oidc-spa 7.2.0 → 7.2.2

package/src/entrypoint.ts

@@ -0,0 +1,69 @@
+import {
+    handleOidcCallback,
+    moveRedirectAuthResponseFromSessionStorageToMemory
+} from "./core/handleOidcCallback";
+import { preventSessionStorageSetItemOfPublicKeyByThirdParty } from "./core/iframeMessageProtection";
+
+export function oidcEarlyInit(params: {
+    freezeFetch: boolean;
+    freezeXMLHttpRequest: boolean;
+    // NOTE: Made optional just to avoid breaking change.
+    // Will be made mandatory next major.
+    freezeWebSocket?: boolean;
+}) {
+    const { freezeFetch, freezeXMLHttpRequest, freezeWebSocket = false } = params ?? {};
+
+    const { isHandled } = handleOidcCallback();
+
+    const shouldLoadApp = !isHandled;
+
+    if (shouldLoadApp) {
+        moveRedirectAuthResponseFromSessionStorageToMemory();
+
+        if (freezeXMLHttpRequest) {
+            const XMLHttpRequest_trusted = globalThis.XMLHttpRequest;
+
+            Object.freeze(XMLHttpRequest_trusted.prototype);
+            Object.freeze(XMLHttpRequest_trusted);
+
+            Object.defineProperty(globalThis, "XMLHttpRequest", {
+                configurable: false,
+                writable: false,
+                enumerable: true,
+                value: XMLHttpRequest_trusted
+            });
+        }
+
+        if (freezeFetch) {
+            const fetch_trusted = globalThis.fetch;
+
+            Object.freeze(fetch_trusted.prototype);
+            Object.freeze(fetch_trusted);
+
+            Object.defineProperty(globalThis, "fetch", {
+                configurable: false,
+                writable: false,
+                enumerable: true,
+                value: fetch_trusted
+            });
+        }
+
+        if (freezeWebSocket) {
+            const WebSocket_trusted = globalThis.WebSocket;
+
+            Object.freeze(WebSocket_trusted.prototype);
+            Object.freeze(WebSocket_trusted);
+
+            Object.defineProperty(globalThis, "WebSocket", {
+                configurable: false,
+                writable: false,
+                enumerable: true,
+                value: WebSocket_trusted
+            });
+        }
+
+        preventSessionStorageSetItemOfPublicKeyByThirdParty();
+    }
+
+    return { shouldLoadApp };
+}

package/src/index.ts

@@ -0,0 +1 @@
+export { type Oidc, OidcInitializationError, type ParamsOfCreateOidc, createOidc } from "./core";

package/src/keycloak/index.ts

@@ -0,0 +1,8 @@
+export { isKeycloak } from "./isKeycloak";
+export type { KeycloakIssuerUriParsed } from "./keycloakIssuerUriParsed";
+export {
+    type KeycloakUtils,
+    KeycloakProfile,
+    KeycloakUserInfo,
+    createKeycloakUtils
+} from "./keycloakUtils";

package/src/keycloak/isKeycloak.ts

@@ -0,0 +1,23 @@
+export function isKeycloak(params: { issuerUri: string }): boolean {
+    const { issuerUri } = params;
+
+    const url = new URL(issuerUri.replace(/\/$/, ""));
+
+    const split = url.pathname.split("/realms/");
+
+    if (split.length !== 2) {
+        return false;
+    }
+
+    const [, realm] = split;
+
+    if (realm === "") {
+        return false;
+    }
+
+    if (realm.includes("/")) {
+        return false;
+    }
+
+    return true;
+}