oidc-spa 7.1.9 → 7.2.0-rc.1

package/src/core/loginSilent.ts

@@ -1,10 +1,12 @@
-import type { UserManager as OidcClientTsUserManager } from "../vendor/frontend/oidc-client-ts-and-jwt-decode";
+import type {
+    UserManager as OidcClientTsUserManager,
+    User as OidcClientTsUser
+} from "../vendor/frontend/oidc-client-ts";
 import { Deferred } from "../tools/Deferred";
 import { id, assert, noUndefined } from "../vendor/frontend/tsafe";
 import { getStateData, clearStateStore, type StateData } from "./StateData";
 import { getDownlinkAndRtt } from "../tools/getDownlinkAndRtt";
 import { getIsDev } from "../tools/isDev";
-import type { User as OidcClientTsUser } from "../vendor/frontend/oidc-client-ts-and-jwt-decode";
 import { type AuthResponse } from "./AuthResponse";
 import { addOrUpdateSearchParam } from "../tools/urlSearchParams";
 import { initIframeMessageProtection } from "./iframeMessageProtection";
@@ -25,7 +27,7 @@ type ResultOfLoginSilent =
 
 export async function loginSilent(params: {
     oidcClientTsUserManager: OidcClientTsUserManager;
-    stateQueryParamValue_instance: string;
+    stateUrlParamValue_instance: string;
     configId: string;
 
     transformUrlBeforeRedirect:
@@ -41,7 +43,7 @@ export async function loginSilent(params: {
 }): Promise<ResultOfLoginSilent> {
     const {
         oidcClientTsUserManager,
-        stateQueryParamValue_instance,
+        stateUrlParamValue_instance,
         configId,
         transformUrlBeforeRedirect,
         getExtraQueryParams,
@@ -77,10 +79,10 @@ export async function loginSilent(params: {
 
     const { decodeEncryptedAuth, getIsEncryptedAuthResponse, clearSessionStoragePublicKey } =
         await initIframeMessageProtection({
-            stateQueryParamValue: stateQueryParamValue_instance
+            stateUrlParamValue: stateUrlParamValue_instance
         });
 
-    const timeout = setTimeout(async () => {
+    const timer = setTimeout(async () => {
         dResult.resolve({
             outcome: "failure",
             cause: "timeout"
@@ -102,7 +104,7 @@ export async function loginSilent(params: {
 
         const { authResponse } = await decodeEncryptedAuth({ encryptedAuthResponse: event.data });
 
-        const stateData = getStateData({ stateQueryParamValue: authResponse.state });
+        const stateData = getStateData({ stateUrlParamValue: authResponse.state });
 
         assert(stateData !== undefined, "765645");
         assert(stateData.context === "iframe", "250711");
@@ -111,7 +113,7 @@ export async function loginSilent(params: {
             return;
         }
 
-        clearTimeout(timeout);
+        clearTimeout(timer);
 
         window.removeEventListener("message", listener);
 
@@ -164,7 +166,8 @@ export async function loginSilent(params: {
             oidcClientTsUser => {
                 assert(oidcClientTsUser !== null, "oidcClientTsUser is not supposed to be null here");
 
-                clearTimeout(timeout);
+                clearTimeout(timer);
+                window.removeEventListener("message", listener);
 
                 dResult.resolve({
                     outcome: "token refreshed using refresh token",
@@ -179,7 +182,7 @@ export async function loginSilent(params: {
                     // is not pointing to a valid oidc server.
                     // It could be a CORS error on the well-known endpoint but it's unlikely.
 
-                    clearTimeout(timeout);
+                    clearTimeout(timer);
 
                     dResult.resolve({
                         outcome: "failure",
@@ -198,7 +201,7 @@ export async function loginSilent(params: {
         clearSessionStoragePublicKey();
 
         if (result.outcome === "failure") {
-            clearStateStore({ stateQueryParamValue: stateQueryParamValue_instance });
+            clearStateStore({ stateUrlParamValue: stateUrlParamValue_instance });
         }
     });
 

package/src/core/oidcClientTsUserToTokens.ts

@@ -1,4 +1,4 @@
-import type { User as OidcClientTsUser } from "../vendor/frontend/oidc-client-ts-and-jwt-decode";
+import type { User as OidcClientTsUser } from "../vendor/frontend/oidc-client-ts";
 import { assert, id } from "../vendor/frontend/tsafe";
 import { readExpirationTimeInJwt } from "../tools/readExpirationTimeInJwt";
 import { decodeJwt } from "../tools/decodeJwt";

package/src/index.ts

@@ -1,7 +1 @@
-export {
-    type Oidc,
-    OidcInitializationError,
-    type ParamsOfCreateOidc,
-    createOidc,
-    trustedFetch
-} from "./core";
+export { type Oidc, OidcInitializationError, type ParamsOfCreateOidc, createOidc } from "./core";

package/src/keycloak/index.ts

@@ -0,0 +1,8 @@
+export { isKeycloak } from "./isKeycloak";
+export type { KeycloakIssuerUriParsed } from "./keycloakIssuerUriParsed";
+export {
+    type KeycloakUtils,
+    KeycloakProfile,
+    KeycloakUserInfo,
+    createKeycloakUtils
+} from "./keycloakUtils";

package/src/keycloak/isKeycloak.ts

@@ -0,0 +1,23 @@
+export function isKeycloak(params: { issuerUri: string }): boolean {
+    const { issuerUri } = params;
+
+    const url = new URL(issuerUri.replace(/\/$/, ""));
+
+    const split = url.pathname.split("/realms/");
+
+    if (split.length !== 2) {
+        return false;
+    }
+
+    const [, realm] = split;
+
+    if (realm === "") {
+        return false;
+    }
+
+    if (realm.includes("/")) {
+        return false;
+    }
+
+    return true;
+}