@okta/spa-platform 0.6.0

package/dist/esm/utils/SynchronizedResult.js

@@ -0,0 +1,101 @@
+/*!
+ * Copyright (c) 2015-present, Okta, Inc. and/or its affiliates. All rights reserved.
+ * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the "License.")
+ *
+ * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
+ * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * 
+ * See the License for the specific language governing permissions and limitations under the License.
+ */
+
+const defaultOptions = {
+    timeout: 8000,
+    lockFreedDelay: 500,
+    retries: 2,
+};
+function sleep(ms) {
+    return new Promise(resolve => setTimeout(resolve, ms));
+}
+class SynchronizedResult {
+    name;
+    task;
+    channel;
+    options = { ...defaultOptions };
+    constructor(name, task, options = {}) {
+        this.name = name;
+        this.task = task;
+        this.channel = new BroadcastChannel(name);
+        this.options = { ...defaultOptions, ...options };
+    }
+    onResultFromOtherTab() {
+        const { deseralizer } = this.options;
+        return new Promise((resolve) => {
+            this.channel.onmessage = (event) => {
+                const item = deseralizer ? deseralizer(event.data) : event.data;
+                resolve(item);
+            };
+        });
+    }
+    async onLockFreedPlusDelay() {
+        await navigator.locks.request(this.name, async () => { });
+        await sleep(this.options.lockFreedDelay);
+        return 'FREED';
+    }
+    async onTimeout() {
+        await sleep(this.options.timeout);
+        return 'TIMEOUT';
+    }
+    async whenLockIsTaken() {
+        const { retries } = this.options;
+        const result = await Promise.race([
+            this.onResultFromOtherTab(),
+            this.onLockFreedPlusDelay(),
+            this.onTimeout()
+        ]);
+        this.channel.onmessage = () => { };
+        if (result === 'FREED' || result === 'TIMEOUT') {
+            if (retries > 0) {
+                return this.exec();
+            }
+            else {
+                throw new Error('Task was unable to fulfill');
+            }
+        }
+        return result;
+    }
+    async whenLockIsGranted() {
+        const { seralizer } = this.options;
+        let result;
+        try {
+            result = await this.task();
+        }
+        catch (err) {
+            this.channel.postMessage(err);
+            throw err;
+        }
+        this.channel.postMessage(seralizer ? seralizer(result) : result);
+        return result;
+    }
+    async exec(overrides = {}) {
+        this.options = { ...this.options, ...overrides };
+        try {
+            return await navigator.locks.request(this.name, { ifAvailable: true }, async (lock) => {
+                if (!lock) {
+                    return this.whenLockIsTaken();
+                }
+                return this.whenLockIsGranted();
+            });
+        }
+        finally {
+            this.close();
+        }
+    }
+    close() {
+        this.channel.close();
+    }
+}
+
+export { SynchronizedResult };
+//# sourceMappingURL=SynchronizedResult.js.map

package/dist/esm/utils/SynchronizedResult.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"SynchronizedResult.js","sources":["../../../../src/utils/SynchronizedResult.ts"],"sourcesContent":[null],"names":[],"mappings":";;;;;;;;;;;;AAiBA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAM,cAAc,CAAA,CAAA,CAA8B,CAAA;IAEhD,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAO,EAAE,CAAA,CAAA,CAAA,CAAI,CAAA;AACb,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAc,EAAE,CAAA,CAAA,CAAG,CAAA;AACnB,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAO,EAAE,CAAC,CAAA;CACX,CAAA;AAED,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAS,CAAA,CAAA,CAAA,CAAA,CAAK,CAAE,CAAA,CAAU,CAAA,CAAA,CAAA;AACxB,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAO,CAAA,CAAA,CAAA,CAAI,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAO,CAAC,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAO,CAAA,CAAA,CAAA,CAAI,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAU,CAAC,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAO,CAAA,CAAE,CAAA,CAAE,CAAC,CAAC,CAAA;AACxD,CAAA;MAWa,kBAAkB,CAAA,CAAA;AACpB,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAI,CAAA;AACL,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAI,CAAA;AACJ,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAO,CAAA;AACP,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAO,CAAA,CAAA,CAAoC,CAAA,CAAC,CAAA,CAAA,CAAG,cAAc,CAAA,CAAC,CAAA;AAEtE,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAa,CAAA,CAAA,CAAA,CAAY,CAAA,CAAE,IAAsB,CAAA,CAAE,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,IAAoD,CAAA,CAAE,CAAA,CAAA,CAAA;AACvG,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAI,CAAC,CAAA,CAAA,CAAA,CAAI,CAAA,CAAA,CAAG,CAAA,CAAA,CAAA,CAAI,CAAA;AAChB,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAI,CAAC,CAAA,CAAA,CAAA,CAAI,CAAA,CAAA,CAAG,CAAA,CAAA,CAAA,CAAI,CAAA;QAChB,CAAA,CAAA,CAAA,CAAI,CAAC,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAO,CAAA,CAAA,CAAG,IAAI,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAgB,CAAC,IAAI,CAAC,CAAA;QACzC,CAAA,CAAA,CAAA,CAAI,CAAC,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAO,CAAA,CAAA,CAAG,CAAA,CAAC,GAAG,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAc,CAAA,CAAE,CAAA,CAAA,CAAG,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAO,CAAA,CAAC,CAAA;IAChD,CAAA;IAEQ,oBAAoB,CAAA,CAAA,CAAA,CAAA;AAC1B,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,MAAM,CAAA,CAAE,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAW,EAAE,CAAA,CAAA,CAAG,CAAA,CAAA,CAAA,CAAI,CAAC,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAO,CAAA;AACpC,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,OAAO,CAAA,CAAA,CAAA,CAAI,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAO,CAAI,CAAC,OAAO,CAAA,CAAA,CAAA,CAAA,CAAI,CAAA;YAChC,CAAA,CAAA,CAAA,CAAI,CAAC,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAO,CAAC,SAAS,CAAA,CAAA,CAAG,CAAC,KAAK,CAAA,CAAA,CAAA,CAAA,CAAI,CAAA;AACjC,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAM,CAAA,CAAA,CAAA,CAAI,CAAA,CAAA,CAAG,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAW,GAAG,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAW,CAAC,CAAA,CAAA,CAAA,CAAA,CAAK,CAAC,CAAA,CAAA,CAAA,CAAI,CAAC,CAAA,CAAA,CAAG,CAAA,CAAA,CAAA,CAAA,CAAK,CAAC,CAAA,CAAA,CAAA,CAAI,CAAA;gBAC/D,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAO,CAAC,CAAA,CAAA,CAAA,CAAI,CAAC,CAAA;AACf,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAC,CAAA;AACH,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAC,CAAC,CAAA;IACJ,CAAA;AAEQ,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAM,oBAAoB,CAAA,CAAA,CAAA,CAAA;AAChC,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAM,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAS,CAAC,CAAA,CAAA,CAAA,CAAA,CAAK,CAAC,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAO,CAAC,CAAA,CAAA,CAAA,CAAI,CAAC,CAAA,CAAA,CAAA,CAAI,CAAA,CAAE,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAW,CAAA,CAAE,CAAC,CAAC,CAAA;QAExD,CAAA,CAAA,CAAA,CAAA,CAAA,CAAM,KAAK,CAAC,CAAA,CAAA,CAAA,CAAI,CAAC,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAO,CAAC,cAAc,CAAC,CAAA;AACxC,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,OAAO,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAO,CAAA;IAChB,CAAA;AAEQ,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAM,SAAS,CAAA,CAAA,CAAA,CAAA;QACrB,CAAA,CAAA,CAAA,CAAA,CAAA,CAAM,KAAK,CAAC,CAAA,CAAA,CAAA,CAAI,CAAC,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAO,CAAC,OAAO,CAAC,CAAA;AACjC,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,OAAO,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAS,CAAA;IAClB,CAAA;AAEQ,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAM,eAAe,CAAA,CAAA,CAAA,CAAA;AAC3B,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,MAAM,CAAA,CAAE,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAO,EAAE,CAAA,CAAA,CAAG,CAAA,CAAA,CAAA,CAAI,CAAC,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAO,CAAA;AAEhC,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,MAAM,CAAA,CAAA,CAAA,CAAA,CAAA,CAAM,CAAA,CAAA,CAAG,MAAM,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAO,CAAC,IAAI,CAAC,CAAA;AAChC,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAI,CAAC,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAoB,CAAA,CAAE,CAAA;AAC3B,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAI,CAAC,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAoB,CAAA,CAAE,CAAA;AAC3B,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAI,CAAC,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAS,CAAA,CAAA;AACf,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAC,CAAA;QAGF,CAAA,CAAA,CAAA,CAAI,CAAC,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAO,CAAC,SAAS,CAAA,CAAA,CAAG,CAAA,CAAA,CAAA,CAAA,CAAA,CAAK,EAAE,CAAC,CAAA;QAEjC,CAAA,CAAA,CAAA,CAAI,MAAM,CAAA,CAAA,CAAA,CAAA,CAAK,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAO,IAAI,CAAA,CAAA,CAAA,CAAA,CAAA,CAAM,CAAA,CAAA,CAAA,CAAA,CAAK,SAAS,CAAA,CAAE,CAAA;AAC9C,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAI,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAO,CAAA,CAAA,CAAG,CAAC,CAAA,CAAE,CAAA;AACf,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAO,CAAA,CAAA,CAAA,CAAI,CAAC,CAAA,CAAA,CAAA,CAAI,CAAA,CAAE,CAAA;YACpB,CAAA;iBACK,CAAA;AACH,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAM,CAAA,CAAA,CAAA,CAAI,CAAA,CAAA,CAAA,CAAA,CAAK,CAAC,4BAA4B,CAAC,CAAA;YAC/C,CAAA;QACF,CAAA;AAEA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,OAAO,CAAA,CAAA,CAAA,CAAA,CAAA,CAAM,CAAA;IACf,CAAA;AAEQ,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAM,iBAAiB,CAAA,CAAA,CAAA,CAAA;AAC7B,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,MAAM,CAAA,CAAE,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAS,EAAE,CAAA,CAAA,CAAG,CAAA,CAAA,CAAA,CAAI,CAAC,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAO,CAAA;AAElC,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,IAAI,CAAA,CAAA,CAAA,CAAA,CAAA,CAAS,CAAA;AACb,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAI,CAAA;AACF,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,MAAM,CAAA,CAAA,CAAG,CAAA,CAAA,CAAA,CAAA,CAAA,CAAM,CAAA,CAAA,CAAA,CAAI,CAAC,IAAI,CAAA,CAAE,CAAA;QAC5B,CAAA;QACA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAO,GAAG,CAAA,CAAE,CAAA;AACV,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,IAAI,CAAC,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAO,CAAC,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAW,CAAC,GAAG,CAAC,CAAA;AAC7B,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,MAAM,CAAA,CAAA,CAAG,CAAA;QACX,CAAA;AAEA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAI,CAAC,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAO,CAAC,WAAW,CAAC,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAS,CAAA,CAAA,CAAG,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAS,CAAC,CAAA,CAAA,CAAA,CAAA,CAAA,CAAM,CAAC,CAAA,CAAA,CAAG,MAAM,CAAC,CAAA;AAChE,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,OAAO,CAAA,CAAA,CAAA,CAAA,CAAA,CAAM,CAAA;IACf,CAAA;AAEO,CAAA,CAAA,CAAA,CAAA,MAAM,CAAA,CAAA,CAAA,CAAI,CAAE,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAsD,EAAE,CAAA,CAAA,CAAA;AACzE,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAI,CAAC,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAO,CAAA,CAAA,CAAG,CAAA,CAAE,CAAA,CAAA,CAAG,CAAA,CAAA,CAAA,CAAI,CAAC,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAO,CAAA,CAAE,CAAA,CAAA,CAAG,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAS,CAAA,CAAE,CAAA;AAChD,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAI,CAAA;YACF,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAO,MAAM,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAS,CAAC,KAAK,CAAC,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAO,CAAC,CAAA,CAAA,CAAA,CAAI,CAAC,IAAI,CAAA,CAAE,CAAA,CAAE,WAAW,CAAA,CAAE,CAAA,CAAA,CAAA,CAAI,EAAE,CAAA,CAAE,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAO,IAAI,CAAA,CAAA,CAAA,CAAA,CAAI,CAAA;gBAEpF,CAAA,CAAA,CAAA,CAAI,CAAC,CAAA,CAAA,CAAA,CAAI,CAAA,CAAE,CAAA;AACT,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAO,CAAA,CAAA,CAAA,CAAI,CAAC,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAe,CAAA,CAAE,CAAA;gBAC/B,CAAA;AAEA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAO,CAAA,CAAA,CAAA,CAAI,CAAC,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAiB,CAAA,CAAE,CAAA;AACjC,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAC,CAAC,CAAA;QACJ,CAAA;gBACQ,CAAA;AACN,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAI,CAAC,CAAA,CAAA,CAAA,CAAA,CAAK,CAAA,CAAE,CAAA;QACd,CAAA;IACF,CAAA;IAQO,KAAK,CAAA,CAAA,CAAA,CAAA;AACV,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAI,CAAC,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAO,CAAC,KAAK,CAAA,CAAE,CAAA;IACtB,CAAA;AACD,CAAA;;"}

package/dist/esm/utils/UserAgent.js

@@ -0,0 +1,18 @@
+/*!
+ * Copyright (c) 2015-present, Okta, Inc. and/or its affiliates. All rights reserved.
+ * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the "License.")
+ *
+ * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
+ * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * 
+ * See the License for the specific language governing permissions and limitations under the License.
+ */
+
+function isFirefox() {
+    return navigator.userAgent.toLowerCase().includes('firefox');
+}
+
+export { isFirefox };
+//# sourceMappingURL=UserAgent.js.map

package/dist/esm/utils/UserAgent.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"UserAgent.js","sources":["../../../../src/utils/UserAgent.ts"],"sourcesContent":[null],"names":[],"mappings":";;;;;;;;;;;;SAMgB,SAAS,CAAA,CAAA,CAAA,CAAA;IACvB,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAO,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAS,CAAC,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAS,CAAC,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAW,CAAA,CAAE,CAAC,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAQ,CAAC,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAS,CAAC,CAAA;AAC9D,CAAA;;"}

package/dist/esm/utils/isModernBrowser.js

@@ -0,0 +1,25 @@
+/*!
+ * Copyright (c) 2015-present, Okta, Inc. and/or its affiliates. All rights reserved.
+ * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the "License.")
+ *
+ * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
+ * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * 
+ * See the License for the specific language governing permissions and limitations under the License.
+ */
+
+function isModernBrowser() {
+    if (navigator && navigator.locks &&
+        crypto && crypto.subtle &&
+        BroadcastChannel &&
+        AbortController && AbortSignal
+    ) {
+        return true;
+    }
+    return false;
+}
+
+export { isModernBrowser };
+//# sourceMappingURL=isModernBrowser.js.map

package/dist/esm/utils/isModernBrowser.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"isModernBrowser.js","sources":["../../../../src/utils/isModernBrowser.ts"],"sourcesContent":[null],"names":[],"mappings":";;;;;;;;;;;;SAUgB,eAAe,CAAA,CAAA,CAAA,CAAA;AAC7B,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CACE,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAS,CAAA,CAAA,CAAA,CAAI,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAS,CAAC,CAAA,CAAA,CAAA,CAAA,CAAK,CAAA,CAAA,CAAA;AAC5B,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAM,CAAA,CAAA,CAAA,CAAI,CAAA,CAAA,CAAA,CAAA,CAAA,CAAM,CAAC,CAAA,CAAA,CAAA,CAAA,CAAA,CAAM,CAAA,CAAA,CAAA;AACvB,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAgB,CAAA,CAAA,CAAA;QAChB,eAAe,CAAA,CAAA,CAAA,CAAI,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA;MACnB,CAAA;AACA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,OAAO,CAAA,CAAA,CAAA,CAAI,CAAA;IACb,CAAA;AAEA,CAAA,CAAA,CAAA,CAAA,OAAO,CAAA,CAAA,CAAA,CAAA,CAAK,CAAA;AACd,CAAA;;"}

package/dist/types/Credential/Credential.d.ts

@@ -0,0 +1,20 @@
+/**
+ * @module
+ * @mergeModuleWith Platform
+ */
+import { Credential as CredentialBase, type RequestAuthorizer, type JSONSerializable } from '@okta/auth-foundation/core';
+/**
+ * A browser-specific implementation of `@okta/auth-foundation` {@link AuthFoundation!Credential | Credential}
+ *
+ * @group Credential
+ * @noInheritDoc
+ */
+export declare class Credential extends CredentialBase implements RequestAuthorizer, JSONSerializable {
+    /**
+     * Closes the underlying BroadcastChannel, useful for testing environments to avoid open handles
+     *
+     * @see
+     * {@link https://jestjs.io/docs/cli#--detectopenhandles | jest --detectOpenHandles}
+     */
+    static close(): void;
+}

package/dist/types/Credential/CredentialCoordinator.d.ts

@@ -0,0 +1,28 @@
+/**
+ * @packageDocumentation
+ * @internal
+ */
+import type { TokenStorage, JsonPrimitive, JsonRecord } from '@okta/auth-foundation/core';
+import { CredentialCoordinator, CredentialCoordinatorImpl as CredentialCoordinatorBase } from '@okta/auth-foundation/core';
+/**
+ * Browser-specific implementation of {@link CredentialCoordinator}
+ *
+ * @internal
+ */
+export declare class CredentialCoordinatorImpl extends CredentialCoordinatorBase implements CredentialCoordinator {
+    private readonly id;
+    private readonly channel;
+    constructor(CredentialConstructor: (ConstructorParameters<typeof CredentialCoordinatorBase>)[0]);
+    get tokenStorage(): TokenStorage;
+    set tokenStorage(tokenStorage: TokenStorage);
+    protected broadcast(eventName: string, data: Record<string, JsonPrimitive | JsonRecord>): void;
+    protected registerTabListeners(): void;
+    clear(localOnly?: boolean): Promise<void>;
+    /**
+     * Closes the underlying BroadcastChannel, useful for testing environments to avoid open handles
+     *
+     * @see
+     * {@link https://jestjs.io/docs/cli#--detectopenhandles | jest --detectOpenHandles}
+     */
+    close(): void;
+}

package/dist/types/Credential/CredentialDataSource.d.ts

@@ -0,0 +1,9 @@
+/**
+ * @packageDocumentation
+ * @internal
+ */
+import { type ConfigurationParams, DefaultCredentialDataSource as BaseCredentialDataSource, CredentialDataSource } from '@okta/auth-foundation/core';
+import { OAuth2Client } from '../platform/index.ts';
+export declare class DefaultCredentialDataSource extends BaseCredentialDataSource implements CredentialDataSource {
+    protected createOAuth2Client(params: ConfigurationParams): OAuth2Client;
+}

package/dist/types/Credential/TokenStorage.d.ts

@@ -0,0 +1,56 @@
+/**
+ * @packageDocumentation
+ * @internal
+ */
+import { Token, type TokenStorage, type TokenStorageEvents, EventEmitter } from '@okta/auth-foundation/core';
+import { IndexedDBStore } from '../utils/IndexedDBStore.ts';
+/**
+ * Default implementation of TokenStorage backend by `localStorage`
+ * @internal
+ */
+export declare class BrowserTokenStorage implements TokenStorage {
+    #private;
+    private static version;
+    tokenPrefix: string;
+    encryptionKeyStore: IndexedDBStore<CryptoKey>;
+    encryptionKeyName: string;
+    includeClaims: boolean;
+    encryptAtRest: boolean;
+    supportLegacyStructure: boolean;
+    readonly emitter: EventEmitter<TokenStorageEvents>;
+    get defaultCredentialKey(): string;
+    set defaultCredentialKey(key: string);
+    get defaultTokenId(): string | null;
+    protected idToStoreKey(id: string): string;
+    protected legacyStoreKey(id: string): string;
+    setDefaultTokenId(id: string | null): Promise<void>;
+    private saveDefault;
+    allIDs(): Promise<string[]>;
+    add(token: Token, metadata?: Token.Metadata): Promise<void>;
+    replace(id: string, token: Token): Promise<void>;
+    remove(id: string): Promise<void>;
+    get(id: string): Promise<Token | null>;
+    getMetadata(id: string): Promise<Token.Metadata | null>;
+    setMetadata(metadata: Token.Metadata): Promise<void>;
+    clear(): Promise<void>;
+    protected writeToStorage(token: Token, metadata: Record<string, any>): Promise<void>;
+    protected readFromStorage(id: string): Promise<Record<string, any> | null>;
+    protected writeLegacy(token: Token, metadata: Record<string, any>): void;
+    protected convertFromLegacy(id: string): {
+        token: any;
+        metadata: any;
+    } | null;
+    /**
+     * Handles errors thrown when reading a token from storage
+     */
+    protected handleReadError(error: unknown, id: string): Promise<null>;
+    /**
+     * Handles errors thrown when decrypting a stored token
+     */
+    protected handleDecryptionError(error: Error, id: string): Promise<null>;
+    protected getEncryptionKey(): Promise<CryptoKey>;
+    protected generateEncryptionKey(): Promise<CryptoKey>;
+    protected removeEncryptionKeyIfEmpty(): Promise<void>;
+    protected encrypt(plainText: string, iv: string): Promise<ArrayBuffer>;
+    protected decrypt(encryptedText: string, iv: string): Promise<ArrayBuffer>;
+}

package/dist/types/Credential/index.d.ts

@@ -0,0 +1,5 @@
+/**
+ * @packageDocumentation
+ * @internal
+ */
+export { Credential } from './Credential.ts';

package/dist/types/FetchClient/index.d.ts

@@ -0,0 +1,13 @@
+import { FetchClient as FetchClientBase, type DPoPNonceCache } from '@okta/auth-foundation/core';
+/**
+ * @module FetchClient
+ */
+/**
+ * Wrapper around {@link fetch} to perform authenticated requests to a resource server
+ *
+ * The provided {@link TokenOrchestrator} is used to retrieve a {@link Token} which matches the criteria passed in via
+ * {@link TokenOrchestrator.AuthorizeParams}, like `issuer`, `client` and `scopes`. Once a valid {@link Token} is found, the request is made
+ */
+export declare class FetchClient extends FetchClientBase {
+    protected readonly dpopNonceCache: DPoPNonceCache;
+}

package/dist/types/flows/AuthorizationCodeFlow.d.ts

@@ -0,0 +1,95 @@
+import { type OAuth2ErrorResponse } from '@okta/auth-foundation/core';
+import { AuthorizationCodeFlow as AuthorizationCodeFlowBase } from '@okta/oauth2-flows';
+/** @internal */
+type PostMessageListenerOptions = {
+    state: string;
+    expectedOrigin: string;
+    timeout?: number;
+};
+/** @internal */
+declare function bindOktaPostMessageListener({ state, expectedOrigin, timeout }: PostMessageListenerOptions): Promise<AuthorizationCodeFlow.RedirectValues | OAuth2ErrorResponse>;
+export declare class AuthorizationCodeFlow extends AuthorizationCodeFlowBase {
+    /**
+     * Performs a browser full-page redirect to the `Authorization Server` `/authorize` endpoint.
+     * Once authentication is successful, the user will be redirected back to the provided `redirectUri`
+     *
+     * @group Authorize Methods
+     *
+     * @remarks
+     * This method returns a `Promise` that will never fulfill; a browser redirect will occur first
+     *
+     * @see
+     * {@link AuthorizationCodeFlow.resume}
+     */
+    static PerformRedirect(flow: AuthorizationCodeFlow): Promise<void>;
+    /** @internal */
+    protected static prepareOktaPostMessage(flow: AuthorizationCodeFlow): Promise<{
+        authorizeUrl: URL;
+        context: AuthorizationCodeFlowBase.Context;
+    }>;
+    /** @internal */
+    protected static processOktaPostMessage(flow: AuthorizationCodeFlow, result: Awaited<ReturnType<typeof bindOktaPostMessageListener>>, context: AuthorizationCodeFlow.Context): Promise<AuthorizationCodeFlowBase.Result>;
+    /**
+     * Fulfills the `/authorize` request within a hidden iframe and therefore does *not* require a redirect.
+     * This requires an existing cookie-based session with the IDP and is susceptible to third-party cookie restrictions.
+     *
+     * @group Authorize Methods
+     *
+     * @remarks
+     * This approach is not recommended for most common use cases and may be deprecated in the future.
+     * Use {@link AuthorizationCodeFlow.PerformRedirect} instead
+     *
+     * @returns
+     * Returns a {@link Platform.Token | Token} and the {@link AuthorizationCodeFlow.Context} used to request the token
+     *
+     * @see
+     * - {@link https://auth0.com/docs/authenticate/login/configure-silent-authentication | Silent Authentication}
+     * - {@link https://developers.google.com/privacy-sandbox/cookies | Third-party Cookie Deprecation}
+     */
+    static PerformSilently(flow: AuthorizationCodeFlow): Promise<AuthorizationCodeFlow.Result>;
+    /**
+     * Read carefully before use. This method (and popup pattern at large) has quite a few "gotchas"
+     *
+     * Fulfills `/authorize` requests in a popup window. Not necessarily recommended for primary authentication flows,
+     * but can be useful for step up authentication flows.
+     *
+     * @group Authorize Methods
+     *
+     * @remarks
+     * Utilizing external IDPs in a popup window may be susceptible to the IDP's `Cross-Origin-Opener-Policy`. Depending on their policy value,
+     * the loading the IDP in a popup window may cause the popup window to create a new browsing context group (BCG), seperate from the main
+     * browser window. The authentication flow will be unable to complete if this occurs. It's recommended to avoid using this method (and a popup
+     * in general) when utilizing external IDPs.
+     *
+     * {@link https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Cross-Origin-Opener-Policy | Cross-Origin-Opener-Policy}
+     * {@link https://developer.mozilla.org/en-US/docs/Glossary/Browsing_context | Browsing Context Group}
+     *
+     * @param flow - instance of {@link AuthorizationCodeFlow} to be used
+     *
+     * @param popupWindow - Optionally, a `Window` object (representing a popup window) can be provided.
+     * Providing a popup reference can be useful when control over the popup's attributes, like name and size, is required.
+     *
+     * In addition, the popup window will first load the base route (`/`) of the web application. Some browser implement heustistics which
+     * can block popups spawned from `async` processes. Loading the base route before navigating to `/authorize` helps reduce the likelihood
+     * the popup gets blocked. To override this behavior, provide a popup reference
+     *
+     * @returns {@link AuthorizationCodeFlow.PopupResult}
+     * On success, the return value will be `{ completed: true, token: {@link Platform.Token | Token}, context: {@link AuthorizationCodeFlow.Context} }`
+     * On failure, the return value will be `{ completed: false; reason: 'closed' | 'blocked' }`
+     *   - `'closed'` indicates the user manually closed the popup window
+     *   - `'blocked'` indicates the popup window was unable to be opened (presumably by a popup blocker or browser heustistics)
+     */
+    static PerformInPopup(flow: AuthorizationCodeFlow, popupWindow?: Window): Promise<AuthorizationCodeFlow.PopupResult>;
+}
+export declare namespace AuthorizationCodeFlow {
+    type RedirectValues = AuthorizationCodeFlowBase.RedirectValues;
+    type Result = AuthorizationCodeFlowBase.Result;
+    type Context = AuthorizationCodeFlowBase.Context;
+    type PopupResult = (Result & {
+        completed: true;
+    }) | {
+        completed: false;
+        reason: 'closed' | 'blocked';
+    };
+}
+export {};

package/dist/types/flows/SessionLogoutFlow.d.ts

@@ -0,0 +1,9 @@
+import { SessionLogoutFlow as SessionLogoutFlowBase } from '@okta/oauth2-flows';
+export declare class SessionLogoutFlow extends SessionLogoutFlowBase {
+    static PerformPostRedirect(logoutUrl: URL, options?: Partial<SessionLogoutFlow.PostRedirectOptions>): Promise<unknown>;
+}
+export declare namespace SessionLogoutFlow {
+    type PostRedirectOptions = {
+        parentElement: HTMLElement;
+    };
+}

package/dist/types/flows/TransactionStorage.d.ts

@@ -0,0 +1,9 @@
+import type { JsonRecord } from '@okta/auth-foundation/core';
+import type { TransactionStorage } from '@okta/oauth2-flows';
+export declare class BrowserTransactionStorage implements TransactionStorage {
+    #private;
+    private static version;
+    get(key: string): Promise<JsonRecord | undefined>;
+    add(key: string, item: JsonRecord): Promise<void>;
+    remove(key: string): Promise<void>;
+}

package/dist/types/flows/index.d.ts

@@ -0,0 +1,6 @@
+/**
+ * @packageDocumentation
+ * @internal
+ */
+export * from './AuthorizationCodeFlow.ts';
+export * from './SessionLogoutFlow.ts';

package/dist/types/index.d.ts

@@ -0,0 +1,18 @@
+/**
+ * @packageDocumentation
+ * @internal
+ */
+export * from './platform/defaults.ts';
+export * from '@okta/auth-foundation/core';
+export { Credential } from './Credential/Credential.ts';
+export { CredentialCoordinatorImpl } from './Credential/CredentialCoordinator.ts';
+export { BrowserTokenStorage } from './Credential/TokenStorage.ts';
+export { DefaultCredentialDataSource } from './Credential/CredentialDataSource.ts';
+export { FetchClient } from './FetchClient/index.ts';
+export * from './orchestrators/index.ts';
+export * from './flows/index.ts';
+export { DefaultSigningAuthority } from './platform/dpop/authority.ts';
+export { clearDPoPKeyPairs } from './platform/index.ts';
+export { PersistentCache } from './platform/dpop/nonceCache.ts';
+export { OAuth2Client } from './platform/OAuth2Client.ts';
+export * from './utils/isModernBrowser.ts';

package/dist/types/orchestrators/AuthorizationCodeFlowOrchestrator.d.ts

@@ -0,0 +1,55 @@
+/**
+ * @module
+ * @mergeModuleWith TokenOrchestrators
+ */
+import { Token, TokenOrchestrator, EventEmitter } from '@okta/auth-foundation/core';
+import { AuthorizationCodeFlow } from '../flows/index.ts';
+import { Credential } from '../Credential/index.ts';
+/**
+ * An implementation of {@link AuthFoundation!TokenOrchestrator | TokenOrchestrator} leveraging
+ * {@link https://developer.okta.com/docs/concepts/oauth-openid/#authorization-code-flow-with-pkce-flow | Authorization Code Flow }
+ * @public
+ */
+export declare class AuthorizationCodeFlowOrchestrator<E extends AuthorizationCodeFlowOrchestrator.Events = AuthorizationCodeFlowOrchestrator.Events> extends TokenOrchestrator<E> {
+    readonly flow: AuthorizationCodeFlow;
+    protected readonly emitter: EventEmitter<E>;
+    options: AuthorizationCodeFlowOrchestrator.Options;
+    constructor(flow: AuthorizationCodeFlow, init?: AuthorizationCodeFlowOrchestrator.Init);
+    /**
+     * Defines how to handle the authorization code redirect
+     *
+     * throws if an OAuth2 error is returned
+     */
+    resumeFlow(redirectUri?: string): Promise<Record<string, any>>;
+    /**
+     * Defines how to search storage for an existing token
+     */
+    selectCredential(options: TokenOrchestrator.AuthorizeParams): Promise<Credential | null>;
+    /**
+     * Defines how to store a newly acquired token
+     */
+    protected storeCredential(token: Token, tags?: string[] | undefined): Promise<Credential>;
+    /**
+     * Defines how to request a token from Authorization Server
+     */
+    protected requestToken(params: TokenOrchestrator.AuthorizeParams): Promise<Token | null>;
+    /**
+     * Determines if a valid token already exists in storage, otherwise requests a new token
+     */
+    getToken(params?: TokenOrchestrator.AuthorizeParams): Promise<Token | null>;
+}
+export declare namespace AuthorizationCodeFlowOrchestrator {
+    type Options = {
+        avoidPrompting: boolean;
+        emitBeforeRedirect: boolean;
+        getOriginalUri: () => string;
+        tags?: string[];
+    };
+    type Init = Partial<Options>;
+    type Events = {
+        'login_prompt_required': {
+            done: () => void;
+            params: TokenOrchestrator.AuthorizeParams;
+        };
+    } & TokenOrchestrator.Events;
+}

package/dist/types/orchestrators/HostOrchestrator/Host.d.ts

@@ -0,0 +1,21 @@
+import type { HostOrchestrator as HO } from './index.ts';
+import { Token, EventEmitter, type Emitter, TokenOrchestrator } from '@okta/auth-foundation/core';
+export declare abstract class HostOrchestrator<E extends HO.HostEvents = HO.HostEvents> implements Emitter<E> {
+    #private;
+    protected readonly name: string;
+    protected readonly emitter: EventEmitter<E>;
+    id: string;
+    constructor(name: string, options?: HO.HostOptions);
+    on(...args: Parameters<EventEmitter<E>['on']>): EventEmitter<E>;
+    off(...args: Parameters<EventEmitter<E>['off']>): EventEmitter<E>;
+    get isActive(): boolean;
+    protected shouldActive(): boolean;
+    activate(): void;
+    close(): void;
+    protected parseRequest<K extends keyof HO.RequestEvent>(request: HO.RequestEvent[K], replyFn: any): Promise<any>;
+    protected handleHostActivated({ hostId }: HO.ActivatedEvent): void;
+    protected handleTokenRequest(event: HO.TokenRequest): Promise<HO.TokenResponse>;
+    protected handleAuthorizeRequest(event: HO.AuthorizeRequest): Promise<HO.AuthorizeResponse>;
+    protected handleProfileRequest(event: HO.TokenRequest): Promise<HO.ProfileResponse>;
+    abstract findToken(params: TokenOrchestrator.AuthorizeParams): Promise<Token | null | HO.ErrorResponse>;
+}

package/dist/types/orchestrators/HostOrchestrator/OrchestrationBridge.d.ts

@@ -0,0 +1,10 @@
+import type { HostOrchestrator } from './index.ts';
+import { TaskBridge } from '@okta/auth-foundation/core';
+export declare class OrchestrationBridge extends TaskBridge<HostOrchestrator.RequestEvent, HostOrchestrator.ResponseEvent> {
+    static targetOrigin: string;
+    static allowedOrigins: string[];
+    private readonly options;
+    constructor(name: string, options?: HostOrchestrator.HostOptions & HostOrchestrator.SubAppOptions);
+    protected createBridgeChannel(): TaskBridge.BridgeChannel<HostOrchestrator.RequestEvent[keyof HostOrchestrator.RequestEvent]>;
+    protected createTaskChannel<K extends keyof HostOrchestrator.RequestEvent & keyof HostOrchestrator.ResponseEvent>(name: string): TaskBridge.TaskChannel<HostOrchestrator.ResponseEvent[K]>;
+}

package/dist/types/orchestrators/HostOrchestrator/SubApp.d.ts

@@ -0,0 +1,29 @@
+import type { HostOrchestrator as HO } from './index.ts';
+import { Token, TokenOrchestrator, EventEmitter } from '@okta/auth-foundation/core';
+export type SubAppBroadcastOptions = {
+    timeout: number;
+};
+export declare class SubAppOrchestrator<E extends HO.SubAppEvents = HO.SubAppEvents> extends TokenOrchestrator<E> {
+    #private;
+    readonly name: string;
+    readonly id: string;
+    protected readonly authParams: TokenOrchestrator.AuthorizeParams;
+    protected readonly emitter: EventEmitter<E>;
+    defaultTimeout: number;
+    constructor(name: string, options?: HO.SubAppOptions);
+    protected broadcast<K extends keyof HO.RequestEvent & keyof HO.ResponseEvent>(eventName: K, data: HO.RequestEvent[K]['data'], options?: SubAppBroadcastOptions): Promise<HO.ResponseEvent[K]>;
+    protected getTokenCacheKey(params: TokenOrchestrator.AuthorizeParams): Promise<string>;
+    protected ping(timeout: number): Promise<boolean>;
+    pingHost({ interval, attempts }?: {
+        interval?: number | undefined;
+        attempts?: number | undefined;
+    }): Promise<boolean>;
+    protected requestToken(params: TokenOrchestrator.AuthorizeParams): Promise<Token | null>;
+    /**
+     * Retrieves a valid {@link Platform.Token | Token} to be used within an application
+     */
+    getToken(params?: TokenOrchestrator.AuthorizeParams): Promise<Token | null>;
+    authorize(input: string | URL | Request, init?: RequestInit & {
+        dpopNonce?: string;
+    } & TokenOrchestrator.AuthorizeParams): Promise<Request>;
+}