@goldstack/template-user-management 0.1.48 → 0.1.49

package/dist/src/client/executeTokenRequest.d.ts

@@ -0,0 +1,9 @@
+import { GetTokenResults } from './getToken';
+export declare function executeTokenRequest(args: {
+    tokenEndpoint: string;
+    clientId: string;
+    code?: string;
+    refreshToken?: string;
+    redirectUri: string;
+}): Promise<GetTokenResults>;
+//# sourceMappingURL=executeTokenRequest.d.ts.map

package/dist/src/client/executeTokenRequest.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"executeTokenRequest.d.ts","sourceRoot":"","sources":["../../../src/client/executeTokenRequest.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAE7C,wBAAsB,mBAAmB,CAAC,IAAI,EAAE;IAC9C,aAAa,EAAE,MAAM,CAAC;IACtB,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,WAAW,EAAE,MAAM,CAAC;CACrB,GAAG,OAAO,CAAC,eAAe,CAAC,CAoC3B"}

package/dist/src/client/executeTokenRequest.js

@@ -0,0 +1,36 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.executeTokenRequest = executeTokenRequest;
+const getCodeVerifier_1 = require("./getCodeVerifier");
+async function executeTokenRequest(args) {
+    const xhr = new XMLHttpRequest();
+    return new Promise(async (resolve, reject) => {
+        xhr.onload = function () {
+            const response = xhr.response;
+            if (xhr.status == 200) {
+                resolve({
+                    accessToken: response.access_token,
+                    refreshToken: args.refreshToken || response.refresh_token,
+                    idToken: response.id_token,
+                });
+            }
+            else {
+                reject(new Error(`Cannot obtain token ${response.error_description} (${response.error})`));
+            }
+        };
+        xhr.responseType = 'json';
+        xhr.open('POST', args.tokenEndpoint, true);
+        xhr.setRequestHeader('Content-type', 'application/x-www-form-urlencoded');
+        const codeVerifier = await (0, getCodeVerifier_1.getCodeVerifier)();
+        xhr.send(new URLSearchParams({
+            client_id: args.clientId,
+            code_verifier: args.code ? codeVerifier : '',
+            grant_type: args.code ? 'authorization_code' : 'refresh_token',
+            redirect_uri: args.redirectUri,
+            refresh_token: args.refreshToken || '',
+            code: args.code || '',
+            scope: 'openid email profile',
+        }));
+    });
+}
+//# sourceMappingURL=executeTokenRequest.js.map

package/dist/src/client/executeTokenRequest.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"executeTokenRequest.js","sourceRoot":"","sources":["../../../src/client/executeTokenRequest.ts"],"names":[],"mappings":";;AAGA,kDA0CC;AA7CD,uDAAoD;AAG7C,KAAK,UAAU,mBAAmB,CAAC,IAMzC;IACC,MAAM,GAAG,GAAG,IAAI,cAAc,EAAE,CAAC;IAEjC,OAAO,IAAI,OAAO,CAAkB,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE;QAC5D,GAAG,CAAC,MAAM,GAAG;YACX,MAAM,QAAQ,GAAG,GAAG,CAAC,QAAQ,CAAC;YAC9B,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG,EAAE,CAAC;gBACtB,OAAO,CAAC;oBACN,WAAW,EAAE,QAAQ,CAAC,YAAY;oBAClC,YAAY,EAAE,IAAI,CAAC,YAAY,IAAI,QAAQ,CAAC,aAAa;oBACzD,OAAO,EAAE,QAAQ,CAAC,QAAQ;iBAC3B,CAAC,CAAC;YACL,CAAC;iBAAM,CAAC;gBACN,MAAM,CACJ,IAAI,KAAK,CACP,uBAAuB,QAAQ,CAAC,iBAAiB,KAAK,QAAQ,CAAC,KAAK,GAAG,CACxE,CACF,CAAC;YACJ,CAAC;QACH,CAAC,CAAC;QACF,GAAG,CAAC,YAAY,GAAG,MAAM,CAAC;QAC1B,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,aAAa,EAAE,IAAI,CAAC,CAAC;QAC3C,GAAG,CAAC,gBAAgB,CAAC,cAAc,EAAE,mCAAmC,CAAC,CAAC;QAC1E,MAAM,YAAY,GAAG,MAAM,IAAA,iCAAe,GAAE,CAAC;QAC7C,GAAG,CAAC,IAAI,CACN,IAAI,eAAe,CAAC;YAClB,SAAS,EAAE,IAAI,CAAC,QAAQ;YACxB,aAAa,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE;YAC5C,UAAU,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,eAAe;YAC9D,YAAY,EAAE,IAAI,CAAC,WAAW;YAC9B,aAAa,EAAE,IAAI,CAAC,YAAY,IAAI,EAAE;YACtC,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,EAAE;YACrB,KAAK,EAAE,sBAAsB;SAC9B,CAAC,CACH,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/src/client/getAndPersistToken.d.ts

@@ -0,0 +1,12 @@
+/**
+ * Gets and persists authentication tokens
+ */
+export declare function getAndPersistToken(args: {
+    goldstackConfig: any;
+    packageSchema: any;
+    deploymentsOutput: any;
+    deploymentName?: string | undefined;
+    code?: string;
+    refreshToken?: string;
+}): Promise<import("./getToken").GetTokenResults | undefined>;
+//# sourceMappingURL=getAndPersistToken.d.ts.map

package/dist/src/client/getAndPersistToken.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"getAndPersistToken.d.ts","sourceRoot":"","sources":["../../../src/client/getAndPersistToken.ts"],"names":[],"mappings":"AA4BA;;GAEG;AACH,wBAAsB,kBAAkB,CAAC,IAAI,EAAE;IAC7C,eAAe,EAAE,GAAG,CAAC;IACrB,aAAa,EAAE,GAAG,CAAC;IACnB,iBAAiB,EAAE,GAAG,CAAC;IACvB,cAAc,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACpC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB,6DA6BA"}

package/dist/src/client/getAndPersistToken.js

@@ -0,0 +1,43 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getAndPersistToken = getAndPersistToken;
+const getToken_1 = require("./getToken");
+const getCookieSettings_1 = require("./getCookieSettings");
+const state_1 = require("./state");
+function setCookie(name, value, minutes, domain, sameSite) {
+    let expires;
+    if (minutes) {
+        const date = new Date();
+        date.setTime(date.getTime() + minutes * 60 * 1000);
+        expires = '; expires=' + date.toUTCString();
+    }
+    else {
+        expires = '';
+    }
+    document.cookie =
+        name +
+            '=' +
+            value +
+            expires +
+            `; path=/; domain=${domain}; SameSite=${sameSite}; Secure`;
+}
+/**
+ * Gets and persists authentication tokens
+ */
+async function getAndPersistToken(args) {
+    const token = await (0, getToken_1.getToken)({ ...args });
+    if (!token) {
+        return;
+    }
+    window.sessionStorage.setItem('goldstack_access_token', token.accessToken);
+    window.sessionStorage.setItem('goldstack_id_token', token.idToken);
+    (0, state_1.setRefreshTokenStorage)(token.refreshToken);
+    const cookieSettings = (0, getCookieSettings_1.getCookieSettings)({ ...args });
+    // only store access and id token in cookie
+    const cookieDomain = cookieSettings.cookieDomain;
+    const cookieSameSite = cookieSettings.cookieSameSite;
+    setCookie('goldstack_access_token', token.accessToken, 60 * 24, cookieDomain, cookieSameSite);
+    setCookie('goldstack_id_token', token.idToken, 60 * 24, cookieDomain, cookieSameSite);
+    return token;
+}
+//# sourceMappingURL=getAndPersistToken.js.map

package/dist/src/client/getAndPersistToken.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"getAndPersistToken.js","sourceRoot":"","sources":["../../../src/client/getAndPersistToken.ts"],"names":[],"mappings":";;AA+BA,gDAoCC;AAnED,yCAAsC;AACtC,2DAAwD;AAExD,mCAAiD;AAEjD,SAAS,SAAS,CAChB,IAAY,EACZ,KAAa,EACb,OAAe,EACf,MAAc,EACd,QAAgB;IAEhB,IAAI,OAAe,CAAC;IACpB,IAAI,OAAO,EAAE,CAAC;QACZ,MAAM,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QACxB,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,OAAO,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;QACnD,OAAO,GAAG,YAAY,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;IAC9C,CAAC;SAAM,CAAC;QACN,OAAO,GAAG,EAAE,CAAC;IACf,CAAC;IACD,QAAQ,CAAC,MAAM;QACb,IAAI;YACJ,GAAG;YACH,KAAK;YACL,OAAO;YACP,oBAAoB,MAAM,cAAc,QAAQ,UAAU,CAAC;AAC/D,CAAC;AAED;;GAEG;AACI,KAAK,UAAU,kBAAkB,CAAC,IAOxC;IACC,MAAM,KAAK,GAAG,MAAM,IAAA,mBAAQ,EAAC,EAAE,GAAG,IAAI,EAAE,CAAC,CAAC;IAC1C,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO;IACT,CAAC;IACD,MAAM,CAAC,cAAc,CAAC,OAAO,CAAC,wBAAwB,EAAE,KAAK,CAAC,WAAW,CAAC,CAAC;IAC3E,MAAM,CAAC,cAAc,CAAC,OAAO,CAAC,oBAAoB,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;IACnE,IAAA,8BAAsB,EAAC,KAAK,CAAC,YAAY,CAAC,CAAC;IAE3C,MAAM,cAAc,GAAG,IAAA,qCAAiB,EAAC,EAAE,GAAG,IAAI,EAAE,CAAC,CAAC;IACtD,2CAA2C;IAC3C,MAAM,YAAY,GAAG,cAAc,CAAC,YAAY,CAAC;IAEjD,MAAM,cAAc,GAAG,cAAc,CAAC,cAAc,CAAC;IACrD,SAAS,CACP,wBAAwB,EACxB,KAAK,CAAC,WAAW,EACjB,EAAE,GAAG,EAAE,EACP,YAAY,EACZ,cAAc,CACf,CAAC;IACF,SAAS,CACP,oBAAoB,EACpB,KAAK,CAAC,OAAO,EACb,EAAE,GAAG,EAAE,EACP,YAAY,EACZ,cAAc,CACf,CAAC;IACF,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/src/{codeChallenge.d.ts → client/getCodeVerifier.d.ts}

@@ -1,3 +1,3 @@
 export declare function getCodeChallenge(): Promise<string>;
 export declare function getCodeVerifier(): Promise<string>;
-//# sourceMappingURL=codeChallenge.d.ts.map
+//# sourceMappingURL=getCodeVerifier.d.ts.map

package/dist/src/client/getCodeVerifier.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"getCodeVerifier.d.ts","sourceRoot":"","sources":["../../../src/client/getCodeVerifier.ts"],"names":[],"mappings":"AA+CA,wBAAsB,gBAAgB,oBAErC;AAED,wBAAsB,eAAe,oBAsBpC"}

package/dist/src/{codeChallenge.js → client/getCodeVerifier.js}

@@ -56,4 +56,4 @@ async function getCodeVerifier() {
     }
     return codeVerifier;
 }
-//# sourceMappingURL=codeChallenge.js.map
+//# sourceMappingURL=getCodeVerifier.js.map

package/dist/src/client/getCodeVerifier.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"getCodeVerifier.js","sourceRoot":"","sources":["../../../src/client/getCodeVerifier.ts"],"names":[],"mappings":";;AA+CA,4CAEC;AAED,0CAsBC;AAzED,sFAAsF;AACtF,4DAA2D;AAE3D,SAAS,oBAAoB,CAAC,MAAc;IAC1C,IAAI,IAAI,GAAG,EAAE,CAAC;IACd,MAAM,QAAQ,GACZ,gEAAgE,CAAC;IAEnE,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAChC,IAAI,IAAI,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;IACvE,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED,KAAK,UAAU,qBAAqB,CAAC,YAAoB;IACvD,IAAI,MAAc,CAAC;IAEnB,kEAAkE;IAClE,oGAAoG;IACpG,IAAI,OAAO,MAAM,KAAK,WAAW,EAAE,CAAC;QAClC,MAAM,GAAG,MAAM,CAAC,YAAY,CAC1B,GAAG,IAAI,UAAU,CACf,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,CACxB,SAAS,EACT,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,YAAY,CAAC,CACvC,CACF,CACF,CAAC;QACF,OAAO,IAAI,CAAC,MAAM,CAAC;aAChB,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC;aACjB,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC;aACnB,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IACzB,CAAC;SAAM,CAAC;QACN,8DAA8D;QAC9D,MAAM,EAAE,UAAU,EAAE,GAAG,OAAO,CAAC,IAAA,+BAAe,EAAC,QAAQ,CAAC,CAAC,CAAC;QAC1D,MAAM,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACjE,OAAO,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC;aAC/B,QAAQ,CAAC,QAAQ,CAAC;aAClB,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC;aACjB,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC;aACnB,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IACzB,CAAC;AACH,CAAC;AAED,IAAI,YAAY,GAAuB,SAAS,CAAC;AAE1C,KAAK,UAAU,gBAAgB;IACpC,OAAO,MAAM,qBAAqB,CAAC,MAAM,eAAe,EAAE,CAAC,CAAC;AAC9D,CAAC;AAEM,KAAK,UAAU,eAAe;IACnC,IAAI,YAAY,EAAE,CAAC;QACjB,OAAO,YAAY,CAAC;IACtB,CAAC;IAED,IAAI,OAAO,MAAM,KAAK,WAAW,IAAI,MAAM,CAAC,cAAc,EAAE,CAAC;QAC3D,MAAM,gBAAgB,GAAG,MAAM,CAAC,cAAc,CAAC,OAAO,CACpD,yBAAyB,CAC1B,CAAC;QACF,IAAI,gBAAgB,EAAE,CAAC;YACrB,YAAY,GAAG,gBAAgB,CAAC;YAChC,OAAO,YAAY,CAAC;QACtB,CAAC;IACH,CAAC;IAED,MAAM,eAAe,GAAG,oBAAoB,CAAC,EAAE,CAAC,CAAC;IACjD,YAAY,GAAG,eAAe,CAAC;IAE/B,IAAI,OAAO,MAAM,KAAK,WAAW,IAAI,MAAM,CAAC,cAAc,EAAE,CAAC;QAC3D,MAAM,CAAC,cAAc,CAAC,OAAO,CAAC,yBAAyB,EAAE,YAAY,CAAC,CAAC;IACzE,CAAC;IACD,OAAO,YAAY,CAAC;AACtB,CAAC"}

package/dist/src/client/getCookieSettings.d.ts

@@ -0,0 +1,14 @@
+export interface GetCookieSettingsResult {
+    cookieDomain: string;
+    cookieSameSite: string;
+}
+/**
+ * Gets cookie settings for the current deployment
+ */
+export declare function getCookieSettings(args: {
+    goldstackConfig: any;
+    packageSchema: any;
+    deploymentsOutput: any;
+    deploymentName?: string | undefined;
+}): GetCookieSettingsResult;
+//# sourceMappingURL=getCookieSettings.d.ts.map

package/dist/src/client/getCookieSettings.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"getCookieSettings.d.ts","sourceRoot":"","sources":["../../../src/client/getCookieSettings.ts"],"names":[],"mappings":"AAKA,MAAM,WAAW,uBAAuB;IACtC,YAAY,EAAE,MAAM,CAAC;IACrB,cAAc,EAAE,MAAM,CAAC;CACxB;AAED;;GAEG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE;IACtC,eAAe,EAAE,GAAG,CAAC;IACrB,aAAa,EAAE,GAAG,CAAC;IACnB,iBAAiB,EAAE,GAAG,CAAC;IACvB,cAAc,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACrC,GAAG,uBAAuB,CAqB1B"}

package/dist/src/client/getCookieSettings.js

@@ -0,0 +1,28 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getCookieSettings = getCookieSettings;
+const utils_package_config_embedded_1 = require("@goldstack/utils-package-config-embedded");
+const userManagementConfig_1 = require("../userManagementConfig");
+/**
+ * Gets cookie settings for the current deployment
+ */
+function getCookieSettings(args) {
+    const deploymentName = (0, userManagementConfig_1.getDeploymentName)(args.deploymentName);
+    if (deploymentName === 'local') {
+        return {
+            cookieDomain: 'localhost',
+            cookieSameSite: 'None',
+        };
+    }
+    const packageConfig = new utils_package_config_embedded_1.EmbeddedPackageConfig({
+        goldstackJson: args.goldstackConfig,
+        packageSchema: args.packageSchema,
+    });
+    // only store access and id token in cookie
+    const config = packageConfig.getDeployment(deploymentName).configuration;
+    return {
+        cookieDomain: config.cookieDomain,
+        cookieSameSite: config.cookieSameSite,
+    };
+}
+//# sourceMappingURL=getCookieSettings.js.map

package/dist/src/client/getCookieSettings.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"getCookieSettings.js","sourceRoot":"","sources":["../../../src/client/getCookieSettings.ts"],"names":[],"mappings":";;AAaA,8CA0BC;AAvCD,4FAAiF;AACjF,kEAA4D;AAS5D;;GAEG;AACH,SAAgB,iBAAiB,CAAC,IAKjC;IACC,MAAM,cAAc,GAAG,IAAA,wCAAiB,EAAC,IAAI,CAAC,cAAc,CAAC,CAAC;IAC9D,IAAI,cAAc,KAAK,OAAO,EAAE,CAAC;QAC/B,OAAO;YACL,YAAY,EAAE,WAAW;YACzB,cAAc,EAAE,MAAM;SACvB,CAAC;IACJ,CAAC;IACD,MAAM,aAAa,GAAG,IAAI,qDAAqB,CAG7C;QACA,aAAa,EAAE,IAAI,CAAC,eAAe;QACnC,aAAa,EAAE,IAAI,CAAC,aAAa;KAClC,CAAC,CAAC;IACH,2CAA2C;IAC3C,MAAM,MAAM,GAAG,aAAa,CAAC,aAAa,CAAC,cAAc,CAAC,CAAC,aAAa,CAAC;IACzE,OAAO;QACL,YAAY,EAAE,MAAM,CAAC,YAAY;QACjC,cAAc,EAAE,MAAM,CAAC,cAAc;KACtC,CAAC;AACJ,CAAC"}

package/dist/src/{cognitoEndpoints.d.ts → client/getEndpoints.d.ts}

@@ -1,4 +1,4 @@
-import { Endpoint } from './templateUserManagement';
+import { Endpoint } from '../templateUserManagement';
 export declare function getEndpoint(args: {
     goldstackConfig: any;
     endpoint: Endpoint;
@@ -6,4 +6,4 @@ export declare function getEndpoint(args: {
     deploymentsOutput: any;
     deploymentName?: string;
 }): Promise<string>;
-//# sourceMappingURL=cognitoEndpoints.d.ts.map
+//# sourceMappingURL=getEndpoints.d.ts.map

package/dist/src/client/getEndpoints.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"getEndpoints.d.ts","sourceRoot":"","sources":["../../../src/client/getEndpoints.ts"],"names":[],"mappings":"AAEA,OAAO,EACL,QAAQ,EAGT,MAAM,2BAA2B,CAAC;AAMnC,wBAAsB,WAAW,CAAC,IAAI,EAAE;IACtC,eAAe,EAAE,GAAG,CAAC;IACrB,QAAQ,EAAE,QAAQ,CAAC;IACnB,aAAa,EAAE,GAAG,CAAC;IACnB,iBAAiB,EAAE,GAAG,CAAC;IACvB,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB,GAAG,OAAO,CAAC,MAAM,CAAC,CAoDlB"}

package/dist/src/{cognitoEndpoints.js → client/getEndpoints.js}

@@ -2,8 +2,8 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.getEndpoint = getEndpoint;
 const utils_package_config_embedded_1 = require("@goldstack/utils-package-config-embedded");
-const codeChallenge_1 = require("./codeChallenge");
-const userManagementConfig_1 = require("./userManagementConfig");
+const getCodeVerifier_1 = require("./getCodeVerifier");
+const userManagementConfig_1 = require("../userManagementConfig");
 async function getEndpoint(args) {
     const deploymentName = (0, userManagementConfig_1.getDeploymentName)(args.deploymentName);
     if (deploymentName === 'local') {
@@ -23,13 +23,13 @@ async function getEndpoint(args) {
                 `&client_id=${deploymentOutput.terraform.user_pool_client_id.value}` +
                 `&redirect_uri=${deployment.configuration.callbackUrl}` +
                 '&code_challenge_method=S256' +
-                `&code_challenge=${await (0, codeChallenge_1.getCodeChallenge)()}`);
+                `&code_challenge=${await (0, getCodeVerifier_1.getCodeChallenge)()}`);
         case 'signup':
             return (`${baseUrl}/signup?response_type=code` +
                 `&client_id=${deploymentOutput.terraform.user_pool_client_id.value}` +
                 `&redirect_uri=${deployment.configuration.callbackUrl}` +
                 '&code_challenge_method=S256' +
-                `&code_challenge=${await (0, codeChallenge_1.getCodeChallenge)()}`);
+                `&code_challenge=${await (0, getCodeVerifier_1.getCodeChallenge)()}`);
         case 'token':
             return `${baseUrl}/oauth2/token`;
         case 'logout':
@@ -37,7 +37,7 @@ async function getEndpoint(args) {
                 `&client_id=${deploymentOutput.terraform.user_pool_client_id.value}` +
                 `&redirect_uri=${deployment.configuration.callbackUrl}` +
                 '&code_challenge_method=S256' +
-                `&code_challenge=${await (0, codeChallenge_1.getCodeChallenge)()}`);
+                `&code_challenge=${await (0, getCodeVerifier_1.getCodeChallenge)()}`);
     }
 }
-//# sourceMappingURL=cognitoEndpoints.js.map
+//# sourceMappingURL=getEndpoints.js.map

package/dist/src/client/getEndpoints.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"getEndpoints.js","sourceRoot":"","sources":["../../../src/client/getEndpoints.ts"],"names":[],"mappings":";;AAYA,kCA0DC;AAtED,4FAAiF;AACjF,uDAAqD;AAMrD,kEAGiC;AAE1B,KAAK,UAAU,WAAW,CAAC,IAMjC;IACC,MAAM,cAAc,GAAG,IAAA,wCAAiB,EAAC,IAAI,CAAC,cAAc,CAAC,CAAC;IAE9D,IAAI,cAAc,KAAK,OAAO,EAAE,CAAC;QAC/B,OAAO,mBAAmB,CAAC;IAC7B,CAAC;IAED,MAAM,aAAa,GAAG,IAAI,qDAAqB,CAG7C;QACA,aAAa,EAAE,IAAI,CAAC,eAAe;QACnC,aAAa,EAAE,IAAI,CAAC,aAAa;KAClC,CAAC,CAAC;IAEH,MAAM,gBAAgB,GAAG,IAAA,2CAAoB,EAC3C,IAAI,CAAC,iBAAiB,EACtB,cAAc,CACf,CAAC;IAEF,0EAA0E;IAE1E,MAAM,UAAU,GAAG,aAAa,CAAC,aAAa,CAAC,cAAc,CAAC,CAAC;IAC/D,MAAM,OAAO,GAAG,WAAW,UAAU,CAAC,aAAa,CAAC,aAAa,EAAE,CAAC;IACpE,QAAQ,IAAI,CAAC,QAAQ,EAAE,CAAC;QACtB,KAAK,WAAW;YACd,OAAO,CACL,GAAG,OAAO,sCAAsC;gBAChD,cAAc,gBAAgB,CAAC,SAAS,CAAC,mBAAmB,CAAC,KAAK,EAAE;gBACpE,iBAAiB,UAAU,CAAC,aAAa,CAAC,WAAW,EAAE;gBACvD,6BAA6B;gBAC7B,mBAAmB,MAAM,IAAA,kCAAgB,GAAE,EAAE,CAC9C,CAAC;QACJ,KAAK,QAAQ;YACX,OAAO,CACL,GAAG,OAAO,4BAA4B;gBACtC,cAAc,gBAAgB,CAAC,SAAS,CAAC,mBAAmB,CAAC,KAAK,EAAE;gBACpE,iBAAiB,UAAU,CAAC,aAAa,CAAC,WAAW,EAAE;gBACvD,6BAA6B;gBAC7B,mBAAmB,MAAM,IAAA,kCAAgB,GAAE,EAAE,CAC9C,CAAC;QACJ,KAAK,OAAO;YACV,OAAO,GAAG,OAAO,eAAe,CAAC;QACnC,KAAK,QAAQ;YACX,OAAO,CACL,GAAG,OAAO,4BAA4B;gBACtC,cAAc,gBAAgB,CAAC,SAAS,CAAC,mBAAmB,CAAC,KAAK,EAAE;gBACpE,iBAAiB,UAAU,CAAC,aAAa,CAAC,WAAW,EAAE;gBACvD,6BAA6B;gBAC7B,mBAAmB,MAAM,IAAA,kCAAgB,GAAE,EAAE,CAC9C,CAAC;IACN,CAAC;AACH,CAAC"}

package/dist/src/client/getLoggedInUser.d.ts

@@ -0,0 +1,17 @@
+/**
+ * Client-side authentication utilities
+ */
+export interface ClientAuthResult {
+    accessToken: string;
+    idToken: string;
+}
+/**
+ * <p>Obtains the information for a user if a user is logged in.
+ * <p>Use <code>performClientAuth</code> to perform a login action.
+ */
+export declare function getLoggedInUser(): ClientAuthResult | undefined;
+/**
+ * <p>Returns true if a user is authenticated
+ */
+export declare function isAuthenticated(): boolean;
+//# sourceMappingURL=getLoggedInUser.d.ts.map

package/dist/src/client/getLoggedInUser.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"getLoggedInUser.d.ts","sourceRoot":"","sources":["../../../src/client/getLoggedInUser.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,MAAM,WAAW,gBAAgB;IAC/B,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;CACjB;AAID;;;GAGG;AACH,wBAAgB,eAAe,IAAI,gBAAgB,GAAG,SAAS,CAqB9D;AAED;;GAEG;AACH,wBAAgB,eAAe,IAAI,OAAO,CAEzC"}

package/dist/src/client/getLoggedInUser.js

@@ -0,0 +1,38 @@
+"use strict";
+/**
+ * Client-side authentication utilities
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getLoggedInUser = getLoggedInUser;
+exports.isAuthenticated = isAuthenticated;
+const state_1 = require("./state");
+/**
+ * <p>Obtains the information for a user if a user is logged in.
+ * <p>Use <code>performClientAuth</code> to perform a login action.
+ */
+function getLoggedInUser() {
+    if (state_1.forceLogout) {
+        return;
+    }
+    // if running on the server, such as for rendering a page for SSR, client auth
+    // cannot be performed
+    if (typeof window === 'undefined') {
+        return;
+    }
+    const existingAccessToken = window.sessionStorage.getItem('goldstack_access_token');
+    const existingIdToken = window.sessionStorage.getItem('goldstack_id_token');
+    if (existingAccessToken && existingIdToken) {
+        return {
+            accessToken: existingAccessToken,
+            idToken: existingIdToken,
+        };
+    }
+    return;
+}
+/**
+ * <p>Returns true if a user is authenticated
+ */
+function isAuthenticated() {
+    return getLoggedInUser() !== undefined;
+}
+//# sourceMappingURL=getLoggedInUser.js.map

package/dist/src/client/getLoggedInUser.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"getLoggedInUser.js","sourceRoot":"","sources":["../../../src/client/getLoggedInUser.ts"],"names":[],"mappings":";AAAA;;GAEG;;AAaH,0CAqBC;AAKD,0CAEC;AAlCD,mCAAsC;AAEtC;;;GAGG;AACH,SAAgB,eAAe;IAC7B,IAAI,mBAAW,EAAE,CAAC;QAChB,OAAO;IACT,CAAC;IAED,8EAA8E;IAC9E,sBAAsB;IACtB,IAAI,OAAO,MAAM,KAAK,WAAW,EAAE,CAAC;QAClC,OAAO;IACT,CAAC;IACD,MAAM,mBAAmB,GAAG,MAAM,CAAC,cAAc,CAAC,OAAO,CACvD,wBAAwB,CACzB,CAAC;IACF,MAAM,eAAe,GAAG,MAAM,CAAC,cAAc,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAC;IAC5E,IAAI,mBAAmB,IAAI,eAAe,EAAE,CAAC;QAC3C,OAAO;YACL,WAAW,EAAE,mBAAmB;YAChC,OAAO,EAAE,eAAe;SACzB,CAAC;IACJ,CAAC;IACD,OAAO;AACT,CAAC;AAED;;GAEG;AACH,SAAgB,eAAe;IAC7B,OAAO,eAAe,EAAE,KAAK,SAAS,CAAC;AACzC,CAAC"}

package/dist/src/{cognitoClientAuth.d.ts → client/getToken.d.ts}

@@ -11,11 +11,4 @@ export declare function getToken(args: {
     deploymentsOutput: any;
     deploymentName?: string;
 }): Promise<GetTokenResults | undefined>;
-export declare function executeTokenRequest(args: {
-    tokenEndpoint: string;
-    clientId: string;
-    code?: string;
-    refreshToken?: string;
-    redirectUri: string;
-}): Promise<GetTokenResults>;
-//# sourceMappingURL=cognitoClientAuth.d.ts.map
+//# sourceMappingURL=getToken.d.ts.map

package/dist/src/client/getToken.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"getToken.d.ts","sourceRoot":"","sources":["../../../src/client/getToken.ts"],"names":[],"mappings":"AAkBA,MAAM,WAAW,eAAe;IAC9B,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,wBAAsB,QAAQ,CAAC,IAAI,EAAE;IACnC,eAAe,EAAE,GAAG,CAAC;IACrB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,aAAa,EAAE,GAAG,CAAC;IACnB,iBAAiB,EAAE,GAAG,CAAC;IACvB,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB,GAAG,OAAO,CAAC,eAAe,GAAG,SAAS,CAAC,CA2CvC"}

package/dist/src/client/getToken.js

@@ -0,0 +1,41 @@
+"use strict";
+/* esbuild-ignore server */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getToken = getToken;
+const utils_package_config_embedded_1 = require("@goldstack/utils-package-config-embedded");
+const getEndpoints_1 = require("./getEndpoints");
+const userManagementClientMock_1 = require("../userManagementClientMock");
+const userManagementConfig_1 = require("../userManagementConfig");
+const executeTokenRequest_1 = require("./executeTokenRequest");
+async function getToken(args) {
+    const deploymentName = (0, userManagementConfig_1.getDeploymentName)(args.deploymentName);
+    if (deploymentName === 'local') {
+        if (args.code !== 'dummy-local-client-code') {
+            throw new Error(`Unexpected code for local client auth: '${args.code}'. Expected: dummy-local-client-code`);
+        }
+        const mockedUserAccessToken = (0, userManagementClientMock_1.getMockedUserAccessToken)();
+        const mockedIdToken = (0, userManagementClientMock_1.getMockedUserIdToken)();
+        if (!mockedUserAccessToken || !mockedIdToken) {
+            return;
+        }
+        return {
+            accessToken: mockedUserAccessToken,
+            refreshToken: 'dummyRefreshToken',
+            idToken: mockedIdToken,
+        };
+    }
+    const packageConfig = new utils_package_config_embedded_1.EmbeddedPackageConfig({
+        goldstackJson: args.goldstackConfig,
+        packageSchema: args.packageSchema,
+    });
+    const deploymentOutput = (0, userManagementConfig_1.getDeploymentsOutput)(args.deploymentsOutput, deploymentName);
+    const deployment = packageConfig.getDeployment(deploymentName);
+    return await (0, executeTokenRequest_1.executeTokenRequest)({
+        tokenEndpoint: await (0, getEndpoints_1.getEndpoint)({ ...args, endpoint: 'token' }),
+        clientId: deploymentOutput.terraform.user_pool_client_id.value,
+        code: args.code,
+        refreshToken: args.refreshToken,
+        redirectUri: deployment.configuration.callbackUrl,
+    });
+}
+//# sourceMappingURL=getToken.js.map

package/dist/src/client/getToken.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"getToken.js","sourceRoot":"","sources":["../../../src/client/getToken.ts"],"names":[],"mappings":";AAAA,2BAA2B;;AAwB3B,4BAkDC;AAxED,4FAAiF;AACjF,iDAA6C;AAK7C,0EAGqC;AACrC,kEAGiC;AACjC,+DAA4D;AAQrD,KAAK,UAAU,QAAQ,CAAC,IAO9B;IACC,MAAM,cAAc,GAAG,IAAA,wCAAiB,EAAC,IAAI,CAAC,cAAc,CAAC,CAAC;IAE9D,IAAI,cAAc,KAAK,OAAO,EAAE,CAAC;QAC/B,IAAI,IAAI,CAAC,IAAI,KAAK,yBAAyB,EAAE,CAAC;YAC5C,MAAM,IAAI,KAAK,CACb,2CAA2C,IAAI,CAAC,IAAI,sCAAsC,CAC3F,CAAC;QACJ,CAAC;QACD,MAAM,qBAAqB,GAAG,IAAA,mDAAwB,GAAE,CAAC;QACzD,MAAM,aAAa,GAAG,IAAA,+CAAoB,GAAE,CAAC;QAC7C,IAAI,CAAC,qBAAqB,IAAI,CAAC,aAAa,EAAE,CAAC;YAC7C,OAAO;QACT,CAAC;QACD,OAAO;YACL,WAAW,EAAE,qBAAqB;YAClC,YAAY,EAAE,mBAAmB;YACjC,OAAO,EAAE,aAAa;SACvB,CAAC;IACJ,CAAC;IAED,MAAM,aAAa,GAAG,IAAI,qDAAqB,CAG7C;QACA,aAAa,EAAE,IAAI,CAAC,eAAe;QACnC,aAAa,EAAE,IAAI,CAAC,aAAa;KAClC,CAAC,CAAC;IAEH,MAAM,gBAAgB,GAAG,IAAA,2CAAoB,EAC3C,IAAI,CAAC,iBAAiB,EACtB,cAAc,CACf,CAAC;IAEF,MAAM,UAAU,GAAG,aAAa,CAAC,aAAa,CAAC,cAAc,CAAC,CAAC;IAE/D,OAAO,MAAM,IAAA,yCAAmB,EAAC;QAC/B,aAAa,EAAE,MAAM,IAAA,0BAAW,EAAC,EAAE,GAAG,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;QAChE,QAAQ,EAAE,gBAAgB,CAAC,SAAS,CAAC,mBAAmB,CAAC,KAAK;QAC9D,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,YAAY,EAAE,IAAI,CAAC,YAAY;QAC/B,WAAW,EAAE,UAAU,CAAC,aAAa,CAAC,WAAW;KAClD,CAAC,CAAC;AACL,CAAC"}

package/dist/src/client/handleRedirectCallback.d.ts

@@ -0,0 +1,11 @@
+import type { ClientAuthResult } from './getLoggedInUser';
+/**
+ * Handles the redirect callback from the authentication provider
+ */
+export declare function handleRedirectCallback(args: {
+    goldstackConfig: any;
+    packageSchema: any;
+    deploymentsOutput: any;
+    deploymentName?: string;
+}): Promise<ClientAuthResult | undefined>;
+//# sourceMappingURL=handleRedirectCallback.d.ts.map

package/dist/src/client/handleRedirectCallback.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"handleRedirectCallback.d.ts","sourceRoot":"","sources":["../../../src/client/handleRedirectCallback.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAG1D;;GAEG;AACH,wBAAsB,sBAAsB,CAAC,IAAI,EAAE;IACjD,eAAe,EAAE,GAAG,CAAC;IACrB,aAAa,EAAE,GAAG,CAAC;IACnB,iBAAiB,EAAE,GAAG,CAAC;IACvB,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB,GAAG,OAAO,CAAC,gBAAgB,GAAG,SAAS,CAAC,CAuCxC"}

package/dist/src/client/handleRedirectCallback.js

@@ -0,0 +1,42 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.handleRedirectCallback = handleRedirectCallback;
+const utils_package_config_embedded_1 = require("@goldstack/utils-package-config-embedded");
+const userManagementConfig_1 = require("../userManagementConfig");
+const getAndPersistToken_1 = require("./getAndPersistToken");
+/**
+ * Handles the redirect callback from the authentication provider
+ */
+async function handleRedirectCallback(args) {
+    // if running on the server, such as for rendering a page for SSR, client auth
+    // cannot be performed
+    if (typeof window === 'undefined') {
+        return;
+    }
+    const params = new URLSearchParams(window.location.search);
+    const code = params.get('code');
+    if (!code) {
+        return;
+    }
+    const deploymentName = (0, userManagementConfig_1.getDeploymentName)(args.deploymentName);
+    const token = await (0, getAndPersistToken_1.getAndPersistToken)({ ...args, code });
+    const packageConfig = new utils_package_config_embedded_1.EmbeddedPackageConfig({
+        goldstackJson: args.goldstackConfig,
+        packageSchema: args.packageSchema,
+    });
+    if (deploymentName === 'local') {
+        window.location.href = window.location.href.replace('?code=dummy-local-client-code', '');
+    }
+    else {
+        const deployment = packageConfig.getDeployment(deploymentName);
+        window.location.href = deployment.configuration.callbackUrl;
+    }
+    if (!token) {
+        return;
+    }
+    return {
+        accessToken: token.accessToken,
+        idToken: token.idToken,
+    };
+}
+//# sourceMappingURL=handleRedirectCallback.js.map

package/dist/src/client/handleRedirectCallback.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"handleRedirectCallback.js","sourceRoot":"","sources":["../../../src/client/handleRedirectCallback.ts"],"names":[],"mappings":";;AAUA,wDA4CC;AAtDD,4FAAiF;AACjF,kEAA4D;AAI5D,6DAA0D;AAE1D;;GAEG;AACI,KAAK,UAAU,sBAAsB,CAAC,IAK5C;IACC,8EAA8E;IAC9E,sBAAsB;IACtB,IAAI,OAAO,MAAM,KAAK,WAAW,EAAE,CAAC;QAClC,OAAO;IACT,CAAC;IAED,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC3D,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAChC,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,OAAO;IACT,CAAC;IACD,MAAM,cAAc,GAAG,IAAA,wCAAiB,EAAC,IAAI,CAAC,cAAc,CAAC,CAAC;IAE9D,MAAM,KAAK,GAAG,MAAM,IAAA,uCAAkB,EAAC,EAAE,GAAG,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1D,MAAM,aAAa,GAAG,IAAI,qDAAqB,CAG7C;QACA,aAAa,EAAE,IAAI,CAAC,eAAe;QACnC,aAAa,EAAE,IAAI,CAAC,aAAa;KAClC,CAAC,CAAC;IAEH,IAAI,cAAc,KAAK,OAAO,EAAE,CAAC;QAC/B,MAAM,CAAC,QAAQ,CAAC,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CACjD,+BAA+B,EAC/B,EAAE,CACH,CAAC;IACJ,CAAC;SAAM,CAAC;QACN,MAAM,UAAU,GAAG,aAAa,CAAC,aAAa,CAAC,cAAc,CAAC,CAAC;QAC/D,MAAM,CAAC,QAAQ,CAAC,IAAI,GAAG,UAAU,CAAC,aAAa,CAAC,WAAW,CAAC;IAC9D,CAAC;IACD,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO;IACT,CAAC;IACD,OAAO;QACL,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,OAAO,EAAE,KAAK,CAAC,OAAO;KACvB,CAAC;AACJ,CAAC"}

package/dist/src/client/operationWithRedirect.d.ts

@@ -0,0 +1,12 @@
+import type { ClientAuthResult } from './getLoggedInUser';
+/**
+ * Performs a redirect operation for authentication
+ */
+export declare function operationWithRedirect(args: {
+    goldstackConfig: any;
+    packageSchema: any;
+    deploymentsOutput: any;
+    deploymentName?: string;
+    operation: 'authorize' | 'signup';
+}): Promise<ClientAuthResult | undefined>;
+//# sourceMappingURL=operationWithRedirect.d.ts.map

package/dist/src/client/operationWithRedirect.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"operationWithRedirect.d.ts","sourceRoot":"","sources":["../../../src/client/operationWithRedirect.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAS1D;;GAEG;AACH,wBAAsB,qBAAqB,CAAC,IAAI,EAAE;IAChD,eAAe,EAAE,GAAG,CAAC;IACrB,aAAa,EAAE,GAAG,CAAC;IACnB,iBAAiB,EAAE,GAAG,CAAC;IACvB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,SAAS,EAAE,WAAW,GAAG,QAAQ,CAAC;CACnC,GAAG,OAAO,CAAC,gBAAgB,GAAG,SAAS,CAAC,CAiExC"}

package/dist/src/client/operationWithRedirect.js

@@ -0,0 +1,72 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.operationWithRedirect = operationWithRedirect;
+const userManagementConfig_1 = require("../userManagementConfig");
+const getEndpoints_1 = require("./getEndpoints");
+const handleRedirectCallback_1 = require("./handleRedirectCallback");
+const userManagementClientMock_1 = require("../userManagementClientMock");
+const getAndPersistToken_1 = require("./getAndPersistToken");
+const state_1 = require("./state");
+/**
+ * Performs a redirect operation for authentication
+ */
+async function operationWithRedirect(args) {
+    if (state_1.forceLogout) {
+        return;
+    }
+    const deploymentName = (0, userManagementConfig_1.getDeploymentName)(args.deploymentName);
+    // if running on the server, such as for rendering a page for SSR, client auth
+    // cannot be performed
+    if (typeof window === 'undefined') {
+        return;
+    }
+    const params = new URLSearchParams(window.location.search);
+    const code = params.get('code');
+    // do not redirect in Jest tests
+    if (typeof process !== 'undefined' && typeof jest !== 'undefined') {
+        const token = await (0, getAndPersistToken_1.getAndPersistToken)({
+            ...args,
+            code: 'dummy-local-client-code',
+        });
+        if (!token) {
+            return;
+        }
+        return {
+            accessToken: token.accessToken,
+            idToken: token.idToken,
+        };
+    }
+    if (code) {
+        return await (0, handleRedirectCallback_1.handleRedirectCallback)(args);
+    }
+    if (deploymentName === 'local') {
+        if ((0, userManagementClientMock_1.getMockedUserAccessToken)() === undefined) {
+            return;
+        }
+        window.location.href = '?code=dummy-local-client-code';
+        return;
+    }
+    const refreshToken = state_1.refreshTokenStorage;
+    // if there is a refresh token, try to get a new token with that first before doing a redirect
+    if (refreshToken) {
+        try {
+            const token = await (0, getAndPersistToken_1.getAndPersistToken)({ ...args, refreshToken });
+            if (!token) {
+                return;
+            }
+            return {
+                accessToken: token.accessToken,
+                idToken: token.idToken,
+            };
+        }
+        catch (e) {
+            // if there is an error, we better discard our refresh token, it could be expired
+            (0, state_1.setRefreshTokenStorage)(undefined);
+            // then we proceed with the redirect to login
+        }
+    }
+    const endpoint = await (0, getEndpoints_1.getEndpoint)({ ...args, endpoint: args.operation });
+    window.location.href = endpoint;
+    return undefined;
+}
+//# sourceMappingURL=operationWithRedirect.js.map

package/dist/src/client/operationWithRedirect.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"operationWithRedirect.js","sourceRoot":"","sources":["../../../src/client/operationWithRedirect.ts"],"names":[],"mappings":";;AAgBA,sDAuEC;AAvFD,kEAA4D;AAC5D,iDAA6C;AAC7C,qEAAkE;AAClE,0EAAuE;AAEvE,6DAA0D;AAE1D,mCAIiB;AAEjB;;GAEG;AACI,KAAK,UAAU,qBAAqB,CAAC,IAM3C;IACC,IAAI,mBAAW,EAAE,CAAC;QAChB,OAAO;IACT,CAAC;IACD,MAAM,cAAc,GAAG,IAAA,wCAAiB,EAAC,IAAI,CAAC,cAAc,CAAC,CAAC;IAE9D,8EAA8E;IAC9E,sBAAsB;IACtB,IAAI,OAAO,MAAM,KAAK,WAAW,EAAE,CAAC;QAClC,OAAO;IACT,CAAC;IAED,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC3D,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAEhC,gCAAgC;IAChC,IAAI,OAAO,OAAO,KAAK,WAAW,IAAI,OAAO,IAAI,KAAK,WAAW,EAAE,CAAC;QAClE,MAAM,KAAK,GAAG,MAAM,IAAA,uCAAkB,EAAC;YACrC,GAAG,IAAI;YACP,IAAI,EAAE,yBAAyB;SAChC,CAAC,CAAC;QACH,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO;QACT,CAAC;QACD,OAAO;YACL,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,OAAO,EAAE,KAAK,CAAC,OAAO;SACvB,CAAC;IACJ,CAAC;IAED,IAAI,IAAI,EAAE,CAAC;QACT,OAAO,MAAM,IAAA,+CAAsB,EAAC,IAAI,CAAC,CAAC;IAC5C,CAAC;IAED,IAAI,cAAc,KAAK,OAAO,EAAE,CAAC;QAC/B,IAAI,IAAA,mDAAwB,GAAE,KAAK,SAAS,EAAE,CAAC;YAC7C,OAAO;QACT,CAAC;QACD,MAAM,CAAC,QAAQ,CAAC,IAAI,GAAG,+BAA+B,CAAC;QACvD,OAAO;IACT,CAAC;IAED,MAAM,YAAY,GAAG,2BAAmB,CAAC;IACzC,8FAA8F;IAC9F,IAAI,YAAY,EAAE,CAAC;QACjB,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,IAAA,uCAAkB,EAAC,EAAE,GAAG,IAAI,EAAE,YAAY,EAAE,CAAC,CAAC;YAClE,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,OAAO;YACT,CAAC;YACD,OAAO;gBACL,WAAW,EAAE,KAAK,CAAC,WAAW;gBAC9B,OAAO,EAAE,KAAK,CAAC,OAAO;aACvB,CAAC;QACJ,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,iFAAiF;YACjF,IAAA,8BAAsB,EAAC,SAAS,CAAC,CAAC;YAClC,6CAA6C;QAC/C,CAAC;IACH,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,IAAA,0BAAW,EAAC,EAAE,GAAG,IAAI,EAAE,QAAQ,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC;IAE1E,MAAM,CAAC,QAAQ,CAAC,IAAI,GAAG,QAAQ,CAAC;IAChC,OAAO,SAAS,CAAC;AACnB,CAAC"}

package/dist/src/client/performLogout.d.ts

@@ -0,0 +1,10 @@
+/**
+ * Will clear all cached variables and redirect user to the sign in page
+ */
+export declare function performLogout(args: {
+    goldstackConfig: any;
+    packageSchema: any;
+    deploymentsOutput: any;
+    deploymentName?: string;
+}): Promise<void>;
+//# sourceMappingURL=performLogout.d.ts.map

package/dist/src/client/performLogout.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"performLogout.d.ts","sourceRoot":"","sources":["../../../src/client/performLogout.ts"],"names":[],"mappings":"AASA;;GAEG;AACH,wBAAsB,aAAa,CAAC,IAAI,EAAE;IACxC,eAAe,EAAE,GAAG,CAAC;IACrB,aAAa,EAAE,GAAG,CAAC;IACnB,iBAAiB,EAAE,GAAG,CAAC;IACvB,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB,iBAuBA"}

package/dist/src/client/performLogout.js

@@ -0,0 +1,34 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.performLogout = performLogout;
+const userManagementConfig_1 = require("../userManagementConfig");
+const getEndpoints_1 = require("./getEndpoints");
+const state_1 = require("./state");
+function eraseCookie(name) {
+    document.cookie = name + '=; Max-Age=0; SameSite=Strict';
+}
+/**
+ * Will clear all cached variables and redirect user to the sign in page
+ */
+async function performLogout(args) {
+    if (typeof window === 'undefined') {
+        return;
+    }
+    const wasLoggedIn = window.sessionStorage.getItem('goldstack_access_token');
+    (0, state_1.setRefreshTokenStorage)(undefined);
+    eraseCookie('goldstack_access_token');
+    eraseCookie('goldstack_id_token');
+    window.sessionStorage.removeItem('goldstack_access_token');
+    window.sessionStorage.removeItem('goldstack_id_token');
+    (0, state_1.setForceLogout)(true);
+    const deploymentName = (0, userManagementConfig_1.getDeploymentName)(args.deploymentName);
+    if (deploymentName === 'local') {
+        if (wasLoggedIn) {
+            window.location.reload();
+        }
+        return;
+    }
+    const endpoint = await (0, getEndpoints_1.getEndpoint)({ ...args, endpoint: 'logout' });
+    window.location.href = endpoint;
+}
+//# sourceMappingURL=performLogout.js.map

package/dist/src/client/performLogout.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"performLogout.js","sourceRoot":"","sources":["../../../src/client/performLogout.ts"],"names":[],"mappings":";;AAYA,sCA4BC;AAxCD,kEAA4D;AAC5D,iDAA6C;AAE7C,mCAAiE;AAEjE,SAAS,WAAW,CAAC,IAAY;IAC/B,QAAQ,CAAC,MAAM,GAAG,IAAI,GAAG,+BAA+B,CAAC;AAC3D,CAAC;AAED;;GAEG;AACI,KAAK,UAAU,aAAa,CAAC,IAKnC;IACC,IAAI,OAAO,MAAM,KAAK,WAAW,EAAE,CAAC;QAClC,OAAO;IACT,CAAC;IAED,MAAM,WAAW,GAAG,MAAM,CAAC,cAAc,CAAC,OAAO,CAAC,wBAAwB,CAAC,CAAC;IAE5E,IAAA,8BAAsB,EAAC,SAAS,CAAC,CAAC;IAClC,WAAW,CAAC,wBAAwB,CAAC,CAAC;IACtC,WAAW,CAAC,oBAAoB,CAAC,CAAC;IAClC,MAAM,CAAC,cAAc,CAAC,UAAU,CAAC,wBAAwB,CAAC,CAAC;IAC3D,MAAM,CAAC,cAAc,CAAC,UAAU,CAAC,oBAAoB,CAAC,CAAC;IACvD,IAAA,sBAAc,EAAC,IAAI,CAAC,CAAC;IACrB,MAAM,cAAc,GAAG,IAAA,wCAAiB,EAAC,IAAI,CAAC,cAAc,CAAC,CAAC;IAC9D,IAAI,cAAc,KAAK,OAAO,EAAE,CAAC;QAC/B,IAAI,WAAW,EAAE,CAAC;YAChB,MAAM,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;QAC3B,CAAC;QACD,OAAO;IACT,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,IAAA,0BAAW,EAAC,EAAE,GAAG,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,CAAC;IACpE,MAAM,CAAC,QAAQ,CAAC,IAAI,GAAG,QAAQ,CAAC;AAClC,CAAC"}

package/dist/src/client/state.d.ts

@@ -0,0 +1,8 @@
+/**
+ * Shared state variables used across authentication modules
+ */
+export declare let forceLogout: boolean;
+export declare let refreshTokenStorage: string | undefined;
+export declare function setForceLogout(value: boolean): void;
+export declare function setRefreshTokenStorage(token: string | undefined): void;
+//# sourceMappingURL=state.d.ts.map

package/dist/src/client/state.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"state.d.ts","sourceRoot":"","sources":["../../../src/client/state.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,eAAO,IAAI,WAAW,SAAQ,CAAC;AAC/B,eAAO,IAAI,mBAAmB,EAAE,MAAM,GAAG,SAAqB,CAAC;AAE/D,wBAAgB,cAAc,CAAC,KAAK,EAAE,OAAO,QAE5C;AAED,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,QAE/D"}