@ebrains/vue 0.9.3-beta → 1.0.0

package/eds-login_2.entry-shWfmpH4.mjs

@@ -1,981 +0,0 @@
-import { r as X, c as J, h as U, H as se } from "./index-l365C9dI.mjs";
-import { t as R } from "./toastManager-d9eee791-CEYNwx25.mjs";
-function q(u) {
-  if (!(this instanceof q))
-    throw new Error("The 'Keycloak' constructor must be invoked with 'new'.");
-  if (typeof u != "string" && !O(u))
-    throw new Error("The 'Keycloak' constructor must be provided with a configuration object, or a URL to a JSON configuration file.");
-  if (O(u)) {
-    const r = "oidcProvider" in u ? ["clientId"] : ["url", "realm", "clientId"];
-    for (const t of r)
-      if (!u[t])
-        throw new Error(`The configuration object is missing the required '${t}' property.`);
-  }
-  var e = this, p, v = [], I, h = {
-    enable: !0,
-    callbackList: [],
-    interval: 5
-  };
-  e.didInitialize = !1;
-  var P = !0, _ = W(console.info), M = W(console.warn);
-  globalThis.isSecureContext || M(
-    `[KEYCLOAK] Keycloak JS must be used in a 'secure context' to function properly as it relies on browser APIs that are otherwise not available.
-Continuing to run your application insecurely will lead to unexpected behavior and breakage.
-
-For more information see: https://developer.mozilla.org/en-US/docs/Web/Security/Secure_Contexts`
-  ), e.init = function(r = {}) {
-    if (e.didInitialize)
-      throw new Error("A 'Keycloak' instance can only be initialized once.");
-    e.didInitialize = !0, e.authenticated = !1, I = ie();
-    var t = ["default", "cordova", "cordova-native"];
-    if (t.indexOf(r.adapter) > -1 ? p = N(r.adapter) : typeof r.adapter == "object" ? p = r.adapter : window.Cordova || window.cordova ? p = N("cordova") : p = N(), typeof r.useNonce < "u" && (P = r.useNonce), typeof r.checkLoginIframe < "u" && (h.enable = r.checkLoginIframe), r.checkLoginIframeInterval && (h.interval = r.checkLoginIframeInterval), r.onLoad === "login-required" && (e.loginRequired = !0), r.responseMode)
-      if (r.responseMode === "query" || r.responseMode === "fragment")
-        e.responseMode = r.responseMode;
-      else
-        throw "Invalid value for responseMode";
-    if (r.flow) {
-      switch (r.flow) {
-        case "standard":
-          e.responseType = "code";
-          break;
-        case "implicit":
-          e.responseType = "id_token token";
-          break;
-        case "hybrid":
-          e.responseType = "code id_token token";
-          break;
-        default:
-          throw "Invalid value for flow";
-      }
-      e.flow = r.flow;
-    }
-    if (r.timeSkew != null && (e.timeSkew = r.timeSkew), r.redirectUri && (e.redirectUri = r.redirectUri), r.silentCheckSsoRedirectUri && (e.silentCheckSsoRedirectUri = r.silentCheckSsoRedirectUri), typeof r.silentCheckSsoFallback == "boolean" ? e.silentCheckSsoFallback = r.silentCheckSsoFallback : e.silentCheckSsoFallback = !0, typeof r.pkceMethod < "u") {
-      if (r.pkceMethod !== "S256" && r.pkceMethod !== !1)
-        throw new TypeError(`Invalid value for pkceMethod', expected 'S256' or false but got ${r.pkceMethod}.`);
-      e.pkceMethod = r.pkceMethod;
-    } else
-      e.pkceMethod = "S256";
-    typeof r.enableLogging == "boolean" ? e.enableLogging = r.enableLogging : e.enableLogging = !1, r.logoutMethod === "POST" ? e.logoutMethod = "POST" : e.logoutMethod = "GET", typeof r.scope == "string" && (e.scope = r.scope), typeof r.acrValues == "string" && (e.acrValues = r.acrValues), typeof r.messageReceiveTimeout == "number" && r.messageReceiveTimeout > 0 ? e.messageReceiveTimeout = r.messageReceiveTimeout : e.messageReceiveTimeout = 1e4, e.responseMode || (e.responseMode = "fragment"), e.responseType || (e.responseType = "code", e.flow = "standard");
-    var s = g(), i = g();
-    i.promise.then(function() {
-      e.onReady && e.onReady(e.authenticated), s.setSuccess(e.authenticated);
-    }).catch(function(o) {
-      s.setError(o);
-    });
-    var a = te();
-    function c() {
-      var o = function(d) {
-        d || (f.prompt = "none"), r.locale && (f.locale = r.locale), e.login(f).then(function() {
-          i.setSuccess();
-        }).catch(function(m) {
-          i.setError(m);
-        });
-      }, l = async function() {
-        var d = document.createElement("iframe"), m = await e.createLoginUrl({ prompt: "none", redirectUri: e.silentCheckSsoRedirectUri });
-        d.setAttribute("src", m), d.setAttribute("sandbox", "allow-storage-access-by-user-activation allow-scripts allow-same-origin"), d.setAttribute("title", "keycloak-silent-check-sso"), d.style.display = "none", document.body.appendChild(d);
-        var w = function(S) {
-          if (!(S.origin !== window.location.origin || d.contentWindow !== S.source)) {
-            var y = E(S.data);
-            T(y, i), document.body.removeChild(d), window.removeEventListener("message", w);
-          }
-        };
-        window.addEventListener("message", w);
-      }, f = {};
-      switch (r.onLoad) {
-        case "check-sso":
-          h.enable ? K().then(function() {
-            L().then(function(d) {
-              d ? i.setSuccess() : e.silentCheckSsoRedirectUri ? l() : o(!1);
-            }).catch(function(d) {
-              i.setError(d);
-            });
-          }) : e.silentCheckSsoRedirectUri ? l() : o(!1);
-          break;
-        case "login-required":
-          o(!0);
-          break;
-        default:
-          throw "Invalid value for onLoad";
-      }
-    }
-    function n() {
-      var o = E(window.location.href);
-      if (o && window.history.replaceState(window.history.state, null, o.newUrl), o && o.valid)
-        return K().then(function() {
-          T(o, i);
-        }).catch(function(l) {
-          i.setError(l);
-        });
-      r.token && r.refreshToken ? (C(r.token, r.refreshToken, r.idToken), h.enable ? K().then(function() {
-        L().then(function(l) {
-          l ? (e.onAuthSuccess && e.onAuthSuccess(), i.setSuccess(), H()) : i.setSuccess();
-        }).catch(function(l) {
-          i.setError(l);
-        });
-      }) : e.updateToken(-1).then(function() {
-        e.onAuthSuccess && e.onAuthSuccess(), i.setSuccess();
-      }).catch(function(l) {
-        e.onAuthError && e.onAuthError(), r.onLoad ? c() : i.setError(l);
-      })) : r.onLoad ? c() : i.setSuccess();
-    }
-    return a.then(function() {
-      ae().then(n).catch(function(o) {
-        s.setError(o);
-      });
-    }), a.catch(function(o) {
-      s.setError(o);
-    }), s.promise;
-  }, e.login = function(r) {
-    return p.login(r);
-  };
-  function B(r) {
-    if (typeof crypto > "u" || typeof crypto.getRandomValues > "u")
-      throw new Error("Web Crypto API is not available.");
-    return crypto.getRandomValues(new Uint8Array(r));
-  }
-  function $(r) {
-    return Q(r, "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789");
-  }
-  function Q(r, t) {
-    for (var s = B(r), i = new Array(r), a = 0; a < r; a++)
-      i[a] = t.charCodeAt(s[a] % t.length);
-    return String.fromCharCode.apply(null, i);
-  }
-  async function Z(r, t) {
-    if (r !== "S256")
-      throw new TypeError(`Invalid value for 'pkceMethod', expected 'S256' but got '${r}'.`);
-    const s = new Uint8Array(await le(t));
-    return ce(s).replace(/\+/g, "-").replace(/\//g, "_").replace(/\=/g, "");
-  }
-  function ee(r) {
-    var t = {
-      id_token: {
-        acr: r
-      }
-    };
-    return JSON.stringify(t);
-  }
-  e.createLoginUrl = async function(r) {
-    var t = Y(), s = Y(), i = p.redirectUri(r), a = {
-      state: t,
-      nonce: s,
-      redirectUri: encodeURIComponent(i),
-      loginOptions: r
-    };
-    r && r.prompt && (a.prompt = r.prompt);
-    var c;
-    r && r.action == "register" ? c = e.endpoints.register() : c = e.endpoints.authorize();
-    var n = r && r.scope || e.scope;
-    n ? n.indexOf("openid") === -1 && (n = "openid " + n) : n = "openid";
-    var o = c + "?client_id=" + encodeURIComponent(e.clientId) + "&redirect_uri=" + encodeURIComponent(i) + "&state=" + encodeURIComponent(t) + "&response_mode=" + encodeURIComponent(e.responseMode) + "&response_type=" + encodeURIComponent(e.responseType) + "&scope=" + encodeURIComponent(n);
-    if (P && (o = o + "&nonce=" + encodeURIComponent(s)), r && r.prompt && (o += "&prompt=" + encodeURIComponent(r.prompt)), r && typeof r.maxAge == "number" && (o += "&max_age=" + encodeURIComponent(r.maxAge)), r && r.loginHint && (o += "&login_hint=" + encodeURIComponent(r.loginHint)), r && r.idpHint && (o += "&kc_idp_hint=" + encodeURIComponent(r.idpHint)), r && r.action && r.action != "register" && (o += "&kc_action=" + encodeURIComponent(r.action)), r && r.locale && (o += "&ui_locales=" + encodeURIComponent(r.locale)), r && r.acr) {
-      var l = ee(r.acr);
-      o += "&claims=" + encodeURIComponent(l);
-    }
-    if ((r && r.acrValues || e.acrValues) && (o += "&acr_values=" + encodeURIComponent(r.acrValues || e.acrValues)), e.pkceMethod)
-      try {
-        const f = $(96), d = await Z(e.pkceMethod, f);
-        a.pkceCodeVerifier = f, o += "&code_challenge=" + d, o += "&code_challenge_method=" + e.pkceMethod;
-      } catch (f) {
-        throw new Error("Failed to generate PKCE challenge.", { cause: f });
-      }
-    return I.add(a), o;
-  }, e.logout = function(r) {
-    return p.logout(r);
-  }, e.createLogoutUrl = function(r) {
-    if (((r == null ? void 0 : r.logoutMethod) ?? e.logoutMethod) === "POST")
-      return e.endpoints.logout();
-    var s = e.endpoints.logout() + "?client_id=" + encodeURIComponent(e.clientId) + "&post_logout_redirect_uri=" + encodeURIComponent(p.redirectUri(r, !1));
-    return e.idToken && (s += "&id_token_hint=" + encodeURIComponent(e.idToken)), s;
-  }, e.register = function(r) {
-    return p.register(r);
-  }, e.createRegisterUrl = async function(r) {
-    return r || (r = {}), r.action = "register", await e.createLoginUrl(r);
-  }, e.createAccountUrl = function(r) {
-    var t = b(), s = void 0;
-    return typeof t < "u" && (s = t + "/account?referrer=" + encodeURIComponent(e.clientId) + "&referrer_uri=" + encodeURIComponent(p.redirectUri(r))), s;
-  }, e.accountManagement = function() {
-    return p.accountManagement();
-  }, e.hasRealmRole = function(r) {
-    var t = e.realmAccess;
-    return !!t && t.roles.indexOf(r) >= 0;
-  }, e.hasResourceRole = function(r, t) {
-    if (!e.resourceAccess)
-      return !1;
-    var s = e.resourceAccess[t || e.clientId];
-    return !!s && s.roles.indexOf(r) >= 0;
-  }, e.loadUserProfile = function() {
-    var r = b() + "/account", t = new XMLHttpRequest();
-    t.open("GET", r, !0), t.setRequestHeader("Accept", "application/json"), t.setRequestHeader("Authorization", "bearer " + e.token);
-    var s = g();
-    return t.onreadystatechange = function() {
-      t.readyState == 4 && (t.status == 200 ? (e.profile = JSON.parse(t.responseText), s.setSuccess(e.profile)) : s.setError());
-    }, t.send(), s.promise;
-  }, e.loadUserInfo = function() {
-    var r = e.endpoints.userinfo(), t = new XMLHttpRequest();
-    t.open("GET", r, !0), t.setRequestHeader("Accept", "application/json"), t.setRequestHeader("Authorization", "bearer " + e.token);
-    var s = g();
-    return t.onreadystatechange = function() {
-      t.readyState == 4 && (t.status == 200 ? (e.userInfo = JSON.parse(t.responseText), s.setSuccess(e.userInfo)) : s.setError());
-    }, t.send(), s.promise;
-  }, e.isTokenExpired = function(r) {
-    if (!e.tokenParsed || !e.refreshToken && e.flow != "implicit")
-      throw "Not authenticated";
-    if (e.timeSkew == null)
-      return _("[KEYCLOAK] Unable to determine if token is expired as timeskew is not set"), !0;
-    var t = e.tokenParsed.exp - Math.ceil((/* @__PURE__ */ new Date()).getTime() / 1e3) + e.timeSkew;
-    if (r) {
-      if (isNaN(r))
-        throw "Invalid minValidity";
-      t -= r;
-    }
-    return t < 0;
-  }, e.updateToken = function(r) {
-    var t = g();
-    if (!e.refreshToken)
-      return t.setError(), t.promise;
-    r = r || 5;
-    var s = function() {
-      var a = !1;
-      if (r == -1 ? (a = !0, _("[KEYCLOAK] Refreshing token: forced refresh")) : (!e.tokenParsed || e.isTokenExpired(r)) && (a = !0, _("[KEYCLOAK] Refreshing token: token expired")), !a)
-        t.setSuccess(!1);
-      else {
-        var c = "grant_type=refresh_token&refresh_token=" + e.refreshToken, n = e.endpoints.token();
-        if (v.push(t), v.length == 1) {
-          var o = new XMLHttpRequest();
-          o.open("POST", n, !0), o.setRequestHeader("Content-type", "application/x-www-form-urlencoded"), o.withCredentials = !0, c += "&client_id=" + encodeURIComponent(e.clientId);
-          var l = (/* @__PURE__ */ new Date()).getTime();
-          o.onreadystatechange = function() {
-            if (o.readyState == 4)
-              if (o.status == 200) {
-                _("[KEYCLOAK] Token refreshed"), l = (l + (/* @__PURE__ */ new Date()).getTime()) / 2;
-                var f = JSON.parse(o.responseText);
-                C(f.access_token, f.refresh_token, f.id_token, l), e.onAuthRefreshSuccess && e.onAuthRefreshSuccess();
-                for (var d = v.pop(); d != null; d = v.pop())
-                  d.setSuccess(!0);
-              } else {
-                M("[KEYCLOAK] Failed to refresh token"), o.status == 400 && e.clearToken(), e.onAuthRefreshError && e.onAuthRefreshError();
-                for (var d = v.pop(); d != null; d = v.pop())
-                  d.setError("Failed to refresh token: An unexpected HTTP error occurred while attempting to refresh the token.");
-              }
-          }, o.send(c);
-        }
-      }
-    };
-    if (h.enable) {
-      var i = L();
-      i.then(function() {
-        s();
-      }).catch(function(a) {
-        t.setError(a);
-      });
-    } else
-      s();
-    return t.promise;
-  }, e.clearToken = function() {
-    e.token && (C(null, null, null), e.onAuthLogout && e.onAuthLogout(), e.loginRequired && e.login());
-  };
-  function b() {
-    if (typeof e.authServerUrl < "u")
-      return e.authServerUrl.charAt(e.authServerUrl.length - 1) == "/" ? e.authServerUrl + "realms/" + encodeURIComponent(e.realm) : e.authServerUrl + "/realms/" + encodeURIComponent(e.realm);
-  }
-  function re() {
-    return window.location.origin ? window.location.origin : window.location.protocol + "//" + window.location.hostname + (window.location.port ? ":" + window.location.port : "");
-  }
-  function T(r, t) {
-    var s = r.code, i = r.error, a = r.prompt, c = (/* @__PURE__ */ new Date()).getTime();
-    if (r.kc_action_status && e.onActionUpdate && e.onActionUpdate(r.kc_action_status, r.kc_action), i) {
-      if (a != "none")
-        if (r.error_description && r.error_description === "authentication_expired")
-          e.login(r.loginOptions);
-        else {
-          var n = { error: i, error_description: r.error_description };
-          e.onAuthError && e.onAuthError(n), t && t.setError(n);
-        }
-      else
-        t && t.setSuccess();
-      return;
-    } else e.flow != "standard" && (r.access_token || r.id_token) && d(r.access_token, null, r.id_token, !0);
-    if (e.flow != "implicit" && s) {
-      var o = "code=" + s + "&grant_type=authorization_code", l = e.endpoints.token(), f = new XMLHttpRequest();
-      f.open("POST", l, !0), f.setRequestHeader("Content-type", "application/x-www-form-urlencoded"), o += "&client_id=" + encodeURIComponent(e.clientId), o += "&redirect_uri=" + r.redirectUri, r.pkceCodeVerifier && (o += "&code_verifier=" + r.pkceCodeVerifier), f.withCredentials = !0, f.onreadystatechange = function() {
-        if (f.readyState == 4)
-          if (f.status == 200) {
-            var m = JSON.parse(f.responseText);
-            d(m.access_token, m.refresh_token, m.id_token, e.flow === "standard"), H();
-          } else
-            e.onAuthError && e.onAuthError(), t && t.setError();
-      }, f.send(o);
-    }
-    function d(m, w, S, y) {
-      c = (c + (/* @__PURE__ */ new Date()).getTime()) / 2, C(m, w, S, c), P && e.idTokenParsed && e.idTokenParsed.nonce != r.storedNonce ? (_("[KEYCLOAK] Invalid nonce, clearing token"), e.clearToken(), t && t.setError()) : y && (e.onAuthSuccess && e.onAuthSuccess(), t && t.setSuccess());
-    }
-  }
-  function te() {
-    var r = g(), t;
-    typeof u == "string" && (t = u);
-    function s(n) {
-      n ? e.endpoints = {
-        authorize: function() {
-          return n.authorization_endpoint;
-        },
-        token: function() {
-          return n.token_endpoint;
-        },
-        logout: function() {
-          if (!n.end_session_endpoint)
-            throw "Not supported by the OIDC server";
-          return n.end_session_endpoint;
-        },
-        checkSessionIframe: function() {
-          if (!n.check_session_iframe)
-            throw "Not supported by the OIDC server";
-          return n.check_session_iframe;
-        },
-        register: function() {
-          throw 'Redirection to "Register user" page not supported in standard OIDC mode';
-        },
-        userinfo: function() {
-          if (!n.userinfo_endpoint)
-            throw "Not supported by the OIDC server";
-          return n.userinfo_endpoint;
-        }
-      } : e.endpoints = {
-        authorize: function() {
-          return b() + "/protocol/openid-connect/auth";
-        },
-        token: function() {
-          return b() + "/protocol/openid-connect/token";
-        },
-        logout: function() {
-          return b() + "/protocol/openid-connect/logout";
-        },
-        checkSessionIframe: function() {
-          return b() + "/protocol/openid-connect/login-status-iframe.html";
-        },
-        thirdPartyCookiesIframe: function() {
-          return b() + "/protocol/openid-connect/3p-cookies/step1.html";
-        },
-        register: function() {
-          return b() + "/protocol/openid-connect/registrations";
-        },
-        userinfo: function() {
-          return b() + "/protocol/openid-connect/userinfo";
-        }
-      };
-    }
-    if (t) {
-      var i = new XMLHttpRequest();
-      i.open("GET", t, !0), i.setRequestHeader("Accept", "application/json"), i.onreadystatechange = function() {
-        if (i.readyState == 4)
-          if (i.status == 200 || F(i)) {
-            var n = JSON.parse(i.responseText);
-            e.authServerUrl = n["auth-server-url"], e.realm = n.realm, e.clientId = n.resource, s(null), r.setSuccess();
-          } else
-            r.setError();
-      }, i.send();
-    } else {
-      e.clientId = u.clientId;
-      var a = u.oidcProvider;
-      if (!a)
-        e.authServerUrl = u.url, e.realm = u.realm, s(null), r.setSuccess();
-      else if (typeof a == "string") {
-        var c;
-        a.charAt(a.length - 1) == "/" ? c = a + ".well-known/openid-configuration" : c = a + "/.well-known/openid-configuration";
-        var i = new XMLHttpRequest();
-        i.open("GET", c, !0), i.setRequestHeader("Accept", "application/json"), i.onreadystatechange = function() {
-          if (i.readyState == 4)
-            if (i.status == 200 || F(i)) {
-              var o = JSON.parse(i.responseText);
-              s(o), r.setSuccess();
-            } else
-              r.setError();
-        }, i.send();
-      } else
-        s(a), r.setSuccess();
-    }
-    return r.promise;
-  }
-  function F(r) {
-    return r.status == 0 && r.responseText && r.responseURL.startsWith("file:");
-  }
-  function C(r, t, s, i) {
-    if (e.tokenTimeoutHandle && (clearTimeout(e.tokenTimeoutHandle), e.tokenTimeoutHandle = null), t ? (e.refreshToken = t, e.refreshTokenParsed = V(t)) : (delete e.refreshToken, delete e.refreshTokenParsed), s ? (e.idToken = s, e.idTokenParsed = V(s)) : (delete e.idToken, delete e.idTokenParsed), r) {
-      if (e.token = r, e.tokenParsed = V(r), e.sessionId = e.tokenParsed.sid, e.authenticated = !0, e.subject = e.tokenParsed.sub, e.realmAccess = e.tokenParsed.realm_access, e.resourceAccess = e.tokenParsed.resource_access, i && (e.timeSkew = Math.floor(i / 1e3) - e.tokenParsed.iat), e.timeSkew != null && (_("[KEYCLOAK] Estimated time difference between browser and server is " + e.timeSkew + " seconds"), e.onTokenExpired)) {
-        var a = (e.tokenParsed.exp - (/* @__PURE__ */ new Date()).getTime() / 1e3 + e.timeSkew) * 1e3;
-        _("[KEYCLOAK] Token expires in " + Math.round(a / 1e3) + " s"), a <= 0 ? e.onTokenExpired() : e.tokenTimeoutHandle = setTimeout(e.onTokenExpired, a);
-      }
-    } else
-      delete e.token, delete e.tokenParsed, delete e.subject, delete e.realmAccess, delete e.resourceAccess, e.authenticated = !1;
-  }
-  function Y() {
-    if (typeof crypto > "u" || typeof crypto.randomUUID > "u")
-      throw new Error("Web Crypto API is not available.");
-    return crypto.randomUUID();
-  }
-  function E(r) {
-    var t = ne(r);
-    if (t) {
-      var s = I.get(t.state);
-      return s && (t.valid = !0, t.redirectUri = s.redirectUri, t.storedNonce = s.nonce, t.prompt = s.prompt, t.pkceCodeVerifier = s.pkceCodeVerifier, t.loginOptions = s.loginOptions), t;
-    }
-  }
-  function ne(r) {
-    var t;
-    switch (e.flow) {
-      case "standard":
-        t = ["code", "state", "session_state", "kc_action_status", "kc_action", "iss"];
-        break;
-      case "implicit":
-        t = ["access_token", "token_type", "id_token", "state", "session_state", "expires_in", "kc_action_status", "kc_action", "iss"];
-        break;
-      case "hybrid":
-        t = ["access_token", "token_type", "id_token", "code", "state", "session_state", "expires_in", "kc_action_status", "kc_action", "iss"];
-        break;
-    }
-    t.push("error"), t.push("error_description"), t.push("error_uri");
-    var s = r.indexOf("?"), i = r.indexOf("#"), a, c;
-    if (e.responseMode === "query" && s !== -1 ? (a = r.substring(0, s), c = G(r.substring(s + 1, i !== -1 ? i : r.length), t), c.paramsString !== "" && (a += "?" + c.paramsString), i !== -1 && (a += r.substring(i))) : e.responseMode === "fragment" && i !== -1 && (a = r.substring(0, i), c = G(r.substring(i + 1), t), c.paramsString !== "" && (a += "#" + c.paramsString)), c && c.oauthParams) {
-      if (e.flow === "standard" || e.flow === "hybrid") {
-        if ((c.oauthParams.code || c.oauthParams.error) && c.oauthParams.state)
-          return c.oauthParams.newUrl = a, c.oauthParams;
-      } else if (e.flow === "implicit" && (c.oauthParams.access_token || c.oauthParams.error) && c.oauthParams.state)
-        return c.oauthParams.newUrl = a, c.oauthParams;
-    }
-  }
-  function G(r, t) {
-    for (var s = r.split("&"), i = {
-      paramsString: "",
-      oauthParams: {}
-    }, a = 0; a < s.length; a++) {
-      var c = s[a].indexOf("="), n = s[a].slice(0, c);
-      t.indexOf(n) !== -1 ? i.oauthParams[n] = s[a].slice(c + 1) : (i.paramsString !== "" && (i.paramsString += "&"), i.paramsString += s[a]);
-    }
-    return i;
-  }
-  function g() {
-    var r = {
-      setSuccess: function(t) {
-        r.resolve(t);
-      },
-      setError: function(t) {
-        r.reject(t);
-      }
-    };
-    return r.promise = new Promise(function(t, s) {
-      r.resolve = t, r.reject = s;
-    }), r;
-  }
-  function oe(r, t, s) {
-    var i = null, a = new Promise(function(c, n) {
-      i = setTimeout(function() {
-        n({ error: s });
-      }, t);
-    });
-    return Promise.race([r, a]).finally(function() {
-      clearTimeout(i);
-    });
-  }
-  function K() {
-    var r = g();
-    if (!h.enable || h.iframe)
-      return r.setSuccess(), r.promise;
-    var t = document.createElement("iframe");
-    h.iframe = t, t.onload = function() {
-      var a = e.endpoints.authorize();
-      a.charAt(0) === "/" ? h.iframeOrigin = re() : h.iframeOrigin = a.substring(0, a.indexOf("/", 8)), r.setSuccess();
-    };
-    var s = e.endpoints.checkSessionIframe();
-    t.setAttribute("src", s), t.setAttribute("sandbox", "allow-storage-access-by-user-activation allow-scripts allow-same-origin"), t.setAttribute("title", "keycloak-session-iframe"), t.style.display = "none", document.body.appendChild(t);
-    var i = function(a) {
-      if (!(a.origin !== h.iframeOrigin || h.iframe.contentWindow !== a.source) && (a.data == "unchanged" || a.data == "changed" || a.data == "error")) {
-        a.data != "unchanged" && e.clearToken();
-        for (var c = h.callbackList.splice(0, h.callbackList.length), n = c.length - 1; n >= 0; --n) {
-          var o = c[n];
-          a.data == "error" ? o.setError() : o.setSuccess(a.data == "unchanged");
-        }
-      }
-    };
-    return window.addEventListener("message", i, !1), r.promise;
-  }
-  function H() {
-    h.enable && e.token && setTimeout(function() {
-      L().then(function(r) {
-        r && H();
-      });
-    }, h.interval * 1e3);
-  }
-  function L() {
-    var r = g();
-    if (h.iframe && h.iframeOrigin) {
-      var t = e.clientId + " " + (e.sessionId ? e.sessionId : "");
-      h.callbackList.push(r);
-      var s = h.iframeOrigin;
-      h.callbackList.length == 1 && h.iframe.contentWindow.postMessage(t, s);
-    } else
-      r.setSuccess();
-    return r.promise;
-  }
-  function ae() {
-    var r = g();
-    if ((h.enable || e.silentCheckSsoRedirectUri) && typeof e.endpoints.thirdPartyCookiesIframe == "function") {
-      var t = document.createElement("iframe");
-      t.setAttribute("src", e.endpoints.thirdPartyCookiesIframe()), t.setAttribute("sandbox", "allow-storage-access-by-user-activation allow-scripts allow-same-origin"), t.setAttribute("title", "keycloak-3p-check-iframe"), t.style.display = "none", document.body.appendChild(t);
-      var s = function(i) {
-        t.contentWindow === i.source && (i.data !== "supported" && i.data !== "unsupported" || (i.data === "unsupported" && (M(
-          `[KEYCLOAK] Your browser is blocking access to 3rd-party cookies, this means:
-
- - It is not possible to retrieve tokens without redirecting to the Keycloak server (a.k.a. no support for silent authentication).
- - It is not possible to automatically detect changes to the session status (such as the user logging out in another tab).
-
-For more information see: https://www.keycloak.org/securing-apps/javascript-adapter#_modern_browsers`
-        ), h.enable = !1, e.silentCheckSsoFallback && (e.silentCheckSsoRedirectUri = !1)), document.body.removeChild(t), window.removeEventListener("message", s), r.setSuccess()));
-      };
-      window.addEventListener("message", s, !1);
-    } else
-      r.setSuccess();
-    return oe(r.promise, e.messageReceiveTimeout, "Timeout when waiting for 3rd party check iframe message.");
-  }
-  function N(r) {
-    if (!r || r == "default")
-      return {
-        login: async function(n) {
-          return window.location.assign(await e.createLoginUrl(n)), g().promise;
-        },
-        logout: async function(n) {
-          if (((n == null ? void 0 : n.logoutMethod) ?? e.logoutMethod) === "GET") {
-            window.location.replace(e.createLogoutUrl(n));
-            return;
-          }
-          const l = document.createElement("form");
-          l.setAttribute("method", "POST"), l.setAttribute("action", e.createLogoutUrl(n)), l.style.display = "none";
-          const f = {
-            id_token_hint: e.idToken,
-            client_id: e.clientId,
-            post_logout_redirect_uri: p.redirectUri(n, !1)
-          };
-          for (const [d, m] of Object.entries(f)) {
-            const w = document.createElement("input");
-            w.setAttribute("type", "hidden"), w.setAttribute("name", d), w.setAttribute("value", m), l.appendChild(w);
-          }
-          document.body.appendChild(l), l.submit();
-        },
-        register: async function(n) {
-          return window.location.assign(await e.createRegisterUrl(n)), g().promise;
-        },
-        accountManagement: function() {
-          var n = e.createAccountUrl();
-          if (typeof n < "u")
-            window.location.href = n;
-          else
-            throw "Not supported by the OIDC server";
-          return g().promise;
-        },
-        redirectUri: function(n, o) {
-          return n && n.redirectUri ? n.redirectUri : e.redirectUri ? e.redirectUri : location.href;
-        }
-      };
-    if (r == "cordova") {
-      h.enable = !1;
-      var t = function(n, o, l) {
-        return window.cordova && window.cordova.InAppBrowser ? window.cordova.InAppBrowser.open(n, o, l) : window.open(n, o, l);
-      }, s = function(n) {
-        return n && n.cordovaOptions ? Object.keys(n.cordovaOptions).reduce(function(o, l) {
-          return o[l] = n.cordovaOptions[l], o;
-        }, {}) : {};
-      }, i = function(n) {
-        return Object.keys(n).reduce(function(o, l) {
-          return o.push(l + "=" + n[l]), o;
-        }, []).join(",");
-      }, a = function(n) {
-        var o = s(n);
-        return o.location = "no", n && n.prompt == "none" && (o.hidden = "yes"), i(o);
-      }, c = function() {
-        return e.redirectUri || "http://localhost";
-      };
-      return {
-        login: async function(n) {
-          var o = g(), l = a(n), f = await e.createLoginUrl(n), d = t(f, "_blank", l), m = !1, w = !1, S = function() {
-            w = !0, d.close();
-          };
-          return d.addEventListener("loadstart", function(y) {
-            if (y.url.indexOf(c()) == 0) {
-              var z = E(y.url);
-              T(z, o), S(), m = !0;
-            }
-          }), d.addEventListener("loaderror", function(y) {
-            if (!m)
-              if (y.url.indexOf(c()) == 0) {
-                var z = E(y.url);
-                T(z, o), S(), m = !0;
-              } else
-                o.setError(), S();
-          }), d.addEventListener("exit", function(y) {
-            w || o.setError({
-              reason: "closed_by_user"
-            });
-          }), o.promise;
-        },
-        logout: function(n) {
-          var o = g(), l = e.createLogoutUrl(n), f = t(l, "_blank", "location=no,hidden=yes,clearcache=yes"), d;
-          return f.addEventListener("loadstart", function(m) {
-            m.url.indexOf(c()) == 0 && f.close();
-          }), f.addEventListener("loaderror", function(m) {
-            m.url.indexOf(c()) == 0 || (d = !0), f.close();
-          }), f.addEventListener("exit", function(m) {
-            d ? o.setError() : (e.clearToken(), o.setSuccess());
-          }), o.promise;
-        },
-        register: async function(n) {
-          var o = g(), l = await e.createRegisterUrl(), f = a(n), d = t(l, "_blank", f);
-          return d.addEventListener("loadstart", function(m) {
-            if (m.url.indexOf(c()) == 0) {
-              d.close();
-              var w = E(m.url);
-              T(w, o);
-            }
-          }), o.promise;
-        },
-        accountManagement: function() {
-          var n = e.createAccountUrl();
-          if (typeof n < "u") {
-            var o = t(n, "_blank", "location=no");
-            o.addEventListener("loadstart", function(l) {
-              l.url.indexOf(c()) == 0 && o.close();
-            });
-          } else
-            throw "Not supported by the OIDC server";
-        },
-        redirectUri: function(n) {
-          return c();
-        }
-      };
-    }
-    if (r == "cordova-native")
-      return h.enable = !1, {
-        login: async function(n) {
-          var o = g(), l = await e.createLoginUrl(n);
-          return universalLinks.subscribe("keycloak", function(f) {
-            universalLinks.unsubscribe("keycloak"), window.cordova.plugins.browsertab.close();
-            var d = E(f.url);
-            T(d, o);
-          }), window.cordova.plugins.browsertab.openUrl(l), o.promise;
-        },
-        logout: function(n) {
-          var o = g(), l = e.createLogoutUrl(n);
-          return universalLinks.subscribe("keycloak", function(f) {
-            universalLinks.unsubscribe("keycloak"), window.cordova.plugins.browsertab.close(), e.clearToken(), o.setSuccess();
-          }), window.cordova.plugins.browsertab.openUrl(l), o.promise;
-        },
-        register: async function(n) {
-          var o = g(), l = await e.createRegisterUrl(n);
-          return universalLinks.subscribe("keycloak", function(f) {
-            universalLinks.unsubscribe("keycloak"), window.cordova.plugins.browsertab.close();
-            var d = E(f.url);
-            T(d, o);
-          }), window.cordova.plugins.browsertab.openUrl(l), o.promise;
-        },
-        accountManagement: function() {
-          var n = e.createAccountUrl();
-          if (typeof n < "u")
-            window.cordova.plugins.browsertab.openUrl(n);
-          else
-            throw "Not supported by the OIDC server";
-        },
-        redirectUri: function(n) {
-          return n && n.redirectUri ? n.redirectUri : e.redirectUri ? e.redirectUri : "http://localhost";
-        }
-      };
-    throw "invalid adapter type: " + r;
-  }
-  const A = "kc-callback-";
-  var D = function() {
-    if (!(this instanceof D))
-      return new D();
-    localStorage.setItem("kc-test", "test"), localStorage.removeItem("kc-test");
-    var r = this;
-    function t() {
-      const c = Date.now();
-      for (const [n, o] of i()) {
-        const l = a(o);
-        (l === null || l < c) && localStorage.removeItem(n);
-      }
-    }
-    function s() {
-      for (const [c] of i())
-        localStorage.removeItem(c);
-    }
-    function i() {
-      return Object.entries(localStorage).filter(([c]) => c.startsWith(A));
-    }
-    function a(c) {
-      let n;
-      try {
-        n = JSON.parse(c);
-      } catch {
-        return null;
-      }
-      return O(n) && "expires" in n && typeof n.expires == "number" ? n.expires : null;
-    }
-    r.get = function(c) {
-      if (c) {
-        var n = A + c, o = localStorage.getItem(n);
-        return o && (localStorage.removeItem(n), o = JSON.parse(o)), t(), o;
-      }
-    }, r.add = function(c) {
-      t();
-      const n = A + c.state, o = JSON.stringify({
-        ...c,
-        // Set the expiry time to 1 hour from now.
-        expires: Date.now() + 60 * 60 * 1e3
-      });
-      try {
-        localStorage.setItem(n, o);
-      } catch {
-        s(), localStorage.setItem(n, o);
-      }
-    };
-  }, j = function() {
-    if (!(this instanceof j))
-      return new j();
-    var r = this;
-    r.get = function(a) {
-      if (a) {
-        var c = s(A + a);
-        if (i(A + a, "", t(-100)), c)
-          return JSON.parse(c);
-      }
-    }, r.add = function(a) {
-      i(A + a.state, JSON.stringify(a), t(60));
-    }, r.removeItem = function(a) {
-      i(a, "", t(-100));
-    };
-    var t = function(a) {
-      var c = /* @__PURE__ */ new Date();
-      return c.setTime(c.getTime() + a * 60 * 1e3), c;
-    }, s = function(a) {
-      for (var c = a + "=", n = document.cookie.split(";"), o = 0; o < n.length; o++) {
-        for (var l = n[o]; l.charAt(0) == " "; )
-          l = l.substring(1);
-        if (l.indexOf(c) == 0)
-          return l.substring(c.length, l.length);
-      }
-      return "";
-    }, i = function(a, c, n) {
-      var o = a + "=" + c + "; expires=" + n.toUTCString() + "; ";
-      document.cookie = o;
-    };
-  };
-  function ie() {
-    try {
-      return new D();
-    } catch {
-    }
-    return new j();
-  }
-  function W(r) {
-    return function() {
-      e.enableLogging && r.apply(console, Array.prototype.slice.call(arguments));
-    };
-  }
-}
-function ce(u) {
-  const e = String.fromCodePoint(...u);
-  return btoa(e);
-}
-async function le(u) {
-  const p = new TextEncoder().encode(u);
-  if (typeof crypto > "u" || typeof crypto.subtle > "u")
-    throw new Error("Web Crypto API is not available.");
-  return await crypto.subtle.digest("SHA-256", p);
-}
-function V(u) {
-  const [e, p] = u.split(".");
-  if (typeof p != "string")
-    throw new Error("Unable to decode token, payload not found.");
-  let v;
-  try {
-    v = ue(p);
-  } catch (I) {
-    throw new Error("Unable to decode token, payload is not a valid Base64URL value.", { cause: I });
-  }
-  try {
-    return JSON.parse(v);
-  } catch (I) {
-    throw new Error("Unable to decode token, payload is not a valid JSON value.", { cause: I });
-  }
-}
-function ue(u) {
-  let e = u.replaceAll("-", "+").replaceAll("_", "/");
-  switch (e.length % 4) {
-    case 0:
-      break;
-    case 2:
-      e += "==";
-      break;
-    case 3:
-      e += "=";
-      break;
-    default:
-      throw new Error("Input is not of the correct length.");
-  }
-  try {
-    return de(e);
-  } catch {
-    return atob(e);
-  }
-}
-function de(u) {
-  return decodeURIComponent(atob(u).replace(/(.)/g, (e, p) => {
-    let v = p.charCodeAt(0).toString(16).toUpperCase();
-    return v.length < 2 && (v = "0" + v), "%" + v;
-  }));
-}
-function O(u) {
-  return typeof u == "object" && u !== null;
-}
-let k = null, x = null;
-function fe(u, e = !0) {
-  return x ? (console.log("Keycloak already initialized, returning from cache"), x) : (k || (k = new q({
-    url: u.url,
-    realm: u.realm,
-    clientId: u.clientId
-  })), x = k.init({
-    onLoad: e ? "check-sso" : "login-required",
-    checkLoginIframe: !1
-    //silentCheckSsoRedirectUri: `${window.location.origin}/silent-check-sso.html`, // Ensure this file is set up
-  }).then((p) => p).catch((p) => (console.error("Failed to initialize Keycloak:", p), !1)), x);
-}
-function he() {
-  return k != null && k.authenticated && (k != null && k.idTokenParsed) ? {
-    fullname: k.idTokenParsed.name,
-    email: k.idTokenParsed.email,
-    lastname: k.idTokenParsed.family_name,
-    firstname: k.idTokenParsed.given_name,
-    username: k.idTokenParsed.preferred_username,
-    background: "grey",
-    // Optional custom value
-    token: k.token,
-    sub: k.idTokenParsed.sub
-  } : {};
-}
-function pe() {
-  if (k)
-    k.login();
-  else
-    throw new Error("Keycloak is not initialized.");
-}
-function me() {
-  if (k)
-    k.logout();
-  else
-    throw new Error("Keycloak is not initialized.");
-}
-function ke() {
-  return !!(k != null && k.authenticated);
-}
-async function ge(u) {
-  try {
-    const e = await fetch(u, { method: "HEAD", mode: "no-cors" });
-    return e.ok || e.type === "opaque";
-  } catch {
-    return !1;
-  }
-}
-const Ue = class {
-  constructor(u) {
-    X(this, u), this.keycloak = J(this, "keycloak", 7), this.auth = J(this, "auth", 7), this.handleLogin = async () => {
-      if (!this.authenticated)
-        try {
-          await pe();
-        } catch (e) {
-          R.show(e.message, "error");
-        }
-    }, this.handleLogout = async () => {
-      try {
-        await me();
-      } catch (e) {
-        R.show(e.message, "error");
-      }
-      this.authenticated = !1, this.user = null;
-    }, this.keycloakUrl = void 0, this.keycloakRealm = void 0, this.keycloakClientId = void 0, this.authenticated = !1, this.user = null, this.serverAvailable = !1;
-  }
-  /**
-   * Lifecycle method that runs when the component is about to load.
-   * It initializes authentication by calling the `initAuth` method.
-   */
-  async componentWillLoad() {
-    if (!this.keycloakUrl || !this.keycloakRealm || !this.keycloakClientId) {
-      console.error("Keycloak configuration props are missing.");
-      return;
-    }
-    if (this.serverAvailable = await ge(`${this.keycloakUrl}/realms/${this.keycloakRealm}`), !this.serverAvailable) {
-      R.show("Keycloak server is unavailable.", "error");
-      return;
-    }
-    await this.initAuth();
-  }
-  /**
-   * Initializes the Keycloak authentication by configuring Keycloak with the provided props.
-   * Sets the `authenticated` state and `user` data if the user is authenticated.
-   * Emits `authStatusChanged` event with the authentication status.
-   */
-  async initAuth() {
-    try {
-      const u = await fe({
-        url: this.keycloakUrl,
-        realm: this.keycloakRealm,
-        clientId: this.keycloakClientId
-      }, !0);
-      this.keycloak.emit({
-        init: u
-      }), ke() && (this.user = he(), this.authenticated = !0, this.auth.emit({
-        authenticated: this.authenticated,
-        user: this.user
-      }));
-    } catch (u) {
-      R.show(u.message, "error");
-    }
-  }
-  render() {
-    return U("div", { key: "041846174aaad541acce03588a087793d10daa1e", class: "block" }, !this.authenticated && U("eds-button", { key: "360a84ec79a15c9293e3898b77df649c469d9529", label: "Login", intent: "primary", "extra-class": "text-default", "aria-label": "Login", triggerClick: this.handleLogin.bind(this) }));
-  }
-}, ve = ".splash-overlay{position:fixed;top:0;left:0;width:100vw;height:100vh;z-index:9999999;background-color:var(--grey-200);display:flex;flex-direction:column;align-items:center;justify-content:center}.logo-container{width:200px;height:200px;margin-bottom:1rem}.content-container{position:relative;width:5rem;height:5rem;display:flex;align-items:center;justify-content:center}", we = ve, ye = class {
-  constructor(u) {
-    X(this, u), this.splash = J(this, "splash", 7), this.inverse = !1, this.initPromise = void 0, this.isVisible = !0;
-  }
-  // When the component loads, check if there is a promise.
-  componentWillLoad() {
-    this.initPromise && this.handleInitPromise(this.initPromise);
-  }
-  // Watch for changes on initPromise.
-  async watchInitPromise(u) {
-    u && this.handleInitPromise(u);
-  }
-  async handleInitPromise(u) {
-    try {
-      await u, this.hideSplash();
-    } catch (e) {
-      this.splash.emit({ type: "error", message: e.message || "Unknown error" });
-    }
-  }
-  handleHideSplash() {
-    this.hideSplash();
-  }
-  hideSplash() {
-    this.isVisible = !1, this.splash.emit({ type: "hidden", message: "Splash screen hidden successfully" });
-  }
-  render() {
-    return this.isVisible ? U(se, null, U("div", { class: "splash-overlay", style: { background: this.inverse ? "black" : "var(--grey-200)" } }, U("div", { class: "logo-container" }, this.inverse ? U("eds-logo", { orientation: "vertical", type: "color-white" }) : U("eds-logo", { orientation: "vertical", type: "color" })), U("div", { class: "content-container" }, U("eds-spinner", { size: "1rem", thickness: "3px", "border-color": "var(--grey-400)", "bottom-color": "var(--grey-900)", background: "none", fullscreen: !1 })))) : null;
-  }
-  static get watchers() {
-    return {
-      initPromise: ["watchInitPromise"]
-    };
-  }
-};
-ye.style = we;
-export {
-  Ue as eds_login,
-  ye as eds_splash_screen
-};