@ebrains/vue 0.4.0-alpha.0 → 0.5.0-alpha.0

package/{keycloak-13893af6-BLzE1H6E.mjs → keycloak-d502ec16-Ce0iGqyk.mjs}

@@ -1,9 +1,9 @@
 function Y(f) {
   if (!(this instanceof Y))
     throw new Error("The 'Keycloak' constructor must be invoked with 'new'.");
-  if (typeof f != "string" && !V(f))
+  if (typeof f != "string" && !z(f))
     throw new Error("The 'Keycloak' constructor must be provided with a configuration object, or a URL to a JSON configuration file.");
-  if (V(f)) {
+  if (z(f)) {
     const r = "oidcProvider" in f ? ["clientId"] : ["url", "realm", "clientId"];
     for (const t of r)
       if (!f[t])
@@ -15,80 +15,77 @@ function Y(f) {
     interval: 5
   };
   e.didInitialize = !1;
-  var A = !0, _ = J(console.info), L = J(console.warn);
-  globalThis.isSecureContext || L(
+  var R = !0, _ = F(console.info), x = F(console.warn);
+  globalThis.isSecureContext || x(
     `[KEYCLOAK] Keycloak JS must be used in a 'secure context' to function properly as it relies on browser APIs that are otherwise not available.
 Continuing to run your application insecurely will lead to unexpected behavior and breakage.
 
 For more information see: https://developer.mozilla.org/en-US/docs/Web/Security/Secure_Contexts`
-  ), e.init = function(r) {
+  ), e.init = function(r = {}) {
     if (e.didInitialize)
       throw new Error("A 'Keycloak' instance can only be initialized once.");
-    e.didInitialize = !0, e.authenticated = !1, U = ee();
+    e.didInitialize = !0, e.authenticated = !1, U = te();
     var t = ["default", "cordova", "cordova-native"];
-    if (r && t.indexOf(r.adapter) > -1 ? h = P(r.adapter) : r && typeof r.adapter == "object" ? h = r.adapter : window.Cordova || window.cordova ? h = P("cordova") : h = P(), r) {
-      if (typeof r.useNonce < "u" && (A = r.useNonce), typeof r.checkLoginIframe < "u" && (p.enable = r.checkLoginIframe), r.checkLoginIframeInterval && (p.interval = r.checkLoginIframeInterval), r.onLoad === "login-required" && (e.loginRequired = !0), r.responseMode)
-        if (r.responseMode === "query" || r.responseMode === "fragment")
-          e.responseMode = r.responseMode;
-        else
-          throw "Invalid value for responseMode";
-      if (r.flow) {
-        switch (r.flow) {
-          case "standard":
-            e.responseType = "code";
-            break;
-          case "implicit":
-            e.responseType = "id_token token";
-            break;
-          case "hybrid":
-            e.responseType = "code id_token token";
-            break;
-          default:
-            throw "Invalid value for flow";
-        }
-        e.flow = r.flow;
+    if (t.indexOf(r.adapter) > -1 ? h = K(r.adapter) : typeof r.adapter == "object" ? h = r.adapter : window.Cordova || window.cordova ? h = K("cordova") : h = K(), typeof r.useNonce < "u" && (R = r.useNonce), typeof r.checkLoginIframe < "u" && (p.enable = r.checkLoginIframe), r.checkLoginIframeInterval && (p.interval = r.checkLoginIframeInterval), r.onLoad === "login-required" && (e.loginRequired = !0), r.responseMode)
+      if (r.responseMode === "query" || r.responseMode === "fragment")
+        e.responseMode = r.responseMode;
+      else
+        throw "Invalid value for responseMode";
+    if (r.flow) {
+      switch (r.flow) {
+        case "standard":
+          e.responseType = "code";
+          break;
+        case "implicit":
+          e.responseType = "id_token token";
+          break;
+        case "hybrid":
+          e.responseType = "code id_token token";
+          break;
+        default:
+          throw "Invalid value for flow";
       }
-      if (r.timeSkew != null && (e.timeSkew = r.timeSkew), r.redirectUri && (e.redirectUri = r.redirectUri), r.silentCheckSsoRedirectUri && (e.silentCheckSsoRedirectUri = r.silentCheckSsoRedirectUri), typeof r.silentCheckSsoFallback == "boolean" ? e.silentCheckSsoFallback = r.silentCheckSsoFallback : e.silentCheckSsoFallback = !0, typeof r.pkceMethod < "u") {
-        if (r.pkceMethod !== "S256" && r.pkceMethod !== !1)
-          throw new TypeError(`Invalid value for pkceMethod', expected 'S256' or false but got ${r.pkceMethod}.`);
-        e.pkceMethod = r.pkceMethod;
-      } else
-        e.pkceMethod = "S256";
-      typeof r.enableLogging == "boolean" ? e.enableLogging = r.enableLogging : e.enableLogging = !1, r.logoutMethod === "POST" ? e.logoutMethod = "POST" : e.logoutMethod = "GET", typeof r.scope == "string" && (e.scope = r.scope), typeof r.acrValues == "string" && (e.acrValues = r.acrValues), typeof r.messageReceiveTimeout == "number" && r.messageReceiveTimeout > 0 ? e.messageReceiveTimeout = r.messageReceiveTimeout : e.messageReceiveTimeout = 1e4;
+      e.flow = r.flow;
     }
-    e.responseMode || (e.responseMode = "fragment"), e.responseType || (e.responseType = "code", e.flow = "standard");
+    if (r.timeSkew != null && (e.timeSkew = r.timeSkew), r.redirectUri && (e.redirectUri = r.redirectUri), r.silentCheckSsoRedirectUri && (e.silentCheckSsoRedirectUri = r.silentCheckSsoRedirectUri), typeof r.silentCheckSsoFallback == "boolean" ? e.silentCheckSsoFallback = r.silentCheckSsoFallback : e.silentCheckSsoFallback = !0, typeof r.pkceMethod < "u") {
+      if (r.pkceMethod !== "S256" && r.pkceMethod !== !1)
+        throw new TypeError(`Invalid value for pkceMethod', expected 'S256' or false but got ${r.pkceMethod}.`);
+      e.pkceMethod = r.pkceMethod;
+    } else
+      e.pkceMethod = "S256";
+    typeof r.enableLogging == "boolean" ? e.enableLogging = r.enableLogging : e.enableLogging = !1, r.logoutMethod === "POST" ? e.logoutMethod = "POST" : e.logoutMethod = "GET", typeof r.scope == "string" && (e.scope = r.scope), typeof r.acrValues == "string" && (e.acrValues = r.acrValues), typeof r.messageReceiveTimeout == "number" && r.messageReceiveTimeout > 0 ? e.messageReceiveTimeout = r.messageReceiveTimeout : e.messageReceiveTimeout = 1e4, e.responseMode || (e.responseMode = "fragment"), e.responseType || (e.responseType = "code", e.flow = "standard");
     var s = g(), i = g();
     i.promise.then(function() {
       e.onReady && e.onReady(e.authenticated), s.setSuccess(e.authenticated);
     }).catch(function(o) {
       s.setError(o);
     });
-    var a = W();
+    var a = Q();
     function c() {
-      var o = function(d) {
-        d || (u.prompt = "none"), r && r.locale && (u.locale = r.locale), e.login(u).then(function() {
+      var o = function(u) {
+        u || (d.prompt = "none"), r.locale && (d.locale = r.locale), e.login(d).then(function() {
           i.setSuccess();
-        }).catch(function(k) {
-          i.setError(k);
+        }).catch(function(m) {
+          i.setError(m);
         });
       }, l = async function() {
-        var d = document.createElement("iframe"), k = await e.createLoginUrl({ prompt: "none", redirectUri: e.silentCheckSsoRedirectUri });
-        d.setAttribute("src", k), d.setAttribute("sandbox", "allow-storage-access-by-user-activation allow-scripts allow-same-origin"), d.setAttribute("title", "keycloak-silent-check-sso"), d.style.display = "none", document.body.appendChild(d);
-        var y = function(S) {
-          if (!(S.origin !== window.location.origin || d.contentWindow !== S.source)) {
-            var w = T(S.data);
-            I(w, i), document.body.removeChild(d), window.removeEventListener("message", y);
+        var u = document.createElement("iframe"), m = await e.createLoginUrl({ prompt: "none", redirectUri: e.silentCheckSsoRedirectUri });
+        u.setAttribute("src", m), u.setAttribute("sandbox", "allow-storage-access-by-user-activation allow-scripts allow-same-origin"), u.setAttribute("title", "keycloak-silent-check-sso"), u.style.display = "none", document.body.appendChild(u);
+        var w = function(S) {
+          if (!(S.origin !== window.location.origin || u.contentWindow !== S.source)) {
+            var b = T(S.data);
+            I(b, i), document.body.removeChild(u), window.removeEventListener("message", w);
           }
         };
-        window.addEventListener("message", y);
-      }, u = {};
+        window.addEventListener("message", w);
+      }, d = {};
       switch (r.onLoad) {
         case "check-sso":
-          p.enable ? R().then(function() {
-            C().then(function(d) {
-              d ? i.setSuccess() : e.silentCheckSsoRedirectUri ? l() : o(!1);
-            }).catch(function(d) {
-              i.setError(d);
+          p.enable ? P().then(function() {
+            C().then(function(u) {
+              u ? i.setSuccess() : e.silentCheckSsoRedirectUri ? l() : o(!1);
+            }).catch(function(u) {
+              i.setError(u);
             });
           }) : e.silentCheckSsoRedirectUri ? l() : o(!1);
           break;
@@ -102,14 +99,14 @@ For more information see: https://developer.mozilla.org/en-US/docs/Web/Security/
     function n() {
       var o = T(window.location.href);
       if (o && window.history.replaceState(window.history.state, null, o.newUrl), o && o.valid)
-        return R().then(function() {
+        return P().then(function() {
           I(o, i);
         }).catch(function(l) {
           i.setError(l);
         });
-      r ? r.token && r.refreshToken ? (E(r.token, r.refreshToken, r.idToken), p.enable ? R().then(function() {
+      r.token && r.refreshToken ? (A(r.token, r.refreshToken, r.idToken), p.enable ? P().then(function() {
         C().then(function(l) {
-          l ? (e.onAuthSuccess && e.onAuthSuccess(), i.setSuccess(), x()) : i.setSuccess();
+          l ? (e.onAuthSuccess && e.onAuthSuccess(), i.setSuccess(), M()) : i.setSuccess();
         }).catch(function(l) {
           i.setError(l);
         });
@@ -117,10 +114,10 @@ For more information see: https://developer.mozilla.org/en-US/docs/Web/Security/
         e.onAuthSuccess && e.onAuthSuccess(), i.setSuccess();
       }).catch(function(l) {
         e.onAuthError && e.onAuthError(), r.onLoad ? c() : i.setError(l);
-      })) : r.onLoad ? c() : i.setSuccess() : i.setSuccess();
+      })) : r.onLoad ? c() : i.setSuccess();
     }
     return a.then(function() {
-      Z().then(n).catch(function(o) {
+      re().then(n).catch(function(o) {
         s.setError(o);
       });
     }), a.catch(function(o) {
@@ -129,26 +126,26 @@ For more information see: https://developer.mozilla.org/en-US/docs/Web/Security/
   }, e.login = function(r) {
     return h.login(r);
   };
-  function F(r) {
+  function G(r) {
     if (typeof crypto > "u" || typeof crypto.getRandomValues > "u")
       throw new Error("Web Crypto API is not available.");
     return crypto.getRandomValues(new Uint8Array(r));
   }
-  function O(r) {
+  function X(r) {
     return q(r, "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789");
   }
   function q(r, t) {
-    for (var s = F(r), i = new Array(r), a = 0; a < r; a++)
+    for (var s = G(r), i = new Array(r), a = 0; a < r; a++)
       i[a] = t.charCodeAt(s[a] % t.length);
     return String.fromCharCode.apply(null, i);
   }
   async function B(r, t) {
     if (r !== "S256")
       throw new TypeError(`Invalid value for 'pkceMethod', expected 'S256' but got '${r}'.`);
-    const s = new Uint8Array(await te(t));
-    return re(s).replace(/\+/g, "-").replace(/\//g, "_").replace(/\=/g, "");
+    const s = new Uint8Array(await oe(t));
+    return ne(s).replace(/\+/g, "-").replace(/\//g, "_").replace(/\=/g, "");
   }
-  function G(r) {
+  function W(r) {
     var t = {
       id_token: {
         acr: r
@@ -157,7 +154,7 @@ For more information see: https://developer.mozilla.org/en-US/docs/Web/Security/
     return JSON.stringify(t);
   }
   e.createLoginUrl = async function(r) {
-    var t = j(), s = j(), i = h.redirectUri(r), a = {
+    var t = J(), s = J(), i = h.redirectUri(r), a = {
       state: t,
       nonce: s,
       redirectUri: encodeURIComponent(i),
@@ -169,16 +166,16 @@ For more information see: https://developer.mozilla.org/en-US/docs/Web/Security/
     var n = r && r.scope || e.scope;
     n ? n.indexOf("openid") === -1 && (n = "openid " + n) : n = "openid";
     var o = c + "?client_id=" + encodeURIComponent(e.clientId) + "&redirect_uri=" + encodeURIComponent(i) + "&state=" + encodeURIComponent(t) + "&response_mode=" + encodeURIComponent(e.responseMode) + "&response_type=" + encodeURIComponent(e.responseType) + "&scope=" + encodeURIComponent(n);
-    if (A && (o = o + "&nonce=" + encodeURIComponent(s)), r && r.prompt && (o += "&prompt=" + encodeURIComponent(r.prompt)), r && typeof r.maxAge == "number" && (o += "&max_age=" + encodeURIComponent(r.maxAge)), r && r.loginHint && (o += "&login_hint=" + encodeURIComponent(r.loginHint)), r && r.idpHint && (o += "&kc_idp_hint=" + encodeURIComponent(r.idpHint)), r && r.action && r.action != "register" && (o += "&kc_action=" + encodeURIComponent(r.action)), r && r.locale && (o += "&ui_locales=" + encodeURIComponent(r.locale)), r && r.acr) {
-      var l = G(r.acr);
+    if (R && (o = o + "&nonce=" + encodeURIComponent(s)), r && r.prompt && (o += "&prompt=" + encodeURIComponent(r.prompt)), r && typeof r.maxAge == "number" && (o += "&max_age=" + encodeURIComponent(r.maxAge)), r && r.loginHint && (o += "&login_hint=" + encodeURIComponent(r.loginHint)), r && r.idpHint && (o += "&kc_idp_hint=" + encodeURIComponent(r.idpHint)), r && r.action && r.action != "register" && (o += "&kc_action=" + encodeURIComponent(r.action)), r && r.locale && (o += "&ui_locales=" + encodeURIComponent(r.locale)), r && r.acr) {
+      var l = W(r.acr);
       o += "&claims=" + encodeURIComponent(l);
     }
     if ((r && r.acrValues || e.acrValues) && (o += "&acr_values=" + encodeURIComponent(r.acrValues || e.acrValues)), e.pkceMethod)
       try {
-        const u = O(96), d = await B(e.pkceMethod, u);
-        a.pkceCodeVerifier = u, o += "&code_challenge=" + d, o += "&code_challenge_method=" + e.pkceMethod;
-      } catch (u) {
-        throw new Error("Failed to generate PKCE challenge.", { cause: u });
+        const d = X(96), u = await B(e.pkceMethod, d);
+        a.pkceCodeVerifier = d, o += "&code_challenge=" + u, o += "&code_challenge_method=" + e.pkceMethod;
+      } catch (d) {
+        throw new Error("Failed to generate PKCE challenge.", { cause: d });
       }
     return U.add(a), o;
   }, e.logout = function(r) {
@@ -193,7 +190,7 @@ For more information see: https://developer.mozilla.org/en-US/docs/Web/Security/
   }, e.createRegisterUrl = async function(r) {
     return r || (r = {}), r.action = "register", await e.createLoginUrl(r);
   }, e.createAccountUrl = function(r) {
-    var t = b(), s = void 0;
+    var t = y(), s = void 0;
     return typeof t < "u" && (s = t + "/account?referrer=" + encodeURIComponent(e.clientId) + "&referrer_uri=" + encodeURIComponent(h.redirectUri(r))), s;
   }, e.accountManagement = function() {
     return h.accountManagement();
@@ -206,7 +203,7 @@ For more information see: https://developer.mozilla.org/en-US/docs/Web/Security/
     var s = e.resourceAccess[t || e.clientId];
     return !!s && s.roles.indexOf(r) >= 0;
   }, e.loadUserProfile = function() {
-    var r = b() + "/account", t = new XMLHttpRequest();
+    var r = y() + "/account", t = new XMLHttpRequest();
     t.open("GET", r, !0), t.setRequestHeader("Accept", "application/json"), t.setRequestHeader("Authorization", "bearer " + e.token);
     var s = g();
     return t.onreadystatechange = function() {
@@ -250,14 +247,14 @@ For more information see: https://developer.mozilla.org/en-US/docs/Web/Security/
             if (o.readyState == 4)
               if (o.status == 200) {
                 _("[KEYCLOAK] Token refreshed"), l = (l + (/* @__PURE__ */ new Date()).getTime()) / 2;
-                var u = JSON.parse(o.responseText);
-                E(u.access_token, u.refresh_token, u.id_token, l), e.onAuthRefreshSuccess && e.onAuthRefreshSuccess();
-                for (var d = v.pop(); d != null; d = v.pop())
-                  d.setSuccess(!0);
+                var d = JSON.parse(o.responseText);
+                A(d.access_token, d.refresh_token, d.id_token, l), e.onAuthRefreshSuccess && e.onAuthRefreshSuccess();
+                for (var u = v.pop(); u != null; u = v.pop())
+                  u.setSuccess(!0);
               } else {
-                L("[KEYCLOAK] Failed to refresh token"), o.status == 400 && e.clearToken(), e.onAuthRefreshError && e.onAuthRefreshError();
-                for (var d = v.pop(); d != null; d = v.pop())
-                  d.setError(!0);
+                x("[KEYCLOAK] Failed to refresh token"), o.status == 400 && e.clearToken(), e.onAuthRefreshError && e.onAuthRefreshError();
+                for (var u = v.pop(); u != null; u = v.pop())
+                  u.setError("Failed to refresh token: An unexpected HTTP error occurred while attempting to refresh the token.");
               }
           }, o.send(c);
         }
@@ -274,13 +271,13 @@ For more information see: https://developer.mozilla.org/en-US/docs/Web/Security/
       s();
     return t.promise;
   }, e.clearToken = function() {
-    e.token && (E(null, null, null), e.onAuthLogout && e.onAuthLogout(), e.loginRequired && e.login());
+    e.token && (A(null, null, null), e.onAuthLogout && e.onAuthLogout(), e.loginRequired && e.login());
   };
-  function b() {
+  function y() {
     if (typeof e.authServerUrl < "u")
       return e.authServerUrl.charAt(e.authServerUrl.length - 1) == "/" ? e.authServerUrl + "realms/" + encodeURIComponent(e.realm) : e.authServerUrl + "/realms/" + encodeURIComponent(e.realm);
   }
-  function X() {
+  function $() {
     return window.location.origin ? window.location.origin : window.location.protocol + "//" + window.location.hostname + (window.location.port ? ":" + window.location.port : "");
   }
   function I(r, t) {
@@ -296,23 +293,23 @@ For more information see: https://developer.mozilla.org/en-US/docs/Web/Security/
       else
         t && t.setSuccess();
       return;
-    } else e.flow != "standard" && (r.access_token || r.id_token) && d(r.access_token, null, r.id_token, !0);
+    } else e.flow != "standard" && (r.access_token || r.id_token) && u(r.access_token, null, r.id_token, !0);
     if (e.flow != "implicit" && s) {
-      var o = "code=" + s + "&grant_type=authorization_code", l = e.endpoints.token(), u = new XMLHttpRequest();
-      u.open("POST", l, !0), u.setRequestHeader("Content-type", "application/x-www-form-urlencoded"), o += "&client_id=" + encodeURIComponent(e.clientId), o += "&redirect_uri=" + r.redirectUri, r.pkceCodeVerifier && (o += "&code_verifier=" + r.pkceCodeVerifier), u.withCredentials = !0, u.onreadystatechange = function() {
-        if (u.readyState == 4)
-          if (u.status == 200) {
-            var k = JSON.parse(u.responseText);
-            d(k.access_token, k.refresh_token, k.id_token, e.flow === "standard"), x();
+      var o = "code=" + s + "&grant_type=authorization_code", l = e.endpoints.token(), d = new XMLHttpRequest();
+      d.open("POST", l, !0), d.setRequestHeader("Content-type", "application/x-www-form-urlencoded"), o += "&client_id=" + encodeURIComponent(e.clientId), o += "&redirect_uri=" + r.redirectUri, r.pkceCodeVerifier && (o += "&code_verifier=" + r.pkceCodeVerifier), d.withCredentials = !0, d.onreadystatechange = function() {
+        if (d.readyState == 4)
+          if (d.status == 200) {
+            var m = JSON.parse(d.responseText);
+            u(m.access_token, m.refresh_token, m.id_token, e.flow === "standard"), M();
           } else
             e.onAuthError && e.onAuthError(), t && t.setError();
-      }, u.send(o);
+      }, d.send(o);
     }
-    function d(k, y, S, w) {
-      c = (c + (/* @__PURE__ */ new Date()).getTime()) / 2, E(k, y, S, c), A && e.idTokenParsed && e.idTokenParsed.nonce != r.storedNonce ? (_("[KEYCLOAK] Invalid nonce, clearing token"), e.clearToken(), t && t.setError()) : w && (e.onAuthSuccess && e.onAuthSuccess(), t && t.setSuccess());
+    function u(m, w, S, b) {
+      c = (c + (/* @__PURE__ */ new Date()).getTime()) / 2, A(m, w, S, c), R && e.idTokenParsed && e.idTokenParsed.nonce != r.storedNonce ? (_("[KEYCLOAK] Invalid nonce, clearing token"), e.clearToken(), t && t.setError()) : b && (e.onAuthSuccess && e.onAuthSuccess(), t && t.setSuccess());
     }
   }
-  function W() {
+  function Q() {
     var r = g(), t;
     typeof f == "string" && (t = f);
     function s(n) {
@@ -343,25 +340,25 @@ For more information see: https://developer.mozilla.org/en-US/docs/Web/Security/
         }
       } : e.endpoints = {
         authorize: function() {
-          return b() + "/protocol/openid-connect/auth";
+          return y() + "/protocol/openid-connect/auth";
         },
         token: function() {
-          return b() + "/protocol/openid-connect/token";
+          return y() + "/protocol/openid-connect/token";
         },
         logout: function() {
-          return b() + "/protocol/openid-connect/logout";
+          return y() + "/protocol/openid-connect/logout";
         },
         checkSessionIframe: function() {
-          return b() + "/protocol/openid-connect/login-status-iframe.html";
+          return y() + "/protocol/openid-connect/login-status-iframe.html";
         },
         thirdPartyCookiesIframe: function() {
-          return b() + "/protocol/openid-connect/3p-cookies/step1.html";
+          return y() + "/protocol/openid-connect/3p-cookies/step1.html";
         },
         register: function() {
-          return b() + "/protocol/openid-connect/registrations";
+          return y() + "/protocol/openid-connect/registrations";
         },
         userinfo: function() {
-          return b() + "/protocol/openid-connect/userinfo";
+          return y() + "/protocol/openid-connect/userinfo";
         }
       };
     }
@@ -369,7 +366,7 @@ For more information see: https://developer.mozilla.org/en-US/docs/Web/Security/
       var i = new XMLHttpRequest();
       i.open("GET", t, !0), i.setRequestHeader("Accept", "application/json"), i.onreadystatechange = function() {
         if (i.readyState == 4)
-          if (i.status == 200 || D(i)) {
+          if (i.status == 200 || O(i)) {
             var n = JSON.parse(i.responseText);
             e.authServerUrl = n["auth-server-url"], e.realm = n.realm, e.clientId = n.resource, s(null), r.setSuccess();
           } else
@@ -386,7 +383,7 @@ For more information see: https://developer.mozilla.org/en-US/docs/Web/Security/
         var i = new XMLHttpRequest();
         i.open("GET", c, !0), i.setRequestHeader("Accept", "application/json"), i.onreadystatechange = function() {
           if (i.readyState == 4)
-            if (i.status == 200 || D(i)) {
+            if (i.status == 200 || O(i)) {
               var o = JSON.parse(i.responseText);
               s(o), r.setSuccess();
             } else
@@ -397,31 +394,31 @@ For more information see: https://developer.mozilla.org/en-US/docs/Web/Security/
     }
     return r.promise;
   }
-  function D(r) {
+  function O(r) {
     return r.status == 0 && r.responseText && r.responseURL.startsWith("file:");
   }
-  function E(r, t, s, i) {
-    if (e.tokenTimeoutHandle && (clearTimeout(e.tokenTimeoutHandle), e.tokenTimeoutHandle = null), t ? (e.refreshToken = t, e.refreshTokenParsed = N(t)) : (delete e.refreshToken, delete e.refreshTokenParsed), s ? (e.idToken = s, e.idTokenParsed = N(s)) : (delete e.idToken, delete e.idTokenParsed), r) {
-      if (e.token = r, e.tokenParsed = N(r), e.sessionId = e.tokenParsed.sid, e.authenticated = !0, e.subject = e.tokenParsed.sub, e.realmAccess = e.tokenParsed.realm_access, e.resourceAccess = e.tokenParsed.resource_access, i && (e.timeSkew = Math.floor(i / 1e3) - e.tokenParsed.iat), e.timeSkew != null && (_("[KEYCLOAK] Estimated time difference between browser and server is " + e.timeSkew + " seconds"), e.onTokenExpired)) {
+  function A(r, t, s, i) {
+    if (e.tokenTimeoutHandle && (clearTimeout(e.tokenTimeoutHandle), e.tokenTimeoutHandle = null), t ? (e.refreshToken = t, e.refreshTokenParsed = j(t)) : (delete e.refreshToken, delete e.refreshTokenParsed), s ? (e.idToken = s, e.idTokenParsed = j(s)) : (delete e.idToken, delete e.idTokenParsed), r) {
+      if (e.token = r, e.tokenParsed = j(r), e.sessionId = e.tokenParsed.sid, e.authenticated = !0, e.subject = e.tokenParsed.sub, e.realmAccess = e.tokenParsed.realm_access, e.resourceAccess = e.tokenParsed.resource_access, i && (e.timeSkew = Math.floor(i / 1e3) - e.tokenParsed.iat), e.timeSkew != null && (_("[KEYCLOAK] Estimated time difference between browser and server is " + e.timeSkew + " seconds"), e.onTokenExpired)) {
         var a = (e.tokenParsed.exp - (/* @__PURE__ */ new Date()).getTime() / 1e3 + e.timeSkew) * 1e3;
         _("[KEYCLOAK] Token expires in " + Math.round(a / 1e3) + " s"), a <= 0 ? e.onTokenExpired() : e.tokenTimeoutHandle = setTimeout(e.onTokenExpired, a);
       }
     } else
       delete e.token, delete e.tokenParsed, delete e.subject, delete e.realmAccess, delete e.resourceAccess, e.authenticated = !1;
   }
-  function j() {
+  function J() {
     if (typeof crypto > "u" || typeof crypto.randomUUID > "u")
       throw new Error("Web Crypto API is not available.");
     return crypto.randomUUID();
   }
   function T(r) {
-    var t = $(r);
+    var t = Z(r);
     if (t) {
       var s = U.get(t.state);
       return s && (t.valid = !0, t.redirectUri = s.redirectUri, t.storedNonce = s.nonce, t.prompt = s.prompt, t.pkceCodeVerifier = s.pkceCodeVerifier, t.loginOptions = s.loginOptions), t;
     }
   }
-  function $(r) {
+  function Z(r) {
     var t;
     switch (e.flow) {
       case "standard":
@@ -436,7 +433,7 @@ For more information see: https://developer.mozilla.org/en-US/docs/Web/Security/
     }
     t.push("error"), t.push("error_description"), t.push("error_uri");
     var s = r.indexOf("?"), i = r.indexOf("#"), a, c;
-    if (e.responseMode === "query" && s !== -1 ? (a = r.substring(0, s), c = z(r.substring(s + 1, i !== -1 ? i : r.length), t), c.paramsString !== "" && (a += "?" + c.paramsString), i !== -1 && (a += r.substring(i))) : e.responseMode === "fragment" && i !== -1 && (a = r.substring(0, i), c = z(r.substring(i + 1), t), c.paramsString !== "" && (a += "#" + c.paramsString)), c && c.oauthParams) {
+    if (e.responseMode === "query" && s !== -1 ? (a = r.substring(0, s), c = V(r.substring(s + 1, i !== -1 ? i : r.length), t), c.paramsString !== "" && (a += "?" + c.paramsString), i !== -1 && (a += r.substring(i))) : e.responseMode === "fragment" && i !== -1 && (a = r.substring(0, i), c = V(r.substring(i + 1), t), c.paramsString !== "" && (a += "#" + c.paramsString)), c && c.oauthParams) {
       if (e.flow === "standard" || e.flow === "hybrid") {
         if ((c.oauthParams.code || c.oauthParams.error) && c.oauthParams.state)
           return c.oauthParams.newUrl = a, c.oauthParams;
@@ -444,7 +441,7 @@ For more information see: https://developer.mozilla.org/en-US/docs/Web/Security/
         return c.oauthParams.newUrl = a, c.oauthParams;
     }
   }
-  function z(r, t) {
+  function V(r, t) {
     for (var s = r.split("&"), i = {
       paramsString: "",
       oauthParams: {}
@@ -467,7 +464,7 @@ For more information see: https://developer.mozilla.org/en-US/docs/Web/Security/
       r.resolve = t, r.reject = s;
     }), r;
   }
-  function Q(r, t, s) {
+  function ee(r, t, s) {
     var i = null, a = new Promise(function(c, n) {
       i = setTimeout(function() {
         n({ error: s });
@@ -477,14 +474,14 @@ For more information see: https://developer.mozilla.org/en-US/docs/Web/Security/
       clearTimeout(i);
     });
   }
-  function R() {
+  function P() {
     var r = g();
     if (!p.enable || p.iframe)
       return r.setSuccess(), r.promise;
     var t = document.createElement("iframe");
     p.iframe = t, t.onload = function() {
       var a = e.endpoints.authorize();
-      a.charAt(0) === "/" ? p.iframeOrigin = X() : p.iframeOrigin = a.substring(0, a.indexOf("/", 8)), r.setSuccess();
+      a.charAt(0) === "/" ? p.iframeOrigin = $() : p.iframeOrigin = a.substring(0, a.indexOf("/", 8)), r.setSuccess();
     };
     var s = e.endpoints.checkSessionIframe();
     t.setAttribute("src", s), t.setAttribute("sandbox", "allow-storage-access-by-user-activation allow-scripts allow-same-origin"), t.setAttribute("title", "keycloak-session-iframe"), t.style.display = "none", document.body.appendChild(t);
@@ -499,10 +496,10 @@ For more information see: https://developer.mozilla.org/en-US/docs/Web/Security/
     };
     return window.addEventListener("message", i, !1), r.promise;
   }
-  function x() {
+  function M() {
     p.enable && e.token && setTimeout(function() {
       C().then(function(r) {
-        r && x();
+        r && M();
       });
     }, p.interval * 1e3);
   }
@@ -517,27 +514,27 @@ For more information see: https://developer.mozilla.org/en-US/docs/Web/Security/
       r.setSuccess();
     return r.promise;
   }
-  function Z() {
+  function re() {
     var r = g();
-    if (p.enable || e.silentCheckSsoRedirectUri) {
+    if ((p.enable || e.silentCheckSsoRedirectUri) && typeof e.endpoints.thirdPartyCookiesIframe == "function") {
       var t = document.createElement("iframe");
       t.setAttribute("src", e.endpoints.thirdPartyCookiesIframe()), t.setAttribute("sandbox", "allow-storage-access-by-user-activation allow-scripts allow-same-origin"), t.setAttribute("title", "keycloak-3p-check-iframe"), t.style.display = "none", document.body.appendChild(t);
       var s = function(i) {
-        t.contentWindow === i.source && (i.data !== "supported" && i.data !== "unsupported" || (i.data === "unsupported" && (L(
+        t.contentWindow === i.source && (i.data !== "supported" && i.data !== "unsupported" || (i.data === "unsupported" && (x(
           `[KEYCLOAK] Your browser is blocking access to 3rd-party cookies, this means:
 
  - It is not possible to retrieve tokens without redirecting to the Keycloak server (a.k.a. no support for silent authentication).
  - It is not possible to automatically detect changes to the session status (such as the user logging out in another tab).
 
-For more information see: https://www.keycloak.org/docs/latest/securing_apps/#_modern_browsers`
+For more information see: https://www.keycloak.org/securing-apps/javascript-adapter#_modern_browsers`
         ), p.enable = !1, e.silentCheckSsoFallback && (e.silentCheckSsoRedirectUri = !1)), document.body.removeChild(t), window.removeEventListener("message", s), r.setSuccess()));
       };
       window.addEventListener("message", s, !1);
     } else
       r.setSuccess();
-    return Q(r.promise, e.messageReceiveTimeout, "Timeout when waiting for 3rd party check iframe message.");
+    return ee(r.promise, e.messageReceiveTimeout, "Timeout when waiting for 3rd party check iframe message.");
   }
-  function P(r) {
+  function K(r) {
     if (!r || r == "default")
       return {
         login: async function(n) {
@@ -548,29 +545,21 @@ For more information see: https://www.keycloak.org/docs/latest/securing_apps/#_m
             window.location.replace(e.createLogoutUrl(n));
             return;
           }
-          const l = e.createLogoutUrl(n), u = await fetch(l, {
-            method: "POST",
-            headers: {
-              "Content-Type": "application/x-www-form-urlencoded"
-            },
-            body: new URLSearchParams({
-              id_token_hint: e.idToken,
-              client_id: e.clientId,
-              post_logout_redirect_uri: h.redirectUri(n, !1)
-            })
-          });
-          if (u.redirected) {
-            window.location.href = u.url;
-            return;
-          }
-          if (u.ok) {
-            window.location.reload();
-            return;
+          const l = document.createElement("form");
+          l.setAttribute("method", "POST"), l.setAttribute("action", e.createLogoutUrl(n)), l.style.display = "none";
+          const d = {
+            id_token_hint: e.idToken,
+            client_id: e.clientId,
+            post_logout_redirect_uri: h.redirectUri(n, !1)
+          };
+          for (const [u, m] of Object.entries(d)) {
+            const w = document.createElement("input");
+            w.setAttribute("type", "hidden"), w.setAttribute("name", u), w.setAttribute("value", m), l.appendChild(w);
           }
-          throw new Error("Logout failed, request returned an error code.");
+          document.body.appendChild(l), l.submit();
         },
-        register: function(n) {
-          return window.location.assign(e.createRegisterUrl(n)), g().promise;
+        register: async function(n) {
+          return window.location.assign(await e.createRegisterUrl(n)), g().promise;
         },
         accountManagement: function() {
           var n = e.createAccountUrl();
@@ -604,44 +593,44 @@ For more information see: https://www.keycloak.org/docs/latest/securing_apps/#_m
       };
       return {
         login: async function(n) {
-          var o = g(), l = a(n), u = await e.createLoginUrl(n), d = t(u, "_blank", l), k = !1, y = !1, S = function() {
-            y = !0, d.close();
+          var o = g(), l = a(n), d = await e.createLoginUrl(n), u = t(d, "_blank", l), m = !1, w = !1, S = function() {
+            w = !0, u.close();
           };
-          return d.addEventListener("loadstart", function(w) {
-            if (w.url.indexOf(c()) == 0) {
-              var H = T(w.url);
-              I(H, o), S(), k = !0;
+          return u.addEventListener("loadstart", function(b) {
+            if (b.url.indexOf(c()) == 0) {
+              var D = T(b.url);
+              I(D, o), S(), m = !0;
             }
-          }), d.addEventListener("loaderror", function(w) {
-            if (!k)
-              if (w.url.indexOf(c()) == 0) {
-                var H = T(w.url);
-                I(H, o), S(), k = !0;
+          }), u.addEventListener("loaderror", function(b) {
+            if (!m)
+              if (b.url.indexOf(c()) == 0) {
+                var D = T(b.url);
+                I(D, o), S(), m = !0;
               } else
                 o.setError(), S();
-          }), d.addEventListener("exit", function(w) {
-            y || o.setError({
+          }), u.addEventListener("exit", function(b) {
+            w || o.setError({
               reason: "closed_by_user"
             });
           }), o.promise;
         },
         logout: function(n) {
-          var o = g(), l = e.createLogoutUrl(n), u = t(l, "_blank", "location=no,hidden=yes,clearcache=yes"), d;
-          return u.addEventListener("loadstart", function(k) {
-            k.url.indexOf(c()) == 0 && u.close();
-          }), u.addEventListener("loaderror", function(k) {
-            k.url.indexOf(c()) == 0 || (d = !0), u.close();
-          }), u.addEventListener("exit", function(k) {
-            d ? o.setError() : (e.clearToken(), o.setSuccess());
+          var o = g(), l = e.createLogoutUrl(n), d = t(l, "_blank", "location=no,hidden=yes,clearcache=yes"), u;
+          return d.addEventListener("loadstart", function(m) {
+            m.url.indexOf(c()) == 0 && d.close();
+          }), d.addEventListener("loaderror", function(m) {
+            m.url.indexOf(c()) == 0 || (u = !0), d.close();
+          }), d.addEventListener("exit", function(m) {
+            u ? o.setError() : (e.clearToken(), o.setSuccess());
           }), o.promise;
         },
-        register: function(n) {
-          var o = g(), l = e.createRegisterUrl(), u = a(n), d = t(l, "_blank", u);
-          return d.addEventListener("loadstart", function(k) {
-            if (k.url.indexOf(c()) == 0) {
-              d.close();
-              var y = T(k.url);
-              I(y, o);
+        register: async function(n) {
+          var o = g(), l = await e.createRegisterUrl(), d = a(n), u = t(l, "_blank", d);
+          return u.addEventListener("loadstart", function(m) {
+            if (m.url.indexOf(c()) == 0) {
+              u.close();
+              var w = T(m.url);
+              I(w, o);
             }
           }), o.promise;
         },
@@ -664,24 +653,24 @@ For more information see: https://www.keycloak.org/docs/latest/securing_apps/#_m
       return p.enable = !1, {
         login: async function(n) {
           var o = g(), l = await e.createLoginUrl(n);
-          return universalLinks.subscribe("keycloak", function(u) {
+          return universalLinks.subscribe("keycloak", function(d) {
             universalLinks.unsubscribe("keycloak"), window.cordova.plugins.browsertab.close();
-            var d = T(u.url);
-            I(d, o);
+            var u = T(d.url);
+            I(u, o);
           }), window.cordova.plugins.browsertab.openUrl(l), o.promise;
         },
         logout: function(n) {
           var o = g(), l = e.createLogoutUrl(n);
-          return universalLinks.subscribe("keycloak", function(u) {
+          return universalLinks.subscribe("keycloak", function(d) {
             universalLinks.unsubscribe("keycloak"), window.cordova.plugins.browsertab.close(), e.clearToken(), o.setSuccess();
           }), window.cordova.plugins.browsertab.openUrl(l), o.promise;
         },
-        register: function(n) {
-          var o = g(), l = e.createRegisterUrl(n);
-          return universalLinks.subscribe("keycloak", function(u) {
+        register: async function(n) {
+          var o = g(), l = await e.createRegisterUrl(n);
+          return universalLinks.subscribe("keycloak", function(d) {
             universalLinks.unsubscribe("keycloak"), window.cordova.plugins.browsertab.close();
-            var d = T(u.url);
-            I(d, o);
+            var u = T(d.url);
+            I(u, o);
           }), window.cordova.plugins.browsertab.openUrl(l), o.promise;
         },
         accountManagement: function() {
@@ -697,48 +686,65 @@ For more information see: https://www.keycloak.org/docs/latest/securing_apps/#_m
       };
     throw "invalid adapter type: " + r;
   }
-  var M = function() {
-    if (!(this instanceof M))
-      return new M();
+  const E = "kc-callback-";
+  var H = function() {
+    if (!(this instanceof H))
+      return new H();
     localStorage.setItem("kc-test", "test"), localStorage.removeItem("kc-test");
     var r = this;
     function t() {
-      for (var s = (/* @__PURE__ */ new Date()).getTime(), i = 0; i < localStorage.length; i++) {
-        var a = localStorage.key(i);
-        if (a && a.indexOf("kc-callback-") == 0) {
-          var c = localStorage.getItem(a);
-          if (c)
-            try {
-              var n = JSON.parse(c).expires;
-              (!n || n < s) && localStorage.removeItem(a);
-            } catch {
-              localStorage.removeItem(a);
-            }
-        }
+      const c = Date.now();
+      for (const [n, o] of i()) {
+        const l = a(o);
+        (l === null || l < c) && localStorage.removeItem(n);
       }
     }
-    r.get = function(s) {
-      if (s) {
-        var i = "kc-callback-" + s, a = localStorage.getItem(i);
-        return a && (localStorage.removeItem(i), a = JSON.parse(a)), t(), a;
+    function s() {
+      for (const [c] of i())
+        localStorage.removeItem(c);
+    }
+    function i() {
+      return Object.entries(localStorage).filter(([c]) => c.startsWith(E));
+    }
+    function a(c) {
+      let n;
+      try {
+        n = JSON.parse(c);
+      } catch {
+        return null;
       }
-    }, r.add = function(s) {
+      return z(n) && "expires" in n && typeof n.expires == "number" ? n.expires : null;
+    }
+    r.get = function(c) {
+      if (c) {
+        var n = E + c, o = localStorage.getItem(n);
+        return o && (localStorage.removeItem(n), o = JSON.parse(o)), t(), o;
+      }
+    }, r.add = function(c) {
       t();
-      var i = "kc-callback-" + s.state;
-      s.expires = (/* @__PURE__ */ new Date()).getTime() + 60 * 60 * 1e3, localStorage.setItem(i, JSON.stringify(s));
+      const n = E + c.state, o = JSON.stringify({
+        ...c,
+        // Set the expiry time to 1 hour from now.
+        expires: Date.now() + 60 * 60 * 1e3
+      });
+      try {
+        localStorage.setItem(n, o);
+      } catch {
+        s(), localStorage.setItem(n, o);
+      }
     };
-  }, K = function() {
-    if (!(this instanceof K))
-      return new K();
+  }, N = function() {
+    if (!(this instanceof N))
+      return new N();
     var r = this;
     r.get = function(a) {
       if (a) {
-        var c = s("kc-callback-" + a);
-        if (i("kc-callback-" + a, "", t(-100)), c)
+        var c = s(E + a);
+        if (i(E + a, "", t(-100)), c)
           return JSON.parse(c);
       }
     }, r.add = function(a) {
-      i("kc-callback-" + a.state, JSON.stringify(a), t(60));
+      i(E + a.state, JSON.stringify(a), t(60));
     }, r.removeItem = function(a) {
       i(a, "", t(-100));
     };
@@ -758,36 +764,36 @@ For more information see: https://www.keycloak.org/docs/latest/securing_apps/#_m
       document.cookie = o;
     };
   };
-  function ee() {
+  function te() {
     try {
-      return new M();
+      return new H();
     } catch {
     }
-    return new K();
+    return new N();
   }
-  function J(r) {
+  function F(r) {
     return function() {
       e.enableLogging && r.apply(console, Array.prototype.slice.call(arguments));
     };
   }
 }
-function re(f) {
+function ne(f) {
   const e = String.fromCodePoint(...f);
   return btoa(e);
 }
-async function te(f) {
+async function oe(f) {
   const h = new TextEncoder().encode(f);
   if (typeof crypto > "u" || typeof crypto.subtle > "u")
     throw new Error("Web Crypto API is not available.");
   return await crypto.subtle.digest("SHA-256", h);
 }
-function N(f) {
+function j(f) {
   const [e, h] = f.split(".");
   if (typeof h != "string")
     throw new Error("Unable to decode token, payload not found.");
   let v;
   try {
-    v = ne(h);
+    v = ae(h);
   } catch (U) {
     throw new Error("Unable to decode token, payload is not a valid Base64URL value.", { cause: U });
   }
@@ -797,7 +803,7 @@ function N(f) {
     throw new Error("Unable to decode token, payload is not a valid JSON value.", { cause: U });
   }
 }
-function ne(f) {
+function ae(f) {
   let e = f.replaceAll("-", "+").replaceAll("_", "/");
   switch (e.length % 4) {
     case 0:
@@ -812,55 +818,61 @@ function ne(f) {
       throw new Error("Input is not of the correct length.");
   }
   try {
-    return oe(e);
+    return ie(e);
   } catch {
     return atob(e);
   }
 }
-function oe(f) {
+function ie(f) {
   return decodeURIComponent(atob(f).replace(/(.)/g, (e, h) => {
     let v = h.charCodeAt(0).toString(16).toUpperCase();
     return v.length < 2 && (v = "0" + v), "%" + v;
   }));
 }
-function V(f) {
+function z(f) {
   return typeof f == "object" && f !== null;
 }
-let m = null;
-function ae(f, e = !0) {
-  return m || (m = new Y({
+let k = null, L = null;
+function se(f, e = !0) {
+  return L ? (console.log("Keycloak already initialized, returning from cache"), L) : (k || (k = new Y({
     url: f.url,
     realm: f.realm,
     clientId: f.clientId
-  })), m.init({
+  })), L = k.init({
     onLoad: e ? "check-sso" : "login-required",
     checkLoginIframe: !1
     //silentCheckSsoRedirectUri: `${window.location.origin}/silent-check-sso.html`, // Ensure this file is set up
-  }).then((h) => h).catch((h) => (console.error("Failed to initialize Keycloak:", h), !1));
+  }).then((h) => h).catch((h) => (console.error("Failed to initialize Keycloak:", h), !1)), L);
 }
-function ie() {
-  return m != null && m.authenticated && (m != null && m.idTokenParsed) ? {
-    fullname: m.idTokenParsed.name,
-    email: m.idTokenParsed.email,
-    lastname: m.idTokenParsed.family_name,
-    firstname: m.idTokenParsed.given_name,
-    username: m.idTokenParsed.preferred_username,
+function ce() {
+  return k != null && k.authenticated && (k != null && k.idTokenParsed) ? {
+    fullname: k.idTokenParsed.name,
+    email: k.idTokenParsed.email,
+    lastname: k.idTokenParsed.family_name,
+    firstname: k.idTokenParsed.given_name,
+    username: k.idTokenParsed.preferred_username,
     background: "grey",
     // Optional custom value
-    token: m.token,
-    sub: m.idTokenParsed.sub
+    token: k.token,
+    sub: k.idTokenParsed.sub
   } : {};
 }
-function se() {
-  m ? m.login() : console.error("Keycloak is not initialized.");
+function le() {
+  if (k)
+    k.login();
+  else
+    throw new Error("Keycloak is not initialized.");
 }
-function ce() {
-  m ? m.logout() : console.error("Keycloak is not initialized.");
+function ue() {
+  if (k)
+    k.logout();
+  else
+    throw new Error("Keycloak is not initialized.");
 }
-function le() {
-  return !!(m != null && m.authenticated);
+function de() {
+  return !!(k != null && k.authenticated);
 }
-async function ue(f) {
+async function fe(f) {
   try {
     const e = await fetch(f, { method: "HEAD", mode: "no-cors" });
     return e.ok || e.type === "opaque";
@@ -869,10 +881,10 @@ async function ue(f) {
   }
 }
 export {
-  ce as a,
-  le as b,
-  ue as c,
-  ie as g,
-  ae as i,
-  se as l
+  ue as a,
+  de as b,
+  fe as c,
+  ce as g,
+  se as i,
+  le as l
 };