@ascentgl/ads-identity 0.0.2

package/README.md

@@ -0,0 +1,3 @@
+# ads-identity
+
+This library was generated with [Nx](https://nx.dev).

package/fesm2022/ascentgl-ads-identity.mjs

@@ -0,0 +1,312 @@
+import { HttpErrorResponse, HttpClient, provideHttpClient, withInterceptors } from '@angular/common/http';
+import { throwError, of, catchError, map, switchMap } from 'rxjs';
+import * as i0 from '@angular/core';
+import { InjectionToken, inject, Injectable, Injector } from '@angular/core';
+import { jwtDecode, InvalidTokenError } from 'jwt-decode';
+import { Router } from '@angular/router';
+
+class LogHelper {
+    static { this.prefix = 'ADS-IDENTITY:'; }
+    static log(...args) {
+        if (this.options?.debugMode)
+            console.log(...args);
+    }
+    static warn(...args) {
+        if (this.options?.debugMode)
+            console.warn(...args);
+    }
+    static groupStart(...data) {
+        if (this.options?.debugMode)
+            console.group(this.prefix, ...data);
+    }
+    static groupEnd() {
+        if (this.options?.debugMode)
+            console.groupEnd();
+    }
+    static error(...args) {
+        if (this.options?.debugMode)
+            console.error(...args);
+    }
+}
+
+class ErrorHelper {
+    static { this.throw = (error) => {
+        return throwError(() => {
+            LogHelper.groupEnd();
+            return error;
+        });
+    }; }
+    static extractMessage(error) {
+        if (typeof error === 'string') {
+            return error;
+        }
+        let errorMessage;
+        if (error instanceof HttpErrorResponse) {
+            errorMessage = error.error?.message ?? error.message;
+        }
+        if (!errorMessage &&
+            typeof error === 'object' &&
+            typeof error['message'] === 'string') {
+            errorMessage = error['message'];
+        }
+        return errorMessage && typeof errorMessage === 'string'
+            ? errorMessage
+            : 'Unknown server error';
+    }
+}
+
+class TokenHelper {
+    static getPayload(token, verifyClaims = {}, threshold = 0) {
+        const payload = jwtDecode(token);
+        if (this.isExpired(payload, 'exp', threshold)) {
+            throw new InvalidTokenError('Token expired');
+        }
+        Object.keys(verifyClaims).forEach((claim) => {
+            const tokenClaimValue = payload[claim];
+            const requestedClaimValue = verifyClaims[claim];
+            if (tokenClaimValue !== requestedClaimValue) {
+                throw new InvalidTokenError(`Invalid "${claim}" claim value "${tokenClaimValue}" provided in token. Required value is "${requestedClaimValue}"`);
+            }
+        });
+        return payload;
+    }
+    static isExpired(token, column = 'exp', threshold = 0) {
+        const throwInvalidColumnError = (column) => {
+            throw new InvalidTokenError(`Column ${column} does not contain a valid number`);
+        };
+        try {
+            let timestamp = token[column];
+            if (typeof timestamp === 'number') {
+                if (threshold) {
+                    timestamp -= threshold;
+                }
+                return !!timestamp && timestamp * 1000 < new Date().getTime();
+            }
+            throwInvalidColumnError(column.toString());
+            return true;
+        }
+        catch (error) {
+            LogHelper.error(new InvalidTokenError(ErrorHelper.extractMessage(error)));
+            return true;
+        }
+    }
+}
+
+const IDENTITY_OPTIONS = new InjectionToken('IDENTITY_OPTIONS');
+
+class TokenService {
+    constructor() {
+        this.accessToken = null;
+        this.refreshToken = null;
+        this.options = inject(IDENTITY_OPTIONS);
+    }
+    setAccessToken(token) {
+        return this.accessToken = this.setToken("IDMS_AccessToken", token);
+    }
+    setRefreshToken(token) {
+        return this.refreshToken = this.setToken("IDMS_RefreshToken", token);
+    }
+    getAccessToken() {
+        return this.accessToken = this.getToken("IDMS_AccessToken", this.accessToken?.token);
+    }
+    getRefreshToken() {
+        return this.refreshToken = this.getToken("IDMS_RefreshToken", this.refreshToken?.token);
+    }
+    setToken(key, token) {
+        if (typeof token !== 'string') {
+            throw new InvalidTokenError(`Provided ${key} value is not a string`);
+        }
+        const identityToken = this.wrapToken(key, token, true);
+        if (identityToken) {
+            localStorage.setItem(key, token);
+        }
+        return identityToken;
+    }
+    getToken(key, token) {
+        const actualToken = token ?? localStorage.getItem(key) ?? null;
+        if (typeof actualToken === 'string') {
+            return this.wrapToken(key, actualToken, false);
+        }
+        LogHelper.log(key, 'not provided and not found in Local Storage');
+        return null;
+    }
+    wrapToken(key, token, throwError) {
+        try {
+            const payload = TokenHelper.getPayload(token, {
+                iss: this.options.backendUrl + '/api',
+                sub: this.options.application
+            }, 10);
+            const identityToken = { token, payload: payload };
+            LogHelper.log(key, identityToken);
+            return identityToken;
+        }
+        catch (error) {
+            if (throwError) {
+                throw error;
+            }
+            LogHelper.error(error);
+            return null;
+        }
+    }
+    static { this.ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "19.2.2", ngImport: i0, type: TokenService, deps: [], target: i0.ɵɵFactoryTarget.Injectable }); }
+    static { this.ɵprov = i0.ɵɵngDeclareInjectable({ minVersion: "12.0.0", version: "19.2.2", ngImport: i0, type: TokenService, providedIn: 'root' }); }
+}
+i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "19.2.2", ngImport: i0, type: TokenService, decorators: [{
+            type: Injectable,
+            args: [{ providedIn: 'root' }]
+        }] });
+
+class IdentityService {
+    constructor() {
+        this.tokenService = inject(TokenService);
+        this.httpClient = inject(HttpClient);
+        this.options = inject(IDENTITY_OPTIONS);
+    }
+    isAuthenticated(caller) {
+        LogHelper.groupStart(`Verifying access token for ${caller}`);
+        const accessToken = this.tokenService.getAccessToken();
+        if (accessToken) {
+            LogHelper.groupEnd();
+            return of(accessToken);
+        }
+        LogHelper.groupEnd();
+        LogHelper.groupStart(`Getting refresh token for ${caller}`);
+        if (this.tokenService.getRefreshToken()) {
+            LogHelper.groupEnd();
+            return this.refreshTokens(caller);
+        }
+        return ErrorHelper.throw(new InvalidTokenError('No valid tokens found'));
+    }
+    refreshTokens(caller) {
+        LogHelper.groupStart(`Refreshing tokens for ${caller}`);
+        const refreshToken = this.tokenService.getRefreshToken();
+        if (!refreshToken) {
+            return ErrorHelper.throw(new InvalidTokenError('No refresh token found'));
+        }
+        const endpoint = `${this.options.backendUrl}/api/v${this.options.apiVersion ?? 1}/refresh-token`;
+        LogHelper.log(`Calling ${endpoint} to get new tokens`);
+        return this.httpClient
+            .get(endpoint, {
+            headers: { 'Authorization': `Bearer ${refreshToken.token}` }
+        })
+            .pipe(catchError((error) => {
+            LogHelper.error(new InvalidTokenError(`Failed to obtain tokens. Reason: ${ErrorHelper.extractMessage(error).toLowerCase()}`));
+            return ErrorHelper.throw(error);
+        }), map((response) => {
+            const accessToken = this.tokenService.setAccessToken(response.access_token);
+            this.tokenService.setRefreshToken(response.refresh_token);
+            if (accessToken) {
+                LogHelper.groupEnd();
+                return accessToken;
+            }
+            throw new InvalidTokenError('Could not set access token');
+        }));
+    }
+    static { this.ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "19.2.2", ngImport: i0, type: IdentityService, deps: [], target: i0.ɵɵFactoryTarget.Injectable }); }
+    static { this.ɵprov = i0.ɵɵngDeclareInjectable({ minVersion: "12.0.0", version: "19.2.2", ngImport: i0, type: IdentityService, providedIn: 'root' }); }
+}
+i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "19.2.2", ngImport: i0, type: IdentityService, decorators: [{
+            type: Injectable,
+            args: [{ providedIn: 'root' }]
+        }] });
+
+class RequestHelper {
+    static isIdentityEndpointRequest(request) {
+        return request.url.startsWith(this.options?.backendUrl ?? '');
+    }
+    static isAuthorizedRequest(request) {
+        return !this.options?.requestFilter || this.options.requestFilter(request);
+    }
+    static isAuthorizationError(error) {
+        return error instanceof HttpErrorResponse && error.status === 401;
+    }
+    static attachAuthorizationHeader(request, accessToken) {
+        return request.clone({
+            setHeaders: { authorization: `Bearer ${accessToken.token}` }
+        });
+    }
+    static onAuthorizationError(error, injector) {
+        if (this.options?.onAuthorizationError) {
+            console.log('BOO');
+            this.options?.onAuthorizationError(error, injector);
+        }
+        return throwError(() => error);
+    }
+    ;
+}
+
+function requestInterceptor(request, next) {
+    const identityService = inject(IdentityService);
+    const injector = inject(Injector);
+    if (RequestHelper.isIdentityEndpointRequest(request) ||
+        !RequestHelper.isAuthorizedRequest(request)) {
+        return next(request);
+    }
+    return identityService.isAuthenticated(`Request Interceptor (${request.url})`).pipe(catchError((error) => RequestHelper.onAuthorizationError(error, injector)), switchMap(accessToken => next(RequestHelper.attachAuthorizationHeader(request, accessToken))));
+}
+
+function responseInterceptor(request, next) {
+    const options = inject(IDENTITY_OPTIONS);
+    const identityService = inject(IdentityService);
+    const injector = inject(Injector);
+    return next(request).pipe(catchError((error) => {
+        if (RequestHelper.isIdentityEndpointRequest(request) ||
+            !RequestHelper.isAuthorizedRequest(request) ||
+            !RequestHelper.isAuthorizationError(error)) {
+            return throwError(() => error);
+        }
+        if (!options.refreshTokenOnAuthError) {
+            return RequestHelper.onAuthorizationError(error, injector);
+        }
+        return identityService.refreshTokens('Response Interceptor').pipe(switchMap((accessToken) => next(RequestHelper.attachAuthorizationHeader(request, accessToken))), catchError((error) => RequestHelper.onAuthorizationError(error, injector)));
+    }));
+}
+
+function provideIdentity(options) {
+    LogHelper.options = options;
+    RequestHelper.options = options;
+    return [
+        { provide: IDENTITY_OPTIONS, useValue: options },
+        provideHttpClient(withInterceptors([requestInterceptor, responseInterceptor]))
+    ];
+}
+
+const IDENTITY_AUTH_GUARD = (_route, state) => {
+    const identityService = inject(IdentityService);
+    const options = inject(IDENTITY_OPTIONS);
+    return identityService.isAuthenticated(`Auth Guard (${state.url})`).pipe(catchError(() => {
+        LogHelper.groupStart('Redirecting to IDMS to login');
+        const redirectUrl = `${options.frontendUrl}/apps/${options.application}?redirect=true&redirect_path=${encodeURIComponent(state.url)}`;
+        LogHelper.log('Redirect url:', redirectUrl);
+        window.location.href = redirectUrl;
+        LogHelper.groupEnd();
+        return of(null);
+    }), map((accessToken) => !!accessToken));
+};
+
+const IDENTITY_AUTH_CALLBACK_GUARD = (route) => {
+    const router = inject(Router);
+    const tokenService = inject(TokenService);
+    try {
+        LogHelper.groupStart('Storing new tokens');
+        const accessToken = tokenService.setAccessToken(route.queryParams['access_token']);
+        LogHelper.log("IDMS_AccessToken", accessToken);
+        const refreshToken = tokenService.setRefreshToken(route.queryParams['refresh_token']);
+        LogHelper.log("IDMS_RefreshToken", refreshToken);
+        const redirectPath = route.queryParams['redirect_path'] || '/';
+        LogHelper.log(`Redirecting to ${redirectPath}`);
+        LogHelper.groupEnd();
+        return router.navigateByUrl(route.queryParams['redirect_path'] || '/');
+    }
+    catch (error) {
+        const routerOutlet = document.body.querySelector('router-outlet');
+        if (routerOutlet) {
+            routerOutlet.innerHTML = ErrorHelper.extractMessage(error);
+        }
+        LogHelper.error(error);
+        return false;
+    }
+};
+
+export { IDENTITY_AUTH_CALLBACK_GUARD, IDENTITY_AUTH_GUARD, provideIdentity };
+//# sourceMappingURL=ascentgl-ads-identity.mjs.map

package/fesm2022/ascentgl-ads-identity.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"ascentgl-ads-identity.mjs","sources":["../../../../libs/ads-identity/src/lib/helpers/log.helper.ts","../../../../libs/ads-identity/src/lib/helpers/error.helper.ts","../../../../libs/ads-identity/src/lib/helpers/token.helper.ts","../../../../libs/ads-identity/src/lib/types/internal-consts.ts","../../../../libs/ads-identity/src/lib/services/token.service.ts","../../../../libs/ads-identity/src/lib/services/identity.service.ts","../../../../libs/ads-identity/src/lib/helpers/request.helper.ts","../../../../libs/ads-identity/src/lib/interceptors/request.interceptor.ts","../../../../libs/ads-identity/src/lib/interceptors/response.interceptor.ts","../../../../libs/ads-identity/src/lib/providers/identity.provider.ts","../../../../libs/ads-identity/src/lib/guards/auth.guard.ts","../../../../libs/ads-identity/src/lib/guards/auth-callback.guard.ts"],"sourcesContent":["import { IdentityOptions } from '../types/global-types';\r\n\r\nexport class LogHelper {\r\n\r\n  static options?: IdentityOptions;\r\n\r\n  private static readonly prefix = 'ADS-IDENTITY:';\r\n\r\n  static log(...args: unknown[]) {\r\n    if (this.options?.debugMode) console.log(...args);\r\n  }\r\n\r\n  static warn(...args: unknown[]) {\r\n    if (this.options?.debugMode) console.warn(...args);\r\n  }\r\n\r\n  static groupStart(...data: unknown[]) {\r\n    if (this.options?.debugMode) console.group(this.prefix, ...data);\r\n  }\r\n\r\n  static groupEnd() {\r\n    if (this.options?.debugMode) console.groupEnd();\r\n  }\r\n\r\n  static error(...args: unknown[]) {\r\n    if (this.options?.debugMode) console.error(...args);\r\n  }\r\n\r\n}\r\n","import { LogHelper } from './log.helper';\r\nimport { throwError } from 'rxjs';\r\nimport { HttpErrorResponse } from '@angular/common/http';\r\nimport { GenericCollection } from '../types/internal-types';\r\n\r\nexport class ErrorHelper {\r\n\r\n  static throw = (error: unknown) => {\r\n\r\n    /**\r\n     * return \"throwError\" observable that can be used in reactive requests\r\n     */\r\n    return throwError(() => {\r\n\r\n      LogHelper.groupEnd();\r\n\r\n      return error;\r\n\r\n    });\r\n  };\r\n\r\n  static extractMessage(error: unknown): string {\r\n\r\n    if (typeof error === 'string') {\r\n      return error;\r\n    }\r\n\r\n    let errorMessage: unknown;\r\n\r\n    if (error instanceof HttpErrorResponse) {\r\n      errorMessage = error.error?.message ?? error.message;\r\n    }\r\n\r\n    if (\r\n      !errorMessage &&\r\n      typeof error === 'object' &&\r\n      typeof (<GenericCollection>error)['message'] === 'string'\r\n    ) {\r\n      errorMessage = (<GenericCollection>error)['message'];\r\n    }\r\n\r\n    return errorMessage && typeof errorMessage === 'string'\r\n      ? errorMessage\r\n      : 'Unknown server error';\r\n  }\r\n}\r\n","import { InvalidTokenError, jwtDecode, JwtPayload } from 'jwt-decode';\r\nimport { JwtClaim } from '../types/internal-types';\r\nimport { LogHelper } from './log.helper';\r\nimport { ErrorHelper } from './error.helper';\r\n\r\nexport class TokenHelper {\r\n\r\n  static getPayload<T extends JwtPayload>(\r\n    token: string,\r\n    verifyClaims: Partial<JwtPayload> = {},\r\n    threshold = 0\r\n  ): T {\r\n\r\n    const payload = jwtDecode(token) satisfies T;\r\n\r\n    /**\r\n     * throw error if token is expired\r\n     */\r\n    if (this.isExpired(payload, 'exp', threshold)) {\r\n      throw new InvalidTokenError('Token expired');\r\n    }\r\n\r\n    /**\r\n     * loop through claims to verify and make sure the payload match their values\r\n     */\r\n    (<JwtClaim[]>Object.keys(verifyClaims)).forEach((claim) => {\r\n\r\n      const tokenClaimValue = payload[claim];\r\n      const requestedClaimValue = verifyClaims[claim];\r\n\r\n      if (tokenClaimValue !== requestedClaimValue) {\r\n        throw new InvalidTokenError(`Invalid \"${claim}\" claim value \"${tokenClaimValue}\" provided in token. Required value is \"${requestedClaimValue}\"`);\r\n      }\r\n\r\n    });\r\n\r\n    return payload;\r\n\r\n  }\r\n\r\n  private static isExpired<T extends JwtPayload>(\r\n    token: T,\r\n    column: keyof T = 'exp',\r\n    threshold = 0\r\n  ): boolean {\r\n\r\n    const throwInvalidColumnError = (column: string): void => {\r\n      throw new InvalidTokenError(\r\n        `Column ${column} does not contain a valid number`\r\n      );\r\n    };\r\n\r\n    try {\r\n\r\n      /**\r\n       * get value from the column\r\n       */\r\n      let timestamp: unknown = token[column];\r\n\r\n      /**\r\n       * if values is a number - compare it against current date\r\n       */\r\n      if (typeof timestamp === 'number') {\r\n\r\n        /**\r\n         * if threshold is set - extract it from the timestamp\r\n         * NOTE: threshold allows to consider the timestamp expired earlier;\r\n         * this allows to make sure the token does not expire while being transferred to backend\r\n         */\r\n        if (threshold) {\r\n          timestamp -= threshold;\r\n        }\r\n\r\n        return !!timestamp && timestamp * 1000 < new Date().getTime();\r\n      }\r\n\r\n      throwInvalidColumnError(column.toString());\r\n\r\n      return true;\r\n    } catch (error: unknown) {\r\n\r\n      LogHelper.error(new InvalidTokenError(ErrorHelper.extractMessage(error)));\r\n\r\n      return true;\r\n    }\r\n  }\r\n\r\n}\r\n","import { InjectionToken } from '@angular/core';\r\nimport { IdentityOptions } from './global-types';\r\n\r\nexport const IDENTITY_OPTIONS = new InjectionToken<IdentityOptions>('IDENTITY_OPTIONS');\r\n","import { inject, Injectable } from '@angular/core';\r\nimport { Maybe, Nullable } from '../types/internal-types';\r\nimport { IdentityToken } from '../types/global-types';\r\nimport { TokenHelper } from '../helpers/token.helper';\r\nimport { InvalidTokenError } from 'jwt-decode';\r\nimport { IDENTITY_OPTIONS } from '../types/internal-consts';\r\nimport { TokenKey } from '../types/internal-enums';\r\nimport { LogHelper } from '../helpers/log.helper';\r\n\r\n@Injectable({ providedIn: 'root' })\r\nexport class TokenService {\r\n\r\n  private accessToken: Nullable<IdentityToken> = null;\r\n  private refreshToken: Nullable<IdentityToken> = null;\r\n\r\n  private readonly options = inject(IDENTITY_OPTIONS);\r\n\r\n  setAccessToken(token: unknown) {\r\n    return this.accessToken = this.setToken(TokenKey.accessToken, token);\r\n  }\r\n\r\n  setRefreshToken(token: unknown) {\r\n    return this.refreshToken = this.setToken(TokenKey.refreshToken, token);\r\n  }\r\n\r\n  getAccessToken() {\r\n    return this.accessToken = this.getToken(TokenKey.accessToken, this.accessToken?.token);\r\n  }\r\n\r\n  getRefreshToken() {\r\n    return this.refreshToken = this.getToken(TokenKey.refreshToken, this.refreshToken?.token);\r\n  }\r\n\r\n  private setToken(key: TokenKey, token: unknown): Nullable<IdentityToken> {\r\n\r\n    /**\r\n     * make sure provided token is at least a string\r\n     */\r\n    if (typeof token !== 'string') {\r\n      throw new InvalidTokenError(`Provided ${key} value is not a string`);\r\n    }\r\n\r\n    /**\r\n     * get identity token\r\n     */\r\n    const identityToken = this.wrapToken(key, token, true);\r\n\r\n    /**\r\n     * if provided - save it to local storage\r\n     */\r\n    if (identityToken) {\r\n      localStorage.setItem(key, token);\r\n    }\r\n\r\n    return identityToken;\r\n\r\n  }\r\n\r\n  private getToken(key: TokenKey, token: Maybe<string>): Nullable<IdentityToken> {\r\n\r\n    /**\r\n     * either use provided token value or get one from the local storage\r\n     */\r\n    const actualToken = token ?? localStorage.getItem(key) ?? null;\r\n\r\n    if (typeof actualToken === 'string') {\r\n      return this.wrapToken(key, actualToken, false);\r\n    }\r\n\r\n    LogHelper.log(key, 'not provided and not found in Local Storage');\r\n\r\n    return null;\r\n\r\n  }\r\n\r\n  private wrapToken(key: TokenKey, token: string, throwError: boolean): Nullable<IdentityToken> {\r\n\r\n    try {\r\n\r\n      /**\r\n       * parse token and obtain its payload\r\n       * NOTE: errors will be thrown if token is expired or has invalid claims\r\n       */\r\n      const payload = TokenHelper.getPayload(\r\n        token,\r\n        {\r\n          iss: this.options.backendUrl + '/api',\r\n          sub: this.options.application\r\n        },\r\n        10\r\n      );\r\n\r\n      /**\r\n       * prepare identity token object\r\n       */\r\n      const identityToken = { token, payload: payload };\r\n\r\n      LogHelper.log(key, identityToken);\r\n\r\n      return identityToken;\r\n\r\n    } catch (error: unknown) {\r\n\r\n      if(throwError) {\r\n        throw error;\r\n      }\r\n\r\n      LogHelper.error(error);\r\n\r\n      return null;\r\n\r\n    }\r\n\r\n  }\r\n\r\n}\r\n","import { inject, Injectable } from '@angular/core';\r\nimport { catchError, map, Observable, of } from 'rxjs';\r\nimport { TokenService } from './token.service';\r\nimport { HttpClient } from '@angular/common/http';\r\nimport { IDENTITY_OPTIONS } from '../types/internal-consts';\r\nimport { RefreshTokenResponse } from '../types/internal-types';\r\nimport { LogHelper } from '../helpers/log.helper';\r\nimport { IdentityToken } from '../types/global-types';\r\nimport { InvalidTokenError } from 'jwt-decode';\r\nimport { ErrorHelper } from '../helpers/error.helper';\r\n\r\n@Injectable({ providedIn: 'root' })\r\nexport class IdentityService {\r\n\r\n  private readonly tokenService = inject(TokenService);\r\n  private readonly httpClient = inject(HttpClient);\r\n  private readonly options = inject(IDENTITY_OPTIONS);\r\n\r\n  isAuthenticated(caller: string): Observable<IdentityToken> {\r\n\r\n    LogHelper.groupStart(`Verifying access token for ${caller}`);\r\n\r\n    /**\r\n     * get access token\r\n     */\r\n    const accessToken = this.tokenService.getAccessToken();\r\n\r\n    /**\r\n     * if it is available - return it; otherwise try refreshing the tokens by calling IDMS\r\n     */\r\n    if (accessToken) {\r\n\r\n      LogHelper.groupEnd();\r\n\r\n      return of(accessToken);\r\n\r\n    }\r\n\r\n    LogHelper.groupEnd();\r\n\r\n    LogHelper.groupStart(`Getting refresh token for ${caller}`);\r\n\r\n    /**\r\n     * if refresh token is available - try getting new tokens\r\n     */\r\n    if (this.tokenService.getRefreshToken()) {\r\n\r\n      LogHelper.groupEnd();\r\n\r\n      return this.refreshTokens(caller);\r\n\r\n    }\r\n\r\n    /**\r\n     * throw error if no tokens are available\r\n     */\r\n    return ErrorHelper.throw(new InvalidTokenError('No valid tokens found'));\r\n\r\n  }\r\n\r\n  refreshTokens(caller: string): Observable<IdentityToken> {\r\n\r\n    LogHelper.groupStart(`Refreshing tokens for ${caller}`);\r\n\r\n    const refreshToken = this.tokenService.getRefreshToken();\r\n\r\n    /**\r\n     * throw error if refresh token is not available\r\n     */\r\n    if (!refreshToken) {\r\n      return ErrorHelper.throw(new InvalidTokenError('No refresh token found'));\r\n    }\r\n\r\n    const endpoint = `${this.options.backendUrl}/api/v${this.options.apiVersion ?? 1}/refresh-token`;\r\n\r\n    LogHelper.log(`Calling ${endpoint} to get new tokens`);\r\n\r\n    /**\r\n     * make request to IDMS to get new tokens\r\n     */\r\n    return this.httpClient\r\n      .get<RefreshTokenResponse>(endpoint, {\r\n        headers: { 'Authorization': `Bearer ${refreshToken.token}` }\r\n      })\r\n      .pipe(\r\n        catchError((error: unknown) => {\r\n\r\n          /**\r\n           * log error if it happens\r\n           */\r\n          LogHelper.error(new InvalidTokenError(`Failed to obtain tokens. Reason: ${ErrorHelper.extractMessage(error).toLowerCase()}`));\r\n\r\n          return ErrorHelper.throw(error);\r\n\r\n        }),\r\n        map((response) => {\r\n\r\n          /**\r\n           * store new access and refresh tokens\r\n           */\r\n          const accessToken = this.tokenService.setAccessToken(response.access_token);\r\n          this.tokenService.setRefreshToken(response.refresh_token);\r\n\r\n          /**\r\n           * if new access token is valid - return it\r\n           */\r\n          if (accessToken) {\r\n\r\n            LogHelper.groupEnd();\r\n\r\n            return accessToken;\r\n\r\n          }\r\n\r\n          throw new InvalidTokenError('Could not set access token');\r\n\r\n        })\r\n      );\r\n\r\n  }\r\n\r\n}\r\n","import { HttpErrorResponse, HttpRequest } from '@angular/common/http';\r\nimport { IdentityOptions, IdentityToken } from '../types/global-types';\r\nimport { throwError } from 'rxjs';\r\nimport { Injector } from '@angular/core';\r\n\r\nexport class RequestHelper {\r\n\r\n  static options?: IdentityOptions;\r\n\r\n  static isIdentityEndpointRequest(request: HttpRequest<unknown>): boolean {\r\n    return request.url.startsWith(this.options?.backendUrl ?? '');\r\n  }\r\n\r\n  static isAuthorizedRequest(request: HttpRequest<unknown>): boolean {\r\n    return !this.options?.requestFilter || this.options.requestFilter(request);\r\n  }\r\n\r\n  static isAuthorizationError(error: unknown): boolean {\r\n    return error instanceof HttpErrorResponse && error.status === 401;\r\n  }\r\n\r\n  static attachAuthorizationHeader(request: HttpRequest<unknown>, accessToken: IdentityToken): HttpRequest<unknown> {\r\n\r\n    return request.clone({\r\n      setHeaders: { authorization: `Bearer ${accessToken.token}` }\r\n    });\r\n\r\n  }\r\n\r\n  static onAuthorizationError(error: unknown, injector: Injector) {\r\n\r\n    if (this.options?.onAuthorizationError) {\r\n      console.log('BOO');\r\n      this.options?.onAuthorizationError(error, injector);\r\n    }\r\n\r\n    return throwError(() => error);\r\n\r\n  };\r\n\r\n}\r\n","import { HttpEvent, HttpHandlerFn, HttpRequest } from '@angular/common/http';\nimport { catchError, Observable, switchMap } from 'rxjs';\nimport { inject, Injector } from '@angular/core';\nimport { IdentityService } from '../services/identity.service';\nimport { RequestHelper } from '../helpers/request.helper';\n\nexport function requestInterceptor(\n  request: HttpRequest<unknown>,\n  next: HttpHandlerFn\n): Observable<HttpEvent<unknown>> {\n\n  const identityService = inject(IdentityService);\n  const injector = inject(Injector)\n\n  /**\n   * if it is a request to IDMS or not an authorized request - do not modify it\n   */\n  if (RequestHelper.isIdentityEndpointRequest(request) ||\n    !RequestHelper.isAuthorizedRequest(request)) {\n    return next(request);\n  }\n\n  /**\n   * if current user is authenticated - attach \"Authorization\" header to the request;\n   * or process the error if it happens\n   */\n  return identityService.isAuthenticated(`Request Interceptor (${request.url})`).pipe(\n    catchError((error: unknown) => RequestHelper.onAuthorizationError(error, injector)),\n    switchMap(accessToken => next(RequestHelper.attachAuthorizationHeader(request, accessToken))),\n  );\n\n\n}\n","import {\n  HttpEvent, HttpHandlerFn,\n  HttpRequest\n} from '@angular/common/http';\nimport { catchError, Observable, switchMap, throwError } from 'rxjs';\nimport { inject, Injector } from '@angular/core';\nimport { IdentityService } from '../services/identity.service';\nimport { IDENTITY_OPTIONS } from '../types/internal-consts';\nimport { RequestHelper } from '../helpers/request.helper';\n\nexport function responseInterceptor(\n  request: HttpRequest<unknown>,\n  next: HttpHandlerFn\n): Observable<HttpEvent<unknown>> {\n\n  const options = inject(IDENTITY_OPTIONS);\n  const identityService = inject(IdentityService);\n  const injector = inject(Injector);\n\n  /**\n   * process all response errors\n   */\n  return next(request).pipe(\n    catchError((error: unknown) => {\n\n      /**\n       * if error happened with IDMS request, or not-authorized request, or it is not an authorization (401) error -\n       * do not change anything and return the error as is\n       */\n      if (\n        RequestHelper.isIdentityEndpointRequest(request) ||\n        !RequestHelper.isAuthorizedRequest(request) ||\n        !RequestHelper.isAuthorizationError(error)\n      ) {\n        return throwError(() => error);\n      }\n\n      /**\n       * if options do not allow to try and refresh tokens on error 401 -\n       * process the error and return it\n       */\n      if (!options.refreshTokenOnAuthError) {\n        return RequestHelper.onAuthorizationError(error, injector);\n      }\n\n      /**\n       * if tokens were refreshed - attach \"Authorization\" header to the request and call it again;\n       * or process the error if it happens\n       */\n      return identityService.refreshTokens('Response Interceptor').pipe(\n        switchMap((accessToken) => next(RequestHelper.attachAuthorizationHeader(request, accessToken))),\n        catchError((error: unknown) => RequestHelper.onAuthorizationError(error, injector))\n      );\n\n    }));\n}\n","import { IdentityOptions } from '../types/global-types';\r\nimport { provideHttpClient, withInterceptors } from '@angular/common/http';\r\nimport { requestInterceptor } from '../interceptors/request.interceptor';\r\nimport { responseInterceptor } from '../interceptors/response.interceptor';\r\nimport { IDENTITY_OPTIONS } from '../types/internal-consts';\r\nimport { LogHelper } from '../helpers/log.helper';\r\nimport { RequestHelper } from '../helpers/request.helper';\r\n\r\nexport function provideIdentity(options: IdentityOptions) {\r\n\r\n  LogHelper.options = options;\r\n  RequestHelper.options = options;\r\n\r\n  return [\r\n    { provide: IDENTITY_OPTIONS, useValue: options },\r\n    provideHttpClient(withInterceptors([requestInterceptor, responseInterceptor]))\r\n  ];\r\n}\r\n","import { CanActivateFn } from '@angular/router';\r\nimport { inject } from '@angular/core';\r\nimport { IdentityService } from '../services/identity.service';\r\nimport { catchError, map, of } from 'rxjs';\r\nimport { IDENTITY_OPTIONS } from '../types/internal-consts';\r\nimport { LogHelper } from '../helpers/log.helper';\r\n\r\nexport const IDENTITY_AUTH_GUARD: CanActivateFn = (_route, state) => {\r\n\r\n  const identityService = inject(IdentityService);\r\n  const options = inject(IDENTITY_OPTIONS);\r\n\r\n  /**\r\n   * check if user is authenticated;\r\n   * if error happened - redirect to IDMS url to re-login;\r\n   * return true on success and false on error\r\n   */\r\n  return identityService.isAuthenticated(`Auth Guard (${state.url})`).pipe(\r\n    catchError(() => {\r\n\r\n      LogHelper.groupStart('Redirecting to IDMS to login');\r\n\r\n      const redirectUrl = `${options.frontendUrl}/apps/${options.application}?redirect=true&redirect_path=${encodeURIComponent(\r\n        state.url\r\n      )}`;\r\n\r\n      LogHelper.log('Redirect url:', redirectUrl);\r\n\r\n      window.location.href = redirectUrl;\r\n\r\n      LogHelper.groupEnd();\r\n\r\n      return of(null);\r\n\r\n    }),\r\n    map((accessToken) => !!accessToken));\r\n\r\n};\r\n","import { CanActivateFn, Router } from '@angular/router';\r\nimport { inject } from '@angular/core';\r\nimport { TokenService } from '../services/token.service';\r\nimport { LogHelper } from '../helpers/log.helper';\r\nimport { TokenKey } from '../types/internal-enums';\r\nimport { ErrorHelper } from '../helpers/error.helper';\r\n\r\nexport const IDENTITY_AUTH_CALLBACK_GUARD: CanActivateFn = (route) => {\r\n\r\n  const router = inject(Router);\r\n  const tokenService = inject(TokenService);\r\n\r\n  /**\r\n   * save access and refresh tokens and redirect either to root or to provided \"redirect_path\";\r\n   * if error happened - display error message on the page and return false to stop further navigation\r\n   */\r\n  try {\r\n\r\n    LogHelper.groupStart('Storing new tokens');\r\n\r\n    const accessToken = tokenService.setAccessToken(route.queryParams['access_token']);\r\n\r\n    LogHelper.log(TokenKey.accessToken, accessToken);\r\n\r\n    const refreshToken = tokenService.setRefreshToken(route.queryParams['refresh_token']);\r\n\r\n    LogHelper.log(TokenKey.refreshToken, refreshToken);\r\n\r\n    const redirectPath = route.queryParams['redirect_path'] || '/';\r\n\r\n    LogHelper.log(`Redirecting to ${redirectPath}`);\r\n\r\n    LogHelper.groupEnd();\r\n\r\n    return router.navigateByUrl(route.queryParams['redirect_path'] || '/');\r\n\r\n  } catch (error: unknown) {\r\n\r\n    const routerOutlet = document.body.querySelector('router-outlet');\r\n\r\n    if (routerOutlet) {\r\n      routerOutlet.innerHTML = ErrorHelper.extractMessage(error);\r\n    }\r\n\r\n    LogHelper.error(error);\r\n\r\n    return false;\r\n\r\n  }\r\n\r\n};\r\n"],"names":[],"mappings":";;;;;;;MAEa,SAAS,CAAA;aAII,IAAM,CAAA,MAAA,GAAG,eAAe,CAAC;AAEjD,IAAA,OAAO,GAAG,CAAC,GAAG,IAAe,EAAA;AAC3B,QAAA,IAAI,IAAI,CAAC,OAAO,EAAE,SAAS;AAAE,YAAA,OAAO,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC;;AAGnD,IAAA,OAAO,IAAI,CAAC,GAAG,IAAe,EAAA;AAC5B,QAAA,IAAI,IAAI,CAAC,OAAO,EAAE,SAAS;AAAE,YAAA,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;;AAGpD,IAAA,OAAO,UAAU,CAAC,GAAG,IAAe,EAAA;AAClC,QAAA,IAAI,IAAI,CAAC,OAAO,EAAE,SAAS;YAAE,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC;;AAGlE,IAAA,OAAO,QAAQ,GAAA;AACb,QAAA,IAAI,IAAI,CAAC,OAAO,EAAE,SAAS;YAAE,OAAO,CAAC,QAAQ,EAAE;;AAGjD,IAAA,OAAO,KAAK,CAAC,GAAG,IAAe,EAAA;AAC7B,QAAA,IAAI,IAAI,CAAC,OAAO,EAAE,SAAS;AAAE,YAAA,OAAO,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC;;;;MCpB1C,WAAW,CAAA;AAEf,IAAA,SAAA,IAAA,CAAA,KAAK,GAAG,CAAC,KAAc,KAAI;QAKhC,OAAO,UAAU,CAAC,MAAK;YAErB,SAAS,CAAC,QAAQ,EAAE;AAEpB,YAAA,OAAO,KAAK;AAEd,SAAC,CAAC;AACJ,KAAC,CAAC;IAEF,OAAO,cAAc,CAAC,KAAc,EAAA;AAElC,QAAA,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE;AAC7B,YAAA,OAAO,KAAK;;AAGd,QAAA,IAAI,YAAqB;AAEzB,QAAA,IAAI,KAAK,YAAY,iBAAiB,EAAE;YACtC,YAAY,GAAG,KAAK,CAAC,KAAK,EAAE,OAAO,IAAI,KAAK,CAAC,OAAO;;AAGtD,QAAA,IACE,CAAC,YAAY;YACb,OAAO,KAAK,KAAK,QAAQ;AACzB,YAAA,OAA2B,KAAM,CAAC,SAAS,CAAC,KAAK,QAAQ,EACzD;AACA,YAAA,YAAY,GAAuB,KAAM,CAAC,SAAS,CAAC;;AAGtD,QAAA,OAAO,YAAY,IAAI,OAAO,YAAY,KAAK;AAC7C,cAAE;cACA,sBAAsB;;;;MCtCjB,WAAW,CAAA;IAEtB,OAAO,UAAU,CACf,KAAa,EACb,eAAoC,EAAE,EACtC,SAAS,GAAG,CAAC,EAAA;AAGb,QAAA,MAAM,OAAO,GAAG,SAAS,CAAC,KAAK,CAAa;QAK5C,IAAI,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,KAAK,EAAE,SAAS,CAAC,EAAE;AAC7C,YAAA,MAAM,IAAI,iBAAiB,CAAC,eAAe,CAAC;;QAMjC,MAAM,CAAC,IAAI,CAAC,YAAY,CAAE,CAAC,OAAO,CAAC,CAAC,KAAK,KAAI;AAExD,YAAA,MAAM,eAAe,GAAG,OAAO,CAAC,KAAK,CAAC;AACtC,YAAA,MAAM,mBAAmB,GAAG,YAAY,CAAC,KAAK,CAAC;AAE/C,YAAA,IAAI,eAAe,KAAK,mBAAmB,EAAE;gBAC3C,MAAM,IAAI,iBAAiB,CAAC,CAAY,SAAA,EAAA,KAAK,CAAkB,eAAA,EAAA,eAAe,CAA2C,wCAAA,EAAA,mBAAmB,CAAG,CAAA,CAAA,CAAC;;AAGpJ,SAAC,CAAC;AAEF,QAAA,OAAO,OAAO;;IAIR,OAAO,SAAS,CACtB,KAAQ,EACR,SAAkB,KAAK,EACvB,SAAS,GAAG,CAAC,EAAA;AAGb,QAAA,MAAM,uBAAuB,GAAG,CAAC,MAAc,KAAU;AACvD,YAAA,MAAM,IAAI,iBAAiB,CACzB,UAAU,MAAM,CAAA,gCAAA,CAAkC,CACnD;AACH,SAAC;AAED,QAAA,IAAI;AAKF,YAAA,IAAI,SAAS,GAAY,KAAK,CAAC,MAAM,CAAC;AAKtC,YAAA,IAAI,OAAO,SAAS,KAAK,QAAQ,EAAE;gBAOjC,IAAI,SAAS,EAAE;oBACb,SAAS,IAAI,SAAS;;AAGxB,gBAAA,OAAO,CAAC,CAAC,SAAS,IAAI,SAAS,GAAG,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC,OAAO,EAAE;;AAG/D,YAAA,uBAAuB,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;AAE1C,YAAA,OAAO,IAAI;;QACX,OAAO,KAAc,EAAE;AAEvB,YAAA,SAAS,CAAC,KAAK,CAAC,IAAI,iBAAiB,CAAC,WAAW,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC;AAEzE,YAAA,OAAO,IAAI;;;AAIhB;;ACpFM,MAAM,gBAAgB,GAAG,IAAI,cAAc,CAAkB,kBAAkB,CAAC;;MCO1E,YAAY,CAAA;AADzB,IAAA,WAAA,GAAA;QAGU,IAAW,CAAA,WAAA,GAA4B,IAAI;QAC3C,IAAY,CAAA,YAAA,GAA4B,IAAI;AAEnC,QAAA,IAAA,CAAA,OAAO,GAAG,MAAM,CAAC,gBAAgB,CAAC;AAoGpD;AAlGC,IAAA,cAAc,CAAC,KAAc,EAAA;QAC3B,OAAO,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,QAAQ,CAAA,kBAAA,EAAuB,KAAK,CAAC;;AAGtE,IAAA,eAAe,CAAC,KAAc,EAAA;QAC5B,OAAO,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,QAAQ,CAAA,mBAAA,EAAwB,KAAK,CAAC;;IAGxE,cAAc,GAAA;AACZ,QAAA,OAAO,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,QAAQ,CAAuB,kBAAA,EAAA,IAAI,CAAC,WAAW,EAAE,KAAK,CAAC;;IAGxF,eAAe,GAAA;AACb,QAAA,OAAO,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,QAAQ,CAAwB,mBAAA,EAAA,IAAI,CAAC,YAAY,EAAE,KAAK,CAAC;;IAGnF,QAAQ,CAAC,GAAa,EAAE,KAAc,EAAA;AAK5C,QAAA,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE;AAC7B,YAAA,MAAM,IAAI,iBAAiB,CAAC,YAAY,GAAG,CAAA,sBAAA,CAAwB,CAAC;;AAMtE,QAAA,MAAM,aAAa,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,KAAK,EAAE,IAAI,CAAC;QAKtD,IAAI,aAAa,EAAE;AACjB,YAAA,YAAY,CAAC,OAAO,CAAC,GAAG,EAAE,KAAK,CAAC;;AAGlC,QAAA,OAAO,aAAa;;IAId,QAAQ,CAAC,GAAa,EAAE,KAAoB,EAAA;AAKlD,QAAA,MAAM,WAAW,GAAG,KAAK,IAAI,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI;AAE9D,QAAA,IAAI,OAAO,WAAW,KAAK,QAAQ,EAAE;YACnC,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,WAAW,EAAE,KAAK,CAAC;;AAGhD,QAAA,SAAS,CAAC,GAAG,CAAC,GAAG,EAAE,6CAA6C,CAAC;AAEjE,QAAA,OAAO,IAAI;;AAIL,IAAA,SAAS,CAAC,GAAa,EAAE,KAAa,EAAE,UAAmB,EAAA;AAEjE,QAAA,IAAI;AAMF,YAAA,MAAM,OAAO,GAAG,WAAW,CAAC,UAAU,CACpC,KAAK,EACL;AACE,gBAAA,GAAG,EAAE,IAAI,CAAC,OAAO,CAAC,UAAU,GAAG,MAAM;AACrC,gBAAA,GAAG,EAAE,IAAI,CAAC,OAAO,CAAC;aACnB,EACD,EAAE,CACH;YAKD,MAAM,aAAa,GAAG,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE;AAEjD,YAAA,SAAS,CAAC,GAAG,CAAC,GAAG,EAAE,aAAa,CAAC;AAEjC,YAAA,OAAO,aAAa;;QAEpB,OAAO,KAAc,EAAE;YAEvB,IAAG,UAAU,EAAE;AACb,gBAAA,MAAM,KAAK;;AAGb,YAAA,SAAS,CAAC,KAAK,CAAC,KAAK,CAAC;AAEtB,YAAA,OAAO,IAAI;;;8GAnGJ,YAAY,EAAA,IAAA,EAAA,EAAA,EAAA,MAAA,EAAA,EAAA,CAAA,eAAA,CAAA,UAAA,EAAA,CAAA,CAAA;AAAZ,IAAA,SAAA,IAAA,CAAA,KAAA,GAAA,EAAA,CAAA,qBAAA,CAAA,EAAA,UAAA,EAAA,QAAA,EAAA,OAAA,EAAA,QAAA,EAAA,QAAA,EAAA,EAAA,EAAA,IAAA,EAAA,YAAY,cADC,MAAM,EAAA,CAAA,CAAA;;2FACnB,YAAY,EAAA,UAAA,EAAA,CAAA;kBADxB,UAAU;mBAAC,EAAE,UAAU,EAAE,MAAM,EAAE;;;MCGrB,eAAe,CAAA;AAD5B,IAAA,WAAA,GAAA;AAGmB,QAAA,IAAA,CAAA,YAAY,GAAG,MAAM,CAAC,YAAY,CAAC;AACnC,QAAA,IAAA,CAAA,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC;AAC/B,QAAA,IAAA,CAAA,OAAO,GAAG,MAAM,CAAC,gBAAgB,CAAC;AAyGpD;AAvGC,IAAA,eAAe,CAAC,MAAc,EAAA;AAE5B,QAAA,SAAS,CAAC,UAAU,CAAC,8BAA8B,MAAM,CAAA,CAAE,CAAC;QAK5D,MAAM,WAAW,GAAG,IAAI,CAAC,YAAY,CAAC,cAAc,EAAE;QAKtD,IAAI,WAAW,EAAE;YAEf,SAAS,CAAC,QAAQ,EAAE;AAEpB,YAAA,OAAO,EAAE,CAAC,WAAW,CAAC;;QAIxB,SAAS,CAAC,QAAQ,EAAE;AAEpB,QAAA,SAAS,CAAC,UAAU,CAAC,6BAA6B,MAAM,CAAA,CAAE,CAAC;AAK3D,QAAA,IAAI,IAAI,CAAC,YAAY,CAAC,eAAe,EAAE,EAAE;YAEvC,SAAS,CAAC,QAAQ,EAAE;AAEpB,YAAA,OAAO,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC;;QAOnC,OAAO,WAAW,CAAC,KAAK,CAAC,IAAI,iBAAiB,CAAC,uBAAuB,CAAC,CAAC;;AAI1E,IAAA,aAAa,CAAC,MAAc,EAAA;AAE1B,QAAA,SAAS,CAAC,UAAU,CAAC,yBAAyB,MAAM,CAAA,CAAE,CAAC;QAEvD,MAAM,YAAY,GAAG,IAAI,CAAC,YAAY,CAAC,eAAe,EAAE;QAKxD,IAAI,CAAC,YAAY,EAAE;YACjB,OAAO,WAAW,CAAC,KAAK,CAAC,IAAI,iBAAiB,CAAC,wBAAwB,CAAC,CAAC;;AAG3E,QAAA,MAAM,QAAQ,GAAG,CAAA,EAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAS,MAAA,EAAA,IAAI,CAAC,OAAO,CAAC,UAAU,IAAI,CAAC,gBAAgB;AAEhG,QAAA,SAAS,CAAC,GAAG,CAAC,WAAW,QAAQ,CAAA,kBAAA,CAAoB,CAAC;QAKtD,OAAO,IAAI,CAAC;aACT,GAAG,CAAuB,QAAQ,EAAE;YACnC,OAAO,EAAE,EAAE,eAAe,EAAE,UAAU,YAAY,CAAC,KAAK,CAAA,CAAE;SAC3D;AACA,aAAA,IAAI,CACH,UAAU,CAAC,CAAC,KAAc,KAAI;AAK5B,YAAA,SAAS,CAAC,KAAK,CAAC,IAAI,iBAAiB,CAAC,oCAAoC,WAAW,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,CAAE,CAAA,CAAC,CAAC;AAE7H,YAAA,OAAO,WAAW,CAAC,KAAK,CAAC,KAAK,CAAC;AAEjC,SAAC,CAAC,EACF,GAAG,CAAC,CAAC,QAAQ,KAAI;AAKf,YAAA,MAAM,WAAW,GAAG,IAAI,CAAC,YAAY,CAAC,cAAc,CAAC,QAAQ,CAAC,YAAY,CAAC;YAC3E,IAAI,CAAC,YAAY,CAAC,eAAe,CAAC,QAAQ,CAAC,aAAa,CAAC;YAKzD,IAAI,WAAW,EAAE;gBAEf,SAAS,CAAC,QAAQ,EAAE;AAEpB,gBAAA,OAAO,WAAW;;AAIpB,YAAA,MAAM,IAAI,iBAAiB,CAAC,4BAA4B,CAAC;SAE1D,CAAC,CACH;;8GAzGM,eAAe,EAAA,IAAA,EAAA,EAAA,EAAA,MAAA,EAAA,EAAA,CAAA,eAAA,CAAA,UAAA,EAAA,CAAA,CAAA;AAAf,IAAA,SAAA,IAAA,CAAA,KAAA,GAAA,EAAA,CAAA,qBAAA,CAAA,EAAA,UAAA,EAAA,QAAA,EAAA,OAAA,EAAA,QAAA,EAAA,QAAA,EAAA,EAAA,EAAA,IAAA,EAAA,eAAe,cADF,MAAM,EAAA,CAAA,CAAA;;2FACnB,eAAe,EAAA,UAAA,EAAA,CAAA;kBAD3B,UAAU;mBAAC,EAAE,UAAU,EAAE,MAAM,EAAE;;;MCNrB,aAAa,CAAA;IAIxB,OAAO,yBAAyB,CAAC,OAA6B,EAAA;AAC5D,QAAA,OAAO,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,EAAE,UAAU,IAAI,EAAE,CAAC;;IAG/D,OAAO,mBAAmB,CAAC,OAA6B,EAAA;AACtD,QAAA,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,aAAa,IAAI,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,OAAO,CAAC;;IAG5E,OAAO,oBAAoB,CAAC,KAAc,EAAA;QACxC,OAAO,KAAK,YAAY,iBAAiB,IAAI,KAAK,CAAC,MAAM,KAAK,GAAG;;AAGnE,IAAA,OAAO,yBAAyB,CAAC,OAA6B,EAAE,WAA0B,EAAA;QAExF,OAAO,OAAO,CAAC,KAAK,CAAC;YACnB,UAAU,EAAE,EAAE,aAAa,EAAE,UAAU,WAAW,CAAC,KAAK,CAAA,CAAE;AAC3D,SAAA,CAAC;;AAIJ,IAAA,OAAO,oBAAoB,CAAC,KAAc,EAAE,QAAkB,EAAA;AAE5D,QAAA,IAAI,IAAI,CAAC,OAAO,EAAE,oBAAoB,EAAE;AACtC,YAAA,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC;YAClB,IAAI,CAAC,OAAO,EAAE,oBAAoB,CAAC,KAAK,EAAE,QAAQ,CAAC;;AAGrD,QAAA,OAAO,UAAU,CAAC,MAAM,KAAK,CAAC;;;AAIjC;;AClCe,SAAA,kBAAkB,CAChC,OAA6B,EAC7B,IAAmB,EAAA;AAGnB,IAAA,MAAM,eAAe,GAAG,MAAM,CAAC,eAAe,CAAC;AAC/C,IAAA,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC;AAKjC,IAAA,IAAI,aAAa,CAAC,yBAAyB,CAAC,OAAO,CAAC;AAClD,QAAA,CAAC,aAAa,CAAC,mBAAmB,CAAC,OAAO,CAAC,EAAE;AAC7C,QAAA,OAAO,IAAI,CAAC,OAAO,CAAC;;IAOtB,OAAO,eAAe,CAAC,eAAe,CAAC,wBAAwB,OAAO,CAAC,GAAG,CAAA,CAAA,CAAG,CAAC,CAAC,IAAI,CACjF,UAAU,CAAC,CAAC,KAAc,KAAK,aAAa,CAAC,oBAAoB,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC,EACnF,SAAS,CAAC,WAAW,IAAI,IAAI,CAAC,aAAa,CAAC,yBAAyB,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC,CAAC,CAC9F;AAGH;;ACtBgB,SAAA,mBAAmB,CACjC,OAA6B,EAC7B,IAAmB,EAAA;AAGnB,IAAA,MAAM,OAAO,GAAG,MAAM,CAAC,gBAAgB,CAAC;AACxC,IAAA,MAAM,eAAe,GAAG,MAAM,CAAC,eAAe,CAAC;AAC/C,IAAA,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC;AAKjC,IAAA,OAAO,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,CACvB,UAAU,CAAC,CAAC,KAAc,KAAI;AAM5B,QAAA,IACE,aAAa,CAAC,yBAAyB,CAAC,OAAO,CAAC;AAChD,YAAA,CAAC,aAAa,CAAC,mBAAmB,CAAC,OAAO,CAAC;AAC3C,YAAA,CAAC,aAAa,CAAC,oBAAoB,CAAC,KAAK,CAAC,EAC1C;AACA,YAAA,OAAO,UAAU,CAAC,MAAM,KAAK,CAAC;;AAOhC,QAAA,IAAI,CAAC,OAAO,CAAC,uBAAuB,EAAE;YACpC,OAAO,aAAa,CAAC,oBAAoB,CAAC,KAAK,EAAE,QAAQ,CAAC;;QAO5D,OAAO,eAAe,CAAC,aAAa,CAAC,sBAAsB,CAAC,CAAC,IAAI,CAC/D,SAAS,CAAC,CAAC,WAAW,KAAK,IAAI,CAAC,aAAa,CAAC,yBAAyB,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC,CAAC,EAC/F,UAAU,CAAC,CAAC,KAAc,KAAK,aAAa,CAAC,oBAAoB,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC,CACpF;KAEF,CAAC,CAAC;AACP;;AC/CM,SAAU,eAAe,CAAC,OAAwB,EAAA;AAEtD,IAAA,SAAS,CAAC,OAAO,GAAG,OAAO;AAC3B,IAAA,aAAa,CAAC,OAAO,GAAG,OAAO;IAE/B,OAAO;AACL,QAAA,EAAE,OAAO,EAAE,gBAAgB,EAAE,QAAQ,EAAE,OAAO,EAAE;QAChD,iBAAiB,CAAC,gBAAgB,CAAC,CAAC,kBAAkB,EAAE,mBAAmB,CAAC,CAAC;KAC9E;AACH;;MCVa,mBAAmB,GAAkB,CAAC,MAAM,EAAE,KAAK,KAAI;AAElE,IAAA,MAAM,eAAe,GAAG,MAAM,CAAC,eAAe,CAAC;AAC/C,IAAA,MAAM,OAAO,GAAG,MAAM,CAAC,gBAAgB,CAAC;AAOxC,IAAA,OAAO,eAAe,CAAC,eAAe,CAAC,CAAA,YAAA,EAAe,KAAK,CAAC,GAAG,CAAG,CAAA,CAAA,CAAC,CAAC,IAAI,CACtE,UAAU,CAAC,MAAK;AAEd,QAAA,SAAS,CAAC,UAAU,CAAC,8BAA8B,CAAC;AAEpD,QAAA,MAAM,WAAW,GAAG,CAAA,EAAG,OAAO,CAAC,WAAW,SAAS,OAAO,CAAC,WAAW,CAAA,6BAAA,EAAgC,kBAAkB,CACtH,KAAK,CAAC,GAAG,CACV,EAAE;AAEH,QAAA,SAAS,CAAC,GAAG,CAAC,eAAe,EAAE,WAAW,CAAC;AAE3C,QAAA,MAAM,CAAC,QAAQ,CAAC,IAAI,GAAG,WAAW;QAElC,SAAS,CAAC,QAAQ,EAAE;AAEpB,QAAA,OAAO,EAAE,CAAC,IAAI,CAAC;AAEjB,KAAC,CAAC,EACF,GAAG,CAAC,CAAC,WAAW,KAAK,CAAC,CAAC,WAAW,CAAC,CAAC;AAExC;;AC9Ba,MAAA,4BAA4B,GAAkB,CAAC,KAAK,KAAI;AAEnE,IAAA,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;AAC7B,IAAA,MAAM,YAAY,GAAG,MAAM,CAAC,YAAY,CAAC;AAMzC,IAAA,IAAI;AAEF,QAAA,SAAS,CAAC,UAAU,CAAC,oBAAoB,CAAC;AAE1C,QAAA,MAAM,WAAW,GAAG,YAAY,CAAC,cAAc,CAAC,KAAK,CAAC,WAAW,CAAC,cAAc,CAAC,CAAC;AAElF,QAAA,SAAS,CAAC,GAAG,CAAuB,kBAAA,EAAA,WAAW,CAAC;AAEhD,QAAA,MAAM,YAAY,GAAG,YAAY,CAAC,eAAe,CAAC,KAAK,CAAC,WAAW,CAAC,eAAe,CAAC,CAAC;AAErF,QAAA,SAAS,CAAC,GAAG,CAAwB,mBAAA,EAAA,YAAY,CAAC;QAElD,MAAM,YAAY,GAAG,KAAK,CAAC,WAAW,CAAC,eAAe,CAAC,IAAI,GAAG;AAE9D,QAAA,SAAS,CAAC,GAAG,CAAC,kBAAkB,YAAY,CAAA,CAAE,CAAC;QAE/C,SAAS,CAAC,QAAQ,EAAE;AAEpB,QAAA,OAAO,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,WAAW,CAAC,eAAe,CAAC,IAAI,GAAG,CAAC;;IAEtE,OAAO,KAAc,EAAE;QAEvB,MAAM,YAAY,GAAG,QAAQ,CAAC,IAAI,CAAC,aAAa,CAAC,eAAe,CAAC;QAEjE,IAAI,YAAY,EAAE;YAChB,YAAY,CAAC,SAAS,GAAG,WAAW,CAAC,cAAc,CAAC,KAAK,CAAC;;AAG5D,QAAA,SAAS,CAAC,KAAK,CAAC,KAAK,CAAC;AAEtB,QAAA,OAAO,KAAK;;AAIhB;;;;"}

package/index.d.ts

@@ -0,0 +1,4 @@
+export * from './lib/providers/identity.provider';
+export * from './lib/guards/auth.guard';
+export * from './lib/guards/auth-callback.guard';
+export * from './lib/types/global-types';

package/lib/guards/auth-callback.guard.d.ts

@@ -0,0 +1,2 @@
+import { CanActivateFn } from '@angular/router';
+export declare const IDENTITY_AUTH_CALLBACK_GUARD: CanActivateFn;

package/lib/guards/auth.guard.d.ts

@@ -0,0 +1,2 @@
+import { CanActivateFn } from '@angular/router';
+export declare const IDENTITY_AUTH_GUARD: CanActivateFn;

package/lib/helpers/error.helper.d.ts

@@ -0,0 +1,4 @@
+export declare class ErrorHelper {
+    static throw: (error: unknown) => import("rxjs").Observable<never>;
+    static extractMessage(error: unknown): string;
+}

package/lib/helpers/log.helper.d.ts

@@ -0,0 +1,10 @@
+import { IdentityOptions } from '../types/global-types';
+export declare class LogHelper {
+    static options?: IdentityOptions;
+    private static readonly prefix;
+    static log(...args: unknown[]): void;
+    static warn(...args: unknown[]): void;
+    static groupStart(...data: unknown[]): void;
+    static groupEnd(): void;
+    static error(...args: unknown[]): void;
+}

package/lib/helpers/request.helper.d.ts

@@ -0,0 +1,11 @@
+import { HttpRequest } from '@angular/common/http';
+import { IdentityOptions, IdentityToken } from '../types/global-types';
+import { Injector } from '@angular/core';
+export declare class RequestHelper {
+    static options?: IdentityOptions;
+    static isIdentityEndpointRequest(request: HttpRequest<unknown>): boolean;
+    static isAuthorizedRequest(request: HttpRequest<unknown>): boolean;
+    static isAuthorizationError(error: unknown): boolean;
+    static attachAuthorizationHeader(request: HttpRequest<unknown>, accessToken: IdentityToken): HttpRequest<unknown>;
+    static onAuthorizationError(error: unknown, injector: Injector): import("rxjs").Observable<never>;
+}

package/lib/helpers/token.helper.d.ts

@@ -0,0 +1,5 @@
+import { JwtPayload } from 'jwt-decode';
+export declare class TokenHelper {
+    static getPayload<T extends JwtPayload>(token: string, verifyClaims?: Partial<JwtPayload>, threshold?: number): T;
+    private static isExpired;
+}

package/lib/interceptors/request.interceptor.d.ts

@@ -0,0 +1,3 @@
+import { HttpEvent, HttpHandlerFn, HttpRequest } from '@angular/common/http';
+import { Observable } from 'rxjs';
+export declare function requestInterceptor(request: HttpRequest<unknown>, next: HttpHandlerFn): Observable<HttpEvent<unknown>>;

package/lib/interceptors/response.interceptor.d.ts

@@ -0,0 +1,3 @@
+import { HttpEvent, HttpHandlerFn, HttpRequest } from '@angular/common/http';
+import { Observable } from 'rxjs';
+export declare function responseInterceptor(request: HttpRequest<unknown>, next: HttpHandlerFn): Observable<HttpEvent<unknown>>;

package/lib/providers/identity.provider.d.ts

@@ -0,0 +1,5 @@
+import { IdentityOptions } from '../types/global-types';
+export declare function provideIdentity(options: IdentityOptions): (import("@angular/core").EnvironmentProviders | {
+    provide: import("@angular/core").InjectionToken<IdentityOptions>;
+    useValue: IdentityOptions;
+})[];

package/lib/services/identity.service.d.ts

@@ -0,0 +1,12 @@
+import { Observable } from 'rxjs';
+import { IdentityToken } from '../types/global-types';
+import * as i0 from "@angular/core";
+export declare class IdentityService {
+    private readonly tokenService;
+    private readonly httpClient;
+    private readonly options;
+    isAuthenticated(caller: string): Observable<IdentityToken>;
+    refreshTokens(caller: string): Observable<IdentityToken>;
+    static ɵfac: i0.ɵɵFactoryDeclaration<IdentityService, never>;
+    static ɵprov: i0.ɵɵInjectableDeclaration<IdentityService>;
+}

package/lib/services/token.service.d.ts

@@ -0,0 +1,17 @@
+import { Nullable } from '../types/internal-types';
+import { IdentityToken } from '../types/global-types';
+import * as i0 from "@angular/core";
+export declare class TokenService {
+    private accessToken;
+    private refreshToken;
+    private readonly options;
+    setAccessToken(token: unknown): Nullable<IdentityToken>;
+    setRefreshToken(token: unknown): Nullable<IdentityToken>;
+    getAccessToken(): Nullable<IdentityToken>;
+    getRefreshToken(): Nullable<IdentityToken>;
+    private setToken;
+    private getToken;
+    private wrapToken;
+    static ɵfac: i0.ɵɵFactoryDeclaration<TokenService, never>;
+    static ɵprov: i0.ɵɵInjectableDeclaration<TokenService>;
+}

package/lib/types/global-types.d.ts

@@ -0,0 +1,17 @@
+import { JwtPayload } from 'jwt-decode';
+import { Injector } from '@angular/core';
+import { HttpRequest } from '@angular/common/http';
+export type IdentityToken = {
+    token: string;
+    payload: JwtPayload;
+};
+export type IdentityOptions = {
+    frontendUrl: string;
+    backendUrl: string;
+    application: string;
+    refreshTokenOnAuthError?: boolean;
+    apiVersion?: number;
+    debugMode?: boolean;
+    requestFilter?: (request: HttpRequest<unknown>) => boolean;
+    onAuthorizationError?: (error: unknown, injector: Injector) => void;
+};

package/lib/types/internal-consts.d.ts

@@ -0,0 +1,3 @@
+import { InjectionToken } from '@angular/core';
+import { IdentityOptions } from './global-types';
+export declare const IDENTITY_OPTIONS: InjectionToken<IdentityOptions>;

package/lib/types/internal-enums.d.ts

@@ -0,0 +1,4 @@
+export declare const enum TokenKey {
+    accessToken = "IDMS_AccessToken",
+    refreshToken = "IDMS_RefreshToken"
+}

package/lib/types/internal-types.d.ts

@@ -0,0 +1,12 @@
+import { JwtPayload } from 'jwt-decode';
+export type Nullable<T> = T | null;
+export type Maybe<T> = T | undefined;
+export type GenericCollection<T = unknown, K extends string = string> = Record<K, T>;
+export type JwtClaim = keyof JwtPayload;
+export type RefreshTokenResponse = {
+    access_token: string;
+    refresh_token: string;
+    token_type: string;
+    expires_in: string;
+    refresh_token_expires_in: string;
+};

package/package.json

@@ -0,0 +1,31 @@
+{
+  "name": "@ascentgl/ads-identity",
+  "version": "0.0.2",
+  "peerDependencies": {
+    "@ascentgl/ads-store": ">=0.9.5",
+    "jwt-decode": ">=4.0.0"
+  },
+  "description": "This library was generated with [Nx](https://nx.dev).",
+  "main": "jest.config.ts",
+  "repository": {
+    "type": "git",
+    "url": "https://aoddevproj@dev.azure.com/aoddevproj/Ascent_Design_System/_git/Ascent_Design_System"
+  },
+  "author": "Kirill Krasnobayev",
+  "license": "ISC",
+  "module": "fesm2022/ascentgl-ads-identity.mjs",
+  "typings": "index.d.ts",
+  "exports": {
+    "./package.json": {
+      "default": "./package.json"
+    },
+    ".": {
+      "types": "./index.d.ts",
+      "default": "./fesm2022/ascentgl-ads-identity.mjs"
+    }
+  },
+  "sideEffects": false,
+  "dependencies": {
+    "tslib": "^2.3.0"
+  }
+}