@meshmakers/shared-auth 0.0.0-0 → 0.0.2304-23001

package/fesm2015/meshmakers-shared-auth.mjs

@@ -1,12 +1,14 @@
+import { __awaiter } from 'tslib';
 import * as i0 from '@angular/core';
 import { Injectable, Inject, Component, NgModule } from '@angular/core';
-import { BehaviorSubject } from 'rxjs';
-import { filter, map, tap } from 'rxjs/operators';
+import { BehaviorSubject, firstValueFrom } from 'rxjs';
+import { filter, map } from 'rxjs/operators';
 import * as i1 from 'angular-oauth2-oidc';
 import { OAuthModule } from 'angular-oauth2-oidc';
 import * as i2 from '@angular/common';
 import { CommonModule } from '@angular/common';
 import { HttpClientModule } from '@angular/common/http';
+import * as i2$1 from '@angular/router';
 
 class AuthorizeOptions {
 }
@@ -16,17 +18,48 @@ class AuthorizeService {
         this.oauthService = oauthService;
         this.isAuthenticated = new BehaviorSubject(false);
         this.isAdmin = new BehaviorSubject(false);
+        this.isDeveloper = new BehaviorSubject(false);
+        this.isManager = new BehaviorSubject(false);
         this.authority = new BehaviorSubject(null);
         this.accessToken = new BehaviorSubject(null);
         this.user = new BehaviorSubject(null);
+        this.isInitialized = new BehaviorSubject(false);
+        this.isInitializing = new BehaviorSubject(false);
         console.debug("AuthorizeService::created");
         this.getUser().subscribe(s => {
             this.isAuthenticated.next(!!s);
-            this.isAdmin.next(!!s && s.role === "Administrators");
+            this.isAdmin.next(!!s && (s.role.includes("Administrators")));
+            this.isDeveloper.next(!!s && (s.role.includes("Developers")));
+            this.isManager.next(!!s && s.role.includes("Managers"));
         });
+        this.oauthService.events.subscribe(e => {
+            // tslint:disable-next-line:no-console
+            console.debug('oauth/oidc event', e);
+        });
+        this.oauthService.events
+            .pipe(filter(e => e.type === 'session_terminated'))
+            .subscribe(_ => {
+            // tslint:disable-next-line:no-console
+            console.debug('Your session has been terminated!');
+        });
+        this.oauthService.events
+            .pipe(filter(e => e.type === 'token_received'))
+            .subscribe(_ => {
+            this.loadUser();
+        });
+        this.oauthService.events
+            .pipe(filter(e => e.type === 'logout'))
+            .subscribe(_ => {
+            this.accessToken.next(null);
+            this.user.next(null);
+        });
+    }
+    getRoles() {
+        return this.getUser().pipe(map(u => u != null ? u.role : new Array()));
     }
     getServiceUris() {
-        return this.authorizeOptions.wellKnownServiceUris;
+        var _a;
+        return (_a = this.authorizeOptions.wellKnownServiceUris) !== null && _a !== void 0 ? _a : null;
     }
     getAuthority() {
         return this.authority;
@@ -37,6 +70,12 @@ class AuthorizeService {
     getIsAdmin() {
         return this.isAdmin;
     }
+    getIsDeveloper() {
+        return this.isDeveloper;
+    }
+    getIsManager() {
+        return this.isManager;
+    }
     getAccessToken() {
         return this.accessToken;
     }
@@ -50,47 +89,38 @@ class AuthorizeService {
         this.oauthService.logOut(false);
     }
     initialize() {
-        console.debug("AuthorizeService::initialize::started");
-        const config = {
-            responseType: 'code',
-            issuer: this.authorizeOptions.issuer,
-            redirectUri: this.authorizeOptions.redirectUri,
-            postLogoutRedirectUri: this.authorizeOptions.postLogoutRedirectUri,
-            clientId: this.authorizeOptions.clientId,
-            scope: this.authorizeOptions.scope,
-            showDebugInformation: this.authorizeOptions.showDebugInformation,
-            sessionChecksEnabled: this.authorizeOptions.sessionChecksEnabled
-        };
-        this.oauthService.configure(config);
-        this.oauthService.setStorage(localStorage);
-        this.oauthService.loadDiscoveryDocumentAndTryLogin();
-        this.oauthService.setupAutomaticSilentRefresh();
-        this.oauthService.events.subscribe(e => {
-            // tslint:disable-next-line:no-console
-            console.debug('oauth/oidc event', e);
-        });
-        this.oauthService.events
-            .pipe(filter(e => e.type === 'session_terminated'))
-            .subscribe(e => {
-            // tslint:disable-next-line:no-console
-            console.debug('Your session has been terminated!');
-        });
-        this.oauthService.events
-            .pipe(filter(e => e.type === 'token_received'))
-            .subscribe(e => {
-            this.loadUser();
-        });
-        this.oauthService.events
-            .pipe(filter(e => e.type === 'logout'))
-            .subscribe(e => {
-            this.accessToken.next(null);
-            this.user.next(null);
+        var _a;
+        return __awaiter(this, void 0, void 0, function* () {
+            console.debug("AuthorizeService::initialize::started");
+            if (yield firstValueFrom(this.isInitializing)) {
+                return;
+            }
+            if (yield firstValueFrom(this.isInitialized)) {
+                return;
+            }
+            this.isInitializing.next(true);
+            const config = {
+                responseType: 'code',
+                issuer: this.authorizeOptions.issuer,
+                redirectUri: this.authorizeOptions.redirectUri,
+                postLogoutRedirectUri: this.authorizeOptions.postLogoutRedirectUri,
+                clientId: this.authorizeOptions.clientId,
+                scope: this.authorizeOptions.scope,
+                showDebugInformation: this.authorizeOptions.showDebugInformation,
+                sessionChecksEnabled: this.authorizeOptions.sessionChecksEnabled
+            };
+            this.oauthService.configure(config);
+            this.oauthService.setStorage(localStorage);
+            yield this.oauthService.loadDiscoveryDocumentAndTryLogin();
+            this.oauthService.setupAutomaticSilentRefresh();
+            if (this.oauthService.hasValidAccessToken()) {
+                this.loadUser();
+            }
+            this.authority.next((_a = this.authorizeOptions.issuer) !== null && _a !== void 0 ? _a : null);
+            this.isInitializing.next(false);
+            this.isInitialized.next(true);
+            console.debug("AuthorizeService::initialize::done");
         });
-        if (this.oauthService.hasValidAccessToken()) {
-            this.loadUser();
-        }
-        this.authority.next(this.authorizeOptions.issuer);
-        console.debug("AuthorizeService::initialize::done");
     }
     loadUser() {
         const claims = this.oauthService.getIdentityClaims();
@@ -104,9 +134,9 @@ class AuthorizeService {
         this.accessToken.next(accessToken);
     }
 }
-AuthorizeService.ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "14.2.2", ngImport: i0, type: AuthorizeService, deps: [{ token: AuthorizeOptions }, { token: i1.OAuthService }], target: i0.ɵɵFactoryTarget.Injectable });
-AuthorizeService.ɵprov = i0.ɵɵngDeclareInjectable({ minVersion: "12.0.0", version: "14.2.2", ngImport: i0, type: AuthorizeService });
-i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "14.2.2", ngImport: i0, type: AuthorizeService, decorators: [{
+AuthorizeService.ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "15.2.8", ngImport: i0, type: AuthorizeService, deps: [{ token: AuthorizeOptions }, { token: i1.OAuthService }], target: i0.ɵɵFactoryTarget.Injectable });
+AuthorizeService.ɵprov = i0.ɵɵngDeclareInjectable({ minVersion: "12.0.0", version: "15.2.8", ngImport: i0, type: AuthorizeService });
+i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "15.2.8", ngImport: i0, type: AuthorizeService, decorators: [{
             type: Injectable
         }], ctorParameters: function () {
         return [{ type: AuthorizeOptions, decorators: [{
@@ -118,13 +148,13 @@ i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "14.2.2", ngImpor
 class LoginMenuComponent {
     constructor(authorizeService) {
         this.authorizeService = authorizeService;
+        this.isAuthenticated = this.authorizeService.getIsAuthenticated();
+        this.userName = this.authorizeService.getUser().pipe(map(u => u && u.name));
+        this.isAdmin = this.authorizeService.getIsAdmin();
     }
     ngOnInit() {
         const isIFrame = window.self !== window.top;
         console.log("app-login-menu::created");
-        this.isAuthenticated = this.authorizeService.getIsAuthenticated();
-        this.userName = this.authorizeService.getUser().pipe(map(u => u && u.name));
-        this.isAdmin = this.authorizeService.getIsAdmin();
         this.isAuthenticated.subscribe(x => {
             console.log(`isAuthenticated changed to ${x} (iframe ${isIFrame})`);
         });
@@ -138,32 +168,55 @@ class LoginMenuComponent {
     register() {
     }
 }
-LoginMenuComponent.ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "14.2.2", ngImport: i0, type: LoginMenuComponent, deps: [{ token: AuthorizeService }], target: i0.ɵɵFactoryTarget.Component });
-LoginMenuComponent.ɵcmp = i0.ɵɵngDeclareComponent({ minVersion: "14.0.0", version: "14.2.2", type: LoginMenuComponent, selector: "app-login-menu", ngImport: i0, template: "<ul *ngIf=\"isAuthenticated | async\" class=\"navbar-nav\">\n  <li class=\"nav-item dropdown\">\n    <a aria-expanded=\"false\" aria-haspopup=\"true\" class=\"nav-link dropdown-toggle\" data-toggle=\"dropdown\" href=\"#\"\n       id=\"navbarDropdownLogin\" role=\"button\">\n      {{ userName | async }} <b class=\"caret\"></b>\n    </a>\n    <div aria-labelledby=\"navbarDropdown\" class=\"dropdown-menu\">\n      <!--<a class=\"dropdown-item\" asp-action=\"Index\" asp-area=\"Authentication\" asp-controller=\"Grants\">Client Application Access</a>-->\n      <!--<a class=\"dropdown-item\" [routerLink]='[\"/authentication/profile\"]' title=\"Manage\">Manage</a>-->\n      <!--<a class=\"dropdown-item\" asp-action=\"Index\" asp-area=\"Authentication\" asp-controller=\"Diagnostics\">Diagnostics</a>-->\n      <div class=\"dropdown-divider\"></div>\n      <a (click)='logout()' class=\"dropdown-item\" routerLink=\"\" title=\"Logout\">Logout</a>\n    </div>\n  </li>\n</ul>\n<ul *ngIf=\"!(isAuthenticated | async)\" class=\"navbar-nav\">\n  <li class=\"nav-item\">\n    <a (click)='register()' class=\"nav-link\" routerLink=\"\">Register</a>\n  </li>\n  <li class=\"nav-item\">\n    <a (click)='login()' class=\"nav-link\" routerLink=\"\">Login</a>\n  </li>\n</ul>\n", styles: [""], dependencies: [{ kind: "directive", type: i2.NgIf, selector: "[ngIf]", inputs: ["ngIf", "ngIfThen", "ngIfElse"] }, { kind: "pipe", type: i2.AsyncPipe, name: "async" }] });
-i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "14.2.2", ngImport: i0, type: LoginMenuComponent, decorators: [{
+LoginMenuComponent.ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "15.2.8", ngImport: i0, type: LoginMenuComponent, deps: [{ token: AuthorizeService }], target: i0.ɵɵFactoryTarget.Component });
+LoginMenuComponent.ɵcmp = i0.ɵɵngDeclareComponent({ minVersion: "14.0.0", version: "15.2.8", type: LoginMenuComponent, selector: "app-login-menu", ngImport: i0, template: "<ul *ngIf=\"isAuthenticated | async\" class=\"navbar-nav\">\n  <li class=\"nav-item dropdown\">\n    <a aria-expanded=\"false\" aria-haspopup=\"true\" class=\"nav-link dropdown-toggle\" data-toggle=\"dropdown\" href=\"#\"\n       id=\"navbarDropdownLogin\" role=\"button\">\n      {{ userName | async }} <b class=\"caret\"></b>\n    </a>\n    <div aria-labelledby=\"navbarDropdown\" class=\"dropdown-menu\">\n      <!--<a class=\"dropdown-item\" asp-action=\"Index\" asp-area=\"Authentication\" asp-controller=\"Grants\">Client Application Access</a>-->\n      <!--<a class=\"dropdown-item\" [routerLink]='[\"/authentication/profile\"]' title=\"Manage\">Manage</a>-->\n      <!--<a class=\"dropdown-item\" asp-action=\"Index\" asp-area=\"Authentication\" asp-controller=\"Diagnostics\">Diagnostics</a>-->\n      <div class=\"dropdown-divider\"></div>\n      <a (click)='logout()' class=\"dropdown-item\" routerLink=\"\" title=\"Logout\">Logout</a>\n    </div>\n  </li>\n</ul>\n<ul *ngIf=\"!(isAuthenticated | async)\" class=\"navbar-nav\">\n  <li class=\"nav-item\">\n    <a (click)='register()' class=\"nav-link\" routerLink=\"\">Register</a>\n  </li>\n  <li class=\"nav-item\">\n    <a (click)='login()' class=\"nav-link\" routerLink=\"\">Login</a>\n  </li>\n</ul>\n", styles: [""], dependencies: [{ kind: "directive", type: i2.NgIf, selector: "[ngIf]", inputs: ["ngIf", "ngIfThen", "ngIfElse"] }, { kind: "pipe", type: i2.AsyncPipe, name: "async" }] });
+i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "15.2.8", ngImport: i0, type: LoginMenuComponent, decorators: [{
             type: Component,
             args: [{ selector: 'app-login-menu', template: "<ul *ngIf=\"isAuthenticated | async\" class=\"navbar-nav\">\n  <li class=\"nav-item dropdown\">\n    <a aria-expanded=\"false\" aria-haspopup=\"true\" class=\"nav-link dropdown-toggle\" data-toggle=\"dropdown\" href=\"#\"\n       id=\"navbarDropdownLogin\" role=\"button\">\n      {{ userName | async }} <b class=\"caret\"></b>\n    </a>\n    <div aria-labelledby=\"navbarDropdown\" class=\"dropdown-menu\">\n      <!--<a class=\"dropdown-item\" asp-action=\"Index\" asp-area=\"Authentication\" asp-controller=\"Grants\">Client Application Access</a>-->\n      <!--<a class=\"dropdown-item\" [routerLink]='[\"/authentication/profile\"]' title=\"Manage\">Manage</a>-->\n      <!--<a class=\"dropdown-item\" asp-action=\"Index\" asp-area=\"Authentication\" asp-controller=\"Diagnostics\">Diagnostics</a>-->\n      <div class=\"dropdown-divider\"></div>\n      <a (click)='logout()' class=\"dropdown-item\" routerLink=\"\" title=\"Logout\">Logout</a>\n    </div>\n  </li>\n</ul>\n<ul *ngIf=\"!(isAuthenticated | async)\" class=\"navbar-nav\">\n  <li class=\"nav-item\">\n    <a (click)='register()' class=\"nav-link\" routerLink=\"\">Register</a>\n  </li>\n  <li class=\"nav-item\">\n    <a (click)='login()' class=\"nav-link\" routerLink=\"\">Login</a>\n  </li>\n</ul>\n" }]
         }], ctorParameters: function () { return [{ type: AuthorizeService }]; } });
 
 class AuthorizeGuard {
-    constructor(authorize) {
-        this.authorize = authorize;
+    constructor(authorizeService, router) {
+        this.authorizeService = authorizeService;
+        this.router = router;
     }
-    canActivate(_next, state) {
-        return this.authorize.getIsAuthenticated()
-            .pipe(tap(isAuthenticated => this.handleAuthorization(isAuthenticated)));
+    canActivate(next, state) {
+        let url = state.url;
+        return this.handleAuthorization(next, url);
     }
-    handleAuthorization(isAuthenticated) {
-        if (!isAuthenticated) {
-            this.authorize.login();
-        }
+    canActivateChild(next, state) {
+        return this.canActivate(next, state);
+    }
+    canDeactivate(component, currentRoute, currentState, nextState) {
+        return true;
+    }
+    canLoad(route, segments) {
+        return true;
+    }
+    handleAuthorization(route, url) {
+        return __awaiter(this, void 0, void 0, function* () {
+            yield this.authorizeService.initialize();
+            const isAuthenticated = yield firstValueFrom(this.authorizeService.getIsAuthenticated());
+            if (isAuthenticated) {
+                const userRoles = yield firstValueFrom(this.authorizeService.getRoles());
+                if (route.data['roles'] && !route.data['roles'].filter((value) => userRoles.includes(value))) {
+                    this.router.navigate(['']);
+                    return false;
+                }
+                return true;
+            }
+            else {
+                this.authorizeService.login();
+            }
+            return false;
+        });
     }
 }
-AuthorizeGuard.ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "14.2.2", ngImport: i0, type: AuthorizeGuard, deps: [{ token: AuthorizeService }], target: i0.ɵɵFactoryTarget.Injectable });
-AuthorizeGuard.ɵprov = i0.ɵɵngDeclareInjectable({ minVersion: "12.0.0", version: "14.2.2", ngImport: i0, type: AuthorizeGuard });
-i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "14.2.2", ngImport: i0, type: AuthorizeGuard, decorators: [{
+AuthorizeGuard.ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "15.2.8", ngImport: i0, type: AuthorizeGuard, deps: [{ token: AuthorizeService }, { token: i2$1.Router }], target: i0.ɵɵFactoryTarget.Injectable });
+AuthorizeGuard.ɵprov = i0.ɵɵngDeclareInjectable({ minVersion: "12.0.0", version: "15.2.8", ngImport: i0, type: AuthorizeGuard });
+i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "15.2.8", ngImport: i0, type: AuthorizeGuard, decorators: [{
             type: Injectable
-        }], ctorParameters: function () { return [{ type: AuthorizeService }]; } });
+        }], ctorParameters: function () { return [{ type: AuthorizeService }, { type: i2$1.Router }]; } });
 
 class SharedAuthModule {
     static forRoot(authorizeOptions) {
@@ -180,13 +233,13 @@ class SharedAuthModule {
         };
     }
 }
-SharedAuthModule.ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "14.2.2", ngImport: i0, type: SharedAuthModule, deps: [], target: i0.ɵɵFactoryTarget.NgModule });
-SharedAuthModule.ɵmod = i0.ɵɵngDeclareNgModule({ minVersion: "14.0.0", version: "14.2.2", ngImport: i0, type: SharedAuthModule, declarations: [LoginMenuComponent], imports: [CommonModule,
+SharedAuthModule.ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "15.2.8", ngImport: i0, type: SharedAuthModule, deps: [], target: i0.ɵɵFactoryTarget.NgModule });
+SharedAuthModule.ɵmod = i0.ɵɵngDeclareNgModule({ minVersion: "14.0.0", version: "15.2.8", ngImport: i0, type: SharedAuthModule, declarations: [LoginMenuComponent], imports: [CommonModule,
         HttpClientModule, i1.OAuthModule], exports: [LoginMenuComponent] });
-SharedAuthModule.ɵinj = i0.ɵɵngDeclareInjector({ minVersion: "12.0.0", version: "14.2.2", ngImport: i0, type: SharedAuthModule, imports: [CommonModule,
+SharedAuthModule.ɵinj = i0.ɵɵngDeclareInjector({ minVersion: "12.0.0", version: "15.2.8", ngImport: i0, type: SharedAuthModule, imports: [CommonModule,
         HttpClientModule,
         OAuthModule.forRoot()] });
-i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "14.2.2", ngImport: i0, type: SharedAuthModule, decorators: [{
+i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "15.2.8", ngImport: i0, type: SharedAuthModule, decorators: [{
             type: NgModule,
             args: [{
                     declarations: [LoginMenuComponent],
@@ -203,6 +256,7 @@ i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "14.2.2", ngImpor
 class AuthorizeInterceptor {
     constructor(authorize) {
         this.authorize = authorize;
+        this.accessToken = null;
         authorize.getAccessToken().subscribe(value => this.accessToken = value);
     }
     static isSameOriginUrl(req) {
@@ -241,9 +295,11 @@ class AuthorizeInterceptor {
     }
     isKnownServiceUri(req) {
         const serviceUris = this.authorize.getServiceUris();
-        for (let i = 0; i < serviceUris.length; i++) {
-            if (req.url.startsWith(`${serviceUris[i]}`)) {
-                return true;
+        if (serviceUris) {
+            for (let i = 0; i < serviceUris.length; i++) {
+                if (req.url.startsWith(`${serviceUris[i]}`)) {
+                    return true;
+                }
             }
         }
         // It's an absolute or protocol relative url that
@@ -251,9 +307,9 @@ class AuthorizeInterceptor {
         return false;
     }
 }
-AuthorizeInterceptor.ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "14.2.2", ngImport: i0, type: AuthorizeInterceptor, deps: [{ token: AuthorizeService }], target: i0.ɵɵFactoryTarget.Injectable });
-AuthorizeInterceptor.ɵprov = i0.ɵɵngDeclareInjectable({ minVersion: "12.0.0", version: "14.2.2", ngImport: i0, type: AuthorizeInterceptor });
-i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "14.2.2", ngImport: i0, type: AuthorizeInterceptor, decorators: [{
+AuthorizeInterceptor.ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "15.2.8", ngImport: i0, type: AuthorizeInterceptor, deps: [{ token: AuthorizeService }], target: i0.ɵɵFactoryTarget.Injectable });
+AuthorizeInterceptor.ɵprov = i0.ɵɵngDeclareInjectable({ minVersion: "12.0.0", version: "15.2.8", ngImport: i0, type: AuthorizeInterceptor });
+i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "15.2.8", ngImport: i0, type: AuthorizeInterceptor, decorators: [{
             type: Injectable
         }], ctorParameters: function () { return [{ type: AuthorizeService }]; } });
 

package/fesm2015/meshmakers-shared-auth.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"meshmakers-shared-auth.mjs","sources":["../../../../projects/meshmakers/shared-auth/src/lib/authorize.service.ts","../../../../projects/meshmakers/shared-auth/src/lib/login-menu/login-menu.component.ts","../../../../projects/meshmakers/shared-auth/src/lib/login-menu/login-menu.component.html","../../../../projects/meshmakers/shared-auth/src/lib/authorize.guard.ts","../../../../projects/meshmakers/shared-auth/src/lib/shared-auth.module.ts","../../../../projects/meshmakers/shared-auth/src/lib/authorize.interceptor.ts","../../../../projects/meshmakers/shared-auth/src/public-api.ts","../../../../projects/meshmakers/shared-auth/src/meshmakers-shared-auth.ts"],"sourcesContent":["import {Inject, Injectable} from '@angular/core';\nimport {BehaviorSubject} from 'rxjs';\nimport {filter} from 'rxjs/operators';\nimport {AuthConfig, OAuthService} from \"angular-oauth2-oidc\";\n\nexport interface IUser {\n  name: string;\n  role: string;\n}\n\nexport class AuthorizeOptions {\n  wellKnownServiceUris: string[];\n  // Url of the Identity Provider\n  issuer: string;\n  // URL of the SPA to redirect the user to after login\n  redirectUri: string;\n  postLogoutRedirectUri: string;\n  // The SPA's id. The SPA is registered with this id at the auth-server\n  clientId: string;\n  // set the scope for the permissions the client should request\n  // The first three are defined by OIDC. The 4th is a use case-specific one\n  scope: string;\n  showDebugInformation: boolean;\n  sessionChecksEnabled: boolean;\n}\n\n@Injectable()\nexport class AuthorizeService {\n  private isAuthenticated: BehaviorSubject<boolean> = new BehaviorSubject(false);\n  private isAdmin: BehaviorSubject<boolean> = new BehaviorSubject(false);\n  private authority: BehaviorSubject<string> = new BehaviorSubject(null);\n  private accessToken: BehaviorSubject<string> = new BehaviorSubject(null);\n  private user: BehaviorSubject<IUser> = new BehaviorSubject(null);\n\n  constructor(@Inject(AuthorizeOptions) private authorizeOptions: AuthorizeOptions, private oauthService: OAuthService) {\n    console.debug(\"AuthorizeService::created\");\n    this.getUser().subscribe(s => {\n      this.isAuthenticated.next(!!s);\n      this.isAdmin.next(!!s && s.role === \"Administrators\");\n    });\n  }\n\n  public getServiceUris(): Array<string> {\n    return this.authorizeOptions.wellKnownServiceUris;\n  }\n\n  public getAuthority(): BehaviorSubject<string> {\n    return this.authority;\n  }\n\n  public getIsAuthenticated(): BehaviorSubject<boolean> {\n    return this.isAuthenticated;\n  }\n\n  public getIsAdmin(): BehaviorSubject<boolean> {\n    return this.isAdmin;\n  }\n\n  public getAccessToken(): BehaviorSubject<string> {\n    return this.accessToken;\n  }\n\n  public getUser(): BehaviorSubject<IUser> {\n    return this.user;\n  }\n\n  public login() {\n    this.oauthService.initImplicitFlow();\n  }\n\n  public logout() {\n    this.oauthService.logOut(false);\n  }\n\n\n  public initialize() {\n\n    console.debug(\"AuthorizeService::initialize::started\");\n\n    const config: AuthConfig = {\n      responseType: 'code',\n      issuer: this.authorizeOptions.issuer,\n      redirectUri: this.authorizeOptions.redirectUri,\n      postLogoutRedirectUri: this.authorizeOptions.postLogoutRedirectUri,\n      clientId: this.authorizeOptions.clientId,\n      scope: this.authorizeOptions.scope,\n      showDebugInformation: this.authorizeOptions.showDebugInformation,\n      sessionChecksEnabled: this.authorizeOptions.sessionChecksEnabled\n    };\n\n    this.oauthService.configure(config);\n    this.oauthService.setStorage(localStorage);\n    this.oauthService.loadDiscoveryDocumentAndTryLogin();\n\n    this.oauthService.setupAutomaticSilentRefresh();\n\n    this.oauthService.events.subscribe(e => {\n      // tslint:disable-next-line:no-console\n      console.debug('oauth/oidc event', e);\n    });\n\n    this.oauthService.events\n      .pipe(filter(e => e.type === 'session_terminated'))\n      .subscribe(e => {\n        // tslint:disable-next-line:no-console\n        console.debug('Your session has been terminated!');\n      });\n\n    this.oauthService.events\n      .pipe(filter(e => e.type === 'token_received'))\n      .subscribe(e => {\n        this.loadUser();\n      });\n\n    this.oauthService.events\n      .pipe(filter(e => e.type === 'logout'))\n      .subscribe(e => {\n        this.accessToken.next(null);\n        this.user.next(null);\n      });\n\n    if (this.oauthService.hasValidAccessToken()) {\n      this.loadUser();\n    }\n\n    this.authority.next(this.authorizeOptions.issuer);\n\n    console.debug(\"AuthorizeService::initialize::done\");\n\n  }\n\n  private loadUser() {\n    const claims = this.oauthService.getIdentityClaims();\n    if (!claims) {\n      console.error(\"claims where null when loading identity claims\");\n      return;\n    }\n\n    const user = <IUser>claims;\n    const accessToken = this.oauthService.getAccessToken();\n    this.user.next(user);\n    this.accessToken.next(accessToken);\n  }\n}\n","import {Component, OnInit} from '@angular/core';\nimport {AuthorizeService} from '../authorize.service';\nimport {BehaviorSubject, Observable} from 'rxjs';\nimport {map} from 'rxjs/operators';\n\n@Component({\n  selector: 'app-login-menu',\n  templateUrl: './login-menu.component.html',\n  styleUrls: ['./login-menu.component.css']\n})\nexport class LoginMenuComponent implements OnInit {\n  public isAuthenticated: BehaviorSubject<boolean>;\n  public userName: Observable<string>;\n  public isAdmin: Observable<boolean>;\n\n  constructor(private authorizeService: AuthorizeService) {\n  }\n\n  ngOnInit() {\n    const isIFrame = window.self !== window.top;\n\n    console.log(\"app-login-menu::created\");\n\n    this.isAuthenticated = this.authorizeService.getIsAuthenticated();\n    this.userName = this.authorizeService.getUser().pipe(map(u => u && u.name));\n    this.isAdmin = this.authorizeService.getIsAdmin();\n\n    this.isAuthenticated.subscribe(x => {\n\n      console.log(`isAuthenticated changed to ${x} (iframe ${isIFrame})`);\n    });\n  }\n\n  public login() {\n    this.authorizeService.login();\n  }\n\n  public logout() {\n    this.authorizeService.logout();\n  }\n\n  public register() {\n\n  }\n}\n","<ul *ngIf=\"isAuthenticated | async\" class=\"navbar-nav\">\n  <li class=\"nav-item dropdown\">\n    <a aria-expanded=\"false\" aria-haspopup=\"true\" class=\"nav-link dropdown-toggle\" data-toggle=\"dropdown\" href=\"#\"\n       id=\"navbarDropdownLogin\" role=\"button\">\n      {{ userName | async }} <b class=\"caret\"></b>\n    </a>\n    <div aria-labelledby=\"navbarDropdown\" class=\"dropdown-menu\">\n      <!--<a class=\"dropdown-item\" asp-action=\"Index\" asp-area=\"Authentication\" asp-controller=\"Grants\">Client Application Access</a>-->\n      <!--<a class=\"dropdown-item\" [routerLink]='[\"/authentication/profile\"]' title=\"Manage\">Manage</a>-->\n      <!--<a class=\"dropdown-item\" asp-action=\"Index\" asp-area=\"Authentication\" asp-controller=\"Diagnostics\">Diagnostics</a>-->\n      <div class=\"dropdown-divider\"></div>\n      <a (click)='logout()' class=\"dropdown-item\" routerLink=\"\" title=\"Logout\">Logout</a>\n    </div>\n  </li>\n</ul>\n<ul *ngIf=\"!(isAuthenticated | async)\" class=\"navbar-nav\">\n  <li class=\"nav-item\">\n    <a (click)='register()' class=\"nav-link\" routerLink=\"\">Register</a>\n  </li>\n  <li class=\"nav-item\">\n    <a (click)='login()' class=\"nav-link\" routerLink=\"\">Login</a>\n  </li>\n</ul>\n","import {Injectable} from '@angular/core';\nimport {ActivatedRouteSnapshot, CanActivate, RouterStateSnapshot} from '@angular/router';\nimport {AuthorizeService} from './authorize.service';\nimport {tap} from 'rxjs/operators';\n\n@Injectable()\nexport class AuthorizeGuard implements CanActivate {\n  constructor(private authorize: AuthorizeService) {\n  }\n\n  canActivate(\n    _next: ActivatedRouteSnapshot,\n    state: RouterStateSnapshot): any {\n    return this.authorize.getIsAuthenticated()\n      .pipe(tap(isAuthenticated => this.handleAuthorization(isAuthenticated)));\n  }\n\n  private handleAuthorization(isAuthenticated: boolean) {\n    if (!isAuthenticated) {\n      this.authorize.login();\n    }\n  }\n}\n","import {ModuleWithProviders, NgModule} from '@angular/core';\nimport {CommonModule} from \"@angular/common\";\nimport {HttpClientModule} from \"@angular/common/http\";\nimport {LoginMenuComponent} from \"./login-menu/login-menu.component\";\nimport {AuthorizeOptions, AuthorizeService} from \"./authorize.service\";\nimport {OAuthModule} from \"angular-oauth2-oidc\";\nimport {AuthorizeGuard} from \"./authorize.guard\";\n\n@NgModule({\n  declarations: [LoginMenuComponent],\n  exports: [LoginMenuComponent],\n  providers: [],\n  imports: [\n    CommonModule,\n    HttpClientModule,\n    OAuthModule.forRoot()\n  ]\n})\nexport class SharedAuthModule {\n  static forRoot(authorizeOptions: AuthorizeOptions): ModuleWithProviders<SharedAuthModule> {\n    return {\n      ngModule: SharedAuthModule,\n      providers: [\n        {\n          provide: AuthorizeOptions,\n          useValue: authorizeOptions\n        },\n        AuthorizeService,\n        AuthorizeGuard\n      ]\n    }\n  }\n}\n","import {Injectable} from '@angular/core';\nimport {HttpEvent, HttpHandler, HttpInterceptor, HttpRequest} from '@angular/common/http';\nimport {Observable} from 'rxjs';\nimport {AuthorizeService} from './authorize.service';\n\n@Injectable()\nexport class AuthorizeInterceptor implements HttpInterceptor {\n\n  accessToken: string;\n\n  constructor(private authorize: AuthorizeService) {\n\n    authorize.getAccessToken().subscribe(value => this.accessToken = value);\n\n  }\n\n  private static isSameOriginUrl(req: any) {\n    // It's an absolute url with the same origin.\n    if (req.url.startsWith(`${window.location.origin}/`)) {\n      return true;\n    }\n\n    // It's a protocol relative url with the same origin.\n    // For example: //www.example.com/api/Products\n    if (req.url.startsWith(`//${window.location.host}/`)) {\n      return true;\n    }\n\n    // It's a relative url like /api/Products\n    if (/^\\/[^\\/].*/.test(req.url)) {\n      return true;\n    }\n\n    // It's an absolute or protocol relative url that\n    // doesn't have the same origin.\n    return false;\n  }\n\n  // Checks if there is an access_token available in the authorize service\n  // and adds it to the request in case it's targeted at the same origin as the\n\n  intercept(req: HttpRequest<any>, next: HttpHandler): Observable<HttpEvent<any>> {\n    return this.processRequestWithToken(this.accessToken, req, next);\n  }\n\n  // single page application.\n  private processRequestWithToken(token: string, req: HttpRequest<any>, next: HttpHandler) {\n    if (!!token && (AuthorizeInterceptor.isSameOriginUrl(req) || this.isKnownServiceUri(req))) {\n      req = req.clone({\n        setHeaders: {\n          Authorization: `Bearer ${token}`\n        }\n      });\n    }\n\n    return next.handle(req);\n  }\n\n  private isKnownServiceUri(req: any) {\n\n    const serviceUris = this.authorize.getServiceUris();\n\n    for (let i = 0; i < serviceUris.length; i++) {\n      if (req.url.startsWith(`${serviceUris[i]}`)) {\n        return true;\n      }\n    }\n\n    // It's an absolute or protocol relative url that\n    // doesn't have the same origin.\n    return false;\n  }\n}\n","/*\n * Public API Surface of shared-auth\n */\n\nexport * from './lib/authorize.service';\nexport * from './lib/login-menu/login-menu.component';\nexport * from './lib/shared-auth.module';\nexport * from './lib/authorize.interceptor';\nexport * from './lib/authorize.guard';\n","/**\n * Generated bundle index. Do not edit.\n */\n\nexport * from './public-api';\n"],"names":["i1.AuthorizeService"],"mappings":";;;;;;;;;;MAUa,gBAAgB,CAAA;AAc5B,CAAA;MAGY,gBAAgB,CAAA;IAO3B,WAA8C,CAAA,gBAAkC,EAAU,YAA0B,EAAA;AAAtE,QAAA,IAAgB,CAAA,gBAAA,GAAhB,gBAAgB,CAAkB;AAAU,QAAA,IAAY,CAAA,YAAA,GAAZ,YAAY,CAAc;QAN5G,IAAA,CAAA,eAAe,GAA6B,IAAI,eAAe,CAAC,KAAK,CAAC,CAAC;QACvE,IAAA,CAAA,OAAO,GAA6B,IAAI,eAAe,CAAC,KAAK,CAAC,CAAC;QAC/D,IAAA,CAAA,SAAS,GAA4B,IAAI,eAAe,CAAC,IAAI,CAAC,CAAC;QAC/D,IAAA,CAAA,WAAW,GAA4B,IAAI,eAAe,CAAC,IAAI,CAAC,CAAC;QACjE,IAAA,CAAA,IAAI,GAA2B,IAAI,eAAe,CAAC,IAAI,CAAC,CAAC;AAG/D,QAAA,OAAO,CAAC,KAAK,CAAC,2BAA2B,CAAC,CAAC;QAC3C,IAAI,CAAC,OAAO,EAAE,CAAC,SAAS,CAAC,CAAC,IAAG;YAC3B,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAC/B,YAAA,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,KAAK,gBAAgB,CAAC,CAAC;AACxD,SAAC,CAAC,CAAC;KACJ;IAEM,cAAc,GAAA;AACnB,QAAA,OAAO,IAAI,CAAC,gBAAgB,CAAC,oBAAoB,CAAC;KACnD;IAEM,YAAY,GAAA;QACjB,OAAO,IAAI,CAAC,SAAS,CAAC;KACvB;IAEM,kBAAkB,GAAA;QACvB,OAAO,IAAI,CAAC,eAAe,CAAC;KAC7B;IAEM,UAAU,GAAA;QACf,OAAO,IAAI,CAAC,OAAO,CAAC;KACrB;IAEM,cAAc,GAAA;QACnB,OAAO,IAAI,CAAC,WAAW,CAAC;KACzB;IAEM,OAAO,GAAA;QACZ,OAAO,IAAI,CAAC,IAAI,CAAC;KAClB;IAEM,KAAK,GAAA;AACV,QAAA,IAAI,CAAC,YAAY,CAAC,gBAAgB,EAAE,CAAC;KACtC;IAEM,MAAM,GAAA;AACX,QAAA,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;KACjC;IAGM,UAAU,GAAA;AAEf,QAAA,OAAO,CAAC,KAAK,CAAC,uCAAuC,CAAC,CAAC;AAEvD,QAAA,MAAM,MAAM,GAAe;AACzB,YAAA,YAAY,EAAE,MAAM;AACpB,YAAA,MAAM,EAAE,IAAI,CAAC,gBAAgB,CAAC,MAAM;AACpC,YAAA,WAAW,EAAE,IAAI,CAAC,gBAAgB,CAAC,WAAW;AAC9C,YAAA,qBAAqB,EAAE,IAAI,CAAC,gBAAgB,CAAC,qBAAqB;AAClE,YAAA,QAAQ,EAAE,IAAI,CAAC,gBAAgB,CAAC,QAAQ;AACxC,YAAA,KAAK,EAAE,IAAI,CAAC,gBAAgB,CAAC,KAAK;AAClC,YAAA,oBAAoB,EAAE,IAAI,CAAC,gBAAgB,CAAC,oBAAoB;AAChE,YAAA,oBAAoB,EAAE,IAAI,CAAC,gBAAgB,CAAC,oBAAoB;SACjE,CAAC;AAEF,QAAA,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;AACpC,QAAA,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;AAC3C,QAAA,IAAI,CAAC,YAAY,CAAC,gCAAgC,EAAE,CAAC;AAErD,QAAA,IAAI,CAAC,YAAY,CAAC,2BAA2B,EAAE,CAAC;QAEhD,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,IAAG;;AAErC,YAAA,OAAO,CAAC,KAAK,CAAC,kBAAkB,EAAE,CAAC,CAAC,CAAC;AACvC,SAAC,CAAC,CAAC;QAEH,IAAI,CAAC,YAAY,CAAC,MAAM;AACrB,aAAA,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,KAAK,oBAAoB,CAAC,CAAC;aAClD,SAAS,CAAC,CAAC,IAAG;;AAEb,YAAA,OAAO,CAAC,KAAK,CAAC,mCAAmC,CAAC,CAAC;AACrD,SAAC,CAAC,CAAC;QAEL,IAAI,CAAC,YAAY,CAAC,MAAM;AACrB,aAAA,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,KAAK,gBAAgB,CAAC,CAAC;aAC9C,SAAS,CAAC,CAAC,IAAG;YACb,IAAI,CAAC,QAAQ,EAAE,CAAC;AAClB,SAAC,CAAC,CAAC;QAEL,IAAI,CAAC,YAAY,CAAC,MAAM;AACrB,aAAA,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC;aACtC,SAAS,CAAC,CAAC,IAAG;AACb,YAAA,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC5B,YAAA,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACvB,SAAC,CAAC,CAAC;AAEL,QAAA,IAAI,IAAI,CAAC,YAAY,CAAC,mBAAmB,EAAE,EAAE;YAC3C,IAAI,CAAC,QAAQ,EAAE,CAAC;AACjB,SAAA;QAED,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC;AAElD,QAAA,OAAO,CAAC,KAAK,CAAC,oCAAoC,CAAC,CAAC;KAErD;IAEO,QAAQ,GAAA;QACd,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,iBAAiB,EAAE,CAAC;QACrD,IAAI,CAAC,MAAM,EAAE;AACX,YAAA,OAAO,CAAC,KAAK,CAAC,gDAAgD,CAAC,CAAC;YAChE,OAAO;AACR,SAAA;QAED,MAAM,IAAI,GAAU,MAAM,CAAC;QAC3B,MAAM,WAAW,GAAG,IAAI,CAAC,YAAY,CAAC,cAAc,EAAE,CAAC;AACvD,QAAA,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACrB,QAAA,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;KACpC;;AAnHU,gBAAA,CAAA,IAAA,GAAA,EAAA,CAAA,kBAAA,CAAA,EAAA,UAAA,EAAA,QAAA,EAAA,OAAA,EAAA,QAAA,EAAA,QAAA,EAAA,EAAA,EAAA,IAAA,EAAA,gBAAgB,kBAOP,gBAAgB,EAAA,EAAA,EAAA,KAAA,EAAA,EAAA,CAAA,YAAA,EAAA,CAAA,EAAA,MAAA,EAAA,EAAA,CAAA,eAAA,CAAA,UAAA,EAAA,CAAA,CAAA;iHAPzB,gBAAgB,EAAA,CAAA,CAAA;2FAAhB,gBAAgB,EAAA,UAAA,EAAA,CAAA;kBAD5B,UAAU;;;8BAQI,MAAM;+BAAC,gBAAgB,CAAA;;;;MCxBzB,kBAAkB,CAAA;AAK7B,IAAA,WAAA,CAAoB,gBAAkC,EAAA;AAAlC,QAAA,IAAgB,CAAA,gBAAA,GAAhB,gBAAgB,CAAkB;KACrD;IAED,QAAQ,GAAA;QACN,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,KAAK,MAAM,CAAC,GAAG,CAAC;AAE5C,QAAA,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC,CAAC;QAEvC,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC,gBAAgB,CAAC,kBAAkB,EAAE,CAAC;QAClE,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,gBAAgB,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;QAC5E,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,gBAAgB,CAAC,UAAU,EAAE,CAAC;AAElD,QAAA,IAAI,CAAC,eAAe,CAAC,SAAS,CAAC,CAAC,IAAG;YAEjC,OAAO,CAAC,GAAG,CAAC,CAAA,2BAAA,EAA8B,CAAC,CAAY,SAAA,EAAA,QAAQ,CAAG,CAAA,CAAA,CAAC,CAAC;AACtE,SAAC,CAAC,CAAC;KACJ;IAEM,KAAK,GAAA;AACV,QAAA,IAAI,CAAC,gBAAgB,CAAC,KAAK,EAAE,CAAC;KAC/B;IAEM,MAAM,GAAA;AACX,QAAA,IAAI,CAAC,gBAAgB,CAAC,MAAM,EAAE,CAAC;KAChC;IAEM,QAAQ,GAAA;KAEd;;+GAjCU,kBAAkB,EAAA,IAAA,EAAA,CAAA,EAAA,KAAA,EAAAA,gBAAA,EAAA,CAAA,EAAA,MAAA,EAAA,EAAA,CAAA,eAAA,CAAA,SAAA,EAAA,CAAA,CAAA;AAAlB,kBAAA,CAAA,IAAA,GAAA,EAAA,CAAA,oBAAA,CAAA,EAAA,UAAA,EAAA,QAAA,EAAA,OAAA,EAAA,QAAA,EAAA,IAAA,EAAA,kBAAkB,sDCV/B,svCAuBA,EAAA,MAAA,EAAA,CAAA,EAAA,CAAA,EAAA,YAAA,EAAA,CAAA,EAAA,IAAA,EAAA,WAAA,EAAA,IAAA,EAAA,EAAA,CAAA,IAAA,EAAA,QAAA,EAAA,QAAA,EAAA,MAAA,EAAA,CAAA,MAAA,EAAA,UAAA,EAAA,UAAA,CAAA,EAAA,EAAA,EAAA,IAAA,EAAA,MAAA,EAAA,IAAA,EAAA,EAAA,CAAA,SAAA,EAAA,IAAA,EAAA,OAAA,EAAA,CAAA,EAAA,CAAA,CAAA;2FDba,kBAAkB,EAAA,UAAA,EAAA,CAAA;kBAL9B,SAAS;+BACE,gBAAgB,EAAA,QAAA,EAAA,svCAAA,EAAA,CAAA;;;MEAf,cAAc,CAAA;AACzB,IAAA,WAAA,CAAoB,SAA2B,EAAA;AAA3B,QAAA,IAAS,CAAA,SAAA,GAAT,SAAS,CAAkB;KAC9C;IAED,WAAW,CACT,KAA6B,EAC7B,KAA0B,EAAA;AAC1B,QAAA,OAAO,IAAI,CAAC,SAAS,CAAC,kBAAkB,EAAE;AACvC,aAAA,IAAI,CAAC,GAAG,CAAC,eAAe,IAAI,IAAI,CAAC,mBAAmB,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;KAC5E;AAEO,IAAA,mBAAmB,CAAC,eAAwB,EAAA;QAClD,IAAI,CAAC,eAAe,EAAE;AACpB,YAAA,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC;AACxB,SAAA;KACF;;2GAfU,cAAc,EAAA,IAAA,EAAA,CAAA,EAAA,KAAA,EAAAA,gBAAA,EAAA,CAAA,EAAA,MAAA,EAAA,EAAA,CAAA,eAAA,CAAA,UAAA,EAAA,CAAA,CAAA;+GAAd,cAAc,EAAA,CAAA,CAAA;2FAAd,cAAc,EAAA,UAAA,EAAA,CAAA;kBAD1B,UAAU;;;MCaE,gBAAgB,CAAA;IAC3B,OAAO,OAAO,CAAC,gBAAkC,EAAA;QAC/C,OAAO;AACL,YAAA,QAAQ,EAAE,gBAAgB;AAC1B,YAAA,SAAS,EAAE;AACT,gBAAA;AACE,oBAAA,OAAO,EAAE,gBAAgB;AACzB,oBAAA,QAAQ,EAAE,gBAAgB;AAC3B,iBAAA;gBACD,gBAAgB;gBAChB,cAAc;AACf,aAAA;SACF,CAAA;KACF;;6GAbU,gBAAgB,EAAA,IAAA,EAAA,EAAA,EAAA,MAAA,EAAA,EAAA,CAAA,eAAA,CAAA,QAAA,EAAA,CAAA,CAAA;8GAAhB,gBAAgB,EAAA,YAAA,EAAA,CATZ,kBAAkB,CAAA,EAAA,OAAA,EAAA,CAI/B,YAAY;AACZ,QAAA,gBAAgB,6BAJR,kBAAkB,CAAA,EAAA,CAAA,CAAA;AAQjB,gBAAA,CAAA,IAAA,GAAA,EAAA,CAAA,mBAAA,CAAA,EAAA,UAAA,EAAA,QAAA,EAAA,OAAA,EAAA,QAAA,EAAA,QAAA,EAAA,EAAA,EAAA,IAAA,EAAA,gBAAgB,YALzB,YAAY;QACZ,gBAAgB;AAChB,QAAA,WAAW,CAAC,OAAO,EAAE,CAAA,EAAA,CAAA,CAAA;2FAGZ,gBAAgB,EAAA,UAAA,EAAA,CAAA;kBAV5B,QAAQ;AAAC,YAAA,IAAA,EAAA,CAAA;oBACR,YAAY,EAAE,CAAC,kBAAkB,CAAC;oBAClC,OAAO,EAAE,CAAC,kBAAkB,CAAC;AAC7B,oBAAA,SAAS,EAAE,EAAE;AACb,oBAAA,OAAO,EAAE;wBACP,YAAY;wBACZ,gBAAgB;wBAChB,WAAW,CAAC,OAAO,EAAE;AACtB,qBAAA;iBACF,CAAA;;;MCXY,oBAAoB,CAAA;AAI/B,IAAA,WAAA,CAAoB,SAA2B,EAAA;AAA3B,QAAA,IAAS,CAAA,SAAA,GAAT,SAAS,CAAkB;AAE7C,QAAA,SAAS,CAAC,cAAc,EAAE,CAAC,SAAS,CAAC,KAAK,IAAI,IAAI,CAAC,WAAW,GAAG,KAAK,CAAC,CAAC;KAEzE;IAEO,OAAO,eAAe,CAAC,GAAQ,EAAA;;AAErC,QAAA,IAAI,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,CAAA,EAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAA,CAAA,CAAG,CAAC,EAAE;AACpD,YAAA,OAAO,IAAI,CAAC;AACb,SAAA;;;AAID,QAAA,IAAI,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,CAAA,EAAA,EAAK,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAA,CAAA,CAAG,CAAC,EAAE;AACpD,YAAA,OAAO,IAAI,CAAC;AACb,SAAA;;QAGD,IAAI,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE;AAC9B,YAAA,OAAO,IAAI,CAAC;AACb,SAAA;;;AAID,QAAA,OAAO,KAAK,CAAC;KACd;;;IAKD,SAAS,CAAC,GAAqB,EAAE,IAAiB,EAAA;AAChD,QAAA,OAAO,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,WAAW,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;KAClE;;AAGO,IAAA,uBAAuB,CAAC,KAAa,EAAE,GAAqB,EAAE,IAAiB,EAAA;AACrF,QAAA,IAAI,CAAC,CAAC,KAAK,KAAK,oBAAoB,CAAC,eAAe,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC,EAAE;AACzF,YAAA,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC;AACd,gBAAA,UAAU,EAAE;oBACV,aAAa,EAAE,CAAU,OAAA,EAAA,KAAK,CAAE,CAAA;AACjC,iBAAA;AACF,aAAA,CAAC,CAAC;AACJ,SAAA;AAED,QAAA,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;KACzB;AAEO,IAAA,iBAAiB,CAAC,GAAQ,EAAA;QAEhC,MAAM,WAAW,GAAG,IAAI,CAAC,SAAS,CAAC,cAAc,EAAE,CAAC;AAEpD,QAAA,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,WAAW,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE;AAC3C,YAAA,IAAI,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,CAAG,EAAA,WAAW,CAAC,CAAC,CAAC,CAAA,CAAE,CAAC,EAAE;AAC3C,gBAAA,OAAO,IAAI,CAAC;AACb,aAAA;AACF,SAAA;;;AAID,QAAA,OAAO,KAAK,CAAC;KACd;;iHAjEU,oBAAoB,EAAA,IAAA,EAAA,CAAA,EAAA,KAAA,EAAAA,gBAAA,EAAA,CAAA,EAAA,MAAA,EAAA,EAAA,CAAA,eAAA,CAAA,UAAA,EAAA,CAAA,CAAA;qHAApB,oBAAoB,EAAA,CAAA,CAAA;2FAApB,oBAAoB,EAAA,UAAA,EAAA,CAAA;kBADhC,UAAU;;;ACLX;;AAEG;;ACFH;;AAEG;;;;"}
+{"version":3,"file":"meshmakers-shared-auth.mjs","sources":["../../../../projects/meshmakers/shared-auth/src/lib/authorize.service.ts","../../../../projects/meshmakers/shared-auth/src/lib/login-menu/login-menu.component.ts","../../../../projects/meshmakers/shared-auth/src/lib/login-menu/login-menu.component.html","../../../../projects/meshmakers/shared-auth/src/lib/authorize.guard.ts","../../../../projects/meshmakers/shared-auth/src/lib/shared-auth.module.ts","../../../../projects/meshmakers/shared-auth/src/lib/authorize.interceptor.ts","../../../../projects/meshmakers/shared-auth/src/public-api.ts","../../../../projects/meshmakers/shared-auth/src/meshmakers-shared-auth.ts"],"sourcesContent":["import {Inject, Injectable} from '@angular/core';\nimport {BehaviorSubject, firstValueFrom, Observable} from 'rxjs';\nimport {filter, map} from 'rxjs/operators';\nimport {AuthConfig, OAuthService} from \"angular-oauth2-oidc\";\n\nexport interface IUser {\n  name: string;\n  role: string[];\n}\n\nexport class AuthorizeOptions {\n  wellKnownServiceUris?: string[];\n  // Url of the Identity Provider\n  issuer?: string;\n  // URL of the SPA to redirect the user to after login\n  redirectUri?: string;\n  postLogoutRedirectUri?: string;\n  // The SPA's id. The SPA is registered with this id at the auth-server\n  clientId?: string;\n  // set the scope for the permissions the client should request\n  // The first three are defined by OIDC. The 4th is a use case-specific one\n  scope?: string;\n  showDebugInformation?: boolean;\n  sessionChecksEnabled?: boolean;\n}\n\n@Injectable()\nexport class AuthorizeService {\n  private isAuthenticated: BehaviorSubject<boolean> = new BehaviorSubject(false);\n  private isAdmin: BehaviorSubject<boolean> = new BehaviorSubject(false);\n  private isDeveloper: BehaviorSubject<boolean> = new BehaviorSubject(false);\n  private isManager: BehaviorSubject<boolean> = new BehaviorSubject(false);\n  private authority: BehaviorSubject<string | null> = new BehaviorSubject<string | null>(null);\n  private accessToken: BehaviorSubject<string | null> = new BehaviorSubject<string | null>(null);\n  private user: BehaviorSubject<IUser | null> = new BehaviorSubject<IUser | null>(null);\n  private isInitialized : BehaviorSubject<boolean> = new BehaviorSubject(false);\n  private isInitializing : BehaviorSubject<boolean> = new BehaviorSubject(false);\n\n  constructor(@Inject(AuthorizeOptions) private authorizeOptions: AuthorizeOptions, private oauthService: OAuthService) {\n    console.debug(\"AuthorizeService::created\");\n\n    this.getUser().subscribe(s => {\n      this.isAuthenticated.next(!!s);\n      this.isAdmin.next(!!s && (s.role.includes(\"Administrators\")));\n      this.isDeveloper.next(!!s && (s.role.includes(\"Developers\")));\n      this.isManager.next(!!s && s.role.includes(\"Managers\"));\n    });\n\n    this.oauthService.events.subscribe(e => {\n      // tslint:disable-next-line:no-console\n      console.debug('oauth/oidc event', e);\n    });\n\n    this.oauthService.events\n      .pipe(filter(e => e.type === 'session_terminated'))\n      .subscribe(_ => {\n        // tslint:disable-next-line:no-console\n        console.debug('Your session has been terminated!');\n      });\n\n    this.oauthService.events\n      .pipe(filter(e => e.type === 'token_received'))\n      .subscribe(_ => {\n        this.loadUser();\n      });\n\n    this.oauthService.events\n      .pipe(filter(e => e.type === 'logout'))\n      .subscribe(_ => {\n        this.accessToken.next(null);\n        this.user.next(null);\n      });\n\n  }\n\n  public getRoles(): Observable<Array<string>>{\n    return this.getUser().pipe(\n      map(u=> u != null ? u.role : new Array<string>())\n    );\n  }\n\n  public getServiceUris(): Array<string> | null {\n    return this.authorizeOptions.wellKnownServiceUris ?? null;\n  }\n\n  public getAuthority(): BehaviorSubject<string | null> {\n    return this.authority;\n  }\n\n  public getIsAuthenticated(): BehaviorSubject<boolean> {\n    return this.isAuthenticated;\n  }\n\n  public getIsAdmin(): BehaviorSubject<boolean> {\n    return this.isAdmin;\n  }\n\n  public getIsDeveloper(): BehaviorSubject<boolean> {\n    return this.isDeveloper;\n  }\n\n  public getIsManager(): BehaviorSubject<boolean> {\n    return this.isManager;\n  }\n\n  public getAccessToken(): BehaviorSubject<string | null> {\n    return this.accessToken;\n  }\n\n  public getUser(): BehaviorSubject<IUser | null> {\n    return this.user;\n  }\n\n  public login() {\n    this.oauthService.initImplicitFlow();\n  }\n\n  public logout() {\n    this.oauthService.logOut(false);\n  }\n\n\n  public async initialize() {\n\n    console.debug(\"AuthorizeService::initialize::started\");\n\n    if (await firstValueFrom(this.isInitializing)) {\n      return\n    }\n    if (await firstValueFrom(this.isInitialized)) {\n      return;\n    }\n    this.isInitializing.next(true);\n\n    const config: AuthConfig = {\n      responseType: 'code',\n      issuer: this.authorizeOptions.issuer,\n      redirectUri: this.authorizeOptions.redirectUri,\n      postLogoutRedirectUri: this.authorizeOptions.postLogoutRedirectUri,\n      clientId: this.authorizeOptions.clientId,\n      scope: this.authorizeOptions.scope,\n      showDebugInformation: this.authorizeOptions.showDebugInformation,\n      sessionChecksEnabled: this.authorizeOptions.sessionChecksEnabled\n    };\n\n    this.oauthService.configure(config);\n    this.oauthService.setStorage(localStorage);\n    await this.oauthService.loadDiscoveryDocumentAndTryLogin();\n\n    this.oauthService.setupAutomaticSilentRefresh();\n\n    if (this.oauthService.hasValidAccessToken()) {\n      this.loadUser();\n    }\n\n    this.authority.next(this.authorizeOptions.issuer ?? null);\n    this.isInitializing.next(false);\n    this.isInitialized.next(true);\n\n    console.debug(\"AuthorizeService::initialize::done\");\n  }\n\n  private loadUser() {\n    const claims = this.oauthService.getIdentityClaims();\n    if (!claims) {\n      console.error(\"claims where null when loading identity claims\");\n      return;\n    }\n\n    const user = <IUser>claims;\n    const accessToken = this.oauthService.getAccessToken();\n    this.user.next(user);\n    this.accessToken.next(accessToken);\n  }\n}\n","import {Component, OnInit} from '@angular/core';\nimport {AuthorizeService} from '../authorize.service';\nimport {BehaviorSubject, Observable} from 'rxjs';\nimport {map} from 'rxjs/operators';\n\n@Component({\n  selector: 'app-login-menu',\n  templateUrl: './login-menu.component.html',\n  styleUrls: ['./login-menu.component.css']\n})\nexport class LoginMenuComponent implements OnInit {\n  public isAuthenticated: BehaviorSubject<boolean>;\n  public userName: Observable<string | null>;\n  public isAdmin: Observable<boolean>;\n\n  constructor(private authorizeService: AuthorizeService) {\n    this.isAuthenticated = this.authorizeService.getIsAuthenticated();\n    this.userName = this.authorizeService.getUser().pipe(map(u => u && u.name));\n    this.isAdmin = this.authorizeService.getIsAdmin();\n  }\n\n  ngOnInit() {\n    const isIFrame = window.self !== window.top;\n\n    console.log(\"app-login-menu::created\");\n\n    this.isAuthenticated.subscribe(x => {\n\n      console.log(`isAuthenticated changed to ${x} (iframe ${isIFrame})`);\n    });\n  }\n\n  public login() {\n    this.authorizeService.login();\n  }\n\n  public logout() {\n    this.authorizeService.logout();\n  }\n\n  public register() {\n\n  }\n}\n","<ul *ngIf=\"isAuthenticated | async\" class=\"navbar-nav\">\n  <li class=\"nav-item dropdown\">\n    <a aria-expanded=\"false\" aria-haspopup=\"true\" class=\"nav-link dropdown-toggle\" data-toggle=\"dropdown\" href=\"#\"\n       id=\"navbarDropdownLogin\" role=\"button\">\n      {{ userName | async }} <b class=\"caret\"></b>\n    </a>\n    <div aria-labelledby=\"navbarDropdown\" class=\"dropdown-menu\">\n      <!--<a class=\"dropdown-item\" asp-action=\"Index\" asp-area=\"Authentication\" asp-controller=\"Grants\">Client Application Access</a>-->\n      <!--<a class=\"dropdown-item\" [routerLink]='[\"/authentication/profile\"]' title=\"Manage\">Manage</a>-->\n      <!--<a class=\"dropdown-item\" asp-action=\"Index\" asp-area=\"Authentication\" asp-controller=\"Diagnostics\">Diagnostics</a>-->\n      <div class=\"dropdown-divider\"></div>\n      <a (click)='logout()' class=\"dropdown-item\" routerLink=\"\" title=\"Logout\">Logout</a>\n    </div>\n  </li>\n</ul>\n<ul *ngIf=\"!(isAuthenticated | async)\" class=\"navbar-nav\">\n  <li class=\"nav-item\">\n    <a (click)='register()' class=\"nav-link\" routerLink=\"\">Register</a>\n  </li>\n  <li class=\"nav-item\">\n    <a (click)='login()' class=\"nav-link\" routerLink=\"\">Login</a>\n  </li>\n</ul>\n","import {Injectable} from '@angular/core';\nimport {\n  ActivatedRouteSnapshot,\n  CanActivate,\n  CanActivateChild,\n  CanDeactivate,\n  CanLoad, Route,\n  Router,\n  RouterStateSnapshot, UrlSegment,\n  UrlTree\n} from '@angular/router';\nimport {AuthorizeService} from './authorize.service';\nimport {firstValueFrom, lastValueFrom, Observable} from \"rxjs\";\n\n@Injectable()\nexport class AuthorizeGuard implements CanActivate, CanActivateChild, CanDeactivate<unknown>, CanLoad {\n  constructor(private authorizeService: AuthorizeService, private router: Router) {\n  }\n\n  canActivate(\n    next: ActivatedRouteSnapshot,\n    state: RouterStateSnapshot): Observable<boolean | UrlTree> | Promise<boolean | UrlTree> | boolean | UrlTree {\n    let url: string = state.url;\n    return this.handleAuthorization(next, url);\n  }\n\n  canActivateChild(\n    next: ActivatedRouteSnapshot,\n    state: RouterStateSnapshot): Observable<boolean | UrlTree> | Promise<boolean | UrlTree> | boolean | UrlTree {\n    return this.canActivate(next, state);\n  }\n\n  canDeactivate(\n    component: unknown,\n    currentRoute: ActivatedRouteSnapshot,\n    currentState: RouterStateSnapshot,\n    nextState?: RouterStateSnapshot): Observable<boolean | UrlTree> | Promise<boolean | UrlTree> | boolean | UrlTree {\n    return true;\n  }\n\n  canLoad(\n    route: Route,\n    segments: UrlSegment[]): Observable<boolean> | Promise<boolean> | boolean {\n    return true;\n  }\n\n  private async handleAuthorization(route: ActivatedRouteSnapshot, url: any): Promise<boolean> {\n\n    await this.authorizeService.initialize()\n\n    const isAuthenticated = await firstValueFrom(this.authorizeService.getIsAuthenticated());\n    if (isAuthenticated) {\n      const userRoles = await firstValueFrom(this.authorizeService.getRoles());\n      if (route.data['roles'] && !route.data['roles'].filter((value: string) => userRoles.includes(value))) {\n        this.router.navigate(['']);\n        return false;\n      }\n      return true;\n    } else {\n      this.authorizeService.login();\n    }\n\n    return false;\n  }\n}\n","import {ModuleWithProviders, NgModule} from '@angular/core';\nimport {CommonModule} from \"@angular/common\";\nimport {HttpClientModule} from \"@angular/common/http\";\nimport {LoginMenuComponent} from \"./login-menu/login-menu.component\";\nimport {AuthorizeOptions, AuthorizeService} from \"./authorize.service\";\nimport {OAuthModule} from \"angular-oauth2-oidc\";\nimport {AuthorizeGuard} from \"./authorize.guard\";\n\n@NgModule({\n  declarations: [LoginMenuComponent],\n  exports: [LoginMenuComponent],\n  providers: [],\n  imports: [\n    CommonModule,\n    HttpClientModule,\n    OAuthModule.forRoot()\n  ]\n})\nexport class SharedAuthModule {\n  static forRoot(authorizeOptions: AuthorizeOptions): ModuleWithProviders<SharedAuthModule> {\n    return {\n      ngModule: SharedAuthModule,\n      providers: [\n        {\n          provide: AuthorizeOptions,\n          useValue: authorizeOptions\n        },\n        AuthorizeService,\n        AuthorizeGuard\n      ]\n    }\n  }\n}\n","import {Injectable} from '@angular/core';\nimport {HttpEvent, HttpHandler, HttpInterceptor, HttpRequest} from '@angular/common/http';\nimport {Observable} from 'rxjs';\nimport {AuthorizeService} from './authorize.service';\n\n@Injectable()\nexport class AuthorizeInterceptor implements HttpInterceptor {\n\n  accessToken: string | null;\n\n  constructor(private authorize: AuthorizeService) {\n\n    this.accessToken = null;\n    authorize.getAccessToken().subscribe(value => this.accessToken = value);\n\n  }\n\n  private static isSameOriginUrl(req: any) {\n    // It's an absolute url with the same origin.\n    if (req.url.startsWith(`${window.location.origin}/`)) {\n      return true;\n    }\n\n    // It's a protocol relative url with the same origin.\n    // For example: //www.example.com/api/Products\n    if (req.url.startsWith(`//${window.location.host}/`)) {\n      return true;\n    }\n\n    // It's a relative url like /api/Products\n    if (/^\\/[^\\/].*/.test(req.url)) {\n      return true;\n    }\n\n    // It's an absolute or protocol relative url that\n    // doesn't have the same origin.\n    return false;\n  }\n\n  // Checks if there is an access_token available in the authorize service\n  // and adds it to the request in case it's targeted at the same origin as the\n\n  intercept(req: HttpRequest<any>, next: HttpHandler): Observable<HttpEvent<any>> {\n    return this.processRequestWithToken(this.accessToken, req, next);\n  }\n\n  // single page application.\n  private processRequestWithToken(token: string | null, req: HttpRequest<any>, next: HttpHandler) {\n    if (!!token && (AuthorizeInterceptor.isSameOriginUrl(req) || this.isKnownServiceUri(req))) {\n      req = req.clone({\n        setHeaders: {\n          Authorization: `Bearer ${token}`\n        }\n      });\n    }\n\n    return next.handle(req);\n  }\n\n  private isKnownServiceUri(req: any) {\n\n    const serviceUris = this.authorize.getServiceUris();\n\n    if (serviceUris) {\n      for (let i = 0; i < serviceUris.length; i++) {\n        if (req.url.startsWith(`${serviceUris[i]}`)) {\n          return true;\n        }\n      }\n    }\n\n    // It's an absolute or protocol relative url that\n    // doesn't have the same origin.\n    return false;\n  }\n}\n","/*\n * Public API Surface of shared-auth\n */\n\nexport * from './lib/authorize.service';\nexport * from './lib/login-menu/login-menu.component';\nexport * from './lib/shared-auth.module';\nexport * from './lib/authorize.interceptor';\nexport * from './lib/authorize.guard';\n\n","/**\n * Generated bundle index. Do not edit.\n */\n\nexport * from './public-api';\n"],"names":["i1.AuthorizeService","i2"],"mappings":";;;;;;;;;;;;MAUa,gBAAgB,CAAA;AAc5B,CAAA;MAGY,gBAAgB,CAAA;IAW3B,WAA8C,CAAA,gBAAkC,EAAU,YAA0B,EAAA;AAAtE,QAAA,IAAgB,CAAA,gBAAA,GAAhB,gBAAgB,CAAkB;AAAU,QAAA,IAAY,CAAA,YAAA,GAAZ,YAAY,CAAc;QAV5G,IAAA,CAAA,eAAe,GAA6B,IAAI,eAAe,CAAC,KAAK,CAAC,CAAC;QACvE,IAAA,CAAA,OAAO,GAA6B,IAAI,eAAe,CAAC,KAAK,CAAC,CAAC;QAC/D,IAAA,CAAA,WAAW,GAA6B,IAAI,eAAe,CAAC,KAAK,CAAC,CAAC;QACnE,IAAA,CAAA,SAAS,GAA6B,IAAI,eAAe,CAAC,KAAK,CAAC,CAAC;QACjE,IAAA,CAAA,SAAS,GAAmC,IAAI,eAAe,CAAgB,IAAI,CAAC,CAAC;QACrF,IAAA,CAAA,WAAW,GAAmC,IAAI,eAAe,CAAgB,IAAI,CAAC,CAAC;QACvF,IAAA,CAAA,IAAI,GAAkC,IAAI,eAAe,CAAe,IAAI,CAAC,CAAC;QAC9E,IAAA,CAAA,aAAa,GAA8B,IAAI,eAAe,CAAC,KAAK,CAAC,CAAC;QACtE,IAAA,CAAA,cAAc,GAA8B,IAAI,eAAe,CAAC,KAAK,CAAC,CAAC;AAG7E,QAAA,OAAO,CAAC,KAAK,CAAC,2BAA2B,CAAC,CAAC;QAE3C,IAAI,CAAC,OAAO,EAAE,CAAC,SAAS,CAAC,CAAC,IAAG;YAC3B,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAC/B,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC;YAC9D,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;AAC9D,YAAA,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC;AAC1D,SAAC,CAAC,CAAC;QAEH,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,IAAG;;AAErC,YAAA,OAAO,CAAC,KAAK,CAAC,kBAAkB,EAAE,CAAC,CAAC,CAAC;AACvC,SAAC,CAAC,CAAC;QAEH,IAAI,CAAC,YAAY,CAAC,MAAM;AACrB,aAAA,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,KAAK,oBAAoB,CAAC,CAAC;aAClD,SAAS,CAAC,CAAC,IAAG;;AAEb,YAAA,OAAO,CAAC,KAAK,CAAC,mCAAmC,CAAC,CAAC;AACrD,SAAC,CAAC,CAAC;QAEL,IAAI,CAAC,YAAY,CAAC,MAAM;AACrB,aAAA,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,KAAK,gBAAgB,CAAC,CAAC;aAC9C,SAAS,CAAC,CAAC,IAAG;YACb,IAAI,CAAC,QAAQ,EAAE,CAAC;AAClB,SAAC,CAAC,CAAC;QAEL,IAAI,CAAC,YAAY,CAAC,MAAM;AACrB,aAAA,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC;aACtC,SAAS,CAAC,CAAC,IAAG;AACb,YAAA,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC5B,YAAA,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACvB,SAAC,CAAC,CAAC;KAEN;IAEM,QAAQ,GAAA;AACb,QAAA,OAAO,IAAI,CAAC,OAAO,EAAE,CAAC,IAAI,CACxB,GAAG,CAAC,CAAC,IAAG,CAAC,IAAI,IAAI,GAAG,CAAC,CAAC,IAAI,GAAG,IAAI,KAAK,EAAU,CAAC,CAClD,CAAC;KACH;IAEM,cAAc,GAAA;;QACnB,OAAO,CAAA,EAAA,GAAA,IAAI,CAAC,gBAAgB,CAAC,oBAAoB,MAAA,IAAA,IAAA,EAAA,KAAA,KAAA,CAAA,GAAA,EAAA,GAAI,IAAI,CAAC;KAC3D;IAEM,YAAY,GAAA;QACjB,OAAO,IAAI,CAAC,SAAS,CAAC;KACvB;IAEM,kBAAkB,GAAA;QACvB,OAAO,IAAI,CAAC,eAAe,CAAC;KAC7B;IAEM,UAAU,GAAA;QACf,OAAO,IAAI,CAAC,OAAO,CAAC;KACrB;IAEM,cAAc,GAAA;QACnB,OAAO,IAAI,CAAC,WAAW,CAAC;KACzB;IAEM,YAAY,GAAA;QACjB,OAAO,IAAI,CAAC,SAAS,CAAC;KACvB;IAEM,cAAc,GAAA;QACnB,OAAO,IAAI,CAAC,WAAW,CAAC;KACzB;IAEM,OAAO,GAAA;QACZ,OAAO,IAAI,CAAC,IAAI,CAAC;KAClB;IAEM,KAAK,GAAA;AACV,QAAA,IAAI,CAAC,YAAY,CAAC,gBAAgB,EAAE,CAAC;KACtC;IAEM,MAAM,GAAA;AACX,QAAA,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;KACjC;IAGY,UAAU,GAAA;;;AAErB,YAAA,OAAO,CAAC,KAAK,CAAC,uCAAuC,CAAC,CAAC;AAEvD,YAAA,IAAI,MAAM,cAAc,CAAC,IAAI,CAAC,cAAc,CAAC,EAAE;gBAC7C,OAAM;AACP,aAAA;AACD,YAAA,IAAI,MAAM,cAAc,CAAC,IAAI,CAAC,aAAa,CAAC,EAAE;gBAC5C,OAAO;AACR,aAAA;AACD,YAAA,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAE/B,YAAA,MAAM,MAAM,GAAe;AACzB,gBAAA,YAAY,EAAE,MAAM;AACpB,gBAAA,MAAM,EAAE,IAAI,CAAC,gBAAgB,CAAC,MAAM;AACpC,gBAAA,WAAW,EAAE,IAAI,CAAC,gBAAgB,CAAC,WAAW;AAC9C,gBAAA,qBAAqB,EAAE,IAAI,CAAC,gBAAgB,CAAC,qBAAqB;AAClE,gBAAA,QAAQ,EAAE,IAAI,CAAC,gBAAgB,CAAC,QAAQ;AACxC,gBAAA,KAAK,EAAE,IAAI,CAAC,gBAAgB,CAAC,KAAK;AAClC,gBAAA,oBAAoB,EAAE,IAAI,CAAC,gBAAgB,CAAC,oBAAoB;AAChE,gBAAA,oBAAoB,EAAE,IAAI,CAAC,gBAAgB,CAAC,oBAAoB;aACjE,CAAC;AAEF,YAAA,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;AACpC,YAAA,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;AAC3C,YAAA,MAAM,IAAI,CAAC,YAAY,CAAC,gCAAgC,EAAE,CAAC;AAE3D,YAAA,IAAI,CAAC,YAAY,CAAC,2BAA2B,EAAE,CAAC;AAEhD,YAAA,IAAI,IAAI,CAAC,YAAY,CAAC,mBAAmB,EAAE,EAAE;gBAC3C,IAAI,CAAC,QAAQ,EAAE,CAAC;AACjB,aAAA;AAED,YAAA,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAA,EAAA,GAAA,IAAI,CAAC,gBAAgB,CAAC,MAAM,MAAI,IAAA,IAAA,EAAA,KAAA,KAAA,CAAA,GAAA,EAAA,GAAA,IAAI,CAAC,CAAC;AAC1D,YAAA,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAChC,YAAA,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAE9B,YAAA,OAAO,CAAC,KAAK,CAAC,oCAAoC,CAAC,CAAC;;AACrD,KAAA;IAEO,QAAQ,GAAA;QACd,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,iBAAiB,EAAE,CAAC;QACrD,IAAI,CAAC,MAAM,EAAE;AACX,YAAA,OAAO,CAAC,KAAK,CAAC,gDAAgD,CAAC,CAAC;YAChE,OAAO;AACR,SAAA;QAED,MAAM,IAAI,GAAU,MAAM,CAAC;QAC3B,MAAM,WAAW,GAAG,IAAI,CAAC,YAAY,CAAC,cAAc,EAAE,CAAC;AACvD,QAAA,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACrB,QAAA,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;KACpC;;AAlJU,gBAAA,CAAA,IAAA,GAAA,EAAA,CAAA,kBAAA,CAAA,EAAA,UAAA,EAAA,QAAA,EAAA,OAAA,EAAA,QAAA,EAAA,QAAA,EAAA,EAAA,EAAA,IAAA,EAAA,gBAAgB,kBAWP,gBAAgB,EAAA,EAAA,EAAA,KAAA,EAAA,EAAA,CAAA,YAAA,EAAA,CAAA,EAAA,MAAA,EAAA,EAAA,CAAA,eAAA,CAAA,UAAA,EAAA,CAAA,CAAA;iHAXzB,gBAAgB,EAAA,CAAA,CAAA;2FAAhB,gBAAgB,EAAA,UAAA,EAAA,CAAA;kBAD5B,UAAU;;;8BAYI,MAAM;+BAAC,gBAAgB,CAAA;;;;MC5BzB,kBAAkB,CAAA;AAK7B,IAAA,WAAA,CAAoB,gBAAkC,EAAA;AAAlC,QAAA,IAAgB,CAAA,gBAAA,GAAhB,gBAAgB,CAAkB;QACpD,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC,gBAAgB,CAAC,kBAAkB,EAAE,CAAC;QAClE,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,gBAAgB,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;QAC5E,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,gBAAgB,CAAC,UAAU,EAAE,CAAC;KACnD;IAED,QAAQ,GAAA;QACN,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,KAAK,MAAM,CAAC,GAAG,CAAC;AAE5C,QAAA,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC,CAAC;AAEvC,QAAA,IAAI,CAAC,eAAe,CAAC,SAAS,CAAC,CAAC,IAAG;YAEjC,OAAO,CAAC,GAAG,CAAC,CAAA,2BAAA,EAA8B,CAAC,CAAY,SAAA,EAAA,QAAQ,CAAG,CAAA,CAAA,CAAC,CAAC;AACtE,SAAC,CAAC,CAAC;KACJ;IAEM,KAAK,GAAA;AACV,QAAA,IAAI,CAAC,gBAAgB,CAAC,KAAK,EAAE,CAAC;KAC/B;IAEM,MAAM,GAAA;AACX,QAAA,IAAI,CAAC,gBAAgB,CAAC,MAAM,EAAE,CAAC;KAChC;IAEM,QAAQ,GAAA;KAEd;;+GAhCU,kBAAkB,EAAA,IAAA,EAAA,CAAA,EAAA,KAAA,EAAAA,gBAAA,EAAA,CAAA,EAAA,MAAA,EAAA,EAAA,CAAA,eAAA,CAAA,SAAA,EAAA,CAAA,CAAA;AAAlB,kBAAA,CAAA,IAAA,GAAA,EAAA,CAAA,oBAAA,CAAA,EAAA,UAAA,EAAA,QAAA,EAAA,OAAA,EAAA,QAAA,EAAA,IAAA,EAAA,kBAAkB,sDCV/B,svCAuBA,EAAA,MAAA,EAAA,CAAA,EAAA,CAAA,EAAA,YAAA,EAAA,CAAA,EAAA,IAAA,EAAA,WAAA,EAAA,IAAA,EAAA,EAAA,CAAA,IAAA,EAAA,QAAA,EAAA,QAAA,EAAA,MAAA,EAAA,CAAA,MAAA,EAAA,UAAA,EAAA,UAAA,CAAA,EAAA,EAAA,EAAA,IAAA,EAAA,MAAA,EAAA,IAAA,EAAA,EAAA,CAAA,SAAA,EAAA,IAAA,EAAA,OAAA,EAAA,CAAA,EAAA,CAAA,CAAA;2FDba,kBAAkB,EAAA,UAAA,EAAA,CAAA;kBAL9B,SAAS;+BACE,gBAAgB,EAAA,QAAA,EAAA,svCAAA,EAAA,CAAA;;;MESf,cAAc,CAAA;IACzB,WAAoB,CAAA,gBAAkC,EAAU,MAAc,EAAA;AAA1D,QAAA,IAAgB,CAAA,gBAAA,GAAhB,gBAAgB,CAAkB;AAAU,QAAA,IAAM,CAAA,MAAA,GAAN,MAAM,CAAQ;KAC7E;IAED,WAAW,CACT,IAA4B,EAC5B,KAA0B,EAAA;AAC1B,QAAA,IAAI,GAAG,GAAW,KAAK,CAAC,GAAG,CAAC;QAC5B,OAAO,IAAI,CAAC,mBAAmB,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;KAC5C;IAED,gBAAgB,CACd,IAA4B,EAC5B,KAA0B,EAAA;QAC1B,OAAO,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;KACtC;AAED,IAAA,aAAa,CACX,SAAkB,EAClB,YAAoC,EACpC,YAAiC,EACjC,SAA+B,EAAA;AAC/B,QAAA,OAAO,IAAI,CAAC;KACb;IAED,OAAO,CACL,KAAY,EACZ,QAAsB,EAAA;AACtB,QAAA,OAAO,IAAI,CAAC;KACb;IAEa,mBAAmB,CAAC,KAA6B,EAAE,GAAQ,EAAA;;AAEvE,YAAA,MAAM,IAAI,CAAC,gBAAgB,CAAC,UAAU,EAAE,CAAA;AAExC,YAAA,MAAM,eAAe,GAAG,MAAM,cAAc,CAAC,IAAI,CAAC,gBAAgB,CAAC,kBAAkB,EAAE,CAAC,CAAC;AACzF,YAAA,IAAI,eAAe,EAAE;AACnB,gBAAA,MAAM,SAAS,GAAG,MAAM,cAAc,CAAC,IAAI,CAAC,gBAAgB,CAAC,QAAQ,EAAE,CAAC,CAAC;AACzE,gBAAA,IAAI,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,KAAa,KAAK,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE;oBACpG,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AAC3B,oBAAA,OAAO,KAAK,CAAC;AACd,iBAAA;AACD,gBAAA,OAAO,IAAI,CAAC;AACb,aAAA;AAAM,iBAAA;AACL,gBAAA,IAAI,CAAC,gBAAgB,CAAC,KAAK,EAAE,CAAC;AAC/B,aAAA;AAED,YAAA,OAAO,KAAK,CAAC;SACd,CAAA,CAAA;AAAA,KAAA;;2GAhDU,cAAc,EAAA,IAAA,EAAA,CAAA,EAAA,KAAA,EAAAA,gBAAA,EAAA,EAAA,EAAA,KAAA,EAAAC,IAAA,CAAA,MAAA,EAAA,CAAA,EAAA,MAAA,EAAA,EAAA,CAAA,eAAA,CAAA,UAAA,EAAA,CAAA,CAAA;+GAAd,cAAc,EAAA,CAAA,CAAA;2FAAd,cAAc,EAAA,UAAA,EAAA,CAAA;kBAD1B,UAAU;;;MCIE,gBAAgB,CAAA;IAC3B,OAAO,OAAO,CAAC,gBAAkC,EAAA;QAC/C,OAAO;AACL,YAAA,QAAQ,EAAE,gBAAgB;AAC1B,YAAA,SAAS,EAAE;AACT,gBAAA;AACE,oBAAA,OAAO,EAAE,gBAAgB;AACzB,oBAAA,QAAQ,EAAE,gBAAgB;AAC3B,iBAAA;gBACD,gBAAgB;gBAChB,cAAc;AACf,aAAA;SACF,CAAA;KACF;;6GAbU,gBAAgB,EAAA,IAAA,EAAA,EAAA,EAAA,MAAA,EAAA,EAAA,CAAA,eAAA,CAAA,QAAA,EAAA,CAAA,CAAA;8GAAhB,gBAAgB,EAAA,YAAA,EAAA,CATZ,kBAAkB,CAAA,EAAA,OAAA,EAAA,CAI/B,YAAY;AACZ,QAAA,gBAAgB,6BAJR,kBAAkB,CAAA,EAAA,CAAA,CAAA;AAQjB,gBAAA,CAAA,IAAA,GAAA,EAAA,CAAA,mBAAA,CAAA,EAAA,UAAA,EAAA,QAAA,EAAA,OAAA,EAAA,QAAA,EAAA,QAAA,EAAA,EAAA,EAAA,IAAA,EAAA,gBAAgB,YALzB,YAAY;QACZ,gBAAgB;AAChB,QAAA,WAAW,CAAC,OAAO,EAAE,CAAA,EAAA,CAAA,CAAA;2FAGZ,gBAAgB,EAAA,UAAA,EAAA,CAAA;kBAV5B,QAAQ;AAAC,YAAA,IAAA,EAAA,CAAA;oBACR,YAAY,EAAE,CAAC,kBAAkB,CAAC;oBAClC,OAAO,EAAE,CAAC,kBAAkB,CAAC;AAC7B,oBAAA,SAAS,EAAE,EAAE;AACb,oBAAA,OAAO,EAAE;wBACP,YAAY;wBACZ,gBAAgB;wBAChB,WAAW,CAAC,OAAO,EAAE;AACtB,qBAAA;iBACF,CAAA;;;MCXY,oBAAoB,CAAA;AAI/B,IAAA,WAAA,CAAoB,SAA2B,EAAA;AAA3B,QAAA,IAAS,CAAA,SAAA,GAAT,SAAS,CAAkB;AAE7C,QAAA,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;AACxB,QAAA,SAAS,CAAC,cAAc,EAAE,CAAC,SAAS,CAAC,KAAK,IAAI,IAAI,CAAC,WAAW,GAAG,KAAK,CAAC,CAAC;KAEzE;IAEO,OAAO,eAAe,CAAC,GAAQ,EAAA;;AAErC,QAAA,IAAI,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,CAAA,EAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAA,CAAA,CAAG,CAAC,EAAE;AACpD,YAAA,OAAO,IAAI,CAAC;AACb,SAAA;;;AAID,QAAA,IAAI,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,CAAA,EAAA,EAAK,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAA,CAAA,CAAG,CAAC,EAAE;AACpD,YAAA,OAAO,IAAI,CAAC;AACb,SAAA;;QAGD,IAAI,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE;AAC9B,YAAA,OAAO,IAAI,CAAC;AACb,SAAA;;;AAID,QAAA,OAAO,KAAK,CAAC;KACd;;;IAKD,SAAS,CAAC,GAAqB,EAAE,IAAiB,EAAA;AAChD,QAAA,OAAO,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,WAAW,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;KAClE;;AAGO,IAAA,uBAAuB,CAAC,KAAoB,EAAE,GAAqB,EAAE,IAAiB,EAAA;AAC5F,QAAA,IAAI,CAAC,CAAC,KAAK,KAAK,oBAAoB,CAAC,eAAe,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC,EAAE;AACzF,YAAA,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC;AACd,gBAAA,UAAU,EAAE;oBACV,aAAa,EAAE,CAAU,OAAA,EAAA,KAAK,CAAE,CAAA;AACjC,iBAAA;AACF,aAAA,CAAC,CAAC;AACJ,SAAA;AAED,QAAA,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;KACzB;AAEO,IAAA,iBAAiB,CAAC,GAAQ,EAAA;QAEhC,MAAM,WAAW,GAAG,IAAI,CAAC,SAAS,CAAC,cAAc,EAAE,CAAC;AAEpD,QAAA,IAAI,WAAW,EAAE;AACf,YAAA,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,WAAW,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE;AAC3C,gBAAA,IAAI,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,CAAG,EAAA,WAAW,CAAC,CAAC,CAAC,CAAA,CAAE,CAAC,EAAE;AAC3C,oBAAA,OAAO,IAAI,CAAC;AACb,iBAAA;AACF,aAAA;AACF,SAAA;;;AAID,QAAA,OAAO,KAAK,CAAC;KACd;;iHApEU,oBAAoB,EAAA,IAAA,EAAA,CAAA,EAAA,KAAA,EAAAD,gBAAA,EAAA,CAAA,EAAA,MAAA,EAAA,EAAA,CAAA,eAAA,CAAA,UAAA,EAAA,CAAA,CAAA;qHAApB,oBAAoB,EAAA,CAAA,CAAA;2FAApB,oBAAoB,EAAA,UAAA,EAAA,CAAA;kBADhC,UAAU;;;ACLX;;AAEG;;ACFH;;AAEG;;;;"}