@cosmotech/core 1.18.0-dev.0 → 1.18.0-dev.2

package/dist/index.cjs.js

@@ -41311,13 +41311,13 @@ var PathUtils = {
 // Notes : local storage works on Chromium but not on Firefox if "Delete
 // cookies and site data when Firefox is closed" is selected (for more
 // details, see https://bugzilla.mozilla.org/show_bug.cgi?id=1453699)
-function writeToStorage$1(key, value) {
+function writeToStorage$2(key, value) {
   localStorage.setItem(key, value);
 }
-function readFromStorage$2(key) {
+function readFromStorage$3(key) {
   return localStorage.getItem(key);
 }
-function clearFromStorage$1(key) {
+function clearFromStorage$2(key) {
   localStorage.removeItem(key);
 }
 
@@ -41353,7 +41353,7 @@ function setProvider(providerName) {
       currentProvider.setAuthChangeCallbacks(onAuthChangeCallbacks);
     }
     // Store the provider used in local storage
-    writeToStorage$1('authProvider', providerName);
+    writeToStorage$2('authProvider', providerName);
   }
 }
 
@@ -41362,32 +41362,32 @@ function setProvider(providerName) {
 // this provider will be selected
 function initProviderIfNull() {
   if (currentProvider === undefined) {
-    var newProviderName = readFromStorage$2('authProvider');
+    var newProviderName = readFromStorage$3('authProvider');
     if (newProviderName !== undefined && newProviderName !== null) {
       setProvider(newProviderName);
     }
   }
 }
-function signIn$2() {
+function signIn$3() {
   return currentProvider.signIn();
 }
-function signOut$2() {
+function signOut$3() {
   initProviderIfNull();
   // Clear last auth provider used from local storage
-  clearFromStorage$1('authProvider');
+  clearFromStorage$2('authProvider');
   return currentProvider.signOut();
 }
 function onAuthStateChanged(newCallback) {
   onAuthChangeCallbacks.push(newCallback);
 }
-function isAsync$2() {
+function isAsync$3() {
   initProviderIfNull();
   if (currentProvider && currentProvider.isAsync) {
     return currentProvider.isAsync();
   }
   return false;
 }
-function acquireTokens$2(callback) {
+function acquireTokens$3(callback) {
   initProviderIfNull();
   if (currentProvider === undefined) {
     return undefined;
@@ -41401,38 +41401,38 @@ function acquireTokensByRequest$2(tokenReq) {
   }
   return currentProvider.acquireTokensByRequest(tokenReq);
 }
-function isUserSignedIn$2(callback) {
+function isUserSignedIn$3(callback) {
   initProviderIfNull();
   if (currentProvider === undefined) {
     return false;
   }
   return currentProvider.isUserSignedIn(callback);
 }
-function getUserEmail$2() {
+function getUserEmail$3() {
   if (currentProvider === undefined) {
     return undefined;
   }
   return currentProvider.getUserEmail();
 }
-function getUserName$2() {
+function getUserName$3() {
   if (currentProvider === undefined) {
     return undefined;
   }
   return currentProvider.getUserName();
 }
-function getUserRoles$2() {
+function getUserRoles$3() {
   if (currentProvider === undefined) {
     return undefined;
   }
   return currentProvider.getUserRoles();
 }
-function getUserId$2() {
+function getUserId$3() {
   if (currentProvider === undefined) {
     return undefined;
   }
   return currentProvider.getUserId();
 }
-function getUserPicUrl$2() {
+function getUserPicUrl$3() {
   if (currentProvider === undefined) {
     return undefined;
   }
@@ -41441,28 +41441,28 @@ function getUserPicUrl$2() {
 var Auth = {
   addProvider,
   setProvider,
-  signIn: signIn$2,
-  signOut: signOut$2,
+  signIn: signIn$3,
+  signOut: signOut$3,
   onAuthStateChanged,
-  isUserSignedIn: isUserSignedIn$2,
-  getUserEmail: getUserEmail$2,
-  getUserName: getUserName$2,
-  getUserId: getUserId$2,
-  getUserRoles: getUserRoles$2,
-  getUserPicUrl: getUserPicUrl$2,
-  isAsync: isAsync$2,
-  acquireTokens: acquireTokens$2,
+  isUserSignedIn: isUserSignedIn$3,
+  getUserEmail: getUserEmail$3,
+  getUserName: getUserName$3,
+  getUserId: getUserId$3,
+  getUserRoles: getUserRoles$3,
+  getUserPicUrl: getUserPicUrl$3,
+  isAsync: isAsync$3,
+  acquireTokens: acquireTokens$3,
   acquireTokensByRequest: acquireTokensByRequest$2
 };
 
 // Copyright (c) Cosmo Tech.
 // Licensed under the MIT license.
 
-function readFromStorage$1(key) {
+function readFromStorage$2(key) {
   return localStorage.getItem(key);
 }
-var name$3 = 'auth-dev';
-var authData$1 = null;
+var name$4 = 'auth-dev';
+var authData$2 = null;
 var DEFAULT_AUTH_DATA = {
   authenticated: true,
   accountId: 'xxxxxxxx-xxxx-dave-xxxx-xxxxxxxxxxxx',
@@ -41473,74 +41473,74 @@ var DEFAULT_AUTH_DATA = {
 };
 
 // Optional configuration method to overwrite default values such as accountId, userEmail, userId, userName and roles
-function setConfig$1(authDataPatch) {
-  authData$1 = _objectSpread2(_objectSpread2({}, DEFAULT_AUTH_DATA), authDataPatch);
+function setConfig$2(authDataPatch) {
+  authData$2 = _objectSpread2(_objectSpread2({}, DEFAULT_AUTH_DATA), authDataPatch);
 }
 function setDefaultUser() {
-  if (authData$1 != null) return;
-  authData$1 = DEFAULT_AUTH_DATA;
+  if (authData$2 != null) return;
+  authData$2 = DEFAULT_AUTH_DATA;
 }
-function signIn$1() {
+function signIn$2() {
   setDefaultUser();
   window.location.href = '/';
 }
-function signOut$1() {
-  authData$1 = null;
+function signOut$2() {
+  authData$2 = null;
   window.location.href = '/';
 }
-function isAsync$1() {
+function isAsync$2() {
   return false;
 }
-function isUserSignedIn$1() {
+function isUserSignedIn$2() {
   setDefaultUser();
   return true;
 }
-function getUserEmail$1() {
+function getUserEmail$2() {
   var _authData;
-  return (_authData = authData$1) === null || _authData === void 0 ? void 0 : _authData.userEmail;
+  return (_authData = authData$2) === null || _authData === void 0 ? void 0 : _authData.userEmail;
 }
-function getUserName$1() {
+function getUserName$2() {
   var _authData2;
-  return (_authData2 = authData$1) === null || _authData2 === void 0 ? void 0 : _authData2.userName;
+  return (_authData2 = authData$2) === null || _authData2 === void 0 ? void 0 : _authData2.userName;
 }
-function acquireTokens$1() {
-  var accessToken = readFromStorage$1('authAccessToken');
+function acquireTokens$2() {
+  var accessToken = readFromStorage$2('authAccessToken');
   return accessToken ? {
     accessToken
   } : undefined;
 }
 function acquireTokensByRequest$1(tokenReq) {
-  var accessToken = readFromStorage$1('authAccessToken');
+  var accessToken = readFromStorage$2('authAccessToken');
   return accessToken ? {
     accessToken
   } : undefined;
 }
-function getUserId$1() {
-  if (authData$1) {
-    return authData$1.userId;
+function getUserId$2() {
+  if (authData$2) {
+    return authData$2.userId;
   }
   return undefined;
 }
-function getUserRoles$1() {
+function getUserRoles$2() {
   var _authData3;
-  return (_authData3 = authData$1) === null || _authData3 === void 0 ? void 0 : _authData3.roles;
+  return (_authData3 = authData$2) === null || _authData3 === void 0 ? void 0 : _authData3.roles;
 }
-function getUserPicUrl$1() {
+function getUserPicUrl$2() {
   return undefined;
 }
 var AuthDev = {
-  name: name$3,
-  signIn: signIn$1,
-  signOut: signOut$1,
-  isUserSignedIn: isUserSignedIn$1,
-  getUserEmail: getUserEmail$1,
-  getUserName: getUserName$1,
-  getUserRoles: getUserRoles$1,
-  getUserId: getUserId$1,
-  getUserPicUrl: getUserPicUrl$1,
-  isAsync: isAsync$1,
-  setConfig: setConfig$1,
-  acquireTokens: acquireTokens$1,
+  name: name$4,
+  signIn: signIn$2,
+  signOut: signOut$2,
+  isUserSignedIn: isUserSignedIn$2,
+  getUserEmail: getUserEmail$2,
+  getUserName: getUserName$2,
+  getUserRoles: getUserRoles$2,
+  getUserId: getUserId$2,
+  getUserPicUrl: getUserPicUrl$2,
+  isAsync: isAsync$2,
+  setConfig: setConfig$2,
+  acquireTokens: acquireTokens$2,
   acquireTokensByRequest: acquireTokensByRequest$1
 };
 
@@ -44676,7 +44676,7 @@ class Logger {
 
 /*! @azure/msal-common v14.14.0 2024-07-23 */
 /* eslint-disable header/header */
-const name$2 = "@azure/msal-common";
+const name$3 = "@azure/msal-common";
 const version$1 = "14.14.0";
 
 /*! @azure/msal-common v14.14.0 2024-07-23 */
@@ -45312,7 +45312,7 @@ class CacheManager {
     constructor(clientId, cryptoImpl, logger, staticAuthorityOptions) {
         this.clientId = clientId;
         this.cryptoImpl = cryptoImpl;
-        this.commonLogger = logger.clone(name$2, version$1);
+        this.commonLogger = logger.clone(name$3, version$1);
         this.staticAuthorityOptions = staticAuthorityOptions;
     }
     /**
@@ -47279,7 +47279,7 @@ class BaseClient {
         // Set the configuration
         this.config = buildClientConfiguration(configuration);
         // Initialize the logger
-        this.logger = new Logger(this.config.loggerOptions, name$2, version$1);
+        this.logger = new Logger(this.config.loggerOptions, name$3, version$1);
         // Initialize crypto
         this.cryptoUtils = this.config.cryptoInterface;
         // Initialize storage interface
@@ -50195,7 +50195,7 @@ function buildConfiguration({ auth: userInputAuth, cache: userInputCache, system
 
 /*! @azure/msal-browser v3.20.0 2024-07-23 */
 /* eslint-disable header/header */
-const name$1 = "@azure/msal-browser";
+const name$2 = "@azure/msal-browser";
 const version = "3.20.0";
 
 /*! @azure/msal-browser v3.20.0 2024-07-23 */
@@ -50270,7 +50270,7 @@ class BaseOperatingContext {
         if (piiLoggingEnabled !== undefined) {
             loggerOptions.piiLoggingEnabled = piiLoggingEnabled;
         }
-        this.logger = new Logger(loggerOptions, name$1, version);
+        this.logger = new Logger(loggerOptions, name$2, version);
         this.available = false;
     }
     /**
@@ -57267,55 +57267,55 @@ class PublicClientApplication {
 // Notes : local storage works on Chromium but not on Firefox if "Delete
 // cookies and site data when Firefox is closed" is selected (for more
 // details, see https://bugzilla.mozilla.org/show_bug.cgi?id=1453699)
-var writeToStorage = (key, value) => {
+var writeToStorage$1 = (key, value) => {
   localStorage.setItem(key, value);
 };
-var readFromStorage = key => {
+var readFromStorage$1 = key => {
   return localStorage.getItem(key);
 };
-var clearFromStorage = key => {
+var clearFromStorage$1 = key => {
   localStorage.removeItem(key);
 };
-var name = 'auth-keycloakExperimental';
-var authData = {
-  authenticated: readFromStorage('authAuthenticated') === 'true',
+var name$1 = 'auth-keycloakPopupExperimental';
+var authData$1 = {
+  authenticated: readFromStorage$1('authAuthenticated') === 'true',
   accountId: undefined,
   userEmail: undefined,
   username: undefined,
   userId: undefined,
   roles: []
 };
-var config = null;
-var msalApp = null;
-var setConfig = /*#__PURE__*/function () {
+var config$1 = null;
+var msalApp$1 = null;
+var setConfig$1 = /*#__PURE__*/function () {
   var _ref = _asyncToGenerator(function* (newConfig) {
-    config = newConfig;
-    msalApp = new PublicClientApplication(config.msalConfig);
-    yield msalApp.initialize();
+    config$1 = newConfig;
+    msalApp$1 = new PublicClientApplication(config$1.msalConfig);
+    yield msalApp$1.initialize();
   });
   return function setConfig(_x) {
     return _ref.apply(this, arguments);
   };
 }();
-var checkInit = () => {
-  if (msalApp === null) {
-    console.error('AuthMSAL module has not been initialized. Make sure you ' + 'call the setConfig const when =  you add the AuthMSAL provider.=> aa');
+var checkInit$1 = () => {
+  if (msalApp$1 === null) {
+    console.error('AuthMSAL module has not been initialized. Make sure you ' + 'call the setConfig const when =  you add the AuthMSAL provider.');
     return false;
   }
   return true;
 };
-var redirectOnAuthSuccess = () => {
+var redirectOnAuthSuccess$1 = () => {
   var _config$msalConfig$au, _config;
-  window.location.href = (_config$msalConfig$au = (_config = config) === null || _config === void 0 || (_config = _config.msalConfig) === null || _config === void 0 || (_config = _config.auth) === null || _config === void 0 ? void 0 : _config.redirectUri) !== null && _config$msalConfig$au !== void 0 ? _config$msalConfig$au : '/';
+  window.location.href = (_config$msalConfig$au = (_config = config$1) === null || _config === void 0 || (_config = _config.msalConfig) === null || _config === void 0 || (_config = _config.auth) === null || _config === void 0 ? void 0 : _config.redirectUri) !== null && _config$msalConfig$au !== void 0 ? _config$msalConfig$au : '/';
 };
-var _acquireTokensByRequestAndAccount = /*#__PURE__*/function () {
+var _acquireTokensByRequestAndAccount$1 = /*#__PURE__*/function () {
   var _ref2 = _asyncToGenerator(function* (tokenReq, account) {
     if (!tokenReq) {
       console.warn('No base access token request provided');
       tokenReq = {};
     }
     tokenReq.account = account;
-    return yield msalApp.acquireTokenSilent(tokenReq).then(tokenRes => tokenRes).catch(silentTokenFetchError => {
+    return yield msalApp$1.acquireTokenSilent(tokenReq).then(tokenRes => tokenRes).catch(silentTokenFetchError => {
       var _silentTokenFetchErro;
       if (silentTokenFetchError.errorCode === 'no_tokens_found') {
         // No token found during acquireTokenSilent, ignore this error, nothing to do
@@ -57324,7 +57324,7 @@ var _acquireTokensByRequestAndAccount = /*#__PURE__*/function () {
         console.warn('Silent authentication not possible, user is not logged in. This usually happens when the user session ' + 'has expired. Please try to log in again.');
         return;
       } else if (((_silentTokenFetchErro = silentTokenFetchError.errorMessage) === null || _silentTokenFetchErro === void 0 ? void 0 : _silentTokenFetchErro.indexOf('interaction_required')) !== -1) {
-        msalApp.acquireTokenPopup(tokenReq).then(tokenRes => tokenRes) // Token acquired with interaction
+        msalApp$1.acquireTokenPopup(tokenReq).then(tokenRes => tokenRes) // Token acquired with interaction
         .catch(popupTokenFetchError => popupTokenFetchError); // Token retrieval failed
       }
       throw silentTokenFetchError;
@@ -57334,25 +57334,25 @@ var _acquireTokensByRequestAndAccount = /*#__PURE__*/function () {
     return _ref2.apply(this, arguments);
   };
 }();
-var acquireTokens = /*#__PURE__*/function () {
+var acquireTokens$1 = /*#__PURE__*/function () {
   var _ref3 = _asyncToGenerator(function* () {
     var _msalApp$getAllAccoun;
-    if (!checkInit()) return;
-    var idToken = readFromStorage('authIdToken');
-    var accessToken = readFromStorage('authAccessToken');
-    var authenticated = readFromStorage('authAuthenticated') === 'true';
+    if (!checkInit$1()) return;
+    var idToken = readFromStorage$1('authIdToken');
+    var accessToken = readFromStorage$1('authAccessToken');
+    var authenticated = readFromStorage$1('authAuthenticated') === 'true';
     if (authenticated && idToken != null && accessToken != null) {
       return {
         accessToken,
         idToken
       };
     }
-    var account = (_msalApp$getAllAccoun = msalApp.getAllAccounts()) === null || _msalApp$getAllAccoun === void 0 ? void 0 : _msalApp$getAllAccoun[0];
-    var tokenReq = config.accessRequest;
+    var account = (_msalApp$getAllAccoun = msalApp$1.getAllAccounts()) === null || _msalApp$getAllAccoun === void 0 ? void 0 : _msalApp$getAllAccoun[0];
+    var tokenReq = config$1.accessRequest;
     if (account === undefined) {
       return undefined;
     }
-    return yield _acquireTokensByRequestAndAccount(tokenReq, account);
+    return yield _acquireTokensByRequestAndAccount$1(tokenReq, account);
   });
   return function acquireTokens() {
     return _ref3.apply(this, arguments);
@@ -57361,17 +57361,17 @@ var acquireTokens = /*#__PURE__*/function () {
 var acquireTokensByRequest = /*#__PURE__*/function () {
   var _ref4 = _asyncToGenerator(function* (tokenReq) {
     var _msalApp$getAllAccoun2;
-    if (!checkInit()) return;
-    var account = (_msalApp$getAllAccoun2 = msalApp.getAllAccounts()) === null || _msalApp$getAllAccoun2 === void 0 ? void 0 : _msalApp$getAllAccoun2[0];
-    return yield _acquireTokensByRequestAndAccount(tokenReq, account);
+    if (!checkInit$1()) return;
+    var account = (_msalApp$getAllAccoun2 = msalApp$1.getAllAccounts()) === null || _msalApp$getAllAccoun2 === void 0 ? void 0 : _msalApp$getAllAccoun2[0];
+    return yield _acquireTokensByRequestAndAccount$1(tokenReq, account);
   });
   return function acquireTokensByRequest(_x4) {
     return _ref4.apply(this, arguments);
   };
 }();
 var selectAccount = () => {
-  if (!checkInit()) return;
-  var accounts = msalApp.getAllAccounts();
+  if (!checkInit$1()) return;
+  var accounts = msalApp$1.getAllAccounts();
   if (accounts.length === 0) {
     return;
   }
@@ -57379,47 +57379,47 @@ var selectAccount = () => {
   if (accounts.length > 1) {
     console.warn('Several accounts detected, using the first one by default.');
   }
-  authData.authenticated = true;
+  authData$1.authenticated = true;
   var account = accounts[0];
-  authData.accountId = account.homeAccountId;
-  authData.userEmail = account.username; // In MSAL account data, username property contains user email
-  authData.username = account.name;
-  authData.userId = account.localAccountId;
-  redirectOnAuthSuccess();
+  authData$1.accountId = account.homeAccountId;
+  authData$1.userEmail = account.username; // In MSAL account data, username property contains user email
+  authData$1.username = account.name;
+  authData$1.userId = account.localAccountId;
+  redirectOnAuthSuccess$1();
 };
-var handleResponse = response => {
+var handleResponse$1 = response => {
   if (response == null) {
     selectAccount();
     return;
   }
-  writeToStorage('authIdTokenPopup', response.idToken);
-  writeToStorage('authIdToken', response.idToken);
-  writeToStorage('authAccessToken', response.accessToken);
-  writeToStorage('authAuthenticated', 'true');
-  authData.authenticated = true;
+  writeToStorage$1('authIdTokenPopup', response.idToken);
+  writeToStorage$1('authIdToken', response.idToken);
+  writeToStorage$1('authAccessToken', response.accessToken);
+  writeToStorage$1('authAuthenticated', 'true');
+  authData$1.authenticated = true;
   var account = response.account;
-  authData.accountId = account.homeAccountId;
-  authData.userEmail = account.username; // In MSAL account data, username property contains user email
-  authData.username = account.name;
-  authData.userId = account.localAccountId;
-  redirectOnAuthSuccess();
+  authData$1.accountId = account.homeAccountId;
+  authData$1.userEmail = account.username; // In MSAL account data, username property contains user email
+  authData$1.username = account.name;
+  authData$1.userId = account.localAccountId;
+  redirectOnAuthSuccess$1();
 };
-var signIn = () => {
-  if (!checkInit()) return;
+var signIn$1 = () => {
+  if (!checkInit$1()) return;
 
   // Force removal of MSAL interaction status if it exists in session storage (it happens sometimes after logout)
   var itemKey = 'msal.interaction.status';
   if (sessionStorage.getItem(itemKey)) {
     sessionStorage.removeItem(itemKey);
   }
-  return msalApp.loginPopup(config.loginRequest).then(handleResponse).catch(error => {
+  return msalApp$1.loginPopup(config$1.loginRequest).then(handleResponse$1).catch(error => {
     var _error$errorMessage;
     // Error handling
     // Check for forgot password error
     // Learn more about AAD error codes at
     // https://docs.microsoft.com/en-us/azure/active-directory/develop/reference-aadsts-error-codes
     if (((_error$errorMessage = error.errorMessage) === null || _error$errorMessage === void 0 ? void 0 : _error$errorMessage.indexOf('AADB2C90118')) > -1) {
-      msalApp.loginPopup(config.b2cPolicies.authorities.forgotPassword).then(response => {
+      msalApp$1.loginPopup(config$1.b2cPolicies.authorities.forgotPassword).then(response => {
         window.alert('Password has been reset successfully. \nPlease sign-in with your new password.');
       });
     } else if (error.errorCode === 'user_cancelled') ; else {
@@ -57427,20 +57427,240 @@ var signIn = () => {
     }
   });
 };
+var signOut$1 = () => {
+  if (!checkInit$1()) return;
+  clearFromStorage$1('authIdTokenPopup');
+  clearFromStorage$1('authIdToken');
+  clearFromStorage$1('authAccessToken');
+  writeToStorage$1('authAuthenticated', 'false');
+  // return;
+  var logoutRequest = {
+    account: msalApp$1.getAccountByHomeId(authData$1.accountId)
+  };
+  msalApp$1.logoutRedirect(logoutRequest);
+};
+
+// Returns a boolean value, stating whether the isUserSignedIn must be provided a callback
+var isAsync$1 = () => {
+  return false;
+};
+var _extractRolesFromAccessToken$1 = accessToken => {
+  var result = [];
+  if (accessToken) {
+    var decodedToken = JSON.parse(atob(accessToken.split('.')[1]));
+    if (decodedToken !== null && decodedToken !== void 0 && decodedToken.roles) {
+      result = decodedToken === null || decodedToken === void 0 ? void 0 : decodedToken.roles;
+    }
+  }
+  return result;
+};
+var isUserSignedIn$1 = /*#__PURE__*/function () {
+  var _ref5 = _asyncToGenerator(function* () {
+    // Return true if already authenticated
+    if (authData$1.authenticated) return true;
+    if (readFromStorage$1('authAuthenticated') === 'true') {
+      authData$1.authenticated = true;
+      return true;
+    }
+
+    // Otherwise, try to acquire a token silently to implement SSO
+    var tokens = yield acquireTokens$1();
+    if ((tokens === null || tokens === void 0 ? void 0 : tokens.idToken) !== undefined) {
+      writeToStorage$1('authIdToken', tokens.idToken);
+    }
+    if ((tokens === null || tokens === void 0 ? void 0 : tokens.accessToken) !== undefined) {
+      var accessToken = tokens.accessToken;
+      authData$1.roles = _extractRolesFromAccessToken$1(accessToken);
+      writeToStorage$1('authAccessToken', accessToken);
+      return true;
+    }
+    return false;
+  });
+  return function isUserSignedIn() {
+    return _ref5.apply(this, arguments);
+  };
+}();
+var getUserEmail$1 = () => {
+  var _authData$userEmail, _msalApp$getAllAccoun3;
+  if (!checkInit$1()) return;
+  // Note: account data from MSAL seems to contain user email in the 'username' property
+  return (_authData$userEmail = authData$1 === null || authData$1 === void 0 ? void 0 : authData$1.userEmail) !== null && _authData$userEmail !== void 0 ? _authData$userEmail : (_msalApp$getAllAccoun3 = msalApp$1.getAllAccounts()) === null || _msalApp$getAllAccoun3 === void 0 || (_msalApp$getAllAccoun3 = _msalApp$getAllAccoun3[0]) === null || _msalApp$getAllAccoun3 === void 0 ? void 0 : _msalApp$getAllAccoun3.username;
+};
+var getUserName$1 = () => {
+  var _authData$name, _msalApp$getAllAccoun4;
+  if (!checkInit$1()) return;
+  return (_authData$name = authData$1 === null || authData$1 === void 0 ? void 0 : authData$1.name) !== null && _authData$name !== void 0 ? _authData$name : (_msalApp$getAllAccoun4 = msalApp$1.getAllAccounts()) === null || _msalApp$getAllAccoun4 === void 0 || (_msalApp$getAllAccoun4 = _msalApp$getAllAccoun4[0]) === null || _msalApp$getAllAccoun4 === void 0 ? void 0 : _msalApp$getAllAccoun4.name;
+};
+var getUserId$1 = () => {
+  var _authData$userId, _msalApp$getAllAccoun5;
+  if (!checkInit$1()) return;
+  return (_authData$userId = authData$1 === null || authData$1 === void 0 ? void 0 : authData$1.userId) !== null && _authData$userId !== void 0 ? _authData$userId : (_msalApp$getAllAccoun5 = msalApp$1.getAllAccounts()) === null || _msalApp$getAllAccoun5 === void 0 || (_msalApp$getAllAccoun5 = _msalApp$getAllAccoun5[0]) === null || _msalApp$getAllAccoun5 === void 0 ? void 0 : _msalApp$getAllAccoun5.localAccountId;
+};
+var getUserRoles$1 = () => {
+  if (!checkInit$1()) return;
+  return authData$1.roles;
+};
+var getUserPicUrl$1 = () => {
+  return undefined;
+};
+
+var AuthKeycloakPopupExperimental = /*#__PURE__*/Object.freeze({
+  __proto__: null,
+  acquireTokens: acquireTokens$1,
+  acquireTokensByRequest: acquireTokensByRequest,
+  getUserEmail: getUserEmail$1,
+  getUserId: getUserId$1,
+  getUserName: getUserName$1,
+  getUserPicUrl: getUserPicUrl$1,
+  getUserRoles: getUserRoles$1,
+  isAsync: isAsync$1,
+  isUserSignedIn: isUserSignedIn$1,
+  name: name$1,
+  setConfig: setConfig$1,
+  signIn: signIn$1,
+  signOut: signOut$1
+});
+
+// Functions to read & write from storage.
+// Notes : local storage works on Chromium but not on Firefox if "Delete
+// cookies and site data when Firefox is closed" is selected (for more
+// details, see https://bugzilla.mozilla.org/show_bug.cgi?id=1453699)
+var writeToStorage = (key, value) => {
+  localStorage.setItem(key, value);
+};
+var readFromStorage = key => {
+  return localStorage.getItem(key);
+};
+var clearFromStorage = key => {
+  localStorage.removeItem(key);
+};
+var name = 'auth-keycloakRedirectExperimental';
+var authData = {
+  authenticated: readFromStorage('authAuthenticated') === 'true',
+  accountId: undefined,
+  userEmail: undefined,
+  username: undefined,
+  userId: undefined,
+  roles: []
+};
+var config = null;
+var msalApp = null;
+var setConfig = /*#__PURE__*/function () {
+  var _ref = _asyncToGenerator(function* (newConfig) {
+    config = newConfig;
+    msalApp = new PublicClientApplication(config.msalConfig);
+    yield msalApp.initialize();
+  });
+  return function setConfig(_x) {
+    return _ref.apply(this, arguments);
+  };
+}();
+var checkInit = () => {
+  if (msalApp === null) {
+    console.error('AuthMSAL module has not been initialized. Make sure you ' + 'call the setConfig const when =  you add the AuthMSAL provider.');
+    return false;
+  }
+  return true;
+};
+var redirectOnAuthSuccess = () => {
+  var _config$msalConfig$au, _config;
+  window.location.href = (_config$msalConfig$au = (_config = config) === null || _config === void 0 || (_config = _config.msalConfig) === null || _config === void 0 || (_config = _config.auth) === null || _config === void 0 ? void 0 : _config.redirectUri) !== null && _config$msalConfig$au !== void 0 ? _config$msalConfig$au : '/';
+};
+var _acquireTokensByRequestAndAccount = /*#__PURE__*/function () {
+  var _ref2 = _asyncToGenerator(function* (tokenReq, account) {
+    if (!tokenReq) {
+      console.warn('No base access token request provided');
+      tokenReq = {};
+    }
+    tokenReq.account = account;
+    return yield msalApp.acquireTokenSilent(tokenReq).then(tokenRes => tokenRes).catch(silentTokenFetchError => {
+      var _silentTokenFetchErro;
+      if (silentTokenFetchError.errorCode === 'no_tokens_found') {
+        // No token found during acquireTokenSilent, ignore this error, nothing to do
+        return;
+      } else if (silentTokenFetchError.errorCode === 'login_required') {
+        console.warn('Silent authentication not possible, user is not logged in. This usually happens when the user session ' + 'has expired. Please try to log in again.');
+        return;
+      } else if (((_silentTokenFetchErro = silentTokenFetchError.errorMessage) === null || _silentTokenFetchErro === void 0 ? void 0 : _silentTokenFetchErro.indexOf('interaction_required')) !== -1) {
+        msalApp.acquireTokenRedirect(tokenReq).then(tokenRes => tokenRes) // Token acquired with interaction
+        .catch(tokenRedirectError => tokenRedirectError); // Token retrieval failed
+      }
+      throw silentTokenFetchError;
+    });
+  });
+  return function _acquireTokensByRequestAndAccount(_x2, _x3) {
+    return _ref2.apply(this, arguments);
+  };
+}();
+var acquireTokens = /*#__PURE__*/function () {
+  var _ref3 = _asyncToGenerator(function* () {
+    var _msalApp$getAllAccoun;
+    if (!checkInit()) return;
+    var idToken = readFromStorage('authIdToken');
+    var accessToken = readFromStorage('authAccessToken');
+    var authenticated = readFromStorage('authAuthenticated') === 'true';
+    if (authenticated && idToken != null && accessToken != null) {
+      return {
+        accessToken,
+        idToken
+      };
+    }
+    var account = (_msalApp$getAllAccoun = msalApp.getAllAccounts()) === null || _msalApp$getAllAccoun === void 0 ? void 0 : _msalApp$getAllAccoun[0];
+    var tokenReq = config.accessRequest;
+    if (account === undefined) {
+      return undefined;
+    }
+    return yield _acquireTokensByRequestAndAccount(tokenReq, account);
+  });
+  return function acquireTokens() {
+    return _ref3.apply(this, arguments);
+  };
+}();
+var handleResponse = response => {
+  if (response != null) {
+    var account = response.account;
+    writeToStorage('authIdTokenPopup', response.idToken);
+    writeToStorage('authIdToken', response.idToken);
+    writeToStorage('authAccessToken', response.accessToken);
+    writeToStorage('authAuthenticated', 'true');
+    writeToStorage('authAccountId', account.homeAccountId);
+    authData.authenticated = true;
+    authData.accountId = account.homeAccountId;
+    authData.userEmail = account.username; // In MSAL account data, username property contains user email
+    authData.username = account.name;
+    authData.userId = account.localAccountId;
+    redirectOnAuthSuccess();
+    return;
+  }
+  msalApp.loginRedirect(config.loginRequest);
+};
+var signIn = () => {
+  if (!checkInit()) return;
+
+  // Set auth provider name in storage to declare that it has an interaction in progress
+  setTimeout(() => {
+    writeToStorage('authInteractionInProgress', name);
+  }, 50);
+  return msalApp.handleRedirectPromise().then(handleResponse);
+};
 var signOut = () => {
+  var _authData$accountId;
   if (!checkInit()) return;
+  var accountId = readFromStorage('authAccountId');
+  var idToken = readFromStorage('authIdToken');
   clearFromStorage('authIdTokenPopup');
   clearFromStorage('authIdToken');
   clearFromStorage('authAccessToken');
+  clearFromStorage('authAccountId');
   writeToStorage('authAuthenticated', 'false');
-  // return;
   var logoutRequest = {
-    account: msalApp.getAccountByHomeId(authData.accountId)
+    account: msalApp.getAccountByHomeId((_authData$accountId = authData.accountId) !== null && _authData$accountId !== void 0 ? _authData$accountId : accountId),
+    idTokenHint: idToken
   };
   msalApp.logoutRedirect(logoutRequest);
 };
 
-// Returns a boolean value, stating whether the isUserSignedIn must be provided a callback const as =  paramete=> aar
+// Returns a boolean value, stating whether the isUserSignedIn must be provided a callback
 var isAsync = () => {
   return false;
 };
@@ -57455,7 +57675,7 @@ var _extractRolesFromAccessToken = accessToken => {
   return result;
 };
 var isUserSignedIn = /*#__PURE__*/function () {
-  var _ref5 = _asyncToGenerator(function* () {
+  var _ref4 = _asyncToGenerator(function* () {
     // Return true if already authenticated
     if (authData.authenticated) return true;
     if (readFromStorage('authAuthenticated') === 'true') {
@@ -57463,6 +57683,23 @@ var isUserSignedIn = /*#__PURE__*/function () {
       return true;
     }
 
+    // Resume interaction if one is already in progress
+    if (readFromStorage('authInteractionInProgress') === name) {
+      clearFromStorage('authInteractionInProgress');
+      var locationHashParameters = new URLSearchParams(window.location.hash.substring(1));
+      if (locationHashParameters.has('state')) {
+        var _config2;
+        if (locationHashParameters.has('iss', (_config2 = config) === null || _config2 === void 0 || (_config2 = _config2.msalConfig) === null || _config2 === void 0 || (_config2 = _config2.auth) === null || _config2 === void 0 || (_config2 = _config2.authorityMetadata) === null || _config2 === void 0 ? void 0 : _config2.issuer)) {
+          // Resume redirect workflow process
+          msalApp.handleRedirectPromise().then(handleResponse);
+          // return true;
+        } else if (locationHashParameters.has('iss')) {
+          var _config3;
+          console.warn('Issuer found in url ("' + ((_config3 = config) === null || _config3 === void 0 || (_config3 = _config3.msalConfig) === null || _config3 === void 0 || (_config3 = _config3.auth) === null || _config3 === void 0 || (_config3 = _config3.authorityMetadata) === null || _config3 === void 0 ? void 0 : _config3.issuer) + '") does not match the keycloak configuration ("' + locationHashParameters.get('iss') + '")');
+        }
+      }
+    }
+
     // Otherwise, try to acquire a token silently to implement SSO
     var tokens = yield acquireTokens();
     if ((tokens === null || tokens === void 0 ? void 0 : tokens.idToken) !== undefined) {
@@ -57477,24 +57714,24 @@ var isUserSignedIn = /*#__PURE__*/function () {
     return false;
   });
   return function isUserSignedIn() {
-    return _ref5.apply(this, arguments);
+    return _ref4.apply(this, arguments);
   };
 }();
 var getUserEmail = () => {
-  var _authData$userEmail, _msalApp$getAllAccoun3;
+  var _authData$userEmail, _msalApp$getAllAccoun2;
   if (!checkInit()) return;
   // Note: account data from MSAL seems to contain user email in the 'username' property
-  return (_authData$userEmail = authData === null || authData === void 0 ? void 0 : authData.userEmail) !== null && _authData$userEmail !== void 0 ? _authData$userEmail : (_msalApp$getAllAccoun3 = msalApp.getAllAccounts()) === null || _msalApp$getAllAccoun3 === void 0 || (_msalApp$getAllAccoun3 = _msalApp$getAllAccoun3[0]) === null || _msalApp$getAllAccoun3 === void 0 ? void 0 : _msalApp$getAllAccoun3.username;
+  return (_authData$userEmail = authData === null || authData === void 0 ? void 0 : authData.userEmail) !== null && _authData$userEmail !== void 0 ? _authData$userEmail : (_msalApp$getAllAccoun2 = msalApp.getAllAccounts()) === null || _msalApp$getAllAccoun2 === void 0 || (_msalApp$getAllAccoun2 = _msalApp$getAllAccoun2[0]) === null || _msalApp$getAllAccoun2 === void 0 ? void 0 : _msalApp$getAllAccoun2.username;
 };
 var getUserName = () => {
-  var _authData$name, _msalApp$getAllAccoun4;
+  var _authData$name, _msalApp$getAllAccoun3;
   if (!checkInit()) return;
-  return (_authData$name = authData === null || authData === void 0 ? void 0 : authData.name) !== null && _authData$name !== void 0 ? _authData$name : (_msalApp$getAllAccoun4 = msalApp.getAllAccounts()) === null || _msalApp$getAllAccoun4 === void 0 || (_msalApp$getAllAccoun4 = _msalApp$getAllAccoun4[0]) === null || _msalApp$getAllAccoun4 === void 0 ? void 0 : _msalApp$getAllAccoun4.name;
+  return (_authData$name = authData === null || authData === void 0 ? void 0 : authData.name) !== null && _authData$name !== void 0 ? _authData$name : (_msalApp$getAllAccoun3 = msalApp.getAllAccounts()) === null || _msalApp$getAllAccoun3 === void 0 || (_msalApp$getAllAccoun3 = _msalApp$getAllAccoun3[0]) === null || _msalApp$getAllAccoun3 === void 0 ? void 0 : _msalApp$getAllAccoun3.name;
 };
 var getUserId = () => {
-  var _authData$userId, _msalApp$getAllAccoun5;
+  var _authData$userId, _msalApp$getAllAccoun4;
   if (!checkInit()) return;
-  return (_authData$userId = authData === null || authData === void 0 ? void 0 : authData.userId) !== null && _authData$userId !== void 0 ? _authData$userId : (_msalApp$getAllAccoun5 = msalApp.getAllAccounts()) === null || _msalApp$getAllAccoun5 === void 0 || (_msalApp$getAllAccoun5 = _msalApp$getAllAccoun5[0]) === null || _msalApp$getAllAccoun5 === void 0 ? void 0 : _msalApp$getAllAccoun5.localAccountId;
+  return (_authData$userId = authData === null || authData === void 0 ? void 0 : authData.userId) !== null && _authData$userId !== void 0 ? _authData$userId : (_msalApp$getAllAccoun4 = msalApp.getAllAccounts()) === null || _msalApp$getAllAccoun4 === void 0 || (_msalApp$getAllAccoun4 = _msalApp$getAllAccoun4[0]) === null || _msalApp$getAllAccoun4 === void 0 ? void 0 : _msalApp$getAllAccoun4.localAccountId;
 };
 var getUserRoles = () => {
   if (!checkInit()) return;
@@ -57504,10 +57741,9 @@ var getUserPicUrl = () => {
   return undefined;
 };
 
-var AuthKeycloakExperimental = /*#__PURE__*/Object.freeze({
+var AuthKeycloakRedirectExperimental = /*#__PURE__*/Object.freeze({
   __proto__: null,
   acquireTokens: acquireTokens,
-  acquireTokensByRequest: acquireTokensByRequest,
   getUserEmail: getUserEmail,
   getUserId: getUserId,
   getUserName: getUserName,
@@ -57869,7 +58105,8 @@ var ResourceUtils = {
 exports.AgGridUtils = AgGridUtils;
 exports.Auth = Auth;
 exports.AuthDev = AuthDev;
-exports.AuthKeycloakExperimental = AuthKeycloakExperimental;
+exports.AuthKeycloakPopupExperimental = AuthKeycloakPopupExperimental;
+exports.AuthKeycloakRedirectExperimental = AuthKeycloakRedirectExperimental;
 exports.CSVUtils = CSVUtils;
 exports.DatasetUtils = DatasetUtils;
 exports.DateUtils = DateUtils;