@schibsted/account-sdk-browser 6.0.0-alpha.13 → 6.0.0-alpha.15

package/dist/index.js

@@ -115,23 +115,80 @@ var i = class {
 	}
 }, l = c.ENDPOINTS, u = c.NAMESPACE;
 //#endregion
+//#region node_modules/@schibsted/consent-url-utils/lib/esm/consent-manager.js
+function d(e = window) {
+	let t = e._tcf_ || e._scc_;
+	return t ? {
+		advertising: t.getPermissionSync("CMP:advertising"),
+		analytics: t.getPermissionSync("CMP:analytics"),
+		marketing: t.getPermissionSync("CMP:marketing"),
+		personalisation: t.getPermissionSync("CMP:personalisation")
+	} : (console.warn("Consent-query-utils: getConsentsSync called but no consent manager found on window"), null);
+}
+//#endregion
+//#region node_modules/@schibsted/consent-url-utils/lib/esm/serializeConsents.js
+var f = "rejected", p = "v1";
+function m(e) {
+	return Object.values(e).some((e) => e !== null);
+}
+function h(e) {
+	let t = new URLSearchParams();
+	if (!e || !m(e)) return t;
+	let n = [];
+	for (let [t, r] of Object.entries(e)) r === "1" && n.push(t);
+	n.length === 0 && n.push(f);
+	let r = [...new Set(n)].sort();
+	return t.set("consents", r.join(",")), t.set("consent_version", p), t;
+}
+//#endregion
+//#region src/consents.ts
+var g = ["click", "auxclick"];
+function ee(e) {
+	return !e._tcf_ && !e._scc_ ? null : h(d(e));
+}
+function _(e, t) {
+	let n = new URL(e);
+	return t.forEach((e, t) => {
+		n.searchParams.delete(t);
+	}), t.forEach((e, t) => {
+		n.searchParams.append(t, e);
+	}), n.href;
+}
+function te(e) {
+	return (typeof e.composedPath == "function" ? e.composedPath() : [e.target]).find((e) => {
+		let t = e;
+		return !!t && t.tagName === "A" && typeof t.href == "string";
+	});
+}
+function v(e, { isLoginUrl: t, getConsentParams: n }) {
+	let r = (e) => {
+		let r = te(e);
+		if (!r || !t(r.href)) return;
+		let i = n();
+		i.toString() !== "" && (r.href = _(r.href, i));
+	};
+	g.forEach((t) => {
+		e.addEventListener(t, r, !0);
+	});
+}
+//#endregion
 //#region src/validate.ts
-function d(e, n = "Assertion failed") {
+function y(e, n = "Assertion failed") {
 	if (!e) throw new t(n);
 }
-function f(e) {
+function b(e) {
 	return typeof e == "string";
 }
-function p(e) {
+function x(e) {
 	return typeof e == "string" && e.length > 0;
 }
-function m(e) {
+function S(e) {
 	return typeof e == "object" && !!e;
 }
-function h(e) {
-	return m(e) && Object.keys(e).length > 0;
+function C(e) {
+	return S(e) && Object.keys(e).length > 0;
 }
-function g(e, ...t) {
+function w(e, ...t) {
 	try {
 		let n = new URL(e);
 		return t.every((e) => n[e]);
@@ -139,32 +196,32 @@ function g(e, ...t) {
 		return !1;
 	}
 }
-function _(e) {
+function T(e) {
 	return typeof e == "function";
 }
-function v(e, t, n = !1) {
-	return f(e) && Array.isArray(t) ? n ? t.indexOf(e) !== -1 : t.some((t) => f(t) && e.toUpperCase() === t.toUpperCase()) : !1;
+function E(e, t, n = !1) {
+	return b(e) && Array.isArray(t) ? n ? t.indexOf(e) !== -1 : t.some((t) => b(t) && e.toUpperCase() === t.toUpperCase()) : !1;
 }
 //#endregion
 //#region src/object.ts
-function y(...e) {
+function D(...e) {
 	let n = {};
 	if (!(e && e.length)) throw new t("No objects to clone");
 	return e.forEach((e) => {
-		d(m(e)), h(e) && Object.entries(e).forEach(([e, t]) => {
-			t !== void 0 && (n[e] = m(t) ? b(t) : t);
+		y(S(e)), C(e) && Object.entries(e).forEach(([e, t]) => {
+			t !== void 0 && (n[e] = S(t) ? O(t) : t);
 		});
 	}), n;
 }
-function b(e) {
-	return d(typeof e == "object", `obj should be an object (even null) but it is ${e}`), JSON.parse(JSON.stringify(e)) || e;
+function O(e) {
+	return y(typeof e == "object", `obj should be an object (even null) but it is ${e}`), JSON.parse(JSON.stringify(e)) || e;
 }
 //#endregion
 //#region src/popup.ts
-function ee(e) {
-	return d(m(e), `Object must be an object but it is '${e}'`), Object.keys(e).map((t) => `${t}=${e[t]}`).join(",");
+function ne(e) {
+	return y(S(e), `Object must be an object but it is '${e}'`), Object.keys(e).map((t) => `${t}=${e[t]}`).join(",");
 }
-var te = {
+var re = {
 	scrollbars: "yes",
 	location: "yes",
 	status: "no",
@@ -172,24 +229,24 @@ var te = {
 	toolbar: "no",
 	resizable: "yes"
 };
-function ne(e, t, n = "", r = {}) {
-	d(m(e), `window was supposed to be an object but it is ${e}`), d(m(e.screen), "window should be a valid Window object but it lacks a 'screen' property"), d(_(e.open), "window should be a valid Window object but it lacks an 'open' function"), d(g(t), "Invalid URL for popup");
-	let { height: i, width: a } = e.screen, o = y(te, r), { width: s, height: c } = o;
+function k(e, t, n = "", r = {}) {
+	y(S(e), `window was supposed to be an object but it is ${e}`), y(S(e.screen), "window should be a valid Window object but it lacks a 'screen' property"), y(T(e.open), "window should be a valid Window object but it lacks an 'open' function"), y(w(t), "Invalid URL for popup");
+	let { height: i, width: a } = e.screen, o = D(re, r), { width: s, height: c } = o;
 	typeof s == "number" && Number.isFinite(s) && Number.isFinite(a) && (o.left = (a - s) / 2), typeof c == "number" && Number.isFinite(c) && Number.isFinite(i) && (o.top = (i - c) / 2);
-	let l = ee(o);
+	let l = ne(o);
 	return e.open(t, n, l);
 }
 //#endregion
 //#region src/url.ts
-function x(e, t) {
-	return d(p(e), `"url" param must be a non empty string: ${typeof e}`), h(t) && g(t[e]) ? t[e] : (d(g(e, "hostname"), `Bad URL given: '${e}'`), e);
+function A(e, t) {
+	return y(x(e), `"url" param must be a non empty string: ${typeof e}`), C(t) && w(t[e]) ? t[e] : (y(w(e, "hostname"), `Bad URL given: '${e}'`), e);
 }
 //#endregion
 //#region src/rest-client.ts
-var re = (e) => e.map((e) => m(e) ? JSON.stringify(e, null, 2) : e).join(" "), S = (e, ...t) => {
-	e && e(re(t));
+var ie = (e) => e.map((e) => S(e) ? JSON.stringify(e, null, 2) : e).join(" "), j = (e, ...t) => {
+	e && e(ie(t));
 };
-function C(e) {
+function M(e) {
 	let t = {
 		"!": "%21",
 		"'": "%27",
@@ -201,35 +258,35 @@ function C(e) {
 	};
 	return encodeURIComponent(e).replace(/[!'()~]|%20|%00/g, (e) => t[e]);
 }
-var w = () => window.fetch && window.fetch.bind(window), T = () => {
+var ae = () => window.fetch && window.fetch.bind(window), N = () => {
 	throw new t("fetch is not available in this environment");
-}, E = class e {
+}, P = class e {
 	url;
 	defaultParams;
 	log;
 	fetch;
-	constructor({ serverUrl: e = "PRE", envDic: t, fetch: n = w() ?? T, log: r, defaultParams: i = {} }) {
-		d(m(i), "defaultParams should be a non-null object");
-		let a = x(e, t ?? {}), o = a.endsWith("/") ? a : `${a}/`;
-		this.url = new URL(o), this.defaultParams = i, r && (d(_(r), `log must be a function but it is ${r}`), this.log = r), this.fetch = n;
+	constructor({ serverUrl: e = "PRE", envDic: t, fetch: n = ae() ?? N, log: r, defaultParams: i = {} }) {
+		y(S(i), "defaultParams should be a non-null object");
+		let a = A(e, t ?? {}), o = a.endsWith("/") ? a : `${a}/`;
+		this.url = new URL(o), this.defaultParams = i, r && (y(T(r), `log must be a function but it is ${r}`), this.log = r), this.fetch = n;
 	}
 	async go(e) {
 		let { method: n, headers: r, pathname: i, data: a = {}, useDefaultParams: o = !0, fetchOptions: s = {
 			method: e.method,
 			credentials: "include"
 		}, parseResponse: c } = e;
-		d(p(n), `Method must be a non empty string but it is "${n}"`), d(p(i), `Pathname must be string but it is "${i}"`), d(m(a), "data must be a non-null object"), s.headers = m(r) ? r : {};
+		y(x(n), `Method must be a non empty string but it is "${n}"`), y(x(i), `Pathname must be string but it is "${i}"`), y(S(a), "data must be a non-null object"), s.headers = S(r) ? r : {};
 		let l = this.makeUrl(i, a, o);
-		S(this.log, "Request:", n.toUpperCase(), l), S(this.log, "Request Headers:", s.headers), S(this.log, "Request Body:", s.body);
+		j(this.log, "Request:", n.toUpperCase(), l), j(this.log, "Request Headers:", s.headers), j(this.log, "Request Body:", s.body);
 		try {
 			let e = await this.fetch(l, s);
-			if (S(this.log, "Response Code:", e.status, e.statusText), !e.ok) throw new t(e.statusText, { code: e.status });
+			if (j(this.log, "Response Code:", e.status, e.statusText), !e.ok) throw new t(e.statusText, { code: e.status });
 			let n = await e.json();
-			return S(this.log, "Response Parsed:", n), c ? c(n) : n;
+			return j(this.log, "Response Parsed:", n), c ? c(n) : n;
 		} catch (e) {
-			let r = f(e) ? e : "Unknown RESTClient error";
-			m(e) && f(e.message) && (r = e.message);
-			let i = m(e) ? e : void 0;
+			let r = b(e) ? e : "Unknown RESTClient error";
+			S(e) && b(e.message) && (r = e.message);
+			let i = S(e) ? e : void 0;
 			throw new t(`Failed to '${n}' '${l}': '${r}'`, i);
 		}
 	}
@@ -250,42 +307,42 @@ var w = () => window.fetch && window.fetch.bind(window), T = () => {
 		});
 	}
 	static search(e, t, n) {
-		let r = t ? y(n, e) : y(e);
-		return Object.keys(r).filter((e) => r[e] !== "").map((e) => `${C(e)}=${C(String(r[e]))}`).join("&");
+		let r = t ? D(n, e) : D(e);
+		return Object.keys(r).filter((e) => r[e] !== "").map((e) => `${M(e)}=${M(String(r[e]))}`).join("&");
 	}
-}, D = (e) => Object.hasOwn(u, e), O = (e, t) => (d(p(t), "clientId parameter is required"), d(D(e), `env parameter is invalid: ${e}`), `sdrn:${u[e]}:client:${t}`), k = ({ serverUrl: e, log: t, defaultParams: n }) => new E({
+}, oe = (e) => Object.hasOwn(u, e), F = (e, t) => (y(x(t), "clientId parameter is required"), y(oe(e), `env parameter is invalid: ${e}`), `sdrn:${u[e]}:client:${t}`), I = ({ serverUrl: e, log: t, defaultParams: n }) => new P({
 	serverUrl: e,
 	log: t,
 	defaultParams: n
 });
 //#endregion
 //#region src/session-response.ts
-function A(e) {
-	return m(e) && typeof e.result == "boolean";
+function L(e) {
+	return S(e) && typeof e.result == "boolean";
 }
-function j(e) {
-	return A(e) && e.result === !0;
+function R(e) {
+	return L(e) && e.result === !0;
 }
-function M(e) {
-	return m(e) && !!e.error;
+function z(e) {
+	return S(e) && !!e.error;
 }
-function N(e) {
-	return m(e) && Object.keys(e).length === 1 && f(e.redirectURL);
+function B(e) {
+	return S(e) && Object.keys(e).length === 1 && b(e.redirectURL);
 }
-function P(e) {
-	return j(e) && typeof e.userId == "number";
+function V(e) {
+	return R(e) && typeof e.userId == "number";
 }
-function F(e) {
-	return N(e) || M(e) || A(e) || m(e) ? e : {};
+function H(e) {
+	return B(e) || z(e) || L(e) || S(e) ? e : {};
 }
 //#endregion
 //#region src/spid-talk.ts
-function I(e) {
-	(!e.SPiD || typeof e.SPiD != "object") && (e.SPiD = {}), (!e.SPiD.Talk || typeof e.SPiD.Talk != "object") && (e.SPiD.Talk = {}), _(e.SPiD.Talk.response) || (e.SPiD.Talk.response = (t, n) => e[t](n));
+function U(e) {
+	(!e.SPiD || typeof e.SPiD != "object") && (e.SPiD = {}), (!e.SPiD.Talk || typeof e.SPiD.Talk != "object") && (e.SPiD.Talk = {}), T(e.SPiD.Talk.response) || (e.SPiD.Talk.response = (t, n) => e[t](n));
 }
 //#endregion
 //#region src/types/login.ts
-var L = (e) => typeof e.openSimplifiedLoginWidget == "function", R = "6.0.0-alpha.13", z = "hasSession-cache", B = "sessionCallBlocked-cache", V = 1e3 * 60 * 5, H = "tab-id-cache", U = Math.floor(Math.random() * 1e5), W = 1e3 * 60 * 60 * 24 * 30, G = () => window, K = class {
+var W = (e) => typeof e.openSimplifiedLoginWidget == "function", G = "6.0.0-alpha.15", K = "hasSession-cache", q = "sessionCallBlocked-cache", se = 1e3 * 60 * 5, J = "tab-id-cache", Y = Math.floor(Math.random() * 1e5), ce = 1e3 * 60 * 60 * 24 * 30, le = () => window, ue = class {
 	eventTarget = new EventTarget();
 	window;
 	clientId;
@@ -293,6 +350,8 @@ var L = (e) => typeof e.openSimplifiedLoginWidget == "function", R = "6.0.0-alph
 	env;
 	log;
 	callbackBeforeRedirect;
+	getConsents;
+	generateState;
 	sessionStorageCache;
 	localStorageCache;
 	enableSessionCaching;
@@ -308,41 +367,48 @@ var L = (e) => typeof e.openSimplifiedLoginWidget == "function", R = "6.0.0-alph
 	setVarnishCookie;
 	varnishExpiresIn;
 	varnishCookieDomain;
-	constructor({ clientId: t, redirectUri: n, sessionDomain: r, env: i, log: a, window: o = G(), callbackBeforeRedirect: c = () => {} }) {
-		d(p(t), "clientId parameter is required"), d(m(o), "The reference to window is missing"), d(!n || g(n), "redirectUri parameter is invalid"), d(p(r) && g(r), "sessionDomain parameter is not a valid URL"), d(f(i), `env parameter is invalid: ${i}`), I(o), this.window = o, this.clientId = t, this.redirectUri = n, this.env = i, this.log = a, this.callbackBeforeRedirect = c, this.sessionStorageCache = new s(() => this.window && this.window.sessionStorage), this.localStorageCache = new s(() => this.window && this.window.localStorage), this.enableSessionCaching = !0, this.session = {}, e.set(this, { getSession: () => this.session });
-		let u = {
+	constructor({ clientId: t, redirectUri: n, sessionDomain: r, env: i, log: a, window: o = le(), callbackBeforeRedirect: c = () => {}, getConsents: u = () => ee(o), generateState: d }) {
+		y(x(t), "clientId parameter is required"), y(S(o), "The reference to window is missing"), y(!n || w(n), "redirectUri parameter is invalid"), y(x(r) && w(r), "sessionDomain parameter is not a valid URL"), y(b(i), `env parameter is invalid: ${i}`), y(T(u), "getConsents parameter must be a function"), y(d === void 0 || T(d), "generateState parameter must be a function"), U(o), this.window = o, this.clientId = t, this.redirectUri = n, this.env = i, this.log = a, this.callbackBeforeRedirect = c, this.getConsents = u, this.generateState = d, this.sessionStorageCache = new s(() => this.window && this.window.sessionStorage), this.localStorageCache = new s(() => this.window && this.window.localStorage), this.enableSessionCaching = !0, this.session = {}, e.set(this, { getSession: () => this.session });
+		let f = {
 			client_id: this.clientId,
 			redirect_uri: this.redirectUri
-		}, h = O(this.env, this.clientId);
-		this.spid = k({
-			serverUrl: x(i, l.SPiD),
+		}, p = F(this.env, this.clientId);
+		this.spid = I({
+			serverUrl: A(i, l.SPiD),
 			log: this.log,
-			defaultParams: u
-		}), this.oauthService = k({
-			serverUrl: x(i, l.SPiD),
+			defaultParams: f
+		}), this.oauthService = I({
+			serverUrl: A(i, l.SPiD),
 			log: this.log,
-			defaultParams: u
-		}), this.bffService = k({
-			serverUrl: x(i, l.BFF),
+			defaultParams: f
+		}), this.bffService = I({
+			serverUrl: A(i, l.BFF),
 			log: this.log,
-			defaultParams: u
-		}), this.sessionService = k({
+			defaultParams: f
+		}), this.sessionService = I({
 			serverUrl: r,
 			log: this.log,
 			defaultParams: {
-				client_sdrn: h,
+				client_sdrn: p,
 				redirect_uri: this.redirectUri,
-				sdk_version: R
+				sdk_version: G
 			}
-		}), this.globalSessionService = k({
-			serverUrl: x(i, l.SESSION_SERVICE),
+		}), this.globalSessionService = I({
+			serverUrl: A(i, l.SESSION_SERVICE),
 			log: this.log,
 			defaultParams: {
-				client_sdrn: h,
-				sdk_version: R
+				client_sdrn: p,
+				sdk_version: G
 			}
 		}), this.usedSessionServiceGetSessionEndpoint = this.sessionService.url.pathname && this.sessionService.url.pathname.length <= 1 ? "v2/session" : "session", this._unblockSessionCall();
 	}
+	enableLoginLinkRefresh() {
+		let { document: e } = this.window;
+		e && T(e.addEventListener) && v(e, {
+			isLoginUrl: (e) => this.isLoginUrl(e),
+			getConsentParams: () => this.getConsentParams()
+		});
+	}
 	addEventListener(e, t) {
 		this.eventTarget.addEventListener(e, t);
 	}
@@ -351,18 +417,18 @@ var L = (e) => typeof e.openSimplifiedLoginWidget == "function", R = "6.0.0-alph
 	}
 	_getTabId() {
 		if (this.enableSessionCaching) {
-			let e = this.sessionStorageCache.get(H);
-			return typeof e == "number" ? e : (this.sessionStorageCache.set(H, U, W), U);
+			let e = this.sessionStorageCache.get(J);
+			return typeof e == "number" ? e : (this.sessionStorageCache.set(J, Y, ce), Y);
 		}
 	}
 	_isSessionCallBlocked() {
-		return !!this.localStorageCache.get(B);
+		return !!this.localStorageCache.get(q);
 	}
 	_blockSessionCall() {
-		this.localStorageCache.set(B, !0, V);
+		this.localStorageCache.set(q, !0, se);
 	}
 	_unblockSessionCall() {
-		this.localStorageCache.delete(B);
+		this.localStorageCache.delete(q);
 	}
 	_closePopup() {
 		this.popup &&= (this.popup.closed || this.popup.close(), null);
@@ -370,10 +436,10 @@ var L = (e) => typeof e.openSimplifiedLoginWidget == "function", R = "6.0.0-alph
 	enableVarnishCookie(e) {
 		if (typeof e != "object") throw new t("VarnishCookieOptions must be an object");
 		let { expiresIn: n = 0, domain: r } = e;
-		d(Number.isInteger(n), "'expiresIn' must be an integer"), d(n >= 0, "'expiresIn' cannot be negative"), this.setVarnishCookie = !0, this.varnishExpiresIn = n, this.varnishCookieDomain = r;
+		y(Number.isInteger(n), "'expiresIn' must be an integer"), y(n >= 0, "'expiresIn' cannot be negative"), this.setVarnishCookie = !0, this.varnishExpiresIn = n, this.varnishCookieDomain = r;
 	}
 	_maybeSetVarnishCookie(e) {
-		if (!this.setVarnishCookie || !A(e)) return;
+		if (!this.setVarnishCookie || !L(e)) return;
 		let t = /* @__PURE__ */ new Date();
 		if (this.varnishExpiresIn || typeof e.expiresIn == "number" && e.expiresIn > 0) {
 			let n = this.varnishExpiresIn || e.expiresIn || 0;
@@ -391,42 +457,42 @@ var L = (e) => typeof e.openSimplifiedLoginWidget == "function", R = "6.0.0-alph
 		this.setVarnishCookie && this._clearVarnishCookie();
 	}
 	_clearVarnishCookie() {
-		let e = this.session && A(this.session) && typeof this.session.baseDomain == "string" ? this.session.baseDomain : this.window.location.hostname, t = this.varnishCookieDomain || e || "";
+		let e = this.session && L(this.session) && typeof this.session.baseDomain == "string" ? this.session.baseDomain : this.window.location.hostname, t = this.varnishCookieDomain || e || "";
 		document.cookie = `SP_ID=nothing; expires=Thu, 01 Jan 1970 00:00:00 GMT; path=/; domain=.${t}`;
 	}
 	hasSession() {
 		if (this._isSessionCallBlocked()) {
-			let e = F(this.session);
-			return Promise.resolve(N(e) ? {} : e);
+			let e = H(this.session);
+			return Promise.resolve(B(e) ? {} : e);
 		}
 		if (this.hasSessionInProgress) return this.hasSessionInProgress;
 		let n = !1, r = (r) => {
-			if (M(r)) throw new t("HasSession failed", m(r.error) ? r.error : { description: String(r.error) });
-			return this._maybeSetVarnishCookie(r), n = (A(this.session) && this.session.id) !== (A(r) && r.id), e.get(this)?.beforeUpdate?.(this.session, r), this.session = r, r;
+			if (z(r)) throw new t("HasSession failed", S(r.error) ? r.error : { description: String(r.error) });
+			return this._maybeSetVarnishCookie(r), n = (L(this.session) && this.session.id) !== (L(r) && r.id), e.get(this)?.beforeUpdate?.(this.session, r), this.session = r, r;
 		}, i = () => {
-			let e = this.sessionStorageCache.get(z);
-			return e ? F(e) : null;
+			let e = this.sessionStorageCache.get(K);
+			return e ? H(e) : null;
 		}, a = async () => {
 			if (this.enableSessionCaching) {
 				let e = i();
-				if (e) return N(e) ? {} : r(e);
+				if (e) return B(e) ? {} : r(e);
 			}
 			let e = null;
 			try {
-				e = await this.sessionService.get(this.usedSessionServiceGetSessionEndpoint, { tabId: this._getTabId() }, F);
+				e = await this.sessionService.get(this.usedSessionServiceGetSessionEndpoint, { tabId: this._getTabId() }, H);
 			} catch (e) {
-				let t = m(e) ? e : void 0;
+				let t = S(e) ? e : void 0;
 				if (t?.code === 400 && this.enableSessionCaching) {
 					let n = 1e3 * (typeof t.expiresIn == "number" ? t.expiresIn : 300);
-					this.sessionStorageCache.set(z, { error: e }, n);
-				} else t && typeof t.code == "number" && t.code >= 500 && t.code < 600 && this.enableSessionCaching && this.sessionStorageCache.set(z, { error: e }, 30 * 1e3);
+					this.sessionStorageCache.set(K, { error: e }, n);
+				} else t && typeof t.code == "number" && t.code >= 500 && t.code < 600 && this.enableSessionCaching && this.sessionStorageCache.set(K, { error: e }, 30 * 1e3);
 				throw e;
 			}
 			if (e) {
-				if (N(e)) return this._blockSessionCall(), await this.callbackBeforeRedirect(), this.sessionService.makeUrl(e.redirectURL, { tabId: this._getTabId() });
+				if (B(e)) return this._blockSessionCall(), await this.callbackBeforeRedirect(), this.sessionService.makeUrl(e.redirectURL, { tabId: this._getTabId() });
 				if (this.enableSessionCaching) {
-					let t = 1e3 * (A(e) && e.expiresIn || 300);
-					this.sessionStorageCache.set(z, e, t);
+					let t = 1e3 * (L(e) && e.expiresIn || 300);
+					this.sessionStorageCache.set(K, e, t);
 				}
 			}
 			return r(e ?? {});
@@ -437,7 +503,7 @@ var L = (e) => typeof e.openSimplifiedLoginWidget == "function", R = "6.0.0-alph
 	}
 	async isLoggedIn() {
 		try {
-			return A(await this.hasSession());
+			return L(await this.hasSession());
 		} catch {
 			return !1;
 		}
@@ -446,27 +512,27 @@ var L = (e) => typeof e.openSimplifiedLoginWidget == "function", R = "6.0.0-alph
 		this.enableSessionCaching = e;
 	}
 	clearCachedUserSession() {
-		this.sessionStorageCache.delete(z);
+		this.sessionStorageCache.delete(K);
 	}
 	async isConnected() {
 		try {
-			return j(await this.hasSession());
+			return R(await this.hasSession());
 		} catch {
 			return !1;
 		}
 	}
 	async getUser() {
 		let e = await this.hasSession();
-		if (!j(e)) throw new t("The user is not connected to this merchant");
-		return b(e);
+		if (!R(e)) throw new t("The user is not connected to this merchant");
+		return O(e);
 	}
 	async getUserId() {
 		let e = await this.hasSession();
-		if (P(e)) return e.userId;
+		if (V(e)) return e.userId;
 		throw new t("The user is not connected to this merchant");
 	}
 	async getExternalId(e, n = "") {
-		let r = await this.hasSession(), i = A(r) ? r.pairId : void 0;
+		let r = await this.hasSession(), i = L(r) ? r.pairId : void 0;
 		if (!i) throw new t("pairId missing in user session!");
 		if (!e || e.length === 0) throw new t("externalParty cannot be empty");
 		let a = (e) => Array.from(new Uint8Array(e)).map((e) => e.toString(16).padStart(2, "0")).join(""), o = (e) => crypto.subtle.digest("SHA-256", e);
@@ -474,28 +540,28 @@ var L = (e) => typeof e.openSimplifiedLoginWidget == "function", R = "6.0.0-alph
 	}
 	async getUserSDRN() {
 		let e = await this.hasSession();
-		if (A(e) && e.sdrn) return e.sdrn;
+		if (L(e) && e.sdrn) return e.sdrn;
 		throw new t("Failed to get SDRN from user session");
 	}
 	async getUserUuid() {
 		let e = await this.hasSession();
-		if (A(e) && e.uuid && e.result) return e.uuid;
+		if (L(e) && e.uuid && e.result) return e.uuid;
 		throw new t("The user is not connected to this merchant");
 	}
 	async getUserContextData() {
 		try {
-			return await this.globalSessionService.get("user-context", void 0, (e) => m(e) && f(e.identifier) ? {
+			return await this.globalSessionService.get("user-context", void 0, (e) => S(e) && b(e.identifier) ? {
 				identifier: e.identifier,
-				display_text: f(e.display_text) ? e.display_text : "",
-				client_name: f(e.client_name) ? e.client_name : "",
-				provider_id: f(e.provider_id) ? e.provider_id : void 0
+				display_text: b(e.display_text) ? e.display_text : "",
+				client_name: b(e.client_name) ? e.client_name : "",
+				provider_id: b(e.provider_id) ? e.provider_id : void 0
 			} : null);
 		} catch {
 			return null;
 		}
 	}
 	login({ state: e, acrValues: t, scope: n = "openid", redirectUri: r = this.redirectUri, preferPopup: i = !1, loginHint: a = "", tag: o = "", teaser: s = "", maxAge: c = "", locale: l, oneStepLogin: u = !1, prompt: d = "select_account", xDomainId: f = "", xEnvironmentId: p = "", originCampaign: m = "" }) {
-		this._closePopup(), this.sessionStorageCache.delete(z);
+		this._closePopup(), this.sessionStorageCache.delete(K);
 		let h = this.loginUrl({
 			state: e,
 			acrValues: t,
@@ -512,7 +578,7 @@ var L = (e) => typeof e.openSimplifiedLoginWidget == "function", R = "6.0.0-alph
 			xEnvironmentId: p,
 			originCampaign: m
 		});
-		return i && (this.popup = ne(this.window, h, "Schibsted account", {
+		return i && (this.popup = k(this.window, h, "Schibsted account", {
 			width: 360,
 			height: 570
 		}), this.popup) ? (this.eventTarget.dispatchEvent(new CustomEvent("loginRequested", { detail: {
@@ -526,20 +592,20 @@ var L = (e) => typeof e.openSimplifiedLoginWidget == "function", R = "6.0.0-alph
 	async getSpId() {
 		try {
 			let e = await this.hasSession();
-			if (A(e)) return e.sp_id || null;
-			let t = m(e) && "sp_id" in e ? e.sp_id : void 0;
-			return f(t) ? t : null;
+			if (L(e)) return e.sp_id || null;
+			let t = S(e) && "sp_id" in e ? e.sp_id : void 0;
+			return b(t) ? t : null;
 		} catch {
 			return null;
 		}
 	}
 	logout(e = this.redirectUri) {
-		this.sessionStorageCache.delete(z), this._maybeClearVarnishCookie();
+		this.sessionStorageCache.delete(K), this._maybeClearVarnishCookie();
 		let t = this.logoutUrl(e);
 		this.eventTarget.dispatchEvent(new CustomEvent("logoutRequested", { detail: { url: t } })), this.window.location.href = t;
 	}
-	loginUrl({ state: e, acrValues: t = "", scope: n = "openid", redirectUri: r = this.redirectUri, loginHint: i = "", tag: a = "", teaser: o = "", maxAge: s = "", locale: c, oneStepLogin: l = !1, prompt: u = "select_account", xDomainId: f = "", xEnvironmentId: m = "", originCampaign: h = "" }) {
-		return d(!t || v(t, ["", "otp-email"], !0) || t.split(" ").every((e) => v(e, [
+	loginUrl({ state: e = this.generateState?.(this.window), acrValues: t = "", scope: n = "openid", redirectUri: r = this.redirectUri, loginHint: i = "", tag: a = "", teaser: o = "", maxAge: s = "", locale: c, oneStepLogin: l = !1, prompt: u = "select_account", xDomainId: d = "", xEnvironmentId: f = "", originCampaign: p = "" }) {
+		return y(!t || E(t, ["", "otp-email"], !0) || t.split(" ").every((e) => E(e, [
 			"password",
 			"otp",
 			"sms",
@@ -548,7 +614,7 @@ var L = (e) => typeof e.openSimplifiedLoginWidget == "function", R = "6.0.0-alph
 			"eid-se",
 			"eid-fi",
 			"eid"
-		], !0)), `The acrValues parameter is not acceptable: ${t}`), d(g(r), `loginUrl(): redirectUri must be a valid url but is ${r}`), d(p(e), `the state parameter should be a non empty string but it is ${e}`), this.oauthService.makeUrl("oauth/authorize", {
+		], !0)), `The acrValues parameter is not acceptable: ${t}`), y(w(r), `loginUrl(): redirectUri must be a valid url but is ${r}`), y(x(e), `the state parameter should be a non empty string but it is ${e}`), _(this.oauthService.makeUrl("oauth/authorize", {
 			response_type: "code",
 			redirect_uri: r,
 			scope: n,
@@ -561,13 +627,26 @@ var L = (e) => typeof e.openSimplifiedLoginWidget == "function", R = "6.0.0-alph
 			locale: c,
 			one_step_login: l || "",
 			prompt: t ? "" : u,
-			x_domain_id: f,
-			x_env_id: m,
-			utm_campaign: h
-		});
+			x_domain_id: d,
+			x_env_id: f,
+			utm_campaign: p
+		}), this.getConsentParams());
+	}
+	getConsentParams() {
+		try {
+			let e = this.getConsents() || new URLSearchParams();
+			return y(e instanceof URLSearchParams, `getConsents must return URLSearchParams but it returned ${e}`), e;
+		} catch (e) {
+			return (this.log || console.warn)("Schibsted account SDK: could not read consents, logging in without them", e), new URLSearchParams();
+		}
+	}
+	isLoginUrl(e) {
+		if (!w(e)) return !1;
+		let t = new URL(e), n = new URL(this.oauthService.makeUrl("oauth/authorize", {}, !1));
+		return t.origin === n.origin && t.pathname === n.pathname && t.searchParams.get("client_id") === this.clientId;
 	}
 	logoutUrl(e = this.redirectUri) {
-		d(g(e), "logoutUrl(): redirectUri is invalid");
+		y(w(e), "logoutUrl(): redirectUri is invalid");
 		let t = { redirect_uri: e };
 		return this.sessionService.makeUrl("logout", t);
 	}
@@ -616,10 +695,10 @@ var L = (e) => typeof e.openSimplifiedLoginWidget == "function", R = "6.0.0-alph
 			}, f = () => {
 				this.eventTarget.dispatchEvent(new Event("simplifiedLoginCancelled"));
 			};
-			if (L(window)) return window.openSimplifiedLoginWidget(c, l, u, d, f), i(!0);
+			if (W(window)) return window.openSimplifiedLoginWidget(c, l, u, d, f), i(!0);
 			let p = document.createElement("script");
 			p.type = "text/javascript", p.src = a, p.onload = () => {
-				if (!L(window)) {
+				if (!W(window)) {
 					s(new t("Error when loading simplified login widget content"));
 					return;
 				}
@@ -632,14 +711,14 @@ var L = (e) => typeof e.openSimplifiedLoginWidget == "function", R = "6.0.0-alph
 };
 //#endregion
 //#region src/has-access-response.ts
-function q(e) {
-	if (!m(e)) throw new t("Invalid hasAccess response");
+function de(e) {
+	if (!S(e)) throw new t("Invalid hasAccess response");
 	let { entitled: n, ttl: r, allowedFeatures: i, userId: a, uuid: o, sig: s } = e;
-	if (typeof n != "boolean" || typeof r != "number" || !Array.isArray(i) || typeof a != "number" || !f(o) || !f(s)) throw new t("Invalid hasAccess response");
+	if (typeof n != "boolean" || typeof r != "number" || !Array.isArray(i) || typeof a != "number" || !b(o) || !b(s)) throw new t("Invalid hasAccess response");
 	return {
 		entitled: n,
 		ttl: r,
-		allowedFeatures: i.filter(f),
+		allowedFeatures: i.filter(b),
 		userId: a,
 		uuid: o,
 		sig: s
@@ -647,19 +726,19 @@ function q(e) {
 }
 //#endregion
 //#region src/monetization.ts
-var J = () => window, Y = class {
+var fe = () => window, pe = class {
 	cache;
 	sessionService;
 	pendingHasAccessRequests;
-	constructor({ clientId: e, redirectUri: t, env: n, sessionDomain: r, window: i = J() }) {
-		I(i), d(p(e), "clientId parameter is required"), d(f(n), `env parameter is invalid: ${n}`);
-		let a = O(n, e);
-		this.cache = new s(() => i && i.sessionStorage), this.pendingHasAccessRequests = {}, r && (d(g(r), "sessionDomain parameter is not a valid URL"), this.sessionService = k({
+	constructor({ clientId: e, redirectUri: t, env: n, sessionDomain: r, window: i = fe() }) {
+		U(i), y(x(e), "clientId parameter is required"), y(b(n), `env parameter is invalid: ${n}`);
+		let a = F(n, e);
+		this.cache = new s(() => i && i.sessionStorage), this.pendingHasAccessRequests = {}, r && (y(w(r), "sessionDomain parameter is not a valid URL"), this.sessionService = I({
 			serverUrl: r,
 			defaultParams: {
 				client_sdrn: a,
 				redirect_uri: t,
-				sdk_version: R
+				sdk_version: G
 			}
 		}));
 	}
@@ -669,7 +748,7 @@ var J = () => window, Y = class {
 		if (!Array.isArray(e)) throw new t("'productIds' must be an array");
 		let r = [...e].sort(), i = this.accessCacheKey(r, n), a = this.cache.get(i);
 		if (!a) {
-			this.pendingHasAccessRequests[i] || (this.pendingHasAccessRequests[i] = this.sessionService.get(`/hasAccess/${r.join(",")}`, void 0, q));
+			this.pendingHasAccessRequests[i] || (this.pendingHasAccessRequests[i] = this.sessionService.get(`/hasAccess/${r.join(",")}`, void 0, de));
 			let e = this.pendingHasAccessRequests[i];
 			try {
 				a = await e;
@@ -698,22 +777,24 @@ var J = () => window, Y = class {
 		let i = n(r.window);
 		if (!i) throw new t("Schibsted Account SDK is not available in this browser context");
 		if (i.schAccount) throw new t("Schibsted Account SDK has already been initialized");
-		let { log: a, callbackBeforeRedirect: o, defaultProductIds: s, varnish: c } = r, l = {
+		let { log: a, callbackBeforeRedirect: o, getConsents: s, generateState: c, refreshLoginLinks: l = !0, defaultProductIds: u, varnish: d } = r, f = {
 			clientId: r.clientId,
 			redirectUri: r.redirectUri,
 			sessionDomain: r.sessionDomain,
 			env: r.env ?? "PRE",
 			window: i
 		};
-		if (this.#i = new K({
-			...l,
+		if (y(typeof c == "function", "generateState parameter must be a function"), y(typeof l == "boolean", "refreshLoginLinks parameter must be a boolean"), this.#i = new ue({
+			...f,
 			log: a,
-			callbackBeforeRedirect: o
-		}), s !== void 0 && !Array.isArray(s)) throw new t("Account defaultProductIds config must be an array");
-		if (c && (typeof c != "object" || Array.isArray(c))) throw new t("Account varnish config must be an object");
-		c && this.#i.enableVarnishCookie(c), this.#a = new Y(l), this.#e = l.clientId, this.#t = l.env, this.#n = l.redirectUri, this.#r = s && Object.freeze([...s]);
-		let u = e.get(this.#i);
-		u && e.set(this, u), i.schAccount = this, i.dispatchEvent(new CustomEvent("schAccount:ready", { detail: { instance: this } }));
+			callbackBeforeRedirect: o,
+			getConsents: s,
+			generateState: c
+		}), u !== void 0 && !Array.isArray(u)) throw new t("Account defaultProductIds config must be an array");
+		if (d && (typeof d != "object" || Array.isArray(d))) throw new t("Account varnish config must be an object");
+		d && this.#i.enableVarnishCookie(d), this.#a = new pe(f), this.#e = f.clientId, this.#t = f.env, this.#n = f.redirectUri, this.#r = u && Object.freeze([...u]);
+		let p = e.get(this.#i);
+		p && e.set(this, p), l && this.#i.enableLoginLinkRefresh(), i.schAccount = this, i.dispatchEvent(new CustomEvent("schAccount:ready", { detail: { instance: this } }));
 	}
 	get clientId() {
 		return this.#e;
@@ -757,13 +838,13 @@ var J = () => window, Y = class {
 	getSpId() {
 		return this.#i.getSpId();
 	}
-	login(e) {
+	login(e = {}) {
 		return this.#i.login(e);
 	}
 	logout(e) {
 		this.#i.logout(e);
 	}
-	loginUrl(e) {
+	loginUrl(e = {}) {
 		return this.#i.loginUrl(e);
 	}
 	logoutUrl(e) {
@@ -772,7 +853,7 @@ var J = () => window, Y = class {
 	accountUrl(e) {
 		return this.#i.accountUrl(e);
 	}
-	showSimplifiedLoginWidget(e, t) {
+	showSimplifiedLoginWidget(e = {}, t) {
 		return this.#i.showSimplifiedLoginWidget(e, t);
 	}
 	setSessionCachingEnabled(e) {
@@ -796,14 +877,14 @@ var J = () => window, Y = class {
 	off(e, t) {
 		return this.#i.removeEventListener(e, t), this;
 	}
-}, Z = "schAccount:ready", Q = 4e3, $, ie = () => /* @__PURE__ */ Error("Schibsted Account SDK is not available in this browser context"), ae = () => /* @__PURE__ */ Error(`Schibsted Account SDK was not initialized within ${Q} ms`);
-function oe(e) {
+}, Z = "schAccount:ready", Q = 4e3, $, me = () => /* @__PURE__ */ Error("Schibsted Account SDK is not available in this browser context"), he = () => /* @__PURE__ */ Error(`Schibsted Account SDK was not initialized within ${Q} ms`);
+function ge(e) {
 	return new X(e);
 }
-function se() {
+function _e() {
 	let e = n();
 	if (!e) {
-		let e = ie();
+		let e = me();
 		return console.error(e.message), Promise.reject(e);
 	}
 	return e.schAccount ? Promise.resolve(e.schAccount) : $ || ($ = new Promise((t, n) => {
@@ -814,12 +895,12 @@ function se() {
 			n && (i(), t(n));
 		};
 		e.addEventListener(Z, a), r = e.setTimeout(() => {
-			let e = ae();
+			let e = he();
 			console.error(e.message), i(), n(e);
 		}, Q), a();
 	}), $);
 }
 //#endregion
-export { X as Account, t as SDKError, oe as createAccountSdk, se as getAccountSdk, j as isConnectedSessionResponse, P as isConnectedSessionWithUserIdResponse, M as isSessionFailureResponse, A as isSessionSuccessResponse };
+export { X as Account, t as SDKError, ge as createAccountSdk, _e as getAccountSdk, R as isConnectedSessionResponse, V as isConnectedSessionWithUserIdResponse, z as isSessionFailureResponse, L as isSessionSuccessResponse };
 
 //# sourceMappingURL=index.js.map