capacitor-oidc 0.0.1-alpha.0

package/dist/esm/capacitor-navigator.js

@@ -0,0 +1,68 @@
+import { CapacitorOidcError, unsupported } from './errors';
+import { nativeContract } from './generated/native-contract';
+import { NativeOidc } from './native';
+export class CapacitorNavigator {
+    prefersEphemeralWebBrowserSession;
+    constructor(prefersEphemeralWebBrowserSession) {
+        this.prefersEphemeralWebBrowserSession = prefersEphemeralWebBrowserSession;
+    }
+    async prepare() {
+        return new CapacitorWindow(this.prefersEphemeralWebBrowserSession);
+    }
+    async callback() {
+        unsupported('Navigator callbacks');
+    }
+}
+class CapacitorWindow {
+    prefersEphemeralWebBrowserSession;
+    constructor(prefersEphemeralWebBrowserSession) {
+        this.prefersEphemeralWebBrowserSession = prefersEphemeralWebBrowserSession;
+    }
+    async navigate({ url }) {
+        assertSecureRequestUrl(url);
+        const callbackUrl = callbackUrlFromRequest(url);
+        const response = await NativeOidc.open({
+            [nativeContract.fields.url]: url,
+            [nativeContract.fields.callbackUrl]: callbackUrl,
+            [nativeContract.fields.prefersEphemeralWebBrowserSession]: this.prefersEphemeralWebBrowserSession,
+        });
+        if (!isExpectedCallback(response[nativeContract.fields.url], callbackUrl)) {
+            throw new CapacitorOidcError(nativeContract.errorCodes.invalidCallback, 'The authentication callback does not match the configured redirect URI');
+        }
+        return { url: response[nativeContract.fields.url] };
+    }
+    close() {
+        void NativeOidc.cancel();
+    }
+}
+export function assertSecureRequestUrl(requestUrl) {
+    const url = new URL(requestUrl);
+    const isLocalDevelopment = url.hostname === 'localhost' || url.hostname === '127.0.0.1' || url.hostname === '[::1]';
+    if (url.protocol !== 'https:' && !isLocalDevelopment) {
+        throw new CapacitorOidcError(nativeContract.errorCodes.browserUnavailable, 'OIDC authorization and logout endpoints must use HTTPS');
+    }
+}
+export function callbackUrlFromRequest(requestUrl) {
+    const url = new URL(requestUrl);
+    const callback = url.searchParams.get('redirect_uri') ?? url.searchParams.get('post_logout_redirect_uri');
+    if (!callback) {
+        throw new CapacitorOidcError(nativeContract.errorCodes.invalidCallback, 'The OIDC request does not contain a redirect URI');
+    }
+    return callback;
+}
+export function isExpectedCallback(actualValue, expectedValue) {
+    const actual = new URL(actualValue);
+    const expected = new URL(expectedValue);
+    return (actual.protocol.toLowerCase() === expected.protocol.toLowerCase() &&
+        actual.host.toLowerCase() === expected.host.toLowerCase() &&
+        actual.pathname === expected.pathname);
+}
+export class UnsupportedIframeNavigator {
+    async prepare() {
+        unsupported('Iframe navigation');
+    }
+    async callback() {
+        unsupported('Iframe navigation');
+    }
+}
+//# sourceMappingURL=capacitor-navigator.js.map

package/dist/esm/capacitor-navigator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"capacitor-navigator.js","sourceRoot":"","sources":["../../src/capacitor-navigator.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,kBAAkB,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AAC3D,OAAO,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAC;AAC7D,OAAO,EAAE,UAAU,EAAE,MAAM,UAAU,CAAC;AAEtC,MAAM,OAAO,kBAAkB;IACA;IAA7B,YAA6B,iCAA0C;QAA1C,sCAAiC,GAAjC,iCAAiC,CAAS;IAAG,CAAC;IAE3E,KAAK,CAAC,OAAO;QACX,OAAO,IAAI,eAAe,CAAC,IAAI,CAAC,iCAAiC,CAAC,CAAC;IACrE,CAAC;IAED,KAAK,CAAC,QAAQ;QACZ,WAAW,CAAC,qBAAqB,CAAC,CAAC;IACrC,CAAC;CACF;AAED,MAAM,eAAe;IACU;IAA7B,YAA6B,iCAA0C;QAA1C,sCAAiC,GAAjC,iCAAiC,CAAS;IAAG,CAAC;IAE3E,KAAK,CAAC,QAAQ,CAAC,EAAE,GAAG,EAAkB;QACpC,sBAAsB,CAAC,GAAG,CAAC,CAAC;QAC5B,MAAM,WAAW,GAAG,sBAAsB,CAAC,GAAG,CAAC,CAAC;QAChD,MAAM,QAAQ,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC;YACrC,CAAC,cAAc,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,GAAG;YAChC,CAAC,cAAc,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,WAAW;YAChD,CAAC,cAAc,CAAC,MAAM,CAAC,iCAAiC,CAAC,EAAE,IAAI,CAAC,iCAAiC;SAClG,CAAC,CAAC;QAEH,IAAI,CAAC,kBAAkB,CAAC,QAAQ,CAAC,cAAc,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,WAAW,CAAC,EAAE,CAAC;YAC1E,MAAM,IAAI,kBAAkB,CAC1B,cAAc,CAAC,UAAU,CAAC,eAAe,EACzC,wEAAwE,CACzE,CAAC;QACJ,CAAC;QAED,OAAO,EAAE,GAAG,EAAE,QAAQ,CAAC,cAAc,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;IACtD,CAAC;IAED,KAAK;QACH,KAAK,UAAU,CAAC,MAAM,EAAE,CAAC;IAC3B,CAAC;CACF;AAED,MAAM,UAAU,sBAAsB,CAAC,UAAkB;IACvD,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,CAAC;IAChC,MAAM,kBAAkB,GAAG,GAAG,CAAC,QAAQ,KAAK,WAAW,IAAI,GAAG,CAAC,QAAQ,KAAK,WAAW,IAAI,GAAG,CAAC,QAAQ,KAAK,OAAO,CAAC;IACpH,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,kBAAkB,EAAE,CAAC;QACrD,MAAM,IAAI,kBAAkB,CAC1B,cAAc,CAAC,UAAU,CAAC,kBAAkB,EAC5C,wDAAwD,CACzD,CAAC;IACJ,CAAC;AACH,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,UAAkB;IACvD,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,CAAC;IAChC,MAAM,QAAQ,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,0BAA0B,CAAC,CAAC;IAC1G,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,MAAM,IAAI,kBAAkB,CAC1B,cAAc,CAAC,UAAU,CAAC,eAAe,EACzC,kDAAkD,CACnD,CAAC;IACJ,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,WAAmB,EAAE,aAAqB;IAC3E,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,CAAC;IACpC,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,aAAa,CAAC,CAAC;IACxC,OAAO,CACL,MAAM,CAAC,QAAQ,CAAC,WAAW,EAAE,KAAK,QAAQ,CAAC,QAAQ,CAAC,WAAW,EAAE;QACjE,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,QAAQ,CAAC,IAAI,CAAC,WAAW,EAAE;QACzD,MAAM,CAAC,QAAQ,KAAK,QAAQ,CAAC,QAAQ,CACtC,CAAC;AACJ,CAAC;AAED,MAAM,OAAO,0BAA0B;IACrC,KAAK,CAAC,OAAO;QACX,WAAW,CAAC,mBAAmB,CAAC,CAAC;IACnC,CAAC;IAED,KAAK,CAAC,QAAQ;QACZ,WAAW,CAAC,mBAAmB,CAAC,CAAC;IACnC,CAAC;CACF","sourcesContent":["import type { INavigator, IWindow, NavigateParams, NavigateResponse } from 'oidc-client-ts';\n\nimport { CapacitorOidcError, unsupported } from './errors';\nimport { nativeContract } from './generated/native-contract';\nimport { NativeOidc } from './native';\n\nexport class CapacitorNavigator implements INavigator {\n  constructor(private readonly prefersEphemeralWebBrowserSession: boolean) {}\n\n  async prepare(): Promise<IWindow> {\n    return new CapacitorWindow(this.prefersEphemeralWebBrowserSession);\n  }\n\n  async callback(): Promise<void> {\n    unsupported('Navigator callbacks');\n  }\n}\n\nclass CapacitorWindow implements IWindow {\n  constructor(private readonly prefersEphemeralWebBrowserSession: boolean) {}\n\n  async navigate({ url }: NavigateParams): Promise<NavigateResponse> {\n    assertSecureRequestUrl(url);\n    const callbackUrl = callbackUrlFromRequest(url);\n    const response = await NativeOidc.open({\n      [nativeContract.fields.url]: url,\n      [nativeContract.fields.callbackUrl]: callbackUrl,\n      [nativeContract.fields.prefersEphemeralWebBrowserSession]: this.prefersEphemeralWebBrowserSession,\n    });\n\n    if (!isExpectedCallback(response[nativeContract.fields.url], callbackUrl)) {\n      throw new CapacitorOidcError(\n        nativeContract.errorCodes.invalidCallback,\n        'The authentication callback does not match the configured redirect URI',\n      );\n    }\n\n    return { url: response[nativeContract.fields.url] };\n  }\n\n  close(): void {\n    void NativeOidc.cancel();\n  }\n}\n\nexport function assertSecureRequestUrl(requestUrl: string): void {\n  const url = new URL(requestUrl);\n  const isLocalDevelopment = url.hostname === 'localhost' || url.hostname === '127.0.0.1' || url.hostname === '[::1]';\n  if (url.protocol !== 'https:' && !isLocalDevelopment) {\n    throw new CapacitorOidcError(\n      nativeContract.errorCodes.browserUnavailable,\n      'OIDC authorization and logout endpoints must use HTTPS',\n    );\n  }\n}\n\nexport function callbackUrlFromRequest(requestUrl: string): string {\n  const url = new URL(requestUrl);\n  const callback = url.searchParams.get('redirect_uri') ?? url.searchParams.get('post_logout_redirect_uri');\n  if (!callback) {\n    throw new CapacitorOidcError(\n      nativeContract.errorCodes.invalidCallback,\n      'The OIDC request does not contain a redirect URI',\n    );\n  }\n  return callback;\n}\n\nexport function isExpectedCallback(actualValue: string, expectedValue: string): boolean {\n  const actual = new URL(actualValue);\n  const expected = new URL(expectedValue);\n  return (\n    actual.protocol.toLowerCase() === expected.protocol.toLowerCase() &&\n    actual.host.toLowerCase() === expected.host.toLowerCase() &&\n    actual.pathname === expected.pathname\n  );\n}\n\nexport class UnsupportedIframeNavigator implements INavigator {\n  async prepare(): Promise<IWindow> {\n    unsupported('Iframe navigation');\n  }\n\n  async callback(): Promise<void> {\n    unsupported('Iframe navigation');\n  }\n}\n"]}

package/dist/esm/capacitor-secure-state-store.d.ts

@@ -0,0 +1,9 @@
+import type { StateStore } from 'oidc-client-ts';
+export declare class CapacitorSecureStateStore implements StateStore {
+    private readonly namespace;
+    constructor(namespace: string);
+    set(key: string, value: string): Promise<void>;
+    get(key: string): Promise<string | null>;
+    remove(key: string): Promise<string | null>;
+    getAllKeys(): Promise<string[]>;
+}

package/dist/esm/capacitor-secure-state-store.js

@@ -0,0 +1,36 @@
+import { nativeContract } from './generated/native-contract';
+import { NativeOidc } from './native';
+export class CapacitorSecureStateStore {
+    namespace;
+    constructor(namespace) {
+        this.namespace = namespace;
+    }
+    async set(key, value) {
+        await NativeOidc.storageSet({
+            [nativeContract.fields.namespace]: this.namespace,
+            [nativeContract.fields.key]: key,
+            [nativeContract.fields.value]: value,
+        });
+    }
+    async get(key) {
+        const result = await NativeOidc.storageGet({
+            [nativeContract.fields.namespace]: this.namespace,
+            [nativeContract.fields.key]: key,
+        });
+        return result[nativeContract.fields.value];
+    }
+    async remove(key) {
+        const result = await NativeOidc.storageRemove({
+            [nativeContract.fields.namespace]: this.namespace,
+            [nativeContract.fields.key]: key,
+        });
+        return result[nativeContract.fields.value];
+    }
+    async getAllKeys() {
+        const result = await NativeOidc.storageGetAllKeys({
+            [nativeContract.fields.namespace]: this.namespace,
+        });
+        return result[nativeContract.fields.keys];
+    }
+}
+//# sourceMappingURL=capacitor-secure-state-store.js.map

package/dist/esm/capacitor-secure-state-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"capacitor-secure-state-store.js","sourceRoot":"","sources":["../../src/capacitor-secure-state-store.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAC;AAC7D,OAAO,EAAE,UAAU,EAAE,MAAM,UAAU,CAAC;AAEtC,MAAM,OAAO,yBAAyB;IACP;IAA7B,YAA6B,SAAiB;QAAjB,cAAS,GAAT,SAAS,CAAQ;IAAG,CAAC;IAElD,KAAK,CAAC,GAAG,CAAC,GAAW,EAAE,KAAa;QAClC,MAAM,UAAU,CAAC,UAAU,CAAC;YAC1B,CAAC,cAAc,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,IAAI,CAAC,SAAS;YACjD,CAAC,cAAc,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,GAAG;YAChC,CAAC,cAAc,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,KAAK;SACrC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,GAAW;QACnB,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,UAAU,CAAC;YACzC,CAAC,cAAc,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,IAAI,CAAC,SAAS;YACjD,CAAC,cAAc,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,GAAG;SACjC,CAAC,CAAC;QACH,OAAO,MAAM,CAAC,cAAc,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC7C,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,GAAW;QACtB,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,aAAa,CAAC;YAC5C,CAAC,cAAc,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,IAAI,CAAC,SAAS;YACjD,CAAC,cAAc,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,GAAG;SACjC,CAAC,CAAC;QACH,OAAO,MAAM,CAAC,cAAc,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC7C,CAAC;IAED,KAAK,CAAC,UAAU;QACd,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,iBAAiB,CAAC;YAChD,CAAC,cAAc,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,IAAI,CAAC,SAAS;SAClD,CAAC,CAAC;QACH,OAAO,MAAM,CAAC,cAAc,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAC5C,CAAC;CACF","sourcesContent":["import type { StateStore } from 'oidc-client-ts';\n\nimport { nativeContract } from './generated/native-contract';\nimport { NativeOidc } from './native';\n\nexport class CapacitorSecureStateStore implements StateStore {\n  constructor(private readonly namespace: string) {}\n\n  async set(key: string, value: string): Promise<void> {\n    await NativeOidc.storageSet({\n      [nativeContract.fields.namespace]: this.namespace,\n      [nativeContract.fields.key]: key,\n      [nativeContract.fields.value]: value,\n    });\n  }\n\n  async get(key: string): Promise<string | null> {\n    const result = await NativeOidc.storageGet({\n      [nativeContract.fields.namespace]: this.namespace,\n      [nativeContract.fields.key]: key,\n    });\n    return result[nativeContract.fields.value];\n  }\n\n  async remove(key: string): Promise<string | null> {\n    const result = await NativeOidc.storageRemove({\n      [nativeContract.fields.namespace]: this.namespace,\n      [nativeContract.fields.key]: key,\n    });\n    return result[nativeContract.fields.value];\n  }\n\n  async getAllKeys(): Promise<string[]> {\n    const result = await NativeOidc.storageGetAllKeys({\n      [nativeContract.fields.namespace]: this.namespace,\n    });\n    return result[nativeContract.fields.keys];\n  }\n}\n"]}

package/dist/esm/capacitor-user-manager.d.ts

@@ -0,0 +1,28 @@
+import { UserManager, type SigninPopupArgs, type SigninResourceOwnerCredentialsArgs, type SigninSilentArgs, type SignoutResponse, type SignoutPopupArgs, type User } from 'oidc-client-ts';
+import type { CapacitorOidcNativeOptions, CapacitorUserManagerSettings } from './definitions';
+export declare class CapacitorUserManager extends UserManager {
+    private readonly storageNamespace;
+    private refreshPromise?;
+    private appStateListener?;
+    private constructor();
+    static create(settings: CapacitorUserManagerSettings, nativeOptions?: CapacitorOidcNativeOptions): Promise<CapacitorUserManager>;
+    signin(args?: SigninPopupArgs): Promise<User>;
+    signout(args?: SignoutPopupArgs): Promise<void>;
+    getValidUser(minimumValiditySeconds?: number): Promise<User | null>;
+    signinSilent(args?: SigninSilentArgs): Promise<User | null>;
+    private refresh;
+    storeUser(user: User | null): Promise<void>;
+    cancel(): Promise<void>;
+    dispose(): Promise<void>;
+    signinRedirect(): Promise<void>;
+    signinRedirectCallback(_url?: string): Promise<User>;
+    signinCallback(_url?: string): Promise<User | undefined>;
+    signinResourceOwnerCredentials(_args: SigninResourceOwnerCredentialsArgs): Promise<User>;
+    signinSilentCallback(_url?: string): Promise<void>;
+    signoutRedirect(): Promise<void>;
+    signoutRedirectCallback(_url?: string): Promise<SignoutResponse>;
+    signoutCallback(_url?: string, _keepOpen?: boolean): Promise<SignoutResponse | undefined>;
+    signoutSilent(): Promise<void>;
+    signoutSilentCallback(_url?: string): Promise<void>;
+    querySessionStatus(): Promise<null>;
+}

package/dist/esm/capacitor-user-manager.js

@@ -0,0 +1,160 @@
+import { App } from '@capacitor/app';
+import { ErrorResponse, UserManager, } from 'oidc-client-ts';
+import { CapacitorNavigator, UnsupportedIframeNavigator } from './capacitor-navigator';
+import { CapacitorSecureStateStore } from './capacitor-secure-state-store';
+import { CapacitorOidcError, unsupported } from './errors';
+import { nativeContract } from './generated/native-contract';
+import { NativeOidc } from './native';
+export class CapacitorUserManager extends UserManager {
+    storageNamespace;
+    refreshPromise;
+    appStateListener;
+    constructor(settings, nativeOptions, storageNamespace) {
+        const stateStore = new CapacitorSecureStateStore(`${storageNamespace}.transactions`);
+        const userStore = new CapacitorSecureStateStore(`${storageNamespace}.session`);
+        const navigator = new CapacitorNavigator(nativeOptions.ios?.prefersEphemeralWebBrowserSession ?? false);
+        super({
+            ...settings,
+            response_type: 'code',
+            disablePKCE: false,
+            monitorSession: false,
+            popup_redirect_uri: settings.redirect_uri,
+            popup_post_logout_redirect_uri: settings.post_logout_redirect_uri,
+            stateStore,
+            userStore,
+        }, navigator, navigator, new UnsupportedIframeNavigator());
+        this.storageNamespace = storageNamespace;
+    }
+    static async create(settings, nativeOptions = {}) {
+        assertRuntime();
+        assertSettings(settings);
+        await NativeOidc.configure({
+            [nativeContract.fields.prefersEphemeralWebBrowserSession]: nativeOptions.ios?.prefersEphemeralWebBrowserSession,
+            [nativeContract.fields.keychainAccessGroup]: nativeOptions.ios?.keychainAccessGroup,
+            [nativeContract.fields.keychainAccessibility]: nativeOptions.ios?.keychainAccessibility,
+        });
+        const manager = new CapacitorUserManager(settings, nativeOptions, nativeOptions.storageNamespace ?? 'default');
+        await manager.getValidUser();
+        manager.appStateListener = await App.addListener('appStateChange', ({ isActive }) => {
+            if (isActive) {
+                void manager
+                    .getValidUser()
+                    .catch((error) => manager.events._raiseSilentRenewError(error instanceof Error ? error : new Error('Silent renewal failed')));
+            }
+        });
+        return manager;
+    }
+    async signin(args = {}) {
+        return super.signinPopup(args);
+    }
+    async signout(args = {}) {
+        await super.signoutPopup(args);
+    }
+    async getValidUser(minimumValiditySeconds = 60) {
+        const user = await this.getUser();
+        if (!user)
+            return null;
+        if (user.expires_in === undefined || user.expires_in > minimumValiditySeconds)
+            return user;
+        return this.signinSilent();
+    }
+    signinSilent(args = {}) {
+        if (!this.refreshPromise) {
+            this.refreshPromise = this.refresh(args).finally(() => {
+                this.refreshPromise = undefined;
+            });
+        }
+        return this.refreshPromise;
+    }
+    async refresh(args) {
+        const user = await this.getUser();
+        if (!user?.refresh_token) {
+            if (user?.expired)
+                await this.removeUser();
+            return null;
+        }
+        const refresh = super.signinSilent({ ...args, forceIframeAuth: false }).catch(async (error) => {
+            if (error instanceof ErrorResponse && error.error === 'invalid_grant')
+                await this.removeUser();
+            throw error;
+        });
+        return refresh;
+    }
+    async storeUser(user) {
+        await super.storeUser(user);
+        await NativeOidc.setSessionSnapshot({
+            [nativeContract.fields.namespace]: this.storageNamespace,
+            [nativeContract.fields.value]: user
+                ? JSON.stringify(toStoredSession(user, this.settings.authority, this.settings.client_id))
+                : null,
+        });
+    }
+    async cancel() {
+        await NativeOidc.cancel();
+    }
+    async dispose() {
+        this.stopSilentRenew();
+        await this.appStateListener?.remove();
+        await this.cancel();
+    }
+    async signinRedirect() {
+        unsupported('Redirect navigation');
+    }
+    async signinRedirectCallback(_url) {
+        unsupported('Redirect navigation');
+    }
+    async signinCallback(_url) {
+        unsupported('Browser callback dispatch');
+    }
+    async signinResourceOwnerCredentials(_args) {
+        unsupported('Resource Owner Password Credentials');
+    }
+    async signinSilentCallback(_url) {
+        unsupported('Iframe navigation');
+    }
+    async signoutRedirect() {
+        unsupported('Redirect navigation');
+    }
+    async signoutRedirectCallback(_url) {
+        unsupported('Redirect navigation');
+    }
+    async signoutCallback(_url, _keepOpen) {
+        unsupported('Browser callback dispatch');
+    }
+    async signoutSilent() {
+        unsupported('Iframe logout');
+    }
+    async signoutSilentCallback(_url) {
+        unsupported('Iframe logout');
+    }
+    async querySessionStatus() {
+        unsupported('Browser session monitoring');
+    }
+}
+function assertRuntime() {
+    if (!globalThis.crypto?.subtle || !globalThis.crypto.getRandomValues) {
+        throw new CapacitorOidcError(nativeContract.errorCodes.unsupportedRuntime, 'Web Crypto is required by oidc-client-ts');
+    }
+}
+function assertSettings(settings) {
+    if ('client_secret' in settings) {
+        throw new CapacitorOidcError(nativeContract.errorCodes.unsupportedRuntime, 'Native public clients must not contain a client secret');
+    }
+    if ('client_authentication' in settings || 'dpop' in settings) {
+        throw new CapacitorOidcError(nativeContract.errorCodes.unsupportedRuntime, 'The supplied settings contain an unsupported native-client option');
+    }
+}
+function toStoredSession(user, issuer, clientId) {
+    return {
+        version: 1,
+        issuer,
+        clientId,
+        accessToken: user.access_token,
+        refreshToken: user.refresh_token,
+        idToken: user.id_token,
+        tokenType: user.token_type,
+        scope: user.scope,
+        expiresAt: user.expires_at,
+    };
+}
+//# sourceMappingURL=capacitor-user-manager.js.map

package/dist/esm/capacitor-user-manager.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"capacitor-user-manager.js","sourceRoot":"","sources":["../../src/capacitor-user-manager.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,MAAM,gBAAgB,CAAC;AAErC,OAAO,EACL,aAAa,EACb,WAAW,GAOZ,MAAM,gBAAgB,CAAC;AAExB,OAAO,EAAE,kBAAkB,EAAE,0BAA0B,EAAE,MAAM,uBAAuB,CAAC;AACvF,OAAO,EAAE,yBAAyB,EAAE,MAAM,gCAAgC,CAAC;AAE3E,OAAO,EAAE,kBAAkB,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AAC3D,OAAO,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAC;AAC7D,OAAO,EAAE,UAAU,EAAE,MAAM,UAAU,CAAC;AAEtC,MAAM,OAAO,oBAAqB,SAAQ,WAAW;IAOhC;IANX,cAAc,CAAwB;IACtC,gBAAgB,CAAwB;IAEhD,YACE,QAAsC,EACtC,aAAyC,EACxB,gBAAwB;QAEzC,MAAM,UAAU,GAAG,IAAI,yBAAyB,CAAC,GAAG,gBAAgB,eAAe,CAAC,CAAC;QACrF,MAAM,SAAS,GAAG,IAAI,yBAAyB,CAAC,GAAG,gBAAgB,UAAU,CAAC,CAAC;QAC/E,MAAM,SAAS,GAAG,IAAI,kBAAkB,CAAC,aAAa,CAAC,GAAG,EAAE,iCAAiC,IAAI,KAAK,CAAC,CAAC;QAExG,KAAK,CACH;YACE,GAAG,QAAQ;YACX,aAAa,EAAE,MAAM;YACrB,WAAW,EAAE,KAAK;YAClB,cAAc,EAAE,KAAK;YACrB,kBAAkB,EAAE,QAAQ,CAAC,YAAY;YACzC,8BAA8B,EAAE,QAAQ,CAAC,wBAAwB;YACjE,UAAU;YACV,SAAS;SACV,EACD,SAAS,EACT,SAAS,EACT,IAAI,0BAA0B,EAAE,CACjC,CAAC;QApBe,qBAAgB,GAAhB,gBAAgB,CAAQ;IAqB3C,CAAC;IAED,MAAM,CAAC,KAAK,CAAC,MAAM,CACjB,QAAsC,EACtC,gBAA4C,EAAE;QAE9C,aAAa,EAAE,CAAC;QAChB,cAAc,CAAC,QAAQ,CAAC,CAAC;QACzB,MAAM,UAAU,CAAC,SAAS,CAAC;YACzB,CAAC,cAAc,CAAC,MAAM,CAAC,iCAAiC,CAAC,EAAE,aAAa,CAAC,GAAG,EAAE,iCAAiC;YAC/G,CAAC,cAAc,CAAC,MAAM,CAAC,mBAAmB,CAAC,EAAE,aAAa,CAAC,GAAG,EAAE,mBAAmB;YACnF,CAAC,cAAc,CAAC,MAAM,CAAC,qBAAqB,CAAC,EAAE,aAAa,CAAC,GAAG,EAAE,qBAAqB;SACxF,CAAC,CAAC;QACH,MAAM,OAAO,GAAG,IAAI,oBAAoB,CAAC,QAAQ,EAAE,aAAa,EAAE,aAAa,CAAC,gBAAgB,IAAI,SAAS,CAAC,CAAC;QAC/G,MAAM,OAAO,CAAC,YAAY,EAAE,CAAC;QAC7B,OAAO,CAAC,gBAAgB,GAAG,MAAM,GAAG,CAAC,WAAW,CAAC,gBAAgB,EAAE,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE;YAClF,IAAI,QAAQ,EAAE,CAAC;gBACb,KAAK,OAAO;qBACT,YAAY,EAAE;qBACd,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE,CACxB,OAAO,CAAC,MAAM,CAAC,sBAAsB,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC,CAC3G,CAAC;YACN,CAAC;QACH,CAAC,CAAC,CAAC;QACH,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,OAAwB,EAAE;QACrC,OAAO,KAAK,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;IACjC,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,OAAyB,EAAE;QACvC,MAAM,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;IACjC,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,sBAAsB,GAAG,EAAE;QAC5C,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;QAClC,IAAI,CAAC,IAAI;YAAE,OAAO,IAAI,CAAC;QACvB,IAAI,IAAI,CAAC,UAAU,KAAK,SAAS,IAAI,IAAI,CAAC,UAAU,GAAG,sBAAsB;YAAE,OAAO,IAAI,CAAC;QAC3F,OAAO,IAAI,CAAC,YAAY,EAAE,CAAC;IAC7B,CAAC;IAEQ,YAAY,CAAC,OAAyB,EAAE;QAC/C,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC;YACzB,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE;gBACpD,IAAI,CAAC,cAAc,GAAG,SAAS,CAAC;YAClC,CAAC,CAAC,CAAC;QACL,CAAC;QACD,OAAO,IAAI,CAAC,cAAc,CAAC;IAC7B,CAAC;IAEO,KAAK,CAAC,OAAO,CAAC,IAAsB;QAC1C,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;QAClC,IAAI,CAAC,IAAI,EAAE,aAAa,EAAE,CAAC;YACzB,IAAI,IAAI,EAAE,OAAO;gBAAE,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC;YAC3C,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,OAAO,GAAG,KAAK,CAAC,YAAY,CAAC,EAAE,GAAG,IAAI,EAAE,eAAe,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,KAAK,EAAE,KAAc,EAAE,EAAE;YACrG,IAAI,KAAK,YAAY,aAAa,IAAI,KAAK,CAAC,KAAK,KAAK,eAAe;gBAAE,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC;YAC/F,MAAM,KAAK,CAAC;QACd,CAAC,CAAC,CAAC;QACH,OAAO,OAAO,CAAC;IACjB,CAAC;IAEQ,KAAK,CAAC,SAAS,CAAC,IAAiB;QACxC,MAAM,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QAC5B,MAAM,UAAU,CAAC,kBAAkB,CAAC;YAClC,CAAC,cAAc,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,IAAI,CAAC,gBAAgB;YACxD,CAAC,cAAc,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,IAAI;gBACjC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,eAAe,CAAC,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,SAAS,EAAE,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;gBACzF,CAAC,CAAC,IAAI;SACT,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,MAAM;QACV,MAAM,UAAU,CAAC,MAAM,EAAE,CAAC;IAC5B,CAAC;IAED,KAAK,CAAC,OAAO;QACX,IAAI,CAAC,eAAe,EAAE,CAAC;QACvB,MAAM,IAAI,CAAC,gBAAgB,EAAE,MAAM,EAAE,CAAC;QACtC,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC;IACtB,CAAC;IAEQ,KAAK,CAAC,cAAc;QAC3B,WAAW,CAAC,qBAAqB,CAAC,CAAC;IACrC,CAAC;IAEQ,KAAK,CAAC,sBAAsB,CAAC,IAAa;QACjD,WAAW,CAAC,qBAAqB,CAAC,CAAC;IACrC,CAAC;IAEQ,KAAK,CAAC,cAAc,CAAC,IAAa;QACzC,WAAW,CAAC,2BAA2B,CAAC,CAAC;IAC3C,CAAC;IAEQ,KAAK,CAAC,8BAA8B,CAAC,KAAyC;QACrF,WAAW,CAAC,qCAAqC,CAAC,CAAC;IACrD,CAAC;IAEQ,KAAK,CAAC,oBAAoB,CAAC,IAAa;QAC/C,WAAW,CAAC,mBAAmB,CAAC,CAAC;IACnC,CAAC;IAEQ,KAAK,CAAC,eAAe;QAC5B,WAAW,CAAC,qBAAqB,CAAC,CAAC;IACrC,CAAC;IAEQ,KAAK,CAAC,uBAAuB,CAAC,IAAa;QAClD,WAAW,CAAC,qBAAqB,CAAC,CAAC;IACrC,CAAC;IAEQ,KAAK,CAAC,eAAe,CAAC,IAAa,EAAE,SAAmB;QAC/D,WAAW,CAAC,2BAA2B,CAAC,CAAC;IAC3C,CAAC;IAEQ,KAAK,CAAC,aAAa;QAC1B,WAAW,CAAC,eAAe,CAAC,CAAC;IAC/B,CAAC;IAEQ,KAAK,CAAC,qBAAqB,CAAC,IAAa;QAChD,WAAW,CAAC,eAAe,CAAC,CAAC;IAC/B,CAAC;IAEQ,KAAK,CAAC,kBAAkB;QAC/B,WAAW,CAAC,4BAA4B,CAAC,CAAC;IAC5C,CAAC;CACF;AAED,SAAS,aAAa;IACpB,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,MAAM,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,eAAe,EAAE,CAAC;QACrE,MAAM,IAAI,kBAAkB,CAC1B,cAAc,CAAC,UAAU,CAAC,kBAAkB,EAC5C,0CAA0C,CAC3C,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,cAAc,CAAC,QAAsC;IAC5D,IAAI,eAAe,IAAI,QAAQ,EAAE,CAAC;QAChC,MAAM,IAAI,kBAAkB,CAC1B,cAAc,CAAC,UAAU,CAAC,kBAAkB,EAC5C,wDAAwD,CACzD,CAAC;IACJ,CAAC;IACD,IAAI,uBAAuB,IAAI,QAAQ,IAAI,MAAM,IAAI,QAAQ,EAAE,CAAC;QAC9D,MAAM,IAAI,kBAAkB,CAC1B,cAAc,CAAC,UAAU,CAAC,kBAAkB,EAC5C,mEAAmE,CACpE,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,eAAe,CAAC,IAAU,EAAE,MAAc,EAAE,QAAgB;IACnE,OAAO;QACL,OAAO,EAAE,CAAC;QACV,MAAM;QACN,QAAQ;QACR,WAAW,EAAE,IAAI,CAAC,YAAY;QAC9B,YAAY,EAAE,IAAI,CAAC,aAAa;QAChC,OAAO,EAAE,IAAI,CAAC,QAAQ;QACtB,SAAS,EAAE,IAAI,CAAC,UAAU;QAC1B,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,SAAS,EAAE,IAAI,CAAC,UAAU;KAC3B,CAAC;AACJ,CAAC","sourcesContent":["import { App } from '@capacitor/app';\nimport type { PluginListenerHandle } from '@capacitor/core';\nimport {\n  ErrorResponse,\n  UserManager,\n  type SigninPopupArgs,\n  type SigninResourceOwnerCredentialsArgs,\n  type SigninSilentArgs,\n  type SignoutResponse,\n  type SignoutPopupArgs,\n  type User,\n} from 'oidc-client-ts';\n\nimport { CapacitorNavigator, UnsupportedIframeNavigator } from './capacitor-navigator';\nimport { CapacitorSecureStateStore } from './capacitor-secure-state-store';\nimport type { CapacitorOidcNativeOptions, CapacitorUserManagerSettings, StoredSessionV1 } from './definitions';\nimport { CapacitorOidcError, unsupported } from './errors';\nimport { nativeContract } from './generated/native-contract';\nimport { NativeOidc } from './native';\n\nexport class CapacitorUserManager extends UserManager {\n  private refreshPromise?: Promise<User | null>;\n  private appStateListener?: PluginListenerHandle;\n\n  private constructor(\n    settings: CapacitorUserManagerSettings,\n    nativeOptions: CapacitorOidcNativeOptions,\n    private readonly storageNamespace: string,\n  ) {\n    const stateStore = new CapacitorSecureStateStore(`${storageNamespace}.transactions`);\n    const userStore = new CapacitorSecureStateStore(`${storageNamespace}.session`);\n    const navigator = new CapacitorNavigator(nativeOptions.ios?.prefersEphemeralWebBrowserSession ?? false);\n\n    super(\n      {\n        ...settings,\n        response_type: 'code',\n        disablePKCE: false,\n        monitorSession: false,\n        popup_redirect_uri: settings.redirect_uri,\n        popup_post_logout_redirect_uri: settings.post_logout_redirect_uri,\n        stateStore,\n        userStore,\n      },\n      navigator,\n      navigator,\n      new UnsupportedIframeNavigator(),\n    );\n  }\n\n  static async create(\n    settings: CapacitorUserManagerSettings,\n    nativeOptions: CapacitorOidcNativeOptions = {},\n  ): Promise<CapacitorUserManager> {\n    assertRuntime();\n    assertSettings(settings);\n    await NativeOidc.configure({\n      [nativeContract.fields.prefersEphemeralWebBrowserSession]: nativeOptions.ios?.prefersEphemeralWebBrowserSession,\n      [nativeContract.fields.keychainAccessGroup]: nativeOptions.ios?.keychainAccessGroup,\n      [nativeContract.fields.keychainAccessibility]: nativeOptions.ios?.keychainAccessibility,\n    });\n    const manager = new CapacitorUserManager(settings, nativeOptions, nativeOptions.storageNamespace ?? 'default');\n    await manager.getValidUser();\n    manager.appStateListener = await App.addListener('appStateChange', ({ isActive }) => {\n      if (isActive) {\n        void manager\n          .getValidUser()\n          .catch((error: unknown) =>\n            manager.events._raiseSilentRenewError(error instanceof Error ? error : new Error('Silent renewal failed')),\n          );\n      }\n    });\n    return manager;\n  }\n\n  async signin(args: SigninPopupArgs = {}): Promise<User> {\n    return super.signinPopup(args);\n  }\n\n  async signout(args: SignoutPopupArgs = {}): Promise<void> {\n    await super.signoutPopup(args);\n  }\n\n  async getValidUser(minimumValiditySeconds = 60): Promise<User | null> {\n    const user = await this.getUser();\n    if (!user) return null;\n    if (user.expires_in === undefined || user.expires_in > minimumValiditySeconds) return user;\n    return this.signinSilent();\n  }\n\n  override signinSilent(args: SigninSilentArgs = {}): Promise<User | null> {\n    if (!this.refreshPromise) {\n      this.refreshPromise = this.refresh(args).finally(() => {\n        this.refreshPromise = undefined;\n      });\n    }\n    return this.refreshPromise;\n  }\n\n  private async refresh(args: SigninSilentArgs): Promise<User | null> {\n    const user = await this.getUser();\n    if (!user?.refresh_token) {\n      if (user?.expired) await this.removeUser();\n      return null;\n    }\n\n    const refresh = super.signinSilent({ ...args, forceIframeAuth: false }).catch(async (error: unknown) => {\n      if (error instanceof ErrorResponse && error.error === 'invalid_grant') await this.removeUser();\n      throw error;\n    });\n    return refresh;\n  }\n\n  override async storeUser(user: User | null): Promise<void> {\n    await super.storeUser(user);\n    await NativeOidc.setSessionSnapshot({\n      [nativeContract.fields.namespace]: this.storageNamespace,\n      [nativeContract.fields.value]: user\n        ? JSON.stringify(toStoredSession(user, this.settings.authority, this.settings.client_id))\n        : null,\n    });\n  }\n\n  async cancel(): Promise<void> {\n    await NativeOidc.cancel();\n  }\n\n  async dispose(): Promise<void> {\n    this.stopSilentRenew();\n    await this.appStateListener?.remove();\n    await this.cancel();\n  }\n\n  override async signinRedirect(): Promise<void> {\n    unsupported('Redirect navigation');\n  }\n\n  override async signinRedirectCallback(_url?: string): Promise<User> {\n    unsupported('Redirect navigation');\n  }\n\n  override async signinCallback(_url?: string): Promise<User | undefined> {\n    unsupported('Browser callback dispatch');\n  }\n\n  override async signinResourceOwnerCredentials(_args: SigninResourceOwnerCredentialsArgs): Promise<User> {\n    unsupported('Resource Owner Password Credentials');\n  }\n\n  override async signinSilentCallback(_url?: string): Promise<void> {\n    unsupported('Iframe navigation');\n  }\n\n  override async signoutRedirect(): Promise<void> {\n    unsupported('Redirect navigation');\n  }\n\n  override async signoutRedirectCallback(_url?: string): Promise<SignoutResponse> {\n    unsupported('Redirect navigation');\n  }\n\n  override async signoutCallback(_url?: string, _keepOpen?: boolean): Promise<SignoutResponse | undefined> {\n    unsupported('Browser callback dispatch');\n  }\n\n  override async signoutSilent(): Promise<void> {\n    unsupported('Iframe logout');\n  }\n\n  override async signoutSilentCallback(_url?: string): Promise<void> {\n    unsupported('Iframe logout');\n  }\n\n  override async querySessionStatus(): Promise<null> {\n    unsupported('Browser session monitoring');\n  }\n}\n\nfunction assertRuntime(): void {\n  if (!globalThis.crypto?.subtle || !globalThis.crypto.getRandomValues) {\n    throw new CapacitorOidcError(\n      nativeContract.errorCodes.unsupportedRuntime,\n      'Web Crypto is required by oidc-client-ts',\n    );\n  }\n}\n\nfunction assertSettings(settings: CapacitorUserManagerSettings): void {\n  if ('client_secret' in settings) {\n    throw new CapacitorOidcError(\n      nativeContract.errorCodes.unsupportedRuntime,\n      'Native public clients must not contain a client secret',\n    );\n  }\n  if ('client_authentication' in settings || 'dpop' in settings) {\n    throw new CapacitorOidcError(\n      nativeContract.errorCodes.unsupportedRuntime,\n      'The supplied settings contain an unsupported native-client option',\n    );\n  }\n}\n\nfunction toStoredSession(user: User, issuer: string, clientId: string): StoredSessionV1 {\n  return {\n    version: 1,\n    issuer,\n    clientId,\n    accessToken: user.access_token,\n    refreshToken: user.refresh_token,\n    idToken: user.id_token,\n    tokenType: user.token_type,\n    scope: user.scope,\n    expiresAt: user.expires_at,\n  };\n}\n"]}

package/dist/esm/definitions.d.ts

@@ -0,0 +1,62 @@
+import type { UserManagerSettings } from 'oidc-client-ts';
+import type { NativeErrorCode } from './generated/native-contract';
+export type CapacitorOidcErrorCode = NativeErrorCode;
+export interface IOSNativeOptions {
+    prefersEphemeralWebBrowserSession?: boolean;
+    keychainAccessGroup?: string;
+    keychainAccessibility?: 'afterFirstUnlockThisDeviceOnly' | 'whenUnlockedThisDeviceOnly';
+}
+export interface CapacitorOidcNativeOptions {
+    ios?: IOSNativeOptions;
+    storageNamespace?: string;
+}
+type UnsupportedSettings = 'client_secret' | 'client_authentication' | 'disablePKCE' | 'dpop' | 'monitorSession' | 'response_type' | 'silent_redirect_uri' | 'stateStore' | 'userStore';
+export type CapacitorUserManagerSettings = Omit<UserManagerSettings, UnsupportedSettings | 'post_logout_redirect_uri'> & {
+    post_logout_redirect_uri: string;
+};
+export interface StoredSessionV1 {
+    version: 1;
+    issuer: string;
+    clientId: string;
+    accessToken: string;
+    refreshToken?: string;
+    idToken?: string;
+    tokenType: string;
+    scope?: string;
+    expiresAt?: number;
+}
+export interface NativeOpenOptions {
+    url: string;
+    callbackUrl: string;
+    prefersEphemeralWebBrowserSession: boolean;
+}
+export interface NativeStorageOptions {
+    namespace: string;
+    key: string;
+}
+export interface CapacitorOidcPlugin {
+    configure(options: IOSNativeOptions): Promise<void>;
+    open(options: NativeOpenOptions): Promise<{
+        url: string;
+    }>;
+    cancel(): Promise<void>;
+    storageSet(options: NativeStorageOptions & {
+        value: string;
+    }): Promise<void>;
+    storageGet(options: NativeStorageOptions): Promise<{
+        value: string | null;
+    }>;
+    storageRemove(options: NativeStorageOptions): Promise<{
+        value: string | null;
+    }>;
+    storageGetAllKeys(options: {
+        namespace: string;
+    }): Promise<{
+        keys: string[];
+    }>;
+    setSessionSnapshot(options: {
+        namespace: string;
+        value: string | null;
+    }): Promise<void>;
+}
+export {};

package/dist/esm/definitions.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=definitions.js.map

package/dist/esm/definitions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"definitions.js","sourceRoot":"","sources":["../../src/definitions.ts"],"names":[],"mappings":"","sourcesContent":["import type { UserManagerSettings } from 'oidc-client-ts';\n\nimport type { NativeErrorCode } from './generated/native-contract';\n\nexport type CapacitorOidcErrorCode = NativeErrorCode;\n\nexport interface IOSNativeOptions {\n  prefersEphemeralWebBrowserSession?: boolean;\n  keychainAccessGroup?: string;\n  keychainAccessibility?: 'afterFirstUnlockThisDeviceOnly' | 'whenUnlockedThisDeviceOnly';\n}\n\nexport interface CapacitorOidcNativeOptions {\n  ios?: IOSNativeOptions;\n  storageNamespace?: string;\n}\n\ntype UnsupportedSettings =\n  | 'client_secret'\n  | 'client_authentication'\n  | 'disablePKCE'\n  | 'dpop'\n  | 'monitorSession'\n  | 'response_type'\n  | 'silent_redirect_uri'\n  | 'stateStore'\n  | 'userStore';\n\nexport type CapacitorUserManagerSettings = Omit<\n  UserManagerSettings,\n  UnsupportedSettings | 'post_logout_redirect_uri'\n> & {\n  post_logout_redirect_uri: string;\n};\n\nexport interface StoredSessionV1 {\n  version: 1;\n  issuer: string;\n  clientId: string;\n  accessToken: string;\n  refreshToken?: string;\n  idToken?: string;\n  tokenType: string;\n  scope?: string;\n  expiresAt?: number;\n}\n\nexport interface NativeOpenOptions {\n  url: string;\n  callbackUrl: string;\n  prefersEphemeralWebBrowserSession: boolean;\n}\n\nexport interface NativeStorageOptions {\n  namespace: string;\n  key: string;\n}\n\nexport interface CapacitorOidcPlugin {\n  configure(options: IOSNativeOptions): Promise<void>;\n  open(options: NativeOpenOptions): Promise<{ url: string }>;\n  cancel(): Promise<void>;\n  storageSet(options: NativeStorageOptions & { value: string }): Promise<void>;\n  storageGet(options: NativeStorageOptions): Promise<{ value: string | null }>;\n  storageRemove(options: NativeStorageOptions): Promise<{ value: string | null }>;\n  storageGetAllKeys(options: { namespace: string }): Promise<{ keys: string[] }>;\n  setSessionSnapshot(options: { namespace: string; value: string | null }): Promise<void>;\n}\n"]}

package/dist/esm/errors.d.ts

@@ -0,0 +1,6 @@
+import type { CapacitorOidcErrorCode } from './definitions';
+export declare class CapacitorOidcError extends Error {
+    readonly code: CapacitorOidcErrorCode;
+    constructor(code: CapacitorOidcErrorCode, message: string);
+}
+export declare function unsupported(feature: string): never;

package/dist/esm/errors.js

@@ -0,0 +1,13 @@
+import { nativeContract } from './generated/native-contract';
+export class CapacitorOidcError extends Error {
+    code;
+    constructor(code, message) {
+        super(message);
+        this.code = code;
+        this.name = 'CapacitorOidcError';
+    }
+}
+export function unsupported(feature) {
+    throw new CapacitorOidcError(nativeContract.errorCodes.unsupportedRuntime, `${feature} is not available in a native Capacitor runtime`);
+}
+//# sourceMappingURL=errors.js.map

package/dist/esm/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../src/errors.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAC;AAE7D,MAAM,OAAO,kBAAmB,SAAQ,KAAK;IAEzB;IADlB,YACkB,IAA4B,EAC5C,OAAe;QAEf,KAAK,CAAC,OAAO,CAAC,CAAC;QAHC,SAAI,GAAJ,IAAI,CAAwB;QAI5C,IAAI,CAAC,IAAI,GAAG,oBAAoB,CAAC;IACnC,CAAC;CACF;AAED,MAAM,UAAU,WAAW,CAAC,OAAe;IACzC,MAAM,IAAI,kBAAkB,CAC1B,cAAc,CAAC,UAAU,CAAC,kBAAkB,EAC5C,GAAG,OAAO,iDAAiD,CAC5D,CAAC;AACJ,CAAC","sourcesContent":["import type { CapacitorOidcErrorCode } from './definitions';\nimport { nativeContract } from './generated/native-contract';\n\nexport class CapacitorOidcError extends Error {\n  constructor(\n    public readonly code: CapacitorOidcErrorCode,\n    message: string,\n  ) {\n    super(message);\n    this.name = 'CapacitorOidcError';\n  }\n}\n\nexport function unsupported(feature: string): never {\n  throw new CapacitorOidcError(\n    nativeContract.errorCodes.unsupportedRuntime,\n    `${feature} is not available in a native Capacitor runtime`,\n  );\n}\n"]}

package/dist/esm/generated/native-contract.d.ts

@@ -0,0 +1,37 @@
+export declare const nativeContract: {
+    readonly pluginName: "CapacitorOidc";
+    readonly methods: {
+        readonly configure: "configure";
+        readonly open: "open";
+        readonly cancel: "cancel";
+        readonly storageSet: "storageSet";
+        readonly storageGet: "storageGet";
+        readonly storageRemove: "storageRemove";
+        readonly storageGetAllKeys: "storageGetAllKeys";
+        readonly setSessionSnapshot: "setSessionSnapshot";
+    };
+    readonly fields: {
+        readonly url: "url";
+        readonly callbackUrl: "callbackUrl";
+        readonly prefersEphemeralWebBrowserSession: "prefersEphemeralWebBrowserSession";
+        readonly keychainAccessGroup: "keychainAccessGroup";
+        readonly keychainAccessibility: "keychainAccessibility";
+        readonly namespace: "namespace";
+        readonly key: "key";
+        readonly value: "value";
+        readonly keys: "keys";
+    };
+    readonly errorCodes: {
+        readonly authSessionInProgress: "AUTH_SESSION_IN_PROGRESS";
+        readonly userCancelled: "USER_CANCELLED";
+        readonly browserUnavailable: "BROWSER_UNAVAILABLE";
+        readonly invalidCallback: "INVALID_CALLBACK";
+        readonly secureStorageError: "SECURE_STORAGE_ERROR";
+        readonly unsupportedRuntime: "UNSUPPORTED_RUNTIME";
+    };
+    readonly keychainAccessibility: {
+        readonly afterFirstUnlockThisDeviceOnly: "afterFirstUnlockThisDeviceOnly";
+        readonly whenUnlockedThisDeviceOnly: "whenUnlockedThisDeviceOnly";
+    };
+};
+export type NativeErrorCode = (typeof nativeContract.errorCodes)[keyof typeof nativeContract.errorCodes];

package/dist/esm/generated/native-contract.js

@@ -0,0 +1,38 @@
+// Generated by scripts/generate-native-contract.mjs. Do not edit.
+export const nativeContract = {
+    pluginName: 'CapacitorOidc',
+    methods: {
+        configure: 'configure',
+        open: 'open',
+        cancel: 'cancel',
+        storageSet: 'storageSet',
+        storageGet: 'storageGet',
+        storageRemove: 'storageRemove',
+        storageGetAllKeys: 'storageGetAllKeys',
+        setSessionSnapshot: 'setSessionSnapshot',
+    },
+    fields: {
+        url: 'url',
+        callbackUrl: 'callbackUrl',
+        prefersEphemeralWebBrowserSession: 'prefersEphemeralWebBrowserSession',
+        keychainAccessGroup: 'keychainAccessGroup',
+        keychainAccessibility: 'keychainAccessibility',
+        namespace: 'namespace',
+        key: 'key',
+        value: 'value',
+        keys: 'keys',
+    },
+    errorCodes: {
+        authSessionInProgress: 'AUTH_SESSION_IN_PROGRESS',
+        userCancelled: 'USER_CANCELLED',
+        browserUnavailable: 'BROWSER_UNAVAILABLE',
+        invalidCallback: 'INVALID_CALLBACK',
+        secureStorageError: 'SECURE_STORAGE_ERROR',
+        unsupportedRuntime: 'UNSUPPORTED_RUNTIME',
+    },
+    keychainAccessibility: {
+        afterFirstUnlockThisDeviceOnly: 'afterFirstUnlockThisDeviceOnly',
+        whenUnlockedThisDeviceOnly: 'whenUnlockedThisDeviceOnly',
+    },
+};
+//# sourceMappingURL=native-contract.js.map

package/dist/esm/generated/native-contract.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"native-contract.js","sourceRoot":"","sources":["../../../src/generated/native-contract.ts"],"names":[],"mappings":"AAAA,kEAAkE;AAElE,MAAM,CAAC,MAAM,cAAc,GAAG;IAC5B,UAAU,EAAE,eAAe;IAC3B,OAAO,EAAE;QACP,SAAS,EAAE,WAAW;QACtB,IAAI,EAAE,MAAM;QACZ,MAAM,EAAE,QAAQ;QAChB,UAAU,EAAE,YAAY;QACxB,UAAU,EAAE,YAAY;QACxB,aAAa,EAAE,eAAe;QAC9B,iBAAiB,EAAE,mBAAmB;QACtC,kBAAkB,EAAE,oBAAoB;KACzC;IACD,MAAM,EAAE;QACN,GAAG,EAAE,KAAK;QACV,WAAW,EAAE,aAAa;QAC1B,iCAAiC,EAAE,mCAAmC;QACtE,mBAAmB,EAAE,qBAAqB;QAC1C,qBAAqB,EAAE,uBAAuB;QAC9C,SAAS,EAAE,WAAW;QACtB,GAAG,EAAE,KAAK;QACV,KAAK,EAAE,OAAO;QACd,IAAI,EAAE,MAAM;KACb;IACD,UAAU,EAAE;QACV,qBAAqB,EAAE,0BAA0B;QACjD,aAAa,EAAE,gBAAgB;QAC/B,kBAAkB,EAAE,qBAAqB;QACzC,eAAe,EAAE,kBAAkB;QACnC,kBAAkB,EAAE,sBAAsB;QAC1C,kBAAkB,EAAE,qBAAqB;KAC1C;IACD,qBAAqB,EAAE;QACrB,8BAA8B,EAAE,gCAAgC;QAChE,0BAA0B,EAAE,4BAA4B;KACzD;CACO,CAAC","sourcesContent":["// Generated by scripts/generate-native-contract.mjs. Do not edit.\n\nexport const nativeContract = {\n  pluginName: 'CapacitorOidc',\n  methods: {\n    configure: 'configure',\n    open: 'open',\n    cancel: 'cancel',\n    storageSet: 'storageSet',\n    storageGet: 'storageGet',\n    storageRemove: 'storageRemove',\n    storageGetAllKeys: 'storageGetAllKeys',\n    setSessionSnapshot: 'setSessionSnapshot',\n  },\n  fields: {\n    url: 'url',\n    callbackUrl: 'callbackUrl',\n    prefersEphemeralWebBrowserSession: 'prefersEphemeralWebBrowserSession',\n    keychainAccessGroup: 'keychainAccessGroup',\n    keychainAccessibility: 'keychainAccessibility',\n    namespace: 'namespace',\n    key: 'key',\n    value: 'value',\n    keys: 'keys',\n  },\n  errorCodes: {\n    authSessionInProgress: 'AUTH_SESSION_IN_PROGRESS',\n    userCancelled: 'USER_CANCELLED',\n    browserUnavailable: 'BROWSER_UNAVAILABLE',\n    invalidCallback: 'INVALID_CALLBACK',\n    secureStorageError: 'SECURE_STORAGE_ERROR',\n    unsupportedRuntime: 'UNSUPPORTED_RUNTIME',\n  },\n  keychainAccessibility: {\n    afterFirstUnlockThisDeviceOnly: 'afterFirstUnlockThisDeviceOnly',\n    whenUnlockedThisDeviceOnly: 'whenUnlockedThisDeviceOnly',\n  },\n} as const;\n\nexport type NativeErrorCode = (typeof nativeContract.errorCodes)[keyof typeof nativeContract.errorCodes];\n"]}

package/dist/esm/index.d.ts

@@ -0,0 +1,5 @@
+export { CapacitorUserManager } from './capacitor-user-manager';
+export { CapacitorSecureStateStore } from './capacitor-secure-state-store';
+export { CapacitorOidcError } from './errors';
+export type { CapacitorOidcErrorCode, CapacitorOidcNativeOptions, CapacitorUserManagerSettings, IOSNativeOptions, StoredSessionV1, } from './definitions';
+export { User, UserManagerEvents } from 'oidc-client-ts';

package/dist/esm/index.js

@@ -0,0 +1,5 @@
+export { CapacitorUserManager } from './capacitor-user-manager';
+export { CapacitorSecureStateStore } from './capacitor-secure-state-store';
+export { CapacitorOidcError } from './errors';
+export { User, UserManagerEvents } from 'oidc-client-ts';
+//# sourceMappingURL=index.js.map

package/dist/esm/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAC;AAChE,OAAO,EAAE,yBAAyB,EAAE,MAAM,gCAAgC,CAAC;AAC3E,OAAO,EAAE,kBAAkB,EAAE,MAAM,UAAU,CAAC;AAQ9C,OAAO,EAAE,IAAI,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC","sourcesContent":["export { CapacitorUserManager } from './capacitor-user-manager';\nexport { CapacitorSecureStateStore } from './capacitor-secure-state-store';\nexport { CapacitorOidcError } from './errors';\nexport type {\n  CapacitorOidcErrorCode,\n  CapacitorOidcNativeOptions,\n  CapacitorUserManagerSettings,\n  IOSNativeOptions,\n  StoredSessionV1,\n} from './definitions';\nexport { User, UserManagerEvents } from 'oidc-client-ts';\n"]}

package/dist/esm/native.d.ts

@@ -0,0 +1,2 @@
+import type { CapacitorOidcPlugin } from './definitions';
+export declare const NativeOidc: CapacitorOidcPlugin;

package/dist/esm/native.js

@@ -0,0 +1,4 @@
+import { registerPlugin } from '@capacitor/core';
+import { nativeContract } from './generated/native-contract';
+export const NativeOidc = registerPlugin(nativeContract.pluginName);
+//# sourceMappingURL=native.js.map

package/dist/esm/native.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"native.js","sourceRoot":"","sources":["../../src/native.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AAGjD,OAAO,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAC;AAE7D,MAAM,CAAC,MAAM,UAAU,GAAG,cAAc,CAAsB,cAAc,CAAC,UAAU,CAAC,CAAC","sourcesContent":["import { registerPlugin } from '@capacitor/core';\n\nimport type { CapacitorOidcPlugin } from './definitions';\nimport { nativeContract } from './generated/native-contract';\n\nexport const NativeOidc = registerPlugin<CapacitorOidcPlugin>(nativeContract.pluginName);\n"]}