@capgo/capacitor-social-login 8.1.1 → 8.2.1

package/dist/esm/oauth2-provider.js

@@ -0,0 +1,444 @@
+var __rest = (this && this.__rest) || function (s, e) {
+    var t = {};
+    for (var p in s) if (Object.prototype.hasOwnProperty.call(s, p) && e.indexOf(p) < 0)
+        t[p] = s[p];
+    if (s != null && typeof Object.getOwnPropertySymbols === "function")
+        for (var i = 0, p = Object.getOwnPropertySymbols(s); i < p.length; i++) {
+            if (e.indexOf(p[i]) < 0 && Object.prototype.propertyIsEnumerable.call(s, p[i]))
+                t[p[i]] = s[p[i]];
+        }
+    return t;
+};
+import { BaseSocialLogin } from './base';
+/**
+ * OAuth2 Social Login Manager
+ * Supports multiple OAuth2 provider configurations
+ */
+export class OAuth2SocialLogin extends BaseSocialLogin {
+    constructor() {
+        super(...arguments);
+        this.providers = new Map();
+        this.TOKENS_KEY_PREFIX = 'capgo_social_login_oauth2_tokens_';
+        this.STATE_PREFIX = 'capgo_social_login_oauth2_state_';
+    }
+    /**
+     * Initialize multiple OAuth2 providers
+     */
+    async initializeProviders(configs) {
+        var _a, _b, _c, _d;
+        for (const [providerId, config] of Object.entries(configs)) {
+            if (!config.appId || !config.authorizationBaseUrl || !config.redirectUrl) {
+                throw new Error(`OAuth2 provider '${providerId}' requires appId, authorizationBaseUrl, and redirectUrl`);
+            }
+            const internalConfig = Object.assign(Object.assign({}, config), { responseType: (_a = config.responseType) !== null && _a !== void 0 ? _a : 'code', pkceEnabled: (_b = config.pkceEnabled) !== null && _b !== void 0 ? _b : true, scope: (_c = config.scope) !== null && _c !== void 0 ? _c : '', logsEnabled: (_d = config.logsEnabled) !== null && _d !== void 0 ? _d : false });
+            this.providers.set(providerId, internalConfig);
+            if (internalConfig.logsEnabled) {
+                console.log(`[OAuth2:${providerId}] Initialized with config:`, {
+                    appId: config.appId,
+                    authorizationBaseUrl: config.authorizationBaseUrl,
+                    redirectUrl: config.redirectUrl,
+                    responseType: internalConfig.responseType,
+                    pkceEnabled: internalConfig.pkceEnabled,
+                });
+            }
+        }
+    }
+    getProvider(providerId) {
+        const config = this.providers.get(providerId);
+        if (!config) {
+            throw new Error(`OAuth2 provider '${providerId}' not configured. Call initialize() first.`);
+        }
+        return config;
+    }
+    getTokensKey(providerId) {
+        return `${this.TOKENS_KEY_PREFIX}${providerId}`;
+    }
+    async login(options) {
+        var _a, _b, _c, _d;
+        const { providerId } = options;
+        const config = this.getProvider(providerId);
+        const redirectUri = (_a = options.redirectUrl) !== null && _a !== void 0 ? _a : config.redirectUrl;
+        const scope = (_b = options.scope) !== null && _b !== void 0 ? _b : config.scope;
+        const state = (_c = options.state) !== null && _c !== void 0 ? _c : this.generateState();
+        const codeVerifier = (_d = options.codeVerifier) !== null && _d !== void 0 ? _d : this.generateCodeVerifier();
+        // Build authorization URL
+        const params = new URLSearchParams({
+            response_type: config.responseType,
+            client_id: config.appId,
+            redirect_uri: redirectUri,
+            state,
+        });
+        if (scope) {
+            params.set('scope', scope);
+        }
+        // Add PKCE for code flow
+        if (config.responseType === 'code' && config.pkceEnabled) {
+            const codeChallenge = await this.generateCodeChallenge(codeVerifier);
+            params.set('code_challenge', codeChallenge);
+            params.set('code_challenge_method', 'S256');
+        }
+        // Add additional parameters from config
+        if (config.additionalParameters) {
+            for (const [key, value] of Object.entries(config.additionalParameters)) {
+                params.set(key, value);
+            }
+        }
+        // Add additional parameters from login options
+        if (options.additionalParameters) {
+            for (const [key, value] of Object.entries(options.additionalParameters)) {
+                params.set(key, value);
+            }
+        }
+        // Store pending login state
+        this.persistPendingLogin(state, {
+            providerId,
+            codeVerifier,
+            redirectUri,
+            scope,
+        });
+        localStorage.setItem(BaseSocialLogin.OAUTH_STATE_KEY, JSON.stringify({ provider: 'oauth2', providerId, state }));
+        const authUrl = `${config.authorizationBaseUrl}?${params.toString()}`;
+        if (config.logsEnabled) {
+            console.log(`[OAuth2:${providerId}] Opening authorization URL:`, authUrl);
+        }
+        // Open popup window
+        const width = 500;
+        const height = 650;
+        const left = window.screenX + (window.outerWidth - width) / 2;
+        const top = window.screenY + (window.outerHeight - height) / 2;
+        const popup = window.open(authUrl, 'OAuth2Login', `width=${width},height=${height},left=${left},top=${top},popup=1`);
+        return new Promise((resolve, reject) => {
+            if (!popup) {
+                reject(new Error('Unable to open login window. Please allow popups.'));
+                return;
+            }
+            const cleanup = (messageHandler, timeoutHandle, intervalHandle) => {
+                window.removeEventListener('message', messageHandler);
+                clearTimeout(timeoutHandle);
+                clearInterval(intervalHandle);
+            };
+            const messageHandler = (event) => {
+                var _a, _b, _c, _d, _e;
+                if (event.origin !== window.location.origin) {
+                    return;
+                }
+                if (((_a = event.data) === null || _a === void 0 ? void 0 : _a.type) === 'oauth-response') {
+                    if (((_b = event.data) === null || _b === void 0 ? void 0 : _b.provider) && event.data.provider !== 'oauth2') {
+                        return;
+                    }
+                    // Check providerId matches if present
+                    if (((_c = event.data) === null || _c === void 0 ? void 0 : _c.providerId) && event.data.providerId !== providerId) {
+                        return;
+                    }
+                    cleanup(messageHandler, timeoutHandle, popupClosedInterval);
+                    // eslint-disable-next-line @typescript-eslint/no-unused-vars
+                    const _f = event.data, { provider: _ignoredProvider, type: _ignoredType } = _f, payload = __rest(_f, ["provider", "type"]);
+                    resolve({
+                        provider: 'oauth2',
+                        result: payload,
+                    });
+                }
+                else if (((_d = event.data) === null || _d === void 0 ? void 0 : _d.type) === 'oauth-error') {
+                    if (((_e = event.data) === null || _e === void 0 ? void 0 : _e.provider) && event.data.provider !== 'oauth2') {
+                        return;
+                    }
+                    cleanup(messageHandler, timeoutHandle, popupClosedInterval);
+                    reject(new Error(event.data.error || 'OAuth2 login was cancelled.'));
+                }
+            };
+            window.addEventListener('message', messageHandler);
+            const timeoutHandle = window.setTimeout(() => {
+                window.removeEventListener('message', messageHandler);
+                popup.close();
+                reject(new Error('OAuth2 login timed out.'));
+            }, 300000);
+            const popupClosedInterval = window.setInterval(() => {
+                if (popup.closed) {
+                    window.removeEventListener('message', messageHandler);
+                    clearInterval(popupClosedInterval);
+                    clearTimeout(timeoutHandle);
+                    reject(new Error('OAuth2 login window was closed.'));
+                }
+            }, 1000);
+        });
+    }
+    async logout(providerId) {
+        const config = this.providers.get(providerId);
+        localStorage.removeItem(this.getTokensKey(providerId));
+        // If logout URL is configured, redirect to it
+        if (config === null || config === void 0 ? void 0 : config.logoutUrl) {
+            window.open(config.logoutUrl, '_blank');
+        }
+    }
+    async isLoggedIn(providerId) {
+        const tokens = this.getStoredTokens(providerId);
+        if (!tokens) {
+            return { isLoggedIn: false };
+        }
+        const isValid = tokens.expiresAt > Date.now();
+        if (!isValid) {
+            localStorage.removeItem(this.getTokensKey(providerId));
+        }
+        return { isLoggedIn: isValid };
+    }
+    async getAuthorizationCode(providerId) {
+        const tokens = this.getStoredTokens(providerId);
+        if (!tokens) {
+            throw new Error(`OAuth2 access token is not available for provider '${providerId}'.`);
+        }
+        return {
+            accessToken: tokens.accessToken,
+            jwt: tokens.idToken,
+        };
+    }
+    async refresh(providerId) {
+        const tokens = this.getStoredTokens(providerId);
+        if (!(tokens === null || tokens === void 0 ? void 0 : tokens.refreshToken)) {
+            throw new Error(`No OAuth2 refresh token is available for provider '${providerId}'. Include offline_access scope to receive one.`);
+        }
+        const config = this.getProvider(providerId);
+        if (!config.accessTokenEndpoint) {
+            throw new Error(`No accessTokenEndpoint configured for provider '${providerId}'.`);
+        }
+        await this.refreshWithRefreshToken(providerId, tokens.refreshToken);
+    }
+    async handleOAuthRedirect(url, expectedState) {
+        var _a, _b, _c, _d, _e;
+        // Check both query params and hash fragment
+        const params = new URLSearchParams(url.search);
+        const hashParams = new URLSearchParams(url.hash.slice(1));
+        // Merge params, hash takes priority (for implicit flow)
+        hashParams.forEach((value, key) => {
+            params.set(key, value);
+        });
+        const stateFromUrl = expectedState !== null && expectedState !== void 0 ? expectedState : params.get('state');
+        if (!stateFromUrl) {
+            return null;
+        }
+        const pending = this.consumePendingLogin(stateFromUrl);
+        if (!pending) {
+            localStorage.removeItem(BaseSocialLogin.OAUTH_STATE_KEY);
+            return { error: 'OAuth2 login session expired or state mismatch.' };
+        }
+        const { providerId } = pending;
+        const config = this.providers.get(providerId);
+        if (!config) {
+            localStorage.removeItem(BaseSocialLogin.OAUTH_STATE_KEY);
+            return { error: `OAuth2 provider '${providerId}' configuration not found.` };
+        }
+        const error = params.get('error');
+        if (error) {
+            localStorage.removeItem(BaseSocialLogin.OAUTH_STATE_KEY);
+            return { error: params.get('error_description') || error };
+        }
+        try {
+            let tokenResponse;
+            // Check response type
+            if (params.has('code')) {
+                // Authorization code flow
+                const code = params.get('code');
+                if (!code) {
+                    localStorage.removeItem(BaseSocialLogin.OAUTH_STATE_KEY);
+                    return { error: 'OAuth2 authorization code missing from redirect.' };
+                }
+                tokenResponse = await this.exchangeAuthorizationCode(providerId, code, pending);
+            }
+            else if (params.has('access_token')) {
+                // Implicit flow
+                tokenResponse = {
+                    access_token: params.get('access_token'),
+                    token_type: params.get('token_type') || 'bearer',
+                    expires_in: params.has('expires_in') ? parseInt(params.get('expires_in'), 10) : undefined,
+                    scope: params.get('scope') || undefined,
+                    id_token: params.get('id_token') || undefined,
+                };
+            }
+            else {
+                localStorage.removeItem(BaseSocialLogin.OAUTH_STATE_KEY);
+                return { error: 'No authorization code or access token in redirect.' };
+            }
+            const expiresAt = tokenResponse.expires_in ? Date.now() + tokenResponse.expires_in * 1000 : Date.now() + 3600000;
+            const scopeArray = (_b = (_a = tokenResponse.scope) === null || _a === void 0 ? void 0 : _a.split(' ').filter(Boolean)) !== null && _b !== void 0 ? _b : [];
+            // Fetch resource data if configured
+            let resourceData = null;
+            if (config.resourceUrl) {
+                resourceData = await this.fetchResource(providerId, tokenResponse.access_token);
+            }
+            this.persistTokens(providerId, {
+                accessToken: tokenResponse.access_token,
+                refreshToken: tokenResponse.refresh_token,
+                idToken: tokenResponse.id_token,
+                expiresAt,
+                scope: scopeArray,
+                tokenType: tokenResponse.token_type,
+            });
+            return {
+                provider: 'oauth2',
+                result: {
+                    providerId,
+                    accessToken: {
+                        token: tokenResponse.access_token,
+                        tokenType: tokenResponse.token_type,
+                        expires: new Date(expiresAt).toISOString(),
+                        refreshToken: tokenResponse.refresh_token,
+                    },
+                    idToken: (_c = tokenResponse.id_token) !== null && _c !== void 0 ? _c : null,
+                    refreshToken: (_d = tokenResponse.refresh_token) !== null && _d !== void 0 ? _d : null,
+                    resourceData,
+                    scope: scopeArray,
+                    tokenType: tokenResponse.token_type,
+                    expiresIn: (_e = tokenResponse.expires_in) !== null && _e !== void 0 ? _e : null,
+                },
+            };
+        }
+        catch (err) {
+            if (err instanceof Error) {
+                return { error: err.message };
+            }
+            return { error: 'OAuth2 login failed unexpectedly.' };
+        }
+        finally {
+            localStorage.removeItem(BaseSocialLogin.OAUTH_STATE_KEY);
+        }
+    }
+    async exchangeAuthorizationCode(providerId, code, pending) {
+        const config = this.getProvider(providerId);
+        if (!config.accessTokenEndpoint) {
+            throw new Error(`No accessTokenEndpoint configured for provider '${providerId}'.`);
+        }
+        const params = new URLSearchParams({
+            grant_type: 'authorization_code',
+            client_id: config.appId,
+            code,
+            redirect_uri: pending.redirectUri,
+        });
+        if (config.pkceEnabled) {
+            params.set('code_verifier', pending.codeVerifier);
+        }
+        if (config.logsEnabled) {
+            console.log(`[OAuth2:${providerId}] Exchanging code at:`, config.accessTokenEndpoint);
+        }
+        const response = await fetch(config.accessTokenEndpoint, {
+            method: 'POST',
+            headers: {
+                'Content-Type': 'application/x-www-form-urlencoded',
+            },
+            body: params.toString(),
+        });
+        if (!response.ok) {
+            const text = await response.text();
+            throw new Error(`OAuth2 token exchange failed (${response.status}): ${text}`);
+        }
+        return (await response.json());
+    }
+    async refreshWithRefreshToken(providerId, refreshToken) {
+        var _a, _b, _c;
+        const config = this.getProvider(providerId);
+        if (!config.accessTokenEndpoint) {
+            throw new Error(`No accessTokenEndpoint configured for provider '${providerId}'.`);
+        }
+        const params = new URLSearchParams({
+            grant_type: 'refresh_token',
+            refresh_token: refreshToken,
+            client_id: config.appId,
+        });
+        const response = await fetch(config.accessTokenEndpoint, {
+            method: 'POST',
+            headers: {
+                'Content-Type': 'application/x-www-form-urlencoded',
+            },
+            body: params.toString(),
+        });
+        if (!response.ok) {
+            const text = await response.text();
+            throw new Error(`OAuth2 refresh failed (${response.status}): ${text}`);
+        }
+        const tokens = (await response.json());
+        const expiresAt = tokens.expires_in ? Date.now() + tokens.expires_in * 1000 : Date.now() + 3600000;
+        const scopeArray = (_b = (_a = tokens.scope) === null || _a === void 0 ? void 0 : _a.split(' ').filter(Boolean)) !== null && _b !== void 0 ? _b : [];
+        this.persistTokens(providerId, {
+            accessToken: tokens.access_token,
+            refreshToken: (_c = tokens.refresh_token) !== null && _c !== void 0 ? _c : refreshToken,
+            idToken: tokens.id_token,
+            expiresAt,
+            scope: scopeArray,
+            tokenType: tokens.token_type,
+        });
+    }
+    async fetchResource(providerId, accessToken) {
+        const config = this.getProvider(providerId);
+        if (!config.resourceUrl) {
+            throw new Error(`No resourceUrl configured for provider '${providerId}'.`);
+        }
+        const headers = {
+            Authorization: `Bearer ${accessToken}`,
+        };
+        if (config.additionalResourceHeaders) {
+            Object.assign(headers, config.additionalResourceHeaders);
+        }
+        const response = await fetch(config.resourceUrl, {
+            headers,
+        });
+        if (!response.ok) {
+            const text = await response.text();
+            throw new Error(`Unable to fetch OAuth2 resource (${response.status}): ${text}`);
+        }
+        return (await response.json());
+    }
+    persistTokens(providerId, tokens) {
+        localStorage.setItem(this.getTokensKey(providerId), JSON.stringify(tokens));
+    }
+    getStoredTokens(providerId) {
+        const raw = localStorage.getItem(this.getTokensKey(providerId));
+        if (!raw) {
+            return null;
+        }
+        try {
+            return JSON.parse(raw);
+        }
+        catch (err) {
+            console.warn(`Failed to parse stored OAuth2 tokens for provider '${providerId}'`, err);
+            return null;
+        }
+    }
+    persistPendingLogin(state, payload) {
+        localStorage.setItem(`${this.STATE_PREFIX}${state}`, JSON.stringify(payload));
+    }
+    consumePendingLogin(state) {
+        const key = `${this.STATE_PREFIX}${state}`;
+        const raw = localStorage.getItem(key);
+        localStorage.removeItem(key);
+        if (!raw) {
+            return null;
+        }
+        try {
+            return JSON.parse(raw);
+        }
+        catch (err) {
+            console.warn('Failed to parse pending OAuth2 login payload', err);
+            return null;
+        }
+    }
+    generateState() {
+        return [...crypto.getRandomValues(new Uint8Array(16))].map((b) => b.toString(16).padStart(2, '0')).join('');
+    }
+    generateCodeVerifier() {
+        const array = new Uint8Array(64);
+        crypto.getRandomValues(array);
+        return Array.from(array)
+            .map((b) => 'abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789-._~'[b % 66])
+            .join('');
+    }
+    async generateCodeChallenge(codeVerifier) {
+        const encoder = new TextEncoder();
+        const data = encoder.encode(codeVerifier);
+        const digest = await crypto.subtle.digest('SHA-256', data);
+        return this.base64UrlEncode(new Uint8Array(digest));
+    }
+    base64UrlEncode(buffer) {
+        let binary = '';
+        buffer.forEach((b) => (binary += String.fromCharCode(b)));
+        return btoa(binary).replace(/\+/g, '-').replace(/\//g, '_').replace(/=+$/, '');
+    }
+}
+//# sourceMappingURL=oauth2-provider.js.map

package/dist/esm/oauth2-provider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth2-provider.js","sourceRoot":"","sources":["../../src/oauth2-provider.ts"],"names":[],"mappings":";;;;;;;;;;;AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,QAAQ,CAAC;AA0CzC;;;GAGG;AACH,MAAM,OAAO,iBAAkB,SAAQ,eAAe;IAAtD;;QACU,cAAS,GAAsC,IAAI,GAAG,EAAE,CAAC;QAChD,sBAAiB,GAAG,mCAAmC,CAAC;QACxD,iBAAY,GAAG,kCAAkC,CAAC;IA4frE,CAAC;IA1fC;;OAEG;IACH,KAAK,CAAC,mBAAmB,CAAC,OAA6C;;QACrE,KAAK,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;YAC3D,IAAI,CAAC,MAAM,CAAC,KAAK,IAAI,CAAC,MAAM,CAAC,oBAAoB,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;gBACzE,MAAM,IAAI,KAAK,CAAC,oBAAoB,UAAU,yDAAyD,CAAC,CAAC;YAC3G,CAAC;YAED,MAAM,cAAc,mCACf,MAAM,KACT,YAAY,EAAE,MAAA,MAAM,CAAC,YAAY,mCAAI,MAAM,EAC3C,WAAW,EAAE,MAAA,MAAM,CAAC,WAAW,mCAAI,IAAI,EACvC,KAAK,EAAE,MAAA,MAAM,CAAC,KAAK,mCAAI,EAAE,EACzB,WAAW,EAAE,MAAA,MAAM,CAAC,WAAW,mCAAI,KAAK,GACzC,CAAC;YAEF,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,UAAU,EAAE,cAAc,CAAC,CAAC;YAE/C,IAAI,cAAc,CAAC,WAAW,EAAE,CAAC;gBAC/B,OAAO,CAAC,GAAG,CAAC,WAAW,UAAU,4BAA4B,EAAE;oBAC7D,KAAK,EAAE,MAAM,CAAC,KAAK;oBACnB,oBAAoB,EAAE,MAAM,CAAC,oBAAoB;oBACjD,WAAW,EAAE,MAAM,CAAC,WAAW;oBAC/B,YAAY,EAAE,cAAc,CAAC,YAAY;oBACzC,WAAW,EAAE,cAAc,CAAC,WAAW;iBACxC,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAEO,WAAW,CAAC,UAAkB;QACpC,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAC9C,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,IAAI,KAAK,CAAC,oBAAoB,UAAU,4CAA4C,CAAC,CAAC;QAC9F,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAEO,YAAY,CAAC,UAAkB;QACrC,OAAO,GAAG,IAAI,CAAC,iBAAiB,GAAG,UAAU,EAAE,CAAC;IAClD,CAAC;IAED,KAAK,CAAC,KAAK,CACT,OAA2B;;QAE3B,MAAM,EAAE,UAAU,EAAE,GAAG,OAAO,CAAC;QAC/B,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC;QAE5C,MAAM,WAAW,GAAG,MAAA,OAAO,CAAC,WAAW,mCAAI,MAAM,CAAC,WAAW,CAAC;QAC9D,MAAM,KAAK,GAAG,MAAA,OAAO,CAAC,KAAK,mCAAI,MAAM,CAAC,KAAK,CAAC;QAC5C,MAAM,KAAK,GAAG,MAAA,OAAO,CAAC,KAAK,mCAAI,IAAI,CAAC,aAAa,EAAE,CAAC;QACpD,MAAM,YAAY,GAAG,MAAA,OAAO,CAAC,YAAY,mCAAI,IAAI,CAAC,oBAAoB,EAAE,CAAC;QAEzE,0BAA0B;QAC1B,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC;YACjC,aAAa,EAAE,MAAM,CAAC,YAAY;YAClC,SAAS,EAAE,MAAM,CAAC,KAAK;YACvB,YAAY,EAAE,WAAW;YACzB,KAAK;SACN,CAAC,CAAC;QAEH,IAAI,KAAK,EAAE,CAAC;YACV,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QAC7B,CAAC;QAED,yBAAyB;QACzB,IAAI,MAAM,CAAC,YAAY,KAAK,MAAM,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC;YACzD,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,qBAAqB,CAAC,YAAY,CAAC,CAAC;YACrE,MAAM,CAAC,GAAG,CAAC,gBAAgB,EAAE,aAAa,CAAC,CAAC;YAC5C,MAAM,CAAC,GAAG,CAAC,uBAAuB,EAAE,MAAM,CAAC,CAAC;QAC9C,CAAC;QAED,wCAAwC;QACxC,IAAI,MAAM,CAAC,oBAAoB,EAAE,CAAC;YAChC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,oBAAoB,CAAC,EAAE,CAAC;gBACvE,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YACzB,CAAC;QACH,CAAC;QAED,+CAA+C;QAC/C,IAAI,OAAO,CAAC,oBAAoB,EAAE,CAAC;YACjC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,oBAAoB,CAAC,EAAE,CAAC;gBACxE,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YACzB,CAAC;QACH,CAAC;QAED,4BAA4B;QAC5B,IAAI,CAAC,mBAAmB,CAAC,KAAK,EAAE;YAC9B,UAAU;YACV,YAAY;YACZ,WAAW;YACX,KAAK;SACN,CAAC,CAAC;QAEH,YAAY,CAAC,OAAO,CAAC,eAAe,CAAC,eAAe,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;QAEjH,MAAM,OAAO,GAAG,GAAG,MAAM,CAAC,oBAAoB,IAAI,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAC;QAEtE,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC;YACvB,OAAO,CAAC,GAAG,CAAC,WAAW,UAAU,8BAA8B,EAAE,OAAO,CAAC,CAAC;QAC5E,CAAC;QAED,oBAAoB;QACpB,MAAM,KAAK,GAAG,GAAG,CAAC;QAClB,MAAM,MAAM,GAAG,GAAG,CAAC;QACnB,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,GAAG,CAAC,MAAM,CAAC,UAAU,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC;QAC9D,MAAM,GAAG,GAAG,MAAM,CAAC,OAAO,GAAG,CAAC,MAAM,CAAC,WAAW,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;QAE/D,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CACvB,OAAO,EACP,aAAa,EACb,SAAS,KAAK,WAAW,MAAM,SAAS,IAAI,QAAQ,GAAG,UAAU,CAClE,CAAC;QAEF,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACrC,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,MAAM,CAAC,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC,CAAC;gBACvE,OAAO;YACT,CAAC;YAED,MAAM,OAAO,GAAG,CACd,cAA6C,EAC7C,aAAqB,EACrB,cAAsB,EACtB,EAAE;gBACF,MAAM,CAAC,mBAAmB,CAAC,SAAS,EAAE,cAAc,CAAC,CAAC;gBACtD,YAAY,CAAC,aAAa,CAAC,CAAC;gBAC5B,aAAa,CAAC,cAAc,CAAC,CAAC;YAChC,CAAC,CAAC;YAEF,MAAM,cAAc,GAAG,CAAC,KAAmB,EAAE,EAAE;;gBAC7C,IAAI,KAAK,CAAC,MAAM,KAAK,MAAM,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;oBAC5C,OAAO;gBACT,CAAC;gBACD,IAAI,CAAA,MAAA,KAAK,CAAC,IAAI,0CAAE,IAAI,MAAK,gBAAgB,EAAE,CAAC;oBAC1C,IAAI,CAAA,MAAA,KAAK,CAAC,IAAI,0CAAE,QAAQ,KAAI,KAAK,CAAC,IAAI,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;wBAC7D,OAAO;oBACT,CAAC;oBACD,sCAAsC;oBACtC,IAAI,CAAA,MAAA,KAAK,CAAC,IAAI,0CAAE,UAAU,KAAI,KAAK,CAAC,IAAI,CAAC,UAAU,KAAK,UAAU,EAAE,CAAC;wBACnE,OAAO;oBACT,CAAC;oBACD,OAAO,CAAC,cAAc,EAAE,aAAa,EAAE,mBAAmB,CAAC,CAAC;oBAC5D,6DAA6D;oBAC7D,MAAM,KAIF,KAAK,CAAC,IAGT,EAPK,EACJ,QAAQ,EAAE,gBAAgB,EAC1B,IAAI,EAAE,YAAY,OAKnB,EAJI,OAAO,cAHN,oBAIL,CAGA,CAAC;oBACF,OAAO,CAAC;wBACN,QAAQ,EAAE,QAAa;wBACvB,MAAM,EAAE,OAAiC;qBACS,CAAC,CAAC;gBACxD,CAAC;qBAAM,IAAI,CAAA,MAAA,KAAK,CAAC,IAAI,0CAAE,IAAI,MAAK,aAAa,EAAE,CAAC;oBAC9C,IAAI,CAAA,MAAA,KAAK,CAAC,IAAI,0CAAE,QAAQ,KAAI,KAAK,CAAC,IAAI,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;wBAC7D,OAAO;oBACT,CAAC;oBACD,OAAO,CAAC,cAAc,EAAE,aAAa,EAAE,mBAAmB,CAAC,CAAC;oBAC5D,MAAM,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,IAAI,6BAA6B,CAAC,CAAC,CAAC;gBACvE,CAAC;YACH,CAAC,CAAC;YAEF,MAAM,CAAC,gBAAgB,CAAC,SAAS,EAAE,cAAc,CAAC,CAAC;YAEnD,MAAM,aAAa,GAAG,MAAM,CAAC,UAAU,CAAC,GAAG,EAAE;gBAC3C,MAAM,CAAC,mBAAmB,CAAC,SAAS,EAAE,cAAc,CAAC,CAAC;gBACtD,KAAK,CAAC,KAAK,EAAE,CAAC;gBACd,MAAM,CAAC,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC,CAAC;YAC/C,CAAC,EAAE,MAAM,CAAC,CAAC;YAEX,MAAM,mBAAmB,GAAG,MAAM,CAAC,WAAW,CAAC,GAAG,EAAE;gBAClD,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;oBACjB,MAAM,CAAC,mBAAmB,CAAC,SAAS,EAAE,cAAc,CAAC,CAAC;oBACtD,aAAa,CAAC,mBAAmB,CAAC,CAAC;oBACnC,YAAY,CAAC,aAAa,CAAC,CAAC;oBAC5B,MAAM,CAAC,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC,CAAC;gBACvD,CAAC;YACH,CAAC,EAAE,IAAI,CAAC,CAAC;QACX,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,UAAkB;QAC7B,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAC9C,YAAY,CAAC,UAAU,CAAC,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,CAAC,CAAC;QAEvD,8CAA8C;QAC9C,IAAI,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,SAAS,EAAE,CAAC;YACtB,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;QAC1C,CAAC;IACH,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,UAAkB;QACjC,MAAM,MAAM,GAAG,IAAI,CAAC,eAAe,CAAC,UAAU,CAAC,CAAC;QAChD,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC;QAC/B,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC9C,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,YAAY,CAAC,UAAU,CAAC,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,CAAC,CAAC;QACzD,CAAC;QACD,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC;IACjC,CAAC;IAED,KAAK,CAAC,oBAAoB,CAAC,UAAkB;QAC3C,MAAM,MAAM,GAAG,IAAI,CAAC,eAAe,CAAC,UAAU,CAAC,CAAC;QAChD,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,IAAI,KAAK,CAAC,sDAAsD,UAAU,IAAI,CAAC,CAAC;QACxF,CAAC;QACD,OAAO;YACL,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,GAAG,EAAE,MAAM,CAAC,OAAO;SACpB,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,UAAkB;QAC9B,MAAM,MAAM,GAAG,IAAI,CAAC,eAAe,CAAC,UAAU,CAAC,CAAC;QAChD,IAAI,CAAC,CAAA,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,YAAY,CAAA,EAAE,CAAC;YAC1B,MAAM,IAAI,KAAK,CACb,sDAAsD,UAAU,iDAAiD,CAClH,CAAC;QACJ,CAAC;QAED,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC;QAC5C,IAAI,CAAC,MAAM,CAAC,mBAAmB,EAAE,CAAC;YAChC,MAAM,IAAI,KAAK,CAAC,mDAAmD,UAAU,IAAI,CAAC,CAAC;QACrF,CAAC;QAED,MAAM,IAAI,CAAC,uBAAuB,CAAC,UAAU,EAAE,MAAM,CAAC,YAAY,CAAC,CAAC;IACtE,CAAC;IAED,KAAK,CAAC,mBAAmB,CAAC,GAAQ,EAAE,aAAsB;;QACxD,4CAA4C;QAC5C,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAC/C,MAAM,UAAU,GAAG,IAAI,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QAE1D,wDAAwD;QACxD,UAAU,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;YAChC,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QACzB,CAAC,CAAC,CAAC;QAEH,MAAM,YAAY,GAAG,aAAa,aAAb,aAAa,cAAb,aAAa,GAAI,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAC1D,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,CAAC,mBAAmB,CAAC,YAAY,CAAC,CAAC;QACvD,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,YAAY,CAAC,UAAU,CAAC,eAAe,CAAC,eAAe,CAAC,CAAC;YACzD,OAAO,EAAE,KAAK,EAAE,iDAAiD,EAAE,CAAC;QACtE,CAAC;QAED,MAAM,EAAE,UAAU,EAAE,GAAG,OAAO,CAAC;QAC/B,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAC9C,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,YAAY,CAAC,UAAU,CAAC,eAAe,CAAC,eAAe,CAAC,CAAC;YACzD,OAAO,EAAE,KAAK,EAAE,oBAAoB,UAAU,4BAA4B,EAAE,CAAC;QAC/E,CAAC;QAED,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAClC,IAAI,KAAK,EAAE,CAAC;YACV,YAAY,CAAC,UAAU,CAAC,eAAe,CAAC,eAAe,CAAC,CAAC;YACzD,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,mBAAmB,CAAC,IAAI,KAAK,EAAE,CAAC;QAC7D,CAAC;QAED,IAAI,CAAC;YACH,IAAI,aAAkC,CAAC;YAEvC,sBAAsB;YACtB,IAAI,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;gBACvB,0BAA0B;gBAC1B,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;gBAChC,IAAI,CAAC,IAAI,EAAE,CAAC;oBACV,YAAY,CAAC,UAAU,CAAC,eAAe,CAAC,eAAe,CAAC,CAAC;oBACzD,OAAO,EAAE,KAAK,EAAE,kDAAkD,EAAE,CAAC;gBACvE,CAAC;gBACD,aAAa,GAAG,MAAM,IAAI,CAAC,yBAAyB,CAAC,UAAU,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;YAClF,CAAC;iBAAM,IAAI,MAAM,CAAC,GAAG,CAAC,cAAc,CAAC,EAAE,CAAC;gBACtC,gBAAgB;gBAChB,aAAa,GAAG;oBACd,YAAY,EAAE,MAAM,CAAC,GAAG,CAAC,cAAc,CAAE;oBACzC,UAAU,EAAE,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,QAAQ;oBAChD,UAAU,EAAE,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,YAAY,CAAE,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS;oBAC1F,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,SAAS;oBACvC,QAAQ,EAAE,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,SAAS;iBAC9C,CAAC;YACJ,CAAC;iBAAM,CAAC;gBACN,YAAY,CAAC,UAAU,CAAC,eAAe,CAAC,eAAe,CAAC,CAAC;gBACzD,OAAO,EAAE,KAAK,EAAE,oDAAoD,EAAE,CAAC;YACzE,CAAC;YAED,MAAM,SAAS,GAAG,aAAa,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,aAAa,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC;YACjH,MAAM,UAAU,GAAG,MAAA,MAAA,aAAa,CAAC,KAAK,0CAAE,KAAK,CAAC,GAAG,EAAE,MAAM,CAAC,OAAO,CAAC,mCAAI,EAAE,CAAC;YAEzE,oCAAoC;YACpC,IAAI,YAAY,GAAmC,IAAI,CAAC;YACxD,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC;gBACvB,YAAY,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,UAAU,EAAE,aAAa,CAAC,YAAY,CAAC,CAAC;YAClF,CAAC;YAED,IAAI,CAAC,aAAa,CAAC,UAAU,EAAE;gBAC7B,WAAW,EAAE,aAAa,CAAC,YAAY;gBACvC,YAAY,EAAE,aAAa,CAAC,aAAa;gBACzC,OAAO,EAAE,aAAa,CAAC,QAAQ;gBAC/B,SAAS;gBACT,KAAK,EAAE,UAAU;gBACjB,SAAS,EAAE,aAAa,CAAC,UAAU;aACpC,CAAC,CAAC;YAEH,OAAO;gBACL,QAAQ,EAAE,QAAQ;gBAClB,MAAM,EAAE;oBACN,UAAU;oBACV,WAAW,EAAE;wBACX,KAAK,EAAE,aAAa,CAAC,YAAY;wBACjC,SAAS,EAAE,aAAa,CAAC,UAAU;wBACnC,OAAO,EAAE,IAAI,IAAI,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE;wBAC1C,YAAY,EAAE,aAAa,CAAC,aAAa;qBAC1C;oBACD,OAAO,EAAE,MAAA,aAAa,CAAC,QAAQ,mCAAI,IAAI;oBACvC,YAAY,EAAE,MAAA,aAAa,CAAC,aAAa,mCAAI,IAAI;oBACjD,YAAY;oBACZ,KAAK,EAAE,UAAU;oBACjB,SAAS,EAAE,aAAa,CAAC,UAAU;oBACnC,SAAS,EAAE,MAAA,aAAa,CAAC,UAAU,mCAAI,IAAI;iBAC5C;aACF,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG,YAAY,KAAK,EAAE,CAAC;gBACzB,OAAO,EAAE,KAAK,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC;YAChC,CAAC;YACD,OAAO,EAAE,KAAK,EAAE,mCAAmC,EAAE,CAAC;QACxD,CAAC;gBAAS,CAAC;YACT,YAAY,CAAC,UAAU,CAAC,eAAe,CAAC,eAAe,CAAC,CAAC;QAC3D,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,yBAAyB,CACrC,UAAkB,EAClB,IAAY,EACZ,OAA2B;QAE3B,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC;QAC5C,IAAI,CAAC,MAAM,CAAC,mBAAmB,EAAE,CAAC;YAChC,MAAM,IAAI,KAAK,CAAC,mDAAmD,UAAU,IAAI,CAAC,CAAC;QACrF,CAAC;QAED,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC;YACjC,UAAU,EAAE,oBAAoB;YAChC,SAAS,EAAE,MAAM,CAAC,KAAK;YACvB,IAAI;YACJ,YAAY,EAAE,OAAO,CAAC,WAAW;SAClC,CAAC,CAAC;QAEH,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC;YACvB,MAAM,CAAC,GAAG,CAAC,eAAe,EAAE,OAAO,CAAC,YAAY,CAAC,CAAC;QACpD,CAAC;QAED,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC;YACvB,OAAO,CAAC,GAAG,CAAC,WAAW,UAAU,uBAAuB,EAAE,MAAM,CAAC,mBAAmB,CAAC,CAAC;QACxF,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,mBAAmB,EAAE;YACvD,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,cAAc,EAAE,mCAAmC;aACpD;YACD,IAAI,EAAE,MAAM,CAAC,QAAQ,EAAE;SACxB,CAAC,CAAC;QAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;YACnC,MAAM,IAAI,KAAK,CAAC,iCAAiC,QAAQ,CAAC,MAAM,MAAM,IAAI,EAAE,CAAC,CAAC;QAChF,CAAC;QAED,OAAO,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAwB,CAAC;IACxD,CAAC;IAEO,KAAK,CAAC,uBAAuB,CAAC,UAAkB,EAAE,YAAoB;;QAC5E,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC;QAC5C,IAAI,CAAC,MAAM,CAAC,mBAAmB,EAAE,CAAC;YAChC,MAAM,IAAI,KAAK,CAAC,mDAAmD,UAAU,IAAI,CAAC,CAAC;QACrF,CAAC;QAED,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC;YACjC,UAAU,EAAE,eAAe;YAC3B,aAAa,EAAE,YAAY;YAC3B,SAAS,EAAE,MAAM,CAAC,KAAK;SACxB,CAAC,CAAC;QAEH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,mBAAmB,EAAE;YACvD,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,cAAc,EAAE,mCAAmC;aACpD;YACD,IAAI,EAAE,MAAM,CAAC,QAAQ,EAAE;SACxB,CAAC,CAAC;QAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;YACnC,MAAM,IAAI,KAAK,CAAC,0BAA0B,QAAQ,CAAC,MAAM,MAAM,IAAI,EAAE,CAAC,CAAC;QACzE,CAAC;QAED,MAAM,MAAM,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAwB,CAAC;QAC9D,MAAM,SAAS,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC;QACnG,MAAM,UAAU,GAAG,MAAA,MAAA,MAAM,CAAC,KAAK,0CAAE,KAAK,CAAC,GAAG,EAAE,MAAM,CAAC,OAAO,CAAC,mCAAI,EAAE,CAAC;QAElE,IAAI,CAAC,aAAa,CAAC,UAAU,EAAE;YAC7B,WAAW,EAAE,MAAM,CAAC,YAAY;YAChC,YAAY,EAAE,MAAA,MAAM,CAAC,aAAa,mCAAI,YAAY;YAClD,OAAO,EAAE,MAAM,CAAC,QAAQ;YACxB,SAAS;YACT,KAAK,EAAE,UAAU;YACjB,SAAS,EAAE,MAAM,CAAC,UAAU;SAC7B,CAAC,CAAC;IACL,CAAC;IAEO,KAAK,CAAC,aAAa,CAAC,UAAkB,EAAE,WAAmB;QACjE,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC;QAC5C,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;YACxB,MAAM,IAAI,KAAK,CAAC,2CAA2C,UAAU,IAAI,CAAC,CAAC;QAC7E,CAAC;QAED,MAAM,OAAO,GAA2B;YACtC,aAAa,EAAE,UAAU,WAAW,EAAE;SACvC,CAAC;QAEF,IAAI,MAAM,CAAC,yBAAyB,EAAE,CAAC;YACrC,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,yBAAyB,CAAC,CAAC;QAC3D,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,WAAW,EAAE;YAC/C,OAAO;SACR,CAAC,CAAC;QAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;YACnC,MAAM,IAAI,KAAK,CAAC,oCAAoC,QAAQ,CAAC,MAAM,MAAM,IAAI,EAAE,CAAC,CAAC;QACnF,CAAC;QAED,OAAO,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAA4B,CAAC;IAC5D,CAAC;IAEO,aAAa,CAAC,UAAkB,EAAE,MAA0B;QAClE,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;IAC9E,CAAC;IAEO,eAAe,CAAC,UAAkB;QACxC,MAAM,GAAG,GAAG,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,CAAC,CAAC;QAChE,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAuB,CAAC;QAC/C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,IAAI,CAAC,sDAAsD,UAAU,GAAG,EAAE,GAAG,CAAC,CAAC;YACvF,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAEO,mBAAmB,CAAC,KAAa,EAAE,OAA2B;QACpE,YAAY,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC,YAAY,GAAG,KAAK,EAAE,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;IAChF,CAAC;IAEO,mBAAmB,CAAC,KAAa;QACvC,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,YAAY,GAAG,KAAK,EAAE,CAAC;QAC3C,MAAM,GAAG,GAAG,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACtC,YAAY,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;QAC7B,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAuB,CAAC;QAC/C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,IAAI,CAAC,8CAA8C,EAAE,GAAG,CAAC,CAAC;YAClE,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAEO,aAAa;QACnB,OAAO,CAAC,GAAG,MAAM,CAAC,eAAe,CAAC,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC9G,CAAC;IAEO,oBAAoB;QAC1B,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC;QACjC,MAAM,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;QAC9B,OAAO,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC;aACrB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,oEAAoE,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;aACxF,IAAI,CAAC,EAAE,CAAC,CAAC;IACd,CAAC;IAEO,KAAK,CAAC,qBAAqB,CAAC,YAAoB;QACtD,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;QAClC,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;QAC1C,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;QAC3D,OAAO,IAAI,CAAC,eAAe,CAAC,IAAI,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC;IACtD,CAAC;IAEO,eAAe,CAAC,MAAkB;QACxC,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,MAAM,IAAI,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC1D,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACjF,CAAC;CACF","sourcesContent":["import { BaseSocialLogin } from './base';\nimport type {\n  AuthorizationCode,\n  LoginResult,\n  OAuth2LoginOptions,\n  OAuth2LoginResponse,\n  OAuth2ProviderConfig,\n  ProviderResponseMap,\n} from './definitions';\n\ninterface OAuth2TokenResponse {\n  token_type: string;\n  expires_in?: number;\n  access_token: string;\n  scope?: string;\n  refresh_token?: string;\n  id_token?: string;\n}\n\ninterface OAuth2PendingLogin {\n  providerId: string;\n  codeVerifier: string;\n  redirectUri: string;\n  scope: string;\n}\n\ninterface OAuth2StoredTokens {\n  accessToken: string;\n  refreshToken?: string;\n  idToken?: string;\n  expiresAt: number;\n  scope: string[];\n  tokenType: string;\n}\n\ninterface OAuth2ConfigInternal extends OAuth2ProviderConfig {\n  responseType: 'code' | 'token';\n  pkceEnabled: boolean;\n  scope: string;\n  logsEnabled: boolean;\n}\n\n/**\n * OAuth2 Social Login Manager\n * Supports multiple OAuth2 provider configurations\n */\nexport class OAuth2SocialLogin extends BaseSocialLogin {\n  private providers: Map<string, OAuth2ConfigInternal> = new Map();\n  private readonly TOKENS_KEY_PREFIX = 'capgo_social_login_oauth2_tokens_';\n  private readonly STATE_PREFIX = 'capgo_social_login_oauth2_state_';\n\n  /**\n   * Initialize multiple OAuth2 providers\n   */\n  async initializeProviders(configs: Record<string, OAuth2ProviderConfig>): Promise<void> {\n    for (const [providerId, config] of Object.entries(configs)) {\n      if (!config.appId || !config.authorizationBaseUrl || !config.redirectUrl) {\n        throw new Error(`OAuth2 provider '${providerId}' requires appId, authorizationBaseUrl, and redirectUrl`);\n      }\n\n      const internalConfig: OAuth2ConfigInternal = {\n        ...config,\n        responseType: config.responseType ?? 'code',\n        pkceEnabled: config.pkceEnabled ?? true,\n        scope: config.scope ?? '',\n        logsEnabled: config.logsEnabled ?? false,\n      };\n\n      this.providers.set(providerId, internalConfig);\n\n      if (internalConfig.logsEnabled) {\n        console.log(`[OAuth2:${providerId}] Initialized with config:`, {\n          appId: config.appId,\n          authorizationBaseUrl: config.authorizationBaseUrl,\n          redirectUrl: config.redirectUrl,\n          responseType: internalConfig.responseType,\n          pkceEnabled: internalConfig.pkceEnabled,\n        });\n      }\n    }\n  }\n\n  private getProvider(providerId: string): OAuth2ConfigInternal {\n    const config = this.providers.get(providerId);\n    if (!config) {\n      throw new Error(`OAuth2 provider '${providerId}' not configured. Call initialize() first.`);\n    }\n    return config;\n  }\n\n  private getTokensKey(providerId: string): string {\n    return `${this.TOKENS_KEY_PREFIX}${providerId}`;\n  }\n\n  async login<T extends 'oauth2'>(\n    options: OAuth2LoginOptions,\n  ): Promise<{ provider: T; result: ProviderResponseMap[T] }> {\n    const { providerId } = options;\n    const config = this.getProvider(providerId);\n\n    const redirectUri = options.redirectUrl ?? config.redirectUrl;\n    const scope = options.scope ?? config.scope;\n    const state = options.state ?? this.generateState();\n    const codeVerifier = options.codeVerifier ?? this.generateCodeVerifier();\n\n    // Build authorization URL\n    const params = new URLSearchParams({\n      response_type: config.responseType,\n      client_id: config.appId,\n      redirect_uri: redirectUri,\n      state,\n    });\n\n    if (scope) {\n      params.set('scope', scope);\n    }\n\n    // Add PKCE for code flow\n    if (config.responseType === 'code' && config.pkceEnabled) {\n      const codeChallenge = await this.generateCodeChallenge(codeVerifier);\n      params.set('code_challenge', codeChallenge);\n      params.set('code_challenge_method', 'S256');\n    }\n\n    // Add additional parameters from config\n    if (config.additionalParameters) {\n      for (const [key, value] of Object.entries(config.additionalParameters)) {\n        params.set(key, value);\n      }\n    }\n\n    // Add additional parameters from login options\n    if (options.additionalParameters) {\n      for (const [key, value] of Object.entries(options.additionalParameters)) {\n        params.set(key, value);\n      }\n    }\n\n    // Store pending login state\n    this.persistPendingLogin(state, {\n      providerId,\n      codeVerifier,\n      redirectUri,\n      scope,\n    });\n\n    localStorage.setItem(BaseSocialLogin.OAUTH_STATE_KEY, JSON.stringify({ provider: 'oauth2', providerId, state }));\n\n    const authUrl = `${config.authorizationBaseUrl}?${params.toString()}`;\n\n    if (config.logsEnabled) {\n      console.log(`[OAuth2:${providerId}] Opening authorization URL:`, authUrl);\n    }\n\n    // Open popup window\n    const width = 500;\n    const height = 650;\n    const left = window.screenX + (window.outerWidth - width) / 2;\n    const top = window.screenY + (window.outerHeight - height) / 2;\n\n    const popup = window.open(\n      authUrl,\n      'OAuth2Login',\n      `width=${width},height=${height},left=${left},top=${top},popup=1`,\n    );\n\n    return new Promise((resolve, reject) => {\n      if (!popup) {\n        reject(new Error('Unable to open login window. Please allow popups.'));\n        return;\n      }\n\n      const cleanup = (\n        messageHandler: (event: MessageEvent) => void,\n        timeoutHandle: number,\n        intervalHandle: number,\n      ) => {\n        window.removeEventListener('message', messageHandler);\n        clearTimeout(timeoutHandle);\n        clearInterval(intervalHandle);\n      };\n\n      const messageHandler = (event: MessageEvent) => {\n        if (event.origin !== window.location.origin) {\n          return;\n        }\n        if (event.data?.type === 'oauth-response') {\n          if (event.data?.provider && event.data.provider !== 'oauth2') {\n            return;\n          }\n          // Check providerId matches if present\n          if (event.data?.providerId && event.data.providerId !== providerId) {\n            return;\n          }\n          cleanup(messageHandler, timeoutHandle, popupClosedInterval);\n          // eslint-disable-next-line @typescript-eslint/no-unused-vars\n          const {\n            provider: _ignoredProvider,\n            type: _ignoredType,\n            ...payload\n          } = event.data as OAuth2LoginResponse & {\n            provider?: string;\n            type?: string;\n          };\n          resolve({\n            provider: 'oauth2' as T,\n            result: payload as ProviderResponseMap[T],\n          } as { provider: T; result: ProviderResponseMap[T] });\n        } else if (event.data?.type === 'oauth-error') {\n          if (event.data?.provider && event.data.provider !== 'oauth2') {\n            return;\n          }\n          cleanup(messageHandler, timeoutHandle, popupClosedInterval);\n          reject(new Error(event.data.error || 'OAuth2 login was cancelled.'));\n        }\n      };\n\n      window.addEventListener('message', messageHandler);\n\n      const timeoutHandle = window.setTimeout(() => {\n        window.removeEventListener('message', messageHandler);\n        popup.close();\n        reject(new Error('OAuth2 login timed out.'));\n      }, 300000);\n\n      const popupClosedInterval = window.setInterval(() => {\n        if (popup.closed) {\n          window.removeEventListener('message', messageHandler);\n          clearInterval(popupClosedInterval);\n          clearTimeout(timeoutHandle);\n          reject(new Error('OAuth2 login window was closed.'));\n        }\n      }, 1000);\n    });\n  }\n\n  async logout(providerId: string): Promise<void> {\n    const config = this.providers.get(providerId);\n    localStorage.removeItem(this.getTokensKey(providerId));\n\n    // If logout URL is configured, redirect to it\n    if (config?.logoutUrl) {\n      window.open(config.logoutUrl, '_blank');\n    }\n  }\n\n  async isLoggedIn(providerId: string): Promise<{ isLoggedIn: boolean }> {\n    const tokens = this.getStoredTokens(providerId);\n    if (!tokens) {\n      return { isLoggedIn: false };\n    }\n    const isValid = tokens.expiresAt > Date.now();\n    if (!isValid) {\n      localStorage.removeItem(this.getTokensKey(providerId));\n    }\n    return { isLoggedIn: isValid };\n  }\n\n  async getAuthorizationCode(providerId: string): Promise<AuthorizationCode> {\n    const tokens = this.getStoredTokens(providerId);\n    if (!tokens) {\n      throw new Error(`OAuth2 access token is not available for provider '${providerId}'.`);\n    }\n    return {\n      accessToken: tokens.accessToken,\n      jwt: tokens.idToken,\n    };\n  }\n\n  async refresh(providerId: string): Promise<void> {\n    const tokens = this.getStoredTokens(providerId);\n    if (!tokens?.refreshToken) {\n      throw new Error(\n        `No OAuth2 refresh token is available for provider '${providerId}'. Include offline_access scope to receive one.`,\n      );\n    }\n\n    const config = this.getProvider(providerId);\n    if (!config.accessTokenEndpoint) {\n      throw new Error(`No accessTokenEndpoint configured for provider '${providerId}'.`);\n    }\n\n    await this.refreshWithRefreshToken(providerId, tokens.refreshToken);\n  }\n\n  async handleOAuthRedirect(url: URL, expectedState?: string): Promise<LoginResult | { error: string } | null> {\n    // Check both query params and hash fragment\n    const params = new URLSearchParams(url.search);\n    const hashParams = new URLSearchParams(url.hash.slice(1));\n\n    // Merge params, hash takes priority (for implicit flow)\n    hashParams.forEach((value, key) => {\n      params.set(key, value);\n    });\n\n    const stateFromUrl = expectedState ?? params.get('state');\n    if (!stateFromUrl) {\n      return null;\n    }\n\n    const pending = this.consumePendingLogin(stateFromUrl);\n    if (!pending) {\n      localStorage.removeItem(BaseSocialLogin.OAUTH_STATE_KEY);\n      return { error: 'OAuth2 login session expired or state mismatch.' };\n    }\n\n    const { providerId } = pending;\n    const config = this.providers.get(providerId);\n    if (!config) {\n      localStorage.removeItem(BaseSocialLogin.OAUTH_STATE_KEY);\n      return { error: `OAuth2 provider '${providerId}' configuration not found.` };\n    }\n\n    const error = params.get('error');\n    if (error) {\n      localStorage.removeItem(BaseSocialLogin.OAUTH_STATE_KEY);\n      return { error: params.get('error_description') || error };\n    }\n\n    try {\n      let tokenResponse: OAuth2TokenResponse;\n\n      // Check response type\n      if (params.has('code')) {\n        // Authorization code flow\n        const code = params.get('code');\n        if (!code) {\n          localStorage.removeItem(BaseSocialLogin.OAUTH_STATE_KEY);\n          return { error: 'OAuth2 authorization code missing from redirect.' };\n        }\n        tokenResponse = await this.exchangeAuthorizationCode(providerId, code, pending);\n      } else if (params.has('access_token')) {\n        // Implicit flow\n        tokenResponse = {\n          access_token: params.get('access_token')!,\n          token_type: params.get('token_type') || 'bearer',\n          expires_in: params.has('expires_in') ? parseInt(params.get('expires_in')!, 10) : undefined,\n          scope: params.get('scope') || undefined,\n          id_token: params.get('id_token') || undefined,\n        };\n      } else {\n        localStorage.removeItem(BaseSocialLogin.OAUTH_STATE_KEY);\n        return { error: 'No authorization code or access token in redirect.' };\n      }\n\n      const expiresAt = tokenResponse.expires_in ? Date.now() + tokenResponse.expires_in * 1000 : Date.now() + 3600000;\n      const scopeArray = tokenResponse.scope?.split(' ').filter(Boolean) ?? [];\n\n      // Fetch resource data if configured\n      let resourceData: Record<string, unknown> | null = null;\n      if (config.resourceUrl) {\n        resourceData = await this.fetchResource(providerId, tokenResponse.access_token);\n      }\n\n      this.persistTokens(providerId, {\n        accessToken: tokenResponse.access_token,\n        refreshToken: tokenResponse.refresh_token,\n        idToken: tokenResponse.id_token,\n        expiresAt,\n        scope: scopeArray,\n        tokenType: tokenResponse.token_type,\n      });\n\n      return {\n        provider: 'oauth2',\n        result: {\n          providerId,\n          accessToken: {\n            token: tokenResponse.access_token,\n            tokenType: tokenResponse.token_type,\n            expires: new Date(expiresAt).toISOString(),\n            refreshToken: tokenResponse.refresh_token,\n          },\n          idToken: tokenResponse.id_token ?? null,\n          refreshToken: tokenResponse.refresh_token ?? null,\n          resourceData,\n          scope: scopeArray,\n          tokenType: tokenResponse.token_type,\n          expiresIn: tokenResponse.expires_in ?? null,\n        },\n      };\n    } catch (err) {\n      if (err instanceof Error) {\n        return { error: err.message };\n      }\n      return { error: 'OAuth2 login failed unexpectedly.' };\n    } finally {\n      localStorage.removeItem(BaseSocialLogin.OAUTH_STATE_KEY);\n    }\n  }\n\n  private async exchangeAuthorizationCode(\n    providerId: string,\n    code: string,\n    pending: OAuth2PendingLogin,\n  ): Promise<OAuth2TokenResponse> {\n    const config = this.getProvider(providerId);\n    if (!config.accessTokenEndpoint) {\n      throw new Error(`No accessTokenEndpoint configured for provider '${providerId}'.`);\n    }\n\n    const params = new URLSearchParams({\n      grant_type: 'authorization_code',\n      client_id: config.appId,\n      code,\n      redirect_uri: pending.redirectUri,\n    });\n\n    if (config.pkceEnabled) {\n      params.set('code_verifier', pending.codeVerifier);\n    }\n\n    if (config.logsEnabled) {\n      console.log(`[OAuth2:${providerId}] Exchanging code at:`, config.accessTokenEndpoint);\n    }\n\n    const response = await fetch(config.accessTokenEndpoint, {\n      method: 'POST',\n      headers: {\n        'Content-Type': 'application/x-www-form-urlencoded',\n      },\n      body: params.toString(),\n    });\n\n    if (!response.ok) {\n      const text = await response.text();\n      throw new Error(`OAuth2 token exchange failed (${response.status}): ${text}`);\n    }\n\n    return (await response.json()) as OAuth2TokenResponse;\n  }\n\n  private async refreshWithRefreshToken(providerId: string, refreshToken: string): Promise<void> {\n    const config = this.getProvider(providerId);\n    if (!config.accessTokenEndpoint) {\n      throw new Error(`No accessTokenEndpoint configured for provider '${providerId}'.`);\n    }\n\n    const params = new URLSearchParams({\n      grant_type: 'refresh_token',\n      refresh_token: refreshToken,\n      client_id: config.appId,\n    });\n\n    const response = await fetch(config.accessTokenEndpoint, {\n      method: 'POST',\n      headers: {\n        'Content-Type': 'application/x-www-form-urlencoded',\n      },\n      body: params.toString(),\n    });\n\n    if (!response.ok) {\n      const text = await response.text();\n      throw new Error(`OAuth2 refresh failed (${response.status}): ${text}`);\n    }\n\n    const tokens = (await response.json()) as OAuth2TokenResponse;\n    const expiresAt = tokens.expires_in ? Date.now() + tokens.expires_in * 1000 : Date.now() + 3600000;\n    const scopeArray = tokens.scope?.split(' ').filter(Boolean) ?? [];\n\n    this.persistTokens(providerId, {\n      accessToken: tokens.access_token,\n      refreshToken: tokens.refresh_token ?? refreshToken,\n      idToken: tokens.id_token,\n      expiresAt,\n      scope: scopeArray,\n      tokenType: tokens.token_type,\n    });\n  }\n\n  private async fetchResource(providerId: string, accessToken: string): Promise<Record<string, unknown>> {\n    const config = this.getProvider(providerId);\n    if (!config.resourceUrl) {\n      throw new Error(`No resourceUrl configured for provider '${providerId}'.`);\n    }\n\n    const headers: Record<string, string> = {\n      Authorization: `Bearer ${accessToken}`,\n    };\n\n    if (config.additionalResourceHeaders) {\n      Object.assign(headers, config.additionalResourceHeaders);\n    }\n\n    const response = await fetch(config.resourceUrl, {\n      headers,\n    });\n\n    if (!response.ok) {\n      const text = await response.text();\n      throw new Error(`Unable to fetch OAuth2 resource (${response.status}): ${text}`);\n    }\n\n    return (await response.json()) as Record<string, unknown>;\n  }\n\n  private persistTokens(providerId: string, tokens: OAuth2StoredTokens): void {\n    localStorage.setItem(this.getTokensKey(providerId), JSON.stringify(tokens));\n  }\n\n  private getStoredTokens(providerId: string): OAuth2StoredTokens | null {\n    const raw = localStorage.getItem(this.getTokensKey(providerId));\n    if (!raw) {\n      return null;\n    }\n    try {\n      return JSON.parse(raw) as OAuth2StoredTokens;\n    } catch (err) {\n      console.warn(`Failed to parse stored OAuth2 tokens for provider '${providerId}'`, err);\n      return null;\n    }\n  }\n\n  private persistPendingLogin(state: string, payload: OAuth2PendingLogin): void {\n    localStorage.setItem(`${this.STATE_PREFIX}${state}`, JSON.stringify(payload));\n  }\n\n  private consumePendingLogin(state: string): OAuth2PendingLogin | null {\n    const key = `${this.STATE_PREFIX}${state}`;\n    const raw = localStorage.getItem(key);\n    localStorage.removeItem(key);\n    if (!raw) {\n      return null;\n    }\n    try {\n      return JSON.parse(raw) as OAuth2PendingLogin;\n    } catch (err) {\n      console.warn('Failed to parse pending OAuth2 login payload', err);\n      return null;\n    }\n  }\n\n  private generateState(): string {\n    return [...crypto.getRandomValues(new Uint8Array(16))].map((b) => b.toString(16).padStart(2, '0')).join('');\n  }\n\n  private generateCodeVerifier(): string {\n    const array = new Uint8Array(64);\n    crypto.getRandomValues(array);\n    return Array.from(array)\n      .map((b) => 'abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789-._~'[b % 66])\n      .join('');\n  }\n\n  private async generateCodeChallenge(codeVerifier: string): Promise<string> {\n    const encoder = new TextEncoder();\n    const data = encoder.encode(codeVerifier);\n    const digest = await crypto.subtle.digest('SHA-256', data);\n    return this.base64UrlEncode(new Uint8Array(digest));\n  }\n\n  private base64UrlEncode(buffer: Uint8Array): string {\n    let binary = '';\n    buffer.forEach((b) => (binary += String.fromCharCode(b)));\n    return btoa(binary).replace(/\\+/g, '-').replace(/\\//g, '_').replace(/=+$/, '');\n  }\n}\n"]}

package/dist/esm/web.d.ts

@@ -6,6 +6,7 @@ export declare class SocialLoginWeb extends WebPlugin implements SocialLoginPlug
     private appleProvider;
     private facebookProvider;
     private twitterProvider;
+    private oauth2Provider;
     constructor();
     private handleOAuthRedirect;
     initialize(options: InitializeOptions): Promise<void>;
@@ -16,7 +17,8 @@ export declare class SocialLoginWeb extends WebPlugin implements SocialLoginPlug
         result: ProviderResponseMap[T];
     }>;
     logout(options: {
-        provider: 'apple' | 'google' | 'facebook' | 'twitter';
+        provider: 'apple' | 'google' | 'facebook' | 'twitter' | 'oauth2';
+        providerId?: string;
     }): Promise<void>;
     isLoggedIn(options: isLoggedInOptions): Promise<{
         isLoggedIn: boolean;

package/dist/esm/web.js

@@ -2,6 +2,7 @@ import { WebPlugin } from '@capacitor/core';
 import { AppleSocialLogin } from './apple-provider';
 import { FacebookSocialLogin } from './facebook-provider';
 import { GoogleSocialLogin } from './google-provider';
+import { OAuth2SocialLogin } from './oauth2-provider';
 import { TwitterSocialLogin } from './twitter-provider';
 export class SocialLoginWeb extends WebPlugin {
     constructor() {
@@ -10,6 +11,7 @@ export class SocialLoginWeb extends WebPlugin {
         this.appleProvider = new AppleSocialLogin();
         this.facebookProvider = new FacebookSocialLogin();
         this.twitterProvider = new TwitterSocialLogin();
+        this.oauth2Provider = new OAuth2SocialLogin();
         // Set up listener for OAuth redirects if we have a pending OAuth flow
         if (localStorage.getItem(SocialLoginWeb.OAUTH_STATE_KEY)) {
             console.log('OAUTH_STATE_KEY found');
@@ -40,6 +42,9 @@ export class SocialLoginWeb extends WebPlugin {
             case 'twitter':
                 result = await this.twitterProvider.handleOAuthRedirect(url, state);
                 break;
+            case 'oauth2':
+                result = await this.oauth2Provider.handleOAuthRedirect(url, state);
+                break;
             case 'google':
             default:
                 result = this.googleProvider.handleOAuthRedirect(url);
@@ -76,6 +81,9 @@ export class SocialLoginWeb extends WebPlugin {
         if ((_d = options.twitter) === null || _d === void 0 ? void 0 : _d.clientId) {
             initPromises.push(this.twitterProvider.initialize(options.twitter.clientId, options.twitter.redirectUrl, options.twitter.defaultScopes, options.twitter.forceLogin, options.twitter.audience));
         }
+        if (options.oauth2 && Object.keys(options.oauth2).length > 0) {
+            initPromises.push(this.oauth2Provider.initializeProviders(options.oauth2));
+        }
         await Promise.all(initPromises);
     }
     async login(options) {
@@ -88,6 +96,8 @@ export class SocialLoginWeb extends WebPlugin {
                 return this.facebookProvider.login(options.options);
             case 'twitter':
                 return this.twitterProvider.login(options.options);
+            case 'oauth2':
+                return this.oauth2Provider.login(options.options);
             default:
                 throw new Error(`Login for ${options.provider} is not implemented on web`);
         }
@@ -102,6 +112,11 @@ export class SocialLoginWeb extends WebPlugin {
                 return this.facebookProvider.logout();
             case 'twitter':
                 return this.twitterProvider.logout();
+            case 'oauth2':
+                if (!options.providerId) {
+                    throw new Error('providerId is required for oauth2 logout');
+                }
+                return this.oauth2Provider.logout(options.providerId);
             default:
                 throw new Error(`Logout for ${options.provider} is not implemented`);
         }
@@ -116,6 +131,11 @@ export class SocialLoginWeb extends WebPlugin {
                 return this.facebookProvider.isLoggedIn();
             case 'twitter':
                 return this.twitterProvider.isLoggedIn();
+            case 'oauth2':
+                if (!options.providerId) {
+                    throw new Error('providerId is required for oauth2 isLoggedIn');
+                }
+                return this.oauth2Provider.isLoggedIn(options.providerId);
             default:
                 throw new Error(`isLoggedIn for ${options.provider} is not implemented`);
         }
@@ -130,6 +150,11 @@ export class SocialLoginWeb extends WebPlugin {
                 return this.facebookProvider.getAuthorizationCode();
             case 'twitter':
                 return this.twitterProvider.getAuthorizationCode();
+            case 'oauth2':
+                if (!options.providerId) {
+                    throw new Error('providerId is required for oauth2 getAuthorizationCode');
+                }
+                return this.oauth2Provider.getAuthorizationCode(options.providerId);
             default:
                 throw new Error(`getAuthorizationCode for ${options.provider} is not implemented`);
         }
@@ -144,6 +169,13 @@ export class SocialLoginWeb extends WebPlugin {
                 return this.facebookProvider.refresh(options.options);
             case 'twitter':
                 return this.twitterProvider.refresh();
+            case 'oauth2': {
+                const oauth2Options = options.options;
+                if (!(oauth2Options === null || oauth2Options === void 0 ? void 0 : oauth2Options.providerId)) {
+                    throw new Error('providerId is required for oauth2 refresh');
+                }
+                return this.oauth2Provider.refresh(oauth2Options.providerId);
+            }
             default:
                 throw new Error(`Refresh for ${options.provider} is not implemented`);
         }