@medplum/core 2.0.22 → 2.0.23

package/dist/esm/client.mjs

@@ -3,7 +3,7 @@ import { LRUCache } from './cache.mjs';
 import { getRandomString, encryptSHA256 } from './crypto.mjs';
 import { EventTarget } from './eventtarget.mjs';
 import { parseJWTPayload } from './jwt.mjs';
-import { OperationOutcomeError, notFound, normalizeOperationOutcome, isOk } from './outcomes.mjs';
+import { OperationOutcomeError, notFound, normalizeOperationOutcome, isOk, badRequest } from './outcomes.mjs';
 import { ReadablePromise } from './readablepromise.mjs';
 import { ClientStorage } from './storage.mjs';
 import { globalSchema, indexStructureDefinition, indexSearchParameter } from './types.mjs';
@@ -11,7 +11,7 @@ import { createReference, arrayBufferToBase64 } from './utils.mjs';
 
 // PKCE auth based on:
 // https://aws.amazon.com/blogs/security/how-to-add-authentication-single-page-web-application-with-amazon-cognito-oauth2-implementation/
-const MEDPLUM_VERSION = "2.0.22-f51ac45a" ;
+const MEDPLUM_VERSION = "2.0.23-b244eeae" ;
 const DEFAULT_BASE_URL = 'https://api.medplum.com/';
 const DEFAULT_RESOURCE_CACHE_SIZE = 1000;
 const DEFAULT_CACHE_TIME = 60000; // 60 seconds
@@ -150,6 +150,16 @@ class MedplumClient extends EventTarget {
     getBaseUrl() {
         return this.baseUrl;
     }
+    /**
+     * Returns the current authorize URL.
+     * By default, this is set to `https://api.medplum.com/oauth2/authorize`.
+     * This can be overridden by setting the `authorizeUrl` option when creating the client.
+     * @category HTTP
+     * @returns The current authorize URL.
+     */
+    getAuthorizeUrl() {
+        return this.authorizeUrl;
+    }
     /**
      * Clears all auth state including local storage and session storage.
      * @category Authentication
@@ -171,8 +181,7 @@ class MedplumClient extends EventTarget {
         this.requestCache?.clear();
         this.accessToken = undefined;
         this.refreshToken = undefined;
-        this.profile = undefined;
-        this.config = undefined;
+        this.sessionDetails = undefined;
         this.dispatchEvent({ type: 'change' });
     }
     /**
@@ -1451,8 +1460,7 @@ class MedplumClient extends EventTarget {
     setAccessToken(accessToken) {
         this.accessToken = accessToken;
         this.refreshToken = undefined;
-        this.profile = undefined;
-        this.config = undefined;
+        this.sessionDetails = undefined;
     }
     /**
      * Returns the list of available logins.
@@ -1475,10 +1483,9 @@ class MedplumClient extends EventTarget {
             this.get('auth/me')
                 .then((result) => {
                 this.profilePromise = undefined;
-                this.profile = result.profile;
-                this.config = result.config;
+                this.sessionDetails = result;
                 this.dispatchEvent({ type: 'change' });
-                resolve(this.profile);
+                resolve(result.profile);
             })
                 .catch(reject);
         });
@@ -1492,6 +1499,38 @@ class MedplumClient extends EventTarget {
     isLoading() {
         return !!this.profilePromise;
     }
+    /**
+     * Returns true if the current user is authenticated as a super admin.
+     * @returns True if the current user is authenticated as a super admin.
+     * @category Authentication
+     */
+    isSuperAdmin() {
+        return !!this.sessionDetails?.project?.superAdmin;
+    }
+    /**
+     * Returns true if the current user is authenticated as a project admin.
+     * @returns True if the current user is authenticated as a project admin.
+     * @category Authentication
+     */
+    isProjectAdmin() {
+        return !!this.sessionDetails?.membership?.admin;
+    }
+    /**
+     * Returns the current project if available.
+     * @returns The current project if available.
+     * @category User Profile
+     */
+    getProject() {
+        return this.sessionDetails?.project;
+    }
+    /**
+     * Returns the current project membership if available.
+     * @returns The current project membership if available.
+     * @category User Profile
+     */
+    getProjectMembership() {
+        return this.sessionDetails?.membership;
+    }
     /**
      * Returns the current user profile resource if available.
      * This method does not wait for loading promises.
@@ -1499,7 +1538,7 @@ class MedplumClient extends EventTarget {
      * @category User Profile
      */
     getProfile() {
-        return this.profile;
+        return this.sessionDetails?.profile;
     }
     /**
      * Returns the current user profile resource if available.
@@ -1519,7 +1558,15 @@ class MedplumClient extends EventTarget {
      * @category User Profile
      */
     getUserConfiguration() {
-        return this.config;
+        return this.sessionDetails?.config;
+    }
+    /**
+     * Returns the current user access policy if available.
+     * @returns The current user access policy if available.
+     * @category User Profile
+     */
+    getAccessPolicy() {
+        return this.sessionDetails?.accessPolicy;
     }
     /**
      * Downloads the URL as a blob.
@@ -1963,7 +2010,7 @@ class MedplumClient extends EventTarget {
      * Invite a user to a project.
      * @param projectId The project ID.
      * @param body The InviteBody.
-     * @returns Promise that returns an invite result or an operation outcome.
+     * @returns Promise that returns a project membership or an operation outcome.
      */
     async invite(projectId, body) {
         return this.post('admin/projects/' + projectId + '/invite', body);
@@ -1988,7 +2035,13 @@ class MedplumClient extends EventTarget {
         const response = await this.fetch(this.tokenUrl, options);
         if (!response.ok) {
             this.clearActiveLogin();
-            throw new Error('Failed to fetch tokens');
+            try {
+                const error = await response.json();
+                throw new OperationOutcomeError(badRequest(error.error_description));
+            }
+            catch (err) {
+                throw new OperationOutcomeError(badRequest('Failed to fetch tokens'), err);
+            }
         }
         const tokens = await response.json();
         await this.verifyTokens(tokens);