@osdk/oauth 1.1.0-beta.8 → 1.1.0-beta.9

package/build/browser/publicOauth.test.js.map

@@ -1 +1 @@
-{"version":3,"file":"publicOauth.test.js","names":["afterAll","afterEach","beforeAll","beforeEach","describe","expect","it","vi","commonJs","createPublicOauthClient","hoistedMocks","hoisted","makeTokenAndSaveRefresh","fn","mock","importOriginal","original","default","ms","opts","common","args","result","readLocal","spyOn","readSession","DEFAULT_CUR_URL","URL","fetchFn","mockWindow","location","toString","assign","href","pathname","history","replaceState","mockLocalStorage","setItem","getItem","removeItem","mockSessionStorage","restoreAllMocks","mockRestore","clearAllMocks","mockReset","stubGlobal","unstubAllGlobals","BASE_CLIENT_ARGS","clientId","foundryUrl","redirectUrl","fullLoginUrl","setupWindowLocation","currentUrl","setupLocalState","initialLocalState","mocked","mockImplementation","client","clientArgs","setupClient","clientArgs_","refreshTokenMarker","useHistory","loginPage","postLoginPage","scopes","ctxPath","undefined","expectRedirectToMultipass","tokenPromise","rejects","toThrowError","Error","toHaveBeenCalledOnce","url","calls","origin","toEqual","Object","fromEntries","searchParams","entries","objectContaining","client_id","code_challenge","any","String","redirect_uri","response_type","code_challenge_method","scope","state","refresh_token","mockImplementationOnce","access_token","expires_at","Date","now","expires_in","resolves","toBeCalledTimes","each","name","should","redirectToLoginPage","toHaveBeenCalledWith","token_endpoint_auth_method","createAuthorizationServer","Function","anything","localStorage","sessionStorage","codeVerifier","oldUrl","initialState","ACCESS_TOKEN","Math","random","substring","keys","length","toBeUndefined","toBeCalledWith","JSON","stringify","window","toHaveBeenCalledTimes"],"sources":["publicOauth.test.js"],"sourcesContent":["/*\n * Copyright 2024 Palantir Technologies, Inc. All rights reserved.\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n/* eslint-disable @typescript-eslint/consistent-type-imports */\nimport { afterAll, afterEach, beforeAll, beforeEach, describe, expect, it, vi, } from \"vitest\";\nimport * as commonJs from \"./common.js\";\nimport { createPublicOauthClient } from \"./createPublicOauthClient.js\";\nconst hoistedMocks = vi.hoisted(() => {\n    return {\n        makeTokenAndSaveRefresh: vi.fn(),\n    };\n});\nvi.mock(\"delay\", async (importOriginal) => {\n    const original = await importOriginal();\n    return {\n        default: vi.fn((ms, opts) => {\n            // speed up the tests\n            return original.default(ms / 100, opts);\n        }),\n    };\n});\nvi.mock(\"./common.js\", async (importOriginal) => {\n    const original = await importOriginal();\n    return {\n        ...original,\n        common: vi.fn((...args) => {\n            const result = original.common(...args);\n            return {\n                ...result,\n                makeTokenAndSaveRefresh: hoistedMocks.makeTokenAndSaveRefresh,\n            };\n        }),\n        readLocal: vi.spyOn(original, \"readLocal\"),\n        readSession: vi.spyOn(original, \"readSession\"),\n        // vi.fn(original.readLocal),\n    };\n});\nvi.mock(\"oauth4webapi\");\ndescribe(createPublicOauthClient, () => {\n    const DEFAULT_CUR_URL = new URL(\"https://fauxurl\");\n    const fetchFn = vi.fn();\n    const mockWindow = {\n        location: {\n            toString: vi.fn(() => DEFAULT_CUR_URL),\n            assign: vi.fn(),\n            href: DEFAULT_CUR_URL.href,\n            pathname: DEFAULT_CUR_URL.pathname,\n        },\n        history: {\n            replaceState: vi.fn(),\n        },\n    };\n    const mockLocalStorage = {\n        setItem: vi.fn(),\n        getItem: vi.fn(),\n        removeItem: vi.fn(),\n    };\n    const mockSessionStorage = {\n        setItem: vi.fn(),\n        getItem: vi.fn(),\n        removeItem: vi.fn(),\n    };\n    beforeEach((context) => {\n        vi.restoreAllMocks();\n        fetchFn.mockRestore();\n    });\n    afterEach((context) => {\n        vi.clearAllMocks();\n        fetchFn.mockReset();\n    });\n    beforeAll(() => {\n        vi.stubGlobal(\"window\", mockWindow);\n        vi.stubGlobal(\"localStorage\", mockLocalStorage);\n        vi.stubGlobal(\"sessionStorage\", mockSessionStorage);\n    });\n    afterAll(() => {\n        vi.unstubAllGlobals();\n    });\n    const BASE_CLIENT_ARGS = {\n        clientId: \"this-would-be-client-id\",\n        foundryUrl: \"https://a.foundry.url.local\",\n        redirectUrl: \"https://my.redirect.url.local\",\n        fetchFn,\n    };\n    const fullLoginUrl = new URL(\"/loginPage\", DEFAULT_CUR_URL);\n    function setupWindowLocation(currentUrl) {\n        mockWindow.location.href = new URL(currentUrl).href;\n        mockWindow.location.pathname = new URL(currentUrl).pathname;\n    }\n    function setupLocalState(initialLocalState) {\n        vi.mocked(commonJs.readLocal).mockImplementation(() => initialLocalState);\n    }\n    let client;\n    let clientArgs;\n    function setupClient(clientArgs_) {\n        clientArgs = clientArgs_;\n        if (clientArgs.refreshTokenMarker) {\n            client = createPublicOauthClient(clientArgs.clientId, clientArgs.foundryUrl, clientArgs.redirectUrl, clientArgs);\n        }\n        else {\n            client = createPublicOauthClient(clientArgs.clientId, clientArgs.foundryUrl, clientArgs.redirectUrl, clientArgs.useHistory, clientArgs.loginPage, clientArgs.postLoginPage, clientArgs.scopes, clientArgs.fetchFn, clientArgs.ctxPath);\n        }\n    }\n    beforeEach((context) => {\n        // prevents mistakes like forgetting to initialize the client with an\n        // old value around\n        client = undefined;\n        clientArgs = undefined;\n    });\n    async function expectRedirectToMultipass(tokenPromise) {\n        // we assume window.location.assign will take you away therefore we\n        // also have to expect in this scenario that the thrown error happens\n        await expect(tokenPromise)\n            .rejects.toThrowError(new Error(\"Unable to redirect\"));\n        expect(mockWindow.location.assign).toHaveBeenCalledOnce();\n        const url = new URL(mockWindow.location.assign.mock.calls[0][0]);\n        expect(url.origin).toEqual(clientArgs.foundryUrl);\n        expect(url.pathname).toEqual(\"/multipass/api/oauth2/authorize\");\n        expect(Object.fromEntries(url.searchParams.entries())).toEqual(expect.objectContaining({\n            client_id: clientArgs.clientId,\n            code_challenge: expect.any(String),\n            redirect_uri: clientArgs.redirectUrl,\n            response_type: \"code\",\n            code_challenge_method: \"S256\",\n            scope: \"offline_access api:read-data api:write-data\",\n            state: expect.any(String),\n        }));\n    }\n    describe(\"refresh token marker\", () => {\n        beforeEach(() => {\n            setupWindowLocation(\"https://foundry.local\");\n        });\n        it(\"should not allow refresh if the refresh markers do not match\", async () => {\n            setupLocalState({\n                refresh_token: \"refreshToken\",\n                refreshTokenMarker: \"not-the-right-marker\",\n            });\n            setupClient({\n                ...BASE_CLIENT_ARGS,\n                refreshTokenMarker: \"marker\",\n            });\n            await expectRedirectToMultipass(client());\n        });\n        it(\"should try to refresh if refresh tokens do match\", async () => {\n            setupLocalState({\n                refresh_token: \"refreshToken\",\n                refreshTokenMarker: \"marker\",\n            });\n            setupClient({\n                ...BASE_CLIENT_ARGS,\n                refreshTokenMarker: \"marker\",\n            });\n            hoistedMocks.makeTokenAndSaveRefresh.mockImplementationOnce(() => ({\n                access_token: \"some token\",\n                expires_at: Date.now(),\n                expires_in: 10000,\n            }));\n            const tokenPromise = client();\n            await expect(tokenPromise).resolves.toEqual(\"some token\");\n            expect(hoistedMocks.makeTokenAndSaveRefresh).toBeCalledTimes(1);\n        });\n    });\n    describe.each([\n        {\n            name: \"Basic Usage\",\n            currentUrl: DEFAULT_CUR_URL,\n            clientArgs: {\n                ...BASE_CLIENT_ARGS,\n            },\n            should: {\n                redirectToLoginPage: false,\n            },\n        },\n        {\n            name: \"Base w/ full loginPage and curUrl is root\",\n            currentUrl: DEFAULT_CUR_URL,\n            clientArgs: {\n                ...BASE_CLIENT_ARGS,\n                loginPage: fullLoginUrl.toString(),\n            },\n            should: {\n                redirectToLoginPage: true,\n            },\n        },\n        {\n            name: \"Base w/ full loginPage and curUrl is login page\",\n            currentUrl: fullLoginUrl,\n            clientArgs: {\n                ...BASE_CLIENT_ARGS,\n                loginPage: fullLoginUrl.toString(),\n            },\n            should: {\n                redirectToLoginPage: false,\n            },\n        },\n        {\n            name: \"Base w/ short loginPage and curUrl is root\",\n            currentUrl: DEFAULT_CUR_URL,\n            clientArgs: {\n                ...BASE_CLIENT_ARGS,\n                loginPage: \"/loginPage\",\n            },\n            should: {\n                redirectToLoginPage: true,\n            },\n        },\n        {\n            name: \"Base w/ short loginPage and curUrl is loginPage\",\n            currentUrl: new URL(\"/loginPage\", DEFAULT_CUR_URL),\n            clientArgs: {\n                ...BASE_CLIENT_ARGS,\n                loginPage: \"/loginPage\",\n            },\n            should: {\n                redirectToLoginPage: false,\n            },\n        },\n    ])(\"$name\", ({ clientArgs, currentUrl, should }) => {\n        beforeEach(() => {\n            setupClient(clientArgs);\n            setupWindowLocation(currentUrl.toString());\n        });\n        it(\"calls common with expected values\", () => {\n            expect(vi.mocked(commonJs.common)).toHaveBeenCalledWith(expect.objectContaining({\n                client_id: clientArgs.clientId,\n                token_endpoint_auth_method: \"none\",\n            }), commonJs.createAuthorizationServer(clientArgs.ctxPath ?? \"/multipass\", clientArgs.foundryUrl), expect.any(Function), expect.anything(), expect.any(Function), undefined);\n        });\n        describe.each([\n            {\n                localStorage: {\n                    refresh_token: \"a-refresh-token\",\n                },\n                sessionStorage: {},\n            },\n            {\n                localStorage: {},\n                sessionStorage: {\n                    codeVerifier: \"hi\",\n                    state: \"mom\",\n                    oldUrl: \"https://someoldurl.local\",\n                },\n            },\n            { localStorage: {}, sessionStorage: {} },\n        ])(\"Initial Local State: %s\", (initialState) => {\n            const ACCESS_TOKEN = (Math.random() + 1).toString(36).substring(7);\n            beforeEach(() => {\n                vi.mocked(commonJs.readLocal).mockImplementation(() => initialState.localStorage);\n                vi.mocked(commonJs.readSession).mockImplementation(() => initialState.sessionStorage);\n                hoistedMocks.makeTokenAndSaveRefresh.mockImplementation(() => ({\n                    access_token: ACCESS_TOKEN,\n                    expires_at: Date.now(),\n                    expires_in: 10000,\n                }));\n            });\n            if (Object.keys(initialState.localStorage).length === 0\n                && Object.keys(initialState.sessionStorage).length === 0) {\n                if (should.redirectToLoginPage) {\n                    it(\"redirects to login page\", async () => {\n                        const tokenPromise = client();\n                        expect(vi.mocked(commonJs.common)).toBeCalledTimes(1);\n                        if (should.redirectToLoginPage) {\n                            // expect save local\n                            await expect(tokenPromise).resolves.toBeUndefined();\n                            expect(mockSessionStorage.setItem).toBeCalledWith(`@osdk/oauth : refresh : ${clientArgs.clientId}`, JSON.stringify({ oldUrl: window.location.toString() }));\n                            expect(mockWindow.history.replaceState).toHaveBeenCalledWith({}, \"\", clientArgs.loginPage);\n                            return;\n                        }\n                    });\n                }\n                else {\n                    it(\"redirects to multipass\", async () => {\n                        const tokenPromise = client();\n                        expect(vi.mocked(commonJs.common)).toBeCalledTimes(1);\n                        if (should.redirectToLoginPage) {\n                            // expect save local\n                            await expect(tokenPromise).resolves.toBeUndefined();\n                            expect(mockSessionStorage.setItem).toBeCalledWith(`@osdk/oauth : refresh : ${clientArgs.clientId}`, JSON.stringify({ oldUrl: window.location.toString() }));\n                            expect(mockWindow.history.replaceState).toHaveBeenCalledWith({}, \"\", clientArgs.loginPage);\n                            return;\n                        }\n                        await expectRedirectToMultipass(tokenPromise);\n                    });\n                }\n            }\n            if (initialState.sessionStorage.codeVerifier) {\n                it(\"tries to auth with return results\", async () => {\n                    await expect(client()).resolves.toEqual(ACCESS_TOKEN);\n                    expect(hoistedMocks.makeTokenAndSaveRefresh).toHaveBeenCalledTimes(1);\n                    expect(hoistedMocks.makeTokenAndSaveRefresh).toHaveBeenCalledWith(undefined, // this is only because we didn't mock out the internals\n                    \"signIn\");\n                    expect(mockWindow.history.replaceState).toHaveBeenCalledTimes(1);\n                    expect(mockWindow.history.replaceState).toBeCalledWith(expect.anything(), expect.anything(), initialState.sessionStorage.oldUrl);\n                });\n            }\n            if (initialState.localStorage.refresh_token) {\n                it(\"refreshes\", async () => {\n                    await expect(client()).resolves.toEqual(ACCESS_TOKEN);\n                    expect(hoistedMocks.makeTokenAndSaveRefresh).toHaveBeenCalledTimes(1);\n                    expect(hoistedMocks.makeTokenAndSaveRefresh).toHaveBeenCalledWith(undefined, // this is only because we didn't mock out the internals\n                    \"refresh\");\n                });\n            }\n        });\n    });\n});\n"],"mappings":"AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,SAASA,QAAQ,EAAEC,SAAS,EAAEC,SAAS,EAAEC,UAAU,EAAEC,QAAQ,EAAEC,MAAM,EAAEC,EAAE,EAAEC,EAAE,QAAS,QAAQ;AAC9F,OAAO,KAAKC,QAAQ,MAAM,aAAa;AACvC,SAASC,uBAAuB,QAAQ,8BAA8B;AACtE,MAAMC,YAAY,GAAGH,EAAE,CAACI,OAAO,CAAC,MAAM;EAClC,OAAO;IACHC,uBAAuB,EAAEL,EAAE,CAACM,EAAE,CAAC;EACnC,CAAC;AACL,CAAC,CAAC;AACFN,EAAE,CAACO,IAAI,CAAC,OAAO,EAAE,MAAOC,cAAc,IAAK;EACvC,MAAMC,QAAQ,GAAG,MAAMD,cAAc,CAAC,CAAC;EACvC,OAAO;IACHE,OAAO,EAAEV,EAAE,CAACM,EAAE,CAAC,CAACK,EAAE,EAAEC,IAAI,KAAK;MACzB;MACA,OAAOH,QAAQ,CAACC,OAAO,CAACC,EAAE,GAAG,GAAG,EAAEC,IAAI,CAAC;IAC3C,CAAC;EACL,CAAC;AACL,CAAC,CAAC;AACFZ,EAAE,CAACO,IAAI,CAAC,aAAa,EAAE,MAAOC,cAAc,IAAK;EAC7C,MAAMC,QAAQ,GAAG,MAAMD,cAAc,CAAC,CAAC;EACvC,OAAO;IACH,GAAGC,QAAQ;IACXI,MAAM,EAAEb,EAAE,CAACM,EAAE,CAAC,CAAC,GAAGQ,IAAI,KAAK;MACvB,MAAMC,MAAM,GAAGN,QAAQ,CAACI,MAAM,CAAC,GAAGC,IAAI,CAAC;MACvC,OAAO;QACH,GAAGC,MAAM;QACTV,uBAAuB,EAAEF,YAAY,CAACE;MAC1C,CAAC;IACL,CAAC,CAAC;IACFW,SAAS,EAAEhB,EAAE,CAACiB,KAAK,CAACR,QAAQ,EAAE,WAAW,CAAC;IAC1CS,WAAW,EAAElB,EAAE,CAACiB,KAAK,CAACR,QAAQ,EAAE,aAAa;IAC7C;EACJ,CAAC;AACL,CAAC,CAAC;AACFT,EAAE,CAACO,IAAI,CAAC,cAAc,CAAC;AACvBV,QAAQ,CAACK,uBAAuB,EAAE,MAAM;EACpC,MAAMiB,eAAe,GAAG,IAAIC,GAAG,CAAC,iBAAiB,CAAC;EAClD,MAAMC,OAAO,GAAGrB,EAAE,CAACM,EAAE,CAAC,CAAC;EACvB,MAAMgB,UAAU,GAAG;IACfC,QAAQ,EAAE;MACNC,QAAQ,EAAExB,EAAE,CAACM,EAAE,CAAC,MAAMa,eAAe,CAAC;MACtCM,MAAM,EAAEzB,EAAE,CAACM,EAAE,CAAC,CAAC;MACfoB,IAAI,EAAEP,eAAe,CAACO,IAAI;MAC1BC,QAAQ,EAAER,eAAe,CAACQ;IAC9B,CAAC;IACDC,OAAO,EAAE;MACLC,YAAY,EAAE7B,EAAE,CAACM,EAAE,CAAC;IACxB;EACJ,CAAC;EACD,MAAMwB,gBAAgB,GAAG;IACrBC,OAAO,EAAE/B,EAAE,CAACM,EAAE,CAAC,CAAC;IAChB0B,OAAO,EAAEhC,EAAE,CAACM,EAAE,CAAC,CAAC;IAChB2B,UAAU,EAAEjC,EAAE,CAACM,EAAE,CAAC;EACtB,CAAC;EACD,MAAM4B,kBAAkB,GAAG;IACvBH,OAAO,EAAE/B,EAAE,CAACM,EAAE,CAAC,CAAC;IAChB0B,OAAO,EAAEhC,EAAE,CAACM,EAAE,CAAC,CAAC;IAChB2B,UAAU,EAAEjC,EAAE,CAACM,EAAE,CAAC;EACtB,CAAC;EACDV,UAAU,CAAC,MAAa;IACpBI,EAAE,CAACmC,eAAe,CAAC,CAAC;IACpBd,OAAO,CAACe,WAAW,CAAC,CAAC;EACzB,CAAC,CAAC;EACF1C,SAAS,CAAC,MAAa;IACnBM,EAAE,CAACqC,aAAa,CAAC,CAAC;IAClBhB,OAAO,CAACiB,SAAS,CAAC,CAAC;EACvB,CAAC,CAAC;EACF3C,SAAS,CAAC,MAAM;IACZK,EAAE,CAACuC,UAAU,CAAC,QAAQ,EAAEjB,UAAU,CAAC;IACnCtB,EAAE,CAACuC,UAAU,CAAC,cAAc,EAAET,gBAAgB,CAAC;IAC/C9B,EAAE,CAACuC,UAAU,CAAC,gBAAgB,EAAEL,kBAAkB,CAAC;EACvD,CAAC,CAAC;EACFzC,QAAQ,CAAC,MAAM;IACXO,EAAE,CAACwC,gBAAgB,CAAC,CAAC;EACzB,CAAC,CAAC;EACF,MAAMC,gBAAgB,GAAG;IACrBC,QAAQ,EAAE,yBAAyB;IACnCC,UAAU,EAAE,6BAA6B;IACzCC,WAAW,EAAE,+BAA+B;IAC5CvB;EACJ,CAAC;EACD,MAAMwB,YAAY,GAAG,IAAIzB,GAAG,CAAC,YAAY,EAAED,eAAe,CAAC;EAC3D,SAAS2B,mBAAmBA,CAACC,UAAU,EAAE;IACrCzB,UAAU,CAACC,QAAQ,CAACG,IAAI,GAAG,IAAIN,GAAG,CAAC2B,UAAU,CAAC,CAACrB,IAAI;IACnDJ,UAAU,CAACC,QAAQ,CAACI,QAAQ,GAAG,IAAIP,GAAG,CAAC2B,UAAU,CAAC,CAACpB,QAAQ;EAC/D;EACA,SAASqB,eAAeA,CAACC,iBAAiB,EAAE;IACxCjD,EAAE,CAACkD,MAAM,CAACjD,QAAQ,CAACe,SAAS,CAAC,CAACmC,kBAAkB,CAAC,MAAMF,iBAAiB,CAAC;EAC7E;EACA,IAAIG,MAAM;EACV,IAAIC,UAAU;EACd,SAASC,WAAWA,CAACC,WAAW,EAAE;IAC9BF,UAAU,GAAGE,WAAW;IACxB,IAAIF,UAAU,CAACG,kBAAkB,EAAE;MAC/BJ,MAAM,GAAGlD,uBAAuB,CAACmD,UAAU,CAACX,QAAQ,EAAEW,UAAU,CAACV,UAAU,EAAEU,UAAU,CAACT,WAAW,EAAES,UAAU,CAAC;IACpH,CAAC,MACI;MACDD,MAAM,GAAGlD,uBAAuB,CAACmD,UAAU,CAACX,QAAQ,EAAEW,UAAU,CAACV,UAAU,EAAEU,UAAU,CAACT,WAAW,EAAES,UAAU,CAACI,UAAU,EAAEJ,UAAU,CAACK,SAAS,EAAEL,UAAU,CAACM,aAAa,EAAEN,UAAU,CAACO,MAAM,EAAEP,UAAU,CAAChC,OAAO,EAAEgC,UAAU,CAACQ,OAAO,CAAC;IAC1O;EACJ;EACAjE,UAAU,CAAC,MAAa;IACpB;IACA;IACAwD,MAAM,GAAGU,SAAS;IAClBT,UAAU,GAAGS,SAAS;EAC1B,CAAC,CAAC;EACF,eAAeC,yBAAyBA,CAACC,YAAY,EAAE;IACnD;IACA;IACA,MAAMlE,MAAM,CAACkE,YAAY,CAAC,CACrBC,OAAO,CAACC,YAAY,CAAC,IAAIC,KAAK,CAAC,oBAAoB,CAAC,CAAC;IAC1DrE,MAAM,CAACwB,UAAU,CAACC,QAAQ,CAACE,MAAM,CAAC,CAAC2C,oBAAoB,CAAC,CAAC;IACzD,MAAMC,GAAG,GAAG,IAAIjD,GAAG,CAACE,UAAU,CAACC,QAAQ,CAACE,MAAM,CAAClB,IAAI,CAAC+D,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAChExE,MAAM,CAACuE,GAAG,CAACE,MAAM,CAAC,CAACC,OAAO,CAACnB,UAAU,CAACV,UAAU,CAAC;IACjD7C,MAAM,CAACuE,GAAG,CAAC1C,QAAQ,CAAC,CAAC6C,OAAO,CAAC,iCAAiC,CAAC;IAC/D1E,MAAM,CAAC2E,MAAM,CAACC,WAAW,CAACL,GAAG,CAACM,YAAY,CAACC,OAAO,CAAC,CAAC,CAAC,CAAC,CAACJ,OAAO,CAAC1E,MAAM,CAAC+E,gBAAgB,CAAC;MACnFC,SAAS,EAAEzB,UAAU,CAACX,QAAQ;MAC9BqC,cAAc,EAAEjF,MAAM,CAACkF,GAAG,CAACC,MAAM,CAAC;MAClCC,YAAY,EAAE7B,UAAU,CAACT,WAAW;MACpCuC,aAAa,EAAE,MAAM;MACrBC,qBAAqB,EAAE,MAAM;MAC7BC,KAAK,EAAE,6CAA6C;MACpDC,KAAK,EAAExF,MAAM,CAACkF,GAAG,CAACC,MAAM;IAC5B,CAAC,CAAC,CAAC;EACP;EACApF,QAAQ,CAAC,sBAAsB,EAAE,MAAM;IACnCD,UAAU,CAAC,MAAM;MACbkD,mBAAmB,CAAC,uBAAuB,CAAC;IAChD,CAAC,CAAC;IACF/C,EAAE,CAAC,8DAA8D,EAAE,YAAY;MAC3EiD,eAAe,CAAC;QACZuC,aAAa,EAAE,cAAc;QAC7B/B,kBAAkB,EAAE;MACxB,CAAC,CAAC;MACFF,WAAW,CAAC;QACR,GAAGb,gBAAgB;QACnBe,kBAAkB,EAAE;MACxB,CAAC,CAAC;MACF,MAAMO,yBAAyB,CAACX,MAAM,CAAC,CAAC,CAAC;IAC7C,CAAC,CAAC;IACFrD,EAAE,CAAC,kDAAkD,EAAE,YAAY;MAC/DiD,eAAe,CAAC;QACZuC,aAAa,EAAE,cAAc;QAC7B/B,kBAAkB,EAAE;MACxB,CAAC,CAAC;MACFF,WAAW,CAAC;QACR,GAAGb,gBAAgB;QACnBe,kBAAkB,EAAE;MACxB,CAAC,CAAC;MACFrD,YAAY,CAACE,uBAAuB,CAACmF,sBAAsB,CAAC,OAAO;QAC/DC,YAAY,EAAE,YAAY;QAC1BC,UAAU,EAAEC,IAAI,CAACC,GAAG,CAAC,CAAC;QACtBC,UAAU,EAAE;MAChB,CAAC,CAAC,CAAC;MACH,MAAM7B,YAAY,GAAGZ,MAAM,CAAC,CAAC;MAC7B,MAAMtD,MAAM,CAACkE,YAAY,CAAC,CAAC8B,QAAQ,CAACtB,OAAO,CAAC,YAAY,CAAC;MACzD1E,MAAM,CAACK,YAAY,CAACE,uBAAuB,CAAC,CAAC0F,eAAe,CAAC,CAAC,CAAC;IACnE,CAAC,CAAC;EACN,CAAC,CAAC;EACFlG,QAAQ,CAACmG,IAAI,CAAC,CACV;IACIC,IAAI,EAAE,aAAa;IACnBlD,UAAU,EAAE5B,eAAe;IAC3BkC,UAAU,EAAE;MACR,GAAGZ;IACP,CAAC;IACDyD,MAAM,EAAE;MACJC,mBAAmB,EAAE;IACzB;EACJ,CAAC,EACD;IACIF,IAAI,EAAE,2CAA2C;IACjDlD,UAAU,EAAE5B,eAAe;IAC3BkC,UAAU,EAAE;MACR,GAAGZ,gBAAgB;MACnBiB,SAAS,EAAEb,YAAY,CAACrB,QAAQ,CAAC;IACrC,CAAC;IACD0E,MAAM,EAAE;MACJC,mBAAmB,EAAE;IACzB;EACJ,CAAC,EACD;IACIF,IAAI,EAAE,iDAAiD;IACvDlD,UAAU,EAAEF,YAAY;IACxBQ,UAAU,EAAE;MACR,GAAGZ,gBAAgB;MACnBiB,SAAS,EAAEb,YAAY,CAACrB,QAAQ,CAAC;IACrC,CAAC;IACD0E,MAAM,EAAE;MACJC,mBAAmB,EAAE;IACzB;EACJ,CAAC,EACD;IACIF,IAAI,EAAE,4CAA4C;IAClDlD,UAAU,EAAE5B,eAAe;IAC3BkC,UAAU,EAAE;MACR,GAAGZ,gBAAgB;MACnBiB,SAAS,EAAE;IACf,CAAC;IACDwC,MAAM,EAAE;MACJC,mBAAmB,EAAE;IACzB;EACJ,CAAC,EACD;IACIF,IAAI,EAAE,iDAAiD;IACvDlD,UAAU,EAAE,IAAI3B,GAAG,CAAC,YAAY,EAAED,eAAe,CAAC;IAClDkC,UAAU,EAAE;MACR,GAAGZ,gBAAgB;MACnBiB,SAAS,EAAE;IACf,CAAC;IACDwC,MAAM,EAAE;MACJC,mBAAmB,EAAE;IACzB;EACJ,CAAC,CACJ,CAAC,CAAC,OAAO,EAAE,CAAC;IAAE9C,UAAU;IAAEN,UAAU;IAAEmD;EAAO,CAAC,KAAK;IAChDtG,UAAU,CAAC,MAAM;MACb0D,WAAW,CAACD,UAAU,CAAC;MACvBP,mBAAmB,CAACC,UAAU,CAACvB,QAAQ,CAAC,CAAC,CAAC;IAC9C,CAAC,CAAC;IACFzB,EAAE,CAAC,mCAAmC,EAAE,MAAM;MAC1CD,MAAM,CAACE,EAAE,CAACkD,MAAM,CAACjD,QAAQ,CAACY,MAAM,CAAC,CAAC,CAACuF,oBAAoB,CAACtG,MAAM,CAAC+E,gBAAgB,CAAC;QAC5EC,SAAS,EAAEzB,UAAU,CAACX,QAAQ;QAC9B2D,0BAA0B,EAAE;MAChC,CAAC,CAAC,EAAEpG,QAAQ,CAACqG,yBAAyB,CAACjD,UAAU,CAACQ,OAAO,IAAI,YAAY,EAAER,UAAU,CAACV,UAAU,CAAC,EAAE7C,MAAM,CAACkF,GAAG,CAACuB,QAAQ,CAAC,EAAEzG,MAAM,CAAC0G,QAAQ,CAAC,CAAC,EAAE1G,MAAM,CAACkF,GAAG,CAACuB,QAAQ,CAAC,EAAEzC,SAAS,CAAC;IAChL,CAAC,CAAC;IACFjE,QAAQ,CAACmG,IAAI,CAAC,CACV;MACIS,YAAY,EAAE;QACVlB,aAAa,EAAE;MACnB,CAAC;MACDmB,cAAc,EAAE,CAAC;IACrB,CAAC,EACD;MACID,YAAY,EAAE,CAAC,CAAC;MAChBC,cAAc,EAAE;QACZC,YAAY,EAAE,IAAI;QAClBrB,KAAK,EAAE,KAAK;QACZsB,MAAM,EAAE;MACZ;IACJ,CAAC,EACD;MAAEH,YAAY,EAAE,CAAC,CAAC;MAAEC,cAAc,EAAE,CAAC;IAAE,CAAC,CAC3C,CAAC,CAAC,yBAAyB,EAAGG,YAAY,IAAK;MAC5C,MAAMC,YAAY,GAAG,CAACC,IAAI,CAACC,MAAM,CAAC,CAAC,GAAG,CAAC,EAAExF,QAAQ,CAAC,EAAE,CAAC,CAACyF,SAAS,CAAC,CAAC,CAAC;MAClErH,UAAU,CAAC,MAAM;QACbI,EAAE,CAACkD,MAAM,CAACjD,QAAQ,CAACe,SAAS,CAAC,CAACmC,kBAAkB,CAAC,MAAM0D,YAAY,CAACJ,YAAY,CAAC;QACjFzG,EAAE,CAACkD,MAAM,CAACjD,QAAQ,CAACiB,WAAW,CAAC,CAACiC,kBAAkB,CAAC,MAAM0D,YAAY,CAACH,cAAc,CAAC;QACrFvG,YAAY,CAACE,uBAAuB,CAAC8C,kBAAkB,CAAC,OAAO;UAC3DsC,YAAY,EAAEqB,YAAY;UAC1BpB,UAAU,EAAEC,IAAI,CAACC,GAAG,CAAC,CAAC;UACtBC,UAAU,EAAE;QAChB,CAAC,CAAC,CAAC;MACP,CAAC,CAAC;MACF,IAAIpB,MAAM,CAACyC,IAAI,CAACL,YAAY,CAACJ,YAAY,CAAC,CAACU,MAAM,KAAK,CAAC,IAChD1C,MAAM,CAACyC,IAAI,CAACL,YAAY,CAACH,cAAc,CAAC,CAACS,MAAM,KAAK,CAAC,EAAE;QAC1D,IAAIjB,MAAM,CAACC,mBAAmB,EAAE;UAC5BpG,EAAE,CAAC,yBAAyB,EAAE,YAAY;YACtC,MAAMiE,YAAY,GAAGZ,MAAM,CAAC,CAAC;YAC7BtD,MAAM,CAACE,EAAE,CAACkD,MAAM,CAACjD,QAAQ,CAACY,MAAM,CAAC,CAAC,CAACkF,eAAe,CAAC,CAAC,CAAC;YACrD,IAAIG,MAAM,CAACC,mBAAmB,EAAE;cAC5B;cACA,MAAMrG,MAAM,CAACkE,YAAY,CAAC,CAAC8B,QAAQ,CAACsB,aAAa,CAAC,CAAC;cACnDtH,MAAM,CAACoC,kBAAkB,CAACH,OAAO,CAAC,CAACsF,cAAc,CAAC,2BAA2BhE,UAAU,CAACX,QAAQ,EAAE,EAAE4E,IAAI,CAACC,SAAS,CAAC;gBAAEX,MAAM,EAAEY,MAAM,CAACjG,QAAQ,CAACC,QAAQ,CAAC;cAAE,CAAC,CAAC,CAAC;cAC3J1B,MAAM,CAACwB,UAAU,CAACM,OAAO,CAACC,YAAY,CAAC,CAACuE,oBAAoB,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE/C,UAAU,CAACK,SAAS,CAAC;YAE9F;UACJ,CAAC,CAAC;QACN,CAAC,MACI;UACD3D,EAAE,CAAC,wBAAwB,EAAE,YAAY;YACrC,MAAMiE,YAAY,GAAGZ,MAAM,CAAC,CAAC;YAC7BtD,MAAM,CAACE,EAAE,CAACkD,MAAM,CAACjD,QAAQ,CAACY,MAAM,CAAC,CAAC,CAACkF,eAAe,CAAC,CAAC,CAAC;YACrD,IAAIG,MAAM,CAACC,mBAAmB,EAAE;cAC5B;cACA,MAAMrG,MAAM,CAACkE,YAAY,CAAC,CAAC8B,QAAQ,CAACsB,aAAa,CAAC,CAAC;cACnDtH,MAAM,CAACoC,kBAAkB,CAACH,OAAO,CAAC,CAACsF,cAAc,CAAC,2BAA2BhE,UAAU,CAACX,QAAQ,EAAE,EAAE4E,IAAI,CAACC,SAAS,CAAC;gBAAEX,MAAM,EAAEY,MAAM,CAACjG,QAAQ,CAACC,QAAQ,CAAC;cAAE,CAAC,CAAC,CAAC;cAC3J1B,MAAM,CAACwB,UAAU,CAACM,OAAO,CAACC,YAAY,CAAC,CAACuE,oBAAoB,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE/C,UAAU,CAACK,SAAS,CAAC;cAC1F;YACJ;YACA,MAAMK,yBAAyB,CAACC,YAAY,CAAC;UACjD,CAAC,CAAC;QACN;MACJ;MACA,IAAI6C,YAAY,CAACH,cAAc,CAACC,YAAY,EAAE;QAC1C5G,EAAE,CAAC,mCAAmC,EAAE,YAAY;UAChD,MAAMD,MAAM,CAACsD,MAAM,CAAC,CAAC,CAAC,CAAC0C,QAAQ,CAACtB,OAAO,CAACsC,YAAY,CAAC;UACrDhH,MAAM,CAACK,YAAY,CAACE,uBAAuB,CAAC,CAACoH,qBAAqB,CAAC,CAAC,CAAC;UACrE3H,MAAM,CAACK,YAAY,CAACE,uBAAuB,CAAC,CAAC+F,oBAAoB,CAACtC,SAAS;UAAE;UAC7E,QAAQ,CAAC;UACThE,MAAM,CAACwB,UAAU,CAACM,OAAO,CAACC,YAAY,CAAC,CAAC4F,qBAAqB,CAAC,CAAC,CAAC;UAChE3H,MAAM,CAACwB,UAAU,CAACM,OAAO,CAACC,YAAY,CAAC,CAACwF,cAAc,CAACvH,MAAM,CAAC0G,QAAQ,CAAC,CAAC,EAAE1G,MAAM,CAAC0G,QAAQ,CAAC,CAAC,EAAEK,YAAY,CAACH,cAAc,CAACE,MAAM,CAAC;QACpI,CAAC,CAAC;MACN;MACA,IAAIC,YAAY,CAACJ,YAAY,CAAClB,aAAa,EAAE;QACzCxF,EAAE,CAAC,WAAW,EAAE,YAAY;UACxB,MAAMD,MAAM,CAACsD,MAAM,CAAC,CAAC,CAAC,CAAC0C,QAAQ,CAACtB,OAAO,CAACsC,YAAY,CAAC;UACrDhH,MAAM,CAACK,YAAY,CAACE,uBAAuB,CAAC,CAACoH,qBAAqB,CAAC,CAAC,CAAC;UACrE3H,MAAM,CAACK,YAAY,CAACE,uBAAuB,CAAC,CAAC+F,oBAAoB,CAACtC,SAAS;UAAE;UAC7E,SAAS,CAAC;QACd,CAAC,CAAC;MACN;IACJ,CAAC,CAAC;EACN,CAAC,CAAC;AACN,CAAC,CAAC","ignoreList":[]}
+{"version":3,"file":"publicOauth.test.js","names":["afterAll","afterEach","beforeAll","beforeEach","describe","expect","it","vi","commonJs","createPublicOauthClient","hoistedMocks","hoisted","makeTokenAndSaveRefresh","fn","mock","importOriginal","original","default","ms","opts","common","args","result","readLocal","spyOn","readSession","DEFAULT_CUR_URL","URL","fetchFn","mockWindow","location","toString","assign","href","pathname","history","replaceState","mockLocalStorage","setItem","getItem","removeItem","mockSessionStorage","restoreAllMocks","mockRestore","clearAllMocks","mockReset","stubGlobal","unstubAllGlobals","BASE_CLIENT_ARGS","clientId","foundryUrl","redirectUrl","fullLoginUrl","setupWindowLocation","currentUrl","setupLocalState","initialLocalState","mocked","mockImplementation","client","clientArgs","setupClient","clientArgs_","refreshTokenMarker","useHistory","loginPage","postLoginPage","scopes","ctxPath","undefined","expectRedirectToMultipass","tokenPromise","rejects","toThrowError","Error","toHaveBeenCalledOnce","url","calls","origin","toEqual","Object","fromEntries","searchParams","entries","objectContaining","client_id","code_challenge","any","String","redirect_uri","response_type","code_challenge_method","scope","state","refresh_token","mockImplementationOnce","access_token","expires_at","Date","now","expires_in","resolves","toBeCalledTimes","each","name","should","redirectToLoginPage","toHaveBeenCalledWith","token_endpoint_auth_method","createAuthorizationServer","Function","anything","localStorage","sessionStorage","codeVerifier","oldUrl","initialState","ACCESS_TOKEN","Math","random","substring","keys","length","toBeUndefined","toBeCalledWith","JSON","stringify","window","toHaveBeenCalledTimes"],"sources":["publicOauth.test.ts"],"sourcesContent":["/*\n * Copyright 2024 Palantir Technologies, Inc. All rights reserved.\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\n/* eslint-disable @typescript-eslint/consistent-type-imports */\nimport {\n  afterAll,\n  afterEach,\n  beforeAll,\n  beforeEach,\n  describe,\n  expect,\n  it,\n  vi,\n} from \"vitest\";\n\nimport * as commonJs from \"./common.js\";\nimport { LocalStorageState, SessionStorageState } from \"./common.js\";\nimport { createPublicOauthClient } from \"./createPublicOauthClient.js\";\nimport { PublicOauthClient } from \"./PublicOauthClient.js\";\n\nconst hoistedMocks = vi.hoisted(() => {\n  return {\n    makeTokenAndSaveRefresh: vi.fn(),\n  };\n});\n\nvi.mock(\"delay\", async (importOriginal) => {\n  const original = await importOriginal<typeof import(\"delay\")>();\n  return {\n    default: vi.fn<typeof original.default>((ms, opts) => {\n      // speed up the tests\n      return original.default(ms / 100, opts);\n    }),\n  };\n});\n\nvi.mock(\"./common.js\", async (importOriginal) => {\n  const original = await importOriginal<typeof import(\"./common.js\")>();\n  return {\n    ...original,\n    common: vi.fn<typeof commonJs.common>((...args) => {\n      const result = original.common(...args);\n      return {\n        ...result,\n        makeTokenAndSaveRefresh: hoistedMocks.makeTokenAndSaveRefresh,\n      };\n    }),\n    readLocal: vi.spyOn(original, \"readLocal\"),\n    readSession: vi.spyOn(original, \"readSession\"),\n    // vi.fn(original.readLocal),\n  };\n});\n\nvi.mock(\"oauth4webapi\");\n\ninterface BaseClientArgs {\n  clientId: string;\n  foundryUrl: string;\n  redirectUrl: string;\n  fetchFn?: typeof globalThis.fetch;\n}\n\ninterface ClientArgs extends BaseClientArgs {\n  useHistory?: boolean;\n  loginPage?: string;\n  postLoginPage?: string;\n  scopes?: string[];\n  ctxPath?: string;\n  refreshTokenMarker?: string;\n}\n\ndescribe(createPublicOauthClient, () => {\n  const DEFAULT_CUR_URL = new URL(\"https://fauxurl\");\n  const fetchFn = vi.fn<typeof fetch>();\n\n  const mockWindow = {\n    location: {\n      toString: vi.fn(() => DEFAULT_CUR_URL),\n      assign: vi.fn(),\n      href: DEFAULT_CUR_URL.href,\n      pathname: DEFAULT_CUR_URL.pathname,\n    },\n    history: {\n      replaceState: vi.fn<typeof window.history.replaceState>(),\n    },\n  };\n\n  const mockLocalStorage = {\n    setItem: vi.fn(),\n    getItem: vi.fn(),\n    removeItem: vi.fn(),\n  };\n\n  const mockSessionStorage = {\n    setItem: vi.fn(),\n    getItem: vi.fn(),\n    removeItem: vi.fn(),\n  };\n\n  beforeEach((context) => {\n    vi.restoreAllMocks();\n    fetchFn.mockRestore();\n  });\n\n  afterEach((context) => {\n    vi.clearAllMocks();\n    fetchFn.mockReset();\n  });\n\n  beforeAll(() => {\n    vi.stubGlobal(\"window\", mockWindow);\n    vi.stubGlobal(\"localStorage\", mockLocalStorage);\n    vi.stubGlobal(\"sessionStorage\", mockSessionStorage);\n  });\n\n  afterAll(() => {\n    vi.unstubAllGlobals();\n  });\n\n  const BASE_CLIENT_ARGS: BaseClientArgs = {\n    clientId: \"this-would-be-client-id\",\n    foundryUrl: \"https://a.foundry.url.local\",\n    redirectUrl: \"https://my.redirect.url.local\",\n    fetchFn,\n  };\n\n  const fullLoginUrl = new URL(\"/loginPage\", DEFAULT_CUR_URL);\n\n  function setupWindowLocation(currentUrl: string) {\n    mockWindow.location.href = new URL(currentUrl).href;\n    mockWindow.location.pathname = new URL(currentUrl).pathname;\n  }\n\n  function setupLocalState(initialLocalState: LocalStorageState) {\n    vi.mocked(commonJs.readLocal).mockImplementation(() => initialLocalState);\n  }\n\n  let client: PublicOauthClient;\n  let clientArgs: ClientArgs;\n  function setupClient(clientArgs_: ClientArgs) {\n    clientArgs = clientArgs_;\n    if (clientArgs.refreshTokenMarker) {\n      client = createPublicOauthClient(\n        clientArgs.clientId,\n        clientArgs.foundryUrl,\n        clientArgs.redirectUrl,\n        clientArgs,\n      );\n    } else {\n      client = createPublicOauthClient(\n        clientArgs.clientId,\n        clientArgs.foundryUrl,\n        clientArgs.redirectUrl,\n        clientArgs.useHistory,\n        clientArgs.loginPage,\n        clientArgs.postLoginPage,\n        clientArgs.scopes,\n        clientArgs.fetchFn,\n        clientArgs.ctxPath,\n      );\n    }\n  }\n  beforeEach((context) => {\n    // prevents mistakes like forgetting to initialize the client with an\n    // old value around\n    client = undefined!;\n    clientArgs = undefined!;\n  });\n\n  async function expectRedirectToMultipass(\n    tokenPromise: Promise<string>,\n  ) {\n    // we assume window.location.assign will take you away therefore we\n    // also have to expect in this scenario that the thrown error happens\n    await expect(tokenPromise)\n      .rejects.toThrowError(new Error(\"Unable to redirect\"));\n\n    expect(mockWindow.location.assign).toHaveBeenCalledOnce();\n\n    const url = new URL(\n      mockWindow.location.assign.mock.calls[0][0],\n    );\n    expect(url.origin).toEqual(clientArgs.foundryUrl);\n    expect(url.pathname).toEqual(\"/multipass/api/oauth2/authorize\");\n    expect(Object.fromEntries(url.searchParams.entries())).toEqual(\n      expect.objectContaining({\n        client_id: clientArgs.clientId,\n        code_challenge: expect.any(String),\n        redirect_uri: clientArgs.redirectUrl,\n        response_type: \"code\",\n        code_challenge_method: \"S256\",\n        scope: \"offline_access api:read-data api:write-data\",\n        state: expect.any(String),\n      }),\n    );\n  }\n\n  describe(\"refresh token marker\", () => {\n    beforeEach(() => {\n      setupWindowLocation(\"https://foundry.local\");\n    });\n\n    it(\"should not allow refresh if the refresh markers do not match\", async () => {\n      setupLocalState({\n        refresh_token: \"refreshToken\",\n        refreshTokenMarker: \"not-the-right-marker\",\n      });\n\n      setupClient({\n        ...BASE_CLIENT_ARGS,\n        refreshTokenMarker: \"marker\",\n      });\n\n      await expectRedirectToMultipass(\n        client(),\n      );\n    });\n\n    it(\"should try to refresh if refresh tokens do match\", async () => {\n      setupLocalState({\n        refresh_token: \"refreshToken\",\n        refreshTokenMarker: \"marker\",\n      });\n\n      setupClient({\n        ...BASE_CLIENT_ARGS,\n        refreshTokenMarker: \"marker\",\n      });\n\n      hoistedMocks.makeTokenAndSaveRefresh.mockImplementationOnce(\n        () => ({\n          access_token: \"some token\",\n          expires_at: Date.now(),\n          expires_in: 10000,\n        }),\n      );\n\n      const tokenPromise = client();\n\n      await expect(tokenPromise).resolves.toEqual(\"some token\");\n\n      expect(hoistedMocks.makeTokenAndSaveRefresh).toBeCalledTimes(1);\n    });\n  });\n\n  describe.each<{\n    name: string;\n    currentUrl: URL;\n    clientArgs: BaseClientArgs & {\n      useHistory?: boolean;\n      loginPage?: string;\n      postLoginPage?: string;\n      scopes?: string[];\n      ctxPath?: string;\n    };\n    should: {\n      redirectToLoginPage: boolean;\n    };\n  }>([\n    {\n      name: \"Basic Usage\",\n      currentUrl: DEFAULT_CUR_URL,\n      clientArgs: {\n        ...BASE_CLIENT_ARGS,\n      },\n      should: {\n        redirectToLoginPage: false,\n      },\n    },\n    {\n      name: \"Base w/ full loginPage and curUrl is root\",\n      currentUrl: DEFAULT_CUR_URL,\n      clientArgs: {\n        ...BASE_CLIENT_ARGS,\n        loginPage: fullLoginUrl.toString(),\n      },\n      should: {\n        redirectToLoginPage: true,\n      },\n    },\n    {\n      name: \"Base w/ full loginPage and curUrl is login page\",\n      currentUrl: fullLoginUrl,\n      clientArgs: {\n        ...BASE_CLIENT_ARGS,\n        loginPage: fullLoginUrl.toString(),\n      },\n      should: {\n        redirectToLoginPage: false,\n      },\n    },\n    {\n      name: \"Base w/ short loginPage and curUrl is root\",\n      currentUrl: DEFAULT_CUR_URL,\n      clientArgs: {\n        ...BASE_CLIENT_ARGS,\n        loginPage: \"/loginPage\",\n      },\n      should: {\n        redirectToLoginPage: true,\n      },\n    },\n    {\n      name: \"Base w/ short loginPage and curUrl is loginPage\",\n      currentUrl: new URL(\"/loginPage\", DEFAULT_CUR_URL),\n      clientArgs: {\n        ...BASE_CLIENT_ARGS,\n        loginPage: \"/loginPage\",\n      },\n      should: {\n        redirectToLoginPage: false,\n      },\n    },\n  ])(\"$name\", ({ clientArgs, currentUrl, should }) => {\n    beforeEach(() => {\n      setupClient(clientArgs);\n      setupWindowLocation(currentUrl.toString());\n    });\n\n    it(\"calls common with expected values\", () => {\n      expect(vi.mocked(commonJs.common)).toHaveBeenCalledWith(\n        expect.objectContaining({\n          client_id: clientArgs.clientId,\n          token_endpoint_auth_method: \"none\",\n        }),\n        commonJs.createAuthorizationServer(\n          clientArgs.ctxPath ?? \"/multipass\",\n          clientArgs.foundryUrl,\n        ),\n        expect.any(Function),\n        expect.anything(),\n        expect.any(Function),\n        undefined,\n      );\n    });\n\n    describe.each<\n      { localStorage: LocalStorageState; sessionStorage: SessionStorageState }\n    >([\n      {\n        localStorage: {\n          refresh_token: \"a-refresh-token\",\n        },\n        sessionStorage: {},\n      },\n      {\n        localStorage: {},\n        sessionStorage: {\n          codeVerifier: \"hi\",\n          state: \"mom\",\n          oldUrl: \"https://someoldurl.local\",\n        },\n      },\n      { localStorage: {}, sessionStorage: {} },\n    ])(\"Initial Local State: %s\", (initialState) => {\n      const ACCESS_TOKEN = (Math.random() + 1).toString(36).substring(7);\n\n      beforeEach(() => {\n        vi.mocked(commonJs.readLocal).mockImplementation(() =>\n          initialState.localStorage\n        );\n\n        vi.mocked(commonJs.readSession).mockImplementation(() =>\n          initialState.sessionStorage\n        );\n\n        hoistedMocks.makeTokenAndSaveRefresh.mockImplementation(\n          () => ({\n            access_token: ACCESS_TOKEN,\n            expires_at: Date.now(),\n            expires_in: 10000,\n          }),\n        );\n      });\n\n      if (\n        Object.keys(initialState.localStorage).length === 0\n        && Object.keys(initialState.sessionStorage).length === 0\n      ) {\n        if (should.redirectToLoginPage) {\n          it(\"redirects to login page\", async () => {\n            const tokenPromise = client!();\n            expect(vi.mocked(commonJs.common)).toBeCalledTimes(1);\n\n            if (should.redirectToLoginPage) {\n              // expect save local\n              await expect(tokenPromise).resolves.toBeUndefined();\n              expect(mockSessionStorage.setItem).toBeCalledWith(\n                `@osdk/oauth : refresh : ${clientArgs.clientId}`,\n                JSON.stringify({ oldUrl: window.location.toString() }),\n              );\n              expect(mockWindow.history.replaceState).toHaveBeenCalledWith(\n                {},\n                \"\",\n                clientArgs.loginPage,\n              );\n              return;\n            }\n          });\n        } else {\n          it(\"redirects to multipass\", async () => {\n            const tokenPromise = client!();\n            expect(vi.mocked(commonJs.common)).toBeCalledTimes(1);\n\n            if (should.redirectToLoginPage) {\n              // expect save local\n              await expect(tokenPromise).resolves.toBeUndefined();\n              expect(mockSessionStorage.setItem).toBeCalledWith(\n                `@osdk/oauth : refresh : ${clientArgs.clientId}`,\n                JSON.stringify({ oldUrl: window.location.toString() }),\n              );\n\n              expect(mockWindow.history.replaceState).toHaveBeenCalledWith(\n                {},\n                \"\",\n                clientArgs.loginPage,\n              );\n              return;\n            }\n\n            await expectRedirectToMultipass(\n              tokenPromise,\n            );\n          });\n        }\n      }\n\n      if (initialState.sessionStorage.codeVerifier) {\n        it(\"tries to auth with return results\", async () => {\n          await expect(client()).resolves.toEqual(ACCESS_TOKEN);\n          expect(hoistedMocks.makeTokenAndSaveRefresh).toHaveBeenCalledTimes(\n            1,\n          );\n          expect(hoistedMocks.makeTokenAndSaveRefresh).toHaveBeenCalledWith(\n            undefined, // this is only because we didn't mock out the internals\n            \"signIn\",\n          );\n\n          expect(mockWindow.history.replaceState).toHaveBeenCalledTimes(1);\n          expect(mockWindow.history.replaceState).toBeCalledWith(\n            expect.anything(),\n            expect.anything(),\n            initialState.sessionStorage.oldUrl,\n          );\n        });\n      }\n\n      if (initialState.localStorage.refresh_token) {\n        it(\"refreshes\", async () => {\n          await expect(client()).resolves.toEqual(ACCESS_TOKEN);\n\n          expect(hoistedMocks.makeTokenAndSaveRefresh).toHaveBeenCalledTimes(\n            1,\n          );\n          expect(hoistedMocks.makeTokenAndSaveRefresh).toHaveBeenCalledWith(\n            undefined, // this is only because we didn't mock out the internals\n            \"refresh\",\n          );\n        });\n      }\n    });\n  });\n});\n"],"mappings":"AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAEA;AACA,SACEA,QAAQ,EACRC,SAAS,EACTC,SAAS,EACTC,UAAU,EACVC,QAAQ,EACRC,MAAM,EACNC,EAAE,EACFC,EAAE,QACG,QAAQ;AAEf,OAAO,KAAKC,QAAQ,MAAM,aAAa;AAEvC,SAASC,uBAAuB,QAAQ,8BAA8B;AAGtE,MAAMC,YAAY,GAAGH,EAAE,CAACI,OAAO,CAAC,MAAM;EACpC,OAAO;IACLC,uBAAuB,EAAEL,EAAE,CAACM,EAAE,CAAC;EACjC,CAAC;AACH,CAAC,CAAC;AAEFN,EAAE,CAACO,IAAI,CAAC,OAAO,EAAE,MAAOC,cAAc,IAAK;EACzC,MAAMC,QAAQ,GAAG,MAAMD,cAAc,CAAyB,CAAC;EAC/D,OAAO;IACLE,OAAO,EAAEV,EAAE,CAACM,EAAE,CAA0B,CAACK,EAAE,EAAEC,IAAI,KAAK;MACpD;MACA,OAAOH,QAAQ,CAACC,OAAO,CAACC,EAAE,GAAG,GAAG,EAAEC,IAAI,CAAC;IACzC,CAAC;EACH,CAAC;AACH,CAAC,CAAC;AAEFZ,EAAE,CAACO,IAAI,CAAC,aAAa,EAAE,MAAOC,cAAc,IAAK;EAC/C,MAAMC,QAAQ,GAAG,MAAMD,cAAc,CAA+B,CAAC;EACrE,OAAO;IACL,GAAGC,QAAQ;IACXI,MAAM,EAAEb,EAAE,CAACM,EAAE,CAAyB,CAAC,GAAGQ,IAAI,KAAK;MACjD,MAAMC,MAAM,GAAGN,QAAQ,CAACI,MAAM,CAAC,GAAGC,IAAI,CAAC;MACvC,OAAO;QACL,GAAGC,MAAM;QACTV,uBAAuB,EAAEF,YAAY,CAACE;MACxC,CAAC;IACH,CAAC,CAAC;IACFW,SAAS,EAAEhB,EAAE,CAACiB,KAAK,CAACR,QAAQ,EAAE,WAAW,CAAC;IAC1CS,WAAW,EAAElB,EAAE,CAACiB,KAAK,CAACR,QAAQ,EAAE,aAAa;IAC7C;EACF,CAAC;AACH,CAAC,CAAC;AAEFT,EAAE,CAACO,IAAI,CAAC,cAAc,CAAC;AAkBvBV,QAAQ,CAACK,uBAAuB,EAAE,MAAM;EACtC,MAAMiB,eAAe,GAAG,IAAIC,GAAG,CAAC,iBAAiB,CAAC;EAClD,MAAMC,OAAO,GAAGrB,EAAE,CAACM,EAAE,CAAe,CAAC;EAErC,MAAMgB,UAAU,GAAG;IACjBC,QAAQ,EAAE;MACRC,QAAQ,EAAExB,EAAE,CAACM,EAAE,CAAC,MAAMa,eAAe,CAAC;MACtCM,MAAM,EAAEzB,EAAE,CAACM,EAAE,CAAC,CAAC;MACfoB,IAAI,EAAEP,eAAe,CAACO,IAAI;MAC1BC,QAAQ,EAAER,eAAe,CAACQ;IAC5B,CAAC;IACDC,OAAO,EAAE;MACPC,YAAY,EAAE7B,EAAE,CAACM,EAAE,CAAqC;IAC1D;EACF,CAAC;EAED,MAAMwB,gBAAgB,GAAG;IACvBC,OAAO,EAAE/B,EAAE,CAACM,EAAE,CAAC,CAAC;IAChB0B,OAAO,EAAEhC,EAAE,CAACM,EAAE,CAAC,CAAC;IAChB2B,UAAU,EAAEjC,EAAE,CAACM,EAAE,CAAC;EACpB,CAAC;EAED,MAAM4B,kBAAkB,GAAG;IACzBH,OAAO,EAAE/B,EAAE,CAACM,EAAE,CAAC,CAAC;IAChB0B,OAAO,EAAEhC,EAAE,CAACM,EAAE,CAAC,CAAC;IAChB2B,UAAU,EAAEjC,EAAE,CAACM,EAAE,CAAC;EACpB,CAAC;EAEDV,UAAU,CAAC,MAAa;IACtBI,EAAE,CAACmC,eAAe,CAAC,CAAC;IACpBd,OAAO,CAACe,WAAW,CAAC,CAAC;EACvB,CAAC,CAAC;EAEF1C,SAAS,CAAC,MAAa;IACrBM,EAAE,CAACqC,aAAa,CAAC,CAAC;IAClBhB,OAAO,CAACiB,SAAS,CAAC,CAAC;EACrB,CAAC,CAAC;EAEF3C,SAAS,CAAC,MAAM;IACdK,EAAE,CAACuC,UAAU,CAAC,QAAQ,EAAEjB,UAAU,CAAC;IACnCtB,EAAE,CAACuC,UAAU,CAAC,cAAc,EAAET,gBAAgB,CAAC;IAC/C9B,EAAE,CAACuC,UAAU,CAAC,gBAAgB,EAAEL,kBAAkB,CAAC;EACrD,CAAC,CAAC;EAEFzC,QAAQ,CAAC,MAAM;IACbO,EAAE,CAACwC,gBAAgB,CAAC,CAAC;EACvB,CAAC,CAAC;EAEF,MAAMC,gBAAgC,GAAG;IACvCC,QAAQ,EAAE,yBAAyB;IACnCC,UAAU,EAAE,6BAA6B;IACzCC,WAAW,EAAE,+BAA+B;IAC5CvB;EACF,CAAC;EAED,MAAMwB,YAAY,GAAG,IAAIzB,GAAG,CAAC,YAAY,EAAED,eAAe,CAAC;EAE3D,SAAS2B,mBAAmBA,CAACC,UAAkB,EAAE;IAC/CzB,UAAU,CAACC,QAAQ,CAACG,IAAI,GAAG,IAAIN,GAAG,CAAC2B,UAAU,CAAC,CAACrB,IAAI;IACnDJ,UAAU,CAACC,QAAQ,CAACI,QAAQ,GAAG,IAAIP,GAAG,CAAC2B,UAAU,CAAC,CAACpB,QAAQ;EAC7D;EAEA,SAASqB,eAAeA,CAACC,iBAAoC,EAAE;IAC7DjD,EAAE,CAACkD,MAAM,CAACjD,QAAQ,CAACe,SAAS,CAAC,CAACmC,kBAAkB,CAAC,MAAMF,iBAAiB,CAAC;EAC3E;EAEA,IAAIG,MAAyB;EAC7B,IAAIC,UAAsB;EAC1B,SAASC,WAAWA,CAACC,WAAuB,EAAE;IAC5CF,UAAU,GAAGE,WAAW;IACxB,IAAIF,UAAU,CAACG,kBAAkB,EAAE;MACjCJ,MAAM,GAAGlD,uBAAuB,CAC9BmD,UAAU,CAACX,QAAQ,EACnBW,UAAU,CAACV,UAAU,EACrBU,UAAU,CAACT,WAAW,EACtBS,UACF,CAAC;IACH,CAAC,MAAM;MACLD,MAAM,GAAGlD,uBAAuB,CAC9BmD,UAAU,CAACX,QAAQ,EACnBW,UAAU,CAACV,UAAU,EACrBU,UAAU,CAACT,WAAW,EACtBS,UAAU,CAACI,UAAU,EACrBJ,UAAU,CAACK,SAAS,EACpBL,UAAU,CAACM,aAAa,EACxBN,UAAU,CAACO,MAAM,EACjBP,UAAU,CAAChC,OAAO,EAClBgC,UAAU,CAACQ,OACb,CAAC;IACH;EACF;EACAjE,UAAU,CAAC,MAAa;IACtB;IACA;IACAwD,MAAM,GAAGU,SAAU;IACnBT,UAAU,GAAGS,SAAU;EACzB,CAAC,CAAC;EAEF,eAAeC,yBAAyBA,CACtCC,YAA6B,EAC7B;IACA;IACA;IACA,MAAMlE,MAAM,CAACkE,YAAY,CAAC,CACvBC,OAAO,CAACC,YAAY,CAAC,IAAIC,KAAK,CAAC,oBAAoB,CAAC,CAAC;IAExDrE,MAAM,CAACwB,UAAU,CAACC,QAAQ,CAACE,MAAM,CAAC,CAAC2C,oBAAoB,CAAC,CAAC;IAEzD,MAAMC,GAAG,GAAG,IAAIjD,GAAG,CACjBE,UAAU,CAACC,QAAQ,CAACE,MAAM,CAAClB,IAAI,CAAC+D,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAC5C,CAAC;IACDxE,MAAM,CAACuE,GAAG,CAACE,MAAM,CAAC,CAACC,OAAO,CAACnB,UAAU,CAACV,UAAU,CAAC;IACjD7C,MAAM,CAACuE,GAAG,CAAC1C,QAAQ,CAAC,CAAC6C,OAAO,CAAC,iCAAiC,CAAC;IAC/D1E,MAAM,CAAC2E,MAAM,CAACC,WAAW,CAACL,GAAG,CAACM,YAAY,CAACC,OAAO,CAAC,CAAC,CAAC,CAAC,CAACJ,OAAO,CAC5D1E,MAAM,CAAC+E,gBAAgB,CAAC;MACtBC,SAAS,EAAEzB,UAAU,CAACX,QAAQ;MAC9BqC,cAAc,EAAEjF,MAAM,CAACkF,GAAG,CAACC,MAAM,CAAC;MAClCC,YAAY,EAAE7B,UAAU,CAACT,WAAW;MACpCuC,aAAa,EAAE,MAAM;MACrBC,qBAAqB,EAAE,MAAM;MAC7BC,KAAK,EAAE,6CAA6C;MACpDC,KAAK,EAAExF,MAAM,CAACkF,GAAG,CAACC,MAAM;IAC1B,CAAC,CACH,CAAC;EACH;EAEApF,QAAQ,CAAC,sBAAsB,EAAE,MAAM;IACrCD,UAAU,CAAC,MAAM;MACfkD,mBAAmB,CAAC,uBAAuB,CAAC;IAC9C,CAAC,CAAC;IAEF/C,EAAE,CAAC,8DAA8D,EAAE,YAAY;MAC7EiD,eAAe,CAAC;QACduC,aAAa,EAAE,cAAc;QAC7B/B,kBAAkB,EAAE;MACtB,CAAC,CAAC;MAEFF,WAAW,CAAC;QACV,GAAGb,gBAAgB;QACnBe,kBAAkB,EAAE;MACtB,CAAC,CAAC;MAEF,MAAMO,yBAAyB,CAC7BX,MAAM,CAAC,CACT,CAAC;IACH,CAAC,CAAC;IAEFrD,EAAE,CAAC,kDAAkD,EAAE,YAAY;MACjEiD,eAAe,CAAC;QACduC,aAAa,EAAE,cAAc;QAC7B/B,kBAAkB,EAAE;MACtB,CAAC,CAAC;MAEFF,WAAW,CAAC;QACV,GAAGb,gBAAgB;QACnBe,kBAAkB,EAAE;MACtB,CAAC,CAAC;MAEFrD,YAAY,CAACE,uBAAuB,CAACmF,sBAAsB,CACzD,OAAO;QACLC,YAAY,EAAE,YAAY;QAC1BC,UAAU,EAAEC,IAAI,CAACC,GAAG,CAAC,CAAC;QACtBC,UAAU,EAAE;MACd,CAAC,CACH,CAAC;MAED,MAAM7B,YAAY,GAAGZ,MAAM,CAAC,CAAC;MAE7B,MAAMtD,MAAM,CAACkE,YAAY,CAAC,CAAC8B,QAAQ,CAACtB,OAAO,CAAC,YAAY,CAAC;MAEzD1E,MAAM,CAACK,YAAY,CAACE,uBAAuB,CAAC,CAAC0F,eAAe,CAAC,CAAC,CAAC;IACjE,CAAC,CAAC;EACJ,CAAC,CAAC;EAEFlG,QAAQ,CAACmG,IAAI,CAaV,CACD;IACEC,IAAI,EAAE,aAAa;IACnBlD,UAAU,EAAE5B,eAAe;IAC3BkC,UAAU,EAAE;MACV,GAAGZ;IACL,CAAC;IACDyD,MAAM,EAAE;MACNC,mBAAmB,EAAE;IACvB;EACF,CAAC,EACD;IACEF,IAAI,EAAE,2CAA2C;IACjDlD,UAAU,EAAE5B,eAAe;IAC3BkC,UAAU,EAAE;MACV,GAAGZ,gBAAgB;MACnBiB,SAAS,EAAEb,YAAY,CAACrB,QAAQ,CAAC;IACnC,CAAC;IACD0E,MAAM,EAAE;MACNC,mBAAmB,EAAE;IACvB;EACF,CAAC,EACD;IACEF,IAAI,EAAE,iDAAiD;IACvDlD,UAAU,EAAEF,YAAY;IACxBQ,UAAU,EAAE;MACV,GAAGZ,gBAAgB;MACnBiB,SAAS,EAAEb,YAAY,CAACrB,QAAQ,CAAC;IACnC,CAAC;IACD0E,MAAM,EAAE;MACNC,mBAAmB,EAAE;IACvB;EACF,CAAC,EACD;IACEF,IAAI,EAAE,4CAA4C;IAClDlD,UAAU,EAAE5B,eAAe;IAC3BkC,UAAU,EAAE;MACV,GAAGZ,gBAAgB;MACnBiB,SAAS,EAAE;IACb,CAAC;IACDwC,MAAM,EAAE;MACNC,mBAAmB,EAAE;IACvB;EACF,CAAC,EACD;IACEF,IAAI,EAAE,iDAAiD;IACvDlD,UAAU,EAAE,IAAI3B,GAAG,CAAC,YAAY,EAAED,eAAe,CAAC;IAClDkC,UAAU,EAAE;MACV,GAAGZ,gBAAgB;MACnBiB,SAAS,EAAE;IACb,CAAC;IACDwC,MAAM,EAAE;MACNC,mBAAmB,EAAE;IACvB;EACF,CAAC,CACF,CAAC,CAAC,OAAO,EAAE,CAAC;IAAE9C,UAAU;IAAEN,UAAU;IAAEmD;EAAO,CAAC,KAAK;IAClDtG,UAAU,CAAC,MAAM;MACf0D,WAAW,CAACD,UAAU,CAAC;MACvBP,mBAAmB,CAACC,UAAU,CAACvB,QAAQ,CAAC,CAAC,CAAC;IAC5C,CAAC,CAAC;IAEFzB,EAAE,CAAC,mCAAmC,EAAE,MAAM;MAC5CD,MAAM,CAACE,EAAE,CAACkD,MAAM,CAACjD,QAAQ,CAACY,MAAM,CAAC,CAAC,CAACuF,oBAAoB,CACrDtG,MAAM,CAAC+E,gBAAgB,CAAC;QACtBC,SAAS,EAAEzB,UAAU,CAACX,QAAQ;QAC9B2D,0BAA0B,EAAE;MAC9B,CAAC,CAAC,EACFpG,QAAQ,CAACqG,yBAAyB,CAChCjD,UAAU,CAACQ,OAAO,IAAI,YAAY,EAClCR,UAAU,CAACV,UACb,CAAC,EACD7C,MAAM,CAACkF,GAAG,CAACuB,QAAQ,CAAC,EACpBzG,MAAM,CAAC0G,QAAQ,CAAC,CAAC,EACjB1G,MAAM,CAACkF,GAAG,CAACuB,QAAQ,CAAC,EACpBzC,SACF,CAAC;IACH,CAAC,CAAC;IAEFjE,QAAQ,CAACmG,IAAI,CAEX,CACA;MACES,YAAY,EAAE;QACZlB,aAAa,EAAE;MACjB,CAAC;MACDmB,cAAc,EAAE,CAAC;IACnB,CAAC,EACD;MACED,YAAY,EAAE,CAAC,CAAC;MAChBC,cAAc,EAAE;QACdC,YAAY,EAAE,IAAI;QAClBrB,KAAK,EAAE,KAAK;QACZsB,MAAM,EAAE;MACV;IACF,CAAC,EACD;MAAEH,YAAY,EAAE,CAAC,CAAC;MAAEC,cAAc,EAAE,CAAC;IAAE,CAAC,CACzC,CAAC,CAAC,yBAAyB,EAAGG,YAAY,IAAK;MAC9C,MAAMC,YAAY,GAAG,CAACC,IAAI,CAACC,MAAM,CAAC,CAAC,GAAG,CAAC,EAAExF,QAAQ,CAAC,EAAE,CAAC,CAACyF,SAAS,CAAC,CAAC,CAAC;MAElErH,UAAU,CAAC,MAAM;QACfI,EAAE,CAACkD,MAAM,CAACjD,QAAQ,CAACe,SAAS,CAAC,CAACmC,kBAAkB,CAAC,MAC/C0D,YAAY,CAACJ,YACf,CAAC;QAEDzG,EAAE,CAACkD,MAAM,CAACjD,QAAQ,CAACiB,WAAW,CAAC,CAACiC,kBAAkB,CAAC,MACjD0D,YAAY,CAACH,cACf,CAAC;QAEDvG,YAAY,CAACE,uBAAuB,CAAC8C,kBAAkB,CACrD,OAAO;UACLsC,YAAY,EAAEqB,YAAY;UAC1BpB,UAAU,EAAEC,IAAI,CAACC,GAAG,CAAC,CAAC;UACtBC,UAAU,EAAE;QACd,CAAC,CACH,CAAC;MACH,CAAC,CAAC;MAEF,IACEpB,MAAM,CAACyC,IAAI,CAACL,YAAY,CAACJ,YAAY,CAAC,CAACU,MAAM,KAAK,CAAC,IAChD1C,MAAM,CAACyC,IAAI,CAACL,YAAY,CAACH,cAAc,CAAC,CAACS,MAAM,KAAK,CAAC,EACxD;QACA,IAAIjB,MAAM,CAACC,mBAAmB,EAAE;UAC9BpG,EAAE,CAAC,yBAAyB,EAAE,YAAY;YACxC,MAAMiE,YAAY,GAAGZ,MAAM,CAAE,CAAC;YAC9BtD,MAAM,CAACE,EAAE,CAACkD,MAAM,CAACjD,QAAQ,CAACY,MAAM,CAAC,CAAC,CAACkF,eAAe,CAAC,CAAC,CAAC;YAErD,IAAIG,MAAM,CAACC,mBAAmB,EAAE;cAC9B;cACA,MAAMrG,MAAM,CAACkE,YAAY,CAAC,CAAC8B,QAAQ,CAACsB,aAAa,CAAC,CAAC;cACnDtH,MAAM,CAACoC,kBAAkB,CAACH,OAAO,CAAC,CAACsF,cAAc,CAC/C,2BAA2BhE,UAAU,CAACX,QAAQ,EAAE,EAChD4E,IAAI,CAACC,SAAS,CAAC;gBAAEX,MAAM,EAAEY,MAAM,CAACjG,QAAQ,CAACC,QAAQ,CAAC;cAAE,CAAC,CACvD,CAAC;cACD1B,MAAM,CAACwB,UAAU,CAACM,OAAO,CAACC,YAAY,CAAC,CAACuE,oBAAoB,CAC1D,CAAC,CAAC,EACF,EAAE,EACF/C,UAAU,CAACK,SACb,CAAC;YAEH;UACF,CAAC,CAAC;QACJ,CAAC,MAAM;UACL3D,EAAE,CAAC,wBAAwB,EAAE,YAAY;YACvC,MAAMiE,YAAY,GAAGZ,MAAM,CAAE,CAAC;YAC9BtD,MAAM,CAACE,EAAE,CAACkD,MAAM,CAACjD,QAAQ,CAACY,MAAM,CAAC,CAAC,CAACkF,eAAe,CAAC,CAAC,CAAC;YAErD,IAAIG,MAAM,CAACC,mBAAmB,EAAE;cAC9B;cACA,MAAMrG,MAAM,CAACkE,YAAY,CAAC,CAAC8B,QAAQ,CAACsB,aAAa,CAAC,CAAC;cACnDtH,MAAM,CAACoC,kBAAkB,CAACH,OAAO,CAAC,CAACsF,cAAc,CAC/C,2BAA2BhE,UAAU,CAACX,QAAQ,EAAE,EAChD4E,IAAI,CAACC,SAAS,CAAC;gBAAEX,MAAM,EAAEY,MAAM,CAACjG,QAAQ,CAACC,QAAQ,CAAC;cAAE,CAAC,CACvD,CAAC;cAED1B,MAAM,CAACwB,UAAU,CAACM,OAAO,CAACC,YAAY,CAAC,CAACuE,oBAAoB,CAC1D,CAAC,CAAC,EACF,EAAE,EACF/C,UAAU,CAACK,SACb,CAAC;cACD;YACF;YAEA,MAAMK,yBAAyB,CAC7BC,YACF,CAAC;UACH,CAAC,CAAC;QACJ;MACF;MAEA,IAAI6C,YAAY,CAACH,cAAc,CAACC,YAAY,EAAE;QAC5C5G,EAAE,CAAC,mCAAmC,EAAE,YAAY;UAClD,MAAMD,MAAM,CAACsD,MAAM,CAAC,CAAC,CAAC,CAAC0C,QAAQ,CAACtB,OAAO,CAACsC,YAAY,CAAC;UACrDhH,MAAM,CAACK,YAAY,CAACE,uBAAuB,CAAC,CAACoH,qBAAqB,CAChE,CACF,CAAC;UACD3H,MAAM,CAACK,YAAY,CAACE,uBAAuB,CAAC,CAAC+F,oBAAoB,CAC/DtC,SAAS;UAAE;UACX,QACF,CAAC;UAEDhE,MAAM,CAACwB,UAAU,CAACM,OAAO,CAACC,YAAY,CAAC,CAAC4F,qBAAqB,CAAC,CAAC,CAAC;UAChE3H,MAAM,CAACwB,UAAU,CAACM,OAAO,CAACC,YAAY,CAAC,CAACwF,cAAc,CACpDvH,MAAM,CAAC0G,QAAQ,CAAC,CAAC,EACjB1G,MAAM,CAAC0G,QAAQ,CAAC,CAAC,EACjBK,YAAY,CAACH,cAAc,CAACE,MAC9B,CAAC;QACH,CAAC,CAAC;MACJ;MAEA,IAAIC,YAAY,CAACJ,YAAY,CAAClB,aAAa,EAAE;QAC3CxF,EAAE,CAAC,WAAW,EAAE,YAAY;UAC1B,MAAMD,MAAM,CAACsD,MAAM,CAAC,CAAC,CAAC,CAAC0C,QAAQ,CAACtB,OAAO,CAACsC,YAAY,CAAC;UAErDhH,MAAM,CAACK,YAAY,CAACE,uBAAuB,CAAC,CAACoH,qBAAqB,CAChE,CACF,CAAC;UACD3H,MAAM,CAACK,YAAY,CAACE,uBAAuB,CAAC,CAAC+F,oBAAoB,CAC/DtC,SAAS;UAAE;UACX,SACF,CAAC;QACH,CAAC,CAAC;MACJ;IACF,CAAC,CAAC;EACJ,CAAC,CAAC;AACJ,CAAC,CAAC","ignoreList":[]}

package/build/browser/throwIfError.js

@@ -13,6 +13,7 @@
  * See the License for the specific language governing permissions and
  * limitations under the License.
  */
+
 import { isOAuth2Error } from "oauth4webapi";
 export function throwIfError(result) {
   if (isOAuth2Error(result)) {

package/build/browser/throwIfError.js.map

@@ -1 +1 @@
-{"version":3,"file":"throwIfError.js","names":["isOAuth2Error","throwIfError","result","Error","error"],"sources":["throwIfError.js"],"sourcesContent":["/*\n * Copyright 2024 Palantir Technologies, Inc. All rights reserved.\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\nimport { isOAuth2Error } from \"oauth4webapi\";\nexport function throwIfError(result) {\n    if (isOAuth2Error(result)) {\n        throw new Error(`Failed to get token: ${result.error}`);\n    }\n    return result;\n}\n"],"mappings":"AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,SAASA,aAAa,QAAQ,cAAc;AAC5C,OAAO,SAASC,YAAYA,CAACC,MAAM,EAAE;EACjC,IAAIF,aAAa,CAACE,MAAM,CAAC,EAAE;IACvB,MAAM,IAAIC,KAAK,CAAC,wBAAwBD,MAAM,CAACE,KAAK,EAAE,CAAC;EAC3D;EACA,OAAOF,MAAM;AACjB","ignoreList":[]}
+{"version":3,"file":"throwIfError.js","names":["isOAuth2Error","throwIfError","result","Error","error"],"sources":["throwIfError.ts"],"sourcesContent":["/*\n * Copyright 2024 Palantir Technologies, Inc. All rights reserved.\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport type { OAuth2Error } from \"oauth4webapi\";\nimport { isOAuth2Error } from \"oauth4webapi\";\n\ntype IsErrorInputs = Parameters<typeof isOAuth2Error>[0];\nexport function throwIfError<T extends IsErrorInputs>(\n  result: T | OAuth2Error,\n): Exclude<T, OAuth2Error> {\n  if (isOAuth2Error(result)) {\n    throw new Error(`Failed to get token: ${result.error}`);\n  }\n  return result as any;\n}\n"],"mappings":"AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAGA,SAASA,aAAa,QAAQ,cAAc;AAG5C,OAAO,SAASC,YAAYA,CAC1BC,MAAuB,EACE;EACzB,IAAIF,aAAa,CAACE,MAAM,CAAC,EAAE;IACzB,MAAM,IAAIC,KAAK,CAAC,wBAAwBD,MAAM,CAACE,KAAK,EAAE,CAAC;EACzD;EACA,OAAOF,MAAM;AACf","ignoreList":[]}

package/build/browser/utils.js

@@ -13,6 +13,7 @@
  * See the License for the specific language governing permissions and
  * limitations under the License.
  */
+
 import invariant from "tiny-invariant";
 export function processOptionsAndAssignDefaults(url, redirect_uri, useHistory, loginPage, postLoginPage, scopes, fetchFn, ctxPath) {
   let options = {};
@@ -31,6 +32,7 @@ export function processOptionsAndAssignDefaults(url, redirect_uri, useHistory, l
   }
   !url ? process.env.NODE_ENV !== "production" ? invariant(false, "url is required") : invariant(false) : void 0;
   !redirect_uri ? process.env.NODE_ENV !== "production" ? invariant(false, "redirectUrl is required") : invariant(false) : void 0;
+
   // Assign defaults
   return {
     useHistory: options.useHistory ?? true,

package/build/browser/utils.js.map

@@ -1 +1 @@
-{"version":3,"file":"utils.js","names":["invariant","processOptionsAndAssignDefaults","url","redirect_uri","useHistory","loginPage","postLoginPage","scopes","fetchFn","ctxPath","options","process","env","NODE_ENV","window","location","toString","globalThis","fetch","refreshTokenMarker"],"sources":["utils.js"],"sourcesContent":["/*\n * Copyright 2024 Palantir Technologies, Inc. All rights reserved.\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\nimport invariant from \"tiny-invariant\";\nexport function processOptionsAndAssignDefaults(url, redirect_uri, useHistory, loginPage, postLoginPage, scopes, fetchFn, ctxPath) {\n    let options = {};\n    if (typeof useHistory === \"object\") {\n        invariant(!loginPage && !postLoginPage && !scopes && !fetchFn && !ctxPath, \"If useHistory is an object, other options should not be provided\");\n        options = useHistory;\n    }\n    else {\n        options = {\n            useHistory,\n            loginPage,\n            postLoginPage,\n            scopes,\n            fetchFn,\n            ctxPath,\n        };\n    }\n    invariant(url, \"url is required\");\n    invariant(redirect_uri, \"redirectUrl is required\");\n    // Assign defaults\n    return {\n        useHistory: options.useHistory ?? true,\n        loginPage: options.loginPage,\n        postLoginPage: options.postLoginPage || window.location.toString(),\n        scopes: options.scopes ?? [\"api:read-data\", \"api:write-data\"],\n        fetchFn: options.fetchFn ?? globalThis.fetch,\n        ctxPath: options.ctxPath ?? \"multipass\",\n        refreshTokenMarker: options.refreshTokenMarker,\n    };\n}\n"],"mappings":"AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,OAAOA,SAAS,MAAM,gBAAgB;AACtC,OAAO,SAASC,+BAA+BA,CAACC,GAAG,EAAEC,YAAY,EAAEC,UAAU,EAAEC,SAAS,EAAEC,aAAa,EAAEC,MAAM,EAAEC,OAAO,EAAEC,OAAO,EAAE;EAC/H,IAAIC,OAAO,GAAG,CAAC,CAAC;EAChB,IAAI,OAAON,UAAU,KAAK,QAAQ,EAAE;IAChC,EAAU,CAACC,SAAS,IAAI,CAACC,aAAa,IAAI,CAACC,MAAM,IAAI,CAACC,OAAO,IAAI,CAACC,OAAO,IAAAE,OAAA,CAAAC,GAAA,CAAAC,QAAA,oBAAzEb,SAAS,QAAkE,kEAAkE,IAA7IA,SAAS;IACTU,OAAO,GAAGN,UAAU;EACxB,CAAC,MACI;IACDM,OAAO,GAAG;MACNN,UAAU;MACVC,SAAS;MACTC,aAAa;MACbC,MAAM;MACNC,OAAO;MACPC;IACJ,CAAC;EACL;EACA,CAAUP,GAAG,GAAAS,OAAA,CAAAC,GAAA,CAAAC,QAAA,oBAAbb,SAAS,QAAM,iBAAiB,IAAhCA,SAAS;EACT,CAAUG,YAAY,GAAAQ,OAAA,CAAAC,GAAA,CAAAC,QAAA,oBAAtBb,SAAS,QAAe,yBAAyB,IAAjDA,SAAS;EACT;EACA,OAAO;IACHI,UAAU,EAAEM,OAAO,CAACN,UAAU,IAAI,IAAI;IACtCC,SAAS,EAAEK,OAAO,CAACL,SAAS;IAC5BC,aAAa,EAAEI,OAAO,CAACJ,aAAa,IAAIQ,MAAM,CAACC,QAAQ,CAACC,QAAQ,CAAC,CAAC;IAClET,MAAM,EAAEG,OAAO,CAACH,MAAM,IAAI,CAAC,eAAe,EAAE,gBAAgB,CAAC;IAC7DC,OAAO,EAAEE,OAAO,CAACF,OAAO,IAAIS,UAAU,CAACC,KAAK;IAC5CT,OAAO,EAAEC,OAAO,CAACD,OAAO,IAAI,WAAW;IACvCU,kBAAkB,EAAET,OAAO,CAACS;EAChC,CAAC;AACL","ignoreList":[]}
+{"version":3,"file":"utils.js","names":["invariant","processOptionsAndAssignDefaults","url","redirect_uri","useHistory","loginPage","postLoginPage","scopes","fetchFn","ctxPath","options","process","env","NODE_ENV","window","location","toString","globalThis","fetch","refreshTokenMarker"],"sources":["utils.ts"],"sourcesContent":["/*\n * Copyright 2024 Palantir Technologies, Inc. All rights reserved.\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport invariant from \"tiny-invariant\";\nimport type { PublicOauthClientOptions } from \"./createPublicOauthClient.js\";\n\ninterface ProcessedPublicOauthClientOptions\n  extends\n    Omit<Required<PublicOauthClientOptions>, \"loginPage\" | \"refreshTokenMarker\">\n{\n  loginPage?: string;\n  refreshTokenMarker?: string;\n}\n\nexport function processOptionsAndAssignDefaults(\n  url: string,\n  redirect_uri: string,\n  useHistory?: boolean | PublicOauthClientOptions,\n  loginPage?: string,\n  postLoginPage?: string,\n  scopes?: string[],\n  fetchFn?: typeof globalThis.fetch,\n  ctxPath?: string,\n): ProcessedPublicOauthClientOptions {\n  let options: PublicOauthClientOptions = {};\n\n  if (typeof useHistory === \"object\") {\n    invariant(\n      !loginPage && !postLoginPage && !scopes && !fetchFn && !ctxPath,\n      \"If useHistory is an object, other options should not be provided\",\n    );\n    options = useHistory;\n  } else {\n    options = {\n      useHistory,\n      loginPage,\n      postLoginPage,\n      scopes,\n      fetchFn,\n      ctxPath,\n    };\n  }\n\n  invariant(url, \"url is required\");\n  invariant(redirect_uri, \"redirectUrl is required\");\n\n  // Assign defaults\n  return {\n    useHistory: options.useHistory ?? true,\n    loginPage: options.loginPage,\n    postLoginPage: options.postLoginPage || window.location.toString(),\n    scopes: options.scopes ?? [\"api:read-data\", \"api:write-data\"],\n    fetchFn: options.fetchFn ?? globalThis.fetch,\n    ctxPath: options.ctxPath ?? \"multipass\",\n    refreshTokenMarker: options.refreshTokenMarker,\n  };\n}\n"],"mappings":"AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAEA,OAAOA,SAAS,MAAM,gBAAgB;AAWtC,OAAO,SAASC,+BAA+BA,CAC7CC,GAAW,EACXC,YAAoB,EACpBC,UAA+C,EAC/CC,SAAkB,EAClBC,aAAsB,EACtBC,MAAiB,EACjBC,OAAiC,EACjCC,OAAgB,EACmB;EACnC,IAAIC,OAAiC,GAAG,CAAC,CAAC;EAE1C,IAAI,OAAON,UAAU,KAAK,QAAQ,EAAE;IAClC,EACE,CAACC,SAAS,IAAI,CAACC,aAAa,IAAI,CAACC,MAAM,IAAI,CAACC,OAAO,IAAI,CAACC,OAAO,IAAAE,OAAA,CAAAC,GAAA,CAAAC,QAAA,oBADjEb,SAAS,QAEP,kEAAkE,IAFpEA,SAAS;IAITU,OAAO,GAAGN,UAAU;EACtB,CAAC,MAAM;IACLM,OAAO,GAAG;MACRN,UAAU;MACVC,SAAS;MACTC,aAAa;MACbC,MAAM;MACNC,OAAO;MACPC;IACF,CAAC;EACH;EAEA,CAAUP,GAAG,GAAAS,OAAA,CAAAC,GAAA,CAAAC,QAAA,oBAAbb,SAAS,QAAM,iBAAiB,IAAhCA,SAAS;EACT,CAAUG,YAAY,GAAAQ,OAAA,CAAAC,GAAA,CAAAC,QAAA,oBAAtBb,SAAS,QAAe,yBAAyB,IAAjDA,SAAS;;EAET;EACA,OAAO;IACLI,UAAU,EAAEM,OAAO,CAACN,UAAU,IAAI,IAAI;IACtCC,SAAS,EAAEK,OAAO,CAACL,SAAS;IAC5BC,aAAa,EAAEI,OAAO,CAACJ,aAAa,IAAIQ,MAAM,CAACC,QAAQ,CAACC,QAAQ,CAAC,CAAC;IAClET,MAAM,EAAEG,OAAO,CAACH,MAAM,IAAI,CAAC,eAAe,EAAE,gBAAgB,CAAC;IAC7DC,OAAO,EAAEE,OAAO,CAACF,OAAO,IAAIS,UAAU,CAACC,KAAK;IAC5CT,OAAO,EAAEC,OAAO,CAACD,OAAO,IAAI,WAAW;IACvCU,kBAAkB,EAAET,OAAO,CAACS;EAC9B,CAAC;AACH","ignoreList":[]}

package/build/cjs/index.cjs

@@ -0,0 +1,320 @@
+'use strict';
+
+var oauth4webapi = require('oauth4webapi');
+var invariant2 = require('tiny-invariant');
+var typescriptEventTarget = require('typescript-event-target');
+var delay = require('delay');
+
+function _interopDefault (e) { return e && e.__esModule ? e : { default: e }; }
+
+var invariant2__default = /*#__PURE__*/_interopDefault(invariant2);
+var delay__default = /*#__PURE__*/_interopDefault(delay);
+
+// src/createConfidentialOauthClient.ts
+function throwIfError(result) {
+  if (oauth4webapi.isOAuth2Error(result)) {
+    throw new Error(`Failed to get token: ${result.error}`);
+  }
+  return result;
+}
+
+// src/common.ts
+var CustomEvent = globalThis.CustomEvent ?? class CustomEvent2 extends Event {
+  #detail;
+  constructor(type, options) {
+    super(type, options);
+    this.#detail = options?.detail ?? null;
+  }
+  get detail() {
+    return this.#detail;
+  }
+};
+function localStorageKey(client) {
+  return `@osdk/oauth : refresh : ${client.client_id}`;
+}
+function saveLocal(client, x) {
+  globalThis.localStorage?.setItem(localStorageKey(client), JSON.stringify(x));
+}
+function removeLocal(client) {
+  globalThis.localStorage?.removeItem(localStorageKey(client));
+}
+function readLocal(client) {
+  return JSON.parse(
+    // MUST `localStorage?` as nodejs does not have localStorage
+    globalThis.localStorage?.getItem(localStorageKey(client)) ?? "{}"
+  );
+}
+function saveSession(client, x) {
+  globalThis.sessionStorage?.setItem(localStorageKey(client), JSON.stringify(x));
+}
+function removeSession(client) {
+  globalThis.sessionStorage?.removeItem(localStorageKey(client));
+}
+function readSession(client) {
+  return JSON.parse(
+    // MUST `sessionStorage?` as nodejs does not have sessionStorage
+    globalThis.sessionStorage?.getItem(localStorageKey(client)) ?? "{}"
+  );
+}
+function common(client, as, _signIn, oauthHttpOptions, refresh, refreshTokenMarker) {
+  let token;
+  const eventTarget = new typescriptEventTarget.TypedEventTarget();
+  function makeTokenAndSaveRefresh(resp, type) {
+    const {
+      refresh_token,
+      expires_in,
+      access_token
+    } = resp;
+    !(expires_in != null) ? process.env.NODE_ENV !== "production" ? invariant2__default.default(false) : invariant2__default.default(false) : void 0;
+    saveLocal(client, {
+      refresh_token,
+      refreshTokenMarker
+    });
+    token = {
+      refresh_token,
+      expires_in,
+      access_token,
+      expires_at: Date.now() + expires_in * 1e3
+    };
+    eventTarget.dispatchTypedEvent(type, new CustomEvent(type, {
+      detail: token
+    }));
+    return token;
+  }
+  let refreshTimeout;
+  function rmTimeout() {
+    if (refreshTimeout) clearTimeout(refreshTimeout);
+  }
+  function restartRefreshTimer(evt) {
+    if (refresh) {
+      rmTimeout();
+      refreshTimeout = setTimeout(refresh, evt.detail.expires_in * 1e3 - 60 * 1e3);
+    }
+  }
+  async function signOut() {
+    !token ? process.env.NODE_ENV !== "production" ? invariant2__default.default(false, "not signed in") : invariant2__default.default(false) : void 0;
+    const result = await oauth4webapi.processRevocationResponse(await oauth4webapi.revocationRequest(as, client, token.access_token, oauthHttpOptions));
+    rmTimeout();
+    removeLocal(client);
+    token = void 0;
+    throwIfError(result);
+    eventTarget.dispatchTypedEvent("signOut", new Event("signOut"));
+  }
+  let pendingSignIn;
+  async function signIn() {
+    if (pendingSignIn) {
+      return pendingSignIn;
+    }
+    try {
+      pendingSignIn = _signIn();
+      return await pendingSignIn;
+    } finally {
+      pendingSignIn = void 0;
+    }
+  }
+  eventTarget.addEventListener("signIn", restartRefreshTimer);
+  eventTarget.addEventListener("refresh", restartRefreshTimer);
+  function getTokenOrUndefined() {
+    if (!token || Date.now() >= token.expires_at) {
+      return void 0;
+    }
+    return token?.access_token;
+  }
+  const getToken = Object.assign(async function getToken2() {
+    if (!token || Date.now() >= token.expires_at) {
+      token = await signIn();
+    }
+    return token?.access_token;
+  }, {
+    signIn,
+    refresh,
+    signOut,
+    rmTimeout,
+    getTokenOrUndefined,
+    addEventListener: eventTarget.addEventListener.bind(eventTarget),
+    removeEventListener: eventTarget.removeEventListener.bind(eventTarget)
+  });
+  return {
+    getToken,
+    makeTokenAndSaveRefresh
+  };
+}
+function createAuthorizationServer(ctxPath, url) {
+  const issuer = `${new URL(ctxPath, url + "/")}`;
+  return {
+    token_endpoint: `${issuer}/api/oauth2/token`,
+    authorization_endpoint: `${issuer}/api/oauth2/authorize`,
+    revocation_endpoint: `${issuer}/api/oauth2/revoke_token`,
+    issuer
+  };
+}
+
+// src/createConfidentialOauthClient.ts
+function createConfidentialOauthClient(client_id, client_secret, url, scopes = ["api:read-data", "api:write-data"], fetchFn = globalThis.fetch, ctxPath = "multipass") {
+  const client = {
+    client_id,
+    client_secret
+  };
+  const authServer = createAuthorizationServer(ctxPath, url);
+  const oauthHttpOptions = {
+    [oauth4webapi.customFetch]: fetchFn
+  };
+  const {
+    getToken,
+    makeTokenAndSaveRefresh
+  } = common(client, authServer, _signIn, oauthHttpOptions, void 0, void 0);
+  async function _signIn() {
+    return makeTokenAndSaveRefresh(throwIfError(await oauth4webapi.processClientCredentialsResponse(authServer, client, await oauth4webapi.clientCredentialsGrantRequest(authServer, client, new URLSearchParams({
+      scope: scopes.join(" ")
+    }), oauthHttpOptions))), "signIn");
+  }
+  return getToken;
+}
+function processOptionsAndAssignDefaults(url, redirect_uri, useHistory, loginPage, postLoginPage, scopes, fetchFn, ctxPath) {
+  let options = {};
+  if (typeof useHistory === "object") {
+    !(!loginPage && !postLoginPage && !scopes && !fetchFn && !ctxPath) ? process.env.NODE_ENV !== "production" ? invariant2__default.default(false, "If useHistory is an object, other options should not be provided") : invariant2__default.default(false) : void 0;
+    options = useHistory;
+  } else {
+    options = {
+      useHistory,
+      loginPage,
+      postLoginPage,
+      scopes,
+      fetchFn,
+      ctxPath
+    };
+  }
+  !url ? process.env.NODE_ENV !== "production" ? invariant2__default.default(false, "url is required") : invariant2__default.default(false) : void 0;
+  !redirect_uri ? process.env.NODE_ENV !== "production" ? invariant2__default.default(false, "redirectUrl is required") : invariant2__default.default(false) : void 0;
+  return {
+    useHistory: options.useHistory ?? true,
+    loginPage: options.loginPage,
+    postLoginPage: options.postLoginPage || window.location.toString(),
+    scopes: options.scopes ?? ["api:read-data", "api:write-data"],
+    fetchFn: options.fetchFn ?? globalThis.fetch,
+    ctxPath: options.ctxPath ?? "multipass",
+    refreshTokenMarker: options.refreshTokenMarker
+  };
+}
+
+// src/createPublicOauthClient.ts
+function createPublicOauthClient(client_id, url, redirect_uri, useHistory, loginPage, postLoginPage, scopes, fetchFn, ctxPath) {
+  let refreshTokenMarker;
+  ({
+    useHistory,
+    loginPage,
+    postLoginPage,
+    scopes,
+    fetchFn,
+    ctxPath,
+    refreshTokenMarker
+  } = processOptionsAndAssignDefaults(url, redirect_uri, useHistory, loginPage, postLoginPage, scopes, fetchFn, ctxPath));
+  const client = {
+    client_id,
+    token_endpoint_auth_method: "none"
+  };
+  const authServer = createAuthorizationServer(ctxPath, url);
+  const oauthHttpOptions = {
+    [oauth4webapi.customFetch]: fetchFn
+  };
+  const {
+    makeTokenAndSaveRefresh,
+    getToken
+  } = common(client, authServer, _signIn, oauthHttpOptions, maybeRefresh.bind(globalThis, true), refreshTokenMarker);
+  const go = async (x) => {
+    if (useHistory) {
+      window.history.replaceState({}, "", x);
+      return;
+    } else window.location.assign(x);
+    await delay__default.default(1e3);
+    throw new Error("Unable to redirect");
+  };
+  async function maybeRefresh(expectRefreshToken) {
+    const {
+      refresh_token,
+      refreshTokenMarker: lastRefreshTokenMarker
+    } = readLocal(client);
+    if (!refresh_token || lastRefreshTokenMarker !== refreshTokenMarker) {
+      if (expectRefreshToken) throw new Error("No refresh token found");
+      return;
+    }
+    try {
+      const result = makeTokenAndSaveRefresh(throwIfError(await oauth4webapi.processAuthorizationCodeOAuth2Response(authServer, client, await oauth4webapi.refreshTokenGrantRequest(authServer, client, refresh_token, oauthHttpOptions))), "refresh");
+      if (result && window.location.pathname === new URL(redirect_uri).pathname) {
+        const {
+          oldUrl
+        } = readSession(client);
+        void go(oldUrl ?? "/");
+      }
+      return result;
+    } catch (e) {
+      if (process.env.NODE_ENV !== "production") {
+        console.warn("Failed to get OAuth2 refresh token. Removing refresh token", e);
+      }
+      removeLocal(client);
+      if (expectRefreshToken) {
+        throw new Error("Could not refresh token");
+      }
+    }
+  }
+  async function maybeHandleAuthReturn() {
+    const {
+      state,
+      oldUrl,
+      codeVerifier
+    } = readSession(client);
+    if (!codeVerifier) return;
+    try {
+      const ret = makeTokenAndSaveRefresh(throwIfError(await oauth4webapi.processAuthorizationCodeOAuth2Response(authServer, client, await oauth4webapi.authorizationCodeGrantRequest(authServer, client, throwIfError(oauth4webapi.validateAuthResponse(authServer, client, new URL(window.location.href), state)), redirect_uri, codeVerifier, oauthHttpOptions))), "signIn");
+      void go(oldUrl);
+      return ret;
+    } catch (e) {
+      if (process.env.NODE_ENV !== "production") {
+        console.warn("Failed to get OAuth2 token using PKCE, removing PKCE and starting a new auth flow", e);
+      }
+      removeLocal(client);
+      removeSession(client);
+      throw e;
+    }
+  }
+  const initiateLoginRedirect = async () => {
+    if (loginPage && window.location.href !== loginPage && window.location.pathname !== loginPage) {
+      saveLocal(client, {});
+      saveSession(client, {
+        oldUrl: postLoginPage
+      });
+      await go(loginPage);
+      return;
+    }
+    const state = oauth4webapi.generateRandomState();
+    const codeVerifier = oauth4webapi.generateRandomCodeVerifier();
+    const oldUrl = readSession(client).oldUrl ?? window.location.toString();
+    saveLocal(client, {});
+    saveSession(client, {
+      codeVerifier,
+      state,
+      oldUrl
+    });
+    window.location.assign(`${authServer.authorization_endpoint}?${new URLSearchParams({
+      client_id,
+      response_type: "code",
+      state,
+      redirect_uri,
+      code_challenge: await oauth4webapi.calculatePKCECodeChallenge(codeVerifier),
+      code_challenge_method: "S256",
+      scope: ["offline_access", ...scopes].join(" ")
+    })}`);
+    await delay__default.default(1e3);
+    throw new Error("Unable to redirect");
+  };
+  async function _signIn() {
+    return await maybeRefresh() ?? await maybeHandleAuthReturn() ?? await initiateLoginRedirect();
+  }
+  return getToken;
+}
+
+exports.createConfidentialOauthClient = createConfidentialOauthClient;
+exports.createPublicOauthClient = createPublicOauthClient;
+//# sourceMappingURL=index.cjs.map
+//# sourceMappingURL=index.cjs.map

package/build/cjs/index.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/throwIfError.ts","../../src/common.ts","../../src/createConfidentialOauthClient.ts","../../src/utils.ts","../../src/createPublicOauthClient.ts"],"names":["isOAuth2Error","CustomEvent","TypedEventTarget","invariant","processRevocationResponse","revocationRequest","getToken","customFetch","processClientCredentialsResponse","clientCredentialsGrantRequest","delay","processAuthorizationCodeOAuth2Response","refreshTokenGrantRequest","authorizationCodeGrantRequest","validateAuthResponse","generateRandomState","generateRandomCodeVerifier","calculatePKCECodeChallenge"],"mappings":";;;;;;;;;;;;;AAiBO,SAAS,aAAa,MAAQ,EAAA;AACnC,EAAI,IAAAA,0BAAA,CAAc,MAAM,CAAG,EAAA;AACzB,IAAA,MAAM,IAAI,KAAA,CAAM,CAAwB,qBAAA,EAAA,MAAA,CAAO,KAAK,CAAE,CAAA,CAAA,CAAA;AAAA,GACxD;AACA,EAAO,OAAA,MAAA,CAAA;AACT,CAAA;;;ACAA,IAAM,WAAA,GAA0E,WAAW,WAAe,IAAA,MAAMC,qBAAoB,KAAM,CAAA;AAAA,EACxI,OAAA,CAAA;AAAA,EACA,WAAA,CAAY,MAAM,OAAS,EAAA;AACzB,IAAA,KAAA,CAAM,MAAM,OAAO,CAAA,CAAA;AACnB,IAAK,IAAA,CAAA,OAAA,GAAU,SAAS,MAAU,IAAA,IAAA,CAAA;AAAA,GACpC;AAAA,EACA,IAAI,MAAS,GAAA;AACX,IAAA,OAAO,IAAK,CAAA,OAAA,CAAA;AAAA,GACd;AACF,CAAA,CAAA;AACA,SAAS,gBAAgB,MAAQ,EAAA;AAC/B,EAAO,OAAA,CAAA,wBAAA,EAA2B,OAAO,SAAS,CAAA,CAAA,CAAA;AACpD,CAAA;AACO,SAAS,SAAA,CAAU,QAAQ,CAAG,EAAA;AAEnC,EAAW,UAAA,CAAA,YAAA,EAAc,QAAQ,eAAgB,CAAA,MAAM,GAAG,IAAK,CAAA,SAAA,CAAU,CAAC,CAAC,CAAA,CAAA;AAC7E,CAAA;AACO,SAAS,YAAY,MAAQ,EAAA;AAElC,EAAA,UAAA,CAAW,YAAc,EAAA,UAAA,CAAW,eAAgB,CAAA,MAAM,CAAC,CAAA,CAAA;AAC7D,CAAA;AACO,SAAS,UAAU,MAAQ,EAAA;AAChC,EAAA,OAAO,IAAK,CAAA,KAAA;AAAA;AAAA,IAEZ,WAAW,YAAc,EAAA,OAAA,CAAQ,eAAgB,CAAA,MAAM,CAAC,CAAK,IAAA,IAAA;AAAA,GAAI,CAAA;AACnE,CAAA;AACO,SAAS,WAAA,CAAY,QAAQ,CAAG,EAAA;AAErC,EAAW,UAAA,CAAA,cAAA,EAAgB,QAAQ,eAAgB,CAAA,MAAM,GAAG,IAAK,CAAA,SAAA,CAAU,CAAC,CAAC,CAAA,CAAA;AAC/E,CAAA;AACO,SAAS,cAAc,MAAQ,EAAA;AAEpC,EAAA,UAAA,CAAW,cAAgB,EAAA,UAAA,CAAW,eAAgB,CAAA,MAAM,CAAC,CAAA,CAAA;AAC/D,CAAA;AACO,SAAS,YAAY,MAAQ,EAAA;AAClC,EAAA,OAAO,IAAK,CAAA,KAAA;AAAA;AAAA,IAEZ,WAAW,cAAgB,EAAA,OAAA,CAAQ,eAAgB,CAAA,MAAM,CAAC,CAAK,IAAA,IAAA;AAAA,GAAI,CAAA;AACrE,CAAA;AACO,SAAS,OAAO,MAAQ,EAAA,EAAA,EAAI,OAAS,EAAA,gBAAA,EAAkB,SAAS,kBAAoB,EAAA;AACzF,EAAI,IAAA,KAAA,CAAA;AACJ,EAAM,MAAA,WAAA,GAAc,IAAIC,sCAAiB,EAAA,CAAA;AACzC,EAAS,SAAA,uBAAA,CAAwB,MAAM,IAAM,EAAA;AAC3C,IAAM,MAAA;AAAA,MACJ,aAAA;AAAA,MACA,UAAA;AAAA,MACA,YAAA;AAAA,KACE,GAAA,IAAA,CAAA;AACJ,IAAE,EAAA,UAAA,IAAc,IAAQ,CAAA,GAAA,OAAA,CAAQ,GAAI,CAAA,QAAA,KAAa,YAAe,GAAAC,2BAAA,CAAU,KAAK,CAAA,GAAIA,2BAAU,CAAA,KAAK,CAAI,GAAA,KAAA,CAAA,CAAA;AACtG,IAAA,SAAA,CAAU,MAAQ,EAAA;AAAA,MAChB,aAAA;AAAA,MACA,kBAAA;AAAA,KACD,CAAA,CAAA;AACD,IAAQ,KAAA,GAAA;AAAA,MACN,aAAA;AAAA,MACA,UAAA;AAAA,MACA,YAAA;AAAA,MACA,UAAY,EAAA,IAAA,CAAK,GAAI,EAAA,GAAI,UAAa,GAAA,GAAA;AAAA,KACxC,CAAA;AACA,IAAA,WAAA,CAAY,kBAAmB,CAAA,IAAA,EAAM,IAAI,WAAA,CAAY,IAAM,EAAA;AAAA,MACzD,MAAQ,EAAA,KAAA;AAAA,KACT,CAAC,CAAA,CAAA;AACF,IAAO,OAAA,KAAA,CAAA;AAAA,GACT;AACA,EAAI,IAAA,cAAA,CAAA;AACJ,EAAA,SAAS,SAAY,GAAA;AACnB,IAAI,IAAA,cAAA,eAA6B,cAAc,CAAA,CAAA;AAAA,GACjD;AACA,EAAA,SAAS,oBAAoB,GAAK,EAAA;AAChC,IAAA,IAAI,OAAS,EAAA;AACX,MAAU,SAAA,EAAA,CAAA;AACV,MAAA,cAAA,GAAiB,WAAW,OAAS,EAAA,GAAA,CAAI,OAAO,UAAa,GAAA,GAAA,GAAO,KAAK,GAAI,CAAA,CAAA;AAAA,KAC/E;AAAA,GACF;AACA,EAAA,eAAe,OAAU,GAAA;AACvB,IAAC,CAAA,KAAA,GAAQ,OAAQ,CAAA,GAAA,CAAI,QAAa,KAAA,YAAA,GAAeA,2BAAU,CAAA,KAAA,EAAO,eAAe,CAAA,GAAIA,2BAAU,CAAA,KAAK,CAAI,GAAA,KAAA,CAAA,CAAA;AACxG,IAAM,MAAA,MAAA,GAAS,MAAMC,sCAAA,CAA0B,MAAMC,8BAAA,CAAkB,IAAI,MAAQ,EAAA,KAAA,CAAM,YAAc,EAAA,gBAAgB,CAAC,CAAA,CAAA;AACxH,IAAU,SAAA,EAAA,CAAA;AAGV,IAAA,WAAA,CAAY,MAAM,CAAA,CAAA;AAClB,IAAQ,KAAA,GAAA,KAAA,CAAA,CAAA;AACR,IAAA,YAAA,CAAa,MAAM,CAAA,CAAA;AACnB,IAAA,WAAA,CAAY,kBAAmB,CAAA,SAAA,EAAW,IAAI,KAAA,CAAM,SAAS,CAAC,CAAA,CAAA;AAAA,GAChE;AACA,EAAI,IAAA,aAAA,CAAA;AACJ,EAAA,eAAe,MAAS,GAAA;AACtB,IAAA,IAAI,aAAe,EAAA;AACjB,MAAO,OAAA,aAAA,CAAA;AAAA,KACT;AACA,IAAI,IAAA;AACF,MAAA,aAAA,GAAgB,OAAQ,EAAA,CAAA;AACxB,MAAA,OAAO,MAAM,aAAA,CAAA;AAAA,KACb,SAAA;AACA,MAAgB,aAAA,GAAA,KAAA,CAAA,CAAA;AAAA,KAClB;AAAA,GACF;AACA,EAAY,WAAA,CAAA,gBAAA,CAAiB,UAAU,mBAAmB,CAAA,CAAA;AAC1D,EAAY,WAAA,CAAA,gBAAA,CAAiB,WAAW,mBAAmB,CAAA,CAAA;AAC3D,EAAA,SAAS,mBAAsB,GAAA;AAC7B,IAAA,IAAI,CAAC,KAAS,IAAA,IAAA,CAAK,GAAI,EAAA,IAAK,MAAM,UAAY,EAAA;AAC5C,MAAO,OAAA,KAAA,CAAA,CAAA;AAAA,KACT;AACA,IAAA,OAAO,KAAO,EAAA,YAAA,CAAA;AAAA,GAChB;AACA,EAAA,MAAM,QAAW,GAAA,MAAA,CAAO,MAAO,CAAA,eAAeC,SAAW,GAAA;AACvD,IAAA,IAAI,CAAC,KAAS,IAAA,IAAA,CAAK,GAAI,EAAA,IAAK,MAAM,UAAY,EAAA;AAC5C,MAAA,KAAA,GAAQ,MAAM,MAAO,EAAA,CAAA;AAAA,KACvB;AACA,IAAA,OAAO,KAAO,EAAA,YAAA,CAAA;AAAA,GACb,EAAA;AAAA,IACD,MAAA;AAAA,IACA,OAAA;AAAA,IACA,OAAA;AAAA,IACA,SAAA;AAAA,IACA,mBAAA;AAAA,IACA,gBAAkB,EAAA,WAAA,CAAY,gBAAiB,CAAA,IAAA,CAAK,WAAW,CAAA;AAAA,IAC/D,mBAAqB,EAAA,WAAA,CAAY,mBAAoB,CAAA,IAAA,CAAK,WAAW,CAAA;AAAA,GACtE,CAAA,CAAA;AACD,EAAO,OAAA;AAAA,IACL,QAAA;AAAA,IACA,uBAAA;AAAA,GACF,CAAA;AACF,CAAA;AACO,SAAS,yBAAA,CAA0B,SAAS,GAAK,EAAA;AACtD,EAAA,MAAM,SAAS,CAAG,EAAA,IAAI,IAAI,OAAS,EAAA,GAAA,GAAM,GAAG,CAAC,CAAA,CAAA,CAAA;AAC7C,EAAO,OAAA;AAAA,IACL,cAAA,EAAgB,GAAG,MAAM,CAAA,iBAAA,CAAA;AAAA,IACzB,sBAAA,EAAwB,GAAG,MAAM,CAAA,qBAAA,CAAA;AAAA,IACjC,mBAAA,EAAqB,GAAG,MAAM,CAAA,wBAAA,CAAA;AAAA,IAC9B,MAAA;AAAA,GACF,CAAA;AACF,CAAA;;;AC7HO,SAAS,6BAA8B,CAAA,SAAA,EAAW,aAAe,EAAA,GAAA,EAAK,MAAS,GAAA,CAAC,eAAiB,EAAA,gBAAgB,CAAG,EAAA,OAAA,GAAU,UAAW,CAAA,KAAA,EAAO,UAAU,WAAa,EAAA;AAC5K,EAAA,MAAM,MAAS,GAAA;AAAA,IACb,SAAA;AAAA,IACA,aAAA;AAAA,GACF,CAAA;AACA,EAAM,MAAA,UAAA,GAAa,yBAA0B,CAAA,OAAA,EAAS,GAAG,CAAA,CAAA;AACzD,EAAA,MAAM,gBAAmB,GAAA;AAAA,IACvB,CAACC,wBAAW,GAAG,OAAA;AAAA,GACjB,CAAA;AACA,EAAM,MAAA;AAAA,IACJ,QAAA;AAAA,IACA,uBAAA;AAAA,MACE,MAAO,CAAA,MAAA,EAAQ,YAAY,OAAS,EAAA,gBAAA,EAAkB,QAAW,KAAS,CAAA,CAAA,CAAA;AAC9E,EAAA,eAAe,OAAU,GAAA;AACvB,IAAO,OAAA,uBAAA,CAAwB,YAAa,CAAA,MAAMC,6CAAiC,CAAA,UAAA,EAAY,MAAQ,EAAA,MAAMC,0CAA8B,CAAA,UAAA,EAAY,MAAQ,EAAA,IAAI,eAAgB,CAAA;AAAA,MACjL,KAAA,EAAO,MAAO,CAAA,IAAA,CAAK,GAAG,CAAA;AAAA,KACvB,CAAG,EAAA,gBAAgB,CAAC,CAAC,GAAG,QAAQ,CAAA,CAAA;AAAA,GACnC;AACA,EAAO,OAAA,QAAA,CAAA;AACT,CAAA;AC/BO,SAAS,+BAAA,CAAgC,KAAK,YAAc,EAAA,UAAA,EAAY,WAAW,aAAe,EAAA,MAAA,EAAQ,SAAS,OAAS,EAAA;AACjI,EAAA,IAAI,UAAU,EAAC,CAAA;AACf,EAAI,IAAA,OAAO,eAAe,QAAU,EAAA;AAClC,IAAE,EAAA,CAAC,aAAa,CAAC,aAAA,IAAiB,CAAC,MAAU,IAAA,CAAC,WAAW,CAAC,OAAA,CAAA,GAAW,QAAQ,GAAI,CAAA,QAAA,KAAa,eAAeN,2BAAU,CAAA,KAAA,EAAO,kEAAkE,CAAIA,GAAAA,2BAAAA,CAAU,KAAK,CAAI,GAAA,KAAA,CAAA,CAAA;AACvN,IAAU,OAAA,GAAA,UAAA,CAAA;AAAA,GACL,MAAA;AACL,IAAU,OAAA,GAAA;AAAA,MACR,UAAA;AAAA,MACA,SAAA;AAAA,MACA,aAAA;AAAA,MACA,MAAA;AAAA,MACA,OAAA;AAAA,MACA,OAAA;AAAA,KACF,CAAA;AAAA,GACF;AACA,EAAC,CAAA,GAAA,GAAM,OAAQ,CAAA,GAAA,CAAI,QAAa,KAAA,YAAA,GAAeA,2BAAU,CAAA,KAAA,EAAO,iBAAiB,CAAA,GAAIA,2BAAU,CAAA,KAAK,CAAI,GAAA,KAAA,CAAA,CAAA;AACxG,EAAC,CAAA,YAAA,GAAe,OAAQ,CAAA,GAAA,CAAI,QAAa,KAAA,YAAA,GAAeA,2BAAU,CAAA,KAAA,EAAO,yBAAyB,CAAA,GAAIA,2BAAU,CAAA,KAAK,CAAI,GAAA,KAAA,CAAA,CAAA;AAGzH,EAAO,OAAA;AAAA,IACL,UAAA,EAAY,QAAQ,UAAc,IAAA,IAAA;AAAA,IAClC,WAAW,OAAQ,CAAA,SAAA;AAAA,IACnB,aAAe,EAAA,OAAA,CAAQ,aAAiB,IAAA,MAAA,CAAO,SAAS,QAAS,EAAA;AAAA,IACjE,MAAQ,EAAA,OAAA,CAAQ,MAAU,IAAA,CAAC,iBAAiB,gBAAgB,CAAA;AAAA,IAC5D,OAAA,EAAS,OAAQ,CAAA,OAAA,IAAW,UAAW,CAAA,KAAA;AAAA,IACvC,OAAA,EAAS,QAAQ,OAAW,IAAA,WAAA;AAAA,IAC5B,oBAAoB,OAAQ,CAAA,kBAAA;AAAA,GAC9B,CAAA;AACF,CAAA;;;ACEO,SAAS,uBAAA,CAAwB,WAAW,GAAK,EAAA,YAAA,EAAc,YAAY,SAAW,EAAA,aAAA,EAAe,MAAQ,EAAA,OAAA,EAAS,OAAS,EAAA;AACpI,EAAI,IAAA,kBAAA,CAAA;AACJ,EAAC,CAAA;AAAA,IACC,UAAA;AAAA,IACA,SAAA;AAAA,IACA,aAAA;AAAA,IACA,MAAA;AAAA,IACA,OAAA;AAAA,IACA,OAAA;AAAA,IACA,kBAAA;AAAA,GACF,GAAI,gCAAgC,GAAK,EAAA,YAAA,EAAc,YAAY,SAAW,EAAA,aAAA,EAAe,MAAQ,EAAA,OAAA,EAAS,OAAO,CAAA,EAAA;AACrH,EAAA,MAAM,MAAS,GAAA;AAAA,IACb,SAAA;AAAA,IACA,0BAA4B,EAAA,MAAA;AAAA,GAC9B,CAAA;AACA,EAAM,MAAA,UAAA,GAAa,yBAA0B,CAAA,OAAA,EAAS,GAAG,CAAA,CAAA;AACzD,EAAA,MAAM,gBAAmB,GAAA;AAAA,IACvB,CAACI,wBAAW,GAAG,OAAA;AAAA,GACjB,CAAA;AACA,EAAM,MAAA;AAAA,IACJ,uBAAA;AAAA,IACA,QAAA;AAAA,GACF,GAAI,MAAO,CAAA,MAAA,EAAQ,UAAY,EAAA,OAAA,EAAS,gBAAkB,EAAA,YAAA,CAAa,IAAK,CAAA,UAAA,EAAY,IAAI,CAAA,EAAG,kBAAkB,CAAA,CAAA;AAGjH,EAAM,MAAA,EAAA,GAAK,OAAM,CAAK,KAAA;AACpB,IAAA,IAAI,UAAY,EAAA;AACd,MAAA,MAAA,CAAO,OAAQ,CAAA,YAAA,CAAa,EAAC,EAAG,IAAI,CAAC,CAAA,CAAA;AACrC,MAAA,OAAA;AAAA,KACK,MAAA,MAAA,CAAO,QAAS,CAAA,MAAA,CAAO,CAAC,CAAA,CAAA;AAC/B,IAAA,MAAMG,uBAAM,GAAI,CAAA,CAAA;AAChB,IAAM,MAAA,IAAI,MAAM,oBAAoB,CAAA,CAAA;AAAA,GACtC,CAAA;AACA,EAAA,eAAe,aAAa,kBAAoB,EAAA;AAC9C,IAAM,MAAA;AAAA,MACJ,aAAA;AAAA,MACA,kBAAoB,EAAA,sBAAA;AAAA,KACtB,GAAI,UAAU,MAAM,CAAA,CAAA;AACpB,IAAI,IAAA,CAAC,aAAiB,IAAA,sBAAA,KAA2B,kBAAoB,EAAA;AACnE,MAAA,IAAI,kBAAoB,EAAA,MAAM,IAAI,KAAA,CAAM,wBAAwB,CAAA,CAAA;AAChE,MAAA,OAAA;AAAA,KACF;AACA,IAAI,IAAA;AAGF,MAAA,MAAM,SAAS,uBAAwB,CAAA,YAAA,CAAa,MAAMC,mDAAA,CAAuC,YAAY,MAAQ,EAAA,MAAMC,qCAAyB,CAAA,UAAA,EAAY,QAAQ,aAAe,EAAA,gBAAgB,CAAC,CAAC,GAAG,SAAS,CAAA,CAAA;AACrN,MAAI,IAAA,MAAA,IAAU,OAAO,QAAS,CAAA,QAAA,KAAa,IAAI,GAAI,CAAA,YAAY,EAAE,QAAU,EAAA;AACzE,QAAM,MAAA;AAAA,UACJ,MAAA;AAAA,SACF,GAAI,YAAY,MAAM,CAAA,CAAA;AAEtB,QAAK,KAAA,EAAA,CAAG,UAAU,GAAG,CAAA,CAAA;AAAA,OACvB;AACA,MAAO,OAAA,MAAA,CAAA;AAAA,aACA,CAAG,EAAA;AACV,MAAI,IAAA,OAAA,CAAQ,GAAI,CAAA,QAAA,KAAa,YAAc,EAAA;AAEzC,QAAQ,OAAA,CAAA,IAAA,CAAK,8DAA8D,CAAC,CAAA,CAAA;AAAA,OAC9E;AACA,MAAA,WAAA,CAAY,MAAM,CAAA,CAAA;AAClB,MAAA,IAAI,kBAAoB,EAAA;AACtB,QAAM,MAAA,IAAI,MAAM,yBAAyB,CAAA,CAAA;AAAA,OAC3C;AAAA,KACF;AAAA,GACF;AACA,EAAA,eAAe,qBAAwB,GAAA;AACrC,IAAM,MAAA;AAAA,MACJ,KAAA;AAAA,MACA,MAAA;AAAA,MACA,YAAA;AAAA,KACF,GAAI,YAAY,MAAM,CAAA,CAAA;AACtB,IAAA,IAAI,CAAC,YAAc,EAAA,OAAA;AACnB,IAAI,IAAA;AACF,MAAA,MAAM,GAAM,GAAA,uBAAA,CAAwB,YAAa,CAAA,MAAMD,mDAAuC,CAAA,UAAA,EAAY,MAAQ,EAAA,MAAME,0CAA8B,CAAA,UAAA,EAAY,MAAQ,EAAA,YAAA,CAAaC,kCAAqB,UAAY,EAAA,MAAA,EAAQ,IAAI,GAAA,CAAI,MAAO,CAAA,QAAA,CAAS,IAAI,CAAA,EAAG,KAAK,CAAC,CAAG,EAAA,YAAA,EAAc,YAAc,EAAA,gBAAgB,CAAC,CAAC,GAAG,QAAQ,CAAA,CAAA;AACjU,MAAA,KAAK,GAAG,MAAM,CAAA,CAAA;AACd,MAAO,OAAA,GAAA,CAAA;AAAA,aACA,CAAG,EAAA;AACV,MAAI,IAAA,OAAA,CAAQ,GAAI,CAAA,QAAA,KAAa,YAAc,EAAA;AAEzC,QAAQ,OAAA,CAAA,IAAA,CAAK,qFAAqF,CAAC,CAAA,CAAA;AAAA,OACrG;AACA,MAAA,WAAA,CAAY,MAAM,CAAA,CAAA;AAClB,MAAA,aAAA,CAAc,MAAM,CAAA,CAAA;AACpB,MAAM,MAAA,CAAA,CAAA;AAAA,KACR;AAAA,GACF;AAGA,EAAA,MAAM,wBAAwB,YAAY;AACxC,IAAI,IAAA,SAAA,IAAa,OAAO,QAAS,CAAA,IAAA,KAAS,aAAa,MAAO,CAAA,QAAA,CAAS,aAAa,SAAW,EAAA;AAC7F,MAAU,SAAA,CAAA,MAAA,EAAQ,EAAE,CAAA,CAAA;AACpB,MAAA,WAAA,CAAY,MAAQ,EAAA;AAAA,QAClB,MAAQ,EAAA,aAAA;AAAA,OACT,CAAA,CAAA;AACD,MAAA,MAAM,GAAG,SAAS,CAAA,CAAA;AAClB,MAAA,OAAA;AAAA,KACF;AACA,IAAA,MAAM,QAAQC,gCAAoB,EAAA,CAAA;AAClC,IAAA,MAAM,eAAeC,uCAA2B,EAAA,CAAA;AAChD,IAAA,MAAM,SAAS,WAAY,CAAA,MAAM,EAAE,MAAU,IAAA,MAAA,CAAO,SAAS,QAAS,EAAA,CAAA;AACtE,IAAU,SAAA,CAAA,MAAA,EAAQ,EAAE,CAAA,CAAA;AACpB,IAAA,WAAA,CAAY,MAAQ,EAAA;AAAA,MAClB,YAAA;AAAA,MACA,KAAA;AAAA,MACA,MAAA;AAAA,KACD,CAAA,CAAA;AACD,IAAA,MAAA,CAAO,SAAS,MAAO,CAAA,CAAA,EAAG,WAAW,sBAAsB,CAAA,CAAA,EAAI,IAAI,eAAgB,CAAA;AAAA,MACjF,SAAA;AAAA,MACA,aAAe,EAAA,MAAA;AAAA,MACf,KAAA;AAAA,MACA,YAAA;AAAA,MACA,cAAA,EAAgB,MAAMC,uCAAA,CAA2B,YAAY,CAAA;AAAA,MAC7D,qBAAuB,EAAA,MAAA;AAAA,MACvB,OAAO,CAAC,gBAAA,EAAkB,GAAG,MAAM,CAAA,CAAE,KAAK,GAAG,CAAA;AAAA,KAC9C,CAAC,CAAE,CAAA,CAAA,CAAA;AAGJ,IAAA,MAAMP,uBAAM,GAAI,CAAA,CAAA;AAChB,IAAM,MAAA,IAAI,MAAM,oBAAoB,CAAA,CAAA;AAAA,GACtC,CAAA;AAGA,EAAA,eAAe,OAAU,GAAA;AAEvB,IAAA,OAAQ,MAAM,YAAa,EAAA,IAErB,MAAM,qBAAsB,EAAA,IAE9B,MAAM,qBAAsB,EAAA,CAAA;AAAA,GAClC;AACA,EAAO,OAAA,QAAA,CAAA;AACT","file":"index.cjs","sourcesContent":["/*\n * Copyright 2024 Palantir Technologies, Inc. All rights reserved.\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport { isOAuth2Error } from \"oauth4webapi\";\nexport function throwIfError(result) {\n  if (isOAuth2Error(result)) {\n    throw new Error(`Failed to get token: ${result.error}`);\n  }\n  return result;\n}","/*\n * Copyright 2024 Palantir Technologies, Inc. All rights reserved.\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport { processRevocationResponse, revocationRequest } from \"oauth4webapi\";\nimport invariant from \"tiny-invariant\";\nimport { TypedEventTarget } from \"typescript-event-target\";\nimport { throwIfError } from \"./throwIfError.js\";\n// Node 18 is supposed to have a `CustomEvent` but it is not exposed on `globalThis`\n// which creates a problem for making a single codebase for node and browser. This polyfill works around it\nconst CustomEvent = process.env.TARGET === \"browser\" ? globalThis.CustomEvent : globalThis.CustomEvent ?? class CustomEvent extends Event {\n  #detail;\n  constructor(type, options) {\n    super(type, options);\n    this.#detail = options?.detail ?? null;\n  }\n  get detail() {\n    return this.#detail;\n  }\n};\nfunction localStorageKey(client) {\n  return `@osdk/oauth : refresh : ${client.client_id}`;\n}\nexport function saveLocal(client, x) {\n  // MUST `localStorage?` as nodejs does not have localStorage\n  globalThis.localStorage?.setItem(localStorageKey(client), JSON.stringify(x));\n}\nexport function removeLocal(client) {\n  // MUST `localStorage?` as nodejs does not have localStorage\n  globalThis.localStorage?.removeItem(localStorageKey(client));\n}\nexport function readLocal(client) {\n  return JSON.parse(\n  // MUST `localStorage?` as nodejs does not have localStorage\n  globalThis.localStorage?.getItem(localStorageKey(client)) ?? \"{}\");\n}\nexport function saveSession(client, x) {\n  // MUST `sessionStorage?` as nodejs does not have sessionStorage\n  globalThis.sessionStorage?.setItem(localStorageKey(client), JSON.stringify(x));\n}\nexport function removeSession(client) {\n  // MUST `sessionStorage?` as nodejs does not have sessionStorage\n  globalThis.sessionStorage?.removeItem(localStorageKey(client));\n}\nexport function readSession(client) {\n  return JSON.parse(\n  // MUST `sessionStorage?` as nodejs does not have sessionStorage\n  globalThis.sessionStorage?.getItem(localStorageKey(client)) ?? \"{}\");\n}\nexport function common(client, as, _signIn, oauthHttpOptions, refresh, refreshTokenMarker) {\n  let token;\n  const eventTarget = new TypedEventTarget();\n  function makeTokenAndSaveRefresh(resp, type) {\n    const {\n      refresh_token,\n      expires_in,\n      access_token\n    } = resp;\n    !(expires_in != null) ? process.env.NODE_ENV !== \"production\" ? invariant(false) : invariant(false) : void 0;\n    saveLocal(client, {\n      refresh_token,\n      refreshTokenMarker\n    });\n    token = {\n      refresh_token,\n      expires_in,\n      access_token,\n      expires_at: Date.now() + expires_in * 1000\n    };\n    eventTarget.dispatchTypedEvent(type, new CustomEvent(type, {\n      detail: token\n    }));\n    return token;\n  }\n  let refreshTimeout;\n  function rmTimeout() {\n    if (refreshTimeout) clearTimeout(refreshTimeout);\n  }\n  function restartRefreshTimer(evt) {\n    if (refresh) {\n      rmTimeout();\n      refreshTimeout = setTimeout(refresh, evt.detail.expires_in * 1000 - 60 * 1000);\n    }\n  }\n  async function signOut() {\n    !token ? process.env.NODE_ENV !== \"production\" ? invariant(false, \"not signed in\") : invariant(false) : void 0;\n    const result = await processRevocationResponse(await revocationRequest(as, client, token.access_token, oauthHttpOptions));\n    rmTimeout();\n\n    // Clean up\n    removeLocal(client);\n    token = undefined;\n    throwIfError(result);\n    eventTarget.dispatchTypedEvent(\"signOut\", new Event(\"signOut\"));\n  }\n  let pendingSignIn;\n  async function signIn() {\n    if (pendingSignIn) {\n      return pendingSignIn;\n    }\n    try {\n      pendingSignIn = _signIn();\n      return await pendingSignIn;\n    } finally {\n      pendingSignIn = undefined;\n    }\n  }\n  eventTarget.addEventListener(\"signIn\", restartRefreshTimer);\n  eventTarget.addEventListener(\"refresh\", restartRefreshTimer);\n  function getTokenOrUndefined() {\n    if (!token || Date.now() >= token.expires_at) {\n      return undefined;\n    }\n    return token?.access_token;\n  }\n  const getToken = Object.assign(async function getToken() {\n    if (!token || Date.now() >= token.expires_at) {\n      token = await signIn();\n    }\n    return token?.access_token;\n  }, {\n    signIn,\n    refresh,\n    signOut,\n    rmTimeout,\n    getTokenOrUndefined,\n    addEventListener: eventTarget.addEventListener.bind(eventTarget),\n    removeEventListener: eventTarget.removeEventListener.bind(eventTarget)\n  });\n  return {\n    getToken,\n    makeTokenAndSaveRefresh\n  };\n}\nexport function createAuthorizationServer(ctxPath, url) {\n  const issuer = `${new URL(ctxPath, url + \"/\")}`;\n  return {\n    token_endpoint: `${issuer}/api/oauth2/token`,\n    authorization_endpoint: `${issuer}/api/oauth2/authorize`,\n    revocation_endpoint: `${issuer}/api/oauth2/revoke_token`,\n    issuer\n  };\n}","/*\n * Copyright 2024 Palantir Technologies, Inc. All rights reserved.\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport { clientCredentialsGrantRequest, customFetch, processClientCredentialsResponse } from \"oauth4webapi\";\nimport { common, createAuthorizationServer } from \"./common.js\";\nimport { throwIfError } from \"./throwIfError.js\";\n\n/**\n * @param client_id\n * @param client_secret\n * @param url the base url of your foundry server\n * @param scopes\n * @param fetchFn\n * @param ctxPath\n * @returns which can be used as a token provider\n */\nexport function createConfidentialOauthClient(client_id, client_secret, url, scopes = [\"api:read-data\", \"api:write-data\"], fetchFn = globalThis.fetch, ctxPath = \"multipass\") {\n  const client = {\n    client_id,\n    client_secret\n  };\n  const authServer = createAuthorizationServer(ctxPath, url);\n  const oauthHttpOptions = {\n    [customFetch]: fetchFn\n  };\n  const {\n    getToken,\n    makeTokenAndSaveRefresh\n  } = common(client, authServer, _signIn, oauthHttpOptions, undefined, undefined);\n  async function _signIn() {\n    return makeTokenAndSaveRefresh(throwIfError(await processClientCredentialsResponse(authServer, client, await clientCredentialsGrantRequest(authServer, client, new URLSearchParams({\n      scope: scopes.join(\" \")\n    }), oauthHttpOptions))), \"signIn\");\n  }\n  return getToken;\n}","/*\n * Copyright 2024 Palantir Technologies, Inc. All rights reserved.\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport invariant from \"tiny-invariant\";\nexport function processOptionsAndAssignDefaults(url, redirect_uri, useHistory, loginPage, postLoginPage, scopes, fetchFn, ctxPath) {\n  let options = {};\n  if (typeof useHistory === \"object\") {\n    !(!loginPage && !postLoginPage && !scopes && !fetchFn && !ctxPath) ? process.env.NODE_ENV !== \"production\" ? invariant(false, \"If useHistory is an object, other options should not be provided\") : invariant(false) : void 0;\n    options = useHistory;\n  } else {\n    options = {\n      useHistory,\n      loginPage,\n      postLoginPage,\n      scopes,\n      fetchFn,\n      ctxPath\n    };\n  }\n  !url ? process.env.NODE_ENV !== \"production\" ? invariant(false, \"url is required\") : invariant(false) : void 0;\n  !redirect_uri ? process.env.NODE_ENV !== \"production\" ? invariant(false, \"redirectUrl is required\") : invariant(false) : void 0;\n\n  // Assign defaults\n  return {\n    useHistory: options.useHistory ?? true,\n    loginPage: options.loginPage,\n    postLoginPage: options.postLoginPage || window.location.toString(),\n    scopes: options.scopes ?? [\"api:read-data\", \"api:write-data\"],\n    fetchFn: options.fetchFn ?? globalThis.fetch,\n    ctxPath: options.ctxPath ?? \"multipass\",\n    refreshTokenMarker: options.refreshTokenMarker\n  };\n}","/*\n * Copyright 2024 Palantir Technologies, Inc. All rights reserved.\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport delay from \"delay\";\nimport { authorizationCodeGrantRequest, calculatePKCECodeChallenge, customFetch, generateRandomCodeVerifier, generateRandomState, processAuthorizationCodeOAuth2Response, refreshTokenGrantRequest, validateAuthResponse } from \"oauth4webapi\";\nimport { common, createAuthorizationServer, readLocal, readSession, removeLocal, removeSession, saveLocal, saveSession } from \"./common.js\";\nimport { throwIfError } from \"./throwIfError.js\";\nimport { processOptionsAndAssignDefaults } from \"./utils.js\";\n\n/**\n * Creates a PublicOauthClient for authentication.\n *\n * @param {string} clientId - The client_id from the OAuth configuration on the server\n * @param {string} url - The base URL of your Foundry server\n * @param {string} redirectUrl - The URL configured for redirect in the OAuth configuration on the server\n * @param {PublicOauthClientOptions} options - Additional options for the client\n * @returns {PublicOauthClient} A client that can be used as a token provider\n */\n\n/**\n * Creates a PublicOauthClient for authentication.\n *\n * @param {string} clientId - The client_id from the OAuth configuration on the server\n * @param {string} url - The base URL of your Foundry server\n * @param {string} redirectUrl - The URL configured for redirect in the OAuth configuration on the server\n * @param {boolean} useHistory - If true, uses `history.replaceState()`, otherwise uses `window.location.assign()` (defaults to true)\n * @param {string} loginPage - Custom landing page URL prior to logging in\n * @param {string} postLoginPage - URL to return to after completed authentication cycle (defaults to `window.location.toString()`)\n * @param {string[]} scopes - OAuth scopes to request. If not provided, defaults to `[\"api:read-data\", \"api:write-data\"]`\n * @param {typeof globalThis.fetch} fetchFn - Custom fetch function to use for requests (defaults to `globalThis.fetch`)\n * @param {string} ctxPath - Context path for the authorization server (defaults to \"multipass\")\n * @returns {PublicOauthClient} A client that can be used as a token provider\n */\n\nexport function createPublicOauthClient(client_id, url, redirect_uri, useHistory, loginPage, postLoginPage, scopes, fetchFn, ctxPath) {\n  let refreshTokenMarker;\n  ({\n    useHistory,\n    loginPage,\n    postLoginPage,\n    scopes,\n    fetchFn,\n    ctxPath,\n    refreshTokenMarker\n  } = processOptionsAndAssignDefaults(url, redirect_uri, useHistory, loginPage, postLoginPage, scopes, fetchFn, ctxPath));\n  const client = {\n    client_id,\n    token_endpoint_auth_method: \"none\"\n  };\n  const authServer = createAuthorizationServer(ctxPath, url);\n  const oauthHttpOptions = {\n    [customFetch]: fetchFn\n  };\n  const {\n    makeTokenAndSaveRefresh,\n    getToken\n  } = common(client, authServer, _signIn, oauthHttpOptions, maybeRefresh.bind(globalThis, true), refreshTokenMarker);\n\n  // as an arrow function, `useHistory` is known to be a boolean\n  const go = async x => {\n    if (useHistory) {\n      window.history.replaceState({}, \"\", x);\n      return;\n    } else window.location.assign(x);\n    await delay(1000);\n    throw new Error(\"Unable to redirect\");\n  };\n  async function maybeRefresh(expectRefreshToken) {\n    const {\n      refresh_token,\n      refreshTokenMarker: lastRefreshTokenMarker\n    } = readLocal(client);\n    if (!refresh_token || lastRefreshTokenMarker !== refreshTokenMarker) {\n      if (expectRefreshToken) throw new Error(\"No refresh token found\");\n      return;\n    }\n    try {\n      // note, we don't use processRefreshTokenResponse because the mp oauth implementation\n      // doesn't do refresh tokens quite right and this lets us skip the id check\n      const result = makeTokenAndSaveRefresh(throwIfError(await processAuthorizationCodeOAuth2Response(authServer, client, await refreshTokenGrantRequest(authServer, client, refresh_token, oauthHttpOptions))), \"refresh\");\n      if (result && window.location.pathname === new URL(redirect_uri).pathname) {\n        const {\n          oldUrl\n        } = readSession(client);\n        // don't block on the redirect\n        void go(oldUrl ?? \"/\");\n      }\n      return result;\n    } catch (e) {\n      if (process.env.NODE_ENV !== \"production\") {\n        // eslint-disable-next-line no-console\n        console.warn(\"Failed to get OAuth2 refresh token. Removing refresh token\", e);\n      }\n      removeLocal(client);\n      if (expectRefreshToken) {\n        throw new Error(\"Could not refresh token\");\n      }\n    }\n  }\n  async function maybeHandleAuthReturn() {\n    const {\n      state,\n      oldUrl,\n      codeVerifier\n    } = readSession(client);\n    if (!codeVerifier) return;\n    try {\n      const ret = makeTokenAndSaveRefresh(throwIfError(await processAuthorizationCodeOAuth2Response(authServer, client, await authorizationCodeGrantRequest(authServer, client, throwIfError(validateAuthResponse(authServer, client, new URL(window.location.href), state)), redirect_uri, codeVerifier, oauthHttpOptions))), \"signIn\");\n      void go(oldUrl);\n      return ret;\n    } catch (e) {\n      if (process.env.NODE_ENV !== \"production\") {\n        // eslint-disable-next-line no-console\n        console.warn(\"Failed to get OAuth2 token using PKCE, removing PKCE and starting a new auth flow\", e);\n      }\n      removeLocal(client);\n      removeSession(client);\n      throw e;\n    }\n  }\n\n  // As an arrow function, `scopes` and `postLoginPage` are known at compile time\n  const initiateLoginRedirect = async () => {\n    if (loginPage && window.location.href !== loginPage && window.location.pathname !== loginPage) {\n      saveLocal(client, {});\n      saveSession(client, {\n        oldUrl: postLoginPage\n      });\n      await go(loginPage);\n      return;\n    }\n    const state = generateRandomState();\n    const codeVerifier = generateRandomCodeVerifier();\n    const oldUrl = readSession(client).oldUrl ?? window.location.toString();\n    saveLocal(client, {});\n    saveSession(client, {\n      codeVerifier,\n      state,\n      oldUrl\n    });\n    window.location.assign(`${authServer.authorization_endpoint}?${new URLSearchParams({\n      client_id,\n      response_type: \"code\",\n      state,\n      redirect_uri,\n      code_challenge: await calculatePKCECodeChallenge(codeVerifier),\n      code_challenge_method: \"S256\",\n      scope: [\"offline_access\", ...scopes].join(\" \")\n    })}`);\n\n    // Give time for redirect to happen\n    await delay(1000);\n    throw new Error(\"Unable to redirect\");\n  };\n\n  /** Will throw if there is no token! */\n  async function _signIn() {\n    // 1. Check if we have a refresh token in local storage\n    return (await maybeRefresh()\n    // 2. If there is no refresh token we are likely trying to perform the callback\n    ) ?? (await maybeHandleAuthReturn())\n    // 3. If we haven't been able to load the token from one of the two above ways, we need to make the initial auth request\n    ?? (await initiateLoginRedirect());\n  }\n  return getToken;\n}"]}

package/build/{browser/createPublicOauthClient.d.ts → cjs/index.d.cts}

@@ -1,5 +1,43 @@
-import type { PublicOauthClient } from "./PublicOauthClient.js";
-export interface PublicOauthClientOptions {
+interface Token {
+    readonly access_token: string;
+    readonly expires_in: number;
+    readonly refresh_token?: string;
+    readonly expires_at: number;
+}
+
+type Events = {
+    signIn: CustomEvent<Token>;
+    signOut: Event;
+    refresh: CustomEvent<Token>;
+};
+interface BaseOauthClient<K extends keyof Events & string> {
+    (): Promise<string>;
+    getTokenOrUndefined: () => string | undefined;
+    signIn: () => Promise<Token>;
+    signOut: () => Promise<void>;
+    addEventListener: <T extends K>(type: T, listener: ((evt: Events[T]) => void) | null, options?: boolean | AddEventListenerOptions) => void;
+    removeEventListener: <T extends K>(type: T, callback: ((evt: Events[T]) => void) | null, options?: EventListenerOptions | boolean) => void;
+}
+
+interface ConfidentialOauthClient extends BaseOauthClient<"signIn" | "signOut"> {
+}
+
+/**
+ * @param client_id
+ * @param client_secret
+ * @param url the base url of your foundry server
+ * @param scopes
+ * @param fetchFn
+ * @param ctxPath
+ * @returns which can be used as a token provider
+ */
+declare function createConfidentialOauthClient(client_id: string, client_secret: string, url: string, scopes?: string[], fetchFn?: typeof globalThis.fetch, ctxPath?: string): ConfidentialOauthClient;
+
+interface PublicOauthClient extends BaseOauthClient<"signIn" | "signOut" | "refresh"> {
+    refresh: () => Promise<Token | undefined>;
+}
+
+interface PublicOauthClientOptions {
     /**
      * If true, uses `history.replaceState()`, otherwise uses `window.location.assign()` (defaults to true)
      */
@@ -38,7 +76,7 @@ export interface PublicOauthClientOptions {
  * @param {PublicOauthClientOptions} options - Additional options for the client
  * @returns {PublicOauthClient} A client that can be used as a token provider
  */
-export declare function createPublicOauthClient(clientId: string, url: string, redirectUrl: string, options?: PublicOauthClientOptions): PublicOauthClient;
+declare function createPublicOauthClient(clientId: string, url: string, redirectUrl: string, options?: PublicOauthClientOptions): PublicOauthClient;
 /**
  * Creates a PublicOauthClient for authentication.
  *
@@ -53,5 +91,6 @@ export declare function createPublicOauthClient(clientId: string, url: string, r
  * @param {string} ctxPath - Context path for the authorization server (defaults to "multipass")
  * @returns {PublicOauthClient} A client that can be used as a token provider
  */
-export declare function createPublicOauthClient(client_id: string, url: string, redirectUrl: string, useHistory?: boolean, loginPage?: string, postLoginPage?: string, scopes?: string[], fetchFn?: typeof globalThis.fetch, ctxPath?: string): PublicOauthClient;
-//# sourceMappingURL=createPublicOauthClient.d.ts.map
+declare function createPublicOauthClient(client_id: string, url: string, redirectUrl: string, useHistory?: boolean, loginPage?: string, postLoginPage?: string, scopes?: string[], fetchFn?: typeof globalThis.fetch, ctxPath?: string): PublicOauthClient;
+
+export { type PublicOauthClient, createConfidentialOauthClient, createPublicOauthClient };