capacitor-oidc 0.0.3 → 0.0.5

package/README.md

@@ -4,21 +4,44 @@
 [![CI](https://github.com/jojopirker/capacitor-oidc/actions/workflows/ci.yml/badge.svg)](https://github.com/jojopirker/capacitor-oidc/actions/workflows/ci.yml)
 [![license](https://img.shields.io/npm/l/capacitor-oidc)](LICENSE)
 
-Native OAuth 2.0 and OpenID Connect for Capacitor, powered by
-[`oidc-client-ts`](https://github.com/authts/oidc-client-ts).
-
-`capacitor-oidc` adapts the familiar `UserManager` API to native iOS and Android
-applications. It keeps protocol behavior in `oidc-client-ts` and adds only the
-Capacitor-specific pieces:
-
-- system authentication UI instead of an embedded WebView;
-- secure native storage for OIDC transactions and sessions;
-- refresh-token renewal when the app is active or resumes;
-- a native-readable session snapshot for app widgets.
+`capacitor-oidc` is a simple OAuth 2.0 and OpenID Connect implementation for
+Capacitor 7 and 8 on native iOS and Android, powered by
+[`oidc-client-ts`](https://github.com/authts/oidc-client-ts). It uses
+Authorization Code Flow with PKCE, native system authentication UI, and secure
+storage.
+
+## Why `capacitor-oidc`?
+
+- Simple standards-based OAuth 2.0 and OIDC for Capacitor, without
+  provider-specific SDKs.
+- The familiar `oidc-client-ts` `UserManager` API, session objects, and events.
+- System authentication UI instead of an embedded WebView.
+- Secure native storage for OIDC transactions and sessions.
+- Refresh-token renewal when the app is active or resumes.
+- A native-readable session snapshot for app widgets.
 
 On iOS, authentication uses `ASWebAuthenticationSession`. On Android, it uses
 AndroidX Auth Tab with its Custom Tab fallback.
 
+## Compatibility
+
+| Target    | Support                                      |
+| --------- | -------------------------------------------- |
+| Capacitor | 7 and 8                                      |
+| iOS       | 15 or newer; `ASWebAuthenticationSession`    |
+| Android   | API 24 or newer; Auth Tab or Custom Tab      |
+| Flow      | Authorization Code Flow with PKCE            |
+| Providers | Compatible OAuth 2.0 and OpenID Connect APIs |
+| Web       | Use `oidc-client-ts` directly                |
+
+## Demo
+
+This example signs in against a local Keycloak realm with Authorization Code
+Flow and PKCE, renews the session through its refresh token, and signs out at
+the provider.
+
+![Capacitor OIDC login, renewal, and logout on the iOS Simulator](docs/assets/capacitor-oidc-demo.gif)
+
 ## Requirements
 
 - Capacitor 7 or 8
@@ -73,6 +96,9 @@ Authorization Code Flow with PKCE.
 the normal `UserManager` from `oidc-client-ts` and select the implementation with
 `Capacitor.isNativePlatform()` in the application.
 
+A runnable Keycloak-backed iOS application and its UI test live in
+[`example`](example).
+
 ## Documentation
 
 - [Getting started](docs/GETTING_STARTED.md)

package/dist/esm/capacitor-navigator.js

@@ -1,5 +1,5 @@
-import { CapacitorOidcError, unsupported } from './errors';
-import { NativeOidc } from './native';
+import { CapacitorOidcError, unsupported } from './errors.js';
+import { NativeOidc } from './native.js';
 export class CapacitorNavigator {
     prefersEphemeralWebBrowserSession;
     constructor(prefersEphemeralWebBrowserSession) {

package/dist/esm/capacitor-navigator.js.map

@@ -1 +1 @@
-{"version":3,"file":"capacitor-navigator.js","sourceRoot":"","sources":["../../src/capacitor-navigator.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,kBAAkB,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AAC3D,OAAO,EAAE,UAAU,EAAE,MAAM,UAAU,CAAC;AAEtC,MAAM,OAAO,kBAAkB;IACA;IAA7B,YAA6B,iCAA0C;QAA1C,sCAAiC,GAAjC,iCAAiC,CAAS;IAAG,CAAC;IAE3E,KAAK,CAAC,OAAO;QACX,OAAO,IAAI,eAAe,CAAC,IAAI,CAAC,iCAAiC,CAAC,CAAC;IACrE,CAAC;IAED,KAAK,CAAC,QAAQ;QACZ,WAAW,CAAC,qBAAqB,CAAC,CAAC;IACrC,CAAC;CACF;AAED,MAAM,eAAe;IACU;IAA7B,YAA6B,iCAA0C;QAA1C,sCAAiC,GAAjC,iCAAiC,CAAS;IAAG,CAAC;IAE3E,KAAK,CAAC,QAAQ,CAAC,EAAE,GAAG,EAAkB;QACpC,sBAAsB,CAAC,GAAG,CAAC,CAAC;QAC5B,MAAM,WAAW,GAAG,sBAAsB,CAAC,GAAG,CAAC,CAAC;QAChD,MAAM,QAAQ,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC;YACrC,GAAG;YACH,WAAW;YACX,iCAAiC,EAAE,IAAI,CAAC,iCAAiC;SAC1E,CAAC,CAAC;QAEH,IAAI,CAAC,kBAAkB,CAAC,QAAQ,CAAC,GAAG,EAAE,WAAW,CAAC,EAAE,CAAC;YACnD,MAAM,IAAI,kBAAkB,CAC1B,kBAAkB,EAClB,wEAAwE,CACzE,CAAC;QACJ,CAAC;QAED,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,KAAK;QACH,KAAK,UAAU,CAAC,MAAM,EAAE,CAAC;IAC3B,CAAC;CACF;AAED,MAAM,UAAU,sBAAsB,CAAC,UAAkB;IACvD,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,CAAC;IAChC,MAAM,cAAc,GAClB,GAAG,CAAC,QAAQ,KAAK,OAAO;QACxB,CAAC,GAAG,CAAC,QAAQ,KAAK,WAAW,IAAI,GAAG,CAAC,QAAQ,KAAK,WAAW,IAAI,GAAG,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC;IAC7F,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,cAAc,EAAE,CAAC;QACjD,MAAM,IAAI,kBAAkB,CAAC,qBAAqB,EAAE,wDAAwD,CAAC,CAAC;IAChH,CAAC;AACH,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,UAAkB;IACvD,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,CAAC;IAChC,MAAM,QAAQ,GACZ,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,0BAA0B,CAAC;QAChD,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,YAAY,CAAC;QAClC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;IACvC,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,MAAM,IAAI,kBAAkB,CAAC,kBAAkB,EAAE,kDAAkD,CAAC,CAAC;IACvG,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,WAAmB,EAAE,aAAqB;IAC3E,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,CAAC;IACpC,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,aAAa,CAAC,CAAC;IACxC,OAAO,CACL,MAAM,CAAC,QAAQ,CAAC,WAAW,EAAE,KAAK,QAAQ,CAAC,QAAQ,CAAC,WAAW,EAAE;QACjE,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,QAAQ,CAAC,IAAI,CAAC,WAAW,EAAE;QACzD,MAAM,CAAC,QAAQ,KAAK,QAAQ,CAAC,QAAQ,CACtC,CAAC;AACJ,CAAC;AAED,MAAM,OAAO,0BAA0B;IACrC,KAAK,CAAC,OAAO;QACX,WAAW,CAAC,mBAAmB,CAAC,CAAC;IACnC,CAAC;IAED,KAAK,CAAC,QAAQ;QACZ,WAAW,CAAC,mBAAmB,CAAC,CAAC;IACnC,CAAC;CACF","sourcesContent":["import type { INavigator, IWindow, NavigateParams, NavigateResponse } from 'oidc-client-ts';\n\nimport { CapacitorOidcError, unsupported } from './errors';\nimport { NativeOidc } from './native';\n\nexport class CapacitorNavigator implements INavigator {\n  constructor(private readonly prefersEphemeralWebBrowserSession: boolean) {}\n\n  async prepare(): Promise<IWindow> {\n    return new CapacitorWindow(this.prefersEphemeralWebBrowserSession);\n  }\n\n  async callback(): Promise<void> {\n    unsupported('Navigator callbacks');\n  }\n}\n\nclass CapacitorWindow implements IWindow {\n  constructor(private readonly prefersEphemeralWebBrowserSession: boolean) {}\n\n  async navigate({ url }: NavigateParams): Promise<NavigateResponse> {\n    assertSecureRequestUrl(url);\n    const callbackUrl = callbackUrlFromRequest(url);\n    const response = await NativeOidc.open({\n      url,\n      callbackUrl,\n      prefersEphemeralWebBrowserSession: this.prefersEphemeralWebBrowserSession,\n    });\n\n    if (!isExpectedCallback(response.url, callbackUrl)) {\n      throw new CapacitorOidcError(\n        'INVALID_CALLBACK',\n        'The authentication callback does not match the configured redirect URI',\n      );\n    }\n\n    return response;\n  }\n\n  close(): void {\n    void NativeOidc.cancel();\n  }\n}\n\nexport function assertSecureRequestUrl(requestUrl: string): void {\n  const url = new URL(requestUrl);\n  const isHttpLoopback =\n    url.protocol === 'http:' &&\n    (url.hostname === 'localhost' || url.hostname === '127.0.0.1' || url.hostname === '[::1]');\n  if (url.protocol !== 'https:' && !isHttpLoopback) {\n    throw new CapacitorOidcError('BROWSER_UNAVAILABLE', 'OIDC authorization and logout endpoints must use HTTPS');\n  }\n}\n\nexport function callbackUrlFromRequest(requestUrl: string): string {\n  const url = new URL(requestUrl);\n  const callback =\n    url.searchParams.get('post_logout_redirect_uri') ??\n    url.searchParams.get('logout_uri') ??\n    url.searchParams.get('redirect_uri');\n  if (!callback) {\n    throw new CapacitorOidcError('INVALID_CALLBACK', 'The OIDC request does not contain a callback URI');\n  }\n  return callback;\n}\n\nexport function isExpectedCallback(actualValue: string, expectedValue: string): boolean {\n  const actual = new URL(actualValue);\n  const expected = new URL(expectedValue);\n  return (\n    actual.protocol.toLowerCase() === expected.protocol.toLowerCase() &&\n    actual.host.toLowerCase() === expected.host.toLowerCase() &&\n    actual.pathname === expected.pathname\n  );\n}\n\nexport class UnsupportedIframeNavigator implements INavigator {\n  async prepare(): Promise<IWindow> {\n    unsupported('Iframe navigation');\n  }\n\n  async callback(): Promise<void> {\n    unsupported('Iframe navigation');\n  }\n}\n"]}
+{"version":3,"file":"capacitor-navigator.js","sourceRoot":"","sources":["../../src/capacitor-navigator.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,kBAAkB,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC9D,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,MAAM,OAAO,kBAAkB;IACA;IAA7B,YAA6B,iCAA0C;QAA1C,sCAAiC,GAAjC,iCAAiC,CAAS;IAAG,CAAC;IAE3E,KAAK,CAAC,OAAO;QACX,OAAO,IAAI,eAAe,CAAC,IAAI,CAAC,iCAAiC,CAAC,CAAC;IACrE,CAAC;IAED,KAAK,CAAC,QAAQ;QACZ,WAAW,CAAC,qBAAqB,CAAC,CAAC;IACrC,CAAC;CACF;AAED,MAAM,eAAe;IACU;IAA7B,YAA6B,iCAA0C;QAA1C,sCAAiC,GAAjC,iCAAiC,CAAS;IAAG,CAAC;IAE3E,KAAK,CAAC,QAAQ,CAAC,EAAE,GAAG,EAAkB;QACpC,sBAAsB,CAAC,GAAG,CAAC,CAAC;QAC5B,MAAM,WAAW,GAAG,sBAAsB,CAAC,GAAG,CAAC,CAAC;QAChD,MAAM,QAAQ,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC;YACrC,GAAG;YACH,WAAW;YACX,iCAAiC,EAAE,IAAI,CAAC,iCAAiC;SAC1E,CAAC,CAAC;QAEH,IAAI,CAAC,kBAAkB,CAAC,QAAQ,CAAC,GAAG,EAAE,WAAW,CAAC,EAAE,CAAC;YACnD,MAAM,IAAI,kBAAkB,CAC1B,kBAAkB,EAClB,wEAAwE,CACzE,CAAC;QACJ,CAAC;QAED,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,KAAK;QACH,KAAK,UAAU,CAAC,MAAM,EAAE,CAAC;IAC3B,CAAC;CACF;AAED,MAAM,UAAU,sBAAsB,CAAC,UAAkB;IACvD,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,CAAC;IAChC,MAAM,cAAc,GAClB,GAAG,CAAC,QAAQ,KAAK,OAAO;QACxB,CAAC,GAAG,CAAC,QAAQ,KAAK,WAAW,IAAI,GAAG,CAAC,QAAQ,KAAK,WAAW,IAAI,GAAG,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC;IAC7F,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,cAAc,EAAE,CAAC;QACjD,MAAM,IAAI,kBAAkB,CAAC,qBAAqB,EAAE,wDAAwD,CAAC,CAAC;IAChH,CAAC;AACH,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,UAAkB;IACvD,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,CAAC;IAChC,MAAM,QAAQ,GACZ,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,0BAA0B,CAAC;QAChD,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,YAAY,CAAC;QAClC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;IACvC,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,MAAM,IAAI,kBAAkB,CAAC,kBAAkB,EAAE,kDAAkD,CAAC,CAAC;IACvG,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,WAAmB,EAAE,aAAqB;IAC3E,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,CAAC;IACpC,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,aAAa,CAAC,CAAC;IACxC,OAAO,CACL,MAAM,CAAC,QAAQ,CAAC,WAAW,EAAE,KAAK,QAAQ,CAAC,QAAQ,CAAC,WAAW,EAAE;QACjE,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,QAAQ,CAAC,IAAI,CAAC,WAAW,EAAE;QACzD,MAAM,CAAC,QAAQ,KAAK,QAAQ,CAAC,QAAQ,CACtC,CAAC;AACJ,CAAC;AAED,MAAM,OAAO,0BAA0B;IACrC,KAAK,CAAC,OAAO;QACX,WAAW,CAAC,mBAAmB,CAAC,CAAC;IACnC,CAAC;IAED,KAAK,CAAC,QAAQ;QACZ,WAAW,CAAC,mBAAmB,CAAC,CAAC;IACnC,CAAC;CACF","sourcesContent":["import type { INavigator, IWindow, NavigateParams, NavigateResponse } from 'oidc-client-ts';\n\nimport { CapacitorOidcError, unsupported } from './errors.js';\nimport { NativeOidc } from './native.js';\n\nexport class CapacitorNavigator implements INavigator {\n  constructor(private readonly prefersEphemeralWebBrowserSession: boolean) {}\n\n  async prepare(): Promise<IWindow> {\n    return new CapacitorWindow(this.prefersEphemeralWebBrowserSession);\n  }\n\n  async callback(): Promise<void> {\n    unsupported('Navigator callbacks');\n  }\n}\n\nclass CapacitorWindow implements IWindow {\n  constructor(private readonly prefersEphemeralWebBrowserSession: boolean) {}\n\n  async navigate({ url }: NavigateParams): Promise<NavigateResponse> {\n    assertSecureRequestUrl(url);\n    const callbackUrl = callbackUrlFromRequest(url);\n    const response = await NativeOidc.open({\n      url,\n      callbackUrl,\n      prefersEphemeralWebBrowserSession: this.prefersEphemeralWebBrowserSession,\n    });\n\n    if (!isExpectedCallback(response.url, callbackUrl)) {\n      throw new CapacitorOidcError(\n        'INVALID_CALLBACK',\n        'The authentication callback does not match the configured redirect URI',\n      );\n    }\n\n    return response;\n  }\n\n  close(): void {\n    void NativeOidc.cancel();\n  }\n}\n\nexport function assertSecureRequestUrl(requestUrl: string): void {\n  const url = new URL(requestUrl);\n  const isHttpLoopback =\n    url.protocol === 'http:' &&\n    (url.hostname === 'localhost' || url.hostname === '127.0.0.1' || url.hostname === '[::1]');\n  if (url.protocol !== 'https:' && !isHttpLoopback) {\n    throw new CapacitorOidcError('BROWSER_UNAVAILABLE', 'OIDC authorization and logout endpoints must use HTTPS');\n  }\n}\n\nexport function callbackUrlFromRequest(requestUrl: string): string {\n  const url = new URL(requestUrl);\n  const callback =\n    url.searchParams.get('post_logout_redirect_uri') ??\n    url.searchParams.get('logout_uri') ??\n    url.searchParams.get('redirect_uri');\n  if (!callback) {\n    throw new CapacitorOidcError('INVALID_CALLBACK', 'The OIDC request does not contain a callback URI');\n  }\n  return callback;\n}\n\nexport function isExpectedCallback(actualValue: string, expectedValue: string): boolean {\n  const actual = new URL(actualValue);\n  const expected = new URL(expectedValue);\n  return (\n    actual.protocol.toLowerCase() === expected.protocol.toLowerCase() &&\n    actual.host.toLowerCase() === expected.host.toLowerCase() &&\n    actual.pathname === expected.pathname\n  );\n}\n\nexport class UnsupportedIframeNavigator implements INavigator {\n  async prepare(): Promise<IWindow> {\n    unsupported('Iframe navigation');\n  }\n\n  async callback(): Promise<void> {\n    unsupported('Iframe navigation');\n  }\n}\n"]}

package/dist/esm/capacitor-secure-state-store.js

@@ -1,4 +1,4 @@
-import { NativeOidc } from './native';
+import { NativeOidc } from './native.js';
 export class CapacitorSecureStateStore {
     namespace;
     constructor(namespace) {

package/dist/esm/capacitor-secure-state-store.js.map

@@ -1 +1 @@
-{"version":3,"file":"capacitor-secure-state-store.js","sourceRoot":"","sources":["../../src/capacitor-secure-state-store.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,UAAU,EAAE,MAAM,UAAU,CAAC;AAEtC,MAAM,OAAO,yBAAyB;IACP;IAA7B,YAA6B,SAAiB;QAAjB,cAAS,GAAT,SAAS,CAAQ;IAAG,CAAC;IAElD,KAAK,CAAC,GAAG,CAAC,GAAW,EAAE,KAAa;QAClC,MAAM,UAAU,CAAC,UAAU,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC;IACzE,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,GAAW;QACnB,OAAO,CAAC,MAAM,UAAU,CAAC,UAAU,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC;IACjF,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,GAAW;QACtB,OAAO,CAAC,MAAM,UAAU,CAAC,aAAa,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC;IACpF,CAAC;IAED,KAAK,CAAC,UAAU;QACd,OAAO,CAAC,MAAM,UAAU,CAAC,iBAAiB,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IAClF,CAAC;CACF","sourcesContent":["import type { StateStore } from 'oidc-client-ts';\n\nimport { NativeOidc } from './native';\n\nexport class CapacitorSecureStateStore implements StateStore {\n  constructor(private readonly namespace: string) {}\n\n  async set(key: string, value: string): Promise<void> {\n    await NativeOidc.storageSet({ namespace: this.namespace, key, value });\n  }\n\n  async get(key: string): Promise<string | null> {\n    return (await NativeOidc.storageGet({ namespace: this.namespace, key })).value;\n  }\n\n  async remove(key: string): Promise<string | null> {\n    return (await NativeOidc.storageRemove({ namespace: this.namespace, key })).value;\n  }\n\n  async getAllKeys(): Promise<string[]> {\n    return (await NativeOidc.storageGetAllKeys({ namespace: this.namespace })).keys;\n  }\n}\n"]}
+{"version":3,"file":"capacitor-secure-state-store.js","sourceRoot":"","sources":["../../src/capacitor-secure-state-store.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,MAAM,OAAO,yBAAyB;IACP;IAA7B,YAA6B,SAAiB;QAAjB,cAAS,GAAT,SAAS,CAAQ;IAAG,CAAC;IAElD,KAAK,CAAC,GAAG,CAAC,GAAW,EAAE,KAAa;QAClC,MAAM,UAAU,CAAC,UAAU,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC;IACzE,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,GAAW;QACnB,OAAO,CAAC,MAAM,UAAU,CAAC,UAAU,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC;IACjF,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,GAAW;QACtB,OAAO,CAAC,MAAM,UAAU,CAAC,aAAa,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC;IACpF,CAAC;IAED,KAAK,CAAC,UAAU;QACd,OAAO,CAAC,MAAM,UAAU,CAAC,iBAAiB,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IAClF,CAAC;CACF","sourcesContent":["import type { StateStore } from 'oidc-client-ts';\n\nimport { NativeOidc } from './native.js';\n\nexport class CapacitorSecureStateStore implements StateStore {\n  constructor(private readonly namespace: string) {}\n\n  async set(key: string, value: string): Promise<void> {\n    await NativeOidc.storageSet({ namespace: this.namespace, key, value });\n  }\n\n  async get(key: string): Promise<string | null> {\n    return (await NativeOidc.storageGet({ namespace: this.namespace, key })).value;\n  }\n\n  async remove(key: string): Promise<string | null> {\n    return (await NativeOidc.storageRemove({ namespace: this.namespace, key })).value;\n  }\n\n  async getAllKeys(): Promise<string[]> {\n    return (await NativeOidc.storageGetAllKeys({ namespace: this.namespace })).keys;\n  }\n}\n"]}

package/dist/esm/capacitor-user-manager.d.ts

@@ -1,5 +1,5 @@
 import { UserManager, type SigninPopupArgs, type SigninResourceOwnerCredentialsArgs, type SigninSilentArgs, type SignoutResponse, type SignoutPopupArgs, type User } from 'oidc-client-ts';
-import type { CapacitorOidcNativeOptions, CapacitorUserManagerSettings } from './definitions';
+import type { CapacitorOidcNativeOptions, CapacitorUserManagerSettings } from './definitions.js';
 export declare class CapacitorUserManager extends UserManager {
     private readonly storageNamespace;
     private automaticRenewalPromise?;

package/dist/esm/capacitor-user-manager.js

@@ -1,9 +1,9 @@
 import { App } from '@capacitor/app';
 import { ErrorResponse, UserManager, } from 'oidc-client-ts';
-import { CapacitorNavigator, UnsupportedIframeNavigator } from './capacitor-navigator';
-import { CapacitorSecureStateStore } from './capacitor-secure-state-store';
-import { CapacitorOidcError, unsupported } from './errors';
-import { NativeOidc } from './native';
+import { CapacitorNavigator, UnsupportedIframeNavigator } from './capacitor-navigator.js';
+import { CapacitorSecureStateStore } from './capacitor-secure-state-store.js';
+import { CapacitorOidcError, unsupported } from './errors.js';
+import { NativeOidc } from './native.js';
 export class CapacitorUserManager extends UserManager {
     storageNamespace;
     automaticRenewalPromise;

package/dist/esm/capacitor-user-manager.js.map

@@ -1 +1 @@
-{"version":3,"file":"capacitor-user-manager.js","sourceRoot":"","sources":["../../src/capacitor-user-manager.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,MAAM,gBAAgB,CAAC;AAErC,OAAO,EACL,aAAa,EACb,WAAW,GAOZ,MAAM,gBAAgB,CAAC;AAExB,OAAO,EAAE,kBAAkB,EAAE,0BAA0B,EAAE,MAAM,uBAAuB,CAAC;AACvF,OAAO,EAAE,yBAAyB,EAAE,MAAM,gCAAgC,CAAC;AAE3E,OAAO,EAAE,kBAAkB,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AAC3D,OAAO,EAAE,UAAU,EAAE,MAAM,UAAU,CAAC;AAEtC,MAAM,OAAO,oBAAqB,SAAQ,WAAW;IAQhC;IAPX,uBAAuB,CAAwB;IAC/C,cAAc,CAAwB;IACtC,gBAAgB,CAAwB;IAEhD,YACE,QAAsC,EACtC,aAAyC,EACxB,gBAAwB;QAEzC,MAAM,UAAU,GAAG,IAAI,yBAAyB,CAAC,GAAG,gBAAgB,eAAe,CAAC,CAAC;QACrF,MAAM,SAAS,GAAG,IAAI,yBAAyB,CAAC,GAAG,gBAAgB,UAAU,CAAC,CAAC;QAC/E,MAAM,SAAS,GAAG,IAAI,kBAAkB,CAAC,aAAa,CAAC,iCAAiC,IAAI,KAAK,CAAC,CAAC;QAEnG,KAAK,CACH;YACE,GAAG,QAAQ;YACX,aAAa,EAAE,MAAM;YACrB,WAAW,EAAE,KAAK;YAClB,cAAc,EAAE,KAAK;YACrB,kBAAkB,EAAE,QAAQ,CAAC,YAAY;YACzC,8BAA8B,EAAE,QAAQ,CAAC,wBAAwB;YACjE,UAAU;YACV,SAAS;SACV,EACD,SAAS,EACT,SAAS,EACT,IAAI,0BAA0B,EAAE,CACjC,CAAC;QApBe,qBAAgB,GAAhB,gBAAgB,CAAQ;IAqB3C,CAAC;IAED,MAAM,CAAC,KAAK,CAAC,MAAM,CACjB,QAAsC,EACtC,gBAA4C,EAAE;QAE9C,aAAa,EAAE,CAAC;QAChB,cAAc,CAAC,QAAQ,CAAC,CAAC;QACzB,MAAM,UAAU,CAAC,SAAS,CAAC,aAAa,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC;QACpD,MAAM,OAAO,GAAG,IAAI,oBAAoB,CAAC,QAAQ,EAAE,aAAa,EAAE,aAAa,CAAC,gBAAgB,IAAI,SAAS,CAAC,CAAC;QAC/G,MAAM,OAAO,CAAC,OAAO,EAAE,CAAC;QACxB,OAAO,CAAC,gBAAgB,GAAG,MAAM,GAAG,CAAC,WAAW,CAAC,gBAAgB,EAAE,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE;YAClF,IAAI,QAAQ,EAAE,CAAC;gBACb,OAAO,CAAC,wBAAwB,EAAE,CAAC;YACrC,CAAC;QACH,CAAC,CAAC,CAAC;QACH,OAAO,CAAC,wBAAwB,EAAE,CAAC;QACnC,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,OAAwB,EAAE;QACrC,OAAO,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;IAChC,CAAC;IAEQ,KAAK,CAAC,WAAW,CAAC,OAAwB,EAAE;QACnD,MAAM,IAAI,CAAC,cAAc,EAAE,CAAC;QAC5B,OAAO,KAAK,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;IACjC,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,OAAyB,EAAE;QACvC,MAAM,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;IAChC,CAAC;IAEQ,KAAK,CAAC,YAAY,CAAC,OAAyB,EAAE;QACrD,MAAM,IAAI,CAAC,cAAc,EAAE,CAAC;QAC5B,MAAM,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;IACjC,CAAC;IAEO,wBAAwB;QAC9B,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,oBAAoB,IAAI,IAAI,CAAC,uBAAuB;YAAE,OAAO;QAChF,MAAM,OAAO,GAAG,IAAI,CAAC,YAAY,EAAE,CAAC;QACpC,IAAI,CAAC,uBAAuB,GAAG,OAAO,CAAC;QACvC,KAAK,OAAO;aACT,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE,CACxB,IAAI,CAAC,MAAM,CAAC,sBAAsB,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC,CACxG;aACA,OAAO,CAAC,GAAG,EAAE;YACZ,IAAI,IAAI,CAAC,uBAAuB,KAAK,OAAO;gBAAE,IAAI,CAAC,uBAAuB,GAAG,SAAS,CAAC;QACzF,CAAC,CAAC,CAAC;IACP,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,sBAAsB,GAAG,EAAE;QAC5C,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;QAClC,IAAI,CAAC,IAAI;YAAE,OAAO,IAAI,CAAC;QACvB,IAAI,IAAI,CAAC,UAAU,KAAK,SAAS,IAAI,IAAI,CAAC,UAAU,GAAG,sBAAsB;YAAE,OAAO,IAAI,CAAC;QAC3F,OAAO,IAAI,CAAC,YAAY,EAAE,CAAC;IAC7B,CAAC;IAEQ,KAAK,CAAC,UAAU;QACvB,MAAM,IAAI,CAAC,cAAc,EAAE,CAAC;QAC5B,MAAM,KAAK,CAAC,UAAU,EAAE,CAAC;IAC3B,CAAC;IAEQ,YAAY,CAAC,OAAyB,EAAE;QAC/C,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC;YACzB,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE;gBACpD,IAAI,CAAC,cAAc,GAAG,SAAS,CAAC;YAClC,CAAC,CAAC,CAAC;QACL,CAAC;QACD,OAAO,IAAI,CAAC,cAAc,CAAC;IAC7B,CAAC;IAEO,KAAK,CAAC,OAAO,CAAC,IAAsB;QAC1C,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;QAClC,IAAI,CAAC,IAAI,EAAE,aAAa,EAAE,CAAC;YACzB,IAAI,IAAI,EAAE,OAAO;gBAAE,MAAM,KAAK,CAAC,UAAU,EAAE,CAAC;YAC5C,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,OAAO,GAAG,KAAK,CAAC,YAAY,CAAC,EAAE,GAAG,IAAI,EAAE,eAAe,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,KAAK,EAAE,KAAc,EAAE,EAAE;YACrG,IAAI,KAAK,YAAY,aAAa,IAAI,KAAK,CAAC,KAAK,KAAK,eAAe;gBAAE,MAAM,KAAK,CAAC,UAAU,EAAE,CAAC;YAChG,MAAM,KAAK,CAAC;QACd,CAAC,CAAC,CAAC;QACH,OAAO,OAAO,CAAC;IACjB,CAAC;IAEO,KAAK,CAAC,cAAc;QAC1B,MAAM,IAAI,CAAC,uBAAuB,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAC3D,MAAM,IAAI,CAAC,cAAc,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IACpD,CAAC;IAEQ,KAAK,CAAC,SAAS,CAAC,IAAiB;QACxC,MAAM,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QAC5B,MAAM,UAAU,CAAC,kBAAkB,CAAC;YAClC,SAAS,EAAE,IAAI,CAAC,gBAAgB;YAChC,KAAK,EAAE,IAAI;gBACT,CAAC,CAAC,IAAI,CAAC,SAAS,CACZ,eAAe,CACb,IAAI,EACJ,IAAI,CAAC,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,IAAI,IAAI,CAAC,QAAQ,CAAC,SAAS,EAC7E,IAAI,CAAC,QAAQ,CAAC,SAAS,CACxB,CACF;gBACH,CAAC,CAAC,IAAI;SACT,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,MAAM;QACV,MAAM,UAAU,CAAC,MAAM,EAAE,CAAC;IAC5B,CAAC;IAED,KAAK,CAAC,OAAO;QACX,IAAI,CAAC,eAAe,EAAE,CAAC;QACvB,MAAM,IAAI,CAAC,gBAAgB,EAAE,MAAM,EAAE,CAAC;QACtC,MAAM,IAAI,CAAC,cAAc,EAAE,CAAC;QAC5B,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC;IACtB,CAAC;IAEQ,KAAK,CAAC,cAAc;QAC3B,WAAW,CAAC,qBAAqB,CAAC,CAAC;IACrC,CAAC;IAEQ,KAAK,CAAC,sBAAsB,CAAC,IAAa;QACjD,WAAW,CAAC,qBAAqB,CAAC,CAAC;IACrC,CAAC;IAEQ,KAAK,CAAC,cAAc,CAAC,IAAa;QACzC,WAAW,CAAC,2BAA2B,CAAC,CAAC;IAC3C,CAAC;IAEQ,KAAK,CAAC,8BAA8B,CAAC,KAAyC;QACrF,WAAW,CAAC,qCAAqC,CAAC,CAAC;IACrD,CAAC;IAEQ,KAAK,CAAC,oBAAoB,CAAC,IAAa;QAC/C,WAAW,CAAC,mBAAmB,CAAC,CAAC;IACnC,CAAC;IAEQ,KAAK,CAAC,eAAe;QAC5B,WAAW,CAAC,qBAAqB,CAAC,CAAC;IACrC,CAAC;IAEQ,KAAK,CAAC,uBAAuB,CAAC,IAAa;QAClD,WAAW,CAAC,qBAAqB,CAAC,CAAC;IACrC,CAAC;IAEQ,KAAK,CAAC,eAAe,CAAC,IAAa,EAAE,SAAmB;QAC/D,WAAW,CAAC,2BAA2B,CAAC,CAAC;IAC3C,CAAC;IAEQ,KAAK,CAAC,aAAa;QAC1B,WAAW,CAAC,eAAe,CAAC,CAAC;IAC/B,CAAC;IAEQ,KAAK,CAAC,qBAAqB,CAAC,IAAa;QAChD,WAAW,CAAC,eAAe,CAAC,CAAC;IAC/B,CAAC;IAEQ,KAAK,CAAC,kBAAkB;QAC/B,WAAW,CAAC,4BAA4B,CAAC,CAAC;IAC5C,CAAC;CACF;AAED,SAAS,aAAa;IACpB,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,MAAM,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,eAAe,EAAE,CAAC;QACrE,MAAM,IAAI,kBAAkB,CAAC,qBAAqB,EAAE,0CAA0C,CAAC,CAAC;IAClG,CAAC;AACH,CAAC;AAED,SAAS,cAAc,CAAC,QAAsC;IAC5D,IAAI,eAAe,IAAI,QAAQ,EAAE,CAAC;QAChC,MAAM,IAAI,kBAAkB,CAAC,qBAAqB,EAAE,wDAAwD,CAAC,CAAC;IAChH,CAAC;IACD,IAAI,uBAAuB,IAAI,QAAQ,IAAI,MAAM,IAAI,QAAQ,EAAE,CAAC;QAC9D,MAAM,IAAI,kBAAkB,CAC1B,qBAAqB,EACrB,mEAAmE,CACpE,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,eAAe,CAAC,IAAU,EAAE,MAAc,EAAE,QAAgB;IACnE,OAAO;QACL,OAAO,EAAE,CAAC;QACV,MAAM;QACN,QAAQ;QACR,WAAW,EAAE,IAAI,CAAC,YAAY;QAC9B,YAAY,EAAE,IAAI,CAAC,aAAa;QAChC,OAAO,EAAE,IAAI,CAAC,QAAQ;QACtB,SAAS,EAAE,IAAI,CAAC,UAAU;QAC1B,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,SAAS,EAAE,IAAI,CAAC,UAAU;KAC3B,CAAC;AACJ,CAAC","sourcesContent":["import { App } from '@capacitor/app';\nimport type { PluginListenerHandle } from '@capacitor/core';\nimport {\n  ErrorResponse,\n  UserManager,\n  type SigninPopupArgs,\n  type SigninResourceOwnerCredentialsArgs,\n  type SigninSilentArgs,\n  type SignoutResponse,\n  type SignoutPopupArgs,\n  type User,\n} from 'oidc-client-ts';\n\nimport { CapacitorNavigator, UnsupportedIframeNavigator } from './capacitor-navigator';\nimport { CapacitorSecureStateStore } from './capacitor-secure-state-store';\nimport type { CapacitorOidcNativeOptions, CapacitorUserManagerSettings, StoredSessionV1 } from './definitions';\nimport { CapacitorOidcError, unsupported } from './errors';\nimport { NativeOidc } from './native';\n\nexport class CapacitorUserManager extends UserManager {\n  private automaticRenewalPromise?: Promise<User | null>;\n  private refreshPromise?: Promise<User | null>;\n  private appStateListener?: PluginListenerHandle;\n\n  private constructor(\n    settings: CapacitorUserManagerSettings,\n    nativeOptions: CapacitorOidcNativeOptions,\n    private readonly storageNamespace: string,\n  ) {\n    const stateStore = new CapacitorSecureStateStore(`${storageNamespace}.transactions`);\n    const userStore = new CapacitorSecureStateStore(`${storageNamespace}.session`);\n    const navigator = new CapacitorNavigator(nativeOptions.prefersEphemeralWebBrowserSession ?? false);\n\n    super(\n      {\n        ...settings,\n        response_type: 'code',\n        disablePKCE: false,\n        monitorSession: false,\n        popup_redirect_uri: settings.redirect_uri,\n        popup_post_logout_redirect_uri: settings.post_logout_redirect_uri,\n        stateStore,\n        userStore,\n      },\n      navigator,\n      navigator,\n      new UnsupportedIframeNavigator(),\n    );\n  }\n\n  static async create(\n    settings: CapacitorUserManagerSettings,\n    nativeOptions: CapacitorOidcNativeOptions = {},\n  ): Promise<CapacitorUserManager> {\n    assertRuntime();\n    assertSettings(settings);\n    await NativeOidc.configure(nativeOptions.ios ?? {});\n    const manager = new CapacitorUserManager(settings, nativeOptions, nativeOptions.storageNamespace ?? 'default');\n    await manager.getUser();\n    manager.appStateListener = await App.addListener('appStateChange', ({ isActive }) => {\n      if (isActive) {\n        manager.checkForAutomaticRenewal();\n      }\n    });\n    manager.checkForAutomaticRenewal();\n    return manager;\n  }\n\n  async signin(args: SigninPopupArgs = {}): Promise<User> {\n    return this.signinPopup(args);\n  }\n\n  override async signinPopup(args: SigninPopupArgs = {}): Promise<User> {\n    await this.waitForRenewal();\n    return super.signinPopup(args);\n  }\n\n  async signout(args: SignoutPopupArgs = {}): Promise<void> {\n    await this.signoutPopup(args);\n  }\n\n  override async signoutPopup(args: SignoutPopupArgs = {}): Promise<void> {\n    await this.waitForRenewal();\n    await super.signoutPopup(args);\n  }\n\n  private checkForAutomaticRenewal(): void {\n    if (!this.settings.automaticSilentRenew || this.automaticRenewalPromise) return;\n    const renewal = this.getValidUser();\n    this.automaticRenewalPromise = renewal;\n    void renewal\n      .catch((error: unknown) =>\n        this.events._raiseSilentRenewError(error instanceof Error ? error : new Error('Silent renewal failed')),\n      )\n      .finally(() => {\n        if (this.automaticRenewalPromise === renewal) this.automaticRenewalPromise = undefined;\n      });\n  }\n\n  async getValidUser(minimumValiditySeconds = 60): Promise<User | null> {\n    const user = await this.getUser();\n    if (!user) return null;\n    if (user.expires_in === undefined || user.expires_in > minimumValiditySeconds) return user;\n    return this.signinSilent();\n  }\n\n  override async removeUser(): Promise<void> {\n    await this.waitForRenewal();\n    await super.removeUser();\n  }\n\n  override signinSilent(args: SigninSilentArgs = {}): Promise<User | null> {\n    if (!this.refreshPromise) {\n      this.refreshPromise = this.refresh(args).finally(() => {\n        this.refreshPromise = undefined;\n      });\n    }\n    return this.refreshPromise;\n  }\n\n  private async refresh(args: SigninSilentArgs): Promise<User | null> {\n    const user = await this.getUser();\n    if (!user?.refresh_token) {\n      if (user?.expired) await super.removeUser();\n      return null;\n    }\n\n    const refresh = super.signinSilent({ ...args, forceIframeAuth: false }).catch(async (error: unknown) => {\n      if (error instanceof ErrorResponse && error.error === 'invalid_grant') await super.removeUser();\n      throw error;\n    });\n    return refresh;\n  }\n\n  private async waitForRenewal(): Promise<void> {\n    await this.automaticRenewalPromise?.catch(() => undefined);\n    await this.refreshPromise?.catch(() => undefined);\n  }\n\n  override async storeUser(user: User | null): Promise<void> {\n    await super.storeUser(user);\n    await NativeOidc.setSessionSnapshot({\n      namespace: this.storageNamespace,\n      value: user\n        ? JSON.stringify(\n            toStoredSession(\n              user,\n              user.profile.iss ?? this.settings.metadata?.issuer ?? this.settings.authority,\n              this.settings.client_id,\n            ),\n          )\n        : null,\n    });\n  }\n\n  async cancel(): Promise<void> {\n    await NativeOidc.cancel();\n  }\n\n  async dispose(): Promise<void> {\n    this.stopSilentRenew();\n    await this.appStateListener?.remove();\n    await this.waitForRenewal();\n    await this.cancel();\n  }\n\n  override async signinRedirect(): Promise<void> {\n    unsupported('Redirect navigation');\n  }\n\n  override async signinRedirectCallback(_url?: string): Promise<User> {\n    unsupported('Redirect navigation');\n  }\n\n  override async signinCallback(_url?: string): Promise<User | undefined> {\n    unsupported('Browser callback dispatch');\n  }\n\n  override async signinResourceOwnerCredentials(_args: SigninResourceOwnerCredentialsArgs): Promise<User> {\n    unsupported('Resource Owner Password Credentials');\n  }\n\n  override async signinSilentCallback(_url?: string): Promise<void> {\n    unsupported('Iframe navigation');\n  }\n\n  override async signoutRedirect(): Promise<void> {\n    unsupported('Redirect navigation');\n  }\n\n  override async signoutRedirectCallback(_url?: string): Promise<SignoutResponse> {\n    unsupported('Redirect navigation');\n  }\n\n  override async signoutCallback(_url?: string, _keepOpen?: boolean): Promise<SignoutResponse | undefined> {\n    unsupported('Browser callback dispatch');\n  }\n\n  override async signoutSilent(): Promise<void> {\n    unsupported('Iframe logout');\n  }\n\n  override async signoutSilentCallback(_url?: string): Promise<void> {\n    unsupported('Iframe logout');\n  }\n\n  override async querySessionStatus(): Promise<null> {\n    unsupported('Browser session monitoring');\n  }\n}\n\nfunction assertRuntime(): void {\n  if (!globalThis.crypto?.subtle || !globalThis.crypto.getRandomValues) {\n    throw new CapacitorOidcError('UNSUPPORTED_RUNTIME', 'Web Crypto is required by oidc-client-ts');\n  }\n}\n\nfunction assertSettings(settings: CapacitorUserManagerSettings): void {\n  if ('client_secret' in settings) {\n    throw new CapacitorOidcError('UNSUPPORTED_RUNTIME', 'Native public clients must not contain a client secret');\n  }\n  if ('client_authentication' in settings || 'dpop' in settings) {\n    throw new CapacitorOidcError(\n      'UNSUPPORTED_RUNTIME',\n      'The supplied settings contain an unsupported native-client option',\n    );\n  }\n}\n\nfunction toStoredSession(user: User, issuer: string, clientId: string): StoredSessionV1 {\n  return {\n    version: 1,\n    issuer,\n    clientId,\n    accessToken: user.access_token,\n    refreshToken: user.refresh_token,\n    idToken: user.id_token,\n    tokenType: user.token_type,\n    scope: user.scope,\n    expiresAt: user.expires_at,\n  };\n}\n"]}
+{"version":3,"file":"capacitor-user-manager.js","sourceRoot":"","sources":["../../src/capacitor-user-manager.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,MAAM,gBAAgB,CAAC;AAErC,OAAO,EACL,aAAa,EACb,WAAW,GAOZ,MAAM,gBAAgB,CAAC;AAExB,OAAO,EAAE,kBAAkB,EAAE,0BAA0B,EAAE,MAAM,0BAA0B,CAAC;AAC1F,OAAO,EAAE,yBAAyB,EAAE,MAAM,mCAAmC,CAAC;AAE9E,OAAO,EAAE,kBAAkB,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC9D,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,MAAM,OAAO,oBAAqB,SAAQ,WAAW;IAQhC;IAPX,uBAAuB,CAAwB;IAC/C,cAAc,CAAwB;IACtC,gBAAgB,CAAwB;IAEhD,YACE,QAAsC,EACtC,aAAyC,EACxB,gBAAwB;QAEzC,MAAM,UAAU,GAAG,IAAI,yBAAyB,CAAC,GAAG,gBAAgB,eAAe,CAAC,CAAC;QACrF,MAAM,SAAS,GAAG,IAAI,yBAAyB,CAAC,GAAG,gBAAgB,UAAU,CAAC,CAAC;QAC/E,MAAM,SAAS,GAAG,IAAI,kBAAkB,CAAC,aAAa,CAAC,iCAAiC,IAAI,KAAK,CAAC,CAAC;QAEnG,KAAK,CACH;YACE,GAAG,QAAQ;YACX,aAAa,EAAE,MAAM;YACrB,WAAW,EAAE,KAAK;YAClB,cAAc,EAAE,KAAK;YACrB,kBAAkB,EAAE,QAAQ,CAAC,YAAY;YACzC,8BAA8B,EAAE,QAAQ,CAAC,wBAAwB;YACjE,UAAU;YACV,SAAS;SACV,EACD,SAAS,EACT,SAAS,EACT,IAAI,0BAA0B,EAAE,CACjC,CAAC;QApBe,qBAAgB,GAAhB,gBAAgB,CAAQ;IAqB3C,CAAC;IAED,MAAM,CAAC,KAAK,CAAC,MAAM,CACjB,QAAsC,EACtC,gBAA4C,EAAE;QAE9C,aAAa,EAAE,CAAC;QAChB,cAAc,CAAC,QAAQ,CAAC,CAAC;QACzB,MAAM,UAAU,CAAC,SAAS,CAAC,aAAa,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC;QACpD,MAAM,OAAO,GAAG,IAAI,oBAAoB,CAAC,QAAQ,EAAE,aAAa,EAAE,aAAa,CAAC,gBAAgB,IAAI,SAAS,CAAC,CAAC;QAC/G,MAAM,OAAO,CAAC,OAAO,EAAE,CAAC;QACxB,OAAO,CAAC,gBAAgB,GAAG,MAAM,GAAG,CAAC,WAAW,CAAC,gBAAgB,EAAE,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE;YAClF,IAAI,QAAQ,EAAE,CAAC;gBACb,OAAO,CAAC,wBAAwB,EAAE,CAAC;YACrC,CAAC;QACH,CAAC,CAAC,CAAC;QACH,OAAO,CAAC,wBAAwB,EAAE,CAAC;QACnC,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,OAAwB,EAAE;QACrC,OAAO,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;IAChC,CAAC;IAEQ,KAAK,CAAC,WAAW,CAAC,OAAwB,EAAE;QACnD,MAAM,IAAI,CAAC,cAAc,EAAE,CAAC;QAC5B,OAAO,KAAK,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;IACjC,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,OAAyB,EAAE;QACvC,MAAM,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;IAChC,CAAC;IAEQ,KAAK,CAAC,YAAY,CAAC,OAAyB,EAAE;QACrD,MAAM,IAAI,CAAC,cAAc,EAAE,CAAC;QAC5B,MAAM,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;IACjC,CAAC;IAEO,wBAAwB;QAC9B,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,oBAAoB,IAAI,IAAI,CAAC,uBAAuB;YAAE,OAAO;QAChF,MAAM,OAAO,GAAG,IAAI,CAAC,YAAY,EAAE,CAAC;QACpC,IAAI,CAAC,uBAAuB,GAAG,OAAO,CAAC;QACvC,KAAK,OAAO;aACT,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE,CACxB,IAAI,CAAC,MAAM,CAAC,sBAAsB,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC,CACxG;aACA,OAAO,CAAC,GAAG,EAAE;YACZ,IAAI,IAAI,CAAC,uBAAuB,KAAK,OAAO;gBAAE,IAAI,CAAC,uBAAuB,GAAG,SAAS,CAAC;QACzF,CAAC,CAAC,CAAC;IACP,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,sBAAsB,GAAG,EAAE;QAC5C,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;QAClC,IAAI,CAAC,IAAI;YAAE,OAAO,IAAI,CAAC;QACvB,IAAI,IAAI,CAAC,UAAU,KAAK,SAAS,IAAI,IAAI,CAAC,UAAU,GAAG,sBAAsB;YAAE,OAAO,IAAI,CAAC;QAC3F,OAAO,IAAI,CAAC,YAAY,EAAE,CAAC;IAC7B,CAAC;IAEQ,KAAK,CAAC,UAAU;QACvB,MAAM,IAAI,CAAC,cAAc,EAAE,CAAC;QAC5B,MAAM,KAAK,CAAC,UAAU,EAAE,CAAC;IAC3B,CAAC;IAEQ,YAAY,CAAC,OAAyB,EAAE;QAC/C,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC;YACzB,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE;gBACpD,IAAI,CAAC,cAAc,GAAG,SAAS,CAAC;YAClC,CAAC,CAAC,CAAC;QACL,CAAC;QACD,OAAO,IAAI,CAAC,cAAc,CAAC;IAC7B,CAAC;IAEO,KAAK,CAAC,OAAO,CAAC,IAAsB;QAC1C,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;QAClC,IAAI,CAAC,IAAI,EAAE,aAAa,EAAE,CAAC;YACzB,IAAI,IAAI,EAAE,OAAO;gBAAE,MAAM,KAAK,CAAC,UAAU,EAAE,CAAC;YAC5C,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,OAAO,GAAG,KAAK,CAAC,YAAY,CAAC,EAAE,GAAG,IAAI,EAAE,eAAe,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,KAAK,EAAE,KAAc,EAAE,EAAE;YACrG,IAAI,KAAK,YAAY,aAAa,IAAI,KAAK,CAAC,KAAK,KAAK,eAAe;gBAAE,MAAM,KAAK,CAAC,UAAU,EAAE,CAAC;YAChG,MAAM,KAAK,CAAC;QACd,CAAC,CAAC,CAAC;QACH,OAAO,OAAO,CAAC;IACjB,CAAC;IAEO,KAAK,CAAC,cAAc;QAC1B,MAAM,IAAI,CAAC,uBAAuB,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAC3D,MAAM,IAAI,CAAC,cAAc,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IACpD,CAAC;IAEQ,KAAK,CAAC,SAAS,CAAC,IAAiB;QACxC,MAAM,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QAC5B,MAAM,UAAU,CAAC,kBAAkB,CAAC;YAClC,SAAS,EAAE,IAAI,CAAC,gBAAgB;YAChC,KAAK,EAAE,IAAI;gBACT,CAAC,CAAC,IAAI,CAAC,SAAS,CACZ,eAAe,CACb,IAAI,EACJ,IAAI,CAAC,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,IAAI,IAAI,CAAC,QAAQ,CAAC,SAAS,EAC7E,IAAI,CAAC,QAAQ,CAAC,SAAS,CACxB,CACF;gBACH,CAAC,CAAC,IAAI;SACT,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,MAAM;QACV,MAAM,UAAU,CAAC,MAAM,EAAE,CAAC;IAC5B,CAAC;IAED,KAAK,CAAC,OAAO;QACX,IAAI,CAAC,eAAe,EAAE,CAAC;QACvB,MAAM,IAAI,CAAC,gBAAgB,EAAE,MAAM,EAAE,CAAC;QACtC,MAAM,IAAI,CAAC,cAAc,EAAE,CAAC;QAC5B,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC;IACtB,CAAC;IAEQ,KAAK,CAAC,cAAc;QAC3B,WAAW,CAAC,qBAAqB,CAAC,CAAC;IACrC,CAAC;IAEQ,KAAK,CAAC,sBAAsB,CAAC,IAAa;QACjD,WAAW,CAAC,qBAAqB,CAAC,CAAC;IACrC,CAAC;IAEQ,KAAK,CAAC,cAAc,CAAC,IAAa;QACzC,WAAW,CAAC,2BAA2B,CAAC,CAAC;IAC3C,CAAC;IAEQ,KAAK,CAAC,8BAA8B,CAAC,KAAyC;QACrF,WAAW,CAAC,qCAAqC,CAAC,CAAC;IACrD,CAAC;IAEQ,KAAK,CAAC,oBAAoB,CAAC,IAAa;QAC/C,WAAW,CAAC,mBAAmB,CAAC,CAAC;IACnC,CAAC;IAEQ,KAAK,CAAC,eAAe;QAC5B,WAAW,CAAC,qBAAqB,CAAC,CAAC;IACrC,CAAC;IAEQ,KAAK,CAAC,uBAAuB,CAAC,IAAa;QAClD,WAAW,CAAC,qBAAqB,CAAC,CAAC;IACrC,CAAC;IAEQ,KAAK,CAAC,eAAe,CAAC,IAAa,EAAE,SAAmB;QAC/D,WAAW,CAAC,2BAA2B,CAAC,CAAC;IAC3C,CAAC;IAEQ,KAAK,CAAC,aAAa;QAC1B,WAAW,CAAC,eAAe,CAAC,CAAC;IAC/B,CAAC;IAEQ,KAAK,CAAC,qBAAqB,CAAC,IAAa;QAChD,WAAW,CAAC,eAAe,CAAC,CAAC;IAC/B,CAAC;IAEQ,KAAK,CAAC,kBAAkB;QAC/B,WAAW,CAAC,4BAA4B,CAAC,CAAC;IAC5C,CAAC;CACF;AAED,SAAS,aAAa;IACpB,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,MAAM,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,eAAe,EAAE,CAAC;QACrE,MAAM,IAAI,kBAAkB,CAAC,qBAAqB,EAAE,0CAA0C,CAAC,CAAC;IAClG,CAAC;AACH,CAAC;AAED,SAAS,cAAc,CAAC,QAAsC;IAC5D,IAAI,eAAe,IAAI,QAAQ,EAAE,CAAC;QAChC,MAAM,IAAI,kBAAkB,CAAC,qBAAqB,EAAE,wDAAwD,CAAC,CAAC;IAChH,CAAC;IACD,IAAI,uBAAuB,IAAI,QAAQ,IAAI,MAAM,IAAI,QAAQ,EAAE,CAAC;QAC9D,MAAM,IAAI,kBAAkB,CAC1B,qBAAqB,EACrB,mEAAmE,CACpE,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,eAAe,CAAC,IAAU,EAAE,MAAc,EAAE,QAAgB;IACnE,OAAO;QACL,OAAO,EAAE,CAAC;QACV,MAAM;QACN,QAAQ;QACR,WAAW,EAAE,IAAI,CAAC,YAAY;QAC9B,YAAY,EAAE,IAAI,CAAC,aAAa;QAChC,OAAO,EAAE,IAAI,CAAC,QAAQ;QACtB,SAAS,EAAE,IAAI,CAAC,UAAU;QAC1B,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,SAAS,EAAE,IAAI,CAAC,UAAU;KAC3B,CAAC;AACJ,CAAC","sourcesContent":["import { App } from '@capacitor/app';\nimport type { PluginListenerHandle } from '@capacitor/core';\nimport {\n  ErrorResponse,\n  UserManager,\n  type SigninPopupArgs,\n  type SigninResourceOwnerCredentialsArgs,\n  type SigninSilentArgs,\n  type SignoutResponse,\n  type SignoutPopupArgs,\n  type User,\n} from 'oidc-client-ts';\n\nimport { CapacitorNavigator, UnsupportedIframeNavigator } from './capacitor-navigator.js';\nimport { CapacitorSecureStateStore } from './capacitor-secure-state-store.js';\nimport type { CapacitorOidcNativeOptions, CapacitorUserManagerSettings, StoredSessionV1 } from './definitions.js';\nimport { CapacitorOidcError, unsupported } from './errors.js';\nimport { NativeOidc } from './native.js';\n\nexport class CapacitorUserManager extends UserManager {\n  private automaticRenewalPromise?: Promise<User | null>;\n  private refreshPromise?: Promise<User | null>;\n  private appStateListener?: PluginListenerHandle;\n\n  private constructor(\n    settings: CapacitorUserManagerSettings,\n    nativeOptions: CapacitorOidcNativeOptions,\n    private readonly storageNamespace: string,\n  ) {\n    const stateStore = new CapacitorSecureStateStore(`${storageNamespace}.transactions`);\n    const userStore = new CapacitorSecureStateStore(`${storageNamespace}.session`);\n    const navigator = new CapacitorNavigator(nativeOptions.prefersEphemeralWebBrowserSession ?? false);\n\n    super(\n      {\n        ...settings,\n        response_type: 'code',\n        disablePKCE: false,\n        monitorSession: false,\n        popup_redirect_uri: settings.redirect_uri,\n        popup_post_logout_redirect_uri: settings.post_logout_redirect_uri,\n        stateStore,\n        userStore,\n      },\n      navigator,\n      navigator,\n      new UnsupportedIframeNavigator(),\n    );\n  }\n\n  static async create(\n    settings: CapacitorUserManagerSettings,\n    nativeOptions: CapacitorOidcNativeOptions = {},\n  ): Promise<CapacitorUserManager> {\n    assertRuntime();\n    assertSettings(settings);\n    await NativeOidc.configure(nativeOptions.ios ?? {});\n    const manager = new CapacitorUserManager(settings, nativeOptions, nativeOptions.storageNamespace ?? 'default');\n    await manager.getUser();\n    manager.appStateListener = await App.addListener('appStateChange', ({ isActive }) => {\n      if (isActive) {\n        manager.checkForAutomaticRenewal();\n      }\n    });\n    manager.checkForAutomaticRenewal();\n    return manager;\n  }\n\n  async signin(args: SigninPopupArgs = {}): Promise<User> {\n    return this.signinPopup(args);\n  }\n\n  override async signinPopup(args: SigninPopupArgs = {}): Promise<User> {\n    await this.waitForRenewal();\n    return super.signinPopup(args);\n  }\n\n  async signout(args: SignoutPopupArgs = {}): Promise<void> {\n    await this.signoutPopup(args);\n  }\n\n  override async signoutPopup(args: SignoutPopupArgs = {}): Promise<void> {\n    await this.waitForRenewal();\n    await super.signoutPopup(args);\n  }\n\n  private checkForAutomaticRenewal(): void {\n    if (!this.settings.automaticSilentRenew || this.automaticRenewalPromise) return;\n    const renewal = this.getValidUser();\n    this.automaticRenewalPromise = renewal;\n    void renewal\n      .catch((error: unknown) =>\n        this.events._raiseSilentRenewError(error instanceof Error ? error : new Error('Silent renewal failed')),\n      )\n      .finally(() => {\n        if (this.automaticRenewalPromise === renewal) this.automaticRenewalPromise = undefined;\n      });\n  }\n\n  async getValidUser(minimumValiditySeconds = 60): Promise<User | null> {\n    const user = await this.getUser();\n    if (!user) return null;\n    if (user.expires_in === undefined || user.expires_in > minimumValiditySeconds) return user;\n    return this.signinSilent();\n  }\n\n  override async removeUser(): Promise<void> {\n    await this.waitForRenewal();\n    await super.removeUser();\n  }\n\n  override signinSilent(args: SigninSilentArgs = {}): Promise<User | null> {\n    if (!this.refreshPromise) {\n      this.refreshPromise = this.refresh(args).finally(() => {\n        this.refreshPromise = undefined;\n      });\n    }\n    return this.refreshPromise;\n  }\n\n  private async refresh(args: SigninSilentArgs): Promise<User | null> {\n    const user = await this.getUser();\n    if (!user?.refresh_token) {\n      if (user?.expired) await super.removeUser();\n      return null;\n    }\n\n    const refresh = super.signinSilent({ ...args, forceIframeAuth: false }).catch(async (error: unknown) => {\n      if (error instanceof ErrorResponse && error.error === 'invalid_grant') await super.removeUser();\n      throw error;\n    });\n    return refresh;\n  }\n\n  private async waitForRenewal(): Promise<void> {\n    await this.automaticRenewalPromise?.catch(() => undefined);\n    await this.refreshPromise?.catch(() => undefined);\n  }\n\n  override async storeUser(user: User | null): Promise<void> {\n    await super.storeUser(user);\n    await NativeOidc.setSessionSnapshot({\n      namespace: this.storageNamespace,\n      value: user\n        ? JSON.stringify(\n            toStoredSession(\n              user,\n              user.profile.iss ?? this.settings.metadata?.issuer ?? this.settings.authority,\n              this.settings.client_id,\n            ),\n          )\n        : null,\n    });\n  }\n\n  async cancel(): Promise<void> {\n    await NativeOidc.cancel();\n  }\n\n  async dispose(): Promise<void> {\n    this.stopSilentRenew();\n    await this.appStateListener?.remove();\n    await this.waitForRenewal();\n    await this.cancel();\n  }\n\n  override async signinRedirect(): Promise<void> {\n    unsupported('Redirect navigation');\n  }\n\n  override async signinRedirectCallback(_url?: string): Promise<User> {\n    unsupported('Redirect navigation');\n  }\n\n  override async signinCallback(_url?: string): Promise<User | undefined> {\n    unsupported('Browser callback dispatch');\n  }\n\n  override async signinResourceOwnerCredentials(_args: SigninResourceOwnerCredentialsArgs): Promise<User> {\n    unsupported('Resource Owner Password Credentials');\n  }\n\n  override async signinSilentCallback(_url?: string): Promise<void> {\n    unsupported('Iframe navigation');\n  }\n\n  override async signoutRedirect(): Promise<void> {\n    unsupported('Redirect navigation');\n  }\n\n  override async signoutRedirectCallback(_url?: string): Promise<SignoutResponse> {\n    unsupported('Redirect navigation');\n  }\n\n  override async signoutCallback(_url?: string, _keepOpen?: boolean): Promise<SignoutResponse | undefined> {\n    unsupported('Browser callback dispatch');\n  }\n\n  override async signoutSilent(): Promise<void> {\n    unsupported('Iframe logout');\n  }\n\n  override async signoutSilentCallback(_url?: string): Promise<void> {\n    unsupported('Iframe logout');\n  }\n\n  override async querySessionStatus(): Promise<null> {\n    unsupported('Browser session monitoring');\n  }\n}\n\nfunction assertRuntime(): void {\n  if (!globalThis.crypto?.subtle || !globalThis.crypto.getRandomValues) {\n    throw new CapacitorOidcError('UNSUPPORTED_RUNTIME', 'Web Crypto is required by oidc-client-ts');\n  }\n}\n\nfunction assertSettings(settings: CapacitorUserManagerSettings): void {\n  if ('client_secret' in settings) {\n    throw new CapacitorOidcError('UNSUPPORTED_RUNTIME', 'Native public clients must not contain a client secret');\n  }\n  if ('client_authentication' in settings || 'dpop' in settings) {\n    throw new CapacitorOidcError(\n      'UNSUPPORTED_RUNTIME',\n      'The supplied settings contain an unsupported native-client option',\n    );\n  }\n}\n\nfunction toStoredSession(user: User, issuer: string, clientId: string): StoredSessionV1 {\n  return {\n    version: 1,\n    issuer,\n    clientId,\n    accessToken: user.access_token,\n    refreshToken: user.refresh_token,\n    idToken: user.id_token,\n    tokenType: user.token_type,\n    scope: user.scope,\n    expiresAt: user.expires_at,\n  };\n}\n"]}

package/dist/esm/errors.d.ts

@@ -1,4 +1,4 @@
-import type { CapacitorOidcErrorCode } from './definitions';
+import type { CapacitorOidcErrorCode } from './definitions.js';
 export declare class CapacitorOidcError extends Error {
     readonly code: CapacitorOidcErrorCode;
     constructor(code: CapacitorOidcErrorCode, message: string);

package/dist/esm/errors.js.map

@@ -1 +1 @@
-{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../src/errors.ts"],"names":[],"mappings":"AAEA,MAAM,OAAO,kBAAmB,SAAQ,KAAK;IAEzB;IADlB,YACkB,IAA4B,EAC5C,OAAe;QAEf,KAAK,CAAC,OAAO,CAAC,CAAC;QAHC,SAAI,GAAJ,IAAI,CAAwB;QAI5C,IAAI,CAAC,IAAI,GAAG,oBAAoB,CAAC;IACnC,CAAC;CACF;AAED,MAAM,UAAU,WAAW,CAAC,OAAe;IACzC,MAAM,IAAI,kBAAkB,CAAC,qBAAqB,EAAE,GAAG,OAAO,iDAAiD,CAAC,CAAC;AACnH,CAAC","sourcesContent":["import type { CapacitorOidcErrorCode } from './definitions';\n\nexport class CapacitorOidcError extends Error {\n  constructor(\n    public readonly code: CapacitorOidcErrorCode,\n    message: string,\n  ) {\n    super(message);\n    this.name = 'CapacitorOidcError';\n  }\n}\n\nexport function unsupported(feature: string): never {\n  throw new CapacitorOidcError('UNSUPPORTED_RUNTIME', `${feature} is not available in a native Capacitor runtime`);\n}\n"]}
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../src/errors.ts"],"names":[],"mappings":"AAEA,MAAM,OAAO,kBAAmB,SAAQ,KAAK;IAEzB;IADlB,YACkB,IAA4B,EAC5C,OAAe;QAEf,KAAK,CAAC,OAAO,CAAC,CAAC;QAHC,SAAI,GAAJ,IAAI,CAAwB;QAI5C,IAAI,CAAC,IAAI,GAAG,oBAAoB,CAAC;IACnC,CAAC;CACF;AAED,MAAM,UAAU,WAAW,CAAC,OAAe;IACzC,MAAM,IAAI,kBAAkB,CAAC,qBAAqB,EAAE,GAAG,OAAO,iDAAiD,CAAC,CAAC;AACnH,CAAC","sourcesContent":["import type { CapacitorOidcErrorCode } from './definitions.js';\n\nexport class CapacitorOidcError extends Error {\n  constructor(\n    public readonly code: CapacitorOidcErrorCode,\n    message: string,\n  ) {\n    super(message);\n    this.name = 'CapacitorOidcError';\n  }\n}\n\nexport function unsupported(feature: string): never {\n  throw new CapacitorOidcError('UNSUPPORTED_RUNTIME', `${feature} is not available in a native Capacitor runtime`);\n}\n"]}

package/dist/esm/index.d.ts

@@ -1,5 +1,6 @@
-export { CapacitorUserManager } from './capacitor-user-manager';
-export { CapacitorSecureStateStore } from './capacitor-secure-state-store';
-export { CapacitorOidcError } from './errors';
-export type { CapacitorOidcErrorCode, CapacitorOidcNativeOptions, CapacitorUserManagerSettings, IOSNativeOptions, StoredSessionV1, } from './definitions';
-export { User, UserManagerEvents } from 'oidc-client-ts';
+export { CapacitorUserManager } from './capacitor-user-manager.js';
+export { CapacitorSecureStateStore } from './capacitor-secure-state-store.js';
+export { CapacitorOidcError } from './errors.js';
+export type { CapacitorOidcErrorCode, CapacitorOidcNativeOptions, CapacitorUserManagerSettings, IOSNativeOptions, StoredSessionV1, } from './definitions.js';
+export { User } from 'oidc-client-ts';
+export type { UserManagerEvents } from 'oidc-client-ts';

package/dist/esm/index.js

@@ -1,5 +1,5 @@
-export { CapacitorUserManager } from './capacitor-user-manager';
-export { CapacitorSecureStateStore } from './capacitor-secure-state-store';
-export { CapacitorOidcError } from './errors';
-export { User, UserManagerEvents } from 'oidc-client-ts';
+export { CapacitorUserManager } from './capacitor-user-manager.js';
+export { CapacitorSecureStateStore } from './capacitor-secure-state-store.js';
+export { CapacitorOidcError } from './errors.js';
+export { User } from 'oidc-client-ts';
 //# sourceMappingURL=index.js.map

package/dist/esm/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAC;AAChE,OAAO,EAAE,yBAAyB,EAAE,MAAM,gCAAgC,CAAC;AAC3E,OAAO,EAAE,kBAAkB,EAAE,MAAM,UAAU,CAAC;AAQ9C,OAAO,EAAE,IAAI,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC","sourcesContent":["export { CapacitorUserManager } from './capacitor-user-manager';\nexport { CapacitorSecureStateStore } from './capacitor-secure-state-store';\nexport { CapacitorOidcError } from './errors';\nexport type {\n  CapacitorOidcErrorCode,\n  CapacitorOidcNativeOptions,\n  CapacitorUserManagerSettings,\n  IOSNativeOptions,\n  StoredSessionV1,\n} from './definitions';\nexport { User, UserManagerEvents } from 'oidc-client-ts';\n"]}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AACnE,OAAO,EAAE,yBAAyB,EAAE,MAAM,mCAAmC,CAAC;AAC9E,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAQjD,OAAO,EAAE,IAAI,EAAE,MAAM,gBAAgB,CAAC","sourcesContent":["export { CapacitorUserManager } from './capacitor-user-manager.js';\nexport { CapacitorSecureStateStore } from './capacitor-secure-state-store.js';\nexport { CapacitorOidcError } from './errors.js';\nexport type {\n  CapacitorOidcErrorCode,\n  CapacitorOidcNativeOptions,\n  CapacitorUserManagerSettings,\n  IOSNativeOptions,\n  StoredSessionV1,\n} from './definitions.js';\nexport { User } from 'oidc-client-ts';\nexport type { UserManagerEvents } from 'oidc-client-ts';\n"]}

package/dist/esm/native.d.ts

@@ -1,2 +1,2 @@
-import type { CapacitorOidcPlugin } from './definitions';
+import type { CapacitorOidcPlugin } from './definitions.js';
 export declare const NativeOidc: CapacitorOidcPlugin;

package/dist/esm/native.js.map

@@ -1 +1 @@
-{"version":3,"file":"native.js","sourceRoot":"","sources":["../../src/native.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AAIjD,MAAM,CAAC,MAAM,UAAU,GAAG,cAAc,CAAsB,eAAe,CAAC,CAAC","sourcesContent":["import { registerPlugin } from '@capacitor/core';\n\nimport type { CapacitorOidcPlugin } from './definitions';\n\nexport const NativeOidc = registerPlugin<CapacitorOidcPlugin>('CapacitorOidc');\n"]}
+{"version":3,"file":"native.js","sourceRoot":"","sources":["../../src/native.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AAIjD,MAAM,CAAC,MAAM,UAAU,GAAG,cAAc,CAAsB,eAAe,CAAC,CAAC","sourcesContent":["import { registerPlugin } from '@capacitor/core';\n\nimport type { CapacitorOidcPlugin } from './definitions.js';\n\nexport const NativeOidc = registerPlugin<CapacitorOidcPlugin>('CapacitorOidc');\n"]}

package/dist/plugin.cjs

@@ -287,10 +287,6 @@ Object.defineProperty(exports, "User", {
     enumerable: true,
     get: function () { return oidcClientTs.User; }
 });
-Object.defineProperty(exports, "UserManagerEvents", {
-    enumerable: true,
-    get: function () { return oidcClientTs.UserManagerEvents; }
-});
 exports.CapacitorOidcError = CapacitorOidcError;
 exports.CapacitorSecureStateStore = CapacitorSecureStateStore;
 exports.CapacitorUserManager = CapacitorUserManager;

package/dist/plugin.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"plugin.cjs","sources":["esm/errors.js","esm/native.js","esm/capacitor-navigator.js","esm/capacitor-secure-state-store.js","esm/capacitor-user-manager.js"],"sourcesContent":["export class CapacitorOidcError extends Error {\n    code;\n    constructor(code, message) {\n        super(message);\n        this.code = code;\n        this.name = 'CapacitorOidcError';\n    }\n}\nexport function unsupported(feature) {\n    throw new CapacitorOidcError('UNSUPPORTED_RUNTIME', `${feature} is not available in a native Capacitor runtime`);\n}\n//# sourceMappingURL=errors.js.map","import { registerPlugin } from '@capacitor/core';\nexport const NativeOidc = registerPlugin('CapacitorOidc');\n//# sourceMappingURL=native.js.map","import { CapacitorOidcError, unsupported } from './errors';\nimport { NativeOidc } from './native';\nexport class CapacitorNavigator {\n    prefersEphemeralWebBrowserSession;\n    constructor(prefersEphemeralWebBrowserSession) {\n        this.prefersEphemeralWebBrowserSession = prefersEphemeralWebBrowserSession;\n    }\n    async prepare() {\n        return new CapacitorWindow(this.prefersEphemeralWebBrowserSession);\n    }\n    async callback() {\n        unsupported('Navigator callbacks');\n    }\n}\nclass CapacitorWindow {\n    prefersEphemeralWebBrowserSession;\n    constructor(prefersEphemeralWebBrowserSession) {\n        this.prefersEphemeralWebBrowserSession = prefersEphemeralWebBrowserSession;\n    }\n    async navigate({ url }) {\n        assertSecureRequestUrl(url);\n        const callbackUrl = callbackUrlFromRequest(url);\n        const response = await NativeOidc.open({\n            url,\n            callbackUrl,\n            prefersEphemeralWebBrowserSession: this.prefersEphemeralWebBrowserSession,\n        });\n        if (!isExpectedCallback(response.url, callbackUrl)) {\n            throw new CapacitorOidcError('INVALID_CALLBACK', 'The authentication callback does not match the configured redirect URI');\n        }\n        return response;\n    }\n    close() {\n        void NativeOidc.cancel();\n    }\n}\nexport function assertSecureRequestUrl(requestUrl) {\n    const url = new URL(requestUrl);\n    const isHttpLoopback = url.protocol === 'http:' &&\n        (url.hostname === 'localhost' || url.hostname === '127.0.0.1' || url.hostname === '[::1]');\n    if (url.protocol !== 'https:' && !isHttpLoopback) {\n        throw new CapacitorOidcError('BROWSER_UNAVAILABLE', 'OIDC authorization and logout endpoints must use HTTPS');\n    }\n}\nexport function callbackUrlFromRequest(requestUrl) {\n    const url = new URL(requestUrl);\n    const callback = url.searchParams.get('post_logout_redirect_uri') ??\n        url.searchParams.get('logout_uri') ??\n        url.searchParams.get('redirect_uri');\n    if (!callback) {\n        throw new CapacitorOidcError('INVALID_CALLBACK', 'The OIDC request does not contain a callback URI');\n    }\n    return callback;\n}\nexport function isExpectedCallback(actualValue, expectedValue) {\n    const actual = new URL(actualValue);\n    const expected = new URL(expectedValue);\n    return (actual.protocol.toLowerCase() === expected.protocol.toLowerCase() &&\n        actual.host.toLowerCase() === expected.host.toLowerCase() &&\n        actual.pathname === expected.pathname);\n}\nexport class UnsupportedIframeNavigator {\n    async prepare() {\n        unsupported('Iframe navigation');\n    }\n    async callback() {\n        unsupported('Iframe navigation');\n    }\n}\n//# sourceMappingURL=capacitor-navigator.js.map","import { NativeOidc } from './native';\nexport class CapacitorSecureStateStore {\n    namespace;\n    constructor(namespace) {\n        this.namespace = namespace;\n    }\n    async set(key, value) {\n        await NativeOidc.storageSet({ namespace: this.namespace, key, value });\n    }\n    async get(key) {\n        return (await NativeOidc.storageGet({ namespace: this.namespace, key })).value;\n    }\n    async remove(key) {\n        return (await NativeOidc.storageRemove({ namespace: this.namespace, key })).value;\n    }\n    async getAllKeys() {\n        return (await NativeOidc.storageGetAllKeys({ namespace: this.namespace })).keys;\n    }\n}\n//# sourceMappingURL=capacitor-secure-state-store.js.map","import { App } from '@capacitor/app';\nimport { ErrorResponse, UserManager, } from 'oidc-client-ts';\nimport { CapacitorNavigator, UnsupportedIframeNavigator } from './capacitor-navigator';\nimport { CapacitorSecureStateStore } from './capacitor-secure-state-store';\nimport { CapacitorOidcError, unsupported } from './errors';\nimport { NativeOidc } from './native';\nexport class CapacitorUserManager extends UserManager {\n    storageNamespace;\n    automaticRenewalPromise;\n    refreshPromise;\n    appStateListener;\n    constructor(settings, nativeOptions, storageNamespace) {\n        const stateStore = new CapacitorSecureStateStore(`${storageNamespace}.transactions`);\n        const userStore = new CapacitorSecureStateStore(`${storageNamespace}.session`);\n        const navigator = new CapacitorNavigator(nativeOptions.prefersEphemeralWebBrowserSession ?? false);\n        super({\n            ...settings,\n            response_type: 'code',\n            disablePKCE: false,\n            monitorSession: false,\n            popup_redirect_uri: settings.redirect_uri,\n            popup_post_logout_redirect_uri: settings.post_logout_redirect_uri,\n            stateStore,\n            userStore,\n        }, navigator, navigator, new UnsupportedIframeNavigator());\n        this.storageNamespace = storageNamespace;\n    }\n    static async create(settings, nativeOptions = {}) {\n        assertRuntime();\n        assertSettings(settings);\n        await NativeOidc.configure(nativeOptions.ios ?? {});\n        const manager = new CapacitorUserManager(settings, nativeOptions, nativeOptions.storageNamespace ?? 'default');\n        await manager.getUser();\n        manager.appStateListener = await App.addListener('appStateChange', ({ isActive }) => {\n            if (isActive) {\n                manager.checkForAutomaticRenewal();\n            }\n        });\n        manager.checkForAutomaticRenewal();\n        return manager;\n    }\n    async signin(args = {}) {\n        return this.signinPopup(args);\n    }\n    async signinPopup(args = {}) {\n        await this.waitForRenewal();\n        return super.signinPopup(args);\n    }\n    async signout(args = {}) {\n        await this.signoutPopup(args);\n    }\n    async signoutPopup(args = {}) {\n        await this.waitForRenewal();\n        await super.signoutPopup(args);\n    }\n    checkForAutomaticRenewal() {\n        if (!this.settings.automaticSilentRenew || this.automaticRenewalPromise)\n            return;\n        const renewal = this.getValidUser();\n        this.automaticRenewalPromise = renewal;\n        void renewal\n            .catch((error) => this.events._raiseSilentRenewError(error instanceof Error ? error : new Error('Silent renewal failed')))\n            .finally(() => {\n            if (this.automaticRenewalPromise === renewal)\n                this.automaticRenewalPromise = undefined;\n        });\n    }\n    async getValidUser(minimumValiditySeconds = 60) {\n        const user = await this.getUser();\n        if (!user)\n            return null;\n        if (user.expires_in === undefined || user.expires_in > minimumValiditySeconds)\n            return user;\n        return this.signinSilent();\n    }\n    async removeUser() {\n        await this.waitForRenewal();\n        await super.removeUser();\n    }\n    signinSilent(args = {}) {\n        if (!this.refreshPromise) {\n            this.refreshPromise = this.refresh(args).finally(() => {\n                this.refreshPromise = undefined;\n            });\n        }\n        return this.refreshPromise;\n    }\n    async refresh(args) {\n        const user = await this.getUser();\n        if (!user?.refresh_token) {\n            if (user?.expired)\n                await super.removeUser();\n            return null;\n        }\n        const refresh = super.signinSilent({ ...args, forceIframeAuth: false }).catch(async (error) => {\n            if (error instanceof ErrorResponse && error.error === 'invalid_grant')\n                await super.removeUser();\n            throw error;\n        });\n        return refresh;\n    }\n    async waitForRenewal() {\n        await this.automaticRenewalPromise?.catch(() => undefined);\n        await this.refreshPromise?.catch(() => undefined);\n    }\n    async storeUser(user) {\n        await super.storeUser(user);\n        await NativeOidc.setSessionSnapshot({\n            namespace: this.storageNamespace,\n            value: user\n                ? JSON.stringify(toStoredSession(user, user.profile.iss ?? this.settings.metadata?.issuer ?? this.settings.authority, this.settings.client_id))\n                : null,\n        });\n    }\n    async cancel() {\n        await NativeOidc.cancel();\n    }\n    async dispose() {\n        this.stopSilentRenew();\n        await this.appStateListener?.remove();\n        await this.waitForRenewal();\n        await this.cancel();\n    }\n    async signinRedirect() {\n        unsupported('Redirect navigation');\n    }\n    async signinRedirectCallback(_url) {\n        unsupported('Redirect navigation');\n    }\n    async signinCallback(_url) {\n        unsupported('Browser callback dispatch');\n    }\n    async signinResourceOwnerCredentials(_args) {\n        unsupported('Resource Owner Password Credentials');\n    }\n    async signinSilentCallback(_url) {\n        unsupported('Iframe navigation');\n    }\n    async signoutRedirect() {\n        unsupported('Redirect navigation');\n    }\n    async signoutRedirectCallback(_url) {\n        unsupported('Redirect navigation');\n    }\n    async signoutCallback(_url, _keepOpen) {\n        unsupported('Browser callback dispatch');\n    }\n    async signoutSilent() {\n        unsupported('Iframe logout');\n    }\n    async signoutSilentCallback(_url) {\n        unsupported('Iframe logout');\n    }\n    async querySessionStatus() {\n        unsupported('Browser session monitoring');\n    }\n}\nfunction assertRuntime() {\n    if (!globalThis.crypto?.subtle || !globalThis.crypto.getRandomValues) {\n        throw new CapacitorOidcError('UNSUPPORTED_RUNTIME', 'Web Crypto is required by oidc-client-ts');\n    }\n}\nfunction assertSettings(settings) {\n    if ('client_secret' in settings) {\n        throw new CapacitorOidcError('UNSUPPORTED_RUNTIME', 'Native public clients must not contain a client secret');\n    }\n    if ('client_authentication' in settings || 'dpop' in settings) {\n        throw new CapacitorOidcError('UNSUPPORTED_RUNTIME', 'The supplied settings contain an unsupported native-client option');\n    }\n}\nfunction toStoredSession(user, issuer, clientId) {\n    return {\n        version: 1,\n        issuer,\n        clientId,\n        accessToken: user.access_token,\n        refreshToken: user.refresh_token,\n        idToken: user.id_token,\n        tokenType: user.token_type,\n        scope: user.scope,\n        expiresAt: user.expires_at,\n    };\n}\n//# sourceMappingURL=capacitor-user-manager.js.map"],"names":["registerPlugin","UserManager","App","ErrorResponse"],"mappings":";;;;;;AAAO,MAAM,kBAAkB,SAAS,KAAK,CAAC;AAC9C,IAAI,IAAI;AACR,IAAI,WAAW,CAAC,IAAI,EAAE,OAAO,EAAE;AAC/B,QAAQ,KAAK,CAAC,OAAO,CAAC;AACtB,QAAQ,IAAI,CAAC,IAAI,GAAG,IAAI;AACxB,QAAQ,IAAI,CAAC,IAAI,GAAG,oBAAoB;AACxC,IAAI;AACJ;AACO,SAAS,WAAW,CAAC,OAAO,EAAE;AACrC,IAAI,MAAM,IAAI,kBAAkB,CAAC,qBAAqB,EAAE,CAAC,EAAE,OAAO,CAAC,+CAA+C,CAAC,CAAC;AACpH;;ACTO,MAAM,UAAU,GAAGA,mBAAc,CAAC,eAAe,CAAC;;ACClD,MAAM,kBAAkB,CAAC;AAChC,IAAI,iCAAiC;AACrC,IAAI,WAAW,CAAC,iCAAiC,EAAE;AACnD,QAAQ,IAAI,CAAC,iCAAiC,GAAG,iCAAiC;AAClF,IAAI;AACJ,IAAI,MAAM,OAAO,GAAG;AACpB,QAAQ,OAAO,IAAI,eAAe,CAAC,IAAI,CAAC,iCAAiC,CAAC;AAC1E,IAAI;AACJ,IAAI,MAAM,QAAQ,GAAG;AACrB,QAAQ,WAAW,CAAC,qBAAqB,CAAC;AAC1C,IAAI;AACJ;AACA,MAAM,eAAe,CAAC;AACtB,IAAI,iCAAiC;AACrC,IAAI,WAAW,CAAC,iCAAiC,EAAE;AACnD,QAAQ,IAAI,CAAC,iCAAiC,GAAG,iCAAiC;AAClF,IAAI;AACJ,IAAI,MAAM,QAAQ,CAAC,EAAE,GAAG,EAAE,EAAE;AAC5B,QAAQ,sBAAsB,CAAC,GAAG,CAAC;AACnC,QAAQ,MAAM,WAAW,GAAG,sBAAsB,CAAC,GAAG,CAAC;AACvD,QAAQ,MAAM,QAAQ,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC;AAC/C,YAAY,GAAG;AACf,YAAY,WAAW;AACvB,YAAY,iCAAiC,EAAE,IAAI,CAAC,iCAAiC;AACrF,SAAS,CAAC;AACV,QAAQ,IAAI,CAAC,kBAAkB,CAAC,QAAQ,CAAC,GAAG,EAAE,WAAW,CAAC,EAAE;AAC5D,YAAY,MAAM,IAAI,kBAAkB,CAAC,kBAAkB,EAAE,wEAAwE,CAAC;AACtI,QAAQ;AACR,QAAQ,OAAO,QAAQ;AACvB,IAAI;AACJ,IAAI,KAAK,GAAG;AACZ,QAAQ,KAAK,UAAU,CAAC,MAAM,EAAE;AAChC,IAAI;AACJ;AACO,SAAS,sBAAsB,CAAC,UAAU,EAAE;AACnD,IAAI,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC;AACnC,IAAI,MAAM,cAAc,GAAG,GAAG,CAAC,QAAQ,KAAK,OAAO;AACnD,SAAS,GAAG,CAAC,QAAQ,KAAK,WAAW,IAAI,GAAG,CAAC,QAAQ,KAAK,WAAW,IAAI,GAAG,CAAC,QAAQ,KAAK,OAAO,CAAC;AAClG,IAAI,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,cAAc,EAAE;AACtD,QAAQ,MAAM,IAAI,kBAAkB,CAAC,qBAAqB,EAAE,wDAAwD,CAAC;AACrH,IAAI;AACJ;AACO,SAAS,sBAAsB,CAAC,UAAU,EAAE;AACnD,IAAI,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC;AACnC,IAAI,MAAM,QAAQ,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,0BAA0B,CAAC;AACrE,QAAQ,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,YAAY,CAAC;AAC1C,QAAQ,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,cAAc,CAAC;AAC5C,IAAI,IAAI,CAAC,QAAQ,EAAE;AACnB,QAAQ,MAAM,IAAI,kBAAkB,CAAC,kBAAkB,EAAE,kDAAkD,CAAC;AAC5G,IAAI;AACJ,IAAI,OAAO,QAAQ;AACnB;AACO,SAAS,kBAAkB,CAAC,WAAW,EAAE,aAAa,EAAE;AAC/D,IAAI,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC;AACvC,IAAI,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,aAAa,CAAC;AAC3C,IAAI,QAAQ,MAAM,CAAC,QAAQ,CAAC,WAAW,EAAE,KAAK,QAAQ,CAAC,QAAQ,CAAC,WAAW,EAAE;AAC7E,QAAQ,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,QAAQ,CAAC,IAAI,CAAC,WAAW,EAAE;AACjE,QAAQ,MAAM,CAAC,QAAQ,KAAK,QAAQ,CAAC,QAAQ;AAC7C;AACO,MAAM,0BAA0B,CAAC;AACxC,IAAI,MAAM,OAAO,GAAG;AACpB,QAAQ,WAAW,CAAC,mBAAmB,CAAC;AACxC,IAAI;AACJ,IAAI,MAAM,QAAQ,GAAG;AACrB,QAAQ,WAAW,CAAC,mBAAmB,CAAC;AACxC,IAAI;AACJ;;ACnEO,MAAM,yBAAyB,CAAC;AACvC,IAAI,SAAS;AACb,IAAI,WAAW,CAAC,SAAS,EAAE;AAC3B,QAAQ,IAAI,CAAC,SAAS,GAAG,SAAS;AAClC,IAAI;AACJ,IAAI,MAAM,GAAG,CAAC,GAAG,EAAE,KAAK,EAAE;AAC1B,QAAQ,MAAM,UAAU,CAAC,UAAU,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC;AAC9E,IAAI;AACJ,IAAI,MAAM,GAAG,CAAC,GAAG,EAAE;AACnB,QAAQ,OAAO,CAAC,MAAM,UAAU,CAAC,UAAU,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,EAAE,KAAK;AACtF,IAAI;AACJ,IAAI,MAAM,MAAM,CAAC,GAAG,EAAE;AACtB,QAAQ,OAAO,CAAC,MAAM,UAAU,CAAC,aAAa,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,EAAE,KAAK;AACzF,IAAI;AACJ,IAAI,MAAM,UAAU,GAAG;AACvB,QAAQ,OAAO,CAAC,MAAM,UAAU,CAAC,iBAAiB,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,EAAE,IAAI;AACvF,IAAI;AACJ;;ACZO,MAAM,oBAAoB,SAASC,wBAAW,CAAC;AACtD,IAAI,gBAAgB;AACpB,IAAI,uBAAuB;AAC3B,IAAI,cAAc;AAClB,IAAI,gBAAgB;AACpB,IAAI,WAAW,CAAC,QAAQ,EAAE,aAAa,EAAE,gBAAgB,EAAE;AAC3D,QAAQ,MAAM,UAAU,GAAG,IAAI,yBAAyB,CAAC,CAAC,EAAE,gBAAgB,CAAC,aAAa,CAAC,CAAC;AAC5F,QAAQ,MAAM,SAAS,GAAG,IAAI,yBAAyB,CAAC,CAAC,EAAE,gBAAgB,CAAC,QAAQ,CAAC,CAAC;AACtF,QAAQ,MAAM,SAAS,GAAG,IAAI,kBAAkB,CAAC,aAAa,CAAC,iCAAiC,IAAI,KAAK,CAAC;AAC1G,QAAQ,KAAK,CAAC;AACd,YAAY,GAAG,QAAQ;AACvB,YAAY,aAAa,EAAE,MAAM;AACjC,YAAY,WAAW,EAAE,KAAK;AAC9B,YAAY,cAAc,EAAE,KAAK;AACjC,YAAY,kBAAkB,EAAE,QAAQ,CAAC,YAAY;AACrD,YAAY,8BAA8B,EAAE,QAAQ,CAAC,wBAAwB;AAC7E,YAAY,UAAU;AACtB,YAAY,SAAS;AACrB,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,0BAA0B,EAAE,CAAC;AAClE,QAAQ,IAAI,CAAC,gBAAgB,GAAG,gBAAgB;AAChD,IAAI;AACJ,IAAI,aAAa,MAAM,CAAC,QAAQ,EAAE,aAAa,GAAG,EAAE,EAAE;AACtD,QAAQ,aAAa,EAAE;AACvB,QAAQ,cAAc,CAAC,QAAQ,CAAC;AAChC,QAAQ,MAAM,UAAU,CAAC,SAAS,CAAC,aAAa,CAAC,GAAG,IAAI,EAAE,CAAC;AAC3D,QAAQ,MAAM,OAAO,GAAG,IAAI,oBAAoB,CAAC,QAAQ,EAAE,aAAa,EAAE,aAAa,CAAC,gBAAgB,IAAI,SAAS,CAAC;AACtH,QAAQ,MAAM,OAAO,CAAC,OAAO,EAAE;AAC/B,QAAQ,OAAO,CAAC,gBAAgB,GAAG,MAAMC,OAAG,CAAC,WAAW,CAAC,gBAAgB,EAAE,CAAC,EAAE,QAAQ,EAAE,KAAK;AAC7F,YAAY,IAAI,QAAQ,EAAE;AAC1B,gBAAgB,OAAO,CAAC,wBAAwB,EAAE;AAClD,YAAY;AACZ,QAAQ,CAAC,CAAC;AACV,QAAQ,OAAO,CAAC,wBAAwB,EAAE;AAC1C,QAAQ,OAAO,OAAO;AACtB,IAAI;AACJ,IAAI,MAAM,MAAM,CAAC,IAAI,GAAG,EAAE,EAAE;AAC5B,QAAQ,OAAO,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC;AACrC,IAAI;AACJ,IAAI,MAAM,WAAW,CAAC,IAAI,GAAG,EAAE,EAAE;AACjC,QAAQ,MAAM,IAAI,CAAC,cAAc,EAAE;AACnC,QAAQ,OAAO,KAAK,CAAC,WAAW,CAAC,IAAI,CAAC;AACtC,IAAI;AACJ,IAAI,MAAM,OAAO,CAAC,IAAI,GAAG,EAAE,EAAE;AAC7B,QAAQ,MAAM,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC;AACrC,IAAI;AACJ,IAAI,MAAM,YAAY,CAAC,IAAI,GAAG,EAAE,EAAE;AAClC,QAAQ,MAAM,IAAI,CAAC,cAAc,EAAE;AACnC,QAAQ,MAAM,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC;AACtC,IAAI;AACJ,IAAI,wBAAwB,GAAG;AAC/B,QAAQ,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,oBAAoB,IAAI,IAAI,CAAC,uBAAuB;AAC/E,YAAY;AACZ,QAAQ,MAAM,OAAO,GAAG,IAAI,CAAC,YAAY,EAAE;AAC3C,QAAQ,IAAI,CAAC,uBAAuB,GAAG,OAAO;AAC9C,QAAQ,KAAK;AACb,aAAa,KAAK,CAAC,CAAC,KAAK,KAAK,IAAI,CAAC,MAAM,CAAC,sBAAsB,CAAC,KAAK,YAAY,KAAK,GAAG,KAAK,GAAG,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;AACrI,aAAa,OAAO,CAAC,MAAM;AAC3B,YAAY,IAAI,IAAI,CAAC,uBAAuB,KAAK,OAAO;AACxD,gBAAgB,IAAI,CAAC,uBAAuB,GAAG,SAAS;AACxD,QAAQ,CAAC,CAAC;AACV,IAAI;AACJ,IAAI,MAAM,YAAY,CAAC,sBAAsB,GAAG,EAAE,EAAE;AACpD,QAAQ,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,OAAO,EAAE;AACzC,QAAQ,IAAI,CAAC,IAAI;AACjB,YAAY,OAAO,IAAI;AACvB,QAAQ,IAAI,IAAI,CAAC,UAAU,KAAK,SAAS,IAAI,IAAI,CAAC,UAAU,GAAG,sBAAsB;AACrF,YAAY,OAAO,IAAI;AACvB,QAAQ,OAAO,IAAI,CAAC,YAAY,EAAE;AAClC,IAAI;AACJ,IAAI,MAAM,UAAU,GAAG;AACvB,QAAQ,MAAM,IAAI,CAAC,cAAc,EAAE;AACnC,QAAQ,MAAM,KAAK,CAAC,UAAU,EAAE;AAChC,IAAI;AACJ,IAAI,YAAY,CAAC,IAAI,GAAG,EAAE,EAAE;AAC5B,QAAQ,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE;AAClC,YAAY,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,MAAM;AACnE,gBAAgB,IAAI,CAAC,cAAc,GAAG,SAAS;AAC/C,YAAY,CAAC,CAAC;AACd,QAAQ;AACR,QAAQ,OAAO,IAAI,CAAC,cAAc;AAClC,IAAI;AACJ,IAAI,MAAM,OAAO,CAAC,IAAI,EAAE;AACxB,QAAQ,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,OAAO,EAAE;AACzC,QAAQ,IAAI,CAAC,IAAI,EAAE,aAAa,EAAE;AAClC,YAAY,IAAI,IAAI,EAAE,OAAO;AAC7B,gBAAgB,MAAM,KAAK,CAAC,UAAU,EAAE;AACxC,YAAY,OAAO,IAAI;AACvB,QAAQ;AACR,QAAQ,MAAM,OAAO,GAAG,KAAK,CAAC,YAAY,CAAC,EAAE,GAAG,IAAI,EAAE,eAAe,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,KAAK,KAAK;AACvG,YAAY,IAAI,KAAK,YAAYC,0BAAa,IAAI,KAAK,CAAC,KAAK,KAAK,eAAe;AACjF,gBAAgB,MAAM,KAAK,CAAC,UAAU,EAAE;AACxC,YAAY,MAAM,KAAK;AACvB,QAAQ,CAAC,CAAC;AACV,QAAQ,OAAO,OAAO;AACtB,IAAI;AACJ,IAAI,MAAM,cAAc,GAAG;AAC3B,QAAQ,MAAM,IAAI,CAAC,uBAAuB,EAAE,KAAK,CAAC,MAAM,SAAS,CAAC;AAClE,QAAQ,MAAM,IAAI,CAAC,cAAc,EAAE,KAAK,CAAC,MAAM,SAAS,CAAC;AACzD,IAAI;AACJ,IAAI,MAAM,SAAS,CAAC,IAAI,EAAE;AAC1B,QAAQ,MAAM,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC;AACnC,QAAQ,MAAM,UAAU,CAAC,kBAAkB,CAAC;AAC5C,YAAY,SAAS,EAAE,IAAI,CAAC,gBAAgB;AAC5C,YAAY,KAAK,EAAE;AACnB,kBAAkB,IAAI,CAAC,SAAS,CAAC,eAAe,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,IAAI,IAAI,CAAC,QAAQ,CAAC,SAAS,EAAE,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC;AAC9J,kBAAkB,IAAI;AACtB,SAAS,CAAC;AACV,IAAI;AACJ,IAAI,MAAM,MAAM,GAAG;AACnB,QAAQ,MAAM,UAAU,CAAC,MAAM,EAAE;AACjC,IAAI;AACJ,IAAI,MAAM,OAAO,GAAG;AACpB,QAAQ,IAAI,CAAC,eAAe,EAAE;AAC9B,QAAQ,MAAM,IAAI,CAAC,gBAAgB,EAAE,MAAM,EAAE;AAC7C,QAAQ,MAAM,IAAI,CAAC,cAAc,EAAE;AACnC,QAAQ,MAAM,IAAI,CAAC,MAAM,EAAE;AAC3B,IAAI;AACJ,IAAI,MAAM,cAAc,GAAG;AAC3B,QAAQ,WAAW,CAAC,qBAAqB,CAAC;AAC1C,IAAI;AACJ,IAAI,MAAM,sBAAsB,CAAC,IAAI,EAAE;AACvC,QAAQ,WAAW,CAAC,qBAAqB,CAAC;AAC1C,IAAI;AACJ,IAAI,MAAM,cAAc,CAAC,IAAI,EAAE;AAC/B,QAAQ,WAAW,CAAC,2BAA2B,CAAC;AAChD,IAAI;AACJ,IAAI,MAAM,8BAA8B,CAAC,KAAK,EAAE;AAChD,QAAQ,WAAW,CAAC,qCAAqC,CAAC;AAC1D,IAAI;AACJ,IAAI,MAAM,oBAAoB,CAAC,IAAI,EAAE;AACrC,QAAQ,WAAW,CAAC,mBAAmB,CAAC;AACxC,IAAI;AACJ,IAAI,MAAM,eAAe,GAAG;AAC5B,QAAQ,WAAW,CAAC,qBAAqB,CAAC;AAC1C,IAAI;AACJ,IAAI,MAAM,uBAAuB,CAAC,IAAI,EAAE;AACxC,QAAQ,WAAW,CAAC,qBAAqB,CAAC;AAC1C,IAAI;AACJ,IAAI,MAAM,eAAe,CAAC,IAAI,EAAE,SAAS,EAAE;AAC3C,QAAQ,WAAW,CAAC,2BAA2B,CAAC;AAChD,IAAI;AACJ,IAAI,MAAM,aAAa,GAAG;AAC1B,QAAQ,WAAW,CAAC,eAAe,CAAC;AACpC,IAAI;AACJ,IAAI,MAAM,qBAAqB,CAAC,IAAI,EAAE;AACtC,QAAQ,WAAW,CAAC,eAAe,CAAC;AACpC,IAAI;AACJ,IAAI,MAAM,kBAAkB,GAAG;AAC/B,QAAQ,WAAW,CAAC,4BAA4B,CAAC;AACjD,IAAI;AACJ;AACA,SAAS,aAAa,GAAG;AACzB,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,MAAM,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,eAAe,EAAE;AAC1E,QAAQ,MAAM,IAAI,kBAAkB,CAAC,qBAAqB,EAAE,0CAA0C,CAAC;AACvG,IAAI;AACJ;AACA,SAAS,cAAc,CAAC,QAAQ,EAAE;AAClC,IAAI,IAAI,eAAe,IAAI,QAAQ,EAAE;AACrC,QAAQ,MAAM,IAAI,kBAAkB,CAAC,qBAAqB,EAAE,wDAAwD,CAAC;AACrH,IAAI;AACJ,IAAI,IAAI,uBAAuB,IAAI,QAAQ,IAAI,MAAM,IAAI,QAAQ,EAAE;AACnE,QAAQ,MAAM,IAAI,kBAAkB,CAAC,qBAAqB,EAAE,mEAAmE,CAAC;AAChI,IAAI;AACJ;AACA,SAAS,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE;AACjD,IAAI,OAAO;AACX,QAAQ,OAAO,EAAE,CAAC;AAClB,QAAQ,MAAM;AACd,QAAQ,QAAQ;AAChB,QAAQ,WAAW,EAAE,IAAI,CAAC,YAAY;AACtC,QAAQ,YAAY,EAAE,IAAI,CAAC,aAAa;AACxC,QAAQ,OAAO,EAAE,IAAI,CAAC,QAAQ;AAC9B,QAAQ,SAAS,EAAE,IAAI,CAAC,UAAU;AAClC,QAAQ,KAAK,EAAE,IAAI,CAAC,KAAK;AACzB,QAAQ,SAAS,EAAE,IAAI,CAAC,UAAU;AAClC,KAAK;AACL;;;;;;;;;;;;;;"}
+{"version":3,"file":"plugin.cjs","sources":["esm/errors.js","esm/native.js","esm/capacitor-navigator.js","esm/capacitor-secure-state-store.js","esm/capacitor-user-manager.js"],"sourcesContent":["export class CapacitorOidcError extends Error {\n    code;\n    constructor(code, message) {\n        super(message);\n        this.code = code;\n        this.name = 'CapacitorOidcError';\n    }\n}\nexport function unsupported(feature) {\n    throw new CapacitorOidcError('UNSUPPORTED_RUNTIME', `${feature} is not available in a native Capacitor runtime`);\n}\n//# sourceMappingURL=errors.js.map","import { registerPlugin } from '@capacitor/core';\nexport const NativeOidc = registerPlugin('CapacitorOidc');\n//# sourceMappingURL=native.js.map","import { CapacitorOidcError, unsupported } from './errors.js';\nimport { NativeOidc } from './native.js';\nexport class CapacitorNavigator {\n    prefersEphemeralWebBrowserSession;\n    constructor(prefersEphemeralWebBrowserSession) {\n        this.prefersEphemeralWebBrowserSession = prefersEphemeralWebBrowserSession;\n    }\n    async prepare() {\n        return new CapacitorWindow(this.prefersEphemeralWebBrowserSession);\n    }\n    async callback() {\n        unsupported('Navigator callbacks');\n    }\n}\nclass CapacitorWindow {\n    prefersEphemeralWebBrowserSession;\n    constructor(prefersEphemeralWebBrowserSession) {\n        this.prefersEphemeralWebBrowserSession = prefersEphemeralWebBrowserSession;\n    }\n    async navigate({ url }) {\n        assertSecureRequestUrl(url);\n        const callbackUrl = callbackUrlFromRequest(url);\n        const response = await NativeOidc.open({\n            url,\n            callbackUrl,\n            prefersEphemeralWebBrowserSession: this.prefersEphemeralWebBrowserSession,\n        });\n        if (!isExpectedCallback(response.url, callbackUrl)) {\n            throw new CapacitorOidcError('INVALID_CALLBACK', 'The authentication callback does not match the configured redirect URI');\n        }\n        return response;\n    }\n    close() {\n        void NativeOidc.cancel();\n    }\n}\nexport function assertSecureRequestUrl(requestUrl) {\n    const url = new URL(requestUrl);\n    const isHttpLoopback = url.protocol === 'http:' &&\n        (url.hostname === 'localhost' || url.hostname === '127.0.0.1' || url.hostname === '[::1]');\n    if (url.protocol !== 'https:' && !isHttpLoopback) {\n        throw new CapacitorOidcError('BROWSER_UNAVAILABLE', 'OIDC authorization and logout endpoints must use HTTPS');\n    }\n}\nexport function callbackUrlFromRequest(requestUrl) {\n    const url = new URL(requestUrl);\n    const callback = url.searchParams.get('post_logout_redirect_uri') ??\n        url.searchParams.get('logout_uri') ??\n        url.searchParams.get('redirect_uri');\n    if (!callback) {\n        throw new CapacitorOidcError('INVALID_CALLBACK', 'The OIDC request does not contain a callback URI');\n    }\n    return callback;\n}\nexport function isExpectedCallback(actualValue, expectedValue) {\n    const actual = new URL(actualValue);\n    const expected = new URL(expectedValue);\n    return (actual.protocol.toLowerCase() === expected.protocol.toLowerCase() &&\n        actual.host.toLowerCase() === expected.host.toLowerCase() &&\n        actual.pathname === expected.pathname);\n}\nexport class UnsupportedIframeNavigator {\n    async prepare() {\n        unsupported('Iframe navigation');\n    }\n    async callback() {\n        unsupported('Iframe navigation');\n    }\n}\n//# sourceMappingURL=capacitor-navigator.js.map","import { NativeOidc } from './native.js';\nexport class CapacitorSecureStateStore {\n    namespace;\n    constructor(namespace) {\n        this.namespace = namespace;\n    }\n    async set(key, value) {\n        await NativeOidc.storageSet({ namespace: this.namespace, key, value });\n    }\n    async get(key) {\n        return (await NativeOidc.storageGet({ namespace: this.namespace, key })).value;\n    }\n    async remove(key) {\n        return (await NativeOidc.storageRemove({ namespace: this.namespace, key })).value;\n    }\n    async getAllKeys() {\n        return (await NativeOidc.storageGetAllKeys({ namespace: this.namespace })).keys;\n    }\n}\n//# sourceMappingURL=capacitor-secure-state-store.js.map","import { App } from '@capacitor/app';\nimport { ErrorResponse, UserManager, } from 'oidc-client-ts';\nimport { CapacitorNavigator, UnsupportedIframeNavigator } from './capacitor-navigator.js';\nimport { CapacitorSecureStateStore } from './capacitor-secure-state-store.js';\nimport { CapacitorOidcError, unsupported } from './errors.js';\nimport { NativeOidc } from './native.js';\nexport class CapacitorUserManager extends UserManager {\n    storageNamespace;\n    automaticRenewalPromise;\n    refreshPromise;\n    appStateListener;\n    constructor(settings, nativeOptions, storageNamespace) {\n        const stateStore = new CapacitorSecureStateStore(`${storageNamespace}.transactions`);\n        const userStore = new CapacitorSecureStateStore(`${storageNamespace}.session`);\n        const navigator = new CapacitorNavigator(nativeOptions.prefersEphemeralWebBrowserSession ?? false);\n        super({\n            ...settings,\n            response_type: 'code',\n            disablePKCE: false,\n            monitorSession: false,\n            popup_redirect_uri: settings.redirect_uri,\n            popup_post_logout_redirect_uri: settings.post_logout_redirect_uri,\n            stateStore,\n            userStore,\n        }, navigator, navigator, new UnsupportedIframeNavigator());\n        this.storageNamespace = storageNamespace;\n    }\n    static async create(settings, nativeOptions = {}) {\n        assertRuntime();\n        assertSettings(settings);\n        await NativeOidc.configure(nativeOptions.ios ?? {});\n        const manager = new CapacitorUserManager(settings, nativeOptions, nativeOptions.storageNamespace ?? 'default');\n        await manager.getUser();\n        manager.appStateListener = await App.addListener('appStateChange', ({ isActive }) => {\n            if (isActive) {\n                manager.checkForAutomaticRenewal();\n            }\n        });\n        manager.checkForAutomaticRenewal();\n        return manager;\n    }\n    async signin(args = {}) {\n        return this.signinPopup(args);\n    }\n    async signinPopup(args = {}) {\n        await this.waitForRenewal();\n        return super.signinPopup(args);\n    }\n    async signout(args = {}) {\n        await this.signoutPopup(args);\n    }\n    async signoutPopup(args = {}) {\n        await this.waitForRenewal();\n        await super.signoutPopup(args);\n    }\n    checkForAutomaticRenewal() {\n        if (!this.settings.automaticSilentRenew || this.automaticRenewalPromise)\n            return;\n        const renewal = this.getValidUser();\n        this.automaticRenewalPromise = renewal;\n        void renewal\n            .catch((error) => this.events._raiseSilentRenewError(error instanceof Error ? error : new Error('Silent renewal failed')))\n            .finally(() => {\n            if (this.automaticRenewalPromise === renewal)\n                this.automaticRenewalPromise = undefined;\n        });\n    }\n    async getValidUser(minimumValiditySeconds = 60) {\n        const user = await this.getUser();\n        if (!user)\n            return null;\n        if (user.expires_in === undefined || user.expires_in > minimumValiditySeconds)\n            return user;\n        return this.signinSilent();\n    }\n    async removeUser() {\n        await this.waitForRenewal();\n        await super.removeUser();\n    }\n    signinSilent(args = {}) {\n        if (!this.refreshPromise) {\n            this.refreshPromise = this.refresh(args).finally(() => {\n                this.refreshPromise = undefined;\n            });\n        }\n        return this.refreshPromise;\n    }\n    async refresh(args) {\n        const user = await this.getUser();\n        if (!user?.refresh_token) {\n            if (user?.expired)\n                await super.removeUser();\n            return null;\n        }\n        const refresh = super.signinSilent({ ...args, forceIframeAuth: false }).catch(async (error) => {\n            if (error instanceof ErrorResponse && error.error === 'invalid_grant')\n                await super.removeUser();\n            throw error;\n        });\n        return refresh;\n    }\n    async waitForRenewal() {\n        await this.automaticRenewalPromise?.catch(() => undefined);\n        await this.refreshPromise?.catch(() => undefined);\n    }\n    async storeUser(user) {\n        await super.storeUser(user);\n        await NativeOidc.setSessionSnapshot({\n            namespace: this.storageNamespace,\n            value: user\n                ? JSON.stringify(toStoredSession(user, user.profile.iss ?? this.settings.metadata?.issuer ?? this.settings.authority, this.settings.client_id))\n                : null,\n        });\n    }\n    async cancel() {\n        await NativeOidc.cancel();\n    }\n    async dispose() {\n        this.stopSilentRenew();\n        await this.appStateListener?.remove();\n        await this.waitForRenewal();\n        await this.cancel();\n    }\n    async signinRedirect() {\n        unsupported('Redirect navigation');\n    }\n    async signinRedirectCallback(_url) {\n        unsupported('Redirect navigation');\n    }\n    async signinCallback(_url) {\n        unsupported('Browser callback dispatch');\n    }\n    async signinResourceOwnerCredentials(_args) {\n        unsupported('Resource Owner Password Credentials');\n    }\n    async signinSilentCallback(_url) {\n        unsupported('Iframe navigation');\n    }\n    async signoutRedirect() {\n        unsupported('Redirect navigation');\n    }\n    async signoutRedirectCallback(_url) {\n        unsupported('Redirect navigation');\n    }\n    async signoutCallback(_url, _keepOpen) {\n        unsupported('Browser callback dispatch');\n    }\n    async signoutSilent() {\n        unsupported('Iframe logout');\n    }\n    async signoutSilentCallback(_url) {\n        unsupported('Iframe logout');\n    }\n    async querySessionStatus() {\n        unsupported('Browser session monitoring');\n    }\n}\nfunction assertRuntime() {\n    if (!globalThis.crypto?.subtle || !globalThis.crypto.getRandomValues) {\n        throw new CapacitorOidcError('UNSUPPORTED_RUNTIME', 'Web Crypto is required by oidc-client-ts');\n    }\n}\nfunction assertSettings(settings) {\n    if ('client_secret' in settings) {\n        throw new CapacitorOidcError('UNSUPPORTED_RUNTIME', 'Native public clients must not contain a client secret');\n    }\n    if ('client_authentication' in settings || 'dpop' in settings) {\n        throw new CapacitorOidcError('UNSUPPORTED_RUNTIME', 'The supplied settings contain an unsupported native-client option');\n    }\n}\nfunction toStoredSession(user, issuer, clientId) {\n    return {\n        version: 1,\n        issuer,\n        clientId,\n        accessToken: user.access_token,\n        refreshToken: user.refresh_token,\n        idToken: user.id_token,\n        tokenType: user.token_type,\n        scope: user.scope,\n        expiresAt: user.expires_at,\n    };\n}\n//# sourceMappingURL=capacitor-user-manager.js.map"],"names":["registerPlugin","UserManager","App","ErrorResponse"],"mappings":";;;;;;AAAO,MAAM,kBAAkB,SAAS,KAAK,CAAC;AAC9C,IAAI,IAAI;AACR,IAAI,WAAW,CAAC,IAAI,EAAE,OAAO,EAAE;AAC/B,QAAQ,KAAK,CAAC,OAAO,CAAC;AACtB,QAAQ,IAAI,CAAC,IAAI,GAAG,IAAI;AACxB,QAAQ,IAAI,CAAC,IAAI,GAAG,oBAAoB;AACxC,IAAI;AACJ;AACO,SAAS,WAAW,CAAC,OAAO,EAAE;AACrC,IAAI,MAAM,IAAI,kBAAkB,CAAC,qBAAqB,EAAE,CAAC,EAAE,OAAO,CAAC,+CAA+C,CAAC,CAAC;AACpH;;ACTO,MAAM,UAAU,GAAGA,mBAAc,CAAC,eAAe,CAAC;;ACClD,MAAM,kBAAkB,CAAC;AAChC,IAAI,iCAAiC;AACrC,IAAI,WAAW,CAAC,iCAAiC,EAAE;AACnD,QAAQ,IAAI,CAAC,iCAAiC,GAAG,iCAAiC;AAClF,IAAI;AACJ,IAAI,MAAM,OAAO,GAAG;AACpB,QAAQ,OAAO,IAAI,eAAe,CAAC,IAAI,CAAC,iCAAiC,CAAC;AAC1E,IAAI;AACJ,IAAI,MAAM,QAAQ,GAAG;AACrB,QAAQ,WAAW,CAAC,qBAAqB,CAAC;AAC1C,IAAI;AACJ;AACA,MAAM,eAAe,CAAC;AACtB,IAAI,iCAAiC;AACrC,IAAI,WAAW,CAAC,iCAAiC,EAAE;AACnD,QAAQ,IAAI,CAAC,iCAAiC,GAAG,iCAAiC;AAClF,IAAI;AACJ,IAAI,MAAM,QAAQ,CAAC,EAAE,GAAG,EAAE,EAAE;AAC5B,QAAQ,sBAAsB,CAAC,GAAG,CAAC;AACnC,QAAQ,MAAM,WAAW,GAAG,sBAAsB,CAAC,GAAG,CAAC;AACvD,QAAQ,MAAM,QAAQ,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC;AAC/C,YAAY,GAAG;AACf,YAAY,WAAW;AACvB,YAAY,iCAAiC,EAAE,IAAI,CAAC,iCAAiC;AACrF,SAAS,CAAC;AACV,QAAQ,IAAI,CAAC,kBAAkB,CAAC,QAAQ,CAAC,GAAG,EAAE,WAAW,CAAC,EAAE;AAC5D,YAAY,MAAM,IAAI,kBAAkB,CAAC,kBAAkB,EAAE,wEAAwE,CAAC;AACtI,QAAQ;AACR,QAAQ,OAAO,QAAQ;AACvB,IAAI;AACJ,IAAI,KAAK,GAAG;AACZ,QAAQ,KAAK,UAAU,CAAC,MAAM,EAAE;AAChC,IAAI;AACJ;AACO,SAAS,sBAAsB,CAAC,UAAU,EAAE;AACnD,IAAI,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC;AACnC,IAAI,MAAM,cAAc,GAAG,GAAG,CAAC,QAAQ,KAAK,OAAO;AACnD,SAAS,GAAG,CAAC,QAAQ,KAAK,WAAW,IAAI,GAAG,CAAC,QAAQ,KAAK,WAAW,IAAI,GAAG,CAAC,QAAQ,KAAK,OAAO,CAAC;AAClG,IAAI,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,cAAc,EAAE;AACtD,QAAQ,MAAM,IAAI,kBAAkB,CAAC,qBAAqB,EAAE,wDAAwD,CAAC;AACrH,IAAI;AACJ;AACO,SAAS,sBAAsB,CAAC,UAAU,EAAE;AACnD,IAAI,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC;AACnC,IAAI,MAAM,QAAQ,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,0BAA0B,CAAC;AACrE,QAAQ,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,YAAY,CAAC;AAC1C,QAAQ,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,cAAc,CAAC;AAC5C,IAAI,IAAI,CAAC,QAAQ,EAAE;AACnB,QAAQ,MAAM,IAAI,kBAAkB,CAAC,kBAAkB,EAAE,kDAAkD,CAAC;AAC5G,IAAI;AACJ,IAAI,OAAO,QAAQ;AACnB;AACO,SAAS,kBAAkB,CAAC,WAAW,EAAE,aAAa,EAAE;AAC/D,IAAI,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC;AACvC,IAAI,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,aAAa,CAAC;AAC3C,IAAI,QAAQ,MAAM,CAAC,QAAQ,CAAC,WAAW,EAAE,KAAK,QAAQ,CAAC,QAAQ,CAAC,WAAW,EAAE;AAC7E,QAAQ,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,QAAQ,CAAC,IAAI,CAAC,WAAW,EAAE;AACjE,QAAQ,MAAM,CAAC,QAAQ,KAAK,QAAQ,CAAC,QAAQ;AAC7C;AACO,MAAM,0BAA0B,CAAC;AACxC,IAAI,MAAM,OAAO,GAAG;AACpB,QAAQ,WAAW,CAAC,mBAAmB,CAAC;AACxC,IAAI;AACJ,IAAI,MAAM,QAAQ,GAAG;AACrB,QAAQ,WAAW,CAAC,mBAAmB,CAAC;AACxC,IAAI;AACJ;;ACnEO,MAAM,yBAAyB,CAAC;AACvC,IAAI,SAAS;AACb,IAAI,WAAW,CAAC,SAAS,EAAE;AAC3B,QAAQ,IAAI,CAAC,SAAS,GAAG,SAAS;AAClC,IAAI;AACJ,IAAI,MAAM,GAAG,CAAC,GAAG,EAAE,KAAK,EAAE;AAC1B,QAAQ,MAAM,UAAU,CAAC,UAAU,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC;AAC9E,IAAI;AACJ,IAAI,MAAM,GAAG,CAAC,GAAG,EAAE;AACnB,QAAQ,OAAO,CAAC,MAAM,UAAU,CAAC,UAAU,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,EAAE,KAAK;AACtF,IAAI;AACJ,IAAI,MAAM,MAAM,CAAC,GAAG,EAAE;AACtB,QAAQ,OAAO,CAAC,MAAM,UAAU,CAAC,aAAa,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,EAAE,KAAK;AACzF,IAAI;AACJ,IAAI,MAAM,UAAU,GAAG;AACvB,QAAQ,OAAO,CAAC,MAAM,UAAU,CAAC,iBAAiB,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,EAAE,IAAI;AACvF,IAAI;AACJ;;ACZO,MAAM,oBAAoB,SAASC,wBAAW,CAAC;AACtD,IAAI,gBAAgB;AACpB,IAAI,uBAAuB;AAC3B,IAAI,cAAc;AAClB,IAAI,gBAAgB;AACpB,IAAI,WAAW,CAAC,QAAQ,EAAE,aAAa,EAAE,gBAAgB,EAAE;AAC3D,QAAQ,MAAM,UAAU,GAAG,IAAI,yBAAyB,CAAC,CAAC,EAAE,gBAAgB,CAAC,aAAa,CAAC,CAAC;AAC5F,QAAQ,MAAM,SAAS,GAAG,IAAI,yBAAyB,CAAC,CAAC,EAAE,gBAAgB,CAAC,QAAQ,CAAC,CAAC;AACtF,QAAQ,MAAM,SAAS,GAAG,IAAI,kBAAkB,CAAC,aAAa,CAAC,iCAAiC,IAAI,KAAK,CAAC;AAC1G,QAAQ,KAAK,CAAC;AACd,YAAY,GAAG,QAAQ;AACvB,YAAY,aAAa,EAAE,MAAM;AACjC,YAAY,WAAW,EAAE,KAAK;AAC9B,YAAY,cAAc,EAAE,KAAK;AACjC,YAAY,kBAAkB,EAAE,QAAQ,CAAC,YAAY;AACrD,YAAY,8BAA8B,EAAE,QAAQ,CAAC,wBAAwB;AAC7E,YAAY,UAAU;AACtB,YAAY,SAAS;AACrB,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,0BAA0B,EAAE,CAAC;AAClE,QAAQ,IAAI,CAAC,gBAAgB,GAAG,gBAAgB;AAChD,IAAI;AACJ,IAAI,aAAa,MAAM,CAAC,QAAQ,EAAE,aAAa,GAAG,EAAE,EAAE;AACtD,QAAQ,aAAa,EAAE;AACvB,QAAQ,cAAc,CAAC,QAAQ,CAAC;AAChC,QAAQ,MAAM,UAAU,CAAC,SAAS,CAAC,aAAa,CAAC,GAAG,IAAI,EAAE,CAAC;AAC3D,QAAQ,MAAM,OAAO,GAAG,IAAI,oBAAoB,CAAC,QAAQ,EAAE,aAAa,EAAE,aAAa,CAAC,gBAAgB,IAAI,SAAS,CAAC;AACtH,QAAQ,MAAM,OAAO,CAAC,OAAO,EAAE;AAC/B,QAAQ,OAAO,CAAC,gBAAgB,GAAG,MAAMC,OAAG,CAAC,WAAW,CAAC,gBAAgB,EAAE,CAAC,EAAE,QAAQ,EAAE,KAAK;AAC7F,YAAY,IAAI,QAAQ,EAAE;AAC1B,gBAAgB,OAAO,CAAC,wBAAwB,EAAE;AAClD,YAAY;AACZ,QAAQ,CAAC,CAAC;AACV,QAAQ,OAAO,CAAC,wBAAwB,EAAE;AAC1C,QAAQ,OAAO,OAAO;AACtB,IAAI;AACJ,IAAI,MAAM,MAAM,CAAC,IAAI,GAAG,EAAE,EAAE;AAC5B,QAAQ,OAAO,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC;AACrC,IAAI;AACJ,IAAI,MAAM,WAAW,CAAC,IAAI,GAAG,EAAE,EAAE;AACjC,QAAQ,MAAM,IAAI,CAAC,cAAc,EAAE;AACnC,QAAQ,OAAO,KAAK,CAAC,WAAW,CAAC,IAAI,CAAC;AACtC,IAAI;AACJ,IAAI,MAAM,OAAO,CAAC,IAAI,GAAG,EAAE,EAAE;AAC7B,QAAQ,MAAM,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC;AACrC,IAAI;AACJ,IAAI,MAAM,YAAY,CAAC,IAAI,GAAG,EAAE,EAAE;AAClC,QAAQ,MAAM,IAAI,CAAC,cAAc,EAAE;AACnC,QAAQ,MAAM,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC;AACtC,IAAI;AACJ,IAAI,wBAAwB,GAAG;AAC/B,QAAQ,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,oBAAoB,IAAI,IAAI,CAAC,uBAAuB;AAC/E,YAAY;AACZ,QAAQ,MAAM,OAAO,GAAG,IAAI,CAAC,YAAY,EAAE;AAC3C,QAAQ,IAAI,CAAC,uBAAuB,GAAG,OAAO;AAC9C,QAAQ,KAAK;AACb,aAAa,KAAK,CAAC,CAAC,KAAK,KAAK,IAAI,CAAC,MAAM,CAAC,sBAAsB,CAAC,KAAK,YAAY,KAAK,GAAG,KAAK,GAAG,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;AACrI,aAAa,OAAO,CAAC,MAAM;AAC3B,YAAY,IAAI,IAAI,CAAC,uBAAuB,KAAK,OAAO;AACxD,gBAAgB,IAAI,CAAC,uBAAuB,GAAG,SAAS;AACxD,QAAQ,CAAC,CAAC;AACV,IAAI;AACJ,IAAI,MAAM,YAAY,CAAC,sBAAsB,GAAG,EAAE,EAAE;AACpD,QAAQ,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,OAAO,EAAE;AACzC,QAAQ,IAAI,CAAC,IAAI;AACjB,YAAY,OAAO,IAAI;AACvB,QAAQ,IAAI,IAAI,CAAC,UAAU,KAAK,SAAS,IAAI,IAAI,CAAC,UAAU,GAAG,sBAAsB;AACrF,YAAY,OAAO,IAAI;AACvB,QAAQ,OAAO,IAAI,CAAC,YAAY,EAAE;AAClC,IAAI;AACJ,IAAI,MAAM,UAAU,GAAG;AACvB,QAAQ,MAAM,IAAI,CAAC,cAAc,EAAE;AACnC,QAAQ,MAAM,KAAK,CAAC,UAAU,EAAE;AAChC,IAAI;AACJ,IAAI,YAAY,CAAC,IAAI,GAAG,EAAE,EAAE;AAC5B,QAAQ,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE;AAClC,YAAY,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,MAAM;AACnE,gBAAgB,IAAI,CAAC,cAAc,GAAG,SAAS;AAC/C,YAAY,CAAC,CAAC;AACd,QAAQ;AACR,QAAQ,OAAO,IAAI,CAAC,cAAc;AAClC,IAAI;AACJ,IAAI,MAAM,OAAO,CAAC,IAAI,EAAE;AACxB,QAAQ,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,OAAO,EAAE;AACzC,QAAQ,IAAI,CAAC,IAAI,EAAE,aAAa,EAAE;AAClC,YAAY,IAAI,IAAI,EAAE,OAAO;AAC7B,gBAAgB,MAAM,KAAK,CAAC,UAAU,EAAE;AACxC,YAAY,OAAO,IAAI;AACvB,QAAQ;AACR,QAAQ,MAAM,OAAO,GAAG,KAAK,CAAC,YAAY,CAAC,EAAE,GAAG,IAAI,EAAE,eAAe,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,KAAK,KAAK;AACvG,YAAY,IAAI,KAAK,YAAYC,0BAAa,IAAI,KAAK,CAAC,KAAK,KAAK,eAAe;AACjF,gBAAgB,MAAM,KAAK,CAAC,UAAU,EAAE;AACxC,YAAY,MAAM,KAAK;AACvB,QAAQ,CAAC,CAAC;AACV,QAAQ,OAAO,OAAO;AACtB,IAAI;AACJ,IAAI,MAAM,cAAc,GAAG;AAC3B,QAAQ,MAAM,IAAI,CAAC,uBAAuB,EAAE,KAAK,CAAC,MAAM,SAAS,CAAC;AAClE,QAAQ,MAAM,IAAI,CAAC,cAAc,EAAE,KAAK,CAAC,MAAM,SAAS,CAAC;AACzD,IAAI;AACJ,IAAI,MAAM,SAAS,CAAC,IAAI,EAAE;AAC1B,QAAQ,MAAM,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC;AACnC,QAAQ,MAAM,UAAU,CAAC,kBAAkB,CAAC;AAC5C,YAAY,SAAS,EAAE,IAAI,CAAC,gBAAgB;AAC5C,YAAY,KAAK,EAAE;AACnB,kBAAkB,IAAI,CAAC,SAAS,CAAC,eAAe,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,IAAI,IAAI,CAAC,QAAQ,CAAC,SAAS,EAAE,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC;AAC9J,kBAAkB,IAAI;AACtB,SAAS,CAAC;AACV,IAAI;AACJ,IAAI,MAAM,MAAM,GAAG;AACnB,QAAQ,MAAM,UAAU,CAAC,MAAM,EAAE;AACjC,IAAI;AACJ,IAAI,MAAM,OAAO,GAAG;AACpB,QAAQ,IAAI,CAAC,eAAe,EAAE;AAC9B,QAAQ,MAAM,IAAI,CAAC,gBAAgB,EAAE,MAAM,EAAE;AAC7C,QAAQ,MAAM,IAAI,CAAC,cAAc,EAAE;AACnC,QAAQ,MAAM,IAAI,CAAC,MAAM,EAAE;AAC3B,IAAI;AACJ,IAAI,MAAM,cAAc,GAAG;AAC3B,QAAQ,WAAW,CAAC,qBAAqB,CAAC;AAC1C,IAAI;AACJ,IAAI,MAAM,sBAAsB,CAAC,IAAI,EAAE;AACvC,QAAQ,WAAW,CAAC,qBAAqB,CAAC;AAC1C,IAAI;AACJ,IAAI,MAAM,cAAc,CAAC,IAAI,EAAE;AAC/B,QAAQ,WAAW,CAAC,2BAA2B,CAAC;AAChD,IAAI;AACJ,IAAI,MAAM,8BAA8B,CAAC,KAAK,EAAE;AAChD,QAAQ,WAAW,CAAC,qCAAqC,CAAC;AAC1D,IAAI;AACJ,IAAI,MAAM,oBAAoB,CAAC,IAAI,EAAE;AACrC,QAAQ,WAAW,CAAC,mBAAmB,CAAC;AACxC,IAAI;AACJ,IAAI,MAAM,eAAe,GAAG;AAC5B,QAAQ,WAAW,CAAC,qBAAqB,CAAC;AAC1C,IAAI;AACJ,IAAI,MAAM,uBAAuB,CAAC,IAAI,EAAE;AACxC,QAAQ,WAAW,CAAC,qBAAqB,CAAC;AAC1C,IAAI;AACJ,IAAI,MAAM,eAAe,CAAC,IAAI,EAAE,SAAS,EAAE;AAC3C,QAAQ,WAAW,CAAC,2BAA2B,CAAC;AAChD,IAAI;AACJ,IAAI,MAAM,aAAa,GAAG;AAC1B,QAAQ,WAAW,CAAC,eAAe,CAAC;AACpC,IAAI;AACJ,IAAI,MAAM,qBAAqB,CAAC,IAAI,EAAE;AACtC,QAAQ,WAAW,CAAC,eAAe,CAAC;AACpC,IAAI;AACJ,IAAI,MAAM,kBAAkB,GAAG;AAC/B,QAAQ,WAAW,CAAC,4BAA4B,CAAC;AACjD,IAAI;AACJ;AACA,SAAS,aAAa,GAAG;AACzB,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,MAAM,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,eAAe,EAAE;AAC1E,QAAQ,MAAM,IAAI,kBAAkB,CAAC,qBAAqB,EAAE,0CAA0C,CAAC;AACvG,IAAI;AACJ;AACA,SAAS,cAAc,CAAC,QAAQ,EAAE;AAClC,IAAI,IAAI,eAAe,IAAI,QAAQ,EAAE;AACrC,QAAQ,MAAM,IAAI,kBAAkB,CAAC,qBAAqB,EAAE,wDAAwD,CAAC;AACrH,IAAI;AACJ,IAAI,IAAI,uBAAuB,IAAI,QAAQ,IAAI,MAAM,IAAI,QAAQ,EAAE;AACnE,QAAQ,MAAM,IAAI,kBAAkB,CAAC,qBAAqB,EAAE,mEAAmE,CAAC;AAChI,IAAI;AACJ;AACA,SAAS,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE;AACjD,IAAI,OAAO;AACX,QAAQ,OAAO,EAAE,CAAC;AAClB,QAAQ,MAAM;AACd,QAAQ,QAAQ;AAChB,QAAQ,WAAW,EAAE,IAAI,CAAC,YAAY;AACtC,QAAQ,YAAY,EAAE,IAAI,CAAC,aAAa;AACxC,QAAQ,OAAO,EAAE,IAAI,CAAC,QAAQ;AAC9B,QAAQ,SAAS,EAAE,IAAI,CAAC,UAAU;AAClC,QAAQ,KAAK,EAAE,IAAI,CAAC,KAAK;AACzB,QAAQ,SAAS,EAAE,IAAI,CAAC,UAAU;AAClC,KAAK;AACL;;;;;;;;;;"}

package/package.json

@@ -1,7 +1,20 @@
 {
   "name": "capacitor-oidc",
-  "version": "0.0.3",
-  "description": "A minimal Capacitor adapter for standards-based OpenID Connect authentication.",
+  "version": "0.0.5",
+  "description": "Capacitor plugin for native OAuth 2.0 and OpenID Connect authentication on iOS and Android, powered by oidc-client-ts.",
+  "keywords": [
+    "capacitor",
+    "capacitor-plugin",
+    "authentication",
+    "oauth",
+    "oauth2",
+    "openid-connect",
+    "oidc",
+    "pkce",
+    "ios",
+    "android",
+    "oidc-client-ts"
+  ],
   "main": "dist/plugin.cjs",
   "module": "dist/esm/index.js",
   "types": "dist/esm/index.d.ts",
@@ -33,11 +46,15 @@
   "type": "module",
   "scripts": {
     "build": "npm run clean && tsc && rollup -c rollup.config.mjs",
+    "check:package": "node -e \"import('./dist/esm/index.js')\"",
     "clean": "rimraf dist",
+    "e2e:keycloak:down": "docker compose -f test/e2e/keycloak/compose.yml down",
+    "e2e:keycloak:up": "test/e2e/keycloak/create-certificate.sh test/e2e/keycloak/.certificates && docker compose -f test/e2e/keycloak/compose.yml up -d",
+    "example:build": "npm --prefix example run build",
     "lint": "eslint src --ext ts && prettier --check src contracts package.json README.md SECURITY.md docs",
     "prepack": "npm run build",
     "test": "vitest run",
-    "verify": "npm run lint && npm run test && npm run build",
+    "verify": "npm run lint && npm run test && npm run build && npm run check:package",
     "verify:ios": "xcodebuild -scheme CapacitorOidc -destination generic/platform=iOS CODE_SIGNING_ALLOWED=NO",
     "verify:android": "cd android && ./gradlew clean test assembleDebug"
   },