oidc-spa 7.2.5 → 7.3.1

package/keycloak/keycloak-js/Keycloak.js

@@ -1,4 +1,16 @@
 "use strict";
+var __classPrivateFieldSet = (this && this.__classPrivateFieldSet) || function (receiver, state, value, kind, f) {
+    if (kind === "m") throw new TypeError("Private method is not writable");
+    if (kind === "a" && !f) throw new TypeError("Private accessor was defined without a setter");
+    if (typeof state === "function" ? receiver !== state || !f : !state.has(receiver)) throw new TypeError("Cannot write private member to an object whose class did not declare it");
+    return (kind === "a" ? f.call(receiver, value) : f ? f.value = value : state.set(receiver, value)), value;
+};
+var __classPrivateFieldGet = (this && this.__classPrivateFieldGet) || function (receiver, state, kind, f) {
+    if (kind === "a" && !f) throw new TypeError("Private accessor was defined without a getter");
+    if (typeof state === "function" ? receiver !== state || !f : !state.has(receiver)) throw new TypeError("Cannot read private member from an object whose class did not declare it");
+    return kind === "m" ? f : kind === "a" ? f.call(receiver) : f ? f.value : state.get(receiver);
+};
+var _Keycloak_state;
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.Keycloak = void 0;
 const tsafe_1 = require("../../vendor/frontend/tsafe");
@@ -9,7 +21,6 @@ const keycloakUtils_1 = require("../keycloakUtils");
 const worker_timers_1 = require("../../vendor/frontend/worker-timers");
 const StatefulEvt_1 = require("../../tools/StatefulEvt");
 const readExpirationTimeInJwt_1 = require("../../tools/readExpirationTimeInJwt");
-const internalStateByInstance = new WeakMap();
 /**
  * This module provides a drop-in replacement for `keycloak-js`,
  * designed for teams migrating to `oidc-spa` with minimal changes.
@@ -27,6 +38,7 @@ class Keycloak {
      * I'm not seeing the usecase when ran against keycloak right now so not doing it.
      */
     constructor(params) {
+        _Keycloak_state.set(this, void 0);
         /**
          * Response mode passed in init (default value is `'fragment'`).
          *
@@ -47,16 +59,8 @@ class Keycloak {
          * NOTE oidc-spa: Can only be 'standard'
          */
         this.flow = "standard";
-        /**
-         * The estimated time difference between the browser time and the Keycloak
-         * server in seconds. This value is just an estimation, but is accurate
-         * enough when determining if a token is expired or not.
-         *
-         * NOTE oidc-spa: Not supported.
-         */
-        this.timeSkew = null;
         const issuerUri = `${params.url.replace(/\/$/, "")}/realms/${params.realm}`;
-        internalStateByInstance.set(this, {
+        __classPrivateFieldSet(this, _Keycloak_state, {
             constructorParams: params,
             dInitialized: new Deferred_1.Deferred(),
             initOptions: undefined,
@@ -67,7 +71,7 @@ class Keycloak {
             profile: undefined,
             userInfo: undefined,
             $onTokenExpired: (0, StatefulEvt_1.createStatefulEvt)(() => undefined)
-        });
+        }, "f");
     }
     /**
      * Called to initialize the adapter.
@@ -76,25 +80,23 @@ class Keycloak {
      */
     async init(initOptions = {}) {
         const { onLoad = "check-sso", redirectUri, enableLogging, scope, locale } = initOptions;
-        const internalState = internalStateByInstance.get(this);
-        (0, tsafe_1.assert)(internalState !== undefined);
-        if (internalState.initOptions !== undefined) {
-            if (JSON.stringify(internalState.initOptions) !== JSON.stringify(initOptions)) {
+        if (__classPrivateFieldGet(this, _Keycloak_state, "f").initOptions !== undefined) {
+            if (JSON.stringify(__classPrivateFieldGet(this, _Keycloak_state, "f").initOptions) !== JSON.stringify(initOptions)) {
                 throw new Error("Can't call init() multiple time with different params");
             }
-            await internalState.dInitialized.pr;
-            const { oidc } = internalState;
+            await __classPrivateFieldGet(this, _Keycloak_state, "f").dInitialized.pr;
+            const { oidc } = __classPrivateFieldGet(this, _Keycloak_state, "f");
             (0, tsafe_1.assert)(oidc !== undefined);
             return oidc.isUserLoggedIn;
         }
-        internalState.initOptions = initOptions;
-        const { constructorParams, issuerUri } = internalState;
+        __classPrivateFieldGet(this, _Keycloak_state, "f").initOptions = initOptions;
+        const { constructorParams, issuerUri } = __classPrivateFieldGet(this, _Keycloak_state, "f");
         const autoLogin = onLoad === "login-required";
         let hasCreateResolved = false;
         const oidcOrError = await (0, core_1.createOidc)({
             homeUrl: constructorParams.homeUrl,
             issuerUri,
-            clientId: internalState.constructorParams.clientId,
+            clientId: __classPrivateFieldGet(this, _Keycloak_state, "f").constructorParams.clientId,
             autoLogin,
             postLoginRedirectUrl: redirectUri,
             debugLogs: enableLogging,
@@ -123,75 +125,90 @@ class Keycloak {
             (0, tsafe_1.assert)(false);
         }
         const oidc = oidcOrError;
-        internalState.oidc = oidc;
         if (oidc.isUserLoggedIn) {
-            {
-                const tokens = await oidc.getTokens();
-                const onNewToken = (tokens_new) => {
-                    internalState.tokens = tokens_new;
-                    this.onAuthRefreshSuccess?.();
-                };
-                onNewToken(tokens);
-                oidc.subscribeToTokensChange(onNewToken);
+            const tokens = await oidc.getTokens();
+            const onNewToken = (tokens_new) => {
+                __classPrivateFieldGet(this, _Keycloak_state, "f").tokens = tokens_new;
+                this.onAuthRefreshSuccess?.();
+            };
+            onNewToken(tokens);
+            oidc.subscribeToTokensChange(onNewToken);
+        }
+        __classPrivateFieldGet(this, _Keycloak_state, "f").oidc = oidc;
+        __classPrivateFieldGet(this, _Keycloak_state, "f").dInitialized.resolve();
+        this.onReady?.(oidc.isUserLoggedIn);
+        onAuthSuccess_call: {
+            if (!oidc.isUserLoggedIn) {
+                break onAuthSuccess_call;
             }
-            {
-                const { $onTokenExpired } = internalState;
-                let clear = undefined;
-                $onTokenExpired.subscribe(onTokenExpired => {
-                    clear?.();
-                    if (onTokenExpired === undefined) {
-                        return;
-                    }
-                    let timer = undefined;
-                    const onNewToken = () => {
-                        if (timer !== undefined) {
-                            worker_timers_1.workerTimers.clearTimeout(timer);
-                        }
-                        const { tokens } = internalState;
-                        (0, tsafe_1.assert)(tokens !== undefined);
-                        timer = worker_timers_1.workerTimers.setTimeout(() => {
-                            onTokenExpired.call(this);
-                        }, Math.max(tokens.accessTokenExpirationTime - Date.now() - 3000, 0));
-                    };
-                    onNewToken();
-                    const { unsubscribe } = oidc.subscribeToTokensChange(onNewToken);
-                    clear = () => {
-                        if (timer !== undefined) {
-                            worker_timers_1.workerTimers.clearTimeout(timer);
-                        }
-                        unsubscribe();
-                    };
-                });
+            this.onAuthSuccess?.();
+        }
+        onAuthError_call: {
+            if (oidc.isUserLoggedIn) {
+                break onAuthError_call;
             }
-            onActionUpdate_call: {
-                if (this.onActionUpdate === undefined) {
-                    break onActionUpdate_call;
-                }
-                const { backFromAuthServer } = oidc;
-                if (backFromAuthServer === undefined) {
-                    break onActionUpdate_call;
-                }
-                const status = backFromAuthServer.result.kc_action_status;
-                if (!(0, tsafe_1.isAmong)(["success", "cancelled", "error"], status)) {
-                    break onActionUpdate_call;
-                }
-                const action = backFromAuthServer.extraQueryParams.kc_action;
-                if (action === undefined) {
-                    break onActionUpdate_call;
-                }
-                this.onActionUpdate(status, action);
+            if (oidc.initializationError === undefined) {
+                break onAuthError_call;
             }
-        }
-        if (!oidc.isUserLoggedIn && oidc.initializationError !== undefined) {
             this.onAuthError?.({
                 error: oidc.initializationError.name,
                 error_description: oidc.initializationError.message
             });
         }
-        internalState.dInitialized.resolve();
-        this.onReady?.(oidc.isUserLoggedIn);
-        if (oidc.isUserLoggedIn) {
-            this.onAuthSuccess?.();
+        onActionUpdate_call: {
+            if (!oidc.isUserLoggedIn) {
+                break onActionUpdate_call;
+            }
+            if (this.onActionUpdate === undefined) {
+                break onActionUpdate_call;
+            }
+            const { backFromAuthServer } = oidc;
+            if (backFromAuthServer === undefined) {
+                break onActionUpdate_call;
+            }
+            const status = backFromAuthServer.result.kc_action_status;
+            if (!(0, tsafe_1.isAmong)(["success", "cancelled", "error"], status)) {
+                break onActionUpdate_call;
+            }
+            const action = backFromAuthServer.extraQueryParams.kc_action;
+            if (action === undefined) {
+                break onActionUpdate_call;
+            }
+            this.onActionUpdate(status, action);
+        }
+        schedule_onTokenExpired_call: {
+            if (!oidc.isUserLoggedIn) {
+                break schedule_onTokenExpired_call;
+            }
+            const { $onTokenExpired } = __classPrivateFieldGet(this, _Keycloak_state, "f");
+            let clear = undefined;
+            const next = (onTokenExpired) => {
+                clear?.();
+                if (onTokenExpired === undefined) {
+                    return;
+                }
+                let timer = undefined;
+                const onNewToken = () => {
+                    if (timer !== undefined) {
+                        worker_timers_1.workerTimers.clearTimeout(timer);
+                    }
+                    const { tokens } = __classPrivateFieldGet(this, _Keycloak_state, "f");
+                    (0, tsafe_1.assert)(tokens !== undefined);
+                    timer = worker_timers_1.workerTimers.setTimeout(() => {
+                        onTokenExpired.call(this);
+                    }, Math.max(tokens.accessTokenExpirationTime - tokens.getServerDateNow() - 3000, 0));
+                };
+                onNewToken();
+                const { unsubscribe } = oidc.subscribeToTokensChange(onNewToken);
+                clear = () => {
+                    if (timer !== undefined) {
+                        worker_timers_1.workerTimers.clearTimeout(timer);
+                    }
+                    unsubscribe();
+                };
+            };
+            next($onTokenExpired.current);
+            $onTokenExpired.subscribe(next);
         }
         return oidc.isUserLoggedIn;
     }
@@ -202,9 +219,7 @@ class Keycloak {
         if (!this.didInitialize) {
             return false;
         }
-        const internalState = internalStateByInstance.get(this);
-        (0, tsafe_1.assert)(internalState !== undefined);
-        const { oidc } = internalState;
+        const { oidc } = __classPrivateFieldGet(this, _Keycloak_state, "f");
         (0, tsafe_1.assert)(oidc !== undefined);
         return oidc.isUserLoggedIn;
     }
@@ -215,9 +230,7 @@ class Keycloak {
         if (!this.didInitialize) {
             return undefined;
         }
-        const internalState = internalStateByInstance.get(this);
-        (0, tsafe_1.assert)(internalState !== undefined);
-        const { oidc, tokens } = internalState;
+        const { oidc, tokens } = __classPrivateFieldGet(this, _Keycloak_state, "f");
         (0, tsafe_1.assert)(oidc !== undefined);
         if (!oidc.isUserLoggedIn) {
             console.warn("Trying to read keycloak.subject when keycloak.authenticated is false is a logical error in your application");
@@ -233,12 +246,10 @@ class Keycloak {
         if (!this.didInitialize) {
             return undefined;
         }
-        const internalState = internalStateByInstance.get(this);
-        (0, tsafe_1.assert)(internalState !== undefined);
-        const { oidc, tokens } = internalState;
+        const { oidc, tokens } = __classPrivateFieldGet(this, _Keycloak_state, "f");
         (0, tsafe_1.assert)(oidc !== undefined);
         if (!oidc.isUserLoggedIn) {
-            console.warn("Trying to read keycloak.realAccess when keycloak.realmAccess is false is a logical error in your application");
+            console.warn("Trying to read keycloak.realAccess when keycloak.authenticated is false is a logical error in your application");
             return undefined;
         }
         (0, tsafe_1.assert)(tokens !== undefined);
@@ -252,9 +263,7 @@ class Keycloak {
         if (!this.didInitialize) {
             return undefined;
         }
-        const internalState = internalStateByInstance.get(this);
-        (0, tsafe_1.assert)(internalState !== undefined);
-        const { oidc, tokens } = internalState;
+        const { oidc, tokens } = __classPrivateFieldGet(this, _Keycloak_state, "f");
         (0, tsafe_1.assert)(oidc !== undefined);
         if (!oidc.isUserLoggedIn) {
             console.warn("Trying to read keycloak.resourceAccess when keycloak.authenticated is false is a logical error in your application");
@@ -269,15 +278,13 @@ class Keycloak {
      * requests to services.
      */
     get token() {
-        const internalState = internalStateByInstance.get(this);
-        (0, tsafe_1.assert)(internalState !== undefined);
         if (!this.didInitialize) {
-            return internalState.initOptions?.token;
+            return __classPrivateFieldGet(this, _Keycloak_state, "f").initOptions?.token;
         }
-        const { oidc, tokens } = internalState;
+        const { oidc, tokens } = __classPrivateFieldGet(this, _Keycloak_state, "f");
         (0, tsafe_1.assert)(oidc !== undefined);
         if (!oidc.isUserLoggedIn) {
-            console.warn("Trying to read keycloak.token when keycloak.token is false is a logical error in your application");
+            console.warn("Trying to read keycloak.token when keycloak.authenticated is false is a logical error in your application");
             return undefined;
         }
         (0, tsafe_1.assert)(tokens !== undefined);
@@ -287,19 +294,17 @@ class Keycloak {
      * The parsed token as a JavaScript object.
      */
     get tokenParsed() {
-        const internalState = internalStateByInstance.get(this);
-        (0, tsafe_1.assert)(internalState !== undefined);
         if (!this.didInitialize) {
-            const { token } = internalState.initOptions ?? {};
+            const { token } = __classPrivateFieldGet(this, _Keycloak_state, "f").initOptions ?? {};
             if (token === undefined) {
                 return undefined;
             }
             return (0, decodeJwt_1.decodeJwt)(token);
         }
-        const { oidc, tokens } = internalState;
+        const { oidc, tokens } = __classPrivateFieldGet(this, _Keycloak_state, "f");
         (0, tsafe_1.assert)(oidc !== undefined);
         if (!oidc.isUserLoggedIn) {
-            console.warn("Trying to read keycloak.token when keycloak.tokenParsed is false is a logical error in your application");
+            console.warn("Trying to read keycloak.tokenParsed when keycloak.authenticated is false is a logical error in your application");
             return undefined;
         }
         (0, tsafe_1.assert)(tokens !== undefined);
@@ -309,15 +314,13 @@ class Keycloak {
      * The base64 encoded refresh token that can be used to retrieve a new token.
      */
     get refreshToken() {
-        const internalState = internalStateByInstance.get(this);
-        (0, tsafe_1.assert)(internalState !== undefined);
         if (!this.didInitialize) {
-            return internalState.initOptions?.refreshToken;
+            return __classPrivateFieldGet(this, _Keycloak_state, "f").initOptions?.refreshToken;
         }
-        const { oidc, tokens } = internalState;
+        const { oidc, tokens } = __classPrivateFieldGet(this, _Keycloak_state, "f");
         (0, tsafe_1.assert)(oidc !== undefined);
         if (!oidc.isUserLoggedIn) {
-            console.warn("Trying to read keycloak.token when keycloak.refreshToken is false is a logical error in your application");
+            console.warn("Trying to read keycloak.refreshToken when keycloak.authenticated is false is a logical error in your application");
             return undefined;
         }
         (0, tsafe_1.assert)(tokens !== undefined);
@@ -327,19 +330,17 @@ class Keycloak {
      * The parsed refresh token as a JavaScript object.
      */
     get refreshTokenParsed() {
-        const internalState = internalStateByInstance.get(this);
-        (0, tsafe_1.assert)(internalState !== undefined);
         if (!this.didInitialize) {
-            const { refreshToken } = internalState.initOptions ?? {};
+            const { refreshToken } = __classPrivateFieldGet(this, _Keycloak_state, "f").initOptions ?? {};
             if (refreshToken === undefined) {
                 return undefined;
             }
             return (0, decodeJwt_1.decodeJwt)(refreshToken);
         }
-        const { oidc, tokens } = internalState;
+        const { oidc, tokens } = __classPrivateFieldGet(this, _Keycloak_state, "f");
         (0, tsafe_1.assert)(oidc !== undefined);
         if (!oidc.isUserLoggedIn) {
-            console.warn("Trying to read keycloak.token when keycloak.refreshTokenParsed is false is a logical error in your application");
+            console.warn("Trying to read keycloak.refreshTokenParsed when keycloak.authenticated is false is a logical error in your application");
             return undefined;
         }
         (0, tsafe_1.assert)(tokens !== undefined);
@@ -352,15 +353,13 @@ class Keycloak {
      * The base64 encoded ID token.
      */
     get idToken() {
-        const internalState = internalStateByInstance.get(this);
-        (0, tsafe_1.assert)(internalState !== undefined);
         if (!this.didInitialize) {
-            return internalState.initOptions?.idToken;
+            return __classPrivateFieldGet(this, _Keycloak_state, "f").initOptions?.idToken;
         }
-        const { oidc, tokens } = internalState;
+        const { oidc, tokens } = __classPrivateFieldGet(this, _Keycloak_state, "f");
         (0, tsafe_1.assert)(oidc !== undefined);
         if (!oidc.isUserLoggedIn) {
-            console.warn("Trying to read keycloak.token when keycloak.token is false is a logical error in your application");
+            console.warn("Trying to read keycloak.idToken when keycloak.authenticated is false is a logical error in your application");
             return undefined;
         }
         (0, tsafe_1.assert)(tokens !== undefined);
@@ -370,40 +369,56 @@ class Keycloak {
      * The parsed id token as a JavaScript object.
      */
     get idTokenParsed() {
-        const internalState = internalStateByInstance.get(this);
-        (0, tsafe_1.assert)(internalState !== undefined);
         if (!this.didInitialize) {
-            const { idToken } = internalState.initOptions ?? {};
+            const { idToken } = __classPrivateFieldGet(this, _Keycloak_state, "f").initOptions ?? {};
             if (idToken === undefined) {
                 return undefined;
             }
             return (0, decodeJwt_1.decodeJwt)(idToken);
         }
-        const { oidc, tokens } = internalState;
+        const { oidc, tokens } = __classPrivateFieldGet(this, _Keycloak_state, "f");
         (0, tsafe_1.assert)(oidc !== undefined);
         if (!oidc.isUserLoggedIn) {
-            console.warn("Trying to read keycloak.token when keycloak.refreshTokenParsed is false is a logical error in your application");
+            console.warn("Trying to read keycloak.idTokenParsed when keycloak.authenticated is false is a logical error in your application");
             return undefined;
         }
         (0, tsafe_1.assert)(tokens !== undefined);
         (0, tsafe_1.assert)((0, tsafe_1.is)(tokens.decodedIdToken_original));
         return tokens.decodedIdToken_original;
     }
+    /**
+     * The estimated time difference between the browser time and the Keycloak
+     * server in seconds. This value is just an estimation, but is accurate
+     * enough when determining if a token is expired or not.
+     */
+    get timeSkew() {
+        if (!this.didInitialize) {
+            const { timeSkew } = __classPrivateFieldGet(this, _Keycloak_state, "f").initOptions ?? {};
+            if (timeSkew === undefined) {
+                return null;
+            }
+            return timeSkew;
+        }
+        const { oidc, tokens } = __classPrivateFieldGet(this, _Keycloak_state, "f");
+        (0, tsafe_1.assert)(oidc !== undefined);
+        if (!oidc.isUserLoggedIn) {
+            console.warn("Trying to read keycloak.timeSkew when keycloak.authenticated is false is a logical error in your application");
+            return null;
+        }
+        (0, tsafe_1.assert)(tokens !== undefined);
+        return Math.ceil((tokens.getServerDateNow() - Date.now()) / 1000);
+    }
     /**
      * Whether the instance has been initialized by calling `.init()`.
      */
     get didInitialize() {
-        const internalState = internalStateByInstance.get(this);
-        (0, tsafe_1.assert)(internalState !== undefined);
-        return internalState.oidc !== undefined;
+        return __classPrivateFieldGet(this, _Keycloak_state, "f").oidc !== undefined;
     }
     /**
      * @private Undocumented.
      */
     get loginRequired() {
-        const internalState = internalStateByInstance.get(this);
-        (0, tsafe_1.assert)(internalState !== undefined);
-        const { initOptions } = internalState;
+        const { initOptions } = __classPrivateFieldGet(this, _Keycloak_state, "f");
         if (initOptions === undefined) {
             return false;
         }
@@ -413,36 +428,28 @@ class Keycloak {
      * @private Undocumented.
      */
     get authServerUrl() {
-        const internalState = internalStateByInstance.get(this);
-        (0, tsafe_1.assert)(internalState !== undefined);
-        const { keycloakUtils: { issuerUriParsed } } = internalState;
+        const { keycloakUtils: { issuerUriParsed } } = __classPrivateFieldGet(this, _Keycloak_state, "f");
         return `${issuerUriParsed.origin}${issuerUriParsed.kcHttpRelativePath}`;
     }
     /**
      * @private Undocumented.
      */
     get realm() {
-        const internalState = internalStateByInstance.get(this);
-        (0, tsafe_1.assert)(internalState !== undefined);
-        const { keycloakUtils: { issuerUriParsed } } = internalState;
+        const { keycloakUtils: { issuerUriParsed } } = __classPrivateFieldGet(this, _Keycloak_state, "f");
         return issuerUriParsed.realm;
     }
     /**
      * @private Undocumented.
      */
     get clientId() {
-        const internalState = internalStateByInstance.get(this);
-        (0, tsafe_1.assert)(internalState !== undefined);
-        const { constructorParams } = internalState;
+        const { constructorParams } = __classPrivateFieldGet(this, _Keycloak_state, "f");
         return constructorParams.clientId;
     }
     /**
      * @private Undocumented.
      */
     get redirectUri() {
-        const internalState = internalStateByInstance.get(this);
-        (0, tsafe_1.assert)(internalState !== undefined);
-        const { initOptions } = internalState;
+        const { initOptions } = __classPrivateFieldGet(this, _Keycloak_state, "f");
         if (initOptions === undefined) {
             return undefined;
         }
@@ -455,9 +462,7 @@ class Keycloak {
         if (!this.didInitialize) {
             return undefined;
         }
-        const internalState = internalStateByInstance.get(this);
-        (0, tsafe_1.assert)(internalState !== undefined);
-        const { oidc, tokens } = internalState;
+        const { oidc, tokens } = __classPrivateFieldGet(this, _Keycloak_state, "f");
         (0, tsafe_1.assert)(oidc !== undefined);
         if (!oidc.isUserLoggedIn) {
             console.warn("Trying to read keycloak.sessionId when keycloak.authenticated is false is a logical error in your application");
@@ -472,18 +477,14 @@ class Keycloak {
      * @private Undocumented.
      */
     get profile() {
-        const internalState = internalStateByInstance.get(this);
-        (0, tsafe_1.assert)(internalState !== undefined);
-        const { profile } = internalState;
+        const { profile } = __classPrivateFieldGet(this, _Keycloak_state, "f");
         return profile;
     }
     /**
      * @private Undocumented.
      */
     get userInfo() {
-        const internalState = internalStateByInstance.get(this);
-        (0, tsafe_1.assert)(internalState !== undefined);
-        const { userInfo } = internalState;
+        const { userInfo } = __classPrivateFieldGet(this, _Keycloak_state, "f");
         return userInfo;
     }
     /**
@@ -506,15 +507,11 @@ class Keycloak {
      * obtain a new access token.
      */
     set onTokenExpired(value) {
-        const internalState = internalStateByInstance.get(this);
-        (0, tsafe_1.assert)(internalState !== undefined);
-        const { $onTokenExpired } = internalState;
+        const { $onTokenExpired } = __classPrivateFieldGet(this, _Keycloak_state, "f");
         $onTokenExpired.current = value;
     }
     get onTokenExpired() {
-        const internalState = internalStateByInstance.get(this);
-        (0, tsafe_1.assert)(internalState !== undefined);
-        const { $onTokenExpired } = internalState;
+        const { $onTokenExpired } = __classPrivateFieldGet(this, _Keycloak_state, "f");
         return $onTokenExpired.current;
     }
     /**
@@ -523,12 +520,10 @@ class Keycloak {
      */
     async login(options) {
         const { redirectUri, action, loginHint, acr, acrValues, idpHint, locale, doesCurrentHrefRequiresAuth } = options ?? {};
-        const internalState = internalStateByInstance.get(this);
-        (0, tsafe_1.assert)(internalState !== undefined);
         if (!this.didInitialize) {
-            await internalState.dInitialized.pr;
+            await __classPrivateFieldGet(this, _Keycloak_state, "f").dInitialized.pr;
         }
-        const { oidc, keycloakUtils } = internalState;
+        const { oidc, keycloakUtils } = __classPrivateFieldGet(this, _Keycloak_state, "f");
         (0, tsafe_1.assert)(oidc !== undefined);
         const extraQueryParams_commons = {
             claims: acr === undefined
@@ -574,12 +569,10 @@ class Keycloak {
      * @param options Logout options.
      */
     async logout(options) {
-        const internalState = internalStateByInstance.get(this);
-        (0, tsafe_1.assert)(internalState !== undefined);
         if (!this.didInitialize) {
-            await internalState.dInitialized.pr;
+            await __classPrivateFieldGet(this, _Keycloak_state, "f").dInitialized.pr;
         }
-        const { oidc, initOptions } = internalState;
+        const { oidc, initOptions } = __classPrivateFieldGet(this, _Keycloak_state, "f");
         (0, tsafe_1.assert)(oidc !== undefined);
         (0, tsafe_1.assert)(initOptions !== undefined);
         (0, tsafe_1.assert)(oidc.isUserLoggedIn, "The user is not currently logged in");
@@ -639,9 +632,7 @@ class Keycloak {
      */
     createAccountUrl(options) {
         const { locale, redirectUri } = options ?? {};
-        const internalState = internalStateByInstance.get(this);
-        (0, tsafe_1.assert)(internalState !== undefined);
-        const { keycloakUtils } = internalState;
+        const { keycloakUtils } = __classPrivateFieldGet(this, _Keycloak_state, "f");
         return keycloakUtils.getAccountUrl({
             clientId: this.clientId,
             backToAppFromAccountUrl: redirectUri ?? location.href,
@@ -654,8 +645,6 @@ class Keycloak {
      * @param minValidity If not specified, `0` is used.
      */
     isTokenExpired(minValidity = 0) {
-        const internalState = internalStateByInstance.get(this);
-        (0, tsafe_1.assert)(internalState !== undefined);
         let accessTokenExpirationTime;
         if (!this.didInitialize) {
             const fakeAccessToken = this.token;
@@ -667,7 +656,7 @@ class Keycloak {
             accessTokenExpirationTime = time;
         }
         else {
-            const { tokens } = internalState;
+            const { tokens } = __classPrivateFieldGet(this, _Keycloak_state, "f");
             (0, tsafe_1.assert)(tokens !== undefined);
             accessTokenExpirationTime = tokens.accessTokenExpirationTime;
         }
@@ -696,12 +685,10 @@ class Keycloak {
      * });
      */
     async updateToken(minValidity = 5) {
-        const internalState = internalStateByInstance.get(this);
-        (0, tsafe_1.assert)(internalState !== undefined);
         if (!this.didInitialize) {
-            await internalState.dInitialized.pr;
+            await __classPrivateFieldGet(this, _Keycloak_state, "f").dInitialized.pr;
         }
-        const { oidc } = internalState;
+        const { oidc } = __classPrivateFieldGet(this, _Keycloak_state, "f");
         (0, tsafe_1.assert)(oidc !== undefined);
         (0, tsafe_1.assert)(oidc.isUserLoggedIn, "updateToken called too early");
         if (!this.isTokenExpired(minValidity)) {
@@ -747,32 +734,36 @@ class Keycloak {
      * @returns A promise to set functions to be invoked on success or error.
      */
     async loadUserProfile() {
-        const internalState = internalStateByInstance.get(this);
-        (0, tsafe_1.assert)(internalState !== undefined);
         if (!this.didInitialize) {
-            await internalState.dInitialized.pr;
+            await __classPrivateFieldGet(this, _Keycloak_state, "f").dInitialized.pr;
         }
-        const { oidc, keycloakUtils } = internalState;
+        const { oidc, keycloakUtils } = __classPrivateFieldGet(this, _Keycloak_state, "f");
         (0, tsafe_1.assert)(oidc !== undefined);
         (0, tsafe_1.assert)(oidc.isUserLoggedIn, "Can't load userProfile if user not authenticated");
         const { accessToken } = await oidc.getTokens();
-        return (internalState.profile = await keycloakUtils.fetchUserProfile({ accessToken }));
+        return (__classPrivateFieldGet(this, _Keycloak_state, "f").profile = await keycloakUtils.fetchUserProfile({ accessToken }));
     }
     /**
      * @private Undocumented.
      */
     async loadUserInfo() {
-        const internalState = internalStateByInstance.get(this);
-        (0, tsafe_1.assert)(internalState !== undefined);
         if (!this.didInitialize) {
-            await internalState.dInitialized.pr;
+            await __classPrivateFieldGet(this, _Keycloak_state, "f").dInitialized.pr;
         }
-        const { oidc, keycloakUtils } = internalState;
+        const { oidc, keycloakUtils } = __classPrivateFieldGet(this, _Keycloak_state, "f");
         (0, tsafe_1.assert)(oidc !== undefined);
         (0, tsafe_1.assert)(oidc.isUserLoggedIn, "Can't load userInfo if user not authenticated");
         const { accessToken } = await oidc.getTokens();
-        return (internalState.userInfo = await keycloakUtils.fetchUserInfo({ accessToken }));
+        return (__classPrivateFieldGet(this, _Keycloak_state, "f").userInfo = await keycloakUtils.fetchUserInfo({ accessToken }));
+    }
+    /** Get the underlying oidc-spa instance */
+    get oidc() {
+        (0, tsafe_1.assert)(this.didInitialize, "Cannot get keycloak.oidc before the init() method was called and have resolved.");
+        const { oidc } = __classPrivateFieldGet(this, _Keycloak_state, "f");
+        (0, tsafe_1.assert)(oidc !== undefined);
+        return oidc;
     }
 }
 exports.Keycloak = Keycloak;
+_Keycloak_state = new WeakMap();
 //# sourceMappingURL=Keycloak.js.map