@commercetools-frontend/application-shell 21.23.10 → 21.24.0

package/dist/redirect-to-login-5ac864e2.cjs.prod.js

@@ -0,0 +1,149 @@
+'use strict';
+
+var reactRouterDom = require('react-router-dom');
+var uuid = require('uuid');
+var constants = require('@commercetools-frontend/constants');
+var urlUtils = require('@commercetools-frontend/url-utils');
+var constants$1 = require('./constants-e6409334.cjs.prod.js');
+var useIsServedByProxy = require('./use-is-served-by-proxy-51e76976.cjs.prod.js');
+var getMcOrigin = require('./get-mc-origin-7968e04f.cjs.prod.js');
+var oidc = require('./oidc-540a091a.cjs.prod.js');
+var configureApollo = require('./configure-apollo-d11de242.cjs.prod.js');
+var redirector = require('./redirector-77ce2f5c.cjs.prod.js');
+var jsxRuntime = require('@emotion/react/jsx-runtime');
+require('@commercetools-frontend/application-shell-connectors');
+require('@babel/runtime-corejs3/helpers/slicedToArray');
+require('@babel/runtime-corejs3/core-js-stable/url');
+require('@babel/runtime-corejs3/core-js-stable/instance/reverse');
+require('@babel/runtime-corejs3/core-js-stable/instance/concat');
+require('@babel/runtime-corejs3/core-js-stable/instance/map');
+require('@babel/runtime-corejs3/core-js-stable/instance/for-each');
+require('@babel/runtime-corejs3/core-js-stable/object/keys');
+require('@babel/runtime-corejs3/core-js-stable/object/get-own-property-symbols');
+require('@babel/runtime-corejs3/core-js-stable/instance/filter');
+require('@babel/runtime-corejs3/core-js-stable/object/get-own-property-descriptor');
+require('@babel/runtime-corejs3/core-js-stable/object/get-own-property-descriptors');
+require('@babel/runtime-corejs3/core-js-stable/object/define-properties');
+require('@babel/runtime-corejs3/core-js-stable/object/define-property');
+require('@babel/runtime-corejs3/helpers/defineProperty');
+require('@babel/runtime-corejs3/core-js-stable/instance/reduce');
+require('@babel/runtime-corejs3/core-js-stable/object/entries');
+require('@babel/runtime-corejs3/core-js-stable/reflect/has');
+require('@reduxjs/toolkit');
+require('lodash/mapValues');
+require('omit-empty-es');
+require('redux-thunk');
+require('@commercetools-frontend/notifications');
+require('@commercetools-frontend/sdk');
+require('react');
+require('@babel/runtime-corejs3/core-js-stable/instance/index-of');
+require('@babel/runtime-corejs3/core-js-stable/instance/slice');
+require('@babel/runtime-corejs3/core-js-stable/instance/includes');
+require('@commercetools-frontend/sentry');
+require('@commercetools-frontend/react-notifications');
+require('@babel/runtime-corejs3/core-js-stable/instance/starts-with');
+require('redux-logger');
+require('@babel/runtime-corejs3/core-js-stable/instance/find');
+require('@apollo/client');
+require('apollo-link-logger');
+require('@apollo/client/link/error');
+require('@commercetools-frontend/browser-history');
+require('@babel/runtime-corejs3/core-js-stable/array/is-array');
+require('@babel/runtime-corejs3/core-js-stable/instance/some');
+require('@babel/runtime-corejs3/core-js-stable/object/values');
+require('@commercetools/http-user-agent');
+require('@babel/runtime-corejs3/core-js-stable/reflect/construct');
+require('@babel/runtime-corejs3/helpers/createClass');
+require('@babel/runtime-corejs3/helpers/classCallCheck');
+require('@babel/runtime-corejs3/helpers/assertThisInitialized');
+require('@babel/runtime-corejs3/helpers/inherits');
+require('@babel/runtime-corejs3/helpers/possibleConstructorReturn');
+require('@babel/runtime-corejs3/helpers/getPrototypeOf');
+require('@babel/runtime-corejs3/helpers/wrapNativeSuper');
+require('@babel/runtime-corejs3/core-js-stable/json/stringify');
+require('@apollo/client/link/retry');
+require('prop-types');
+require('qss');
+
+const generateAndCacheNonceWithState = state => {
+  const nonce = uuid.v4(); // We store additional information within the given `nonce`
+  // to then retrieve it later when the IdP redirects back
+  // to our application. The URL will contain the `nonce` within
+  // the id_token and, once validated, we can retrieve and use
+  // the state object.
+  // https://auth0.com/docs/protocols/oauth2/oauth-state#how-to-use-the-parameter-to-restore-application-state
+
+  configureApollo.setSessionState(nonce, state);
+  return nonce;
+};
+
+const RedirectToLogin = () => {
+  var _window$app$__DEVELOP, _window$app$__DEVELOP2;
+
+  const location = reactRouterDom.useLocation();
+  const servedByProxy = useIsServedByProxy.useIsServedByProxy();
+
+  if ((_window$app$__DEVELOP = window.app.__DEVELOPMENT__) !== null && _window$app$__DEVELOP !== void 0 && (_window$app$__DEVELOP2 = _window$app$__DEVELOP.oidc) !== null && _window$app$__DEVELOP2 !== void 0 && _window$app$__DEVELOP2.authorizeUrl) {
+    var _window$app$__DEVELOP3, _window$app$__DEVELOP4, _window$app$__DEVELOP5, _window$app$__DEVELOP6, _window$app$__DEVELOP7, _window$app$__DEVELOP8, _window$app$__DEVELOP9, _window$app$__DEVELOP10;
+
+    // We pick the project key from local storage. This assumes that the value
+    // as been previously set when the application starts up.
+    // This is necessary to allow switching projects and triggering a new login.
+    const nextProjectKey = configureApollo.getActiveProjectKey(); // According to the OIDC spec, the `state` parameter is recommended to be sent
+    // to the authorization server to help mitigating Cross-Site Request Forgery.
+    // https://openid.net/specs/openid-connect-core-1_0.html#AuthRequest
+    // Using `state` or `nonce` is very similar but with subtle differences.
+    // Here we follow the approach described by Auth0 on how to use both, where
+    // we generate a `nonce`, store it in session storage together with some state,
+    // and send it to the authorization server as the `state` parameter.
+    // https://auth0.com/docs/protocols/oauth2/redirect-users
+    // Additionally, we still send the `nonce` parameter as well.
+
+    const sessionId = generateAndCacheNonceWithState({
+      applicationId: window.app.applicationId,
+      // Store query parameters to be used after the callback redirect
+      query: {
+        redirectTo: nextProjectKey ? "/".concat(nextProjectKey) : '/'
+      }
+    });
+    const requestedScope = oidc.buildOidcScope({
+      projectKey: nextProjectKey !== null && nextProjectKey !== void 0 ? nextProjectKey : undefined,
+      oAuthScopes: (_window$app$__DEVELOP3 = window.app.__DEVELOPMENT__) === null || _window$app$__DEVELOP3 === void 0 ? void 0 : (_window$app$__DEVELOP4 = _window$app$__DEVELOP3.oidc) === null || _window$app$__DEVELOP4 === void 0 ? void 0 : _window$app$__DEVELOP4.oAuthScopes,
+      additionalOAuthScopes: (_window$app$__DEVELOP5 = window.app.__DEVELOPMENT__) === null || _window$app$__DEVELOP5 === void 0 ? void 0 : (_window$app$__DEVELOP6 = _window$app$__DEVELOP5.oidc) === null || _window$app$__DEVELOP6 === void 0 ? void 0 : _window$app$__DEVELOP6.additionalOAuthScopes,
+      teamId: (_window$app$__DEVELOP7 = window.app.__DEVELOPMENT__) === null || _window$app$__DEVELOP7 === void 0 ? void 0 : (_window$app$__DEVELOP8 = _window$app$__DEVELOP7.oidc) === null || _window$app$__DEVELOP8 === void 0 ? void 0 : _window$app$__DEVELOP8.teamId
+    }); // Store session scopes, to be able to detect if requested scopes changed
+    // in the application config and invalidate the session.
+    // This is only valid for local development.
+
+    configureApollo.setSessionScope(requestedScope);
+    return jsxRuntime.jsx(redirector.Redirector, {
+      to: "",
+      origin: (_window$app$__DEVELOP9 = window.app.__DEVELOPMENT__) === null || _window$app$__DEVELOP9 === void 0 ? void 0 : (_window$app$__DEVELOP10 = _window$app$__DEVELOP9.oidc) === null || _window$app$__DEVELOP10 === void 0 ? void 0 : _window$app$__DEVELOP10.authorizeUrl,
+      location: location,
+      queryParams: {
+        reason: constants.LOGOUT_REASONS.UNAUTHORIZED,
+        // Query parameters for OIDC-lik workflow.
+        client_id: window.app.applicationId,
+        response_type: constants$1.OIDC_RESPONSE_TYPES.ID_TOKEN,
+        scope: requestedScope,
+        state: sessionId,
+        nonce: sessionId
+      }
+    });
+  }
+
+  const mcOrigin = servedByProxy ? getMcOrigin.getMcOrigin(window.app.mcApiUrl) : undefined;
+  return jsxRuntime.jsx(redirector.Redirector, {
+    to: "login",
+    origin: mcOrigin,
+    location: location,
+    queryParams: {
+      reason: constants.LOGOUT_REASONS.UNAUTHORIZED,
+      redirectTo: urlUtils.trimLeadingAndTrailingSlashes(urlUtils.joinPaths(window.location.origin, location.pathname))
+    }
+  });
+};
+
+RedirectToLogin.displayName = 'RedirectToLogin';
+
+exports["default"] = RedirectToLogin;

package/dist/redirect-to-login-80d7ff2f.cjs.dev.js

@@ -0,0 +1,149 @@
+'use strict';
+
+var reactRouterDom = require('react-router-dom');
+var uuid = require('uuid');
+var constants = require('@commercetools-frontend/constants');
+var urlUtils = require('@commercetools-frontend/url-utils');
+var constants$1 = require('./constants-e6f058e5.cjs.dev.js');
+var useIsServedByProxy = require('./use-is-served-by-proxy-2b4916e5.cjs.dev.js');
+var getMcOrigin = require('./get-mc-origin-314b77a2.cjs.dev.js');
+var oidc = require('./oidc-0638d0c8.cjs.dev.js');
+var configureApollo = require('./configure-apollo-1f39e35a.cjs.dev.js');
+var redirector = require('./redirector-0d98f9df.cjs.dev.js');
+var jsxRuntime = require('@emotion/react/jsx-runtime');
+require('@commercetools-frontend/application-shell-connectors');
+require('@babel/runtime-corejs3/helpers/slicedToArray');
+require('@babel/runtime-corejs3/core-js-stable/url');
+require('@babel/runtime-corejs3/core-js-stable/instance/reverse');
+require('@babel/runtime-corejs3/core-js-stable/instance/concat');
+require('@babel/runtime-corejs3/core-js-stable/instance/map');
+require('@babel/runtime-corejs3/core-js-stable/instance/for-each');
+require('@babel/runtime-corejs3/core-js-stable/object/keys');
+require('@babel/runtime-corejs3/core-js-stable/object/get-own-property-symbols');
+require('@babel/runtime-corejs3/core-js-stable/instance/filter');
+require('@babel/runtime-corejs3/core-js-stable/object/get-own-property-descriptor');
+require('@babel/runtime-corejs3/core-js-stable/object/get-own-property-descriptors');
+require('@babel/runtime-corejs3/core-js-stable/object/define-properties');
+require('@babel/runtime-corejs3/core-js-stable/object/define-property');
+require('@babel/runtime-corejs3/helpers/defineProperty');
+require('@babel/runtime-corejs3/core-js-stable/instance/reduce');
+require('@babel/runtime-corejs3/core-js-stable/object/entries');
+require('@babel/runtime-corejs3/core-js-stable/reflect/has');
+require('@reduxjs/toolkit');
+require('lodash/mapValues');
+require('omit-empty-es');
+require('redux-thunk');
+require('@commercetools-frontend/notifications');
+require('@commercetools-frontend/sdk');
+require('react');
+require('@babel/runtime-corejs3/core-js-stable/instance/index-of');
+require('@babel/runtime-corejs3/core-js-stable/instance/slice');
+require('@babel/runtime-corejs3/core-js-stable/instance/includes');
+require('@commercetools-frontend/sentry');
+require('@commercetools-frontend/react-notifications');
+require('@babel/runtime-corejs3/core-js-stable/instance/starts-with');
+require('redux-logger');
+require('@babel/runtime-corejs3/core-js-stable/instance/find');
+require('@apollo/client');
+require('apollo-link-logger');
+require('@apollo/client/link/error');
+require('@commercetools-frontend/browser-history');
+require('@babel/runtime-corejs3/core-js-stable/array/is-array');
+require('@babel/runtime-corejs3/core-js-stable/instance/some');
+require('@babel/runtime-corejs3/core-js-stable/object/values');
+require('@commercetools/http-user-agent');
+require('@babel/runtime-corejs3/core-js-stable/reflect/construct');
+require('@babel/runtime-corejs3/helpers/createClass');
+require('@babel/runtime-corejs3/helpers/classCallCheck');
+require('@babel/runtime-corejs3/helpers/assertThisInitialized');
+require('@babel/runtime-corejs3/helpers/inherits');
+require('@babel/runtime-corejs3/helpers/possibleConstructorReturn');
+require('@babel/runtime-corejs3/helpers/getPrototypeOf');
+require('@babel/runtime-corejs3/helpers/wrapNativeSuper');
+require('@babel/runtime-corejs3/core-js-stable/json/stringify');
+require('@apollo/client/link/retry');
+require('prop-types');
+require('qss');
+
+const generateAndCacheNonceWithState = state => {
+  const nonce = uuid.v4(); // We store additional information within the given `nonce`
+  // to then retrieve it later when the IdP redirects back
+  // to our application. The URL will contain the `nonce` within
+  // the id_token and, once validated, we can retrieve and use
+  // the state object.
+  // https://auth0.com/docs/protocols/oauth2/oauth-state#how-to-use-the-parameter-to-restore-application-state
+
+  configureApollo.setSessionState(nonce, state);
+  return nonce;
+};
+
+const RedirectToLogin = () => {
+  var _window$app$__DEVELOP, _window$app$__DEVELOP2;
+
+  const location = reactRouterDom.useLocation();
+  const servedByProxy = useIsServedByProxy.useIsServedByProxy();
+
+  if ((_window$app$__DEVELOP = window.app.__DEVELOPMENT__) !== null && _window$app$__DEVELOP !== void 0 && (_window$app$__DEVELOP2 = _window$app$__DEVELOP.oidc) !== null && _window$app$__DEVELOP2 !== void 0 && _window$app$__DEVELOP2.authorizeUrl) {
+    var _window$app$__DEVELOP3, _window$app$__DEVELOP4, _window$app$__DEVELOP5, _window$app$__DEVELOP6, _window$app$__DEVELOP7, _window$app$__DEVELOP8, _window$app$__DEVELOP9, _window$app$__DEVELOP10;
+
+    // We pick the project key from local storage. This assumes that the value
+    // as been previously set when the application starts up.
+    // This is necessary to allow switching projects and triggering a new login.
+    const nextProjectKey = configureApollo.getActiveProjectKey(); // According to the OIDC spec, the `state` parameter is recommended to be sent
+    // to the authorization server to help mitigating Cross-Site Request Forgery.
+    // https://openid.net/specs/openid-connect-core-1_0.html#AuthRequest
+    // Using `state` or `nonce` is very similar but with subtle differences.
+    // Here we follow the approach described by Auth0 on how to use both, where
+    // we generate a `nonce`, store it in session storage together with some state,
+    // and send it to the authorization server as the `state` parameter.
+    // https://auth0.com/docs/protocols/oauth2/redirect-users
+    // Additionally, we still send the `nonce` parameter as well.
+
+    const sessionId = generateAndCacheNonceWithState({
+      applicationId: window.app.applicationId,
+      // Store query parameters to be used after the callback redirect
+      query: {
+        redirectTo: nextProjectKey ? "/".concat(nextProjectKey) : '/'
+      }
+    });
+    const requestedScope = oidc.buildOidcScope({
+      projectKey: nextProjectKey !== null && nextProjectKey !== void 0 ? nextProjectKey : undefined,
+      oAuthScopes: (_window$app$__DEVELOP3 = window.app.__DEVELOPMENT__) === null || _window$app$__DEVELOP3 === void 0 ? void 0 : (_window$app$__DEVELOP4 = _window$app$__DEVELOP3.oidc) === null || _window$app$__DEVELOP4 === void 0 ? void 0 : _window$app$__DEVELOP4.oAuthScopes,
+      additionalOAuthScopes: (_window$app$__DEVELOP5 = window.app.__DEVELOPMENT__) === null || _window$app$__DEVELOP5 === void 0 ? void 0 : (_window$app$__DEVELOP6 = _window$app$__DEVELOP5.oidc) === null || _window$app$__DEVELOP6 === void 0 ? void 0 : _window$app$__DEVELOP6.additionalOAuthScopes,
+      teamId: (_window$app$__DEVELOP7 = window.app.__DEVELOPMENT__) === null || _window$app$__DEVELOP7 === void 0 ? void 0 : (_window$app$__DEVELOP8 = _window$app$__DEVELOP7.oidc) === null || _window$app$__DEVELOP8 === void 0 ? void 0 : _window$app$__DEVELOP8.teamId
+    }); // Store session scopes, to be able to detect if requested scopes changed
+    // in the application config and invalidate the session.
+    // This is only valid for local development.
+
+    configureApollo.setSessionScope(requestedScope);
+    return jsxRuntime.jsx(redirector.Redirector, {
+      to: "",
+      origin: (_window$app$__DEVELOP9 = window.app.__DEVELOPMENT__) === null || _window$app$__DEVELOP9 === void 0 ? void 0 : (_window$app$__DEVELOP10 = _window$app$__DEVELOP9.oidc) === null || _window$app$__DEVELOP10 === void 0 ? void 0 : _window$app$__DEVELOP10.authorizeUrl,
+      location: location,
+      queryParams: {
+        reason: constants.LOGOUT_REASONS.UNAUTHORIZED,
+        // Query parameters for OIDC-lik workflow.
+        client_id: window.app.applicationId,
+        response_type: constants$1.OIDC_RESPONSE_TYPES.ID_TOKEN,
+        scope: requestedScope,
+        state: sessionId,
+        nonce: sessionId
+      }
+    });
+  }
+
+  const mcOrigin = servedByProxy ? getMcOrigin.getMcOrigin(window.app.mcApiUrl) : undefined;
+  return jsxRuntime.jsx(redirector.Redirector, {
+    to: "login",
+    origin: mcOrigin,
+    location: location,
+    queryParams: {
+      reason: constants.LOGOUT_REASONS.UNAUTHORIZED,
+      redirectTo: urlUtils.trimLeadingAndTrailingSlashes(urlUtils.joinPaths(window.location.origin, location.pathname))
+    }
+  });
+};
+
+RedirectToLogin.displayName = 'RedirectToLogin';
+
+exports["default"] = RedirectToLogin;

package/dist/redirect-to-login-824d52b9.esm.js

@@ -0,0 +1,147 @@
+import { useLocation } from 'react-router-dom';
+import { v4 } from 'uuid';
+import { LOGOUT_REASONS } from '@commercetools-frontend/constants';
+import { trimLeadingAndTrailingSlashes, joinPaths } from '@commercetools-frontend/url-utils';
+import { b as OIDC_RESPONSE_TYPES } from './constants-7f04db3f.esm.js';
+import { u as useIsServedByProxy } from './use-is-served-by-proxy-499bfa16.esm.js';
+import { g as getMcOrigin } from './get-mc-origin-5df60933.esm.js';
+import { b as buildOidcScope } from './oidc-10fa96f0.esm.js';
+import { b as getActiveProjectKey, p as setSessionScope, q as setSessionState } from './configure-apollo-5f1fd942.esm.js';
+import { R as Redirector } from './redirector-47a6be71.esm.js';
+import { jsx } from '@emotion/react/jsx-runtime';
+import '@commercetools-frontend/application-shell-connectors';
+import '@babel/runtime-corejs3/helpers/slicedToArray';
+import '@babel/runtime-corejs3/core-js-stable/url';
+import '@babel/runtime-corejs3/core-js-stable/instance/reverse';
+import '@babel/runtime-corejs3/core-js-stable/instance/concat';
+import '@babel/runtime-corejs3/core-js-stable/instance/map';
+import '@babel/runtime-corejs3/core-js-stable/instance/for-each';
+import '@babel/runtime-corejs3/core-js-stable/object/keys';
+import '@babel/runtime-corejs3/core-js-stable/object/get-own-property-symbols';
+import '@babel/runtime-corejs3/core-js-stable/instance/filter';
+import '@babel/runtime-corejs3/core-js-stable/object/get-own-property-descriptor';
+import '@babel/runtime-corejs3/core-js-stable/object/get-own-property-descriptors';
+import '@babel/runtime-corejs3/core-js-stable/object/define-properties';
+import '@babel/runtime-corejs3/core-js-stable/object/define-property';
+import '@babel/runtime-corejs3/helpers/defineProperty';
+import '@babel/runtime-corejs3/core-js-stable/instance/reduce';
+import '@babel/runtime-corejs3/core-js-stable/object/entries';
+import '@babel/runtime-corejs3/core-js-stable/reflect/has';
+import '@reduxjs/toolkit';
+import 'lodash/mapValues';
+import 'omit-empty-es';
+import 'redux-thunk';
+import '@commercetools-frontend/notifications';
+import '@commercetools-frontend/sdk';
+import 'react';
+import '@babel/runtime-corejs3/core-js-stable/instance/index-of';
+import '@babel/runtime-corejs3/core-js-stable/instance/slice';
+import '@babel/runtime-corejs3/core-js-stable/instance/includes';
+import '@commercetools-frontend/sentry';
+import '@commercetools-frontend/react-notifications';
+import '@babel/runtime-corejs3/core-js-stable/instance/starts-with';
+import 'redux-logger';
+import '@babel/runtime-corejs3/core-js-stable/instance/find';
+import '@apollo/client';
+import 'apollo-link-logger';
+import '@apollo/client/link/error';
+import '@commercetools-frontend/browser-history';
+import '@babel/runtime-corejs3/core-js-stable/array/is-array';
+import '@babel/runtime-corejs3/core-js-stable/instance/some';
+import '@babel/runtime-corejs3/core-js-stable/object/values';
+import '@commercetools/http-user-agent';
+import '@babel/runtime-corejs3/core-js-stable/reflect/construct';
+import '@babel/runtime-corejs3/helpers/createClass';
+import '@babel/runtime-corejs3/helpers/classCallCheck';
+import '@babel/runtime-corejs3/helpers/assertThisInitialized';
+import '@babel/runtime-corejs3/helpers/inherits';
+import '@babel/runtime-corejs3/helpers/possibleConstructorReturn';
+import '@babel/runtime-corejs3/helpers/getPrototypeOf';
+import '@babel/runtime-corejs3/helpers/wrapNativeSuper';
+import '@babel/runtime-corejs3/core-js-stable/json/stringify';
+import '@apollo/client/link/retry';
+import 'prop-types';
+import 'qss';
+
+const generateAndCacheNonceWithState = state => {
+  const nonce = v4(); // We store additional information within the given `nonce`
+  // to then retrieve it later when the IdP redirects back
+  // to our application. The URL will contain the `nonce` within
+  // the id_token and, once validated, we can retrieve and use
+  // the state object.
+  // https://auth0.com/docs/protocols/oauth2/oauth-state#how-to-use-the-parameter-to-restore-application-state
+
+  setSessionState(nonce, state);
+  return nonce;
+};
+
+const RedirectToLogin = () => {
+  var _window$app$__DEVELOP, _window$app$__DEVELOP2;
+
+  const location = useLocation();
+  const servedByProxy = useIsServedByProxy();
+
+  if ((_window$app$__DEVELOP = window.app.__DEVELOPMENT__) !== null && _window$app$__DEVELOP !== void 0 && (_window$app$__DEVELOP2 = _window$app$__DEVELOP.oidc) !== null && _window$app$__DEVELOP2 !== void 0 && _window$app$__DEVELOP2.authorizeUrl) {
+    var _window$app$__DEVELOP3, _window$app$__DEVELOP4, _window$app$__DEVELOP5, _window$app$__DEVELOP6, _window$app$__DEVELOP7, _window$app$__DEVELOP8, _window$app$__DEVELOP9, _window$app$__DEVELOP10;
+
+    // We pick the project key from local storage. This assumes that the value
+    // as been previously set when the application starts up.
+    // This is necessary to allow switching projects and triggering a new login.
+    const nextProjectKey = getActiveProjectKey(); // According to the OIDC spec, the `state` parameter is recommended to be sent
+    // to the authorization server to help mitigating Cross-Site Request Forgery.
+    // https://openid.net/specs/openid-connect-core-1_0.html#AuthRequest
+    // Using `state` or `nonce` is very similar but with subtle differences.
+    // Here we follow the approach described by Auth0 on how to use both, where
+    // we generate a `nonce`, store it in session storage together with some state,
+    // and send it to the authorization server as the `state` parameter.
+    // https://auth0.com/docs/protocols/oauth2/redirect-users
+    // Additionally, we still send the `nonce` parameter as well.
+
+    const sessionId = generateAndCacheNonceWithState({
+      applicationId: window.app.applicationId,
+      // Store query parameters to be used after the callback redirect
+      query: {
+        redirectTo: nextProjectKey ? "/".concat(nextProjectKey) : '/'
+      }
+    });
+    const requestedScope = buildOidcScope({
+      projectKey: nextProjectKey !== null && nextProjectKey !== void 0 ? nextProjectKey : undefined,
+      oAuthScopes: (_window$app$__DEVELOP3 = window.app.__DEVELOPMENT__) === null || _window$app$__DEVELOP3 === void 0 ? void 0 : (_window$app$__DEVELOP4 = _window$app$__DEVELOP3.oidc) === null || _window$app$__DEVELOP4 === void 0 ? void 0 : _window$app$__DEVELOP4.oAuthScopes,
+      additionalOAuthScopes: (_window$app$__DEVELOP5 = window.app.__DEVELOPMENT__) === null || _window$app$__DEVELOP5 === void 0 ? void 0 : (_window$app$__DEVELOP6 = _window$app$__DEVELOP5.oidc) === null || _window$app$__DEVELOP6 === void 0 ? void 0 : _window$app$__DEVELOP6.additionalOAuthScopes,
+      teamId: (_window$app$__DEVELOP7 = window.app.__DEVELOPMENT__) === null || _window$app$__DEVELOP7 === void 0 ? void 0 : (_window$app$__DEVELOP8 = _window$app$__DEVELOP7.oidc) === null || _window$app$__DEVELOP8 === void 0 ? void 0 : _window$app$__DEVELOP8.teamId
+    }); // Store session scopes, to be able to detect if requested scopes changed
+    // in the application config and invalidate the session.
+    // This is only valid for local development.
+
+    setSessionScope(requestedScope);
+    return jsx(Redirector, {
+      to: "",
+      origin: (_window$app$__DEVELOP9 = window.app.__DEVELOPMENT__) === null || _window$app$__DEVELOP9 === void 0 ? void 0 : (_window$app$__DEVELOP10 = _window$app$__DEVELOP9.oidc) === null || _window$app$__DEVELOP10 === void 0 ? void 0 : _window$app$__DEVELOP10.authorizeUrl,
+      location: location,
+      queryParams: {
+        reason: LOGOUT_REASONS.UNAUTHORIZED,
+        // Query parameters for OIDC-lik workflow.
+        client_id: window.app.applicationId,
+        response_type: OIDC_RESPONSE_TYPES.ID_TOKEN,
+        scope: requestedScope,
+        state: sessionId,
+        nonce: sessionId
+      }
+    });
+  }
+
+  const mcOrigin = servedByProxy ? getMcOrigin(window.app.mcApiUrl) : undefined;
+  return jsx(Redirector, {
+    to: "login",
+    origin: mcOrigin,
+    location: location,
+    queryParams: {
+      reason: LOGOUT_REASONS.UNAUTHORIZED,
+      redirectTo: trimLeadingAndTrailingSlashes(joinPaths(window.location.origin, location.pathname))
+    }
+  });
+};
+
+RedirectToLogin.displayName = 'RedirectToLogin';
+
+export { RedirectToLogin as default };

package/dist/redirect-to-logout-6df9b79c.esm.js

@@ -0,0 +1,138 @@
+import _Object$keys from '@babel/runtime-corejs3/core-js-stable/object/keys';
+import _Object$getOwnPropertySymbols from '@babel/runtime-corejs3/core-js-stable/object/get-own-property-symbols';
+import _filterInstanceProperty from '@babel/runtime-corejs3/core-js-stable/instance/filter';
+import _Object$getOwnPropertyDescriptor from '@babel/runtime-corejs3/core-js-stable/object/get-own-property-descriptor';
+import _forEachInstanceProperty from '@babel/runtime-corejs3/core-js-stable/instance/for-each';
+import _Object$getOwnPropertyDescriptors from '@babel/runtime-corejs3/core-js-stable/object/get-own-property-descriptors';
+import _Object$defineProperties from '@babel/runtime-corejs3/core-js-stable/object/define-properties';
+import _Object$defineProperty from '@babel/runtime-corejs3/core-js-stable/object/define-property';
+import _defineProperty from '@babel/runtime-corejs3/helpers/esm/defineProperty';
+import { useLocation } from 'react-router-dom';
+import { LOGOUT_REASONS } from '@commercetools-frontend/constants';
+import { u as useIsServedByProxy } from './use-is-served-by-proxy-499bfa16.esm.js';
+import { g as getMcOrigin } from './get-mc-origin-5df60933.esm.js';
+import { t as clearSession } from './configure-apollo-5f1fd942.esm.js';
+import { R as RedirectToLogin } from './index-b002eca6.esm.js';
+import { R as Redirector } from './redirector-47a6be71.esm.js';
+import { jsx } from '@emotion/react/jsx-runtime';
+import '@commercetools-frontend/application-shell-connectors';
+import '@babel/runtime-corejs3/helpers/slicedToArray';
+import '@babel/runtime-corejs3/core-js-stable/url';
+import '@babel/runtime-corejs3/core-js-stable/instance/reverse';
+import '@babel/runtime-corejs3/core-js-stable/instance/reduce';
+import '@babel/runtime-corejs3/core-js-stable/object/entries';
+import '@babel/runtime-corejs3/core-js-stable/reflect/has';
+import '@reduxjs/toolkit';
+import 'lodash/mapValues';
+import 'omit-empty-es';
+import 'redux-thunk';
+import '@commercetools-frontend/notifications';
+import '@commercetools-frontend/sdk';
+import 'react';
+import '@babel/runtime-corejs3/core-js-stable/instance/index-of';
+import '@babel/runtime-corejs3/core-js-stable/instance/slice';
+import '@babel/runtime-corejs3/core-js-stable/instance/includes';
+import '@commercetools-frontend/sentry';
+import './constants-7f04db3f.esm.js';
+import '@commercetools-frontend/react-notifications';
+import '@babel/runtime-corejs3/core-js-stable/instance/starts-with';
+import 'redux-logger';
+import '@babel/runtime-corejs3/core-js-stable/instance/concat';
+import '@babel/runtime-corejs3/core-js-stable/instance/find';
+import '@apollo/client';
+import 'apollo-link-logger';
+import '@apollo/client/link/error';
+import '@commercetools-frontend/browser-history';
+import '@babel/runtime-corejs3/core-js-stable/array/is-array';
+import '@babel/runtime-corejs3/core-js-stable/instance/some';
+import '@babel/runtime-corejs3/core-js-stable/object/values';
+import '@babel/runtime-corejs3/core-js-stable/instance/map';
+import '@commercetools/http-user-agent';
+import 'uuid';
+import '@babel/runtime-corejs3/core-js-stable/reflect/construct';
+import '@babel/runtime-corejs3/helpers/createClass';
+import '@babel/runtime-corejs3/helpers/classCallCheck';
+import '@babel/runtime-corejs3/helpers/assertThisInitialized';
+import '@babel/runtime-corejs3/helpers/inherits';
+import '@babel/runtime-corejs3/helpers/possibleConstructorReturn';
+import '@babel/runtime-corejs3/helpers/getPrototypeOf';
+import '@babel/runtime-corejs3/helpers/wrapNativeSuper';
+import '@babel/runtime-corejs3/core-js-stable/json/stringify';
+import '@apollo/client/link/retry';
+import 'prop-types';
+import '@emotion/styled/base';
+import '@emotion/react';
+import '@commercetools-frontend/application-components';
+import '@commercetools-frontend/i18n';
+import '@commercetools-frontend/assets/images/logo.svg';
+import '@commercetools-uikit/design-system';
+import '@commercetools-uikit/spacings';
+import 'react-intl';
+import '@commercetools-uikit/flat-button';
+import '@commercetools-uikit/icons';
+import '@babel/runtime-corejs3/helpers/taggedTemplateLiteral';
+import '@babel/runtime-corejs3/helpers/objectWithoutProperties';
+import 'memoize-one';
+import '@commercetools-uikit/accessible-hidden';
+import '@commercetools-uikit/select-input';
+import '@apollo/client/react';
+import '@commercetools-frontend/assets/images/ct-logo.svg';
+import '@commercetools-uikit/loading-spinner';
+import '@commercetools-frontend/l10n';
+import 'lodash/camelCase';
+import '@babel/runtime-corejs3/core-js-stable/array/from';
+import '@babel/runtime-corejs3/core-js-stable/instance/every';
+import '@flopflip/react-broadcast';
+import 'classnames';
+import '@commercetools-frontend/assets/images/diagonal-line.svg';
+import '@commercetools-frontend/permissions';
+import '@commercetools-uikit/icons/inline-svg';
+import 'lodash/isNil';
+import '@babel/runtime-corejs3/core-js-stable/object/from-entries';
+import '@babel/runtime-corejs3/core-js-stable/instance/flags';
+import '@flopflip/combine-adapters';
+import '@flopflip/http-adapter';
+import '@flopflip/launchdarkly-adapter';
+import 'perfume.js';
+import 'react-redux';
+import 'lodash/upperFirst';
+import './oidc-10fa96f0.esm.js';
+import '@commercetools-uikit/design-system/materials/resets.css';
+import '@commercetools-frontend/actions-global';
+import '@commercetools-frontend/application-config/ssr';
+import 'qss';
+
+function ownKeys(object, enumerableOnly) { var keys = _Object$keys(object); if (_Object$getOwnPropertySymbols) { var symbols = _Object$getOwnPropertySymbols(object); enumerableOnly && (symbols = _filterInstanceProperty(symbols).call(symbols, function (sym) { return _Object$getOwnPropertyDescriptor(object, sym).enumerable; })), keys.push.apply(keys, symbols); } return keys; }
+
+function _objectSpread(target) { for (var i = 1; i < arguments.length; i++) { var _context, _context2; var source = null != arguments[i] ? arguments[i] : {}; i % 2 ? _forEachInstanceProperty(_context = ownKeys(Object(source), !0)).call(_context, function (key) { _defineProperty(target, key, source[key]); }) : _Object$getOwnPropertyDescriptors ? _Object$defineProperties(target, _Object$getOwnPropertyDescriptors(source)) : _forEachInstanceProperty(_context2 = ownKeys(Object(source))).call(_context2, function (key) { _Object$defineProperty(target, key, _Object$getOwnPropertyDescriptor(source, key)); }); } return target; }
+
+// When the application redirects to this route, we always force a hard redirect
+// to the logout route of the authentication service.
+const RedirectToLogout = props => {
+  var _window$app$__DEVELOP, _window$app$__DEVELOP2, _props$reason;
+
+  const location = useLocation();
+  const servedByProxy = useIsServedByProxy();
+
+  if ((_window$app$__DEVELOP = window.app.__DEVELOPMENT__) !== null && _window$app$__DEVELOP !== void 0 && (_window$app$__DEVELOP2 = _window$app$__DEVELOP.oidc) !== null && _window$app$__DEVELOP2 !== void 0 && _window$app$__DEVELOP2.authorizeUrl) {
+    // Remove the `sessionToken` from storage, so that the AppShell can initiate
+    // a new authorization flow.
+    clearSession();
+    return jsx(RedirectToLogin, {});
+  }
+
+  const mcOrigin = servedByProxy ? getMcOrigin(window.app.mcApiUrl) : undefined;
+  return jsx(Redirector, {
+    to: "logout",
+    origin: mcOrigin,
+    location: location,
+    queryParams: _objectSpread({
+      reason: (_props$reason = props.reason) !== null && _props$reason !== void 0 ? _props$reason : LOGOUT_REASONS.USER
+    }, servedByProxy ? {} : {
+      // This will be used after being logged in, to redirect to this location.
+      redirectTo: window.location.origin
+    })
+  });
+};
+
+export { RedirectToLogout as default };