@multiplatform.one/web3 7.23.1 → 7.24.0

package/dist/cjs/keycloak/keycloakWallet.cjs

@@ -0,0 +1,214 @@
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all) __defProp(target, name, {
+    get: all[name],
+    enumerable: true
+  });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from)) if (!__hasOwnProp.call(to, key) && key !== except) __defProp(to, key, {
+      get: () => from[key],
+      enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable
+    });
+  }
+  return to;
+};
+var __toCommonJS = mod => __copyProps(__defProp({}, "__esModule", {
+  value: true
+}), mod);
+var keycloakWallet_exports = {};
+__export(keycloakWallet_exports, {
+  deriveKeycloakFromLocation: () => deriveKeycloakFromLocation,
+  keycloakWallet: () => keycloakWallet,
+  pkceChallenge: () => pkceChallenge,
+  toCredentials: () => toCredentials
+});
+module.exports = __toCommonJS(keycloakWallet_exports);
+var import_viem = require("viem");
+var import_base64 = require("../bridge/base64.cjs");
+var import_createWalletMessage = require("../connectkit/connectors/createWalletMessage.cjs");
+var import_message = require("../message/index.cjs");
+var import_browserFlow = require("./browserFlow.cjs");
+var import_directGrant = require("./directGrant.cjs");
+var import_registerWallet = require("./registerWallet.cjs");
+var import_types = require("./types.cjs");
+const sessionCookie = /(KEYCLOAK_SESSION_[A-Z]+)=([^;,\s]+)/;
+function readSessionCookie(res) {
+  const headers = res.headers;
+  const values = headers.getSetCookie?.() ?? [headers.get("set-cookie") ?? ""];
+  for (const value of values) {
+    const match = value.match(sessionCookie);
+    if (match) return `${match[1]}=${match[2]}`;
+  }
+  return void 0;
+}
+const base64Url = bytes => (0, import_base64.bytesToBase64)(bytes).replace(/\+/g, "-").replace(/\//g, "_").replace(/=+$/, "");
+function randomBase64Url(size) {
+  const crypto = globalThis.crypto;
+  if (!crypto?.getRandomValues) {
+    throw new Error("browserLoginUrl needs crypto.getRandomValues (react-native-get-random-values on Hermes)");
+  }
+  return base64Url(crypto.getRandomValues(new Uint8Array(size)));
+}
+function pkceChallenge(codeVerifier) {
+  return base64Url((0, import_viem.sha256)(new TextEncoder().encode(codeVerifier), "bytes"));
+}
+function toCredentials(args) {
+  return {
+    username: args.signature,
+    password: (0, import_base64.bytesToBase64)(new TextEncoder().encode(args.message)),
+    message: args.message
+  };
+}
+function keycloakWallet(options) {
+  const baseUrl = options.baseUrl.replace(/\/+$/, "");
+  const resource = options.resource ?? "siww";
+  const realmUrl = `${baseUrl}/realms/${encodeURIComponent(options.realm)}`;
+  const resourceUrl = `${realmUrl}/${resource}`;
+  const tokenUrl = `${realmUrl}/protocol/openid-connect/token`;
+  const fetchImpl = options.fetch ?? ((input, init) => globalThis.fetch(input, init));
+  let cookie;
+  let nonce;
+  const nonceListeners = /* @__PURE__ */new Set();
+  const request = (url, init = {}) => {
+    const headers = new Headers(init.headers);
+    if (cookie && !headers.has("cookie")) headers.set("cookie", cookie);
+    return fetchImpl(url, {
+      credentials: "include",
+      ...init,
+      headers
+    });
+  };
+  const fetchNonce = async () => {
+    const res = await request(`${resourceUrl}/nonce`);
+    if (!res.ok) {
+      throw new import_types.KeycloakWalletError(`Keycloak nonce request failed (${res.status})`, res.status);
+    }
+    cookie = readSessionCookie(res) ?? cookie;
+    const value = (await res.text()).trim();
+    if (!value) throw new import_types.KeycloakWalletError("Keycloak returned an empty nonce", res.status);
+    return value;
+  };
+  const kc = {
+    baseUrl,
+    realm: options.realm,
+    resource,
+    realmUrl,
+    resourceUrl,
+    tokenUrl,
+    request,
+    getNonce() {
+      if (!nonce) {
+        const pending = fetchNonce();
+        nonce = pending;
+        pending.catch(() => {
+          if (nonce === pending) nonce = void 0;
+        });
+      }
+      return nonce;
+    },
+    resetNonce() {
+      nonce = void 0;
+      for (const listener of nonceListeners) listener();
+    },
+    subscribeNonceReset(listener) {
+      nonceListeners.add(listener);
+      return () => {
+        nonceListeners.delete(listener);
+      };
+    },
+    createMessage({
+      nonce: value,
+      address,
+      chainId
+    }) {
+      return (0, import_createWalletMessage.createWalletMessage)({
+        address,
+        chainId,
+        nonce: value,
+        domain: options.domain,
+        uri: options.uri
+      });
+    },
+    gpgMessage({
+      nonce: value
+    }) {
+      return (0, import_message.buildWalletMessage)("gpg", {
+        nonce: value,
+        domain: options.domain,
+        uri: options.uri
+      });
+    },
+    siweConfig(onSign) {
+      return {
+        getNonce: () => kc.getNonce(),
+        createMessage: ({
+          nonce: value,
+          address,
+          chainId
+        }) => kc.createMessage({
+          nonce: value,
+          address,
+          chainId
+        }),
+        onSign,
+        subscribeNonceReset: kc.subscribeNonceReset,
+        verifyMessage: async () => true,
+        getSession: async () => null,
+        signOut: async () => true
+      };
+    },
+    gpgConfig(onSign) {
+      return {
+        getNonce: () => kc.getNonce(),
+        buildMessage: args => kc.gpgMessage(args),
+        onSign,
+        subscribeNonceReset: kc.subscribeNonceReset
+      };
+    },
+    browserFlow(opts) {
+      return (0, import_browserFlow.browserFlow)(opts);
+    },
+    directGrant(opts) {
+      return (0, import_directGrant.createDirectGrant)(kc, opts);
+    },
+    browserLoginUrl({
+      clientId,
+      redirectUri,
+      scope
+    }) {
+      const state = randomBase64Url(16);
+      const codeVerifier = randomBase64Url(32);
+      const params = new URLSearchParams({
+        client_id: clientId,
+        redirect_uri: redirectUri,
+        response_type: "code",
+        scope: Array.isArray(scope) ? scope.join(" ") : scope ?? "openid",
+        state,
+        code_challenge: pkceChallenge(codeVerifier),
+        code_challenge_method: "S256"
+      });
+      return {
+        url: `${realmUrl}/protocol/openid-connect/auth?${params}`,
+        state,
+        codeVerifier
+      };
+    },
+    registerWallet(opts) {
+      return (0, import_registerWallet.createWalletRegistration)(kc, opts);
+    }
+  };
+  return kc;
+}
+function deriveKeycloakFromLocation(location = globalThis.location) {
+  const match = location?.pathname.match(/^(.*)\/realms\/([^/]+)\//);
+  if (!location || !match) return void 0;
+  return {
+    baseUrl: location.origin + match[1],
+    realm: decodeURIComponent(match[2])
+  };
+}

package/dist/cjs/keycloak/keycloakWallet.native.js

@@ -0,0 +1,285 @@
+"use strict";
+
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all) __defProp(target, name, {
+    get: all[name],
+    enumerable: true
+  });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from)) if (!__hasOwnProp.call(to, key) && key !== except) __defProp(to, key, {
+      get: () => from[key],
+      enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable
+    });
+  }
+  return to;
+};
+var __toCommonJS = mod => __copyProps(__defProp({}, "__esModule", {
+  value: true
+}), mod);
+var keycloakWallet_exports = {};
+__export(keycloakWallet_exports, {
+  deriveKeycloakFromLocation: () => deriveKeycloakFromLocation,
+  keycloakWallet: () => keycloakWallet,
+  pkceChallenge: () => pkceChallenge,
+  toCredentials: () => toCredentials
+});
+module.exports = __toCommonJS(keycloakWallet_exports);
+var import_viem = require("viem");
+var import_base64 = require("../bridge/base64.native.js");
+var import_createWalletMessage = require("../connectkit/connectors/createWalletMessage.native.js");
+var import_message = require("../message/index.native.js");
+var import_browserFlow = require("./browserFlow.native.js");
+var import_directGrant = require("./directGrant.native.js");
+var import_registerWallet = require("./registerWallet.native.js");
+var import_types = require("./types.native.js");
+var sessionCookie = /(KEYCLOAK_SESSION_[A-Z]+)=([^;,\s]+)/;
+function readSessionCookie(res) {
+  var _ref, _headers_get;
+  var _headers_getSetCookie;
+  var headers = res.headers;
+  var values = (_ref = (_headers_getSetCookie = headers.getSetCookie) === null || _headers_getSetCookie === void 0 ? void 0 : _headers_getSetCookie.call(headers)) !== null && _ref !== void 0 ? _ref : [(_headers_get = headers.get("set-cookie")) !== null && _headers_get !== void 0 ? _headers_get : ""];
+  var _iteratorNormalCompletion = true,
+    _didIteratorError = false,
+    _iteratorError = void 0;
+  try {
+    for (var _iterator = values[Symbol.iterator](), _step; !(_iteratorNormalCompletion = (_step = _iterator.next()).done); _iteratorNormalCompletion = true) {
+      var value = _step.value;
+      var match = value.match(sessionCookie);
+      if (match) return `${match[1]}=${match[2]}`;
+    }
+  } catch (err) {
+    _didIteratorError = true;
+    _iteratorError = err;
+  } finally {
+    try {
+      if (!_iteratorNormalCompletion && _iterator.return != null) {
+        _iterator.return();
+      }
+    } finally {
+      if (_didIteratorError) {
+        throw _iteratorError;
+      }
+    }
+  }
+  return void 0;
+}
+var base64Url = function base64Url2(bytes) {
+  return (0, import_base64.bytesToBase64)(bytes).replace(/\+/g, "-").replace(/\//g, "_").replace(/=+$/, "");
+};
+function randomBase64Url(size) {
+  var crypto = globalThis.crypto;
+  if (!(crypto === null || crypto === void 0 ? void 0 : crypto.getRandomValues)) {
+    throw new Error("browserLoginUrl needs crypto.getRandomValues (react-native-get-random-values on Hermes)");
+  }
+  return base64Url(crypto.getRandomValues(new Uint8Array(size)));
+}
+function pkceChallenge(codeVerifier) {
+  return base64Url((0, import_viem.sha256)(new TextEncoder().encode(codeVerifier), "bytes"));
+}
+function toCredentials(args) {
+  return {
+    username: args.signature,
+    password: (0, import_base64.bytesToBase64)(new TextEncoder().encode(args.message)),
+    message: args.message
+  };
+}
+function keycloakWallet(options) {
+  var _options_resource, _options_fetch;
+  var baseUrl = options.baseUrl.replace(/\/+$/, "");
+  var resource = (_options_resource = options.resource) !== null && _options_resource !== void 0 ? _options_resource : "siww";
+  var realmUrl = `${baseUrl}/realms/${encodeURIComponent(options.realm)}`;
+  var resourceUrl = `${realmUrl}/${resource}`;
+  var tokenUrl = `${realmUrl}/protocol/openid-connect/token`;
+  var fetchImpl = (_options_fetch = options.fetch) !== null && _options_fetch !== void 0 ? _options_fetch : function (input, init) {
+    return globalThis.fetch(input, init);
+  };
+  var cookie;
+  var nonce;
+  var nonceListeners = /* @__PURE__ */new Set();
+  var request = function request2(url) {
+    var init = arguments.length > 1 && arguments[1] !== void 0 ? arguments[1] : {};
+    var headers = new Headers(init.headers);
+    if (cookie && !headers.has("cookie")) headers.set("cookie", cookie);
+    return fetchImpl(url, {
+      credentials: "include",
+      ...init,
+      headers
+    });
+  };
+  var fetchNonce = async function fetchNonce2() {
+    var _readSessionCookie;
+    var res = await request(`${resourceUrl}/nonce`);
+    if (!res.ok) {
+      throw new import_types.KeycloakWalletError(`Keycloak nonce request failed (${res.status})`, res.status);
+    }
+    cookie = (_readSessionCookie = readSessionCookie(res)) !== null && _readSessionCookie !== void 0 ? _readSessionCookie : cookie;
+    var value = (await res.text()).trim();
+    if (!value) throw new import_types.KeycloakWalletError("Keycloak returned an empty nonce", res.status);
+    return value;
+  };
+  var kc = {
+    baseUrl,
+    realm: options.realm,
+    resource,
+    realmUrl,
+    resourceUrl,
+    tokenUrl,
+    request,
+    getNonce() {
+      if (!nonce) {
+        var pending = fetchNonce();
+        nonce = pending;
+        pending.catch(function () {
+          if (nonce === pending) nonce = void 0;
+        });
+      }
+      return nonce;
+    },
+    resetNonce() {
+      nonce = void 0;
+      var _iteratorNormalCompletion = true,
+        _didIteratorError = false,
+        _iteratorError = void 0;
+      try {
+        for (var _iterator = nonceListeners[Symbol.iterator](), _step; !(_iteratorNormalCompletion = (_step = _iterator.next()).done); _iteratorNormalCompletion = true) {
+          var listener = _step.value;
+          listener();
+        }
+      } catch (err) {
+        _didIteratorError = true;
+        _iteratorError = err;
+      } finally {
+        try {
+          if (!_iteratorNormalCompletion && _iterator.return != null) {
+            _iterator.return();
+          }
+        } finally {
+          if (_didIteratorError) {
+            throw _iteratorError;
+          }
+        }
+      }
+    },
+    subscribeNonceReset(listener) {
+      nonceListeners.add(listener);
+      return function () {
+        nonceListeners.delete(listener);
+      };
+    },
+    createMessage(param) {
+      var {
+        nonce: value,
+        address,
+        chainId
+      } = param;
+      return (0, import_createWalletMessage.createWalletMessage)({
+        address,
+        chainId,
+        nonce: value,
+        domain: options.domain,
+        uri: options.uri
+      });
+    },
+    gpgMessage(param) {
+      var {
+        nonce: value
+      } = param;
+      return (0, import_message.buildWalletMessage)("gpg", {
+        nonce: value,
+        domain: options.domain,
+        uri: options.uri
+      });
+    },
+    siweConfig(onSign) {
+      return {
+        getNonce: function getNonce() {
+          return kc.getNonce();
+        },
+        createMessage: function createMessage(param) {
+          var {
+            nonce: value,
+            address,
+            chainId
+          } = param;
+          return kc.createMessage({
+            nonce: value,
+            address,
+            chainId
+          });
+        },
+        onSign,
+        subscribeNonceReset: kc.subscribeNonceReset,
+        verifyMessage: async function verifyMessage() {
+          return true;
+        },
+        getSession: async function getSession() {
+          return null;
+        },
+        signOut: async function signOut() {
+          return true;
+        }
+      };
+    },
+    gpgConfig(onSign) {
+      return {
+        getNonce: function getNonce() {
+          return kc.getNonce();
+        },
+        buildMessage: function buildMessage(args) {
+          return kc.gpgMessage(args);
+        },
+        onSign,
+        subscribeNonceReset: kc.subscribeNonceReset
+      };
+    },
+    browserFlow(opts) {
+      return (0, import_browserFlow.browserFlow)(opts);
+    },
+    directGrant(opts) {
+      return (0, import_directGrant.createDirectGrant)(kc, opts);
+    },
+    browserLoginUrl(param) {
+      var {
+        clientId,
+        redirectUri,
+        scope
+      } = param;
+      var state = randomBase64Url(16);
+      var codeVerifier = randomBase64Url(32);
+      var params = new URLSearchParams({
+        client_id: clientId,
+        redirect_uri: redirectUri,
+        response_type: "code",
+        scope: Array.isArray(scope) ? scope.join(" ") : scope !== null && scope !== void 0 ? scope : "openid",
+        state,
+        code_challenge: pkceChallenge(codeVerifier),
+        code_challenge_method: "S256"
+      });
+      return {
+        url: `${realmUrl}/protocol/openid-connect/auth?${params}`,
+        state,
+        codeVerifier
+      };
+    },
+    registerWallet(opts) {
+      return (0, import_registerWallet.createWalletRegistration)(kc, opts);
+    }
+  };
+  return kc;
+}
+function deriveKeycloakFromLocation() {
+  var location = arguments.length > 0 && arguments[0] !== void 0 ? arguments[0] : globalThis.location;
+  var match = location === null || location === void 0 ? void 0 : location.pathname.match(/^(.*)\/realms\/([^/]+)\//);
+  if (!location || !match) return void 0;
+  return {
+    baseUrl: location.origin + match[1],
+    realm: decodeURIComponent(match[2])
+  };
+}
+//# sourceMappingURL=keycloakWallet.native.js.map

package/dist/cjs/keycloak/keycloakWallet.native.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["__toCommonJS","mod","__copyProps","__defProp","value","keycloakWallet_exports","__export","deriveKeycloakFromLocation","keycloakWallet","pkceChallenge","toCredentials","module","exports","import_viem","require","import_base64","import_createWalletMessage","import_message","import_browserFlow","import_directGrant","import_registerWallet","import_types","sessionCookie","readSessionCookie","res","_ref","_headers_get","_headers_getSetCookie","headers","values","getSetCookie","call","get","_iteratorNormalCompletion","_didIteratorError","_iteratorError","_iterator","Symbol","iterator","_step","next","done","match","err","return","base64Url","base64Url2","bytes","bytesToBase64","replace","randomBase64Url","size","crypto","globalThis","getRandomValues","Error","Uint8Array","codeVerifier","sha256","TextEncoder","encode","args","username","signature","password","message","options","_options_resource","_options_fetch","baseUrl","resource","realmUrl","encodeURIComponent","realm","resourceUrl","tokenUrl","fetchImpl","fetch","input","init","cookie","nonce","nonceListeners","Set","request","request2","url","arguments","length","Headers","has","set","credentials","fetchNonce","fetchNonce2","_readSessionCookie","ok","KeycloakWalletError","status","text","trim","kc","getNonce","pending","catch","resetNonce","listener","subscribeNonceReset","add","delete","createMessage","param","address","chainId","createWalletMessage","domain","uri","gpgMessage","buildWalletMessage"],"sources":["../../../src/keycloak/keycloakWallet.ts"],"sourcesContent":[null],"mappings":";;;;;;;;;;;;;;;;;;;;;AAAA,IAAAA,YAAA,GAAAC,GAAA,IAAAC,WAAA,CAAAC,SAAA;EAAAC,KAAA;AAAA,IAAAH,GAAA;AAAA,IAAAI,sBAAA;AAAAC,QAAA,CAAAD,sBAAA;EAAAE,0BAAA,EAAAA,CAAA,KAAAA,0BAAA;EAAAC,cAAA,EAAAA,CAAA,KAAAA,cAAA;EAAAC,aAAA,EAAAA,CAAA,KAAAA,aAAA;EAAAC,aAAA,EAAAA,CAAA,KAAAA;AAAA;AAAAC,MAAA,CAAAC,OAAA,GAAAZ,YAAqC,CAAAK,sBAAA;AACrC,IAAAQ,WAAA,GAAAC,OAA8B;AAC9B,IAAAC,aAAA,GAAAD,OAAA,6BAAoC;AAEpC,IAAAE,0BAAmC,GAAAF,OAAA;AACnC,IAAAG,cAAA,GAAAH,OAAqD;AACrD,IAAAI,kBAAA,GAA6EJ,OAAA;AAC7E,IAAAK,kBAAA,GAAAL,OAIO;AACP,IAAAM,qBAA8E,GAAAN,OAAA;AAyF9E,IAAAO,YAAM,GAAAP,OAAgB;AAEtB,IAAAQ,aAAS,yCAAqD;AAC5D,SAAMC,iBAAcA,CAAAC,GAAA;EACpB,IAAAC,IAAM,EAAAC,YAAS;EACf,IAAAC,qBAAoB;EAClB,IAAAC,OAAM,GAAAJ,GAAQ,CAAAI,OAAM;EACpB,IAAAC,MAAI,GAAO,CAAAJ,IAAA,GAAO,CAAAE,qBAAuB,GAAAC,OAAA,CAAAE,YAAA,cAAAH,qBAAA,uBAAAA,qBAAA,CAAAI,IAAA,CAAAH,OAAA,eAAAH,IAAA,cAAAA,IAAA,IAC3C,CAAAC,YAAA,GAAAE,OAAA,CAAAI,GAAA,4BAAAN,YAAA,cAAAA,YAAA,MACA;EACF,IAAAO,yBAAA;IAAAC,iBAAA;IAAAC,cAAA;EAEA,IAAM;IAGN,KAAS,IAAAC,SAAA,GAAgBP,MAAsB,CAAAQ,MAAA,CAAAC,QAAA,KAAAC,KAAA,IAAAN,yBAAA,IAAAM,KAAA,GAAAH,SAAA,CAAAI,IAAA,IAAAC,IAAA,GAAAR,yBAAA;MAC7C,IAAM7B,KAAA,GAASmC,KAAA,CAAAnC,KAAW;MACtB,IAACsC,KAAQ,GAAAtC,KAAA,CAAAsC,KAAA,CAAApB,aAAiB;MAC5B,IAAMoB,KAAI,YAAAA,KAAA,OAAAA,KAAA;IAAA;EACR,EACF,OAAAC,GAAA;IACFT,iBAAA;IACAC,cAAO,GAAUQ,GAAA;EACnB;IAGO;MACL,IAAO,CAAAV,yBAAU,IAAAG,SAAW,CAAAQ,MAAA,IAAY,IAAE;QAC5CR,SAAA,CAAAQ,MAAA;MAGO;IACL,UAAO;MACL,IAAAV,iBAAe;QACf,MAAAC,cAAU;MACV;IACF;EACF;EAEO,OAAS;AACd;AACA,IAAAU,SAAM,YAAWC,UAAQA,CAAAC,KAAY;EACrC,OAAM,IAAAhC,aAAc,CAAAiC,aAAkB,EAAAD,KAAA,EAAAE,OAAA,MAAmB,KAAQ,EAAAA,OAAM,aAAAA,OAAA;AACvE;AACA,SAAMC,eAAcA,CAAAC,IAAA,EAAQ;EAC5B,IAAAC,MAAM,GAAAC,UAAY,CAAAD,MAAQ;EAC1B,IAAI,EAAAA,MAAA,aAAAA,MAAA,uBAAAA,MAAA,CAAAE,eAAA;IACJ,MAAI,IAAAC,KAAA;EACJ;EAEA,OAAMV,SAAU,CAACO,MAAa,CAAAE,eAA2B,KAAAE,UAAA,CAAAL,IAAA;AACvD;AACA,SAAI1C,aAAWA,CAAAgD,YAAY;EAC3B,OAAAZ,SAAO,GAAU,EAAAhC,WAAO,CAAA6C,MAAa,MAAAC,WAAc,GAAMC,MAAA,CAAAH,YAAS;AAAA;AAGpE,SAAM/C,aAAaA,CAAAmD,IAAA;EACjB;IACAC,QAAK,EAAID,IAAI,CAAAE,SAAA;IACXC,QAAM,IAAI,EAAAjD,aAAA,CAAAiC,aAAA,MAAoBW,WAAA,GAAAC,MAAA,CAAAC,IAAA,CAAAI,OAAkC;IAClEA,OAAA,EAAAJ,IAAA,CAAAI;EACA;AACA;AACA,SAAKzD,cAAaA,CAAA0D,OAAI;EACtB,IAAAC,iBAAO,EAAAC,cAAA;EACT,IAAAC,OAAA,GAAAH,OAAA,CAAAG,OAAA,CAAApB,OAAA;EAEA,IAAAqB,QAA2B,IAAAH,iBAAA,GAAAD,OAAA,CAAAI,QAAA,cAAAH,iBAAA,cAAAA,iBAAA;EAAA,IACzBI,QAAA,MAAAF,OAAA,WAAAG,kBAAA,CAAAN,OAAA,CAAAO,KAAA;EAAA,IACAC,WAAO,GAAQ,GAAAH,QAAA,IAAAD,QAAA;EAAA,IACfK,QAAA,MAAAJ,QAAA;EAAA,IACAK,SAAA,IAAAR,cAAA,GAAAF,OAAA,CAAAW,KAAA,cAAAT,cAAA,cAAAA,cAAA,aAAAU,KAAA,EAAAC,IAAA;IACA,OAAA1B,UAAA,CAAAwB,KAAA,CAAAC,KAAA,EAAAC,IAAA;EAAA;EACA,IACAC,MAAA;EAAA,IACAC,KAAA;EACE,IAAAC,cAAY,sBAAAC,GAAA;EACV,IAAAC,OAAA,GAAM,SAAUC,SAAAC,GAAW;IAC3B,IAAAP,IAAA,GAAAQ,SAAQ,CAAAC,MAAA,QAAAD,SAAA,iBAAAA,SAAA;IACR,IAAA3D,OAAA,GAAQ,IAAM6D,OAAM,CAAAV,IAAA,CAAAnD,OAAA;IAClB,IAAAoD,MAAI,KAAApD,OAAU,CAAA8D,GAAA,SAAS,GAAQ9D,OAAA,CAAA+D,GAAA,WAAAX,MAAA;IAAA,OAChCJ,SAAA,CAAAU,GAAA;MACHM,WAAA;MACA,GAAAb,IAAO;MACTnD;IACA;EACE;EACA,IAAAiE,UAAA,GAAW,eAAYC,WAAgBA,CAAA;IACzC,IAAAC,kBAAA;IACA,IAAAvE,GAAA,SAAA4D,OAAoB,IAAAV,WAAU;IAC5B,KAAAlD,GAAA,CAAAwE,EAAA;MACA,UAAO3E,YAAM,CAAA4E,mBAAA,mCAAAzE,GAAA,CAAA0E,MAAA,KAAA1E,GAAA,CAAA0E,MAAA;IACX;IAA8BlB,MAChC,IAAAe,kBAAA,GAAAxE,iBAAA,CAAAC,GAAA,eAAAuE,kBAAA,cAAAA,kBAAA,GAAAf,MAAA;IACF,IAAA5E,KAAA,UAAAoB,GAAA,CAAA2E,IAAA,IAAAC,IAAA;IACA,KAAAhG,KAAA,QAAgB,IAAAiB,YAAc,CAAA4E,mBAAoB,qCAAAzE,GAAA,CAAA0E,MAAA;IAChD,OAAA9F,KAAA;EAA2B;EACzB,IAAAiG,EACA;IAAAhC,OACA;IAAOI,KACP,EAAAP,OAAQ,CAAAO,KAAQ;IAAAH,QAChB;IAAaC,QACd;IACHG,WAAA;IACAC,QAAA;IACES,OAAA;IACFkB,SAAA;MACA,KAAArB,KAAW;QACT,IAAAsB,OAAO,GAAAV,UAAA;QACLZ,KAAA,GAAAsB,OAAU;QACVA,OAAA,CAAAC,KAAA,aAAgB;UACd,IAAAvB,KAAO,KAAAsB,OAAA,EAAAtB,KAAA;QAAA,EACP;MAAA;MACA,OACFA,KAIS;IAAgD;IACzDwB,UACAA,CAAA;MAAwBxB,KACxB;MAA2B,IAC3BhD,yBAAwB;QAAAC,iBAAA;QAAAC,cAAA;MAAA,IACxB;QACF,SAAAC,SAAA,GAAA8C,cAAA,CAAA7C,MAAA,CAAAC,QAAA,KAAAC,KAAA,IAAAN,yBAAA,IAAAM,KAAA,GAAAH,SAAA,CAAAI,IAAA,IAAAC,IAAA,GAAAR,yBAAA;UACF,IAAAyE,QAAA,GAAAnE,KAAA,CAAAnC,KAAA;UACAsG,QAAU;QACR;MAAO,EACL,OAAA/D,GAAU;QACVT,iBAAe,OAAS;QACxBC,cAAA,GAAAQ,GAAA;MAAA,UACA;QACF;UACF,KAAAV,yBAAA,IAAAG,SAAA,CAAAQ,MAAA;YACAR,SAAY,CAAMQ,MAAA;UAChB;QACF;UACA,IAAAV,iBAAkB;YAChB,MAAOC,cAAA;UACT;QACA;MACE;IACA;IACAwE,mBAAeA,CAAAD,QAAI;MAAgBxB,cACtB,CAAA0B,GAAA,CAAAF,QAAA;MAAA,OACX,YAAc;QACdxB,cAAA,CAAe2B,MAAA,CAAAH,QAAA;MAAA;IAC2C;IAC1DI,aACAA,CAAAC,KAAA,EAAgB;MAA0B,IAC1C;QAAA9B,KAAA,EAAA7E,KAAA;QAAA4G,OAAuB;QAAAC;MAAA,IAAAF,KAAA;MACzB,OAAC,IAAA/F,0BAAA,CAAAkG,mBAAA;QACDF,OAAS;QACXC,OAAA;QACAhC,KAAA,EAAA7E,KAAe;QACb+G,MAAA,EAAAjD,OAAO,CAAAiD,MAAA;QACTC,GAAA,EAAAlD,OAAA,CAAAkD;MACF;IACA;IACFC,WAAAN,KAAA;MAMO,IAAS;QAAA9B,KAAA,EAAA7E;MAAA,IAAA2G,KAAA;MAKd,OAAM,IAAQ9F,cAAU,CAAAqG,kBAAe;QAClCrC,KAAA,EAAA7E,KAAa;QAClB+G,MAAS,EAAAjD,OAAS,CAAAiD,MAAS;QAC7BC,GAAA,EAAAlD,OAAA,CAAAkD","ignoreList":[]}

package/dist/cjs/keycloak/mount.cjs

@@ -0,0 +1,53 @@
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all) __defProp(target, name, {
+    get: all[name],
+    enumerable: true
+  });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from)) if (!__hasOwnProp.call(to, key) && key !== except) __defProp(to, key, {
+      get: () => from[key],
+      enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable
+    });
+  }
+  return to;
+};
+var __toCommonJS = mod => __copyProps(__defProp({}, "__esModule", {
+  value: true
+}), mod);
+var mount_exports = {};
+__export(mount_exports, {
+  mount: () => mount
+});
+module.exports = __toCommonJS(mount_exports);
+var import_client = require("react-dom/client");
+var import_KeycloakWalletLogin = require("./KeycloakWalletLogin.cjs");
+var import_jsx_runtime = require("react/jsx-runtime");
+const mounted = /* @__PURE__ */new WeakMap();
+function mount(target, opts = {}) {
+  const el = typeof target === "string" ? document.querySelector(target) : target;
+  if (!el) throw new Error(`MpoKeycloakWallet.mount: nothing matches ${String(target)}`);
+  const existing = mounted.get(el);
+  if (existing) return existing;
+  const config = opts.wagmiConfig ?? (0, import_KeycloakWalletLogin.createKeycloakWalletConfig)(opts);
+  const root = (0, import_client.createRoot)(el);
+  root.render(/* @__PURE__ */(0, import_jsx_runtime.jsx)(import_KeycloakWalletLogin.KeycloakWalletLogin, {
+    ...opts,
+    wagmiConfig: config
+  }));
+  const handle = {
+    config,
+    unmount() {
+      if (mounted.get(el) !== handle) return;
+      mounted.delete(el);
+      root.unmount();
+    }
+  };
+  mounted.set(el, handle);
+  return handle;
+}

package/dist/cjs/keycloak/mount.native.js

@@ -0,0 +1,33 @@
+"use strict";
+
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all) __defProp(target, name, {
+    get: all[name],
+    enumerable: true
+  });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from)) if (!__hasOwnProp.call(to, key) && key !== except) __defProp(to, key, {
+      get: () => from[key],
+      enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable
+    });
+  }
+  return to;
+};
+var __toCommonJS = mod => __copyProps(__defProp({}, "__esModule", {
+  value: true
+}), mod);
+var mount_native_exports = {};
+__export(mount_native_exports, {
+  mount: () => mount
+});
+module.exports = __toCommonJS(mount_native_exports);
+function mount(_target, _opts) {
+  throw new Error("MpoKeycloakWallet.mount is web only");
+}
+//# sourceMappingURL=mount.native.js.map

package/dist/cjs/keycloak/mount.native.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["mount_native_exports","__export","mount","module","exports","__toCommonJS","_target","_opts","Error"],"sources":["../../../src/keycloak/mount.native.ts"],"sourcesContent":[null],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;AAAA,IAAAA,oBAAA;AAAAC,QAAA,CAAAD,oBAAA;EAAAE,KAAA,EAAAA,CAAA,KAAAA;AAAA;AAAAC,MAAA,CAAAC,OAAA,GAAAC,YAAA,CAAAL,oBAAA;AAAO,SAASE,MAAMI,OAAA,EAASC,KAAA,EAAO;EAClC,MAAM,IAAIC,KAAA,CAAM,qCAAqC;AACzD","ignoreList":[]}

package/dist/cjs/keycloak/registerWallet.cjs

@@ -0,0 +1,74 @@
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all) __defProp(target, name, {
+    get: all[name],
+    enumerable: true
+  });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from)) if (!__hasOwnProp.call(to, key) && key !== except) __defProp(to, key, {
+      get: () => from[key],
+      enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable
+    });
+  }
+  return to;
+};
+var __toCommonJS = mod => __copyProps(__defProp({}, "__esModule", {
+  value: true
+}), mod);
+var registerWallet_exports = {};
+__export(registerWallet_exports, {
+  createWalletRegistration: () => createWalletRegistration
+});
+module.exports = __toCommonJS(registerWallet_exports);
+var import_types = require("./types.cjs");
+function createWalletRegistration(kc, opts) {
+  const registration = {
+    async register({
+      message,
+      signature
+    }) {
+      const accessToken = typeof opts.accessToken === "function" ? await opts.accessToken() : opts.accessToken;
+      if (!accessToken) throw new Error("registerWallet needs a signed-in user's access token");
+      try {
+        const res = await kc.request(`${kc.resourceUrl}/register`, {
+          method: "POST",
+          headers: {
+            authorization: `Bearer ${accessToken}`,
+            "content-type": "application/json"
+          },
+          body: JSON.stringify({
+            message,
+            signature
+          })
+        });
+        const data = await res.json().catch(() => ({}));
+        if (!res.ok) {
+          throw new import_types.KeycloakWalletError(data.message || `Keycloak wallet register failed (${res.status})`, res.status, {
+            error: data.message
+          });
+        }
+        return {
+          registered: Boolean(data.registered)
+        };
+      } finally {
+        kc.resetNonce();
+      }
+    },
+    onSign: async ({
+      username,
+      message
+    }) => {
+      await registration.register({
+        message,
+        signature: username
+      });
+      return true;
+    }
+  };
+  return registration;
+}