@agrotools1/at-components 0.6.0 → 0.6.4

package/dist/node_modules/.pnpm/@arcgis_core@4.29.10/node_modules/@arcgis/core/identity/IdentityManagerBase.js

@@ -1,782 +0,0 @@
-import { _ as y } from "../chunks/tslib.es6.js";
-import V from "../config.js";
-import { id as A } from "../kernel.js";
-import x from "../request.js";
-import k from "../core/Error.js";
-import Q from "../core/Evented.js";
-import { on as j } from "../core/events.js";
-import { fixJson as Y } from "../core/lang.js";
-import { getDeepValue as b } from "../core/object.js";
-import { createResolver as C, onAbort as R, isAborted as ee } from "../core/promiseUtils.js";
-import { urlToObject as $, hasSameOrigin as O, Url as P, queryToObject as D, base64UrlEncode as z, objectToQuery as H, normalize as te, getProxyRule as se, makeAbsolute as G, addQueryParameters as re } from "../core/urlUtils.js";
-import { property as U } from "../core/accessorSupport/decorators/property.js";
-import "../core/has.js";
-import "../core/Logger.js";
-import { subclass as ie } from "../core/accessorSupport/decorators/subclass.js";
-import J from "./IdentityModal.js";
-import W from "./OAuthCredential.js";
-import K from "./OAuthInfo.js";
-import M from "./ServerInfo.js";
-import { isSecureProxyService as ne } from "../portal/support/urlUtils.js";
-const q = {}, X = (p) => {
-  const e = new P(p.owningSystemUrl).host, t = new P(p.server).host, s = /.+\.arcgis\.com$/i;
-  return s.test(e) && s.test(t);
-}, B = (p, e) => !!(X(p) && e && e.some((t) => t.test(p.server)));
-let L = null, E = null;
-try {
-  L = window.localStorage, E = window.sessionStorage;
-} catch {
-}
-class oe extends Q {
-  constructor() {
-    super(), this._portalConfig = globalThis.esriGeowConfig, this.serverInfos = [], this.oAuthInfos = [], this.credentials = [], this._soReqs = [], this._xoReqs = [], this._portals = [], this._defaultOAuthInfo = null, this._defaultTokenValidity = 60, this.dialog = null, this.tokenValidity = null, this.normalizeWebTierAuth = !1, this._appOrigin = window.origin !== "null" ? window.origin : window.location.origin, this._appUrlObj = $(window.location.href), this._busy = null, this._rejectOnPersistedPageShow = !1, this._oAuthLocationParams = null, this._gwTokenUrl = "/sharing/rest/generateToken", this._agsRest = "/rest/services", this._agsPortal = /\/sharing(\/|$)/i, this._agsAdmin = /(https?:\/\/[^\/]+\/[^\/]+)\/admin\/?(\/.*)?$/i, this._adminSvcs = /\/rest\/admin\/services(\/|$)/i, this._gwDomains = [{ regex: /^https?:\/\/www\.arcgis\.com/i, customBaseUrl: "maps.arcgis.com", tokenServiceUrl: "https://www.arcgis.com/sharing/rest/generateToken" }, { regex: /^https?:\/\/(?:dev|[a-z\d-]+\.mapsdev)\.arcgis\.com/i, customBaseUrl: "mapsdev.arcgis.com", tokenServiceUrl: "https://dev.arcgis.com/sharing/rest/generateToken" }, { regex: /^https?:\/\/(?:devext|[a-z\d-]+\.mapsdevext)\.arcgis\.com/i, customBaseUrl: "mapsdevext.arcgis.com", tokenServiceUrl: "https://devext.arcgis.com/sharing/rest/generateToken" }, { regex: /^https?:\/\/(?:qaext|[a-z\d-]+\.mapsqa)\.arcgis\.com/i, customBaseUrl: "mapsqa.arcgis.com", tokenServiceUrl: "https://qaext.arcgis.com/sharing/rest/generateToken" }, { regex: /^https?:\/\/[a-z\d-]+\.maps\.arcgis\.com/i, customBaseUrl: "maps.arcgis.com", tokenServiceUrl: "https://www.arcgis.com/sharing/rest/generateToken" }], this._legacyFed = [], this._regexSDirUrl = /http.+\/rest\/services\/?/gi, this._regexServerType = /(\/(FeatureServer|GPServer|GeoDataServer|GeocodeServer|GeoenrichmentServer|GeometryServer|GlobeServer|ImageServer|KnowledgeGraphServer|MapServer|MissionServer|MobileServer|NAServer|NetworkDiagramServer|OGCFeatureServer|ParcelFabricServer|RelationalCatalogServer|SceneServer|StreamServer|UtilityNetworkServer|ValidationServer|VectorTileServer|VersionManagementServer|VideoServer)).*/gi, this._gwUser = /http.+\/users\/([^\/]+)\/?.*/i, this._gwItem = /http.+\/items\/([^\/]+)\/?.*/i, this._gwGroup = /http.+\/groups\/([^\/]+)\/?.*/i, this._rePortalTokenSvc = /\/sharing(\/rest)?\/generatetoken/i, this._createDefaultOAuthInfo = !0, this._hasTestedIfAppIsOnPortal = !1, this._getOAuthLocationParams(), window.addEventListener("pageshow", (e) => {
-      this._pageShowHandler(e);
-    });
-  }
-  registerServers(e) {
-    const t = this.serverInfos;
-    t ? (e = e.filter((s) => !this.findServerInfo(s.server)), this.serverInfos = t.concat(e)) : this.serverInfos = e, e.forEach((s) => {
-      s.owningSystemUrl && this._portals.push(s.owningSystemUrl), s.hasPortal && this._portals.push(s.server);
-    });
-  }
-  registerOAuthInfos(e) {
-    const t = this.oAuthInfos;
-    if (t) {
-      for (const s of e) {
-        const i = this.findOAuthInfo(s.portalUrl);
-        i && t.splice(t.indexOf(i), 1);
-      }
-      this.oAuthInfos = t.concat(e);
-    } else
-      this.oAuthInfos = e;
-  }
-  registerToken(e) {
-    e = { ...e };
-    const t = this._sanitizeUrl(e.server), s = this._isServerRsrc(t);
-    let i, r = this.findServerInfo(t), n = !0;
-    r || (r = new M(), r.server = this._getServerInstanceRoot(t), s ? r.hasServer = !0 : (r.tokenServiceUrl = this._getTokenSvcUrl(t), r.hasPortal = !0), this.registerServers([r])), i = this._findCredential(t), i ? (delete e.server, Object.assign(i, e), n = !1) : (i = new S({ userId: e.userId, server: r.server, token: e.token, expires: e.expires, ssl: e.ssl, scope: s ? "server" : "portal" }), i.resources = [t], this.credentials.push(i)), i.emitTokenChange(!1), n || i.refreshServerTokens();
-  }
-  toJSON() {
-    return Y({ serverInfos: this.serverInfos.map((e) => e.toJSON()), oAuthInfos: this.oAuthInfos.map((e) => e.toJSON()), credentials: this.credentials.map((e) => e.toJSON()) });
-  }
-  initialize(e) {
-    if (!e)
-      return;
-    typeof e == "string" && (e = JSON.parse(e));
-    const t = e.serverInfos, s = e.oAuthInfos, i = e.credentials;
-    if (t) {
-      const r = [];
-      t.forEach((n) => {
-        n.server && n.tokenServiceUrl && r.push(n.declaredClass ? n : new M(n));
-      }), r.length && this.registerServers(r);
-    }
-    if (s) {
-      const r = [];
-      s.forEach((n) => {
-        n.appId && r.push(n.declaredClass ? n : new K(n));
-      }), r.length && this.registerOAuthInfos(r);
-    }
-    i && i.forEach((r) => {
-      r.server && r.token && r.expires && r.expires > Date.now() && ((r = r.declaredClass ? r : new S(r)).emitTokenChange(), this.credentials.push(r));
-    });
-  }
-  findServerInfo(e) {
-    let t;
-    e = this._sanitizeUrl(e);
-    for (const s of this.serverInfos)
-      if (this._hasSameServerInstance(s.server, e)) {
-        t = s;
-        break;
-      }
-    return t;
-  }
-  findOAuthInfo(e) {
-    let t;
-    e = this._sanitizeUrl(e);
-    for (const s of this.oAuthInfos)
-      if (this._hasSameServerInstance(s.portalUrl, e)) {
-        t = s;
-        break;
-      }
-    return t;
-  }
-  findCredential(e, t) {
-    if (!e)
-      return;
-    let s;
-    e = this._sanitizeUrl(e);
-    const i = this._isServerRsrc(e) ? "server" : "portal";
-    if (t) {
-      for (const r of this.credentials)
-        if (this._hasSameServerInstance(r.server, e) && t === r.userId && r.scope === i) {
-          s = r;
-          break;
-        }
-    } else
-      for (const r of this.credentials)
-        if (this._hasSameServerInstance(r.server, e) && this._getIdenticalSvcIdx(e, r) !== -1 && r.scope === i) {
-          s = r;
-          break;
-        }
-    return s;
-  }
-  getCredential(e, t) {
-    let s, i, r = !0;
-    t && (s = !!t.token, i = t.error, r = t.prompt !== !1), t = { ...t }, e = this._sanitizeUrl(e);
-    const n = new AbortController(), h = C();
-    if (t.signal && R(t.signal, () => {
-      n.abort();
-    }), R(n, () => {
-      h.reject(new k("identity-manager:user-aborted", "ABORTED"));
-    }), ee(n))
-      return h.promise;
-    t.signal = n.signal;
-    const d = this._isAdminResource(e), o = s ? this.findCredential(e) : null;
-    let l;
-    if (o && i && i.details && i.details.httpStatus === 498)
-      o.destroy();
-    else if (o)
-      return l = new k("identity-manager:not-authorized", "You are currently signed in as: '" + o.userId + "'. You do not have access to this resource: " + e, { error: i }), h.reject(l), h.promise;
-    const c = this._findCredential(e, t);
-    if (c)
-      return h.resolve(c), h.promise;
-    let a = this.findServerInfo(e);
-    if (a)
-      !a.hasPortal && a.server && a.owningSystemUrl && this._hasSameServerInstance(a.server, a.owningSystemUrl) && (a.hasPortal = !0), !a.hasServer && this._isServerRsrc(e) && (a._restInfoPms = this._getTokenSvcUrl(e), a.hasServer = !0);
-    else {
-      const u = this._getTokenSvcUrl(e);
-      if (!u)
-        return l = new k("identity-manager:unknown-resource", "Unknown resource - could not find token service endpoint."), h.reject(l), h.promise;
-      a = new M(), a.server = this._getServerInstanceRoot(e), typeof u == "string" ? (a.tokenServiceUrl = u, a.hasPortal = !0) : (a._restInfoPms = u, a.hasServer = !0), this.registerServers([a]);
-    }
-    return a.hasPortal && a._selfReq === void 0 && (r || O(a.tokenServiceUrl, this._appOrigin) || this._gwDomains.some((u) => u.tokenServiceUrl === a.tokenServiceUrl)) && (a._selfReq = { owningTenant: t == null ? void 0 : t.owningTenant, selfDfd: this._getPortalSelf(a.tokenServiceUrl.replace(this._rePortalTokenSvc, "/sharing/rest/portals/self"), e) }), this._enqueue(e, a, t, h, d);
-  }
-  getResourceName(e) {
-    return this._isRESTService(e) ? e.replace(this._regexSDirUrl, "").replace(this._regexServerType, "") || "" : this._gwUser.test(e) && e.replace(this._gwUser, "$1") || this._gwItem.test(e) && e.replace(this._gwItem, "$1") || this._gwGroup.test(e) && e.replace(this._gwGroup, "$1") || "";
-  }
-  generateToken(e, t, s) {
-    const i = this._rePortalTokenSvc.test(e.tokenServiceUrl), r = new P(this._appOrigin), n = e.shortLivedTokenValidity;
-    let h, d, o, l, c, a, u, v;
-    t && (v = this.tokenValidity || n || this._defaultTokenValidity, v > n && n > 0 && (v = n)), s && (h = s.isAdmin, d = s.serverUrl, o = s.token, a = s.signal, u = s.ssl, e.customParameters = s.customParameters), h ? l = e.adminTokenServiceUrl : (l = e.tokenServiceUrl, c = new P(l.toLowerCase()), e.webTierAuth && (s != null && s.serverUrl) && !u && r.scheme === "http" && (O(r.uri, l, !0) || c.scheme === "https" && r.host === c.host && r.port === "7080" && c.port === "7443") && (l = l.replace(/^https:/i, "http:").replace(/:7443/i, ":7080")));
-    const _ = { query: { request: "getToken", username: t == null ? void 0 : t.username, password: t == null ? void 0 : t.password, serverUrl: d, token: o, expiration: v, referer: h || i ? this._appOrigin : null, client: h ? "referer" : null, f: "json", ...e.customParameters }, method: "post", authMode: "anonymous", useProxy: this._useProxy(e, s), signal: a, ...s == null ? void 0 : s.ioArgs };
-    return i || (_.withCredentials = !1), x(l, _).then((m) => {
-      const f = m.data;
-      if (!(f != null && f.token))
-        return new k("identity-manager:authentication-failed", "Unable to generate token");
-      const T = e.server;
-      return q[T] || (q[T] = {}), t && (q[T][t.username] = t.password), f.validity = v, f;
-    });
-  }
-  isBusy() {
-    return !!this._busy;
-  }
-  checkSignInStatus(e) {
-    return this.checkAppAccess(e, "").then((t) => t.credential);
-  }
-  checkAppAccess(e, t, s) {
-    let i = !1;
-    return this.getCredential(e, { prompt: !1 }).then((r) => {
-      let n;
-      const h = { f: "json" };
-      if (r.scope === "portal")
-        if (t && (this._doPortalSignIn(e) || s != null && s.force))
-          n = r.server + "/sharing/rest/oauth2/validateAppAccess", h.client_id = t;
-        else {
-          if (!r.token)
-            return { credential: r };
-          n = r.server + "/sharing/rest";
-        }
-      else {
-        if (!r.token)
-          return { credential: r };
-        n = r.server + "/rest/services";
-      }
-      return r.token && (h.token = r.token), x(n, { query: h, authMode: "anonymous" }).then((d) => {
-        if (d.data.valid === !1)
-          throw new k("identity-manager:not-authorized", `You are currently signed in as: '${r.userId}'.`, d.data);
-        return i = !!d.data.viewOnlyUserTypeApp, { credential: r };
-      }).catch((d) => {
-        var l;
-        if (d.name === "identity-manager:not-authorized")
-          throw d;
-        const o = (l = d.details) == null ? void 0 : l.httpStatus;
-        if (o === 498)
-          throw r.destroy(), new k("identity-manager:not-authenticated", "User is not signed in.");
-        if (o === 400)
-          throw new k("identity-manager:invalid-request");
-        return { credential: r };
-      });
-    }).then((r) => ({ credential: r.credential, viewOnly: i }));
-  }
-  setOAuthResponseHash(e) {
-    e && (e.charAt(0) === "#" && (e = e.substring(1)), this._processOAuthPopupParams(D(e)));
-  }
-  setOAuthRedirectionHandler(e) {
-    this._oAuthRedirectFunc = e;
-  }
-  setProtocolErrorHandler(e) {
-    this._protocolFunc = e;
-  }
-  signIn(e, t, s = {}) {
-    const i = C(), r = () => {
-      var l;
-      d == null || d.remove(), o == null || o.remove(), (l = this.dialog) == null || l.destroy(), this.dialog = d = o = null;
-    }, n = () => {
-      r(), this._oAuthDfd = null, i.reject(new k("identity-manager:user-aborted", "ABORTED"));
-    };
-    s.signal && R(s.signal, () => {
-      n();
-    });
-    const h = new J({ open: !0, resource: this.getResourceName(e), server: t.server });
-    this.dialog = h, this.emit("dialog-create");
-    let d = h.on("cancel", n), o = h.on("submit", (l) => {
-      this.generateToken(t, l, { isAdmin: s.isAdmin, signal: s.signal }).then((c) => {
-        r();
-        const a = new S({ userId: l.username, server: t.server, token: c.token, expires: c.expires != null ? Number(c.expires) : null, ssl: !!c.ssl, isAdmin: s.isAdmin, validity: c.validity });
-        i.resolve(a);
-      }).catch((c) => {
-        h.error = c, h.signingIn = !1;
-      });
-    });
-    return i.promise;
-  }
-  oAuthSignIn(e, t, s, i) {
-    this._oAuthDfd = C();
-    const r = this._oAuthDfd;
-    let n;
-    i != null && i.signal && R(i.signal, () => {
-      const a = this._oAuthDfd && this._oAuthDfd.oAuthWin_;
-      a && !a.closed ? a.close() : this.dialog && l();
-    }), r.resUrl_ = e, r.sinfo_ = t, r.oinfo_ = s;
-    const h = s._oAuthCred;
-    if (h.storage && (s.flowType === "authorization-code" || s.flowType === "auto" && t.currentVersion >= 8.4)) {
-      let a = crypto.getRandomValues(new Uint8Array(32));
-      n = z(a), h.codeVerifier = n, a = crypto.getRandomValues(new Uint8Array(32)), h.stateUID = z(a), h.save() || (h.codeVerifier = n = null);
-    } else
-      h.codeVerifier = null;
-    let d, o;
-    this._getCodeChallenge(n).then((a) => {
-      const u = !i || i.oAuthPopupConfirmation !== !1;
-      if (!s.popup || !u)
-        return void this._doOAuthSignIn(e, t, s, a);
-      const v = new J({ oAuthPrompt: !0, server: t.server, open: !0 });
-      this.dialog = v, this.emit("dialog-create"), d = v.on("cancel", l), o = v.on("submit", () => {
-        c(), this._doOAuthSignIn(e, t, s, a);
-      });
-    });
-    const l = () => {
-      c(), this._oAuthDfd = null, r.reject(new k("identity-manager:user-aborted", "ABORTED"));
-    }, c = () => {
-      var a;
-      d == null || d.remove(), o == null || o.remove(), (a = this.dialog) == null || a.destroy(), this.dialog = null;
-    };
-    return r.promise;
-  }
-  destroyCredentials() {
-    this.credentials && this.credentials.slice().forEach((e) => {
-      e.destroy();
-    }), this.emit("credentials-destroy");
-  }
-  enablePostMessageAuth(e = "https://www.arcgis.com/sharing/rest") {
-    this._postMessageAuthHandle && this._postMessageAuthHandle.remove(), this._postMessageAuthHandle = j(window, "message", (t) => {
-      var s;
-      if ((t.origin === this._appOrigin || t.origin.endsWith(".arcgis.com")) && ((s = t.data) == null ? void 0 : s.type) === "arcgis:auth:requestCredential") {
-        const i = t.source;
-        this.getCredential(e).then((r) => {
-          i.postMessage({ type: "arcgis:auth:credential", credential: { expires: r.expires, server: r.server, ssl: r.ssl, token: r.token, userId: r.userId } }, t.origin);
-        }).catch((r) => {
-          i.postMessage({ type: "arcgis:auth:error", error: { name: r.name, message: r.message } }, t.origin);
-        });
-      }
-    });
-  }
-  disablePostMessageAuth() {
-    this._postMessageAuthHandle && (this._postMessageAuthHandle.remove(), this._postMessageAuthHandle = null);
-  }
-  _getOAuthLocationParams() {
-    var s, i;
-    let e = window.location.hash;
-    if (e) {
-      e.charAt(0) === "#" && (e = e.substring(1));
-      const r = D(e);
-      let n = !1;
-      if (r.access_token && r.expires_in && r.state && r.hasOwnProperty("username"))
-        try {
-          r.state = JSON.parse(r.state), r.state.portalUrl && (this._oAuthLocationParams = r, n = !0);
-        } catch {
-        }
-      else if (r.error && r.error_description && (console.log("IdentityManager OAuth Error: ", r.error, " - ", r.error_description), r.error === "access_denied" && (n = !0, r.state)))
-        try {
-          r.state = JSON.parse(r.state);
-        } catch {
-        }
-      n && (window.location.hash = ((s = r.state) == null ? void 0 : s.hash) || "");
-    }
-    let t = window.location.search;
-    if (t) {
-      t.charAt(0) === "?" && (t = t.substring(1));
-      const r = D(t);
-      let n = !1;
-      if (r.code && r.state)
-        try {
-          r.state = JSON.parse(r.state), r.state.portalUrl && r.state.uid && (this._oAuthLocationParams = r, n = !0);
-        } catch {
-        }
-      else if (r.error && r.error_description && (console.log("IdentityManager OAuth Error: ", r.error, " - ", r.error_description), r.error === "access_denied" && (n = !0, r.state)))
-        try {
-          r.state = JSON.parse(r.state);
-        } catch {
-        }
-      if (n) {
-        const h = { ...r };
-        ["code", "error", "error_description", "message_code", "persist", "state"].forEach((l) => {
-          delete h[l];
-        });
-        const d = H(h), o = window.location.pathname + (d ? `?${d}` : "") + (((i = r.state) == null ? void 0 : i.hash) || "");
-        window.history.replaceState(window.history.state, "", o);
-      }
-    }
-  }
-  _getOAuthToken(e, t, s, i, r) {
-    return e = e.replace(/^http:/i, "https:"), x(`${e}/sharing/rest/oauth2/token`, { authMode: "anonymous", method: "post", query: i && r ? { grant_type: "authorization_code", code: t, redirect_uri: i, client_id: s, code_verifier: r } : { grant_type: "refresh_token", refresh_token: t, client_id: s } }).then((n) => n.data);
-  }
-  _getCodeChallenge(e) {
-    if (e && globalThis.isSecureContext) {
-      const t = new TextEncoder().encode(e);
-      return crypto.subtle.digest("SHA-256", t).then((s) => z(new Uint8Array(s)));
-    }
-    return Promise.resolve(null);
-  }
-  _pageShowHandler(e) {
-    if (e.persisted && this.isBusy() && this._rejectOnPersistedPageShow) {
-      const t = new k("identity-manager:user-aborted", "ABORTED");
-      this._errbackFunc(t);
-    }
-  }
-  _findCredential(e, t) {
-    let s, i, r, n, h = -1;
-    const d = t == null ? void 0 : t.token, o = t == null ? void 0 : t.resource, l = this._isServerRsrc(e) ? "server" : "portal", c = this.credentials.filter((a) => this._hasSameServerInstance(a.server, e) && a.scope === l);
-    if (e = o || e, c.length)
-      if (c.length === 1) {
-        if (s = c[0], r = this.findServerInfo(s.server), i = r == null ? void 0 : r.owningSystemUrl, n = i ? this.findCredential(i, s.userId) : void 0, h = this._getIdenticalSvcIdx(e, s), !d)
-          return h === -1 && s.resources.push(e), this._addResource(e, n), s;
-        h !== -1 && (s.resources.splice(h, 1), this._removeResource(e, n));
-      } else {
-        let a, u;
-        if (c.some((v) => (u = this._getIdenticalSvcIdx(e, v), u !== -1 && (a = v, r = this.findServerInfo(a.server), i = r == null ? void 0 : r.owningSystemUrl, n = i ? this.findCredential(i, a.userId) : void 0, h = u, !0))), d)
-          a && (a.resources.splice(h, 1), this._removeResource(e, n));
-        else if (a)
-          return this._addResource(e, n), a;
-      }
-  }
-  _findOAuthInfo(e) {
-    let t = this.findOAuthInfo(e);
-    if (!t) {
-      for (const s of this.oAuthInfos)
-        if (this._isIdProvider(s.portalUrl, e)) {
-          t = s;
-          break;
-        }
-    }
-    return t;
-  }
-  _addResource(e, t) {
-    t && this._getIdenticalSvcIdx(e, t) === -1 && t.resources.push(e);
-  }
-  _removeResource(e, t) {
-    let s = -1;
-    t && (s = this._getIdenticalSvcIdx(e, t), s > -1 && t.resources.splice(s, 1));
-  }
-  _useProxy(e, t) {
-    return (t == null ? void 0 : t.isAdmin) && !O(e.adminTokenServiceUrl, this._appOrigin) || !this._isPortalDomain(e.tokenServiceUrl) && String(e.currentVersion) === "10.1" && !O(e.tokenServiceUrl, this._appOrigin);
-  }
-  _getOrigin(e) {
-    const t = new P(e);
-    return t.scheme + "://" + t.host + (t.port != null ? ":" + t.port : "");
-  }
-  _getServerInstanceRoot(e) {
-    const t = e.toLowerCase();
-    let s = t.indexOf(this._agsRest);
-    return s === -1 && this._isAdminResource(e) && (s = this._agsAdmin.test(e) ? e.replace(this._agsAdmin, "$1").length : e.search(this._adminSvcs)), s !== -1 || ne(t) || (s = t.indexOf("/sharing")), s === -1 && t.substr(-1) === "/" && (s = t.length - 1), s > -1 ? e.substring(0, s) : e;
-  }
-  _hasSameServerInstance(e, t) {
-    return e.substr(-1) === "/" && (e = e.slice(0, -1)), e = e.toLowerCase(), t = this._getServerInstanceRoot(t).toLowerCase(), e = this._normalizeAGOLorgDomain(e), t = this._normalizeAGOLorgDomain(t), (e = e.substr(e.indexOf(":"))) === (t = t.substr(t.indexOf(":")));
-  }
-  _normalizeAGOLorgDomain(e) {
-    const t = /^https?:\/\/(?:cdn|[a-z\d-]+\.maps)\.arcgis\.com/i, s = /^https?:\/\/(?:cdndev|[a-z\d-]+\.mapsdevext)\.arcgis\.com/i, i = /^https?:\/\/(?:cdnqa|[a-z\d-]+\.mapsqa)\.arcgis\.com/i;
-    return t.test(e) ? e = e.replace(t, "https://www.arcgis.com") : s.test(e) ? e = e.replace(s, "https://devext.arcgis.com") : i.test(e) && (e = e.replace(i, "https://qaext.arcgis.com")), e;
-  }
-  _sanitizeUrl(e) {
-    const t = (V.request.proxyUrl || "").toLowerCase(), s = t ? e.toLowerCase().indexOf(t + "?") : -1;
-    return s !== -1 && (e = e.substring(s + t.length + 1)), e = te(e), $(e).path;
-  }
-  _isRESTService(e) {
-    return e.includes(this._agsRest);
-  }
-  _isAdminResource(e) {
-    return this._agsAdmin.test(e) || this._adminSvcs.test(e);
-  }
-  _isServerRsrc(e) {
-    return this._isRESTService(e) || this._isAdminResource(e);
-  }
-  _isIdenticalService(e, t) {
-    let s = !1;
-    if (this._isRESTService(e) && this._isRESTService(t)) {
-      const i = this._getSuffix(e).toLowerCase(), r = this._getSuffix(t).toLowerCase();
-      if (s = i === r, !s) {
-        const n = /(.*)\/(MapServer|FeatureServer|UtilityNetworkServer).*/gi;
-        s = i.replaceAll(n, "$1") === r.replaceAll(n, "$1");
-      }
-    } else
-      this._isAdminResource(e) && this._isAdminResource(t) ? s = !0 : this._isServerRsrc(e) || this._isServerRsrc(t) || !this._isPortalDomain(e) || (s = !0);
-    return s;
-  }
-  _isPortalDomain(e) {
-    const t = new P(e.toLowerCase()), s = this._portalConfig;
-    let i = this._gwDomains.some((r) => r.regex.test(t.uri));
-    return !i && s && (i = this._hasSameServerInstance(this._getServerInstanceRoot(s.restBaseUrl), t.uri)), i || V.portalUrl && (i = O(t, V.portalUrl, !0)), i || (i = this._portals.some((r) => this._hasSameServerInstance(r, t.uri))), i = i || this._agsPortal.test(t.path), i;
-  }
-  _isIdProvider(e, t) {
-    let s = -1, i = -1;
-    this._gwDomains.forEach((n, h) => {
-      s === -1 && n.regex.test(e) && (s = h), i === -1 && n.regex.test(t) && (i = h);
-    });
-    let r = !1;
-    if (s > -1 && i > -1 && (s === 0 || s === 4 ? i !== 0 && i !== 4 || (r = !0) : s === 1 ? i !== 1 && i !== 2 || (r = !0) : s === 2 ? i === 2 && (r = !0) : s === 3 && i === 3 && (r = !0)), !r) {
-      const n = this.findServerInfo(t), h = n == null ? void 0 : n.owningSystemUrl;
-      h && X(n) && this._isPortalDomain(h) && this._isIdProvider(e, h) && (r = !0);
-    }
-    return r;
-  }
-  _getIdenticalSvcIdx(e, t) {
-    let s = -1;
-    for (let i = 0; i < t.resources.length; i++) {
-      const r = t.resources[i];
-      if (this._isIdenticalService(e, r)) {
-        s = i;
-        break;
-      }
-    }
-    return s;
-  }
-  _getSuffix(e) {
-    return e.replace(this._regexSDirUrl, "").replace(this._regexServerType, "$1");
-  }
-  _getTokenSvcUrl(e) {
-    let t, s, i;
-    if (this._isRESTService(e) || this._isAdminResource(e)) {
-      const r = this._getServerInstanceRoot(e);
-      return t = r + "/admin/generateToken", s = x(e = r + "/rest/info", { query: { f: "json" } }).then((n) => n.data), { adminUrl: t, promise: s };
-    }
-    if (this._isPortalDomain(e)) {
-      let r = "";
-      if (this._gwDomains.some((n) => (n.regex.test(e) && (r = n.tokenServiceUrl), !!r)), r || this._portals.some((n) => (this._hasSameServerInstance(n, e) && (r = n + this._gwTokenUrl), !!r)), r || (i = e.toLowerCase().indexOf("/sharing"), i !== -1 && (r = e.substring(0, i) + this._gwTokenUrl)), r || (r = this._getOrigin(e) + this._gwTokenUrl), r) {
-        const n = new P(e).port;
-        /^http:\/\//i.test(e) && n === "7080" && (r = r.replace(/:7080/i, ":7443")), r = r.replace(/http:/i, "https:");
-      }
-      return r;
-    }
-    if (e.toLowerCase().includes("premium.arcgisonline.com"))
-      return "https://premium.arcgisonline.com/server/tokens";
-  }
-  _processOAuthResponseParams(e, t, s) {
-    const i = t._oAuthCred;
-    if (e.code) {
-      const n = i.codeVerifier;
-      return i.codeVerifier = null, i.stateUID = null, i.save(), this._getOAuthToken(s.server, e.code, t.appId, this._getRedirectURI(t, !0), n).then((h) => {
-        const d = new S({ userId: h.username, server: s.server, token: h.access_token, expires: Date.now() + 1e3 * h.expires_in, ssl: h.ssl, oAuthState: e.state, _oAuthCred: i });
-        return t.userId = d.userId, i.storage = h.persist ? L : E, i.refreshToken = h.refresh_token, i.token = null, i.expires = h.refresh_token_expires_in ? Date.now() + 1e3 * h.refresh_token_expires_in : null, i.userId = d.userId, i.ssl = d.ssl, i.save(), d;
-      });
-    }
-    const r = new S({ userId: e.username, server: s.server, token: e.access_token, expires: Date.now() + 1e3 * Number(e.expires_in), ssl: e.ssl === "true", oAuthState: e.state, _oAuthCred: i });
-    return t.userId = r.userId, i.storage = e.persist ? L : E, i.refreshToken = null, i.token = r.token, i.expires = r.expires, i.userId = r.userId, i.ssl = r.ssl, i.save(), Promise.resolve(r);
-  }
-  _processOAuthPopupParams(e) {
-    var s;
-    const t = this._oAuthDfd;
-    if (this._oAuthDfd = null, t)
-      if (clearInterval(this._oAuthIntervalId), (s = this._oAuthOnPopupHandle) == null || s.remove(), e.error) {
-        const i = e.error === "access_denied", r = new k(i ? "identity-manager:user-aborted" : "identity-manager:authentication-failed", i ? "ABORTED" : "OAuth: " + e.error + " - " + e.error_description);
-        t.reject(r);
-      } else
-        this._processOAuthResponseParams(e, t.oinfo_, t.sinfo_).then((i) => {
-          t.resolve(i);
-        }).catch((i) => {
-          t.reject(i);
-        });
-  }
-  _setOAuthResponseQueryString(e) {
-    e && (e.charAt(0) === "?" && (e = e.substring(1)), this._processOAuthPopupParams(D(e)));
-  }
-  _exchangeToken(e, t, s) {
-    return x(`${e}/sharing/rest/oauth2/exchangeToken`, { authMode: "anonymous", method: "post", query: { f: "json", client_id: t, token: s } }).then((i) => i.data.token);
-  }
-  _getPlatformSelf(e, t) {
-    return e = e.replace(/^http:/i, "https:"), x(`${e}/sharing/rest/oauth2/platformSelf`, { authMode: "anonymous", headers: { "X-Esri-Auth-Client-Id": t, "X-Esri-Auth-Redirect-Uri": window.location.href.replace(/#.*$/, "") }, method: "post", query: { f: "json", expiration: 30 }, withCredentials: !0 }).then((s) => s.data);
-  }
-  _getPortalSelf(e, t) {
-    let s;
-    return this._gwDomains.some((i) => (i.regex.test(e) && (s = i.customBaseUrl), !!s)), s ? Promise.resolve({ allSSL: !0, currentVersion: "8.4", customBaseUrl: s, portalMode: "multitenant", supportsOAuth: !0 }) : (this._appOrigin.startsWith("https:") ? e = e.replace(/^http:/i, "https:").replace(/:7080/i, ":7443") : /^http:/i.test(t) && (e = e.replace(/^https:/i, "http:").replace(/:7443/i, ":7080")), x(e, { query: { f: "json" }, authMode: "anonymous", withCredentials: !0 }).then((i) => i.data));
-  }
-  _doPortalSignIn(e) {
-    const t = this._portalConfig, s = window.location.href, i = this.findServerInfo(e);
-    return !(!t && !this._isPortalDomain(s) || !(i ? i.hasPortal || i.owningSystemUrl && this._isPortalDomain(i.owningSystemUrl) : this._isPortalDomain(e)) || !(this._isIdProvider(s, e) || t && (this._hasSameServerInstance(this._getServerInstanceRoot(t.restBaseUrl), e) || this._isIdProvider(t.restBaseUrl, e)) || O(s, e, !0)));
-  }
-  _checkProtocol(e, t, s, i) {
-    let r = !0;
-    const n = i ? t.adminTokenServiceUrl : t.tokenServiceUrl;
-    return n.trim().toLowerCase().startsWith("https:") && !this._appOrigin.startsWith("https:") && se(n) && (r = !!this._protocolFunc && !!this._protocolFunc({ resourceUrl: e, serverInfo: t }), !r) && s(new k("identity-manager:aborted", "Aborted the Sign-In process to avoid sending password over insecure connection.")), r;
-  }
-  _enqueue(e, t, s, i, r, n) {
-    return i || (i = C()), i.resUrl_ = e, i.sinfo_ = t, i.options_ = s, i.admin_ = r, i.refresh_ = n, this._busy ? this._hasSameServerInstance(this._getServerInstanceRoot(e), this._busy.resUrl_) ? (this._oAuthDfd && this._oAuthDfd.oAuthWin_ && this._oAuthDfd.oAuthWin_.focus(), this._soReqs.push(i)) : this._xoReqs.push(i) : this._doSignIn(i), i.promise;
-  }
-  _doSignIn(e) {
-    this._busy = e, this._rejectOnPersistedPageShow = !1;
-    const t = (o) => {
-      var m;
-      const l = (m = e.options_) == null ? void 0 : m.resource, c = e.resUrl_, a = e.refresh_;
-      let u = !1;
-      this.credentials.includes(o) || (a && this.credentials.includes(a) ? (a.userId = o.userId, a.token = o.token, a.expires = o.expires, a.validity = o.validity, a.ssl = o.ssl, a.creationTime = o.creationTime, u = !0, o = a) : this.credentials.push(o)), o.resources || (o.resources = []), o.resources.includes(l || c) || o.resources.push(l || c), o.scope = this._isServerRsrc(c) ? "server" : "portal", o.emitTokenChange();
-      const v = this._soReqs, _ = {};
-      this._soReqs = [], v.forEach((f) => {
-        if (!this._isIdenticalService(c, f.resUrl_)) {
-          const T = this._getSuffix(f.resUrl_);
-          _[T] || (_[T] = !0, o.resources.push(f.resUrl_));
-        }
-      }), e.resolve(o), v.forEach((f) => {
-        this._hasSameServerInstance(this._getServerInstanceRoot(c), f.resUrl_) ? f.resolve(o) : this._soReqs.push(f);
-      }), this._busy = e.resUrl_ = e.sinfo_ = e.refresh_ = null, u || this.emit("credential-create", { credential: o }), this._soReqs.length ? this._doSignIn(this._soReqs.shift()) : this._xoReqs.length && this._doSignIn(this._xoReqs.shift());
-    }, s = (o) => {
-      e.reject(o), this._busy = e.resUrl_ = e.sinfo_ = e.refresh_ = null, this._soReqs.length ? this._doSignIn(this._soReqs.shift()) : this._xoReqs.length && this._doSignIn(this._xoReqs.shift());
-    }, i = (o, l, c, a) => {
-      var T, N, F;
-      const u = e.sinfo_, v = !e.options_ || e.options_.prompt !== !1, _ = u.hasPortal && this._findOAuthInfo(e.resUrl_);
-      let m, f;
-      if (o)
-        t(new S({ userId: o, server: u.server, token: c || null, expires: a != null ? Number(a) : null, ssl: !!l }));
-      else if (window !== window.parent && ((T = this._appUrlObj.query) != null && T["arcgis-auth-origin"]) && ((N = this._appUrlObj.query) != null && N["arcgis-auth-portal"]) && this._hasSameServerInstance(this._getServerInstanceRoot(this._appUrlObj.query["arcgis-auth-portal"]), e.resUrl_)) {
-        window.parent.postMessage({ type: "arcgis:auth:requestCredential" }, this._appUrlObj.query["arcgis-auth-origin"]);
-        const g = j(window, "message", (w) => {
-          w.source === window.parent && w.data && (w.data.type === "arcgis:auth:credential" ? (g.remove(), w.data.credential.expires < Date.now() ? s(new k("identity-manager:credential-request-failed", "Parent application's token has expired.")) : t(new S(w.data.credential))) : w.data.type === "arcgis:auth:error" && (g.remove(), w.data.error.name === "tokenExpiredError" ? s(new k("identity-manager:credential-request-failed", "Parent application's token has expired.")) : s(k.fromJSON(w.data.error))));
-        });
-        R((F = e.options_) == null ? void 0 : F.signal, () => {
-          g.remove();
-        });
-      } else if (_) {
-        let g = _._oAuthCred;
-        if (!g) {
-          const w = new W(_, L), I = new W(_, E);
-          w.isValid() && I.isValid() ? w.expires > I.expires ? (g = w, I.destroy()) : (g = I, w.destroy()) : g = w.isValid() ? w : I, _._oAuthCred = g;
-        }
-        if (g.isValid()) {
-          m = new S({ userId: g.userId, server: u.server, token: g.token, expires: g.expires, ssl: g.ssl, _oAuthCred: g });
-          const w = _.appId !== g.appId && this._doPortalSignIn(e.resUrl_);
-          w || g.refreshToken ? (e._pendingDfd = g.refreshToken ? this._getOAuthToken(u.server, g.refreshToken, g.appId).then((I) => (m.expires = Date.now() + 1e3 * I.expires_in, m.token = I.access_token, m)) : Promise.resolve(m), e._pendingDfd.then((I) => w ? this._exchangeToken(I.server, _.appId, I.token).then((Z) => (I.token = Z, I)).catch(() => I) : I).then((I) => {
-            t(I);
-          }).catch(() => {
-            g == null || g.destroy(), i();
-          })) : t(m);
-        } else if (this._oAuthLocationParams && this._hasSameServerInstance(_.portalUrl, this._oAuthLocationParams.state.portalUrl) && (this._oAuthLocationParams.access_token || this._oAuthLocationParams.code && this._oAuthLocationParams.state.uid === g.stateUID && g.codeVerifier)) {
-          const w = this._oAuthLocationParams;
-          this._oAuthLocationParams = null, e._pendingDfd = this._processOAuthResponseParams(w, _, u).then((I) => {
-            t(I);
-          }).catch(s);
-        } else {
-          const w = () => {
-            v ? e._pendingDfd = this.oAuthSignIn(e.resUrl_, u, _, e.options_).then(t, s) : (f = new k("identity-manager:not-authenticated", "User is not signed in."), s(f));
-          };
-          this._doPortalSignIn(e.resUrl_) ? e._pendingDfd = this._getPlatformSelf(u.server, _.appId).then((I) => {
-            O(I.portalUrl, this._appOrigin, !0) ? (m = new S({ userId: I.username, server: u.server, expires: Date.now() + 1e3 * I.expires_in, token: I.token }), t(m)) : w();
-          }).catch(w) : w();
-        }
-      } else if (v) {
-        if (this._checkProtocol(e.resUrl_, u, s, e.admin_)) {
-          let g = e.options_;
-          e.admin_ && (g = g || {}, g.isAdmin = !0), e._pendingDfd = this.signIn(e.resUrl_, u, g).then(t, s);
-        }
-      } else
-        f = new k("identity-manager:not-authenticated", "User is not signed in."), s(f);
-    }, r = () => {
-      const o = e.sinfo_, l = o.owningSystemUrl, c = e.options_;
-      let a, u, v, _;
-      if (c && (a = c.token, u = c.error, v = c.prompt), _ = this._findCredential(l, { token: a, resource: e.resUrl_ }), !_) {
-        for (const m of this.credentials)
-          if (this._isIdProvider(l, m.server)) {
-            _ = m;
-            break;
-          }
-      }
-      if (_) {
-        const m = this.findCredential(e.resUrl_, _.userId);
-        if (m)
-          t(m);
-        else if (B(o, this._legacyFed)) {
-          const f = _.toJSON();
-          f.server = o.server, f.resources = null, t(new S(f));
-        } else
-          (e._pendingDfd = this.generateToken(this.findServerInfo(_.server), null, { serverUrl: e.resUrl_, token: _.token, signal: e.options_.signal, ssl: _.ssl })).then((f) => {
-            t(new S({ userId: _ == null ? void 0 : _.userId, server: o.server, token: f.token, expires: f.expires != null ? Number(f.expires) : null, ssl: !!f.ssl, isAdmin: e.admin_, validity: f.validity }));
-          }, s);
-      } else
-        this._busy = null, a && (e.options_.token = null), (e._pendingDfd = this.getCredential(l.replace(/\/?$/, "/sharing"), { resource: e.resUrl_, owningTenant: o.owningTenant, signal: e.options_.signal, token: a, error: u, prompt: v })).then(() => {
-          this._enqueue(e.resUrl_, e.sinfo_, e.options_, e, e.admin_);
-        }, (m) => {
-          e.resUrl_ = e.sinfo_ = e.refresh_ = null, e.reject(m);
-        });
-    };
-    this._errbackFunc = s;
-    const n = e.sinfo_.owningSystemUrl, h = this._isServerRsrc(e.resUrl_), d = e.sinfo_._restInfoPms;
-    d ? d.promise.then((o) => {
-      const l = e.sinfo_;
-      if (l._restInfoPms) {
-        l.adminTokenServiceUrl = l._restInfoPms.adminUrl, l._restInfoPms = null, l.tokenServiceUrl = (b("authInfo.tokenServicesUrl", o) || b("authInfo.tokenServiceUrl", o) || b("tokenServiceUrl", o)) ?? null, l.shortLivedTokenValidity = b("authInfo.shortLivedTokenValidity", o) ?? null, l.currentVersion = o.currentVersion, l.owningTenant = o.owningTenant;
-        const c = l.owningSystemUrl = o.owningSystemUrl;
-        c && this._portals.push(c);
-      }
-      h && l.owningSystemUrl ? r() : i();
-    }, () => {
-      e.sinfo_._restInfoPms = null;
-      const o = new k("identity-manager:server-identification-failed", "Unknown resource - could not find token service endpoint.");
-      s(o);
-    }) : h && n ? r() : e.sinfo_._selfReq ? e.sinfo_._selfReq.selfDfd.then((o) => {
-      var _;
-      const l = {};
-      let c, a, u, v;
-      return o && (c = (_ = o.user) == null ? void 0 : _.username, l.username = c, l.allSSL = o.allSSL, a = o.supportsOAuth, v = parseFloat(o.currentVersion), o.portalMode === "multitenant" && (u = o.customBaseUrl), e.sinfo_.currentVersion = v), e.sinfo_.webTierAuth = !!c, c && this.normalizeWebTierAuth ? this.generateToken(e.sinfo_, null, { ssl: l.allSSL }).catch(() => null).then((m) => (l.portalToken = m && m.token, l.tokenExpiration = m && m.expires, l)) : !c && a && v >= 4.4 && !this._findOAuthInfo(e.resUrl_) ? this._generateOAuthInfo({ portalUrl: e.sinfo_.server, customBaseUrl: u, owningTenant: e.sinfo_._selfReq.owningTenant }).catch(() => null).then(() => l) : l;
-    }).catch(() => null).then((o) => {
-      e.sinfo_._selfReq = null, o ? i(o.username, o.allSSL, o.portalToken, o.tokenExpiration) : i();
-    }) : i();
-  }
-  _generateOAuthInfo(e) {
-    let t, s = null, i = e.portalUrl;
-    const r = e.customBaseUrl, n = e.owningTenant, h = !this._defaultOAuthInfo && this._createDefaultOAuthInfo && !this._hasTestedIfAppIsOnPortal;
-    if (h) {
-      s = window.location.href;
-      let d = s.indexOf("?");
-      d > -1 && (s = s.slice(0, d)), d = s.search(/\/(apps|home)\//), s = d > -1 ? s.slice(0, d) : null;
-    }
-    return h && s ? (this._hasTestedIfAppIsOnPortal = !0, t = x(s + "/sharing/rest", { query: { f: "json" } }).then(() => {
-      this._defaultOAuthInfo = new K({ appId: "arcgisonline", popupCallbackUrl: s + "/home/oauth-callback.html" });
-    })) : t = Promise.resolve(), t.then(() => {
-      if (this._defaultOAuthInfo)
-        return i = i.replace(/^http:/i, "https:"), x(i + "/sharing/rest/oauth2/validateRedirectUri", { query: { accountId: n, client_id: this._defaultOAuthInfo.appId, redirect_uri: G(this._defaultOAuthInfo.popupCallbackUrl), f: "json" } }).then((d) => {
-          if (d.data.valid) {
-            const o = this._defaultOAuthInfo.clone();
-            d.data.urlKey && r ? o.portalUrl = "https://" + d.data.urlKey.toLowerCase() + "." + r : o.portalUrl = i, o.popup = window !== window.top || !(O(i, this._appOrigin) || this._gwDomains.some((l) => l.regex.test(i) && l.regex.test(this._appOrigin))), this.oAuthInfos.push(o);
-          }
-        });
-    });
-  }
-  _doOAuthSignIn(e, t, s, i) {
-    const r = s._oAuthCred, n = { portalUrl: s.portalUrl };
-    !s.popup && s.preserveUrlHash && window.location.hash && (n.hash = window.location.hash), r.stateUID && (n.uid = r.stateUID);
-    const h = { client_id: s.appId, response_type: r.codeVerifier ? "code" : "token", state: JSON.stringify(n), expiration: s.expiration, locale: s.locale, redirect_uri: this._getRedirectURI(s, !!r.codeVerifier) };
-    s.forceLogin && (h.force_login = !0), s.forceUserId && s.userId && (h.prepopulatedusername = s.userId), !s.popup && this._doPortalSignIn(e) && (h.redirectToUserOrgUrl = !0), r.codeVerifier && (h.code_challenge = i || r.codeVerifier, h.code_challenge_method = i ? "S256" : "plain");
-    const d = s.portalUrl.replace(/^http:/i, "https:") + "/sharing/oauth2/authorize", o = d + "?" + H(h);
-    if (s.popup) {
-      const l = window.open(o, "esriJSAPIOAuth", s.popupWindowFeatures);
-      if (l)
-        l.focus(), this._oAuthDfd.oAuthWin_ = l, this._oAuthIntervalId = setInterval(() => {
-          if (l.closed) {
-            clearInterval(this._oAuthIntervalId), this._oAuthOnPopupHandle.remove();
-            const c = this._oAuthDfd;
-            if (c) {
-              const a = new k("identity-manager:user-aborted", "ABORTED");
-              c.reject(a);
-            }
-          }
-        }, 500), this._oAuthOnPopupHandle = j(window, ["arcgis:auth:hash", "arcgis:auth:location:search"], (c) => {
-          c.type === "arcgis:auth:hash" ? this.setOAuthResponseHash(c.detail) : this._setOAuthResponseQueryString(c.detail);
-        });
-      else {
-        const c = new k("identity-manager:popup-blocked", "ABORTED");
-        this._oAuthDfd.reject(c);
-      }
-    } else
-      this._rejectOnPersistedPageShow = !0, this._oAuthRedirectFunc ? this._oAuthRedirectFunc({ authorizeParams: h, authorizeUrl: d, resourceUrl: e, serverInfo: t, oAuthInfo: s }) : window.location.href = o;
-  }
-  _getRedirectURI(e, t) {
-    const s = window.location.href.replace(/#.*$/, "");
-    if (e.popup)
-      return G(e.popupCallbackUrl);
-    if (t) {
-      const i = $(s);
-      return i.query && ["code", "error", "error_description", "message_code", "persist", "state"].forEach((r) => {
-        delete i.query[r];
-      }), re(i.path, i.query);
-    }
-    return s;
-  }
-}
-oe.prototype.declaredClass = "esri.identity.IdentityManagerBase";
-let S = class extends Q.EventedAccessor {
-  constructor(p) {
-    super(p), this._oAuthCred = null, this.tokenRefreshBuffer = 2, p != null && p._oAuthCred && (this._oAuthCred = p._oAuthCred);
-  }
-  initialize() {
-    this.resources = this.resources || [], this.creationTime == null && (this.creationTime = Date.now());
-  }
-  refreshToken() {
-    const p = A.findServerInfo(this.server), e = p == null ? void 0 : p.owningSystemUrl, t = !!e && this.scope === "server", s = t && B(p, A._legacyFed), i = p.webTierAuth, r = i && A.normalizeWebTierAuth, n = q[this.server], h = n == null ? void 0 : n[this.userId];
-    let d, o = this.resources && this.resources[0], l = t ? A.findServerInfo(e) : null, c = { username: this.userId, password: h };
-    if (i && !r)
-      return;
-    t && !l && A.serverInfos.some((u) => (A._isIdProvider(e, u.server) && (l = u), !!l));
-    const a = l ? A.findCredential(l.server, this.userId) : null;
-    if (!t || a) {
-      if (!s) {
-        if (t)
-          d = { serverUrl: o, token: a == null ? void 0 : a.token, ssl: a && a.ssl };
-        else if (r)
-          c = null, d = { ssl: this.ssl };
-        else {
-          if (!h) {
-            let u;
-            return o && (o = A._sanitizeUrl(o), this._enqueued = 1, u = A._enqueue(o, p, null, null, this.isAdmin, this), u.then(() => {
-              this._enqueued = 0, this.refreshServerTokens();
-            }).catch(() => {
-              this._enqueued = 0;
-            })), u;
-          }
-          this.isAdmin && (d = { isAdmin: !0 });
-        }
-        return A.generateToken(t ? l : p, t ? null : c, d).then((u) => {
-          this.token = u.token, this.expires = u.expires != null ? Number(u.expires) : null, this.creationTime = Date.now(), this.validity = u.validity, this.emitTokenChange(), this.refreshServerTokens();
-        }).catch(() => {
-        });
-      }
-      a == null || a.refreshToken();
-    }
-  }
-  refreshServerTokens() {
-    this.scope === "portal" && A.credentials.forEach((p) => {
-      const e = A.findServerInfo(p.server), t = e == null ? void 0 : e.owningSystemUrl;
-      p !== this && p.userId === this.userId && t && p.scope === "server" && (A._hasSameServerInstance(this.server, t) || A._isIdProvider(t, this.server)) && (B(e, A._legacyFed) ? (p.token = this.token, p.expires = this.expires, p.creationTime = this.creationTime, p.validity = this.validity, p.emitTokenChange()) : p.refreshToken());
-    });
-  }
-  emitTokenChange(p) {
-    clearTimeout(this._refreshTimer);
-    const e = this.server ? A.findServerInfo(this.server) : null, t = e == null ? void 0 : e.owningSystemUrl, s = t ? A.findServerInfo(t) : null;
-    p === !1 || t && this.scope !== "portal" && (!(s != null && s.webTierAuth) || A.normalizeWebTierAuth) || this.expires == null && this.validity == null || this._startRefreshTimer(), this.emit("token-change");
-  }
-  destroy() {
-    this.userId = this.server = this.token = this.expires = this.validity = this.resources = this.creationTime = null, this._oAuthCred && (this._oAuthCred.destroy(), this._oAuthCred = null);
-    const p = A.credentials.indexOf(this);
-    p > -1 && A.credentials.splice(p, 1), this.emitTokenChange(), this.emit("destroy");
-  }
-  toJSON() {
-    const p = Y({ userId: this.userId, server: this.server, token: this.token, expires: this.expires, validity: this.validity, ssl: this.ssl, isAdmin: this.isAdmin, creationTime: this.creationTime, scope: this.scope }), e = this.resources;
-    return e && e.length > 0 && (p.resources = e.slice()), p;
-  }
-  _startRefreshTimer() {
-    clearTimeout(this._refreshTimer);
-    const p = 6e4 * this.tokenRefreshBuffer, e = 2 ** 31 - 1;
-    let t = (this.validity ? this.creationTime + 6e4 * this.validity : this.expires) - Date.now();
-    t < 0 ? t = 0 : t > e && (t = e), this._refreshTimer = setTimeout(this.refreshToken.bind(this), t > p ? t - p : t);
-  }
-};
-y([U()], S.prototype, "creationTime", void 0), y([U()], S.prototype, "expires", void 0), y([U()], S.prototype, "isAdmin", void 0), y([U()], S.prototype, "oAuthState", void 0), y([U()], S.prototype, "resources", void 0), y([U()], S.prototype, "scope", void 0), y([U()], S.prototype, "server", void 0), y([U()], S.prototype, "ssl", void 0), y([U()], S.prototype, "token", void 0), y([U()], S.prototype, "tokenRefreshBuffer", void 0), y([U()], S.prototype, "userId", void 0), y([U()], S.prototype, "validity", void 0), S = y([ie("esri.identity.Credential")], S);
-export {
-  S as Credential,
-  oe as IdentityManagerBase
-};