@codex-ts/core-lib 1.0.15 → 1.0.17

package/fesm2022/codex-ts-core-lib.mjs

@@ -1,11 +1,14 @@
 import * as i0 from '@angular/core';
-import { InjectionToken, inject, PLATFORM_ID, signal, computed, Injectable, importProvidersFrom, Component, NgModule, Directive, Input, ViewChild, Pipe } from '@angular/core';
+import { InjectionToken, inject, PLATFORM_ID, signal, computed, Injectable, importProvidersFrom, APP_INITIALIZER, Component, NgModule, Directive, Input, ViewChild, Pipe } from '@angular/core';
 import * as i1 from '@angular/common/http';
-import { HttpClient, HttpClientModule, HttpParams } from '@angular/common/http';
+import { HttpClient, HTTP_INTERCEPTORS, HttpClientModule, HttpParams } from '@angular/common/http';
 import * as i1$2 from '@angular/common';
 import { isPlatformBrowser, CommonModule, formatDate } from '@angular/common';
-import { BehaviorSubject, finalize, Observable, forkJoin, throwError, of, isObservable, Subject, take as take$1, tap as tap$1, map as map$1, catchError as catchError$1, takeUntil as takeUntil$1, ReplaySubject, distinctUntilChanged as distinctUntilChanged$1 } from 'rxjs';
-import { retry, timeout, catchError, take, map, finalize as finalize$1, switchMap, takeUntil, mergeMap, tap, debounceTime, distinctUntilChanged } from 'rxjs/operators';
+import { from, mergeMap, catchError, throwError, map, BehaviorSubject, finalize, Observable, forkJoin, of, isObservable, Subject, take as take$1, tap as tap$1, takeUntil as takeUntil$1, ReplaySubject, distinctUntilChanged as distinctUntilChanged$1 } from 'rxjs';
+import * as i1$3 from '@angular/router';
+import { Router } from '@angular/router';
+import { toObservable } from '@angular/core/rxjs-interop';
+import { retry, timeout, catchError as catchError$1, take, map as map$1, finalize as finalize$1, switchMap, takeUntil, mergeMap as mergeMap$1, tap, debounceTime, distinctUntilChanged } from 'rxjs/operators';
 import * as i4 from 'primeng/api';
 import * as i1$1 from '@angular/forms';
 import { FormGroup, ReactiveFormsModule } from '@angular/forms';
@@ -29,7 +32,6 @@ import * as i3$4 from 'primeng/inputtextarea';
 import { Textarea } from 'primeng/inputtextarea';
 import * as i2$1 from 'primeng/tooltip';
 import { TooltipModule } from 'primeng/tooltip';
-import * as i1$3 from '@angular/router';
 
 class AppConstants {
     static FORM = {
@@ -136,6 +138,28 @@ var TaskRole;
 
 const KEYCLOAK_CONFIG = new InjectionToken('KEYCLOAK_CONFIG');
 
+/** Keycloak error types */
+var KeycloakErrorType;
+(function (KeycloakErrorType) {
+    KeycloakErrorType["SCRIPT_LOAD"] = "SCRIPT_LOAD_ERROR";
+    KeycloakErrorType["INIT"] = "INIT_ERROR";
+    KeycloakErrorType["TOKEN_REFRESH"] = "TOKEN_REFRESH_ERROR";
+    KeycloakErrorType["PROFILE_LOAD"] = "PROFILE_LOAD_ERROR";
+})(KeycloakErrorType || (KeycloakErrorType = {}));
+/** Keycloak error with type and details */
+class KeycloakError extends Error {
+    type;
+    originalError;
+    constructor(type, message, originalError) {
+        super(message);
+        this.type = type;
+        this.originalError = originalError;
+        this.name = 'KeycloakError';
+    }
+}
+/**
+ * Service for handling Keycloak authentication and authorization
+ */
 class KeycloakService {
     http = inject(HttpClient);
     platformId = inject(PLATFORM_ID);
@@ -146,6 +170,22 @@ class KeycloakService {
     #userProfile = signal(null);
     isAuthenticated$ = computed(() => this.#isAuthenticated());
     userProfile$ = computed(() => this.#userProfile());
+    /** Check if URL should be excluded from bearer token */
+    isUrlExcluded(url) {
+        return this.config.bearerExcludedUrls?.some(excluded => url.startsWith(excluded) || new RegExp(excluded).test(url)) ?? false;
+    }
+    /** Validate Keycloak configuration */
+    validateConfig() {
+        if (!this.config.authServerUrl) {
+            throw new KeycloakError(KeycloakErrorType.INIT, 'Auth server URL is required');
+        }
+        if (!this.config.realm) {
+            throw new KeycloakError(KeycloakErrorType.INIT, 'Realm is required');
+        }
+        if (!this.config.clientId) {
+            throw new KeycloakError(KeycloakErrorType.INIT, 'Client ID is required');
+        }
+    }
     loadKeycloakScript() {
         if (!this.isBrowser)
             return Promise.resolve();
@@ -165,17 +205,26 @@ class KeycloakService {
             return '';
         return `${window.location.origin}/node_modules/@codex-ts/core-lib/assets/keycloak/silent-check-sso.html`;
     }
+    /**
+     * Initialize Keycloak authentication
+     * @returns Promise resolving to true if initialization is successful
+     * @throws KeycloakError if initialization fails
+     */
     async initialize() {
         if (!this.isBrowser)
             return false;
         try {
+            this.validateConfig();
             await this.loadKeycloakScript();
             const keycloak = new Keycloak(this.config);
             this.#keycloakInstance.set(keycloak);
-            const authenticated = await keycloak.init({
-                onLoad: 'check-sso',
-                silentCheckSsoRedirectUri: this.getSilentCheckUrl()
-            });
+            const initOptions = {
+                onLoad: 'login-required',
+                silentCheckSsoRedirectUri: this.getSilentCheckUrl(),
+                checkLoginIframe: false,
+                ...this.config.initOptions
+            };
+            const authenticated = await keycloak.init(initOptions);
             this.#isAuthenticated.set(authenticated);
             if (authenticated) {
                 await this.loadUserProfile();
@@ -183,45 +232,78 @@ class KeycloakService {
             return authenticated;
         }
         catch (error) {
-            console.error('Failed to initialize Keycloak:', error);
-            return false;
+            throw new KeycloakError(KeycloakErrorType.INIT, 'Failed to initialize Keycloak', error);
         }
     }
+    /**
+     * Redirect to Keycloak login page
+     * @param options Additional login options
+     * @returns Promise resolving when login is complete
+     */
     login(options = {}) {
+        const instance = this.#keycloakInstance();
+        if (!instance) {
+            throw new KeycloakError(KeycloakErrorType.INIT, 'Keycloak not initialized');
+        }
         const loginOptions = {
             ...this.config.loginOptions,
             ...options
         };
-        return this.#keycloakInstance()?.login(loginOptions);
+        return instance.login(loginOptions);
     }
+    /**
+     * Logout the current user
+     * @returns Promise resolving when logout is complete
+     */
     logout() {
-        return this.#keycloakInstance()?.logout();
+        const instance = this.#keycloakInstance();
+        if (!instance) {
+            throw new KeycloakError(KeycloakErrorType.INIT, 'Keycloak not initialized');
+        }
+        return instance.logout();
     }
+    /**
+     * Get the current access token
+     * @returns Promise resolving to the access token or null
+     */
     async getToken() {
         try {
             await this.updateToken(this.config.tokenValidityInSeconds || 60);
-            return this.#keycloakInstance()?.token;
+            return this.#keycloakInstance()?.token ?? null;
         }
         catch (error) {
-            console.error('Failed to get token:', error);
-            return null;
+            throw new KeycloakError(KeycloakErrorType.TOKEN_REFRESH, 'Failed to get token', error);
         }
     }
+    /**
+     * Get the current user's roles
+     * @returns Array of role names
+     */
     getRoles() {
         const keycloak = this.#keycloakInstance();
-        if (!keycloak?.realmAccess?.roles) {
-            return [];
+        if (!keycloak) {
+            throw new KeycloakError(KeycloakErrorType.INIT, 'Keycloak not initialized');
         }
-        return keycloak.realmAccess.roles;
+        return keycloak.realmAccess?.roles ?? [];
     }
+    /**
+     * Check if the current user has a specific role
+     * @param role Role name to check
+     * @returns true if user has the role
+     */
     hasRole(role) {
         return this.getRoles().includes(role);
     }
+    /**
+     * Update the access token if it's close to expiring
+     * @param minValidity Minimum validity time in seconds
+     * @returns Promise resolving to true if token was refreshed
+     */
     updateToken(minValidity = 60) {
         return new Promise((resolve, reject) => {
             const keycloak = this.#keycloakInstance();
             if (!keycloak?.token) {
-                resolve(false);
+                reject(new KeycloakError(KeycloakErrorType.TOKEN_REFRESH, 'No token available'));
                 return;
             }
             keycloak.updateToken(minValidity)
@@ -229,8 +311,7 @@ class KeycloakService {
                 resolve(refreshed);
             })
                 .catch((error) => {
-                console.error('Failed to update token:', error);
-                reject(error);
+                reject(new KeycloakError(KeycloakErrorType.TOKEN_REFRESH, 'Failed to refresh token', error));
             });
         });
     }
@@ -254,6 +335,61 @@ i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "19.2.6", ngImpor
             args: [{ providedIn: 'root' }]
         }] });
 
+class KeycloakAuthInterceptor {
+    keycloakService;
+    constructor(keycloakService) {
+        this.keycloakService = keycloakService;
+    }
+    intercept(req, next) {
+        // Skip bearer token for excluded URLs
+        if (this.keycloakService.isUrlExcluded(req.url)) {
+            return next.handle(req);
+        }
+        return from(this.keycloakService.getToken()).pipe(mergeMap(token => {
+            if (token) {
+                const authReq = req.clone({
+                    headers: req.headers.set('Authorization', `Bearer ${token}`)
+                });
+                return next.handle(authReq);
+            }
+            return next.handle(req);
+        }), catchError((error) => {
+            // Handle 401/403 errors by refreshing token or redirecting to login
+            if (error.status === 401 || error.status === 403) {
+                return from(this.keycloakService.updateToken()).pipe(mergeMap(refreshed => {
+                    if (refreshed) {
+                        return from(this.keycloakService.getToken()).pipe(mergeMap(newToken => {
+                            const authReq = req.clone({
+                                headers: req.headers.set('Authorization', `Bearer ${newToken}`)
+                            });
+                            return next.handle(authReq);
+                        }));
+                    }
+                    else {
+                        // Token refresh failed, redirect to login
+                        this.keycloakService.login();
+                        return throwError(() => error);
+                    }
+                }));
+            }
+            return throwError(() => error);
+        }));
+    }
+    static ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "19.2.6", ngImport: i0, type: KeycloakAuthInterceptor, deps: [{ token: KeycloakService }], target: i0.ɵɵFactoryTarget.Injectable });
+    static ɵprov = i0.ɵɵngDeclareInjectable({ minVersion: "12.0.0", version: "19.2.6", ngImport: i0, type: KeycloakAuthInterceptor });
+}
+i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "19.2.6", ngImport: i0, type: KeycloakAuthInterceptor, decorators: [{
+            type: Injectable
+        }], ctorParameters: () => [{ type: KeycloakService }] });
+
+function initializeKeycloak(keycloak) {
+    return () => keycloak.initialize();
+}
+/**
+ * Provides Keycloak authentication and authorization services
+ * @param config Keycloak configuration
+ * @returns Array of providers for Keycloak integration
+ */
 function provideKeycloak(config) {
     return [
         importProvidersFrom(HttpClientModule),
@@ -261,10 +397,50 @@ function provideKeycloak(config) {
             provide: KEYCLOAK_CONFIG,
             useValue: config
         },
-        KeycloakService
+        KeycloakService,
+        {
+            provide: APP_INITIALIZER,
+            useFactory: initializeKeycloak,
+            multi: true,
+            deps: [KeycloakService]
+        },
+        {
+            provide: HTTP_INTERCEPTORS,
+            useClass: KeycloakAuthInterceptor,
+            multi: true
+        }
     ];
 }
 
+class KeycloakAuthGuard {
+    keycloakService = inject(KeycloakService);
+    router = inject(Router);
+    canActivate(route, state) {
+        return toObservable(this.keycloakService.isAuthenticated$).pipe(map(authenticated => {
+            if (!authenticated) {
+                this.keycloakService.login({
+                    redirectUri: window.location.origin + state.url
+                });
+                return false;
+            }
+            const requiredRoles = route.data['roles'];
+            if (requiredRoles && !this.hasRequiredRoles(requiredRoles)) {
+                return this.router.createUrlTree(['/unauthorized']);
+            }
+            return true;
+        }));
+    }
+    hasRequiredRoles(requiredRoles) {
+        return requiredRoles.every(role => this.keycloakService.getRoles().includes(role));
+    }
+    static ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "19.2.6", ngImport: i0, type: KeycloakAuthGuard, deps: [], target: i0.ɵɵFactoryTarget.Injectable });
+    static ɵprov = i0.ɵɵngDeclareInjectable({ minVersion: "12.0.0", version: "19.2.6", ngImport: i0, type: KeycloakAuthGuard, providedIn: 'root' });
+}
+i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "19.2.6", ngImport: i0, type: KeycloakAuthGuard, decorators: [{
+            type: Injectable,
+            args: [{ providedIn: 'root' }]
+        }] });
+
 /**
  * A general-purpose HTTP utility service that provides enhanced HTTP operations
  * beyond the standard Angular HttpClient. This service includes features such as:
@@ -303,7 +479,7 @@ class HttpUtilityService {
         if (options?.timeoutMs) {
             request$ = request$.pipe(timeout(options.timeoutMs));
         }
-        return request$.pipe(catchError(this.handleError.bind(this)), finalize(() => this.loading.next(false)));
+        return request$.pipe(catchError$1(this.handleError.bind(this)), finalize(() => this.loading.next(false)));
     }
     /**
      * Perform a POST request with enhanced options
@@ -326,7 +502,7 @@ class HttpUtilityService {
         if (options?.timeoutMs) {
             request$ = request$.pipe(timeout(options.timeoutMs));
         }
-        return request$.pipe(catchError(this.handleError.bind(this)), finalize(() => this.loading.next(false)));
+        return request$.pipe(catchError$1(this.handleError.bind(this)), finalize(() => this.loading.next(false)));
     }
     /**
      * Perform a PUT request with enhanced options
@@ -349,7 +525,7 @@ class HttpUtilityService {
         if (options?.timeoutMs) {
             request$ = request$.pipe(timeout(options.timeoutMs));
         }
-        return request$.pipe(catchError(this.handleError.bind(this)), finalize(() => this.loading.next(false)));
+        return request$.pipe(catchError$1(this.handleError.bind(this)), finalize(() => this.loading.next(false)));
     }
     /**
      * Perform a DELETE request with enhanced options
@@ -371,7 +547,7 @@ class HttpUtilityService {
         if (options?.timeoutMs) {
             request$ = request$.pipe(timeout(options.timeoutMs));
         }
-        return request$.pipe(catchError(this.handleError.bind(this)), finalize(() => this.loading.next(false)));
+        return request$.pipe(catchError$1(this.handleError.bind(this)), finalize(() => this.loading.next(false)));
     }
     /**
      * Upload a file with optional additional data
@@ -434,7 +610,7 @@ class HttpUtilityService {
             });
         }
         // Standard request without progress tracking
-        return request$.pipe(catchError(this.handleError.bind(this)), finalize(() => this.loading.next(false)));
+        return request$.pipe(catchError$1(this.handleError.bind(this)), finalize(() => this.loading.next(false)));
     }
     /**
      * Execute multiple HTTP requests in parallel
@@ -443,7 +619,7 @@ class HttpUtilityService {
      */
     batchRequests(requests) {
         this.loading.next(true);
-        return forkJoin(requests).pipe(catchError(this.handleError.bind(this)), finalize(() => this.loading.next(false)));
+        return forkJoin(requests).pipe(catchError$1(this.handleError.bind(this)), finalize(() => this.loading.next(false)));
     }
     /**
      * Download a file from the server
@@ -462,7 +638,7 @@ class HttpUtilityService {
         if (options?.timeoutMs) {
             request$ = request$.pipe(timeout(options.timeoutMs));
         }
-        return request$.pipe(catchError(this.handleError.bind(this)), finalize(() => this.loading.next(false)));
+        return request$.pipe(catchError$1(this.handleError.bind(this)), finalize(() => this.loading.next(false)));
     }
     /**
      * Create parameter string from an object
@@ -1017,7 +1193,7 @@ class FormService {
             return of(void 0);
         }
         this.formState.loading = true;
-        return this.entityService.getById(uuid).pipe(take(1), map(data => {
+        return this.entityService.getById(uuid).pipe(take(1), map$1(data => {
             this.updateFormState(data);
         }), finalize$1(() => this.formState.loading = false));
     }
@@ -1037,7 +1213,7 @@ class FormService {
         }
         this.formState.loading = true;
         const operation$ = this.getSubmitOperation();
-        return operation$.pipe(finalize$1(() => this.formState.loading = false), map(result => {
+        return operation$.pipe(finalize$1(() => this.formState.loading = false), map$1(result => {
             this.notificationService.showSuccess(`${this.entityName} ${AppMessages.FORM.SUCCESS.SAVE}`);
             return result;
         }));
@@ -1776,14 +1952,14 @@ class BaseFormComponent extends BasePageComponent {
         });
     }
     initializeForm() {
-        return this.route.queryParams.pipe(take(1), map(params => {
+        return this.route.queryParams.pipe(take(1), map$1(params => {
             this.initializeFormMode(params[AppConstants.FORM.MODE]);
             this.setupFormState();
             this.initializeFormSubscriptions();
         }));
     }
     loadFormData() {
-        return this.route.queryParams.pipe(take(1), mergeMap(params => {
+        return this.route.queryParams.pipe(take(1), mergeMap$1(params => {
             const state = this.getRouterState();
             if (this.state.mode === AppConstants.PAGE_MODE.CREATE) {
                 return of(void 0);
@@ -1797,7 +1973,7 @@ class BaseFormComponent extends BasePageComponent {
                 throw new Error(`UUID is required for ${this.state.mode} mode`);
             }
             return this.getEntityOperations().getById(uuid)
-                .pipe(tap(data => this.updateFormState(data)), map(() => void 0));
+                .pipe(tap(data => this.updateFormState(data)), map$1(() => void 0));
         }));
     }
     getRouterState() {
@@ -2376,7 +2552,7 @@ class BaseTabbedFormComponent extends BasePageComponent {
             activeTab: tabs[0]?.value || ''
         };
         // Then initialize form
-        this.route.queryParams.pipe(take$1(1), tap$1(() => this.state = { ...this.state, loading: true }), tap$1(params => this.initializeForm(params)), map$1(() => void 0), catchError$1(error => {
+        this.route.queryParams.pipe(take$1(1), tap$1(() => this.state = { ...this.state, loading: true }), tap$1(params => this.initializeForm(params)), map(() => void 0), catchError(error => {
             console.error('Error initializing form:', error);
             this.showError(AppMessages.FORM.ERROR.INIT);
             return of(void 0);
@@ -2432,13 +2608,13 @@ class BaseTabbedFormComponent extends BasePageComponent {
         }
     }
     loadFromUuid() {
-        this.route.queryParams.pipe(take$1(1), map$1((params) => {
+        this.route.queryParams.pipe(take$1(1), map((params) => {
             const uuid = params[AppConstants.FORM.UUID];
             if (!uuid) {
                 throw new Error(`UUID is required for ${this.state.mode} mode when no formData is provided`);
             }
             return uuid;
-        }), tap$1(() => this.state = { ...this.state, loading: true }), tap$1(uuid => this.loadEntity(uuid)), catchError$1(error => {
+        }), tap$1(() => this.state = { ...this.state, loading: true }), tap$1(uuid => this.loadEntity(uuid)), catchError(error => {
             console.error('Error loading UUID:', error);
             this.showError(`${AppMessages.FORM.ERROR.LOAD} UUID`);
             return of(void 0);
@@ -2639,7 +2815,7 @@ class BaseListTabbedFormComponent extends BasePageComponent {
         this.setupRouteParamsSubscription();
     }
     initializeFormFromQueryParams() {
-        this.route.queryParams.pipe(take$1(1), catchError$1(error => {
+        this.route.queryParams.pipe(take$1(1), catchError(error => {
             console.error('Error initializing form:', error);
             this.showError(AppMessages.FORM.ERROR.INIT);
             throw error;
@@ -2820,7 +2996,7 @@ class BaseTaskDetailsComponent extends BasePageComponent {
         this.formlyConfigService = formlyConfigService;
     }
     initializeServices() {
-        return of(void 0).pipe(map(() => {
+        return of(void 0).pipe(map$1(() => {
             this.formService = new FormService(this.getEntityService(), this.formlyConfigService, this.notificationService, this.getEntityName(), this.getJsonFields(), this.getDropdownOptions());
             this.state = this.formService.getState();
             this.loading = this.state.loading;
@@ -2835,7 +3011,7 @@ class BaseTaskDetailsComponent extends BasePageComponent {
         });
     }
     initializeFromRoute() {
-        return this.route.queryParams.pipe(map(params => {
+        return this.route.queryParams.pipe(map$1(params => {
             const mode = params[AppConstants.FORM.MODE];
             if (mode) {
                 this.formService.setMode(mode);
@@ -3089,5 +3265,5 @@ i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "19.2.6", ngImpor
  * Generated bundle index. Do not edit.
  */
 
-export { AppConstants, AppMessages, BaseCrudService, BaseFormComponent, BaseListPageComponent, BaseListTabbedFormComponent, BasePageComponent, BaseTabbedFormComponent, BaseTaskDashboardComponent, BaseTaskDetailsComponent, BaseTaskService, ComponentContext, CoreFormlyModule, FormService, FormlyConfigService, HttpUtilityService, IndianDatePipe, KEYCLOAK_CONFIG, KeycloakService, NotificationService, TabbedFormType, TaskRole, UtilsService, provideKeycloak };
+export { AppConstants, AppMessages, BaseCrudService, BaseFormComponent, BaseListPageComponent, BaseListTabbedFormComponent, BasePageComponent, BaseTabbedFormComponent, BaseTaskDashboardComponent, BaseTaskDetailsComponent, BaseTaskService, ComponentContext, CoreFormlyModule, FormService, FormlyConfigService, HttpUtilityService, IndianDatePipe, KEYCLOAK_CONFIG, KeycloakAuthGuard, KeycloakError, KeycloakErrorType, KeycloakService, NotificationService, TabbedFormType, TaskRole, UtilsService, provideKeycloak };
 //# sourceMappingURL=codex-ts-core-lib.mjs.map