j1_template_mde 2018.4.31 → 2018.4.32

data/_includes/themes/j1/modules/connectors/comments

@@ -17,28 +17,30 @@
 {% endcomment %}
 
 {% comment %} Liquid procedures
---------------------------------------------------------------- {% endcomment %}
+-------------------------------------------------------------------------------- {% endcomment %}
 
 {% comment %} Variables
---------------------------------------------------------------- {% endcomment %}
-
+-------------------------------------------------------------------------------- {% endcomment %}
+{% assign comments          = site.data.j1_config.comments.enabled %}
+{% assign comment_provider  = site.data.j1_config.comments.provider %}
 
 {% comment %} Main
---------------------------------------------------------------- {% endcomment %}
+-------------------------------------------------------------------------------- {% endcomment %}
 
-{% if site.data.j1_config.comment.provider and page.comments %}
+<!-- [INFO   ] [j1.layout.connectors                  ] [Start processing load region head, layout: {{page.layout}}] -->
+{% if comments and page.comments %}
 
-  {% case site.data.j1_config.comment.provider %}
+  {% case comment_provider %}
     {% when "disqus" %}
+      <!-- [INFO   ] [j1.layout.connectors                  ] [Place comment provider DISQUS ] -->
       {% include themes/{{site.template.name}}/modules/connectors/comment/disqus.html %}
-    {% when "livefyre" %}
-      {% include themes/{{site.template.name}}/procedures/provider/comment/livefyre %}
-    {% when "intensedebate" %}
-      {% include themes/{{site.template.name}}/procedures/provider/comment/intensedebate %}
     {% when "facebook" %}
-      {% include themes/{{site.template.name}}/procedures/provider/comment/facebook %}
+      <!-- [INFO   ] [j1.layout.connectors                  ] [Place comment provider FACEBOOK ] -->
+      {% include themes/{{site.template.name}}/procedures/provider/comment/facebook.html %}
     {% when "custom" %}
-      {% include themes/{{site.template.name}}/procedures/provider/comment/custom %}
+      <!-- [INFO   ] [j1.layout.connectors                  ] [Place comment provider CUSTOM ] -->
+      {% include themes/{{site.template.name}}/procedures/provider/comment/custom-provider.html %}
   {% endcase %}
 
 {% endif %}
+<!-- [INFO   ] [j1.layout.connectors                  ] [End processing] -->

data/_includes/themes/j1/modules/connectors/sharing

@@ -17,20 +17,13 @@
 {% endcomment %}
 
 {% comment %} Liquid procedures
---------------------------------------------------------------- {% endcomment %}
+-------------------------------------------------------------------------------- {% endcomment %}
 
 {% comment %} Variables
---------------------------------------------------------------- {% endcomment %}
+-------------------------------------------------------------------------------- {% endcomment %}
 
 
 {% comment %} Main
---------------------------------------------------------------- {% endcomment %}
+-------------------------------------------------------------------------------- {% endcomment %}
 
-{% if site.safe and site.xxj.sharing.provider and page.xxj.sharing != false %}
 
-  {% case site.xxj.sharing.provider %}
-    {% when "custom" %}
-      {% include custom/sharing %}
-  {% endcase %}
-
-{% endif %}

data/_includes/themes/j1/modules/navigator/generator.html

@@ -1,7 +1,7 @@
 {% comment %} 
  # -----------------------------------------------------------------------------
  #  ~/_includes/themes/j1/modules/navigator/generator.html
- #  Liquid HTML template to create the Navigation System for J1 Template
+ #  Liquid HTML template to create the Navigation System for J1 Template 
  #
  #  Product/Info:
  #  https://jekyll-one.com
@@ -58,6 +58,14 @@
   {% assign nav_authclient_default      = nav_defaults.nav_authclient %}
   {% assign nav_authclient_config       = navigator_config.nav_authclient %}
 
+  {% assign cookie_consent_config       = site.data.modules.j1_cookie_consent %}
+  {% assign consent_defaults            = cookie_consent_config.defaults %}
+  {% assign consent_settings            = cookie_consent_config.consent %}
+
+  {% assign cookiebar_config_defaults   = site.data.modules.j1_cookiebar.defaults %}
+  {% assign cookiebar_config            = site.data.modules.j1_cookiebar.cookiebar %}
+
+
 
   {% comment %} Set config options
   ------------------------------------------------------------------------------ {% endcomment %}
@@ -66,7 +74,8 @@
   {% assign topsearch_options           = nav_topsearch_default | merge: nav_topsearch_config %}
   {% assign sidebar_options             = nav_sidebar_default | merge: nav_sidebar_config %}
   {% assign authclient_options          = nav_authclient_default | merge: nav_authclient_config %}
-
+  {% assign cookie_consent_options      = consent_defaults | merge: consent_settings %}
+  
   {% comment %} Set navBarOptions
   ------------------------------------------------------------------------------ {% endcomment %}
   {% assign brand_position              = nav_bar_options.brand_position %}
@@ -75,9 +84,8 @@
   {% assign nav_color                   = nav_bar_options.color %}
 
 
-  {% comment %} Set navBarProperties
+  {% comment %} Set navBarProperties 
   ------------------------------------------------------------------------------ {% endcomment %}
-
   {% if nav_fixed %}
     {% assign nav_bar_fixed = 'navbar-fixed' %}
     {% if nav_style == 'overlay' %} {% assign nav_bar_style = 'navbar-transparent' %} {% endif %}
@@ -91,7 +99,7 @@
   {% capture nav_bar_defaults %}navbar navigator navbar-expand-{{nav_expand}} navbar-default{% endcapture %}
 
 
-{% comment %} Main      
+{% comment %} Main
 -------------------------------------------------------------------------------- {% endcomment %}
 <!-- [INFO   ] [j1.modules.navigator.generator.html   ] [check for topsearch] -->
 {% if topsearch_options.enabled %}
@@ -146,26 +154,23 @@
   <!-- [INFO   ] [j1.modules.navigator.generator.html   ] [start processing: nav bar] -->
   <!-- [INFO   ] [j1.modules.navigator.generator.html   ] [place nav menu container for AJAX load] -->
   <div id="{{menu_id}}" class="collapse"></div>
-
   <!-- [INFO   ] [j1.modules.navigator.generator.html   ] [check for Quicklinks] -->
   <!-- [INFO   ] [j1.modules.navigator.generator.html   ] Quicklinks enabled: {{quicklinks_options.enabled}}] -->
   {% if quicklinks_options.enabled %}
   <!-- [INFO   ] [j1.modules.navigator.generator.html   ] [start processing: quicklinks] -->
-  {% include {{ quicklinks_create }} options=quicklinks_options auth_options=j1_auth_config %}
+  {% include {{ quicklinks_create }} options=quicklinks_options auth_options=j1_auth_config consent_options=cookie_consent_options %}
   {% endif %}
   <!-- [INFO   ] [j1.modules.navigator.generator.html   ] [end processing: quicklinks] -->
 
 </nav>
 
-
-{% comment %} Place HTMl code for SignIn|SignOut dialogs for J1AuthClient
+{% comment %} Place div container for sign in|out dialog used by J1AuthClient
 -------------------------------------------------------------------------------- {% endcomment %}
 <!-- [INFO   ] [j1.modules.navigator.generator.html   ] [check for J1 AuthClient] -->
 <!-- [INFO   ] [j1.modules.navigator.generator.html   ] [J1 AuthClient enabled: {{j1_auth_config.enabled}}] -->
-{% if j1_auth_config.enabled %}
-<!-- [INFO   ] [j1.modules.navigator.generator.html   ] [start processing: AuthClient] -->
 <!-- [INFO   ] [j1.modules.navigator.generator.html   ] [place <div> container for the auth_client] -->
 <div id="{{authclient_modals_id}}" class="authclient_modals"></div>
-{% endif %}
 <!-- [INFO   ] [j1.modules.navigator.generator.html   ] [end processing: auth_client] -->
 <!-- [INFO   ] [j1.modules.navigator.generator.html   ] [end processing: navigation] -->
+
+

data/_includes/themes/j1/modules/navigator/procedures/quicklinks.proc

@@ -1,7 +1,7 @@
 {% comment %}
  # -----------------------------------------------------------------------------
  #  ~/_includes/templates/j1/modules/navigator/procedures/quicklinks.html
- #  Liquid PROCEDURE template to create the quickLink bar
+ #  Liquid PROCEDURE template to create the quickLink bar and place icons
  #
  #  Product/Info:
  #  https://jekyll-one.com
@@ -10,7 +10,6 @@
  #
  #  J1 Template is licensed under the MIT License.
  #  See: https://github.com/jekyll-one/j1_template_mde/blob/master/LICENSE 
- #
  # -----------------------------------------------------------------------------
  #  Test data:
  #   liquid_var: {{ liquid_var | debug }}
@@ -22,6 +21,7 @@
 -------------------------------------------------------------------------------- {% endcomment %}
 {% assign quicklinks_options     = include.options %}
 {% assign auth_options           = include.auth_options %}
+{% assign consent_settings       = include.consent_options %}
 
 {% comment %} Liquid procedures
 -------------------------------------------------------------------------------- {% endcomment %}
@@ -34,37 +34,47 @@
 
   {% comment %} Set intial settings
   ------------------------------------------------------------------------------ {% endcomment %}
-  {% assign top_search_enabled  = false %}
-  {% assign sidebar_enabled     = false %}
-  {% assign signin_modal_id     = "modalOmniSignIn" %}
+  {% assign sidebar_enabled         = false %}
+  {% assign top_search_enabled      = false %}
+  {% assign cookie_consent_enabled  = consent_settings.consent.enabled %}
+  {% assign authclient_enabled      = auth_options.enabled %}
+  {% assign signin_modal_id         = "modalOmniSignIn" %}
 
   {% comment %} Set quicklinks properties
   ------------------------------------------------------------------------------ {% endcomment %}
-  {% assign icon_family         = quicklinks_options.icon_family | downcase %}
-
-  {% assign search_icon         = quicklinks_options.top_search_icon %}
-  {% assign sidebar_icon        = quicklinks_options.sidebar_icon %}
-
-  {% assign signin_icon         = quicklinks_options.signin_icon %}
-  {% assign signout_icon        = quicklinks_options.signout_icon %}
-  {% assign facebook_icon       = quicklinks_options.facebook_icon %}
-  {% assign github_icon         = quicklinks_options.github_icon %}
-  {% assign google_plus_icon    = quicklinks_options.google_plus_icon %}
-  {% assign twitter_icon        = quicklinks_options.twitter_icon %}
+  {% assign icon_family             = quicklinks_options.icon_family | downcase %}
+
+  {% assign cookies_icon            = quicklinks_options.cookies_icon %}
+  {% assign search_icon             = quicklinks_options.top_search_icon %}
+  {% assign sidebar_icon            = quicklinks_options.sidebar_icon %}
+  {% assign signin_icon             = quicklinks_options.signin_icon %}
+  {% assign signout_icon            = quicklinks_options.signout_icon %}
+
+  {% assign disqus_icon             = quicklinks_options.disqus_icon %}
+  {% assign github_icon             = quicklinks_options.github_icon %}
+  {% assign patreon_icon            = quicklinks_options.patreon_icon %}
+  {% assign facebook_icon           = quicklinks_options.facebook_icon %}
+  {% assign twitter_icon            = quicklinks_options.twitter_icon %}
   
-  {% assign facebook_url        = quicklinks_options.facebook_url %}
-  {% assign github_url          = quicklinks_options.github_url %}
-  {% assign google_plus_url     = quicklinks_options.google_plus_url %}
-  {% assign twitter_url         = quicklinks_options.twitter_url %}
+  {% assign disqus_url              = quicklinks_options.google_plus_url %}
+  {% assign github_url              = quicklinks_options.github_url %}
+  {% assign patreon_url             = quicklinks_options.patreon_url %}
+  {% assign facebook_url            = quicklinks_options.facebook_url %}
+  {% assign twitter_url             = quicklinks_options.twitter_url %}
 
   {% comment %} 
-  auth_options.enabled: {{ auth_options.enabled | debug }} 
+  authclient_enabled: {{ auth_options.enabled | debug }}
+  {% if consent_settings.consent.enabled %} {% assign consent_enabled = true %} {% endif %}
+  consent_settings:  {{ consent_settings | debug }}
+  consent_enabled:    {{ consent_enabled | debug }} 
   {% endcomment %}
 
-  <!-- [INFO   ] [j1.modules.navigator.quicklinks.proc  ] [J1 AuthManager detected as: {{ auth_options.enabled }}] -->
-
   {% if quicklinks_options.top_search_icon %} {% assign top_search_enabled = true %} {% endif %}
   {% if quicklinks_options.sidebar_icon %} {% assign sidebar_enabled = true %} {% endif %}
+  {% if consent_settings.enabled %} {% assign consent_enabled = true %} {% endif %}
+    
+  <!-- [INFO   ] [j1.modules.navigator.quicklinks.proc  ] [J1 AuthManager detected as: {{ authclient_enabled }}] -->
+  <!-- [INFO   ] [j1.modules.navigator.quicklinks.proc  ] [J1 CookieConsent detected as: {{ consent_enabled }}] -->
 
   {% if quicklinks_options.icon_family == 'FontAwesome' or quicklinks_options.icon_family == 'FontAwesome4' or quicklinks_options.icon_family == 'FontAwesome5' %}
     {% assign icon_family = 'fa' %}
@@ -77,8 +87,6 @@
   {% include {{select_icon_size}} family=quicklinks_options.icon_family size=quicklinks_options.icon_size %}
   {% assign icon_size = {{size}} %}
 
-
-
   {% comment %} Icon color set dynamically by adapter
   ------------------------------------------------------------------------------
   {% include {{select_color}} color=quicklinks_options.icon_color fallback="#9E9E9E" %}
@@ -86,7 +94,6 @@
   {% capture icon_color %}style="color:{{my_icon_color}}"{% endcapture %}
   {% endcomment %}
 
-
   {% comment %} Main
   -------------------------------------------------------------------------------- {% endcomment %}
   <!-- [INFO   ] [j1.modules.navigator.quicklinks.proc  ] [start processing: quick links] -->
@@ -96,9 +103,12 @@
       {% if github_url != "none" %}<li nav-item><a class="nav-icon" href="{{github_url}}"><i class="{{icon_family}} {{icon_family}}-{{github_icon}} {{icon_size}}"></i></a></li>{% endif %}
       {% if google_plus_url != "none" %}<li nav-item><a class="nav-icon" href="{{google_plus_url}}"><i class="{{icon_family}} {{icon_family}}-{{google_plus_icon}} {{icon_size}}"></i></a></li>{% endif %}
       {% if twitter_url != "none" %}<li nav-item><a class="nav-icon" href="{{twitter_url}}"><i class="{{icon_family}} {{icon_family}}-{{twitter_icon}} {{icon_size}}"></i></a></li>{% endif %}
-      {% if auth_options.enabled %}<li class="nav-item" id="quickLinksSignInOutButton"><a class="nav-icon" id="navLinkSignInOut" href="#" data-toggle="modal" data-target="#{{signin_modal_id}}"><i id="iconSignInOut" class="{{icon_family}} {{icon_family}}-{{signin_icon}} {{icon_size}}"></i></a></li>{% endif %}
+      {% if authclient_enabled %}<li class="nav-item" id="quickLinksSignInOutButton" style="display: none;"><a class="nav-icon" id="navLinkSignInOut" href="#" data-toggle="modal" data-target="#{{signin_modal_id}}"><i id="iconSignInOut" class="{{icon_family}} {{icon_family}}-{{signin_icon}} {{icon_size}}"></i></a></li>{% endif %}
+      {% if consent_enabled %}<li class="nav-item" id="quickLinksCookieButton" style="display: none;"><a id="cookie-state" class="nav-icon" href="#" data-toggle="modal" data-target="#cookieRevokeCentralDanger"><i class="{{icon_family}} {{icon_family}}-{{cookies_icon}} {{icon_size}}"></i></a></li>{% endif %}
       {% if top_search_enabled %}<li class="nav-item search"><a class="nav-icon" href="#"><i class="{{icon_family}} {{icon_family}}-{{search_icon}} {{icon_size}}"></i></a></li>{% endif %}
       {% if sidebar_enabled %}<li class="nav-item side-menu"><a class="nav-icon" href="#"><i class="{{icon_family}} {{icon_family}}-{{sidebar_icon}} {{icon_size}}"></i></a></li>{% endif %}
     </ul>
   </div>
   <!-- [INFO   ] [j1.modules.navigator.quicklinks.proc  ] [end processing: quick links] -->
+
+

data/_includes/themes/j1/modules/navigator/procedures/sidebar.proc

@@ -98,9 +98,9 @@
                   {% else %}
                     {% capture icon %}<i class="{{icon_family}} {{icon_family}}-{{link.icon}} {{icon_size}} mr-2" {{icon_color}}></i>{% endcapture %}
                   {% endif %}
-                  
-                  {% if link.target == null %}
-                    {% assign target = '' %}
+
+                  {% if link.target == "" %}
+                    {% assign target = "" %}
                   {% else %}
                     {% capture target %}target="{{link.target}}"{% endcapture %}
                   {% endif %}  

data/_includes/themes/j1/procedures/layouts/module_writer.proc

@@ -111,7 +111,7 @@
               <script>
                 $(document).ready(function() {
                   // [INFO   ] [j1.layout.module_writer.proc          ] [create logger for component "loader"]
-                  var logger = log4javascript.getLogger("j1.loader");
+                  var logger = log4javascript.getLogger("j1.ModuleLoader.liquid");
 
                   {% if environment == 'development' %}
                     // [INFO   ] [j1.layout.module_writer.proc          ] [create module loader START message]
@@ -119,10 +119,10 @@
                       var start = moment();
                       var finished = '';
                       var elapsed = '';
-                      var log_text = "[" +start.format("HH:mm:ss.SSS")+ "] [INFO ] [j1.loader                          ] [{{comment | replace: 'Resources for', '' | strip }} is being initialized]"
+                      var log_text = "[" +start.format("HH:mm:ss.SSS")+ "] [INFO ] [j1.ModuleLoader                          ] [{{comment | replace: 'Resources for', '' | strip }} are being initialized]"
                       console.info( log_text );
                     {% else %}
-                      var log_text = "{{comment | replace: 'Resources for', '' | strip }} is being initialized"
+                      var log_text = "{{comment | replace: 'Resources for', '' | strip }} are being initialized"
                       logger.info(log_text);
                     {% endif %}
                   {% endif %}
@@ -158,7 +158,7 @@
                     // [INFO   ] [j1.layout.module_writer.proc          ] [create module loader FINISHED message]
                     {% if id == 'log4javascript' %}
                       finished = moment();
-                      log_text = "[" +finished.format("HH:mm:ss.SSS")+ "] [INFO ] [j1.loader                          ] [{{comment | replace: 'Resources for', '' | strip }} initializing finished]"
+                      log_text = "[" +finished.format("HH:mm:ss.SSS")+ "] [INFO ] [j1.ModuleLoader                          ] [{{comment | replace: 'Resources for', '' | strip }} initializing finished]"
                       console.info( log_text );
                     {% else %}
                       var log_text = "{{comment | replace: 'Resources for', '' | strip }} initializing finished"

data/_includes/themes/j1/procedures/layouts/resource_writer.proc

@@ -88,8 +88,8 @@
 
           {% if data_key == 'files' %}
 
-            <!-- [INFO   ] [j1.layout.resource_writer.proc          ] [{{layout}}: {{comment}}] -->
-            <!-- [INFO   ] [j1.layout.resource_writer.proc          ] [{{layout}}: place general file resources for ID: {{id}} ] -->
+            <!-- [INFO   ] [j1.layout.resource_writer.proc        ] [{{layout}}: {{comment}}] -->
+            <!-- [INFO   ] [j1.layout.resource_writer.proc        ] [{{layout}}: place general file resources for ID: {{id}} ] -->
 
             {% for file in data_value %}
 
@@ -138,8 +138,8 @@
           {% if data_key == 'css' %}
             {% for locator in data_value %}
 
-              <!-- [INFO   ] [j1.layout.resource_writer.proc          ] [{{layout}}: {{comment}}] -->
-              <!-- [INFO   ] [j1.layout.resource_writer.proc          ] [{{layout}}: place {{data_key}} files for resource ID: {{id}} ] -->
+              <!-- [INFO   ] [j1.layout.resource_writer.proc        ] [{{layout}}: {{comment}}] -->
+              <!-- [INFO   ] [j1.layout.resource_writer.proc        ] [{{layout}}: place {{data_key}} files for resource ID: {{id}} ] -->
 
               {% include {{select_location}} location=location locator=locator %}
               {% assign my_location = {{location_source}} %}
@@ -158,8 +158,8 @@
           {% if data_key == 'js' %}
             {% for locator in data_value %}
 
-              <!-- [INFO   ] [j1.layout.resource_writer.proc          ] [{{layout}}: {{comment}}] -->
-              <!-- [INFO   ] [j1.layout.resource_writer.proc          ] [{{layout}}: place {{data_key}} files for resource ID: {{id}} ] -->
+              <!-- [INFO   ] [j1.layout.resource_writer.proc        ] [{{layout}}: {{comment}}] -->
+              <!-- [INFO   ] [j1.layout.resource_writer.proc        ] [{{layout}}: place {{data_key}} files for resource ID: {{id}} ] -->
 
               {% include {{select_location}} location=location locator=locator %}
               {% assign my_location = {{location_source}} %}

data/lib/j1/version.rb

@@ -1,3 +1,3 @@
 module J1
-  VERSION = '2018.4.31'
+  VERSION = '2018.4.32'
 end

data/lib/j1_app/j1_auth_manager/_unused/auth_manager.before_merge_added.rb

@@ -0,0 +1,1267 @@
+# RuboCops - Documentation
+# ------------------------------------------------------------------------------
+# See: https://rubocop.readthedocs.io/en/latest/
+
+# RuboCops - Disabled Cops
+# ------------------------------------------------------------------------------
+# rubocop:disable Metrics/BlockLength
+# rubocop:disable Metrics/ClassLength
+# rubocop:disable Metrics/LineLength
+# rubocop:disable Style/StringLiterals
+# rubocop:disable Style/Documentation
+# rubocop:disable Metrics/BlockNesting
+# rubocop:disable Layout/ClosingParenthesisIndentation
+# rubocop:disable Layout/LeadingCommentSpace
+# rubocop:disable Layout/EmptyLines
+# rubocop:disable Layout/EmptyLinesAroundBlockBody
+# rubocop:disable Layout/FirstParameterIndentation
+# rubocop:disable Layout/CommentIndentation
+# rubocop:disable Layout/AlignParameters
+# rubocop:disable Layout/AlignHash
+# rubocop:disable Layout/TrailingWhitespace
+# rubocop:disable Layout/IndentHash
+# rubocop:disable Layout/SpaceAroundOperators
+# rubocop:disable Layout/ExtraSpacing
+# rubocop:disable Style/UnlessElse
+# rubocop:disable Style/HashSyntax
+
+
+# ------------------------------------------------------------------------------
+#  ~/lib/j1_auth_manager/auth_manager/.rb
+#
+#  Provides authentication services based on Warden|OmniAuth
+#
+#  Product/Info:
+#  https://jekyll-one.com
+#
+#  Copyright (C) 2019 Juergen Adams
+#
+#  J1 Template is licensed under the MIT License.
+#  See: https://github.com/jekyll-one/j1_template_mde/blob/master/LICENSE
+#
+# ------------------------------------------------------------------------------
+# NOTES
+#
+# ------------------------------------------------------------------------------
+# frozen_string_literal: true
+
+module J1App
+  class AuthManager < Sinatra::Base
+
+    include J1App::Helpers
+    include J1App::GithubHelpers
+
+    # ==========================================================================
+    # Sinatra Framework settings
+    # ==========================================================================
+
+    # NOTE: https://stackoverflow.com/questions/7847536/sinatra-in-facebook-iframe
+    #
+    #set :protection, :except => :frame_options
+
+    # Check: http://sinatrarb.com/intro.html
+    #
+    #set :static_cache_control, [:public, :max_age => 10]
+
+
+    # ==========================================================================
+    # Base App and Warden Framework settings
+    # ==========================================================================
+
+    # j1_web_session = {
+    #     :authenticated       => 'false',
+    #     :requested_page      => '/',
+    #     :user_name           => 'unknown',
+    #     :users_allowed       => 'unknown',
+    #     :user_id             => 'unknown',
+    #     :provider            => 'unknown',
+    #     :provider_url        => '/',
+    #     :payment_info        => 'unknown',
+    #     :permissions         => 'unknown',
+    #     :writer              => 'middleware'
+    # }
+
+    j1_web_session = {
+        :authenticated        => 'false',
+        :requested_page       => '/',
+        :user_name            => 'visitor',
+        :users_allowed        => 'all',
+        :user_id              => 'unknown',
+        :provider             => 'j1',
+        :provider_membership  => 'guest',
+        :provider_url         => 'https://jekyll.one',
+        :payment_info         => 'unknown',
+        :provider_permissions => 'public',        
+        :writer               => 'middleware'
+    }
+
+    # Enable SSL for the rack session if configured
+    # --------------------------------------------------------------------------
+    require 'rack-ssl-enforcer' if J1App.ssl?
+    use Rack::SslEnforcer if J1App.ssl?
+
+    # Set the session cookie used by Rack to track all relevant data
+    # for the authentication service
+    # --------------------------------------------------------------------------
+    use Rack::Session::Cookie,
+        http_only: true,   # if set to 'true', make session cookie visible to the browser (document) for HTTP
+        key: 'j1.app.session',
+        secret: ENV['J1_SESSION_SECRET'] || SecureRandom.hex
+
+    # use Rack::Cache do |config|
+    #   # 
+    #   # ------------------------------------------------------------------------
+    #   config.middleware.delete(Rack::Cache)
+    # end
+
+    # ==========================================================================
+    # Warden Framework initialisation
+    # ==========================================================================
+
+    # Define what (user) data should be put (serialized) into the session
+    # on requests and responses from Rack environment into the warden
+    # environment (env['warden']).
+    # --------------------------------------------------------------------------
+    Warden::Manager.serialize_into_session do |user|
+      user
+    end
+    Warden::Manager.serialize_from_session do |user|
+      user
+    end
+
+
+    # ==========================================================================
+    # OmniAuth|Warden Framework initialisation
+    # ==========================================================================
+
+    # Set the 'default' authentication strategy and exception handler
+    # (for warden) if the user was not explicitly signed in (signin dialog).
+    # If 'signin' fails, the default exception 'signin_failure' is thrown
+    # (used for all OmniAuth strategies registered).
+    # --------------------------------------------------------------------------
+    signin_failure = ->(_e) { Rack::Response.new("Can't login", 401).finish }
+    use Warden::Manager do |config|
+      # OmniAuth strategies are name-spaced by 'omni' (see: warden_omniauth.rb)
+      # ------------------------------------------------------------------------
+      config.default_strategies :"omni_#{J1App.default_provider}"
+      config.failure_app = signin_failure
+    end
+
+    use OmniAuth::Builder do |config|
+      # Workaround to rescue OmniAuth::Strategies::OAuth2::CallbackError?
+      # for chromium based browsers (e.g. google-chrome)
+      # ------------------------------------------------------------------------
+      config.on_failure do
+        new_path = '/redirect_requested_page'
+        Rack::Response.new(['302 Moved'], 302, 'Location' => new_path).finish
+      end
+
+      # Detect and set supported authentication strategies for OmniAuth
+      # ------------------------------------------------------------------------
+
+      # Additional (strategy) option skip_extra, default: true
+      #
+      # If true, skips the collection of raw data (extra) to NOT blow
+      # up the session cookie (as it is limited to 4K)
+      skip_extra = true
+
+      if J1App.active_providers.include? 'patreon'
+        scope             = J1App.auth_config['providers']['patreon']['scope'].join(',')
+        data_collection   = J1App.auth_config['providers']['patreon']['data_fields'].join(',')
+        skip_extra        = false if data_collection =~ /raw/i
+        provider :patreon,
+                 ENV['PATREON_CLIENT_ID'],
+                 ENV['PATREON_CLIENT_SECRET'],
+                 scope: "#{scope}",
+                 skip_extra: skip_extra
+      end
+      if J1App.active_providers.include? 'disqus'
+        scope             = J1App.auth_config['providers']['disqus']['scope'].join(',')
+        data_collection   = J1App.auth_config['providers']['disqus']['data_fields'].join(',')
+        skip_extra        = false if data_collection =~ /raw/i
+        provider :disqus,
+                 ENV['DISQUS_CLIENT_ID'],
+                 ENV['DISQUS_CLIENT_SECRET'],
+                 scope: "#{scope}",
+                 skip_extra: skip_extra
+      end
+      if J1App.active_providers.include? 'facebook'
+        scope             = J1App.auth_config['providers']['facebook']['scope'].join(',')
+        data_collection   = J1App.auth_config['providers']['facebook']['data_fields'].join(',')
+        skip_extra        = false if data_collection =~ /raw/i
+        provider :facebook,
+                 ENV['FACEBOOK_CLIENT_ID'],
+                 ENV['FACEBOOK_CLIENT_SECRET'],
+                 scope: "#{scope}",
+                 skip_extra: skip_extra
+      end
+      if J1App.active_providers.include? 'github'
+        scope             = J1App.auth_config['providers']['github']['scope'].join(',')
+        data_collection   = J1App.auth_config['providers']['github']['data_fields'].join(',')
+        skip_extra        = false if data_collection =~ /raw/i
+        provider :github,
+                 ENV['GITHUB_CLIENT_ID'],
+                 ENV['GITHUB_CLIENT_SECRET'],
+                 scope: "#{scope}",
+                 skip_extra: skip_extra
+      end
+      if J1App.active_providers.include? 'twitter'
+        scope             = J1App.auth_config['providers']['twitter']['scope'].join(',')
+        data_collection   = J1App.auth_config['providers']['twitter']['data_fields'].join(',')
+        skip_extra        = false if data_collection =~ /raw/i
+        provider :twitter,
+                 ENV['TWITTER_CLIENT_ID'],
+                 ENV['TWITTER_CLIENT_SECRET'],
+                 scope: "#{scope}",
+                 skip_extra: skip_extra
+      end
+    end
+
+    # Set the (internal) endpoint if a user is successfully authenticated
+    # --------------------------------------------------------------------------
+    use J1WardenOmniAuth do |config|
+      config.redirect_after_callback = '/post_authentication'
+    end
+
+    # Add the internal logger from Rack to the middleware's of the stack
+    # --------------------------------------------------------------------------
+    use Rack::Logger
+
+    # Load user profiles, permissions, conditions and strategies
+    # --------------------------------------------------------------------------
+
+    providers   = J1App.auth_config['providers']
+    permissions = J1App.permissions
+
+
+    # ==========================================================================
+    # Sinatra (before) FILTER to preprocess all page requests
+    # ==========================================================================
+
+    # Prepare root (index) page for app detection
+    #
+    before '/' do
+      log_info! "ROOT", "Prepare", 'Web Session'
+
+      # read existing/current cookie 'j1.web.session' to update all data
+      # of j1_web_session (hash) otherwise set initial data
+      # ------------------------------------------------------------------------
+      unless env['HTTP_COOKIE'] == nil
+        if env['HTTP_COOKIE'].include? 'j1.web.session'
+          session_encoded = request.cookies['j1.web.session']
+          session_decoded = Base64.decode64(session_encoded)
+          j1_web_session = JSON.parse(session_decoded)
+        end
+      else
+        requested_page = env['REQUEST_URI']
+        j1_web_session['requested_page'] = "#{env['REQUEST_URI']}"
+      end
+
+      # Create|Initialize the J1 web session cookie
+      # ------------------------------------------------------------------------
+      if warden.authenticated?
+        log_info! "ROOT", 'Cookie', 'Update current user data'
+
+        user = warden.user
+        log_info! "ROOT", 'AuthCheck', 'User detected as signed in', "#{user[:provider]}"
+        j1_web_session['authenticated']         = 'true'
+        j1_web_session['requested_page']        = '/'
+        j1_web_session['users_allowed']         = providers["#{user[:provider]}"]['users']
+        j1_web_session['user_name']             = user[:info]['nickname']
+        j1_web_session['user_id']               = user[:uid]
+        j1_web_session['provider']              = user[:provider]
+        j1_web_session['provider_membership']   = 'member'
+        j1_web_session['provider_url']          = providers["#{user[:provider]}"]['provider_url']
+        j1_web_session['provider_permissions']  = providers["#{user[:provider]}"]['permissions']
+        j1_web_session['payment_status']        = user[:info][:payment_status]
+      else
+        log_info! "ROOT", 'AuthCheck', 'User detected', 'signed out'
+        j1_web_session['authenticated']         = 'false'
+        j1_web_session['requested_page']        = '/'
+        j1_web_session['users_allowed']         = 'all'
+        j1_web_session['user_name']             = 'visitor'
+        j1_web_session['user_id']               = 'unknown'
+        j1_web_session['payment_status']        = 'unknown'
+        j1_web_session['provider']              = 'j1'
+        j1_web_session['provider_membership']   = 'guest'
+        j1_web_session['provider_url']          = 'https://jekyll.one'
+        j1_web_session['provider_permissions']  = 'public'
+      end
+      j1_web_session['writer']                  = 'middleware'
+
+      session_json = j1_web_session.to_json
+      log_info! "ROOT", 'Cookie', 'Update web session data', "#{session_json}"
+
+      session_encoded = Base64.encode64(session_json)
+      response.set_cookie(
+          'j1.web.session',
+          domain: false,
+          value: session_encoded.to_s,
+          path: '/'
+      )
+    end
+
+    # General page detection (page auth pre-flight)
+    # --------------------------------------------------------------------------
+    before '/(pages|posts)/*' do
+
+      log_info! 'AuthManager', 'PreFlight', 'Initial checks initiated'
+
+      # read existing/current cookie 'j1.web.session'
+      # to update all data of j1_web_session (hash)
+      # if request.warden.user.respond_to?(:info)
+      # ------------------------------------------------------------------------
+      if env['HTTP_COOKIE'].include? 'j1.web.session'
+        session_encoded     = request.cookies['j1.web.session']
+        session_decoded     = Base64.decode64(session_encoded)
+        j1_web_session      = JSON.parse(session_decoded)
+
+        log_info! 'PreFlight', 'Cookie', 'Read web session data' # "#{session_decoded}"
+      else
+        requested_page                    = env['REQUEST_URI']
+        j1_web_session['requested_page']  = "#{env['REQUEST_URI']}"
+      end
+
+      # Create|Initialize the J1 web session cookie
+      # ------------------------------------------------------------------------
+      log_info! 'PreFlight', 'AuthCheck', 'Check authentication status'
+      if warden.authenticated?
+        user = warden.user
+        j1_web_session['authenticated']         = 'true'
+        j1_web_session['user_name']             = user[:info]['nickname']
+        j1_web_session['user_id']               = user[:uid]
+        j1_web_session['provider']              = user[:provider]
+        j1_web_session['provider_url']          = providers["#{user[:provider]}"]['provider_url']
+        j1_web_session['users_allowed']         = providers["#{user[:provider]}"]['users']#
+        j1_web_session['provider_permissions']  = providers["#{user[:provider]}"]['permissions']
+        j1_web_session['payment_status']        = user[:info][:payment_status]
+        j1_web_session['writer']                = 'middleware'
+
+        log_info! 'PreFlight', 'AuthCheck', 'User authenticated', "#{user[:info]['nickname']}"
+
+        session_json = j1_web_session.to_json
+        log_info! 'PreFlight', 'Cookie', 'Write web session data', "#{session_json}"
+
+        session_encoded = Base64.encode64(session_json)
+        response.set_cookie(
+            'j1.web.session',
+            domain: false,
+            value: session_encoded.to_s,
+            path: '/'
+        )
+      end
+
+      # User state|content detection for implicit authentication
+      # ------------------------------------------------------------------------
+      log_info! 'PreFlight', 'CheckConfig', 'Authentication check', 'disabled' if authentication_enabled? == false
+      log_info! 'PreFlight', 'AuthCheck', 'Pass for all pages' if authentication_enabled? == false
+      pass if authentication_enabled? == false
+
+      log_info! 'PreFlight', 'CheckConfig', 'Authentication check', 'enabled'
+      log_info! 'PreFlight', 'DetectContent', 'Public content', 'YES' if public_content?
+      log_info! 'PreFlight', 'DetectContent', 'Pass all public content' if public_content?
+      pass if public_content?
+
+      log_info! 'PreFlight', 'DetectCookieConsent', 'Cookie Consent', "#{j1_web_session['cookies_accepted']}"
+      
+      if j1_web_session['cookies_accepted'] === 'declined'
+        requested_page = env['REQUEST_URI']
+        requested_page.scan(/(protected|private)/) do |match|
+          category = match[0]
+          log_info! 'PreFlight', 'Redirect', 'Pass to dialog page (Cookie Consent)'
+          description_title = "Cookie consent declined"
+          redirect "/cookie_consent?provider=#{j1_web_session['provider']}&user=#{j1_web_session['user_name']}&category=#{category}&requested_page=#{requested_page}&title=#{description_title}"
+        end
+      end
+
+      log_info! 'PreFlight', 'DetectContent', 'Check content type'
+
+      requested_page = env['REQUEST_URI']
+      requested_page.scan(/(protected|private)/) do |match|
+
+        category = match[0]
+        log_info! 'PreFlight', 'DetectContent', 'Content type detected', "#{category}"
+
+        log_info! 'PreFlight', 'AuthCheck', 'Check authorisation status'
+        if warden.authenticated?
+          user_name = user[:info]['nickname']
+          log_info! 'PreFlight', 'AuthCheck', 'User detected', "#{user_name}"
+
+          current_provider  = warden.user[:provider]
+
+          # provider_strategy = strategies["#{default_provider}"]
+          strategy          = providers["#{current_provider}"]['strategy']
+          provider_strategy = :"#{strategy}"
+
+          j1_web_session['user_name']             = user_name
+          j1_web_session['provider_url']          = providers["#{current_provider}"]['provider_url']
+          j1_web_session['users_allowed']         = providers["#{current_provider}"]['users']
+          j1_web_session['provider_permissions']  = providers["#{user[:provider]}"]['permissions']
+          j1_web_session['requested_page']        = requested_page
+
+          log_info! 'PreFlight', 'ContentCheck', 'Check permissions'
+          if permissions[:"#{category}"].include? current_provider
+            log_info! 'PreFlight', 'ContentCheck', 'Provider detected', "#{current_provider}"
+            log_info! 'PreFlight', 'ContentCheck', 'Category detected', "#{category}"
+            log_info! 'PreFlight', 'ContentCheck', 'Category support', 'enabled'
+
+            # Check permissions
+            #
+            #log_info! 'Authorisation', 'ConditionCheck', 'Check permissions for provider', "#{current_provider}"
+            #conditions = J1App.conditions current_provider
+            # if conditions["#{category}"]
+            #   log_info! 'Authorisation', 'ConditionCheck', 'Conditions detected', "#{category}"
+            #   conditions["#{category}"].each do |k, v|
+            #     case k
+            #     when 'enabled'
+            #       log_info! 'Authorisation', 'ConditionCheck', "#{k}", "#{v}"
+            #     when 'users'
+            #       log_info! 'Authorisation', 'ConditionCheck', 'users'
+            #       v.each do |k, v|
+            #         log_info! 'Authorisation', 'ConditionCheck', "users - #{k}", "#{v}"
+            #       end
+            #     when 'payment'
+            #       log_info! 'Authorisation', 'ConditionCheck', 'payment'
+            #       v.each do |k, v|
+            #         case k
+            #         when 'tiers'
+            #           log_info! 'Authorisation', 'ConditionCheck', "payment - #{k}", "#{v}"
+            #         when 'tier'
+            #           v.each do |k, v|
+            #             log_info! 'Authorisation', 'ConditionCheck', 'payment - tiers - tier : ' "#{k}", "#{v}"
+            #           end
+            #         end
+            #       end
+            #     end
+            #   end
+            # end
+          else
+            provider  = permissions[:"#{category}"][0]
+            log_info! 'PreFlight', 'ContentCheck', 'Provider detected', "#{current_provider}"
+            log_info! 'PreFlight', 'ContentCheck', 'Category detected', "#{category}"
+            log_info! 'PreFlight', 'ContentCheck', 'Category supported', 'NO'
+            log_info! 'PreFlight', 'AuthCheck', 'Authorisation failed for user', "#{user_name}"
+
+            log_info! 'PreFlight', 'SignOut', 'Sign out user', "#{user_name}"
+            warden.logout
+            session.clear
+
+            session_json = j1_web_session.to_json
+            log_info! 'PreFlight', 'Cookie', 'Write web session data', "#{session_json}"
+
+            session_encoded = Base64.encode64(session_json)
+            response.set_cookie(
+                'j1.web.session',
+                domain: false,
+                value: session_encoded.to_s,
+                path: '/'
+            )
+
+            log_info! 'PreFlight', 'Redirect', 'Call API request', 'PageValidate'
+            allowed_users = providers["#{provider}"]['users'].join(',')
+            redirect "/page_validation?provider=#{provider}&category=#{category}&page=#{requested_page}&allowed_users=#{allowed_users}"
+          end
+
+          time = Time.now.ctime.to_s
+          log_info! 'PreFlight', 'AuthCheck', 'Pass to requested page', "#{requested_page}"
+          log_info! 'PreFlight', 'AuthCheck', 'Set X-Response-Headers'
+          
+          # See: https://stackoverflow.com/questions/10438276/how-to-disable-static-file-caching-in-rails-3-thin-on-windows
+          # response.headers["Cache-Control"]   = 'no-cache, no-store, max-age=0, must-revalidate'
+          # response.headers["Pragma"]          = 'no-cache'
+          # response.headers["Expires"]         = 'Fri, 01 Jan 1990 00:00:00 GMT'
+          response.headers['X-J1-AuthManager']  = "page-validated;category=#{category};called=" +  time
+          pass
+        else
+          log_info! 'PreFlight', 'AuthCheck', 'User detected', 'signed out'
+          default_provider = permissions[:"#{category}"][0]
+          log_info! 'PreFlight', 'AuthCheck', 'Set default provider', "#{default_provider}"
+
+          strategy          = providers["#{default_provider}"]['strategy']
+          provider_strategy = :"#{strategy}"
+
+          log_info! 'PreFlight', 'AuthCheck', 'Start processing provider', "#{default_provider}"
+          log_info! 'PreFlight', 'AuthCheck', 'Authentication strategy', "#{provider_strategy}"
+
+          case provider_strategy
+
+          when :org
+            warden.authenticate!
+            github_organization_authenticate! ENV['GITHUB_ORG_NAME']
+            logger.info "Hi There, #{j1_web_session[:user_name]}! You have access to the #{params['id']} organization"
+
+          when :team
+            warden.authenticate!
+            github_team_authenticate! ENV['GITHUB_TEAM_ID']
+            logger.info "Hi There, #{j1_web_session[:user_name]}! You have access to the #{params['id']} team"
+
+          when :teams
+            warden.authenticate!
+            github_teams_authenticate! ENV['GITHUB_TEAM_IDS'].split(',')
+            logger.info "Hi There, #{j1_web_session[:user_name]}! You have access to the #{params['id']} team"
+
+          when :member
+            log_info! 'PreFlight', 'AuthCheck', 'Process authentication strategy'
+
+            if env['HTTP_COOKIE'].include? 'j1.web.session'
+              session_encoded   = request.cookies['j1.web.session']
+              session_decoded   = Base64.decode64(session_encoded)
+              log_info! 'PreFlight', 'Cookie', 'Read web session data'          # "#{session_decoded}"
+              j1_web_session    = JSON.parse(session_decoded)
+            end
+
+            # Update cookie data
+            # ----------------------------------------------------------------------
+            j1_web_session['provider_url']          = providers["#{default_provider}"]['provider_url']
+            j1_web_session['users_allowed']         = providers["#{default_provider}"]['users']
+            j1_web_session['provider_permissions']  = providers["#{default_provider}"]['permissions']
+            j1_web_session['requested_page']        = env['REQUEST_URI']
+            j1_web_session['writer']                = 'middleware'
+
+            # write updated J1 session cookie
+            #
+            session_json = j1_web_session.to_json
+            session_encoded = Base64.encode64(session_json)
+            log_info! 'PreFlight', 'Cookie', 'Write web session data', "#{session_json}"
+
+            response.set_cookie(
+                'j1.web.session',
+                domain: false,
+                value: session_encoded.to_s,
+                path: '/'
+            )
+
+            allowed_users   = providers["#{default_provider}"]['users'].join(',')
+            requested_page  = env['REQUEST_URI']
+
+            log_info! 'PreFlight', 'Redirect', 'Call API request', 'PageValidate'
+            redirect "/page_validation?provider=#{default_provider}&category=#{category}&page=#{requested_page}&allowed_users=#{allowed_users}"
+          else
+            raise J1App::ConfigError
+          end
+
+        end
+      end
+    end
+
+
+    # ==========================================================================
+    # API ENDPOINTS (Sinatra HANDLERS)
+    # ==========================================================================
+
+    # ENDPOINT authentication (called from WEB by auth client)
+    # --------------------------------------------------------------------------
+    get '/authentication' do
+      # collect (common) GET parameter|s
+      #
+      request   = params.fetch('request')
+      provider  = params.fetch('provider')
+
+      log_info! 'API', 'Authentication', 'Authentication request received'
+
+      # SignIn
+      # ------------------------------------------------------------------------
+      if request === 'signin'
+
+        log_info! 'Authentication', 'SignIn', 'Called for provider', "#{provider}"
+
+        # collect (additional) GET parameter|s
+        # ----------------------------------------------------------------------
+        allowed_users                   =  params.fetch('allowed_users')
+
+        j1_web_session['users_allowed'] = allowed_users
+        j1_web_session['writer']        = 'middleware'
+
+        # Write updated J1 session data to cookie
+        # --------------------------------------------------------------------
+        session_json = j1_web_session.to_json
+        log_info! 'Authentication', 'Cookie', 'Write web session data', "#{session_json}"
+
+        session_encoded = Base64.encode64(session_json)
+        response.set_cookie(
+            'j1.web.session',
+            domain: false,
+            value: session_encoded.to_s,
+            path: '/'
+        )
+
+        if warden.authenticated?
+          log_info! 'Authentication', 'SignIn', 'User already signed in', "#{warden.user[:info]['nickname']} "
+        else
+          log_info! 'Authentication', 'SignIn', 'Initiate OmniAuth authentication'
+
+          # Make (really) sure that old session is cleared before login
+          # --------------------------------------------------------------------
+          warden.logout
+          session.clear
+          warden.authenticate! :"omni_#{provider}"
+        end
+        # SignOut
+        # ------------------------------------------------------------------------
+      elsif request === 'signout'
+        # collect (additional) GET parameter|s
+        provider_signout = params.fetch('provider_signout')
+        log_info! 'Authentication', 'SignOut', 'Called for provider', #{provider}"
+
+                  if warden.authenticated?
+                    user         = warden.user[:info]['nickname']
+                    provider     = warden.user[:provider]
+                    provider_url = j1_web_session['provider_url']
+                    log_info! 'Authentication', 'SignOut', 'Sign out user', "#{user}"
+                    warden.logout
+                    session.clear
+
+                    # Read current J1 web session cookie
+                    # --------------------------------------------------------------------
+                    if env['HTTP_COOKIE'].include? 'j1.web.session'
+                      session_encoded = env['rack.request.cookie_hash']['j1.web.session']
+                      session_decoded = Base64.decode64(session_encoded)
+                      log_info! 'Authentication', 'Cookie', 'Read web session data' # #{session_decoded}"
+                      j1_web_session = JSON.parse(session_decoded)
+                    else
+                      j1_web_session['requested_page'] = env['REQUEST_URI']
+                    end
+
+                    # Update J1 web session data
+                    # --------------------------------------------------------------------
+                    j1_web_session['user_name']             = 'visitor'
+                    j1_web_session['user_id']               = 'unknown'
+                    j1_web_session['users_allowed']         = 'all'
+                    j1_web_session['payment_status']        = 'unknown'
+                    j1_web_session['provider']              = 'j1'
+                    j1_web_session['provider_url']          = 'https://jekyll.one'
+                    j1_web_session['provider_permissions']  = 'public'
+                    j1_web_session['authenticated']         = 'false'
+                    j1_web_session['writer']                = 'middleware'
+
+                    # Write updated J1 session data to cookie
+                    # --------------------------------------------------------------------
+                    session_json = j1_web_session.to_json
+                    log_info! 'Authentication', 'Cookie', 'Write web session data', "#{session_json}"
+
+                    session_encoded = Base64.encode64(session_json)
+                    response.set_cookie(
+                        'j1.web.session',
+                        domain: false,
+                        value: session_encoded.to_s,
+                        path: '/'
+                    )
+
+                    if provider_signout === 'true'
+                      log_info! 'Authentication', 'SignOut', 'Sign out user', "#{user}"
+                      log_info! 'Authentication', 'SignOut', 'Sign out from', "#{provider}"
+                      log_info! 'Authentication', 'Redirect', 'Pass to provider', "#{provider_url}"
+                      redirect "#{provider_url}"
+                    else
+                      log_info! 'Authentication', 'SignOut', 'Sign out user', "#{user}"
+                      log_info! 'Authentication', 'SignOut', 'Sign out from', "session"
+
+                      # If signed out, redirect ONLY for PUBLIC pages
+                      # ------------------------------------------------------------------
+                      if redirect_whitelisted?j1_web_session['requested_page']
+                        log_info! 'Authentication', 'Redirect', 'Pass to page', "#{j1_web_session['requested_page']}"
+                        redirect j1_web_session['requested_page']
+                      else
+                        log_info! 'Authentication', 'Redirect', 'Redirect NOT whitelisted'
+                        log_info! 'Authentication', 'Redirect', 'Pass to page', "/"
+                        redirect '/'
+                      end
+                    end
+                  else
+                    # THIS condition should NEVER REACHED because NO logout dialog
+                    # (modal) is provided by the auth client if a user isn't signed in.
+                    # Kept this alternative for cases something went wrong.
+                    # --------------------------------------------------------------------
+                    log_info! 'Authentication', 'API', 'DEAD PATH: Called for sign out', 'NOT signed in'
+
+                    # Read current J1 session cookie
+                    # --------------------------------------------------------------------
+                    if env['HTTP_COOKIE'].include? 'j1.web.session'
+                      session_encoded   = env['rack.request.cookie_hash']['j1.web.session']
+                      session_decoded   = Base64.decode64(session_encoded)
+                      j1_web_session  = JSON.parse(session_decoded)
+
+                      log_info! 'Authentication', 'Cookie', 'DEAD PATH. Read web session data' # #{session_decoded}"
+                    else
+                      j1_web_session['requested_page'] = env['REQUEST_URI']
+                    end
+
+                    # Update J1 web session data
+                    # --------------------------------------------------------------------
+                    j1_web_session['user_name']             = 'visitor'
+                    j1_web_session['user_id']               = 'unknown'
+                    j1_web_session['users_allowed']         = 'all'
+                    j1_web_session['payment_status']        = 'unknown'
+                    j1_web_session['provider']              = 'j1'
+                    j1_web_session['provider_url']          = 'https://jekyll.one'
+                    j1_web_session['provider_permissions']  = 'public'
+                    j1_web_session['authenticated']         = 'false'
+                    j1_web_session['writer']                = 'middleware'
+
+                    # Write updated J1 session data to cookie
+                    # --------------------------------------------------------------------
+                    session_json = j1_web_session.to_json
+                    log_info! 'Authentication', 'Cookie', 'DEAD PATH. Write web session data', "#{session_json}"
+
+                    session_encoded = Base64.encode64(session_json)
+                    response.set_cookie(
+                        'j1.web.session',
+                        domain: false,
+                        value: session_encoded.to_s,
+                        path: '/'
+                    )
+
+                    log_info! 'Post Authentication', 'Redirect', 'DEAD PATH: Pass to requested page', "#{j1_web_session['requested_page']}"
+                    redirect j1_web_session['requested_page']
+                  end
+      else
+        raise J1App::ConfigError
+      end
+    end
+    # END: get '/authentication'
+    # --------------------------------------------------------------------------
+
+    # ENDPOINT post_authentication (called after a user is back from OAuth Provider)
+    # --------------------------------------------------------------------------
+    get '/post_authentication' do
+      reward = {
+          :id    => 'unknown',
+          :name  => 'unknown',
+          :link  => '#'
+      }
+      campaign = {
+          :id    => 'unknown',
+          :link  => '#'
+      }
+
+      log_info! 'API', 'Post Authentication', 'Identification request received'
+
+      log_info! 'Post Authentication',  'Cookie', 'Read web session data'
+      session_encoded   = request.cookies['j1.web.session']
+      session_decoded   = Base64.decode64(session_encoded)
+      j1_web_session    = JSON.parse(session_decoded)
+
+      user                              = warden.user
+      user_json                         = user.to_json
+
+      if user[:provider] === 'disqus'
+        user[:info][:urls][:site]       = "https://disqus.com"
+        user[:info][:urls][:home]       = user[:info]['urls']['profileUrl']
+        user[:info][:urls][:blog]       = "https://disqus.com/by/juergen_adams/"
+        user[:info][:urls][:member]     = user[:info]['urls']['profileUrl']
+      end
+
+      if user[:provider] === 'github'
+        user[:info][:urls][:site]       = "https://github.com"
+        user[:info][:urls][:home]       = user[:info]['urls']['GitHub']
+        user[:info][:urls][:blog]       = "https://github.com/jekyll-one"
+        user[:info][:urls][:member]     = user[:info]['urls']['Blog']
+      end
+
+      if user[:provider] === 'patreon'
+
+        user[:info][:urls][:site]       = "https://patreon.com"
+        user[:info][:urls][:home]       = "https://patreon.com/home"
+        user[:info][:urls][:blog]       = "https://patreon.com/jekyll_one"
+
+        unless user[:info]['payment_info'].empty?
+          reward_url                    = user[:info]['payment_info']['relationships']['reward']['links']['related']
+          reward_json                   = RestClient.get "#{reward_url}", {:content_type => :json, :accept => :json}
+          reward_data                   = JSON.parse(reward_json)
+          user[:info][:urls][:member]   = "https://patreon.com" + reward_data['data']['attributes']['url']
+          user[:info][:payment_status]  = user[:info]['payment_info']['attributes']['declined_since'].nil? ? 'true' : 'false'
+        else
+          reward_url                    = ""
+          reward_json                   = ""
+          reward_data                   = ""
+          user[:info][:payment_status]  = 'false'
+        end
+
+        unless reward_data.empty?
+          reward[:id]                   = reward_data['data']['id']
+          reward[:name]                 = reward_data['data']['attributes']['title']
+          reward[:link]                 = "https://patreon.com" + reward_data['data']['attributes']['url']
+          campaign[:id]                 = reward_data['data']['relationships']['campaign']['data']['id']
+          campaign[:link]               = reward_data['data']['relationships']['campaign']['links']['related']
+        else
+          reward[:id]                   = ""
+          reward[:name]                 = "no tiers"
+          reward[:link]                 = ""
+          campaign[:id]                 = ""
+          campaign[:link]               = ""
+        end
+      end
+
+      user[:extra][:reward]             = reward
+      user[:extra][:campaign]           = campaign
+
+      if user.nil?
+        # Collection of session data failed (e.g cookie > 4K)
+        #
+        log_info! 'Post Authentication', 'Identification', 'Internal error', 'User identification failed'
+        warden.logout
+        session.clear
+        log_info! 'Post Authentication', 'Redirect', 'Pass to error page (access_denied)'
+        description_title = "Access Denied"
+        redirect "/access_denied?provider=unknown&user=unknown&category=unknown&title=#{description_title}"
+      else
+        log_info! 'Post Authentication', 'Identification', 'User identified successfully'
+        log_info! 'Post Authentication',  'Cookie', 'Update web session data'    # "#{j1_web_session}"
+        j1_web_session['user_name']             = user[:info]['nickname']
+        j1_web_session['user_id']               = user[:uid]
+        j1_web_session['provider']              = user[:provider]
+        j1_web_session['provider_membership']   = 'member'
+        j1_web_session['provider_permissions']  = providers["#{user[:provider]}"]['permissions']
+        j1_web_session['authenticated']         = 'true'
+        j1_web_session['payment_status']        = user[:info][:payment_status]
+        j1_web_session['writer']                = 'middleware'
+
+        current_user                            = user[:info]['nickname']  = user[:info]['nickname']
+        current_provider                        = user[:provider]
+
+        j1_web_session['requested_page'].scan(/(protected|private)/) do |match|
+
+          # Set category from requested page
+          #
+          category = match[0]
+          log_info! 'Post Authentication', 'Identification', 'Process content type', "#{category}"
+
+          # Check if user is allowed to access protected content in GENERAL
+          #
+          log_info! 'Post Authentication', 'Identification', 'Check for allowed users'
+          unless j1_web_session['users_allowed'].include? 'all'
+            unless j1_web_session['users_allowed'].include? "#{current_user}"
+              log_info! 'Post Authentication', 'Identification', 'User not allowed', "#{current_user}"
+              log_info! 'Post Authentication', 'Identification', 'Allowed users', "#{j1_web_session['users_allowed']}"
+              log_info! 'Post Authentication', 'Identification', 'Logout user from current session', "#{current_user}"
+              warden.logout
+              session.clear
+              log_info! 'Post Authentication', 'Redirect', 'Pass to error page (access_denied)'
+              description_title = "Access Denied"
+              redirect "/access_denied?provider=#{current_provider}&user=#{current_user}&category=#{category}&title=#{description_title}"
+            end
+          end
+          log_info! 'Post Authentication', 'Identification', 'Allowed users', "#{j1_web_session['users_allowed']}"
+
+          # Check conditions to access protected content (if any)
+          #
+          log_info! 'Post Authentication', 'Identification', 'Check for conditions', "#{current_provider}"
+          check_conditions = providers["#{user[:provider]}"]['conditions'][category]['enabled']
+          if check_conditions
+
+            if providers["#{user[:provider]}"]['conditions'][category]['users']['whitelist'].nil?
+              category_whitelist = 'all'
+            else
+              category_whitelist = providers["#{user[:provider]}"]['conditions'][category]['users']['whitelist']
+            end
+
+            # Check if user is BLACKLISTED
+            #
+            blacklist = providers["#{user[:provider]}"]['conditions'][category]['users']['blacklist']
+            if blacklist.include? "#{current_user}"
+              log_info! 'Post Authentication', 'Identification', 'Check blacklisting'
+              log_info! 'Post Authentication', 'Identification', 'User blacklisted', "#{current_user}"
+              user[:info][:blacklisted] = 'true'
+              log_info! 'Post Authentication', 'Identification', 'Logout user from current session', "#{current_user}"
+              warden.logout
+              session.clear
+              log_info! 'Post Authentication', 'Redirect', 'Pass to error page (access_denied)'
+              description_title = "Access Denied"
+              redirect "/access_denied?provider=#{current_provider}&user=#{current_user}&category=#{category}&title=#{description_title}"
+            end
+
+            log_info! 'Post Authentication', 'Identification', 'Check whitelisting'
+            if category_whitelisted? category_whitelist, current_user
+              user[:info][:whitelisted]   = 'true'
+              reward[:name]               = 'whitelisted'
+              log_info! 'Post Authentication', 'Identification', 'User whitelisted', "#{current_user}"
+              log_info! 'Post Authentication', 'Identification', 'Reward set to', 'Whitelisted'
+            else
+              log_info! 'Post Authentication', 'Identification', 'No whitelisting found', "#{current_user}"
+            end
+
+            log_info! 'Post Authentication', 'Identification', 'Check conditions'
+            unless category_whitelisted? category_whitelist, current_user
+              log_info! 'Post Authentication', 'Identification', 'Check rewards'
+              payment_tiers = providers["#{user[:provider]}"]['conditions'][category]['payment']['activated']
+              log_info! 'Post Authentication', 'Identification', 'Check rewards', "#{current_user}"
+              if payment_activated? payment_tiers
+                log_info! 'Post Authentication', 'Identification', 'Reward found', "#{reward[:name]}"
+
+                # Check if any payment exists for that user
+                #
+                log_info! 'Post Authentication', 'Identification', 'Check payment status'
+                if user[:info]['payment_info'].empty?
+                  log_info! 'Post Authentication', 'Identification', 'Payment status: NOT AVAILABLE', "#{current_user}"
+                  log_info! 'Post Authentication', 'Identification', 'Logout user from current session', "#{current_user}"
+                  warden.logout
+                  session.clear
+                  log_info! 'Post Authentication', 'Redirect', 'Pass to error page (access_denied)'
+                  description_title = "Access Denied"
+                  redirect "/access_denied?provider=#{current_provider}&user=#{current_user}&category=#{category}&title=#{description_title}"
+                end
+
+                # Check for VALID payments (scope: pledge-to-me)
+                #
+                payment_status = user[:info]['payment_info']['attributes']['declined_since']
+                unless payment_valid? payment_status
+                  log_info! 'Post Authentication', 'Identification', 'Payment status INVALID', "#{current_user}"
+                  log_info! 'Post Authentication', 'Identification', 'Logout user from current session', "#{current_user}"
+                  warden.logout
+                  session.clear
+                  log_info! 'Post Authentication', 'Redirect', 'Pass to error page (access_denied)'
+                  description_title = "Access Denied"
+                  redirect "/access_denied?provider=#{current_provider}&user=#{current_user}&category=#{category}&title=#{description_title}"
+                else
+                  log_info! 'Post Authentication', 'Identification', 'Payment status VALID', "#{current_user}"
+                end
+              end
+
+            end
+            # end category_whitelisted
+          else
+            category_condition_state = providers["#{user[:provider]}"]['conditions'][category]['enabled']
+            log_info! 'Post Authentication', 'Identification', 'Category check failed for', "#{current_provider}"
+            log_info! 'Post Authentication', 'Identification', "Category checked", "#{category}"
+            log_info! 'Post Authentication', 'Identification', "Category support", "#{category_condition_state}"
+            warden.logout
+            session.clear
+            log_info! 'Post Authentication', 'Redirect', 'Pass to error page (access_denied)'
+            description_title = "Access Denied"
+            redirect "/access_denied?provider=#{current_provider}&user=#{current_user}&category=#{category}&title=#{description_title}"
+          end
+          # end check conditions
+
+        end
+        # end protected content
+      end
+      # end user.nil?
+
+      # redirect authenticated|validated user to requested page
+      #
+      j1_web_session['provider']      = current_provider
+      j1_web_session['users_allowed'] = providers["#{current_provider}"]['users']
+
+      # TODO: Add membership|product specific data for the SideBar
+
+      # write updated J1 session data to cookie
+      #
+      session_json = j1_web_session.to_json
+      log_info! 'Post Authentication', 'Cookie', 'Write web session data', "#{session_json}"
+
+      session_encoded = Base64.encode64(session_json)
+      response.set_cookie(
+          'j1.web.session',
+          domain: false,
+          value: session_encoded.to_s,
+          path: '/'
+      )
+
+      time = Time.now.ctime.to_s
+
+      log_info! 'Post Authentication', 'Identification', 'Provider', "#{user[:provider]}"
+      log_info! 'Post Authentication', 'Identification', 'User', "#{user[:info]['nickname']}"
+      log_info! 'Post Authentication', 'Redirect', 'Set Last-Modified', "#{time}"
+      log_info! 'Post Authentication', 'Redirect', 'Pass to requested page', "#{j1_web_session['requested_page']}"
+
+      
+      response.headers['Last-Modified'] = time
+      response.headers['Cache-Control'] = 'private,max-age=0,must-revalidate,no-store'
+      redirect j1_web_session['requested_page']
+
+    end
+    # END: get /post_authentication
+    # --------------------------------------------------------------------------
+
+
+    # ENDPOINT status (called from WEB to get current state of an user)
+    # --------------------------------------------------------------------------
+    get '/status' do
+      session_encoded   = request.cookies['j1.web.session']
+      session_decoded   = Base64.decode64(session_encoded)
+      j1_web_session    = JSON.parse(session_decoded)
+
+      log_info! 'API', 'Status Request', 'Info request received'
+
+      # if request.warden.user.respond_to?(:info)
+      #
+      if warden.authenticated?
+        user_name               = warden.user[:info]['nickname']
+        user_id                 = warden.user[:uid]
+        provider                = warden.user[:provider]
+        provider_permissions    = j1_web_session['provider_permissions']
+        provider_site_url       = warden.user[:info][:urls][:site]
+        provider_home_url       = warden.user[:info][:urls][:home]
+        provider_blog_url       = warden.user[:info][:urls][:blog]
+        provider_member_url     = warden.user[:info][:urls][:member]
+
+        if provider == 'patreon'
+          provider_membership   = warden.user[:extra][:reward][:name]
+          provider_member_url   = warden.user[:extra][:reward][:link]
+        else
+          provider_membership   = 'member'
+          provider_member_url   = '#'
+        end
+
+        log_info! 'API', 'Status Request', 'User detected as signed in', "#{user_name}"
+      else
+        user_name = 'unknown'
+        log_info! 'API', 'Status Request', 'User detected', 'signed out'
+      end
+
+      # if request.warden.authenticated?
+      #
+      if user_name != 'unknown'
+        log_info! 'API', 'Status Request', 'Send data', 'SIGNED_IN'
+        content_type 'application/json'
+        {
+            user_name:                user_name,
+            user_id:                  user_id,
+            provider:                 provider,
+            provider_membership:      provider_membership,
+            provider_permissions:     provider_permissions,
+            provider_site_url:        provider_site_url,
+            provider_home_url:        provider_home_url,
+            provider_blog_url:        provider_blog_url,
+            provider_member_url:      provider_member_url,
+            status:                   'signed in'
+        }.to_json
+      else
+        log_info! 'API', 'Status Request', 'Send data', 'SIGNED_OUT'
+        content_type 'application/json'
+        {
+            user_name:                'visitor',
+            user_id:                  'unknown',
+            provider:                 'j1',
+            provider_membership:      'guest',
+            provider_permissions:     'public',
+            provider_site_url:        '#',
+            provider_home_url:        '#',
+            provider_blog_url:        '#',
+            provider_member_url:      '#',
+            status:                   'signed out'
+        }.to_json
+      end
+    end
+    # END: get /status
+    # --------------------------------------------------------------------------
+
+    # ENDPOINT  cookie_consent (exception, called from the app|auth manager)
+    # --------------------------------------------------------------------------
+    get '/cookie_consent' do
+      provider          = params.fetch('provider')
+      category          = params.fetch('category')
+      user              = params.fetch('user')
+      requested_page    = params.fetch('requested_page')
+      description_title = params.fetch('title')
+
+      log_info! 'API', 'ExceptionHandler', 'Request received'
+      log_info! 'ExceptionHandler', 'ERROR', 'Cookies declined'
+      log_info! 'ExceptionHandler', 'Redirect', 'Pass to dialog page', 'Cookie Consent'
+
+      # Capitalize first char
+      provider                = provider.sub(/^./, &:upcase)
+      route                   = requested_page
+
+      @route                  = route
+      @provider               = provider
+      @modal                  = "centralCookieConsent"
+      @info_type              = "danger"
+      @modal_icon             = "cookie"
+      @modal_agreed_text      = "Yes, please"
+      @modal_disagreed_text   = "No, thanks"
+      @modal_title            = "Authentication Manager"
+      # @modal_description    = "<h4>#{description_title}</h4><br /><br />User <b>#{user}</b> from provider <b>#{provider}</b> requested access on <b>#{category}</b> pages.<br /> In order to continue, you need to accept on <b>Cookies</b>."
+      @modal_description      = "<h4>#{description_title}</h4><br /><br /> In order to continue, you need to accept on <b>Cookies</b>."
+
+      erb :auth_manager_ui
+    end
+    # END: get /cookies_rejected
+    # --------------------------------------------------------------------------
+
+
+    #  ENDPOINT access_denied (exception, called from the app|auth manager)
+    # --------------------------------------------------------------------------
+    get '/access_denied' do
+      provider          = params.fetch('provider')
+      category          = params.fetch('category')
+      user              = params.fetch('user')
+      description_title = params.fetch('title')
+
+      log_info! 'API', 'ExceptionHandler', 'Request received'
+      log_info! 'ExceptionHandler', 'ERROR', 'Access Denied'
+
+      session_encoded = request.cookies['j1.web.session']
+      session_decoded = Base64.decode64(session_encoded)
+      j1_web_session  = JSON.parse(session_decoded)
+
+      # Update J1 web session data
+      # --------------------------------------------------------------------
+      j1_web_session['user_name']             = user
+      # j1_web_session['user_id']               = 'unknown'
+      # j1_web_session['users_allowed']         = 'unknown'
+      # j1_web_session['payment_status']        = 'unknown'
+      j1_web_session['provider']              = provider
+      # j1_web_session['provider_url']          = 'unknown'
+      # j1_web_session['provider_permissions']  = 'unknown'
+      # j1_web_session['authenticated']         = 'false'
+      j1_web_session['writer']                = 'middleware'
+
+      log_info! 'ExceptionHandler', 'Cookie', 'Write web session data', "#{session_json}"
+
+      # write updated J1 session data to cookie
+      #
+      session_json = j1_web_session.to_json
+      session_encoded = Base64.encode64(session_json)
+      response.set_cookie(
+          'j1.web.session',
+          domain: false,
+          value: session_encoded.to_s,
+          path: '/'
+      )
+
+      log_info! 'ExceptionHandler', 'Redirect', 'Pass to error page', "Access Denied"
+
+      # Capitalize first char
+      provider  =  provider.sub(/^./, &:upcase)
+      route     = '/'
+
+      @route                  = route
+      @provider               = provider
+      @modal                  = "centralModalInfo"
+      @info_type              = "danger"
+      @modal_icon             = "account-off"
+      @modal_ok_text          = "Ok, understood"
+      @modal_title            = "Authentication Manager"
+      @modal_description      = "<h4>#{description_title}</h4></br></br> User <b>#{user}</b> from provider <b>#{provider}</b> is not allowed to access <b>#{category}</b> pages."
+
+      erb :auth_manager_ui
+    end
+    # END: get '/access_denied'
+    # --------------------------------------------------------------------------
+
+
+    # ENDPOINT  invalid_funds (exception, called from the app|auth manager)
+    # --------------------------------------------------------------------------
+    get '/invalid_funds' do
+      provider          = params.fetch('provider')
+      category          = params.fetch('category')
+      user              = params.fetch('user')
+      description_title = params.fetch('title')
+
+      log_info! 'API', 'ExceptionHandler', 'Request received'
+      log_info! 'ExceptionHandler', 'ERROR', 'Invalid Funds'
+
+      session_encoded = request.cookies['j1.web.session']
+      session_decoded = Base64.decode64(session_encoded)
+      j1_web_session  = JSON.parse(session_decoded)
+
+      # Update J1 web session data
+      # --------------------------------------------------------------------
+      j1_web_session['user_name']             = user
+      # j1_web_session['user_id']               = 'unknown'
+      # j1_web_session['users_allowed']         = 'unknown'
+      # j1_web_session['payment_status']        = 'unknown'
+      j1_web_session['provider']              = provider
+      # j1_web_session['provider_url']          = 'unknown'
+      # j1_web_session['provider_permissions']  = 'unknown'
+      # j1_web_session['authenticated']         = 'false'
+      j1_web_session['writer']                = 'middleware'
+
+      log_info! 'ExceptionHandler', 'Cookie', 'Write web session data', "#{session_json}"
+
+      # write updated J1 session data to cookie
+      #
+      log_info! 'API', 'Exception Handler', 'ERROR', 'Invalid Funds'
+      session_json = j1_web_session.to_json
+      session_encoded = Base64.encode64(session_json)
+      response.set_cookie(
+          'j1.web.session',
+          domain: false,
+          value: session_encoded.to_s,
+          path: '/'
+      )
+
+      log_info! 'ExceptionHandler', 'Redirect', 'Pass to error page', 'Invalid Funds'
+
+      # Capitalize first char
+      provider  =  provider.sub(/^./, &:upcase)
+      route     = '/'
+
+      @route                  = route
+      @provider               = provider
+      @modal                  = "centralModalInfo"
+      @info_type              = "danger"
+      @modal_icon             = "account-off"
+      @modal_ok_text          = "Ok, understood"
+      @modal_title            = "Authentication Manager"
+      @modal_description      = "<h4>#{description_title}</h4></br></br> User <b>#{user}</b> from provider <b>#{provider}</b> is not allowed to access <b>#{category}</b> pages."
+
+      erb :auth_manager_ui
+    end
+    # END: get /invalid_funds
+    # --------------------------------------------------------------------------
+
+
+    # access_protected_content ENDPOINT called from the app (auth manager)
+    # --------------------------------------------------------------------------
+    get '/page_validation' do
+      provider        = params.fetch('provider')
+      allowed_users   = params.fetch('allowed_users')
+      page            = params.fetch('page')
+      category        = params.fetch('category')
+
+      log_info! 'API', 'PageAccessControl', 'PageValidate request received'
+
+      # Capitalize first char
+      # provider        =  provider.sub(/^./, &:upcase)
+
+      log_info! 'PageAccessControl', 'AuthCheck', 'Check provider', "#{provider}"
+      # jadams, 2019-03-16: Hier ist das Problem
+      #
+      if warden.authenticated?
+        log_info! 'PageAccessControl', 'AuthCheck', 'Grant access for', "#{provider}"
+        log_info! 'PageAccessControl', 'Redirect', 'Pass to page', "#{page}"
+        route = page
+      else
+        log_info! 'PageAccessControl', 'AuthCheck', 'Authentication failed', "#{provider}"
+        route = "/authentication?request=signin&provider=#{provider}&allowed_users=#{allowed_users}"
+      end
+
+      log_info! 'PageAccessControl', 'Redirect', 'Pass to SignIn dialog, page', "#{page}"
+      # Capitalize first char
+      provider                =  provider.sub(/^./, &:upcase)
+
+      @provider               = provider
+      @route                  = route
+      @modal                  = "signInProtectedContent"
+      @modal_icon             = "login"
+      @modal_agreed_text      = "Yes, please"
+      @modal_disagreed_text   = "No, thanks"
+      @modal_title            = "SignIn"
+      @modal_image            = "/assets/images/master_header/admin-dashboard-bootstrap-1280x600.png"
+      @modal_description      = "The page <b>#{page}</b> you requested belongs to <b>#{category}</b> content. You'll be redirected to authenticate with the provider <b>#{provider}</b>. If signed in successfully, you get access to all <b>#{category} pages</b>."
+
+      erb :auth_manager_ui
+    end
+    # END: get '/page_validation
+    # --------------------------------------------------------------------------
+
+    # ENDPOINT iframe
+    # --------------------------------------------------------------------------
+    get '/iframe' do
+      @website_url = "https://jekyll-one.github.io/"
+      erb :iframe
+    end
+
+    # Workaround to rescue OmniAuth::Strategies::OAuth2::CallbackError?
+    # for chromium based browsers (e.g. google-chrome)
+    # ------------------------------------------------------------------------
+    get '/redirect_requested_page' do
+      log_info! 'Fallback', 'Redirect', 'Pass to requested page', "#{j1_web_session['requested_page']}"
+      redirect j1_web_session['requested_page']
+    end
+    # END: get /iframe
+    # --------------------------------------------------------------------------
+  end
+end