@dashadmin/dash-admin 1.3.24 → 1.3.26

package/dist/contexts/auth/DASHAuthenticationService.js

@@ -1 +1,679 @@
-var y=Object.defineProperty;var N=(m,t,e)=>t in m?y(m,t,{enumerable:!0,configurable:!0,writable:!0,value:e}):m[t]=e;var p=(m,t,e)=>N(m,typeof t!="symbol"?t+"":t,e);import{createAxiosInstance as E}from"@dashadmin/dash-axios-hook";import{setCookie as _}from"../../utils/cookies";import{getEnv as g}from"../../config/DASHAdminSystemConstants";import{AuthPersistenceService as h,syncLocalStorageToDeviceStore as u,clearDeviceStoreAuth as v}from"@dashadmin/dash-auth";import{DASHAppConstants as T}from"@dashadmin/dash-constants";import{DASHAdminSystemConstants as R}from"@dashadmin/dash-constants";import{dashStorage as r}from"@dashadmin/dash-utils";import{DASH_REDUX_ACTIONS as S,dispatchToRedux as k}from"@dashadmin/dash-admin-state";import{ACTION_UPDATE_AUTH as I}from"@dashadmin/dash-admin-state/src/redux/reducers/Auth";class w{constructor(){p(this,"axiosInstance");p(this,"REDIRECT_STORAGE_KEY","redirectAfterLogin");p(this,"logoutFromStorage",async t=>{console.log("logoutFromStorage",t),h.markAsLoggedOut(),await v();const{DashIPCService:e}=window;e&&e.action("stop-bg-service")});p(this,"getInitialAuthState",()=>{try{const t=h.getAuth(),e=h.getUser(),s=h.getToken(),n=JSON.parse(r.getItem("authenticated")||"false");if(console.log("\u{1F50D} DASHLightApp: Initializing auth state with persisted data:",{hasPersistedAuth:!!t,hasStoredUser:!!e,hasStoredToken:!!s,isAuthenticated:n,storedUser:e?`${e.name||e.email} (${e.id})`:null,persistedAuthStructure:t?Object.keys(t):null}),n&&e&&s&&t){console.log("\u2705 DASHLightApp: Using persisted auth state");const a={authenticated:!0,user:e,auth:t.auth||null};return console.log("\u{1F50D} DASHLightApp: Constructed auth state:",{authenticated:a.authenticated,user:a.user?`${a.user.name||a.user.email} (${a.user.id})`:null,auth:a.auth?"present":null}),a}return s&&!n?(console.log("\u{1F504} DASHLightApp: Token found but not authenticated, will initialize later"),{authenticated:!1,user:null,auth:null}):(console.log("\u2139\uFE0F DASHLightApp: No valid persisted auth found, using default auth state"),{authenticated:!1,user:null,auth:null})}catch(t){return console.error("\u274C DASHLightApp: Error getting initial auth state:",t),{authenticated:!1,user:null,auth:null}}});this.axiosInstance=E()}reinitializeAxios(t){this.axiosInstance=E(t)}sanitizeRedirectUrl(t){if(!t)return"/";const e=/^\/[A-Za-z]:\/|^[A-Za-z]:\/|^file:\/\//i.test(t),s=window.location.protocol==="file:"||g("IS_ELECTRON")==="true"||g("IS_ELECTRON")===!0;if((e||t.includes("index.html"))&&t.includes("#")){const n=t.split("#");if(n.length>1&&n[1]){const a=n[1];return console.log("Detected file/electron path with hash, extracting route:",a),"#"+a}}return e?(console.log("Detected Windows file path in redirect, resetting to #/"),"#/"):t.includes("/resources/app/")||t.includes("/dist/index.html")||t.includes("Program Files")?(console.log("Detected Electron app path in redirect, resetting to #/"),"#/"):s&&t.startsWith("/")&&!t.startsWith("#")?(console.log("Detected Electron environment with standard path, adding hash prefix:",t),"#"+t):t}setPendingRedirect(t){if(!t||t==="/"||t==="#/"||t==="#"){console.log("Skipping pending redirect for root path:",t);return}const e=this.sanitizeRedirectUrl(t);if(e==="/"||e==="#/"||e==="#"){console.log("Skipping pending redirect for sanitized root path:",e);return}console.log("Setting pending redirect:",t,"\u2192",e),r.setItem(this.REDIRECT_STORAGE_KEY,e)}getPendingRedirect(){return r.getItem(this.REDIRECT_STORAGE_KEY)}clearPendingRedirect(){console.log("Clearing pending redirect"),r.removeItem(this.REDIRECT_STORAGE_KEY)}getRoleRedirect(t){const e=t?.roles;if(Array.isArray(e)&&e.length>0){for(const s of e)if(s.redirect)return console.log("Found role redirect:",s.name,"->",s.redirect),s.redirect}return null}determineRedirectUrl(t,e=!0){let s=null;if(t)return console.log("Using backend redirect:",t,"(persist:",e,")"),s=t,e?(this.setPendingRedirect(s),this.getPendingRedirect()):this.sanitizeRedirectUrl(s);const n=this.getPendingRedirect();return n?(console.log("Using localStorage redirect:",n),n):(s=g("APP_DEFAULT_REDIRECT"),e?(this.setPendingRedirect(s),this.getPendingRedirect()):this.sanitizeRedirectUrl(s))}async login(t){if(console.log("=== DASH AUTH SERVICE LOGIN START ==="),console.log("Credentials:",{username:t.username,password:"***",redirect:t.redirect,meta:t.meta}),!(t.username&&t.password))return console.log("\u274C Missing credentials"),Promise.resolve({success:!1,error:"Username and password are required"});try{console.log("Making login request to /login");const e=await this.axiosInstance.post("/login",{email:t.username,password:t.password,redirect:t.redirect,meta:t.meta});if(console.log("Login response status:",e.status),console.log("Login response data:",e.data),e.status>=200&&e.status<=299){console.log("\u2705 Login response successful");const s=e.data.redirectTo;console.log("\u{1F3AF} Backend redirectTo:",s);const n=new Date;if(new Date().setDate(n.getDate()+2),e.data&&e.data.token){console.log("Setting token in storage"),r.setItem("token",e.data.token);const c=e.data?.refresh_token||e.data?.refreshToken;c&&(console.log("Setting refresh token in storage"),r.setItem("refreshToken",c)),e.data?.meta&&(console.log("Setting app"),r.setItem("app",e.data.meta.app)),await u()}else console.warn("\u26A0\uFE0F No token in login response");try{console.log("Getting auth data from:",g("APP_GETAUTH_ENDPOINT"));const c=await this.axiosInstance.get(g("APP_GETAUTH_ENDPOINT"));console.log("Auth response status:",c.status),console.log("Auth response data:",c.data);const i=c.data;let o=s;if(!o){const A=this.getRoleRedirect(i.user),f=i.redirect||i.user?.redirect||A||null;console.log("Auth response redirect:",f,"(role redirect:",A,")"),f?o=f:t.redirect&&t.redirect!=="/login"?o=t.redirect:o=g("APP_DEFAULT_REDIRECT")||"/"}console.log("\u{1F3AF} Final redirect determined:",o),h.saveAuth(i);const l=i.auth?.tenantSettings?.primary_language_code||i.user?.preferences?.locale;l&&(localStorage.setItem("dash-user-locale",l),window.dispatchEvent(new CustomEvent("dash:locale-change",{detail:{locale:l}})),console.log("\u{1F310} DASHAuthService: Dispatched locale change event:",l)),r.setItem("authenticated","true"),r.setItem("user",JSON.stringify(i.user)),r.setItem("roles",i.user?.roles?JSON.stringify(i.user.roles):JSON.stringify(T.system.GUEST_ROLE)),JSON.parse(R.system.ENABLE_TENANT_IMPERSONATION.toString())&&i.user?.tenant_id&&(r.setItem("tenant_id",i.user?.tenant_id),r.setItem("user_id",i.user?.id));const d={authenticated:!0,user:i.user,auth:i.auth,token:e.data.token||r.getItem("token"),roles:i.user?.roles};return console.log("\u{1F504} DASHAuthenticationService: Dispatching to Redux:",d),k(S.updateAuth(I,{user:d.user,authenticated:d.authenticated,auth:d.auth})),await u(),console.log("\u2705 Login completed successfully"),Promise.resolve({success:!0,token:d.token,user:d.user,auth:d.auth,redirectAfterLogin:o})}catch(c){return await u(),console.error("\u274C Error getting auth data:",c),this.logoutFromStorage("login get auth error"),Promise.resolve({success:!1,error:"Failed to get user authentication data"})}}else return await u(),console.log("\u274C Login response status not successful:",e.status),this.logoutFromStorage("login status error logout"),Promise.reject({success:!1,error:`Login failed with status: ${e.status}`})}catch(e){return await u(),console.error("\u274C Login error:",e),console.error("Error details:",{message:e?.message,response:e?.response?.data,status:e?.response?.status}),this.logoutFromStorage("login error logout"),await u(),Promise.reject({success:!1,error:e?.response?.data?.message||e?.message||"Login failed"})}}async initializeFromToken(){const t=r.getItem("token");if(!t)return{success:!1,error:"No token found"};try{console.log("Initializing auth from existing token...");const{data:e}=await this.axiosInstance.get(g("APP_GETAUTH_ENDPOINT")),s=this.getRoleRedirect(e.user),n=e.redirect||e.user?.redirect||s||null;console.log("Backend redirect found during token initialization:",n,"(role redirect:",s,")"),h.saveAuth(e),r.setItem("authenticated","true"),r.setItem("user",JSON.stringify(e.user)),r.setItem("roles",e.user?.roles?JSON.stringify(e.user.roles):JSON.stringify(T.system.GUEST_ROLE)),JSON.parse(R.system.ENABLE_TENANT_IMPERSONATION.toString())&&e.user?.tenant_id&&(r.setItem("tenant_id",e.user?.tenant_id),_("tenant_id",e.user?.tenant_id),r.setItem("user_id",e.user?.id),_("user_id",e.user?.id));const a={authenticated:!0,user:e.user,auth:e.auth,token:t,roles:e.user?.roles};console.log("\u{1F504} DASHAuthenticationService: Dispatching token init to Redux:",a),k(S.updateAuth(I,{user:a.user,authenticated:a.authenticated,auth:a.auth})),console.log("Auth initialized successfully from existing token"),await u();const c=this.determineRedirectUrl(n,!1);return{success:!0,token:t,user:e.user,auth:e.auth,redirectAfterLogin:c}}catch(e){return console.error("Error initializing auth from token:",e),this.logoutFromStorage("initialize from token error"),await u(),{success:!1,error:"Failed to initialize authentication from token"}}}async refreshToken(t){try{console.log("[DASHAuthService] Attempting to refresh token...");const e=await this.axiosInstance.post("/auth/refresh",{refresh_token:t});if(e.status>=200&&e.status<=299){const s=e.data;return s.token&&(r.setItem("token",s.token),console.log("[DASHAuthService] Access token updated")),s.refresh_token&&(r.setItem("refreshToken",s.refresh_token),console.log("[DASHAuthService] Refresh token rotated")),await u(),console.log("[DASHAuthService] Token refresh successful"),{success:!0,token:s.token,refreshToken:s.refresh_token,user:s.user}}else return console.warn("[DASHAuthService] Token refresh returned non-success status:",e.status),{success:!1,error:"Token refresh failed"}}catch(e){return console.error("[DASHAuthService] Token refresh error:",e),e?.response?.status===401&&(console.log("[DASHAuthService] Refresh token is invalid or expired"),this.logoutFromStorage("refresh_token_expired")),{success:!1,error:e?.response?.data?.message||e?.message||"Network error occurred"}}}async checkAuth(){const t=JSON.parse(r.getItem("authenticated")||"false"),e=JSON.parse(r.getItem("user")||"null");return!!(t&&e?.id&&h.getAuth())}async getIdentity(){if(!r.getItem("token"))throw new Error("No token present");try{const{data:e}=await this.axiosInstance.get(g("APP_GETAUTH_ENDPOINT"));return r.setItem("roles",e.user?.roles?JSON.stringify(e.user.roles):JSON.stringify(T.system.GUEST_ROLE)),r.setItem("authenticated","true"),r.setItem("user",JSON.stringify(e.user)),JSON.parse(R.system.ENABLE_TENANT_IMPERSONATION.toString())&&e.user?.tenant_id&&(r.setItem("tenant_id",e.user?.tenant_id),r.setItem("user_id",e.user?.id)),await u(),e}catch(e){throw this.logoutFromStorage("get identity error logout"),e}}async shouldRefreshToken(){return r.getItem("token")?!!r.getItem("refreshToken"):!1}async handleTokenRefresh(){const t=r.getItem("refreshToken");if(!t)return!1;try{const e=await this.refreshToken(t);if(e.success)return r.setItem("token",e.token),e.refreshToken&&r.setItem("refreshToken",e.refreshToken),await u(),!0}catch(e){console.error("Token refresh failed:",e),this.logoutFromStorage("token refresh failed")}return!1}async shouldInitializeFromToken(t){if(t)return!0;const e=r.getItem("token"),s=JSON.parse(r.getItem("authenticated")||"false"),n=r.getItem("user");return!!(e&&(!s||!n))}async initializeApp(t){console.log("Initializing DASH app authentication...");const e=!0;if(await this.shouldInitializeFromToken(t))return console.log("Token found but not fully authenticated, initializing..."),await this.initializeFromToken();{const n=r.getItem("token"),a=JSON.parse(r.getItem("authenticated")||"false"),c=r.getItem("user");if(n&&a&&c)if(console.log("Already authenticated, checking if auth refresh needed"),e)try{console.log("Refreshing auth data for latest tenant/user information...");const i=await this.axiosInstance.get(g("APP_GETAUTH_ENDPOINT"));console.log("Fresh auth response:",i.data);const o=i.data,l=this.getRoleRedirect(o.user),d=o.redirect||o.user?.redirect||l||null;console.log("Backend redirect found during app initialization:",d,"(role redirect:",l,")"),h.saveAuth(o);const A=o.auth?.tenantSettings?.primary_language_code||o.user?.preferences?.locale;A&&(localStorage.setItem("dash-user-locale",A),window.dispatchEvent(new CustomEvent("dash:locale-change",{detail:{locale:A}})),console.log("\u{1F310} DASHAuthService: Dispatched locale change event (app init):",A)),r.setItem("user",JSON.stringify(o.user)),r.setItem("roles",o.user?.roles?JSON.stringify(o.user.roles):JSON.stringify(T.system.GUEST_ROLE)),JSON.parse(R.system.ENABLE_TENANT_IMPERSONATION.toString())&&o.user?.tenant_id&&(r.setItem("tenant_id",o.user?.tenant_id),r.setItem("user_id",o.user?.id));const f={authenticated:!0,user:o.user,auth:o.auth,token:n,roles:o.user?.roles};console.log("\u{1F504} DASHAuthenticationService: Dispatching fresh auth to Redux:",f),k(S.updateAuth(I,{user:f.user,authenticated:f.authenticated,auth:f.auth}));const D=this.determineRedirectUrl(d,!1);return console.log("Auth data refreshed successfully"),await u(),{success:!0,token:n,user:o.user,auth:o.auth,redirectAfterLogin:D}}catch(i){console.error("Error refreshing auth data:",i),console.log("Falling back to existing auth data");const o=JSON.parse(c),l=h.getAuth();console.log("\u{1F504} DASHAuthenticationService: Dispatching existing auth to Redux"),k(S.updateAuth(I,{user:o,authenticated:!0,auth:l?.auth||null}));const d=this.determineRedirectUrl(void 0,!1);return await u(),{success:!0,token:n,user:o,auth:l?.auth||null,redirectAfterLogin:d}}else{console.log("No auth refresh needed, using existing data");const i=JSON.parse(c),o=h.getAuth();console.log("\u{1F504} DASHAuthenticationService: Dispatching existing auth to Redux"),k(S.updateAuth(I,{user:i,authenticated:!0,auth:o?.auth||null}));const l=this.determineRedirectUrl(void 0,!1);return await u(),{success:!0,token:n,user:i,auth:o?.auth||null,redirectAfterLogin:l}}else return console.log("No valid authentication found"),await u(),{success:!1,error:"No valid authentication found"}}}async loginWithReactAdmin(t,e){debugger;return await(e||this.login)(t)}}var j=new w;export{j as default};
+var __defProp = Object.defineProperty;
+var __defNormalProp = (obj, key, value) => key in obj ? __defProp(obj, key, { enumerable: true, configurable: true, writable: true, value }) : obj[key] = value;
+var __publicField = (obj, key, value) => __defNormalProp(obj, typeof key !== "symbol" ? key + "" : key, value);
+var __async = (__this, __arguments, generator) => {
+  return new Promise((resolve, reject) => {
+    var fulfilled = (value) => {
+      try {
+        step(generator.next(value));
+      } catch (e) {
+        reject(e);
+      }
+    };
+    var rejected = (value) => {
+      try {
+        step(generator.throw(value));
+      } catch (e) {
+        reject(e);
+      }
+    };
+    var step = (x) => x.done ? resolve(x.value) : Promise.resolve(x.value).then(fulfilled, rejected);
+    step((generator = generator.apply(__this, __arguments)).next());
+  });
+};
+import { createAxiosInstance } from "dash-axios-hook";
+import { setCookie } from "../../utils/cookies";
+import { getEnv } from "../../config/DASHAdminSystemConstants";
+import { AuthPersistenceService, syncLocalStorageToDeviceStore, clearDeviceStoreAuth } from "dash-auth";
+import { DASHAppConstants } from "dash-constants";
+import { DASHAdminSystemConstants } from "dash-constants";
+import { dashStorage } from "dash-utils";
+import { DASH_REDUX_ACTIONS, dispatchToRedux } from "dash-admin-state";
+import { ACTION_UPDATE_AUTH } from "dash-admin-state/src/redux/reducers/Auth";
+class DASHAuthenticationService {
+  constructor() {
+    __publicField(this, "axiosInstance");
+    __publicField(this, "REDIRECT_STORAGE_KEY", "redirectAfterLogin");
+    __publicField(this, "logoutFromStorage", (reason) => __async(null, null, function* () {
+      console.log("logoutFromStorage", reason);
+      AuthPersistenceService.markAsLoggedOut();
+      yield clearDeviceStoreAuth();
+      const { DashIPCService } = window;
+      DashIPCService && DashIPCService.action("stop-bg-service");
+    }));
+    // Function to get initial auth state with persisted values
+    __publicField(this, "getInitialAuthState", () => {
+      try {
+        const persistedAuth = AuthPersistenceService.getAuth();
+        const storedUser = AuthPersistenceService.getUser();
+        const storedToken = AuthPersistenceService.getToken();
+        const isAuthenticated = JSON.parse(dashStorage.getItem("authenticated") || "false");
+        console.log("\u{1F50D} DASHLightApp: Initializing auth state with persisted data:", {
+          hasPersistedAuth: !!persistedAuth,
+          hasStoredUser: !!storedUser,
+          hasStoredToken: !!storedToken,
+          isAuthenticated,
+          storedUser: storedUser ? `${storedUser.name || storedUser.email} (${storedUser.id})` : null,
+          persistedAuthStructure: persistedAuth ? Object.keys(persistedAuth) : null
+        });
+        if (isAuthenticated && storedUser && storedToken && persistedAuth) {
+          console.log("\u2705 DASHLightApp: Using persisted auth state");
+          const authState = {
+            authenticated: true,
+            user: storedUser,
+            // This should be the actual user object
+            auth: persistedAuth.auth || null
+            // This should be the actual auth object
+          };
+          console.log("\u{1F50D} DASHLightApp: Constructed auth state:", {
+            authenticated: authState.authenticated,
+            user: authState.user ? `${authState.user.name || authState.user.email} (${authState.user.id})` : null,
+            auth: authState.auth ? "present" : null
+          });
+          return authState;
+        }
+        if (storedToken && !isAuthenticated) {
+          console.log("\u{1F504} DASHLightApp: Token found but not authenticated, will initialize later");
+          return {
+            authenticated: false,
+            user: null,
+            auth: null
+          };
+        }
+        console.log("\u2139\uFE0F DASHLightApp: No valid persisted auth found, using default auth state");
+        return {
+          authenticated: false,
+          user: null,
+          auth: null
+        };
+      } catch (error) {
+        console.error("\u274C DASHLightApp: Error getting initial auth state:", error);
+        return {
+          authenticated: false,
+          user: null,
+          auth: null
+        };
+      }
+    });
+    this.axiosInstance = createAxiosInstance();
+  }
+  // Method to recreate axios instance with new options if needed
+  reinitializeAxios(options) {
+    this.axiosInstance = createAxiosInstance(options);
+  }
+  // Helper to sanitize redirect URLs for Electron file:// paths
+  sanitizeRedirectUrl(url) {
+    if (!url) return "/";
+    const isWindowsFilePath = /^\/[A-Za-z]:\/|^[A-Za-z]:\/|^file:\/\//i.test(url);
+    const isElectron = window.location.protocol === "file:" || getEnv("IS_ELECTRON") === "true" || getEnv("IS_ELECTRON") === true;
+    if (isWindowsFilePath || url.includes("index.html")) {
+      if (url.includes("#")) {
+        const parts = url.split("#");
+        if (parts.length > 1 && parts[1]) {
+          const route = parts[1];
+          console.log("Detected file/electron path with hash, extracting route:", route);
+          return "#" + route;
+        }
+      }
+    }
+    if (isWindowsFilePath) {
+      console.log("Detected Windows file path in redirect, resetting to #/");
+      return "#/";
+    }
+    if (url.includes("/resources/app/") || url.includes("/dist/index.html") || url.includes("Program Files")) {
+      console.log("Detected Electron app path in redirect, resetting to #/");
+      return "#/";
+    }
+    if (isElectron && url.startsWith("/") && !url.startsWith("#")) {
+      console.log("Detected Electron environment with standard path, adding hash prefix:", url);
+      return "#" + url;
+    }
+    return url;
+  }
+  // Method to set pending redirect URL
+  setPendingRedirect(url) {
+    if (!url || url === "/" || url === "#/" || url === "#") {
+      console.log("Skipping pending redirect for root path:", url);
+      return;
+    }
+    const sanitizedUrl = this.sanitizeRedirectUrl(url);
+    if (sanitizedUrl === "/" || sanitizedUrl === "#/" || sanitizedUrl === "#") {
+      console.log("Skipping pending redirect for sanitized root path:", sanitizedUrl);
+      return;
+    }
+    console.log("Setting pending redirect:", url, "\u2192", sanitizedUrl);
+    dashStorage.setItem(this.REDIRECT_STORAGE_KEY, sanitizedUrl);
+  }
+  // Method to get pending redirect URL
+  getPendingRedirect() {
+    return dashStorage.getItem(this.REDIRECT_STORAGE_KEY);
+  }
+  // Method to clear pending redirect URL
+  clearPendingRedirect() {
+    console.log("Clearing pending redirect");
+    dashStorage.removeItem(this.REDIRECT_STORAGE_KEY);
+  }
+  // Helper to get redirect URL from user's first role with a configured redirect
+  getRoleRedirect(user) {
+    const roles = user == null ? void 0 : user.roles;
+    if (Array.isArray(roles) && roles.length > 0) {
+      for (const role of roles) {
+        if (role.redirect) {
+          console.log("Found role redirect:", role.name, "->", role.redirect);
+          return role.redirect;
+        }
+      }
+    }
+    return null;
+  }
+  // Method to determine final redirect URL (backend takes precedence over localStorage)
+  // persistRedirect: if true, saves to storage (use during login). If false, just returns the value (use during app init).
+  determineRedirectUrl(backendRedirect, persistRedirect = true) {
+    let val = null;
+    if (backendRedirect) {
+      console.log("Using backend redirect:", backendRedirect, "(persist:", persistRedirect, ")");
+      val = backendRedirect;
+      if (persistRedirect) {
+        this.setPendingRedirect(val);
+        return this.getPendingRedirect();
+      }
+      return this.sanitizeRedirectUrl(val);
+    }
+    const localStorageRedirect = this.getPendingRedirect();
+    if (localStorageRedirect) {
+      console.log("Using localStorage redirect:", localStorageRedirect);
+      return localStorageRedirect;
+    }
+    val = getEnv("APP_DEFAULT_REDIRECT");
+    if (persistRedirect) {
+      this.setPendingRedirect(val);
+      return this.getPendingRedirect();
+    }
+    return this.sanitizeRedirectUrl(val);
+  }
+  // Update the login method to dispatch to Redux directly
+  login(credentials) {
+    return __async(this, null, function* () {
+      var _a, _b, _c, _d, _e, _f, _g, _h, _i, _j, _k, _l, _m, _n, _o, _p, _q;
+      console.log("=== DASH AUTH SERVICE LOGIN START ===");
+      console.log("Credentials:", { username: credentials.username, password: "***", redirect: credentials.redirect, meta: credentials.meta });
+      if (!(credentials.username && credentials.password)) {
+        console.log("\u274C Missing credentials");
+        return Promise.resolve({
+          success: false,
+          error: "Username and password are required"
+        });
+      }
+      try {
+        console.log("Making login request to /login");
+        const loginResponse = yield this.axiosInstance.post("/login", {
+          email: credentials.username,
+          password: credentials.password,
+          redirect: credentials.redirect,
+          meta: credentials.meta
+        });
+        console.log("Login response status:", loginResponse.status);
+        console.log("Login response data:", loginResponse.data);
+        if (loginResponse.status >= 200 && loginResponse.status <= 299) {
+          console.log("\u2705 Login response successful");
+          const backendRedirectTo = loginResponse.data.redirectTo;
+          console.log("\u{1F3AF} Backend redirectTo:", backendRedirectTo);
+          const today = /* @__PURE__ */ new Date();
+          const expires = /* @__PURE__ */ new Date();
+          expires.setDate(today.getDate() + 2);
+          if (loginResponse.data && loginResponse.data.token) {
+            console.log("Setting token in storage");
+            dashStorage.setItem("token", loginResponse.data.token);
+            const refreshToken = ((_a = loginResponse.data) == null ? void 0 : _a.refresh_token) || ((_b = loginResponse.data) == null ? void 0 : _b.refreshToken);
+            if (refreshToken) {
+              console.log("Setting refresh token in storage");
+              dashStorage.setItem("refreshToken", refreshToken);
+            }
+            if ((_c = loginResponse.data) == null ? void 0 : _c.meta) {
+              console.log("Setting app");
+              dashStorage.setItem("app", loginResponse.data.meta.app);
+            }
+            yield syncLocalStorageToDeviceStore();
+          } else {
+            console.warn("\u26A0\uFE0F No token in login response");
+          }
+          try {
+            console.log("Getting auth data from:", getEnv("APP_GETAUTH_ENDPOINT"));
+            const authResponse = yield this.axiosInstance.get(getEnv("APP_GETAUTH_ENDPOINT"));
+            console.log("Auth response status:", authResponse.status);
+            console.log("Auth response data:", authResponse.data);
+            const auth = authResponse.data;
+            let finalRedirect = backendRedirectTo;
+            if (!finalRedirect) {
+              const roleRedirect = this.getRoleRedirect(auth.user);
+              const authRedirect = auth.redirect || ((_d = auth.user) == null ? void 0 : _d.redirect) || roleRedirect || null;
+              console.log("Auth response redirect:", authRedirect, "(role redirect:", roleRedirect, ")");
+              if (authRedirect) {
+                finalRedirect = authRedirect;
+              } else if (credentials.redirect && credentials.redirect !== "/login") {
+                finalRedirect = credentials.redirect;
+              } else {
+                finalRedirect = getEnv("APP_DEFAULT_REDIRECT") || "/";
+              }
+            }
+            console.log("\u{1F3AF} Final redirect determined:", finalRedirect);
+            AuthPersistenceService.saveAuth(auth);
+            const languageCode = ((_f = (_e = auth.auth) == null ? void 0 : _e.tenantSettings) == null ? void 0 : _f.primary_language_code) || ((_h = (_g = auth.user) == null ? void 0 : _g.preferences) == null ? void 0 : _h.locale);
+            if (languageCode) {
+              localStorage.setItem("dash-user-locale", languageCode);
+              window.dispatchEvent(new CustomEvent("dash:locale-change", {
+                detail: { locale: languageCode }
+              }));
+              console.log("\u{1F310} DASHAuthService: Dispatched locale change event:", languageCode);
+            }
+            dashStorage.setItem("authenticated", "true");
+            dashStorage.setItem("user", JSON.stringify(auth.user));
+            dashStorage.setItem(
+              "roles",
+              ((_i = auth.user) == null ? void 0 : _i.roles) ? JSON.stringify(auth.user.roles) : JSON.stringify(DASHAppConstants.system.GUEST_ROLE)
+            );
+            if (JSON.parse(
+              DASHAdminSystemConstants.system.ENABLE_TENANT_IMPERSONATION.toString()
+            ) && ((_j = auth.user) == null ? void 0 : _j.tenant_id)) {
+              dashStorage.setItem("tenant_id", (_k = auth.user) == null ? void 0 : _k.tenant_id);
+              dashStorage.setItem("user_id", (_l = auth.user) == null ? void 0 : _l.id);
+            }
+            const resultObject = {
+              authenticated: true,
+              user: auth.user,
+              auth: auth.auth,
+              token: loginResponse.data.token || dashStorage.getItem("token"),
+              roles: (_m = auth.user) == null ? void 0 : _m.roles
+            };
+            console.log("\u{1F504} DASHAuthenticationService: Dispatching to Redux:", resultObject);
+            dispatchToRedux(
+              DASH_REDUX_ACTIONS.updateAuth(ACTION_UPDATE_AUTH, {
+                user: resultObject.user,
+                authenticated: resultObject.authenticated,
+                auth: resultObject.auth
+              })
+            );
+            yield syncLocalStorageToDeviceStore();
+            console.log("\u2705 Login completed successfully");
+            return Promise.resolve({
+              success: true,
+              token: resultObject.token,
+              user: resultObject.user,
+              auth: resultObject.auth,
+              redirectAfterLogin: finalRedirect
+              // ✅ Use the backend redirectTo
+            });
+          } catch (error) {
+            yield syncLocalStorageToDeviceStore();
+            console.error("\u274C Error getting auth data:", error);
+            this.logoutFromStorage("login get auth error");
+            return Promise.resolve({
+              success: false,
+              error: "Failed to get user authentication data"
+            });
+          }
+        } else {
+          yield syncLocalStorageToDeviceStore();
+          console.log("\u274C Login response status not successful:", loginResponse.status);
+          this.logoutFromStorage("login status error logout");
+          return Promise.reject({
+            success: false,
+            error: `Login failed with status: ${loginResponse.status}`
+          });
+        }
+      } catch (error) {
+        yield syncLocalStorageToDeviceStore();
+        console.error("\u274C Login error:", error);
+        console.error("Error details:", {
+          message: error == null ? void 0 : error.message,
+          response: (_n = error == null ? void 0 : error.response) == null ? void 0 : _n.data,
+          status: (_o = error == null ? void 0 : error.response) == null ? void 0 : _o.status
+        });
+        this.logoutFromStorage("login error logout");
+        yield syncLocalStorageToDeviceStore();
+        return Promise.reject({
+          success: false,
+          error: ((_q = (_p = error == null ? void 0 : error.response) == null ? void 0 : _p.data) == null ? void 0 : _q.message) || (error == null ? void 0 : error.message) || "Login failed"
+        });
+      }
+    });
+  }
+  // Update the initializeFromToken method to dispatch to Redux directly
+  initializeFromToken() {
+    return __async(this, null, function* () {
+      var _a, _b, _c, _d, _e, _f, _g, _h;
+      const token = dashStorage.getItem("token");
+      if (!token) {
+        return {
+          success: false,
+          error: "No token found"
+        };
+      }
+      try {
+        console.log("Initializing auth from existing token...");
+        const { data: auth } = yield this.axiosInstance.get(getEnv("APP_GETAUTH_ENDPOINT"));
+        const roleRedirect = this.getRoleRedirect(auth.user);
+        const backendRedirect = auth.redirect || ((_a = auth.user) == null ? void 0 : _a.redirect) || roleRedirect || null;
+        console.log("Backend redirect found during token initialization:", backendRedirect, "(role redirect:", roleRedirect, ")");
+        AuthPersistenceService.saveAuth(auth);
+        dashStorage.setItem("authenticated", "true");
+        dashStorage.setItem("user", JSON.stringify(auth.user));
+        dashStorage.setItem(
+          "roles",
+          ((_b = auth.user) == null ? void 0 : _b.roles) ? JSON.stringify(auth.user.roles) : JSON.stringify(DASHAppConstants.system.GUEST_ROLE)
+        );
+        if (JSON.parse(
+          DASHAdminSystemConstants.system.ENABLE_TENANT_IMPERSONATION.toString()
+        ) && ((_c = auth.user) == null ? void 0 : _c.tenant_id)) {
+          dashStorage.setItem("tenant_id", (_d = auth.user) == null ? void 0 : _d.tenant_id);
+          setCookie("tenant_id", (_e = auth.user) == null ? void 0 : _e.tenant_id);
+          dashStorage.setItem("user_id", (_f = auth.user) == null ? void 0 : _f.id);
+          setCookie("user_id", (_g = auth.user) == null ? void 0 : _g.id);
+        }
+        const resultObject = {
+          authenticated: true,
+          user: auth.user,
+          auth: auth.auth,
+          token,
+          roles: (_h = auth.user) == null ? void 0 : _h.roles
+        };
+        console.log("\u{1F504} DASHAuthenticationService: Dispatching token init to Redux:", resultObject);
+        dispatchToRedux(
+          DASH_REDUX_ACTIONS.updateAuth(ACTION_UPDATE_AUTH, {
+            user: resultObject.user,
+            authenticated: resultObject.authenticated,
+            auth: resultObject.auth
+          })
+        );
+        console.log("Auth initialized successfully from existing token");
+        yield syncLocalStorageToDeviceStore();
+        const redirectAfterLogin = this.determineRedirectUrl(backendRedirect, false);
+        return {
+          success: true,
+          token,
+          user: auth.user,
+          auth: auth.auth,
+          redirectAfterLogin
+        };
+      } catch (error) {
+        console.error("Error initializing auth from token:", error);
+        this.logoutFromStorage("initialize from token error");
+        yield syncLocalStorageToDeviceStore();
+        return {
+          success: false,
+          error: "Failed to initialize authentication from token"
+        };
+      }
+    });
+  }
+  refreshToken(refreshToken) {
+    return __async(this, null, function* () {
+      var _a, _b, _c;
+      try {
+        console.log("[DASHAuthService] Attempting to refresh token...");
+        const response = yield this.axiosInstance.post("/auth/refresh", {
+          refresh_token: refreshToken
+        });
+        if (response.status >= 200 && response.status <= 299) {
+          const data = response.data;
+          if (data.token) {
+            dashStorage.setItem("token", data.token);
+            console.log("[DASHAuthService] Access token updated");
+          }
+          if (data.refresh_token) {
+            dashStorage.setItem("refreshToken", data.refresh_token);
+            console.log("[DASHAuthService] Refresh token rotated");
+          }
+          yield syncLocalStorageToDeviceStore();
+          console.log("[DASHAuthService] Token refresh successful");
+          return {
+            success: true,
+            token: data.token,
+            refreshToken: data.refresh_token,
+            user: data.user
+          };
+        } else {
+          console.warn("[DASHAuthService] Token refresh returned non-success status:", response.status);
+          return {
+            success: false,
+            error: "Token refresh failed"
+          };
+        }
+      } catch (error) {
+        console.error("[DASHAuthService] Token refresh error:", error);
+        if (((_a = error == null ? void 0 : error.response) == null ? void 0 : _a.status) === 401) {
+          console.log("[DASHAuthService] Refresh token is invalid or expired");
+          this.logoutFromStorage("refresh_token_expired");
+        }
+        return {
+          success: false,
+          error: ((_c = (_b = error == null ? void 0 : error.response) == null ? void 0 : _b.data) == null ? void 0 : _c.message) || (error == null ? void 0 : error.message) || "Network error occurred"
+        };
+      }
+    });
+  }
+  checkAuth() {
+    return __async(this, null, function* () {
+      const isAuthenticated = JSON.parse(dashStorage.getItem("authenticated") || "false");
+      const user = JSON.parse(dashStorage.getItem("user") || "null");
+      if (isAuthenticated && (user == null ? void 0 : user.id)) {
+        const persistedAuth = AuthPersistenceService.getAuth();
+        if (persistedAuth) {
+          return true;
+        }
+      }
+      return false;
+    });
+  }
+  getIdentity() {
+    return __async(this, null, function* () {
+      var _a, _b, _c, _d;
+      const token = dashStorage.getItem("token");
+      if (!token) {
+        throw new Error("No token present");
+      }
+      try {
+        const { data: auth } = yield this.axiosInstance.get(getEnv("APP_GETAUTH_ENDPOINT"));
+        dashStorage.setItem(
+          "roles",
+          ((_a = auth.user) == null ? void 0 : _a.roles) ? JSON.stringify(auth.user.roles) : JSON.stringify(DASHAppConstants.system.GUEST_ROLE)
+        );
+        dashStorage.setItem("authenticated", "true");
+        dashStorage.setItem("user", JSON.stringify(auth.user));
+        if (JSON.parse(
+          DASHAdminSystemConstants.system.ENABLE_TENANT_IMPERSONATION.toString()
+        ) && ((_b = auth.user) == null ? void 0 : _b.tenant_id)) {
+          dashStorage.setItem("tenant_id", (_c = auth.user) == null ? void 0 : _c.tenant_id);
+          dashStorage.setItem("user_id", (_d = auth.user) == null ? void 0 : _d.id);
+        }
+        yield syncLocalStorageToDeviceStore();
+        return auth;
+      } catch (error) {
+        this.logoutFromStorage("get identity error logout");
+        throw error;
+      }
+    });
+  }
+  // Rest of your methods remain the same...
+  shouldRefreshToken() {
+    return __async(this, null, function* () {
+      const token = dashStorage.getItem("token");
+      if (!token) return false;
+      const refreshToken = dashStorage.getItem("refreshToken");
+      return !!refreshToken;
+    });
+  }
+  handleTokenRefresh() {
+    return __async(this, null, function* () {
+      const refreshToken = dashStorage.getItem("refreshToken");
+      if (!refreshToken) return false;
+      try {
+        const refreshResponse = yield this.refreshToken(refreshToken);
+        if (refreshResponse.success) {
+          dashStorage.setItem("token", refreshResponse.token);
+          if (refreshResponse.refreshToken) {
+            dashStorage.setItem("refreshToken", refreshResponse.refreshToken);
+          }
+          yield syncLocalStorageToDeviceStore();
+          return true;
+        }
+      } catch (error) {
+        console.error("Token refresh failed:", error);
+        this.logoutFromStorage("token refresh failed");
+      }
+      return false;
+    });
+  }
+  // Method to check if we should initialize from token on app load
+  shouldInitializeFromToken(forceGetAuth) {
+    return __async(this, null, function* () {
+      if (forceGetAuth) {
+        return true;
+      }
+      ;
+      const token = dashStorage.getItem("token");
+      const isAuthenticated = JSON.parse(dashStorage.getItem("authenticated") || "false");
+      const user = dashStorage.getItem("user");
+      return !!(token && (!isAuthenticated || !user));
+    });
+  }
+  // Update the initializeApp method to dispatch to Redux directly
+  initializeApp(forceGetAuth) {
+    return __async(this, null, function* () {
+      var _a, _b, _c, _d, _e, _f, _g, _h, _i, _j;
+      console.log("Initializing DASH app authentication...");
+      const USES_GET_AUTH = true;
+      const shouldInit = yield this.shouldInitializeFromToken(forceGetAuth);
+      if (shouldInit) {
+        console.log("Token found but not fully authenticated, initializing...");
+        return yield this.initializeFromToken();
+      } else {
+        const token = dashStorage.getItem("token");
+        const isAuthenticated = JSON.parse(dashStorage.getItem("authenticated") || "false");
+        const user = dashStorage.getItem("user");
+        if (token && isAuthenticated && user) {
+          console.log("Already authenticated, checking if auth refresh needed");
+          if (USES_GET_AUTH) {
+            try {
+              console.log("Refreshing auth data for latest tenant/user information...");
+              const authResponse = yield this.axiosInstance.get(getEnv("APP_GETAUTH_ENDPOINT"));
+              console.log("Fresh auth response:", authResponse.data);
+              const auth = authResponse.data;
+              const roleRedirect = this.getRoleRedirect(auth.user);
+              const backendRedirect = auth.redirect || ((_a = auth.user) == null ? void 0 : _a.redirect) || roleRedirect || null;
+              console.log("Backend redirect found during app initialization:", backendRedirect, "(role redirect:", roleRedirect, ")");
+              AuthPersistenceService.saveAuth(auth);
+              const languageCode = ((_c = (_b = auth.auth) == null ? void 0 : _b.tenantSettings) == null ? void 0 : _c.primary_language_code) || ((_e = (_d = auth.user) == null ? void 0 : _d.preferences) == null ? void 0 : _e.locale);
+              if (languageCode) {
+                localStorage.setItem("dash-user-locale", languageCode);
+                window.dispatchEvent(new CustomEvent("dash:locale-change", {
+                  detail: { locale: languageCode }
+                }));
+                console.log("\u{1F310} DASHAuthService: Dispatched locale change event (app init):", languageCode);
+              }
+              dashStorage.setItem("user", JSON.stringify(auth.user));
+              dashStorage.setItem(
+                "roles",
+                ((_f = auth.user) == null ? void 0 : _f.roles) ? JSON.stringify(auth.user.roles) : JSON.stringify(DASHAppConstants.system.GUEST_ROLE)
+              );
+              if (JSON.parse(
+                DASHAdminSystemConstants.system.ENABLE_TENANT_IMPERSONATION.toString()
+              ) && ((_g = auth.user) == null ? void 0 : _g.tenant_id)) {
+                dashStorage.setItem("tenant_id", (_h = auth.user) == null ? void 0 : _h.tenant_id);
+                dashStorage.setItem("user_id", (_i = auth.user) == null ? void 0 : _i.id);
+              }
+              const resultObject = {
+                authenticated: true,
+                user: auth.user,
+                auth: auth.auth,
+                token,
+                roles: (_j = auth.user) == null ? void 0 : _j.roles
+              };
+              console.log("\u{1F504} DASHAuthenticationService: Dispatching fresh auth to Redux:", resultObject);
+              dispatchToRedux(
+                DASH_REDUX_ACTIONS.updateAuth(ACTION_UPDATE_AUTH, {
+                  user: resultObject.user,
+                  authenticated: resultObject.authenticated,
+                  auth: resultObject.auth
+                })
+              );
+              const redirectAfterLogin = this.determineRedirectUrl(backendRedirect, false);
+              console.log("Auth data refreshed successfully");
+              yield syncLocalStorageToDeviceStore();
+              return {
+                success: true,
+                token,
+                user: auth.user,
+                auth: auth.auth,
+                redirectAfterLogin
+              };
+            } catch (error) {
+              console.error("Error refreshing auth data:", error);
+              console.log("Falling back to existing auth data");
+              const existingUser = JSON.parse(user);
+              const persistedAuth = AuthPersistenceService.getAuth();
+              console.log("\u{1F504} DASHAuthenticationService: Dispatching existing auth to Redux");
+              dispatchToRedux(
+                DASH_REDUX_ACTIONS.updateAuth(ACTION_UPDATE_AUTH, {
+                  user: existingUser,
+                  authenticated: true,
+                  auth: (persistedAuth == null ? void 0 : persistedAuth.auth) || null
+                })
+              );
+              const redirectAfterLogin = this.determineRedirectUrl(void 0, false);
+              yield syncLocalStorageToDeviceStore();
+              return {
+                success: true,
+                token,
+                user: existingUser,
+                auth: (persistedAuth == null ? void 0 : persistedAuth.auth) || null,
+                redirectAfterLogin
+              };
+            }
+          } else {
+            console.log("No auth refresh needed, using existing data");
+            const existingUser = JSON.parse(user);
+            const persistedAuth = AuthPersistenceService.getAuth();
+            console.log("\u{1F504} DASHAuthenticationService: Dispatching existing auth to Redux");
+            dispatchToRedux(
+              DASH_REDUX_ACTIONS.updateAuth(ACTION_UPDATE_AUTH, {
+                user: existingUser,
+                authenticated: true,
+                auth: (persistedAuth == null ? void 0 : persistedAuth.auth) || null
+              })
+            );
+            const redirectAfterLogin = this.determineRedirectUrl(void 0, false);
+            yield syncLocalStorageToDeviceStore();
+            return {
+              success: true,
+              token,
+              user: existingUser,
+              auth: (persistedAuth == null ? void 0 : persistedAuth.auth) || null,
+              redirectAfterLogin
+            };
+          }
+        } else {
+          console.log("No valid authentication found");
+          yield syncLocalStorageToDeviceStore();
+          return {
+            success: false,
+            error: "No valid authentication found"
+          };
+        }
+      }
+    });
+  }
+  // Method to integrate with React Admin
+  loginWithReactAdmin(credentials, reactAdminLogin) {
+    return __async(this, null, function* () {
+      debugger;
+      const effectiveLogin = reactAdminLogin || this.login;
+      const authResponse = yield effectiveLogin(credentials);
+      return authResponse;
+    });
+  }
+}
+var DASHAuthenticationService_default = new DASHAuthenticationService();
+export {
+  DASHAuthenticationService_default as default
+};