oidc-spa 8.0.5 → 8.1.0

package/angular.d.ts

@@ -0,0 +1,191 @@
+import type { Oidc, OidcInitializationError } from "./core";
+import type { OidcMetadata } from "./core/OidcMetadata";
+import { type Signal, type EnvironmentProviders } from "@angular/core";
+import type { ReadonlyBehaviorSubject } from "./tools/ReadonlyBehaviorSubject";
+import type { ValueOrAsyncGetter } from "./tools/ValueOrAsyncGetter";
+export type ParamsOfProvide = {
+    issuerUri: string;
+    clientId: string;
+    /**
+     * The scopes being requested from the OIDC/OAuth2 provider (default: `["profile"]`
+     * (the scope "openid" is added automatically as it's mandatory)
+     **/
+    scopes?: string[];
+    /**
+     * Transform the url (authorization endpoint) before redirecting to the login pages.
+     *
+     * The isSilent parameter is true when the redirect is initiated in the background iframe for silent signin.
+     * This can be used to omit ui related query parameters (like `ui_locales`).
+     */
+    transformUrlBeforeRedirect?: (params: {
+        authorizationUrl: string;
+        isSilent: boolean;
+    }) => string;
+    /**
+     * Extra query params to be added to the authorization endpoint url before redirecting or silent signing in.
+     * You can provide a function that returns those extra query params, it will be called
+     * when login() is called.
+     *
+     * Example: extraQueryParams: ()=> ({ ui_locales: "fr" })
+     *
+     * This parameter can also be passed to login() directly.
+     */
+    extraQueryParams?: Record<string, string | undefined> | ((params: {
+        isSilent: boolean;
+        url: string;
+    }) => Record<string, string | undefined>);
+    /**
+     * Extra body params to be added to the /token POST request.
+     *
+     * It will be used when for the initial request, whenever the token is getting refreshed and if you call `renewTokens()`.
+     * You can also provide this parameter directly to the `renewTokens()` method.
+     *
+     * It can be either a string to string record or a function that returns a string to string record.
+     *
+     * Example: extraTokenParams: ()=> ({ selectedCustomer: "xxx" })
+     *          extraTokenParams: { selectedCustomer: "xxx" }
+     */
+    extraTokenParams?: Record<string, string | undefined> | (() => Record<string, string | undefined>);
+    /**
+     * Usage discouraged, it's here because we don't want to assume too much on your
+     * usecase but I can't think of a scenario where you would want anything
+     * other than the current page.
+     *
+     * Where to redirect after successful login.
+     * Default: window.location.href (here)
+     *
+     * It does not need to include the origin, eg: "/dashboard"
+     *
+     * This parameter can also be passed to login() directly as `redirectUrl`.
+     */
+    postLoginRedirectUrl?: string;
+    /**
+     * This parameter defines after how many seconds of inactivity the user should be
+     * logged out automatically.
+     *
+     * WARNING: It should be configured on the identity server side
+     * as it's the authoritative source for security policies and not the client.
+     * If you don't provide this parameter it will be inferred from the refresh token expiration time.
+     * */
+    idleSessionLifetimeInSeconds?: number;
+    /**
+     * Usage discouraged, this parameter exists because we don't want to assume
+     * too much about your usecase but I can't think of a scenario where you would
+     * want anything other than the current page.
+     *
+     * Default: { redirectTo: "current page" }
+     */
+    autoLogoutParams?: Parameters<Oidc.LoggedIn<any>["logout"]>[0];
+    autoLogin?: boolean;
+    /**
+     * Default: false
+     *
+     * See: https://docs.oidc-spa.dev/v/v8/resources/iframe-related-issues
+     */
+    noIframe?: boolean;
+    debugLogs?: boolean;
+    /**
+     * WARNING: This option exists solely as a workaround
+     * for limitations in the Google OAuth API.
+     * See: https://docs.oidc-spa.dev/providers-configuration/google-oauth
+     *
+     * Do not use this for other providers.
+     * If you think you need a client secret in a SPA, you are likely
+     * trying to use a confidential (private) client in the browser,
+     * which is insecure and not supported.
+     */
+    __unsafe_clientSecret?: string;
+    /**
+     *  WARNING: Setting this to true is a workaround for provider
+     *  like Google OAuth that don't support JWT access token.
+     *  Use at your own risk, this is a hack.
+     */
+    __unsafe_useIdTokenAsAccessToken?: boolean;
+    /**
+     * This option should only be used as a last resort.
+     *
+     * If your OIDC provider is correctly configured, this should not be necessary.
+     *
+     * The metadata is normally retrieved automatically from:
+     * `${issuerUri}/.well-known/openid-configuration`
+     *
+     * Use this only if that endpoint is not accessible (e.g. due to missing CORS headers
+     * or non-standard deployments), and you cannot fix the server-side configuration.
+     */
+    __metadata?: Partial<OidcMetadata>;
+    /**
+     * You can use oidc.$secondsLeftBeforeAutoLogout to display an overlay/update the tab title
+     * to indicate to your user that they are going to be logged out if they don't interact
+     * with the app.
+     * This value let you define how long before how long before auto logout this warning should
+     * start showing.
+     * Default is 45 seconds.
+     */
+    autoLogoutWarningDurationSeconds?: number;
+};
+export type ParamsOfProvideMock = {
+    mockIssuerUri?: string;
+    mockClientId?: string;
+    mockAccessToken?: string;
+    isUserInitiallyLoggedIn?: boolean;
+};
+export declare abstract class AbstractOidcService<T_DecodedIdToken extends Record<string, unknown> = Oidc.Tokens.DecodedIdToken_base> {
+    #private;
+    protected autoLogin: boolean;
+    protected providerAwaitsInitialization: boolean;
+    protected decodedIdTokenSchema: {
+        parse: (decodedIdToken_original: Oidc.Tokens.DecodedIdToken_base) => T_DecodedIdToken;
+    } | undefined;
+    protected mockDecodedIdToken: (() => Promise<T_DecodedIdToken>) | T_DecodedIdToken | undefined;
+    static provide(params: ValueOrAsyncGetter<ParamsOfProvide>): EnvironmentProviders;
+    static provideMock(params?: ParamsOfProvideMock): EnvironmentProviders;
+    static enforceLoginGuard(): (route: import("@angular/router").ActivatedRouteSnapshot) => Promise<boolean>;
+    readonly prInitialized: Promise<true>;
+    get initializationError(): OidcInitializationError | undefined;
+    get issuerUri(): string;
+    get clientId(): string;
+    get isUserLoggedIn(): boolean;
+    login(params?: {
+        /**
+         * Add extra query parameters to the url before redirecting to the login pages.
+         */
+        extraQueryParams?: Record<string, string | undefined>;
+        /**
+         * Where to redirect after successful login.
+         * Default: window.location.href (here)
+         *
+         * It does not need to include the origin, eg: "/dashboard"
+         */
+        redirectUrl?: string;
+        /**
+         * Transform the url before redirecting to the login pages.
+         * Prefer using the extraQueryParams parameter if you're only adding query parameters.
+         */
+        transformUrlBeforeRedirect?: (url: string) => string;
+    }): Promise<never>;
+    renewTokens(params?: {
+        extraTokenParams?: Record<string, string | undefined>;
+    }): Promise<void>;
+    logout(params: {
+        redirectTo: "home" | "current page";
+    } | {
+        redirectTo: "specific url";
+        url: string;
+    }): Promise<never>;
+    goToAuthServer(params: {
+        extraQueryParams?: Record<string, string | undefined>;
+        redirectUrl?: string;
+        transformUrlBeforeRedirect?: (url: string) => string;
+    }): Promise<never>;
+    readonly decodedIdToken$: ReadonlyBehaviorSubject<T_DecodedIdToken>;
+    readonly $decodedIdToken: Signal<T_DecodedIdToken>;
+    getAccessToken(): Promise<{
+        isUserLoggedIn: false;
+        accessToken?: never;
+    } | {
+        isUserLoggedIn: true;
+        accessToken: string;
+    }>;
+    readonly $secondsLeftBeforeAutoLogout: Signal<number | null>;
+    get isNewBrowserSession(): boolean;
+}

package/angular.js

@@ -0,0 +1,351 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+var __classPrivateFieldGet = (this && this.__classPrivateFieldGet) || function (receiver, state, kind, f) {
+    if (kind === "a" && !f) throw new TypeError("Private accessor was defined without a getter");
+    if (typeof state === "function" ? receiver !== state || !f : !state.has(receiver)) throw new TypeError("Cannot read private member from an object whose class did not declare it");
+    return kind === "m" ? f : kind === "a" ? f.call(receiver) : f ? f.value : state.get(receiver);
+};
+var __classPrivateFieldSet = (this && this.__classPrivateFieldSet) || function (receiver, state, value, kind, f) {
+    if (kind === "m") throw new TypeError("Private method is not writable");
+    if (kind === "a" && !f) throw new TypeError("Private accessor was defined without a setter");
+    if (typeof state === "function" ? receiver !== state || !f : !state.has(receiver)) throw new TypeError("Cannot write private member to an object whose class did not declare it");
+    return (kind === "a" ? f.call(receiver, value) : f ? f.value = value : state.set(receiver, value)), value;
+};
+var _AbstractOidcService_instances, _AbstractOidcService_autoLogoutWarningDurationSeconds, _AbstractOidcService_dState, _AbstractOidcService_initialize, _AbstractOidcService_getPrInitializedNotResolvedErrorMessage, _AbstractOidcService_getState, _AbstractOidcService_getAutoLoginAndInitializationErrorAccessErrorMessage, _AbstractOidcService_getOidc;
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AbstractOidcService = void 0;
+const rxjs_1 = require("rxjs");
+const Deferred_1 = require("./tools/Deferred");
+const tsafe_1 = require("./vendor/frontend/tsafe");
+const createObjectThatThrowsIfAccessed_1 = require("./tools/createObjectThatThrowsIfAccessed");
+const core_1 = require("@angular/core");
+const rxjs_interop_1 = require("@angular/core/rxjs-interop");
+const router_1 = require("@angular/router");
+const getBaseHref_1 = require("./tools/getBaseHref");
+tsafe_1.assert;
+class AbstractOidcService {
+    constructor() {
+        _AbstractOidcService_instances.add(this);
+        this.autoLogin = false;
+        this.providerAwaitsInitialization = true;
+        this.decodedIdTokenSchema = undefined;
+        this.mockDecodedIdToken = undefined;
+        _AbstractOidcService_autoLogoutWarningDurationSeconds.set(this, 45);
+        _AbstractOidcService_dState.set(this, new Deferred_1.Deferred());
+        this.prInitialized = __classPrivateFieldGet(this, _AbstractOidcService_dState, "f").pr.then(() => true);
+        this.decodedIdToken$ = (() => {
+            const decodedIdToken$ = new rxjs_1.BehaviorSubject((0, createObjectThatThrowsIfAccessed_1.createObjectThatThrowsIfAccessed)({
+                debugMessage: __classPrivateFieldGet(this, _AbstractOidcService_instances, "m", _AbstractOidcService_getPrInitializedNotResolvedErrorMessage).call(this, {
+                    callerName: "decodedIdToken"
+                })
+            }));
+            (async () => {
+                const { initializationError, oidc } = await __classPrivateFieldGet(this, _AbstractOidcService_dState, "f").pr;
+                if (initializationError !== undefined) {
+                    decodedIdToken$.next((0, createObjectThatThrowsIfAccessed_1.createObjectThatThrowsIfAccessed)({
+                        debugMessage: __classPrivateFieldGet(this, _AbstractOidcService_instances, "m", _AbstractOidcService_getAutoLoginAndInitializationErrorAccessErrorMessage).call(this, {
+                            callerName: "decodedIdToken"
+                        })
+                    }));
+                    return;
+                }
+                (0, tsafe_1.assert)(oidc !== undefined);
+                if (!oidc.isUserLoggedIn) {
+                    decodedIdToken$.next((0, createObjectThatThrowsIfAccessed_1.createObjectThatThrowsIfAccessed)({
+                        debugMessage: [
+                            `oidc-spa: Trying to read properties of decodedIdToken, the user`,
+                            `isn't currently logged in, this does not make sense.`,
+                            `You are responsible for controlling the flow of your app and`,
+                            `not try to read the decodedIdToken when oidc.isUserLoggedIn is false.`
+                        ].join(" ")
+                    }));
+                    return;
+                }
+                decodedIdToken$.next(oidc.getDecodedIdToken());
+                oidc.subscribeToTokensChange(() => {
+                    const value_new = oidc.getDecodedIdToken();
+                    const value_current = decodedIdToken$.getValue();
+                    if (value_new === value_current) {
+                        return;
+                    }
+                    decodedIdToken$.next(value_new);
+                });
+            })();
+            return decodedIdToken$;
+        })();
+        this.$decodedIdToken = (0, rxjs_interop_1.toSignal)(this.decodedIdToken$, { requireSync: true });
+        this.$secondsLeftBeforeAutoLogout = (() => {
+            const secondsLeftBeforeAutoLogout$ = new rxjs_1.BehaviorSubject(null);
+            (async () => {
+                const { oidc } = await __classPrivateFieldGet(this, _AbstractOidcService_dState, "f").pr;
+                if (oidc === undefined) {
+                    return;
+                }
+                if (!oidc.isUserLoggedIn) {
+                    return;
+                }
+                oidc.subscribeToAutoLogoutCountdown(({ secondsLeft }) => {
+                    if (secondsLeft === undefined || secondsLeft > __classPrivateFieldGet(this, _AbstractOidcService_autoLogoutWarningDurationSeconds, "f")) {
+                        if (secondsLeftBeforeAutoLogout$.getValue() !== null) {
+                            secondsLeftBeforeAutoLogout$.next(null);
+                        }
+                        return;
+                    }
+                    secondsLeftBeforeAutoLogout$.next(secondsLeft);
+                });
+            })();
+            return (0, rxjs_interop_1.toSignal)(secondsLeftBeforeAutoLogout$, { requireSync: true });
+        })();
+    }
+    static provide(params) {
+        const paramsOrGetParams = params;
+        (0, tsafe_1.assert)((0, tsafe_1.is)(this));
+        return (0, core_1.makeEnvironmentProviders)([
+            this,
+            (0, core_1.provideAppInitializer)(async () => {
+                const instance = (0, core_1.inject)(this);
+                __classPrivateFieldGet(instance, _AbstractOidcService_instances, "m", _AbstractOidcService_initialize).call(instance, {
+                    prOidcOrInitializationError: (async () => {
+                        const [{ createOidc }, { autoLogoutWarningDurationSeconds, ...params }] = await Promise.all([
+                            Promise.resolve().then(() => __importStar(require("./core"))),
+                            typeof paramsOrGetParams === "function"
+                                ? paramsOrGetParams()
+                                : paramsOrGetParams
+                        ]);
+                        if (autoLogoutWarningDurationSeconds !== undefined) {
+                            __classPrivateFieldSet(instance, _AbstractOidcService_autoLogoutWarningDurationSeconds, autoLogoutWarningDurationSeconds, "f");
+                        }
+                        try {
+                            return createOidc({
+                                homeUrl: (0, getBaseHref_1.getBaseHref)(),
+                                autoLogin: instance.autoLogin,
+                                decodedIdTokenSchema: instance.decodedIdTokenSchema,
+                                ...params
+                            });
+                        }
+                        catch (initializationError) {
+                            (0, tsafe_1.assert)(initializationError instanceof Error);
+                            (0, tsafe_1.assert)((0, tsafe_1.is)(initializationError));
+                            return initializationError;
+                        }
+                    })()
+                });
+                if (instance.providerAwaitsInitialization) {
+                    await instance.prInitialized;
+                }
+            })
+        ]);
+    }
+    static provideMock(params = {}) {
+        (0, tsafe_1.assert)((0, tsafe_1.is)(this));
+        return (0, core_1.makeEnvironmentProviders)([
+            this,
+            (0, core_1.provideAppInitializer)(async () => {
+                const instance = (0, core_1.inject)(this);
+                __classPrivateFieldGet(instance, _AbstractOidcService_instances, "m", _AbstractOidcService_initialize).call(instance, {
+                    prOidcOrInitializationError: (async () => {
+                        const { createMockOidc } = await Promise.resolve().then(() => __importStar(require("./mock")));
+                        return createMockOidc({
+                            homeUrl: (0, getBaseHref_1.getBaseHref)(),
+                            autoLogin: instance.autoLogin,
+                            isUserInitiallyLoggedIn: instance.autoLogin
+                                ? true
+                                : params.isUserInitiallyLoggedIn,
+                            mockedParams: {
+                                issuerUri: params.mockIssuerUri,
+                                clientId: params.mockClientId
+                            },
+                            mockedTokens: {
+                                accessToken: params.mockAccessToken,
+                                decodedIdToken: await (() => {
+                                    if (instance.mockDecodedIdToken === undefined) {
+                                        return undefined;
+                                    }
+                                    if (typeof instance.mockDecodedIdToken === "function") {
+                                        return instance.mockDecodedIdToken();
+                                    }
+                                })()
+                            }
+                        });
+                    })()
+                });
+                await instance.prInitialized;
+            })
+        ]);
+    }
+    static enforceLoginGuard() {
+        const canActivateFn = (async (route) => {
+            const instance = (0, core_1.inject)(this);
+            const router = (0, core_1.inject)(router_1.Router);
+            await instance.prInitialized;
+            const oidc = __classPrivateFieldGet(instance, _AbstractOidcService_instances, "m", _AbstractOidcService_getOidc).call(instance, { callerName: "enforceLoginGuard" });
+            if (!oidc.isUserLoggedIn) {
+                const redirectUrl = router.serializeUrl(router.createUrlTree(route.url.map(u => u.path), {
+                    queryParams: route.queryParams,
+                    fragment: route.fragment ?? undefined
+                }));
+                const doesCurrentHrefRequiresAuth = location.href.replace(/\/$/, "") === redirectUrl.replace(/\/$/, "");
+                await oidc.login({
+                    doesCurrentHrefRequiresAuth,
+                    redirectUrl
+                });
+            }
+            return true;
+        });
+        return canActivateFn;
+    }
+    get initializationError() {
+        const state = __classPrivateFieldGet(this, _AbstractOidcService_instances, "m", _AbstractOidcService_getState).call(this, { callerName: "initializationError" });
+        return state.initializationError;
+    }
+    get issuerUri() {
+        return __classPrivateFieldGet(this, _AbstractOidcService_instances, "m", _AbstractOidcService_getOidc).call(this, { callerName: "issuerUri" }).params.issuerUri;
+    }
+    get clientId() {
+        return __classPrivateFieldGet(this, _AbstractOidcService_instances, "m", _AbstractOidcService_getOidc).call(this, { callerName: "clientId" }).params.clientId;
+    }
+    get isUserLoggedIn() {
+        return __classPrivateFieldGet(this, _AbstractOidcService_instances, "m", _AbstractOidcService_getOidc).call(this, { callerName: "isUserLoggedIn" }).isUserLoggedIn;
+    }
+    async login(params) {
+        await this.prInitialized;
+        const oidc = __classPrivateFieldGet(this, _AbstractOidcService_instances, "m", _AbstractOidcService_getOidc).call(this, { callerName: "login" });
+        if (oidc.isUserLoggedIn) {
+            throw new Error([
+                "oidc-spa: login() called but the user is already logged in.",
+                "If you wish to send the user to the login page for some update",
+                "use oidc.goToAuthServer() instead"
+            ].join(" "));
+        }
+        return oidc.login({
+            ...params,
+            doesCurrentHrefRequiresAuth: false
+        });
+    }
+    async renewTokens(params) {
+        await this.prInitialized;
+        const oidc = __classPrivateFieldGet(this, _AbstractOidcService_instances, "m", _AbstractOidcService_getOidc).call(this, { callerName: "renewTokens" });
+        if (!oidc.isUserLoggedIn) {
+            throw new Error("oidc-spa: renewTokens() called but the user is not logged in.");
+        }
+        return oidc.renewTokens(params);
+    }
+    async logout(params) {
+        await this.prInitialized;
+        const oidc = __classPrivateFieldGet(this, _AbstractOidcService_instances, "m", _AbstractOidcService_getOidc).call(this, { callerName: "logout" });
+        if (!oidc.isUserLoggedIn) {
+            throw new Error("oidc-spa: logout() called but the user is not logged in.");
+        }
+        return oidc.logout(params);
+    }
+    async goToAuthServer(params) {
+        await this.prInitialized;
+        const oidc = __classPrivateFieldGet(this, _AbstractOidcService_instances, "m", _AbstractOidcService_getOidc).call(this, { callerName: "goToAuthServer" });
+        if (!oidc.isUserLoggedIn) {
+            throw new Error("oidc-spa: goToAuthServer() called but the user is not logged in.");
+        }
+        return oidc.goToAuthServer(params);
+    }
+    async getAccessToken() {
+        await this.prInitialized;
+        const oidc = __classPrivateFieldGet(this, _AbstractOidcService_instances, "m", _AbstractOidcService_getOidc).call(this, { callerName: "getAccessToken" });
+        return oidc.isUserLoggedIn
+            ? { isUserLoggedIn: true, accessToken: (await oidc.getTokens()).accessToken }
+            : {
+                isUserLoggedIn: false
+            };
+    }
+    get isNewBrowserSession() {
+        const oidc = __classPrivateFieldGet(this, _AbstractOidcService_instances, "m", _AbstractOidcService_getOidc).call(this, { callerName: "isNewBrowserSession" });
+        if (!oidc.isUserLoggedIn) {
+            throw new Error("oidc-spa: isNewBrowserSession was used but the used is not logged in");
+        }
+        return oidc.isNewBrowserSession;
+    }
+}
+exports.AbstractOidcService = AbstractOidcService;
+_AbstractOidcService_autoLogoutWarningDurationSeconds = new WeakMap(), _AbstractOidcService_dState = new WeakMap(), _AbstractOidcService_instances = new WeakSet(), _AbstractOidcService_initialize = function _AbstractOidcService_initialize(params) {
+    const { prOidcOrInitializationError } = params;
+    prOidcOrInitializationError.then(oidcOrInitializationError => {
+        let initializationError = undefined;
+        let oidc = undefined;
+        if (oidcOrInitializationError instanceof Error) {
+            initializationError = oidcOrInitializationError;
+        }
+        else {
+            oidc = oidcOrInitializationError;
+            initializationError = oidc.isUserLoggedIn ? undefined : oidc.initializationError;
+        }
+        __classPrivateFieldGet(this, _AbstractOidcService_dState, "f").resolve({
+            oidc,
+            initializationError
+        });
+    });
+}, _AbstractOidcService_getPrInitializedNotResolvedErrorMessage = function _AbstractOidcService_getPrInitializedNotResolvedErrorMessage(params) {
+    const { callerName } = params;
+    return [
+        `oidc-spa: ${callerName} called/accessed before`,
+        "`oidc.prInitialized` resolved.",
+        "You are using `awaitInitialization: false`.",
+        "In your template you should wrap your usage of",
+        "oidc.isUserLoggedIn, oidc.$decodedIdToken() ect. into",
+        "@defer (when oidc.prInitialized | async) { } @placeholder { Loading... }"
+    ].join(" ");
+}, _AbstractOidcService_getState = function _AbstractOidcService_getState(params) {
+    const { callerName } = params;
+    const { hasResolved, value } = __classPrivateFieldGet(this, _AbstractOidcService_dState, "f").getState();
+    if (!hasResolved) {
+        throw new Error(__classPrivateFieldGet(this, _AbstractOidcService_instances, "m", _AbstractOidcService_getPrInitializedNotResolvedErrorMessage).call(this, { callerName }));
+    }
+    return value;
+}, _AbstractOidcService_getAutoLoginAndInitializationErrorAccessErrorMessage = function _AbstractOidcService_getAutoLoginAndInitializationErrorAccessErrorMessage(params) {
+    const { callerName } = params;
+    return [
+        `oidc-spa: ${callerName} was accessed but initialization failed.`,
+        "You are using `autoLogin: true`, so there is no anonymous state.",
+        "Handle this by gating your UI:",
+        "if (oidc.initializationError) show an error/fallback."
+    ].join(" ");
+}, _AbstractOidcService_getOidc = function _AbstractOidcService_getOidc(params) {
+    const { callerName } = params;
+    const state = __classPrivateFieldGet(this, _AbstractOidcService_instances, "m", _AbstractOidcService_getState).call(this, { callerName });
+    if (state.oidc === undefined) {
+        // initialization failed
+        (0, tsafe_1.assert)(state.initializationError !== undefined);
+        throw new Error(__classPrivateFieldGet(this, _AbstractOidcService_instances, "m", _AbstractOidcService_getAutoLoginAndInitializationErrorAccessErrorMessage).call(this, { callerName }));
+    }
+    return state.oidc;
+};
+//# sourceMappingURL=angular.js.map

package/angular.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"angular.js","sourceRoot":"","sources":["./src/angular.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,+BAAuC;AAGvC,+CAA4C;AAC5C,mDAAkE;AAClE,+FAA4F;AAC5F,wCAMuB;AACvB,6DAAsD;AAEtD,4CAA6D;AAE7D,qDAAkD;AAkIlD,cAKC,CAAC;AASF,MAAsB,mBAAmB;IAAzC;;QAGc,cAAS,GAAY,KAAK,CAAC;QAC3B,iCAA4B,GAAY,IAAI,CAAC;QAC7C,yBAAoB,GAIZ,SAAS,CAAC;QAElB,uBAAkB,GACxB,SAAS,CAAC;QAEd,gEAAoC,EAAE,EAAC;QA6HvC,sCAAU,IAAI,mBAAQ,EAGlB,EAAC;QAEI,kBAAa,GAAkB,uBAAA,IAAI,mCAAQ,CAAC,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;QAwKhE,oBAAe,GAA8C,CAAC,GAAG,EAAE;YACxE,MAAM,eAAe,GAAG,IAAI,sBAAe,CACvC,IAAA,mEAAgC,EAAC;gBAC7B,YAAY,EAAE,uBAAA,IAAI,oGAAyC,MAA7C,IAAI,EAA0C;oBACxD,UAAU,EAAE,gBAAgB;iBAC/B,CAAC;aACL,CAAC,CACL,CAAC;YAEF,CAAC,KAAK,IAAI,EAAE;gBACR,MAAM,EAAE,mBAAmB,EAAE,IAAI,EAAE,GAAG,MAAM,uBAAA,IAAI,mCAAQ,CAAC,EAAE,CAAC;gBAE5D,IAAI,mBAAmB,KAAK,SAAS,EAAE,CAAC;oBACpC,eAAe,CAAC,IAAI,CAChB,IAAA,mEAAgC,EAAC;wBAC7B,YAAY,EAAE,uBAAA,IAAI,iHAAsD,MAA1D,IAAI,EAAuD;4BACrE,UAAU,EAAE,gBAAgB;yBAC/B,CAAC;qBACL,CAAC,CACL,CAAC;oBACF,OAAO;gBACX,CAAC;gBAED,IAAA,cAAM,EAAC,IAAI,KAAK,SAAS,CAAC,CAAC;gBAE3B,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC;oBACvB,eAAe,CAAC,IAAI,CAChB,IAAA,mEAAgC,EAAC;wBAC7B,YAAY,EAAE;4BACV,iEAAiE;4BACjE,sDAAsD;4BACtD,8DAA8D;4BAC9D,uEAAuE;yBAC1E,CAAC,IAAI,CAAC,GAAG,CAAC;qBACd,CAAC,CACL,CAAC;oBACF,OAAO;gBACX,CAAC;gBAED,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,iBAAiB,EAAE,CAAC,CAAC;gBAE/C,IAAI,CAAC,uBAAuB,CAAC,GAAG,EAAE;oBAC9B,MAAM,SAAS,GAAG,IAAI,CAAC,iBAAiB,EAAE,CAAC;oBAC3C,MAAM,aAAa,GAAG,eAAe,CAAC,QAAQ,EAAE,CAAC;oBAEjD,IAAI,SAAS,KAAK,aAAa,EAAE,CAAC;wBAC9B,OAAO;oBACX,CAAC;oBAED,eAAe,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;gBACpC,CAAC,CAAC,CAAC;YACP,CAAC,CAAC,EAAE,CAAC;YAEL,OAAO,eAAe,CAAC;QAC3B,CAAC,CAAC,EAAE,CAAC;QAEI,oBAAe,GAAG,IAAA,uBAAQ,EAAC,IAAI,CAAC,eAAe,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC;QAgBxE,iCAA4B,GAA0B,CAAC,GAAG,EAAE;YACjE,MAAM,4BAA4B,GAAG,IAAI,sBAAe,CAAgB,IAAI,CAAC,CAAC;YAE9E,CAAC,KAAK,IAAI,EAAE;gBACR,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,uBAAA,IAAI,mCAAQ,CAAC,EAAE,CAAC;gBAEvC,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;oBACrB,OAAO;gBACX,CAAC;gBAED,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC;oBACvB,OAAO;gBACX,CAAC;gBAED,IAAI,CAAC,8BAA8B,CAAC,CAAC,EAAE,WAAW,EAAE,EAAE,EAAE;oBACpD,IAAI,WAAW,KAAK,SAAS,IAAI,WAAW,GAAG,uBAAA,IAAI,6DAAkC,EAAE,CAAC;wBACpF,IAAI,4BAA4B,CAAC,QAAQ,EAAE,KAAK,IAAI,EAAE,CAAC;4BACnD,4BAA4B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;wBAC5C,CAAC;wBACD,OAAO;oBACX,CAAC;oBACD,4BAA4B,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;gBACnD,CAAC,CAAC,CAAC;YACP,CAAC,CAAC,EAAE,CAAC;YAEL,OAAO,IAAA,uBAAQ,EAAC,4BAA4B,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC;QACzE,CAAC,CAAC,EAAE,CAAC;IAWT,CAAC;IArZG,MAAM,CAAC,OAAO,CAAC,MAA2C;QACtD,MAAM,iBAAiB,GAAG,MAAM,CAAC;QAEjC,IAAA,cAAM,EAAC,IAAA,UAAE,EAA4C,IAAI,CAAC,CAAC,CAAC;QAE5D,OAAO,IAAA,+BAAwB,EAAC;YAC5B,IAAI;YACJ,IAAA,4BAAqB,EAAC,KAAK,IAAI,EAAE;gBAC7B,MAAM,QAAQ,GAAG,IAAA,aAAM,EAAC,IAAI,CAAC,CAAC;gBAE9B,uBAAA,QAAQ,uEAAY,MAApB,QAAQ,EAAa;oBACjB,2BAA2B,EAAE,CAAC,KAAK,IAAI,EAAE;wBACrC,MAAM,CAAC,EAAE,UAAU,EAAE,EAAE,EAAE,gCAAgC,EAAE,GAAG,MAAM,EAAE,CAAC,GACnE,MAAM,OAAO,CAAC,GAAG,CAAC;8EACP,QAAQ;4BACf,OAAO,iBAAiB,KAAK,UAAU;gCACnC,CAAC,CAAC,iBAAiB,EAAE;gCACrB,CAAC,CAAC,iBAAiB;yBAC1B,CAAC,CAAC;wBAEP,IAAI,gCAAgC,KAAK,SAAS,EAAE,CAAC;4BACjD,uBAAA,QAAQ,yDACJ,gCAAgC,MAAA,CAAC;wBACzC,CAAC;wBAED,IAAI,CAAC;4BACD,OAAO,UAAU,CAAC;gCACd,OAAO,EAAE,IAAA,yBAAW,GAAE;gCACtB,SAAS,EAAE,QAAQ,CAAC,SAAS;gCAC7B,oBAAoB,EAAE,QAAQ,CAAC,oBAAoB;gCACnD,GAAG,MAAM;6BACZ,CAAC,CAAC;wBACP,CAAC;wBAAC,OAAO,mBAAmB,EAAE,CAAC;4BAC3B,IAAA,cAAM,EAAC,mBAAmB,YAAY,KAAK,CAAC,CAAC;4BAC7C,IAAA,cAAM,EAAC,IAAA,UAAE,EAA0B,mBAAmB,CAAC,CAAC,CAAC;4BACzD,OAAO,mBAAmB,CAAC;wBAC/B,CAAC;oBACL,CAAC,CAAC,EAAE;iBACP,CAAC,CAAC;gBAEH,IAAI,QAAQ,CAAC,4BAA4B,EAAE,CAAC;oBACxC,MAAM,QAAQ,CAAC,aAAa,CAAC;gBACjC,CAAC;YACL,CAAC,CAAC;SACL,CAAC,CAAC;IACP,CAAC;IAED,MAAM,CAAC,WAAW,CAAC,SAA8B,EAAE;QAC/C,IAAA,cAAM,EAAC,IAAA,UAAE,EAA4C,IAAI,CAAC,CAAC,CAAC;QAE5D,OAAO,IAAA,+BAAwB,EAAC;YAC5B,IAAI;YACJ,IAAA,4BAAqB,EAAC,KAAK,IAAI,EAAE;gBAC7B,MAAM,QAAQ,GAAG,IAAA,aAAM,EAAC,IAAI,CAAC,CAAC;gBAE9B,uBAAA,QAAQ,uEAAY,MAApB,QAAQ,EAAa;oBACjB,2BAA2B,EAAE,CAAC,KAAK,IAAI,EAAE;wBACrC,MAAM,EAAE,cAAc,EAAE,GAAG,wDAAa,QAAQ,GAAC,CAAC;wBAElD,OAAO,cAAc,CAAmC;4BACpD,OAAO,EAAE,IAAA,yBAAW,GAAE;4BACtB,SAAS,EAAE,QAAQ,CAAC,SAAS;4BAC7B,uBAAuB,EAAE,QAAQ,CAAC,SAAS;gCACvC,CAAC,CAAC,IAAI;gCACN,CAAC,CAAC,MAAM,CAAC,uBAAuB;4BACpC,YAAY,EAAE;gCACV,SAAS,EAAE,MAAM,CAAC,aAAa;gCAC/B,QAAQ,EAAE,MAAM,CAAC,YAAY;6BAChC;4BACD,YAAY,EAAE;gCACV,WAAW,EAAE,MAAM,CAAC,eAAe;gCACnC,cAAc,EAAE,MAAM,CAAC,GAAG,EAAE;oCACxB,IAAI,QAAQ,CAAC,kBAAkB,KAAK,SAAS,EAAE,CAAC;wCAC5C,OAAO,SAAS,CAAC;oCACrB,CAAC;oCACD,IAAI,OAAO,QAAQ,CAAC,kBAAkB,KAAK,UAAU,EAAE,CAAC;wCACpD,OAAO,QAAQ,CAAC,kBAAkB,EAAE,CAAC;oCACzC,CAAC;gCACL,CAAC,CAAC,EAAE;6BACP;yBACJ,CAAC,CAAC;oBACP,CAAC,CAAC,EAAE;iBACP,CAAC,CAAC;gBAEH,MAAM,QAAQ,CAAC,aAAa,CAAC;YACjC,CAAC,CAAC;SACL,CAAC,CAAC;IACP,CAAC;IAED,MAAM,CAAC,iBAAiB;QACpB,MAAM,aAAa,GAAG,CAAC,KAAK,EAAC,KAAK,EAAC,EAAE;YACjC,MAAM,QAAQ,GAAG,IAAA,aAAM,EAAC,IAAI,CAAC,CAAC;YAC9B,MAAM,MAAM,GAAG,IAAA,aAAM,EAAC,eAAM,CAAC,CAAC;YAE9B,MAAM,QAAQ,CAAC,aAAa,CAAC;YAE7B,MAAM,IAAI,GAAG,uBAAA,QAAQ,oEAAS,MAAjB,QAAQ,EAAU,EAAE,UAAU,EAAE,mBAAmB,EAAE,CAAC,CAAC;YAEpE,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC;gBACvB,MAAM,WAAW,GAAG,MAAM,CAAC,YAAY,CACnC,MAAM,CAAC,aAAa,CAChB,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,EAC1B;oBACI,WAAW,EAAE,KAAK,CAAC,WAAW;oBAC9B,QAAQ,EAAE,KAAK,CAAC,QAAQ,IAAI,SAAS;iBACxC,CACJ,CACJ,CAAC;gBAEF,MAAM,2BAA2B,GAC7B,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,WAAW,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;gBAExE,MAAM,IAAI,CAAC,KAAK,CAAC;oBACb,2BAA2B;oBAC3B,WAAW;iBACd,CAAC,CAAC;YACP,CAAC;YAED,OAAO,IAAI,CAAC;QAChB,CAAC,CAAyB,CAAC;QAC3B,OAAO,aAAa,CAAC;IACzB,CAAC;IAqDD,IAAI,mBAAmB;QACnB,MAAM,KAAK,GAAG,uBAAA,IAAI,qEAAU,MAAd,IAAI,EAAW,EAAE,UAAU,EAAE,qBAAqB,EAAE,CAAC,CAAC;QACpE,OAAO,KAAK,CAAC,mBAAmB,CAAC;IACrC,CAAC;IAwBD,IAAI,SAAS;QACT,OAAO,uBAAA,IAAI,oEAAS,MAAb,IAAI,EAAU,EAAE,UAAU,EAAE,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC;IACvE,CAAC;IAED,IAAI,QAAQ;QACR,OAAO,uBAAA,IAAI,oEAAS,MAAb,IAAI,EAAU,EAAE,UAAU,EAAE,UAAU,EAAE,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC;IACrE,CAAC;IAED,IAAI,cAAc;QACd,OAAO,uBAAA,IAAI,oEAAS,MAAb,IAAI,EAAU,EAAE,UAAU,EAAE,gBAAgB,EAAE,CAAC,CAAC,cAAc,CAAC;IAC1E,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,MAkBX;QACG,MAAM,IAAI,CAAC,aAAa,CAAC;QAEzB,MAAM,IAAI,GAAG,uBAAA,IAAI,oEAAS,MAAb,IAAI,EAAU,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC,CAAC;QAEpD,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;YACtB,MAAM,IAAI,KAAK,CACX;gBACI,6DAA6D;gBAC7D,gEAAgE;gBAChE,mCAAmC;aACtC,CAAC,IAAI,CAAC,GAAG,CAAC,CACd,CAAC;QACN,CAAC;QAED,OAAO,IAAI,CAAC,KAAK,CAAC;YACd,GAAG,MAAM;YACT,2BAA2B,EAAE,KAAK;SACrC,CAAC,CAAC;IACP,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,MAEjB;QACG,MAAM,IAAI,CAAC,aAAa,CAAC;QAEzB,MAAM,IAAI,GAAG,uBAAA,IAAI,oEAAS,MAAb,IAAI,EAAU,EAAE,UAAU,EAAE,aAAa,EAAE,CAAC,CAAC;QAE1D,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC;YACvB,MAAM,IAAI,KAAK,CAAC,+DAA+D,CAAC,CAAC;QACrF,CAAC;QAED,OAAO,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;IACpC,CAAC;IAED,KAAK,CAAC,MAAM,CACR,MAA6F;QAE7F,MAAM,IAAI,CAAC,aAAa,CAAC;QAEzB,MAAM,IAAI,GAAG,uBAAA,IAAI,oEAAS,MAAb,IAAI,EAAU,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC,CAAC;QAErD,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC;YACvB,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAC;QAChF,CAAC;QAED,OAAO,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC/B,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,MAIpB;QACG,MAAM,IAAI,CAAC,aAAa,CAAC;QAEzB,MAAM,IAAI,GAAG,uBAAA,IAAI,oEAAS,MAAb,IAAI,EAAU,EAAE,UAAU,EAAE,gBAAgB,EAAE,CAAC,CAAC;QAE7D,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC;YACvB,MAAM,IAAI,KAAK,CAAC,kEAAkE,CAAC,CAAC;QACxF,CAAC;QAED,OAAO,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;IACvC,CAAC;IA4DD,KAAK,CAAC,cAAc;QAGhB,MAAM,IAAI,CAAC,aAAa,CAAC;QAEzB,MAAM,IAAI,GAAG,uBAAA,IAAI,oEAAS,MAAb,IAAI,EAAU,EAAE,UAAU,EAAE,gBAAgB,EAAE,CAAC,CAAC;QAE7D,OAAO,IAAI,CAAC,cAAc;YACtB,CAAC,CAAC,EAAE,cAAc,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,MAAM,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,WAAW,EAAE;YAC7E,CAAC,CAAC;gBACI,cAAc,EAAE,KAAK;aACxB,CAAC;IACZ,CAAC;IA8BD,IAAI,mBAAmB;QACnB,MAAM,IAAI,GAAG,uBAAA,IAAI,oEAAS,MAAb,IAAI,EAAU,EAAE,UAAU,EAAE,qBAAqB,EAAE,CAAC,CAAC;QAElE,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC;YACvB,MAAM,IAAI,KAAK,CAAC,sEAAsE,CAAC,CAAC;QAC5F,CAAC;QAED,OAAO,IAAI,CAAC,mBAAmB,CAAC;IACpC,CAAC;CACJ;AAraD,kDAqaC;+OAnRe,MAEX;IACG,MAAM,EAAE,2BAA2B,EAAE,GAAG,MAAM,CAAC;IAE/C,2BAA2B,CAAC,IAAI,CAAC,yBAAyB,CAAC,EAAE;QACzD,IAAI,mBAAmB,GAAwC,SAAS,CAAC;QACzE,IAAI,IAAI,GAAuC,SAAS,CAAC;QAEzD,IAAI,yBAAyB,YAAY,KAAK,EAAE,CAAC;YAC7C,mBAAmB,GAAG,yBAAyB,CAAC;QACpD,CAAC;aAAM,CAAC;YACJ,IAAI,GAAG,yBAAyB,CAAC;YACjC,mBAAmB,GAAG,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC;QACrF,CAAC;QAED,uBAAA,IAAI,mCAAQ,CAAC,OAAO,CAAC;YACjB,IAAI;YACJ,mBAAmB;SACtB,CAAC,CAAC;IACP,CAAC,CAAC,CAAC;AACP,CAAC,uIAEwC,MAA8B;IACnE,MAAM,EAAE,UAAU,EAAE,GAAG,MAAM,CAAC;IAC9B,OAAO;QACH,aAAa,UAAU,yBAAyB;QAChD,gCAAgC;QAChC,6CAA6C;QAC7C,gDAAgD;QAChD,uDAAuD;QACvD,0EAA0E;KAC7E,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAChB,CAAC,yEAES,MAA8B;IACpC,MAAM,EAAE,UAAU,EAAE,GAAG,MAAM,CAAC;IAC9B,MAAM,EAAE,WAAW,EAAE,KAAK,EAAE,GAAG,uBAAA,IAAI,mCAAQ,CAAC,QAAQ,EAAE,CAAC;IACvD,IAAI,CAAC,WAAW,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CAAC,uBAAA,IAAI,oGAAyC,MAA7C,IAAI,EAA0C,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC;IACnF,CAAC;IACD,OAAO,KAAK,CAAC;AACjB,CAAC,iKAOqD,MAA8B;IAChF,MAAM,EAAE,UAAU,EAAE,GAAG,MAAM,CAAC;IAE9B,OAAO;QACH,aAAa,UAAU,0CAA0C;QACjE,kEAAkE;QAClE,gCAAgC;QAChC,uDAAuD;KAC1D,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAChB,CAAC,uEAEQ,MAA8B;IACnC,MAAM,EAAE,UAAU,EAAE,GAAG,MAAM,CAAC;IAC9B,MAAM,KAAK,GAAG,uBAAA,IAAI,qEAAU,MAAd,IAAI,EAAW,EAAE,UAAU,EAAE,CAAC,CAAC;IAC7C,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC3B,wBAAwB;QACxB,IAAA,cAAM,EAAC,KAAK,CAAC,mBAAmB,KAAK,SAAS,CAAC,CAAC;QAChD,MAAM,IAAI,KAAK,CAAC,uBAAA,IAAI,iHAAsD,MAA1D,IAAI,EAAuD,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC;IAChG,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC;AACtB,CAAC"}

package/core/createOidc.d.ts

@@ -1,6 +1,13 @@
 import type { OidcMetadata } from "./OidcMetadata";
 import type { Oidc } from "./Oidc";
 export type ParamsOfCreateOidc<DecodedIdToken extends Record<string, unknown> = Oidc.Tokens.DecodedIdToken_base, AutoLogin extends boolean = false> = {
+    /**
+     * What should you put in this parameter?
+     *   - Vite project:             `BASE_URL: import.meta.env.BASE_URL`
+     *   - Create React App project: `BASE_URL: process.env.PUBLIC_URL`
+     *   - Other:                    `BASE_URL: "/"` (Usually, or `/dashboard` if your app is not at the root of the domain)
+     */
+    homeUrl: string;
     issuerUri: string;
     clientId: string;
     /**
@@ -56,13 +63,6 @@ export type ParamsOfCreateOidc<DecodedIdToken extends Record<string, unknown> =
      * This parameter can also be passed to login() directly as `redirectUrl`.
      */
     postLoginRedirectUrl?: string;
-    /**
-     * What should you put in this parameter?
-     *   - Vite project:             `BASE_URL: import.meta.env.BASE_URL`
-     *   - Create React App project: `BASE_URL: process.env.PUBLIC_URL`
-     *   - Other:                    `BASE_URL: "/"` (Usually, or `/dashboard` if your app is not at the root of the domain)
-     */
-    homeUrl: string;
     decodedIdTokenSchema?: {
         parse: (decodedIdToken_original: Oidc.Tokens.DecodedIdToken_base) => DecodedIdToken;
     };

package/core/createOidc.js

@@ -63,7 +63,7 @@ const getIsOnline_1 = require("../tools/getIsOnline");
 const isKeycloak_1 = require("../keycloak/isKeycloak");
 const INFINITY_TIME_1 = require("../tools/INFINITY_TIME");
 // NOTE: Replaced at build time
-const VERSION = "8.0.5";
+const VERSION = "8.1.0";
 const globalContext = {
     prOidcByConfigId: new Map(),
     hasLogoutBeenCalled: (0, tsafe_1.id)(false),
@@ -1120,7 +1120,6 @@ async function createOidc_nonMemoized(params, preProcessedParams) {
                     const { secondsLeft } = params;
                     Array.from(autoLogoutCountdownTickCallbacks).forEach(tickCallback => tickCallback({ secondsLeft }));
                 };
-                invokeAllCallbacks({ secondsLeft });
                 if (secondsLeft === 0) {
                     cancel_if_offline: {
                         const { isOnline, prOnline } = (0, getIsOnline_1.getIsOnline)();
@@ -1148,6 +1147,7 @@ async function createOidc_nonMemoized(params, preProcessedParams) {
                     }
                     await oidc_loggedIn.logout(autoLogoutParams);
                 }
+                invokeAllCallbacks({ secondsLeft });
             }
         });
         let stopCountdown = undefined;