@arcgis/portal-components 5.2.0-next.85 → 5.2.0-next.87

package/dist/components/arcgis-portal-account-switcher/customElement.js

@@ -1,284 +1,288 @@
 /* COPYRIGHT Esri - https://js.arcgis.com/5.2/LICENSE.txt */
 import { c as L } from "../../chunks/runtime.js";
-import { LitElement as _, createEvent as y, nothing as O } from "@arcgis/lumina";
-import { html as d, svg as I } from "lit";
-import { s as x } from "../../chunks/portal-account-switcher.js";
-import { g as C, a as v, l as T, u as M } from "../../chunks/user.js";
-import p from "@arcgis/core/identity/IdentityManager.js";
+import { keyed as _ } from "lit/directives/keyed.js";
+import { LitElement as O, createEvent as b, nothing as v } from "@arcgis/lumina";
+import { html as d, svg as x } from "lit";
+import { s as C } from "../../chunks/portal-account-switcher.js";
+import { g as T, a as M, l as K, u as N } from "../../chunks/user.js";
+import g from "@arcgis/core/identity/IdentityManager.js";
 import { t as E } from "../../chunks/functionalities.js";
-import { u as K } from "../../chunks/useT9n.js";
-import { m as P } from "../../chunks/icons.js";
-import { substitute as g } from "@arcgis/core/intl.js";
+import { u as P } from "../../chunks/useT9n.js";
+import { m as W } from "../../chunks/icons.js";
+import { substitute as m } from "@arcgis/core/intl.js";
+import { g as H } from "../../chunks/services.js";
 const w = 1260 * 1e3;
-function S(i, t = "_blank", e = 582, s = 670) {
-  const n = window.screenLeft ?? 0, r = window.screenTop ?? 0, o = window.innerWidth || document.documentElement.clientWidth || window.screen.width, a = window.innerHeight || document.documentElement.clientHeight || window.screen.height, c = o / 2 - e / 2 + n, u = a / 2 - s / 2 + r, l = window.open(i, t, `scrollbars=no, width=${e}, height=${s}, top=${u}, left=${c}`);
-  return l?.focus(), l;
+function S(n, e = "_blank", s = 582, t = 670) {
+  const i = window.screenLeft ?? 0, o = window.screenTop ?? 0, r = window.innerWidth || document.documentElement.clientWidth || window.screen.width, a = window.innerHeight || document.documentElement.clientHeight || window.screen.height, c = r / 2 - s / 2 + i, l = a / 2 - t / 2 + o, u = window.open(n, e, `scrollbars=no, width=${s}, height=${t}, top=${l}, left=${c}`);
+  return u?.focus(), u;
 }
-function W(i) {
-  const t = p.findOAuthInfo(i.url), {
-    /* appId = "arcgisonline", */
-    locale: e = "en",
-    expiration: s = w
-  } = t ?? {}, n = new URLSearchParams({
-    locale: e,
-    client_id: "arcgisonline",
-    //appId!,
+function R(n, e) {
+  const s = g.findOAuthInfo(n.url), { appId: t, locale: i = "en", expiration: o = w } = s ?? {}, r = new URLSearchParams({
+    locale: i,
+    client_id: e ?? t ?? "arcgisonline",
     response_type: "token",
-    expiration: `${s}`,
+    expiration: `${o}`,
     linkUserRequest: "true",
     showSocialLogins: "true",
     hideEnterpriseLogins: "false",
     force_login: "true",
     parent: window.location.origin,
-    redirect_uri: `https://${i.portalHostname}/home/link_account_callback.html`,
+    redirect_uri: `https://${n.portalHostname}/home/link_account_callback.html`,
     state: JSON.stringify({ useMessage: !0 })
-  }), r = `https://${i.portalHostname}/sharing/oauth2/authorize?${n.toString()}`;
-  S(r);
+  }), a = `https://${n.portalHostname}/sharing/oauth2/authorize?${r.toString()}`;
+  S(a);
 }
-function N(i) {
+function B(n) {
   const {
-    config: t,
-    credential: e,
-    clientId: s = "arcgisonline",
-    redirectToClientUri: n = !1,
-    displaySignoutComplete: r = !1
-  } = i, o = new URLSearchParams({
+    config: e,
+    credential: s,
+    clientId: t = "arcgisonline",
+    redirectToClientUri: i = !1,
+    displaySignoutComplete: o = !1
+  } = n, r = new URLSearchParams({
     display: "iframe",
-    client_id: s,
-    ...e.token && { token: e.token },
+    client_id: t,
+    ...s.token && { token: s.token },
     parent: window.location.origin,
-    redirect_uri: `${t.baseUrl}signout_callback.html`,
+    redirect_uri: `${e.baseUrl}signout_callback.html`,
     state: JSON.stringify({
       signout: !0,
       origin: window.location.origin,
-      redirectToClientUri: n,
-      displaySignoutComplete: r
+      redirectToClientUri: i,
+      displaySignoutComplete: o
     })
-  }), a = `${t.restBaseUrl}oauth2/signout?${o.toString()}`, c = document.createElement("iframe");
+  }), a = `${e.restBaseUrl}oauth2/signout?${r.toString()}`, c = document.createElement("iframe");
   c.src = a, c.style.display = "none", document.body.appendChild(c);
 }
-function H(i, t) {
-  const e = h(i.orgUrlKey, t), s = p.findOAuthInfo(e), {
-    /* appId = "arcgisonline", */
-    locale: n = "en",
-    expiration: r = w
-  } = s ?? {}, o = $(i.provider), a = new URLSearchParams({
-    locale: n,
-    client_id: "arcgisonline",
-    //appId,
+function J(n, e, s) {
+  const t = h(n.orgUrlKey, e), i = g.findOAuthInfo(t), { appId: o, locale: r = "en", expiration: a = w } = i ?? {}, c = $(n.provider), l = new URLSearchParams({
+    locale: r,
+    client_id: s ?? o ?? "arcgisonline",
     response_type: "token",
-    expiration: `${r}`,
+    expiration: `${a}`,
     parent: window.location.origin,
-    ...o === "social" && { socialLoginProviderName: i.provider },
-    ...o === "default" && { prepopulatedusername: i.username },
+    ...c === "social" && { socialLoginProviderName: n.provider },
+    ...c === "default" && { prepopulatedusername: n.username },
     force_login: "true",
-    redirect_uri: `${e}/home/sign_in_callback.html`,
+    redirect_uri: `${t}/home/sign_in_callback.html`,
     state: JSON.stringify({
-      user: i.username,
-      server: e,
-      portalUrl: e,
+      user: n.username,
+      server: t,
+      portalUrl: t,
       origin: window.location.origin
     })
-  }), c = `${A(i, t)}?${a.toString()}`;
-  S(c);
+  }), u = `${A(n, e)}?${l.toString()}`;
+  S(u);
+}
+function D({
+  accounts: n,
+  clientId: e = "arcgisonline",
+  usersToFilter: s = [],
+  accountsToFilter: t = ""
+}) {
+  const i = {};
+  return n.reduce((o, r) => {
+    const a = {
+      disabled: r.disabled ?? !1,
+      allowed: r.clientAppAccessAllowed ?? !0
+    };
+    return o[r.username] = a, (s.includes(r.username) || s.includes(r.username.toLowerCase()) || t === "org" && r.orgUrlKey || e === "esriapps" && r.userType !== "both") && (a.allowed = !1), o;
+  }, i), i;
 }
-function B({
-  account: i,
-  credential: t,
-  //client_id,
-  portal: e
+function j({
+  account: n,
+  credential: e,
+  client_id: s,
+  portal: t
 }) {
-  const s = $(i.provider), n = A(i, e), r = b(i, e), o = new URLSearchParams({
-    client_id: "arcgisonline",
+  const i = $(n.provider), o = A(n, t), r = I(n, t), a = new URLSearchParams({
+    client_id: s,
     redirect_uri: r,
     parent: window.location.origin,
     response_type: "token",
     force_login: "false",
-    ...t.userId && { prepopulatedusername: t.userId },
-    ...s === "social" && { socialLoginProviderName: i.provider },
-    expiration: `${(t?.expires ?? Date.now() + w) - Date.now()}`
+    ...e.userId && { prepopulatedusername: e.userId },
+    ...i === "social" && { socialLoginProviderName: n.provider },
+    expiration: `${(e?.expires ?? Date.now() + w) - Date.now()}`
   });
-  return `${n}?${o.toString()}`;
+  return `${o}?${a.toString()}`;
 }
-function $(i) {
-  return J(i) ? "social" : i === "enterprise" ? "enterprise" : i.includes("oidc") ? "oidc" : "default";
+function $(n) {
+  return q(n) ? "social" : n === "enterprise" ? "enterprise" : n.includes("oidc") ? "oidc" : "default";
 }
-function J(i) {
-  return ["apple", "facebook", "github", "google"].includes(i);
+function q(n) {
+  return ["apple", "facebook", "github", "google"].includes(n);
 }
-function A(i, t) {
-  const e = h(i.orgUrlKey, t).toLowerCase(), s = $(i.provider);
-  let n = "";
-  switch (s) {
+function A(n, e) {
+  const s = h(n.orgUrlKey, e).toLowerCase(), t = $(n.provider);
+  let i = "";
+  switch (t) {
     case "social":
-      n = "social/";
+      i = "social/";
       break;
     case "enterprise":
-      n = "saml/";
+      i = "saml/";
       break;
     case "oidc":
-      n = `oidc/${i.provider.split("_")[1]}/`;
+      i = `oidc/${n.provider.split("_")[1]}/`;
       break;
   }
-  return `${e}/sharing/rest/oauth2/${n}authorize`;
+  return `${s}/sharing/rest/oauth2/${i}authorize`;
 }
-function h(i, t) {
-  return i?.startsWith("https://") ? i : i && t.customBaseUrl ? `https://${i}.${t.customBaseUrl}` : `https://${t.portalHostname}`;
+function h(n, e) {
+  return n?.startsWith("https://") ? n : n && e.customBaseUrl ? `https://${n}.${e.customBaseUrl}` : `https://${e.portalHostname}`;
 }
-function b(i, t) {
-  return `${h(i.orgUrlKey, t)}/home/accountswitcher-callback.html`;
+function I(n, e) {
+  return `${h(n.orgUrlKey, e)}/home/accountswitcher-callback.html`;
 }
-function R({
-  origin: i,
-  redirectToClientUri: t,
-  displaySignoutComplete: e
+function z({
+  origin: n,
+  redirectToClientUri: e,
+  displaySignoutComplete: s
 }) {
-  console.log("Signout complete", i, t, e);
+  console.log("Signout complete", n, e, s);
 }
-function D(i, t) {
-  return p.findCredential(h(i.orgUrlKey, t), i.username);
+function F(n, e) {
+  return g.findCredential(h(n.orgUrlKey, e), n.username);
 }
-function j(i, t) {
-  const e = D(i, t);
-  if (e)
-    return e;
-  const s = h(i.orgUrlKey, t), n = `${s}/home/check_sign_in_status.html#state=${JSON.stringify({
+function G(n, e) {
+  const s = F(n, e);
+  if (s)
+    return s;
+  const t = h(n.orgUrlKey, e), i = `${t}/home/check_sign_in_status.html#state=${JSON.stringify({
     origin: window.location.origin,
-    server: s,
-    orgKey: s
+    server: t,
+    orgKey: t
   })}`;
-  q(n, `iframe__for-${s}`);
+  Q(i, `iframe__for-${t}`);
 }
-function q(i, t) {
-  const e = document.createElement("iframe");
-  e.src = i, e.id = t, e.style.display = "none", document.body.appendChild(e);
+function Q(n, e) {
+  const s = document.createElement("iframe");
+  s.src = n, s.id = e, s.style.display = "none", document.body.appendChild(s);
 }
 const k = 100;
-class z extends _ {
+class V extends O {
   constructor() {
-    super(), this.messages = K({ blocking: !0 }), this.clientId = "arcgisonline", this.targetUser = "", this.targetToken = "", this.linkedAccounts = [], this.loading = !1, this.signedInStatus = {}, this.showAssociatedAccountsWarning = !1, this.arcgisAccountSwitch = y(), this.arcgisClose = y(), this.listenOn(window, "message", this.handleMessageEvent);
+    super(), this.messages = P({ blocking: !0 }), this.targetUser = "", this.targetToken = "", this.accountAccess = {}, this.linkedAccounts = [], this.loading = !1, this.signedInStatus = {}, this.showAssociatedAccountsWarning = !1, this.clientId = "arcgisonline", this.arcgisAccountSwitch = b(), this.arcgisClose = b(), this.listenOn(window, "message", this.handleMessageEvent);
   }
   static {
-    this.properties = { linkedAccounts: 16, userAccounts: 16, user: 16, credential: 16, alertOptions: 16, loading: 16, signedInStatus: 16, showAssociatedAccountsWarning: 16, portal: 0 };
+    this.properties = { linkedAccounts: 16, userAccounts: 16, user: 16, credential: 16, alertOptions: 16, loading: 16, signedInStatus: 16, showAssociatedAccountsWarning: 16, portal: 0, clientId: 1 };
   }
   static {
-    this.styles = x;
+    this.styles = C;
   }
-  willUpdate(t) {
-    t.has("portal") && (this.user = this.portal?.user), (t.has("portal") || t.has("user")) && this.portal && this.user && this.findLinkedUsers();
+  willUpdate(e) {
+    e.has("portal") && (this.user = this.portal?.user), (e.has("portal") || e.has("user")) && this.portal && this.user && this.findLinkedUsers();
   }
-  handleMessageEvent(t) {
-    if (new URL(t.origin).hostname !== "localhost" && (t.origin.endsWith(".arcgis.com") || t.origin === window.location.origin)) {
-      if (typeof t.data == "string") {
-        JSON.parse(t.data).type === "token_exchange" && this.handleExchangeTokenMessage(t);
+  handleMessageEvent(e) {
+    if (new URL(e.origin).hostname !== "localhost" && (e.origin.endsWith(".arcgis.com") || e.origin === window.location.origin)) {
+      if (typeof e.data == "string") {
+        JSON.parse(e.data).type === "token_exchange" && this.handleExchangeTokenMessage(e);
         return;
       }
-      if ("type" in t.data)
-        switch (t.data.type) {
+      if ("type" in e.data)
+        switch (e.data.type) {
           case "signin":
-            this.handleSigninMessage(t);
+            this.handleSigninMessage(e);
             return;
           case "signout":
-            this.handleSignoutMessage(t);
+            this.handleSignoutMessage(e);
             return;
           case "linkUser":
-            this.handleLinkUserMessage(t);
+            this.handleLinkUserMessage(e);
             return;
           case "token_exchange":
-            this.handleExchangeTokenMessage(t);
+            this.handleExchangeTokenMessage(e);
             return;
         }
-      if ("credential" in t.data) {
-        this.handleSigninMessage(t);
+      if ("credential" in e.data) {
+        this.handleSigninMessage(e);
         return;
       }
-      this.handleCheckSignInStatusMessage(t);
+      this.handleCheckSignInStatusMessage(e);
     }
   }
-  handleSignoutMessage(t) {
-    const { error: e, signout: s, accountOrigin: n, redirectToClientUri: r, displaySignoutComplete: o } = t.data;
-    if (e && e !== "unknown") {
-      console.error(e), this.showAlert("danger", this.messages.errors.signout);
+  handleSignoutMessage(e) {
+    const { error: s, signout: t, accountOrigin: i, redirectToClientUri: o, displaySignoutComplete: r } = e.data;
+    if (s && s !== "unknown") {
+      console.error(s), this.showAlert("danger", this.messages.errors.signout);
       return;
     }
-    s && (this.user = void 0, this.credential = void 0, R({ origin: n, redirectToClientUri: r, displaySignoutComplete: o }));
+    t && (this.user = void 0, this.credential = void 0, z({ origin: i, redirectToClientUri: o, displaySignoutComplete: r }));
   }
-  handleSigninMessage(t) {
-    const { messages: e } = this, { error: s, status: n, state: r, access_token: o, ssl: a } = t.data;
-    if (s) {
-      console.error(s), this.showAlert("danger", e.errors.signin);
+  handleSigninMessage(e) {
+    const { messages: s, clientId: t } = this, { error: i, status: o, state: r, access_token: a, ssl: c } = e.data;
+    if (i) {
+      console.error(i), this.showAlert("danger", s.errors.signin);
       return;
     }
-    if (n === "success") {
-      const {
-        portal: c,
-        user: u
-        /* , clientId */
-      } = this, l = this.linkedAccounts.find((U) => U.username === r.user);
-      l?.orgUrlKey === this.portal.urlKey && p.findCredential(`https://${c.portalHostname}`, u?.username)?.destroy();
-      const m = {
+    if (o === "success") {
+      const { portal: l, user: u } = this, p = this.linkedAccounts.find((y) => y.username === r.user);
+      p?.orgUrlKey === this.portal.urlKey && g.findCredential(`https://${l.portalHostname}`, u?.username)?.destroy();
+      const f = {
         server: r.portalUrl,
         userId: r.user,
-        token: o,
-        expires: Number(t.data.expires_in) + Date.now(),
-        ssl: a === void 0 || a !== "false"
+        token: a,
+        expires: Number(e.data.expires_in) + Date.now(),
+        ssl: c === void 0 || c !== "false"
       };
-      p.registerToken(m);
-      const f = B({
-        account: l,
-        credential: m,
-        /* client_id: clientId, */
-        portal: c
+      g.registerToken(f);
+      const U = j({
+        account: p,
+        credential: f,
+        // eslint-disable-next-line @typescript-eslint/naming-convention
+        client_id: t,
+        portal: l
       });
-      window.self !== window.top ? window.top?.postMessage({ type: "navigate", url: f }) : window.location.href = f;
+      window.self !== window.top ? window.top?.postMessage({ type: "navigate", url: U }) : window.location.href = U;
     }
   }
-  handleCheckSignInStatusMessage(t) {
-    const { success: e, orgKey: s, server: n, userId: r, token: o, expires: a, ssl: c } = t.data;
-    s && n && e && r && o && a && c !== void 0 && (this.signedInStatus[r] = { token: o, expires: a, ssl: c });
+  handleCheckSignInStatusMessage(e) {
+    const { success: s, orgKey: t, server: i, userId: o, token: r, expires: a, ssl: c } = e.data;
+    t && i && s && o && r && a && c !== void 0 && (this.signedInStatus[o] = { token: r, expires: a, ssl: c });
   }
-  async handleLinkUserMessage(t) {
-    const { error: e, username: s, access_token: n } = t.data, { portal: r, user: o, linkedAccounts: a, messages: c } = this;
-    if (e) {
-      if (e.toString().toLowerCase().includes("user denied your request"))
+  async handleLinkUserMessage(e) {
+    const { error: s, username: t, access_token: i } = e.data, { portal: o, user: r, linkedAccounts: a, messages: c } = this;
+    if (s) {
+      if (s.toString().toLowerCase().includes("user denied your request"))
         return;
       this.showAlert("danger", c.errors.accessAccount);
       return;
     }
-    if (s === o?.username) {
+    if (t === r?.username) {
       this.showAlert("danger", c.errors.selfLink);
       return;
     }
-    if (a.find((l) => l.username === s)) {
-      this.showAlert("danger", g(c.errors.alreadyLinked, { username: s }));
+    if (a.find((u) => u.username === t)) {
+      this.showAlert("danger", m(c.errors.alreadyLinked, { username: t }));
       return;
     }
-    const u = await C(r, s, n);
-    if (u?.length) {
-      this.userAccounts = u, this.targetUser = s ?? "", this.targetToken = n ?? "", this.showAssociatedAccountsWarning = !0;
+    const l = await T(o, t, i);
+    if (l?.length) {
+      this.userAccounts = l, this.targetUser = t ?? "", this.targetToken = i ?? "", this.showAssociatedAccountsWarning = !0;
       return;
     }
-    this.linkAccount(s, n);
+    this.linkAccount(t, i);
   }
-  handleExchangeTokenMessage(t) {
-    const e = typeof t.data == "string" ? JSON.parse(t.data) : t.data;
-    if (!(e.type && e.type !== "token_exchange")) {
-      if (e.error)
-        console.error(e);
-      else if (e.status === "success" && this.targetUser) {
-        const { portal: s, linkedAccounts: n, targetUser: r, clientId: o } = this, a = n.find((f) => f.username === r);
+  handleExchangeTokenMessage(e) {
+    const s = typeof e.data == "string" ? JSON.parse(e.data) : e.data;
+    if (!(s.type && s.type !== "token_exchange")) {
+      if (s.error)
+        console.error(s);
+      else if (s.status === "success" && this.targetUser) {
+        const { portal: t, linkedAccounts: i, targetUser: o, clientId: r } = this, a = i.find((f) => f.username === o);
         if (!a)
           return;
-        const c = b(a, s), u = h(a.orgUrlKey, s), l = new URLSearchParams({
+        const c = I(a, t), l = h(a.orgUrlKey, t), u = new URLSearchParams({
           // eslint-disable-next-line @typescript-eslint/naming-convention
           response_type: "token",
           // eslint-disable-next-line @typescript-eslint/naming-convention
-          client_id: o,
+          client_id: r,
           // eslint-disable-next-line @typescript-eslint/naming-convention
           redirect_uri: c,
-          state: JSON.stringify({ user: a.username, portalUrl: u })
-        }), m = `${A(a, s)}?${l.toString()}`;
-        window.opener ? (window.opener.location.href = m, window.close()) : window.location.href = m;
+          state: JSON.stringify({ user: a.username, portalUrl: l })
+        }), p = `${A(a, t)}?${u.toString()}`;
+        window.opener ? (window.opener.location.href = p, window.close()) : window.location.href = p;
       }
     }
   }
@@ -287,79 +291,79 @@ class z extends _ {
       this.linkedAccounts = [], this.loading = !1;
       return;
     }
-    this.linkedAccounts = await v(this.portal, this.user), this.linkedAccounts.length && (this.signedInStatus = this.linkedAccounts.filter((t) => t.orgUrlKey !== this.portal.urlKey).reduce((t, e) => (t[e.username] = j(e, this.portal) ?? null, t), {})), this.loading = !1;
+    this.linkedAccounts = await M(this.portal, this.user), this.linkedAccounts.length && (this.signedInStatus = this.linkedAccounts.filter((e) => e.orgUrlKey !== this.portal.urlKey).reduce((e, s) => (e[s.username] = G(s, this.portal) ?? null, e), {}), this.accountAccess = D({ accounts: this.linkedAccounts, clientId: this.clientId })), this.loading = !1;
   }
-  async linkAccount(t, e) {
-    const { portal: s, user: n } = this;
-    if (!s || !n)
+  async linkAccount(e, s) {
+    const { portal: t, user: i } = this;
+    if (!t || !i)
       return;
-    const r = await T({ portal: s, user: n, targetUser: t, targetToken: e }), { messages: o } = this;
-    if (r.error) {
-      this.showAlert("danger", g(o.errors.linkAccount, { username: t })), this.targetUser = "", this.userAccounts = [];
+    const o = await K({ portal: t, user: i, targetUser: e, targetToken: s }), { messages: r } = this;
+    if (o.error) {
+      this.showAlert("danger", m(r.errors.linkAccount, { username: e })), this.targetUser = "", this.userAccounts = [];
       return;
     }
-    const a = this.userAccounts?.length ? o.success.linkAccountMultiple : o.success.linkAccount;
-    this.showAlert("success", g(a, { username: t })), this.targetUser = "", this.userAccounts = [], await E(350), this.findLinkedUsers();
+    const a = this.userAccounts?.length ? r.success.linkAccountMultiple : r.success.linkAccount;
+    this.showAlert("success", m(a, { username: e })), this.targetUser = "", this.userAccounts = [], await E(350), this.findLinkedUsers();
   }
-  async unlinkAccount(t) {
+  async unlinkAccount(e) {
     if (!this.portal || !this.user)
       return;
-    const { messages: e, portal: s, user: n } = this, { success: r } = await M({ portal: s, user: n, linkedUsername: t.username });
-    r ? this.showAlert("success", g(e.success.unlinkAccount, { username: t.username })) : this.showAlert("danger", g(e.errors.unlinkAccount, { username: t.username })), await this.findLinkedUsers();
+    const { messages: s, portal: t, user: i } = this, { success: o } = await N({ portal: t, user: i, linkedUsername: e.username });
+    o ? this.showAlert("success", m(s.success.unlinkAccount, { username: e.username })) : this.showAlert("danger", m(s.errors.unlinkAccount, { username: e.username })), await this.findLinkedUsers();
   }
   startAccountLink() {
-    W(this.portal);
+    R(this.portal, this.clientId);
   }
-  switchAccount(t) {
-    const { portal: e, user: s, clientId: n } = this;
-    if (!e || !s || !t)
+  switchAccount(e) {
+    const { portal: s, user: t, clientId: i } = this;
+    if (!s || !t || !e)
       return;
-    const r = h(s.sourceJSON.orgUrlKey ?? "", e), o = p.findCredential(r, s.id || s.username);
-    o && N({ config: { baseUrl: r, restBaseUrl: `${r}/sharing/rest` }, credential: o, clientId: n }), H(t, e);
+    const o = h(t.sourceJSON.orgUrlKey ?? "", s), r = g.findCredential(o, t.id || t.username);
+    r && B({ config: { baseUrl: o, restBaseUrl: `${o}/sharing/rest` }, credential: r, clientId: i }), J(e, s, i);
   }
-  showAlert(t, e, s) {
+  showAlert(e, s, t) {
     this.alertOptions = {
-      kind: t,
-      title: s,
-      message: e
+      kind: e,
+      title: t,
+      message: s
     };
   }
-  showUnlinkConfirmation(t) {
-    const { messages: e } = this;
+  showUnlinkConfirmation(e) {
+    const { messages: s } = this;
     this.alertOptions = {
       kind: "danger",
       icon: "exclamation-mark-triangle-f",
-      title: e.unlinkTitle,
-      message: e.unlinkWarning,
+      title: s.unlinkTitle,
+      message: s.unlinkWarning,
       actions: [
         {
-          text: e.unlink,
+          text: s.unlink,
           kind: "danger",
           clickHandler: () => {
-            this.alertOptions = void 0, this.unlinkAccount(t);
+            this.alertOptions = void 0, this.unlinkAccount(e);
           }
         }
       ]
     };
   }
   render() {
-    const { linkedAccounts: t, user: e, portal: s, messages: n } = this;
-    return !s || !e ? null : d`<calcite-dialog .heading=${n.switchAccounts} scale=m width=s open modal .loading=${this.loading} outside-close-disabled @calciteDialogClose=${() => {
+    const { linkedAccounts: e, accountAccess: s, user: t, portal: i, messages: o } = this;
+    return !i || !t ? null : d`<calcite-dialog .heading=${o.switchAccounts} scale=m width=s open modal .loading=${this.loading} outside-close-disabled @calciteDialogClose=${() => {
       this.arcgisClose.emit();
-    }}><calcite-block .heading=${n.currentAccount} expanded class="current-account-block"><calcite-list .label=${g(n.currentAccountLabel, { username: e.username })} interaction-mode=static selection-mode=none class="current-account-list"><calcite-list-item><arcgis-portal-user-avatar .user=${e} .portal=${s} show-name .heading=${e.username} .description=${s.name || ""} slot=content-start></arcgis-portal-user-avatar></calcite-list-item></calcite-list></calcite-block>${t.length > 0 ? d`<calcite-block .heading=${n.chooseAccount} expanded class="linked-accounts-block"><calcite-button slot=content-end icon-start=plus class="link-account-button" @click=${() => this.startAccountLink()} .disabled=${t.length >= k}>${n.linkAccount}</calcite-button><arcgis-portal-account-switcher-list .portal=${s} .linkedAccounts=${t} .signedInUsers=${Object.keys(this.signedInStatus).filter((r) => this.signedInStatus[r] !== null)} .label=${n.usersList} interactive @arcgisAccountSwitch=${(r) => {
+    }}><calcite-block .heading=${o.currentAccount} .description=${o.signedInAs} expanded class="current-account-block" tabindex=-1>${_(t.id ?? t.username, d`<calcite-block class="current-account" .label=${i.urlKey ? `${t.username}, ${i.name}` : t.username} heading-level=4 .heading=${t.username} .description=${i.urlKey ? `${t.fullName ?? t.username}, ${i.name}` : t.fullName ?? t.username}><calcite-avatar slot=content-start inert .fullName=${t.fullName ?? void 0} .username=${t.username} .userId=${t.id} .thumbnail=${H(t, i) ?? void 0}></calcite-avatar></calcite-block>`)}</calcite-block>${e.length > 0 ? d`<calcite-block .heading=${o.linkedAccounts} .description=${o.linkedAccountActions} expanded class="linked-accounts-block"><calcite-button slot=content-end icon-start=plus class="link-account-button" @click=${() => this.startAccountLink()} .disabled=${e.length >= k}>${o.addAccount}</calcite-button><arcgis-portal-account-switcher-list .portal=${i} .linkedAccounts=${e} .accountAccess=${s} .signedInUsers=${Object.keys(this.signedInStatus).filter((r) => this.signedInStatus[r] !== null)} interactive @arcgisAccountSwitch=${(r) => {
       this.switchAccount(r.detail.account);
     }} @arcgisAccountUnlink=${(r) => {
       this.showUnlinkConfirmation(r.detail.account);
-    }}></arcgis-portal-account-switcher-list></calcite-block>` : d`<calcite-block .heading=${n.chooseAccount} expanded class="empty-accounts-block"><div class="empty-accounts-info"><svg class="empty-accounts-icon" width=48 height=48 viewBox="0 0 48 48" fill=none xmlns=http://www.w3.org/2000/svg>${I`<path d=${P.couple ?? O} fill=currentColor />`}</svg><h4>${n.emptyListTitle}</h4><p>${n.emptyList}</p><calcite-button icon-start=plus class="link-account-button" @click=${() => this.startAccountLink()} .disabled=${t.length >= k}>${n.linkAccount}</calcite-button></div></calcite-block>`}<calcite-notice kind=info .open=${t.length >= k}><div slot=message>${n.maxAccounts}</div></calcite-notice><calcite-alert .label=${n.alertLabel} slot=alerts .autoClose=${this.alertOptions?.kind !== "danger"} auto-close-duration=fast placement=bottom .kind=${this.alertOptions?.kind} .icon=${this.alertOptions?.icon} .open=${!!this.alertOptions} @calciteAlertClose=${() => {
+    }}></arcgis-portal-account-switcher-list></calcite-block>` : d`<calcite-block .heading=${o.linkedAccounts} expanded class="empty-accounts-block"><div class="empty-accounts-info"><svg class="empty-accounts-icon" width=48 height=48 viewBox="0 0 48 48" fill=none xmlns=http://www.w3.org/2000/svg>${x`<path d=${W.couple ?? v} fill=currentColor />`}</svg><h4>${o.emptyListTitle}</h4><p>${o.emptyList}</p><calcite-button icon-start=plus class="link-account-button" @click=${() => this.startAccountLink()} .disabled=${e.length >= k}>${o.linkAccount}</calcite-button></div></calcite-block>`}<calcite-notice kind=info .open=${e.length >= k}><div slot=message>${o.maxAccounts}</div></calcite-notice><calcite-alert .label=${o.alertLabel} slot=alerts .autoClose=${this.alertOptions?.kind !== "danger"} auto-close-duration=fast placement=bottom .kind=${this.alertOptions?.kind} .icon=${this.alertOptions?.icon} .open=${!!this.alertOptions} @calciteAlertClose=${() => {
       this.alertOptions = void 0;
-    }}>${this.alertOptions?.title && d`<h4 slot=title class="alert-title">${this.alertOptions.title}</h4>` || ""}${this.alertOptions?.message && d`<p slot=message class="alert-message">${this.alertOptions.message}</p>` || ""}${this.alertOptions?.actions?.map((r) => d`<calcite-button slot=actions-end .kind=${r.kind} .appearance=${r.appearance} @click=${r.clickHandler}>${r.text}</calcite-button>`)}</calcite-alert></calcite-dialog>${this.showAssociatedAccountsWarning && d`<arcgis-portal-account-switcher-accounts .portal=${s} .targetUser=${this.targetUser} .accounts=${this.userAccounts ?? []} @arcgisLinkAll=${() => {
+    }}>${this.alertOptions?.title && d`<h4 slot=title class="alert-title">${this.alertOptions.title}</h4>` || ""}${this.alertOptions?.message && d`<p slot=message class="alert-message">${this.alertOptions.message}</p>` || ""}${this.alertOptions?.actions?.map((r) => d`<calcite-button slot=actions-end .kind=${r.kind} .appearance=${r.appearance} @click=${r.clickHandler}>${r.text}</calcite-button>`)}</calcite-alert></calcite-dialog>${this.showAssociatedAccountsWarning && d`<arcgis-portal-account-switcher-accounts .portal=${i} .targetUser=${this.targetUser} .accounts=${this.userAccounts ?? []} @arcgisLinkAll=${() => {
       this.linkAccount(this.targetUser, this.targetToken);
     }} @arcgisCloseDialog=${() => {
       this.showAssociatedAccountsWarning = !1;
     }}></arcgis-portal-account-switcher-accounts>` || ""}`;
   }
 }
-L("arcgis-portal-account-switcher", z);
+L("arcgis-portal-account-switcher", V);
 export {
-  z as ArcgisPortalAccountSwitcher
+  V as ArcgisPortalAccountSwitcher
 };

package/dist/components/arcgis-portal-account-switcher/index.js

@@ -1,8 +1,6 @@
 import "@esri/calcite-components/components/calcite-dialog";
 import "@esri/calcite-components/components/calcite-block";
-import "@esri/calcite-components/components/calcite-list";
-import "@esri/calcite-components/components/calcite-list-item";
-import "../arcgis-portal-user-avatar/index.js";
+import "@esri/calcite-components/components/calcite-avatar";
 import "@esri/calcite-components/components/calcite-button";
 import "../arcgis-portal-account-switcher-list/index.js";
 import "@esri/calcite-components/components/calcite-notice";

package/dist/components/arcgis-portal-account-switcher/types.d.ts

@@ -0,0 +1,6 @@
+export type AccountAccess = Record<string, AccountStatus>;
+
+export interface AccountStatus {
+  disabled: boolean;
+  allowed: boolean;
+}