@lifeready/core 1.1.18 → 1.1.20

package/bundles/lifeready-core.umd.js

@@ -1,8 +1,8 @@
 (function (global, factory) {
-    typeof exports === 'object' && typeof module !== 'undefined' ? factory(exports, require('@angular/core'), require('apollo-angular'), require('@dagrejs/graphlib'), require('lodash'), require('node-jose'), require('@aws-amplify/auth/lib-esm/Auth'), require('graphql-tag'), require('moment'), require('@apollo/client/core'), require('@apollo/client/link/context'), require('@apollo/client/link/retry'), require('ngx-cookie-service'), require('graphql/language/printer'), require('@aws-amplify/auth'), require('@aws-amplify/core'), require('rxjs'), require('@angular/common/http'), require('@ng-idle/core'), require('@ng-idle/keepalive'), require('slip39')) :
-    typeof define === 'function' && define.amd ? define('@lifeready/core', ['exports', '@angular/core', 'apollo-angular', '@dagrejs/graphlib', 'lodash', 'node-jose', '@aws-amplify/auth/lib-esm/Auth', 'graphql-tag', 'moment', '@apollo/client/core', '@apollo/client/link/context', '@apollo/client/link/retry', 'ngx-cookie-service', 'graphql/language/printer', '@aws-amplify/auth', '@aws-amplify/core', 'rxjs', '@angular/common/http', '@ng-idle/core', '@ng-idle/keepalive', 'slip39'], factory) :
-    (global = typeof globalThis !== 'undefined' ? globalThis : global || self, factory((global.lifeready = global.lifeready || {}, global.lifeready.core = {}), global.ng.core, global['apollo-angular'], global['@dagrejs/graphlib'], global.lodash, global['node-jose'], global['@aws-amplify/auth/lib-esm/Auth'], global['graphql-tag'], global.moment, global['@apollo/client/core'], global['@apollo/client/link/context'], global['@apollo/client/link/retry'], global['ngx-cookie-service'], global['graphql/language/printer'], global['@aws-amplify/auth'], global['@aws-amplify/core'], global.rxjs, global.ng.common.http, global['@ng-idle/core'], global['@ng-idle/keepalive'], global.slip39));
-}(this, (function (exports, i0, i1, graphlib, _, nodeJose, i4, gql, moment_, core, context, retry, i2, gqlPrinter, Auth, core$1, rxjs, i2$1, i3, i4$1, slip39) { 'use strict';
+    typeof exports === 'object' && typeof module !== 'undefined' ? factory(exports, require('@angular/core'), require('apollo-angular'), require('@dagrejs/graphlib'), require('lodash'), require('node-jose'), require('@aws-amplify/auth/lib-esm/Auth'), require('graphql-tag'), require('moment'), require('@apollo/client/core'), require('@apollo/client/link/context'), require('@apollo/client/link/retry'), require('ngx-cookie-service'), require('graphql/language/printer'), require('@aws-amplify/auth'), require('@angular/common/http'), require('@aws-amplify/core'), require('rxjs'), require('@ng-idle/core'), require('@ng-idle/keepalive'), require('slip39')) :
+    typeof define === 'function' && define.amd ? define('@lifeready/core', ['exports', '@angular/core', 'apollo-angular', '@dagrejs/graphlib', 'lodash', 'node-jose', '@aws-amplify/auth/lib-esm/Auth', 'graphql-tag', 'moment', '@apollo/client/core', '@apollo/client/link/context', '@apollo/client/link/retry', 'ngx-cookie-service', 'graphql/language/printer', '@aws-amplify/auth', '@angular/common/http', '@aws-amplify/core', 'rxjs', '@ng-idle/core', '@ng-idle/keepalive', 'slip39'], factory) :
+    (global = typeof globalThis !== 'undefined' ? globalThis : global || self, factory((global.lifeready = global.lifeready || {}, global.lifeready.core = {}), global.ng.core, global['apollo-angular'], global['@dagrejs/graphlib'], global.lodash, global['node-jose'], global['@aws-amplify/auth/lib-esm/Auth'], global['graphql-tag'], global.moment, global['@apollo/client/core'], global['@apollo/client/link/context'], global['@apollo/client/link/retry'], global['ngx-cookie-service'], global['graphql/language/printer'], global['@aws-amplify/auth'], global.ng.common.http, global['@aws-amplify/core'], global.rxjs, global['@ng-idle/core'], global['@ng-idle/keepalive'], global.slip39));
+}(this, (function (exports, i0, i1, graphlib, _, nodeJose, i4, gql, moment_, core, context, retry, i2, gqlPrinter, Auth, i2$1, core$1, rxjs, i3, i4$1, slip39) { 'use strict';
 
     function _interopDefaultLegacy (e) { return e && typeof e === 'object' && 'default' in e ? e : { 'default': e }; }
 
@@ -532,6 +532,112 @@
         return LrBadStateException;
     }(LrException));
 
+    // promote everything to a promise.
+    function promiseAllMayAsync(values) {
+        if (!Array.isArray(values)) {
+            throw new Error('not array');
+        }
+        if (values.some(function (value) { return value === null || value === void 0 ? void 0 : value.then; })) {
+            var ret = Promise.all(values);
+            return ret;
+        }
+        else {
+            return values;
+        }
+    }
+    function remap(obj, values) {
+        var e_1, _b;
+        var ret = {};
+        try {
+            for (var _c = __values(Object.keys(obj).entries()), _d = _c.next(); !_d.done; _d = _c.next()) {
+                var _e = __read(_d.value, 2), i = _e[0], key = _e[1];
+                ret[key] = values[i];
+            }
+        }
+        catch (e_1_1) { e_1 = { error: e_1_1 }; }
+        finally {
+            try {
+                if (_d && !_d.done && (_b = _c.return)) _b.call(_c);
+            }
+            finally { if (e_1) throw e_1.error; }
+        }
+        return ret;
+    }
+    function mapValuesMayAsync(obj, 
+    // callback can either return a Promise, or a value.
+    // The Promise<any> type is redundant but it shows that it can return a promise
+    callback) {
+        var values = promiseAllMayAsync(Object.entries(obj).map(function (_b) {
+            var _c = __read(_b, 2), key = _c[0], value = _c[1];
+            return callback(value, key, obj);
+        }));
+        if (values.then) {
+            return values.then(function (resolvedValues) { return remap(obj, resolvedValues); });
+        }
+        else {
+            return remap(obj, values);
+        }
+    }
+    function mapValuesAsync(obj, 
+    // callback can either return a Promise, or a value.
+    // The Promise<any> type is redundant but it shows that it can return a promise
+    // By default, it returns the value without any process, so you can use
+    // this to simply wait for all promises in an object to resolve.
+    callback) {
+        var values = Promise.all(Object.entries(obj).map(function (_b) {
+            var _c = __read(_b, 2), key = _c[0], value = _c[1];
+            return callback ? callback(value, key, obj) : value;
+        }));
+        return values.then(function (resolvedValues) { return remap(obj, resolvedValues); });
+    }
+    /**
+     * Returns the defaultValue when value is undefined
+     * @param value The value to check
+     * @param defaultValue The value to return if value is undefined.
+     */
+    function undefinedDefault(value, defaultValue) {
+        return value === undefined ? defaultValue : value;
+    }
+    function getAccessJwtToken(auth) {
+        return __awaiter(this, void 0, void 0, function () {
+            var error_1;
+            return __generator(this, function (_b) {
+                switch (_b.label) {
+                    case 0:
+                        _b.trys.push([0, 2, , 3]);
+                        return [4 /*yield*/, auth.currentSession()];
+                    case 1: return [2 /*return*/, (_b.sent()).getAccessToken().getJwtToken()];
+                    case 2:
+                        error_1 = _b.sent();
+                        // The error thrown by Cognito is of type string.
+                        if (error_1 == 'No current user') {
+                            return [2 /*return*/, ''];
+                        }
+                        throw error_1;
+                    case 3: return [2 /*return*/];
+                }
+            });
+        });
+    }
+    function httpOptions(auth, config) {
+        var _a;
+        return __awaiter(this, void 0, void 0, function () {
+            var token, debugUsername;
+            return __generator(this, function (_b) {
+                switch (_b.label) {
+                    case 0: return [4 /*yield*/, getAccessJwtToken(auth)];
+                    case 1:
+                        token = _b.sent();
+                        debugUsername = (_a = config.debug) === null || _a === void 0 ? void 0 : _a.username;
+                        return [2 /*return*/, {
+                                withCredentials: true,
+                                headers: Object.assign(Object.assign({}, (token && { authorization: "Bearer " + token })), (debugUsername && { 'x-kc-dev-user': debugUsername })),
+                            }];
+                }
+            });
+        });
+    }
+
     // Ref: https://stackoverflow.com/questions/59735280/angular-8-moment-error-cannot-call-a-namespace-moment
     var moment = moment___namespace;
     var ServerTimeQuery = gql__default['default'](templateObject_1 || (templateObject_1 = __makeTemplateObject(["\n  query {\n    serverTime {\n      timestamp\n    }\n  }\n"], ["\n  query {\n    serverTime {\n      timestamp\n    }\n  }\n"])));
@@ -546,33 +652,13 @@
             this.offsetMs = null; // Millisecond offset of local clock.
             this.verified = false; // Verified with independent time source
         }
-        TimeService.prototype.getAccessToken = function () {
-            return __awaiter(this, void 0, void 0, function () {
-                var error_1;
-                return __generator(this, function (_a) {
-                    switch (_a.label) {
-                        case 0:
-                            _a.trys.push([0, 2, , 3]);
-                            return [4 /*yield*/, this.auth.currentAuthenticatedUser()];
-                        case 1: return [2 /*return*/, (_a.sent())
-                                .getSignInUserSession()
-                                .getAccessToken()
-                                .getJwtToken()];
-                        case 2:
-                            error_1 = _a.sent();
-                            return [2 /*return*/, '']; // Not authenticated
-                        case 3: return [2 /*return*/];
-                    }
-                });
-            });
-        };
         // Get time from independent source to confirm.
         TimeService.prototype.verifyCognito = function () {
             return __awaiter(this, void 0, void 0, function () {
                 var accessToken, response, now, verifyTime, serverTime, diff;
                 return __generator(this, function (_a) {
                     switch (_a.label) {
-                        case 0: return [4 /*yield*/, this.getAccessToken()];
+                        case 0: return [4 /*yield*/, getAccessJwtToken(this.auth)];
                         case 1:
                             accessToken = _a.sent();
                             if (!accessToken) {
@@ -652,7 +738,7 @@
                             if (!this.VERIFY_ENABLED) return [3 /*break*/, 3];
                             _a = !this.verified;
                             if (!_a) return [3 /*break*/, 2];
-                            return [4 /*yield*/, this.getAccessToken()];
+                            return [4 /*yield*/, getAccessJwtToken(this.auth)];
                         case 1:
                             _a = (_b.sent());
                             _b.label = 2;
@@ -1283,7 +1369,10 @@
         { type: WebCryptoService }
     ]; };
 
-    var LR_CONFIG = new i0.InjectionToken('LR.AUTH');
+    // The injection token string is set to be the same as the const stand name since you
+    // can possibly have different tokens with the same type (i.e. KcConfig). So it would not
+    // be appropriate to use "KcConfig" as the token string.
+    var KC_CONFIG = new i0.InjectionToken('KC_CONFIG');
     var RETRY_ERROR_CODES = [exports.LrApiErrorCode.CONCURRENT_ACCESS];
     var configureApollo = function (config, auth) {
         var defaultOptions = {
@@ -1302,25 +1391,13 @@
         var authLink = context.setContext(function (_, _b) {
             var headers = _b.headers;
             return __awaiter(void 0, void 0, void 0, function () {
-                var accessJwt, _a_1;
+                var options;
                 return __generator(this, function (_b) {
                     switch (_b.label) {
-                        case 0:
-                            accessJwt = null;
-                            _b.label = 1;
+                        case 0: return [4 /*yield*/, httpOptions(auth, config)];
                         case 1:
-                            _b.trys.push([1, 3, , 4]);
-                            return [4 /*yield*/, auth.currentSession()];
-                        case 2:
-                            accessJwt = (_b.sent()).getAccessToken();
-                            return [3 /*break*/, 4];
-                        case 3:
-                            _a_1 = _b.sent();
-                            console.log('User not signed in');
-                            return [3 /*break*/, 4];
-                        case 4: return [2 /*return*/, {
-                                headers: Object.assign(Object.assign({}, headers), { authorization: accessJwt ? "Bearer " + accessJwt.jwtToken : '' }),
-                            }];
+                            options = _b.sent();
+                            return [2 /*return*/, Object.assign(Object.assign({}, options), { headers: Object.assign(Object.assign({}, headers), options.headers) })];
                     }
                 });
             });
@@ -1723,14 +1800,14 @@
         };
         return KeyService;
     }());
-    KeyService.ɵprov = i0.ɵɵdefineInjectable({ factory: function KeyService_Factory() { return new KeyService(i0.ɵɵinject(LR_CONFIG), i0.ɵɵinject(PersistService)); }, token: KeyService, providedIn: "root" });
+    KeyService.ɵprov = i0.ɵɵdefineInjectable({ factory: function KeyService_Factory() { return new KeyService(i0.ɵɵinject(KC_CONFIG), i0.ɵɵinject(PersistService)); }, token: KeyService, providedIn: "root" });
     KeyService.decorators = [
         { type: i0.Injectable, args: [{
                     providedIn: 'root',
                 },] }
     ];
     KeyService.ctorParameters = function () { return [
-        { type: undefined, decorators: [{ type: i0.Inject, args: [LR_CONFIG,] }] },
+        { type: undefined, decorators: [{ type: i0.Inject, args: [KC_CONFIG,] }] },
         { type: PersistService }
     ]; };
 
@@ -2381,76 +2458,6 @@
         };
     }
 
-    /* eslint-disable @typescript-eslint/no-explicit-any */
-    // Promise.all always returns a promise, even if all the values are not async.
-    // During processing of deep hierarchies of nested objects we don't always need to
-    // promote everything to a promise.
-    function promiseAllMayAsync(values) {
-        if (!Array.isArray(values)) {
-            throw new Error('not array');
-        }
-        if (values.some(function (value) { return value === null || value === void 0 ? void 0 : value.then; })) {
-            var ret = Promise.all(values);
-            return ret;
-        }
-        else {
-            return values;
-        }
-    }
-    function remap(obj, values) {
-        var e_1, _a;
-        var ret = {};
-        try {
-            for (var _b = __values(Object.keys(obj).entries()), _c = _b.next(); !_c.done; _c = _b.next()) {
-                var _d = __read(_c.value, 2), i = _d[0], key = _d[1];
-                ret[key] = values[i];
-            }
-        }
-        catch (e_1_1) { e_1 = { error: e_1_1 }; }
-        finally {
-            try {
-                if (_c && !_c.done && (_a = _b.return)) _a.call(_b);
-            }
-            finally { if (e_1) throw e_1.error; }
-        }
-        return ret;
-    }
-    function mapValuesMayAsync(obj, 
-    // callback can either return a Promise, or a value.
-    // The Promise<any> type is redundant but it shows that it can return a promise
-    callback) {
-        var values = promiseAllMayAsync(Object.entries(obj).map(function (_a) {
-            var _b = __read(_a, 2), key = _b[0], value = _b[1];
-            return callback(value, key, obj);
-        }));
-        if (values.then) {
-            return values.then(function (resolvedValues) { return remap(obj, resolvedValues); });
-        }
-        else {
-            return remap(obj, values);
-        }
-    }
-    function mapValuesAsync(obj, 
-    // callback can either return a Promise, or a value.
-    // The Promise<any> type is redundant but it shows that it can return a promise
-    // By default, it returns the value without any process, so you can use
-    // this to simply wait for all promises in an object to resolve.
-    callback) {
-        var values = Promise.all(Object.entries(obj).map(function (_a) {
-            var _b = __read(_a, 2), key = _b[0], value = _b[1];
-            return callback ? callback(value, key, obj) : value;
-        }));
-        return values.then(function (resolvedValues) { return remap(obj, resolvedValues); });
-    }
-    /**
-     * Returns the defaultValue when value is undefined
-     * @param value The value to check
-     * @param defaultValue The value to return if value is undefined.
-     */
-    function undefinedDefault(value, defaultValue) {
-        return value === undefined ? defaultValue : value;
-    }
-
     var DefaultProcessorOptions = {
         hasKeys: true,
     };
@@ -3963,25 +3970,21 @@
         };
         IdleService.prototype.keepalivePost = function () {
             return __awaiter(this, void 0, void 0, function () {
-                var cognitoUser, keepaliveResult;
-                return __generator(this, function (_a) {
-                    switch (_a.label) {
-                        case 0: return [4 /*yield*/, this.auth.currentAuthenticatedUser()];
-                        case 1:
-                            cognitoUser = _a.sent();
-                            return [4 /*yield*/, this.http
-                                    .post(this.config.authUrl + "auth/keepalive/", null, {
-                                    withCredentials: true,
-                                    headers: {
-                                        Authorization: "Bearer " + cognitoUser
-                                            .getSignInUserSession()
-                                            .getAccessToken()
-                                            .getJwtToken(),
-                                    },
-                                })
-                                    .toPromise()];
+                var keepaliveResult, _a, _b, _c;
+                return __generator(this, function (_d) {
+                    switch (_d.label) {
+                        case 0:
+                            _b = (_a = this.http)
+                                .post;
+                            _c = [this.config.authUrl + "auth/keepalive/", null];
+                            // /auth/keepalive/ will be extending the sessions cookie.
+                            return [4 /*yield*/, httpOptions(this.auth, this.config)];
+                        case 1: return [4 /*yield*/, _b.apply(_a, _c.concat([
+                                // /auth/keepalive/ will be extending the sessions cookie.
+                                _d.sent()]))
+                                .toPromise()];
                         case 2:
-                            keepaliveResult = _a.sent();
+                            keepaliveResult = _d.sent();
                             return [2 /*return*/, {
                                     keepaliveResult: keepaliveResult,
                                     expiresAfterSeconds: this.idle.getIdle() +
@@ -4069,14 +4072,14 @@
         };
         return IdleService;
     }());
-    IdleService.ɵprov = i0.ɵɵdefineInjectable({ factory: function IdleService_Factory() { return new IdleService(i0.ɵɵinject(LR_CONFIG), i0.ɵɵinject(i2$1.HttpClient), i0.ɵɵinject(i3.Idle), i0.ɵɵinject(i4$1.Keepalive), i0.ɵɵinject(KeyService), i0.ɵɵinject(i4.AuthClass)); }, token: IdleService, providedIn: "root" });
+    IdleService.ɵprov = i0.ɵɵdefineInjectable({ factory: function IdleService_Factory() { return new IdleService(i0.ɵɵinject(KC_CONFIG), i0.ɵɵinject(i2$1.HttpClient), i0.ɵɵinject(i3.Idle), i0.ɵɵinject(i4$1.Keepalive), i0.ɵɵinject(KeyService), i0.ɵɵinject(i4.AuthClass)); }, token: IdleService, providedIn: "root" });
     IdleService.decorators = [
         { type: i0.Injectable, args: [{
                     providedIn: 'root',
                 },] }
     ];
     IdleService.ctorParameters = function () { return [
-        { type: undefined, decorators: [{ type: i0.Inject, args: [LR_CONFIG,] }] },
+        { type: undefined, decorators: [{ type: i0.Inject, args: [KC_CONFIG,] }] },
         { type: i2$1.HttpClient },
         { type: i3.Idle },
         { type: i4$1.Keepalive },
@@ -4992,14 +4995,14 @@
         };
         return ProfileService;
     }());
-    ProfileService.ɵprov = i0.ɵɵdefineInjectable({ factory: function ProfileService_Factory() { return new ProfileService(i0.ɵɵinject(LR_CONFIG), i0.ɵɵinject(i2$1.HttpClient), i0.ɵɵinject(LrApolloService), i0.ɵɵinject(KeyService), i0.ɵɵinject(KeyMetaService), i0.ɵɵinject(KeyGraphService), i0.ɵɵinject(EncryptionService)); }, token: ProfileService, providedIn: "root" });
+    ProfileService.ɵprov = i0.ɵɵdefineInjectable({ factory: function ProfileService_Factory() { return new ProfileService(i0.ɵɵinject(KC_CONFIG), i0.ɵɵinject(i2$1.HttpClient), i0.ɵɵinject(LrApolloService), i0.ɵɵinject(KeyService), i0.ɵɵinject(KeyMetaService), i0.ɵɵinject(KeyGraphService), i0.ɵɵinject(EncryptionService)); }, token: ProfileService, providedIn: "root" });
     ProfileService.decorators = [
         { type: i0.Injectable, args: [{
                     providedIn: 'root',
                 },] }
     ];
     ProfileService.ctorParameters = function () { return [
-        { type: undefined, decorators: [{ type: i0.Inject, args: [LR_CONFIG,] }] },
+        { type: undefined, decorators: [{ type: i0.Inject, args: [KC_CONFIG,] }] },
         { type: i2$1.HttpClient },
         { type: LrApolloService },
         { type: KeyService },
@@ -5021,7 +5024,7 @@
         return PasswordCheck;
     }());
     var PasswordService = /** @class */ (function () {
-        function PasswordService(config, http, apollo, auth, profileService, keyFactory, encryptionService, keyGraph, webCryptoService, idleService) {
+        function PasswordService(config, http, apollo, auth, profileService, keyFactory, encryptionService, keyGraph, webCryptoService) {
             this.config = config;
             this.http = http;
             this.apollo = apollo;
@@ -5031,7 +5034,6 @@
             this.encryptionService = encryptionService;
             this.keyGraph = keyGraph;
             this.webCryptoService = webCryptoService;
-            this.idleService = idleService;
             this.CLIENT_NONCE_LENGTH = 32;
         }
         PasswordService.prototype.checkPassword = function (plainPassword) {
@@ -5213,7 +5215,7 @@
                             // a network timeout for example. But we don't know if it's the response that timed out and
                             // the idp password change was actually carried out. So we have to be extra conservative and
                             // only act on a clear success. Otherwise we go into recover mode.
-                            return [4 /*yield*/, this.changePasswordComplete(cognitoUser.getSignInUserSession().getAccessToken().getJwtToken(), true, token)];
+                            return [4 /*yield*/, this.changePasswordComplete({ useNewPassword: true, token: token })];
                         case 9:
                             // --Potential Failure Point 3--
                             // IdP password change
@@ -5227,17 +5229,20 @@
                 });
             });
         };
-        PasswordService.prototype.changePasswordComplete = function (accessToken, useNewPassword, token) {
-            if (token === void 0) { token = null; }
+        PasswordService.prototype.changePasswordComplete = function (options) {
             return __awaiter(this, void 0, void 0, function () {
-                return __generator(this, function (_a) {
-                    return [2 /*return*/, this.http
-                            .post(this.config.authUrl + "users/password-change-complete/", Object.assign({ use_new_password: useNewPassword }, (token && { token: token })), {
-                            headers: {
-                                Authorization: "Bearer " + accessToken,
-                            },
-                        })
-                            .toPromise()];
+                var useNewPassword, token, _a, _b, _c;
+                return __generator(this, function (_d) {
+                    switch (_d.label) {
+                        case 0:
+                            useNewPassword = options.useNewPassword, token = options.token;
+                            _b = (_a = this.http)
+                                .post;
+                            _c = [this.config.authUrl + "users/password-change-complete/", Object.assign({ use_new_password: useNewPassword }, (token && { token: token }))];
+                            return [4 /*yield*/, httpOptions(this.auth, this.config)];
+                        case 1: return [2 /*return*/, _b.apply(_a, _c.concat([_d.sent()]))
+                                .toPromise()];
+                    }
                 });
             });
         };
@@ -5390,14 +5395,14 @@
         };
         return PasswordService;
     }());
-    PasswordService.ɵprov = i0.ɵɵdefineInjectable({ factory: function PasswordService_Factory() { return new PasswordService(i0.ɵɵinject(LR_CONFIG), i0.ɵɵinject(i2$1.HttpClient), i0.ɵɵinject(LrApolloService), i0.ɵɵinject(i4.AuthClass), i0.ɵɵinject(ProfileService), i0.ɵɵinject(KeyFactoryService), i0.ɵɵinject(EncryptionService), i0.ɵɵinject(KeyGraphService), i0.ɵɵinject(WebCryptoService), i0.ɵɵinject(IdleService)); }, token: PasswordService, providedIn: "root" });
+    PasswordService.ɵprov = i0.ɵɵdefineInjectable({ factory: function PasswordService_Factory() { return new PasswordService(i0.ɵɵinject(KC_CONFIG), i0.ɵɵinject(i2$1.HttpClient), i0.ɵɵinject(LrApolloService), i0.ɵɵinject(i4.AuthClass), i0.ɵɵinject(ProfileService), i0.ɵɵinject(KeyFactoryService), i0.ɵɵinject(EncryptionService), i0.ɵɵinject(KeyGraphService), i0.ɵɵinject(WebCryptoService)); }, token: PasswordService, providedIn: "root" });
     PasswordService.decorators = [
         { type: i0.Injectable, args: [{
                     providedIn: 'root',
                 },] }
     ];
     PasswordService.ctorParameters = function () { return [
-        { type: undefined, decorators: [{ type: i0.Inject, args: [LR_CONFIG,] }] },
+        { type: undefined, decorators: [{ type: i0.Inject, args: [KC_CONFIG,] }] },
         { type: i2$1.HttpClient },
         { type: LrApolloService },
         { type: i4.AuthClass },
@@ -5405,8 +5410,7 @@
         { type: KeyFactoryService },
         { type: EncryptionService },
         { type: KeyGraphService },
-        { type: WebCryptoService },
-        { type: IdleService }
+        { type: WebCryptoService }
     ]; };
 
     var TP_PASSWORD_RESET_CLIENT_NONCE_LENGTH = 32;
@@ -6193,7 +6197,7 @@
         return function () { return authService.initialise(); };
     };
     var LifeReadyAuthService = /** @class */ (function () {
-        function LifeReadyAuthService(config, auth, keyFactory, keyService, profileService, keyGraphService, passwordService, idleService, lrGraphQL, tpPasswordResetProcessorService, persistService, encryptionService, assemblyController) {
+        function LifeReadyAuthService(config, auth, keyFactory, keyService, profileService, keyGraphService, passwordService, idleService, lrGraphQL, tpPasswordResetProcessorService, persistService, encryptionService, assemblyController, http) {
             this.config = config;
             this.auth = auth;
             this.keyFactory = keyFactory;
@@ -6207,11 +6211,17 @@
             this.persistService = persistService;
             this.encryptionService = encryptionService;
             this.assemblyController = assemblyController;
+            this.http = http;
             // eslint-disable-next-line @typescript-eslint/no-explicit-any
             this.hubSubject = new rxjs.ReplaySubject(1);
             // Could use rxjs observables here. But trying to have kc-client use as little angular
             // features as possible. Rxjs is not used anywhere else in kc-client.
             this.logoutListeners = new Set();
+            if (!i0.isDevMode()) {
+                if (this.config.debug != null) {
+                    throw new LrBadLogicException('In production mode, "config.debug" must be set to null');
+                }
+            }
         }
         LifeReadyAuthService.prototype.initialise = function () {
             return __awaiter(this, void 0, void 0, function () {
@@ -6222,6 +6232,84 @@
                 });
             });
         };
+        LifeReadyAuthService.prototype.debugLogin = function (username, password) {
+            // This will fail if debug is null. But when debug is null, this function
+            // should not be called.
+            this.config.debug.username = username;
+            return this.debugLoadUser(password);
+        };
+        // ------------------------------------------------------------------------
+        // ------------------------------------------------------------------------
+        // ------------------------------------------------------------------------
+        /**
+         * Login using the server side session method.
+         */
+        LifeReadyAuthService.prototype.debugLoginUsingSession = function (username) {
+            return this.http
+                .get(this.config.apiUrl +
+                'debug_only/users/login/?username=' +
+                encodeURIComponent(username), {
+                // Non-obvious alert: if you want the cookies to be set, you must use the
+                // "withCredentials" header. I would have thought the withCredentials header
+                // is only used to send the cookies with the requests. But, if you don't include
+                // the "withCredentials" header, the cookies in the response DOES NOT get set!
+                //
+                // ref: https://github.com/github/fetch/issues/386#issuecomment-243229388
+                withCredentials: true,
+            })
+                .toPromise();
+        };
+        LifeReadyAuthService.prototype.debugLoadUser = function (password) {
+            return __awaiter(this, void 0, void 0, function () {
+                var _b, currentUser, contactCard, userPlans, passKey, masterKey, _c, _d, _e, _f;
+                return __generator(this, function (_g) {
+                    switch (_g.label) {
+                        case 0: return [4 /*yield*/, this.profileService.getCurrentUser()];
+                        case 1:
+                            _b = _g.sent(), currentUser = _b.currentUser, contactCard = _b.contactCard, userPlans = _b.userPlans;
+                            return [4 /*yield*/, this.keyFactory.derivePassKey(Object.assign({ password: password }, currentUser.currentUserKey.passKey.passKeyParams))];
+                        case 2:
+                            passKey = (_g.sent()).jwk;
+                            return [4 /*yield*/, this.keyGraphService.unwrapWithPassKey(currentUser.currentUserKey.passKey.id, passKey, currentUser.currentUserKey.masterKey.id)];
+                        case 3:
+                            masterKey = _g.sent();
+                            return [4 /*yield*/, this.idleService.persistMasterKey(masterKey)];
+                        case 4:
+                            _g.sent();
+                            return [4 /*yield*/, this.keyGraphService.populateKeys(currentUser.currentUserKey)];
+                        case 5:
+                            _g.sent();
+                            _c = {
+                                id: currentUser.id,
+                                sub: 'DEBUG_MODE',
+                                username: currentUser.username,
+                                currentUserKey: currentUser.currentUserKey,
+                                email: 'DEBUG_MODE',
+                                emailVerified: false,
+                                phone: 'DEBUG_MODE',
+                                phoneVerified: false
+                            };
+                            _e = (_d = Object).assign;
+                            _f = [{}];
+                            return [4 /*yield*/, this.profileService.decryptContactCard(contactCard)];
+                        case 6: return [2 /*return*/, (_c.contactCard = _e.apply(_d, _f.concat([(_g.sent())])),
+                                _c.userDelete = currentUser.userDelete,
+                                _c.userPlans = userPlans,
+                                _c.hasTPVaultAccess = this.mapTPVaultAccess(currentUser.features),
+                                _c.features = currentUser.features,
+                                _c.sessionEncryptionKey = currentUser.sessionEncryptionKey,
+                                _c)];
+                    }
+                });
+            });
+        };
+        LifeReadyAuthService.prototype.getAccessJwtToken = function () {
+            return __awaiter(this, void 0, void 0, function () {
+                return __generator(this, function (_b) {
+                    return [2 /*return*/, getAccessJwtToken(this.auth)];
+                });
+            });
+        };
         LifeReadyAuthService.prototype.importPassword = function (plainPassword) {
             return this.keyFactory.importPassword(plainPassword);
         };
@@ -6459,16 +6547,13 @@
         };
         LifeReadyAuthService.prototype.handlePasswordRecovery = function (user) {
             return __awaiter(this, void 0, void 0, function () {
-                var jwtToken;
                 return __generator(this, function (_b) {
                     switch (_b.label) {
                         case 0:
                             if (!(user.recoveryStatus !== exports.RecoveryStatus.NONE)) return [3 /*break*/, 2];
-                            jwtToken = user
-                                .getSignInUserSession()
-                                .getAccessToken()
-                                .getJwtToken();
-                            return [4 /*yield*/, this.passwordService.changePasswordComplete(jwtToken, user.recoveryStatus === exports.RecoveryStatus.NEW_PASSWORD)];
+                            return [4 /*yield*/, this.passwordService.changePasswordComplete({
+                                    useNewPassword: user.recoveryStatus === exports.RecoveryStatus.NEW_PASSWORD,
+                                })];
                         case 1:
                             _b.sent();
                             _b.label = 2;
@@ -6584,7 +6669,6 @@
                                 sub: this.getUserAttribute('sub', userAttributes),
                                 username: currentUser.username,
                                 currentUserKey: currentUser.currentUserKey,
-                                getAccessJwtToken: function () { return cognitoUser.getSignInUserSession().getAccessToken().getJwtToken(); },
                                 email: this.getUserAttribute('email', userAttributes),
                                 emailVerified: this.getUserAttribute('email_verified', userAttributes) === 'true',
                                 phone: this.getUserAttribute('phone_number', userAttributes),
@@ -6609,6 +6693,7 @@
             return this.hubSubject;
         };
         LifeReadyAuthService.prototype.logout = function () {
+            var _a;
             return __awaiter(this, void 0, void 0, function () {
                 return __generator(this, function (_b) {
                     switch (_b.label) {
@@ -6624,6 +6709,9 @@
                             return [4 /*yield*/, Promise.all([this.auth.signOut(), this.profileService.signOut()])];
                         case 2:
                             _b.sent();
+                            if ((_a = this.config.debug) === null || _a === void 0 ? void 0 : _a.username) {
+                                this.config.debug.username = null;
+                            }
                             return [2 /*return*/];
                     }
                 });
@@ -6845,14 +6933,14 @@
         };
         return LifeReadyAuthService;
     }());
-    LifeReadyAuthService.ɵprov = i0.ɵɵdefineInjectable({ factory: function LifeReadyAuthService_Factory() { return new LifeReadyAuthService(i0.ɵɵinject(LR_CONFIG), i0.ɵɵinject(i4.AuthClass), i0.ɵɵinject(KeyFactoryService), i0.ɵɵinject(KeyService), i0.ɵɵinject(ProfileService), i0.ɵɵinject(KeyGraphService), i0.ɵɵinject(PasswordService), i0.ɵɵinject(IdleService), i0.ɵɵinject(exports.ɵf), i0.ɵɵinject(exports.ɵg), i0.ɵɵinject(PersistService), i0.ɵɵinject(EncryptionService), i0.ɵɵinject(exports.ɵi)); }, token: LifeReadyAuthService, providedIn: "root" });
+    LifeReadyAuthService.ɵprov = i0.ɵɵdefineInjectable({ factory: function LifeReadyAuthService_Factory() { return new LifeReadyAuthService(i0.ɵɵinject(KC_CONFIG), i0.ɵɵinject(i4.AuthClass), i0.ɵɵinject(KeyFactoryService), i0.ɵɵinject(KeyService), i0.ɵɵinject(ProfileService), i0.ɵɵinject(KeyGraphService), i0.ɵɵinject(PasswordService), i0.ɵɵinject(IdleService), i0.ɵɵinject(exports.ɵf), i0.ɵɵinject(exports.ɵg), i0.ɵɵinject(PersistService), i0.ɵɵinject(EncryptionService), i0.ɵɵinject(exports.ɵi), i0.ɵɵinject(i2$1.HttpClient)); }, token: LifeReadyAuthService, providedIn: "root" });
     LifeReadyAuthService.decorators = [
         { type: i0.Injectable, args: [{
                     providedIn: 'root',
                 },] }
     ];
     LifeReadyAuthService.ctorParameters = function () { return [
-        { type: undefined, decorators: [{ type: i0.Inject, args: [LR_CONFIG,] }] },
+        { type: undefined, decorators: [{ type: i0.Inject, args: [KC_CONFIG,] }] },
         { type: i4.AuthClass },
         { type: KeyFactoryService },
         { type: KeyService },
@@ -6864,7 +6952,8 @@
         { type: exports.ɵg },
         { type: PersistService },
         { type: EncryptionService },
-        { type: exports.ɵi }
+        { type: exports.ɵi },
+        { type: i2$1.HttpClient }
     ]; };
 
     (function (FileType) {
@@ -7790,10 +7879,10 @@
     ], exports.ContactCard2Service);
 
     var FileUploadService = /** @class */ (function () {
-        function FileUploadService(config, http, lrAuth) {
+        function FileUploadService(config, http, auth) {
             this.config = config;
             this.http = http;
-            this.lrAuth = lrAuth;
+            this.auth = auth;
         }
         FileUploadService.prototype.downloadEncryptedFile = function (fileStateNodeId) {
             return __awaiter(this, void 0, void 0, function () {
@@ -7810,26 +7899,22 @@
         };
         FileUploadService.prototype.downloadEncryptedFile2 = function (fileStateNodeId) {
             return __awaiter(this, void 0, void 0, function () {
-                var url, content, _a, _b, _c, _d, _e, _f;
-                return __generator(this, function (_g) {
-                    switch (_g.label) {
+                var url, content, _a, _b, _c, _d, _e, _f, _g, _h;
+                return __generator(this, function (_j) {
+                    switch (_j.label) {
                         case 0:
                             url = this.config.apiUrl + "files/download/?file_state_node_id=" + fileStateNodeId;
                             _b = (_a = this.http)
                                 .get;
                             _c = [url];
-                            _d = {
-                                responseType: 'text'
-                            };
-                            _e = {};
-                            _f = "Bearer ";
-                            return [4 /*yield*/, this.lrAuth.getUser()];
-                        case 1: return [4 /*yield*/, _b.apply(_a, _c.concat([(_d.headers = (_e.Authorization = _f + (_g.sent()).getAccessJwtToken(),
-                                    _e),
-                                    _d)]))
+                            _e = (_d = Object).assign;
+                            _g = (_f = Object).assign;
+                            _h = [{}];
+                            return [4 /*yield*/, httpOptions(this.auth, this.config)];
+                        case 1: return [4 /*yield*/, _b.apply(_a, _c.concat([_e.apply(_d, [_g.apply(_f, _h.concat([(_j.sent())])), { responseType: 'text' }])]))
                                 .toPromise()];
                         case 2:
-                            content = _g.sent();
+                            content = _j.sent();
                             return [2 /*return*/, content];
                     }
                 });
@@ -7851,9 +7936,9 @@
         };
         FileUploadService.prototype.uploadEncryptedFile = function (options) {
             return __awaiter(this, void 0, void 0, function () {
-                var encryptedContent, fileName, formData, content_resource, _a, _b, _c, _d, _e, _f;
-                return __generator(this, function (_g) {
-                    switch (_g.label) {
+                var encryptedContent, fileName, formData, content_resource, _a, _b, _c;
+                return __generator(this, function (_d) {
+                    switch (_d.label) {
                         case 0:
                             encryptedContent = options.encryptedContent, fileName = options.fileName;
                             formData = new FormData();
@@ -7861,16 +7946,11 @@
                             _b = (_a = this.http)
                                 .post;
                             _c = [this.config.apiUrl + "files/upload/", formData];
-                            _d = {};
-                            _e = {};
-                            _f = "Bearer ";
-                            return [4 /*yield*/, this.lrAuth.getUser()];
-                        case 1: return [4 /*yield*/, _b.apply(_a, _c.concat([(_d.headers = (_e.Authorization = _f + (_g.sent()).getAccessJwtToken(),
-                                    _e),
-                                    _d)]))
+                            return [4 /*yield*/, httpOptions(this.auth, this.config)];
+                        case 1: return [4 /*yield*/, _b.apply(_a, _c.concat([_d.sent()]))
                                 .toPromise()];
                         case 2:
-                            content_resource = (_g.sent()).content_resource;
+                            content_resource = (_d.sent()).content_resource;
                             return [2 /*return*/, content_resource];
                     }
                 });
@@ -7878,16 +7958,16 @@
         };
         return FileUploadService;
     }());
-    FileUploadService.ɵprov = i0.ɵɵdefineInjectable({ factory: function FileUploadService_Factory() { return new FileUploadService(i0.ɵɵinject(LR_CONFIG), i0.ɵɵinject(i2$1.HttpClient), i0.ɵɵinject(LifeReadyAuthService)); }, token: FileUploadService, providedIn: "root" });
+    FileUploadService.ɵprov = i0.ɵɵdefineInjectable({ factory: function FileUploadService_Factory() { return new FileUploadService(i0.ɵɵinject(KC_CONFIG), i0.ɵɵinject(i2$1.HttpClient), i0.ɵɵinject(i4.AuthClass)); }, token: FileUploadService, providedIn: "root" });
     FileUploadService.decorators = [
         { type: i0.Injectable, args: [{
                     providedIn: 'root',
                 },] }
     ];
     FileUploadService.ctorParameters = function () { return [
-        { type: undefined, decorators: [{ type: i0.Inject, args: [LR_CONFIG,] }] },
+        { type: undefined, decorators: [{ type: i0.Inject, args: [KC_CONFIG,] }] },
         { type: i2$1.HttpClient },
-        { type: LifeReadyAuthService }
+        { type: i4.AuthClass }
     ]; };
 
     var LockFragment = gqlTyped(templateObject_1$f || (templateObject_1$f = __makeTemplateObject(["\nfragment LockFragment on LockField {\n  created\n  modified\n  version\n  expiryTime\n  state\n}"], ["\nfragment LockFragment on LockField {\n  created\n  modified\n  version\n  expiryTime\n  state\n}"])));
@@ -10732,14 +10812,14 @@
         };
         return LbopService;
     }());
-    LbopService.ɵprov = i0.ɵɵdefineInjectable({ factory: function LbopService_Factory() { return new LbopService(i0.ɵɵinject(LR_CONFIG), i0.ɵɵinject(i2$1.HttpClient), i0.ɵɵinject(LrApolloService), i0.ɵɵinject(i4.AuthClass), i0.ɵɵinject(LifeReadyAuthService), i0.ɵɵinject(KeyFactoryService), i0.ɵɵinject(KeyService), i0.ɵɵinject(EncryptionService), i0.ɵɵinject(KeyGraphService), i0.ɵɵinject(PasswordService)); }, token: LbopService, providedIn: "root" });
+    LbopService.ɵprov = i0.ɵɵdefineInjectable({ factory: function LbopService_Factory() { return new LbopService(i0.ɵɵinject(KC_CONFIG), i0.ɵɵinject(i2$1.HttpClient), i0.ɵɵinject(LrApolloService), i0.ɵɵinject(i4.AuthClass), i0.ɵɵinject(LifeReadyAuthService), i0.ɵɵinject(KeyFactoryService), i0.ɵɵinject(KeyService), i0.ɵɵinject(EncryptionService), i0.ɵɵinject(KeyGraphService), i0.ɵɵinject(PasswordService)); }, token: LbopService, providedIn: "root" });
     LbopService.decorators = [
         { type: i0.Injectable, args: [{
                     providedIn: 'root',
                 },] }
     ];
     LbopService.ctorParameters = function () { return [
-        { type: undefined, decorators: [{ type: i0.Inject, args: [LR_CONFIG,] }] },
+        { type: undefined, decorators: [{ type: i0.Inject, args: [KC_CONFIG,] }] },
         { type: i2$1.HttpClient },
         { type: LrApolloService },
         { type: i4.AuthClass },
@@ -10760,7 +10840,7 @@
                 ngModule: LifeReadyModule,
                 providers: [
                     {
-                        provide: LR_CONFIG,
+                        provide: KC_CONFIG,
                         useValue: config,
                     },
                     {
@@ -10770,7 +10850,7 @@
                     {
                         provide: i0.APP_INITIALIZER,
                         useFactory: configureAmplifyAuth,
-                        deps: [LR_CONFIG, i4.AuthClass],
+                        deps: [KC_CONFIG, i4.AuthClass],
                         multi: true,
                     },
                     {
@@ -10782,7 +10862,7 @@
                     {
                         provide: i1.APOLLO_OPTIONS,
                         useFactory: configureApollo,
-                        deps: [LR_CONFIG, i4.AuthClass],
+                        deps: [KC_CONFIG, i4.AuthClass],
                     },
                 ],
             };
@@ -12843,14 +12923,14 @@
         };
         return RegisterService;
     }());
-    RegisterService.ɵprov = i0.ɵɵdefineInjectable({ factory: function RegisterService_Factory() { return new RegisterService(i0.ɵɵinject(LR_CONFIG), i0.ɵɵinject(i4.AuthClass), i0.ɵɵinject(i2$1.HttpClient), i0.ɵɵinject(KeyFactoryService), i0.ɵɵinject(EncryptionService), i0.ɵɵinject(PasswordService)); }, token: RegisterService, providedIn: "root" });
+    RegisterService.ɵprov = i0.ɵɵdefineInjectable({ factory: function RegisterService_Factory() { return new RegisterService(i0.ɵɵinject(KC_CONFIG), i0.ɵɵinject(i4.AuthClass), i0.ɵɵinject(i2$1.HttpClient), i0.ɵɵinject(KeyFactoryService), i0.ɵɵinject(EncryptionService), i0.ɵɵinject(PasswordService)); }, token: RegisterService, providedIn: "root" });
     RegisterService.decorators = [
         { type: i0.Injectable, args: [{
                     providedIn: 'root',
                 },] }
     ];
     RegisterService.ctorParameters = function () { return [
-        { type: undefined, decorators: [{ type: i0.Inject, args: [LR_CONFIG,] }] },
+        { type: undefined, decorators: [{ type: i0.Inject, args: [KC_CONFIG,] }] },
         { type: i4.AuthClass },
         { type: i2$1.HttpClient },
         { type: KeyFactoryService },
@@ -14293,7 +14373,7 @@
         };
         return TpPasswordResetUserService;
     }(LrService));
-    exports.TpPasswordResetUserService.ɵprov = i0.ɵɵdefineInjectable({ factory: function TpPasswordResetUserService_Factory() { return new exports.TpPasswordResetUserService(i0.ɵɵinject(i0.NgZone), i0.ɵɵinject(i0.INJECTOR), i0.ɵɵinject(LR_CONFIG), i0.ɵɵinject(KeyFactoryService), i0.ɵɵinject(EncryptionService), i0.ɵɵinject(PasswordService), i0.ɵɵinject(i2$1.HttpClient), i0.ɵɵinject(i4.AuthClass)); }, token: exports.TpPasswordResetUserService, providedIn: "root" });
+    exports.TpPasswordResetUserService.ɵprov = i0.ɵɵdefineInjectable({ factory: function TpPasswordResetUserService_Factory() { return new exports.TpPasswordResetUserService(i0.ɵɵinject(i0.NgZone), i0.ɵɵinject(i0.INJECTOR), i0.ɵɵinject(KC_CONFIG), i0.ɵɵinject(KeyFactoryService), i0.ɵɵinject(EncryptionService), i0.ɵɵinject(PasswordService), i0.ɵɵinject(i2$1.HttpClient), i0.ɵɵinject(i4.AuthClass)); }, token: exports.TpPasswordResetUserService, providedIn: "root" });
     exports.TpPasswordResetUserService.decorators = [
         { type: i0.Injectable, args: [{
                     providedIn: 'root',
@@ -14302,7 +14382,7 @@
     exports.TpPasswordResetUserService.ctorParameters = function () { return [
         { type: i0.NgZone },
         { type: i0.Injector },
-        { type: undefined, decorators: [{ type: i0.Inject, args: [LR_CONFIG,] }] },
+        { type: undefined, decorators: [{ type: i0.Inject, args: [KC_CONFIG,] }] },
         { type: KeyFactoryService },
         { type: EncryptionService },
         { type: PasswordService },
@@ -14929,6 +15009,7 @@
     exports.GetVaultsQuery = GetVaultsQuery;
     exports.IdleService = IdleService;
     exports.InitiateOtkMutation = InitiateOtkMutation;
+    exports.KC_CONFIG = KC_CONFIG;
     exports.KeyExchangeFields = KeyExchangeFields;
     exports.KeyExchangeQuery = KeyExchangeQuery;
     exports.KeyExchangeService = KeyExchangeService;
@@ -14936,7 +15017,6 @@
     exports.KeyExchangesQuery = KeyExchangesQuery;
     exports.KeyGraphField = KeyGraphField;
     exports.KeyGraphFragment = KeyGraphFragment;
-    exports.LR_CONFIG = LR_CONFIG;
     exports.LbopQuery = LbopQuery;
     exports.LbopService = LbopService;
     exports.LbopsQuery = LbopsQuery;