@meshmakers/shared-auth 0.0.0-0 → 0.0.2304-23001

package/fesm2020/meshmakers-shared-auth.mjs

@@ -1,12 +1,13 @@
 import * as i0 from '@angular/core';
 import { Injectable, Inject, Component, NgModule } from '@angular/core';
-import { BehaviorSubject } from 'rxjs';
-import { filter, map, tap } from 'rxjs/operators';
+import { BehaviorSubject, firstValueFrom } from 'rxjs';
+import { filter, map } from 'rxjs/operators';
 import * as i1 from 'angular-oauth2-oidc';
 import { OAuthModule } from 'angular-oauth2-oidc';
 import * as i2 from '@angular/common';
 import { CommonModule } from '@angular/common';
 import { HttpClientModule } from '@angular/common/http';
+import * as i2$1 from '@angular/router';
 
 class AuthorizeOptions {
 }
@@ -16,17 +17,47 @@ class AuthorizeService {
         this.oauthService = oauthService;
         this.isAuthenticated = new BehaviorSubject(false);
         this.isAdmin = new BehaviorSubject(false);
+        this.isDeveloper = new BehaviorSubject(false);
+        this.isManager = new BehaviorSubject(false);
         this.authority = new BehaviorSubject(null);
         this.accessToken = new BehaviorSubject(null);
         this.user = new BehaviorSubject(null);
+        this.isInitialized = new BehaviorSubject(false);
+        this.isInitializing = new BehaviorSubject(false);
         console.debug("AuthorizeService::created");
         this.getUser().subscribe(s => {
             this.isAuthenticated.next(!!s);
-            this.isAdmin.next(!!s && s.role === "Administrators");
+            this.isAdmin.next(!!s && (s.role.includes("Administrators")));
+            this.isDeveloper.next(!!s && (s.role.includes("Developers")));
+            this.isManager.next(!!s && s.role.includes("Managers"));
+        });
+        this.oauthService.events.subscribe(e => {
+            // tslint:disable-next-line:no-console
+            console.debug('oauth/oidc event', e);
+        });
+        this.oauthService.events
+            .pipe(filter(e => e.type === 'session_terminated'))
+            .subscribe(_ => {
+            // tslint:disable-next-line:no-console
+            console.debug('Your session has been terminated!');
+        });
+        this.oauthService.events
+            .pipe(filter(e => e.type === 'token_received'))
+            .subscribe(_ => {
+            this.loadUser();
+        });
+        this.oauthService.events
+            .pipe(filter(e => e.type === 'logout'))
+            .subscribe(_ => {
+            this.accessToken.next(null);
+            this.user.next(null);
         });
     }
+    getRoles() {
+        return this.getUser().pipe(map(u => u != null ? u.role : new Array()));
+    }
     getServiceUris() {
-        return this.authorizeOptions.wellKnownServiceUris;
+        return this.authorizeOptions.wellKnownServiceUris ?? null;
     }
     getAuthority() {
         return this.authority;
@@ -37,6 +68,12 @@ class AuthorizeService {
     getIsAdmin() {
         return this.isAdmin;
     }
+    getIsDeveloper() {
+        return this.isDeveloper;
+    }
+    getIsManager() {
+        return this.isManager;
+    }
     getAccessToken() {
         return this.accessToken;
     }
@@ -49,8 +86,15 @@ class AuthorizeService {
     logout() {
         this.oauthService.logOut(false);
     }
-    initialize() {
+    async initialize() {
         console.debug("AuthorizeService::initialize::started");
+        if (await firstValueFrom(this.isInitializing)) {
+            return;
+        }
+        if (await firstValueFrom(this.isInitialized)) {
+            return;
+        }
+        this.isInitializing.next(true);
         const config = {
             responseType: 'code',
             issuer: this.authorizeOptions.issuer,
@@ -63,33 +107,14 @@ class AuthorizeService {
         };
         this.oauthService.configure(config);
         this.oauthService.setStorage(localStorage);
-        this.oauthService.loadDiscoveryDocumentAndTryLogin();
+        await this.oauthService.loadDiscoveryDocumentAndTryLogin();
         this.oauthService.setupAutomaticSilentRefresh();
-        this.oauthService.events.subscribe(e => {
-            // tslint:disable-next-line:no-console
-            console.debug('oauth/oidc event', e);
-        });
-        this.oauthService.events
-            .pipe(filter(e => e.type === 'session_terminated'))
-            .subscribe(e => {
-            // tslint:disable-next-line:no-console
-            console.debug('Your session has been terminated!');
-        });
-        this.oauthService.events
-            .pipe(filter(e => e.type === 'token_received'))
-            .subscribe(e => {
-            this.loadUser();
-        });
-        this.oauthService.events
-            .pipe(filter(e => e.type === 'logout'))
-            .subscribe(e => {
-            this.accessToken.next(null);
-            this.user.next(null);
-        });
         if (this.oauthService.hasValidAccessToken()) {
             this.loadUser();
         }
-        this.authority.next(this.authorizeOptions.issuer);
+        this.authority.next(this.authorizeOptions.issuer ?? null);
+        this.isInitializing.next(false);
+        this.isInitialized.next(true);
         console.debug("AuthorizeService::initialize::done");
     }
     loadUser() {
@@ -104,9 +129,9 @@ class AuthorizeService {
         this.accessToken.next(accessToken);
     }
 }
-AuthorizeService.ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "14.2.2", ngImport: i0, type: AuthorizeService, deps: [{ token: AuthorizeOptions }, { token: i1.OAuthService }], target: i0.ɵɵFactoryTarget.Injectable });
-AuthorizeService.ɵprov = i0.ɵɵngDeclareInjectable({ minVersion: "12.0.0", version: "14.2.2", ngImport: i0, type: AuthorizeService });
-i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "14.2.2", ngImport: i0, type: AuthorizeService, decorators: [{
+AuthorizeService.ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "15.2.8", ngImport: i0, type: AuthorizeService, deps: [{ token: AuthorizeOptions }, { token: i1.OAuthService }], target: i0.ɵɵFactoryTarget.Injectable });
+AuthorizeService.ɵprov = i0.ɵɵngDeclareInjectable({ minVersion: "12.0.0", version: "15.2.8", ngImport: i0, type: AuthorizeService });
+i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "15.2.8", ngImport: i0, type: AuthorizeService, decorators: [{
             type: Injectable
         }], ctorParameters: function () { return [{ type: AuthorizeOptions, decorators: [{
                     type: Inject,
@@ -116,13 +141,13 @@ i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "14.2.2", ngImpor
 class LoginMenuComponent {
     constructor(authorizeService) {
         this.authorizeService = authorizeService;
+        this.isAuthenticated = this.authorizeService.getIsAuthenticated();
+        this.userName = this.authorizeService.getUser().pipe(map(u => u && u.name));
+        this.isAdmin = this.authorizeService.getIsAdmin();
     }
     ngOnInit() {
         const isIFrame = window.self !== window.top;
         console.log("app-login-menu::created");
-        this.isAuthenticated = this.authorizeService.getIsAuthenticated();
-        this.userName = this.authorizeService.getUser().pipe(map(u => u && u.name));
-        this.isAdmin = this.authorizeService.getIsAdmin();
         this.isAuthenticated.subscribe(x => {
             console.log(`isAuthenticated changed to ${x} (iframe ${isIFrame})`);
         });
@@ -136,32 +161,53 @@ class LoginMenuComponent {
     register() {
     }
 }
-LoginMenuComponent.ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "14.2.2", ngImport: i0, type: LoginMenuComponent, deps: [{ token: AuthorizeService }], target: i0.ɵɵFactoryTarget.Component });
-LoginMenuComponent.ɵcmp = i0.ɵɵngDeclareComponent({ minVersion: "14.0.0", version: "14.2.2", type: LoginMenuComponent, selector: "app-login-menu", ngImport: i0, template: "<ul *ngIf=\"isAuthenticated | async\" class=\"navbar-nav\">\n  <li class=\"nav-item dropdown\">\n    <a aria-expanded=\"false\" aria-haspopup=\"true\" class=\"nav-link dropdown-toggle\" data-toggle=\"dropdown\" href=\"#\"\n       id=\"navbarDropdownLogin\" role=\"button\">\n      {{ userName | async }} <b class=\"caret\"></b>\n    </a>\n    <div aria-labelledby=\"navbarDropdown\" class=\"dropdown-menu\">\n      <!--<a class=\"dropdown-item\" asp-action=\"Index\" asp-area=\"Authentication\" asp-controller=\"Grants\">Client Application Access</a>-->\n      <!--<a class=\"dropdown-item\" [routerLink]='[\"/authentication/profile\"]' title=\"Manage\">Manage</a>-->\n      <!--<a class=\"dropdown-item\" asp-action=\"Index\" asp-area=\"Authentication\" asp-controller=\"Diagnostics\">Diagnostics</a>-->\n      <div class=\"dropdown-divider\"></div>\n      <a (click)='logout()' class=\"dropdown-item\" routerLink=\"\" title=\"Logout\">Logout</a>\n    </div>\n  </li>\n</ul>\n<ul *ngIf=\"!(isAuthenticated | async)\" class=\"navbar-nav\">\n  <li class=\"nav-item\">\n    <a (click)='register()' class=\"nav-link\" routerLink=\"\">Register</a>\n  </li>\n  <li class=\"nav-item\">\n    <a (click)='login()' class=\"nav-link\" routerLink=\"\">Login</a>\n  </li>\n</ul>\n", styles: [""], dependencies: [{ kind: "directive", type: i2.NgIf, selector: "[ngIf]", inputs: ["ngIf", "ngIfThen", "ngIfElse"] }, { kind: "pipe", type: i2.AsyncPipe, name: "async" }] });
-i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "14.2.2", ngImport: i0, type: LoginMenuComponent, decorators: [{
+LoginMenuComponent.ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "15.2.8", ngImport: i0, type: LoginMenuComponent, deps: [{ token: AuthorizeService }], target: i0.ɵɵFactoryTarget.Component });
+LoginMenuComponent.ɵcmp = i0.ɵɵngDeclareComponent({ minVersion: "14.0.0", version: "15.2.8", type: LoginMenuComponent, selector: "app-login-menu", ngImport: i0, template: "<ul *ngIf=\"isAuthenticated | async\" class=\"navbar-nav\">\n  <li class=\"nav-item dropdown\">\n    <a aria-expanded=\"false\" aria-haspopup=\"true\" class=\"nav-link dropdown-toggle\" data-toggle=\"dropdown\" href=\"#\"\n       id=\"navbarDropdownLogin\" role=\"button\">\n      {{ userName | async }} <b class=\"caret\"></b>\n    </a>\n    <div aria-labelledby=\"navbarDropdown\" class=\"dropdown-menu\">\n      <!--<a class=\"dropdown-item\" asp-action=\"Index\" asp-area=\"Authentication\" asp-controller=\"Grants\">Client Application Access</a>-->\n      <!--<a class=\"dropdown-item\" [routerLink]='[\"/authentication/profile\"]' title=\"Manage\">Manage</a>-->\n      <!--<a class=\"dropdown-item\" asp-action=\"Index\" asp-area=\"Authentication\" asp-controller=\"Diagnostics\">Diagnostics</a>-->\n      <div class=\"dropdown-divider\"></div>\n      <a (click)='logout()' class=\"dropdown-item\" routerLink=\"\" title=\"Logout\">Logout</a>\n    </div>\n  </li>\n</ul>\n<ul *ngIf=\"!(isAuthenticated | async)\" class=\"navbar-nav\">\n  <li class=\"nav-item\">\n    <a (click)='register()' class=\"nav-link\" routerLink=\"\">Register</a>\n  </li>\n  <li class=\"nav-item\">\n    <a (click)='login()' class=\"nav-link\" routerLink=\"\">Login</a>\n  </li>\n</ul>\n", styles: [""], dependencies: [{ kind: "directive", type: i2.NgIf, selector: "[ngIf]", inputs: ["ngIf", "ngIfThen", "ngIfElse"] }, { kind: "pipe", type: i2.AsyncPipe, name: "async" }] });
+i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "15.2.8", ngImport: i0, type: LoginMenuComponent, decorators: [{
             type: Component,
             args: [{ selector: 'app-login-menu', template: "<ul *ngIf=\"isAuthenticated | async\" class=\"navbar-nav\">\n  <li class=\"nav-item dropdown\">\n    <a aria-expanded=\"false\" aria-haspopup=\"true\" class=\"nav-link dropdown-toggle\" data-toggle=\"dropdown\" href=\"#\"\n       id=\"navbarDropdownLogin\" role=\"button\">\n      {{ userName | async }} <b class=\"caret\"></b>\n    </a>\n    <div aria-labelledby=\"navbarDropdown\" class=\"dropdown-menu\">\n      <!--<a class=\"dropdown-item\" asp-action=\"Index\" asp-area=\"Authentication\" asp-controller=\"Grants\">Client Application Access</a>-->\n      <!--<a class=\"dropdown-item\" [routerLink]='[\"/authentication/profile\"]' title=\"Manage\">Manage</a>-->\n      <!--<a class=\"dropdown-item\" asp-action=\"Index\" asp-area=\"Authentication\" asp-controller=\"Diagnostics\">Diagnostics</a>-->\n      <div class=\"dropdown-divider\"></div>\n      <a (click)='logout()' class=\"dropdown-item\" routerLink=\"\" title=\"Logout\">Logout</a>\n    </div>\n  </li>\n</ul>\n<ul *ngIf=\"!(isAuthenticated | async)\" class=\"navbar-nav\">\n  <li class=\"nav-item\">\n    <a (click)='register()' class=\"nav-link\" routerLink=\"\">Register</a>\n  </li>\n  <li class=\"nav-item\">\n    <a (click)='login()' class=\"nav-link\" routerLink=\"\">Login</a>\n  </li>\n</ul>\n" }]
         }], ctorParameters: function () { return [{ type: AuthorizeService }]; } });
 
 class AuthorizeGuard {
-    constructor(authorize) {
-        this.authorize = authorize;
+    constructor(authorizeService, router) {
+        this.authorizeService = authorizeService;
+        this.router = router;
+    }
+    canActivate(next, state) {
+        let url = state.url;
+        return this.handleAuthorization(next, url);
+    }
+    canActivateChild(next, state) {
+        return this.canActivate(next, state);
     }
-    canActivate(_next, state) {
-        return this.authorize.getIsAuthenticated()
-            .pipe(tap(isAuthenticated => this.handleAuthorization(isAuthenticated)));
+    canDeactivate(component, currentRoute, currentState, nextState) {
+        return true;
     }
-    handleAuthorization(isAuthenticated) {
-        if (!isAuthenticated) {
-            this.authorize.login();
+    canLoad(route, segments) {
+        return true;
+    }
+    async handleAuthorization(route, url) {
+        await this.authorizeService.initialize();
+        const isAuthenticated = await firstValueFrom(this.authorizeService.getIsAuthenticated());
+        if (isAuthenticated) {
+            const userRoles = await firstValueFrom(this.authorizeService.getRoles());
+            if (route.data['roles'] && !route.data['roles'].filter((value) => userRoles.includes(value))) {
+                this.router.navigate(['']);
+                return false;
+            }
+            return true;
+        }
+        else {
+            this.authorizeService.login();
         }
+        return false;
     }
 }
-AuthorizeGuard.ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "14.2.2", ngImport: i0, type: AuthorizeGuard, deps: [{ token: AuthorizeService }], target: i0.ɵɵFactoryTarget.Injectable });
-AuthorizeGuard.ɵprov = i0.ɵɵngDeclareInjectable({ minVersion: "12.0.0", version: "14.2.2", ngImport: i0, type: AuthorizeGuard });
-i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "14.2.2", ngImport: i0, type: AuthorizeGuard, decorators: [{
+AuthorizeGuard.ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "15.2.8", ngImport: i0, type: AuthorizeGuard, deps: [{ token: AuthorizeService }, { token: i2$1.Router }], target: i0.ɵɵFactoryTarget.Injectable });
+AuthorizeGuard.ɵprov = i0.ɵɵngDeclareInjectable({ minVersion: "12.0.0", version: "15.2.8", ngImport: i0, type: AuthorizeGuard });
+i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "15.2.8", ngImport: i0, type: AuthorizeGuard, decorators: [{
             type: Injectable
-        }], ctorParameters: function () { return [{ type: AuthorizeService }]; } });
+        }], ctorParameters: function () { return [{ type: AuthorizeService }, { type: i2$1.Router }]; } });
 
 class SharedAuthModule {
     static forRoot(authorizeOptions) {
@@ -178,13 +224,13 @@ class SharedAuthModule {
         };
     }
 }
-SharedAuthModule.ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "14.2.2", ngImport: i0, type: SharedAuthModule, deps: [], target: i0.ɵɵFactoryTarget.NgModule });
-SharedAuthModule.ɵmod = i0.ɵɵngDeclareNgModule({ minVersion: "14.0.0", version: "14.2.2", ngImport: i0, type: SharedAuthModule, declarations: [LoginMenuComponent], imports: [CommonModule,
+SharedAuthModule.ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "15.2.8", ngImport: i0, type: SharedAuthModule, deps: [], target: i0.ɵɵFactoryTarget.NgModule });
+SharedAuthModule.ɵmod = i0.ɵɵngDeclareNgModule({ minVersion: "14.0.0", version: "15.2.8", ngImport: i0, type: SharedAuthModule, declarations: [LoginMenuComponent], imports: [CommonModule,
         HttpClientModule, i1.OAuthModule], exports: [LoginMenuComponent] });
-SharedAuthModule.ɵinj = i0.ɵɵngDeclareInjector({ minVersion: "12.0.0", version: "14.2.2", ngImport: i0, type: SharedAuthModule, imports: [CommonModule,
+SharedAuthModule.ɵinj = i0.ɵɵngDeclareInjector({ minVersion: "12.0.0", version: "15.2.8", ngImport: i0, type: SharedAuthModule, imports: [CommonModule,
         HttpClientModule,
         OAuthModule.forRoot()] });
-i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "14.2.2", ngImport: i0, type: SharedAuthModule, decorators: [{
+i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "15.2.8", ngImport: i0, type: SharedAuthModule, decorators: [{
             type: NgModule,
             args: [{
                     declarations: [LoginMenuComponent],
@@ -201,6 +247,7 @@ i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "14.2.2", ngImpor
 class AuthorizeInterceptor {
     constructor(authorize) {
         this.authorize = authorize;
+        this.accessToken = null;
         authorize.getAccessToken().subscribe(value => this.accessToken = value);
     }
     static isSameOriginUrl(req) {
@@ -239,9 +286,11 @@ class AuthorizeInterceptor {
     }
     isKnownServiceUri(req) {
         const serviceUris = this.authorize.getServiceUris();
-        for (let i = 0; i < serviceUris.length; i++) {
-            if (req.url.startsWith(`${serviceUris[i]}`)) {
-                return true;
+        if (serviceUris) {
+            for (let i = 0; i < serviceUris.length; i++) {
+                if (req.url.startsWith(`${serviceUris[i]}`)) {
+                    return true;
+                }
             }
         }
         // It's an absolute or protocol relative url that
@@ -249,9 +298,9 @@ class AuthorizeInterceptor {
         return false;
     }
 }
-AuthorizeInterceptor.ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "14.2.2", ngImport: i0, type: AuthorizeInterceptor, deps: [{ token: AuthorizeService }], target: i0.ɵɵFactoryTarget.Injectable });
-AuthorizeInterceptor.ɵprov = i0.ɵɵngDeclareInjectable({ minVersion: "12.0.0", version: "14.2.2", ngImport: i0, type: AuthorizeInterceptor });
-i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "14.2.2", ngImport: i0, type: AuthorizeInterceptor, decorators: [{
+AuthorizeInterceptor.ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "15.2.8", ngImport: i0, type: AuthorizeInterceptor, deps: [{ token: AuthorizeService }], target: i0.ɵɵFactoryTarget.Injectable });
+AuthorizeInterceptor.ɵprov = i0.ɵɵngDeclareInjectable({ minVersion: "12.0.0", version: "15.2.8", ngImport: i0, type: AuthorizeInterceptor });
+i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "15.2.8", ngImport: i0, type: AuthorizeInterceptor, decorators: [{
             type: Injectable
         }], ctorParameters: function () { return [{ type: AuthorizeService }]; } });
 

package/fesm2020/meshmakers-shared-auth.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"meshmakers-shared-auth.mjs","sources":["../../../../projects/meshmakers/shared-auth/src/lib/authorize.service.ts","../../../../projects/meshmakers/shared-auth/src/lib/login-menu/login-menu.component.ts","../../../../projects/meshmakers/shared-auth/src/lib/login-menu/login-menu.component.html","../../../../projects/meshmakers/shared-auth/src/lib/authorize.guard.ts","../../../../projects/meshmakers/shared-auth/src/lib/shared-auth.module.ts","../../../../projects/meshmakers/shared-auth/src/lib/authorize.interceptor.ts","../../../../projects/meshmakers/shared-auth/src/public-api.ts","../../../../projects/meshmakers/shared-auth/src/meshmakers-shared-auth.ts"],"sourcesContent":["import {Inject, Injectable} from '@angular/core';\nimport {BehaviorSubject} from 'rxjs';\nimport {filter} from 'rxjs/operators';\nimport {AuthConfig, OAuthService} from \"angular-oauth2-oidc\";\n\nexport interface IUser {\n  name: string;\n  role: string;\n}\n\nexport class AuthorizeOptions {\n  wellKnownServiceUris: string[];\n  // Url of the Identity Provider\n  issuer: string;\n  // URL of the SPA to redirect the user to after login\n  redirectUri: string;\n  postLogoutRedirectUri: string;\n  // The SPA's id. The SPA is registered with this id at the auth-server\n  clientId: string;\n  // set the scope for the permissions the client should request\n  // The first three are defined by OIDC. The 4th is a use case-specific one\n  scope: string;\n  showDebugInformation: boolean;\n  sessionChecksEnabled: boolean;\n}\n\n@Injectable()\nexport class AuthorizeService {\n  private isAuthenticated: BehaviorSubject<boolean> = new BehaviorSubject(false);\n  private isAdmin: BehaviorSubject<boolean> = new BehaviorSubject(false);\n  private authority: BehaviorSubject<string> = new BehaviorSubject(null);\n  private accessToken: BehaviorSubject<string> = new BehaviorSubject(null);\n  private user: BehaviorSubject<IUser> = new BehaviorSubject(null);\n\n  constructor(@Inject(AuthorizeOptions) private authorizeOptions: AuthorizeOptions, private oauthService: OAuthService) {\n    console.debug(\"AuthorizeService::created\");\n    this.getUser().subscribe(s => {\n      this.isAuthenticated.next(!!s);\n      this.isAdmin.next(!!s && s.role === \"Administrators\");\n    });\n  }\n\n  public getServiceUris(): Array<string> {\n    return this.authorizeOptions.wellKnownServiceUris;\n  }\n\n  public getAuthority(): BehaviorSubject<string> {\n    return this.authority;\n  }\n\n  public getIsAuthenticated(): BehaviorSubject<boolean> {\n    return this.isAuthenticated;\n  }\n\n  public getIsAdmin(): BehaviorSubject<boolean> {\n    return this.isAdmin;\n  }\n\n  public getAccessToken(): BehaviorSubject<string> {\n    return this.accessToken;\n  }\n\n  public getUser(): BehaviorSubject<IUser> {\n    return this.user;\n  }\n\n  public login() {\n    this.oauthService.initImplicitFlow();\n  }\n\n  public logout() {\n    this.oauthService.logOut(false);\n  }\n\n\n  public initialize() {\n\n    console.debug(\"AuthorizeService::initialize::started\");\n\n    const config: AuthConfig = {\n      responseType: 'code',\n      issuer: this.authorizeOptions.issuer,\n      redirectUri: this.authorizeOptions.redirectUri,\n      postLogoutRedirectUri: this.authorizeOptions.postLogoutRedirectUri,\n      clientId: this.authorizeOptions.clientId,\n      scope: this.authorizeOptions.scope,\n      showDebugInformation: this.authorizeOptions.showDebugInformation,\n      sessionChecksEnabled: this.authorizeOptions.sessionChecksEnabled\n    };\n\n    this.oauthService.configure(config);\n    this.oauthService.setStorage(localStorage);\n    this.oauthService.loadDiscoveryDocumentAndTryLogin();\n\n    this.oauthService.setupAutomaticSilentRefresh();\n\n    this.oauthService.events.subscribe(e => {\n      // tslint:disable-next-line:no-console\n      console.debug('oauth/oidc event', e);\n    });\n\n    this.oauthService.events\n      .pipe(filter(e => e.type === 'session_terminated'))\n      .subscribe(e => {\n        // tslint:disable-next-line:no-console\n        console.debug('Your session has been terminated!');\n      });\n\n    this.oauthService.events\n      .pipe(filter(e => e.type === 'token_received'))\n      .subscribe(e => {\n        this.loadUser();\n      });\n\n    this.oauthService.events\n      .pipe(filter(e => e.type === 'logout'))\n      .subscribe(e => {\n        this.accessToken.next(null);\n        this.user.next(null);\n      });\n\n    if (this.oauthService.hasValidAccessToken()) {\n      this.loadUser();\n    }\n\n    this.authority.next(this.authorizeOptions.issuer);\n\n    console.debug(\"AuthorizeService::initialize::done\");\n\n  }\n\n  private loadUser() {\n    const claims = this.oauthService.getIdentityClaims();\n    if (!claims) {\n      console.error(\"claims where null when loading identity claims\");\n      return;\n    }\n\n    const user = <IUser>claims;\n    const accessToken = this.oauthService.getAccessToken();\n    this.user.next(user);\n    this.accessToken.next(accessToken);\n  }\n}\n","import {Component, OnInit} from '@angular/core';\nimport {AuthorizeService} from '../authorize.service';\nimport {BehaviorSubject, Observable} from 'rxjs';\nimport {map} from 'rxjs/operators';\n\n@Component({\n  selector: 'app-login-menu',\n  templateUrl: './login-menu.component.html',\n  styleUrls: ['./login-menu.component.css']\n})\nexport class LoginMenuComponent implements OnInit {\n  public isAuthenticated: BehaviorSubject<boolean>;\n  public userName: Observable<string>;\n  public isAdmin: Observable<boolean>;\n\n  constructor(private authorizeService: AuthorizeService) {\n  }\n\n  ngOnInit() {\n    const isIFrame = window.self !== window.top;\n\n    console.log(\"app-login-menu::created\");\n\n    this.isAuthenticated = this.authorizeService.getIsAuthenticated();\n    this.userName = this.authorizeService.getUser().pipe(map(u => u && u.name));\n    this.isAdmin = this.authorizeService.getIsAdmin();\n\n    this.isAuthenticated.subscribe(x => {\n\n      console.log(`isAuthenticated changed to ${x} (iframe ${isIFrame})`);\n    });\n  }\n\n  public login() {\n    this.authorizeService.login();\n  }\n\n  public logout() {\n    this.authorizeService.logout();\n  }\n\n  public register() {\n\n  }\n}\n","<ul *ngIf=\"isAuthenticated | async\" class=\"navbar-nav\">\n  <li class=\"nav-item dropdown\">\n    <a aria-expanded=\"false\" aria-haspopup=\"true\" class=\"nav-link dropdown-toggle\" data-toggle=\"dropdown\" href=\"#\"\n       id=\"navbarDropdownLogin\" role=\"button\">\n      {{ userName | async }} <b class=\"caret\"></b>\n    </a>\n    <div aria-labelledby=\"navbarDropdown\" class=\"dropdown-menu\">\n      <!--<a class=\"dropdown-item\" asp-action=\"Index\" asp-area=\"Authentication\" asp-controller=\"Grants\">Client Application Access</a>-->\n      <!--<a class=\"dropdown-item\" [routerLink]='[\"/authentication/profile\"]' title=\"Manage\">Manage</a>-->\n      <!--<a class=\"dropdown-item\" asp-action=\"Index\" asp-area=\"Authentication\" asp-controller=\"Diagnostics\">Diagnostics</a>-->\n      <div class=\"dropdown-divider\"></div>\n      <a (click)='logout()' class=\"dropdown-item\" routerLink=\"\" title=\"Logout\">Logout</a>\n    </div>\n  </li>\n</ul>\n<ul *ngIf=\"!(isAuthenticated | async)\" class=\"navbar-nav\">\n  <li class=\"nav-item\">\n    <a (click)='register()' class=\"nav-link\" routerLink=\"\">Register</a>\n  </li>\n  <li class=\"nav-item\">\n    <a (click)='login()' class=\"nav-link\" routerLink=\"\">Login</a>\n  </li>\n</ul>\n","import {Injectable} from '@angular/core';\nimport {ActivatedRouteSnapshot, CanActivate, RouterStateSnapshot} from '@angular/router';\nimport {AuthorizeService} from './authorize.service';\nimport {tap} from 'rxjs/operators';\n\n@Injectable()\nexport class AuthorizeGuard implements CanActivate {\n  constructor(private authorize: AuthorizeService) {\n  }\n\n  canActivate(\n    _next: ActivatedRouteSnapshot,\n    state: RouterStateSnapshot): any {\n    return this.authorize.getIsAuthenticated()\n      .pipe(tap(isAuthenticated => this.handleAuthorization(isAuthenticated)));\n  }\n\n  private handleAuthorization(isAuthenticated: boolean) {\n    if (!isAuthenticated) {\n      this.authorize.login();\n    }\n  }\n}\n","import {ModuleWithProviders, NgModule} from '@angular/core';\nimport {CommonModule} from \"@angular/common\";\nimport {HttpClientModule} from \"@angular/common/http\";\nimport {LoginMenuComponent} from \"./login-menu/login-menu.component\";\nimport {AuthorizeOptions, AuthorizeService} from \"./authorize.service\";\nimport {OAuthModule} from \"angular-oauth2-oidc\";\nimport {AuthorizeGuard} from \"./authorize.guard\";\n\n@NgModule({\n  declarations: [LoginMenuComponent],\n  exports: [LoginMenuComponent],\n  providers: [],\n  imports: [\n    CommonModule,\n    HttpClientModule,\n    OAuthModule.forRoot()\n  ]\n})\nexport class SharedAuthModule {\n  static forRoot(authorizeOptions: AuthorizeOptions): ModuleWithProviders<SharedAuthModule> {\n    return {\n      ngModule: SharedAuthModule,\n      providers: [\n        {\n          provide: AuthorizeOptions,\n          useValue: authorizeOptions\n        },\n        AuthorizeService,\n        AuthorizeGuard\n      ]\n    }\n  }\n}\n","import {Injectable} from '@angular/core';\nimport {HttpEvent, HttpHandler, HttpInterceptor, HttpRequest} from '@angular/common/http';\nimport {Observable} from 'rxjs';\nimport {AuthorizeService} from './authorize.service';\n\n@Injectable()\nexport class AuthorizeInterceptor implements HttpInterceptor {\n\n  accessToken: string;\n\n  constructor(private authorize: AuthorizeService) {\n\n    authorize.getAccessToken().subscribe(value => this.accessToken = value);\n\n  }\n\n  private static isSameOriginUrl(req: any) {\n    // It's an absolute url with the same origin.\n    if (req.url.startsWith(`${window.location.origin}/`)) {\n      return true;\n    }\n\n    // It's a protocol relative url with the same origin.\n    // For example: //www.example.com/api/Products\n    if (req.url.startsWith(`//${window.location.host}/`)) {\n      return true;\n    }\n\n    // It's a relative url like /api/Products\n    if (/^\\/[^\\/].*/.test(req.url)) {\n      return true;\n    }\n\n    // It's an absolute or protocol relative url that\n    // doesn't have the same origin.\n    return false;\n  }\n\n  // Checks if there is an access_token available in the authorize service\n  // and adds it to the request in case it's targeted at the same origin as the\n\n  intercept(req: HttpRequest<any>, next: HttpHandler): Observable<HttpEvent<any>> {\n    return this.processRequestWithToken(this.accessToken, req, next);\n  }\n\n  // single page application.\n  private processRequestWithToken(token: string, req: HttpRequest<any>, next: HttpHandler) {\n    if (!!token && (AuthorizeInterceptor.isSameOriginUrl(req) || this.isKnownServiceUri(req))) {\n      req = req.clone({\n        setHeaders: {\n          Authorization: `Bearer ${token}`\n        }\n      });\n    }\n\n    return next.handle(req);\n  }\n\n  private isKnownServiceUri(req: any) {\n\n    const serviceUris = this.authorize.getServiceUris();\n\n    for (let i = 0; i < serviceUris.length; i++) {\n      if (req.url.startsWith(`${serviceUris[i]}`)) {\n        return true;\n      }\n    }\n\n    // It's an absolute or protocol relative url that\n    // doesn't have the same origin.\n    return false;\n  }\n}\n","/*\n * Public API Surface of shared-auth\n */\n\nexport * from './lib/authorize.service';\nexport * from './lib/login-menu/login-menu.component';\nexport * from './lib/shared-auth.module';\nexport * from './lib/authorize.interceptor';\nexport * from './lib/authorize.guard';\n","/**\n * Generated bundle index. Do not edit.\n */\n\nexport * from './public-api';\n"],"names":["i1.AuthorizeService"],"mappings":";;;;;;;;;;MAUa,gBAAgB,CAAA;AAc5B,CAAA;MAGY,gBAAgB,CAAA;IAO3B,WAA8C,CAAA,gBAAkC,EAAU,YAA0B,EAAA;QAAtE,IAAgB,CAAA,gBAAA,GAAhB,gBAAgB,CAAkB;QAAU,IAAY,CAAA,YAAA,GAAZ,YAAY,CAAc;AAN5G,QAAA,IAAA,CAAA,eAAe,GAA6B,IAAI,eAAe,CAAC,KAAK,CAAC,CAAC;AACvE,QAAA,IAAA,CAAA,OAAO,GAA6B,IAAI,eAAe,CAAC,KAAK,CAAC,CAAC;AAC/D,QAAA,IAAA,CAAA,SAAS,GAA4B,IAAI,eAAe,CAAC,IAAI,CAAC,CAAC;AAC/D,QAAA,IAAA,CAAA,WAAW,GAA4B,IAAI,eAAe,CAAC,IAAI,CAAC,CAAC;AACjE,QAAA,IAAA,CAAA,IAAI,GAA2B,IAAI,eAAe,CAAC,IAAI,CAAC,CAAC;AAG/D,QAAA,OAAO,CAAC,KAAK,CAAC,2BAA2B,CAAC,CAAC;QAC3C,IAAI,CAAC,OAAO,EAAE,CAAC,SAAS,CAAC,CAAC,IAAG;YAC3B,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAC/B,YAAA,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,KAAK,gBAAgB,CAAC,CAAC;AACxD,SAAC,CAAC,CAAC;KACJ;IAEM,cAAc,GAAA;AACnB,QAAA,OAAO,IAAI,CAAC,gBAAgB,CAAC,oBAAoB,CAAC;KACnD;IAEM,YAAY,GAAA;QACjB,OAAO,IAAI,CAAC,SAAS,CAAC;KACvB;IAEM,kBAAkB,GAAA;QACvB,OAAO,IAAI,CAAC,eAAe,CAAC;KAC7B;IAEM,UAAU,GAAA;QACf,OAAO,IAAI,CAAC,OAAO,CAAC;KACrB;IAEM,cAAc,GAAA;QACnB,OAAO,IAAI,CAAC,WAAW,CAAC;KACzB;IAEM,OAAO,GAAA;QACZ,OAAO,IAAI,CAAC,IAAI,CAAC;KAClB;IAEM,KAAK,GAAA;AACV,QAAA,IAAI,CAAC,YAAY,CAAC,gBAAgB,EAAE,CAAC;KACtC;IAEM,MAAM,GAAA;AACX,QAAA,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;KACjC;IAGM,UAAU,GAAA;AAEf,QAAA,OAAO,CAAC,KAAK,CAAC,uCAAuC,CAAC,CAAC;AAEvD,QAAA,MAAM,MAAM,GAAe;AACzB,YAAA,YAAY,EAAE,MAAM;AACpB,YAAA,MAAM,EAAE,IAAI,CAAC,gBAAgB,CAAC,MAAM;AACpC,YAAA,WAAW,EAAE,IAAI,CAAC,gBAAgB,CAAC,WAAW;AAC9C,YAAA,qBAAqB,EAAE,IAAI,CAAC,gBAAgB,CAAC,qBAAqB;AAClE,YAAA,QAAQ,EAAE,IAAI,CAAC,gBAAgB,CAAC,QAAQ;AACxC,YAAA,KAAK,EAAE,IAAI,CAAC,gBAAgB,CAAC,KAAK;AAClC,YAAA,oBAAoB,EAAE,IAAI,CAAC,gBAAgB,CAAC,oBAAoB;AAChE,YAAA,oBAAoB,EAAE,IAAI,CAAC,gBAAgB,CAAC,oBAAoB;SACjE,CAAC;AAEF,QAAA,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;AACpC,QAAA,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;AAC3C,QAAA,IAAI,CAAC,YAAY,CAAC,gCAAgC,EAAE,CAAC;AAErD,QAAA,IAAI,CAAC,YAAY,CAAC,2BAA2B,EAAE,CAAC;QAEhD,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,IAAG;;AAErC,YAAA,OAAO,CAAC,KAAK,CAAC,kBAAkB,EAAE,CAAC,CAAC,CAAC;AACvC,SAAC,CAAC,CAAC;QAEH,IAAI,CAAC,YAAY,CAAC,MAAM;AACrB,aAAA,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,KAAK,oBAAoB,CAAC,CAAC;aAClD,SAAS,CAAC,CAAC,IAAG;;AAEb,YAAA,OAAO,CAAC,KAAK,CAAC,mCAAmC,CAAC,CAAC;AACrD,SAAC,CAAC,CAAC;QAEL,IAAI,CAAC,YAAY,CAAC,MAAM;AACrB,aAAA,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,KAAK,gBAAgB,CAAC,CAAC;aAC9C,SAAS,CAAC,CAAC,IAAG;YACb,IAAI,CAAC,QAAQ,EAAE,CAAC;AAClB,SAAC,CAAC,CAAC;QAEL,IAAI,CAAC,YAAY,CAAC,MAAM;AACrB,aAAA,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC;aACtC,SAAS,CAAC,CAAC,IAAG;AACb,YAAA,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC5B,YAAA,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACvB,SAAC,CAAC,CAAC;AAEL,QAAA,IAAI,IAAI,CAAC,YAAY,CAAC,mBAAmB,EAAE,EAAE;YAC3C,IAAI,CAAC,QAAQ,EAAE,CAAC;AACjB,SAAA;QAED,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC;AAElD,QAAA,OAAO,CAAC,KAAK,CAAC,oCAAoC,CAAC,CAAC;KAErD;IAEO,QAAQ,GAAA;QACd,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,iBAAiB,EAAE,CAAC;QACrD,IAAI,CAAC,MAAM,EAAE;AACX,YAAA,OAAO,CAAC,KAAK,CAAC,gDAAgD,CAAC,CAAC;YAChE,OAAO;AACR,SAAA;QAED,MAAM,IAAI,GAAU,MAAM,CAAC;QAC3B,MAAM,WAAW,GAAG,IAAI,CAAC,YAAY,CAAC,cAAc,EAAE,CAAC;AACvD,QAAA,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACrB,QAAA,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;KACpC;;AAnHU,gBAAA,CAAA,IAAA,GAAA,EAAA,CAAA,kBAAA,CAAA,EAAA,UAAA,EAAA,QAAA,EAAA,OAAA,EAAA,QAAA,EAAA,QAAA,EAAA,EAAA,EAAA,IAAA,EAAA,gBAAgB,kBAOP,gBAAgB,EAAA,EAAA,EAAA,KAAA,EAAA,EAAA,CAAA,YAAA,EAAA,CAAA,EAAA,MAAA,EAAA,EAAA,CAAA,eAAA,CAAA,UAAA,EAAA,CAAA,CAAA;iHAPzB,gBAAgB,EAAA,CAAA,CAAA;2FAAhB,gBAAgB,EAAA,UAAA,EAAA,CAAA;kBAD5B,UAAU;;0BAQI,MAAM;2BAAC,gBAAgB,CAAA;;;MCxBzB,kBAAkB,CAAA;AAK7B,IAAA,WAAA,CAAoB,gBAAkC,EAAA;QAAlC,IAAgB,CAAA,gBAAA,GAAhB,gBAAgB,CAAkB;KACrD;IAED,QAAQ,GAAA;QACN,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,KAAK,MAAM,CAAC,GAAG,CAAC;AAE5C,QAAA,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC,CAAC;QAEvC,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC,gBAAgB,CAAC,kBAAkB,EAAE,CAAC;QAClE,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,gBAAgB,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;QAC5E,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,gBAAgB,CAAC,UAAU,EAAE,CAAC;AAElD,QAAA,IAAI,CAAC,eAAe,CAAC,SAAS,CAAC,CAAC,IAAG;YAEjC,OAAO,CAAC,GAAG,CAAC,CAAA,2BAAA,EAA8B,CAAC,CAAY,SAAA,EAAA,QAAQ,CAAG,CAAA,CAAA,CAAC,CAAC;AACtE,SAAC,CAAC,CAAC;KACJ;IAEM,KAAK,GAAA;AACV,QAAA,IAAI,CAAC,gBAAgB,CAAC,KAAK,EAAE,CAAC;KAC/B;IAEM,MAAM,GAAA;AACX,QAAA,IAAI,CAAC,gBAAgB,CAAC,MAAM,EAAE,CAAC;KAChC;IAEM,QAAQ,GAAA;KAEd;;+GAjCU,kBAAkB,EAAA,IAAA,EAAA,CAAA,EAAA,KAAA,EAAAA,gBAAA,EAAA,CAAA,EAAA,MAAA,EAAA,EAAA,CAAA,eAAA,CAAA,SAAA,EAAA,CAAA,CAAA;AAAlB,kBAAA,CAAA,IAAA,GAAA,EAAA,CAAA,oBAAA,CAAA,EAAA,UAAA,EAAA,QAAA,EAAA,OAAA,EAAA,QAAA,EAAA,IAAA,EAAA,kBAAkB,sDCV/B,svCAuBA,EAAA,MAAA,EAAA,CAAA,EAAA,CAAA,EAAA,YAAA,EAAA,CAAA,EAAA,IAAA,EAAA,WAAA,EAAA,IAAA,EAAA,EAAA,CAAA,IAAA,EAAA,QAAA,EAAA,QAAA,EAAA,MAAA,EAAA,CAAA,MAAA,EAAA,UAAA,EAAA,UAAA,CAAA,EAAA,EAAA,EAAA,IAAA,EAAA,MAAA,EAAA,IAAA,EAAA,EAAA,CAAA,SAAA,EAAA,IAAA,EAAA,OAAA,EAAA,CAAA,EAAA,CAAA,CAAA;2FDba,kBAAkB,EAAA,UAAA,EAAA,CAAA;kBAL9B,SAAS;+BACE,gBAAgB,EAAA,QAAA,EAAA,svCAAA,EAAA,CAAA;;;MEAf,cAAc,CAAA;AACzB,IAAA,WAAA,CAAoB,SAA2B,EAAA;QAA3B,IAAS,CAAA,SAAA,GAAT,SAAS,CAAkB;KAC9C;IAED,WAAW,CACT,KAA6B,EAC7B,KAA0B,EAAA;AAC1B,QAAA,OAAO,IAAI,CAAC,SAAS,CAAC,kBAAkB,EAAE;AACvC,aAAA,IAAI,CAAC,GAAG,CAAC,eAAe,IAAI,IAAI,CAAC,mBAAmB,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;KAC5E;AAEO,IAAA,mBAAmB,CAAC,eAAwB,EAAA;QAClD,IAAI,CAAC,eAAe,EAAE;AACpB,YAAA,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC;AACxB,SAAA;KACF;;2GAfU,cAAc,EAAA,IAAA,EAAA,CAAA,EAAA,KAAA,EAAAA,gBAAA,EAAA,CAAA,EAAA,MAAA,EAAA,EAAA,CAAA,eAAA,CAAA,UAAA,EAAA,CAAA,CAAA;+GAAd,cAAc,EAAA,CAAA,CAAA;2FAAd,cAAc,EAAA,UAAA,EAAA,CAAA;kBAD1B,UAAU;;;MCaE,gBAAgB,CAAA;IAC3B,OAAO,OAAO,CAAC,gBAAkC,EAAA;QAC/C,OAAO;AACL,YAAA,QAAQ,EAAE,gBAAgB;AAC1B,YAAA,SAAS,EAAE;AACT,gBAAA;AACE,oBAAA,OAAO,EAAE,gBAAgB;AACzB,oBAAA,QAAQ,EAAE,gBAAgB;AAC3B,iBAAA;gBACD,gBAAgB;gBAChB,cAAc;AACf,aAAA;SACF,CAAA;KACF;;6GAbU,gBAAgB,EAAA,IAAA,EAAA,EAAA,EAAA,MAAA,EAAA,EAAA,CAAA,eAAA,CAAA,QAAA,EAAA,CAAA,CAAA;8GAAhB,gBAAgB,EAAA,YAAA,EAAA,CATZ,kBAAkB,CAAA,EAAA,OAAA,EAAA,CAI/B,YAAY;AACZ,QAAA,gBAAgB,6BAJR,kBAAkB,CAAA,EAAA,CAAA,CAAA;AAQjB,gBAAA,CAAA,IAAA,GAAA,EAAA,CAAA,mBAAA,CAAA,EAAA,UAAA,EAAA,QAAA,EAAA,OAAA,EAAA,QAAA,EAAA,QAAA,EAAA,EAAA,EAAA,IAAA,EAAA,gBAAgB,YALzB,YAAY;QACZ,gBAAgB;QAChB,WAAW,CAAC,OAAO,EAAE,CAAA,EAAA,CAAA,CAAA;2FAGZ,gBAAgB,EAAA,UAAA,EAAA,CAAA;kBAV5B,QAAQ;AAAC,YAAA,IAAA,EAAA,CAAA;oBACR,YAAY,EAAE,CAAC,kBAAkB,CAAC;oBAClC,OAAO,EAAE,CAAC,kBAAkB,CAAC;AAC7B,oBAAA,SAAS,EAAE,EAAE;AACb,oBAAA,OAAO,EAAE;wBACP,YAAY;wBACZ,gBAAgB;wBAChB,WAAW,CAAC,OAAO,EAAE;AACtB,qBAAA;AACF,iBAAA,CAAA;;;MCXY,oBAAoB,CAAA;AAI/B,IAAA,WAAA,CAAoB,SAA2B,EAAA;QAA3B,IAAS,CAAA,SAAA,GAAT,SAAS,CAAkB;AAE7C,QAAA,SAAS,CAAC,cAAc,EAAE,CAAC,SAAS,CAAC,KAAK,IAAI,IAAI,CAAC,WAAW,GAAG,KAAK,CAAC,CAAC;KAEzE;IAEO,OAAO,eAAe,CAAC,GAAQ,EAAA;;AAErC,QAAA,IAAI,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,CAAA,EAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAA,CAAA,CAAG,CAAC,EAAE;AACpD,YAAA,OAAO,IAAI,CAAC;AACb,SAAA;;;AAID,QAAA,IAAI,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,CAAA,EAAA,EAAK,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAA,CAAA,CAAG,CAAC,EAAE;AACpD,YAAA,OAAO,IAAI,CAAC;AACb,SAAA;;QAGD,IAAI,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE;AAC9B,YAAA,OAAO,IAAI,CAAC;AACb,SAAA;;;AAID,QAAA,OAAO,KAAK,CAAC;KACd;;;IAKD,SAAS,CAAC,GAAqB,EAAE,IAAiB,EAAA;AAChD,QAAA,OAAO,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,WAAW,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;KAClE;;AAGO,IAAA,uBAAuB,CAAC,KAAa,EAAE,GAAqB,EAAE,IAAiB,EAAA;AACrF,QAAA,IAAI,CAAC,CAAC,KAAK,KAAK,oBAAoB,CAAC,eAAe,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC,EAAE;AACzF,YAAA,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC;AACd,gBAAA,UAAU,EAAE;oBACV,aAAa,EAAE,CAAU,OAAA,EAAA,KAAK,CAAE,CAAA;AACjC,iBAAA;AACF,aAAA,CAAC,CAAC;AACJ,SAAA;AAED,QAAA,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;KACzB;AAEO,IAAA,iBAAiB,CAAC,GAAQ,EAAA;QAEhC,MAAM,WAAW,GAAG,IAAI,CAAC,SAAS,CAAC,cAAc,EAAE,CAAC;AAEpD,QAAA,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,WAAW,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE;AAC3C,YAAA,IAAI,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,CAAG,EAAA,WAAW,CAAC,CAAC,CAAC,CAAA,CAAE,CAAC,EAAE;AAC3C,gBAAA,OAAO,IAAI,CAAC;AACb,aAAA;AACF,SAAA;;;AAID,QAAA,OAAO,KAAK,CAAC;KACd;;iHAjEU,oBAAoB,EAAA,IAAA,EAAA,CAAA,EAAA,KAAA,EAAAA,gBAAA,EAAA,CAAA,EAAA,MAAA,EAAA,EAAA,CAAA,eAAA,CAAA,UAAA,EAAA,CAAA,CAAA;qHAApB,oBAAoB,EAAA,CAAA,CAAA;2FAApB,oBAAoB,EAAA,UAAA,EAAA,CAAA;kBADhC,UAAU;;;ACLX;;AAEG;;ACFH;;AAEG;;;;"}
+{"version":3,"file":"meshmakers-shared-auth.mjs","sources":["../../../../projects/meshmakers/shared-auth/src/lib/authorize.service.ts","../../../../projects/meshmakers/shared-auth/src/lib/login-menu/login-menu.component.ts","../../../../projects/meshmakers/shared-auth/src/lib/login-menu/login-menu.component.html","../../../../projects/meshmakers/shared-auth/src/lib/authorize.guard.ts","../../../../projects/meshmakers/shared-auth/src/lib/shared-auth.module.ts","../../../../projects/meshmakers/shared-auth/src/lib/authorize.interceptor.ts","../../../../projects/meshmakers/shared-auth/src/public-api.ts","../../../../projects/meshmakers/shared-auth/src/meshmakers-shared-auth.ts"],"sourcesContent":["import {Inject, Injectable} from '@angular/core';\nimport {BehaviorSubject, firstValueFrom, Observable} from 'rxjs';\nimport {filter, map} from 'rxjs/operators';\nimport {AuthConfig, OAuthService} from \"angular-oauth2-oidc\";\n\nexport interface IUser {\n  name: string;\n  role: string[];\n}\n\nexport class AuthorizeOptions {\n  wellKnownServiceUris?: string[];\n  // Url of the Identity Provider\n  issuer?: string;\n  // URL of the SPA to redirect the user to after login\n  redirectUri?: string;\n  postLogoutRedirectUri?: string;\n  // The SPA's id. The SPA is registered with this id at the auth-server\n  clientId?: string;\n  // set the scope for the permissions the client should request\n  // The first three are defined by OIDC. The 4th is a use case-specific one\n  scope?: string;\n  showDebugInformation?: boolean;\n  sessionChecksEnabled?: boolean;\n}\n\n@Injectable()\nexport class AuthorizeService {\n  private isAuthenticated: BehaviorSubject<boolean> = new BehaviorSubject(false);\n  private isAdmin: BehaviorSubject<boolean> = new BehaviorSubject(false);\n  private isDeveloper: BehaviorSubject<boolean> = new BehaviorSubject(false);\n  private isManager: BehaviorSubject<boolean> = new BehaviorSubject(false);\n  private authority: BehaviorSubject<string | null> = new BehaviorSubject<string | null>(null);\n  private accessToken: BehaviorSubject<string | null> = new BehaviorSubject<string | null>(null);\n  private user: BehaviorSubject<IUser | null> = new BehaviorSubject<IUser | null>(null);\n  private isInitialized : BehaviorSubject<boolean> = new BehaviorSubject(false);\n  private isInitializing : BehaviorSubject<boolean> = new BehaviorSubject(false);\n\n  constructor(@Inject(AuthorizeOptions) private authorizeOptions: AuthorizeOptions, private oauthService: OAuthService) {\n    console.debug(\"AuthorizeService::created\");\n\n    this.getUser().subscribe(s => {\n      this.isAuthenticated.next(!!s);\n      this.isAdmin.next(!!s && (s.role.includes(\"Administrators\")));\n      this.isDeveloper.next(!!s && (s.role.includes(\"Developers\")));\n      this.isManager.next(!!s && s.role.includes(\"Managers\"));\n    });\n\n    this.oauthService.events.subscribe(e => {\n      // tslint:disable-next-line:no-console\n      console.debug('oauth/oidc event', e);\n    });\n\n    this.oauthService.events\n      .pipe(filter(e => e.type === 'session_terminated'))\n      .subscribe(_ => {\n        // tslint:disable-next-line:no-console\n        console.debug('Your session has been terminated!');\n      });\n\n    this.oauthService.events\n      .pipe(filter(e => e.type === 'token_received'))\n      .subscribe(_ => {\n        this.loadUser();\n      });\n\n    this.oauthService.events\n      .pipe(filter(e => e.type === 'logout'))\n      .subscribe(_ => {\n        this.accessToken.next(null);\n        this.user.next(null);\n      });\n\n  }\n\n  public getRoles(): Observable<Array<string>>{\n    return this.getUser().pipe(\n      map(u=> u != null ? u.role : new Array<string>())\n    );\n  }\n\n  public getServiceUris(): Array<string> | null {\n    return this.authorizeOptions.wellKnownServiceUris ?? null;\n  }\n\n  public getAuthority(): BehaviorSubject<string | null> {\n    return this.authority;\n  }\n\n  public getIsAuthenticated(): BehaviorSubject<boolean> {\n    return this.isAuthenticated;\n  }\n\n  public getIsAdmin(): BehaviorSubject<boolean> {\n    return this.isAdmin;\n  }\n\n  public getIsDeveloper(): BehaviorSubject<boolean> {\n    return this.isDeveloper;\n  }\n\n  public getIsManager(): BehaviorSubject<boolean> {\n    return this.isManager;\n  }\n\n  public getAccessToken(): BehaviorSubject<string | null> {\n    return this.accessToken;\n  }\n\n  public getUser(): BehaviorSubject<IUser | null> {\n    return this.user;\n  }\n\n  public login() {\n    this.oauthService.initImplicitFlow();\n  }\n\n  public logout() {\n    this.oauthService.logOut(false);\n  }\n\n\n  public async initialize() {\n\n    console.debug(\"AuthorizeService::initialize::started\");\n\n    if (await firstValueFrom(this.isInitializing)) {\n      return\n    }\n    if (await firstValueFrom(this.isInitialized)) {\n      return;\n    }\n    this.isInitializing.next(true);\n\n    const config: AuthConfig = {\n      responseType: 'code',\n      issuer: this.authorizeOptions.issuer,\n      redirectUri: this.authorizeOptions.redirectUri,\n      postLogoutRedirectUri: this.authorizeOptions.postLogoutRedirectUri,\n      clientId: this.authorizeOptions.clientId,\n      scope: this.authorizeOptions.scope,\n      showDebugInformation: this.authorizeOptions.showDebugInformation,\n      sessionChecksEnabled: this.authorizeOptions.sessionChecksEnabled\n    };\n\n    this.oauthService.configure(config);\n    this.oauthService.setStorage(localStorage);\n    await this.oauthService.loadDiscoveryDocumentAndTryLogin();\n\n    this.oauthService.setupAutomaticSilentRefresh();\n\n    if (this.oauthService.hasValidAccessToken()) {\n      this.loadUser();\n    }\n\n    this.authority.next(this.authorizeOptions.issuer ?? null);\n    this.isInitializing.next(false);\n    this.isInitialized.next(true);\n\n    console.debug(\"AuthorizeService::initialize::done\");\n  }\n\n  private loadUser() {\n    const claims = this.oauthService.getIdentityClaims();\n    if (!claims) {\n      console.error(\"claims where null when loading identity claims\");\n      return;\n    }\n\n    const user = <IUser>claims;\n    const accessToken = this.oauthService.getAccessToken();\n    this.user.next(user);\n    this.accessToken.next(accessToken);\n  }\n}\n","import {Component, OnInit} from '@angular/core';\nimport {AuthorizeService} from '../authorize.service';\nimport {BehaviorSubject, Observable} from 'rxjs';\nimport {map} from 'rxjs/operators';\n\n@Component({\n  selector: 'app-login-menu',\n  templateUrl: './login-menu.component.html',\n  styleUrls: ['./login-menu.component.css']\n})\nexport class LoginMenuComponent implements OnInit {\n  public isAuthenticated: BehaviorSubject<boolean>;\n  public userName: Observable<string | null>;\n  public isAdmin: Observable<boolean>;\n\n  constructor(private authorizeService: AuthorizeService) {\n    this.isAuthenticated = this.authorizeService.getIsAuthenticated();\n    this.userName = this.authorizeService.getUser().pipe(map(u => u && u.name));\n    this.isAdmin = this.authorizeService.getIsAdmin();\n  }\n\n  ngOnInit() {\n    const isIFrame = window.self !== window.top;\n\n    console.log(\"app-login-menu::created\");\n\n    this.isAuthenticated.subscribe(x => {\n\n      console.log(`isAuthenticated changed to ${x} (iframe ${isIFrame})`);\n    });\n  }\n\n  public login() {\n    this.authorizeService.login();\n  }\n\n  public logout() {\n    this.authorizeService.logout();\n  }\n\n  public register() {\n\n  }\n}\n","<ul *ngIf=\"isAuthenticated | async\" class=\"navbar-nav\">\n  <li class=\"nav-item dropdown\">\n    <a aria-expanded=\"false\" aria-haspopup=\"true\" class=\"nav-link dropdown-toggle\" data-toggle=\"dropdown\" href=\"#\"\n       id=\"navbarDropdownLogin\" role=\"button\">\n      {{ userName | async }} <b class=\"caret\"></b>\n    </a>\n    <div aria-labelledby=\"navbarDropdown\" class=\"dropdown-menu\">\n      <!--<a class=\"dropdown-item\" asp-action=\"Index\" asp-area=\"Authentication\" asp-controller=\"Grants\">Client Application Access</a>-->\n      <!--<a class=\"dropdown-item\" [routerLink]='[\"/authentication/profile\"]' title=\"Manage\">Manage</a>-->\n      <!--<a class=\"dropdown-item\" asp-action=\"Index\" asp-area=\"Authentication\" asp-controller=\"Diagnostics\">Diagnostics</a>-->\n      <div class=\"dropdown-divider\"></div>\n      <a (click)='logout()' class=\"dropdown-item\" routerLink=\"\" title=\"Logout\">Logout</a>\n    </div>\n  </li>\n</ul>\n<ul *ngIf=\"!(isAuthenticated | async)\" class=\"navbar-nav\">\n  <li class=\"nav-item\">\n    <a (click)='register()' class=\"nav-link\" routerLink=\"\">Register</a>\n  </li>\n  <li class=\"nav-item\">\n    <a (click)='login()' class=\"nav-link\" routerLink=\"\">Login</a>\n  </li>\n</ul>\n","import {Injectable} from '@angular/core';\nimport {\n  ActivatedRouteSnapshot,\n  CanActivate,\n  CanActivateChild,\n  CanDeactivate,\n  CanLoad, Route,\n  Router,\n  RouterStateSnapshot, UrlSegment,\n  UrlTree\n} from '@angular/router';\nimport {AuthorizeService} from './authorize.service';\nimport {firstValueFrom, lastValueFrom, Observable} from \"rxjs\";\n\n@Injectable()\nexport class AuthorizeGuard implements CanActivate, CanActivateChild, CanDeactivate<unknown>, CanLoad {\n  constructor(private authorizeService: AuthorizeService, private router: Router) {\n  }\n\n  canActivate(\n    next: ActivatedRouteSnapshot,\n    state: RouterStateSnapshot): Observable<boolean | UrlTree> | Promise<boolean | UrlTree> | boolean | UrlTree {\n    let url: string = state.url;\n    return this.handleAuthorization(next, url);\n  }\n\n  canActivateChild(\n    next: ActivatedRouteSnapshot,\n    state: RouterStateSnapshot): Observable<boolean | UrlTree> | Promise<boolean | UrlTree> | boolean | UrlTree {\n    return this.canActivate(next, state);\n  }\n\n  canDeactivate(\n    component: unknown,\n    currentRoute: ActivatedRouteSnapshot,\n    currentState: RouterStateSnapshot,\n    nextState?: RouterStateSnapshot): Observable<boolean | UrlTree> | Promise<boolean | UrlTree> | boolean | UrlTree {\n    return true;\n  }\n\n  canLoad(\n    route: Route,\n    segments: UrlSegment[]): Observable<boolean> | Promise<boolean> | boolean {\n    return true;\n  }\n\n  private async handleAuthorization(route: ActivatedRouteSnapshot, url: any): Promise<boolean> {\n\n    await this.authorizeService.initialize()\n\n    const isAuthenticated = await firstValueFrom(this.authorizeService.getIsAuthenticated());\n    if (isAuthenticated) {\n      const userRoles = await firstValueFrom(this.authorizeService.getRoles());\n      if (route.data['roles'] && !route.data['roles'].filter((value: string) => userRoles.includes(value))) {\n        this.router.navigate(['']);\n        return false;\n      }\n      return true;\n    } else {\n      this.authorizeService.login();\n    }\n\n    return false;\n  }\n}\n","import {ModuleWithProviders, NgModule} from '@angular/core';\nimport {CommonModule} from \"@angular/common\";\nimport {HttpClientModule} from \"@angular/common/http\";\nimport {LoginMenuComponent} from \"./login-menu/login-menu.component\";\nimport {AuthorizeOptions, AuthorizeService} from \"./authorize.service\";\nimport {OAuthModule} from \"angular-oauth2-oidc\";\nimport {AuthorizeGuard} from \"./authorize.guard\";\n\n@NgModule({\n  declarations: [LoginMenuComponent],\n  exports: [LoginMenuComponent],\n  providers: [],\n  imports: [\n    CommonModule,\n    HttpClientModule,\n    OAuthModule.forRoot()\n  ]\n})\nexport class SharedAuthModule {\n  static forRoot(authorizeOptions: AuthorizeOptions): ModuleWithProviders<SharedAuthModule> {\n    return {\n      ngModule: SharedAuthModule,\n      providers: [\n        {\n          provide: AuthorizeOptions,\n          useValue: authorizeOptions\n        },\n        AuthorizeService,\n        AuthorizeGuard\n      ]\n    }\n  }\n}\n","import {Injectable} from '@angular/core';\nimport {HttpEvent, HttpHandler, HttpInterceptor, HttpRequest} from '@angular/common/http';\nimport {Observable} from 'rxjs';\nimport {AuthorizeService} from './authorize.service';\n\n@Injectable()\nexport class AuthorizeInterceptor implements HttpInterceptor {\n\n  accessToken: string | null;\n\n  constructor(private authorize: AuthorizeService) {\n\n    this.accessToken = null;\n    authorize.getAccessToken().subscribe(value => this.accessToken = value);\n\n  }\n\n  private static isSameOriginUrl(req: any) {\n    // It's an absolute url with the same origin.\n    if (req.url.startsWith(`${window.location.origin}/`)) {\n      return true;\n    }\n\n    // It's a protocol relative url with the same origin.\n    // For example: //www.example.com/api/Products\n    if (req.url.startsWith(`//${window.location.host}/`)) {\n      return true;\n    }\n\n    // It's a relative url like /api/Products\n    if (/^\\/[^\\/].*/.test(req.url)) {\n      return true;\n    }\n\n    // It's an absolute or protocol relative url that\n    // doesn't have the same origin.\n    return false;\n  }\n\n  // Checks if there is an access_token available in the authorize service\n  // and adds it to the request in case it's targeted at the same origin as the\n\n  intercept(req: HttpRequest<any>, next: HttpHandler): Observable<HttpEvent<any>> {\n    return this.processRequestWithToken(this.accessToken, req, next);\n  }\n\n  // single page application.\n  private processRequestWithToken(token: string | null, req: HttpRequest<any>, next: HttpHandler) {\n    if (!!token && (AuthorizeInterceptor.isSameOriginUrl(req) || this.isKnownServiceUri(req))) {\n      req = req.clone({\n        setHeaders: {\n          Authorization: `Bearer ${token}`\n        }\n      });\n    }\n\n    return next.handle(req);\n  }\n\n  private isKnownServiceUri(req: any) {\n\n    const serviceUris = this.authorize.getServiceUris();\n\n    if (serviceUris) {\n      for (let i = 0; i < serviceUris.length; i++) {\n        if (req.url.startsWith(`${serviceUris[i]}`)) {\n          return true;\n        }\n      }\n    }\n\n    // It's an absolute or protocol relative url that\n    // doesn't have the same origin.\n    return false;\n  }\n}\n","/*\n * Public API Surface of shared-auth\n */\n\nexport * from './lib/authorize.service';\nexport * from './lib/login-menu/login-menu.component';\nexport * from './lib/shared-auth.module';\nexport * from './lib/authorize.interceptor';\nexport * from './lib/authorize.guard';\n\n","/**\n * Generated bundle index. Do not edit.\n */\n\nexport * from './public-api';\n"],"names":["i1.AuthorizeService","i2"],"mappings":";;;;;;;;;;;MAUa,gBAAgB,CAAA;AAc5B,CAAA;MAGY,gBAAgB,CAAA;IAW3B,WAA8C,CAAA,gBAAkC,EAAU,YAA0B,EAAA;QAAtE,IAAgB,CAAA,gBAAA,GAAhB,gBAAgB,CAAkB;QAAU,IAAY,CAAA,YAAA,GAAZ,YAAY,CAAc;AAV5G,QAAA,IAAA,CAAA,eAAe,GAA6B,IAAI,eAAe,CAAC,KAAK,CAAC,CAAC;AACvE,QAAA,IAAA,CAAA,OAAO,GAA6B,IAAI,eAAe,CAAC,KAAK,CAAC,CAAC;AAC/D,QAAA,IAAA,CAAA,WAAW,GAA6B,IAAI,eAAe,CAAC,KAAK,CAAC,CAAC;AACnE,QAAA,IAAA,CAAA,SAAS,GAA6B,IAAI,eAAe,CAAC,KAAK,CAAC,CAAC;AACjE,QAAA,IAAA,CAAA,SAAS,GAAmC,IAAI,eAAe,CAAgB,IAAI,CAAC,CAAC;AACrF,QAAA,IAAA,CAAA,WAAW,GAAmC,IAAI,eAAe,CAAgB,IAAI,CAAC,CAAC;AACvF,QAAA,IAAA,CAAA,IAAI,GAAkC,IAAI,eAAe,CAAe,IAAI,CAAC,CAAC;AAC9E,QAAA,IAAA,CAAA,aAAa,GAA8B,IAAI,eAAe,CAAC,KAAK,CAAC,CAAC;AACtE,QAAA,IAAA,CAAA,cAAc,GAA8B,IAAI,eAAe,CAAC,KAAK,CAAC,CAAC;AAG7E,QAAA,OAAO,CAAC,KAAK,CAAC,2BAA2B,CAAC,CAAC;QAE3C,IAAI,CAAC,OAAO,EAAE,CAAC,SAAS,CAAC,CAAC,IAAG;YAC3B,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAC/B,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC;YAC9D,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;AAC9D,YAAA,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC;AAC1D,SAAC,CAAC,CAAC;QAEH,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,IAAG;;AAErC,YAAA,OAAO,CAAC,KAAK,CAAC,kBAAkB,EAAE,CAAC,CAAC,CAAC;AACvC,SAAC,CAAC,CAAC;QAEH,IAAI,CAAC,YAAY,CAAC,MAAM;AACrB,aAAA,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,KAAK,oBAAoB,CAAC,CAAC;aAClD,SAAS,CAAC,CAAC,IAAG;;AAEb,YAAA,OAAO,CAAC,KAAK,CAAC,mCAAmC,CAAC,CAAC;AACrD,SAAC,CAAC,CAAC;QAEL,IAAI,CAAC,YAAY,CAAC,MAAM;AACrB,aAAA,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,KAAK,gBAAgB,CAAC,CAAC;aAC9C,SAAS,CAAC,CAAC,IAAG;YACb,IAAI,CAAC,QAAQ,EAAE,CAAC;AAClB,SAAC,CAAC,CAAC;QAEL,IAAI,CAAC,YAAY,CAAC,MAAM;AACrB,aAAA,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC;aACtC,SAAS,CAAC,CAAC,IAAG;AACb,YAAA,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC5B,YAAA,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACvB,SAAC,CAAC,CAAC;KAEN;IAEM,QAAQ,GAAA;AACb,QAAA,OAAO,IAAI,CAAC,OAAO,EAAE,CAAC,IAAI,CACxB,GAAG,CAAC,CAAC,IAAG,CAAC,IAAI,IAAI,GAAG,CAAC,CAAC,IAAI,GAAG,IAAI,KAAK,EAAU,CAAC,CAClD,CAAC;KACH;IAEM,cAAc,GAAA;AACnB,QAAA,OAAO,IAAI,CAAC,gBAAgB,CAAC,oBAAoB,IAAI,IAAI,CAAC;KAC3D;IAEM,YAAY,GAAA;QACjB,OAAO,IAAI,CAAC,SAAS,CAAC;KACvB;IAEM,kBAAkB,GAAA;QACvB,OAAO,IAAI,CAAC,eAAe,CAAC;KAC7B;IAEM,UAAU,GAAA;QACf,OAAO,IAAI,CAAC,OAAO,CAAC;KACrB;IAEM,cAAc,GAAA;QACnB,OAAO,IAAI,CAAC,WAAW,CAAC;KACzB;IAEM,YAAY,GAAA;QACjB,OAAO,IAAI,CAAC,SAAS,CAAC;KACvB;IAEM,cAAc,GAAA;QACnB,OAAO,IAAI,CAAC,WAAW,CAAC;KACzB;IAEM,OAAO,GAAA;QACZ,OAAO,IAAI,CAAC,IAAI,CAAC;KAClB;IAEM,KAAK,GAAA;AACV,QAAA,IAAI,CAAC,YAAY,CAAC,gBAAgB,EAAE,CAAC;KACtC;IAEM,MAAM,GAAA;AACX,QAAA,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;KACjC;AAGM,IAAA,MAAM,UAAU,GAAA;AAErB,QAAA,OAAO,CAAC,KAAK,CAAC,uCAAuC,CAAC,CAAC;AAEvD,QAAA,IAAI,MAAM,cAAc,CAAC,IAAI,CAAC,cAAc,CAAC,EAAE;YAC7C,OAAM;AACP,SAAA;AACD,QAAA,IAAI,MAAM,cAAc,CAAC,IAAI,CAAC,aAAa,CAAC,EAAE;YAC5C,OAAO;AACR,SAAA;AACD,QAAA,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAE/B,QAAA,MAAM,MAAM,GAAe;AACzB,YAAA,YAAY,EAAE,MAAM;AACpB,YAAA,MAAM,EAAE,IAAI,CAAC,gBAAgB,CAAC,MAAM;AACpC,YAAA,WAAW,EAAE,IAAI,CAAC,gBAAgB,CAAC,WAAW;AAC9C,YAAA,qBAAqB,EAAE,IAAI,CAAC,gBAAgB,CAAC,qBAAqB;AAClE,YAAA,QAAQ,EAAE,IAAI,CAAC,gBAAgB,CAAC,QAAQ;AACxC,YAAA,KAAK,EAAE,IAAI,CAAC,gBAAgB,CAAC,KAAK;AAClC,YAAA,oBAAoB,EAAE,IAAI,CAAC,gBAAgB,CAAC,oBAAoB;AAChE,YAAA,oBAAoB,EAAE,IAAI,CAAC,gBAAgB,CAAC,oBAAoB;SACjE,CAAC;AAEF,QAAA,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;AACpC,QAAA,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;AAC3C,QAAA,MAAM,IAAI,CAAC,YAAY,CAAC,gCAAgC,EAAE,CAAC;AAE3D,QAAA,IAAI,CAAC,YAAY,CAAC,2BAA2B,EAAE,CAAC;AAEhD,QAAA,IAAI,IAAI,CAAC,YAAY,CAAC,mBAAmB,EAAE,EAAE;YAC3C,IAAI,CAAC,QAAQ,EAAE,CAAC;AACjB,SAAA;AAED,QAAA,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,MAAM,IAAI,IAAI,CAAC,CAAC;AAC1D,QAAA,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAChC,QAAA,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAE9B,QAAA,OAAO,CAAC,KAAK,CAAC,oCAAoC,CAAC,CAAC;KACrD;IAEO,QAAQ,GAAA;QACd,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,iBAAiB,EAAE,CAAC;QACrD,IAAI,CAAC,MAAM,EAAE;AACX,YAAA,OAAO,CAAC,KAAK,CAAC,gDAAgD,CAAC,CAAC;YAChE,OAAO;AACR,SAAA;QAED,MAAM,IAAI,GAAU,MAAM,CAAC;QAC3B,MAAM,WAAW,GAAG,IAAI,CAAC,YAAY,CAAC,cAAc,EAAE,CAAC;AACvD,QAAA,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACrB,QAAA,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;KACpC;;AAlJU,gBAAA,CAAA,IAAA,GAAA,EAAA,CAAA,kBAAA,CAAA,EAAA,UAAA,EAAA,QAAA,EAAA,OAAA,EAAA,QAAA,EAAA,QAAA,EAAA,EAAA,EAAA,IAAA,EAAA,gBAAgB,kBAWP,gBAAgB,EAAA,EAAA,EAAA,KAAA,EAAA,EAAA,CAAA,YAAA,EAAA,CAAA,EAAA,MAAA,EAAA,EAAA,CAAA,eAAA,CAAA,UAAA,EAAA,CAAA,CAAA;iHAXzB,gBAAgB,EAAA,CAAA,CAAA;2FAAhB,gBAAgB,EAAA,UAAA,EAAA,CAAA;kBAD5B,UAAU;;0BAYI,MAAM;2BAAC,gBAAgB,CAAA;;;MC5BzB,kBAAkB,CAAA;AAK7B,IAAA,WAAA,CAAoB,gBAAkC,EAAA;QAAlC,IAAgB,CAAA,gBAAA,GAAhB,gBAAgB,CAAkB;QACpD,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC,gBAAgB,CAAC,kBAAkB,EAAE,CAAC;QAClE,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,gBAAgB,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;QAC5E,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,gBAAgB,CAAC,UAAU,EAAE,CAAC;KACnD;IAED,QAAQ,GAAA;QACN,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,KAAK,MAAM,CAAC,GAAG,CAAC;AAE5C,QAAA,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC,CAAC;AAEvC,QAAA,IAAI,CAAC,eAAe,CAAC,SAAS,CAAC,CAAC,IAAG;YAEjC,OAAO,CAAC,GAAG,CAAC,CAAA,2BAAA,EAA8B,CAAC,CAAY,SAAA,EAAA,QAAQ,CAAG,CAAA,CAAA,CAAC,CAAC;AACtE,SAAC,CAAC,CAAC;KACJ;IAEM,KAAK,GAAA;AACV,QAAA,IAAI,CAAC,gBAAgB,CAAC,KAAK,EAAE,CAAC;KAC/B;IAEM,MAAM,GAAA;AACX,QAAA,IAAI,CAAC,gBAAgB,CAAC,MAAM,EAAE,CAAC;KAChC;IAEM,QAAQ,GAAA;KAEd;;+GAhCU,kBAAkB,EAAA,IAAA,EAAA,CAAA,EAAA,KAAA,EAAAA,gBAAA,EAAA,CAAA,EAAA,MAAA,EAAA,EAAA,CAAA,eAAA,CAAA,SAAA,EAAA,CAAA,CAAA;AAAlB,kBAAA,CAAA,IAAA,GAAA,EAAA,CAAA,oBAAA,CAAA,EAAA,UAAA,EAAA,QAAA,EAAA,OAAA,EAAA,QAAA,EAAA,IAAA,EAAA,kBAAkB,sDCV/B,svCAuBA,EAAA,MAAA,EAAA,CAAA,EAAA,CAAA,EAAA,YAAA,EAAA,CAAA,EAAA,IAAA,EAAA,WAAA,EAAA,IAAA,EAAA,EAAA,CAAA,IAAA,EAAA,QAAA,EAAA,QAAA,EAAA,MAAA,EAAA,CAAA,MAAA,EAAA,UAAA,EAAA,UAAA,CAAA,EAAA,EAAA,EAAA,IAAA,EAAA,MAAA,EAAA,IAAA,EAAA,EAAA,CAAA,SAAA,EAAA,IAAA,EAAA,OAAA,EAAA,CAAA,EAAA,CAAA,CAAA;2FDba,kBAAkB,EAAA,UAAA,EAAA,CAAA;kBAL9B,SAAS;+BACE,gBAAgB,EAAA,QAAA,EAAA,svCAAA,EAAA,CAAA;;;MESf,cAAc,CAAA;IACzB,WAAoB,CAAA,gBAAkC,EAAU,MAAc,EAAA;QAA1D,IAAgB,CAAA,gBAAA,GAAhB,gBAAgB,CAAkB;QAAU,IAAM,CAAA,MAAA,GAAN,MAAM,CAAQ;KAC7E;IAED,WAAW,CACT,IAA4B,EAC5B,KAA0B,EAAA;AAC1B,QAAA,IAAI,GAAG,GAAW,KAAK,CAAC,GAAG,CAAC;QAC5B,OAAO,IAAI,CAAC,mBAAmB,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;KAC5C;IAED,gBAAgB,CACd,IAA4B,EAC5B,KAA0B,EAAA;QAC1B,OAAO,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;KACtC;AAED,IAAA,aAAa,CACX,SAAkB,EAClB,YAAoC,EACpC,YAAiC,EACjC,SAA+B,EAAA;AAC/B,QAAA,OAAO,IAAI,CAAC;KACb;IAED,OAAO,CACL,KAAY,EACZ,QAAsB,EAAA;AACtB,QAAA,OAAO,IAAI,CAAC;KACb;AAEO,IAAA,MAAM,mBAAmB,CAAC,KAA6B,EAAE,GAAQ,EAAA;AAEvE,QAAA,MAAM,IAAI,CAAC,gBAAgB,CAAC,UAAU,EAAE,CAAA;AAExC,QAAA,MAAM,eAAe,GAAG,MAAM,cAAc,CAAC,IAAI,CAAC,gBAAgB,CAAC,kBAAkB,EAAE,CAAC,CAAC;AACzF,QAAA,IAAI,eAAe,EAAE;AACnB,YAAA,MAAM,SAAS,GAAG,MAAM,cAAc,CAAC,IAAI,CAAC,gBAAgB,CAAC,QAAQ,EAAE,CAAC,CAAC;AACzE,YAAA,IAAI,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,KAAa,KAAK,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE;gBACpG,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AAC3B,gBAAA,OAAO,KAAK,CAAC;AACd,aAAA;AACD,YAAA,OAAO,IAAI,CAAC;AACb,SAAA;AAAM,aAAA;AACL,YAAA,IAAI,CAAC,gBAAgB,CAAC,KAAK,EAAE,CAAC;AAC/B,SAAA;AAED,QAAA,OAAO,KAAK,CAAC;KACd;;2GAhDU,cAAc,EAAA,IAAA,EAAA,CAAA,EAAA,KAAA,EAAAA,gBAAA,EAAA,EAAA,EAAA,KAAA,EAAAC,IAAA,CAAA,MAAA,EAAA,CAAA,EAAA,MAAA,EAAA,EAAA,CAAA,eAAA,CAAA,UAAA,EAAA,CAAA,CAAA;+GAAd,cAAc,EAAA,CAAA,CAAA;2FAAd,cAAc,EAAA,UAAA,EAAA,CAAA;kBAD1B,UAAU;;;MCIE,gBAAgB,CAAA;IAC3B,OAAO,OAAO,CAAC,gBAAkC,EAAA;QAC/C,OAAO;AACL,YAAA,QAAQ,EAAE,gBAAgB;AAC1B,YAAA,SAAS,EAAE;AACT,gBAAA;AACE,oBAAA,OAAO,EAAE,gBAAgB;AACzB,oBAAA,QAAQ,EAAE,gBAAgB;AAC3B,iBAAA;gBACD,gBAAgB;gBAChB,cAAc;AACf,aAAA;SACF,CAAA;KACF;;6GAbU,gBAAgB,EAAA,IAAA,EAAA,EAAA,EAAA,MAAA,EAAA,EAAA,CAAA,eAAA,CAAA,QAAA,EAAA,CAAA,CAAA;8GAAhB,gBAAgB,EAAA,YAAA,EAAA,CATZ,kBAAkB,CAAA,EAAA,OAAA,EAAA,CAI/B,YAAY;AACZ,QAAA,gBAAgB,6BAJR,kBAAkB,CAAA,EAAA,CAAA,CAAA;AAQjB,gBAAA,CAAA,IAAA,GAAA,EAAA,CAAA,mBAAA,CAAA,EAAA,UAAA,EAAA,QAAA,EAAA,OAAA,EAAA,QAAA,EAAA,QAAA,EAAA,EAAA,EAAA,IAAA,EAAA,gBAAgB,YALzB,YAAY;QACZ,gBAAgB;QAChB,WAAW,CAAC,OAAO,EAAE,CAAA,EAAA,CAAA,CAAA;2FAGZ,gBAAgB,EAAA,UAAA,EAAA,CAAA;kBAV5B,QAAQ;AAAC,YAAA,IAAA,EAAA,CAAA;oBACR,YAAY,EAAE,CAAC,kBAAkB,CAAC;oBAClC,OAAO,EAAE,CAAC,kBAAkB,CAAC;AAC7B,oBAAA,SAAS,EAAE,EAAE;AACb,oBAAA,OAAO,EAAE;wBACP,YAAY;wBACZ,gBAAgB;wBAChB,WAAW,CAAC,OAAO,EAAE;AACtB,qBAAA;AACF,iBAAA,CAAA;;;MCXY,oBAAoB,CAAA;AAI/B,IAAA,WAAA,CAAoB,SAA2B,EAAA;QAA3B,IAAS,CAAA,SAAA,GAAT,SAAS,CAAkB;AAE7C,QAAA,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;AACxB,QAAA,SAAS,CAAC,cAAc,EAAE,CAAC,SAAS,CAAC,KAAK,IAAI,IAAI,CAAC,WAAW,GAAG,KAAK,CAAC,CAAC;KAEzE;IAEO,OAAO,eAAe,CAAC,GAAQ,EAAA;;AAErC,QAAA,IAAI,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,CAAA,EAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAA,CAAA,CAAG,CAAC,EAAE;AACpD,YAAA,OAAO,IAAI,CAAC;AACb,SAAA;;;AAID,QAAA,IAAI,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,CAAA,EAAA,EAAK,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAA,CAAA,CAAG,CAAC,EAAE;AACpD,YAAA,OAAO,IAAI,CAAC;AACb,SAAA;;QAGD,IAAI,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE;AAC9B,YAAA,OAAO,IAAI,CAAC;AACb,SAAA;;;AAID,QAAA,OAAO,KAAK,CAAC;KACd;;;IAKD,SAAS,CAAC,GAAqB,EAAE,IAAiB,EAAA;AAChD,QAAA,OAAO,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,WAAW,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;KAClE;;AAGO,IAAA,uBAAuB,CAAC,KAAoB,EAAE,GAAqB,EAAE,IAAiB,EAAA;AAC5F,QAAA,IAAI,CAAC,CAAC,KAAK,KAAK,oBAAoB,CAAC,eAAe,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC,EAAE;AACzF,YAAA,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC;AACd,gBAAA,UAAU,EAAE;oBACV,aAAa,EAAE,CAAU,OAAA,EAAA,KAAK,CAAE,CAAA;AACjC,iBAAA;AACF,aAAA,CAAC,CAAC;AACJ,SAAA;AAED,QAAA,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;KACzB;AAEO,IAAA,iBAAiB,CAAC,GAAQ,EAAA;QAEhC,MAAM,WAAW,GAAG,IAAI,CAAC,SAAS,CAAC,cAAc,EAAE,CAAC;AAEpD,QAAA,IAAI,WAAW,EAAE;AACf,YAAA,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,WAAW,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE;AAC3C,gBAAA,IAAI,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,CAAG,EAAA,WAAW,CAAC,CAAC,CAAC,CAAA,CAAE,CAAC,EAAE;AAC3C,oBAAA,OAAO,IAAI,CAAC;AACb,iBAAA;AACF,aAAA;AACF,SAAA;;;AAID,QAAA,OAAO,KAAK,CAAC;KACd;;iHApEU,oBAAoB,EAAA,IAAA,EAAA,CAAA,EAAA,KAAA,EAAAD,gBAAA,EAAA,CAAA,EAAA,MAAA,EAAA,EAAA,CAAA,eAAA,CAAA,UAAA,EAAA,CAAA,CAAA;qHAApB,oBAAoB,EAAA,CAAA,CAAA;2FAApB,oBAAoB,EAAA,UAAA,EAAA,CAAA;kBADhC,UAAU;;;ACLX;;AAEG;;ACFH;;AAEG;;;;"}

package/lib/authorize.guard.d.ts

@@ -1,10 +1,15 @@
-import { ActivatedRouteSnapshot, CanActivate, RouterStateSnapshot } from '@angular/router';
+import { ActivatedRouteSnapshot, CanActivate, CanActivateChild, CanDeactivate, CanLoad, Route, Router, RouterStateSnapshot, UrlSegment, UrlTree } from '@angular/router';
 import { AuthorizeService } from './authorize.service';
+import { Observable } from "rxjs";
 import * as i0 from "@angular/core";
-export declare class AuthorizeGuard implements CanActivate {
-    private authorize;
-    constructor(authorize: AuthorizeService);
-    canActivate(_next: ActivatedRouteSnapshot, state: RouterStateSnapshot): any;
+export declare class AuthorizeGuard implements CanActivate, CanActivateChild, CanDeactivate<unknown>, CanLoad {
+    private authorizeService;
+    private router;
+    constructor(authorizeService: AuthorizeService, router: Router);
+    canActivate(next: ActivatedRouteSnapshot, state: RouterStateSnapshot): Observable<boolean | UrlTree> | Promise<boolean | UrlTree> | boolean | UrlTree;
+    canActivateChild(next: ActivatedRouteSnapshot, state: RouterStateSnapshot): Observable<boolean | UrlTree> | Promise<boolean | UrlTree> | boolean | UrlTree;
+    canDeactivate(component: unknown, currentRoute: ActivatedRouteSnapshot, currentState: RouterStateSnapshot, nextState?: RouterStateSnapshot): Observable<boolean | UrlTree> | Promise<boolean | UrlTree> | boolean | UrlTree;
+    canLoad(route: Route, segments: UrlSegment[]): Observable<boolean> | Promise<boolean> | boolean;
     private handleAuthorization;
     static ɵfac: i0.ɵɵFactoryDeclaration<AuthorizeGuard, never>;
     static ɵprov: i0.ɵɵInjectableDeclaration<AuthorizeGuard>;

package/lib/authorize.interceptor.d.ts

@@ -4,7 +4,7 @@ import { AuthorizeService } from './authorize.service';
 import * as i0 from "@angular/core";
 export declare class AuthorizeInterceptor implements HttpInterceptor {
     private authorize;
-    accessToken: string;
+    accessToken: string | null;
     constructor(authorize: AuthorizeService);
     private static isSameOriginUrl;
     intercept(req: HttpRequest<any>, next: HttpHandler): Observable<HttpEvent<any>>;

package/lib/authorize.service.d.ts

@@ -1,38 +1,45 @@
-import { BehaviorSubject } from 'rxjs';
+import { BehaviorSubject, Observable } from 'rxjs';
 import { OAuthService } from "angular-oauth2-oidc";
 import * as i0 from "@angular/core";
 export interface IUser {
     name: string;
-    role: string;
+    role: string[];
 }
 export declare class AuthorizeOptions {
-    wellKnownServiceUris: string[];
-    issuer: string;
-    redirectUri: string;
-    postLogoutRedirectUri: string;
-    clientId: string;
-    scope: string;
-    showDebugInformation: boolean;
-    sessionChecksEnabled: boolean;
+    wellKnownServiceUris?: string[];
+    issuer?: string;
+    redirectUri?: string;
+    postLogoutRedirectUri?: string;
+    clientId?: string;
+    scope?: string;
+    showDebugInformation?: boolean;
+    sessionChecksEnabled?: boolean;
 }
 export declare class AuthorizeService {
     private authorizeOptions;
     private oauthService;
     private isAuthenticated;
     private isAdmin;
+    private isDeveloper;
+    private isManager;
     private authority;
     private accessToken;
     private user;
+    private isInitialized;
+    private isInitializing;
     constructor(authorizeOptions: AuthorizeOptions, oauthService: OAuthService);
-    getServiceUris(): Array<string>;
-    getAuthority(): BehaviorSubject<string>;
+    getRoles(): Observable<Array<string>>;
+    getServiceUris(): Array<string> | null;
+    getAuthority(): BehaviorSubject<string | null>;
     getIsAuthenticated(): BehaviorSubject<boolean>;
     getIsAdmin(): BehaviorSubject<boolean>;
-    getAccessToken(): BehaviorSubject<string>;
-    getUser(): BehaviorSubject<IUser>;
+    getIsDeveloper(): BehaviorSubject<boolean>;
+    getIsManager(): BehaviorSubject<boolean>;
+    getAccessToken(): BehaviorSubject<string | null>;
+    getUser(): BehaviorSubject<IUser | null>;
     login(): void;
     logout(): void;
-    initialize(): void;
+    initialize(): Promise<void>;
     private loadUser;
     static ɵfac: i0.ɵɵFactoryDeclaration<AuthorizeService, never>;
     static ɵprov: i0.ɵɵInjectableDeclaration<AuthorizeService>;

package/lib/login-menu/login-menu.component.d.ts

@@ -5,7 +5,7 @@ import * as i0 from "@angular/core";
 export declare class LoginMenuComponent implements OnInit {
     private authorizeService;
     isAuthenticated: BehaviorSubject<boolean>;
-    userName: Observable<string>;
+    userName: Observable<string | null>;
     isAdmin: Observable<boolean>;
     constructor(authorizeService: AuthorizeService);
     ngOnInit(): void;
@@ -13,5 +13,5 @@ export declare class LoginMenuComponent implements OnInit {
     logout(): void;
     register(): void;
     static ɵfac: i0.ɵɵFactoryDeclaration<LoginMenuComponent, never>;
-    static ɵcmp: i0.ɵɵComponentDeclaration<LoginMenuComponent, "app-login-menu", never, {}, {}, never, never, false>;
+    static ɵcmp: i0.ɵɵComponentDeclaration<LoginMenuComponent, "app-login-menu", never, {}, {}, never, never, false, never>;
 }

package/package.json

@@ -1,9 +1,15 @@
 {
   "name": "@meshmakers/shared-auth",
-  "version": "0.0.0-0",
+  "version": "0.0.2304-23001",
+  "peerDependencies": {
+    "@angular/common": "^15.2.0",
+    "@angular/core": "^15.2.0",
+    "angular-oauth2-oidc": "15.0.1"
+  },
   "dependencies": {
-    "tslib": "^2.4.0"
+    "tslib": "^2.3.0"
   },
+  "sideEffects": false,
   "module": "fesm2015/meshmakers-shared-auth.mjs",
   "es2020": "fesm2020/meshmakers-shared-auth.mjs",
   "esm2020": "esm2020/meshmakers-shared-auth.mjs",
@@ -22,6 +28,5 @@
       "node": "./fesm2015/meshmakers-shared-auth.mjs",
       "default": "./fesm2020/meshmakers-shared-auth.mjs"
     }
-  },
-  "sideEffects": false
+  }
 }