@itwin/map-layers-auth 4.10.0-dev.9 → 5.0.0-dev.0

package/CHANGELOG.md

@@ -1,6 +1,26 @@
 # Change Log - @itwin/map-layers-auth
 
-This log was last generated on Wed, 25 Sep 2024 20:12:30 GMT and should not be manually modified.
+This log was last generated on Tue, 22 Oct 2024 20:03:09 GMT and should not be manually modified.
+
+## 4.9.5
+Tue, 22 Oct 2024 20:01:40 GMT
+
+_Version update only_
+
+## 4.9.4
+Wed, 09 Oct 2024 20:22:04 GMT
+
+_Version update only_
+
+## 4.9.3
+Thu, 03 Oct 2024 19:15:45 GMT
+
+_Version update only_
+
+## 4.9.2
+Wed, 02 Oct 2024 15:14:43 GMT
+
+_Version update only_
 
 ## 4.9.1
 Wed, 25 Sep 2024 20:10:58 GMT

package/lib/cjs/ArcGis/ArcGisTokenGenerator.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ArcGisTokenGenerator.d.ts","sourceRoot":"","sources":["../../../src/ArcGis/ArcGisTokenGenerator.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAE3D;;GAEG;AAEH,gBAAgB;AAChB,MAAM,WAAW,iBAAkB,SAAQ,mBAAmB;IAG5D,SAAS,EAAE,MAAM,CAAC;IAGlB,GAAG,EAAE,OAAO,CAAC;IAGb,QAAQ,EAAE,MAAM,CAAC;IAGjB,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED,gBAAgB;AAChB,MAAM,WAAW,WAAY,SAAQ,mBAAmB;IAEtD,OAAO,EAAE,MAAM,CAAC;IAGhB,GAAG,EAAE,OAAO,CAAC;CACd;AAGD,gBAAgB;AAChB,oBAAY,qBAAqB;IAC/B,EAAE,IAAA;IACF,OAAO,IAAA;IACP,SAAS,IAAA;CACV;AAED,gBAAgB;AAChB,MAAM,WAAW,0BAA0B;IAKzC,MAAM,EAAE,qBAAqB,CAAC;IAK9B,EAAE,CAAC,EAAE,MAAM,CAAC;IAOZ,OAAO,CAAC,EAAE,MAAM,CAAC;IAOjB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,gBAAgB;AAChB,qBAAa,oBAAoB;IAC/B,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAY;IAC/C,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,eAAe,CAAkB;IAGzD,OAAO,CAAC,MAAM,CAAC,qBAAqB,CAA6B;WAE7C,oBAAoB,CAAC,oBAAoB,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC;WAiBrF,2BAA2B,CAAC,IAAI,EAAE,GAAG,GAAG,MAAM,GAAG,SAAS;IAI3D,kBAAkB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC;IAahE,QAAQ,CAAC,oBAAoB,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,0BAA0B,GAAG,OAAO,CAAC,GAAG,CAAC;WAqD5H,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM;WAM/B,aAAa,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM;CAQjD"}
+{"version":3,"file":"ArcGisTokenGenerator.d.ts","sourceRoot":"","sources":["../../../src/ArcGis/ArcGisTokenGenerator.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAE3D;;GAEG;AAEH,gBAAgB;AAChB,MAAM,WAAW,iBAAkB,SAAQ,mBAAmB;IAG5D,SAAS,EAAE,MAAM,CAAC;IAGlB,GAAG,EAAE,OAAO,CAAC;IAGb,QAAQ,EAAE,MAAM,CAAC;IAGjB,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED,gBAAgB;AAChB,MAAM,WAAW,WAAY,SAAQ,mBAAmB;IAEtD,OAAO,EAAE,MAAM,CAAC;IAGhB,GAAG,EAAE,OAAO,CAAC;CACd;AAGD,gBAAgB;AAChB,oBAAY,qBAAqB;IAC/B,EAAE,IAAA;IACF,OAAO,IAAA;IACP,SAAS,IAAA;CACV;AAED,gBAAgB;AAChB,MAAM,WAAW,0BAA0B;IAKzC,MAAM,EAAE,qBAAqB,CAAC;IAK9B,EAAE,CAAC,EAAE,MAAM,CAAC;IAOZ,OAAO,CAAC,EAAE,MAAM,CAAC;IAOjB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,gBAAgB;AAChB,qBAAa,oBAAoB;IAC/B,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAY;IAC/C,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,eAAe,CAAkB;IAGzD,OAAO,CAAC,MAAM,CAAC,qBAAqB,CAA6B;WAE7C,oBAAoB,CAAC,oBAAoB,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC;WAgBrF,2BAA2B,CAAC,IAAI,EAAE,GAAG,GAAG,MAAM,GAAG,SAAS;IAI3D,kBAAkB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC;IAahE,QAAQ,CAAC,oBAAoB,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,0BAA0B,GAAG,OAAO,CAAC,GAAG,CAAC;WAoD5H,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM;WAM/B,aAAa,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM;CAQjD"}

package/lib/cjs/ArcGis/ArcGisTokenGenerator.js

@@ -23,8 +23,7 @@ class ArcGisTokenGenerator {
             const json = await response.json();
             tokenServicesUrl = ArcGisTokenGenerator.getTokenServiceFromInfoJson(json);
         }
-        catch (_error) {
-        }
+        catch { }
         return tokenServicesUrl;
     }
     static getTokenServiceFromInfoJson(json) {
@@ -82,8 +81,7 @@ class ArcGisTokenGenerator {
             // Check a token was really generated (an error could be part of the body)
             token = await response.json();
         }
-        catch (_error) {
-        }
+        catch { }
         return token;
     }
     // Encode following 'application/x-www-form-urlencoded' standard (https://www.w3.org/TR/html401/interact/forms.html#h-17.13.3.3)

package/lib/cjs/ArcGis/ArcGisTokenGenerator.js.map

@@ -1 +1 @@
-{"version":3,"file":"ArcGisTokenGenerator.js","sourceRoot":"","sources":["../../../src/ArcGis/ArcGisTokenGenerator.ts"],"names":[],"mappings":";;;AAmCA,4GAA4G;AAC5G,gBAAgB;AAChB,IAAY,qBAIX;AAJD,WAAY,qBAAqB;IAC/B,6DAAE,CAAA;IACF,uEAAO,CAAA;IACP,2EAAS,CAAA;AACX,CAAC,EAJW,qBAAqB,qCAArB,qBAAqB,QAIhC;AA8BD,gBAAgB;AAChB,MAAa,oBAAoB;IAOxB,MAAM,CAAC,KAAK,CAAC,oBAAoB,CAAC,oBAA4B;QACnE,MAAM,QAAQ,GAAG,oBAAoB,CAAC,WAAW,EAAE,CAAC;QACpD,MAAM,UAAU,GAAG,QAAQ,CAAC,OAAO,CAAC,oBAAoB,CAAC,WAAW,CAAC,CAAC;QACtE,IAAI,UAAU,KAAK,CAAC,CAAC;YACnB,OAAO,SAAS,CAAC;QACnB,MAAM,OAAO,GAAG,oBAAoB,CAAC,SAAS,CAAC,CAAC,EAAE,UAAU,GAAG,oBAAoB,CAAC,WAAW,CAAC,MAAM,CAAC,GAAG,oBAAoB,CAAC,eAAe,CAAC;QAE/I,IAAI,gBAAoC,CAAC;QACzC,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;YACzD,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;YACnC,gBAAgB,GAAG,oBAAoB,CAAC,2BAA2B,CAAC,IAAI,CAAC,CAAC;QAC5E,CAAC;QAAC,OAAO,MAAM,EAAE,CAAC;QAClB,CAAC;QACD,OAAO,gBAAgB,CAAC;IAC1B,CAAC;IAEM,MAAM,CAAC,2BAA2B,CAAC,IAAS;QACjD,OAAO,IAAI,CAAC,QAAQ,EAAE,oBAAoB,CAAC,CAAC,CAAC,IAAI,EAAE,QAAQ,EAAE,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAAC;IAC5F,CAAC;IAEM,KAAK,CAAC,kBAAkB,CAAC,OAAe;QAC7C,MAAM,MAAM,GAAG,oBAAoB,CAAC,qBAAqB,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACvE,IAAI,MAAM,KAAK,SAAS;YACtB,OAAO,MAAM,CAAC;QAEhB,MAAM,eAAe,GAAG,MAAM,oBAAoB,CAAC,oBAAoB,CAAC,OAAO,CAAC,CAAC;QACjF,IAAI,eAAe,KAAK,SAAS;YAC/B,oBAAoB,CAAC,qBAAqB,CAAC,GAAG,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC;QAE3E,OAAO,eAAe,CAAC;IACzB,CAAC;IAED,6FAA6F;IACtF,KAAK,CAAC,QAAQ,CAAC,oBAA4B,EAAE,QAAgB,EAAE,QAAgB,EAAE,OAAmC;QACzH,MAAM,eAAe,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,oBAAoB,CAAC,CAAC;QAC5E,IAAI,CAAC,eAAe;YAClB,OAAO,SAAS,CAAC;QAEnB,IAAI,KAAgB,CAAC;QACrB,IAAI,CAAC;YACH,MAAM,eAAe,GAAG,kBAAkB,CAAC,QAAQ,CAAC,CAAC;YACrD,MAAM,eAAe,GAAG,kBAAkB,CAAC,QAAQ,CAAC,CAAC;YAErD,+BAA+B;YAC/B,IAAI,aAAa,GAAG,EAAE,CAAC;YACvB,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC;gBACvB,aAAa,GAAG,eAAe,OAAO,CAAC,UAAU,EAAE,CAAC;YACtD,CAAC;YAED,2BAA2B;YAC3B,IAAI,SAAS,GAAG,EAAE,CAAC;YACnB,IAAI,OAAO,CAAC,MAAM,KAAK,qBAAqB,CAAC,OAAO,EAAE,CAAC;gBACrD,IAAI,UAAU,GAAG,EAAE,CAAC;gBACpB,IAAI,OAAO,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;oBAClC,UAAU,GAAG,kBAAkB,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAK,gCAAgC;gBACxF,CAAC;qBAAM,CAAC;oBACN,UAAU,GAAG,kBAAkB,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;gBACnD,CAAC;gBAED,SAAS,GAAG,2BAA2B,UAAU,EAAE,CAAC;YACtD,CAAC;iBAAM,IAAI,OAAO,CAAC,MAAM,KAAK,qBAAqB,CAAC,EAAE,EAAE,CAAC;gBACvD,IAAI,OAAO,CAAC,EAAE,KAAK,SAAS;oBAC1B,OAAO,KAAK,CAAC;gBACf,SAAS,GAAG,iBAAiB,OAAO,CAAC,EAAE,EAAE,CAAC;YAC5C,CAAC;iBAAM,IAAI,OAAO,CAAC,MAAM,KAAK,qBAAqB,CAAC,SAAS,EAAE,CAAC;gBAC9D,SAAS,GAAG,uBAAuB,CAAC;YACtC,CAAC;YAED,MAAM,kBAAkB,GAAgB;gBACtC,MAAM,EAAE,MAAM;gBACd,IAAI,EAAE,YAAY,eAAe,aAAa,eAAe,GAAG,SAAS,GAAG,aAAa,UAAU;gBACnG,OAAO,EAAE,EAAE,cAAc,EAAE,mCAAmC,EAAE;aACjE,CAAC;YAEF,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,eAAe,EAAE,kBAAkB,CAAC,CAAC;YAElE,0EAA0E;YAC1E,KAAK,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QAEhC,CAAC;QAAC,OAAO,MAAM,EAAE,CAAC;QAClB,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,gIAAgI;IAChI,2HAA2H;IACpH,MAAM,CAAC,UAAU,CAAC,GAAW;QAClC,OAAO,oBAAoB,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IACtE,CAAC;IAED,2EAA2E;IAC3E,qDAAqD;IAC9C,MAAM,CAAC,aAAa,CAAC,GAAW;QACrC,OAAO,kBAAkB,CAAC,GAAG,CAAC;aAC3B,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC;aACpB,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC;aACpB,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC;aACrB,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC;aACrB,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IAC3B,CAAC;;AA3GH,oDA4GC;AA3GyB,gCAAW,GAAG,QAAQ,CAAC;AACvB,oCAAe,GAAG,cAAc,CAAC;AAEzD,wEAAwE;AACzD,0CAAqB,GAAG,IAAI,GAAG,EAAkB,CAAC","sourcesContent":["/*---------------------------------------------------------------------------------------------\r\n* Copyright (c) Bentley Systems, Incorporated. All rights reserved.\r\n* See LICENSE.md in the project root for license terms and full copyright notice.\r\n*--------------------------------------------------------------------------------------------*/\r\nimport { MapLayerAccessToken } from \"@itwin/core-frontend\";\r\n\r\n/** @packageDocumentation\r\n * @module Tiles\r\n */\r\n\r\n/** @internal */\r\nexport interface ArcGisOAuth2Token extends MapLayerAccessToken {\r\n\r\n  // The expiration time of the token in milliseconds (UNIX time)\r\n  expiresAt: number;\r\n\r\n  // This property will show as true if the token must always pass over ssl.\r\n  ssl: boolean;\r\n\r\n  // Username associated with this token\r\n  userName: string;\r\n\r\n  // A Binary value that, if true, implies that the user had checked \"Keep me signed in\"\r\n  persist?: boolean;\r\n}\r\n\r\n/** @internal */\r\nexport interface ArcGisToken extends MapLayerAccessToken {\r\n  // The expiration time of the token in milliseconds since January 1, 1970 (UTC).\r\n  expires: number;\r\n\r\n  // This property will show as true if the token must always pass over ssl.\r\n  ssl: boolean;\r\n}\r\n\r\n// client application's base URL, a user-specified IP address, or the IP address that is making the request.\r\n/** @internal */\r\nexport enum ArcGisTokenClientType {\r\n  ip,\r\n  referer,\r\n  requestIp,\r\n}\r\n\r\n/** @internal */\r\nexport interface ArcGisGenerateTokenOptions {\r\n\r\n  // The client type that will be granted access to the token.\r\n  // Users will be able to specify whether the token will be generated for a client application's base URL,\r\n  // a user-specified IP address, or the IP address that is making the request.\r\n  client: ArcGisTokenClientType;\r\n\r\n  // The IP address that will be using the created token for access.\r\n  // On the Generate Token page, the IP address is specified in the IP Address field. This is required when client has been set as ip.\r\n  // Example ip=11.11.111.111\r\n  ip?: string;\r\n\r\n  // The base URL of the client application that will use the token.\r\n  // On the Generate Token page, the referrer URL is specified in the Webapp URL field.\r\n  // Defaults to location.origin if undefined and client = referer.\r\n  // This is required when client has been set as referer.\r\n  // Example : referer=https://myserver/mywebapp\r\n  referer?: string;\r\n\r\n  // The token expiration time in minutes. The default is 60 minutes (one hour).\r\n  // The maximum expiration period is 15 days. The maximum value of the expiration time is controlled by the server.\r\n  // Requests for tokens larger than this time will be rejected.\r\n  // Applications are responsible for renewing expired tokens;\r\n  // expired tokens will be rejected by the server on subsequent requests that use the token.\r\n  expiration?: number;   // in minutes, defaults to 60 minutes\r\n}\r\n\r\n/** @internal */\r\nexport class ArcGisTokenGenerator {\r\n  private static readonly restApiPath = \"/rest/\";\r\n  private static readonly restApiInfoPath = \"info?f=pjson\";\r\n\r\n  // Cache info url to avoid fetching/parsing twice for the same base url.\r\n  private static _tokenServiceUrlCache = new Map<string, string>();\r\n\r\n  public static async fetchTokenServiceUrl(arcGisRestServiceUrl: string): Promise<string | undefined> {\r\n    const lowerUrl = arcGisRestServiceUrl.toLowerCase();\r\n    const restApiIdx = lowerUrl.indexOf(ArcGisTokenGenerator.restApiPath);\r\n    if (restApiIdx === -1)\r\n      return undefined;\r\n    const infoUrl = arcGisRestServiceUrl.substring(0, restApiIdx + ArcGisTokenGenerator.restApiPath.length) + ArcGisTokenGenerator.restApiInfoPath;\r\n\r\n    let tokenServicesUrl: string | undefined;\r\n    try {\r\n      const response = await fetch(infoUrl, { method: \"GET\" });\r\n      const json = await response.json();\r\n      tokenServicesUrl = ArcGisTokenGenerator.getTokenServiceFromInfoJson(json);\r\n    } catch (_error) {\r\n    }\r\n    return tokenServicesUrl;\r\n  }\r\n\r\n  public static getTokenServiceFromInfoJson(json: any): string | undefined {\r\n    return json.authInfo?.isTokenBasedSecurity ? json?.authInfo?.tokenServicesUrl : undefined;\r\n  }\r\n\r\n  public async getTokenServiceUrl(baseUrl: string): Promise<string | undefined> {\r\n    const cached = ArcGisTokenGenerator._tokenServiceUrlCache.get(baseUrl);\r\n    if (cached !== undefined)\r\n      return cached;\r\n\r\n    const tokenServiceUrl = await ArcGisTokenGenerator.fetchTokenServiceUrl(baseUrl);\r\n    if (tokenServiceUrl !== undefined)\r\n      ArcGisTokenGenerator._tokenServiceUrlCache.set(baseUrl, tokenServiceUrl);\r\n\r\n    return tokenServiceUrl;\r\n  }\r\n\r\n  // base url:  ArcGis REST service base URL (format must be \"https://<host>/<instance>/rest/\")\r\n  public async generate(arcGisRestServiceUrl: string, userName: string, password: string, options: ArcGisGenerateTokenOptions): Promise<any> {\r\n    const tokenServiceUrl = await this.getTokenServiceUrl(arcGisRestServiceUrl);\r\n    if (!tokenServiceUrl)\r\n      return undefined;\r\n\r\n    let token: undefined;\r\n    try {\r\n      const encodedUsername = encodeURIComponent(userName);\r\n      const encodedPassword = encodeURIComponent(password);\r\n\r\n      // Compose the expiration param\r\n      let expirationStr = \"\";\r\n      if (options.expiration) {\r\n        expirationStr = `&expiration=${options.expiration}`;\r\n      }\r\n\r\n      // Compose the client param\r\n      let clientStr = \"\";\r\n      if (options.client === ArcGisTokenClientType.referer) {\r\n        let refererStr = \"\";\r\n        if (options.referer === undefined) {\r\n          refererStr = encodeURIComponent(location.origin);     // default to application origin\r\n        } else {\r\n          refererStr = encodeURIComponent(options.referer);\r\n        }\r\n\r\n        clientStr = `&client=referer&referer=${refererStr}`;\r\n      } else if (options.client === ArcGisTokenClientType.ip) {\r\n        if (options.ip === undefined)\r\n          return token;\r\n        clientStr = `&client=ip&ip=${options.ip}`;\r\n      } else if (options.client === ArcGisTokenClientType.requestIp) {\r\n        clientStr = `&client=requestip&ip=`;\r\n      }\r\n\r\n      const httpRequestOptions: RequestInit = {\r\n        method: \"POST\",\r\n        body: `username=${encodedUsername}&password=${encodedPassword}${clientStr}${expirationStr}&f=pjson`,\r\n        headers: { \"content-type\": \"application/x-www-form-urlencoded\" },\r\n      };\r\n\r\n      const response = await fetch(tokenServiceUrl, httpRequestOptions);\r\n\r\n      // Check a token was really generated (an error could be part of the body)\r\n      token = await response.json();\r\n\r\n    } catch (_error) {\r\n    }\r\n    return token;\r\n  }\r\n\r\n  // Encode following 'application/x-www-form-urlencoded' standard (https://www.w3.org/TR/html401/interact/forms.html#h-17.13.3.3)\r\n  // Also mentioned here: https://developer.mozilla.org/en-US/docs/Web/JavaScript/Reference/Global_Objects/encodeURIComponent\r\n  public static formEncode(str: string): string {\r\n    return ArcGisTokenGenerator.rfc1738Encode(str).replace(/%20/g, \"+\");\r\n  }\r\n\r\n  // Encode following RFC1738 standard (https://www.ietf.org/rfc/rfc1738.txt)\r\n  // Code from https://locutus.io/php/url/rawurlencode/\r\n  public static rfc1738Encode(str: string): string {\r\n    return encodeURIComponent(str)\r\n      .replace(/!/g, \"%21\")\r\n      .replace(/'/g, \"%27\")\r\n      .replace(/\\(/g, \"%28\")\r\n      .replace(/\\)/g, \"%29\")\r\n      .replace(/\\*/g, \"%2A\");\r\n  }\r\n}\r\n"]}
+{"version":3,"file":"ArcGisTokenGenerator.js","sourceRoot":"","sources":["../../../src/ArcGis/ArcGisTokenGenerator.ts"],"names":[],"mappings":";;;AAmCA,4GAA4G;AAC5G,gBAAgB;AAChB,IAAY,qBAIX;AAJD,WAAY,qBAAqB;IAC/B,6DAAE,CAAA;IACF,uEAAO,CAAA;IACP,2EAAS,CAAA;AACX,CAAC,EAJW,qBAAqB,qCAArB,qBAAqB,QAIhC;AA8BD,gBAAgB;AAChB,MAAa,oBAAoB;IAOxB,MAAM,CAAC,KAAK,CAAC,oBAAoB,CAAC,oBAA4B;QACnE,MAAM,QAAQ,GAAG,oBAAoB,CAAC,WAAW,EAAE,CAAC;QACpD,MAAM,UAAU,GAAG,QAAQ,CAAC,OAAO,CAAC,oBAAoB,CAAC,WAAW,CAAC,CAAC;QACtE,IAAI,UAAU,KAAK,CAAC,CAAC;YACnB,OAAO,SAAS,CAAC;QACnB,MAAM,OAAO,GAAG,oBAAoB,CAAC,SAAS,CAAC,CAAC,EAAE,UAAU,GAAG,oBAAoB,CAAC,WAAW,CAAC,MAAM,CAAC,GAAG,oBAAoB,CAAC,eAAe,CAAC;QAE/I,IAAI,gBAAoC,CAAC;QACzC,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;YACzD,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;YACnC,gBAAgB,GAAG,oBAAoB,CAAC,2BAA2B,CAAC,IAAI,CAAC,CAAC;QAC5E,CAAC;QAAC,MAAM,CAAC,CAAC,CAAC;QACX,OAAO,gBAAgB,CAAC;IAC1B,CAAC;IAEM,MAAM,CAAC,2BAA2B,CAAC,IAAS;QACjD,OAAO,IAAI,CAAC,QAAQ,EAAE,oBAAoB,CAAC,CAAC,CAAC,IAAI,EAAE,QAAQ,EAAE,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAAC;IAC5F,CAAC;IAEM,KAAK,CAAC,kBAAkB,CAAC,OAAe;QAC7C,MAAM,MAAM,GAAG,oBAAoB,CAAC,qBAAqB,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACvE,IAAI,MAAM,KAAK,SAAS;YACtB,OAAO,MAAM,CAAC;QAEhB,MAAM,eAAe,GAAG,MAAM,oBAAoB,CAAC,oBAAoB,CAAC,OAAO,CAAC,CAAC;QACjF,IAAI,eAAe,KAAK,SAAS;YAC/B,oBAAoB,CAAC,qBAAqB,CAAC,GAAG,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC;QAE3E,OAAO,eAAe,CAAC;IACzB,CAAC;IAED,6FAA6F;IACtF,KAAK,CAAC,QAAQ,CAAC,oBAA4B,EAAE,QAAgB,EAAE,QAAgB,EAAE,OAAmC;QACzH,MAAM,eAAe,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,oBAAoB,CAAC,CAAC;QAC5E,IAAI,CAAC,eAAe;YAClB,OAAO,SAAS,CAAC;QAEnB,IAAI,KAAgB,CAAC;QACrB,IAAI,CAAC;YACH,MAAM,eAAe,GAAG,kBAAkB,CAAC,QAAQ,CAAC,CAAC;YACrD,MAAM,eAAe,GAAG,kBAAkB,CAAC,QAAQ,CAAC,CAAC;YAErD,+BAA+B;YAC/B,IAAI,aAAa,GAAG,EAAE,CAAC;YACvB,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC;gBACvB,aAAa,GAAG,eAAe,OAAO,CAAC,UAAU,EAAE,CAAC;YACtD,CAAC;YAED,2BAA2B;YAC3B,IAAI,SAAS,GAAG,EAAE,CAAC;YACnB,IAAI,OAAO,CAAC,MAAM,KAAK,qBAAqB,CAAC,OAAO,EAAE,CAAC;gBACrD,IAAI,UAAU,GAAG,EAAE,CAAC;gBACpB,IAAI,OAAO,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;oBAClC,UAAU,GAAG,kBAAkB,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAK,gCAAgC;gBACxF,CAAC;qBAAM,CAAC;oBACN,UAAU,GAAG,kBAAkB,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;gBACnD,CAAC;gBAED,SAAS,GAAG,2BAA2B,UAAU,EAAE,CAAC;YACtD,CAAC;iBAAM,IAAI,OAAO,CAAC,MAAM,KAAK,qBAAqB,CAAC,EAAE,EAAE,CAAC;gBACvD,IAAI,OAAO,CAAC,EAAE,KAAK,SAAS;oBAC1B,OAAO,KAAK,CAAC;gBACf,SAAS,GAAG,iBAAiB,OAAO,CAAC,EAAE,EAAE,CAAC;YAC5C,CAAC;iBAAM,IAAI,OAAO,CAAC,MAAM,KAAK,qBAAqB,CAAC,SAAS,EAAE,CAAC;gBAC9D,SAAS,GAAG,uBAAuB,CAAC;YACtC,CAAC;YAED,MAAM,kBAAkB,GAAgB;gBACtC,MAAM,EAAE,MAAM;gBACd,IAAI,EAAE,YAAY,eAAe,aAAa,eAAe,GAAG,SAAS,GAAG,aAAa,UAAU;gBACnG,OAAO,EAAE,EAAE,cAAc,EAAE,mCAAmC,EAAE;aACjE,CAAC;YAEF,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,eAAe,EAAE,kBAAkB,CAAC,CAAC;YAElE,0EAA0E;YAC1E,KAAK,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QAEhC,CAAC;QAAC,MAAM,CAAC,CAAC,CAAC;QACX,OAAO,KAAK,CAAC;IACf,CAAC;IAED,gIAAgI;IAChI,2HAA2H;IACpH,MAAM,CAAC,UAAU,CAAC,GAAW;QAClC,OAAO,oBAAoB,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IACtE,CAAC;IAED,2EAA2E;IAC3E,qDAAqD;IAC9C,MAAM,CAAC,aAAa,CAAC,GAAW;QACrC,OAAO,kBAAkB,CAAC,GAAG,CAAC;aAC3B,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC;aACpB,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC;aACpB,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC;aACrB,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC;aACrB,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IAC3B,CAAC;;AAzGH,oDA0GC;AAzGyB,gCAAW,GAAG,QAAQ,CAAC;AACvB,oCAAe,GAAG,cAAc,CAAC;AAEzD,wEAAwE;AACzD,0CAAqB,GAAG,IAAI,GAAG,EAAkB,CAAC","sourcesContent":["/*---------------------------------------------------------------------------------------------\r\n* Copyright (c) Bentley Systems, Incorporated. All rights reserved.\r\n* See LICENSE.md in the project root for license terms and full copyright notice.\r\n*--------------------------------------------------------------------------------------------*/\r\nimport { MapLayerAccessToken } from \"@itwin/core-frontend\";\r\n\r\n/** @packageDocumentation\r\n * @module Tiles\r\n */\r\n\r\n/** @internal */\r\nexport interface ArcGisOAuth2Token extends MapLayerAccessToken {\r\n\r\n  // The expiration time of the token in milliseconds (UNIX time)\r\n  expiresAt: number;\r\n\r\n  // This property will show as true if the token must always pass over ssl.\r\n  ssl: boolean;\r\n\r\n  // Username associated with this token\r\n  userName: string;\r\n\r\n  // A Binary value that, if true, implies that the user had checked \"Keep me signed in\"\r\n  persist?: boolean;\r\n}\r\n\r\n/** @internal */\r\nexport interface ArcGisToken extends MapLayerAccessToken {\r\n  // The expiration time of the token in milliseconds since January 1, 1970 (UTC).\r\n  expires: number;\r\n\r\n  // This property will show as true if the token must always pass over ssl.\r\n  ssl: boolean;\r\n}\r\n\r\n// client application's base URL, a user-specified IP address, or the IP address that is making the request.\r\n/** @internal */\r\nexport enum ArcGisTokenClientType {\r\n  ip,\r\n  referer,\r\n  requestIp,\r\n}\r\n\r\n/** @internal */\r\nexport interface ArcGisGenerateTokenOptions {\r\n\r\n  // The client type that will be granted access to the token.\r\n  // Users will be able to specify whether the token will be generated for a client application's base URL,\r\n  // a user-specified IP address, or the IP address that is making the request.\r\n  client: ArcGisTokenClientType;\r\n\r\n  // The IP address that will be using the created token for access.\r\n  // On the Generate Token page, the IP address is specified in the IP Address field. This is required when client has been set as ip.\r\n  // Example ip=11.11.111.111\r\n  ip?: string;\r\n\r\n  // The base URL of the client application that will use the token.\r\n  // On the Generate Token page, the referrer URL is specified in the Webapp URL field.\r\n  // Defaults to location.origin if undefined and client = referer.\r\n  // This is required when client has been set as referer.\r\n  // Example : referer=https://myserver/mywebapp\r\n  referer?: string;\r\n\r\n  // The token expiration time in minutes. The default is 60 minutes (one hour).\r\n  // The maximum expiration period is 15 days. The maximum value of the expiration time is controlled by the server.\r\n  // Requests for tokens larger than this time will be rejected.\r\n  // Applications are responsible for renewing expired tokens;\r\n  // expired tokens will be rejected by the server on subsequent requests that use the token.\r\n  expiration?: number;   // in minutes, defaults to 60 minutes\r\n}\r\n\r\n/** @internal */\r\nexport class ArcGisTokenGenerator {\r\n  private static readonly restApiPath = \"/rest/\";\r\n  private static readonly restApiInfoPath = \"info?f=pjson\";\r\n\r\n  // Cache info url to avoid fetching/parsing twice for the same base url.\r\n  private static _tokenServiceUrlCache = new Map<string, string>();\r\n\r\n  public static async fetchTokenServiceUrl(arcGisRestServiceUrl: string): Promise<string | undefined> {\r\n    const lowerUrl = arcGisRestServiceUrl.toLowerCase();\r\n    const restApiIdx = lowerUrl.indexOf(ArcGisTokenGenerator.restApiPath);\r\n    if (restApiIdx === -1)\r\n      return undefined;\r\n    const infoUrl = arcGisRestServiceUrl.substring(0, restApiIdx + ArcGisTokenGenerator.restApiPath.length) + ArcGisTokenGenerator.restApiInfoPath;\r\n\r\n    let tokenServicesUrl: string | undefined;\r\n    try {\r\n      const response = await fetch(infoUrl, { method: \"GET\" });\r\n      const json = await response.json();\r\n      tokenServicesUrl = ArcGisTokenGenerator.getTokenServiceFromInfoJson(json);\r\n    } catch { }\r\n    return tokenServicesUrl;\r\n  }\r\n\r\n  public static getTokenServiceFromInfoJson(json: any): string | undefined {\r\n    return json.authInfo?.isTokenBasedSecurity ? json?.authInfo?.tokenServicesUrl : undefined;\r\n  }\r\n\r\n  public async getTokenServiceUrl(baseUrl: string): Promise<string | undefined> {\r\n    const cached = ArcGisTokenGenerator._tokenServiceUrlCache.get(baseUrl);\r\n    if (cached !== undefined)\r\n      return cached;\r\n\r\n    const tokenServiceUrl = await ArcGisTokenGenerator.fetchTokenServiceUrl(baseUrl);\r\n    if (tokenServiceUrl !== undefined)\r\n      ArcGisTokenGenerator._tokenServiceUrlCache.set(baseUrl, tokenServiceUrl);\r\n\r\n    return tokenServiceUrl;\r\n  }\r\n\r\n  // base url:  ArcGis REST service base URL (format must be \"https://<host>/<instance>/rest/\")\r\n  public async generate(arcGisRestServiceUrl: string, userName: string, password: string, options: ArcGisGenerateTokenOptions): Promise<any> {\r\n    const tokenServiceUrl = await this.getTokenServiceUrl(arcGisRestServiceUrl);\r\n    if (!tokenServiceUrl)\r\n      return undefined;\r\n\r\n    let token: undefined;\r\n    try {\r\n      const encodedUsername = encodeURIComponent(userName);\r\n      const encodedPassword = encodeURIComponent(password);\r\n\r\n      // Compose the expiration param\r\n      let expirationStr = \"\";\r\n      if (options.expiration) {\r\n        expirationStr = `&expiration=${options.expiration}`;\r\n      }\r\n\r\n      // Compose the client param\r\n      let clientStr = \"\";\r\n      if (options.client === ArcGisTokenClientType.referer) {\r\n        let refererStr = \"\";\r\n        if (options.referer === undefined) {\r\n          refererStr = encodeURIComponent(location.origin);     // default to application origin\r\n        } else {\r\n          refererStr = encodeURIComponent(options.referer);\r\n        }\r\n\r\n        clientStr = `&client=referer&referer=${refererStr}`;\r\n      } else if (options.client === ArcGisTokenClientType.ip) {\r\n        if (options.ip === undefined)\r\n          return token;\r\n        clientStr = `&client=ip&ip=${options.ip}`;\r\n      } else if (options.client === ArcGisTokenClientType.requestIp) {\r\n        clientStr = `&client=requestip&ip=`;\r\n      }\r\n\r\n      const httpRequestOptions: RequestInit = {\r\n        method: \"POST\",\r\n        body: `username=${encodedUsername}&password=${encodedPassword}${clientStr}${expirationStr}&f=pjson`,\r\n        headers: { \"content-type\": \"application/x-www-form-urlencoded\" },\r\n      };\r\n\r\n      const response = await fetch(tokenServiceUrl, httpRequestOptions);\r\n\r\n      // Check a token was really generated (an error could be part of the body)\r\n      token = await response.json();\r\n\r\n    } catch { }\r\n    return token;\r\n  }\r\n\r\n  // Encode following 'application/x-www-form-urlencoded' standard (https://www.w3.org/TR/html401/interact/forms.html#h-17.13.3.3)\r\n  // Also mentioned here: https://developer.mozilla.org/en-US/docs/Web/JavaScript/Reference/Global_Objects/encodeURIComponent\r\n  public static formEncode(str: string): string {\r\n    return ArcGisTokenGenerator.rfc1738Encode(str).replace(/%20/g, \"+\");\r\n  }\r\n\r\n  // Encode following RFC1738 standard (https://www.ietf.org/rfc/rfc1738.txt)\r\n  // Code from https://locutus.io/php/url/rawurlencode/\r\n  public static rfc1738Encode(str: string): string {\r\n    return encodeURIComponent(str)\r\n      .replace(/!/g, \"%21\")\r\n      .replace(/'/g, \"%27\")\r\n      .replace(/\\(/g, \"%28\")\r\n      .replace(/\\)/g, \"%29\")\r\n      .replace(/\\*/g, \"%2A\");\r\n  }\r\n}\r\n"]}

package/lib/esm/ArcGis/ArcGisTokenGenerator.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ArcGisTokenGenerator.d.ts","sourceRoot":"","sources":["../../../src/ArcGis/ArcGisTokenGenerator.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAE3D;;GAEG;AAEH,gBAAgB;AAChB,MAAM,WAAW,iBAAkB,SAAQ,mBAAmB;IAG5D,SAAS,EAAE,MAAM,CAAC;IAGlB,GAAG,EAAE,OAAO,CAAC;IAGb,QAAQ,EAAE,MAAM,CAAC;IAGjB,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED,gBAAgB;AAChB,MAAM,WAAW,WAAY,SAAQ,mBAAmB;IAEtD,OAAO,EAAE,MAAM,CAAC;IAGhB,GAAG,EAAE,OAAO,CAAC;CACd;AAGD,gBAAgB;AAChB,oBAAY,qBAAqB;IAC/B,EAAE,IAAA;IACF,OAAO,IAAA;IACP,SAAS,IAAA;CACV;AAED,gBAAgB;AAChB,MAAM,WAAW,0BAA0B;IAKzC,MAAM,EAAE,qBAAqB,CAAC;IAK9B,EAAE,CAAC,EAAE,MAAM,CAAC;IAOZ,OAAO,CAAC,EAAE,MAAM,CAAC;IAOjB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,gBAAgB;AAChB,qBAAa,oBAAoB;IAC/B,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAY;IAC/C,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,eAAe,CAAkB;IAGzD,OAAO,CAAC,MAAM,CAAC,qBAAqB,CAA6B;WAE7C,oBAAoB,CAAC,oBAAoB,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC;WAiBrF,2BAA2B,CAAC,IAAI,EAAE,GAAG,GAAG,MAAM,GAAG,SAAS;IAI3D,kBAAkB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC;IAahE,QAAQ,CAAC,oBAAoB,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,0BAA0B,GAAG,OAAO,CAAC,GAAG,CAAC;WAqD5H,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM;WAM/B,aAAa,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM;CAQjD"}
+{"version":3,"file":"ArcGisTokenGenerator.d.ts","sourceRoot":"","sources":["../../../src/ArcGis/ArcGisTokenGenerator.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAE3D;;GAEG;AAEH,gBAAgB;AAChB,MAAM,WAAW,iBAAkB,SAAQ,mBAAmB;IAG5D,SAAS,EAAE,MAAM,CAAC;IAGlB,GAAG,EAAE,OAAO,CAAC;IAGb,QAAQ,EAAE,MAAM,CAAC;IAGjB,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED,gBAAgB;AAChB,MAAM,WAAW,WAAY,SAAQ,mBAAmB;IAEtD,OAAO,EAAE,MAAM,CAAC;IAGhB,GAAG,EAAE,OAAO,CAAC;CACd;AAGD,gBAAgB;AAChB,oBAAY,qBAAqB;IAC/B,EAAE,IAAA;IACF,OAAO,IAAA;IACP,SAAS,IAAA;CACV;AAED,gBAAgB;AAChB,MAAM,WAAW,0BAA0B;IAKzC,MAAM,EAAE,qBAAqB,CAAC;IAK9B,EAAE,CAAC,EAAE,MAAM,CAAC;IAOZ,OAAO,CAAC,EAAE,MAAM,CAAC;IAOjB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,gBAAgB;AAChB,qBAAa,oBAAoB;IAC/B,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAY;IAC/C,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,eAAe,CAAkB;IAGzD,OAAO,CAAC,MAAM,CAAC,qBAAqB,CAA6B;WAE7C,oBAAoB,CAAC,oBAAoB,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC;WAgBrF,2BAA2B,CAAC,IAAI,EAAE,GAAG,GAAG,MAAM,GAAG,SAAS;IAI3D,kBAAkB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC;IAahE,QAAQ,CAAC,oBAAoB,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,0BAA0B,GAAG,OAAO,CAAC,GAAG,CAAC;WAoD5H,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM;WAM/B,aAAa,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM;CAQjD"}

package/lib/esm/ArcGis/ArcGisTokenGenerator.js

@@ -20,8 +20,7 @@ export class ArcGisTokenGenerator {
             const json = await response.json();
             tokenServicesUrl = ArcGisTokenGenerator.getTokenServiceFromInfoJson(json);
         }
-        catch (_error) {
-        }
+        catch { }
         return tokenServicesUrl;
     }
     static getTokenServiceFromInfoJson(json) {
@@ -79,8 +78,7 @@ export class ArcGisTokenGenerator {
             // Check a token was really generated (an error could be part of the body)
             token = await response.json();
         }
-        catch (_error) {
-        }
+        catch { }
         return token;
     }
     // Encode following 'application/x-www-form-urlencoded' standard (https://www.w3.org/TR/html401/interact/forms.html#h-17.13.3.3)

package/lib/esm/ArcGis/ArcGisTokenGenerator.js.map

@@ -1 +1 @@
-{"version":3,"file":"ArcGisTokenGenerator.js","sourceRoot":"","sources":["../../../src/ArcGis/ArcGisTokenGenerator.ts"],"names":[],"mappings":"AAmCA,4GAA4G;AAC5G,gBAAgB;AAChB,MAAM,CAAN,IAAY,qBAIX;AAJD,WAAY,qBAAqB;IAC/B,6DAAE,CAAA;IACF,uEAAO,CAAA;IACP,2EAAS,CAAA;AACX,CAAC,EAJW,qBAAqB,KAArB,qBAAqB,QAIhC;AA8BD,gBAAgB;AAChB,MAAM,OAAO,oBAAoB;IAOxB,MAAM,CAAC,KAAK,CAAC,oBAAoB,CAAC,oBAA4B;QACnE,MAAM,QAAQ,GAAG,oBAAoB,CAAC,WAAW,EAAE,CAAC;QACpD,MAAM,UAAU,GAAG,QAAQ,CAAC,OAAO,CAAC,oBAAoB,CAAC,WAAW,CAAC,CAAC;QACtE,IAAI,UAAU,KAAK,CAAC,CAAC;YACnB,OAAO,SAAS,CAAC;QACnB,MAAM,OAAO,GAAG,oBAAoB,CAAC,SAAS,CAAC,CAAC,EAAE,UAAU,GAAG,oBAAoB,CAAC,WAAW,CAAC,MAAM,CAAC,GAAG,oBAAoB,CAAC,eAAe,CAAC;QAE/I,IAAI,gBAAoC,CAAC;QACzC,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;YACzD,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;YACnC,gBAAgB,GAAG,oBAAoB,CAAC,2BAA2B,CAAC,IAAI,CAAC,CAAC;QAC5E,CAAC;QAAC,OAAO,MAAM,EAAE,CAAC;QAClB,CAAC;QACD,OAAO,gBAAgB,CAAC;IAC1B,CAAC;IAEM,MAAM,CAAC,2BAA2B,CAAC,IAAS;QACjD,OAAO,IAAI,CAAC,QAAQ,EAAE,oBAAoB,CAAC,CAAC,CAAC,IAAI,EAAE,QAAQ,EAAE,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAAC;IAC5F,CAAC;IAEM,KAAK,CAAC,kBAAkB,CAAC,OAAe;QAC7C,MAAM,MAAM,GAAG,oBAAoB,CAAC,qBAAqB,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACvE,IAAI,MAAM,KAAK,SAAS;YACtB,OAAO,MAAM,CAAC;QAEhB,MAAM,eAAe,GAAG,MAAM,oBAAoB,CAAC,oBAAoB,CAAC,OAAO,CAAC,CAAC;QACjF,IAAI,eAAe,KAAK,SAAS;YAC/B,oBAAoB,CAAC,qBAAqB,CAAC,GAAG,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC;QAE3E,OAAO,eAAe,CAAC;IACzB,CAAC;IAED,6FAA6F;IACtF,KAAK,CAAC,QAAQ,CAAC,oBAA4B,EAAE,QAAgB,EAAE,QAAgB,EAAE,OAAmC;QACzH,MAAM,eAAe,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,oBAAoB,CAAC,CAAC;QAC5E,IAAI,CAAC,eAAe;YAClB,OAAO,SAAS,CAAC;QAEnB,IAAI,KAAgB,CAAC;QACrB,IAAI,CAAC;YACH,MAAM,eAAe,GAAG,kBAAkB,CAAC,QAAQ,CAAC,CAAC;YACrD,MAAM,eAAe,GAAG,kBAAkB,CAAC,QAAQ,CAAC,CAAC;YAErD,+BAA+B;YAC/B,IAAI,aAAa,GAAG,EAAE,CAAC;YACvB,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC;gBACvB,aAAa,GAAG,eAAe,OAAO,CAAC,UAAU,EAAE,CAAC;YACtD,CAAC;YAED,2BAA2B;YAC3B,IAAI,SAAS,GAAG,EAAE,CAAC;YACnB,IAAI,OAAO,CAAC,MAAM,KAAK,qBAAqB,CAAC,OAAO,EAAE,CAAC;gBACrD,IAAI,UAAU,GAAG,EAAE,CAAC;gBACpB,IAAI,OAAO,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;oBAClC,UAAU,GAAG,kBAAkB,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAK,gCAAgC;gBACxF,CAAC;qBAAM,CAAC;oBACN,UAAU,GAAG,kBAAkB,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;gBACnD,CAAC;gBAED,SAAS,GAAG,2BAA2B,UAAU,EAAE,CAAC;YACtD,CAAC;iBAAM,IAAI,OAAO,CAAC,MAAM,KAAK,qBAAqB,CAAC,EAAE,EAAE,CAAC;gBACvD,IAAI,OAAO,CAAC,EAAE,KAAK,SAAS;oBAC1B,OAAO,KAAK,CAAC;gBACf,SAAS,GAAG,iBAAiB,OAAO,CAAC,EAAE,EAAE,CAAC;YAC5C,CAAC;iBAAM,IAAI,OAAO,CAAC,MAAM,KAAK,qBAAqB,CAAC,SAAS,EAAE,CAAC;gBAC9D,SAAS,GAAG,uBAAuB,CAAC;YACtC,CAAC;YAED,MAAM,kBAAkB,GAAgB;gBACtC,MAAM,EAAE,MAAM;gBACd,IAAI,EAAE,YAAY,eAAe,aAAa,eAAe,GAAG,SAAS,GAAG,aAAa,UAAU;gBACnG,OAAO,EAAE,EAAE,cAAc,EAAE,mCAAmC,EAAE;aACjE,CAAC;YAEF,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,eAAe,EAAE,kBAAkB,CAAC,CAAC;YAElE,0EAA0E;YAC1E,KAAK,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QAEhC,CAAC;QAAC,OAAO,MAAM,EAAE,CAAC;QAClB,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,gIAAgI;IAChI,2HAA2H;IACpH,MAAM,CAAC,UAAU,CAAC,GAAW;QAClC,OAAO,oBAAoB,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IACtE,CAAC;IAED,2EAA2E;IAC3E,qDAAqD;IAC9C,MAAM,CAAC,aAAa,CAAC,GAAW;QACrC,OAAO,kBAAkB,CAAC,GAAG,CAAC;aAC3B,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC;aACpB,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC;aACpB,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC;aACrB,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC;aACrB,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IAC3B,CAAC;;AA1GuB,gCAAW,GAAG,QAAQ,CAAC;AACvB,oCAAe,GAAG,cAAc,CAAC;AAEzD,wEAAwE;AACzD,0CAAqB,GAAG,IAAI,GAAG,EAAkB,CAAC","sourcesContent":["/*---------------------------------------------------------------------------------------------\r\n* Copyright (c) Bentley Systems, Incorporated. All rights reserved.\r\n* See LICENSE.md in the project root for license terms and full copyright notice.\r\n*--------------------------------------------------------------------------------------------*/\r\nimport { MapLayerAccessToken } from \"@itwin/core-frontend\";\r\n\r\n/** @packageDocumentation\r\n * @module Tiles\r\n */\r\n\r\n/** @internal */\r\nexport interface ArcGisOAuth2Token extends MapLayerAccessToken {\r\n\r\n  // The expiration time of the token in milliseconds (UNIX time)\r\n  expiresAt: number;\r\n\r\n  // This property will show as true if the token must always pass over ssl.\r\n  ssl: boolean;\r\n\r\n  // Username associated with this token\r\n  userName: string;\r\n\r\n  // A Binary value that, if true, implies that the user had checked \"Keep me signed in\"\r\n  persist?: boolean;\r\n}\r\n\r\n/** @internal */\r\nexport interface ArcGisToken extends MapLayerAccessToken {\r\n  // The expiration time of the token in milliseconds since January 1, 1970 (UTC).\r\n  expires: number;\r\n\r\n  // This property will show as true if the token must always pass over ssl.\r\n  ssl: boolean;\r\n}\r\n\r\n// client application's base URL, a user-specified IP address, or the IP address that is making the request.\r\n/** @internal */\r\nexport enum ArcGisTokenClientType {\r\n  ip,\r\n  referer,\r\n  requestIp,\r\n}\r\n\r\n/** @internal */\r\nexport interface ArcGisGenerateTokenOptions {\r\n\r\n  // The client type that will be granted access to the token.\r\n  // Users will be able to specify whether the token will be generated for a client application's base URL,\r\n  // a user-specified IP address, or the IP address that is making the request.\r\n  client: ArcGisTokenClientType;\r\n\r\n  // The IP address that will be using the created token for access.\r\n  // On the Generate Token page, the IP address is specified in the IP Address field. This is required when client has been set as ip.\r\n  // Example ip=11.11.111.111\r\n  ip?: string;\r\n\r\n  // The base URL of the client application that will use the token.\r\n  // On the Generate Token page, the referrer URL is specified in the Webapp URL field.\r\n  // Defaults to location.origin if undefined and client = referer.\r\n  // This is required when client has been set as referer.\r\n  // Example : referer=https://myserver/mywebapp\r\n  referer?: string;\r\n\r\n  // The token expiration time in minutes. The default is 60 minutes (one hour).\r\n  // The maximum expiration period is 15 days. The maximum value of the expiration time is controlled by the server.\r\n  // Requests for tokens larger than this time will be rejected.\r\n  // Applications are responsible for renewing expired tokens;\r\n  // expired tokens will be rejected by the server on subsequent requests that use the token.\r\n  expiration?: number;   // in minutes, defaults to 60 minutes\r\n}\r\n\r\n/** @internal */\r\nexport class ArcGisTokenGenerator {\r\n  private static readonly restApiPath = \"/rest/\";\r\n  private static readonly restApiInfoPath = \"info?f=pjson\";\r\n\r\n  // Cache info url to avoid fetching/parsing twice for the same base url.\r\n  private static _tokenServiceUrlCache = new Map<string, string>();\r\n\r\n  public static async fetchTokenServiceUrl(arcGisRestServiceUrl: string): Promise<string | undefined> {\r\n    const lowerUrl = arcGisRestServiceUrl.toLowerCase();\r\n    const restApiIdx = lowerUrl.indexOf(ArcGisTokenGenerator.restApiPath);\r\n    if (restApiIdx === -1)\r\n      return undefined;\r\n    const infoUrl = arcGisRestServiceUrl.substring(0, restApiIdx + ArcGisTokenGenerator.restApiPath.length) + ArcGisTokenGenerator.restApiInfoPath;\r\n\r\n    let tokenServicesUrl: string | undefined;\r\n    try {\r\n      const response = await fetch(infoUrl, { method: \"GET\" });\r\n      const json = await response.json();\r\n      tokenServicesUrl = ArcGisTokenGenerator.getTokenServiceFromInfoJson(json);\r\n    } catch (_error) {\r\n    }\r\n    return tokenServicesUrl;\r\n  }\r\n\r\n  public static getTokenServiceFromInfoJson(json: any): string | undefined {\r\n    return json.authInfo?.isTokenBasedSecurity ? json?.authInfo?.tokenServicesUrl : undefined;\r\n  }\r\n\r\n  public async getTokenServiceUrl(baseUrl: string): Promise<string | undefined> {\r\n    const cached = ArcGisTokenGenerator._tokenServiceUrlCache.get(baseUrl);\r\n    if (cached !== undefined)\r\n      return cached;\r\n\r\n    const tokenServiceUrl = await ArcGisTokenGenerator.fetchTokenServiceUrl(baseUrl);\r\n    if (tokenServiceUrl !== undefined)\r\n      ArcGisTokenGenerator._tokenServiceUrlCache.set(baseUrl, tokenServiceUrl);\r\n\r\n    return tokenServiceUrl;\r\n  }\r\n\r\n  // base url:  ArcGis REST service base URL (format must be \"https://<host>/<instance>/rest/\")\r\n  public async generate(arcGisRestServiceUrl: string, userName: string, password: string, options: ArcGisGenerateTokenOptions): Promise<any> {\r\n    const tokenServiceUrl = await this.getTokenServiceUrl(arcGisRestServiceUrl);\r\n    if (!tokenServiceUrl)\r\n      return undefined;\r\n\r\n    let token: undefined;\r\n    try {\r\n      const encodedUsername = encodeURIComponent(userName);\r\n      const encodedPassword = encodeURIComponent(password);\r\n\r\n      // Compose the expiration param\r\n      let expirationStr = \"\";\r\n      if (options.expiration) {\r\n        expirationStr = `&expiration=${options.expiration}`;\r\n      }\r\n\r\n      // Compose the client param\r\n      let clientStr = \"\";\r\n      if (options.client === ArcGisTokenClientType.referer) {\r\n        let refererStr = \"\";\r\n        if (options.referer === undefined) {\r\n          refererStr = encodeURIComponent(location.origin);     // default to application origin\r\n        } else {\r\n          refererStr = encodeURIComponent(options.referer);\r\n        }\r\n\r\n        clientStr = `&client=referer&referer=${refererStr}`;\r\n      } else if (options.client === ArcGisTokenClientType.ip) {\r\n        if (options.ip === undefined)\r\n          return token;\r\n        clientStr = `&client=ip&ip=${options.ip}`;\r\n      } else if (options.client === ArcGisTokenClientType.requestIp) {\r\n        clientStr = `&client=requestip&ip=`;\r\n      }\r\n\r\n      const httpRequestOptions: RequestInit = {\r\n        method: \"POST\",\r\n        body: `username=${encodedUsername}&password=${encodedPassword}${clientStr}${expirationStr}&f=pjson`,\r\n        headers: { \"content-type\": \"application/x-www-form-urlencoded\" },\r\n      };\r\n\r\n      const response = await fetch(tokenServiceUrl, httpRequestOptions);\r\n\r\n      // Check a token was really generated (an error could be part of the body)\r\n      token = await response.json();\r\n\r\n    } catch (_error) {\r\n    }\r\n    return token;\r\n  }\r\n\r\n  // Encode following 'application/x-www-form-urlencoded' standard (https://www.w3.org/TR/html401/interact/forms.html#h-17.13.3.3)\r\n  // Also mentioned here: https://developer.mozilla.org/en-US/docs/Web/JavaScript/Reference/Global_Objects/encodeURIComponent\r\n  public static formEncode(str: string): string {\r\n    return ArcGisTokenGenerator.rfc1738Encode(str).replace(/%20/g, \"+\");\r\n  }\r\n\r\n  // Encode following RFC1738 standard (https://www.ietf.org/rfc/rfc1738.txt)\r\n  // Code from https://locutus.io/php/url/rawurlencode/\r\n  public static rfc1738Encode(str: string): string {\r\n    return encodeURIComponent(str)\r\n      .replace(/!/g, \"%21\")\r\n      .replace(/'/g, \"%27\")\r\n      .replace(/\\(/g, \"%28\")\r\n      .replace(/\\)/g, \"%29\")\r\n      .replace(/\\*/g, \"%2A\");\r\n  }\r\n}\r\n"]}
+{"version":3,"file":"ArcGisTokenGenerator.js","sourceRoot":"","sources":["../../../src/ArcGis/ArcGisTokenGenerator.ts"],"names":[],"mappings":"AAmCA,4GAA4G;AAC5G,gBAAgB;AAChB,MAAM,CAAN,IAAY,qBAIX;AAJD,WAAY,qBAAqB;IAC/B,6DAAE,CAAA;IACF,uEAAO,CAAA;IACP,2EAAS,CAAA;AACX,CAAC,EAJW,qBAAqB,KAArB,qBAAqB,QAIhC;AA8BD,gBAAgB;AAChB,MAAM,OAAO,oBAAoB;IAOxB,MAAM,CAAC,KAAK,CAAC,oBAAoB,CAAC,oBAA4B;QACnE,MAAM,QAAQ,GAAG,oBAAoB,CAAC,WAAW,EAAE,CAAC;QACpD,MAAM,UAAU,GAAG,QAAQ,CAAC,OAAO,CAAC,oBAAoB,CAAC,WAAW,CAAC,CAAC;QACtE,IAAI,UAAU,KAAK,CAAC,CAAC;YACnB,OAAO,SAAS,CAAC;QACnB,MAAM,OAAO,GAAG,oBAAoB,CAAC,SAAS,CAAC,CAAC,EAAE,UAAU,GAAG,oBAAoB,CAAC,WAAW,CAAC,MAAM,CAAC,GAAG,oBAAoB,CAAC,eAAe,CAAC;QAE/I,IAAI,gBAAoC,CAAC;QACzC,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;YACzD,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;YACnC,gBAAgB,GAAG,oBAAoB,CAAC,2BAA2B,CAAC,IAAI,CAAC,CAAC;QAC5E,CAAC;QAAC,MAAM,CAAC,CAAC,CAAC;QACX,OAAO,gBAAgB,CAAC;IAC1B,CAAC;IAEM,MAAM,CAAC,2BAA2B,CAAC,IAAS;QACjD,OAAO,IAAI,CAAC,QAAQ,EAAE,oBAAoB,CAAC,CAAC,CAAC,IAAI,EAAE,QAAQ,EAAE,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAAC;IAC5F,CAAC;IAEM,KAAK,CAAC,kBAAkB,CAAC,OAAe;QAC7C,MAAM,MAAM,GAAG,oBAAoB,CAAC,qBAAqB,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACvE,IAAI,MAAM,KAAK,SAAS;YACtB,OAAO,MAAM,CAAC;QAEhB,MAAM,eAAe,GAAG,MAAM,oBAAoB,CAAC,oBAAoB,CAAC,OAAO,CAAC,CAAC;QACjF,IAAI,eAAe,KAAK,SAAS;YAC/B,oBAAoB,CAAC,qBAAqB,CAAC,GAAG,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC;QAE3E,OAAO,eAAe,CAAC;IACzB,CAAC;IAED,6FAA6F;IACtF,KAAK,CAAC,QAAQ,CAAC,oBAA4B,EAAE,QAAgB,EAAE,QAAgB,EAAE,OAAmC;QACzH,MAAM,eAAe,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,oBAAoB,CAAC,CAAC;QAC5E,IAAI,CAAC,eAAe;YAClB,OAAO,SAAS,CAAC;QAEnB,IAAI,KAAgB,CAAC;QACrB,IAAI,CAAC;YACH,MAAM,eAAe,GAAG,kBAAkB,CAAC,QAAQ,CAAC,CAAC;YACrD,MAAM,eAAe,GAAG,kBAAkB,CAAC,QAAQ,CAAC,CAAC;YAErD,+BAA+B;YAC/B,IAAI,aAAa,GAAG,EAAE,CAAC;YACvB,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC;gBACvB,aAAa,GAAG,eAAe,OAAO,CAAC,UAAU,EAAE,CAAC;YACtD,CAAC;YAED,2BAA2B;YAC3B,IAAI,SAAS,GAAG,EAAE,CAAC;YACnB,IAAI,OAAO,CAAC,MAAM,KAAK,qBAAqB,CAAC,OAAO,EAAE,CAAC;gBACrD,IAAI,UAAU,GAAG,EAAE,CAAC;gBACpB,IAAI,OAAO,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;oBAClC,UAAU,GAAG,kBAAkB,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAK,gCAAgC;gBACxF,CAAC;qBAAM,CAAC;oBACN,UAAU,GAAG,kBAAkB,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;gBACnD,CAAC;gBAED,SAAS,GAAG,2BAA2B,UAAU,EAAE,CAAC;YACtD,CAAC;iBAAM,IAAI,OAAO,CAAC,MAAM,KAAK,qBAAqB,CAAC,EAAE,EAAE,CAAC;gBACvD,IAAI,OAAO,CAAC,EAAE,KAAK,SAAS;oBAC1B,OAAO,KAAK,CAAC;gBACf,SAAS,GAAG,iBAAiB,OAAO,CAAC,EAAE,EAAE,CAAC;YAC5C,CAAC;iBAAM,IAAI,OAAO,CAAC,MAAM,KAAK,qBAAqB,CAAC,SAAS,EAAE,CAAC;gBAC9D,SAAS,GAAG,uBAAuB,CAAC;YACtC,CAAC;YAED,MAAM,kBAAkB,GAAgB;gBACtC,MAAM,EAAE,MAAM;gBACd,IAAI,EAAE,YAAY,eAAe,aAAa,eAAe,GAAG,SAAS,GAAG,aAAa,UAAU;gBACnG,OAAO,EAAE,EAAE,cAAc,EAAE,mCAAmC,EAAE;aACjE,CAAC;YAEF,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,eAAe,EAAE,kBAAkB,CAAC,CAAC;YAElE,0EAA0E;YAC1E,KAAK,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QAEhC,CAAC;QAAC,MAAM,CAAC,CAAC,CAAC;QACX,OAAO,KAAK,CAAC;IACf,CAAC;IAED,gIAAgI;IAChI,2HAA2H;IACpH,MAAM,CAAC,UAAU,CAAC,GAAW;QAClC,OAAO,oBAAoB,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IACtE,CAAC;IAED,2EAA2E;IAC3E,qDAAqD;IAC9C,MAAM,CAAC,aAAa,CAAC,GAAW;QACrC,OAAO,kBAAkB,CAAC,GAAG,CAAC;aAC3B,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC;aACpB,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC;aACpB,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC;aACrB,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC;aACrB,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IAC3B,CAAC;;AAxGuB,gCAAW,GAAG,QAAQ,CAAC;AACvB,oCAAe,GAAG,cAAc,CAAC;AAEzD,wEAAwE;AACzD,0CAAqB,GAAG,IAAI,GAAG,EAAkB,CAAC","sourcesContent":["/*---------------------------------------------------------------------------------------------\r\n* Copyright (c) Bentley Systems, Incorporated. All rights reserved.\r\n* See LICENSE.md in the project root for license terms and full copyright notice.\r\n*--------------------------------------------------------------------------------------------*/\r\nimport { MapLayerAccessToken } from \"@itwin/core-frontend\";\r\n\r\n/** @packageDocumentation\r\n * @module Tiles\r\n */\r\n\r\n/** @internal */\r\nexport interface ArcGisOAuth2Token extends MapLayerAccessToken {\r\n\r\n  // The expiration time of the token in milliseconds (UNIX time)\r\n  expiresAt: number;\r\n\r\n  // This property will show as true if the token must always pass over ssl.\r\n  ssl: boolean;\r\n\r\n  // Username associated with this token\r\n  userName: string;\r\n\r\n  // A Binary value that, if true, implies that the user had checked \"Keep me signed in\"\r\n  persist?: boolean;\r\n}\r\n\r\n/** @internal */\r\nexport interface ArcGisToken extends MapLayerAccessToken {\r\n  // The expiration time of the token in milliseconds since January 1, 1970 (UTC).\r\n  expires: number;\r\n\r\n  // This property will show as true if the token must always pass over ssl.\r\n  ssl: boolean;\r\n}\r\n\r\n// client application's base URL, a user-specified IP address, or the IP address that is making the request.\r\n/** @internal */\r\nexport enum ArcGisTokenClientType {\r\n  ip,\r\n  referer,\r\n  requestIp,\r\n}\r\n\r\n/** @internal */\r\nexport interface ArcGisGenerateTokenOptions {\r\n\r\n  // The client type that will be granted access to the token.\r\n  // Users will be able to specify whether the token will be generated for a client application's base URL,\r\n  // a user-specified IP address, or the IP address that is making the request.\r\n  client: ArcGisTokenClientType;\r\n\r\n  // The IP address that will be using the created token for access.\r\n  // On the Generate Token page, the IP address is specified in the IP Address field. This is required when client has been set as ip.\r\n  // Example ip=11.11.111.111\r\n  ip?: string;\r\n\r\n  // The base URL of the client application that will use the token.\r\n  // On the Generate Token page, the referrer URL is specified in the Webapp URL field.\r\n  // Defaults to location.origin if undefined and client = referer.\r\n  // This is required when client has been set as referer.\r\n  // Example : referer=https://myserver/mywebapp\r\n  referer?: string;\r\n\r\n  // The token expiration time in minutes. The default is 60 minutes (one hour).\r\n  // The maximum expiration period is 15 days. The maximum value of the expiration time is controlled by the server.\r\n  // Requests for tokens larger than this time will be rejected.\r\n  // Applications are responsible for renewing expired tokens;\r\n  // expired tokens will be rejected by the server on subsequent requests that use the token.\r\n  expiration?: number;   // in minutes, defaults to 60 minutes\r\n}\r\n\r\n/** @internal */\r\nexport class ArcGisTokenGenerator {\r\n  private static readonly restApiPath = \"/rest/\";\r\n  private static readonly restApiInfoPath = \"info?f=pjson\";\r\n\r\n  // Cache info url to avoid fetching/parsing twice for the same base url.\r\n  private static _tokenServiceUrlCache = new Map<string, string>();\r\n\r\n  public static async fetchTokenServiceUrl(arcGisRestServiceUrl: string): Promise<string | undefined> {\r\n    const lowerUrl = arcGisRestServiceUrl.toLowerCase();\r\n    const restApiIdx = lowerUrl.indexOf(ArcGisTokenGenerator.restApiPath);\r\n    if (restApiIdx === -1)\r\n      return undefined;\r\n    const infoUrl = arcGisRestServiceUrl.substring(0, restApiIdx + ArcGisTokenGenerator.restApiPath.length) + ArcGisTokenGenerator.restApiInfoPath;\r\n\r\n    let tokenServicesUrl: string | undefined;\r\n    try {\r\n      const response = await fetch(infoUrl, { method: \"GET\" });\r\n      const json = await response.json();\r\n      tokenServicesUrl = ArcGisTokenGenerator.getTokenServiceFromInfoJson(json);\r\n    } catch { }\r\n    return tokenServicesUrl;\r\n  }\r\n\r\n  public static getTokenServiceFromInfoJson(json: any): string | undefined {\r\n    return json.authInfo?.isTokenBasedSecurity ? json?.authInfo?.tokenServicesUrl : undefined;\r\n  }\r\n\r\n  public async getTokenServiceUrl(baseUrl: string): Promise<string | undefined> {\r\n    const cached = ArcGisTokenGenerator._tokenServiceUrlCache.get(baseUrl);\r\n    if (cached !== undefined)\r\n      return cached;\r\n\r\n    const tokenServiceUrl = await ArcGisTokenGenerator.fetchTokenServiceUrl(baseUrl);\r\n    if (tokenServiceUrl !== undefined)\r\n      ArcGisTokenGenerator._tokenServiceUrlCache.set(baseUrl, tokenServiceUrl);\r\n\r\n    return tokenServiceUrl;\r\n  }\r\n\r\n  // base url:  ArcGis REST service base URL (format must be \"https://<host>/<instance>/rest/\")\r\n  public async generate(arcGisRestServiceUrl: string, userName: string, password: string, options: ArcGisGenerateTokenOptions): Promise<any> {\r\n    const tokenServiceUrl = await this.getTokenServiceUrl(arcGisRestServiceUrl);\r\n    if (!tokenServiceUrl)\r\n      return undefined;\r\n\r\n    let token: undefined;\r\n    try {\r\n      const encodedUsername = encodeURIComponent(userName);\r\n      const encodedPassword = encodeURIComponent(password);\r\n\r\n      // Compose the expiration param\r\n      let expirationStr = \"\";\r\n      if (options.expiration) {\r\n        expirationStr = `&expiration=${options.expiration}`;\r\n      }\r\n\r\n      // Compose the client param\r\n      let clientStr = \"\";\r\n      if (options.client === ArcGisTokenClientType.referer) {\r\n        let refererStr = \"\";\r\n        if (options.referer === undefined) {\r\n          refererStr = encodeURIComponent(location.origin);     // default to application origin\r\n        } else {\r\n          refererStr = encodeURIComponent(options.referer);\r\n        }\r\n\r\n        clientStr = `&client=referer&referer=${refererStr}`;\r\n      } else if (options.client === ArcGisTokenClientType.ip) {\r\n        if (options.ip === undefined)\r\n          return token;\r\n        clientStr = `&client=ip&ip=${options.ip}`;\r\n      } else if (options.client === ArcGisTokenClientType.requestIp) {\r\n        clientStr = `&client=requestip&ip=`;\r\n      }\r\n\r\n      const httpRequestOptions: RequestInit = {\r\n        method: \"POST\",\r\n        body: `username=${encodedUsername}&password=${encodedPassword}${clientStr}${expirationStr}&f=pjson`,\r\n        headers: { \"content-type\": \"application/x-www-form-urlencoded\" },\r\n      };\r\n\r\n      const response = await fetch(tokenServiceUrl, httpRequestOptions);\r\n\r\n      // Check a token was really generated (an error could be part of the body)\r\n      token = await response.json();\r\n\r\n    } catch { }\r\n    return token;\r\n  }\r\n\r\n  // Encode following 'application/x-www-form-urlencoded' standard (https://www.w3.org/TR/html401/interact/forms.html#h-17.13.3.3)\r\n  // Also mentioned here: https://developer.mozilla.org/en-US/docs/Web/JavaScript/Reference/Global_Objects/encodeURIComponent\r\n  public static formEncode(str: string): string {\r\n    return ArcGisTokenGenerator.rfc1738Encode(str).replace(/%20/g, \"+\");\r\n  }\r\n\r\n  // Encode following RFC1738 standard (https://www.ietf.org/rfc/rfc1738.txt)\r\n  // Code from https://locutus.io/php/url/rawurlencode/\r\n  public static rfc1738Encode(str: string): string {\r\n    return encodeURIComponent(str)\r\n      .replace(/!/g, \"%21\")\r\n      .replace(/'/g, \"%27\")\r\n      .replace(/\\(/g, \"%28\")\r\n      .replace(/\\)/g, \"%29\")\r\n      .replace(/\\*/g, \"%2A\");\r\n  }\r\n}\r\n"]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@itwin/map-layers-auth",
-  "version": "4.10.0-dev.9",
+  "version": "5.0.0-dev.0",
   "description": "Extension that adds a Map Layers Widget",
   "main": "lib/cjs/map-layers-auth.js",
   "module": "lib/esm/map-layers-auth.js",
@@ -22,13 +22,13 @@
     "url": "http://www.bentley.com"
   },
   "devDependencies": {
-    "@itwin/eslint-plugin": "^4.0.2",
+    "@itwin/eslint-plugin": "5.0.0-dev.1",
     "@types/chai": "4.3.1",
     "@types/mocha": "^10.0.6",
     "@types/sinon": "^17.0.2",
     "@types/sinon-chai": "^3.2.0",
     "chai": "^4.3.10",
-    "eslint": "^8.56.0",
+    "eslint": "^9.13.0",
     "ignore-styles": "^5.0.1",
     "jsdom": "^19.0.0",
     "jsdom-global": "3.0.2",
@@ -38,15 +38,15 @@
     "sinon": "^17.0.2",
     "sinon-chai": "^3.7.0",
     "source-map-support": "^0.5.6",
-    "typescript": "~5.3.3",
+    "typescript": "~5.6.2",
     "fetch-mock": "~11.1.3",
-    "@itwin/build-tools": "4.10.0-dev.9",
-    "@itwin/core-bentley": "4.10.0-dev.9",
-    "@itwin/core-common": "4.10.0-dev.9",
-    "@itwin/core-frontend": "4.10.0-dev.9"
+    "@itwin/build-tools": "5.0.0-dev.0",
+    "@itwin/core-bentley": "5.0.0-dev.0",
+    "@itwin/core-common": "5.0.0-dev.0",
+    "@itwin/core-frontend": "5.0.0-dev.0"
   },
   "peerDependencies": {
-    "@itwin/core-bentley": "4.10.0-dev.9"
+    "@itwin/core-bentley": "5.0.0-dev.0"
   },
   "nyc": {
     "extends": "./node_modules/@itwin/build-tools/.nycrc",
@@ -80,7 +80,7 @@
     "cover": "nyc npm -s test",
     "docs": "",
     "extract-api": "betools extract-api --entry=map-layers-auth",
-    "lint": "eslint -f visualstudio \"./src/**/*.{ts,tsx}\" 1>&2",
+    "lint": "eslint \"./src/**/*.{ts,tsx}\" 1>&2",
     "test": "mocha \"./lib/cjs/test/**/*.test.js\"",
     "rebuild": "npm run -s clean && npm run -s build"
   }