@ebrains/vue 0.0.1-alpha.1 → 0.2.0-alpha.0

package/keycloak-13893af6-BLzE1H6E.mjs

@@ -0,0 +1,878 @@
+function Y(f) {
+  if (!(this instanceof Y))
+    throw new Error("The 'Keycloak' constructor must be invoked with 'new'.");
+  if (typeof f != "string" && !V(f))
+    throw new Error("The 'Keycloak' constructor must be provided with a configuration object, or a URL to a JSON configuration file.");
+  if (V(f)) {
+    const r = "oidcProvider" in f ? ["clientId"] : ["url", "realm", "clientId"];
+    for (const t of r)
+      if (!f[t])
+        throw new Error(`The configuration object is missing the required '${t}' property.`);
+  }
+  var e = this, h, v = [], U, p = {
+    enable: !0,
+    callbackList: [],
+    interval: 5
+  };
+  e.didInitialize = !1;
+  var A = !0, _ = J(console.info), L = J(console.warn);
+  globalThis.isSecureContext || L(
+    `[KEYCLOAK] Keycloak JS must be used in a 'secure context' to function properly as it relies on browser APIs that are otherwise not available.
+Continuing to run your application insecurely will lead to unexpected behavior and breakage.
+
+For more information see: https://developer.mozilla.org/en-US/docs/Web/Security/Secure_Contexts`
+  ), e.init = function(r) {
+    if (e.didInitialize)
+      throw new Error("A 'Keycloak' instance can only be initialized once.");
+    e.didInitialize = !0, e.authenticated = !1, U = ee();
+    var t = ["default", "cordova", "cordova-native"];
+    if (r && t.indexOf(r.adapter) > -1 ? h = P(r.adapter) : r && typeof r.adapter == "object" ? h = r.adapter : window.Cordova || window.cordova ? h = P("cordova") : h = P(), r) {
+      if (typeof r.useNonce < "u" && (A = r.useNonce), typeof r.checkLoginIframe < "u" && (p.enable = r.checkLoginIframe), r.checkLoginIframeInterval && (p.interval = r.checkLoginIframeInterval), r.onLoad === "login-required" && (e.loginRequired = !0), r.responseMode)
+        if (r.responseMode === "query" || r.responseMode === "fragment")
+          e.responseMode = r.responseMode;
+        else
+          throw "Invalid value for responseMode";
+      if (r.flow) {
+        switch (r.flow) {
+          case "standard":
+            e.responseType = "code";
+            break;
+          case "implicit":
+            e.responseType = "id_token token";
+            break;
+          case "hybrid":
+            e.responseType = "code id_token token";
+            break;
+          default:
+            throw "Invalid value for flow";
+        }
+        e.flow = r.flow;
+      }
+      if (r.timeSkew != null && (e.timeSkew = r.timeSkew), r.redirectUri && (e.redirectUri = r.redirectUri), r.silentCheckSsoRedirectUri && (e.silentCheckSsoRedirectUri = r.silentCheckSsoRedirectUri), typeof r.silentCheckSsoFallback == "boolean" ? e.silentCheckSsoFallback = r.silentCheckSsoFallback : e.silentCheckSsoFallback = !0, typeof r.pkceMethod < "u") {
+        if (r.pkceMethod !== "S256" && r.pkceMethod !== !1)
+          throw new TypeError(`Invalid value for pkceMethod', expected 'S256' or false but got ${r.pkceMethod}.`);
+        e.pkceMethod = r.pkceMethod;
+      } else
+        e.pkceMethod = "S256";
+      typeof r.enableLogging == "boolean" ? e.enableLogging = r.enableLogging : e.enableLogging = !1, r.logoutMethod === "POST" ? e.logoutMethod = "POST" : e.logoutMethod = "GET", typeof r.scope == "string" && (e.scope = r.scope), typeof r.acrValues == "string" && (e.acrValues = r.acrValues), typeof r.messageReceiveTimeout == "number" && r.messageReceiveTimeout > 0 ? e.messageReceiveTimeout = r.messageReceiveTimeout : e.messageReceiveTimeout = 1e4;
+    }
+    e.responseMode || (e.responseMode = "fragment"), e.responseType || (e.responseType = "code", e.flow = "standard");
+    var s = g(), i = g();
+    i.promise.then(function() {
+      e.onReady && e.onReady(e.authenticated), s.setSuccess(e.authenticated);
+    }).catch(function(o) {
+      s.setError(o);
+    });
+    var a = W();
+    function c() {
+      var o = function(d) {
+        d || (u.prompt = "none"), r && r.locale && (u.locale = r.locale), e.login(u).then(function() {
+          i.setSuccess();
+        }).catch(function(k) {
+          i.setError(k);
+        });
+      }, l = async function() {
+        var d = document.createElement("iframe"), k = await e.createLoginUrl({ prompt: "none", redirectUri: e.silentCheckSsoRedirectUri });
+        d.setAttribute("src", k), d.setAttribute("sandbox", "allow-storage-access-by-user-activation allow-scripts allow-same-origin"), d.setAttribute("title", "keycloak-silent-check-sso"), d.style.display = "none", document.body.appendChild(d);
+        var y = function(S) {
+          if (!(S.origin !== window.location.origin || d.contentWindow !== S.source)) {
+            var w = T(S.data);
+            I(w, i), document.body.removeChild(d), window.removeEventListener("message", y);
+          }
+        };
+        window.addEventListener("message", y);
+      }, u = {};
+      switch (r.onLoad) {
+        case "check-sso":
+          p.enable ? R().then(function() {
+            C().then(function(d) {
+              d ? i.setSuccess() : e.silentCheckSsoRedirectUri ? l() : o(!1);
+            }).catch(function(d) {
+              i.setError(d);
+            });
+          }) : e.silentCheckSsoRedirectUri ? l() : o(!1);
+          break;
+        case "login-required":
+          o(!0);
+          break;
+        default:
+          throw "Invalid value for onLoad";
+      }
+    }
+    function n() {
+      var o = T(window.location.href);
+      if (o && window.history.replaceState(window.history.state, null, o.newUrl), o && o.valid)
+        return R().then(function() {
+          I(o, i);
+        }).catch(function(l) {
+          i.setError(l);
+        });
+      r ? r.token && r.refreshToken ? (E(r.token, r.refreshToken, r.idToken), p.enable ? R().then(function() {
+        C().then(function(l) {
+          l ? (e.onAuthSuccess && e.onAuthSuccess(), i.setSuccess(), x()) : i.setSuccess();
+        }).catch(function(l) {
+          i.setError(l);
+        });
+      }) : e.updateToken(-1).then(function() {
+        e.onAuthSuccess && e.onAuthSuccess(), i.setSuccess();
+      }).catch(function(l) {
+        e.onAuthError && e.onAuthError(), r.onLoad ? c() : i.setError(l);
+      })) : r.onLoad ? c() : i.setSuccess() : i.setSuccess();
+    }
+    return a.then(function() {
+      Z().then(n).catch(function(o) {
+        s.setError(o);
+      });
+    }), a.catch(function(o) {
+      s.setError(o);
+    }), s.promise;
+  }, e.login = function(r) {
+    return h.login(r);
+  };
+  function F(r) {
+    if (typeof crypto > "u" || typeof crypto.getRandomValues > "u")
+      throw new Error("Web Crypto API is not available.");
+    return crypto.getRandomValues(new Uint8Array(r));
+  }
+  function O(r) {
+    return q(r, "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789");
+  }
+  function q(r, t) {
+    for (var s = F(r), i = new Array(r), a = 0; a < r; a++)
+      i[a] = t.charCodeAt(s[a] % t.length);
+    return String.fromCharCode.apply(null, i);
+  }
+  async function B(r, t) {
+    if (r !== "S256")
+      throw new TypeError(`Invalid value for 'pkceMethod', expected 'S256' but got '${r}'.`);
+    const s = new Uint8Array(await te(t));
+    return re(s).replace(/\+/g, "-").replace(/\//g, "_").replace(/\=/g, "");
+  }
+  function G(r) {
+    var t = {
+      id_token: {
+        acr: r
+      }
+    };
+    return JSON.stringify(t);
+  }
+  e.createLoginUrl = async function(r) {
+    var t = j(), s = j(), i = h.redirectUri(r), a = {
+      state: t,
+      nonce: s,
+      redirectUri: encodeURIComponent(i),
+      loginOptions: r
+    };
+    r && r.prompt && (a.prompt = r.prompt);
+    var c;
+    r && r.action == "register" ? c = e.endpoints.register() : c = e.endpoints.authorize();
+    var n = r && r.scope || e.scope;
+    n ? n.indexOf("openid") === -1 && (n = "openid " + n) : n = "openid";
+    var o = c + "?client_id=" + encodeURIComponent(e.clientId) + "&redirect_uri=" + encodeURIComponent(i) + "&state=" + encodeURIComponent(t) + "&response_mode=" + encodeURIComponent(e.responseMode) + "&response_type=" + encodeURIComponent(e.responseType) + "&scope=" + encodeURIComponent(n);
+    if (A && (o = o + "&nonce=" + encodeURIComponent(s)), r && r.prompt && (o += "&prompt=" + encodeURIComponent(r.prompt)), r && typeof r.maxAge == "number" && (o += "&max_age=" + encodeURIComponent(r.maxAge)), r && r.loginHint && (o += "&login_hint=" + encodeURIComponent(r.loginHint)), r && r.idpHint && (o += "&kc_idp_hint=" + encodeURIComponent(r.idpHint)), r && r.action && r.action != "register" && (o += "&kc_action=" + encodeURIComponent(r.action)), r && r.locale && (o += "&ui_locales=" + encodeURIComponent(r.locale)), r && r.acr) {
+      var l = G(r.acr);
+      o += "&claims=" + encodeURIComponent(l);
+    }
+    if ((r && r.acrValues || e.acrValues) && (o += "&acr_values=" + encodeURIComponent(r.acrValues || e.acrValues)), e.pkceMethod)
+      try {
+        const u = O(96), d = await B(e.pkceMethod, u);
+        a.pkceCodeVerifier = u, o += "&code_challenge=" + d, o += "&code_challenge_method=" + e.pkceMethod;
+      } catch (u) {
+        throw new Error("Failed to generate PKCE challenge.", { cause: u });
+      }
+    return U.add(a), o;
+  }, e.logout = function(r) {
+    return h.logout(r);
+  }, e.createLogoutUrl = function(r) {
+    if (((r == null ? void 0 : r.logoutMethod) ?? e.logoutMethod) === "POST")
+      return e.endpoints.logout();
+    var s = e.endpoints.logout() + "?client_id=" + encodeURIComponent(e.clientId) + "&post_logout_redirect_uri=" + encodeURIComponent(h.redirectUri(r, !1));
+    return e.idToken && (s += "&id_token_hint=" + encodeURIComponent(e.idToken)), s;
+  }, e.register = function(r) {
+    return h.register(r);
+  }, e.createRegisterUrl = async function(r) {
+    return r || (r = {}), r.action = "register", await e.createLoginUrl(r);
+  }, e.createAccountUrl = function(r) {
+    var t = b(), s = void 0;
+    return typeof t < "u" && (s = t + "/account?referrer=" + encodeURIComponent(e.clientId) + "&referrer_uri=" + encodeURIComponent(h.redirectUri(r))), s;
+  }, e.accountManagement = function() {
+    return h.accountManagement();
+  }, e.hasRealmRole = function(r) {
+    var t = e.realmAccess;
+    return !!t && t.roles.indexOf(r) >= 0;
+  }, e.hasResourceRole = function(r, t) {
+    if (!e.resourceAccess)
+      return !1;
+    var s = e.resourceAccess[t || e.clientId];
+    return !!s && s.roles.indexOf(r) >= 0;
+  }, e.loadUserProfile = function() {
+    var r = b() + "/account", t = new XMLHttpRequest();
+    t.open("GET", r, !0), t.setRequestHeader("Accept", "application/json"), t.setRequestHeader("Authorization", "bearer " + e.token);
+    var s = g();
+    return t.onreadystatechange = function() {
+      t.readyState == 4 && (t.status == 200 ? (e.profile = JSON.parse(t.responseText), s.setSuccess(e.profile)) : s.setError());
+    }, t.send(), s.promise;
+  }, e.loadUserInfo = function() {
+    var r = e.endpoints.userinfo(), t = new XMLHttpRequest();
+    t.open("GET", r, !0), t.setRequestHeader("Accept", "application/json"), t.setRequestHeader("Authorization", "bearer " + e.token);
+    var s = g();
+    return t.onreadystatechange = function() {
+      t.readyState == 4 && (t.status == 200 ? (e.userInfo = JSON.parse(t.responseText), s.setSuccess(e.userInfo)) : s.setError());
+    }, t.send(), s.promise;
+  }, e.isTokenExpired = function(r) {
+    if (!e.tokenParsed || !e.refreshToken && e.flow != "implicit")
+      throw "Not authenticated";
+    if (e.timeSkew == null)
+      return _("[KEYCLOAK] Unable to determine if token is expired as timeskew is not set"), !0;
+    var t = e.tokenParsed.exp - Math.ceil((/* @__PURE__ */ new Date()).getTime() / 1e3) + e.timeSkew;
+    if (r) {
+      if (isNaN(r))
+        throw "Invalid minValidity";
+      t -= r;
+    }
+    return t < 0;
+  }, e.updateToken = function(r) {
+    var t = g();
+    if (!e.refreshToken)
+      return t.setError(), t.promise;
+    r = r || 5;
+    var s = function() {
+      var a = !1;
+      if (r == -1 ? (a = !0, _("[KEYCLOAK] Refreshing token: forced refresh")) : (!e.tokenParsed || e.isTokenExpired(r)) && (a = !0, _("[KEYCLOAK] Refreshing token: token expired")), !a)
+        t.setSuccess(!1);
+      else {
+        var c = "grant_type=refresh_token&refresh_token=" + e.refreshToken, n = e.endpoints.token();
+        if (v.push(t), v.length == 1) {
+          var o = new XMLHttpRequest();
+          o.open("POST", n, !0), o.setRequestHeader("Content-type", "application/x-www-form-urlencoded"), o.withCredentials = !0, c += "&client_id=" + encodeURIComponent(e.clientId);
+          var l = (/* @__PURE__ */ new Date()).getTime();
+          o.onreadystatechange = function() {
+            if (o.readyState == 4)
+              if (o.status == 200) {
+                _("[KEYCLOAK] Token refreshed"), l = (l + (/* @__PURE__ */ new Date()).getTime()) / 2;
+                var u = JSON.parse(o.responseText);
+                E(u.access_token, u.refresh_token, u.id_token, l), e.onAuthRefreshSuccess && e.onAuthRefreshSuccess();
+                for (var d = v.pop(); d != null; d = v.pop())
+                  d.setSuccess(!0);
+              } else {
+                L("[KEYCLOAK] Failed to refresh token"), o.status == 400 && e.clearToken(), e.onAuthRefreshError && e.onAuthRefreshError();
+                for (var d = v.pop(); d != null; d = v.pop())
+                  d.setError(!0);
+              }
+          }, o.send(c);
+        }
+      }
+    };
+    if (p.enable) {
+      var i = C();
+      i.then(function() {
+        s();
+      }).catch(function(a) {
+        t.setError(a);
+      });
+    } else
+      s();
+    return t.promise;
+  }, e.clearToken = function() {
+    e.token && (E(null, null, null), e.onAuthLogout && e.onAuthLogout(), e.loginRequired && e.login());
+  };
+  function b() {
+    if (typeof e.authServerUrl < "u")
+      return e.authServerUrl.charAt(e.authServerUrl.length - 1) == "/" ? e.authServerUrl + "realms/" + encodeURIComponent(e.realm) : e.authServerUrl + "/realms/" + encodeURIComponent(e.realm);
+  }
+  function X() {
+    return window.location.origin ? window.location.origin : window.location.protocol + "//" + window.location.hostname + (window.location.port ? ":" + window.location.port : "");
+  }
+  function I(r, t) {
+    var s = r.code, i = r.error, a = r.prompt, c = (/* @__PURE__ */ new Date()).getTime();
+    if (r.kc_action_status && e.onActionUpdate && e.onActionUpdate(r.kc_action_status, r.kc_action), i) {
+      if (a != "none")
+        if (r.error_description && r.error_description === "authentication_expired")
+          e.login(r.loginOptions);
+        else {
+          var n = { error: i, error_description: r.error_description };
+          e.onAuthError && e.onAuthError(n), t && t.setError(n);
+        }
+      else
+        t && t.setSuccess();
+      return;
+    } else e.flow != "standard" && (r.access_token || r.id_token) && d(r.access_token, null, r.id_token, !0);
+    if (e.flow != "implicit" && s) {
+      var o = "code=" + s + "&grant_type=authorization_code", l = e.endpoints.token(), u = new XMLHttpRequest();
+      u.open("POST", l, !0), u.setRequestHeader("Content-type", "application/x-www-form-urlencoded"), o += "&client_id=" + encodeURIComponent(e.clientId), o += "&redirect_uri=" + r.redirectUri, r.pkceCodeVerifier && (o += "&code_verifier=" + r.pkceCodeVerifier), u.withCredentials = !0, u.onreadystatechange = function() {
+        if (u.readyState == 4)
+          if (u.status == 200) {
+            var k = JSON.parse(u.responseText);
+            d(k.access_token, k.refresh_token, k.id_token, e.flow === "standard"), x();
+          } else
+            e.onAuthError && e.onAuthError(), t && t.setError();
+      }, u.send(o);
+    }
+    function d(k, y, S, w) {
+      c = (c + (/* @__PURE__ */ new Date()).getTime()) / 2, E(k, y, S, c), A && e.idTokenParsed && e.idTokenParsed.nonce != r.storedNonce ? (_("[KEYCLOAK] Invalid nonce, clearing token"), e.clearToken(), t && t.setError()) : w && (e.onAuthSuccess && e.onAuthSuccess(), t && t.setSuccess());
+    }
+  }
+  function W() {
+    var r = g(), t;
+    typeof f == "string" && (t = f);
+    function s(n) {
+      n ? e.endpoints = {
+        authorize: function() {
+          return n.authorization_endpoint;
+        },
+        token: function() {
+          return n.token_endpoint;
+        },
+        logout: function() {
+          if (!n.end_session_endpoint)
+            throw "Not supported by the OIDC server";
+          return n.end_session_endpoint;
+        },
+        checkSessionIframe: function() {
+          if (!n.check_session_iframe)
+            throw "Not supported by the OIDC server";
+          return n.check_session_iframe;
+        },
+        register: function() {
+          throw 'Redirection to "Register user" page not supported in standard OIDC mode';
+        },
+        userinfo: function() {
+          if (!n.userinfo_endpoint)
+            throw "Not supported by the OIDC server";
+          return n.userinfo_endpoint;
+        }
+      } : e.endpoints = {
+        authorize: function() {
+          return b() + "/protocol/openid-connect/auth";
+        },
+        token: function() {
+          return b() + "/protocol/openid-connect/token";
+        },
+        logout: function() {
+          return b() + "/protocol/openid-connect/logout";
+        },
+        checkSessionIframe: function() {
+          return b() + "/protocol/openid-connect/login-status-iframe.html";
+        },
+        thirdPartyCookiesIframe: function() {
+          return b() + "/protocol/openid-connect/3p-cookies/step1.html";
+        },
+        register: function() {
+          return b() + "/protocol/openid-connect/registrations";
+        },
+        userinfo: function() {
+          return b() + "/protocol/openid-connect/userinfo";
+        }
+      };
+    }
+    if (t) {
+      var i = new XMLHttpRequest();
+      i.open("GET", t, !0), i.setRequestHeader("Accept", "application/json"), i.onreadystatechange = function() {
+        if (i.readyState == 4)
+          if (i.status == 200 || D(i)) {
+            var n = JSON.parse(i.responseText);
+            e.authServerUrl = n["auth-server-url"], e.realm = n.realm, e.clientId = n.resource, s(null), r.setSuccess();
+          } else
+            r.setError();
+      }, i.send();
+    } else {
+      e.clientId = f.clientId;
+      var a = f.oidcProvider;
+      if (!a)
+        e.authServerUrl = f.url, e.realm = f.realm, s(null), r.setSuccess();
+      else if (typeof a == "string") {
+        var c;
+        a.charAt(a.length - 1) == "/" ? c = a + ".well-known/openid-configuration" : c = a + "/.well-known/openid-configuration";
+        var i = new XMLHttpRequest();
+        i.open("GET", c, !0), i.setRequestHeader("Accept", "application/json"), i.onreadystatechange = function() {
+          if (i.readyState == 4)
+            if (i.status == 200 || D(i)) {
+              var o = JSON.parse(i.responseText);
+              s(o), r.setSuccess();
+            } else
+              r.setError();
+        }, i.send();
+      } else
+        s(a), r.setSuccess();
+    }
+    return r.promise;
+  }
+  function D(r) {
+    return r.status == 0 && r.responseText && r.responseURL.startsWith("file:");
+  }
+  function E(r, t, s, i) {
+    if (e.tokenTimeoutHandle && (clearTimeout(e.tokenTimeoutHandle), e.tokenTimeoutHandle = null), t ? (e.refreshToken = t, e.refreshTokenParsed = N(t)) : (delete e.refreshToken, delete e.refreshTokenParsed), s ? (e.idToken = s, e.idTokenParsed = N(s)) : (delete e.idToken, delete e.idTokenParsed), r) {
+      if (e.token = r, e.tokenParsed = N(r), e.sessionId = e.tokenParsed.sid, e.authenticated = !0, e.subject = e.tokenParsed.sub, e.realmAccess = e.tokenParsed.realm_access, e.resourceAccess = e.tokenParsed.resource_access, i && (e.timeSkew = Math.floor(i / 1e3) - e.tokenParsed.iat), e.timeSkew != null && (_("[KEYCLOAK] Estimated time difference between browser and server is " + e.timeSkew + " seconds"), e.onTokenExpired)) {
+        var a = (e.tokenParsed.exp - (/* @__PURE__ */ new Date()).getTime() / 1e3 + e.timeSkew) * 1e3;
+        _("[KEYCLOAK] Token expires in " + Math.round(a / 1e3) + " s"), a <= 0 ? e.onTokenExpired() : e.tokenTimeoutHandle = setTimeout(e.onTokenExpired, a);
+      }
+    } else
+      delete e.token, delete e.tokenParsed, delete e.subject, delete e.realmAccess, delete e.resourceAccess, e.authenticated = !1;
+  }
+  function j() {
+    if (typeof crypto > "u" || typeof crypto.randomUUID > "u")
+      throw new Error("Web Crypto API is not available.");
+    return crypto.randomUUID();
+  }
+  function T(r) {
+    var t = $(r);
+    if (t) {
+      var s = U.get(t.state);
+      return s && (t.valid = !0, t.redirectUri = s.redirectUri, t.storedNonce = s.nonce, t.prompt = s.prompt, t.pkceCodeVerifier = s.pkceCodeVerifier, t.loginOptions = s.loginOptions), t;
+    }
+  }
+  function $(r) {
+    var t;
+    switch (e.flow) {
+      case "standard":
+        t = ["code", "state", "session_state", "kc_action_status", "kc_action", "iss"];
+        break;
+      case "implicit":
+        t = ["access_token", "token_type", "id_token", "state", "session_state", "expires_in", "kc_action_status", "kc_action", "iss"];
+        break;
+      case "hybrid":
+        t = ["access_token", "token_type", "id_token", "code", "state", "session_state", "expires_in", "kc_action_status", "kc_action", "iss"];
+        break;
+    }
+    t.push("error"), t.push("error_description"), t.push("error_uri");
+    var s = r.indexOf("?"), i = r.indexOf("#"), a, c;
+    if (e.responseMode === "query" && s !== -1 ? (a = r.substring(0, s), c = z(r.substring(s + 1, i !== -1 ? i : r.length), t), c.paramsString !== "" && (a += "?" + c.paramsString), i !== -1 && (a += r.substring(i))) : e.responseMode === "fragment" && i !== -1 && (a = r.substring(0, i), c = z(r.substring(i + 1), t), c.paramsString !== "" && (a += "#" + c.paramsString)), c && c.oauthParams) {
+      if (e.flow === "standard" || e.flow === "hybrid") {
+        if ((c.oauthParams.code || c.oauthParams.error) && c.oauthParams.state)
+          return c.oauthParams.newUrl = a, c.oauthParams;
+      } else if (e.flow === "implicit" && (c.oauthParams.access_token || c.oauthParams.error) && c.oauthParams.state)
+        return c.oauthParams.newUrl = a, c.oauthParams;
+    }
+  }
+  function z(r, t) {
+    for (var s = r.split("&"), i = {
+      paramsString: "",
+      oauthParams: {}
+    }, a = 0; a < s.length; a++) {
+      var c = s[a].indexOf("="), n = s[a].slice(0, c);
+      t.indexOf(n) !== -1 ? i.oauthParams[n] = s[a].slice(c + 1) : (i.paramsString !== "" && (i.paramsString += "&"), i.paramsString += s[a]);
+    }
+    return i;
+  }
+  function g() {
+    var r = {
+      setSuccess: function(t) {
+        r.resolve(t);
+      },
+      setError: function(t) {
+        r.reject(t);
+      }
+    };
+    return r.promise = new Promise(function(t, s) {
+      r.resolve = t, r.reject = s;
+    }), r;
+  }
+  function Q(r, t, s) {
+    var i = null, a = new Promise(function(c, n) {
+      i = setTimeout(function() {
+        n({ error: s });
+      }, t);
+    });
+    return Promise.race([r, a]).finally(function() {
+      clearTimeout(i);
+    });
+  }
+  function R() {
+    var r = g();
+    if (!p.enable || p.iframe)
+      return r.setSuccess(), r.promise;
+    var t = document.createElement("iframe");
+    p.iframe = t, t.onload = function() {
+      var a = e.endpoints.authorize();
+      a.charAt(0) === "/" ? p.iframeOrigin = X() : p.iframeOrigin = a.substring(0, a.indexOf("/", 8)), r.setSuccess();
+    };
+    var s = e.endpoints.checkSessionIframe();
+    t.setAttribute("src", s), t.setAttribute("sandbox", "allow-storage-access-by-user-activation allow-scripts allow-same-origin"), t.setAttribute("title", "keycloak-session-iframe"), t.style.display = "none", document.body.appendChild(t);
+    var i = function(a) {
+      if (!(a.origin !== p.iframeOrigin || p.iframe.contentWindow !== a.source) && (a.data == "unchanged" || a.data == "changed" || a.data == "error")) {
+        a.data != "unchanged" && e.clearToken();
+        for (var c = p.callbackList.splice(0, p.callbackList.length), n = c.length - 1; n >= 0; --n) {
+          var o = c[n];
+          a.data == "error" ? o.setError() : o.setSuccess(a.data == "unchanged");
+        }
+      }
+    };
+    return window.addEventListener("message", i, !1), r.promise;
+  }
+  function x() {
+    p.enable && e.token && setTimeout(function() {
+      C().then(function(r) {
+        r && x();
+      });
+    }, p.interval * 1e3);
+  }
+  function C() {
+    var r = g();
+    if (p.iframe && p.iframeOrigin) {
+      var t = e.clientId + " " + (e.sessionId ? e.sessionId : "");
+      p.callbackList.push(r);
+      var s = p.iframeOrigin;
+      p.callbackList.length == 1 && p.iframe.contentWindow.postMessage(t, s);
+    } else
+      r.setSuccess();
+    return r.promise;
+  }
+  function Z() {
+    var r = g();
+    if (p.enable || e.silentCheckSsoRedirectUri) {
+      var t = document.createElement("iframe");
+      t.setAttribute("src", e.endpoints.thirdPartyCookiesIframe()), t.setAttribute("sandbox", "allow-storage-access-by-user-activation allow-scripts allow-same-origin"), t.setAttribute("title", "keycloak-3p-check-iframe"), t.style.display = "none", document.body.appendChild(t);
+      var s = function(i) {
+        t.contentWindow === i.source && (i.data !== "supported" && i.data !== "unsupported" || (i.data === "unsupported" && (L(
+          `[KEYCLOAK] Your browser is blocking access to 3rd-party cookies, this means:
+
+ - It is not possible to retrieve tokens without redirecting to the Keycloak server (a.k.a. no support for silent authentication).
+ - It is not possible to automatically detect changes to the session status (such as the user logging out in another tab).
+
+For more information see: https://www.keycloak.org/docs/latest/securing_apps/#_modern_browsers`
+        ), p.enable = !1, e.silentCheckSsoFallback && (e.silentCheckSsoRedirectUri = !1)), document.body.removeChild(t), window.removeEventListener("message", s), r.setSuccess()));
+      };
+      window.addEventListener("message", s, !1);
+    } else
+      r.setSuccess();
+    return Q(r.promise, e.messageReceiveTimeout, "Timeout when waiting for 3rd party check iframe message.");
+  }
+  function P(r) {
+    if (!r || r == "default")
+      return {
+        login: async function(n) {
+          return window.location.assign(await e.createLoginUrl(n)), g().promise;
+        },
+        logout: async function(n) {
+          if (((n == null ? void 0 : n.logoutMethod) ?? e.logoutMethod) === "GET") {
+            window.location.replace(e.createLogoutUrl(n));
+            return;
+          }
+          const l = e.createLogoutUrl(n), u = await fetch(l, {
+            method: "POST",
+            headers: {
+              "Content-Type": "application/x-www-form-urlencoded"
+            },
+            body: new URLSearchParams({
+              id_token_hint: e.idToken,
+              client_id: e.clientId,
+              post_logout_redirect_uri: h.redirectUri(n, !1)
+            })
+          });
+          if (u.redirected) {
+            window.location.href = u.url;
+            return;
+          }
+          if (u.ok) {
+            window.location.reload();
+            return;
+          }
+          throw new Error("Logout failed, request returned an error code.");
+        },
+        register: function(n) {
+          return window.location.assign(e.createRegisterUrl(n)), g().promise;
+        },
+        accountManagement: function() {
+          var n = e.createAccountUrl();
+          if (typeof n < "u")
+            window.location.href = n;
+          else
+            throw "Not supported by the OIDC server";
+          return g().promise;
+        },
+        redirectUri: function(n, o) {
+          return n && n.redirectUri ? n.redirectUri : e.redirectUri ? e.redirectUri : location.href;
+        }
+      };
+    if (r == "cordova") {
+      p.enable = !1;
+      var t = function(n, o, l) {
+        return window.cordova && window.cordova.InAppBrowser ? window.cordova.InAppBrowser.open(n, o, l) : window.open(n, o, l);
+      }, s = function(n) {
+        return n && n.cordovaOptions ? Object.keys(n.cordovaOptions).reduce(function(o, l) {
+          return o[l] = n.cordovaOptions[l], o;
+        }, {}) : {};
+      }, i = function(n) {
+        return Object.keys(n).reduce(function(o, l) {
+          return o.push(l + "=" + n[l]), o;
+        }, []).join(",");
+      }, a = function(n) {
+        var o = s(n);
+        return o.location = "no", n && n.prompt == "none" && (o.hidden = "yes"), i(o);
+      }, c = function() {
+        return e.redirectUri || "http://localhost";
+      };
+      return {
+        login: async function(n) {
+          var o = g(), l = a(n), u = await e.createLoginUrl(n), d = t(u, "_blank", l), k = !1, y = !1, S = function() {
+            y = !0, d.close();
+          };
+          return d.addEventListener("loadstart", function(w) {
+            if (w.url.indexOf(c()) == 0) {
+              var H = T(w.url);
+              I(H, o), S(), k = !0;
+            }
+          }), d.addEventListener("loaderror", function(w) {
+            if (!k)
+              if (w.url.indexOf(c()) == 0) {
+                var H = T(w.url);
+                I(H, o), S(), k = !0;
+              } else
+                o.setError(), S();
+          }), d.addEventListener("exit", function(w) {
+            y || o.setError({
+              reason: "closed_by_user"
+            });
+          }), o.promise;
+        },
+        logout: function(n) {
+          var o = g(), l = e.createLogoutUrl(n), u = t(l, "_blank", "location=no,hidden=yes,clearcache=yes"), d;
+          return u.addEventListener("loadstart", function(k) {
+            k.url.indexOf(c()) == 0 && u.close();
+          }), u.addEventListener("loaderror", function(k) {
+            k.url.indexOf(c()) == 0 || (d = !0), u.close();
+          }), u.addEventListener("exit", function(k) {
+            d ? o.setError() : (e.clearToken(), o.setSuccess());
+          }), o.promise;
+        },
+        register: function(n) {
+          var o = g(), l = e.createRegisterUrl(), u = a(n), d = t(l, "_blank", u);
+          return d.addEventListener("loadstart", function(k) {
+            if (k.url.indexOf(c()) == 0) {
+              d.close();
+              var y = T(k.url);
+              I(y, o);
+            }
+          }), o.promise;
+        },
+        accountManagement: function() {
+          var n = e.createAccountUrl();
+          if (typeof n < "u") {
+            var o = t(n, "_blank", "location=no");
+            o.addEventListener("loadstart", function(l) {
+              l.url.indexOf(c()) == 0 && o.close();
+            });
+          } else
+            throw "Not supported by the OIDC server";
+        },
+        redirectUri: function(n) {
+          return c();
+        }
+      };
+    }
+    if (r == "cordova-native")
+      return p.enable = !1, {
+        login: async function(n) {
+          var o = g(), l = await e.createLoginUrl(n);
+          return universalLinks.subscribe("keycloak", function(u) {
+            universalLinks.unsubscribe("keycloak"), window.cordova.plugins.browsertab.close();
+            var d = T(u.url);
+            I(d, o);
+          }), window.cordova.plugins.browsertab.openUrl(l), o.promise;
+        },
+        logout: function(n) {
+          var o = g(), l = e.createLogoutUrl(n);
+          return universalLinks.subscribe("keycloak", function(u) {
+            universalLinks.unsubscribe("keycloak"), window.cordova.plugins.browsertab.close(), e.clearToken(), o.setSuccess();
+          }), window.cordova.plugins.browsertab.openUrl(l), o.promise;
+        },
+        register: function(n) {
+          var o = g(), l = e.createRegisterUrl(n);
+          return universalLinks.subscribe("keycloak", function(u) {
+            universalLinks.unsubscribe("keycloak"), window.cordova.plugins.browsertab.close();
+            var d = T(u.url);
+            I(d, o);
+          }), window.cordova.plugins.browsertab.openUrl(l), o.promise;
+        },
+        accountManagement: function() {
+          var n = e.createAccountUrl();
+          if (typeof n < "u")
+            window.cordova.plugins.browsertab.openUrl(n);
+          else
+            throw "Not supported by the OIDC server";
+        },
+        redirectUri: function(n) {
+          return n && n.redirectUri ? n.redirectUri : e.redirectUri ? e.redirectUri : "http://localhost";
+        }
+      };
+    throw "invalid adapter type: " + r;
+  }
+  var M = function() {
+    if (!(this instanceof M))
+      return new M();
+    localStorage.setItem("kc-test", "test"), localStorage.removeItem("kc-test");
+    var r = this;
+    function t() {
+      for (var s = (/* @__PURE__ */ new Date()).getTime(), i = 0; i < localStorage.length; i++) {
+        var a = localStorage.key(i);
+        if (a && a.indexOf("kc-callback-") == 0) {
+          var c = localStorage.getItem(a);
+          if (c)
+            try {
+              var n = JSON.parse(c).expires;
+              (!n || n < s) && localStorage.removeItem(a);
+            } catch {
+              localStorage.removeItem(a);
+            }
+        }
+      }
+    }
+    r.get = function(s) {
+      if (s) {
+        var i = "kc-callback-" + s, a = localStorage.getItem(i);
+        return a && (localStorage.removeItem(i), a = JSON.parse(a)), t(), a;
+      }
+    }, r.add = function(s) {
+      t();
+      var i = "kc-callback-" + s.state;
+      s.expires = (/* @__PURE__ */ new Date()).getTime() + 60 * 60 * 1e3, localStorage.setItem(i, JSON.stringify(s));
+    };
+  }, K = function() {
+    if (!(this instanceof K))
+      return new K();
+    var r = this;
+    r.get = function(a) {
+      if (a) {
+        var c = s("kc-callback-" + a);
+        if (i("kc-callback-" + a, "", t(-100)), c)
+          return JSON.parse(c);
+      }
+    }, r.add = function(a) {
+      i("kc-callback-" + a.state, JSON.stringify(a), t(60));
+    }, r.removeItem = function(a) {
+      i(a, "", t(-100));
+    };
+    var t = function(a) {
+      var c = /* @__PURE__ */ new Date();
+      return c.setTime(c.getTime() + a * 60 * 1e3), c;
+    }, s = function(a) {
+      for (var c = a + "=", n = document.cookie.split(";"), o = 0; o < n.length; o++) {
+        for (var l = n[o]; l.charAt(0) == " "; )
+          l = l.substring(1);
+        if (l.indexOf(c) == 0)
+          return l.substring(c.length, l.length);
+      }
+      return "";
+    }, i = function(a, c, n) {
+      var o = a + "=" + c + "; expires=" + n.toUTCString() + "; ";
+      document.cookie = o;
+    };
+  };
+  function ee() {
+    try {
+      return new M();
+    } catch {
+    }
+    return new K();
+  }
+  function J(r) {
+    return function() {
+      e.enableLogging && r.apply(console, Array.prototype.slice.call(arguments));
+    };
+  }
+}
+function re(f) {
+  const e = String.fromCodePoint(...f);
+  return btoa(e);
+}
+async function te(f) {
+  const h = new TextEncoder().encode(f);
+  if (typeof crypto > "u" || typeof crypto.subtle > "u")
+    throw new Error("Web Crypto API is not available.");
+  return await crypto.subtle.digest("SHA-256", h);
+}
+function N(f) {
+  const [e, h] = f.split(".");
+  if (typeof h != "string")
+    throw new Error("Unable to decode token, payload not found.");
+  let v;
+  try {
+    v = ne(h);
+  } catch (U) {
+    throw new Error("Unable to decode token, payload is not a valid Base64URL value.", { cause: U });
+  }
+  try {
+    return JSON.parse(v);
+  } catch (U) {
+    throw new Error("Unable to decode token, payload is not a valid JSON value.", { cause: U });
+  }
+}
+function ne(f) {
+  let e = f.replaceAll("-", "+").replaceAll("_", "/");
+  switch (e.length % 4) {
+    case 0:
+      break;
+    case 2:
+      e += "==";
+      break;
+    case 3:
+      e += "=";
+      break;
+    default:
+      throw new Error("Input is not of the correct length.");
+  }
+  try {
+    return oe(e);
+  } catch {
+    return atob(e);
+  }
+}
+function oe(f) {
+  return decodeURIComponent(atob(f).replace(/(.)/g, (e, h) => {
+    let v = h.charCodeAt(0).toString(16).toUpperCase();
+    return v.length < 2 && (v = "0" + v), "%" + v;
+  }));
+}
+function V(f) {
+  return typeof f == "object" && f !== null;
+}
+let m = null;
+function ae(f, e = !0) {
+  return m || (m = new Y({
+    url: f.url,
+    realm: f.realm,
+    clientId: f.clientId
+  })), m.init({
+    onLoad: e ? "check-sso" : "login-required",
+    checkLoginIframe: !1
+    //silentCheckSsoRedirectUri: `${window.location.origin}/silent-check-sso.html`, // Ensure this file is set up
+  }).then((h) => h).catch((h) => (console.error("Failed to initialize Keycloak:", h), !1));
+}
+function ie() {
+  return m != null && m.authenticated && (m != null && m.idTokenParsed) ? {
+    fullname: m.idTokenParsed.name,
+    email: m.idTokenParsed.email,
+    lastname: m.idTokenParsed.family_name,
+    firstname: m.idTokenParsed.given_name,
+    username: m.idTokenParsed.preferred_username,
+    background: "grey",
+    // Optional custom value
+    token: m.token,
+    sub: m.idTokenParsed.sub
+  } : {};
+}
+function se() {
+  m ? m.login() : console.error("Keycloak is not initialized.");
+}
+function ce() {
+  m ? m.logout() : console.error("Keycloak is not initialized.");
+}
+function le() {
+  return !!(m != null && m.authenticated);
+}
+async function ue(f) {
+  try {
+    const e = await fetch(f, { method: "HEAD", mode: "no-cors" });
+    return e.ok || e.type === "opaque";
+  } catch {
+    return !1;
+  }
+}
+export {
+  ce as a,
+  le as b,
+  ue as c,
+  ie as g,
+  ae as i,
+  se as l
+};