@geexcode/geex-extensions-authentication 0.0.1

package/dist/fesm2022/geexcode-geex-extensions-authentication.mjs

@@ -0,0 +1,142 @@
+import { signal, InjectionToken, makeEnvironmentProviders, importProvidersFrom } from '@angular/core';
+import { gql, Apollo } from 'apollo-angular';
+import { OAuthService, OAuthStorage, OAuthModule } from 'angular-oauth2-oidc';
+import { firstValueFrom, map } from 'rxjs';
+import { guardedSignal, GEEX_LOGIN_PATH, provideGeexModuleContribution } from '@geexcode/geex-angular';
+
+const GQL_FEDERATE_AUTH = gql `mutation federateAuthenticate(
+  $code: String!
+  $loginProvider: LoginProviderEnum!
+) {
+  federateAuthenticate(
+    request: { code: $code, loginProvider: $loginProvider }
+  ) {
+    token
+    loginProvider
+    userId
+    name
+    user {
+      id
+      username
+      nickname
+      phoneNumber
+      email
+      isEnable
+      createdOn
+      ... on IUser {
+        roleNames
+        roleIds
+        permissions
+        orgCodes
+        avatarFileId
+        orgs {
+          allParentOrgs {
+            code
+            name
+          }
+          name
+          code
+        }
+        claims {
+          claimType
+          claimValue
+        }
+        avatarFile {
+          id
+          createdOn
+          fileSize
+          mimeType
+          storageType
+          fileName
+          md5
+          url
+        }
+      }
+    }
+  }
+}
+`;
+function createAuthenticationModule(injector) {
+    const _user = signal(null, ...(ngDevMode ? [{ debugName: "_user" }] : []));
+    let _initialized = false;
+    let _initPromise = null;
+    const runInit = () => {
+        _initPromise = (async () => {
+            try {
+                const userData = await module.loadUserData();
+                _user.set(userData ?? null);
+                _initialized = true;
+            }
+            catch (err) {
+                console.error(err);
+            }
+        })();
+        return _initPromise;
+    };
+    const module = {
+        init: () => {
+            if (_initPromise) {
+                return _initPromise;
+            }
+            return runInit();
+        },
+        reload: () => {
+            _initialized = false;
+            _initPromise = null;
+            return runInit();
+        },
+        user: guardedSignal(_user, () => _initialized),
+        async loadUserData() {
+            const oAuthService = injector.get(OAuthService);
+            try {
+                // Always discover: issuer alignment is required for id_token / userinfo, not only endpoint URLs.
+                await oAuthService.loadDiscoveryDocument();
+                if (!oAuthService.hasValidAccessToken()) {
+                    return undefined;
+                }
+                await oAuthService.loadUserProfile();
+                const profile = oAuthService.getIdentityClaims();
+                if (!profile?.login_provider) {
+                    return undefined;
+                }
+                return await firstValueFrom(injector
+                    .get(Apollo)
+                    .mutate({
+                    mutation: GQL_FEDERATE_AUTH,
+                    variables: {
+                        code: oAuthService.getAccessToken(),
+                        loginProvider: profile.login_provider,
+                    },
+                })
+                    .pipe(map(res => res?.data?.federateAuthenticate.user)));
+            }
+            catch (err) {
+                console.error(err);
+            }
+            return undefined;
+        },
+    };
+    return module;
+}
+
+const GEEX_AUTHENTICATION_OPTIONS = new InjectionToken("GEEX_AUTHENTICATION_OPTIONS");
+function provideGeexAuthentication(options = {}) {
+    return makeEnvironmentProviders([
+        { provide: GEEX_AUTHENTICATION_OPTIONS, useValue: options },
+        ...(options.loginPath ? [{ provide: GEEX_LOGIN_PATH, useValue: options.loginPath }] : []),
+        { provide: OAuthStorage, useFactory: options.oauthStorage ?? (() => localStorage) },
+        importProvidersFrom(OAuthModule.forRoot()),
+        provideGeexModuleContribution({
+            createModules: ({ injector }) => ({
+                authentication: (options.createAuthenticationModule ?? createAuthenticationModule)(injector),
+            }),
+        }),
+    ]);
+}
+
+/**
+ * Generated bundle index. Do not edit.
+ */
+
+export { GEEX_AUTHENTICATION_OPTIONS, createAuthenticationModule, provideGeexAuthentication };
+//# sourceMappingURL=geexcode-geex-extensions-authentication.mjs.map

package/dist/fesm2022/geexcode-geex-extensions-authentication.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"geexcode-geex-extensions-authentication.mjs","sources":["../../src/authentication.module.ts","../../src/provide-geex-authentication.ts","../../src/geexcode-geex-extensions-authentication.ts"],"sourcesContent":["import { Injector, signal } from \"@angular/core\";\nimport { Apollo, gql } from \"apollo-angular\";\nimport { OAuthService } from \"angular-oauth2-oidc\";\nimport type { User } from \"@geexcode/geex-extensions-identity\";\nimport { firstValueFrom, map } from \"rxjs\";\nimport { guardedSignal } from \"@geexcode/geex-angular\";\nimport type { AuthenticationModule } from \"./authentication.types\";\n\nconst GQL_FEDERATE_AUTH = gql`mutation federateAuthenticate(\n  $code: String!\n  $loginProvider: LoginProviderEnum!\n) {\n  federateAuthenticate(\n    request: { code: $code, loginProvider: $loginProvider }\n  ) {\n    token\n    loginProvider\n    userId\n    name\n    user {\n      id\n      username\n      nickname\n      phoneNumber\n      email\n      isEnable\n      createdOn\n      ... on IUser {\n        roleNames\n        roleIds\n        permissions\n        orgCodes\n        avatarFileId\n        orgs {\n          allParentOrgs {\n            code\n            name\n          }\n          name\n          code\n        }\n        claims {\n          claimType\n          claimValue\n        }\n        avatarFile {\n          id\n          createdOn\n          fileSize\n          mimeType\n          storageType\n          fileName\n          md5\n          url\n        }\n      }\n    }\n  }\n}\n`;\n\nexport function createAuthenticationModule(injector: Injector): AuthenticationModule {\n  const _user = signal<User | null>(null);\n  let _initialized = false;\n  let _initPromise: Promise<void> | null = null;\n\n  const runInit = () => {\n    _initPromise = (async () => {\n      try {\n        const userData = await module.loadUserData();\n        _user.set(userData ?? null);\n        _initialized = true;\n      } catch (err) {\n        console.error(err);\n      }\n    })();\n    return _initPromise;\n  };\n\n  const module = {\n    init: () => {\n      if (_initPromise) {\n        return _initPromise;\n      }\n      return runInit();\n    },\n    reload: () => {\n      _initialized = false;\n      _initPromise = null;\n      return runInit();\n    },\n    user: guardedSignal(_user, () => _initialized),\n    async loadUserData(): Promise<User | undefined> {\n      const oAuthService = injector.get(OAuthService);\n      try {\n        // Always discover: issuer alignment is required for id_token / userinfo, not only endpoint URLs.\n        await oAuthService.loadDiscoveryDocument();\n        if (!oAuthService.hasValidAccessToken()) {\n          return undefined;\n        }\n        await oAuthService.loadUserProfile();\n        const profile = oAuthService.getIdentityClaims() as { login_provider?: string } | null;\n        if (!profile?.login_provider) {\n          return undefined;\n        }\n        type FederateAuthResponse = { federateAuthenticate: { user: User } };\n        return await firstValueFrom(\n          injector\n            .get(Apollo)\n            .mutate<FederateAuthResponse>({\n              mutation: GQL_FEDERATE_AUTH,\n              variables: {\n                code: oAuthService.getAccessToken(),\n                loginProvider: profile.login_provider,\n              },\n            })\n            .pipe(map(res => res?.data?.federateAuthenticate.user)),\n        );\n      } catch (err) {\n        console.error(err);\n      }\n      return undefined;\n    },\n  };\n  return module as AuthenticationModule;\n}\n","import {\r\r\n  EnvironmentProviders,\r\r\n  InjectionToken,\r\r\n  Injector,\r\r\n  importProvidersFrom,\r\r\n  makeEnvironmentProviders,\r\r\n} from \"@angular/core\";\r\r\nimport { GEEX_LOGIN_PATH, provideGeexModuleContribution } from \"@geexcode/geex-angular\";\r\r\nimport { OAuthModule, OAuthStorage } from \"angular-oauth2-oidc\";\r\r\nimport { createAuthenticationModule } from \"./authentication.module\";\r\r\nimport type { AuthenticationModule } from \"./authentication.types\";\r\r\n\r\r\nexport interface GeexAuthenticationOptions {\r\r\n  readonly createAuthenticationModule?: (injector: Injector) => AuthenticationModule;\r\r\n  readonly loginPath?: string;\r\r\n  readonly oauthStorage?: () => OAuthStorage;\r\r\n}\r\r\n\r\r\nexport const GEEX_AUTHENTICATION_OPTIONS = new InjectionToken<Readonly<GeexAuthenticationOptions>>(\r\r\n  \"GEEX_AUTHENTICATION_OPTIONS\",\r\r\n);\r\r\n\r\r\nexport function provideGeexAuthentication(\r\r\n  options: Readonly<GeexAuthenticationOptions> = {},\r\r\n): EnvironmentProviders {\r\r\n  return makeEnvironmentProviders([\r\r\n    { provide: GEEX_AUTHENTICATION_OPTIONS, useValue: options },\r\r\n    ...(options.loginPath ? [{ provide: GEEX_LOGIN_PATH, useValue: options.loginPath }] : []),\r\r\n    { provide: OAuthStorage, useFactory: options.oauthStorage ?? (() => localStorage) },\r\r\n    importProvidersFrom(OAuthModule.forRoot()),\r\r\n    provideGeexModuleContribution({\r\r\n      createModules: ({ injector }) => ({\r\r\n        authentication: (options.createAuthenticationModule ?? createAuthenticationModule)(injector),\r\r\n      }),\r\r\n    }),\r\r\n  ]);\r\r\n}\r\r\n","/**\n * Generated bundle index. Do not edit.\n */\n\nexport * from './public-api';\n"],"names":[],"mappings":";;;;;;AAQA,MAAM,iBAAiB,GAAG,GAAG,CAAA,CAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAmD5B;AAEK,SAAU,0BAA0B,CAAC,QAAkB,EAAA;AAC3D,IAAA,MAAM,KAAK,GAAG,MAAM,CAAc,IAAI,iDAAC;IACvC,IAAI,YAAY,GAAG,KAAK;IACxB,IAAI,YAAY,GAAyB,IAAI;IAE7C,MAAM,OAAO,GAAG,MAAK;AACnB,QAAA,YAAY,GAAG,CAAC,YAAW;AACzB,YAAA,IAAI;AACF,gBAAA,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,YAAY,EAAE;AAC5C,gBAAA,KAAK,CAAC,GAAG,CAAC,QAAQ,IAAI,IAAI,CAAC;gBAC3B,YAAY,GAAG,IAAI;YACrB;YAAE,OAAO,GAAG,EAAE;AACZ,gBAAA,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC;YACpB;QACF,CAAC,GAAG;AACJ,QAAA,OAAO,YAAY;AACrB,IAAA,CAAC;AAED,IAAA,MAAM,MAAM,GAAG;QACb,IAAI,EAAE,MAAK;YACT,IAAI,YAAY,EAAE;AAChB,gBAAA,OAAO,YAAY;YACrB;YACA,OAAO,OAAO,EAAE;QAClB,CAAC;QACD,MAAM,EAAE,MAAK;YACX,YAAY,GAAG,KAAK;YACpB,YAAY,GAAG,IAAI;YACnB,OAAO,OAAO,EAAE;QAClB,CAAC;QACD,IAAI,EAAE,aAAa,CAAC,KAAK,EAAE,MAAM,YAAY,CAAC;AAC9C,QAAA,MAAM,YAAY,GAAA;YAChB,MAAM,YAAY,GAAG,QAAQ,CAAC,GAAG,CAAC,YAAY,CAAC;AAC/C,YAAA,IAAI;;AAEF,gBAAA,MAAM,YAAY,CAAC,qBAAqB,EAAE;AAC1C,gBAAA,IAAI,CAAC,YAAY,CAAC,mBAAmB,EAAE,EAAE;AACvC,oBAAA,OAAO,SAAS;gBAClB;AACA,gBAAA,MAAM,YAAY,CAAC,eAAe,EAAE;AACpC,gBAAA,MAAM,OAAO,GAAG,YAAY,CAAC,iBAAiB,EAAwC;AACtF,gBAAA,IAAI,CAAC,OAAO,EAAE,cAAc,EAAE;AAC5B,oBAAA,OAAO,SAAS;gBAClB;gBAEA,OAAO,MAAM,cAAc,CACzB;qBACG,GAAG,CAAC,MAAM;AACV,qBAAA,MAAM,CAAuB;AAC5B,oBAAA,QAAQ,EAAE,iBAAiB;AAC3B,oBAAA,SAAS,EAAE;AACT,wBAAA,IAAI,EAAE,YAAY,CAAC,cAAc,EAAE;wBACnC,aAAa,EAAE,OAAO,CAAC,cAAc;AACtC,qBAAA;iBACF;AACA,qBAAA,IAAI,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,EAAE,IAAI,EAAE,oBAAoB,CAAC,IAAI,CAAC,CAAC,CAC1D;YACH;YAAE,OAAO,GAAG,EAAE;AACZ,gBAAA,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC;YACpB;AACA,YAAA,OAAO,SAAS;QAClB,CAAC;KACF;AACD,IAAA,OAAO,MAA8B;AACvC;;MCzFa,2BAA2B,GAAG,IAAI,cAAc,CAE3D,6BAA6B;AAMzB,SAAU,yBAAyB,CAEvC,OAAA,GAA+C,EAAE,EAAA;AAIjD,IAAA,OAAO,wBAAwB,CAAC;AAE9B,QAAA,EAAE,OAAO,EAAE,2BAA2B,EAAE,QAAQ,EAAE,OAAO,EAAE;QAE3D,IAAI,OAAO,CAAC,SAAS,GAAG,CAAC,EAAE,OAAO,EAAE,eAAe,EAAE,QAAQ,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC,GAAG,EAAE,CAAC;AAEzF,QAAA,EAAE,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,OAAO,CAAC,YAAY,KAAK,MAAM,YAAY,CAAC,EAAE;AAEnF,QAAA,mBAAmB,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC;AAE1C,QAAA,6BAA6B,CAAC;YAE5B,aAAa,EAAE,CAAC,EAAE,QAAQ,EAAE,MAAM;gBAEhC,cAAc,EAAE,CAAC,OAAO,CAAC,0BAA0B,IAAI,0BAA0B,EAAE,QAAQ,CAAC;aAE7F,CAAC;SAEH,CAAC;AAEH,KAAA,CAAC;AAEJ;;ACxEA;;AAEG;;;;"}

package/dist/index.d.ts

@@ -0,0 +1,31 @@
+import { WritableSignal, Injector, InjectionToken, EnvironmentProviders } from '@angular/core';
+import { GeexModule } from '@geexcode/geex-angular';
+import { User } from '@geexcode/geex-extensions-identity';
+import { OAuthStorage } from 'angular-oauth2-oidc';
+
+interface AuthenticationModule extends GeexModule<{
+    user: WritableSignal<User | null>;
+    loadUserData(): Promise<User | undefined>;
+    /** Drop cached session and reload user from the current OAuth access token. */
+    reload(): Promise<void>;
+}> {
+}
+declare module "@geexcode/geex-angular" {
+    interface GeexModuleMap {
+        authentication: AuthenticationModule;
+    }
+}
+
+declare function createAuthenticationModule(injector: Injector): AuthenticationModule;
+
+interface GeexAuthenticationOptions {
+    readonly createAuthenticationModule?: (injector: Injector) => AuthenticationModule;
+    readonly loginPath?: string;
+    readonly oauthStorage?: () => OAuthStorage;
+}
+declare const GEEX_AUTHENTICATION_OPTIONS: InjectionToken<Readonly<GeexAuthenticationOptions>>;
+declare function provideGeexAuthentication(options?: Readonly<GeexAuthenticationOptions>): EnvironmentProviders;
+
+export { GEEX_AUTHENTICATION_OPTIONS, createAuthenticationModule, provideGeexAuthentication };
+export type { AuthenticationModule, GeexAuthenticationOptions };
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sources":["../src/authentication.types.ts","../src/authentication.module.ts","../src/provide-geex-authentication.ts"],"mappings":";;;;;AAIA,UAAM,oBAAW,SAAqB,UAAQ;AAC5C,UAAM,cAAc,CAAC,IAAI;AACzB,oBAAgB,OAAO,CAAC,IAAI;;AAE5B,cAAU,OAAO;;AACd;AAEL;AACE;wBACkB,oBAAoB;AACrC;AACF;;AC8CD,iBAAA,qCAA2C,QAAU,GAAA;;ACrCrD,mCAAiB;qDAEkC,QAAQ,KAAK,oBAAoB;AAElF;AAEA,kCAA8B,YAAY;AAE3C;AAID,cAAA,2BAAa,EAAA,cAA2B,CAAA,QAAA,CAAA,yBAAA;AAQxC,iBAAA,yBAAgB,WAEd,QAAS,CAAA,yBAAS,IAAA,oBAEjB;;;;","names":[]}

package/package.json

@@ -0,0 +1,54 @@
+{
+  "name": "@geexcode/geex-extensions-authentication",
+  "version": "0.0.1",
+  "description": "Geex authentication extension: headless OAuth authentication module and domain tokens. Aligns with Geex.Extensions.Authentication.",
+  "sideEffects": false,
+  "peerDependencies": {
+    "@angular/core": "^20.0.0",
+    "@geexcode/geex-angular": ">=0.0.41",
+    "@geexcode/geex-extensions-identity": ">=0.0.1",
+    "angular-oauth2-oidc": ">=15.0.0 <21.0.0",
+    "apollo-angular": "^14.0.0",
+    "graphql": "^16.8.0",
+    "rxjs": "^7.8.0"
+  },
+  "dependencies": {
+    "tslib": "^2.6.3"
+  },
+  "files": [
+    "dist"
+  ],
+  "module": "dist/fesm2022/geexcode-geex-extensions-authentication.mjs",
+  "typings": "dist/index.d.ts",
+  "exports": {
+    "./package.json": {
+      "default": "./package.json"
+    },
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/fesm2022/geexcode-geex-extensions-authentication.mjs",
+      "default": "./dist/fesm2022/geexcode-geex-extensions-authentication.mjs"
+    }
+  },
+  "scripts": {
+    "clean": "rimraf dist",
+    "build": "ng-packagr -p ng-package.json -c tsconfig.lib.json",
+    "test": "node --test src/provide-geex-authentication.node-test.mjs",
+    "prepublishOnly": "npm run build",
+    "publish:public": "npm publish ./dist --access public"
+  },
+  "devDependencies": {
+    "@angular/compiler": "^20.0.0",
+    "@angular/compiler-cli": "^20.0.0",
+    "@angular/core": "^20.0.0",
+    "@geexcode/geex-angular": "workspace:*",
+    "@geexcode/geex-extensions-identity": "workspace:*",
+    "angular-oauth2-oidc": "^20.0.2",
+    "apollo-angular": "^14.1.0",
+    "graphql": "^16.9.0",
+    "ng-packagr": "^20.0.0",
+    "rimraf": "^5.0.5",
+    "rxjs": "^7.8.2",
+    "typescript": "~5.8.3"
+  }
+}