oidc-spa 6.1.6 → 6.1.8

package/oidc/StateData.d.ts

@@ -1,7 +1,7 @@
 export type StateData = StateData.IFrame | StateData.Redirect;
 export declare namespace StateData {
     type Common = {
-        configHash: string;
+        configId: string;
     };
     export type IFrame = Common & {
         context: "iframe";

package/oidc/StateData.js

@@ -8,14 +8,19 @@ exports.clearStateStore = clearStateStore;
 exports.getStateData = getStateData;
 exports.markStateDataAsProcessedByCallback = markStateDataAsProcessedByCallback;
 var tsafe_1 = require("../vendor/frontend/tsafe");
-var fnv1aHash_1 = require("../tools/fnv1aHash");
-var STATE_QUERY_PARAM_VALUE_IDENTIFIER_PREFIX = "fa93b2c1c";
+var generateUrlSafeRandom_1 = require("../tools/generateUrlSafeRandom");
+var STATE_QUERY_PARAM_VALUE_IDENTIFIER_PREFIX = "b2lkYy1zcGEu";
+var RANDOM_STRING_LENGTH = 32 - STATE_QUERY_PARAM_VALUE_IDENTIFIER_PREFIX.length;
 function generateStateQueryParamValue() {
-    return "".concat(STATE_QUERY_PARAM_VALUE_IDENTIFIER_PREFIX).concat((0, fnv1aHash_1.fnv1aHash)("".concat(Math.random())));
+    return "".concat(STATE_QUERY_PARAM_VALUE_IDENTIFIER_PREFIX).concat((0, generateUrlSafeRandom_1.generateUrlSafeRandom)({
+        length: RANDOM_STRING_LENGTH
+    }));
 }
 function getIsStatQueryParamValue(params) {
     var maybeStateQueryParamValue = params.maybeStateQueryParamValue;
-    return maybeStateQueryParamValue.startsWith(STATE_QUERY_PARAM_VALUE_IDENTIFIER_PREFIX);
+    return (maybeStateQueryParamValue.startsWith(STATE_QUERY_PARAM_VALUE_IDENTIFIER_PREFIX) &&
+        maybeStateQueryParamValue.length ===
+            STATE_QUERY_PARAM_VALUE_IDENTIFIER_PREFIX.length + RANDOM_STRING_LENGTH);
 }
 exports.STATE_STORE_KEY_PREFIX = "oidc.";
 function getKey(params) {

package/oidc/StateData.js.map

@@ -1 +1 @@
-{"version":3,"file":"StateData.js","sourceRoot":"","sources":["../src/oidc/StateData.ts"],"names":[],"mappings":";;;AAoCA,oEAEC;AAED,4DAIC;AAID,wBAIC;AA6BD,0CAGC;AAED,oCAUC;AAED,gFAWC;AA7GD,kDAA6D;AAC7D,gDAA+C;AAiC/C,IAAM,yCAAyC,GAAG,WAAW,CAAC;AAE9D,SAAgB,4BAA4B;IACxC,OAAO,UAAG,yCAAyC,SAAG,IAAA,qBAAS,EAAC,UAAG,IAAI,CAAC,MAAM,EAAE,CAAE,CAAC,CAAE,CAAC;AAC1F,CAAC;AAED,SAAgB,wBAAwB,CAAC,MAA6C;IAC1E,IAAA,yBAAyB,GAAK,MAAM,0BAAX,CAAY;IAE7C,OAAO,yBAAyB,CAAC,UAAU,CAAC,yCAAyC,CAAC,CAAC;AAC3F,CAAC;AAEY,QAAA,sBAAsB,GAAG,OAAO,CAAC;AAE9C,SAAgB,MAAM,CAAC,MAAwC;IACnD,IAAA,oBAAoB,GAAK,MAAM,qBAAX,CAAY;IAExC,OAAO,UAAG,8BAAsB,SAAG,oBAAoB,CAAE,CAAC;AAC9D,CAAC;AAED,SAAS,aAAa,CAAC,MAAwC;IACnD,IAAA,oBAAoB,GAAK,MAAM,qBAAX,CAAY;IAExC,IAAM,IAAI,GAAG,YAAY,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,oBAAoB,sBAAA,EAAE,CAAC,CAAC,CAAC;IAEpE,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;QAChB,OAAO,SAAS,CAAC;IACrB,CAAC;IAED,IAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAE7B,IAAA,cAAM,EACF,IAAA,iBAAS,EACL,GAAG,EACH,GAAG,YAAY,MAAM,IAAI,GAAG,CAAC,IAAI,YAAY,MAAM,IAAI,OAAO,GAAG,CAAC,IAAI,CAAC,OAAO,KAAK,QAAQ,CAC9F,CACJ,CAAC;IAEF,OAAO,GAAG,CAAC;AACf,CAAC;AAED,SAAS,aAAa,CAAC,MAAkE;IAC7E,IAAA,oBAAoB,GAAU,MAAM,qBAAhB,EAAE,GAAG,GAAK,MAAM,IAAX,CAAY;IAE7C,YAAY,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,oBAAoB,sBAAA,EAAE,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC;AAChF,CAAC;AAED,SAAgB,eAAe,CAAC,MAAwC;IAC5D,IAAA,oBAAoB,GAAK,MAAM,qBAAX,CAAY;IACxC,YAAY,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,oBAAoB,sBAAA,EAAE,CAAC,CAAC,CAAC;AAC9D,CAAC;AAED,SAAgB,YAAY,CAAC,MAAwC;IACzD,IAAA,oBAAoB,GAAK,MAAM,qBAAX,CAAY;IAExC,IAAM,UAAU,GAAG,aAAa,CAAC,EAAE,oBAAoB,sBAAA,EAAE,CAAC,CAAC;IAE3D,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;QAC3B,OAAO,SAAS,CAAC;IACrB,CAAC;IAED,OAAO,UAAU,CAAC,IAAI,CAAC;AAC3B,CAAC;AAED,SAAgB,kCAAkC,CAAC,MAAwC;IAC/E,IAAA,oBAAoB,GAAK,MAAM,qBAAX,CAAY;IAExC,IAAM,GAAG,GAAG,aAAa,CAAC,EAAE,oBAAoB,sBAAA,EAAE,CAAC,CAAC;IAEpD,IAAA,cAAM,EAAC,GAAG,KAAK,SAAS,CAAC,CAAC;IAC1B,IAAA,cAAM,EAAC,GAAG,CAAC,IAAI,CAAC,OAAO,KAAK,UAAU,CAAC,CAAC;IAExC,GAAG,CAAC,IAAI,CAAC,0BAA0B,GAAG,IAAI,CAAC;IAE3C,aAAa,CAAC,EAAE,oBAAoB,sBAAA,EAAE,GAAG,KAAA,EAAE,CAAC,CAAC;AACjD,CAAC"}
+{"version":3,"file":"StateData.js","sourceRoot":"","sources":["../src/oidc/StateData.ts"],"names":[],"mappings":";;;AAqCA,oEAIC;AAED,4DAQC;AAID,wBAIC;AA6BD,0CAGC;AAED,oCAUC;AAED,gFAWC;AApHD,kDAA6D;AAC7D,wEAAuE;AAiCvE,IAAM,yCAAyC,GAAG,cAAc,CAAC;AACjE,IAAM,oBAAoB,GAAG,EAAE,GAAG,yCAAyC,CAAC,MAAM,CAAC;AAEnF,SAAgB,4BAA4B;IACxC,OAAO,UAAG,yCAAyC,SAAG,IAAA,6CAAqB,EAAC;QACxE,MAAM,EAAE,oBAAoB;KAC/B,CAAC,CAAE,CAAC;AACT,CAAC;AAED,SAAgB,wBAAwB,CAAC,MAA6C;IAC1E,IAAA,yBAAyB,GAAK,MAAM,0BAAX,CAAY;IAE7C,OAAO,CACH,yBAAyB,CAAC,UAAU,CAAC,yCAAyC,CAAC;QAC/E,yBAAyB,CAAC,MAAM;YAC5B,yCAAyC,CAAC,MAAM,GAAG,oBAAoB,CAC9E,CAAC;AACN,CAAC;AAEY,QAAA,sBAAsB,GAAG,OAAO,CAAC;AAE9C,SAAgB,MAAM,CAAC,MAAwC;IACnD,IAAA,oBAAoB,GAAK,MAAM,qBAAX,CAAY;IAExC,OAAO,UAAG,8BAAsB,SAAG,oBAAoB,CAAE,CAAC;AAC9D,CAAC;AAED,SAAS,aAAa,CAAC,MAAwC;IACnD,IAAA,oBAAoB,GAAK,MAAM,qBAAX,CAAY;IAExC,IAAM,IAAI,GAAG,YAAY,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,oBAAoB,sBAAA,EAAE,CAAC,CAAC,CAAC;IAEpE,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;QAChB,OAAO,SAAS,CAAC;IACrB,CAAC;IAED,IAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAE7B,IAAA,cAAM,EACF,IAAA,iBAAS,EACL,GAAG,EACH,GAAG,YAAY,MAAM,IAAI,GAAG,CAAC,IAAI,YAAY,MAAM,IAAI,OAAO,GAAG,CAAC,IAAI,CAAC,OAAO,KAAK,QAAQ,CAC9F,CACJ,CAAC;IAEF,OAAO,GAAG,CAAC;AACf,CAAC;AAED,SAAS,aAAa,CAAC,MAAkE;IAC7E,IAAA,oBAAoB,GAAU,MAAM,qBAAhB,EAAE,GAAG,GAAK,MAAM,IAAX,CAAY;IAE7C,YAAY,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,oBAAoB,sBAAA,EAAE,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC;AAChF,CAAC;AAED,SAAgB,eAAe,CAAC,MAAwC;IAC5D,IAAA,oBAAoB,GAAK,MAAM,qBAAX,CAAY;IACxC,YAAY,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,oBAAoB,sBAAA,EAAE,CAAC,CAAC,CAAC;AAC9D,CAAC;AAED,SAAgB,YAAY,CAAC,MAAwC;IACzD,IAAA,oBAAoB,GAAK,MAAM,qBAAX,CAAY;IAExC,IAAM,UAAU,GAAG,aAAa,CAAC,EAAE,oBAAoB,sBAAA,EAAE,CAAC,CAAC;IAE3D,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;QAC3B,OAAO,SAAS,CAAC;IACrB,CAAC;IAED,OAAO,UAAU,CAAC,IAAI,CAAC;AAC3B,CAAC;AAED,SAAgB,kCAAkC,CAAC,MAAwC;IAC/E,IAAA,oBAAoB,GAAK,MAAM,qBAAX,CAAY;IAExC,IAAM,GAAG,GAAG,aAAa,CAAC,EAAE,oBAAoB,sBAAA,EAAE,CAAC,CAAC;IAEpD,IAAA,cAAM,EAAC,GAAG,KAAK,SAAS,CAAC,CAAC;IAC1B,IAAA,cAAM,EAAC,GAAG,CAAC,IAAI,CAAC,OAAO,KAAK,UAAU,CAAC,CAAC;IAExC,GAAG,CAAC,IAAI,CAAC,0BAA0B,GAAG,IAAI,CAAC;IAE3C,aAAa,CAAC,EAAE,oBAAoB,sBAAA,EAAE,GAAG,KAAA,EAAE,CAAC,CAAC;AACjD,CAAC"}

package/oidc/{configHash.d.ts → configId.d.ts}

@@ -1,4 +1,4 @@
-export declare function getConfigHash(params: {
+export declare function getConfigId(params: {
     issuerUri: string;
     clientId: string;
 }): string;

package/oidc/configId.js

@@ -0,0 +1,7 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getConfigId = getConfigId;
+function getConfigId(params) {
+    return "".concat(params.issuerUri, ":").concat(params.clientId);
+}
+//# sourceMappingURL=configId.js.map

package/oidc/configId.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"configId.js","sourceRoot":"","sources":["../src/oidc/configId.ts"],"names":[],"mappings":";;AAAA,kCAEC;AAFD,SAAgB,WAAW,CAAC,MAA+C;IACvE,OAAO,UAAG,MAAM,CAAC,SAAS,cAAI,MAAM,CAAC,QAAQ,CAAE,CAAC;AACpD,CAAC"}

package/oidc/createOidc.d.ts

@@ -1,3 +1,4 @@
+import type { StatefulObservable } from "../tools/StatefulObservable";
 import type { Oidc } from "./Oidc";
 import { type AwaitableEventEmitter } from "../tools/AwaitableEventEmitter";
 export type ParamsOfCreateOidc<DecodedIdToken extends Record<string, unknown> = Record<string, unknown>, AutoLogin extends boolean = false> = {
@@ -69,8 +70,14 @@ export type ParamsOfCreateOidc<DecodedIdToken extends Record<string, unknown> =
 };
 declare global {
     interface Window {
-        "__oidc-spa.prOidcByConfigHash": Map<string, Promise<Oidc<any>>>;
-        "__oidc-spa.evtAuthResponseHandled": AwaitableEventEmitter<void>;
+        "__oidc-spa.createOidc.GlobalContext": {
+            prOidcByConfigId: Map<string, Promise<Oidc<any>>>;
+            evtAuthResponseHandled: AwaitableEventEmitter<void>;
+            URL_real: typeof URL;
+            $isUserActive: StatefulObservable<boolean> | undefined;
+            hasLoginBeenCalled: boolean;
+            hasLogoutBeenCalled: boolean;
+        };
     }
 }
 /** @see: https://docs.oidc-spa.dev/v/v6/usage */
@@ -79,6 +86,6 @@ export declare function createOidc_nonMemoized<DecodedIdToken extends Record<str
     issuerUri: string;
     clientId: string;
     scopes: string[];
-    configHash: string;
+    configId: string;
     log: typeof console.log | undefined;
 }): Promise<AutoLogin extends true ? Oidc.LoggedIn<DecodedIdToken> : Oidc<DecodedIdToken>>;

package/oidc/createOidc.js

@@ -93,7 +93,7 @@ var __spreadArray = (this && this.__spreadArray) || function (to, from, pack) {
     }
     return to.concat(ar || Array.prototype.slice.call(from));
 };
-var _a, _b;
+var _a;
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.createOidc = createOidc;
 exports.createOidc_nonMemoized = createOidc_nonMemoized;
@@ -110,19 +110,27 @@ var toFullyQualifiedUrl_1 = require("../tools/toFullyQualifiedUrl");
 var OidcInitializationError_1 = require("./OidcInitializationError");
 var StateData_1 = require("./StateData");
 var logoutPropagationToOtherTabs_1 = require("./logoutPropagationToOtherTabs");
-var configHash_1 = require("./configHash");
+var configId_1 = require("./configId");
 var oidcClientTsUserToTokens_1 = require("./oidcClientTsUserToTokens");
 var loginSilent_1 = require("./loginSilent");
 var handleOidcCallback_1 = require("./handleOidcCallback");
 var AwaitableEventEmitter_1 = require("../tools/AwaitableEventEmitter");
 // NOTE: Replaced at build time
-var VERSION = "6.1.6";
-(_a = window["__oidc-spa.prOidcByConfigHash"]) !== null && _a !== void 0 ? _a : (window["__oidc-spa.prOidcByConfigHash"] = new Map());
-(_b = window["__oidc-spa.evtAuthResponseHandled"]) !== null && _b !== void 0 ? _b : (window["__oidc-spa.evtAuthResponseHandled"] = (0, AwaitableEventEmitter_1.createAwaitableEventEmitter)());
+var VERSION = "6.1.8";
+(0, handleOidcCallback_1.handleOidcCallback)();
+(_a = window["__oidc-spa.createOidc.GlobalContext"]) !== null && _a !== void 0 ? _a : (window["__oidc-spa.createOidc.GlobalContext"] = {
+    prOidcByConfigId: new Map(),
+    evtAuthResponseHandled: (0, AwaitableEventEmitter_1.createAwaitableEventEmitter)(),
+    URL_real: window.URL,
+    $isUserActive: undefined,
+    hasLoginBeenCalled: false,
+    hasLogoutBeenCalled: false
+});
+var globalContext = window["__oidc-spa.createOidc.GlobalContext"];
 /** @see: https://docs.oidc-spa.dev/v/v6/usage */
 function createOidc(params) {
     return __awaiter(this, void 0, void 0, function () {
-        var _a, _b, name_1, value, issuerUri_params, clientId, _c, scopes, debugLogs, rest, issuerUri, log, configHash, prOidc, dOidc, oidc;
+        var _a, _b, name_1, value, issuerUri_params, clientId, _c, scopes, debugLogs, rest, issuerUri, log, configId, prOidcByConfigId, prOidc, dOidc, oidc;
         var e_1, _d;
         return __generator(this, function (_e) {
             switch (_e.label) {
@@ -168,9 +176,10 @@ function createOidc(params) {
                             }
                         });
                     })();
-                    configHash = (0, configHash_1.getConfigHash)({ issuerUri: issuerUri, clientId: clientId });
+                    configId = (0, configId_1.getConfigId)({ issuerUri: issuerUri, clientId: clientId });
+                    prOidcByConfigId = globalContext.prOidcByConfigId;
                     use_previous_instance: {
-                        prOidc = window["__oidc-spa.prOidcByConfigHash"].get(configHash);
+                        prOidc = prOidcByConfigId.get(configId);
                         if (prOidc === undefined) {
                             break use_previous_instance;
                         }
@@ -186,12 +195,12 @@ function createOidc(params) {
                         return [2 /*return*/, prOidc];
                     }
                     dOidc = new Deferred_1.Deferred();
-                    window["__oidc-spa.prOidcByConfigHash"].set(configHash, dOidc.pr);
+                    prOidcByConfigId.set(configId, dOidc.pr);
                     return [4 /*yield*/, createOidc_nonMemoized(rest, {
                             issuerUri: issuerUri,
                             clientId: clientId,
                             scopes: scopes,
-                            configHash: configHash,
+                            configId: configId,
                             log: log
                         })];
                 case 1:
@@ -202,19 +211,15 @@ function createOidc(params) {
         });
     });
 }
-var $isUserActive = undefined;
-var URL_real = window.URL;
-var hasLoginBeenCalled = false;
-var hasLogoutBeenCalled = false;
 function createOidc_nonMemoized(params, preProcessedParams) {
     return __awaiter(this, void 0, void 0, function () {
-        var transformUrlBeforeRedirect, extraQueryParamsOrGetter, extraTokenParamsOrGetter, homeUrl_params, decodedIdTokenSchema, __unsafe_ssoSessionIdleSeconds, _a, autoLogoutParams, _b, autoLogin, postLoginRedirectUrl, __clientSecret_DO_NOT_USE_OR_YOU_WILL_BE_FIRED, issuerUri, clientId, scopes, configHash, log, _c, getExtraQueryParams, getExtraTokenParams, homeAndCallbackUrl, USER_LOGGED_IN_KEY, stateQueryParamValue_instance, oidcClientTsUserManager, lastPublicRoute, startTrackingLastPublicRoute, loginOrGoToAuthServer, BROWSER_SESSION_NOT_FIRST_INIT_KEY, resultOfLoginProcess, common, error, initializationError, oidc_1, oidc_2, currentTokens, autoLogoutCountdownTickCallbacks, onTokenChanges, oidc, prOtherTabLogout, getMsBeforeExpiration_1, startCountdown_2, stopCountdown_1;
+        var transformUrlBeforeRedirect, extraQueryParamsOrGetter, extraTokenParamsOrGetter, homeUrl_params, decodedIdTokenSchema, __unsafe_ssoSessionIdleSeconds, _a, autoLogoutParams, _b, autoLogin, postLoginRedirectUrl, __clientSecret_DO_NOT_USE_OR_YOU_WILL_BE_FIRED, issuerUri, clientId, scopes, configId, log, _c, getExtraQueryParams, getExtraTokenParams, homeAndCallbackUrl, isHandled, USER_LOGGED_IN_KEY, stateQueryParamValue_instance, oidcClientTsUserManager, lastPublicRoute, startTrackingLastPublicRoute, loginOrGoToAuthServer, BROWSER_SESSION_NOT_FIRST_INIT_KEY, resultOfLoginProcess, common, error, initializationError, oidc_1, oidc_2, currentTokens, autoLogoutCountdownTickCallbacks, onTokenChanges, oidc, prOtherTabLogout, getMsBeforeExpiration_1, startCountdown_2, stopCountdown_1;
         var _this = this;
         return __generator(this, function (_d) {
             switch (_d.label) {
                 case 0:
                     transformUrlBeforeRedirect = params.transformUrlBeforeRedirect, extraQueryParamsOrGetter = params.extraQueryParams, extraTokenParamsOrGetter = params.extraTokenParams, homeUrl_params = params.homeUrl, decodedIdTokenSchema = params.decodedIdTokenSchema, __unsafe_ssoSessionIdleSeconds = params.__unsafe_ssoSessionIdleSeconds, _a = params.autoLogoutParams, autoLogoutParams = _a === void 0 ? { redirectTo: "current page" } : _a, _b = params.autoLogin, autoLogin = _b === void 0 ? false : _b, postLoginRedirectUrl = params.postLoginRedirectUrl, __clientSecret_DO_NOT_USE_OR_YOU_WILL_BE_FIRED = params.__clientSecret_DO_NOT_USE_OR_YOU_WILL_BE_FIRED;
-                    issuerUri = preProcessedParams.issuerUri, clientId = preProcessedParams.clientId, scopes = preProcessedParams.scopes, configHash = preProcessedParams.configHash, log = preProcessedParams.log;
+                    issuerUri = preProcessedParams.issuerUri, clientId = preProcessedParams.clientId, scopes = preProcessedParams.scopes, configId = preProcessedParams.configId, log = preProcessedParams.log;
                     _c = __read([extraQueryParamsOrGetter, extraTokenParamsOrGetter].map(function (valueOrGetter) {
                         if (typeof valueOrGetter === "function") {
                             return valueOrGetter;
@@ -233,13 +238,17 @@ function createOidc_nonMemoized(params, preProcessedParams) {
                         issuerUri: issuerUri,
                         clientId: clientId,
                         scopes: scopes,
-                        configHash: configHash,
+                        configId: configId,
                         homeAndCallbackUrl: homeAndCallbackUrl
                     });
-                    return [4 /*yield*/, (0, handleOidcCallback_1.handleOidcCallback)()];
+                    isHandled = (0, handleOidcCallback_1.handleOidcCallback)().isHandled;
+                    if (!isHandled) return [3 /*break*/, 2];
+                    return [4 /*yield*/, new Promise(function () { })];
                 case 1:
                     _d.sent();
-                    USER_LOGGED_IN_KEY = "oidc-spa.user-logged-in:".concat(configHash);
+                    _d.label = 2;
+                case 2:
+                    USER_LOGGED_IN_KEY = "oidc-spa.user-logged-in:".concat(configId);
                     localStorage.removeItem(USER_LOGGED_IN_KEY);
                     stateQueryParamValue_instance = (0, StateData_1.generateStateQueryParamValue)();
                     oidcClientTsUserManager = new oidc_client_ts_and_jwt_decode_1.UserManager({
@@ -269,7 +278,7 @@ function createOidc_nonMemoized(params, preProcessedParams) {
                         };
                     };
                     loginOrGoToAuthServer = function (params) { return __awaiter(_this, void 0, void 0, function () {
-                        var extraQueryParams_fromLoginFn, redirectUrl_params, transformUrlBeforeRedirect_fromLoginFn, rest, callback_1, redirectUrl, URL_1, redirectMethod, extraQueryParams;
+                        var extraQueryParams_fromLoginFn, redirectUrl_params, transformUrlBeforeRedirect_fromLoginFn, rest, callback_1, redirectUrl, URL_real_1, URL_1, redirectMethod, extraQueryParams;
                         return __generator(this, function (_a) {
                             switch (_a.label) {
                                 case 0:
@@ -279,11 +288,11 @@ function createOidc_nonMemoized(params, preProcessedParams) {
                                     // When the app is hosted on https (so not in dev mode) the browser will restore the state of the app
                                     // instead of reloading the page.
                                     if (rest.action === "login") {
-                                        if (hasLoginBeenCalled) {
+                                        if (globalContext.hasLoginBeenCalled) {
                                             log === null || log === void 0 ? void 0 : log("login() has already been called, ignoring the call");
                                             return [2 /*return*/, new Promise(function () { })];
                                         }
-                                        hasLoginBeenCalled = true;
+                                        globalContext.hasLoginBeenCalled = true;
                                         callback_1 = function () {
                                             if (document.visibilityState === "visible") {
                                                 document.removeEventListener("visibilitychange", callback_1);
@@ -306,7 +315,7 @@ function createOidc_nonMemoized(params, preProcessedParams) {
                                                     }
                                                     else {
                                                         log === null || log === void 0 ? void 0 : log("and the user doesn't seem to be authenticated, avoiding a reload");
-                                                        hasLoginBeenCalled = false;
+                                                        globalContext.hasLoginBeenCalled = false;
                                                     }
                                                 }
                                             }
@@ -326,16 +335,17 @@ function createOidc_nonMemoized(params, preProcessedParams) {
                                     // used internally by oidc-client-ts. It's save to do so since this is the
                                     // last thing that will be done before the redirect.
                                     {
+                                        URL_real_1 = globalContext.URL_real;
                                         URL_1 = function () {
                                             var args = [];
                                             for (var _i = 0; _i < arguments.length; _i++) {
                                                 args[_i] = arguments[_i];
                                             }
-                                            var urlInstance = new (URL_real.bind.apply(URL_real, __spreadArray([void 0], __read(args), false)))();
+                                            var urlInstance = new (URL_real_1.bind.apply(URL_real_1, __spreadArray([void 0], __read(args), false)))();
                                             return new Proxy(urlInstance, {
                                                 get: function (target, prop) {
                                                     if (prop === "href") {
-                                                        Object.defineProperty(window, "URL", { value: URL_real });
+                                                        Object.defineProperty(window, "URL", { value: URL_real_1 });
                                                         var url_1 = urlInstance.href;
                                                         [
                                                             [getExtraQueryParams === null || getExtraQueryParams === void 0 ? void 0 : getExtraQueryParams(), transformUrlBeforeRedirect],
@@ -420,7 +430,7 @@ function createOidc_nonMemoized(params, preProcessedParams) {
                                                 redirectUrl: redirectUrl,
                                                 extraQueryParams: extraQueryParams,
                                                 hasBeenProcessedByCallback: false,
-                                                configHash: configHash,
+                                                configId: configId,
                                                 action: "login"
                                             }),
                                             redirectMethod: redirectMethod
@@ -431,9 +441,9 @@ function createOidc_nonMemoized(params, preProcessedParams) {
                             }
                         });
                     }); };
-                    BROWSER_SESSION_NOT_FIRST_INIT_KEY = "oidc-spa.browser-session-not-first-init:".concat(configHash);
+                    BROWSER_SESSION_NOT_FIRST_INIT_KEY = "oidc-spa.browser-session-not-first-init:".concat(configId);
                     return [4 /*yield*/, (function () { return __awaiter(_this, void 0, void 0, function () {
-                            var authResponse, stateData, _a, authResponseUrl, oidcClientTsUser, error_1, error_3, authResponseUrl, _b, result_loginSilent, authResponse, oidcClientTsUser, error_2, error_4;
+                            var authResponse, stateData, evtAuthResponseHandled_1, prHandled, _a, authResponseUrl, oidcClientTsUser, error_1, error_3, authResponseUrl, _b, result_loginSilent, authResponse, oidcClientTsUser, error_2, error_4;
                             return __generator(this, function (_c) {
                                 switch (_c.label) {
                                     case 0:
@@ -455,40 +465,47 @@ function createOidc_nonMemoized(params, preProcessedParams) {
                                             return authResponse;
                                         })();
                                         if (authResponse === undefined) {
-                                            return [3 /*break*/, 13];
+                                            return [3 /*break*/, 15];
                                         }
                                         stateData = (0, StateData_1.getStateData)({ stateQueryParamValue: authResponse["state"] });
                                         (0, tsafe_1.assert)(stateData !== undefined);
                                         (0, tsafe_1.assert)(stateData.context === "redirect");
-                                        if (!(stateData.configHash !== configHash)) return [3 /*break*/, 2];
-                                        return [4 /*yield*/, window["__oidc-spa.evtAuthResponseHandled"].waitFor()];
+                                        evtAuthResponseHandled_1 = globalContext.evtAuthResponseHandled;
+                                        if (!(stateData.configId !== configId)) return [3 /*break*/, 4];
+                                        prHandled = evtAuthResponseHandled_1.waitFor();
+                                        return [4 /*yield*/, Promise.resolve()];
                                     case 1:
                                         _c.sent();
-                                        return [3 /*break*/, 13];
+                                        if (!(sessionStorage.getItem(handleOidcCallback_1.AUTH_RESPONSE_KEY) === null)) return [3 /*break*/, 3];
+                                        return [4 /*yield*/, prHandled];
                                     case 2:
+                                        _c.sent();
+                                        _c.label = 3;
+                                    case 3: return [3 /*break*/, 15];
+                                    case 4:
                                         sessionStorage.removeItem(handleOidcCallback_1.AUTH_RESPONSE_KEY);
                                         _a = stateData.action;
                                         switch (_a) {
-                                            case "login": return [3 /*break*/, 3];
-                                            case "logout": return [3 /*break*/, 8];
+                                            case "login": return [3 /*break*/, 5];
+                                            case "logout": return [3 /*break*/, 10];
                                         }
-                                        return [3 /*break*/, 13];
-                                    case 3:
+                                        return [3 /*break*/, 15];
+                                    case 5:
                                         log === null || log === void 0 ? void 0 : log("Handling login redirect auth response", authResponse);
                                         authResponseUrl = (0, loginSilent_1.authResponseToUrl)(authResponse);
                                         oidcClientTsUser = undefined;
-                                        _c.label = 4;
-                                    case 4:
-                                        _c.trys.push([4, 6, , 7]);
+                                        _c.label = 6;
+                                    case 6:
+                                        _c.trys.push([6, 8, , 9]);
                                         return [4 /*yield*/, oidcClientTsUserManager
                                                 .signinRedirectCallback(authResponseUrl)
                                                 .finally(function () {
-                                                window["__oidc-spa.evtAuthResponseHandled"].post();
+                                                evtAuthResponseHandled_1.post();
                                             })];
-                                    case 5:
+                                    case 7:
                                         oidcClientTsUser = _c.sent();
-                                        return [3 /*break*/, 7];
-                                    case 6:
+                                        return [3 /*break*/, 9];
+                                    case 8:
                                         error_1 = _c.sent();
                                         (0, tsafe_1.assert)(error_1 instanceof Error);
                                         if (error_1.message === "Failed to fetch") {
@@ -501,11 +518,11 @@ function createOidc_nonMemoized(params, preProcessedParams) {
                                             error_3 = authResponse["error"];
                                             if (error_3 !== undefined) {
                                                 log === null || log === void 0 ? void 0 : log("The auth server responded with: ".concat(error_3, ", trying to restore from the http only cookie"));
-                                                return [3 /*break*/, 13];
+                                                return [3 /*break*/, 15];
                                             }
                                         }
                                         return [2 /*return*/, error_1];
-                                    case 7:
+                                    case 9:
                                         sessionStorage.removeItem(BROWSER_SESSION_NOT_FIRST_INIT_KEY);
                                         return [2 /*return*/, {
                                                 oidcClientTsUser: oidcClientTsUser,
@@ -520,37 +537,37 @@ function createOidc_nonMemoized(params, preProcessedParams) {
                                                     }))
                                                 }
                                             }];
-                                    case 8:
+                                    case 10:
                                         log === null || log === void 0 ? void 0 : log("Handling logout redirect auth response", authResponse);
                                         authResponseUrl = (0, loginSilent_1.authResponseToUrl)(authResponse);
-                                        _c.label = 9;
-                                    case 9:
-                                        _c.trys.push([9, 11, , 12]);
+                                        _c.label = 11;
+                                    case 11:
+                                        _c.trys.push([11, 13, , 14]);
                                         return [4 /*yield*/, oidcClientTsUserManager.signoutRedirectCallback(authResponseUrl)];
-                                    case 10:
+                                    case 12:
                                         _c.sent();
-                                        return [3 /*break*/, 12];
-                                    case 11:
+                                        return [3 /*break*/, 14];
+                                    case 13:
                                         _b = _c.sent();
-                                        return [3 /*break*/, 12];
-                                    case 12:
-                                        window["__oidc-spa.evtAuthResponseHandled"].post();
+                                        return [3 /*break*/, 14];
+                                    case 14:
+                                        evtAuthResponseHandled_1.post();
                                         (0, logoutPropagationToOtherTabs_1.notifyOtherTabOfLogout)({
-                                            configHash: configHash,
+                                            configId: configId,
                                             redirectUrl: stateData.redirectUrl,
                                             sessionId: stateData.sessionId
                                         });
                                         // NOTE: The user is no longer logged in.
                                         return [2 /*return*/, undefined];
-                                    case 13:
+                                    case 15:
                                         log === null || log === void 0 ? void 0 : log("Trying to restore the auth from the http only cookie (silent signin with iframe)");
                                         return [4 /*yield*/, (0, loginSilent_1.loginSilent)({
                                                 oidcClientTsUserManager: oidcClientTsUserManager,
                                                 stateQueryParamValue_instance: stateQueryParamValue_instance,
-                                                configHash: configHash,
+                                                configId: configId,
                                                 getExtraTokenParams: getExtraTokenParams
                                             })];
-                                    case 14:
+                                    case 16:
                                         result_loginSilent = _c.sent();
                                         if (!result_loginSilent.isSuccess) {
                                             switch (result_loginSilent.cause) {
@@ -570,14 +587,14 @@ function createOidc_nonMemoized(params, preProcessedParams) {
                                         authResponse = result_loginSilent.authResponse;
                                         log === null || log === void 0 ? void 0 : log("Silent signin auth response", authResponse);
                                         oidcClientTsUser = undefined;
-                                        _c.label = 15;
-                                    case 15:
-                                        _c.trys.push([15, 17, , 18]);
+                                        _c.label = 17;
+                                    case 17:
+                                        _c.trys.push([17, 19, , 20]);
                                         return [4 /*yield*/, oidcClientTsUserManager.signinRedirectCallback((0, loginSilent_1.authResponseToUrl)(authResponse))];
-                                    case 16:
+                                    case 18:
                                         oidcClientTsUser = _c.sent();
-                                        return [3 /*break*/, 18];
-                                    case 17:
+                                        return [3 /*break*/, 20];
+                                    case 19:
                                         error_2 = _c.sent();
                                         (0, tsafe_1.assert)(error_2 instanceof Error);
                                         if (error_2.message === "Failed to fetch") {
@@ -596,17 +613,17 @@ function createOidc_nonMemoized(params, preProcessedParams) {
                                                         ? "(authentication_required just means that there's no active session for the user)"
                                                         : ""
                                                 ].join(""));
-                                                return [3 /*break*/, 19];
+                                                return [3 /*break*/, 21];
                                             }
                                         }
                                         return [2 /*return*/, error_2];
-                                    case 18:
+                                    case 20:
                                         log === null || log === void 0 ? void 0 : log("Successful silent signed in");
                                         return [2 /*return*/, {
                                                 oidcClientTsUser: oidcClientTsUser,
                                                 backFromAuthServer: undefined
                                             }];
-                                    case 19: 
+                                    case 21: 
                                     // NOTE: The user is not logged in.
                                     return [2 /*return*/, undefined];
                                 }
@@ -655,7 +672,7 @@ function createOidc_nonMemoized(params, preProcessedParams) {
                             }
                             return { tokens: tokens, backFromAuthServer: backFromAuthServer };
                         })];
-                case 2:
+                case 3:
                     resultOfLoginProcess = _d.sent();
                     common = {
                         params: {
@@ -691,24 +708,24 @@ function createOidc_nonMemoized(params, preProcessedParams) {
                         // @ts-expect-error: We know what we are doing.
                         return [2 /*return*/, oidc_1];
                     }
-                    if (!(resultOfLoginProcess === undefined)) return [3 /*break*/, 5];
+                    if (!(resultOfLoginProcess === undefined)) return [3 /*break*/, 6];
                     log === null || log === void 0 ? void 0 : log("User not logged in");
-                    if (!autoLogin) return [3 /*break*/, 4];
+                    if (!autoLogin) return [3 /*break*/, 5];
                     log === null || log === void 0 ? void 0 : log("Authentication is required everywhere on this app, redirecting to the login page");
                     return [4 /*yield*/, loginOrGoToAuthServer({
                             action: "login",
                             doesCurrentHrefRequiresAuth: true,
                             redirectUrl: postLoginRedirectUrl
                         })];
-                case 3:
-                    _d.sent();
-                    _d.label = 4;
                 case 4:
+                    _d.sent();
+                    _d.label = 5;
+                case 5:
                     startTrackingLastPublicRoute();
                     oidc_2 = (0, tsafe_1.id)(__assign(__assign({}, common), { isUserLoggedIn: false, login: function (params) { return loginOrGoToAuthServer(__assign({ action: "login" }, params)); }, initializationError: undefined }));
                     // @ts-expect-error: We know what we are doing.
                     return [2 /*return*/, oidc_2];
-                case 5:
+                case 6:
                     log === null || log === void 0 ? void 0 : log("User is logged in");
                     localStorage.setItem(USER_LOGGED_IN_KEY, "true");
                     currentTokens = resultOfLoginProcess.tokens;
@@ -719,11 +736,11 @@ function createOidc_nonMemoized(params, preProcessedParams) {
                             return __generator(this, function (_a) {
                                 switch (_a.label) {
                                     case 0:
-                                        if (hasLogoutBeenCalled) {
+                                        if (globalContext.hasLogoutBeenCalled) {
                                             log === null || log === void 0 ? void 0 : log("logout() has already been called, ignoring the call");
                                             return [2 /*return*/, new Promise(function () { })];
                                         }
-                                        hasLogoutBeenCalled = true;
+                                        globalContext.hasLogoutBeenCalled = true;
                                         document.addEventListener("visibilitychange", function () {
                                             if (document.visibilityState === "visible") {
                                                 location.reload();
@@ -745,7 +762,7 @@ function createOidc_nonMemoized(params, preProcessedParams) {
                                         sessionId = (0, decodeJwt_1.decodeJwt)(oidc.getTokens().idToken).sid;
                                         return [4 /*yield*/, oidcClientTsUserManager.signoutRedirect({
                                                 state: (0, tsafe_1.id)({
-                                                    configHash: configHash,
+                                                    configId: configId,
                                                     context: "redirect",
                                                     redirectUrl: postLogoutRedirectUrl,
                                                     hasBeenProcessedByCallback: false,
@@ -808,7 +825,7 @@ function createOidc_nonMemoized(params, preProcessedParams) {
                         })() }));
                     {
                         prOtherTabLogout = (0, logoutPropagationToOtherTabs_1.getPrOtherTabLogout)({
-                            configHash: configHash,
+                            configId: configId,
                             homeUrl: homeAndCallbackUrl,
                             sessionId: (0, decodeJwt_1.decodeJwt)(oidc.getTokens().idToken).sid
                         }).prOtherTabLogout;
@@ -922,12 +939,12 @@ function createOidc_nonMemoized(params, preProcessedParams) {
                             }
                         }).startCountdown;
                         stopCountdown_1 = undefined;
-                        if ($isUserActive === undefined) {
-                            $isUserActive = (0, createIsUserActive_1.createIsUserActive)({
+                        if (globalContext.$isUserActive === undefined) {
+                            globalContext.$isUserActive = (0, createIsUserActive_1.createIsUserActive)({
                                 theUserIsConsideredInactiveAfterMsOfInactivity: 5000
                             }).$isUserActive;
                         }
-                        $isUserActive.subscribe(function (isUserActive) {
+                        globalContext.$isUserActive.subscribe(function (isUserActive) {
                             if (isUserActive) {
                                 if (stopCountdown_1 !== undefined) {
                                     stopCountdown_1();