oidc-spa 8.3.0 → 8.3.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/core/createOidc.js +1 -1
- package/core/earlyInit.js +19 -7
- package/core/earlyInit.js.map +1 -1
- package/esm/core/createOidc.js +1 -1
- package/esm/core/earlyInit.js +19 -7
- package/esm/core/earlyInit.js.map +1 -1
- package/package.json +1 -1
- package/src/core/earlyInit.ts +22 -7
package/core/createOidc.js
CHANGED
|
@@ -71,7 +71,7 @@ const instancesThatCantUseIframes_1 = require("./instancesThatCantUseIframes");
|
|
|
71
71
|
const desiredPostLoginRedirectUrl_1 = require("./desiredPostLoginRedirectUrl");
|
|
72
72
|
const homeAndRedirectUri_1 = require("./homeAndRedirectUri");
|
|
73
73
|
// NOTE: Replaced at build time
|
|
74
|
-
const VERSION = "8.3.
|
|
74
|
+
const VERSION = "8.3.1";
|
|
75
75
|
const globalContext = {
|
|
76
76
|
prOidcByConfigId: new Map(),
|
|
77
77
|
hasLogoutBeenCalled: (0, id_1.id)(false)
|
package/core/earlyInit.js
CHANGED
|
@@ -25,11 +25,14 @@ function oidcEarlyInit(params) {
|
|
|
25
25
|
const { shouldLoadApp } = handleOidcCallback({ isPostLoginRedirectManual });
|
|
26
26
|
if (shouldLoadApp) {
|
|
27
27
|
const createWriteError = (target) => new Error([
|
|
28
|
-
`oidc-spa: ${target} has been
|
|
29
|
-
"
|
|
30
|
-
"
|
|
31
|
-
"
|
|
32
|
-
"
|
|
28
|
+
`oidc-spa: Monkey patching of ${target} has been blocked for security reasons.`,
|
|
29
|
+
"You can disable this restriction by setting `safeMode: false` in `oidcEarlyInit()`",
|
|
30
|
+
"or in your Vite plugin configuration,",
|
|
31
|
+
"but please note this will reduce security.",
|
|
32
|
+
"If you believe this restriction is too strict, please open an issue at:",
|
|
33
|
+
"https://github.com/keycloakify/oidc-spa",
|
|
34
|
+
"We're still identifying real-world blockers and can safely add exceptions where needed.",
|
|
35
|
+
"For now, we prefer to err on the side of hardening rather than exposure."
|
|
33
36
|
].join(" "));
|
|
34
37
|
for (const name of [
|
|
35
38
|
"fetch",
|
|
@@ -82,8 +85,17 @@ function oidcEarlyInit(params) {
|
|
|
82
85
|
const original = window[name];
|
|
83
86
|
if ("prototype" in original) {
|
|
84
87
|
for (const propertyName of Object.getOwnPropertyNames(original.prototype)) {
|
|
85
|
-
if (name === "Object"
|
|
86
|
-
|
|
88
|
+
if (name === "Object") {
|
|
89
|
+
if (propertyName === "toString" ||
|
|
90
|
+
propertyName === "constructor" ||
|
|
91
|
+
propertyName === "valueOf") {
|
|
92
|
+
continue;
|
|
93
|
+
}
|
|
94
|
+
}
|
|
95
|
+
if (name === "Array") {
|
|
96
|
+
if (propertyName === "constructor" || propertyName === "concat") {
|
|
97
|
+
continue;
|
|
98
|
+
}
|
|
87
99
|
}
|
|
88
100
|
const pd = Object.getOwnPropertyDescriptor(original.prototype, propertyName);
|
|
89
101
|
(0, assert_1.assert)(pd !== undefined);
|
package/core/earlyInit.js.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"earlyInit.js","sourceRoot":"","sources":["../src/core/earlyInit.ts"],"names":[],"mappings":";;AAaA,
|
|
1
|
+
{"version":3,"file":"earlyInit.js","sourceRoot":"","sources":["../src/core/earlyInit.ts"],"names":[],"mappings":";;AAaA,sCAoPC;AAID,4DAEC;AAID,0DAaC;AAID,kFAGC;AA/RD,2CAAqE;AACrE,kDAA4D;AAE5D,2GAA+G;AAC/G,yCAAyC;AACzC,uDAA2D;AAC3D,kDAA+C;AAC/C,sCAAmD;AAEnD,IAAI,sBAAsB,GAAG,KAAK,CAAC;AAEnC,MAAM,qBAAqB,GAAG,kCAAkC,CAAC;AAEjE,SAAgB,aAAa,CAAC,MAQ7B;IACG,IAAI,sBAAsB,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;IAC5E,CAAC;IAED,sBAAsB,GAAG,IAAI,CAAC;IAE9B,IAAI,CAAC,qBAAS,EAAE,CAAC;QACb,OAAO,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC;IACnC,CAAC;IAED,MAAM,EACF,WAAW,EACX,oBAAoB,EACpB,eAAe,EACf,aAAa,EACb,QAAQ,GAAG,KAAK,EAChB,yBAAyB,GAAG,KAAK,EACjC,QAAQ,EACX,GAAG,MAAM,CAAC;IAEX,MAAM,EAAE,aAAa,EAAE,GAAG,kBAAkB,CAAC,EAAE,yBAAyB,EAAE,CAAC,CAAC;IAE5E,IAAI,aAAa,EAAE,CAAC;QAChB,MAAM,gBAAgB,GAAG,CAAC,MAAc,EAAE,EAAE,CACxC,IAAI,KAAK,CACL;YACI,gCAAgC,MAAM,yCAAyC;YAC/E,oFAAoF;YACpF,uCAAuC;YACvC,4CAA4C;YAC5C,yEAAyE;YACzE,yCAAyC;YACzC,yFAAyF;YACzF,0EAA0E;SAC7E,CAAC,IAAI,CAAC,GAAG,CAAC,CACd,CAAC;QAEN,KAAK,MAAM,IAAI,IAAI;YACf,OAAO;YACP,gBAAgB;YAChB,WAAW;YACX,QAAQ;YACR,QAAQ;YACR,SAAS;YACT,OAAO;YACP,QAAQ;YACR,aAAa;YACb,YAAY;YACZ,aAAa;YACb,UAAU;YACV,SAAS;YACT,MAAM;YACN,oBAAoB;YACpB,oBAAoB;YACpB,MAAM;YACN,MAAM;SACA,EAAE,CAAC;YACT,MAAM,MAAM,GAAG,CAAC,GAAG,EAAE;gBACjB,QAAQ,IAAI,EAAE,CAAC;oBACX,KAAK,gBAAgB;wBACjB,IAAI,oBAAoB,KAAK,SAAS,EAAE,CAAC;4BACrC,OAAO,CAAC,oBAAoB,CAAC;wBACjC,CAAC;wBACD,MAAM;oBACV,KAAK,OAAO;wBACR,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;4BAC5B,OAAO,CAAC,WAAW,CAAC;wBACxB,CAAC;wBACD,MAAM;oBACV,KAAK,WAAW;wBACZ,IAAI,eAAe,KAAK,SAAS,EAAE,CAAC;4BAChC,OAAO,CAAC,eAAe,CAAC;wBAC5B,CAAC;wBACD,MAAM;oBACV,KAAK,SAAS;wBACV,IAAI,aAAa,KAAK,SAAS,EAAE,CAAC;4BAC9B,OAAO,CAAC,aAAa,CAAC;wBAC1B,CAAC;wBACD,MAAM;gBACd,CAAC;gBAED,OAAO,CAAC,QAAQ,CAAC;YACrB,CAAC,CAAC,EAAE,CAAC;YAEL,IAAI,MAAM,EAAE,CAAC;gBACT,SAAS;YACb,CAAC;YAED,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;YAE9B,IAAI,WAAW,IAAI,QAAQ,EAAE,CAAC;gBAC1B,KAAK,MAAM,YAAY,IAAI,MAAM,CAAC,mBAAmB,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;oBACxE,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;wBACpB,IACI,YAAY,KAAK,UAAU;4BAC3B,YAAY,KAAK,aAAa;4BAC9B,YAAY,KAAK,SAAS,EAC5B,CAAC;4BACC,SAAS;wBACb,CAAC;oBACL,CAAC;oBAED,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;wBACnB,IAAI,YAAY,KAAK,aAAa,IAAI,YAAY,KAAK,QAAQ,EAAE,CAAC;4BAC9D,SAAS;wBACb,CAAC;oBACL,CAAC;oBAED,MAAM,EAAE,GAAG,MAAM,CAAC,wBAAwB,CAAC,QAAQ,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC;oBAE7E,IAAA,eAAM,EAAC,EAAE,KAAK,SAAS,CAAC,CAAC;oBAEzB,IAAI,CAAC,EAAE,CAAC,YAAY,EAAE,CAAC;wBACnB,SAAS;oBACb,CAAC;oBAED,MAAM,CAAC,cAAc,CAAC,QAAQ,CAAC,SAAS,EAAE,YAAY,EAAE;wBACpD,UAAU,EAAE,EAAE,CAAC,UAAU;wBACzB,YAAY,EAAE,KAAK;wBACnB,GAAG,CAAC,OAAO,IAAI,EAAE;4BACb,CAAC,CAAC;gCACI,GAAG,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,KAAK;gCACnB,GAAG,EAAE,GAAG,EAAE;oCACN,MAAM,gBAAgB,CAAC,UAAU,IAAI,cAAc,YAAY,EAAE,CAAC,CAAC;gCACvE,CAAC;6BACJ;4BACH,CAAC,CAAC;gCACI,GAAG,EAAE,EAAE,CAAC,GAAG;gCACX,GAAG,EACC,EAAE,CAAC,GAAG;oCACN,CAAC,GAAG,EAAE;wCACF,MAAM,gBAAgB,CAClB,UAAU,IAAI,cAAc,YAAY,EAAE,CAC7C,CAAC;oCACN,CAAC,CAAC;6BACT,CAAC;qBACX,CAAC,CAAC;gBACP,CAAC;YACL,CAAC;YAED,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YAExB,MAAM,CAAC,cAAc,CAAC,MAAM,EAAE,IAAI,EAAE;gBAChC,YAAY,EAAE,KAAK;gBACnB,UAAU,EAAE,IAAI;gBAChB,GAAG,EAAE,GAAG,EAAE,CAAC,QAAQ;gBACnB,GAAG,EAAE,GAAG,EAAE;oBACN,MAAM,gBAAgB,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC;gBAC7C,CAAC;aACJ,CAAC,CAAC;QACP,CAAC;QAED,IAAI,QAAQ,EAAE,CAAC;YACX,KAAK,MAAM,IAAI,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,MAAM,CAAU,EAAE,CAAC;gBACpD,MAAM,QAAQ,GAAG,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;gBAE1C,MAAM,CAAC,cAAc,CAAC,QAAQ,CAAC,SAAS,EAAE,IAAI,EAAE;oBAC5C,YAAY,EAAE,KAAK;oBACnB,UAAU,EAAE,IAAI;oBAChB,GAAG,EAAE,GAAG,EAAE,CAAC,QAAQ;oBACnB,GAAG,EAAE,GAAG,EAAE;wBACN,MAAM,gBAAgB,CAAC,6BAA6B,IAAI,IAAI,CAAC,CAAC;oBAClE,CAAC;iBACJ,CAAC,CAAC;YACP,CAAC;QACL,CAAC;QAED,MAAM,gCAAgC,GAAG,CAAC,GAAG,EAAE;YAC3C,MAAM,EAAE,GAAG,MAAM,CAAC,wBAAwB,CAAC,YAAY,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;YAE3E,IAAA,eAAM,EAAC,EAAE,KAAK,SAAS,CAAC,CAAC;YAEzB,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC;YAEnB,IAAA,eAAM,EAAC,GAAG,KAAK,SAAS,CAAC,CAAC;YAE1B,OAAO,GAAG,CAAC;QACf,CAAC,CAAC,EAAE,CAAC;QAEL,MAAM,kCAAkC,GAAG,CAAC,GAAG,EAAE;YAC7C,MAAM,EAAE,GAAG,MAAM,CAAC,wBAAwB,CAAC,YAAY,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;YAE7E,IAAA,eAAM,EAAC,EAAE,KAAK,SAAS,CAAC,CAAC;YAEzB,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC;YAEnB,IAAA,eAAM,EAAC,GAAG,KAAK,SAAS,CAAC,CAAC;YAE1B,OAAO,GAAG,CAAC;QACf,CAAC,CAAC,EAAE,CAAC;QAEL,MAAM,+CAA+C,GAAG,KAAK,CAAC,SAAS,CAAC,wBAAwB,CAAC;QAEjG,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC;QAEtC,MAAM,CAAC,gBAAgB,CACnB,SAAS,EACT,KAAK,CAAC,EAAE;YACJ,IAAI,kCAAkC,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,MAAM,EAAE,CAAC;gBAC5D,OAAO;YACX,CAAC;YAED,MAAM,SAAS,GAAY,gCAAgC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAExE,IAAI,OAAO,SAAS,KAAK,QAAQ,EAAE,CAAC;gBAChC,OAAO;YACX,CAAC;YAED,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,qBAAqB,CAAC,EAAE,CAAC;gBAC/C,OAAO;YACX,CAAC;YAED,+CAA+C,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAE5D,MAAM,YAAY,GAAiB,IAAI,CAAC,KAAK,CACzC,SAAS,CAAC,KAAK,CAAC,qBAAqB,CAAC,MAAM,CAAC,CAChD,CAAC;YAEF,CAAC,qBAAqB,KAArB,qBAAqB,GAAK,IAAA,eAAS,GAAE,EAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QAC/D,CAAC,EACD;YACI,OAAO,EAAE,IAAI;YACb,IAAI,EAAE,KAAK;YACX,OAAO,EAAE,KAAK;SACjB,CACJ,CAAC;QAEF,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YACzB,IAAA,sBAAW,EAAC,EAAE,QAAQ,EAAE,CAAC,CAAC;QAC9B,CAAC;IACL,CAAC;IAED,IAAA,wCAAsB,EAAC,EAAE,aAAa,EAAE,CAAC,CAAC;IAE1C,OAAO,EAAE,aAAa,EAAE,CAAC;AAC7B,CAAC;AAED,IAAI,qBAAqB,GAAkC,SAAS,CAAC;AAErE,SAAgB,wBAAwB;IACpC,OAAO,CAAC,qBAAqB,KAArB,qBAAqB,GAAK,IAAA,eAAS,GAAE,EAAC,CAAC;AACnD,CAAC;AAED,IAAI,oBAAoB,GAA6B,SAAS,CAAC;AAE/D,SAAgB,uBAAuB;IAGnC,IAAA,eAAM,EAAC,sBAAsB,EAAE,UAAU,CAAC,CAAC;IAE3C,OAAO,oBAAoB,KAAK,SAAS;QACrC,CAAC,CAAC,EAAE,YAAY,EAAE,SAAS,EAAE;QAC7B,CAAC,CAAC;YACI,YAAY,EAAE,oBAAoB;YAClC,iBAAiB,EAAE,GAAG,EAAE;gBACpB,oBAAoB,GAAG,SAAS,CAAC;YACrC,CAAC;SACJ,CAAC;AACZ,CAAC;AAED,IAAI,gCAAgC,GAAuB,SAAS,CAAC;AAErE,SAAgB,mCAAmC;IAC/C,IAAA,eAAM,EAAC,gCAAgC,KAAK,SAAS,EAAE,QAAQ,CAAC,CAAC;IACjE,OAAO,gCAAgC,CAAC;AAC5C,CAAC;AAED,SAAS,kBAAkB,CAAC,MAA+C;IAGvE,MAAM,EAAE,yBAAyB,EAAE,GAAG,MAAM,CAAC;IAE7C,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IAEtD,MAAM,sBAAsB,GAAG,CAAC,GAAG,EAAE;QACjC,QAAQ,EAAE,CAAC;YACP,MAAM,kBAAkB,GAAG,IAAI,eAAe,CAAC,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CACtF,OAAO,CACV,CAAC;YAEF,IAAI,kBAAkB,KAAK,IAAI,EAAE,CAAC;gBAC9B,MAAM,QAAQ,CAAC;YACnB,CAAC;YAED,IAAI,CAAC,IAAA,oCAAwB,EAAC,EAAE,uBAAuB,EAAE,kBAAkB,EAAE,CAAC,EAAE,CAAC;gBAC7E,MAAM,QAAQ,CAAC;YACnB,CAAC;YAED,OAAO,EAAE,oBAAoB,EAAE,IAAI,EAAE,YAAY,EAAE,UAAU,EAAW,CAAC;QAC7E,CAAC;QAED,KAAK,EAAE,CAAC;YACJ,MAAM,kBAAkB,GAAG,eAAe,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YAErE,IAAI,kBAAkB,KAAK,IAAI,EAAE,CAAC;gBAC9B,MAAM,KAAK,CAAC;YAChB,CAAC;YAED,IAAI,CAAC,IAAA,oCAAwB,EAAC,EAAE,uBAAuB,EAAE,kBAAkB,EAAE,CAAC,EAAE,CAAC;gBAC7E,MAAM,KAAK,CAAC;YAChB,CAAC;YAED,IACI,eAAe,CAAC,YAAY,CAAC,GAAG,CAAC,WAAW,CAAC,KAAK,IAAI;gBACtD,eAAe,CAAC,YAAY,CAAC,GAAG,CAAC,eAAe,CAAC,KAAK,IAAI;gBAC1D,eAAe,CAAC,YAAY,CAAC,GAAG,CAAC,cAAc,CAAC,KAAK,IAAI,EAC3D,CAAC;gBACC,mFAAmF;gBACnF,MAAM,KAAK,CAAC;YAChB,CAAC;YAED,OAAO,EAAE,oBAAoB,EAAE,IAAI,EAAE,YAAY,EAAE,OAAO,EAAW,CAAC;QAC1E,CAAC;QAED,OAAO,EAAE,oBAAoB,EAAE,KAAK,EAAW,CAAC;IACpD,CAAC,CAAC,EAAE,CAAC;IAEL,IAAI,CAAC,sBAAsB,CAAC,oBAAoB,EAAE,CAAC;QAC/C,gCAAgC,GAAG,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAC7F,OAAO,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC;IACnC,CAAC;IAED,gCAAgC,GAAG,eAAe,CAAC,QAAQ,CAAC;IAE5D,MAAM,EAAE,YAAY,EAAE,GAAG,CAAC,GAAG,EAAE;QAC3B,MAAM,YAAY,GAAiB,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;QAEjD,MAAM,YAAY,GAAG,CAAC,GAAG,EAAE;YACvB,QAAQ,sBAAsB,CAAC,YAAY,EAAE,CAAC;gBAC1C,KAAK,UAAU;oBACX,OAAO,IAAI,eAAe,CAAC,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC;gBACvE,KAAK,OAAO;oBACR,OAAO,eAAe,CAAC,YAAY,CAAC;gBACxC;oBACI,IAAA,eAAM,EAA+C,KAAK,CAAC,CAAC;YACpE,CAAC;QACL,CAAC,CAAC,EAAE,CAAC;QAEL,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,YAAY,EAAE,CAAC;YACtC,YAAY,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QAC9B,CAAC;QAED,IAAA,eAAM,EAAC,YAAY,CAAC,KAAK,KAAK,EAAE,EAAE,QAAQ,CAAC,CAAC;QAE5C,OAAO,EAAE,YAAY,EAAE,CAAC;IAC5B,CAAC,CAAC,EAAE,CAAC;IAEL,MAAM,SAAS,GAAG,IAAA,wBAAY,EAAC,EAAE,kBAAkB,EAAE,YAAY,CAAC,KAAK,EAAE,CAAC,CAAC;IAE3E,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;QAC1B,OAAO,CAAC,YAAY,CAAC,EAAE,EAAE,EAAE,EAAE,gCAAgC,CAAC,CAAC;QAC/D,OAAO,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC;IACnC,CAAC;IAED,QAAQ,SAAS,CAAC,OAAO,EAAE,CAAC;QACxB,KAAK,QAAQ;YACT,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;gBACjB,MAAM,YAAY,GAAG;oBACjB,qEAAqE;oBACrE,yFAAyF;iBAC5F,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBACZ,KAAK,CAAC,YAAY,CAAC,CAAC;gBAEpB,MAAM,IAAI,KAAK,CAAC,YAAY,CAAC,CAAC;YAClC,CAAC;YACD,MAAM,CAAC,WAAW,CACd,GAAG,qBAAqB,GAAG,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,EAAE,EACzD,QAAQ,CAAC,MAAM,CAClB,CAAC;YACF,OAAO,EAAE,aAAa,EAAE,KAAK,EAAE,CAAC;QACpC,KAAK,UAAU,CAAC,CAAC,CAAC;YACd,oBAAoB,GAAG,YAAY,CAAC;YAEpC,MAAM,uBAAuB,GAAG,CAAC,GAAG,EAAE;gBAClC,IAAI,SAAS,CAAC,MAAM,KAAK,OAAO,IAAI,YAAY,CAAC,KAAK,KAAK,kBAAkB,EAAE,CAAC;oBAC5E,OAAO,SAAS,CAAC,2CAA2C,CAAC;gBACjE,CAAC;gBACD,OAAO,SAAS,CAAC,uBAAuB,CAAC;YAC7C,CAAC,CAAC,EAAE,CAAC;YAEL,IAAI,yBAAyB,EAAE,CAAC;gBAC5B,IAAA,4FAAgD,EAAC,EAAE,uBAAuB,EAAE,CAAC,CAAC;gBAC9E,OAAO,CAAC,YAAY,CAAC,EAAE,EAAE,EAAE,EAAE,gCAAgC,CAAC,CAAC;YACnE,CAAC;iBAAM,CAAC;gBACJ,OAAO,CAAC,YAAY,CAAC,EAAE,EAAE,EAAE,EAAE,uBAAuB,CAAC,CAAC;YAC1D,CAAC;YAED,OAAO,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC;QACnC,CAAC;QACD;YACI,IAAA,eAAM,EAAkC,KAAK,CAAC,CAAC;IACvD,CAAC;AACL,CAAC"}
|
package/esm/core/createOidc.js
CHANGED
|
@@ -34,7 +34,7 @@ import { evtIsThereMoreThanOneInstanceThatCantUserIframes, notifyNewInstanceThat
|
|
|
34
34
|
import { getDesiredPostLoginRedirectUrl } from "./desiredPostLoginRedirectUrl";
|
|
35
35
|
import { getHomeAndRedirectUri } from "./homeAndRedirectUri";
|
|
36
36
|
// NOTE: Replaced at build time
|
|
37
|
-
const VERSION = "8.3.
|
|
37
|
+
const VERSION = "8.3.1";
|
|
38
38
|
const globalContext = {
|
|
39
39
|
prOidcByConfigId: new Map(),
|
|
40
40
|
hasLogoutBeenCalled: id(false)
|
package/esm/core/earlyInit.js
CHANGED
|
@@ -19,11 +19,14 @@ export function oidcEarlyInit(params) {
|
|
|
19
19
|
const { shouldLoadApp } = handleOidcCallback({ isPostLoginRedirectManual });
|
|
20
20
|
if (shouldLoadApp) {
|
|
21
21
|
const createWriteError = (target) => new Error([
|
|
22
|
-
`oidc-spa: ${target} has been
|
|
23
|
-
"
|
|
24
|
-
"
|
|
25
|
-
"
|
|
26
|
-
"
|
|
22
|
+
`oidc-spa: Monkey patching of ${target} has been blocked for security reasons.`,
|
|
23
|
+
"You can disable this restriction by setting `safeMode: false` in `oidcEarlyInit()`",
|
|
24
|
+
"or in your Vite plugin configuration,",
|
|
25
|
+
"but please note this will reduce security.",
|
|
26
|
+
"If you believe this restriction is too strict, please open an issue at:",
|
|
27
|
+
"https://github.com/keycloakify/oidc-spa",
|
|
28
|
+
"We're still identifying real-world blockers and can safely add exceptions where needed.",
|
|
29
|
+
"For now, we prefer to err on the side of hardening rather than exposure."
|
|
27
30
|
].join(" "));
|
|
28
31
|
for (const name of [
|
|
29
32
|
"fetch",
|
|
@@ -76,8 +79,17 @@ export function oidcEarlyInit(params) {
|
|
|
76
79
|
const original = window[name];
|
|
77
80
|
if ("prototype" in original) {
|
|
78
81
|
for (const propertyName of Object.getOwnPropertyNames(original.prototype)) {
|
|
79
|
-
if (name === "Object"
|
|
80
|
-
|
|
82
|
+
if (name === "Object") {
|
|
83
|
+
if (propertyName === "toString" ||
|
|
84
|
+
propertyName === "constructor" ||
|
|
85
|
+
propertyName === "valueOf") {
|
|
86
|
+
continue;
|
|
87
|
+
}
|
|
88
|
+
}
|
|
89
|
+
if (name === "Array") {
|
|
90
|
+
if (propertyName === "constructor" || propertyName === "concat") {
|
|
91
|
+
continue;
|
|
92
|
+
}
|
|
81
93
|
}
|
|
82
94
|
const pd = Object.getOwnPropertyDescriptor(original.prototype, propertyName);
|
|
83
95
|
assert(pd !== undefined);
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"earlyInit.js","sourceRoot":"","sources":["../../src/core/earlyInit.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,wBAAwB,EAAE,MAAM,aAAa,CAAC;AACrE,OAAO,EAAE,MAAM,EAAe,MAAM,uBAAuB,CAAC;AAE5D,OAAO,EAAE,gDAAgD,EAAE,MAAM,6CAA6C,CAAC;AAC/G,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AACzC,OAAO,EAAE,sBAAsB,EAAE,MAAM,mBAAmB,CAAC;AAC3D,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC/C,OAAO,EAAE,SAAS,EAAY,MAAM,cAAc,CAAC;AAEnD,IAAI,sBAAsB,GAAG,KAAK,CAAC;AAEnC,MAAM,qBAAqB,GAAG,kCAAkC,CAAC;AAEjE,MAAM,UAAU,aAAa,CAAC,MAQ7B;IACG,IAAI,sBAAsB,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;IAC5E,CAAC;IAED,sBAAsB,GAAG,IAAI,CAAC;IAE9B,IAAI,CAAC,SAAS,EAAE,CAAC;QACb,OAAO,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC;IACnC,CAAC;IAED,MAAM,EACF,WAAW,EACX,oBAAoB,EACpB,eAAe,EACf,aAAa,EACb,QAAQ,GAAG,KAAK,EAChB,yBAAyB,GAAG,KAAK,EACjC,QAAQ,EACX,GAAG,MAAM,CAAC;IAEX,MAAM,EAAE,aAAa,EAAE,GAAG,kBAAkB,CAAC,EAAE,yBAAyB,EAAE,CAAC,CAAC;IAE5E,IAAI,aAAa,EAAE,CAAC;QAChB,MAAM,gBAAgB,GAAG,CAAC,MAAc,EAAE,EAAE,CACxC,IAAI,KAAK,CACL;YACI,
|
|
1
|
+
{"version":3,"file":"earlyInit.js","sourceRoot":"","sources":["../../src/core/earlyInit.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,wBAAwB,EAAE,MAAM,aAAa,CAAC;AACrE,OAAO,EAAE,MAAM,EAAe,MAAM,uBAAuB,CAAC;AAE5D,OAAO,EAAE,gDAAgD,EAAE,MAAM,6CAA6C,CAAC;AAC/G,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AACzC,OAAO,EAAE,sBAAsB,EAAE,MAAM,mBAAmB,CAAC;AAC3D,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC/C,OAAO,EAAE,SAAS,EAAY,MAAM,cAAc,CAAC;AAEnD,IAAI,sBAAsB,GAAG,KAAK,CAAC;AAEnC,MAAM,qBAAqB,GAAG,kCAAkC,CAAC;AAEjE,MAAM,UAAU,aAAa,CAAC,MAQ7B;IACG,IAAI,sBAAsB,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;IAC5E,CAAC;IAED,sBAAsB,GAAG,IAAI,CAAC;IAE9B,IAAI,CAAC,SAAS,EAAE,CAAC;QACb,OAAO,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC;IACnC,CAAC;IAED,MAAM,EACF,WAAW,EACX,oBAAoB,EACpB,eAAe,EACf,aAAa,EACb,QAAQ,GAAG,KAAK,EAChB,yBAAyB,GAAG,KAAK,EACjC,QAAQ,EACX,GAAG,MAAM,CAAC;IAEX,MAAM,EAAE,aAAa,EAAE,GAAG,kBAAkB,CAAC,EAAE,yBAAyB,EAAE,CAAC,CAAC;IAE5E,IAAI,aAAa,EAAE,CAAC;QAChB,MAAM,gBAAgB,GAAG,CAAC,MAAc,EAAE,EAAE,CACxC,IAAI,KAAK,CACL;YACI,gCAAgC,MAAM,yCAAyC;YAC/E,oFAAoF;YACpF,uCAAuC;YACvC,4CAA4C;YAC5C,yEAAyE;YACzE,yCAAyC;YACzC,yFAAyF;YACzF,0EAA0E;SAC7E,CAAC,IAAI,CAAC,GAAG,CAAC,CACd,CAAC;QAEN,KAAK,MAAM,IAAI,IAAI;YACf,OAAO;YACP,gBAAgB;YAChB,WAAW;YACX,QAAQ;YACR,QAAQ;YACR,SAAS;YACT,OAAO;YACP,QAAQ;YACR,aAAa;YACb,YAAY;YACZ,aAAa;YACb,UAAU;YACV,SAAS;YACT,MAAM;YACN,oBAAoB;YACpB,oBAAoB;YACpB,MAAM;YACN,MAAM;SACA,EAAE,CAAC;YACT,MAAM,MAAM,GAAG,CAAC,GAAG,EAAE;gBACjB,QAAQ,IAAI,EAAE,CAAC;oBACX,KAAK,gBAAgB;wBACjB,IAAI,oBAAoB,KAAK,SAAS,EAAE,CAAC;4BACrC,OAAO,CAAC,oBAAoB,CAAC;wBACjC,CAAC;wBACD,MAAM;oBACV,KAAK,OAAO;wBACR,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;4BAC5B,OAAO,CAAC,WAAW,CAAC;wBACxB,CAAC;wBACD,MAAM;oBACV,KAAK,WAAW;wBACZ,IAAI,eAAe,KAAK,SAAS,EAAE,CAAC;4BAChC,OAAO,CAAC,eAAe,CAAC;wBAC5B,CAAC;wBACD,MAAM;oBACV,KAAK,SAAS;wBACV,IAAI,aAAa,KAAK,SAAS,EAAE,CAAC;4BAC9B,OAAO,CAAC,aAAa,CAAC;wBAC1B,CAAC;wBACD,MAAM;gBACd,CAAC;gBAED,OAAO,CAAC,QAAQ,CAAC;YACrB,CAAC,CAAC,EAAE,CAAC;YAEL,IAAI,MAAM,EAAE,CAAC;gBACT,SAAS;YACb,CAAC;YAED,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;YAE9B,IAAI,WAAW,IAAI,QAAQ,EAAE,CAAC;gBAC1B,KAAK,MAAM,YAAY,IAAI,MAAM,CAAC,mBAAmB,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;oBACxE,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;wBACpB,IACI,YAAY,KAAK,UAAU;4BAC3B,YAAY,KAAK,aAAa;4BAC9B,YAAY,KAAK,SAAS,EAC5B,CAAC;4BACC,SAAS;wBACb,CAAC;oBACL,CAAC;oBAED,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;wBACnB,IAAI,YAAY,KAAK,aAAa,IAAI,YAAY,KAAK,QAAQ,EAAE,CAAC;4BAC9D,SAAS;wBACb,CAAC;oBACL,CAAC;oBAED,MAAM,EAAE,GAAG,MAAM,CAAC,wBAAwB,CAAC,QAAQ,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC;oBAE7E,MAAM,CAAC,EAAE,KAAK,SAAS,CAAC,CAAC;oBAEzB,IAAI,CAAC,EAAE,CAAC,YAAY,EAAE,CAAC;wBACnB,SAAS;oBACb,CAAC;oBAED,MAAM,CAAC,cAAc,CAAC,QAAQ,CAAC,SAAS,EAAE,YAAY,EAAE;wBACpD,UAAU,EAAE,EAAE,CAAC,UAAU;wBACzB,YAAY,EAAE,KAAK;wBACnB,GAAG,CAAC,OAAO,IAAI,EAAE;4BACb,CAAC,CAAC;gCACI,GAAG,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,KAAK;gCACnB,GAAG,EAAE,GAAG,EAAE;oCACN,MAAM,gBAAgB,CAAC,UAAU,IAAI,cAAc,YAAY,EAAE,CAAC,CAAC;gCACvE,CAAC;6BACJ;4BACH,CAAC,CAAC;gCACI,GAAG,EAAE,EAAE,CAAC,GAAG;gCACX,GAAG,EACC,EAAE,CAAC,GAAG;oCACN,CAAC,GAAG,EAAE;wCACF,MAAM,gBAAgB,CAClB,UAAU,IAAI,cAAc,YAAY,EAAE,CAC7C,CAAC;oCACN,CAAC,CAAC;6BACT,CAAC;qBACX,CAAC,CAAC;gBACP,CAAC;YACL,CAAC;YAED,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YAExB,MAAM,CAAC,cAAc,CAAC,MAAM,EAAE,IAAI,EAAE;gBAChC,YAAY,EAAE,KAAK;gBACnB,UAAU,EAAE,IAAI;gBAChB,GAAG,EAAE,GAAG,EAAE,CAAC,QAAQ;gBACnB,GAAG,EAAE,GAAG,EAAE;oBACN,MAAM,gBAAgB,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC;gBAC7C,CAAC;aACJ,CAAC,CAAC;QACP,CAAC;QAED,IAAI,QAAQ,EAAE,CAAC;YACX,KAAK,MAAM,IAAI,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,MAAM,CAAU,EAAE,CAAC;gBACpD,MAAM,QAAQ,GAAG,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;gBAE1C,MAAM,CAAC,cAAc,CAAC,QAAQ,CAAC,SAAS,EAAE,IAAI,EAAE;oBAC5C,YAAY,EAAE,KAAK;oBACnB,UAAU,EAAE,IAAI;oBAChB,GAAG,EAAE,GAAG,EAAE,CAAC,QAAQ;oBACnB,GAAG,EAAE,GAAG,EAAE;wBACN,MAAM,gBAAgB,CAAC,6BAA6B,IAAI,IAAI,CAAC,CAAC;oBAClE,CAAC;iBACJ,CAAC,CAAC;YACP,CAAC;QACL,CAAC;QAED,MAAM,gCAAgC,GAAG,CAAC,GAAG,EAAE;YAC3C,MAAM,EAAE,GAAG,MAAM,CAAC,wBAAwB,CAAC,YAAY,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;YAE3E,MAAM,CAAC,EAAE,KAAK,SAAS,CAAC,CAAC;YAEzB,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC;YAEnB,MAAM,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC;YAE1B,OAAO,GAAG,CAAC;QACf,CAAC,CAAC,EAAE,CAAC;QAEL,MAAM,kCAAkC,GAAG,CAAC,GAAG,EAAE;YAC7C,MAAM,EAAE,GAAG,MAAM,CAAC,wBAAwB,CAAC,YAAY,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;YAE7E,MAAM,CAAC,EAAE,KAAK,SAAS,CAAC,CAAC;YAEzB,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC;YAEnB,MAAM,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC;YAE1B,OAAO,GAAG,CAAC;QACf,CAAC,CAAC,EAAE,CAAC;QAEL,MAAM,+CAA+C,GAAG,KAAK,CAAC,SAAS,CAAC,wBAAwB,CAAC;QAEjG,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC;QAEtC,MAAM,CAAC,gBAAgB,CACnB,SAAS,EACT,KAAK,CAAC,EAAE;YACJ,IAAI,kCAAkC,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,MAAM,EAAE,CAAC;gBAC5D,OAAO;YACX,CAAC;YAED,MAAM,SAAS,GAAY,gCAAgC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAExE,IAAI,OAAO,SAAS,KAAK,QAAQ,EAAE,CAAC;gBAChC,OAAO;YACX,CAAC;YAED,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,qBAAqB,CAAC,EAAE,CAAC;gBAC/C,OAAO;YACX,CAAC;YAED,+CAA+C,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAE5D,MAAM,YAAY,GAAiB,IAAI,CAAC,KAAK,CACzC,SAAS,CAAC,KAAK,CAAC,qBAAqB,CAAC,MAAM,CAAC,CAChD,CAAC;YAEF,CAAC,qBAAqB,KAArB,qBAAqB,GAAK,SAAS,EAAE,EAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QAC/D,CAAC,EACD;YACI,OAAO,EAAE,IAAI;YACb,IAAI,EAAE,KAAK;YACX,OAAO,EAAE,KAAK;SACjB,CACJ,CAAC;QAEF,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YACzB,WAAW,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC;QAC9B,CAAC;IACL,CAAC;IAED,sBAAsB,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC;IAE1C,OAAO,EAAE,aAAa,EAAE,CAAC;AAC7B,CAAC;AAED,IAAI,qBAAqB,GAAkC,SAAS,CAAC;AAErE,MAAM,UAAU,wBAAwB;IACpC,OAAO,CAAC,qBAAqB,KAArB,qBAAqB,GAAK,SAAS,EAAE,EAAC,CAAC;AACnD,CAAC;AAED,IAAI,oBAAoB,GAA6B,SAAS,CAAC;AAE/D,MAAM,UAAU,uBAAuB;IAGnC,MAAM,CAAC,sBAAsB,EAAE,UAAU,CAAC,CAAC;IAE3C,OAAO,oBAAoB,KAAK,SAAS;QACrC,CAAC,CAAC,EAAE,YAAY,EAAE,SAAS,EAAE;QAC7B,CAAC,CAAC;YACI,YAAY,EAAE,oBAAoB;YAClC,iBAAiB,EAAE,GAAG,EAAE;gBACpB,oBAAoB,GAAG,SAAS,CAAC;YACrC,CAAC;SACJ,CAAC;AACZ,CAAC;AAED,IAAI,gCAAgC,GAAuB,SAAS,CAAC;AAErE,MAAM,UAAU,mCAAmC;IAC/C,MAAM,CAAC,gCAAgC,KAAK,SAAS,EAAE,QAAQ,CAAC,CAAC;IACjE,OAAO,gCAAgC,CAAC;AAC5C,CAAC;AAED,SAAS,kBAAkB,CAAC,MAA+C;IAGvE,MAAM,EAAE,yBAAyB,EAAE,GAAG,MAAM,CAAC;IAE7C,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IAEtD,MAAM,sBAAsB,GAAG,CAAC,GAAG,EAAE;QACjC,QAAQ,EAAE,CAAC;YACP,MAAM,kBAAkB,GAAG,IAAI,eAAe,CAAC,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CACtF,OAAO,CACV,CAAC;YAEF,IAAI,kBAAkB,KAAK,IAAI,EAAE,CAAC;gBAC9B,MAAM,QAAQ,CAAC;YACnB,CAAC;YAED,IAAI,CAAC,wBAAwB,CAAC,EAAE,uBAAuB,EAAE,kBAAkB,EAAE,CAAC,EAAE,CAAC;gBAC7E,MAAM,QAAQ,CAAC;YACnB,CAAC;YAED,OAAO,EAAE,oBAAoB,EAAE,IAAI,EAAE,YAAY,EAAE,UAAU,EAAW,CAAC;QAC7E,CAAC;QAED,KAAK,EAAE,CAAC;YACJ,MAAM,kBAAkB,GAAG,eAAe,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YAErE,IAAI,kBAAkB,KAAK,IAAI,EAAE,CAAC;gBAC9B,MAAM,KAAK,CAAC;YAChB,CAAC;YAED,IAAI,CAAC,wBAAwB,CAAC,EAAE,uBAAuB,EAAE,kBAAkB,EAAE,CAAC,EAAE,CAAC;gBAC7E,MAAM,KAAK,CAAC;YAChB,CAAC;YAED,IACI,eAAe,CAAC,YAAY,CAAC,GAAG,CAAC,WAAW,CAAC,KAAK,IAAI;gBACtD,eAAe,CAAC,YAAY,CAAC,GAAG,CAAC,eAAe,CAAC,KAAK,IAAI;gBAC1D,eAAe,CAAC,YAAY,CAAC,GAAG,CAAC,cAAc,CAAC,KAAK,IAAI,EAC3D,CAAC;gBACC,mFAAmF;gBACnF,MAAM,KAAK,CAAC;YAChB,CAAC;YAED,OAAO,EAAE,oBAAoB,EAAE,IAAI,EAAE,YAAY,EAAE,OAAO,EAAW,CAAC;QAC1E,CAAC;QAED,OAAO,EAAE,oBAAoB,EAAE,KAAK,EAAW,CAAC;IACpD,CAAC,CAAC,EAAE,CAAC;IAEL,IAAI,CAAC,sBAAsB,CAAC,oBAAoB,EAAE,CAAC;QAC/C,gCAAgC,GAAG,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAC7F,OAAO,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC;IACnC,CAAC;IAED,gCAAgC,GAAG,eAAe,CAAC,QAAQ,CAAC;IAE5D,MAAM,EAAE,YAAY,EAAE,GAAG,CAAC,GAAG,EAAE;QAC3B,MAAM,YAAY,GAAiB,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;QAEjD,MAAM,YAAY,GAAG,CAAC,GAAG,EAAE;YACvB,QAAQ,sBAAsB,CAAC,YAAY,EAAE,CAAC;gBAC1C,KAAK,UAAU;oBACX,OAAO,IAAI,eAAe,CAAC,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC;gBACvE,KAAK,OAAO;oBACR,OAAO,eAAe,CAAC,YAAY,CAAC;gBACxC;oBACI,MAAM,CAA+C,KAAK,CAAC,CAAC;YACpE,CAAC;QACL,CAAC,CAAC,EAAE,CAAC;QAEL,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,YAAY,EAAE,CAAC;YACtC,YAAY,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QAC9B,CAAC;QAED,MAAM,CAAC,YAAY,CAAC,KAAK,KAAK,EAAE,EAAE,QAAQ,CAAC,CAAC;QAE5C,OAAO,EAAE,YAAY,EAAE,CAAC;IAC5B,CAAC,CAAC,EAAE,CAAC;IAEL,MAAM,SAAS,GAAG,YAAY,CAAC,EAAE,kBAAkB,EAAE,YAAY,CAAC,KAAK,EAAE,CAAC,CAAC;IAE3E,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;QAC1B,OAAO,CAAC,YAAY,CAAC,EAAE,EAAE,EAAE,EAAE,gCAAgC,CAAC,CAAC;QAC/D,OAAO,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC;IACnC,CAAC;IAED,QAAQ,SAAS,CAAC,OAAO,EAAE,CAAC;QACxB,KAAK,QAAQ;YACT,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;gBACjB,MAAM,YAAY,GAAG;oBACjB,qEAAqE;oBACrE,yFAAyF;iBAC5F,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBACZ,KAAK,CAAC,YAAY,CAAC,CAAC;gBAEpB,MAAM,IAAI,KAAK,CAAC,YAAY,CAAC,CAAC;YAClC,CAAC;YACD,MAAM,CAAC,WAAW,CACd,GAAG,qBAAqB,GAAG,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,EAAE,EACzD,QAAQ,CAAC,MAAM,CAClB,CAAC;YACF,OAAO,EAAE,aAAa,EAAE,KAAK,EAAE,CAAC;QACpC,KAAK,UAAU,CAAC,CAAC,CAAC;YACd,oBAAoB,GAAG,YAAY,CAAC;YAEpC,MAAM,uBAAuB,GAAG,CAAC,GAAG,EAAE;gBAClC,IAAI,SAAS,CAAC,MAAM,KAAK,OAAO,IAAI,YAAY,CAAC,KAAK,KAAK,kBAAkB,EAAE,CAAC;oBAC5E,OAAO,SAAS,CAAC,2CAA2C,CAAC;gBACjE,CAAC;gBACD,OAAO,SAAS,CAAC,uBAAuB,CAAC;YAC7C,CAAC,CAAC,EAAE,CAAC;YAEL,IAAI,yBAAyB,EAAE,CAAC;gBAC5B,gDAAgD,CAAC,EAAE,uBAAuB,EAAE,CAAC,CAAC;gBAC9E,OAAO,CAAC,YAAY,CAAC,EAAE,EAAE,EAAE,EAAE,gCAAgC,CAAC,CAAC;YACnE,CAAC;iBAAM,CAAC;gBACJ,OAAO,CAAC,YAAY,CAAC,EAAE,EAAE,EAAE,EAAE,uBAAuB,CAAC,CAAC;YAC1D,CAAC;YAED,OAAO,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC;QACnC,CAAC;QACD;YACI,MAAM,CAAkC,KAAK,CAAC,CAAC;IACvD,CAAC;AACL,CAAC"}
|
package/package.json
CHANGED
package/src/core/earlyInit.ts
CHANGED
|
@@ -46,11 +46,14 @@ export function oidcEarlyInit(params: {
|
|
|
46
46
|
const createWriteError = (target: string) =>
|
|
47
47
|
new Error(
|
|
48
48
|
[
|
|
49
|
-
`oidc-spa: ${target} has been
|
|
50
|
-
"
|
|
51
|
-
"
|
|
52
|
-
"
|
|
53
|
-
"
|
|
49
|
+
`oidc-spa: Monkey patching of ${target} has been blocked for security reasons.`,
|
|
50
|
+
"You can disable this restriction by setting `safeMode: false` in `oidcEarlyInit()`",
|
|
51
|
+
"or in your Vite plugin configuration,",
|
|
52
|
+
"but please note this will reduce security.",
|
|
53
|
+
"If you believe this restriction is too strict, please open an issue at:",
|
|
54
|
+
"https://github.com/keycloakify/oidc-spa",
|
|
55
|
+
"We're still identifying real-world blockers and can safely add exceptions where needed.",
|
|
56
|
+
"For now, we prefer to err on the side of hardening rather than exposure."
|
|
54
57
|
].join(" ")
|
|
55
58
|
);
|
|
56
59
|
|
|
@@ -109,8 +112,20 @@ export function oidcEarlyInit(params: {
|
|
|
109
112
|
|
|
110
113
|
if ("prototype" in original) {
|
|
111
114
|
for (const propertyName of Object.getOwnPropertyNames(original.prototype)) {
|
|
112
|
-
if (name === "Object"
|
|
113
|
-
|
|
115
|
+
if (name === "Object") {
|
|
116
|
+
if (
|
|
117
|
+
propertyName === "toString" ||
|
|
118
|
+
propertyName === "constructor" ||
|
|
119
|
+
propertyName === "valueOf"
|
|
120
|
+
) {
|
|
121
|
+
continue;
|
|
122
|
+
}
|
|
123
|
+
}
|
|
124
|
+
|
|
125
|
+
if (name === "Array") {
|
|
126
|
+
if (propertyName === "constructor" || propertyName === "concat") {
|
|
127
|
+
continue;
|
|
128
|
+
}
|
|
114
129
|
}
|
|
115
130
|
|
|
116
131
|
const pd = Object.getOwnPropertyDescriptor(original.prototype, propertyName);
|