.login(options.options as any) as Promise<{\n          provider: T;\n          result: ProviderResponseMap[T];\n        }>;\n      case 'oauth2':\n        return this.oauth2Provider.login(options.options as OAuth2LoginOptions) as Promise<{\n          provider: T;\n          result: ProviderResponseMap[T];\n        }>;\n      default:\n        throw new Error(`Login for ${options.provider} is not implemented on web`);\n    }\n  }\n\n  async logout(options: {\n    provider: 'apple' | 'google' | 'facebook' | 'twitter' | 'oauth2';\n    providerId?: string;\n  }): Promise<void> {\n    switch (options.provider) {\n      case 'google':\n        return this.googleProvider.logout();\n      case 'apple':\n        return this.appleProvider.logout();\n      case 'facebook':\n        return this.facebookProvider.logout();\n      case 'twitter':\n        return this.twitterProvider.logout();\n      case 'oauth2':\n        if (!options.providerId) {\n          throw new Error('providerId is required for oauth2 logout');\n        }\n        return this.oauth2Provider.logout(options.providerId);\n      default:\n        throw new Error(`Logout for ${options.provider} is not implemented`);\n    }\n  }\n\n  async isLoggedIn(options: isLoggedInOptions): Promise<{ isLoggedIn: boolean }> {\n    switch (options.provider) {\n      case 'google':\n        return this.googleProvider.isLoggedIn();\n      case 'apple':\n        return this.appleProvider.isLoggedIn();\n      case 'facebook':\n        return this.facebookProvider.isLoggedIn();\n      case 'twitter':\n        return this.twitterProvider.isLoggedIn();\n      case 'oauth2':\n        if (!options.providerId) {\n          throw new Error('providerId is required for oauth2 isLoggedIn');\n        }\n        return this.oauth2Provider.isLoggedIn(options.providerId);\n      default:\n        throw new Error(`isLoggedIn for ${options.provider} is not implemented`);\n    }\n  }\n\n  async getAuthorizationCode(options: AuthorizationCodeOptions): Promise<AuthorizationCode> {\n    switch (options.provider) {\n      case 'google':\n        return this.googleProvider.getAuthorizationCode();\n      case 'apple':\n        return this.appleProvider.getAuthorizationCode();\n      case 'facebook':\n        return this.facebookProvider.getAuthorizationCode();\n      case 'twitter':\n        return this.twitterProvider.getAuthorizationCode();\n      case 'oauth2':\n        if (!options.providerId) {\n          throw new Error('providerId is required for oauth2 getAuthorizationCode');\n        }\n        return this.oauth2Provider.getAuthorizationCode(options.providerId);\n      default:\n        throw new Error(`getAuthorizationCode for ${options.provider} is not implemented`);\n    }\n  }\n\n  async refresh(options: LoginOptions): Promise<void> {\n    switch (options.provider) {\n      case 'google':\n        return this.googleProvider.refresh();\n      case 'apple':\n        return this.appleProvider.refresh();\n      case 'facebook':\n        return this.facebookProvider.refresh(options.options as FacebookLoginOptions);\n      case 'twitter':\n        return this.twitterProvider.refresh();\n      case 'oauth2': {\n        const oauth2Options = options.options as OAuth2LoginOptions;\n        if (!oauth2Options?.providerId) {\n          throw new Error('providerId is required for oauth2 refresh');\n        }\n        return this.oauth2Provider.refresh(oauth2Options.providerId);\n      }\n      default:\n        throw new Error(`Refresh for ${(options as any).provider} is not implemented`);\n    }\n  }\n\n  async providerSpecificCall<T extends ProviderSpecificCall>(options: {\n    call: T;\n    options: ProviderSpecificCallOptionsMap[T];\n  }): Promise<ProviderSpecificCallResponseMap[T]> {\n    throw new Error(`Provider specific call for ${options.call} is not implemented`);\n  }\n\n  async getPluginVersion(): Promise<{ version: string }> {\n    return { version: 'web' };\n  }\n}\n"]}

package/dist/plugin.cjs.js

@@ -612,6 +612,449 @@ class GoogleSocialLogin extends BaseSocialLogin {
     }
 }
 
+var __rest$1 = (undefined && undefined.__rest) || function (s, e) {
+    var t = {};
+    for (var p in s) if (Object.prototype.hasOwnProperty.call(s, p) && e.indexOf(p) < 0)
+        t[p] = s[p];
+    if (s != null && typeof Object.getOwnPropertySymbols === "function")
+        for (var i = 0, p = Object.getOwnPropertySymbols(s); i < p.length; i++) {
+            if (e.indexOf(p[i]) < 0 && Object.prototype.propertyIsEnumerable.call(s, p[i]))
+                t[p[i]] = s[p[i]];
+        }
+    return t;
+};
+/**
+ * OAuth2 Social Login Manager
+ * Supports multiple OAuth2 provider configurations
+ */
+class OAuth2SocialLogin extends BaseSocialLogin {
+    constructor() {
+        super(...arguments);
+        this.providers = new Map();
+        this.TOKENS_KEY_PREFIX = 'capgo_social_login_oauth2_tokens_';
+        this.STATE_PREFIX = 'capgo_social_login_oauth2_state_';
+    }
+    /**
+     * Initialize multiple OAuth2 providers
+     */
+    async initializeProviders(configs) {
+        var _a, _b, _c, _d;
+        for (const [providerId, config] of Object.entries(configs)) {
+            if (!config.appId || !config.authorizationBaseUrl || !config.redirectUrl) {
+                throw new Error(`OAuth2 provider '${providerId}' requires appId, authorizationBaseUrl, and redirectUrl`);
+            }
+            const internalConfig = Object.assign(Object.assign({}, config), { responseType: (_a = config.responseType) !== null && _a !== void 0 ? _a : 'code', pkceEnabled: (_b = config.pkceEnabled) !== null && _b !== void 0 ? _b : true, scope: (_c = config.scope) !== null && _c !== void 0 ? _c : '', logsEnabled: (_d = config.logsEnabled) !== null && _d !== void 0 ? _d : false });
+            this.providers.set(providerId, internalConfig);
+            if (internalConfig.logsEnabled) {
+                console.log(`[OAuth2:${providerId}] Initialized with config:`, {
+                    appId: config.appId,
+                    authorizationBaseUrl: config.authorizationBaseUrl,
+                    redirectUrl: config.redirectUrl,
+                    responseType: internalConfig.responseType,
+                    pkceEnabled: internalConfig.pkceEnabled,
+                });
+            }
+        }
+    }
+    getProvider(providerId) {
+        const config = this.providers.get(providerId);
+        if (!config) {
+            throw new Error(`OAuth2 provider '${providerId}' not configured. Call initialize() first.`);
+        }
+        return config;
+    }
+    getTokensKey(providerId) {
+        return `${this.TOKENS_KEY_PREFIX}${providerId}`;
+    }
+    async login(options) {
+        var _a, _b, _c, _d;
+        const { providerId } = options;
+        const config = this.getProvider(providerId);
+        const redirectUri = (_a = options.redirectUrl) !== null && _a !== void 0 ? _a : config.redirectUrl;
+        const scope = (_b = options.scope) !== null && _b !== void 0 ? _b : config.scope;
+        const state = (_c = options.state) !== null && _c !== void 0 ? _c : this.generateState();
+        const codeVerifier = (_d = options.codeVerifier) !== null && _d !== void 0 ? _d : this.generateCodeVerifier();
+        // Build authorization URL
+        const params = new URLSearchParams({
+            response_type: config.responseType,
+            client_id: config.appId,
+            redirect_uri: redirectUri,
+            state,
+        });
+        if (scope) {
+            params.set('scope', scope);
+        }
+        // Add PKCE for code flow
+        if (config.responseType === 'code' && config.pkceEnabled) {
+            const codeChallenge = await this.generateCodeChallenge(codeVerifier);
+            params.set('code_challenge', codeChallenge);
+            params.set('code_challenge_method', 'S256');
+        }
+        // Add additional parameters from config
+        if (config.additionalParameters) {
+            for (const [key, value] of Object.entries(config.additionalParameters)) {
+                params.set(key, value);
+            }
+        }
+        // Add additional parameters from login options
+        if (options.additionalParameters) {
+            for (const [key, value] of Object.entries(options.additionalParameters)) {
+                params.set(key, value);
+            }
+        }
+        // Store pending login state
+        this.persistPendingLogin(state, {
+            providerId,
+            codeVerifier,
+            redirectUri,
+            scope,
+        });
+        localStorage.setItem(BaseSocialLogin.OAUTH_STATE_KEY, JSON.stringify({ provider: 'oauth2', providerId, state }));
+        const authUrl = `${config.authorizationBaseUrl}?${params.toString()}`;
+        if (config.logsEnabled) {
+            console.log(`[OAuth2:${providerId}] Opening authorization URL:`, authUrl);
+        }
+        // Open popup window
+        const width = 500;
+        const height = 650;
+        const left = window.screenX + (window.outerWidth - width) / 2;
+        const top = window.screenY + (window.outerHeight - height) / 2;
+        const popup = window.open(authUrl, 'OAuth2Login', `width=${width},height=${height},left=${left},top=${top},popup=1`);
+        return new Promise((resolve, reject) => {
+            if (!popup) {
+                reject(new Error('Unable to open login window. Please allow popups.'));
+                return;
+            }
+            const cleanup = (messageHandler, timeoutHandle, intervalHandle) => {
+                window.removeEventListener('message', messageHandler);
+                clearTimeout(timeoutHandle);
+                clearInterval(intervalHandle);
+            };
+            const messageHandler = (event) => {
+                var _a, _b, _c, _d, _e;
+                if (event.origin !== window.location.origin) {
+                    return;
+                }
+                if (((_a = event.data) === null || _a === void 0 ? void 0 : _a.type) === 'oauth-response') {
+                    if (((_b = event.data) === null || _b === void 0 ? void 0 : _b.provider) && event.data.provider !== 'oauth2') {
+                        return;
+                    }
+                    // Check providerId matches if present
+                    if (((_c = event.data) === null || _c === void 0 ? void 0 : _c.providerId) && event.data.providerId !== providerId) {
+                        return;
+                    }
+                    cleanup(messageHandler, timeoutHandle, popupClosedInterval);
+                    // eslint-disable-next-line @typescript-eslint/no-unused-vars
+                    const _f = event.data, { provider: _ignoredProvider, type: _ignoredType } = _f, payload = __rest$1(_f, ["provider", "type"]);
+                    resolve({
+                        provider: 'oauth2',
+                        result: payload,
+                    });
+                }
+                else if (((_d = event.data) === null || _d === void 0 ? void 0 : _d.type) === 'oauth-error') {
+                    if (((_e = event.data) === null || _e === void 0 ? void 0 : _e.provider) && event.data.provider !== 'oauth2') {
+                        return;
+                    }
+                    cleanup(messageHandler, timeoutHandle, popupClosedInterval);
+                    reject(new Error(event.data.error || 'OAuth2 login was cancelled.'));
+                }
+            };
+            window.addEventListener('message', messageHandler);
+            const timeoutHandle = window.setTimeout(() => {
+                window.removeEventListener('message', messageHandler);
+                popup.close();
+                reject(new Error('OAuth2 login timed out.'));
+            }, 300000);
+            const popupClosedInterval = window.setInterval(() => {
+                if (popup.closed) {
+                    window.removeEventListener('message', messageHandler);
+                    clearInterval(popupClosedInterval);
+                    clearTimeout(timeoutHandle);
+                    reject(new Error('OAuth2 login window was closed.'));
+                }
+            }, 1000);
+        });
+    }
+    async logout(providerId) {
+        const config = this.providers.get(providerId);
+        localStorage.removeItem(this.getTokensKey(providerId));
+        // If logout URL is configured, redirect to it
+        if (config === null || config === void 0 ? void 0 : config.logoutUrl) {
+            window.open(config.logoutUrl, '_blank');
+        }
+    }
+    async isLoggedIn(providerId) {
+        const tokens = this.getStoredTokens(providerId);
+        if (!tokens) {
+            return { isLoggedIn: false };
+        }
+        const isValid = tokens.expiresAt > Date.now();
+        if (!isValid) {
+            localStorage.removeItem(this.getTokensKey(providerId));
+        }
+        return { isLoggedIn: isValid };
+    }
+    async getAuthorizationCode(providerId) {
+        const tokens = this.getStoredTokens(providerId);
+        if (!tokens) {
+            throw new Error(`OAuth2 access token is not available for provider '${providerId}'.`);
+        }
+        return {
+            accessToken: tokens.accessToken,
+            jwt: tokens.idToken,
+        };
+    }
+    async refresh(providerId) {
+        const tokens = this.getStoredTokens(providerId);
+        if (!(tokens === null || tokens === void 0 ? void 0 : tokens.refreshToken)) {
+            throw new Error(`No OAuth2 refresh token is available for provider '${providerId}'. Include offline_access scope to receive one.`);
+        }
+        const config = this.getProvider(providerId);
+        if (!config.accessTokenEndpoint) {
+            throw new Error(`No accessTokenEndpoint configured for provider '${providerId}'.`);
+        }
+        await this.refreshWithRefreshToken(providerId, tokens.refreshToken);
+    }
+    async handleOAuthRedirect(url, expectedState) {
+        var _a, _b, _c, _d, _e;
+        // Check both query params and hash fragment
+        const params = new URLSearchParams(url.search);
+        const hashParams = new URLSearchParams(url.hash.slice(1));
+        // Merge params, hash takes priority (for implicit flow)
+        hashParams.forEach((value, key) => {
+            params.set(key, value);
+        });
+        const stateFromUrl = expectedState !== null && expectedState !== void 0 ? expectedState : params.get('state');
+        if (!stateFromUrl) {
+            return null;
+        }
+        const pending = this.consumePendingLogin(stateFromUrl);
+        if (!pending) {
+            localStorage.removeItem(BaseSocialLogin.OAUTH_STATE_KEY);
+            return { error: 'OAuth2 login session expired or state mismatch.' };
+        }
+        const { providerId } = pending;
+        const config = this.providers.get(providerId);
+        if (!config) {
+            localStorage.removeItem(BaseSocialLogin.OAUTH_STATE_KEY);
+            return { error: `OAuth2 provider '${providerId}' configuration not found.` };
+        }
+        const error = params.get('error');
+        if (error) {
+            localStorage.removeItem(BaseSocialLogin.OAUTH_STATE_KEY);
+            return { error: params.get('error_description') || error };
+        }
+        try {
+            let tokenResponse;
+            // Check response type
+            if (params.has('code')) {
+                // Authorization code flow
+                const code = params.get('code');
+                if (!code) {
+                    localStorage.removeItem(BaseSocialLogin.OAUTH_STATE_KEY);
+                    return { error: 'OAuth2 authorization code missing from redirect.' };
+                }
+                tokenResponse = await this.exchangeAuthorizationCode(providerId, code, pending);
+            }
+            else if (params.has('access_token')) {
+                // Implicit flow
+                tokenResponse = {
+                    access_token: params.get('access_token'),
+                    token_type: params.get('token_type') || 'bearer',
+                    expires_in: params.has('expires_in') ? parseInt(params.get('expires_in'), 10) : undefined,
+                    scope: params.get('scope') || undefined,
+                    id_token: params.get('id_token') || undefined,
+                };
+            }
+            else {
+                localStorage.removeItem(BaseSocialLogin.OAUTH_STATE_KEY);
+                return { error: 'No authorization code or access token in redirect.' };
+            }
+            const expiresAt = tokenResponse.expires_in ? Date.now() + tokenResponse.expires_in * 1000 : Date.now() + 3600000;
+            const scopeArray = (_b = (_a = tokenResponse.scope) === null || _a === void 0 ? void 0 : _a.split(' ').filter(Boolean)) !== null && _b !== void 0 ? _b : [];
+            // Fetch resource data if configured
+            let resourceData = null;
+            if (config.resourceUrl) {
+                resourceData = await this.fetchResource(providerId, tokenResponse.access_token);
+            }
+            this.persistTokens(providerId, {
+                accessToken: tokenResponse.access_token,
+                refreshToken: tokenResponse.refresh_token,
+                idToken: tokenResponse.id_token,
+                expiresAt,
+                scope: scopeArray,
+                tokenType: tokenResponse.token_type,
+            });
+            return {
+                provider: 'oauth2',
+                result: {
+                    providerId,
+                    accessToken: {
+                        token: tokenResponse.access_token,
+                        tokenType: tokenResponse.token_type,
+                        expires: new Date(expiresAt).toISOString(),
+                        refreshToken: tokenResponse.refresh_token,
+                    },
+                    idToken: (_c = tokenResponse.id_token) !== null && _c !== void 0 ? _c : null,
+                    refreshToken: (_d = tokenResponse.refresh_token) !== null && _d !== void 0 ? _d : null,
+                    resourceData,
+                    scope: scopeArray,
+                    tokenType: tokenResponse.token_type,
+                    expiresIn: (_e = tokenResponse.expires_in) !== null && _e !== void 0 ? _e : null,
+                },
+            };
+        }
+        catch (err) {
+            if (err instanceof Error) {
+                return { error: err.message };
+            }
+            return { error: 'OAuth2 login failed unexpectedly.' };
+        }
+        finally {
+            localStorage.removeItem(BaseSocialLogin.OAUTH_STATE_KEY);
+        }
+    }
+    async exchangeAuthorizationCode(providerId, code, pending) {
+        const config = this.getProvider(providerId);
+        if (!config.accessTokenEndpoint) {
+            throw new Error(`No accessTokenEndpoint configured for provider '${providerId}'.`);
+        }
+        const params = new URLSearchParams({
+            grant_type: 'authorization_code',
+            client_id: config.appId,
+            code,
+            redirect_uri: pending.redirectUri,
+        });
+        if (config.pkceEnabled) {
+            params.set('code_verifier', pending.codeVerifier);
+        }
+        if (config.logsEnabled) {
+            console.log(`[OAuth2:${providerId}] Exchanging code at:`, config.accessTokenEndpoint);
+        }
+        const response = await fetch(config.accessTokenEndpoint, {
+            method: 'POST',
+            headers: {
+                'Content-Type': 'application/x-www-form-urlencoded',
+            },
+            body: params.toString(),
+        });
+        if (!response.ok) {
+            const text = await response.text();
+            throw new Error(`OAuth2 token exchange failed (${response.status}): ${text}`);
+        }
+        return (await response.json());
+    }
+    async refreshWithRefreshToken(providerId, refreshToken) {
+        var _a, _b, _c;
+        const config = this.getProvider(providerId);
+        if (!config.accessTokenEndpoint) {
+            throw new Error(`No accessTokenEndpoint configured for provider '${providerId}'.`);
+        }
+        const params = new URLSearchParams({
+            grant_type: 'refresh_token',
+            refresh_token: refreshToken,
+            client_id: config.appId,
+        });
+        const response = await fetch(config.accessTokenEndpoint, {
+            method: 'POST',
+            headers: {
+                'Content-Type': 'application/x-www-form-urlencoded',
+            },
+            body: params.toString(),
+        });
+        if (!response.ok) {
+            const text = await response.text();
+            throw new Error(`OAuth2 refresh failed (${response.status}): ${text}`);
+        }
+        const tokens = (await response.json());
+        const expiresAt = tokens.expires_in ? Date.now() + tokens.expires_in * 1000 : Date.now() + 3600000;
+        const scopeArray = (_b = (_a = tokens.scope) === null || _a === void 0 ? void 0 : _a.split(' ').filter(Boolean)) !== null && _b !== void 0 ? _b : [];
+        this.persistTokens(providerId, {
+            accessToken: tokens.access_token,
+            refreshToken: (_c = tokens.refresh_token) !== null && _c !== void 0 ? _c : refreshToken,
+            idToken: tokens.id_token,
+            expiresAt,
+            scope: scopeArray,
+            tokenType: tokens.token_type,
+        });
+    }
+    async fetchResource(providerId, accessToken) {
+        const config = this.getProvider(providerId);
+        if (!config.resourceUrl) {
+            throw new Error(`No resourceUrl configured for provider '${providerId}'.`);
+        }
+        const headers = {
+            Authorization: `Bearer ${accessToken}`,
+        };
+        if (config.additionalResourceHeaders) {
+            Object.assign(headers, config.additionalResourceHeaders);
+        }
+        const response = await fetch(config.resourceUrl, {
+            headers,
+        });
+        if (!response.ok) {
+            const text = await response.text();
+            throw new Error(`Unable to fetch OAuth2 resource (${response.status}): ${text}`);
+        }
+        return (await response.json());
+    }
+    persistTokens(providerId, tokens) {
+        localStorage.setItem(this.getTokensKey(providerId), JSON.stringify(tokens));
+    }
+    getStoredTokens(providerId) {
+        const raw = localStorage.getItem(this.getTokensKey(providerId));
+        if (!raw) {
+            return null;
+        }
+        try {
+            return JSON.parse(raw);
+        }
+        catch (err) {
+            console.warn(`Failed to parse stored OAuth2 tokens for provider '${providerId}'`, err);
+            return null;
+        }
+    }
+    persistPendingLogin(state, payload) {
+        localStorage.setItem(`${this.STATE_PREFIX}${state}`, JSON.stringify(payload));
+    }
+    consumePendingLogin(state) {
+        const key = `${this.STATE_PREFIX}${state}`;
+        const raw = localStorage.getItem(key);
+        localStorage.removeItem(key);
+        if (!raw) {
+            return null;
+        }
+        try {
+            return JSON.parse(raw);
+        }
+        catch (err) {
+            console.warn('Failed to parse pending OAuth2 login payload', err);
+            return null;
+        }
+    }
+    generateState() {
+        return [...crypto.getRandomValues(new Uint8Array(16))].map((b) => b.toString(16).padStart(2, '0')).join('');
+    }
+    generateCodeVerifier() {
+        const array = new Uint8Array(64);
+        crypto.getRandomValues(array);
+        return Array.from(array)
+            .map((b) => 'abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789-._~'[b % 66])
+            .join('');
+    }
+    async generateCodeChallenge(codeVerifier) {
+        const encoder = new TextEncoder();
+        const data = encoder.encode(codeVerifier);
+        const digest = await crypto.subtle.digest('SHA-256', data);
+        return this.base64UrlEncode(new Uint8Array(digest));
+    }
+    base64UrlEncode(buffer) {
+        let binary = '';
+        buffer.forEach((b) => (binary += String.fromCharCode(b)));
+        return btoa(binary).replace(/\+/g, '-').replace(/\//g, '_').replace(/=+$/, '');
+    }
+}
+
 var __rest = (undefined && undefined.__rest) || function (s, e) {
     var t = {};
     for (var p in s) if (Object.prototype.hasOwnProperty.call(s, p) && e.indexOf(p) < 0)
@@ -965,6 +1408,7 @@ class SocialLoginWeb extends core.WebPlugin {
         this.appleProvider = new AppleSocialLogin();
         this.facebookProvider = new FacebookSocialLogin();
         this.twitterProvider = new TwitterSocialLogin();
+        this.oauth2Provider = new OAuth2SocialLogin();
         // Set up listener for OAuth redirects if we have a pending OAuth flow
         if (localStorage.getItem(SocialLoginWeb.OAUTH_STATE_KEY)) {
             console.log('OAUTH_STATE_KEY found');
@@ -995,6 +1439,9 @@ class SocialLoginWeb extends core.WebPlugin {
             case 'twitter':
                 result = await this.twitterProvider.handleOAuthRedirect(url, state);
                 break;
+            case 'oauth2':
+                result = await this.oauth2Provider.handleOAuthRedirect(url, state);
+                break;
             case 'google':
             default:
                 result = this.googleProvider.handleOAuthRedirect(url);
@@ -1031,6 +1478,9 @@ class SocialLoginWeb extends core.WebPlugin {
         if ((_d = options.twitter) === null || _d === void 0 ? void 0 : _d.clientId) {
             initPromises.push(this.twitterProvider.initialize(options.twitter.clientId, options.twitter.redirectUrl, options.twitter.defaultScopes, options.twitter.forceLogin, options.twitter.audience));
         }
+        if (options.oauth2 && Object.keys(options.oauth2).length > 0) {
+            initPromises.push(this.oauth2Provider.initializeProviders(options.oauth2));
+        }
         await Promise.all(initPromises);
     }
     async login(options) {
@@ -1043,6 +1493,8 @@ class SocialLoginWeb extends core.WebPlugin {
                 return this.facebookProvider.login(options.options);
             case 'twitter':
                 return this.twitterProvider.login(options.options);
+            case 'oauth2':
+                return this.oauth2Provider.login(options.options);
             default:
                 throw new Error(`Login for ${options.provider} is not implemented on web`);
         }
@@ -1057,6 +1509,11 @@ class SocialLoginWeb extends core.WebPlugin {
                 return this.facebookProvider.logout();
             case 'twitter':
                 return this.twitterProvider.logout();
+            case 'oauth2':
+                if (!options.providerId) {
+                    throw new Error('providerId is required for oauth2 logout');
+                }
+                return this.oauth2Provider.logout(options.providerId);
             default:
                 throw new Error(`Logout for ${options.provider} is not implemented`);
         }
@@ -1071,6 +1528,11 @@ class SocialLoginWeb extends core.WebPlugin {
                 return this.facebookProvider.isLoggedIn();
             case 'twitter':
                 return this.twitterProvider.isLoggedIn();
+            case 'oauth2':
+                if (!options.providerId) {
+                    throw new Error('providerId is required for oauth2 isLoggedIn');
+                }
+                return this.oauth2Provider.isLoggedIn(options.providerId);
             default:
                 throw new Error(`isLoggedIn for ${options.provider} is not implemented`);
         }
@@ -1085,6 +1547,11 @@ class SocialLoginWeb extends core.WebPlugin {
                 return this.facebookProvider.getAuthorizationCode();
             case 'twitter':
                 return this.twitterProvider.getAuthorizationCode();
+            case 'oauth2':
+                if (!options.providerId) {
+                    throw new Error('providerId is required for oauth2 getAuthorizationCode');
+                }
+                return this.oauth2Provider.getAuthorizationCode(options.providerId);
             default:
                 throw new Error(`getAuthorizationCode for ${options.provider} is not implemented`);
         }
@@ -1099,6 +1566,13 @@ class SocialLoginWeb extends core.WebPlugin {
                 return this.facebookProvider.refresh(options.options);
             case 'twitter':
                 return this.twitterProvider.refresh();
+            case 'oauth2': {
+                const oauth2Options = options.options;
+                if (!(oauth2Options === null || oauth2Options === void 0 ? void 0 : oauth2Options.providerId)) {
+                    throw new Error('providerId is required for oauth2 refresh');
+                }
+                return this.oauth2Provider.refresh(oauth2Options.providerId);
+            }
             default:
                 throw new Error(`Refresh for ${options.provider} is not implemented`);
         }