OAuthService.silentRefreshPostMessageEventListener executes tryLogin() inadvertently in the main frame

[yusselparedes]

Describe the bug
OAuthService.silentRefreshPostMessageEventListener executes tryLogin() inadvertently in the main frame.

If you have sessionChecksEnabled = true or if you have browser extensions like Angular DevTools doing window.postMessage() the tryLogin call is done with customHashFragment: undefined

In most of the cases tryLogin() is ignored, but if for any reason you have in the current url query parameters used in the tryLogin like state or code things start to mess up.

Expected behavior
Filter messages not intended for the silentRefreshPostMessageEventListener before executing tryLogin