@multiplatform.one/keycloak 2.0.10 → 2.0.12

package/dist/cjs/provider/AuthProvider/index.cjs

@@ -1,18 +1,223 @@
+var __create = Object.create;
 var __defProp = Object.defineProperty;
 var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
 var __getOwnPropNames = Object.getOwnPropertyNames;
-var __hasOwnProp = Object.prototype.hasOwnProperty;
-var __copyProps = (to, from, except, desc) => {
+var __getProtoOf = Object.getPrototypeOf,
+  __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+    for (var name in all) __defProp(target, name, {
+      get: all[name],
+      enumerable: !0
+    });
+  },
+  __copyProps = (to, from, except, desc) => {
     if (from && typeof from == "object" || typeof from == "function") for (let key of __getOwnPropNames(from)) !__hasOwnProp.call(to, key) && key !== except && __defProp(to, key, {
       get: () => from[key],
       enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable
     });
     return to;
-  },
-  __reExport = (target, mod, secondTarget) => (__copyProps(target, mod, "default"), secondTarget && __copyProps(secondTarget, mod, "default"));
-var __toCommonJS = mod => __copyProps(__defProp({}, "__esModule", {
-  value: !0
-}), mod);
+  };
+var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(
+  // If the importer is in node compatibility mode or this is not an ESM
+  // file that has been converted to a CommonJS file using a Babel-
+  // compatible transform (i.e. "__esModule" has not been set), then set
+  // "default" to the CommonJS "module.exports" for node compatibility.
+  isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", {
+    value: mod,
+    enumerable: !0
+  }) : target, mod)),
+  __toCommonJS = mod => __copyProps(__defProp({}, "__esModule", {
+    value: !0
+  }), mod);
 var AuthProvider_exports = {};
+__export(AuthProvider_exports, {
+  AuthProvider: () => AuthProvider
+});
 module.exports = __toCommonJS(AuthProvider_exports);
-__reExport(AuthProvider_exports, require("./AuthProvider.cjs"), module.exports);
+var import_keycloak_js = __toESM(require("keycloak-js")),
+  import_multiplatform = require("multiplatform.one"),
+  import_react = require("next-auth/react"),
+  import_react2 = require("react"),
+  import_Loading = require("../../Loading.cjs"),
+  import_hooks = require("../../hooks/index.cjs"),
+  import_context = require("../../keycloak/context.cjs"),
+  import_keycloak = require("../../keycloak/index.cjs"),
+  import_state = require("../../state.cjs"),
+  import_token = require("../../token.cjs"),
+  import_AfterAuth = require("../AfterAuth.cjs"),
+  import_shared = require("./shared.cjs"),
+  import_jsx_runtime = require("react/jsx-runtime");
+function AuthProvider({
+  children,
+  disabled,
+  keycloakConfig,
+  keycloakInitOptions,
+  loadingComponent,
+  sessionProvider
+}) {
+  const {
+      debug,
+      messageHandlerKeys,
+      iframeSso
+    } = (0, import_hooks.useAuthConfig)(),
+    query = new URLSearchParams(import_multiplatform.isWindowDefined && window?.location?.search || ""),
+    authStore = (0, import_state.useAuthStore)(),
+    [keycloak, setKeycloak] = (0, import_react2.useState)(),
+    idTokenQuery = query.get("idToken"),
+    refreshTokenQuery = query.get("refreshToken"),
+    tokenQuery = query.get("token"),
+    [listeningRefreshToken, setListeningRefreshToken] = (0, import_react2.useState)(!1),
+    [listeningToken, setListeningToken] = (0, import_react2.useState)(!1),
+    [listeningIdToken, setListeningIdToken] = (0, import_react2.useState)(!1),
+    [loadedMessagePosted, setLoadedMessagePosted] = (0, import_react2.useState)(!1),
+    initialRefreshTokenQuery = (0, import_react2.useMemo)(() => (0, import_token.validOrRefreshableToken)(!iframeSso && import_multiplatform.isIframe || typeof refreshTokenQuery == "string" ? refreshTokenQuery || !0 : void 0), [refreshTokenQuery, iframeSso]),
+    initialIdTokenQuery = (0, import_react2.useMemo)(() => (0, import_token.validOrRefreshableToken)(!iframeSso && import_multiplatform.isIframe || typeof idTokenQuery == "string" ? idTokenQuery || !0 : void 0, initialRefreshTokenQuery), [idTokenQuery, initialRefreshTokenQuery, iframeSso]),
+    initialTokenQuery = (0, import_react2.useMemo)(() => (0, import_token.validOrRefreshableToken)(import_multiplatform.isIframe && typeof tokenQuery == "string" ? tokenQuery || !0 : void 0, initialRefreshTokenQuery), [tokenQuery, initialRefreshTokenQuery, iframeSso]),
+    [tokens, setTokens] = (0, import_react2.useState)({
+      refreshToken: initialRefreshTokenQuery,
+      token: initialTokenQuery,
+      idToken: initialIdTokenQuery
+    }),
+    authSource = (0, import_react2.useMemo)(() => !iframeSso && import_multiplatform.isIframe ? initialTokenQuery ? import_shared.AuthSource.Query : import_shared.AuthSource.Store : import_shared.AuthSource.Session, [initialTokenQuery, iframeSso]),
+    authStrategy = (0, import_react2.useMemo)(() => {
+      if (authSource === import_shared.AuthSource.Session) return import_shared.AuthStrategy.AuthJS;
+      if (authSource === import_shared.AuthSource.Query) return import_shared.AuthStrategy.KeycloakClientImplicit;
+      if (!import_state.persist) return import_shared.AuthStrategy.KeycloakClientStandard;
+      if (!(typeof authStore > "u")) return authStore.token && typeof tokens.token == "string" && tokens.token ? import_shared.AuthStrategy.KeycloakClientImplicit : import_shared.AuthStrategy.KeycloakClientStandard;
+    }, [authSource, authStore?.token, tokens.token]),
+    isLoading = (0, import_react2.useMemo)(() => !authStrategy || authStrategy === import_shared.AuthStrategy.KeycloakClientImplicit && (authSource === import_shared.AuthSource.Query && (initialRefreshTokenQuery === !0 || initialTokenQuery === !0 || initialIdTokenQuery === !0) || authSource === import_shared.AuthSource.Store && typeof authStore > "u"), [authSource, authStore?.idToken, authStore?.refreshToken, authStore?.token, authStrategy, initialIdTokenQuery, initialRefreshTokenQuery, initialTokenQuery]);
+  (0, import_react2.useEffect)(() => {
+    if (!import_state.persist || typeof authStore > "u") return;
+    const refreshToken = (0, import_token.validOrRefreshableToken)(authStore.refreshToken),
+      idToken = (0, import_token.validOrRefreshableToken)(authStore.idToken, refreshToken),
+      token = (0, import_token.validOrRefreshableToken)(authStore.token, refreshToken);
+    setTokens({
+      idToken: idToken || void 0,
+      refreshToken: refreshToken || void 0,
+      token: token || void 0
+    });
+  }, [authStore?.token, authStore?.refreshToken, authStore?.idToken]), (0, import_react2.useEffect)(() => {
+    disabled || authSource !== import_shared.AuthSource.Query || tokens.token === !0 || tokens.refreshToken === !0 || tokens.idToken === !0 || loadedMessagePosted || (debug && import_multiplatform.logger.debug("post message", JSON.stringify({
+      type: "LOADED"
+    })), (messageHandlerKeys || []).forEach(key => {
+      window?.webkit?.messageHandlers?.[key]?.postMessage(JSON.stringify({
+        type: "LOADED"
+      }));
+    }), window?.ReactNativeWebView?.postMessage(JSON.stringify({
+      type: "LOADED"
+    })), window?.parent?.postMessage(JSON.stringify({
+      type: "LOADED"
+    })), setLoadedMessagePosted(!0));
+  }, [disabled, authSource, tokens.token, tokens.refreshToken, tokens.idToken]), (0, import_react2.useEffect)(() => {
+    if (disabled || tokens.refreshToken !== !0 || listeningRefreshToken) return;
+    setListeningRefreshToken(!0);
+    function messageCallback(e) {
+      let data = e?.data || null;
+      if (typeof data == "string") try {
+        data = JSON.parse(data);
+      } catch {}
+      debug && import_multiplatform.logger.debug("received message", JSON.stringify(data));
+      const message = data;
+      message.type && message.type.toUpperCase() === "REFRESH_TOKEN" && message.payload && (debug && import_multiplatform.logger.debug("setting refresh token", message.payload), setTokens(tokens2 => ({
+        ...tokens2,
+        refreshToken: (0, import_token.validOrRefreshableToken)(message.payload)
+      })), window.removeEventListener("message", messageCallback), setListeningRefreshToken(!1));
+    }
+    return debug && import_multiplatform.logger.debug("listening for message", JSON.stringify({
+      type: "REFRESH_TOKEN",
+      payload: "<some_refresh_token>"
+    })), window.addEventListener("message", messageCallback), () => {
+      window.removeEventListener("message", messageCallback);
+    };
+  }, [disabled, tokens.refreshToken, listeningRefreshToken]), (0, import_react2.useEffect)(() => {
+    if (disabled || tokens.token !== !0 || listeningToken) return;
+    setListeningToken(!0);
+    function messageCallback(e) {
+      let data = e?.data || null;
+      if (typeof data == "string") try {
+        data = JSON.parse(data);
+      } catch {}
+      debug && import_multiplatform.logger.debug("received message", JSON.stringify(data));
+      const message = data;
+      message.type && message.type.toUpperCase() === "TOKEN" && message.payload && (debug && import_multiplatform.logger.debug("setting token", message.payload), setTokens(tokens2 => ({
+        ...tokens2,
+        token: (0, import_token.validOrRefreshableToken)(message.payload, tokens2.refreshToken)
+      })), window.removeEventListener("message", messageCallback), setListeningToken(!1));
+    }
+    return debug && import_multiplatform.logger.debug("listening for message", JSON.stringify({
+      type: "TOKEN",
+      payload: "<some_token>"
+    })), window.addEventListener("message", messageCallback), () => {
+      window.removeEventListener("message", messageCallback);
+    };
+  }, [disabled, tokens.token, listeningToken]), (0, import_react2.useEffect)(() => {
+    if (disabled || tokens.idToken !== !0 || listeningIdToken) return;
+    setListeningIdToken(!0);
+    function messageCallback(e) {
+      let data = e?.data || null;
+      if (typeof data == "string") try {
+        data = JSON.parse(data);
+      } catch {}
+      debug && import_multiplatform.logger.debug("received message", JSON.stringify(data));
+      const message = data;
+      message.type && message.type.toUpperCase() === "ID_TOKEN" && message.payload && (debug && import_multiplatform.logger.debug("setting id token", message.payload), setTokens(tokens2 => ({
+        ...tokens2,
+        idToken: (0, import_token.validOrRefreshableToken)(message.payload, tokens2.refreshToken)
+      })), window.removeEventListener("message", messageCallback), setListeningIdToken(!1));
+    }
+    return debug && import_multiplatform.logger.debug("listening for message", JSON.stringify({
+      type: "ID_TOKEN",
+      payload: "<some_id_token>"
+    })), window.addEventListener("message", messageCallback), () => {
+      window.removeEventListener("message", messageCallback);
+    };
+  }, [disabled, tokens.idToken, listeningIdToken]);
+  const keycloakClient = (0, import_react2.useMemo)(() => !disabled && !isLoading && (authStrategy === import_shared.AuthStrategy.KeycloakClientStandard || authStrategy === import_shared.AuthStrategy.KeycloakClientImplicit) && keycloakConfig ? new import_keycloak_js.default({
+      clientId: keycloakConfig.publicClientId || keycloakConfig.clientId,
+      realm: keycloakConfig.realm,
+      url: keycloakConfig.url
+    }) : void 0, [authStrategy, disabled, isLoading, keycloakConfig, keycloakInitOptions, tokens.idToken, tokens.refreshToken, tokens.token]),
+    initOptions = (0, import_react2.useMemo)(() => {
+      if (!keycloakClient) return;
+      const initOptions2 = {
+        ...import_shared.defaultKeycloakInitOptions,
+        ...keycloakInitOptions,
+        scope: [... /* @__PURE__ */new Set(["email", "openid", "profile", ...(import_shared.defaultKeycloakInitOptions.scope?.split(" ") || []), ...(keycloakInitOptions?.scope?.split(" ") || []), ...(keycloakConfig.scopes || [])])].join(" ")
+      };
+      return debug && (initOptions2.enableLogging = !0), tokens.token && typeof tokens.token == "string" && (initOptions2.token = tokens.token, initOptions2.timeSkew = 0, tokens.idToken && typeof tokens.idToken == "string" && (initOptions2.idToken = tokens.idToken), tokens.refreshToken && typeof tokens.refreshToken == "string" && (initOptions2.refreshToken = tokens.refreshToken)), (!iframeSso && import_multiplatform.isIframe || tokens.token && !tokens.refreshToken) && (initOptions2.checkLoginIframe = !1, initOptions2.flow = "implicit", initOptions2.onLoad = void 0), initOptions2;
+    }, [keycloakClient, keycloakInitOptions, keycloakConfig.scopes, debug, tokens.token, tokens.idToken, tokens.refreshToken, iframeSso]);
+  (0, import_react2.useEffect)(() => {
+    if (!keycloakClient || !initOptions || authStrategy === import_shared.AuthStrategy.KeycloakClientImplicit && (typeof tokens.token != "string" || !tokens.token)) return;
+    function onError() {
+      keycloakClient && initOptions && setKeycloak(new import_keycloak.Keycloak(keycloakConfig, keycloakClient));
+    }
+    function onUpdate() {
+      keycloakClient && initOptions && setKeycloak(new import_keycloak.Keycloak(keycloakConfig, keycloakClient));
+    }
+    (async () => (keycloakClient.onAuthError = onError, keycloakClient.onAuthLogout = onUpdate, keycloakClient.onAuthRefreshError = onError, keycloakClient.onAuthRefreshSuccess = onUpdate, keycloakClient.onAuthSuccess = onUpdate, keycloakClient.onReady = onUpdate, keycloakClient.onTokenExpired = async () => {
+      try {
+        await keycloakClient.updateToken(5);
+      } catch (err) {
+        import_multiplatform.logger.warn(err), setKeycloak(new import_keycloak.Keycloak(keycloakConfig, keycloakClient));
+      }
+    }, await keycloakClient.init(initOptions), setKeycloak(new import_keycloak.Keycloak(keycloakConfig, keycloakClient))))();
+  }, [keycloakClient, initOptions, authStrategy, tokens.token]);
+  const render = (0, import_react2.useCallback)(() => /* @__PURE__ */(0, import_jsx_runtime.jsx)(import_keycloak.KeycloakConfigContext.Provider, {
+    value: keycloakConfig,
+    children: /* @__PURE__ */(0, import_jsx_runtime.jsx)(import_context.KeycloakContext.Provider, {
+      value: keycloak,
+      children: /* @__PURE__ */(0, import_jsx_runtime.jsx)(import_AfterAuth.AfterAuth, {
+        loadingComponent,
+        children
+      })
+    })
+  }), [children, keycloak, keycloakConfig]);
+  return disabled ? /* @__PURE__ */(0, import_jsx_runtime.jsx)(import_jsx_runtime.Fragment, {
+    children
+  }) : authStrategy === import_shared.AuthStrategy.AuthJS ? /* @__PURE__ */(0, import_jsx_runtime.jsx)(import_react.SessionProvider, {
+    ...sessionProvider,
+    children: render()
+  }) : isLoading ? /* @__PURE__ */(0, import_jsx_runtime.jsx)(import_Loading.Loading, {
+    loadingComponent
+  }) : render();
+}

package/dist/cjs/provider/AuthProvider/index.electron.cjs

@@ -0,0 +1,223 @@
+var __create = Object.create;
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __getProtoOf = Object.getPrototypeOf,
+  __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+    for (var name in all) __defProp(target, name, {
+      get: all[name],
+      enumerable: !0
+    });
+  },
+  __copyProps = (to, from, except, desc) => {
+    if (from && typeof from == "object" || typeof from == "function") for (let key of __getOwnPropNames(from)) !__hasOwnProp.call(to, key) && key !== except && __defProp(to, key, {
+      get: () => from[key],
+      enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable
+    });
+    return to;
+  };
+var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(
+  // If the importer is in node compatibility mode or this is not an ESM
+  // file that has been converted to a CommonJS file using a Babel-
+  // compatible transform (i.e. "__esModule" has not been set), then set
+  // "default" to the CommonJS "module.exports" for node compatibility.
+  isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", {
+    value: mod,
+    enumerable: !0
+  }) : target, mod)),
+  __toCommonJS = mod => __copyProps(__defProp({}, "__esModule", {
+    value: !0
+  }), mod);
+var index_electron_exports = {};
+__export(index_electron_exports, {
+  AuthProvider: () => AuthProvider
+});
+module.exports = __toCommonJS(index_electron_exports);
+var import_keycloak_js = __toESM(require("keycloak-js")),
+  import_multiplatform = require("multiplatform.one"),
+  import_react = require("react"),
+  import_Loading = require("../../Loading.cjs"),
+  import_hooks = require("../../hooks/index.cjs"),
+  import_context = require("../../keycloak/context.cjs"),
+  import_keycloak = require("../../keycloak/index.cjs"),
+  import_state = require("../../state.cjs"),
+  import_token = require("../../token.cjs"),
+  import_AfterAuth = require("../AfterAuth.cjs"),
+  import_shared = require("./shared.cjs"),
+  import_jsx_runtime = require("react/jsx-runtime");
+function AuthProvider({
+  children,
+  disabled,
+  keycloakConfig,
+  keycloakInitOptions,
+  loadingComponent
+}) {
+  const {
+      debug,
+      messageHandlerKeys,
+      iframeSso
+    } = (0, import_hooks.useAuthConfig)(),
+    query = new URLSearchParams(import_multiplatform.isWindowDefined && window?.location?.search || ""),
+    authStore = (0, import_state.useAuthStore)(),
+    [keycloak, setKeycloak] = (0, import_react.useState)(),
+    idTokenQuery = query.get("idToken"),
+    refreshTokenQuery = query.get("refreshToken"),
+    tokenQuery = query.get("token"),
+    [listeningRefreshToken, setListeningRefreshToken] = (0, import_react.useState)(!1),
+    [listeningToken, setListeningToken] = (0, import_react.useState)(!1),
+    [listeningIdToken, setListeningIdToken] = (0, import_react.useState)(!1),
+    [loadedMessagePosted, setLoadedMessagePosted] = (0, import_react.useState)(!1),
+    initialRefreshTokenQuery = (0, import_react.useMemo)(() => (0, import_token.validOrRefreshableToken)(!iframeSso && import_multiplatform.isIframe || (typeof refreshTokenQuery == "string" ? refreshTokenQuery || !0 : void 0)), [refreshTokenQuery, iframeSso]),
+    initialIdTokenQuery = (0, import_react.useMemo)(() => (0, import_token.validOrRefreshableToken)(!iframeSso && import_multiplatform.isIframe || (typeof idTokenQuery == "string" ? idTokenQuery || !0 : void 0), initialRefreshTokenQuery), [idTokenQuery, initialRefreshTokenQuery, iframeSso]),
+    initialTokenQuery = (0, import_react.useMemo)(() => (0, import_token.validOrRefreshableToken)(!iframeSso && import_multiplatform.isIframe || (typeof tokenQuery == "string" ? tokenQuery || !0 : void 0), initialRefreshTokenQuery), [tokenQuery, initialRefreshTokenQuery, iframeSso]),
+    [tokens, setTokens] = (0, import_react.useState)({
+      refreshToken: initialRefreshTokenQuery,
+      token: initialTokenQuery,
+      idToken: initialIdTokenQuery
+    }),
+    authSource = (0, import_react.useMemo)(() => !iframeSso && import_multiplatform.isIframe && initialTokenQuery ? import_shared.AuthSource.Query : import_shared.AuthSource.Store, [initialTokenQuery, iframeSso]),
+    authStrategy = (0, import_react.useMemo)(() => {
+      if (authSource === import_shared.AuthSource.Query) return import_shared.AuthStrategy.KeycloakClientImplicit;
+      if (!import_state.persist) return import_shared.AuthStrategy.KeycloakClientStandard;
+      if (!(typeof authStore > "u")) {
+        if (authStore.token) {
+          if (typeof tokens.token > "u") return;
+          if (tokens.token) return import_shared.AuthStrategy.KeycloakClientImplicit;
+        }
+        return import_shared.AuthStrategy.KeycloakClientStandard;
+      }
+    }, [authSource, authStore?.token, tokens.token]),
+    isLoading = (0, import_react.useMemo)(() => !authStrategy || authStrategy === import_shared.AuthStrategy.KeycloakClientImplicit && (authSource === import_shared.AuthSource.Query && (initialRefreshTokenQuery === !0 || initialTokenQuery === !0 || initialIdTokenQuery === !0) || authSource === import_shared.AuthSource.Store && typeof authStore > "u"), [authSource, authStore?.idToken, authStore?.refreshToken, authStore?.token, authStrategy, initialIdTokenQuery, initialRefreshTokenQuery, initialTokenQuery]);
+  (0, import_react.useEffect)(() => {
+    if (!import_state.persist || typeof authStore > "u") return;
+    const refreshToken = (0, import_token.validOrRefreshableToken)(authStore.refreshToken),
+      idToken = (0, import_token.validOrRefreshableToken)(authStore.idToken, refreshToken),
+      token = (0, import_token.validOrRefreshableToken)(authStore.token, refreshToken);
+    setTokens({
+      idToken,
+      refreshToken,
+      token
+    });
+  }, [authStore?.token, authStore?.refreshToken, authStore?.idToken]), (0, import_react.useEffect)(() => {
+    disabled || authSource !== import_shared.AuthSource.Query || tokens.token === !0 || tokens.refreshToken === !0 || tokens.idToken === !0 || loadedMessagePosted || (debug && import_multiplatform.logger.debug("post message", JSON.stringify({
+      type: "LOADED"
+    })), (messageHandlerKeys || []).forEach(key => {
+      window?.webkit?.messageHandlers?.[key]?.postMessage(JSON.stringify({
+        type: "LOADED"
+      }));
+    }), window?.ReactNativeWebView?.postMessage(JSON.stringify({
+      type: "LOADED"
+    })), window?.parent?.postMessage(JSON.stringify({
+      type: "LOADED"
+    })), setLoadedMessagePosted(!0));
+  }, [disabled, authSource, tokens.token, tokens.refreshToken, tokens.idToken]), (0, import_react.useEffect)(() => {
+    if (disabled || tokens.refreshToken !== !0 || listeningRefreshToken) return;
+    setListeningRefreshToken(!0);
+    function messageCallback(e) {
+      let data = e?.data || null;
+      if (typeof data == "string") try {
+        data = JSON.parse(data);
+      } catch {}
+      debug && import_multiplatform.logger.debug("received message", JSON.stringify(data));
+      const message = data;
+      message.type && message.type.toUpperCase() === "REFRESH_TOKEN" && message.payload && (debug && import_multiplatform.logger.debug("setting refresh token", message.payload), setTokens(tokens2 => ({
+        ...tokens2,
+        refreshToken: (0, import_token.validOrRefreshableToken)(message.payload)
+      })), window.removeEventListener("message", messageCallback), setListeningRefreshToken(!1));
+    }
+    return debug && import_multiplatform.logger.debug("listening for message", JSON.stringify({
+      type: "REFRESH_TOKEN",
+      payload: "<some_refresh_token>"
+    })), window.addEventListener("message", messageCallback), () => {
+      window.removeEventListener("message", messageCallback);
+    };
+  }, [disabled, tokens.refreshToken, listeningRefreshToken]), (0, import_react.useEffect)(() => {
+    if (disabled || tokens.token !== !0 || listeningToken) return;
+    setListeningToken(!0);
+    function messageCallback(e) {
+      let data = e?.data || null;
+      if (typeof data == "string") try {
+        data = JSON.parse(data);
+      } catch {}
+      debug && import_multiplatform.logger.debug("received message", JSON.stringify(data));
+      const message = data;
+      message.type && message.type.toUpperCase() === "TOKEN" && message.payload && (debug && import_multiplatform.logger.debug("setting token", message.payload), setTokens(tokens2 => ({
+        ...tokens2,
+        token: (0, import_token.validOrRefreshableToken)(message.payload, tokens2.refreshToken)
+      })), window.removeEventListener("message", messageCallback), setListeningToken(!1));
+    }
+    return debug && import_multiplatform.logger.debug("listening for message", JSON.stringify({
+      type: "TOKEN",
+      payload: "<some_token>"
+    })), window.addEventListener("message", messageCallback), () => {
+      window.removeEventListener("message", messageCallback);
+    };
+  }, [disabled, tokens.token, listeningToken]), (0, import_react.useEffect)(() => {
+    if (disabled || tokens.idToken !== !0 || listeningIdToken) return;
+    setListeningIdToken(!0);
+    function messageCallback(e) {
+      let data = e?.data || null;
+      if (typeof data == "string") try {
+        data = JSON.parse(data);
+      } catch {}
+      debug && import_multiplatform.logger.debug("received message", JSON.stringify(data));
+      const message = data;
+      message.type && message.type.toUpperCase() === "ID_TOKEN" && message.payload && (debug && import_multiplatform.logger.debug("setting id token", message.payload), setTokens(tokens2 => ({
+        ...tokens2,
+        idToken: (0, import_token.validOrRefreshableToken)(message.payload, tokens2.refreshToken)
+      })), window.removeEventListener("message", messageCallback), setListeningIdToken(!1));
+    }
+    return debug && import_multiplatform.logger.debug("listening for message", JSON.stringify({
+      type: "ID_TOKEN",
+      payload: "<some_id_token>"
+    })), window.addEventListener("message", messageCallback), () => {
+      window.removeEventListener("message", messageCallback);
+    };
+  }, [disabled, tokens.idToken, listeningIdToken]);
+  const keycloakClient = (0, import_react.useMemo)(() => !disabled && !isLoading && (authStrategy === import_shared.AuthStrategy.KeycloakClientStandard || authStrategy === import_shared.AuthStrategy.KeycloakClientImplicit) && keycloakConfig ? new import_keycloak_js.default({
+      clientId: keycloakConfig.publicClientId || keycloakConfig.clientId,
+      realm: keycloakConfig.realm,
+      url: keycloakConfig.url
+    }) : void 0, [authStrategy, disabled, isLoading, keycloakConfig, keycloakInitOptions, tokens.idToken, tokens.refreshToken, tokens.token]),
+    initOptions = (0, import_react.useMemo)(() => {
+      if (!keycloakClient) return;
+      const initOptions2 = {
+        ...import_shared.defaultKeycloakInitOptions,
+        ...keycloakInitOptions,
+        scope: [... /* @__PURE__ */new Set(["email", "openid", "profile", ...(import_shared.defaultKeycloakInitOptions.scope?.split(" ") || []), ...(keycloakInitOptions?.scope?.split(" ") || []), ...(keycloakConfig.scopes || [])])].join(" ")
+      };
+      return debug && (initOptions2.enableLogging = !0), tokens.token && typeof tokens.token == "string" && (initOptions2.token = tokens.token, initOptions2.timeSkew = 0, tokens.idToken && typeof tokens.idToken == "string" && (initOptions2.idToken = tokens.idToken), tokens.refreshToken && typeof tokens.refreshToken == "string" && (initOptions2.refreshToken = tokens.refreshToken)), (!iframeSso && import_multiplatform.isIframe || tokens.token && !tokens.refreshToken) && (initOptions2.checkLoginIframe = !1, initOptions2.flow = "implicit", initOptions2.onLoad = void 0), initOptions2;
+    }, [keycloakClient, keycloakInitOptions, keycloakConfig.scopes, debug, tokens.token, tokens.idToken, tokens.refreshToken, iframeSso]);
+  (0, import_react.useEffect)(() => {
+    if (!keycloakClient || !initOptions || authStrategy === import_shared.AuthStrategy.KeycloakClientImplicit && (typeof tokens.token != "string" || !tokens.token)) return;
+    function onError() {
+      keycloakClient && initOptions && setKeycloak(new import_keycloak.Keycloak(keycloakConfig, keycloakClient));
+    }
+    function onUpdate() {
+      keycloakClient && initOptions && setKeycloak(new import_keycloak.Keycloak(keycloakConfig, keycloakClient));
+    }
+    (async () => (keycloakClient.onAuthError = onError, keycloakClient.onAuthLogout = onUpdate, keycloakClient.onAuthRefreshError = onError, keycloakClient.onAuthRefreshSuccess = onUpdate, keycloakClient.onAuthSuccess = onUpdate, keycloakClient.onReady = onUpdate, keycloakClient.onTokenExpired = async () => {
+      try {
+        await keycloakClient.updateToken(5);
+      } catch (err) {
+        import_multiplatform.logger.warn(err), setKeycloak(new import_keycloak.Keycloak(keycloakConfig, keycloakClient));
+      }
+    }, await keycloakClient.init(initOptions), setKeycloak(new import_keycloak.Keycloak(keycloakConfig, keycloakClient))))();
+  }, [keycloakClient, initOptions, authStrategy, tokens.token]);
+  const render = (0, import_react.useCallback)(() => /* @__PURE__ */(0, import_jsx_runtime.jsx)(import_keycloak.KeycloakConfigContext.Provider, {
+    value: keycloakConfig,
+    children: /* @__PURE__ */(0, import_jsx_runtime.jsx)(import_context.KeycloakContext.Provider, {
+      value: keycloak,
+      children: /* @__PURE__ */(0, import_jsx_runtime.jsx)(import_AfterAuth.AfterAuth, {
+        loadingComponent,
+        children
+      })
+    })
+  }), [children, keycloak, keycloakConfig]);
+  return disabled ? /* @__PURE__ */(0, import_jsx_runtime.jsx)(import_jsx_runtime.Fragment, {
+    children
+  }) : isLoading ? /* @__PURE__ */(0, import_jsx_runtime.jsx)(import_Loading.Loading, {
+    loadingComponent
+  }) : render();
+}