s/window.crypto/globalThis.crypto/

[elf-pavlik]

Currently I only extend the SessionCore class for initial implementation of session which uses self issued tokens in CSS instance that acts as the OP.
I know that you want to focus on a browser but AFAIK there thould be no problem with this change.

Currently I needed to copy & paste _createSignedDPoPToken method into my sublcass and @ts-ignore bunch of errors about accessing private properties. It still works as an early draft 🐱

[uvdsl]

Hi pavlik, thank you for this PR.
I think, technically, this should be fine - however some gut feeling keeps me from merging.
It feels odd to mix window (as in window.location.href ) with globalThis (as you suggest for globalThis.crypto).
I'll need to look into this.

[elf-pavlik]

Sure, no rush. for now I can continue with what I have. If you want your code to exclusively work in a web browser it probably doesn't make sense.