@idea-ionic/auth 8.4.2 → 8.5.1

package/fesm2022/idea-ionic-auth.mjs

@@ -5,10 +5,10 @@ import * as i1 from '@angular/forms';
 import { FormsModule } from '@angular/forms';
 import { NavController, IonButton, IonText, IonCol, IonRow, IonIcon, IonLabel, IonCardSubtitle, IonCardTitle, IonCardHeader, IonImg, IonCardContent, IonCard, IonContent, IonItem, IonInput, IonCheckbox, PopoverController, ModalController, IonListHeader, IonList, IonTitle, IonButtons, IonToolbar, IonHeader } from '@ionic/angular/standalone';
 import { Browser } from '@capacitor/browser';
+import { isEmpty } from 'idea-toolbox';
 import { IDEAEnvironment, IDEATranslationsService, IDEAStorageService, IDEAMessageService, IDEALoadingService, IDEATranslatePipe } from '@idea-ionic/common';
 import { CognitoUserPool, AuthenticationDetails, CognitoUser, CognitoUserAttribute, CognitoRefreshToken } from 'amazon-cognito-identity-js';
-import { isEmpty } from 'idea-toolbox';
-import { ActivatedRoute } from '@angular/router';
+import { ActivatedRoute, Router } from '@angular/router';
 import { toCanvas } from 'qrcode';
 
 const COMMON_PASSWORDS_TOP_1000 = [
@@ -1538,6 +1538,7 @@ class IDEASignInPage {
         this._loading = inject(IDEALoadingService);
         this._translate = inject(IDEATranslationsService);
         this._auth = inject(IDEAAuthService);
+        this.doneExternalProviderCheck = false;
         this.agreementsCheck = true;
         this.newAccountRegistered = false;
         this.darkMode = window.matchMedia('(prefers-color-scheme: dark)').matches;
@@ -1545,6 +1546,7 @@ class IDEASignInPage {
         this.registrationPossible = this._env.idea.auth.registrationIsPossible;
         this.hasIntroPage = this._env.idea.auth.hasIntroPage;
         this.website = this._env.idea.auth.website;
+        this.externalProviders = this._env.aws.cognito?.externalProviders || [];
     }
     ionViewDidEnter() {
         // manage the scenario in which we just created a new account (show a explanatory message: email must be confirmed)
@@ -1580,6 +1582,15 @@ class IDEASignInPage {
             this._loading.hide();
         }
     }
+    checkForExternalProviderEmail() {
+        if (isEmpty(this.email, 'email'))
+            return;
+        const emailDomain = this.email.split('@')[1];
+        this.doneExternalProviderCheck = true;
+        const provider = this.externalProviders.find(p => p.emailDomains.includes(emailDomain));
+        if (provider)
+            this._nav.navigateForward(['auth', provider.type], { queryParams: { provider: provider.name, go: true } });
+    }
     goToIntro() {
         this._nav.navigateBack(['intro']);
     }
@@ -1638,103 +1649,130 @@ class IDEASignInPage {
                   autocomplete="email"
                   [placeholder]="'IDEA_AUTH.EMAIL' | translate"
                   [title]="'IDEA_AUTH.EMAIL_HINT' | translate"
+                  [disabled]="externalProviders.length && doneExternalProviderCheck"
                   [ngModelOptions]="{ standalone: true }"
                   [(ngModel)]="email"
-                  (keyup.enter)="login()"
-                />
-              </ion-item>
-              <ion-item>
-                <ion-label position="inline">
-                  <ion-icon name="key" color="primary" />
-                </ion-label>
-                <ion-input
-                  testId="signin.password"
-                  id="current-password"
-                  type="password"
-                  spellcheck="false"
-                  autocorrect="off"
-                  autocomplete="current-password"
-                  [clearOnEdit]="false"
-                  [placeholder]="'IDEA_AUTH.PASSWORD' | translate"
-                  [title]="'IDEA_AUTH.PASSWORD_HINT' | translate"
-                  [ngModelOptions]="{ standalone: true }"
-                  [(ngModel)]="password"
-                  (keyup.enter)="login()"
+                  (keyup.enter)="externalProviders.length ? checkForExternalProviderEmail() : login()"
                 />
+                @if (externalProviders.length && doneExternalProviderCheck) {
+                  <ion-button
+                    slot="end"
+                    fill="clear"
+                    [title]="'IDEA_AUTH.EDIT_EMAIL' | translate"
+                    (click)="doneExternalProviderCheck = false"
+                  >
+                    <ion-icon icon="pencil" slot="icon-only" />
+                  </ion-button>
+                }
               </ion-item>
-              @if (
-                !registrationPossible &&
-                (translationExists('IDEA_VARIABLES.TERMS_AND_CONDITIONS_URL') ||
-                  translationExists('IDEA_VARIABLES.PRIVACY_POLICY_URL'))
-              ) {
-                <ion-row class="agreementsAcceptanceRow">
-                  <ion-col>
-                    <ion-checkbox size="small" [ngModelOptions]="{ standalone: true }" [(ngModel)]="agreementsCheck" />
-                    {{ 'IDEA_AUTH.AGREEMENTS_CHECK_LOGIN' | translate }}:
-                    @if (translationExists('IDEA_VARIABLES.TERMS_AND_CONDITIONS_URL')) {
-                      <a
-                        ion-text
-                        testId="openTermsAndConditionsButton"
-                        color="primary"
-                        target="_blank"
-                        [title]="'IDEA_AUTH.TERMS_AND_CONDITIONS_HINT' | translate"
-                        [href]="'IDEA_VARIABLES.TERMS_AND_CONDITIONS_URL' | translate"
-                      >
-                        {{ 'IDEA_AUTH.TERMS_AND_CONDITIONS' | translate }}
-                      </a>
-                    }
-                    @if (
-                      translationExists('IDEA_VARIABLES.PRIVACY_POLICY_URL') &&
-                      translationExists('IDEA_VARIABLES.TERMS_AND_CONDITIONS_URL')
-                    ) {
-                      <ion-text> & </ion-text>
-                    }
-                    @if (translationExists('IDEA_VARIABLES.PRIVACY_POLICY_URL')) {
-                      <a
-                        ion-text
-                        testId="openPrivacyPolicyButton"
-                        color="primary"
-                        target="_blank"
-                        [title]="'IDEA_AUTH.PRIVACY_POLICY_HINT' | translate"
-                        [href]="'IDEA_VARIABLES.PRIVACY_POLICY_URL' | translate"
-                      >
-                        {{ 'IDEA_AUTH.PRIVACY_POLICY' | translate }}
-                      </a>
-                    }
-                  </ion-col>
-                </ion-row>
-              }
-              <ion-button
-                testId="signInButton"
-                expand="block"
-                [disabled]="!agreementsCheck"
-                [title]="'IDEA_AUTH.SIGN_IN_HINT' | translate"
-                (click)="login()"
-              >
-                {{ 'IDEA_AUTH.SIGN_IN' | translate }}
-              </ion-button>
-              @if (registrationPossible) {
+              @if (externalProviders.length && !doneExternalProviderCheck) {
+                <ion-button
+                  testId="continueButton"
+                  expand="block"
+                  [disabled]="!agreementsCheck"
+                  [title]="'IDEA_AUTH.CONTINUE_HINT' | translate"
+                  (click)="checkExternalProviderEmail()"
+                >
+                  {{ 'IDEA_AUTH.CONTINUE' | translate }}
+                </ion-button>
+              } @else {
+                <ion-item>
+                  <ion-label position="inline">
+                    <ion-icon name="key" color="primary" />
+                  </ion-label>
+                  <ion-input
+                    testId="signin.password"
+                    id="current-password"
+                    type="password"
+                    spellcheck="false"
+                    autocorrect="off"
+                    autocomplete="current-password"
+                    [clearOnEdit]="false"
+                    [placeholder]="'IDEA_AUTH.PASSWORD' | translate"
+                    [title]="'IDEA_AUTH.PASSWORD_HINT' | translate"
+                    [ngModelOptions]="{ standalone: true }"
+                    [(ngModel)]="password"
+                    (keyup.enter)="login()"
+                  />
+                </ion-item>
+                @if (
+                  !registrationPossible &&
+                  (translationExists('IDEA_VARIABLES.TERMS_AND_CONDITIONS_URL') ||
+                    translationExists('IDEA_VARIABLES.PRIVACY_POLICY_URL'))
+                ) {
+                  <ion-row class="agreementsAcceptanceRow">
+                    <ion-col>
+                      <ion-checkbox
+                        size="small"
+                        [ngModelOptions]="{ standalone: true }"
+                        [(ngModel)]="agreementsCheck"
+                      />
+                      {{ 'IDEA_AUTH.AGREEMENTS_CHECK_LOGIN' | translate }}:
+                      @if (translationExists('IDEA_VARIABLES.TERMS_AND_CONDITIONS_URL')) {
+                        <a
+                          ion-text
+                          testId="openTermsAndConditionsButton"
+                          color="primary"
+                          target="_blank"
+                          [title]="'IDEA_AUTH.TERMS_AND_CONDITIONS_HINT' | translate"
+                          [href]="'IDEA_VARIABLES.TERMS_AND_CONDITIONS_URL' | translate"
+                        >
+                          {{ 'IDEA_AUTH.TERMS_AND_CONDITIONS' | translate }}
+                        </a>
+                      }
+                      @if (
+                        translationExists('IDEA_VARIABLES.PRIVACY_POLICY_URL') &&
+                        translationExists('IDEA_VARIABLES.TERMS_AND_CONDITIONS_URL')
+                      ) {
+                        <ion-text> & </ion-text>
+                      }
+                      @if (translationExists('IDEA_VARIABLES.PRIVACY_POLICY_URL')) {
+                        <a
+                          ion-text
+                          testId="openPrivacyPolicyButton"
+                          color="primary"
+                          target="_blank"
+                          [title]="'IDEA_AUTH.PRIVACY_POLICY_HINT' | translate"
+                          [href]="'IDEA_VARIABLES.PRIVACY_POLICY_URL' | translate"
+                        >
+                          {{ 'IDEA_AUTH.PRIVACY_POLICY' | translate }}
+                        </a>
+                      }
+                    </ion-col>
+                  </ion-row>
+                }
+                <ion-button
+                  testId="signInButton"
+                  expand="block"
+                  [disabled]="!agreementsCheck"
+                  [title]="'IDEA_AUTH.SIGN_IN_HINT' | translate"
+                  (click)="login()"
+                >
+                  {{ 'IDEA_AUTH.SIGN_IN' | translate }}
+                </ion-button>
+                @if (registrationPossible) {
+                  <ion-button
+                    testId="createAnAccountButton"
+                    fill="clear"
+                    expand="block"
+                    class="smallCaseButton"
+                    [title]="'IDEA_AUTH.CREATE_AN_ACCOUNT_HINT' | translate"
+                    (click)="goToRegistration()"
+                  >
+                    {{ 'IDEA_AUTH.CREATE_AN_ACCOUNT' | translate }}
+                  </ion-button>
+                }
                 <ion-button
-                  testId="createAnAccountButton"
+                  testId="forgotPasswordButton"
                   fill="clear"
                   expand="block"
                   class="smallCaseButton"
-                  [title]="'IDEA_AUTH.CREATE_AN_ACCOUNT_HINT' | translate"
-                  (click)="goToRegistration()"
+                  [title]="'IDEA_AUTH.I_FORGOT_MY_PASSWORD_HINT' | translate"
+                  (click)="goToForgotPassword()"
                 >
-                  {{ 'IDEA_AUTH.CREATE_AN_ACCOUNT' | translate }}
+                  {{ 'IDEA_AUTH.I_FORGOT_MY_PASSWORD' | translate }}
                 </ion-button>
               }
-              <ion-button
-                testId="forgotPasswordButton"
-                fill="clear"
-                expand="block"
-                class="smallCaseButton"
-                [title]="'IDEA_AUTH.I_FORGOT_MY_PASSWORD_HINT' | translate"
-                (click)="goToForgotPassword()"
-              >
-                {{ 'IDEA_AUTH.I_FORGOT_MY_PASSWORD' | translate }}
-              </ion-button>
               @if (hasIntroPage) {
                 <ion-button
                   testId="backToIntroButton"
@@ -1827,103 +1865,130 @@ i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "18.2.9", ngImpor
                   autocomplete="email"
                   [placeholder]="'IDEA_AUTH.EMAIL' | translate"
                   [title]="'IDEA_AUTH.EMAIL_HINT' | translate"
+                  [disabled]="externalProviders.length && doneExternalProviderCheck"
                   [ngModelOptions]="{ standalone: true }"
                   [(ngModel)]="email"
-                  (keyup.enter)="login()"
-                />
-              </ion-item>
-              <ion-item>
-                <ion-label position="inline">
-                  <ion-icon name="key" color="primary" />
-                </ion-label>
-                <ion-input
-                  testId="signin.password"
-                  id="current-password"
-                  type="password"
-                  spellcheck="false"
-                  autocorrect="off"
-                  autocomplete="current-password"
-                  [clearOnEdit]="false"
-                  [placeholder]="'IDEA_AUTH.PASSWORD' | translate"
-                  [title]="'IDEA_AUTH.PASSWORD_HINT' | translate"
-                  [ngModelOptions]="{ standalone: true }"
-                  [(ngModel)]="password"
-                  (keyup.enter)="login()"
+                  (keyup.enter)="externalProviders.length ? checkForExternalProviderEmail() : login()"
                 />
+                @if (externalProviders.length && doneExternalProviderCheck) {
+                  <ion-button
+                    slot="end"
+                    fill="clear"
+                    [title]="'IDEA_AUTH.EDIT_EMAIL' | translate"
+                    (click)="doneExternalProviderCheck = false"
+                  >
+                    <ion-icon icon="pencil" slot="icon-only" />
+                  </ion-button>
+                }
               </ion-item>
-              @if (
-                !registrationPossible &&
-                (translationExists('IDEA_VARIABLES.TERMS_AND_CONDITIONS_URL') ||
-                  translationExists('IDEA_VARIABLES.PRIVACY_POLICY_URL'))
-              ) {
-                <ion-row class="agreementsAcceptanceRow">
-                  <ion-col>
-                    <ion-checkbox size="small" [ngModelOptions]="{ standalone: true }" [(ngModel)]="agreementsCheck" />
-                    {{ 'IDEA_AUTH.AGREEMENTS_CHECK_LOGIN' | translate }}:
-                    @if (translationExists('IDEA_VARIABLES.TERMS_AND_CONDITIONS_URL')) {
-                      <a
-                        ion-text
-                        testId="openTermsAndConditionsButton"
-                        color="primary"
-                        target="_blank"
-                        [title]="'IDEA_AUTH.TERMS_AND_CONDITIONS_HINT' | translate"
-                        [href]="'IDEA_VARIABLES.TERMS_AND_CONDITIONS_URL' | translate"
-                      >
-                        {{ 'IDEA_AUTH.TERMS_AND_CONDITIONS' | translate }}
-                      </a>
-                    }
-                    @if (
-                      translationExists('IDEA_VARIABLES.PRIVACY_POLICY_URL') &&
-                      translationExists('IDEA_VARIABLES.TERMS_AND_CONDITIONS_URL')
-                    ) {
-                      <ion-text> & </ion-text>
-                    }
-                    @if (translationExists('IDEA_VARIABLES.PRIVACY_POLICY_URL')) {
-                      <a
-                        ion-text
-                        testId="openPrivacyPolicyButton"
-                        color="primary"
-                        target="_blank"
-                        [title]="'IDEA_AUTH.PRIVACY_POLICY_HINT' | translate"
-                        [href]="'IDEA_VARIABLES.PRIVACY_POLICY_URL' | translate"
-                      >
-                        {{ 'IDEA_AUTH.PRIVACY_POLICY' | translate }}
-                      </a>
-                    }
-                  </ion-col>
-                </ion-row>
-              }
-              <ion-button
-                testId="signInButton"
-                expand="block"
-                [disabled]="!agreementsCheck"
-                [title]="'IDEA_AUTH.SIGN_IN_HINT' | translate"
-                (click)="login()"
-              >
-                {{ 'IDEA_AUTH.SIGN_IN' | translate }}
-              </ion-button>
-              @if (registrationPossible) {
+              @if (externalProviders.length && !doneExternalProviderCheck) {
                 <ion-button
-                  testId="createAnAccountButton"
+                  testId="continueButton"
+                  expand="block"
+                  [disabled]="!agreementsCheck"
+                  [title]="'IDEA_AUTH.CONTINUE_HINT' | translate"
+                  (click)="checkExternalProviderEmail()"
+                >
+                  {{ 'IDEA_AUTH.CONTINUE' | translate }}
+                </ion-button>
+              } @else {
+                <ion-item>
+                  <ion-label position="inline">
+                    <ion-icon name="key" color="primary" />
+                  </ion-label>
+                  <ion-input
+                    testId="signin.password"
+                    id="current-password"
+                    type="password"
+                    spellcheck="false"
+                    autocorrect="off"
+                    autocomplete="current-password"
+                    [clearOnEdit]="false"
+                    [placeholder]="'IDEA_AUTH.PASSWORD' | translate"
+                    [title]="'IDEA_AUTH.PASSWORD_HINT' | translate"
+                    [ngModelOptions]="{ standalone: true }"
+                    [(ngModel)]="password"
+                    (keyup.enter)="login()"
+                  />
+                </ion-item>
+                @if (
+                  !registrationPossible &&
+                  (translationExists('IDEA_VARIABLES.TERMS_AND_CONDITIONS_URL') ||
+                    translationExists('IDEA_VARIABLES.PRIVACY_POLICY_URL'))
+                ) {
+                  <ion-row class="agreementsAcceptanceRow">
+                    <ion-col>
+                      <ion-checkbox
+                        size="small"
+                        [ngModelOptions]="{ standalone: true }"
+                        [(ngModel)]="agreementsCheck"
+                      />
+                      {{ 'IDEA_AUTH.AGREEMENTS_CHECK_LOGIN' | translate }}:
+                      @if (translationExists('IDEA_VARIABLES.TERMS_AND_CONDITIONS_URL')) {
+                        <a
+                          ion-text
+                          testId="openTermsAndConditionsButton"
+                          color="primary"
+                          target="_blank"
+                          [title]="'IDEA_AUTH.TERMS_AND_CONDITIONS_HINT' | translate"
+                          [href]="'IDEA_VARIABLES.TERMS_AND_CONDITIONS_URL' | translate"
+                        >
+                          {{ 'IDEA_AUTH.TERMS_AND_CONDITIONS' | translate }}
+                        </a>
+                      }
+                      @if (
+                        translationExists('IDEA_VARIABLES.PRIVACY_POLICY_URL') &&
+                        translationExists('IDEA_VARIABLES.TERMS_AND_CONDITIONS_URL')
+                      ) {
+                        <ion-text> & </ion-text>
+                      }
+                      @if (translationExists('IDEA_VARIABLES.PRIVACY_POLICY_URL')) {
+                        <a
+                          ion-text
+                          testId="openPrivacyPolicyButton"
+                          color="primary"
+                          target="_blank"
+                          [title]="'IDEA_AUTH.PRIVACY_POLICY_HINT' | translate"
+                          [href]="'IDEA_VARIABLES.PRIVACY_POLICY_URL' | translate"
+                        >
+                          {{ 'IDEA_AUTH.PRIVACY_POLICY' | translate }}
+                        </a>
+                      }
+                    </ion-col>
+                  </ion-row>
+                }
+                <ion-button
+                  testId="signInButton"
+                  expand="block"
+                  [disabled]="!agreementsCheck"
+                  [title]="'IDEA_AUTH.SIGN_IN_HINT' | translate"
+                  (click)="login()"
+                >
+                  {{ 'IDEA_AUTH.SIGN_IN' | translate }}
+                </ion-button>
+                @if (registrationPossible) {
+                  <ion-button
+                    testId="createAnAccountButton"
+                    fill="clear"
+                    expand="block"
+                    class="smallCaseButton"
+                    [title]="'IDEA_AUTH.CREATE_AN_ACCOUNT_HINT' | translate"
+                    (click)="goToRegistration()"
+                  >
+                    {{ 'IDEA_AUTH.CREATE_AN_ACCOUNT' | translate }}
+                  </ion-button>
+                }
+                <ion-button
+                  testId="forgotPasswordButton"
                   fill="clear"
                   expand="block"
                   class="smallCaseButton"
-                  [title]="'IDEA_AUTH.CREATE_AN_ACCOUNT_HINT' | translate"
-                  (click)="goToRegistration()"
+                  [title]="'IDEA_AUTH.I_FORGOT_MY_PASSWORD_HINT' | translate"
+                  (click)="goToForgotPassword()"
                 >
-                  {{ 'IDEA_AUTH.CREATE_AN_ACCOUNT' | translate }}
+                  {{ 'IDEA_AUTH.I_FORGOT_MY_PASSWORD' | translate }}
                 </ion-button>
               }
-              <ion-button
-                testId="forgotPasswordButton"
-                fill="clear"
-                expand="block"
-                class="smallCaseButton"
-                [title]="'IDEA_AUTH.I_FORGOT_MY_PASSWORD_HINT' | translate"
-                (click)="goToForgotPassword()"
-              >
-                {{ 'IDEA_AUTH.I_FORGOT_MY_PASSWORD' | translate }}
-              </ion-button>
               @if (hasIntroPage) {
                 <ion-button
                   testId="backToIntroButton"
@@ -3684,6 +3749,156 @@ i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "18.2.9", ngImpor
   `, styles: [".flexBox{background:var(--idea-auth-background-color, var(--ion-color-white-shade))}.authCard{min-width:400px;max-width:550px;margin:0 10px;padding:20px;background-color:var(--idea-auth-card-background-color, var(--ion-color-white));border:1px solid var(--idea-auth-card-border-color, var(--ion-color-light));border-radius:10px;box-shadow:none;text-align:center}.authCard ion-img{width:150px;display:block;margin:0 auto}.authCard ion-card-title{font-family:auth-title;font-size:3em}.authCard ion-card-subtitle{font-family:auth-title;font-size:1.2em}.authCard ion-card-content{padding-top:16px}.authCard ion-card-content .errorBox{padding-left:10px;margin-bottom:20px;text-align:left;border-left:2px solid var(--ion-color-danger)}.authCard ion-card-content ion-item{--ion-item-background: var(--idea-auth-card-background-color, var(--ion-color-white));--border-color: var(--idea-auth-card-border-color, var(--ion-color-light))}.authCard ion-card-content ion-label[position=inline] ion-icon{padding-top:4px;padding-right:5px;font-size:1.3em}.authCard ion-card-content .agreementsAcceptanceRow{margin-top:15px;font-size:.9em}.authCard ion-card-content .agreementsAcceptanceRow ion-checkbox{vertical-align:bottom;margin-right:3px}.authCard ion-card-content ion-button:not([slot=end]){margin-top:15px}.authCard ion-card-content .smallCaseButton{text-transform:none;letter-spacing:normal;font-size:1em}@media only screen and (max-width: 500px){.authCard{background-color:transparent;border:none}}.ideaLogo{width:65px;margin:40px auto 0;cursor:pointer}.passwordPolicyPopover{--width: 350px}\n"] }]
         }] });
 
+class IDEAOktaPage {
+    constructor() {
+        this._route = inject(ActivatedRoute);
+        this._router = inject(Router);
+        this._env = inject(IDEAEnvironment);
+        this.go = false;
+        this.domain = this._env.aws.cognito.domain;
+        this.clientId = this._env.aws.cognito.userPoolClientId;
+        this.redirectURI = `${window.location.origin}${window.location.pathname}`; // Cognito client must include this callback
+        this.scope = 'email openid profile aws.cognito.signin.user.admin'; // Cognito client config must match
+        this.title = this._env.idea.auth.title;
+        this.darkMode = window.matchMedia('(prefers-color-scheme: dark)').matches;
+    }
+    ionViewWillEnter() {
+        this.identityProvider = this._route.snapshot.queryParamMap.get('provider');
+        this.code = this._route.snapshot.queryParamMap.get('code');
+        this.go = !!this._route.snapshot.queryParamMap.get('go');
+        this._router.navigate([], { queryParams: {}, replaceUrl: true });
+        if (this.code)
+            this.endLogin();
+        else if (this.identityProvider && this.go)
+            this.startLogin();
+    }
+    startLogin() {
+        const url = `https://${this.domain}/oauth2/authorize`;
+        const params = new URLSearchParams();
+        params.append('identity_provider', this.identityProvider);
+        params.append('redirect_uri', this.redirectURI);
+        params.append('response_type', 'code');
+        params.append('client_id', this.clientId);
+        params.append('scope', this.scope);
+        window.location.assign(`${url}?${params.toString()}`);
+    }
+    async endLogin() {
+        const url = `https://${this.domain}/oauth2/token`;
+        const params = new URLSearchParams();
+        params.append('code', this.code);
+        params.append('grant_type', 'authorization_code');
+        params.append('redirect_uri', this.redirectURI);
+        params.append('client_id', this.clientId);
+        const headers = { 'Content-Type': 'application/x-www-form-urlencoded' };
+        const response = await fetch(url, { method: 'POST', headers, body: params.toString() });
+        if (!response.ok)
+            throw new Error(`HTTP error! Status: ${response.status}`);
+        const { id_token, access_token, refresh_token } = await response.json();
+        storeCognitoSession(id_token, access_token, refresh_token);
+        window.location.assign('');
+    }
+    static { this.ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "18.2.9", ngImport: i0, type: IDEAOktaPage, deps: [], target: i0.ɵɵFactoryTarget.Component }); }
+    static { this.ɵcmp = i0.ɵɵngDeclareComponent({ minVersion: "17.0.0", version: "18.2.9", type: IDEAOktaPage, isStandalone: true, selector: "okta", ngImport: i0, template: `
+    @if (!code && !go) {
+      <ion-content>
+        <div class="flexBox">
+          <ion-card class="authCard">
+            <ion-img
+              [title]="'IDEA_AUTH.SERVICE_LOGO' | translate"
+              [src]="darkMode ? 'assets/icons/icon-auth-alt.svg' : 'assets/icons/icon-auth.svg'"
+            />
+            @if (title) {
+              <ion-card-header>
+                <ion-card-title color="primary">{{ title }}</ion-card-title>
+              </ion-card-header>
+            }
+            <ion-card-content>
+              @if (identityProvider) {
+                <ion-button expand="block" [title]="'IDEA_AUTH.SIGN_IN_HINT' | translate" (click)="startLogin()">
+                  {{ 'IDEA_AUTH.SIGN_IN' | translate }}
+                </ion-button>
+              } @else {
+                <p testId="signin.error" class="errorBox">
+                  <b>{{ 'IDEA_AUTH.UNKNOWN_PROVIDER' | translate }}.</b>
+                </p>
+              }
+            </ion-card-content>
+          </ion-card>
+        </div>
+      </ion-content>
+    }
+  `, isInline: true, dependencies: [{ kind: "pipe", type: IDEATranslatePipe, name: "translate" }, { kind: "component", type: IonContent, selector: "ion-content", inputs: ["color", "fixedSlotPlacement", "forceOverscroll", "fullscreen", "scrollEvents", "scrollX", "scrollY"] }, { kind: "component", type: IonCard, selector: "ion-card", inputs: ["button", "color", "disabled", "download", "href", "mode", "rel", "routerAnimation", "routerDirection", "target", "type"] }, { kind: "component", type: IonImg, selector: "ion-img", inputs: ["alt", "src"] }, { kind: "component", type: IonCardHeader, selector: "ion-card-header", inputs: ["color", "mode", "translucent"] }, { kind: "component", type: IonCardTitle, selector: "ion-card-title", inputs: ["color", "mode"] }, { kind: "component", type: IonCardContent, selector: "ion-card-content", inputs: ["mode"] }, { kind: "component", type: IonButton, selector: "ion-button", inputs: ["buttonType", "color", "disabled", "download", "expand", "fill", "form", "href", "mode", "rel", "routerAnimation", "routerDirection", "shape", "size", "strong", "target", "type"] }] }); }
+}
+i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "18.2.9", ngImport: i0, type: IDEAOktaPage, decorators: [{
+            type: Component,
+            args: [{
+                    selector: 'okta',
+                    standalone: true,
+                    imports: [IDEATranslatePipe, IonContent, IonCard, IonImg, IonCardHeader, IonCardTitle, IonCardContent, IonButton],
+                    template: `
+    @if (!code && !go) {
+      <ion-content>
+        <div class="flexBox">
+          <ion-card class="authCard">
+            <ion-img
+              [title]="'IDEA_AUTH.SERVICE_LOGO' | translate"
+              [src]="darkMode ? 'assets/icons/icon-auth-alt.svg' : 'assets/icons/icon-auth.svg'"
+            />
+            @if (title) {
+              <ion-card-header>
+                <ion-card-title color="primary">{{ title }}</ion-card-title>
+              </ion-card-header>
+            }
+            <ion-card-content>
+              @if (identityProvider) {
+                <ion-button expand="block" [title]="'IDEA_AUTH.SIGN_IN_HINT' | translate" (click)="startLogin()">
+                  {{ 'IDEA_AUTH.SIGN_IN' | translate }}
+                </ion-button>
+              } @else {
+                <p testId="signin.error" class="errorBox">
+                  <b>{{ 'IDEA_AUTH.UNKNOWN_PROVIDER' | translate }}.</b>
+                </p>
+              }
+            </ion-card-content>
+          </ion-card>
+        </div>
+      </ion-content>
+    }
+  `
+                }]
+        }] });
+//
+// HELPERS
+//
+/**
+ * Store the tokens and the info needed by Cognito's front-end lib to authenticate.
+ */
+const storeCognitoSession = (idToken, accessToken, refreshToken) => {
+    const { sub } = decodeJWTToken(idToken);
+    const { client_id } = decodeJWTToken(accessToken);
+    const prefix = `CognitoIdentityServiceProvider.${client_id}`;
+    window.localStorage.setItem(`${prefix}.LastAuthUser`, sub);
+    window.localStorage.setItem(`${prefix}.${sub}.accessToken`, accessToken);
+    window.localStorage.setItem(`${prefix}.${sub}.idToken`, idToken);
+    window.localStorage.setItem(`${prefix}.${sub}.refreshToken`, refreshToken);
+};
+/**
+ * Decode a JWT token and return its payload as a JSON object.
+ */
+const decodeJWTToken = (token) => {
+    if (!token)
+        return null;
+    try {
+        const base64Url = token.split('.')[1];
+        const base64 = base64Url.replace(/-/g, '+').replace(/_/g, '/');
+        return JSON.parse(window.atob(base64));
+    }
+    catch (error) {
+        console.error('Error decoding token:', error);
+        return null;
+    }
+};
+
 const routes = [
     { path: '', redirectTo: 'sign-in', pathMatch: 'full' },
     { path: 'sign-in', component: IDEASignInPage },
@@ -3693,7 +3908,8 @@ const routes = [
     { path: 'setup-mfa', component: IDEASetupMFAPage },
     { path: 'resend-link', component: IDEAResendLinkPage },
     { path: 'forgot-password', component: IDEAForgotPasswordPage },
-    { path: 'confirm-password', component: IDEAConfirmPasswordPage }
+    { path: 'confirm-password', component: IDEAConfirmPasswordPage },
+    { path: 'okta', component: IDEAOktaPage }
 ];
 
 /**