oidc-spa 0.1.0

package/oidc.js

@@ -0,0 +1,440 @@
+"use strict";
+var __assign = (this && this.__assign) || function () {
+    __assign = Object.assign || function(t) {
+        for (var s, i = 1, n = arguments.length; i < n; i++) {
+            s = arguments[i];
+            for (var p in s) if (Object.prototype.hasOwnProperty.call(s, p))
+                t[p] = s[p];
+        }
+        return t;
+    };
+    return __assign.apply(this, arguments);
+};
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+var __generator = (this && this.__generator) || function (thisArg, body) {
+    var _ = { label: 0, sent: function() { if (t[0] & 1) throw t[1]; return t[1]; }, trys: [], ops: [] }, f, y, t, g;
+    return g = { next: verb(0), "throw": verb(1), "return": verb(2) }, typeof Symbol === "function" && (g[Symbol.iterator] = function() { return this; }), g;
+    function verb(n) { return function (v) { return step([n, v]); }; }
+    function step(op) {
+        if (f) throw new TypeError("Generator is already executing.");
+        while (g && (g = 0, op[0] && (_ = 0)), _) try {
+            if (f = 1, y && (t = op[0] & 2 ? y["return"] : op[0] ? y["throw"] || ((t = y["return"]) && t.call(y), 0) : y.next) && !(t = t.call(y, op[1])).done) return t;
+            if (y = 0, t) op = [op[0] & 2, t.value];
+            switch (op[0]) {
+                case 0: case 1: t = op; break;
+                case 4: _.label++; return { value: op[1], done: false };
+                case 5: _.label++; y = op[1]; op = [0]; continue;
+                case 7: op = _.ops.pop(); _.trys.pop(); continue;
+                default:
+                    if (!(t = _.trys, t = t.length > 0 && t[t.length - 1]) && (op[0] === 6 || op[0] === 2)) { _ = 0; continue; }
+                    if (op[0] === 3 && (!t || (op[1] > t[0] && op[1] < t[3]))) { _.label = op[1]; break; }
+                    if (op[0] === 6 && _.label < t[1]) { _.label = t[1]; t = op; break; }
+                    if (t && _.label < t[2]) { _.label = t[2]; _.ops.push(op); break; }
+                    if (t[2]) _.ops.pop();
+                    _.trys.pop(); continue;
+            }
+            op = body.call(thisArg, _);
+        } catch (e) { op = [6, e]; y = 0; } finally { f = t = 0; }
+        if (op[0] & 5) throw op[1]; return { value: op[0] ? op[1] : void 0, done: true };
+    }
+};
+var __read = (this && this.__read) || function (o, n) {
+    var m = typeof Symbol === "function" && o[Symbol.iterator];
+    if (!m) return o;
+    var i = m.call(o), r, ar = [], e;
+    try {
+        while ((n === void 0 || n-- > 0) && !(r = i.next()).done) ar.push(r.value);
+    }
+    catch (error) { e = { error: error }; }
+    finally {
+        try {
+            if (r && !r.done && (m = i["return"])) m.call(i);
+        }
+        finally { if (e) throw e.error; }
+    }
+    return ar;
+};
+var __spreadArray = (this && this.__spreadArray) || function (to, from, pack) {
+    if (pack || arguments.length === 2) for (var i = 0, l = from.length, ar; i < l; i++) {
+        if (ar || !(i in from)) {
+            if (!ar) ar = Array.prototype.slice.call(from, 0, i);
+            ar[i] = from[i];
+        }
+    }
+    return to.concat(ar || Array.prototype.slice.call(from));
+};
+var __values = (this && this.__values) || function(o) {
+    var s = typeof Symbol === "function" && Symbol.iterator, m = s && o[s], i = 0;
+    if (m) return m.call(o);
+    if (o && typeof o.length === "number") return {
+        next: function () {
+            if (o && i >= o.length) o = void 0;
+            return { value: o && o[i++], done: !o };
+        }
+    };
+    throw new TypeError(s ? "Object is not iterable." : "Symbol.iterator is not defined.");
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createOidc = void 0;
+var oidc_client_ts_1 = require("oidc-client-ts");
+var id_1 = require("tsafe/id");
+var readExpirationTimeInJwt_1 = require("./tools/readExpirationTimeInJwt");
+var assert_1 = require("tsafe/assert");
+var urlSearchParams_1 = require("./tools/urlSearchParams");
+var fnv1aHashToHex_1 = require("./tools/fnv1aHashToHex");
+var Deferred_1 = require("./tools/Deferred");
+var paramsToRetrieveFromSuccessfulLogin = ["code", "state", "session_state"];
+function createOidc(params) {
+    return __awaiter(this, void 0, void 0, function () {
+        var issuerUri, clientId, _a, silentSsoUrl, _b, transformUrlBeforeRedirect, configHash, configHashKey, userManager, login, currentTokens, common, oidc;
+        var _this = this;
+        return __generator(this, function (_c) {
+            switch (_c.label) {
+                case 0:
+                    issuerUri = params.issuerUri, clientId = params.clientId, _a = params.silentSsoUrl, silentSsoUrl = _a === void 0 ? "".concat(window.location.origin, "/silent-sso.html") : _a, _b = params.transformUrlBeforeRedirect, transformUrlBeforeRedirect = _b === void 0 ? function (url) { return url; } : _b;
+                    configHash = (0, fnv1aHashToHex_1.fnv1aHashToHex)("".concat(issuerUri, " ").concat(clientId));
+                    configHashKey = "configHash";
+                    userManager = new oidc_client_ts_1.UserManager({
+                        "authority": issuerUri,
+                        "client_id": clientId,
+                        "redirect_uri": "" /* provided when calling login */,
+                        "response_type": "code",
+                        "scope": "openid profile",
+                        "automaticSilentRenew": false,
+                        "silent_redirect_uri": "".concat(silentSsoUrl, "?").concat(configHashKey, "=").concat(configHash)
+                    });
+                    login = function (_a) {
+                        var doesCurrentHrefRequiresAuth = _a.doesCurrentHrefRequiresAuth;
+                        return __awaiter(_this, void 0, void 0, function () {
+                            function URL() {
+                                var args = [];
+                                for (var _i = 0; _i < arguments.length; _i++) {
+                                    args[_i] = arguments[_i];
+                                }
+                                var urlInstance = new (URL_real.bind.apply(URL_real, __spreadArray([void 0], __read(args), false)))();
+                                return new Proxy(urlInstance, {
+                                    "get": function (target, prop) {
+                                        if (prop === "href") {
+                                            return transformUrlBeforeRedirect(urlInstance.href);
+                                        }
+                                        //@ts-expect-error
+                                        return target[prop];
+                                    }
+                                });
+                            }
+                            var URL_real, redirect_uri;
+                            return __generator(this, function (_b) {
+                                switch (_b.label) {
+                                    case 0:
+                                        URL_real = window.URL;
+                                        Object.defineProperty(window, "URL", { "value": URL });
+                                        redirect_uri = (0, urlSearchParams_1.addParamToUrl)({
+                                            "url": window.location.href,
+                                            "name": configHashKey,
+                                            "value": configHash
+                                        }).newUrl;
+                                        return [4 /*yield*/, userManager.signinRedirect({
+                                                redirect_uri: redirect_uri,
+                                                "redirectMethod": doesCurrentHrefRequiresAuth ? "replace" : "assign"
+                                            })];
+                                    case 1:
+                                        _b.sent();
+                                        return [2 /*return*/, new Promise(function () { })];
+                                }
+                            });
+                        });
+                    };
+                    return [4 /*yield*/, (function getUser() {
+                            return __awaiter(this, void 0, void 0, function () {
+                                var url, result, result, loginSuccessUrl, paramsToRetrieveFromSuccessfulLogin_1, paramsToRetrieveFromSuccessfulLogin_1_1, name_1, result, user, _a, user, _b, dLoginSuccessUrl_1, timeout_1, listener_1, loginSuccessUrl, user;
+                                var e_1, _c;
+                                return __generator(this, function (_d) {
+                                    switch (_d.label) {
+                                        case 0:
+                                            url = window.location.href;
+                                            {
+                                                result = (0, urlSearchParams_1.retrieveParamFromUrl)({ "name": configHashKey, url: url });
+                                                if (!result.wasPresent || result.value !== configHash) {
+                                                    return [3 /*break*/, 5];
+                                                }
+                                                url = result.newUrl;
+                                            }
+                                            {
+                                                result = (0, urlSearchParams_1.retrieveParamFromUrl)({ "name": "error", url: url });
+                                                if (result.wasPresent) {
+                                                    throw new Error("OIDC error: ".concat(result.value));
+                                                }
+                                            }
+                                            loginSuccessUrl = "https://dummy.com";
+                                            try {
+                                                for (paramsToRetrieveFromSuccessfulLogin_1 = __values(paramsToRetrieveFromSuccessfulLogin), paramsToRetrieveFromSuccessfulLogin_1_1 = paramsToRetrieveFromSuccessfulLogin_1.next(); !paramsToRetrieveFromSuccessfulLogin_1_1.done; paramsToRetrieveFromSuccessfulLogin_1_1 = paramsToRetrieveFromSuccessfulLogin_1.next()) {
+                                                    name_1 = paramsToRetrieveFromSuccessfulLogin_1_1.value;
+                                                    result = (0, urlSearchParams_1.retrieveParamFromUrl)({ name: name_1, url: url });
+                                                    (0, assert_1.assert)(result.wasPresent);
+                                                    loginSuccessUrl = (0, urlSearchParams_1.addParamToUrl)({
+                                                        "url": loginSuccessUrl,
+                                                        "name": name_1,
+                                                        "value": result.value
+                                                    }).newUrl;
+                                                    url = result.newUrl;
+                                                }
+                                            }
+                                            catch (e_1_1) { e_1 = { error: e_1_1 }; }
+                                            finally {
+                                                try {
+                                                    if (paramsToRetrieveFromSuccessfulLogin_1_1 && !paramsToRetrieveFromSuccessfulLogin_1_1.done && (_c = paramsToRetrieveFromSuccessfulLogin_1.return)) _c.call(paramsToRetrieveFromSuccessfulLogin_1);
+                                                }
+                                                finally { if (e_1) throw e_1.error; }
+                                            }
+                                            window.history.pushState(null, "", url);
+                                            user = undefined;
+                                            _d.label = 1;
+                                        case 1:
+                                            _d.trys.push([1, 3, , 4]);
+                                            return [4 /*yield*/, userManager.signinRedirectCallback(loginSuccessUrl)];
+                                        case 2:
+                                            user = _d.sent();
+                                            return [3 /*break*/, 4];
+                                        case 3:
+                                            _a = _d.sent();
+                                            //NOTE: The user has likely pressed the back button just after logging in.
+                                            return [2 /*return*/, undefined];
+                                        case 4: return [2 /*return*/, user];
+                                        case 5: return [4 /*yield*/, userManager.getUser()];
+                                        case 6:
+                                            user = _d.sent();
+                                            if (user === null) {
+                                                return [3 /*break*/, 11];
+                                            }
+                                            _d.label = 7;
+                                        case 7:
+                                            _d.trys.push([7, 9, , 10]);
+                                            return [4 /*yield*/, userManager.signinSilent()];
+                                        case 8:
+                                            _d.sent();
+                                            return [3 /*break*/, 10];
+                                        case 9:
+                                            _b = _d.sent();
+                                            return [2 /*return*/, undefined];
+                                        case 10: return [2 /*return*/, user];
+                                        case 11:
+                                            dLoginSuccessUrl_1 = new Deferred_1.Deferred();
+                                            timeout_1 = setTimeout(function () {
+                                                return dLoginSuccessUrl_1.reject(new Error("SSO silent login timeout with clientId: ".concat(clientId)));
+                                            }, 5000);
+                                            listener_1 = function (event) {
+                                                var e_2, _a;
+                                                if (event.origin !== window.location.origin || typeof event.data !== "string") {
+                                                    return;
+                                                }
+                                                var url = event.data;
+                                                {
+                                                    var result = void 0;
+                                                    try {
+                                                        result = (0, urlSearchParams_1.retrieveParamFromUrl)({ "name": configHashKey, url: url });
+                                                    }
+                                                    catch (_b) {
+                                                        // This could possibly happen if url is not a valid url.
+                                                        return;
+                                                    }
+                                                    if (!result.wasPresent || result.value !== configHash) {
+                                                        return;
+                                                    }
+                                                }
+                                                clearTimeout(timeout_1);
+                                                window.removeEventListener("message", listener_1);
+                                                {
+                                                    var result = (0, urlSearchParams_1.retrieveParamFromUrl)({ "name": "error", url: url });
+                                                    if (result.wasPresent) {
+                                                        dLoginSuccessUrl_1.resolve(undefined);
+                                                        return;
+                                                    }
+                                                }
+                                                var loginSuccessUrl = "https://dummy.com";
+                                                try {
+                                                    for (var paramsToRetrieveFromSuccessfulLogin_2 = __values(paramsToRetrieveFromSuccessfulLogin), paramsToRetrieveFromSuccessfulLogin_2_1 = paramsToRetrieveFromSuccessfulLogin_2.next(); !paramsToRetrieveFromSuccessfulLogin_2_1.done; paramsToRetrieveFromSuccessfulLogin_2_1 = paramsToRetrieveFromSuccessfulLogin_2.next()) {
+                                                        var name_2 = paramsToRetrieveFromSuccessfulLogin_2_1.value;
+                                                        var result = (0, urlSearchParams_1.retrieveParamFromUrl)({ name: name_2, url: url });
+                                                        (0, assert_1.assert)(result.wasPresent);
+                                                        loginSuccessUrl = (0, urlSearchParams_1.addParamToUrl)({
+                                                            "url": loginSuccessUrl,
+                                                            "name": name_2,
+                                                            "value": result.value
+                                                        }).newUrl;
+                                                    }
+                                                }
+                                                catch (e_2_1) { e_2 = { error: e_2_1 }; }
+                                                finally {
+                                                    try {
+                                                        if (paramsToRetrieveFromSuccessfulLogin_2_1 && !paramsToRetrieveFromSuccessfulLogin_2_1.done && (_a = paramsToRetrieveFromSuccessfulLogin_2.return)) _a.call(paramsToRetrieveFromSuccessfulLogin_2);
+                                                    }
+                                                    finally { if (e_2) throw e_2.error; }
+                                                }
+                                                dLoginSuccessUrl_1.resolve(loginSuccessUrl);
+                                            };
+                                            window.addEventListener("message", listener_1, false);
+                                            userManager.signinSilent({ "silentRequestTimeoutInSeconds": 1 }).catch(function () {
+                                                /* error expected */
+                                            });
+                                            return [4 /*yield*/, dLoginSuccessUrl_1.pr];
+                                        case 12:
+                                            loginSuccessUrl = _d.sent();
+                                            if (loginSuccessUrl === undefined) {
+                                                return [3 /*break*/, 14];
+                                            }
+                                            return [4 /*yield*/, userManager.signinRedirectCallback(loginSuccessUrl)];
+                                        case 13:
+                                            user = _d.sent();
+                                            return [2 /*return*/, user];
+                                        case 14: return [2 /*return*/, undefined];
+                                    }
+                                });
+                            });
+                        })().then(function (user) {
+                            if (user === undefined) {
+                                return undefined;
+                            }
+                            var tokens = userToTokens(user);
+                            if (tokens.refreshTokenExpirationTime < tokens.accessTokenExpirationTime) {
+                                console.warn([
+                                    "The OIDC refresh token shorter than the one of the access token.",
+                                    "This is very unusual and probably a misconfiguration.",
+                                    "Check your oidc server configuration for ".concat(clientId, " ").concat(issuerUri)
+                                ].join(" "));
+                            }
+                            return tokens;
+                        })];
+                case 1:
+                    currentTokens = _c.sent();
+                    common = {
+                        "params": {
+                            issuerUri: issuerUri,
+                            clientId: clientId
+                        }
+                    };
+                    if (currentTokens === undefined) {
+                        return [2 /*return*/, (0, id_1.id)(__assign(__assign({}, common), { "isUserLoggedIn": false, login: login }))];
+                    }
+                    oidc = (0, id_1.id)(__assign(__assign({}, common), { "isUserLoggedIn": true, "getTokens": function () { return ({
+                            "accessToken": currentTokens.accessToken,
+                            "idToken": currentTokens.idToken,
+                            "refreshToken": currentTokens.refreshToken,
+                            "refreshTokenExpirationTime": currentTokens.refreshTokenExpirationTime,
+                            "accessTokenExpirationTime": currentTokens.accessTokenExpirationTime
+                        }); }, "logout": function (_a) {
+                            var redirectTo = _a.redirectTo;
+                            return __awaiter(_this, void 0, void 0, function () {
+                                return __generator(this, function (_b) {
+                                    switch (_b.label) {
+                                        case 0: return [4 /*yield*/, userManager.signoutRedirect({
+                                                "post_logout_redirect_uri": (function () {
+                                                    switch (redirectTo) {
+                                                        case "current page":
+                                                            return window.location.href;
+                                                        case "home":
+                                                            return window.location.origin;
+                                                    }
+                                                })()
+                                            })];
+                                        case 1:
+                                            _b.sent();
+                                            return [2 /*return*/, new Promise(function () { })];
+                                    }
+                                });
+                            });
+                        }, "renewTokens": function () { return __awaiter(_this, void 0, void 0, function () {
+                            var user;
+                            return __generator(this, function (_a) {
+                                switch (_a.label) {
+                                    case 0: return [4 /*yield*/, userManager.signinSilent()];
+                                    case 1:
+                                        user = _a.sent();
+                                        (0, assert_1.assert)(user !== null);
+                                        Object.assign(currentTokens, userToTokens(user));
+                                        return [2 /*return*/];
+                                }
+                            });
+                        }); } }));
+                    (function scheduleAutomaticRenew() {
+                        var _this = this;
+                        var msBeforeExpiration = Math.min(currentTokens.accessTokenExpirationTime, currentTokens.refreshTokenExpirationTime) -
+                            Date.now();
+                        setTimeout(function () { return __awaiter(_this, void 0, void 0, function () {
+                            var _a;
+                            return __generator(this, function (_b) {
+                                switch (_b.label) {
+                                    case 0:
+                                        _b.trys.push([0, 2, , 4]);
+                                        return [4 /*yield*/, oidc.renewTokens()];
+                                    case 1:
+                                        _b.sent();
+                                        return [3 /*break*/, 4];
+                                    case 2:
+                                        _a = _b.sent();
+                                        return [4 /*yield*/, login({ "doesCurrentHrefRequiresAuth": true })];
+                                    case 3:
+                                        _b.sent();
+                                        return [3 /*break*/, 4];
+                                    case 4:
+                                        scheduleAutomaticRenew();
+                                        return [2 /*return*/];
+                                }
+                            });
+                        }); }, msBeforeExpiration - /* min validity in seconds */ 25 * 1000);
+                    })();
+                    return [2 /*return*/, oidc];
+            }
+        });
+    });
+}
+exports.createOidc = createOidc;
+function userToTokens(user) {
+    var accessToken = user.access_token;
+    var accessTokenExpirationTime = (function () {
+        read_from_metadata: {
+            var expires_at = user.expires_at;
+            if (expires_at === undefined) {
+                break read_from_metadata;
+            }
+            return expires_at * 1000;
+        }
+        read_from_jwt: {
+            var expirationTime = (0, readExpirationTimeInJwt_1.readExpirationTimeInJwt)(accessToken);
+            if (expirationTime === undefined) {
+                break read_from_jwt;
+            }
+            return expirationTime;
+        }
+        (0, assert_1.assert)(false, "Failed to get access token expiration time");
+    })();
+    var refreshToken = user.refresh_token;
+    (0, assert_1.assert)(refreshToken !== undefined, "No refresh token provided by the oidc server");
+    var refreshTokenExpirationTime = (function () {
+        read_from_jwt: {
+            var expirationTime = (0, readExpirationTimeInJwt_1.readExpirationTimeInJwt)(refreshToken);
+            if (expirationTime === undefined) {
+                break read_from_jwt;
+            }
+            return expirationTime;
+        }
+        (0, assert_1.assert)(false, "Failed to get refresh token expiration time");
+    })();
+    var idToken = user.id_token;
+    (0, assert_1.assert)(idToken !== undefined, "No id token provided by the oidc server");
+    return {
+        accessToken: accessToken,
+        accessTokenExpirationTime: accessTokenExpirationTime,
+        refreshToken: refreshToken,
+        refreshTokenExpirationTime: refreshTokenExpirationTime,
+        idToken: idToken
+    };
+}
+//# sourceMappingURL=oidc.js.map

package/oidc.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"oidc.js","sourceRoot":"","sources":["src/oidc.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,iDAAwD;AACxD,+BAA8B;AAC9B,2EAA0E;AAC1E,uCAAsC;AACtC,2DAA8E;AAC9E,yDAAwD;AACxD,6CAA4C;AAiC5C,IAAM,mCAAmC,GAAG,CAAC,MAAM,EAAE,OAAO,EAAE,eAAe,CAAU,CAAC;AAExF,SAAsB,UAAU,CAAC,MAMhC;;;;;;;oBAEO,SAAS,GAIT,MAAM,UAJG,EACT,QAAQ,GAGR,MAAM,SAHE,EACR,KAEA,MAAM,aAFoD,EAA1D,YAAY,mBAAG,UAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,qBAAkB,KAAA,EAC1D,KACA,MAAM,2BADiC,EAAvC,0BAA0B,mBAAG,UAAA,GAAG,IAAI,OAAA,GAAG,EAAH,CAAG,KAAA,CAChC;oBAEL,UAAU,GAAG,IAAA,+BAAc,EAAC,UAAG,SAAS,cAAI,QAAQ,CAAE,CAAC,CAAC;oBACxD,aAAa,GAAG,YAAY,CAAC;oBAE7B,WAAW,GAAG,IAAI,4BAAW,CAAC;wBAChC,WAAW,EAAE,SAAS;wBACtB,WAAW,EAAE,QAAQ;wBACrB,cAAc,EAAE,EAAE,CAAC,iCAAiC;wBACpD,eAAe,EAAE,MAAM;wBACvB,OAAO,EAAE,gBAAgB;wBACzB,sBAAsB,EAAE,KAAK;wBAC7B,qBAAqB,EAAE,UAAG,YAAY,cAAI,aAAa,cAAI,UAAU,CAAE;qBAC1E,CAAC,CAAC;oBAEG,KAAK,GAA8B,UAAO,EAA+B;4BAA7B,2BAA2B,iCAAA;;4BAOzE,SAAS,GAAG;gCAAC,cAA+C;qCAA/C,UAA+C,EAA/C,qBAA+C,EAA/C,IAA+C;oCAA/C,yBAA+C;;gCACxD,IAAM,WAAW,QAAO,QAAQ,YAAR,QAAQ,iCAAI,IAAI,aAAC,CAAC;gCAE1C,OAAO,IAAI,KAAK,CAAC,WAAW,EAAE;oCAC1B,KAAK,EAAE,UAAC,MAAM,EAAE,IAAI;wCAChB,IAAI,IAAI,KAAK,MAAM,EAAE;4CACjB,OAAO,0BAA0B,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;yCACvD;wCAED,kBAAkB;wCAClB,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC;oCACxB,CAAC;iCACJ,CAAC,CAAC;4BACP,CAAC;;;;;wCAfK,QAAQ,GAAG,MAAM,CAAC,GAAG,CAAC;wCAiB5B,MAAM,CAAC,cAAc,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC;wCAEvC,YAAY,GAAK,IAAA,+BAAa,EAAC;4CAC3C,KAAK,EAAE,MAAM,CAAC,QAAQ,CAAC,IAAI;4CAC3B,MAAM,EAAE,aAAa;4CACrB,OAAO,EAAE,UAAU;yCACtB,CAAC,OAJ0B,CAIzB;wCAEH,qBAAM,WAAW,CAAC,cAAc,CAAC;gDAC7B,YAAY,cAAA;gDACZ,gBAAgB,EAAE,2BAA2B,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ;6CACvE,CAAC,EAAA;;wCAHF,SAGE,CAAC;wCACH,sBAAO,IAAI,OAAO,CAAQ,cAAO,CAAC,CAAC,EAAC;;;;qBACvC,CAAC;oBAEoB,qBAAM,CAAC,SAAe,OAAO;;;;;;;4CAEvC,GAAG,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC;4CAE/B;gDACU,MAAM,GAAG,IAAA,sCAAoB,EAAC,EAAE,MAAM,EAAE,aAAa,EAAE,GAAG,KAAA,EAAE,CAAC,CAAC;gDAEpE,IAAI,CAAC,MAAM,CAAC,UAAU,IAAI,MAAM,CAAC,KAAK,KAAK,UAAU,EAAE;oDACnD,wBAAyC;iDAC5C;gDAED,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC;6CACvB;4CAED;gDACU,MAAM,GAAG,IAAA,sCAAoB,EAAC,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,KAAA,EAAE,CAAC,CAAC;gDAE9D,IAAI,MAAM,CAAC,UAAU,EAAE;oDACnB,MAAM,IAAI,KAAK,CAAC,sBAAe,MAAM,CAAC,KAAK,CAAE,CAAC,CAAC;iDAClD;6CACJ;4CAEG,eAAe,GAAG,mBAAmB,CAAC;;gDAE1C,KAAmB,wCAAA,SAAA,mCAAmC,CAAA,iOAAE;oDAAnD;oDACK,MAAM,GAAG,IAAA,sCAAoB,EAAC,EAAE,IAAI,QAAA,EAAE,GAAG,KAAA,EAAE,CAAC,CAAC;oDAEnD,IAAA,eAAM,EAAC,MAAM,CAAC,UAAU,CAAC,CAAC;oDAE1B,eAAe,GAAG,IAAA,+BAAa,EAAC;wDAC5B,KAAK,EAAE,eAAe;wDACtB,MAAM,EAAE,MAAI;wDACZ,OAAO,EAAE,MAAM,CAAC,KAAK;qDACxB,CAAC,CAAC,MAAM,CAAC;oDAEV,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC;iDACvB;;;;;;;;;4CAED,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,EAAE,EAAE,EAAE,GAAG,CAAC,CAAC;4CAEpC,IAAI,GAAqB,SAAS,CAAC;;;;4CAG5B,qBAAM,WAAW,CAAC,sBAAsB,CAAC,eAAe,CAAC,EAAA;;4CAAhE,IAAI,GAAG,SAAyD,CAAC;;;;4CAEjE,0EAA0E;4CAC1E,sBAAO,SAAS,EAAC;gDAGrB,sBAAO,IAAI,EAAC;gDAIC,qBAAM,WAAW,CAAC,OAAO,EAAE,EAAA;;4CAAlC,IAAI,GAAG,SAA2B;4CAExC,IAAI,IAAI,KAAK,IAAI,EAAE;gDACf,yBAA2B;6CAC9B;;;;4CAIG,qBAAM,WAAW,CAAC,YAAY,EAAE,EAAA;;4CAAhC,SAAgC,CAAC;;;;4CAEjC,sBAAO,SAAS,EAAC;iDAGrB,sBAAO,IAAI,EAAC;;4CAIN,qBAAmB,IAAI,mBAAQ,EAAsB,CAAC;4CAEtD,YAAU,UAAU,CACtB;gDACI,OAAA,kBAAgB,CAAC,MAAM,CACnB,IAAI,KAAK,CAAC,kDAA2C,QAAQ,CAAE,CAAC,CACnE;4CAFD,CAEC,EACL,IAAI,CACP,CAAC;4CAEI,aAAW,UAAC,KAAmB;;gDACjC,IAAI,KAAK,CAAC,MAAM,KAAK,MAAM,CAAC,QAAQ,CAAC,MAAM,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE;oDAC3E,OAAO;iDACV;gDAED,IAAM,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC;gDAEvB;oDACI,IAAI,MAAM,SAAyC,CAAC;oDAEpD,IAAI;wDACA,MAAM,GAAG,IAAA,sCAAoB,EAAC,EAAE,MAAM,EAAE,aAAa,EAAE,GAAG,KAAA,EAAE,CAAC,CAAC;qDACjE;oDAAC,WAAM;wDACJ,wDAAwD;wDACxD,OAAO;qDACV;oDAED,IAAI,CAAC,MAAM,CAAC,UAAU,IAAI,MAAM,CAAC,KAAK,KAAK,UAAU,EAAE;wDACnD,OAAO;qDACV;iDACJ;gDAED,YAAY,CAAC,SAAO,CAAC,CAAC;gDAEtB,MAAM,CAAC,mBAAmB,CAAC,SAAS,EAAE,UAAQ,CAAC,CAAC;gDAEhD;oDACI,IAAM,MAAM,GAAG,IAAA,sCAAoB,EAAC,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,KAAA,EAAE,CAAC,CAAC;oDAE9D,IAAI,MAAM,CAAC,UAAU,EAAE;wDACnB,kBAAgB,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;wDACpC,OAAO;qDACV;iDACJ;gDAED,IAAI,eAAe,GAAG,mBAAmB,CAAC;;oDAE1C,KAAmB,IAAA,wCAAA,SAAA,mCAAmC,CAAA,wFAAA,yIAAE;wDAAnD,IAAM,MAAI,gDAAA;wDACX,IAAM,MAAM,GAAG,IAAA,sCAAoB,EAAC,EAAE,IAAI,QAAA,EAAE,GAAG,KAAA,EAAE,CAAC,CAAC;wDAEnD,IAAA,eAAM,EAAC,MAAM,CAAC,UAAU,CAAC,CAAC;wDAE1B,eAAe,GAAG,IAAA,+BAAa,EAAC;4DAC5B,KAAK,EAAE,eAAe;4DACtB,MAAM,EAAE,MAAI;4DACZ,OAAO,EAAE,MAAM,CAAC,KAAK;yDACxB,CAAC,CAAC,MAAM,CAAC;qDACb;;;;;;;;;gDAED,kBAAgB,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;4CAC9C,CAAC,CAAC;4CAEF,MAAM,CAAC,gBAAgB,CAAC,SAAS,EAAE,UAAQ,EAAE,KAAK,CAAC,CAAC;4CAEpD,WAAW,CAAC,YAAY,CAAC,EAAE,+BAA+B,EAAE,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC;gDACnE,oBAAoB;4CACxB,CAAC,CAAC,CAAC;4CAEqB,qBAAM,kBAAgB,CAAC,EAAE,EAAA;;4CAA3C,eAAe,GAAG,SAAyB;4CAEjD,IAAI,eAAe,KAAK,SAAS,EAAE;gDAC/B,yBAAoC;6CACvC;4CAEY,qBAAM,WAAW,CAAC,sBAAsB,CAAC,eAAe,CAAC,EAAA;;4CAAhE,IAAI,GAAG,SAAyD;4CAEtE,sBAAO,IAAI,EAAC;iDAGhB,sBAAO,SAAS,EAAC;;;;yBACpB,CAAC,EAAE,CAAC,IAAI,CAAC,UAAA,IAAI;4BACV,IAAI,IAAI,KAAK,SAAS,EAAE;gCACpB,OAAO,SAAS,CAAC;6BACpB;4BAED,IAAM,MAAM,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;4BAElC,IAAI,MAAM,CAAC,0BAA0B,GAAG,MAAM,CAAC,yBAAyB,EAAE;gCACtE,OAAO,CAAC,IAAI,CACR;oCACI,kEAAkE;oCAClE,uDAAuD;oCACvD,mDAA4C,QAAQ,cAAI,SAAS,CAAE;iCACtE,CAAC,IAAI,CAAC,GAAG,CAAC,CACd,CAAC;6BACL;4BAED,OAAO,MAAM,CAAC;wBAClB,CAAC,CAAC,EAAA;;oBAxKI,aAAa,GAAG,SAwKpB;oBAEI,MAAM,GAAgB;wBACxB,QAAQ,EAAE;4BACN,SAAS,WAAA;4BACT,QAAQ,UAAA;yBACX;qBACJ,CAAC;oBAEF,IAAI,aAAa,KAAK,SAAS,EAAE;wBAC7B,sBAAO,IAAA,OAAE,wBACF,MAAM,KACT,gBAAgB,EAAE,KAAK,EACvB,KAAK,OAAA,IACP,EAAC;qBACN;oBAEK,IAAI,GAAG,IAAA,OAAE,wBACR,MAAM,KACT,gBAAgB,EAAE,IAAI,EACtB,WAAW,EAAE,cAAM,OAAA,CAAC;4BAChB,aAAa,EAAE,aAAa,CAAC,WAAW;4BACxC,SAAS,EAAE,aAAa,CAAC,OAAO;4BAChC,cAAc,EAAE,aAAa,CAAC,YAAY;4BAC1C,4BAA4B,EAAE,aAAa,CAAC,0BAA0B;4BACtE,2BAA2B,EAAE,aAAa,CAAC,yBAAyB;yBACvE,CAAC,EANiB,CAMjB,EACF,QAAQ,EAAE,UAAO,EAAc;gCAAZ,UAAU,gBAAA;;;;gDACzB,qBAAM,WAAW,CAAC,eAAe,CAAC;gDAC9B,0BAA0B,EAAE,CAAC;oDACzB,QAAQ,UAAU,EAAE;wDAChB,KAAK,cAAc;4DACf,OAAO,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC;wDAChC,KAAK,MAAM;4DACP,OAAO,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC;qDACrC;gDACL,CAAC,CAAC,EAAE;6CACP,CAAC,EAAA;;4CATF,SASE,CAAC;4CACH,sBAAO,IAAI,OAAO,CAAQ,cAAO,CAAC,CAAC,EAAC;;;;yBACvC,EACD,aAAa,EAAE;;;;4CACE,qBAAM,WAAW,CAAC,YAAY,EAAE,EAAA;;wCAAvC,IAAI,GAAG,SAAgC;wCAE7C,IAAA,eAAM,EAAC,IAAI,KAAK,IAAI,CAAC,CAAC;wCAEtB,MAAM,CAAC,MAAM,CAAC,aAAa,EAAE,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC;;;;6BACpD,IACH,CAAC;oBAEH,CAAC,SAAS,sBAAsB;wBAA/B,iBAcA;wBAbG,IAAM,kBAAkB,GACpB,IAAI,CAAC,GAAG,CAAC,aAAa,CAAC,yBAAyB,EAAE,aAAa,CAAC,0BAA0B,CAAC;4BAC3F,IAAI,CAAC,GAAG,EAAE,CAAC;wBAEf,UAAU,CAAC;;;;;;wCAEH,qBAAM,IAAI,CAAC,WAAW,EAAE,EAAA;;wCAAxB,SAAwB,CAAC;;;;wCAEzB,qBAAM,KAAK,CAAC,EAAE,6BAA6B,EAAE,IAAI,EAAE,CAAC,EAAA;;wCAApD,SAAoD,CAAC;;;wCAGzD,sBAAsB,EAAE,CAAC;;;;6BAC5B,EAAE,kBAAkB,GAAG,6BAA6B,CAAC,EAAE,GAAG,IAAI,CAAC,CAAC;oBACrE,CAAC,CAAC,EAAE,CAAC;oBAEL,sBAAO,IAAI,EAAC;;;;CACf;AA1SD,gCA0SC;AAED,SAAS,YAAY,CAAC,IAAU;IAC5B,IAAM,WAAW,GAAG,IAAI,CAAC,YAAY,CAAC;IAEtC,IAAM,yBAAyB,GAAG,CAAC;QAC/B,kBAAkB,EAAE;YACR,IAAA,UAAU,GAAK,IAAI,WAAT,CAAU;YAE5B,IAAI,UAAU,KAAK,SAAS,EAAE;gBAC1B,MAAM,kBAAkB,CAAC;aAC5B;YAED,OAAO,UAAU,GAAG,IAAI,CAAC;SAC5B;QAED,aAAa,EAAE;YACX,IAAM,cAAc,GAAG,IAAA,iDAAuB,EAAC,WAAW,CAAC,CAAC;YAE5D,IAAI,cAAc,KAAK,SAAS,EAAE;gBAC9B,MAAM,aAAa,CAAC;aACvB;YAED,OAAO,cAAc,CAAC;SACzB;QAED,IAAA,eAAM,EAAC,KAAK,EAAE,4CAA4C,CAAC,CAAC;IAChE,CAAC,CAAC,EAAE,CAAC;IAEL,IAAM,YAAY,GAAG,IAAI,CAAC,aAAa,CAAC;IAExC,IAAA,eAAM,EAAC,YAAY,KAAK,SAAS,EAAE,8CAA8C,CAAC,CAAC;IAEnF,IAAM,0BAA0B,GAAG,CAAC;QAChC,aAAa,EAAE;YACX,IAAM,cAAc,GAAG,IAAA,iDAAuB,EAAC,YAAY,CAAC,CAAC;YAE7D,IAAI,cAAc,KAAK,SAAS,EAAE;gBAC9B,MAAM,aAAa,CAAC;aACvB;YAED,OAAO,cAAc,CAAC;SACzB;QAED,IAAA,eAAM,EAAC,KAAK,EAAE,6CAA6C,CAAC,CAAC;IACjE,CAAC,CAAC,EAAE,CAAC;IAEL,IAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC;IAE9B,IAAA,eAAM,EAAC,OAAO,KAAK,SAAS,EAAE,yCAAyC,CAAC,CAAC;IAEzE,OAAO;QACH,WAAW,aAAA;QACX,yBAAyB,2BAAA;QACzB,YAAY,cAAA;QACZ,0BAA0B,4BAAA;QAC1B,OAAO,SAAA;KACV,CAAC;AACN,CAAC"}

package/package.json

@@ -0,0 +1,83 @@
+{
+    "name": "oidc-spa",
+    "version": "0.1.0",
+    "description": "Openidconnect client for Single Page Applications",
+    "repository": {
+        "type": "git",
+        "url": "git://github.com/garronej/oidc-spa.git"
+    },
+    "main": "./index.js",
+    "types": "./index.d.ts",
+    "exports": {
+        ".": "./index.js",
+        "./index": "./index.js",
+        "./oidc": "./oidc.js",
+        "./react": "./react.js",
+        "./tools/Deferred": "./tools/Deferred.js",
+        "./tools/fnv1aHashToHex": "./tools/fnv1aHashToHex.js",
+        "./tools/readExpirationTimeInJwt": "./tools/readExpirationTimeInJwt.js",
+        "./tools/urlSearchParams": "./tools/urlSearchParams.js"
+    },
+    "lint-staged": {
+        "*.{ts,tsx,json,md}": [
+            "prettier --write"
+        ]
+    },
+    "husky": {
+        "hooks": {
+            "pre-commit": "lint-staged -v"
+        }
+    },
+    "author": "u/garronej",
+    "license": "MIT",
+    "files": [
+        "./src/index.ts",
+        "./src/oidc.ts",
+        "./src/react.tsx",
+        "./src/tools/Deferred.ts",
+        "./src/tools/fnv1aHashToHex.ts",
+        "./src/tools/readExpirationTimeInJwt.ts",
+        "./src/tools/urlSearchParams.ts",
+        "./index.d.ts",
+        "./index.js",
+        "./index.js.map",
+        "./oidc.d.ts",
+        "./oidc.js",
+        "./oidc.js.map",
+        "./react.d.ts",
+        "./react.js",
+        "./react.js.map",
+        "./tools/Deferred.d.ts",
+        "./tools/Deferred.js",
+        "./tools/Deferred.js.map",
+        "./tools/fnv1aHashToHex.d.ts",
+        "./tools/fnv1aHashToHex.js",
+        "./tools/fnv1aHashToHex.js.map",
+        "./tools/readExpirationTimeInJwt.d.ts",
+        "./tools/readExpirationTimeInJwt.js",
+        "./tools/readExpirationTimeInJwt.js.map",
+        "./tools/urlSearchParams.d.ts",
+        "./tools/urlSearchParams.js",
+        "./tools/urlSearchParams.js.map"
+    ],
+    "keywords": [],
+    "homepage": "https://github.com/garronej/oidc-spa",
+    "devDependencies": {
+        "@types/node": "^20.2.1",
+        "@types/react": "^18.2.6",
+        "husky": "^4.3.8",
+        "lint-staged": "^11.1.1",
+        "prettier": "^2.8.8",
+        "react": "^18.2.0",
+        "ts-node": "^10.9.1",
+        "typescript": "^5.0.4"
+    },
+    "publishConfig": {
+        "access": "public"
+    },
+    "dependencies": {
+        "jwt-decode": "^3.1.2",
+        "oidc-client-ts": "^2.3.0",
+        "tsafe": "^1.6.5"
+    }
+}

package/react.d.ts

@@ -0,0 +1,11 @@
+import { type ReactNode } from "react";
+import { createOidc, type Oidc } from "./oidc";
+export declare function createOidcClientProvider(params: Parameters<typeof createOidc>[0]): {
+    OidcClientProvider: (props: {
+        fallback?: ReactNode;
+        children: ReactNode;
+    }) => import("react/jsx-runtime").JSX.Element;
+};
+export declare function useOidc(): {
+    oidc: Oidc;
+};

package/react.js

@@ -0,0 +1,58 @@
+"use strict";
+var __assign = (this && this.__assign) || function () {
+    __assign = Object.assign || function(t) {
+        for (var s, i = 1, n = arguments.length; i < n; i++) {
+            s = arguments[i];
+            for (var p in s) if (Object.prototype.hasOwnProperty.call(s, p))
+                t[p] = s[p];
+        }
+        return t;
+    };
+    return __assign.apply(this, arguments);
+};
+var __read = (this && this.__read) || function (o, n) {
+    var m = typeof Symbol === "function" && o[Symbol.iterator];
+    if (!m) return o;
+    var i = m.call(o), r, ar = [], e;
+    try {
+        while ((n === void 0 || n-- > 0) && !(r = i.next()).done) ar.push(r.value);
+    }
+    catch (error) { e = { error: error }; }
+    finally {
+        try {
+            if (r && !r.done && (m = i["return"])) m.call(i);
+        }
+        finally { if (e) throw e.error; }
+    }
+    return ar;
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.useOidc = exports.createOidcClientProvider = void 0;
+var jsx_runtime_1 = require("react/jsx-runtime");
+var react_1 = require("react");
+var oidc_1 = require("./oidc");
+var assert_1 = require("tsafe/assert");
+var oidcClientContext = (0, react_1.createContext)(undefined);
+function createOidcClientProvider(params) {
+    var prOidc = (0, oidc_1.createOidc)(params);
+    function OidcClientProvider(props) {
+        var children = props.children, fallback = props.fallback;
+        var _a = __read((0, react_1.useState)(undefined), 2), oidcClient = _a[0], setOidcClient = _a[1];
+        (0, react_1.useEffect)(function () {
+            prOidc.then(setOidcClient);
+        }, []);
+        if (oidcClient === undefined) {
+            return (0, jsx_runtime_1.jsx)(jsx_runtime_1.Fragment, { children: fallback === undefined ? null : fallback });
+        }
+        return (0, jsx_runtime_1.jsx)(oidcClientContext.Provider, __assign({ value: oidcClient }, { children: children }));
+    }
+    return { OidcClientProvider: OidcClientProvider };
+}
+exports.createOidcClientProvider = createOidcClientProvider;
+function useOidc() {
+    var oidc = (0, react_1.useContext)(oidcClientContext);
+    (0, assert_1.assert)(oidc !== undefined, "You must use useOidc inside a OidcClientProvider");
+    return { oidc: oidc };
+}
+exports.useOidc = useOidc;
+//# sourceMappingURL=react.js.map

package/react.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"react.js","sourceRoot":"","sources":["src/react.tsx"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,+BAAuF;AACvF,+BAA+C;AAC/C,uCAAsC;AAEtC,IAAM,iBAAiB,GAAG,IAAA,qBAAa,EAAmB,SAAS,CAAC,CAAC;AAErE,SAAgB,wBAAwB,CAAC,MAAwC;IAC7E,IAAM,MAAM,GAAG,IAAA,iBAAU,EAAC,MAAM,CAAC,CAAC;IAElC,SAAS,kBAAkB,CAAC,KAAoD;QACpE,IAAA,QAAQ,GAAe,KAAK,SAApB,EAAE,QAAQ,GAAK,KAAK,SAAV,CAAW;QAE/B,IAAA,KAAA,OAA8B,IAAA,gBAAQ,EAAmB,SAAS,CAAC,IAAA,EAAlE,UAAU,QAAA,EAAE,aAAa,QAAyC,CAAC;QAE1E,IAAA,iBAAS,EAAC;YACN,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QAC/B,CAAC,EAAE,EAAE,CAAC,CAAC;QAEP,IAAI,UAAU,KAAK,SAAS,EAAE;YAC1B,OAAO,2DAAG,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,GAAI,CAAC;SAC1D;QAED,OAAO,uBAAC,iBAAiB,CAAC,QAAQ,aAAC,KAAK,EAAE,UAAU,gBAAG,QAAQ,IAA8B,CAAC;IAClG,CAAC;IAED,OAAO,EAAE,kBAAkB,oBAAA,EAAE,CAAC;AAClC,CAAC;AApBD,4DAoBC;AAED,SAAgB,OAAO;IACnB,IAAM,IAAI,GAAG,IAAA,kBAAU,EAAC,iBAAiB,CAAC,CAAC;IAC3C,IAAA,eAAM,EAAC,IAAI,KAAK,SAAS,EAAE,kDAAkD,CAAC,CAAC;IAC/E,OAAO,EAAE,IAAI,MAAA,EAAE,CAAC;AACpB,CAAC;AAJD,0BAIC"}

package/src/index.ts

@@ -0,0 +1,4 @@
+export { createOidc } from "./oidc";
+export type { Oidc } from "./oidc";
+import decodeJwt from "jwt-decode";
+export { decodeJwt };