@multiplatform.one/web3 7.23.1 → 7.24.0

package/dist/esm/keycloak/directGrant.native.js

@@ -0,0 +1,205 @@
+import { KeycloakWalletError, ProfileIncompleteError } from "./types.native.js";
+function _instanceof(left, right) {
+  "@swc/helpers - instanceof";
+
+  if (right != null && typeof Symbol !== "undefined" && right[Symbol.hasInstance]) {
+    return !!right[Symbol.hasInstance](left);
+  } else {
+    return left instanceof right;
+  }
+}
+function refreshRefused(error) {
+  if (!_instanceof(error, KeycloakWalletError)) return false;
+  return error.status === 401 || error.status === 400 && error.error === "invalid_grant";
+}
+function profileIncomplete(status, data) {
+  var _data_error_description;
+  if (data.error === "resolve_required_actions") return true;
+  return status === 400 && data.error === "invalid_grant" && /not fully set up/i.test((_data_error_description = data.error_description) !== null && _data_error_description !== void 0 ? _data_error_description : "");
+}
+function createDirectGrant(kc, opts) {
+  var _opts_now, _opts_scope;
+  var now = (_opts_now = opts.now) !== null && _opts_now !== void 0 ? _opts_now : Date.now;
+  var scope = Array.isArray(opts.scope) ? opts.scope.join(" ") : (_opts_scope = opts.scope) !== null && _opts_scope !== void 0 ? _opts_scope : "openid";
+  var listeners = /* @__PURE__ */new Set();
+  var state = {
+    tokens: null,
+    error: null
+  };
+  var refreshing;
+  var setState = function setState2(next) {
+    state = next;
+    var _iteratorNormalCompletion = true,
+      _didIteratorError = false,
+      _iteratorError = void 0;
+    try {
+      for (var _iterator = listeners[Symbol.iterator](), _step; !(_iteratorNormalCompletion = (_step = _iterator.next()).done); _iteratorNormalCompletion = true) {
+        var listener = _step.value;
+        listener(state);
+      }
+    } catch (err) {
+      _didIteratorError = true;
+      _iteratorError = err;
+    } finally {
+      try {
+        if (!_iteratorNormalCompletion && _iterator.return != null) {
+          _iterator.return();
+        }
+      } finally {
+        if (_didIteratorError) {
+          throw _iteratorError;
+        }
+      }
+    }
+  };
+  var form = function form2(params) {
+    return new URLSearchParams({
+      client_id: opts.clientId,
+      ...params,
+      ...(opts.clientSecret ? {
+        client_secret: opts.clientSecret
+      } : {})
+    }).toString();
+  };
+  var tokenRequest = async function tokenRequest2(params) {
+    var _data_token_type, _data_expires_in;
+    var res = await kc.request(kc.tokenUrl, {
+      method: "POST",
+      headers: {
+        "content-type": "application/x-www-form-urlencoded"
+      },
+      body: form(params)
+    });
+    var data = await res.json().catch(function () {
+      return {};
+    });
+    if (!res.ok || !data.access_token) {
+      var Refusal = profileIncomplete(res.status, data) ? ProfileIncompleteError : KeycloakWalletError;
+      throw new Refusal(data.error_description || data.error || `Keycloak token request failed (${res.status})`, res.status, {
+        error: data.error,
+        errorDescription: data.error_description
+      });
+    }
+    var issuedAt = now();
+    return {
+      accessToken: data.access_token,
+      refreshToken: data.refresh_token,
+      idToken: data.id_token,
+      tokenType: (_data_token_type = data.token_type) !== null && _data_token_type !== void 0 ? _data_token_type : "Bearer",
+      scope: data.scope,
+      expiresAt: issuedAt + ((_data_expires_in = data.expires_in) !== null && _data_expires_in !== void 0 ? _data_expires_in : 0) * 1e3,
+      refreshExpiresAt: data.refresh_expires_in ? issuedAt + data.refresh_expires_in * 1e3 : void 0
+    };
+  };
+  var grant = {
+    get state() {
+      return state;
+    },
+    get tokens() {
+      return state.tokens;
+    },
+    async login(param) {
+      var {
+        username,
+        password
+      } = param;
+      try {
+        var tokens = await tokenRequest({
+          grant_type: "password",
+          username,
+          password,
+          scope
+        });
+        setState({
+          tokens,
+          error: null
+        });
+        return tokens;
+      } catch (error) {
+        setState({
+          tokens: state.tokens,
+          error
+        });
+        throw error;
+      } finally {
+        kc.resetNonce();
+      }
+    },
+    onSign: async function onSign(credentials) {
+      await grant.login(credentials);
+      return true;
+    },
+    refresh(refreshToken) {
+      var _state_tokens;
+      var token = refreshToken !== null && refreshToken !== void 0 ? refreshToken : (_state_tokens = state.tokens) === null || _state_tokens === void 0 ? void 0 : _state_tokens.refreshToken;
+      if (!token) return Promise.reject(new Error("no refresh token"));
+      if (!refreshing) {
+        var startedWith = state.tokens;
+        var superseded = function superseded2(error) {
+          if (state.tokens) return state.tokens;
+          throw error;
+        };
+        refreshing = tokenRequest({
+          grant_type: "refresh_token",
+          refresh_token: token
+        }).then(function (tokens) {
+          if (state.tokens !== startedWith) {
+            return superseded(new Error("signed out while the refresh was in flight"));
+          }
+          setState({
+            tokens,
+            error: null
+          });
+          return tokens;
+        }, function (error) {
+          if (state.tokens !== startedWith) return superseded(error);
+          setState({
+            tokens: refreshRefused(error) ? null : state.tokens,
+            error
+          });
+          throw error;
+        }).finally(function () {
+          refreshing = void 0;
+        });
+      }
+      return refreshing;
+    },
+    async getAccessToken() {
+      var {
+        minValiditySeconds = 30
+      } = arguments.length > 0 && arguments[0] !== void 0 ? arguments[0] : {};
+      var tokens = state.tokens;
+      if (!tokens) return null;
+      if (tokens.expiresAt - minValiditySeconds * 1e3 > now()) return tokens.accessToken;
+      if (!tokens.refreshToken) return null;
+      return (await grant.refresh()).accessToken;
+    },
+    async logout() {
+      var _state_tokens;
+      var token = (_state_tokens = state.tokens) === null || _state_tokens === void 0 ? void 0 : _state_tokens.refreshToken;
+      setState({
+        tokens: null,
+        error: null
+      });
+      if (!token) return;
+      await kc.request(`${kc.realmUrl}/protocol/openid-connect/logout`, {
+        method: "POST",
+        headers: {
+          "content-type": "application/x-www-form-urlencoded"
+        },
+        body: form({
+          refresh_token: token
+        })
+      });
+    },
+    subscribe(listener) {
+      listeners.add(listener);
+      return function () {
+        listeners.delete(listener);
+      };
+    }
+  };
+  return grant;
+}
+export { createDirectGrant };
+//# sourceMappingURL=directGrant.native.js.map

package/dist/esm/keycloak/directGrant.native.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["KeycloakWalletError","ProfileIncompleteError","_instanceof","left","right","Symbol","hasInstance","refreshRefused","error","status","profileIncomplete","data","_data_error_description","test","error_description","createDirectGrant","kc","opts","_opts_now","_opts_scope","now","Date","scope","Array","isArray","join","listeners","Set","state","tokens","refreshing","setState","setState2","next","_iteratorNormalCompletion","_didIteratorError","_iteratorError","_iterator","iterator","_step","done","listener","value","err","return","form","form2","params","URLSearchParams","client_id","clientId","clientSecret","client_secret","toString","tokenRequest","tokenRequest2","_data_token_type","_data_expires_in","res","request","tokenUrl","method","headers","body","json","catch","ok","access_token","Refusal","errorDescription","issuedAt","accessToken","refreshToken","refresh_token","idToken","id_token","tokenType","token_type","expiresAt","expires_in","refreshExpiresAt","refresh_expires_in","grant","login","param","username","password","grant_type","resetNonce","onSign","credentials","refresh","_state_tokens","token","Promise","reject","Error"],"sources":["../../../src/keycloak/directGrant.ts"],"sourcesContent":[null],"mappings":"AACA,SAAAA,mBAAA,EAAAC,sBAAA;AAAA,SACEC,YAAAC,IAAA,EAAAC,KAAA;EACA;;EAAA,IAAAA,KAIK,mBAAAC,MAAA,oBAAAD,KAAA,CAAAC,MAAA,CAAAC,WAAA;IA2DP,OAAS,EAAAF,KAAA,CAAAC,MAAe,CAAAC,WAAyB,EAAAH,IAAA;EAC/C,OAAM;IACN,OAAOA,IAAM,YAAWC,KAAA;EAC1B;AAOA;AACE,SAAIG,cAAeA,CAAAC,KAAA;EACnB,KAAAN,WACE,CAAAM,KAAW,EAAAR,mBACI;EAGnB,OAAAQ,KAAA,CAAAC,MAAA,YAAAD,KAAA,CAAAC,MAAA,YAAAD,KAAA,CAAAA,KAAA;AAEO;AACL,SAAME,iBAAkBA,CAAAD,MAAK,EAAAE,IAAA;EAC7B,IAAAC,uBAAoB;EACpB,IAAAD,IAAM,CAAAH,KAAA,KAAY,0BAA2C;EAC7D,OAAIC,MAA0B,KAAE,OAAQE,IAAM,CAAAH,KAAO,KAAK,uCAAAK,IAAA,EAAAD,uBAAA,GAAAD,IAAA,CAAAG,iBAAA,cAAAF,uBAAA,cAAAA,uBAAA;AAC1D;AAEA,SAAMG,iBAAYA,CAAAC,EAA2B,EAAAC,IAAA;EAC3C,IAAAC,SAAQ,EAAAC,WAAA;EACR,IAAAC,GAAA,IAAAF,SAAW,GAAAD,IAAY,CAAAG,GAAA,MAAW,QAASF,SAAK,cAAAA,SAAA,GAAAG,IAAA,CAAAD,GAAA;EAClD,IAAAE,KAAA,GAAAC,KAAA,CAAAC,OAAA,CAAAP,IAAA,CAAAK,KAAA,IAAAL,IAAA,CAAAK,KAAA,CAAAG,IAAA,SAAAN,WAAA,GAAAF,IAAA,CAAAK,KAAA,cAAAH,WAAA,cAAAA,WAAA;EAEA,IAAAO,SAAa,GAAC,eACR,IAAAC,GAAA;EAAgB,IAClBC,KAAA;IACAC,MAAG;IACHrB,KAAI;EACN,CAAC;EAEH,IAAAsB,UAAM;EACJ,IAAAC,QAAM,GAAM,SAASC,SAAQA,CAAGC,IAAA;IAAUL,KACxC,GAAAK,IAAQ;IAAA,IACRC,yBAA2B;MAAAC,iBAAA;MAAoCC,cAAA;IAAA,IAC/D;MACD,SAAAC,SAAA,GAAAX,SAAA,CAAArB,MAAA,CAAAiC,QAAA,KAAAC,KAAA,IAAAL,yBAAA,IAAAK,KAAA,GAAAF,SAAA,CAAAJ,IAAA,IAAAO,IAAA,GAAAN,yBAAA;QACD,IAAMO,QAAQ,GAAMF,KAAI,CAAAG,KAAO;QAC3BD,QAAK,CAAAb,KAAO;MACd;IAGA,SAAMe,GAAI;MAAAR,iBACH;MAA+EC,cAChF,GAAAO,GAAA;IAAA,UACF;MACJ;QACF,KAAAT,yBAAA,IAAAG,SAAA,CAAAO,MAAA;UACMP,SAAA,CAAAO,MAAe;QACrB;MACE;QACA,IAAAT,iBAAmB;UACnB,MAASC,cAAK;QACd;MACA;IAAY;EACmC;EAG3C,IACNS,IAAA,YAAAC,MAAAC,MAAA;IACF,WAAAC,eAAA;MAEAC,SAAM,EAAqBhC,IAAA,CAAAiC,QAAA;MACzB,GAAIH,MAAA;MACF,IAAA9B,IAAO,CAAAkC,YAAA;QACTC,aAAA,EAAAnC,IAAA,CAAAkC;MACA,IAAI;IACF,GAAAE,QAAO;EAAM;EACf,IACAC,YAAc,kBAAUC,aAAYA,CAAAR,MAAA;IAClC,IAAAS,gBAAI,EAAAC,gBAAA;IACF,IAAAC,GAAA,GAAM,MAAA1C,EAAA,CAAS2C,OAAM,CAAA3C,EAAA,CAAA4C,QAAa,EAAE;MACpCC,MAAA,QAAW;MACXC,OAAA,EAAO;QACT,cAAgB;MACd;MACAC,IAAA,EAAAlB,IAAM,CAAAE,MAAA;IAAA,EACR;IACE,IAAApC,IAAG,SAAA+C,GAAW,CAAAM,IAAA,GAAAC,KAAA;MAChB;IACF;IACA,KAAAP,GAAQ,CAAAQ,EAAA,IAAO,CAAAvD,IAAA,CAAAwD,YAAgB;MAC7B,IAAAC,OAAM,GAAM1D,iBAAiB,CAAAgD,GAAA,CAAAjD,MAAA,EAAAE,IAAA,IAAAV,sBAAA,GAAAD,mBAAA;MAC7B,UAAOoE,OAAA,CAAAzD,IAAA,CAAAG,iBAAA,IAAAH,IAAA,CAAAH,KAAA,sCAAAkD,GAAA,CAAAjD,MAAA,KAAAiD,GAAA,CAAAjD,MAAA;QACTD,KAAA,EAAAG,IAAA,CAAAH,KAAA;QACA6D,gBAAQ,EAAc1D,IAAA,CAAAG;MACpB;IACA;IACA,IAAAwD,QAAK,GAAAlD,GAAA,CAAY;IACf;MACAmD,WAAM,EAAA5D,IAAA,CAAAwD,YAAc;MAClBK,YAAI,EAAM7D,IAAA,CAAA8D,aAAe;MACzBC,OAAA,EAAA/D,IAAM,CAAAgE,QAAA;MAAAC,SACR,GAAApB,gBAAA,GAAA7C,IAAA,CAAAkE,UAAA,cAAArB,gBAAA,cAAAA,gBAAA;MACAlC,KAAA,EAAAX,IAAA,CAAAW,KAAa;MACVwD,SACE,EAAAR,QAAW,KAAAb,gBAAA,GAAA9C,IAAA,CAAAoE,UAAA,cAAAtB,gBAAA,cAAAA,gBAAA;MACVuB,gBAAU,EAAArE,IAAA,CAAAsE,kBAAwB,GAAAX,QAAA,GAAA3D,IAAA,CAAAsE,kBAAA;IAChC;EAAyE;EAE3E,IAAAC,KAAA;IACA,IAAAtD,MAAA;MAAO,OACTA,KAAA;IAAA;IAEE,IAAAC,OAAA,EAAI;MACJ,OAAAD,KAAA,CAAAC,MAAW;IACX;IAAM,MACRsD,MAAAC,KAAA;MAAA,IAED;QAAAC,QAAQ;QAAAC;MAAM,IAAAF,KAAA;MACb;QACF,IAACvD,MAAA,SAAAyB,YAAA;UACLiC,UAAA;UACAF,QAAO;UACTC,QAAA;UACMhE;QACJ;QACAS,QAAK;UACDF,MAAA;UACArB,KAAC;QACL;QACF,OAAAqB,MAAA;MACA,SAAMrB,KAAS;QACbuB,QAAM;UACNF,MAAS,EAAED,KAAA,CAAAC,MAAQ;UACfrB;QACJ;QACE,MAAAA,KAAQ;MAAA,UACR;QACAQ,EAAA,CAAAwE,UAAa;MACf;IACF;IACAC,MAAA,iBAAoBA,OAAAC,WAAA;MAClB,MAAAR,KAAU,CAAAC,KAAI,CAAAO,WAAQ;MACtB,OAAO;IACL;IAAyBC,OAC3BA,CAAAnB,YAAA;MACF,IAAAoB,aAAA;MACF,IAAAC,KAAA,GAAArB,YAAA,aAAAA,YAAA,cAAAA,YAAA,IAAAoB,aAAA,GAAAhE,KAAA,CAAAC,MAAA,cAAA+D,aAAA,uBAAAA,aAAA,CAAApB,YAAA;MACA,IAAO,CAAAqB,KAAA,SAAAC,OAAA,CAAAC,MAAA,KAAAC,KAAA;MACT,KAAAlE,UAAA","ignoreList":[]}

package/dist/esm/keycloak/iife.mjs

@@ -0,0 +1,5 @@
+import { mount } from "./mount.mjs";
+globalThis.MpoKeycloakWallet = {
+  mount
+};
+//# sourceMappingURL=iife.mjs.map

package/dist/esm/keycloak/iife.mjs.map

@@ -0,0 +1 @@
+{"version":3,"names":["mount","globalThis","MpoKeycloakWallet"],"sources":["../../../src/keycloak/iife.ts"],"sourcesContent":[null],"mappings":"AAAA,SAASA,KAAA,QAAa;AAErBC,UAAA,CAA+DC,iBAAA,GAAoB;EAAEF;AAAM","ignoreList":[]}

package/dist/esm/keycloak/iife.native.js

@@ -0,0 +1,5 @@
+import { mount } from "./mount.native.js";
+globalThis.MpoKeycloakWallet = {
+  mount
+};
+//# sourceMappingURL=iife.native.js.map

package/dist/esm/keycloak/iife.native.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["mount","globalThis","MpoKeycloakWallet"],"sources":["../../../src/keycloak/iife.ts"],"sourcesContent":[null],"mappings":"AAAA,SAASA,KAAA,QAAa;AAErBC,UAAA,CAA+DC,iBAAA,GAAoB","ignoreList":[]}

package/dist/esm/keycloak/index.mjs

@@ -0,0 +1,13 @@
+import { keycloakWallet, deriveKeycloakFromLocation, toCredentials, pkceChallenge } from "./keycloakWallet.mjs";
+import { browserFlow } from "./browserFlow.mjs";
+import { createDirectGrant } from "./directGrant.mjs";
+import { createWalletRegistration } from "./registerWallet.mjs";
+import { useDirectLogin } from "./useDirectLogin.mjs";
+import { useWalletLogin } from "./useWalletLogin.mjs";
+import { KeycloakWalletLogin } from "./KeycloakWalletLogin.mjs";
+import { mount } from "./mount.mjs";
+import { hasUserActivation, isMobileBrowser } from "./device.mjs";
+import { KeycloakWalletError, ProfileIncompleteError } from "./types.mjs";
+import { StatusState } from "../connectkit/siwe/SIWEContext.mjs";
+export { KeycloakWalletError, KeycloakWalletLogin, ProfileIncompleteError, StatusState, browserFlow, createDirectGrant, createWalletRegistration, deriveKeycloakFromLocation, hasUserActivation, isMobileBrowser, keycloakWallet, mount, pkceChallenge, toCredentials, useDirectLogin, useWalletLogin };
+//# sourceMappingURL=index.mjs.map

package/dist/esm/keycloak/index.mjs.map

@@ -0,0 +1 @@
+{"version":3,"names":["keycloakWallet","deriveKeycloakFromLocation","toCredentials","pkceChallenge","browserFlow","createDirectGrant","createWalletRegistration","useDirectLogin","useWalletLogin","KeycloakWalletLogin","mount","hasUserActivation","isMobileBrowser","KeycloakWalletError","ProfileIncompleteError","StatusState"],"sources":["../../../src/keycloak/index.ts"],"sourcesContent":[null],"mappings":"AAAA,SACEA,cAAA,EACAC,0BAAA,EACAC,aAAA,EACAC,aAAA,QAKK;AACP,SAASC,WAAA,QAA4C;AACrD,SACEC,iBAAA,QAIK;AACP,SACEC,wBAAA,QAGK;AACP,SACEC,cAAA,QAGK;AACP,SACEC,cAAA,QAGK;AACP,SAASC,mBAAA,QAA0D;AACnE,SAASC,KAAA,QAA8C;AACvD,SAASC,iBAAA,EAAmBC,eAAA,QAAuB;AACnD,SACEC,mBAAA,EACAC,sBAAA,QAKK;AACP,SAASC,WAAA,QAAmB","ignoreList":[]}

package/dist/esm/keycloak/index.native.js

@@ -0,0 +1,13 @@
+import { keycloakWallet, deriveKeycloakFromLocation, toCredentials, pkceChallenge } from "./keycloakWallet.native.js";
+import { browserFlow } from "./browserFlow.native.js";
+import { createDirectGrant } from "./directGrant.native.js";
+import { createWalletRegistration } from "./registerWallet.native.js";
+import { useDirectLogin } from "./useDirectLogin.native.js";
+import { useWalletLogin } from "./useWalletLogin.native.js";
+import { KeycloakWalletLogin } from "./KeycloakWalletLogin.native.js";
+import { mount } from "./mount.native.js";
+import { hasUserActivation, isMobileBrowser } from "./device.native.js";
+import { KeycloakWalletError, ProfileIncompleteError } from "./types.native.js";
+import { StatusState } from "../connectkit/siwe/SIWEContext.native.js";
+export { KeycloakWalletError, KeycloakWalletLogin, ProfileIncompleteError, StatusState, browserFlow, createDirectGrant, createWalletRegistration, deriveKeycloakFromLocation, hasUserActivation, isMobileBrowser, keycloakWallet, mount, pkceChallenge, toCredentials, useDirectLogin, useWalletLogin };
+//# sourceMappingURL=index.native.js.map

package/dist/esm/keycloak/index.native.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["keycloakWallet","deriveKeycloakFromLocation","toCredentials","pkceChallenge","browserFlow","createDirectGrant","createWalletRegistration","useDirectLogin","useWalletLogin","KeycloakWalletLogin","mount","hasUserActivation","isMobileBrowser","KeycloakWalletError","ProfileIncompleteError","StatusState"],"sources":["../../../src/keycloak/index.ts"],"sourcesContent":[null],"mappings":"AAAA,SAAAA,cAAA,EAAAC,0BAAA,EAAAC,aAAA,EAAAC,aAAA;AAAA,SACEC,WAAA;AAAA,SACAC,iBAAA;AAAA,SACAC,wBAAA;AAAA,SACAC,cAAA;AAAA,SAKKC,cAAA;AACP,SAASC,mBAA4C;AACrD,SAAAC,KAAA;AAAA,SACEC,iBAAA,EAAAC,eAAA;AAAA,SAIKC,mBAAA,EAAAC,sBAAA;AACP,SAAAC,WAAA;AAAA,SACEF,mBAGK,EACPJ,mBAAA,EACEK,sBAAA,EAAAC,WAGK,EACPX,WAAA,EACEC,iBAAA,EAAAC,wBAGK,EACPL,0BAAS,EACTU,iBAAS,EACTC,eAAS,EACTZ,cAAA,EACEU,KAAA,EACAP,aAAA,EAAAD,aAKK,EACPK,cAAS,E","ignoreList":[]}

package/dist/esm/keycloak/keycloakWallet.mjs

@@ -0,0 +1,186 @@
+import { sha256 } from "viem";
+import { bytesToBase64 } from "../bridge/base64.mjs";
+import { createWalletMessage } from "../connectkit/connectors/createWalletMessage.mjs";
+import { buildWalletMessage } from "../message/index.mjs";
+import { browserFlow } from "./browserFlow.mjs";
+import { createDirectGrant } from "./directGrant.mjs";
+import { createWalletRegistration } from "./registerWallet.mjs";
+import { KeycloakWalletError } from "./types.mjs";
+const sessionCookie = /(KEYCLOAK_SESSION_[A-Z]+)=([^;,\s]+)/;
+function readSessionCookie(res) {
+  const headers = res.headers;
+  const values = headers.getSetCookie?.() ?? [headers.get("set-cookie") ?? ""];
+  for (const value of values) {
+    const match = value.match(sessionCookie);
+    if (match) return `${match[1]}=${match[2]}`;
+  }
+  return void 0;
+}
+const base64Url = bytes => bytesToBase64(bytes).replace(/\+/g, "-").replace(/\//g, "_").replace(/=+$/, "");
+function randomBase64Url(size) {
+  const crypto = globalThis.crypto;
+  if (!crypto?.getRandomValues) {
+    throw new Error("browserLoginUrl needs crypto.getRandomValues (react-native-get-random-values on Hermes)");
+  }
+  return base64Url(crypto.getRandomValues(new Uint8Array(size)));
+}
+function pkceChallenge(codeVerifier) {
+  return base64Url(sha256(new TextEncoder().encode(codeVerifier), "bytes"));
+}
+function toCredentials(args) {
+  return {
+    username: args.signature,
+    password: bytesToBase64(new TextEncoder().encode(args.message)),
+    message: args.message
+  };
+}
+function keycloakWallet(options) {
+  const baseUrl = options.baseUrl.replace(/\/+$/, "");
+  const resource = options.resource ?? "siww";
+  const realmUrl = `${baseUrl}/realms/${encodeURIComponent(options.realm)}`;
+  const resourceUrl = `${realmUrl}/${resource}`;
+  const tokenUrl = `${realmUrl}/protocol/openid-connect/token`;
+  const fetchImpl = options.fetch ?? ((input, init) => globalThis.fetch(input, init));
+  let cookie;
+  let nonce;
+  const nonceListeners = /* @__PURE__ */new Set();
+  const request = (url, init = {}) => {
+    const headers = new Headers(init.headers);
+    if (cookie && !headers.has("cookie")) headers.set("cookie", cookie);
+    return fetchImpl(url, {
+      credentials: "include",
+      ...init,
+      headers
+    });
+  };
+  const fetchNonce = async () => {
+    const res = await request(`${resourceUrl}/nonce`);
+    if (!res.ok) {
+      throw new KeycloakWalletError(`Keycloak nonce request failed (${res.status})`, res.status);
+    }
+    cookie = readSessionCookie(res) ?? cookie;
+    const value = (await res.text()).trim();
+    if (!value) throw new KeycloakWalletError("Keycloak returned an empty nonce", res.status);
+    return value;
+  };
+  const kc = {
+    baseUrl,
+    realm: options.realm,
+    resource,
+    realmUrl,
+    resourceUrl,
+    tokenUrl,
+    request,
+    getNonce() {
+      if (!nonce) {
+        const pending = fetchNonce();
+        nonce = pending;
+        pending.catch(() => {
+          if (nonce === pending) nonce = void 0;
+        });
+      }
+      return nonce;
+    },
+    resetNonce() {
+      nonce = void 0;
+      for (const listener of nonceListeners) listener();
+    },
+    subscribeNonceReset(listener) {
+      nonceListeners.add(listener);
+      return () => {
+        nonceListeners.delete(listener);
+      };
+    },
+    createMessage({
+      nonce: value,
+      address,
+      chainId
+    }) {
+      return createWalletMessage({
+        address,
+        chainId,
+        nonce: value,
+        domain: options.domain,
+        uri: options.uri
+      });
+    },
+    gpgMessage({
+      nonce: value
+    }) {
+      return buildWalletMessage("gpg", {
+        nonce: value,
+        domain: options.domain,
+        uri: options.uri
+      });
+    },
+    siweConfig(onSign) {
+      return {
+        getNonce: () => kc.getNonce(),
+        createMessage: ({
+          nonce: value,
+          address,
+          chainId
+        }) => kc.createMessage({
+          nonce: value,
+          address,
+          chainId
+        }),
+        onSign,
+        subscribeNonceReset: kc.subscribeNonceReset,
+        verifyMessage: async () => true,
+        getSession: async () => null,
+        signOut: async () => true
+      };
+    },
+    gpgConfig(onSign) {
+      return {
+        getNonce: () => kc.getNonce(),
+        buildMessage: args => kc.gpgMessage(args),
+        onSign,
+        subscribeNonceReset: kc.subscribeNonceReset
+      };
+    },
+    browserFlow(opts) {
+      return browserFlow(opts);
+    },
+    directGrant(opts) {
+      return createDirectGrant(kc, opts);
+    },
+    browserLoginUrl({
+      clientId,
+      redirectUri,
+      scope
+    }) {
+      const state = randomBase64Url(16);
+      const codeVerifier = randomBase64Url(32);
+      const params = new URLSearchParams({
+        client_id: clientId,
+        redirect_uri: redirectUri,
+        response_type: "code",
+        scope: Array.isArray(scope) ? scope.join(" ") : scope ?? "openid",
+        state,
+        code_challenge: pkceChallenge(codeVerifier),
+        code_challenge_method: "S256"
+      });
+      return {
+        url: `${realmUrl}/protocol/openid-connect/auth?${params}`,
+        state,
+        codeVerifier
+      };
+    },
+    registerWallet(opts) {
+      return createWalletRegistration(kc, opts);
+    }
+  };
+  return kc;
+}
+function deriveKeycloakFromLocation(location = globalThis.location) {
+  const match = location?.pathname.match(/^(.*)\/realms\/([^/]+)\//);
+  if (!location || !match) return void 0;
+  return {
+    baseUrl: location.origin + match[1],
+    realm: decodeURIComponent(match[2])
+  };
+}
+export { deriveKeycloakFromLocation, keycloakWallet, pkceChallenge, toCredentials };
+//# sourceMappingURL=keycloakWallet.mjs.map

package/dist/esm/keycloak/keycloakWallet.mjs.map

@@ -0,0 +1 @@
+{"version":3,"names":["sha256","bytesToBase64","createWalletMessage","buildWalletMessage","browserFlow","createDirectGrant","createWalletRegistration","KeycloakWalletError","sessionCookie","readSessionCookie","res","headers","values","getSetCookie","get","value","match","base64Url","bytes","replace","randomBase64Url","size","crypto","globalThis","getRandomValues","Error","Uint8Array","pkceChallenge","codeVerifier","TextEncoder","encode","toCredentials","args","username","signature","password","message","keycloakWallet","options","baseUrl","resource","realmUrl","encodeURIComponent","realm","resourceUrl","tokenUrl","fetchImpl","fetch","input","init","cookie","nonce","nonceListeners","Set","request","url","Headers","has","set","credentials","fetchNonce","ok","status","text","trim","kc","getNonce","pending","catch","resetNonce","listener","subscribeNonceReset","add","delete","createMessage","address","chainId","domain","uri","gpgMessage","siweConfig","onSign","verifyMessage","getSession","signOut","gpgConfig","buildMessage","opts","directGrant","browserLoginUrl","clientId","redirectUri","scope","state","params","URLSearchParams","client_id","redirect_uri","response_type","Array","isArray","join","code_challenge","code_challenge_method","registerWallet","deriveKeycloakFromLocation","location","pathname","origin","decodeURIComponent"],"sources":["../../../src/keycloak/keycloakWallet.ts"],"sourcesContent":[null],"mappings":"AAAA,SAASA,MAAA,QAA4B;AACrC,SAASC,aAAA,QAAqB;AAC9B,SAASC,mBAAA,QAA2B;AAEpC,SAASC,kBAAA,QAA0B;AACnC,SAASC,WAAA,QAA4C;AACrD,SAASC,iBAAA,QAAoE;AAC7E,SACEC,wBAAA,QAGK;AACP,SAASC,mBAAA,QAAqE;AAyF9E,MAAMC,aAAA,GAAgB;AAEtB,SAASC,kBAAkBC,GAAA,EAAmC;EAC5D,MAAMC,OAAA,GAAUD,GAAA,CAAIC,OAAA;EACpB,MAAMC,MAAA,GAASD,OAAA,CAAQE,YAAA,GAAe,KAAK,CAACF,OAAA,CAAQG,GAAA,CAAI,YAAY,KAAK,EAAE;EAC3E,WAAWC,KAAA,IAASH,MAAA,EAAQ;IAC1B,MAAMI,KAAA,GAAQD,KAAA,CAAMC,KAAA,CAAMR,aAAa;IACvC,IAAIQ,KAAA,EAAO,OAAO,GAAGA,KAAA,CAAM,CAAC,CAAC,IAAIA,KAAA,CAAM,CAAC,CAAC;EAC3C;EACA,OAAO;AACT;AAEA,MAAMC,SAAA,GAAaC,KAAA,IACjBjB,aAAA,CAAciB,KAAK,EAAEC,OAAA,CAAQ,OAAO,GAAG,EAAEA,OAAA,CAAQ,OAAO,GAAG,EAAEA,OAAA,CAAQ,OAAO,EAAE;AAEhF,SAASC,gBAAgBC,IAAA,EAAsB;EAC7C,MAAMC,MAAA,GAASC,UAAA,CAAWD,MAAA;EAC1B,IAAI,CAACA,MAAA,EAAQE,eAAA,EAAiB;IAC5B,MAAM,IAAIC,KAAA,CACR,yFACF;EACF;EACA,OAAOR,SAAA,CAAUK,MAAA,CAAOE,eAAA,CAAgB,IAAIE,UAAA,CAAWL,IAAI,CAAC,CAAC;AAC/D;AAGO,SAASM,cAAcC,YAAA,EAA8B;EAC1D,OAAOX,SAAA,CAAUjB,MAAA,CAAO,IAAI6B,WAAA,CAAY,EAAEC,MAAA,CAAOF,YAAY,GAAG,OAAO,CAAC;AAC1E;AAGO,SAASG,cAAcC,IAAA,EAA8C;EAC1E,OAAO;IACLC,QAAA,EAAUD,IAAA,CAAKE,SAAA;IACfC,QAAA,EAAUlC,aAAA,CAAc,IAAI4B,WAAA,CAAY,EAAEC,MAAA,CAAOE,IAAA,CAAKI,OAAO,CAAC;IAC9DA,OAAA,EAASJ,IAAA,CAAKI;EAChB;AACF;AAEO,SAASC,eAAeC,OAAA,EAAgD;EAC7E,MAAMC,OAAA,GAAUD,OAAA,CAAQC,OAAA,CAAQpB,OAAA,CAAQ,QAAQ,EAAE;EAClD,MAAMqB,QAAA,GAAWF,OAAA,CAAQE,QAAA,IAAY;EACrC,MAAMC,QAAA,GAAW,GAAGF,OAAO,WAAWG,kBAAA,CAAmBJ,OAAA,CAAQK,KAAK,CAAC;EACvE,MAAMC,WAAA,GAAc,GAAGH,QAAQ,IAAID,QAAQ;EAC3C,MAAMK,QAAA,GAAW,GAAGJ,QAAQ;EAC5B,MAAMK,SAAA,GAAYR,OAAA,CAAQS,KAAA,KAAU,CAACC,KAAA,EAAOC,IAAA,KAAS1B,UAAA,CAAWwB,KAAA,CAAMC,KAAA,EAAOC,IAAI;EACjF,IAAIC,MAAA;EACJ,IAAIC,KAAA;EACJ,MAAMC,cAAA,GAAiB,mBAAIC,GAAA,CAAgB;EAE3C,MAAMC,OAAA,GAAUA,CAACC,GAAA,EAAaN,IAAA,GAAoB,CAAC,MAAM;IACvD,MAAMtC,OAAA,GAAU,IAAI6C,OAAA,CAAQP,IAAA,CAAKtC,OAAO;IACxC,IAAIuC,MAAA,IAAU,CAACvC,OAAA,CAAQ8C,GAAA,CAAI,QAAQ,GAAG9C,OAAA,CAAQ+C,GAAA,CAAI,UAAUR,MAAM;IAClE,OAAOJ,SAAA,CAAUS,GAAA,EAAK;MAAEI,WAAA,EAAa;MAAW,GAAGV,IAAA;MAAMtC;IAAQ,CAAC;EACpE;EAEA,MAAMiD,UAAA,GAAa,MAAAA,CAAA,KAAY;IAC7B,MAAMlD,GAAA,GAAM,MAAM4C,OAAA,CAAQ,GAAGV,WAAW,QAAQ;IAChD,IAAI,CAAClC,GAAA,CAAImD,EAAA,EAAI;MACX,MAAM,IAAItD,mBAAA,CAAoB,kCAAkCG,GAAA,CAAIoD,MAAM,KAAKpD,GAAA,CAAIoD,MAAM;IAC3F;IACAZ,MAAA,GAASzC,iBAAA,CAAkBC,GAAG,KAAKwC,MAAA;IACnC,MAAMnC,KAAA,IAAS,MAAML,GAAA,CAAIqD,IAAA,CAAK,GAAGC,IAAA,CAAK;IACtC,IAAI,CAACjD,KAAA,EAAO,MAAM,IAAIR,mBAAA,CAAoB,oCAAoCG,GAAA,CAAIoD,MAAM;IACxF,OAAO/C,KAAA;EACT;EAEA,MAAMkD,EAAA,GAAqB;IACzB1B,OAAA;IACAI,KAAA,EAAOL,OAAA,CAAQK,KAAA;IACfH,QAAA;IACAC,QAAA;IACAG,WAAA;IACAC,QAAA;IACAS,OAAA;IACAY,SAAA,EAAW;MACT,IAAI,CAACf,KAAA,EAAO;QACV,MAAMgB,OAAA,GAAUP,UAAA,CAAW;QAC3BT,KAAA,GAAQgB,OAAA;QACRA,OAAA,CAAQC,KAAA,CAAM,MAAM;UAClB,IAAIjB,KAAA,KAAUgB,OAAA,EAAShB,KAAA,GAAQ;QACjC,CAAC;MACH;MACA,OAAOA,KAAA;IACT;IACAkB,WAAA,EAAa;MACXlB,KAAA,GAAQ;MACR,WAAWmB,QAAA,IAAYlB,cAAA,EAAgBkB,QAAA,CAAS;IAClD;IACAC,oBAAoBD,QAAA,EAAU;MAC5BlB,cAAA,CAAeoB,GAAA,CAAIF,QAAQ;MAC3B,OAAO,MAAM;QACXlB,cAAA,CAAeqB,MAAA,CAAOH,QAAQ;MAChC;IACF;IACAI,cAAc;MAAEvB,KAAA,EAAOpC,KAAA;MAAO4D,OAAA;MAASC;IAAQ,GAAG;MAChD,OAAO1E,mBAAA,CAAoB;QACzByE,OAAA;QACAC,OAAA;QACAzB,KAAA,EAAOpC,KAAA;QACP8D,MAAA,EAAQvC,OAAA,CAAQuC,MAAA;QAChBC,GAAA,EAAKxC,OAAA,CAAQwC;MACf,CAAC;IACH;IACAC,WAAW;MAAE5B,KAAA,EAAOpC;IAAM,GAAG;MAC3B,OAAOZ,kBAAA,CAAmB,OAAO;QAAEgD,KAAA,EAAOpC,KAAA;QAAO8D,MAAA,EAAQvC,OAAA,CAAQuC,MAAA;QAAQC,GAAA,EAAKxC,OAAA,CAAQwC;MAAI,CAAC;IAC7F;IACAE,WAAWC,MAAA,EAAQ;MACjB,OAAO;QACLf,QAAA,EAAUA,CAAA,KAAMD,EAAA,CAAGC,QAAA,CAAS;QAC5BQ,aAAA,EAAeA,CAAC;UACdvB,KAAA,EAAOpC,KAAA;UACP4D,OAAA;UACAC;QACF,MAIMX,EAAA,CAAGS,aAAA,CAAc;UAAEvB,KAAA,EAAOpC,KAAA;UAAO4D,OAAA;UAASC;QAAQ,CAAC;QACzDK,MAAA;QACAV,mBAAA,EAAqBN,EAAA,CAAGM,mBAAA;QACxBW,aAAA,EAAe,MAAAA,CAAA,KAAY;QAC3BC,UAAA,EAAY,MAAAA,CAAA,KAAY;QACxBC,OAAA,EAAS,MAAAA,CAAA,KAAY;MACvB;IACF;IACAC,UAAUJ,MAAA,EAAQ;MAChB,OAAO;QACLf,QAAA,EAAUA,CAAA,KAAMD,EAAA,CAAGC,QAAA,CAAS;QAC5BoB,YAAA,EAAetD,IAAA,IAASiC,EAAA,CAAGc,UAAA,CAAW/C,IAAI;QAC1CiD,MAAA;QACAV,mBAAA,EAAqBN,EAAA,CAAGM;MAC1B;IACF;IACAnE,YAAYmF,IAAA,EAAM;MAChB,OAAOnF,WAAA,CAAYmF,IAAI;IACzB;IACAC,YAAYD,IAAA,EAAM;MAChB,OAAOlF,iBAAA,CAAkB4D,EAAA,EAAIsB,IAAI;IACnC;IACAE,gBAAgB;MAAEC,QAAA;MAAUC,WAAA;MAAaC;IAAM,GAAG;MAChD,MAAMC,KAAA,GAAQzE,eAAA,CAAgB,EAAE;MAChC,MAAMQ,YAAA,GAAeR,eAAA,CAAgB,EAAE;MACvC,MAAM0E,MAAA,GAAS,IAAIC,eAAA,CAAgB;QACjCC,SAAA,EAAWN,QAAA;QACXO,YAAA,EAAcN,WAAA;QACdO,aAAA,EAAe;QACfN,KAAA,EAAOO,KAAA,CAAMC,OAAA,CAAQR,KAAK,IAAIA,KAAA,CAAMS,IAAA,CAAK,GAAG,IAAKT,KAAA,IAAS;QAC1DC,KAAA;QACAS,cAAA,EAAgB3E,aAAA,CAAcC,YAAY;QAC1C2E,qBAAA,EAAuB;MACzB,CAAC;MACD,OAAO;QAAEhD,GAAA,EAAK,GAAGd,QAAQ,iCAAiCqD,MAAM;QAAID,KAAA;QAAOjE;MAAa;IAC1F;IACA4E,eAAejB,IAAA,EAAM;MACnB,OAAOjF,wBAAA,CAAyB2D,EAAA,EAAIsB,IAAI;IAC1C;EACF;EACA,OAAOtB,EAAA;AACT;AAMO,SAASwC,2BACdC,QAAA,GACEnF,UAAA,CACAmF,QAAA,EAC8C;EAChD,MAAM1F,KAAA,GAAQ0F,QAAA,EAAUC,QAAA,CAAS3F,KAAA,CAAM,0BAA0B;EACjE,IAAI,CAAC0F,QAAA,IAAY,CAAC1F,KAAA,EAAO,OAAO;EAChC,OAAO;IAAEuB,OAAA,EAASmE,QAAA,CAASE,MAAA,GAAS5F,KAAA,CAAM,CAAC;IAAG2B,KAAA,EAAOkE,kBAAA,CAAmB7F,KAAA,CAAM,CAAC,CAAC;EAAE;AACpF","ignoreList":[]}