@forgerock/oidc-client 1.2.0 → 1.3.0

package/dist/src/lib/oidc.api.js

@@ -0,0 +1,295 @@
+/*
+ * Copyright (c) 2025 Ping Identity Corporation. All rights reserved.
+ *
+ * This software may be modified and distributed under the terms
+ * of the MIT license. See the LICENSE file for details.
+ */
+import { createApi, fetchBaseQuery, } from '@reduxjs/toolkit/query';
+import { transformError } from './oidc.api.utils.js';
+import { iFrameManager } from '@forgerock/iframe-manager';
+import { initQuery, } from '@forgerock/sdk-request-middleware';
+export const oidcApi = createApi({
+    reducerPath: 'oidc',
+    baseQuery: fetchBaseQuery(),
+    endpoints: (builder) => ({
+        authorizeFetch: builder.mutation({
+            queryFn: async ({ url }, api, _, baseQuery) => {
+                const { requestMiddleware, logger } = api.extra;
+                const request = {
+                    url,
+                    method: 'POST',
+                    credentials: 'include',
+                    headers: {
+                        Accept: 'application/json',
+                    },
+                };
+                logger.debug('OIDC authorize API request', request);
+                const response = await initQuery(request, 'authorize')
+                    .applyMiddleware(requestMiddleware)
+                    .applyQuery(async (req) => await baseQuery(req));
+                if (response.error) {
+                    const responseError = response.error;
+                    // If the details field is present in data, use it to create a more specific error response
+                    if (responseError.data &&
+                        typeof responseError.data === 'object' &&
+                        'details' in responseError.data &&
+                        Array.isArray(responseError.data.details)) {
+                        logger.debug('Error in authorize response', responseError);
+                        const details = responseError.data.details[0];
+                        response.error = {
+                            status: responseError.status,
+                            statusText: 'AUTHORIZE_ERROR',
+                            data: {
+                                error: details.code,
+                                error_description: details.message,
+                                type: 'auth_error',
+                            },
+                        };
+                        return response;
+                    }
+                    logger.error('Error in OAuth configuration', responseError);
+                    // Since this is likely a configuration issue, avoid providing a redirect URL
+                    response.error = {
+                        status: responseError.status,
+                        statusText: 'CONFIGURATION_ERROR',
+                        data: {
+                            error: 'CONFIGURATION_ERROR',
+                            error_description: 'Configuration error. Please check your OAuth configuration, like clientId or allowed redirect URLs.',
+                            type: 'network_error',
+                        },
+                    };
+                    return response;
+                }
+                logger.debug('OIDC Authorize fetch API response', response);
+                return response;
+            },
+        }),
+        authorizeIframe: builder.mutation({
+            queryFn: async ({ url }, api) => {
+                const { requestMiddleware, logger } = api.extra;
+                const request = {
+                    url,
+                    method: 'POST',
+                    credentials: 'include',
+                    headers: {
+                        Accept: 'application/json',
+                    },
+                };
+                logger.debug('OIDC authorize API request', request);
+                const response = await initQuery(request, 'authorize')
+                    .applyMiddleware(requestMiddleware)
+                    .applyQuery(async (req) => {
+                    try {
+                        const res = await iFrameManager().getParamsByRedirect({
+                            url: req.url,
+                            /***
+                             * https://datatracker.ietf.org/doc/html/rfc6749#section-4.1.2
+                             * The client MUST ignore unrecognized response parameters.
+                             */
+                            successParams: ['code', 'state'],
+                            errorParams: ['error', 'error_description'],
+                            timeout: req.timeout || 3000,
+                        });
+                        return { data: res };
+                    }
+                    catch (error) {
+                        return {
+                            error: {
+                                status: 400,
+                                message: 'Unknown error occurred calling authorize endpoint',
+                                data: error,
+                            },
+                        };
+                    }
+                });
+                if ('error' in response) {
+                    logger.error('Received authorization code', response);
+                    return {
+                        error: {
+                            status: 400,
+                            statusText: 'CONFIGURATION_ERROR',
+                            data: {
+                                error: 'CONFIGURATION_ERROR',
+                                error_description: 'Configuration error. Please check your OAuth configuration, like clientId or allowed redirect URLs.',
+                                type: 'network_error',
+                            },
+                        },
+                    };
+                }
+                const data = response.data;
+                // TODO: Consider refactoring iframe manager to reject when an error occurs
+                if ('error' in data) {
+                    logger.debug('Error in authorize response', response);
+                    return {
+                        error: {
+                            status: 400,
+                            statusText: 'AUTHORIZE_ERROR',
+                            data: {
+                                error: data.error || 'Unknown_Error',
+                                error_description: data.error_description || 'An unknown error occurred during authorization',
+                                type: 'auth_error',
+                            },
+                        },
+                    };
+                }
+                return { data: response.data };
+            },
+        }),
+        endSession: builder.mutation({
+            queryFn: async ({ idToken, endpoint }, api, _, baseQuery) => {
+                const { requestMiddleware, logger } = api.extra;
+                const url = new URL(endpoint);
+                url.searchParams.append('id_token_hint', idToken);
+                const request = {
+                    url: url.toString(),
+                    method: 'GET',
+                    credentials: 'include',
+                    headers: {
+                        Accept: 'application/json',
+                    },
+                };
+                logger.debug('OIDC endSession API request', request);
+                const response = await initQuery(request, 'endSession')
+                    .applyMiddleware(requestMiddleware)
+                    .applyQuery(async (req) => await baseQuery(req));
+                if (response.error) {
+                    let message = 'An error occurred while trying to end the session';
+                    if (response.error.status === 400) {
+                        message = 'Bad request to end session endpoint';
+                    }
+                    else if (response.error.status === 401) {
+                        message = 'Unauthorized request to end session endpoint';
+                    }
+                    else if (response.error.status === 403) {
+                        message = 'Forbidden request to end session endpoint';
+                    }
+                    logger.error('End Session API error', message);
+                    response.error.data = transformError('End Session Error', message, response.error.status);
+                    return response;
+                }
+                logger.debug('OIDC endSession API response', response);
+                return response;
+            },
+        }),
+        exchange: builder.mutation({
+            queryFn: async ({ code, config, endpoint, verifier }, api, _, baseQuery) => {
+                const { requestMiddleware, logger } = api.extra;
+                const { clientId, redirectUri } = config;
+                const body = new URLSearchParams({
+                    grant_type: 'authorization_code',
+                    code,
+                    client_id: clientId,
+                    redirect_uri: redirectUri,
+                });
+                if (verifier) {
+                    body.append('code_verifier', verifier);
+                }
+                const request = {
+                    url: endpoint,
+                    method: 'POST',
+                    headers: {
+                        Accept: 'application/json',
+                        'Content-Type': 'application/x-www-form-urlencoded',
+                    },
+                    body,
+                };
+                logger.debug('OIDC tokenExchange API request', request);
+                const response = await initQuery(request, 'tokenExchange')
+                    .applyMiddleware(requestMiddleware)
+                    .applyQuery(async (req) => await baseQuery(req));
+                if (response.error) {
+                    let message = 'An error occurred while exchanging the authorization code';
+                    if (response.error.status === 400) {
+                        message = 'Bad request to token exchange endpoint';
+                    }
+                    else if (response.error.status === 401) {
+                        message = 'Unauthorized request to token exchange endpoint';
+                    }
+                    else if (response.error.status === 403) {
+                        message = 'Forbidden request to token exchange endpoint';
+                    }
+                    logger.error('Token Exchange API error', message);
+                    response.error.data = transformError('Token Exchange Error', message, response.error.status);
+                    return response;
+                }
+                logger.debug('OIDC tokenExchange API response', response);
+                return response;
+            },
+        }),
+        revoke: builder.mutation({
+            queryFn: async ({ accessToken, clientId, endpoint }, api, _, baseQuery) => {
+                const { requestMiddleware, logger } = api.extra;
+                const body = new URLSearchParams({
+                    ...(clientId ? { client_id: clientId } : {}),
+                    token: accessToken,
+                });
+                const request = {
+                    url: endpoint,
+                    method: 'POST',
+                    credentials: 'include',
+                    headers: {
+                        'Content-Type': 'application/x-www-form-urlencoded',
+                    },
+                    body,
+                };
+                logger.debug('OIDC revoke API request', request);
+                const response = await initQuery(request, 'revoke')
+                    .applyMiddleware(requestMiddleware)
+                    .applyQuery(async (req) => await baseQuery(req));
+                if (response.error) {
+                    let message = 'An error occurred while revoking the token';
+                    if (response.error.status === 400) {
+                        message = 'Bad request to revoke endpoint';
+                    }
+                    else if (response.error.status === 401) {
+                        message = 'Unauthorized request to revoke endpoint';
+                    }
+                    else if (response.error.status === 403) {
+                        message = 'Forbidden request to revoke endpoint';
+                    }
+                    logger.error('Token Revoke API error', message);
+                    response.error.data = transformError('Token Revoke Error', message, response.error.status);
+                    return response;
+                }
+                logger.debug('OIDC revoke API response', response);
+                return response;
+            },
+        }),
+        userInfo: builder.mutation({
+            queryFn: async ({ accessToken, endpoint }, api, _, baseQuery) => {
+                const { requestMiddleware, logger } = api.extra;
+                const request = {
+                    url: endpoint,
+                    method: 'GET',
+                    credentials: 'include',
+                    headers: {
+                        Accept: 'application/json',
+                        Authorization: `Bearer ${accessToken}`,
+                    },
+                };
+                logger.debug('OIDC userInfo API request', request);
+                const response = await initQuery(request, 'userInfo')
+                    .applyMiddleware(requestMiddleware)
+                    .applyQuery(async (req) => await baseQuery(req));
+                let message = 'An error occurred while fetching user info';
+                if (response.error) {
+                    if (response.error.status === 400) {
+                        message = 'Bad request to user info endpoint';
+                    }
+                    else if (response.error.status === 401) {
+                        message = 'Unauthorized request to user info endpoint';
+                    }
+                    else if (response.error.status === 403) {
+                        message = 'Forbidden request to user info endpoint';
+                    }
+                    logger.error('User Info API error', message);
+                    response.error.data = transformError('User Info Error', message, response.error.status);
+                    return response;
+                }
+                logger.debug('OIDC userInfo API response', response);
+                return response;
+            },
+        }),
+    }),
+});
+//# sourceMappingURL=oidc.api.js.map

package/dist/src/lib/oidc.api.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"oidc.api.js","sourceRoot":"","sources":["../../../src/lib/oidc.api.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,EACL,SAAS,EACT,cAAc,GAGf,MAAM,wBAAwB,CAAC;AAEhC,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AACrD,OAAO,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAC;AAC1D,OAAO,EACL,SAAS,GAGV,MAAM,mCAAmC,CAAC;AAY3C,MAAM,CAAC,MAAM,OAAO,GAAG,SAAS,CAAC;IAC/B,WAAW,EAAE,MAAM;IACnB,SAAS,EAAE,cAAc,EAAE;IAC3B,SAAS,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;QACvB,cAAc,EAAE,OAAO,CAAC,QAAQ,CAA4C;YAC1E,OAAO,EAAE,KAAK,EAAE,EAAE,GAAG,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE,SAAS,EAAE,EAAE;gBAC5C,MAAM,EAAE,iBAAiB,EAAE,MAAM,EAAE,GAAG,GAAG,CAAC,KAAe,CAAC;gBAE1D,MAAM,OAAO,GAAc;oBACzB,GAAG;oBACH,MAAM,EAAE,MAAM;oBACd,WAAW,EAAE,SAAS;oBACtB,OAAO,EAAE;wBACP,MAAM,EAAE,kBAAkB;qBAC3B;iBACF,CAAC;gBAEF,MAAM,CAAC,KAAK,CAAC,4BAA4B,EAAE,OAAO,CAAC,CAAC;gBAEpD,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,OAAO,EAAE,WAAW,CAAC;qBACnD,eAAe,CAAC,iBAAiB,CAAC;qBAClC,UAAU,CAAC,KAAK,EAAE,GAAc,EAAE,EAAE,CAAC,MAAM,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC;gBAE9D,IAAI,QAAQ,CAAC,KAAK,EAAE,CAAC;oBACnB,MAAM,aAAa,GAAG,QAAQ,CAAC,KAAK,CAAC;oBAErC,2FAA2F;oBAC3F,IACE,aAAa,CAAC,IAAI;wBAClB,OAAO,aAAa,CAAC,IAAI,KAAK,QAAQ;wBACtC,SAAS,IAAI,aAAa,CAAC,IAAI;wBAC/B,KAAK,CAAC,OAAO,CAAC,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,EACzC,CAAC;wBACD,MAAM,CAAC,KAAK,CAAC,6BAA6B,EAAE,aAAa,CAAC,CAAC;wBAE3D,MAAM,OAAO,GAAG,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAG3C,CAAC;wBAEF,QAAQ,CAAC,KAAK,GAAG;4BACf,MAAM,EAAE,aAAa,CAAC,MAAM;4BAC5B,UAAU,EAAE,iBAAiB;4BAC7B,IAAI,EAAE;gCACJ,KAAK,EAAE,OAAO,CAAC,IAAI;gCACnB,iBAAiB,EAAE,OAAO,CAAC,OAAO;gCAClC,IAAI,EAAE,YAAY;6BACnB;yBACqB,CAAC;wBACzB,OAAO,QAAQ,CAAC;oBAClB,CAAC;oBAED,MAAM,CAAC,KAAK,CAAC,8BAA8B,EAAE,aAAa,CAAC,CAAC;oBAE5D,6EAA6E;oBAC7E,QAAQ,CAAC,KAAK,GAAG;wBACf,MAAM,EAAE,aAAa,CAAC,MAAM;wBAC5B,UAAU,EAAE,qBAAqB;wBACjC,IAAI,EAAE;4BACJ,KAAK,EAAE,qBAAqB;4BAC5B,iBAAiB,EACf,qGAAqG;4BACvG,IAAI,EAAE,eAAe;yBACtB;qBACqB,CAAC;oBACzB,OAAO,QAAQ,CAAC;gBAClB,CAAC;gBAED,MAAM,CAAC,KAAK,CAAC,mCAAmC,EAAE,QAAQ,CAAC,CAAC;gBAE5D,OAAO,QAA8C,CAAC;YACxD,CAAC;SACF,CAAC;QACF,eAAe,EAAE,OAAO,CAAC,QAAQ,CAAwC;YACvE,OAAO,EAAE,KAAK,EAAE,EAAE,GAAG,EAAE,EAAE,GAAG,EAAE,EAAE;gBAC9B,MAAM,EAAE,iBAAiB,EAAE,MAAM,EAAE,GAAG,GAAG,CAAC,KAAe,CAAC;gBAE1D,MAAM,OAAO,GAAc;oBACzB,GAAG;oBACH,MAAM,EAAE,MAAM;oBACd,WAAW,EAAE,SAAS;oBACtB,OAAO,EAAE;wBACP,MAAM,EAAE,kBAAkB;qBAC3B;iBACF,CAAC;gBAEF,MAAM,CAAC,KAAK,CAAC,4BAA4B,EAAE,OAAO,CAAC,CAAC;gBAEpD,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,OAAO,EAAE,WAAW,CAAC;qBACnD,eAAe,CAAC,iBAAiB,CAAC;qBAClC,UAAU,CAAC,KAAK,EAAE,GAAc,EAAE,EAAE;oBACnC,IAAI,CAAC;wBACH,MAAM,GAAG,GAAG,MAAM,aAAa,EAAE,CAAC,mBAAmB,CAAC;4BACpD,GAAG,EAAE,GAAG,CAAC,GAAG;4BACZ;;;+BAGG;4BACH,aAAa,EAAE,CAAC,MAAM,EAAE,OAAO,CAAC;4BAChC,WAAW,EAAE,CAAC,OAAO,EAAE,mBAAmB,CAAC;4BAC3C,OAAO,EAAE,GAAG,CAAC,OAAO,IAAI,IAAI;yBAC7B,CAAC,CAAC;wBACH,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC;oBACvB,CAAC;oBAAC,OAAO,KAAK,EAAE,CAAC;wBACf,OAAO;4BACL,KAAK,EAAE;gCACL,MAAM,EAAE,GAAG;gCACX,OAAO,EAAE,mDAAmD;gCAC5D,IAAI,EAAE,KAAK;6BACZ;yBACF,CAAC;oBACJ,CAAC;gBACH,CAAC,CAAC,CAAC;gBAEL,IAAI,OAAO,IAAI,QAAQ,EAAE,CAAC;oBACxB,MAAM,CAAC,KAAK,CAAC,6BAA6B,EAAE,QAAQ,CAAC,CAAC;oBACtD,OAAO;wBACL,KAAK,EAAE;4BACL,MAAM,EAAE,GAAG;4BACX,UAAU,EAAE,qBAAqB;4BACjC,IAAI,EAAE;gCACJ,KAAK,EAAE,qBAAqB;gCAC5B,iBAAiB,EACf,qGAAqG;gCACvG,IAAI,EAAE,eAAe;6BACtB;yBACF;qBACF,CAAC;gBACJ,CAAC;gBAED,MAAM,IAAI,GAAG,QAAQ,CAAC,IAKrB,CAAC;gBAEF,2EAA2E;gBAC3E,IAAI,OAAO,IAAI,IAAI,EAAE,CAAC;oBACpB,MAAM,CAAC,KAAK,CAAC,6BAA6B,EAAE,QAAQ,CAAC,CAAC;oBACtD,OAAO;wBACL,KAAK,EAAE;4BACL,MAAM,EAAE,GAAG;4BACX,UAAU,EAAE,iBAAiB;4BAC7B,IAAI,EAAE;gCACJ,KAAK,EAAE,IAAI,CAAC,KAAK,IAAI,eAAe;gCACpC,iBAAiB,EACf,IAAI,CAAC,iBAAiB,IAAI,gDAAgD;gCAC5E,IAAI,EAAE,YAAY;6BACnB;yBACF;qBACF,CAAC;gBACJ,CAAC;gBAED,OAAO,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAoC,CAAC;YACnE,CAAC;SACF,CAAC;QACF,UAAU,EAAE,OAAO,CAAC,QAAQ,CAA8C;YACxE,OAAO,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE,SAAS,EAAE,EAAE;gBAC1D,MAAM,EAAE,iBAAiB,EAAE,MAAM,EAAE,GAAG,GAAG,CAAC,KAAe,CAAC;gBAE1D,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC;gBAC9B,GAAG,CAAC,YAAY,CAAC,MAAM,CAAC,eAAe,EAAE,OAAO,CAAC,CAAC;gBAElD,MAAM,OAAO,GAAc;oBACzB,GAAG,EAAE,GAAG,CAAC,QAAQ,EAAE;oBACnB,MAAM,EAAE,KAAK;oBACb,WAAW,EAAE,SAAS;oBACtB,OAAO,EAAE;wBACP,MAAM,EAAE,kBAAkB;qBAC3B;iBACF,CAAC;gBAEF,MAAM,CAAC,KAAK,CAAC,6BAA6B,EAAE,OAAO,CAAC,CAAC;gBAErD,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,OAAO,EAAE,YAAY,CAAC;qBACpD,eAAe,CAAC,iBAAiB,CAAC;qBAClC,UAAU,CAAC,KAAK,EAAE,GAAc,EAAE,EAAE,CAAC,MAAM,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC;gBAE9D,IAAI,QAAQ,CAAC,KAAK,EAAE,CAAC;oBACnB,IAAI,OAAO,GAAG,mDAAmD,CAAC;oBAElE,IAAI,QAAQ,CAAC,KAAK,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;wBAClC,OAAO,GAAG,qCAAqC,CAAC;oBAClD,CAAC;yBAAM,IAAI,QAAQ,CAAC,KAAK,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;wBACzC,OAAO,GAAG,8CAA8C,CAAC;oBAC3D,CAAC;yBAAM,IAAI,QAAQ,CAAC,KAAK,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;wBACzC,OAAO,GAAG,2CAA2C,CAAC;oBACxD,CAAC;oBAED,MAAM,CAAC,KAAK,CAAC,uBAAuB,EAAE,OAAO,CAAC,CAAC;oBAE/C,QAAQ,CAAC,KAAK,CAAC,IAAI,GAAG,cAAc,CAAC,mBAAmB,EAAE,OAAO,EAAE,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;oBAC1F,OAAO,QAAQ,CAAC;gBAClB,CAAC;gBAED,MAAM,CAAC,KAAK,CAAC,8BAA8B,EAAE,QAAQ,CAAC,CAAC;gBAEvD,OAAO,QAA0B,CAAC;YACpC,CAAC;SACF,CAAC;QACF,QAAQ,EAAE,OAAO,CAAC,QAAQ,CAQxB;YACA,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE,SAAS,EAAE,EAAE;gBACzE,MAAM,EAAE,iBAAiB,EAAE,MAAM,EAAE,GAAG,GAAG,CAAC,KAAe,CAAC;gBAE1D,MAAM,EAAE,QAAQ,EAAE,WAAW,EAAE,GAAG,MAAM,CAAC;gBACzC,MAAM,IAAI,GAAG,IAAI,eAAe,CAAC;oBAC/B,UAAU,EAAE,oBAAoB;oBAChC,IAAI;oBACJ,SAAS,EAAE,QAAQ;oBACnB,YAAY,EAAE,WAAW;iBAC1B,CAAC,CAAC;gBAEH,IAAI,QAAQ,EAAE,CAAC;oBACb,IAAI,CAAC,MAAM,CAAC,eAAe,EAAE,QAAQ,CAAC,CAAC;gBACzC,CAAC;gBAED,MAAM,OAAO,GAAG;oBACd,GAAG,EAAE,QAAQ;oBACb,MAAM,EAAE,MAAM;oBACd,OAAO,EAAE;wBACP,MAAM,EAAE,kBAAkB;wBAC1B,cAAc,EAAE,mCAAmC;qBACpD;oBACD,IAAI;iBACL,CAAC;gBAEF,MAAM,CAAC,KAAK,CAAC,gCAAgC,EAAE,OAAO,CAAC,CAAC;gBAExD,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,OAAO,EAAE,eAAe,CAAC;qBACvD,eAAe,CAAC,iBAAiB,CAAC;qBAClC,UAAU,CAAC,KAAK,EAAE,GAAc,EAAE,EAAE,CAAC,MAAM,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC;gBAE9D,IAAI,QAAQ,CAAC,KAAK,EAAE,CAAC;oBACnB,IAAI,OAAO,GAAG,2DAA2D,CAAC;oBAE1E,IAAI,QAAQ,CAAC,KAAK,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;wBAClC,OAAO,GAAG,wCAAwC,CAAC;oBACrD,CAAC;yBAAM,IAAI,QAAQ,CAAC,KAAK,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;wBACzC,OAAO,GAAG,iDAAiD,CAAC;oBAC9D,CAAC;yBAAM,IAAI,QAAQ,CAAC,KAAK,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;wBACzC,OAAO,GAAG,8CAA8C,CAAC;oBAC3D,CAAC;oBAED,MAAM,CAAC,KAAK,CAAC,0BAA0B,EAAE,OAAO,CAAC,CAAC;oBAElD,QAAQ,CAAC,KAAK,CAAC,IAAI,GAAG,cAAc,CAClC,sBAAsB,EACtB,OAAO,EACP,QAAQ,CAAC,KAAK,CAAC,MAAM,CACtB,CAAC;oBAEF,OAAO,QAAQ,CAAC;gBAClB,CAAC;gBAED,MAAM,CAAC,KAAK,CAAC,iCAAiC,EAAE,QAAQ,CAAC,CAAC;gBAE1D,OAAO,QAA2C,CAAC;YACrD,CAAC;SACF,CAAC;QACF,MAAM,EAAE,OAAO,CAAC,QAAQ,CAAuE;YAC7F,OAAO,EAAE,KAAK,EAAE,EAAE,WAAW,EAAE,QAAQ,EAAE,QAAQ,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE,SAAS,EAAE,EAAE;gBACxE,MAAM,EAAE,iBAAiB,EAAE,MAAM,EAAE,GAAG,GAAG,CAAC,KAAe,CAAC;gBAE1D,MAAM,IAAI,GAAG,IAAI,eAAe,CAAC;oBAC/B,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBAC5C,KAAK,EAAE,WAAW;iBACnB,CAAC,CAAC;gBACH,MAAM,OAAO,GAAc;oBACzB,GAAG,EAAE,QAAQ;oBACb,MAAM,EAAE,MAAM;oBACd,WAAW,EAAE,SAAS;oBACtB,OAAO,EAAE;wBACP,cAAc,EAAE,mCAAmC;qBACpD;oBACD,IAAI;iBACL,CAAC;gBAEF,MAAM,CAAC,KAAK,CAAC,yBAAyB,EAAE,OAAO,CAAC,CAAC;gBAEjD,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,OAAO,EAAE,QAAQ,CAAC;qBAChD,eAAe,CAAC,iBAAiB,CAAC;qBAClC,UAAU,CAAC,KAAK,EAAE,GAAc,EAAE,EAAE,CAAC,MAAM,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC;gBAE9D,IAAI,QAAQ,CAAC,KAAK,EAAE,CAAC;oBACnB,IAAI,OAAO,GAAG,4CAA4C,CAAC;oBAE3D,IAAI,QAAQ,CAAC,KAAK,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;wBAClC,OAAO,GAAG,gCAAgC,CAAC;oBAC7C,CAAC;yBAAM,IAAI,QAAQ,CAAC,KAAK,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;wBACzC,OAAO,GAAG,yCAAyC,CAAC;oBACtD,CAAC;yBAAM,IAAI,QAAQ,CAAC,KAAK,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;wBACzC,OAAO,GAAG,sCAAsC,CAAC;oBACnD,CAAC;oBAED,MAAM,CAAC,KAAK,CAAC,wBAAwB,EAAE,OAAO,CAAC,CAAC;oBAEhD,QAAQ,CAAC,KAAK,CAAC,IAAI,GAAG,cAAc,CAClC,oBAAoB,EACpB,OAAO,EACP,QAAQ,CAAC,KAAK,CAAC,MAAM,CACtB,CAAC;oBACF,OAAO,QAAQ,CAAC;gBAClB,CAAC;gBAED,MAAM,CAAC,KAAK,CAAC,0BAA0B,EAAE,QAAQ,CAAC,CAAC;gBAEnD,OAAO,QAA4B,CAAC;YACtC,CAAC;SACF,CAAC;QACF,QAAQ,EAAE,OAAO,CAAC,QAAQ,CAA8D;YACtF,OAAO,EAAE,KAAK,EAAE,EAAE,WAAW,EAAE,QAAQ,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE,SAAS,EAAE,EAAE;gBAC9D,MAAM,EAAE,iBAAiB,EAAE,MAAM,EAAE,GAAG,GAAG,CAAC,KAAe,CAAC;gBAE1D,MAAM,OAAO,GAAc;oBACzB,GAAG,EAAE,QAAQ;oBACb,MAAM,EAAE,KAAK;oBACb,WAAW,EAAE,SAAS;oBACtB,OAAO,EAAE;wBACP,MAAM,EAAE,kBAAkB;wBAC1B,aAAa,EAAE,UAAU,WAAW,EAAE;qBACvC;iBACF,CAAC;gBAEF,MAAM,CAAC,KAAK,CAAC,2BAA2B,EAAE,OAAO,CAAC,CAAC;gBAEnD,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,OAAO,EAAE,UAAU,CAAC;qBAClD,eAAe,CAAC,iBAAiB,CAAC;qBAClC,UAAU,CAAC,KAAK,EAAE,GAAc,EAAE,EAAE,CAAC,MAAM,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC;gBAE9D,IAAI,OAAO,GAAG,4CAA4C,CAAC;gBAE3D,IAAI,QAAQ,CAAC,KAAK,EAAE,CAAC;oBACnB,IAAI,QAAQ,CAAC,KAAK,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;wBAClC,OAAO,GAAG,mCAAmC,CAAC;oBAChD,CAAC;yBAAM,IAAI,QAAQ,CAAC,KAAK,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;wBACzC,OAAO,GAAG,4CAA4C,CAAC;oBACzD,CAAC;yBAAM,IAAI,QAAQ,CAAC,KAAK,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;wBACzC,OAAO,GAAG,yCAAyC,CAAC;oBACtD,CAAC;oBAED,MAAM,CAAC,KAAK,CAAC,qBAAqB,EAAE,OAAO,CAAC,CAAC;oBAE7C,QAAQ,CAAC,KAAK,CAAC,IAAI,GAAG,cAAc,CAAC,iBAAiB,EAAE,OAAO,EAAE,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;oBACxF,OAAO,QAAQ,CAAC;gBAClB,CAAC;gBAED,MAAM,CAAC,KAAK,CAAC,4BAA4B,EAAE,QAAQ,CAAC,CAAC;gBAErD,OAAO,QAAsC,CAAC;YAChD,CAAC;SACF,CAAC;KACH,CAAC;CACH,CAAC,CAAC"}

package/dist/src/lib/oidc.api.utils.d.ts

@@ -0,0 +1,3 @@
+import { GenericError } from '@forgerock/sdk-types';
+export declare function transformError(error: string, message: string, status: number | string): GenericError;
+//# sourceMappingURL=oidc.api.utils.d.ts.map

package/dist/src/lib/oidc.api.utils.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"oidc.api.utils.d.ts","sourceRoot":"","sources":["../../../src/lib/oidc.api.utils.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AAEpD,wBAAgB,cAAc,CAC5B,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,MAAM,GAAG,MAAM,GACtB,YAAY,CAOd"}

package/dist/src/lib/oidc.api.utils.js

@@ -0,0 +1,9 @@
+export function transformError(error, message, status) {
+    return {
+        error,
+        message,
+        status,
+        type: 'network_error',
+    };
+}
+//# sourceMappingURL=oidc.api.utils.js.map

package/dist/src/lib/oidc.api.utils.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"oidc.api.utils.js","sourceRoot":"","sources":["../../../src/lib/oidc.api.utils.ts"],"names":[],"mappings":"AAQA,MAAM,UAAU,cAAc,CAC5B,KAAa,EACb,OAAe,EACf,MAAuB;IAEvB,OAAO;QACL,KAAK;QACL,OAAO;QACP,MAAM;QACN,IAAI,EAAE,eAAe;KACtB,CAAC;AACJ,CAAC"}

package/dist/src/lib/token.utils.d.ts

@@ -0,0 +1,2 @@
+export declare function isExpiryWithinThreshold(oauthThreshold?: number, tokenExpiry?: number): boolean;
+//# sourceMappingURL=token.utils.d.ts.map

package/dist/src/lib/token.utils.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"token.utils.d.ts","sourceRoot":"","sources":["../../../src/lib/token.utils.ts"],"names":[],"mappings":"AAMA,wBAAgB,uBAAuB,CAAC,cAAc,CAAC,EAAE,MAAM,EAAE,WAAW,CAAC,EAAE,MAAM,GAAG,OAAO,CAQ9F"}

package/dist/src/lib/token.utils.js

@@ -0,0 +1,15 @@
+/*
+ * Copyright (c) 2025 Ping Identity Corporation. All rights reserved.
+ *
+ * This software may be modified and distributed under the terms
+ * of the MIT license. See the LICENSE file for details.
+ */
+export function isExpiryWithinThreshold(oauthThreshold, tokenExpiry) {
+    if (oauthThreshold && tokenExpiry) {
+        const expiryTimeMinusThreshold = tokenExpiry - oauthThreshold;
+        const result = expiryTimeMinusThreshold < Date.now();
+        return result;
+    }
+    return false;
+}
+//# sourceMappingURL=token.utils.js.map

package/dist/src/lib/token.utils.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"token.utils.js","sourceRoot":"","sources":["../../../src/lib/token.utils.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,MAAM,UAAU,uBAAuB,CAAC,cAAuB,EAAE,WAAoB;IACnF,IAAI,cAAc,IAAI,WAAW,EAAE,CAAC;QAClC,MAAM,wBAAwB,GAAG,WAAW,GAAG,cAAc,CAAC;QAC9D,MAAM,MAAM,GAAG,wBAAwB,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAErD,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/src/lib/wellknown.api.d.ts

@@ -0,0 +1,7 @@
+import type { WellKnownResponse } from '@forgerock/sdk-types';
+import type { RootState } from './client.types.js';
+export declare const wellknownApi: import("@reduxjs/toolkit/query").Api<import("@reduxjs/toolkit/query").BaseQueryFn<string | import("@reduxjs/toolkit/query").FetchArgs, unknown, import("@reduxjs/toolkit/query").FetchBaseQueryError, {}, import("@reduxjs/toolkit/query").FetchBaseQueryMeta>, {
+    configuration: import("@reduxjs/toolkit/query").QueryDefinition<string, import("@reduxjs/toolkit/query").BaseQueryFn<string | import("@reduxjs/toolkit/query").FetchArgs, unknown, import("@reduxjs/toolkit/query").FetchBaseQueryError, {}, import("@reduxjs/toolkit/query").FetchBaseQueryMeta>, never, WellKnownResponse, "wellknown", unknown>;
+}, "wellknown", never, typeof import("@reduxjs/toolkit/query").coreModuleName>;
+export declare function wellknownSelector(wellknownUrl: string, state: RootState): WellKnownResponse | undefined;
+//# sourceMappingURL=wellknown.api.d.ts.map

package/dist/src/lib/wellknown.api.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"wellknown.api.d.ts","sourceRoot":"","sources":["../../../src/lib/wellknown.api.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AAC9D,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AAEnD,eAAO,MAAM,YAAY;;8EAQvB,CAAC;AAEH,wBAAgB,iBAAiB,CAAC,YAAY,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,iCAMvE"}

package/dist/src/lib/wellknown.api.js

@@ -0,0 +1,22 @@
+/*
+ * Copyright (c) 2025 Ping Identity Corporation. All rights reserved.
+ *
+ * This software may be modified and distributed under the terms
+ * of the MIT license. See the LICENSE file for details.
+ */
+import { createSelector } from '@reduxjs/toolkit';
+import { createApi, fetchBaseQuery } from '@reduxjs/toolkit/query';
+export const wellknownApi = createApi({
+    reducerPath: 'wellknown',
+    baseQuery: fetchBaseQuery(),
+    endpoints: (builder) => ({
+        configuration: builder.query({
+            query: (endpoint) => `${endpoint}`,
+        }),
+    }),
+});
+export function wellknownSelector(wellknownUrl, state) {
+    const selector = createSelector(wellknownApi.endpoints.configuration.select(wellknownUrl), (result) => result?.data);
+    return selector(state);
+}
+//# sourceMappingURL=wellknown.api.js.map

package/dist/src/lib/wellknown.api.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"wellknown.api.js","sourceRoot":"","sources":["../../../src/lib/wellknown.api.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,EAAE,SAAS,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAKnE,MAAM,CAAC,MAAM,YAAY,GAAG,SAAS,CAAC;IACpC,WAAW,EAAE,WAAW;IACxB,SAAS,EAAE,cAAc,EAAE;IAC3B,SAAS,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;QACvB,aAAa,EAAE,OAAO,CAAC,KAAK,CAA4B;YACtD,KAAK,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,GAAG,QAAQ,EAAE;SACnC,CAAC;KACH,CAAC;CACH,CAAC,CAAC;AAEH,MAAM,UAAU,iBAAiB,CAAC,YAAoB,EAAE,KAAgB;IACtE,MAAM,QAAQ,GAAG,cAAc,CAC7B,YAAY,CAAC,SAAS,CAAC,aAAa,CAAC,MAAM,CAAC,YAAY,CAAC,EACzD,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,IAAI,CACzB,CAAC;IACF,OAAO,QAAQ,CAAC,KAAK,CAAC,CAAC;AACzB,CAAC"}

package/dist/src/types.d.ts

@@ -0,0 +1,9 @@
+export * from './lib/client.types.js';
+export * from './lib/config.types.js';
+export * from './lib/authorize.request.types.js';
+export * from './lib/exchange.types.js';
+export type { GenericError, GetAuthorizationUrlOptions, WellKnownResponse, } from '@forgerock/sdk-types';
+export type { ActionTypes, RequestMiddleware } from '@forgerock/sdk-request-middleware';
+export type { CustomLogger, LogLevel } from '@forgerock/sdk-logger';
+export type { StorageConfig } from '@forgerock/storage';
+//# sourceMappingURL=types.d.ts.map

package/dist/src/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/types.ts"],"names":[],"mappings":"AAKA,cAAc,uBAAuB,CAAC;AACtC,cAAc,uBAAuB,CAAC;AACtC,cAAc,kCAAkC,CAAC;AACjD,cAAc,yBAAyB,CAAC;AAExC,YAAY,EACV,YAAY,EACZ,0BAA0B,EAC1B,iBAAiB,GAClB,MAAM,sBAAsB,CAAC;AAC9B,YAAY,EAAE,WAAW,EAAE,iBAAiB,EAAE,MAAM,mCAAmC,CAAC;AACxF,YAAY,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,uBAAuB,CAAC;AACpE,YAAY,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC"}

package/dist/src/types.js

@@ -0,0 +1,10 @@
+/* Copyright (c) 2025 Ping Identity Corporation. All rights reserved.
+ *
+ * This software may be modified and distributed under the terms
+ * of the MIT license. See the LICENSE file for details.
+ */
+export * from './lib/client.types.js';
+export * from './lib/config.types.js';
+export * from './lib/authorize.request.types.js';
+export * from './lib/exchange.types.js';
+//# sourceMappingURL=types.js.map

package/dist/src/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/types.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,cAAc,uBAAuB,CAAC;AACtC,cAAc,uBAAuB,CAAC;AACtC,cAAc,kCAAkC,CAAC;AACjD,cAAc,yBAAyB,CAAC"}