capacitor-oidc 0.0.6 → 0.1.0

package/dist/esm/configuration.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"configuration.js","sourceRoot":"","sources":["../../src/configuration.ts"],"names":[],"mappings":"AASA,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAcjD,MAAM,UAAU,oBAAoB,CAClC,aAAgD,EAChD,QAAyB;IAEzB,IAAI,QAAQ,KAAK,KAAK;QAAE,OAAO,uBAAuB,CAAC,aAAa,CAAC,CAAC;IACtE,OAAO,0BAA0B,CAAC,aAAa,EAAE,QAAQ,CAAC,CAAC;AAC7D,CAAC;AAED,MAAM,UAAU,gCAAgC,CAC9C,QAAsC,EACtC,aAAyC,EACzC,QAAyB;IAEzB,IAAI,QAAQ,KAAK,KAAK,EAAE,CAAC;QACvB,MAAM,IAAI,kBAAkB,CAC1B,qBAAqB,EACrB,4EAA4E,CAC7E,CAAC;IACJ,CAAC;IAED,kBAAkB,CAAC,QAAQ,CAAC,CAAC;IAC7B,IAAI,MAAM,IAAI,QAAQ,EAAE,CAAC;QACvB,MAAM,IAAI,kBAAkB,CAAC,qBAAqB,EAAE,4CAA4C,CAAC,CAAC;IACpG,CAAC;IAED,OAAO,2BAA2B,CAAC,QAAQ,EAAE,QAAQ,EAAE,aAAa,CAAC,CAAC;AACxE,CAAC;AAED,SAAS,uBAAuB,CAAC,aAAgD;IAC/E,MAAM,GAAG,GAAG,aAAa,CAAC,GAAG,CAAC;IAC9B,IAAI,CAAC,GAAG;QAAE,wBAAwB,CAAC,KAAK,CAAC,CAAC;IAE1C,MAAM,WAAW,GAAG,GAAG,CAAC,WAAW,IAAI,UAAU,CAAC;IAClD,MAAM,QAAQ,GAAwB,EAAE,GAAG,aAAa,CAAC,MAAM,EAAE,GAAG,GAAG,CAAC,QAAQ,EAAE,CAAC;IACnF,kBAAkB,CAAC,QAAQ,CAAC,CAAC;IAC7B,IAAI,WAAW,KAAK,OAAO,IAAI,CAAC,QAAQ,CAAC,8BAA8B,IAAI,CAAC,QAAQ,CAAC,wBAAwB,EAAE,CAAC;QAC9G,MAAM,IAAI,kBAAkB,CAC1B,qBAAqB,EACrB,uFAAuF,CACxF,CAAC;IACJ,CAAC;IAED,OAAO;QACL,QAAQ,EAAE,KAAK;QACf,QAAQ;QACR,UAAU,EAAE,GAAG,CAAC,UAAU,IAAI,UAAU;QACxC,WAAW;QACX,UAAU,EAAE,GAAG,CAAC,UAAU,IAAI,EAAE;QAChC,WAAW,EAAE,GAAG,CAAC,WAAW,IAAI,EAAE;KACnC,CAAC;AACJ,CAAC;AAED,SAAS,0BAA0B,CACjC,aAAgD,EAChD,QAA2B;IAE3B,MAAM,MAAM,GAAG,aAAa,CAAC,MAAM,CAAC;IACpC,IAAI,CAAC,MAAM;QAAE,wBAAwB,CAAC,QAAQ,CAAC,CAAC;IAEhD,MAAM,QAAQ,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAC;IACzC,MAAM,QAAQ,GAAG,EAAE,GAAG,aAAa,CAAC,MAAM,EAAE,GAAG,MAAM,CAAC,QAAQ,EAAE,GAAG,QAAQ,EAAE,QAAQ,EAAE,CAAC;IACxF,kBAAkB,CAAC,QAAQ,CAAC,CAAC;IAC7B,oBAAoB,CAAC,QAAQ,CAAC,CAAC;IAE/B,OAAO,2BAA2B,CAChC,QAAQ,EACR,QAAQ,EACR,EAAE,GAAG,MAAM,CAAC,OAAO,EAAE,GAAG,QAAQ,EAAE,OAAO,EAAE,EAC3C,EAAE,GAAG,MAAM,CAAC,UAAU,EAAE,GAAG,QAAQ,EAAE,UAAU,EAAE,EACjD,EAAE,GAAG,MAAM,CAAC,WAAW,EAAE,GAAG,QAAQ,EAAE,WAAW,EAAE,CACpD,CAAC;AACJ,CAAC;AAED,SAAS,2BAA2B,CAClC,QAA2B,EAC3B,QAA6B,EAC7B,aAAyC,EACzC,aAAkC,EAAE,EACpC,cAAoC,EAAE;IAEtC,OAAO;QACL,QAAQ;QACR,QAAQ,EAAE,EAAE,GAAG,QAAQ,EAAE,aAAa,EAAE,MAAM,EAAE,WAAW,EAAE,KAAK,EAAE,cAAc,EAAE,KAAK,EAAE;QAC3F,aAAa;QACb,UAAU,EAAE,OAAO;QACnB,WAAW,EAAE,OAAO;QACpB,UAAU;QACV,WAAW;KACZ,CAAC;AACJ,CAAC;AAED,SAAS,kBAAkB,CAAC,QAAgB;IAC1C,MAAM,WAAW,GAAG,CAAC,uBAAuB,EAAE,eAAe,EAAE,aAAa,EAAE,eAAe,CAAC,CAAC,IAAI,CACjG,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,IAAI,QAAQ,CACzB,CAAC;IACF,IAAI,WAAW,EAAE,CAAC;QAChB,MAAM,IAAI,kBAAkB,CAAC,qBAAqB,EAAE,gDAAgD,WAAW,EAAE,CAAC,CAAC;IACrH,CAAC;AACH,CAAC;AAED,SAAS,oBAAoB,CAAC,QAAgB;IAC5C,MAAM,WAAW,GAAG,CAAC,MAAM,EAAE,gBAAgB,EAAE,qBAAqB,EAAE,YAAY,EAAE,WAAW,CAAC,CAAC,IAAI,CACnG,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,IAAI,QAAQ,CACzB,CAAC;IACF,IAAI,WAAW,EAAE,CAAC;QAChB,MAAM,IAAI,kBAAkB,CAAC,qBAAqB,EAAE,yCAAyC,WAAW,EAAE,CAAC,CAAC;IAC9G,CAAC;AACH,CAAC;AAED,SAAS,wBAAwB,CAAC,QAAyB;IACzD,MAAM,IAAI,kBAAkB,CAAC,qBAAqB,EAAE,MAAM,QAAQ,6BAA6B,CAAC,CAAC;AACnG,CAAC","sourcesContent":["import type { UserManagerSettings } from 'oidc-client-ts';\n\nimport type {\n  CapacitorOidcNativeOptions,\n  CapacitorSigninArgs,\n  CapacitorSignoutArgs,\n  CapacitorUserManagerConfiguration,\n  CapacitorUserManagerSettings,\n} from './definitions.js';\nimport { CapacitorOidcError } from './errors.js';\n\nexport type RuntimePlatform = 'android' | 'ios' | 'web';\n\nexport interface ResolvedUserManagerConfiguration {\n  platform: RuntimePlatform;\n  settings: UserManagerSettings;\n  nativeOptions?: CapacitorOidcNativeOptions;\n  signinMode: 'popup' | 'redirect';\n  signoutMode: 'popup' | 'redirect';\n  signinArgs: CapacitorSigninArgs;\n  signoutArgs: CapacitorSignoutArgs;\n}\n\nexport function resolveConfiguration(\n  configuration: CapacitorUserManagerConfiguration,\n  platform: RuntimePlatform,\n): ResolvedUserManagerConfiguration {\n  if (platform === 'web') return resolveWebConfiguration(configuration);\n  return resolveNativeConfiguration(configuration, platform);\n}\n\nexport function resolveLegacyNativeConfiguration(\n  settings: CapacitorUserManagerSettings,\n  nativeOptions: CapacitorOidcNativeOptions,\n  platform: RuntimePlatform,\n): ResolvedUserManagerConfiguration {\n  if (platform === 'web') {\n    throw new CapacitorOidcError(\n      'UNSUPPORTED_RUNTIME',\n      'Legacy CapacitorUserManager settings are only supported on iOS and Android',\n    );\n  }\n\n  assertPublicClient(settings);\n  if ('dpop' in settings) {\n    throw new CapacitorOidcError('UNSUPPORTED_RUNTIME', 'Native configuration does not support dpop');\n  }\n\n  return resolvedNativeConfiguration(platform, settings, nativeOptions);\n}\n\nfunction resolveWebConfiguration(configuration: CapacitorUserManagerConfiguration): ResolvedUserManagerConfiguration {\n  const web = configuration.web;\n  if (!web) unsupportedConfiguration('web');\n\n  const signoutMode = web.signoutMode ?? 'redirect';\n  const settings: UserManagerSettings = { ...configuration.common, ...web.settings };\n  assertPublicClient(settings);\n  if (signoutMode === 'popup' && !settings.popup_post_logout_redirect_uri && !settings.post_logout_redirect_uri) {\n    throw new CapacitorOidcError(\n      'UNSUPPORTED_RUNTIME',\n      'Web popup signout requires post_logout_redirect_uri or popup_post_logout_redirect_uri',\n    );\n  }\n\n  return {\n    platform: 'web',\n    settings,\n    signinMode: web.signinMode ?? 'redirect',\n    signoutMode,\n    signinArgs: web.signinArgs ?? {},\n    signoutArgs: web.signoutArgs ?? {},\n  };\n}\n\nfunction resolveNativeConfiguration(\n  configuration: CapacitorUserManagerConfiguration,\n  platform: 'android' | 'ios',\n): ResolvedUserManagerConfiguration {\n  const native = configuration.native;\n  if (!native) unsupportedConfiguration(platform);\n\n  const override = configuration[platform];\n  const settings = { ...configuration.common, ...native.settings, ...override?.settings };\n  assertPublicClient(settings);\n  assertNativeSettings(settings);\n\n  return resolvedNativeConfiguration(\n    platform,\n    settings,\n    { ...native.options, ...override?.options },\n    { ...native.signinArgs, ...override?.signinArgs },\n    { ...native.signoutArgs, ...override?.signoutArgs },\n  );\n}\n\nfunction resolvedNativeConfiguration(\n  platform: 'android' | 'ios',\n  settings: UserManagerSettings,\n  nativeOptions: CapacitorOidcNativeOptions,\n  signinArgs: CapacitorSigninArgs = {},\n  signoutArgs: CapacitorSignoutArgs = {},\n): ResolvedUserManagerConfiguration {\n  return {\n    platform,\n    settings: { ...settings, response_type: 'code', disablePKCE: false, monitorSession: false },\n    nativeOptions,\n    signinMode: 'popup',\n    signoutMode: 'popup',\n    signinArgs,\n    signoutArgs,\n  };\n}\n\nfunction assertPublicClient(settings: object): void {\n  const unsupported = ['client_authentication', 'client_secret', 'disablePKCE', 'response_type'].find(\n    (key) => key in settings,\n  );\n  if (unsupported) {\n    throw new CapacitorOidcError('UNSUPPORTED_RUNTIME', `Public-client configuration does not support ${unsupported}`);\n  }\n}\n\nfunction assertNativeSettings(settings: object): void {\n  const unsupported = ['dpop', 'monitorSession', 'silent_redirect_uri', 'stateStore', 'userStore'].find(\n    (key) => key in settings,\n  );\n  if (unsupported) {\n    throw new CapacitorOidcError('UNSUPPORTED_RUNTIME', `Native configuration does not support ${unsupported}`);\n  }\n}\n\nfunction unsupportedConfiguration(platform: RuntimePlatform): never {\n  throw new CapacitorOidcError('UNSUPPORTED_RUNTIME', `No ${platform} configuration was provided`);\n}\n"]}

package/dist/esm/definitions.d.ts

@@ -1,4 +1,4 @@
-import type { UserManagerSettings } from 'oidc-client-ts';
+import type { SigninPopupArgs, SigninRedirectArgs, SignoutPopupArgs, SignoutRedirectArgs, UserManagerSettings } from 'oidc-client-ts';
 export type CapacitorOidcErrorCode = 'AUTH_SESSION_IN_PROGRESS' | 'USER_CANCELLED' | 'BROWSER_UNAVAILABLE' | 'INVALID_CALLBACK' | 'SECURE_STORAGE_ERROR' | 'UNSUPPORTED_RUNTIME';
 export interface IOSNativeOptions {
     keychainAccessGroup?: string;
@@ -9,8 +9,58 @@ export interface CapacitorOidcNativeOptions {
     prefersEphemeralWebBrowserSession?: boolean;
     storageNamespace?: string;
 }
-type UnsupportedSettings = 'client_secret' | 'client_authentication' | 'disablePKCE' | 'dpop' | 'monitorSession' | 'response_type' | 'silent_redirect_uri' | 'stateStore' | 'userStore';
-export type CapacitorUserManagerSettings = Omit<UserManagerSettings, UnsupportedSettings>;
+type UnsafePublicClientSettings = 'client_secret' | 'client_authentication' | 'disablePKCE' | 'response_type';
+type LegacyUnsupportedSettings = UnsafePublicClientSettings | 'dpop' | 'monitorSession' | 'silent_redirect_uri' | 'stateStore' | 'userStore';
+type WebOnlySettings = 'checkSessionIntervalInSeconds' | 'dpop' | 'iframeNotifyParentOrigin' | 'iframeScriptOrigin' | 'includeIdTokenInSilentSignout' | 'monitorAnonymousSession' | 'monitorSession' | 'popup_post_logout_redirect_uri' | 'popup_redirect_uri' | 'popupWindowFeatures' | 'popupWindowTarget' | 'query_status_response_type' | 'redirectMethod' | 'redirectTarget' | 'silent_redirect_uri' | 'silentRequestTimeoutInSeconds' | 'stateStore' | 'stopCheckSessionOnError' | 'userStore';
+type PublicClientUserManagerSettings = Omit<UserManagerSettings, UnsafePublicClientSettings>;
+type NativeUserManagerSettings = Omit<PublicClientUserManagerSettings, WebOnlySettings>;
+/** @deprecated Use CapacitorUserManagerConfiguration. */
+export type CapacitorUserManagerSettings = Omit<UserManagerSettings, LegacyUnsupportedSettings>;
+export type CapacitorUserManagerCommonSettings = Omit<PublicClientUserManagerSettings, WebOnlySettings | 'post_logout_redirect_uri' | 'redirect_uri'>;
+export type CapacitorWebUserManagerSettings = Partial<Omit<PublicClientUserManagerSettings, 'redirect_uri'>> & {
+    redirect_uri: string;
+};
+export type CapacitorNativeUserManagerSettings = Partial<Omit<NativeUserManagerSettings, 'redirect_uri'>> & {
+    redirect_uri: string;
+};
+export type CapacitorSigninArgs = SigninPopupArgs & SigninRedirectArgs;
+export type CapacitorSignoutArgs = SignoutPopupArgs & SignoutRedirectArgs;
+interface CapacitorWebUserManagerConfigurationBase {
+    settings: CapacitorWebUserManagerSettings;
+    signinMode?: 'popup' | 'redirect';
+    signinArgs?: CapacitorSigninArgs;
+    signoutArgs?: CapacitorSignoutArgs;
+}
+type PopupSignoutSettings = CapacitorWebUserManagerSettings & ({
+    popup_post_logout_redirect_uri: string;
+} | {
+    post_logout_redirect_uri: string;
+});
+export type CapacitorWebUserManagerConfiguration = (CapacitorWebUserManagerConfigurationBase & {
+    signoutMode: 'popup';
+    settings: PopupSignoutSettings;
+}) | (CapacitorWebUserManagerConfigurationBase & {
+    signoutMode?: 'redirect';
+});
+export interface CapacitorNativeUserManagerConfiguration {
+    settings: CapacitorNativeUserManagerSettings;
+    options?: CapacitorOidcNativeOptions;
+    signinArgs?: CapacitorSigninArgs;
+    signoutArgs?: CapacitorSignoutArgs;
+}
+export interface CapacitorNativeUserManagerOverride {
+    settings?: Partial<CapacitorNativeUserManagerSettings>;
+    options?: CapacitorOidcNativeOptions;
+    signinArgs?: CapacitorSigninArgs;
+    signoutArgs?: CapacitorSignoutArgs;
+}
+export interface CapacitorUserManagerConfiguration {
+    common: CapacitorUserManagerCommonSettings;
+    web?: CapacitorWebUserManagerConfiguration;
+    native?: CapacitorNativeUserManagerConfiguration;
+    ios?: CapacitorNativeUserManagerOverride;
+    android?: CapacitorNativeUserManagerOverride;
+}
 export interface StoredSessionV1 {
     version: 1;
     issuer: string;

package/dist/esm/definitions.js.map

@@ -1 +1 @@
-{"version":3,"file":"definitions.js","sourceRoot":"","sources":["../../src/definitions.ts"],"names":[],"mappings":"","sourcesContent":["import type { UserManagerSettings } from 'oidc-client-ts';\n\nexport type CapacitorOidcErrorCode =\n  | 'AUTH_SESSION_IN_PROGRESS'\n  | 'USER_CANCELLED'\n  | 'BROWSER_UNAVAILABLE'\n  | 'INVALID_CALLBACK'\n  | 'SECURE_STORAGE_ERROR'\n  | 'UNSUPPORTED_RUNTIME';\n\nexport interface IOSNativeOptions {\n  keychainAccessGroup?: string;\n  keychainAccessibility?: 'afterFirstUnlockThisDeviceOnly' | 'whenUnlockedThisDeviceOnly';\n}\n\nexport interface CapacitorOidcNativeOptions {\n  ios?: IOSNativeOptions;\n  prefersEphemeralWebBrowserSession?: boolean;\n  storageNamespace?: string;\n}\n\ntype UnsupportedSettings =\n  | 'client_secret'\n  | 'client_authentication'\n  | 'disablePKCE'\n  | 'dpop'\n  | 'monitorSession'\n  | 'response_type'\n  | 'silent_redirect_uri'\n  | 'stateStore'\n  | 'userStore';\n\nexport type CapacitorUserManagerSettings = Omit<UserManagerSettings, UnsupportedSettings>;\n\nexport interface StoredSessionV1 {\n  version: 1;\n  issuer: string;\n  clientId: string;\n  accessToken: string;\n  refreshToken?: string;\n  idToken?: string;\n  tokenType: string;\n  scope?: string;\n  expiresAt?: number;\n}\n\nexport interface NativeOpenOptions {\n  url: string;\n  callbackUrl: string;\n  prefersEphemeralWebBrowserSession: boolean;\n}\n\nexport interface NativeStorageOptions {\n  namespace: string;\n  key: string;\n}\n\nexport interface CapacitorOidcPlugin {\n  configure(options: IOSNativeOptions): Promise<void>;\n  open(options: NativeOpenOptions): Promise<{ url: string }>;\n  cancel(): Promise<void>;\n  storageSet(options: NativeStorageOptions & { value: string }): Promise<void>;\n  storageGet(options: NativeStorageOptions): Promise<{ value: string | null }>;\n  storageRemove(options: NativeStorageOptions): Promise<{ value: string | null }>;\n  storageGetAllKeys(options: { namespace: string }): Promise<{ keys: string[] }>;\n  setSessionSnapshot(options: { namespace: string; value: string | null }): Promise<void>;\n}\n"]}
+{"version":3,"file":"definitions.js","sourceRoot":"","sources":["../../src/definitions.ts"],"names":[],"mappings":"","sourcesContent":["import type {\n  SigninPopupArgs,\n  SigninRedirectArgs,\n  SignoutPopupArgs,\n  SignoutRedirectArgs,\n  UserManagerSettings,\n} from 'oidc-client-ts';\n\nexport type CapacitorOidcErrorCode =\n  | 'AUTH_SESSION_IN_PROGRESS'\n  | 'USER_CANCELLED'\n  | 'BROWSER_UNAVAILABLE'\n  | 'INVALID_CALLBACK'\n  | 'SECURE_STORAGE_ERROR'\n  | 'UNSUPPORTED_RUNTIME';\n\nexport interface IOSNativeOptions {\n  keychainAccessGroup?: string;\n  keychainAccessibility?: 'afterFirstUnlockThisDeviceOnly' | 'whenUnlockedThisDeviceOnly';\n}\n\nexport interface CapacitorOidcNativeOptions {\n  ios?: IOSNativeOptions;\n  prefersEphemeralWebBrowserSession?: boolean;\n  storageNamespace?: string;\n}\n\ntype UnsafePublicClientSettings = 'client_secret' | 'client_authentication' | 'disablePKCE' | 'response_type';\n\ntype LegacyUnsupportedSettings =\n  | UnsafePublicClientSettings\n  | 'dpop'\n  | 'monitorSession'\n  | 'silent_redirect_uri'\n  | 'stateStore'\n  | 'userStore';\n\ntype WebOnlySettings =\n  | 'checkSessionIntervalInSeconds'\n  | 'dpop'\n  | 'iframeNotifyParentOrigin'\n  | 'iframeScriptOrigin'\n  | 'includeIdTokenInSilentSignout'\n  | 'monitorAnonymousSession'\n  | 'monitorSession'\n  | 'popup_post_logout_redirect_uri'\n  | 'popup_redirect_uri'\n  | 'popupWindowFeatures'\n  | 'popupWindowTarget'\n  | 'query_status_response_type'\n  | 'redirectMethod'\n  | 'redirectTarget'\n  | 'silent_redirect_uri'\n  | 'silentRequestTimeoutInSeconds'\n  | 'stateStore'\n  | 'stopCheckSessionOnError'\n  | 'userStore';\n\ntype PublicClientUserManagerSettings = Omit<UserManagerSettings, UnsafePublicClientSettings>;\ntype NativeUserManagerSettings = Omit<PublicClientUserManagerSettings, WebOnlySettings>;\n\n/** @deprecated Use CapacitorUserManagerConfiguration. */\nexport type CapacitorUserManagerSettings = Omit<UserManagerSettings, LegacyUnsupportedSettings>;\n\nexport type CapacitorUserManagerCommonSettings = Omit<\n  PublicClientUserManagerSettings,\n  WebOnlySettings | 'post_logout_redirect_uri' | 'redirect_uri'\n>;\n\nexport type CapacitorWebUserManagerSettings = Partial<Omit<PublicClientUserManagerSettings, 'redirect_uri'>> & {\n  redirect_uri: string;\n};\n\nexport type CapacitorNativeUserManagerSettings = Partial<Omit<NativeUserManagerSettings, 'redirect_uri'>> & {\n  redirect_uri: string;\n};\n\nexport type CapacitorSigninArgs = SigninPopupArgs & SigninRedirectArgs;\nexport type CapacitorSignoutArgs = SignoutPopupArgs & SignoutRedirectArgs;\n\ninterface CapacitorWebUserManagerConfigurationBase {\n  settings: CapacitorWebUserManagerSettings;\n  signinMode?: 'popup' | 'redirect';\n  signinArgs?: CapacitorSigninArgs;\n  signoutArgs?: CapacitorSignoutArgs;\n}\n\ntype PopupSignoutSettings = CapacitorWebUserManagerSettings &\n  ({ popup_post_logout_redirect_uri: string } | { post_logout_redirect_uri: string });\n\nexport type CapacitorWebUserManagerConfiguration =\n  | (CapacitorWebUserManagerConfigurationBase & {\n      signoutMode: 'popup';\n      settings: PopupSignoutSettings;\n    })\n  | (CapacitorWebUserManagerConfigurationBase & {\n      signoutMode?: 'redirect';\n    });\n\nexport interface CapacitorNativeUserManagerConfiguration {\n  settings: CapacitorNativeUserManagerSettings;\n  options?: CapacitorOidcNativeOptions;\n  signinArgs?: CapacitorSigninArgs;\n  signoutArgs?: CapacitorSignoutArgs;\n}\n\nexport interface CapacitorNativeUserManagerOverride {\n  settings?: Partial<CapacitorNativeUserManagerSettings>;\n  options?: CapacitorOidcNativeOptions;\n  signinArgs?: CapacitorSigninArgs;\n  signoutArgs?: CapacitorSignoutArgs;\n}\n\nexport interface CapacitorUserManagerConfiguration {\n  common: CapacitorUserManagerCommonSettings;\n  web?: CapacitorWebUserManagerConfiguration;\n  native?: CapacitorNativeUserManagerConfiguration;\n  ios?: CapacitorNativeUserManagerOverride;\n  android?: CapacitorNativeUserManagerOverride;\n}\n\nexport interface StoredSessionV1 {\n  version: 1;\n  issuer: string;\n  clientId: string;\n  accessToken: string;\n  refreshToken?: string;\n  idToken?: string;\n  tokenType: string;\n  scope?: string;\n  expiresAt?: number;\n}\n\nexport interface NativeOpenOptions {\n  url: string;\n  callbackUrl: string;\n  prefersEphemeralWebBrowserSession: boolean;\n}\n\nexport interface NativeStorageOptions {\n  namespace: string;\n  key: string;\n}\n\nexport interface CapacitorOidcPlugin {\n  configure(options: IOSNativeOptions): Promise<void>;\n  open(options: NativeOpenOptions): Promise<{ url: string }>;\n  cancel(): Promise<void>;\n  storageSet(options: NativeStorageOptions & { value: string }): Promise<void>;\n  storageGet(options: NativeStorageOptions): Promise<{ value: string | null }>;\n  storageRemove(options: NativeStorageOptions): Promise<{ value: string | null }>;\n  storageGetAllKeys(options: { namespace: string }): Promise<{ keys: string[] }>;\n  setSessionSnapshot(options: { namespace: string; value: string | null }): Promise<void>;\n}\n"]}

package/dist/esm/index.d.ts

@@ -1,6 +1,7 @@
-export { CapacitorUserManager } from './capacitor-user-manager.js';
+import { CapacitorUserManager } from './capacitor-user-manager.js';
+export { CapacitorUserManager };
 export { CapacitorSecureStateStore } from './capacitor-secure-state-store.js';
 export { CapacitorOidcError } from './errors.js';
-export type { CapacitorOidcErrorCode, CapacitorOidcNativeOptions, CapacitorUserManagerSettings, IOSNativeOptions, StoredSessionV1, } from './definitions.js';
-export { User } from 'oidc-client-ts';
-export type { UserManagerEvents } from 'oidc-client-ts';
+export type { CapacitorOidcErrorCode, CapacitorOidcNativeOptions, CapacitorNativeUserManagerConfiguration, CapacitorNativeUserManagerOverride, CapacitorNativeUserManagerSettings, CapacitorSigninArgs, CapacitorSignoutArgs, CapacitorUserManagerCommonSettings, CapacitorUserManagerConfiguration, CapacitorUserManagerSettings, CapacitorWebUserManagerConfiguration, CapacitorWebUserManagerSettings, IOSNativeOptions, StoredSessionV1, } from './definitions.js';
+export { User, WebStorageStateStore } from 'oidc-client-ts';
+export type { StateStore, UserManagerEvents } from 'oidc-client-ts';

package/dist/esm/index.js

@@ -1,5 +1,11 @@
-export { CapacitorUserManager } from './capacitor-user-manager.js';
+import { CapacitorUserManager, setPlatformUserManagerFactory } from './capacitor-user-manager.js';
+import { NativeCapacitorUserManager } from './native-capacitor-user-manager.js';
+import { WebCapacitorUserManager } from './web-capacitor-user-manager.js';
+setPlatformUserManagerFactory((configuration) => configuration.platform === 'web'
+    ? new WebCapacitorUserManager(configuration)
+    : NativeCapacitorUserManager.fromConfiguration(configuration));
+export { CapacitorUserManager };
 export { CapacitorSecureStateStore } from './capacitor-secure-state-store.js';
 export { CapacitorOidcError } from './errors.js';
-export { User } from 'oidc-client-ts';
+export { User, WebStorageStateStore } from 'oidc-client-ts';
 //# sourceMappingURL=index.js.map

package/dist/esm/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AACnE,OAAO,EAAE,yBAAyB,EAAE,MAAM,mCAAmC,CAAC;AAC9E,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAQjD,OAAO,EAAE,IAAI,EAAE,MAAM,gBAAgB,CAAC","sourcesContent":["export { CapacitorUserManager } from './capacitor-user-manager.js';\nexport { CapacitorSecureStateStore } from './capacitor-secure-state-store.js';\nexport { CapacitorOidcError } from './errors.js';\nexport type {\n  CapacitorOidcErrorCode,\n  CapacitorOidcNativeOptions,\n  CapacitorUserManagerSettings,\n  IOSNativeOptions,\n  StoredSessionV1,\n} from './definitions.js';\nexport { User } from 'oidc-client-ts';\nexport type { UserManagerEvents } from 'oidc-client-ts';\n"]}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,6BAA6B,EAAE,MAAM,6BAA6B,CAAC;AAClG,OAAO,EAAE,0BAA0B,EAAE,MAAM,oCAAoC,CAAC;AAChF,OAAO,EAAE,uBAAuB,EAAE,MAAM,iCAAiC,CAAC;AAE1E,6BAA6B,CAAC,CAAC,aAAa,EAAE,EAAE,CAC9C,aAAa,CAAC,QAAQ,KAAK,KAAK;IAC9B,CAAC,CAAC,IAAI,uBAAuB,CAAC,aAAa,CAAC;IAC5C,CAAC,CAAC,0BAA0B,CAAC,iBAAiB,CAAC,aAAa,CAAC,CAChE,CAAC;AAEF,OAAO,EAAE,oBAAoB,EAAE,CAAC;AAChC,OAAO,EAAE,yBAAyB,EAAE,MAAM,mCAAmC,CAAC;AAC9E,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAiBjD,OAAO,EAAE,IAAI,EAAE,oBAAoB,EAAE,MAAM,gBAAgB,CAAC","sourcesContent":["import { CapacitorUserManager, setPlatformUserManagerFactory } from './capacitor-user-manager.js';\nimport { NativeCapacitorUserManager } from './native-capacitor-user-manager.js';\nimport { WebCapacitorUserManager } from './web-capacitor-user-manager.js';\n\nsetPlatformUserManagerFactory((configuration) =>\n  configuration.platform === 'web'\n    ? new WebCapacitorUserManager(configuration)\n    : NativeCapacitorUserManager.fromConfiguration(configuration),\n);\n\nexport { CapacitorUserManager };\nexport { CapacitorSecureStateStore } from './capacitor-secure-state-store.js';\nexport { CapacitorOidcError } from './errors.js';\nexport type {\n  CapacitorOidcErrorCode,\n  CapacitorOidcNativeOptions,\n  CapacitorNativeUserManagerConfiguration,\n  CapacitorNativeUserManagerOverride,\n  CapacitorNativeUserManagerSettings,\n  CapacitorSigninArgs,\n  CapacitorSignoutArgs,\n  CapacitorUserManagerCommonSettings,\n  CapacitorUserManagerConfiguration,\n  CapacitorUserManagerSettings,\n  CapacitorWebUserManagerConfiguration,\n  CapacitorWebUserManagerSettings,\n  IOSNativeOptions,\n  StoredSessionV1,\n} from './definitions.js';\nexport { User, WebStorageStateStore } from 'oidc-client-ts';\nexport type { StateStore, UserManagerEvents } from 'oidc-client-ts';\n"]}

package/dist/esm/native-capacitor-user-manager.d.ts

@@ -0,0 +1,24 @@
+import { type QuerySessionStatusArgs, type SessionStatus, type SigninRedirectArgs, type SigninSilentArgs, type SignoutRedirectArgs, type SignoutResponse, type SignoutSilentArgs, type User } from 'oidc-client-ts';
+import { CapacitorUserManager } from './capacitor-user-manager.js';
+import type { ResolvedUserManagerConfiguration } from './configuration.js';
+export declare class NativeCapacitorUserManager extends CapacitorUserManager {
+    private appStateListener?;
+    private readonly storageNamespace;
+    private constructor();
+    static fromConfiguration(configuration: ResolvedUserManagerConfiguration): Promise<NativeCapacitorUserManager>;
+    protected initialize(): Promise<void>;
+    signinRedirect(_args?: SigninRedirectArgs): Promise<void>;
+    signinRedirectCallback(_url?: string): Promise<User>;
+    signinCallback(_url?: string): Promise<User | undefined>;
+    signinSilentCallback(_url?: string): Promise<void>;
+    signoutRedirect(_args?: SignoutRedirectArgs): Promise<void>;
+    signoutRedirectCallback(_url?: string): Promise<SignoutResponse>;
+    signoutCallback(_url?: string, _keepOpen?: boolean): Promise<SignoutResponse | undefined>;
+    signoutSilent(_args?: SignoutSilentArgs): Promise<void>;
+    signoutSilentCallback(_url?: string): Promise<void>;
+    querySessionStatus(_args?: QuerySessionStatusArgs): Promise<SessionStatus | null>;
+    storeUser(user: User | null): Promise<void>;
+    cancel(): Promise<void>;
+    protected disposePlatform(): Promise<void>;
+    protected performSilentSignin(args: SigninSilentArgs): Promise<User | null>;
+}

package/dist/esm/native-capacitor-user-manager.js

@@ -0,0 +1,112 @@
+import { App } from '@capacitor/app';
+import { ErrorResponse, } from 'oidc-client-ts';
+import { CapacitorNavigator, UnsupportedIframeNavigator } from './capacitor-navigator.js';
+import { CapacitorSecureStateStore } from './capacitor-secure-state-store.js';
+import { CapacitorUserManager } from './capacitor-user-manager.js';
+import { unsupported } from './errors.js';
+import { NativeOidc } from './native.js';
+export class NativeCapacitorUserManager extends CapacitorUserManager {
+    appStateListener;
+    storageNamespace;
+    constructor(configuration) {
+        const storageNamespace = configuration.nativeOptions?.storageNamespace ?? 'default';
+        const stateStore = new CapacitorSecureStateStore(`${storageNamespace}.transactions`);
+        const userStore = new CapacitorSecureStateStore(`${storageNamespace}.session`);
+        const navigator = new CapacitorNavigator(configuration.nativeOptions?.prefersEphemeralWebBrowserSession ?? false);
+        super({
+            ...configuration,
+            settings: {
+                ...configuration.settings,
+                popup_redirect_uri: configuration.settings.redirect_uri,
+                popup_post_logout_redirect_uri: configuration.settings.post_logout_redirect_uri,
+                stateStore,
+                userStore,
+            },
+        }, navigator, navigator, new UnsupportedIframeNavigator());
+        this.storageNamespace = storageNamespace;
+    }
+    static async fromConfiguration(configuration) {
+        await NativeOidc.configure(configuration.nativeOptions?.ios ?? {});
+        return new NativeCapacitorUserManager(configuration);
+    }
+    async initialize() {
+        await super.initialize();
+        this.appStateListener = await App.addListener('appStateChange', ({ isActive }) => {
+            if (isActive)
+                this.checkForAutomaticRenewal();
+        });
+        this.checkForAutomaticRenewal();
+    }
+    async signinRedirect(_args = {}) {
+        unsupported('Redirect navigation');
+    }
+    async signinRedirectCallback(_url) {
+        unsupported('Redirect navigation');
+    }
+    async signinCallback(_url) {
+        unsupported('Browser callback dispatch');
+    }
+    async signinSilentCallback(_url) {
+        unsupported('Iframe navigation');
+    }
+    async signoutRedirect(_args = {}) {
+        unsupported('Redirect navigation');
+    }
+    async signoutRedirectCallback(_url) {
+        unsupported('Redirect navigation');
+    }
+    async signoutCallback(_url, _keepOpen) {
+        unsupported('Browser callback dispatch');
+    }
+    async signoutSilent(_args = {}) {
+        unsupported('Iframe logout');
+    }
+    async signoutSilentCallback(_url) {
+        unsupported('Iframe logout');
+    }
+    async querySessionStatus(_args = {}) {
+        unsupported('Browser session monitoring');
+    }
+    async storeUser(user) {
+        await super.storeUser(user);
+        await NativeOidc.setSessionSnapshot({
+            namespace: this.storageNamespace,
+            value: user
+                ? JSON.stringify(toStoredSession(user, user.profile.iss ?? this.settings.metadata?.issuer ?? this.settings.authority, this.settings.client_id))
+                : null,
+        });
+    }
+    cancel() {
+        return NativeOidc.cancel();
+    }
+    async disposePlatform() {
+        await this.appStateListener?.remove();
+    }
+    async performSilentSignin(args) {
+        const user = await this.getUser();
+        if (!user?.refresh_token) {
+            if (user?.expired)
+                await this.removeUserWithoutWaiting();
+            return null;
+        }
+        return super.performSilentSignin({ ...args, forceIframeAuth: false }).catch(async (error) => {
+            if (error instanceof ErrorResponse && error.error === 'invalid_grant')
+                await this.removeUserWithoutWaiting();
+            throw error;
+        });
+    }
+}
+function toStoredSession(user, issuer, clientId) {
+    return {
+        version: 1,
+        issuer,
+        clientId,
+        accessToken: user.access_token,
+        refreshToken: user.refresh_token,
+        idToken: user.id_token,
+        tokenType: user.token_type,
+        scope: user.scope,
+        expiresAt: user.expires_at,
+    };
+}
+//# sourceMappingURL=native-capacitor-user-manager.js.map

package/dist/esm/native-capacitor-user-manager.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"native-capacitor-user-manager.js","sourceRoot":"","sources":["../../src/native-capacitor-user-manager.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,MAAM,gBAAgB,CAAC;AAErC,OAAO,EACL,aAAa,GASd,MAAM,gBAAgB,CAAC;AAExB,OAAO,EAAE,kBAAkB,EAAE,0BAA0B,EAAE,MAAM,0BAA0B,CAAC;AAC1F,OAAO,EAAE,yBAAyB,EAAE,MAAM,mCAAmC,CAAC;AAC9E,OAAO,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AAGnE,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,MAAM,OAAO,0BAA2B,SAAQ,oBAAoB;IAC1D,gBAAgB,CAAwB;IAC/B,gBAAgB,CAAS;IAE1C,YAAoB,aAA+C;QACjE,MAAM,gBAAgB,GAAG,aAAa,CAAC,aAAa,EAAE,gBAAgB,IAAI,SAAS,CAAC;QACpF,MAAM,UAAU,GAAG,IAAI,yBAAyB,CAAC,GAAG,gBAAgB,eAAe,CAAC,CAAC;QACrF,MAAM,SAAS,GAAG,IAAI,yBAAyB,CAAC,GAAG,gBAAgB,UAAU,CAAC,CAAC;QAC/E,MAAM,SAAS,GAAG,IAAI,kBAAkB,CAAC,aAAa,CAAC,aAAa,EAAE,iCAAiC,IAAI,KAAK,CAAC,CAAC;QAClH,KAAK,CACH;YACE,GAAG,aAAa;YAChB,QAAQ,EAAE;gBACR,GAAG,aAAa,CAAC,QAAQ;gBACzB,kBAAkB,EAAE,aAAa,CAAC,QAAQ,CAAC,YAAY;gBACvD,8BAA8B,EAAE,aAAa,CAAC,QAAQ,CAAC,wBAAwB;gBAC/E,UAAU;gBACV,SAAS;aACV;SACF,EACD,SAAS,EACT,SAAS,EACT,IAAI,0BAA0B,EAAE,CACjC,CAAC;QACF,IAAI,CAAC,gBAAgB,GAAG,gBAAgB,CAAC;IAC3C,CAAC;IAED,MAAM,CAAC,KAAK,CAAC,iBAAiB,CAAC,aAA+C;QAC5E,MAAM,UAAU,CAAC,SAAS,CAAC,aAAa,CAAC,aAAa,EAAE,GAAG,IAAI,EAAE,CAAC,CAAC;QACnE,OAAO,IAAI,0BAA0B,CAAC,aAAa,CAAC,CAAC;IACvD,CAAC;IAEkB,KAAK,CAAC,UAAU;QACjC,MAAM,KAAK,CAAC,UAAU,EAAE,CAAC;QACzB,IAAI,CAAC,gBAAgB,GAAG,MAAM,GAAG,CAAC,WAAW,CAAC,gBAAgB,EAAE,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE;YAC/E,IAAI,QAAQ;gBAAE,IAAI,CAAC,wBAAwB,EAAE,CAAC;QAChD,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,wBAAwB,EAAE,CAAC;IAClC,CAAC;IAEQ,KAAK,CAAC,cAAc,CAAC,QAA4B,EAAE;QAC1D,WAAW,CAAC,qBAAqB,CAAC,CAAC;IACrC,CAAC;IAEQ,KAAK,CAAC,sBAAsB,CAAC,IAAa;QACjD,WAAW,CAAC,qBAAqB,CAAC,CAAC;IACrC,CAAC;IAEQ,KAAK,CAAC,cAAc,CAAC,IAAa;QACzC,WAAW,CAAC,2BAA2B,CAAC,CAAC;IAC3C,CAAC;IAEQ,KAAK,CAAC,oBAAoB,CAAC,IAAa;QAC/C,WAAW,CAAC,mBAAmB,CAAC,CAAC;IACnC,CAAC;IAEQ,KAAK,CAAC,eAAe,CAAC,QAA6B,EAAE;QAC5D,WAAW,CAAC,qBAAqB,CAAC,CAAC;IACrC,CAAC;IAEQ,KAAK,CAAC,uBAAuB,CAAC,IAAa;QAClD,WAAW,CAAC,qBAAqB,CAAC,CAAC;IACrC,CAAC;IAEQ,KAAK,CAAC,eAAe,CAAC,IAAa,EAAE,SAAmB;QAC/D,WAAW,CAAC,2BAA2B,CAAC,CAAC;IAC3C,CAAC;IAEQ,KAAK,CAAC,aAAa,CAAC,QAA2B,EAAE;QACxD,WAAW,CAAC,eAAe,CAAC,CAAC;IAC/B,CAAC;IAEQ,KAAK,CAAC,qBAAqB,CAAC,IAAa;QAChD,WAAW,CAAC,eAAe,CAAC,CAAC;IAC/B,CAAC;IAEQ,KAAK,CAAC,kBAAkB,CAAC,QAAgC,EAAE;QAClE,WAAW,CAAC,4BAA4B,CAAC,CAAC;IAC5C,CAAC;IAEQ,KAAK,CAAC,SAAS,CAAC,IAAiB;QACxC,MAAM,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QAC5B,MAAM,UAAU,CAAC,kBAAkB,CAAC;YAClC,SAAS,EAAE,IAAI,CAAC,gBAAgB;YAChC,KAAK,EAAE,IAAI;gBACT,CAAC,CAAC,IAAI,CAAC,SAAS,CACZ,eAAe,CACb,IAAI,EACJ,IAAI,CAAC,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,IAAI,IAAI,CAAC,QAAQ,CAAC,SAAS,EAC7E,IAAI,CAAC,QAAQ,CAAC,SAAS,CACxB,CACF;gBACH,CAAC,CAAC,IAAI;SACT,CAAC,CAAC;IACL,CAAC;IAEQ,MAAM;QACb,OAAO,UAAU,CAAC,MAAM,EAAE,CAAC;IAC7B,CAAC;IAEkB,KAAK,CAAC,eAAe;QACtC,MAAM,IAAI,CAAC,gBAAgB,EAAE,MAAM,EAAE,CAAC;IACxC,CAAC;IAEkB,KAAK,CAAC,mBAAmB,CAAC,IAAsB;QACjE,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;QAClC,IAAI,CAAC,IAAI,EAAE,aAAa,EAAE,CAAC;YACzB,IAAI,IAAI,EAAE,OAAO;gBAAE,MAAM,IAAI,CAAC,wBAAwB,EAAE,CAAC;YACzD,OAAO,IAAI,CAAC;QACd,CAAC;QAED,OAAO,KAAK,CAAC,mBAAmB,CAAC,EAAE,GAAG,IAAI,EAAE,eAAe,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,KAAK,EAAE,KAAc,EAAE,EAAE;YACnG,IAAI,KAAK,YAAY,aAAa,IAAI,KAAK,CAAC,KAAK,KAAK,eAAe;gBAAE,MAAM,IAAI,CAAC,wBAAwB,EAAE,CAAC;YAC7G,MAAM,KAAK,CAAC;QACd,CAAC,CAAC,CAAC;IACL,CAAC;CACF;AAED,SAAS,eAAe,CAAC,IAAU,EAAE,MAAc,EAAE,QAAgB;IACnE,OAAO;QACL,OAAO,EAAE,CAAC;QACV,MAAM;QACN,QAAQ;QACR,WAAW,EAAE,IAAI,CAAC,YAAY;QAC9B,YAAY,EAAE,IAAI,CAAC,aAAa;QAChC,OAAO,EAAE,IAAI,CAAC,QAAQ;QACtB,SAAS,EAAE,IAAI,CAAC,UAAU;QAC1B,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,SAAS,EAAE,IAAI,CAAC,UAAU;KAC3B,CAAC;AACJ,CAAC","sourcesContent":["import { App } from '@capacitor/app';\nimport type { PluginListenerHandle } from '@capacitor/core';\nimport {\n  ErrorResponse,\n  type QuerySessionStatusArgs,\n  type SessionStatus,\n  type SigninRedirectArgs,\n  type SigninSilentArgs,\n  type SignoutRedirectArgs,\n  type SignoutResponse,\n  type SignoutSilentArgs,\n  type User,\n} from 'oidc-client-ts';\n\nimport { CapacitorNavigator, UnsupportedIframeNavigator } from './capacitor-navigator.js';\nimport { CapacitorSecureStateStore } from './capacitor-secure-state-store.js';\nimport { CapacitorUserManager } from './capacitor-user-manager.js';\nimport type { ResolvedUserManagerConfiguration } from './configuration.js';\nimport type { StoredSessionV1 } from './definitions.js';\nimport { unsupported } from './errors.js';\nimport { NativeOidc } from './native.js';\n\nexport class NativeCapacitorUserManager extends CapacitorUserManager {\n  private appStateListener?: PluginListenerHandle;\n  private readonly storageNamespace: string;\n\n  private constructor(configuration: ResolvedUserManagerConfiguration) {\n    const storageNamespace = configuration.nativeOptions?.storageNamespace ?? 'default';\n    const stateStore = new CapacitorSecureStateStore(`${storageNamespace}.transactions`);\n    const userStore = new CapacitorSecureStateStore(`${storageNamespace}.session`);\n    const navigator = new CapacitorNavigator(configuration.nativeOptions?.prefersEphemeralWebBrowserSession ?? false);\n    super(\n      {\n        ...configuration,\n        settings: {\n          ...configuration.settings,\n          popup_redirect_uri: configuration.settings.redirect_uri,\n          popup_post_logout_redirect_uri: configuration.settings.post_logout_redirect_uri,\n          stateStore,\n          userStore,\n        },\n      },\n      navigator,\n      navigator,\n      new UnsupportedIframeNavigator(),\n    );\n    this.storageNamespace = storageNamespace;\n  }\n\n  static async fromConfiguration(configuration: ResolvedUserManagerConfiguration): Promise<NativeCapacitorUserManager> {\n    await NativeOidc.configure(configuration.nativeOptions?.ios ?? {});\n    return new NativeCapacitorUserManager(configuration);\n  }\n\n  protected override async initialize(): Promise<void> {\n    await super.initialize();\n    this.appStateListener = await App.addListener('appStateChange', ({ isActive }) => {\n      if (isActive) this.checkForAutomaticRenewal();\n    });\n    this.checkForAutomaticRenewal();\n  }\n\n  override async signinRedirect(_args: SigninRedirectArgs = {}): Promise<void> {\n    unsupported('Redirect navigation');\n  }\n\n  override async signinRedirectCallback(_url?: string): Promise<User> {\n    unsupported('Redirect navigation');\n  }\n\n  override async signinCallback(_url?: string): Promise<User | undefined> {\n    unsupported('Browser callback dispatch');\n  }\n\n  override async signinSilentCallback(_url?: string): Promise<void> {\n    unsupported('Iframe navigation');\n  }\n\n  override async signoutRedirect(_args: SignoutRedirectArgs = {}): Promise<void> {\n    unsupported('Redirect navigation');\n  }\n\n  override async signoutRedirectCallback(_url?: string): Promise<SignoutResponse> {\n    unsupported('Redirect navigation');\n  }\n\n  override async signoutCallback(_url?: string, _keepOpen?: boolean): Promise<SignoutResponse | undefined> {\n    unsupported('Browser callback dispatch');\n  }\n\n  override async signoutSilent(_args: SignoutSilentArgs = {}): Promise<void> {\n    unsupported('Iframe logout');\n  }\n\n  override async signoutSilentCallback(_url?: string): Promise<void> {\n    unsupported('Iframe logout');\n  }\n\n  override async querySessionStatus(_args: QuerySessionStatusArgs = {}): Promise<SessionStatus | null> {\n    unsupported('Browser session monitoring');\n  }\n\n  override async storeUser(user: User | null): Promise<void> {\n    await super.storeUser(user);\n    await NativeOidc.setSessionSnapshot({\n      namespace: this.storageNamespace,\n      value: user\n        ? JSON.stringify(\n            toStoredSession(\n              user,\n              user.profile.iss ?? this.settings.metadata?.issuer ?? this.settings.authority,\n              this.settings.client_id,\n            ),\n          )\n        : null,\n    });\n  }\n\n  override cancel(): Promise<void> {\n    return NativeOidc.cancel();\n  }\n\n  protected override async disposePlatform(): Promise<void> {\n    await this.appStateListener?.remove();\n  }\n\n  protected override async performSilentSignin(args: SigninSilentArgs): Promise<User | null> {\n    const user = await this.getUser();\n    if (!user?.refresh_token) {\n      if (user?.expired) await this.removeUserWithoutWaiting();\n      return null;\n    }\n\n    return super.performSilentSignin({ ...args, forceIframeAuth: false }).catch(async (error: unknown) => {\n      if (error instanceof ErrorResponse && error.error === 'invalid_grant') await this.removeUserWithoutWaiting();\n      throw error;\n    });\n  }\n}\n\nfunction toStoredSession(user: User, issuer: string, clientId: string): StoredSessionV1 {\n  return {\n    version: 1,\n    issuer,\n    clientId,\n    accessToken: user.access_token,\n    refreshToken: user.refresh_token,\n    idToken: user.id_token,\n    tokenType: user.token_type,\n    scope: user.scope,\n    expiresAt: user.expires_at,\n  };\n}\n"]}

package/dist/esm/web-capacitor-user-manager.d.ts

@@ -0,0 +1,11 @@
+import { type QuerySessionStatusArgs, type SessionStatus } from 'oidc-client-ts';
+import { CapacitorUserManager } from './capacitor-user-manager.js';
+import type { ResolvedUserManagerConfiguration } from './configuration.js';
+export declare class WebCapacitorUserManager extends CapacitorUserManager {
+    private readonly sessionMonitor?;
+    private disposed;
+    constructor(configuration: ResolvedUserManagerConfiguration);
+    querySessionStatus(args?: QuerySessionStatusArgs): Promise<SessionStatus | null>;
+    protected disposePlatform(): Promise<void>;
+    private captureSessionMonitor;
+}

package/dist/esm/web-capacitor-user-manager.js

@@ -0,0 +1,44 @@
+import { CapacitorUserManager } from './capacitor-user-manager.js';
+export class WebCapacitorUserManager extends CapacitorUserManager {
+    sessionMonitor;
+    disposed = false;
+    constructor(configuration) {
+        super(configuration);
+        this.sessionMonitor = this.captureSessionMonitor();
+    }
+    async querySessionStatus(args = {}) {
+        if (this.disposed)
+            return null;
+        const session = await super.querySessionStatus(args);
+        return this.disposed ? null : session;
+    }
+    disposePlatform() {
+        this.disposed = true;
+        if (this.sessionMonitor) {
+            this.events.removeUserLoaded(this.sessionMonitor.start);
+            this.events.removeUserUnloaded(this.sessionMonitor.stop);
+            this.sessionMonitor.stop();
+        }
+        return Promise.resolve();
+    }
+    captureSessionMonitor() {
+        // oidc-client-ts does not expose public session-monitor lifecycle hooks.
+        const monitor = this._sessionMonitor;
+        if (!monitor)
+            return undefined;
+        const originalStart = monitor._start;
+        const stop = monitor._stop;
+        const start = async (user) => {
+            if (this.disposed)
+                return;
+            await originalStart(user);
+            if (this.disposed)
+                stop();
+        };
+        this.events.removeUserLoaded(originalStart);
+        this.events.addUserLoaded(start);
+        monitor._start = start;
+        return { start, stop };
+    }
+}
+//# sourceMappingURL=web-capacitor-user-manager.js.map

package/dist/esm/web-capacitor-user-manager.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"web-capacitor-user-manager.js","sourceRoot":"","sources":["../../src/web-capacitor-user-manager.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AAanE,MAAM,OAAO,uBAAwB,SAAQ,oBAAoB;IAC9C,cAAc,CAA2B;IAClD,QAAQ,GAAG,KAAK,CAAC;IAEzB,YAAY,aAA+C;QACzD,KAAK,CAAC,aAAa,CAAC,CAAC;QACrB,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC,qBAAqB,EAAE,CAAC;IACrD,CAAC;IAEQ,KAAK,CAAC,kBAAkB,CAAC,OAA+B,EAAE;QACjE,IAAI,IAAI,CAAC,QAAQ;YAAE,OAAO,IAAI,CAAC;QAC/B,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC;QACrD,OAAO,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC;IACxC,CAAC;IAEkB,eAAe;QAChC,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;QACrB,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;YACxB,IAAI,CAAC,MAAM,CAAC,gBAAgB,CAAC,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;YACxD,IAAI,CAAC,MAAM,CAAC,kBAAkB,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;YACzD,IAAI,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC;QAC7B,CAAC;QACD,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;IAC3B,CAAC;IAEO,qBAAqB;QAC3B,yEAAyE;QACzE,MAAM,OAAO,GAAG,IAAI,CAAC,eAA2D,CAAC;QACjF,IAAI,CAAC,OAAO;YAAE,OAAO,SAAS,CAAC;QAE/B,MAAM,aAAa,GAAG,OAAO,CAAC,MAAM,CAAC;QACrC,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC;QAC3B,MAAM,KAAK,GAAG,KAAK,EAAE,IAAU,EAAE,EAAE;YACjC,IAAI,IAAI,CAAC,QAAQ;gBAAE,OAAO;YAC1B,MAAM,aAAa,CAAC,IAAI,CAAC,CAAC;YAC1B,IAAI,IAAI,CAAC,QAAQ;gBAAE,IAAI,EAAE,CAAC;QAC5B,CAAC,CAAC;QACF,IAAI,CAAC,MAAM,CAAC,gBAAgB,CAAC,aAAa,CAAC,CAAC;QAC5C,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;QACjC,OAAO,CAAC,MAAM,GAAG,KAAK,CAAC;QACvB,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;IACzB,CAAC;CACF","sourcesContent":["import { type QuerySessionStatusArgs, type SessionStatus, type User } from 'oidc-client-ts';\n\nimport { CapacitorUserManager } from './capacitor-user-manager.js';\nimport type { ResolvedUserManagerConfiguration } from './configuration.js';\n\ninterface SessionMonitorLifecycle {\n  start(user: User): Promise<void>;\n  stop(): void;\n}\n\ninterface InternalSessionMonitor {\n  _start(user: User): Promise<void>;\n  _stop(): void;\n}\n\nexport class WebCapacitorUserManager extends CapacitorUserManager {\n  private readonly sessionMonitor?: SessionMonitorLifecycle;\n  private disposed = false;\n\n  constructor(configuration: ResolvedUserManagerConfiguration) {\n    super(configuration);\n    this.sessionMonitor = this.captureSessionMonitor();\n  }\n\n  override async querySessionStatus(args: QuerySessionStatusArgs = {}): Promise<SessionStatus | null> {\n    if (this.disposed) return null;\n    const session = await super.querySessionStatus(args);\n    return this.disposed ? null : session;\n  }\n\n  protected override disposePlatform(): Promise<void> {\n    this.disposed = true;\n    if (this.sessionMonitor) {\n      this.events.removeUserLoaded(this.sessionMonitor.start);\n      this.events.removeUserUnloaded(this.sessionMonitor.stop);\n      this.sessionMonitor.stop();\n    }\n    return Promise.resolve();\n  }\n\n  private captureSessionMonitor(): SessionMonitorLifecycle | undefined {\n    // oidc-client-ts does not expose public session-monitor lifecycle hooks.\n    const monitor = this._sessionMonitor as unknown as InternalSessionMonitor | null;\n    if (!monitor) return undefined;\n\n    const originalStart = monitor._start;\n    const stop = monitor._stop;\n    const start = async (user: User) => {\n      if (this.disposed) return;\n      await originalStart(user);\n      if (this.disposed) stop();\n    };\n    this.events.removeUserLoaded(originalStart);\n    this.events.addUserLoaded(start);\n    monitor._start = start;\n    return { start, stop };\n  }\n}\n"]}