@dereekb/dbx-firebase 13.11.14 → 13.11.16

package/fesm2022/dereekb-dbx-firebase-oidc.mjs

@@ -31,10 +31,10 @@ import { DatePipe, CommonModule } from '@angular/common';
 class DbxFirebaseOAuthLoginViewComponent {
     loginStateCase = input.required(...(ngDevMode ? [{ debugName: "loginStateCase" }] : /* istanbul ignore next */ []));
     error = input(...(ngDevMode ? [undefined, { debugName: "error" }] : /* istanbul ignore next */ []));
-    resolvedError = computed(() => {
+    resolvedErrorSignal = computed(() => {
         const error = this.error();
         return typeof error === 'string' ? readableError('ERROR', error) : error;
-    }, ...(ngDevMode ? [{ debugName: "resolvedError" }] : /* istanbul ignore next */ []));
+    }, ...(ngDevMode ? [{ debugName: "resolvedErrorSignal" }] : /* istanbul ignore next */ []));
     retryClick = output();
     static ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "21.2.11", ngImport: i0, type: DbxFirebaseOAuthLoginViewComponent, deps: [], target: i0.ɵɵFactoryTarget.Component });
     static ɵcmp = i0.ɵɵngDeclareComponent({ minVersion: "17.0.0", version: "21.2.11", type: DbxFirebaseOAuthLoginViewComponent, isStandalone: true, selector: "dbx-firebase-oauth-login-view", inputs: { loginStateCase: { classPropertyName: "loginStateCase", publicName: "loginStateCase", isSignal: true, isRequired: true, transformFunction: null }, error: { classPropertyName: "error", publicName: "error", isSignal: true, isRequired: false, transformFunction: null } }, outputs: { retryClick: "retryClick" }, host: { classAttribute: "d-block dbx-firebase-oauth-login-view" }, ngImport: i0, template: `
@@ -54,7 +54,7 @@ class DbxFirebaseOAuthLoginViewComponent {
         }
         @case ('error') {
           <dbx-button text="Retry" [raised]="true" (buttonClick)="retryClick.emit()"></dbx-button>
-          <dbx-error [error]="resolvedError()"></dbx-error>
+          <dbx-error [error]="resolvedErrorSignal()"></dbx-error>
         }
       }
     </div>
@@ -83,7 +83,7 @@ i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "21.2.11", ngImpo
         }
         @case ('error') {
           <dbx-button text="Retry" [raised]="true" (buttonClick)="retryClick.emit()"></dbx-button>
-          <dbx-error [error]="resolvedError()"></dbx-error>
+          <dbx-error [error]="resolvedErrorSignal()"></dbx-error>
         }
       }
     </div>
@@ -145,19 +145,19 @@ class DbxFirebaseOAuthConsentViewComponent {
      * No value is passed (`dbxActionValue` provides an empty payload).
      */
     denyHandler = input.required(...(ngDevMode ? [{ debugName: "denyHandler" }] : /* istanbul ignore next */ []));
-    clientName = computed(() => this.details()?.client_name ?? '', ...(ngDevMode ? [{ debugName: "clientName" }] : /* istanbul ignore next */ []));
-    clientUri = computed(() => this.details()?.client_uri, ...(ngDevMode ? [{ debugName: "clientUri" }] : /* istanbul ignore next */ []));
-    logoUri = computed(() => this.details()?.logo_uri, ...(ngDevMode ? [{ debugName: "logoUri" }] : /* istanbul ignore next */ []));
-    scopes = computed(() => SPACE_STRING_SPLIT_JOIN.splitStrings(this.details()?.scopes ?? ''), ...(ngDevMode ? [{ debugName: "scopes" }] : /* istanbul ignore next */ []));
-    resolvedScopeInjectionConfig = computed(() => {
+    clientNameSignal = computed(() => this.details()?.client_name ?? '', ...(ngDevMode ? [{ debugName: "clientNameSignal" }] : /* istanbul ignore next */ []));
+    clientUriSignal = computed(() => this.details()?.client_uri, ...(ngDevMode ? [{ debugName: "clientUriSignal" }] : /* istanbul ignore next */ []));
+    logoUriSignal = computed(() => this.details()?.logo_uri, ...(ngDevMode ? [{ debugName: "logoUriSignal" }] : /* istanbul ignore next */ []));
+    scopesSignal = computed(() => SPACE_STRING_SPLIT_JOIN.splitStrings(this.details()?.scopes ?? ''), ...(ngDevMode ? [{ debugName: "scopesSignal" }] : /* istanbul ignore next */ []));
+    resolvedScopeInjectionConfigSignal = computed(() => {
         const data = {
             details: this.details(),
-            scopes: this.scopes(),
-            clientName: this.clientName(),
+            scopes: this.scopesSignal(),
+            clientName: this.clientNameSignal(),
             requiredScopes: this.requiredScopes()
         };
         return { ...this.scopeInjectionConfig(), data };
-    }, ...(ngDevMode ? [{ debugName: "resolvedScopeInjectionConfig" }] : /* istanbul ignore next */ []));
+    }, ...(ngDevMode ? [{ debugName: "resolvedScopeInjectionConfigSignal" }] : /* istanbul ignore next */ []));
     static ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "21.2.11", ngImport: i0, type: DbxFirebaseOAuthConsentViewComponent, deps: [], target: i0.ɵɵFactoryTarget.Component });
     static ɵcmp = i0.ɵɵngDeclareComponent({ minVersion: "17.0.0", version: "21.2.11", type: DbxFirebaseOAuthConsentViewComponent, isStandalone: true, selector: "dbx-firebase-oauth-consent-view", inputs: { details: { classPropertyName: "details", publicName: "details", isSignal: true, isRequired: false, transformFunction: null }, consentStateCase: { classPropertyName: "consentStateCase", publicName: "consentStateCase", isSignal: true, isRequired: true, transformFunction: null }, scopeInjectionConfig: { classPropertyName: "scopeInjectionConfig", publicName: "scopeInjectionConfig", isSignal: true, isRequired: true, transformFunction: null }, requiredScopes: { classPropertyName: "requiredScopes", publicName: "requiredScopes", isSignal: true, isRequired: false, transformFunction: null }, approveHandler: { classPropertyName: "approveHandler", publicName: "approveHandler", isSignal: true, isRequired: true, transformFunction: null }, denyHandler: { classPropertyName: "denyHandler", publicName: "denyHandler", isSignal: true, isRequired: true, transformFunction: null } }, host: { classAttribute: "d-block dbx-firebase-oauth-consent-view" }, ngImport: i0, template: `
     <div class="dbx-firebase-oauth-consent-view">
@@ -170,27 +170,27 @@ class DbxFirebaseOAuthConsentViewComponent {
         }
         @case ('user') {
           <div class="dbx-firebase-oauth-consent-header">
-            @if (clientName()) {
-              <h2>You're signing in to {{ clientName() }}</h2>
+            @if (clientNameSignal()) {
+              <h2>You're signing in to {{ clientNameSignal() }}</h2>
             }
             <div class="dbx-firebase-oauth-consent-header-info dbx-flex">
-              <dbx-avatar [avatarUrl]="logoUri()" [avatarStyle]="'square'" avatarIcon="apps"></dbx-avatar>
+              <dbx-avatar [avatarUrl]="logoUriSignal()" [avatarStyle]="'square'" avatarIcon="apps"></dbx-avatar>
               <span>
-                @if (clientUri()) {
-                  <a class="dbx-firebase-oauth-consent-client-uri" [href]="clientUri()" target="_blank" rel="noopener noreferrer">{{ clientUri() }}</a>
+                @if (clientUriSignal()) {
+                  <a class="dbx-firebase-oauth-consent-client-uri" [href]="clientUriSignal()" target="_blank" rel="noopener noreferrer">{{ clientUriSignal() }}</a>
                 }
               </span>
             </div>
           </div>
-          @if (clientName()) {
+          @if (clientNameSignal()) {
             <p class="dbx-firebase-oauth-consent-prompt">
-              <strong>{{ clientName() }}</strong>
+              <strong>{{ clientNameSignal() }}</strong>
               is requesting these permissions:
             </p>
           }
 
           <div dbxAction dbxActionSnackbarError [dbxActionHandler]="approveHandler()">
-            <dbx-injection [config]="resolvedScopeInjectionConfig()"></dbx-injection>
+            <dbx-injection [config]="resolvedScopeInjectionConfigSignal()"></dbx-injection>
 
             <div class="dbx-pt3 dbx-pb3 dbx-firebase-oauth-consent-actions">
               <dbx-button dbxActionButton text="Approve" [raised]="true" color="primary"></dbx-button>
@@ -218,27 +218,27 @@ i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "21.2.11", ngImpo
         }
         @case ('user') {
           <div class="dbx-firebase-oauth-consent-header">
-            @if (clientName()) {
-              <h2>You're signing in to {{ clientName() }}</h2>
+            @if (clientNameSignal()) {
+              <h2>You're signing in to {{ clientNameSignal() }}</h2>
             }
             <div class="dbx-firebase-oauth-consent-header-info dbx-flex">
-              <dbx-avatar [avatarUrl]="logoUri()" [avatarStyle]="'square'" avatarIcon="apps"></dbx-avatar>
+              <dbx-avatar [avatarUrl]="logoUriSignal()" [avatarStyle]="'square'" avatarIcon="apps"></dbx-avatar>
               <span>
-                @if (clientUri()) {
-                  <a class="dbx-firebase-oauth-consent-client-uri" [href]="clientUri()" target="_blank" rel="noopener noreferrer">{{ clientUri() }}</a>
+                @if (clientUriSignal()) {
+                  <a class="dbx-firebase-oauth-consent-client-uri" [href]="clientUriSignal()" target="_blank" rel="noopener noreferrer">{{ clientUriSignal() }}</a>
                 }
               </span>
             </div>
           </div>
-          @if (clientName()) {
+          @if (clientNameSignal()) {
             <p class="dbx-firebase-oauth-consent-prompt">
-              <strong>{{ clientName() }}</strong>
+              <strong>{{ clientNameSignal() }}</strong>
               is requesting these permissions:
             </p>
           }
 
           <div dbxAction dbxActionSnackbarError [dbxActionHandler]="approveHandler()">
-            <dbx-injection [config]="resolvedScopeInjectionConfig()"></dbx-injection>
+            <dbx-injection [config]="resolvedScopeInjectionConfigSignal()"></dbx-injection>
 
             <div class="dbx-pt3 dbx-pb3 dbx-firebase-oauth-consent-actions">
               <dbx-button dbxActionButton text="Approve" [raised]="true" color="primary"></dbx-button>
@@ -401,7 +401,7 @@ const OAUTH_CONSENT_SCOPES_REQUIRED_VALIDATOR_KIND = 'mustSelectAtLeastOneScope'
 /**
  * Default message shown when the user has cleared every optional scope.
  */
-const OAUTH_CONSENT_SCOPES_REQUIRED_VALIDATOR_DEFAULT_MESSAGE = 'Select at least one scope to grant.';
+const DEFAULT_OAUTH_CONSENT_SCOPES_REQUIRED_VALIDATOR_MESSAGE = 'Select at least one scope to grant.';
 /**
  * Builds a complete `FormConfig` ready to feed into a forge form component.
  *
@@ -432,7 +432,7 @@ function oauthConsentScopesFormConfig(config) {
                 value,
                 validators,
                 validationMessages: {
-                    [OAUTH_CONSENT_SCOPES_REQUIRED_VALIDATOR_KIND]: OAUTH_CONSENT_SCOPES_REQUIRED_VALIDATOR_DEFAULT_MESSAGE
+                    [OAUTH_CONSENT_SCOPES_REQUIRED_VALIDATOR_KIND]: DEFAULT_OAUTH_CONSENT_SCOPES_REQUIRED_VALIDATOR_MESSAGE
                 },
                 props: {
                     listComponentClass: of(DbxFirebaseOAuthConsentScopeListComponent),
@@ -591,7 +591,7 @@ i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "21.2.11", ngImpo
 class DbxFirebaseOAuthConsentScopeDefaultViewComponent {
     _oidcConfigService = inject(DbxFirebaseOidcConfigService);
     _data = inject(DBX_INJECTION_COMPONENT_DATA);
-    mappedScopes = computed(() => {
+    mappedScopesSignal = computed(() => {
         const availableScopes = this._oidcConfigService.availableScopes;
         const availableScopeValues = new Set(availableScopes.map((s) => s.value));
         const { included: knownScopes, excluded: unknownScopes } = separateValues(this._data.scopes, (name) => availableScopeValues.has(name));
@@ -602,24 +602,24 @@ class DbxFirebaseOAuthConsentScopeDefaultViewComponent {
             }),
             ...unknownScopes.map((name) => ({ name, description: 'unknown' }))
         ];
-    }, ...(ngDevMode ? [{ debugName: "mappedScopes" }] : /* istanbul ignore next */ []));
-    optionalScopes = computed(() => {
+    }, ...(ngDevMode ? [{ debugName: "mappedScopesSignal" }] : /* istanbul ignore next */ []));
+    optionalScopesSignal = computed(() => {
         const requiredSet = new Set(this._data.requiredScopes ?? []);
-        return this.mappedScopes().filter((scope) => !requiredSet.has(scope.name));
-    }, ...(ngDevMode ? [{ debugName: "optionalScopes" }] : /* istanbul ignore next */ []));
-    alwaysGrantedLabel = computed(() => {
+        return this.mappedScopesSignal().filter((scope) => !requiredSet.has(scope.name));
+    }, ...(ngDevMode ? [{ debugName: "optionalScopesSignal" }] : /* istanbul ignore next */ []));
+    alwaysGrantedLabelSignal = computed(() => {
         const required = this._data.requiredScopes ?? [];
         return required.length > 0 ? required.join(', ') : null;
-    }, ...(ngDevMode ? [{ debugName: "alwaysGrantedLabel" }] : /* istanbul ignore next */ []));
-    formFieldsConfig = computed(() => ({
-        optionalScopes: this.optionalScopes()
-    }), ...(ngDevMode ? [{ debugName: "formFieldsConfig" }] : /* istanbul ignore next */ []));
+    }, ...(ngDevMode ? [{ debugName: "alwaysGrantedLabelSignal" }] : /* istanbul ignore next */ []));
+    formFieldsConfigSignal = computed(() => ({
+        optionalScopes: this.optionalScopesSignal()
+    }), ...(ngDevMode ? [{ debugName: "formFieldsConfigSignal" }] : /* istanbul ignore next */ []));
     static ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "21.2.11", ngImport: i0, type: DbxFirebaseOAuthConsentScopeDefaultViewComponent, deps: [], target: i0.ɵɵFactoryTarget.Component });
     static ɵcmp = i0.ɵɵngDeclareComponent({ minVersion: "17.0.0", version: "21.2.11", type: DbxFirebaseOAuthConsentScopeDefaultViewComponent, isStandalone: true, selector: "dbx-firebase-oauth-consent-scope-default-view", ngImport: i0, template: `
-    @if (alwaysGrantedLabel(); as label) {
+    @if (alwaysGrantedLabelSignal(); as label) {
       <p class="dbx-firebase-oauth-consent-always-granted dbx-hint">Always granted: {{ label }}</p>
     }
-    <dbx-firebase-oauth-consent-scope-form dbxActionForm [config]="formFieldsConfig()"></dbx-firebase-oauth-consent-scope-form>
+    <dbx-firebase-oauth-consent-scope-form dbxActionForm [config]="formFieldsConfigSignal()"></dbx-firebase-oauth-consent-scope-form>
   `, isInline: true, dependencies: [{ kind: "component", type: DbxFirebaseOAuthConsentScopeFormComponent, selector: "dbx-firebase-oauth-consent-scope-form" }, { kind: "directive", type: DbxActionFormDirective, selector: "[dbxActionForm]", inputs: ["dbxActionFormDisabledOnWorking", "dbxActionFormIsValid", "dbxActionFormIsEqual", "dbxActionFormIsModified", "dbxActionFormMapValue"] }], changeDetection: i0.ChangeDetectionStrategy.OnPush });
 }
 i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "21.2.11", ngImport: i0, type: DbxFirebaseOAuthConsentScopeDefaultViewComponent, decorators: [{
@@ -627,10 +627,10 @@ i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "21.2.11", ngImpo
             args: [{
                     selector: 'dbx-firebase-oauth-consent-scope-default-view',
                     template: `
-    @if (alwaysGrantedLabel(); as label) {
+    @if (alwaysGrantedLabelSignal(); as label) {
       <p class="dbx-firebase-oauth-consent-always-granted dbx-hint">Always granted: {{ label }}</p>
     }
-    <dbx-firebase-oauth-consent-scope-form dbxActionForm [config]="formFieldsConfig()"></dbx-firebase-oauth-consent-scope-form>
+    <dbx-firebase-oauth-consent-scope-form dbxActionForm [config]="formFieldsConfigSignal()"></dbx-firebase-oauth-consent-scope-form>
   `,
                     imports: [DbxFirebaseOAuthConsentScopeFormComponent, DbxActionFormDirective],
                     changeDetection: ChangeDetectionStrategy.OnPush,
@@ -722,26 +722,33 @@ class DbxFirebaseOAuthLoginComponent {
     isLoggedIn = toSignal(this.dbxFirebaseAuthService.isLoggedIn$);
     submitting = signal(false, ...(ngDevMode ? [{ debugName: "submitting" }] : /* istanbul ignore next */ []));
     errorMessage = signal(null, ...(ngDevMode ? [{ debugName: "errorMessage" }] : /* istanbul ignore next */ []));
-    loginStateCase = computed(() => {
+    loginStateCaseSignal = computed(() => {
+        const errorMessage = this.errorMessage();
+        const isLoggedIn = this.isLoggedIn();
+        let result;
         if (this.submitting()) {
-            return 'submitting';
-        }
-        if (this.errorMessage()) {
-            return 'error';
+            result = 'submitting';
         }
-        const isLoggedIn = this.isLoggedIn();
-        if (isLoggedIn === undefined) {
-            return 'unknown';
+        else if (errorMessage) {
+            result = 'error';
         }
-        if (!isLoggedIn) {
-            return 'no_user';
+        else {
+            if (isLoggedIn === undefined) {
+                result = 'unknown';
+            }
+            else if (isLoggedIn) {
+                result = 'user';
+            }
+            else {
+                result = 'no_user';
+            }
         }
-        return 'user';
-    }, ...(ngDevMode ? [{ debugName: "loginStateCase" }] : /* istanbul ignore next */ []));
+        return result;
+    }, ...(ngDevMode ? [{ debugName: "loginStateCaseSignal" }] : /* istanbul ignore next */ []));
     constructor() {
         // Auto-submit when user is logged in
         effect(() => {
-            if (this.loginStateCase() === 'user') {
+            if (this.loginStateCaseSignal() === 'user') {
                 this._submitIdToken();
             }
         });
@@ -780,7 +787,7 @@ class DbxFirebaseOAuthLoginComponent {
     }
     static ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "21.2.11", ngImport: i0, type: DbxFirebaseOAuthLoginComponent, deps: [], target: i0.ɵɵFactoryTarget.Component });
     static ɵcmp = i0.ɵɵngDeclareComponent({ minVersion: "14.0.0", version: "21.2.11", type: DbxFirebaseOAuthLoginComponent, isStandalone: true, selector: "dbx-firebase-oauth-login", host: { classAttribute: "d-block dbx-firebase-oauth-login" }, ngImport: i0, template: `
-    <dbx-firebase-oauth-login-view [loginStateCase]="loginStateCase()" [error]="errorMessage()" (retryClick)="retry()">
+    <dbx-firebase-oauth-login-view [loginStateCase]="loginStateCaseSignal()" [error]="errorMessage()" (retryClick)="retry()">
       <ng-content />
     </dbx-firebase-oauth-login-view>
   `, isInline: true, dependencies: [{ kind: "component", type: DbxFirebaseOAuthLoginViewComponent, selector: "dbx-firebase-oauth-login-view", inputs: ["loginStateCase", "error"], outputs: ["retryClick"] }], changeDetection: i0.ChangeDetectionStrategy.OnPush });
@@ -792,7 +799,7 @@ i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "21.2.11", ngImpo
                     standalone: true,
                     imports: [DbxFirebaseOAuthLoginViewComponent],
                     template: `
-    <dbx-firebase-oauth-login-view [loginStateCase]="loginStateCase()" [error]="errorMessage()" (retryClick)="retry()">
+    <dbx-firebase-oauth-login-view [loginStateCase]="loginStateCaseSignal()" [error]="errorMessage()" (retryClick)="retry()">
       <ng-content />
     </dbx-firebase-oauth-login-view>
   `,
@@ -847,8 +854,8 @@ class DbxOAuthConsentComponent {
     // Auth state — undefined until Firebase resolves to avoid a flash between 'unknown' → 'no_user'/'user'
     isLoggedIn = toSignal(this.dbxFirebaseAuthService.isLoggedIn$);
     // Resolved values
-    resolvedInteractionUid = computed(() => this.routeUid(), ...(ngDevMode ? [{ debugName: "resolvedInteractionUid" }] : /* istanbul ignore next */ []));
-    resolvedDetails = computed(() => {
+    resolvedInteractionUidSignal = computed(() => this.routeUid(), ...(ngDevMode ? [{ debugName: "resolvedInteractionUidSignal" }] : /* istanbul ignore next */ []));
+    resolvedDetailsSignal = computed(() => {
         const client_id = this.routeClientId() ?? '';
         const client_name = this.routeClientName();
         const client_uri = this.routeClientUri();
@@ -861,26 +868,30 @@ class DbxOAuthConsentComponent {
             logo_uri,
             scopes
         };
-    }, ...(ngDevMode ? [{ debugName: "resolvedDetails" }] : /* istanbul ignore next */ []));
+    }, ...(ngDevMode ? [{ debugName: "resolvedDetailsSignal" }] : /* istanbul ignore next */ []));
     // Scope injection config: built from the configured scope list view class, falling back to config service, then the default
-    scopeInjectionConfig = computed(() => ({
+    scopeInjectionConfigSignal = computed(() => ({
         componentClass: this.config()?.consentScopeListViewClass ?? this.oidcConfigService.consentScopeListViewClass ?? DbxFirebaseOAuthConsentScopeDefaultViewComponent
-    }), ...(ngDevMode ? [{ debugName: "scopeInjectionConfig" }] : /* istanbul ignore next */ []));
+    }), ...(ngDevMode ? [{ debugName: "scopeInjectionConfigSignal" }] : /* istanbul ignore next */ []));
     /**
      * Scopes the user cannot deselect. Forwarded to the view, which shows
      * them as a static "Always granted" hint above the selection list.
      */
     requiredScopes = OAUTH_CONSENT_REQUIRED_SCOPES;
-    consentStateCase = computed(() => {
+    consentStateCaseSignal = computed(() => {
         const isLoggedIn = this.isLoggedIn();
+        let result;
         if (isLoggedIn === undefined) {
-            return 'unknown';
+            result = 'unknown';
         }
-        if (!isLoggedIn) {
-            return 'no_user';
+        else if (isLoggedIn) {
+            result = 'user';
         }
-        return 'user';
-    }, ...(ngDevMode ? [{ debugName: "consentStateCase" }] : /* istanbul ignore next */ []));
+        else {
+            result = 'no_user';
+        }
+        return result;
+    }, ...(ngDevMode ? [{ debugName: "consentStateCaseSignal" }] : /* istanbul ignore next */ []));
     ngOnDestroy() {
         this.interactionUidParamReader.destroy();
         this.clientIdParamReader.destroy();
@@ -894,9 +905,12 @@ class DbxOAuthConsentComponent {
      * straight off the form value (it already matches the API field name
      * `grantedOIDCScopes`) and forwards it through `submitConsent`. On a
      * successful response, hard-navigates to the OIDC server's redirect URL.
+     *
+     * @param formValue - Submitted form value containing the granted scope array.
+     * @param context - The Work context driving the approval flow.
      */
     handleApprove = (formValue, context) => {
-        const uid = this.resolvedInteractionUid();
+        const uid = this.resolvedInteractionUidSignal();
         if (!uid) {
             context.reject(new Error('Missing interaction UID'));
             return;
@@ -911,9 +925,12 @@ class DbxOAuthConsentComponent {
     /**
      * Handles the Deny action. No payload is sent — the server returns
      * `access_denied` to the OAuth client.
+     *
+     * @param _value - Unused form payload.
+     * @param context - The Work context driving the denial flow.
      */
     handleDeny = (_value, context) => {
-        const uid = this.resolvedInteractionUid();
+        const uid = this.resolvedInteractionUidSignal();
         if (!uid) {
             context.reject(new Error('Missing interaction UID'));
             return;
@@ -926,7 +943,7 @@ class DbxOAuthConsentComponent {
     };
     static ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "21.2.11", ngImport: i0, type: DbxOAuthConsentComponent, deps: [], target: i0.ɵɵFactoryTarget.Component });
     static ɵcmp = i0.ɵɵngDeclareComponent({ minVersion: "17.1.0", version: "21.2.11", type: DbxOAuthConsentComponent, isStandalone: true, selector: "dbx-firebase-oauth-consent", inputs: { config: { classPropertyName: "config", publicName: "config", isSignal: true, isRequired: false, transformFunction: null } }, host: { classAttribute: "d-block dbx-firebase-oauth-consent" }, ngImport: i0, template: `
-    <dbx-firebase-oauth-consent-view [details]="resolvedDetails()" [consentStateCase]="consentStateCase()" [scopeInjectionConfig]="scopeInjectionConfig()" [requiredScopes]="requiredScopes" [approveHandler]="handleApprove" [denyHandler]="handleDeny">
+    <dbx-firebase-oauth-consent-view [details]="resolvedDetailsSignal()" [consentStateCase]="consentStateCaseSignal()" [scopeInjectionConfig]="scopeInjectionConfigSignal()" [requiredScopes]="requiredScopes" [approveHandler]="handleApprove" [denyHandler]="handleDeny">
       <ng-content />
     </dbx-firebase-oauth-consent-view>
   `, isInline: true, dependencies: [{ kind: "component", type: DbxFirebaseOAuthConsentViewComponent, selector: "dbx-firebase-oauth-consent-view", inputs: ["details", "consentStateCase", "scopeInjectionConfig", "requiredScopes", "approveHandler", "denyHandler"] }], changeDetection: i0.ChangeDetectionStrategy.OnPush });
@@ -938,7 +955,7 @@ i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "21.2.11", ngImpo
                     standalone: true,
                     imports: [DbxFirebaseOAuthConsentViewComponent],
                     template: `
-    <dbx-firebase-oauth-consent-view [details]="resolvedDetails()" [consentStateCase]="consentStateCase()" [scopeInjectionConfig]="scopeInjectionConfig()" [requiredScopes]="requiredScopes" [approveHandler]="handleApprove" [denyHandler]="handleDeny">
+    <dbx-firebase-oauth-consent-view [details]="resolvedDetailsSignal()" [consentStateCase]="consentStateCaseSignal()" [scopeInjectionConfig]="scopeInjectionConfigSignal()" [requiredScopes]="requiredScopes" [approveHandler]="handleApprove" [denyHandler]="handleDeny">
       <ng-content />
     </dbx-firebase-oauth-consent-view>
   `,
@@ -1159,13 +1176,17 @@ function oidcClientTestScopesForgeField(availableScopes) {
 class DbxFirebaseOidcEntryClientForgeFormComponent extends AbstractConfigAsyncForgeFormDirective {
     _oidcConfigService = inject(DbxFirebaseOidcConfigService);
     formConfig$ = this.currentConfig$.pipe(map((config) => {
-        if (!config) {
-            return undefined;
+        let result;
+        if (config) {
+            result = oidcEntryClientForgeFormFields({
+                ...config,
+                tokenEndpointAuthMethods: this._oidcConfigService.tokenEndpointAuthMethods
+            });
         }
-        return oidcEntryClientForgeFormFields({
-            ...config,
-            tokenEndpointAuthMethods: this._oidcConfigService.tokenEndpointAuthMethods
-        });
+        else {
+            result = undefined;
+        }
+        return result;
     }));
     static ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "21.2.11", ngImport: i0, type: DbxFirebaseOidcEntryClientForgeFormComponent, deps: null, target: i0.ɵɵFactoryTarget.Component });
     static ɵcmp = i0.ɵɵngDeclareComponent({ minVersion: "14.0.0", version: "21.2.11", type: DbxFirebaseOidcEntryClientForgeFormComponent, isStandalone: true, selector: "dbx-firebase-oidc-client-forge-form", providers: dbxForgeFormComponentProviders(), usesInheritance: true, ngImport: i0, template: "<dbx-forge></dbx-forge>", isInline: true, dependencies: [{ kind: "ngmodule", type: DbxForgeFormComponentImportsModule }, { kind: "component", type: i1$1.DbxForgeFormComponent, selector: "dbx-forge" }], changeDetection: i0.ChangeDetectionStrategy.OnPush });
@@ -1630,18 +1651,18 @@ class DbxFirebaseOidcEntryClientTestComponent {
      * Path to the authorization endpoint. Overrides the service default when provided.
      */
     oidcAuthorizationEndpointApiPath = input(undefined, ...(ngDevMode ? [{ debugName: "oidcAuthorizationEndpointApiPath" }] : /* istanbul ignore next */ []));
-    resolvedAvailableScopes = computed(() => this.availableScopes() ?? this.oidcConfigService.availableScopes, ...(ngDevMode ? [{ debugName: "resolvedAvailableScopes" }] : /* istanbul ignore next */ []));
-    resolvedAuthorizationEndpointPath = computed(() => this.oidcAuthorizationEndpointApiPath() ?? this.oidcConfigService.oidcAuthorizationEndpointApiPath, ...(ngDevMode ? [{ debugName: "resolvedAuthorizationEndpointPath" }] : /* istanbul ignore next */ []));
+    resolvedAvailableScopesSignal = computed(() => this.availableScopes() ?? this.oidcConfigService.availableScopes, ...(ngDevMode ? [{ debugName: "resolvedAvailableScopesSignal" }] : /* istanbul ignore next */ []));
+    resolvedAuthorizationEndpointPathSignal = computed(() => this.oidcAuthorizationEndpointApiPath() ?? this.oidcConfigService.oidcAuthorizationEndpointApiPath, ...(ngDevMode ? [{ debugName: "resolvedAuthorizationEndpointPathSignal" }] : /* istanbul ignore next */ []));
     // MARK: Derived Store Data
     redirectUrisSignal = toSignal(this.oidcEntryDocumentStore.data$.pipe(map((data) => data.payload?.redirect_uris ?? [])));
     clientIdSignal = toSignal(this.oidcEntryDocumentStore.data$.pipe(map((data) => data.payload?.client_id)));
     // MARK: Form Config
-    formConfig = computed(() => {
+    formConfigSignal = computed(() => {
         const redirectUris = this.redirectUrisSignal() ?? [];
-        const availableScopes = this.resolvedAvailableScopes();
+        const availableScopes = this.resolvedAvailableScopesSignal();
         console.log('formConfig:', { redirectUris, availableScopes });
         return { redirectUris, availableScopes };
-    }, ...(ngDevMode ? [{ debugName: "formConfig" }] : /* istanbul ignore next */ []));
+    }, ...(ngDevMode ? [{ debugName: "formConfigSignal" }] : /* istanbul ignore next */ []));
     formTemplate$ = this.oidcEntryDocumentStore.data$.pipe(map((data) => {
         const payload = data.payload;
         const formValue = {
@@ -1661,25 +1682,30 @@ class DbxFirebaseOidcEntryClientTestComponent {
      */
     formValue = signal(undefined, ...(ngDevMode ? [{ debugName: "formValue" }] : /* istanbul ignore next */ []));
     authorizationUrlSignal = computed(() => {
+        const resolvedAuthorizationEndpointPath = this.resolvedAuthorizationEndpointPathSignal();
         const clientId = this.clientIdSignal();
         const codeChallenge = this.codeChallenge();
         const state = this.state();
         const nonce = this.nonce();
         const formValue = this.formValue();
+        let result;
         if (!clientId || !codeChallenge || !formValue?.redirect_uri) {
-            return undefined;
+            result = undefined;
         }
-        const params = new URLSearchParams({
-            response_type: 'code',
-            client_id: clientId,
-            redirect_uri: formValue.redirect_uri,
-            scope: (formValue.scopes ?? ['openid']).join(' '),
-            state,
-            nonce,
-            code_challenge: codeChallenge,
-            code_challenge_method: 'S256'
-        });
-        return `${this.resolvedAuthorizationEndpointPath()}?${params.toString()}`;
+        else {
+            const params = new URLSearchParams({
+                response_type: 'code',
+                client_id: clientId,
+                redirect_uri: formValue.redirect_uri,
+                scope: (formValue.scopes ?? ['openid']).join(' '),
+                state,
+                nonce,
+                code_challenge: codeChallenge,
+                code_challenge_method: 'S256'
+            });
+            result = `${resolvedAuthorizationEndpointPath}?${params.toString()}`;
+        }
+        return result;
     }, ...(ngDevMode ? [{ debugName: "authorizationUrlSignal" }] : /* istanbul ignore next */ []));
     constructor() {
         this._updateCodeChallenge();
@@ -1706,8 +1732,8 @@ class DbxFirebaseOidcEntryClientTestComponent {
     }
     static ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "21.2.11", ngImport: i0, type: DbxFirebaseOidcEntryClientTestComponent, deps: [], target: i0.ɵɵFactoryTarget.Component });
     static ɵcmp = i0.ɵɵngDeclareComponent({ minVersion: "17.0.0", version: "21.2.11", type: DbxFirebaseOidcEntryClientTestComponent, isStandalone: true, selector: "dbx-firebase-oidc-entry-client-test", inputs: { availableScopes: { classPropertyName: "availableScopes", publicName: "availableScopes", isSignal: true, isRequired: false, transformFunction: null }, oidcAuthorizationEndpointApiPath: { classPropertyName: "oidcAuthorizationEndpointApiPath", publicName: "oidcAuthorizationEndpointApiPath", isSignal: true, isRequired: false, transformFunction: null } }, ngImport: i0, template: `
-    @if (formConfig()) {
-      <dbx-firebase-oidc-client-test-forge-form [dbxFormSource]="formTemplate$" dbxFormSourceMode="always" [config]="formConfig()" (dbxFormValueChange)="onFormValueChange($event)"></dbx-firebase-oidc-client-test-forge-form>
+    @if (formConfigSignal()) {
+      <dbx-firebase-oidc-client-test-forge-form [dbxFormSource]="formTemplate$" dbxFormSourceMode="always" [config]="formConfigSignal()" (dbxFormValueChange)="onFormValueChange($event)"></dbx-firebase-oidc-client-test-forge-form>
       <dbx-content-pit class="dbx-block dbx-mb3" [rounded]="true">
         <dbx-detail-block class="dbx-pb4" icon="link" header="Authorization URL">
           @if (authorizationUrlSignal()) {
@@ -1734,8 +1760,8 @@ i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "21.2.11", ngImpo
             args: [{
                     selector: 'dbx-firebase-oidc-entry-client-test',
                     template: `
-    @if (formConfig()) {
-      <dbx-firebase-oidc-client-test-forge-form [dbxFormSource]="formTemplate$" dbxFormSourceMode="always" [config]="formConfig()" (dbxFormValueChange)="onFormValueChange($event)"></dbx-firebase-oidc-client-test-forge-form>
+    @if (formConfigSignal()) {
+      <dbx-firebase-oidc-client-test-forge-form [dbxFormSource]="formTemplate$" dbxFormSourceMode="always" [config]="formConfigSignal()" (dbxFormValueChange)="onFormValueChange($event)"></dbx-firebase-oidc-client-test-forge-form>
       <dbx-content-pit class="dbx-block dbx-mb3" [rounded]="true">
         <dbx-detail-block class="dbx-pb4" icon="link" header="Authorization URL">
           @if (authorizationUrlSignal()) {
@@ -1903,6 +1929,7 @@ i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "21.2.11", ngImpo
  *
  * @param appCollection - The application's Firestore collection that must implement {@link OidcModelFirestoreCollections}.
  * @returns The validated OidcModelFirestoreCollections instance.
+ * @throws {Error} When `appCollection` does not expose an `oidcEntryCollection`.
  */
 function provideOidcModelFirestoreCollections(appCollection) {
     if (!appCollection.oidcEntryCollection) {
@@ -1946,5 +1973,5 @@ function provideDbxFirebaseOidc(config) {
  * Generated bundle index. Do not edit.
  */
 
-export { AbstractDbxFirebaseOAuthConsentScopeViewComponent, DEFAULT_OIDC_AUTHORIZATION_ENDPOINT_PATH, DEFAULT_OIDC_CLIENT_ID_PARAM_KEY, DEFAULT_OIDC_CLIENT_NAME_PARAM_KEY, DEFAULT_OIDC_CLIENT_URI_PARAM_KEY, DEFAULT_OIDC_INTERACTION_ENDPOINT_PATH, DEFAULT_OIDC_INTERACTION_UID_PARAM_KEY, DEFAULT_OIDC_LOGO_URI_PARAM_KEY, DEFAULT_OIDC_SCOPES_PARAM_KEY, DEFAULT_OIDC_TOKEN_ENDPOINT_AUTH_METHODS, DbxFirebaseOAuthConsentScopeDefaultViewComponent, DbxFirebaseOAuthConsentScopeFormComponent, DbxFirebaseOAuthConsentScopeListComponent, DbxFirebaseOAuthConsentScopeListItemComponent, DbxFirebaseOAuthConsentScopeListViewComponent, DbxFirebaseOAuthConsentViewComponent, DbxFirebaseOAuthLoginComponent, DbxFirebaseOAuthLoginViewComponent, DbxFirebaseOidcConfig, DbxFirebaseOidcConfigService, DbxFirebaseOidcEntryClientCreateComponent, DbxFirebaseOidcEntryClientForgeFormComponent, DbxFirebaseOidcEntryClientListComponent, DbxFirebaseOidcEntryClientListViewComponent, DbxFirebaseOidcEntryClientListViewItemClientComponent, DbxFirebaseOidcEntryClientListViewItemComponent, DbxFirebaseOidcEntryClientListViewItemDefaultComponent, DbxFirebaseOidcEntryClientTestComponent, DbxFirebaseOidcEntryClientTestForgeFormComponent, DbxFirebaseOidcEntryClientUpdateComponent, DbxFirebaseOidcEntryClientViewComponent, DbxFirebaseOidcEntryGrantListComponent, DbxFirebaseOidcEntryGrantListContainerComponent, DbxFirebaseOidcEntryGrantListViewComponent, DbxFirebaseOidcEntryGrantListViewItemComponent, DbxFirebaseOidcInteractionService, DbxOAuthConsentComponent, OAUTH_CONSENT_SCOPES_REQUIRED_VALIDATOR_DEFAULT_MESSAGE, OAUTH_CONSENT_SCOPES_REQUIRED_VALIDATOR_KIND, OidcEntryCollectionStore, OidcEntryCollectionStoreDirective, OidcEntryDocumentStore, OidcEntryDocumentStoreDirective, oauthConsentScopesFormConfig, oidcClientHomepageUriForgeField, oidcClientJwksUriForgeField, oidcClientLogoUriForgeField, oidcClientNameForgeField, oidcClientRedirectUrisForgeField, oidcClientTestClientIdForgeField, oidcClientTestRedirectUriForgeField, oidcClientTestScopesForgeField, oidcClientTokenEndpointAuthMethodForgeField, oidcEntryClientForgeFormFields, oidcEntryClientTestForgeFormFields, oidcEntryClientUpdateForgeFormFields, provideDbxFirebaseOidc, provideOidcModelFirestoreCollections };
+export { AbstractDbxFirebaseOAuthConsentScopeViewComponent, DEFAULT_OAUTH_CONSENT_SCOPES_REQUIRED_VALIDATOR_MESSAGE, DEFAULT_OIDC_AUTHORIZATION_ENDPOINT_PATH, DEFAULT_OIDC_CLIENT_ID_PARAM_KEY, DEFAULT_OIDC_CLIENT_NAME_PARAM_KEY, DEFAULT_OIDC_CLIENT_URI_PARAM_KEY, DEFAULT_OIDC_INTERACTION_ENDPOINT_PATH, DEFAULT_OIDC_INTERACTION_UID_PARAM_KEY, DEFAULT_OIDC_LOGO_URI_PARAM_KEY, DEFAULT_OIDC_SCOPES_PARAM_KEY, DEFAULT_OIDC_TOKEN_ENDPOINT_AUTH_METHODS, DbxFirebaseOAuthConsentScopeDefaultViewComponent, DbxFirebaseOAuthConsentScopeFormComponent, DbxFirebaseOAuthConsentScopeListComponent, DbxFirebaseOAuthConsentScopeListItemComponent, DbxFirebaseOAuthConsentScopeListViewComponent, DbxFirebaseOAuthConsentViewComponent, DbxFirebaseOAuthLoginComponent, DbxFirebaseOAuthLoginViewComponent, DbxFirebaseOidcConfig, DbxFirebaseOidcConfigService, DbxFirebaseOidcEntryClientCreateComponent, DbxFirebaseOidcEntryClientForgeFormComponent, DbxFirebaseOidcEntryClientListComponent, DbxFirebaseOidcEntryClientListViewComponent, DbxFirebaseOidcEntryClientListViewItemClientComponent, DbxFirebaseOidcEntryClientListViewItemComponent, DbxFirebaseOidcEntryClientListViewItemDefaultComponent, DbxFirebaseOidcEntryClientTestComponent, DbxFirebaseOidcEntryClientTestForgeFormComponent, DbxFirebaseOidcEntryClientUpdateComponent, DbxFirebaseOidcEntryClientViewComponent, DbxFirebaseOidcEntryGrantListComponent, DbxFirebaseOidcEntryGrantListContainerComponent, DbxFirebaseOidcEntryGrantListViewComponent, DbxFirebaseOidcEntryGrantListViewItemComponent, DbxFirebaseOidcInteractionService, DbxOAuthConsentComponent, OAUTH_CONSENT_SCOPES_REQUIRED_VALIDATOR_KIND, OidcEntryCollectionStore, OidcEntryCollectionStoreDirective, OidcEntryDocumentStore, OidcEntryDocumentStoreDirective, oauthConsentScopesFormConfig, oidcClientHomepageUriForgeField, oidcClientJwksUriForgeField, oidcClientLogoUriForgeField, oidcClientNameForgeField, oidcClientRedirectUrisForgeField, oidcClientTestClientIdForgeField, oidcClientTestRedirectUriForgeField, oidcClientTestScopesForgeField, oidcClientTokenEndpointAuthMethodForgeField, oidcEntryClientForgeFormFields, oidcEntryClientTestForgeFormFields, oidcEntryClientUpdateForgeFormFields, provideDbxFirebaseOidc, provideOidcModelFirestoreCollections };
 //# sourceMappingURL=dereekb-dbx-firebase-oidc.mjs.map