@finos/legend-application 16.0.98 → 16.0.99

package/lib/__lib__/LegendApplicationEvent.d.ts

@@ -36,6 +36,7 @@ export declare enum APPLICATION_EVENT {
     APPLICATION_USAGE__INTERRUPT = "application.usage.interrupt",
     NAVIGATION_BLOCKED = "application.usage.navigation-blocked",
     APPLICATION_TELEMETRY_EVENT__FAILURE = "application.telemetry-event.failure",
+    TOKEN_EXPIRED = "application.token.expired",
     DEBUG = "development.debug"
 }
 //# sourceMappingURL=LegendApplicationEvent.d.ts.map

package/lib/__lib__/LegendApplicationEvent.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"LegendApplicationEvent.d.ts","sourceRoot":"","sources":["../../src/__lib__/LegendApplicationEvent.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,oBAAY,iBAAiB;IAE3B,eAAe,gCAAgC;IAE/C,0BAA0B,8BAA8B;IAExD,yBAAyB,6BAA6B;IACtD,yBAAyB,6BAA6B;IAEtD,kCAAkC,oCAAoC;IACtE,kCAAkC,sCAAsC;IAExE,4BAA4B,4CAA4C;IAExE,4BAA4B,4CAA4C;IACxE,wBAAwB,wCAAwC;IAChE,wCAAwC,wDAAwD;IAEhG,mCAAmC,qEAAqE;IACxG,6CAA6C,6DAA6D;IAE1G,6CAA6C,kEAAkE;IAE/G,wCAAwC,+DAA+D;IAEvG,oCAAoC,oDAAoD;IACxF,uBAAuB,yCAAyC;IAEhE,0BAA0B,2CAA2C;IAErE,oCAAoC,6CAA6C;IAEjF,2BAA2B,+BAA+B;IAE1D,4BAA4B,gCAAgC;IAC5D,kBAAkB,yCAAyC;IAE3D,oCAAoC,wCAAwC;IAE5E,KAAK,sBAAsB;CAC5B"}
+{"version":3,"file":"LegendApplicationEvent.d.ts","sourceRoot":"","sources":["../../src/__lib__/LegendApplicationEvent.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,oBAAY,iBAAiB;IAE3B,eAAe,gCAAgC;IAE/C,0BAA0B,8BAA8B;IAExD,yBAAyB,6BAA6B;IACtD,yBAAyB,6BAA6B;IAEtD,kCAAkC,oCAAoC;IACtE,kCAAkC,sCAAsC;IAExE,4BAA4B,4CAA4C;IAExE,4BAA4B,4CAA4C;IACxE,wBAAwB,wCAAwC;IAChE,wCAAwC,wDAAwD;IAEhG,mCAAmC,qEAAqE;IACxG,6CAA6C,6DAA6D;IAE1G,6CAA6C,kEAAkE;IAE/G,wCAAwC,+DAA+D;IAEvG,oCAAoC,oDAAoD;IACxF,uBAAuB,yCAAyC;IAEhE,0BAA0B,2CAA2C;IAErE,oCAAoC,6CAA6C;IAEjF,2BAA2B,+BAA+B;IAE1D,4BAA4B,gCAAgC;IAC5D,kBAAkB,yCAAyC;IAE3D,oCAAoC,wCAAwC;IAE5E,aAAa,8BAA8B;IAE3C,KAAK,sBAAsB;CAC5B"}

package/lib/__lib__/LegendApplicationEvent.js

@@ -38,6 +38,7 @@ export var APPLICATION_EVENT;
     APPLICATION_EVENT["APPLICATION_USAGE__INTERRUPT"] = "application.usage.interrupt";
     APPLICATION_EVENT["NAVIGATION_BLOCKED"] = "application.usage.navigation-blocked";
     APPLICATION_EVENT["APPLICATION_TELEMETRY_EVENT__FAILURE"] = "application.telemetry-event.failure";
+    APPLICATION_EVENT["TOKEN_EXPIRED"] = "application.token.expired";
     APPLICATION_EVENT["DEBUG"] = "development.debug";
 })(APPLICATION_EVENT || (APPLICATION_EVENT = {}));
 //# sourceMappingURL=LegendApplicationEvent.js.map

package/lib/__lib__/LegendApplicationEvent.js.map

@@ -1 +1 @@
-{"version":3,"file":"LegendApplicationEvent.js","sourceRoot":"","sources":["../../src/__lib__/LegendApplicationEvent.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,MAAM,CAAN,IAAY,iBAwCX;AAxCD,WAAY,iBAAiB;IAC3B,wCAAwC;IACxC,oEAA+C,CAAA;IAE/C,6EAAwD,CAAA;IAExD,2EAAsD,CAAA;IACtD,2EAAsD,CAAA;IAEtD,2FAAsE,CAAA;IACtE,6FAAwE,CAAA;IAExE,6FAAwE,CAAA;IAExE,6FAAwE,CAAA;IACxE,qFAAgE,CAAA;IAChE,qHAAgG,CAAA;IAEhG,6HAAwG,CAAA;IACxG,+HAA0G,CAAA;IAE1G,oIAA+G,CAAA;IAE/G,4HAAuG,CAAA;IAEvG,6GAAwF,CAAA;IACxF,qFAAgE,CAAA;IAEhE,0FAAqE,CAAA;IAErE,sGAAiF,CAAA;IAEjF,+EAA0D,CAAA;IAE1D,iFAA4D,CAAA;IAC5D,gFAA2D,CAAA;IAE3D,iGAA4E,CAAA;IAE5E,gDAA2B,CAAA;AAC7B,CAAC,EAxCW,iBAAiB,KAAjB,iBAAiB,QAwC5B"}
+{"version":3,"file":"LegendApplicationEvent.js","sourceRoot":"","sources":["../../src/__lib__/LegendApplicationEvent.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,MAAM,CAAN,IAAY,iBA0CX;AA1CD,WAAY,iBAAiB;IAC3B,wCAAwC;IACxC,oEAA+C,CAAA;IAE/C,6EAAwD,CAAA;IAExD,2EAAsD,CAAA;IACtD,2EAAsD,CAAA;IAEtD,2FAAsE,CAAA;IACtE,6FAAwE,CAAA;IAExE,6FAAwE,CAAA;IAExE,6FAAwE,CAAA;IACxE,qFAAgE,CAAA;IAChE,qHAAgG,CAAA;IAEhG,6HAAwG,CAAA;IACxG,+HAA0G,CAAA;IAE1G,oIAA+G,CAAA;IAE/G,4HAAuG,CAAA;IAEvG,6GAAwF,CAAA;IACxF,qFAAgE,CAAA;IAEhE,0FAAqE,CAAA;IAErE,sGAAiF,CAAA;IAEjF,+EAA0D,CAAA;IAE1D,iFAA4D,CAAA;IAC5D,gFAA2D,CAAA;IAE3D,iGAA4E,CAAA;IAE5E,gEAA2C,CAAA;IAE3C,gDAA2B,CAAA;AAC7B,CAAC,EA1CW,iBAAiB,KAAjB,iBAAiB,QA0C5B"}

package/lib/components/LegendTokenSync.d.ts

@@ -0,0 +1,23 @@
+/**
+ * Copyright (c) 2026-present, Goldman Sachs
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+/**
+ * Must be rendered inside an `<AuthProvider>` and an
+ * `<ApplicationStoreProvider>`.
+ */
+export declare const LegendTokenSync: (props: {
+    children: React.ReactNode;
+}) => React.ReactElement;
+//# sourceMappingURL=LegendTokenSync.d.ts.map

package/lib/components/LegendTokenSync.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"LegendTokenSync.d.ts","sourceRoot":"","sources":["../../src/components/LegendTokenSync.tsx"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAQH;;;GAGG;AACH,eAAO,MAAM,eAAe,GAAI,OAAO;IACrC,QAAQ,EAAE,KAAK,CAAC,SAAS,CAAC;CAC3B,KAAG,KAAK,CAAC,YAgCT,CAAC"}

package/lib/components/LegendTokenSync.js

@@ -0,0 +1,52 @@
+import { Fragment as _Fragment, jsx as _jsx } from "react/jsx-runtime";
+/**
+ * Copyright (c) 2026-present, Goldman Sachs
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+import { useEffect } from 'react';
+import { useAuth } from 'react-oidc-context';
+import { LogEvent } from '@finos/legend-shared';
+import { useApplicationStore } from './ApplicationStoreProvider.js';
+import { APPLICATION_EVENT } from '../__lib__/LegendApplicationEvent.js';
+/**
+ * Must be rendered inside an `<AuthProvider>` and an
+ * `<ApplicationStoreProvider>`.
+ */
+export const LegendTokenSync = (props) => {
+    const auth = useAuth();
+    const applicationStore = useApplicationStore();
+    const token = auth.user?.access_token;
+    const expiresAt = auth.user?.expires_at;
+    // Sync token into ApplicationStore whenever it changes (including
+    // after a successful automatic silent renewal).  When the auth object
+    // contains an `expires_at` timestamp we derive `max-age` so the
+    // browser cookie expires at the same time as the token.
+    useEffect(() => {
+        const maxAge = expiresAt !== undefined
+            ? expiresAt - Math.floor(Date.now() / 1000)
+            : undefined;
+        applicationStore.setAccessToken(token ?? undefined, maxAge);
+    }, [applicationStore, token, expiresAt]);
+    // If the token fully expires (automatic renewal failed or was never
+    // attempted) clear the stale token immediately.
+    useEffect(() => {
+        const removeExpired = auth.events.addAccessTokenExpired(() => {
+            applicationStore.logService.warn(LogEvent.create(APPLICATION_EVENT.TOKEN_EXPIRED), 'OIDC access token expired — clearing token');
+            applicationStore.setAccessToken(undefined);
+        });
+        return removeExpired;
+    }, [auth.events, applicationStore]);
+    return _jsx(_Fragment, { children: props.children });
+};
+//# sourceMappingURL=LegendTokenSync.js.map

package/lib/components/LegendTokenSync.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"LegendTokenSync.js","sourceRoot":"","sources":["../../src/components/LegendTokenSync.tsx"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,OAAO,CAAC;AAClC,OAAO,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAC;AAC7C,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAChD,OAAO,EAAE,mBAAmB,EAAE,MAAM,+BAA+B,CAAC;AACpE,OAAO,EAAE,iBAAiB,EAAE,MAAM,sCAAsC,CAAC;AAEzE;;;GAGG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,KAE/B,EAAsB,EAAE;IACvB,MAAM,IAAI,GAAG,OAAO,EAAE,CAAC;IACvB,MAAM,gBAAgB,GAAG,mBAAmB,EAAE,CAAC;IAC/C,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,YAAY,CAAC;IACtC,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC;IAExC,kEAAkE;IAClE,sEAAsE;IACtE,gEAAgE;IAChE,wDAAwD;IACxD,SAAS,CAAC,GAAG,EAAE;QACb,MAAM,MAAM,GACV,SAAS,KAAK,SAAS;YACrB,CAAC,CAAC,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;YAC3C,CAAC,CAAC,SAAS,CAAC;QAChB,gBAAgB,CAAC,cAAc,CAAC,KAAK,IAAI,SAAS,EAAE,MAAM,CAAC,CAAC;IAC9D,CAAC,EAAE,CAAC,gBAAgB,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC,CAAC;IAEzC,oEAAoE;IACpE,gDAAgD;IAChD,SAAS,CAAC,GAAG,EAAE;QACb,MAAM,aAAa,GAAG,IAAI,CAAC,MAAM,CAAC,qBAAqB,CAAC,GAAG,EAAE;YAC3D,gBAAgB,CAAC,UAAU,CAAC,IAAI,CAC9B,QAAQ,CAAC,MAAM,CAAC,iBAAiB,CAAC,aAAa,CAAC,EAChD,4CAA4C,CAC7C,CAAC;YACF,gBAAgB,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC;QAC7C,CAAC,CAAC,CAAC;QACH,OAAO,aAAa,CAAC;IACvB,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC,CAAC;IAEpC,OAAO,4BAAG,KAAK,CAAC,QAAQ,GAAI,CAAC;AAC/B,CAAC,CAAC"}

package/lib/index.css

@@ -1,4 +1,4 @@
-/** @license @finos/legend-application v16.0.98
+/** @license @finos/legend-application v16.0.99
  * Copyright (c) 2020-present, Goldman Sachs
  *
  * Licensed under the Apache License, Version 2.0 (the "License");

package/lib/index.d.ts

@@ -29,6 +29,7 @@ export * from './components/ApplicationFrameworkProvider.js';
 export * from './components/useApplicationNavigationContext.js';
 export * from './components/useCommands.js';
 export * from './components/ReleaseNotesManager.js';
+export * from './components/LegendTokenSync.js';
 export { forceDispatchKeyboardEvent, BackdropContainer, } from './components/ApplicationComponentFrameworkProvider.js';
 export * from './stores/ApplicationStore.js';
 export { NAVIGATION_ZONE_SEPARATOR, NavigationService, type NavigationAddress, type NavigationLocation, type NavigationZone, } from './stores/navigation/NavigationService.js';

package/lib/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,cAAc,+BAA+B,CAAC;AAC9C,cAAc,4CAA4C,CAAC;AAC3D,cAAc,oCAAoC,CAAC;AACnD,cAAc,0CAA0C,CAAC;AACzD,cAAc,iDAAiD,CAAC;AAEhE,cAAc,qCAAqC,CAAC;AACpD,cAAc,yCAAyC,CAAC;AACxD,cAAc,uCAAuC,CAAC;AACtD,cAAc,6CAA6C,CAAC;AAC5D,cAAc,0CAA0C,CAAC;AACzD,OAAO,EAAE,8BAA8B,EAAE,MAAM,0CAA0C,CAAC;AAE1F,cAAc,0CAA0C,CAAC;AACzD,cAAc,8CAA8C,CAAC;AAC7D,cAAc,iDAAiD,CAAC;AAChE,cAAc,6BAA6B,CAAC;AAC5C,cAAc,qCAAqC,CAAC;AACpD,OAAO,EACL,0BAA0B,EAC1B,iBAAiB,GAClB,MAAM,uDAAuD,CAAC;AAE/D,cAAc,8BAA8B,CAAC;AAC7C,OAAO,EACL,yBAAyB,EACzB,iBAAiB,EACjB,KAAK,iBAAiB,EACtB,KAAK,kBAAkB,EACvB,KAAK,cAAc,GACpB,MAAM,0CAA0C,CAAC;AAClD,OAAO,EAAE,cAAc,EAAE,MAAM,uCAAuC,CAAC;AACvE,OAAO,EAAE,0BAA0B,EAAE,MAAM,oBAAoB,CAAC;AAChE,cAAc,wCAAwC,CAAC;AACvD,cAAc,oCAAoC,CAAC;AACnD,cAAc,4BAA4B,CAAC;AAC3C,cAAc,6BAA6B,CAAC;AAC5C,cAAc,kCAAkC,CAAC;AACjD,cAAc,4BAA4B,CAAC;AAC3C,cAAc,gCAAgC,CAAC;AAC/C,cAAc,6CAA6C,CAAC;AAC5D,cAAc,8BAA8B,CAAC;AAC7C,cAAc,iCAAiC,CAAC;AAChD,cAAc,0BAA0B,CAAC;AACzC,cAAc,iCAAiC,CAAC;AAChD,cAAc,8BAA8B,CAAC;AAC7C,cAAc,iDAAiD,CAAC;AAChE,cAAc,qCAAqC,CAAC;AACpD,cAAc,0CAA0C,CAAC;AACzD,OAAO,EAAE,mBAAmB,EAAE,MAAM,+BAA+B,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,cAAc,+BAA+B,CAAC;AAC9C,cAAc,4CAA4C,CAAC;AAC3D,cAAc,oCAAoC,CAAC;AACnD,cAAc,0CAA0C,CAAC;AACzD,cAAc,iDAAiD,CAAC;AAEhE,cAAc,qCAAqC,CAAC;AACpD,cAAc,yCAAyC,CAAC;AACxD,cAAc,uCAAuC,CAAC;AACtD,cAAc,6CAA6C,CAAC;AAC5D,cAAc,0CAA0C,CAAC;AACzD,OAAO,EAAE,8BAA8B,EAAE,MAAM,0CAA0C,CAAC;AAE1F,cAAc,0CAA0C,CAAC;AACzD,cAAc,8CAA8C,CAAC;AAC7D,cAAc,iDAAiD,CAAC;AAChE,cAAc,6BAA6B,CAAC;AAC5C,cAAc,qCAAqC,CAAC;AACpD,cAAc,iCAAiC,CAAC;AAEhD,OAAO,EACL,0BAA0B,EAC1B,iBAAiB,GAClB,MAAM,uDAAuD,CAAC;AAE/D,cAAc,8BAA8B,CAAC;AAC7C,OAAO,EACL,yBAAyB,EACzB,iBAAiB,EACjB,KAAK,iBAAiB,EACtB,KAAK,kBAAkB,EACvB,KAAK,cAAc,GACpB,MAAM,0CAA0C,CAAC;AAClD,OAAO,EAAE,cAAc,EAAE,MAAM,uCAAuC,CAAC;AACvE,OAAO,EAAE,0BAA0B,EAAE,MAAM,oBAAoB,CAAC;AAChE,cAAc,wCAAwC,CAAC;AACvD,cAAc,oCAAoC,CAAC;AACnD,cAAc,4BAA4B,CAAC;AAC3C,cAAc,6BAA6B,CAAC;AAC5C,cAAc,kCAAkC,CAAC;AACjD,cAAc,4BAA4B,CAAC;AAC3C,cAAc,gCAAgC,CAAC;AAC/C,cAAc,6CAA6C,CAAC;AAC5D,cAAc,8BAA8B,CAAC;AAC7C,cAAc,iCAAiC,CAAC;AAChD,cAAc,0BAA0B,CAAC;AACzC,cAAc,iCAAiC,CAAC;AAChD,cAAc,8BAA8B,CAAC;AAC7C,cAAc,iDAAiD,CAAC;AAChE,cAAc,qCAAqC,CAAC;AACpD,cAAc,0CAA0C,CAAC;AACzD,OAAO,EAAE,mBAAmB,EAAE,MAAM,+BAA+B,CAAC"}

package/lib/index.js

@@ -29,6 +29,7 @@ export * from './components/ApplicationFrameworkProvider.js';
 export * from './components/useApplicationNavigationContext.js';
 export * from './components/useCommands.js';
 export * from './components/ReleaseNotesManager.js';
+export * from './components/LegendTokenSync.js';
 export { forceDispatchKeyboardEvent, BackdropContainer, } from './components/ApplicationComponentFrameworkProvider.js';
 export * from './stores/ApplicationStore.js';
 export { NAVIGATION_ZONE_SEPARATOR, NavigationService, } from './stores/navigation/NavigationService.js';

package/lib/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,cAAc,+BAA+B,CAAC;AAC9C,cAAc,4CAA4C,CAAC;AAC3D,cAAc,oCAAoC,CAAC;AACnD,cAAc,0CAA0C,CAAC;AACzD,cAAc,iDAAiD,CAAC;AAEhE,cAAc,qCAAqC,CAAC;AACpD,cAAc,yCAAyC,CAAC;AACxD,cAAc,uCAAuC,CAAC;AACtD,cAAc,6CAA6C,CAAC;AAC5D,cAAc,0CAA0C,CAAC;AACzD,OAAO,EAAE,8BAA8B,EAAE,MAAM,0CAA0C,CAAC;AAE1F,cAAc,0CAA0C,CAAC;AACzD,cAAc,8CAA8C,CAAC;AAC7D,cAAc,iDAAiD,CAAC;AAChE,cAAc,6BAA6B,CAAC;AAC5C,cAAc,qCAAqC,CAAC;AACpD,OAAO,EACL,0BAA0B,EAC1B,iBAAiB,GAClB,MAAM,uDAAuD,CAAC;AAE/D,cAAc,8BAA8B,CAAC;AAC7C,OAAO,EACL,yBAAyB,EACzB,iBAAiB,GAIlB,MAAM,0CAA0C,CAAC;AAClD,OAAO,EAAE,cAAc,EAAE,MAAM,uCAAuC,CAAC;AACvE,OAAO,EAAE,0BAA0B,EAAE,MAAM,oBAAoB,CAAC;AAChE,cAAc,wCAAwC,CAAC;AACvD,cAAc,oCAAoC,CAAC;AACnD,cAAc,4BAA4B,CAAC;AAC3C,cAAc,6BAA6B,CAAC;AAC5C,cAAc,kCAAkC,CAAC;AACjD,cAAc,4BAA4B,CAAC;AAC3C,cAAc,gCAAgC,CAAC;AAC/C,cAAc,6CAA6C,CAAC;AAC5D,cAAc,8BAA8B,CAAC;AAC7C,cAAc,iCAAiC,CAAC;AAChD,cAAc,0BAA0B,CAAC;AACzC,cAAc,iCAAiC,CAAC;AAChD,cAAc,8BAA8B,CAAC;AAC7C,cAAc,iDAAiD,CAAC;AAChE,cAAc,qCAAqC,CAAC;AACpD,cAAc,0CAA0C,CAAC;AACzD,OAAO,EAAE,mBAAmB,EAAE,MAAM,+BAA+B,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,cAAc,+BAA+B,CAAC;AAC9C,cAAc,4CAA4C,CAAC;AAC3D,cAAc,oCAAoC,CAAC;AACnD,cAAc,0CAA0C,CAAC;AACzD,cAAc,iDAAiD,CAAC;AAEhE,cAAc,qCAAqC,CAAC;AACpD,cAAc,yCAAyC,CAAC;AACxD,cAAc,uCAAuC,CAAC;AACtD,cAAc,6CAA6C,CAAC;AAC5D,cAAc,0CAA0C,CAAC;AACzD,OAAO,EAAE,8BAA8B,EAAE,MAAM,0CAA0C,CAAC;AAE1F,cAAc,0CAA0C,CAAC;AACzD,cAAc,8CAA8C,CAAC;AAC7D,cAAc,iDAAiD,CAAC;AAChE,cAAc,6BAA6B,CAAC;AAC5C,cAAc,qCAAqC,CAAC;AACpD,cAAc,iCAAiC,CAAC;AAEhD,OAAO,EACL,0BAA0B,EAC1B,iBAAiB,GAClB,MAAM,uDAAuD,CAAC;AAE/D,cAAc,8BAA8B,CAAC;AAC7C,OAAO,EACL,yBAAyB,EACzB,iBAAiB,GAIlB,MAAM,0CAA0C,CAAC;AAClD,OAAO,EAAE,cAAc,EAAE,MAAM,uCAAuC,CAAC;AACvE,OAAO,EAAE,0BAA0B,EAAE,MAAM,oBAAoB,CAAC;AAChE,cAAc,wCAAwC,CAAC;AACvD,cAAc,oCAAoC,CAAC;AACnD,cAAc,4BAA4B,CAAC;AAC3C,cAAc,6BAA6B,CAAC;AAC5C,cAAc,kCAAkC,CAAC;AACjD,cAAc,4BAA4B,CAAC;AAC3C,cAAc,gCAAgC,CAAC;AAC/C,cAAc,6CAA6C,CAAC;AAC5D,cAAc,8BAA8B,CAAC;AAC7C,cAAc,iCAAiC,CAAC;AAChD,cAAc,0BAA0B,CAAC;AACzC,cAAc,iCAAiC,CAAC;AAChD,cAAc,8BAA8B,CAAC;AAC7C,cAAc,iDAAiD,CAAC;AAChE,cAAc,qCAAqC,CAAC;AACpD,cAAc,0CAA0C,CAAC;AACzD,OAAO,EAAE,mBAAmB,EAAE,MAAM,+BAA+B,CAAC"}

package/lib/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@finos/legend-application",
-    "version": "16.0.98",
+    "version": "16.0.99",
     "description": "Legend application core",
     "keywords": [
         "legend",
@@ -53,10 +53,12 @@
         "@types/react-router-dom": "5.3.3",
         "mobx": "6.13.6",
         "mobx-react-lite": "4.1.0",
+        "oidc-client-ts": "^3.2.0",
         "react": "19.0.1",
         "react-dnd": "16.0.1",
         "react-dnd-html5-backend": "16.0.1",
         "react-dom": "19.0.1",
+        "react-oidc-context": "^3.3.0",
         "react-router": "7.3.0",
         "react-router-dom": "7.3.0",
         "serializr": "3.0.3",

package/lib/stores/ApplicationStore.d.ts

@@ -48,6 +48,7 @@ export declare abstract class ApplicationExtensionState {
 }
 export declare class ApplicationStore<T extends LegendApplicationConfig, V extends LegendApplicationPluginManager<LegendApplicationPlugin>> {
     readonly uuid: string;
+    accessToken: string | undefined;
     /**
      * This is a mechanism to have the store holds references to extension states
      * so that we can refer back to these states when needed or do cross-extensions
@@ -87,6 +88,14 @@ export declare class ApplicationStore<T extends LegendApplicationConfig, V exten
      */
     alertUnhandledError: (error: Error) => void;
     logUnhandledError: (error: Error) => void;
+    /**
+     * Stores the OIDC access token in memory and syncs it to a browser cookie
+     * (`legend-access-token`) so that HTTP clients using `credentials: 'include'`
+     * automatically send it with every request.
+     */
+    setAccessToken(token: string | undefined, maxAge?: number): void;
+    getAccessToken(): string | undefined;
+    private _syncAccessTokenCookie;
     /**
      * Guarantee that the action being used by the component does not throw unhandled errors
      */

package/lib/stores/ApplicationStore.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ApplicationStore.d.ts","sourceRoot":"","sources":["../../src/stores/ApplicationStore.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EACL,aAAa,EACb,UAAU,EAGV,WAAW,EAKZ,MAAM,sBAAsB,CAAC;AAE9B,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,2CAA2C,CAAC;AACzF,OAAO,KAAK,EAAE,8BAA8B,EAAE,MAAM,kDAAkD,CAAC;AACvG,OAAO,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AACjE,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AACzD,OAAO,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AACvD,OAAO,EAAE,mCAAmC,EAAE,MAAM,0CAA0C,CAAC;AAC/F,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,8BAA8B,CAAC;AAC5E,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AACrD,OAAO,EAAE,wBAAwB,EAAE,MAAM,+BAA+B,CAAC;AACzE,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AACvD,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACjD,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAC/D,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AACvD,OAAO,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAC;AAC7D,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AACzD,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAC/C,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACnD,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AACzD,OAAO,EAAE,iBAAiB,EAAE,MAAM,mCAAmC,CAAC;AACtE,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAErD,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,mCAAmC,CAAC;AAC7E,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AACvD,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAE/D,MAAM,MAAM,6BAA6B,GAAG,gBAAgB,CAC1D,uBAAuB,EACvB,8BAA8B,CAAC,uBAAuB,CAAC,CACxD,CAAC;AAEF,8BAAsB,yBAAyB;IAC7C;;;OAGG;IACH,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAA+B;IAElE,QAAQ,KAAK,uBAAuB,IAAI,MAAM,CAAC;CAChD;AAED,qBAAa,gBAAgB,CAC3B,CAAC,SAAS,uBAAuB,EACjC,CAAC,SAAS,8BAA8B,CAAC,uBAAuB,CAAC;IAEjE,QAAQ,CAAC,IAAI,SAAU;IAEvB;;;;OAIG;IACH,QAAQ,CAAC,eAAe,EAAE,yBAAyB,EAAE,CAAM;IAE3D,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;IACnB,QAAQ,CAAC,aAAa,EAAE,CAAC,CAAC;IAC1B,QAAQ,CAAC,SAAS,cAAwB;IAC1C,QAAQ,CAAC,QAAQ,CAAC,EAAE,mBAAmB,GAAG,SAAS,CAAC;IAGpD,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAC;IAClC,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAC;IAChC,QAAQ,CAAC,cAAc,EAAE,cAAc,CAAC;IACxC,QAAQ,CAAC,eAAe,EAAE,eAAe,CAAC;IAC1C,QAAQ,CAAC,cAAc,EAAE,cAAc,CAAC;IACxC,QAAQ,CAAC,YAAY,EAAE,YAAY,CAAC;IACpC,QAAQ,CAAC,mBAAmB,EAAE,mBAAmB,CAAC;IAElD,QAAQ,CAAC,eAAe,EAAE,eAAe,CAAC;IAC1C,QAAQ,CAAC,cAAc,EAAE,cAAc,CAAC;IACxC,QAAQ,CAAC,wBAAwB,EAAE,wBAAwB,CAAC;IAC5D,QAAQ,CAAC,aAAa,EAAE,aAAa,CAAC;IACtC,QAAQ,CAAC,gBAAgB,EAAE,gBAAgB,CAAC;IAC5C,QAAQ,CAAC,eAAe,EAAE,eAAe,CAAC;IAC1C,QAAQ,CAAC,iBAAiB,EAAE,iBAAiB,CAAC;IAC9C,QAAQ,CAAC,wBAAwB,EAAE,mCAAmC,CAAC;IAGvE,QAAQ,CAAC,oBAAoB,EAAE,oBAAoB,CAAC;IACpD,QAAQ,CAAC,gBAAgB,EAAE,gBAAgB,CAAC;IAG5C,QAAQ,CAAC,mBAAmB,EAAE,mBAAmB,CAAC;IAGlD,QAAQ,CAAC,YAAY,EAAE,YAAY,CAAC;IACpC,QAAQ,CAAC,gBAAgB,EAAE,gBAAgB,CAAC;IAC5C,QAAQ,CAAC,aAAa,EAAE,aAAa,CAAC;gBAE1B,MAAM,EAAE,CAAC,EAAE,aAAa,EAAE,CAAC;IAoDjC,UAAU,CAAC,QAAQ,EAAE,mBAAmB,GAAG,OAAO,CAAC,IAAI,CAAC;IAuC9D;;;OAGG;IACH,mBAAmB,GAAI,OAAO,KAAK,KAAG,IAAI,CAGxC;IAEF,iBAAiB,GAAI,OAAO,KAAK,KAAG,IAAI,CAMtC;IAEF;;OAEG;IACH,mBAAmB,GAChB,UAAU,MAAM,OAAO,CAAC,IAAI,CAAC,KAAG,CAAC,MAAM,IAAI,CAAC,CAG3C;CACL"}
+{"version":3,"file":"ApplicationStore.d.ts","sourceRoot":"","sources":["../../src/stores/ApplicationStore.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EACL,aAAa,EACb,UAAU,EAGV,WAAW,EAKZ,MAAM,sBAAsB,CAAC;AAE9B,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,2CAA2C,CAAC;AACzF,OAAO,KAAK,EAAE,8BAA8B,EAAE,MAAM,kDAAkD,CAAC;AACvG,OAAO,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AACjE,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AACzD,OAAO,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AACvD,OAAO,EAAE,mCAAmC,EAAE,MAAM,0CAA0C,CAAC;AAC/F,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,8BAA8B,CAAC;AAC5E,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AACrD,OAAO,EAAE,wBAAwB,EAAE,MAAM,+BAA+B,CAAC;AACzE,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AACvD,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACjD,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAC/D,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AACvD,OAAO,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAC;AAC7D,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AACzD,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAC/C,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACnD,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AACzD,OAAO,EAAE,iBAAiB,EAAE,MAAM,mCAAmC,CAAC;AACtE,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAErD,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,mCAAmC,CAAC;AAC7E,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AACvD,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAE/D,MAAM,MAAM,6BAA6B,GAAG,gBAAgB,CAC1D,uBAAuB,EACvB,8BAA8B,CAAC,uBAAuB,CAAC,CACxD,CAAC;AAEF,8BAAsB,yBAAyB;IAC7C;;;OAGG;IACH,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAA+B;IAElE,QAAQ,KAAK,uBAAuB,IAAI,MAAM,CAAC;CAChD;AAID,qBAAa,gBAAgB,CAC3B,CAAC,SAAS,uBAAuB,EACjC,CAAC,SAAS,8BAA8B,CAAC,uBAAuB,CAAC;IAEjE,QAAQ,CAAC,IAAI,SAAU;IACvB,WAAW,EAAE,MAAM,GAAG,SAAS,CAAa;IAE5C;;;;OAIG;IACH,QAAQ,CAAC,eAAe,EAAE,yBAAyB,EAAE,CAAM;IAE3D,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;IACnB,QAAQ,CAAC,aAAa,EAAE,CAAC,CAAC;IAC1B,QAAQ,CAAC,SAAS,cAAwB;IAC1C,QAAQ,CAAC,QAAQ,CAAC,EAAE,mBAAmB,GAAG,SAAS,CAAC;IAGpD,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAC;IAClC,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAC;IAChC,QAAQ,CAAC,cAAc,EAAE,cAAc,CAAC;IACxC,QAAQ,CAAC,eAAe,EAAE,eAAe,CAAC;IAC1C,QAAQ,CAAC,cAAc,EAAE,cAAc,CAAC;IACxC,QAAQ,CAAC,YAAY,EAAE,YAAY,CAAC;IACpC,QAAQ,CAAC,mBAAmB,EAAE,mBAAmB,CAAC;IAElD,QAAQ,CAAC,eAAe,EAAE,eAAe,CAAC;IAC1C,QAAQ,CAAC,cAAc,EAAE,cAAc,CAAC;IACxC,QAAQ,CAAC,wBAAwB,EAAE,wBAAwB,CAAC;IAC5D,QAAQ,CAAC,aAAa,EAAE,aAAa,CAAC;IACtC,QAAQ,CAAC,gBAAgB,EAAE,gBAAgB,CAAC;IAC5C,QAAQ,CAAC,eAAe,EAAE,eAAe,CAAC;IAC1C,QAAQ,CAAC,iBAAiB,EAAE,iBAAiB,CAAC;IAC9C,QAAQ,CAAC,wBAAwB,EAAE,mCAAmC,CAAC;IAGvE,QAAQ,CAAC,oBAAoB,EAAE,oBAAoB,CAAC;IACpD,QAAQ,CAAC,gBAAgB,EAAE,gBAAgB,CAAC;IAG5C,QAAQ,CAAC,mBAAmB,EAAE,mBAAmB,CAAC;IAGlD,QAAQ,CAAC,YAAY,EAAE,YAAY,CAAC;IACpC,QAAQ,CAAC,gBAAgB,EAAE,gBAAgB,CAAC;IAC5C,QAAQ,CAAC,aAAa,EAAE,aAAa,CAAC;gBAE1B,MAAM,EAAE,CAAC,EAAE,aAAa,EAAE,CAAC;IAoDjC,UAAU,CAAC,QAAQ,EAAE,mBAAmB,GAAG,OAAO,CAAC,IAAI,CAAC;IAuC9D;;;OAGG;IACH,mBAAmB,GAAI,OAAO,KAAK,KAAG,IAAI,CAGxC;IAEF,iBAAiB,GAAI,OAAO,KAAK,KAAG,IAAI,CAMtC;IAEF;;;;OAIG;IACH,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI;IAKhE,cAAc,IAAI,MAAM,GAAG,SAAS;IAIpC,OAAO,CAAC,sBAAsB;IAa9B;;OAEG;IACH,mBAAmB,GAChB,UAAU,MAAM,OAAO,CAAC,IAAI,CAAC,KAAG,CAAC,MAAM,IAAI,CAAC,CAG3C;CACL"}

package/lib/stores/ApplicationStore.js

@@ -42,8 +42,10 @@ export class ApplicationExtensionState {
      */
     _$nominalTypeBrand;
 }
+const LEGEND_ACCESS_TOKEN_COOKIE_NAME = 'legend-access-token';
 export class ApplicationStore {
     uuid = uuid();
+    accessToken = undefined;
     /**
      * This is a mechanism to have the store holds references to extension states
      * so that we can refer back to these states when needed or do cross-extensions
@@ -156,6 +158,31 @@ export class ApplicationStore {
     logUnhandledError = (error) => {
         this.logService.error(LogEvent.create(APPLICATION_EVENT.ILLEGAL_APPLICATION_STATE_OCCURRED), 'Encountered unhandled error in component tree', error);
     };
+    /**
+     * Stores the OIDC access token in memory and syncs it to a browser cookie
+     * (`legend-access-token`) so that HTTP clients using `credentials: 'include'`
+     * automatically send it with every request.
+     */
+    setAccessToken(token, maxAge) {
+        this.accessToken = token;
+        this._syncAccessTokenCookie(maxAge);
+    }
+    getAccessToken() {
+        return this.accessToken;
+    }
+    _syncAccessTokenCookie(maxAge) {
+        if (this.accessToken) {
+            let cookie = `${LEGEND_ACCESS_TOKEN_COOKIE_NAME}=${encodeURIComponent(this.accessToken)}; path=/; Secure; SameSite=Strict`;
+            if (maxAge !== undefined && maxAge > 0) {
+                cookie += `; max-age=${Math.floor(maxAge)}`;
+            }
+            document.cookie = cookie;
+        }
+        else {
+            // expire the cookie
+            document.cookie = `${LEGEND_ACCESS_TOKEN_COOKIE_NAME}=; path=/; Secure; SameSite=Strict; max-age=0`;
+        }
+    }
     /**
      * Guarantee that the action being used by the component does not throw unhandled errors
      */

package/lib/stores/ApplicationStore.js.map

@@ -1 +1 @@
-{"version":3,"file":"ApplicationStore.js","sourceRoot":"","sources":["../../src/stores/ApplicationStore.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EACL,aAAa,EACb,UAAU,EACV,QAAQ,EACR,IAAI,EACJ,WAAW,EACX,iBAAiB,EACjB,iBAAiB,EAEjB,aAAa,GACd,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,iBAAiB,EAAE,MAAM,sCAAsC,CAAC;AAGzE,OAAO,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AACjE,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AACzD,OAAO,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AACvD,OAAO,EAAE,mCAAmC,EAAE,MAAM,0CAA0C,CAAC;AAE/F,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AACrD,OAAO,EAAE,wBAAwB,EAAE,MAAM,+BAA+B,CAAC;AACzE,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AACvD,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACjD,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAC/D,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AACvD,OAAO,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAC;AAC7D,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AACzD,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAC/C,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACnD,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AACzD,OAAO,EAAE,iBAAiB,EAAE,MAAM,mCAAmC,CAAC;AACtE,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AACrD,OAAO,EAAE,gBAAgB,EAAE,MAAM,kCAAkC,CAAC;AAEpE,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AACvD,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAO/D,MAAM,OAAgB,yBAAyB;IAC7C;;;OAGG;IACc,kBAAkB,CAA+B;CAGnE;AAED,MAAM,OAAO,gBAAgB;IAIlB,IAAI,GAAG,IAAI,EAAE,CAAC;IAEvB;;;;OAIG;IACM,eAAe,GAAgC,EAAE,CAAC;IAElD,MAAM,CAAI;IACV,aAAa,CAAI;IACjB,SAAS,GAAG,WAAW,CAAC,MAAM,EAAE,CAAC;IACjC,QAAQ,CAAmC;IAEpD,OAAO;IACE,WAAW,CAAc;IACzB,UAAU,CAAa;IACvB,cAAc,CAAiB;IAC/B,eAAe,CAAkB;IACjC,cAAc,CAAiB;IAC/B,YAAY,CAAe;IAC3B,mBAAmB,CAAsB;IAEzC,eAAe,CAAkB;IACjC,cAAc,CAAiB;IAC/B,wBAAwB,CAA2B;IACnD,aAAa,CAAgB;IAC7B,gBAAgB,CAAmB;IACnC,eAAe,CAAkB;IACjC,iBAAiB,CAAoB;IACrC,wBAAwB,CAAsC;IAEvE,UAAU;IACD,oBAAoB,CAAuB;IAC3C,gBAAgB,CAAmB;IAE5C,UAAU;IACD,mBAAmB,CAAsB;IAElD,QAAQ;IACC,YAAY,CAAe;IAC3B,gBAAgB,CAAmB;IACnC,aAAa,CAAgB;IAEtC,YAAY,MAAS,EAAE,aAAgB;QACrC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,aAAa,GAAG,aAAa,CAAC;QAEnC,IAAI,CAAC,WAAW,GAAG,IAAI,WAAW,EAAE,CAAC;QACrC,8EAA8E;QAC9E,IAAI,CAAC,UAAU,GAAG,IAAI,UAAU,EAAE,CAAC;QACnC,IAAI,CAAC,UAAU,CAAC,eAAe,CAAC,aAAa,CAAC,gBAAgB,EAAE,CAAC,CAAC;QAClE,IAAI,CAAC,cAAc,GAAG,IAAI,cAAc,CAAC,IAAI,CAAC,CAAC;QAC/C,IAAI,CAAC,cAAc,GAAG,IAAI,cAAc,CAAC,IAAI,CAAC,CAAC;QAC/C,IAAI,CAAC,eAAe,GAAG,IAAI,eAAe,CAAC,IAAI,CAAC,CAAC;QACjD,IAAI,CAAC,YAAY,GAAG,IAAI,YAAY,CAAC,IAAI,CAAC,CAAC;QAC3C,IAAI,CAAC,mBAAmB,GAAG,IAAI,mBAAmB,EAAE,CAAC;QAErD,IAAI,CAAC,eAAe,GAAG,IAAI,eAAe,CAAC,IAAI,CAAC,CAAC;QACjD,IAAI,CAAC,aAAa,GAAG,IAAI,aAAa,CAAC,IAAI,CAAC,CAAC;QAC7C,IAAI,CAAC,gBAAgB,GAAG,IAAI,gBAAgB,CAAC,IAAI,CAAC,CAAC;QACnD,IAAI,CAAC,eAAe,GAAG,IAAI,eAAe,CAAC,IAAI,CAAC,CAAC;QACjD,IAAI,CAAC,cAAc,GAAG,IAAI,cAAc,CAAC,IAAI,CAAC,CAAC;QAC/C,IAAI,CAAC,wBAAwB,GAAG,IAAI,wBAAwB,CAAC,IAAI,CAAC,CAAC;QAEnE,IAAI,CAAC,iBAAiB,GAAG,IAAI,iBAAiB,CAAC,IAAI,gBAAgB,EAAE,CAAC,CAAC;QACvE,IAAI,CAAC,wBAAwB,GAAG,IAAI,mCAAmC,CACrE,IAAI,CACL,CAAC;QAEF,IAAI,CAAC,oBAAoB,GAAG,IAAI,oBAAoB,CAAC,IAAI,CAAC,CAAC;QAC3D,IAAI,CAAC,gBAAgB,GAAG,IAAI,gBAAgB,CAAC,IAAI,CAAC,CAAC;QACnD,IAAI,CAAC,mBAAmB,GAAG,IAAI,mBAAmB,CAAC,IAAI,CAAC,CAAC;QAEzD,IAAI,CAAC,YAAY,GAAG,IAAI,YAAY,EAAE,CAAC;QACvC,IAAI,CAAC,YAAY,CAAC,4BAA4B,CAC5C,aAAa,CAAC,uBAAuB,EAAE,CACxC,CAAC;QACF,IAAI,CAAC,gBAAgB,GAAG,IAAI,gBAAgB,CAAC,IAAI,CAAC,CAAC;QACnD,IAAI,CAAC,gBAAgB,CAAC,eAAe,CACnC,aAAa,CAAC,0BAA0B,EAAE,CAC3C,CAAC;QACF,IAAI,CAAC,gBAAgB,CAAC,KAAK,EAAE,CAAC;QAC9B,IAAI,CAAC,aAAa,GAAG,IAAI,aAAa,EAAE,CAAC;QACzC,IAAI,CAAC,aAAa,CAAC,eAAe,CAAC,aAAa,CAAC,uBAAuB,EAAE,CAAC,CAAC;QAE5E,aAAa;QACb,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC,aAAa;aACtC,qBAAqB,EAAE;aACvB,OAAO,CACN,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,yCAAyC,EAAE,EAAE,IAAI,EAAE,CACvE;aACA,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;aAC/B,MAAM,CAAC,aAAa,CAAC,CAAC;IAC3B,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,QAA6B;QAC5C,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,gBAAgB,EAAE,CAAC;YACrC,0CAA0C;YAC1C,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,YAAY,EAAE,CAAC;gBAC1C,IAAI,CAAC,mBAAmB,CAAC,kBAAkB,CACzC,qCAAqC,CACtC,CAAC;YACJ,CAAC;iBAAM,CAAC;gBACN,IAAI,CAAC,UAAU,CAAC,KAAK,CACnB,QAAQ,CAAC,MAAM,CAAC,iBAAiB,CAAC,KAAK,CAAC,EACxC,qCAAqC,CACtC,CAAC;YACJ,CAAC;YACD,OAAO;QACT,CAAC;QACD,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE,CAAC;QAE5B,IAAI,CAAC;YACH,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;gBAClB,MAAM,IAAI,iBAAiB,CAAC,gCAAgC,CAAC,CAAC;YAChE,CAAC;YACA,IAAyC,CAAC,QAAQ,GAAG,QAAQ,CAAC;YAC9D,IAAyC,CAAC,iBAAiB;gBAC1D,IAAI,iBAAiB,CAAC,QAAQ,CAAC,YAAY,EAAE,CAAC,CAAC;YAEjD,MAAM,QAAQ,CAAC,UAAU,EAAE,CAAC;YAE5B,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;QACxB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,iBAAiB,CAAC,KAAK,CAAC,CAAC;YACzB,IAAI,CAAC,mBAAmB,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;YAC5C,IAAI,CAAC,UAAU,CAAC,KAAK,CACnB,QAAQ,CAAC,MAAM,CAAC,iBAAiB,CAAC,yBAAyB,CAAC,EAC5D,mCAAmC,CACpC,CAAC;YACF,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;QACxB,CAAC;IACH,CAAC;IAED;;;OAGG;IACH,mBAAmB,GAAG,CAAC,KAAY,EAAQ,EAAE;QAC3C,IAAI,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC;QAC9B,IAAI,CAAC,mBAAmB,CAAC,kBAAkB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAC7D,CAAC,CAAC;IAEF,iBAAiB,GAAG,CAAC,KAAY,EAAQ,EAAE;QACzC,IAAI,CAAC,UAAU,CAAC,KAAK,CACnB,QAAQ,CAAC,MAAM,CAAC,iBAAiB,CAAC,kCAAkC,CAAC,EACrE,+CAA+C,EAC/C,KAAK,CACN,CAAC;IACJ,CAAC,CAAC;IAEF;;OAEG;IACH,mBAAmB,GACjB,CAAC,QAA6B,EAAgB,EAAE,CAChD,GAAS,EAAE;QACT,QAAQ,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;IAC7C,CAAC,CAAC;CACL"}
+{"version":3,"file":"ApplicationStore.js","sourceRoot":"","sources":["../../src/stores/ApplicationStore.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EACL,aAAa,EACb,UAAU,EACV,QAAQ,EACR,IAAI,EACJ,WAAW,EACX,iBAAiB,EACjB,iBAAiB,EAEjB,aAAa,GACd,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,iBAAiB,EAAE,MAAM,sCAAsC,CAAC;AAGzE,OAAO,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AACjE,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AACzD,OAAO,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AACvD,OAAO,EAAE,mCAAmC,EAAE,MAAM,0CAA0C,CAAC;AAE/F,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AACrD,OAAO,EAAE,wBAAwB,EAAE,MAAM,+BAA+B,CAAC;AACzE,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AACvD,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACjD,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAC/D,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AACvD,OAAO,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAC;AAC7D,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AACzD,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAC/C,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACnD,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AACzD,OAAO,EAAE,iBAAiB,EAAE,MAAM,mCAAmC,CAAC;AACtE,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AACrD,OAAO,EAAE,gBAAgB,EAAE,MAAM,kCAAkC,CAAC;AAEpE,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AACvD,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAO/D,MAAM,OAAgB,yBAAyB;IAC7C;;;OAGG;IACc,kBAAkB,CAA+B;CAGnE;AAED,MAAM,+BAA+B,GAAG,qBAAqB,CAAC;AAE9D,MAAM,OAAO,gBAAgB;IAIlB,IAAI,GAAG,IAAI,EAAE,CAAC;IACvB,WAAW,GAAuB,SAAS,CAAC;IAE5C;;;;OAIG;IACM,eAAe,GAAgC,EAAE,CAAC;IAElD,MAAM,CAAI;IACV,aAAa,CAAI;IACjB,SAAS,GAAG,WAAW,CAAC,MAAM,EAAE,CAAC;IACjC,QAAQ,CAAmC;IAEpD,OAAO;IACE,WAAW,CAAc;IACzB,UAAU,CAAa;IACvB,cAAc,CAAiB;IAC/B,eAAe,CAAkB;IACjC,cAAc,CAAiB;IAC/B,YAAY,CAAe;IAC3B,mBAAmB,CAAsB;IAEzC,eAAe,CAAkB;IACjC,cAAc,CAAiB;IAC/B,wBAAwB,CAA2B;IACnD,aAAa,CAAgB;IAC7B,gBAAgB,CAAmB;IACnC,eAAe,CAAkB;IACjC,iBAAiB,CAAoB;IACrC,wBAAwB,CAAsC;IAEvE,UAAU;IACD,oBAAoB,CAAuB;IAC3C,gBAAgB,CAAmB;IAE5C,UAAU;IACD,mBAAmB,CAAsB;IAElD,QAAQ;IACC,YAAY,CAAe;IAC3B,gBAAgB,CAAmB;IACnC,aAAa,CAAgB;IAEtC,YAAY,MAAS,EAAE,aAAgB;QACrC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,aAAa,GAAG,aAAa,CAAC;QAEnC,IAAI,CAAC,WAAW,GAAG,IAAI,WAAW,EAAE,CAAC;QACrC,8EAA8E;QAC9E,IAAI,CAAC,UAAU,GAAG,IAAI,UAAU,EAAE,CAAC;QACnC,IAAI,CAAC,UAAU,CAAC,eAAe,CAAC,aAAa,CAAC,gBAAgB,EAAE,CAAC,CAAC;QAClE,IAAI,CAAC,cAAc,GAAG,IAAI,cAAc,CAAC,IAAI,CAAC,CAAC;QAC/C,IAAI,CAAC,cAAc,GAAG,IAAI,cAAc,CAAC,IAAI,CAAC,CAAC;QAC/C,IAAI,CAAC,eAAe,GAAG,IAAI,eAAe,CAAC,IAAI,CAAC,CAAC;QACjD,IAAI,CAAC,YAAY,GAAG,IAAI,YAAY,CAAC,IAAI,CAAC,CAAC;QAC3C,IAAI,CAAC,mBAAmB,GAAG,IAAI,mBAAmB,EAAE,CAAC;QAErD,IAAI,CAAC,eAAe,GAAG,IAAI,eAAe,CAAC,IAAI,CAAC,CAAC;QACjD,IAAI,CAAC,aAAa,GAAG,IAAI,aAAa,CAAC,IAAI,CAAC,CAAC;QAC7C,IAAI,CAAC,gBAAgB,GAAG,IAAI,gBAAgB,CAAC,IAAI,CAAC,CAAC;QACnD,IAAI,CAAC,eAAe,GAAG,IAAI,eAAe,CAAC,IAAI,CAAC,CAAC;QACjD,IAAI,CAAC,cAAc,GAAG,IAAI,cAAc,CAAC,IAAI,CAAC,CAAC;QAC/C,IAAI,CAAC,wBAAwB,GAAG,IAAI,wBAAwB,CAAC,IAAI,CAAC,CAAC;QAEnE,IAAI,CAAC,iBAAiB,GAAG,IAAI,iBAAiB,CAAC,IAAI,gBAAgB,EAAE,CAAC,CAAC;QACvE,IAAI,CAAC,wBAAwB,GAAG,IAAI,mCAAmC,CACrE,IAAI,CACL,CAAC;QAEF,IAAI,CAAC,oBAAoB,GAAG,IAAI,oBAAoB,CAAC,IAAI,CAAC,CAAC;QAC3D,IAAI,CAAC,gBAAgB,GAAG,IAAI,gBAAgB,CAAC,IAAI,CAAC,CAAC;QACnD,IAAI,CAAC,mBAAmB,GAAG,IAAI,mBAAmB,CAAC,IAAI,CAAC,CAAC;QAEzD,IAAI,CAAC,YAAY,GAAG,IAAI,YAAY,EAAE,CAAC;QACvC,IAAI,CAAC,YAAY,CAAC,4BAA4B,CAC5C,aAAa,CAAC,uBAAuB,EAAE,CACxC,CAAC;QACF,IAAI,CAAC,gBAAgB,GAAG,IAAI,gBAAgB,CAAC,IAAI,CAAC,CAAC;QACnD,IAAI,CAAC,gBAAgB,CAAC,eAAe,CACnC,aAAa,CAAC,0BAA0B,EAAE,CAC3C,CAAC;QACF,IAAI,CAAC,gBAAgB,CAAC,KAAK,EAAE,CAAC;QAC9B,IAAI,CAAC,aAAa,GAAG,IAAI,aAAa,EAAE,CAAC;QACzC,IAAI,CAAC,aAAa,CAAC,eAAe,CAAC,aAAa,CAAC,uBAAuB,EAAE,CAAC,CAAC;QAE5E,aAAa;QACb,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC,aAAa;aACtC,qBAAqB,EAAE;aACvB,OAAO,CACN,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,yCAAyC,EAAE,EAAE,IAAI,EAAE,CACvE;aACA,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;aAC/B,MAAM,CAAC,aAAa,CAAC,CAAC;IAC3B,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,QAA6B;QAC5C,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,gBAAgB,EAAE,CAAC;YACrC,0CAA0C;YAC1C,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,YAAY,EAAE,CAAC;gBAC1C,IAAI,CAAC,mBAAmB,CAAC,kBAAkB,CACzC,qCAAqC,CACtC,CAAC;YACJ,CAAC;iBAAM,CAAC;gBACN,IAAI,CAAC,UAAU,CAAC,KAAK,CACnB,QAAQ,CAAC,MAAM,CAAC,iBAAiB,CAAC,KAAK,CAAC,EACxC,qCAAqC,CACtC,CAAC;YACJ,CAAC;YACD,OAAO;QACT,CAAC;QACD,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE,CAAC;QAE5B,IAAI,CAAC;YACH,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;gBAClB,MAAM,IAAI,iBAAiB,CAAC,gCAAgC,CAAC,CAAC;YAChE,CAAC;YACA,IAAyC,CAAC,QAAQ,GAAG,QAAQ,CAAC;YAC9D,IAAyC,CAAC,iBAAiB;gBAC1D,IAAI,iBAAiB,CAAC,QAAQ,CAAC,YAAY,EAAE,CAAC,CAAC;YAEjD,MAAM,QAAQ,CAAC,UAAU,EAAE,CAAC;YAE5B,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;QACxB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,iBAAiB,CAAC,KAAK,CAAC,CAAC;YACzB,IAAI,CAAC,mBAAmB,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;YAC5C,IAAI,CAAC,UAAU,CAAC,KAAK,CACnB,QAAQ,CAAC,MAAM,CAAC,iBAAiB,CAAC,yBAAyB,CAAC,EAC5D,mCAAmC,CACpC,CAAC;YACF,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;QACxB,CAAC;IACH,CAAC;IAED;;;OAGG;IACH,mBAAmB,GAAG,CAAC,KAAY,EAAQ,EAAE;QAC3C,IAAI,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC;QAC9B,IAAI,CAAC,mBAAmB,CAAC,kBAAkB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAC7D,CAAC,CAAC;IAEF,iBAAiB,GAAG,CAAC,KAAY,EAAQ,EAAE;QACzC,IAAI,CAAC,UAAU,CAAC,KAAK,CACnB,QAAQ,CAAC,MAAM,CAAC,iBAAiB,CAAC,kCAAkC,CAAC,EACrE,+CAA+C,EAC/C,KAAK,CACN,CAAC;IACJ,CAAC,CAAC;IAEF;;;;OAIG;IACH,cAAc,CAAC,KAAyB,EAAE,MAAe;QACvD,IAAI,CAAC,WAAW,GAAG,KAAK,CAAC;QACzB,IAAI,CAAC,sBAAsB,CAAC,MAAM,CAAC,CAAC;IACtC,CAAC;IAED,cAAc;QACZ,OAAO,IAAI,CAAC,WAAW,CAAC;IAC1B,CAAC;IAEO,sBAAsB,CAAC,MAAe;QAC5C,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YACrB,IAAI,MAAM,GAAG,GAAG,+BAA+B,IAAI,kBAAkB,CAAC,IAAI,CAAC,WAAW,CAAC,mCAAmC,CAAC;YAC3H,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,GAAG,CAAC,EAAE,CAAC;gBACvC,MAAM,IAAI,aAAa,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;YAC9C,CAAC;YACD,QAAQ,CAAC,MAAM,GAAG,MAAM,CAAC;QAC3B,CAAC;aAAM,CAAC;YACN,oBAAoB;YACpB,QAAQ,CAAC,MAAM,GAAG,GAAG,+BAA+B,+CAA+C,CAAC;QACtG,CAAC;IACH,CAAC;IAED;;OAEG;IACH,mBAAmB,GACjB,CAAC,QAA6B,EAAgB,EAAE,CAChD,GAAS,EAAE;QACT,QAAQ,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;IAC7C,CAAC,CAAC;CACL"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@finos/legend-application",
-  "version": "16.0.98",
+  "version": "16.0.99",
   "description": "Legend application core",
   "keywords": [
     "legend",
@@ -45,7 +45,7 @@
     "test:watch": "jest --watch"
   },
   "dependencies": {
-    "@finos/legend-art": "7.1.143",
+    "@finos/legend-art": "7.1.144",
     "@finos/legend-shared": "11.0.22",
     "@finos/legend-storage": "3.0.143",
     "@types/react": "19.0.10",
@@ -53,10 +53,12 @@
     "@types/react-router-dom": "5.3.3",
     "mobx": "6.13.6",
     "mobx-react-lite": "4.1.0",
+    "oidc-client-ts": "^3.2.0",
     "react": "19.0.1",
     "react-dnd": "16.0.1",
     "react-dnd-html5-backend": "16.0.1",
     "react-dom": "19.0.1",
+    "react-oidc-context": "^3.3.0",
     "react-router": "7.3.0",
     "react-router-dom": "7.3.0",
     "serializr": "3.0.3",

package/src/__lib__/LegendApplicationEvent.ts

@@ -53,5 +53,7 @@ export enum APPLICATION_EVENT {
 
   APPLICATION_TELEMETRY_EVENT__FAILURE = 'application.telemetry-event.failure',
 
+  TOKEN_EXPIRED = 'application.token.expired',
+
   DEBUG = 'development.debug',
 }

package/src/components/LegendTokenSync.tsx

@@ -0,0 +1,61 @@
+/**
+ * Copyright (c) 2026-present, Goldman Sachs
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+import { useEffect } from 'react';
+import { useAuth } from 'react-oidc-context';
+import { LogEvent } from '@finos/legend-shared';
+import { useApplicationStore } from './ApplicationStoreProvider.js';
+import { APPLICATION_EVENT } from '../__lib__/LegendApplicationEvent.js';
+
+/**
+ * Must be rendered inside an `<AuthProvider>` and an
+ * `<ApplicationStoreProvider>`.
+ */
+export const LegendTokenSync = (props: {
+  children: React.ReactNode;
+}): React.ReactElement => {
+  const auth = useAuth();
+  const applicationStore = useApplicationStore();
+  const token = auth.user?.access_token;
+  const expiresAt = auth.user?.expires_at;
+
+  // Sync token into ApplicationStore whenever it changes (including
+  // after a successful automatic silent renewal).  When the auth object
+  // contains an `expires_at` timestamp we derive `max-age` so the
+  // browser cookie expires at the same time as the token.
+  useEffect(() => {
+    const maxAge =
+      expiresAt !== undefined
+        ? expiresAt - Math.floor(Date.now() / 1000)
+        : undefined;
+    applicationStore.setAccessToken(token ?? undefined, maxAge);
+  }, [applicationStore, token, expiresAt]);
+
+  // If the token fully expires (automatic renewal failed or was never
+  // attempted) clear the stale token immediately.
+  useEffect(() => {
+    const removeExpired = auth.events.addAccessTokenExpired(() => {
+      applicationStore.logService.warn(
+        LogEvent.create(APPLICATION_EVENT.TOKEN_EXPIRED),
+        'OIDC access token expired — clearing token',
+      );
+      applicationStore.setAccessToken(undefined);
+    });
+    return removeExpired;
+  }, [auth.events, applicationStore]);
+
+  return <>{props.children}</>;
+};

package/src/index.ts

@@ -32,6 +32,8 @@ export * from './components/ApplicationFrameworkProvider.js';
 export * from './components/useApplicationNavigationContext.js';
 export * from './components/useCommands.js';
 export * from './components/ReleaseNotesManager.js';
+export * from './components/LegendTokenSync.js';
+
 export {
   forceDispatchKeyboardEvent,
   BackdropContainer,

package/src/stores/ApplicationStore.ts

@@ -66,11 +66,14 @@ export abstract class ApplicationExtensionState {
   abstract get INTERNAL__identifierKey(): string;
 }
 
+const LEGEND_ACCESS_TOKEN_COOKIE_NAME = 'legend-access-token';
+
 export class ApplicationStore<
   T extends LegendApplicationConfig,
   V extends LegendApplicationPluginManager<LegendApplicationPlugin>,
 > {
   readonly uuid = uuid();
+  accessToken: string | undefined = undefined;
 
   /**
    * This is a mechanism to have the store holds references to extension states
@@ -222,6 +225,33 @@ export class ApplicationStore<
     );
   };
 
+  /**
+   * Stores the OIDC access token in memory and syncs it to a browser cookie
+   * (`legend-access-token`) so that HTTP clients using `credentials: 'include'`
+   * automatically send it with every request.
+   */
+  setAccessToken(token: string | undefined, maxAge?: number): void {
+    this.accessToken = token;
+    this._syncAccessTokenCookie(maxAge);
+  }
+
+  getAccessToken(): string | undefined {
+    return this.accessToken;
+  }
+
+  private _syncAccessTokenCookie(maxAge?: number): void {
+    if (this.accessToken) {
+      let cookie = `${LEGEND_ACCESS_TOKEN_COOKIE_NAME}=${encodeURIComponent(this.accessToken)}; path=/; Secure; SameSite=Strict`;
+      if (maxAge !== undefined && maxAge > 0) {
+        cookie += `; max-age=${Math.floor(maxAge)}`;
+      }
+      document.cookie = cookie;
+    } else {
+      // expire the cookie
+      document.cookie = `${LEGEND_ACCESS_TOKEN_COOKIE_NAME}=; path=/; Secure; SameSite=Strict; max-age=0`;
+    }
+  }
+
   /**
    * Guarantee that the action being used by the component does not throw unhandled errors
    */

package/tsconfig.json

@@ -104,6 +104,7 @@
     "./src/components/ApplicationStoreProvider.tsx",
     "./src/components/BlockingAlert.tsx",
     "./src/components/BrowserEnvironmentProvider.tsx",
+    "./src/components/LegendTokenSync.tsx",
     "./src/components/NotificationManager.tsx",
     "./src/components/ReleaseNotesManager.tsx",
     "./src/components/VirtualAssistant.tsx",