@kolektor/nucleus-identity 0.0.8-pre.5352 → 0.0.9-pre.5702

package/bundles/kolektor-nucleus-identity.umd.js

@@ -1,1910 +0,0 @@
-(function (global, factory) {
-    typeof exports === 'object' && typeof module !== 'undefined' ? factory(exports, require('@angular/core'), require('@angular/common/http'), require('rxjs'), require('rxjs/operators'), require('@openid/appauth'), require('@capacitor/app'), require('@capacitor/browser'), require('@capacitor/device'), require('base64-js'), require('capacitor-secure-storage-plugin'), require('@kolektor/nucleus-common')) :
-    typeof define === 'function' && define.amd ? define('@kolektor/nucleus-identity', ['exports', '@angular/core', '@angular/common/http', 'rxjs', 'rxjs/operators', '@openid/appauth', '@capacitor/app', '@capacitor/browser', '@capacitor/device', 'base64-js', 'capacitor-secure-storage-plugin', '@kolektor/nucleus-common'], factory) :
-    (global = typeof globalThis !== 'undefined' ? globalThis : global || self, factory((global.kolektor = global.kolektor || {}, global.kolektor['nucleus-identity'] = {}), global.ng.core, global.ng.common.http, global.rxjs, global.rxjs.operators, global.appauth, global.app, global.browser, global.device, global.base64, global.capacitorSecureStoragePlugin, global.i1));
-}(this, (function (exports, i0, i1$1, rxjs, operators, appauth, app, browser, device, base64, capacitorSecureStoragePlugin, i1) { 'use strict';
-
-    function _interopNamespace(e) {
-        if (e && e.__esModule) return e;
-        var n = Object.create(null);
-        if (e) {
-            Object.keys(e).forEach(function (k) {
-                if (k !== 'default') {
-                    var d = Object.getOwnPropertyDescriptor(e, k);
-                    Object.defineProperty(n, k, d.get ? d : {
-                        enumerable: true,
-                        get: function () {
-                            return e[k];
-                        }
-                    });
-                }
-            });
-        }
-        n['default'] = e;
-        return Object.freeze(n);
-    }
-
-    var i0__namespace = /*#__PURE__*/_interopNamespace(i0);
-    var i1__namespace$1 = /*#__PURE__*/_interopNamespace(i1$1);
-    var base64__namespace = /*#__PURE__*/_interopNamespace(base64);
-    var i1__namespace = /*#__PURE__*/_interopNamespace(i1);
-
-    /*! *****************************************************************************
-    Copyright (c) Microsoft Corporation.
-
-    Permission to use, copy, modify, and/or distribute this software for any
-    purpose with or without fee is hereby granted.
-
-    THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES WITH
-    REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
-    AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY SPECIAL, DIRECT,
-    INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
-    LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR
-    OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
-    PERFORMANCE OF THIS SOFTWARE.
-    ***************************************************************************** */
-    /* global Reflect, Promise */
-    var extendStatics = function (d, b) {
-        extendStatics = Object.setPrototypeOf ||
-            ({ __proto__: [] } instanceof Array && function (d, b) { d.__proto__ = b; }) ||
-            function (d, b) { for (var p in b)
-                if (Object.prototype.hasOwnProperty.call(b, p))
-                    d[p] = b[p]; };
-        return extendStatics(d, b);
-    };
-    function __extends(d, b) {
-        if (typeof b !== "function" && b !== null)
-            throw new TypeError("Class extends value " + String(b) + " is not a constructor or null");
-        extendStatics(d, b);
-        function __() { this.constructor = d; }
-        d.prototype = b === null ? Object.create(b) : (__.prototype = b.prototype, new __());
-    }
-    var __assign = function () {
-        __assign = Object.assign || function __assign(t) {
-            for (var s, i = 1, n = arguments.length; i < n; i++) {
-                s = arguments[i];
-                for (var p in s)
-                    if (Object.prototype.hasOwnProperty.call(s, p))
-                        t[p] = s[p];
-            }
-            return t;
-        };
-        return __assign.apply(this, arguments);
-    };
-    function __rest(s, e) {
-        var t = {};
-        for (var p in s)
-            if (Object.prototype.hasOwnProperty.call(s, p) && e.indexOf(p) < 0)
-                t[p] = s[p];
-        if (s != null && typeof Object.getOwnPropertySymbols === "function")
-            for (var i = 0, p = Object.getOwnPropertySymbols(s); i < p.length; i++) {
-                if (e.indexOf(p[i]) < 0 && Object.prototype.propertyIsEnumerable.call(s, p[i]))
-                    t[p[i]] = s[p[i]];
-            }
-        return t;
-    }
-    function __decorate(decorators, target, key, desc) {
-        var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-        if (typeof Reflect === "object" && typeof Reflect.decorate === "function")
-            r = Reflect.decorate(decorators, target, key, desc);
-        else
-            for (var i = decorators.length - 1; i >= 0; i--)
-                if (d = decorators[i])
-                    r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
-        return c > 3 && r && Object.defineProperty(target, key, r), r;
-    }
-    function __param(paramIndex, decorator) {
-        return function (target, key) { decorator(target, key, paramIndex); };
-    }
-    function __metadata(metadataKey, metadataValue) {
-        if (typeof Reflect === "object" && typeof Reflect.metadata === "function")
-            return Reflect.metadata(metadataKey, metadataValue);
-    }
-    function __awaiter(thisArg, _arguments, P, generator) {
-        function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
-        return new (P || (P = Promise))(function (resolve, reject) {
-            function fulfilled(value) { try {
-                step(generator.next(value));
-            }
-            catch (e) {
-                reject(e);
-            } }
-            function rejected(value) { try {
-                step(generator["throw"](value));
-            }
-            catch (e) {
-                reject(e);
-            } }
-            function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
-            step((generator = generator.apply(thisArg, _arguments || [])).next());
-        });
-    }
-    function __generator(thisArg, body) {
-        var _ = { label: 0, sent: function () { if (t[0] & 1)
-                throw t[1]; return t[1]; }, trys: [], ops: [] }, f, y, t, g;
-        return g = { next: verb(0), "throw": verb(1), "return": verb(2) }, typeof Symbol === "function" && (g[Symbol.iterator] = function () { return this; }), g;
-        function verb(n) { return function (v) { return step([n, v]); }; }
-        function step(op) {
-            if (f)
-                throw new TypeError("Generator is already executing.");
-            while (_)
-                try {
-                    if (f = 1, y && (t = op[0] & 2 ? y["return"] : op[0] ? y["throw"] || ((t = y["return"]) && t.call(y), 0) : y.next) && !(t = t.call(y, op[1])).done)
-                        return t;
-                    if (y = 0, t)
-                        op = [op[0] & 2, t.value];
-                    switch (op[0]) {
-                        case 0:
-                        case 1:
-                            t = op;
-                            break;
-                        case 4:
-                            _.label++;
-                            return { value: op[1], done: false };
-                        case 5:
-                            _.label++;
-                            y = op[1];
-                            op = [0];
-                            continue;
-                        case 7:
-                            op = _.ops.pop();
-                            _.trys.pop();
-                            continue;
-                        default:
-                            if (!(t = _.trys, t = t.length > 0 && t[t.length - 1]) && (op[0] === 6 || op[0] === 2)) {
-                                _ = 0;
-                                continue;
-                            }
-                            if (op[0] === 3 && (!t || (op[1] > t[0] && op[1] < t[3]))) {
-                                _.label = op[1];
-                                break;
-                            }
-                            if (op[0] === 6 && _.label < t[1]) {
-                                _.label = t[1];
-                                t = op;
-                                break;
-                            }
-                            if (t && _.label < t[2]) {
-                                _.label = t[2];
-                                _.ops.push(op);
-                                break;
-                            }
-                            if (t[2])
-                                _.ops.pop();
-                            _.trys.pop();
-                            continue;
-                    }
-                    op = body.call(thisArg, _);
-                }
-                catch (e) {
-                    op = [6, e];
-                    y = 0;
-                }
-                finally {
-                    f = t = 0;
-                }
-            if (op[0] & 5)
-                throw op[1];
-            return { value: op[0] ? op[1] : void 0, done: true };
-        }
-    }
-    var __createBinding = Object.create ? (function (o, m, k, k2) {
-        if (k2 === undefined)
-            k2 = k;
-        Object.defineProperty(o, k2, { enumerable: true, get: function () { return m[k]; } });
-    }) : (function (o, m, k, k2) {
-        if (k2 === undefined)
-            k2 = k;
-        o[k2] = m[k];
-    });
-    function __exportStar(m, o) {
-        for (var p in m)
-            if (p !== "default" && !Object.prototype.hasOwnProperty.call(o, p))
-                __createBinding(o, m, p);
-    }
-    function __values(o) {
-        var s = typeof Symbol === "function" && Symbol.iterator, m = s && o[s], i = 0;
-        if (m)
-            return m.call(o);
-        if (o && typeof o.length === "number")
-            return {
-                next: function () {
-                    if (o && i >= o.length)
-                        o = void 0;
-                    return { value: o && o[i++], done: !o };
-                }
-            };
-        throw new TypeError(s ? "Object is not iterable." : "Symbol.iterator is not defined.");
-    }
-    function __read(o, n) {
-        var m = typeof Symbol === "function" && o[Symbol.iterator];
-        if (!m)
-            return o;
-        var i = m.call(o), r, ar = [], e;
-        try {
-            while ((n === void 0 || n-- > 0) && !(r = i.next()).done)
-                ar.push(r.value);
-        }
-        catch (error) {
-            e = { error: error };
-        }
-        finally {
-            try {
-                if (r && !r.done && (m = i["return"]))
-                    m.call(i);
-            }
-            finally {
-                if (e)
-                    throw e.error;
-            }
-        }
-        return ar;
-    }
-    /** @deprecated */
-    function __spread() {
-        for (var ar = [], i = 0; i < arguments.length; i++)
-            ar = ar.concat(__read(arguments[i]));
-        return ar;
-    }
-    /** @deprecated */
-    function __spreadArrays() {
-        for (var s = 0, i = 0, il = arguments.length; i < il; i++)
-            s += arguments[i].length;
-        for (var r = Array(s), k = 0, i = 0; i < il; i++)
-            for (var a = arguments[i], j = 0, jl = a.length; j < jl; j++, k++)
-                r[k] = a[j];
-        return r;
-    }
-    function __spreadArray(to, from, pack) {
-        if (pack || arguments.length === 2)
-            for (var i = 0, l = from.length, ar; i < l; i++) {
-                if (ar || !(i in from)) {
-                    if (!ar)
-                        ar = Array.prototype.slice.call(from, 0, i);
-                    ar[i] = from[i];
-                }
-            }
-        return to.concat(ar || Array.prototype.slice.call(from));
-    }
-    function __await(v) {
-        return this instanceof __await ? (this.v = v, this) : new __await(v);
-    }
-    function __asyncGenerator(thisArg, _arguments, generator) {
-        if (!Symbol.asyncIterator)
-            throw new TypeError("Symbol.asyncIterator is not defined.");
-        var g = generator.apply(thisArg, _arguments || []), i, q = [];
-        return i = {}, verb("next"), verb("throw"), verb("return"), i[Symbol.asyncIterator] = function () { return this; }, i;
-        function verb(n) { if (g[n])
-            i[n] = function (v) { return new Promise(function (a, b) { q.push([n, v, a, b]) > 1 || resume(n, v); }); }; }
-        function resume(n, v) { try {
-            step(g[n](v));
-        }
-        catch (e) {
-            settle(q[0][3], e);
-        } }
-        function step(r) { r.value instanceof __await ? Promise.resolve(r.value.v).then(fulfill, reject) : settle(q[0][2], r); }
-        function fulfill(value) { resume("next", value); }
-        function reject(value) { resume("throw", value); }
-        function settle(f, v) { if (f(v), q.shift(), q.length)
-            resume(q[0][0], q[0][1]); }
-    }
-    function __asyncDelegator(o) {
-        var i, p;
-        return i = {}, verb("next"), verb("throw", function (e) { throw e; }), verb("return"), i[Symbol.iterator] = function () { return this; }, i;
-        function verb(n, f) { i[n] = o[n] ? function (v) { return (p = !p) ? { value: __await(o[n](v)), done: n === "return" } : f ? f(v) : v; } : f; }
-    }
-    function __asyncValues(o) {
-        if (!Symbol.asyncIterator)
-            throw new TypeError("Symbol.asyncIterator is not defined.");
-        var m = o[Symbol.asyncIterator], i;
-        return m ? m.call(o) : (o = typeof __values === "function" ? __values(o) : o[Symbol.iterator](), i = {}, verb("next"), verb("throw"), verb("return"), i[Symbol.asyncIterator] = function () { return this; }, i);
-        function verb(n) { i[n] = o[n] && function (v) { return new Promise(function (resolve, reject) { v = o[n](v), settle(resolve, reject, v.done, v.value); }); }; }
-        function settle(resolve, reject, d, v) { Promise.resolve(v).then(function (v) { resolve({ value: v, done: d }); }, reject); }
-    }
-    function __makeTemplateObject(cooked, raw) {
-        if (Object.defineProperty) {
-            Object.defineProperty(cooked, "raw", { value: raw });
-        }
-        else {
-            cooked.raw = raw;
-        }
-        return cooked;
-    }
-    ;
-    var __setModuleDefault = Object.create ? (function (o, v) {
-        Object.defineProperty(o, "default", { enumerable: true, value: v });
-    }) : function (o, v) {
-        o["default"] = v;
-    };
-    function __importStar(mod) {
-        if (mod && mod.__esModule)
-            return mod;
-        var result = {};
-        if (mod != null)
-            for (var k in mod)
-                if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k))
-                    __createBinding(result, mod, k);
-        __setModuleDefault(result, mod);
-        return result;
-    }
-    function __importDefault(mod) {
-        return (mod && mod.__esModule) ? mod : { default: mod };
-    }
-    function __classPrivateFieldGet(receiver, state, kind, f) {
-        if (kind === "a" && !f)
-            throw new TypeError("Private accessor was defined without a getter");
-        if (typeof state === "function" ? receiver !== state || !f : !state.has(receiver))
-            throw new TypeError("Cannot read private member from an object whose class did not declare it");
-        return kind === "m" ? f : kind === "a" ? f.call(receiver) : f ? f.value : state.get(receiver);
-    }
-    function __classPrivateFieldSet(receiver, state, value, kind, f) {
-        if (kind === "m")
-            throw new TypeError("Private method is not writable");
-        if (kind === "a" && !f)
-            throw new TypeError("Private accessor was defined without a setter");
-        if (typeof state === "function" ? receiver !== state || !f : !state.has(receiver))
-            throw new TypeError("Cannot write private member to an object whose class did not declare it");
-        return (kind === "a" ? f.call(receiver, value) : f ? f.value = value : state.set(receiver, value)), value;
-    }
-
-    var CHARSET = 'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789';
-    var NucleusCrypto = /** @class */ (function () {
-        function NucleusCrypto() {
-            this.browserCrypto = window.crypto || window.msCrypto;
-        }
-        NucleusCrypto.prototype.generateRandom = function (size) {
-            var buffer = new Uint8Array(size);
-            if (this.browserCrypto) {
-                this.browserCrypto.getRandomValues(buffer);
-            }
-            else {
-                // fall back to Math.random() if nothing else is available
-                for (var i = 0; i < size; i += 1) {
-                    buffer[i] = Math.random();
-                }
-            }
-            return this.bufferToString(buffer);
-        };
-        NucleusCrypto.prototype.deriveChallenge = function (code) {
-            var _this = this;
-            if (code.length < 43 || code.length > 128) {
-                return Promise.reject(new appauth.AppAuthError('Invalid code length.'));
-            }
-            if (!this.browserCrypto.subtle) {
-                return Promise.reject(new appauth.AppAuthError('window.crypto.subtle is unavailable.'));
-            }
-            var ecode = this.textEncodeLite(code);
-            var op = this.browserCrypto.subtle.digest('SHA-256', ecode);
-            return new Promise(function (resolve, reject) {
-                // if operation contains algorithm it means it is not a promise which means it is CryptoOperation from IE.
-                // We just return result as promise
-                if (op.algorithm) {
-                    console.log('we have a CryptoOperation');
-                    op.addEventListener('complete', function () {
-                        resolve(_this.urlSafe(op.result));
-                    });
-                    op.addEventListener('error', function () {
-                        reject(op.result);
-                    });
-                }
-                else { // the result is promise
-                    op.then(function (buffer) { return resolve(_this.urlSafe(buffer)); }, function (error) { return reject(error); });
-                }
-            });
-        };
-        NucleusCrypto.prototype.urlSafe = function (buffer) {
-            var encoded = base64__namespace.fromByteArray(new Uint8Array(buffer));
-            return encoded.replace(/\+/g, '-').replace(/\//g, '_').replace(/=/g, '');
-        };
-        NucleusCrypto.prototype.textEncodeLite = function (str) {
-            var buf = new ArrayBuffer(str.length);
-            var bufView = new Uint8Array(buf);
-            for (var i = 0; i < str.length; i++) {
-                bufView[i] = str.charCodeAt(i);
-            }
-            return bufView;
-        };
-        NucleusCrypto.prototype.bufferToString = function (buffer) {
-            var state = [];
-            for (var i = 0; i < buffer.byteLength; i += 1) {
-                var index = buffer[i] % CHARSET.length;
-                state.push(CHARSET[index]);
-            }
-            return state.join('');
-        };
-        return NucleusCrypto;
-    }());
-
-    var NucleusAuthorizationNotifier = /** @class */ (function (_super) {
-        __extends(NucleusAuthorizationNotifier, _super);
-        function NucleusAuthorizationNotifier() {
-            var _this = _super.call(this) || this;
-            _this.setAuthorizationListener(function (request, response, error) {
-                console.log('Authorization request complete ', request, response, error);
-                _this.response = response;
-                _this.request = request;
-                _this.error = error;
-            });
-            return _this;
-        }
-        return NucleusAuthorizationNotifier;
-    }(appauth.AuthorizationNotifier));
-
-    var Claim = /** @class */ (function () {
-        function Claim(name, values) {
-            this.name = name;
-            this.values = values;
-        }
-        return Claim;
-    }());
-    var Identity = /** @class */ (function () {
-        function Identity() {
-            this.claims = [];
-        }
-        Identity.createFromResponse = function (res) {
-            var token = this.decodeToken(res.idToken);
-            var id = new Identity();
-            id.name = token.name;
-            id.subject = token.sub;
-            for (var key in token) {
-                if ({}.hasOwnProperty.call(token, key)) {
-                    var vals = token[key];
-                    if (!Array.isArray(vals)) {
-                        vals = [vals];
-                    }
-                    var claim = new Claim(key, vals);
-                    id.claims.push(claim);
-                }
-            }
-            return id;
-        };
-        Identity.decodeToken = function (jwt) {
-            if (!jwt) {
-                throw new Error('NucleusIdentity: There was no identity token in the response!');
-            }
-            try {
-                var arr = jwt.split('.');
-                // var header = arr[0];
-                var payload = this.b64DecodeUnicode(arr[1]);
-                // var signature = arr[2];
-                return JSON.parse(payload);
-            }
-            catch (error) {
-                console.error('Error while decoding identity token', error);
-                console.error('Error while decoding identity token JWT', jwt);
-            }
-        };
-        Identity.b64DecodeUnicode = function (str) {
-            str = str.replace(/-/g, '+').replace(/_/g, '/'); // Qlector fix :)
-            return decodeURIComponent(atob(str).split('').map(function (c) { return '%' + ('00' + c.charCodeAt(0).toString(16)).slice(-2); }).join(''));
-        };
-        return Identity;
-    }());
-
-    var SecretsStore = /** @class */ (function () {
-        function SecretsStore(clientId) {
-            this._tokens = {};
-            this._identities = {};
-            this._tokenStorageKeyPrefix = "Nucleus.Identity." + clientId; // do not change this or login fith existing refresh tokens will fail
-            this._servicePrincipalKey = "Nucleus.Identity." + clientId + ".SvcP";
-        }
-        SecretsStore.prototype.removeServicePrincipal = function () {
-            this._servicePrincipal = null;
-            return this.clear(this._servicePrincipalKey);
-        };
-        SecretsStore.prototype.setServicePrincipal = function (servicePrincipal) {
-            return __awaiter(this, void 0, void 0, function () {
-                return __generator(this, function (_b) {
-                    switch (_b.label) {
-                        case 0:
-                            this._servicePrincipal = servicePrincipal;
-                            return [4 /*yield*/, this.save(this._servicePrincipalKey, servicePrincipal)];
-                        case 1:
-                            _b.sent();
-                            return [2 /*return*/];
-                    }
-                });
-            });
-        };
-        SecretsStore.prototype.getServicePrincipal = function () {
-            return __awaiter(this, void 0, void 0, function () {
-                var _b;
-                return __generator(this, function (_c) {
-                    switch (_c.label) {
-                        case 0:
-                            if (!!this._servicePrincipal) return [3 /*break*/, 2];
-                            _b = this;
-                            return [4 /*yield*/, this.load(this._servicePrincipalKey)];
-                        case 1:
-                            _b._servicePrincipal = _c.sent();
-                            _c.label = 2;
-                        case 2: return [2 /*return*/, this._servicePrincipal];
-                    }
-                });
-            });
-        };
-        SecretsStore.prototype.setToken = function (token, id) {
-            if (id === void 0) { id = null; }
-            return this.setTokenInternal(token, true, id);
-        };
-        SecretsStore.prototype.getIdentity = function (id) {
-            if (id === void 0) { id = null; }
-            var key = this.getTokenKey(id);
-            return this._identities[key];
-        };
-        SecretsStore.prototype.getToken = function (id) {
-            if (id === void 0) { id = null; }
-            return __awaiter(this, void 0, void 0, function () {
-                var key;
-                return __generator(this, function (_b) {
-                    switch (_b.label) {
-                        case 0:
-                            key = this.getTokenKey(id);
-                            if (!(!this._tokens[key] || !this._tokens[key].isValid())) return [3 /*break*/, 2];
-                            return [4 /*yield*/, this.reloadTokenFromStorage(id)];
-                        case 1:
-                            _b.sent();
-                            _b.label = 2;
-                        case 2: return [2 /*return*/, this._tokens[key]];
-                    }
-                });
-            });
-        };
-        SecretsStore.prototype.removeToken = function (id) {
-            if (id === void 0) { id = null; }
-            var key = this.getTokenKey(id);
-            delete this._tokens[key];
-            delete this._identities[key];
-            return this.clear(key);
-        };
-        SecretsStore.prototype.reloadTokenFromStorage = function (id) {
-            return __awaiter(this, void 0, void 0, function () {
-                var key, storedToken, res;
-                return __generator(this, function (_b) {
-                    switch (_b.label) {
-                        case 0:
-                            key = this.getTokenKey(id);
-                            return [4 /*yield*/, this.load(key)];
-                        case 1:
-                            storedToken = _b.sent();
-                            if (!storedToken) return [3 /*break*/, 3];
-                            res = new appauth.TokenResponse(storedToken);
-                            if (!((res === null || res === void 0 ? void 0 : res.accessToken) || (res === null || res === void 0 ? void 0 : res.idToken))) return [3 /*break*/, 3];
-                            return [4 /*yield*/, this.setTokenInternal(res, false, id)];
-                        case 2:
-                            _b.sent();
-                            _b.label = 3;
-                        case 3: return [2 /*return*/, null];
-                    }
-                });
-            });
-        };
-        SecretsStore.prototype.setTokenInternal = function (token, save, id) {
-            if (id === void 0) { id = null; }
-            return __awaiter(this, void 0, void 0, function () {
-                var key, e_1;
-                return __generator(this, function (_b) {
-                    switch (_b.label) {
-                        case 0:
-                            key = this.getTokenKey(id);
-                            if (!(token == null)) return [3 /*break*/, 2];
-                            return [4 /*yield*/, this.removeToken(id)];
-                        case 1:
-                            _b.sent();
-                            return [3 /*break*/, 6];
-                        case 2:
-                            this._tokens[key] = token;
-                            this._identities[key] = Identity.createFromResponse(token);
-                            if (!save) return [3 /*break*/, 6];
-                            _b.label = 3;
-                        case 3:
-                            _b.trys.push([3, 5, , 6]);
-                            return [4 /*yield*/, this.save(key, token.toJson())];
-                        case 4:
-                            _b.sent();
-                            return [3 /*break*/, 6];
-                        case 5:
-                            e_1 = _b.sent();
-                            console.warn('Nucleus.Identity: Could not save to SecureStorage.');
-                            return [3 /*break*/, 6];
-                        case 6: return [2 /*return*/];
-                    }
-                });
-            });
-        };
-        SecretsStore.prototype.getTokenKey = function (id) {
-            if (id === void 0) { id = null; }
-            return id ? this._tokenStorageKeyPrefix + "." + id : this._tokenStorageKeyPrefix;
-        };
-        SecretsStore.prototype.clear = function (key) {
-            return capacitorSecureStoragePlugin.SecureStoragePlugin.remove({ key: key });
-        };
-        SecretsStore.prototype.save = function (key, value) {
-            return capacitorSecureStoragePlugin.SecureStoragePlugin.set({ key: key, value: JSON.stringify(value) });
-        };
-        SecretsStore.prototype.load = function (key) {
-            return __awaiter(this, void 0, void 0, function () {
-                var x, _a_1;
-                return __generator(this, function (_b) {
-                    switch (_b.label) {
-                        case 0:
-                            _b.trys.push([0, 2, , 3]);
-                            return [4 /*yield*/, capacitorSecureStoragePlugin.SecureStoragePlugin.get({ key: key })];
-                        case 1:
-                            x = _b.sent();
-                            if (x === null || x === void 0 ? void 0 : x.value) {
-                                return [2 /*return*/, JSON.parse(x.value)];
-                            }
-                            else {
-                                return [2 /*return*/, null];
-                            }
-                            return [3 /*break*/, 3];
-                        case 2:
-                            _a_1 = _b.sent();
-                            return [2 /*return*/, null];
-                        case 3: return [2 /*return*/];
-                    }
-                });
-            });
-        };
-        return SecretsStore;
-    }());
-
-    var ServicePrincipal = /** @class */ (function () {
-        function ServicePrincipal() {
-        }
-        return ServicePrincipal;
-    }());
-    var ServicePrincipalRegistrationStatus = /** @class */ (function () {
-        function ServicePrincipalRegistrationStatus(servicePrincipal) {
-            this.isRegistered = false;
-            if (servicePrincipal) {
-                this.isRegistered = true;
-                this.id = servicePrincipal.id;
-                this.expiresAt = servicePrincipal.expiresAt;
-            }
-        }
-        Object.defineProperty(ServicePrincipalRegistrationStatus.prototype, "isExpired", {
-            get: function () {
-                return false;
-            },
-            enumerable: false,
-            configurable: true
-        });
-        return ServicePrincipalRegistrationStatus;
-    }());
-
-    var LocationService = /** @class */ (function () {
-        function LocationService(appService) {
-            this.appService = appService;
-        }
-        Object.defineProperty(LocationService.prototype, "hash", {
-            get: function () {
-                return window.location.hash;
-            },
-            set: function (v) {
-                window.location.hash = v;
-            },
-            enumerable: false,
-            configurable: true
-        });
-        Object.defineProperty(LocationService.prototype, "host", {
-            get: function () {
-                return window.location.host;
-            },
-            set: function (v) {
-                window.location.host = v;
-            },
-            enumerable: false,
-            configurable: true
-        });
-        Object.defineProperty(LocationService.prototype, "origin", {
-            get: function () {
-                return window.location.origin;
-            },
-            enumerable: false,
-            configurable: true
-        });
-        Object.defineProperty(LocationService.prototype, "hostname", {
-            get: function () {
-                return window.location.hostname;
-            },
-            set: function (v) {
-                window.location.hostname = v;
-            },
-            enumerable: false,
-            configurable: true
-        });
-        Object.defineProperty(LocationService.prototype, "pathname", {
-            get: function () {
-                return window.location.pathname;
-            },
-            set: function (v) {
-                window.location.pathname = v;
-            },
-            enumerable: false,
-            configurable: true
-        });
-        Object.defineProperty(LocationService.prototype, "port", {
-            get: function () {
-                return window.location.port;
-            },
-            set: function (v) {
-                window.location.port = v;
-            },
-            enumerable: false,
-            configurable: true
-        });
-        Object.defineProperty(LocationService.prototype, "protocol", {
-            get: function () {
-                return window.location.protocol;
-            },
-            set: function (v) {
-                window.location.protocol = v;
-            },
-            enumerable: false,
-            configurable: true
-        });
-        Object.defineProperty(LocationService.prototype, "search", {
-            get: function () {
-                return window.location.search;
-            },
-            set: function (v) {
-                window.location.search = v;
-            },
-            enumerable: false,
-            configurable: true
-        });
-        LocationService.prototype.assign = function (url) {
-            if (this.appService.isNative) {
-                browser.Browser.open({ url: url });
-            }
-            else {
-                window.location.assign(url);
-            }
-        };
-        return LocationService;
-    }());
-    LocationService.ɵfac = i0__namespace.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "12.2.3", ngImport: i0__namespace, type: LocationService, deps: [{ token: i1__namespace.NucleusAppService }], target: i0__namespace.ɵɵFactoryTarget.Injectable });
-    LocationService.ɵprov = i0__namespace.ɵɵngDeclareInjectable({ minVersion: "12.0.0", version: "12.2.3", ngImport: i0__namespace, type: LocationService, providedIn: 'root' });
-    i0__namespace.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "12.2.3", ngImport: i0__namespace, type: LocationService, decorators: [{
-                type: i0.Injectable,
-                args: [{
-                        providedIn: 'root'
-                    }]
-            }], ctorParameters: function () { return [{ type: i1__namespace.NucleusAppService }]; } });
-
-    var WELL_KNOWN_PATH = '.well-known';
-    var OPENID_CONFIGURATION = 'openid-configuration';
-    var NucleusAuthorizationServiceConfiguration = /** @class */ (function (_super) {
-        __extends(NucleusAuthorizationServiceConfiguration, _super);
-        function NucleusAuthorizationServiceConfiguration(request) {
-            var _this = _super.call(this, request) || this;
-            _this.deviceAuthorizationEndpoint = request.device_authorization_endpoint;
-            _this.registrationEndpoint = request.registration_endpoint;
-            return _this;
-        }
-        NucleusAuthorizationServiceConfiguration.fetchFromIssuer = function (openIdIssuerUrl, requestor) {
-            var fullUrl = openIdIssuerUrl + "/" + WELL_KNOWN_PATH + "/" + OPENID_CONFIGURATION;
-            var requestorToUse = requestor || new appauth.JQueryRequestor();
-            return requestorToUse
-                .xhr({ url: fullUrl, dataType: 'json', method: 'GET' })
-                .then(function (json) { return new NucleusAuthorizationServiceConfiguration(json); });
-        };
-        NucleusAuthorizationServiceConfiguration.prototype.toJson = function () {
-            var res = _super.prototype.toJson.call(this);
-            res.device_authorization_endpoint = this.deviceAuthorizationEndpoint;
-            return res;
-        };
-        return NucleusAuthorizationServiceConfiguration;
-    }(appauth.AuthorizationServiceConfiguration));
-
-    var AngularRequestor = /** @class */ (function (_super) {
-        __extends(AngularRequestor, _super);
-        function AngularRequestor(http) {
-            var _this = _super.call(this) || this;
-            _this.http = http;
-            return _this;
-        }
-        // eslint-disable-next-line no-undef
-        AngularRequestor.prototype.xhr = function (settings) {
-            var _this = this;
-            if (settings.method === undefined) {
-                settings.method = 'GET';
-            }
-            return new Promise(function (resolve, reject) {
-                _this.http.request(settings.method, settings.url, {
-                    body: settings.data,
-                    headers: settings.headers,
-                }).subscribe(function (res) { return resolve(res); }, function (err) {
-                    var _a;
-                    var e = new appauth.AppAuthError(err);
-                    if (err instanceof i1$1.HttpErrorResponse) {
-                        e = new appauth.AppAuthError(((_a = err.error) === null || _a === void 0 ? void 0 : _a.error) || err.statusText);
-                    }
-                    reject(e);
-                });
-            });
-        };
-        return AngularRequestor;
-    }(appauth.Requestor));
-    AngularRequestor.ɵfac = i0__namespace.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "12.2.3", ngImport: i0__namespace, type: AngularRequestor, deps: [{ token: i1__namespace$1.HttpClient }], target: i0__namespace.ɵɵFactoryTarget.Injectable });
-    AngularRequestor.ɵprov = i0__namespace.ɵɵngDeclareInjectable({ minVersion: "12.0.0", version: "12.2.3", ngImport: i0__namespace, type: AngularRequestor, providedIn: 'root' });
-    i0__namespace.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "12.2.3", ngImport: i0__namespace, type: AngularRequestor, decorators: [{
-                type: i0.Injectable,
-                args: [{
-                        providedIn: 'root'
-                    }]
-            }], ctorParameters: function () { return [{ type: i1__namespace$1.HttpClient }]; } });
-
-    var NucleusIdentityConfig = /** @class */ (function () {
-        function NucleusIdentityConfig() {
-            this.authority = null;
-            this.httpInterceptorUrls = [];
-            this.automaticLoginOnHttp401 = false;
-        }
-        return NucleusIdentityConfig;
-    }());
-
-    var OidcConfigurationService = /** @class */ (function () {
-        function OidcConfigurationService(requestor, config, appService) {
-            this.requestor = requestor;
-            this.config = config;
-            this.appService = appService;
-            this._configuration = null;
-        }
-        OidcConfigurationService.prototype.getConfiguration = function () {
-            return __awaiter(this, void 0, void 0, function () {
-                return __generator(this, function (_a) {
-                    switch (_a.label) {
-                        case 0: return [4 /*yield*/, this.assureConfiguration()];
-                        case 1:
-                            _a.sent();
-                            return [2 /*return*/, this._configuration];
-                    }
-                });
-            });
-        };
-        Object.defineProperty(OidcConfigurationService.prototype, "clientId", {
-            get: function () {
-                return this.config.clientId;
-            },
-            enumerable: false,
-            configurable: true
-        });
-        Object.defineProperty(OidcConfigurationService.prototype, "requestedScopes", {
-            get: function () {
-                return this.config.requestedScopes;
-            },
-            enumerable: false,
-            configurable: true
-        });
-        Object.defineProperty(OidcConfigurationService.prototype, "servicePrincipalRequestedScopes", {
-            get: function () {
-                return this.config.servicePrincipalRequestedScopes;
-            },
-            enumerable: false,
-            configurable: true
-        });
-        Object.defineProperty(OidcConfigurationService.prototype, "authProviderHint", {
-            get: function () {
-                return this.config.authProviderHint;
-            },
-            enumerable: false,
-            configurable: true
-        });
-        Object.defineProperty(OidcConfigurationService.prototype, "redirectUrl", {
-            get: function () {
-                var uri = window.location.href;
-                var platform = this.appService.platform;
-                if (platform === 'android' && this.config.androidRedirectUri) {
-                    uri = this.config.androidRedirectUri;
-                }
-                else if (platform === 'ios' && this.config.iOSRedirectUri) {
-                    uri = this.config.iOSRedirectUri;
-                }
-                else if (this.config.redirectUri) {
-                    uri = this.config.redirectUri;
-                }
-                return this.NormalizeRedirectUri(uri);
-            },
-            enumerable: false,
-            configurable: true
-        });
-        OidcConfigurationService.prototype.getServerUrl = function (relativeUri) {
-            if (relativeUri === void 0) { relativeUri = null; }
-            var authority = this.config.authority;
-            if (!authority || authority === 'origin') {
-                authority = window.origin;
-            }
-            var url = new URL(authority);
-            if (relativeUri) {
-                url = new URL(relativeUri, url);
-            }
-            return url.href;
-        };
-        OidcConfigurationService.prototype.NormalizeRedirectUri = function (uri) {
-            var i = uri.indexOf('#');
-            if (i > 0) {
-                uri = uri.substring(0, i);
-            }
-            return uri;
-        };
-        OidcConfigurationService.prototype.assureConfiguration = function () {
-            return __awaiter(this, void 0, void 0, function () {
-                var authority, _a, e_1;
-                return __generator(this, function (_b) {
-                    switch (_b.label) {
-                        case 0:
-                            if (this._configuration != null) {
-                                return [2 /*return*/];
-                            }
-                            authority = this.getServerUrl();
-                            if (authority[authority.length - 1] === '/') {
-                                authority = authority.slice(0, -1);
-                            }
-                            _b.label = 1;
-                        case 1:
-                            _b.trys.push([1, 3, , 4]);
-                            _a = this;
-                            return [4 /*yield*/, NucleusAuthorizationServiceConfiguration.fetchFromIssuer(authority, this.requestor)];
-                        case 2:
-                            _a._configuration = _b.sent();
-                            return [3 /*break*/, 4];
-                        case 3:
-                            e_1 = _b.sent();
-                            console.error('Nucleus.Identity: Cannot load OIDC configuration: ' + e_1.message);
-                            throw e_1;
-                        case 4: return [2 /*return*/];
-                    }
-                });
-            });
-        };
-        return OidcConfigurationService;
-    }());
-    OidcConfigurationService.ɵfac = i0__namespace.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "12.2.3", ngImport: i0__namespace, type: OidcConfigurationService, deps: [{ token: AngularRequestor }, { token: NucleusIdentityConfig }, { token: i1__namespace.NucleusAppService }], target: i0__namespace.ɵɵFactoryTarget.Injectable });
-    OidcConfigurationService.ɵprov = i0__namespace.ɵɵngDeclareInjectable({ minVersion: "12.0.0", version: "12.2.3", ngImport: i0__namespace, type: OidcConfigurationService, providedIn: 'root' });
-    i0__namespace.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "12.2.3", ngImport: i0__namespace, type: OidcConfigurationService, decorators: [{
-                type: i0.Injectable,
-                args: [{
-                        providedIn: 'root'
-                    }]
-            }], ctorParameters: function () { return [{ type: AngularRequestor }, { type: NucleusIdentityConfig }, { type: i1__namespace.NucleusAppService }]; } });
-
-    var DeviceCode = /** @class */ (function () {
-        function DeviceCode(response) {
-            this.deviceCode = response.device_code;
-            this.userCode = response.user_code;
-            this.verificationUrl = response.verification_uri;
-            this.verificationUrlComplete = response.verification_uri_complete;
-            this.expiresIn = parseInt(response.expires_in, 10);
-            this.issuedAt = appauth.nowInSeconds();
-        }
-        DeviceCode.prototype.isExpired = function (buffer) {
-            if (buffer === void 0) { buffer = 60; }
-            return this.secondsLeft(buffer) <= 0;
-        };
-        DeviceCode.prototype.secondsLeft = function (buffer) {
-            if (buffer === void 0) { buffer = 60; }
-            var now = appauth.nowInSeconds();
-            return (this.issuedAt + this.expiresIn - buffer) - now;
-        };
-        return DeviceCode;
-    }());
-
-    var ClientRegistrationResponse = /** @class */ (function () {
-        function ClientRegistrationResponse(response) {
-            this.clientId = response.client_id;
-            this.clientSecret = response.client_secret;
-            this.secretExpirationDate = new Date(response.client_secret_expires_at * 1000);
-        }
-        return ClientRegistrationResponse;
-    }());
-
-    var TokenClient = /** @class */ (function () {
-        function TokenClient(requestor, config) {
-            this.requestor = requestor;
-            this.config = config;
-            this._tokenHandler = new appauth.BaseTokenRequestHandler(requestor);
-            this._utils = new appauth.BasicQueryStringUtils();
-        }
-        TokenClient.prototype.getByAuthorizationCode = function (redirectUrl, code, codeVerifier) {
-            return __awaiter(this, void 0, void 0, function () {
-                var config, redirectUri, req;
-                return __generator(this, function (_a) {
-                    switch (_a.label) {
-                        case 0: return [4 /*yield*/, this.config.getConfiguration()];
-                        case 1:
-                            config = _a.sent();
-                            redirectUri = redirectUrl;
-                            req = new appauth.TokenRequest({
-                                client_id: this.config.clientId,
-                                redirect_uri: redirectUri,
-                                grant_type: appauth.GRANT_TYPE_AUTHORIZATION_CODE,
-                                code: code,
-                                extras: { code_verifier: codeVerifier }
-                            });
-                            return [4 /*yield*/, this._tokenHandler.performTokenRequest(config, req)];
-                        case 2: return [2 /*return*/, _a.sent()];
-                    }
-                });
-            });
-        };
-        TokenClient.prototype.getByRefreshToken = function (refreshToken) {
-            return __awaiter(this, void 0, void 0, function () {
-                var config, redirectUri, req;
-                return __generator(this, function (_a) {
-                    switch (_a.label) {
-                        case 0: return [4 /*yield*/, this.config.getConfiguration()];
-                        case 1:
-                            config = _a.sent();
-                            redirectUri = this.config.redirectUrl;
-                            req = new appauth.TokenRequest({
-                                client_id: this.config.clientId,
-                                redirect_uri: redirectUri,
-                                grant_type: appauth.GRANT_TYPE_REFRESH_TOKEN,
-                                refresh_token: refreshToken
-                            });
-                            return [4 /*yield*/, this._tokenHandler.performTokenRequest(config, req)];
-                        case 2: return [2 /*return*/, _a.sent()];
-                    }
-                });
-            });
-        };
-        TokenClient.prototype.getByClientCredentials = function (clientId, clientSecret, scope) {
-            return __awaiter(this, void 0, void 0, function () {
-                var config, req;
-                return __generator(this, function (_a) {
-                    switch (_a.label) {
-                        case 0: return [4 /*yield*/, this.config.getConfiguration()];
-                        case 1:
-                            config = _a.sent();
-                            req = new appauth.TokenRequest({
-                                client_id: clientId,
-                                redirect_uri: null,
-                                grant_type: 'client_credentials',
-                                extras: {
-                                    client_secret: clientSecret,
-                                    scope: scope,
-                                }
-                            });
-                            return [4 /*yield*/, this._tokenHandler.performTokenRequest(config, req)];
-                        case 2: return [2 /*return*/, _a.sent()];
-                    }
-                });
-            });
-        };
-        TokenClient.prototype.getBySecret = function (provider, secret, assertionToken, scope) {
-            return __awaiter(this, void 0, void 0, function () {
-                var config, req;
-                return __generator(this, function (_a) {
-                    switch (_a.label) {
-                        case 0: return [4 /*yield*/, this.config.getConfiguration()];
-                        case 1:
-                            config = _a.sent();
-                            req = new appauth.TokenRequest({
-                                client_id: this.config.clientId,
-                                redirect_uri: null,
-                                grant_type: 'urn:kolektor:nucleus:secret',
-                                extras: {
-                                    secret_provider: provider,
-                                    secret_value: secret,
-                                    client_assertion_type: 'urn:ietf:params:oauth:client-assertion-type:jwt-bearer',
-                                    client_assertion: assertionToken,
-                                    scope: scope,
-                                }
-                            });
-                            return [4 /*yield*/, this._tokenHandler.performTokenRequest(config, req)];
-                        case 2: return [2 /*return*/, _a.sent()];
-                    }
-                });
-            });
-        };
-        TokenClient.prototype.getByDeviceCode = function (deviceCode) {
-            return __awaiter(this, void 0, void 0, function () {
-                var config, req;
-                return __generator(this, function (_a) {
-                    switch (_a.label) {
-                        case 0: return [4 /*yield*/, this.config.getConfiguration()];
-                        case 1:
-                            config = _a.sent();
-                            req = new appauth.TokenRequest({
-                                client_id: this.config.clientId,
-                                redirect_uri: null,
-                                grant_type: 'urn:ietf:params:oauth:grant-type:device_code',
-                                extras: {
-                                    device_code: deviceCode
-                                }
-                            });
-                            return [4 /*yield*/, this._tokenHandler.performTokenRequest(config, req)];
-                        case 2: return [2 /*return*/, _a.sent()];
-                    }
-                });
-            });
-        };
-        TokenClient.prototype.registerServicePrincipal = function (token) {
-            return __awaiter(this, void 0, void 0, function () {
-                var config, response;
-                return __generator(this, function (_a) {
-                    switch (_a.label) {
-                        case 0: return [4 /*yield*/, this.config.getConfiguration()];
-                        case 1:
-                            config = _a.sent();
-                            return [4 /*yield*/, this.requestor.xhr({
-                                    url: config.registrationEndpoint,
-                                    method: 'POST',
-                                    dataType: 'json',
-                                    headers: {
-                                        'Content-Type': 'application/json',
-                                        Authorization: "Bearer " + token
-                                    }
-                                    // data: this._utils.stringify(map)
-                                })];
-                        case 2:
-                            response = _a.sent();
-                            if (response.error === undefined) {
-                                return [2 /*return*/, new ClientRegistrationResponse(response)];
-                            }
-                            else {
-                                throw new appauth.AppAuthError(response.error);
-                            }
-                            return [2 /*return*/];
-                    }
-                });
-            });
-        };
-        TokenClient.prototype.getRegistrationCode = function (existingServicePrincipalId) {
-            if (existingServicePrincipalId === void 0) { existingServicePrincipalId = null; }
-            return __awaiter(this, void 0, void 0, function () {
-                var params;
-                return __generator(this, function (_a) {
-                    params = {
-                        custom_action: 'sp_register',
-                        service_principal_id: existingServicePrincipalId
-                    };
-                    return [2 /*return*/, this.getDeviceCodeInternal(params)];
-                });
-            });
-        };
-        TokenClient.prototype.getDeviceCode = function (scope) {
-            return __awaiter(this, void 0, void 0, function () {
-                var params;
-                return __generator(this, function (_a) {
-                    params = {
-                        scope: scope,
-                    };
-                    return [2 /*return*/, this.getDeviceCodeInternal(params)];
-                });
-            });
-        };
-        TokenClient.prototype.getDeviceCodeInternal = function (params) {
-            return __awaiter(this, void 0, void 0, function () {
-                var config, map, response;
-                return __generator(this, function (_a) {
-                    switch (_a.label) {
-                        case 0: return [4 /*yield*/, this.config.getConfiguration()];
-                        case 1:
-                            config = _a.sent();
-                            params['client_id'] = this.config.clientId;
-                            map = params;
-                            return [4 /*yield*/, this.requestor.xhr({
-                                    url: config.deviceAuthorizationEndpoint,
-                                    method: 'POST',
-                                    dataType: 'json',
-                                    headers: { 'Content-Type': 'application/x-www-form-urlencoded' },
-                                    data: this._utils.stringify(map)
-                                })];
-                        case 2:
-                            response = _a.sent();
-                            if (response.error === undefined) {
-                                return [2 /*return*/, new DeviceCode(response)];
-                            }
-                            else {
-                                throw new appauth.AppAuthError(response.error);
-                            }
-                            return [2 /*return*/];
-                    }
-                });
-            });
-        };
-        return TokenClient;
-    }());
-    TokenClient.ɵfac = i0__namespace.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "12.2.3", ngImport: i0__namespace, type: TokenClient, deps: [{ token: AngularRequestor }, { token: OidcConfigurationService }], target: i0__namespace.ɵɵFactoryTarget.Injectable });
-    TokenClient.ɵprov = i0__namespace.ɵɵngDeclareInjectable({ minVersion: "12.0.0", version: "12.2.3", ngImport: i0__namespace, type: TokenClient, providedIn: 'root' });
-    i0__namespace.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "12.2.3", ngImport: i0__namespace, type: TokenClient, decorators: [{
-                type: i0.Injectable,
-                args: [{
-                        providedIn: 'root'
-                    }]
-            }], ctorParameters: function () { return [{ type: AngularRequestor }, { type: OidcConfigurationService }]; } });
-
-    var NucleusIdentityService = /** @class */ (function () {
-        function NucleusIdentityService(appService, location, http, config, tokenClient) {
-            this.appService = appService;
-            this.http = http;
-            this.config = config;
-            this.tokenClient = tokenClient;
-            this._authorizationNotifier = new NucleusAuthorizationNotifier();
-            this._initStarted = false;
-            this._initialized = false;
-            this._servicePrincipalTokenId = '_svcp';
-            var storage = new appauth.LocalStorageBackend();
-            this._crypto = new NucleusCrypto();
-            this._authorizationHandler = new appauth.RedirectRequestHandler(storage, new appauth.BasicQueryStringUtils(), location, this._crypto);
-            this._authorizationHandler.setAuthorizationNotifier(this._authorizationNotifier);
-            this._store = new SecretsStore(config.clientId);
-        }
-        Object.defineProperty(NucleusIdentityService.prototype, "identity", {
-            get: function () {
-                return this._store.getIdentity();
-            },
-            enumerable: false,
-            configurable: true
-        });
-        Object.defineProperty(NucleusIdentityService.prototype, "isAuthenticated", {
-            get: function () {
-                return this.identity != null;
-            },
-            enumerable: false,
-            configurable: true
-        });
-        Object.defineProperty(NucleusIdentityService.prototype, "servicePrincipalIdentity", {
-            get: function () {
-                return this._store.getIdentity(this._servicePrincipalTokenId);
-            },
-            enumerable: false,
-            configurable: true
-        });
-        Object.defineProperty(NucleusIdentityService.prototype, "isServicePrincipalAuthenticated", {
-            get: function () {
-                return this.servicePrincipalIdentity != null;
-            },
-            enumerable: false,
-            configurable: true
-        });
-        NucleusIdentityService.prototype.init = function (startLogin) {
-            if (startLogin === void 0) { startLogin = false; }
-            return __awaiter(this, void 0, void 0, function () {
-                var authErr, request, response, res, res;
-                return __generator(this, function (_b) {
-                    switch (_b.label) {
-                        case 0:
-                            if (this._initStarted || this._initialized) {
-                                console.warn('Nucleus.Identity: Auth initialization was already started. Don\'t call init() multiple times!');
-                                return [2 /*return*/];
-                            }
-                            this._initStarted = true;
-                            this.handleLaunchCodeHash();
-                            return [4 /*yield*/, this._authorizationHandler.completeAuthorizationRequestIfPossible()];
-                        case 1:
-                            _b.sent();
-                            authErr = this._authorizationNotifier.error;
-                            if (!authErr) return [3 /*break*/, 2];
-                            throw new Error('Authorization err: ' + authErr.error + ': ' + authErr.errorDescription);
-                        case 2:
-                            if (!this._authorizationNotifier.response) return [3 /*break*/, 5];
-                            window.location.hash = '';
-                            request = this._authorizationNotifier.request;
-                            response = this._authorizationNotifier.response;
-                            return [4 /*yield*/, this.tokenClient.getByAuthorizationCode(request.redirectUri, response.code, request.internal['code_verifier'])];
-                        case 3:
-                            res = _b.sent();
-                            return [4 /*yield*/, this._store.setToken(res)];
-                        case 4:
-                            _b.sent();
-                            return [3 /*break*/, 8];
-                        case 5: return [4 /*yield*/, this._store.getToken()];
-                        case 6:
-                            res = _b.sent();
-                            if (!(!res && startLogin)) return [3 /*break*/, 8];
-                            return [4 /*yield*/, this.login()];
-                        case 7:
-                            _b.sent();
-                            _b.label = 8;
-                        case 8:
-                            this._initialized = true;
-                            return [2 /*return*/];
-                    }
-                });
-            });
-        };
-        NucleusIdentityService.prototype.loginWithSecret = function (provider, secret) {
-            var _a;
-            return __awaiter(this, void 0, void 0, function () {
-                var assertionToken, scope, res;
-                return __generator(this, function (_b) {
-                    switch (_b.label) {
-                        case 0:
-                            this._store.removeToken();
-                            return [4 /*yield*/, this.getServicePrincipalAccessToken()];
-                        case 1:
-                            assertionToken = _b.sent();
-                            scope = this.prepareScope(true, (_a = this.config) === null || _a === void 0 ? void 0 : _a.requestedScopes);
-                            return [4 /*yield*/, this.tokenClient.getBySecret(provider, secret, assertionToken, scope)];
-                        case 2:
-                            res = _b.sent();
-                            return [4 /*yield*/, this._store.setToken(res)];
-                        case 3:
-                            _b.sent();
-                            return [2 /*return*/];
-                    }
-                });
-            });
-        };
-        NucleusIdentityService.prototype.login = function () {
-            return __awaiter(this, void 0, void 0, function () {
-                var config, request, listener_1;
-                var _this = this;
-                return __generator(this, function (_b) {
-                    switch (_b.label) {
-                        case 0:
-                            this._store.removeToken();
-                            return [4 /*yield*/, this.config.getConfiguration()];
-                        case 1:
-                            config = _b.sent();
-                            request = this.prepareAuthorizationRequest();
-                            if (this.appService.isNative) {
-                                listener_1 = app.App.addListener('appUrlOpen', function (data) {
-                                    if (_this.appService.platform === 'ios') {
-                                        browser.Browser.close();
-                                    }
-                                    listener_1.remove();
-                                    var hash = _this.getCodeHash(data.url);
-                                    if (hash) {
-                                        var targetUrl = window.location.origin + window.location.pathname + '#' + hash;
-                                        window.location.assign(targetUrl);
-                                        window.location.reload();
-                                    }
-                                    else {
-                                        console.warn('Nucleus.Identity: Redirect url did not contain authorization code!', data);
-                                    }
-                                });
-                            }
-                            this._authorizationHandler.performAuthorizationRequest(config, request);
-                            return [2 /*return*/];
-                    }
-                });
-            });
-        };
-        NucleusIdentityService.prototype.logout = function () {
-            return __awaiter(this, void 0, void 0, function () {
-                var config, redirectUrl, logoutUrl, listener_2;
-                return __generator(this, function (_b) {
-                    switch (_b.label) {
-                        case 0:
-                            this._store.removeToken();
-                            return [4 /*yield*/, this.config.getConfiguration()];
-                        case 1:
-                            config = _b.sent();
-                            redirectUrl = this.config.redirectUrl;
-                            logoutUrl = config.endSessionEndpoint + '?post_logout_redirect_uri=' + encodeURI(redirectUrl);
-                            if (this.appService.isNative) {
-                                listener_2 = app.App.addListener('appUrlOpen', function () {
-                                    device.Device.getInfo().then(function (info) {
-                                        if (info.platform === 'ios') {
-                                            browser.Browser.close();
-                                        }
-                                    });
-                                    listener_2.remove();
-                                });
-                                browser.Browser.open({ url: logoutUrl });
-                            }
-                            else {
-                                window.location.assign(logoutUrl);
-                            }
-                            return [2 /*return*/];
-                    }
-                });
-            });
-        };
-        NucleusIdentityService.prototype.getAccessToken = function () {
-            return __awaiter(this, void 0, void 0, function () {
-                return __generator(this, function (_b) {
-                    switch (_b.label) {
-                        case 0:
-                            if (!this._getTokenPromise) {
-                                this._getTokenPromise = this.getAccessTokenInternal();
-                            }
-                            _b.label = 1;
-                        case 1:
-                            _b.trys.push([1, , 3, 4]);
-                            return [4 /*yield*/, this._getTokenPromise];
-                        case 2: return [2 /*return*/, _b.sent()];
-                        case 3:
-                            this._getTokenPromise = null;
-                            return [7 /*endfinally*/];
-                        case 4: return [2 /*return*/];
-                    }
-                });
-            });
-        };
-        NucleusIdentityService.prototype.getServicePrincipalAccessToken = function () {
-            return __awaiter(this, void 0, void 0, function () {
-                return __generator(this, function (_b) {
-                    switch (_b.label) {
-                        case 0:
-                            if (!this._getServicePrincipalTokenPromise) {
-                                this._getServicePrincipalTokenPromise = this.getServicePrincipalAccessTokenInternal();
-                            }
-                            _b.label = 1;
-                        case 1:
-                            _b.trys.push([1, , 3, 4]);
-                            return [4 /*yield*/, this._getServicePrincipalTokenPromise];
-                        case 2: return [2 /*return*/, _b.sent()];
-                        case 3:
-                            this._getServicePrincipalTokenPromise = null;
-                            return [7 /*endfinally*/];
-                        case 4: return [2 /*return*/];
-                    }
-                });
-            });
-        };
-        NucleusIdentityService.prototype.loginServicePrincipal = function () {
-            return __awaiter(this, void 0, void 0, function () {
-                return __generator(this, function (_b) {
-                    switch (_b.label) {
-                        case 0: return [4 /*yield*/, this.loginServicePrincipalInternal()];
-                        case 1:
-                            _b.sent();
-                            return [2 /*return*/];
-                    }
-                });
-            });
-        };
-        /*
-        public async loginAsServicePrincipal() {
-          let token = await this._store.getToken(this._servicePrincipalTokenId);
-          if (!token) {
-            await this.loginServicePrincipal();
-          }
-          token = await this._store.getToken(this._servicePrincipalTokenId);
-           // TODO: we have to distinguished that token is service principal so refresh token stuff is handled correctly.
-           // We have to implement universal getAccessToken function that can handle all cases
-          await this._store.setToken(token);
-        }
-        */
-        NucleusIdentityService.prototype.getOtp = function (type, expiresIn) {
-            if (expiresIn === void 0) { expiresIn = -1; }
-            return __awaiter(this, void 0, void 0, function () {
-                var url;
-                return __generator(this, function (_b) {
-                    url = this.config.getServerUrl("/otp/create?type=" + type);
-                    if (expiresIn > 0) {
-                        url += "&expiresIn=" + expiresIn;
-                    }
-                    return [2 /*return*/, this.http.get(url).toPromise()];
-                });
-            });
-        };
-        NucleusIdentityService.prototype.getOtpStatus = function (id) {
-            return __awaiter(this, void 0, void 0, function () {
-                var url;
-                return __generator(this, function (_b) {
-                    url = this.config.getServerUrl("/otp/status/" + id);
-                    return [2 /*return*/, this.http.get(url).toPromise()];
-                });
-            });
-        };
-        NucleusIdentityService.prototype.getOtpUrl = function (redirectUrl, password) {
-            var encoded = encodeURIComponent(redirectUrl);
-            var url = "/otp/auth?otpValue=" + password + "&returnUrl=" + encoded;
-            return this.config.getServerUrl(url);
-        };
-        NucleusIdentityService.prototype.startServicePrincipalRegistration = function () {
-            return __awaiter(this, void 0, void 0, function () {
-                var sp;
-                return __generator(this, function (_b) {
-                    switch (_b.label) {
-                        case 0: return [4 /*yield*/, this._store.getServicePrincipal()];
-                        case 1:
-                            sp = _b.sent();
-                            return [4 /*yield*/, this.tokenClient.getRegistrationCode(sp === null || sp === void 0 ? void 0 : sp.id)];
-                        case 2: return [2 /*return*/, _b.sent()];
-                    }
-                });
-            });
-        };
-        NucleusIdentityService.prototype.completeServicePrincipalRegistration = function (deviceCode) {
-            return __awaiter(this, void 0, void 0, function () {
-                var tokenRes, regRes;
-                return __generator(this, function (_b) {
-                    switch (_b.label) {
-                        case 0: return [4 /*yield*/, this.waitForDeviceToken(deviceCode)];
-                        case 1:
-                            tokenRes = _b.sent();
-                            return [4 /*yield*/, this.tokenClient.registerServicePrincipal(tokenRes.accessToken)];
-                        case 2:
-                            regRes = _b.sent();
-                            return [4 /*yield*/, this._store.setServicePrincipal({
-                                    id: regRes.clientId,
-                                    secret: regRes.clientSecret,
-                                    expiresAt: regRes.secretExpirationDate
-                                })];
-                        case 3:
-                            _b.sent();
-                            return [2 /*return*/];
-                    }
-                });
-            });
-        };
-        NucleusIdentityService.prototype.removeServicePrincipalRegistration = function () {
-            return this._store.removeServicePrincipal();
-        };
-        NucleusIdentityService.prototype.getServicePrincipalRegistrationStatus = function () {
-            return __awaiter(this, void 0, void 0, function () {
-                var sp;
-                return __generator(this, function (_b) {
-                    switch (_b.label) {
-                        case 0: return [4 /*yield*/, this._store.getServicePrincipal()];
-                        case 1:
-                            sp = _b.sent();
-                            return [2 /*return*/, new ServicePrincipalRegistrationStatus(sp)];
-                    }
-                });
-            });
-        };
-        NucleusIdentityService.prototype.startDeviceCodeLogin = function () {
-            return __awaiter(this, void 0, void 0, function () {
-                var scope;
-                return __generator(this, function (_b) {
-                    switch (_b.label) {
-                        case 0:
-                            scope = this.prepareScope(true, this.config.requestedScopes);
-                            return [4 /*yield*/, this.tokenClient.getDeviceCode(scope)];
-                        case 1: return [2 /*return*/, _b.sent()];
-                    }
-                });
-            });
-        };
-        NucleusIdentityService.prototype.completeDeviceCodeLogin = function (deviceCode) {
-            return __awaiter(this, void 0, void 0, function () {
-                var res;
-                return __generator(this, function (_b) {
-                    switch (_b.label) {
-                        case 0: return [4 /*yield*/, this.waitForDeviceToken(deviceCode)];
-                        case 1:
-                            res = _b.sent();
-                            return [4 /*yield*/, this._store.setToken(res)];
-                        case 2:
-                            _b.sent();
-                            return [2 /*return*/];
-                    }
-                });
-            });
-        };
-        NucleusIdentityService.prototype.waitForDeviceToken = function (deviceCode) {
-            return __awaiter(this, void 0, void 0, function () {
-                var res, error_1;
-                return __generator(this, function (_b) {
-                    switch (_b.label) {
-                        case 0:
-                            res = null;
-                            _b.label = 1;
-                        case 1:
-                            if (deviceCode.isExpired()) {
-                                throw Error('Device code is expired!');
-                            }
-                            _b.label = 2;
-                        case 2:
-                            _b.trys.push([2, 4, , 8]);
-                            return [4 /*yield*/, this.tokenClient.getByDeviceCode(deviceCode.deviceCode)];
-                        case 3:
-                            res = _b.sent();
-                            return [3 /*break*/, 8];
-                        case 4:
-                            error_1 = _b.sent();
-                            if (!(error_1 instanceof appauth.AppAuthError && error_1.message === 'authorization_pending')) return [3 /*break*/, 6];
-                            return [4 /*yield*/, this.delay(2000)];
-                        case 5:
-                            _b.sent();
-                            return [3 /*break*/, 7];
-                        case 6: throw error_1;
-                        case 7: return [3 /*break*/, 8];
-                        case 8:
-                            if (!res) return [3 /*break*/, 1];
-                            _b.label = 9;
-                        case 9: return [2 /*return*/, res];
-                    }
-                });
-            });
-        };
-        NucleusIdentityService.prototype.prepareAuthorizationRequest = function () {
-            var redirectUri = this.config.redirectUrl;
-            var params = {
-                response_mode: 'fragment',
-                prompt: 'consent',
-                access_type: 'offline',
-                auth_provider_hint: this.config.authProviderHint
-            };
-            return new appauth.AuthorizationRequest({
-                client_id: this.config.clientId,
-                redirect_uri: redirectUri,
-                response_type: appauth.AuthorizationRequest.RESPONSE_TYPE_CODE,
-                scope: this.prepareScope(true, this.config.requestedScopes),
-                extras: params,
-            }, this._crypto, true);
-        };
-        NucleusIdentityService.prototype.loginServicePrincipalInternal = function () {
-            return __awaiter(this, void 0, void 0, function () {
-                var sp, scope, res;
-                return __generator(this, function (_b) {
-                    switch (_b.label) {
-                        case 0: return [4 /*yield*/, this._store.getServicePrincipal()];
-                        case 1:
-                            sp = _b.sent();
-                            if (!sp) return [3 /*break*/, 4];
-                            scope = this.prepareScope(false, this.config.servicePrincipalRequestedScopes);
-                            return [4 /*yield*/, this.tokenClient.getByClientCredentials(sp.id, sp.secret, scope)];
-                        case 2:
-                            res = _b.sent();
-                            return [4 /*yield*/, this._store.setToken(res, this._servicePrincipalTokenId)];
-                        case 3:
-                            _b.sent();
-                            return [2 /*return*/, res];
-                        case 4: throw Error('Service principal is not registered!');
-                    }
-                });
-            });
-        };
-        NucleusIdentityService.prototype.getServicePrincipalAccessTokenInternal = function () {
-            return __awaiter(this, void 0, void 0, function () {
-                var token;
-                return __generator(this, function (_b) {
-                    switch (_b.label) {
-                        case 0: return [4 /*yield*/, this._store.getToken(this._servicePrincipalTokenId)];
-                        case 1:
-                            token = _b.sent();
-                            if (!!(token === null || token === void 0 ? void 0 : token.isValid())) return [3 /*break*/, 3];
-                            return [4 /*yield*/, this.loginServicePrincipalInternal()];
-                        case 2:
-                            token = _b.sent();
-                            _b.label = 3;
-                        case 3: return [2 /*return*/, token === null || token === void 0 ? void 0 : token.accessToken];
-                    }
-                });
-            });
-        };
-        NucleusIdentityService.prototype.getAccessTokenInternal = function () {
-            return __awaiter(this, void 0, void 0, function () {
-                var token;
-                return __generator(this, function (_b) {
-                    switch (_b.label) {
-                        case 0: return [4 /*yield*/, this._store.getToken()];
-                        case 1:
-                            token = _b.sent();
-                            if (!(token && !token.isValid())) return [3 /*break*/, 3];
-                            return [4 /*yield*/, this.loginWithRefreshToken(token)];
-                        case 2:
-                            token = _b.sent();
-                            _b.label = 3;
-                        case 3: return [2 /*return*/, token === null || token === void 0 ? void 0 : token.accessToken];
-                    }
-                });
-            });
-        };
-        NucleusIdentityService.prototype.loginWithRefreshToken = function (token) {
-            return __awaiter(this, void 0, void 0, function () {
-                return __generator(this, function (_b) {
-                    switch (_b.label) {
-                        case 0:
-                            if (!this._refreshTokenPromise) {
-                                this._refreshTokenPromise = this.loginWithRefreshTokenInternal(token);
-                            }
-                            _b.label = 1;
-                        case 1:
-                            _b.trys.push([1, , 3, 4]);
-                            return [4 /*yield*/, this._refreshTokenPromise];
-                        case 2: return [2 /*return*/, _b.sent()];
-                        case 3:
-                            this._refreshTokenPromise = null;
-                            return [7 /*endfinally*/];
-                        case 4: return [2 /*return*/];
-                    }
-                });
-            });
-        };
-        NucleusIdentityService.prototype.loginWithRefreshTokenInternal = function (token) {
-            return __awaiter(this, void 0, void 0, function () {
-                var res, err_1;
-                return __generator(this, function (_b) {
-                    switch (_b.label) {
-                        case 0:
-                            if (!(token === null || token === void 0 ? void 0 : token.refreshToken)) return [3 /*break*/, 8];
-                            _b.label = 1;
-                        case 1:
-                            _b.trys.push([1, 4, , 7]);
-                            return [4 /*yield*/, this.tokenClient.getByRefreshToken(token.refreshToken)];
-                        case 2:
-                            res = _b.sent();
-                            return [4 /*yield*/, this._store.setToken(res)];
-                        case 3:
-                            _b.sent();
-                            return [2 /*return*/, res];
-                        case 4:
-                            err_1 = _b.sent();
-                            console.warn('Nucleus.Identity: Failed to login with refresh token.', err_1);
-                            if (!(err_1.message === 'invalid_grant')) return [3 /*break*/, 6];
-                            return [4 /*yield*/, this.logout()];
-                        case 5:
-                            _b.sent();
-                            _b.label = 6;
-                        case 6: return [3 /*break*/, 7];
-                        case 7: return [3 /*break*/, 9];
-                        case 8:
-                            console.warn('Nucleus.Identity: There is no refresh token available.');
-                            _b.label = 9;
-                        case 9: return [2 /*return*/];
-                    }
-                });
-            });
-        };
-        NucleusIdentityService.prototype.getCodeHash = function (url) {
-            var arr = url.split('#');
-            if (arr.length > 1) {
-                var hash = arr[1];
-                if (hash.startsWith('code=')) {
-                    return hash;
-                }
-            }
-            return null;
-        };
-        NucleusIdentityService.prototype.handleLaunchCodeHash = function () {
-            if (this.appService.isNative && this.appService.launchUrl) {
-                var hash = this.getCodeHash(this.appService.launchUrl);
-                if (hash) {
-                    console.log('Nucleus.Identity: Got authorization code from launchUrl, will assign it to hash.');
-                    window.location.hash = '#' + hash;
-                }
-            }
-        };
-        NucleusIdentityService.prototype.prepareScope = function (offlineAccess, aditionalScope) {
-            var scope = 'openid';
-            if (offlineAccess) {
-                scope += ' offline_access';
-            }
-            if (scope) {
-                scope += ' ' + aditionalScope;
-            }
-            return scope;
-        };
-        NucleusIdentityService.prototype.delay = function (miliseconds) {
-            return new Promise(function (resolve) {
-                setTimeout(function () {
-                    resolve();
-                }, miliseconds);
-            });
-        };
-        return NucleusIdentityService;
-    }());
-    NucleusIdentityService.ɵfac = i0__namespace.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "12.2.3", ngImport: i0__namespace, type: NucleusIdentityService, deps: [{ token: i1__namespace.NucleusAppService }, { token: LocationService }, { token: i1__namespace$1.HttpClient }, { token: OidcConfigurationService }, { token: TokenClient }], target: i0__namespace.ɵɵFactoryTarget.Injectable });
-    NucleusIdentityService.ɵprov = i0__namespace.ɵɵngDeclareInjectable({ minVersion: "12.0.0", version: "12.2.3", ngImport: i0__namespace, type: NucleusIdentityService, providedIn: 'root' });
-    i0__namespace.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "12.2.3", ngImport: i0__namespace, type: NucleusIdentityService, decorators: [{
-                type: i0.Injectable,
-                args: [{
-                        providedIn: 'root'
-                    }]
-            }], ctorParameters: function () { return [{ type: i1__namespace.NucleusAppService }, { type: LocationService }, { type: i1__namespace$1.HttpClient }, { type: OidcConfigurationService }, { type: TokenClient }]; } });
-
-    var NucleusTokenInterceptor = /** @class */ (function () {
-        function NucleusTokenInterceptor(auth, config) {
-            var _a;
-            this.auth = auth;
-            this.config = config;
-            this._authorityInterceptPaths = ['/api', '/manage', '/otp/create', '/otp/status'];
-            this._authority = config.authority.toLowerCase();
-            this._interceptUrls = (_a = config.httpInterceptorUrls) === null || _a === void 0 ? void 0 : _a.map(function (x) { return x.toLowerCase(); });
-        }
-        NucleusTokenInterceptor.prototype.intercept = function (req, next) {
-            if (this.shouldIntercept(req.url)) {
-                var res = this.authorizeRequest(this.auth.getAccessToken(), req, next);
-                return this.checkUnauthorized(res);
-            }
-            return next.handle(req);
-        };
-        NucleusTokenInterceptor.prototype.shouldIntercept = function (url) {
-            var _a;
-            url = url.toLowerCase();
-            if (url.startsWith(this._authority)) {
-                var pathname_1 = new URL(url).pathname;
-                return (this._authorityInterceptPaths.some(function (x) { return pathname_1.startsWith(x); }));
-            }
-            if (((_a = this._interceptUrls) === null || _a === void 0 ? void 0 : _a.length) > 0) {
-                return this.config.httpInterceptorUrls.some(function (x) { return url.startsWith(x); });
-            }
-            return false;
-        };
-        NucleusTokenInterceptor.prototype.authorizeRequest = function (getToken, req, next) {
-            return rxjs.from(getToken).pipe(operators.mergeMap(function (token) {
-                if (token) {
-                    var headers = req.headers.set('Authorization', "Bearer " + token);
-                    req = req.clone({ headers: headers });
-                }
-                return next.handle(req);
-            }));
-        };
-        NucleusTokenInterceptor.prototype.checkUnauthorized = function (response) {
-            var _this = this;
-            return response.pipe(operators.catchError(function (err) {
-                if (err instanceof i1$1.HttpErrorResponse && err.status === 401) {
-                    if (_this.config.automaticLoginOnHttp401) {
-                        _this.auth.login();
-                    }
-                }
-                return rxjs.throwError(err);
-            }));
-        };
-        return NucleusTokenInterceptor;
-    }());
-    NucleusTokenInterceptor.ɵfac = i0__namespace.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "12.2.3", ngImport: i0__namespace, type: NucleusTokenInterceptor, deps: [{ token: NucleusIdentityService }, { token: NucleusIdentityConfig }], target: i0__namespace.ɵɵFactoryTarget.Injectable });
-    NucleusTokenInterceptor.ɵprov = i0__namespace.ɵɵngDeclareInjectable({ minVersion: "12.0.0", version: "12.2.3", ngImport: i0__namespace, type: NucleusTokenInterceptor, providedIn: 'root' });
-    i0__namespace.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "12.2.3", ngImport: i0__namespace, type: NucleusTokenInterceptor, decorators: [{
-                type: i0.Injectable,
-                args: [{
-                        providedIn: 'root'
-                    }]
-            }], ctorParameters: function () { return [{ type: NucleusIdentityService }, { type: NucleusIdentityConfig }]; } });
-
-    var NucleusIdentityModule = /** @class */ (function () {
-        function NucleusIdentityModule() {
-        }
-        NucleusIdentityModule.forRoot = function (config) {
-            return {
-                ngModule: NucleusIdentityModule,
-                providers: [
-                    { provide: NucleusIdentityConfig, useValue: config },
-                    { provide: i1$1.HTTP_INTERCEPTORS, useClass: NucleusTokenInterceptor, multi: true },
-                ]
-            };
-        };
-        return NucleusIdentityModule;
-    }());
-    NucleusIdentityModule.ɵfac = i0__namespace.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "12.2.3", ngImport: i0__namespace, type: NucleusIdentityModule, deps: [], target: i0__namespace.ɵɵFactoryTarget.NgModule });
-    NucleusIdentityModule.ɵmod = i0__namespace.ɵɵngDeclareNgModule({ minVersion: "12.0.0", version: "12.2.3", ngImport: i0__namespace, type: NucleusIdentityModule });
-    NucleusIdentityModule.ɵinj = i0__namespace.ɵɵngDeclareInjector({ minVersion: "12.0.0", version: "12.2.3", ngImport: i0__namespace, type: NucleusIdentityModule, imports: [[]] });
-    i0__namespace.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "12.2.3", ngImport: i0__namespace, type: NucleusIdentityModule, decorators: [{
-                type: i0.NgModule,
-                args: [{
-                        imports: [],
-                        declarations: [],
-                        exports: []
-                    }]
-            }] });
-
-    var OtpResponse = /** @class */ (function () {
-        function OtpResponse() {
-        }
-        return OtpResponse;
-    }());
-    var OtpStatus = /** @class */ (function () {
-        function OtpStatus() {
-        }
-        return OtpStatus;
-    }());
-    exports.OtpType = void 0;
-    (function (OtpType) {
-        OtpType[OtpType["SimpleNumbers"] = 0] = "SimpleNumbers";
-        OtpType[OtpType["SimpleAlfanumeric"] = 1] = "SimpleAlfanumeric";
-        OtpType[OtpType["Complex"] = 2] = "Complex";
-    })(exports.OtpType || (exports.OtpType = {}));
-
-    /*
-     * Public API Surface of nucleus-identity
-     */
-
-    /**
-     * Generated bundle index. Do not edit.
-     */
-
-    exports.DeviceCode = DeviceCode;
-    exports.Identity = Identity;
-    exports.NucleusIdentityConfig = NucleusIdentityConfig;
-    exports.NucleusIdentityModule = NucleusIdentityModule;
-    exports.NucleusIdentityService = NucleusIdentityService;
-    exports.OtpResponse = OtpResponse;
-    exports.OtpStatus = OtpStatus;
-    exports.ServicePrincipalRegistrationStatus = ServicePrincipalRegistrationStatus;
-
-    Object.defineProperty(exports, '__esModule', { value: true });
-
-})));
-//# sourceMappingURL=kolektor-nucleus-identity.umd.js.map