@capgo/capacitor-social-login 8.2.25 → 8.3.1

package/dist/plugin.js

@@ -903,26 +903,106 @@ var capacitorCapacitorUpdater = (function (exports, core) {
             this.TOKENS_KEY_PREFIX = 'capgo_social_login_oauth2_tokens_';
             this.STATE_PREFIX = 'capgo_social_login_oauth2_state_';
         }
+        normalizeScopeValue(scope) {
+            if (!scope)
+                return '';
+            if (typeof scope === 'string')
+                return scope;
+            if (Array.isArray(scope))
+                return scope.filter(Boolean).join(' ');
+            return '';
+        }
+        normalizeConfig(providerId, config) {
+            var _a, _b, _c, _d, _e, _f, _g, _h;
+            const appId = (_a = config.appId) !== null && _a !== void 0 ? _a : config.clientId;
+            const authorizationBaseUrl = (_b = config.authorizationBaseUrl) !== null && _b !== void 0 ? _b : config.authorizationEndpoint;
+            const accessTokenEndpoint = (_c = config.accessTokenEndpoint) !== null && _c !== void 0 ? _c : config.tokenEndpoint;
+            const logoutUrl = (_d = config.logoutUrl) !== null && _d !== void 0 ? _d : config.endSessionEndpoint;
+            const scopeSource = (_e = config.scope) !== null && _e !== void 0 ? _e : config.scopes;
+            if (!appId) {
+                throw new Error(`OAuth2 provider '${providerId}' requires appId (or clientId).`);
+            }
+            if (!config.redirectUrl) {
+                throw new Error(`OAuth2 provider '${providerId}' requires redirectUrl.`);
+            }
+            if (!authorizationBaseUrl && !config.issuerUrl) {
+                throw new Error(`OAuth2 provider '${providerId}' requires authorizationBaseUrl (or authorizationEndpoint) or issuerUrl.`);
+            }
+            return {
+                appId,
+                issuerUrl: config.issuerUrl,
+                authorizationBaseUrl,
+                accessTokenEndpoint,
+                redirectUrl: config.redirectUrl,
+                resourceUrl: config.resourceUrl,
+                responseType: ((_f = config.responseType) !== null && _f !== void 0 ? _f : 'code'),
+                pkceEnabled: (_g = config.pkceEnabled) !== null && _g !== void 0 ? _g : true,
+                scope: this.normalizeScopeValue(scopeSource),
+                additionalParameters: config.additionalParameters,
+                loginHint: config.loginHint,
+                prompt: config.prompt,
+                additionalTokenParameters: config.additionalTokenParameters,
+                additionalResourceHeaders: config.additionalResourceHeaders,
+                logoutUrl,
+                postLogoutRedirectUrl: config.postLogoutRedirectUrl,
+                additionalLogoutParameters: config.additionalLogoutParameters,
+                logsEnabled: (_h = config.logsEnabled) !== null && _h !== void 0 ? _h : false,
+            };
+        }
+        async ensureDiscovered(providerId) {
+            const config = this.providers.get(providerId);
+            if (!(config === null || config === void 0 ? void 0 : config.issuerUrl))
+                return;
+            // Resolve endpoints lazily.
+            if (config.authorizationBaseUrl && config.accessTokenEndpoint)
+                return;
+            const issuer = config.issuerUrl.replace(/\/+$/, '');
+            const discoveryUrl = `${issuer}/.well-known/openid-configuration`;
+            const resp = await fetch(discoveryUrl);
+            if (!resp.ok) {
+                const text = await resp.text().catch(() => '');
+                throw new Error(`OAuth2 discovery failed (${resp.status}): ${text || discoveryUrl}`);
+            }
+            const payload = (await resp.json());
+            const authorizationEndpoint = payload['authorization_endpoint'];
+            const tokenEndpoint = payload['token_endpoint'];
+            const endSessionEndpoint = payload['end_session_endpoint'];
+            if (!config.authorizationBaseUrl && typeof authorizationEndpoint === 'string') {
+                config.authorizationBaseUrl = authorizationEndpoint;
+            }
+            if (!config.accessTokenEndpoint && typeof tokenEndpoint === 'string') {
+                config.accessTokenEndpoint = tokenEndpoint;
+            }
+            if (!config.logoutUrl && typeof endSessionEndpoint === 'string') {
+                config.logoutUrl = endSessionEndpoint;
+            }
+            if (config.logsEnabled) {
+                console.log(`[OAuth2:${providerId}] Discovery resolved`, {
+                    authorizationBaseUrl: config.authorizationBaseUrl,
+                    accessTokenEndpoint: config.accessTokenEndpoint,
+                    logoutUrl: config.logoutUrl,
+                });
+            }
+        }
         /**
          * Initialize multiple OAuth2 providers
          */
         async initializeProviders(configs) {
-            var _a, _b, _c, _d;
             for (const [providerId, config] of Object.entries(configs)) {
-                if (!config.appId || !config.authorizationBaseUrl || !config.redirectUrl) {
-                    throw new Error(`OAuth2 provider '${providerId}' requires appId, authorizationBaseUrl, and redirectUrl`);
-                }
-                const internalConfig = Object.assign(Object.assign({}, config), { responseType: (_a = config.responseType) !== null && _a !== void 0 ? _a : 'code', pkceEnabled: (_b = config.pkceEnabled) !== null && _b !== void 0 ? _b : true, scope: (_c = config.scope) !== null && _c !== void 0 ? _c : '', logsEnabled: (_d = config.logsEnabled) !== null && _d !== void 0 ? _d : false });
+                const internalConfig = this.normalizeConfig(providerId, config);
                 this.providers.set(providerId, internalConfig);
                 if (internalConfig.logsEnabled) {
                     console.log(`[OAuth2:${providerId}] Initialized with config:`, {
-                        appId: config.appId,
-                        authorizationBaseUrl: config.authorizationBaseUrl,
-                        redirectUrl: config.redirectUrl,
+                        appId: internalConfig.appId,
+                        issuerUrl: internalConfig.issuerUrl,
+                        authorizationBaseUrl: internalConfig.authorizationBaseUrl,
+                        redirectUrl: internalConfig.redirectUrl,
                         responseType: internalConfig.responseType,
                         pkceEnabled: internalConfig.pkceEnabled,
                     });
                 }
+                // Pre-resolve discovery on web if issuerUrl is provided.
+                await this.ensureDiscovered(providerId);
             }
         }
         getProvider(providerId) {
@@ -936,13 +1016,14 @@ var capacitorCapacitorUpdater = (function (exports, core) {
             return `${this.TOKENS_KEY_PREFIX}${providerId}`;
         }
         async login(options) {
-            var _a, _b, _c, _d;
+            var _a, _b, _c, _d, _e, _f, _g, _h, _j;
             const { providerId } = options;
             const config = this.getProvider(providerId);
+            await this.ensureDiscovered(providerId);
             const redirectUri = (_a = options.redirectUrl) !== null && _a !== void 0 ? _a : config.redirectUrl;
-            const scope = (_b = options.scope) !== null && _b !== void 0 ? _b : config.scope;
-            const state = (_c = options.state) !== null && _c !== void 0 ? _c : this.generateState();
-            const codeVerifier = (_d = options.codeVerifier) !== null && _d !== void 0 ? _d : this.generateCodeVerifier();
+            const scope = this.normalizeScopeValue((_c = (_b = options.scope) !== null && _b !== void 0 ? _b : options.scopes) !== null && _c !== void 0 ? _c : config.scope);
+            const state = (_d = options.state) !== null && _d !== void 0 ? _d : this.generateState();
+            const codeVerifier = (_e = options.codeVerifier) !== null && _e !== void 0 ? _e : this.generateCodeVerifier();
             // Build authorization URL
             const params = new URLSearchParams({
                 response_type: config.responseType,
@@ -953,21 +1034,25 @@ var capacitorCapacitorUpdater = (function (exports, core) {
             if (scope) {
                 params.set('scope', scope);
             }
+            // Convenience OIDC options
+            const mergedAdditionalParams = Object.assign(Object.assign({}, ((_f = config.additionalParameters) !== null && _f !== void 0 ? _f : {})), ((_g = options.additionalParameters) !== null && _g !== void 0 ? _g : {}));
+            const loginHint = (_h = options.loginHint) !== null && _h !== void 0 ? _h : config.loginHint;
+            const prompt = (_j = options.prompt) !== null && _j !== void 0 ? _j : config.prompt;
+            if (loginHint && !('login_hint' in mergedAdditionalParams)) {
+                mergedAdditionalParams.login_hint = loginHint;
+            }
+            if (prompt && !('prompt' in mergedAdditionalParams)) {
+                mergedAdditionalParams.prompt = prompt;
+            }
             // Add PKCE for code flow
             if (config.responseType === 'code' && config.pkceEnabled) {
                 const codeChallenge = await this.generateCodeChallenge(codeVerifier);
                 params.set('code_challenge', codeChallenge);
                 params.set('code_challenge_method', 'S256');
             }
-            // Add additional parameters from config
-            if (config.additionalParameters) {
-                for (const [key, value] of Object.entries(config.additionalParameters)) {
-                    params.set(key, value);
-                }
-            }
-            // Add additional parameters from login options
-            if (options.additionalParameters) {
-                for (const [key, value] of Object.entries(options.additionalParameters)) {
+            // Add merged additional parameters
+            for (const [key, value] of Object.entries(mergedAdditionalParams)) {
+                if (value !== undefined) {
                     params.set(key, value);
                 }
             }
@@ -979,10 +1064,19 @@ var capacitorCapacitorUpdater = (function (exports, core) {
                 scope,
             });
             localStorage.setItem(BaseSocialLogin.OAUTH_STATE_KEY, JSON.stringify({ provider: 'oauth2', providerId, state }));
+            if (!config.authorizationBaseUrl) {
+                throw new Error(`OAuth2 provider '${providerId}' is missing authorizationBaseUrl (discovery may have failed).`);
+            }
             const authUrl = `${config.authorizationBaseUrl}?${params.toString()}`;
             if (config.logsEnabled) {
                 console.log(`[OAuth2:${providerId}] Opening authorization URL:`, authUrl);
             }
+            if (options.flow === 'redirect') {
+                // Trigger a full-page redirect. The promise will not resolve because the page navigates away.
+                window.location.assign(authUrl);
+                // eslint-disable-next-line @typescript-eslint/no-empty-function
+                return new Promise(() => { });
+            }
             // Open popup window
             const width = 500;
             const height = 650;
@@ -1088,11 +1182,31 @@ var capacitorCapacitorUpdater = (function (exports, core) {
             });
         }
         async logout(providerId) {
+            await this.ensureDiscovered(providerId);
             const config = this.providers.get(providerId);
+            const stored = this.getStoredTokens(providerId);
             localStorage.removeItem(this.getTokensKey(providerId));
-            // If logout URL is configured, redirect to it
+            // If logout URL is configured, build an end-session URL (OIDC) when possible.
             if (config === null || config === void 0 ? void 0 : config.logoutUrl) {
-                window.open(config.logoutUrl, '_blank');
+                try {
+                    const url = new URL(config.logoutUrl);
+                    if (stored === null || stored === void 0 ? void 0 : stored.idToken) {
+                        url.searchParams.set('id_token_hint', stored.idToken);
+                    }
+                    const postLogout = config.postLogoutRedirectUrl;
+                    if (postLogout) {
+                        url.searchParams.set('post_logout_redirect_uri', postLogout);
+                    }
+                    if (config.additionalLogoutParameters) {
+                        for (const [k, v] of Object.entries(config.additionalLogoutParameters)) {
+                            url.searchParams.set(k, v);
+                        }
+                    }
+                    window.open(url.toString(), '_blank');
+                }
+                catch (_a) {
+                    window.open(config.logoutUrl, '_blank');
+                }
             }
         }
         async isLoggedIn(providerId) {
@@ -1117,15 +1231,52 @@ var capacitorCapacitorUpdater = (function (exports, core) {
             };
         }
         async refresh(providerId) {
-            const tokens = this.getStoredTokens(providerId);
-            if (!(tokens === null || tokens === void 0 ? void 0 : tokens.refreshToken)) {
+            await this.refreshToken(providerId);
+        }
+        async refreshToken(providerId, refreshToken, additionalParameters) {
+            var _a, _b, _c, _d, _e, _f;
+            await this.ensureDiscovered(providerId);
+            const config = this.getProvider(providerId);
+            const stored = this.getStoredTokens(providerId);
+            const effectiveRefreshToken = refreshToken !== null && refreshToken !== void 0 ? refreshToken : stored === null || stored === void 0 ? void 0 : stored.refreshToken;
+            if (!effectiveRefreshToken) {
                 throw new Error(`No OAuth2 refresh token is available for provider '${providerId}'. Include offline_access scope to receive one.`);
             }
-            const config = this.getProvider(providerId);
             if (!config.accessTokenEndpoint) {
                 throw new Error(`No accessTokenEndpoint configured for provider '${providerId}'.`);
             }
-            await this.refreshWithRefreshToken(providerId, tokens.refreshToken);
+            const tokenResponse = await this.refreshWithRefreshToken(providerId, effectiveRefreshToken, additionalParameters);
+            const expiresAt = tokenResponse.expires_in ? Date.now() + tokenResponse.expires_in * 1000 : Date.now() + 3600000;
+            const scopeArray = (_c = (_b = (_a = tokenResponse.scope) === null || _a === void 0 ? void 0 : _a.split(' ').filter(Boolean)) !== null && _b !== void 0 ? _b : stored === null || stored === void 0 ? void 0 : stored.scope) !== null && _c !== void 0 ? _c : [];
+            // Fetch resource data if configured
+            let resourceData = null;
+            if (config.resourceUrl) {
+                resourceData = await this.fetchResource(providerId, tokenResponse.access_token);
+            }
+            const nextRefreshToken = (_d = tokenResponse.refresh_token) !== null && _d !== void 0 ? _d : effectiveRefreshToken;
+            this.persistTokens(providerId, {
+                accessToken: tokenResponse.access_token,
+                refreshToken: nextRefreshToken,
+                idToken: tokenResponse.id_token,
+                expiresAt,
+                scope: scopeArray,
+                tokenType: tokenResponse.token_type,
+            });
+            return {
+                providerId,
+                accessToken: {
+                    token: tokenResponse.access_token,
+                    tokenType: tokenResponse.token_type,
+                    expires: new Date(expiresAt).toISOString(),
+                    refreshToken: nextRefreshToken,
+                },
+                idToken: (_e = tokenResponse.id_token) !== null && _e !== void 0 ? _e : null,
+                refreshToken: nextRefreshToken !== null && nextRefreshToken !== void 0 ? nextRefreshToken : null,
+                resourceData,
+                scope: scopeArray,
+                tokenType: tokenResponse.token_type,
+                expiresIn: (_f = tokenResponse.expires_in) !== null && _f !== void 0 ? _f : null,
+            };
         }
         async handleOAuthRedirect(url, expectedState) {
             var _a, _b, _c, _d, _e;
@@ -1146,6 +1297,7 @@ var capacitorCapacitorUpdater = (function (exports, core) {
                 return { error: 'OAuth2 login session expired or state mismatch.' };
             }
             const { providerId } = pending;
+            await this.ensureDiscovered(providerId);
             const config = this.providers.get(providerId);
             if (!config) {
                 localStorage.removeItem(BaseSocialLogin.OAUTH_STATE_KEY);
@@ -1240,6 +1392,11 @@ var capacitorCapacitorUpdater = (function (exports, core) {
             if (config.pkceEnabled) {
                 params.set('code_verifier', pending.codeVerifier);
             }
+            if (config.additionalTokenParameters) {
+                for (const [k, v] of Object.entries(config.additionalTokenParameters)) {
+                    params.set(k, v);
+                }
+            }
             if (config.logsEnabled) {
                 console.log(`[OAuth2:${providerId}] Exchanging code at:`, config.accessTokenEndpoint);
             }
@@ -1256,8 +1413,7 @@ var capacitorCapacitorUpdater = (function (exports, core) {
             }
             return (await response.json());
         }
-        async refreshWithRefreshToken(providerId, refreshToken) {
-            var _a, _b, _c;
+        async refreshWithRefreshToken(providerId, refreshToken, additionalParameters) {
             const config = this.getProvider(providerId);
             if (!config.accessTokenEndpoint) {
                 throw new Error(`No accessTokenEndpoint configured for provider '${providerId}'.`);
@@ -1267,6 +1423,16 @@ var capacitorCapacitorUpdater = (function (exports, core) {
                 refresh_token: refreshToken,
                 client_id: config.appId,
             });
+            if (config.additionalTokenParameters) {
+                for (const [k, v] of Object.entries(config.additionalTokenParameters)) {
+                    params.set(k, v);
+                }
+            }
+            if (additionalParameters) {
+                for (const [k, v] of Object.entries(additionalParameters)) {
+                    params.set(k, v);
+                }
+            }
             const response = await fetch(config.accessTokenEndpoint, {
                 method: 'POST',
                 headers: {
@@ -1278,17 +1444,7 @@ var capacitorCapacitorUpdater = (function (exports, core) {
                 const text = await response.text();
                 throw new Error(`OAuth2 refresh failed (${response.status}): ${text}`);
             }
-            const tokens = (await response.json());
-            const expiresAt = tokens.expires_in ? Date.now() + tokens.expires_in * 1000 : Date.now() + 3600000;
-            const scopeArray = (_b = (_a = tokens.scope) === null || _a === void 0 ? void 0 : _a.split(' ').filter(Boolean)) !== null && _b !== void 0 ? _b : [];
-            this.persistTokens(providerId, {
-                accessToken: tokens.access_token,
-                refreshToken: (_c = tokens.refresh_token) !== null && _c !== void 0 ? _c : refreshToken,
-                idToken: tokens.id_token,
-                expiresAt,
-                scope: scopeArray,
-                tokenType: tokens.token_type,
-            });
+            return (await response.json());
         }
         async fetchResource(providerId, accessToken) {
             const config = this.getProvider(providerId);
@@ -1365,6 +1521,37 @@ var capacitorCapacitorUpdater = (function (exports, core) {
             buffer.forEach((b) => (binary += String.fromCharCode(b)));
             return btoa(binary).replace(/\+/g, '-').replace(/\//g, '_').replace(/=+$/, '');
         }
+        decodeIdToken(idToken) {
+            const parts = idToken.split('.');
+            if (parts.length < 2) {
+                throw new Error('Invalid JWT: missing parts');
+            }
+            const payload = parts[1];
+            const normalized = payload.replace(/-/g, '+').replace(/_/g, '/');
+            const padded = normalized + '='.repeat((4 - (normalized.length % 4)) % 4);
+            const json = atob(padded);
+            return JSON.parse(json);
+        }
+        getAccessTokenExpirationDate(providerId) {
+            const tokens = this.getStoredTokens(providerId);
+            if (!(tokens === null || tokens === void 0 ? void 0 : tokens.expiresAt))
+                return { expirationDate: null };
+            return { expirationDate: new Date(tokens.expiresAt).toISOString() };
+        }
+        isAccessTokenAvailable(providerId) {
+            const tokens = this.getStoredTokens(providerId);
+            return { isAvailable: !!(tokens === null || tokens === void 0 ? void 0 : tokens.accessToken) };
+        }
+        isAccessTokenExpired(providerId) {
+            const tokens = this.getStoredTokens(providerId);
+            if (!(tokens === null || tokens === void 0 ? void 0 : tokens.expiresAt))
+                return { isExpired: true };
+            return { isExpired: tokens.expiresAt <= Date.now() };
+        }
+        isRefreshTokenAvailable(providerId) {
+            const tokens = this.getStoredTokens(providerId);
+            return { isAvailable: !!(tokens === null || tokens === void 0 ? void 0 : tokens.refreshToken) };
+        }
     }
 
     var __rest = (undefined && undefined.__rest) || function (s, e) {
@@ -1756,16 +1943,23 @@ var capacitorCapacitorUpdater = (function (exports, core) {
             this.facebookProvider = new FacebookSocialLogin();
             this.twitterProvider = new TwitterSocialLogin();
             this.oauth2Provider = new OAuth2SocialLogin();
-            // Set up listener for OAuth redirects if we have a pending OAuth flow
-            if (localStorage.getItem(SocialLoginWeb.OAUTH_STATE_KEY)) {
-                console.log('OAUTH_STATE_KEY found');
-                this.handleOAuthRedirect().catch((error) => {
+            // Auto-finish OAuth redirects only when running inside a popup window.
+            // For redirect-based flows (full page navigation), the app should call `handleRedirectCallback()` explicitly.
+            const hasPending = !!localStorage.getItem(SocialLoginWeb.OAUTH_STATE_KEY);
+            const isPopup = !!window.opener || SocialLoginWeb.POPUP_WINDOW_NAMES.has(window.name);
+            if (hasPending && isPopup) {
+                this.finishOAuthRedirectInPopup().catch((error) => {
                     console.error('Failed to finish OAuth redirect', error);
-                    window.close();
+                    try {
+                        window.close();
+                    }
+                    catch (_a) {
+                        // ignore
+                    }
                 });
             }
         }
-        async handleOAuthRedirect() {
+        async parseRedirectResult() {
             var _a;
             const url = new URL(window.location.href);
             const stateRaw = localStorage.getItem(SocialLoginWeb.OAUTH_STATE_KEY);
@@ -1796,13 +1990,18 @@ var capacitorCapacitorUpdater = (function (exports, core) {
                     result = this.googleProvider.handleOAuthRedirect(url);
                     break;
             }
-            if (!result) {
+            return { provider, state, nonce, result };
+        }
+        async finishOAuthRedirectInPopup() {
+            var _a;
+            const parsed = await this.parseRedirectResult();
+            const result = parsed.result;
+            if (!result)
                 return;
-            }
             // Build the message to send
             let message;
             if ('error' in result) {
-                const resolvedProvider = provider !== null && provider !== void 0 ? provider : null;
+                const resolvedProvider = (_a = parsed.provider) !== null && _a !== void 0 ? _a : null;
                 message = {
                     type: 'oauth-error',
                     provider: resolvedProvider,
@@ -1818,7 +2017,7 @@ var capacitorCapacitorUpdater = (function (exports, core) {
                     window.opener.postMessage(message, window.location.origin);
                 }
             }
-            catch (_c) {
+            catch (_b) {
                 // Cross-origin error - window.opener may not be accessible
                 console.log('postMessage to opener failed, using BroadcastChannel');
             }
@@ -1827,14 +2026,14 @@ var capacitorCapacitorUpdater = (function (exports, core) {
             try {
                 // Determine the channel name based on provider and state/nonce
                 let channelName = null;
-                if (provider === 'oauth2' && state) {
-                    channelName = `oauth2_${state}`;
+                if (parsed.provider === 'oauth2' && parsed.state) {
+                    channelName = `oauth2_${parsed.state}`;
                 }
-                else if (provider === 'twitter' && state) {
-                    channelName = `twitter_oauth_${state}`;
+                else if (parsed.provider === 'twitter' && parsed.state) {
+                    channelName = `twitter_oauth_${parsed.state}`;
                 }
-                else if (provider === 'google' && nonce) {
-                    channelName = `google_oauth_${nonce}`;
+                else if (parsed.provider === 'google' && parsed.nonce) {
+                    channelName = `google_oauth_${parsed.nonce}`;
                 }
                 if (channelName) {
                     const channel = new BroadcastChannel(channelName);
@@ -1842,7 +2041,7 @@ var capacitorCapacitorUpdater = (function (exports, core) {
                     channel.close();
                 }
             }
-            catch (_d) {
+            catch (_c) {
                 // BroadcastChannel not supported or other error
                 console.log('BroadcastChannel not available');
             }
@@ -1965,6 +2164,53 @@ var capacitorCapacitorUpdater = (function (exports, core) {
         async providerSpecificCall(options) {
             throw new Error(`Provider specific call for ${options.call} is not implemented`);
         }
+        async refreshToken(options) {
+            if (options.provider !== 'oauth2') {
+                throw new Error('refreshToken is only implemented for oauth2 on web');
+            }
+            return this.oauth2Provider.refreshToken(options.providerId, options.refreshToken, options.additionalParameters);
+        }
+        async handleRedirectCallback() {
+            const parsed = await this.parseRedirectResult();
+            const result = parsed.result;
+            if (!result)
+                return null;
+            if ('error' in result) {
+                throw new Error(result.error);
+            }
+            return result;
+        }
+        async decodeIdToken(options) {
+            var _a;
+            const token = (_a = options === null || options === void 0 ? void 0 : options.idToken) !== null && _a !== void 0 ? _a : options === null || options === void 0 ? void 0 : options.token;
+            if (!token) {
+                throw new Error('idToken (or token) is required');
+            }
+            const claims = this.oauth2Provider.decodeIdToken(token);
+            return { claims };
+        }
+        async getAccessTokenExpirationDate(options) {
+            if (typeof (options === null || options === void 0 ? void 0 : options.accessTokenExpirationDate) !== 'number') {
+                throw new Error('accessTokenExpirationDate is required');
+            }
+            return { date: new Date(options.accessTokenExpirationDate).toISOString() };
+        }
+        async isAccessTokenAvailable(options) {
+            var _a;
+            const token = (_a = options === null || options === void 0 ? void 0 : options.accessToken) !== null && _a !== void 0 ? _a : null;
+            return { isAvailable: typeof token === 'string' && token.length > 0 };
+        }
+        async isAccessTokenExpired(options) {
+            if (typeof (options === null || options === void 0 ? void 0 : options.accessTokenExpirationDate) !== 'number') {
+                throw new Error('accessTokenExpirationDate is required');
+            }
+            return { isExpired: options.accessTokenExpirationDate <= Date.now() };
+        }
+        async isRefreshTokenAvailable(options) {
+            var _a;
+            const token = (_a = options === null || options === void 0 ? void 0 : options.refreshToken) !== null && _a !== void 0 ? _a : null;
+            return { isAvailable: typeof token === 'string' && token.length > 0 };
+        }
         async getPluginVersion() {
             return { version: 'web' };
         }
@@ -2003,6 +2249,7 @@ var capacitorCapacitorUpdater = (function (exports, core) {
         }
     }
     SocialLoginWeb.OAUTH_STATE_KEY = 'social_login_oauth_pending';
+    SocialLoginWeb.POPUP_WINDOW_NAMES = new Set(['OAuth2Login', 'XLogin', 'Google Sign In', 'Authorization']);
 
     var web = /*#__PURE__*/Object.freeze({
         __proto__: null,