@icure/api 8.3.5 → 8.3.6

package/icc-api/api/IccAuthApi.d.ts

@@ -20,6 +20,9 @@ export declare enum OAuthThirdParty {
     LINKEDIN = "linkedin",
     GITHUB = "github"
 }
+export declare enum DigitalIdProvider {
+    BE_FAS = "be.fas"
+}
 export declare class IccAuthApi {
     host: string;
     headers: Array<XHR.Header>;
@@ -47,8 +50,14 @@ export declare class IccAuthApi {
      * @summary login
      * @param thirdParty The third party OAuth service used to authenticate the user
      * @param token The token returned by the third party OAuth service
+     * @param groupId the group id where to login to.
+     */
+    loginWithThirdPartyToken(thirdParty: string, token: string, groupId?: string): Promise<AuthenticationResponse>;
+    /**
+     * Lite only
+     * /auth/
      */
-    loginWithThirdPartyToken(thirdParty: string, token: string): Promise<AuthenticationResponse>;
+    loginWithCloudToken(issuer: string, cloudJwt: string): Promise<AuthenticationResponse>;
     /**
      * Logout
      * @summary logout

package/icc-api/api/IccAuthApi.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.IccAuthApi = exports.OAuthThirdParty = void 0;
+exports.IccAuthApi = exports.DigitalIdProvider = exports.OAuthThirdParty = void 0;
 /**
  * iCure Data Stack API Documentation
  * The iCure Data Stack Application API is the native interface to iCure. This version is obsolete, please use v2.
@@ -24,6 +24,10 @@ var OAuthThirdParty;
     OAuthThirdParty["LINKEDIN"] = "linkedin";
     OAuthThirdParty["GITHUB"] = "github";
 })(OAuthThirdParty || (exports.OAuthThirdParty = OAuthThirdParty = {}));
+var DigitalIdProvider;
+(function (DigitalIdProvider) {
+    DigitalIdProvider["BE_FAS"] = "be.fas";
+})(DigitalIdProvider || (exports.DigitalIdProvider = DigitalIdProvider = {}));
 class IccAuthApi {
     constructor(host, headers, authenticationProvider, fetchImpl) {
         this.host = (0, IccRestApiPath_1.iccRestApiPath)(host);
@@ -83,11 +87,12 @@ class IccAuthApi {
      * @summary login
      * @param thirdParty The third party OAuth service used to authenticate the user
      * @param token The token returned by the third party OAuth service
+     * @param groupId the group id where to login to.
      */
-    loginWithThirdPartyToken(thirdParty, token) {
+    loginWithThirdPartyToken(thirdParty, token, groupId) {
         let _body = null;
         _body = token;
-        const _url = this.host + `/auth/login/${thirdParty}` + '?ts=' + new Date().getTime();
+        const _url = this.host + `/auth/login/${thirdParty}` + '?ts=' + new Date().getTime() + (groupId ? `&groupId=${encodeURIComponent(String(groupId))}` : '');
         let headers = this.headers;
         headers = headers
             .filter((h) => { var _a; return h.header !== 'Content-Type' && ((_a = h.header) === null || _a === void 0 ? void 0 : _a.toLowerCase()) !== 'authorization'; })
@@ -97,6 +102,18 @@ class IccAuthApi {
             .then((doc) => new AuthenticationResponse_1.AuthenticationResponse(doc.body))
             .catch((err) => this.handleError(err));
     }
+    /**
+     * Lite only
+     * /auth/
+     */
+    loginWithCloudToken(issuer, cloudJwt) {
+        let _body = null;
+        const _url = this.host + `/auth/login/icureCloud` + '?ts=' + new Date().getTime() + `&issuer=${encodeURIComponent(String(issuer))}`;
+        let headers = [...this.headers, new XHR_1.XHR.Header('Cloud-Auth-Token', cloudJwt)];
+        return XHR_1.XHR.sendCommand('POST', _url, headers.filter((h) => { var _a; return ((_a = h.header) === null || _a === void 0 ? void 0 : _a.toLowerCase()) !== 'authorization'; }), _body, this.fetchImpl)
+            .then((doc) => new AuthenticationResponse_1.AuthenticationResponse(doc.body))
+            .catch((err) => this.handleError(err));
+    }
     /**
      * Logout
      * @summary logout

package/icc-api/api/IccAuthApi.js.map

@@ -1 +1 @@
-{"version":3,"file":"IccAuthApi.js","sourceRoot":"","sources":["../../../icc-api/api/IccAuthApi.ts"],"names":[],"mappings":";;;AAAA;;;;;;;;;;GAUG;AACH,+BAA2B;AAC3B,4EAAwE;AAExE,wFAA8G;AAC9G,qDAAiD;AAEjD,IAAY,eAMX;AAND,WAAY,eAAe;IACzB,oCAAiB,CAAA;IACjB,0CAAuB,CAAA;IACvB,kCAAe,CAAA;IACf,wCAAqB,CAAA;IACrB,oCAAiB,CAAA;AACnB,CAAC,EANW,eAAe,+BAAf,eAAe,QAM1B;AAED,MAAa,UAAU;IAMrB,YACE,IAAY,EACZ,OAAY,EACZ,sBAA+C,EAC/C,SAAyE;QAEzE,IAAI,CAAC,IAAI,GAAG,IAAA,+BAAc,EAAC,IAAI,CAAC,CAAA;QAChC,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,SAAG,CAAC,MAAM,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;QAC7E,IAAI,CAAC,sBAAsB,GAAG,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,IAAI,iDAAwB,EAAE,CAAA;QAChH,IAAI,CAAC,SAAS,GAAG,SAAS,CAAA;IAC5B,CAAC;IAED,UAAU,CAAC,CAAoB;QAC7B,IAAI,CAAC,OAAO,GAAG,CAAC,CAAA;IAClB,CAAC;IAED,WAAW,CAAC,CAAe;QACzB,MAAM,CAAC,CAAA;IACT,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,IAAuB;QAC3B,IAAI,KAAK,GAAG,IAAI,CAAA;QAChB,KAAK,GAAG,IAAI,CAAA;QAEZ,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,GAAG,aAAa,GAAG,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC,OAAO,EAAE,CAAA;QACtE,IAAI,OAAO,GAAG,IAAI,CAAC,OAAO,CAAA;QAC1B,OAAO,GAAG,OAAO;aACd,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,WAAC,OAAA,CAAC,CAAC,MAAM,KAAK,cAAc,IAAI,CAAA,MAAA,CAAC,CAAC,MAAM,0CAAE,WAAW,EAAE,MAAK,eAAe,CAAA,EAAA,CAAC;aACzF,MAAM,CAAC,IAAI,SAAG,CAAC,MAAM,CAAC,cAAc,EAAE,kBAAkB,CAAC,CAAC,CAAA;QAC7D,OAAO,SAAG,CAAC,WAAW,CAAC,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC;aACjE,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,+CAAsB,CAAC,GAAG,CAAC,IAAY,CAAC,CAAC;aAC3D,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAA;IAC1C,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,IAAuB,EAAE,OAAgB,EAAE,QAAiB;QAChE,IAAI,KAAK,GAAG,IAAI,CAAA;QAChB,KAAK,GAAG,IAAI,CAAA;QAEZ,MAAM,IAAI,GACR,IAAI,CAAC,IAAI;YACT,aAAa;YACb,MAAM;YACN,IAAI,IAAI,EAAE,CAAC,OAAO,EAAE;YACpB,CAAC,OAAO,CAAC,CAAC,CAAC,YAAY,kBAAkB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAClE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,aAAa,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAA;QAC7C,IAAI,OAAO,GAAG,IAAI,CAAC,OAAO,CAAA;QAC1B,OAAO,GAAG,OAAO;aACd,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,WAAC,OAAA,CAAC,CAAC,MAAM,KAAK,cAAc,IAAI,CAAA,MAAA,CAAC,CAAC,MAAM,0CAAE,WAAW,EAAE,MAAK,eAAe,CAAA,EAAA,CAAC;aACzF,MAAM,CAAC,IAAI,SAAG,CAAC,MAAM,CAAC,cAAc,EAAE,kBAAkB,CAAC,CAAC,CAAA;QAC7D,OAAO,SAAG,CAAC,WAAW,CAAC,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,SAAS,EAAE,SAAS,CAAC;aAC5E,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,+CAAsB,CAAC,GAAG,CAAC,IAAY,CAAC,CAAC;aAC3D,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAA;IAC1C,CAAC;IAED;;;;;OAKG;IACH,wBAAwB,CAAC,UAAkB,EAAE,KAAa;QACxD,IAAI,KAAK,GAAG,IAAI,CAAA;QAChB,KAAK,GAAG,KAAK,CAAA;QAEb,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,GAAG,eAAe,UAAU,EAAE,GAAG,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC,OAAO,EAAE,CAAA;QACpF,IAAI,OAAO,GAAG,IAAI,CAAC,OAAO,CAAA;QAC1B,OAAO,GAAG,OAAO;aACd,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,WAAC,OAAA,CAAC,CAAC,MAAM,KAAK,cAAc,IAAI,CAAA,MAAA,CAAC,CAAC,MAAM,0CAAE,WAAW,EAAE,MAAK,eAAe,CAAA,EAAA,CAAC;aACzF,MAAM,CAAC,IAAI,SAAG,CAAC,MAAM,CAAC,cAAc,EAAE,kBAAkB,CAAC,CAAC;aAC1D,MAAM,CAAC,IAAI,SAAG,CAAC,MAAM,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAA;QACzC,OAAO,SAAG,CAAC,WAAW,CAAC,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,EAAE,SAAS,CAAC;aAC3E,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,+CAAsB,CAAC,GAAG,CAAC,IAAY,CAAC,CAAC;aAC3D,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAA;IAC1C,CAAC;IAED;;;OAGG;IACH,MAAM;QACJ,IAAI,KAAK,GAAG,IAAI,CAAA;QAEhB,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,GAAG,cAAc,GAAG,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC,OAAO,EAAE,CAAA;QACvE,IAAI,OAAO,GAAG,IAAI,CAAC,OAAO,CAAA;QAC1B,OAAO,SAAG,CAAC,WAAW,CACpB,KAAK,EACL,IAAI,EACJ,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,WAAC,OAAA,CAAA,MAAA,CAAC,CAAC,MAAM,0CAAE,WAAW,EAAE,MAAK,eAAe,CAAA,EAAA,CAAC,EAClE,KAAK,EACL,IAAI,CAAC,SAAS,EACd,SAAS,EACT,IAAI,CAAC,sBAAsB,CAAC,cAAc,EAAE,CAC7C;aACE,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,+CAAsB,CAAC,GAAG,CAAC,IAAY,CAAC,CAAC;aAC3D,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAA;IAC1C,CAAC;IAED;;;OAGG;IACH,UAAU;QACR,IAAI,KAAK,GAAG,IAAI,CAAA;QAEhB,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,GAAG,cAAc,GAAG,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC,OAAO,EAAE,CAAA;QACvE,IAAI,OAAO,GAAG,IAAI,CAAC,OAAO,CAAA;QAC1B,OAAO,SAAG,CAAC,WAAW,CACpB,MAAM,EACN,IAAI,EACJ,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,WAAC,OAAA,CAAA,MAAA,CAAC,CAAC,MAAM,0CAAE,WAAW,EAAE,MAAK,eAAe,CAAA,EAAA,CAAC,EAClE,KAAK,EACL,IAAI,CAAC,SAAS,EACd,SAAS,EACT,IAAI,CAAC,sBAAsB,CAAC,cAAc,EAAE,CAC7C;aACE,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,+CAAsB,CAAC,GAAG,CAAC,IAAY,CAAC,CAAC;aAC3D,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAA;IAC1C,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,MAAc,EAAE,IAAY;QAChC,IAAI,KAAK,GAAG,IAAI,CAAA;QAEhB,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,GAAG,eAAe,kBAAkB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,kBAAkB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,GAAG,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC,OAAO,EAAE,CAAA;QAChJ,IAAI,OAAO,GAAG,IAAI,CAAC,OAAO,CAAA;QAC1B,OAAO,SAAG,CAAC,WAAW,CAAC,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,SAAS,EAAE,SAAS,EAAE,IAAI,CAAC,sBAAsB,CAAC,cAAc,EAAE,CAAC;aACzH,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAW,CAAC;aAC7D,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAA;IAC1C,CAAC;IAED;;OAEG;IACH,WAAW,CAAC,UAAkB,EAAE,OAAe;QAC7C,IAAI,KAAK,GAAG,IAAI,CAAA;QAEhB,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,GAAG,gBAAgB,kBAAkB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,EAAE,GAAG,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC,OAAO,EAAE,CAAA;QAC9G,IAAI,OAAO,GAAG,CAAC,GAAG,IAAI,CAAC,OAAO,EAAE,IAAI,SAAG,CAAC,MAAM,CAAC,eAAe,EAAE,UAAU,CAAC,CAAC,CAAA;QAC5E,OAAO,SAAG,CAAC,WAAW,CACpB,MAAM,EACN,IAAI,EACJ,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,WAAC,OAAA,CAAA,MAAA,CAAC,CAAC,MAAM,0CAAE,WAAW,EAAE,MAAK,eAAe,CAAA,EAAA,CAAC,EAClE,KAAK,EACL,IAAI,CAAC,SAAS,CACf;aACE,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,+CAAsB,CAAC,GAAG,CAAC,IAAY,CAAC,CAAC;aAC3D,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAA;IAC1C,CAAC;IAED;;;OAGG;IACH,wBAAwB,CAAC,UAAkB;QACzC,IAAI,KAAK,GAAG,IAAI,CAAA;QAEhB,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,GAAG,eAAe,GAAG,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC,OAAO,EAAE,CAAA;QACxE,IAAI,OAAO,GAAG,CAAC,GAAG,IAAI,CAAC,OAAO,EAAE,IAAI,SAAG,CAAC,MAAM,CAAC,eAAe,EAAE,UAAU,CAAC,CAAC,CAAA;QAC5E,OAAO,SAAG,CAAC,WAAW,CACpB,MAAM,EACN,IAAI,EACJ,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,WAAC,OAAA,CAAA,MAAA,CAAC,CAAC,MAAM,0CAAE,WAAW,EAAE,MAAK,eAAe,CAAA,EAAA,CAAC,EAClE,KAAK,EACL,IAAI,CAAC,SAAS,CACf;aACE,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,+CAAsB,CAAC,GAAG,CAAC,IAAY,CAAC,CAAC;aAC3D,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAA;IAC1C,CAAC;IAED;;;OAGG;IACH,0BAA0B,CAAC,OAAe;QACxC,OAAO,IAAI,CAAC,sBAAsB,CAAC,cAAc,EAAE,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE;YAClE,IAAI,KAAK,GAAG,IAAI,CAAA;YAChB,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,GAAG,gBAAgB,kBAAkB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,EAAE,GAAG,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC,OAAO,EAAE,CAAA;YAE9G,MAAM,YAAY,GAAG,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,YAAY,CAAA;YACzC,IAAI,CAAC,YAAY,EAAE,CAAC;gBAClB,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAA;YAC3C,CAAC;YACD,IAAI,OAAO,GAAG,CAAC,GAAG,IAAI,CAAC,OAAO,EAAE,IAAI,SAAG,CAAC,MAAM,CAAC,eAAe,EAAE,YAAY,CAAC,CAAC,CAAA;YAC9E,OAAO,SAAG,CAAC,WAAW,CACpB,MAAM,EACN,IAAI,EACJ,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,WAAC,OAAA,CAAA,MAAA,CAAC,CAAC,MAAM,0CAAE,WAAW,EAAE,MAAK,eAAe,CAAA,EAAA,CAAC,EAClE,KAAK,EACL,IAAI,CAAC,SAAS,CACf;iBACE,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,+CAAsB,CAAC,GAAG,CAAC,IAAY,CAAC,CAAC;iBAC3D,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAA;QAC1C,CAAC,CAAC,CAAA;IACJ,CAAC;IAED;;;OAGG;IACH,oBAAoB,CAAC,UAAkB;QACrC,IAAI,KAAK,GAAG,IAAI,CAAA;QAEhB,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,GAAG,kBAAkB,GAAG,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC,OAAO,EAAE,CAAA;QAC3E,IAAI,OAAO,GAAG,CAAC,GAAG,IAAI,CAAC,OAAO,EAAE,IAAI,SAAG,CAAC,MAAM,CAAC,eAAe,EAAE,UAAU,CAAC,CAAC,CAAA;QAC5E,OAAO,SAAG,CAAC,WAAW,CACpB,MAAM,EACN,IAAI,EACJ,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,WAAC,OAAA,CAAA,MAAA,CAAC,CAAC,MAAM,0CAAE,WAAW,EAAE,MAAK,eAAe,CAAA,EAAA,CAAC,EAClE,KAAK,EACL,IAAI,CAAC,SAAS,CACf;aACE,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,+CAAsB,CAAC,GAAG,CAAC,IAAY,CAAC,CAAC;aAC3D,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAA;IAC1C,CAAC;CACF;AA7OD,gCA6OC","sourcesContent":["/**\n * iCure Data Stack API Documentation\n * The iCure Data Stack Application API is the native interface to iCure. This version is obsolete, please use v2.\n *\n * OpenAPI spec version: v1\n *\n *\n * NOTE: This class is auto generated by the swagger code generator program.\n * https://github.com/swagger-api/swagger-codegen.git\n * Do not edit the class manually.\n */\nimport { XHR } from './XHR'\nimport { AuthenticationResponse } from '../model/AuthenticationResponse'\nimport { LoginCredentials } from '../model/LoginCredentials'\nimport { AuthenticationProvider, NoAuthenticationProvider } from '../../icc-x-api/auth/AuthenticationProvider'\nimport { iccRestApiPath } from './IccRestApiPath'\n\nexport enum OAuthThirdParty {\n  GOOGLE = 'google',\n  MICROSOFT = 'microsoft',\n  APPLE = 'apple',\n  LINKEDIN = 'linkedin',\n  GITHUB = 'github',\n}\n\nexport class IccAuthApi {\n  host: string\n  headers: Array<XHR.Header>\n  authenticationProvider: AuthenticationProvider\n  fetchImpl?: (input: RequestInfo, init?: RequestInit) => Promise<Response>\n\n  constructor(\n    host: string,\n    headers: any,\n    authenticationProvider?: AuthenticationProvider,\n    fetchImpl?: (input: RequestInfo, init?: RequestInit) => Promise<Response>\n  ) {\n    this.host = iccRestApiPath(host)\n    this.headers = Object.keys(headers).map((k) => new XHR.Header(k, headers[k]))\n    this.authenticationProvider = !!authenticationProvider ? authenticationProvider : new NoAuthenticationProvider()\n    this.fetchImpl = fetchImpl\n  }\n\n  setHeaders(h: Array<XHR.Header>) {\n    this.headers = h\n  }\n\n  handleError(e: XHR.XHRError): never {\n    throw e\n  }\n\n  /**\n   * Check login using groupId/userId and password\n   * @summary check\n   * @param body\n   */\n  check(body?: LoginCredentials): Promise<AuthenticationResponse> {\n    let _body = null\n    _body = body\n\n    const _url = this.host + `/auth/check` + '?ts=' + new Date().getTime()\n    let headers = this.headers\n    headers = headers\n      .filter((h) => h.header !== 'Content-Type' && h.header?.toLowerCase() !== 'authorization')\n      .concat(new XHR.Header('Content-Type', 'application/json'))\n    return XHR.sendCommand('POST', _url, headers, _body, this.fetchImpl)\n      .then((doc) => new AuthenticationResponse(doc.body as JSON))\n      .catch((err) => this.handleError(err))\n  }\n\n  /**\n   * Login using username and password\n   * @summary login\n   * @param body\n   * @param groupId the group id where to login to.\n   * @param duration the duration of the returned JWT authentication token, in seconds.\n   */\n  login(body?: LoginCredentials, groupId?: string, duration?: number): Promise<AuthenticationResponse> {\n    let _body = null\n    _body = body\n\n    const _url =\n      this.host +\n      `/auth/login` +\n      '?ts=' +\n      new Date().getTime() +\n      (groupId ? `&groupId=${encodeURIComponent(String(groupId))}` : '') +\n      (!!duration ? `&duration=${duration}` : '')\n    let headers = this.headers\n    headers = headers\n      .filter((h) => h.header !== 'Content-Type' && h.header?.toLowerCase() !== 'authorization')\n      .concat(new XHR.Header('Content-Type', 'application/json'))\n    return XHR.sendCommand('POST', _url, headers, _body, this.fetchImpl, undefined)\n      .then((doc) => new AuthenticationResponse(doc.body as JSON))\n      .catch((err) => this.handleError(err))\n  }\n\n  /**\n   * Login using third party OAuth provider token\n   * @summary login\n   * @param thirdParty The third party OAuth service used to authenticate the user\n   * @param token The token returned by the third party OAuth service\n   */\n  loginWithThirdPartyToken(thirdParty: string, token: string): Promise<AuthenticationResponse> {\n    let _body = null\n    _body = token\n\n    const _url = this.host + `/auth/login/${thirdParty}` + '?ts=' + new Date().getTime()\n    let headers = this.headers\n    headers = headers\n      .filter((h) => h.header !== 'Content-Type' && h.header?.toLowerCase() !== 'authorization')\n      .concat(new XHR.Header('Content-Type', 'application/json'))\n      .concat(new XHR.Header('token', token))\n    return XHR.sendCommand('POST', _url, headers, null, this.fetchImpl, undefined)\n      .then((doc) => new AuthenticationResponse(doc.body as JSON))\n      .catch((err) => this.handleError(err))\n  }\n\n  /**\n   * Logout\n   * @summary logout\n   */\n  logout(): Promise<AuthenticationResponse> {\n    let _body = null\n\n    const _url = this.host + `/auth/logout` + '?ts=' + new Date().getTime()\n    let headers = this.headers\n    return XHR.sendCommand(\n      'GET',\n      _url,\n      headers.filter((h) => h.header?.toLowerCase() !== 'authorization'),\n      _body,\n      this.fetchImpl,\n      undefined,\n      this.authenticationProvider.getAuthService()\n    )\n      .then((doc) => new AuthenticationResponse(doc.body as JSON))\n      .catch((err) => this.handleError(err))\n  }\n\n  /**\n   * Logout\n   * @summary logout\n   */\n  logoutPost(): Promise<AuthenticationResponse> {\n    let _body = null\n\n    const _url = this.host + `/auth/logout` + '?ts=' + new Date().getTime()\n    let headers = this.headers\n    return XHR.sendCommand(\n      'POST',\n      _url,\n      headers.filter((h) => h.header?.toLowerCase() !== 'authorization'),\n      _body,\n      this.fetchImpl,\n      undefined,\n      this.authenticationProvider.getAuthService()\n    )\n      .then((doc) => new AuthenticationResponse(doc.body as JSON))\n      .catch((err) => this.handleError(err))\n  }\n\n  /**\n   * Get token for subsequent operation\n   * @summary token\n   * @param method\n   * @param path\n   */\n  token(method: string, path: string): Promise<string> {\n    let _body = null\n\n    const _url = this.host + `/auth/token/${encodeURIComponent(String(method))}/${encodeURIComponent(String(path))}` + '?ts=' + new Date().getTime()\n    let headers = this.headers\n    return XHR.sendCommand('GET', _url, headers, _body, this.fetchImpl, undefined, this.authenticationProvider.getAuthService())\n      .then((doc) => JSON.parse(JSON.stringify(doc.body)) as string)\n      .catch((err) => this.handleError(err))\n  }\n\n  /**\n   * Gets a new authentication and refresh JWT for a different group\n   */\n  switchGroup(refreshJWT: string, groupId: string): Promise<AuthenticationResponse> {\n    let _body = null\n\n    const _url = this.host + `/auth/switch/${encodeURIComponent(String(groupId))}` + '?ts=' + new Date().getTime()\n    let headers = [...this.headers, new XHR.Header('Refresh-Token', refreshJWT)]\n    return XHR.sendCommand(\n      'POST',\n      _url,\n      headers.filter((h) => h.header?.toLowerCase() !== 'authorization'),\n      _body,\n      this.fetchImpl\n    )\n      .then((doc) => new AuthenticationResponse(doc.body as JSON))\n      .catch((err) => this.handleError(err))\n  }\n\n  /**\n   * Gets a new authentication JWT using the refresh JWT\n   * @summary refresh\n   */\n  refreshAuthenticationJWT(refreshJWT: string): Promise<AuthenticationResponse> {\n    let _body = null\n\n    const _url = this.host + `/auth/refresh` + '?ts=' + new Date().getTime()\n    let headers = [...this.headers, new XHR.Header('Refresh-Token', refreshJWT)]\n    return XHR.sendCommand(\n      'POST',\n      _url,\n      headers.filter((h) => h.header?.toLowerCase() !== 'authorization'),\n      _body,\n      this.fetchImpl\n    )\n      .then((doc) => new AuthenticationResponse(doc.body as JSON))\n      .catch((err) => this.handleError(err))\n  }\n\n  /**\n   * Switch groups using the refresh JWT\n   * @summary switch groups\n   */\n  switchGroupUsingRefreshJWT(groupId: string): Promise<AuthenticationResponse> {\n    return this.authenticationProvider.getIcureTokens().then((tokens) => {\n      let _body = null\n      const _url = this.host + `/auth/switch/${encodeURIComponent(String(groupId))}` + '?ts=' + new Date().getTime()\n\n      const refreshToken = tokens?.refreshToken\n      if (!refreshToken) {\n        throw new Error('No refresh token found')\n      }\n      let headers = [...this.headers, new XHR.Header('Refresh-Token', refreshToken)]\n      return XHR.sendCommand(\n        'POST',\n        _url,\n        headers.filter((h) => h.header?.toLowerCase() !== 'authorization'),\n        _body,\n        this.fetchImpl\n      )\n        .then((doc) => new AuthenticationResponse(doc.body as JSON))\n        .catch((err) => this.handleError(err))\n    })\n  }\n\n  /**\n   * Invalidates a refresh JWT\n   * @summary invalidate\n   */\n  invalidateRefreshJWT(refreshJWT: string): Promise<AuthenticationResponse> {\n    let _body = null\n\n    const _url = this.host + `/auth/invalidate` + '?ts=' + new Date().getTime()\n    let headers = [...this.headers, new XHR.Header('Refresh-Token', refreshJWT)]\n    return XHR.sendCommand(\n      'POST',\n      _url,\n      headers.filter((h) => h.header?.toLowerCase() !== 'authorization'),\n      _body,\n      this.fetchImpl\n    )\n      .then((doc) => new AuthenticationResponse(doc.body as JSON))\n      .catch((err) => this.handleError(err))\n  }\n}\n"]}
+{"version":3,"file":"IccAuthApi.js","sourceRoot":"","sources":["../../../icc-api/api/IccAuthApi.ts"],"names":[],"mappings":";;;AAAA;;;;;;;;;;GAUG;AACH,+BAA2B;AAC3B,4EAAwE;AAExE,wFAA8G;AAC9G,qDAAiD;AAEjD,IAAY,eAMX;AAND,WAAY,eAAe;IACzB,oCAAiB,CAAA;IACjB,0CAAuB,CAAA;IACvB,kCAAe,CAAA;IACf,wCAAqB,CAAA;IACrB,oCAAiB,CAAA;AACnB,CAAC,EANW,eAAe,+BAAf,eAAe,QAM1B;AAED,IAAY,iBAEX;AAFD,WAAY,iBAAiB;IAC3B,sCAAiB,CAAA;AACnB,CAAC,EAFW,iBAAiB,iCAAjB,iBAAiB,QAE5B;AAED,MAAa,UAAU;IAMrB,YACE,IAAY,EACZ,OAAY,EACZ,sBAA+C,EAC/C,SAAyE;QAEzE,IAAI,CAAC,IAAI,GAAG,IAAA,+BAAc,EAAC,IAAI,CAAC,CAAA;QAChC,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,SAAG,CAAC,MAAM,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;QAC7E,IAAI,CAAC,sBAAsB,GAAG,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,IAAI,iDAAwB,EAAE,CAAA;QAChH,IAAI,CAAC,SAAS,GAAG,SAAS,CAAA;IAC5B,CAAC;IAED,UAAU,CAAC,CAAoB;QAC7B,IAAI,CAAC,OAAO,GAAG,CAAC,CAAA;IAClB,CAAC;IAED,WAAW,CAAC,CAAe;QACzB,MAAM,CAAC,CAAA;IACT,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,IAAuB;QAC3B,IAAI,KAAK,GAAG,IAAI,CAAA;QAChB,KAAK,GAAG,IAAI,CAAA;QAEZ,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,GAAG,aAAa,GAAG,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC,OAAO,EAAE,CAAA;QACtE,IAAI,OAAO,GAAG,IAAI,CAAC,OAAO,CAAA;QAC1B,OAAO,GAAG,OAAO;aACd,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,WAAC,OAAA,CAAC,CAAC,MAAM,KAAK,cAAc,IAAI,CAAA,MAAA,CAAC,CAAC,MAAM,0CAAE,WAAW,EAAE,MAAK,eAAe,CAAA,EAAA,CAAC;aACzF,MAAM,CAAC,IAAI,SAAG,CAAC,MAAM,CAAC,cAAc,EAAE,kBAAkB,CAAC,CAAC,CAAA;QAC7D,OAAO,SAAG,CAAC,WAAW,CAAC,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC;aACjE,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,+CAAsB,CAAC,GAAG,CAAC,IAAY,CAAC,CAAC;aAC3D,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAA;IAC1C,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,IAAuB,EAAE,OAAgB,EAAE,QAAiB;QAChE,IAAI,KAAK,GAAG,IAAI,CAAA;QAChB,KAAK,GAAG,IAAI,CAAA;QAEZ,MAAM,IAAI,GACR,IAAI,CAAC,IAAI;YACT,aAAa;YACb,MAAM;YACN,IAAI,IAAI,EAAE,CAAC,OAAO,EAAE;YACpB,CAAC,OAAO,CAAC,CAAC,CAAC,YAAY,kBAAkB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAClE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,aAAa,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAA;QAC7C,IAAI,OAAO,GAAG,IAAI,CAAC,OAAO,CAAA;QAC1B,OAAO,GAAG,OAAO;aACd,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,WAAC,OAAA,CAAC,CAAC,MAAM,KAAK,cAAc,IAAI,CAAA,MAAA,CAAC,CAAC,MAAM,0CAAE,WAAW,EAAE,MAAK,eAAe,CAAA,EAAA,CAAC;aACzF,MAAM,CAAC,IAAI,SAAG,CAAC,MAAM,CAAC,cAAc,EAAE,kBAAkB,CAAC,CAAC,CAAA;QAC7D,OAAO,SAAG,CAAC,WAAW,CAAC,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,SAAS,EAAE,SAAS,CAAC;aAC5E,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,+CAAsB,CAAC,GAAG,CAAC,IAAY,CAAC,CAAC;aAC3D,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAA;IAC1C,CAAC;IAED;;;;;;OAMG;IACH,wBAAwB,CAAC,UAAkB,EAAE,KAAa,EAAE,OAAgB;QAC1E,IAAI,KAAK,GAAG,IAAI,CAAA;QAChB,KAAK,GAAG,KAAK,CAAA;QAEb,MAAM,IAAI,GACR,IAAI,CAAC,IAAI,GAAG,eAAe,UAAU,EAAE,GAAG,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC,OAAO,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,YAAY,kBAAkB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAA;QAC9I,IAAI,OAAO,GAAG,IAAI,CAAC,OAAO,CAAA;QAC1B,OAAO,GAAG,OAAO;aACd,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,WAAC,OAAA,CAAC,CAAC,MAAM,KAAK,cAAc,IAAI,CAAA,MAAA,CAAC,CAAC,MAAM,0CAAE,WAAW,EAAE,MAAK,eAAe,CAAA,EAAA,CAAC;aACzF,MAAM,CAAC,IAAI,SAAG,CAAC,MAAM,CAAC,cAAc,EAAE,kBAAkB,CAAC,CAAC;aAC1D,MAAM,CAAC,IAAI,SAAG,CAAC,MAAM,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAA;QACzC,OAAO,SAAG,CAAC,WAAW,CAAC,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,EAAE,SAAS,CAAC;aAC3E,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,+CAAsB,CAAC,GAAG,CAAC,IAAY,CAAC,CAAC;aAC3D,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAA;IAC1C,CAAC;IAED;;;OAGG;IACH,mBAAmB,CAAC,MAAc,EAAE,QAAgB;QAClD,IAAI,KAAK,GAAG,IAAI,CAAA;QAEhB,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,GAAG,wBAAwB,GAAG,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC,OAAO,EAAE,GAAG,WAAW,kBAAkB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,CAAA;QACnI,IAAI,OAAO,GAAG,CAAC,GAAG,IAAI,CAAC,OAAO,EAAE,IAAI,SAAG,CAAC,MAAM,CAAC,kBAAkB,EAAE,QAAQ,CAAC,CAAC,CAAA;QAC7E,OAAO,SAAG,CAAC,WAAW,CACpB,MAAM,EACN,IAAI,EACJ,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,WAAC,OAAA,CAAA,MAAA,CAAC,CAAC,MAAM,0CAAE,WAAW,EAAE,MAAK,eAAe,CAAA,EAAA,CAAC,EAClE,KAAK,EACL,IAAI,CAAC,SAAS,CACf;aACE,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,+CAAsB,CAAC,GAAG,CAAC,IAAY,CAAC,CAAC;aAC3D,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAA;IAC1C,CAAC;IAED;;;OAGG;IACH,MAAM;QACJ,IAAI,KAAK,GAAG,IAAI,CAAA;QAEhB,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,GAAG,cAAc,GAAG,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC,OAAO,EAAE,CAAA;QACvE,IAAI,OAAO,GAAG,IAAI,CAAC,OAAO,CAAA;QAC1B,OAAO,SAAG,CAAC,WAAW,CACpB,KAAK,EACL,IAAI,EACJ,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,WAAC,OAAA,CAAA,MAAA,CAAC,CAAC,MAAM,0CAAE,WAAW,EAAE,MAAK,eAAe,CAAA,EAAA,CAAC,EAClE,KAAK,EACL,IAAI,CAAC,SAAS,EACd,SAAS,EACT,IAAI,CAAC,sBAAsB,CAAC,cAAc,EAAE,CAC7C;aACE,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,+CAAsB,CAAC,GAAG,CAAC,IAAY,CAAC,CAAC;aAC3D,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAA;IAC1C,CAAC;IAED;;;OAGG;IACH,UAAU;QACR,IAAI,KAAK,GAAG,IAAI,CAAA;QAEhB,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,GAAG,cAAc,GAAG,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC,OAAO,EAAE,CAAA;QACvE,IAAI,OAAO,GAAG,IAAI,CAAC,OAAO,CAAA;QAC1B,OAAO,SAAG,CAAC,WAAW,CACpB,MAAM,EACN,IAAI,EACJ,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,WAAC,OAAA,CAAA,MAAA,CAAC,CAAC,MAAM,0CAAE,WAAW,EAAE,MAAK,eAAe,CAAA,EAAA,CAAC,EAClE,KAAK,EACL,IAAI,CAAC,SAAS,EACd,SAAS,EACT,IAAI,CAAC,sBAAsB,CAAC,cAAc,EAAE,CAC7C;aACE,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,+CAAsB,CAAC,GAAG,CAAC,IAAY,CAAC,CAAC;aAC3D,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAA;IAC1C,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,MAAc,EAAE,IAAY;QAChC,IAAI,KAAK,GAAG,IAAI,CAAA;QAEhB,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,GAAG,eAAe,kBAAkB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,kBAAkB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,GAAG,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC,OAAO,EAAE,CAAA;QAChJ,IAAI,OAAO,GAAG,IAAI,CAAC,OAAO,CAAA;QAC1B,OAAO,SAAG,CAAC,WAAW,CAAC,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,SAAS,EAAE,SAAS,EAAE,IAAI,CAAC,sBAAsB,CAAC,cAAc,EAAE,CAAC;aACzH,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAW,CAAC;aAC7D,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAA;IAC1C,CAAC;IAED;;OAEG;IACH,WAAW,CAAC,UAAkB,EAAE,OAAe;QAC7C,IAAI,KAAK,GAAG,IAAI,CAAA;QAEhB,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,GAAG,gBAAgB,kBAAkB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,EAAE,GAAG,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC,OAAO,EAAE,CAAA;QAC9G,IAAI,OAAO,GAAG,CAAC,GAAG,IAAI,CAAC,OAAO,EAAE,IAAI,SAAG,CAAC,MAAM,CAAC,eAAe,EAAE,UAAU,CAAC,CAAC,CAAA;QAC5E,OAAO,SAAG,CAAC,WAAW,CACpB,MAAM,EACN,IAAI,EACJ,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,WAAC,OAAA,CAAA,MAAA,CAAC,CAAC,MAAM,0CAAE,WAAW,EAAE,MAAK,eAAe,CAAA,EAAA,CAAC,EAClE,KAAK,EACL,IAAI,CAAC,SAAS,CACf;aACE,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,+CAAsB,CAAC,GAAG,CAAC,IAAY,CAAC,CAAC;aAC3D,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAA;IAC1C,CAAC;IAED;;;OAGG;IACH,wBAAwB,CAAC,UAAkB;QACzC,IAAI,KAAK,GAAG,IAAI,CAAA;QAEhB,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,GAAG,eAAe,GAAG,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC,OAAO,EAAE,CAAA;QACxE,IAAI,OAAO,GAAG,CAAC,GAAG,IAAI,CAAC,OAAO,EAAE,IAAI,SAAG,CAAC,MAAM,CAAC,eAAe,EAAE,UAAU,CAAC,CAAC,CAAA;QAC5E,OAAO,SAAG,CAAC,WAAW,CACpB,MAAM,EACN,IAAI,EACJ,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,WAAC,OAAA,CAAA,MAAA,CAAC,CAAC,MAAM,0CAAE,WAAW,EAAE,MAAK,eAAe,CAAA,EAAA,CAAC,EAClE,KAAK,EACL,IAAI,CAAC,SAAS,CACf;aACE,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,+CAAsB,CAAC,GAAG,CAAC,IAAY,CAAC,CAAC;aAC3D,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAA;IAC1C,CAAC;IAED;;;OAGG;IACH,0BAA0B,CAAC,OAAe;QACxC,OAAO,IAAI,CAAC,sBAAsB,CAAC,cAAc,EAAE,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE;YAClE,IAAI,KAAK,GAAG,IAAI,CAAA;YAChB,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,GAAG,gBAAgB,kBAAkB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,EAAE,GAAG,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC,OAAO,EAAE,CAAA;YAE9G,MAAM,YAAY,GAAG,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,YAAY,CAAA;YACzC,IAAI,CAAC,YAAY,EAAE,CAAC;gBAClB,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAA;YAC3C,CAAC;YACD,IAAI,OAAO,GAAG,CAAC,GAAG,IAAI,CAAC,OAAO,EAAE,IAAI,SAAG,CAAC,MAAM,CAAC,eAAe,EAAE,YAAY,CAAC,CAAC,CAAA;YAC9E,OAAO,SAAG,CAAC,WAAW,CACpB,MAAM,EACN,IAAI,EACJ,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,WAAC,OAAA,CAAA,MAAA,CAAC,CAAC,MAAM,0CAAE,WAAW,EAAE,MAAK,eAAe,CAAA,EAAA,CAAC,EAClE,KAAK,EACL,IAAI,CAAC,SAAS,CACf;iBACE,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,+CAAsB,CAAC,GAAG,CAAC,IAAY,CAAC,CAAC;iBAC3D,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAA;QAC1C,CAAC,CAAC,CAAA;IACJ,CAAC;IAED;;;OAGG;IACH,oBAAoB,CAAC,UAAkB;QACrC,IAAI,KAAK,GAAG,IAAI,CAAA;QAEhB,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,GAAG,kBAAkB,GAAG,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC,OAAO,EAAE,CAAA;QAC3E,IAAI,OAAO,GAAG,CAAC,GAAG,IAAI,CAAC,OAAO,EAAE,IAAI,SAAG,CAAC,MAAM,CAAC,eAAe,EAAE,UAAU,CAAC,CAAC,CAAA;QAC5E,OAAO,SAAG,CAAC,WAAW,CACpB,MAAM,EACN,IAAI,EACJ,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,WAAC,OAAA,CAAA,MAAA,CAAC,CAAC,MAAM,0CAAE,WAAW,EAAE,MAAK,eAAe,CAAA,EAAA,CAAC,EAClE,KAAK,EACL,IAAI,CAAC,SAAS,CACf;aACE,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,+CAAsB,CAAC,GAAG,CAAC,IAAY,CAAC,CAAC;aAC3D,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAA;IAC1C,CAAC;CACF;AAnQD,gCAmQC","sourcesContent":["/**\n * iCure Data Stack API Documentation\n * The iCure Data Stack Application API is the native interface to iCure. This version is obsolete, please use v2.\n *\n * OpenAPI spec version: v1\n *\n *\n * NOTE: This class is auto generated by the swagger code generator program.\n * https://github.com/swagger-api/swagger-codegen.git\n * Do not edit the class manually.\n */\nimport { XHR } from './XHR'\nimport { AuthenticationResponse } from '../model/AuthenticationResponse'\nimport { LoginCredentials } from '../model/LoginCredentials'\nimport { AuthenticationProvider, NoAuthenticationProvider } from '../../icc-x-api/auth/AuthenticationProvider'\nimport { iccRestApiPath } from './IccRestApiPath'\n\nexport enum OAuthThirdParty {\n  GOOGLE = 'google',\n  MICROSOFT = 'microsoft',\n  APPLE = 'apple',\n  LINKEDIN = 'linkedin',\n  GITHUB = 'github',\n}\n\nexport enum DigitalIdProvider {\n  BE_FAS = 'be.fas',\n}\n\nexport class IccAuthApi {\n  host: string\n  headers: Array<XHR.Header>\n  authenticationProvider: AuthenticationProvider\n  fetchImpl?: (input: RequestInfo, init?: RequestInit) => Promise<Response>\n\n  constructor(\n    host: string,\n    headers: any,\n    authenticationProvider?: AuthenticationProvider,\n    fetchImpl?: (input: RequestInfo, init?: RequestInit) => Promise<Response>\n  ) {\n    this.host = iccRestApiPath(host)\n    this.headers = Object.keys(headers).map((k) => new XHR.Header(k, headers[k]))\n    this.authenticationProvider = !!authenticationProvider ? authenticationProvider : new NoAuthenticationProvider()\n    this.fetchImpl = fetchImpl\n  }\n\n  setHeaders(h: Array<XHR.Header>) {\n    this.headers = h\n  }\n\n  handleError(e: XHR.XHRError): never {\n    throw e\n  }\n\n  /**\n   * Check login using groupId/userId and password\n   * @summary check\n   * @param body\n   */\n  check(body?: LoginCredentials): Promise<AuthenticationResponse> {\n    let _body = null\n    _body = body\n\n    const _url = this.host + `/auth/check` + '?ts=' + new Date().getTime()\n    let headers = this.headers\n    headers = headers\n      .filter((h) => h.header !== 'Content-Type' && h.header?.toLowerCase() !== 'authorization')\n      .concat(new XHR.Header('Content-Type', 'application/json'))\n    return XHR.sendCommand('POST', _url, headers, _body, this.fetchImpl)\n      .then((doc) => new AuthenticationResponse(doc.body as JSON))\n      .catch((err) => this.handleError(err))\n  }\n\n  /**\n   * Login using username and password\n   * @summary login\n   * @param body\n   * @param groupId the group id where to login to.\n   * @param duration the duration of the returned JWT authentication token, in seconds.\n   */\n  login(body?: LoginCredentials, groupId?: string, duration?: number): Promise<AuthenticationResponse> {\n    let _body = null\n    _body = body\n\n    const _url =\n      this.host +\n      `/auth/login` +\n      '?ts=' +\n      new Date().getTime() +\n      (groupId ? `&groupId=${encodeURIComponent(String(groupId))}` : '') +\n      (!!duration ? `&duration=${duration}` : '')\n    let headers = this.headers\n    headers = headers\n      .filter((h) => h.header !== 'Content-Type' && h.header?.toLowerCase() !== 'authorization')\n      .concat(new XHR.Header('Content-Type', 'application/json'))\n    return XHR.sendCommand('POST', _url, headers, _body, this.fetchImpl, undefined)\n      .then((doc) => new AuthenticationResponse(doc.body as JSON))\n      .catch((err) => this.handleError(err))\n  }\n\n  /**\n   * Login using third party OAuth provider token\n   * @summary login\n   * @param thirdParty The third party OAuth service used to authenticate the user\n   * @param token The token returned by the third party OAuth service\n   * @param groupId the group id where to login to.\n   */\n  loginWithThirdPartyToken(thirdParty: string, token: string, groupId?: string): Promise<AuthenticationResponse> {\n    let _body = null\n    _body = token\n\n    const _url =\n      this.host + `/auth/login/${thirdParty}` + '?ts=' + new Date().getTime() + (groupId ? `&groupId=${encodeURIComponent(String(groupId))}` : '')\n    let headers = this.headers\n    headers = headers\n      .filter((h) => h.header !== 'Content-Type' && h.header?.toLowerCase() !== 'authorization')\n      .concat(new XHR.Header('Content-Type', 'application/json'))\n      .concat(new XHR.Header('token', token))\n    return XHR.sendCommand('POST', _url, headers, null, this.fetchImpl, undefined)\n      .then((doc) => new AuthenticationResponse(doc.body as JSON))\n      .catch((err) => this.handleError(err))\n  }\n\n  /**\n   * Lite only\n   * /auth/\n   */\n  loginWithCloudToken(issuer: string, cloudJwt: string): Promise<AuthenticationResponse> {\n    let _body = null\n\n    const _url = this.host + `/auth/login/icureCloud` + '?ts=' + new Date().getTime() + `&issuer=${encodeURIComponent(String(issuer))}`\n    let headers = [...this.headers, new XHR.Header('Cloud-Auth-Token', cloudJwt)]\n    return XHR.sendCommand(\n      'POST',\n      _url,\n      headers.filter((h) => h.header?.toLowerCase() !== 'authorization'),\n      _body,\n      this.fetchImpl\n    )\n      .then((doc) => new AuthenticationResponse(doc.body as JSON))\n      .catch((err) => this.handleError(err))\n  }\n\n  /**\n   * Logout\n   * @summary logout\n   */\n  logout(): Promise<AuthenticationResponse> {\n    let _body = null\n\n    const _url = this.host + `/auth/logout` + '?ts=' + new Date().getTime()\n    let headers = this.headers\n    return XHR.sendCommand(\n      'GET',\n      _url,\n      headers.filter((h) => h.header?.toLowerCase() !== 'authorization'),\n      _body,\n      this.fetchImpl,\n      undefined,\n      this.authenticationProvider.getAuthService()\n    )\n      .then((doc) => new AuthenticationResponse(doc.body as JSON))\n      .catch((err) => this.handleError(err))\n  }\n\n  /**\n   * Logout\n   * @summary logout\n   */\n  logoutPost(): Promise<AuthenticationResponse> {\n    let _body = null\n\n    const _url = this.host + `/auth/logout` + '?ts=' + new Date().getTime()\n    let headers = this.headers\n    return XHR.sendCommand(\n      'POST',\n      _url,\n      headers.filter((h) => h.header?.toLowerCase() !== 'authorization'),\n      _body,\n      this.fetchImpl,\n      undefined,\n      this.authenticationProvider.getAuthService()\n    )\n      .then((doc) => new AuthenticationResponse(doc.body as JSON))\n      .catch((err) => this.handleError(err))\n  }\n\n  /**\n   * Get token for subsequent operation\n   * @summary token\n   * @param method\n   * @param path\n   */\n  token(method: string, path: string): Promise<string> {\n    let _body = null\n\n    const _url = this.host + `/auth/token/${encodeURIComponent(String(method))}/${encodeURIComponent(String(path))}` + '?ts=' + new Date().getTime()\n    let headers = this.headers\n    return XHR.sendCommand('GET', _url, headers, _body, this.fetchImpl, undefined, this.authenticationProvider.getAuthService())\n      .then((doc) => JSON.parse(JSON.stringify(doc.body)) as string)\n      .catch((err) => this.handleError(err))\n  }\n\n  /**\n   * Gets a new authentication and refresh JWT for a different group\n   */\n  switchGroup(refreshJWT: string, groupId: string): Promise<AuthenticationResponse> {\n    let _body = null\n\n    const _url = this.host + `/auth/switch/${encodeURIComponent(String(groupId))}` + '?ts=' + new Date().getTime()\n    let headers = [...this.headers, new XHR.Header('Refresh-Token', refreshJWT)]\n    return XHR.sendCommand(\n      'POST',\n      _url,\n      headers.filter((h) => h.header?.toLowerCase() !== 'authorization'),\n      _body,\n      this.fetchImpl\n    )\n      .then((doc) => new AuthenticationResponse(doc.body as JSON))\n      .catch((err) => this.handleError(err))\n  }\n\n  /**\n   * Gets a new authentication JWT using the refresh JWT\n   * @summary refresh\n   */\n  refreshAuthenticationJWT(refreshJWT: string): Promise<AuthenticationResponse> {\n    let _body = null\n\n    const _url = this.host + `/auth/refresh` + '?ts=' + new Date().getTime()\n    let headers = [...this.headers, new XHR.Header('Refresh-Token', refreshJWT)]\n    return XHR.sendCommand(\n      'POST',\n      _url,\n      headers.filter((h) => h.header?.toLowerCase() !== 'authorization'),\n      _body,\n      this.fetchImpl\n    )\n      .then((doc) => new AuthenticationResponse(doc.body as JSON))\n      .catch((err) => this.handleError(err))\n  }\n\n  /**\n   * Switch groups using the refresh JWT\n   * @summary switch groups\n   */\n  switchGroupUsingRefreshJWT(groupId: string): Promise<AuthenticationResponse> {\n    return this.authenticationProvider.getIcureTokens().then((tokens) => {\n      let _body = null\n      const _url = this.host + `/auth/switch/${encodeURIComponent(String(groupId))}` + '?ts=' + new Date().getTime()\n\n      const refreshToken = tokens?.refreshToken\n      if (!refreshToken) {\n        throw new Error('No refresh token found')\n      }\n      let headers = [...this.headers, new XHR.Header('Refresh-Token', refreshToken)]\n      return XHR.sendCommand(\n        'POST',\n        _url,\n        headers.filter((h) => h.header?.toLowerCase() !== 'authorization'),\n        _body,\n        this.fetchImpl\n      )\n        .then((doc) => new AuthenticationResponse(doc.body as JSON))\n        .catch((err) => this.handleError(err))\n    })\n  }\n\n  /**\n   * Invalidates a refresh JWT\n   * @summary invalidate\n   */\n  invalidateRefreshJWT(refreshJWT: string): Promise<AuthenticationResponse> {\n    let _body = null\n\n    const _url = this.host + `/auth/invalidate` + '?ts=' + new Date().getTime()\n    let headers = [...this.headers, new XHR.Header('Refresh-Token', refreshJWT)]\n    return XHR.sendCommand(\n      'POST',\n      _url,\n      headers.filter((h) => h.header?.toLowerCase() !== 'authorization'),\n      _body,\n      this.fetchImpl\n    )\n      .then((doc) => new AuthenticationResponse(doc.body as JSON))\n      .catch((err) => this.handleError(err))\n  }\n}\n"]}

package/icc-x-api/auth/SmartAuthProvider.d.ts

@@ -1,7 +1,7 @@
 import { AuthenticationProvider } from './AuthenticationProvider';
 import { UserGroup } from '../../icc-api/model/UserGroup';
 import { AuthService } from './AuthService';
-import { IccAuthApi, OAuthThirdParty } from '../../icc-api';
+import { DigitalIdProvider, IccAuthApi, OAuthThirdParty } from '../../icc-api';
 /**
  * Needed by a {@link SmartAuthProvider} to get the secrets (password, token, etc.) for authentication to the iCure SDK as needed.
  */
@@ -47,11 +47,19 @@ export interface AuthSecretProvider {
 }
 export type AuthSecretDetails = {
     value: string;
-    secretType: Exclude<AuthSecretType, AuthSecretType.EXTERNAL_AUTHENTICATION>;
+    secretType: Exclude<AuthSecretType, AuthSecretType.EXTERNAL_AUTHENTICATION | AuthSecretType.DIGITAL_ID | AuthSecretType.ICURE_CLOUD>;
 } | {
     value: string;
     secretType: AuthSecretType.EXTERNAL_AUTHENTICATION;
     oauthType: OAuthThirdParty;
+} | {
+    value: string;
+    secretType: AuthSecretType.DIGITAL_ID;
+    provider: DigitalIdProvider;
+} | {
+    value: string;
+    secretType: AuthSecretType.ICURE_CLOUD;
+    issuer: string;
 };
 /**
  * Represents a type of secret that can be used for authentication with iCure.
@@ -80,8 +88,31 @@ export declare enum AuthSecretType {
      * A token provided by an external authentication provider (e.g. Oauth/Google).
      * Not yet in use.
      */
-    EXTERNAL_AUTHENTICATION = "EXTERNAL_AUTHENTICATION"
+    EXTERNAL_AUTHENTICATION = "EXTERNAL_AUTHENTICATION",
+    /**
+     * A special case of external authentication where the provider is a digital identity provider.
+     */
+    DIGITAL_ID = "DIGITAL_ID",
+    /**
+     * The secret is an authentication token for a cloud instance of icure (kraken-cloud).
+     * Supported only on lite instances.
+     */
+    ICURE_CLOUD = "ICURE_CLOUD"
 }
+export type SmartAuthProviderInitialSecret = {
+    password: string;
+} | {
+    longToken: string;
+} | {
+    oauthToken: string;
+    oauthType: OAuthThirdParty;
+} | {
+    digitalIdToken: string;
+    provider: DigitalIdProvider;
+} | {
+    cloudToken: string;
+    issuer: string;
+};
 /**
  * @internal this class is meant for internal use only and may be changed without notice. The SmartAuthProvider will be initialised automatically
  * by the iCure api depending on the authentication options you provide.
@@ -112,20 +143,13 @@ export declare class SmartAuthProvider implements AuthenticationProvider {
      * @param secretProvider
      * @param props optional initialisation properties.
      */
-    static initialise(authApi: IccAuthApi, login: string, secretProvider: AuthSecretProvider, props?: {
-        initialSecret?: {
-            password: string;
-        } | {
-            longToken: string;
-        } | {
-            oauthToken: string;
-            oauthType: OAuthThirdParty;
-        };
+    static initialise(authApi: IccAuthApi, login: string | undefined, secretProvider: AuthSecretProvider, props?: {
+        initialSecret?: SmartAuthProviderInitialSecret;
         initialAuthToken?: string;
         initialRefreshToken?: string;
         loginGroupId?: string;
         debugLog?: boolean;
-    }): SmartAuthProvider;
+    }): Promise<SmartAuthProvider>;
     private constructor();
     getAuthService(): AuthService;
     switchGroup(newGroupId: string, matches: Array<UserGroup>): Promise<AuthenticationProvider>;

package/icc-x-api/auth/SmartAuthProvider.js

@@ -45,9 +45,13 @@ var AuthSecretType;
     AuthSecretType["EXTERNAL_AUTHENTICATION"] = "EXTERNAL_AUTHENTICATION";
     /**
      * A special case of external authentication where the provider is a digital identity provider.
-     * Not yet in use.
      */
-    // DIGITAL_ID = 'DIGITAL_ID',
+    AuthSecretType["DIGITAL_ID"] = "DIGITAL_ID";
+    /**
+     * The secret is an authentication token for a cloud instance of icure (kraken-cloud).
+     * Supported only on lite instances.
+     */
+    AuthSecretType["ICURE_CLOUD"] = "ICURE_CLOUD";
 })(AuthSecretType || (exports.AuthSecretType = AuthSecretType = {}));
 // Here starts internal entities that should not be used directly.
 /**
@@ -78,24 +82,70 @@ class SmartAuthProvider {
      * @param secretProvider
      * @param props optional initialisation properties.
      */
-    static initialise(authApi, login, secretProvider, props = {}) {
-        let initialSecret = undefined;
-        if (props.initialSecret) {
-            if ('password' in props.initialSecret) {
-                initialSecret = { value: props.initialSecret.password, type: ServerAuthenticationClass.PASSWORD };
-            }
-            else if ('longToken' in props.initialSecret) {
-                initialSecret = { value: props.initialSecret.longToken, type: ServerAuthenticationClass.LONG_LIVED_TOKEN };
-            }
-            else {
-                initialSecret = {
-                    value: props.initialSecret.oauthToken,
-                    type: ServerAuthenticationClass.EXTERNAL_AUTHENTICATION,
-                    oauthType: props.initialSecret.oauthType,
-                };
+    static initialise(authApi_1, login_1, secretProvider_1) {
+        return __awaiter(this, arguments, void 0, function* (authApi, login, secretProvider, props = {}) {
+            let initialSecret = undefined;
+            let initialAuthToken = props.initialAuthToken;
+            let initialRefreshToken = props.initialRefreshToken;
+            if (props.initialSecret) {
+                if ('password' in props.initialSecret) {
+                    if (login == undefined)
+                        throw new Error('To use a password initial secret you must provide a login identifier');
+                    initialSecret = { value: props.initialSecret.password, type: ServerAuthenticationClass.PASSWORD };
+                }
+                else if ('longToken' in props.initialSecret) {
+                    if (login == undefined)
+                        throw new Error('To use a password initial secret you must provide a login identifier');
+                    initialSecret = { value: props.initialSecret.longToken, type: ServerAuthenticationClass.LONG_LIVED_TOKEN };
+                }
+                else if ('oauthToken' in props.initialSecret) {
+                    if (longLivedOAuthTokens.has(props.initialSecret.oauthType)) {
+                        initialSecret = {
+                            value: props.initialSecret.oauthToken,
+                            type: ServerAuthenticationClass.EXTERNAL_AUTHENTICATION,
+                            oauthType: props.initialSecret.oauthType,
+                        };
+                    }
+                    else {
+                        try {
+                            const authResponse = yield authApi.loginWithThirdPartyToken(props.initialSecret.oauthType, props.initialSecret.oauthToken, props.loginGroupId);
+                            if (authResponse.token != undefined && authResponse.refreshToken != undefined) {
+                                initialAuthToken = authResponse.token;
+                                initialRefreshToken = authResponse.refreshToken;
+                            }
+                        }
+                        catch (_) {
+                            /* ignored */
+                        }
+                    }
+                }
+                else if ('digitalIdToken' in props.initialSecret) {
+                    try {
+                        const authResponse = yield authApi.loginWithThirdPartyToken(props.initialSecret.provider, props.initialSecret.digitalIdToken, props.loginGroupId);
+                        if (authResponse.token != undefined && authResponse.refreshToken != undefined) {
+                            initialAuthToken = authResponse.token;
+                            initialRefreshToken = authResponse.refreshToken;
+                        }
+                    }
+                    catch (_) {
+                        /* ignored */
+                    }
+                }
+                else {
+                    try {
+                        const authResponse = yield authApi.loginWithCloudToken(props.initialSecret.issuer, props.initialSecret.cloudToken);
+                        if (authResponse.token != undefined && authResponse.refreshToken != undefined) {
+                            initialAuthToken = authResponse.token;
+                            initialRefreshToken = authResponse.refreshToken;
+                        }
+                    }
+                    catch (_) {
+                        /* ignored */
+                    }
+                }
             }
-        }
-        return new SmartAuthProvider(new TokenProvider(login, props.loginGroupId, initialSecret, props.initialAuthToken, props.initialRefreshToken, authApi, secretProvider, props.debugLog != undefined ? props.debugLog : true), props.loginGroupId);
+            return new SmartAuthProvider(new TokenProvider(login, props.loginGroupId, initialSecret, initialAuthToken, initialRefreshToken, authApi, secretProvider, props.debugLog != undefined ? props.debugLog : true), props.loginGroupId);
+        });
     }
     constructor(tokenProvider, groupId) {
         this.tokenProvider = tokenProvider;
@@ -121,7 +171,7 @@ class SmartAuthProvider {
 exports.SmartAuthProvider = SmartAuthProvider;
 var ServerAuthenticationClass;
 (function (ServerAuthenticationClass) {
-    // DIGITAL_ID = 60,
+    ServerAuthenticationClass[ServerAuthenticationClass["DIGITAL_ID"] = 60] = "DIGITAL_ID";
     ServerAuthenticationClass[ServerAuthenticationClass["TWO_FACTOR_AUTHENTICATION"] = 50] = "TWO_FACTOR_AUTHENTICATION";
     ServerAuthenticationClass[ServerAuthenticationClass["SHORT_LIVED_TOKEN"] = 40] = "SHORT_LIVED_TOKEN";
     ServerAuthenticationClass[ServerAuthenticationClass["EXTERNAL_AUTHENTICATION"] = 30] = "EXTERNAL_AUTHENTICATION";
@@ -199,7 +249,7 @@ class TokenProvider {
             if (!!this.currentLongLivedSecret && (!this.currentLongLivedSecret.type || this.currentLongLivedSecret.type >= minimumAuthenticationClassLevel)) {
                 if (this.debugLog)
                     console.log('Using cached secret');
-                const resultWithCachedSecret = yield this.doGetTokenWithSecret(this.currentLongLivedSecret, minimumAuthenticationClassLevel);
+                const resultWithCachedSecret = yield this.doGetTokenWithSecret({ cached: this.currentLongLivedSecret }, minimumAuthenticationClassLevel);
                 if ('success' in resultWithCachedSecret) {
                     if (this.debugLog)
                         console.log('New token using cached secret success');
@@ -227,12 +277,20 @@ class TokenProvider {
     askSecretAndGetToken(minimumAuthenticationClassLevel, passwordIsValidAs2fa) {
         return __awaiter(this, void 0, void 0, function* () {
             const acceptedSecrets = [
-                minimumAuthenticationClassLevel <= ServerAuthenticationClass.LONG_LIVED_TOKEN ? [AuthSecretType.LONG_LIVED_TOKEN] : [],
-                minimumAuthenticationClassLevel <= ServerAuthenticationClass.SHORT_LIVED_TOKEN ? [AuthSecretType.SHORT_LIVED_TOKEN] : [],
+                minimumAuthenticationClassLevel <= ServerAuthenticationClass.LONG_LIVED_TOKEN && this.login != undefined
+                    ? [AuthSecretType.LONG_LIVED_TOKEN]
+                    : [],
+                minimumAuthenticationClassLevel <= ServerAuthenticationClass.SHORT_LIVED_TOKEN && this.login != undefined
+                    ? [AuthSecretType.SHORT_LIVED_TOKEN]
+                    : [],
                 minimumAuthenticationClassLevel <= ServerAuthenticationClass.TWO_FACTOR_AUTHENTICATION &&
+                    this.login != undefined &&
                     (passwordIsValidAs2fa || minimumAuthenticationClassLevel <= ServerAuthenticationClass.PASSWORD)
                     ? [AuthSecretType.PASSWORD]
                     : [],
+                minimumAuthenticationClassLevel <= 0 ? [AuthSecretType.ICURE_CLOUD] : [],
+                minimumAuthenticationClassLevel <= ServerAuthenticationClass.DIGITAL_ID ? [AuthSecretType.DIGITAL_ID] : [],
+                minimumAuthenticationClassLevel <= ServerAuthenticationClass.EXTERNAL_AUTHENTICATION ? [AuthSecretType.EXTERNAL_AUTHENTICATION] : [],
             ].flat();
             if (!acceptedSecrets.length)
                 throw new Error('Internal error: no secret type is accepted for this request. Group may be misconfigured, or client may be outdated.');
@@ -244,7 +302,7 @@ class TokenProvider {
                 if (!acceptedSecrets.includes(secretDetails.secretType))
                     throw new Error(`Accepted secret types are ${JSON.stringify(acceptedSecrets)}, but got a secret of type ${secretDetails.secretType}.`);
                 attempts.push(secretDetails);
-                const result = yield this.doGetTokenWithSecret(secretDetails, minimumAuthenticationClassLevel);
+                const result = yield this.doGetTokenWithSecret({ new: secretDetails }, minimumAuthenticationClassLevel);
                 if ('success' in result) {
                     this.updateCachedSecret(secretDetails);
                     return result.success;
@@ -269,7 +327,7 @@ class TokenProvider {
                 if (details.secretType != AuthSecretType.TWO_FACTOR_AUTHENTICATION_TOKEN)
                     throw new Error(`Was expecting a 2fa token but got a secret of type ${details.secretType}.`);
                 attempts.push(details);
-                const result = yield this.doGetTokenWithSecret({ value: `${password}|${details.value}` }, minimumAuthenticationClassLevel);
+                const result = yield this.doGetTokenWithSecret({ new: { value: `${password}|${details.value}`, secretType: AuthSecretType.TWO_FACTOR_AUTHENTICATION_TOKEN } }, minimumAuthenticationClassLevel);
                 if ('success' in result) {
                     this.updateCachedSecret({ value: password, secretType: AuthSecretType.PASSWORD });
                     return result.success;
@@ -280,14 +338,32 @@ class TokenProvider {
             }
         });
     }
-    doGetTokenWithSecret(secret, minimumAuthenticationClassLevel) {
+    doGetTokenWithSecret(secretDetails, minimumAuthenticationClassLevel) {
         return __awaiter(this, void 0, void 0, function* () {
             let authResultPromise;
-            if ('oauthType' in secret && !!secret.oauthType) {
-                authResultPromise = this.authApi.loginWithThirdPartyToken(secret.oauthType, secret.value); // TODO add group id
+            if ('cached' in secretDetails) {
+                const secret = secretDetails.cached;
+                if ('oauthType' in secret && !!secret.oauthType) {
+                    authResultPromise = this.authApi.loginWithThirdPartyToken(secret.oauthType, secret.value, this.groupId);
+                }
+                else {
+                    authResultPromise = this.authApi.login({ username: this.login, password: secret.value }, this.groupId);
+                }
             }
             else {
-                authResultPromise = this.authApi.login({ username: this.login, password: secret.value }, this.groupId);
+                const secret = secretDetails.new;
+                if (secret.secretType == AuthSecretType.DIGITAL_ID) {
+                    authResultPromise = this.authApi.loginWithThirdPartyToken(secret.provider, secret.value, this.groupId);
+                }
+                else if (secret.secretType == AuthSecretType.EXTERNAL_AUTHENTICATION) {
+                    authResultPromise = this.authApi.loginWithThirdPartyToken(secret.oauthType, secret.value, this.groupId);
+                }
+                else if (secret.secretType == AuthSecretType.ICURE_CLOUD) {
+                    authResultPromise = this.authApi.loginWithCloudToken(secret.issuer, secret.value);
+                }
+                else {
+                    authResultPromise = this.authApi.login({ username: this.login, password: secret.value }, this.groupId);
+                }
             }
             return authResultPromise.then((authResult) => {
                 const { token, refreshToken } = authResult;