feat: swap @inrupt/solid-client-authn-browser for @uvdsl/solid-oidc-client-browser

Wraps uvdsl's default WebWorkerSession in a thin Inrupt-shape adapter
inside authSession.ts so downstream call sites (panes, solid-ui) keep
working unchanged. The SharedWorker provides background token refresh
and cross-tab token sharing — the intended uvdsl usage for web apps.

Refs #274

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

Author: m5x5

package.json

@@ -72,7 +72,7 @@
     "webpack-cli": "^7.0.2"
   },
   "dependencies": {
-    "@inrupt/solid-client-authn-browser": "^4.0.0",
+    "@uvdsl/solid-oidc-client-browser": "^0.2.2",
     "solid-namespace": "^0.5.4"
   },
   "peerDependencies": {

src/authSession/authSession.ts

@@ -1,7 +1,57 @@
-import {
-  Session,
-} from '@inrupt/solid-client-authn-browser'
+import { Session as UvdslSession, SessionIDB } from '@uvdsl/solid-oidc-client-browser'
 
-export const authSession = new Session()
+/** Inrupt-shape `Session` API consumed by solid-logic + downstream panes,
+ * backed by uvdsl's default `Session` (WebWorkerSession). */
+
+export const EVENTS = { LOGIN: 'login', LOGOUT: 'logout', SESSION_RESTORED: 'sessionRestore' } as const
+type Cb = (...args: any[]) => void
+
+export class Session {
+  private inner: UvdslSession | null = null
+  private subs: Record<string, Set<Cb>> = {}
+  readonly events = {
+    on: (n: string, cb: Cb) => { (this.subs[n] ||= new Set()).add(cb) },
+    off: (n: string, cb: Cb) => this.subs[n]?.delete(cb),
+    removeListener: (n: string, cb: Cb) => this.subs[n]?.delete(cb),
+  }
+  private emit(n: string, ...a: any[]) {
+    this.subs[n]?.forEach(cb => { try { cb(...a) } catch (_) {} })
+  }
+  private ensure(redirect?: string) {
+    return this.inner ||= new UvdslSession(
+      { client_name: 'SolidOS', redirect_uris: [redirect || location.origin + location.pathname] } as any,
+      { database: new SessionIDB() } as any,
+    )
+  }
+
+  get info() {
+    const s = this.inner
+    return { webId: s?.isActive ? s.webId : undefined, isLoggedIn: !!s?.isActive }
+  }
+
+  fetch = (input: RequestInfo | URL, init?: RequestInit) =>
+    this.ensure().authFetch(input as any, init)
 
-  
+  async login(opts: { oidcIssuer: string; redirectUrl?: string }) {
+    const r = opts.redirectUrl || location.href
+    await this.ensure(r).login(opts.oidcIssuer, r)
+  }
+
+  async logout() { await this.ensure().logout(); this.emit('logout') }
+
+  async handleIncomingRedirect(opts?: { restorePreviousSession?: boolean; url?: string }) {
+    const url = new URL(opts?.url || location.href)
+    const s = this.ensure()
+    if (url.searchParams.has('code') && url.searchParams.has('state')) {
+      await s.handleRedirectFromLogin()
+      for (const k of ['code', 'state', 'iss']) url.searchParams.delete(k)
+      try { history.replaceState(null, '', url.toString()) } catch (_) {}
+      if (s.isActive) this.emit('login')
+    } else if (opts?.restorePreviousSession !== false) {
+      await s.restore()
+      if (s.isActive) this.emit('sessionRestore', url.toString())
+    }
+  }
+}
+
+export const authSession = new Session()

src/authn/SolidAuthnLogic.ts

@@ -1,7 +1,7 @@
 import { namedNode, NamedNode, sym } from 'rdflib'
 import { appContext, offlineTestID } from './authUtil'
 import * as debug from '../util/debug'
-import { EVENTS, Session } from '@inrupt/solid-client-authn-browser'
+import { EVENTS, Session } from '../authSession/authSession'
 import { AuthenticationContext, AuthnLogic } from '../types'
 
 export class SolidAuthnLogic implements AuthnLogic {

src/logic/solidLogic.ts

@@ -1,4 +1,4 @@
-import { Session } from '@inrupt/solid-client-authn-browser'
+import { Session } from '../authSession/authSession'
 import * as rdf from 'rdflib'
 import { LiveStore, NamedNode, Statement } from 'rdflib'
 import { createAclLogic } from '../acl/aclLogic'

src/types.ts

@@ -1,4 +1,4 @@
-import { Session } from '@inrupt/solid-client-authn-browser'
+import { Session } from './authSession/authSession'
 import { LiveStore, NamedNode, Statement } from 'rdflib'
 
 export type AppDetails = {

webpack.config.mjs

@@ -10,7 +10,13 @@ const externalsBase = {
   '@trust/webcrypto': 'crypto',
   '@xmldom/xmldom': 'window',
   'whatwg-url': 'URL',
-  'rdflib': '$rdf'
+  'rdflib': '$rdf',
+  // Must externalize: uvdsl's SharedWorker URL is constructed via
+  // `new URL('./RefreshWorker.js', import.meta.url)`. If bundled inline here,
+  // webpack bakes a `file://…/solid-logic/dist/…` path that browsers refuse
+  // to load over http:// origin. Leaving it external lets the consumer bundle
+  // (mashlib) resolve the worker URL relative to its own publicPath.
+  '@uvdsl/solid-oidc-client-browser': '@uvdsl/solid-oidc-client-browser'
 }
 
 const externalsESM = {