@leapdev/auth-agent 2.2.13-beta.4 → 2.2.13-beta.6

package/src/index.umd.js

@@ -44,12 +44,7 @@
         if (kind === "a" && !f) throw new TypeError("Private accessor was defined without a setter");
         if (typeof state === "function" ? receiver !== state || !f : !state.has(receiver)) throw new TypeError("Cannot write private member to an object whose class did not declare it");
         return (kind === "a" ? f.call(receiver, value) : f ? f.value = value : state.set(receiver, value)), value;
-    }
-
-    typeof SuppressedError === "function" ? SuppressedError : function (error, suppressed, message) {
-        var e = new Error(message);
-        return e.name = "SuppressedError", e.error = error, e.suppressed = suppressed, e;
-    };
+    }
 
     var commonjsGlobal = typeof globalThis !== 'undefined' ? globalThis : typeof window !== 'undefined' ? window : typeof global !== 'undefined' ? global : typeof self !== 'undefined' ? self : {};
 
@@ -3829,9 +3824,11 @@
           throw Error('Missing config parameter : ' + p);
         }
       });
+
       if (!lodash.isArray(options.scopes)) {
         throw Error('Scopes must be an array with string values');
       }
+
       const config = Object.assign(Object.assign({}, DEFAULT_CONFIG), options);
       return config;
     };
@@ -3841,7 +3838,9 @@
     class LeapAuthService {
       constructor(authHost, clientId) {
         _LeapAuthService_authHost.set(this, void 0);
+
         _LeapAuthService_clientId.set(this, void 0);
+
         this.getAccessTokenByJti = jti => {
           return new Promise((resolve, reject) => {
             __classPrivateFieldGet(this, _LeapAuthService_xhr, "f").call(this, {
@@ -3860,6 +3859,7 @@
             });
           });
         };
+
         this.getRedirections = () => {
           return new Promise((resolve, reject) => {
             __classPrivateFieldGet(this, _LeapAuthService_xhr, "f").call(this, {
@@ -3872,6 +3872,7 @@
             });
           });
         };
+
         this.exchangeAuthCodeForAccessToken = params => {
           return new Promise((resolve, reject) => {
             __classPrivateFieldGet(this, _LeapAuthService_xhr, "f").call(this, {
@@ -3892,6 +3893,7 @@
             });
           });
         };
+
         this.renewAccessToken = params => {
           return new Promise((resolve, reject) => {
             __classPrivateFieldGet(this, _LeapAuthService_xhr, "f").call(this, {
@@ -3911,6 +3913,7 @@
             });
           });
         };
+
         this.userInfo = token => {
           return new Promise((resolve, reject) => {
             __classPrivateFieldGet(this, _LeapAuthService_xhr, "f").call(this, {
@@ -3923,6 +3926,7 @@
             });
           });
         };
+
         this.linkUser = params => {
           const {
             jti,
@@ -3931,12 +3935,14 @@
           } = params;
           const redirectUrl = newWindow ? __classPrivateFieldGet(this, _LeapAuthService_authHost, "f") + LEAP_AUTH_CLOSE_WINDOW_URL : params.redirectUrl;
           const requestUrl = `/cloudprovider/link?client_id=${__classPrivateFieldGet(this, _LeapAuthService_clientId, "f")}&prompt=none&jti=${jti}&callback=${redirectUrl}`;
+
           __classPrivateFieldGet(this, _LeapAuthService_redirectUrl, "f").call(this, {
             requestUrl,
             newWindow,
             callback
           });
         };
+
         this.unlinkUser = params => {
           const {
             jti,
@@ -3945,12 +3951,14 @@
           } = params;
           const redirectUrl = newWindow ? __classPrivateFieldGet(this, _LeapAuthService_authHost, "f") + LEAP_AUTH_CLOSE_WINDOW_URL : params.redirectUrl;
           const requestUrl = `/cloudprovider/unlink?client_id=${__classPrivateFieldGet(this, _LeapAuthService_clientId, "f")}&jti=${jti}&callback=${redirectUrl}`;
+
           __classPrivateFieldGet(this, _LeapAuthService_redirectUrl, "f").call(this, {
             requestUrl,
             newWindow,
             callback
           });
         };
+
         this.getCloudProviderToken = (token, jti) => {
           const url = `${__classPrivateFieldGet(this, _LeapAuthService_authHost, "f")}/cloudprovider/accesstoken` + (jti ? '/' + jti : '');
           return new Promise((resolve, reject) => {
@@ -3964,6 +3972,7 @@
             });
           });
         };
+
         this.cloudProviderUserInfo = token => {
           return new Promise((resolve, reject) => {
             __classPrivateFieldGet(this, _LeapAuthService_xhr, "f").call(this, {
@@ -3976,6 +3985,7 @@
             });
           });
         };
+
         this.cloudProviderReauthenticate = params => {
           const {
             nonce,
@@ -3984,12 +3994,14 @@
           } = params;
           const redirectUrl = newWindow ? __classPrivateFieldGet(this, _LeapAuthService_authHost, "f") + LEAP_AUTH_CLOSE_WINDOW_URL : params.redirectUrl;
           const requestUrl = `/cloudprovider/reauthenticate?nonce=${nonce}&redirectUrl=${redirectUrl}`;
+
           __classPrivateFieldGet(this, _LeapAuthService_redirectUrl, "f").call(this, {
             requestUrl,
             newWindow,
             callback
           });
         };
+
         this.cloudProviderReauthenticateLink = token => {
           return new Promise((resolve, reject) => {
             __classPrivateFieldGet(this, _LeapAuthService_xhr, "f").call(this, {
@@ -4002,6 +4014,7 @@
             });
           });
         };
+
         this.cloudProviderUpdate = params => {
           const {
             firmId,
@@ -4024,6 +4037,7 @@
             });
           });
         };
+
         this.statusAdminConsent = token => {
           return new Promise((resolve, reject) => {
             __classPrivateFieldGet(this, _LeapAuthService_xhr, "f").call(this, {
@@ -4036,6 +4050,7 @@
             });
           });
         };
+
         this.getAdminConsent = params => {
           const {
             domain,
@@ -4044,12 +4059,14 @@
           } = params;
           const redirectUrl = newWindow ? __classPrivateFieldGet(this, _LeapAuthService_authHost, "f") + LEAP_AUTH_CLOSE_WINDOW_URL : params.redirectUrl;
           const requestUrl = `/cloudprovider/adminconsent?client_id=${__classPrivateFieldGet(this, _LeapAuthService_clientId, "f")}&redirectUrl=${redirectUrl}${domain ? '&domain=' + domain : ''}`;
+
           __classPrivateFieldGet(this, _LeapAuthService_redirectUrl, "f").call(this, {
             requestUrl,
             newWindow,
             callback
           });
         };
+
         this.revokeAdminConsent = token => {
           return new Promise((resolve, reject) => {
             __classPrivateFieldGet(this, _LeapAuthService_xhr, "f").call(this, {
@@ -4062,6 +4079,7 @@
             });
           });
         };
+
         this.getLinkMap = (token, allUsers) => {
           return new Promise((resolve, reject) => {
             __classPrivateFieldGet(this, _LeapAuthService_xhr, "f").call(this, {
@@ -4074,6 +4092,7 @@
             });
           });
         };
+
         this.setLinkMap = (token, linkMap) => {
           return new Promise((resolve, reject) => {
             __classPrivateFieldGet(this, _LeapAuthService_xhr, "f").call(this, {
@@ -4088,6 +4107,7 @@
             });
           });
         };
+
         this.authoriseSupport = (token, params) => {
           const {
             code,
@@ -4110,6 +4130,7 @@
             });
           });
         };
+
         this.changePassword = params => {
           const {
             newWindow,
@@ -4119,6 +4140,7 @@
           let changePasswordUrl = `/oauth/changepassword?client_id=${__classPrivateFieldGet(this, _LeapAuthService_clientId, "f")}`;
           let redirect_uri = '';
           let noListener = false;
+
           if (newWindow) {
             if (!!callback && typeof callback === 'function') {
               redirect_uri = __classPrivateFieldGet(this, _LeapAuthService_authHost, "f") + LEAP_AUTH_CLOSE_WINDOW_URL;
@@ -4129,9 +4151,11 @@
           } else {
             redirect_uri = __classPrivateFieldGet(this, _LeapAuthService_authHost, "f") + '/oauth/logout?force=true' + '&redirect_uri=' + (redirectUrl || window.location.href);
           }
+
           if (redirect_uri) {
             changePasswordUrl += `&redirect_uri=${encodeURIComponent(redirect_uri)}`;
           }
+
           __classPrivateFieldGet(this, _LeapAuthService_redirectUrl, "f").call(this, {
             requestUrl: changePasswordUrl,
             newWindow,
@@ -4139,6 +4163,7 @@
             noListener
           });
         };
+
         _LeapAuthService_xhr.set(this, (params, onload) => {
           const {
             method,
@@ -4158,6 +4183,7 @@
           xhr.setRequestHeader('Content-type', options.contentType);
           xhr.setRequestHeader('Access-Control-Allow-Origin', options.accessControlAllowOrigin);
           if (accessToken) xhr.setRequestHeader('Authorization', 'Bearer ' + accessToken);
+
           xhr.onload = () => {
             try {
               let resp;
@@ -4167,9 +4193,11 @@
               onload(xhr.response, xhr.status);
             }
           };
+
           if (options.body) options.body = JSON.stringify(options.body);
           xhr.send(options.body);
         });
+
         _LeapAuthService_redirectUrl.set(this, params => {
           const {
             requestUrl,
@@ -4178,17 +4206,21 @@
             noListener
           } = params;
           const fullUrl = __classPrivateFieldGet(this, _LeapAuthService_authHost, "f") + requestUrl;
+
           if (newWindow) {
             const childWindow = window.open(fullUrl, '_blank');
+
             const eventHandler = event => {
               if (event && event.data === 'closeMe' && childWindow) {
                 childWindow.close();
+
                 if (lodash.isFunction(callback)) {
                   callback();
                   window.removeEventListener('message', eventHandler, false);
                 }
               }
             };
+
             if (!noListener) {
               window.addEventListener('message', eventHandler, false);
             }
@@ -4196,13 +4228,17 @@
             window.location.href = fullUrl;
           }
         });
+
         __classPrivateFieldSet(this, _LeapAuthService_authHost, authHost, "f");
+
         __classPrivateFieldSet(this, _LeapAuthService_clientId, clientId, "f");
       }
+
     }
     _LeapAuthService_authHost = new WeakMap(), _LeapAuthService_clientId = new WeakMap(), _LeapAuthService_xhr = new WeakMap(), _LeapAuthService_redirectUrl = new WeakMap();
 
     var HookName;
+
     (function (HookName) {
       HookName["afterLogin"] = "afterLogin";
       HookName["beforeLogout"] = "beforeLogout";
@@ -4220,9 +4256,13 @@
     class Notification {
       constructor() {
         _Notification_pubnubKeys.set(this, void 0);
+
         _Notification_pubnub.set(this, void 0);
+
         _Notification_eventListeners.set(this, []);
+
         _Notification_uniqueSessionTriggerHook.set(this, undefined);
+
         this.init = params => __awaiter(this, void 0, void 0, function* () {
           const {
             authHost,
@@ -4232,11 +4272,15 @@
             uniqueSession,
             hooks
           } = params;
+
           if (!!hooks && hooks.uniqueSessionTrigger) {
             __classPrivateFieldSet(this, _Notification_uniqueSessionTriggerHook, hooks.uniqueSessionTrigger, "f");
           }
+
           __classPrivateFieldGet(this, _Notification_initFirmChannel, "f").call(this, firmId, userId);
+
           __classPrivateFieldGet(this, _Notification_initUserChannel, "f").call(this, userId);
+
           if (uniqueSession) {
             yield __classPrivateFieldGet(this, _Notification_initUniqueSessionChannel, "f").call(this, {
               authHost,
@@ -4244,30 +4288,37 @@
             });
           }
         });
+
         this.destroy = () => {
           if (__classPrivateFieldGet(this, _Notification_pubnub, "f")) {
             __classPrivateFieldGet(this, _Notification_pubnub, "f").unsubscribeAll();
+
             __classPrivateFieldSet(this, _Notification_eventListeners, [], "f");
           }
         };
+
         this.registerEventListenerForUserChannel = params => {
           const {
             topic,
             messageType,
             callback
           } = params;
+
           if (!lodash.isFunction(callback)) {
             throw Error(`Registering Event Listener ${topic} ${messageType}: callback needs to be a function`);
           }
+
           __classPrivateFieldGet(this, _Notification_eventListeners, "f").push({
             topic,
             messageType,
             callback
           });
         };
+
         this.setUniqueSessionTriggerHook = hook => {
           __classPrivateFieldSet(this, _Notification_uniqueSessionTriggerHook, hook, "f");
         };
+
         _Notification_initFirmChannel.set(this, (firmId, userId) => {
           __classPrivateFieldGet(this, _Notification_pubnub, "f").addListener({
             presence: presenceEvent => {
@@ -4275,32 +4326,38 @@
                 action,
                 uuid
               } = presenceEvent;
+
               if (uuid === __classPrivateFieldGet(this, _Notification_pubnubKeys, "f").uuid) {
                 return;
               }
+
               if (action === 'leave' || action === 'timeout') {
                 const valuesUUID = uuid.split('~');
                 const userIdFromPresence = valuesUUID[0] || '';
                 const instanceGuidFromPresence = valuesUUID[1] || '';
                 const userActionFromPresence = valuesUUID[2] || '';
                 const isUserActionRequiredLogout = userActionFromPresence === USER_ACTION.USERNAME_CHANGED || userActionFromPresence === USER_ACTION.PASSWORD_CHANGED || userActionFromPresence === USER_ACTION.USER_DISABLED;
+
                 if (userIdFromPresence === userId && instanceGuidFromPresence === EMPTY_GUID && isUserActionRequiredLogout) {
                   AuthAgent.logout(true);
                 }
               }
             }
           });
+
           __classPrivateFieldGet(this, _Notification_pubnub, "f").subscribe({
             channels: [firmId],
             withPresence: true
           });
         });
+
         _Notification_initUserChannel.set(this, userId => {
           __classPrivateFieldGet(this, _Notification_pubnub, "f").addListener({
             message: data => {
               const {
                 content
               } = data.message;
+
               if (content && content.topic && content.messageType && content.data) {
                 for (const eventListener of __classPrivateFieldGet(this, _Notification_eventListeners, "f")) {
                   if (eventListener.topic === content.topic && eventListener.messageType === content.messageType && eventListener.callback && lodash.isFunction(eventListener.callback)) {
@@ -4310,11 +4367,13 @@
               }
             }
           });
+
           __classPrivateFieldGet(this, _Notification_pubnub, "f").subscribe({
             channels: [`user_${userId}`],
             withPresence: false
           });
         });
+
         _Notification_initUniqueSessionChannel.set(this, params => __awaiter(this, void 0, void 0, function* () {
           const decodedToken = yield AuthAgent.getDecodedAccessToken();
           const {
@@ -4326,29 +4385,36 @@
             sessionId: mySessionId,
             impersonatorId: myImpersonatorId
           } = decodedToken;
+
           if (!decodedToken) {
             return;
           }
+
           const channel = `auth-session-${myUserId}`;
+
           __classPrivateFieldGet(this, _Notification_pubnub, "f").addListener({
             message: data => __awaiter(this, void 0, void 0, function* () {
               const decodedToken = yield AuthAgent.getDecodedAccessToken();
+
               if (!decodedToken) {
                 AuthAgent.logout(true);
               }
+
               const {
                 sessionId: mySessionId,
                 impersonatorId: myImpersonatorId,
                 userId: myUserId
               } = decodedToken;
               const myAgentId = localStorage.getItem('leap-auth-agent-id');
+
               if (myAgentId && data && data.message) {
                 const sessionId = data.message.sessionId,
-                  authHost = data.message.authHost,
-                  clientId = data.message.clientId,
-                  logout = data.message.logout;
-                  data.message.agentId;
-                  const impersonatorId = myImpersonatorId ? myImpersonatorId : data.message.impersonatorId;
+                      authHost = data.message.authHost,
+                      clientId = data.message.clientId,
+                      logout = data.message.logout;
+                      data.message.agentId;
+                      const impersonatorId = myImpersonatorId ? myImpersonatorId : data.message.impersonatorId;
+
                 if (authHost === myAuthHost) {
                   if (clientId === myClientId && sessionId !== mySessionId || clientId !== myClientId && sessionId === mySessionId && logout) {
                     if (impersonatorId !== undefined && impersonatorId !== '') {
@@ -4365,15 +4431,19 @@
               }
             })
           });
+
           __classPrivateFieldGet(this, _Notification_pubnub, "f").subscribe({
             channels: [channel],
             withPresence: true
           });
+
           let agentId = localStorage.getItem('leap-auth-agent-id');
+
           if (!agentId) {
             agentId = uuid.v4();
             localStorage.setItem('leap-auth-agent-id', agentId);
           }
+
           __classPrivateFieldGet(this, _Notification_pubnub, "f").publish({
             message: {
               authHost: myAuthHost,
@@ -4389,13 +4459,16 @@
             }
           });
         }));
+
         __classPrivateFieldSet(this, _Notification_pubnubKeys, {
           publishKey: 'pub-13f5288e-cd88-4ef9-9e68-0c11cd03ddb8',
           subscribeKey: 'sub-a456f002-0095-11e2-9638-9581afc33ebf',
           uuid: uuid.v4()
         }, "f");
+
         __classPrivateFieldSet(this, _Notification_pubnub, new Pubnub__default["default"](__classPrivateFieldGet(this, _Notification_pubnubKeys, "f")), "f");
       }
+
     }
     _Notification_pubnubKeys = new WeakMap(), _Notification_pubnub = new WeakMap(), _Notification_eventListeners = new WeakMap(), _Notification_uniqueSessionTriggerHook = new WeakMap(), _Notification_initFirmChannel = new WeakMap(), _Notification_initUserChannel = new WeakMap(), _Notification_initUniqueSessionChannel = new WeakMap();
 
@@ -5835,6 +5908,7 @@
     const deleteQueryParameter = (windowLocation, name, value) => {
       const nameValue = name + '=' + value;
       let toReplace = nameValue;
+
       if (windowLocation.indexOf('?' + nameValue) >= 0) {
         if (windowLocation.indexOf('?' + nameValue + '&') >= 0) {
           toReplace += '&';
@@ -5844,13 +5918,16 @@
       } else if (windowLocation.indexOf('&' + nameValue) >= 0) {
         toReplace = '&' + toReplace;
       }
+
       return windowLocation.replace(toReplace, '');
     };
     const getQueryParameter = name => {
       const paramsForSearch = parseParams(window.location.search.substring(1));
+
       if (paramsForSearch[name]) {
         return paramsForSearch[name];
       }
+
       return undefined;
     };
     const createCodeChallenge = verifier => __awaiter(void 0, void 0, void 0, function* () {
@@ -5878,33 +5955,41 @@
       randomValues.forEach(v => random += charset[v % charset.length]);
       return random;
     };
+
     const sha256 = s => __awaiter(void 0, void 0, void 0, function* () {
       const digestOp = getCryptoSubtle().digest({
         name: 'SHA-256'
       }, new TextEncoder().encode(s));
+
       if (window.msCrypto) {
         return new Promise((res, rej) => {
           digestOp.oncomplete = e => {
             res(e.target.result);
           };
+
           digestOp.onerror = e => {
             rej(e.error);
           };
+
           digestOp.onabort = () => {
             rej('The digest operation was aborted');
           };
         });
       }
+
       return yield digestOp;
     });
+
     const getCryptoSubtle = () => {
       const crypto = getCrypto();
       return crypto.subtle || crypto.webkitSubtle;
     };
+
     const bufferToBase64UrlEncoded = input => {
       const ie11SafeInput = new Uint8Array(input);
       return urlEncodeB64(window.btoa(String.fromCharCode(...Array.from(ie11SafeInput))));
     };
+
     const urlEncodeB64 = input => {
       const b64Chars = {
         '+': '-',
@@ -5913,14 +5998,17 @@
       };
       return input.replace(/[+/=]/g, m => b64Chars[m]);
     };
+
     const parseParams = url => {
       const result = {};
       const params = url.split('&');
+
       for (let i = 0; i < params.length; i++) {
         const param = params[i].split('=', 2);
         if (param.length !== 2) continue;
         result[param[0]] = decodeURIComponent(param[1].replace(/\+/g, " "));
       }
+
       return result;
     };
 
@@ -6031,33 +6119,42 @@
       const redirections = redirectionConfig.environments;
       const suffix = topLevelDomains.find(suffix => origin.endsWith(suffix));
       const environmentVariables = redirectionConfig.environmentVariables;
+
       if (suffix) {
         for (let i = 0; i < redirections.length; i++) {
           redirection = redirections[i];
           const tokenCriteriaMatched = containsKeys(decodedToken, redirection.criteria);
+
           if (tokenCriteriaMatched && !!containsApplication(redirection.applications, origin)) {
             if (redirection.topLevelDomain !== suffix) {
               redirectUrl = origin.replace(suffix, redirection.topLevelDomain);
             }
+
             const envVariables = environmentVariables[redirection.criteria.environment];
+
             if (envVariables) {
               const prefixMappings = envVariables['prefixMappings'];
               const keys = Object.keys(prefixMappings);
               const needToUpdatePrefixKey = containsApplication(keys, origin);
+
               if (needToUpdatePrefixKey) {
                 const prefixValue = prefixMappings[needToUpdatePrefixKey];
                 redirectUrl = redirectUrl ? redirectUrl.replace(needToUpdatePrefixKey, prefixValue) : origin.replace(needToUpdatePrefixKey, prefixValue);
               }
             }
+
             break;
           }
         }
+
         if (!!redirection && !!redirectUrl) {
           result = `${redirection.authHost}/oauth/passthrough?jti=${decodedToken.jti}&redirect=${encodeURIComponent(redirectUrl)}`;
         }
       }
+
       return result;
     };
+
     const containsKeys = (obj1, obj2) => {
       let result = true;
       Object.keys(obj2).forEach(key => {
@@ -6067,11 +6164,12 @@
       });
       return result;
     };
+
     const containsApplication = (list, app) => {
       return list.find(appName => app.startsWith(`http://${appName}`) || app.startsWith(`https://${appName}`));
     };
 
-    var _Authentication_accessToken, _Authentication_config, _Authentication_leapAuthService, _Authentication_notification, _Authentication_popupLogin, _Authentication_refreshInfo, _Authentication_exchangeAuthCodeForAccessToken, _Authentication_verifyAndPerformRedirections, _Authentication_startRefreshAccessTokenProcess, _Authentication_destroyRefreshAccessTokenProcess, _Authentication_decodeAccessToken, _Authentication_handlePopupLogin;
+    var _Authentication_accessToken, _Authentication_config, _Authentication_leapAuthService, _Authentication_notification, _Authentication_popupLogin, _Authentication_officeDialog, _Authentication_refreshInfo, _Authentication_exchangeAuthCodeForAccessToken, _Authentication_verifyAndPerformRedirections, _Authentication_startRefreshAccessTokenProcess, _Authentication_destroyRefreshAccessTokenProcess, _Authentication_decodeAccessToken, _Authentication_handlePopupLogin;
     const SECONDS_BEFORE_EXPIRE = 30;
     const MAX_SETTIME_OUT = 2147483647;
     const DEFAULT_AUTHORIZE_TIMEOUT_IN_SECONDS = 60;
@@ -6080,25 +6178,36 @@
     class Authentication {
       constructor(options) {
         _Authentication_accessToken.set(this, void 0);
+
         _Authentication_config.set(this, void 0);
+
         _Authentication_leapAuthService.set(this, void 0);
+
         _Authentication_notification.set(this, void 0);
+
         _Authentication_popupLogin.set(this, void 0);
+
+        _Authentication_officeDialog.set(this, void 0);
+
         _Authentication_refreshInfo.set(this, void 0);
+
         this.registerEventListenerForUserChannel = params => {
           const {
             topic,
             messageType,
             callback
           } = params;
+
           __classPrivateFieldGet(this, _Authentication_notification, "f").registerEventListenerForUserChannel({
             topic,
             messageType,
             callback
           });
         };
+
         this.initNotification = () => __awaiter(this, void 0, void 0, function* () {
           const decodedToken = yield this.getDecodedRefreshedAccessToken();
+
           if (decodedToken) {
             yield __classPrivateFieldGet(this, _Authentication_notification, "f").init({
               authHost: __classPrivateFieldGet(this, _Authentication_config, "f").authHost,
@@ -6110,11 +6219,14 @@
             });
           }
         });
+
         this.destroyNotification = () => {
           __classPrivateFieldGet(this, _Authentication_notification, "f").destroy();
         };
+
         this.login = params => __awaiter(this, void 0, void 0, function* () {
           const done = yield this.checkAuthCode();
+
           if (done && !!__classPrivateFieldGet(this, _Authentication_accessToken, "f")) {
             return __classPrivateFieldGet(this, _Authentication_accessToken, "f");
           } else {
@@ -6131,9 +6243,12 @@
               code_challenge,
               code_challenge_method
             } = yield createCodeChallenge(code_verifier);
+
             const scope = __classPrivateFieldGet(this, _Authentication_config, "f").scopes.join(',');
+
             const prompt = noPrompt ? 'none' : '';
             const url = `${__classPrivateFieldGet(this, _Authentication_config, "f").authHost}/oauth/authorize?response_type=code&scope=${scope}&client_id=${__classPrivateFieldGet(this, _Authentication_config, "f").clientId}&redirect_uri=${encodeURIComponent(window.location.href)}&code_challenge=${encodeURIComponent(code_challenge)}&code_challenge_method=${code_challenge_method}&force_2fa=${force_2fa}&nonce=${nonce}&state=${state}&prompt=${prompt}&remember_me=${__classPrivateFieldGet(this, _Authentication_config, "f").rememberMe}`;
+
             if (popup) {
               return __classPrivateFieldGet(this, _Authentication_handlePopupLogin, "f").call(this, url);
             } else {
@@ -6142,12 +6257,16 @@
             }
           }
         });
+
         this.logout = (force = false, redirectUrl) => {
           __classPrivateFieldSet(this, _Authentication_accessToken, undefined, "f");
+
           const redirectUri = encodeURIComponent(redirectUrl || window.location.href);
           window.location.href = `${__classPrivateFieldGet(this, _Authentication_config, "f").authHost}/oauth/logout?force=${force}&redirect_uri=${redirectUri}`;
+
           __classPrivateFieldGet(this, _Authentication_destroyRefreshAccessTokenProcess, "f").call(this);
         };
+
         this.getAccessToken = () => {
           if (__classPrivateFieldGet(this, _Authentication_accessToken, "f") === undefined || !__classPrivateFieldGet(this, _Authentication_accessToken, "f")) {
             return '';
@@ -6155,17 +6274,20 @@
             return __classPrivateFieldGet(this, _Authentication_accessToken, "f");
           }
         };
+
         this.getRefreshedAccessToken = force => __awaiter(this, void 0, void 0, function* () {
           if (__classPrivateFieldGet(this, _Authentication_accessToken, "f") === undefined || !__classPrivateFieldGet(this, _Authentication_accessToken, "f")) {
             return '';
           } else {
             if (__classPrivateFieldGet(this, _Authentication_refreshInfo, "f") && __classPrivateFieldGet(this, _Authentication_refreshInfo, "f").accessTokenExpireIn) {
               const decoded = __classPrivateFieldGet(this, _Authentication_decodeAccessToken, "f").call(this, __classPrivateFieldGet(this, _Authentication_accessToken, "f"));
+
               if (force || !!decoded && (decoded.exp - SECONDS_BEFORE_EXPIRE) * 1000 < Date.now()) {
                 const data = yield __classPrivateFieldGet(this, _Authentication_leapAuthService, "f").renewAccessToken({
                   refreshToken: __classPrivateFieldGet(this, _Authentication_refreshInfo, "f").refreshToken,
                   verifier: __classPrivateFieldGet(this, _Authentication_refreshInfo, "f").verifier
                 });
+
                 if (data) {
                   if (data.refresh_token && data.expires_in) {
                     __classPrivateFieldSet(this, _Authentication_refreshInfo, Object.assign(Object.assign({}, __classPrivateFieldGet(this, _Authentication_refreshInfo, "f")), {
@@ -6173,28 +6295,37 @@
                       accessTokenExpireIn: data.expires_in
                     }), "f");
                   }
+
                   __classPrivateFieldSet(this, _Authentication_accessToken, data.access_token, "f");
+
                   yield this.triggerHooks(HookName.afterRefreshToken);
                   return __classPrivateFieldGet(this, _Authentication_accessToken, "f");
                 }
               }
             }
+
             return __classPrivateFieldGet(this, _Authentication_accessToken, "f");
           }
         });
+
         this.getDecodedAccessToken = () => {
           if (!__classPrivateFieldGet(this, _Authentication_accessToken, "f")) {
             return undefined;
           }
+
           return __classPrivateFieldGet(this, _Authentication_decodeAccessToken, "f").call(this, __classPrivateFieldGet(this, _Authentication_accessToken, "f"));
         };
+
         this.getDecodedRefreshedAccessToken = force => __awaiter(this, void 0, void 0, function* () {
           const token = yield this.getRefreshedAccessToken(force);
+
           if (!token) {
             return undefined;
           }
+
           return __classPrivateFieldGet(this, _Authentication_decodeAccessToken, "f").call(this, token);
         });
+
         this.getHooks = () => {
           if (__classPrivateFieldGet(this, _Authentication_config, "f")) {
             return __classPrivateFieldGet(this, _Authentication_config, "f").hooks;
@@ -6202,44 +6333,56 @@
             return undefined;
           }
         };
+
         this.setHook = params => {
           const {
             name,
             callback
           } = params;
+
           if (!Object.values(HookName).find(h => h === name)) {
             throw Error('Unsupported hook: ' + name);
           }
+
           if (!lodash.isFunction(callback)) {
             throw Error('hook must be a function: ' + name);
           }
+
           __classPrivateFieldSet(this, _Authentication_config, Object.assign(Object.assign({}, __classPrivateFieldGet(this, _Authentication_config, "f")), {
             hooks: Object.assign(Object.assign({}, __classPrivateFieldGet(this, _Authentication_config, "f").hooks), {
               [name]: callback
             })
           }), "f");
+
           if (name === HookName.uniqueSessionTrigger) {
             __classPrivateFieldGet(this, _Authentication_notification, "f").setUniqueSessionTriggerHook(callback);
           }
+
           return;
         };
+
         this.autoLogin = () => {
           return __classPrivateFieldGet(this, _Authentication_config, "f") ? __classPrivateFieldGet(this, _Authentication_config, "f").autoLogin || false : false;
         };
+
         this.autoLogout = () => {
           return __classPrivateFieldGet(this, _Authentication_config, "f") ? __classPrivateFieldGet(this, _Authentication_config, "f").autoLogout || false : false;
         };
+
         this.idleTimeoutInMinutes = () => {
           return __classPrivateFieldGet(this, _Authentication_config, "f") ? __classPrivateFieldGet(this, _Authentication_config, "f").idleTimeoutInMinutes || 30 : 30;
         };
+
         this.checkTokenInUrl = () => {
           const accessTokenQuery = getQueryParameter('access_token') || getQueryParameter('auth') || getQueryParameter('authToken') || getQueryParameter('token') || getQueryParameter('jwt');
+
           if (accessTokenQuery) {
             const {
               aud,
               firmId,
               userId
             } = __classPrivateFieldGet(this, _Authentication_decodeAccessToken, "f").call(this, accessTokenQuery);
+
             if (!!firmId && !!userId && aud === '8MBJWOFS4RRRSZQC') {
               const queryParameterValue = accessTokenQuery;
               let myselfWithoutToken = deleteQueryParameter(window.location.href, 'access_token', queryParameterValue);
@@ -6251,30 +6394,38 @@
               window.location.href = __classPrivateFieldGet(this, _Authentication_config, "f").authHost + '/oauth/passthrough?token=' + queryParameterValue + '&redirect=' + myselfEncoded;
               return true;
             }
+
             return false;
           }
+
           return false;
         };
+
         this.checkTokenInInit = () => {
           if (__classPrivateFieldGet(this, _Authentication_config, "f") && __classPrivateFieldGet(this, _Authentication_config, "f").initToken) {
             const {
               jti
             } = __classPrivateFieldGet(this, _Authentication_decodeAccessToken, "f").call(this, __classPrivateFieldGet(this, _Authentication_config, "f").initToken);
+
             if (jti) {
               const windowPassthroughSession = window.sessionStorage.getItem(PASSTHROUGH_SESSION_KEY);
+
               if (windowPassthroughSession) {
                 window.sessionStorage.removeItem(PASSTHROUGH_SESSION_KEY);
                 return false;
               }
+
               window.sessionStorage.setItem(PASSTHROUGH_SESSION_KEY, jti);
               const myselfEncoded = encodeURIComponent(window.location.href);
               window.location.href = __classPrivateFieldGet(this, _Authentication_config, "f").authHost + '/oauth/passthrough?jti=' + jti + '&redirect=' + myselfEncoded;
               return true;
             }
           }
+
           window.sessionStorage.removeItem(PASSTHROUGH_SESSION_KEY);
           return false;
         };
+
         this.verifySession = () => __awaiter(this, void 0, void 0, function* () {
           const code_verifier = createRandomString(64);
           const state = createRandomString(6);
@@ -6283,13 +6434,17 @@
             code_challenge,
             code_challenge_method
           } = yield createCodeChallenge(code_verifier);
+
           const scope = __classPrivateFieldGet(this, _Authentication_config, "f").scopes.join(',');
+
           const redirectUri = `${window.location.protocol}//${window.location.host}${window.location.pathname}`;
           const url = `${__classPrivateFieldGet(this, _Authentication_config, "f").authHost}/oauth/authorize?response_type=code&response_mode=web_message&scope=${scope}&client_id=${__classPrivateFieldGet(this, _Authentication_config, "f").clientId}&redirect_uri=${encodeURIComponent(redirectUri)}&code_challenge=${encodeURIComponent(code_challenge)}&code_challenge_method=${code_challenge_method}&state=${state}&prompt=none`;
           const resp = yield this.runIframe(url, state);
+
           if (resp && resp.state) {
             const verifier = window.sessionStorage.getItem(resp.state);
             window.sessionStorage.removeItem(resp.state);
+
             if (resp.code && verifier) {
               return __classPrivateFieldGet(this, _Authentication_exchangeAuthCodeForAccessToken, "f").call(this, {
                 code: resp.code,
@@ -6303,15 +6458,18 @@
             return false;
           }
         });
+
         this.checkAuthCode = () => __awaiter(this, void 0, void 0, function* () {
           const search = window.location.search;
           const queryParams = new URLSearchParams(search);
           const code = queryParams.get('code');
           const state = queryParams.get('state');
+
           if (!!code && !!state) {
-            const isPopupLogin = window.sessionStorage.getItem('leap-auth-popup-login');
+            const isPopupLogin = window.localStorage.getItem('leap-auth-popup-login');
+
             if (isPopupLogin === 'true' && window.opener) {
-              window.sessionStorage.removeItem('leap-auth-popup-login');
+              window.localStorage.removeItem('leap-auth-popup-login');
               window.opener.postMessage({
                 source: 'leap-auth-popup-login',
                 code,
@@ -6320,6 +6478,7 @@
               window.close();
               return false;
             } else {
+              window.localStorage.removeItem('leap-auth-popup-login');
               const verifier = window.sessionStorage.getItem(state);
               window.sessionStorage.removeItem(state);
               let newUrl = window.location.href;
@@ -6336,16 +6495,21 @@
             return false;
           }
         });
+
         this.getUserInfo = () => __awaiter(this, void 0, void 0, function* () {
           const token = yield this.getRefreshedAccessToken();
           return __classPrivateFieldGet(this, _Authentication_leapAuthService, "f").userInfo(token);
         });
+
         this.linkUser = params => __awaiter(this, void 0, void 0, function* () {
           const decodeToken = yield this.getDecodedRefreshedAccessToken();
+
           if (!decodeToken) {
             return;
           }
+
           const redirectUrl = params.redirectUrl || window.location.href;
+
           __classPrivateFieldGet(this, _Authentication_leapAuthService, "f").linkUser({
             redirectUrl,
             jti: decodeToken.jti,
@@ -6353,12 +6517,16 @@
             callback: params.callback
           });
         });
+
         this.unlinkUser = params => __awaiter(this, void 0, void 0, function* () {
           const decodeToken = yield this.getDecodedRefreshedAccessToken();
+
           if (!decodeToken) {
             return;
           }
+
           const redirectUrl = params.redirectUrl || window.location.href;
+
           __classPrivateFieldGet(this, _Authentication_leapAuthService, "f").unlinkUser({
             redirectUrl,
             jti: decodeToken.jti,
@@ -6366,25 +6534,34 @@
             callback: params.callback
           });
         });
+
         this.getCloudProviderToken = jti => __awaiter(this, void 0, void 0, function* () {
           const token = yield this.getRefreshedAccessToken();
+
           if (!token) {
             throw Error('Not authenticated yet');
           }
+
           return __classPrivateFieldGet(this, _Authentication_leapAuthService, "f").getCloudProviderToken(token, jti);
         });
+
         this.cloudProviderUserInfo = () => __awaiter(this, void 0, void 0, function* () {
           const token = yield this.getRefreshedAccessToken();
+
           if (!token) {
             throw Error('Not authenticated yet');
           }
+
           return __classPrivateFieldGet(this, _Authentication_leapAuthService, "f").cloudProviderUserInfo(token);
         });
+
         this.cloudProviderReauthenticate = params => __awaiter(this, void 0, void 0, function* () {
           const token = yield this.getRefreshedAccessToken();
+
           if (!token) {
             throw Error('Not authenticated yet');
           }
+
           let {
             nonce,
             redirectUrl
@@ -6394,10 +6571,12 @@
             callback
           } = params;
           redirectUrl = redirectUrl || window.location.href;
+
           if (!nonce) {
             const reauthticateLink = yield __classPrivateFieldGet(this, _Authentication_leapAuthService, "f").cloudProviderReauthenticateLink(token);
             nonce = reauthticateLink.nonce;
           }
+
           return __classPrivateFieldGet(this, _Authentication_leapAuthService, "f").cloudProviderReauthenticate({
             redirectUrl,
             nonce,
@@ -6405,12 +6584,16 @@
             callback
           });
         });
+
         this.cloudProviderUpdate = cloudProviderId => __awaiter(this, void 0, void 0, function* () {
           const token = yield this.getRefreshedAccessToken();
+
           if (!token) {
             throw Error('Not authenticated yet');
           }
+
           const decodedToken = __classPrivateFieldGet(this, _Authentication_decodeAccessToken, "f").call(this, token);
+
           const {
             firmId
           } = decodedToken;
@@ -6420,65 +6603,89 @@
             token: token
           });
         });
+
         this.statusAdminConsent = () => __awaiter(this, void 0, void 0, function* () {
           const token = yield this.getRefreshedAccessToken();
+
           if (!token) {
             throw Error('Not authenticated yet');
           }
+
           return __classPrivateFieldGet(this, _Authentication_leapAuthService, "f").statusAdminConsent(token);
         });
+
         this.getAdminConsent = params => {
           const redirectUrl = params.redirectUrl || window.location.href;
+
           __classPrivateFieldGet(this, _Authentication_leapAuthService, "f").getAdminConsent(Object.assign(Object.assign({}, params), {
             redirectUrl
           }));
         };
+
         this.revokeAdminConsent = () => __awaiter(this, void 0, void 0, function* () {
           const token = yield this.getRefreshedAccessToken();
+
           if (!token) {
             throw Error('Not authenticated yet');
           }
+
           return __classPrivateFieldGet(this, _Authentication_leapAuthService, "f").revokeAdminConsent(token);
         });
+
         this.getLinkMap = (allUsers = false) => __awaiter(this, void 0, void 0, function* () {
           const token = yield this.getRefreshedAccessToken();
+
           if (!token) {
             throw Error('Not authenticated yet');
           }
+
           return __classPrivateFieldGet(this, _Authentication_leapAuthService, "f").getLinkMap(token, allUsers);
         });
+
         this.setLinkMap = linkMap => __awaiter(this, void 0, void 0, function* () {
           const token = yield this.getRefreshedAccessToken();
+
           if (!token) {
             throw Error('Not authenticated yet');
           }
+
           const verifyFormat = () => {
             if (Array.isArray(linkMap)) {
               for (const link of linkMap) {
                 if (!(link.internalUser && link.externalUser && link.externalUser.id)) return false;
               }
+
               return true;
             }
+
             return false;
           };
+
           if (!verifyFormat()) throw Error('linkmap in wrong format');
           return __classPrivateFieldGet(this, _Authentication_leapAuthService, "f").setLinkMap(token, linkMap);
         });
+
         this.authoriseSupport = params => __awaiter(this, void 0, void 0, function* () {
           const token = yield this.getRefreshedAccessToken();
+
           if (!token) {
             throw Error('Not authenticated yet');
           }
+
           return __classPrivateFieldGet(this, _Authentication_leapAuthService, "f").authoriseSupport(token, params);
         });
+
         this.changePassword = params => {
           const redirectUrl = params.redirectUrl || window.location.href;
+
           __classPrivateFieldGet(this, _Authentication_leapAuthService, "f").changePassword(Object.assign(Object.assign({}, params), {
             redirectUrl
           }));
         };
+
         this.passthrough = params => __awaiter(this, void 0, void 0, function* () {
           const decodedToken = yield this.getDecodedRefreshedAccessToken();
+
           if (decodedToken && decodedToken.jti) {
             const {
               url,
@@ -6487,26 +6694,31 @@
             } = params;
             const encodedRedirectUrl = encodeURIComponent(url);
             const passthroughUrl = `${authHost || __classPrivateFieldGet(this, _Authentication_config, "f").authHost}/oauth/passthrough?jti=${decodedToken.jti}&redirect=${encodedRedirectUrl}&output=embed`;
+
             if (newWindow) {
               window.open(passthroughUrl, '_blank');
             } else {
               window.location.assign(passthroughUrl);
             }
           }
+
           return;
         });
+
         this.triggerHooks = hookName => __awaiter(this, void 0, void 0, function* () {
           const hooks = this.getHooks();
           const token = yield this.getRefreshedAccessToken();
           const hookFn = hooks && !!hooks[hookName] && lodash.isFunction(hooks[hookName]) ? hooks[hookName](token) : false;
           return Promise.resolve(hookFn);
         });
+
         this.afterAuthenticated = () => {
           return this.triggerHooks(HookName.afterLogin).then(() => __awaiter(this, void 0, void 0, function* () {
             yield this.initNotification();
             return __classPrivateFieldGet(this, _Authentication_accessToken, "f");
           }));
         };
+
         this.runIframe = (authorizeUrl, state, timeoutInSeconds = DEFAULT_AUTHORIZE_TIMEOUT_IN_SECONDS) => {
           return new Promise((res, rej) => {
             const iframe = window.document.createElement('iframe');
@@ -6514,17 +6726,20 @@
             iframe.setAttribute('height', '0');
             iframe.setAttribute('id', 'agent-iframe');
             iframe.style.display = 'none';
+
             const removeIframe = () => {
               if (window.document.body.contains(iframe)) {
                 window.document.body.removeChild(iframe);
                 window.removeEventListener('message', iframeEventHandler, false);
               }
             };
+
             const timeoutSetTimeoutId = setTimeout(() => {
               rej('agent-iframe timeout');
               removeIframe();
               window.sessionStorage.removeItem(state);
             }, timeoutInSeconds * 1000);
+
             const iframeEventHandler = e => {
               const {
                 data,
@@ -6533,25 +6748,30 @@
               } = e;
               if (origin !== __classPrivateFieldGet(this, _Authentication_config, "f").authHost) return;
               if (!data || data.type !== 'authorization_response') return;
+
               if (source) {
                 source.close();
               }
+
               res(data.response);
               clearTimeout(timeoutSetTimeoutId);
               window.removeEventListener('message', iframeEventHandler, false);
               setTimeout(removeIframe, CLEANUP_IFRAME_TIMEOUT_IN_SECONDS * 1000);
             };
+
             window.addEventListener('message', iframeEventHandler, false);
             window.document.body.appendChild(iframe);
             iframe.setAttribute('src', authorizeUrl);
           });
         };
+
         _Authentication_exchangeAuthCodeForAccessToken.set(this, params => __awaiter(this, void 0, void 0, function* () {
           const {
             verifier,
             code,
             redirectUri
           } = params;
+
           if (verifier) {
             const data = yield __classPrivateFieldGet(this, _Authentication_leapAuthService, "f").exchangeAuthCodeForAccessToken({
               code,
@@ -6559,9 +6779,11 @@
               redirectUri
             });
             const redirectTriggered = yield __classPrivateFieldGet(this, _Authentication_verifyAndPerformRedirections, "f").call(this, data.access_token);
+
             if (redirectTriggered) {
               return true;
             }
+
             if (data.refresh_token && data.expires_in) {
               __classPrivateFieldSet(this, _Authentication_refreshInfo, {
                 refreshToken: data.refresh_token,
@@ -6569,79 +6791,105 @@
                 verifier: verifier,
                 timer: undefined
               }, "f");
+
               if (__classPrivateFieldGet(this, _Authentication_config, "f").autoRefreshToken) {
                 __classPrivateFieldGet(this, _Authentication_startRefreshAccessTokenProcess, "f").call(this);
               }
             }
+
             __classPrivateFieldSet(this, _Authentication_accessToken, data.access_token, "f");
+
             return true;
           } else {
             return false;
           }
         }));
+
         _Authentication_verifyAndPerformRedirections.set(this, accessToken => __awaiter(this, void 0, void 0, function* () {
           const redirectionConfig = yield __classPrivateFieldGet(this, _Authentication_leapAuthService, "f").getRedirections();
           const origin = window.location.origin;
+
           const decodedToken = __classPrivateFieldGet(this, _Authentication_decodeAccessToken, "f").call(this, accessToken);
+
           const redirectUri = getRedirectUri(origin, decodedToken, redirectionConfig);
+
           if (redirectUri) {
             this.logout(false, redirectUri);
             return true;
           }
+
           return false;
         }));
+
         _Authentication_startRefreshAccessTokenProcess.set(this, () => {
           if (!__classPrivateFieldGet(this, _Authentication_refreshInfo, "f")) {
             return;
           }
+
           if (__classPrivateFieldGet(this, _Authentication_refreshInfo, "f").timer) {
             clearTimeout(__classPrivateFieldGet(this, _Authentication_refreshInfo, "f").timer);
+
             __classPrivateFieldSet(this, _Authentication_refreshInfo, Object.assign(Object.assign({}, __classPrivateFieldGet(this, _Authentication_refreshInfo, "f")), {
               timer: undefined
             }), "f");
           }
+
           const waitBeforeExecuting = (__classPrivateFieldGet(this, _Authentication_refreshInfo, "f").accessTokenExpireIn - SECONDS_BEFORE_EXPIRE) * 1000;
+
           if (waitBeforeExecuting > MAX_SETTIME_OUT) {
             return;
           }
+
           const timer = setTimeout(() => __awaiter(this, void 0, void 0, function* () {
             if (!__classPrivateFieldGet(this, _Authentication_refreshInfo, "f")) {
               return;
             }
+
             const data = yield __classPrivateFieldGet(this, _Authentication_leapAuthService, "f").renewAccessToken({
               refreshToken: __classPrivateFieldGet(this, _Authentication_refreshInfo, "f").refreshToken,
               verifier: __classPrivateFieldGet(this, _Authentication_refreshInfo, "f").verifier
             });
+
             if (data) {
               if (data.refresh_token && data.expires_in) {
                 __classPrivateFieldSet(this, _Authentication_refreshInfo, Object.assign(Object.assign({}, __classPrivateFieldGet(this, _Authentication_refreshInfo, "f")), {
                   refreshToken: data.refresh_token,
                   accessTokenExpireIn: data.expires_in
                 }), "f");
+
                 __classPrivateFieldGet(this, _Authentication_startRefreshAccessTokenProcess, "f").call(this);
               }
+
               __classPrivateFieldSet(this, _Authentication_accessToken, data.access_token, "f");
+
               yield this.triggerHooks(HookName.afterRefreshToken);
             }
           }), waitBeforeExecuting);
+
           __classPrivateFieldSet(this, _Authentication_refreshInfo, Object.assign(Object.assign({}, __classPrivateFieldGet(this, _Authentication_refreshInfo, "f")), {
             timer
           }), "f");
         });
+
         _Authentication_destroyRefreshAccessTokenProcess.set(this, () => {
           if (!__classPrivateFieldGet(this, _Authentication_refreshInfo, "f")) {
             return;
           }
+
           if (__classPrivateFieldGet(this, _Authentication_refreshInfo, "f").timer) {
             clearTimeout(__classPrivateFieldGet(this, _Authentication_refreshInfo, "f").timer);
           }
+
           __classPrivateFieldSet(this, _Authentication_refreshInfo, undefined, "f");
         });
+
         _Authentication_decodeAccessToken.set(this, accessToken => {
           if (!accessToken) {
             return undefined;
           }
+
           const payload = accessToken.split('.')[1];
+
           if (payload) {
             try {
               const result = window.atob(payload);
@@ -6650,52 +6898,51 @@
               throw Error('Fail to decode access token.');
             }
           }
+
           return undefined;
         });
+
         _Authentication_handlePopupLogin.set(this, url => {
           return new Promise(resolve => {
             __classPrivateFieldSet(this, _Authentication_popupLogin, true, "f");
-            window.sessionStorage.setItem('leap-auth-popup-login', 'true');
-            window.open(url, '_blank', 'menubar=0,top=500,right=0,width=600,height=600');
-            window.addEventListener('message', event => __awaiter(this, void 0, void 0, function* () {
-              if (event.data && event.data.source && event.data.source === 'leap-auth-popup-login') {
-                const code = event.data.code;
-                const state = event.data.state;
-                const verifier = window.sessionStorage.getItem(state);
-                window.sessionStorage.removeItem(state);
-                let newUrl = window.location.href;
-                newUrl = deleteQueryParameter(newUrl, 'code', code);
-                newUrl = deleteQueryParameter(newUrl, 'state', state);
-                window.history.pushState(null, '', newUrl);
-                const done = yield __classPrivateFieldGet(this, _Authentication_exchangeAuthCodeForAccessToken, "f").call(this, {
-                  code,
-                  verifier,
-                  redirectUri: newUrl
+
+            window.localStorage.setItem('leap-auth-popup-login', 'true');
+
+            if (Office) {
+              Office.context.ui.displayDialogAsync(url, asyncResult => {
+                __classPrivateFieldSet(this, _Authentication_officeDialog, asyncResult.value, "f");
+
+                __classPrivateFieldGet(this, _Authentication_officeDialog, "f").addEventHandler(Office.EventType.DialogMessageReceived, arg => {
+                  console.log('---------good');
                 });
-                if (done) {
-                  resolve(__classPrivateFieldGet(this, _Authentication_accessToken, "f"));
-                } else {
-                  resolve(undefined);
-                }
-              }
-            }));
+              });
+            }
           });
         });
+
         __classPrivateFieldSet(this, _Authentication_accessToken, undefined, "f");
+
         __classPrivateFieldSet(this, _Authentication_config, init$1(options), "f");
+
         __classPrivateFieldSet(this, _Authentication_leapAuthService, new LeapAuthService(__classPrivateFieldGet(this, _Authentication_config, "f").authHost, __classPrivateFieldGet(this, _Authentication_config, "f").clientId), "f");
+
         __classPrivateFieldSet(this, _Authentication_notification, new Notification(), "f");
+
         __classPrivateFieldSet(this, _Authentication_popupLogin, false, "f");
       }
+
     }
-    _Authentication_accessToken = new WeakMap(), _Authentication_config = new WeakMap(), _Authentication_leapAuthService = new WeakMap(), _Authentication_notification = new WeakMap(), _Authentication_popupLogin = new WeakMap(), _Authentication_refreshInfo = new WeakMap(), _Authentication_exchangeAuthCodeForAccessToken = new WeakMap(), _Authentication_verifyAndPerformRedirections = new WeakMap(), _Authentication_startRefreshAccessTokenProcess = new WeakMap(), _Authentication_destroyRefreshAccessTokenProcess = new WeakMap(), _Authentication_decodeAccessToken = new WeakMap(), _Authentication_handlePopupLogin = new WeakMap();
+    _Authentication_accessToken = new WeakMap(), _Authentication_config = new WeakMap(), _Authentication_leapAuthService = new WeakMap(), _Authentication_notification = new WeakMap(), _Authentication_popupLogin = new WeakMap(), _Authentication_officeDialog = new WeakMap(), _Authentication_refreshInfo = new WeakMap(), _Authentication_exchangeAuthCodeForAccessToken = new WeakMap(), _Authentication_verifyAndPerformRedirections = new WeakMap(), _Authentication_startRefreshAccessTokenProcess = new WeakMap(), _Authentication_destroyRefreshAccessTokenProcess = new WeakMap(), _Authentication_decodeAccessToken = new WeakMap(), _Authentication_handlePopupLogin = new WeakMap();
 
     var _IdleTimer_timeoutInMinutes, _IdleTimer_timer, _IdleTimer_onTimeout, _IdleTimer_cleanUpTracker, _IdleTimer_clearTimeout, _IdleTimer_resetTimer;
     class IdleTimer {
       constructor(params) {
         _IdleTimer_timeoutInMinutes.set(this, void 0);
+
         _IdleTimer_timer.set(this, void 0);
+
         _IdleTimer_onTimeout.set(this, void 0);
+
         this.tracker = () => {
           window.addEventListener('onload', __classPrivateFieldGet(this, _IdleTimer_resetTimer, "f"), true);
           window.addEventListener('mousemove', __classPrivateFieldGet(this, _IdleTimer_resetTimer, "f"), true);
@@ -6703,6 +6950,7 @@
           window.addEventListener('onscroll', __classPrivateFieldGet(this, _IdleTimer_resetTimer, "f"), true);
           window.addEventListener('onkeypress', __classPrivateFieldGet(this, _IdleTimer_resetTimer, "f"), true);
         };
+
         _IdleTimer_cleanUpTracker.set(this, () => {
           window.removeEventListener('onload', __classPrivateFieldGet(this, _IdleTimer_resetTimer, "f"), true);
           window.removeEventListener('mousemove', __classPrivateFieldGet(this, _IdleTimer_resetTimer, "f"), true);
@@ -6710,36 +6958,49 @@
           window.removeEventListener('onscroll', __classPrivateFieldGet(this, _IdleTimer_resetTimer, "f"), true);
           window.removeEventListener('onkeypress', __classPrivateFieldGet(this, _IdleTimer_resetTimer, "f"), true);
         });
+
         _IdleTimer_clearTimeout.set(this, () => {
           if (__classPrivateFieldGet(this, _IdleTimer_timer, "f")) {
             clearTimeout(__classPrivateFieldGet(this, _IdleTimer_timer, "f"));
           }
         });
+
         _IdleTimer_resetTimer.set(this, () => {
           __classPrivateFieldGet(this, _IdleTimer_clearTimeout, "f").call(this);
+
           __classPrivateFieldSet(this, _IdleTimer_timer, setTimeout(() => {
             __classPrivateFieldGet(this, _IdleTimer_clearTimeout, "f").call(this);
+
             __classPrivateFieldGet(this, _IdleTimer_cleanUpTracker, "f").call(this);
+
             __classPrivateFieldGet(this, _IdleTimer_onTimeout, "f").call(this);
           }, __classPrivateFieldGet(this, _IdleTimer_timeoutInMinutes, "f") * 60 * 1000), "f");
         });
+
         const {
           timeoutInMinutes,
           onTimeout: onTimeout
         } = params;
+
         __classPrivateFieldSet(this, _IdleTimer_timeoutInMinutes, timeoutInMinutes, "f");
+
         __classPrivateFieldSet(this, _IdleTimer_onTimeout, onTimeout, "f");
       }
+
     }
     _IdleTimer_timeoutInMinutes = new WeakMap(), _IdleTimer_timer = new WeakMap(), _IdleTimer_onTimeout = new WeakMap(), _IdleTimer_cleanUpTracker = new WeakMap(), _IdleTimer_clearTimeout = new WeakMap(), _IdleTimer_resetTimer = new WeakMap();
 
     let auth;
+
     const init = options => __awaiter(void 0, void 0, void 0, function* () {
       auth = new Authentication(options);
+
       if (!auth) {
         return false;
       }
+
       const autoLogout = auth.autoLogout();
+
       if (autoLogout) {
         const timeoutInMinutes = auth.idleTimeoutInMinutes();
         const idleTimer = new IdleTimer({
@@ -6748,40 +7009,55 @@
         });
         idleTimer.tracker();
       }
+
       const done = yield auth.checkAuthCode();
+
       if (done) {
         return auth.afterAuthenticated();
       }
+
       const hasAuthSession = yield verifySession();
+
       if (hasAuthSession) {
         return auth.afterAuthenticated();
       }
+
       const passthrough = auth.checkTokenInUrl() || auth.checkTokenInInit();
+
       if (passthrough) {
         return false;
       }
+
       const autoLogin = auth.autoLogin();
+
       if (autoLogin) {
         yield login();
       }
+
       return true;
     });
+
     const verifySession = () => __awaiter(void 0, void 0, void 0, function* () {
       if (!auth) {
         throw Error('Not init yet');
       }
+
       return yield auth.verifySession();
     });
+
     const getAccessToken = () => {
       return !auth ? '' : auth.getAccessToken();
     };
+
     const getRefreshedAccessToken = force => __awaiter(void 0, void 0, void 0, function* () {
       return !auth ? '' : yield auth.getRefreshedAccessToken(force);
     });
+
     const login = (params = {}) => __awaiter(void 0, void 0, void 0, function* () {
       if (!auth) {
         throw Error('Not init yet');
       }
+
       const {
         force_2fa,
         popup
@@ -6794,87 +7070,109 @@
         return token && auth ? auth.afterAuthenticated() : undefined;
       });
     });
+
     const logout = (force = false, redirectUrl) => __awaiter(void 0, void 0, void 0, function* () {
       if (!auth) {
         throw Error('Not init yet');
       }
+
       return auth.triggerHooks(HookName.beforeLogout).then(() => {
         if (auth) {
           auth.destroyNotification();
           auth.logout(force, redirectUrl);
         }
+
         return;
       }).catch(function (err) {
         console.error('Error while logging out : ', err);
         throw Error(err);
       });
     });
+
     const registerHook = (hookName, callback) => {
       if (!auth) {
         throw Error('Not init yet');
       }
+
       if (auth) {
         auth.setHook({
           name: hookName,
           callback
         });
       }
+
       return;
     };
+
     const getDecodedAccessToken = () => {
       if (!auth) {
         throw Error('Not init yet');
       }
+
       return auth.getDecodedAccessToken();
     };
+
     const getDecodedRefreshedAccessToken = force => __awaiter(void 0, void 0, void 0, function* () {
       if (!auth) {
         throw Error('Not init yet');
       }
+
       return yield auth.getDecodedRefreshedAccessToken(force);
     });
+
     const userInfo = () => {
       if (!auth) {
         throw Error('Not init yet');
       }
+
       return auth.getUserInfo();
     };
+
     const linkUser = (redirectUrl, newWindow, callback) => __awaiter(void 0, void 0, void 0, function* () {
       if (!auth) {
         throw Error('Not init yet');
       }
+
       yield auth.linkUser({
         redirectUrl,
         newWindow,
         callback
       });
     });
+
     const unlinkUser = (redirectUrl, newWindow, callback) => __awaiter(void 0, void 0, void 0, function* () {
       if (!auth) {
         throw Error('Not init yet');
       }
+
       yield auth.unlinkUser({
         redirectUrl,
         newWindow,
         callback
       });
     });
+
     const getCloudProviderToken = jti => {
       if (!auth) {
         throw Error('Not init yet');
       }
+
       return auth.getCloudProviderToken(jti);
     };
+
     const cloudProviderUserInfo = () => {
       if (!auth) {
         throw Error('Not init yet');
       }
+
       return auth.cloudProviderUserInfo();
     };
+
     const cloudProviderReauthenticate = (nonce, redirectUrl, newWindow, callback) => {
       if (!auth) {
         throw Error('Not init yet');
       }
+
       return auth.cloudProviderReauthenticate({
         redirectUrl,
         nonce,
@@ -6882,25 +7180,32 @@
         callback
       });
     };
+
     const cloudProviderUpdate = cloudProviderId => {
       if (!auth) {
         throw Error('Not init yet');
       }
+
       if (!cloudProviderId) {
         throw Error('cloudProviderId is required');
       }
+
       return auth.cloudProviderUpdate(cloudProviderId);
     };
+
     const statusAdminConsent = () => {
       if (!auth) {
         throw Error('Not init yet');
       }
+
       return auth.statusAdminConsent();
     };
+
     const getAdminConsent = (domain, redirectUrl, newWindow, callback) => {
       if (!auth) {
         throw Error('Not init yet');
       }
+
       auth.getAdminConsent({
         domain,
         redirectUrl,
@@ -6908,63 +7213,78 @@
         callback
       });
     };
+
     const revokeAdminConsent = () => {
       if (!auth) {
         throw Error('Not init yet');
       }
+
       return auth.revokeAdminConsent();
     };
+
     const getLinkMap = allUsers => {
       if (!auth) {
         throw Error('Not init yet');
       }
+
       return auth.getLinkMap(allUsers);
     };
+
     const setLinkMap = linkMap => {
       if (!auth) {
         throw Error('Not init yet');
       }
+
       return auth.setLinkMap(linkMap);
     };
+
     const authoriseSupport = (code, duration) => {
       if (!auth) {
         throw Error('Not init yet');
       }
+
       return auth.authoriseSupport({
         code,
         duration
       });
     };
+
     const changePassword = (redirectUrl, newWindow, callback) => {
       if (!auth) {
         throw Error('Not init yet');
       }
+
       auth.changePassword({
         redirectUrl,
         newWindow,
         callback
       });
     };
+
     const registerEventListener = (topic, messageType, callback) => {
       if (!auth) {
         throw Error('Not init yet');
       }
+
       auth.registerEventListenerForUserChannel({
         topic,
         messageType,
         callback
       });
     };
+
     const passthrough = (url, newWindow = false, authHost) => __awaiter(void 0, void 0, void 0, function* () {
       if (!auth) {
         throw Error('Not init yet');
       }
+
       yield auth.passthrough({
         url,
         newWindow,
         authHost
       });
     });
+
     const AuthAgent = {
       init,
       registerHook,