@capgo/capacitor-social-login 8.2.25 → 8.3.1

package/dist/plugin.cjs.js

@@ -904,26 +904,106 @@ class OAuth2SocialLogin extends BaseSocialLogin {
         this.TOKENS_KEY_PREFIX = 'capgo_social_login_oauth2_tokens_';
         this.STATE_PREFIX = 'capgo_social_login_oauth2_state_';
     }
+    normalizeScopeValue(scope) {
+        if (!scope)
+            return '';
+        if (typeof scope === 'string')
+            return scope;
+        if (Array.isArray(scope))
+            return scope.filter(Boolean).join(' ');
+        return '';
+    }
+    normalizeConfig(providerId, config) {
+        var _a, _b, _c, _d, _e, _f, _g, _h;
+        const appId = (_a = config.appId) !== null && _a !== void 0 ? _a : config.clientId;
+        const authorizationBaseUrl = (_b = config.authorizationBaseUrl) !== null && _b !== void 0 ? _b : config.authorizationEndpoint;
+        const accessTokenEndpoint = (_c = config.accessTokenEndpoint) !== null && _c !== void 0 ? _c : config.tokenEndpoint;
+        const logoutUrl = (_d = config.logoutUrl) !== null && _d !== void 0 ? _d : config.endSessionEndpoint;
+        const scopeSource = (_e = config.scope) !== null && _e !== void 0 ? _e : config.scopes;
+        if (!appId) {
+            throw new Error(`OAuth2 provider '${providerId}' requires appId (or clientId).`);
+        }
+        if (!config.redirectUrl) {
+            throw new Error(`OAuth2 provider '${providerId}' requires redirectUrl.`);
+        }
+        if (!authorizationBaseUrl && !config.issuerUrl) {
+            throw new Error(`OAuth2 provider '${providerId}' requires authorizationBaseUrl (or authorizationEndpoint) or issuerUrl.`);
+        }
+        return {
+            appId,
+            issuerUrl: config.issuerUrl,
+            authorizationBaseUrl,
+            accessTokenEndpoint,
+            redirectUrl: config.redirectUrl,
+            resourceUrl: config.resourceUrl,
+            responseType: ((_f = config.responseType) !== null && _f !== void 0 ? _f : 'code'),
+            pkceEnabled: (_g = config.pkceEnabled) !== null && _g !== void 0 ? _g : true,
+            scope: this.normalizeScopeValue(scopeSource),
+            additionalParameters: config.additionalParameters,
+            loginHint: config.loginHint,
+            prompt: config.prompt,
+            additionalTokenParameters: config.additionalTokenParameters,
+            additionalResourceHeaders: config.additionalResourceHeaders,
+            logoutUrl,
+            postLogoutRedirectUrl: config.postLogoutRedirectUrl,
+            additionalLogoutParameters: config.additionalLogoutParameters,
+            logsEnabled: (_h = config.logsEnabled) !== null && _h !== void 0 ? _h : false,
+        };
+    }
+    async ensureDiscovered(providerId) {
+        const config = this.providers.get(providerId);
+        if (!(config === null || config === void 0 ? void 0 : config.issuerUrl))
+            return;
+        // Resolve endpoints lazily.
+        if (config.authorizationBaseUrl && config.accessTokenEndpoint)
+            return;
+        const issuer = config.issuerUrl.replace(/\/+$/, '');
+        const discoveryUrl = `${issuer}/.well-known/openid-configuration`;
+        const resp = await fetch(discoveryUrl);
+        if (!resp.ok) {
+            const text = await resp.text().catch(() => '');
+            throw new Error(`OAuth2 discovery failed (${resp.status}): ${text || discoveryUrl}`);
+        }
+        const payload = (await resp.json());
+        const authorizationEndpoint = payload['authorization_endpoint'];
+        const tokenEndpoint = payload['token_endpoint'];
+        const endSessionEndpoint = payload['end_session_endpoint'];
+        if (!config.authorizationBaseUrl && typeof authorizationEndpoint === 'string') {
+            config.authorizationBaseUrl = authorizationEndpoint;
+        }
+        if (!config.accessTokenEndpoint && typeof tokenEndpoint === 'string') {
+            config.accessTokenEndpoint = tokenEndpoint;
+        }
+        if (!config.logoutUrl && typeof endSessionEndpoint === 'string') {
+            config.logoutUrl = endSessionEndpoint;
+        }
+        if (config.logsEnabled) {
+            console.log(`[OAuth2:${providerId}] Discovery resolved`, {
+                authorizationBaseUrl: config.authorizationBaseUrl,
+                accessTokenEndpoint: config.accessTokenEndpoint,
+                logoutUrl: config.logoutUrl,
+            });
+        }
+    }
     /**
      * Initialize multiple OAuth2 providers
      */
     async initializeProviders(configs) {
-        var _a, _b, _c, _d;
         for (const [providerId, config] of Object.entries(configs)) {
-            if (!config.appId || !config.authorizationBaseUrl || !config.redirectUrl) {
-                throw new Error(`OAuth2 provider '${providerId}' requires appId, authorizationBaseUrl, and redirectUrl`);
-            }
-            const internalConfig = Object.assign(Object.assign({}, config), { responseType: (_a = config.responseType) !== null && _a !== void 0 ? _a : 'code', pkceEnabled: (_b = config.pkceEnabled) !== null && _b !== void 0 ? _b : true, scope: (_c = config.scope) !== null && _c !== void 0 ? _c : '', logsEnabled: (_d = config.logsEnabled) !== null && _d !== void 0 ? _d : false });
+            const internalConfig = this.normalizeConfig(providerId, config);
             this.providers.set(providerId, internalConfig);
             if (internalConfig.logsEnabled) {
                 console.log(`[OAuth2:${providerId}] Initialized with config:`, {
-                    appId: config.appId,
-                    authorizationBaseUrl: config.authorizationBaseUrl,
-                    redirectUrl: config.redirectUrl,
+                    appId: internalConfig.appId,
+                    issuerUrl: internalConfig.issuerUrl,
+                    authorizationBaseUrl: internalConfig.authorizationBaseUrl,
+                    redirectUrl: internalConfig.redirectUrl,
                     responseType: internalConfig.responseType,
                     pkceEnabled: internalConfig.pkceEnabled,
                 });
             }
+            // Pre-resolve discovery on web if issuerUrl is provided.
+            await this.ensureDiscovered(providerId);
         }
     }
     getProvider(providerId) {
@@ -937,13 +1017,14 @@ class OAuth2SocialLogin extends BaseSocialLogin {
         return `${this.TOKENS_KEY_PREFIX}${providerId}`;
     }
     async login(options) {
-        var _a, _b, _c, _d;
+        var _a, _b, _c, _d, _e, _f, _g, _h, _j;
         const { providerId } = options;
         const config = this.getProvider(providerId);
+        await this.ensureDiscovered(providerId);
         const redirectUri = (_a = options.redirectUrl) !== null && _a !== void 0 ? _a : config.redirectUrl;
-        const scope = (_b = options.scope) !== null && _b !== void 0 ? _b : config.scope;
-        const state = (_c = options.state) !== null && _c !== void 0 ? _c : this.generateState();
-        const codeVerifier = (_d = options.codeVerifier) !== null && _d !== void 0 ? _d : this.generateCodeVerifier();
+        const scope = this.normalizeScopeValue((_c = (_b = options.scope) !== null && _b !== void 0 ? _b : options.scopes) !== null && _c !== void 0 ? _c : config.scope);
+        const state = (_d = options.state) !== null && _d !== void 0 ? _d : this.generateState();
+        const codeVerifier = (_e = options.codeVerifier) !== null && _e !== void 0 ? _e : this.generateCodeVerifier();
         // Build authorization URL
         const params = new URLSearchParams({
             response_type: config.responseType,
@@ -954,21 +1035,25 @@ class OAuth2SocialLogin extends BaseSocialLogin {
         if (scope) {
             params.set('scope', scope);
         }
+        // Convenience OIDC options
+        const mergedAdditionalParams = Object.assign(Object.assign({}, ((_f = config.additionalParameters) !== null && _f !== void 0 ? _f : {})), ((_g = options.additionalParameters) !== null && _g !== void 0 ? _g : {}));
+        const loginHint = (_h = options.loginHint) !== null && _h !== void 0 ? _h : config.loginHint;
+        const prompt = (_j = options.prompt) !== null && _j !== void 0 ? _j : config.prompt;
+        if (loginHint && !('login_hint' in mergedAdditionalParams)) {
+            mergedAdditionalParams.login_hint = loginHint;
+        }
+        if (prompt && !('prompt' in mergedAdditionalParams)) {
+            mergedAdditionalParams.prompt = prompt;
+        }
         // Add PKCE for code flow
         if (config.responseType === 'code' && config.pkceEnabled) {
             const codeChallenge = await this.generateCodeChallenge(codeVerifier);
             params.set('code_challenge', codeChallenge);
             params.set('code_challenge_method', 'S256');
         }
-        // Add additional parameters from config
-        if (config.additionalParameters) {
-            for (const [key, value] of Object.entries(config.additionalParameters)) {
-                params.set(key, value);
-            }
-        }
-        // Add additional parameters from login options
-        if (options.additionalParameters) {
-            for (const [key, value] of Object.entries(options.additionalParameters)) {
+        // Add merged additional parameters
+        for (const [key, value] of Object.entries(mergedAdditionalParams)) {
+            if (value !== undefined) {
                 params.set(key, value);
             }
         }
@@ -980,10 +1065,19 @@ class OAuth2SocialLogin extends BaseSocialLogin {
             scope,
         });
         localStorage.setItem(BaseSocialLogin.OAUTH_STATE_KEY, JSON.stringify({ provider: 'oauth2', providerId, state }));
+        if (!config.authorizationBaseUrl) {
+            throw new Error(`OAuth2 provider '${providerId}' is missing authorizationBaseUrl (discovery may have failed).`);
+        }
         const authUrl = `${config.authorizationBaseUrl}?${params.toString()}`;
         if (config.logsEnabled) {
             console.log(`[OAuth2:${providerId}] Opening authorization URL:`, authUrl);
         }
+        if (options.flow === 'redirect') {
+            // Trigger a full-page redirect. The promise will not resolve because the page navigates away.
+            window.location.assign(authUrl);
+            // eslint-disable-next-line @typescript-eslint/no-empty-function
+            return new Promise(() => { });
+        }
         // Open popup window
         const width = 500;
         const height = 650;
@@ -1089,11 +1183,31 @@ class OAuth2SocialLogin extends BaseSocialLogin {
         });
     }
     async logout(providerId) {
+        await this.ensureDiscovered(providerId);
         const config = this.providers.get(providerId);
+        const stored = this.getStoredTokens(providerId);
         localStorage.removeItem(this.getTokensKey(providerId));
-        // If logout URL is configured, redirect to it
+        // If logout URL is configured, build an end-session URL (OIDC) when possible.
         if (config === null || config === void 0 ? void 0 : config.logoutUrl) {
-            window.open(config.logoutUrl, '_blank');
+            try {
+                const url = new URL(config.logoutUrl);
+                if (stored === null || stored === void 0 ? void 0 : stored.idToken) {
+                    url.searchParams.set('id_token_hint', stored.idToken);
+                }
+                const postLogout = config.postLogoutRedirectUrl;
+                if (postLogout) {
+                    url.searchParams.set('post_logout_redirect_uri', postLogout);
+                }
+                if (config.additionalLogoutParameters) {
+                    for (const [k, v] of Object.entries(config.additionalLogoutParameters)) {
+                        url.searchParams.set(k, v);
+                    }
+                }
+                window.open(url.toString(), '_blank');
+            }
+            catch (_a) {
+                window.open(config.logoutUrl, '_blank');
+            }
         }
     }
     async isLoggedIn(providerId) {
@@ -1118,15 +1232,52 @@ class OAuth2SocialLogin extends BaseSocialLogin {
         };
     }
     async refresh(providerId) {
-        const tokens = this.getStoredTokens(providerId);
-        if (!(tokens === null || tokens === void 0 ? void 0 : tokens.refreshToken)) {
+        await this.refreshToken(providerId);
+    }
+    async refreshToken(providerId, refreshToken, additionalParameters) {
+        var _a, _b, _c, _d, _e, _f;
+        await this.ensureDiscovered(providerId);
+        const config = this.getProvider(providerId);
+        const stored = this.getStoredTokens(providerId);
+        const effectiveRefreshToken = refreshToken !== null && refreshToken !== void 0 ? refreshToken : stored === null || stored === void 0 ? void 0 : stored.refreshToken;
+        if (!effectiveRefreshToken) {
             throw new Error(`No OAuth2 refresh token is available for provider '${providerId}'. Include offline_access scope to receive one.`);
         }
-        const config = this.getProvider(providerId);
         if (!config.accessTokenEndpoint) {
             throw new Error(`No accessTokenEndpoint configured for provider '${providerId}'.`);
         }
-        await this.refreshWithRefreshToken(providerId, tokens.refreshToken);
+        const tokenResponse = await this.refreshWithRefreshToken(providerId, effectiveRefreshToken, additionalParameters);
+        const expiresAt = tokenResponse.expires_in ? Date.now() + tokenResponse.expires_in * 1000 : Date.now() + 3600000;
+        const scopeArray = (_c = (_b = (_a = tokenResponse.scope) === null || _a === void 0 ? void 0 : _a.split(' ').filter(Boolean)) !== null && _b !== void 0 ? _b : stored === null || stored === void 0 ? void 0 : stored.scope) !== null && _c !== void 0 ? _c : [];
+        // Fetch resource data if configured
+        let resourceData = null;
+        if (config.resourceUrl) {
+            resourceData = await this.fetchResource(providerId, tokenResponse.access_token);
+        }
+        const nextRefreshToken = (_d = tokenResponse.refresh_token) !== null && _d !== void 0 ? _d : effectiveRefreshToken;
+        this.persistTokens(providerId, {
+            accessToken: tokenResponse.access_token,
+            refreshToken: nextRefreshToken,
+            idToken: tokenResponse.id_token,
+            expiresAt,
+            scope: scopeArray,
+            tokenType: tokenResponse.token_type,
+        });
+        return {
+            providerId,
+            accessToken: {
+                token: tokenResponse.access_token,
+                tokenType: tokenResponse.token_type,
+                expires: new Date(expiresAt).toISOString(),
+                refreshToken: nextRefreshToken,
+            },
+            idToken: (_e = tokenResponse.id_token) !== null && _e !== void 0 ? _e : null,
+            refreshToken: nextRefreshToken !== null && nextRefreshToken !== void 0 ? nextRefreshToken : null,
+            resourceData,
+            scope: scopeArray,
+            tokenType: tokenResponse.token_type,
+            expiresIn: (_f = tokenResponse.expires_in) !== null && _f !== void 0 ? _f : null,
+        };
     }
     async handleOAuthRedirect(url, expectedState) {
         var _a, _b, _c, _d, _e;
@@ -1147,6 +1298,7 @@ class OAuth2SocialLogin extends BaseSocialLogin {
             return { error: 'OAuth2 login session expired or state mismatch.' };
         }
         const { providerId } = pending;
+        await this.ensureDiscovered(providerId);
         const config = this.providers.get(providerId);
         if (!config) {
             localStorage.removeItem(BaseSocialLogin.OAUTH_STATE_KEY);
@@ -1241,6 +1393,11 @@ class OAuth2SocialLogin extends BaseSocialLogin {
         if (config.pkceEnabled) {
             params.set('code_verifier', pending.codeVerifier);
         }
+        if (config.additionalTokenParameters) {
+            for (const [k, v] of Object.entries(config.additionalTokenParameters)) {
+                params.set(k, v);
+            }
+        }
         if (config.logsEnabled) {
             console.log(`[OAuth2:${providerId}] Exchanging code at:`, config.accessTokenEndpoint);
         }
@@ -1257,8 +1414,7 @@ class OAuth2SocialLogin extends BaseSocialLogin {
         }
         return (await response.json());
     }
-    async refreshWithRefreshToken(providerId, refreshToken) {
-        var _a, _b, _c;
+    async refreshWithRefreshToken(providerId, refreshToken, additionalParameters) {
         const config = this.getProvider(providerId);
         if (!config.accessTokenEndpoint) {
             throw new Error(`No accessTokenEndpoint configured for provider '${providerId}'.`);
@@ -1268,6 +1424,16 @@ class OAuth2SocialLogin extends BaseSocialLogin {
             refresh_token: refreshToken,
             client_id: config.appId,
         });
+        if (config.additionalTokenParameters) {
+            for (const [k, v] of Object.entries(config.additionalTokenParameters)) {
+                params.set(k, v);
+            }
+        }
+        if (additionalParameters) {
+            for (const [k, v] of Object.entries(additionalParameters)) {
+                params.set(k, v);
+            }
+        }
         const response = await fetch(config.accessTokenEndpoint, {
             method: 'POST',
             headers: {
@@ -1279,17 +1445,7 @@ class OAuth2SocialLogin extends BaseSocialLogin {
             const text = await response.text();
             throw new Error(`OAuth2 refresh failed (${response.status}): ${text}`);
         }
-        const tokens = (await response.json());
-        const expiresAt = tokens.expires_in ? Date.now() + tokens.expires_in * 1000 : Date.now() + 3600000;
-        const scopeArray = (_b = (_a = tokens.scope) === null || _a === void 0 ? void 0 : _a.split(' ').filter(Boolean)) !== null && _b !== void 0 ? _b : [];
-        this.persistTokens(providerId, {
-            accessToken: tokens.access_token,
-            refreshToken: (_c = tokens.refresh_token) !== null && _c !== void 0 ? _c : refreshToken,
-            idToken: tokens.id_token,
-            expiresAt,
-            scope: scopeArray,
-            tokenType: tokens.token_type,
-        });
+        return (await response.json());
     }
     async fetchResource(providerId, accessToken) {
         const config = this.getProvider(providerId);
@@ -1366,6 +1522,37 @@ class OAuth2SocialLogin extends BaseSocialLogin {
         buffer.forEach((b) => (binary += String.fromCharCode(b)));
         return btoa(binary).replace(/\+/g, '-').replace(/\//g, '_').replace(/=+$/, '');
     }
+    decodeIdToken(idToken) {
+        const parts = idToken.split('.');
+        if (parts.length < 2) {
+            throw new Error('Invalid JWT: missing parts');
+        }
+        const payload = parts[1];
+        const normalized = payload.replace(/-/g, '+').replace(/_/g, '/');
+        const padded = normalized + '='.repeat((4 - (normalized.length % 4)) % 4);
+        const json = atob(padded);
+        return JSON.parse(json);
+    }
+    getAccessTokenExpirationDate(providerId) {
+        const tokens = this.getStoredTokens(providerId);
+        if (!(tokens === null || tokens === void 0 ? void 0 : tokens.expiresAt))
+            return { expirationDate: null };
+        return { expirationDate: new Date(tokens.expiresAt).toISOString() };
+    }
+    isAccessTokenAvailable(providerId) {
+        const tokens = this.getStoredTokens(providerId);
+        return { isAvailable: !!(tokens === null || tokens === void 0 ? void 0 : tokens.accessToken) };
+    }
+    isAccessTokenExpired(providerId) {
+        const tokens = this.getStoredTokens(providerId);
+        if (!(tokens === null || tokens === void 0 ? void 0 : tokens.expiresAt))
+            return { isExpired: true };
+        return { isExpired: tokens.expiresAt <= Date.now() };
+    }
+    isRefreshTokenAvailable(providerId) {
+        const tokens = this.getStoredTokens(providerId);
+        return { isAvailable: !!(tokens === null || tokens === void 0 ? void 0 : tokens.refreshToken) };
+    }
 }
 
 var __rest = (undefined && undefined.__rest) || function (s, e) {
@@ -1757,16 +1944,23 @@ class SocialLoginWeb extends core.WebPlugin {
         this.facebookProvider = new FacebookSocialLogin();
         this.twitterProvider = new TwitterSocialLogin();
         this.oauth2Provider = new OAuth2SocialLogin();
-        // Set up listener for OAuth redirects if we have a pending OAuth flow
-        if (localStorage.getItem(SocialLoginWeb.OAUTH_STATE_KEY)) {
-            console.log('OAUTH_STATE_KEY found');
-            this.handleOAuthRedirect().catch((error) => {
+        // Auto-finish OAuth redirects only when running inside a popup window.
+        // For redirect-based flows (full page navigation), the app should call `handleRedirectCallback()` explicitly.
+        const hasPending = !!localStorage.getItem(SocialLoginWeb.OAUTH_STATE_KEY);
+        const isPopup = !!window.opener || SocialLoginWeb.POPUP_WINDOW_NAMES.has(window.name);
+        if (hasPending && isPopup) {
+            this.finishOAuthRedirectInPopup().catch((error) => {
                 console.error('Failed to finish OAuth redirect', error);
-                window.close();
+                try {
+                    window.close();
+                }
+                catch (_a) {
+                    // ignore
+                }
             });
         }
     }
-    async handleOAuthRedirect() {
+    async parseRedirectResult() {
         var _a;
         const url = new URL(window.location.href);
         const stateRaw = localStorage.getItem(SocialLoginWeb.OAUTH_STATE_KEY);
@@ -1797,13 +1991,18 @@ class SocialLoginWeb extends core.WebPlugin {
                 result = this.googleProvider.handleOAuthRedirect(url);
                 break;
         }
-        if (!result) {
+        return { provider, state, nonce, result };
+    }
+    async finishOAuthRedirectInPopup() {
+        var _a;
+        const parsed = await this.parseRedirectResult();
+        const result = parsed.result;
+        if (!result)
             return;
-        }
         // Build the message to send
         let message;
         if ('error' in result) {
-            const resolvedProvider = provider !== null && provider !== void 0 ? provider : null;
+            const resolvedProvider = (_a = parsed.provider) !== null && _a !== void 0 ? _a : null;
             message = {
                 type: 'oauth-error',
                 provider: resolvedProvider,
@@ -1819,7 +2018,7 @@ class SocialLoginWeb extends core.WebPlugin {
                 window.opener.postMessage(message, window.location.origin);
             }
         }
-        catch (_c) {
+        catch (_b) {
             // Cross-origin error - window.opener may not be accessible
             console.log('postMessage to opener failed, using BroadcastChannel');
         }
@@ -1828,14 +2027,14 @@ class SocialLoginWeb extends core.WebPlugin {
         try {
             // Determine the channel name based on provider and state/nonce
             let channelName = null;
-            if (provider === 'oauth2' && state) {
-                channelName = `oauth2_${state}`;
+            if (parsed.provider === 'oauth2' && parsed.state) {
+                channelName = `oauth2_${parsed.state}`;
             }
-            else if (provider === 'twitter' && state) {
-                channelName = `twitter_oauth_${state}`;
+            else if (parsed.provider === 'twitter' && parsed.state) {
+                channelName = `twitter_oauth_${parsed.state}`;
             }
-            else if (provider === 'google' && nonce) {
-                channelName = `google_oauth_${nonce}`;
+            else if (parsed.provider === 'google' && parsed.nonce) {
+                channelName = `google_oauth_${parsed.nonce}`;
             }
             if (channelName) {
                 const channel = new BroadcastChannel(channelName);
@@ -1843,7 +2042,7 @@ class SocialLoginWeb extends core.WebPlugin {
                 channel.close();
             }
         }
-        catch (_d) {
+        catch (_c) {
             // BroadcastChannel not supported or other error
             console.log('BroadcastChannel not available');
         }
@@ -1966,6 +2165,53 @@ class SocialLoginWeb extends core.WebPlugin {
     async providerSpecificCall(options) {
         throw new Error(`Provider specific call for ${options.call} is not implemented`);
     }
+    async refreshToken(options) {
+        if (options.provider !== 'oauth2') {
+            throw new Error('refreshToken is only implemented for oauth2 on web');
+        }
+        return this.oauth2Provider.refreshToken(options.providerId, options.refreshToken, options.additionalParameters);
+    }
+    async handleRedirectCallback() {
+        const parsed = await this.parseRedirectResult();
+        const result = parsed.result;
+        if (!result)
+            return null;
+        if ('error' in result) {
+            throw new Error(result.error);
+        }
+        return result;
+    }
+    async decodeIdToken(options) {
+        var _a;
+        const token = (_a = options === null || options === void 0 ? void 0 : options.idToken) !== null && _a !== void 0 ? _a : options === null || options === void 0 ? void 0 : options.token;
+        if (!token) {
+            throw new Error('idToken (or token) is required');
+        }
+        const claims = this.oauth2Provider.decodeIdToken(token);
+        return { claims };
+    }
+    async getAccessTokenExpirationDate(options) {
+        if (typeof (options === null || options === void 0 ? void 0 : options.accessTokenExpirationDate) !== 'number') {
+            throw new Error('accessTokenExpirationDate is required');
+        }
+        return { date: new Date(options.accessTokenExpirationDate).toISOString() };
+    }
+    async isAccessTokenAvailable(options) {
+        var _a;
+        const token = (_a = options === null || options === void 0 ? void 0 : options.accessToken) !== null && _a !== void 0 ? _a : null;
+        return { isAvailable: typeof token === 'string' && token.length > 0 };
+    }
+    async isAccessTokenExpired(options) {
+        if (typeof (options === null || options === void 0 ? void 0 : options.accessTokenExpirationDate) !== 'number') {
+            throw new Error('accessTokenExpirationDate is required');
+        }
+        return { isExpired: options.accessTokenExpirationDate <= Date.now() };
+    }
+    async isRefreshTokenAvailable(options) {
+        var _a;
+        const token = (_a = options === null || options === void 0 ? void 0 : options.refreshToken) !== null && _a !== void 0 ? _a : null;
+        return { isAvailable: typeof token === 'string' && token.length > 0 };
+    }
     async getPluginVersion() {
         return { version: 'web' };
     }
@@ -2004,6 +2250,7 @@ class SocialLoginWeb extends core.WebPlugin {
     }
 }
 SocialLoginWeb.OAUTH_STATE_KEY = 'social_login_oauth_pending';
+SocialLoginWeb.POPUP_WINDOW_NAMES = new Set(['OAuth2Login', 'XLogin', 'Google Sign In', 'Authorization']);
 
 var web = /*#__PURE__*/Object.freeze({
     __proto__: null,