@cundi/refine-xaf 1.0.0 → 1.0.1

package/dist/index.js

@@ -35,11 +35,13 @@ __export(index_exports, {
   ApplicationUserCreate: () => ApplicationUserCreate,
   ApplicationUserEdit: () => ApplicationUserEdit,
   ApplicationUserList: () => ApplicationUserList,
+  AuthCallback: () => AuthCallback,
   Base64Upload: () => Base64Upload,
   ColorModeContext: () => ColorModeContext,
   ColorModeContextProvider: () => ColorModeContextProvider,
   Header: () => Header,
   HttpError: () => HttpError,
+  KeycloakLoginPage: () => KeycloakLoginPage,
   LoginPage: () => LoginPage,
   RelatedList: () => RelatedList,
   RoleCreate: () => RoleCreate,
@@ -53,17 +55,22 @@ __export(index_exports, {
   authProvider: () => authProvider,
   authService: () => authService,
   dataProvider: () => dataProvider,
+  generatePassword: () => generatePassword,
   getBaseUrl: () => getBaseUrl,
   httpClient: () => httpClient,
+  keycloakService: () => keycloakService,
   parseJwt: () => parseJwt,
   useColorMode: () => useColorMode,
-  useModelTypes: () => useModelTypes
+  useModelTypes: () => useModelTypes,
+  validatePasswordStrength: () => validatePasswordStrength
 });
 module.exports = __toCommonJS(index_exports);
 
 // src/utils/httpClient.ts
 var import_meta = {};
 var TOKEN_KEY = "refine-auth";
+var MAX_RETRIES = 3;
+var BASE_RETRY_DELAY = 1e3;
 var HttpError = class _HttpError extends Error {
   constructor(statusCode, message2, body) {
     super(message2);
@@ -79,8 +86,15 @@ var HttpError = class _HttpError extends Error {
 var getBaseUrl = () => {
   return import_meta.env?.VITE_API_URL || "";
 };
-var httpClient = async (endpoint, options = {}) => {
-  const { skipAuth, headers, ...restOptions } = options;
+var delay = (ms) => new Promise((resolve) => setTimeout(resolve, ms));
+var isRetryableError = (error) => {
+  if (error instanceof HttpError) {
+    return error.statusCode >= 500;
+  }
+  return true;
+};
+var httpClient = async (endpoint, options = {}, retryCount = 0) => {
+  const { skipAuth, noRetry, headers, ...restOptions } = options;
   const baseUrl = getBaseUrl();
   const url = endpoint.startsWith("http") ? endpoint : `${baseUrl}${endpoint.startsWith("/") ? "" : "/"}${endpoint}`;
   const defaultHeaders = {
@@ -109,7 +123,14 @@ var httpClient = async (endpoint, options = {}) => {
       } catch {
         parsedError = errorBody;
       }
-      throw new HttpError(response.status, response.statusText, parsedError);
+      const error = new HttpError(response.status, response.statusText, parsedError);
+      if (!noRetry && retryCount < MAX_RETRIES && isRetryableError(error)) {
+        const retryDelay = BASE_RETRY_DELAY * Math.pow(2, retryCount);
+        console.warn(`Request failed with ${response.status}, retrying in ${retryDelay}ms... (${retryCount + 1}/${MAX_RETRIES})`);
+        await delay(retryDelay);
+        return httpClient(endpoint, options, retryCount + 1);
+      }
+      throw error;
     }
     if (response.status === 204) {
       return null;
@@ -119,6 +140,12 @@ var httpClient = async (endpoint, options = {}) => {
     if (error instanceof HttpError) {
       throw error;
     }
+    if (!noRetry && retryCount < MAX_RETRIES && isRetryableError(error)) {
+      const retryDelay = BASE_RETRY_DELAY * Math.pow(2, retryCount);
+      console.warn(`Network error, retrying in ${retryDelay}ms... (${retryCount + 1}/${MAX_RETRIES})`);
+      await delay(retryDelay);
+      return httpClient(endpoint, options, retryCount + 1);
+    }
     throw new HttpError(500, "Network Error", error);
   }
 };
@@ -176,22 +203,208 @@ var authService = {
   }
 };
 
+// src/utils/pkceUtils.ts
+var STORAGE_KEY_CODE_VERIFIER = "pkce_code_verifier";
+var STORAGE_KEY_STATE = "pkce_state";
+function generateRandomString(length) {
+  const charset = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-._~";
+  const randomValues = new Uint8Array(length);
+  crypto.getRandomValues(randomValues);
+  let result = "";
+  for (let i = 0; i < length; i++) {
+    result += charset[randomValues[i] % charset.length];
+  }
+  return result;
+}
+async function sha256(plain) {
+  const encoder = new TextEncoder();
+  const data = encoder.encode(plain);
+  const hash = await crypto.subtle.digest("SHA-256", data);
+  const base64 = btoa(String.fromCharCode(...new Uint8Array(hash)));
+  return base64.replace(/\+/g, "-").replace(/\//g, "_").replace(/=/g, "");
+}
+function generateCodeVerifier() {
+  return generateRandomString(128);
+}
+async function generateCodeChallenge(verifier) {
+  return await sha256(verifier);
+}
+function generateState() {
+  return generateRandomString(32);
+}
+function saveCodeVerifier(verifier) {
+  sessionStorage.setItem(STORAGE_KEY_CODE_VERIFIER, verifier);
+}
+function getCodeVerifier() {
+  return sessionStorage.getItem(STORAGE_KEY_CODE_VERIFIER);
+}
+function clearCodeVerifier() {
+  sessionStorage.removeItem(STORAGE_KEY_CODE_VERIFIER);
+}
+function saveState(state) {
+  sessionStorage.setItem(STORAGE_KEY_STATE, state);
+}
+function getState() {
+  return sessionStorage.getItem(STORAGE_KEY_STATE);
+}
+function clearState() {
+  sessionStorage.removeItem(STORAGE_KEY_STATE);
+}
+function clearPKCEData() {
+  clearCodeVerifier();
+  clearState();
+}
+
+// src/services/keycloakService.ts
+var import_meta2 = {};
+function getEnvConfig() {
+  const env = import_meta2.env;
+  const config = {
+    keycloakUrl: env.VITE_KEYCLOAK_URL || "http://localhost:8080",
+    realm: env.VITE_KEYCLOAK_REALM || "cundi",
+    clientId: env.VITE_KEYCLOAK_CLIENT_ID || "cundi-web",
+    redirectUri: env.VITE_REDIRECT_URI || `${window.location.origin}/auth/callback`
+  };
+  const missingVars = [];
+  if (!env.VITE_KEYCLOAK_URL) missingVars.push("VITE_KEYCLOAK_URL");
+  if (!env.VITE_KEYCLOAK_REALM) missingVars.push("VITE_KEYCLOAK_REALM");
+  if (!env.VITE_KEYCLOAK_CLIENT_ID) missingVars.push("VITE_KEYCLOAK_CLIENT_ID");
+  if (missingVars.length > 0) {
+    console.warn(
+      `[Keycloak] Missing environment variables: ${missingVars.join(", ")}. Using default values. Please configure these in your .env file for production.`
+    );
+  }
+  return config;
+}
+var keycloakService = {
+  /**
+   * Start Authorization Code Flow with PKCE
+   * Redirects user to Keycloak login page
+   */
+  startAuthorizationFlow: async () => {
+    const { keycloakUrl, realm, clientId, redirectUri } = getEnvConfig();
+    const codeVerifier = generateCodeVerifier();
+    const codeChallenge = await generateCodeChallenge(codeVerifier);
+    const state = generateState();
+    saveCodeVerifier(codeVerifier);
+    saveState(state);
+    const authUrl = new URL(`${keycloakUrl}/realms/${realm}/protocol/openid-connect/auth`);
+    authUrl.searchParams.append("client_id", clientId);
+    authUrl.searchParams.append("redirect_uri", redirectUri);
+    authUrl.searchParams.append("response_type", "code");
+    authUrl.searchParams.append("scope", "openid profile email");
+    authUrl.searchParams.append("code_challenge", codeChallenge);
+    authUrl.searchParams.append("code_challenge_method", "S256");
+    authUrl.searchParams.append("state", state);
+    window.location.href = authUrl.toString();
+  },
+  /**
+   * Handle callback from Keycloak
+   * Exchange authorization code for access token
+   */
+  handleCallback: async (code, state) => {
+    const { keycloakUrl, realm, clientId, redirectUri } = getEnvConfig();
+    const savedState = getState();
+    if (!savedState || savedState !== state) {
+      clearPKCEData();
+      throw new Error("Invalid state parameter - possible CSRF attack");
+    }
+    const codeVerifier = getCodeVerifier();
+    if (!codeVerifier) {
+      throw new Error("Code verifier not found - session may have expired");
+    }
+    const tokenUrl = `${keycloakUrl}/realms/${realm}/protocol/openid-connect/token`;
+    const formData = new URLSearchParams();
+    formData.append("grant_type", "authorization_code");
+    formData.append("client_id", clientId);
+    formData.append("code", code);
+    formData.append("redirect_uri", redirectUri);
+    formData.append("code_verifier", codeVerifier);
+    const response = await fetch(tokenUrl, {
+      method: "POST",
+      headers: {
+        "Content-Type": "application/x-www-form-urlencoded"
+      },
+      body: formData.toString()
+    });
+    clearPKCEData();
+    if (!response.ok) {
+      const error = await response.text();
+      throw new Error(`Token exchange failed: ${error}`);
+    }
+    const data = await response.json();
+    return {
+      accessToken: data.access_token,
+      idToken: data.id_token || data.access_token
+      // Fallback to access token if no id_token
+    };
+  },
+  /**
+   * Logout from Keycloak
+   * Redirects to Keycloak logout endpoint to properly clear the session
+   */
+  logout: (idToken) => {
+    const { keycloakUrl, realm } = getEnvConfig();
+    clearPKCEData();
+    const logoutUrl = new URL(`${keycloakUrl}/realms/${realm}/protocol/openid-connect/logout`);
+    const appBaseUrl = window.location.origin;
+    logoutUrl.searchParams.append("post_logout_redirect_uri", `${appBaseUrl}/login`);
+    if (idToken) {
+      logoutUrl.searchParams.append("id_token_hint", idToken);
+    }
+    window.location.href = logoutUrl.toString();
+  }
+};
+
 // src/authProvider.ts
 var authProvider = {
-  login: async ({ username, password }) => {
+  login: async ({ username, password, provider, code, state }) => {
     try {
-      const token = await authService.login({ username, password });
+      let token;
+      let idToken;
+      if (provider === "keycloak") {
+        if (code && state) {
+          const result = await keycloakService.handleCallback(code, state);
+          token = result.accessToken;
+          idToken = result.idToken;
+        } else {
+          await keycloakService.startAuthorizationFlow();
+          return {
+            success: false,
+            error: {
+              message: "Redirecting to Keycloak...",
+              name: "Redirect"
+            }
+          };
+        }
+      } else {
+        token = await authService.login({ username, password });
+      }
       if (token) {
         localStorage.setItem(TOKEN_KEY, token);
+        if (idToken) {
+          localStorage.setItem("id_token", idToken);
+        }
         const claims = parseJwt(token);
         const userId = claims["http://schemas.xmlsoap.org/ws/2005/05/identity/claims/nameidentifier"] || claims.sub || claims.id || claims.Oid;
-        const claimName = claims["http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name"] || claims.unique_name || claims.name || username;
+        const claimName = claims["http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name"] || claims.unique_name || claims.preferred_username || claims.name || username;
         try {
           let user = null;
-          if (userId) {
-            user = await authService.getUserById(userId);
-          } else {
-            user = await authService.getUserByUsername(username);
+          let retries = provider === "keycloak" ? 3 : 1;
+          for (let i = 0; i < retries; i++) {
+            if (i > 0) {
+              await new Promise((resolve) => setTimeout(resolve, 1e3));
+            }
+            if (provider === "keycloak") {
+              user = await authService.getUserByUsername(claimName || username);
+            } else if (userId) {
+              user = await authService.getUserById(userId);
+            } else {
+              user = await authService.getUserByUsername(claimName || username);
+            }
+            if (user && user.Roles && user.Roles.length > 0) {
+              break;
+            }
           }
           if (user) {
             if (user.Photo) {
@@ -208,6 +421,7 @@ var authProvider = {
               isAdmin = user.Roles.some((r) => r.IsAdministrative);
             }
             localStorage.setItem("user_is_admin", isAdmin ? "true" : "false");
+            localStorage.setItem("auth_provider", provider || "local");
           }
         } catch (error) {
           console.error("Failed to fetch user details", error);
@@ -235,12 +449,22 @@ var authProvider = {
     }
   },
   logout: async () => {
+    const authProvider2 = localStorage.getItem("auth_provider");
+    const idToken = localStorage.getItem("id_token");
     localStorage.removeItem(TOKEN_KEY);
+    localStorage.removeItem("id_token");
     localStorage.removeItem("user_photo");
     localStorage.removeItem("user_name");
     localStorage.removeItem("user_id");
     localStorage.removeItem("user_roles");
     localStorage.removeItem("user_is_admin");
+    localStorage.removeItem("auth_provider");
+    if (authProvider2 === "keycloak") {
+      keycloakService.logout(idToken || void 0);
+      return {
+        success: true
+      };
+    }
     return {
       success: true,
       redirectTo: "/login"
@@ -352,7 +576,6 @@ var mapOperator = (operator) => {
       return "ge";
     case "in":
       return "in";
-    // OData v4.01 usually, or handled manually
     case "contains":
       return "contains";
     case "startswith":
@@ -535,6 +758,33 @@ var SecurityPermissionState = /* @__PURE__ */ ((SecurityPermissionState2) => {
   return SecurityPermissionState2;
 })(SecurityPermissionState || {});
 
+// src/utils/passwordUtils.ts
+var generatePassword = (length = 12) => {
+  const charset = "abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789!@#$%^&*()_+";
+  const array = new Uint32Array(length);
+  crypto.getRandomValues(array);
+  return Array.from(array, (num) => charset[num % charset.length]).join("");
+};
+var validatePasswordStrength = (password) => {
+  if (password.length < 8) {
+    return { isValid: false, message: "Password must be at least 8 characters long" };
+  }
+  const hasUpperCase = /[A-Z]/.test(password);
+  const hasLowerCase = /[a-z]/.test(password);
+  const hasNumbers = /\d/.test(password);
+  const hasSpecialChar = /[!@#$%^&*()_+]/.test(password);
+  if (!hasUpperCase || !hasLowerCase) {
+    return { isValid: false, message: "Password must contain both uppercase and lowercase letters" };
+  }
+  if (!hasNumbers) {
+    return { isValid: false, message: "Password must contain at least one number" };
+  }
+  if (!hasSpecialChar) {
+    return { isValid: false, message: "Password must contain at least one special character" };
+  }
+  return { isValid: true, message: "Password is strong" };
+};
+
 // src/components/Header.tsx
 var import_react3 = __toESM(require("react"));
 var import_core = require("@refinedev/core");
@@ -624,6 +874,7 @@ var Base64Upload = ({ value, onChange }) => {
 };
 
 // src/components/Header.tsx
+var import_meta3 = {};
 var { Text } = import_lib3.Typography;
 var { useToken } = import_lib3.theme;
 var Header = () => {
@@ -633,6 +884,12 @@ var Header = () => {
   const { mode, setMode } = useColorMode();
   const { token } = useToken();
   const invalidate = (0, import_core.useInvalidate)();
+  const [authProvider2, setAuthProvider] = (0, import_react3.useState)(null);
+  (0, import_react3.useEffect)(() => {
+    if (user) {
+      setAuthProvider(localStorage.getItem("auth_provider"));
+    }
+  }, [user]);
   const [isPhotoModalOpen, setIsPhotoModalOpen] = (0, import_react3.useState)(false);
   const [isPhotoLoading, setIsPhotoLoading] = (0, import_react3.useState)(false);
   const [photoForm] = import_lib3.Form.useForm();
@@ -662,14 +919,8 @@ var Header = () => {
       setIsPhotoModalOpen(false);
     }
   };
-  const generatePassword = () => {
-    const length = 12;
-    const charset = "abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789!@#$%^&*()_+";
-    let retVal = "";
-    for (let i = 0, n = charset.length; i < length; ++i) {
-      retVal += charset.charAt(Math.floor(Math.random() * n));
-    }
-    passwordForm.setFieldsValue({ password: retVal });
+  const handleGeneratePassword = () => {
+    passwordForm.setFieldsValue({ password: generatePassword() });
   };
   const handlePasswordSubmit = async (values) => {
     setIsPasswordLoading(true);
@@ -712,11 +963,18 @@ var Header = () => {
     },
     {
       key: "change-password",
-      label: "Change Password",
+      label: authProvider2 === "keycloak" ? "Manage Account in Keycloak" : "Change Password",
       icon: /* @__PURE__ */ import_react3.default.createElement(import_icons.LockOutlined, null),
       onClick: () => {
-        passwordForm.resetFields();
-        setIsPasswordModalOpen(true);
+        if (authProvider2 === "keycloak") {
+          const env = import_meta3.env;
+          const keycloakUrl = env?.VITE_KEYCLOAK_URL || "http://localhost:8080";
+          const realm = env?.VITE_KEYCLOAK_REALM || "cundi";
+          window.open(`${keycloakUrl}/realms/${realm}/account`, "_blank");
+        } else {
+          passwordForm.resetFields();
+          setIsPasswordModalOpen(true);
+        }
       }
     },
     {
@@ -780,7 +1038,7 @@ var Header = () => {
           rules: [{ required: true, message: "Please input the new password!" }]
         },
         /* @__PURE__ */ import_react3.default.createElement(import_lib3.Input.Password, { placeholder: "Enter new password" })
-      ), /* @__PURE__ */ import_react3.default.createElement(import_lib3.Button, { icon: /* @__PURE__ */ import_react3.default.createElement(import_icons.ThunderboltOutlined, null), onClick: generatePassword })))
+      ), /* @__PURE__ */ import_react3.default.createElement(import_lib3.Button, { icon: /* @__PURE__ */ import_react3.default.createElement(import_icons.ThunderboltOutlined, null), onClick: handleGeneratePassword })))
     )
   );
 };
@@ -795,7 +1053,7 @@ var SmartList = ({
   resource,
   searchFields
 }) => {
-  const { tableProps, searchFormProps, tableQueryResult, queryResult, setFilters } = (0, import_antd2.useTable)({
+  const { tableProps, searchFormProps, tableQuery, setFilters } = (0, import_antd2.useTable)({
     resource,
     syncWithLocation: true,
     onSearch: (params) => {
@@ -814,17 +1072,25 @@ var SmartList = ({
       return filters;
     }
   });
-  const columns = import_react4.default.Children.toArray(children).map((child) => {
-    return {
-      key: child.props.dataIndex || child.props.title || "unknown",
-      title: child.props.title,
-      dataIndex: child.props.dataIndex,
-      defaultVisible: child.props.defaultVisible
-    };
-  });
+  const columns = (0, import_react4.useMemo)(
+    () => import_react4.default.Children.toArray(children).map((child) => {
+      const props = child.props || {};
+      return {
+        key: String(props.dataIndex || props.title || "unknown"),
+        title: props.title,
+        dataIndex: props.dataIndex,
+        defaultVisible: props.defaultVisible
+      };
+    }),
+    [children]
+  );
   const [visibleColumns, setVisibleColumns] = (0, import_react4.useState)([]);
+  const columnKeysString = (0, import_react4.useMemo)(
+    () => columns.map((c) => c.key).join(","),
+    [columns]
+  );
   (0, import_react4.useEffect)(() => {
-    const allKeys = columns.map((c) => c.key?.toString());
+    const allKeys = columns.map((c) => c.key);
     const storageKey = `table-columns-${resource}`;
     const saved = localStorage.getItem(storageKey);
     if (saved) {
@@ -839,9 +1105,9 @@ var SmartList = ({
         console.error("Failed to parse saved columns", e);
       }
     }
-    const defaultVisible = columns.filter((c) => c.defaultVisible || c.dataIndex === "actions").map((c) => c.key?.toString());
+    const defaultVisible = columns.filter((c) => c.defaultVisible || c.dataIndex === "actions").map((c) => c.key);
     setVisibleColumns(defaultVisible);
-  }, [children, resource]);
+  }, [columnKeysString, resource, columns]);
   const handleColumnChange = (key, checked) => {
     let newVisible;
     if (checked) {
@@ -907,7 +1173,7 @@ var SmartList = ({
         }
       }
     }
-  ))), /* @__PURE__ */ import_react4.default.createElement(import_lib4.Space, null, /* @__PURE__ */ import_react4.default.createElement(import_lib4.Button, { icon: /* @__PURE__ */ import_react4.default.createElement(import_icons2.ReloadOutlined, null), onClick: () => (tableQueryResult || queryResult)?.refetch() }, "Refresh"), /* @__PURE__ */ import_react4.default.createElement(import_lib4.Popover, { content, title: "Columns", trigger: "click", placement: "bottomRight" }, /* @__PURE__ */ import_react4.default.createElement(import_lib4.Button, { icon: /* @__PURE__ */ import_react4.default.createElement(import_icons2.SettingOutlined, null) }, "Columns")))), /* @__PURE__ */ import_react4.default.createElement(import_lib4.Table, { ...tableProps, rowKey: "Oid" }, filteredChildren));
+  ))), /* @__PURE__ */ import_react4.default.createElement(import_lib4.Space, null, /* @__PURE__ */ import_react4.default.createElement(import_lib4.Button, { icon: /* @__PURE__ */ import_react4.default.createElement(import_icons2.ReloadOutlined, null), onClick: () => tableQuery?.refetch() }, "Refresh"), /* @__PURE__ */ import_react4.default.createElement(import_lib4.Popover, { content, title: "Columns", trigger: "click", placement: "bottomRight" }, /* @__PURE__ */ import_react4.default.createElement(import_lib4.Button, { icon: /* @__PURE__ */ import_react4.default.createElement(import_icons2.SettingOutlined, null) }, "Columns")))), /* @__PURE__ */ import_react4.default.createElement(import_lib4.Table, { ...tableProps, rowKey: "Oid" }, filteredChildren));
 };
 
 // src/components/RelatedList.tsx
@@ -10548,10 +10814,10 @@ editHandlers.compositionend = (view, event) => {
     scheduleComposeEnd(view, 20);
   }
 };
-function scheduleComposeEnd(view, delay) {
+function scheduleComposeEnd(view, delay2) {
   clearTimeout(view.input.composingTimeout);
-  if (delay > -1)
-    view.input.composingTimeout = setTimeout(() => endComposition(view), delay);
+  if (delay2 > -1)
+    view.input.composingTimeout = setTimeout(() => endComposition(view), delay2);
 }
 function clearComposition(view) {
   if (view.composing) {
@@ -18622,87 +18888,12 @@ var TiptapEditor = ({ value, onChange, disabled }) => {
       }
     ))),
     /* @__PURE__ */ import_react6.default.createElement("style", null, `
-                .ProseMirror pre {
-                    background: ${token.colorFillTertiary};
-                    color: ${token.colorText};
-                    font-family: 'JetBrainsMono', 'Courier New', monospace;
-                    padding: 0.75rem 1rem;
-                    border-radius: 0.5rem;
-                }
-                .ProseMirror pre code {
-                    color: inherit;
-                    padding: 0;
-                    background: none;
-                    font-size: 0.8rem;
-                }
-                .ProseMirror p {
-                    margin-bottom: 0px;
-                }
-                .ProseMirror:focus {
-                    outline: none;
-                }
-                .ProseMirror table {
-                    border-collapse: collapse;
-                    table-layout: fixed;
-                    width: 100%;
-                    margin: 0;
-                    overflow: hidden;
-                }
-                .ProseMirror td, .ProseMirror th {
-                    min-width: 1em;
-                    border: 2px solid ${token.colorBorder};
-                    padding: 3px 5px;
-                    vertical-align: top;
-                    box-sizing: border-box;
-                    position: relative;
-                }
-                .ProseMirror th {
-                    font-weight: bold;
-                    text-align: left;
-                    background-color: ${token.colorFillQuaternary};
-                }
-                .ProseMirror .selectedCell:after {
-                    z-index: 2;
-                    position: absolute;
-                    content: "";
-                    left: 0; right: 0; top: 0; bottom: 0;
-                    background: rgba(200, 200, 255, 0.4);
-                    pointer-events: none;
-                }
-                .ProseMirror .column-resize-handle {
-                    position: absolute;
-                    right: -2px;
-                    top: 0;
-                    bottom: -2px;
-                    width: 4px;
-                    background-color: #adf;
-                    pointer-events: none;
-                }
-                ul[data-type="taskList"] {
-                    list-style: none;
-                    padding: 0;
-                }
-                ul[data-type="taskList"] li {
-                    display: flex;
-                    align-items: center;
-                }
-                ul[data-type="taskList"] li > label {
-                    flex: 0 0 auto;
-                    margin-right: 0.5rem;
-                    user-select: none;
-                }
-                ul[data-type="taskList"] li > div {
-                    flex: 1 1 auto;
-                }
-                ul[data-type="taskList"] input[type="checkbox"] {
-                   cursor: pointer;
-                }
-                .ProseMirror p.is-editor-empty:first-child::before {
-                    color: ${token.colorTextPlaceholder};
-                    content: attr(data-placeholder);
-                    float: left;
-                    height: 0;
-                    pointer-events: none;
+                :root {
+                    --tiptap-code-bg: ${token.colorFillTertiary};
+                    --tiptap-code-text: ${token.colorText};
+                    --tiptap-border: ${token.colorBorder};
+                    --tiptap-header-bg: ${token.colorFillQuaternary};
+                    --tiptap-placeholder: ${token.colorTextPlaceholder};
                 }
             `),
     /* @__PURE__ */ import_react6.default.createElement("div", { style: {
@@ -18719,6 +18910,7 @@ var import_react8 = __toESM(require("react"));
 var import_core18 = require("@refinedev/core");
 var import_lib7 = require("antd/lib");
 var import_antd4 = require("@refinedev/antd");
+var import_react_router = require("react-router");
 var { Title, Link } = import_lib7.Typography;
 var LoginPage = () => {
   const [form] = import_lib7.Form.useForm();
@@ -18726,6 +18918,7 @@ var LoginPage = () => {
   const isLoading = isPending;
   const translate = (0, import_core18.useTranslate)();
   const { token } = import_lib7.theme.useToken();
+  const navigate = (0, import_react_router.useNavigate)();
   const onFinish = async (values) => {
     login(values);
   };
@@ -18756,7 +18949,7 @@ var LoginPage = () => {
           boxShadow: "0 4px 24px -4px rgba(0, 0, 0, 0.1)"
         }
       },
-      /* @__PURE__ */ import_react8.default.createElement("div", { style: { textAlign: "center", marginBottom: "32px" } }, /* @__PURE__ */ import_react8.default.createElement(Title, { level: 3, style: { color: token.colorPrimary, margin: 0 } }, translate("pages.login.title", "Sign in to your account"))),
+      /* @__PURE__ */ import_react8.default.createElement("div", { style: { textAlign: "center", marginBottom: "32px" } }, /* @__PURE__ */ import_react8.default.createElement(Title, { level: 3, style: { color: token.colorPrimary, margin: 0 } }, translate("pages.login.title", "Sign in to your account")), /* @__PURE__ */ import_react8.default.createElement(import_lib7.Typography.Text, { type: "secondary", style: { fontSize: "14px", marginTop: "8px", display: "block" } }, "Log in using a local account")),
       /* @__PURE__ */ import_react8.default.createElement(
         import_lib7.Form,
         {
@@ -18831,37 +19024,204 @@ var LoginPage = () => {
             size: "large"
           },
           translate("pages.login.signin", "Sign in")
-        ))
+        )),
+        /* @__PURE__ */ import_react8.default.createElement(import_lib7.Divider, { plain: true }, "or"),
+        /* @__PURE__ */ import_react8.default.createElement(
+          import_lib7.Button,
+          {
+            block: true,
+            size: "large",
+            onClick: () => navigate("/login")
+          },
+          "Log in using a Keycloak account"
+        )
       )
     )
   );
 };
 
-// src/pages/application-users/list.tsx
+// src/pages/login/keycloak.tsx
 var import_react9 = __toESM(require("react"));
 var import_core19 = require("@refinedev/core");
-var import_antd5 = require("@refinedev/antd");
 var import_lib8 = require("antd/lib");
+var import_antd5 = require("@refinedev/antd");
+var import_react_router2 = require("react-router");
+var { Title: Title2 } = import_lib8.Typography;
+var KeycloakLoginPage = () => {
+  const { mutate: login, isPending } = (0, import_core19.useLogin)();
+  const isLoading = isPending;
+  const translate = (0, import_core19.useTranslate)();
+  const { token } = import_lib8.theme.useToken();
+  const navigate = (0, import_react_router2.useNavigate)();
+  const handleKeycloakLogin = () => {
+    login({ provider: "keycloak" });
+  };
+  return /* @__PURE__ */ import_react9.default.createElement(
+    import_lib8.Layout,
+    {
+      style: {
+        height: "100vh",
+        justifyContent: "center",
+        alignItems: "center",
+        backgroundColor: token.colorBgContainer
+      }
+    },
+    /* @__PURE__ */ import_react9.default.createElement("div", { style: { marginBottom: "24px" } }, /* @__PURE__ */ import_react9.default.createElement(
+      import_antd5.ThemedTitle,
+      {
+        collapsed: false,
+        wrapperStyles: { fontSize: "22px", justifyContent: "center" }
+      }
+    )),
+    /* @__PURE__ */ import_react9.default.createElement(
+      import_lib8.Card,
+      {
+        style: {
+          width: "100%",
+          maxWidth: "400px",
+          padding: "20px",
+          boxShadow: "0 4px 24px -4px rgba(0, 0, 0, 0.1)"
+        }
+      },
+      /* @__PURE__ */ import_react9.default.createElement("div", { style: { textAlign: "center", marginBottom: "32px" } }, /* @__PURE__ */ import_react9.default.createElement(Title2, { level: 3, style: { color: token.colorPrimary, margin: 0 } }, translate("pages.login.title", "Sign in to your account")), /* @__PURE__ */ import_react9.default.createElement(import_lib8.Typography.Text, { type: "secondary", style: { fontSize: "14px", marginTop: "8px", display: "block" } }, "Choose your authentication method")),
+      /* @__PURE__ */ import_react9.default.createElement(
+        import_lib8.Button,
+        {
+          type: "primary",
+          block: true,
+          size: "large",
+          onClick: handleKeycloakLogin,
+          loading: isLoading,
+          style: { marginBottom: "16px" }
+        },
+        "Sign in with Keycloak"
+      ),
+      /* @__PURE__ */ import_react9.default.createElement(import_lib8.Divider, { plain: true }, "or"),
+      /* @__PURE__ */ import_react9.default.createElement(
+        import_lib8.Button,
+        {
+          block: true,
+          size: "large",
+          onClick: () => navigate("/login/api")
+        },
+        "Log in using a local account"
+      )
+    )
+  );
+};
+
+// src/pages/auth/AuthCallback.tsx
+var import_react10 = __toESM(require("react"));
+var import_core20 = require("@refinedev/core");
+var import_antd6 = require("antd");
+var AuthCallback = () => {
+  const { mutate: login } = (0, import_core20.useLogin)();
+  const [error, setError] = (0, import_react10.useState)(null);
+  const [processing, setProcessing] = (0, import_react10.useState)(false);
+  const hasProcessed = (0, import_react10.useRef)(false);
+  (0, import_react10.useEffect)(() => {
+    if (hasProcessed.current || processing) {
+      return;
+    }
+    const handleCallback = async () => {
+      setProcessing(true);
+      hasProcessed.current = true;
+      try {
+        const params = new URLSearchParams(window.location.search);
+        const code = params.get("code");
+        const state = params.get("state");
+        const errorParam = params.get("error");
+        const errorDescription = params.get("error_description");
+        if (errorParam) {
+          setError(errorDescription || errorParam);
+          setProcessing(false);
+          return;
+        }
+        if (!code || !state) {
+          setError("Missing authorization code or state parameter");
+          setProcessing(false);
+          return;
+        }
+        login({
+          code,
+          state,
+          provider: "keycloak"
+        }, {
+          onError: (err) => {
+            console.error("Login failed:", err);
+            setError(err?.message || "Authentication failed. The authorization code may have been used already.");
+            setProcessing(false);
+          }
+        });
+      } catch (err) {
+        console.error("Callback handling error:", err);
+        setError("Failed to process authentication callback");
+        setProcessing(false);
+      }
+    };
+    handleCallback();
+  }, [login, processing]);
+  if (error) {
+    return /* @__PURE__ */ import_react10.default.createElement(
+      import_antd6.Result,
+      {
+        status: "error",
+        title: "Authentication Failed",
+        subTitle: error,
+        extra: /* @__PURE__ */ import_react10.default.createElement(
+          "button",
+          {
+            onClick: () => window.location.href = "/login",
+            style: {
+              padding: "8px 16px",
+              background: "#1890ff",
+              color: "white",
+              border: "none",
+              borderRadius: "4px",
+              cursor: "pointer"
+            }
+          },
+          "Back to Login"
+        )
+      }
+    );
+  }
+  return /* @__PURE__ */ import_react10.default.createElement(
+    "div",
+    {
+      style: {
+        display: "flex",
+        justifyContent: "center",
+        alignItems: "center",
+        height: "100vh",
+        flexDirection: "column",
+        gap: "16px"
+      }
+    },
+    /* @__PURE__ */ import_react10.default.createElement(import_antd6.Spin, { size: "large" }),
+    /* @__PURE__ */ import_react10.default.createElement("p", null, "Completing authentication...")
+  );
+};
+
+// src/pages/application-users/list.tsx
+var import_react11 = __toESM(require("react"));
+var import_core21 = require("@refinedev/core");
+var import_antd7 = require("@refinedev/antd");
+var import_lib9 = require("antd/lib");
 var import_icons5 = require("@ant-design/icons");
 var ApplicationUserList = () => {
-  const [isModalOpen, setIsModalOpen] = (0, import_react9.useState)(false);
-  const [selectedUser, setSelectedUser] = (0, import_react9.useState)(null);
-  const [form] = import_lib8.Form.useForm();
-  const { open } = (0, import_core19.useNotification)();
-  const [isLoading, setIsLoading] = (0, import_react9.useState)(false);
+  const [isModalOpen, setIsModalOpen] = (0, import_react11.useState)(false);
+  const [selectedUser, setSelectedUser] = (0, import_react11.useState)(null);
+  const [form] = import_lib9.Form.useForm();
+  const { open } = (0, import_core21.useNotification)();
+  const [isLoading, setIsLoading] = (0, import_react11.useState)(false);
   const handleResetPasswordClick = (user) => {
     setSelectedUser(user);
     setIsModalOpen(true);
     form.resetFields();
   };
-  const generatePassword = () => {
-    const length = 12;
-    const charset = "abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789!@#$%^&*()_+";
-    let retVal = "";
-    for (let i = 0, n = charset.length; i < length; ++i) {
-      retVal += charset.charAt(Math.floor(Math.random() * n));
-    }
-    form.setFieldsValue({ password: retVal });
+  const handleGeneratePassword = () => {
+    form.setFieldsValue({ password: generatePassword() });
   };
   const handleResetPasswordSubmit = async (values) => {
     if (!selectedUser) return;
@@ -18884,21 +19244,21 @@ var ApplicationUserList = () => {
       setIsLoading(false);
     }
   };
-  return /* @__PURE__ */ import_react9.default.createElement(import_react9.default.Fragment, null, /* @__PURE__ */ import_react9.default.createElement(
+  return /* @__PURE__ */ import_react11.default.createElement(import_react11.default.Fragment, null, /* @__PURE__ */ import_react11.default.createElement(
     SmartList,
     {
       searchFields: ["UserName", "DisplayName", "Email"]
     },
-    /* @__PURE__ */ import_react9.default.createElement(
-      import_lib8.Table.Column,
+    /* @__PURE__ */ import_react11.default.createElement(
+      import_lib9.Table.Column,
       {
         dataIndex: "Photo",
         title: "Photo",
-        render: (value) => value ? /* @__PURE__ */ import_react9.default.createElement("img", { src: `data:image/png;base64,${value}`, alt: "User", style: { height: 40, width: 40, objectFit: "cover", borderRadius: "50%" } }) : "-"
+        render: (value) => value ? /* @__PURE__ */ import_react11.default.createElement("img", { src: `data:image/png;base64,${value}`, alt: "User", style: { height: 40, width: 40, objectFit: "cover", borderRadius: "50%" } }) : "-"
       }
     ),
-    /* @__PURE__ */ import_react9.default.createElement(
-      import_lib8.Table.Column,
+    /* @__PURE__ */ import_react11.default.createElement(
+      import_lib9.Table.Column,
       {
         dataIndex: "DisplayName",
         title: "Display Name",
@@ -18907,8 +19267,8 @@ var ApplicationUserList = () => {
         defaultVisible: true
       }
     ),
-    /* @__PURE__ */ import_react9.default.createElement(
-      import_lib8.Table.Column,
+    /* @__PURE__ */ import_react11.default.createElement(
+      import_lib9.Table.Column,
       {
         dataIndex: "UserName",
         title: "User Name",
@@ -18916,47 +19276,47 @@ var ApplicationUserList = () => {
         defaultVisible: true
       }
     ),
-    /* @__PURE__ */ import_react9.default.createElement(
-      import_lib8.Table.Column,
+    /* @__PURE__ */ import_react11.default.createElement(
+      import_lib9.Table.Column,
       {
         dataIndex: "Email",
         title: "Email",
         sorter: true
       }
     ),
-    /* @__PURE__ */ import_react9.default.createElement(
-      import_lib8.Table.Column,
+    /* @__PURE__ */ import_react11.default.createElement(
+      import_lib9.Table.Column,
       {
         dataIndex: "IsActive",
         title: "Active",
-        render: (value) => /* @__PURE__ */ import_react9.default.createElement(import_lib8.Checkbox, { checked: value, disabled: true }),
+        render: (value) => /* @__PURE__ */ import_react11.default.createElement(import_lib9.Checkbox, { checked: value, disabled: true }),
         sorter: true
       }
     ),
-    /* @__PURE__ */ import_react9.default.createElement(
-      import_lib8.Table.Column,
+    /* @__PURE__ */ import_react11.default.createElement(
+      import_lib9.Table.Column,
       {
         dataIndex: "AccessFailedCount",
         title: "Access Failed Count"
       }
     ),
-    /* @__PURE__ */ import_react9.default.createElement(
-      import_lib8.Table.Column,
+    /* @__PURE__ */ import_react11.default.createElement(
+      import_lib9.Table.Column,
       {
         title: "Actions",
         dataIndex: "actions",
-        render: (_, record) => /* @__PURE__ */ import_react9.default.createElement(import_lib8.Space, null, /* @__PURE__ */ import_react9.default.createElement(import_lib8.Tooltip, { title: "Reset Password" }, /* @__PURE__ */ import_react9.default.createElement(
-          import_lib8.Button,
+        render: (_, record) => /* @__PURE__ */ import_react11.default.createElement(import_lib9.Space, null, /* @__PURE__ */ import_react11.default.createElement(import_lib9.Tooltip, { title: "Reset Password" }, /* @__PURE__ */ import_react11.default.createElement(
+          import_lib9.Button,
           {
             size: "small",
-            icon: /* @__PURE__ */ import_react9.default.createElement(import_icons5.KeyOutlined, null),
+            icon: /* @__PURE__ */ import_react11.default.createElement(import_icons5.KeyOutlined, null),
             onClick: () => handleResetPasswordClick(record)
           }
-        )), /* @__PURE__ */ import_react9.default.createElement(import_antd5.EditButton, { hideText: true, size: "small", recordItemId: record.Oid }), /* @__PURE__ */ import_react9.default.createElement(import_antd5.DeleteButton, { hideText: true, size: "small", recordItemId: record.Oid }))
+        )), /* @__PURE__ */ import_react11.default.createElement(import_antd7.EditButton, { hideText: true, size: "small", recordItemId: record.Oid }), /* @__PURE__ */ import_react11.default.createElement(import_antd7.DeleteButton, { hideText: true, size: "small", recordItemId: record.Oid }))
       }
     )
-  ), /* @__PURE__ */ import_react9.default.createElement(
-    import_lib8.Modal,
+  ), /* @__PURE__ */ import_react11.default.createElement(
+    import_lib9.Modal,
     {
       title: `Reset Password for ${selectedUser?.DisplayName || selectedUser?.UserName}`,
       open: isModalOpen,
@@ -18964,27 +19324,27 @@ var ApplicationUserList = () => {
       onOk: () => form.submit(),
       confirmLoading: isLoading
     },
-    /* @__PURE__ */ import_react9.default.createElement(import_lib8.Form, { form, onFinish: handleResetPasswordSubmit, layout: "vertical" }, /* @__PURE__ */ import_react9.default.createElement("div", { style: { display: "flex", gap: 8, alignItems: "flex-end" } }, /* @__PURE__ */ import_react9.default.createElement(
-      import_lib8.Form.Item,
+    /* @__PURE__ */ import_react11.default.createElement(import_lib9.Form, { form, onFinish: handleResetPasswordSubmit, layout: "vertical" }, /* @__PURE__ */ import_react11.default.createElement("div", { style: { display: "flex", gap: 8, alignItems: "flex-end" } }, /* @__PURE__ */ import_react11.default.createElement(
+      import_lib9.Form.Item,
       {
         name: "password",
         label: "New Password",
         style: { flex: 1, marginBottom: 0 },
         rules: [{ required: true, message: "Please input the new password!" }]
       },
-      /* @__PURE__ */ import_react9.default.createElement(import_lib8.Input.Password, { placeholder: "Enter new password" })
-    ), /* @__PURE__ */ import_react9.default.createElement(import_lib8.Tooltip, { title: "Generate Complex Password" }, /* @__PURE__ */ import_react9.default.createElement(import_lib8.Button, { icon: /* @__PURE__ */ import_react9.default.createElement(import_icons5.ThunderboltOutlined, null), onClick: generatePassword }))))
+      /* @__PURE__ */ import_react11.default.createElement(import_lib9.Input.Password, { placeholder: "Enter new password" })
+    ), /* @__PURE__ */ import_react11.default.createElement(import_lib9.Tooltip, { title: "Generate Complex Password" }, /* @__PURE__ */ import_react11.default.createElement(import_lib9.Button, { icon: /* @__PURE__ */ import_react11.default.createElement(import_icons5.ThunderboltOutlined, null), onClick: handleGeneratePassword }))))
   ));
 };
 
 // src/pages/application-users/create.tsx
-var import_react10 = __toESM(require("react"));
-var import_antd6 = require("@refinedev/antd");
-var import_lib9 = require("antd/lib");
+var import_react12 = __toESM(require("react"));
+var import_antd8 = require("@refinedev/antd");
+var import_lib10 = require("antd/lib");
 var ApplicationUserCreate = () => {
-  const { formProps, saveButtonProps } = (0, import_antd6.useForm)();
-  return /* @__PURE__ */ import_react10.default.createElement(import_antd6.Create, { saveButtonProps }, /* @__PURE__ */ import_react10.default.createElement(import_lib9.Form, { ...formProps, layout: "vertical" }, /* @__PURE__ */ import_react10.default.createElement(
-    import_lib9.Form.Item,
+  const { formProps, saveButtonProps } = (0, import_antd8.useForm)();
+  return /* @__PURE__ */ import_react12.default.createElement(import_antd8.Create, { saveButtonProps }, /* @__PURE__ */ import_react12.default.createElement(import_lib10.Form, { ...formProps, layout: "vertical" }, /* @__PURE__ */ import_react12.default.createElement(
+    import_lib10.Form.Item,
     {
       label: "User Name",
       name: "UserName",
@@ -18994,16 +19354,16 @@ var ApplicationUserCreate = () => {
         }
       ]
     },
-    /* @__PURE__ */ import_react10.default.createElement(import_lib9.Input, null)
-  ), /* @__PURE__ */ import_react10.default.createElement(
-    import_lib9.Form.Item,
+    /* @__PURE__ */ import_react12.default.createElement(import_lib10.Input, null)
+  ), /* @__PURE__ */ import_react12.default.createElement(
+    import_lib10.Form.Item,
     {
       label: "Display Name",
       name: "DisplayName"
     },
-    /* @__PURE__ */ import_react10.default.createElement(import_lib9.Input, null)
-  ), /* @__PURE__ */ import_react10.default.createElement(
-    import_lib9.Form.Item,
+    /* @__PURE__ */ import_react12.default.createElement(import_lib10.Input, null)
+  ), /* @__PURE__ */ import_react12.default.createElement(
+    import_lib10.Form.Item,
     {
       label: "Email",
       name: "Email",
@@ -19013,33 +19373,33 @@ var ApplicationUserCreate = () => {
         }
       ]
     },
-    /* @__PURE__ */ import_react10.default.createElement(import_lib9.Input, null)
-  ), /* @__PURE__ */ import_react10.default.createElement(
-    import_lib9.Form.Item,
+    /* @__PURE__ */ import_react12.default.createElement(import_lib10.Input, null)
+  ), /* @__PURE__ */ import_react12.default.createElement(
+    import_lib10.Form.Item,
     {
       label: "Is Active",
       name: "IsActive",
       valuePropName: "checked",
       initialValue: true
     },
-    /* @__PURE__ */ import_react10.default.createElement(import_lib9.Checkbox, null, "Active")
-  ), /* @__PURE__ */ import_react10.default.createElement(
-    import_lib9.Form.Item,
+    /* @__PURE__ */ import_react12.default.createElement(import_lib10.Checkbox, null, "Active")
+  ), /* @__PURE__ */ import_react12.default.createElement(
+    import_lib10.Form.Item,
     {
       label: "Photo",
       name: "Photo"
     },
-    /* @__PURE__ */ import_react10.default.createElement(Base64Upload, null)
+    /* @__PURE__ */ import_react12.default.createElement(Base64Upload, null)
   )));
 };
 
 // src/pages/application-users/edit.tsx
-var import_react11 = __toESM(require("react"));
-var import_antd7 = require("@refinedev/antd");
-var import_lib10 = require("antd/lib");
+var import_react13 = __toESM(require("react"));
+var import_antd9 = require("@refinedev/antd");
+var import_lib11 = require("antd/lib");
 var ApplicationUserEdit = () => {
-  const { message: message2 } = import_lib10.App.useApp();
-  const { formProps, saveButtonProps, id, form } = (0, import_antd7.useForm)({
+  const { message: message2 } = import_lib11.App.useApp();
+  const { formProps, saveButtonProps, id, form } = (0, import_antd9.useForm)({
     meta: {
       expand: ["Roles"]
     },
@@ -19068,7 +19428,7 @@ var ApplicationUserEdit = () => {
       }
     }
   });
-  const { selectProps: roleSelectProps } = (0, import_antd7.useSelect)({
+  const { selectProps: roleSelectProps } = (0, import_antd9.useSelect)({
     resource: "PermissionPolicyRole",
     optionLabel: "Name",
     optionValue: "Oid"
@@ -19077,8 +19437,8 @@ var ApplicationUserEdit = () => {
     const { Roles, ...userValues } = values;
     formProps.onFinish?.(userValues);
   };
-  return /* @__PURE__ */ import_react11.default.createElement(import_antd7.Edit, { saveButtonProps }, /* @__PURE__ */ import_react11.default.createElement(import_lib10.Form, { ...formProps, layout: "vertical", onFinish: handleOnFinish }, /* @__PURE__ */ import_react11.default.createElement(
-    import_lib10.Form.Item,
+  return /* @__PURE__ */ import_react13.default.createElement(import_antd9.Edit, { saveButtonProps }, /* @__PURE__ */ import_react13.default.createElement(import_lib11.Form, { ...formProps, layout: "vertical", onFinish: handleOnFinish }, /* @__PURE__ */ import_react13.default.createElement(
+    import_lib11.Form.Item,
     {
       label: "User Name",
       name: "UserName",
@@ -19088,16 +19448,16 @@ var ApplicationUserEdit = () => {
         }
       ]
     },
-    /* @__PURE__ */ import_react11.default.createElement(import_lib10.Input, null)
-  ), /* @__PURE__ */ import_react11.default.createElement(
-    import_lib10.Form.Item,
+    /* @__PURE__ */ import_react13.default.createElement(import_lib11.Input, null)
+  ), /* @__PURE__ */ import_react13.default.createElement(
+    import_lib11.Form.Item,
     {
       label: "Display Name",
       name: "DisplayName"
     },
-    /* @__PURE__ */ import_react11.default.createElement(import_lib10.Input, null)
-  ), /* @__PURE__ */ import_react11.default.createElement(
-    import_lib10.Form.Item,
+    /* @__PURE__ */ import_react13.default.createElement(import_lib11.Input, null)
+  ), /* @__PURE__ */ import_react13.default.createElement(
+    import_lib11.Form.Item,
     {
       label: "Email",
       name: "Email",
@@ -19107,17 +19467,17 @@ var ApplicationUserEdit = () => {
         }
       ]
     },
-    /* @__PURE__ */ import_react11.default.createElement(import_lib10.Input, null)
-  ), /* @__PURE__ */ import_react11.default.createElement(
-    import_lib10.Form.Item,
+    /* @__PURE__ */ import_react13.default.createElement(import_lib11.Input, null)
+  ), /* @__PURE__ */ import_react13.default.createElement(
+    import_lib11.Form.Item,
     {
       label: "Is Active",
       name: "IsActive",
       valuePropName: "checked"
     },
-    /* @__PURE__ */ import_react11.default.createElement(import_lib10.Checkbox, null, "Active")
-  ), /* @__PURE__ */ import_react11.default.createElement(
-    import_lib10.Form.Item,
+    /* @__PURE__ */ import_react13.default.createElement(import_lib11.Checkbox, null, "Active")
+  ), /* @__PURE__ */ import_react13.default.createElement(
+    import_lib11.Form.Item,
     {
       label: "Roles",
       name: "Roles",
@@ -19135,51 +19495,51 @@ var ApplicationUserEdit = () => {
         return { value: [] };
       }
     },
-    /* @__PURE__ */ import_react11.default.createElement(import_lib10.Select, { ...roleSelectProps, mode: "multiple" })
-  ), /* @__PURE__ */ import_react11.default.createElement(
-    import_lib10.Form.Item,
+    /* @__PURE__ */ import_react13.default.createElement(import_lib11.Select, { ...roleSelectProps, mode: "multiple" })
+  ), /* @__PURE__ */ import_react13.default.createElement(
+    import_lib11.Form.Item,
     {
       label: "Photo",
       name: "Photo"
     },
-    /* @__PURE__ */ import_react11.default.createElement(Base64Upload, null)
+    /* @__PURE__ */ import_react13.default.createElement(Base64Upload, null)
   )));
 };
 
 // src/pages/roles/list.tsx
-var import_react12 = __toESM(require("react"));
-var import_antd8 = require("@refinedev/antd");
-var import_lib11 = require("antd/lib");
+var import_react14 = __toESM(require("react"));
+var import_antd10 = require("@refinedev/antd");
+var import_lib12 = require("antd/lib");
 var RoleList = () => {
-  const { tableProps } = (0, import_antd8.useTable)({
+  const { tableProps } = (0, import_antd10.useTable)({
     syncWithLocation: true
   });
-  return /* @__PURE__ */ import_react12.default.createElement(import_antd8.List, null, /* @__PURE__ */ import_react12.default.createElement(import_lib11.Table, { ...tableProps, rowKey: "Oid" }, /* @__PURE__ */ import_react12.default.createElement(import_lib11.Table.Column, { dataIndex: "Name", title: "Name" }), /* @__PURE__ */ import_react12.default.createElement(
-    import_lib11.Table.Column,
+  return /* @__PURE__ */ import_react14.default.createElement(import_antd10.List, null, /* @__PURE__ */ import_react14.default.createElement(import_lib12.Table, { ...tableProps, rowKey: "Oid" }, /* @__PURE__ */ import_react14.default.createElement(import_lib12.Table.Column, { dataIndex: "Name", title: "Name" }), /* @__PURE__ */ import_react14.default.createElement(
+    import_lib12.Table.Column,
     {
       dataIndex: "IsAdministrative",
       title: "Is Administrative",
-      render: (value) => /* @__PURE__ */ import_react12.default.createElement(import_lib11.Checkbox, { checked: value, disabled: true })
+      render: (value) => /* @__PURE__ */ import_react14.default.createElement(import_lib12.Checkbox, { checked: value, disabled: true })
     }
-  ), /* @__PURE__ */ import_react12.default.createElement(import_lib11.Table.Column, { dataIndex: "PermissionPolicy", title: "Permission Policy" }), /* @__PURE__ */ import_react12.default.createElement(
-    import_lib11.Table.Column,
+  ), /* @__PURE__ */ import_react14.default.createElement(import_lib12.Table.Column, { dataIndex: "PermissionPolicy", title: "Permission Policy" }), /* @__PURE__ */ import_react14.default.createElement(
+    import_lib12.Table.Column,
     {
       title: "Actions",
       dataIndex: "actions",
-      render: (_, record) => /* @__PURE__ */ import_react12.default.createElement(import_lib11.Space, null, /* @__PURE__ */ import_react12.default.createElement(import_antd8.EditButton, { hideText: true, size: "small", recordItemId: record.Oid }), /* @__PURE__ */ import_react12.default.createElement(import_antd8.DeleteButton, { hideText: true, size: "small", recordItemId: record.Oid }))
+      render: (_, record) => /* @__PURE__ */ import_react14.default.createElement(import_lib12.Space, null, /* @__PURE__ */ import_react14.default.createElement(import_antd10.EditButton, { hideText: true, size: "small", recordItemId: record.Oid }), /* @__PURE__ */ import_react14.default.createElement(import_antd10.DeleteButton, { hideText: true, size: "small", recordItemId: record.Oid }))
     }
   )));
 };
 
 // src/pages/roles/create.tsx
-var import_react14 = __toESM(require("react"));
-var import_antd10 = require("@refinedev/antd");
-var import_lib13 = require("antd/lib");
+var import_react16 = __toESM(require("react"));
+var import_antd12 = require("@refinedev/antd");
+var import_lib14 = require("antd/lib");
 
 // src/pages/roles/TypePermissionList.tsx
-var import_react13 = __toESM(require("react"));
-var import_lib12 = require("antd/lib");
-var import_antd9 = require("@refinedev/antd");
+var import_react15 = __toESM(require("react"));
+var import_lib13 = require("antd/lib");
+var import_antd11 = require("@refinedev/antd");
 
 // src/hooks/useModelTypes.ts
 var import_react_query = require("@tanstack/react-query");
@@ -19206,8 +19566,8 @@ var useModelTypes = () => {
 };
 
 // src/pages/roles/TypePermissionList.tsx
-var PermissionSelect = (props) => /* @__PURE__ */ import_react13.default.createElement(
-  import_lib12.Select,
+var PermissionSelect = (props) => /* @__PURE__ */ import_react15.default.createElement(
+  import_lib13.Select,
   {
     ...props,
     allowClear: true,
@@ -19218,26 +19578,26 @@ var PermissionSelect = (props) => /* @__PURE__ */ import_react13.default.createE
   }
 );
 var TypePermissionFormFields = ({ typeOptions }) => {
-  return /* @__PURE__ */ import_react13.default.createElement(import_react13.default.Fragment, null, /* @__PURE__ */ import_react13.default.createElement(
-    import_lib12.Form.Item,
+  return /* @__PURE__ */ import_react15.default.createElement(import_react15.default.Fragment, null, /* @__PURE__ */ import_react15.default.createElement(
+    import_lib13.Form.Item,
     {
       label: "Target Type",
       name: "TargetTypeFullName",
       rules: [{ required: true }]
     },
-    /* @__PURE__ */ import_react13.default.createElement(
-      import_lib12.Select,
+    /* @__PURE__ */ import_react15.default.createElement(
+      import_lib13.Select,
       {
         showSearch: true,
         options: typeOptions,
         filterOption: (input, option) => (option?.label ?? "").toLowerCase().includes(input.toLowerCase())
       }
     )
-  ), /* @__PURE__ */ import_react13.default.createElement(import_lib12.Form.Item, { label: "Read State", name: "ReadState" }, /* @__PURE__ */ import_react13.default.createElement(PermissionSelect, null)), /* @__PURE__ */ import_react13.default.createElement(import_lib12.Form.Item, { label: "Write State", name: "WriteState" }, /* @__PURE__ */ import_react13.default.createElement(PermissionSelect, null)), /* @__PURE__ */ import_react13.default.createElement(import_lib12.Form.Item, { label: "Create State", name: "CreateState" }, /* @__PURE__ */ import_react13.default.createElement(PermissionSelect, null)), /* @__PURE__ */ import_react13.default.createElement(import_lib12.Form.Item, { label: "Delete State", name: "DeleteState" }, /* @__PURE__ */ import_react13.default.createElement(PermissionSelect, null)));
+  ), /* @__PURE__ */ import_react15.default.createElement(import_lib13.Form.Item, { label: "Read State", name: "ReadState" }, /* @__PURE__ */ import_react15.default.createElement(PermissionSelect, null)), /* @__PURE__ */ import_react15.default.createElement(import_lib13.Form.Item, { label: "Write State", name: "WriteState" }, /* @__PURE__ */ import_react15.default.createElement(PermissionSelect, null)), /* @__PURE__ */ import_react15.default.createElement(import_lib13.Form.Item, { label: "Create State", name: "CreateState" }, /* @__PURE__ */ import_react15.default.createElement(PermissionSelect, null)), /* @__PURE__ */ import_react15.default.createElement(import_lib13.Form.Item, { label: "Delete State", name: "DeleteState" }, /* @__PURE__ */ import_react15.default.createElement(PermissionSelect, null)));
 };
 var TypePermissionList = ({ masterId }) => {
   const { data: modelTypes } = useModelTypes();
-  const { tableProps, queryResult } = (0, import_antd9.useTable)({
+  const { tableProps, queryResult } = (0, import_antd11.useTable)({
     resource: "PermissionPolicyTypePermissionObject",
     filters: {
       permanent: [
@@ -19253,17 +19613,17 @@ var TypePermissionList = ({ masterId }) => {
       mode: "off"
     }
   });
-  const typeOptions = import_react13.default.useMemo(() => modelTypes?.filter((t) => t.IsCreatable && !t.IsDeprecated).map((t) => ({ label: t.Caption, value: t.Name })) || [], [modelTypes]);
-  const FormFieldsWrapper = import_react13.default.useMemo(() => {
-    return ({ mode }) => /* @__PURE__ */ import_react13.default.createElement(TypePermissionFormFields, { typeOptions });
+  const typeOptions = import_react15.default.useMemo(() => modelTypes?.filter((t) => t.IsCreatable && !t.IsDeprecated).map((t) => ({ label: t.Caption, value: t.Name })) || [], [modelTypes]);
+  const FormFieldsWrapper = import_react15.default.useMemo(() => {
+    return ({ mode }) => /* @__PURE__ */ import_react15.default.createElement(TypePermissionFormFields, { typeOptions });
   }, [typeOptions]);
-  const dataSource = import_react13.default.useMemo(() => {
+  const dataSource = import_react15.default.useMemo(() => {
     return (tableProps.dataSource || []).map((p) => ({
       ...p,
       TargetType: p.TargetType || p.TargetTypeFullName || ""
     }));
   }, [tableProps.dataSource]);
-  return /* @__PURE__ */ import_react13.default.createElement(
+  return /* @__PURE__ */ import_react15.default.createElement(
     RelatedList,
     {
       resource: "PermissionPolicyTypePermissionObject",
@@ -19274,30 +19634,30 @@ var TypePermissionList = ({ masterId }) => {
       modalTitle: "Type Permission",
       FormFields: FormFieldsWrapper
     },
-    /* @__PURE__ */ import_react13.default.createElement(
-      import_lib12.Table.Column,
+    /* @__PURE__ */ import_react15.default.createElement(
+      import_lib13.Table.Column,
       {
         dataIndex: "TargetType",
         title: "Target Type",
         render: (value) => typeOptions.find((t) => t.value === value)?.label || value
       }
     ),
-    /* @__PURE__ */ import_react13.default.createElement(import_lib12.Table.Column, { dataIndex: "ReadState", title: "Read" }),
-    /* @__PURE__ */ import_react13.default.createElement(import_lib12.Table.Column, { dataIndex: "WriteState", title: "Write" }),
-    /* @__PURE__ */ import_react13.default.createElement(import_lib12.Table.Column, { dataIndex: "CreateState", title: "Create" }),
-    /* @__PURE__ */ import_react13.default.createElement(import_lib12.Table.Column, { dataIndex: "DeleteState", title: "Delete" })
+    /* @__PURE__ */ import_react15.default.createElement(import_lib13.Table.Column, { dataIndex: "ReadState", title: "Read" }),
+    /* @__PURE__ */ import_react15.default.createElement(import_lib13.Table.Column, { dataIndex: "WriteState", title: "Write" }),
+    /* @__PURE__ */ import_react15.default.createElement(import_lib13.Table.Column, { dataIndex: "CreateState", title: "Create" }),
+    /* @__PURE__ */ import_react15.default.createElement(import_lib13.Table.Column, { dataIndex: "DeleteState", title: "Delete" })
   );
 };
 
 // src/pages/roles/create.tsx
 var RoleCreate = () => {
-  const [form] = import_lib13.Form.useForm();
-  const { formProps, saveButtonProps } = (0, import_antd10.useForm)();
+  const [form] = import_lib14.Form.useForm();
+  const { formProps, saveButtonProps } = (0, import_antd12.useForm)();
   const handleSave = () => {
     form.submit();
   };
-  return /* @__PURE__ */ import_react14.default.createElement(import_antd10.Create, { saveButtonProps: { ...saveButtonProps, onClick: handleSave } }, /* @__PURE__ */ import_react14.default.createElement(
-    import_lib13.Form,
+  return /* @__PURE__ */ import_react16.default.createElement(import_antd12.Create, { saveButtonProps: { ...saveButtonProps, onClick: handleSave } }, /* @__PURE__ */ import_react16.default.createElement(
+    import_lib14.Form,
     {
       ...formProps,
       form,
@@ -19306,34 +19666,34 @@ var RoleCreate = () => {
         return formProps.onFinish && formProps.onFinish(values);
       }
     },
-    /* @__PURE__ */ import_react14.default.createElement(
-      import_lib13.Form.Item,
+    /* @__PURE__ */ import_react16.default.createElement(
+      import_lib14.Form.Item,
       {
         label: "Name",
         name: "Name",
         rules: [{ required: true }]
       },
-      /* @__PURE__ */ import_react14.default.createElement(import_lib13.Input, null)
+      /* @__PURE__ */ import_react16.default.createElement(import_lib14.Input, null)
     ),
-    /* @__PURE__ */ import_react14.default.createElement(
-      import_lib13.Form.Item,
+    /* @__PURE__ */ import_react16.default.createElement(
+      import_lib14.Form.Item,
       {
         label: "Is Administrative",
         name: "IsAdministrative",
         valuePropName: "checked"
       },
-      /* @__PURE__ */ import_react14.default.createElement(import_lib13.Checkbox, null, "Is Administrative")
+      /* @__PURE__ */ import_react16.default.createElement(import_lib14.Checkbox, null, "Is Administrative")
     ),
-    /* @__PURE__ */ import_react14.default.createElement(
-      import_lib13.Form.Item,
+    /* @__PURE__ */ import_react16.default.createElement(
+      import_lib14.Form.Item,
       {
         label: "Permission Policy",
         name: "PermissionPolicy",
         initialValue: "DenyAllByDefault" /* DenyAllByDefault */,
         rules: [{ required: true }]
       },
-      /* @__PURE__ */ import_react14.default.createElement(
-        import_lib13.Select,
+      /* @__PURE__ */ import_react16.default.createElement(
+        import_lib14.Select,
         {
           options: [
             { label: "Deny All By Default", value: "DenyAllByDefault" /* DenyAllByDefault */ },
@@ -19343,21 +19703,21 @@ var RoleCreate = () => {
         }
       )
     ),
-    /* @__PURE__ */ import_react14.default.createElement(TypePermissionList, null)
+    /* @__PURE__ */ import_react16.default.createElement(TypePermissionList, null)
   ));
 };
 
 // src/pages/roles/edit.tsx
-var import_react15 = __toESM(require("react"));
-var import_antd11 = require("@refinedev/antd");
-var import_lib14 = require("antd/lib");
+var import_react17 = __toESM(require("react"));
+var import_antd13 = require("@refinedev/antd");
+var import_lib15 = require("antd/lib");
 var RoleEdit = () => {
-  const { formProps, saveButtonProps, id } = (0, import_antd11.useForm)();
+  const { formProps, saveButtonProps, id } = (0, import_antd13.useForm)();
   const handleSave = () => {
     formProps.form?.submit();
   };
-  return /* @__PURE__ */ import_react15.default.createElement(import_antd11.Edit, { saveButtonProps: { ...saveButtonProps, onClick: handleSave } }, /* @__PURE__ */ import_react15.default.createElement(
-    import_lib14.Form,
+  return /* @__PURE__ */ import_react17.default.createElement(import_antd13.Edit, { saveButtonProps: { ...saveButtonProps, onClick: handleSave } }, /* @__PURE__ */ import_react17.default.createElement(
+    import_lib15.Form,
     {
       ...formProps,
       layout: "vertical",
@@ -19366,33 +19726,33 @@ var RoleEdit = () => {
         return formProps.onFinish && formProps.onFinish(rest);
       }
     },
-    /* @__PURE__ */ import_react15.default.createElement(
-      import_lib14.Form.Item,
+    /* @__PURE__ */ import_react17.default.createElement(
+      import_lib15.Form.Item,
       {
         label: "Name",
         name: "Name",
         rules: [{ required: true }]
       },
-      /* @__PURE__ */ import_react15.default.createElement(import_lib14.Input, null)
+      /* @__PURE__ */ import_react17.default.createElement(import_lib15.Input, null)
     ),
-    /* @__PURE__ */ import_react15.default.createElement(
-      import_lib14.Form.Item,
+    /* @__PURE__ */ import_react17.default.createElement(
+      import_lib15.Form.Item,
       {
         label: "Is Administrative",
         name: "IsAdministrative",
         valuePropName: "checked"
       },
-      /* @__PURE__ */ import_react15.default.createElement(import_lib14.Checkbox, null, "Is Administrative")
+      /* @__PURE__ */ import_react17.default.createElement(import_lib15.Checkbox, null, "Is Administrative")
     ),
-    /* @__PURE__ */ import_react15.default.createElement(
-      import_lib14.Form.Item,
+    /* @__PURE__ */ import_react17.default.createElement(
+      import_lib15.Form.Item,
       {
         label: "Permission Policy",
         name: "PermissionPolicy",
         rules: [{ required: true }]
       },
-      /* @__PURE__ */ import_react15.default.createElement(
-        import_lib14.Select,
+      /* @__PURE__ */ import_react17.default.createElement(
+        import_lib15.Select,
         {
           options: [
             { label: "Deny All By Default", value: "DenyAllByDefault" /* DenyAllByDefault */ },
@@ -19402,7 +19762,7 @@ var RoleEdit = () => {
         }
       )
     ),
-    /* @__PURE__ */ import_react15.default.createElement(
+    /* @__PURE__ */ import_react17.default.createElement(
       TypePermissionList,
       {
         masterId: id?.toString()
@@ -19415,11 +19775,13 @@ var RoleEdit = () => {
   ApplicationUserCreate,
   ApplicationUserEdit,
   ApplicationUserList,
+  AuthCallback,
   Base64Upload,
   ColorModeContext,
   ColorModeContextProvider,
   Header,
   HttpError,
+  KeycloakLoginPage,
   LoginPage,
   RelatedList,
   RoleCreate,
@@ -19433,9 +19795,12 @@ var RoleEdit = () => {
   authProvider,
   authService,
   dataProvider,
+  generatePassword,
   getBaseUrl,
   httpClient,
+  keycloakService,
   parseJwt,
   useColorMode,
-  useModelTypes
+  useModelTypes,
+  validatePasswordStrength
 });