@schibsted/account-sdk-browser 6.0.0-alpha.1 → 6.0.0-alpha.10

package/dist/index.js

@@ -0,0 +1,828 @@
+//#region src/sdk-error.ts
+var e = [
+	"boolean",
+	"number",
+	"string"
+], t = class extends Error {
+	code;
+	constructor(e, t) {
+		if (super(e), this.name = "SDKError", t) try {
+			Object.assign(this, t);
+		} catch {}
+	}
+	toString() {
+		let t = `${this.name}: ${this.message}`, n = Object.keys(this).filter((t) => t !== "name" && e.includes(typeof this[t])).map((e) => `    ${e}: ${this[e]}`).join("\n");
+		return n ? `${t}\n${n}` : t;
+	}
+};
+//#endregion
+//#region src/cache.ts
+function n(e) {
+	if (!e) return !1;
+	try {
+		let t = e(), n = "x-x-x-x".replace(/x/g, () => String(Math.random())), r = "TEST-VALUE";
+		t.setItem(n, r);
+		let i = t.getItem(n);
+		return t.removeItem(n), i === r;
+	} catch {
+		return !1;
+	}
+}
+var r = class {
+	store;
+	get;
+	set;
+	delete;
+	constructor(e) {
+		this.store = e, this.get = (e) => this.store.getItem(e), this.set = (e, t) => this.store.setItem(e, t), this.delete = (e) => this.store.removeItem(e);
+	}
+}, i = class {
+	store;
+	get;
+	set;
+	delete;
+	constructor() {
+		this.store = {}, this.get = (e) => this.store[e], this.set = (e, t) => {
+			this.store[e] = t;
+		}, this.delete = (e) => {
+			delete this.store[e];
+		};
+	}
+}, a = 2 ** 31 - 1, o = class {
+	cache;
+	type;
+	constructor(e) {
+		e && n(e) ? (this.cache = new r(e()), this.type = "WebStorage") : (this.cache = new i(), this.type = "ObjectLiteralStorage");
+	}
+	get(e) {
+		function n(e) {
+			if (e == null) return null;
+			try {
+				return JSON.parse(e);
+			} catch {
+				return null;
+			}
+		}
+		try {
+			let t = n(this.cache.get(e));
+			return t && Number.isInteger(t.expiresOn) && t.expiresOn > Date.now() ? t.value : (this.delete(e), null);
+		} catch (e) {
+			throw new t(String(e));
+		}
+	}
+	set(e, n, r = 0) {
+		if (!(r <= 0)) {
+			r = Math.min(a, r);
+			try {
+				let t = Math.floor(Date.now() + r);
+				this.cache.set(e, JSON.stringify({
+					expiresOn: t,
+					value: n
+				})), setTimeout(() => this.delete(e), r);
+			} catch (e) {
+				throw new t(String(e));
+			}
+		}
+	}
+	delete(e) {
+		try {
+			this.cache.delete(e);
+		} catch (e) {
+			throw new t(String(e));
+		}
+	}
+}, s = {
+	ENDPOINTS: {
+		SPiD: {
+			LOCAL: "http://id.localhost",
+			DEV: "https://identity-dev.schibsted.com",
+			PRE: "https://identity-pre.schibsted.com",
+			PRO: "https://login.schibsted.com",
+			PRO_NO: "https://payment.schibsted.no",
+			PRO_FI: "https://login.schibsted.fi",
+			PRO_DK: "https://login.schibsted.dk"
+		},
+		BFF: {
+			LOCAL: "http://id.localhost/authn/",
+			DEV: "https://identity-dev.schibsted.com/authn/",
+			PRE: "https://identity-pre.schibsted.com/authn/",
+			PRO: "https://login.schibsted.com/authn/",
+			PRO_NO: "https://payment.schibsted.no/authn/",
+			PRO_FI: "https://login.schibsted.fi/authn/",
+			PRO_DK: "https://login.schibsted.dk/authn/"
+		},
+		SESSION_SERVICE: {
+			LOCAL: "http://session-service.id.localhost",
+			DEV: "https://session-service.identity-dev.schibsted.com",
+			PRE: "https://session-service.identity-pre.schibsted.com",
+			PRO: "https://session-service.login.schibsted.com",
+			PRO_NO: "https://session-service.payment.schibsted.no",
+			PRO_FI: "https://session-service.login.schibsted.fi",
+			PRO_DK: "https://session-service.login.schibsted.dk"
+		}
+	},
+	NAMESPACE: {
+		LOCAL: "id.localhost",
+		DEV: "schibsted.com",
+		PRE: "schibsted.com",
+		PRO: "schibsted.com",
+		PRO_NO: "spid.no",
+		PRO_FI: "schibsted.fi",
+		PRO_DK: "schibsted.dk"
+	}
+}, c = s.ENDPOINTS, l = s.NAMESPACE;
+//#endregion
+//#region src/validate.ts
+function u(e, n = "Assertion failed") {
+	if (!e) throw new t(n);
+}
+function d(e) {
+	return typeof e == "string";
+}
+function f(e) {
+	return typeof e == "string" && e.length > 0;
+}
+function p(e) {
+	return typeof e == "object" && !!e;
+}
+function m(e) {
+	return p(e) && Object.keys(e).length > 0;
+}
+function h(e, ...t) {
+	try {
+		let n = new URL(e);
+		return t.every((e) => n[e]);
+	} catch {
+		return !1;
+	}
+}
+function g(e) {
+	return typeof e == "function";
+}
+function _(e, t, n = !1) {
+	return d(e) && Array.isArray(t) ? n ? t.indexOf(e) !== -1 : t.some((t) => d(t) && e.toUpperCase() === t.toUpperCase()) : !1;
+}
+//#endregion
+//#region src/object.ts
+function v(...e) {
+	let n = {};
+	if (!(e && e.length)) throw new t("No objects to clone");
+	return e.forEach((e) => {
+		u(p(e)), m(e) && Object.entries(e).forEach(([e, t]) => {
+			t !== void 0 && (n[e] = p(t) ? y(t) : t);
+		});
+	}), n;
+}
+function y(e) {
+	return u(typeof e == "object", `obj should be an object (even null) but it is ${e}`), JSON.parse(JSON.stringify(e)) || e;
+}
+//#endregion
+//#region src/popup.ts
+function b(e) {
+	return u(p(e), `Object must be an object but it is '${e}'`), Object.keys(e).map((t) => `${t}=${e[t]}`).join(",");
+}
+var ee = {
+	scrollbars: "yes",
+	location: "yes",
+	status: "no",
+	menubar: "no",
+	toolbar: "no",
+	resizable: "yes"
+};
+function te(e, t, n = "", r = {}) {
+	u(p(e), `window was supposed to be an object but it is ${e}`), u(p(e.screen), "window should be a valid Window object but it lacks a 'screen' property"), u(g(e.open), "window should be a valid Window object but it lacks an 'open' function"), u(h(t), "Invalid URL for popup");
+	let { height: i, width: a } = e.screen, o = v(ee, r), { width: s, height: c } = o;
+	typeof s == "number" && Number.isFinite(s) && Number.isFinite(a) && (o.left = (a - s) / 2), typeof c == "number" && Number.isFinite(c) && Number.isFinite(i) && (o.top = (i - c) / 2);
+	let l = b(o);
+	return e.open(t, n, l);
+}
+//#endregion
+//#region src/url.ts
+function x(e, t) {
+	return u(f(e), `"url" param must be a non empty string: ${typeof e}`), m(t) && h(t[e]) ? t[e] : (u(h(e, "hostname"), `Bad URL given: '${e}'`), e);
+}
+//#endregion
+//#region src/rest-client.ts
+var ne = (e) => e.map((e) => p(e) ? JSON.stringify(e, null, 2) : e).join(" "), S = (e, ...t) => {
+	e && e(ne(t));
+};
+function C(e) {
+	let t = {
+		"!": "%21",
+		"'": "%27",
+		"(": "%28",
+		")": "%29",
+		"~": "%7E",
+		"%20": "+",
+		"%00": "\0"
+	};
+	return encodeURIComponent(e).replace(/[!'()~]|%20|%00/g, (e) => t[e]);
+}
+var re = () => window.fetch && window.fetch.bind(window), w = () => {
+	throw new t("fetch is not available in this environment");
+}, T = class e {
+	url;
+	defaultParams;
+	log;
+	fetch;
+	constructor({ serverUrl: e = "PRE", envDic: t, fetch: n = re() ?? w, log: r, defaultParams: i = {} }) {
+		u(p(i), "defaultParams should be a non-null object");
+		let a = x(e, t ?? {}), o = a.endsWith("/") ? a : `${a}/`;
+		this.url = new URL(o), this.defaultParams = i, r && (u(g(r), `log must be a function but it is ${r}`), this.log = r), this.fetch = n;
+	}
+	async go(e) {
+		let { method: n, headers: r, pathname: i, data: a = {}, useDefaultParams: o = !0, fetchOptions: s = {
+			method: e.method,
+			credentials: "include"
+		}, parseResponse: c } = e;
+		u(f(n), `Method must be a non empty string but it is "${n}"`), u(f(i), `Pathname must be string but it is "${i}"`), u(p(a), "data must be a non-null object"), s.headers = p(r) ? r : {};
+		let l = this.makeUrl(i, a, o);
+		S(this.log, "Request:", n.toUpperCase(), l), S(this.log, "Request Headers:", s.headers), S(this.log, "Request Body:", s.body);
+		try {
+			let e = await this.fetch(l, s);
+			if (S(this.log, "Response Code:", e.status, e.statusText), !e.ok) throw new t(e.statusText, { code: e.status });
+			let n = await e.json();
+			return S(this.log, "Response Parsed:", n), c ? c(n) : n;
+		} catch (e) {
+			let r = d(e) ? e : "Unknown RESTClient error";
+			p(e) && d(e.message) && (r = e.message);
+			let i = p(e) ? e : void 0;
+			throw new t(`Failed to '${n}' '${l}': '${r}'`, i);
+		}
+	}
+	makeUrl(t = "", n = {}, r = !0) {
+		let i = t.startsWith("/") ? t.slice(1) : t, a = new URL(i, this.url);
+		return a.search = e.search(n, r, this.defaultParams), a.href;
+	}
+	get(e, t, n) {
+		return n ? this.go({
+			method: "GET",
+			pathname: e,
+			data: t,
+			parseResponse: n
+		}) : this.go({
+			method: "GET",
+			pathname: e,
+			data: t
+		});
+	}
+	static search(e, t, n) {
+		let r = t ? v(n, e) : v(e);
+		return Object.keys(r).filter((e) => r[e] !== "").map((e) => `${C(e)}=${C(String(r[e]))}`).join("&");
+	}
+}, E = (e) => Object.hasOwn(l, e), D = (e, t) => (u(f(t), "clientId parameter is required"), u(E(e), `env parameter is invalid: ${e}`), `sdrn:${l[e]}:client:${t}`), O = ({ serverUrl: e, log: t, defaultParams: n }) => new T({
+	serverUrl: e,
+	log: t,
+	defaultParams: n
+});
+//#endregion
+//#region src/session-response.ts
+function k(e) {
+	return p(e) && typeof e.result == "boolean";
+}
+function A(e) {
+	return k(e) && e.result === !0;
+}
+function j(e) {
+	return p(e) && !!e.error;
+}
+function M(e) {
+	return p(e) && Object.keys(e).length === 1 && d(e.redirectURL);
+}
+function N(e) {
+	return A(e) && typeof e.userId == "number";
+}
+function P(e) {
+	return M(e) || j(e) || k(e) || p(e) ? e : {};
+}
+//#endregion
+//#region src/spid-talk.ts
+function F(e) {
+	(!e.SPiD || typeof e.SPiD != "object") && (e.SPiD = {}), (!e.SPiD.Talk || typeof e.SPiD.Talk != "object") && (e.SPiD.Talk = {}), g(e.SPiD.Talk.response) || (e.SPiD.Talk.response = (t, n) => e[t](n));
+}
+//#endregion
+//#region src/types/login.ts
+var I = (e) => typeof e.openSimplifiedLoginWidget == "function", L = "6.0.0-alpha.10", R = "hasSession-cache", z = "sessionCallBlocked-cache", B = 1e3 * 60 * 5, V = "tab-id-cache", H = Math.floor(Math.random() * 1e5), U = 1e3 * 60 * 60 * 24 * 30, W = () => window, G = class {
+	eventTarget = new EventTarget();
+	window;
+	clientId;
+	redirectUri;
+	env;
+	log;
+	callbackBeforeRedirect;
+	sessionStorageCache;
+	localStorageCache;
+	enableSessionCaching;
+	spid;
+	oauthService;
+	bffService;
+	sessionService;
+	globalSessionService;
+	usedSessionServiceGetSessionEndpoint;
+	session;
+	hasSessionInProgress;
+	popup;
+	setVarnishCookie;
+	varnishExpiresIn;
+	varnishCookieDomain;
+	constructor({ clientId: e, redirectUri: t, sessionDomain: n, env: r = "PRE", log: i, window: a = W(), callbackBeforeRedirect: s = () => {} }) {
+		u(f(e), "clientId parameter is required"), u(p(a), "The reference to window is missing"), u(!t || h(t), "redirectUri parameter is invalid"), u(f(n) && h(n), "sessionDomain parameter is not a valid URL"), u(d(r), `env parameter is invalid: ${r}`), F(a), this.window = a, this.clientId = e, this.redirectUri = t, this.env = r, this.log = i, this.callbackBeforeRedirect = s, this.sessionStorageCache = new o(() => this.window && this.window.sessionStorage), this.localStorageCache = new o(() => this.window && this.window.localStorage), this.enableSessionCaching = !0, this.session = {};
+		let l = {
+			client_id: this.clientId,
+			redirect_uri: this.redirectUri
+		}, m = D(this.env, this.clientId);
+		this.spid = O({
+			serverUrl: x(r, c.SPiD),
+			log: this.log,
+			defaultParams: l
+		}), this.oauthService = O({
+			serverUrl: x(r, c.SPiD),
+			log: this.log,
+			defaultParams: l
+		}), this.bffService = O({
+			serverUrl: x(r, c.BFF),
+			log: this.log,
+			defaultParams: l
+		}), this.sessionService = O({
+			serverUrl: n,
+			log: this.log,
+			defaultParams: {
+				client_sdrn: m,
+				redirect_uri: this.redirectUri,
+				sdk_version: L
+			}
+		}), this.globalSessionService = O({
+			serverUrl: x(r, c.SESSION_SERVICE),
+			log: this.log,
+			defaultParams: {
+				client_sdrn: m,
+				sdk_version: L
+			}
+		}), this.usedSessionServiceGetSessionEndpoint = this.sessionService.url.pathname && this.sessionService.url.pathname.length <= 1 ? "v2/session" : "session", this._unblockSessionCall();
+	}
+	addEventListener(e, t) {
+		this.eventTarget.addEventListener(e, t);
+	}
+	removeEventListener(e, t) {
+		this.eventTarget.removeEventListener(e, t);
+	}
+	_getTabId() {
+		if (this.enableSessionCaching) {
+			let e = this.sessionStorageCache.get(V);
+			return typeof e == "number" ? e : (this.sessionStorageCache.set(V, H, U), H);
+		}
+	}
+	_isSessionCallBlocked() {
+		return !!this.localStorageCache.get(z);
+	}
+	_blockSessionCall() {
+		this.localStorageCache.set(z, !0, B);
+	}
+	_unblockSessionCall() {
+		this.localStorageCache.delete(z);
+	}
+	_closePopup() {
+		this.popup &&= (this.popup.closed || this.popup.close(), null);
+	}
+	enableVarnishCookie(e) {
+		if (typeof e != "object") throw new t("VarnishCookieOptions must be an object");
+		let { expiresIn: n = 0, domain: r } = e;
+		u(Number.isInteger(n), "'expiresIn' must be an integer"), u(n >= 0, "'expiresIn' cannot be negative"), this.setVarnishCookie = !0, this.varnishExpiresIn = n, this.varnishCookieDomain = r;
+	}
+	_maybeSetVarnishCookie(e) {
+		if (!this.setVarnishCookie || !k(e)) return;
+		let t = /* @__PURE__ */ new Date();
+		if (this.varnishExpiresIn || typeof e.expiresIn == "number" && e.expiresIn > 0) {
+			let n = this.varnishExpiresIn || e.expiresIn || 0;
+			t.setTime(t.getTime() + n * 1e3);
+		} else t.setTime(0);
+		let n = this.varnishCookieDomain || (typeof e.baseDomain == "string" ? e.baseDomain : this.window.location.hostname) || "", r = [
+			`SP_ID=${e.sp_id}`,
+			`expires=${t.toUTCString()}`,
+			"path=/",
+			`domain=.${n}`
+		].join("; ");
+		document.cookie = r;
+	}
+	_maybeClearVarnishCookie() {
+		this.setVarnishCookie && this._clearVarnishCookie();
+	}
+	_clearVarnishCookie() {
+		let e = this.session && k(this.session) && typeof this.session.baseDomain == "string" ? this.session.baseDomain : this.window.location.hostname, t = this.varnishCookieDomain || e || "";
+		document.cookie = `SP_ID=nothing; expires=Thu, 01 Jan 1970 00:00:00 GMT; path=/; domain=.${t}`;
+	}
+	hasSession() {
+		if (this._isSessionCallBlocked()) {
+			let e = P(this.session);
+			return Promise.resolve(M(e) ? {} : e);
+		}
+		if (this.hasSessionInProgress) return this.hasSessionInProgress;
+		let e = !1, n = (n) => {
+			if (j(n)) throw new t("HasSession failed", p(n.error) ? n.error : { description: String(n.error) });
+			return this._maybeSetVarnishCookie(n), e = (k(this.session) && this.session.id) !== (k(n) && n.id), this.session = n, n;
+		}, r = () => {
+			let e = this.sessionStorageCache.get(R);
+			return e ? P(e) : null;
+		}, i = async () => {
+			if (this.enableSessionCaching) {
+				let e = r();
+				if (e) return M(e) ? {} : n(e);
+			}
+			let e = null;
+			try {
+				e = await this.sessionService.get(this.usedSessionServiceGetSessionEndpoint, { tabId: this._getTabId() }, P);
+			} catch (e) {
+				let t = p(e) ? e : void 0;
+				if (t?.code === 400 && this.enableSessionCaching) {
+					let n = 1e3 * (typeof t.expiresIn == "number" ? t.expiresIn : 300);
+					this.sessionStorageCache.set(R, { error: e }, n);
+				} else t && typeof t.code == "number" && t.code >= 500 && t.code < 600 && this.enableSessionCaching && this.sessionStorageCache.set(R, { error: e }, 30 * 1e3);
+				throw e;
+			}
+			if (e) {
+				if (M(e)) return this._blockSessionCall(), await this.callbackBeforeRedirect(), this.sessionService.makeUrl(e.redirectURL, { tabId: this._getTabId() });
+				if (this.enableSessionCaching) {
+					let t = 1e3 * (k(e) && e.expiresIn || 300);
+					this.sessionStorageCache.set(R, e, t);
+				}
+			}
+			return n(e ?? {});
+		};
+		return this.hasSessionInProgress = i().then((t) => (e && typeof t != "string" && this.eventTarget.dispatchEvent(new CustomEvent("sessionUpdated", { detail: t })), this.hasSessionInProgress = !1, typeof t == "string" && (this.window.location.href = t), t), (e) => {
+			throw this.hasSessionInProgress = !1, new t("HasSession failed", e);
+		}), this.hasSessionInProgress;
+	}
+	async isLoggedIn() {
+		try {
+			return k(await this.hasSession());
+		} catch {
+			return !1;
+		}
+	}
+	setSessionCachingEnabled(e) {
+		this.enableSessionCaching = e;
+	}
+	clearCachedUserSession() {
+		this.sessionStorageCache.delete(R);
+	}
+	async isConnected() {
+		try {
+			return A(await this.hasSession());
+		} catch {
+			return !1;
+		}
+	}
+	async getUser() {
+		let e = await this.hasSession();
+		if (!A(e)) throw new t("The user is not connected to this merchant");
+		return y(e);
+	}
+	async getUserId() {
+		let e = await this.hasSession();
+		if (N(e)) return e.userId;
+		throw new t("The user is not connected to this merchant");
+	}
+	async getExternalId(e, n = "") {
+		let r = await this.hasSession(), i = k(r) ? r.pairId : void 0;
+		if (!i) throw new t("pairId missing in user session!");
+		if (!e || e.length === 0) throw new t("externalParty cannot be empty");
+		let a = (e) => Array.from(new Uint8Array(e)).map((e) => e.toString(16).padStart(2, "0")).join(""), o = (e) => crypto.subtle.digest("SHA-256", e);
+		return (async (e) => o(new TextEncoder().encode(e)).then((e) => a(e)))(((e, t, n) => n ? `${e}:${t}:${n}` : `${e}:${t}`)(i, e, n));
+	}
+	async getUserSDRN() {
+		let e = await this.hasSession();
+		if (k(e) && e.sdrn) return e.sdrn;
+		throw new t("Failed to get SDRN from user session");
+	}
+	async getUserUuid() {
+		let e = await this.hasSession();
+		if (k(e) && e.uuid && e.result) return e.uuid;
+		throw new t("The user is not connected to this merchant");
+	}
+	async getUserContextData() {
+		try {
+			return await this.globalSessionService.get("user-context", void 0, (e) => p(e) && d(e.identifier) ? {
+				identifier: e.identifier,
+				display_text: d(e.display_text) ? e.display_text : "",
+				client_name: d(e.client_name) ? e.client_name : "",
+				provider_id: d(e.provider_id) ? e.provider_id : void 0
+			} : null);
+		} catch {
+			return null;
+		}
+	}
+	login({ state: e, acrValues: t, scope: n = "openid", redirectUri: r = this.redirectUri, preferPopup: i = !1, loginHint: a = "", tag: o = "", teaser: s = "", maxAge: c = "", locale: l, oneStepLogin: u = !1, prompt: d = "select_account", xDomainId: f = "", xEnvironmentId: p = "", originCampaign: m = "" }) {
+		this._closePopup(), this.sessionStorageCache.delete(R);
+		let h = this.loginUrl({
+			state: e,
+			acrValues: t,
+			scope: n,
+			redirectUri: r,
+			loginHint: a,
+			tag: o,
+			teaser: s,
+			maxAge: c,
+			locale: l,
+			oneStepLogin: u,
+			prompt: d,
+			xDomainId: f,
+			xEnvironmentId: p,
+			originCampaign: m
+		});
+		return i && (this.popup = te(this.window, h, "Schibsted account", {
+			width: 360,
+			height: 570
+		}), this.popup) ? (this.eventTarget.dispatchEvent(new CustomEvent("loginRequested", { detail: {
+			url: h,
+			method: "popup"
+		} })), this.popup) : (this.eventTarget.dispatchEvent(new CustomEvent("loginRequested", { detail: {
+			url: h,
+			method: "default"
+		} })), this.window.location.href = h, null);
+	}
+	async getSpId() {
+		try {
+			let e = await this.hasSession();
+			if (k(e)) return e.sp_id || null;
+			let t = p(e) && "sp_id" in e ? e.sp_id : void 0;
+			return d(t) ? t : null;
+		} catch {
+			return null;
+		}
+	}
+	logout(e = this.redirectUri) {
+		this.sessionStorageCache.delete(R), this._maybeClearVarnishCookie();
+		let t = this.logoutUrl(e);
+		this.eventTarget.dispatchEvent(new CustomEvent("logoutRequested", { detail: { url: t } })), this.window.location.href = t;
+	}
+	loginUrl({ state: e, acrValues: t = "", scope: n = "openid", redirectUri: r = this.redirectUri, loginHint: i = "", tag: a = "", teaser: o = "", maxAge: s = "", locale: c, oneStepLogin: l = !1, prompt: d = "select_account", xDomainId: p = "", xEnvironmentId: m = "", originCampaign: g = "" }) {
+		return u(!t || _(t, ["", "otp-email"], !0) || t.split(" ").every((e) => _(e, [
+			"password",
+			"otp",
+			"sms",
+			"eid-dk",
+			"eid-no",
+			"eid-se",
+			"eid-fi",
+			"eid"
+		], !0)), `The acrValues parameter is not acceptable: ${t}`), u(h(r), `loginUrl(): redirectUri must be a valid url but is ${r}`), u(f(e), `the state parameter should be a non empty string but it is ${e}`), this.oauthService.makeUrl("oauth/authorize", {
+			response_type: "code",
+			redirect_uri: r,
+			scope: n,
+			state: e,
+			acr_values: t,
+			login_hint: i,
+			tag: a,
+			teaser: o,
+			max_age: s,
+			locale: c,
+			one_step_login: l || "",
+			prompt: t ? "" : d,
+			x_domain_id: p,
+			x_env_id: m,
+			utm_campaign: g
+		});
+	}
+	logoutUrl(e = this.redirectUri) {
+		u(h(e), "logoutUrl(): redirectUri is invalid");
+		let t = { redirect_uri: e };
+		return this.sessionService.makeUrl("logout", t);
+	}
+	accountUrl(e = this.redirectUri) {
+		return this.spid.makeUrl("profile-pages", {
+			response_type: "code",
+			redirect_uri: e
+		});
+	}
+	async showSimplifiedLoginWidget(e, n) {
+		let r = await this.getUserContextData(), i = { client_id: this.clientId };
+		n && n.encoding && (i.encoding = n.encoding);
+		let a = this.bffService.makeUrl("simplified-login-widget", i, !1), o = async (e) => {
+			let t = typeof e.state == "function" ? await e.state() : e.state;
+			return {
+				...e,
+				state: t
+			};
+		};
+		return new Promise((i, s) => {
+			if (!r?.display_text || !r.identifier) {
+				s(new t("Missing user data"));
+				return;
+			}
+			let c = {
+				displayText: r.display_text,
+				env: this.env,
+				clientName: r.client_name || "",
+				clientId: this.clientId,
+				providerId: r.provider_id,
+				windowWidth: () => window.innerWidth,
+				windowOnResize: (e) => {
+					window.onresize = e;
+				}
+			};
+			n && n.locale && (c.locale = n.locale);
+			let l = async () => {
+				this.login(Object.assign(await o(e), { loginHint: r.identifier }));
+			}, u = async () => {
+				this.login(Object.assign(await o(e), {
+					loginHint: r.identifier,
+					prompt: "login"
+				}));
+			}, d = () => {
+				this.eventTarget.dispatchEvent(new Event("simplifiedLoginOpened"));
+			}, f = () => {
+				this.eventTarget.dispatchEvent(new Event("simplifiedLoginCancelled"));
+			};
+			if (I(window)) return window.openSimplifiedLoginWidget(c, l, u, d, f), i(!0);
+			let p = document.createElement("script");
+			p.type = "text/javascript", p.src = a, p.onload = () => {
+				if (!I(window)) {
+					s(new t("Error when loading simplified login widget content"));
+					return;
+				}
+				window.openSimplifiedLoginWidget(c, l, u, d, f), i(!0);
+			}, p.onerror = () => {
+				s(new t("Error when loading simplified login widget content"));
+			}, document.getElementsByTagName("body")[0].appendChild(p);
+		});
+	}
+};
+//#endregion
+//#region src/has-access-response.ts
+function K(e) {
+	if (!p(e)) throw new t("Invalid hasAccess response");
+	let { entitled: n, ttl: r, allowedFeatures: i, userId: a, uuid: o, sig: s } = e;
+	if (typeof n != "boolean" || typeof r != "number" || !Array.isArray(i) || typeof a != "number" || !d(o) || !d(s)) throw new t("Invalid hasAccess response");
+	return {
+		entitled: n,
+		ttl: r,
+		allowedFeatures: i.filter(d),
+		userId: a,
+		uuid: o,
+		sig: s
+	};
+}
+//#endregion
+//#region src/monetization.ts
+var q = () => window, J = class {
+	cache;
+	sessionService;
+	pendingHasAccessRequests;
+	constructor({ clientId: e, redirectUri: t, env: n = "PRE", sessionDomain: r, window: i = q() }) {
+		F(i), u(f(e), "clientId parameter is required"), u(d(n), `env parameter is invalid: ${n}`);
+		let a = D(n, e);
+		this.cache = new o(() => i && i.sessionStorage), this.pendingHasAccessRequests = {}, r && (u(h(r), "sessionDomain parameter is not a valid URL"), this.sessionService = O({
+			serverUrl: r,
+			defaultParams: {
+				client_sdrn: a,
+				redirect_uri: t,
+				sdk_version: L
+			}
+		}));
+	}
+	async hasAccess(e, n) {
+		if (!this.sessionService) throw new t("hasAccess can only be called if 'sessionDomain' is configured");
+		if (!n) throw new t("'userId' must be specified");
+		if (!Array.isArray(e)) throw new t("'productIds' must be an array");
+		let r = [...e].sort(), i = this.accessCacheKey(r, n), a = this.cache.get(i);
+		if (!a) {
+			this.pendingHasAccessRequests[i] || (this.pendingHasAccessRequests[i] = this.sessionService.get(`/hasAccess/${r.join(",")}`, void 0, K));
+			let e = this.pendingHasAccessRequests[i];
+			try {
+				a = await e;
+				let t = a.ttl;
+				this.cache.set(i, a, t * 1e3);
+			} finally {
+				this.pendingHasAccessRequests[i] === e && delete this.pendingHasAccessRequests[i];
+			}
+		}
+		return a.entitled ? a : null;
+	}
+	clearCachedAccessResult(e, t) {
+		this.cache.delete(this.accessCacheKey(e, t));
+	}
+	accessCacheKey(e, t) {
+		return `prd_${[...e].sort()}_${t}`;
+	}
+}, Y = (e) => e || (typeof window > "u" ? void 0 : window), X = class {
+	#e;
+	#t;
+	#n;
+	constructor(e) {
+		let n = Y(e.window);
+		if (!n) throw new t("Schibsted Account SDK is not available in this browser context");
+		if (n.schAccount) throw new t("Schibsted Account SDK has already been initialized");
+		let { log: r, callbackBeforeRedirect: i, defaultProductIds: a, varnish: o } = e, s = {
+			clientId: e.clientId,
+			redirectUri: e.redirectUri,
+			sessionDomain: e.sessionDomain,
+			env: e.env,
+			window: n
+		};
+		if (this.#e = new G({
+			...s,
+			log: r,
+			callbackBeforeRedirect: i
+		}), a !== void 0 && !Array.isArray(a)) throw new t("Account defaultProductIds config must be an array");
+		if (this.#n = a, o) {
+			if (typeof o != "object" || Array.isArray(o)) throw new t("Account varnish config must be an object");
+			this.#e.enableVarnishCookie(o);
+		}
+		this.#t = new J(s), n.schAccount = this, n.dispatchEvent(new CustomEvent("schAccount:ready", { detail: { instance: this } }));
+	}
+	hasSession() {
+		return this.#e.hasSession();
+	}
+	isLoggedIn() {
+		return this.#e.isLoggedIn();
+	}
+	isConnected() {
+		return this.#e.isConnected();
+	}
+	getUser() {
+		return this.#e.getUser();
+	}
+	getUserId() {
+		return this.#e.getUserId();
+	}
+	getExternalId(e, t = "") {
+		return this.#e.getExternalId(e, t);
+	}
+	getUserUuid() {
+		return this.#e.getUserUuid();
+	}
+	getUserSDRN() {
+		return this.#e.getUserSDRN();
+	}
+	getUserContextData() {
+		return this.#e.getUserContextData();
+	}
+	getSpId() {
+		return this.#e.getSpId();
+	}
+	login(e) {
+		return this.#e.login(e);
+	}
+	logout(e) {
+		this.#e.logout(e);
+	}
+	loginUrl(e) {
+		return this.#e.loginUrl(e);
+	}
+	logoutUrl(e) {
+		return this.#e.logoutUrl(e);
+	}
+	accountUrl(e) {
+		return this.#e.accountUrl(e);
+	}
+	showSimplifiedLoginWidget(e, t) {
+		return this.#e.showSimplifiedLoginWidget(e, t);
+	}
+	setSessionCachingEnabled(e) {
+		this.#e.setSessionCachingEnabled(e);
+	}
+	clearCachedUserSession() {
+		this.#e.clearCachedUserSession();
+	}
+	async hasAccess(e = this.#n) {
+		if (!e) throw new t("hasAccess requires productIds or defaultProductIds in the Account config");
+		if (e.length === 0) return null;
+		let n = await this.#e.getUserId();
+		return this.#t.hasAccess(e, n);
+	}
+	clearCachedAccessResult(e, t) {
+		this.#t.clearCachedAccessResult(e, t);
+	}
+	on(e, t) {
+		return this.#e.addEventListener(e, t), this;
+	}
+	off(e, t) {
+		return this.#e.removeEventListener(e, t), this;
+	}
+}, Z = "schAccount:ready", Q = 4e3, $, ie = () => /* @__PURE__ */ Error("Schibsted Account SDK is not available in this browser context"), ae = () => /* @__PURE__ */ Error(`Schibsted Account SDK was not initialized within ${Q} ms`);
+function oe(e) {
+	return new X(e);
+}
+function se() {
+	let e = Y();
+	if (!e) {
+		let e = ie();
+		return console.error(e.message), Promise.reject(e);
+	}
+	return e.schAccount ? Promise.resolve(e.schAccount) : $ || ($ = new Promise((t, n) => {
+		let r, i = () => {
+			e.removeEventListener(Z, a), r !== void 0 && e.clearTimeout(r), $ = void 0;
+		}, a = () => {
+			let n = e.schAccount;
+			n && (i(), t(n));
+		};
+		e.addEventListener(Z, a), r = e.setTimeout(() => {
+			let e = ae();
+			console.error(e.message), i(), n(e);
+		}, Q), a();
+	}), $);
+}
+//#endregion
+export { X as Account, t as SDKError, oe as createAccountSdk, se as getAccountSdk, A as isConnectedSessionResponse, N as isConnectedSessionWithUserIdResponse, j as isSessionFailureResponse, k as isSessionSuccessResponse };
+
+//# sourceMappingURL=index.js.map