@memberjunction/ng-auth-services 6.2.0-edge.0 → 6.2.0-edge.2

package/dist/lib/providers/mjexplorer-okta-provider.service.js.map

@@ -1 +1 @@
-{"version":3,"file":"mjexplorer-okta-provider.service.js","sourceRoot":"","sources":["../../../src/lib/providers/mjexplorer-okta-provider.service.ts"],"names":[],"mappings":";;;;;;;AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,eAAe,CAAC;AACnD,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AAEvD,OAAO,EAAE,UAAU,EAAE,MAAM,iCAAiC,CAAC;AAE7D,OAAO,QAAmD,MAAM,oBAAoB,CAAC;AACrF,OAAO,EAIL,aAAa,EAEd,MAAM,eAAe,CAAC;;AACvB;;;;;;GAMG;AAKI,IAAM,cAAc,GAApB,MAAM,cAAe,SAAQ,UAAU;;IAuBF;IAtB1C,MAAM,CAAU,aAAa,GAAG,MAAM,CAAC;IAC9B,IAAI,GAAG,gBAAc,CAAC,aAAa,CAAC;IACrC,QAAQ,CAAW;IACnB,YAAY,GAAG,KAAK,CAAC;IAE7B;;;OAGG;IACH,MAAM,CAAC,sBAAsB,GAAG,CAAC,WAAoC,EAAE,EAAE,CAAC;QACxE;YACE,OAAO,EAAE,YAAY;YACrB,QAAQ,EAAE;gBACR,QAAQ,EAAE,WAAW,CAAC,eAAe,CAAC;gBACtC,MAAM,EAAE,WAAW,CAAC,aAAa,CAAC;gBAClC,MAAM,EAAE,WAAW,CAAC,aAAa,CAAC,IAAI,WAAW,WAAW,CAAC,aAAa,CAAC,iBAAiB;gBAC5F,WAAW,EAAE,WAAW,CAAC,mBAAmB,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM;gBACvE,MAAM,EAAE,WAAW,CAAC,aAAa,CAAC,IAAI,CAAC,QAAQ,EAAE,SAAS,EAAE,OAAO,CAAC;aACrE;SACF;KACF,CAAC;IAEF,YAA0C,UAAiD;QACzF,MAAM,MAAM,GAA8B;YACxC,IAAI,EAAE,gBAAc,CAAC,aAAa;YAClC,IAAI,EAAE,gBAAc,CAAC,aAAa;SACnC,CAAC;QACF,KAAK,CAAC,MAAM,CAAC,CAAC;QAL0B,eAAU,GAAV,UAAU,CAAuC;QAOzF,oCAAoC;QACpC,MAAM,cAAc,GAAoB;YACtC,QAAQ,EAAE,IAAI,CAAC,UAAU,CAAC,QAAQ;YAClC,WAAW,EAAE,IAAI,CAAC,UAAU,CAAC,WAAW,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG,WAAW;YAChF,MAAM,EAAE,IAAI,CAAC,UAAU,CAAC,MAAM,IAAI,CAAC,QAAQ,EAAE,SAAS,EAAE,OAAO,CAAC;YAChE,IAAI,EAAE,IAAI,EAAE,wBAAwB;YACpC,GAAG,IAAI,CAAC,UAAU;YAClB,kFAAkF;YAClF,MAAM,EAAE,IAAI,CAAC,UAAU,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,WAAW,IAAI,CAAC,UAAU,CAAC,MAAM,iBAAiB,CAAC,CAAC,CAAC,EAAE,CAAC;SACrH,CAAC;QAEF,IAAI,CAAC,QAAQ,GAAG,IAAI,QAAQ,CAAC,cAAc,CAAC,CAAC;QAE7C,0BAA0B;QAC1B,IAAI,CAAC,QAAQ,CAAC,gBAAgB,CAAC,SAAS,CAAC,CAAC,SAAkB,EAAE,EAAE;YAC9D,MAAM,KAAK,GAAG,SAA6D,CAAC;YAC5E,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,eAAe,IAAI,KAAK,CAAC,CAAC;YAErD,6DAA6D;YAC7D,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC;gBACvB,IAAI,KAAK,CAAC,eAAe,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;oBAC3C,MAAM,QAAQ,GAAG,IAAI,CAAC,sBAAsB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;oBAC5D,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC;gBAChC,CAAC;qBAAM,CAAC;oBACN,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;gBAC5B,CAAC;YACH,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;IAED,+EAA+E;IAC/E,oBAAoB;IACpB,+EAA+E;IAE/E,KAAK,CAAC,UAAU;QACd,iCAAiC;QACjC,MAAM,SAAS,GAAG,IAAI,eAAe,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QAC9D,MAAM,YAAY,GAAG,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAE7C,IAAI,YAAY,EAAE,CAAC;YACjB,mEAAmE;YACnE,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,EAAE,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;YAC1E,OAAO;QACT,CAAC;QAED,iDAAiD;QACjD,6FAA6F;QAC7F,IAAI,IAAI,CAAC,QAAQ,CAAC,eAAe,EAAE,EAAE,CAAC;YACpC,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,QAAQ,CAAC,cAAc,EAAE,CAAC;gBAErC,wDAAwD;gBACxD,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,gBAAgB,CAAC,YAAY,EAAE,CAAC;gBAEtE,IAAI,SAAS,EAAE,eAAe,EAAE,CAAC;oBAC/B,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;oBAE3B,2BAA2B;oBAC3B,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,GAAG,CAAC,SAAS,CAAY,CAAC;oBAC3E,IAAI,OAAO,EAAE,CAAC;wBACZ,MAAM,QAAQ,GAAG,IAAI,CAAC,sBAAsB,CAAC,OAAO,CAAC,CAAC;wBACtD,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC;oBAChC,CAAC;gBACH,CAAC;YACH,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,CAAC,KAAK,CAAC,gDAAgD,EAAE,KAAK,CAAC,CAAC;YACzE,CAAC;YACD,OAAO,CAAC,2DAA2D;QACrE,CAAC;QAED,oDAAoD;QACpD,IAAI,CAAC;YACH,MAAM,eAAe,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,eAAe,EAAE,CAAC;YAE9D,IAAI,eAAe,EAAE,CAAC;gBACpB,6CAA6C;gBAC7C,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,GAAG,CAAC,SAAS,CAAY,CAAC;gBAE3E,IAAI,OAAO,EAAE,OAAO,EAAE,CAAC;oBACrB,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;oBAE3B,qCAAqC;oBACrC,MAAM,QAAQ,GAAG,IAAI,CAAC,sBAAsB,CAAC,OAAO,CAAC,CAAC;oBACtD,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC;gBAChC,CAAC;qBAAM,CAAC;oBACN,mCAAmC;oBACnC,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;gBAC9B,CAAC;YACH,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,IAAI,CAAC,8CAA8C,EAAE,KAAK,CAAC,CAAC;QACtE,CAAC;IACH,CAAC;IAES,KAAK,CAAC,aAAa,CAAC,OAAiC;QAC7D,IAAI,CAAC;YACH,wCAAwC;YACxC,6FAA6F;YAC7F,IAAI,IAAI,CAAC,QAAQ,CAAC,eAAe,EAAE,EAAE,CAAC;gBACpC,MAAM,IAAI,CAAC,QAAQ,CAAC,cAAc,EAAE,CAAC;gBACrC,OAAO;YACT,CAAC;YAED,uBAAuB;YACvB,MAAM,IAAI,CAAC,QAAQ,CAAC,kBAAkB,CAAC;gBACrC,WAAW,EAAG,OAAO,EAAE,CAAC,WAAW,CAAY,IAAI,GAAG;gBACtD,GAAG,OAAO;aACX,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,KAAK,CAAC,qBAAqB,EAAE,KAAK,CAAC,CAAC;YAC5C,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAES,KAAK,CAAC,cAAc;QAC5B,IAAI,CAAC;YACH,mDAAmD;YACnD,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;YAC5B,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;YAE1B,sCAAsC;YACtC,MAAM,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,KAAK,EAAE,CAAC;YAEzC,gCAAgC;YAChC,MAAM,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC;gBAC1B,qBAAqB,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM;gBAC7C,yBAAyB,EAAE,IAAI;aAChC,CAAC,CAAC;YAEH,qFAAqF;QACvF,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,KAAK,CAAC,sBAAsB,EAAE,KAAK,CAAC,CAAC;YAC7C,yDAAyD;YACzD,MAAM,CAAC,QAAQ,CAAC,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC;QAChD,CAAC;IACH,CAAC;IAED,KAAK,CAAC,cAAc;QAClB,IAAI,CAAC;YACH,6FAA6F;YAC7F,IAAI,IAAI,CAAC,QAAQ,CAAC,eAAe,EAAE,EAAE,CAAC;gBACpC,MAAM,IAAI,CAAC,QAAQ,CAAC,cAAc,EAAE,CAAC;gBAErC,wDAAwD;gBACxD,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,gBAAgB,CAAC,YAAY,EAAE,CAAC;gBACtE,IAAI,SAAS,EAAE,eAAe,EAAE,CAAC;oBAC/B,gDAAgD;oBAChD,UAAU,CAAC,GAAG,EAAE;wBACd,MAAM,CAAC,QAAQ,CAAC,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC;oBAChD,CAAC,EAAE,GAAG,CAAC,CAAC;gBACV,CAAC;YACH,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,KAAK,CAAC,iCAAiC,EAAE,KAAK,CAAC,CAAC;YACxD,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED,+EAA+E;IAC/E,2CAA2C;IAC3C,+EAA+E;IAE/E;;;;;OAKG;IACO,KAAK,CAAC,sBAAsB;QACpC,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,GAAG,CAAC,SAAS,CAAY,CAAC;YAC3E,mDAAmD;YACnD,OAAO,OAAO,EAAE,OAAO,IAAI,IAAI,CAAC;QAClC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,KAAK,CAAC,mCAAmC,EAAE,KAAK,CAAC,CAAC;YAC1D,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED;;;;OAIG;IACO,KAAK,CAAC,wBAAwB;QACtC,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,GAAG,CAAC,SAAS,CAAY,CAAC;YAC3E,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,GAAG,CAAC,aAAa,CAAgB,CAAC;YAEvF,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,CAAC;gBACtB,OAAO,IAAI,CAAC;YACd,CAAC;YAED,OAAO;gBACL,OAAO,EAAE,OAAO,CAAC,OAAO;gBACxB,WAAW,EAAE,WAAW,EAAE,WAAW;gBACrC,SAAS,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,0BAA0B;gBACvF,MAAM,EAAE,OAAO,CAAC,MAAM;aACvB,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,KAAK,CAAC,qCAAqC,EAAE,KAAK,CAAC,CAAC;YAC5D,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED;;;;OAIG;IACO,KAAK,CAAC,uBAAuB;QACrC,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,GAAG,CAAC,SAAS,CAAY,CAAC;YAC3E,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,OAAO,IAAI,CAAC;YACd,CAAC;YAED,OAAO,IAAI,CAAC,sBAAsB,CAAC,OAAO,CAAC,CAAC;QAC9C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,KAAK,CAAC,oCAAoC,EAAE,KAAK,CAAC,CAAC;YAC3D,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED;;;;OAIG;IACO,KAAK,CAAC,oBAAoB;QAClC,IAAI,CAAC;YACH,OAAO,CAAC,GAAG,CAAC,uCAAuC,CAAC,CAAC;YAErD,+DAA+D;YAC/D,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC;YAEzB,qCAAqC;YACrC,MAAM,eAAe,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,eAAe,EAAE,CAAC;YAE9D,IAAI,CAAC,eAAe,EAAE,CAAC;gBACrB,IAAI,CAAC,YAAY,GAAG,KAAK,CAAC;gBAC1B,OAAO;oBACL,OAAO,EAAE,KAAK;oBACd,KAAK,EAAE;wBACL,IAAI,EAAE,aAAa,CAAC,iBAAiB;wBACrC,OAAO,EAAE,2BAA2B;wBACpC,WAAW,EAAE,iCAAiC;qBAC/C;iBACF,CAAC;YACJ,CAAC;YAED,wBAAwB;YACxB,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,GAAG,CAAC,SAAS,CAAY,CAAC;YAC3E,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,GAAG,CAAC,aAAa,CAAgB,CAAC;YAEvF,IAAI,CAAC,OAAO,IAAI,CAAC,WAAW,EAAE,CAAC;gBAC7B,IAAI,CAAC,YAAY,GAAG,KAAK,CAAC;gBAC1B,OAAO;oBACL,OAAO,EAAE,KAAK;oBACd,KAAK,EAAE;wBACL,IAAI,EAAE,aAAa,CAAC,iBAAiB;wBACrC,OAAO,EAAE,gCAAgC;wBACzC,WAAW,EAAE,yCAAyC;qBACvD;iBACF,CAAC;YACJ,CAAC;YAED,0BAA0B;YAC1B,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC;YAE9D,IAAI,aAAa,CAAC,OAAO,EAAE,CAAC;gBAC1B,2BAA2B;gBAC3B,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC;gBAEpD,0CAA0C;gBAC1C,MAAM,IAAI,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC;gBAEvD,IAAI,CAAC,YAAY,GAAG,KAAK,CAAC;gBAE1B,MAAM,UAAU,GAAG,aAAa,CAAC,OAAkB,CAAC;gBACpD,OAAO,CAAC,GAAG,CAAC,iCAAiC,EAAE;oBAC7C,SAAS,EAAE,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,SAAS,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,KAAK;iBAC9F,CAAC,CAAC;gBAEH,MAAM,KAAK,GAAsB;oBAC/B,OAAO,EAAE,UAAU,CAAC,OAAO,IAAI,EAAE;oBACjC,WAAW,EAAE,aAAa,CAAC,WAAW,EAAE,WAAW;oBACnD,SAAS,EAAE,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC,SAAS,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;oBACjE,MAAM,EAAE,UAAU,CAAC,MAAM;iBAC1B,CAAC;gBAEF,OAAO;oBACL,OAAO,EAAE,IAAI;oBACb,KAAK;iBACN,CAAC;YACJ,CAAC;YAED,IAAI,CAAC,YAAY,GAAG,KAAK,CAAC;YAC1B,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE;oBACL,IAAI,EAAE,aAAa,CAAC,iBAAiB;oBACrC,OAAO,EAAE,kDAAkD;oBAC3D,WAAW,EAAE,8CAA8C;iBAC5D;aACF,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,KAAK,CAAC,8BAA8B,EAAE,KAAK,CAAC,CAAC;YACrD,IAAI,CAAC,YAAY,GAAG,KAAK,CAAC;YAE1B,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,IAAI,CAAC,qBAAqB,CAAC,KAAK,CAAC;aACzC,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;;;;;;;;OASG;IACO,qBAAqB,CAAC,KAAc;QAC5C,MAAM,QAAQ,GAAG,KAAgC,CAAC;QAClD,MAAM,OAAO,GAAG,QAAQ,EAAE,CAAC,SAAS,CAAW,IAAI,eAAe,CAAC;QACnE,MAAM,SAAS,GAAG,QAAQ,EAAE,CAAC,WAAW,CAAW,IAAI,EAAE,CAAC;QAC1D,6EAA6E;QAC7E,MAAM,UAAU,GAAG,QAAQ,EAAE,CAAC,OAAO,CAAW,IAAI,EAAE,CAAC;QAEvD,6DAA6D;QAC7D,mEAAmE;QACnE,IAAI,SAAS,KAAK,eAAe,IAAI,UAAU,KAAK,eAAe;YAC/D,OAAO,CAAC,QAAQ,CAAC,qCAAqC,CAAC,EAAE,CAAC;YAC5D,OAAO;gBACL,IAAI,EAAE,aAAa,CAAC,aAAa;gBACjC,OAAO;gBACP,aAAa,EAAE,KAAK;gBACpB,WAAW,EAAE,gDAAgD;aAC9D,CAAC;QACJ,CAAC;QAED,2DAA2D;QAC3D,IAAI,SAAS,KAAK,eAAe,IAAI,UAAU,KAAK,eAAe;YAC/D,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAC,EAAE,CAAC;YACtC,OAAO;gBACL,IAAI,EAAE,aAAa,CAAC,cAAc;gBAClC,OAAO;gBACP,aAAa,EAAE,KAAK;gBACpB,WAAW,EAAE,sCAAsC;aACpD,CAAC;QACJ,CAAC;QAED,yCAAyC;QACzC,IAAI,SAAS,KAAK,gBAAgB,IAAI,UAAU,KAAK,gBAAgB;YACjE,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,CAAC;YACvC,OAAO;gBACL,IAAI,EAAE,aAAa,CAAC,iBAAiB;gBACrC,OAAO;gBACP,aAAa,EAAE,KAAK;gBACpB,WAAW,EAAE,iCAAiC;aAC/C,CAAC;QACJ,CAAC;QAED,IAAI,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAC;YACzE,UAAU,KAAK,kBAAkB,EAAE,CAAC;YACtC,OAAO;gBACL,IAAI,EAAE,aAAa,CAAC,oBAAoB;gBACxC,OAAO;gBACP,aAAa,EAAE,KAAK;gBACpB,WAAW,EAAE,6DAA6D;aAC3E,CAAC;QACJ,CAAC;QAED,8EAA8E;QAC9E,IAAI,SAAS,KAAK,gBAAgB,IAAI,SAAS,KAAK,uBAAuB;YACvE,UAAU,KAAK,uBAAuB;YACtC,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAC,EAAE,CAAC;YAC5E,OAAO;gBACL,IAAI,EAAE,aAAa,CAAC,cAAc;gBAClC,OAAO;gBACP,aAAa,EAAE,KAAK;gBACpB,WAAW,EAAE,sBAAsB;aACpC,CAAC;QACJ,CAAC;QAED,IAAI,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC;YAC/G,OAAO;gBACL,IAAI,EAAE,aAAa,CAAC,aAAa;gBACjC,OAAO;gBACP,aAAa,EAAE,KAAK;gBACpB,WAAW,EAAE,gDAAgD;aAC9D,CAAC;QACJ,CAAC;QAED,IAAI,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAC,EAAE,CAAC;YAChG,OAAO;gBACL,IAAI,EAAE,aAAa,CAAC,aAAa;gBACjC,OAAO;gBACP,aAAa,EAAE,KAAK;gBACpB,WAAW,EAAE,4DAA4D;aAC1E,CAAC;QACJ,CAAC;QAED,2BAA2B;QAC3B,OAAO;YACL,IAAI,EAAE,aAAa,CAAC,aAAa;YACjC,OAAO;YACP,aAAa,EAAE,KAAK;YACpB,WAAW,EAAE,iDAAiD;SAC/D,CAAC;IACJ,CAAC;IAED,+EAA+E;IAC/E,iBAAiB;IACjB,+EAA+E;IAE/E;;OAEG;IACK,sBAAsB,CAAC,OAAgB;QAC7C,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;QAE9B,OAAO;YACL,EAAE,EAAE,MAAM,CAAC,GAAG,IAAI,EAAE;YACpB,KAAK,EAAE,MAAM,CAAC,KAAe,IAAI,EAAE;YACnC,IAAI,EAAE,MAAM,CAAC,IAAc,IAAI,EAAE;YACjC,SAAS,EAAE,MAAM,CAAC,UAAoB;YACtC,UAAU,EAAE,MAAM,CAAC,WAAqB;YACxC,iBAAiB,EAAE,MAAM,CAAC,kBAA4B;YACtD,aAAa,EAAE,MAAM,CAAC,cAAyB;SAChD,CAAC;IACJ,CAAC;IAED;;;;;OAKG;IACO,KAAK,CAAC,4BAA4B;QAC1C,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,GAAG,CAAC,SAAS,CAAY,CAAC;YAC3E,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,OAAO,IAAI,CAAC;YACd,CAAC;YAED,gCAAgC;YAChC,MAAM,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC,OAAiB,CAAC;YACpD,IAAI,UAAU,EAAE,CAAC;gBACf,OAAO,UAAU,CAAC;YACpB,CAAC;YAED,8CAA8C;YAC9C,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC;YAC3C,OAAQ,IAAI,EAAE,OAAkB,IAAI,IAAI,CAAC;QAC3C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,KAAK,CAAC,uCAAuC,EAAE,KAAK,CAAC,CAAC;YAC9D,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED;;;;;;OAMG;IACO,KAAK,CAAC,2BAA2B;QACzC,gDAAgD;QAChD,OAAO;IACT,CAAC;IAED,+EAA+E;IAC/E,gBAAgB;IAChB,+EAA+E;IAEtE,iBAAiB;QACxB,OAAO,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;IAChC,CAAC;IAEQ,cAAc,CAAC,MAA+B;QACrD,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;IAC1E,CAAC;wGAtgBU,cAAc,cAuBL,YAAY;gEAvBrB,cAAc,WAAd,cAAc,mBAHb,MAAM;;AAGP,cAAc;IAD1B,aAAa,CAAC,UAAU,EAAE,MAAM,CAAC;GACrB,cAAc,CAugB1B;;iFAvgBY,cAAc;cAJ1B,UAAU;eAAC;gBACV,UAAU,EAAE,MAAM;aACnB;;sBAyBc,MAAM;uBAAC,YAAY","sourcesContent":["import { Injectable, Inject } from '@angular/core';\nimport { RegisterClass } from '@memberjunction/global';\nimport { Observable, BehaviorSubject, from } from 'rxjs';\nimport { MJAuthBase } from '../mjexplorer-auth-base.service';\nimport { AngularAuthProviderConfig } from '../IAuthProvider';\nimport OktaAuth, { OktaAuthOptions, IDToken, AccessToken } from '@okta/okta-auth-js';\nimport {\n  StandardUserInfo,\n  StandardAuthToken,\n  StandardAuthError,\n  AuthErrorType,\n  TokenRefreshResult\n} from '../auth-types';\n/**\n * Okta authentication provider implementation - v3.0.0\n *\n * Implements the abstract methods from MJAuthBase to hide Okta-specific details.\n * The key abstraction is that Okta stores the JWT in IDToken.idToken,\n * but consumers never need to know this detail.\n */\n@Injectable({\n  providedIn: 'root'\n})\n@RegisterClass(MJAuthBase, 'okta')\nexport class MJOktaProvider extends MJAuthBase {\n  static readonly PROVIDER_TYPE = 'okta';\n  readonly type = MJOktaProvider.PROVIDER_TYPE;\n  private oktaAuth: OktaAuth;\n  private isRefreshing = false;\n\n  /**\n   * Factory function to provide Angular dependencies required by Okta\n   * Stored as a static property for the factory to access without instantiation\n   */\n  static angularProviderFactory = (environment: Record<string, unknown>) => [\n    {\n      provide: 'oktaConfig',\n      useValue: {\n        clientId: environment['OKTA_CLIENTID'],\n        domain: environment['OKTA_DOMAIN'],\n        issuer: environment['OKTA_ISSUER'] || `https://${environment['OKTA_DOMAIN']}/oauth2/default`,\n        redirectUri: environment['OKTA_REDIRECT_URI'] || window.location.origin,\n        scopes: environment['OKTA_SCOPES'] || ['openid', 'profile', 'email']\n      }\n    }\n  ];\n\n  constructor(@Inject('oktaConfig') private oktaConfig: OktaAuthOptions & { domain?: string }) {\n    const config: AngularAuthProviderConfig = {\n      name: MJOktaProvider.PROVIDER_TYPE,\n      type: MJOktaProvider.PROVIDER_TYPE\n    };\n    super(config);\n\n    // Build configuration with defaults\n    const oktaAuthConfig: OktaAuthOptions = {\n      clientId: this.oktaConfig.clientId,\n      redirectUri: this.oktaConfig.redirectUri || window.location.origin + '/callback',\n      scopes: this.oktaConfig.scopes || ['openid', 'profile', 'email'],\n      pkce: true, // Use PKCE for security\n      ...this.oktaConfig,\n      // Set issuer after spread to ensure it's not overwritten if not present in config\n      issuer: this.oktaConfig.issuer || (this.oktaConfig.domain ? `https://${this.oktaConfig.domain}/oauth2/default` : '')\n    };\n\n    this.oktaAuth = new OktaAuth(oktaAuthConfig);\n\n    // Listen for token events\n    this.oktaAuth.authStateManager.subscribe((authState: unknown) => {\n      const state = authState as { isAuthenticated?: boolean; idToken?: IDToken };\n      this.updateAuthState(state.isAuthenticated || false);\n\n      // Don't update user info if we're in the middle of a refresh\n      if (!this.isRefreshing) {\n        if (state.isAuthenticated && state.idToken) {\n          const userInfo = this.mapOktaTokenToStandard(state.idToken);\n          this.updateUserInfo(userInfo);\n        } else {\n          this.updateUserInfo(null);\n        }\n      }\n    });\n  }\n\n  // ============================================================================\n  // LIFECYCLE METHODS\n  // ============================================================================\n\n  async initialize(): Promise<void> {\n    // Check URL for logout indicator\n    const urlParams = new URLSearchParams(window.location.search);\n    const isPostLogout = urlParams.has('logout');\n\n    if (isPostLogout) {\n      // We're returning from a logout, clear the URL and stay logged out\n      window.history.replaceState({}, document.title, window.location.pathname);\n      return;\n    }\n\n    // Check if we're returning from a login redirect\n    // Note: handleRedirect() is the modern v7.x replacement for deprecated handleLoginRedirect()\n    if (this.oktaAuth.isLoginRedirect()) {\n      try {\n        await this.oktaAuth.handleRedirect();\n\n        // After handling redirect, check if we're authenticated\n        const authState = await this.oktaAuth.authStateManager.getAuthState();\n\n        if (authState?.isAuthenticated) {\n          this.updateAuthState(true);\n\n          // Get and update user info\n          const idToken = await this.oktaAuth.tokenManager.get('idToken') as IDToken;\n          if (idToken) {\n            const userInfo = this.mapOktaTokenToStandard(idToken);\n            this.updateUserInfo(userInfo);\n          }\n        }\n      } catch (error) {\n        console.error('[Okta] Initialization redirect handling error:', error);\n      }\n      return; // Don't check for existing session after handling redirect\n    }\n\n    // Only check for existing session if not a redirect\n    try {\n      const isAuthenticated = await this.oktaAuth.isAuthenticated();\n\n      if (isAuthenticated) {\n        // Double-check we actually have valid tokens\n        const idToken = await this.oktaAuth.tokenManager.get('idToken') as IDToken;\n\n        if (idToken?.idToken) {\n          this.updateAuthState(true);\n\n          // Update user info from cached token\n          const userInfo = this.mapOktaTokenToStandard(idToken);\n          this.updateUserInfo(userInfo);\n        } else {\n          // No valid tokens, stay logged out\n          this.updateAuthState(false);\n        }\n      }\n    } catch (error) {\n      console.warn('[Okta] Error checking authentication status:', error);\n    }\n  }\n\n  protected async loginInternal(options?: Record<string, unknown>): Promise<void> {\n    try {\n      // Check if we're in a redirect callback\n      // Note: handleRedirect() is the modern v7.x replacement for deprecated handleLoginRedirect()\n      if (this.oktaAuth.isLoginRedirect()) {\n        await this.oktaAuth.handleRedirect();\n        return;\n      }\n\n      // Start the login flow\n      await this.oktaAuth.signInWithRedirect({\n        originalUri: (options?.['targetUrl'] as string) || '/',\n        ...options\n      });\n    } catch (error) {\n      console.error('[Okta] Login error:', error);\n      throw error;\n    }\n  }\n\n  protected async logoutInternal(): Promise<void> {\n    try {\n      // Clear the local authentication state immediately\n      this.updateAuthState(false);\n      this.updateUserInfo(null);\n\n      // Clear all tokens from local storage\n      await this.oktaAuth.tokenManager.clear();\n\n      // Sign out from Okta completely\n      await this.oktaAuth.signOut({\n        postLogoutRedirectUri: window.location.origin,\n        clearTokensBeforeRedirect: true\n      });\n\n      // Note: The signOut call will redirect the browser, so code after this won't execute\n    } catch (error) {\n      console.error('[Okta] Logout error:', error);\n      // If logout fails, at least clear local state and reload\n      window.location.href = window.location.origin;\n    }\n  }\n\n  async handleCallback(): Promise<void> {\n    try {\n      // Note: handleRedirect() is the modern v7.x replacement for deprecated handleLoginRedirect()\n      if (this.oktaAuth.isLoginRedirect()) {\n        await this.oktaAuth.handleRedirect();\n\n        // After handling redirect, check if we're authenticated\n        const authState = await this.oktaAuth.authStateManager.getAuthState();\n        if (authState?.isAuthenticated) {\n          // Do a controlled reload after successful login\n          setTimeout(() => {\n            window.location.href = window.location.origin;\n          }, 100);\n        }\n      }\n    } catch (error) {\n      console.error('[Okta] Callback handling error:', error);\n      throw error;\n    }\n  }\n\n  // ============================================================================\n  // ABSTRACT METHOD IMPLEMENTATIONS (v3.0.0)\n  // ============================================================================\n\n  /**\n   * Extract ID token from Okta's storage\n   *\n   * Okta stores the JWT in IDToken.idToken\n   * This is the key abstraction - consumers never need to know about Okta's structure!\n   */\n  protected async extractIdTokenInternal(): Promise<string | null> {\n    try {\n      const idToken = await this.oktaAuth.tokenManager.get('idToken') as IDToken;\n      // Okta-specific detail: JWT is in idToken property\n      return idToken?.idToken || null;\n    } catch (error) {\n      console.error('[Okta] Error extracting ID token:', error);\n      return null;\n    }\n  }\n\n  /**\n   * Extract complete token info from Okta\n   *\n   * Maps Okta's token structure to StandardAuthToken\n   */\n  protected async extractTokenInfoInternal(): Promise<StandardAuthToken | null> {\n    try {\n      const idToken = await this.oktaAuth.tokenManager.get('idToken') as IDToken;\n      const accessToken = await this.oktaAuth.tokenManager.get('accessToken') as AccessToken;\n\n      if (!idToken?.idToken) {\n        return null;\n      }\n\n      return {\n        idToken: idToken.idToken,\n        accessToken: accessToken?.accessToken,\n        expiresAt: idToken.expiresAt ? idToken.expiresAt * 1000 : 0, // Convert to milliseconds\n        scopes: idToken.scopes\n      };\n    } catch (error) {\n      console.error('[Okta] Error extracting token info:', error);\n      return null;\n    }\n  }\n\n  /**\n   * Extract user info from Okta claims\n   *\n   * Maps Okta's IDToken structure to StandardUserInfo\n   */\n  protected async extractUserInfoInternal(): Promise<StandardUserInfo | null> {\n    try {\n      const idToken = await this.oktaAuth.tokenManager.get('idToken') as IDToken;\n      if (!idToken) {\n        return null;\n      }\n\n      return this.mapOktaTokenToStandard(idToken);\n    } catch (error) {\n      console.error('[Okta] Error extracting user info:', error);\n      return null;\n    }\n  }\n\n  /**\n   * Refresh token using Okta's token renewal\n   *\n   * Uses renewTokens() to get new tokens silently\n   */\n  protected async refreshTokenInternal(): Promise<TokenRefreshResult> {\n    try {\n      console.log('[Okta] Attempting to refresh token...');\n\n      // Set flag to prevent authStateManager from triggering updates\n      this.isRefreshing = true;\n\n      // First check if we're authenticated\n      const isAuthenticated = await this.oktaAuth.isAuthenticated();\n\n      if (!isAuthenticated) {\n        this.isRefreshing = false;\n        return {\n          success: false,\n          error: {\n            type: AuthErrorType.NO_ACTIVE_SESSION,\n            message: 'User is not authenticated',\n            userMessage: 'You need to log in to continue.'\n          }\n        };\n      }\n\n      // Check if tokens exist\n      const idToken = await this.oktaAuth.tokenManager.get('idToken') as IDToken;\n      const accessToken = await this.oktaAuth.tokenManager.get('accessToken') as AccessToken;\n\n      if (!idToken || !accessToken) {\n        this.isRefreshing = false;\n        return {\n          success: false,\n          error: {\n            type: AuthErrorType.NO_ACTIVE_SESSION,\n            message: 'No tokens available to refresh',\n            userMessage: 'Session not found. Please log in again.'\n          }\n        };\n      }\n\n      // Attempt to renew tokens\n      const renewedTokens = await this.oktaAuth.token.renewTokens();\n\n      if (renewedTokens.idToken) {\n        // Store the renewed tokens\n        this.oktaAuth.tokenManager.setTokens(renewedTokens);\n\n        // Wait a moment before resetting the flag\n        await new Promise(resolve => setTimeout(resolve, 100));\n\n        this.isRefreshing = false;\n\n        const newIdToken = renewedTokens.idToken as IDToken;\n        console.log('[Okta] Token refresh successful', {\n          expiresAt: newIdToken.expiresAt ? new Date(newIdToken.expiresAt * 1000).toISOString() : 'N/A'\n        });\n\n        const token: StandardAuthToken = {\n          idToken: newIdToken.idToken || '',\n          accessToken: renewedTokens.accessToken?.accessToken,\n          expiresAt: newIdToken.expiresAt ? newIdToken.expiresAt * 1000 : 0,\n          scopes: newIdToken.scopes\n        };\n\n        return {\n          success: true,\n          token\n        };\n      }\n\n      this.isRefreshing = false;\n      return {\n        success: false,\n        error: {\n          type: AuthErrorType.NO_ACTIVE_SESSION,\n          message: 'Token renewal succeeded but no ID token returned',\n          userMessage: 'Session refresh failed. Please log in again.'\n        }\n      };\n    } catch (error) {\n      console.error('[Okta] Token refresh failed:', error);\n      this.isRefreshing = false;\n\n      return {\n        success: false,\n        error: this.classifyErrorInternal(error)\n      };\n    }\n  }\n\n  /**\n   * Classify Okta-specific errors into semantic types\n   *\n   * Maps Okta error patterns to AuthErrorType enum.\n   * Updated for okta-auth-js v7.x error codes.\n   *\n   * Error sources:\n   * - errorCode: From Okta SDK errors (AuthSdkError, AuthApiError)\n   * - error: From OAuth /token endpoint responses (invalid_grant, access_denied, etc.)\n   */\n  protected classifyErrorInternal(error: unknown): StandardAuthError {\n    const errorObj = error as Record<string, unknown>;\n    const message = errorObj?.['message'] as string || 'Unknown error';\n    const errorCode = errorObj?.['errorCode'] as string || '';\n    // OAuth errors from /token endpoint use 'error' field instead of 'errorCode'\n    const oauthError = errorObj?.['error'] as string || '';\n\n    // Handle invalid_grant - refresh token is invalid or expired\n    // This is a common error when refresh tokens expire or are revoked\n    if (errorCode === 'invalid_grant' || oauthError === 'invalid_grant' ||\n        message.includes('refresh token is invalid or expired')) {\n      return {\n        type: AuthErrorType.TOKEN_EXPIRED,\n        message,\n        originalError: error,\n        userMessage: 'Your session has expired. Please log in again.'\n      };\n    }\n\n    // Handle access_denied - user or server denied the request\n    if (errorCode === 'access_denied' || oauthError === 'access_denied' ||\n        message.includes('access_denied')) {\n      return {\n        type: AuthErrorType.USER_CANCELLED,\n        message,\n        originalError: error,\n        userMessage: 'Access was denied. Please try again.'\n      };\n    }\n\n    // Check for specific Okta error patterns\n    if (errorCode === 'login_required' || oauthError === 'login_required' ||\n        message.includes('login_required')) {\n      return {\n        type: AuthErrorType.NO_ACTIVE_SESSION,\n        message,\n        originalError: error,\n        userMessage: 'You need to log in to continue.'\n      };\n    }\n\n    if (message.includes('not to prompt') || message.includes('consent_required') ||\n        oauthError === 'consent_required') {\n      return {\n        type: AuthErrorType.INTERACTION_REQUIRED,\n        message,\n        originalError: error,\n        userMessage: 'Additional authentication is required. Please log in again.'\n      };\n    }\n\n    // Handle both user_cancelled (SDK) and user_canceled_request (OAuth redirect)\n    if (errorCode === 'user_cancelled' || errorCode === 'user_canceled_request' ||\n        oauthError === 'user_canceled_request' ||\n        message.includes('user cancelled') || message.includes('user canceled')) {\n      return {\n        type: AuthErrorType.USER_CANCELLED,\n        message,\n        originalError: error,\n        userMessage: 'Login was cancelled.'\n      };\n    }\n\n    if (message.includes('token expired') || message.includes('invalid_token') || message.includes('unauthorized')) {\n      return {\n        type: AuthErrorType.TOKEN_EXPIRED,\n        message,\n        originalError: error,\n        userMessage: 'Your session has expired. Please log in again.'\n      };\n    }\n\n    if (message.includes('network') || message.includes('fetch') || message.includes('Load failed')) {\n      return {\n        type: AuthErrorType.NETWORK_ERROR,\n        message,\n        originalError: error,\n        userMessage: 'Network error. Please check your connection and try again.'\n      };\n    }\n\n    // Default to unknown error\n    return {\n      type: AuthErrorType.UNKNOWN_ERROR,\n      message,\n      originalError: error,\n      userMessage: 'An unexpected error occurred. Please try again.'\n    };\n  }\n\n  // ============================================================================\n  // HELPER METHODS\n  // ============================================================================\n\n  /**\n   * Map Okta IDToken to StandardUserInfo\n   */\n  private mapOktaTokenToStandard(idToken: IDToken): StandardUserInfo {\n    const claims = idToken.claims;\n\n    return {\n      id: claims.sub || '',\n      email: claims.email as string || '',\n      name: claims.name as string || '',\n      givenName: claims.given_name as string,\n      familyName: claims.family_name as string,\n      preferredUsername: claims.preferred_username as string,\n      emailVerified: claims.email_verified as boolean\n    };\n  }\n\n  /**\n   * Get profile picture URL from Okta\n   *\n   * Okta may include picture URL in user claims, similar to Auth0.\n   * If available, we can also fetch from Okta's /userinfo endpoint.\n   */\n  protected async getProfilePictureUrlInternal(): Promise<string | null> {\n    try {\n      const idToken = await this.oktaAuth.tokenManager.get('idToken') as IDToken;\n      if (!idToken) {\n        return null;\n      }\n\n      // Check if picture is in claims\n      const pictureUrl = idToken.claims.picture as string;\n      if (pictureUrl) {\n        return pictureUrl;\n      }\n\n      // Alternatively, fetch from userinfo endpoint\n      const user = await this.oktaAuth.getUser();\n      return (user?.picture as string) || null;\n    } catch (error) {\n      console.error('[Okta] Error getting profile picture:', error);\n      return null;\n    }\n  }\n\n  /**\n   * Handle session expiry - no-op for Okta\n   *\n   * Okta uses refresh tokens, so it doesn't need interactive re-authentication\n   * when tokens expire. If refresh fails, the base class will throw an error\n   * and the user must log out/in manually.\n   */\n  protected async handleSessionExpiryInternal(): Promise<void> {\n    // No-op - Okta doesn't need interactive re-auth\n    return;\n  }\n\n  // ============================================================================\n  // CONFIGURATION\n  // ============================================================================\n\n  override getRequiredConfig(): string[] {\n    return ['clientId', 'domain'];\n  }\n\n  override validateConfig(config: Record<string, unknown>): boolean {\n    return !!(config['clientId'] && (config['domain'] || config['issuer']));\n  }\n}\n"]}
+{"version":3,"file":"mjexplorer-okta-provider.service.js","sourceRoot":"","sources":["../../../src/lib/providers/mjexplorer-okta-provider.service.ts"],"names":[],"mappings":";;;;;;;AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,eAAe,CAAC;AACnD,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AAEvD,OAAO,EAAE,UAAU,EAAE,MAAM,iCAAiC,CAAC;AAE7D,OAAO,QAAmD,MAAM,oBAAoB,CAAC;AACrF,OAAO,EAIL,aAAa,EAEd,MAAM,eAAe,CAAC;;AACvB;;;;;;GAMG;AAKI,IAAM,cAAc,GAApB,MAAM,cAAe,SAAQ,UAAU;;IAgCF;IA/B1C,MAAM,CAAU,aAAa,GAAG,MAAM,CAAC;IAC9B,IAAI,GAAG,gBAAc,CAAC,aAAa,CAAC;IACrC,QAAQ,CAAW;IACnB,YAAY,GAAG,KAAK,CAAC;IAE7B;;;OAGG;IACH,MAAM,CAAC,sBAAsB,GAAG,CAAC,WAAoC,EAAE,EAAE,CAAC;QACxE;YACE,OAAO,EAAE,YAAY;YACrB,QAAQ,EAAE;gBACR,QAAQ,EAAE,WAAW,CAAC,eAAe,CAAC;gBACtC,MAAM,EAAE,WAAW,CAAC,aAAa,CAAC;gBAClC,MAAM,EAAE,WAAW,CAAC,aAAa,CAAC,IAAI,WAAW,WAAW,CAAC,aAAa,CAAC,iBAAiB;gBAC5F,WAAW,EAAE,WAAW,CAAC,mBAAmB,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM;gBACvE,MAAM,EAAE,WAAW,CAAC,aAAa,CAAC,IAAI,CAAC,QAAQ,EAAE,SAAS,EAAE,OAAO,CAAC;aACrE;SACF;KACF,CAAC;IAEF,sDAAsD;IACtD,MAAM,KAAK,sBAAsB;QAC/B,OAAO,IAAI,CAAC,sBAAsB,CAAC;IACrC,CAAC;IACD,sDAAsD;IACtD,MAAM,KAAK,sBAAsB,CAAC,KAAK;QACrC,IAAI,CAAC,sBAAsB,GAAG,KAAK,CAAC;IACtC,CAAC;IAED,YAA0C,UAAiD;QACzF,MAAM,MAAM,GAA8B;YACxC,IAAI,EAAE,gBAAc,CAAC,aAAa;YAClC,IAAI,EAAE,gBAAc,CAAC,aAAa;SACnC,CAAC;QACF,KAAK,CAAC,MAAM,CAAC,CAAC;QAL0B,eAAU,GAAV,UAAU,CAAuC;QAOzF,oCAAoC;QACpC,MAAM,cAAc,GAAoB;YACtC,QAAQ,EAAE,IAAI,CAAC,UAAU,CAAC,QAAQ;YAClC,WAAW,EAAE,IAAI,CAAC,UAAU,CAAC,WAAW,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG,WAAW;YAChF,MAAM,EAAE,IAAI,CAAC,UAAU,CAAC,MAAM,IAAI,CAAC,QAAQ,EAAE,SAAS,EAAE,OAAO,CAAC;YAChE,IAAI,EAAE,IAAI,EAAE,wBAAwB;YACpC,GAAG,IAAI,CAAC,UAAU;YAClB,kFAAkF;YAClF,MAAM,EAAE,IAAI,CAAC,UAAU,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,WAAW,IAAI,CAAC,UAAU,CAAC,MAAM,iBAAiB,CAAC,CAAC,CAAC,EAAE,CAAC;SACrH,CAAC;QAEF,IAAI,CAAC,QAAQ,GAAG,IAAI,QAAQ,CAAC,cAAc,CAAC,CAAC;QAE7C,0BAA0B;QAC1B,IAAI,CAAC,QAAQ,CAAC,gBAAgB,CAAC,SAAS,CAAC,CAAC,SAAkB,EAAE,EAAE;YAC9D,MAAM,KAAK,GAAG,SAA6D,CAAC;YAC5E,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,eAAe,IAAI,KAAK,CAAC,CAAC;YAErD,6DAA6D;YAC7D,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC;gBACvB,IAAI,KAAK,CAAC,eAAe,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;oBAC3C,MAAM,QAAQ,GAAG,IAAI,CAAC,sBAAsB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;oBAC5D,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC;gBAChC,CAAC;qBAAM,CAAC;oBACN,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;gBAC5B,CAAC;YACH,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;IAED,+EAA+E;IAC/E,oBAAoB;IACpB,+EAA+E;IAE/E,KAAK,CAAC,UAAU;QACd,iCAAiC;QACjC,MAAM,SAAS,GAAG,IAAI,eAAe,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QAC9D,MAAM,YAAY,GAAG,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAE7C,IAAI,YAAY,EAAE,CAAC;YACjB,mEAAmE;YACnE,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,EAAE,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;YAC1E,OAAO;QACT,CAAC;QAED,iDAAiD;QACjD,6FAA6F;QAC7F,IAAI,IAAI,CAAC,QAAQ,CAAC,eAAe,EAAE,EAAE,CAAC;YACpC,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,QAAQ,CAAC,cAAc,EAAE,CAAC;gBAErC,wDAAwD;gBACxD,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,gBAAgB,CAAC,YAAY,EAAE,CAAC;gBAEtE,IAAI,SAAS,EAAE,eAAe,EAAE,CAAC;oBAC/B,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;oBAE3B,2BAA2B;oBAC3B,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,GAAG,CAAC,SAAS,CAAY,CAAC;oBAC3E,IAAI,OAAO,EAAE,CAAC;wBACZ,MAAM,QAAQ,GAAG,IAAI,CAAC,sBAAsB,CAAC,OAAO,CAAC,CAAC;wBACtD,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC;oBAChC,CAAC;gBACH,CAAC;YACH,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,CAAC,KAAK,CAAC,gDAAgD,EAAE,KAAK,CAAC,CAAC;YACzE,CAAC;YACD,OAAO,CAAC,2DAA2D;QACrE,CAAC;QAED,oDAAoD;QACpD,IAAI,CAAC;YACH,MAAM,eAAe,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,eAAe,EAAE,CAAC;YAE9D,IAAI,eAAe,EAAE,CAAC;gBACpB,6CAA6C;gBAC7C,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,GAAG,CAAC,SAAS,CAAY,CAAC;gBAE3E,IAAI,OAAO,EAAE,OAAO,EAAE,CAAC;oBACrB,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;oBAE3B,qCAAqC;oBACrC,MAAM,QAAQ,GAAG,IAAI,CAAC,sBAAsB,CAAC,OAAO,CAAC,CAAC;oBACtD,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC;gBAChC,CAAC;qBAAM,CAAC;oBACN,mCAAmC;oBACnC,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;gBAC9B,CAAC;YACH,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,IAAI,CAAC,8CAA8C,EAAE,KAAK,CAAC,CAAC;QACtE,CAAC;IACH,CAAC;IAES,KAAK,CAAC,aAAa,CAAC,OAAiC;QAC7D,IAAI,CAAC;YACH,wCAAwC;YACxC,6FAA6F;YAC7F,IAAI,IAAI,CAAC,QAAQ,CAAC,eAAe,EAAE,EAAE,CAAC;gBACpC,MAAM,IAAI,CAAC,QAAQ,CAAC,cAAc,EAAE,CAAC;gBACrC,OAAO;YACT,CAAC;YAED,uBAAuB;YACvB,MAAM,IAAI,CAAC,QAAQ,CAAC,kBAAkB,CAAC;gBACrC,WAAW,EAAG,OAAO,EAAE,CAAC,WAAW,CAAY,IAAI,GAAG;gBACtD,GAAG,OAAO;aACX,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,KAAK,CAAC,qBAAqB,EAAE,KAAK,CAAC,CAAC;YAC5C,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAES,KAAK,CAAC,cAAc;QAC5B,IAAI,CAAC;YACH,mDAAmD;YACnD,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;YAC5B,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;YAE1B,sCAAsC;YACtC,MAAM,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,KAAK,EAAE,CAAC;YAEzC,gCAAgC;YAChC,MAAM,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC;gBAC1B,qBAAqB,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM;gBAC7C,yBAAyB,EAAE,IAAI;aAChC,CAAC,CAAC;YAEH,qFAAqF;QACvF,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,KAAK,CAAC,sBAAsB,EAAE,KAAK,CAAC,CAAC;YAC7C,yDAAyD;YACzD,MAAM,CAAC,QAAQ,CAAC,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC;QAChD,CAAC;IACH,CAAC;IAED,KAAK,CAAC,cAAc;QAClB,IAAI,CAAC;YACH,6FAA6F;YAC7F,IAAI,IAAI,CAAC,QAAQ,CAAC,eAAe,EAAE,EAAE,CAAC;gBACpC,MAAM,IAAI,CAAC,QAAQ,CAAC,cAAc,EAAE,CAAC;gBAErC,wDAAwD;gBACxD,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,gBAAgB,CAAC,YAAY,EAAE,CAAC;gBACtE,IAAI,SAAS,EAAE,eAAe,EAAE,CAAC;oBAC/B,gDAAgD;oBAChD,UAAU,CAAC,GAAG,EAAE;wBACd,MAAM,CAAC,QAAQ,CAAC,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC;oBAChD,CAAC,EAAE,GAAG,CAAC,CAAC;gBACV,CAAC;YACH,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,KAAK,CAAC,iCAAiC,EAAE,KAAK,CAAC,CAAC;YACxD,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED,+EAA+E;IAC/E,2CAA2C;IAC3C,+EAA+E;IAE/E;;;;;OAKG;IACO,KAAK,CAAC,sBAAsB;QACpC,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,GAAG,CAAC,SAAS,CAAY,CAAC;YAC3E,mDAAmD;YACnD,OAAO,OAAO,EAAE,OAAO,IAAI,IAAI,CAAC;QAClC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,KAAK,CAAC,mCAAmC,EAAE,KAAK,CAAC,CAAC;YAC1D,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED;;;;OAIG;IACO,KAAK,CAAC,wBAAwB;QACtC,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,GAAG,CAAC,SAAS,CAAY,CAAC;YAC3E,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,GAAG,CAAC,aAAa,CAAgB,CAAC;YAEvF,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,CAAC;gBACtB,OAAO,IAAI,CAAC;YACd,CAAC;YAED,OAAO;gBACL,OAAO,EAAE,OAAO,CAAC,OAAO;gBACxB,WAAW,EAAE,WAAW,EAAE,WAAW;gBACrC,SAAS,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,0BAA0B;gBACvF,MAAM,EAAE,OAAO,CAAC,MAAM;aACvB,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,KAAK,CAAC,qCAAqC,EAAE,KAAK,CAAC,CAAC;YAC5D,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED;;;;OAIG;IACO,KAAK,CAAC,uBAAuB;QACrC,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,GAAG,CAAC,SAAS,CAAY,CAAC;YAC3E,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,OAAO,IAAI,CAAC;YACd,CAAC;YAED,OAAO,IAAI,CAAC,sBAAsB,CAAC,OAAO,CAAC,CAAC;QAC9C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,KAAK,CAAC,oCAAoC,EAAE,KAAK,CAAC,CAAC;YAC3D,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED;;;;OAIG;IACO,KAAK,CAAC,oBAAoB;QAClC,IAAI,CAAC;YACH,OAAO,CAAC,GAAG,CAAC,uCAAuC,CAAC,CAAC;YAErD,+DAA+D;YAC/D,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC;YAEzB,qCAAqC;YACrC,MAAM,eAAe,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,eAAe,EAAE,CAAC;YAE9D,IAAI,CAAC,eAAe,EAAE,CAAC;gBACrB,IAAI,CAAC,YAAY,GAAG,KAAK,CAAC;gBAC1B,OAAO;oBACL,OAAO,EAAE,KAAK;oBACd,KAAK,EAAE;wBACL,IAAI,EAAE,aAAa,CAAC,iBAAiB;wBACrC,OAAO,EAAE,2BAA2B;wBACpC,WAAW,EAAE,iCAAiC;qBAC/C;iBACF,CAAC;YACJ,CAAC;YAED,wBAAwB;YACxB,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,GAAG,CAAC,SAAS,CAAY,CAAC;YAC3E,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,GAAG,CAAC,aAAa,CAAgB,CAAC;YAEvF,IAAI,CAAC,OAAO,IAAI,CAAC,WAAW,EAAE,CAAC;gBAC7B,IAAI,CAAC,YAAY,GAAG,KAAK,CAAC;gBAC1B,OAAO;oBACL,OAAO,EAAE,KAAK;oBACd,KAAK,EAAE;wBACL,IAAI,EAAE,aAAa,CAAC,iBAAiB;wBACrC,OAAO,EAAE,gCAAgC;wBACzC,WAAW,EAAE,yCAAyC;qBACvD;iBACF,CAAC;YACJ,CAAC;YAED,0BAA0B;YAC1B,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC;YAE9D,IAAI,aAAa,CAAC,OAAO,EAAE,CAAC;gBAC1B,2BAA2B;gBAC3B,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC;gBAEpD,0CAA0C;gBAC1C,MAAM,IAAI,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC;gBAEvD,IAAI,CAAC,YAAY,GAAG,KAAK,CAAC;gBAE1B,MAAM,UAAU,GAAG,aAAa,CAAC,OAAkB,CAAC;gBACpD,OAAO,CAAC,GAAG,CAAC,iCAAiC,EAAE;oBAC7C,SAAS,EAAE,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,SAAS,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,KAAK;iBAC9F,CAAC,CAAC;gBAEH,MAAM,KAAK,GAAsB;oBAC/B,OAAO,EAAE,UAAU,CAAC,OAAO,IAAI,EAAE;oBACjC,WAAW,EAAE,aAAa,CAAC,WAAW,EAAE,WAAW;oBACnD,SAAS,EAAE,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC,SAAS,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;oBACjE,MAAM,EAAE,UAAU,CAAC,MAAM;iBAC1B,CAAC;gBAEF,OAAO;oBACL,OAAO,EAAE,IAAI;oBACb,KAAK;iBACN,CAAC;YACJ,CAAC;YAED,IAAI,CAAC,YAAY,GAAG,KAAK,CAAC;YAC1B,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE;oBACL,IAAI,EAAE,aAAa,CAAC,iBAAiB;oBACrC,OAAO,EAAE,kDAAkD;oBAC3D,WAAW,EAAE,8CAA8C;iBAC5D;aACF,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,KAAK,CAAC,8BAA8B,EAAE,KAAK,CAAC,CAAC;YACrD,IAAI,CAAC,YAAY,GAAG,KAAK,CAAC;YAE1B,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,IAAI,CAAC,qBAAqB,CAAC,KAAK,CAAC;aACzC,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;;;;;;;;OASG;IACO,qBAAqB,CAAC,KAAc;QAC5C,MAAM,QAAQ,GAAG,KAAgC,CAAC;QAClD,MAAM,OAAO,GAAG,QAAQ,EAAE,CAAC,SAAS,CAAW,IAAI,eAAe,CAAC;QACnE,MAAM,SAAS,GAAG,QAAQ,EAAE,CAAC,WAAW,CAAW,IAAI,EAAE,CAAC;QAC1D,6EAA6E;QAC7E,MAAM,UAAU,GAAG,QAAQ,EAAE,CAAC,OAAO,CAAW,IAAI,EAAE,CAAC;QAEvD,6DAA6D;QAC7D,mEAAmE;QACnE,IAAI,SAAS,KAAK,eAAe,IAAI,UAAU,KAAK,eAAe;YAC/D,OAAO,CAAC,QAAQ,CAAC,qCAAqC,CAAC,EAAE,CAAC;YAC5D,OAAO;gBACL,IAAI,EAAE,aAAa,CAAC,aAAa;gBACjC,OAAO;gBACP,aAAa,EAAE,KAAK;gBACpB,WAAW,EAAE,gDAAgD;aAC9D,CAAC;QACJ,CAAC;QAED,2DAA2D;QAC3D,IAAI,SAAS,KAAK,eAAe,IAAI,UAAU,KAAK,eAAe;YAC/D,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAC,EAAE,CAAC;YACtC,OAAO;gBACL,IAAI,EAAE,aAAa,CAAC,cAAc;gBAClC,OAAO;gBACP,aAAa,EAAE,KAAK;gBACpB,WAAW,EAAE,sCAAsC;aACpD,CAAC;QACJ,CAAC;QAED,yCAAyC;QACzC,IAAI,SAAS,KAAK,gBAAgB,IAAI,UAAU,KAAK,gBAAgB;YACjE,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,CAAC;YACvC,OAAO;gBACL,IAAI,EAAE,aAAa,CAAC,iBAAiB;gBACrC,OAAO;gBACP,aAAa,EAAE,KAAK;gBACpB,WAAW,EAAE,iCAAiC;aAC/C,CAAC;QACJ,CAAC;QAED,IAAI,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAC;YACzE,UAAU,KAAK,kBAAkB,EAAE,CAAC;YACtC,OAAO;gBACL,IAAI,EAAE,aAAa,CAAC,oBAAoB;gBACxC,OAAO;gBACP,aAAa,EAAE,KAAK;gBACpB,WAAW,EAAE,6DAA6D;aAC3E,CAAC;QACJ,CAAC;QAED,8EAA8E;QAC9E,IAAI,SAAS,KAAK,gBAAgB,IAAI,SAAS,KAAK,uBAAuB;YACvE,UAAU,KAAK,uBAAuB;YACtC,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAC,EAAE,CAAC;YAC5E,OAAO;gBACL,IAAI,EAAE,aAAa,CAAC,cAAc;gBAClC,OAAO;gBACP,aAAa,EAAE,KAAK;gBACpB,WAAW,EAAE,sBAAsB;aACpC,CAAC;QACJ,CAAC;QAED,IAAI,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC;YAC/G,OAAO;gBACL,IAAI,EAAE,aAAa,CAAC,aAAa;gBACjC,OAAO;gBACP,aAAa,EAAE,KAAK;gBACpB,WAAW,EAAE,gDAAgD;aAC9D,CAAC;QACJ,CAAC;QAED,IAAI,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAC,EAAE,CAAC;YAChG,OAAO;gBACL,IAAI,EAAE,aAAa,CAAC,aAAa;gBACjC,OAAO;gBACP,aAAa,EAAE,KAAK;gBACpB,WAAW,EAAE,4DAA4D;aAC1E,CAAC;QACJ,CAAC;QAED,2BAA2B;QAC3B,OAAO;YACL,IAAI,EAAE,aAAa,CAAC,aAAa;YACjC,OAAO;YACP,aAAa,EAAE,KAAK;YACpB,WAAW,EAAE,iDAAiD;SAC/D,CAAC;IACJ,CAAC;IAED,+EAA+E;IAC/E,iBAAiB;IACjB,+EAA+E;IAE/E;;OAEG;IACK,sBAAsB,CAAC,OAAgB;QAC7C,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;QAE9B,OAAO;YACL,EAAE,EAAE,MAAM,CAAC,GAAG,IAAI,EAAE;YACpB,KAAK,EAAE,MAAM,CAAC,KAAe,IAAI,EAAE;YACnC,IAAI,EAAE,MAAM,CAAC,IAAc,IAAI,EAAE;YACjC,SAAS,EAAE,MAAM,CAAC,UAAoB;YACtC,UAAU,EAAE,MAAM,CAAC,WAAqB;YACxC,iBAAiB,EAAE,MAAM,CAAC,kBAA4B;YACtD,aAAa,EAAE,MAAM,CAAC,cAAyB;SAChD,CAAC;IACJ,CAAC;IAED;;;;;OAKG;IACO,KAAK,CAAC,4BAA4B;QAC1C,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,GAAG,CAAC,SAAS,CAAY,CAAC;YAC3E,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,OAAO,IAAI,CAAC;YACd,CAAC;YAED,gCAAgC;YAChC,MAAM,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC,OAAiB,CAAC;YACpD,IAAI,UAAU,EAAE,CAAC;gBACf,OAAO,UAAU,CAAC;YACpB,CAAC;YAED,8CAA8C;YAC9C,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC;YAC3C,OAAQ,IAAI,EAAE,OAAkB,IAAI,IAAI,CAAC;QAC3C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,KAAK,CAAC,uCAAuC,EAAE,KAAK,CAAC,CAAC;YAC9D,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED;;;;;;OAMG;IACO,KAAK,CAAC,2BAA2B;QACzC,gDAAgD;QAChD,OAAO;IACT,CAAC;IAED,+EAA+E;IAC/E,gBAAgB;IAChB,+EAA+E;IAEtE,iBAAiB;QACxB,OAAO,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;IAChC,CAAC;IAEQ,cAAc,CAAC,MAA+B;QACrD,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;IAC1E,CAAC;wGA/gBU,cAAc,cAgCL,YAAY;gEAhCrB,cAAc,WAAd,cAAc,mBAHb,MAAM;;AAGP,cAAc;IAD1B,aAAa,CAAC,UAAU,EAAE,MAAM,CAAC;GACrB,cAAc,CAghB1B;;iFAhhBY,cAAc;cAJ1B,UAAU;eAAC;gBACV,UAAU,EAAE,MAAM;aACnB;;sBAkCc,MAAM;uBAAC,YAAY","sourcesContent":["import { Injectable, Inject } from '@angular/core';\nimport { RegisterClass } from '@memberjunction/global';\nimport { Observable, BehaviorSubject, from } from 'rxjs';\nimport { MJAuthBase } from '../mjexplorer-auth-base.service';\nimport { AngularAuthProviderConfig } from '../IAuthProvider';\nimport OktaAuth, { OktaAuthOptions, IDToken, AccessToken } from '@okta/okta-auth-js';\nimport {\n  StandardUserInfo,\n  StandardAuthToken,\n  StandardAuthError,\n  AuthErrorType,\n  TokenRefreshResult\n} from '../auth-types';\n/**\n * Okta authentication provider implementation - v3.0.0\n *\n * Implements the abstract methods from MJAuthBase to hide Okta-specific details.\n * The key abstraction is that Okta stores the JWT in IDToken.idToken,\n * but consumers never need to know this detail.\n */\n@Injectable({\n  providedIn: 'root'\n})\n@RegisterClass(MJAuthBase, 'okta')\nexport class MJOktaProvider extends MJAuthBase {\n  static readonly PROVIDER_TYPE = 'okta';\n  readonly type = MJOktaProvider.PROVIDER_TYPE;\n  private oktaAuth: OktaAuth;\n  private isRefreshing = false;\n\n  /**\n   * Factory function to provide Angular dependencies required by Okta\n   * Stored as a static property for the factory to access without instantiation\n   */\n  static AngularProviderFactory = (environment: Record<string, unknown>) => [\n    {\n      provide: 'oktaConfig',\n      useValue: {\n        clientId: environment['OKTA_CLIENTID'],\n        domain: environment['OKTA_DOMAIN'],\n        issuer: environment['OKTA_ISSUER'] || `https://${environment['OKTA_DOMAIN']}/oauth2/default`,\n        redirectUri: environment['OKTA_REDIRECT_URI'] || window.location.origin,\n        scopes: environment['OKTA_SCOPES'] || ['openid', 'profile', 'email']\n      }\n    }\n  ];\n\n  /** @deprecated Use {@link AngularProviderFactory}. */\n  static get angularProviderFactory() {\n    return this.AngularProviderFactory;\n  }\n  /** @deprecated Use {@link AngularProviderFactory}. */\n  static set angularProviderFactory(value) {\n    this.AngularProviderFactory = value;\n  }\n\n  constructor(@Inject('oktaConfig') private oktaConfig: OktaAuthOptions & { domain?: string }) {\n    const config: AngularAuthProviderConfig = {\n      name: MJOktaProvider.PROVIDER_TYPE,\n      type: MJOktaProvider.PROVIDER_TYPE\n    };\n    super(config);\n\n    // Build configuration with defaults\n    const oktaAuthConfig: OktaAuthOptions = {\n      clientId: this.oktaConfig.clientId,\n      redirectUri: this.oktaConfig.redirectUri || window.location.origin + '/callback',\n      scopes: this.oktaConfig.scopes || ['openid', 'profile', 'email'],\n      pkce: true, // Use PKCE for security\n      ...this.oktaConfig,\n      // Set issuer after spread to ensure it's not overwritten if not present in config\n      issuer: this.oktaConfig.issuer || (this.oktaConfig.domain ? `https://${this.oktaConfig.domain}/oauth2/default` : '')\n    };\n\n    this.oktaAuth = new OktaAuth(oktaAuthConfig);\n\n    // Listen for token events\n    this.oktaAuth.authStateManager.subscribe((authState: unknown) => {\n      const state = authState as { isAuthenticated?: boolean; idToken?: IDToken };\n      this.updateAuthState(state.isAuthenticated || false);\n\n      // Don't update user info if we're in the middle of a refresh\n      if (!this.isRefreshing) {\n        if (state.isAuthenticated && state.idToken) {\n          const userInfo = this.mapOktaTokenToStandard(state.idToken);\n          this.updateUserInfo(userInfo);\n        } else {\n          this.updateUserInfo(null);\n        }\n      }\n    });\n  }\n\n  // ============================================================================\n  // LIFECYCLE METHODS\n  // ============================================================================\n\n  async initialize(): Promise<void> {\n    // Check URL for logout indicator\n    const urlParams = new URLSearchParams(window.location.search);\n    const isPostLogout = urlParams.has('logout');\n\n    if (isPostLogout) {\n      // We're returning from a logout, clear the URL and stay logged out\n      window.history.replaceState({}, document.title, window.location.pathname);\n      return;\n    }\n\n    // Check if we're returning from a login redirect\n    // Note: handleRedirect() is the modern v7.x replacement for deprecated handleLoginRedirect()\n    if (this.oktaAuth.isLoginRedirect()) {\n      try {\n        await this.oktaAuth.handleRedirect();\n\n        // After handling redirect, check if we're authenticated\n        const authState = await this.oktaAuth.authStateManager.getAuthState();\n\n        if (authState?.isAuthenticated) {\n          this.updateAuthState(true);\n\n          // Get and update user info\n          const idToken = await this.oktaAuth.tokenManager.get('idToken') as IDToken;\n          if (idToken) {\n            const userInfo = this.mapOktaTokenToStandard(idToken);\n            this.updateUserInfo(userInfo);\n          }\n        }\n      } catch (error) {\n        console.error('[Okta] Initialization redirect handling error:', error);\n      }\n      return; // Don't check for existing session after handling redirect\n    }\n\n    // Only check for existing session if not a redirect\n    try {\n      const isAuthenticated = await this.oktaAuth.isAuthenticated();\n\n      if (isAuthenticated) {\n        // Double-check we actually have valid tokens\n        const idToken = await this.oktaAuth.tokenManager.get('idToken') as IDToken;\n\n        if (idToken?.idToken) {\n          this.updateAuthState(true);\n\n          // Update user info from cached token\n          const userInfo = this.mapOktaTokenToStandard(idToken);\n          this.updateUserInfo(userInfo);\n        } else {\n          // No valid tokens, stay logged out\n          this.updateAuthState(false);\n        }\n      }\n    } catch (error) {\n      console.warn('[Okta] Error checking authentication status:', error);\n    }\n  }\n\n  protected async loginInternal(options?: Record<string, unknown>): Promise<void> {\n    try {\n      // Check if we're in a redirect callback\n      // Note: handleRedirect() is the modern v7.x replacement for deprecated handleLoginRedirect()\n      if (this.oktaAuth.isLoginRedirect()) {\n        await this.oktaAuth.handleRedirect();\n        return;\n      }\n\n      // Start the login flow\n      await this.oktaAuth.signInWithRedirect({\n        originalUri: (options?.['targetUrl'] as string) || '/',\n        ...options\n      });\n    } catch (error) {\n      console.error('[Okta] Login error:', error);\n      throw error;\n    }\n  }\n\n  protected async logoutInternal(): Promise<void> {\n    try {\n      // Clear the local authentication state immediately\n      this.updateAuthState(false);\n      this.updateUserInfo(null);\n\n      // Clear all tokens from local storage\n      await this.oktaAuth.tokenManager.clear();\n\n      // Sign out from Okta completely\n      await this.oktaAuth.signOut({\n        postLogoutRedirectUri: window.location.origin,\n        clearTokensBeforeRedirect: true\n      });\n\n      // Note: The signOut call will redirect the browser, so code after this won't execute\n    } catch (error) {\n      console.error('[Okta] Logout error:', error);\n      // If logout fails, at least clear local state and reload\n      window.location.href = window.location.origin;\n    }\n  }\n\n  async handleCallback(): Promise<void> {\n    try {\n      // Note: handleRedirect() is the modern v7.x replacement for deprecated handleLoginRedirect()\n      if (this.oktaAuth.isLoginRedirect()) {\n        await this.oktaAuth.handleRedirect();\n\n        // After handling redirect, check if we're authenticated\n        const authState = await this.oktaAuth.authStateManager.getAuthState();\n        if (authState?.isAuthenticated) {\n          // Do a controlled reload after successful login\n          setTimeout(() => {\n            window.location.href = window.location.origin;\n          }, 100);\n        }\n      }\n    } catch (error) {\n      console.error('[Okta] Callback handling error:', error);\n      throw error;\n    }\n  }\n\n  // ============================================================================\n  // ABSTRACT METHOD IMPLEMENTATIONS (v3.0.0)\n  // ============================================================================\n\n  /**\n   * Extract ID token from Okta's storage\n   *\n   * Okta stores the JWT in IDToken.idToken\n   * This is the key abstraction - consumers never need to know about Okta's structure!\n   */\n  protected async extractIdTokenInternal(): Promise<string | null> {\n    try {\n      const idToken = await this.oktaAuth.tokenManager.get('idToken') as IDToken;\n      // Okta-specific detail: JWT is in idToken property\n      return idToken?.idToken || null;\n    } catch (error) {\n      console.error('[Okta] Error extracting ID token:', error);\n      return null;\n    }\n  }\n\n  /**\n   * Extract complete token info from Okta\n   *\n   * Maps Okta's token structure to StandardAuthToken\n   */\n  protected async extractTokenInfoInternal(): Promise<StandardAuthToken | null> {\n    try {\n      const idToken = await this.oktaAuth.tokenManager.get('idToken') as IDToken;\n      const accessToken = await this.oktaAuth.tokenManager.get('accessToken') as AccessToken;\n\n      if (!idToken?.idToken) {\n        return null;\n      }\n\n      return {\n        idToken: idToken.idToken,\n        accessToken: accessToken?.accessToken,\n        expiresAt: idToken.expiresAt ? idToken.expiresAt * 1000 : 0, // Convert to milliseconds\n        scopes: idToken.scopes\n      };\n    } catch (error) {\n      console.error('[Okta] Error extracting token info:', error);\n      return null;\n    }\n  }\n\n  /**\n   * Extract user info from Okta claims\n   *\n   * Maps Okta's IDToken structure to StandardUserInfo\n   */\n  protected async extractUserInfoInternal(): Promise<StandardUserInfo | null> {\n    try {\n      const idToken = await this.oktaAuth.tokenManager.get('idToken') as IDToken;\n      if (!idToken) {\n        return null;\n      }\n\n      return this.mapOktaTokenToStandard(idToken);\n    } catch (error) {\n      console.error('[Okta] Error extracting user info:', error);\n      return null;\n    }\n  }\n\n  /**\n   * Refresh token using Okta's token renewal\n   *\n   * Uses renewTokens() to get new tokens silently\n   */\n  protected async refreshTokenInternal(): Promise<TokenRefreshResult> {\n    try {\n      console.log('[Okta] Attempting to refresh token...');\n\n      // Set flag to prevent authStateManager from triggering updates\n      this.isRefreshing = true;\n\n      // First check if we're authenticated\n      const isAuthenticated = await this.oktaAuth.isAuthenticated();\n\n      if (!isAuthenticated) {\n        this.isRefreshing = false;\n        return {\n          success: false,\n          error: {\n            type: AuthErrorType.NO_ACTIVE_SESSION,\n            message: 'User is not authenticated',\n            userMessage: 'You need to log in to continue.'\n          }\n        };\n      }\n\n      // Check if tokens exist\n      const idToken = await this.oktaAuth.tokenManager.get('idToken') as IDToken;\n      const accessToken = await this.oktaAuth.tokenManager.get('accessToken') as AccessToken;\n\n      if (!idToken || !accessToken) {\n        this.isRefreshing = false;\n        return {\n          success: false,\n          error: {\n            type: AuthErrorType.NO_ACTIVE_SESSION,\n            message: 'No tokens available to refresh',\n            userMessage: 'Session not found. Please log in again.'\n          }\n        };\n      }\n\n      // Attempt to renew tokens\n      const renewedTokens = await this.oktaAuth.token.renewTokens();\n\n      if (renewedTokens.idToken) {\n        // Store the renewed tokens\n        this.oktaAuth.tokenManager.setTokens(renewedTokens);\n\n        // Wait a moment before resetting the flag\n        await new Promise(resolve => setTimeout(resolve, 100));\n\n        this.isRefreshing = false;\n\n        const newIdToken = renewedTokens.idToken as IDToken;\n        console.log('[Okta] Token refresh successful', {\n          expiresAt: newIdToken.expiresAt ? new Date(newIdToken.expiresAt * 1000).toISOString() : 'N/A'\n        });\n\n        const token: StandardAuthToken = {\n          idToken: newIdToken.idToken || '',\n          accessToken: renewedTokens.accessToken?.accessToken,\n          expiresAt: newIdToken.expiresAt ? newIdToken.expiresAt * 1000 : 0,\n          scopes: newIdToken.scopes\n        };\n\n        return {\n          success: true,\n          token\n        };\n      }\n\n      this.isRefreshing = false;\n      return {\n        success: false,\n        error: {\n          type: AuthErrorType.NO_ACTIVE_SESSION,\n          message: 'Token renewal succeeded but no ID token returned',\n          userMessage: 'Session refresh failed. Please log in again.'\n        }\n      };\n    } catch (error) {\n      console.error('[Okta] Token refresh failed:', error);\n      this.isRefreshing = false;\n\n      return {\n        success: false,\n        error: this.classifyErrorInternal(error)\n      };\n    }\n  }\n\n  /**\n   * Classify Okta-specific errors into semantic types\n   *\n   * Maps Okta error patterns to AuthErrorType enum.\n   * Updated for okta-auth-js v7.x error codes.\n   *\n   * Error sources:\n   * - errorCode: From Okta SDK errors (AuthSdkError, AuthApiError)\n   * - error: From OAuth /token endpoint responses (invalid_grant, access_denied, etc.)\n   */\n  protected classifyErrorInternal(error: unknown): StandardAuthError {\n    const errorObj = error as Record<string, unknown>;\n    const message = errorObj?.['message'] as string || 'Unknown error';\n    const errorCode = errorObj?.['errorCode'] as string || '';\n    // OAuth errors from /token endpoint use 'error' field instead of 'errorCode'\n    const oauthError = errorObj?.['error'] as string || '';\n\n    // Handle invalid_grant - refresh token is invalid or expired\n    // This is a common error when refresh tokens expire or are revoked\n    if (errorCode === 'invalid_grant' || oauthError === 'invalid_grant' ||\n        message.includes('refresh token is invalid or expired')) {\n      return {\n        type: AuthErrorType.TOKEN_EXPIRED,\n        message,\n        originalError: error,\n        userMessage: 'Your session has expired. Please log in again.'\n      };\n    }\n\n    // Handle access_denied - user or server denied the request\n    if (errorCode === 'access_denied' || oauthError === 'access_denied' ||\n        message.includes('access_denied')) {\n      return {\n        type: AuthErrorType.USER_CANCELLED,\n        message,\n        originalError: error,\n        userMessage: 'Access was denied. Please try again.'\n      };\n    }\n\n    // Check for specific Okta error patterns\n    if (errorCode === 'login_required' || oauthError === 'login_required' ||\n        message.includes('login_required')) {\n      return {\n        type: AuthErrorType.NO_ACTIVE_SESSION,\n        message,\n        originalError: error,\n        userMessage: 'You need to log in to continue.'\n      };\n    }\n\n    if (message.includes('not to prompt') || message.includes('consent_required') ||\n        oauthError === 'consent_required') {\n      return {\n        type: AuthErrorType.INTERACTION_REQUIRED,\n        message,\n        originalError: error,\n        userMessage: 'Additional authentication is required. Please log in again.'\n      };\n    }\n\n    // Handle both user_cancelled (SDK) and user_canceled_request (OAuth redirect)\n    if (errorCode === 'user_cancelled' || errorCode === 'user_canceled_request' ||\n        oauthError === 'user_canceled_request' ||\n        message.includes('user cancelled') || message.includes('user canceled')) {\n      return {\n        type: AuthErrorType.USER_CANCELLED,\n        message,\n        originalError: error,\n        userMessage: 'Login was cancelled.'\n      };\n    }\n\n    if (message.includes('token expired') || message.includes('invalid_token') || message.includes('unauthorized')) {\n      return {\n        type: AuthErrorType.TOKEN_EXPIRED,\n        message,\n        originalError: error,\n        userMessage: 'Your session has expired. Please log in again.'\n      };\n    }\n\n    if (message.includes('network') || message.includes('fetch') || message.includes('Load failed')) {\n      return {\n        type: AuthErrorType.NETWORK_ERROR,\n        message,\n        originalError: error,\n        userMessage: 'Network error. Please check your connection and try again.'\n      };\n    }\n\n    // Default to unknown error\n    return {\n      type: AuthErrorType.UNKNOWN_ERROR,\n      message,\n      originalError: error,\n      userMessage: 'An unexpected error occurred. Please try again.'\n    };\n  }\n\n  // ============================================================================\n  // HELPER METHODS\n  // ============================================================================\n\n  /**\n   * Map Okta IDToken to StandardUserInfo\n   */\n  private mapOktaTokenToStandard(idToken: IDToken): StandardUserInfo {\n    const claims = idToken.claims;\n\n    return {\n      id: claims.sub || '',\n      email: claims.email as string || '',\n      name: claims.name as string || '',\n      givenName: claims.given_name as string,\n      familyName: claims.family_name as string,\n      preferredUsername: claims.preferred_username as string,\n      emailVerified: claims.email_verified as boolean\n    };\n  }\n\n  /**\n   * Get profile picture URL from Okta\n   *\n   * Okta may include picture URL in user claims, similar to Auth0.\n   * If available, we can also fetch from Okta's /userinfo endpoint.\n   */\n  protected async getProfilePictureUrlInternal(): Promise<string | null> {\n    try {\n      const idToken = await this.oktaAuth.tokenManager.get('idToken') as IDToken;\n      if (!idToken) {\n        return null;\n      }\n\n      // Check if picture is in claims\n      const pictureUrl = idToken.claims.picture as string;\n      if (pictureUrl) {\n        return pictureUrl;\n      }\n\n      // Alternatively, fetch from userinfo endpoint\n      const user = await this.oktaAuth.getUser();\n      return (user?.picture as string) || null;\n    } catch (error) {\n      console.error('[Okta] Error getting profile picture:', error);\n      return null;\n    }\n  }\n\n  /**\n   * Handle session expiry - no-op for Okta\n   *\n   * Okta uses refresh tokens, so it doesn't need interactive re-authentication\n   * when tokens expire. If refresh fails, the base class will throw an error\n   * and the user must log out/in manually.\n   */\n  protected async handleSessionExpiryInternal(): Promise<void> {\n    // No-op - Okta doesn't need interactive re-auth\n    return;\n  }\n\n  // ============================================================================\n  // CONFIGURATION\n  // ============================================================================\n\n  override getRequiredConfig(): string[] {\n    return ['clientId', 'domain'];\n  }\n\n  override validateConfig(config: Record<string, unknown>): boolean {\n    return !!(config['clientId'] && (config['domain'] || config['issuer']));\n  }\n}\n"]}

package/dist/lib/providers/mjexplorer-workos-provider.service.d.ts

@@ -43,7 +43,7 @@ export declare class MJWorkOSProvider extends MJAuthBase implements OnDestroy {
      * Factory function to provide the Angular dependencies required by WorkOS.
      * Stored as a static property so the factory can read it without instantiation.
      */
-    static angularProviderFactory: (environment: Record<string, unknown>) => {
+    static AngularProviderFactory: (environment: Record<string, unknown>) => {
         provide: string;
         useValue: {
             clientId: string;
@@ -52,6 +52,26 @@ export declare class MJWorkOSProvider extends MJAuthBase implements OnDestroy {
             devMode: boolean;
         };
     }[];
+    /** @deprecated Use {@link AngularProviderFactory}. */
+    static get angularProviderFactory(): (environment: Record<string, unknown>) => {
+        provide: string;
+        useValue: {
+            clientId: string;
+            redirectUri: string;
+            apiHostname: string | undefined;
+            devMode: boolean;
+        };
+    }[];
+    /** @deprecated Use {@link AngularProviderFactory}. */
+    static set angularProviderFactory(value: (environment: Record<string, unknown>) => {
+        provide: string;
+        useValue: {
+            clientId: string;
+            redirectUri: string;
+            apiHostname: string | undefined;
+            devMode: boolean;
+        };
+    }[]);
     constructor(workosConfig: WorkOSAuthConfig);
     /**
      * Initialize the AuthKit client. `createClient()` constructs the client AND processes any

package/dist/lib/providers/mjexplorer-workos-provider.service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"mjexplorer-workos-provider.service.d.ts","sourceRoot":"","sources":["../../../src/lib/providers/mjexplorer-workos-provider.service.ts"],"names":[],"mappings":"AAAA,OAAO,EAAsB,SAAS,EAAE,MAAM,eAAe,CAAC;AAE9D,OAAO,EAAE,UAAU,EAAE,MAAM,iCAAiC,CAAC;AAU7D,OAAO,EACL,gBAAgB,EAChB,iBAAiB,EACjB,iBAAiB,EAEjB,kBAAkB,EACnB,MAAM,eAAe,CAAC;;AAQvB;;;GAGG;AACH,MAAM,WAAW,gBAAgB;IAC/B,iEAAiE;IACjE,QAAQ,EAAE,MAAM,CAAC;IACjB,mGAAmG;IACnG,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,sFAAsF;IACtF,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,+EAA+E;IAC/E,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,qBAIa,gBAAiB,SAAQ,UAAW,YAAW,SAAS;IAuB/B,OAAO,CAAC,YAAY;IAtBxD,MAAM,CAAC,QAAQ,CAAC,aAAa,YAAY;IACzC,QAAQ,CAAC,IAAI,YAAkC;IAE/C,OAAO,CAAC,MAAM,CAA6B;IAC3C,OAAO,CAAC,WAAW,CAA8B;IAEjD;;;OAGG;IACH,MAAM,CAAC,sBAAsB,GAAI,aAAa,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;;;sBAInB,MAAM;;yBAEC,MAAM,GAAG,SAAS;;;QAIzE;gBAE0C,YAAY,EAAE,gBAAgB;IAY1E;;;;;;OAMG;IACG,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC;YAgBnB,mBAAmB;IAgBjC;;OAEG;IACH,OAAO,CAAC,gBAAgB;cAWR,aAAa,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;cAO/D,cAAc,IAAI,OAAO,CAAC,IAAI,CAAC;IAkBzC,cAAc,IAAI,OAAO,CAAC,IAAI,CAAC;IAMrC,WAAW,IAAI,IAAI;IAUnB;;;;OAIG;cACa,sBAAsB,IAAI,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAehE;;;OAGG;cACa,wBAAwB,IAAI,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC;IAqB7E;;;OAGG;cACa,uBAAuB,IAAI,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC;IAK3E;;OAEG;cACa,oBAAoB,IAAI,OAAO,CAAC,kBAAkB,CAAC;IAoCnE;;OAEG;IACH,SAAS,CAAC,qBAAqB,CAAC,KAAK,EAAE,OAAO,GAAG,iBAAiB;IAuClE;;OAEG;cACa,4BAA4B,IAAI,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAItE;;;;OAIG;cACa,2BAA2B,IAAI,OAAO,CAAC,IAAI,CAAC;YAQ9C,iBAAiB;IAM/B;;;OAGG;IACH,OAAO,CAAC,uBAAuB;IAkBtB,iBAAiB,IAAI,MAAM,EAAE;IAI7B,cAAc,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO;yCA5TtD,gBAAgB;6CAAhB,gBAAgB;CAiU5B"}
+{"version":3,"file":"mjexplorer-workos-provider.service.d.ts","sourceRoot":"","sources":["../../../src/lib/providers/mjexplorer-workos-provider.service.ts"],"names":[],"mappings":"AAAA,OAAO,EAAsB,SAAS,EAAE,MAAM,eAAe,CAAC;AAE9D,OAAO,EAAE,UAAU,EAAE,MAAM,iCAAiC,CAAC;AAU7D,OAAO,EACL,gBAAgB,EAChB,iBAAiB,EACjB,iBAAiB,EAEjB,kBAAkB,EACnB,MAAM,eAAe,CAAC;;AAQvB;;;GAGG;AACH,MAAM,WAAW,gBAAgB;IAC/B,iEAAiE;IACjE,QAAQ,EAAE,MAAM,CAAC;IACjB,mGAAmG;IACnG,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,sFAAsF;IACtF,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,+EAA+E;IAC/E,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,qBAIa,gBAAiB,SAAQ,UAAW,YAAW,SAAS;IAgC/B,OAAO,CAAC,YAAY;IA/BxD,MAAM,CAAC,QAAQ,CAAC,aAAa,YAAY;IACzC,QAAQ,CAAC,IAAI,YAAkC;IAE/C,OAAO,CAAC,MAAM,CAA6B;IAC3C,OAAO,CAAC,WAAW,CAA8B;IAEjD;;;OAGG;IACH,MAAM,CAAC,sBAAsB,GAAI,aAAa,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;;;sBAInB,MAAM;;yBAEC,MAAM,GAAG,SAAS;;;QAIzE;IAEF,sDAAsD;IACtD,MAAM,KAAK,sBAAsB,kBAba,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;;;sBAInB,MAAM;;yBAEC,MAAM,GAAG,SAAS;;;QAS1E;IACD,sDAAsD;IACtD,MAAM,KAAK,sBAAsB,CAAC,KAAK,gBAjBO,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;;;sBAInB,MAAM;;yBAEC,MAAM,GAAG,SAAS;;;OAWpC,EAEtC;gBAE2C,YAAY,EAAE,gBAAgB;IAY1E;;;;;;OAMG;IACG,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC;YAgBnB,mBAAmB;IAgBjC;;OAEG;IACH,OAAO,CAAC,gBAAgB;cAWR,aAAa,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;cAO/D,cAAc,IAAI,OAAO,CAAC,IAAI,CAAC;IAkBzC,cAAc,IAAI,OAAO,CAAC,IAAI,CAAC;IAMrC,WAAW,IAAI,IAAI;IAUnB;;;;OAIG;cACa,sBAAsB,IAAI,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAehE;;;OAGG;cACa,wBAAwB,IAAI,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC;IAqB7E;;;OAGG;cACa,uBAAuB,IAAI,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC;IAK3E;;OAEG;cACa,oBAAoB,IAAI,OAAO,CAAC,kBAAkB,CAAC;IAoCnE;;OAEG;IACH,SAAS,CAAC,qBAAqB,CAAC,KAAK,EAAE,OAAO,GAAG,iBAAiB;IAuClE;;OAEG;cACa,4BAA4B,IAAI,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAItE;;;;OAIG;cACa,2BAA2B,IAAI,OAAO,CAAC,IAAI,CAAC;YAQ9C,iBAAiB;IAM/B;;;OAGG;IACH,OAAO,CAAC,uBAAuB;IAkBtB,iBAAiB,IAAI,MAAM,EAAE;IAI7B,cAAc,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO;yCArUtD,gBAAgB;6CAAhB,gBAAgB;CA0U5B"}

package/dist/lib/providers/mjexplorer-workos-provider.service.js

@@ -39,7 +39,7 @@ let MJWorkOSProvider = class MJWorkOSProvider extends MJAuthBase {
      * Factory function to provide the Angular dependencies required by WorkOS.
      * Stored as a static property so the factory can read it without instantiation.
      */
-    static angularProviderFactory = (environment) => [
+    static AngularProviderFactory = (environment) => [
         {
             provide: 'workosConfig',
             useValue: {
@@ -50,6 +50,14 @@ let MJWorkOSProvider = class MJWorkOSProvider extends MJAuthBase {
             }
         }
     ];
+    /** @deprecated Use {@link AngularProviderFactory}. */
+    static get angularProviderFactory() {
+        return this.AngularProviderFactory;
+    }
+    /** @deprecated Use {@link AngularProviderFactory}. */
+    static set angularProviderFactory(value) {
+        this.AngularProviderFactory = value;
+    }
     constructor(workosConfig) {
         const config = {
             name: MJWorkOSProvider_1.PROVIDER_TYPE,

package/dist/lib/providers/mjexplorer-workos-provider.service.js.map

@@ -1 +1 @@
-{"version":3,"file":"mjexplorer-workos-provider.service.js","sourceRoot":"","sources":["../../../src/lib/providers/mjexplorer-workos-provider.service.ts"],"names":[],"mappings":";;;;;;;AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,EAAa,MAAM,eAAe,CAAC;AAC9D,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AACvD,OAAO,EAAE,UAAU,EAAE,MAAM,iCAAiC,CAAC;AAE7D,OAAO,EACL,YAAY,EACZ,SAAS,EAET,kBAAkB,EAClB,cAAc,EACd,mBAAmB,EACpB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAIL,aAAa,EAEd,MAAM,eAAe,CAAC;;AAuBvB;;;;;;;;;;;;;;;;GAgBG;AAKI,IAAM,gBAAgB,GAAtB,MAAM,gBAAiB,SAAQ,UAAU;;IAuBF;IAtB5C,MAAM,CAAU,aAAa,GAAG,QAAQ,CAAC;IAChC,IAAI,GAAG,kBAAgB,CAAC,aAAa,CAAC;IAEvC,MAAM,GAAwB,IAAI,CAAC;IACnC,WAAW,GAAyB,IAAI,CAAC;IAEjD;;;OAGG;IACH,MAAM,CAAC,sBAAsB,GAAG,CAAC,WAAoC,EAAE,EAAE,CAAC;QACxE;YACE,OAAO,EAAE,cAAc;YACvB,QAAQ,EAAE;gBACR,QAAQ,EAAE,WAAW,CAAC,iBAAiB,CAAW;gBAClD,WAAW,EAAG,WAAW,CAAC,qBAAqB,CAAY,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM;gBACrF,WAAW,EAAE,WAAW,CAAC,qBAAqB,CAAuB;gBACrE,OAAO,EAAG,WAAW,CAAC,iBAAiB,CAAyB,IAAI,KAAK;aAC/C;SAC7B;KACF,CAAC;IAEF,YAA4C,YAA8B;QACxE,MAAM,MAAM,GAA8B;YACxC,IAAI,EAAE,kBAAgB,CAAC,aAAa;YACpC,IAAI,EAAE,kBAAgB,CAAC,aAAa;SACrC,CAAC;QACF,KAAK,CAAC,MAAM,CAAC,CAAC;QAL4B,iBAAY,GAAZ,YAAY,CAAkB;IAM1E,CAAC;IAED,+EAA+E;IAC/E,oBAAoB;IACpB,+EAA+E;IAE/E;;;;;;OAMG;IACH,KAAK,CAAC,UAAU;QACd,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAChB,OAAO;QACT,CAAC;QACD,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YACrB,OAAO,IAAI,CAAC,WAAW,CAAC;QAC1B,CAAC;QAED,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,mBAAmB,EAAE,CAAC;QAC9C,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,WAAW,CAAC;QACzB,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;QAC1B,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,mBAAmB;QAC/B,IAAI,CAAC,MAAM,GAAG,MAAM,YAAY,CAAC,IAAI,CAAC,YAAY,CAAC,QAAQ,EAAE;YAC3D,WAAW,EAAE,IAAI,CAAC,YAAY,CAAC,WAAW;YAC1C,WAAW,EAAE,IAAI,CAAC,YAAY,CAAC,WAAW;YAC1C,OAAO,EAAE,IAAI,CAAC,YAAY,CAAC,OAAO;YAClC,iFAAiF;YACjF,SAAS,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,gBAAgB,EAAE;YACxC,gBAAgB,EAAE,GAAG,EAAE;gBACrB,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;gBAC5B,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;YAC5B,CAAC;SACF,CAAC,CAAC;QAEH,IAAI,CAAC,gBAAgB,EAAE,CAAC;IAC1B,CAAC;IAED;;OAEG;IACK,gBAAgB;QACtB,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,IAAI,IAAI,CAAC;QAC5C,IAAI,IAAI,EAAE,CAAC;YACT,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;YAC3B,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,CAAC,CAAC;QAC1D,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;YAC5B,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;QAC5B,CAAC;IACH,CAAC;IAES,KAAK,CAAC,aAAa,CAAC,OAAiC;QAC7D,MAAM,IAAI,CAAC,iBAAiB,EAAE,CAAC;QAC/B,oFAAoF;QACpF,6EAA6E;QAC7E,MAAM,IAAI,CAAC,MAAO,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACrC,CAAC;IAES,KAAK,CAAC,cAAc;QAC5B,uFAAuF;QACvF,2FAA2F;QAC3F,6DAA6D;QAC7D,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;QAC5B,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;QAC1B,IAAI,CAAC;YACH,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,YAAY,CAAC,WAAW,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;QAC9F,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,gEAAgE;YAChE,IAAI,KAAK,YAAY,cAAc,EAAE,CAAC;gBACpC,MAAM,CAAC,QAAQ,CAAC,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC;YAChD,CAAC;iBAAM,CAAC;gBACN,MAAM,KAAK,CAAC;YACd,CAAC;QACH,CAAC;IACH,CAAC;IAED,KAAK,CAAC,cAAc;QAClB,kFAAkF;QAClF,+EAA+E;QAC/E,MAAM,IAAI,CAAC,iBAAiB,EAAE,CAAC;IACjC,CAAC;IAED,WAAW;QACT,iDAAiD;QACjD,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC;QACvB,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;IACrB,CAAC;IAED,+EAA+E;IAC/E,kCAAkC;IAClC,+EAA+E;IAE/E;;;;OAIG;IACO,KAAK,CAAC,sBAAsB;QACpC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;YACjB,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IAAI,CAAC;YACH,OAAO,MAAM,IAAI,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC;QAC5C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,kBAAkB,EAAE,CAAC;gBACxC,OAAO,IAAI,CAAC;YACd,CAAC;YACD,OAAO,CAAC,KAAK,CAAC,yCAAyC,EAAE,KAAK,CAAC,CAAC;YAChE,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED;;;OAGG;IACO,KAAK,CAAC,wBAAwB;QACtC,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,sBAAsB,EAAE,CAAC;QACxD,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,OAAO,IAAI,CAAC;QACd,CAAC;QAED,IAAI,SAAS,GAAG,CAAC,CAAC;QAClB,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,SAAS,CAAC,WAAW,CAAC,CAAC;YACtC,SAAS,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,gCAAgC;QAClF,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,IAAI,CAAC,gDAAgD,EAAE,KAAK,CAAC,CAAC;QACxE,CAAC;QAED,OAAO;YACL,OAAO,EAAE,WAAW;YACpB,WAAW;YACX,SAAS;SACV,CAAC;IACJ,CAAC;IAED;;;OAGG;IACO,KAAK,CAAC,uBAAuB;QACrC,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,IAAI,IAAI,CAAC;QAC5C,OAAO,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC1D,CAAC;IAED;;OAEG;IACO,KAAK,CAAC,oBAAoB;QAClC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;YACjB,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE;oBACL,IAAI,EAAE,aAAa,CAAC,iBAAiB;oBACrC,OAAO,EAAE,+BAA+B;oBACxC,WAAW,EAAE,iCAAiC;iBAC/C;aACF,CAAC;QACJ,CAAC;QAED,IAAI,CAAC;YACH,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC;YAC7E,IAAI,CAAC,gBAAgB,EAAE,CAAC;YAExB,IAAI,SAAS,GAAG,CAAC,CAAC;YAClB,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,SAAS,CAAC,WAAW,CAAC,CAAC;gBACtC,SAAS,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;YACjD,CAAC;YAAC,MAAM,CAAC;gBACP,4FAA4F;YAC9F,CAAC;YAED,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,KAAK,EAAE,EAAE,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,SAAS,EAAE;aACxD,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,IAAI,CAAC,qBAAqB,CAAC,KAAK,CAAC;aACzC,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;OAEG;IACO,qBAAqB,CAAC,KAAc;QAC5C,IAAI,KAAK,YAAY,kBAAkB,IAAI,KAAK,YAAY,cAAc,EAAE,CAAC;YAC3E,OAAO;gBACL,IAAI,EAAE,aAAa,CAAC,iBAAiB;gBACrC,OAAO,EAAG,KAAe,CAAC,OAAO;gBACjC,aAAa,EAAE,KAAK;gBACpB,WAAW,EAAE,iCAAiC;aAC/C,CAAC;QACJ,CAAC;QAED,yFAAyF;QACzF,6DAA6D;QAC7D,IAAI,KAAK,YAAY,mBAAmB,IAAK,KAAe,EAAE,IAAI,KAAK,cAAc,EAAE,CAAC;YACtF,OAAO;gBACL,IAAI,EAAE,aAAa,CAAC,aAAa;gBACjC,OAAO,EAAG,KAAe,CAAC,OAAO;gBACjC,aAAa,EAAE,KAAK;gBACpB,WAAW,EAAE,gDAAgD;aAC9D,CAAC;QACJ,CAAC;QAED,MAAM,OAAO,GAAI,KAA8B,EAAE,OAAO,IAAI,eAAe,CAAC;QAC5E,IAAI,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAC,EAAE,CAAC;YACpG,OAAO;gBACL,IAAI,EAAE,aAAa,CAAC,aAAa;gBACjC,OAAO;gBACP,aAAa,EAAE,KAAK;gBACpB,WAAW,EAAE,4DAA4D;aAC1E,CAAC;QACJ,CAAC;QAED,OAAO;YACL,IAAI,EAAE,aAAa,CAAC,aAAa;YACjC,OAAO;YACP,aAAa,EAAE,KAAK;YACpB,WAAW,EAAE,iDAAiD;SAC/D,CAAC;IACJ,CAAC;IAED;;OAEG;IACO,KAAK,CAAC,4BAA4B;QAC1C,OAAO,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,EAAE,iBAAiB,IAAI,IAAI,CAAC;IAC3D,CAAC;IAED;;;;OAIG;IACO,KAAK,CAAC,2BAA2B;QACzC,OAAO;IACT,CAAC;IAED,+EAA+E;IAC/E,iBAAiB;IACjB,+EAA+E;IAEvE,KAAK,CAAC,iBAAiB;QAC7B,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;YACjB,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC;QAC1B,CAAC;IACH,CAAC;IAED;;;OAGG;IACK,uBAAuB,CAAC,IAAU;QACxC,MAAM,QAAQ,GAAG,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC3E,OAAO;YACL,EAAE,EAAE,IAAI,CAAC,EAAE;YACX,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,IAAI,EAAE,QAAQ,IAAI,IAAI,CAAC,KAAK;YAC5B,SAAS,EAAE,IAAI,CAAC,SAAS,IAAI,SAAS;YACtC,UAAU,EAAE,IAAI,CAAC,QAAQ,IAAI,SAAS;YACtC,iBAAiB,EAAE,IAAI,CAAC,KAAK;YAC7B,UAAU,EAAE,IAAI,CAAC,iBAAiB,IAAI,SAAS;YAC/C,aAAa,EAAE,IAAI,CAAC,aAAa;SAClC,CAAC;IACJ,CAAC;IAED,+EAA+E;IAC/E,gBAAgB;IAChB,+EAA+E;IAEtE,iBAAiB;QACxB,OAAO,CAAC,UAAU,CAAC,CAAC;IACtB,CAAC;IAEQ,cAAc,CAAC,MAA+B;QACrD,gFAAgF;QAChF,6BAA6B;QAC7B,OAAO,CAAC,CAAC,IAAI,CAAC,YAAY,EAAE,QAAQ,IAAI,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IAC/D,CAAC;0GAhUU,gBAAgB,cAuBP,cAAc;gEAvBvB,gBAAgB,WAAhB,gBAAgB,mBAHf,MAAM;;AAGP,gBAAgB;IAD5B,aAAa,CAAC,UAAU,EAAE,QAAQ,CAAC;GACvB,gBAAgB,CAiU5B;;iFAjUY,gBAAgB;cAJ5B,UAAU;eAAC;gBACV,UAAU,EAAE,MAAM;aACnB;;sBAyBc,MAAM;uBAAC,cAAc","sourcesContent":["import { Injectable, Inject, OnDestroy } from '@angular/core';\nimport { RegisterClass } from '@memberjunction/global';\nimport { MJAuthBase } from '../mjexplorer-auth-base.service';\nimport { AngularAuthProviderConfig } from '../IAuthProvider';\nimport {\n  createClient,\n  getClaims,\n  User,\n  LoginRequiredError,\n  NoSessionError,\n  RefreshTimeoutError\n} from '@workos-inc/authkit-js';\nimport {\n  StandardUserInfo,\n  StandardAuthToken,\n  StandardAuthError,\n  AuthErrorType,\n  TokenRefreshResult\n} from '../auth-types';\n\n/**\n * The AuthKit client instance type. The `@workos-inc/authkit-js` package does not export its\n * `Client` class directly, so we derive the type from `createClient`'s resolved return value.\n */\ntype WorkOSClient = Awaited<ReturnType<typeof createClient>>;\n\n/**\n * Resolved configuration for the WorkOS AuthKit client.\n * Provided via the `'workosConfig'` injection token (see `angularProviderFactory`).\n */\nexport interface WorkOSAuthConfig {\n  /** WorkOS AuthKit client ID (e.g. `client_01H...`). Required. */\n  clientId: string;\n  /** OAuth redirect URI registered in the WorkOS dashboard. Defaults to `window.location.origin`. */\n  redirectUri?: string;\n  /** Override the WorkOS API hostname (rarely needed; for proxies / custom domains). */\n  apiHostname?: string;\n  /** Enables AuthKit dev mode (localStorage session, no third-party cookies). */\n  devMode?: boolean;\n}\n\n/**\n * WorkOS (AuthKit) authentication provider — browser side.\n *\n * Wraps the vanilla-JS `@workos-inc/authkit-js` SDK behind {@link MJAuthBase} so the rest of\n * MemberJunction never sees WorkOS-specific details. AuthKit issues a JWT **access token**\n * (returned by `getAccessToken()`) that MJ sends to the GraphQL API as a Bearer token; the\n * server validates it via `@memberjunction/auth-providers`' `WorkOSProvider`.\n *\n * Unlike the Auth0/MSAL/Okta providers, AuthKit is not an Angular library — there is no module\n * to import. This provider creates the client itself in {@link initialize} using config supplied\n * through the `'workosConfig'` injection token.\n *\n * > **Email note:** `getUser()` always returns the user's email for display here, but the\n * > **access token** only carries `email` if a WorkOS JWT Template adds it. MJ resolves users by\n * > email server-side, so configuring that template is required. See `WORKOS.md` in\n * > `@memberjunction/auth-providers`.\n */\n@Injectable({\n  providedIn: 'root'\n})\n@RegisterClass(MJAuthBase, 'workos')\nexport class MJWorkOSProvider extends MJAuthBase implements OnDestroy {\n  static readonly PROVIDER_TYPE = 'workos';\n  readonly type = MJWorkOSProvider.PROVIDER_TYPE;\n\n  private client: WorkOSClient | null = null;\n  private initPromise: Promise<void> | null = null;\n\n  /**\n   * Factory function to provide the Angular dependencies required by WorkOS.\n   * Stored as a static property so the factory can read it without instantiation.\n   */\n  static angularProviderFactory = (environment: Record<string, unknown>) => [\n    {\n      provide: 'workosConfig',\n      useValue: {\n        clientId: environment['WORKOS_CLIENTID'] as string,\n        redirectUri: (environment['WORKOS_REDIRECT_URI'] as string) || window.location.origin,\n        apiHostname: environment['WORKOS_API_HOSTNAME'] as string | undefined,\n        devMode: (environment['WORKOS_DEV_MODE'] as boolean | undefined) ?? false\n      } satisfies WorkOSAuthConfig\n    }\n  ];\n\n  constructor(@Inject('workosConfig') private workosConfig: WorkOSAuthConfig) {\n    const config: AngularAuthProviderConfig = {\n      name: MJWorkOSProvider.PROVIDER_TYPE,\n      type: MJWorkOSProvider.PROVIDER_TYPE\n    };\n    super(config);\n  }\n\n  // ============================================================================\n  // LIFECYCLE METHODS\n  // ============================================================================\n\n  /**\n   * Initialize the AuthKit client. `createClient()` constructs the client AND processes any\n   * pending OAuth redirect (it reads the `code` from the URL and exchanges it), so once it\n   * resolves the session — if any — is already established and `getUser()` is populated.\n   *\n   * Idempotent and concurrency-safe: parallel callers share a single in-flight promise.\n   */\n  async initialize(): Promise<void> {\n    if (this.client) {\n      return;\n    }\n    if (this.initPromise) {\n      return this.initPromise;\n    }\n\n    this.initPromise = this.createAndSyncClient();\n    try {\n      await this.initPromise;\n    } finally {\n      this.initPromise = null;\n    }\n  }\n\n  private async createAndSyncClient(): Promise<void> {\n    this.client = await createClient(this.workosConfig.clientId, {\n      redirectUri: this.workosConfig.redirectUri,\n      apiHostname: this.workosConfig.apiHostname,\n      devMode: this.workosConfig.devMode,\n      // Keep MJ's reactive auth state in lockstep with AuthKit's silent refresh cycle.\n      onRefresh: () => this.syncSessionState(),\n      onRefreshFailure: () => {\n        this.updateAuthState(false);\n        this.updateUserInfo(null);\n      }\n    });\n\n    this.syncSessionState();\n  }\n\n  /**\n   * Pushes the current AuthKit session into MJ's reactive streams.\n   */\n  private syncSessionState(): void {\n    const user = this.client?.getUser() ?? null;\n    if (user) {\n      this.updateAuthState(true);\n      this.updateUserInfo(this.mapWorkOSUserToStandard(user));\n    } else {\n      this.updateAuthState(false);\n      this.updateUserInfo(null);\n    }\n  }\n\n  protected async loginInternal(options?: Record<string, unknown>): Promise<void> {\n    await this.ensureInitialized();\n    // signIn redirects the browser to the WorkOS hosted login page. Any caller-supplied\n    // options (loginHint, organizationId, state, …) are passed straight through.\n    await this.client!.signIn(options);\n  }\n\n  protected async logoutInternal(): Promise<void> {\n    // signOut clears the AuthKit session and redirects to the app's configured Logout URI.\n    // If there is no active session it throws NoSessionError — provide returnTo so the user is\n    // still returned to the app rather than left on a dead page.\n    this.updateAuthState(false);\n    this.updateUserInfo(null);\n    try {\n      this.client?.signOut({ returnTo: this.workosConfig.redirectUri || window.location.origin });\n    } catch (error) {\n      // NoSessionError (no active session) — just hard-redirect home.\n      if (error instanceof NoSessionError) {\n        window.location.href = window.location.origin;\n      } else {\n        throw error;\n      }\n    }\n  }\n\n  async handleCallback(): Promise<void> {\n    // AuthKit's createClient() processes the redirect internally during initialize().\n    // This method exists for interface compatibility (mirrors the Auth0 provider).\n    await this.ensureInitialized();\n  }\n\n  ngOnDestroy(): void {\n    // Release the AuthKit refresh timer / listeners.\n    this.client?.dispose();\n    this.client = null;\n  }\n\n  // ============================================================================\n  // ABSTRACT METHOD IMPLEMENTATIONS\n  // ============================================================================\n\n  /**\n   * Extract the access token (a JWT) from AuthKit. `getAccessToken()` returns a valid token,\n   * silently refreshing first if the current one is near expiry. Throws when there is no\n   * session — we translate that to `null` so callers can treat it as \"not authenticated\".\n   */\n  protected async extractIdTokenInternal(): Promise<string | null> {\n    if (!this.client) {\n      return null;\n    }\n    try {\n      return await this.client.getAccessToken();\n    } catch (error) {\n      if (error instanceof LoginRequiredError) {\n        return null;\n      }\n      console.error('[WorkOS] Error extracting access token:', error);\n      return null;\n    }\n  }\n\n  /**\n   * Extract complete token info. The expiry comes from the JWT's `exp` claim, decoded with the\n   * SDK's `getClaims()` helper.\n   */\n  protected async extractTokenInfoInternal(): Promise<StandardAuthToken | null> {\n    const accessToken = await this.extractIdTokenInternal();\n    if (!accessToken) {\n      return null;\n    }\n\n    let expiresAt = 0;\n    try {\n      const claims = getClaims(accessToken);\n      expiresAt = claims.exp ? claims.exp * 1000 : 0; // exp is seconds → milliseconds\n    } catch (error) {\n      console.warn('[WorkOS] Could not decode access token claims:', error);\n    }\n\n    return {\n      idToken: accessToken,\n      accessToken,\n      expiresAt\n    };\n  }\n\n  /**\n   * Extract user info from AuthKit's in-memory user (always populated when authenticated,\n   * regardless of which claims the access token carries).\n   */\n  protected async extractUserInfoInternal(): Promise<StandardUserInfo | null> {\n    const user = this.client?.getUser() ?? null;\n    return user ? this.mapWorkOSUserToStandard(user) : null;\n  }\n\n  /**\n   * Force a token refresh through AuthKit's refresh-token rotation.\n   */\n  protected async refreshTokenInternal(): Promise<TokenRefreshResult> {\n    if (!this.client) {\n      return {\n        success: false,\n        error: {\n          type: AuthErrorType.NO_ACTIVE_SESSION,\n          message: 'WorkOS client not initialized',\n          userMessage: 'You need to log in to continue.'\n        }\n      };\n    }\n\n    try {\n      const accessToken = await this.client.getAccessToken({ forceRefresh: true });\n      this.syncSessionState();\n\n      let expiresAt = 0;\n      try {\n        const claims = getClaims(accessToken);\n        expiresAt = claims.exp ? claims.exp * 1000 : 0;\n      } catch {\n        // exp decode is best-effort; a missing value just means the consumer can't pre-empt expiry.\n      }\n\n      return {\n        success: true,\n        token: { idToken: accessToken, accessToken, expiresAt }\n      };\n    } catch (error) {\n      return {\n        success: false,\n        error: this.classifyErrorInternal(error)\n      };\n    }\n  }\n\n  /**\n   * Map WorkOS / AuthKit SDK errors to semantic `AuthErrorType` values.\n   */\n  protected classifyErrorInternal(error: unknown): StandardAuthError {\n    if (error instanceof LoginRequiredError || error instanceof NoSessionError) {\n      return {\n        type: AuthErrorType.NO_ACTIVE_SESSION,\n        message: (error as Error).message,\n        originalError: error,\n        userMessage: 'You need to log in to continue.'\n      };\n    }\n\n    // RefreshTimeoutError is exported; its parent `RefreshError` is not, so we also match by\n    // constructor name to catch any non-timeout refresh failure.\n    if (error instanceof RefreshTimeoutError || (error as Error)?.name === 'RefreshError') {\n      return {\n        type: AuthErrorType.TOKEN_EXPIRED,\n        message: (error as Error).message,\n        originalError: error,\n        userMessage: 'Your session has expired. Please log in again.'\n      };\n    }\n\n    const message = (error as { message?: string })?.message || 'Unknown error';\n    if (message.includes('network') || message.includes('fetch') || message.includes('Failed to fetch')) {\n      return {\n        type: AuthErrorType.NETWORK_ERROR,\n        message,\n        originalError: error,\n        userMessage: 'Network error. Please check your connection and try again.'\n      };\n    }\n\n    return {\n      type: AuthErrorType.UNKNOWN_ERROR,\n      message,\n      originalError: error,\n      userMessage: 'An unexpected error occurred. Please try again.'\n    };\n  }\n\n  /**\n   * WorkOS includes the profile picture URL on the user object — no extra API call needed.\n   */\n  protected async getProfilePictureUrlInternal(): Promise<string | null> {\n    return this.client?.getUser()?.profilePictureUrl ?? null;\n  }\n\n  /**\n   * No-op. WorkOS uses rotating refresh tokens, so it doesn't need interactive\n   * re-authentication when an access token expires; if refresh fails the base class surfaces\n   * the error and the user re-logs in manually.\n   */\n  protected async handleSessionExpiryInternal(): Promise<void> {\n    return;\n  }\n\n  // ============================================================================\n  // HELPER METHODS\n  // ============================================================================\n\n  private async ensureInitialized(): Promise<void> {\n    if (!this.client) {\n      await this.initialize();\n    }\n  }\n\n  /**\n   * Map a WorkOS `User` to the framework-standard `StandardUserInfo`.\n   * WorkOS exposes `firstName`/`lastName` as `string | null`; we normalize null → undefined.\n   */\n  private mapWorkOSUserToStandard(user: User): StandardUserInfo {\n    const fullName = [user.firstName, user.lastName].filter(Boolean).join(' ');\n    return {\n      id: user.id,\n      email: user.email,\n      name: fullName || user.email,\n      givenName: user.firstName ?? undefined,\n      familyName: user.lastName ?? undefined,\n      preferredUsername: user.email,\n      pictureUrl: user.profilePictureUrl ?? undefined,\n      emailVerified: user.emailVerified\n    };\n  }\n\n  // ============================================================================\n  // CONFIGURATION\n  // ============================================================================\n\n  override getRequiredConfig(): string[] {\n    return ['clientId'];\n  }\n\n  override validateConfig(config: Record<string, unknown>): boolean {\n    // The real config arrives via the 'workosConfig' injection token; the only hard\n    // requirement is a clientId.\n    return !!this.workosConfig?.clientId || !!config['clientId'];\n  }\n}\n"]}
+{"version":3,"file":"mjexplorer-workos-provider.service.js","sourceRoot":"","sources":["../../../src/lib/providers/mjexplorer-workos-provider.service.ts"],"names":[],"mappings":";;;;;;;AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,EAAa,MAAM,eAAe,CAAC;AAC9D,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AACvD,OAAO,EAAE,UAAU,EAAE,MAAM,iCAAiC,CAAC;AAE7D,OAAO,EACL,YAAY,EACZ,SAAS,EAET,kBAAkB,EAClB,cAAc,EACd,mBAAmB,EACpB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAIL,aAAa,EAEd,MAAM,eAAe,CAAC;;AAuBvB;;;;;;;;;;;;;;;;GAgBG;AAKI,IAAM,gBAAgB,GAAtB,MAAM,gBAAiB,SAAQ,UAAU;;IAgCF;IA/B5C,MAAM,CAAU,aAAa,GAAG,QAAQ,CAAC;IAChC,IAAI,GAAG,kBAAgB,CAAC,aAAa,CAAC;IAEvC,MAAM,GAAwB,IAAI,CAAC;IACnC,WAAW,GAAyB,IAAI,CAAC;IAEjD;;;OAGG;IACH,MAAM,CAAC,sBAAsB,GAAG,CAAC,WAAoC,EAAE,EAAE,CAAC;QACxE;YACE,OAAO,EAAE,cAAc;YACvB,QAAQ,EAAE;gBACR,QAAQ,EAAE,WAAW,CAAC,iBAAiB,CAAW;gBAClD,WAAW,EAAG,WAAW,CAAC,qBAAqB,CAAY,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM;gBACrF,WAAW,EAAE,WAAW,CAAC,qBAAqB,CAAuB;gBACrE,OAAO,EAAG,WAAW,CAAC,iBAAiB,CAAyB,IAAI,KAAK;aAC/C;SAC7B;KACF,CAAC;IAEF,sDAAsD;IACtD,MAAM,KAAK,sBAAsB;QAC/B,OAAO,IAAI,CAAC,sBAAsB,CAAC;IACrC,CAAC;IACD,sDAAsD;IACtD,MAAM,KAAK,sBAAsB,CAAC,KAAK;QACrC,IAAI,CAAC,sBAAsB,GAAG,KAAK,CAAC;IACtC,CAAC;IAED,YAA4C,YAA8B;QACxE,MAAM,MAAM,GAA8B;YACxC,IAAI,EAAE,kBAAgB,CAAC,aAAa;YACpC,IAAI,EAAE,kBAAgB,CAAC,aAAa;SACrC,CAAC;QACF,KAAK,CAAC,MAAM,CAAC,CAAC;QAL4B,iBAAY,GAAZ,YAAY,CAAkB;IAM1E,CAAC;IAED,+EAA+E;IAC/E,oBAAoB;IACpB,+EAA+E;IAE/E;;;;;;OAMG;IACH,KAAK,CAAC,UAAU;QACd,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAChB,OAAO;QACT,CAAC;QACD,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YACrB,OAAO,IAAI,CAAC,WAAW,CAAC;QAC1B,CAAC;QAED,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,mBAAmB,EAAE,CAAC;QAC9C,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,WAAW,CAAC;QACzB,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;QAC1B,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,mBAAmB;QAC/B,IAAI,CAAC,MAAM,GAAG,MAAM,YAAY,CAAC,IAAI,CAAC,YAAY,CAAC,QAAQ,EAAE;YAC3D,WAAW,EAAE,IAAI,CAAC,YAAY,CAAC,WAAW;YAC1C,WAAW,EAAE,IAAI,CAAC,YAAY,CAAC,WAAW;YAC1C,OAAO,EAAE,IAAI,CAAC,YAAY,CAAC,OAAO;YAClC,iFAAiF;YACjF,SAAS,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,gBAAgB,EAAE;YACxC,gBAAgB,EAAE,GAAG,EAAE;gBACrB,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;gBAC5B,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;YAC5B,CAAC;SACF,CAAC,CAAC;QAEH,IAAI,CAAC,gBAAgB,EAAE,CAAC;IAC1B,CAAC;IAED;;OAEG;IACK,gBAAgB;QACtB,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,IAAI,IAAI,CAAC;QAC5C,IAAI,IAAI,EAAE,CAAC;YACT,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;YAC3B,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,CAAC,CAAC;QAC1D,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;YAC5B,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;QAC5B,CAAC;IACH,CAAC;IAES,KAAK,CAAC,aAAa,CAAC,OAAiC;QAC7D,MAAM,IAAI,CAAC,iBAAiB,EAAE,CAAC;QAC/B,oFAAoF;QACpF,6EAA6E;QAC7E,MAAM,IAAI,CAAC,MAAO,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACrC,CAAC;IAES,KAAK,CAAC,cAAc;QAC5B,uFAAuF;QACvF,2FAA2F;QAC3F,6DAA6D;QAC7D,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;QAC5B,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;QAC1B,IAAI,CAAC;YACH,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,YAAY,CAAC,WAAW,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;QAC9F,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,gEAAgE;YAChE,IAAI,KAAK,YAAY,cAAc,EAAE,CAAC;gBACpC,MAAM,CAAC,QAAQ,CAAC,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC;YAChD,CAAC;iBAAM,CAAC;gBACN,MAAM,KAAK,CAAC;YACd,CAAC;QACH,CAAC;IACH,CAAC;IAED,KAAK,CAAC,cAAc;QAClB,kFAAkF;QAClF,+EAA+E;QAC/E,MAAM,IAAI,CAAC,iBAAiB,EAAE,CAAC;IACjC,CAAC;IAED,WAAW;QACT,iDAAiD;QACjD,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC;QACvB,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;IACrB,CAAC;IAED,+EAA+E;IAC/E,kCAAkC;IAClC,+EAA+E;IAE/E;;;;OAIG;IACO,KAAK,CAAC,sBAAsB;QACpC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;YACjB,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IAAI,CAAC;YACH,OAAO,MAAM,IAAI,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC;QAC5C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,kBAAkB,EAAE,CAAC;gBACxC,OAAO,IAAI,CAAC;YACd,CAAC;YACD,OAAO,CAAC,KAAK,CAAC,yCAAyC,EAAE,KAAK,CAAC,CAAC;YAChE,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED;;;OAGG;IACO,KAAK,CAAC,wBAAwB;QACtC,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,sBAAsB,EAAE,CAAC;QACxD,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,OAAO,IAAI,CAAC;QACd,CAAC;QAED,IAAI,SAAS,GAAG,CAAC,CAAC;QAClB,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,SAAS,CAAC,WAAW,CAAC,CAAC;YACtC,SAAS,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,gCAAgC;QAClF,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,IAAI,CAAC,gDAAgD,EAAE,KAAK,CAAC,CAAC;QACxE,CAAC;QAED,OAAO;YACL,OAAO,EAAE,WAAW;YACpB,WAAW;YACX,SAAS;SACV,CAAC;IACJ,CAAC;IAED;;;OAGG;IACO,KAAK,CAAC,uBAAuB;QACrC,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,IAAI,IAAI,CAAC;QAC5C,OAAO,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC1D,CAAC;IAED;;OAEG;IACO,KAAK,CAAC,oBAAoB;QAClC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;YACjB,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE;oBACL,IAAI,EAAE,aAAa,CAAC,iBAAiB;oBACrC,OAAO,EAAE,+BAA+B;oBACxC,WAAW,EAAE,iCAAiC;iBAC/C;aACF,CAAC;QACJ,CAAC;QAED,IAAI,CAAC;YACH,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC;YAC7E,IAAI,CAAC,gBAAgB,EAAE,CAAC;YAExB,IAAI,SAAS,GAAG,CAAC,CAAC;YAClB,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,SAAS,CAAC,WAAW,CAAC,CAAC;gBACtC,SAAS,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;YACjD,CAAC;YAAC,MAAM,CAAC;gBACP,4FAA4F;YAC9F,CAAC;YAED,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,KAAK,EAAE,EAAE,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,SAAS,EAAE;aACxD,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,IAAI,CAAC,qBAAqB,CAAC,KAAK,CAAC;aACzC,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;OAEG;IACO,qBAAqB,CAAC,KAAc;QAC5C,IAAI,KAAK,YAAY,kBAAkB,IAAI,KAAK,YAAY,cAAc,EAAE,CAAC;YAC3E,OAAO;gBACL,IAAI,EAAE,aAAa,CAAC,iBAAiB;gBACrC,OAAO,EAAG,KAAe,CAAC,OAAO;gBACjC,aAAa,EAAE,KAAK;gBACpB,WAAW,EAAE,iCAAiC;aAC/C,CAAC;QACJ,CAAC;QAED,yFAAyF;QACzF,6DAA6D;QAC7D,IAAI,KAAK,YAAY,mBAAmB,IAAK,KAAe,EAAE,IAAI,KAAK,cAAc,EAAE,CAAC;YACtF,OAAO;gBACL,IAAI,EAAE,aAAa,CAAC,aAAa;gBACjC,OAAO,EAAG,KAAe,CAAC,OAAO;gBACjC,aAAa,EAAE,KAAK;gBACpB,WAAW,EAAE,gDAAgD;aAC9D,CAAC;QACJ,CAAC;QAED,MAAM,OAAO,GAAI,KAA8B,EAAE,OAAO,IAAI,eAAe,CAAC;QAC5E,IAAI,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAC,EAAE,CAAC;YACpG,OAAO;gBACL,IAAI,EAAE,aAAa,CAAC,aAAa;gBACjC,OAAO;gBACP,aAAa,EAAE,KAAK;gBACpB,WAAW,EAAE,4DAA4D;aAC1E,CAAC;QACJ,CAAC;QAED,OAAO;YACL,IAAI,EAAE,aAAa,CAAC,aAAa;YACjC,OAAO;YACP,aAAa,EAAE,KAAK;YACpB,WAAW,EAAE,iDAAiD;SAC/D,CAAC;IACJ,CAAC;IAED;;OAEG;IACO,KAAK,CAAC,4BAA4B;QAC1C,OAAO,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,EAAE,iBAAiB,IAAI,IAAI,CAAC;IAC3D,CAAC;IAED;;;;OAIG;IACO,KAAK,CAAC,2BAA2B;QACzC,OAAO;IACT,CAAC;IAED,+EAA+E;IAC/E,iBAAiB;IACjB,+EAA+E;IAEvE,KAAK,CAAC,iBAAiB;QAC7B,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;YACjB,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC;QAC1B,CAAC;IACH,CAAC;IAED;;;OAGG;IACK,uBAAuB,CAAC,IAAU;QACxC,MAAM,QAAQ,GAAG,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC3E,OAAO;YACL,EAAE,EAAE,IAAI,CAAC,EAAE;YACX,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,IAAI,EAAE,QAAQ,IAAI,IAAI,CAAC,KAAK;YAC5B,SAAS,EAAE,IAAI,CAAC,SAAS,IAAI,SAAS;YACtC,UAAU,EAAE,IAAI,CAAC,QAAQ,IAAI,SAAS;YACtC,iBAAiB,EAAE,IAAI,CAAC,KAAK;YAC7B,UAAU,EAAE,IAAI,CAAC,iBAAiB,IAAI,SAAS;YAC/C,aAAa,EAAE,IAAI,CAAC,aAAa;SAClC,CAAC;IACJ,CAAC;IAED,+EAA+E;IAC/E,gBAAgB;IAChB,+EAA+E;IAEtE,iBAAiB;QACxB,OAAO,CAAC,UAAU,CAAC,CAAC;IACtB,CAAC;IAEQ,cAAc,CAAC,MAA+B;QACrD,gFAAgF;QAChF,6BAA6B;QAC7B,OAAO,CAAC,CAAC,IAAI,CAAC,YAAY,EAAE,QAAQ,IAAI,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IAC/D,CAAC;0GAzUU,gBAAgB,cAgCP,cAAc;gEAhCvB,gBAAgB,WAAhB,gBAAgB,mBAHf,MAAM;;AAGP,gBAAgB;IAD5B,aAAa,CAAC,UAAU,EAAE,QAAQ,CAAC;GACvB,gBAAgB,CA0U5B;;iFA1UY,gBAAgB;cAJ5B,UAAU;eAAC;gBACV,UAAU,EAAE,MAAM;aACnB;;sBAkCc,MAAM;uBAAC,cAAc","sourcesContent":["import { Injectable, Inject, OnDestroy } from '@angular/core';\nimport { RegisterClass } from '@memberjunction/global';\nimport { MJAuthBase } from '../mjexplorer-auth-base.service';\nimport { AngularAuthProviderConfig } from '../IAuthProvider';\nimport {\n  createClient,\n  getClaims,\n  User,\n  LoginRequiredError,\n  NoSessionError,\n  RefreshTimeoutError\n} from '@workos-inc/authkit-js';\nimport {\n  StandardUserInfo,\n  StandardAuthToken,\n  StandardAuthError,\n  AuthErrorType,\n  TokenRefreshResult\n} from '../auth-types';\n\n/**\n * The AuthKit client instance type. The `@workos-inc/authkit-js` package does not export its\n * `Client` class directly, so we derive the type from `createClient`'s resolved return value.\n */\ntype WorkOSClient = Awaited<ReturnType<typeof createClient>>;\n\n/**\n * Resolved configuration for the WorkOS AuthKit client.\n * Provided via the `'workosConfig'` injection token (see `angularProviderFactory`).\n */\nexport interface WorkOSAuthConfig {\n  /** WorkOS AuthKit client ID (e.g. `client_01H...`). Required. */\n  clientId: string;\n  /** OAuth redirect URI registered in the WorkOS dashboard. Defaults to `window.location.origin`. */\n  redirectUri?: string;\n  /** Override the WorkOS API hostname (rarely needed; for proxies / custom domains). */\n  apiHostname?: string;\n  /** Enables AuthKit dev mode (localStorage session, no third-party cookies). */\n  devMode?: boolean;\n}\n\n/**\n * WorkOS (AuthKit) authentication provider — browser side.\n *\n * Wraps the vanilla-JS `@workos-inc/authkit-js` SDK behind {@link MJAuthBase} so the rest of\n * MemberJunction never sees WorkOS-specific details. AuthKit issues a JWT **access token**\n * (returned by `getAccessToken()`) that MJ sends to the GraphQL API as a Bearer token; the\n * server validates it via `@memberjunction/auth-providers`' `WorkOSProvider`.\n *\n * Unlike the Auth0/MSAL/Okta providers, AuthKit is not an Angular library — there is no module\n * to import. This provider creates the client itself in {@link initialize} using config supplied\n * through the `'workosConfig'` injection token.\n *\n * > **Email note:** `getUser()` always returns the user's email for display here, but the\n * > **access token** only carries `email` if a WorkOS JWT Template adds it. MJ resolves users by\n * > email server-side, so configuring that template is required. See `WORKOS.md` in\n * > `@memberjunction/auth-providers`.\n */\n@Injectable({\n  providedIn: 'root'\n})\n@RegisterClass(MJAuthBase, 'workos')\nexport class MJWorkOSProvider extends MJAuthBase implements OnDestroy {\n  static readonly PROVIDER_TYPE = 'workos';\n  readonly type = MJWorkOSProvider.PROVIDER_TYPE;\n\n  private client: WorkOSClient | null = null;\n  private initPromise: Promise<void> | null = null;\n\n  /**\n   * Factory function to provide the Angular dependencies required by WorkOS.\n   * Stored as a static property so the factory can read it without instantiation.\n   */\n  static AngularProviderFactory = (environment: Record<string, unknown>) => [\n    {\n      provide: 'workosConfig',\n      useValue: {\n        clientId: environment['WORKOS_CLIENTID'] as string,\n        redirectUri: (environment['WORKOS_REDIRECT_URI'] as string) || window.location.origin,\n        apiHostname: environment['WORKOS_API_HOSTNAME'] as string | undefined,\n        devMode: (environment['WORKOS_DEV_MODE'] as boolean | undefined) ?? false\n      } satisfies WorkOSAuthConfig\n    }\n  ];\n\n  /** @deprecated Use {@link AngularProviderFactory}. */\n  static get angularProviderFactory() {\n    return this.AngularProviderFactory;\n  }\n  /** @deprecated Use {@link AngularProviderFactory}. */\n  static set angularProviderFactory(value) {\n    this.AngularProviderFactory = value;\n  }\n\n  constructor(@Inject('workosConfig') private workosConfig: WorkOSAuthConfig) {\n    const config: AngularAuthProviderConfig = {\n      name: MJWorkOSProvider.PROVIDER_TYPE,\n      type: MJWorkOSProvider.PROVIDER_TYPE\n    };\n    super(config);\n  }\n\n  // ============================================================================\n  // LIFECYCLE METHODS\n  // ============================================================================\n\n  /**\n   * Initialize the AuthKit client. `createClient()` constructs the client AND processes any\n   * pending OAuth redirect (it reads the `code` from the URL and exchanges it), so once it\n   * resolves the session — if any — is already established and `getUser()` is populated.\n   *\n   * Idempotent and concurrency-safe: parallel callers share a single in-flight promise.\n   */\n  async initialize(): Promise<void> {\n    if (this.client) {\n      return;\n    }\n    if (this.initPromise) {\n      return this.initPromise;\n    }\n\n    this.initPromise = this.createAndSyncClient();\n    try {\n      await this.initPromise;\n    } finally {\n      this.initPromise = null;\n    }\n  }\n\n  private async createAndSyncClient(): Promise<void> {\n    this.client = await createClient(this.workosConfig.clientId, {\n      redirectUri: this.workosConfig.redirectUri,\n      apiHostname: this.workosConfig.apiHostname,\n      devMode: this.workosConfig.devMode,\n      // Keep MJ's reactive auth state in lockstep with AuthKit's silent refresh cycle.\n      onRefresh: () => this.syncSessionState(),\n      onRefreshFailure: () => {\n        this.updateAuthState(false);\n        this.updateUserInfo(null);\n      }\n    });\n\n    this.syncSessionState();\n  }\n\n  /**\n   * Pushes the current AuthKit session into MJ's reactive streams.\n   */\n  private syncSessionState(): void {\n    const user = this.client?.getUser() ?? null;\n    if (user) {\n      this.updateAuthState(true);\n      this.updateUserInfo(this.mapWorkOSUserToStandard(user));\n    } else {\n      this.updateAuthState(false);\n      this.updateUserInfo(null);\n    }\n  }\n\n  protected async loginInternal(options?: Record<string, unknown>): Promise<void> {\n    await this.ensureInitialized();\n    // signIn redirects the browser to the WorkOS hosted login page. Any caller-supplied\n    // options (loginHint, organizationId, state, …) are passed straight through.\n    await this.client!.signIn(options);\n  }\n\n  protected async logoutInternal(): Promise<void> {\n    // signOut clears the AuthKit session and redirects to the app's configured Logout URI.\n    // If there is no active session it throws NoSessionError — provide returnTo so the user is\n    // still returned to the app rather than left on a dead page.\n    this.updateAuthState(false);\n    this.updateUserInfo(null);\n    try {\n      this.client?.signOut({ returnTo: this.workosConfig.redirectUri || window.location.origin });\n    } catch (error) {\n      // NoSessionError (no active session) — just hard-redirect home.\n      if (error instanceof NoSessionError) {\n        window.location.href = window.location.origin;\n      } else {\n        throw error;\n      }\n    }\n  }\n\n  async handleCallback(): Promise<void> {\n    // AuthKit's createClient() processes the redirect internally during initialize().\n    // This method exists for interface compatibility (mirrors the Auth0 provider).\n    await this.ensureInitialized();\n  }\n\n  ngOnDestroy(): void {\n    // Release the AuthKit refresh timer / listeners.\n    this.client?.dispose();\n    this.client = null;\n  }\n\n  // ============================================================================\n  // ABSTRACT METHOD IMPLEMENTATIONS\n  // ============================================================================\n\n  /**\n   * Extract the access token (a JWT) from AuthKit. `getAccessToken()` returns a valid token,\n   * silently refreshing first if the current one is near expiry. Throws when there is no\n   * session — we translate that to `null` so callers can treat it as \"not authenticated\".\n   */\n  protected async extractIdTokenInternal(): Promise<string | null> {\n    if (!this.client) {\n      return null;\n    }\n    try {\n      return await this.client.getAccessToken();\n    } catch (error) {\n      if (error instanceof LoginRequiredError) {\n        return null;\n      }\n      console.error('[WorkOS] Error extracting access token:', error);\n      return null;\n    }\n  }\n\n  /**\n   * Extract complete token info. The expiry comes from the JWT's `exp` claim, decoded with the\n   * SDK's `getClaims()` helper.\n   */\n  protected async extractTokenInfoInternal(): Promise<StandardAuthToken | null> {\n    const accessToken = await this.extractIdTokenInternal();\n    if (!accessToken) {\n      return null;\n    }\n\n    let expiresAt = 0;\n    try {\n      const claims = getClaims(accessToken);\n      expiresAt = claims.exp ? claims.exp * 1000 : 0; // exp is seconds → milliseconds\n    } catch (error) {\n      console.warn('[WorkOS] Could not decode access token claims:', error);\n    }\n\n    return {\n      idToken: accessToken,\n      accessToken,\n      expiresAt\n    };\n  }\n\n  /**\n   * Extract user info from AuthKit's in-memory user (always populated when authenticated,\n   * regardless of which claims the access token carries).\n   */\n  protected async extractUserInfoInternal(): Promise<StandardUserInfo | null> {\n    const user = this.client?.getUser() ?? null;\n    return user ? this.mapWorkOSUserToStandard(user) : null;\n  }\n\n  /**\n   * Force a token refresh through AuthKit's refresh-token rotation.\n   */\n  protected async refreshTokenInternal(): Promise<TokenRefreshResult> {\n    if (!this.client) {\n      return {\n        success: false,\n        error: {\n          type: AuthErrorType.NO_ACTIVE_SESSION,\n          message: 'WorkOS client not initialized',\n          userMessage: 'You need to log in to continue.'\n        }\n      };\n    }\n\n    try {\n      const accessToken = await this.client.getAccessToken({ forceRefresh: true });\n      this.syncSessionState();\n\n      let expiresAt = 0;\n      try {\n        const claims = getClaims(accessToken);\n        expiresAt = claims.exp ? claims.exp * 1000 : 0;\n      } catch {\n        // exp decode is best-effort; a missing value just means the consumer can't pre-empt expiry.\n      }\n\n      return {\n        success: true,\n        token: { idToken: accessToken, accessToken, expiresAt }\n      };\n    } catch (error) {\n      return {\n        success: false,\n        error: this.classifyErrorInternal(error)\n      };\n    }\n  }\n\n  /**\n   * Map WorkOS / AuthKit SDK errors to semantic `AuthErrorType` values.\n   */\n  protected classifyErrorInternal(error: unknown): StandardAuthError {\n    if (error instanceof LoginRequiredError || error instanceof NoSessionError) {\n      return {\n        type: AuthErrorType.NO_ACTIVE_SESSION,\n        message: (error as Error).message,\n        originalError: error,\n        userMessage: 'You need to log in to continue.'\n      };\n    }\n\n    // RefreshTimeoutError is exported; its parent `RefreshError` is not, so we also match by\n    // constructor name to catch any non-timeout refresh failure.\n    if (error instanceof RefreshTimeoutError || (error as Error)?.name === 'RefreshError') {\n      return {\n        type: AuthErrorType.TOKEN_EXPIRED,\n        message: (error as Error).message,\n        originalError: error,\n        userMessage: 'Your session has expired. Please log in again.'\n      };\n    }\n\n    const message = (error as { message?: string })?.message || 'Unknown error';\n    if (message.includes('network') || message.includes('fetch') || message.includes('Failed to fetch')) {\n      return {\n        type: AuthErrorType.NETWORK_ERROR,\n        message,\n        originalError: error,\n        userMessage: 'Network error. Please check your connection and try again.'\n      };\n    }\n\n    return {\n      type: AuthErrorType.UNKNOWN_ERROR,\n      message,\n      originalError: error,\n      userMessage: 'An unexpected error occurred. Please try again.'\n    };\n  }\n\n  /**\n   * WorkOS includes the profile picture URL on the user object — no extra API call needed.\n   */\n  protected async getProfilePictureUrlInternal(): Promise<string | null> {\n    return this.client?.getUser()?.profilePictureUrl ?? null;\n  }\n\n  /**\n   * No-op. WorkOS uses rotating refresh tokens, so it doesn't need interactive\n   * re-authentication when an access token expires; if refresh fails the base class surfaces\n   * the error and the user re-logs in manually.\n   */\n  protected async handleSessionExpiryInternal(): Promise<void> {\n    return;\n  }\n\n  // ============================================================================\n  // HELPER METHODS\n  // ============================================================================\n\n  private async ensureInitialized(): Promise<void> {\n    if (!this.client) {\n      await this.initialize();\n    }\n  }\n\n  /**\n   * Map a WorkOS `User` to the framework-standard `StandardUserInfo`.\n   * WorkOS exposes `firstName`/`lastName` as `string | null`; we normalize null → undefined.\n   */\n  private mapWorkOSUserToStandard(user: User): StandardUserInfo {\n    const fullName = [user.firstName, user.lastName].filter(Boolean).join(' ');\n    return {\n      id: user.id,\n      email: user.email,\n      name: fullName || user.email,\n      givenName: user.firstName ?? undefined,\n      familyName: user.lastName ?? undefined,\n      preferredUsername: user.email,\n      pictureUrl: user.profilePictureUrl ?? undefined,\n      emailVerified: user.emailVerified\n    };\n  }\n\n  // ============================================================================\n  // CONFIGURATION\n  // ============================================================================\n\n  override getRequiredConfig(): string[] {\n    return ['clientId'];\n  }\n\n  override validateConfig(config: Record<string, unknown>): boolean {\n    // The real config arrives via the 'workosConfig' injection token; the only hard\n    // requirement is a clientId.\n    return !!this.workosConfig?.clientId || !!config['clientId'];\n  }\n}\n"]}

package/dist/lib/redirect.component.d.ts

@@ -8,7 +8,11 @@ import * as i0 from "@angular/core";
 export declare class RedirectComponent implements OnInit {
     private authService;
     private cdr;
-    isProcessing: boolean;
+    IsProcessing: boolean;
+    /** @deprecated Use {@link IsProcessing}. */
+    get isProcessing(): boolean;
+    /** @deprecated Use {@link IsProcessing}. */
+    set isProcessing(value: boolean);
     constructor(authService: MJAuthBase, cdr: ChangeDetectorRef);
     ngOnInit(): Promise<void>;
     static ɵfac: i0.ɵɵFactoryDeclaration<RedirectComponent, never>;

package/dist/lib/redirect.component.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"redirect.component.d.ts","sourceRoot":"","sources":["../../src/lib/redirect.component.ts"],"names":[],"mappings":"AAAA,OAAO,EAAa,MAAM,EAA2B,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAC9F,OAAO,EAAE,UAAU,EAAE,MAAM,gCAAgC,CAAC;;AAE5D;;;GAGG;AACH,qBAea,iBAAkB,YAAW,MAAM;IAI5C,OAAO,CAAC,WAAW;IACnB,OAAO,CAAC,GAAG;IAJb,YAAY,UAAS;gBAGX,WAAW,EAAE,UAAU,EACvB,GAAG,EAAE,iBAAiB;IAG1B,QAAQ;yCARH,iBAAiB;2CAAjB,iBAAiB;CAoC7B"}
+{"version":3,"file":"redirect.component.d.ts","sourceRoot":"","sources":["../../src/lib/redirect.component.ts"],"names":[],"mappings":"AAAA,OAAO,EAAa,MAAM,EAA2B,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAC9F,OAAO,EAAE,UAAU,EAAE,MAAM,gCAAgC,CAAC;;AAE5D;;;GAGG;AACH,qBAea,iBAAkB,YAAW,MAAM;IAa5C,OAAO,CAAC,WAAW;IACnB,OAAO,CAAC,GAAG;IAbb,YAAY,UAAS;IAErB,4CAA4C;IAC5C,IAAI,YAAY,YAEf;IACD,4CAA4C;IAC5C,IAAI,YAAY,CAAC,KAAK,SAAA,EAErB;gBAGS,WAAW,EAAE,UAAU,EACvB,GAAG,EAAE,iBAAiB;IAG1B,QAAQ;yCAjBH,iBAAiB;2CAAjB,iBAAiB;CA6C7B"}

package/dist/lib/redirect.component.js

@@ -16,7 +16,15 @@ function RedirectComponent_Conditional_0_Template(rf, ctx) { if (rf & 1) {
 export class RedirectComponent {
     authService;
     cdr;
-    isProcessing = false;
+    IsProcessing = false;
+    /** @deprecated Use {@link IsProcessing}. */
+    get isProcessing() {
+        return this.IsProcessing;
+    }
+    /** @deprecated Use {@link IsProcessing}. */
+    set isProcessing(value) {
+        this.IsProcessing = value;
+    }
     constructor(authService, cdr) {
         this.authService = authService;
         this.cdr = cdr;
@@ -33,7 +41,7 @@ export class RedirectComponent {
         // the main application auth (MSAL/Azure AD).
         const isMCPOAuthCallback = window.location.pathname.startsWith('/oauth/callback');
         if (hasAuthCode && !isMCPOAuthCallback) {
-            this.isProcessing = true;
+            this.IsProcessing = true;
             this.cdr.markForCheck();
             try {
                 // Handle the callback for the current auth provider
@@ -44,7 +52,7 @@ export class RedirectComponent {
             }
             finally {
                 // Always hide the component after processing
-                this.isProcessing = false;
+                this.IsProcessing = false;
                 this.cdr.markForCheck();
             }
         }

package/dist/lib/redirect.component.js.map

@@ -1 +1 @@
-{"version":3,"file":"redirect.component.js","sourceRoot":"","sources":["../../src/lib/redirect.component.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAU,uBAAuB,EAAqB,MAAM,eAAe,CAAC;;;;IAepF,AADF,AADF,8BAAyF,aACtD,SAC3B;IAAA,4CAA4B;IAAA,iBAAK;IACrC,yBAAG;IAAA,yDAAyC;IAEhD,AADE,AAD8C,iBAAI,EAC5C,EACF;;AAfZ;;;GAGG;AAgBH,MAAM,OAAO,iBAAiB;IAIlB;IACA;IAJV,YAAY,GAAG,KAAK,CAAC;IAErB,YACU,WAAuB,EACvB,GAAsB;QADtB,gBAAW,GAAX,WAAW,CAAY;QACvB,QAAG,GAAH,GAAG,CAAmB;IAC7B,CAAC;IAEJ,KAAK,CAAC,QAAQ;QACZ,+EAA+E;QAC/E,yEAAyE;QACzE,MAAM,WAAW,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC;YACvC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC;YAC1C,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC;YACxC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAE7D,iFAAiF;QACjF,8EAA8E;QAC9E,6CAA6C;QAC7C,MAAM,kBAAkB,GAAG,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,UAAU,CAAC,iBAAiB,CAAC,CAAC;QAElF,IAAI,WAAW,IAAI,CAAC,kBAAkB,EAAE,CAAC;YACvC,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC;YACzB,IAAI,CAAC,GAAG,CAAC,YAAY,EAAE,CAAC;YACxB,IAAI,CAAC;gBACH,oDAAoD;gBACpD,MAAM,IAAI,CAAC,WAAW,CAAC,cAAc,EAAE,CAAC;YAC1C,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,CAAC,KAAK,CAAC,+BAA+B,EAAE,KAAK,CAAC,CAAC;YACxD,CAAC;oBAAS,CAAC;gBACT,6CAA6C;gBAC7C,IAAI,CAAC,YAAY,GAAG,KAAK,CAAC;gBAC1B,IAAI,CAAC,GAAG,CAAC,YAAY,EAAE,CAAC;YAC1B,CAAC;QACH,CAAC;IACH,CAAC;2GAnCU,iBAAiB;6DAAjB,iBAAiB;YAV1B,mFAAoB;;YAApB,2CAOC;;;iFAGQ,iBAAiB;cAf7B,SAAS;eAAC;gBACT,UAAU,EAAE,KAAK;gBACjB,QAAQ,EAAE,cAAc;gBACxB,eAAe,EAAE,uBAAuB,CAAC,MAAM;gBAC/C,QAAQ,EAAE;;;;;;;;;KASP;aACJ;;kFACY,iBAAiB","sourcesContent":["import { Component, OnInit, ChangeDetectionStrategy, ChangeDetectorRef } from '@angular/core';\nimport { MJAuthBase } from './mjexplorer-auth-base.service';\n\n/**\n * Generic redirect component that handles OAuth callbacks for all providers\n * This replaces the MSAL-specific redirect component to work with any auth provider\n */\n@Component({\n  standalone: false,\n  selector: 'app-redirect',\n  changeDetection: ChangeDetectionStrategy.OnPush,\n  template: `\n    @if (isProcessing) {\n      <div style=\"display: flex; justify-content: center; align-items: center; height: 100vh;\">\n        <div style=\"text-align: center;\">\n          <h2>Processing authentication...</h2>\n          <p>Please wait while we complete your login.</p>\n        </div>\n      </div>\n    }\n    `\n})\nexport class RedirectComponent implements OnInit {\n  isProcessing = false;\n\n  constructor(\n    private authService: MJAuthBase,\n    private cdr: ChangeDetectorRef\n  ) {}\n\n  async ngOnInit() {\n    // Only show the processing message if we're actually handling an auth redirect\n    // Check for auth codes in the URL that indicate we're in a redirect flow\n    const hasAuthCode = window.location.hash.includes('code=') ||\n                       window.location.hash.includes('id_token=') ||\n                       window.location.search.includes('code=') ||\n                       window.location.search.includes('state=');\n\n    // Don't handle MCP OAuth callbacks - those go to /oauth/callback and are handled\n    // by the OAuthCallbackComponent in explorer-core. This component only handles\n    // the main application auth (MSAL/Azure AD).\n    const isMCPOAuthCallback = window.location.pathname.startsWith('/oauth/callback');\n\n    if (hasAuthCode && !isMCPOAuthCallback) {\n      this.isProcessing = true;\n      this.cdr.markForCheck();\n      try {\n        // Handle the callback for the current auth provider\n        await this.authService.handleCallback();\n      } catch (error) {\n        console.error('Error handling auth callback:', error);\n      } finally {\n        // Always hide the component after processing\n        this.isProcessing = false;\n        this.cdr.markForCheck();\n      }\n    }\n  }\n}"]}
+{"version":3,"file":"redirect.component.js","sourceRoot":"","sources":["../../src/lib/redirect.component.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAU,uBAAuB,EAAqB,MAAM,eAAe,CAAC;;;;IAepF,AADF,AADF,8BAAyF,aACtD,SAC3B;IAAA,4CAA4B;IAAA,iBAAK;IACrC,yBAAG;IAAA,yDAAyC;IAEhD,AADE,AAD8C,iBAAI,EAC5C,EACF;;AAfZ;;;GAGG;AAgBH,MAAM,OAAO,iBAAiB;IAalB;IACA;IAbV,YAAY,GAAG,KAAK,CAAC;IAErB,4CAA4C;IAC5C,IAAI,YAAY;QACd,OAAO,IAAI,CAAC,YAAY,CAAC;IAC3B,CAAC;IACD,4CAA4C;IAC5C,IAAI,YAAY,CAAC,KAAK;QACpB,IAAI,CAAC,YAAY,GAAG,KAAK,CAAC;IAC5B,CAAC;IAED,YACU,WAAuB,EACvB,GAAsB;QADtB,gBAAW,GAAX,WAAW,CAAY;QACvB,QAAG,GAAH,GAAG,CAAmB;IAC7B,CAAC;IAEJ,KAAK,CAAC,QAAQ;QACZ,+EAA+E;QAC/E,yEAAyE;QACzE,MAAM,WAAW,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC;YACvC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC;YAC1C,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC;YACxC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAE7D,iFAAiF;QACjF,8EAA8E;QAC9E,6CAA6C;QAC7C,MAAM,kBAAkB,GAAG,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,UAAU,CAAC,iBAAiB,CAAC,CAAC;QAElF,IAAI,WAAW,IAAI,CAAC,kBAAkB,EAAE,CAAC;YACvC,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC;YACzB,IAAI,CAAC,GAAG,CAAC,YAAY,EAAE,CAAC;YACxB,IAAI,CAAC;gBACH,oDAAoD;gBACpD,MAAM,IAAI,CAAC,WAAW,CAAC,cAAc,EAAE,CAAC;YAC1C,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,CAAC,KAAK,CAAC,+BAA+B,EAAE,KAAK,CAAC,CAAC;YACxD,CAAC;oBAAS,CAAC;gBACT,6CAA6C;gBAC7C,IAAI,CAAC,YAAY,GAAG,KAAK,CAAC;gBAC1B,IAAI,CAAC,GAAG,CAAC,YAAY,EAAE,CAAC;YAC1B,CAAC;QACH,CAAC;IACH,CAAC;2GA5CU,iBAAiB;6DAAjB,iBAAiB;YAV1B,mFAAoB;;YAApB,2CAOC;;;iFAGQ,iBAAiB;cAf7B,SAAS;eAAC;gBACT,UAAU,EAAE,KAAK;gBACjB,QAAQ,EAAE,cAAc;gBACxB,eAAe,EAAE,uBAAuB,CAAC,MAAM;gBAC/C,QAAQ,EAAE;;;;;;;;;KASP;aACJ;;kFACY,iBAAiB","sourcesContent":["import { Component, OnInit, ChangeDetectionStrategy, ChangeDetectorRef } from '@angular/core';\nimport { MJAuthBase } from './mjexplorer-auth-base.service';\n\n/**\n * Generic redirect component that handles OAuth callbacks for all providers\n * This replaces the MSAL-specific redirect component to work with any auth provider\n */\n@Component({\n  standalone: false,\n  selector: 'app-redirect',\n  changeDetection: ChangeDetectionStrategy.OnPush,\n  template: `\n    @if (isProcessing) {\n      <div style=\"display: flex; justify-content: center; align-items: center; height: 100vh;\">\n        <div style=\"text-align: center;\">\n          <h2>Processing authentication...</h2>\n          <p>Please wait while we complete your login.</p>\n        </div>\n      </div>\n    }\n    `\n})\nexport class RedirectComponent implements OnInit {\n  IsProcessing = false;\n\n  /** @deprecated Use {@link IsProcessing}. */\n  get isProcessing() {\n    return this.IsProcessing;\n  }\n  /** @deprecated Use {@link IsProcessing}. */\n  set isProcessing(value) {\n    this.IsProcessing = value;\n  }\n\n  constructor(\n    private authService: MJAuthBase,\n    private cdr: ChangeDetectorRef\n  ) {}\n\n  async ngOnInit() {\n    // Only show the processing message if we're actually handling an auth redirect\n    // Check for auth codes in the URL that indicate we're in a redirect flow\n    const hasAuthCode = window.location.hash.includes('code=') ||\n                       window.location.hash.includes('id_token=') ||\n                       window.location.search.includes('code=') ||\n                       window.location.search.includes('state=');\n\n    // Don't handle MCP OAuth callbacks - those go to /oauth/callback and are handled\n    // by the OAuthCallbackComponent in explorer-core. This component only handles\n    // the main application auth (MSAL/Azure AD).\n    const isMCPOAuthCallback = window.location.pathname.startsWith('/oauth/callback');\n\n    if (hasAuthCode && !isMCPOAuthCallback) {\n      this.IsProcessing = true;\n      this.cdr.markForCheck();\n      try {\n        // Handle the callback for the current auth provider\n        await this.authService.handleCallback();\n      } catch (error) {\n        console.error('Error handling auth callback:', error);\n      } finally {\n        // Always hide the component after processing\n        this.IsProcessing = false;\n        this.cdr.markForCheck();\n      }\n    }\n  }\n}"]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@memberjunction/ng-auth-services",
-  "version": "6.2.0-edge.0",
+  "version": "6.2.0-edge.2",
   "description": "MemberJunction Explorer: Authentication Services",
   "main": "./dist/public-api.js",
   "typings": "./dist/public-api.d.ts",
@@ -28,9 +28,9 @@
   },
   "dependencies": {
     "@auth0/auth0-spa-js": "^2.14.0",
-    "@memberjunction/core": "6.2.0-edge.0",
-    "@memberjunction/global": "6.2.0-edge.0",
-    "@memberjunction/ng-ui-components": "6.2.0-edge.0",
+    "@memberjunction/core": "6.2.0-edge.2",
+    "@memberjunction/global": "6.2.0-edge.2",
+    "@memberjunction/ng-ui-components": "6.2.0-edge.2",
     "rxjs": "^7.8.2",
     "tslib": "^2.8.1"
   },