@multiplatform.one/keycloak 7.34.4 → 7.36.0

package/dist/cjs/index.cjs

@@ -33,6 +33,7 @@ __export(index_exports, {
   AfterAuth: () => AfterAuth,
   AuthConfigContext: () => AuthConfigContext,
   AuthProvider: () => AuthProvider,
+  AuthTimeoutError: () => AuthTimeoutError,
   Authenticated: () => Authenticated,
   BaseKeycloak: () => BaseKeycloak,
   Keycloak: () => Keycloak,
@@ -40,12 +41,15 @@ __export(index_exports, {
   KeycloakProvider: () => KeycloakProvider,
   defaultAuthConfig: () => defaultAuthConfig,
   getAllWalletAddresses: () => getAllWalletAddresses,
+  getAuthError: () => getAuthError,
   getKeycloakBearerToken: () => getKeycloakBearerToken,
   getWalletAddresses: () => getWalletAddresses,
   getWalletsFromToken: () => getWalletsFromToken,
   hasWallets: () => hasWallets,
   isTokenExpired: () => isTokenExpired,
+  setAuthError: () => setAuthError,
   useAuthConfig: () => useAuthConfig,
+  useAuthError: () => useAuthError,
   useKeycloak: () => useKeycloak,
   useSession: () => useSession,
   useTokensFromQuery: () => useTokensFromQuery,
@@ -178,7 +182,7 @@ var {
 } = platform;
 
 // src/Authenticated.tsx
-var import_react8 = require("react");
+var import_react9 = require("react");
 var import_react_native = require("react-native");
 
 // src/hooks/useAuthConfig.ts
@@ -346,7 +350,7 @@ function useTokensFromStore() {
 }
 
 // src/keycloak/index.ts
-var import_react7 = require("react");
+var import_react8 = require("react");
 
 // src/betterAuth/client.ts
 var import_react3 = require("better-auth/react");
@@ -502,37 +506,66 @@ function watchKeycloakBearerTokenRevalidate() {
   };
 }
 
+// src/session/authError.ts
+var import_react4 = require("react");
+var error;
+var listeners = /* @__PURE__ */ new Set();
+var AuthTimeoutError = class extends Error {
+  constructor(timeoutMs = 1e4) {
+    super(`Authentication request timed out after ${timeoutMs}ms`);
+    this.name = "AuthTimeoutError";
+  }
+};
+function setAuthError(next) {
+  if (error === next) return;
+  error = next;
+  for (const listener of listeners) listener();
+}
+function getAuthError() {
+  return error;
+}
+function subscribe(listener) {
+  listeners.add(listener);
+  return () => listeners.delete(listener);
+}
+function useAuthError() {
+  return (0, import_react4.useSyncExternalStore)(subscribe, getAuthError, getAuthError);
+}
+
 // src/session/index.ts
 var useSession = (_options) => {
-  return { session: null, status: "unauthenticated" };
+  return { session: null, status: "unauthenticated", error: useAuthError() };
 };
 if (isBrowser) {
   useSession = (_options) => {
     const client = getAuthClient();
-    const { data, isPending, error: _error } = client.useSession();
+    const { data, isPending, error: sessionError } = client.useSession();
+    const authError = useAuthError();
+    const error2 = sessionError ?? authError;
     if (isPending) {
-      return { session: null, status: "loading" };
+      return { session: null, status: "loading", error: error2 };
     }
     if (!data?.user) {
-      return { session: null, status: "unauthenticated" };
+      return { session: null, status: "unauthenticated", error: error2 };
     }
     return {
       session: {
         user: data.user,
         expires: data.session?.expiresAt?.toString()
       },
-      status: "authenticated"
+      status: "authenticated",
+      error: error2
     };
   };
 }
 
 // src/keycloak/base.ts
 var import_jwt_decode2 = require("jwt-decode");
-var import_react5 = require("react");
+var import_react6 = require("react");
 
 // src/keycloak/context.ts
-var import_react4 = require("react");
-var KeycloakContext = (0, import_react4.createContext)(void 0);
+var import_react5 = require("react");
+var KeycloakContext = (0, import_react5.createContext)(void 0);
 
 // src/keycloak/base.ts
 var BaseKeycloak = class {
@@ -641,8 +674,9 @@ var BaseKeycloak = class {
     this._clear();
     if (this._keycloakClient) {
       await this._keycloakClient.login(options);
-    } else {
-      await this._login?.(options);
+    } else if (this._login) {
+      await this._login(options);
+      return;
     }
     this._sync();
   }
@@ -657,8 +691,8 @@ var BaseKeycloak = class {
 };
 
 // src/keycloak/config.ts
-var import_react6 = require("react");
-var KeycloakConfigContext = (0, import_react6.createContext)({
+var import_react7 = require("react");
+var KeycloakConfigContext = (0, import_react7.createContext)({
   clientId: "",
   realm: "",
   url: ""
@@ -680,19 +714,29 @@ var Keycloak = class extends BaseKeycloak {
     }
   }
   async login(options = {}) {
-    this._clear();
-    if (this._keycloakClient) {
-      await this._keycloakClient.login(options);
-    } else if (isBrowser && !isServer2) {
-      const client = getAuthClient();
-      await client.signIn.social({
-        provider: "keycloak",
-        callbackURL: options.redirectUri || (isWeb2 ? window.location.href : "")
-      });
-    } else {
-      await this._login?.(options);
+    setAuthError();
+    try {
+      this._clear();
+      if (this._keycloakClient) {
+        await this._keycloakClient.login(options);
+        this._sync();
+      } else if (this._login) {
+        await this._login(options);
+      } else if (isBrowser && !isServer2) {
+        const client = getAuthClient();
+        const result = await client.signIn.social({
+          provider: "keycloak",
+          callbackURL: options.redirectUri || (isWeb2 ? window.location.href : "")
+        });
+        if (result?.error) {
+          throw result.error instanceof Error ? result.error : new Error(result.error.message || "Sign-in failed");
+        }
+      }
+    } catch (cause) {
+      const error2 = cause instanceof Error ? cause : new Error(String(cause));
+      setAuthError(error2);
+      throw error2;
     }
-    this._sync();
   }
   async logout(options = {}) {
     if (this._keycloakClient) {
@@ -725,12 +769,12 @@ var Keycloak = class extends BaseKeycloak {
   }
 };
 function useKeycloak() {
-  const keycloak = (0, import_react7.useContext)(KeycloakContext);
-  const keycloakConfig = (0, import_react7.useContext)(KeycloakConfigContext);
+  const keycloak = (0, import_react8.useContext)(KeycloakContext);
+  const keycloakConfig = (0, import_react8.useContext)(KeycloakConfigContext);
   const { disabled } = useAuthConfig();
+  const { session, status } = useSession();
   if (disabled) return null;
   if (keycloak) return keycloak;
-  const { session, status } = useSession();
   if (isStorybook) {
     return new Keycloak(keycloakConfig, {
       email: "storybook@example.com",
@@ -759,7 +803,7 @@ function Authenticated({
   const authConfig = useAuthConfig();
   const keycloak = useKeycloak();
   const tokensFromQuery = useTokensFromQuery();
-  (0, import_react8.useEffect)(() => {
+  (0, import_react9.useEffect)(() => {
     if (!keycloak || !authConfig.iframeSso && isIframe2 || isServer2 || keycloak.authenticated || tokensFromQuery) {
       return;
     }
@@ -861,13 +905,13 @@ var Logger = class extends BaseLogger {
 var logger = new Logger();
 
 // src/provider/AfterAuth.tsx
-var import_react9 = require("react");
+var import_react10 = require("react");
 var import_jsx_runtime2 = require("react/jsx-runtime");
 function AfterAuth({ children, loadingComponent: _loadingComponent }) {
   const authConfig = useAuthConfig();
   const authStore2 = useAuthStore();
   const keycloak = useKeycloak();
-  (0, import_react9.useEffect)(() => {
+  (0, import_react10.useEffect)(() => {
     if (!persist || !keycloak?.authenticated) return;
     if (keycloak.token) {
       authStore2.setTokens({
@@ -886,38 +930,38 @@ function AfterAuth({ children, loadingComponent: _loadingComponent }) {
     keycloak?.idToken,
     keycloak?.refreshToken
   ]);
-  (0, import_react9.useEffect)(() => {
+  (0, import_react10.useEffect)(() => {
     if (authConfig.debug && keycloak?.token) {
       logger.debug("token", keycloak.token);
     }
   }, [authConfig.debug, keycloak?.token]);
-  (0, import_react9.useEffect)(() => {
+  (0, import_react10.useEffect)(() => {
     if (authConfig.debug && keycloak?.idToken) {
       logger.debug("idToken", keycloak.idToken);
     }
   }, [authConfig.debug, keycloak?.idToken]);
-  (0, import_react9.useEffect)(() => {
+  (0, import_react10.useEffect)(() => {
     if (authConfig.debug && keycloak?.refreshToken) {
       logger.debug("refreshToken", keycloak.refreshToken);
     }
   }, [authConfig.debug, keycloak?.refreshToken]);
-  (0, import_react9.useEffect)(() => {
+  (0, import_react10.useEffect)(() => {
     if (authConfig.debug && keycloak?.authenticated) {
       logger.debug("authenticated", keycloak.authenticated);
     }
   }, [authConfig.debug, keycloak?.authenticated]);
-  (0, import_react9.useEffect)(() => {
+  (0, import_react10.useEffect)(() => {
     if (authConfig.debug && keycloak === null) {
       logger.debug("keycloak disabled");
     }
   }, [authConfig.debug, keycloak]);
-  (0, import_react9.useEffect)(() => watchKeycloakBearerTokenRevalidate(), []);
+  (0, import_react10.useEffect)(() => watchKeycloakBearerTokenRevalidate(), []);
   return /* @__PURE__ */ (0, import_jsx_runtime2.jsx)(import_jsx_runtime2.Fragment, { children });
 }
 
 // src/provider/authProvider/index.tsx
 var import_keycloak_js = __toESM(require("@multiplatform.one/keycloak-js"));
-var import_react10 = require("react");
+var import_react11 = require("react");
 
 // src/Loading.tsx
 var import_react_native2 = require("react-native");
@@ -955,47 +999,47 @@ function AuthProvider({
   const { debug, messageHandlerKeys, iframeSso } = useAuthConfig();
   const query = new URLSearchParams(isWindowDefined2 ? window?.location?.search || "" : "");
   const authStore2 = useAuthStore();
-  const [keycloak, setKeycloak] = (0, import_react10.useState)();
+  const [keycloak, setKeycloak] = (0, import_react11.useState)();
   const idTokenQuery = query.get("idToken");
   const refreshTokenQuery = query.get("refreshToken");
   const tokenQuery = query.get("token");
-  const [listeningRefreshToken, setListeningRefreshToken] = (0, import_react10.useState)(false);
-  const [listeningToken, setListeningToken] = (0, import_react10.useState)(false);
-  const [listeningIdToken, setListeningIdToken] = (0, import_react10.useState)(false);
-  const [loadedMessagePosted, setLoadedMessagePosted] = (0, import_react10.useState)(false);
-  const initialRefreshTokenQuery = (0, import_react10.useMemo)(
+  const [listeningRefreshToken, setListeningRefreshToken] = (0, import_react11.useState)(false);
+  const [listeningToken, setListeningToken] = (0, import_react11.useState)(false);
+  const [listeningIdToken, setListeningIdToken] = (0, import_react11.useState)(false);
+  const [loadedMessagePosted, setLoadedMessagePosted] = (0, import_react11.useState)(false);
+  const initialRefreshTokenQuery = (0, import_react11.useMemo)(
     () => validOrRefreshableToken(
       !iframeSso && isIframe2 || typeof refreshTokenQuery === "string" ? refreshTokenQuery || true : void 0
     ),
     [refreshTokenQuery, iframeSso]
   );
-  const initialIdTokenQuery = (0, import_react10.useMemo)(
+  const initialIdTokenQuery = (0, import_react11.useMemo)(
     () => validOrRefreshableToken(
       !iframeSso && isIframe2 || typeof idTokenQuery === "string" ? idTokenQuery || true : void 0,
       initialRefreshTokenQuery
     ),
     [idTokenQuery, initialRefreshTokenQuery, iframeSso]
   );
-  const initialTokenQuery = (0, import_react10.useMemo)(
+  const initialTokenQuery = (0, import_react11.useMemo)(
     () => validOrRefreshableToken(
       isIframe2 ? typeof tokenQuery === "string" ? tokenQuery || true : void 0 : void 0,
       initialRefreshTokenQuery
     ),
     [tokenQuery, initialRefreshTokenQuery, iframeSso]
   );
-  const [tokens, setTokens] = (0, import_react10.useState)({
+  const [tokens, setTokens] = (0, import_react11.useState)({
     refreshToken: initialRefreshTokenQuery,
     token: initialTokenQuery,
     idToken: initialIdTokenQuery
   });
-  const authSource = (0, import_react10.useMemo)(() => {
+  const authSource = (0, import_react11.useMemo)(() => {
     if (!iframeSso && isIframe2) {
       if (initialTokenQuery) return "query" /* Query */;
       return "store" /* Store */;
     }
     return "session" /* Session */;
   }, [initialTokenQuery, iframeSso]);
-  const authStrategy = (0, import_react10.useMemo)(() => {
+  const authStrategy = (0, import_react11.useMemo)(() => {
     if (authSource === "session" /* Session */) return "better-auth" /* BetterAuth */;
     if (authSource === "query" /* Query */) {
       return "keycloak-client-implicit" /* KeycloakClientImplicit */;
@@ -1006,7 +1050,7 @@ function AuthProvider({
     }
     return "keycloak-client-standard" /* KeycloakClientStandard */;
   }, [authSource, authStore2.token, tokens.token]);
-  const isLoading = (0, import_react10.useMemo)(() => {
+  const isLoading = (0, import_react11.useMemo)(() => {
     if (!authStrategy) return true;
     if (authStrategy === "keycloak-client-implicit" /* KeycloakClientImplicit */) {
       if (authSource === "query" /* Query */ && (initialRefreshTokenQuery === true || initialTokenQuery === true || initialIdTokenQuery === true)) {
@@ -1024,7 +1068,7 @@ function AuthProvider({
     initialRefreshTokenQuery,
     initialTokenQuery
   ]);
-  (0, import_react10.useEffect)(() => {
+  (0, import_react11.useEffect)(() => {
     if (!persist || tokens.idToken || tokens.refreshToken || tokens.token) {
       return;
     }
@@ -1038,7 +1082,7 @@ function AuthProvider({
       token
     });
   }, [authStore2, persist]);
-  (0, import_react10.useEffect)(() => {
+  (0, import_react11.useEffect)(() => {
     if (disabled || authSource !== "query" /* Query */ || tokens.token === true || tokens.refreshToken === true || tokens.idToken === true || loadedMessagePosted) {
       return;
     }
@@ -1050,7 +1094,7 @@ function AuthProvider({
     window?.parent?.postMessage(JSON.stringify({ type: "LOADED" }));
     setLoadedMessagePosted(true);
   }, [disabled, authSource, tokens.token, tokens.refreshToken, tokens.idToken]);
-  (0, import_react10.useEffect)(() => {
+  (0, import_react11.useEffect)(() => {
     if (disabled || tokens.refreshToken !== true || listeningRefreshToken) {
       return;
     }
@@ -1090,7 +1134,7 @@ function AuthProvider({
       window.removeEventListener("message", messageCallback);
     };
   }, [disabled, tokens.refreshToken, listeningRefreshToken]);
-  (0, import_react10.useEffect)(() => {
+  (0, import_react11.useEffect)(() => {
     if (disabled || tokens.token !== true || listeningToken) return;
     setListeningToken(true);
     function messageCallback(e) {
@@ -1128,7 +1172,7 @@ function AuthProvider({
       window.removeEventListener("message", messageCallback);
     };
   }, [disabled, tokens.token, listeningToken]);
-  (0, import_react10.useEffect)(() => {
+  (0, import_react11.useEffect)(() => {
     if (disabled || tokens.idToken !== true || listeningIdToken) return;
     setListeningIdToken(true);
     function messageCallback(e) {
@@ -1166,7 +1210,7 @@ function AuthProvider({
       window.removeEventListener("message", messageCallback);
     };
   }, [disabled, tokens.idToken, listeningIdToken]);
-  const keycloakClient = (0, import_react10.useMemo)(
+  const keycloakClient = (0, import_react11.useMemo)(
     () => !disabled && !isLoading && (authStrategy === "keycloak-client-standard" /* KeycloakClientStandard */ || authStrategy === "keycloak-client-implicit" /* KeycloakClientImplicit */) && keycloakConfig ? new import_keycloak_js.default({
       clientId: keycloakConfig.publicClientId || keycloakConfig.clientId,
       realm: keycloakConfig.realm,
@@ -1183,7 +1227,7 @@ function AuthProvider({
       tokens.token
     ]
   );
-  const initOptions = (0, import_react10.useMemo)(() => {
+  const initOptions = (0, import_react11.useMemo)(() => {
     if (!keycloakClient) return;
     const initOptions2 = {
       ...defaultKeycloakInitOptions,
@@ -1226,7 +1270,7 @@ function AuthProvider({
     tokens.refreshToken,
     iframeSso
   ]);
-  (0, import_react10.useEffect)(() => {
+  (0, import_react11.useEffect)(() => {
     if (!keycloakClient || !initOptions || authStrategy === "keycloak-client-implicit" /* KeycloakClientImplicit */ && (typeof tokens.token !== "string" || !tokens.token)) {
       return;
     }
@@ -1259,7 +1303,7 @@ function AuthProvider({
       setKeycloak(new Keycloak(keycloakConfig, keycloakClient));
     })();
   }, [keycloakClient, initOptions, authStrategy, tokens.token]);
-  const render = (0, import_react10.useCallback)(
+  const render = (0, import_react11.useCallback)(
     () => /* @__PURE__ */ (0, import_jsx_runtime4.jsx)(KeycloakConfigContext.Provider, { value: keycloakConfig, children: /* @__PURE__ */ (0, import_jsx_runtime4.jsx)(KeycloakContext.Provider, { value: keycloak, children: /* @__PURE__ */ (0, import_jsx_runtime4.jsx)(AfterAuth, { loadingComponent, children }) }) }),
     [children, keycloak, keycloakConfig]
   );
@@ -1272,7 +1316,7 @@ function AuthProvider({
 }
 
 // src/provider/KeycloakProvider.tsx
-var import_react11 = require("react");
+var import_react12 = require("react");
 var import_jsx_runtime5 = require("react/jsx-runtime");
 function KeycloakProvider({
   baseUrl,
@@ -1281,28 +1325,34 @@ function KeycloakProvider({
   clientId,
   expoScheme,
   loginRedirectUri,
+  loadingComponent,
   debug,
   disabled,
   iframeSso,
   publicClientId,
   realm
 }) {
-  const authConfig = (0, import_react11.useMemo)(
+  const authConfig = (0, import_react12.useMemo)(
     () => ({ debug, disabled, iframeSso, loginRedirectUri }),
     [debug, disabled, iframeSso, loginRedirectUri]
   );
+  const keycloakConfig = (0, import_react12.useMemo)(
+    () => ({
+      clientId: clientId || "app",
+      publicClientId,
+      realm: realm || "main",
+      url: baseUrl ?? "",
+      betterAuthBaseUrl,
+      expoScheme
+    }),
+    [clientId, publicClientId, realm, baseUrl, betterAuthBaseUrl, expoScheme]
+  );
   return /* @__PURE__ */ (0, import_jsx_runtime5.jsx)(AuthConfigContext.Provider, { value: authConfig, children: /* @__PURE__ */ (0, import_jsx_runtime5.jsx)(
     AuthProvider,
     {
       disabled,
-      keycloakConfig: {
-        clientId: clientId || "app",
-        publicClientId,
-        realm: realm || "main",
-        url: baseUrl ?? "",
-        betterAuthBaseUrl,
-        expoScheme
-      },
+      keycloakConfig,
+      loadingComponent,
       children
     }
   ) });