@multiplatform.one/keycloak 3.0.0 → 5.0.0

package/dist/jsx/state.native.js.map

@@ -1,6 +1,6 @@
 {
   "version": 3,
-  "sources": ["../../src/home/dharmendraboddeda/Projects/bitspur/multiplatform.one/multiplatform.one/packages/keycloak/src/state.ts"],
-  "mappings": "AAqBA,SAASA,qBAAqB;AAC9B,SAASC,wBAAwB;AAE1B,IAAMC,UAAUF,cAAcG,YAAa,CAACH,cAAcI,UAAU,CAACJ,cAAcK,UAElFC,WAAaL,iBACnB,QACA;EACEM,SAAS;EACTC,cAAc;EACdC,OAAO;AACT,GACAC,QACA;EAAER;AAAQ,CAAA,EARJI;AAWD,SAASK,eAAAA;AACd,SAAOL,SAAAA;AACT;",
-  "names": ["MultiPlatform", "createStateStore", "persist", "isIframe", "isNext", "isServer", "useStore", "idToken", "refreshToken", "token", "undefined", "useAuthState"]
+  "sources": ["../../src/home/clayrisser/Projects/bitspur/multiplatform.one/multiplatform.one/packages/keycloak/src/state.ts"],
+  "mappings": "AAqBA,SAASA,sBAAsB;AAC/B,SAASC,WAAWC,YAAYC,UAAUC,gBAAgB;AAHzD,SAAA,kBAAA,UAAA,aAAA;;;;;;;;;;;;AAKM,IAAMC,UAAUF,YAAYD,cAAe,CAACD,aAAa,CAACG,UAE3DE,YAAN,SAAMA,aAAAA;;0BAAAA,UAAAA,GACJC,iBAAAA,MAAAA,WAAU,EAAA,GACVC,iBAAAA,MAAAA,gBAAe,EAAA,GACfC,iBAAAA,MAAAA,SAAQ,EAAA;GAGGC,eAAeV,eAAeM,WAAW;EACpDD;AACF,CAAA;",
+  "names": ["createUseStore", "isBrowser", "isElectron", "isIframe", "isServer", "persist", "AuthStore", "idToken", "refreshToken", "token", "useAuthStore"]
 }

package/dist/jsx/token.js.map

@@ -1,6 +1,6 @@
 {
   "version": 3,
   "sources": ["../../src/token.ts"],
-  "mappings": "AAsBA,SAAS,iBAAiB;AAUnB,SAAS,wBAAwB,OAA0B,cAAiC;AACjG,MAAI,SAAO,QAAU;AACrB,WAAK,QACD,OAAO,SAAU,WAAiB,QAClC,eACE,iBAAiB,MAAQ,CAAC,eAAe,YAAY,IAAU,QAC5D,KAEF,eAAe,KAAK,IAAI,KAAQ,QANpB;AAOrB;AAEO,SAAS,eAAe,OAAe;AAC5C,QAAM,EAAE,IAAI,IAAI,UAAU,KAAK;AAC/B,SAAK,MACE,KAAK,MAAM,KAAK,IAAI,IAAI,GAAI,KAAK,MADvB;AAEnB;",
+  "mappings": "AAqBA,SAAS,iBAAiB;AAWnB,SAAS,wBACd,OACA,cACA;AACA,MAAI,SAAO,QAAU;AACrB,WAAK,QACD,OAAO,SAAU,WAAiB,QAClC,eACE,iBAAiB,MAAQ,CAAC,eAAe,YAAY,IAAU,QAC5D,KAEF,eAAe,KAAK,IAAI,KAAQ,QANpB;AAOrB;AAEO,SAAS,eAAe,OAAe;AAC5C,QAAM,EAAE,IAAI,IAAI,UAAU,KAAK;AAC/B,SAAK,MACE,KAAK,MAAM,KAAK,IAAI,IAAI,GAAI,KAAK,MADvB;AAEnB;",
   "names": []
 }

package/dist/jsx/token.mjs

@@ -8,4 +8,5 @@ function isTokenExpired(token) {
   } = jwtDecode(token);
   return exp ? Math.floor(Date.now() / 1e3) >= exp : !1;
 }
-export { isTokenExpired, validOrRefreshableToken };
+export { isTokenExpired, validOrRefreshableToken };
+//# sourceMappingURL=token.mjs.map

package/dist/jsx/token.mjs.map

@@ -0,0 +1 @@
+{"version":3,"names":["jwtDecode","validOrRefreshableToken","token","refreshToken","isTokenExpired","exp","Math","floor","Date","now"],"sources":["../../src/token.ts"],"sourcesContent":[null],"mappings":"AAqBA,SAASA,SAAA,QAAiB;AAWnB,SAASC,wBACdC,KAAA,EACAC,YAAA,EACA;EACA,IAAI,SAAOD,KAAA,GAAU,MACrB,OAAKA,KAAA,GACD,OAAOA,KAAA,IAAU,WAAiBA,KAAA,GAClCC,YAAA,GACEA,YAAA,KAAiB,MAAQ,CAACC,cAAA,CAAeD,YAAY,IAAUD,KAAA,GAC5D,KAEFE,cAAA,CAAeF,KAAK,IAAI,KAAQA,KAAA,GANpB;AAOrB;AAEO,SAASE,eAAeF,KAAA,EAAe;EAC5C,MAAM;IAAEG;EAAI,IAAIL,SAAA,CAAUE,KAAK;EAC/B,OAAKG,GAAA,GACEC,IAAA,CAAKC,KAAA,CAAMC,IAAA,CAAKC,GAAA,CAAI,IAAI,GAAI,KAAKJ,GAAA,GADvB;AAEnB","ignoreList":[]}

package/dist/jsx/token.native.js

@@ -4,7 +4,7 @@ function validOrRefreshableToken(token, refreshToken) {
     return token ? typeof token != "string" ? token : refreshToken ? refreshToken === !0 || !isTokenExpired(refreshToken) ? token : !1 : isTokenExpired(token) ? !1 : token : !1;
 }
 function isTokenExpired(token) {
-  var exp = jwtDecode(token).exp;
+  var { exp } = jwtDecode(token);
   return exp ? Math.floor(Date.now() / 1e3) >= exp : !1;
 }
 export {

package/dist/jsx/token.native.js.map

@@ -1,6 +1,6 @@
 {
   "version": 3,
-  "sources": ["../../src/home/dharmendraboddeda/Projects/bitspur/multiplatform.one/multiplatform.one/packages/keycloak/src/token.ts"],
-  "mappings": "AAsBA,SAASA,iBAAiB;AAUnB,SAASC,wBAAwBC,OAA0BC,cAA+B;AAC/F,MAAI,SAAOD,QAAU;AACrB,WAAKA,QACD,OAAOA,SAAU,WAAiBA,QAClCC,eACEA,iBAAiB,MAAQ,CAACC,eAAeD,YAAAA,IAAsBD,QAC5D,KAEFE,eAAeF,KAAAA,IAAS,KAAQA,QANpB;AAOrB;AAEO,SAASE,eAAeF,OAAa;AAC1C,MAAQG,MAAQL,UAAUE,KAAAA,EAAlBG;AACR,SAAKA,MACEC,KAAKC,MAAMC,KAAKC,IAAG,IAAK,GAAA,KAASJ,MADvB;AAEnB;",
+  "sources": ["../../src/home/clayrisser/Projects/bitspur/multiplatform.one/multiplatform.one/packages/keycloak/src/token.ts"],
+  "mappings": "AAqBA,SAASA,iBAAiB;AAWnB,SAASC,wBACdC,OACAC,cAA+B;AAE/B,MAAI,SAAOD,QAAU;AACrB,WAAKA,QACD,OAAOA,SAAU,WAAiBA,QAClCC,eACEA,iBAAiB,MAAQ,CAACC,eAAeD,YAAAA,IAAsBD,QAC5D,KAEFE,eAAeF,KAAAA,IAAS,KAAQA,QANpB;AAOrB;AAEO,SAASE,eAAeF,OAAa;AAC1C,MAAM,EAAEG,IAAG,IAAKL,UAAUE,KAAAA;AAC1B,SAAKG,MACEC,KAAKC,MAAMC,KAAKC,IAAG,IAAK,GAAA,KAASJ,MADvB;AAEnB;",
   "names": ["jwtDecode", "validOrRefreshableToken", "token", "refreshToken", "isTokenExpired", "exp", "Math", "floor", "Date", "now"]
 }

package/dist/jsx/types.mjs

@@ -0,0 +1,2 @@
+
+//# sourceMappingURL=types.mjs.map

package/dist/jsx/types.mjs.map

@@ -0,0 +1 @@
+{"version":3,"names":[],"sources":[],"sourcesContent":[],"mappings":"","ignoreList":[]}

package/package.json

@@ -1,23 +1,28 @@
 {
   "name": "@multiplatform.one/keycloak",
-  "version": "3.0.0",
+  "version": "5.0.0",
   "description": "keycloak client for multiplatform.one ecosystem",
   "main": "dist/cjs",
   "module": "dist/esm",
   "module:jsx": "dist/jsx",
-  "react-native": "src/index.ts",
+  "react-native": "0.74.5",
   "source": "src/index.ts",
   "types": "types/index.d.ts",
   "exports": {
     ".": {
+      "types": "./types/index.d.ts",
       "import": "./dist/esm/index.js",
-      "require": "./dist/cjs/index.js",
-      "types": "./types/index.d.ts"
+      "require": "./dist/cjs/index.cjs"
     },
-    "./routes": {
-      "import": "./dist/esm/routes.js",
-      "require": "./dist/cjs/routes.js",
-      "types": "./dist/esm/routes.d.ts"
+    "./one": {
+      "types": "./types/one.d.ts",
+      "import": "./dist/esm/one.js",
+      "require": "./dist/cjs/one.cjs"
+    },
+    "./emptyNextAuthReact": {
+      "types": "./types/emptyNextAuthReact.d.ts",
+      "import": "./dist/esm/emptyNextAuthReact.js",
+      "require": "./dist/cjs/emptyNextAuthReact.cjs"
     },
     "./package.json": "./package.json"
   },
@@ -44,25 +49,21 @@
   },
   "peerDependencies": {
     "@react-native-async-storage/async-storage": "1.21.0",
-    "multiplatform.one": "2.1.0",
-    "next": "^13.0.5",
-    "react": "18.2.0",
-    "react-native": "0.74.2"
+    "multiplatform.one": "5.0.0",
+    "react": "~18.2.0"
   },
   "devDependencies": {
     "@react-native-async-storage/async-storage": "1.23.1",
-    "@tamagui/build": "^1.100.3",
-    "@testing-library/jest-dom": "^6.4.6",
+    "@tamagui/build": "^1.121.11",
+    "@testing-library/jest-dom": "^6.6.3",
     "@testing-library/react": "^15.0.7",
     "@types/lodash.camelcase": "^4.3.9",
     "@types/lodash.startcase": "^4.4.9",
     "@types/react": "^18.3.1",
     "@types/react-native": "^0.73.0",
-    "@vitejs/plugin-react": "^4.3.1",
-    "multiplatform.one": "2.1.0",
-    "next": "^14.2.3",
-    "react": "18.2.0",
-    "react-native": "0.74.2",
+    "@vitejs/plugin-react": "^4.3.4",
+    "multiplatform.one": "5.0.0",
+    "react": "~18.2.0",
     "typescript": "~5.3.3",
     "vitest": "^1.6.0",
     "vitest-react-native": "^0.1.5"
@@ -70,18 +71,19 @@
   "engines": {
     "node": ">=6.0.0"
   },
-  "eslintIgnore": [
-    "lib"
-  ],
   "dependencies": {
-    "@multiplatform.one/zustand": "2.0.0",
+    "@auth/core": "^0.36.0",
+    "@multiplatform.one/authjs": "5.0.0",
+    "@multiplatform.one/use-store": "5.0.0",
     "expo-auth-session": "^5.5.2",
     "expo-crypto": "^13.0.2",
     "jwt-decode": "^4.0.0",
     "keycloak-js": "^24.0.5",
-    "next-auth": "^4.24.7"
+    "next-auth": "^4.24.11"
   },
   "scripts": {
-    "build": "rm -rf dist types 2>/dev/null && tamagui-build"
+    "typecheck": "tsc --noEmit",
+    "build": "rm -rf dist types 2>/dev/null && tamagui-build --ts-project ./tsconfig.build.json",
+    "test": "vitest run --coverage --coverage.provider=v8 --coverage.reporter=text --coverage.reporter=lcov --coverage.reporter=html"
   }
 }

package/src/@types/expoKeycloakAuth.d.ts

@@ -19,7 +19,7 @@
  * limitations under the License.
  */
 
-declare module 'expo-keycloak-auth' {
+declare module "expo-keycloak-auth" {
   export const KeycloakProvider: any;
   export function useKeycloak(): any;
 }

package/src/Authenticated.tsx

@@ -1,10 +1,10 @@
 /**
  * File: /src/Authenticated.tsx
  * Project: @multiplatform.one/keycloak
- * File Created: 22-06-2023 10:07:56
+ * File Created: 19-11-2024 20:26:31
  * Author: Clay Risser
  * -----
- * BitSpur (c) Copyright 2021 - 2023
+ * BitSpur (c) Copyright 2021 - 2024
  *
  * Licensed under the Apache License, Version 2.0 (the "License");
  * you may not use this file except in compliance with the License.
@@ -19,14 +19,12 @@
  * limitations under the License.
  */
 
-'use client';
-
-import AsyncStorage from '@react-native-async-storage/async-storage';
-import React, { ComponentType, PropsWithChildren, useEffect } from 'react';
-import { MultiPlatform } from 'multiplatform.one';
-import { Text } from 'tamagui';
-import { useAuthConfig, useTokensFromQuery } from './hooks';
-import { useKeycloak } from './keycloak';
+import AsyncStorage from "@react-native-async-storage/async-storage";
+import { isIframe, isServer } from "multiplatform.one";
+import { type ComponentType, type PropsWithChildren, useEffect } from "react";
+import { Text } from "tamagui";
+import { useAuthConfig, useTokensFromQuery } from "./hooks";
+import { useKeycloak } from "./keycloak/index";
 
 global.AsyncStorage = AsyncStorage;
 
@@ -36,13 +34,23 @@ export interface AuthenticatedProps extends PropsWithChildren {
   loggedOutComponent?: ComponentType;
 }
 
-export function Authenticated({ children, disabled, loggedOutComponent, loadingComponent }: AuthenticatedProps) {
+export function Authenticated({
+  children,
+  disabled,
+  loggedOutComponent,
+  loadingComponent,
+}: AuthenticatedProps) {
   const authConfig = useAuthConfig();
   const keycloak = useKeycloak();
   const tokensFromQuery = useTokensFromQuery();
-
   useEffect(() => {
-    if (!keycloak || MultiPlatform.isIframe || MultiPlatform.isServer || keycloak.authenticated || tokensFromQuery) {
+    if (
+      !keycloak ||
+      (!authConfig.iframeSso && isIframe) ||
+      isServer ||
+      keycloak.authenticated ||
+      tokensFromQuery
+    ) {
       return;
     }
     keycloak?.login({
@@ -50,20 +58,31 @@ export function Authenticated({ children, disabled, loggedOutComponent, loadingC
     });
   }, [keycloak?.authenticated]);
 
-  if (typeof disabled === 'undefined') disabled = authConfig.disabled;
+  if (typeof disabled === "undefined") disabled = authConfig.disabled;
   if (disabled) return <>{children}</>;
-  if (typeof keycloak === 'undefined') {
+  if (typeof keycloak === "undefined") {
     const LoadingComponent = loadingComponent;
-    return LoadingComponent ? <LoadingComponent /> : <Text>{authConfig.debug ? 'loading' : null}</Text>;
+    return LoadingComponent ? (
+      <LoadingComponent />
+    ) : (
+      <Text>{authConfig.debug ? "loading" : null}</Text>
+    );
   }
   if (keycloak === null || keycloak.authenticated) return <>{children}</>;
   const LoggedOutComponent = loggedOutComponent;
-  return LoggedOutComponent ? <LoggedOutComponent /> : <Text>{authConfig.debug ? 'not authenticated' : null}</Text>;
+  return LoggedOutComponent ? (
+    <LoggedOutComponent />
+  ) : (
+    <Text>{authConfig.debug ? "not authenticated" : null}</Text>
+  );
 }
 
-export function withAuthenticated<P extends object>(Component: ComponentType<P>) {
+export function withAuthenticated<P extends object>(
+  Component: ComponentType<P>,
+  options: AuthenticatedProps = {},
+) {
   return (props: P) => (
-    <Authenticated>
+    <Authenticated {...options}>
       <Component {...props} />
     </Authenticated>
   );

package/{routes/index.js → src/Loading.tsx}

@@ -1,7 +1,7 @@
-/*
- * File: /routes/index.js
+/**
+ * File: /src/Loading.tsx
  * Project: @multiplatform.one/keycloak
- * File Created: 04-04-2024 15:50:39
+ * File Created: 01-01-1970 00:00:00
  * Author: Clay Risser
  * -----
  * BitSpur (c) Copyright 2021 - 2024
@@ -19,4 +19,19 @@
  * limitations under the License.
  */
 
-module.exports = require('../dist/cjs/routes.js');
+import type { ComponentType } from "react";
+import { Text } from "tamagui";
+import { useAuthConfig } from "./hooks";
+
+export interface LoadingProps {
+  loadingComponent?: ComponentType;
+}
+
+export function Loading({ loadingComponent }: LoadingProps) {
+  const { debug } = useAuthConfig();
+  const LoadingComponent = loadingComponent;
+  if (typeof LoadingComponent === "undefined") {
+    return <Text>{debug ? "loading" : null}</Text>;
+  }
+  return <LoadingComponent />;
+}

package/src/authConfig.ts

@@ -19,9 +19,7 @@
  * limitations under the License.
  */
 
-'use client';
-
-import { createContext } from 'react';
+import { createContext } from "react";
 
 export const defaultAuthConfig: AuthConfig = {};
 
@@ -30,6 +28,7 @@ export const AuthConfigContext = createContext<AuthConfig>(defaultAuthConfig);
 export interface AuthConfig {
   debug?: boolean;
   disabled?: boolean;
+  iframeSso?: boolean;
   loginRedirectUri?: string;
   messageHandlerKeys?: string[];
 }

package/src/hooks/index.ts

@@ -1,7 +1,7 @@
-/*
+/**
  * File: /src/hooks/index.ts
  * Project: @multiplatform.one/keycloak
- * File Created: 04-04-2024 15:50:39
+ * File Created: 19-11-2024 20:26:31
  * Author: Clay Risser
  * -----
  * BitSpur (c) Copyright 2021 - 2024
@@ -19,6 +19,6 @@
  * limitations under the License.
  */
 
-export * from './useAuthConfig';
-export * from './useTokensFromQuery';
-export * from './useTokensFromState';
+export * from "./useAuthConfig";
+export * from "./useTokensFromQuery/index";
+export * from "./useTokensFromState";

package/src/hooks/useAuthConfig.ts

@@ -19,8 +19,8 @@
  * limitations under the License.
  */
 
-import { useContext } from 'react';
-import { AuthConfigContext } from '../authConfig';
+import { useContext } from "react";
+import { AuthConfigContext } from "../authConfig";
 
 export function useAuthConfig() {
   return useContext(AuthConfigContext);

package/src/hooks/useTokensFromQuery/index.ts

@@ -1,7 +1,7 @@
 /*
  * File: /src/hooks/useTokensFromQuery/index.ts
  * Project: @multiplatform.one/keycloak
- * File Created: 04-04-2024 15:50:39
+ * File Created: 19-11-2024 20:26:31
  * Author: Clay Risser
  * -----
  * BitSpur (c) Copyright 2021 - 2024
@@ -19,13 +19,18 @@
  * limitations under the License.
  */
 
-'use client';
-
-import { MultiPlatform } from 'multiplatform.one';
-import { useRouter } from 'next/router';
+import { isIframe } from "multiplatform.one";
+import { useAuthConfig } from "../useAuthConfig";
 
 export function useTokensFromQuery() {
-  if (!MultiPlatform.isIframe) return false;
-  const { query } = MultiPlatform.isNext ? useRouter() : { query: {} };
-  return 'idToken' in query || 'token' in query || 'refreshToken' in query;
+  const { iframeSso } = useAuthConfig();
+  if (iframeSso || !isIframe) return false;
+  const query = new URLSearchParams(
+    typeof window === "undefined" ? "" : window?.location?.search || "",
+  );
+  return (
+    typeof query.get("idToken") === "string" ||
+    typeof query.get("token") === "string" ||
+    typeof query.get("refreshToken") === "string"
+  );
 }

package/src/hooks/useTokensFromState.ts

@@ -19,10 +19,11 @@
  * limitations under the License.
  */
 
-import { useAuthState } from '../state';
-import { validOrRefreshableToken } from '../token';
+import { useAuthStore } from "../state";
+import { validOrRefreshableToken } from "../token";
 
-export function useTokensFromState() {
-  const authState = useAuthState();
-  return !!validOrRefreshableToken(authState.token, authState.refreshToken);
+export function useTokensFromStore() {
+  const authStore = useAuthStore();
+  if (typeof authStore === "undefined") return undefined;
+  return !!validOrRefreshableToken(authStore.token, authStore.refreshToken);
 }

package/src/index.ts

@@ -1,7 +1,7 @@
-/*
+/**
  * File: /src/index.ts
  * Project: @multiplatform.one/keycloak
- * File Created: 01-06-2024 13:44:49
+ * File Created: 19-11-2024 20:26:31
  * Author: Clay Risser
  * -----
  * BitSpur (c) Copyright 2021 - 2024
@@ -19,10 +19,10 @@
  * limitations under the License.
  */
 
-export * from './Authenticated';
-export * from './authConfig';
-export * from './hooks';
-export * from './keycloak';
-export * from './provider';
-export * from './session';
-export * from './types';
+export * from "./Authenticated";
+export * from "./authConfig";
+export * from "./hooks";
+export * from "./keycloak/index";
+export * from "./provider";
+export * from "./session/index";
+export * from "./types";

package/src/keycloak/base.ts

@@ -0,0 +1,213 @@
+/*
+ * File: /src/keycloak/base.ts
+ * Project: @multiplatform.one/keycloak
+ * File Created: 25-12-2024 04:55:48
+ * Author: Clay Risser
+ * -----
+ * BitSpur (c) Copyright 2021 - 2024
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+import type { AuthRequestPromptOptions } from "expo-auth-session";
+import { jwtDecode } from "jwt-decode";
+import type KeycloakClient from "keycloak-js";
+import type {
+  KeycloakLoginOptions as KeycloakJsLoginOptions,
+  KeycloakLogoutOptions as KeycloakJsLogoutOptions,
+} from "keycloak-js";
+import { useContext } from "react";
+import { useAuthConfig } from "../hooks";
+import type { Session } from "../session";
+import type { AccessTokenParsed, TokenParsed } from "../token";
+import type { KeycloakMock } from "../types";
+import type { KeycloakConfig } from "./config";
+import { KeycloakContext } from "./context";
+
+export class BaseKeycloak {
+  public authenticated = false;
+  public clientId: string;
+  public email?: string;
+  public idToken?: string;
+  public idTokenParsed?: TokenParsed;
+  public realm: string;
+  public realmAccess?: RealmAccess;
+  public refreshToken?: string;
+  public refreshTokenParsed?: TokenParsed;
+  public resourceAccess?: ResourceAccess;
+  public sessionId?: string;
+  public subject?: string;
+  public token?: string;
+  public tokenParsed?: AccessTokenParsed;
+  public username?: string;
+
+  protected _keycloakClient?: KeycloakClient;
+  protected _login?: (_options: KeycloakLoginOptions) => Promise<undefined>;
+  protected _logout?: (_options: KeycloakLogoutOptions) => Promise<undefined>;
+  protected _mock?: KeycloakMock;
+
+  constructor(
+    public readonly config: KeycloakConfig,
+    input?: string | KeycloakClient | KeycloakMock | Session,
+    idToken?: string,
+    refreshToken?: string,
+    login?: (_options: KeycloakLoginOptions) => Promise<undefined>,
+    logout?: (_options: KeycloakLogoutOptions) => Promise<undefined>,
+  ) {
+    this.clientId = this.config.clientId;
+    this.realm = this.config.realm;
+    if (typeof input === "string") {
+      this.token = input;
+      this.idToken = idToken;
+      this.refreshToken = refreshToken;
+      this._parseTokens();
+    } else if (typeof input === "object") {
+      this._handleInputObject(input);
+    }
+    this._login = login;
+    this._logout = logout;
+    this._sync();
+  }
+
+  protected _handleInputObject(input: KeycloakClient | KeycloakMock | Session) {
+    if (typeof (input as KeycloakClient).init === "function") {
+      this._keycloakClient = input as KeycloakClient;
+    } else {
+      this._mock = input as KeycloakMock;
+    }
+  }
+
+  protected _parseTokens() {
+    if (this.token && !this.tokenParsed) {
+      this.tokenParsed = jwtDecode(this.token);
+    }
+    if (this.idToken && !this.idTokenParsed) {
+      this.idTokenParsed = jwtDecode(this.idToken);
+    }
+    if (this.refreshToken && !this.refreshTokenParsed) {
+      this.refreshTokenParsed = jwtDecode(this.refreshToken) as TokenParsed;
+    }
+  }
+
+  protected _clear() {
+    this.authenticated = false;
+    this.email = undefined;
+    this.idToken = undefined;
+    this.idTokenParsed = undefined;
+    this.realmAccess = undefined;
+    this.refreshToken = undefined;
+    this.refreshTokenParsed = undefined;
+    this.resourceAccess = undefined;
+    this.sessionId = undefined;
+    this.subject = undefined;
+    this.token = undefined;
+    this.tokenParsed = undefined;
+    this.username = undefined;
+  }
+
+  protected _sync() {
+    if (this._mock) {
+      this.authenticated = true;
+      this.email = this._mock.email;
+      this.username = this._mock.username;
+    } else if (this._keycloakClient) {
+      this.authenticated = !!this._keycloakClient.authenticated;
+      this.email = this._keycloakClient?.tokenParsed?.email;
+      this.idToken = this._keycloakClient?.idToken;
+      this.idTokenParsed = this._keycloakClient?.idTokenParsed;
+      this.realmAccess = this._keycloakClient?.realmAccess;
+      this.refreshToken = this._keycloakClient?.refreshToken;
+      this.refreshTokenParsed = this._keycloakClient?.refreshTokenParsed;
+      this.resourceAccess = this._keycloakClient?.resourceAccess;
+      this.sessionId = this._keycloakClient?.sessionId;
+      this.subject = this._keycloakClient?.subject;
+      this.token = this._keycloakClient?.token;
+      this.tokenParsed = this._keycloakClient?.tokenParsed;
+      this.username = this.tokenParsed?.preferred_username;
+      if (this._keycloakClient.realm) this.realm = this._keycloakClient.realm;
+      if (this._keycloakClient.clientId) {
+        this.clientId = this._keycloakClient.clientId;
+      }
+    } else if (this.tokenParsed) {
+      this.clientId = this.tokenParsed.azp || this.config.clientId;
+      this.email = this.tokenParsed.email;
+      this.realm = this.tokenParsed.iss?.split("/").pop() || this.config.realm;
+      this.realmAccess = this.tokenParsed.realm_access;
+      this.resourceAccess = this.tokenParsed.resource_access;
+      this.sessionId = this.tokenParsed.session_state;
+      this.subject = this.tokenParsed.sub;
+      this.authenticated = !!(
+        this.tokenParsed?.exp &&
+        this.idToken &&
+        this.tokenParsed.exp > Date.now() / 1000
+      );
+      this.username = this.tokenParsed?.preferred_username;
+    } else {
+      return this._clear();
+    }
+  }
+
+  async getUserInfo() {
+    if (!this.authenticated) return;
+    const response = await fetch(
+      `${this.config.url}/realms/${this.realm}/protocol/openid-connect/userinfo`,
+      {
+        method: "GET",
+        headers: {
+          Authorization: `Bearer ${this.token}`,
+          Accept: "application/json",
+        },
+      },
+    );
+    if (response.ok) return response.json();
+  }
+
+  async login(options: KeycloakLoginOptions = {}) {
+    this._clear();
+    if (this._keycloakClient) {
+      await this._keycloakClient.login(options);
+    } else {
+      await this._login?.(options);
+    }
+    this._sync();
+  }
+
+  async logout(options: KeycloakLogoutOptions = {}) {
+    if (this._keycloakClient) {
+      await this._keycloakClient.logout(options);
+    } else {
+      await this._logout?.(options);
+    }
+    this._clear();
+  }
+}
+
+export function useKeycloak() {
+  const { disabled } = useAuthConfig();
+  if (disabled) return null;
+  return useContext(KeycloakContext);
+}
+
+export type KeycloakLogoutOptions = KeycloakJsLogoutOptions;
+export type KeycloakLoginOptions = KeycloakJsLoginOptions &
+  AuthRequestPromptOptions & { redirect?: boolean };
+
+export interface ResourceAccess {
+  [clientId: string]: {
+    roles: string[];
+  };
+}
+
+export interface RealmAccess {
+  roles: string[];
+}