@mindful-web/marko-web-identity-x 1.76.7 → 1.78.0

package/CLAUDE.md

@@ -0,0 +1,139 @@
+# marko-web-identity-x — Claude Code Context
+
+The Marko/Express wrapper for **IdentityX** (Parameter1's identity + access platform) on Mindful
+Web sites. Owns the whole authenticated-user surface: login / register / authenticate (email-link)
+/ profile / logout, content access + download gating, comments, and the server-side IdentityX API
+client. Add-ons layer on top: `marko-web-omeda-identity-x` (wraps this and adds Omeda hooks —
+how most sites install it), `marko-web-auth0-identity-x`, `marko-web-identity-x-mailchimp`. Google
+Sign-In (One-Tap + button) is **built in** here (see below).
+
+## Config model — the `IdentityXConfiguration` instance (`config.js`)
+
+Unlike most Mindful packages, config is **not** read from `site.getAsObject(...)` — it's an
+instance of `IdentityXConfiguration` (`new IdentityX({...})`), passed to the installer and injected
+onto every request as `req.identityX.config`. Read in templates via
+`req.identityX.config.get(...)` / `.getAsObject(...)` / typed getters.
+
+```js
+const IdentityX = require('@mindful-web/marko-web-identity-x/config');
+const config = new IdentityX({
+  appId: '<APP-ID>',                 // required
+  apiToken: process.env.IDENTITYX_API_TOKEN,   // required for write ops
+  requiredServerFields: ['organization', 'countryCode'],
+  requiredClientFields: [...],       // gate access until present
+  hiddenFields: [...], defaultCountryCode, booleanQuestionsLabel, gtmUserFields,
+  onHookError: newrelic.noticeError.bind(newrelic),   // hook + google-auth error reporter
+  googleAuth: { clientId, missingFieldsBehavior, autoPrompt, signInButtonEnabled }, // opt-in; see below
+});
+```
+
+Arbitrary extra keys pass through `...rest` into `options` and are reachable via `config.get(path)`.
+`endpointTypes` (`authenticate|changeEmail|login|logout|register|profile`) map to `/user/<type>`
+routes via `getEndpointFor(type)` (override with an `endpoints` config key).
+
+## Wiring (`index.js`)
+
+`IdentityX(app, config, { templates })`:
+1. `app.use(middleware(config))` — injects the service (below).
+2. `app.use('/__idx', routes)` — the JSON API router.
+3. For each `endpointType` with a supplied `template`, registers `GET <endpoint>` to render it
+   (the `authenticate` endpoint redirects to profile when a token is already present).
+
+Most sites don't call this directly — they call `omedaIdentityX(app, { idxConfig, idxRouteTemplates, … })`,
+which adds Omeda integration hooks to `idxConfig` and then calls `identityX(app, idxConfig, …)`
+internally. So **`googleAuth` goes on the `idxConfig` instance**, not the omeda params and not site config.
+
+## Middleware (`middleware.js`)
+
+Injects a per-request `IdentityX` **service** instance as `req.identityX` (+ `res.locals.identityX`),
+reads the token cookie, and sets the identity cookie for logged-in users. `IdentityXRequest.identityX`
+is the type every route/template relies on.
+
+## Routes — `/__idx/*` (`routes/index.js`)
+
+JSON API behind the Vue components: `authenticate`, `login`, `login-fields`, `logout`, `profile`,
+`access`, `download`, `change-email/{initiate,confirm}`, `comment(s)`/`comment-count`/`flag`,
+`countries`/`regions`, and **`google`** (see below). `logout.js` removes the context cookie, calls
+`onLogout` (tokenless) or `logoutAppUser`, and **clears the GIS `g_state` cookie** unconditionally.
+
+## Components / tags (`components/marko.json`)
+
+Marko wrappers (`<marko-web-identity-x-*>`) that render a matching **browser Vue component**
+(`browser/*.vue`, registered in `browser/index.js` as `IdentityX*`, overridable via
+`Custom*Component`): `form-login`, `form-authenticate`, `form-register`, `form-profile`,
+`form-change-email`, `form-logout`, `form-access`, `access`, `comment-stream`, `identify` /
+`non-auth-identify`, `context` (a `|{ user, application, fields, isEnabled }|` provider), and the
+Google tags. Vue components emit an EventBus stream bridged to `dataLayer` + p1events (see
+`browser/index.js`).
+
+## Service (`service.js`)
+
+Server-side IdentityX GraphQL client (Apollo, idx-compat). Key methods: `loadActiveContext`,
+`loadAppUserByEmail` / `findUserById` / `findUserByExternalId`, `createAppUser`,
+`impersonateAppUser`, `logoutAppUser`, `addExternalUserId`, `setUnverifiedAppUserData`,
+`generateEntityId`, `sendLoginLink`, `checkContentAccess`, cookie helpers (`setToken`,
+`setIdentityCookie`, `getIdentity`). Org-scoped writes use `getOrgUserApiToken()`.
+
+## Hooks (`hooks.js`)
+
+`onLoadActiveContext`, `onLoginLinkSent`, `onAuthenticationSuccess`, `onLogout`,
+`onChangeEmailLinkSent`, `onChangeEmailSuccess`, `onUserProfileUpdate`. Registered via
+`config.addHook({ name, fn, shouldAwait })` and invoked with `utils/call-hooks-for`. This is the
+seam Omeda uses for rapid-identify + subscription sync. **Note:** `onLogout` currently fires only
+in the tokenless logout branch — a "fire `onLogout` always" change would let the `g_state` clear
+become a hook rather than inline route code.
+
+## Google Sign-In (One-Tap + button) — folded in 2026-07
+
+Verifies a Google Identity Services (GIS) credential server-side and drops the user into the
+standard IdentityX session, bypassing the email-link step. Handles the One-Tap prompt **and** the
+rendered "Sign in with Google" button; both post to `POST /__idx/google`. **Dormant until
+`googleAuth.clientId` is set** — no client id ⇒ nothing renders and the route 400s. Previously a
+standalone `marko-web-google-identity-x` package; folded in here because it was ~all ceremony gated
+on a client id and already depended on idx internals.
+
+**Config** (on the IdentityX config, above): `clientId` (master gate — per-deploy env),
+`missingFieldsBehavior` (`profile-gate` default | `immediate` | `relaxed`; `relaxed` is a doc-only
+alias of `immediate` — only `profile-gate` is special-cased), `autoPrompt` (site-wide floating
+overlay), `signInButtonEnabled` (button; default true).
+
+**Route — `routes/google.js` (`POST /__idx/google`).** Verify the JWT →
+`loadAppUserByEmail`/`createAppUser` (**email is the primary key**) → link the Google `sub` as a
+supplementary external id under `{ provider:'google', tenant:'oauth', type:'account' }` (idempotent;
+conflict-guarded; non-fatal via `config.get('onHookError')`) → `impersonateAppUser({ method:'GOOGLE_ONE_TAP', verify:true })`
+→ backfill given/family name only if absent → fire `onLoginLinkSent` **then** (re-fetch)
+`onAuthenticationSuccess`, same order/hooks as email-link so Omeda rapid-identify + subscription
+sync run identically. `profile-gate` computes `requiresUserInput` by checking required fields are
+non-empty (deliberately not `forceProfileReVerification`). Responds `{ ok, requiresUserInput,
+redirectTo, user, entity, … }`; the client redirects to `/user/profile` when input is required.
+
+**Tags** (`components/marko.json`, config read from `req.identityX.config`):
+- `<marko-web-identity-x-google-init>` — loads the GSI client + defines `window.handleGoogleOneTapCredential`;
+  shows the One-Tap prompt when `autoPrompt`. The button depends on this being on the page.
+- `<marko-web-identity-x-google-sign-in-button client-id= redirect-to= label=>` — the button; self-hides
+  when unconfigured or `signInButtonEnabled` is false.
+
+**Auto-rendering.** Both tags render inside `form-login.marko` + `form-authenticate.marko`, so the
+login/authenticate pages get the button with **no per-site edit**. For the site-wide floating prompt
+(`autoPrompt: true`), a site additionally drops `<marko-web-identity-x-google-init/>` once in its
+document layout, gated on `!req.identityX.token`. The button tag can also be placed in a content
+meter / gate.
+
+**CSS.** `.google-sign-in` styles ship in `marko-web-theme-monorail/scss/components/_identity-x.scss`
+(with the rest of the auth CSS) — no separate import.
+
+**Logout.** `routes/logout.js` clears the GIS `g_state` cookie so a later sign-in with a *different*
+Google account isn't blocked by stale auto-select state (harmless no-op when Google Sign-In is unused).
+
+**Deliberate decisions / limitations.** `loginSource: 'google-one-tap'` and
+`method: 'GOOGLE_ONE_TAP'` are emitted for BOTH surfaces (don't distinguish button vs prompt) —
+kept for analytics/enum continuity. One success p1event (`Identity / Authenticate`, label
+`Google Sign In` for the button via GIS `select_by` `btn*`, else `Google One Tap`), fired client-side
+after `setIdentity`. `google-auth-library` is now a base-idx dependency (every site pulls it,
+server-only) — accepted because the feature is gated on the client id. The Google OAuth app must
+list each site origin as an authorized JavaScript origin or the surfaces silently no-show.
+
+## Fleet / rollout
+
+Not tracked in-repo. The Google-auth architecture change + fleet rollout plan lives outside the repo
+at `../GOOGLE-AUTH-ROLLOUT.md` (mindful working dir).

package/README.md

@@ -197,4 +197,52 @@ Each component will emit an event when an error is encountered and include the e
 | `identity-x-profile-errored` | `{ label, message: '...', ...additionalEventData }`
 | `identity-x-comment-post-errored` | `{ label, message: '...', ...additionalEventData }`
 | `identity-x-comment-report-errored` | `{ label, message: '...', ...additionalEventData }`
+
+## Google Sign-In (One-Tap + button)
+
+Built in. Verifies a Google Identity Services (GIS) credential server-side and drops the user
+into the standard IdentityX session, bypassing the email-link step. Handles both the One-Tap
+prompt and the rendered "Sign in with Google" button; both post to `POST /__idx/google`.
+
+**Dormant until configured** — with no `clientId`, nothing renders and the route 400s. Enable
+per-site by adding a `googleAuth` block to the IdentityX config:
+
+```js
+const config = new IdentityX({
+  appId: '<MY-APPLICATION-ID>',
+  googleAuth: {
+    clientId: process.env.GOOGLE_AUTH_CLIENT_ID || '', // GIS OAuth client id — the master gate
+    missingFieldsBehavior: 'profile-gate',             // 'profile-gate' | 'immediate' | 'relaxed'
+    autoPrompt: false,                                 // floating One-Tap overlay
+    signInButtonEnabled: true,                         // render the button
+  },
+});
+```
+
+Reading the values from env is optional — set literals here if you'd rather not manage infra
+env vars. The client id's Google OAuth app must list each site origin as an **authorized
+JavaScript origin**, or the prompt/button silently no-shows.
+
+`missingFieldsBehavior`: `profile-gate` authenticates immediately but forces profile completion
+before gated content; `immediate`/`relaxed` grant access with fields left blank (`relaxed` is a
+doc-only alias of `immediate`).
+
+**Rendering.** The button + GIS init are rendered automatically inside the `form-login` and
+`form-authenticate` templates — no per-site placement, and both self-hide when unconfigured. For
+the **site-wide floating One-Tap prompt** (`autoPrompt: true`), also drop
+`<marko-web-identity-x-google-init/>` once in your document layout, gated on an unauthenticated
+user, e.g. `<if(!req.identityX.token)> <marko-web-identity-x-google-init/> </if>`. The button tag
+(`<marko-web-identity-x-google-sign-in-button redirect-to=... />`) can also be placed in a content meter
+or gate if desired.
+
+**CSS.** Styles ship with the rest of the auth CSS in `marko-web-theme-monorail`
+(`scss/components/_identity-x.scss`) — no separate import.
+
+**Logout.** The idx logout route clears the GIS `g_state` cookie so a later sign-in with a
+*different* Google account isn't blocked by stale auto-select state (harmless no-op when Google
+Sign-In isn't used).
+
+The Google account id (JWT `sub`) is persisted as a supplementary idx external id under
+`{ provider: 'google', tenant: 'oauth', type: 'account' }`; email stays the primary key.
+Non-fatal linkage errors report through the config's `onHookError`.
 | `identity-x-comment-stream-errored` | `{ label, message: '...', ...additionalEventData }`

package/browser/access.vue

@@ -231,6 +231,10 @@ export default {
       type: Object,
       default: null,
     },
+    contentEntity: {
+      type: String,
+      default: null,
+    },
     customBooleanFieldAnswers: {
       type: Array,
       default: () => [],
@@ -351,7 +355,11 @@ export default {
       this.isLoading = true;
       this.didSubmit = false;
       try {
-        const additionalEventData = { ...this.additionalEventData, actionSource: this.loginSource };
+        const additionalEventData = {
+          ...this.additionalEventData,
+          actionSource: this.loginSource,
+          ...(this.contentEntity && { ent: this.contentEntity }),
+        };
         let data = {};
         if (this.canUpdateProfile) {
           const res = await post('/profile', { ...this.user, additionalEventData });
@@ -421,7 +429,10 @@ export default {
           contentId: content.id,
           contentType: content.type,
           userId: this.user.id,
-          additionalEventData,
+          additionalEventData: {
+            ...additionalEventData,
+            ...(this.contentEntity && { ent: this.contentEntity }),
+          },
         }, data.entity);
       } catch (e) {
         this.error = e;

package/browser/comments/create.vue

@@ -57,6 +57,10 @@ export default {
       type: String,
       default: 'en',
     },
+    contentEntity: {
+      type: String,
+      default: null,
+    },
   },
 
   /**
@@ -96,10 +100,14 @@ export default {
       this.isLoading = true;
       const { currentDisplayName, body, stream } = this;
       try {
+        const additionalEventData = {
+          ...(this.contentEntity && { ent: this.contentEntity }),
+        };
         const res = await post('/comment', {
           displayName: currentDisplayName,
           body,
           stream,
+          additionalEventData,
         });
         const data = await res.json();
         if (!res.ok) throw new FormError(data.message, res.status);

package/browser/comments/stream.vue

@@ -20,7 +20,7 @@
         <create
           v-else
           :display-name="activeUser.displayName"
-          :stream="{ identifier, title, description, url }"
+          :stream="{ identifier, type, title, description, url }"
           @comment-post-submitted="load"
           :lang="lang"
         />
@@ -34,7 +34,7 @@
         </p>
         <login
           :class="element('login-form')"
-          :additional-event-data="additionalEventData"
+          :additional-event-data="enrichedAdditionalEventData"
           :source="loginSource"
           :endpoints="endpoints"
           :custom-select-field-answers="loginCustomSelectFieldAnswers"
@@ -133,6 +133,10 @@ export default {
       type: String,
       required: true,
     },
+    type: {
+      type: String,
+      default: undefined,
+    },
     title: {
       type: String,
       default: undefined,
@@ -241,6 +245,10 @@ export default {
       type: String,
       default: 'en',
     },
+    contentEntity: {
+      type: String,
+      default: null,
+    },
   },
 
   data: () => ({
@@ -280,6 +288,16 @@ export default {
     approvedComments() {
       return this.comments.filter((comment) => comment.approved);
     },
+
+    /**
+     *
+     */
+    enrichedAdditionalEventData() {
+      return {
+        ...(this.additionalEventData || {}),
+        ...(this.contentEntity && { ent: this.contentEntity }),
+      };
+    },
   },
 
   /**

package/browser/download.vue

@@ -238,6 +238,10 @@ export default {
       type: Object,
       default: null,
     },
+    contentEntity: {
+      type: String,
+      default: null,
+    },
     customBooleanFieldAnswers: {
       type: Array,
       default: () => [],
@@ -354,7 +358,11 @@ export default {
       this.isLoading = true;
       this.didSubmit = false;
       try {
-        const additionalEventData = { ...this.additionalEventData, actionSource: this.loginSource };
+        const additionalEventData = {
+          ...this.additionalEventData,
+          actionSource: this.loginSource,
+          ...(this.contentEntity && { ent: this.contentEntity }),
+        };
         let data = {};
         if (this.canUpdateProfile) {
           const res = await post('/profile', { ...this.user, additionalEventData });
@@ -422,7 +430,10 @@ export default {
           contentType: content.type,
           companyId: company.id,
           userId: this.user.id,
-          additionalEventData,
+          additionalEventData: {
+            ...additionalEventData,
+            ...(this.contentEntity && { ent: this.contentEntity }),
+          },
         }, entity);
         this.downloaded.push(content.id);
       }

package/components/access.marko.js

@@ -2,7 +2,7 @@
 "use strict";
 
 var marko_template = module.exports = require("marko/dist/html").t(__filename),
-    marko_componentType = "/@mindful-web/marko-web-identity-x$1.76.7/components/access.marko",
+    marko_componentType = "/@mindful-web/marko-web-identity-x$1.78.0/components/access.marko",
     marko_component = require("./access.marko"),
     marko_renderer = require("marko/dist/runtime/components/renderer"),
     module_objectPath_module = require("@mindful-web/object-path"),
@@ -53,7 +53,7 @@ marko_template._ = marko_renderer(render, {
   }, marko_component);
 
 marko_template.meta = {
-    id: "/@mindful-web/marko-web-identity-x$1.76.7/components/access.marko",
+    id: "/@mindful-web/marko-web-identity-x$1.78.0/components/access.marko",
     component: "./access.marko",
     tags: [
       "@mindful-web/marko-core/components/resolve.marko"

package/components/comment-stream.marko.js

@@ -2,7 +2,7 @@
 "use strict";
 
 var marko_template = module.exports = require("marko/dist/html").t(__filename),
-    marko_componentType = "/@mindful-web/marko-web-identity-x$1.76.7/components/comment-stream.marko",
+    marko_componentType = "/@mindful-web/marko-web-identity-x$1.78.0/components/comment-stream.marko",
     marko_component = require("./comment-stream.marko"),
     marko_renderer = require("marko/dist/runtime/components/renderer"),
     module_objectPath_module = require("@mindful-web/object-path"),
@@ -85,7 +85,7 @@ marko_template._ = marko_renderer(render, {
   }, marko_component);
 
 marko_template.meta = {
-    id: "/@mindful-web/marko-web-identity-x$1.76.7/components/comment-stream.marko",
+    id: "/@mindful-web/marko-web-identity-x$1.78.0/components/comment-stream.marko",
     component: "./comment-stream.marko",
     tags: [
       "@mindful-web/marko-web/components/browser-component.marko",

package/components/context.marko.js

@@ -2,7 +2,7 @@
 "use strict";
 
 var marko_template = module.exports = require("marko/dist/html").t(__filename),
-    marko_componentType = "/@mindful-web/marko-web-identity-x$1.76.7/components/context.marko",
+    marko_componentType = "/@mindful-web/marko-web-identity-x$1.78.0/components/context.marko",
     marko_component = require("./context.marko"),
     marko_renderer = require("marko/dist/runtime/components/renderer"),
     marko_dynamicTag = require("marko/dist/runtime/helpers/dynamic-tag"),
@@ -49,7 +49,7 @@ marko_template._ = marko_renderer(render, {
   }, marko_component);
 
 marko_template.meta = {
-    id: "/@mindful-web/marko-web-identity-x$1.76.7/components/context.marko",
+    id: "/@mindful-web/marko-web-identity-x$1.78.0/components/context.marko",
     component: "./context.marko",
     tags: [
       "@mindful-web/marko-core/components/resolve.marko"

package/components/form-access.marko

@@ -1,6 +1,7 @@
 
 import defaultValue from "@mindful-web/marko-core/utils/default-value";
 import { get, getAsArray, getAsObject } from "@mindful-web/object-path";
+import baseContentEntity from "@mindful-web/marko-web-p1-events/utils/base-content-entity";
 
 import getCreateUserCustomFields from '../utils/get-create-user-custom-fields'
 import getFormCustomFields from '../utils/get-form-custom-fields'
@@ -53,9 +54,12 @@ $ const loginButtonLabels = defaultValue(input.loginButtonLabels, {
         siteContext: content.siteContext,
       });
 
+      $ const contentEntity = (content && content.id && content.type) ? baseContentEntity(content.id, content.type) : null;
+
       $ const props = {
         // Access form props
         content: formAccessContent(content),
+        contentEntity: contentEntity,
         title: form.title,
         fieldRows: form.fieldRows,
         loginSource: "contentAccess",

package/components/form-access.marko.js

@@ -2,7 +2,7 @@
 "use strict";
 
 var marko_template = module.exports = require("marko/dist/html").t(__filename),
-    marko_componentType = "/@mindful-web/marko-web-identity-x$1.76.7/components/form-access.marko",
+    marko_componentType = "/@mindful-web/marko-web-identity-x$1.78.0/components/form-access.marko",
     marko_component = require("./form-access.marko"),
     marko_renderer = require("marko/dist/runtime/components/renderer"),
     module_defaultValue = require("@mindful-web/marko-core/utils/default-value"),
@@ -12,6 +12,8 @@ var marko_template = module.exports = require("marko/dist/html").t(__filename),
     get = module_objectPath_module.get,
     getAsArray = module_objectPath_module.getAsArray,
     getAsObject = module_objectPath_module.getAsObject,
+    module_baseContentEntity = require("@mindful-web/marko-web-p1-events/utils/base-content-entity"),
+    baseContentEntity = module_baseContentEntity.default || module_baseContentEntity,
     module_getCreateUserCustomFields = require("../utils/get-create-user-custom-fields"),
     getCreateUserCustomFields = module_getCreateUserCustomFields.default || module_getCreateUserCustomFields,
     module_getFormCustomFields = require("../utils/get-form-custom-fields"),
@@ -93,9 +95,12 @@ function render(input, out, __component, component, state) {
         siteContext: content.siteContext,
       });
 
+          const contentEntity = (content && content.id && content.type) ? baseContentEntity(content.id, content.type) : null;
+
           const props = {
         // Access form props
         content: formAccessContent(content),
+        contentEntity: contentEntity,
         title: form.title,
         fieldRows: form.fieldRows,
         loginSource: "contentAccess",
@@ -174,7 +179,7 @@ marko_template._ = marko_renderer(render, {
   }, marko_component);
 
 marko_template.meta = {
-    id: "/@mindful-web/marko-web-identity-x$1.76.7/components/form-access.marko",
+    id: "/@mindful-web/marko-web-identity-x$1.78.0/components/form-access.marko",
     component: "./form-access.marko",
     tags: [
       "@mindful-web/marko-web/components/browser-component.marko",

package/components/form-authenticate.marko

@@ -32,5 +32,7 @@ $ const lang = input.lang || defaultValue(site.config.lang, "en");
       lang
     };
     <marko-web-browser-component name="IdentityXAuthenticate" props=props />
+    <marko-web-identity-x-google-init/>
+    <marko-web-identity-x-google-sign-in-button redirect-to=query.redirectTo/>
   </marko-web-identity-x-context>
 </if>

package/components/form-authenticate.marko.js

@@ -2,7 +2,7 @@
 "use strict";
 
 var marko_template = module.exports = require("marko/dist/html").t(__filename),
-    marko_componentType = "/@mindful-web/marko-web-identity-x$1.76.7/components/form-authenticate.marko",
+    marko_componentType = "/@mindful-web/marko-web-identity-x$1.78.0/components/form-authenticate.marko",
     marko_component = require("./form-authenticate.marko"),
     marko_renderer = require("marko/dist/runtime/components/renderer"),
     module_objectPath_module = require("@mindful-web/object-path"),
@@ -13,6 +13,10 @@ var marko_template = module.exports = require("marko/dist/html").t(__filename),
     marko_web_browser_component_template = require("@mindful-web/marko-web/components/browser-component.marko"),
     marko_loadTag = require("marko/dist/runtime/helpers/load-tag"),
     marko_web_browser_component_tag = marko_loadTag(marko_web_browser_component_template),
+    marko_web_identity_x_google_init_template = require("./google-init.marko"),
+    marko_web_identity_x_google_init_tag = marko_loadTag(marko_web_identity_x_google_init_template),
+    marko_web_identity_x_google_sign_in_button_template = require("./google-sign-in-button.marko"),
+    marko_web_identity_x_google_sign_in_button_tag = marko_loadTag(marko_web_identity_x_google_sign_in_button_template),
     marko_web_identity_x_context_template = require("./context.marko"),
     marko_web_identity_x_context_tag = marko_loadTag(marko_web_identity_x_context_template);
 
@@ -61,6 +65,12 @@ function render(input, out, __component, component, state) {
               name: "IdentityXAuthenticate",
               props: props
             }, out, __component, "1");
+
+          marko_web_identity_x_google_init_tag({}, out, __component, "2");
+
+          marko_web_identity_x_google_sign_in_button_tag({
+              redirectTo: query.redirectTo
+            }, out, __component, "3");
         }
       }, out, __component, "0");
   }
@@ -71,10 +81,12 @@ marko_template._ = marko_renderer(render, {
   }, marko_component);
 
 marko_template.meta = {
-    id: "/@mindful-web/marko-web-identity-x$1.76.7/components/form-authenticate.marko",
+    id: "/@mindful-web/marko-web-identity-x$1.78.0/components/form-authenticate.marko",
     component: "./form-authenticate.marko",
     tags: [
       "@mindful-web/marko-web/components/browser-component.marko",
+      "./google-init.marko",
+      "./google-sign-in-button.marko",
       "./context.marko"
     ]
   };

package/components/form-change-email.marko.js

@@ -2,7 +2,7 @@
 "use strict";
 
 var marko_template = module.exports = require("marko/dist/html").t(__filename),
-    marko_componentType = "/@mindful-web/marko-web-identity-x$1.76.7/components/form-change-email.marko",
+    marko_componentType = "/@mindful-web/marko-web-identity-x$1.78.0/components/form-change-email.marko",
     marko_component = require("./form-change-email.marko"),
     marko_renderer = require("marko/dist/runtime/components/renderer"),
     module_objectPath_module = require("@mindful-web/object-path"),
@@ -59,7 +59,7 @@ marko_template._ = marko_renderer(render, {
   }, marko_component);
 
 marko_template.meta = {
-    id: "/@mindful-web/marko-web-identity-x$1.76.7/components/form-change-email.marko",
+    id: "/@mindful-web/marko-web-identity-x$1.78.0/components/form-change-email.marko",
     component: "./form-change-email.marko",
     tags: [
       "@mindful-web/marko-web/components/browser-component.marko",

package/components/form-login.marko

@@ -40,6 +40,8 @@ $ const withFields = defaultValue(input.withFields, false);
     };
     <if(isEnabled)>
       <marko-web-browser-component name="IdentityXLogin" props=props />
+      <marko-web-identity-x-google-init/>
+      <marko-web-identity-x-google-sign-in-button redirect-to=input.redirect/>
     </if>
   </marko-web-identity-x-context>
 </if>

package/components/form-login.marko.js

@@ -2,7 +2,7 @@
 "use strict";
 
 var marko_template = module.exports = require("marko/dist/html").t(__filename),
-    marko_componentType = "/@mindful-web/marko-web-identity-x$1.76.7/components/form-login.marko",
+    marko_componentType = "/@mindful-web/marko-web-identity-x$1.78.0/components/form-login.marko",
     marko_component = require("./form-login.marko"),
     marko_renderer = require("marko/dist/runtime/components/renderer"),
     module_objectPath_module = require("@mindful-web/object-path"),
@@ -15,6 +15,10 @@ var marko_template = module.exports = require("marko/dist/html").t(__filename),
     marko_web_browser_component_template = require("@mindful-web/marko-web/components/browser-component.marko"),
     marko_loadTag = require("marko/dist/runtime/helpers/load-tag"),
     marko_web_browser_component_tag = marko_loadTag(marko_web_browser_component_template),
+    marko_web_identity_x_google_init_template = require("./google-init.marko"),
+    marko_web_identity_x_google_init_tag = marko_loadTag(marko_web_identity_x_google_init_template),
+    marko_web_identity_x_google_sign_in_button_template = require("./google-sign-in-button.marko"),
+    marko_web_identity_x_google_sign_in_button_tag = marko_loadTag(marko_web_identity_x_google_sign_in_button_template),
     marko_web_identity_x_context_template = require("./context.marko"),
     marko_web_identity_x_context_tag = marko_loadTag(marko_web_identity_x_context_template);
 
@@ -71,6 +75,12 @@ function render(input, out, __component, component, state) {
                 name: "IdentityXLogin",
                 props: props
               }, out, __component, "1");
+
+            marko_web_identity_x_google_init_tag({}, out, __component, "2");
+
+            marko_web_identity_x_google_sign_in_button_tag({
+                redirectTo: input.redirect
+              }, out, __component, "3");
           }
         }
       }, out, __component, "0");
@@ -82,10 +92,12 @@ marko_template._ = marko_renderer(render, {
   }, marko_component);
 
 marko_template.meta = {
-    id: "/@mindful-web/marko-web-identity-x$1.76.7/components/form-login.marko",
+    id: "/@mindful-web/marko-web-identity-x$1.78.0/components/form-login.marko",
     component: "./form-login.marko",
     tags: [
       "@mindful-web/marko-web/components/browser-component.marko",
+      "./google-init.marko",
+      "./google-sign-in-button.marko",
       "./context.marko"
     ]
   };

package/components/form-logout.marko.js

@@ -2,7 +2,7 @@
 "use strict";
 
 var marko_template = module.exports = require("marko/dist/html").t(__filename),
-    marko_componentType = "/@mindful-web/marko-web-identity-x$1.76.7/components/form-logout.marko",
+    marko_componentType = "/@mindful-web/marko-web-identity-x$1.78.0/components/form-logout.marko",
     marko_renderer = require("marko/dist/runtime/components/renderer"),
     module_defaultValue = require("@mindful-web/marko-core/utils/default-value"),
     defaultValue = module_defaultValue.default || module_defaultValue,
@@ -29,7 +29,7 @@ marko_template._ = marko_renderer(render, {
   });
 
 marko_template.meta = {
-    id: "/@mindful-web/marko-web-identity-x$1.76.7/components/form-logout.marko",
+    id: "/@mindful-web/marko-web-identity-x$1.78.0/components/form-logout.marko",
     tags: [
       "@mindful-web/marko-web/components/browser-component.marko"
     ]

package/components/form-profile.marko.js

@@ -2,7 +2,7 @@
 "use strict";
 
 var marko_template = module.exports = require("marko/dist/html").t(__filename),
-    marko_componentType = "/@mindful-web/marko-web-identity-x$1.76.7/components/form-profile.marko",
+    marko_componentType = "/@mindful-web/marko-web-identity-x$1.78.0/components/form-profile.marko",
     marko_component = require("./form-profile.marko"),
     marko_renderer = require("marko/dist/runtime/components/renderer"),
     module_objectPath_module = require("@mindful-web/object-path"),
@@ -84,7 +84,7 @@ marko_template._ = marko_renderer(render, {
   }, marko_component);
 
 marko_template.meta = {
-    id: "/@mindful-web/marko-web-identity-x$1.76.7/components/form-profile.marko",
+    id: "/@mindful-web/marko-web-identity-x$1.78.0/components/form-profile.marko",
     component: "./form-profile.marko",
     tags: [
       "@mindful-web/marko-web/components/browser-component.marko",

package/components/form-register.marko.js

@@ -2,7 +2,7 @@
 "use strict";
 
 var marko_template = module.exports = require("marko/dist/html").t(__filename),
-    marko_componentType = "/@mindful-web/marko-web-identity-x$1.76.7/components/form-register.marko",
+    marko_componentType = "/@mindful-web/marko-web-identity-x$1.78.0/components/form-register.marko",
     marko_renderer = require("marko/dist/runtime/components/renderer"),
     marko_assign = require("marko/dist/runtime/helpers/assign"),
     marko_web_identity_x_form_login_template = require("./form-login.marko"),
@@ -25,7 +25,7 @@ marko_template._ = marko_renderer(render, {
   });
 
 marko_template.meta = {
-    id: "/@mindful-web/marko-web-identity-x$1.76.7/components/form-register.marko",
+    id: "/@mindful-web/marko-web-identity-x$1.78.0/components/form-register.marko",
     tags: [
       "./form-login.marko"
     ]