@multiplatform.one/keycloak 0.7.15 → 0.7.17

package/lib/{chunk-64PPU7Q3.mjs → chunk-JAFUI2JQ.mjs}

@@ -1,10 +1,6 @@
 // src/authConfig.ts
 import { createContext } from "react";
-var defaultAuthConfig = {
-  ensureFreshness: true,
-  persist: false,
-  ssr: false
-};
+var defaultAuthConfig = {};
 var AuthConfigContext = createContext(defaultAuthConfig);
 
 export {

package/lib/{chunk-NXTVYIBR.mjs → chunk-L3HTVJ4B.mjs}

@@ -2,6 +2,8 @@
 import { MultiPlatform } from "multiplatform.one";
 import { useRouter } from "next/router";
 function useTokensFromQuery() {
+  if (!MultiPlatform.isIframe)
+    return false;
   const { query } = MultiPlatform.isNext ? useRouter() : { query: {} };
   return "idToken" in query || "token" in query || "refreshToken" in query;
 }

package/lib/chunk-MDAAMGTE.js

@@ -0,0 +1 @@
+"use strict";

package/lib/chunk-NH335CDK.js

@@ -0,0 +1,32 @@
+"use strict";Object.defineProperty(exports, "__esModule", {value: true}); function _interopRequireWildcard(obj) { if (obj && obj.__esModule) { return obj; } else { var newObj = {}; if (obj != null) { for (var key in obj) { if (Object.prototype.hasOwnProperty.call(obj, key)) { newObj[key] = obj[key]; } } } newObj.default = obj; return newObj; } }// src/session/session.ts
+var _multiplatformone = require('multiplatform.one');
+var _react = require('next-auth/react');
+var _getServerSession;
+async function getSession() {
+  if (_multiplatformone.MultiPlatform.isServer) {
+    if (typeof _getServerSession === "function")
+      return _getServerSession();
+    const getSession2 = (await Promise.resolve().then(() => _interopRequireWildcard(require("next-auth")))).getServerSession;
+    _getServerSession = () => getSession2();
+    return _getServerSession();
+  }
+  return _react.getSession.call(void 0, );
+}
+var useSession = (options) => {
+  return {};
+};
+if (_multiplatformone.MultiPlatform.isNext) {
+  useSession = exports.useSession = (options) => {
+    const nextSession = _react.useSession.call(void 0, options);
+    return {
+      update: nextSession.update,
+      status: nextSession.status,
+      session: nextSession.data
+    };
+  };
+}
+
+
+
+
+exports.getSession = getSession; exports.useSession = useSession;

package/lib/chunk-OA5TSQWZ.mjs

@@ -0,0 +1,50 @@
+import {
+  useTokensFromQuery
+} from "./chunk-L3HTVJ4B.mjs";
+import {
+  useAuthConfig
+} from "./chunk-HTWZLBA4.mjs";
+import {
+  useTokensFromState
+} from "./chunk-UKSHA3X3.mjs";
+import {
+  useKeycloak
+} from "./chunk-UH4K7HGE.mjs";
+
+// src/Authenticated.tsx
+import React, { useEffect } from "react";
+import { MultiPlatform } from "multiplatform.one";
+function Authenticated({ children, disabled, loggedOutComponent, loadingComponent }) {
+  const authConfig = useAuthConfig();
+  const keycloak = useKeycloak();
+  const tokensFromQuery = useTokensFromQuery();
+  const tokensFromState = useTokensFromState();
+  useEffect(() => {
+    if (!keycloak || MultiPlatform.isIframe || MultiPlatform.isServer || keycloak.authenticated || tokensFromQuery || tokensFromState) {
+      return;
+    }
+    keycloak.login({
+      redirectUri: authConfig.loginRedirectUri
+    });
+  }, [keycloak]);
+  if (typeof disabled === "undefined")
+    disabled = authConfig.disabled;
+  if (disabled)
+    return /* @__PURE__ */ React.createElement(React.Fragment, null, children);
+  if (typeof keycloak === "undefined") {
+    const LoadingComponent = loadingComponent;
+    return LoadingComponent ? /* @__PURE__ */ React.createElement(LoadingComponent, null) : /* @__PURE__ */ React.createElement(React.Fragment, null, authConfig.debug ? "loading" : null);
+  }
+  if (keycloak.authenticated)
+    return /* @__PURE__ */ React.createElement(React.Fragment, null, children);
+  const LoggedOutComponent = loggedOutComponent;
+  return LoggedOutComponent ? /* @__PURE__ */ React.createElement(LoggedOutComponent, null) : /* @__PURE__ */ React.createElement(React.Fragment, null, authConfig.debug ? "not authenticated" : null);
+}
+function withAuthenticated(Component) {
+  return (props) => /* @__PURE__ */ React.createElement(Authenticated, null, /* @__PURE__ */ React.createElement(Component, { ...props }));
+}
+
+export {
+  Authenticated,
+  withAuthenticated
+};

package/lib/chunk-OZLV3US5.js

@@ -0,0 +1,245 @@
+"use strict";Object.defineProperty(exports, "__esModule", {value: true}); function _interopRequireDefault(obj) { return obj && obj.__esModule ? obj : { default: obj }; } function _optionalChain(ops) { let lastAccessLHS = undefined; let value = ops[0]; let i = 1; while (i < ops.length) { const op = ops[i]; const fn = ops[i + 1]; i += 2; if ((op === 'optionalAccess' || op === 'optionalCall') && value == null) { return undefined; } if (op === 'access' || op === 'optionalAccess') { lastAccessLHS = value; value = fn(value); } else if (op === 'call' || op === 'optionalCall') { value = fn((...args) => value.call(lastAccessLHS, ...args)); lastAccessLHS = undefined; } } return value; }
+
+var _chunk2BKS6UM5js = require('./chunk-2BKS6UM5.js');
+
+
+var _chunk3ZTSLDX7js = require('./chunk-3ZTSLDX7.js');
+
+
+var _chunkZW4GP2I5js = require('./chunk-ZW4GP2I5.js');
+
+
+var _chunkYACGLW5Qjs = require('./chunk-YACGLW5Q.js');
+
+
+
+var _chunkA2V2S4HPjs = require('./chunk-A2V2S4HP.js');
+
+
+var _chunk2VDDEPLFjs = require('./chunk-2VDDEPLF.js');
+
+// src/provider/AuthProvider/AuthProvider.tsx
+var _keycloakjs = require('keycloak-js'); var _keycloakjs2 = _interopRequireDefault(_keycloakjs);
+var _react = require('react'); var _react2 = _interopRequireDefault(_react);
+var _multiplatformone = require('multiplatform.one');
+var _react3 = require('next-auth/react');
+var _router = require('next/router');
+var logger = console;
+function AuthProvider({ children, sessionProvider, keycloakInitOptions, keycloakConfig }) {
+  const { debug, messageHandlerKeys } = _chunk3ZTSLDX7js.useAuthConfig.call(void 0, );
+  const { query } = _multiplatformone.MultiPlatform.isNext ? _router.useRouter.call(void 0, ) : { query: {} };
+  const authState = _chunkA2V2S4HPjs.useAuthState.call(void 0, );
+  const [keycloak, setKeycloak] = _react.useState.call(void 0, );
+  const [refreshToken, setRefreshToken] = _react.useState.call(void 0, 
+    _chunk2VDDEPLFjs.validToken.call(void 0, 
+      _multiplatformone.MultiPlatform.isIframe ? "refreshToken" in query && (_optionalChain([query, 'access', _ => _.refreshToken, 'optionalAccess', _2 => _2.toString, 'call', _3 => _3()]) || true) || _chunkA2V2S4HPjs.persist && authState.refreshToken || false : void 0
+    )
+  );
+  const [token, setToken] = _react.useState.call(void 0, 
+    _chunk2VDDEPLFjs.validToken.call(void 0, 
+      _multiplatformone.MultiPlatform.isIframe ? "token" in query && (_optionalChain([query, 'access', _4 => _4.token, 'optionalAccess', _5 => _5.toString, 'call', _6 => _6()]) || true) || _chunkA2V2S4HPjs.persist && authState.token || false : void 0,
+      refreshToken
+    )
+  );
+  const [idToken, setIdToken] = _react.useState.call(void 0, 
+    _chunk2VDDEPLFjs.validToken.call(void 0, 
+      _multiplatformone.MultiPlatform.isIframe ? "idToken" in query && (_optionalChain([query, 'access', _7 => _7.idToken, 'optionalAccess', _8 => _8.toString, 'call', _9 => _9()]) || true) || _chunkA2V2S4HPjs.persist && authState.idToken || false : void 0,
+      refreshToken
+    )
+  );
+  _react.useEffect.call(void 0, () => {
+    if (token !== true && refreshToken !== true && idToken !== true)
+      return;
+    if (debug)
+      logger.debug("post message", JSON.stringify({ type: "LOADED" }));
+    (messageHandlerKeys || []).forEach((key) => {
+      _optionalChain([window, 'optionalAccess', _10 => _10.webkit, 'optionalAccess', _11 => _11.messageHandlers, 'optionalAccess', _12 => _12[key], 'optionalAccess', _13 => _13.postMessage, 'call', _14 => _14(JSON.stringify({ type: "LOADED" }))]);
+    });
+    _optionalChain([window, 'optionalAccess', _15 => _15.ReactNativeWebView, 'optionalAccess', _16 => _16.postMessage, 'call', _17 => _17(JSON.stringify({ type: "LOADED" }))]);
+    _optionalChain([window, 'optionalAccess', _18 => _18.parent, 'optionalAccess', _19 => _19.postMessage, 'call', _20 => _20(JSON.stringify({ type: "LOADED" }))]);
+  }, []);
+  _react.useEffect.call(void 0, () => {
+    if (refreshToken !== true)
+      return;
+    const messageCallback = (e) => {
+      let data = _optionalChain([e, 'optionalAccess', _21 => _21.data]) || null;
+      if (typeof data === "string") {
+        try {
+          data = JSON.parse(data);
+        } catch (err) {
+        }
+      }
+      if (debug)
+        logger.debug("received message", JSON.stringify(data));
+      const message = data;
+      if (!message.type)
+        return;
+      if (message.type.toUpperCase() === "REFRESH_TOKEN" && message.payload) {
+        if (debug)
+          logger.debug("setting refresh token", message.payload);
+        setRefreshToken(_chunk2VDDEPLFjs.validToken.call(void 0, message.payload));
+        window.removeEventListener("message", messageCallback);
+      }
+    };
+    if (debug) {
+      logger.debug(
+        "listening for message",
+        JSON.stringify({
+          type: "REFRESH_TOKEN",
+          payload: "<some_refresh_token>"
+        })
+      );
+    }
+    window.addEventListener("message", messageCallback);
+    return () => {
+      window.removeEventListener("message", messageCallback);
+    };
+  }, []);
+  _react.useEffect.call(void 0, () => {
+    if (token !== true)
+      return;
+    const messageCallback = (e) => {
+      let data = _optionalChain([e, 'optionalAccess', _22 => _22.data]) || null;
+      if (typeof data === "string") {
+        try {
+          data = JSON.parse(data);
+        } catch (err) {
+        }
+      }
+      if (debug)
+        logger.debug("received message", JSON.stringify(data));
+      const message = data;
+      if (!message.type)
+        return;
+      if (message.type.toUpperCase() === "TOKEN" && message.payload) {
+        if (debug)
+          logger.debug("setting token", message.payload);
+        setToken(_chunk2VDDEPLFjs.validToken.call(void 0, message.payload, refreshToken));
+        window.removeEventListener("message", messageCallback);
+      }
+    };
+    if (debug) {
+      logger.debug(
+        "listening for message",
+        JSON.stringify({
+          type: "TOKEN",
+          payload: "<some_token>"
+        })
+      );
+    }
+    window.addEventListener("message", messageCallback);
+    return () => {
+      window.removeEventListener("message", messageCallback);
+    };
+  }, []);
+  _react.useEffect.call(void 0, () => {
+    if (idToken !== true)
+      return;
+    const messageCallback = (e) => {
+      let data = _optionalChain([e, 'optionalAccess', _23 => _23.data]) || null;
+      if (typeof data === "string") {
+        try {
+          data = JSON.parse(data);
+        } catch (err) {
+        }
+      }
+      if (debug)
+        logger.debug("received message", JSON.stringify(data));
+      const message = data;
+      if (!message.type)
+        return;
+      if (message.type.toUpperCase() === "ID_TOKEN" && message.payload) {
+        if (debug)
+          logger.debug("setting id token", message.payload);
+        setIdToken(_chunk2VDDEPLFjs.validToken.call(void 0, message.payload, refreshToken));
+        window.removeEventListener("message", messageCallback);
+      }
+    };
+    if (debug) {
+      logger.debug(
+        "listening for message",
+        JSON.stringify({
+          type: "ID_TOKEN",
+          payload: "<some_id_token>"
+        })
+      );
+    }
+    window.addEventListener("message", messageCallback);
+    return () => {
+      window.removeEventListener("message", messageCallback);
+    };
+  }, []);
+  const keycloakClient = _react.useMemo.call(void 0, 
+    () => _multiplatformone.MultiPlatform.isIframe && keycloakConfig ? new (0, _keycloakjs2.default)({
+      url: keycloakConfig.url,
+      realm: keycloakConfig.realm,
+      clientId: keycloakConfig.clientId
+    }) : void 0,
+    [keycloakInitOptions, keycloakConfig, token, refreshToken, idToken]
+  );
+  const initOptions = _react.useMemo.call(void 0, () => {
+    if (!_multiplatformone.MultiPlatform.isIframe)
+      return;
+    const initOptions2 = {
+      ...defaultKeycloakInitOptions,
+      ...keycloakInitOptions
+    };
+    if (debug)
+      initOptions2.enableLogging = true;
+    if (token && typeof token === "string") {
+      initOptions2.token = token;
+      initOptions2.timeSkew = 0;
+      if (idToken && typeof idToken === "string")
+        initOptions2.idToken = idToken;
+      if (refreshToken && typeof refreshToken === "string")
+        initOptions2.refreshToken = refreshToken;
+    }
+    if (typeof window !== "undefined" && window.self !== window.top || token && !refreshToken) {
+      initOptions2.checkLoginIframe = false;
+      initOptions2.flow = "implicit";
+      initOptions2.onLoad = void 0;
+    }
+    return initOptions2;
+  }, [keycloakInitOptions, token, idToken, refreshToken]);
+  _react.useEffect.call(void 0, () => {
+    function onError() {
+      if (keycloakClient && initOptions)
+        setKeycloak(new (0, _chunkZW4GP2I5js.Keycloak)(keycloakClient));
+    }
+    function onUpdate() {
+      if (keycloakClient && initOptions)
+        setKeycloak(new (0, _chunkZW4GP2I5js.Keycloak)(keycloakClient));
+    }
+    if (keycloakClient && initOptions) {
+      (async () => {
+        keycloakClient.onAuthError = onError;
+        keycloakClient.onAuthLogout = onUpdate;
+        keycloakClient.onAuthRefreshError = onError;
+        keycloakClient.onAuthRefreshSuccess = onUpdate;
+        keycloakClient.onAuthSuccess = onUpdate;
+        keycloakClient.onReady = onUpdate;
+        keycloakClient.onTokenExpired = async () => {
+          try {
+            await keycloakClient.updateToken(5);
+          } catch (err) {
+            setKeycloak(new (0, _chunkZW4GP2I5js.Keycloak)());
+          }
+        };
+        const authenticated = await keycloakClient.init(initOptions);
+        setKeycloak(new (0, _chunkZW4GP2I5js.Keycloak)(authenticated ? keycloakClient : void 0));
+      })();
+    }
+  }, []);
+  return /* @__PURE__ */ _react2.default.createElement(_react3.SessionProvider, { ...sessionProvider }, /* @__PURE__ */ _react2.default.createElement(_chunkYACGLW5Qjs.KeycloakContext.Provider, { value: keycloak }, /* @__PURE__ */ _react2.default.createElement(_chunk2BKS6UM5js.AfterAuth, null, children)));
+}
+var defaultKeycloakInitOptions = {
+  checkLoginIframe: true,
+  checkLoginIframeInterval: 5,
+  enableLogging: false,
+  onLoad: "check-sso",
+  pkceMethod: "S256"
+};
+
+
+
+exports.AuthProvider = AuthProvider;

package/lib/chunk-P57PW2II.js

@@ -0,0 +1,11 @@
+"use strict";Object.defineProperty(exports, "__esModule", {value: true});var __require = /* @__PURE__ */ ((x) => typeof require !== "undefined" ? require : typeof Proxy !== "undefined" ? new Proxy(x, {
+  get: (a, b) => (typeof require !== "undefined" ? require : a)[b]
+}) : x)(function(x) {
+  if (typeof require !== "undefined")
+    return require.apply(this, arguments);
+  throw Error('Dynamic require of "' + x + '" is not supported');
+});
+
+
+
+exports.__require = __require;

package/lib/chunk-TUJRPTZE.js

@@ -0,0 +1,13 @@
+"use strict";Object.defineProperty(exports, "__esModule", {value: true});// src/hooks/useTokensFromQuery/index.ts
+var _multiplatformone = require('multiplatform.one');
+var _router = require('next/router');
+function useTokensFromQuery() {
+  if (!_multiplatformone.MultiPlatform.isIframe)
+    return false;
+  const { query } = _multiplatformone.MultiPlatform.isNext ? _router.useRouter.call(void 0, ) : { query: {} };
+  return "idToken" in query || "token" in query || "refreshToken" in query;
+}
+
+
+
+exports.useTokensFromQuery = useTokensFromQuery;

package/lib/chunk-UH4K7HGE.mjs

@@ -0,0 +1,163 @@
+import {
+  KeycloakContext
+} from "./chunk-2L5TXBDK.mjs";
+import {
+  getSession,
+  useSession
+} from "./chunk-FU4CT24B.mjs";
+
+// src/keycloak/keycloak.ts
+import { MultiPlatform } from "multiplatform.one";
+import { jwtDecode } from "jwt-decode";
+import { signIn, signOut } from "next-auth/react";
+import { useContext } from "react";
+var Keycloak = class {
+  token;
+  idToken;
+  refreshToken;
+  _idTokenParsed;
+  _refreshTokenParsed;
+  _tokenParsed;
+  keycloakClient;
+  mock;
+  constructor(input, idToken, refreshToken) {
+    if (typeof input === "string") {
+      this.token = input;
+      this.idToken = idToken;
+      this.refreshToken = refreshToken;
+    } else if (typeof input === "object") {
+      if (typeof input.init === "function") {
+        this.keycloakClient = input;
+      } else if (input.accessToken) {
+        const session = input;
+        this.token = session.accessToken;
+        this.idToken = session.idToken;
+        this.refreshToken = session.refreshToken;
+      } else {
+        this.mock = input;
+      }
+    }
+    if (this.token && !this._tokenParsed)
+      this._tokenParsed = jwtDecode(this.token);
+    if (this.idToken && !this._idTokenParsed)
+      this._idTokenParsed = jwtDecode(this.idToken);
+    if (this.refreshToken && !this._refreshTokenParsed) {
+      this._refreshTokenParsed = jwtDecode(this.refreshToken);
+    }
+  }
+  get tokenParsed() {
+    if (this.keycloakClient)
+      return this.keycloakClient.tokenParsed;
+    return this._tokenParsed;
+  }
+  get idTokenParsed() {
+    if (this.keycloakClient)
+      return this.keycloakClient.idTokenParsed;
+    return this._idTokenParsed;
+  }
+  get refreshTokenParsed() {
+    if (this.keycloakClient)
+      return this.keycloakClient.refreshTokenParsed;
+    return this._refreshTokenParsed;
+  }
+  get clientId() {
+    if (this.keycloakClient)
+      return this.keycloakClient.clientId;
+    return this.tokenParsed?.azp;
+  }
+  get email() {
+    if (this.keycloakClient)
+      return this.keycloakClient.tokenParsed?.email;
+    if (this.mock)
+      return this.mock.email;
+    return this.tokenParsed?.email;
+  }
+  get realm() {
+    if (this.keycloakClient)
+      return this.keycloakClient.realm;
+    return this.tokenParsed?.iss?.split("/").pop();
+  }
+  get realmAccess() {
+    if (this.keycloakClient)
+      return this.keycloakClient.realmAccess;
+    return this.tokenParsed?.realm_access;
+  }
+  get resourceAccess() {
+    if (this.keycloakClient)
+      return this.keycloakClient.resourceAccess;
+    return this.tokenParsed?.resource_access;
+  }
+  get sessionId() {
+    if (this.keycloakClient)
+      return this.keycloakClient.sessionId;
+    return this.tokenParsed?.session_state;
+  }
+  get subject() {
+    if (this.keycloakClient)
+      return this.keycloakClient.subject;
+    return this.tokenParsed?.sub;
+  }
+  get username() {
+    if (this.mock)
+      return this.mock.username;
+    return this.tokenParsed?.preferred_username;
+  }
+  async login(options = {}) {
+    if (this.keycloakClient) {
+      await this.keycloakClient.login(options);
+    } else if (MultiPlatform.isNext && !MultiPlatform.isServer) {
+      await signIn("keycloak", {
+        callbackUrl: options.redirectUri
+      });
+    }
+  }
+  async logout(options = {}) {
+    if (this.keycloakClient) {
+      await this.keycloakClient.logout(options);
+    } else if (MultiPlatform.isNext && !MultiPlatform.isServer) {
+      await fetch("/api/auth/logout", { method: "GET" });
+      await signOut({
+        callbackUrl: options.redirectUri
+      });
+    }
+  }
+  get authenticated() {
+    if (this.mock)
+      return true;
+    if (this.keycloakClient)
+      return !!this.keycloakClient.authenticated;
+    if (!this.tokenParsed?.exp || !this.idToken)
+      return false;
+    return this.tokenParsed.exp > Date.now() / 1e3;
+  }
+};
+function useKeycloak() {
+  const keycloak = useContext(KeycloakContext);
+  if (keycloak)
+    return keycloak;
+  const { session, status } = useSession();
+  if (MultiPlatform.isServer)
+    return;
+  if (MultiPlatform.isStorybook) {
+    return new Keycloak({
+      email: "storybook@example.com",
+      username: "storybook"
+    });
+  } else if (status === "unauthenticated") {
+    return new Keycloak();
+  } else if (status === "authenticated" && session?.accessToken) {
+    return new Keycloak(session);
+  }
+}
+async function getKeycloak() {
+  const session = await getSession();
+  if (session?.accessToken)
+    return new Keycloak(session);
+  return new Keycloak();
+}
+
+export {
+  Keycloak,
+  useKeycloak,
+  getKeycloak
+};

package/lib/{chunk-UOKDJT5L.mjs → chunk-UKSHA3X3.mjs}

@@ -1,9 +1,9 @@
 import {
   useAuthState
-} from "./chunk-AD6VPMID.mjs";
+} from "./chunk-WMH347OL.mjs";
 import {
   validToken
-} from "./chunk-7MTPH6XK.mjs";
+} from "./chunk-6FRYV4MK.mjs";
 
 // src/hooks/useTokensFromState.ts
 function useTokensFromState() {

package/lib/chunk-VS4M7GMO.js

@@ -0,0 +1 @@
+"use strict";

package/lib/{chunk-AD6VPMID.mjs → chunk-WMH347OL.mjs}

@@ -1,6 +1,7 @@
-// src/state/index.ts
+// src/state.ts
 import { createStateStore } from "multiplatform.one/zustand";
-import { config } from "app/config";
+import { MultiPlatform } from "multiplatform.one";
+var persist = MultiPlatform.isIframe || !MultiPlatform.isNext && !MultiPlatform.isServer;
 var { useStore } = createStateStore(
   "auth",
   {
@@ -9,12 +10,13 @@ var { useStore } = createStateStore(
     token: ""
   },
   void 0,
-  { persist: config.get("KEYCLOAK_PERSIST") === "1" }
+  { persist }
 );
 function useAuthState() {
   return useStore();
 }
 
 export {
+  persist,
   useAuthState
 };

package/lib/chunk-WS4IMGVL.js

@@ -0,0 +1 @@
+"use strict";

package/lib/chunk-X53FOCXA.js

@@ -0,0 +1,28 @@
+"use strict";Object.defineProperty(exports, "__esModule", {value: true}); function _interopRequireDefault(obj) { return obj && obj.__esModule ? obj : { default: obj }; }
+
+var _chunkOZLV3US5js = require('./chunk-OZLV3US5.js');
+
+
+var _chunk32AVT4GAjs = require('./chunk-32AVT4GA.js');
+
+// src/provider/KeycloakProvider.tsx
+var _react = require('react'); var _react2 = _interopRequireDefault(_react);
+function KeycloakProvider({ children, debug, realm, clientId, baseUrl, session }) {
+  const authConfig = _react.useMemo.call(void 0, () => ({ debug }), [debug]);
+  return /* @__PURE__ */ _react2.default.createElement(_chunk32AVT4GAjs.AuthConfigContext.Provider, { value: authConfig }, /* @__PURE__ */ _react2.default.createElement(
+    _chunkOZLV3US5js.AuthProvider,
+    {
+      sessionProvider: { session },
+      keycloakConfig: {
+        realm: realm || "main",
+        clientId: clientId || "app",
+        url: baseUrl
+      }
+    },
+    children
+  ));
+}
+
+
+
+exports.KeycloakProvider = KeycloakProvider;

package/lib/chunk-Y23BWOII.mjs

@@ -0,0 +1,51 @@
+import {
+  useAuthConfig
+} from "./chunk-HTWZLBA4.mjs";
+import {
+  useKeycloak
+} from "./chunk-UH4K7HGE.mjs";
+import {
+  persist,
+  useAuthState
+} from "./chunk-WMH347OL.mjs";
+
+// src/provider/AfterAuth.tsx
+import React, { useEffect } from "react";
+var logger = console;
+function AfterAuth({ children }) {
+  const authConfig = useAuthConfig();
+  const authState = useAuthState();
+  const keycloak = useKeycloak();
+  useEffect(() => {
+    if (!persist || !keycloak?.authenticated)
+      return;
+    if (keycloak.token) {
+      authState.setToken(keycloak.token);
+      if (keycloak.idToken)
+        authState.setIdToken(keycloak.idToken);
+      if (keycloak.refreshToken)
+        authState.setRefreshToken(keycloak.refreshToken);
+    }
+  }, [keycloak?.authenticated, keycloak?.token, keycloak?.idToken, keycloak?.refreshToken]);
+  useEffect(() => {
+    if (authConfig.debug && keycloak?.token)
+      logger.debug("token", keycloak.token);
+  }, [keycloak?.token]);
+  useEffect(() => {
+    if (authConfig.debug && keycloak?.idToken)
+      logger.debug("idToken", keycloak.idToken);
+  }, [keycloak?.idToken]);
+  useEffect(() => {
+    if (authConfig.debug && keycloak?.refreshToken)
+      logger.debug("refreshToken", keycloak.refreshToken);
+  }, [keycloak?.refreshToken]);
+  useEffect(() => {
+    if (keycloak?.authenticated)
+      logger.debug("authenticated", keycloak.authenticated);
+  }, [keycloak?.authenticated]);
+  return /* @__PURE__ */ React.createElement(React.Fragment, null, children);
+}
+
+export {
+  AfterAuth
+};