@arcgis/portal-components 5.2.0-next.99 → 6.0.0-next.0

package/dist/components/arcgis-portal-account-switcher/customElement.d.ts

@@ -2,6 +2,7 @@
 import type Portal from "@arcgis/core/portal/Portal.js";
 import type { PublicLitElement as LitElement } from "@arcgis/lumina";
 import type { LinkedAccount } from "../../types/user.js";
+import type { SignoutEventDetails } from "./types.js";
 import type { T9nMeta } from "@arcgis/lumina/controllers";
 
 /** Renders an account selection dialog and emits an account switching event. */
@@ -19,6 +20,13 @@ export abstract class ArcgisPortalAccountSwitcher extends LitElement {
       usersList: string;
       linkedAccountSignedIn: string;
       signedIn: string;
+      signedOut: string;
+      signingOut: string;
+      signedOutHeader: string;
+      closeWindow: string;
+      stillSignedIn: string;
+      clickToSwitch: string;
+      signOutAll: string;
       emptyListTitle: string;
       emptyList: string;
       maxAccounts: string;
@@ -33,13 +41,19 @@ export abstract class ArcgisPortalAccountSwitcher extends LitElement {
       userDisabled: string;
       userNotAllowed: string;
       unlink: string;
-      unlinkTitle: string;
       unlinkWarning: string;
       linkTitle: string;
       linkWarning: string;
       linkAll: string;
       alertLabel: string;
       cancel: string;
+      arcgisProvider: string;
+      githubProvider: string;
+      appleProvider: string;
+      googleProvider: string;
+      facebookProvider: string;
+      samlProvider: string;
+      oidcProvider: string;
       errors: {
           linkAccount: string;
           accessAccount: string;
@@ -67,6 +81,13 @@ export abstract class ArcgisPortalAccountSwitcher extends LitElement {
       usersList: string;
       linkedAccountSignedIn: string;
       signedIn: string;
+      signedOut: string;
+      signingOut: string;
+      signedOutHeader: string;
+      closeWindow: string;
+      stillSignedIn: string;
+      clickToSwitch: string;
+      signOutAll: string;
       emptyListTitle: string;
       emptyList: string;
       maxAccounts: string;
@@ -81,13 +102,19 @@ export abstract class ArcgisPortalAccountSwitcher extends LitElement {
       userDisabled: string;
       userNotAllowed: string;
       unlink: string;
-      unlinkTitle: string;
       unlinkWarning: string;
       linkTitle: string;
       linkWarning: string;
       linkAll: string;
       alertLabel: string;
       cancel: string;
+      arcgisProvider: string;
+      githubProvider: string;
+      appleProvider: string;
+      googleProvider: string;
+      facebookProvider: string;
+      samlProvider: string;
+      oidcProvider: string;
       errors: {
           linkAccount: string;
           accessAccount: string;
@@ -108,12 +135,22 @@ export abstract class ArcgisPortalAccountSwitcher extends LitElement {
   }>;
   /** Portal object */
   accessor portal: Portal;
+  accessor redirectUri: string | undefined;
+  /** @default false */
+  accessor signout: boolean;
+  accessor signoutOptions: {
+      redirectToClientUri?: boolean;
+      displaySignoutComplete?: boolean;
+  };
   /** Emitted when the user chooses a different account. */
   readonly arcgisAccountSwitch: import("@arcgis/lumina").TargetedEvent<this, { account: LinkedAccount; }>;
   /** Emitted when the user closes the account switcher. */
   readonly arcgisClose: import("@arcgis/lumina").TargetedEvent<this, void>;
+  /** Emitted when the signout(s) have completed */
+  readonly arcgisSignoutComplete: import("@arcgis/lumina").TargetedEvent<this, SignoutEventDetails>;
   readonly "@eventTypes": {
     arcgisAccountSwitch: ArcgisPortalAccountSwitcher["arcgisAccountSwitch"]["detail"];
     arcgisClose: ArcgisPortalAccountSwitcher["arcgisClose"]["detail"];
+    arcgisSignoutComplete: ArcgisPortalAccountSwitcher["arcgisSignoutComplete"]["detail"];
   };
 }

package/dist/components/arcgis-portal-account-switcher/customElement.js

@@ -1,120 +1,125 @@
 /* COPYRIGHT Esri - https://js.arcgis.com/5.2/LICENSE.txt */
-import { c as L } from "../../chunks/runtime.js";
-import { keyed as _ } from "lit/directives/keyed.js";
-import { LitElement as O, createEvent as b, nothing as v } from "@arcgis/lumina";
-import { html as d, svg as x } from "lit";
-import { s as C } from "../../chunks/portal-account-switcher.js";
-import { g as T, a as M, l as K, u as N } from "../../chunks/user.js";
-import g from "@arcgis/core/identity/IdentityManager.js";
-import { t as E } from "../../chunks/functionalities.js";
-import { u as P } from "../../chunks/useT9n.js";
-import { m as W } from "../../chunks/icons.js";
-import { substitute as m } from "@arcgis/core/intl.js";
-import { g as H } from "../../chunks/services.js";
-const w = 1260 * 1e3;
-function S(n, e = "_blank", s = 582, t = 670) {
-  const i = window.screenLeft ?? 0, o = window.screenTop ?? 0, r = window.innerWidth || document.documentElement.clientWidth || window.screen.width, a = window.innerHeight || document.documentElement.clientHeight || window.screen.height, c = r / 2 - s / 2 + i, l = a / 2 - t / 2 + o, u = window.open(n, e, `scrollbars=no, width=${s}, height=${t}, top=${l}, left=${c}`);
+import { c as C } from "../../chunks/runtime.js";
+import { keyed as v } from "lit/directives/keyed.js";
+import { LitElement as x, createEvent as U, safeClassMap as T, nothing as M } from "@arcgis/lumina";
+import { html as d, svg as K } from "lit";
+import { s as N } from "../../chunks/portal-account-switcher.js";
+import { g as E, a as H, l as P, u as W } from "../../chunks/user.js";
+import p from "@arcgis/core/identity/IdentityManager.js";
+import { t as B } from "../../chunks/functionalities.js";
+import { u as R } from "../../chunks/useT9n.js";
+import { m as J } from "../../chunks/icons.js";
+import { substitute as k } from "@arcgis/core/intl.js";
+import { g as D } from "../../chunks/services.js";
+const b = 1260 * 1e3, j = 2500;
+function _(r, e = "_blank", s = 582, t = 670) {
+  const i = window.screenLeft ?? 0, n = window.screenTop ?? 0, a = window.innerWidth || document.documentElement.clientWidth || window.screen.width, o = window.innerHeight || document.documentElement.clientHeight || window.screen.height, c = a / 2 - s / 2 + i, l = o / 2 - t / 2 + n, u = window.open(r, e, `scrollbars=no, width=${s}, height=${t}, top=${l}, left=${c}`);
   return u?.focus(), u;
 }
-function R(n, e) {
-  const s = g.findOAuthInfo(n.url), { appId: t, locale: i = "en", expiration: o = w } = s ?? {}, r = new URLSearchParams({
-    locale: i,
-    client_id: e ?? t ?? "arcgisonline",
+function q(r) {
+  const e = p.findOAuthInfo(r.url), { locale: s = "en", expiration: t = b } = e ?? {}, i = new URLSearchParams({
+    locale: s,
+    // Linking accounts ALWAYS uses the "arcgisonline" client id
+    client_id: "arcgisonline",
     response_type: "token",
-    expiration: `${o}`,
+    expiration: `${t}`,
     linkUserRequest: "true",
     showSocialLogins: "true",
     hideEnterpriseLogins: "false",
     force_login: "true",
     parent: window.location.origin,
-    redirect_uri: `https://${n.portalHostname}/home/link_account_callback.html`,
+    redirect_uri: `https://${r.portalHostname}/home/link_account_callback.html`,
     state: JSON.stringify({ useMessage: !0 })
-  }), a = `https://${n.portalHostname}/sharing/oauth2/authorize?${r.toString()}`;
-  S(a);
+  }), n = `https://${r.portalHostname}/sharing/oauth2/authorize?${i.toString()}`;
+  _(n);
 }
-function B(n) {
+function S(r) {
   const {
     config: e,
-    credential: s,
+    token: s,
     clientId: t = "arcgisonline",
     redirectToClientUri: i = !1,
-    displaySignoutComplete: o = !1
-  } = n, r = new URLSearchParams({
+    displaySignoutComplete: n = !1,
+    clientUri: a
+  } = r, o = new URLSearchParams({
     display: "iframe",
     client_id: t,
-    ...s.token && { token: s.token },
+    ...s && { token: s },
     parent: window.location.origin,
-    redirect_uri: `${e.baseUrl}signout_callback.html`,
+    redirect_uri: `${e.baseUrl}/home/check_sign_in_status.html`,
     state: JSON.stringify({
       signout: !0,
       origin: window.location.origin,
+      accountOrigin: `${e.restBaseUrl}/`,
       redirectToClientUri: i,
-      displaySignoutComplete: o
+      displaySignoutComplete: n,
+      ...a && { redirectUri: a }
     })
-  }), a = `${e.restBaseUrl}oauth2/signout?${r.toString()}`, c = document.createElement("iframe");
-  c.src = a, c.style.display = "none", document.body.appendChild(c);
+  }), c = `${e.restBaseUrl}/oauth2/signout?${o.toString()}`, l = document.createElement("iframe");
+  l.src = c, l.style.display = "none", document.body.appendChild(l);
 }
-function J(n, e, s) {
-  const t = h(n.orgUrlKey, e), i = g.findOAuthInfo(t), { appId: o, locale: r = "en", expiration: a = w } = i ?? {}, c = $(n.provider), l = new URLSearchParams({
-    locale: r,
-    client_id: s ?? o ?? "arcgisonline",
+function z(r, e, s) {
+  const t = h(r.orgUrlKey, e), i = p.findOAuthInfo(t), { appId: n, locale: a = "en", expiration: o = b } = i ?? {}, c = I(r.provider), l = new URLSearchParams({
+    locale: a,
+    client_id: s ?? n ?? "arcgisonline",
     response_type: "token",
-    expiration: `${a}`,
+    expiration: `${o}`,
     parent: window.location.origin,
-    ...c === "social" && { socialLoginProviderName: n.provider },
-    ...c === "default" && { prepopulatedusername: n.username },
+    ...c === "social" && { socialLoginProviderName: r.provider },
+    ...c === "default" && { prepopulatedusername: r.username },
     force_login: "true",
     redirect_uri: `${t}/home/sign_in_callback.html`,
     state: JSON.stringify({
-      user: n.username,
+      user: r.username,
       server: t,
       portalUrl: t,
       origin: window.location.origin
     })
-  }), u = `${A(n, e)}?${l.toString()}`;
-  S(u);
+  }), u = `${O(r, e)}?${l.toString()}`;
+  _(u);
 }
-function D({
-  accounts: n,
+function F({
+  accounts: r,
   clientId: e = "arcgisonline",
   usersToFilter: s = [],
   accountsToFilter: t = ""
 }) {
   const i = {};
-  return n.reduce((o, r) => {
-    const a = {
-      disabled: r.disabled ?? !1,
-      allowed: r.clientAppAccessAllowed ?? !0
+  return r.reduce((n, a) => {
+    const o = {
+      disabled: a.disabled ?? !1,
+      allowed: a.clientAppAccessAllowed ?? !0
     };
-    return o[r.username] = a, (s.includes(r.username) || s.includes(r.username.toLowerCase()) || t === "org" && r.orgUrlKey || e === "esriapps" && r.userType !== "both") && (a.allowed = !1), o;
+    return n[a.username] = o, (s.includes(a.username) || s.includes(a.username.toLowerCase()) || t === "org" && a.orgUrlKey || e === "esriapps" && a.userType !== "both") && (o.allowed = !1), n;
   }, i), i;
 }
-function j({
-  account: n,
+function G({
+  account: r,
   credential: e,
-  client_id: s,
-  portal: t
+  clientId: s,
+  portal: t,
+  redirectUri: i
 }) {
-  const i = $(n.provider), o = A(n, t), r = I(n, t), a = new URLSearchParams({
+  const n = I(r.provider), a = O(r, t), o = i || L(r, t), c = new URLSearchParams({
     client_id: s,
-    redirect_uri: r,
+    redirect_uri: o,
     parent: window.location.origin,
     response_type: "token",
     force_login: "false",
     ...e.userId && { prepopulatedusername: e.userId },
-    ...i === "social" && { socialLoginProviderName: n.provider },
-    expiration: `${(e?.expires ?? Date.now() + w) - Date.now()}`
+    ...n === "social" && { socialLoginProviderName: r.provider },
+    expiration: `${(e?.expires ?? Date.now() + b) - Date.now()}`
   });
-  return `${o}?${a.toString()}`;
+  return `${a}?${c.toString()}`;
 }
-function $(n) {
-  return q(n) ? "social" : n === "enterprise" ? "enterprise" : n.includes("oidc") ? "oidc" : "default";
+function I(r) {
+  return Q(r) ? "social" : r === "enterprise" ? "enterprise" : r.includes("oidc") ? "oidc" : "default";
 }
-function q(n) {
-  return ["apple", "facebook", "github", "google"].includes(n);
+function Q(r) {
+  return ["apple", "facebook", "github", "google"].includes(r);
 }
-function A(n, e) {
-  const s = h(n.orgUrlKey, e).toLowerCase(), t = $(n.provider);
+function O(r, e) {
+  const s = h(r.orgUrlKey, e).toLowerCase(), t = I(r.provider);
   let i = "";
   switch (t) {
     case "social":
@@ -124,55 +129,75 @@ function A(n, e) {
       i = "saml/";
       break;
     case "oidc":
-      i = `oidc/${n.provider.split("_")[1]}/`;
+      i = `oidc/${r.provider.split("_")[1]}/`;
       break;
   }
   return `${s}/sharing/rest/oauth2/${i}authorize`;
 }
-function h(n, e) {
-  return n?.startsWith("https://") ? n : n && e.customBaseUrl ? `https://${n}.${e.customBaseUrl}` : `https://${e.portalHostname}`;
-}
-function I(n, e) {
-  return `${h(n.orgUrlKey, e)}/home/accountswitcher-callback.html`;
+function h(r, e) {
+  return r?.startsWith("https://") ? r : r && e.customBaseUrl ? `https://${r}.${e.customBaseUrl}` : `https://${e.portalHostname}`;
 }
-function z({
-  origin: n,
-  redirectToClientUri: e,
-  displaySignoutComplete: s
-}) {
-  console.log("Signout complete", n, e, s);
+function L(r, e) {
+  return `${h(r.orgUrlKey, e)}/home/accountswitcher-callback.html`;
 }
-function F(n, e) {
-  return g.findCredential(h(n.orgUrlKey, e), n.username);
+function V(r, e) {
+  return p.findCredential(h(r.orgUrlKey, e), r.username);
 }
-function G(n, e) {
-  const s = F(n, e);
+function X(r, e) {
+  const s = V(r, e);
   if (s)
     return s;
-  const t = h(n.orgUrlKey, e), i = `${t}/home/check_sign_in_status.html#state=${JSON.stringify({
+  const t = h(r.orgUrlKey, e), i = `${t}/home/check_sign_in_status.html#state=${JSON.stringify({
     origin: window.location.origin,
     server: t,
     orgKey: t
   })}`;
-  Q(i, `iframe__for-${t}`);
+  Y(i, `iframe__for-${t}`);
 }
-function Q(n, e) {
+function Y(r, e) {
   const s = document.createElement("iframe");
-  s.src = n, s.id = e, s.style.display = "none", document.body.appendChild(s);
+  s.src = r, s.id = e, s.style.display = "none", document.body.appendChild(s);
 }
-const k = 100;
-class V extends O {
+const y = 100;
+class Z extends x {
   constructor() {
-    super(), this.messages = P({ blocking: !0 }), this.targetUser = "", this.targetToken = "", this.accountAccess = {}, this.linkedAccounts = [], this.loading = !1, this.signedInStatus = {}, this.showAssociatedAccountsWarning = !1, this.clientId = "arcgisonline", this.arcgisAccountSwitch = b(), this.arcgisClose = b(), this.listenOn(window, "message", this.handleMessageEvent);
+    super(), this.messages = R({ blocking: !0 }), this.targetUser = "", this.targetToken = "", this.accountAccess = {}, this.remainingSignouts = 0, this.signoutHandle = 0, this.linkedAccounts = [], this.loading = !1, this.signedInStatus = {}, this.showAssociatedAccountsWarning = !1, this.signedInAccounts = [], this.clientId = "arcgisonline", this.signout = !1, this.signoutOptions = {
+      redirectToClientUri: !1,
+      displaySignoutComplete: !1
+    }, this.arcgisAccountSwitch = U(), this.arcgisClose = U(), this.arcgisSignoutComplete = U(), this.listenOn(window, "message", this.handleMessageEvent);
   }
   static {
-    this.properties = { linkedAccounts: 16, userAccounts: 16, user: 16, credential: 16, alertOptions: 16, loading: 16, signedInStatus: 16, showAssociatedAccountsWarning: 16, portal: 0, clientId: 1 };
+    this.properties = { linkedAccounts: 16, userAccounts: 16, user: 16, credential: 16, alertOptions: 16, loading: 16, signedInStatus: 16, showAssociatedAccountsWarning: 16, signedInAccounts: 16, portal: 0, clientId: 1, redirectUri: 1, signout: 5, signoutOptions: 0 };
   }
   static {
-    this.styles = C;
+    this.styles = N;
   }
   willUpdate(e) {
-    e.has("portal") && (this.user = this.portal?.user), (e.has("portal") || e.has("user")) && this.portal && this.user && this.findLinkedUsers();
+    if (e.has("portal") && (this.user = this.portal?.user), (e.has("portal") || e.has("user")) && this.portal && this.user) {
+      this.findLinkedUsers();
+      return;
+    }
+    if (e.has("linkedAccounts") || e.has("signedInStatus")) {
+      if (this.signout) {
+        const { signedInStatus: s, linkedAccounts: t, portal: i, signoutOptions: n, clientId: a, user: o, redirectUri: c } = this, l = Object.keys(s).filter((A) => s[A] !== null).map((A) => t.find(($) => $.username === A));
+        this.remainingSignouts = l.length + 1;
+        const u = h(i.urlKey ?? "", i), m = `${u}/sharing/rest`;
+        let { displaySignoutComplete: g = !0, redirectToClientUri: f = !0 } = n;
+        l.length > 0 && (g = !1, f = !1), this.loading = !0;
+        const w = p.findCredential(u, o?.id || o?.username);
+        S({
+          displaySignoutComplete: g,
+          redirectToClientUri: f,
+          clientId: a,
+          config: { baseUrl: u, restBaseUrl: m },
+          token: w?.token,
+          clientUri: f ? c : void 0
+        }), this.signoutHandle = window.setTimeout(() => {
+          this.remainingSignouts -= 1, this.finishSignout({ accountOrigin: u, redirectToClientUri: f, displaySignoutComplete: g });
+        }, j);
+      }
+      return;
+    }
   }
   handleMessageEvent(e) {
     if (new URL(e.origin).hostname !== "localhost" && (e.origin.endsWith(".arcgis.com") || e.origin === window.location.origin)) {
@@ -203,61 +228,61 @@ class V extends O {
     }
   }
   handleSignoutMessage(e) {
-    const { error: s, signout: t, accountOrigin: i, redirectToClientUri: o, displaySignoutComplete: r } = e.data;
-    if (s && s !== "unknown") {
+    const { error: s, signout: t, accountOrigin: i, redirectToClientUri: n, displaySignoutComplete: a } = e.data;
+    if (this.remainingSignouts -= 1, s && s !== "unknown") {
       console.error(s), this.showAlert("danger", this.messages.errors.signout);
       return;
     }
-    t && (this.user = void 0, this.credential = void 0, z({ origin: i, redirectToClientUri: o, displaySignoutComplete: r }));
+    t && (this.user = void 0, this.credential = void 0, this.finishSignout({ accountOrigin: i, redirectToClientUri: n, displaySignoutComplete: a }));
   }
   handleSigninMessage(e) {
-    const { messages: s, clientId: t } = this, { error: i, status: o, state: r, access_token: a, ssl: c } = e.data;
+    const { messages: s, clientId: t } = this, { error: i, status: n, state: a, access_token: o, ssl: c } = e.data;
     if (i) {
       console.error(i), this.showAlert("danger", s.errors.signin);
       return;
     }
-    if (o === "success") {
-      const { portal: l, user: u } = this, p = this.linkedAccounts.find((y) => y.username === r.user);
-      p?.orgUrlKey === this.portal.urlKey && g.findCredential(`https://${l.portalHostname}`, u?.username)?.destroy();
+    if (n === "success") {
+      const { portal: l, user: u, redirectUri: m } = this, g = this.linkedAccounts.find(($) => $.username === a.user);
+      g?.orgUrlKey === this.portal.urlKey && p.findCredential(`https://${l.portalHostname}`, u?.username)?.destroy();
       const f = {
-        server: r.portalUrl,
-        userId: r.user,
-        token: a,
+        server: a.portalUrl,
+        userId: a.user,
+        token: o,
         expires: Number(e.data.expires_in) + Date.now(),
         ssl: c === void 0 || c !== "false"
       };
-      g.registerToken(f);
-      const U = j({
-        account: p,
+      p.registerToken(f);
+      const w = G({
+        account: g,
         credential: f,
-        // eslint-disable-next-line @typescript-eslint/naming-convention
-        client_id: t,
-        portal: l
+        clientId: t,
+        portal: l,
+        redirectUri: m
       });
-      window.self !== window.top ? window.top?.postMessage({ type: "navigate", url: U }) : window.location.href = U;
+      window.self !== window.top ? window.top?.postMessage({ type: "navigate", url: w }) : window.location.href = w;
     }
   }
   handleCheckSignInStatusMessage(e) {
-    const { success: s, orgKey: t, server: i, userId: o, token: r, expires: a, ssl: c } = e.data;
-    t && i && s && o && r && a && c !== void 0 && (this.signedInStatus[o] = { token: r, expires: a, ssl: c });
+    const { success: s, orgKey: t, server: i, userId: n, token: a, expires: o, ssl: c } = e.data;
+    t && i && s && n && a && o && c !== void 0 && (this.signedInStatus[n] = { token: a, expires: o, ssl: c });
   }
   async handleLinkUserMessage(e) {
-    const { error: s, username: t, access_token: i } = e.data, { portal: o, user: r, linkedAccounts: a, messages: c } = this;
+    const { error: s, username: t, access_token: i } = e.data, { portal: n, user: a, linkedAccounts: o, messages: c } = this;
     if (s) {
       if (s.toString().toLowerCase().includes("user denied your request"))
         return;
       this.showAlert("danger", c.errors.accessAccount);
       return;
     }
-    if (t === r?.username) {
+    if (t === a?.username) {
       this.showAlert("danger", c.errors.selfLink);
       return;
     }
-    if (a.find((u) => u.username === t)) {
-      this.showAlert("danger", m(c.errors.alreadyLinked, { username: t }));
+    if (o.find((u) => u.username === t)) {
+      this.showAlert("danger", k(c.errors.alreadyLinked, { username: t }));
       return;
     }
-    const l = await T(o, t, i);
+    const l = await E(n, t, i);
     if (l?.length) {
       this.userAccounts = l, this.targetUser = t ?? "", this.targetToken = i ?? "", this.showAssociatedAccountsWarning = !0;
       return;
@@ -270,56 +295,66 @@ class V extends O {
       if (s.error)
         console.error(s);
       else if (s.status === "success" && this.targetUser) {
-        const { portal: t, linkedAccounts: i, targetUser: o, clientId: r } = this, a = i.find((f) => f.username === o);
-        if (!a)
+        const { portal: t, linkedAccounts: i, targetUser: n, clientId: a } = this, o = i.find((g) => g.username === n);
+        if (!o)
           return;
-        const c = I(a, t), l = h(a.orgUrlKey, t), u = new URLSearchParams({
+        const c = L(o, t), l = h(o.orgUrlKey, t), u = new URLSearchParams({
           // eslint-disable-next-line @typescript-eslint/naming-convention
           response_type: "token",
           // eslint-disable-next-line @typescript-eslint/naming-convention
-          client_id: r,
+          client_id: a,
           // eslint-disable-next-line @typescript-eslint/naming-convention
           redirect_uri: c,
-          state: JSON.stringify({ user: a.username, portalUrl: l })
-        }), p = `${A(a, t)}?${u.toString()}`;
-        window.opener ? (window.opener.location.href = p, window.close()) : window.location.href = p;
+          state: JSON.stringify({ user: o.username, portalUrl: l })
+        }), m = `${O(o, t)}?${u.toString()}`;
+        window.opener ? (window.opener.location.href = m, window.close()) : window.location.href = m;
       }
     }
   }
+  finishSignout({ accountOrigin: e, redirectToClientUri: s, displaySignoutComplete: t }) {
+    this.signoutHandle && window.clearTimeout(this.signoutHandle), e === window.location.origin && p.destroyCredentials(), console.info("Signout complete", e, s, t), this.remainingSignouts <= 0 && this.arcgisSignoutComplete.emit({ accountOrigin: e, redirectToClientUri: s, displaySignoutComplete: t });
+  }
   async findLinkedUsers() {
     if (this.loading = !0, !this.portal || !this.user) {
       this.linkedAccounts = [], this.loading = !1;
       return;
     }
-    this.linkedAccounts = await M(this.portal, this.user), this.linkedAccounts.length && (this.signedInStatus = this.linkedAccounts.filter((e) => e.orgUrlKey !== this.portal.urlKey).reduce((e, s) => (e[s.username] = G(s, this.portal) ?? null, e), {}), this.accountAccess = D({ accounts: this.linkedAccounts, clientId: this.clientId })), this.loading = !1;
+    this.linkedAccounts = await H(this.portal, this.user), this.linkedAccounts.length && (this.signedInStatus = this.linkedAccounts.filter((e) => e.orgUrlKey !== this.portal.urlKey).reduce((e, s) => (e[s.username] = X(s, this.portal) ?? null, e), {}), this.accountAccess = F({ accounts: this.linkedAccounts, clientId: this.clientId })), this.loading = !1;
   }
   async linkAccount(e, s) {
     const { portal: t, user: i } = this;
     if (!t || !i)
       return;
-    const o = await K({ portal: t, user: i, targetUser: e, targetToken: s }), { messages: r } = this;
-    if (o.error) {
-      this.showAlert("danger", m(r.errors.linkAccount, { username: e })), this.targetUser = "", this.userAccounts = [];
+    const n = await P({ portal: t, user: i, targetUser: e, targetToken: s }), { messages: a } = this;
+    if (n.error) {
+      this.showAlert("danger", k(a.errors.linkAccount, { username: e })), this.targetUser = "", this.userAccounts = [];
       return;
     }
-    const a = this.userAccounts?.length ? r.success.linkAccountMultiple : r.success.linkAccount;
-    this.showAlert("success", m(a, { username: e })), this.targetUser = "", this.userAccounts = [], await E(350), this.findLinkedUsers();
+    const o = this.userAccounts?.length ? a.success.linkAccountMultiple : a.success.linkAccount;
+    this.showAlert("success", k(o, { username: e })), this.targetUser = "", this.userAccounts = [], await B(350), this.findLinkedUsers();
   }
   async unlinkAccount(e) {
     if (!this.portal || !this.user)
       return;
-    const { messages: s, portal: t, user: i } = this, { success: o } = await N({ portal: t, user: i, linkedUsername: e.username });
-    o ? this.showAlert("success", m(s.success.unlinkAccount, { username: e.username })) : this.showAlert("danger", m(s.errors.unlinkAccount, { username: e.username })), await this.findLinkedUsers();
+    const { messages: s, portal: t, user: i } = this, { success: n } = await W({ portal: t, user: i, linkedUsername: e.username });
+    n ? this.showAlert("success", k(s.success.unlinkAccount, { username: e.username })) : this.showAlert("danger", k(s.errors.unlinkAccount, { username: e.username })), await this.findLinkedUsers();
   }
   startAccountLink() {
-    R(this.portal, this.clientId);
+    q(this.portal);
   }
   switchAccount(e) {
     const { portal: s, user: t, clientId: i } = this;
     if (!s || !t || !e)
       return;
-    const o = h(t.sourceJSON.orgUrlKey ?? "", s), r = g.findCredential(o, t.id || t.username);
-    r && B({ config: { baseUrl: o, restBaseUrl: `${o}/sharing/rest` }, credential: r, clientId: i }), J(e, s, i);
+    const n = h(t.sourceJSON.orgUrlKey ?? "", s), a = p.findCredential(n, t.id || t.username);
+    a && S({ config: { baseUrl: n, restBaseUrl: `${n}/sharing/rest` }, token: a?.token, clientId: i }), z(e, s, i);
+  }
+  signoutAll(e) {
+    const { portal: s, signedInStatus: t, clientId: i } = this;
+    e.forEach((n) => {
+      const a = h(n.orgUrlKey, s), o = `${a}/sharing/rest`, c = t[n.username];
+      S({ config: { baseUrl: a, restBaseUrl: o }, token: c?.token, clientId: i });
+    });
   }
   showAlert(e, s, t) {
     this.alertOptions = {
@@ -333,7 +368,7 @@ class V extends O {
     this.alertOptions = {
       kind: "danger",
       icon: "exclamation-mark-triangle-f",
-      title: s.unlinkTitle,
+      title: s.unlinkAccount,
       message: s.unlinkWarning,
       actions: [
         {
@@ -347,23 +382,33 @@ class V extends O {
     };
   }
   render() {
-    const { linkedAccounts: e, accountAccess: s, user: t, portal: i, messages: o } = this;
-    return !i || !t ? null : d`<calcite-dialog .heading=${o.switchAccounts} scale=m width=s open modal .loading=${this.loading} outside-close-disabled @calciteDialogClose=${() => {
+    const { linkedAccounts: e, accountAccess: s, user: t, portal: i, messages: n, signout: a } = this;
+    if (!i || !t)
+      return null;
+    if (a) {
+      const { signedInAccounts: o } = this;
+      return o.length === 0 ? d`<calcite-loader .label=${n.signingOut} .text=${n.signingOut}></calcite-loader>` : d`<arcgis-portal-account-switcher-signout .portal=${i} .signedInAccounts=${o} @arcgisSwitchAccount=${(c) => {
+        this.switchAccount(c.detail.account);
+      }} @arcgisSignOutAll=${() => {
+        this.signoutAll(o);
+      }}></arcgis-portal-account-switcher-signout>`;
+    }
+    return d`<calcite-dialog .heading=${n.switchAccounts} heading-level=2 scale=m width=s open modal .loading=${this.loading} outside-close-disabled @calciteDialogClose=${() => {
       this.arcgisClose.emit();
-    }}><calcite-block .heading=${o.currentAccount} .description=${o.signedInAs} expanded class="current-account-block" tabindex=-1>${_(t.id ?? t.username, d`<calcite-block class="current-account" .label=${i.urlKey ? `${t.username}, ${i.name}` : t.username} heading-level=4 .heading=${t.username} .description=${i.urlKey ? `${t.fullName ?? t.username}, ${i.name}` : t.fullName ?? t.username}><calcite-avatar slot=content-start inert .fullName=${t.fullName ?? void 0} .username=${t.username} .userId=${t.id} .thumbnail=${H(t, i) ?? void 0}></calcite-avatar></calcite-block>`)}</calcite-block>${e.length > 0 ? d`<calcite-block .heading=${o.linkedAccounts} .description=${o.linkedAccountActions} expanded class="linked-accounts-block"><calcite-button slot=content-end icon-start=plus class="link-account-button" @click=${() => this.startAccountLink()} .disabled=${e.length >= k}>${o.addAccount}</calcite-button><arcgis-portal-account-switcher-list .portal=${i} .linkedAccounts=${e} .accountAccess=${s} .signedInUsers=${Object.keys(this.signedInStatus).filter((r) => this.signedInStatus[r] !== null)} interactive @arcgisAccountSwitch=${(r) => {
-      this.switchAccount(r.detail.account);
-    }} @arcgisAccountUnlink=${(r) => {
-      this.showUnlinkConfirmation(r.detail.account);
-    }}></arcgis-portal-account-switcher-list></calcite-block>` : d`<calcite-block .heading=${o.linkedAccounts} expanded class="empty-accounts-block"><div class="empty-accounts-info"><svg class="empty-accounts-icon" width=48 height=48 viewBox="0 0 48 48" fill=none xmlns=http://www.w3.org/2000/svg>${x`<path d=${W.couple ?? v} fill=currentColor />`}</svg><h4>${o.emptyListTitle}</h4><p>${o.emptyList}</p><calcite-button icon-start=plus class="link-account-button" @click=${() => this.startAccountLink()} .disabled=${e.length >= k}>${o.linkAccount}</calcite-button></div></calcite-block>`}<calcite-notice kind=info .open=${e.length >= k}><div slot=message>${o.maxAccounts}</div></calcite-notice><calcite-alert .label=${o.alertLabel} slot=alerts .autoClose=${this.alertOptions?.kind !== "danger"} auto-close-duration=fast placement=bottom .kind=${this.alertOptions?.kind} .icon=${this.alertOptions?.icon} .open=${!!this.alertOptions} @calciteAlertClose=${() => {
+    }}><calcite-block .heading=${n.currentAccount} heading-level=3 .description=${n.signedInAs} expanded class="current-account-block" tabindex=-1>${v(t.id ?? t.username, d`<calcite-block class="current-account" .label=${i.urlKey ? `${t.username}, ${i.name}` : t.username} heading-level=4 .heading=${t.username} .description=${i.urlKey ? `${t.fullName ?? t.username}, ${i.name}` : t.fullName ?? t.username}><calcite-avatar slot=content-start inert .fullName=${t.fullName ?? void 0} .username=${t.username} .userId=${t.id} .thumbnail=${D(t, i) ?? void 0}></calcite-avatar></calcite-block>`)}</calcite-block>${e.length > 0 ? d`<calcite-block .heading=${n.linkedAccounts} heading-level=3 .description=${n.linkedAccountActions} expanded class="linked-accounts-block"><calcite-button slot=content-end icon-start=plus class="link-account-button" @click=${() => this.startAccountLink()} .disabled=${e.length >= y}>${n.addAccount}</calcite-button><arcgis-portal-account-switcher-list .portal=${i} .linkedAccounts=${e} .accountAccess=${s} .signedInUsers=${Object.keys(this.signedInStatus).filter((o) => this.signedInStatus[o] !== null)} interactive @arcgisAccountSwitch=${(o) => {
+      this.switchAccount(o.detail.account);
+    }} @arcgisAccountUnlink=${(o) => {
+      this.showUnlinkConfirmation(o.detail.account);
+    }}></arcgis-portal-account-switcher-list></calcite-block>` : d`<calcite-block .heading=${n.linkedAccounts} heading-level=3 expanded class="empty-accounts-block"><div class="empty-accounts-info"><svg class="empty-accounts-icon" width=48 height=48 viewBox="0 0 48 48" fill=none xmlns=http://www.w3.org/2000/svg>${K`<path d=${J.couple ?? M} fill=currentColor />`}</svg><h4>${n.emptyListTitle}</h4><p>${n.emptyList}</p><calcite-button icon-start=plus class="link-account-button" @click=${() => this.startAccountLink()} .disabled=${e.length >= y}>${n.linkAccount}</calcite-button></div></calcite-block>`}<calcite-notice kind=info .open=${e.length >= y}><div slot=message>${n.maxAccounts}</div></calcite-notice><calcite-alert .label=${n.alertLabel} slot=alerts .autoClose=${this.alertOptions?.kind !== "danger"} auto-close-duration=fast placement=bottom .kind=${this.alertOptions?.kind} .icon=${this.alertOptions?.icon} .open=${!!this.alertOptions} @calciteAlertClose=${() => {
       this.alertOptions = void 0;
-    }}>${this.alertOptions?.title && d`<h4 slot=title class="alert-title">${this.alertOptions.title}</h4>` || ""}${this.alertOptions?.message && d`<p slot=message class="alert-message">${this.alertOptions.message}</p>` || ""}${this.alertOptions?.actions?.map((r) => d`<calcite-button slot=actions-end .kind=${r.kind} .appearance=${r.appearance} @click=${r.clickHandler}>${r.text}</calcite-button>`)}</calcite-alert></calcite-dialog>${this.showAssociatedAccountsWarning && d`<arcgis-portal-account-switcher-accounts .portal=${i} .targetUser=${this.targetUser} .accounts=${this.userAccounts ?? []} @arcgisLinkAll=${() => {
+    }}>${this.alertOptions?.title && d`<h4 slot=title class="alert-title">${this.alertOptions.title}</h4>` || ""}${this.alertOptions?.message && d`<p slot=message class=${T({ "alert-message": !0, "short-message": !!this.alertOptions?.actions?.length })}>${this.alertOptions.message}</p>` || ""}${this.alertOptions?.actions?.map((o) => d`<calcite-button slot=actions-end .kind=${o.kind} .appearance=${o.appearance} @click=${o.clickHandler}>${o.text}</calcite-button>`)}</calcite-alert></calcite-dialog>${this.showAssociatedAccountsWarning && d`<arcgis-portal-account-switcher-accounts .portal=${i} .targetUser=${this.targetUser} .accounts=${this.userAccounts ?? []} @arcgisLinkAll=${() => {
       this.linkAccount(this.targetUser, this.targetToken);
     }} @arcgisCloseDialog=${() => {
       this.showAssociatedAccountsWarning = !1;
     }}></arcgis-portal-account-switcher-accounts>` || ""}`;
   }
 }
-L("arcgis-portal-account-switcher", V);
+C("arcgis-portal-account-switcher", Z);
 export {
-  V as ArcgisPortalAccountSwitcher
+  Z as ArcgisPortalAccountSwitcher
 };

package/dist/components/arcgis-portal-account-switcher/index.js

@@ -1,3 +1,5 @@
+import "@esri/calcite-components/components/calcite-loader";
+import "../arcgis-portal-account-switcher-signout/index.js";
 import "@esri/calcite-components/components/calcite-dialog";
 import "@esri/calcite-components/components/calcite-block";
 import "@esri/calcite-components/components/calcite-avatar";