@dereekb/dbx-firebase 13.11.3 → 13.11.4

package/fesm2022/dereekb-dbx-firebase-oidc.mjs

@@ -1,17 +1,17 @@
 import * as i0 from '@angular/core';
-import { input, computed, output, ChangeDetectionStrategy, Component, inject, Injectable, signal, effect, Directive, provideAppInitializer, makeEnvironmentProviders } from '@angular/core';
+import { input, computed, output, ChangeDetectionStrategy, Component, inject, Injectable, signal, effect, Directive, viewChild, provideAppInitializer, makeEnvironmentProviders } from '@angular/core';
 import * as i1$1 from '@dereekb/dbx-web';
-import { DbxBasicLoadingComponent, DbxErrorComponent, DbxButtonComponent, DbxAvatarComponent, DbxLoadingComponent, DbxButtonSpacerDirective, AbstractDbxSelectionListWrapperDirective, DbxListWrapperComponentImportsModule, provideDbxListViewWrapper, DEFAULT_LIST_WRAPPER_COMPONENT_CONFIGURATION_TEMPLATE, AbstractDbxSelectionListViewDirective, DbxSelectionValueListViewComponentImportsModule, provideDbxListView, DEFAULT_DBX_SELECTION_VALUE_LIST_COMPONENT_CONFIGURATION_TEMPLATE, AbstractDbxValueListViewItemComponent, DbxActionSnackbarErrorDirective, DbxContentPitDirective, DbxDetailBlockComponent, DbxClickToCopyTextComponent, DbxActionConfirmDirective } from '@dereekb/dbx-web';
+import { DbxBasicLoadingComponent, DbxErrorComponent, DbxButtonComponent, DbxAvatarComponent, DbxLoadingComponent, DbxButtonSpacerDirective, AbstractDbxSelectionListWrapperDirective, DbxListWrapperComponentImportsModule, provideDbxListViewWrapper, DEFAULT_LIST_WRAPPER_COMPONENT_CONFIGURATION_TEMPLATE, AbstractDbxSelectionListViewDirective, DbxSelectionValueListViewComponentImportsModule, provideDbxListView, DEFAULT_DBX_SELECTION_VALUE_LIST_COMPONENT_CONFIGURATION_TEMPLATE, AbstractDbxValueListViewItemComponent, DbxSpacerDirective, DbxActionConfirmDirective, DbxActionSnackbarErrorDirective, DbxContentPitDirective, DbxDetailBlockComponent, DbxClickToCopyTextComponent } from '@dereekb/dbx-web';
 import { readableError, SPACE_STRING_SPLIT_JOIN, separateValues, generatePkceCodeVerifier, generatePkceCodeChallenge } from '@dereekb/util';
-import { DbxInjectionComponent, DBX_INJECTION_COMPONENT_DATA, DbxRouterService, dbxRouteParamReaderInstance, completeOnDestroy, DbxActionDirective, DbxActionEnforceModifiedDirective, DbxActionHandlerDirective, DbxActionButtonDirective, DbxAppAuthRouterService } from '@dereekb/dbx-core';
+import { DbxInjectionComponent, DBX_INJECTION_COMPONENT_DATA, DbxRouterService, dbxRouteParamReaderInstance, completeOnDestroy, DbxActionDirective, DbxActionHandlerDirective, DbxActionButtonDirective, DbxActionEnforceModifiedDirective, DbxAppAuthRouterService } from '@dereekb/dbx-core';
 import { toSignal } from '@angular/core/rxjs-interop';
-import { DbxFirebaseAuthService, AbstractDbxFirebaseDocumentStore, firebaseDocumentStoreCreateFunction, firebaseDocumentStoreUpdateFunction, firebaseDocumentStoreDeleteFunction, AbstractDbxFirebaseCollectionStore, DbxFirebaseCollectionStoreDirective, provideDbxFirebaseCollectionStoreDirective, DbxFirebaseDocumentStoreDirective, provideDbxFirebaseDocumentStoreDirective } from '@dereekb/dbx-firebase';
+import { DbxFirebaseAuthService, AbstractDbxFirebaseDocumentStore, firebaseDocumentStoreCreateFunction, firebaseDocumentStoreUpdateFunction, firebaseDocumentStoreDeleteFunction, AbstractDbxFirebaseCollectionStore, DbxFirebaseCollectionStoreDirective, provideDbxFirebaseCollectionStoreDirective, DbxFirebaseCollectionListDirective, DbxFirebaseCollectionChangeDirective, DbxFirebaseDocumentStoreDirective, provideDbxFirebaseDocumentStoreDirective } from '@dereekb/dbx-firebase';
 import { HttpClient } from '@angular/common/http';
 import { first, switchMap, of, map, BehaviorSubject, tap } from 'rxjs';
 import * as i1 from '@dereekb/dbx-form';
 import { dbxForgeValueSelectionField, dbxForgeTextField, dbxForgeSearchableStringChipField, isWebsiteUrlValidator, dbxForgeContainer, dbxForgePickableChipField, pickableValueFieldValuesConfigForStaticLabeledValues, AbstractConfigAsyncForgeFormDirective, DbxForgeFormComponentImportsModule, dbxForgeFormComponentProviders, DBX_FORGE_FORM_COMPONENT_TEMPLATE, DbxActionFormDirective, DbxFormSourceDirective, DbxFormValueChangeDirective } from '@dereekb/dbx-form';
-import { ALL_OIDC_TOKEN_ENDPOINT_AUTH_METHOD_OPTIONS, PRIVATE_KEY_JWT_TOKEN_ENDPOINT_AUTH_METHOD, OIDC_ENTRY_CLIENT_TYPE, OidcModelFunctions, OidcModelFirestoreCollections } from '@dereekb/firebase';
-import { CommonModule } from '@angular/common';
+import { ALL_OIDC_TOKEN_ENDPOINT_AUTH_METHOD_OPTIONS, PRIVATE_KEY_JWT_TOKEN_ENDPOINT_AUTH_METHOD, OidcModelFunctions, OidcModelFirestoreCollections, OIDC_ENTRY_CLIENT_TYPE, oidcGrantEntriesByUidQuery } from '@dereekb/firebase';
+import { DatePipe, CommonModule } from '@angular/common';
 
 /**
  * Presentational component for the OIDC OAuth login interaction.
@@ -39,6 +39,9 @@ class DbxFirebaseOAuthLoginViewComponent {
     static ɵcmp = i0.ɵɵngDeclareComponent({ minVersion: "17.0.0", version: "21.2.11", type: DbxFirebaseOAuthLoginViewComponent, isStandalone: true, selector: "dbx-firebase-oauth-login-view", inputs: { loginStateCase: { classPropertyName: "loginStateCase", publicName: "loginStateCase", isSignal: true, isRequired: true, transformFunction: null }, error: { classPropertyName: "error", publicName: "error", isSignal: true, isRequired: false, transformFunction: null } }, outputs: { retryClick: "retryClick" }, host: { classAttribute: "d-block dbx-firebase-oauth-login-view" }, ngImport: i0, template: `
     <div class="dbx-firebase-oauth-login-view">
       @switch (loginStateCase()) {
+        @case ('unknown') {
+          <dbx-basic-loading [loading]="true"></dbx-basic-loading>
+        }
         @case ('no_user') {
           <ng-content></ng-content>
         }
@@ -65,6 +68,9 @@ i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "21.2.11", ngImpo
                     template: `
     <div class="dbx-firebase-oauth-login-view">
       @switch (loginStateCase()) {
+        @case ('unknown') {
+          <dbx-basic-loading [loading]="true"></dbx-basic-loading>
+        }
         @case ('no_user') {
           <ng-content></ng-content>
         }
@@ -95,11 +101,14 @@ i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "21.2.11", ngImpo
  * information. Renders the client name, logo, client URL, scopes (via `<dbx-injection>`),
  * error/loading states, and approve/deny action buttons.
  *
+ * Supports ng-content projection — content provided is rendered for the `'no_user'` state
+ * (so apps can project a login view, mirroring `DbxFirebaseOAuthLoginViewComponent`).
+ *
  * @example
  * ```html
  * <dbx-firebase-oauth-consent-view
  *   [details]="loginDetails"
- *   [loading]="false"
+ *   [consentStateCase]="'user'"
  *   [scopeInjectionConfig]="scopeConfig"
  *   (approveClick)="onApprove()"
  *   (denyClick)="onDeny()">
@@ -108,7 +117,7 @@ i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "21.2.11", ngImpo
  */
 class DbxFirebaseOAuthConsentViewComponent {
     details = input(...(ngDevMode ? [undefined, { debugName: "details" }] : /* istanbul ignore next */ []));
-    loading = input(false, ...(ngDevMode ? [{ debugName: "loading" }] : /* istanbul ignore next */ []));
+    consentStateCase = input.required(...(ngDevMode ? [{ debugName: "consentStateCase" }] : /* istanbul ignore next */ []));
     error = input(...(ngDevMode ? [undefined, { debugName: "error" }] : /* istanbul ignore next */ []));
     scopeInjectionConfig = input.required(...(ngDevMode ? [{ debugName: "scopeInjectionConfig" }] : /* istanbul ignore next */ []));
     clientName = computed(() => this.details()?.client_name ?? '', ...(ngDevMode ? [{ debugName: "clientName" }] : /* istanbul ignore next */ []));
@@ -121,6 +130,7 @@ class DbxFirebaseOAuthConsentViewComponent {
     }, ...(ngDevMode ? [{ debugName: "resolvedError" }] : /* istanbul ignore next */ []));
     approveClick = output();
     denyClick = output();
+    retryClick = output();
     resolvedScopeInjectionConfig = computed(() => {
         const data = {
             details: this.details(),
@@ -130,72 +140,92 @@ class DbxFirebaseOAuthConsentViewComponent {
         return { ...this.scopeInjectionConfig(), data };
     }, ...(ngDevMode ? [{ debugName: "resolvedScopeInjectionConfig" }] : /* istanbul ignore next */ []));
     static ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "21.2.11", ngImport: i0, type: DbxFirebaseOAuthConsentViewComponent, deps: [], target: i0.ɵɵFactoryTarget.Component });
-    static ɵcmp = i0.ɵɵngDeclareComponent({ minVersion: "17.0.0", version: "21.2.11", type: DbxFirebaseOAuthConsentViewComponent, isStandalone: true, selector: "dbx-firebase-oauth-consent-view", inputs: { details: { classPropertyName: "details", publicName: "details", isSignal: true, isRequired: false, transformFunction: null }, loading: { classPropertyName: "loading", publicName: "loading", isSignal: true, isRequired: false, transformFunction: null }, error: { classPropertyName: "error", publicName: "error", isSignal: true, isRequired: false, transformFunction: null }, scopeInjectionConfig: { classPropertyName: "scopeInjectionConfig", publicName: "scopeInjectionConfig", isSignal: true, isRequired: true, transformFunction: null } }, outputs: { approveClick: "approveClick", denyClick: "denyClick" }, host: { classAttribute: "d-block dbx-firebase-oauth-consent-view" }, ngImport: i0, template: `
+    static ɵcmp = i0.ɵɵngDeclareComponent({ minVersion: "17.0.0", version: "21.2.11", type: DbxFirebaseOAuthConsentViewComponent, isStandalone: true, selector: "dbx-firebase-oauth-consent-view", inputs: { details: { classPropertyName: "details", publicName: "details", isSignal: true, isRequired: false, transformFunction: null }, consentStateCase: { classPropertyName: "consentStateCase", publicName: "consentStateCase", isSignal: true, isRequired: true, transformFunction: null }, error: { classPropertyName: "error", publicName: "error", isSignal: true, isRequired: false, transformFunction: null }, scopeInjectionConfig: { classPropertyName: "scopeInjectionConfig", publicName: "scopeInjectionConfig", isSignal: true, isRequired: true, transformFunction: null } }, outputs: { approveClick: "approveClick", denyClick: "denyClick", retryClick: "retryClick" }, host: { classAttribute: "d-block dbx-firebase-oauth-consent-view" }, ngImport: i0, template: `
     <div class="dbx-firebase-oauth-consent-view">
-      @if (loading()) {
-        <dbx-loading [loading]="true" text="Processing..."></dbx-loading>
-      } @else {
-        <div class="dbx-firebase-oauth-consent-header">
-          @if (clientName()) {
-            <h2>You're signing in to {{ clientName() }}</h2>
-          }
-          <div class="dbx-firebase-oauth-consent-header-info dbx-flex">
-            <dbx-avatar [avatarUrl]="logoUri()" [avatarStyle]="'square'" avatarIcon="apps"></dbx-avatar>
-            <span>
-              @if (clientUri()) {
-                <a class="dbx-firebase-oauth-consent-client-uri" [href]="clientUri()" target="_blank" rel="noopener noreferrer">{{ clientUri() }}</a>
-              }
-            </span>
-          </div>
-        </div>
-        <dbx-injection [config]="resolvedScopeInjectionConfig()"></dbx-injection>
-        <div class="dbx-pt3 dbx-pb3 dbx-firebase-oauth-consent-actions">
-          <dbx-button text="Approve" [raised]="true" color="primary" (buttonClick)="approveClick.emit()"></dbx-button>
-          <dbx-button-spacer></dbx-button-spacer>
-          <dbx-button text="Deny" [flat]="true" color="warn" (buttonClick)="denyClick.emit()"></dbx-button>
-        </div>
-        @if (resolvedError()) {
+      @switch (consentStateCase()) {
+        @case ('unknown') {
+          <dbx-basic-loading [loading]="true"></dbx-basic-loading>
+        }
+        @case ('no_user') {
+          <ng-content></ng-content>
+        }
+        @case ('submitting') {
+          <dbx-loading [loading]="true" text="Processing..."></dbx-loading>
+        }
+        @case ('error') {
+          <dbx-button text="Retry" [raised]="true" (buttonClick)="retryClick.emit()"></dbx-button>
           <dbx-error [error]="resolvedError()"></dbx-error>
         }
+        @case ('user') {
+          <div class="dbx-firebase-oauth-consent-header">
+            @if (clientName()) {
+              <h2>You're signing in to {{ clientName() }}</h2>
+            }
+            <div class="dbx-firebase-oauth-consent-header-info dbx-flex">
+              <dbx-avatar [avatarUrl]="logoUri()" [avatarStyle]="'square'" avatarIcon="apps"></dbx-avatar>
+              <span>
+                @if (clientUri()) {
+                  <a class="dbx-firebase-oauth-consent-client-uri" [href]="clientUri()" target="_blank" rel="noopener noreferrer">{{ clientUri() }}</a>
+                }
+              </span>
+            </div>
+          </div>
+          <dbx-injection [config]="resolvedScopeInjectionConfig()"></dbx-injection>
+          <div class="dbx-pt3 dbx-pb3 dbx-firebase-oauth-consent-actions">
+            <dbx-button text="Approve" [raised]="true" color="primary" (buttonClick)="approveClick.emit()"></dbx-button>
+            <dbx-button-spacer></dbx-button-spacer>
+            <dbx-button text="Deny" [flat]="true" color="warn" (buttonClick)="denyClick.emit()"></dbx-button>
+          </div>
+        }
       }
     </div>
-  `, isInline: true, styles: [".dbx-firebase-oauth-consent-view .dbx-firebase-oauth-consent-header-info{align-items:center;gap:12px}\n"], dependencies: [{ kind: "component", type: DbxInjectionComponent, selector: "dbx-injection, [dbxInjection], [dbx-injection]", inputs: ["config", "template"] }, { kind: "component", type: DbxAvatarComponent, selector: "dbx-avatar", inputs: ["context", "avatarSelector", "avatarUid", "avatarUrl", "avatarKey", "avatarIcon", "avatarStyle", "avatarSize", "avatarHideOnError"] }, { kind: "component", type: DbxLoadingComponent, selector: "dbx-loading", inputs: ["padding", "show", "text", "mode", "color", "diameter", "linear", "loading", "error", "context"] }, { kind: "component", type: DbxErrorComponent, selector: "dbx-error", inputs: ["error", "iconOnly"], outputs: ["popoverOpened"] }, { kind: "component", type: DbxButtonComponent, selector: "dbx-button", inputs: ["bar", "type", "buttonStyle", "color", "spinnerColor", "customButtonColor", "customTextColor", "customSpinnerColor", "basic", "tonal", "raised", "stroked", "flat", "iconOnly", "fab", "customContent", "allowClickPropagation", "mode"] }, { kind: "directive", type: DbxButtonSpacerDirective, selector: "dbx-button-spacer,[dbxButtonSpacer]" }], changeDetection: i0.ChangeDetectionStrategy.OnPush });
+  `, isInline: true, styles: [".dbx-firebase-oauth-consent-view .dbx-firebase-oauth-consent-header-info{align-items:center;gap:12px}\n"], dependencies: [{ kind: "component", type: DbxInjectionComponent, selector: "dbx-injection, [dbxInjection], [dbx-injection]", inputs: ["config", "template"] }, { kind: "component", type: DbxAvatarComponent, selector: "dbx-avatar", inputs: ["context", "avatarSelector", "avatarUid", "avatarUrl", "avatarKey", "avatarIcon", "avatarStyle", "avatarSize", "avatarHideOnError"] }, { kind: "component", type: DbxBasicLoadingComponent, selector: "dbx-basic-loading", inputs: ["diameter", "mode", "color", "text", "linear", "show", "loading", "error"] }, { kind: "component", type: DbxLoadingComponent, selector: "dbx-loading", inputs: ["padding", "show", "text", "mode", "color", "diameter", "linear", "loading", "error", "context"] }, { kind: "component", type: DbxErrorComponent, selector: "dbx-error", inputs: ["error", "iconOnly"], outputs: ["popoverOpened"] }, { kind: "component", type: DbxButtonComponent, selector: "dbx-button", inputs: ["bar", "type", "buttonStyle", "color", "spinnerColor", "customButtonColor", "customTextColor", "customSpinnerColor", "basic", "tonal", "raised", "stroked", "flat", "iconOnly", "fab", "customContent", "allowClickPropagation", "mode"] }, { kind: "directive", type: DbxButtonSpacerDirective, selector: "dbx-button-spacer,[dbxButtonSpacer]" }], changeDetection: i0.ChangeDetectionStrategy.OnPush });
 }
 i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "21.2.11", ngImport: i0, type: DbxFirebaseOAuthConsentViewComponent, decorators: [{
             type: Component,
-            args: [{ selector: 'dbx-firebase-oauth-consent-view', standalone: true, imports: [DbxInjectionComponent, DbxAvatarComponent, DbxLoadingComponent, DbxErrorComponent, DbxButtonComponent, DbxButtonSpacerDirective], template: `
+            args: [{ selector: 'dbx-firebase-oauth-consent-view', standalone: true, imports: [DbxInjectionComponent, DbxAvatarComponent, DbxBasicLoadingComponent, DbxLoadingComponent, DbxErrorComponent, DbxButtonComponent, DbxButtonSpacerDirective], template: `
     <div class="dbx-firebase-oauth-consent-view">
-      @if (loading()) {
-        <dbx-loading [loading]="true" text="Processing..."></dbx-loading>
-      } @else {
-        <div class="dbx-firebase-oauth-consent-header">
-          @if (clientName()) {
-            <h2>You're signing in to {{ clientName() }}</h2>
-          }
-          <div class="dbx-firebase-oauth-consent-header-info dbx-flex">
-            <dbx-avatar [avatarUrl]="logoUri()" [avatarStyle]="'square'" avatarIcon="apps"></dbx-avatar>
-            <span>
-              @if (clientUri()) {
-                <a class="dbx-firebase-oauth-consent-client-uri" [href]="clientUri()" target="_blank" rel="noopener noreferrer">{{ clientUri() }}</a>
-              }
-            </span>
-          </div>
-        </div>
-        <dbx-injection [config]="resolvedScopeInjectionConfig()"></dbx-injection>
-        <div class="dbx-pt3 dbx-pb3 dbx-firebase-oauth-consent-actions">
-          <dbx-button text="Approve" [raised]="true" color="primary" (buttonClick)="approveClick.emit()"></dbx-button>
-          <dbx-button-spacer></dbx-button-spacer>
-          <dbx-button text="Deny" [flat]="true" color="warn" (buttonClick)="denyClick.emit()"></dbx-button>
-        </div>
-        @if (resolvedError()) {
+      @switch (consentStateCase()) {
+        @case ('unknown') {
+          <dbx-basic-loading [loading]="true"></dbx-basic-loading>
+        }
+        @case ('no_user') {
+          <ng-content></ng-content>
+        }
+        @case ('submitting') {
+          <dbx-loading [loading]="true" text="Processing..."></dbx-loading>
+        }
+        @case ('error') {
+          <dbx-button text="Retry" [raised]="true" (buttonClick)="retryClick.emit()"></dbx-button>
           <dbx-error [error]="resolvedError()"></dbx-error>
         }
+        @case ('user') {
+          <div class="dbx-firebase-oauth-consent-header">
+            @if (clientName()) {
+              <h2>You're signing in to {{ clientName() }}</h2>
+            }
+            <div class="dbx-firebase-oauth-consent-header-info dbx-flex">
+              <dbx-avatar [avatarUrl]="logoUri()" [avatarStyle]="'square'" avatarIcon="apps"></dbx-avatar>
+              <span>
+                @if (clientUri()) {
+                  <a class="dbx-firebase-oauth-consent-client-uri" [href]="clientUri()" target="_blank" rel="noopener noreferrer">{{ clientUri() }}</a>
+                }
+              </span>
+            </div>
+          </div>
+          <dbx-injection [config]="resolvedScopeInjectionConfig()"></dbx-injection>
+          <div class="dbx-pt3 dbx-pb3 dbx-firebase-oauth-consent-actions">
+            <dbx-button text="Approve" [raised]="true" color="primary" (buttonClick)="approveClick.emit()"></dbx-button>
+            <dbx-button-spacer></dbx-button-spacer>
+            <dbx-button text="Deny" [flat]="true" color="warn" (buttonClick)="denyClick.emit()"></dbx-button>
+          </div>
+        }
       }
     </div>
   `, host: {
                         class: 'd-block dbx-firebase-oauth-consent-view'
                     }, changeDetection: ChangeDetectionStrategy.OnPush, styles: [".dbx-firebase-oauth-consent-view .dbx-firebase-oauth-consent-header-info{align-items:center;gap:12px}\n"] }]
-        }], propDecorators: { details: [{ type: i0.Input, args: [{ isSignal: true, alias: "details", required: false }] }], loading: [{ type: i0.Input, args: [{ isSignal: true, alias: "loading", required: false }] }], error: [{ type: i0.Input, args: [{ isSignal: true, alias: "error", required: false }] }], scopeInjectionConfig: [{ type: i0.Input, args: [{ isSignal: true, alias: "scopeInjectionConfig", required: true }] }], approveClick: [{ type: i0.Output, args: ["approveClick"] }], denyClick: [{ type: i0.Output, args: ["denyClick"] }] } });
+        }], propDecorators: { details: [{ type: i0.Input, args: [{ isSignal: true, alias: "details", required: false }] }], consentStateCase: [{ type: i0.Input, args: [{ isSignal: true, alias: "consentStateCase", required: true }] }], error: [{ type: i0.Input, args: [{ isSignal: true, alias: "error", required: false }] }], scopeInjectionConfig: [{ type: i0.Input, args: [{ isSignal: true, alias: "scopeInjectionConfig", required: true }] }], approveClick: [{ type: i0.Output, args: ["approveClick"] }], denyClick: [{ type: i0.Output, args: ["denyClick"] }], retryClick: [{ type: i0.Output, args: ["retryClick"] }] } });
 
 /**
  * Abstract base class for consent scope view components.
@@ -454,7 +484,7 @@ class DbxFirebaseOAuthLoginComponent {
     interactionService = inject(DbxFirebaseOidcInteractionService);
     uidParamReader = dbxRouteParamReaderInstance(this.dbxRouterService, DEFAULT_OIDC_INTERACTION_UID_PARAM_KEY);
     interactionUid = toSignal(this.uidParamReader.value$);
-    isLoggedIn = toSignal(this.dbxFirebaseAuthService.isLoggedIn$, { initialValue: false });
+    isLoggedIn = toSignal(this.dbxFirebaseAuthService.isLoggedIn$);
     submitting = signal(false, ...(ngDevMode ? [{ debugName: "submitting" }] : /* istanbul ignore next */ []));
     errorMessage = signal(null, ...(ngDevMode ? [{ debugName: "errorMessage" }] : /* istanbul ignore next */ []));
     loginStateCase = computed(() => {
@@ -464,7 +494,11 @@ class DbxFirebaseOAuthLoginComponent {
         if (this.errorMessage()) {
             return 'error';
         }
-        if (!this.isLoggedIn()) {
+        const isLoggedIn = this.isLoggedIn();
+        if (isLoggedIn === undefined) {
+            return 'unknown';
+        }
+        if (!isLoggedIn) {
             return 'no_user';
         }
         return 'user';
@@ -533,14 +567,18 @@ i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "21.2.11", ngImpo
 /**
  * Container component for the OIDC OAuth consent screen.
  *
- * Manages all state: route param reading, consent submission, and error handling.
- * Delegates visual rendering to `DbxFirebaseOAuthConsentViewComponent`.
+ * Manages all state: route param reading, Firebase Auth observation, consent submission,
+ * and error handling. Delegates visual rendering to `DbxFirebaseOAuthConsentViewComponent`.
  *
  * Reads interaction UID and client details from route params (populated by
  * the server redirect), then assembles them into `OAuthInteractionLoginDetails`.
+ *
+ * Supports ng-content projection — any content provided is passed through to
+ * the view component for the `'no_user'` state (e.g. an app's login view).
  */
 class DbxOAuthConsentComponent {
     dbxRouterService = inject(DbxRouterService);
+    dbxFirebaseAuthService = inject(DbxFirebaseAuthService);
     interactionService = inject(DbxFirebaseOidcInteractionService);
     oidcConfigService = inject(DbxFirebaseOidcConfigService);
     // Config input
@@ -559,6 +597,8 @@ class DbxOAuthConsentComponent {
     routeClientUri = toSignal(this.clientUriParamReader.value$);
     routeLogoUri = toSignal(this.logoUriParamReader.value$);
     routeScopes = toSignal(this.scopesParamReader.value$);
+    // Auth state — undefined until Firebase resolves to avoid a flash between 'unknown' → 'no_user'/'user'
+    isLoggedIn = toSignal(this.dbxFirebaseAuthService.isLoggedIn$);
     // Resolved values
     resolvedInteractionUid = computed(() => this.routeUid(), ...(ngDevMode ? [{ debugName: "resolvedInteractionUid" }] : /* istanbul ignore next */ []));
     resolvedDetails = computed(() => {
@@ -579,8 +619,24 @@ class DbxOAuthConsentComponent {
     scopeInjectionConfig = computed(() => ({
         componentClass: this.config()?.consentScopeListViewClass ?? this.oidcConfigService.consentScopeListViewClass ?? DbxFirebaseOAuthConsentScopeDefaultViewComponent
     }), ...(ngDevMode ? [{ debugName: "scopeInjectionConfig" }] : /* istanbul ignore next */ []));
-    loading = signal(false, ...(ngDevMode ? [{ debugName: "loading" }] : /* istanbul ignore next */ []));
-    error = signal(null, ...(ngDevMode ? [{ debugName: "error" }] : /* istanbul ignore next */ []));
+    submitting = signal(false, ...(ngDevMode ? [{ debugName: "submitting" }] : /* istanbul ignore next */ []));
+    errorMessage = signal(null, ...(ngDevMode ? [{ debugName: "errorMessage" }] : /* istanbul ignore next */ []));
+    consentStateCase = computed(() => {
+        if (this.submitting()) {
+            return 'submitting';
+        }
+        if (this.errorMessage()) {
+            return 'error';
+        }
+        const isLoggedIn = this.isLoggedIn();
+        if (isLoggedIn === undefined) {
+            return 'unknown';
+        }
+        if (!isLoggedIn) {
+            return 'no_user';
+        }
+        return 'user';
+    }, ...(ngDevMode ? [{ debugName: "consentStateCase" }] : /* istanbul ignore next */ []));
     ngOnDestroy() {
         this.interactionUidParamReader.destroy();
         this.clientIdParamReader.destroy();
@@ -595,31 +651,39 @@ class DbxOAuthConsentComponent {
     deny() {
         this._submitConsent(false);
     }
+    retry() {
+        this.errorMessage.set(null);
+    }
     _submitConsent(approved) {
+        if (this.consentStateCase() !== 'user') {
+            return;
+        }
         const uid = this.resolvedInteractionUid();
         if (!uid) {
-            this.error.set('Missing interaction UID');
+            this.errorMessage.set('Missing interaction UID');
             return;
         }
-        this.loading.set(true);
-        this.error.set(null);
+        this.submitting.set(true);
+        this.errorMessage.set(null);
         this.interactionService.submitConsent(uid, approved).subscribe({
             next: (response) => {
-                this.loading.set(false);
+                this.submitting.set(false);
                 if (response.redirectTo) {
                     window.location.href = response.redirectTo;
                 }
             },
             error: () => {
-                this.loading.set(false);
-                this.error.set('Failed to process consent. Please try again.');
+                this.submitting.set(false);
+                this.errorMessage.set('Failed to process consent. Please try again.');
             }
         });
     }
     static ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "21.2.11", ngImport: i0, type: DbxOAuthConsentComponent, deps: [], target: i0.ɵɵFactoryTarget.Component });
     static ɵcmp = i0.ɵɵngDeclareComponent({ minVersion: "17.1.0", version: "21.2.11", type: DbxOAuthConsentComponent, isStandalone: true, selector: "dbx-firebase-oauth-consent", inputs: { config: { classPropertyName: "config", publicName: "config", isSignal: true, isRequired: false, transformFunction: null } }, host: { classAttribute: "d-block dbx-firebase-oauth-consent" }, ngImport: i0, template: `
-    <dbx-firebase-oauth-consent-view [details]="resolvedDetails()" [loading]="loading()" [error]="error()" [scopeInjectionConfig]="scopeInjectionConfig()" (approveClick)="approve()" (denyClick)="deny()"></dbx-firebase-oauth-consent-view>
-  `, isInline: true, dependencies: [{ kind: "component", type: DbxFirebaseOAuthConsentViewComponent, selector: "dbx-firebase-oauth-consent-view", inputs: ["details", "loading", "error", "scopeInjectionConfig"], outputs: ["approveClick", "denyClick"] }], changeDetection: i0.ChangeDetectionStrategy.OnPush });
+    <dbx-firebase-oauth-consent-view [details]="resolvedDetails()" [consentStateCase]="consentStateCase()" [error]="errorMessage()" [scopeInjectionConfig]="scopeInjectionConfig()" (approveClick)="approve()" (denyClick)="deny()" (retryClick)="retry()">
+      <ng-content />
+    </dbx-firebase-oauth-consent-view>
+  `, isInline: true, dependencies: [{ kind: "component", type: DbxFirebaseOAuthConsentViewComponent, selector: "dbx-firebase-oauth-consent-view", inputs: ["details", "consentStateCase", "error", "scopeInjectionConfig"], outputs: ["approveClick", "denyClick", "retryClick"] }], changeDetection: i0.ChangeDetectionStrategy.OnPush });
 }
 i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "21.2.11", ngImport: i0, type: DbxOAuthConsentComponent, decorators: [{
             type: Component,
@@ -628,7 +692,9 @@ i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "21.2.11", ngImpo
                     standalone: true,
                     imports: [DbxFirebaseOAuthConsentViewComponent],
                     template: `
-    <dbx-firebase-oauth-consent-view [details]="resolvedDetails()" [loading]="loading()" [error]="error()" [scopeInjectionConfig]="scopeInjectionConfig()" (approveClick)="approve()" (denyClick)="deny()"></dbx-firebase-oauth-consent-view>
+    <dbx-firebase-oauth-consent-view [details]="resolvedDetails()" [consentStateCase]="consentStateCase()" [error]="errorMessage()" [scopeInjectionConfig]="scopeInjectionConfig()" (approveClick)="approve()" (denyClick)="deny()" (retryClick)="retry()">
+      <ng-content />
+    </dbx-firebase-oauth-consent-view>
   `,
                     host: {
                         class: 'd-block dbx-firebase-oauth-consent'
@@ -892,6 +958,173 @@ i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "21.2.11", ngImpo
                 }]
         }] });
 
+/**
+ * Document store for a single {@link OidcEntry}.
+ */
+class OidcEntryDocumentStore extends AbstractDbxFirebaseDocumentStore {
+    oidcModelFunctions = inject(OidcModelFunctions);
+    _latestClientSecret$ = completeOnDestroy(new BehaviorSubject(undefined));
+    /**
+     * The client secret from the most recent create operation.
+     *
+     * Only available immediately after creation — the server does not return it again.
+     */
+    latestClientSecret$ = this._latestClientSecret$.asObservable();
+    get latestClientSecret() {
+        return this._latestClientSecret$.value;
+    }
+    constructor() {
+        super({ firestoreCollection: inject(OidcModelFirestoreCollections).oidcEntryCollection });
+    }
+    createClient = firebaseDocumentStoreCreateFunction(this, this.oidcModelFunctions.oidcEntry.createOidcEntry.client, {
+        onResult: (_params, result) => {
+            this._latestClientSecret$.next(result.client_secret);
+        }
+    });
+    updateClient = firebaseDocumentStoreUpdateFunction(this, this.oidcModelFunctions.oidcEntry.updateOidcEntry.client);
+    rotateClientSecret = firebaseDocumentStoreUpdateFunction(this, this.oidcModelFunctions.oidcEntry.updateOidcEntry.rotateClientSecret, {
+        onResult: (_params, result) => {
+            this._latestClientSecret$.next(result.client_secret);
+        }
+    });
+    deleteClient = firebaseDocumentStoreDeleteFunction(this, this.oidcModelFunctions.oidcEntry.deleteOidcEntry.client);
+    deleteToken = firebaseDocumentStoreDeleteFunction(this, this.oidcModelFunctions.oidcEntry.deleteOidcEntry.token);
+    static ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "21.2.11", ngImport: i0, type: OidcEntryDocumentStore, deps: [], target: i0.ɵɵFactoryTarget.Injectable });
+    static ɵprov = i0.ɵɵngDeclareInjectable({ minVersion: "12.0.0", version: "21.2.11", ngImport: i0, type: OidcEntryDocumentStore });
+}
+i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "21.2.11", ngImport: i0, type: OidcEntryDocumentStore, decorators: [{
+            type: Injectable
+        }], ctorParameters: () => [] });
+
+/**
+ * Wrapper list of {@link OidcEntry} Grant rows belonging to the current user.
+ *
+ * Renders one row per Grant — i.e. one row per "app with access to my account" —
+ * with an inline Revoke button that cascades through every grantable token.
+ */
+class DbxFirebaseOidcEntryGrantListComponent extends AbstractDbxSelectionListWrapperDirective {
+    constructor() {
+        super({
+            componentClass: DbxFirebaseOidcEntryGrantListViewComponent,
+            defaultSelectionMode: 'view'
+        });
+    }
+    static ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "21.2.11", ngImport: i0, type: DbxFirebaseOidcEntryGrantListComponent, deps: [], target: i0.ɵɵFactoryTarget.Component });
+    static ɵcmp = i0.ɵɵngDeclareComponent({ minVersion: "14.0.0", version: "21.2.11", type: DbxFirebaseOidcEntryGrantListComponent, isStandalone: true, selector: "dbx-firebase-oidc-grant-list", host: { classAttribute: "dbx-list-no-hover-effects dbx-list-card-items-list" }, providers: provideDbxListViewWrapper(DbxFirebaseOidcEntryGrantListComponent), usesInheritance: true, ngImport: i0, template: "\n  <dbx-list [state]=\"currentState$\" [config]=\"configSignal()\" [hasMore]=\"hasMore()\" [disabled]=\"disabledSignal()\" [selectionMode]=\"selectionModeSignal()\">\n    <ng-content top select=\"[top]\"></ng-content>\n    <ng-content bottom select=\"[bottom]\"></ng-content>\n    <ng-content empty select=\"[empty]\"></ng-content>\n    <ng-content emptyLoading select=\"[emptyLoading]\"></ng-content>\n    <ng-content end select=\"[end]\"></ng-content>\n  </dbx-list>", isInline: true, dependencies: [{ kind: "ngmodule", type: DbxListWrapperComponentImportsModule }, { kind: "component", type: i1$1.DbxListComponent, selector: "dbx-list", inputs: ["padded", "state", "config", "disabled", "selectionMode", "hasMore"], outputs: ["contentScrolled"] }], changeDetection: i0.ChangeDetectionStrategy.OnPush });
+}
+i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "21.2.11", ngImport: i0, type: DbxFirebaseOidcEntryGrantListComponent, decorators: [{
+            type: Component,
+            args: [{
+                    selector: 'dbx-firebase-oidc-grant-list',
+                    template: DEFAULT_LIST_WRAPPER_COMPONENT_CONFIGURATION_TEMPLATE,
+                    providers: provideDbxListViewWrapper(DbxFirebaseOidcEntryGrantListComponent),
+                    standalone: true,
+                    host: {
+                        class: 'dbx-list-no-hover-effects dbx-list-card-items-list'
+                    },
+                    imports: [DbxListWrapperComponentImportsModule],
+                    changeDetection: ChangeDetectionStrategy.OnPush
+                }]
+        }], ctorParameters: () => [] });
+class DbxFirebaseOidcEntryGrantListViewComponent extends AbstractDbxSelectionListViewDirective {
+    config = {
+        componentClass: DbxFirebaseOidcEntryGrantListViewItemComponent,
+        mapValuesToItemValues: (x) => of(x.map((y, i) => {
+            const id = y.id;
+            return { ...y, key: id ?? `grant_${i}`, itemValue: y };
+        }))
+    };
+    static ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "21.2.11", ngImport: i0, type: DbxFirebaseOidcEntryGrantListViewComponent, deps: null, target: i0.ɵɵFactoryTarget.Component });
+    static ɵcmp = i0.ɵɵngDeclareComponent({ minVersion: "14.0.0", version: "21.2.11", type: DbxFirebaseOidcEntryGrantListViewComponent, isStandalone: true, selector: "dbx-firebase-oidc-grant-list-view", providers: provideDbxListView(DbxFirebaseOidcEntryGrantListViewComponent), usesInheritance: true, ngImport: i0, template: "<dbx-selection-list-view [config]=\"config\"></dbx-selection-list-view>", isInline: true, dependencies: [{ kind: "ngmodule", type: DbxSelectionValueListViewComponentImportsModule }, { kind: "component", type: i1$1.DbxSelectionValueListViewComponent, selector: "dbx-selection-list-view" }], changeDetection: i0.ChangeDetectionStrategy.OnPush });
+}
+i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "21.2.11", ngImport: i0, type: DbxFirebaseOidcEntryGrantListViewComponent, decorators: [{
+            type: Component,
+            args: [{
+                    selector: 'dbx-firebase-oidc-grant-list-view',
+                    template: DEFAULT_DBX_SELECTION_VALUE_LIST_COMPONENT_CONFIGURATION_TEMPLATE,
+                    providers: provideDbxListView(DbxFirebaseOidcEntryGrantListViewComponent),
+                    standalone: true,
+                    imports: [DbxSelectionValueListViewComponentImportsModule],
+                    changeDetection: ChangeDetectionStrategy.OnPush
+                }]
+        }] });
+// MARK: Item
+/**
+ * Per-row view for a Grant entry. Inline "Revoke" button uses a per-component
+ * {@link OidcEntryDocumentStore} keyed to this entry's id so calling
+ * `deleteToken` invokes the {@link DeleteOidcTokenParams} callModel against
+ * the right document.
+ */
+class DbxFirebaseOidcEntryGrantListViewItemComponent extends AbstractDbxValueListViewItemComponent {
+    oidcEntryDocumentStore = inject(OidcEntryDocumentStore);
+    clientIdSignal = computed(() => this._payload().clientId ?? '', ...(ngDevMode ? [{ debugName: "clientIdSignal" }] : /* istanbul ignore next */ []));
+    scopeSignal = computed(() => this._payload().openid?.scope ?? null, ...(ngDevMode ? [{ debugName: "scopeSignal" }] : /* istanbul ignore next */ []));
+    expiresAtSignal = computed(() => this.itemValue.expiresAt ?? null, ...(ngDevMode ? [{ debugName: "expiresAtSignal" }] : /* istanbul ignore next */ []));
+    revokeConfirmConfig = {
+        title: 'Revoke access',
+        prompt: 'This app will lose access to your account immediately. Existing access and refresh tokens stop working.',
+        confirmText: 'Revoke'
+    };
+    handleRevoke = (_, context) => {
+        context.startWorkingWithLoadingStateObservable(this.oidcEntryDocumentStore.deleteToken({}));
+    };
+    constructor() {
+        super();
+        const id = this.itemValue.id;
+        if (id) {
+            this.oidcEntryDocumentStore.setId(id);
+        }
+    }
+    _payload() {
+        return this.itemValue.payload ?? {};
+    }
+    static ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "21.2.11", ngImport: i0, type: DbxFirebaseOidcEntryGrantListViewItemComponent, deps: [], target: i0.ɵɵFactoryTarget.Component });
+    static ɵcmp = i0.ɵɵngDeclareComponent({ minVersion: "17.0.0", version: "21.2.11", type: DbxFirebaseOidcEntryGrantListViewItemComponent, isStandalone: true, selector: "dbx-firebase-oidc-grant-list-view-item", providers: [OidcEntryDocumentStore], usesInheritance: true, ngImport: i0, template: `
+    <div class="dbx-list-item-padded dbx-list-item-padded-thick dbx-list-two-line-item">
+      <div class="item-left">
+        <span class="item-title">{{ clientIdSignal() }}</span>
+        @if (scopeSignal()) {
+          <span class="item-details">{{ scopeSignal() }}</span>
+        }
+        @if (expiresAtSignal()) {
+          <span class="item-details-footnote">Expires {{ expiresAtSignal() | date: 'medium' }}</span>
+        }
+      </div>
+      <dbx-spacer></dbx-spacer>
+      <div class="item-right">
+        <dbx-button dbxAction [dbxActionHandler]="handleRevoke" [dbxActionConfirm]="revokeConfirmConfig" dbxActionButton text="Revoke" icon="block" color="warn" [raised]="true"></dbx-button>
+      </div>
+    </div>
+  `, isInline: true, dependencies: [{ kind: "directive", type: DbxSpacerDirective, selector: "dbx-spacer, [dbxSpacer]" }, { kind: "component", type: DbxButtonComponent, selector: "dbx-button", inputs: ["bar", "type", "buttonStyle", "color", "spinnerColor", "customButtonColor", "customTextColor", "customSpinnerColor", "basic", "tonal", "raised", "stroked", "flat", "iconOnly", "fab", "customContent", "allowClickPropagation", "mode"] }, { kind: "directive", type: DbxActionDirective, selector: "dbx-action,[dbxAction]", exportAs: ["action", "dbxAction"] }, { kind: "directive", type: DbxActionHandlerDirective, selector: "[dbxActionHandler]", inputs: ["dbxActionHandler"] }, { kind: "directive", type: DbxActionButtonDirective, selector: "[dbxActionButton]", inputs: ["dbxActionButtonEcho"] }, { kind: "directive", type: DbxActionConfirmDirective, selector: "[dbxActionConfirm]", inputs: ["dbxActionConfirm", "dbxActionConfirmSkip"] }, { kind: "pipe", type: DatePipe, name: "date" }], changeDetection: i0.ChangeDetectionStrategy.OnPush });
+}
+i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "21.2.11", ngImport: i0, type: DbxFirebaseOidcEntryGrantListViewItemComponent, decorators: [{
+            type: Component,
+            args: [{
+                    selector: 'dbx-firebase-oidc-grant-list-view-item',
+                    template: `
+    <div class="dbx-list-item-padded dbx-list-item-padded-thick dbx-list-two-line-item">
+      <div class="item-left">
+        <span class="item-title">{{ clientIdSignal() }}</span>
+        @if (scopeSignal()) {
+          <span class="item-details">{{ scopeSignal() }}</span>
+        }
+        @if (expiresAtSignal()) {
+          <span class="item-details-footnote">Expires {{ expiresAtSignal() | date: 'medium' }}</span>
+        }
+      </div>
+      <dbx-spacer></dbx-spacer>
+      <div class="item-right">
+        <dbx-button dbxAction [dbxActionHandler]="handleRevoke" [dbxActionConfirm]="revokeConfirmConfig" dbxActionButton text="Revoke" icon="block" color="warn" [raised]="true"></dbx-button>
+      </div>
+    </div>
+  `,
+                    standalone: true,
+                    imports: [DatePipe, DbxSpacerDirective, DbxButtonComponent, DbxActionDirective, DbxActionHandlerDirective, DbxActionButtonDirective, DbxActionConfirmDirective],
+                    providers: [OidcEntryDocumentStore],
+                    changeDetection: ChangeDetectionStrategy.OnPush
+                }]
+        }], ctorParameters: () => [] });
+
 class DbxFirebaseOidcEntryClientListComponent extends AbstractDbxSelectionListWrapperDirective {
     constructor() {
         super({
@@ -1016,42 +1249,77 @@ i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "21.2.11", ngImpo
         }] });
 
 /**
- * Document store for a single {@link OidcEntry}.
+ * Collection store for querying {@link OidcEntry} documents.
  */
-class OidcEntryDocumentStore extends AbstractDbxFirebaseDocumentStore {
-    oidcModelFunctions = inject(OidcModelFunctions);
-    _latestClientSecret$ = completeOnDestroy(new BehaviorSubject(undefined));
-    /**
-     * The client secret from the most recent create operation.
-     *
-     * Only available immediately after creation — the server does not return it again.
-     */
-    latestClientSecret$ = this._latestClientSecret$.asObservable();
-    get latestClientSecret() {
-        return this._latestClientSecret$.value;
-    }
+class OidcEntryCollectionStore extends AbstractDbxFirebaseCollectionStore {
     constructor() {
         super({ firestoreCollection: inject(OidcModelFirestoreCollections).oidcEntryCollection });
     }
-    createClient = firebaseDocumentStoreCreateFunction(this, this.oidcModelFunctions.oidcEntry.createOidcEntry.client, {
-        onResult: (_params, result) => {
-            this._latestClientSecret$.next(result.client_secret);
-        }
-    });
-    updateClient = firebaseDocumentStoreUpdateFunction(this, this.oidcModelFunctions.oidcEntry.updateOidcEntry.client);
-    rotateClientSecret = firebaseDocumentStoreUpdateFunction(this, this.oidcModelFunctions.oidcEntry.updateOidcEntry.rotateClientSecret, {
-        onResult: (_params, result) => {
-            this._latestClientSecret$.next(result.client_secret);
-        }
-    });
-    deleteClient = firebaseDocumentStoreDeleteFunction(this, this.oidcModelFunctions.oidcEntry.deleteOidcEntry.client);
-    static ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "21.2.11", ngImport: i0, type: OidcEntryDocumentStore, deps: [], target: i0.ɵɵFactoryTarget.Injectable });
-    static ɵprov = i0.ɵɵngDeclareInjectable({ minVersion: "12.0.0", version: "21.2.11", ngImport: i0, type: OidcEntryDocumentStore });
+    static ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "21.2.11", ngImport: i0, type: OidcEntryCollectionStore, deps: [], target: i0.ɵɵFactoryTarget.Injectable });
+    static ɵprov = i0.ɵɵngDeclareInjectable({ minVersion: "12.0.0", version: "21.2.11", ngImport: i0, type: OidcEntryCollectionStore });
 }
-i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "21.2.11", ngImport: i0, type: OidcEntryDocumentStore, decorators: [{
+i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "21.2.11", ngImport: i0, type: OidcEntryCollectionStore, decorators: [{
             type: Injectable
         }], ctorParameters: () => [] });
 
+/**
+ * Directive providing a {@link OidcEntryCollectionStore} for querying {@link OidcEntry} documents.
+ */
+class OidcEntryCollectionStoreDirective extends DbxFirebaseCollectionStoreDirective {
+    constructor() {
+        super(inject(OidcEntryCollectionStore));
+    }
+    static ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "21.2.11", ngImport: i0, type: OidcEntryCollectionStoreDirective, deps: [], target: i0.ɵɵFactoryTarget.Directive });
+    static ɵdir = i0.ɵɵngDeclareDirective({ minVersion: "14.0.0", version: "21.2.11", type: OidcEntryCollectionStoreDirective, isStandalone: true, selector: "[dbxOidcEntryCollection]", providers: provideDbxFirebaseCollectionStoreDirective(OidcEntryCollectionStoreDirective, OidcEntryCollectionStore), usesInheritance: true, ngImport: i0 });
+}
+i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "21.2.11", ngImport: i0, type: OidcEntryCollectionStoreDirective, decorators: [{
+            type: Directive,
+            args: [{
+                    selector: '[dbxOidcEntryCollection]',
+                    providers: provideDbxFirebaseCollectionStoreDirective(OidcEntryCollectionStoreDirective, OidcEntryCollectionStore),
+                    standalone: true
+                }]
+        }], ctorParameters: () => [] });
+
+/**
+ * Drop-in container for the "apps with access to my account" management UI.
+ *
+ * Wires a {@link OidcEntryCollectionStoreDirective} to query Grant entries
+ * for the signed-in user, then renders {@link DbxFirebaseOidcEntryGrantListComponent}
+ * with inline Revoke buttons. No inputs — the container resolves the current
+ * user via {@link DbxFirebaseAuthService}.
+ */
+class DbxFirebaseOidcEntryGrantListContainerComponent {
+    dbxFirebaseAuthService = inject(DbxFirebaseAuthService);
+    oidcEntryCollectionStoreDirective = viewChild(OidcEntryCollectionStoreDirective, ...(ngDevMode ? [{ debugName: "oidcEntryCollectionStoreDirective" }] : /* istanbul ignore next */ []));
+    grantConstraintsSignal = toSignal(this.dbxFirebaseAuthService.currentAuthUser$.pipe(map((user) => (user?.uid ? oidcGrantEntriesByUidQuery(user.uid) : []))));
+    ngOnInit() {
+        const directive = this.oidcEntryCollectionStoreDirective();
+        directive?.setMaxPages(5);
+        directive?.setItemsPerPage(20);
+    }
+    static ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "21.2.11", ngImport: i0, type: DbxFirebaseOidcEntryGrantListContainerComponent, deps: [], target: i0.ɵɵFactoryTarget.Component });
+    static ɵcmp = i0.ɵɵngDeclareComponent({ minVersion: "17.2.0", version: "21.2.11", type: DbxFirebaseOidcEntryGrantListContainerComponent, isStandalone: true, selector: "dbx-firebase-oidc-grant-list-container", viewQueries: [{ propertyName: "oidcEntryCollectionStoreDirective", first: true, predicate: OidcEntryCollectionStoreDirective, descendants: true, isSignal: true }], ngImport: i0, template: `
+    <div dbxOidcEntryCollection dbxFirebaseCollectionChange="auto" [constraints]="grantConstraintsSignal()">
+      <dbx-firebase-oidc-grant-list dbxFirebaseCollectionList></dbx-firebase-oidc-grant-list>
+    </div>
+  `, isInline: true, dependencies: [{ kind: "directive", type: OidcEntryCollectionStoreDirective, selector: "[dbxOidcEntryCollection]" }, { kind: "directive", type: DbxFirebaseCollectionListDirective, selector: "[dbxFirebaseCollectionList]" }, { kind: "directive", type: DbxFirebaseCollectionChangeDirective, selector: "[dbxFirebaseCollectionChange]", inputs: ["dbxFirebaseCollectionChange"] }, { kind: "component", type: DbxFirebaseOidcEntryGrantListComponent, selector: "dbx-firebase-oidc-grant-list" }], changeDetection: i0.ChangeDetectionStrategy.OnPush });
+}
+i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "21.2.11", ngImport: i0, type: DbxFirebaseOidcEntryGrantListContainerComponent, decorators: [{
+            type: Component,
+            args: [{
+                    selector: 'dbx-firebase-oidc-grant-list-container',
+                    template: `
+    <div dbxOidcEntryCollection dbxFirebaseCollectionChange="auto" [constraints]="grantConstraintsSignal()">
+      <dbx-firebase-oidc-grant-list dbxFirebaseCollectionList></dbx-firebase-oidc-grant-list>
+    </div>
+  `,
+                    standalone: true,
+                    imports: [OidcEntryCollectionStoreDirective, DbxFirebaseCollectionListDirective, DbxFirebaseCollectionChangeDirective, DbxFirebaseOidcEntryGrantListComponent],
+                    changeDetection: ChangeDetectionStrategy.OnPush
+                }]
+        }], propDecorators: { oidcEntryCollectionStoreDirective: [{ type: i0.ViewChild, args: [i0.forwardRef(() => OidcEntryCollectionStoreDirective), { isSignal: true }] }] } });
+
 /**
  * Container component for creating a new OAuth client.
  *
@@ -1365,39 +1633,6 @@ i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "21.2.11", ngImpo
                 }]
         }] });
 
-/**
- * Collection store for querying {@link OidcEntry} documents.
- */
-class OidcEntryCollectionStore extends AbstractDbxFirebaseCollectionStore {
-    constructor() {
-        super({ firestoreCollection: inject(OidcModelFirestoreCollections).oidcEntryCollection });
-    }
-    static ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "21.2.11", ngImport: i0, type: OidcEntryCollectionStore, deps: [], target: i0.ɵɵFactoryTarget.Injectable });
-    static ɵprov = i0.ɵɵngDeclareInjectable({ minVersion: "12.0.0", version: "21.2.11", ngImport: i0, type: OidcEntryCollectionStore });
-}
-i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "21.2.11", ngImport: i0, type: OidcEntryCollectionStore, decorators: [{
-            type: Injectable
-        }], ctorParameters: () => [] });
-
-/**
- * Directive providing a {@link OidcEntryCollectionStore} for querying {@link OidcEntry} documents.
- */
-class OidcEntryCollectionStoreDirective extends DbxFirebaseCollectionStoreDirective {
-    constructor() {
-        super(inject(OidcEntryCollectionStore));
-    }
-    static ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "21.2.11", ngImport: i0, type: OidcEntryCollectionStoreDirective, deps: [], target: i0.ɵɵFactoryTarget.Directive });
-    static ɵdir = i0.ɵɵngDeclareDirective({ minVersion: "14.0.0", version: "21.2.11", type: OidcEntryCollectionStoreDirective, isStandalone: true, selector: "[dbxOidcEntryCollection]", providers: provideDbxFirebaseCollectionStoreDirective(OidcEntryCollectionStoreDirective, OidcEntryCollectionStore), usesInheritance: true, ngImport: i0 });
-}
-i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "21.2.11", ngImport: i0, type: OidcEntryCollectionStoreDirective, decorators: [{
-            type: Directive,
-            args: [{
-                    selector: '[dbxOidcEntryCollection]',
-                    providers: provideDbxFirebaseCollectionStoreDirective(OidcEntryCollectionStoreDirective, OidcEntryCollectionStore),
-                    standalone: true
-                }]
-        }], ctorParameters: () => [] });
-
 /**
  * Directive providing a {@link OidcEntryDocumentStore} for accessing a single {@link OidcEntry} document.
  */
@@ -1465,5 +1700,5 @@ function provideDbxFirebaseOidc(config) {
  * Generated bundle index. Do not edit.
  */
 
-export { AbstractDbxFirebaseOAuthConsentScopeViewComponent, DEFAULT_OIDC_AUTHORIZATION_ENDPOINT_PATH, DEFAULT_OIDC_CLIENT_ID_PARAM_KEY, DEFAULT_OIDC_CLIENT_NAME_PARAM_KEY, DEFAULT_OIDC_CLIENT_URI_PARAM_KEY, DEFAULT_OIDC_INTERACTION_ENDPOINT_PATH, DEFAULT_OIDC_INTERACTION_UID_PARAM_KEY, DEFAULT_OIDC_LOGO_URI_PARAM_KEY, DEFAULT_OIDC_SCOPES_PARAM_KEY, DEFAULT_OIDC_TOKEN_ENDPOINT_AUTH_METHODS, DbxFirebaseOAuthConsentScopeDefaultViewComponent, DbxFirebaseOAuthConsentScopeListComponent, DbxFirebaseOAuthConsentViewComponent, DbxFirebaseOAuthLoginComponent, DbxFirebaseOAuthLoginViewComponent, DbxFirebaseOidcConfig, DbxFirebaseOidcConfigService, DbxFirebaseOidcEntryClientCreateComponent, DbxFirebaseOidcEntryClientForgeFormComponent, DbxFirebaseOidcEntryClientListComponent, DbxFirebaseOidcEntryClientListViewComponent, DbxFirebaseOidcEntryClientListViewItemClientComponent, DbxFirebaseOidcEntryClientListViewItemComponent, DbxFirebaseOidcEntryClientListViewItemDefaultComponent, DbxFirebaseOidcEntryClientTestComponent, DbxFirebaseOidcEntryClientTestForgeFormComponent, DbxFirebaseOidcEntryClientUpdateComponent, DbxFirebaseOidcEntryClientViewComponent, DbxFirebaseOidcInteractionService, DbxOAuthConsentComponent, OidcEntryCollectionStore, OidcEntryCollectionStoreDirective, OidcEntryDocumentStore, OidcEntryDocumentStoreDirective, oidcClientHomepageUriForgeField, oidcClientJwksUriForgeField, oidcClientLogoUriForgeField, oidcClientNameForgeField, oidcClientRedirectUrisForgeField, oidcClientTestClientIdForgeField, oidcClientTestRedirectUriForgeField, oidcClientTestScopesForgeField, oidcClientTokenEndpointAuthMethodForgeField, oidcEntryClientForgeFormFields, oidcEntryClientTestForgeFormFields, oidcEntryClientUpdateForgeFormFields, provideDbxFirebaseOidc, provideOidcModelFirestoreCollections };
+export { AbstractDbxFirebaseOAuthConsentScopeViewComponent, DEFAULT_OIDC_AUTHORIZATION_ENDPOINT_PATH, DEFAULT_OIDC_CLIENT_ID_PARAM_KEY, DEFAULT_OIDC_CLIENT_NAME_PARAM_KEY, DEFAULT_OIDC_CLIENT_URI_PARAM_KEY, DEFAULT_OIDC_INTERACTION_ENDPOINT_PATH, DEFAULT_OIDC_INTERACTION_UID_PARAM_KEY, DEFAULT_OIDC_LOGO_URI_PARAM_KEY, DEFAULT_OIDC_SCOPES_PARAM_KEY, DEFAULT_OIDC_TOKEN_ENDPOINT_AUTH_METHODS, DbxFirebaseOAuthConsentScopeDefaultViewComponent, DbxFirebaseOAuthConsentScopeListComponent, DbxFirebaseOAuthConsentViewComponent, DbxFirebaseOAuthLoginComponent, DbxFirebaseOAuthLoginViewComponent, DbxFirebaseOidcConfig, DbxFirebaseOidcConfigService, DbxFirebaseOidcEntryClientCreateComponent, DbxFirebaseOidcEntryClientForgeFormComponent, DbxFirebaseOidcEntryClientListComponent, DbxFirebaseOidcEntryClientListViewComponent, DbxFirebaseOidcEntryClientListViewItemClientComponent, DbxFirebaseOidcEntryClientListViewItemComponent, DbxFirebaseOidcEntryClientListViewItemDefaultComponent, DbxFirebaseOidcEntryClientTestComponent, DbxFirebaseOidcEntryClientTestForgeFormComponent, DbxFirebaseOidcEntryClientUpdateComponent, DbxFirebaseOidcEntryClientViewComponent, DbxFirebaseOidcEntryGrantListComponent, DbxFirebaseOidcEntryGrantListContainerComponent, DbxFirebaseOidcEntryGrantListViewComponent, DbxFirebaseOidcEntryGrantListViewItemComponent, DbxFirebaseOidcInteractionService, DbxOAuthConsentComponent, OidcEntryCollectionStore, OidcEntryCollectionStoreDirective, OidcEntryDocumentStore, OidcEntryDocumentStoreDirective, oidcClientHomepageUriForgeField, oidcClientJwksUriForgeField, oidcClientLogoUriForgeField, oidcClientNameForgeField, oidcClientRedirectUrisForgeField, oidcClientTestClientIdForgeField, oidcClientTestRedirectUriForgeField, oidcClientTestScopesForgeField, oidcClientTokenEndpointAuthMethodForgeField, oidcEntryClientForgeFormFields, oidcEntryClientTestForgeFormFields, oidcEntryClientUpdateForgeFormFields, provideDbxFirebaseOidc, provideOidcModelFirestoreCollections };
 //# sourceMappingURL=dereekb-dbx-firebase-oidc.mjs.map