@cleavelandprice/ngx-lib 4.8.2 → 4.8.4

package/fesm2022/cleavelandprice-ngx-lib-authentication-object.mjs

@@ -2,7 +2,7 @@ import { AuthenticationServiceOptionsToken } from '@cleavelandprice/ngx-lib/auth
 export * from '@cleavelandprice/ngx-lib/authentication';
 import { HttpClient } from '@angular/common/http';
 import * as i0 from '@angular/core';
-import { inject, EventEmitter, Output, Optional, Inject, Injectable, SkipSelf, NgModule } from '@angular/core';
+import { inject, signal, EventEmitter, Output, Optional, Inject, Injectable, SkipSelf, NgModule } from '@angular/core';
 import { NgxLibServiceBase } from '@cleavelandprice/ngx-lib';
 import { CommonModule } from '@angular/common';
 
@@ -29,8 +29,12 @@ class AuthenticationObjectService extends NgxLibServiceBase {
             //config: inject(ServiceConfig, { optional: true }) ?? new ServiceConfig(),
             http: inject(HttpClient)
         };
-        this.authenticating = false; // Flag set to true while the service is attempting to authenticate the user
-        this.authenticated = false; // Flag set to true when the user is successfully authenticated
+        this.authenticating = signal(false, /* @ts-ignore */
+        ...(ngDevMode ? [{ debugName: "authenticating" }] : /* istanbul ignore next */ [])); // Flag set to true while the service is attempting to authenticate the user
+        this.authenticated = signal(false, /* @ts-ignore */
+        ...(ngDevMode ? [{ debugName: "authenticated" }] : /* istanbul ignore next */ [])); // Flag set to true when the user is successfully authenticated
+        this.authenticatedUser = signal(undefined, /* @ts-ignore */
+        ...(ngDevMode ? [{ debugName: "authenticatedUser" }] : /* istanbul ignore next */ [])); // Object representing the authenticated user
         // error NG8110: Unsupported call to the output function. This function can only be used as the initializer of a property on a @Component or @Directive class.
         /*authenticatedChanged = output<boolean>();
         authenticatingChanged = output<boolean>();
@@ -56,8 +60,8 @@ class AuthenticationObjectService extends NgxLibServiceBase {
             additionalInfo,
             appName: this.options.appName
         };
-        this.authenticating = true;
-        this.authenticatingChanged.emit(this.authenticating);
+        this.authenticating.set(true);
+        this.authenticatingChanged.emit(this.authenticating());
         this.#services.http.post(`${this.apiUrl}${this.options.authenticationEndpoint}`, request)
             .subscribe({
             next: (user) => {
@@ -69,8 +73,8 @@ class AuthenticationObjectService extends NgxLibServiceBase {
                 }
             },
             error: (err) => {
-                this.authenticating = false;
-                this.authenticatingChanged.emit(this.authenticating);
+                this.authenticating.set(false);
+                this.authenticatingChanged.emit(this.authenticating());
                 this.authenticationError.emit(err);
             }
         });
@@ -80,12 +84,12 @@ class AuthenticationObjectService extends NgxLibServiceBase {
         if (this.storage.getItem(this.options.tokenName)) {
             this.storage.removeItem(this.options.tokenName);
         }
-        this.authenticatedUser = undefined;
-        this.authenticated = false;
+        this.authenticatedUser.set(undefined);
+        this.authenticated.set(false);
         this.authenticatedChanged.emit(false);
     }
     validateUser(token) {
-        this.authenticatedUser = {
+        this.authenticatedUser.set({
             accountName: token.sAMAccountName,
             admin: false, // This type of authentication has no concept of Admin
             department: token.department,
@@ -103,14 +107,14 @@ class AuthenticationObjectService extends NgxLibServiceBase {
             sid: token.objectSid,
             title: token.title,
             workShift: token.workShift
-        };
+        });
         if (this.options.tokenName) {
             this.storage.setItem(this.options.tokenName, JSON.stringify(token));
         }
-        this.authenticated = true;
-        this.authenticatedChanged.emit(this.authenticated);
-        this.authenticating = false;
-        this.authenticatingChanged.emit(this.authenticating);
+        this.authenticated.set(true);
+        this.authenticatedChanged.emit(this.authenticated());
+        this.authenticating.set(false);
+        this.authenticatingChanged.emit(this.authenticating());
     }
     checkForExistingToken() {
         if (this.options.tokenName) {

package/fesm2022/cleavelandprice-ngx-lib-authentication-object.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"cleavelandprice-ngx-lib-authentication-object.mjs","sources":["../../../../projects/cleavelandprice/ngx-lib/authentication/object/src/services/authentication-object.service.ts","../../../../projects/cleavelandprice/ngx-lib/authentication/object/src/authentication-object.module.ts","../../../../projects/cleavelandprice/ngx-lib/authentication/object/src/cleavelandprice-ngx-lib-authentication-object.ts"],"sourcesContent":["import { HttpClient } from '@angular/common/http';\r\nimport { EventEmitter, Inject, inject, Injectable, Optional, Output } from '@angular/core';\r\n\r\nimport { CleavelandPriceUser, User } from '@cleavelandprice/ngx-lib/active-directory';\r\n\r\nimport { AbstractAuthenticationService, AuthenticatedUser, AuthenticationRequest, AuthenticationServiceOptions, AuthenticationServiceOptionsToken } from '@cleavelandprice/ngx-lib/authentication';\r\n\r\nimport { NgxLibServiceBase } from '@cleavelandprice/ngx-lib';\r\n\r\n@Injectable({\r\n  providedIn: 'root'\r\n})\r\nexport class AuthenticationObjectService extends NgxLibServiceBase implements AbstractAuthenticationService {\r\n  //#region Fields\r\n  #services = {\r\n    //config: inject(ServiceConfig, { optional: true }) ?? new ServiceConfig(),\r\n    http: inject(HttpClient)\r\n  };\r\n  \r\n  authenticating = false; // Flag set to true while the service is attempting to authenticate the user\r\n  authenticated = false; // Flag set to true when the user is successfully authenticated\r\n  authenticatedUser?: AuthenticatedUser; // Object representing the authenticated user\r\n  \r\n  // error NG8110: Unsupported call to the output function. This function can only be used as the initializer of a property on a @Component or @Directive class.\r\n  /*authenticatedChanged = output<boolean>();\r\n  authenticatingChanged = output<boolean>();\r\n  authenticationError = output();*/\r\n  @Output() authenticatedChanged = new EventEmitter<boolean>();\r\n  @Output() authenticatingChanged = new EventEmitter<boolean>();\r\n  @Output() authenticationError = new EventEmitter();\r\n  //#endregion\r\n\r\n  //#region Properties\r\n  get useSessionStorage(): boolean {\r\n    return !!localStorage.getItem('storeTokenInSession');\r\n  }\r\n\r\n  get storage(): Storage {\r\n    return this.useSessionStorage ?\r\n      sessionStorage:\r\n      localStorage;\r\n  }\r\n  //#endregion\r\n\r\n  //#region Lifecycle\r\n  constructor(@Optional() @Inject(AuthenticationServiceOptionsToken) private options: AuthenticationServiceOptions) {\r\n    super(options);\r\n\r\n    this.options = {\r\n      ...options,\r\n\r\n      tokenName: 'userObject',\r\n      authenticationEndpoint: '/authenticate'\r\n    };\r\n\r\n    this.checkForExistingToken();\r\n  }\r\n  //#endregion\r\n\r\n  //#region Utilities\r\n  //Authenticate the user and store the token in Local Storage\r\n  login(username: string, password: string, adminGroup?: string, additionalInfo?: string): void {\r\n    const request: AuthenticationRequest = {\r\n      username,\r\n      password,\r\n      adminGroup,\r\n      additionalInfo,\r\n      appName: this.options.appName\r\n    };\r\n\r\n    this.authenticating = true;\r\n    this.authenticatingChanged.emit(this.authenticating);\r\n\r\n    this.#services.http.post(`${this.apiUrl}${this.options.authenticationEndpoint}`, request)\r\n      .subscribe({\r\n        next: (user) => {\r\n          if (user) {\r\n            this.validateUser(user as CleavelandPriceUser);\r\n          } else {\r\n            this.logout();\r\n          }\r\n        },\r\n        error: (err) => {\r\n          this.authenticating = false;\r\n          this.authenticatingChanged.emit(this.authenticating);\r\n          this.authenticationError.emit(err);\r\n        }\r\n      });\r\n  }\r\n \r\n  //Logout the user and delete the token from Local Storage\r\n  logout(): void {\r\n    if (this.storage.getItem(this.options.tokenName!)) {\r\n      this.storage.removeItem(this.options.tokenName!);\r\n    }\r\n\r\n    this.authenticatedUser = undefined;\r\n    this.authenticated = false;\r\n    this.authenticatedChanged.emit(false);\r\n  }\r\n \r\n  validateUser(token: CleavelandPriceUser): void {\r\n    this.authenticatedUser = {\r\n      accountName: token.sAMAccountName,\r\n      admin: false, // This type of authentication has no concept of Admin\r\n      department: token.department,\r\n      displayName: token.displayName ?? token.name,\r\n      distinguishedName: token.distinguishedName,\r\n      email: token.mail,\r\n      employeeNumber: token.employeeNumber,\r\n      firstName: token.givenName,\r\n      hireDate: token.hireDate,\r\n      lastName: token.sn,\r\n      manager: token.manager,\r\n      memberOf: token.memberOf.join(','),\r\n      phone: token.telephoneNumber,\r\n      photoUrl: undefined,\r\n      sid: token.objectSid,\r\n      title: token.title,\r\n      workShift: token.workShift\r\n    };\r\n\r\n    if (this.options.tokenName) {\r\n      this.storage.setItem(this.options.tokenName, JSON.stringify(token));\r\n    }\r\n    \r\n    this.authenticated = true;\r\n    this.authenticatedChanged.emit(this.authenticated);\r\n\r\n    this.authenticating = false;\r\n    this.authenticatingChanged.emit(this.authenticating);\r\n  }\r\n\r\n  checkForExistingToken(): void {\r\n    if (this.options.tokenName) {\r\n      const token = this.storage.getItem(this.options.tokenName);\r\n\r\n      if (token) {\r\n        this.validateUser(JSON.parse(token) as CleavelandPriceUser);\r\n      }\r\n    }\r\n  }\r\n  //#endregion\r\n}\r\n ","import { CommonModule } from '@angular/common';\r\nimport { ModuleWithProviders, NgModule, Optional, SkipSelf } from '@angular/core';\r\nimport { AuthenticationServiceOptions, AuthenticationServiceOptionsToken } from '@cleavelandprice/ngx-lib/authentication';\r\n\r\n@NgModule({\r\n  declarations: [],\r\n  imports: [\r\n    CommonModule\r\n  ],\r\n  exports: []\r\n})\r\nexport class AuthenticationObjectModule {\r\n  static forRoot(options: AuthenticationServiceOptions): ModuleWithProviders<AuthenticationObjectModule> {\r\n    return {\r\n      ngModule: AuthenticationObjectModule,\r\n      providers: [\r\n        {\r\n          provide: AuthenticationServiceOptionsToken,\r\n          useValue: options\r\n        }\r\n      ]\r\n    };\r\n  }\r\n\r\n  constructor(@Optional() @SkipSelf() parentModule: AuthenticationObjectModule) {\r\n    if (parentModule) {\r\n      throw new Error(\r\n        'AuthenticationObjectModule is already loaded. Import it in the AppModule only');\r\n    }\r\n  }\r\n}","/**\n * Generated bundle index. Do not edit.\n */\n\nexport * from './authentication-object.api';\n"],"names":[],"mappings":";;;;;;;;AAYM,MAAO,2BAA4B,SAAQ,iBAAiB,CAAA;;AAEhE,IAAA,SAAS;;;AAmBT,IAAA,IAAI,iBAAiB,GAAA;QACnB,OAAO,CAAC,CAAC,YAAY,CAAC,OAAO,CAAC,qBAAqB,CAAC;IACtD;AAEA,IAAA,IAAI,OAAO,GAAA;AACT,QAAA,OAAO,IAAI,CAAC,iBAAiB;AAC3B,YAAA,cAAc;AACd,YAAA,YAAY;IAChB;;;AAIA,IAAA,WAAA,CAA2E,OAAqC,EAAA;QAC9G,KAAK,CAAC,OAAO,CAAC;QAD2D,IAAA,CAAA,OAAO,GAAP,OAAO;;AA/BlF,QAAA,IAAA,CAAA,SAAS,GAAG;;AAEV,YAAA,IAAI,EAAE,MAAM,CAAC,UAAU;SACxB;AAED,QAAA,IAAA,CAAA,cAAc,GAAG,KAAK,CAAC;AACvB,QAAA,IAAA,CAAA,aAAa,GAAG,KAAK,CAAC;;AAItB;;AAEiC;AACvB,QAAA,IAAA,CAAA,oBAAoB,GAAG,IAAI,YAAY,EAAW;AAClD,QAAA,IAAA,CAAA,qBAAqB,GAAG,IAAI,YAAY,EAAW;AACnD,QAAA,IAAA,CAAA,mBAAmB,GAAG,IAAI,YAAY,EAAE;QAmBhD,IAAI,CAAC,OAAO,GAAG;AACb,YAAA,GAAG,OAAO;AAEV,YAAA,SAAS,EAAE,YAAY;AACvB,YAAA,sBAAsB,EAAE;SACzB;QAED,IAAI,CAAC,qBAAqB,EAAE;IAC9B;;;;AAKA,IAAA,KAAK,CAAC,QAAgB,EAAE,QAAgB,EAAE,UAAmB,EAAE,cAAuB,EAAA;AACpF,QAAA,MAAM,OAAO,GAA0B;YACrC,QAAQ;YACR,QAAQ;YACR,UAAU;YACV,cAAc;AACd,YAAA,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC;SACvB;AAED,QAAA,IAAI,CAAC,cAAc,GAAG,IAAI;QAC1B,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC;QAEpD,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,MAAM,CAAA,EAAG,IAAI,CAAC,OAAO,CAAC,sBAAsB,CAAA,CAAE,EAAE,OAAO;AACrF,aAAA,SAAS,CAAC;AACT,YAAA,IAAI,EAAE,CAAC,IAAI,KAAI;gBACb,IAAI,IAAI,EAAE;AACR,oBAAA,IAAI,CAAC,YAAY,CAAC,IAA2B,CAAC;gBAChD;qBAAO;oBACL,IAAI,CAAC,MAAM,EAAE;gBACf;YACF,CAAC;AACD,YAAA,KAAK,EAAE,CAAC,GAAG,KAAI;AACb,gBAAA,IAAI,CAAC,cAAc,GAAG,KAAK;gBAC3B,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC;AACpD,gBAAA,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,GAAG,CAAC;YACpC;AACD,SAAA,CAAC;IACN;;IAGA,MAAM,GAAA;AACJ,QAAA,IAAI,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,SAAU,CAAC,EAAE;YACjD,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,SAAU,CAAC;QAClD;AAEA,QAAA,IAAI,CAAC,iBAAiB,GAAG,SAAS;AAClC,QAAA,IAAI,CAAC,aAAa,GAAG,KAAK;AAC1B,QAAA,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,KAAK,CAAC;IACvC;AAEA,IAAA,YAAY,CAAC,KAA0B,EAAA;QACrC,IAAI,CAAC,iBAAiB,GAAG;YACvB,WAAW,EAAE,KAAK,CAAC,cAAc;YACjC,KAAK,EAAE,KAAK;YACZ,UAAU,EAAE,KAAK,CAAC,UAAU;AAC5B,YAAA,WAAW,EAAE,KAAK,CAAC,WAAW,IAAI,KAAK,CAAC,IAAI;YAC5C,iBAAiB,EAAE,KAAK,CAAC,iBAAiB;YAC1C,KAAK,EAAE,KAAK,CAAC,IAAI;YACjB,cAAc,EAAE,KAAK,CAAC,cAAc;YACpC,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,QAAQ,EAAE,KAAK,CAAC,EAAE;YAClB,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,QAAQ,EAAE,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC;YAClC,KAAK,EAAE,KAAK,CAAC,eAAe;AAC5B,YAAA,QAAQ,EAAE,SAAS;YACnB,GAAG,EAAE,KAAK,CAAC,SAAS;YACpB,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,SAAS,EAAE,KAAK,CAAC;SAClB;AAED,QAAA,IAAI,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE;AAC1B,YAAA,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QACrE;AAEA,QAAA,IAAI,CAAC,aAAa,GAAG,IAAI;QACzB,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC;AAElD,QAAA,IAAI,CAAC,cAAc,GAAG,KAAK;QAC3B,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC;IACtD;IAEA,qBAAqB,GAAA;AACnB,QAAA,IAAI,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE;AAC1B,YAAA,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC;YAE1D,IAAI,KAAK,EAAE;gBACT,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAwB,CAAC;YAC7D;QACF;IACF;AAjIW,IAAA,SAAA,IAAA,CAAA,IAAA,GAAA,EAAA,CAAA,kBAAA,CAAA,EAAA,UAAA,EAAA,QAAA,EAAA,OAAA,EAAA,QAAA,EAAA,QAAA,EAAA,EAAA,EAAA,IAAA,EAAA,2BAA2B,kBAiCN,iCAAiC,EAAA,QAAA,EAAA,IAAA,EAAA,CAAA,EAAA,MAAA,EAAA,EAAA,CAAA,eAAA,CAAA,UAAA,EAAA,CAAA,CAAA;AAjCtD,IAAA,SAAA,IAAA,CAAA,KAAA,GAAA,EAAA,CAAA,qBAAA,CAAA,EAAA,UAAA,EAAA,QAAA,EAAA,OAAA,EAAA,QAAA,EAAA,QAAA,EAAA,EAAA,EAAA,IAAA,EAAA,2BAA2B,cAF1B,MAAM,EAAA,CAAA,CAAA;;2FAEP,2BAA2B,EAAA,UAAA,EAAA,CAAA;kBAHvC,UAAU;AAAC,YAAA,IAAA,EAAA,CAAA;AACV,oBAAA,UAAU,EAAE;AACb,iBAAA;;0BAkCc;;0BAAY,MAAM;2BAAC,iCAAiC;;sBAlBhE;;sBACA;;sBACA;;;MClBU,0BAA0B,CAAA;IACrC,OAAO,OAAO,CAAC,OAAqC,EAAA;QAClD,OAAO;AACL,YAAA,QAAQ,EAAE,0BAA0B;AACpC,YAAA,SAAS,EAAE;AACT,gBAAA;AACE,oBAAA,OAAO,EAAE,iCAAiC;AAC1C,oBAAA,QAAQ,EAAE;AACX;AACF;SACF;IACH;AAEA,IAAA,WAAA,CAAoC,YAAwC,EAAA;QAC1E,IAAI,YAAY,EAAE;AAChB,YAAA,MAAM,IAAI,KAAK,CACb,+EAA+E,CAAC;QACpF;IACF;8GAlBW,0BAA0B,EAAA,IAAA,EAAA,CAAA,EAAA,KAAA,EAAA,0BAAA,EAAA,QAAA,EAAA,IAAA,EAAA,QAAA,EAAA,IAAA,EAAA,CAAA,EAAA,MAAA,EAAA,EAAA,CAAA,eAAA,CAAA,QAAA,EAAA,CAAA,CAAA;AAA1B,IAAA,SAAA,IAAA,CAAA,IAAA,GAAA,EAAA,CAAA,mBAAA,CAAA,EAAA,UAAA,EAAA,QAAA,EAAA,OAAA,EAAA,QAAA,EAAA,QAAA,EAAA,EAAA,EAAA,IAAA,EAAA,0BAA0B,YAJnC,YAAY,CAAA,EAAA,CAAA,CAAA;AAIH,IAAA,SAAA,IAAA,CAAA,IAAA,GAAA,EAAA,CAAA,mBAAA,CAAA,EAAA,UAAA,EAAA,QAAA,EAAA,OAAA,EAAA,QAAA,EAAA,QAAA,EAAA,EAAA,EAAA,IAAA,EAAA,0BAA0B,YAJnC,YAAY,CAAA,EAAA,CAAA,CAAA;;2FAIH,0BAA0B,EAAA,UAAA,EAAA,CAAA;kBAPtC,QAAQ;AAAC,YAAA,IAAA,EAAA,CAAA;AACR,oBAAA,YAAY,EAAE,EAAE;AAChB,oBAAA,OAAO,EAAE;wBACP;AACD,qBAAA;AACD,oBAAA,OAAO,EAAE;AACV,iBAAA;;0BAcc;;0BAAY;;;ACxB3B;;AAEG;;;;"}
+{"version":3,"file":"cleavelandprice-ngx-lib-authentication-object.mjs","sources":["../../../../projects/cleavelandprice/ngx-lib/authentication/object/src/services/authentication-object.service.ts","../../../../projects/cleavelandprice/ngx-lib/authentication/object/src/authentication-object.module.ts","../../../../projects/cleavelandprice/ngx-lib/authentication/object/src/cleavelandprice-ngx-lib-authentication-object.ts"],"sourcesContent":["import { HttpClient } from '@angular/common/http';\r\nimport { EventEmitter, Inject, inject, Injectable, Optional, Output, signal } from '@angular/core';\r\n\r\nimport { CleavelandPriceUser, User } from '@cleavelandprice/ngx-lib/active-directory';\r\n\r\nimport { AbstractAuthenticationService, AuthenticatedUser, AuthenticationRequest, AuthenticationServiceOptions, AuthenticationServiceOptionsToken } from '@cleavelandprice/ngx-lib/authentication';\r\n\r\nimport { NgxLibServiceBase } from '@cleavelandprice/ngx-lib';\r\n\r\n@Injectable({\r\n  providedIn: 'root'\r\n})\r\nexport class AuthenticationObjectService extends NgxLibServiceBase implements AbstractAuthenticationService {\r\n  //#region Fields\r\n  #services = {\r\n    //config: inject(ServiceConfig, { optional: true }) ?? new ServiceConfig(),\r\n    http: inject(HttpClient)\r\n  };\r\n  \r\n  authenticating = signal(false); // Flag set to true while the service is attempting to authenticate the user\r\n  authenticated = signal(false); // Flag set to true when the user is successfully authenticated\r\n  authenticatedUser = signal<AuthenticatedUser | undefined>(undefined); // Object representing the authenticated user\r\n  \r\n  // error NG8110: Unsupported call to the output function. This function can only be used as the initializer of a property on a @Component or @Directive class.\r\n  /*authenticatedChanged = output<boolean>();\r\n  authenticatingChanged = output<boolean>();\r\n  authenticationError = output();*/\r\n  @Output() authenticatedChanged = new EventEmitter<boolean>();\r\n  @Output() authenticatingChanged = new EventEmitter<boolean>();\r\n  @Output() authenticationError = new EventEmitter();\r\n  //#endregion\r\n\r\n  //#region Properties\r\n  get useSessionStorage(): boolean {\r\n    return !!localStorage.getItem('storeTokenInSession');\r\n  }\r\n\r\n  get storage(): Storage {\r\n    return this.useSessionStorage ?\r\n      sessionStorage:\r\n      localStorage;\r\n  }\r\n  //#endregion\r\n\r\n  //#region Lifecycle\r\n  constructor(@Optional() @Inject(AuthenticationServiceOptionsToken) private options: AuthenticationServiceOptions) {\r\n    super(options);\r\n\r\n    this.options = {\r\n      ...options,\r\n\r\n      tokenName: 'userObject',\r\n      authenticationEndpoint: '/authenticate'\r\n    };\r\n\r\n    this.checkForExistingToken();\r\n  }\r\n  //#endregion\r\n\r\n  //#region Utilities\r\n  //Authenticate the user and store the token in Local Storage\r\n  login(username: string, password: string, adminGroup?: string, additionalInfo?: string): void {\r\n    const request: AuthenticationRequest = {\r\n      username,\r\n      password,\r\n      adminGroup,\r\n      additionalInfo,\r\n      appName: this.options.appName\r\n    };\r\n\r\n    this.authenticating.set(true);\r\n    this.authenticatingChanged.emit(this.authenticating());\r\n\r\n    this.#services.http.post(`${this.apiUrl}${this.options.authenticationEndpoint}`, request)\r\n      .subscribe({\r\n        next: (user) => {\r\n          if (user) {\r\n            this.validateUser(user as CleavelandPriceUser);\r\n          } else {\r\n            this.logout();\r\n          }\r\n        },\r\n        error: (err) => {\r\n          this.authenticating.set(false);\r\n          this.authenticatingChanged.emit(this.authenticating());\r\n          this.authenticationError.emit(err);\r\n        }\r\n      });\r\n  }\r\n \r\n  //Logout the user and delete the token from Local Storage\r\n  logout(): void {\r\n    if (this.storage.getItem(this.options.tokenName!)) {\r\n      this.storage.removeItem(this.options.tokenName!);\r\n    }\r\n\r\n    this.authenticatedUser.set(undefined);\r\n    this.authenticated.set(false);\r\n    this.authenticatedChanged.emit(false);\r\n  }\r\n \r\n  validateUser(token: CleavelandPriceUser): void {\r\n    this.authenticatedUser.set({\r\n      accountName: token.sAMAccountName,\r\n      admin: false, // This type of authentication has no concept of Admin\r\n      department: token.department,\r\n      displayName: token.displayName ?? token.name,\r\n      distinguishedName: token.distinguishedName,\r\n      email: token.mail,\r\n      employeeNumber: token.employeeNumber,\r\n      firstName: token.givenName,\r\n      hireDate: token.hireDate,\r\n      lastName: token.sn,\r\n      manager: token.manager,\r\n      memberOf: token.memberOf.join(','),\r\n      phone: token.telephoneNumber,\r\n      photoUrl: undefined,\r\n      sid: token.objectSid,\r\n      title: token.title,\r\n      workShift: token.workShift\r\n    });\r\n\r\n    if (this.options.tokenName) {\r\n      this.storage.setItem(this.options.tokenName, JSON.stringify(token));\r\n    }\r\n    \r\n    this.authenticated.set(true);\r\n    this.authenticatedChanged.emit(this.authenticated());\r\n\r\n    this.authenticating.set(false);\r\n    this.authenticatingChanged.emit(this.authenticating());\r\n  }\r\n\r\n  checkForExistingToken(): void {\r\n    if (this.options.tokenName) {\r\n      const token = this.storage.getItem(this.options.tokenName);\r\n\r\n      if (token) {\r\n        this.validateUser(JSON.parse(token) as CleavelandPriceUser);\r\n      }\r\n    }\r\n  }\r\n  //#endregion\r\n}\r\n ","import { CommonModule } from '@angular/common';\r\nimport { ModuleWithProviders, NgModule, Optional, SkipSelf } from '@angular/core';\r\nimport { AuthenticationServiceOptions, AuthenticationServiceOptionsToken } from '@cleavelandprice/ngx-lib/authentication';\r\n\r\n@NgModule({\r\n  declarations: [],\r\n  imports: [\r\n    CommonModule\r\n  ],\r\n  exports: []\r\n})\r\nexport class AuthenticationObjectModule {\r\n  static forRoot(options: AuthenticationServiceOptions): ModuleWithProviders<AuthenticationObjectModule> {\r\n    return {\r\n      ngModule: AuthenticationObjectModule,\r\n      providers: [\r\n        {\r\n          provide: AuthenticationServiceOptionsToken,\r\n          useValue: options\r\n        }\r\n      ]\r\n    };\r\n  }\r\n\r\n  constructor(@Optional() @SkipSelf() parentModule: AuthenticationObjectModule) {\r\n    if (parentModule) {\r\n      throw new Error(\r\n        'AuthenticationObjectModule is already loaded. Import it in the AppModule only');\r\n    }\r\n  }\r\n}","/**\n * Generated bundle index. Do not edit.\n */\n\nexport * from './authentication-object.api';\n"],"names":[],"mappings":";;;;;;;;AAYM,MAAO,2BAA4B,SAAQ,iBAAiB,CAAA;;AAEhE,IAAA,SAAS;;;AAmBT,IAAA,IAAI,iBAAiB,GAAA;QACnB,OAAO,CAAC,CAAC,YAAY,CAAC,OAAO,CAAC,qBAAqB,CAAC;IACtD;AAEA,IAAA,IAAI,OAAO,GAAA;AACT,QAAA,OAAO,IAAI,CAAC,iBAAiB;AAC3B,YAAA,cAAc;AACd,YAAA,YAAY;IAChB;;;AAIA,IAAA,WAAA,CAA2E,OAAqC,EAAA;QAC9G,KAAK,CAAC,OAAO,CAAC;QAD2D,IAAA,CAAA,OAAO,GAAP,OAAO;;AA/BlF,QAAA,IAAA,CAAA,SAAS,GAAG;;AAEV,YAAA,IAAI,EAAE,MAAM,CAAC,UAAU;SACxB;QAED,IAAA,CAAA,cAAc,GAAG,MAAM,CAAC,KAAK;AAAC,QAAA,IAAA,SAAA,GAAA,CAAA,EAAA,SAAA,EAAA,gBAAA,EAAA,CAAA,8BAAA,EAAA,CAAA,CAAA,CAAC;QAC/B,IAAA,CAAA,aAAa,GAAG,MAAM,CAAC,KAAK;AAAC,QAAA,IAAA,SAAA,GAAA,CAAA,EAAA,SAAA,EAAA,eAAA,EAAA,CAAA,8BAAA,EAAA,CAAA,CAAA,CAAC;QAC9B,IAAA,CAAA,iBAAiB,GAAG,MAAM,CAAgC,SAAS;AAAC,QAAA,IAAA,SAAA,GAAA,CAAA,EAAA,SAAA,EAAA,mBAAA,EAAA,CAAA,8BAAA,EAAA,CAAA,CAAA,CAAC;;AAGrE;;AAEiC;AACvB,QAAA,IAAA,CAAA,oBAAoB,GAAG,IAAI,YAAY,EAAW;AAClD,QAAA,IAAA,CAAA,qBAAqB,GAAG,IAAI,YAAY,EAAW;AACnD,QAAA,IAAA,CAAA,mBAAmB,GAAG,IAAI,YAAY,EAAE;QAmBhD,IAAI,CAAC,OAAO,GAAG;AACb,YAAA,GAAG,OAAO;AAEV,YAAA,SAAS,EAAE,YAAY;AACvB,YAAA,sBAAsB,EAAE;SACzB;QAED,IAAI,CAAC,qBAAqB,EAAE;IAC9B;;;;AAKA,IAAA,KAAK,CAAC,QAAgB,EAAE,QAAgB,EAAE,UAAmB,EAAE,cAAuB,EAAA;AACpF,QAAA,MAAM,OAAO,GAA0B;YACrC,QAAQ;YACR,QAAQ;YACR,UAAU;YACV,cAAc;AACd,YAAA,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC;SACvB;AAED,QAAA,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC;QAC7B,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC;QAEtD,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,MAAM,CAAA,EAAG,IAAI,CAAC,OAAO,CAAC,sBAAsB,CAAA,CAAE,EAAE,OAAO;AACrF,aAAA,SAAS,CAAC;AACT,YAAA,IAAI,EAAE,CAAC,IAAI,KAAI;gBACb,IAAI,IAAI,EAAE;AACR,oBAAA,IAAI,CAAC,YAAY,CAAC,IAA2B,CAAC;gBAChD;qBAAO;oBACL,IAAI,CAAC,MAAM,EAAE;gBACf;YACF,CAAC;AACD,YAAA,KAAK,EAAE,CAAC,GAAG,KAAI;AACb,gBAAA,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,KAAK,CAAC;gBAC9B,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC;AACtD,gBAAA,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,GAAG,CAAC;YACpC;AACD,SAAA,CAAC;IACN;;IAGA,MAAM,GAAA;AACJ,QAAA,IAAI,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,SAAU,CAAC,EAAE;YACjD,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,SAAU,CAAC;QAClD;AAEA,QAAA,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,SAAS,CAAC;AACrC,QAAA,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC;AAC7B,QAAA,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,KAAK,CAAC;IACvC;AAEA,IAAA,YAAY,CAAC,KAA0B,EAAA;AACrC,QAAA,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC;YACzB,WAAW,EAAE,KAAK,CAAC,cAAc;YACjC,KAAK,EAAE,KAAK;YACZ,UAAU,EAAE,KAAK,CAAC,UAAU;AAC5B,YAAA,WAAW,EAAE,KAAK,CAAC,WAAW,IAAI,KAAK,CAAC,IAAI;YAC5C,iBAAiB,EAAE,KAAK,CAAC,iBAAiB;YAC1C,KAAK,EAAE,KAAK,CAAC,IAAI;YACjB,cAAc,EAAE,KAAK,CAAC,cAAc;YACpC,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,QAAQ,EAAE,KAAK,CAAC,EAAE;YAClB,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,QAAQ,EAAE,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC;YAClC,KAAK,EAAE,KAAK,CAAC,eAAe;AAC5B,YAAA,QAAQ,EAAE,SAAS;YACnB,GAAG,EAAE,KAAK,CAAC,SAAS;YACpB,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,SAAS,EAAE,KAAK,CAAC;AAClB,SAAA,CAAC;AAEF,QAAA,IAAI,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE;AAC1B,YAAA,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QACrE;AAEA,QAAA,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC;QAC5B,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC;AAEpD,QAAA,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,KAAK,CAAC;QAC9B,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC;IACxD;IAEA,qBAAqB,GAAA;AACnB,QAAA,IAAI,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE;AAC1B,YAAA,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC;YAE1D,IAAI,KAAK,EAAE;gBACT,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAwB,CAAC;YAC7D;QACF;IACF;AAjIW,IAAA,SAAA,IAAA,CAAA,IAAA,GAAA,EAAA,CAAA,kBAAA,CAAA,EAAA,UAAA,EAAA,QAAA,EAAA,OAAA,EAAA,QAAA,EAAA,QAAA,EAAA,EAAA,EAAA,IAAA,EAAA,2BAA2B,kBAiCN,iCAAiC,EAAA,QAAA,EAAA,IAAA,EAAA,CAAA,EAAA,MAAA,EAAA,EAAA,CAAA,eAAA,CAAA,UAAA,EAAA,CAAA,CAAA;AAjCtD,IAAA,SAAA,IAAA,CAAA,KAAA,GAAA,EAAA,CAAA,qBAAA,CAAA,EAAA,UAAA,EAAA,QAAA,EAAA,OAAA,EAAA,QAAA,EAAA,QAAA,EAAA,EAAA,EAAA,IAAA,EAAA,2BAA2B,cAF1B,MAAM,EAAA,CAAA,CAAA;;2FAEP,2BAA2B,EAAA,UAAA,EAAA,CAAA;kBAHvC,UAAU;AAAC,YAAA,IAAA,EAAA,CAAA;AACV,oBAAA,UAAU,EAAE;AACb,iBAAA;;0BAkCc;;0BAAY,MAAM;2BAAC,iCAAiC;;sBAlBhE;;sBACA;;sBACA;;;MClBU,0BAA0B,CAAA;IACrC,OAAO,OAAO,CAAC,OAAqC,EAAA;QAClD,OAAO;AACL,YAAA,QAAQ,EAAE,0BAA0B;AACpC,YAAA,SAAS,EAAE;AACT,gBAAA;AACE,oBAAA,OAAO,EAAE,iCAAiC;AAC1C,oBAAA,QAAQ,EAAE;AACX;AACF;SACF;IACH;AAEA,IAAA,WAAA,CAAoC,YAAwC,EAAA;QAC1E,IAAI,YAAY,EAAE;AAChB,YAAA,MAAM,IAAI,KAAK,CACb,+EAA+E,CAAC;QACpF;IACF;8GAlBW,0BAA0B,EAAA,IAAA,EAAA,CAAA,EAAA,KAAA,EAAA,0BAAA,EAAA,QAAA,EAAA,IAAA,EAAA,QAAA,EAAA,IAAA,EAAA,CAAA,EAAA,MAAA,EAAA,EAAA,CAAA,eAAA,CAAA,QAAA,EAAA,CAAA,CAAA;AAA1B,IAAA,SAAA,IAAA,CAAA,IAAA,GAAA,EAAA,CAAA,mBAAA,CAAA,EAAA,UAAA,EAAA,QAAA,EAAA,OAAA,EAAA,QAAA,EAAA,QAAA,EAAA,EAAA,EAAA,IAAA,EAAA,0BAA0B,YAJnC,YAAY,CAAA,EAAA,CAAA,CAAA;AAIH,IAAA,SAAA,IAAA,CAAA,IAAA,GAAA,EAAA,CAAA,mBAAA,CAAA,EAAA,UAAA,EAAA,QAAA,EAAA,OAAA,EAAA,QAAA,EAAA,QAAA,EAAA,EAAA,EAAA,IAAA,EAAA,0BAA0B,YAJnC,YAAY,CAAA,EAAA,CAAA,CAAA;;2FAIH,0BAA0B,EAAA,UAAA,EAAA,CAAA;kBAPtC,QAAQ;AAAC,YAAA,IAAA,EAAA,CAAA;AACR,oBAAA,YAAY,EAAE,EAAE;AAChB,oBAAA,OAAO,EAAE;wBACP;AACD,qBAAA;AACD,oBAAA,OAAO,EAAE;AACV,iBAAA;;0BAcc;;0BAAY;;;ACxB3B;;AAEG;;;;"}

package/fesm2022/cleavelandprice-ngx-lib-authentication-sso.mjs

@@ -1,5 +1,5 @@
 import * as i0 from '@angular/core';
-import { InjectionToken, EventEmitter, signal, Output, Optional, Inject, Injectable, ChangeDetectionStrategy, Component, SkipSelf, NgModule, inject } from '@angular/core';
+import { InjectionToken, signal, EventEmitter, Output, Optional, Inject, Injectable, ChangeDetectionStrategy, Component, SkipSelf, NgModule, inject } from '@angular/core';
 import { NgxLibServiceBase } from '@cleavelandprice/ngx-lib';
 import { BrowserCacheLocation, PublicClientApplication } from '@azure/msal-browser';
 import { CommonModule } from '@angular/common';
@@ -57,8 +57,12 @@ class AuthenticationSSOService extends NgxLibServiceBase {
         super(options);
         this.options = options;
         //#region Fields
-        this.authenticating = false; // Flag set to true while the service is attempting to authenticate the user
-        this.authenticated = false; // Flag set to true when the user is successfully authenticated
+        this.authenticating = signal(false, /* @ts-ignore */
+        ...(ngDevMode ? [{ debugName: "authenticating" }] : /* istanbul ignore next */ [])); // Flag set to true while the service is attempting to authenticate the user
+        this.authenticated = signal(false, /* @ts-ignore */
+        ...(ngDevMode ? [{ debugName: "authenticated" }] : /* istanbul ignore next */ [])); // Flag set to true when the user is successfully authenticated
+        this.authenticatedUser = signal(undefined, /* @ts-ignore */
+        ...(ngDevMode ? [{ debugName: "authenticatedUser" }] : /* istanbul ignore next */ [])); // Object representing the authenticated user
         // error NG8110: Unsupported call to the output function. This function can only be used as the initializer of a property on a @Component or @Directive class.
         /*authenticatedChanged = output<boolean>();
         authenticatingChanged = output<boolean>();
@@ -116,8 +120,8 @@ class AuthenticationSSOService extends NgxLibServiceBase {
         // This is a workaround to ensure that the item is removed after logout.
         if (typeof sessionStorage !== 'undefined' && sessionStorage.getItem("msal.interaction.status"))
             sessionStorage.removeItem("msal.interaction.status");
-        this.authenticating = true;
-        this.authenticatingChanged.emit(this.authenticating);
+        this.authenticating.set(true);
+        this.authenticatingChanged.emit(this.authenticating());
         console.log('AuthenticationSSOService: login() called. Authenticating user...');
         // Initialize MSAL and then perform login via popup, followed by user validation.
         this.#initializeMsal()
@@ -128,8 +132,8 @@ class AuthenticationSSOService extends NgxLibServiceBase {
         }))
             .then((result) => this.validateUser(result))
             .catch((error) => {
-            this.authenticating = false;
-            this.authenticatingChanged.emit(this.authenticating);
+            this.authenticating.set(false);
+            this.authenticatingChanged.emit(this.authenticating());
             this.authenticationError.emit(error);
         });
     }
@@ -196,7 +200,7 @@ class AuthenticationSSOService extends NgxLibServiceBase {
         const preferredUsername = String(claims.preferred_username ?? resolvedAccount.username ?? claims.upn ?? claims.email ?? '');
         const accountName = preferredUsername.includes('@') ? preferredUsername.split('@')[0] : preferredUsername;
         // Map Entra claims to the app's authenticated user shape.
-        this.authenticatedUser = {
+        this.authenticatedUser.set({
             admin: false,
             accountName: claims.accountName ?? accountName,
             department: claims.department ?? '',
@@ -214,7 +218,7 @@ class AuthenticationSSOService extends NgxLibServiceBase {
             sid: claims.securityIdentifier ?? '',
             title: claims.title,
             workShift: claims.workShift
-        };
+        });
         // Persist the most recent id token from the auth result first.
         // account.idToken can lag behind after silent refresh in some MSAL flows.
         if (this.options.tokenName) {
@@ -231,12 +235,12 @@ class AuthenticationSSOService extends NgxLibServiceBase {
         this.#scheduleTokenRefresh(expirationEpochSeconds, resolvedAccount);
         // Publish authenticated state only when it changes.
         const wasAuthenticated = this.authenticated;
-        this.authenticated = true;
+        this.authenticated.set(true);
         if (wasAuthenticated !== this.authenticated) {
-            this.authenticatedChanged.emit(this.authenticated);
+            this.authenticatedChanged.emit(this.authenticated());
         }
-        this.authenticating = false;
-        this.authenticatingChanged.emit(this.authenticating);
+        this.authenticating.set(false);
+        this.authenticatingChanged.emit(this.authenticating());
     }
     // Rehydrates auth state from existing cached account on startup.
     // We intentionally avoid handleRedirectPromise() because this service uses popup login.
@@ -336,9 +340,9 @@ class AuthenticationSSOService extends NgxLibServiceBase {
             this.storage.removeItem(this.options.tokenName);
         }
         const wasAuthenticated = this.authenticated;
-        this.authenticatedUser = undefined;
-        this.authenticated = false;
-        if (wasAuthenticated !== this.authenticated) {
+        this.authenticatedUser.set(undefined);
+        this.authenticated.set(false);
+        if (wasAuthenticated() !== this.authenticated()) {
             this.authenticatedChanged.emit(false);
         }
         try {
@@ -504,14 +508,14 @@ const authenticationSSOGuard = (_route, _state) => {
     const authenticationService = inject(AuthenticationSSOService);
     const router = inject(Router);
     // if the user is already authenticated, allow access to the route
-    if (authenticationService.authenticated) {
+    if (authenticationService.authenticated()) {
         return true;
     }
     if (authenticationService.tokenExists()) {
         // we're doing this because we could've opened a new tab and the user is already logged in, so we need to check for an existing token
         authenticationService.checkForExistingToken();
         return authenticationService.authenticatedChanged.pipe(take(1), map(() => {
-            if (!authenticationService.authenticated) {
+            if (!authenticationService.authenticated()) {
                 router.navigate(['']);
                 return false;
             }

package/fesm2022/cleavelandprice-ngx-lib-authentication-sso.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"cleavelandprice-ngx-lib-authentication-sso.mjs","sources":["../../../../projects/cleavelandprice/ngx-lib/authentication/sso/src/model/authentication-sso-service-options-token.ts","../../../../projects/cleavelandprice/ngx-lib/authentication/sso/src/services/authentication-sso.service.ts","../../../../projects/cleavelandprice/ngx-lib/authentication/sso/src/components/redirect/authentication-sso-redirect.component.ts","../../../../projects/cleavelandprice/ngx-lib/authentication/sso/src/authentication-sso.module.ts","../../../../projects/cleavelandprice/ngx-lib/authentication/sso/src/guards/authentication-sso.guard.ts","../../../../projects/cleavelandprice/ngx-lib/authentication/sso/src/cleavelandprice-ngx-lib-authentication-sso.ts"],"sourcesContent":["import { InjectionToken } from \"@angular/core\";\r\nimport { AuthenticationSSOServiceOptions } from \"./authentication-sso-service-options\";\r\n\r\n// What is a InjectionToken?\r\n// An InjectionToken is a way to create a token that can be used to inject a dependency into an Angular service or component.\r\n// It allows you to define a unique identifier for a dependency, which can then be used to retrieve the dependency from the Angular dependency injection system.\r\n// This is particularly useful when you want to inject a value that is not a class, such as a configuration object or a string.\r\n// Great explaination of InjectionToken: https://youtu.be/GvA7xnBmEto?si=_Nc2DTzdsb0jdvuk\r\nexport const AuthenticationSSOServiceOptionsToken = new InjectionToken<AuthenticationSSOServiceOptions>('AuthenticationSSOServiceOptions');\r\n","import { EventEmitter, Inject, Injectable, Optional, Output, signal } from '@angular/core';\r\n\r\nimport { AbstractAuthenticationService, AuthenticatedUser } from '@cleavelandprice/ngx-lib/authentication';\r\n\r\nimport { NgxLibServiceBase } from '@cleavelandprice/ngx-lib';\r\n\r\nimport { AuthenticationSSOServiceOptions } from '../model/authentication-sso-service-options';\r\nimport { AuthenticationSSOServiceOptionsToken } from './../model/authentication-sso-service-options-token';\r\nimport { AuthenticationSSOClaims } from '../model/authentication-sso-claims';\r\n\r\nimport {\r\n  AccountInfo,\r\n  AuthenticationResult,\r\n  BrowserCacheLocation,\r\n  PublicClientApplication,\r\n  type Configuration\r\n} from '@azure/msal-browser';\r\n\r\n// This service implements authentication using Microsoft Entra ID (formerly Azure AD) via the Microsoft Authentication Library (MSAL).\r\n// It provides methods for logging in, logging out, and validating the authenticated user, while managing token storage and refresh.\r\n// It also supports cross-tab synchronization of authentication state using the BroadcastChannel API.\r\n// It also supports revalidating authentication state when the user returns to a tab after it has been backgrounded for a period of time.\r\n// It also supports storing the token in either localStorage or sessionStorage, based on the user's preference.\r\n// It also supports determining if the token is expired and refreshing it if necessary, or logging the user out if the token cannot be refreshed.\r\n@Injectable({\r\n  providedIn: 'root'\r\n})\r\nexport class AuthenticationSSOService extends NgxLibServiceBase implements AbstractAuthenticationService {\r\n  //#region Fields\r\n  authenticating = false; // Flag set to true while the service is attempting to authenticate the user\r\n  authenticated = false; // Flag set to true when the user is successfully authenticated\r\n  authenticatedUser?: AuthenticatedUser; // Object representing the authenticated user\r\n\r\n  // error NG8110: Unsupported call to the output function. This function can only be used as the initializer of a property on a @Component or @Directive class.\r\n  /*authenticatedChanged = output<boolean>();\r\n  authenticatingChanged = output<boolean>();\r\n  authenticationError = output();*/\r\n  @Output() authenticatedChanged = new EventEmitter<boolean>();\r\n  @Output() authenticatingChanged = new EventEmitter<boolean>();\r\n  @Output() authenticationError = new EventEmitter();\r\n\r\n  // Microsoft Authentication Library (MSAL) instance for handling authentication\r\n  #msal: PublicClientApplication;\r\n  // Tracks one-time MSAL initialize() completion.\r\n  #initialized = false;\r\n\r\n  // Cross-tab messaging channel (same-origin tabs only).\r\n  #channel?: BroadcastChannel;\r\n  // Broadcast payload sent between tabs to synchronize logout.\r\n  #logoutMessage = 'logout';\r\n\r\n  // Coalescing flags used when syncing auth after tab visibility/focus resumes.\r\n  #resumeCheckInProgress = false;\r\n  #lastResumeCheckAt = 0;\r\n\r\n  // Timer id used to refresh tokens before expiry.\r\n  #tokenRefreshTimeoutId?: ReturnType<typeof setTimeout>;\r\n  // Treat near-expiry tokens as expired to avoid race conditions during downstream API calls.\r\n  #expirationSkewMilliseconds = 30000;\r\n\r\n  #expirationEpochSeconds = signal<number | undefined>(undefined);\r\n  //#endregion\r\n\r\n  //#region Properties\r\n\r\n  // I don't agree with these properties being required in the AbstractAuthenticationService interface\r\n  // I think this should be set in the options passed to the service.\r\n  // I know this is used in the login components under material but a developer who wants to use their own login with sessionStorage would need to know that they need to create a localStorage item called 'storeTokenInSession' and set it to true\r\n  // I have added a cacheLocation option to the AuthenticationSSOServiceOptions interface but if the users don't set it, they can use these properties to set the storage location\r\n\r\n  get useSessionStorage(): boolean {\r\n    return !!localStorage.getItem('storeTokenInSession');\r\n  }\r\n\r\n  get storage(): Storage {\r\n    return this.useSessionStorage ?\r\n      sessionStorage:\r\n      localStorage;\r\n  }\r\n\r\n  //#endregion\r\n\r\n  //#region Lifecycle\r\n  constructor(@Optional() @Inject(AuthenticationSSOServiceOptionsToken) protected options: AuthenticationSSOServiceOptions) {\r\n    super(options);\r\n\r\n    const authenticationEndpoint = options.authenticationEndpoint ?? `https://login.microsoftonline.com/${options.tenantId}`;\r\n\r\n    this.options = {\r\n      ...options,\r\n\r\n      tokenName: options.tokenName ?? options.clientId + '-token',\r\n      authenticationEndpoint\r\n    };\r\n\r\n    // if the user didn't set the cacheLocation in the options, we will set it to sessionStorage if useSessionStorage is true, otherwise we will set it to localStorage\r\n    this.options.cacheLocation = this.options.cacheLocation ?? (this.useSessionStorage ? 'sessionStorage' : 'localStorage');\r\n\r\n    // MSAL configuration for this SPA.\r\n    // Cache remains in sessionStorage so each tab has isolated auth cache.\r\n    const msalConfig: Configuration = {\r\n      auth: {\r\n        clientId: this.options.clientId,\r\n        authority: this.options.authenticationEndpoint,\r\n        redirectUri: this.options.redirectUri,\r\n        postLogoutRedirectUri: this.options.postLogoutRedirectUri\r\n      },\r\n      cache: {\r\n        cacheLocation: this.options.cacheLocation === 'sessionStorage' ? BrowserCacheLocation.SessionStorage : BrowserCacheLocation.LocalStorage\r\n      }\r\n    };\r\n\r\n    // Create MSAL client based on the configuration.\r\n    // We still need to call initialize() before using it, but this ensures that we only create one instance of the client.\r\n    this.#msal = new PublicClientApplication(msalConfig);\r\n\r\n    // Initialize the BroadcastChannel for cross-tab communication\r\n    this.#initializeBroadcastChannel();\r\n\r\n    // Register resume listeners so returning to a tab revalidates auth state.\r\n    this.#registerResumeListeners();\r\n\r\n    // Attempt to restore authenticated state from any existing Microsoft session.\r\n    this.checkForExistingToken();\r\n  }\r\n  //#endregion\r\n\r\n  //#region Utilities\r\n\r\n  //Authenticate the user and store the token in Local Storage or Session Storage\r\n  login(): void {\r\n    // There are times this item is left in sessionStorage after logout, which can cause MSAL to think a login is in progress and block future logins.\r\n    // This is a workaround to ensure that the item is removed after logout.\r\n    if (typeof sessionStorage !== 'undefined' && sessionStorage.getItem(\"msal.interaction.status\"))\r\n      sessionStorage.removeItem(\"msal.interaction.status\");\r\n\r\n    this.authenticating = true;\r\n    this.authenticatingChanged.emit(this.authenticating);\r\n\r\n    console.log('AuthenticationSSOService: login() called. Authenticating user...');\r\n\r\n    // Initialize MSAL and then perform login via popup, followed by user validation.\r\n    this.#initializeMsal()\r\n      .then(() => this.#msal.loginPopup({\r\n        scopes: this.options.scopes,\r\n        authority: this.options.authenticationEndpoint,\r\n        prompt: 'select_account'\r\n      }))\r\n      .then((result) => this.validateUser(result))\r\n      .catch((error: unknown) => {\r\n        this.authenticating = false;\r\n        this.authenticatingChanged.emit(this.authenticating);\r\n        this.authenticationError.emit(error);\r\n      });\r\n  }\r\n\r\n  // Primary logout flow:\r\n  // 1) clear local state in this tab,\r\n  // 2) notify other tabs to clear their local state,\r\n  // 3) initiate Entra sign-out redirect from this initiating tab.\r\n  logout(): void {\r\n    this.#logoutLocalOnly(false);\r\n    this.#publishLogout();\r\n\r\n    // Only the initiating tab should call identity-provider logout.\r\n    this.#clearTokenRefreshTimer();\r\n\r\n    this.#initializeMsal()\r\n      .then(() => this.#msal.logoutRedirect({\r\n        postLogoutRedirectUri: this.options.postLogoutRedirectUri\r\n      }))\r\n      .catch((error) => {\r\n        console.log('ERROR: Microsoft logout failed.', error);\r\n      });\r\n  }\r\n\r\n  tokenExists(): boolean {\r\n    const token = this.storage.getItem(this.options.tokenName ?? '');\r\n    return !!token;\r\n  }\r\n\r\n  // validateUser() = setAuthenticatedUser()\r\n  // Resolves current user and token claims into the app's authenticated model.\r\n  // Also validates/refreshes token when needed and schedules proactive refresh.\r\n  async validateUser(result?: AuthenticationResult, account?: AccountInfo): Promise<void> {\r\n    // Resolve account from auth result or fallback account.\r\n    let resolvedAccount = result?.account ?? account;\r\n\r\n    console.log('AuthenticationSSOService: Validating user. Result:', result, 'Account:', account, 'ResolvedAccount:', resolvedAccount);\r\n\r\n    // No account means app should be considered logged out.\r\n    if (!resolvedAccount) {\r\n      this.logout();\r\n      return;\r\n    }\r\n\r\n    // Keep MSAL active account in sync with resolved account context.\r\n    this.#msal.setActiveAccount(resolvedAccount);\r\n\r\n    let resolvedResult = result;\r\n    let claims = (resolvedResult?.idTokenClaims ?? resolvedAccount.idTokenClaims ?? {}) as AuthenticationSSOClaims;\r\n\r\n    // expiresOn comes over as a Date object if it exists, but exp is a number of seconds since epoch.\r\n    // therefore, if expiresOn exists convert it to seconds since epoch, otherwise use exp if it exists, otherwise undefined.\r\n    // expiresOn is only present when the token is acquired via acquireTokenSilent or acquireTokenPopup, but not when the token is acquired via loginPopup or loginRedirect.\r\n    let expirationEpochSeconds = resolvedResult?.expiresOn ? Math.floor(resolvedResult.expiresOn.getTime() / 1000) : claims.exp ?? undefined;\r\n\r\n    // If token appears expired, attempt silent refresh before setting user state.\r\n    if (this.#isTokenExpired(expirationEpochSeconds)) {\r\n      const refreshedResult = await this.#refreshToken(resolvedAccount);\r\n\r\n      // Refresh failure means we should end the session.\r\n      if (!refreshedResult?.account) {\r\n        this.logout();\r\n        return;\r\n      }\r\n\r\n      resolvedResult = refreshedResult;\r\n      resolvedAccount = refreshedResult.account;\r\n      claims = (resolvedResult.idTokenClaims ?? resolvedAccount.idTokenClaims ?? {}) as AuthenticationSSOClaims;\r\n      expirationEpochSeconds = resolvedResult?.expiresOn ? Math.floor(resolvedResult.expiresOn.getTime() / 1000) : claims.exp ?? undefined;\r\n\r\n      // Still expired after refresh; terminate session to avoid stale auth.\r\n      if (this.#isTokenExpired(expirationEpochSeconds)) {\r\n        this.logout();\r\n        return;\r\n      }\r\n    }\r\n\r\n    // Derive a stable account name from available claims.\r\n    const preferredUsername = String(claims.preferred_username ?? resolvedAccount.username ?? claims.upn ?? claims.email ?? '');\r\n    const accountName = preferredUsername.includes('@') ? preferredUsername.split('@')[0] : preferredUsername;\r\n\r\n    // Map Entra claims to the app's authenticated user shape.\r\n    this.authenticatedUser = {\r\n      admin: false,\r\n      accountName: claims.accountName ?? accountName,\r\n      department: claims.department ?? '',\r\n      displayName: claims.displayName ?? '',\r\n      distinguishedName: claims.distinguishedName ?? '',\r\n      email: claims.mail,\r\n      employeeNumber: claims.employeeNumber,\r\n      firstName: claims.firstName ?? '',\r\n      hireDate: claims.hireDate ?? '',\r\n      lastName: claims.lastName ?? '',\r\n      manager: claims.manager,\r\n      memberOf: claims.memberOf,\r\n      phone: claims.phone,\r\n      photoUrl: claims.photoUrl,\r\n      sid: claims.securityIdentifier ?? '',\r\n      title: claims.title,\r\n      workShift: claims.workShift\r\n    } as AuthenticatedUser;\r\n\r\n    // Persist the most recent id token from the auth result first.\r\n    // account.idToken can lag behind after silent refresh in some MSAL flows.\r\n    if (this.options.tokenName) {\r\n      const token = this.#getLatestIdToken(resolvedResult, resolvedAccount);\r\n      if (token) {\r\n        this.storage.setItem(this.options.tokenName, token);\r\n      } else {\r\n        this.storage.removeItem(this.options.tokenName);\r\n      }\r\n    }\r\n\r\n    this.#expirationEpochSeconds.set(expirationEpochSeconds);\r\n\r\n    // Schedule refresh before expiration to keep session uninterrupted.\r\n    this.#scheduleTokenRefresh(expirationEpochSeconds, resolvedAccount);\r\n\r\n    // Publish authenticated state only when it changes.\r\n    const wasAuthenticated = this.authenticated;\r\n    this.authenticated = true;\r\n    if (wasAuthenticated !== this.authenticated) {\r\n      this.authenticatedChanged.emit(this.authenticated);\r\n    }\r\n\r\n    this.authenticating = false;\r\n    this.authenticatingChanged.emit(this.authenticating);\r\n  }\r\n\r\n  // Rehydrates auth state from existing cached account on startup.\r\n  // We intentionally avoid handleRedirectPromise() because this service uses popup login.\r\n  checkForExistingToken(): void {\r\n    this.#initializeMsal()\r\n      .then(() => {\r\n        const account = this.#msal.getActiveAccount() ?? this.#msal.getAllAccounts()[0];\r\n        if (account)\r\n          return this.validateUser(undefined, account);\r\n\r\n        // Ensure stale app token is removed when MSAL has no cached account.\r\n        return this.#logoutLocalOnly(false);\r\n      })\r\n      .catch((error: unknown) => {\r\n        console.log('ERROR: Failed to hydrate Microsoft auth state.', error);\r\n      });\r\n  }\r\n\r\n  // Initialize MSAL if it hasn't been initialized yet\r\n  // This ensures that we only initialize MSAL once, even if multiple login attempts are made\r\n  // This is important because there is startup work that must be completed by MSAL before it can be used, and we don't want to repeat that work unnecessarily\r\n  async #initializeMsal(): Promise<void> {\r\n    if (this.#initialized) {\r\n      return;\r\n    }\r\n\r\n\r\n    await this.#msal.initialize();\r\n    this.#initialized = true;\r\n  }\r\n\r\n  // Sets up same-origin cross-tab messaging used to fan out logout events.\r\n  #initializeBroadcastChannel(): void {\r\n    if (typeof BroadcastChannel === 'undefined') {\r\n      // Some runtimes may not support BroadcastChannel.\r\n      return;\r\n    }\r\n\r\n    // Create a new BroadcastChannel for cross-tab communication\r\n    this.#channel = new BroadcastChannel('sso-authentication-channel');\r\n\r\n    // Listen for messages from other tabs for logout events.\r\n    // When a logout message is received, the current tab will clear its local state and reload the page.\r\n    this.#channel.onmessage = (event) => {\r\n      if (event.data === this.#logoutMessage) {\r\n        console.log('Received logout message from another tab.');\r\n        // Receiving tabs clear local state and reload so route guards re-evaluate immediately.\r\n        this.#logoutLocalOnly(true);\r\n      }\r\n    };\r\n  }\r\n\r\n  // Registers visibility/focus listeners to re-check auth when user returns to the tab.\r\n  // Tabs can be backgrounded for long periods, and the user may have logged out in another tab or session.\r\n  #registerResumeListeners(): void {\r\n    const handleResume = () => {\r\n      void this.#syncAuthOnResume();\r\n    };\r\n\r\n    if (typeof document !== 'undefined') {\r\n      document.addEventListener('visibilitychange', () => {\r\n        if (document.visibilityState === 'visible') {\r\n          handleResume();\r\n        }\r\n      });\r\n    }\r\n\r\n    if (typeof window !== 'undefined') {\r\n      window.addEventListener('focus', handleResume);\r\n    }\r\n  }\r\n\r\n  // Syncs auth state after resume while preventing duplicate checks from rapid events.\r\n  async #syncAuthOnResume(): Promise<void> {\r\n    const now = Date.now();\r\n\r\n    // visibilitychange and focus often fire back-to-back; coalesce to one check.\r\n    // if now was less than 1 second since last check, skip this one.\r\n    if (this.#resumeCheckInProgress || now - this.#lastResumeCheckAt < 1000) {\r\n      return;\r\n    }\r\n\r\n    this.#resumeCheckInProgress = true;\r\n    this.#lastResumeCheckAt = now;\r\n\r\n    try {\r\n      await this.#initializeMsal();\r\n\r\n      const account = this.#msal.getActiveAccount() ?? this.#msal.getAllAccounts()[0];\r\n\r\n      if (!account) {\r\n        await this.#logoutLocalOnly(false);\r\n        return;\r\n      }\r\n\r\n      await this.validateUser(undefined, account);\r\n    }\r\n    catch (error) {\r\n      console.log('Error: Resume auth sync failed.', error);\r\n    }\r\n    finally {\r\n      this.#resumeCheckInProgress = false;\r\n    }\r\n  }\r\n\r\n  // Sends logout signal to other open tabs.\r\n  #publishLogout(): void {\r\n    this.#channel?.postMessage(this.#logoutMessage);\r\n  }\r\n\r\n  // Clears app/MSAL state in current tab without invoking provider-side logout.\r\n  // reloadAfterLogout is intended for non-initiating tabs to force UI reset to auth route.\r\n  async #logoutLocalOnly(reloadAfterLogout: boolean): Promise<void> {\r\n    this.#clearTokenRefreshTimer();\r\n\r\n    if (this.options.tokenName && this.storage.getItem(this.options.tokenName)) {\r\n      this.storage.removeItem(this.options.tokenName);\r\n    }\r\n\r\n    const wasAuthenticated = this.authenticated;\r\n    this.authenticatedUser = undefined;\r\n    this.authenticated = false;\r\n    if (wasAuthenticated !== this.authenticated) {\r\n      this.authenticatedChanged.emit(false);\r\n    }\r\n\r\n    try {\r\n      await this.#initializeMsal();\r\n      await this.#msal.clearCache();\r\n      this.#msal.setActiveAccount(null);\r\n\r\n      // There are times this item is left in sessionStorage after logout, which can cause MSAL to think a login is in progress and block future logins.\r\n      // This is a workaround to ensure that the item is removed after logout.\r\n      sessionStorage.removeItem(\"msal.interaction.status\");\r\n\r\n      // Secondary tabs should hard-refresh to guarantee route guards and app state reset.\r\n      if (reloadAfterLogout && typeof window !== 'undefined') {\r\n        window.location.reload();\r\n      }\r\n    } catch (error) {\r\n      console.log('WARN: Local MSAL cache clear failed.', error);\r\n    }\r\n  }\r\n\r\n  // Returns true when token expiration is absent or in the past.\r\n  #isTokenExpired(expirationEpochSeconds?: number): boolean {\r\n    if (expirationEpochSeconds == null || expirationEpochSeconds == undefined || expirationEpochSeconds <= 0) {\r\n      return true;\r\n    }\r\n\r\n    return Date.now() + this.#expirationSkewMilliseconds >= expirationEpochSeconds * 1000;\r\n  }\r\n\r\n  // Attempts silent token acquisition for the current account.\r\n  async #refreshToken(account: AccountInfo): Promise<AuthenticationResult | undefined> {\r\n    try {\r\n      return await this.#msal.acquireTokenSilent({\r\n        account,\r\n        scopes: this.options.scopes\r\n      });\r\n    }\r\n    catch (error) {\r\n      console.log('Error: Silent token refresh failed.', error);\r\n      return undefined;\r\n    }\r\n  }\r\n\r\n  // Prefers the token returned from the most recent auth result.\r\n  #getLatestIdToken(result?: AuthenticationResult, account?: AccountInfo): string | undefined {\r\n    return result?.idToken ?? account?.idToken;\r\n  }\r\n\r\n  // Schedules token refresh shortly before expiration.\r\n  // If refresh fails, session is terminated to avoid inconsistent auth state.\r\n  #scheduleTokenRefresh(expirationEpochSeconds: number | undefined, account: AccountInfo): void {\r\n    this.#clearTokenRefreshTimer();\r\n\r\n    if (!expirationEpochSeconds) {\r\n      return;\r\n    }\r\n\r\n    // Convert Unix epoch seconds to milliseconds for Date.now() comparison\r\n    const expirationEpochMilliseconds = expirationEpochSeconds * 1000;\r\n    // Schedule refresh 1 minute before expiration\r\n    const refreshLeadTimeMs = 60000;\r\n    // Calculate the delay until the refresh should occur, ensuring it's not negative\r\n    const millisecondsUntilRefresh = expirationEpochMilliseconds - Date.now() - refreshLeadTimeMs;\r\n    const delay = Math.max(millisecondsUntilRefresh, 0);\r\n\r\n    this.#tokenRefreshTimeoutId = setTimeout(() => {\r\n      this.#refreshToken(account)\r\n        .then((result) => {\r\n          console.log('AuthenticationSSOService: Token refresh result.', result);\r\n          if (result?.account) {\r\n            return this.validateUser(result, result.account);\r\n          }\r\n\r\n          // No account after refresh implies invalid session.\r\n          this.logout();\r\n          return undefined;\r\n        })\r\n        .catch(() => {\r\n          // Any refresh exception falls back to logout for safety.\r\n          this.logout();\r\n        });\r\n    }, delay);\r\n  }\r\n\r\n  // Cancels any pending token refresh timer.\r\n  #clearTokenRefreshTimer(): void {\r\n    if (!this.#tokenRefreshTimeoutId) {\r\n      return;\r\n    }\r\n\r\n    clearTimeout(this.#tokenRefreshTimeoutId);\r\n    this.#tokenRefreshTimeoutId = undefined;\r\n  }\r\n  //#endregion\r\n}\r\n","import { Component, OnInit, ChangeDetectionStrategy } from '@angular/core';\nimport { broadcastResponseToMainFrame } from '@azure/msal-browser/redirect-bridge';\n\n@Component({\n  selector: 'app-authentication-sso-redirect',\n  standalone: true,\n  changeDetection: ChangeDetectionStrategy.Eager,\n  template: '<p>Processing authentication...</p>',\n})\nexport class AuthenticationSSORedirectComponent implements OnInit {\n  ngOnInit(): void {\n    broadcastResponseToMainFrame().catch((error: Error) => {\n      console.error('Error broadcasting response to main frame:', error);\n    });\n  }\n}\n","import { CommonModule } from '@angular/common';\r\nimport { ModuleWithProviders, NgModule, Optional, SkipSelf } from '@angular/core';\r\n\r\nimport { AuthenticationSSOServiceOptions } from './model/authentication-sso-service-options';\r\nimport { AuthenticationSSOServiceOptionsToken } from './model/authentication-sso-service-options-token';\r\nimport { AuthenticationSSORedirectComponent } from './components/redirect/authentication-sso-redirect.component';\r\n\r\n@NgModule({\r\n  declarations: [],\r\n  imports: [\r\n    CommonModule,\r\n    AuthenticationSSORedirectComponent\r\n  ],\r\n  exports: [\r\n    AuthenticationSSORedirectComponent\r\n  ]\r\n})\r\nexport class AuthenticationSSOModule {\r\n  static forRoot(options: AuthenticationSSOServiceOptions): ModuleWithProviders<AuthenticationSSOModule> {\r\n    return {\r\n      ngModule: AuthenticationSSOModule,\r\n      providers: [\r\n        {\r\n          provide: AuthenticationSSOServiceOptionsToken,\r\n          useValue: options\r\n        }\r\n      ]\r\n    };\r\n  }\r\n\r\n  constructor(@Optional() @SkipSelf() parentModule: AuthenticationSSOModule) {\r\n    if (parentModule) {\r\n      throw new Error(\r\n        'AuthenticationSSOModule is already loaded. Import it in the AppModule only');\r\n    }\r\n  }\r\n}\r\n","import { inject } from '@angular/core';\r\nimport { CanActivateFn, Router } from '@angular/router';\r\nimport { map, take } from 'rxjs/operators';\r\nimport { AuthenticationSSOService } from '../authentication-sso.api';\r\n\r\nexport const authenticationSSOGuard: CanActivateFn = (_route, _state) => {\r\n  const authenticationService = inject(AuthenticationSSOService);\r\n  const router = inject(Router);\r\n\r\n  // if the user is already authenticated, allow access to the route\r\n  if (authenticationService.authenticated) {\r\n    return true;\r\n  }\r\n\r\n  if (authenticationService.tokenExists()) {\r\n    // we're doing this because we could've opened a new tab and the user is already logged in, so we need to check for an existing token\r\n    authenticationService.checkForExistingToken();\r\n\r\n    return authenticationService.authenticatedChanged.pipe(\r\n      take(1),\r\n      map(() => {\r\n        if (!authenticationService.authenticated) {\r\n          router.navigate(['']);\r\n          return false;\r\n        }\r\n\r\n        return true;\r\n      })\r\n    );\r\n  }\r\n  else {\r\n    router.navigate(['']);\r\n    return false;\r\n  }\r\n};\r\n","/**\n * Generated bundle index. Do not edit.\n */\n\nexport * from './authentication-sso.api';\n"],"names":[],"mappings":";;;;;;;;;AAGA;AACA;AACA;AACA;AACA;MACa,oCAAoC,GAAG,IAAI,cAAc,CAAkC,iCAAiC;;ACUzI;AACA;AACA;AACA;AACA;AACA;AAIM,MAAO,wBAAyB,SAAQ,iBAAiB,CAAA;;AAe7D,IAAA,KAAK;;AAEL,IAAA,YAAY;;AAGZ,IAAA,QAAQ;;AAER,IAAA,cAAc;;AAGd,IAAA,sBAAsB;AACtB,IAAA,kBAAkB;;AAGlB,IAAA,sBAAsB;;AAEtB,IAAA,2BAA2B;AAE3B,IAAA,uBAAuB;;;;;;;AAUvB,IAAA,IAAI,iBAAiB,GAAA;QACnB,OAAO,CAAC,CAAC,YAAY,CAAC,OAAO,CAAC,qBAAqB,CAAC;IACtD;AAEA,IAAA,IAAI,OAAO,GAAA;AACT,QAAA,OAAO,IAAI,CAAC,iBAAiB;AAC3B,YAAA,cAAc;AACd,YAAA,YAAY;IAChB;;;AAKA,IAAA,WAAA,CAAgF,OAAwC,EAAA;QACtH,KAAK,CAAC,OAAO,CAAC;QADgE,IAAA,CAAA,OAAO,GAAP,OAAO;;AAtDvF,QAAA,IAAA,CAAA,cAAc,GAAG,KAAK,CAAC;AACvB,QAAA,IAAA,CAAA,aAAa,GAAG,KAAK,CAAC;;AAItB;;AAEiC;AACvB,QAAA,IAAA,CAAA,oBAAoB,GAAG,IAAI,YAAY,EAAW;AAClD,QAAA,IAAA,CAAA,qBAAqB,GAAG,IAAI,YAAY,EAAW;AACnD,QAAA,IAAA,CAAA,mBAAmB,GAAG,IAAI,YAAY,EAAE;;QAKlD,IAAA,CAAA,YAAY,GAAG,KAAK;;QAKpB,IAAA,CAAA,cAAc,GAAG,QAAQ;;QAGzB,IAAA,CAAA,sBAAsB,GAAG,KAAK;QAC9B,IAAA,CAAA,kBAAkB,GAAG,CAAC;;QAKtB,IAAA,CAAA,2BAA2B,GAAG,KAAK;QAEnC,IAAA,CAAA,uBAAuB,GAAG,MAAM,CAAqB,SAAS;oGAAC;QA0B7D,MAAM,sBAAsB,GAAG,OAAO,CAAC,sBAAsB,IAAI,CAAA,kCAAA,EAAqC,OAAO,CAAC,QAAQ,CAAA,CAAE;QAExH,IAAI,CAAC,OAAO,GAAG;AACb,YAAA,GAAG,OAAO;YAEV,SAAS,EAAE,OAAO,CAAC,SAAS,IAAI,OAAO,CAAC,QAAQ,GAAG,QAAQ;YAC3D;SACD;;QAGD,IAAI,CAAC,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,KAAK,IAAI,CAAC,iBAAiB,GAAG,gBAAgB,GAAG,cAAc,CAAC;;;AAIvH,QAAA,MAAM,UAAU,GAAkB;AAChC,YAAA,IAAI,EAAE;AACJ,gBAAA,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC,QAAQ;AAC/B,gBAAA,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,sBAAsB;AAC9C,gBAAA,WAAW,EAAE,IAAI,CAAC,OAAO,CAAC,WAAW;AACrC,gBAAA,qBAAqB,EAAE,IAAI,CAAC,OAAO,CAAC;AACrC,aAAA;AACD,YAAA,KAAK,EAAE;AACL,gBAAA,aAAa,EAAE,IAAI,CAAC,OAAO,CAAC,aAAa,KAAK,gBAAgB,GAAG,oBAAoB,CAAC,cAAc,GAAG,oBAAoB,CAAC;AAC7H;SACF;;;QAID,IAAI,CAAC,KAAK,GAAG,IAAI,uBAAuB,CAAC,UAAU,CAAC;;QAGpD,IAAI,CAAC,2BAA2B,EAAE;;QAGlC,IAAI,CAAC,wBAAwB,EAAE;;QAG/B,IAAI,CAAC,qBAAqB,EAAE;IAC9B;;;;IAMA,KAAK,GAAA;;;QAGH,IAAI,OAAO,cAAc,KAAK,WAAW,IAAI,cAAc,CAAC,OAAO,CAAC,yBAAyB,CAAC;AAC5F,YAAA,cAAc,CAAC,UAAU,CAAC,yBAAyB,CAAC;AAEtD,QAAA,IAAI,CAAC,cAAc,GAAG,IAAI;QAC1B,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC;AAEpD,QAAA,OAAO,CAAC,GAAG,CAAC,kEAAkE,CAAC;;QAG/E,IAAI,CAAC,eAAe;aACjB,IAAI,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC;AAChC,YAAA,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM;AAC3B,YAAA,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,sBAAsB;AAC9C,YAAA,MAAM,EAAE;AACT,SAAA,CAAC;AACD,aAAA,IAAI,CAAC,CAAC,MAAM,KAAK,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC;AAC1C,aAAA,KAAK,CAAC,CAAC,KAAc,KAAI;AACxB,YAAA,IAAI,CAAC,cAAc,GAAG,KAAK;YAC3B,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC;AACpD,YAAA,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,KAAK,CAAC;AACtC,QAAA,CAAC,CAAC;IACN;;;;;IAMA,MAAM,GAAA;AACJ,QAAA,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC;QAC5B,IAAI,CAAC,cAAc,EAAE;;QAGrB,IAAI,CAAC,uBAAuB,EAAE;QAE9B,IAAI,CAAC,eAAe;aACjB,IAAI,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC;AACpC,YAAA,qBAAqB,EAAE,IAAI,CAAC,OAAO,CAAC;AACrC,SAAA,CAAC;AACD,aAAA,KAAK,CAAC,CAAC,KAAK,KAAI;AACf,YAAA,OAAO,CAAC,GAAG,CAAC,iCAAiC,EAAE,KAAK,CAAC;AACvD,QAAA,CAAC,CAAC;IACN;IAEA,WAAW,GAAA;AACT,QAAA,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,IAAI,EAAE,CAAC;QAChE,OAAO,CAAC,CAAC,KAAK;IAChB;;;;AAKA,IAAA,MAAM,YAAY,CAAC,MAA6B,EAAE,OAAqB,EAAA;;AAErE,QAAA,IAAI,eAAe,GAAG,MAAM,EAAE,OAAO,IAAI,OAAO;AAEhD,QAAA,OAAO,CAAC,GAAG,CAAC,oDAAoD,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,kBAAkB,EAAE,eAAe,CAAC;;QAGnI,IAAI,CAAC,eAAe,EAAE;YACpB,IAAI,CAAC,MAAM,EAAE;YACb;QACF;;AAGA,QAAA,IAAI,CAAC,KAAK,CAAC,gBAAgB,CAAC,eAAe,CAAC;QAE5C,IAAI,cAAc,GAAG,MAAM;AAC3B,QAAA,IAAI,MAAM,IAAI,cAAc,EAAE,aAAa,IAAI,eAAe,CAAC,aAAa,IAAI,EAAE,CAA4B;;;;AAK9G,QAAA,IAAI,sBAAsB,GAAG,cAAc,EAAE,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,SAAS,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,GAAG,MAAM,CAAC,GAAG,IAAI,SAAS;;AAGxI,QAAA,IAAI,IAAI,CAAC,eAAe,CAAC,sBAAsB,CAAC,EAAE;YAChD,MAAM,eAAe,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,eAAe,CAAC;;AAGjE,YAAA,IAAI,CAAC,eAAe,EAAE,OAAO,EAAE;gBAC7B,IAAI,CAAC,MAAM,EAAE;gBACb;YACF;YAEA,cAAc,GAAG,eAAe;AAChC,YAAA,eAAe,GAAG,eAAe,CAAC,OAAO;AACzC,YAAA,MAAM,IAAI,cAAc,CAAC,aAAa,IAAI,eAAe,CAAC,aAAa,IAAI,EAAE,CAA4B;AACzG,YAAA,sBAAsB,GAAG,cAAc,EAAE,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,SAAS,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,GAAG,MAAM,CAAC,GAAG,IAAI,SAAS;;AAGpI,YAAA,IAAI,IAAI,CAAC,eAAe,CAAC,sBAAsB,CAAC,EAAE;gBAChD,IAAI,CAAC,MAAM,EAAE;gBACb;YACF;QACF;;QAGA,MAAM,iBAAiB,GAAG,MAAM,CAAC,MAAM,CAAC,kBAAkB,IAAI,eAAe,CAAC,QAAQ,IAAI,MAAM,CAAC,GAAG,IAAI,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC;QAC3H,MAAM,WAAW,GAAG,iBAAiB,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,iBAAiB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,iBAAiB;;QAGzG,IAAI,CAAC,iBAAiB,GAAG;AACvB,YAAA,KAAK,EAAE,KAAK;AACZ,YAAA,WAAW,EAAE,MAAM,CAAC,WAAW,IAAI,WAAW;AAC9C,YAAA,UAAU,EAAE,MAAM,CAAC,UAAU,IAAI,EAAE;AACnC,YAAA,WAAW,EAAE,MAAM,CAAC,WAAW,IAAI,EAAE;AACrC,YAAA,iBAAiB,EAAE,MAAM,CAAC,iBAAiB,IAAI,EAAE;YACjD,KAAK,EAAE,MAAM,CAAC,IAAI;YAClB,cAAc,EAAE,MAAM,CAAC,cAAc;AACrC,YAAA,SAAS,EAAE,MAAM,CAAC,SAAS,IAAI,EAAE;AACjC,YAAA,QAAQ,EAAE,MAAM,CAAC,QAAQ,IAAI,EAAE;AAC/B,YAAA,QAAQ,EAAE,MAAM,CAAC,QAAQ,IAAI,EAAE;YAC/B,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,QAAQ,EAAE,MAAM,CAAC,QAAQ;AACzB,YAAA,GAAG,EAAE,MAAM,CAAC,kBAAkB,IAAI,EAAE;YACpC,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,SAAS,EAAE,MAAM,CAAC;SACE;;;AAItB,QAAA,IAAI,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE;YAC1B,MAAM,KAAK,GAAG,IAAI,CAAC,iBAAiB,CAAC,cAAc,EAAE,eAAe,CAAC;YACrE,IAAI,KAAK,EAAE;AACT,gBAAA,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,KAAK,CAAC;YACrD;iBAAO;gBACL,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC;YACjD;QACF;AAEA,QAAA,IAAI,CAAC,uBAAuB,CAAC,GAAG,CAAC,sBAAsB,CAAC;;AAGxD,QAAA,IAAI,CAAC,qBAAqB,CAAC,sBAAsB,EAAE,eAAe,CAAC;;AAGnE,QAAA,MAAM,gBAAgB,GAAG,IAAI,CAAC,aAAa;AAC3C,QAAA,IAAI,CAAC,aAAa,GAAG,IAAI;AACzB,QAAA,IAAI,gBAAgB,KAAK,IAAI,CAAC,aAAa,EAAE;YAC3C,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC;QACpD;AAEA,QAAA,IAAI,CAAC,cAAc,GAAG,KAAK;QAC3B,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC;IACtD;;;IAIA,qBAAqB,GAAA;QACnB,IAAI,CAAC,eAAe;aACjB,IAAI,CAAC,MAAK;AACT,YAAA,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,gBAAgB,EAAE,IAAI,IAAI,CAAC,KAAK,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC;AAC/E,YAAA,IAAI,OAAO;gBACT,OAAO,IAAI,CAAC,YAAY,CAAC,SAAS,EAAE,OAAO,CAAC;;AAG9C,YAAA,OAAO,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC;AACrC,QAAA,CAAC;AACA,aAAA,KAAK,CAAC,CAAC,KAAc,KAAI;AACxB,YAAA,OAAO,CAAC,GAAG,CAAC,gDAAgD,EAAE,KAAK,CAAC;AACtE,QAAA,CAAC,CAAC;IACN;;;;AAKA,IAAA,MAAM,eAAe,GAAA;AACnB,QAAA,IAAI,IAAI,CAAC,YAAY,EAAE;YACrB;QACF;AAGA,QAAA,MAAM,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE;AAC7B,QAAA,IAAI,CAAC,YAAY,GAAG,IAAI;IAC1B;;IAGA,2BAA2B,GAAA;AACzB,QAAA,IAAI,OAAO,gBAAgB,KAAK,WAAW,EAAE;;YAE3C;QACF;;QAGA,IAAI,CAAC,QAAQ,GAAG,IAAI,gBAAgB,CAAC,4BAA4B,CAAC;;;QAIlE,IAAI,CAAC,QAAQ,CAAC,SAAS,GAAG,CAAC,KAAK,KAAI;YAClC,IAAI,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,cAAc,EAAE;AACtC,gBAAA,OAAO,CAAC,GAAG,CAAC,2CAA2C,CAAC;;AAExD,gBAAA,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC;YAC7B;AACF,QAAA,CAAC;IACH;;;IAIA,wBAAwB,GAAA;QACtB,MAAM,YAAY,GAAG,MAAK;AACxB,YAAA,KAAK,IAAI,CAAC,iBAAiB,EAAE;AAC/B,QAAA,CAAC;AAED,QAAA,IAAI,OAAO,QAAQ,KAAK,WAAW,EAAE;AACnC,YAAA,QAAQ,CAAC,gBAAgB,CAAC,kBAAkB,EAAE,MAAK;AACjD,gBAAA,IAAI,QAAQ,CAAC,eAAe,KAAK,SAAS,EAAE;AAC1C,oBAAA,YAAY,EAAE;gBAChB;AACF,YAAA,CAAC,CAAC;QACJ;AAEA,QAAA,IAAI,OAAO,MAAM,KAAK,WAAW,EAAE;AACjC,YAAA,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,YAAY,CAAC;QAChD;IACF;;AAGA,IAAA,MAAM,iBAAiB,GAAA;AACrB,QAAA,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE;;;AAItB,QAAA,IAAI,IAAI,CAAC,sBAAsB,IAAI,GAAG,GAAG,IAAI,CAAC,kBAAkB,GAAG,IAAI,EAAE;YACvE;QACF;AAEA,QAAA,IAAI,CAAC,sBAAsB,GAAG,IAAI;AAClC,QAAA,IAAI,CAAC,kBAAkB,GAAG,GAAG;AAE7B,QAAA,IAAI;AACF,YAAA,MAAM,IAAI,CAAC,eAAe,EAAE;AAE5B,YAAA,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,gBAAgB,EAAE,IAAI,IAAI,CAAC,KAAK,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC;YAE/E,IAAI,CAAC,OAAO,EAAE;AACZ,gBAAA,MAAM,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC;gBAClC;YACF;YAEA,MAAM,IAAI,CAAC,YAAY,CAAC,SAAS,EAAE,OAAO,CAAC;QAC7C;QACA,OAAO,KAAK,EAAE;AACZ,YAAA,OAAO,CAAC,GAAG,CAAC,iCAAiC,EAAE,KAAK,CAAC;QACvD;gBACQ;AACN,YAAA,IAAI,CAAC,sBAAsB,GAAG,KAAK;QACrC;IACF;;IAGA,cAAc,GAAA;QACZ,IAAI,CAAC,QAAQ,EAAE,WAAW,CAAC,IAAI,CAAC,cAAc,CAAC;IACjD;;;IAIA,MAAM,gBAAgB,CAAC,iBAA0B,EAAA;QAC/C,IAAI,CAAC,uBAAuB,EAAE;AAE9B,QAAA,IAAI,IAAI,CAAC,OAAO,CAAC,SAAS,IAAI,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE;YAC1E,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC;QACjD;AAEA,QAAA,MAAM,gBAAgB,GAAG,IAAI,CAAC,aAAa;AAC3C,QAAA,IAAI,CAAC,iBAAiB,GAAG,SAAS;AAClC,QAAA,IAAI,CAAC,aAAa,GAAG,KAAK;AAC1B,QAAA,IAAI,gBAAgB,KAAK,IAAI,CAAC,aAAa,EAAE;AAC3C,YAAA,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,KAAK,CAAC;QACvC;AAEA,QAAA,IAAI;AACF,YAAA,MAAM,IAAI,CAAC,eAAe,EAAE;AAC5B,YAAA,MAAM,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE;AAC7B,YAAA,IAAI,CAAC,KAAK,CAAC,gBAAgB,CAAC,IAAI,CAAC;;;AAIjC,YAAA,cAAc,CAAC,UAAU,CAAC,yBAAyB,CAAC;;AAGpD,YAAA,IAAI,iBAAiB,IAAI,OAAO,MAAM,KAAK,WAAW,EAAE;AACtD,gBAAA,MAAM,CAAC,QAAQ,CAAC,MAAM,EAAE;YAC1B;QACF;QAAE,OAAO,KAAK,EAAE;AACd,YAAA,OAAO,CAAC,GAAG,CAAC,sCAAsC,EAAE,KAAK,CAAC;QAC5D;IACF;;AAGA,IAAA,eAAe,CAAC,sBAA+B,EAAA;AAC7C,QAAA,IAAI,sBAAsB,IAAI,IAAI,IAAI,sBAAsB,IAAI,SAAS,IAAI,sBAAsB,IAAI,CAAC,EAAE;AACxG,YAAA,OAAO,IAAI;QACb;AAEA,QAAA,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,2BAA2B,IAAI,sBAAsB,GAAG,IAAI;IACvF;;IAGA,MAAM,aAAa,CAAC,OAAoB,EAAA;AACtC,QAAA,IAAI;AACF,YAAA,OAAO,MAAM,IAAI,CAAC,KAAK,CAAC,kBAAkB,CAAC;gBACzC,OAAO;AACP,gBAAA,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC;AACtB,aAAA,CAAC;QACJ;QACA,OAAO,KAAK,EAAE;AACZ,YAAA,OAAO,CAAC,GAAG,CAAC,qCAAqC,EAAE,KAAK,CAAC;AACzD,YAAA,OAAO,SAAS;QAClB;IACF;;IAGA,iBAAiB,CAAC,MAA6B,EAAE,OAAqB,EAAA;AACpE,QAAA,OAAO,MAAM,EAAE,OAAO,IAAI,OAAO,EAAE,OAAO;IAC5C;;;IAIA,qBAAqB,CAAC,sBAA0C,EAAE,OAAoB,EAAA;QACpF,IAAI,CAAC,uBAAuB,EAAE;QAE9B,IAAI,CAAC,sBAAsB,EAAE;YAC3B;QACF;;AAGA,QAAA,MAAM,2BAA2B,GAAG,sBAAsB,GAAG,IAAI;;QAEjE,MAAM,iBAAiB,GAAG,KAAK;;QAE/B,MAAM,wBAAwB,GAAG,2BAA2B,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,iBAAiB;QAC7F,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,wBAAwB,EAAE,CAAC,CAAC;AAEnD,QAAA,IAAI,CAAC,sBAAsB,GAAG,UAAU,CAAC,MAAK;AAC5C,YAAA,IAAI,CAAC,aAAa,CAAC,OAAO;AACvB,iBAAA,IAAI,CAAC,CAAC,MAAM,KAAI;AACf,gBAAA,OAAO,CAAC,GAAG,CAAC,iDAAiD,EAAE,MAAM,CAAC;AACtE,gBAAA,IAAI,MAAM,EAAE,OAAO,EAAE;oBACnB,OAAO,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,MAAM,CAAC,OAAO,CAAC;gBAClD;;gBAGA,IAAI,CAAC,MAAM,EAAE;AACb,gBAAA,OAAO,SAAS;AAClB,YAAA,CAAC;iBACA,KAAK,CAAC,MAAK;;gBAEV,IAAI,CAAC,MAAM,EAAE;AACf,YAAA,CAAC,CAAC;QACN,CAAC,EAAE,KAAK,CAAC;IACX;;IAGA,uBAAuB,GAAA;AACrB,QAAA,IAAI,CAAC,IAAI,CAAC,sBAAsB,EAAE;YAChC;QACF;AAEA,QAAA,YAAY,CAAC,IAAI,CAAC,sBAAsB,CAAC;AACzC,QAAA,IAAI,CAAC,sBAAsB,GAAG,SAAS;IACzC;AArdW,IAAA,SAAA,IAAA,CAAA,IAAA,GAAA,EAAA,CAAA,kBAAA,CAAA,EAAA,UAAA,EAAA,QAAA,EAAA,OAAA,EAAA,QAAA,EAAA,QAAA,EAAA,EAAA,EAAA,IAAA,EAAA,wBAAwB,kBAwDH,oCAAoC,EAAA,QAAA,EAAA,IAAA,EAAA,CAAA,EAAA,MAAA,EAAA,EAAA,CAAA,eAAA,CAAA,UAAA,EAAA,CAAA,CAAA;AAxDzD,IAAA,SAAA,IAAA,CAAA,KAAA,GAAA,EAAA,CAAA,qBAAA,CAAA,EAAA,UAAA,EAAA,QAAA,EAAA,OAAA,EAAA,QAAA,EAAA,QAAA,EAAA,EAAA,EAAA,IAAA,EAAA,wBAAwB,cAFvB,MAAM,EAAA,CAAA,CAAA;;2FAEP,wBAAwB,EAAA,UAAA,EAAA,CAAA;kBAHpC,UAAU;AAAC,YAAA,IAAA,EAAA,CAAA;AACV,oBAAA,UAAU,EAAE;AACb,iBAAA;;0BAyDc;;0BAAY,MAAM;2BAAC,oCAAoC;;sBA9CnE;;sBACA;;sBACA;;;MC9BU,kCAAkC,CAAA;IAC7C,QAAQ,GAAA;AACN,QAAA,4BAA4B,EAAE,CAAC,KAAK,CAAC,CAAC,KAAY,KAAI;AACpD,YAAA,OAAO,CAAC,KAAK,CAAC,4CAA4C,EAAE,KAAK,CAAC;AACpE,QAAA,CAAC,CAAC;IACJ;8GALW,kCAAkC,EAAA,IAAA,EAAA,EAAA,EAAA,MAAA,EAAA,EAAA,CAAA,eAAA,CAAA,SAAA,EAAA,CAAA,CAAA;AAAlC,IAAA,SAAA,IAAA,CAAA,IAAA,GAAA,EAAA,CAAA,oBAAA,CAAA,EAAA,UAAA,EAAA,QAAA,EAAA,OAAA,EAAA,QAAA,EAAA,IAAA,EAAA,kCAAkC,2FAFnC,qCAAqC,EAAA,QAAA,EAAA,IAAA,EAAA,eAAA,EAAA,EAAA,CAAA,uBAAA,CAAA,KAAA,EAAA,CAAA,CAAA;;2FAEpC,kCAAkC,EAAA,UAAA,EAAA,CAAA;kBAN9C,SAAS;AAAC,YAAA,IAAA,EAAA,CAAA;AACT,oBAAA,QAAQ,EAAE,iCAAiC;AAC3C,oBAAA,UAAU,EAAE,IAAI;oBAChB,eAAe,EAAE,uBAAuB,CAAC,KAAK;AAC9C,oBAAA,QAAQ,EAAE,qCAAqC;AAChD,iBAAA;;;MCSY,uBAAuB,CAAA;IAClC,OAAO,OAAO,CAAC,OAAwC,EAAA;QACrD,OAAO;AACL,YAAA,QAAQ,EAAE,uBAAuB;AACjC,YAAA,SAAS,EAAE;AACT,gBAAA;AACE,oBAAA,OAAO,EAAE,oCAAoC;AAC7C,oBAAA,QAAQ,EAAE;AACX;AACF;SACF;IACH;AAEA,IAAA,WAAA,CAAoC,YAAqC,EAAA;QACvE,IAAI,YAAY,EAAE;AAChB,YAAA,MAAM,IAAI,KAAK,CACb,4EAA4E,CAAC;QACjF;IACF;8GAlBW,uBAAuB,EAAA,IAAA,EAAA,CAAA,EAAA,KAAA,EAAA,uBAAA,EAAA,QAAA,EAAA,IAAA,EAAA,QAAA,EAAA,IAAA,EAAA,CAAA,EAAA,MAAA,EAAA,EAAA,CAAA,eAAA,CAAA,QAAA,EAAA,CAAA,CAAA;AAAvB,IAAA,SAAA,IAAA,CAAA,IAAA,GAAA,EAAA,CAAA,mBAAA,CAAA,EAAA,UAAA,EAAA,QAAA,EAAA,OAAA,EAAA,QAAA,EAAA,QAAA,EAAA,EAAA,EAAA,IAAA,EAAA,uBAAuB,YAPhC,YAAY;AACZ,YAAA,kCAAkC,aAGlC,kCAAkC,CAAA,EAAA,CAAA,CAAA;AAGzB,IAAA,SAAA,IAAA,CAAA,IAAA,GAAA,EAAA,CAAA,mBAAA,CAAA,EAAA,UAAA,EAAA,QAAA,EAAA,OAAA,EAAA,QAAA,EAAA,QAAA,EAAA,EAAA,EAAA,IAAA,EAAA,uBAAuB,YAPhC,YAAY,CAAA,EAAA,CAAA,CAAA;;2FAOH,uBAAuB,EAAA,UAAA,EAAA,CAAA;kBAVnC,QAAQ;AAAC,YAAA,IAAA,EAAA,CAAA;AACR,oBAAA,YAAY,EAAE,EAAE;AAChB,oBAAA,OAAO,EAAE;wBACP,YAAY;wBACZ;AACD,qBAAA;AACD,oBAAA,OAAO,EAAE;wBACP;AACD;AACF,iBAAA;;0BAcc;;0BAAY;;;MCzBd,sBAAsB,GAAkB,CAAC,MAAM,EAAE,MAAM,KAAI;AACtE,IAAA,MAAM,qBAAqB,GAAG,MAAM,CAAC,wBAAwB,CAAC;AAC9D,IAAA,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;;AAG7B,IAAA,IAAI,qBAAqB,CAAC,aAAa,EAAE;AACvC,QAAA,OAAO,IAAI;IACb;AAEA,IAAA,IAAI,qBAAqB,CAAC,WAAW,EAAE,EAAE;;QAEvC,qBAAqB,CAAC,qBAAqB,EAAE;AAE7C,QAAA,OAAO,qBAAqB,CAAC,oBAAoB,CAAC,IAAI,CACpD,IAAI,CAAC,CAAC,CAAC,EACP,GAAG,CAAC,MAAK;AACP,YAAA,IAAI,CAAC,qBAAqB,CAAC,aAAa,EAAE;AACxC,gBAAA,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC;AACrB,gBAAA,OAAO,KAAK;YACd;AAEA,YAAA,OAAO,IAAI;QACb,CAAC,CAAC,CACH;IACH;SACK;AACH,QAAA,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC;AACrB,QAAA,OAAO,KAAK;IACd;AACF;;AClCA;;AAEG;;;;"}
+{"version":3,"file":"cleavelandprice-ngx-lib-authentication-sso.mjs","sources":["../../../../projects/cleavelandprice/ngx-lib/authentication/sso/src/model/authentication-sso-service-options-token.ts","../../../../projects/cleavelandprice/ngx-lib/authentication/sso/src/services/authentication-sso.service.ts","../../../../projects/cleavelandprice/ngx-lib/authentication/sso/src/components/redirect/authentication-sso-redirect.component.ts","../../../../projects/cleavelandprice/ngx-lib/authentication/sso/src/authentication-sso.module.ts","../../../../projects/cleavelandprice/ngx-lib/authentication/sso/src/guards/authentication-sso.guard.ts","../../../../projects/cleavelandprice/ngx-lib/authentication/sso/src/cleavelandprice-ngx-lib-authentication-sso.ts"],"sourcesContent":["import { InjectionToken } from \"@angular/core\";\r\nimport { AuthenticationSSOServiceOptions } from \"./authentication-sso-service-options\";\r\n\r\n// What is a InjectionToken?\r\n// An InjectionToken is a way to create a token that can be used to inject a dependency into an Angular service or component.\r\n// It allows you to define a unique identifier for a dependency, which can then be used to retrieve the dependency from the Angular dependency injection system.\r\n// This is particularly useful when you want to inject a value that is not a class, such as a configuration object or a string.\r\n// Great explaination of InjectionToken: https://youtu.be/GvA7xnBmEto?si=_Nc2DTzdsb0jdvuk\r\nexport const AuthenticationSSOServiceOptionsToken = new InjectionToken<AuthenticationSSOServiceOptions>('AuthenticationSSOServiceOptions');\r\n","import { EventEmitter, Inject, Injectable, Optional, Output, signal } from '@angular/core';\r\n\r\nimport { AbstractAuthenticationService, AuthenticatedUser } from '@cleavelandprice/ngx-lib/authentication';\r\n\r\nimport { NgxLibServiceBase } from '@cleavelandprice/ngx-lib';\r\n\r\nimport { AuthenticationSSOServiceOptions } from '../model/authentication-sso-service-options';\r\nimport { AuthenticationSSOServiceOptionsToken } from './../model/authentication-sso-service-options-token';\r\nimport { AuthenticationSSOClaims } from '../model/authentication-sso-claims';\r\n\r\nimport {\r\n  AccountInfo,\r\n  AuthenticationResult,\r\n  BrowserCacheLocation,\r\n  PublicClientApplication,\r\n  type Configuration\r\n} from '@azure/msal-browser';\r\n\r\n// This service implements authentication using Microsoft Entra ID (formerly Azure AD) via the Microsoft Authentication Library (MSAL).\r\n// It provides methods for logging in, logging out, and validating the authenticated user, while managing token storage and refresh.\r\n// It also supports cross-tab synchronization of authentication state using the BroadcastChannel API.\r\n// It also supports revalidating authentication state when the user returns to a tab after it has been backgrounded for a period of time.\r\n// It also supports storing the token in either localStorage or sessionStorage, based on the user's preference.\r\n// It also supports determining if the token is expired and refreshing it if necessary, or logging the user out if the token cannot be refreshed.\r\n@Injectable({\r\n  providedIn: 'root'\r\n})\r\nexport class AuthenticationSSOService extends NgxLibServiceBase implements AbstractAuthenticationService {\r\n  //#region Fields\r\n  authenticating = signal(false); // Flag set to true while the service is attempting to authenticate the user\r\n  authenticated = signal(false); // Flag set to true when the user is successfully authenticated\r\n  authenticatedUser = signal<AuthenticatedUser | undefined>(undefined); // Object representing the authenticated user\r\n\r\n  // error NG8110: Unsupported call to the output function. This function can only be used as the initializer of a property on a @Component or @Directive class.\r\n  /*authenticatedChanged = output<boolean>();\r\n  authenticatingChanged = output<boolean>();\r\n  authenticationError = output();*/\r\n  @Output() authenticatedChanged = new EventEmitter<boolean>();\r\n  @Output() authenticatingChanged = new EventEmitter<boolean>();\r\n  @Output() authenticationError = new EventEmitter();\r\n\r\n  // Microsoft Authentication Library (MSAL) instance for handling authentication\r\n  #msal: PublicClientApplication;\r\n  // Tracks one-time MSAL initialize() completion.\r\n  #initialized = false;\r\n\r\n  // Cross-tab messaging channel (same-origin tabs only).\r\n  #channel?: BroadcastChannel;\r\n  // Broadcast payload sent between tabs to synchronize logout.\r\n  #logoutMessage = 'logout';\r\n\r\n  // Coalescing flags used when syncing auth after tab visibility/focus resumes.\r\n  #resumeCheckInProgress = false;\r\n  #lastResumeCheckAt = 0;\r\n\r\n  // Timer id used to refresh tokens before expiry.\r\n  #tokenRefreshTimeoutId?: ReturnType<typeof setTimeout>;\r\n  // Treat near-expiry tokens as expired to avoid race conditions during downstream API calls.\r\n  #expirationSkewMilliseconds = 30000;\r\n\r\n  #expirationEpochSeconds = signal<number | undefined>(undefined);\r\n  //#endregion\r\n\r\n  //#region Properties\r\n\r\n  // I don't agree with these properties being required in the AbstractAuthenticationService interface\r\n  // I think this should be set in the options passed to the service.\r\n  // I know this is used in the login components under material but a developer who wants to use their own login with sessionStorage would need to know that they need to create a localStorage item called 'storeTokenInSession' and set it to true\r\n  // I have added a cacheLocation option to the AuthenticationSSOServiceOptions interface but if the users don't set it, they can use these properties to set the storage location\r\n\r\n  get useSessionStorage(): boolean {\r\n    return !!localStorage.getItem('storeTokenInSession');\r\n  }\r\n\r\n  get storage(): Storage {\r\n    return this.useSessionStorage ?\r\n      sessionStorage:\r\n      localStorage;\r\n  }\r\n\r\n  //#endregion\r\n\r\n  //#region Lifecycle\r\n  constructor(@Optional() @Inject(AuthenticationSSOServiceOptionsToken) protected options: AuthenticationSSOServiceOptions) {\r\n    super(options);\r\n\r\n    const authenticationEndpoint = options.authenticationEndpoint ?? `https://login.microsoftonline.com/${options.tenantId}`;\r\n\r\n    this.options = {\r\n      ...options,\r\n\r\n      tokenName: options.tokenName ?? options.clientId + '-token',\r\n      authenticationEndpoint\r\n    };\r\n\r\n    // if the user didn't set the cacheLocation in the options, we will set it to sessionStorage if useSessionStorage is true, otherwise we will set it to localStorage\r\n    this.options.cacheLocation = this.options.cacheLocation ?? (this.useSessionStorage ? 'sessionStorage' : 'localStorage');\r\n\r\n    // MSAL configuration for this SPA.\r\n    // Cache remains in sessionStorage so each tab has isolated auth cache.\r\n    const msalConfig: Configuration = {\r\n      auth: {\r\n        clientId: this.options.clientId,\r\n        authority: this.options.authenticationEndpoint,\r\n        redirectUri: this.options.redirectUri,\r\n        postLogoutRedirectUri: this.options.postLogoutRedirectUri\r\n      },\r\n      cache: {\r\n        cacheLocation: this.options.cacheLocation === 'sessionStorage' ? BrowserCacheLocation.SessionStorage : BrowserCacheLocation.LocalStorage\r\n      }\r\n    };\r\n\r\n    // Create MSAL client based on the configuration.\r\n    // We still need to call initialize() before using it, but this ensures that we only create one instance of the client.\r\n    this.#msal = new PublicClientApplication(msalConfig);\r\n\r\n    // Initialize the BroadcastChannel for cross-tab communication\r\n    this.#initializeBroadcastChannel();\r\n\r\n    // Register resume listeners so returning to a tab revalidates auth state.\r\n    this.#registerResumeListeners();\r\n\r\n    // Attempt to restore authenticated state from any existing Microsoft session.\r\n    this.checkForExistingToken();\r\n  }\r\n  //#endregion\r\n\r\n  //#region Utilities\r\n\r\n  //Authenticate the user and store the token in Local Storage or Session Storage\r\n  login(): void {\r\n    // There are times this item is left in sessionStorage after logout, which can cause MSAL to think a login is in progress and block future logins.\r\n    // This is a workaround to ensure that the item is removed after logout.\r\n    if (typeof sessionStorage !== 'undefined' && sessionStorage.getItem(\"msal.interaction.status\"))\r\n      sessionStorage.removeItem(\"msal.interaction.status\");\r\n\r\n    this.authenticating.set(true);\r\n    this.authenticatingChanged.emit(this.authenticating());\r\n\r\n    console.log('AuthenticationSSOService: login() called. Authenticating user...');\r\n\r\n    // Initialize MSAL and then perform login via popup, followed by user validation.\r\n    this.#initializeMsal()\r\n      .then(() => this.#msal.loginPopup({\r\n        scopes: this.options.scopes,\r\n        authority: this.options.authenticationEndpoint,\r\n        prompt: 'select_account'\r\n      }))\r\n      .then((result) => this.validateUser(result))\r\n      .catch((error: unknown) => {\r\n        this.authenticating.set(false);\r\n        this.authenticatingChanged.emit(this.authenticating());\r\n        this.authenticationError.emit(error);\r\n      });\r\n  }\r\n\r\n  // Primary logout flow:\r\n  // 1) clear local state in this tab,\r\n  // 2) notify other tabs to clear their local state,\r\n  // 3) initiate Entra sign-out redirect from this initiating tab.\r\n  logout(): void {\r\n    this.#logoutLocalOnly(false);\r\n    this.#publishLogout();\r\n\r\n    // Only the initiating tab should call identity-provider logout.\r\n    this.#clearTokenRefreshTimer();\r\n\r\n    this.#initializeMsal()\r\n      .then(() => this.#msal.logoutRedirect({\r\n        postLogoutRedirectUri: this.options.postLogoutRedirectUri\r\n      }))\r\n      .catch((error) => {\r\n        console.log('ERROR: Microsoft logout failed.', error);\r\n      });\r\n  }\r\n\r\n  tokenExists(): boolean {\r\n    const token = this.storage.getItem(this.options.tokenName ?? '');\r\n    return !!token;\r\n  }\r\n\r\n  // validateUser() = setAuthenticatedUser()\r\n  // Resolves current user and token claims into the app's authenticated model.\r\n  // Also validates/refreshes token when needed and schedules proactive refresh.\r\n  async validateUser(result?: AuthenticationResult, account?: AccountInfo): Promise<void> {\r\n    // Resolve account from auth result or fallback account.\r\n    let resolvedAccount = result?.account ?? account;\r\n\r\n    console.log('AuthenticationSSOService: Validating user. Result:', result, 'Account:', account, 'ResolvedAccount:', resolvedAccount);\r\n\r\n    // No account means app should be considered logged out.\r\n    if (!resolvedAccount) {\r\n      this.logout();\r\n      return;\r\n    }\r\n\r\n    // Keep MSAL active account in sync with resolved account context.\r\n    this.#msal.setActiveAccount(resolvedAccount);\r\n\r\n    let resolvedResult = result;\r\n    let claims = (resolvedResult?.idTokenClaims ?? resolvedAccount.idTokenClaims ?? {}) as AuthenticationSSOClaims;\r\n\r\n    // expiresOn comes over as a Date object if it exists, but exp is a number of seconds since epoch.\r\n    // therefore, if expiresOn exists convert it to seconds since epoch, otherwise use exp if it exists, otherwise undefined.\r\n    // expiresOn is only present when the token is acquired via acquireTokenSilent or acquireTokenPopup, but not when the token is acquired via loginPopup or loginRedirect.\r\n    let expirationEpochSeconds = resolvedResult?.expiresOn ? Math.floor(resolvedResult.expiresOn.getTime() / 1000) : claims.exp ?? undefined;\r\n\r\n    // If token appears expired, attempt silent refresh before setting user state.\r\n    if (this.#isTokenExpired(expirationEpochSeconds)) {\r\n      const refreshedResult = await this.#refreshToken(resolvedAccount);\r\n\r\n      // Refresh failure means we should end the session.\r\n      if (!refreshedResult?.account) {\r\n        this.logout();\r\n        return;\r\n      }\r\n\r\n      resolvedResult = refreshedResult;\r\n      resolvedAccount = refreshedResult.account;\r\n      claims = (resolvedResult.idTokenClaims ?? resolvedAccount.idTokenClaims ?? {}) as AuthenticationSSOClaims;\r\n      expirationEpochSeconds = resolvedResult?.expiresOn ? Math.floor(resolvedResult.expiresOn.getTime() / 1000) : claims.exp ?? undefined;\r\n\r\n      // Still expired after refresh; terminate session to avoid stale auth.\r\n      if (this.#isTokenExpired(expirationEpochSeconds)) {\r\n        this.logout();\r\n        return;\r\n      }\r\n    }\r\n\r\n    // Derive a stable account name from available claims.\r\n    const preferredUsername = String(claims.preferred_username ?? resolvedAccount.username ?? claims.upn ?? claims.email ?? '');\r\n    const accountName = preferredUsername.includes('@') ? preferredUsername.split('@')[0] : preferredUsername;\r\n\r\n    // Map Entra claims to the app's authenticated user shape.\r\n    this.authenticatedUser.set({\r\n      admin: false,\r\n      accountName: claims.accountName ?? accountName,\r\n      department: claims.department ?? '',\r\n      displayName: claims.displayName ?? '',\r\n      distinguishedName: claims.distinguishedName ?? '',\r\n      email: claims.mail,\r\n      employeeNumber: claims.employeeNumber,\r\n      firstName: claims.firstName ?? '',\r\n      hireDate: claims.hireDate ?? '',\r\n      lastName: claims.lastName ?? '',\r\n      manager: claims.manager,\r\n      memberOf: claims.memberOf,\r\n      phone: claims.phone,\r\n      photoUrl: claims.photoUrl,\r\n      sid: claims.securityIdentifier ?? '',\r\n      title: claims.title,\r\n      workShift: claims.workShift\r\n    });\r\n\r\n    // Persist the most recent id token from the auth result first.\r\n    // account.idToken can lag behind after silent refresh in some MSAL flows.\r\n    if (this.options.tokenName) {\r\n      const token = this.#getLatestIdToken(resolvedResult, resolvedAccount);\r\n      if (token) {\r\n        this.storage.setItem(this.options.tokenName, token);\r\n      } else {\r\n        this.storage.removeItem(this.options.tokenName);\r\n      }\r\n    }\r\n\r\n    this.#expirationEpochSeconds.set(expirationEpochSeconds);\r\n\r\n    // Schedule refresh before expiration to keep session uninterrupted.\r\n    this.#scheduleTokenRefresh(expirationEpochSeconds, resolvedAccount);\r\n\r\n    // Publish authenticated state only when it changes.\r\n    const wasAuthenticated = this.authenticated;\r\n    this.authenticated.set(true);\r\n    if (wasAuthenticated !== this.authenticated) {\r\n      this.authenticatedChanged.emit(this.authenticated());\r\n    }\r\n\r\n    this.authenticating.set(false);\r\n    this.authenticatingChanged.emit(this.authenticating());\r\n  }\r\n\r\n  // Rehydrates auth state from existing cached account on startup.\r\n  // We intentionally avoid handleRedirectPromise() because this service uses popup login.\r\n  checkForExistingToken(): void {\r\n    this.#initializeMsal()\r\n      .then(() => {\r\n        const account = this.#msal.getActiveAccount() ?? this.#msal.getAllAccounts()[0];\r\n        if (account)\r\n          return this.validateUser(undefined, account);\r\n\r\n        // Ensure stale app token is removed when MSAL has no cached account.\r\n        return this.#logoutLocalOnly(false);\r\n      })\r\n      .catch((error: unknown) => {\r\n        console.log('ERROR: Failed to hydrate Microsoft auth state.', error);\r\n      });\r\n  }\r\n\r\n  // Initialize MSAL if it hasn't been initialized yet\r\n  // This ensures that we only initialize MSAL once, even if multiple login attempts are made\r\n  // This is important because there is startup work that must be completed by MSAL before it can be used, and we don't want to repeat that work unnecessarily\r\n  async #initializeMsal(): Promise<void> {\r\n    if (this.#initialized) {\r\n      return;\r\n    }\r\n\r\n\r\n    await this.#msal.initialize();\r\n    this.#initialized = true;\r\n  }\r\n\r\n  // Sets up same-origin cross-tab messaging used to fan out logout events.\r\n  #initializeBroadcastChannel(): void {\r\n    if (typeof BroadcastChannel === 'undefined') {\r\n      // Some runtimes may not support BroadcastChannel.\r\n      return;\r\n    }\r\n\r\n    // Create a new BroadcastChannel for cross-tab communication\r\n    this.#channel = new BroadcastChannel('sso-authentication-channel');\r\n\r\n    // Listen for messages from other tabs for logout events.\r\n    // When a logout message is received, the current tab will clear its local state and reload the page.\r\n    this.#channel.onmessage = (event) => {\r\n      if (event.data === this.#logoutMessage) {\r\n        console.log('Received logout message from another tab.');\r\n        // Receiving tabs clear local state and reload so route guards re-evaluate immediately.\r\n        this.#logoutLocalOnly(true);\r\n      }\r\n    };\r\n  }\r\n\r\n  // Registers visibility/focus listeners to re-check auth when user returns to the tab.\r\n  // Tabs can be backgrounded for long periods, and the user may have logged out in another tab or session.\r\n  #registerResumeListeners(): void {\r\n    const handleResume = () => {\r\n      void this.#syncAuthOnResume();\r\n    };\r\n\r\n    if (typeof document !== 'undefined') {\r\n      document.addEventListener('visibilitychange', () => {\r\n        if (document.visibilityState === 'visible') {\r\n          handleResume();\r\n        }\r\n      });\r\n    }\r\n\r\n    if (typeof window !== 'undefined') {\r\n      window.addEventListener('focus', handleResume);\r\n    }\r\n  }\r\n\r\n  // Syncs auth state after resume while preventing duplicate checks from rapid events.\r\n  async #syncAuthOnResume(): Promise<void> {\r\n    const now = Date.now();\r\n\r\n    // visibilitychange and focus often fire back-to-back; coalesce to one check.\r\n    // if now was less than 1 second since last check, skip this one.\r\n    if (this.#resumeCheckInProgress || now - this.#lastResumeCheckAt < 1000) {\r\n      return;\r\n    }\r\n\r\n    this.#resumeCheckInProgress = true;\r\n    this.#lastResumeCheckAt = now;\r\n\r\n    try {\r\n      await this.#initializeMsal();\r\n\r\n      const account = this.#msal.getActiveAccount() ?? this.#msal.getAllAccounts()[0];\r\n\r\n      if (!account) {\r\n        await this.#logoutLocalOnly(false);\r\n        return;\r\n      }\r\n\r\n      await this.validateUser(undefined, account);\r\n    }\r\n    catch (error) {\r\n      console.log('Error: Resume auth sync failed.', error);\r\n    }\r\n    finally {\r\n      this.#resumeCheckInProgress = false;\r\n    }\r\n  }\r\n\r\n  // Sends logout signal to other open tabs.\r\n  #publishLogout(): void {\r\n    this.#channel?.postMessage(this.#logoutMessage);\r\n  }\r\n\r\n  // Clears app/MSAL state in current tab without invoking provider-side logout.\r\n  // reloadAfterLogout is intended for non-initiating tabs to force UI reset to auth route.\r\n  async #logoutLocalOnly(reloadAfterLogout: boolean): Promise<void> {\r\n    this.#clearTokenRefreshTimer();\r\n\r\n    if (this.options.tokenName && this.storage.getItem(this.options.tokenName)) {\r\n      this.storage.removeItem(this.options.tokenName);\r\n    }\r\n\r\n    const wasAuthenticated = this.authenticated;\r\n    this.authenticatedUser.set(undefined);\r\n    this.authenticated.set(false);\r\n    if (wasAuthenticated() !== this.authenticated()) {\r\n      this.authenticatedChanged.emit(false);\r\n    }\r\n\r\n    try {\r\n      await this.#initializeMsal();\r\n      await this.#msal.clearCache();\r\n      this.#msal.setActiveAccount(null);\r\n\r\n      // There are times this item is left in sessionStorage after logout, which can cause MSAL to think a login is in progress and block future logins.\r\n      // This is a workaround to ensure that the item is removed after logout.\r\n      sessionStorage.removeItem(\"msal.interaction.status\");\r\n\r\n      // Secondary tabs should hard-refresh to guarantee route guards and app state reset.\r\n      if (reloadAfterLogout && typeof window !== 'undefined') {\r\n        window.location.reload();\r\n      }\r\n    } catch (error) {\r\n      console.log('WARN: Local MSAL cache clear failed.', error);\r\n    }\r\n  }\r\n\r\n  // Returns true when token expiration is absent or in the past.\r\n  #isTokenExpired(expirationEpochSeconds?: number): boolean {\r\n    if (expirationEpochSeconds == null || expirationEpochSeconds == undefined || expirationEpochSeconds <= 0) {\r\n      return true;\r\n    }\r\n\r\n    return Date.now() + this.#expirationSkewMilliseconds >= expirationEpochSeconds * 1000;\r\n  }\r\n\r\n  // Attempts silent token acquisition for the current account.\r\n  async #refreshToken(account: AccountInfo): Promise<AuthenticationResult | undefined> {\r\n    try {\r\n      return await this.#msal.acquireTokenSilent({\r\n        account,\r\n        scopes: this.options.scopes\r\n      });\r\n    }\r\n    catch (error) {\r\n      console.log('Error: Silent token refresh failed.', error);\r\n      return undefined;\r\n    }\r\n  }\r\n\r\n  // Prefers the token returned from the most recent auth result.\r\n  #getLatestIdToken(result?: AuthenticationResult, account?: AccountInfo): string | undefined {\r\n    return result?.idToken ?? account?.idToken;\r\n  }\r\n\r\n  // Schedules token refresh shortly before expiration.\r\n  // If refresh fails, session is terminated to avoid inconsistent auth state.\r\n  #scheduleTokenRefresh(expirationEpochSeconds: number | undefined, account: AccountInfo): void {\r\n    this.#clearTokenRefreshTimer();\r\n\r\n    if (!expirationEpochSeconds) {\r\n      return;\r\n    }\r\n\r\n    // Convert Unix epoch seconds to milliseconds for Date.now() comparison\r\n    const expirationEpochMilliseconds = expirationEpochSeconds * 1000;\r\n    // Schedule refresh 1 minute before expiration\r\n    const refreshLeadTimeMs = 60000;\r\n    // Calculate the delay until the refresh should occur, ensuring it's not negative\r\n    const millisecondsUntilRefresh = expirationEpochMilliseconds - Date.now() - refreshLeadTimeMs;\r\n    const delay = Math.max(millisecondsUntilRefresh, 0);\r\n\r\n    this.#tokenRefreshTimeoutId = setTimeout(() => {\r\n      this.#refreshToken(account)\r\n        .then((result) => {\r\n          console.log('AuthenticationSSOService: Token refresh result.', result);\r\n          if (result?.account) {\r\n            return this.validateUser(result, result.account);\r\n          }\r\n\r\n          // No account after refresh implies invalid session.\r\n          this.logout();\r\n          return undefined;\r\n        })\r\n        .catch(() => {\r\n          // Any refresh exception falls back to logout for safety.\r\n          this.logout();\r\n        });\r\n    }, delay);\r\n  }\r\n\r\n  // Cancels any pending token refresh timer.\r\n  #clearTokenRefreshTimer(): void {\r\n    if (!this.#tokenRefreshTimeoutId) {\r\n      return;\r\n    }\r\n\r\n    clearTimeout(this.#tokenRefreshTimeoutId);\r\n    this.#tokenRefreshTimeoutId = undefined;\r\n  }\r\n  //#endregion\r\n}\r\n","import { Component, OnInit, ChangeDetectionStrategy } from '@angular/core';\nimport { broadcastResponseToMainFrame } from '@azure/msal-browser/redirect-bridge';\n\n@Component({\n  selector: 'app-authentication-sso-redirect',\n  standalone: true,\n  changeDetection: ChangeDetectionStrategy.Eager,\n  template: '<p>Processing authentication...</p>',\n})\nexport class AuthenticationSSORedirectComponent implements OnInit {\n  ngOnInit(): void {\n    broadcastResponseToMainFrame().catch((error: Error) => {\n      console.error('Error broadcasting response to main frame:', error);\n    });\n  }\n}\n","import { CommonModule } from '@angular/common';\r\nimport { ModuleWithProviders, NgModule, Optional, SkipSelf } from '@angular/core';\r\n\r\nimport { AuthenticationSSOServiceOptions } from './model/authentication-sso-service-options';\r\nimport { AuthenticationSSOServiceOptionsToken } from './model/authentication-sso-service-options-token';\r\nimport { AuthenticationSSORedirectComponent } from './components/redirect/authentication-sso-redirect.component';\r\n\r\n@NgModule({\r\n  declarations: [],\r\n  imports: [\r\n    CommonModule,\r\n    AuthenticationSSORedirectComponent\r\n  ],\r\n  exports: [\r\n    AuthenticationSSORedirectComponent\r\n  ]\r\n})\r\nexport class AuthenticationSSOModule {\r\n  static forRoot(options: AuthenticationSSOServiceOptions): ModuleWithProviders<AuthenticationSSOModule> {\r\n    return {\r\n      ngModule: AuthenticationSSOModule,\r\n      providers: [\r\n        {\r\n          provide: AuthenticationSSOServiceOptionsToken,\r\n          useValue: options\r\n        }\r\n      ]\r\n    };\r\n  }\r\n\r\n  constructor(@Optional() @SkipSelf() parentModule: AuthenticationSSOModule) {\r\n    if (parentModule) {\r\n      throw new Error(\r\n        'AuthenticationSSOModule is already loaded. Import it in the AppModule only');\r\n    }\r\n  }\r\n}\r\n","import { inject } from '@angular/core';\r\nimport { CanActivateFn, Router } from '@angular/router';\r\nimport { map, take } from 'rxjs/operators';\r\nimport { AuthenticationSSOService } from '../authentication-sso.api';\r\n\r\nexport const authenticationSSOGuard: CanActivateFn = (_route, _state) => {\r\n  const authenticationService = inject(AuthenticationSSOService);\r\n  const router = inject(Router);\r\n\r\n  // if the user is already authenticated, allow access to the route\r\n  if (authenticationService.authenticated()) {\r\n    return true;\r\n  }\r\n\r\n  if (authenticationService.tokenExists()) {\r\n    // we're doing this because we could've opened a new tab and the user is already logged in, so we need to check for an existing token\r\n    authenticationService.checkForExistingToken();\r\n\r\n    return authenticationService.authenticatedChanged.pipe(\r\n      take(1),\r\n      map(() => {\r\n        if (!authenticationService.authenticated()) {\r\n          router.navigate(['']);\r\n          return false;\r\n        }\r\n\r\n        return true;\r\n      })\r\n    );\r\n  }\r\n  else {\r\n    router.navigate(['']);\r\n    return false;\r\n  }\r\n};\r\n","/**\n * Generated bundle index. Do not edit.\n */\n\nexport * from './authentication-sso.api';\n"],"names":[],"mappings":";;;;;;;;;AAGA;AACA;AACA;AACA;AACA;MACa,oCAAoC,GAAG,IAAI,cAAc,CAAkC,iCAAiC;;ACUzI;AACA;AACA;AACA;AACA;AACA;AAIM,MAAO,wBAAyB,SAAQ,iBAAiB,CAAA;;AAe7D,IAAA,KAAK;;AAEL,IAAA,YAAY;;AAGZ,IAAA,QAAQ;;AAER,IAAA,cAAc;;AAGd,IAAA,sBAAsB;AACtB,IAAA,kBAAkB;;AAGlB,IAAA,sBAAsB;;AAEtB,IAAA,2BAA2B;AAE3B,IAAA,uBAAuB;;;;;;;AAUvB,IAAA,IAAI,iBAAiB,GAAA;QACnB,OAAO,CAAC,CAAC,YAAY,CAAC,OAAO,CAAC,qBAAqB,CAAC;IACtD;AAEA,IAAA,IAAI,OAAO,GAAA;AACT,QAAA,OAAO,IAAI,CAAC,iBAAiB;AAC3B,YAAA,cAAc;AACd,YAAA,YAAY;IAChB;;;AAKA,IAAA,WAAA,CAAgF,OAAwC,EAAA;QACtH,KAAK,CAAC,OAAO,CAAC;QADgE,IAAA,CAAA,OAAO,GAAP,OAAO;;QAtDvF,IAAA,CAAA,cAAc,GAAG,MAAM,CAAC,KAAK;AAAC,QAAA,IAAA,SAAA,GAAA,CAAA,EAAA,SAAA,EAAA,gBAAA,EAAA,CAAA,8BAAA,EAAA,CAAA,CAAA,CAAC;QAC/B,IAAA,CAAA,aAAa,GAAG,MAAM,CAAC,KAAK;AAAC,QAAA,IAAA,SAAA,GAAA,CAAA,EAAA,SAAA,EAAA,eAAA,EAAA,CAAA,8BAAA,EAAA,CAAA,CAAA,CAAC;QAC9B,IAAA,CAAA,iBAAiB,GAAG,MAAM,CAAgC,SAAS;AAAC,QAAA,IAAA,SAAA,GAAA,CAAA,EAAA,SAAA,EAAA,mBAAA,EAAA,CAAA,8BAAA,EAAA,CAAA,CAAA,CAAC;;AAGrE;;AAEiC;AACvB,QAAA,IAAA,CAAA,oBAAoB,GAAG,IAAI,YAAY,EAAW;AAClD,QAAA,IAAA,CAAA,qBAAqB,GAAG,IAAI,YAAY,EAAW;AACnD,QAAA,IAAA,CAAA,mBAAmB,GAAG,IAAI,YAAY,EAAE;;QAKlD,IAAA,CAAA,YAAY,GAAG,KAAK;;QAKpB,IAAA,CAAA,cAAc,GAAG,QAAQ;;QAGzB,IAAA,CAAA,sBAAsB,GAAG,KAAK;QAC9B,IAAA,CAAA,kBAAkB,GAAG,CAAC;;QAKtB,IAAA,CAAA,2BAA2B,GAAG,KAAK;QAEnC,IAAA,CAAA,uBAAuB,GAAG,MAAM,CAAqB,SAAS;oGAAC;QA0B7D,MAAM,sBAAsB,GAAG,OAAO,CAAC,sBAAsB,IAAI,CAAA,kCAAA,EAAqC,OAAO,CAAC,QAAQ,CAAA,CAAE;QAExH,IAAI,CAAC,OAAO,GAAG;AACb,YAAA,GAAG,OAAO;YAEV,SAAS,EAAE,OAAO,CAAC,SAAS,IAAI,OAAO,CAAC,QAAQ,GAAG,QAAQ;YAC3D;SACD;;QAGD,IAAI,CAAC,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,KAAK,IAAI,CAAC,iBAAiB,GAAG,gBAAgB,GAAG,cAAc,CAAC;;;AAIvH,QAAA,MAAM,UAAU,GAAkB;AAChC,YAAA,IAAI,EAAE;AACJ,gBAAA,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC,QAAQ;AAC/B,gBAAA,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,sBAAsB;AAC9C,gBAAA,WAAW,EAAE,IAAI,CAAC,OAAO,CAAC,WAAW;AACrC,gBAAA,qBAAqB,EAAE,IAAI,CAAC,OAAO,CAAC;AACrC,aAAA;AACD,YAAA,KAAK,EAAE;AACL,gBAAA,aAAa,EAAE,IAAI,CAAC,OAAO,CAAC,aAAa,KAAK,gBAAgB,GAAG,oBAAoB,CAAC,cAAc,GAAG,oBAAoB,CAAC;AAC7H;SACF;;;QAID,IAAI,CAAC,KAAK,GAAG,IAAI,uBAAuB,CAAC,UAAU,CAAC;;QAGpD,IAAI,CAAC,2BAA2B,EAAE;;QAGlC,IAAI,CAAC,wBAAwB,EAAE;;QAG/B,IAAI,CAAC,qBAAqB,EAAE;IAC9B;;;;IAMA,KAAK,GAAA;;;QAGH,IAAI,OAAO,cAAc,KAAK,WAAW,IAAI,cAAc,CAAC,OAAO,CAAC,yBAAyB,CAAC;AAC5F,YAAA,cAAc,CAAC,UAAU,CAAC,yBAAyB,CAAC;AAEtD,QAAA,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC;QAC7B,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC;AAEtD,QAAA,OAAO,CAAC,GAAG,CAAC,kEAAkE,CAAC;;QAG/E,IAAI,CAAC,eAAe;aACjB,IAAI,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC;AAChC,YAAA,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM;AAC3B,YAAA,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,sBAAsB;AAC9C,YAAA,MAAM,EAAE;AACT,SAAA,CAAC;AACD,aAAA,IAAI,CAAC,CAAC,MAAM,KAAK,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC;AAC1C,aAAA,KAAK,CAAC,CAAC,KAAc,KAAI;AACxB,YAAA,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,KAAK,CAAC;YAC9B,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC;AACtD,YAAA,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,KAAK,CAAC;AACtC,QAAA,CAAC,CAAC;IACN;;;;;IAMA,MAAM,GAAA;AACJ,QAAA,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC;QAC5B,IAAI,CAAC,cAAc,EAAE;;QAGrB,IAAI,CAAC,uBAAuB,EAAE;QAE9B,IAAI,CAAC,eAAe;aACjB,IAAI,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC;AACpC,YAAA,qBAAqB,EAAE,IAAI,CAAC,OAAO,CAAC;AACrC,SAAA,CAAC;AACD,aAAA,KAAK,CAAC,CAAC,KAAK,KAAI;AACf,YAAA,OAAO,CAAC,GAAG,CAAC,iCAAiC,EAAE,KAAK,CAAC;AACvD,QAAA,CAAC,CAAC;IACN;IAEA,WAAW,GAAA;AACT,QAAA,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,IAAI,EAAE,CAAC;QAChE,OAAO,CAAC,CAAC,KAAK;IAChB;;;;AAKA,IAAA,MAAM,YAAY,CAAC,MAA6B,EAAE,OAAqB,EAAA;;AAErE,QAAA,IAAI,eAAe,GAAG,MAAM,EAAE,OAAO,IAAI,OAAO;AAEhD,QAAA,OAAO,CAAC,GAAG,CAAC,oDAAoD,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,kBAAkB,EAAE,eAAe,CAAC;;QAGnI,IAAI,CAAC,eAAe,EAAE;YACpB,IAAI,CAAC,MAAM,EAAE;YACb;QACF;;AAGA,QAAA,IAAI,CAAC,KAAK,CAAC,gBAAgB,CAAC,eAAe,CAAC;QAE5C,IAAI,cAAc,GAAG,MAAM;AAC3B,QAAA,IAAI,MAAM,IAAI,cAAc,EAAE,aAAa,IAAI,eAAe,CAAC,aAAa,IAAI,EAAE,CAA4B;;;;AAK9G,QAAA,IAAI,sBAAsB,GAAG,cAAc,EAAE,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,SAAS,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,GAAG,MAAM,CAAC,GAAG,IAAI,SAAS;;AAGxI,QAAA,IAAI,IAAI,CAAC,eAAe,CAAC,sBAAsB,CAAC,EAAE;YAChD,MAAM,eAAe,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,eAAe,CAAC;;AAGjE,YAAA,IAAI,CAAC,eAAe,EAAE,OAAO,EAAE;gBAC7B,IAAI,CAAC,MAAM,EAAE;gBACb;YACF;YAEA,cAAc,GAAG,eAAe;AAChC,YAAA,eAAe,GAAG,eAAe,CAAC,OAAO;AACzC,YAAA,MAAM,IAAI,cAAc,CAAC,aAAa,IAAI,eAAe,CAAC,aAAa,IAAI,EAAE,CAA4B;AACzG,YAAA,sBAAsB,GAAG,cAAc,EAAE,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,SAAS,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,GAAG,MAAM,CAAC,GAAG,IAAI,SAAS;;AAGpI,YAAA,IAAI,IAAI,CAAC,eAAe,CAAC,sBAAsB,CAAC,EAAE;gBAChD,IAAI,CAAC,MAAM,EAAE;gBACb;YACF;QACF;;QAGA,MAAM,iBAAiB,GAAG,MAAM,CAAC,MAAM,CAAC,kBAAkB,IAAI,eAAe,CAAC,QAAQ,IAAI,MAAM,CAAC,GAAG,IAAI,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC;QAC3H,MAAM,WAAW,GAAG,iBAAiB,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,iBAAiB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,iBAAiB;;AAGzG,QAAA,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC;AACzB,YAAA,KAAK,EAAE,KAAK;AACZ,YAAA,WAAW,EAAE,MAAM,CAAC,WAAW,IAAI,WAAW;AAC9C,YAAA,UAAU,EAAE,MAAM,CAAC,UAAU,IAAI,EAAE;AACnC,YAAA,WAAW,EAAE,MAAM,CAAC,WAAW,IAAI,EAAE;AACrC,YAAA,iBAAiB,EAAE,MAAM,CAAC,iBAAiB,IAAI,EAAE;YACjD,KAAK,EAAE,MAAM,CAAC,IAAI;YAClB,cAAc,EAAE,MAAM,CAAC,cAAc;AACrC,YAAA,SAAS,EAAE,MAAM,CAAC,SAAS,IAAI,EAAE;AACjC,YAAA,QAAQ,EAAE,MAAM,CAAC,QAAQ,IAAI,EAAE;AAC/B,YAAA,QAAQ,EAAE,MAAM,CAAC,QAAQ,IAAI,EAAE;YAC/B,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,QAAQ,EAAE,MAAM,CAAC,QAAQ;AACzB,YAAA,GAAG,EAAE,MAAM,CAAC,kBAAkB,IAAI,EAAE;YACpC,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,SAAS,EAAE,MAAM,CAAC;AACnB,SAAA,CAAC;;;AAIF,QAAA,IAAI,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE;YAC1B,MAAM,KAAK,GAAG,IAAI,CAAC,iBAAiB,CAAC,cAAc,EAAE,eAAe,CAAC;YACrE,IAAI,KAAK,EAAE;AACT,gBAAA,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,KAAK,CAAC;YACrD;iBAAO;gBACL,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC;YACjD;QACF;AAEA,QAAA,IAAI,CAAC,uBAAuB,CAAC,GAAG,CAAC,sBAAsB,CAAC;;AAGxD,QAAA,IAAI,CAAC,qBAAqB,CAAC,sBAAsB,EAAE,eAAe,CAAC;;AAGnE,QAAA,MAAM,gBAAgB,GAAG,IAAI,CAAC,aAAa;AAC3C,QAAA,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC;AAC5B,QAAA,IAAI,gBAAgB,KAAK,IAAI,CAAC,aAAa,EAAE;YAC3C,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC;QACtD;AAEA,QAAA,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,KAAK,CAAC;QAC9B,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC;IACxD;;;IAIA,qBAAqB,GAAA;QACnB,IAAI,CAAC,eAAe;aACjB,IAAI,CAAC,MAAK;AACT,YAAA,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,gBAAgB,EAAE,IAAI,IAAI,CAAC,KAAK,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC;AAC/E,YAAA,IAAI,OAAO;gBACT,OAAO,IAAI,CAAC,YAAY,CAAC,SAAS,EAAE,OAAO,CAAC;;AAG9C,YAAA,OAAO,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC;AACrC,QAAA,CAAC;AACA,aAAA,KAAK,CAAC,CAAC,KAAc,KAAI;AACxB,YAAA,OAAO,CAAC,GAAG,CAAC,gDAAgD,EAAE,KAAK,CAAC;AACtE,QAAA,CAAC,CAAC;IACN;;;;AAKA,IAAA,MAAM,eAAe,GAAA;AACnB,QAAA,IAAI,IAAI,CAAC,YAAY,EAAE;YACrB;QACF;AAGA,QAAA,MAAM,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE;AAC7B,QAAA,IAAI,CAAC,YAAY,GAAG,IAAI;IAC1B;;IAGA,2BAA2B,GAAA;AACzB,QAAA,IAAI,OAAO,gBAAgB,KAAK,WAAW,EAAE;;YAE3C;QACF;;QAGA,IAAI,CAAC,QAAQ,GAAG,IAAI,gBAAgB,CAAC,4BAA4B,CAAC;;;QAIlE,IAAI,CAAC,QAAQ,CAAC,SAAS,GAAG,CAAC,KAAK,KAAI;YAClC,IAAI,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,cAAc,EAAE;AACtC,gBAAA,OAAO,CAAC,GAAG,CAAC,2CAA2C,CAAC;;AAExD,gBAAA,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC;YAC7B;AACF,QAAA,CAAC;IACH;;;IAIA,wBAAwB,GAAA;QACtB,MAAM,YAAY,GAAG,MAAK;AACxB,YAAA,KAAK,IAAI,CAAC,iBAAiB,EAAE;AAC/B,QAAA,CAAC;AAED,QAAA,IAAI,OAAO,QAAQ,KAAK,WAAW,EAAE;AACnC,YAAA,QAAQ,CAAC,gBAAgB,CAAC,kBAAkB,EAAE,MAAK;AACjD,gBAAA,IAAI,QAAQ,CAAC,eAAe,KAAK,SAAS,EAAE;AAC1C,oBAAA,YAAY,EAAE;gBAChB;AACF,YAAA,CAAC,CAAC;QACJ;AAEA,QAAA,IAAI,OAAO,MAAM,KAAK,WAAW,EAAE;AACjC,YAAA,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,YAAY,CAAC;QAChD;IACF;;AAGA,IAAA,MAAM,iBAAiB,GAAA;AACrB,QAAA,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE;;;AAItB,QAAA,IAAI,IAAI,CAAC,sBAAsB,IAAI,GAAG,GAAG,IAAI,CAAC,kBAAkB,GAAG,IAAI,EAAE;YACvE;QACF;AAEA,QAAA,IAAI,CAAC,sBAAsB,GAAG,IAAI;AAClC,QAAA,IAAI,CAAC,kBAAkB,GAAG,GAAG;AAE7B,QAAA,IAAI;AACF,YAAA,MAAM,IAAI,CAAC,eAAe,EAAE;AAE5B,YAAA,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,gBAAgB,EAAE,IAAI,IAAI,CAAC,KAAK,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC;YAE/E,IAAI,CAAC,OAAO,EAAE;AACZ,gBAAA,MAAM,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC;gBAClC;YACF;YAEA,MAAM,IAAI,CAAC,YAAY,CAAC,SAAS,EAAE,OAAO,CAAC;QAC7C;QACA,OAAO,KAAK,EAAE;AACZ,YAAA,OAAO,CAAC,GAAG,CAAC,iCAAiC,EAAE,KAAK,CAAC;QACvD;gBACQ;AACN,YAAA,IAAI,CAAC,sBAAsB,GAAG,KAAK;QACrC;IACF;;IAGA,cAAc,GAAA;QACZ,IAAI,CAAC,QAAQ,EAAE,WAAW,CAAC,IAAI,CAAC,cAAc,CAAC;IACjD;;;IAIA,MAAM,gBAAgB,CAAC,iBAA0B,EAAA;QAC/C,IAAI,CAAC,uBAAuB,EAAE;AAE9B,QAAA,IAAI,IAAI,CAAC,OAAO,CAAC,SAAS,IAAI,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE;YAC1E,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC;QACjD;AAEA,QAAA,MAAM,gBAAgB,GAAG,IAAI,CAAC,aAAa;AAC3C,QAAA,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,SAAS,CAAC;AACrC,QAAA,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC;QAC7B,IAAI,gBAAgB,EAAE,KAAK,IAAI,CAAC,aAAa,EAAE,EAAE;AAC/C,YAAA,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,KAAK,CAAC;QACvC;AAEA,QAAA,IAAI;AACF,YAAA,MAAM,IAAI,CAAC,eAAe,EAAE;AAC5B,YAAA,MAAM,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE;AAC7B,YAAA,IAAI,CAAC,KAAK,CAAC,gBAAgB,CAAC,IAAI,CAAC;;;AAIjC,YAAA,cAAc,CAAC,UAAU,CAAC,yBAAyB,CAAC;;AAGpD,YAAA,IAAI,iBAAiB,IAAI,OAAO,MAAM,KAAK,WAAW,EAAE;AACtD,gBAAA,MAAM,CAAC,QAAQ,CAAC,MAAM,EAAE;YAC1B;QACF;QAAE,OAAO,KAAK,EAAE;AACd,YAAA,OAAO,CAAC,GAAG,CAAC,sCAAsC,EAAE,KAAK,CAAC;QAC5D;IACF;;AAGA,IAAA,eAAe,CAAC,sBAA+B,EAAA;AAC7C,QAAA,IAAI,sBAAsB,IAAI,IAAI,IAAI,sBAAsB,IAAI,SAAS,IAAI,sBAAsB,IAAI,CAAC,EAAE;AACxG,YAAA,OAAO,IAAI;QACb;AAEA,QAAA,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,2BAA2B,IAAI,sBAAsB,GAAG,IAAI;IACvF;;IAGA,MAAM,aAAa,CAAC,OAAoB,EAAA;AACtC,QAAA,IAAI;AACF,YAAA,OAAO,MAAM,IAAI,CAAC,KAAK,CAAC,kBAAkB,CAAC;gBACzC,OAAO;AACP,gBAAA,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC;AACtB,aAAA,CAAC;QACJ;QACA,OAAO,KAAK,EAAE;AACZ,YAAA,OAAO,CAAC,GAAG,CAAC,qCAAqC,EAAE,KAAK,CAAC;AACzD,YAAA,OAAO,SAAS;QAClB;IACF;;IAGA,iBAAiB,CAAC,MAA6B,EAAE,OAAqB,EAAA;AACpE,QAAA,OAAO,MAAM,EAAE,OAAO,IAAI,OAAO,EAAE,OAAO;IAC5C;;;IAIA,qBAAqB,CAAC,sBAA0C,EAAE,OAAoB,EAAA;QACpF,IAAI,CAAC,uBAAuB,EAAE;QAE9B,IAAI,CAAC,sBAAsB,EAAE;YAC3B;QACF;;AAGA,QAAA,MAAM,2BAA2B,GAAG,sBAAsB,GAAG,IAAI;;QAEjE,MAAM,iBAAiB,GAAG,KAAK;;QAE/B,MAAM,wBAAwB,GAAG,2BAA2B,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,iBAAiB;QAC7F,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,wBAAwB,EAAE,CAAC,CAAC;AAEnD,QAAA,IAAI,CAAC,sBAAsB,GAAG,UAAU,CAAC,MAAK;AAC5C,YAAA,IAAI,CAAC,aAAa,CAAC,OAAO;AACvB,iBAAA,IAAI,CAAC,CAAC,MAAM,KAAI;AACf,gBAAA,OAAO,CAAC,GAAG,CAAC,iDAAiD,EAAE,MAAM,CAAC;AACtE,gBAAA,IAAI,MAAM,EAAE,OAAO,EAAE;oBACnB,OAAO,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,MAAM,CAAC,OAAO,CAAC;gBAClD;;gBAGA,IAAI,CAAC,MAAM,EAAE;AACb,gBAAA,OAAO,SAAS;AAClB,YAAA,CAAC;iBACA,KAAK,CAAC,MAAK;;gBAEV,IAAI,CAAC,MAAM,EAAE;AACf,YAAA,CAAC,CAAC;QACN,CAAC,EAAE,KAAK,CAAC;IACX;;IAGA,uBAAuB,GAAA;AACrB,QAAA,IAAI,CAAC,IAAI,CAAC,sBAAsB,EAAE;YAChC;QACF;AAEA,QAAA,YAAY,CAAC,IAAI,CAAC,sBAAsB,CAAC;AACzC,QAAA,IAAI,CAAC,sBAAsB,GAAG,SAAS;IACzC;AArdW,IAAA,SAAA,IAAA,CAAA,IAAA,GAAA,EAAA,CAAA,kBAAA,CAAA,EAAA,UAAA,EAAA,QAAA,EAAA,OAAA,EAAA,QAAA,EAAA,QAAA,EAAA,EAAA,EAAA,IAAA,EAAA,wBAAwB,kBAwDH,oCAAoC,EAAA,QAAA,EAAA,IAAA,EAAA,CAAA,EAAA,MAAA,EAAA,EAAA,CAAA,eAAA,CAAA,UAAA,EAAA,CAAA,CAAA;AAxDzD,IAAA,SAAA,IAAA,CAAA,KAAA,GAAA,EAAA,CAAA,qBAAA,CAAA,EAAA,UAAA,EAAA,QAAA,EAAA,OAAA,EAAA,QAAA,EAAA,QAAA,EAAA,EAAA,EAAA,IAAA,EAAA,wBAAwB,cAFvB,MAAM,EAAA,CAAA,CAAA;;2FAEP,wBAAwB,EAAA,UAAA,EAAA,CAAA;kBAHpC,UAAU;AAAC,YAAA,IAAA,EAAA,CAAA;AACV,oBAAA,UAAU,EAAE;AACb,iBAAA;;0BAyDc;;0BAAY,MAAM;2BAAC,oCAAoC;;sBA9CnE;;sBACA;;sBACA;;;MC9BU,kCAAkC,CAAA;IAC7C,QAAQ,GAAA;AACN,QAAA,4BAA4B,EAAE,CAAC,KAAK,CAAC,CAAC,KAAY,KAAI;AACpD,YAAA,OAAO,CAAC,KAAK,CAAC,4CAA4C,EAAE,KAAK,CAAC;AACpE,QAAA,CAAC,CAAC;IACJ;8GALW,kCAAkC,EAAA,IAAA,EAAA,EAAA,EAAA,MAAA,EAAA,EAAA,CAAA,eAAA,CAAA,SAAA,EAAA,CAAA,CAAA;AAAlC,IAAA,SAAA,IAAA,CAAA,IAAA,GAAA,EAAA,CAAA,oBAAA,CAAA,EAAA,UAAA,EAAA,QAAA,EAAA,OAAA,EAAA,QAAA,EAAA,IAAA,EAAA,kCAAkC,2FAFnC,qCAAqC,EAAA,QAAA,EAAA,IAAA,EAAA,eAAA,EAAA,EAAA,CAAA,uBAAA,CAAA,KAAA,EAAA,CAAA,CAAA;;2FAEpC,kCAAkC,EAAA,UAAA,EAAA,CAAA;kBAN9C,SAAS;AAAC,YAAA,IAAA,EAAA,CAAA;AACT,oBAAA,QAAQ,EAAE,iCAAiC;AAC3C,oBAAA,UAAU,EAAE,IAAI;oBAChB,eAAe,EAAE,uBAAuB,CAAC,KAAK;AAC9C,oBAAA,QAAQ,EAAE,qCAAqC;AAChD,iBAAA;;;MCSY,uBAAuB,CAAA;IAClC,OAAO,OAAO,CAAC,OAAwC,EAAA;QACrD,OAAO;AACL,YAAA,QAAQ,EAAE,uBAAuB;AACjC,YAAA,SAAS,EAAE;AACT,gBAAA;AACE,oBAAA,OAAO,EAAE,oCAAoC;AAC7C,oBAAA,QAAQ,EAAE;AACX;AACF;SACF;IACH;AAEA,IAAA,WAAA,CAAoC,YAAqC,EAAA;QACvE,IAAI,YAAY,EAAE;AAChB,YAAA,MAAM,IAAI,KAAK,CACb,4EAA4E,CAAC;QACjF;IACF;8GAlBW,uBAAuB,EAAA,IAAA,EAAA,CAAA,EAAA,KAAA,EAAA,uBAAA,EAAA,QAAA,EAAA,IAAA,EAAA,QAAA,EAAA,IAAA,EAAA,CAAA,EAAA,MAAA,EAAA,EAAA,CAAA,eAAA,CAAA,QAAA,EAAA,CAAA,CAAA;AAAvB,IAAA,SAAA,IAAA,CAAA,IAAA,GAAA,EAAA,CAAA,mBAAA,CAAA,EAAA,UAAA,EAAA,QAAA,EAAA,OAAA,EAAA,QAAA,EAAA,QAAA,EAAA,EAAA,EAAA,IAAA,EAAA,uBAAuB,YAPhC,YAAY;AACZ,YAAA,kCAAkC,aAGlC,kCAAkC,CAAA,EAAA,CAAA,CAAA;AAGzB,IAAA,SAAA,IAAA,CAAA,IAAA,GAAA,EAAA,CAAA,mBAAA,CAAA,EAAA,UAAA,EAAA,QAAA,EAAA,OAAA,EAAA,QAAA,EAAA,QAAA,EAAA,EAAA,EAAA,IAAA,EAAA,uBAAuB,YAPhC,YAAY,CAAA,EAAA,CAAA,CAAA;;2FAOH,uBAAuB,EAAA,UAAA,EAAA,CAAA;kBAVnC,QAAQ;AAAC,YAAA,IAAA,EAAA,CAAA;AACR,oBAAA,YAAY,EAAE,EAAE;AAChB,oBAAA,OAAO,EAAE;wBACP,YAAY;wBACZ;AACD,qBAAA;AACD,oBAAA,OAAO,EAAE;wBACP;AACD;AACF,iBAAA;;0BAcc;;0BAAY;;;MCzBd,sBAAsB,GAAkB,CAAC,MAAM,EAAE,MAAM,KAAI;AACtE,IAAA,MAAM,qBAAqB,GAAG,MAAM,CAAC,wBAAwB,CAAC;AAC9D,IAAA,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;;AAG7B,IAAA,IAAI,qBAAqB,CAAC,aAAa,EAAE,EAAE;AACzC,QAAA,OAAO,IAAI;IACb;AAEA,IAAA,IAAI,qBAAqB,CAAC,WAAW,EAAE,EAAE;;QAEvC,qBAAqB,CAAC,qBAAqB,EAAE;AAE7C,QAAA,OAAO,qBAAqB,CAAC,oBAAoB,CAAC,IAAI,CACpD,IAAI,CAAC,CAAC,CAAC,EACP,GAAG,CAAC,MAAK;AACP,YAAA,IAAI,CAAC,qBAAqB,CAAC,aAAa,EAAE,EAAE;AAC1C,gBAAA,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC;AACrB,gBAAA,OAAO,KAAK;YACd;AAEA,YAAA,OAAO,IAAI;QACb,CAAC,CAAC,CACH;IACH;SACK;AACH,QAAA,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC;AACrB,QAAA,OAAO,KAAK;IACd;AACF;;AClCA;;AAEG;;;;"}

package/fesm2022/cleavelandprice-ngx-lib-authentication-token.mjs

@@ -1,5 +1,5 @@
 import * as i0 from '@angular/core';
-import { InjectionToken, inject, EventEmitter, Output, Optional, Inject, Injectable, SkipSelf, NgModule } from '@angular/core';
+import { InjectionToken, inject, signal, EventEmitter, Output, Optional, Inject, Injectable, SkipSelf, NgModule } from '@angular/core';
 import { HttpClient } from '@angular/common/http';
 import { JwtHelperService } from '@auth0/angular-jwt';
 import { NgxLibServiceBase } from '@cleavelandprice/ngx-lib';
@@ -27,8 +27,12 @@ class AuthenticationTokenService extends NgxLibServiceBase {
         this.options = options;
         //#region Fields
         this.#http = inject(HttpClient);
-        this.authenticating = false; // Flag set to true while the service is attempting to authenticate the user
-        this.authenticated = false; // Flag set to true when the user is successfully authenticated
+        this.authenticating = signal(false, /* @ts-ignore */
+        ...(ngDevMode ? [{ debugName: "authenticating" }] : /* istanbul ignore next */ [])); // Flag set to true while the service is attempting to authenticate the user
+        this.authenticated = signal(false, /* @ts-ignore */
+        ...(ngDevMode ? [{ debugName: "authenticated" }] : /* istanbul ignore next */ [])); // Flag set to true when the user is successfully authenticated
+        this.authenticatedUser = signal(undefined, /* @ts-ignore */
+        ...(ngDevMode ? [{ debugName: "authenticatedUser" }] : /* istanbul ignore next */ [])); // Object representing the authenticated user
         // error NG8110: Unsupported call to the output function. This function can only be used as the initializer of a property on a @Component or @Directive class.
         /*authenticatedChanged = output<boolean>();
         authenticatingChanged = output<boolean>();
@@ -57,8 +61,8 @@ class AuthenticationTokenService extends NgxLibServiceBase {
             additionalInfo,
             appName: this.options.appName
         };
-        this.authenticating = true;
-        this.authenticatingChanged.emit(this.authenticating);
+        this.authenticating.set(true);
+        this.authenticatingChanged.emit(this.authenticating());
         // Sending a 'raw' POST request so that we can tell HttpClient that we are expecting text instead of Json
         // Otherwise, it would throw an error trying to decode Json from the response
         this.#http.request('POST', `${this.apiUrl}${this.options.authenticationEndpoint}`, { body: request, responseType: 'text' })
@@ -72,8 +76,8 @@ class AuthenticationTokenService extends NgxLibServiceBase {
                 }
             },
             error: (err) => {
-                this.authenticating = false;
-                this.authenticatingChanged.emit(this.authenticating);
+                this.authenticating.set(false);
+                this.authenticatingChanged.emit(this.authenticating());
                 this.authenticationError.emit(err);
             }
         });
@@ -83,8 +87,8 @@ class AuthenticationTokenService extends NgxLibServiceBase {
         if (this.options.tokenName && this.storage.getItem(this.options.tokenName)) {
             this.storage.removeItem(this.options.tokenName);
         }
-        this.authenticatedUser = undefined;
-        this.authenticated = false;
+        this.authenticatedUser.set(undefined);
+        this.authenticated.set(false);
         this.authenticatedChanged.emit(false);
     }
     validateUser(token) {
@@ -94,7 +98,7 @@ class AuthenticationTokenService extends NgxLibServiceBase {
             this.logout();
             return;
         }
-        this.authenticatedUser = {
+        this.authenticatedUser.set({
             admin: decoded.role === 'Admin',
             accountName: decoded.winaccountname,
             department: decoded.department,
@@ -110,14 +114,14 @@ class AuthenticationTokenService extends NgxLibServiceBase {
             sid: decoded.sid,
             title: decoded.title,
             workShift: decoded.workShift
-        };
+        });
         if (this.options.tokenName) {
             this.storage.setItem(this.options.tokenName, token);
         }
-        this.authenticated = true;
-        this.authenticatedChanged.emit(this.authenticated);
-        this.authenticating = false;
-        this.authenticatingChanged.emit(this.authenticating);
+        this.authenticated.set(true);
+        this.authenticatedChanged.emit(this.authenticated());
+        this.authenticating.set(false);
+        this.authenticatingChanged.emit(this.authenticating());
     }
     checkForExistingToken() {
         if (this.options.tokenName) {

package/fesm2022/cleavelandprice-ngx-lib-authentication-token.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"cleavelandprice-ngx-lib-authentication-token.mjs","sources":["../../../../projects/cleavelandprice/ngx-lib/authentication/token/src/model/authentication-token-service-options-token.ts","../../../../projects/cleavelandprice/ngx-lib/authentication/token/src/services/authentication-token.service.ts","../../../../projects/cleavelandprice/ngx-lib/authentication/token/src/authetiction-token.module.ts","../../../../projects/cleavelandprice/ngx-lib/authentication/token/src/cleavelandprice-ngx-lib-authentication-token.ts"],"sourcesContent":["import { InjectionToken } from \"@angular/core\";\r\nimport { AuthenticationTokenServiceOptions } from \"./authentication-token-service-options\";\r\n\r\nexport const AuthenticationTokenServiceOptionsToken = new InjectionToken<AuthenticationTokenServiceOptions>('');","import { HttpClient } from '@angular/common/http';\r\nimport { EventEmitter, Inject, Injectable, Optional, Output, inject } from '@angular/core';\r\nimport { JwtHelperService } from '@auth0/angular-jwt';\r\n\r\nimport {\r\n  AbstractAuthenticationService,\r\n  AuthenticatedUser,\r\n  AuthenticationRequest\r\n} from '@cleavelandprice/ngx-lib/authentication';\r\n\r\nimport { NgxLibServiceBase } from '@cleavelandprice/ngx-lib';\r\nimport { AuthenticationToken } from '../model/authentication-token';\r\nimport { AuthenticationTokenServiceOptions } from '../model/authentication-token-service-options';\r\nimport { AuthenticationTokenServiceOptionsToken } from '../model/authentication-token-service-options-token';\r\n\r\n@Injectable({\r\n  providedIn: 'root'\r\n})\r\nexport class AuthenticationTokenService extends NgxLibServiceBase implements AbstractAuthenticationService {\r\n  //#region Fields\r\n  #http = inject(HttpClient);\r\n  \r\n  authenticating = false; // Flag set to true while the service is attempting to authenticate the user\r\n  authenticated = false; // Flag set to true when the user is successfully authenticated\r\n  authenticatedUser?: AuthenticatedUser; // Object representing the authenticated user\r\n\r\n  // error NG8110: Unsupported call to the output function. This function can only be used as the initializer of a property on a @Component or @Directive class.\r\n  /*authenticatedChanged = output<boolean>();\r\n  authenticatingChanged = output<boolean>();\r\n  authenticationError = output();*/\r\n  @Output() authenticatedChanged = new EventEmitter<boolean>();\r\n  @Output() authenticatingChanged = new EventEmitter<boolean>();\r\n  @Output() authenticationError = new EventEmitter();\r\n\r\n  //#endregion\r\n\r\n  //#region Properties\r\n  get useSessionStorage(): boolean {\r\n    return !!localStorage.getItem('storeTokenInSession');\r\n  }\r\n\r\n  get storage(): Storage {\r\n    return this.useSessionStorage ?\r\n      sessionStorage:\r\n      localStorage;\r\n  }\r\n  //#endregion\r\n\r\n  //#region Lifecycle\r\n  constructor(@Optional() @Inject(AuthenticationTokenServiceOptionsToken) protected options: AuthenticationTokenServiceOptions) {\r\n    super(options);\r\n    \r\n    this.options = {\r\n      ...options,\r\n\r\n      tokenName: 'token',\r\n      authenticationEndpoint: '/authenticate/token',\r\n      deferTokenValidation: options?.deferTokenValidation ?? false\r\n    };\r\n\r\n    if (!this.options.deferTokenValidation) {\r\n      this.checkForExistingToken();\r\n    }\r\n  }\r\n  //#endregion\r\n\r\n  //#region Utilities\r\n  //Authenticate the user and store the token in Local Storage\r\n  login(username: string, password: string, adminGroup?: string, additionalInfo?: string): void {\r\n    const request: AuthenticationRequest = {\r\n      username,\r\n      password,\r\n      adminGroup,\r\n      additionalInfo,\r\n      appName: this.options.appName\r\n    };\r\n\r\n    this.authenticating = true;\r\n    this.authenticatingChanged.emit(this.authenticating);\r\n\r\n    // Sending a 'raw' POST request so that we can tell HttpClient that we are expecting text instead of Json\r\n    // Otherwise, it would throw an error trying to decode Json from the response\r\n    \r\n    this.#http.request('POST', `${this.apiUrl}${this.options.authenticationEndpoint}`, { body: request, responseType: 'text' })\r\n      .subscribe({\r\n        next: (token) => {\r\n          if (token) {\r\n            this.validateUser(token);\r\n          } else {\r\n            this.logout();\r\n          }\r\n        },\r\n        error: (err) => {\r\n          this.authenticating = false;\r\n          this.authenticatingChanged.emit(this.authenticating);\r\n          this.authenticationError.emit(err);\r\n        }\r\n      });\r\n  }\r\n \r\n  //Logout the user and delete the token from Local Storage\r\n  logout(): void {\r\n    if (this.options.tokenName && this.storage.getItem(this.options.tokenName)) {\r\n      this.storage.removeItem(this.options.tokenName);\r\n    }\r\n\r\n    this.authenticatedUser = undefined;\r\n    this.authenticated = false;\r\n    this.authenticatedChanged.emit(false);\r\n  }\r\n \r\n  validateUser(token: string): void {\r\n    const jwtHelper = new JwtHelperService();\r\n    const decoded = jwtHelper.decodeToken(token) as AuthenticationToken;\r\n\r\n    if (jwtHelper.isTokenExpired(token)) {\r\n      this.logout();\r\n      return;\r\n    }\r\n\r\n    this.authenticatedUser = {\r\n      admin: decoded.role === 'Admin',\r\n      accountName: decoded.winaccountname,\r\n      department: decoded.department,\r\n      displayName: decoded.displayName,\r\n      distinguishedName: decoded.distinguishedName,\r\n      employeeNumber: decoded.employeeNumber,\r\n      firstName: decoded.firstName,\r\n      hireDate: decoded.hireDate,\r\n      lastName: decoded.lastName,\r\n      manager: decoded.manager,\r\n      memberOf: decoded.memberOf,\r\n      phone: decoded.manager,\r\n      sid: decoded.sid,\r\n      title: decoded.title,\r\n      workShift: decoded.workShift\r\n    };\r\n\r\n    if (this.options.tokenName) {\r\n      this.storage.setItem(this.options.tokenName, token);\r\n    }\r\n    \r\n    this.authenticated = true;\r\n    this.authenticatedChanged.emit(this.authenticated);\r\n\r\n    this.authenticating = false;\r\n    this.authenticatingChanged.emit(this.authenticating);\r\n  }\r\n\r\n  checkForExistingToken(): void {\r\n    if (this.options.tokenName) {\r\n      const token = this.storage.getItem(this.options.tokenName!);\r\n      if (token) {\r\n        this.validateUser(token);\r\n      }\r\n    }\r\n  }\r\n  //#endregion\r\n}","import { CommonModule } from '@angular/common';\r\nimport { ModuleWithProviders, NgModule, Optional, SkipSelf } from '@angular/core';\r\n\r\nimport { AuthenticationTokenServiceOptions } from './model/authentication-token-service-options';\r\nimport { AuthenticationTokenServiceOptionsToken } from './model/authentication-token-service-options-token';\r\n\r\n@NgModule({\r\n  declarations: [],\r\n  imports: [\r\n    CommonModule\r\n  ],\r\n  exports: []\r\n})\r\nexport class AuthenticationTokenModule {\r\n  static forRoot(options: AuthenticationTokenServiceOptions): ModuleWithProviders<AuthenticationTokenModule> {\r\n    return {\r\n      ngModule: AuthenticationTokenModule,\r\n      providers: [\r\n        {\r\n          provide: AuthenticationTokenServiceOptionsToken,\r\n          useValue: options\r\n        }\r\n      ]\r\n    };\r\n  }\r\n\r\n  constructor(@Optional() @SkipSelf() parentModule: AuthenticationTokenModule) {\r\n    if (parentModule) {\r\n      throw new Error(\r\n        'AuthenticationTokenModule is already loaded. Import it in the AppModule only');\r\n    }\r\n  }\r\n}","/**\n * Generated bundle index. Do not edit.\n */\n\nexport * from './authentication-token.api';\n"],"names":[],"mappings":";;;;;;;MAGa,sCAAsC,GAAG,IAAI,cAAc,CAAoC,EAAE;;ACexG,MAAO,0BAA2B,SAAQ,iBAAiB,CAAA;;AAE/D,IAAA,KAAK;;;AAiBL,IAAA,IAAI,iBAAiB,GAAA;QACnB,OAAO,CAAC,CAAC,YAAY,CAAC,OAAO,CAAC,qBAAqB,CAAC;IACtD;AAEA,IAAA,IAAI,OAAO,GAAA;AACT,QAAA,OAAO,IAAI,CAAC,iBAAiB;AAC3B,YAAA,cAAc;AACd,YAAA,YAAY;IAChB;;;AAIA,IAAA,WAAA,CAAkF,OAA0C,EAAA;QAC1H,KAAK,CAAC,OAAO,CAAC;QADkE,IAAA,CAAA,OAAO,GAAP,OAAO;;AA7BzF,QAAA,IAAA,CAAA,KAAK,GAAG,MAAM,CAAC,UAAU,CAAC;AAE1B,QAAA,IAAA,CAAA,cAAc,GAAG,KAAK,CAAC;AACvB,QAAA,IAAA,CAAA,aAAa,GAAG,KAAK,CAAC;;AAItB;;AAEiC;AACvB,QAAA,IAAA,CAAA,oBAAoB,GAAG,IAAI,YAAY,EAAW;AAClD,QAAA,IAAA,CAAA,qBAAqB,GAAG,IAAI,YAAY,EAAW;AACnD,QAAA,IAAA,CAAA,mBAAmB,GAAG,IAAI,YAAY,EAAE;QAoBhD,IAAI,CAAC,OAAO,GAAG;AACb,YAAA,GAAG,OAAO;AAEV,YAAA,SAAS,EAAE,OAAO;AAClB,YAAA,sBAAsB,EAAE,qBAAqB;AAC7C,YAAA,oBAAoB,EAAE,OAAO,EAAE,oBAAoB,IAAI;SACxD;AAED,QAAA,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,oBAAoB,EAAE;YACtC,IAAI,CAAC,qBAAqB,EAAE;QAC9B;IACF;;;;AAKA,IAAA,KAAK,CAAC,QAAgB,EAAE,QAAgB,EAAE,UAAmB,EAAE,cAAuB,EAAA;AACpF,QAAA,MAAM,OAAO,GAA0B;YACrC,QAAQ;YACR,QAAQ;YACR,UAAU;YACV,cAAc;AACd,YAAA,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC;SACvB;AAED,QAAA,IAAI,CAAC,cAAc,GAAG,IAAI;QAC1B,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC;;;AAKpD,QAAA,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,CAAA,EAAG,IAAI,CAAC,MAAM,CAAA,EAAG,IAAI,CAAC,OAAO,CAAC,sBAAsB,CAAA,CAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,YAAY,EAAE,MAAM,EAAE;AACvH,aAAA,SAAS,CAAC;AACT,YAAA,IAAI,EAAE,CAAC,KAAK,KAAI;gBACd,IAAI,KAAK,EAAE;AACT,oBAAA,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC;gBAC1B;qBAAO;oBACL,IAAI,CAAC,MAAM,EAAE;gBACf;YACF,CAAC;AACD,YAAA,KAAK,EAAE,CAAC,GAAG,KAAI;AACb,gBAAA,IAAI,CAAC,cAAc,GAAG,KAAK;gBAC3B,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC;AACpD,gBAAA,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,GAAG,CAAC;YACpC;AACD,SAAA,CAAC;IACN;;IAGA,MAAM,GAAA;AACJ,QAAA,IAAI,IAAI,CAAC,OAAO,CAAC,SAAS,IAAI,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE;YAC1E,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC;QACjD;AAEA,QAAA,IAAI,CAAC,iBAAiB,GAAG,SAAS;AAClC,QAAA,IAAI,CAAC,aAAa,GAAG,KAAK;AAC1B,QAAA,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,KAAK,CAAC;IACvC;AAEA,IAAA,YAAY,CAAC,KAAa,EAAA;AACxB,QAAA,MAAM,SAAS,GAAG,IAAI,gBAAgB,EAAE;QACxC,MAAM,OAAO,GAAG,SAAS,CAAC,WAAW,CAAC,KAAK,CAAwB;AAEnE,QAAA,IAAI,SAAS,CAAC,cAAc,CAAC,KAAK,CAAC,EAAE;YACnC,IAAI,CAAC,MAAM,EAAE;YACb;QACF;QAEA,IAAI,CAAC,iBAAiB,GAAG;AACvB,YAAA,KAAK,EAAE,OAAO,CAAC,IAAI,KAAK,OAAO;YAC/B,WAAW,EAAE,OAAO,CAAC,cAAc;YACnC,UAAU,EAAE,OAAO,CAAC,UAAU;YAC9B,WAAW,EAAE,OAAO,CAAC,WAAW;YAChC,iBAAiB,EAAE,OAAO,CAAC,iBAAiB;YAC5C,cAAc,EAAE,OAAO,CAAC,cAAc;YACtC,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,KAAK,EAAE,OAAO,CAAC,OAAO;YACtB,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,SAAS,EAAE,OAAO,CAAC;SACpB;AAED,QAAA,IAAI,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE;AAC1B,YAAA,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,KAAK,CAAC;QACrD;AAEA,QAAA,IAAI,CAAC,aAAa,GAAG,IAAI;QACzB,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC;AAElD,QAAA,IAAI,CAAC,cAAc,GAAG,KAAK;QAC3B,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC;IACtD;IAEA,qBAAqB,GAAA;AACnB,QAAA,IAAI,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE;AAC1B,YAAA,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,SAAU,CAAC;YAC3D,IAAI,KAAK,EAAE;AACT,gBAAA,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC;YAC1B;QACF;IACF;AA1IW,IAAA,SAAA,IAAA,CAAA,IAAA,GAAA,EAAA,CAAA,kBAAA,CAAA,EAAA,UAAA,EAAA,QAAA,EAAA,OAAA,EAAA,QAAA,EAAA,QAAA,EAAA,EAAA,EAAA,IAAA,EAAA,0BAA0B,kBA+BL,sCAAsC,EAAA,QAAA,EAAA,IAAA,EAAA,CAAA,EAAA,MAAA,EAAA,EAAA,CAAA,eAAA,CAAA,UAAA,EAAA,CAAA,CAAA;AA/B3D,IAAA,SAAA,IAAA,CAAA,KAAA,GAAA,EAAA,CAAA,qBAAA,CAAA,EAAA,UAAA,EAAA,QAAA,EAAA,OAAA,EAAA,QAAA,EAAA,QAAA,EAAA,EAAA,EAAA,IAAA,EAAA,0BAA0B,cAFzB,MAAM,EAAA,CAAA,CAAA;;2FAEP,0BAA0B,EAAA,UAAA,EAAA,CAAA;kBAHtC,UAAU;AAAC,YAAA,IAAA,EAAA,CAAA;AACV,oBAAA,UAAU,EAAE;AACb,iBAAA;;0BAgCc;;0BAAY,MAAM;2BAAC,sCAAsC;;sBAnBrE;;sBACA;;sBACA;;;MCnBU,yBAAyB,CAAA;IACpC,OAAO,OAAO,CAAC,OAA0C,EAAA;QACvD,OAAO;AACL,YAAA,QAAQ,EAAE,yBAAyB;AACnC,YAAA,SAAS,EAAE;AACT,gBAAA;AACE,oBAAA,OAAO,EAAE,sCAAsC;AAC/C,oBAAA,QAAQ,EAAE;AACX;AACF;SACF;IACH;AAEA,IAAA,WAAA,CAAoC,YAAuC,EAAA;QACzE,IAAI,YAAY,EAAE;AAChB,YAAA,MAAM,IAAI,KAAK,CACb,8EAA8E,CAAC;QACnF;IACF;8GAlBW,yBAAyB,EAAA,IAAA,EAAA,CAAA,EAAA,KAAA,EAAA,yBAAA,EAAA,QAAA,EAAA,IAAA,EAAA,QAAA,EAAA,IAAA,EAAA,CAAA,EAAA,MAAA,EAAA,EAAA,CAAA,eAAA,CAAA,QAAA,EAAA,CAAA,CAAA;AAAzB,IAAA,SAAA,IAAA,CAAA,IAAA,GAAA,EAAA,CAAA,mBAAA,CAAA,EAAA,UAAA,EAAA,QAAA,EAAA,OAAA,EAAA,QAAA,EAAA,QAAA,EAAA,EAAA,EAAA,IAAA,EAAA,yBAAyB,YAJlC,YAAY,CAAA,EAAA,CAAA,CAAA;AAIH,IAAA,SAAA,IAAA,CAAA,IAAA,GAAA,EAAA,CAAA,mBAAA,CAAA,EAAA,UAAA,EAAA,QAAA,EAAA,OAAA,EAAA,QAAA,EAAA,QAAA,EAAA,EAAA,EAAA,IAAA,EAAA,yBAAyB,YAJlC,YAAY,CAAA,EAAA,CAAA,CAAA;;2FAIH,yBAAyB,EAAA,UAAA,EAAA,CAAA;kBAPrC,QAAQ;AAAC,YAAA,IAAA,EAAA,CAAA;AACR,oBAAA,YAAY,EAAE,EAAE;AAChB,oBAAA,OAAO,EAAE;wBACP;AACD,qBAAA;AACD,oBAAA,OAAO,EAAE;AACV,iBAAA;;0BAcc;;0BAAY;;;AC1B3B;;AAEG;;;;"}
+{"version":3,"file":"cleavelandprice-ngx-lib-authentication-token.mjs","sources":["../../../../projects/cleavelandprice/ngx-lib/authentication/token/src/model/authentication-token-service-options-token.ts","../../../../projects/cleavelandprice/ngx-lib/authentication/token/src/services/authentication-token.service.ts","../../../../projects/cleavelandprice/ngx-lib/authentication/token/src/authetiction-token.module.ts","../../../../projects/cleavelandprice/ngx-lib/authentication/token/src/cleavelandprice-ngx-lib-authentication-token.ts"],"sourcesContent":["import { InjectionToken } from \"@angular/core\";\r\nimport { AuthenticationTokenServiceOptions } from \"./authentication-token-service-options\";\r\n\r\nexport const AuthenticationTokenServiceOptionsToken = new InjectionToken<AuthenticationTokenServiceOptions>('');","import { HttpClient } from '@angular/common/http';\r\nimport { EventEmitter, Inject, Injectable, Optional, Output, inject, output, signal } from '@angular/core';\r\nimport { JwtHelperService } from '@auth0/angular-jwt';\r\n\r\nimport {\r\n  AbstractAuthenticationService,\r\n  AuthenticatedUser,\r\n  AuthenticationRequest\r\n} from '@cleavelandprice/ngx-lib/authentication';\r\n\r\nimport { NgxLibServiceBase } from '@cleavelandprice/ngx-lib';\r\nimport { AuthenticationToken } from '../model/authentication-token';\r\nimport { AuthenticationTokenServiceOptions } from '../model/authentication-token-service-options';\r\nimport { AuthenticationTokenServiceOptionsToken } from '../model/authentication-token-service-options-token';\r\n\r\n@Injectable({\r\n  providedIn: 'root'\r\n})\r\nexport class AuthenticationTokenService extends NgxLibServiceBase implements AbstractAuthenticationService {\r\n  //#region Fields\r\n  #http = inject(HttpClient);\r\n  \r\n  authenticating = signal(false); // Flag set to true while the service is attempting to authenticate the user\r\n  authenticated = signal(false); // Flag set to true when the user is successfully authenticated\r\n  authenticatedUser = signal<AuthenticatedUser|undefined>(undefined); // Object representing the authenticated user\r\n\r\n  // error NG8110: Unsupported call to the output function. This function can only be used as the initializer of a property on a @Component or @Directive class.\r\n  /*authenticatedChanged = output<boolean>();\r\n  authenticatingChanged = output<boolean>();\r\n  authenticationError = output();*/\r\n  @Output() authenticatedChanged = new EventEmitter<boolean>();\r\n  @Output() authenticatingChanged = new EventEmitter<boolean>();\r\n  @Output() authenticationError = new EventEmitter();\r\n\r\n  //#endregion\r\n\r\n  //#region Properties\r\n  get useSessionStorage(): boolean {\r\n    return !!localStorage.getItem('storeTokenInSession');\r\n  }\r\n\r\n  get storage(): Storage {\r\n    return this.useSessionStorage ?\r\n      sessionStorage:\r\n      localStorage;\r\n  }\r\n  //#endregion\r\n\r\n  //#region Lifecycle\r\n  constructor(@Optional() @Inject(AuthenticationTokenServiceOptionsToken) protected options: AuthenticationTokenServiceOptions) {\r\n    super(options);\r\n    \r\n    this.options = {\r\n      ...options,\r\n\r\n      tokenName: 'token',\r\n      authenticationEndpoint: '/authenticate/token',\r\n      deferTokenValidation: options?.deferTokenValidation ?? false\r\n    };\r\n\r\n    if (!this.options.deferTokenValidation) {\r\n      this.checkForExistingToken();\r\n    }\r\n  }\r\n  //#endregion\r\n\r\n  //#region Utilities\r\n  //Authenticate the user and store the token in Local Storage\r\n  login(username: string, password: string, adminGroup?: string, additionalInfo?: string): void {\r\n    const request: AuthenticationRequest = {\r\n      username,\r\n      password,\r\n      adminGroup,\r\n      additionalInfo,\r\n      appName: this.options.appName\r\n    };\r\n\r\n    this.authenticating.set(true);\r\n    this.authenticatingChanged.emit(this.authenticating());\r\n\r\n    // Sending a 'raw' POST request so that we can tell HttpClient that we are expecting text instead of Json\r\n    // Otherwise, it would throw an error trying to decode Json from the response\r\n    \r\n    this.#http.request('POST', `${this.apiUrl}${this.options.authenticationEndpoint}`, { body: request, responseType: 'text' })\r\n      .subscribe({\r\n        next: (token) => {\r\n          if (token) {\r\n            this.validateUser(token);\r\n          } else {\r\n            this.logout();\r\n          }\r\n        },\r\n        error: (err) => {\r\n          this.authenticating.set(false);\r\n          this.authenticatingChanged.emit(this.authenticating());\r\n          this.authenticationError.emit(err);\r\n        }\r\n      });\r\n  }\r\n \r\n  //Logout the user and delete the token from Local Storage\r\n  logout(): void {\r\n    if (this.options.tokenName && this.storage.getItem(this.options.tokenName)) {\r\n      this.storage.removeItem(this.options.tokenName);\r\n    }\r\n\r\n    this.authenticatedUser.set(undefined);\r\n    this.authenticated.set(false);\r\n    this.authenticatedChanged.emit(false);\r\n  }\r\n \r\n  validateUser(token: string): void {\r\n    const jwtHelper = new JwtHelperService();\r\n    const decoded = jwtHelper.decodeToken(token) as AuthenticationToken;\r\n\r\n    if (jwtHelper.isTokenExpired(token)) {\r\n      this.logout();\r\n      return;\r\n    }\r\n\r\n    this.authenticatedUser.set({\r\n      admin: decoded.role === 'Admin',\r\n      accountName: decoded.winaccountname,\r\n      department: decoded.department,\r\n      displayName: decoded.displayName,\r\n      distinguishedName: decoded.distinguishedName,\r\n      employeeNumber: decoded.employeeNumber,\r\n      firstName: decoded.firstName,\r\n      hireDate: decoded.hireDate,\r\n      lastName: decoded.lastName,\r\n      manager: decoded.manager,\r\n      memberOf: decoded.memberOf,\r\n      phone: decoded.manager,\r\n      sid: decoded.sid,\r\n      title: decoded.title,\r\n      workShift: decoded.workShift\r\n    });\r\n\r\n    if (this.options.tokenName) {\r\n      this.storage.setItem(this.options.tokenName, token);\r\n    }\r\n    \r\n    this.authenticated.set(true);\r\n    this.authenticatedChanged.emit(this.authenticated());\r\n\r\n    this.authenticating.set(false);\r\n    this.authenticatingChanged.emit(this.authenticating());\r\n  }\r\n\r\n  checkForExistingToken(): void {\r\n    if (this.options.tokenName) {\r\n      const token = this.storage.getItem(this.options.tokenName!);\r\n      if (token) {\r\n        this.validateUser(token);\r\n      }\r\n    }\r\n  }\r\n  //#endregion\r\n}","import { CommonModule } from '@angular/common';\r\nimport { ModuleWithProviders, NgModule, Optional, SkipSelf } from '@angular/core';\r\n\r\nimport { AuthenticationTokenServiceOptions } from './model/authentication-token-service-options';\r\nimport { AuthenticationTokenServiceOptionsToken } from './model/authentication-token-service-options-token';\r\n\r\n@NgModule({\r\n  declarations: [],\r\n  imports: [\r\n    CommonModule\r\n  ],\r\n  exports: []\r\n})\r\nexport class AuthenticationTokenModule {\r\n  static forRoot(options: AuthenticationTokenServiceOptions): ModuleWithProviders<AuthenticationTokenModule> {\r\n    return {\r\n      ngModule: AuthenticationTokenModule,\r\n      providers: [\r\n        {\r\n          provide: AuthenticationTokenServiceOptionsToken,\r\n          useValue: options\r\n        }\r\n      ]\r\n    };\r\n  }\r\n\r\n  constructor(@Optional() @SkipSelf() parentModule: AuthenticationTokenModule) {\r\n    if (parentModule) {\r\n      throw new Error(\r\n        'AuthenticationTokenModule is already loaded. Import it in the AppModule only');\r\n    }\r\n  }\r\n}","/**\n * Generated bundle index. Do not edit.\n */\n\nexport * from './authentication-token.api';\n"],"names":[],"mappings":";;;;;;;MAGa,sCAAsC,GAAG,IAAI,cAAc,CAAoC,EAAE;;ACexG,MAAO,0BAA2B,SAAQ,iBAAiB,CAAA;;AAE/D,IAAA,KAAK;;;AAiBL,IAAA,IAAI,iBAAiB,GAAA;QACnB,OAAO,CAAC,CAAC,YAAY,CAAC,OAAO,CAAC,qBAAqB,CAAC;IACtD;AAEA,IAAA,IAAI,OAAO,GAAA;AACT,QAAA,OAAO,IAAI,CAAC,iBAAiB;AAC3B,YAAA,cAAc;AACd,YAAA,YAAY;IAChB;;;AAIA,IAAA,WAAA,CAAkF,OAA0C,EAAA;QAC1H,KAAK,CAAC,OAAO,CAAC;QADkE,IAAA,CAAA,OAAO,GAAP,OAAO;;AA7BzF,QAAA,IAAA,CAAA,KAAK,GAAG,MAAM,CAAC,UAAU,CAAC;QAE1B,IAAA,CAAA,cAAc,GAAG,MAAM,CAAC,KAAK;AAAC,QAAA,IAAA,SAAA,GAAA,CAAA,EAAA,SAAA,EAAA,gBAAA,EAAA,CAAA,8BAAA,EAAA,CAAA,CAAA,CAAC;QAC/B,IAAA,CAAA,aAAa,GAAG,MAAM,CAAC,KAAK;AAAC,QAAA,IAAA,SAAA,GAAA,CAAA,EAAA,SAAA,EAAA,eAAA,EAAA,CAAA,8BAAA,EAAA,CAAA,CAAA,CAAC;QAC9B,IAAA,CAAA,iBAAiB,GAAG,MAAM,CAA8B,SAAS;AAAC,QAAA,IAAA,SAAA,GAAA,CAAA,EAAA,SAAA,EAAA,mBAAA,EAAA,CAAA,8BAAA,EAAA,CAAA,CAAA,CAAC;;AAGnE;;AAEiC;AACvB,QAAA,IAAA,CAAA,oBAAoB,GAAG,IAAI,YAAY,EAAW;AAClD,QAAA,IAAA,CAAA,qBAAqB,GAAG,IAAI,YAAY,EAAW;AACnD,QAAA,IAAA,CAAA,mBAAmB,GAAG,IAAI,YAAY,EAAE;QAoBhD,IAAI,CAAC,OAAO,GAAG;AACb,YAAA,GAAG,OAAO;AAEV,YAAA,SAAS,EAAE,OAAO;AAClB,YAAA,sBAAsB,EAAE,qBAAqB;AAC7C,YAAA,oBAAoB,EAAE,OAAO,EAAE,oBAAoB,IAAI;SACxD;AAED,QAAA,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,oBAAoB,EAAE;YACtC,IAAI,CAAC,qBAAqB,EAAE;QAC9B;IACF;;;;AAKA,IAAA,KAAK,CAAC,QAAgB,EAAE,QAAgB,EAAE,UAAmB,EAAE,cAAuB,EAAA;AACpF,QAAA,MAAM,OAAO,GAA0B;YACrC,QAAQ;YACR,QAAQ;YACR,UAAU;YACV,cAAc;AACd,YAAA,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC;SACvB;AAED,QAAA,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC;QAC7B,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC;;;AAKtD,QAAA,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,CAAA,EAAG,IAAI,CAAC,MAAM,CAAA,EAAG,IAAI,CAAC,OAAO,CAAC,sBAAsB,CAAA,CAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,YAAY,EAAE,MAAM,EAAE;AACvH,aAAA,SAAS,CAAC;AACT,YAAA,IAAI,EAAE,CAAC,KAAK,KAAI;gBACd,IAAI,KAAK,EAAE;AACT,oBAAA,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC;gBAC1B;qBAAO;oBACL,IAAI,CAAC,MAAM,EAAE;gBACf;YACF,CAAC;AACD,YAAA,KAAK,EAAE,CAAC,GAAG,KAAI;AACb,gBAAA,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,KAAK,CAAC;gBAC9B,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC;AACtD,gBAAA,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,GAAG,CAAC;YACpC;AACD,SAAA,CAAC;IACN;;IAGA,MAAM,GAAA;AACJ,QAAA,IAAI,IAAI,CAAC,OAAO,CAAC,SAAS,IAAI,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE;YAC1E,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC;QACjD;AAEA,QAAA,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,SAAS,CAAC;AACrC,QAAA,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC;AAC7B,QAAA,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,KAAK,CAAC;IACvC;AAEA,IAAA,YAAY,CAAC,KAAa,EAAA;AACxB,QAAA,MAAM,SAAS,GAAG,IAAI,gBAAgB,EAAE;QACxC,MAAM,OAAO,GAAG,SAAS,CAAC,WAAW,CAAC,KAAK,CAAwB;AAEnE,QAAA,IAAI,SAAS,CAAC,cAAc,CAAC,KAAK,CAAC,EAAE;YACnC,IAAI,CAAC,MAAM,EAAE;YACb;QACF;AAEA,QAAA,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC;AACzB,YAAA,KAAK,EAAE,OAAO,CAAC,IAAI,KAAK,OAAO;YAC/B,WAAW,EAAE,OAAO,CAAC,cAAc;YACnC,UAAU,EAAE,OAAO,CAAC,UAAU;YAC9B,WAAW,EAAE,OAAO,CAAC,WAAW;YAChC,iBAAiB,EAAE,OAAO,CAAC,iBAAiB;YAC5C,cAAc,EAAE,OAAO,CAAC,cAAc;YACtC,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,KAAK,EAAE,OAAO,CAAC,OAAO;YACtB,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,SAAS,EAAE,OAAO,CAAC;AACpB,SAAA,CAAC;AAEF,QAAA,IAAI,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE;AAC1B,YAAA,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,KAAK,CAAC;QACrD;AAEA,QAAA,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC;QAC5B,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC;AAEpD,QAAA,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,KAAK,CAAC;QAC9B,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC;IACxD;IAEA,qBAAqB,GAAA;AACnB,QAAA,IAAI,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE;AAC1B,YAAA,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,SAAU,CAAC;YAC3D,IAAI,KAAK,EAAE;AACT,gBAAA,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC;YAC1B;QACF;IACF;AA1IW,IAAA,SAAA,IAAA,CAAA,IAAA,GAAA,EAAA,CAAA,kBAAA,CAAA,EAAA,UAAA,EAAA,QAAA,EAAA,OAAA,EAAA,QAAA,EAAA,QAAA,EAAA,EAAA,EAAA,IAAA,EAAA,0BAA0B,kBA+BL,sCAAsC,EAAA,QAAA,EAAA,IAAA,EAAA,CAAA,EAAA,MAAA,EAAA,EAAA,CAAA,eAAA,CAAA,UAAA,EAAA,CAAA,CAAA;AA/B3D,IAAA,SAAA,IAAA,CAAA,KAAA,GAAA,EAAA,CAAA,qBAAA,CAAA,EAAA,UAAA,EAAA,QAAA,EAAA,OAAA,EAAA,QAAA,EAAA,QAAA,EAAA,EAAA,EAAA,IAAA,EAAA,0BAA0B,cAFzB,MAAM,EAAA,CAAA,CAAA;;2FAEP,0BAA0B,EAAA,UAAA,EAAA,CAAA;kBAHtC,UAAU;AAAC,YAAA,IAAA,EAAA,CAAA;AACV,oBAAA,UAAU,EAAE;AACb,iBAAA;;0BAgCc;;0BAAY,MAAM;2BAAC,sCAAsC;;sBAnBrE;;sBACA;;sBACA;;;MCnBU,yBAAyB,CAAA;IACpC,OAAO,OAAO,CAAC,OAA0C,EAAA;QACvD,OAAO;AACL,YAAA,QAAQ,EAAE,yBAAyB;AACnC,YAAA,SAAS,EAAE;AACT,gBAAA;AACE,oBAAA,OAAO,EAAE,sCAAsC;AAC/C,oBAAA,QAAQ,EAAE;AACX;AACF;SACF;IACH;AAEA,IAAA,WAAA,CAAoC,YAAuC,EAAA;QACzE,IAAI,YAAY,EAAE;AAChB,YAAA,MAAM,IAAI,KAAK,CACb,8EAA8E,CAAC;QACnF;IACF;8GAlBW,yBAAyB,EAAA,IAAA,EAAA,CAAA,EAAA,KAAA,EAAA,yBAAA,EAAA,QAAA,EAAA,IAAA,EAAA,QAAA,EAAA,IAAA,EAAA,CAAA,EAAA,MAAA,EAAA,EAAA,CAAA,eAAA,CAAA,QAAA,EAAA,CAAA,CAAA;AAAzB,IAAA,SAAA,IAAA,CAAA,IAAA,GAAA,EAAA,CAAA,mBAAA,CAAA,EAAA,UAAA,EAAA,QAAA,EAAA,OAAA,EAAA,QAAA,EAAA,QAAA,EAAA,EAAA,EAAA,IAAA,EAAA,yBAAyB,YAJlC,YAAY,CAAA,EAAA,CAAA,CAAA;AAIH,IAAA,SAAA,IAAA,CAAA,IAAA,GAAA,EAAA,CAAA,mBAAA,CAAA,EAAA,UAAA,EAAA,QAAA,EAAA,OAAA,EAAA,QAAA,EAAA,QAAA,EAAA,EAAA,EAAA,IAAA,EAAA,yBAAyB,YAJlC,YAAY,CAAA,EAAA,CAAA,CAAA;;2FAIH,yBAAyB,EAAA,UAAA,EAAA,CAAA;kBAPrC,QAAQ;AAAC,YAAA,IAAA,EAAA,CAAA;AACR,oBAAA,YAAY,EAAE,EAAE;AAChB,oBAAA,OAAO,EAAE;wBACP;AACD,qBAAA;AACD,oBAAA,OAAO,EAAE;AACV,iBAAA;;0BAcc;;0BAAY;;;AC1B3B;;AAEG;;;;"}

package/package.json

@@ -1,7 +1,7 @@
 {
   "comment": "NGX-LIB primary entry point package.json",
   "name": "@cleavelandprice/ngx-lib",
-  "version": "4.8.2",
+  "version": "4.8.4",
   "description": "Angular library providing foundational functionality to Cleaveland-Price applications",
   "peerDependencies": {
     "@angular/common": "^22.1.1",