oidc-spa 8.4.7 → 8.5.1

package/esm/core/earlyInit.js

@@ -4,6 +4,8 @@ import { setBASE_URL } from "./BASE_URL";
 import { resolvePrShouldLoadApp } from "./prShouldLoadApp";
 import { isBrowser } from "../tools/isBrowser";
 import { createEvt } from "../tools/Evt";
+import { handleTokenExfiltrationDefense_legacy } from "./tokenExfiltrationDefense_legacy";
+import { enableTokenExfiltrationDefense } from "./tokenExfiltrationDefense";
 let hasEarlyInitBeenCalled = false;
 const IFRAME_MESSAGE_PREFIX = "oidc-spa:cross-window-messaging:";
 export function oidcEarlyInit(params) {
@@ -14,168 +16,82 @@ export function oidcEarlyInit(params) {
     if (!isBrowser) {
         return { shouldLoadApp: true };
     }
-    const { freezeFetch, freezeXMLHttpRequest, freezeWebSocket, freezePromise, safeMode = false, BASE_URL } = params;
     const { shouldLoadApp } = handleOidcCallback();
     if (shouldLoadApp) {
-        const createWriteError = (target) => new Error([
-            `oidc-spa: Monkey patching of ${target} has been blocked for security reasons.`,
-            "You can disable this restriction by setting `safeMode: false` in `oidcEarlyInit()`",
-            "or in your Vite plugin configuration,",
-            "but please note this will reduce security.",
-            "If you believe this restriction is too strict, please open an issue at:",
-            "https://github.com/keycloakify/oidc-spa",
-            "We're still identifying real-world blockers and can safely add exceptions where needed.",
-            "For now, we prefer to err on the side of hardening rather than exposure."
-        ].join(" "));
-        for (const name of [
-            "fetch",
-            "XMLHttpRequest",
-            "WebSocket",
-            "Headers",
-            "URLSearchParams",
-            "String",
-            "Object",
-            "Promise",
-            "Array",
-            "RegExp",
-            "TextEncoder",
-            "Uint8Array",
-            "Uint32Array",
-            "Response",
-            "Reflect",
-            "JSON",
-            "encodeURIComponent",
-            "decodeURIComponent",
-            "atob",
-            "btoa"
-        ]) {
-            const doSkip = (() => {
-                switch (name) {
-                    case "XMLHttpRequest":
-                        if (freezeXMLHttpRequest !== undefined) {
-                            return !freezeXMLHttpRequest;
-                        }
-                        break;
-                    case "fetch":
-                        if (freezeFetch !== undefined) {
-                            return !freezeFetch;
-                        }
-                        break;
-                    case "WebSocket":
-                        if (freezeWebSocket !== undefined) {
-                            return !freezeWebSocket;
-                        }
-                        break;
-                    case "Promise":
-                        if (freezePromise !== undefined) {
-                            return !freezePromise;
-                        }
-                        break;
-                }
-                return !safeMode;
-            })();
-            if (doSkip) {
-                continue;
+        token_exfiltration_defense: {
+            if (!("enableTokenExfiltrationDefense" in params)) {
+                handleTokenExfiltrationDefense_legacy({
+                    freezeFetch: params.freezeFetch,
+                    freezeXMLHttpRequest: params.freezeXMLHttpRequest,
+                    freezeWebSocket: params.freezeWebSocket,
+                    freezePromise: params.freezePromise,
+                    safeMode: params.safeMode
+                });
+                break token_exfiltration_defense;
             }
-            const original = window[name];
-            if ("prototype" in original) {
-                for (const propertyName of Object.getOwnPropertyNames(original.prototype)) {
-                    if (name === "Object") {
-                        if (propertyName === "toString" ||
-                            propertyName === "constructor" ||
-                            propertyName === "valueOf") {
-                            continue;
-                        }
-                    }
-                    if (name === "Array") {
-                        if (propertyName === "constructor" || propertyName === "concat") {
-                            continue;
-                        }
-                    }
-                    const pd = Object.getOwnPropertyDescriptor(original.prototype, propertyName);
-                    assert(pd !== undefined);
-                    if (!pd.configurable) {
-                        continue;
-                    }
-                    Object.defineProperty(original.prototype, propertyName, {
-                        enumerable: pd.enumerable,
-                        configurable: false,
-                        ...("value" in pd
-                            ? {
-                                get: () => pd.value,
-                                set: () => {
-                                    throw createWriteError(`window.${name}.prototype.${propertyName}`);
-                                }
-                            }
-                            : {
-                                get: pd.get,
-                                set: pd.set ??
-                                    (() => {
-                                        throw createWriteError(`window.${name}.prototype.${propertyName}`);
-                                    })
-                            })
-                    });
+            const { enableTokenExfiltrationDefense: doEnableTokenExfiltrationDefense, resourceServersAllowedHostnames, serviceWorkersAllowedHostnames } = params;
+            if (!doEnableTokenExfiltrationDefense) {
+                if (resourceServersAllowedHostnames !== undefined) {
+                    console.warn([
+                        "oidc-spa: resourceServersAllowedHostnames is ignored when",
+                        "enableTokenExfiltrationDefense is set to false."
+                    ].join(" "));
                 }
-            }
-            Object.defineProperty(window, name, {
-                configurable: false,
-                enumerable: true,
-                get: () => original,
-                set: () => {
-                    throw createWriteError(`window.${name}`);
+                if (serviceWorkersAllowedHostnames !== undefined) {
+                    console.warn([
+                        "oidc-spa: serviceWorkersAllowedHostnames is ignored when",
+                        "enableTokenExfiltrationDefense is set to false."
+                    ].join(" "));
                 }
+                break token_exfiltration_defense;
+            }
+            enableTokenExfiltrationDefense({
+                resourceServersAllowedHostnames,
+                serviceWorkersAllowedHostnames
             });
         }
-        if (safeMode) {
-            for (const name of ["call", "apply", "bind"]) {
-                const original = Function.prototype[name];
-                Object.defineProperty(Function.prototype, name, {
-                    configurable: false,
-                    enumerable: true,
-                    get: () => original,
-                    set: () => {
-                        throw createWriteError(`window.Function.prototype.${name});`);
-                    }
-                });
-            }
+        {
+            const _MessageEvent_prototype_data_get = (() => {
+                const pd = Object.getOwnPropertyDescriptor(MessageEvent.prototype, "data");
+                assert(pd !== undefined);
+                const { get } = pd;
+                assert(get !== undefined);
+                return get;
+            })();
+            const _MessageEvent_prototype_origin_get = (() => {
+                const pd = Object.getOwnPropertyDescriptor(MessageEvent.prototype, "origin");
+                assert(pd !== undefined);
+                const { get } = pd;
+                assert(get !== undefined);
+                return get;
+            })();
+            const _Event_prototype_stopImmediatePropagation_value = Event.prototype.stopImmediatePropagation;
+            const origin = window.location.origin;
+            window.addEventListener("message", event => {
+                if (_MessageEvent_prototype_origin_get.call(event) !== origin) {
+                    return;
+                }
+                const eventData = _MessageEvent_prototype_data_get.call(event);
+                if (typeof eventData !== "string") {
+                    return;
+                }
+                if (!eventData.startsWith(IFRAME_MESSAGE_PREFIX)) {
+                    return;
+                }
+                _Event_prototype_stopImmediatePropagation_value.call(event);
+                const authResponse = JSON.parse(eventData.slice(IFRAME_MESSAGE_PREFIX.length));
+                (evtIframeAuthResponse ?? (evtIframeAuthResponse = createEvt())).post(authResponse);
+            }, {
+                capture: true,
+                once: false,
+                passive: false
+            });
         }
-        const _MessageEvent_prototype_data_get = (() => {
-            const pd = Object.getOwnPropertyDescriptor(MessageEvent.prototype, "data");
-            assert(pd !== undefined);
-            const { get } = pd;
-            assert(get !== undefined);
-            return get;
-        })();
-        const _MessageEvent_prototype_origin_get = (() => {
-            const pd = Object.getOwnPropertyDescriptor(MessageEvent.prototype, "origin");
-            assert(pd !== undefined);
-            const { get } = pd;
-            assert(get !== undefined);
-            return get;
-        })();
-        const _Event_prototype_stopImmediatePropagation_value = Event.prototype.stopImmediatePropagation;
-        const origin = window.location.origin;
-        window.addEventListener("message", event => {
-            if (_MessageEvent_prototype_origin_get.call(event) !== origin) {
-                return;
-            }
-            const eventData = _MessageEvent_prototype_data_get.call(event);
-            if (typeof eventData !== "string") {
-                return;
-            }
-            if (!eventData.startsWith(IFRAME_MESSAGE_PREFIX)) {
-                return;
+        {
+            const { BASE_URL } = params;
+            if (BASE_URL !== undefined) {
+                setBASE_URL({ BASE_URL });
             }
-            _Event_prototype_stopImmediatePropagation_value.call(event);
-            const authResponse = JSON.parse(eventData.slice(IFRAME_MESSAGE_PREFIX.length));
-            (evtIframeAuthResponse ?? (evtIframeAuthResponse = createEvt())).post(authResponse);
-        }, {
-            capture: true,
-            once: false,
-            passive: false
-        });
-        if (BASE_URL !== undefined) {
-            setBASE_URL({ BASE_URL });
         }
     }
     resolvePrShouldLoadApp({ shouldLoadApp });

package/esm/core/earlyInit.js.map

@@ -1 +1 @@
-{"version":3,"file":"earlyInit.js","sourceRoot":"","sources":["../../src/core/earlyInit.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,wBAAwB,EAAE,MAAM,aAAa,CAAC;AACrE,OAAO,EAAE,MAAM,EAAe,MAAM,uBAAuB,CAAC;AAE5D,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AACzC,OAAO,EAAE,sBAAsB,EAAE,MAAM,mBAAmB,CAAC;AAC3D,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC/C,OAAO,EAAE,SAAS,EAAY,MAAM,cAAc,CAAC;AAEnD,IAAI,sBAAsB,GAAG,KAAK,CAAC;AAEnC,MAAM,qBAAqB,GAAG,kCAAkC,CAAC;AAEjE,MAAM,UAAU,aAAa,CAAC,MAO7B;IACG,IAAI,sBAAsB,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;IAC5E,CAAC;IAED,sBAAsB,GAAG,IAAI,CAAC;IAE9B,IAAI,CAAC,SAAS,EAAE,CAAC;QACb,OAAO,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC;IACnC,CAAC;IAED,MAAM,EACF,WAAW,EACX,oBAAoB,EACpB,eAAe,EACf,aAAa,EACb,QAAQ,GAAG,KAAK,EAChB,QAAQ,EACX,GAAG,MAAM,CAAC;IAEX,MAAM,EAAE,aAAa,EAAE,GAAG,kBAAkB,EAAE,CAAC;IAE/C,IAAI,aAAa,EAAE,CAAC;QAChB,MAAM,gBAAgB,GAAG,CAAC,MAAc,EAAE,EAAE,CACxC,IAAI,KAAK,CACL;YACI,gCAAgC,MAAM,yCAAyC;YAC/E,oFAAoF;YACpF,uCAAuC;YACvC,4CAA4C;YAC5C,yEAAyE;YACzE,yCAAyC;YACzC,yFAAyF;YACzF,0EAA0E;SAC7E,CAAC,IAAI,CAAC,GAAG,CAAC,CACd,CAAC;QAEN,KAAK,MAAM,IAAI,IAAI;YACf,OAAO;YACP,gBAAgB;YAChB,WAAW;YACX,SAAS;YACT,iBAAiB;YACjB,QAAQ;YACR,QAAQ;YACR,SAAS;YACT,OAAO;YACP,QAAQ;YACR,aAAa;YACb,YAAY;YACZ,aAAa;YACb,UAAU;YACV,SAAS;YACT,MAAM;YACN,oBAAoB;YACpB,oBAAoB;YACpB,MAAM;YACN,MAAM;SACA,EAAE,CAAC;YACT,MAAM,MAAM,GAAG,CAAC,GAAG,EAAE;gBACjB,QAAQ,IAAI,EAAE,CAAC;oBACX,KAAK,gBAAgB;wBACjB,IAAI,oBAAoB,KAAK,SAAS,EAAE,CAAC;4BACrC,OAAO,CAAC,oBAAoB,CAAC;wBACjC,CAAC;wBACD,MAAM;oBACV,KAAK,OAAO;wBACR,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;4BAC5B,OAAO,CAAC,WAAW,CAAC;wBACxB,CAAC;wBACD,MAAM;oBACV,KAAK,WAAW;wBACZ,IAAI,eAAe,KAAK,SAAS,EAAE,CAAC;4BAChC,OAAO,CAAC,eAAe,CAAC;wBAC5B,CAAC;wBACD,MAAM;oBACV,KAAK,SAAS;wBACV,IAAI,aAAa,KAAK,SAAS,EAAE,CAAC;4BAC9B,OAAO,CAAC,aAAa,CAAC;wBAC1B,CAAC;wBACD,MAAM;gBACd,CAAC;gBAED,OAAO,CAAC,QAAQ,CAAC;YACrB,CAAC,CAAC,EAAE,CAAC;YAEL,IAAI,MAAM,EAAE,CAAC;gBACT,SAAS;YACb,CAAC;YAED,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;YAE9B,IAAI,WAAW,IAAI,QAAQ,EAAE,CAAC;gBAC1B,KAAK,MAAM,YAAY,IAAI,MAAM,CAAC,mBAAmB,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;oBACxE,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;wBACpB,IACI,YAAY,KAAK,UAAU;4BAC3B,YAAY,KAAK,aAAa;4BAC9B,YAAY,KAAK,SAAS,EAC5B,CAAC;4BACC,SAAS;wBACb,CAAC;oBACL,CAAC;oBAED,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;wBACnB,IAAI,YAAY,KAAK,aAAa,IAAI,YAAY,KAAK,QAAQ,EAAE,CAAC;4BAC9D,SAAS;wBACb,CAAC;oBACL,CAAC;oBAED,MAAM,EAAE,GAAG,MAAM,CAAC,wBAAwB,CAAC,QAAQ,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC;oBAE7E,MAAM,CAAC,EAAE,KAAK,SAAS,CAAC,CAAC;oBAEzB,IAAI,CAAC,EAAE,CAAC,YAAY,EAAE,CAAC;wBACnB,SAAS;oBACb,CAAC;oBAED,MAAM,CAAC,cAAc,CAAC,QAAQ,CAAC,SAAS,EAAE,YAAY,EAAE;wBACpD,UAAU,EAAE,EAAE,CAAC,UAAU;wBACzB,YAAY,EAAE,KAAK;wBACnB,GAAG,CAAC,OAAO,IAAI,EAAE;4BACb,CAAC,CAAC;gCACI,GAAG,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,KAAK;gCACnB,GAAG,EAAE,GAAG,EAAE;oCACN,MAAM,gBAAgB,CAAC,UAAU,IAAI,cAAc,YAAY,EAAE,CAAC,CAAC;gCACvE,CAAC;6BACJ;4BACH,CAAC,CAAC;gCACI,GAAG,EAAE,EAAE,CAAC,GAAG;gCACX,GAAG,EACC,EAAE,CAAC,GAAG;oCACN,CAAC,GAAG,EAAE;wCACF,MAAM,gBAAgB,CAClB,UAAU,IAAI,cAAc,YAAY,EAAE,CAC7C,CAAC;oCACN,CAAC,CAAC;6BACT,CAAC;qBACX,CAAC,CAAC;gBACP,CAAC;YACL,CAAC;YAED,MAAM,CAAC,cAAc,CAAC,MAAM,EAAE,IAAI,EAAE;gBAChC,YAAY,EAAE,KAAK;gBACnB,UAAU,EAAE,IAAI;gBAChB,GAAG,EAAE,GAAG,EAAE,CAAC,QAAQ;gBACnB,GAAG,EAAE,GAAG,EAAE;oBACN,MAAM,gBAAgB,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC;gBAC7C,CAAC;aACJ,CAAC,CAAC;QACP,CAAC;QAED,IAAI,QAAQ,EAAE,CAAC;YACX,KAAK,MAAM,IAAI,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,MAAM,CAAU,EAAE,CAAC;gBACpD,MAAM,QAAQ,GAAG,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;gBAE1C,MAAM,CAAC,cAAc,CAAC,QAAQ,CAAC,SAAS,EAAE,IAAI,EAAE;oBAC5C,YAAY,EAAE,KAAK;oBACnB,UAAU,EAAE,IAAI;oBAChB,GAAG,EAAE,GAAG,EAAE,CAAC,QAAQ;oBACnB,GAAG,EAAE,GAAG,EAAE;wBACN,MAAM,gBAAgB,CAAC,6BAA6B,IAAI,IAAI,CAAC,CAAC;oBAClE,CAAC;iBACJ,CAAC,CAAC;YACP,CAAC;QACL,CAAC;QAED,MAAM,gCAAgC,GAAG,CAAC,GAAG,EAAE;YAC3C,MAAM,EAAE,GAAG,MAAM,CAAC,wBAAwB,CAAC,YAAY,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;YAE3E,MAAM,CAAC,EAAE,KAAK,SAAS,CAAC,CAAC;YAEzB,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC;YAEnB,MAAM,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC;YAE1B,OAAO,GAAG,CAAC;QACf,CAAC,CAAC,EAAE,CAAC;QAEL,MAAM,kCAAkC,GAAG,CAAC,GAAG,EAAE;YAC7C,MAAM,EAAE,GAAG,MAAM,CAAC,wBAAwB,CAAC,YAAY,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;YAE7E,MAAM,CAAC,EAAE,KAAK,SAAS,CAAC,CAAC;YAEzB,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC;YAEnB,MAAM,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC;YAE1B,OAAO,GAAG,CAAC;QACf,CAAC,CAAC,EAAE,CAAC;QAEL,MAAM,+CAA+C,GAAG,KAAK,CAAC,SAAS,CAAC,wBAAwB,CAAC;QAEjG,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC;QAEtC,MAAM,CAAC,gBAAgB,CACnB,SAAS,EACT,KAAK,CAAC,EAAE;YACJ,IAAI,kCAAkC,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,MAAM,EAAE,CAAC;gBAC5D,OAAO;YACX,CAAC;YAED,MAAM,SAAS,GAAY,gCAAgC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAExE,IAAI,OAAO,SAAS,KAAK,QAAQ,EAAE,CAAC;gBAChC,OAAO;YACX,CAAC;YAED,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,qBAAqB,CAAC,EAAE,CAAC;gBAC/C,OAAO;YACX,CAAC;YAED,+CAA+C,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAE5D,MAAM,YAAY,GAAiB,IAAI,CAAC,KAAK,CACzC,SAAS,CAAC,KAAK,CAAC,qBAAqB,CAAC,MAAM,CAAC,CAChD,CAAC;YAEF,CAAC,qBAAqB,KAArB,qBAAqB,GAAK,SAAS,EAAE,EAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QAC/D,CAAC,EACD;YACI,OAAO,EAAE,IAAI;YACb,IAAI,EAAE,KAAK;YACX,OAAO,EAAE,KAAK;SACjB,CACJ,CAAC;QAEF,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YACzB,WAAW,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC;QAC9B,CAAC;IACL,CAAC;IAED,sBAAsB,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC;IAE1C,OAAO,EAAE,aAAa,EAAE,CAAC;AAC7B,CAAC;AAED,IAAI,qBAAqB,GAAkC,SAAS,CAAC;AAErE,MAAM,UAAU,wBAAwB;IACpC,OAAO,CAAC,qBAAqB,KAArB,qBAAqB,GAAK,SAAS,EAAE,EAAC,CAAC;AACnD,CAAC;AAED,IAAI,oBAAoB,GAA6B,SAAS,CAAC;AAE/D,MAAM,UAAU,uBAAuB;IAGnC,MAAM,CAAC,sBAAsB,EAAE,UAAU,CAAC,CAAC;IAE3C,OAAO,oBAAoB,KAAK,SAAS;QACrC,CAAC,CAAC,EAAE,YAAY,EAAE,SAAS,EAAE;QAC7B,CAAC,CAAC;YACI,YAAY,EAAE,oBAAoB;YAClC,iBAAiB,EAAE,GAAG,EAAE;gBACpB,oBAAoB,GAAG,SAAS,CAAC;YACrC,CAAC;SACJ,CAAC;AACZ,CAAC;AAED,IAAI,gCAAgC,GAAuB,SAAS,CAAC;AAErE,MAAM,UAAU,mCAAmC;IAC/C,MAAM,CAAC,gCAAgC,KAAK,SAAS,EAAE,QAAQ,CAAC,CAAC;IACjE,OAAO,gCAAgC,CAAC;AAC5C,CAAC;AAED,SAAS,kBAAkB;IAGvB,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IAEtD,MAAM,sBAAsB,GAAG,CAAC,GAAG,EAAE;QACjC,QAAQ,EAAE,CAAC;YACP,MAAM,kBAAkB,GAAG,IAAI,eAAe,CAAC,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CACtF,OAAO,CACV,CAAC;YAEF,IAAI,kBAAkB,KAAK,IAAI,EAAE,CAAC;gBAC9B,MAAM,QAAQ,CAAC;YACnB,CAAC;YAED,IAAI,CAAC,wBAAwB,CAAC,EAAE,uBAAuB,EAAE,kBAAkB,EAAE,CAAC,EAAE,CAAC;gBAC7E,MAAM,QAAQ,CAAC;YACnB,CAAC;YAED,OAAO,EAAE,oBAAoB,EAAE,IAAI,EAAE,YAAY,EAAE,UAAU,EAAW,CAAC;QAC7E,CAAC;QAED,KAAK,EAAE,CAAC;YACJ,MAAM,kBAAkB,GAAG,eAAe,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YAErE,IAAI,kBAAkB,KAAK,IAAI,EAAE,CAAC;gBAC9B,MAAM,KAAK,CAAC;YAChB,CAAC;YAED,IAAI,CAAC,wBAAwB,CAAC,EAAE,uBAAuB,EAAE,kBAAkB,EAAE,CAAC,EAAE,CAAC;gBAC7E,MAAM,KAAK,CAAC;YAChB,CAAC;YAED,IACI,eAAe,CAAC,YAAY,CAAC,GAAG,CAAC,WAAW,CAAC,KAAK,IAAI;gBACtD,eAAe,CAAC,YAAY,CAAC,GAAG,CAAC,eAAe,CAAC,KAAK,IAAI;gBAC1D,eAAe,CAAC,YAAY,CAAC,GAAG,CAAC,cAAc,CAAC,KAAK,IAAI,EAC3D,CAAC;gBACC,mFAAmF;gBACnF,MAAM,KAAK,CAAC;YAChB,CAAC;YAED,OAAO,EAAE,oBAAoB,EAAE,IAAI,EAAE,YAAY,EAAE,OAAO,EAAW,CAAC;QAC1E,CAAC;QAED,OAAO,EAAE,oBAAoB,EAAE,KAAK,EAAW,CAAC;IACpD,CAAC,CAAC,EAAE,CAAC;IAEL,IAAI,CAAC,sBAAsB,CAAC,oBAAoB,EAAE,CAAC;QAC/C,gCAAgC,GAAG,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAC7F,OAAO,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC;IACnC,CAAC;IAED,gCAAgC,GAAG,eAAe,CAAC,QAAQ,CAAC;IAE5D,MAAM,EAAE,YAAY,EAAE,GAAG,CAAC,GAAG,EAAE;QAC3B,MAAM,YAAY,GAAiB,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;QAEjD,MAAM,YAAY,GAAG,CAAC,GAAG,EAAE;YACvB,QAAQ,sBAAsB,CAAC,YAAY,EAAE,CAAC;gBAC1C,KAAK,UAAU;oBACX,OAAO,IAAI,eAAe,CAAC,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC;gBACvE,KAAK,OAAO;oBACR,OAAO,eAAe,CAAC,YAAY,CAAC;gBACxC;oBACI,MAAM,CAA+C,KAAK,CAAC,CAAC;YACpE,CAAC;QACL,CAAC,CAAC,EAAE,CAAC;QAEL,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,YAAY,EAAE,CAAC;YACtC,YAAY,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QAC9B,CAAC;QAED,MAAM,CAAC,YAAY,CAAC,KAAK,KAAK,EAAE,EAAE,QAAQ,CAAC,CAAC;QAE5C,OAAO,EAAE,YAAY,EAAE,CAAC;IAC5B,CAAC,CAAC,EAAE,CAAC;IAEL,MAAM,SAAS,GAAG,YAAY,CAAC,EAAE,kBAAkB,EAAE,YAAY,CAAC,KAAK,EAAE,CAAC,CAAC;IAE3E,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;QAC1B,OAAO,CAAC,YAAY,CAAC,EAAE,EAAE,EAAE,EAAE,gCAAgC,CAAC,CAAC;QAC/D,OAAO,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC;IACnC,CAAC;IAED,QAAQ,SAAS,CAAC,OAAO,EAAE,CAAC;QACxB,KAAK,QAAQ;YACT,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;gBACjB,MAAM,YAAY,GAAG;oBACjB,qEAAqE;oBACrE,yFAAyF;iBAC5F,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBACZ,KAAK,CAAC,YAAY,CAAC,CAAC;gBAEpB,MAAM,IAAI,KAAK,CAAC,YAAY,CAAC,CAAC;YAClC,CAAC;YACD,MAAM,CAAC,WAAW,CACd,GAAG,qBAAqB,GAAG,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,EAAE,EACzD,QAAQ,CAAC,MAAM,CAClB,CAAC;YACF,OAAO,EAAE,aAAa,EAAE,KAAK,EAAE,CAAC;QACpC,KAAK,UAAU,CAAC,CAAC,CAAC;YACd,oBAAoB,GAAG,YAAY,CAAC;YACpC,MAAM,uBAAuB,GAAG,CAAC,GAAG,EAAE;gBAClC,IAAI,SAAS,CAAC,MAAM,KAAK,OAAO,IAAI,YAAY,CAAC,KAAK,KAAK,kBAAkB,EAAE,CAAC;oBAC5E,OAAO,SAAS,CAAC,2CAA2C,CAAC;gBACjE,CAAC;gBACD,OAAO,SAAS,CAAC,uBAAuB,CAAC;YAC7C,CAAC,CAAC,EAAE,CAAC;YAEL,OAAO,CAAC,YAAY,CAAC,EAAE,EAAE,EAAE,EAAE,uBAAuB,CAAC,CAAC;YACtD,OAAO,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC;QACnC,CAAC;QACD;YACI,MAAM,CAAkC,KAAK,CAAC,CAAC;IACvD,CAAC;AACL,CAAC"}
+{"version":3,"file":"earlyInit.js","sourceRoot":"","sources":["../../src/core/earlyInit.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,wBAAwB,EAAE,MAAM,aAAa,CAAC;AACrE,OAAO,EAAE,MAAM,EAAe,MAAM,uBAAuB,CAAC;AAE5D,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AACzC,OAAO,EAAE,sBAAsB,EAAE,MAAM,mBAAmB,CAAC;AAC3D,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC/C,OAAO,EAAE,SAAS,EAAY,MAAM,cAAc,CAAC;AACnD,OAAO,EACH,qCAAqC,EAExC,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EAAE,8BAA8B,EAAE,MAAM,4BAA4B,CAAC;AAE5E,IAAI,sBAAsB,GAAG,KAAK,CAAC;AAEnC,MAAM,qBAAqB,GAAG,kCAAkC,CAAC;AAkDjE,MAAM,UAAU,aAAa,CAAC,MAAoD;IAC9E,IAAI,sBAAsB,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;IAC5E,CAAC;IAED,sBAAsB,GAAG,IAAI,CAAC;IAE9B,IAAI,CAAC,SAAS,EAAE,CAAC;QACb,OAAO,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC;IACnC,CAAC;IAED,MAAM,EAAE,aAAa,EAAE,GAAG,kBAAkB,EAAE,CAAC;IAE/C,IAAI,aAAa,EAAE,CAAC;QAChB,0BAA0B,EAAE,CAAC;YACzB,IAAI,CAAC,CAAC,gCAAgC,IAAI,MAAM,CAAC,EAAE,CAAC;gBAChD,qCAAqC,CAAC;oBAClC,WAAW,EAAE,MAAM,CAAC,WAAW;oBAC/B,oBAAoB,EAAE,MAAM,CAAC,oBAAoB;oBACjD,eAAe,EAAE,MAAM,CAAC,eAAe;oBACvC,aAAa,EAAE,MAAM,CAAC,aAAa;oBACnC,QAAQ,EAAE,MAAM,CAAC,QAAQ;iBAC5B,CAAC,CAAC;gBACH,MAAM,0BAA0B,CAAC;YACrC,CAAC;YAED,MAAM,EACF,8BAA8B,EAAE,gCAAgC,EAChE,+BAA+B,EAC/B,8BAA8B,EACjC,GAAG,MAAM,CAAC;YAEX,IAAI,CAAC,gCAAgC,EAAE,CAAC;gBACpC,IAAI,+BAA+B,KAAK,SAAS,EAAE,CAAC;oBAChD,OAAO,CAAC,IAAI,CACR;wBACI,2DAA2D;wBAC3D,iDAAiD;qBACpD,CAAC,IAAI,CAAC,GAAG,CAAC,CACd,CAAC;gBACN,CAAC;gBAED,IAAI,8BAA8B,KAAK,SAAS,EAAE,CAAC;oBAC/C,OAAO,CAAC,IAAI,CACR;wBACI,0DAA0D;wBAC1D,iDAAiD;qBACpD,CAAC,IAAI,CAAC,GAAG,CAAC,CACd,CAAC;gBACN,CAAC;gBAED,MAAM,0BAA0B,CAAC;YACrC,CAAC;YAED,8BAA8B,CAAC;gBAC3B,+BAA+B;gBAC/B,8BAA8B;aACjC,CAAC,CAAC;QACP,CAAC;QAED,CAAC;YACG,MAAM,gCAAgC,GAAG,CAAC,GAAG,EAAE;gBAC3C,MAAM,EAAE,GAAG,MAAM,CAAC,wBAAwB,CAAC,YAAY,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;gBAE3E,MAAM,CAAC,EAAE,KAAK,SAAS,CAAC,CAAC;gBAEzB,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC;gBAEnB,MAAM,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC;gBAE1B,OAAO,GAAG,CAAC;YACf,CAAC,CAAC,EAAE,CAAC;YAEL,MAAM,kCAAkC,GAAG,CAAC,GAAG,EAAE;gBAC7C,MAAM,EAAE,GAAG,MAAM,CAAC,wBAAwB,CAAC,YAAY,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;gBAE7E,MAAM,CAAC,EAAE,KAAK,SAAS,CAAC,CAAC;gBAEzB,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC;gBAEnB,MAAM,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC;gBAE1B,OAAO,GAAG,CAAC;YACf,CAAC,CAAC,EAAE,CAAC;YAEL,MAAM,+CAA+C,GACjD,KAAK,CAAC,SAAS,CAAC,wBAAwB,CAAC;YAE7C,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC;YAEtC,MAAM,CAAC,gBAAgB,CACnB,SAAS,EACT,KAAK,CAAC,EAAE;gBACJ,IAAI,kCAAkC,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,MAAM,EAAE,CAAC;oBAC5D,OAAO;gBACX,CAAC;gBAED,MAAM,SAAS,GAAY,gCAAgC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBAExE,IAAI,OAAO,SAAS,KAAK,QAAQ,EAAE,CAAC;oBAChC,OAAO;gBACX,CAAC;gBAED,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,qBAAqB,CAAC,EAAE,CAAC;oBAC/C,OAAO;gBACX,CAAC;gBAED,+CAA+C,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBAE5D,MAAM,YAAY,GAAiB,IAAI,CAAC,KAAK,CACzC,SAAS,CAAC,KAAK,CAAC,qBAAqB,CAAC,MAAM,CAAC,CAChD,CAAC;gBAEF,CAAC,qBAAqB,KAArB,qBAAqB,GAAK,SAAS,EAAE,EAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;YAC/D,CAAC,EACD;gBACI,OAAO,EAAE,IAAI;gBACb,IAAI,EAAE,KAAK;gBACX,OAAO,EAAE,KAAK;aACjB,CACJ,CAAC;QACN,CAAC;QAED,CAAC;YACG,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,CAAC;YAE5B,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;gBACzB,WAAW,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC;YAC9B,CAAC;QACL,CAAC;IACL,CAAC;IAED,sBAAsB,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC;IAE1C,OAAO,EAAE,aAAa,EAAE,CAAC;AAC7B,CAAC;AAED,IAAI,qBAAqB,GAAkC,SAAS,CAAC;AAErE,MAAM,UAAU,wBAAwB;IACpC,OAAO,CAAC,qBAAqB,KAArB,qBAAqB,GAAK,SAAS,EAAE,EAAC,CAAC;AACnD,CAAC;AAED,IAAI,oBAAoB,GAA6B,SAAS,CAAC;AAE/D,MAAM,UAAU,uBAAuB;IAGnC,MAAM,CAAC,sBAAsB,EAAE,UAAU,CAAC,CAAC;IAE3C,OAAO,oBAAoB,KAAK,SAAS;QACrC,CAAC,CAAC,EAAE,YAAY,EAAE,SAAS,EAAE;QAC7B,CAAC,CAAC;YACI,YAAY,EAAE,oBAAoB;YAClC,iBAAiB,EAAE,GAAG,EAAE;gBACpB,oBAAoB,GAAG,SAAS,CAAC;YACrC,CAAC;SACJ,CAAC;AACZ,CAAC;AAED,IAAI,gCAAgC,GAAuB,SAAS,CAAC;AAErE,MAAM,UAAU,mCAAmC;IAC/C,MAAM,CAAC,gCAAgC,KAAK,SAAS,EAAE,QAAQ,CAAC,CAAC;IACjE,OAAO,gCAAgC,CAAC;AAC5C,CAAC;AAED,SAAS,kBAAkB;IAGvB,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IAEtD,MAAM,sBAAsB,GAAG,CAAC,GAAG,EAAE;QACjC,QAAQ,EAAE,CAAC;YACP,MAAM,kBAAkB,GAAG,IAAI,eAAe,CAAC,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CACtF,OAAO,CACV,CAAC;YAEF,IAAI,kBAAkB,KAAK,IAAI,EAAE,CAAC;gBAC9B,MAAM,QAAQ,CAAC;YACnB,CAAC;YAED,IAAI,CAAC,wBAAwB,CAAC,EAAE,uBAAuB,EAAE,kBAAkB,EAAE,CAAC,EAAE,CAAC;gBAC7E,MAAM,QAAQ,CAAC;YACnB,CAAC;YAED,OAAO,EAAE,oBAAoB,EAAE,IAAI,EAAE,YAAY,EAAE,UAAU,EAAW,CAAC;QAC7E,CAAC;QAED,KAAK,EAAE,CAAC;YACJ,MAAM,kBAAkB,GAAG,eAAe,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YAErE,IAAI,kBAAkB,KAAK,IAAI,EAAE,CAAC;gBAC9B,MAAM,KAAK,CAAC;YAChB,CAAC;YAED,IAAI,CAAC,wBAAwB,CAAC,EAAE,uBAAuB,EAAE,kBAAkB,EAAE,CAAC,EAAE,CAAC;gBAC7E,MAAM,KAAK,CAAC;YAChB,CAAC;YAED,IACI,eAAe,CAAC,YAAY,CAAC,GAAG,CAAC,WAAW,CAAC,KAAK,IAAI;gBACtD,eAAe,CAAC,YAAY,CAAC,GAAG,CAAC,eAAe,CAAC,KAAK,IAAI;gBAC1D,eAAe,CAAC,YAAY,CAAC,GAAG,CAAC,cAAc,CAAC,KAAK,IAAI,EAC3D,CAAC;gBACC,mFAAmF;gBACnF,MAAM,KAAK,CAAC;YAChB,CAAC;YAED,OAAO,EAAE,oBAAoB,EAAE,IAAI,EAAE,YAAY,EAAE,OAAO,EAAW,CAAC;QAC1E,CAAC;QAED,OAAO,EAAE,oBAAoB,EAAE,KAAK,EAAW,CAAC;IACpD,CAAC,CAAC,EAAE,CAAC;IAEL,IAAI,CAAC,sBAAsB,CAAC,oBAAoB,EAAE,CAAC;QAC/C,gCAAgC,GAAG,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAC7F,OAAO,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC;IACnC,CAAC;IAED,gCAAgC,GAAG,eAAe,CAAC,QAAQ,CAAC;IAE5D,MAAM,EAAE,YAAY,EAAE,GAAG,CAAC,GAAG,EAAE;QAC3B,MAAM,YAAY,GAAiB,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;QAEjD,MAAM,YAAY,GAAG,CAAC,GAAG,EAAE;YACvB,QAAQ,sBAAsB,CAAC,YAAY,EAAE,CAAC;gBAC1C,KAAK,UAAU;oBACX,OAAO,IAAI,eAAe,CAAC,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC;gBACvE,KAAK,OAAO;oBACR,OAAO,eAAe,CAAC,YAAY,CAAC;gBACxC;oBACI,MAAM,CAA+C,KAAK,CAAC,CAAC;YACpE,CAAC;QACL,CAAC,CAAC,EAAE,CAAC;QAEL,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,YAAY,EAAE,CAAC;YACtC,YAAY,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QAC9B,CAAC;QAED,MAAM,CAAC,YAAY,CAAC,KAAK,KAAK,EAAE,EAAE,QAAQ,CAAC,CAAC;QAE5C,OAAO,EAAE,YAAY,EAAE,CAAC;IAC5B,CAAC,CAAC,EAAE,CAAC;IAEL,MAAM,SAAS,GAAG,YAAY,CAAC,EAAE,kBAAkB,EAAE,YAAY,CAAC,KAAK,EAAE,CAAC,CAAC;IAE3E,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;QAC1B,OAAO,CAAC,YAAY,CAAC,EAAE,EAAE,EAAE,EAAE,gCAAgC,CAAC,CAAC;QAC/D,OAAO,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC;IACnC,CAAC;IAED,QAAQ,SAAS,CAAC,OAAO,EAAE,CAAC;QACxB,KAAK,QAAQ;YACT,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;gBACjB,MAAM,YAAY,GAAG;oBACjB,qEAAqE;oBACrE,yFAAyF;iBAC5F,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBACZ,KAAK,CAAC,YAAY,CAAC,CAAC;gBAEpB,MAAM,IAAI,KAAK,CAAC,YAAY,CAAC,CAAC;YAClC,CAAC;YACD,MAAM,CAAC,WAAW,CACd,GAAG,qBAAqB,GAAG,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,EAAE,EACzD,QAAQ,CAAC,MAAM,CAClB,CAAC;YACF,OAAO,EAAE,aAAa,EAAE,KAAK,EAAE,CAAC;QACpC,KAAK,UAAU,CAAC,CAAC,CAAC;YACd,oBAAoB,GAAG,YAAY,CAAC;YACpC,MAAM,uBAAuB,GAAG,CAAC,GAAG,EAAE;gBAClC,IAAI,SAAS,CAAC,MAAM,KAAK,OAAO,IAAI,YAAY,CAAC,KAAK,KAAK,kBAAkB,EAAE,CAAC;oBAC5E,OAAO,SAAS,CAAC,2CAA2C,CAAC;gBACjE,CAAC;gBACD,OAAO,SAAS,CAAC,uBAAuB,CAAC;YAC7C,CAAC,CAAC,EAAE,CAAC;YAEL,OAAO,CAAC,YAAY,CAAC,EAAE,EAAE,EAAE,EAAE,uBAAuB,CAAC,CAAC;YACtD,OAAO,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC;QACnC,CAAC;QACD;YACI,MAAM,CAAkC,KAAK,CAAC,CAAC;IACvD,CAAC;AACL,CAAC"}

package/esm/core/oidcClientTsUserToTokens.d.ts

@@ -1,6 +1,7 @@
 import type { User as OidcClientTsUser } from "../vendor/frontend/oidc-client-ts";
 import type { Oidc } from "./Oidc";
 export declare function oidcClientTsUserToTokens<DecodedIdToken extends Record<string, unknown>>(params: {
+    configId: string;
     oidcClientTsUser: OidcClientTsUser;
     decodedIdTokenSchema?: {
         parse: (decodedIdToken_original: Oidc.Tokens.DecodedIdToken_OidcCoreSpec) => DecodedIdToken;

package/esm/core/oidcClientTsUserToTokens.js

@@ -3,8 +3,9 @@ import { id } from "../tools/tsafe/id";
 import { readExpirationTimeInJwt } from "../tools/readExpirationTimeInJwt";
 import { decodeJwt } from "../tools/decodeJwt";
 import { INFINITY_TIME } from "../tools/INFINITY_TIME";
+import { getIsTokenSubstitutionEnabled, getTokensPlaceholders } from "./tokenPlaceholderSubstitution";
 export function oidcClientTsUserToTokens(params) {
-    const { oidcClientTsUser, decodedIdTokenSchema, __unsafe_useIdTokenAsAccessToken, decodedIdToken_previous, log } = params;
+    const { configId, oidcClientTsUser, decodedIdTokenSchema, __unsafe_useIdTokenAsAccessToken, decodedIdToken_previous, log } = params;
     const isFirstInit = decodedIdToken_previous === undefined;
     const accessToken = oidcClientTsUser.access_token;
     const refreshToken = oidcClientTsUser.refresh_token;
@@ -154,6 +155,15 @@ export function oidcClientTsUserToTokens(params) {
                 return undefined;
             })()
         });
+    if (getIsTokenSubstitutionEnabled()) {
+        const placeholders = getTokensPlaceholders({
+            configId,
+            tokens
+        });
+        tokens.accessToken = placeholders.accessToken;
+        tokens.idToken = placeholders.idToken;
+        tokens.refreshToken = placeholders.refreshToken;
+    }
     if (isFirstInit &&
         tokens.hasRefreshToken &&
         tokens.refreshTokenExpirationTime !== undefined &&

package/esm/core/oidcClientTsUserToTokens.js.map

@@ -1 +1 @@
-{"version":3,"file":"oidcClientTsUserToTokens.js","sourceRoot":"","sources":["../../src/core/oidcClientTsUserToTokens.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,MAAM,EAAE,MAAM,uBAAuB,CAAC;AAC/C,OAAO,EAAE,EAAE,EAAE,MAAM,mBAAmB,CAAC;AACvC,OAAO,EAAE,uBAAuB,EAAE,MAAM,kCAAkC,CAAC;AAC3E,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAE/C,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AAEvD,MAAM,UAAU,wBAAwB,CAAiD,MAQxF;IACG,MAAM,EACF,gBAAgB,EAChB,oBAAoB,EACpB,gCAAgC,EAChC,uBAAuB,EACvB,GAAG,EACN,GAAG,MAAM,CAAC;IAEX,MAAM,WAAW,GAAG,uBAAuB,KAAK,SAAS,CAAC;IAE1D,MAAM,WAAW,GAAG,gBAAgB,CAAC,YAAY,CAAC;IAElD,MAAM,YAAY,GAAG,gBAAgB,CAAC,aAAa,CAAC;IAEpD,MAAM,OAAO,GAAG,gBAAgB,CAAC,QAAQ,CAAC;IAE1C,MAAM,CAAC,OAAO,KAAK,SAAS,EAAE,yCAAyC,CAAC,CAAC;IAEzE,MAAM,uBAAuB,GAAG,SAAS,CAA0C,OAAO,CAAC,CAAC;IAE5F,IAAI,WAAW,EAAE,CAAC;QACd,GAAG,EAAE,CACD;YACI,kBAAkB;YAClB,oBAAoB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,0CAA0C;YACpF,IAAI,CAAC,SAAS,CAAC,uBAAuB,EAAE,IAAI,EAAE,CAAC,CAAC;SACnD,CAAC,IAAI,CAAC,EAAE,CAAC,CACb,CAAC;IACN,CAAC;IAED,MAAM,cAAc,GAAG,CAAC,GAAG,EAAE;QACzB,IAAI,cAA8B,CAAC;QAEnC,IAAI,oBAAoB,KAAK,SAAS,EAAE,CAAC;YACrC,cAAc,GAAG,oBAAoB,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC;YAErE,IAAI,WAAW,EAAE,CAAC;gBACd,GAAG,EAAE,CACD;oBACI,yDAAyD;oBACzD,IAAI,CAAC,SAAS,CAAC,cAAc,EAAE,IAAI,EAAE,CAAC,CAAC;iBAC1C,CAAC,IAAI,CAAC,EAAE,CAAC,CACb,CAAC;YACN,CAAC;QACL,CAAC;aAAM,CAAC;YACJ,mBAAmB;YACnB,cAAc,GAAG,uBAAuB,CAAC;QAC7C,CAAC;QAED,IACI,uBAAuB,KAAK,SAAS;YACrC,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,uBAAuB,CAAC,EAC5E,CAAC;YACC,2EAA2E;YAC3E,OAAO,uBAAuB,CAAC;QACnC,CAAC;QAED,OAAO,cAAc,CAAC;IAC1B,CAAC,CAAC,EAAE,CAAC;IAEL,MAAM,YAAY,GAAG,CAAC,GAAG,EAAE;QACvB,0DAA0D;QAC1D,2DAA2D;QAC3D,6BAA6B;QAC7B,MAAM,YAAY,GAAG,CAAC,GAAG,EAAE;YACvB,IAAI,GAAuB,CAAC;YAE5B,IAAI,CAAC;gBACD,MAAM,cAAc,GAAG,uBAAuB,CAAC,GAAG,CAAC;gBACnD,MAAM,CAAC,cAAc,KAAK,SAAS,IAAI,OAAO,cAAc,KAAK,QAAQ,CAAC,CAAC;gBAC3E,GAAG,GAAG,cAAc,CAAC;YACzB,CAAC;YAAC,MAAM,CAAC;gBACL,GAAG,GAAG,SAAS,CAAC;YACpB,CAAC;YAED,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;gBACpB,OAAO,SAAS,CAAC;YACrB,CAAC;YAED,OAAO,GAAG,CAAC;QACf,CAAC,CAAC,EAAE,CAAC;QAEL,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;YAC7B,OAAO,IAAI,CAAC,GAAG,EAAE,CAAC;QACtB,CAAC;QAED,OAAO,YAAY,GAAG,IAAI,CAAC;IAC/B,CAAC,CAAC,EAAE,CAAC;IAEL,MAAM,aAAa,GAAuC;QACtD,GAAG,CAAC,gCAAgC;YAChC,CAAC,CAAC;gBACI,WAAW,EAAE,OAAO;gBACpB,yBAAyB,EAAE,CAAC,GAAG,EAAE;oBAC7B,MAAM,cAAc,GAAG,uBAAuB,CAAC,OAAO,CAAC,CAAC;oBAExD,MAAM,CACF,cAAc,KAAK,SAAS,EAC5B,oGAAoG,CACvG,CAAC;oBAEF,OAAO,cAAc,CAAC;gBAC1B,CAAC,CAAC,EAAE;aACP;YACH,CAAC,CAAC;gBACI,WAAW;gBACX,yBAAyB,EAAE,CAAC,GAAG,EAAE;oBAC7B,aAAa,EAAE,CAAC;wBACZ,MAAM,cAAc,GAAG,uBAAuB,CAAC,WAAW,CAAC,CAAC;wBAE5D,IAAI,cAAc,KAAK,SAAS,EAAE,CAAC;4BAC/B,MAAM,aAAa,CAAC;wBACxB,CAAC;wBAED,OAAO,cAAc,CAAC;oBAC1B,CAAC;oBAED,mCAAmC,EAAE,CAAC;wBAClC,MAAM,EAAE,UAAU,EAAE,GAAG,gBAAgB,CAAC,wBAAwB,CAAC;wBAEjE,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;4BAC3B,MAAM,mCAAmC,CAAC;wBAC9C,CAAC;wBAED,MAAM,CAAC,OAAO,UAAU,KAAK,QAAQ,EAAE,SAAS,CAAC,CAAC;wBAElD,OAAO,UAAU,GAAG,IAAI,CAAC;oBAC7B,CAAC;oBAED,mCAAmC,EAAE,CAAC;wBAClC,MAAM,EAAE,UAAU,EAAE,GAAG,gBAAgB,CAAC,wBAAwB,CAAC;wBAEjE,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;4BAC3B,MAAM,mCAAmC,CAAC;wBAC9C,CAAC;wBAED,MAAM,CAAC,OAAO,UAAU,KAAK,QAAQ,EAAE,WAAW,CAAC,CAAC;wBAEpD,OAAO,YAAY,GAAG,UAAU,GAAG,IAAK,CAAC;oBAC7C,CAAC;oBAED,MAAM,CAAC,KAAK,EAAE,4CAA4C,CAAC,CAAC;gBAChE,CAAC,CAAC,EAAE;aACP,CAAC;QACR,OAAO;QACP,cAAc;QACd,uBAAuB;QACvB,YAAY;QACZ,gBAAgB,EAAE,CAAC,GAAG,EAAE;YACpB,MAAM,kBAAkB,GAAG,gBAAgB,CAAC,mCAAmC,CAAC;YAChF,OAAO,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,YAAY,GAAG,kBAAkB,CAAC,CAAC;QAClE,CAAC,CAAC,EAAE;KACP,CAAC;IAEF,MAAM,MAAM,GACR,YAAY,KAAK,SAAS;QACtB,CAAC,CAAC,EAAE,CAAkD;YAChD,GAAG,aAAa;YAChB,eAAe,EAAE,KAAK;SACzB,CAAC;QACJ,CAAC,CAAC,EAAE,CAA+C;YAC7C,GAAG,aAAa;YAChB,eAAe,EAAE,IAAI;YACrB,YAAY;YACZ,0BAA0B,EAAE,CAAC,GAAG,EAAE;gBAC9B,mCAAmC,EAAE,CAAC;oBAClC,MAAM,EAAE,kBAAkB,EAAE,GAAG,gBAAgB,CAAC,wBAAwB,CAAC;oBAEzE,IAAI,kBAAkB,KAAK,SAAS,EAAE,CAAC;wBACnC,MAAM,mCAAmC,CAAC;oBAC9C,CAAC;oBAED,MAAM,CAAC,OAAO,kBAAkB,KAAK,QAAQ,EAAE,SAAS,CAAC,CAAC;oBAE1D,IAAI,kBAAkB,KAAK,CAAC,EAAE,CAAC;wBAC3B,OAAO,aAAa,CAAC;oBACzB,CAAC;oBAED,OAAO,kBAAkB,GAAG,IAAI,CAAC;gBACrC,CAAC;gBAED,mCAAmC,EAAE,CAAC;oBAClC,MAAM,EAAE,kBAAkB,EAAE,GAAG,gBAAgB,CAAC,wBAAwB,CAAC;oBAEzE,IAAI,kBAAkB,KAAK,SAAS,EAAE,CAAC;wBACnC,MAAM,mCAAmC,CAAC;oBAC9C,CAAC;oBAED,MAAM,CAAC,OAAO,kBAAkB,KAAK,QAAQ,EAAE,YAAY,CAAC,CAAC;oBAE7D,IAAI,kBAAkB,KAAK,CAAC,EAAE,CAAC;wBAC3B,OAAO,aAAa,CAAC;oBACzB,CAAC;oBAED,OAAO,YAAY,GAAG,kBAAkB,GAAG,IAAI,CAAC;gBACpD,CAAC;gBAED,aAAa,EAAE,CAAC;oBACZ,MAAM,cAAc,GAAG,uBAAuB,CAAC,YAAY,CAAC,CAAC;oBAE7D,IAAI,cAAc,KAAK,SAAS,EAAE,CAAC;wBAC/B,MAAM,aAAa,CAAC;oBACxB,CAAC;oBAED,OAAO,cAAc,CAAC;gBAC1B,CAAC;gBAED,OAAO,SAAS,CAAC;YACrB,CAAC,CAAC,EAAE;SACP,CAAC,CAAC;IAEb,IACI,WAAW;QACX,MAAM,CAAC,eAAe;QACtB,MAAM,CAAC,0BAA0B,KAAK,SAAS;QAC/C,MAAM,CAAC,0BAA0B,GAAG,MAAM,CAAC,yBAAyB,EACtE,CAAC;QACC,OAAO,CAAC,IAAI,CACR;YACI,oFAAoF;YACpF,uDAAuD;SAC1D,CAAC,IAAI,CAAC,GAAG,CAAC,CACd,CAAC;IACN,CAAC;IAED,OAAO,MAAM,CAAC;AAClB,CAAC"}
+{"version":3,"file":"oidcClientTsUserToTokens.js","sourceRoot":"","sources":["../../src/core/oidcClientTsUserToTokens.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,MAAM,EAAE,MAAM,uBAAuB,CAAC;AAC/C,OAAO,EAAE,EAAE,EAAE,MAAM,mBAAmB,CAAC;AACvC,OAAO,EAAE,uBAAuB,EAAE,MAAM,kCAAkC,CAAC;AAC3E,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAE/C,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AACvD,OAAO,EAAE,6BAA6B,EAAE,qBAAqB,EAAE,MAAM,gCAAgC,CAAC;AAEtG,MAAM,UAAU,wBAAwB,CAAiD,MASxF;IACG,MAAM,EACF,QAAQ,EACR,gBAAgB,EAChB,oBAAoB,EACpB,gCAAgC,EAChC,uBAAuB,EACvB,GAAG,EACN,GAAG,MAAM,CAAC;IAEX,MAAM,WAAW,GAAG,uBAAuB,KAAK,SAAS,CAAC;IAE1D,MAAM,WAAW,GAAG,gBAAgB,CAAC,YAAY,CAAC;IAElD,MAAM,YAAY,GAAG,gBAAgB,CAAC,aAAa,CAAC;IAEpD,MAAM,OAAO,GAAG,gBAAgB,CAAC,QAAQ,CAAC;IAE1C,MAAM,CAAC,OAAO,KAAK,SAAS,EAAE,yCAAyC,CAAC,CAAC;IAEzE,MAAM,uBAAuB,GAAG,SAAS,CAA0C,OAAO,CAAC,CAAC;IAE5F,IAAI,WAAW,EAAE,CAAC;QACd,GAAG,EAAE,CACD;YACI,kBAAkB;YAClB,oBAAoB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,0CAA0C;YACpF,IAAI,CAAC,SAAS,CAAC,uBAAuB,EAAE,IAAI,EAAE,CAAC,CAAC;SACnD,CAAC,IAAI,CAAC,EAAE,CAAC,CACb,CAAC;IACN,CAAC;IAED,MAAM,cAAc,GAAG,CAAC,GAAG,EAAE;QACzB,IAAI,cAA8B,CAAC;QAEnC,IAAI,oBAAoB,KAAK,SAAS,EAAE,CAAC;YACrC,cAAc,GAAG,oBAAoB,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC;YAErE,IAAI,WAAW,EAAE,CAAC;gBACd,GAAG,EAAE,CACD;oBACI,yDAAyD;oBACzD,IAAI,CAAC,SAAS,CAAC,cAAc,EAAE,IAAI,EAAE,CAAC,CAAC;iBAC1C,CAAC,IAAI,CAAC,EAAE,CAAC,CACb,CAAC;YACN,CAAC;QACL,CAAC;aAAM,CAAC;YACJ,mBAAmB;YACnB,cAAc,GAAG,uBAAuB,CAAC;QAC7C,CAAC;QAED,IACI,uBAAuB,KAAK,SAAS;YACrC,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,uBAAuB,CAAC,EAC5E,CAAC;YACC,2EAA2E;YAC3E,OAAO,uBAAuB,CAAC;QACnC,CAAC;QAED,OAAO,cAAc,CAAC;IAC1B,CAAC,CAAC,EAAE,CAAC;IAEL,MAAM,YAAY,GAAG,CAAC,GAAG,EAAE;QACvB,0DAA0D;QAC1D,2DAA2D;QAC3D,6BAA6B;QAC7B,MAAM,YAAY,GAAG,CAAC,GAAG,EAAE;YACvB,IAAI,GAAuB,CAAC;YAE5B,IAAI,CAAC;gBACD,MAAM,cAAc,GAAG,uBAAuB,CAAC,GAAG,CAAC;gBACnD,MAAM,CAAC,cAAc,KAAK,SAAS,IAAI,OAAO,cAAc,KAAK,QAAQ,CAAC,CAAC;gBAC3E,GAAG,GAAG,cAAc,CAAC;YACzB,CAAC;YAAC,MAAM,CAAC;gBACL,GAAG,GAAG,SAAS,CAAC;YACpB,CAAC;YAED,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;gBACpB,OAAO,SAAS,CAAC;YACrB,CAAC;YAED,OAAO,GAAG,CAAC;QACf,CAAC,CAAC,EAAE,CAAC;QAEL,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;YAC7B,OAAO,IAAI,CAAC,GAAG,EAAE,CAAC;QACtB,CAAC;QAED,OAAO,YAAY,GAAG,IAAI,CAAC;IAC/B,CAAC,CAAC,EAAE,CAAC;IAEL,MAAM,aAAa,GAAuC;QACtD,GAAG,CAAC,gCAAgC;YAChC,CAAC,CAAC;gBACI,WAAW,EAAE,OAAO;gBACpB,yBAAyB,EAAE,CAAC,GAAG,EAAE;oBAC7B,MAAM,cAAc,GAAG,uBAAuB,CAAC,OAAO,CAAC,CAAC;oBAExD,MAAM,CACF,cAAc,KAAK,SAAS,EAC5B,oGAAoG,CACvG,CAAC;oBAEF,OAAO,cAAc,CAAC;gBAC1B,CAAC,CAAC,EAAE;aACP;YACH,CAAC,CAAC;gBACI,WAAW;gBACX,yBAAyB,EAAE,CAAC,GAAG,EAAE;oBAC7B,aAAa,EAAE,CAAC;wBACZ,MAAM,cAAc,GAAG,uBAAuB,CAAC,WAAW,CAAC,CAAC;wBAE5D,IAAI,cAAc,KAAK,SAAS,EAAE,CAAC;4BAC/B,MAAM,aAAa,CAAC;wBACxB,CAAC;wBAED,OAAO,cAAc,CAAC;oBAC1B,CAAC;oBAED,mCAAmC,EAAE,CAAC;wBAClC,MAAM,EAAE,UAAU,EAAE,GAAG,gBAAgB,CAAC,wBAAwB,CAAC;wBAEjE,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;4BAC3B,MAAM,mCAAmC,CAAC;wBAC9C,CAAC;wBAED,MAAM,CAAC,OAAO,UAAU,KAAK,QAAQ,EAAE,SAAS,CAAC,CAAC;wBAElD,OAAO,UAAU,GAAG,IAAI,CAAC;oBAC7B,CAAC;oBAED,mCAAmC,EAAE,CAAC;wBAClC,MAAM,EAAE,UAAU,EAAE,GAAG,gBAAgB,CAAC,wBAAwB,CAAC;wBAEjE,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;4BAC3B,MAAM,mCAAmC,CAAC;wBAC9C,CAAC;wBAED,MAAM,CAAC,OAAO,UAAU,KAAK,QAAQ,EAAE,WAAW,CAAC,CAAC;wBAEpD,OAAO,YAAY,GAAG,UAAU,GAAG,IAAK,CAAC;oBAC7C,CAAC;oBAED,MAAM,CAAC,KAAK,EAAE,4CAA4C,CAAC,CAAC;gBAChE,CAAC,CAAC,EAAE;aACP,CAAC;QACR,OAAO;QACP,cAAc;QACd,uBAAuB;QACvB,YAAY;QACZ,gBAAgB,EAAE,CAAC,GAAG,EAAE;YACpB,MAAM,kBAAkB,GAAG,gBAAgB,CAAC,mCAAmC,CAAC;YAChF,OAAO,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,YAAY,GAAG,kBAAkB,CAAC,CAAC;QAClE,CAAC,CAAC,EAAE;KACP,CAAC;IAEF,MAAM,MAAM,GACR,YAAY,KAAK,SAAS;QACtB,CAAC,CAAC,EAAE,CAAkD;YAChD,GAAG,aAAa;YAChB,eAAe,EAAE,KAAK;SACzB,CAAC;QACJ,CAAC,CAAC,EAAE,CAA+C;YAC7C,GAAG,aAAa;YAChB,eAAe,EAAE,IAAI;YACrB,YAAY;YACZ,0BAA0B,EAAE,CAAC,GAAG,EAAE;gBAC9B,mCAAmC,EAAE,CAAC;oBAClC,MAAM,EAAE,kBAAkB,EAAE,GAAG,gBAAgB,CAAC,wBAAwB,CAAC;oBAEzE,IAAI,kBAAkB,KAAK,SAAS,EAAE,CAAC;wBACnC,MAAM,mCAAmC,CAAC;oBAC9C,CAAC;oBAED,MAAM,CAAC,OAAO,kBAAkB,KAAK,QAAQ,EAAE,SAAS,CAAC,CAAC;oBAE1D,IAAI,kBAAkB,KAAK,CAAC,EAAE,CAAC;wBAC3B,OAAO,aAAa,CAAC;oBACzB,CAAC;oBAED,OAAO,kBAAkB,GAAG,IAAI,CAAC;gBACrC,CAAC;gBAED,mCAAmC,EAAE,CAAC;oBAClC,MAAM,EAAE,kBAAkB,EAAE,GAAG,gBAAgB,CAAC,wBAAwB,CAAC;oBAEzE,IAAI,kBAAkB,KAAK,SAAS,EAAE,CAAC;wBACnC,MAAM,mCAAmC,CAAC;oBAC9C,CAAC;oBAED,MAAM,CAAC,OAAO,kBAAkB,KAAK,QAAQ,EAAE,YAAY,CAAC,CAAC;oBAE7D,IAAI,kBAAkB,KAAK,CAAC,EAAE,CAAC;wBAC3B,OAAO,aAAa,CAAC;oBACzB,CAAC;oBAED,OAAO,YAAY,GAAG,kBAAkB,GAAG,IAAI,CAAC;gBACpD,CAAC;gBAED,aAAa,EAAE,CAAC;oBACZ,MAAM,cAAc,GAAG,uBAAuB,CAAC,YAAY,CAAC,CAAC;oBAE7D,IAAI,cAAc,KAAK,SAAS,EAAE,CAAC;wBAC/B,MAAM,aAAa,CAAC;oBACxB,CAAC;oBAED,OAAO,cAAc,CAAC;gBAC1B,CAAC;gBAED,OAAO,SAAS,CAAC;YACrB,CAAC,CAAC,EAAE;SACP,CAAC,CAAC;IAEb,IAAI,6BAA6B,EAAE,EAAE,CAAC;QAClC,MAAM,YAAY,GAAG,qBAAqB,CAAC;YACvC,QAAQ;YACR,MAAM;SACT,CAAC,CAAC;QAEH,MAAM,CAAC,WAAW,GAAG,YAAY,CAAC,WAAW,CAAC;QAC9C,MAAM,CAAC,OAAO,GAAG,YAAY,CAAC,OAAO,CAAC;QACtC,MAAM,CAAC,YAAY,GAAG,YAAY,CAAC,YAAY,CAAC;IACpD,CAAC;IAED,IACI,WAAW;QACX,MAAM,CAAC,eAAe;QACtB,MAAM,CAAC,0BAA0B,KAAK,SAAS;QAC/C,MAAM,CAAC,0BAA0B,GAAG,MAAM,CAAC,yBAAyB,EACtE,CAAC;QACC,OAAO,CAAC,IAAI,CACR;YACI,oFAAoF;YACpF,uDAAuD;SAC1D,CAAC,IAAI,CAAC,GAAG,CAAC,CACd,CAAC;IACN,CAAC;IAED,OAAO,MAAM,CAAC;AAClB,CAAC"}

package/esm/core/tokenExfiltrationDefense.d.ts

@@ -0,0 +1,6 @@
+type Params = {
+    resourceServersAllowedHostnames: string[] | undefined;
+    serviceWorkersAllowedHostnames: string[] | undefined;
+};
+export declare function enableTokenExfiltrationDefense(params: Params): void;
+export {};