@ebrains/vue 0.9.2-beta → 0.9.3-beta

package/eds-login_2.entry-shWfmpH4.mjs

@@ -0,0 +1,981 @@
+import { r as X, c as J, h as U, H as se } from "./index-l365C9dI.mjs";
+import { t as R } from "./toastManager-d9eee791-CEYNwx25.mjs";
+function q(u) {
+  if (!(this instanceof q))
+    throw new Error("The 'Keycloak' constructor must be invoked with 'new'.");
+  if (typeof u != "string" && !O(u))
+    throw new Error("The 'Keycloak' constructor must be provided with a configuration object, or a URL to a JSON configuration file.");
+  if (O(u)) {
+    const r = "oidcProvider" in u ? ["clientId"] : ["url", "realm", "clientId"];
+    for (const t of r)
+      if (!u[t])
+        throw new Error(`The configuration object is missing the required '${t}' property.`);
+  }
+  var e = this, p, v = [], I, h = {
+    enable: !0,
+    callbackList: [],
+    interval: 5
+  };
+  e.didInitialize = !1;
+  var P = !0, _ = W(console.info), M = W(console.warn);
+  globalThis.isSecureContext || M(
+    `[KEYCLOAK] Keycloak JS must be used in a 'secure context' to function properly as it relies on browser APIs that are otherwise not available.
+Continuing to run your application insecurely will lead to unexpected behavior and breakage.
+
+For more information see: https://developer.mozilla.org/en-US/docs/Web/Security/Secure_Contexts`
+  ), e.init = function(r = {}) {
+    if (e.didInitialize)
+      throw new Error("A 'Keycloak' instance can only be initialized once.");
+    e.didInitialize = !0, e.authenticated = !1, I = ie();
+    var t = ["default", "cordova", "cordova-native"];
+    if (t.indexOf(r.adapter) > -1 ? p = N(r.adapter) : typeof r.adapter == "object" ? p = r.adapter : window.Cordova || window.cordova ? p = N("cordova") : p = N(), typeof r.useNonce < "u" && (P = r.useNonce), typeof r.checkLoginIframe < "u" && (h.enable = r.checkLoginIframe), r.checkLoginIframeInterval && (h.interval = r.checkLoginIframeInterval), r.onLoad === "login-required" && (e.loginRequired = !0), r.responseMode)
+      if (r.responseMode === "query" || r.responseMode === "fragment")
+        e.responseMode = r.responseMode;
+      else
+        throw "Invalid value for responseMode";
+    if (r.flow) {
+      switch (r.flow) {
+        case "standard":
+          e.responseType = "code";
+          break;
+        case "implicit":
+          e.responseType = "id_token token";
+          break;
+        case "hybrid":
+          e.responseType = "code id_token token";
+          break;
+        default:
+          throw "Invalid value for flow";
+      }
+      e.flow = r.flow;
+    }
+    if (r.timeSkew != null && (e.timeSkew = r.timeSkew), r.redirectUri && (e.redirectUri = r.redirectUri), r.silentCheckSsoRedirectUri && (e.silentCheckSsoRedirectUri = r.silentCheckSsoRedirectUri), typeof r.silentCheckSsoFallback == "boolean" ? e.silentCheckSsoFallback = r.silentCheckSsoFallback : e.silentCheckSsoFallback = !0, typeof r.pkceMethod < "u") {
+      if (r.pkceMethod !== "S256" && r.pkceMethod !== !1)
+        throw new TypeError(`Invalid value for pkceMethod', expected 'S256' or false but got ${r.pkceMethod}.`);
+      e.pkceMethod = r.pkceMethod;
+    } else
+      e.pkceMethod = "S256";
+    typeof r.enableLogging == "boolean" ? e.enableLogging = r.enableLogging : e.enableLogging = !1, r.logoutMethod === "POST" ? e.logoutMethod = "POST" : e.logoutMethod = "GET", typeof r.scope == "string" && (e.scope = r.scope), typeof r.acrValues == "string" && (e.acrValues = r.acrValues), typeof r.messageReceiveTimeout == "number" && r.messageReceiveTimeout > 0 ? e.messageReceiveTimeout = r.messageReceiveTimeout : e.messageReceiveTimeout = 1e4, e.responseMode || (e.responseMode = "fragment"), e.responseType || (e.responseType = "code", e.flow = "standard");
+    var s = g(), i = g();
+    i.promise.then(function() {
+      e.onReady && e.onReady(e.authenticated), s.setSuccess(e.authenticated);
+    }).catch(function(o) {
+      s.setError(o);
+    });
+    var a = te();
+    function c() {
+      var o = function(d) {
+        d || (f.prompt = "none"), r.locale && (f.locale = r.locale), e.login(f).then(function() {
+          i.setSuccess();
+        }).catch(function(m) {
+          i.setError(m);
+        });
+      }, l = async function() {
+        var d = document.createElement("iframe"), m = await e.createLoginUrl({ prompt: "none", redirectUri: e.silentCheckSsoRedirectUri });
+        d.setAttribute("src", m), d.setAttribute("sandbox", "allow-storage-access-by-user-activation allow-scripts allow-same-origin"), d.setAttribute("title", "keycloak-silent-check-sso"), d.style.display = "none", document.body.appendChild(d);
+        var w = function(S) {
+          if (!(S.origin !== window.location.origin || d.contentWindow !== S.source)) {
+            var y = E(S.data);
+            T(y, i), document.body.removeChild(d), window.removeEventListener("message", w);
+          }
+        };
+        window.addEventListener("message", w);
+      }, f = {};
+      switch (r.onLoad) {
+        case "check-sso":
+          h.enable ? K().then(function() {
+            L().then(function(d) {
+              d ? i.setSuccess() : e.silentCheckSsoRedirectUri ? l() : o(!1);
+            }).catch(function(d) {
+              i.setError(d);
+            });
+          }) : e.silentCheckSsoRedirectUri ? l() : o(!1);
+          break;
+        case "login-required":
+          o(!0);
+          break;
+        default:
+          throw "Invalid value for onLoad";
+      }
+    }
+    function n() {
+      var o = E(window.location.href);
+      if (o && window.history.replaceState(window.history.state, null, o.newUrl), o && o.valid)
+        return K().then(function() {
+          T(o, i);
+        }).catch(function(l) {
+          i.setError(l);
+        });
+      r.token && r.refreshToken ? (C(r.token, r.refreshToken, r.idToken), h.enable ? K().then(function() {
+        L().then(function(l) {
+          l ? (e.onAuthSuccess && e.onAuthSuccess(), i.setSuccess(), H()) : i.setSuccess();
+        }).catch(function(l) {
+          i.setError(l);
+        });
+      }) : e.updateToken(-1).then(function() {
+        e.onAuthSuccess && e.onAuthSuccess(), i.setSuccess();
+      }).catch(function(l) {
+        e.onAuthError && e.onAuthError(), r.onLoad ? c() : i.setError(l);
+      })) : r.onLoad ? c() : i.setSuccess();
+    }
+    return a.then(function() {
+      ae().then(n).catch(function(o) {
+        s.setError(o);
+      });
+    }), a.catch(function(o) {
+      s.setError(o);
+    }), s.promise;
+  }, e.login = function(r) {
+    return p.login(r);
+  };
+  function B(r) {
+    if (typeof crypto > "u" || typeof crypto.getRandomValues > "u")
+      throw new Error("Web Crypto API is not available.");
+    return crypto.getRandomValues(new Uint8Array(r));
+  }
+  function $(r) {
+    return Q(r, "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789");
+  }
+  function Q(r, t) {
+    for (var s = B(r), i = new Array(r), a = 0; a < r; a++)
+      i[a] = t.charCodeAt(s[a] % t.length);
+    return String.fromCharCode.apply(null, i);
+  }
+  async function Z(r, t) {
+    if (r !== "S256")
+      throw new TypeError(`Invalid value for 'pkceMethod', expected 'S256' but got '${r}'.`);
+    const s = new Uint8Array(await le(t));
+    return ce(s).replace(/\+/g, "-").replace(/\//g, "_").replace(/\=/g, "");
+  }
+  function ee(r) {
+    var t = {
+      id_token: {
+        acr: r
+      }
+    };
+    return JSON.stringify(t);
+  }
+  e.createLoginUrl = async function(r) {
+    var t = Y(), s = Y(), i = p.redirectUri(r), a = {
+      state: t,
+      nonce: s,
+      redirectUri: encodeURIComponent(i),
+      loginOptions: r
+    };
+    r && r.prompt && (a.prompt = r.prompt);
+    var c;
+    r && r.action == "register" ? c = e.endpoints.register() : c = e.endpoints.authorize();
+    var n = r && r.scope || e.scope;
+    n ? n.indexOf("openid") === -1 && (n = "openid " + n) : n = "openid";
+    var o = c + "?client_id=" + encodeURIComponent(e.clientId) + "&redirect_uri=" + encodeURIComponent(i) + "&state=" + encodeURIComponent(t) + "&response_mode=" + encodeURIComponent(e.responseMode) + "&response_type=" + encodeURIComponent(e.responseType) + "&scope=" + encodeURIComponent(n);
+    if (P && (o = o + "&nonce=" + encodeURIComponent(s)), r && r.prompt && (o += "&prompt=" + encodeURIComponent(r.prompt)), r && typeof r.maxAge == "number" && (o += "&max_age=" + encodeURIComponent(r.maxAge)), r && r.loginHint && (o += "&login_hint=" + encodeURIComponent(r.loginHint)), r && r.idpHint && (o += "&kc_idp_hint=" + encodeURIComponent(r.idpHint)), r && r.action && r.action != "register" && (o += "&kc_action=" + encodeURIComponent(r.action)), r && r.locale && (o += "&ui_locales=" + encodeURIComponent(r.locale)), r && r.acr) {
+      var l = ee(r.acr);
+      o += "&claims=" + encodeURIComponent(l);
+    }
+    if ((r && r.acrValues || e.acrValues) && (o += "&acr_values=" + encodeURIComponent(r.acrValues || e.acrValues)), e.pkceMethod)
+      try {
+        const f = $(96), d = await Z(e.pkceMethod, f);
+        a.pkceCodeVerifier = f, o += "&code_challenge=" + d, o += "&code_challenge_method=" + e.pkceMethod;
+      } catch (f) {
+        throw new Error("Failed to generate PKCE challenge.", { cause: f });
+      }
+    return I.add(a), o;
+  }, e.logout = function(r) {
+    return p.logout(r);
+  }, e.createLogoutUrl = function(r) {
+    if (((r == null ? void 0 : r.logoutMethod) ?? e.logoutMethod) === "POST")
+      return e.endpoints.logout();
+    var s = e.endpoints.logout() + "?client_id=" + encodeURIComponent(e.clientId) + "&post_logout_redirect_uri=" + encodeURIComponent(p.redirectUri(r, !1));
+    return e.idToken && (s += "&id_token_hint=" + encodeURIComponent(e.idToken)), s;
+  }, e.register = function(r) {
+    return p.register(r);
+  }, e.createRegisterUrl = async function(r) {
+    return r || (r = {}), r.action = "register", await e.createLoginUrl(r);
+  }, e.createAccountUrl = function(r) {
+    var t = b(), s = void 0;
+    return typeof t < "u" && (s = t + "/account?referrer=" + encodeURIComponent(e.clientId) + "&referrer_uri=" + encodeURIComponent(p.redirectUri(r))), s;
+  }, e.accountManagement = function() {
+    return p.accountManagement();
+  }, e.hasRealmRole = function(r) {
+    var t = e.realmAccess;
+    return !!t && t.roles.indexOf(r) >= 0;
+  }, e.hasResourceRole = function(r, t) {
+    if (!e.resourceAccess)
+      return !1;
+    var s = e.resourceAccess[t || e.clientId];
+    return !!s && s.roles.indexOf(r) >= 0;
+  }, e.loadUserProfile = function() {
+    var r = b() + "/account", t = new XMLHttpRequest();
+    t.open("GET", r, !0), t.setRequestHeader("Accept", "application/json"), t.setRequestHeader("Authorization", "bearer " + e.token);
+    var s = g();
+    return t.onreadystatechange = function() {
+      t.readyState == 4 && (t.status == 200 ? (e.profile = JSON.parse(t.responseText), s.setSuccess(e.profile)) : s.setError());
+    }, t.send(), s.promise;
+  }, e.loadUserInfo = function() {
+    var r = e.endpoints.userinfo(), t = new XMLHttpRequest();
+    t.open("GET", r, !0), t.setRequestHeader("Accept", "application/json"), t.setRequestHeader("Authorization", "bearer " + e.token);
+    var s = g();
+    return t.onreadystatechange = function() {
+      t.readyState == 4 && (t.status == 200 ? (e.userInfo = JSON.parse(t.responseText), s.setSuccess(e.userInfo)) : s.setError());
+    }, t.send(), s.promise;
+  }, e.isTokenExpired = function(r) {
+    if (!e.tokenParsed || !e.refreshToken && e.flow != "implicit")
+      throw "Not authenticated";
+    if (e.timeSkew == null)
+      return _("[KEYCLOAK] Unable to determine if token is expired as timeskew is not set"), !0;
+    var t = e.tokenParsed.exp - Math.ceil((/* @__PURE__ */ new Date()).getTime() / 1e3) + e.timeSkew;
+    if (r) {
+      if (isNaN(r))
+        throw "Invalid minValidity";
+      t -= r;
+    }
+    return t < 0;
+  }, e.updateToken = function(r) {
+    var t = g();
+    if (!e.refreshToken)
+      return t.setError(), t.promise;
+    r = r || 5;
+    var s = function() {
+      var a = !1;
+      if (r == -1 ? (a = !0, _("[KEYCLOAK] Refreshing token: forced refresh")) : (!e.tokenParsed || e.isTokenExpired(r)) && (a = !0, _("[KEYCLOAK] Refreshing token: token expired")), !a)
+        t.setSuccess(!1);
+      else {
+        var c = "grant_type=refresh_token&refresh_token=" + e.refreshToken, n = e.endpoints.token();
+        if (v.push(t), v.length == 1) {
+          var o = new XMLHttpRequest();
+          o.open("POST", n, !0), o.setRequestHeader("Content-type", "application/x-www-form-urlencoded"), o.withCredentials = !0, c += "&client_id=" + encodeURIComponent(e.clientId);
+          var l = (/* @__PURE__ */ new Date()).getTime();
+          o.onreadystatechange = function() {
+            if (o.readyState == 4)
+              if (o.status == 200) {
+                _("[KEYCLOAK] Token refreshed"), l = (l + (/* @__PURE__ */ new Date()).getTime()) / 2;
+                var f = JSON.parse(o.responseText);
+                C(f.access_token, f.refresh_token, f.id_token, l), e.onAuthRefreshSuccess && e.onAuthRefreshSuccess();
+                for (var d = v.pop(); d != null; d = v.pop())
+                  d.setSuccess(!0);
+              } else {
+                M("[KEYCLOAK] Failed to refresh token"), o.status == 400 && e.clearToken(), e.onAuthRefreshError && e.onAuthRefreshError();
+                for (var d = v.pop(); d != null; d = v.pop())
+                  d.setError("Failed to refresh token: An unexpected HTTP error occurred while attempting to refresh the token.");
+              }
+          }, o.send(c);
+        }
+      }
+    };
+    if (h.enable) {
+      var i = L();
+      i.then(function() {
+        s();
+      }).catch(function(a) {
+        t.setError(a);
+      });
+    } else
+      s();
+    return t.promise;
+  }, e.clearToken = function() {
+    e.token && (C(null, null, null), e.onAuthLogout && e.onAuthLogout(), e.loginRequired && e.login());
+  };
+  function b() {
+    if (typeof e.authServerUrl < "u")
+      return e.authServerUrl.charAt(e.authServerUrl.length - 1) == "/" ? e.authServerUrl + "realms/" + encodeURIComponent(e.realm) : e.authServerUrl + "/realms/" + encodeURIComponent(e.realm);
+  }
+  function re() {
+    return window.location.origin ? window.location.origin : window.location.protocol + "//" + window.location.hostname + (window.location.port ? ":" + window.location.port : "");
+  }
+  function T(r, t) {
+    var s = r.code, i = r.error, a = r.prompt, c = (/* @__PURE__ */ new Date()).getTime();
+    if (r.kc_action_status && e.onActionUpdate && e.onActionUpdate(r.kc_action_status, r.kc_action), i) {
+      if (a != "none")
+        if (r.error_description && r.error_description === "authentication_expired")
+          e.login(r.loginOptions);
+        else {
+          var n = { error: i, error_description: r.error_description };
+          e.onAuthError && e.onAuthError(n), t && t.setError(n);
+        }
+      else
+        t && t.setSuccess();
+      return;
+    } else e.flow != "standard" && (r.access_token || r.id_token) && d(r.access_token, null, r.id_token, !0);
+    if (e.flow != "implicit" && s) {
+      var o = "code=" + s + "&grant_type=authorization_code", l = e.endpoints.token(), f = new XMLHttpRequest();
+      f.open("POST", l, !0), f.setRequestHeader("Content-type", "application/x-www-form-urlencoded"), o += "&client_id=" + encodeURIComponent(e.clientId), o += "&redirect_uri=" + r.redirectUri, r.pkceCodeVerifier && (o += "&code_verifier=" + r.pkceCodeVerifier), f.withCredentials = !0, f.onreadystatechange = function() {
+        if (f.readyState == 4)
+          if (f.status == 200) {
+            var m = JSON.parse(f.responseText);
+            d(m.access_token, m.refresh_token, m.id_token, e.flow === "standard"), H();
+          } else
+            e.onAuthError && e.onAuthError(), t && t.setError();
+      }, f.send(o);
+    }
+    function d(m, w, S, y) {
+      c = (c + (/* @__PURE__ */ new Date()).getTime()) / 2, C(m, w, S, c), P && e.idTokenParsed && e.idTokenParsed.nonce != r.storedNonce ? (_("[KEYCLOAK] Invalid nonce, clearing token"), e.clearToken(), t && t.setError()) : y && (e.onAuthSuccess && e.onAuthSuccess(), t && t.setSuccess());
+    }
+  }
+  function te() {
+    var r = g(), t;
+    typeof u == "string" && (t = u);
+    function s(n) {
+      n ? e.endpoints = {
+        authorize: function() {
+          return n.authorization_endpoint;
+        },
+        token: function() {
+          return n.token_endpoint;
+        },
+        logout: function() {
+          if (!n.end_session_endpoint)
+            throw "Not supported by the OIDC server";
+          return n.end_session_endpoint;
+        },
+        checkSessionIframe: function() {
+          if (!n.check_session_iframe)
+            throw "Not supported by the OIDC server";
+          return n.check_session_iframe;
+        },
+        register: function() {
+          throw 'Redirection to "Register user" page not supported in standard OIDC mode';
+        },
+        userinfo: function() {
+          if (!n.userinfo_endpoint)
+            throw "Not supported by the OIDC server";
+          return n.userinfo_endpoint;
+        }
+      } : e.endpoints = {
+        authorize: function() {
+          return b() + "/protocol/openid-connect/auth";
+        },
+        token: function() {
+          return b() + "/protocol/openid-connect/token";
+        },
+        logout: function() {
+          return b() + "/protocol/openid-connect/logout";
+        },
+        checkSessionIframe: function() {
+          return b() + "/protocol/openid-connect/login-status-iframe.html";
+        },
+        thirdPartyCookiesIframe: function() {
+          return b() + "/protocol/openid-connect/3p-cookies/step1.html";
+        },
+        register: function() {
+          return b() + "/protocol/openid-connect/registrations";
+        },
+        userinfo: function() {
+          return b() + "/protocol/openid-connect/userinfo";
+        }
+      };
+    }
+    if (t) {
+      var i = new XMLHttpRequest();
+      i.open("GET", t, !0), i.setRequestHeader("Accept", "application/json"), i.onreadystatechange = function() {
+        if (i.readyState == 4)
+          if (i.status == 200 || F(i)) {
+            var n = JSON.parse(i.responseText);
+            e.authServerUrl = n["auth-server-url"], e.realm = n.realm, e.clientId = n.resource, s(null), r.setSuccess();
+          } else
+            r.setError();
+      }, i.send();
+    } else {
+      e.clientId = u.clientId;
+      var a = u.oidcProvider;
+      if (!a)
+        e.authServerUrl = u.url, e.realm = u.realm, s(null), r.setSuccess();
+      else if (typeof a == "string") {
+        var c;
+        a.charAt(a.length - 1) == "/" ? c = a + ".well-known/openid-configuration" : c = a + "/.well-known/openid-configuration";
+        var i = new XMLHttpRequest();
+        i.open("GET", c, !0), i.setRequestHeader("Accept", "application/json"), i.onreadystatechange = function() {
+          if (i.readyState == 4)
+            if (i.status == 200 || F(i)) {
+              var o = JSON.parse(i.responseText);
+              s(o), r.setSuccess();
+            } else
+              r.setError();
+        }, i.send();
+      } else
+        s(a), r.setSuccess();
+    }
+    return r.promise;
+  }
+  function F(r) {
+    return r.status == 0 && r.responseText && r.responseURL.startsWith("file:");
+  }
+  function C(r, t, s, i) {
+    if (e.tokenTimeoutHandle && (clearTimeout(e.tokenTimeoutHandle), e.tokenTimeoutHandle = null), t ? (e.refreshToken = t, e.refreshTokenParsed = V(t)) : (delete e.refreshToken, delete e.refreshTokenParsed), s ? (e.idToken = s, e.idTokenParsed = V(s)) : (delete e.idToken, delete e.idTokenParsed), r) {
+      if (e.token = r, e.tokenParsed = V(r), e.sessionId = e.tokenParsed.sid, e.authenticated = !0, e.subject = e.tokenParsed.sub, e.realmAccess = e.tokenParsed.realm_access, e.resourceAccess = e.tokenParsed.resource_access, i && (e.timeSkew = Math.floor(i / 1e3) - e.tokenParsed.iat), e.timeSkew != null && (_("[KEYCLOAK] Estimated time difference between browser and server is " + e.timeSkew + " seconds"), e.onTokenExpired)) {
+        var a = (e.tokenParsed.exp - (/* @__PURE__ */ new Date()).getTime() / 1e3 + e.timeSkew) * 1e3;
+        _("[KEYCLOAK] Token expires in " + Math.round(a / 1e3) + " s"), a <= 0 ? e.onTokenExpired() : e.tokenTimeoutHandle = setTimeout(e.onTokenExpired, a);
+      }
+    } else
+      delete e.token, delete e.tokenParsed, delete e.subject, delete e.realmAccess, delete e.resourceAccess, e.authenticated = !1;
+  }
+  function Y() {
+    if (typeof crypto > "u" || typeof crypto.randomUUID > "u")
+      throw new Error("Web Crypto API is not available.");
+    return crypto.randomUUID();
+  }
+  function E(r) {
+    var t = ne(r);
+    if (t) {
+      var s = I.get(t.state);
+      return s && (t.valid = !0, t.redirectUri = s.redirectUri, t.storedNonce = s.nonce, t.prompt = s.prompt, t.pkceCodeVerifier = s.pkceCodeVerifier, t.loginOptions = s.loginOptions), t;
+    }
+  }
+  function ne(r) {
+    var t;
+    switch (e.flow) {
+      case "standard":
+        t = ["code", "state", "session_state", "kc_action_status", "kc_action", "iss"];
+        break;
+      case "implicit":
+        t = ["access_token", "token_type", "id_token", "state", "session_state", "expires_in", "kc_action_status", "kc_action", "iss"];
+        break;
+      case "hybrid":
+        t = ["access_token", "token_type", "id_token", "code", "state", "session_state", "expires_in", "kc_action_status", "kc_action", "iss"];
+        break;
+    }
+    t.push("error"), t.push("error_description"), t.push("error_uri");
+    var s = r.indexOf("?"), i = r.indexOf("#"), a, c;
+    if (e.responseMode === "query" && s !== -1 ? (a = r.substring(0, s), c = G(r.substring(s + 1, i !== -1 ? i : r.length), t), c.paramsString !== "" && (a += "?" + c.paramsString), i !== -1 && (a += r.substring(i))) : e.responseMode === "fragment" && i !== -1 && (a = r.substring(0, i), c = G(r.substring(i + 1), t), c.paramsString !== "" && (a += "#" + c.paramsString)), c && c.oauthParams) {
+      if (e.flow === "standard" || e.flow === "hybrid") {
+        if ((c.oauthParams.code || c.oauthParams.error) && c.oauthParams.state)
+          return c.oauthParams.newUrl = a, c.oauthParams;
+      } else if (e.flow === "implicit" && (c.oauthParams.access_token || c.oauthParams.error) && c.oauthParams.state)
+        return c.oauthParams.newUrl = a, c.oauthParams;
+    }
+  }
+  function G(r, t) {
+    for (var s = r.split("&"), i = {
+      paramsString: "",
+      oauthParams: {}
+    }, a = 0; a < s.length; a++) {
+      var c = s[a].indexOf("="), n = s[a].slice(0, c);
+      t.indexOf(n) !== -1 ? i.oauthParams[n] = s[a].slice(c + 1) : (i.paramsString !== "" && (i.paramsString += "&"), i.paramsString += s[a]);
+    }
+    return i;
+  }
+  function g() {
+    var r = {
+      setSuccess: function(t) {
+        r.resolve(t);
+      },
+      setError: function(t) {
+        r.reject(t);
+      }
+    };
+    return r.promise = new Promise(function(t, s) {
+      r.resolve = t, r.reject = s;
+    }), r;
+  }
+  function oe(r, t, s) {
+    var i = null, a = new Promise(function(c, n) {
+      i = setTimeout(function() {
+        n({ error: s });
+      }, t);
+    });
+    return Promise.race([r, a]).finally(function() {
+      clearTimeout(i);
+    });
+  }
+  function K() {
+    var r = g();
+    if (!h.enable || h.iframe)
+      return r.setSuccess(), r.promise;
+    var t = document.createElement("iframe");
+    h.iframe = t, t.onload = function() {
+      var a = e.endpoints.authorize();
+      a.charAt(0) === "/" ? h.iframeOrigin = re() : h.iframeOrigin = a.substring(0, a.indexOf("/", 8)), r.setSuccess();
+    };
+    var s = e.endpoints.checkSessionIframe();
+    t.setAttribute("src", s), t.setAttribute("sandbox", "allow-storage-access-by-user-activation allow-scripts allow-same-origin"), t.setAttribute("title", "keycloak-session-iframe"), t.style.display = "none", document.body.appendChild(t);
+    var i = function(a) {
+      if (!(a.origin !== h.iframeOrigin || h.iframe.contentWindow !== a.source) && (a.data == "unchanged" || a.data == "changed" || a.data == "error")) {
+        a.data != "unchanged" && e.clearToken();
+        for (var c = h.callbackList.splice(0, h.callbackList.length), n = c.length - 1; n >= 0; --n) {
+          var o = c[n];
+          a.data == "error" ? o.setError() : o.setSuccess(a.data == "unchanged");
+        }
+      }
+    };
+    return window.addEventListener("message", i, !1), r.promise;
+  }
+  function H() {
+    h.enable && e.token && setTimeout(function() {
+      L().then(function(r) {
+        r && H();
+      });
+    }, h.interval * 1e3);
+  }
+  function L() {
+    var r = g();
+    if (h.iframe && h.iframeOrigin) {
+      var t = e.clientId + " " + (e.sessionId ? e.sessionId : "");
+      h.callbackList.push(r);
+      var s = h.iframeOrigin;
+      h.callbackList.length == 1 && h.iframe.contentWindow.postMessage(t, s);
+    } else
+      r.setSuccess();
+    return r.promise;
+  }
+  function ae() {
+    var r = g();
+    if ((h.enable || e.silentCheckSsoRedirectUri) && typeof e.endpoints.thirdPartyCookiesIframe == "function") {
+      var t = document.createElement("iframe");
+      t.setAttribute("src", e.endpoints.thirdPartyCookiesIframe()), t.setAttribute("sandbox", "allow-storage-access-by-user-activation allow-scripts allow-same-origin"), t.setAttribute("title", "keycloak-3p-check-iframe"), t.style.display = "none", document.body.appendChild(t);
+      var s = function(i) {
+        t.contentWindow === i.source && (i.data !== "supported" && i.data !== "unsupported" || (i.data === "unsupported" && (M(
+          `[KEYCLOAK] Your browser is blocking access to 3rd-party cookies, this means:
+
+ - It is not possible to retrieve tokens without redirecting to the Keycloak server (a.k.a. no support for silent authentication).
+ - It is not possible to automatically detect changes to the session status (such as the user logging out in another tab).
+
+For more information see: https://www.keycloak.org/securing-apps/javascript-adapter#_modern_browsers`
+        ), h.enable = !1, e.silentCheckSsoFallback && (e.silentCheckSsoRedirectUri = !1)), document.body.removeChild(t), window.removeEventListener("message", s), r.setSuccess()));
+      };
+      window.addEventListener("message", s, !1);
+    } else
+      r.setSuccess();
+    return oe(r.promise, e.messageReceiveTimeout, "Timeout when waiting for 3rd party check iframe message.");
+  }
+  function N(r) {
+    if (!r || r == "default")
+      return {
+        login: async function(n) {
+          return window.location.assign(await e.createLoginUrl(n)), g().promise;
+        },
+        logout: async function(n) {
+          if (((n == null ? void 0 : n.logoutMethod) ?? e.logoutMethod) === "GET") {
+            window.location.replace(e.createLogoutUrl(n));
+            return;
+          }
+          const l = document.createElement("form");
+          l.setAttribute("method", "POST"), l.setAttribute("action", e.createLogoutUrl(n)), l.style.display = "none";
+          const f = {
+            id_token_hint: e.idToken,
+            client_id: e.clientId,
+            post_logout_redirect_uri: p.redirectUri(n, !1)
+          };
+          for (const [d, m] of Object.entries(f)) {
+            const w = document.createElement("input");
+            w.setAttribute("type", "hidden"), w.setAttribute("name", d), w.setAttribute("value", m), l.appendChild(w);
+          }
+          document.body.appendChild(l), l.submit();
+        },
+        register: async function(n) {
+          return window.location.assign(await e.createRegisterUrl(n)), g().promise;
+        },
+        accountManagement: function() {
+          var n = e.createAccountUrl();
+          if (typeof n < "u")
+            window.location.href = n;
+          else
+            throw "Not supported by the OIDC server";
+          return g().promise;
+        },
+        redirectUri: function(n, o) {
+          return n && n.redirectUri ? n.redirectUri : e.redirectUri ? e.redirectUri : location.href;
+        }
+      };
+    if (r == "cordova") {
+      h.enable = !1;
+      var t = function(n, o, l) {
+        return window.cordova && window.cordova.InAppBrowser ? window.cordova.InAppBrowser.open(n, o, l) : window.open(n, o, l);
+      }, s = function(n) {
+        return n && n.cordovaOptions ? Object.keys(n.cordovaOptions).reduce(function(o, l) {
+          return o[l] = n.cordovaOptions[l], o;
+        }, {}) : {};
+      }, i = function(n) {
+        return Object.keys(n).reduce(function(o, l) {
+          return o.push(l + "=" + n[l]), o;
+        }, []).join(",");
+      }, a = function(n) {
+        var o = s(n);
+        return o.location = "no", n && n.prompt == "none" && (o.hidden = "yes"), i(o);
+      }, c = function() {
+        return e.redirectUri || "http://localhost";
+      };
+      return {
+        login: async function(n) {
+          var o = g(), l = a(n), f = await e.createLoginUrl(n), d = t(f, "_blank", l), m = !1, w = !1, S = function() {
+            w = !0, d.close();
+          };
+          return d.addEventListener("loadstart", function(y) {
+            if (y.url.indexOf(c()) == 0) {
+              var z = E(y.url);
+              T(z, o), S(), m = !0;
+            }
+          }), d.addEventListener("loaderror", function(y) {
+            if (!m)
+              if (y.url.indexOf(c()) == 0) {
+                var z = E(y.url);
+                T(z, o), S(), m = !0;
+              } else
+                o.setError(), S();
+          }), d.addEventListener("exit", function(y) {
+            w || o.setError({
+              reason: "closed_by_user"
+            });
+          }), o.promise;
+        },
+        logout: function(n) {
+          var o = g(), l = e.createLogoutUrl(n), f = t(l, "_blank", "location=no,hidden=yes,clearcache=yes"), d;
+          return f.addEventListener("loadstart", function(m) {
+            m.url.indexOf(c()) == 0 && f.close();
+          }), f.addEventListener("loaderror", function(m) {
+            m.url.indexOf(c()) == 0 || (d = !0), f.close();
+          }), f.addEventListener("exit", function(m) {
+            d ? o.setError() : (e.clearToken(), o.setSuccess());
+          }), o.promise;
+        },
+        register: async function(n) {
+          var o = g(), l = await e.createRegisterUrl(), f = a(n), d = t(l, "_blank", f);
+          return d.addEventListener("loadstart", function(m) {
+            if (m.url.indexOf(c()) == 0) {
+              d.close();
+              var w = E(m.url);
+              T(w, o);
+            }
+          }), o.promise;
+        },
+        accountManagement: function() {
+          var n = e.createAccountUrl();
+          if (typeof n < "u") {
+            var o = t(n, "_blank", "location=no");
+            o.addEventListener("loadstart", function(l) {
+              l.url.indexOf(c()) == 0 && o.close();
+            });
+          } else
+            throw "Not supported by the OIDC server";
+        },
+        redirectUri: function(n) {
+          return c();
+        }
+      };
+    }
+    if (r == "cordova-native")
+      return h.enable = !1, {
+        login: async function(n) {
+          var o = g(), l = await e.createLoginUrl(n);
+          return universalLinks.subscribe("keycloak", function(f) {
+            universalLinks.unsubscribe("keycloak"), window.cordova.plugins.browsertab.close();
+            var d = E(f.url);
+            T(d, o);
+          }), window.cordova.plugins.browsertab.openUrl(l), o.promise;
+        },
+        logout: function(n) {
+          var o = g(), l = e.createLogoutUrl(n);
+          return universalLinks.subscribe("keycloak", function(f) {
+            universalLinks.unsubscribe("keycloak"), window.cordova.plugins.browsertab.close(), e.clearToken(), o.setSuccess();
+          }), window.cordova.plugins.browsertab.openUrl(l), o.promise;
+        },
+        register: async function(n) {
+          var o = g(), l = await e.createRegisterUrl(n);
+          return universalLinks.subscribe("keycloak", function(f) {
+            universalLinks.unsubscribe("keycloak"), window.cordova.plugins.browsertab.close();
+            var d = E(f.url);
+            T(d, o);
+          }), window.cordova.plugins.browsertab.openUrl(l), o.promise;
+        },
+        accountManagement: function() {
+          var n = e.createAccountUrl();
+          if (typeof n < "u")
+            window.cordova.plugins.browsertab.openUrl(n);
+          else
+            throw "Not supported by the OIDC server";
+        },
+        redirectUri: function(n) {
+          return n && n.redirectUri ? n.redirectUri : e.redirectUri ? e.redirectUri : "http://localhost";
+        }
+      };
+    throw "invalid adapter type: " + r;
+  }
+  const A = "kc-callback-";
+  var D = function() {
+    if (!(this instanceof D))
+      return new D();
+    localStorage.setItem("kc-test", "test"), localStorage.removeItem("kc-test");
+    var r = this;
+    function t() {
+      const c = Date.now();
+      for (const [n, o] of i()) {
+        const l = a(o);
+        (l === null || l < c) && localStorage.removeItem(n);
+      }
+    }
+    function s() {
+      for (const [c] of i())
+        localStorage.removeItem(c);
+    }
+    function i() {
+      return Object.entries(localStorage).filter(([c]) => c.startsWith(A));
+    }
+    function a(c) {
+      let n;
+      try {
+        n = JSON.parse(c);
+      } catch {
+        return null;
+      }
+      return O(n) && "expires" in n && typeof n.expires == "number" ? n.expires : null;
+    }
+    r.get = function(c) {
+      if (c) {
+        var n = A + c, o = localStorage.getItem(n);
+        return o && (localStorage.removeItem(n), o = JSON.parse(o)), t(), o;
+      }
+    }, r.add = function(c) {
+      t();
+      const n = A + c.state, o = JSON.stringify({
+        ...c,
+        // Set the expiry time to 1 hour from now.
+        expires: Date.now() + 60 * 60 * 1e3
+      });
+      try {
+        localStorage.setItem(n, o);
+      } catch {
+        s(), localStorage.setItem(n, o);
+      }
+    };
+  }, j = function() {
+    if (!(this instanceof j))
+      return new j();
+    var r = this;
+    r.get = function(a) {
+      if (a) {
+        var c = s(A + a);
+        if (i(A + a, "", t(-100)), c)
+          return JSON.parse(c);
+      }
+    }, r.add = function(a) {
+      i(A + a.state, JSON.stringify(a), t(60));
+    }, r.removeItem = function(a) {
+      i(a, "", t(-100));
+    };
+    var t = function(a) {
+      var c = /* @__PURE__ */ new Date();
+      return c.setTime(c.getTime() + a * 60 * 1e3), c;
+    }, s = function(a) {
+      for (var c = a + "=", n = document.cookie.split(";"), o = 0; o < n.length; o++) {
+        for (var l = n[o]; l.charAt(0) == " "; )
+          l = l.substring(1);
+        if (l.indexOf(c) == 0)
+          return l.substring(c.length, l.length);
+      }
+      return "";
+    }, i = function(a, c, n) {
+      var o = a + "=" + c + "; expires=" + n.toUTCString() + "; ";
+      document.cookie = o;
+    };
+  };
+  function ie() {
+    try {
+      return new D();
+    } catch {
+    }
+    return new j();
+  }
+  function W(r) {
+    return function() {
+      e.enableLogging && r.apply(console, Array.prototype.slice.call(arguments));
+    };
+  }
+}
+function ce(u) {
+  const e = String.fromCodePoint(...u);
+  return btoa(e);
+}
+async function le(u) {
+  const p = new TextEncoder().encode(u);
+  if (typeof crypto > "u" || typeof crypto.subtle > "u")
+    throw new Error("Web Crypto API is not available.");
+  return await crypto.subtle.digest("SHA-256", p);
+}
+function V(u) {
+  const [e, p] = u.split(".");
+  if (typeof p != "string")
+    throw new Error("Unable to decode token, payload not found.");
+  let v;
+  try {
+    v = ue(p);
+  } catch (I) {
+    throw new Error("Unable to decode token, payload is not a valid Base64URL value.", { cause: I });
+  }
+  try {
+    return JSON.parse(v);
+  } catch (I) {
+    throw new Error("Unable to decode token, payload is not a valid JSON value.", { cause: I });
+  }
+}
+function ue(u) {
+  let e = u.replaceAll("-", "+").replaceAll("_", "/");
+  switch (e.length % 4) {
+    case 0:
+      break;
+    case 2:
+      e += "==";
+      break;
+    case 3:
+      e += "=";
+      break;
+    default:
+      throw new Error("Input is not of the correct length.");
+  }
+  try {
+    return de(e);
+  } catch {
+    return atob(e);
+  }
+}
+function de(u) {
+  return decodeURIComponent(atob(u).replace(/(.)/g, (e, p) => {
+    let v = p.charCodeAt(0).toString(16).toUpperCase();
+    return v.length < 2 && (v = "0" + v), "%" + v;
+  }));
+}
+function O(u) {
+  return typeof u == "object" && u !== null;
+}
+let k = null, x = null;
+function fe(u, e = !0) {
+  return x ? (console.log("Keycloak already initialized, returning from cache"), x) : (k || (k = new q({
+    url: u.url,
+    realm: u.realm,
+    clientId: u.clientId
+  })), x = k.init({
+    onLoad: e ? "check-sso" : "login-required",
+    checkLoginIframe: !1
+    //silentCheckSsoRedirectUri: `${window.location.origin}/silent-check-sso.html`, // Ensure this file is set up
+  }).then((p) => p).catch((p) => (console.error("Failed to initialize Keycloak:", p), !1)), x);
+}
+function he() {
+  return k != null && k.authenticated && (k != null && k.idTokenParsed) ? {
+    fullname: k.idTokenParsed.name,
+    email: k.idTokenParsed.email,
+    lastname: k.idTokenParsed.family_name,
+    firstname: k.idTokenParsed.given_name,
+    username: k.idTokenParsed.preferred_username,
+    background: "grey",
+    // Optional custom value
+    token: k.token,
+    sub: k.idTokenParsed.sub
+  } : {};
+}
+function pe() {
+  if (k)
+    k.login();
+  else
+    throw new Error("Keycloak is not initialized.");
+}
+function me() {
+  if (k)
+    k.logout();
+  else
+    throw new Error("Keycloak is not initialized.");
+}
+function ke() {
+  return !!(k != null && k.authenticated);
+}
+async function ge(u) {
+  try {
+    const e = await fetch(u, { method: "HEAD", mode: "no-cors" });
+    return e.ok || e.type === "opaque";
+  } catch {
+    return !1;
+  }
+}
+const Ue = class {
+  constructor(u) {
+    X(this, u), this.keycloak = J(this, "keycloak", 7), this.auth = J(this, "auth", 7), this.handleLogin = async () => {
+      if (!this.authenticated)
+        try {
+          await pe();
+        } catch (e) {
+          R.show(e.message, "error");
+        }
+    }, this.handleLogout = async () => {
+      try {
+        await me();
+      } catch (e) {
+        R.show(e.message, "error");
+      }
+      this.authenticated = !1, this.user = null;
+    }, this.keycloakUrl = void 0, this.keycloakRealm = void 0, this.keycloakClientId = void 0, this.authenticated = !1, this.user = null, this.serverAvailable = !1;
+  }
+  /**
+   * Lifecycle method that runs when the component is about to load.
+   * It initializes authentication by calling the `initAuth` method.
+   */
+  async componentWillLoad() {
+    if (!this.keycloakUrl || !this.keycloakRealm || !this.keycloakClientId) {
+      console.error("Keycloak configuration props are missing.");
+      return;
+    }
+    if (this.serverAvailable = await ge(`${this.keycloakUrl}/realms/${this.keycloakRealm}`), !this.serverAvailable) {
+      R.show("Keycloak server is unavailable.", "error");
+      return;
+    }
+    await this.initAuth();
+  }
+  /**
+   * Initializes the Keycloak authentication by configuring Keycloak with the provided props.
+   * Sets the `authenticated` state and `user` data if the user is authenticated.
+   * Emits `authStatusChanged` event with the authentication status.
+   */
+  async initAuth() {
+    try {
+      const u = await fe({
+        url: this.keycloakUrl,
+        realm: this.keycloakRealm,
+        clientId: this.keycloakClientId
+      }, !0);
+      this.keycloak.emit({
+        init: u
+      }), ke() && (this.user = he(), this.authenticated = !0, this.auth.emit({
+        authenticated: this.authenticated,
+        user: this.user
+      }));
+    } catch (u) {
+      R.show(u.message, "error");
+    }
+  }
+  render() {
+    return U("div", { key: "041846174aaad541acce03588a087793d10daa1e", class: "block" }, !this.authenticated && U("eds-button", { key: "360a84ec79a15c9293e3898b77df649c469d9529", label: "Login", intent: "primary", "extra-class": "text-default", "aria-label": "Login", triggerClick: this.handleLogin.bind(this) }));
+  }
+}, ve = ".splash-overlay{position:fixed;top:0;left:0;width:100vw;height:100vh;z-index:9999999;background-color:var(--grey-200);display:flex;flex-direction:column;align-items:center;justify-content:center}.logo-container{width:200px;height:200px;margin-bottom:1rem}.content-container{position:relative;width:5rem;height:5rem;display:flex;align-items:center;justify-content:center}", we = ve, ye = class {
+  constructor(u) {
+    X(this, u), this.splash = J(this, "splash", 7), this.inverse = !1, this.initPromise = void 0, this.isVisible = !0;
+  }
+  // When the component loads, check if there is a promise.
+  componentWillLoad() {
+    this.initPromise && this.handleInitPromise(this.initPromise);
+  }
+  // Watch for changes on initPromise.
+  async watchInitPromise(u) {
+    u && this.handleInitPromise(u);
+  }
+  async handleInitPromise(u) {
+    try {
+      await u, this.hideSplash();
+    } catch (e) {
+      this.splash.emit({ type: "error", message: e.message || "Unknown error" });
+    }
+  }
+  handleHideSplash() {
+    this.hideSplash();
+  }
+  hideSplash() {
+    this.isVisible = !1, this.splash.emit({ type: "hidden", message: "Splash screen hidden successfully" });
+  }
+  render() {
+    return this.isVisible ? U(se, null, U("div", { class: "splash-overlay", style: { background: this.inverse ? "black" : "var(--grey-200)" } }, U("div", { class: "logo-container" }, this.inverse ? U("eds-logo", { orientation: "vertical", type: "color-white" }) : U("eds-logo", { orientation: "vertical", type: "color" })), U("div", { class: "content-container" }, U("eds-spinner", { size: "1rem", thickness: "3px", "border-color": "var(--grey-400)", "bottom-color": "var(--grey-900)", background: "none", fullscreen: !1 })))) : null;
+  }
+  static get watchers() {
+    return {
+      initPromise: ["watchInitPromise"]
+    };
+  }
+};
+ye.style = we;
+export {
+  Ue as eds_login,
+  ye as eds_splash_screen
+};