@arcgis/core 5.0.0-next.51 → 5.0.0-next.53

package/graphic/VectorTileGraphicOrigin.d.ts

@@ -1,4 +1,31 @@
-import "../interfaces";
+import type GraphicOrigin from "./GraphicOrigin.js";
+import type VectorTileLayer from "../layers/VectorTileLayer.js";
 
-import VectorTileGraphicOrigin = __esri.VectorTileGraphicOrigin;
-export default VectorTileGraphicOrigin;
+/**
+ * Provides information about the [VectorTileLayer](https://developers.arcgis.com/javascript/latest/api-reference/esri-layers-VectorTileLayer.html) from which a graphic originates.
+ * Origin information maybe available when a graphic is returned from methods such as [MapView#hitTest()](https://developers.arcgis.com/javascript/latest/api-reference/esri-views-MapView.html#hitTest) method.
+ * You can access the graphic's origin through the graphic's [Graphic#origin](https://developers.arcgis.com/javascript/latest/api-reference/esri-Graphic.html#origin) property.
+ *
+ * The origin information contains the style layer's [id](https://maplibre.org/maplibre-style-spec/layers/#id) and layer index
+ * within the [vector tile style](https://doc.arcgis.com/en/arcgis-online/reference/tile-layers.htm#ESRI_SECTION1_8F68399EB47B48FF9EF46719FCC96978).
+ * Spatial information about the actual feature represented in the style layer is returned only
+ * if the style layer is a [symbol layer](https://maplibre.org/maplibre-style-spec/layers/#symbol). Otherwise, the graphic's geometry is `null`.
+ *
+ * @since 4.34
+ * @see [MapView#hitTest()](https://developers.arcgis.com/javascript/latest/api-reference/esri-views-MapView.html#hitTest)
+ * @see [Map component hitTest()](https://developers.arcgis.com/javascript/latest/references/map-components/arcgis-map/#hitTest)
+ */
+export default class VectorTileGraphicOrigin extends GraphicOrigin {
+  constructor(layer: VectorTileLayer, layerId: string, layerIndex: number);
+  /** The [VectorTileLayer](https://developers.arcgis.com/javascript/latest/api-reference/esri-layers-VectorTileLayer.html) from which a graphic originates. */
+  readonly layer: VectorTileLayer;
+  /**
+   * The [unique identifier](https://maplibre.org/maplibre-style-spec/layers/#id) of the style layer in the
+   * [vector tile style](https://maplibre.org/maplibre-style-spec).
+   */
+  readonly layerId: string;
+  /** The layer index of the style layer in the [vector tile style](https://maplibre.org/maplibre-style-spec). */
+  readonly layerIndex: number;
+  /** The type of the graphic origin. */
+  readonly type: "vector-tile";
+}

package/ground/NavigationConstraint.d.ts

@@ -0,0 +1,19 @@
+import type { JSONSupport, JSONSupportMixinProperties } from "../core/JSONSupport.js";
+
+export interface NavigationConstraintProperties extends JSONSupportMixinProperties, Partial<Pick<NavigationConstraint, "type">> {}
+
+export abstract class NavigationConstraint extends JSONSupport {
+  /**
+   * The type of the constraint. It can be one of the following:
+   *
+   * Value      | Description
+   * -----------|--------------------
+   * stay-above | User can only navigate above ground surface
+   * none       | User can navigate above and below the ground surface
+   *
+   * Default value: stay-above
+   *
+   * @default "none"
+   */
+  accessor type: "none" | "stay-above";
+}

package/identity/Credential.d.ts

@@ -1,4 +1,75 @@
-import "../interfaces";
+import type { EventedAccessor, EventedMixinProperties } from "../core/Evented.js";
 
-import Credential = __esri.Credential;
-export default Credential;
+export interface CredentialProperties extends EventedMixinProperties, Partial<Pick<Credential, "expires" | "isAdmin" | "oAuthState" | "scope" | "server" | "ssl" | "token" | "userId">> {}
+
+export interface CredentialEvents {
+  /**
+   * Fires when a credential object is destroyed. After the credential is
+   * destroyed, remove any map layers that use this credential. Any tokens
+   * generated via OAuth will automatically be revoked.
+   *
+   * @see [IdentityManagerBase#destroyCredentials()](https://developers.arcgis.com/javascript/latest/api-reference/esri-identity-IdentityManagerBase.html#destroyCredentials)
+   */
+  destroy: void;
+  /** Fires when the token associated with the credential is updated or changed. */
+  "token-change": void;
+}
+
+/**
+ * Represents a credential object used to access a secure ArcGIS resource.
+ *
+ * @since 4.0
+ * @see [Access ArcGIS Online items using OAuth 2.0](https://developers.arcgis.com/javascript/latest/sample-code/identity-oauth-basic/)
+ * @see [Access Secure Services](https://developers.arcgis.com/javascript/latest/secure-resources/)
+ * @see [Authentication and OAuth 2](https://developers.arcgis.com/authentication/)
+ * @see [Guide topic - Proxy pages](https://developers.arcgis.com/javascript/latest/proxies/)
+ * @see [ArcGIS Organization portals](https://developers.arcgis.com/javascript/latest/arcgis-organization-portals/)
+ */
+export default class Credential extends EventedAccessor {
+  /**
+   * @deprecated
+   * Do not directly reference this property.
+   * Use EventNames and EventTypes helpers from \@arcgis/core/Evented
+   */
+  "@eventTypes": CredentialEvents;
+  constructor(properties?: CredentialProperties);
+  /**
+   * Token expiration time specified as number of milliseconds since 1 January 1970 00:00:00 UTC.
+   *
+   * @see [Date - MDN](https://developer.mozilla.org/en-US/docs/Web/JavaScript/Reference/Global_Objects/Date)
+   */
+  accessor expires: number | null;
+  /** Indicates that this credential was created to access the [ArcGIS Server Administrator REST API](https://developers.arcgis.com/rest/enterprise-administration/server/overview/). */
+  accessor isAdmin: boolean;
+  /**
+   * The Identity Manager's
+   * [IdentityManagerBase#setOAuthRedirectionHandler()](https://developers.arcgis.com/javascript/latest/api-reference/esri-identity-IdentityManagerBase.html#setOAuthRedirectionHandler)
+   * returns an object that contains a `state` property. This information is returned for this property.
+   */
+  accessor oAuthState: any;
+  /** The scope of the credential. */
+  accessor scope: "portal" | "server";
+  /** The server url. */
+  accessor server: string;
+  /** Indicates whether the resources accessed using this credential should be fetched over HTTPS protocol. */
+  accessor ssl: boolean;
+  /** Token generated by the token service using the specified userId and password. */
+  accessor token: string;
+  /** User associated with the Credential object. */
+  accessor userId: string;
+  /**
+   * Destroys the credential. When the credential is destroyed, you should
+   * remove any map layers that are using this credential. Any tokens
+   * generated via OAuth will automatically be revoked.
+   *
+   * @see [IdentityManagerBase#destroyCredentials()](https://developers.arcgis.com/javascript/latest/api-reference/esri-identity-IdentityManagerBase.html#destroyCredentials)
+   */
+  destroy(): void;
+  /**
+   * Generates a new token and updates the Credential's [token](https://developers.arcgis.com/javascript/latest/api-reference/esri-identity-Credential.html#token) property with
+   * the newly acquired token. Tokens are typically kept valid using a timer that automatically
+   * triggers a refresh before the token expires. Use this method in cases where the
+   * timer has been delayed or stopped.
+   */
+  refreshToken(): Promise<any> | undefined;
+}

package/identity/IdentityManager.d.ts

@@ -1,4 +1,31 @@
-import "../interfaces";
+import type { IdentityManagerBase } from "./IdentityManagerBase.js";
 
-declare const IdentityManager: __esri.IdentityManager;
-export default IdentityManager;
+/**
+ * This object provides the framework and helper methods used in managing user credentials for the following resources:
+ *
+ * * Secured [ArcGIS.com](https://arcgis.com) or
+ * [ArcGIS Enterprise portal](https://enterprise.arcgis.com/en/portal/latest/administer/windows/what-is-portal-for-arcgis-.htm) resources (e.g. web maps).
+ *
+ * * ArcGIS Server resources secured using token-based authentication. Note that only ArcGIS Server versions 10 SP 1
+ * and greater are supported.
+ * If your application accesses services from different domains, it is deemed a cross-domain request and you need to setup
+ * a [proxy](https://developers.arcgis.com/javascript/latest/proxies/) or use [CORS](https://developers.arcgis.com/javascript/latest/cors/) (if supported by browser). If CORS is supported, the Identity Manager knows to make a
+ * request to the token service over https.
+ *
+ * Authentication requests over http are prevented because sensitive data sent via GET can be viewed in server logs.
+ * To prevent this, the Identity Manager requires that you use POST over https to ensure your credentials are secure.
+ * View the [proxy pages](https://developers.arcgis.com/javascript/latest/proxies/) and [CORS](https://developers.arcgis.com/javascript/latest/cors/) help topic for more details.
+ *
+ * > [!WARNING]
+ * >
+ * > The IdentityManager module is slightly different than other modules in the API. Instead of returning a class constructor, it returns a singleton instance that has already been created by this module.
+ *
+ * @since 4.0
+ * @see [Access Secure Services](https://developers.arcgis.com/javascript/latest/guide/secure-resources/)
+ * @see [Authentication and OAuth 2](https://developers.arcgis.com/authentication/)
+ * @see [Guide topic - Proxy pages](https://developers.arcgis.com/javascript/latest/proxies/)
+ * @see [ArcGIS Organization portals](https://developers.arcgis.com/javascript/latest/arcgis-organization-portals/)
+ * @see [Sample - Access ArcGIS Online items using OAuth 2.0](https://developers.arcgis.com/javascript/latest/sample-code/identity-oauth-basic/)
+ */
+declare const idMgr: IdentityManagerBase;
+export default idMgr;

package/identity/IdentityManagerBase.d.ts

@@ -0,0 +1,348 @@
+import type Credential from "./Credential.js";
+import type OAuthInfo from "./OAuthInfo.js";
+import type ServerInfo from "./ServerInfo.js";
+import type Widget from "../widgets/Widget.js";
+import type { Evented } from "../core/Evented.js";
+import type { AbortOptions } from "../core/promiseUtils.js";
+
+export interface GetCredentialOptions extends AbortOptions {
+  /** Error object returned by the server from a previous attempt to fetch the given URL. */
+  error?: Error;
+  /**
+   * If set to *false*, the user will not be shown a dialog before the OAuth popup window is opened.
+   *
+   * @default true
+   */
+  oAuthPopupConfirmation?: boolean;
+  /** Token used for a previous unsuccessful attempt to fetch the given URL. */
+  token?: string;
+}
+
+/** @param params - The parameters to pass to the protocol handler. */
+export type ProtocolHandler = (params: ProtocolHandlerParams) => boolean;
+
+export interface ProtocolHandlerParams {
+  /** The secure resource URL. */
+  resourceUrl: string;
+  /** ServerInfo object describing the server where the secure resource is hosted. */
+  serverInfo: ServerInfo;
+}
+
+export interface AuthorizeParams {
+  /** The application ID of the registered application. */
+  client_id: string;
+  /** The expiration time in minutes. */
+  expiration: number;
+  /** The locale being used. */
+  locale: string;
+  /**
+   * The redirect URL represents the valid places that a
+   * user can be redirected to after a successful sign in.
+   */
+  redirect_uri: string;
+  /** The type of response returned. */
+  response_type: string;
+  /**
+   * The state parameter passed back as the object in the
+   * [Credential's oAuthState](https://developers.arcgis.com/javascript/latest/api-reference/esri-identity-Credential.html#oAuthState) property.
+   */
+  state: string;
+}
+
+/**
+ * The callback to execute when [setOAuthRedirectionHandler()](https://developers.arcgis.com/javascript/latest/api-reference/esri-identity-IdentityManagerBase.html#setOAuthRedirectionHandler) is called.
+ *
+ * @param info - An object containing parameter values for the `handlerCallback`.
+ */
+export type OAuthRedirectHandler = (info: OAuthRedirectHandlerInfo) => void;
+
+export interface OAuthRedirectHandlerInfo {
+  /** Object containing authorization parameters used to access the secure service. */
+  authorizeParams: AuthorizeParams;
+  /** The OAuth 2.0 authorization URL for the portal. */
+  authorizeUrl: string;
+  /** A reference to the OAuthInfo object. */
+  oAuthInfo: OAuthInfo;
+  /** The URL to the accessed resource. */
+  resourceUrl: string;
+  /**
+   * The ServerInfo object describing the server
+   * where the secure resource is hosted.
+   */
+  serverInfo: ServerInfo;
+}
+
+export interface IdentityManagerBaseEvents {
+  /** Fires when a credential is created. */
+  "credential-create": IdentityManagerCredentialCreateEvent;
+  /**
+   * Fires when the [IdentityManager](https://developers.arcgis.com/javascript/latest/api-reference/esri-identity-IdentityManager.html) dialog is created.
+   * This is used to prompt users for their credentials.
+   */
+  "dialog-create": void;
+}
+
+export interface IdentityManagerCredentialCreateEvent {
+  /** The returned credential. */
+  credential: Credential;
+}
+
+export abstract class IdentityManagerBase extends Evented {
+  /**
+   * @deprecated
+   * Do not directly reference this property.
+   * Use EventNames and EventTypes helpers from \@arcgis/core/Evented
+   */
+  "@eventTypes": IdentityManagerBaseEvents;
+  /** Dialog box widget used to challenge the user for their credentials when the application attempts to access a secure resource. This property is available after the dialog-create event has fired. */
+  dialog: Widget | null;
+  /**
+   * The suggested lifetime of the token in minutes.
+   *
+   * @default 60
+   */
+  tokenValidity: number | null;
+  /**
+   * Returns a [Credential](https://developers.arcgis.com/javascript/latest/api-reference/esri-identity-Credential.html) if the user has already signed in to access the given resource
+   * and is allowed to do so when using the given application id. In addition, it also returns a `boolean`, `viewOnly`, property
+   * that indicates whether the app is only viewable. The default is `false`. If the user has not signed in or does not have access,
+   * then the promise will be rejected and its error callback will be called.
+   *
+   * > [!WARNING]
+   * >
+   * > This scenario is generally not common unless you are building a licensed app.
+   * > Also, please note that this method should only be used if your application is on the
+   * > same domain as `*.arcgis.com` or ArcGIS Enterprise Server and is only applicable to
+   * > applications registered as items in the `Esri` organization.
+   *
+   * @param resUrl - The resource URL.
+   * @param appId - The registered OAuth application id.
+   * @returns Resolves to an object which contains the following properties:
+   * Property | Type | Description
+   * ---------|------|------------
+   * credential | [Credential](https://developers.arcgis.com/javascript/latest/api-reference/esri-identity-Credential.html) | The credential of the user.
+   * viewOnly | boolean | Indicates whether the app is only viewable. Default is `false`.
+   * @since 4.10
+   */
+  checkAppAccess(resUrl: string, appId: string): Promise<object>;
+  /**
+   * Returns the [Credential](https://developers.arcgis.com/javascript/latest/api-reference/esri-identity-Credential.html) if the user has already signed in to access the given resource. If the user has not signed in, then the promise will be rejected and its error callback will be called.
+   *
+   * @param resUrl - The resource URL.
+   * @returns Resolves to the returned credential of the signed-in user.
+   */
+  checkSignInStatus(resUrl: string): Promise<Credential>;
+  /**
+   * Destroys all credentials. It is good practice to call this method if working
+   * with an application that contains sign-out functionality as any tokens
+   * generated via OAuth will automatically be revoked.
+   */
+  destroyCredentials(): void;
+  /**
+   * Disables the use of `window.postMessage` to serve authentication requests that were enabled by [enablePostMessageAuth()](https://developers.arcgis.com/javascript/latest/api-reference/esri-identity-IdentityManagerBase.html#enablePostMessageAuth). This
+   * should be called to prevent memory leaks in SPA routing apps when they need to transition routes. Setting this this helps clean up and remove any `windows's` `message` event listeners that [enablePostMessageAuth()](https://developers.arcgis.com/javascript/latest/api-reference/esri-identity-IdentityManagerBase.html#enablePostMessageAuth) added.
+   *
+   * > [!WARNING]
+   * >
+   * > Please refer to the topic, [Passing authentication to IFramed apps](https://esri.github.io/arcgis-rest-js/guides/embedded-apps/) for additional information. The main differences are:
+   * > The ArcGIS REST JS API's [enablePostMessageAuth](https://esri.github.io/arcgis-rest-js/api/auth/UserSession/#enablePostMessageAuth) method's signature is different than what is provided in the ArcGIS Maps SDK for JavaScript as explained here.
+   * > Step three, i.e. `Embed App boots and Requests Auth`, does not apply when using the ArcGIS Maps SDK for JavaScript.
+   *
+   * @since 4.19
+   * @see [Passing authentication to IFramed apps](https://esri.github.io/arcgis-rest-js/guides/embedded-apps/)
+   * @see [enablePostMessageAuth()](https://developers.arcgis.com/javascript/latest/api-reference/esri-identity-IdentityManagerBase.html#enablePostMessageAuth)
+   */
+  disablePostMessageAuth(): void;
+  /**
+   * Enables the IdentityManager to serve authentication requests for the given resource from apps running in child iframes.
+   * The only apps that will be allowed to request the credential are ones that are either running at `*.arcgis.com`,
+   * or are running at the same origin as the host app. Requests from other apps will be ignored.
+   *
+   * Only one resource may be authenticated in this manner at any one time. The URL of the resource should be used as the value of a
+   * parameter named `arcgis-auth-portal` that is included in the iframe's `src` URL. The iframe's `src` URL should
+   * also include another parameter named `arcgis-auth-origin` with a value of `window.location.origin`. Both of these
+   * parameter values should be URL-encoded using `encodeURIComponent`. These
+   * parameters are used by the IdentityManager, or the [UserSession](https://esri.github.io/arcgis-rest-js/api/auth/UserSession/#fromParent) running
+   * in the iframe app when it needs the user's authentication to access a given
+   * resource.
+   *
+   * > [!WARNING]
+   * >
+   * > Please refer to the topic, [Passing authentication to IFramed apps](https://esri.github.io/arcgis-rest-js/guides/embedded-apps/) for additional information. The main differences are:
+   * > The ArcGIS REST JS API's [enablePostMessageAuth](https://esri.github.io/arcgis-rest-js/api/auth/UserSession/#enablePostMessageAuth) method's signature is different than what is provided in the ArcGIS Maps SDK for JavaScript as explained here.
+   * > Step three, i.e. `Embed App boots and Requests Auth`, does not apply when using the ArcGIS Maps SDK for JavaScript.
+   *
+   * @param resUrl - The resource URL. Default value is `https://www.arcgis.com/sharing/rest`.
+   * @since 4.19
+   * @see [disablePostMessageAuth()](https://developers.arcgis.com/javascript/latest/api-reference/esri-identity-IdentityManagerBase.html#disablePostMessageAuth)
+   * @see [Passing authentication to IFramed apps](https://esri.github.io/arcgis-rest-js/guides/embedded-apps/)
+   */
+  enablePostMessageAuth(resUrl?: string): void;
+  /**
+   * Returns the [Credential](https://developers.arcgis.com/javascript/latest/api-reference/esri-identity-Credential.html) for the resource identified by the specified url. Optionally, you can provide a userId to find credentials for a specific user.
+   *
+   * @param url - The URL to a server.
+   * @param userId - The userId for which you want to obtain credentials.
+   * @returns The credential for the resource identified by the specified URL.
+   */
+  findCredential(url: string | null | undefined, userId?: string): Credential | undefined;
+  /**
+   * Returns the [OAuthInfo](https://developers.arcgis.com/javascript/latest/api-reference/esri-identity-OAuthInfo.html) configuration for the passed in Portal server URL.
+   *
+   * @param portalUrl - The URL to a Portal.
+   * @returns The OAuthInfo configuration for the passed in Portal server URL.
+   * @example
+   * const esriId = await $arcgis.import("@arcgis/core/identity/IdentityManager.js");
+   * let portalURL = "https://host.arcgis.com";
+   * findOAuthInfo = function (){
+   *   let oAuthInfo = esriId.findOAuthInfo(portalURL)
+   *   console.log(oAuthInfo.toJSON())
+   * }
+   */
+  findOAuthInfo(portalUrl: string): OAuthInfo | undefined;
+  /**
+   * Returns information about the server that is hosting the specified URL.
+   *
+   * @param url - The URL to the server
+   * @returns The ServerInfo configuration for the passed in server URL.
+   */
+  findServerInfo(url: string): ServerInfo | undefined;
+  /**
+   * Returns an object containing a token and its expiration time. It is necessary to provide the [ServerInfo](https://developers.arcgis.com/javascript/latest/api-reference/esri-identity-ServerInfo.html) object that contains a token service URL and a user info object containing username and password. This is a helper method typically called by sub-classes to generate tokens.
+   *
+   * @param serverInfo - A ServerInfo object that contains a token service URL.
+   * @param userInfo - A user info object containing a user name and password.
+   * @param options - See the table below for the structure of this object.
+   * @returns Resolves to an object containing a token and expiration time.
+   */
+  generateToken(serverInfo: ServerInfo, userInfo: any, options?: IdentityManagerGenerateTokenOptions): Promise<{
+      expires: number;
+      ssl?: boolean;
+      token: string;
+      validity: number;
+  }>;
+  /**
+   * Returns a [Credential](https://developers.arcgis.com/javascript/latest/api-reference/esri-identity-Credential.html) object that can be used to access the secured resource identified by the input URL.
+   *
+   * @param url - The URL for the secure resource
+   * @param options - See the table below for the structure of the **options** object.
+   * @returns Resolves to an object containing a [Credential](https://developers.arcgis.com/javascript/latest/api-reference/esri-identity-Credential.html) that can be used to access the secured resource identified by the input URL.
+   */
+  getCredential(url: string, options?: GetCredentialOptions): Promise<Credential>;
+  /**
+   * Call this method during application initialization with the JSON previously obtained from the [toJSON()](https://developers.arcgis.com/javascript/latest/api-reference/esri-identity-IdentityManagerBase.html#toJSON) method used to re-hydrate the state of IdentityManager.
+   *
+   * @param json - The JSON obtained from the [toJSON()](https://developers.arcgis.com/javascript/latest/api-reference/esri-identity-IdentityManagerBase.html#toJSON) method.
+   */
+  initialize(json: any): void;
+  /**
+   * Indicates if the IdentityManager is busy accepting user input. For example, it returns `true` if the user has invoked {@link identity/IdentityManager#signIn} and is waiting for a response.
+   *
+   * @returns Whether IdentityManager is currently accepting user input.
+   */
+  isBusy(): boolean;
+  /**
+   * Registers OAuth 2.0 configurations.
+   *
+   * @param oAuthInfos - An array of OAuthInfo objects that defines the OAuth configurations.
+   * @example
+   * const [OAuthInfo, esriId] = await $arcgis.import([
+   *   "@arcgis/core/identity/OAuthInfo.js",
+   *   "@arcgis/core/identity/IdentityManager.js"
+   * ]);
+   * let oAuthInfo = new OAuthInfo({
+   *   appId: "<registered client id>"
+   * }); // required parameter
+   * esriId.registerOAuthInfos([oAuthInfo]);
+   */
+  registerOAuthInfos(oAuthInfos: OAuthInfo[]): void;
+  /**
+   * Register secure servers and the token endpoints.
+   *
+   * @param serverInfos - An array of ServerInfos objects that defines the secure service and token endpoint. The IdentityManager makes its best guess to determine the location of the secure server and token endpoint. Therefore, in most cases calling this method is not necessary. However, if the location of your server or token endpoint is not standard, use this method to register the location.
+   * @example
+   * const [ServerInfo, esriId] = await $arcgis.import(["@arcgis/core/identity/ServerInfo.js", "@arcgis/core/identity/IdentityManager.js"]);
+   * let serverInfo = new ServerInfo();
+   * serverInfo.server = "https://sampleserver6.arcgisonline.com";
+   * serverInfo.tokenServiceUrl = "https://sampleserver6.arcgisonline.com/arcgis/tokens/generateToken";
+   * serverInfo.hasServer = true;
+   * esriId.registerServers([serverInfo]);
+   */
+  registerServers(serverInfos: ServerInfo[]): void;
+  /**
+   * Registers the given OAuth 2.0 access token or ArcGIS Server token with the IdentityManager.
+   * See [registerOAuthInfos()](https://developers.arcgis.com/javascript/latest/api-reference/esri-identity-IdentityManagerBase.html#registerOAuthInfos) for additional information.
+   * The `registerToken` method is an advanced workflow for pre-registering long-term tokens for when you don't want users to sign in.
+   *
+   * Once a user logs in, the access token is registered with the IdentityManager. Subsequently, every request made
+   * by the application forwards this token when accessing web maps and other items stored in ArcGIS Online,
+   * or resources on your server.
+   *
+   * @param properties - See the table below for the structure of the **properties** object.
+   */
+  registerToken(properties: IdentityManagerRegisterTokenProperties): void;
+  /**
+   * Once a user successfully logs in, they are redirected back to the application. Use this method if
+   * the application needs to execute custom logic before the page is redirected. The IdentityManager
+   * calls the custom handler function with an object containing redirection properties.
+   *
+   * @param handlerFunction - When called,
+   * the callback passed to `setOAuthRedirectionHandler` receives an object containing the redirection
+   * properties.
+   * @example
+   * const esriId = await $arcgis.import("@arcgis/core/identity/IdentityManager.js");
+   * esriId.setOAuthRedirectionHandler(function(info)
+   *  {
+   *    // Execute custom logic then perform redirect
+   *    window.location = info.authorizeUrl + "?" + new URLSearchParams(info.authorizeParams).toString();
+   * });
+   */
+  setOAuthRedirectionHandler(handlerFunction: OAuthRedirectHandler): void;
+  /**
+   * Use this method in the popup callback page to pass the token and other values back to the IdentityManager.
+   *
+   * @param hash - The token information in addition to any other values needed to be passed back to the IdentityManager.
+   */
+  setOAuthResponseHash(hash: string): void;
+  /**
+   * When accessing secured resources, the IdentityManager may prompt for username and password and send them to the server using a secure connection. Due to potential browser limitations, it may not be possible to establish a secure connection with the server if the application is being run over HTTP protocol. In such cases, the Identity Manager will abort the request to fetch the secured resource.
+   * To resolve this issue, configure your web application server with HTTPS support and run the application over HTTPS. This is the recommended solution for production environments. However, for internal development environments that don't have HTTPS support, you can define a protocol error handler that allows the Identity Manager to continue with the process over HTTP protocol.
+   *
+   * @param handlerFunction - The function to call when the protocol is mismatched.
+   */
+  setProtocolErrorHandler(handlerFunction: ProtocolHandler): void;
+  /**
+   * Return properties of this object in JSON format. It can be stored in a cookie or persisted in HTML5 LocalStorage and later used to:
+   * * Initialize the IdentityManager the next time a user opens your application.
+   * * Share the state of the IdentityManager between multiple web pages of your website.
+   * This way users will not be asked to sign in repeatedly when they launch your app multiple times or when navigating between multiple web pages in your website.
+   *
+   * @returns The JSON object representing the IdentityManager instance calling this method.
+   */
+  toJSON(): object;
+}
+
+export interface IdentityManagerRegisterTokenProperties {
+  /** Token expiration time specified as number of milliseconds since 1 January 1970 00:00:00 UTC. */
+  expires?: number;
+  /**
+   * For ArcGIS Online or Portal, this is https://www.arcgis.com/sharing/rest or similar to https://www.example.com/portal/sharing/rest.
+   *                                     For ArcGIS Server this is similar to https://www.example.com/arcgis/rest/services.
+   */
+  server: string;
+  /** Set this to `true` if the user has an ArcGIS Online organizational account and the organization is configured to allow access to resources only through SSL. */
+  ssl?: boolean;
+  /** The access token. */
+  token: string;
+  /** The id of the user who owns the access token. */
+  userId?: string;
+}
+
+export interface IdentityManagerGenerateTokenOptions extends AbortOptions {
+  /** The server URL. */
+  serverUrl?: string;
+  /** Indicates if the server requires SSL. */
+  ssl?: boolean;
+  /** The server token. */
+  token?: string;
+}