@multiplatform.one/keycloak 7.6.2 → 7.7.0

package/dist/esm/index.js

@@ -1,5 +1,133 @@
+// ../platform/src/platform/platformBase.ts
+import {
+  isChrome,
+  isClient,
+  isServer,
+  isTouchable,
+  isWeb,
+  isWebTouchable,
+  isWindowDefined
+} from "@tamagui/constants";
+var platformOrder = [
+  "Ios",
+  "Android",
+  // Gnome outranks Native: the GTK target reports isNative (it is not a
+  // browser) but "gnome" is the precise answer callers want.
+  "Gnome",
+  "Native",
+  // Tauri outranks Desktop/Web the same way: the webview host reports isWeb
+  // and isDesktop, but "tauri" is the precise answer.
+  "Tauri",
+  "Desktop",
+  "ChromeExtension",
+  "FirefoxExtension",
+  "WebExtension",
+  "Next",
+  "Expo",
+  "Chrome",
+  "Firefox",
+  "Web",
+  "Browser",
+  "Client",
+  "Server",
+  "Iframe",
+  "Storybook"
+];
+var platformBase = {
+  isAndroid: false,
+  isBrowser: false,
+  isChrome,
+  isChromeExtension: false,
+  isClient,
+  isDesktop: false,
+  isExpo: false,
+  isFirefox: false,
+  isFirefoxExtension: false,
+  isGnome: false,
+  isIframe: false,
+  isIos: false,
+  isNative: false,
+  isNext: false,
+  isServer,
+  isStorybook: isWindowDefined && typeof window.__STORYBOOK_ADDONS_PREVIEW === "object",
+  isTauri: false,
+  isTouchable,
+  isWeb,
+  isWebExtension: false,
+  isWebTouchable,
+  isWindowDefined,
+  preciseName: "unknown",
+  broadName: "unknown"
+};
+function getPreciseName(platform2) {
+  const flags = platform2;
+  for (const name of platformOrder) {
+    if (flags[`is${name}`]) {
+      return `${name[0].toLowerCase()}${name.slice(1)}`;
+    }
+  }
+  return "unknown";
+}
+function getBroadName(platform2) {
+  const flags = platform2;
+  for (const name of platformOrder.slice().reverse()) {
+    if (flags[`is${name}`]) {
+      return `${name[0].toLowerCase()}${name.slice(1)}`;
+    }
+  }
+  return "unknown";
+}
+
+// ../platform/src/platform/index.ts
+var isIframe = (() => {
+  if (!platformBase.isWindowDefined) return false;
+  try {
+    return window.self !== window.top;
+  } catch {
+    return true;
+  }
+})();
+var isWebExtension = !!(typeof chrome !== "undefined" && !!chrome?.runtime?.id || typeof browser !== "undefined" && !!browser?.runtime?.id);
+var platform = {
+  ...platformBase,
+  isChromeExtension: typeof chrome !== "undefined" && !!chrome?.runtime?.id,
+  isFirefoxExtension: typeof browser !== "undefined" && !!browser?.runtime?.id,
+  isIframe,
+  isWebExtension,
+  isBrowser: !!(platformBase.isWeb && platformBase.isWindowDefined && !isWebExtension),
+  isNext: platformBase.isWeb && (!platformBase.isWindowDefined || typeof window.__NEXT_DATA__ === "object"),
+  isFirefox: platformBase.isWindowDefined && !!(window?.navigator?.userAgent?.toLowerCase().indexOf("firefox") > -1)
+};
+platform.preciseName = getPreciseName(platform);
+platform.broadName = getBroadName(platform);
+
+// ../platform/src/index.ts
+var {
+  isAndroid,
+  isBrowser,
+  isChrome: isChrome2,
+  isChromeExtension,
+  isClient: isClient2,
+  isExpo,
+  isFirefox,
+  isFirefoxExtension,
+  isGnome,
+  isIframe: isIframe2,
+  isIos,
+  isNative,
+  isNext,
+  isServer: isServer2,
+  isStorybook,
+  isTauri,
+  isDesktop,
+  isTouchable: isTouchable2,
+  isWeb: isWeb2,
+  isWebExtension: isWebExtension2,
+  isWebTouchable: isWebTouchable2,
+  isWindowDefined: isWindowDefined2
+} = platform;
+
 // src/Authenticated.tsx
-import { isIframe as isIframe3, isServer as isServer3 } from "@multiplatform.one/platform";
 import { useEffect } from "react";
 import { Text } from "react-native";
 
@@ -17,26 +145,95 @@ function useAuthConfig() {
 }
 
 // src/hooks/useTokensFromQuery/index.ts
-import { isIframe } from "@multiplatform.one/platform";
 function useTokensFromQuery() {
   const { iframeSso } = useAuthConfig();
-  if (iframeSso || !isIframe) return false;
+  if (iframeSso || !isIframe2) return false;
   const query = new URLSearchParams(
     typeof window === "undefined" ? "" : window?.location?.search || ""
   );
   return typeof query.get("idToken") === "string" || typeof query.get("token") === "string" || typeof query.get("refreshToken") === "string";
 }
 
+// ../store/src/createStore.ts
+import { Store as Store2 } from "@tanstack/store";
+
+// ../store/src/persist.ts
+import { Store } from "@tanstack/store";
+function createPersistStore(initialState, persistOptions) {
+  const { key, storage: storage2, serialize = JSON.stringify, deserialize = JSON.parse } = persistOptions;
+  let hydrated = false;
+  const store = new Store(initialState);
+  store.subscribe(() => {
+    if (hydrated) {
+      const serialized = serialize(store.state);
+      void Promise.resolve(storage2.setItem(key, serialized));
+    }
+  });
+  const rehydrate = async () => {
+    const raw = await Promise.resolve(storage2.getItem(key));
+    if (raw !== null) {
+      const deserialized = deserialize(raw);
+      store.setState(() => deserialized);
+    }
+    hydrated = true;
+  };
+  const clearPersistedState = async () => {
+    await Promise.resolve(storage2.removeItem(key));
+  };
+  void rehydrate();
+  const persistStore = store;
+  persistStore.rehydrate = rehydrate;
+  persistStore.clearPersistedState = clearPersistedState;
+  return persistStore;
+}
+
+// ../store/src/storage/index.ts
+var noopStorage = {
+  getItem: () => null,
+  setItem: () => {
+  },
+  removeItem: () => {
+  }
+};
+function getStorage() {
+  if (typeof globalThis !== "undefined" && "localStorage" in globalThis && typeof globalThis.localStorage?.getItem === "function") {
+    return {
+      getItem: (name) => globalThis.localStorage.getItem(name) ?? null,
+      setItem: (name, value) => globalThis.localStorage.setItem(name, value),
+      removeItem: (name) => globalThis.localStorage.removeItem(name)
+    };
+  }
+  return noopStorage;
+}
+var storage = getStorage();
+
+// ../store/src/createStore.ts
+function createStore(initialState, options) {
+  if (options?.persist) {
+    return createPersistStore(initialState, {
+      key: options.name,
+      storage: options.storage ?? storage
+    });
+  }
+  return new Store2(initialState);
+}
+
+// ../store/src/index.ts
+import { Store as Store3, batch, createStore as createStore2 } from "@tanstack/store";
+import { useStore } from "@tanstack/react-store";
+import { useStore as tanstackUseStore } from "@tanstack/react-store";
+function useStore2(store, selector) {
+  return tanstackUseStore(store, selector ?? ((s) => s));
+}
+
 // src/state.ts
-import { createStore, useStore } from "@multiplatform.one/store";
-import { isBrowser, isIframe as isIframe2, isServer } from "@multiplatform.one/platform";
-var persist = isIframe2 || !isBrowser && !isServer;
+var persist = isIframe2 || !isBrowser && !isServer2;
 var authStore = createStore(
   { idToken: "", refreshToken: "", token: "" },
   { name: "auth", persist }
 );
 function useAuthStore() {
-  const state = useStore(authStore);
+  const state = useStore2(authStore);
   return {
     ...state,
     setIdToken: (idToken) => authStore.setState((prev) => ({ ...prev, idToken })),
@@ -99,23 +296,48 @@ function useTokensFromStore() {
 }
 
 // src/keycloak/index.ts
-import { isBrowser as isBrowser3, isServer as isServer2, isStorybook, isWeb as isWeb2 } from "@multiplatform.one/platform";
 import { useContext as useContext3 } from "react";
 
 // src/betterAuth/client.ts
 import { createAuthClient } from "better-auth/react";
 import { genericOAuthClient } from "better-auth/client/plugins";
-import { isWeb } from "@multiplatform.one/platform";
 var _client;
 function getAuthClient(baseURL) {
   if (_client) return _client;
   _client = createAuthClient({
-    baseURL: baseURL || (isWeb && typeof window !== "undefined" ? window.location.origin : ""),
+    baseURL: baseURL || (isWeb2 && typeof window !== "undefined" ? window.location.origin : ""),
     plugins: [genericOAuthClient()]
   });
   return _client;
 }
 
+// src/betterAuth/accountSelection.ts
+var validationErrorCode = "VALIDATION_ERROR";
+var known;
+function currentSelection(userId) {
+  return userId ? { useAccountCookie: true, userId } : { useAccountCookie: true };
+}
+function legacySelection(providerId, userId) {
+  return userId ? { providerId, userId } : { providerId };
+}
+function isBodyRefusal(res) {
+  return res.status === 400 && res.body?.code === validationErrorCode;
+}
+async function requestAccessToken(providerId, send, userId) {
+  const current = () => currentSelection(userId);
+  const legacy = () => legacySelection(providerId, userId);
+  if (known === "legacy") return send(legacy());
+  if (known === "current") return send(current());
+  const first = await send(current());
+  if (!isBodyRefusal(first)) {
+    if (first.status !== 400) known = "current";
+    return first;
+  }
+  const second = await send(legacy());
+  if (!isBodyRefusal(second)) known = "legacy";
+  return second;
+}
+
 // src/frappeToken.ts
 var cached;
 var pending;
@@ -153,17 +375,21 @@ async function getKeycloakBearerToken() {
 }
 async function fetchTokenOnce() {
   try {
-    const res = await fetch(`${window.location.origin}/api/auth/get-access-token`, {
-      method: "POST",
-      credentials: "include",
-      headers: { "Content-Type": "application/json" },
-      body: JSON.stringify({ providerId: "keycloak" })
+    let payload = null;
+    const res = await requestAccessToken("keycloak", async (selection) => {
+      const response = await fetch(`${window.location.origin}/api/auth/get-access-token`, {
+        method: "POST",
+        credentials: "include",
+        headers: { "Content-Type": "application/json" },
+        body: JSON.stringify(selection)
+      });
+      payload = await response.json().catch(() => null);
+      return { status: response.status, body: payload };
     });
-    if (!res.ok) {
-      const body = await res.json().catch(() => null);
-      return { ok: false, kind: classifyAccessTokenResponse(res.status, body) };
+    if (res.status < 200 || res.status >= 300) {
+      return { ok: false, kind: classifyAccessTokenResponse(res.status, res.body) };
     }
-    const data = await res.json().catch(() => null);
+    const data = payload;
     if (!data?.accessToken) {
       return { ok: false, kind: "signed-out" };
     }
@@ -227,11 +453,10 @@ function watchKeycloakBearerTokenRevalidate() {
 }
 
 // src/session/index.ts
-import { isBrowser as isBrowser2 } from "@multiplatform.one/platform";
 var useSession = (_options) => {
   return { session: null, status: "unauthenticated" };
 };
-if (isBrowser2) {
+if (isBrowser) {
   useSession = (_options) => {
     const client = getAuthClient();
     const { data, isPending, error: _error } = client.useSession();
@@ -408,7 +633,7 @@ var Keycloak = class extends BaseKeycloak {
     this._clear();
     if (this._keycloakClient) {
       await this._keycloakClient.login(options);
-    } else if (isBrowser3 && !isServer2) {
+    } else if (isBrowser && !isServer2) {
       const client = getAuthClient();
       await client.signIn.social({
         provider: "keycloak",
@@ -436,7 +661,7 @@ var Keycloak = class extends BaseKeycloak {
       }
       window.location.href = `${origin}/api/auth/sign-out/sso?callbackURL=${encodeURIComponent(callbackURL)}`;
       return;
-    } else if (isBrowser3 && !isServer2) {
+    } else if (isBrowser && !isServer2) {
       const client = getAuthClient();
       await client.signOut({
         fetchOptions: {
@@ -485,7 +710,7 @@ function Authenticated({
   const keycloak = useKeycloak();
   const tokensFromQuery = useTokensFromQuery();
   useEffect(() => {
-    if (!keycloak || !authConfig.iframeSso && isIframe3 || isServer3 || keycloak.authenticated || tokensFromQuery) {
+    if (!keycloak || !authConfig.iframeSso && isIframe2 || isServer2 || keycloak.authenticated || tokensFromQuery) {
       return;
     }
     keycloak?.login({
@@ -506,8 +731,86 @@ function withAuthenticated(Component, options = {}) {
   return (props) => /* @__PURE__ */ jsx(Authenticated, { ...options, children: /* @__PURE__ */ jsx(Component, { ...props }) });
 }
 
+// ../logger/src/base.ts
+import log from "loglevel";
+var defaultLoggerConfig = {
+  name: "default",
+  type: "pretty",
+  level: true ? 1 /* Debug */ : 2 /* Info */
+};
+var BaseLogger = class {
+  constructor(config = {}) {
+    const { metadata, name, level } = typeof config === "string" ? { metadata: void 0, name: config, level: void 0 } : config;
+    this.metadata = metadata || {};
+    this.name = name || "default";
+    this.logger = name ? log.getLogger(name) : log;
+    if (level !== void 0) this.logger.setLevel(level);
+    this.transport = this.createTransport?.();
+  }
+  trace(...args) {
+    this.logger.trace(...args);
+    this.sendToTransport(0 /* Trace */, args);
+  }
+  debug(...args) {
+    this.logger.debug(...args);
+    this.sendToTransport(1 /* Debug */, args);
+  }
+  info(...args) {
+    this.logger.info(...args);
+    this.sendToTransport(2 /* Info */, args);
+  }
+  warn(...args) {
+    this.logger.warn(...args);
+    this.sendToTransport(3 /* Warn */, args);
+  }
+  error(...args) {
+    this.logger.error(...args);
+    this.sendToTransport(4 /* Error */, args);
+  }
+  log(...args) {
+    this.logger.debug(...args);
+    this.sendToTransport(1 /* Debug */, args);
+  }
+  sendToTransport(level, args) {
+    if (this.transport) {
+      this.transport.send({
+        level,
+        message: args[0],
+        args: args.slice(1),
+        platform: platform.preciseName,
+        timestamp: (/* @__PURE__ */ new Date()).toISOString()
+      });
+    }
+  }
+  getSubLogger(input) {
+    const subConfig = typeof input === "string" ? {
+      name: input,
+      metadata: this.metadata,
+      level: this.logger.getLevel()
+    } : {
+      ...input,
+      metadata: { ...this.metadata, ...input.metadata }
+    };
+    return new this.constructor(subConfig);
+  }
+};
+
+// ../logger/src/index.ts
+var Logger = class extends BaseLogger {
+  constructor(config = {}) {
+    const metadata = {
+      platform: platform.preciseName
+    };
+    super({
+      name: metadata.platform,
+      ...typeof config === "string" ? { name: config } : config,
+      metadata
+    });
+  }
+};
+var logger = new Logger();
+
 // src/provider/AfterAuth.tsx
-import { logger } from "@multiplatform.one/logger";
 import { useEffect as useEffect2 } from "react";
 import { Fragment as Fragment2, jsx as jsx2 } from "react/jsx-runtime";
 function AfterAuth({ children, loadingComponent: _loadingComponent }) {
@@ -564,8 +867,6 @@ function AfterAuth({ children, loadingComponent: _loadingComponent }) {
 
 // src/provider/authProvider/index.tsx
 import KeycloakClient from "@multiplatform.one/keycloak-js";
-import { isIframe as isIframe4, isWindowDefined } from "@multiplatform.one/platform";
-import { logger as logger2 } from "@multiplatform.one/logger";
 import { useCallback, useEffect as useEffect3, useMemo, useState } from "react";
 
 // src/Loading.tsx
@@ -602,7 +903,7 @@ function AuthProvider({
   loadingComponent
 }) {
   const { debug, messageHandlerKeys, iframeSso } = useAuthConfig();
-  const query = new URLSearchParams(isWindowDefined ? window?.location?.search || "" : "");
+  const query = new URLSearchParams(isWindowDefined2 ? window?.location?.search || "" : "");
   const authStore2 = useAuthStore();
   const [keycloak, setKeycloak] = useState();
   const idTokenQuery = query.get("idToken");
@@ -614,20 +915,20 @@ function AuthProvider({
   const [loadedMessagePosted, setLoadedMessagePosted] = useState(false);
   const initialRefreshTokenQuery = useMemo(
     () => validOrRefreshableToken(
-      !iframeSso && isIframe4 || typeof refreshTokenQuery === "string" ? refreshTokenQuery || true : void 0
+      !iframeSso && isIframe2 || typeof refreshTokenQuery === "string" ? refreshTokenQuery || true : void 0
     ),
     [refreshTokenQuery, iframeSso]
   );
   const initialIdTokenQuery = useMemo(
     () => validOrRefreshableToken(
-      !iframeSso && isIframe4 || typeof idTokenQuery === "string" ? idTokenQuery || true : void 0,
+      !iframeSso && isIframe2 || typeof idTokenQuery === "string" ? idTokenQuery || true : void 0,
       initialRefreshTokenQuery
     ),
     [idTokenQuery, initialRefreshTokenQuery, iframeSso]
   );
   const initialTokenQuery = useMemo(
     () => validOrRefreshableToken(
-      isIframe4 ? typeof tokenQuery === "string" ? tokenQuery || true : void 0 : void 0,
+      isIframe2 ? typeof tokenQuery === "string" ? tokenQuery || true : void 0 : void 0,
       initialRefreshTokenQuery
     ),
     [tokenQuery, initialRefreshTokenQuery, iframeSso]
@@ -638,7 +939,7 @@ function AuthProvider({
     idToken: initialIdTokenQuery
   });
   const authSource = useMemo(() => {
-    if (!iframeSso && isIframe4) {
+    if (!iframeSso && isIframe2) {
       if (initialTokenQuery) return "query" /* Query */;
       return "store" /* Store */;
     }
@@ -691,7 +992,7 @@ function AuthProvider({
     if (disabled || authSource !== "query" /* Query */ || tokens.token === true || tokens.refreshToken === true || tokens.idToken === true || loadedMessagePosted) {
       return;
     }
-    if (debug) logger2.debug("post message", JSON.stringify({ type: "LOADED" }));
+    if (debug) logger.debug("post message", JSON.stringify({ type: "LOADED" }));
     (messageHandlerKeys || []).forEach((key) => {
       window?.webkit?.messageHandlers?.[key]?.postMessage(JSON.stringify({ type: "LOADED" }));
     });
@@ -712,11 +1013,11 @@ function AuthProvider({
         } catch {
         }
       }
-      if (debug) logger2.debug("received message", JSON.stringify(data));
+      if (debug) logger.debug("received message", JSON.stringify(data));
       const message = data;
       if (!message.type) return;
       if (message.type.toUpperCase() === "REFRESH_TOKEN" && message.payload) {
-        if (debug) logger2.debug("setting refresh token", message.payload);
+        if (debug) logger.debug("setting refresh token", message.payload);
         setTokens((tokens2) => ({
           ...tokens2,
           refreshToken: validOrRefreshableToken(message.payload)
@@ -726,7 +1027,7 @@ function AuthProvider({
       }
     }
     if (debug) {
-      logger2.debug(
+      logger.debug(
         "listening for message",
         JSON.stringify({
           type: "REFRESH_TOKEN",
@@ -750,11 +1051,11 @@ function AuthProvider({
         } catch {
         }
       }
-      if (debug) logger2.debug("received message", JSON.stringify(data));
+      if (debug) logger.debug("received message", JSON.stringify(data));
       const message = data;
       if (!message.type) return;
       if (message.type.toUpperCase() === "TOKEN" && message.payload) {
-        if (debug) logger2.debug("setting token", message.payload);
+        if (debug) logger.debug("setting token", message.payload);
         setTokens((tokens2) => ({
           ...tokens2,
           token: validOrRefreshableToken(message.payload, tokens2.refreshToken)
@@ -764,7 +1065,7 @@ function AuthProvider({
       }
     }
     if (debug) {
-      logger2.debug(
+      logger.debug(
         "listening for message",
         JSON.stringify({
           type: "TOKEN",
@@ -788,11 +1089,11 @@ function AuthProvider({
         } catch {
         }
       }
-      if (debug) logger2.debug("received message", JSON.stringify(data));
+      if (debug) logger.debug("received message", JSON.stringify(data));
       const message = data;
       if (!message.type) return;
       if (message.type.toUpperCase() === "ID_TOKEN" && message.payload) {
-        if (debug) logger2.debug("setting id token", message.payload);
+        if (debug) logger.debug("setting id token", message.payload);
         setTokens((tokens2) => ({
           ...tokens2,
           idToken: validOrRefreshableToken(message.payload, tokens2.refreshToken)
@@ -802,7 +1103,7 @@ function AuthProvider({
       }
     }
     if (debug) {
-      logger2.debug(
+      logger.debug(
         "listening for message",
         JSON.stringify({
           type: "ID_TOKEN",
@@ -859,7 +1160,7 @@ function AuthProvider({
         initOptions2.refreshToken = tokens.refreshToken;
       }
     }
-    if (!iframeSso && isIframe4 || tokens.token && !tokens.refreshToken) {
+    if (!iframeSso && isIframe2 || tokens.token && !tokens.refreshToken) {
       initOptions2.checkLoginIframe = false;
       initOptions2.flow = "implicit";
       initOptions2.onLoad = void 0;
@@ -900,7 +1201,7 @@ function AuthProvider({
         try {
           await keycloakClient.updateToken(5);
         } catch (err) {
-          logger2.warn(err);
+          logger.warn(err);
           setKeycloak(new Keycloak(keycloakConfig, keycloakClient));
         }
       };