@ghentcdh/authentication-vue 0.5.0 → 0.6.0

package/index.mjs

@@ -1,1162 +1,23 @@
-import { ref as A, markRaw as I, watch as P, inject as L } from "vue";
-const C = "GHENTCDH_AUTHENTICATION", R = "application/json";
-class x {
-  /** @type {Pick<PromiseWithResolvers<boolean>, 'resolve' | 'reject'>[]} */
-  #r = [];
-  /** @type {KeycloakAdapter} */
-  #t;
-  /** @type {boolean} */
-  #o = !0;
-  /** @type {CallbackStorage} */
-  #l;
-  #n = this.#b(console.info);
-  #u = this.#b(console.warn);
-  /** @type {LoginIframe} */
-  #e = {
-    enable: !0,
-    callbackList: [],
-    interval: 5
-  };
-  /** @type {KeycloakConfig} config */
-  #i;
-  didInitialize = !1;
-  authenticated = !1;
-  loginRequired = !1;
-  /** @type {KeycloakResponseMode} */
-  responseMode = "fragment";
-  /** @type {KeycloakResponseType} */
-  responseType = "code";
-  /** @type {KeycloakFlow} */
-  flow = "standard";
-  /** @type {number?} */
-  timeSkew = null;
-  /** @type {string=} */
-  redirectUri;
-  /** @type {string=} */
-  silentCheckSsoRedirectUri;
-  /** @type {boolean} */
-  silentCheckSsoFallback = !0;
-  /** @type {KeycloakPkceMethod} */
-  pkceMethod = "S256";
-  enableLogging = !1;
-  /** @type {'GET' | 'POST'} */
-  logoutMethod = "GET";
-  /** @type {string=} */
-  scope;
-  messageReceiveTimeout = 1e4;
-  /** @type {string=} */
-  idToken;
-  /** @type {KeycloakTokenParsed=} */
-  idTokenParsed;
-  /** @type {string=} */
-  token;
-  /** @type {KeycloakTokenParsed=} */
-  tokenParsed;
-  /** @type {string=} */
-  refreshToken;
-  /** @type {KeycloakTokenParsed=} */
-  refreshTokenParsed;
-  /** @type {string=} */
-  clientId;
-  /** @type {string=} */
-  sessionId;
-  /** @type {string=} */
-  subject;
-  /** @type {string=} */
-  authServerUrl;
-  /** @type {string=} */
-  realm;
-  /** @type {KeycloakRoles=} */
-  realmAccess;
-  /** @type {KeycloakResourceAccess=} */
-  resourceAccess;
-  /** @type {KeycloakProfile=} */
-  profile;
-  /** @type {{}=} */
-  userInfo;
-  /** @type {Endpoints} */
-  endpoints;
-  /** @type {number=} */
-  tokenTimeoutHandle;
-  /** @type {() => void=} */
-  onAuthSuccess;
-  /** @type {(errorData?: KeycloakError) => void=} */
-  onAuthError;
-  /** @type {() => void=} */
-  onAuthRefreshSuccess;
-  /** @type {() => void=} */
-  onAuthRefreshError;
-  /** @type {() => void=} */
-  onTokenExpired;
-  /** @type {() => void=} */
-  onAuthLogout;
-  /** @type {(authenticated: boolean) => void=} */
-  onReady;
-  /** @type {(status: 'success' | 'cancelled' | 'error', action: string) => void=} */
-  onActionUpdate;
-  /**
-   * @param {KeycloakConfig} config
-   */
-  constructor(e) {
-    if (typeof e != "string" && !v(e))
-      throw new Error("The 'Keycloak' constructor must be provided with a configuration object, or a URL to a JSON configuration file.");
-    if (v(e)) {
-      const t = "oidcProvider" in e ? ["clientId"] : ["url", "realm", "clientId"];
-      for (const r of t)
-        if (!(r in e))
-          throw new Error(`The configuration object is missing the required '${r}' property.`);
-    }
-    globalThis.isSecureContext || this.#u(
-      `[KEYCLOAK] Keycloak JS must be used in a 'secure context' to function properly as it relies on browser APIs that are otherwise not available.
-Continuing to run your application insecurely will lead to unexpected behavior and breakage.
-
-For more information see: https://developer.mozilla.org/en-US/docs/Web/Security/Secure_Contexts`
-    ), this.#i = e;
-  }
-  /**
-   * @param {KeycloakInitOptions} initOptions
-   * @returns {Promise<boolean>}
-   */
-  init = async (e = {}) => {
-    if (this.didInitialize)
-      throw new Error("A 'Keycloak' instance can only be initialized once.");
-    this.didInitialize = !0, this.#l = H();
-    const t = ["default", "cordova", "cordova-native"];
-    if (typeof e.adapter == "string" && t.includes(e.adapter) ? this.#t = this.#f(e.adapter) : typeof e.adapter == "object" ? this.#t = e.adapter : "Cordova" in window || "cordova" in window ? this.#t = this.#f("cordova") : this.#t = this.#f("default"), typeof e.useNonce < "u" && (this.#o = e.useNonce), typeof e.checkLoginIframe < "u" && (this.#e.enable = e.checkLoginIframe), e.checkLoginIframeInterval && (this.#e.interval = e.checkLoginIframeInterval), e.onLoad === "login-required" && (this.loginRequired = !0), e.responseMode)
-      if (e.responseMode === "query" || e.responseMode === "fragment")
-        this.responseMode = e.responseMode;
-      else
-        throw new Error("Invalid value for responseMode");
-    if (e.flow) {
-      switch (e.flow) {
-        case "standard":
-          this.responseType = "code";
-          break;
-        case "implicit":
-          this.responseType = "id_token token";
-          break;
-        case "hybrid":
-          this.responseType = "code id_token token";
-          break;
-        default:
-          throw new Error("Invalid value for flow");
-      }
-      this.flow = e.flow;
-    }
-    if (typeof e.timeSkew == "number" && (this.timeSkew = e.timeSkew), e.redirectUri && (this.redirectUri = e.redirectUri), e.silentCheckSsoRedirectUri && (this.silentCheckSsoRedirectUri = e.silentCheckSsoRedirectUri), typeof e.silentCheckSsoFallback == "boolean" && (this.silentCheckSsoFallback = e.silentCheckSsoFallback), typeof e.pkceMethod < "u") {
-      if (e.pkceMethod !== "S256" && e.pkceMethod !== !1)
-        throw new TypeError(`Invalid value for pkceMethod', expected 'S256' or false but got ${e.pkceMethod}.`);
-      this.pkceMethod = e.pkceMethod;
-    }
-    return typeof e.enableLogging == "boolean" && (this.enableLogging = e.enableLogging), e.logoutMethod === "POST" && (this.logoutMethod = "POST"), typeof e.scope == "string" && (this.scope = e.scope), typeof e.messageReceiveTimeout == "number" && e.messageReceiveTimeout > 0 && (this.messageReceiveTimeout = e.messageReceiveTimeout), await this.#S(), await this.#C(), await this.#E(e), this.onReady?.(this.authenticated), this.authenticated;
-  };
-  /**
-   * @param {"default" | "cordova" | "cordova-native"} type
-   * @returns {KeycloakAdapter}
-   */
-  #f(e) {
-    if (e === "default")
-      return this.#v();
-    if (e === "cordova")
-      return this.#e.enable = !1, this.#U();
-    if (e === "cordova-native")
-      return this.#e.enable = !1, this.#T();
-    throw new Error("invalid adapter type: " + e);
-  }
-  /**
-   * @returns {KeycloakAdapter}
-   */
-  #v() {
-    const e = (t) => t?.redirectUri || this.redirectUri || globalThis.location.href;
-    return {
-      login: async (t) => (window.location.assign(await this.createLoginUrl(t)), await new Promise(() => {
-      })),
-      logout: async (t) => {
-        if ((t?.logoutMethod ?? this.logoutMethod) === "GET") {
-          window.location.replace(this.createLogoutUrl(t));
-          return;
-        }
-        const s = document.createElement("form");
-        s.setAttribute("method", "POST"), s.setAttribute("action", this.createLogoutUrl(t)), s.style.display = "none";
-        const o = {
-          id_token_hint: this.idToken,
-          client_id: this.clientId,
-          post_logout_redirect_uri: e(t)
-        };
-        for (const [n, a] of Object.entries(o)) {
-          const c = document.createElement("input");
-          c.setAttribute("type", "hidden"), c.setAttribute("name", n), c.setAttribute(
-            "value",
-            /** @type {string} */
-            a
-          ), s.appendChild(c);
-        }
-        document.body.appendChild(s), s.submit();
-      },
-      register: async (t) => (window.location.assign(await this.createRegisterUrl(t)), await new Promise(() => {
-      })),
-      accountManagement: async () => {
-        const t = this.createAccountUrl();
-        if (typeof t < "u")
-          window.location.href = t;
-        else
-          throw new Error("Not supported by the OIDC server");
-        return await new Promise(() => {
-        });
-      },
-      redirectUri: e
-    };
-  }
-  /**
-   * @returns {KeycloakAdapter}
-   */
-  #U() {
-    const e = (n, a, c) => window.cordova && window.cordova.InAppBrowser ? window.cordova.InAppBrowser.open(n, a, c) : window.open(n, a, c), t = (n) => n && n.cordovaOptions ? Object.keys(n.cordovaOptions).reduce((a, c) => (a[c] = n.cordovaOptions[c], a), {}) : {}, r = (n) => Object.keys(n).reduce((a, c) => (a.push(c + "=" + n[c]), a), []).join(","), s = (n) => {
-      const a = t(n);
-      return a.location = "no", n && n.prompt === "none" && (a.hidden = "yes"), r(a);
-    }, o = () => this.redirectUri || "http://localhost";
-    return {
-      login: async (n) => {
-        const a = s(n), c = await this.createLoginUrl(n), l = e(c, "_blank", a);
-        let d = !1, h = !1;
-        function f() {
-          h = !0, l.close();
-        }
-        return await new Promise((p, w) => {
-          l.addEventListener("loadstart", async (u) => {
-            if (u.url.indexOf(o()) === 0) {
-              const m = this.#a(u.url);
-              try {
-                await this.#c(m), p();
-              } catch (y) {
-                w(y);
-              }
-              f(), d = !0;
-            }
-          }), l.addEventListener("loaderror", async (u) => {
-            if (!d)
-              if (u.url.indexOf(o()) === 0) {
-                const m = this.#a(u.url);
-                try {
-                  await this.#c(m), p();
-                } catch (y) {
-                  w(y);
-                }
-                f(), d = !0;
-              } else
-                w(new Error("Unable to process login.")), f();
-          }), l.addEventListener("exit", function(u) {
-            h || w(new Error("User closed the login window."));
-          });
-        });
-      },
-      logout: async (n) => {
-        const a = this.createLogoutUrl(n), c = e(a, "_blank", "location=no,hidden=yes,clearcache=yes");
-        let l = !1;
-        c.addEventListener("loadstart", (d) => {
-          d.url.indexOf(o()) === 0 && c.close();
-        }), c.addEventListener("loaderror", (d) => {
-          d.url.indexOf(o()) === 0 || (l = !0), c.close();
-        }), await new Promise((d, h) => {
-          c.addEventListener("exit", () => {
-            l ? h(new Error("User closed the login window.")) : (this.clearToken(), d());
-          });
-        });
-      },
-      register: async (n) => {
-        const a = await this.createRegisterUrl(), c = s(n), l = e(a, "_blank", c);
-        await new Promise((h, f) => {
-          l.addEventListener("loadstart", async (p) => {
-            if (p.url.indexOf(o()) === 0) {
-              l.close();
-              const w = this.#a(p.url);
-              try {
-                await this.#c(w), h();
-              } catch (u) {
-                f(u);
-              }
-            }
-          });
-        });
-      },
-      accountManagement: async () => {
-        const n = this.createAccountUrl();
-        if (typeof n < "u") {
-          const a = e(n, "_blank", "location=no");
-          a.addEventListener("loadstart", function(c) {
-            c.url.indexOf(o()) === 0 && a.close();
-          });
-        } else
-          throw new Error("Not supported by the OIDC server");
-      },
-      redirectUri: () => o()
-    };
-  }
-  /**
-   * @returns {KeycloakAdapter}
-   */
-  #T() {
-    return {
-      login: async (e) => {
-        const t = await this.createLoginUrl(e);
-        await new Promise((r, s) => {
-          universalLinks.subscribe("keycloak", async (o) => {
-            universalLinks.unsubscribe("keycloak"), window.cordova.plugins.browsertab.close();
-            const n = this.#a(o.url);
-            try {
-              await this.#c(n), r();
-            } catch (a) {
-              s(a);
-            }
-          }), window.cordova.plugins.browsertab.openUrl(t);
-        });
-      },
-      logout: async (e) => {
-        const t = this.createLogoutUrl(e);
-        await new Promise((r) => {
-          universalLinks.subscribe("keycloak", () => {
-            universalLinks.unsubscribe("keycloak"), window.cordova.plugins.browsertab.close(), this.clearToken(), r();
-          }), window.cordova.plugins.browsertab.openUrl(t);
-        });
-      },
-      register: async (e) => {
-        const t = await this.createRegisterUrl(e);
-        await new Promise((r, s) => {
-          universalLinks.subscribe("keycloak", async (o) => {
-            universalLinks.unsubscribe("keycloak"), window.cordova.plugins.browsertab.close();
-            const n = this.#a(o.url);
-            try {
-              await this.#c(n), r();
-            } catch (a) {
-              s(a);
-            }
-          }), window.cordova.plugins.browsertab.openUrl(t);
-        });
-      },
-      accountManagement: async () => {
-        const e = this.createAccountUrl();
-        if (typeof e < "u")
-          window.cordova.plugins.browsertab.openUrl(e);
-        else
-          throw new Error("Not supported by the OIDC server");
-      },
-      redirectUri: (e) => e && e.redirectUri ? e.redirectUri : this.redirectUri ? this.redirectUri : "http://localhost"
-    };
-  }
-  /**
-   * @returns {Promise<void>}
-   */
-  async #S() {
-    if (typeof this.#i == "string") {
-      const e = await q(this.#i);
-      this.authServerUrl = e["auth-server-url"], this.realm = e.realm, this.clientId = e.resource, this.#g();
-    } else
-      this.clientId = this.#i.clientId, "oidcProvider" in this.#i ? await this.#_(this.#i.oidcProvider) : (this.authServerUrl = this.#i.url, this.realm = this.#i.realm, this.#g());
-  }
-  /**
-   * @returns {void}
-   */
-  #g() {
-    this.endpoints = {
-      authorize: () => this.#s() + "/protocol/openid-connect/auth",
-      token: () => this.#s() + "/protocol/openid-connect/token",
-      logout: () => this.#s() + "/protocol/openid-connect/logout",
-      checkSessionIframe: () => this.#s() + "/protocol/openid-connect/login-status-iframe.html",
-      thirdPartyCookiesIframe: () => this.#s() + "/protocol/openid-connect/3p-cookies/step1.html",
-      register: () => this.#s() + "/protocol/openid-connect/registrations",
-      userinfo: () => this.#s() + "/protocol/openid-connect/userinfo"
-    };
-  }
-  /**
-   * @param {string | OpenIdProviderMetadata} oidcProvider
-   * @returns {Promise<void>}
-   */
-  async #_(e) {
-    if (typeof e == "string") {
-      const t = `${_(e)}/.well-known/openid-configuration`, r = await V(t);
-      this.#k(r);
-    } else
-      this.#k(e);
-  }
-  /**
-   * @param {OpenIdProviderMetadata} config
-   * @returns {void}
-   */
-  #k(e) {
-    this.endpoints = {
-      authorize() {
-        return e.authorization_endpoint;
-      },
-      token() {
-        return e.token_endpoint;
-      },
-      logout() {
-        if (!e.end_session_endpoint)
-          throw new Error("Not supported by the OIDC server");
-        return e.end_session_endpoint;
-      },
-      checkSessionIframe() {
-        if (!e.check_session_iframe)
-          throw new Error("Not supported by the OIDC server");
-        return e.check_session_iframe;
-      },
-      register() {
-        throw new Error('Redirection to "Register user" page not supported in standard OIDC mode');
-      },
-      userinfo() {
-        if (!e.userinfo_endpoint)
-          throw new Error("Not supported by the OIDC server");
-        return e.userinfo_endpoint;
-      }
-    };
-  }
-  /**
-   * @returns {Promise<void>}
-   */
-  async #C() {
-    if (!this.#e.enable && !this.silentCheckSsoRedirectUri || typeof this.endpoints.thirdPartyCookiesIframe != "function")
-      return;
-    const e = document.createElement("iframe");
-    e.setAttribute("src", this.endpoints.thirdPartyCookiesIframe()), e.setAttribute("sandbox", "allow-storage-access-by-user-activation allow-scripts allow-same-origin"), e.setAttribute("title", "keycloak-3p-check-iframe"), e.style.display = "none", document.body.appendChild(e);
-    const t = new Promise((r) => {
-      const s = (o) => {
-        e.contentWindow === o.source && (o.data !== "supported" && o.data !== "unsupported" || (o.data === "unsupported" && (this.#u(
-          `[KEYCLOAK] Your browser is blocking access to 3rd-party cookies, this means:
-
- - It is not possible to retrieve tokens without redirecting to the Keycloak server (a.k.a. no support for silent authentication).
- - It is not possible to automatically detect changes to the session status (such as the user logging out in another tab).
-
-For more information see: https://www.keycloak.org/securing-apps/javascript-adapter#_modern_browsers`
-        ), this.#e.enable = !1, this.silentCheckSsoFallback && (this.silentCheckSsoRedirectUri = void 0)), document.body.removeChild(e), window.removeEventListener("message", s), r()));
-      };
-      window.addEventListener("message", s, !1);
-    });
-    return await z(t, this.messageReceiveTimeout, "Timeout when waiting for 3rd party check iframe message.");
-  }
-  /**
-   * @param {KeycloakInitOptions} initOptions
-   * @returns {Promise<void>}
-   */
-  async #E(e) {
-    const t = this.#a(window.location.href);
-    if (t?.newUrl && window.history.replaceState(window.history.state, "", t.newUrl), t && t.valid) {
-      await this.#p(), await this.#c(t);
-      return;
-    }
-    const r = async (o) => {
-      const n = {};
-      o || (n.prompt = "none"), e.locale && (n.locale = e.locale), await this.login(n);
-    }, s = async () => {
-      switch (e.onLoad) {
-        case "check-sso":
-          this.#e.enable ? (await this.#p(), await this.#d() || (this.silentCheckSsoRedirectUri ? await this.#m() : await r(!1))) : this.silentCheckSsoRedirectUri ? await this.#m() : await r(!1);
-          break;
-        case "login-required":
-          await r(!0);
-          break;
-        default:
-          throw new Error("Invalid value for onLoad");
-      }
-    };
-    if (e.token && e.refreshToken)
-      if (this.#h(e.token, e.refreshToken, e.idToken), this.#e.enable)
-        await this.#p(), await this.#d() && (this.onAuthSuccess?.(), this.#w());
-      else
-        try {
-          await this.updateToken(-1), this.onAuthSuccess?.();
-        } catch (o) {
-          if (this.onAuthError?.(), e.onLoad)
-            await s();
-          else
-            throw o;
-        }
-    else e.onLoad && await s();
-  }
-  /**
-   * @returns {Promise<void>}
-   */
-  async #p() {
-    if (!this.#e.enable || this.#e.iframe)
-      return;
-    const e = document.createElement("iframe");
-    this.#e.iframe = e, e.setAttribute("src", this.endpoints.checkSessionIframe()), e.setAttribute("sandbox", "allow-storage-access-by-user-activation allow-scripts allow-same-origin"), e.setAttribute("title", "keycloak-session-iframe"), e.style.display = "none", document.body.appendChild(e);
-    const t = (s) => {
-      if (s.origin !== this.#e.iframeOrigin || this.#e.iframe?.contentWindow !== s.source || !(s.data === "unchanged" || s.data === "changed" || s.data === "error"))
-        return;
-      s.data !== "unchanged" && this.clearToken();
-      const o = this.#e.callbackList;
-      this.#e.callbackList = [];
-      for (const n of o.reverse())
-        s.data === "error" ? n(new Error("Error while checking login iframe")) : n(null, s.data === "unchanged");
-    };
-    window.addEventListener("message", t, !1), await new Promise((s) => {
-      e.addEventListener("load", () => {
-        const o = this.endpoints.authorize();
-        o.startsWith("/") ? this.#e.iframeOrigin = globalThis.location.origin : this.#e.iframeOrigin = new URL(o).origin, s();
-      });
-    });
-  }
-  /**
-   * @returns {Promise<boolean | undefined>}
-   */
-  async #d() {
-    if (!this.#e.iframe || !this.#e.iframeOrigin)
-      return;
-    const e = `${this.clientId} ${this.sessionId ? this.sessionId : ""}`, t = this.#e.iframeOrigin;
-    return await new Promise((s, o) => {
-      const n = (a, c) => a ? o(a) : s(
-        /** @type {boolean} */
-        c
-      );
-      this.#e.callbackList.push(n), this.#e.callbackList.length === 1 && this.#e.iframe?.contentWindow?.postMessage(e, t);
-    });
-  }
-  /**
-   * @returns {Promise<void>}
-   */
-  async #m() {
-    const e = document.createElement("iframe"), t = await this.createLoginUrl({ prompt: "none", redirectUri: this.silentCheckSsoRedirectUri });
-    return e.setAttribute("src", t), e.setAttribute("sandbox", "allow-storage-access-by-user-activation allow-scripts allow-same-origin"), e.setAttribute("title", "keycloak-silent-check-sso"), e.style.display = "none", document.body.appendChild(e), await new Promise((r, s) => {
-      const o = async (n) => {
-        if (n.origin !== window.location.origin || e.contentWindow !== n.source)
-          return;
-        const a = this.#a(n.data);
-        try {
-          await this.#c(a), r();
-        } catch (c) {
-          s(c);
-        }
-        document.body.removeChild(e), window.removeEventListener("message", o);
-      };
-      window.addEventListener("message", o);
-    });
-  }
-  /**
-   * @param {string} url
-   */
-  #a(e) {
-    const t = this.#A(e);
-    if (!t)
-      return;
-    const r = this.#l.get(t.state);
-    return r && (t.valid = !0, t.redirectUri = r.redirectUri, t.storedNonce = r.nonce, t.prompt = r.prompt, t.pkceCodeVerifier = r.pkceCodeVerifier, t.loginOptions = r.loginOptions), t;
-  }
-  /**
-   * @param {string} urlString
-   */
-  #A(e) {
-    let t = [];
-    switch (this.flow) {
-      case "standard":
-        t = ["code", "state", "session_state", "kc_action_status", "kc_action", "iss"];
-        break;
-      case "implicit":
-        t = ["access_token", "token_type", "id_token", "state", "session_state", "expires_in", "kc_action_status", "kc_action", "iss"];
-        break;
-      case "hybrid":
-        t = ["access_token", "token_type", "id_token", "code", "state", "session_state", "expires_in", "kc_action_status", "kc_action", "iss"];
-        break;
-    }
-    t.push("error"), t.push("error_description"), t.push("error_uri");
-    const r = new URL(e);
-    let s = "", o;
-    if (this.responseMode === "query" && r.searchParams.size > 0 ? (o = this.#y(r.search, t), r.search = o.paramsString, s = r.toString()) : this.responseMode === "fragment" && r.hash.length > 0 && (o = this.#y(r.hash.substring(1), t), r.hash = o.paramsString, s = r.toString()), o?.oauthParams) {
-      if (this.flow === "standard" || this.flow === "hybrid") {
-        if ((o.oauthParams.code || o.oauthParams.error) && o.oauthParams.state)
-          return o.oauthParams.newUrl = s, o.oauthParams;
-      } else if (this.flow === "implicit" && (o.oauthParams.access_token || o.oauthParams.error) && o.oauthParams.state)
-        return o.oauthParams.newUrl = s, o.oauthParams;
-    }
-  }
-  /**
-   * @typedef {Object} ParsedCallbackParams
-   * @property {string} paramsString
-   * @property {Record<string, string | undefined>} oauthParams
-   */
-  /**
-   * @param {string} paramsString
-   * @param {string[]} supportedParams
-   * @returns {ParsedCallbackParams}
-   */
-  #y(e, t) {
-    const r = new URLSearchParams(e), s = {};
-    for (const [o, n] of Array.from(r.entries()))
-      t.includes(o) && (s[o] = n, r.delete(o));
-    return {
-      paramsString: r.toString(),
-      oauthParams: s
-    };
-  }
-  async #c(e) {
-    const { code: t, error: r, prompt: s } = e;
-    let o = (/* @__PURE__ */ new Date()).getTime();
-    const n = (a, c, l) => {
-      if (o = (o + (/* @__PURE__ */ new Date()).getTime()) / 2, this.#h(a, c, l, o), this.#o && this.idTokenParsed && this.idTokenParsed.nonce !== e.storedNonce)
-        throw this.#n("[KEYCLOAK] Invalid nonce, clearing token"), this.clearToken(), new Error("Invalid nonce.");
-    };
-    if (e.kc_action_status && this.onActionUpdate && this.onActionUpdate(e.kc_action_status, e.kc_action), r) {
-      if (s !== "none")
-        if (e.error_description && e.error_description === "authentication_expired")
-          await this.login(e.loginOptions);
-        else {
-          const a = { error: r, error_description: e.error_description };
-          throw this.onAuthError?.(a), a;
-        }
-      return;
-    } else this.flow !== "standard" && (e.access_token || e.id_token) && (n(e.access_token, void 0, e.id_token), this.onAuthSuccess?.());
-    if (this.flow !== "implicit" && t)
-      try {
-        const a = await B(
-          this.endpoints.token(),
-          t,
-          /** @type {string} */
-          this.clientId,
-          e.redirectUri,
-          e.pkceCodeVerifier
-        );
-        n(a.access_token, a.refresh_token, a.id_token), this.flow === "standard" && this.onAuthSuccess?.(), this.#w();
-      } catch (a) {
-        throw this.onAuthError?.(), a;
-      }
-  }
-  async #w() {
-    this.#e.enable && this.token && (await X(this.#e.interval * 1e3), await this.#d() && await this.#w());
-  }
-  /**
-   * @param {KeycloakLoginOptions} [options]
-   * @returns {Promise<void>}
-   */
-  login = (e) => this.#t.login(e);
-  /**
-   * @param {KeycloakLoginOptions} [options]
-   * @returns {Promise<string>}
-   */
-  createLoginUrl = async (e) => {
-    const t = T(), r = T(), s = this.#t.redirectUri(e), o = {
-      state: t,
-      nonce: r,
-      redirectUri: s,
-      loginOptions: e
-    };
-    e?.prompt && (o.prompt = e.prompt);
-    const n = e?.action === "register" ? this.endpoints.register() : this.endpoints.authorize();
-    let a = e?.scope || this.scope;
-    const c = a ? a.split(" ") : [];
-    c.includes("openid") || c.unshift("openid"), a = c.join(" ");
-    const l = new URLSearchParams([
-      [
-        "client_id",
-        /** @type {string} */
-        this.clientId
-      ],
-      ["redirect_uri", s],
-      ["state", t],
-      ["response_mode", this.responseMode],
-      ["response_type", this.responseType],
-      ["scope", a]
-    ]);
-    if (this.#o && l.append("nonce", r), e?.prompt && l.append("prompt", e.prompt), typeof e?.maxAge == "number" && l.append("max_age", e.maxAge.toString()), e?.loginHint && l.append("login_hint", e.loginHint), e?.idpHint && l.append("kc_idp_hint", e.idpHint), e?.action && e.action !== "register" && l.append("kc_action", e.action), e?.locale && l.append("ui_locales", e.locale), e?.acr && l.append("claims", M(e.acr)), e?.acrValues && l.append("acr_values", e.acrValues), this.pkceMethod)
-      try {
-        const d = D(96), h = await N(this.pkceMethod, d);
-        o.pkceCodeVerifier = d, l.append("code_challenge", h), l.append("code_challenge_method", this.pkceMethod);
-      } catch (d) {
-        throw new Error("Failed to generate PKCE challenge.", { cause: d });
-      }
-    return this.#l.add(o), `${n}?${l.toString()}`;
-  };
-  /**
-   * @param {KeycloakLogoutOptions} [options]
-   * @returns {Promise<void>}
-   */
-  logout = (e) => this.#t.logout(e);
-  /**
-   * @param {KeycloakLogoutOptions} [options]
-   * @returns {string}
-   */
-  createLogoutUrl = (e) => {
-    const t = e?.logoutMethod ?? this.logoutMethod, r = this.endpoints.logout();
-    if (t === "POST")
-      return r;
-    const s = new URLSearchParams([
-      [
-        "client_id",
-        /** @type {string} */
-        this.clientId
-      ],
-      ["post_logout_redirect_uri", this.#t.redirectUri(e)]
-    ]);
-    return this.idToken && s.append("id_token_hint", this.idToken), `${r}?${s.toString()}`;
-  };
-  /**
-   * @param {KeycloakRegisterOptions} [options]
-   * @returns {Promise<void>}
-   */
-  register = (e) => this.#t.register(e);
-  /**
-   * @param {KeycloakRegisterOptions} [options]
-   * @returns {Promise<string>}
-   */
-  createRegisterUrl = (e) => this.createLoginUrl({ ...e, action: "register" });
-  /**
-   * @param {KeycloakAccountOptions} [options]
-   * @returns {string}
-   */
-  createAccountUrl = (e) => {
-    const t = this.#s();
-    if (!t)
-      throw new Error("Unable to create account URL, make sure the adapter is not configured using a generic OIDC provider.");
-    const r = new URLSearchParams([
-      [
-        "referrer",
-        /** @type {string} */
-        this.clientId
-      ],
-      ["referrer_uri", this.#t.redirectUri(e)]
-    ]);
-    return `${t}/account?${r.toString()}`;
-  };
-  /**
-   * @returns {Promise<void>}
-   */
-  accountManagement = () => this.#t.accountManagement();
-  /**
-   * @param {string} role
-   * @returns {boolean}
-   */
-  hasRealmRole = (e) => {
-    const t = this.realmAccess;
-    return !!t && t.roles.indexOf(e) >= 0;
-  };
-  /**
-   * @param {string} role
-   * @param {string} [resource]
-   * @returns {boolean}
-   */
-  hasResourceRole = (e, t) => {
-    if (!this.resourceAccess)
-      return !1;
-    const r = this.resourceAccess[t || /** @type {string} */
-    this.clientId];
-    return !!r && r.roles.indexOf(e) >= 0;
-  };
-  /**
-   * @returns {Promise<KeycloakProfile>}
-   */
-  loadUserProfile = async () => {
-    const e = this.#s();
-    if (!e)
-      throw new Error("Unable to load user profile, make sure the adapter is not configured using a generic OIDC provider.");
-    const t = `${e}/account`, r = await k(t, {
-      headers: [S(this.token)]
-    });
-    return this.profile = r;
-  };
-  /**
-   * @returns {Promise<{}>}
-   */
-  loadUserInfo = async () => {
-    const e = this.endpoints.userinfo(), t = await k(e, {
-      headers: [S(this.token)]
-    });
-    return this.userInfo = t;
-  };
-  /**
-   * @param {number} [minValidity]
-   * @returns {boolean}
-   */
-  isTokenExpired = (e) => {
-    if (!this.tokenParsed || !this.refreshToken && this.flow !== "implicit")
-      throw new Error("Not authenticated");
-    if (this.timeSkew == null)
-      return this.#n("[KEYCLOAK] Unable to determine if token is expired as timeskew is not set"), !0;
-    if (typeof this.tokenParsed.exp != "number")
-      return !1;
-    let t = this.tokenParsed.exp - Math.ceil((/* @__PURE__ */ new Date()).getTime() / 1e3) + this.timeSkew;
-    if (e) {
-      if (isNaN(e))
-        throw new Error("Invalid minValidity");
-      t -= e;
-    }
-    return t < 0;
-  };
-  /**
-   * @param {number} minValidity
-   * @returns {Promise<boolean>}
-   */
-  updateToken = async (e) => {
-    if (!this.refreshToken)
-      throw new Error("Unable to update token, no refresh token available.");
-    e = e || 5, this.#e.enable && await this.#d();
-    let t = !1;
-    if (e === -1 ? (t = !0, this.#n("[KEYCLOAK] Refreshing token: forced refresh")) : (!this.tokenParsed || this.isTokenExpired(e)) && (t = !0, this.#n("[KEYCLOAK] Refreshing token: token expired")), !t)
-      return !1;
-    const { promise: r, resolve: s, reject: o } = Promise.withResolvers();
-    if (this.#r.push({ resolve: s, reject: o }), this.#r.length === 1) {
-      const n = this.endpoints.token();
-      let a = (/* @__PURE__ */ new Date()).getTime();
-      try {
-        const c = await G(
-          n,
-          this.refreshToken,
-          /** @type {string} */
-          this.clientId
-        );
-        this.#n("[KEYCLOAK] Token refreshed"), a = (a + (/* @__PURE__ */ new Date()).getTime()) / 2, this.#h(c.access_token, c.refresh_token, c.id_token, a), this.onAuthRefreshSuccess?.();
-        for (let l = this.#r.pop(); l != null; l = this.#r.pop())
-          l.resolve(!0);
-      } catch (c) {
-        this.#u("[KEYCLOAK] Failed to refresh token"), c instanceof E && c.response.status === 400 && this.clearToken(), this.onAuthRefreshError?.();
-        for (let l = this.#r.pop(); l != null; l = this.#r.pop())
-          l.reject(c);
-      }
-    }
-    return await r;
-  };
-  clearToken = () => {
-    this.token && (this.#h(), this.onAuthLogout?.(), this.loginRequired && this.login());
-  };
-  /**
-   * @param {string} [token]
-   * @param {string} [refreshToken]
-   * @param {string} [idToken]
-   * @param {number} [timeLocal]
-   */
-  #h(e, t, r, s) {
-    if (this.tokenTimeoutHandle && (clearTimeout(this.tokenTimeoutHandle), this.tokenTimeoutHandle = void 0), t ? (this.refreshToken = t, this.refreshTokenParsed = b(t)) : (delete this.refreshToken, delete this.refreshTokenParsed), r ? (this.idToken = r, this.idTokenParsed = b(r)) : (delete this.idToken, delete this.idTokenParsed), e) {
-      if (this.token = e, this.tokenParsed = b(e), this.sessionId = this.tokenParsed.sid, this.authenticated = !0, this.subject = this.tokenParsed.sub, this.realmAccess = this.tokenParsed.realm_access, this.resourceAccess = this.tokenParsed.resource_access, s && (this.timeSkew = Math.floor(s / 1e3) - this.tokenParsed.iat), this.timeSkew !== null && (this.#n("[KEYCLOAK] Estimated time difference between browser and server is " + this.timeSkew + " seconds"), this.onTokenExpired)) {
-        const o = (this.tokenParsed.exp - (/* @__PURE__ */ new Date()).getTime() / 1e3 + this.timeSkew) * 1e3;
-        this.#n("[KEYCLOAK] Token expires in " + Math.round(o / 1e3) + " s"), o <= 0 ? this.onTokenExpired() : this.tokenTimeoutHandle = window.setTimeout(this.onTokenExpired, o);
-      }
-    } else
-      delete this.token, delete this.tokenParsed, delete this.subject, delete this.realmAccess, delete this.resourceAccess, this.authenticated = !1;
-  }
-  /**
-   * @returns {string=}
-   */
-  #s() {
-    if (!(typeof this.authServerUrl > "u"))
-      return `${_(this.authServerUrl)}/realms/${encodeURIComponent(
-        /** @type {string} */
-        this.realm
-      )}`;
-  }
-  /**
-   * @param {Function} fn
-   * @returns {(message: string) => void}
-   */
-  #b(e) {
-    return (t) => {
-      this.enableLogging && e.call(console, t);
-    };
-  }
-}
-function T() {
-  if (typeof crypto > "u" || typeof crypto.randomUUID > "u")
-    throw new Error("Web Crypto API is not available.");
-  return crypto.randomUUID();
-}
-function M(i) {
-  return JSON.stringify({
-    id_token: {
-      acr: i
-    }
-  });
-}
-function D(i) {
-  return K(i, "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789");
-}
-async function N(i, e) {
-  if (i !== "S256")
-    throw new TypeError(`Invalid value for 'pkceMethod', expected 'S256' but got '${i}'.`);
-  const t = new Uint8Array(await J(e));
-  return $(t).replace(/\+/g, "-").replace(/\//g, "_").replace(/=/g, "");
-}
-function K(i, e) {
-  const t = O(i), r = new Array(i);
-  for (let s = 0; s < i; s++)
-    r[s] = e.charCodeAt(t[s] % e.length);
-  return String.fromCharCode.apply(null, r);
-}
-function O(i) {
-  if (typeof crypto > "u" || typeof crypto.getRandomValues > "u")
-    throw new Error("Web Crypto API is not available.");
-  return crypto.getRandomValues(new Uint8Array(i));
-}
-function z(i, e, t) {
-  let r;
-  const s = new Promise(function(o, n) {
-    r = window.setTimeout(function() {
-      n(new Error(t));
-    }, e);
-  });
-  return Promise.race([i, s]).finally(function() {
-    clearTimeout(r);
-  });
-}
-function H() {
-  try {
-    return new j();
-  } catch {
-    return new W();
-  }
-}
-const g = "kc-callback-";
-class j {
-  constructor() {
-    globalThis.localStorage.setItem("kc-test", "test"), globalThis.localStorage.removeItem("kc-test");
-  }
-  /**
-   * @param {string} [state]
-   * @returns {CallbackState | null}
-   */
-  get(e) {
-    if (!e)
-      return null;
-    this.#r();
-    const t = g + e, r = globalThis.localStorage.getItem(t);
-    return r ? (globalThis.localStorage.removeItem(t), JSON.parse(r)) : null;
-  }
-  /**
-   * @param {CallbackState} state
-   */
-  add(e) {
-    this.#r();
-    const t = g + e.state, r = JSON.stringify({
-      ...e,
-      // Set the expiry time to 1 hour from now.
-      expires: Date.now() + 3600 * 1e3
-    });
-    try {
-      globalThis.localStorage.setItem(t, r);
-    } catch {
-      this.#t(), globalThis.localStorage.setItem(t, r);
-    }
-  }
-  /**
-   * Clears all values from local storage that are no longer valid.
-   */
-  #r() {
-    const e = Date.now();
-    for (const [t, r] of this.#o()) {
-      const s = this.#l(r);
-      (s === null || s < e) && globalThis.localStorage.removeItem(t);
-    }
-  }
-  /**
-   * Clears all known values from local storage.
-   */
-  #t() {
-    for (const [e] of this.#o())
-      globalThis.localStorage.removeItem(e);
-  }
-  /**
-   * Gets all entries stored in local storage that are known to be managed by this class.
-   * @returns {[string, string][]} An array of key-value pairs.
-   */
-  #o() {
-    return Object.entries(globalThis.localStorage).filter(([e]) => e.startsWith(g));
-  }
-  /**
-   * Parses the expiry time from a value stored in local storage.
-   * @param {string} value
-   * @returns {number | null} The expiry time in milliseconds, or `null` if the value is malformed.
-   */
-  #l(e) {
-    let t;
-    try {
-      t = JSON.parse(e);
-    } catch {
-      return null;
-    }
-    return v(t) && "expires" in t && typeof t.expires == "number" ? t.expires : null;
-  }
-}
-class W {
-  /**
-   * @param {string} [state]
-   * @returns {CallbackState | null}
-   */
-  get(e) {
-    if (!e)
-      return null;
-    const t = this.#r(g + e);
-    return this.#t(g + e, "", this.#o(-100)), t ? JSON.parse(t) : null;
-  }
-  /**
-   * @param {CallbackState} state
-   */
-  add(e) {
-    this.#t(g + e.state, JSON.stringify(e), this.#o(60));
-  }
-  /**
-   * @param {string} key
-   * @returns
-   */
-  #r(e) {
-    const t = e + "=", r = document.cookie.split(";");
-    for (let s = 0; s < r.length; s++) {
-      let o = r[s];
-      for (; o.charAt(0) === " "; )
-        o = o.substring(1);
-      if (o.indexOf(t) === 0)
-        return o.substring(t.length, o.length);
-    }
-    return "";
-  }
-  /**
-   * @param {string} key
-   * @param {string} value
-   * @param {Date} expirationDate
-   */
-  #t(e, t, r) {
-    const s = e + "=" + t + "; expires=" + r.toUTCString() + "; ";
-    document.cookie = s;
-  }
-  /**
-   * @param {number} minutes
-   * @returns {Date}
-   */
-  #o(e) {
-    const t = /* @__PURE__ */ new Date();
-    return t.setTime(t.getTime() + e * 60 * 1e3), t;
-  }
-}
-function $(i) {
-  const e = String.fromCodePoint(...i);
-  return btoa(e);
-}
-async function J(i) {
-  const t = new TextEncoder().encode(i);
-  if (typeof crypto > "u" || typeof crypto.subtle > "u")
-    throw new Error("Web Crypto API is not available.");
-  return await crypto.subtle.digest("SHA-256", t);
-}
-function b(i) {
-  const [, e] = i.split(".");
-  if (typeof e != "string")
-    throw new Error("Unable to decode token, payload not found.");
-  let t;
-  try {
-    t = Y(e);
-  } catch (r) {
-    throw new Error("Unable to decode token, payload is not a valid Base64URL value.", { cause: r });
-  }
-  try {
-    return JSON.parse(t);
-  } catch (r) {
-    throw new Error("Unable to decode token, payload is not a valid JSON value.", { cause: r });
-  }
-}
-function Y(i) {
-  let e = i.replaceAll("-", "+").replaceAll("_", "/");
-  switch (e.length % 4) {
-    case 0:
-      break;
-    case 2:
-      e += "==";
-      break;
-    case 3:
-      e += "=";
-      break;
-    default:
-      throw new Error("Input is not of the correct length.");
-  }
-  try {
-    return F(e);
-  } catch {
-    return atob(e);
-  }
-}
-function F(i) {
-  return decodeURIComponent(atob(i).replace(/(.)/g, (e, t) => {
-    let r = t.charCodeAt(0).toString(16).toUpperCase();
-    return r.length < 2 && (r = "0" + r), "%" + r;
-  }));
-}
-function v(i) {
-  return typeof i == "object" && i !== null;
-}
-async function q(i) {
-  return await k(i);
-}
-async function V(i) {
-  return await k(i);
-}
-async function B(i, e, t, r, s) {
-  const o = new URLSearchParams([
-    ["code", e],
-    ["grant_type", "authorization_code"],
-    ["client_id", t],
-    ["redirect_uri", r]
-  ]);
-  return s && o.append("code_verifier", s), await k(i, {
-    method: "POST",
-    credentials: "include",
-    body: o
-  });
-}
-async function G(i, e, t) {
-  const r = new URLSearchParams([
-    ["grant_type", "refresh_token"],
-    ["refresh_token", e],
-    ["client_id", t]
-  ]);
-  return await k(i, {
-    method: "POST",
-    credentials: "include",
-    body: r
-  });
-}
-async function k(i, e = {}) {
-  const t = new Headers(e.headers);
-  return t.set("Accept", R), await (await Q(i, {
-    ...e,
-    headers: t
-  })).json();
-}
-async function Q(i, e) {
-  const t = await fetch(i, e);
-  if (!t.ok)
-    throw new E("Server responded with an invalid status.", { response: t });
-  return t;
-}
-function S(i) {
-  if (!i)
-    throw new Error("Unable to build authorization header, token is not set, make sure the user is authenticated.");
-  return ["Authorization", `bearer ${i}`];
-}
-function _(i) {
-  return i.endsWith("/") ? i.slice(0, -1) : i;
-}
-class E extends Error {
-  /** @type {Response} */
-  response;
-  /**
-   * @param {string} message
-   * @param {NetworkErrorOptions} options
-   */
-  constructor(e, t) {
-    super(e, t), this.response = t.response;
-  }
-}
-const X = (i) => new Promise((e) => setTimeout(e, i));
-class U extends x {
-  constructor(e) {
-    super(e);
+import { ref as k, markRaw as p, watch as g, inject as y } from "vue";
+import f from "keycloak-js";
+const c = "GHENTCDH_AUTHENTICATION";
+class i extends f {
+  constructor(t) {
+    super(t);
   }
   async initialize() {
     try {
-      const e = await this.init({
+      const t = await this.init({
         onLoad: "login-required"
       });
-      console.log(e ? "User is authenticated" : "User is not authenticated");
-    } catch (e) {
-      console.error("Failed to initialize adapter:", e);
+      console.log(t ? "User is authenticated" : "User is not authenticated");
+    } catch (t) {
+      console.error("Failed to initialize adapter:", t);
     }
   }
-  static async init(e) {
-    const t = new U(e);
-    return console.log("KeycloakAdapter", e), await t.initialize(), t;
+  static async init(t) {
+    const n = new i(t);
+    return console.log("KeycloakAdapter", t), await n.initialize(), n;
   }
   get userInfo() {
     return this.idTokenParsed;
@@ -1168,44 +29,44 @@ class U extends x {
     return this.authenticated ?? !1;
   }
 }
-const Z = {
+const w = {
   skipAuthentication: !1
-}, te = (i) => {
-  const e = A(!1);
-  let t;
-  const r = { ...Z, ...i }, s = async () => {
-    const h = await U.init(i.keycloak);
-    return t = h, e.value = !0, h;
-  }, o = () => t?.token, n = async () => {
-    if (!t)
-      return s();
-    e.value || await new Promise((h) => {
-      const f = P(e, (p) => {
-        p && (f(), h());
+}, C = (o) => {
+  const t = k(!1);
+  let n;
+  const s = { ...w, ...o }, u = async () => {
+    const e = await i.init(o.keycloak);
+    return n = e, t.value = !0, e;
+  }, l = () => n?.token, a = async () => {
+    if (!n)
+      return u();
+    t.value || await new Promise((e) => {
+      const d = g(t, (h) => {
+        h && (d(), e());
       });
     });
-  }, d = I({
-    install(h) {
-      h.runWithContext(() => {
-        h.config.globalProperties.$auth = r, h.provide(C, d);
+  }, r = p({
+    install(e) {
+      e.runWithContext(() => {
+        e.config.globalProperties.$auth = s, e.provide(c, r);
       });
     },
-    updateToken: async () => (await n())?.updateToken(),
-    token: o,
-    user: async () => (await n())?.userInfo,
-    logout: async () => (await n())?.logout(),
-    options: r
+    updateToken: async () => (await a())?.updateToken(),
+    token: l,
+    user: async () => (await a())?.userInfo,
+    logout: async () => (await a())?.logout(),
+    options: s
   });
-  return d;
-}, re = () => {
-  const i = L(C);
-  return i || console.warn("No auth provided, authorized calls may not work"), {
-    isAuthenticated: () => !!i?.user(),
-    getUser: () => i?.user(),
-    logout: () => i?.logout()
+  return r;
+}, I = () => {
+  const o = y(c);
+  return o || console.warn("No auth provided, authorized calls may not work"), {
+    isAuthenticated: () => !!o?.user(),
+    getUser: () => o?.user(),
+    logout: () => o?.logout()
   };
 };
 export {
-  te as createAuth,
-  re as useAuthenticate
+  C as createAuth,
+  I as useAuthenticate
 };

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@ghentcdh/authentication-vue",
   "license": "MIT",
-  "version": "0.5.0",
+  "version": "0.6.0",
   "main": "./index.js",
   "types": "./index.d.ts",
   "dependencies": {