@mintplayer/ng-spark-auth 22.2.1 → 22.6.0

package/fesm2022/mintplayer-ng-spark-auth-routes.mjs

@@ -1,4 +1,4 @@
-import { SPARK_AUTH_ROUTE_PATHS } from '@mintplayer/ng-spark-auth/models';
+import { SPARK_AUTH_ROUTE_PATHS, SPARK_EXTERNAL_PROVIDERS } from '@mintplayer/ng-spark-auth/models';
 
 /** The routed path for an entry, independent of how its component is loaded. */
 function entryPath(entry, defaultPath) {
@@ -14,57 +14,145 @@ function child(entry, path, defaultLoader) {
 /**
  * The routes for Spark's authentication pages.
  *
- * `config.localCredentials` chooses how much of the email/password family to route, mirroring the
- * server's `SparkLocalCredentials`. `GET /spark/auth/capabilities` reports what the server is
- * actually running, so the two can be checked against each other.
+ * **Nothing is mounted unless a feature asks for it.** Passing no features emits no pages at all —
+ * opt-in enforced by construction rather than by a flag, matching `provideHttpClient(withFetch())`
+ * and `provideRouter(withComponentInputBinding())`. Before this the pages mounted by default and an
+ * application had to opt *out*, so every app shipped a registration form whether or not it wanted
+ * one.
  *
- * The `import()` expressions live *inside* the branches that need them. That placement is the point:
- * a bundler decides whether to emit a lazy chunk from whether the `import()` call site is reachable,
- * not from whether the route object referencing it survives — so filtering the children array after
- * the fact would still ship every page. Excluded pages must have no reachable `import()` at all.
+ * ```ts
+ * sparkAuthRoutes(
+ *   withLocalLogin(),
+ *   withRegistration(),
+ *   withExternalLogin(githubProvider(), facebookProvider()),
+ * )
+ * ```
  *
- * `SPARK_AUTH_ROUTE_PATHS` is still provided in full. The excluded pages are excluded together, so
- * nothing that survives can link to something that does not, and the token stays `Required`.
+ * The `import()` expressions live *inside* each feature. That placement is the point: a bundler
+ * decides whether to emit a lazy chunk from whether the `import()` call site is reachable, not from
+ * whether the route object referencing it survives — so filtering a children array after the fact
+ * would still ship every page. A page nobody opted into has no reachable `import()` at all.
  */
-function sparkAuthRoutes(config) {
-    const mode = config?.localCredentials ?? 'full';
-    const paths = {
-        signIn: '/' + entryPath(config?.signIn, 'sign-in'),
-        login: '/' + entryPath(config?.login, 'login'),
-        twoFactor: '/' + entryPath(config?.twoFactor, 'login/two-factor'),
-        register: '/' + entryPath(config?.register, 'register'),
-        forgotPassword: '/' + entryPath(config?.forgotPassword, 'forgot-password'),
-        resetPassword: '/' + entryPath(config?.resetPassword, 'reset-password'),
-    };
+function sparkAuthRoutes(...features) {
     const children = [];
-    // Only when local credentials are limited. In 'full' mode the login page is already the landing
-    // page, and emitting a second one would change the routes of every app that never opted in.
-    if (mode !== 'full') {
-        children.push(child(config?.signIn, entryPath(config?.signIn, 'sign-in'), () => import('@mintplayer/ng-spark-auth/sign-in').then(m => m.SparkSignInComponent)));
-    }
-    if (mode !== 'disabled') {
-        children.push(child(config?.login, entryPath(config?.login, 'login'), () => import('@mintplayer/ng-spark-auth/login').then(m => m.SparkLoginComponent)), 
-        // Reachable only from the login page's RequiresTwoFactor branch, and it posts to the same
-        // /login endpoint — so it belongs to password sign-in, not to authentication in general.
-        child(config?.twoFactor, entryPath(config?.twoFactor, 'login/two-factor'), () => import('@mintplayer/ng-spark-auth/two-factor').then(m => m.SparkTwoFactorComponent)), child(config?.forgotPassword, entryPath(config?.forgotPassword, 'forgot-password'), () => import('@mintplayer/ng-spark-auth/forgot-password').then(m => m.SparkForgotPasswordComponent)), child(config?.resetPassword, entryPath(config?.resetPassword, 'reset-password'), () => import('@mintplayer/ng-spark-auth/reset-password').then(m => m.SparkResetPasswordComponent)));
-    }
-    if (mode === 'full') {
-        children.push(child(config?.register, entryPath(config?.register, 'register'), () => import('@mintplayer/ng-spark-auth/register').then(m => m.SparkRegisterComponent)));
+    const paths = {};
+    const externalProviders = [];
+    for (const feature of features) {
+        children.push(...feature.children);
+        Object.assign(paths, feature.paths);
+        if (feature.providers)
+            externalProviders.push(...feature.providers);
     }
     return [
         {
             path: '',
             providers: [
                 { provide: SPARK_AUTH_ROUTE_PATHS, useValue: paths },
+                { provide: SPARK_EXTERNAL_PROVIDERS, useValue: externalProviders },
             ],
             children,
         },
     ];
 }
+/**
+ * Mounts the email/password family: login, two-factor, forgot-password, reset-password.
+ *
+ * These four are one feature rather than four because they form a star centred on the login page and
+ * every template dereferences its siblings unconditionally — removing any proper subset leaves a
+ * dangling link. Registration is genuinely separable, and is its own feature.
+ *
+ * Two-factor belongs here because it is reachable only from the login page's `RequiresTwoFactor`
+ * branch and posts to the same `/login` endpoint: it is part of password sign-in, not of
+ * authentication in general.
+ */
+function withLocalLogin(entries) {
+    const login = entryPath(entries?.login, 'login');
+    const twoFactor = entryPath(entries?.twoFactor, 'login/two-factor');
+    const forgotPassword = entryPath(entries?.forgotPassword, 'forgot-password');
+    const resetPassword = entryPath(entries?.resetPassword, 'reset-password');
+    return {
+        paths: {
+            login: '/' + login,
+            twoFactor: '/' + twoFactor,
+            forgotPassword: '/' + forgotPassword,
+            resetPassword: '/' + resetPassword,
+        },
+        children: [
+            child(entries?.login, login, () => import('@mintplayer/ng-spark-auth/login').then(m => m.SparkLoginComponent)),
+            child(entries?.twoFactor, twoFactor, () => import('@mintplayer/ng-spark-auth/two-factor').then(m => m.SparkTwoFactorComponent)),
+            child(entries?.forgotPassword, forgotPassword, () => import('@mintplayer/ng-spark-auth/forgot-password').then(m => m.SparkForgotPasswordComponent)),
+            child(entries?.resetPassword, resetPassword, () => import('@mintplayer/ng-spark-auth/reset-password').then(m => m.SparkResetPasswordComponent)),
+        ],
+    };
+}
+/**
+ * Mounts the self-service registration page.
+ *
+ * Separate from {@link withLocalLogin} because the two decisions genuinely are separate: an
+ * application whose accounts are provisioned by an administrator still needs password sign-in and
+ * password reset. Mount it only alongside a server whose `SparkLocalCredentials` is `Full` — with
+ * `SignInOnly` the endpoint it posts to is not mapped.
+ */
+function withRegistration(entry) {
+    const register = entryPath(entry, 'register');
+    return {
+        paths: { register: '/' + register },
+        children: [
+            child(entry, register, () => import('@mintplayer/ng-spark-auth/register').then(m => m.SparkRegisterComponent)),
+        ],
+    };
+}
+/**
+ * Mounts the sign-in landing page — a button per external provider the *server* reports.
+ *
+ * Accepts provider declarations and, in any position, one options object for the page's own path;
+ * the two shapes are disjoint, so `withExternalLogin(githubProvider(), facebookProvider())` and
+ * `withExternalLogin({ signIn: 'landing' }, githubProvider())` both read naturally.
+ *
+ * Declaring no providers is valid and useful: the page still renders whatever
+ * `GET /spark/auth/capabilities` reports, using default buttons.
+ */
+function withExternalLogin(...providersOrOptions) {
+    const providers = providersOrOptions.filter(isProvider);
+    const options = providersOrOptions.find((p) => !isProvider(p));
+    const signIn = entryPath(options?.signIn, 'sign-in');
+    return {
+        paths: { signIn: '/' + signIn },
+        providers,
+        children: [
+            child(options?.signIn, signIn, () => import('@mintplayer/ng-spark-auth/sign-in').then(m => m.SparkSignInComponent)),
+        ],
+    };
+}
+function isProvider(value) {
+    return typeof value.scheme === 'string';
+}
+/**
+ * Presentation for one provider's button, keyed by the scheme the server reports.
+ *
+ * The generic form. `githubProvider()` and friends are this with a scheme and an icon filled in —
+ * they exist so the common case does not require knowing the scheme string, not because the library
+ * has an opinion about which providers exist.
+ */
+function externalProvider(scheme, presentation) {
+    return { scheme, ...presentation };
+}
+function githubProvider(presentation) {
+    return externalProvider('GitHub', { iconClass: 'bi bi-github', ...presentation });
+}
+function googleProvider(presentation) {
+    return externalProvider('Google', { iconClass: 'bi bi-google', ...presentation });
+}
+function facebookProvider(presentation) {
+    return externalProvider('Facebook', { iconClass: 'bi bi-facebook', ...presentation });
+}
+function microsoftProvider(presentation) {
+    return externalProvider('Microsoft', { iconClass: 'bi bi-microsoft', ...presentation });
+}
 
 /**
  * Generated bundle index. Do not edit.
  */
 
-export { sparkAuthRoutes };
+export { externalProvider, facebookProvider, githubProvider, googleProvider, microsoftProvider, sparkAuthRoutes, withExternalLogin, withLocalLogin, withRegistration };
 //# sourceMappingURL=mintplayer-ng-spark-auth-routes.mjs.map

package/fesm2022/mintplayer-ng-spark-auth-routes.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"mintplayer-ng-spark-auth-routes.mjs","sources":["../../routes/src/spark-auth-routes.ts","../../routes/mintplayer-ng-spark-auth-routes.ts"],"sourcesContent":["import { SPARK_AUTH_ROUTE_PATHS, SparkAuthRouteConfig, SparkAuthRouteEntry, SparkAuthRoutePaths } from '@mintplayer/ng-spark-auth/models';\n\ntype Loader = () => Promise<any>;\n\ninterface Child {\n  path: string;\n  loadComponent: Loader;\n}\n\n/** The routed path for an entry, independent of how its component is loaded. */\nfunction entryPath(entry: SparkAuthRouteEntry | undefined, defaultPath: string): string {\n  if (entry === undefined) return defaultPath;\n  return typeof entry === 'string' ? entry : entry.path;\n}\n\n/** An explicitly supplied component wins over the library's lazy import. */\nfunction child(entry: SparkAuthRouteEntry | undefined, path: string, defaultLoader: Loader): Child {\n  const component = typeof entry === 'object' && entry.component ? entry.component : undefined;\n  return { path, loadComponent: component ? () => Promise.resolve(component) : defaultLoader };\n}\n\n/**\n * The routes for Spark's authentication pages.\n *\n * `config.localCredentials` chooses how much of the email/password family to route, mirroring the\n * server's `SparkLocalCredentials`. `GET /spark/auth/capabilities` reports what the server is\n * actually running, so the two can be checked against each other.\n *\n * The `import()` expressions live *inside* the branches that need them. That placement is the point:\n * a bundler decides whether to emit a lazy chunk from whether the `import()` call site is reachable,\n * not from whether the route object referencing it survives — so filtering the children array after\n * the fact would still ship every page. Excluded pages must have no reachable `import()` at all.\n *\n * `SPARK_AUTH_ROUTE_PATHS` is still provided in full. The excluded pages are excluded together, so\n * nothing that survives can link to something that does not, and the token stays `Required`.\n */\nexport function sparkAuthRoutes(config?: SparkAuthRouteConfig): any[] {\n  const mode = config?.localCredentials ?? 'full';\n\n  const paths: SparkAuthRoutePaths = {\n    signIn: '/' + entryPath(config?.signIn, 'sign-in'),\n    login: '/' + entryPath(config?.login, 'login'),\n    twoFactor: '/' + entryPath(config?.twoFactor, 'login/two-factor'),\n    register: '/' + entryPath(config?.register, 'register'),\n    forgotPassword: '/' + entryPath(config?.forgotPassword, 'forgot-password'),\n    resetPassword: '/' + entryPath(config?.resetPassword, 'reset-password'),\n  };\n\n  const children: Child[] = [];\n\n  // Only when local credentials are limited. In 'full' mode the login page is already the landing\n  // page, and emitting a second one would change the routes of every app that never opted in.\n  if (mode !== 'full') {\n    children.push(\n      child(config?.signIn, entryPath(config?.signIn, 'sign-in'),\n        () => import('@mintplayer/ng-spark-auth/sign-in').then(m => m.SparkSignInComponent)),\n    );\n  }\n\n  if (mode !== 'disabled') {\n    children.push(\n      child(config?.login, entryPath(config?.login, 'login'),\n        () => import('@mintplayer/ng-spark-auth/login').then(m => m.SparkLoginComponent)),\n      // Reachable only from the login page's RequiresTwoFactor branch, and it posts to the same\n      // /login endpoint — so it belongs to password sign-in, not to authentication in general.\n      child(config?.twoFactor, entryPath(config?.twoFactor, 'login/two-factor'),\n        () => import('@mintplayer/ng-spark-auth/two-factor').then(m => m.SparkTwoFactorComponent)),\n      child(config?.forgotPassword, entryPath(config?.forgotPassword, 'forgot-password'),\n        () => import('@mintplayer/ng-spark-auth/forgot-password').then(m => m.SparkForgotPasswordComponent)),\n      child(config?.resetPassword, entryPath(config?.resetPassword, 'reset-password'),\n        () => import('@mintplayer/ng-spark-auth/reset-password').then(m => m.SparkResetPasswordComponent)),\n    );\n  }\n\n  if (mode === 'full') {\n    children.push(\n      child(config?.register, entryPath(config?.register, 'register'),\n        () => import('@mintplayer/ng-spark-auth/register').then(m => m.SparkRegisterComponent)),\n    );\n  }\n\n  return [\n    {\n      path: '',\n      providers: [\n        { provide: SPARK_AUTH_ROUTE_PATHS, useValue: paths },\n      ],\n      children,\n    },\n  ];\n}\n","/**\n * Generated bundle index. Do not edit.\n */\n\nexport * from './index';\n"],"names":[],"mappings":";;AASA;AACA,SAAS,SAAS,CAAC,KAAsC,EAAE,WAAmB,EAAA;IAC5E,IAAI,KAAK,KAAK,SAAS;AAAE,QAAA,OAAO,WAAW;AAC3C,IAAA,OAAO,OAAO,KAAK,KAAK,QAAQ,GAAG,KAAK,GAAG,KAAK,CAAC,IAAI;AACvD;AAEA;AACA,SAAS,KAAK,CAAC,KAAsC,EAAE,IAAY,EAAE,aAAqB,EAAA;IACxF,MAAM,SAAS,GAAG,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,SAAS,GAAG,KAAK,CAAC,SAAS,GAAG,SAAS;IAC5F,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,SAAS,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,GAAG,aAAa,EAAE;AAC9F;AAEA;;;;;;;;;;;;;;AAcG;AACG,SAAU,eAAe,CAAC,MAA6B,EAAA;AAC3D,IAAA,MAAM,IAAI,GAAG,MAAM,EAAE,gBAAgB,IAAI,MAAM;AAE/C,IAAA,MAAM,KAAK,GAAwB;QACjC,MAAM,EAAE,GAAG,GAAG,SAAS,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,CAAC;QAClD,KAAK,EAAE,GAAG,GAAG,SAAS,CAAC,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC;QAC9C,SAAS,EAAE,GAAG,GAAG,SAAS,CAAC,MAAM,EAAE,SAAS,EAAE,kBAAkB,CAAC;QACjE,QAAQ,EAAE,GAAG,GAAG,SAAS,CAAC,MAAM,EAAE,QAAQ,EAAE,UAAU,CAAC;QACvD,cAAc,EAAE,GAAG,GAAG,SAAS,CAAC,MAAM,EAAE,cAAc,EAAE,iBAAiB,CAAC;QAC1E,aAAa,EAAE,GAAG,GAAG,SAAS,CAAC,MAAM,EAAE,aAAa,EAAE,gBAAgB,CAAC;KACxE;IAED,MAAM,QAAQ,GAAY,EAAE;;;AAI5B,IAAA,IAAI,IAAI,KAAK,MAAM,EAAE;AACnB,QAAA,QAAQ,CAAC,IAAI,CACX,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,CAAC,EACxD,MAAM,OAAO,mCAAmC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,oBAAoB,CAAC,CAAC,CACvF;IACH;AAEA,IAAA,IAAI,IAAI,KAAK,UAAU,EAAE;AACvB,QAAA,QAAQ,CAAC,IAAI,CACX,KAAK,CAAC,MAAM,EAAE,KAAK,EAAE,SAAS,CAAC,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC,EACpD,MAAM,OAAO,iCAAiC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,mBAAmB,CAAC,CAAC;;;QAGnF,KAAK,CAAC,MAAM,EAAE,SAAS,EAAE,SAAS,CAAC,MAAM,EAAE,SAAS,EAAE,kBAAkB,CAAC,EACvE,MAAM,OAAO,sCAAsC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,uBAAuB,CAAC,CAAC,EAC5F,KAAK,CAAC,MAAM,EAAE,cAAc,EAAE,SAAS,CAAC,MAAM,EAAE,cAAc,EAAE,iBAAiB,CAAC,EAChF,MAAM,OAAO,2CAA2C,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,4BAA4B,CAAC,CAAC,EACtG,KAAK,CAAC,MAAM,EAAE,aAAa,EAAE,SAAS,CAAC,MAAM,EAAE,aAAa,EAAE,gBAAgB,CAAC,EAC7E,MAAM,OAAO,0CAA0C,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,2BAA2B,CAAC,CAAC,CACrG;IACH;AAEA,IAAA,IAAI,IAAI,KAAK,MAAM,EAAE;AACnB,QAAA,QAAQ,CAAC,IAAI,CACX,KAAK,CAAC,MAAM,EAAE,QAAQ,EAAE,SAAS,CAAC,MAAM,EAAE,QAAQ,EAAE,UAAU,CAAC,EAC7D,MAAM,OAAO,oCAAoC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAC1F;IACH;IAEA,OAAO;AACL,QAAA;AACE,YAAA,IAAI,EAAE,EAAE;AACR,YAAA,SAAS,EAAE;AACT,gBAAA,EAAE,OAAO,EAAE,sBAAsB,EAAE,QAAQ,EAAE,KAAK,EAAE;AACrD,aAAA;YACD,QAAQ;AACT,SAAA;KACF;AACH;;AC1FA;;AAEG;;;;"}
+{"version":3,"file":"mintplayer-ng-spark-auth-routes.mjs","sources":["../../routes/src/spark-auth-routes.ts","../../routes/mintplayer-ng-spark-auth-routes.ts"],"sourcesContent":["import {\n  SPARK_AUTH_ROUTE_PATHS,\n  SPARK_EXTERNAL_PROVIDERS,\n  SparkAuthRouteEntries,\n  SparkAuthRouteEntry,\n  SparkAuthRoutePaths,\n  SparkExternalProviderPresentation,\n} from '@mintplayer/ng-spark-auth/models';\n\ntype Loader = () => Promise<any>;\n\ninterface Child {\n  path: string;\n  loadComponent: Loader;\n}\n\n/** The routed path for an entry, independent of how its component is loaded. */\nfunction entryPath(entry: SparkAuthRouteEntry | undefined, defaultPath: string): string {\n  if (entry === undefined) return defaultPath;\n  return typeof entry === 'string' ? entry : entry.path;\n}\n\n/** An explicitly supplied component wins over the library's lazy import. */\nfunction child(entry: SparkAuthRouteEntry | undefined, path: string, defaultLoader: Loader): Child {\n  const component = typeof entry === 'object' && entry.component ? entry.component : undefined;\n  return { path, loadComponent: component ? () => Promise.resolve(component) : defaultLoader };\n}\n\n/**\n * One opt-in group of authentication pages. Produced by `withLocalLogin()`, `withRegistration()` and\n * `withExternalLogin()`; not constructible by consumers, which is what keeps the set of mountable\n * pages a decision this library makes rather than a shape an application can invent.\n */\nexport interface SparkAuthRoutesFeature {\n  readonly children: Child[];\n  readonly paths: SparkAuthRoutePaths;\n  readonly providers?: SparkExternalProviderPresentation[];\n}\n\n/** Path override for the sign-in landing page. Named to stay clear of the core package's\n * `SparkExternalLoginOptions`, which is about the sign-in *call* rather than the route. */\nexport type SparkExternalLoginRouteOptions = Pick<SparkAuthRouteEntries, 'signIn'>;\n\n/**\n * The routes for Spark's authentication pages.\n *\n * **Nothing is mounted unless a feature asks for it.** Passing no features emits no pages at all —\n * opt-in enforced by construction rather than by a flag, matching `provideHttpClient(withFetch())`\n * and `provideRouter(withComponentInputBinding())`. Before this the pages mounted by default and an\n * application had to opt *out*, so every app shipped a registration form whether or not it wanted\n * one.\n *\n * ```ts\n * sparkAuthRoutes(\n *   withLocalLogin(),\n *   withRegistration(),\n *   withExternalLogin(githubProvider(), facebookProvider()),\n * )\n * ```\n *\n * The `import()` expressions live *inside* each feature. That placement is the point: a bundler\n * decides whether to emit a lazy chunk from whether the `import()` call site is reachable, not from\n * whether the route object referencing it survives — so filtering a children array after the fact\n * would still ship every page. A page nobody opted into has no reachable `import()` at all.\n */\nexport function sparkAuthRoutes(...features: SparkAuthRoutesFeature[]): any[] {\n  const children: Child[] = [];\n  const paths: SparkAuthRoutePaths = {};\n  const externalProviders: SparkExternalProviderPresentation[] = [];\n\n  for (const feature of features) {\n    children.push(...feature.children);\n    Object.assign(paths, feature.paths);\n    if (feature.providers) externalProviders.push(...feature.providers);\n  }\n\n  return [\n    {\n      path: '',\n      providers: [\n        { provide: SPARK_AUTH_ROUTE_PATHS, useValue: paths },\n        { provide: SPARK_EXTERNAL_PROVIDERS, useValue: externalProviders },\n      ],\n      children,\n    },\n  ];\n}\n\n/**\n * Mounts the email/password family: login, two-factor, forgot-password, reset-password.\n *\n * These four are one feature rather than four because they form a star centred on the login page and\n * every template dereferences its siblings unconditionally — removing any proper subset leaves a\n * dangling link. Registration is genuinely separable, and is its own feature.\n *\n * Two-factor belongs here because it is reachable only from the login page's `RequiresTwoFactor`\n * branch and posts to the same `/login` endpoint: it is part of password sign-in, not of\n * authentication in general.\n */\nexport function withLocalLogin(\n  entries?: Pick<SparkAuthRouteEntries, 'login' | 'twoFactor' | 'forgotPassword' | 'resetPassword'>,\n): SparkAuthRoutesFeature {\n  const login = entryPath(entries?.login, 'login');\n  const twoFactor = entryPath(entries?.twoFactor, 'login/two-factor');\n  const forgotPassword = entryPath(entries?.forgotPassword, 'forgot-password');\n  const resetPassword = entryPath(entries?.resetPassword, 'reset-password');\n\n  return {\n    paths: {\n      login: '/' + login,\n      twoFactor: '/' + twoFactor,\n      forgotPassword: '/' + forgotPassword,\n      resetPassword: '/' + resetPassword,\n    },\n    children: [\n      child(entries?.login, login,\n        () => import('@mintplayer/ng-spark-auth/login').then(m => m.SparkLoginComponent)),\n      child(entries?.twoFactor, twoFactor,\n        () => import('@mintplayer/ng-spark-auth/two-factor').then(m => m.SparkTwoFactorComponent)),\n      child(entries?.forgotPassword, forgotPassword,\n        () => import('@mintplayer/ng-spark-auth/forgot-password').then(m => m.SparkForgotPasswordComponent)),\n      child(entries?.resetPassword, resetPassword,\n        () => import('@mintplayer/ng-spark-auth/reset-password').then(m => m.SparkResetPasswordComponent)),\n    ],\n  };\n}\n\n/**\n * Mounts the self-service registration page.\n *\n * Separate from {@link withLocalLogin} because the two decisions genuinely are separate: an\n * application whose accounts are provisioned by an administrator still needs password sign-in and\n * password reset. Mount it only alongside a server whose `SparkLocalCredentials` is `Full` — with\n * `SignInOnly` the endpoint it posts to is not mapped.\n */\nexport function withRegistration(entry?: SparkAuthRouteEntry): SparkAuthRoutesFeature {\n  const register = entryPath(entry, 'register');\n\n  return {\n    paths: { register: '/' + register },\n    children: [\n      child(entry, register,\n        () => import('@mintplayer/ng-spark-auth/register').then(m => m.SparkRegisterComponent)),\n    ],\n  };\n}\n\n/**\n * Mounts the sign-in landing page — a button per external provider the *server* reports.\n *\n * Accepts provider declarations and, in any position, one options object for the page's own path;\n * the two shapes are disjoint, so `withExternalLogin(githubProvider(), facebookProvider())` and\n * `withExternalLogin({ signIn: 'landing' }, githubProvider())` both read naturally.\n *\n * Declaring no providers is valid and useful: the page still renders whatever\n * `GET /spark/auth/capabilities` reports, using default buttons.\n */\nexport function withExternalLogin(\n  ...providersOrOptions: (SparkExternalProviderPresentation | SparkExternalLoginRouteOptions)[]\n): SparkAuthRoutesFeature {\n  const providers = providersOrOptions.filter(isProvider);\n  const options = providersOrOptions.find((p): p is SparkExternalLoginRouteOptions => !isProvider(p));\n  const signIn = entryPath(options?.signIn, 'sign-in');\n\n  return {\n    paths: { signIn: '/' + signIn },\n    providers,\n    children: [\n      child(options?.signIn, signIn,\n        () => import('@mintplayer/ng-spark-auth/sign-in').then(m => m.SparkSignInComponent)),\n    ],\n  };\n}\n\nfunction isProvider(\n  value: SparkExternalProviderPresentation | SparkExternalLoginRouteOptions,\n): value is SparkExternalProviderPresentation {\n  return typeof (value as SparkExternalProviderPresentation).scheme === 'string';\n}\n\n/**\n * Presentation for one provider's button, keyed by the scheme the server reports.\n *\n * The generic form. `githubProvider()` and friends are this with a scheme and an icon filled in —\n * they exist so the common case does not require knowing the scheme string, not because the library\n * has an opinion about which providers exist.\n */\nexport function externalProvider(\n  scheme: string,\n  presentation?: Omit<SparkExternalProviderPresentation, 'scheme'>,\n): SparkExternalProviderPresentation {\n  return { scheme, ...presentation };\n}\n\nexport function githubProvider(\n  presentation?: Omit<SparkExternalProviderPresentation, 'scheme'>,\n): SparkExternalProviderPresentation {\n  return externalProvider('GitHub', { iconClass: 'bi bi-github', ...presentation });\n}\n\nexport function googleProvider(\n  presentation?: Omit<SparkExternalProviderPresentation, 'scheme'>,\n): SparkExternalProviderPresentation {\n  return externalProvider('Google', { iconClass: 'bi bi-google', ...presentation });\n}\n\nexport function facebookProvider(\n  presentation?: Omit<SparkExternalProviderPresentation, 'scheme'>,\n): SparkExternalProviderPresentation {\n  return externalProvider('Facebook', { iconClass: 'bi bi-facebook', ...presentation });\n}\n\nexport function microsoftProvider(\n  presentation?: Omit<SparkExternalProviderPresentation, 'scheme'>,\n): SparkExternalProviderPresentation {\n  return externalProvider('Microsoft', { iconClass: 'bi bi-microsoft', ...presentation });\n}\n","/**\n * Generated bundle index. Do not edit.\n */\n\nexport * from './index';\n"],"names":[],"mappings":";;AAgBA;AACA,SAAS,SAAS,CAAC,KAAsC,EAAE,WAAmB,EAAA;IAC5E,IAAI,KAAK,KAAK,SAAS;AAAE,QAAA,OAAO,WAAW;AAC3C,IAAA,OAAO,OAAO,KAAK,KAAK,QAAQ,GAAG,KAAK,GAAG,KAAK,CAAC,IAAI;AACvD;AAEA;AACA,SAAS,KAAK,CAAC,KAAsC,EAAE,IAAY,EAAE,aAAqB,EAAA;IACxF,MAAM,SAAS,GAAG,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,SAAS,GAAG,KAAK,CAAC,SAAS,GAAG,SAAS;IAC5F,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,SAAS,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,GAAG,aAAa,EAAE;AAC9F;AAiBA;;;;;;;;;;;;;;;;;;;;;AAqBG;AACG,SAAU,eAAe,CAAC,GAAG,QAAkC,EAAA;IACnE,MAAM,QAAQ,GAAY,EAAE;IAC5B,MAAM,KAAK,GAAwB,EAAE;IACrC,MAAM,iBAAiB,GAAwC,EAAE;AAEjE,IAAA,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE;QAC9B,QAAQ,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,QAAQ,CAAC;QAClC,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,KAAK,CAAC;QACnC,IAAI,OAAO,CAAC,SAAS;YAAE,iBAAiB,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,SAAS,CAAC;IACrE;IAEA,OAAO;AACL,QAAA;AACE,YAAA,IAAI,EAAE,EAAE;AACR,YAAA,SAAS,EAAE;AACT,gBAAA,EAAE,OAAO,EAAE,sBAAsB,EAAE,QAAQ,EAAE,KAAK,EAAE;AACpD,gBAAA,EAAE,OAAO,EAAE,wBAAwB,EAAE,QAAQ,EAAE,iBAAiB,EAAE;AACnE,aAAA;YACD,QAAQ;AACT,SAAA;KACF;AACH;AAEA;;;;;;;;;;AAUG;AACG,SAAU,cAAc,CAC5B,OAAiG,EAAA;IAEjG,MAAM,KAAK,GAAG,SAAS,CAAC,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC;IAChD,MAAM,SAAS,GAAG,SAAS,CAAC,OAAO,EAAE,SAAS,EAAE,kBAAkB,CAAC;IACnE,MAAM,cAAc,GAAG,SAAS,CAAC,OAAO,EAAE,cAAc,EAAE,iBAAiB,CAAC;IAC5E,MAAM,aAAa,GAAG,SAAS,CAAC,OAAO,EAAE,aAAa,EAAE,gBAAgB,CAAC;IAEzE,OAAO;AACL,QAAA,KAAK,EAAE;YACL,KAAK,EAAE,GAAG,GAAG,KAAK;YAClB,SAAS,EAAE,GAAG,GAAG,SAAS;YAC1B,cAAc,EAAE,GAAG,GAAG,cAAc;YACpC,aAAa,EAAE,GAAG,GAAG,aAAa;AACnC,SAAA;AACD,QAAA,QAAQ,EAAE;YACR,KAAK,CAAC,OAAO,EAAE,KAAK,EAAE,KAAK,EACzB,MAAM,OAAO,iCAAiC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,mBAAmB,CAAC,CAAC;YACnF,KAAK,CAAC,OAAO,EAAE,SAAS,EAAE,SAAS,EACjC,MAAM,OAAO,sCAAsC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,uBAAuB,CAAC,CAAC;YAC5F,KAAK,CAAC,OAAO,EAAE,cAAc,EAAE,cAAc,EAC3C,MAAM,OAAO,2CAA2C,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,4BAA4B,CAAC,CAAC;YACtG,KAAK,CAAC,OAAO,EAAE,aAAa,EAAE,aAAa,EACzC,MAAM,OAAO,0CAA0C,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,2BAA2B,CAAC,CAAC;AACrG,SAAA;KACF;AACH;AAEA;;;;;;;AAOG;AACG,SAAU,gBAAgB,CAAC,KAA2B,EAAA;IAC1D,MAAM,QAAQ,GAAG,SAAS,CAAC,KAAK,EAAE,UAAU,CAAC;IAE7C,OAAO;AACL,QAAA,KAAK,EAAE,EAAE,QAAQ,EAAE,GAAG,GAAG,QAAQ,EAAE;AACnC,QAAA,QAAQ,EAAE;YACR,KAAK,CAAC,KAAK,EAAE,QAAQ,EACnB,MAAM,OAAO,oCAAoC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,sBAAsB,CAAC,CAAC;AAC1F,SAAA;KACF;AACH;AAEA;;;;;;;;;AASG;AACG,SAAU,iBAAiB,CAC/B,GAAG,kBAA0F,EAAA;IAE7F,MAAM,SAAS,GAAG,kBAAkB,CAAC,MAAM,CAAC,UAAU,CAAC;AACvD,IAAA,MAAM,OAAO,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC,KAA0C,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;IACnG,MAAM,MAAM,GAAG,SAAS,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,CAAC;IAEpD,OAAO;AACL,QAAA,KAAK,EAAE,EAAE,MAAM,EAAE,GAAG,GAAG,MAAM,EAAE;QAC/B,SAAS;AACT,QAAA,QAAQ,EAAE;YACR,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAC3B,MAAM,OAAO,mCAAmC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,oBAAoB,CAAC,CAAC;AACvF,SAAA;KACF;AACH;AAEA,SAAS,UAAU,CACjB,KAAyE,EAAA;AAEzE,IAAA,OAAO,OAAQ,KAA2C,CAAC,MAAM,KAAK,QAAQ;AAChF;AAEA;;;;;;AAMG;AACG,SAAU,gBAAgB,CAC9B,MAAc,EACd,YAAgE,EAAA;AAEhE,IAAA,OAAO,EAAE,MAAM,EAAE,GAAG,YAAY,EAAE;AACpC;AAEM,SAAU,cAAc,CAC5B,YAAgE,EAAA;AAEhE,IAAA,OAAO,gBAAgB,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,cAAc,EAAE,GAAG,YAAY,EAAE,CAAC;AACnF;AAEM,SAAU,cAAc,CAC5B,YAAgE,EAAA;AAEhE,IAAA,OAAO,gBAAgB,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,cAAc,EAAE,GAAG,YAAY,EAAE,CAAC;AACnF;AAEM,SAAU,gBAAgB,CAC9B,YAAgE,EAAA;AAEhE,IAAA,OAAO,gBAAgB,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,gBAAgB,EAAE,GAAG,YAAY,EAAE,CAAC;AACvF;AAEM,SAAU,iBAAiB,CAC/B,YAAgE,EAAA;AAEhE,IAAA,OAAO,gBAAgB,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,iBAAiB,EAAE,GAAG,YAAY,EAAE,CAAC;AACzF;;ACxNA;;AAEG;;;;"}

package/fesm2022/mintplayer-ng-spark-auth-sign-in.mjs

@@ -1,42 +1,100 @@
 import * as i0 from '@angular/core';
-import { inject, signal, isDevMode, ChangeDetectionStrategy, Component } from '@angular/core';
-import { RouterLink } from '@angular/router';
+import { inject, input, signal, computed, isDevMode, ChangeDetectionStrategy, Component } from '@angular/core';
+import { NgTemplateOutlet } from '@angular/common';
+import { ActivatedRoute, RouterLink } from '@angular/router';
 import { Color } from '@mintplayer/ng-bootstrap';
 import { BsAlertComponent } from '@mintplayer/ng-bootstrap/alert';
 import { BsCardComponent, BsCardHeaderComponent } from '@mintplayer/ng-bootstrap/card';
 import { BsSpinnerComponent } from '@mintplayer/ng-bootstrap/spinner';
-import { SPARK_AUTH_ROUTE_PATHS } from '@mintplayer/ng-spark-auth/models';
+import { SPARK_EXTERNAL_PROVIDERS, SPARK_AUTH_ROUTE_PATHS, isSafeReturnUrl } from '@mintplayer/ng-spark-auth/models';
 import { SparkAuthService } from '@mintplayer/ng-spark-auth/core';
 import { TranslateKeyPipe } from '@mintplayer/ng-spark-auth/pipes';
 
 /**
- * The sign-in landing page for an application whose local credentials are turned off — a button per
- * external provider, and a link to the password form when there still is one.
+ * The sign-in landing page: a button per external provider, and a link to the password form when the
+ * application mounted one.
  *
  * The providers come from `GET /spark/auth/capabilities` rather than from a list the application
  * hard-codes. That is the point of the component: every consumer that hand-rolled this before wrote
  * the scheme name as a string literal, which is a silent mismatch waiting to happen the moment the
- * server's provider registration changes.
+ * server's provider registration changes. A `withExternalLogin(githubProvider())` declaration only
+ * *decorates* what the server reports — it cannot conjure a provider the server does not have.
  */
 class SparkSignInComponent {
     authService = inject(SparkAuthService);
+    declaredProviders = inject(SPARK_EXTERNAL_PROVIDERS, { optional: true }) ?? [];
+    route = inject(ActivatedRoute, { optional: true });
     routePaths = inject(SPARK_AUTH_ROUTE_PATHS);
     colors = Color;
-    providers = signal([], /* @ts-ignore */
-    ...(ngDevMode ? [{ debugName: "providers" }] : /* istanbul ignore next */ []));
+    /**
+     * Where to land after a successful external sign-in.
+     *
+     * Falls back to a `?returnUrl=` query parameter, matching what the login page already does — so a
+     * plain `<a routerLink="/sign-in" [queryParams]="{ returnUrl: '/somewhere' }">` works with no
+     * wiring, which is what a routed page needs since the router passes it no inputs. The query value
+     * is validated as a local path before use; an off-site one is dropped rather than followed.
+     */
+    returnUrl = input(undefined, /* @ts-ignore */
+    ...(ngDevMode ? [{ debugName: "returnUrl" }] : /* istanbul ignore next */ []));
+    effectiveReturnUrl() {
+        const explicit = this.returnUrl();
+        if (explicit)
+            return explicit;
+        const fromQuery = this.route?.snapshot.queryParamMap.get('returnUrl');
+        return isSafeReturnUrl(fromQuery) ? fromQuery : undefined;
+    }
+    /**
+     * Replaces the default provider button. Rendered once per provider with a
+     * {@link SparkProviderButtonContext}.
+     *
+     * Reachable only when the consumer *hosts* this component — the router instantiates it with no
+     * projected content, so on a default `withExternalLogin()` route there is nothing to project into.
+     * Host it via `withExternalLogin({ signIn: { path: 'sign-in', component: MySignIn } })` and pass
+     * the template from there.
+     */
+    providerTemplate = input(null, /* @ts-ignore */
+    ...(ngDevMode ? [{ debugName: "providerTemplate" }] : /* istanbul ignore next */ []));
+    reported = signal([], /* @ts-ignore */
+    ...(ngDevMode ? [{ debugName: "reported" }] : /* istanbul ignore next */ []));
     localCredentialsAvailable = signal(false, /* @ts-ignore */
     ...(ngDevMode ? [{ debugName: "localCredentialsAvailable" }] : /* istanbul ignore next */ []));
     loading = signal(true, /* @ts-ignore */
     ...(ngDevMode ? [{ debugName: "loading" }] : /* istanbul ignore next */ []));
     failed = signal(false, /* @ts-ignore */
     ...(ngDevMode ? [{ debugName: "failed" }] : /* istanbul ignore next */ []));
+    /**
+     * The server's list, decorated and ordered by whatever the application declared. Declared-but-not-
+     * reported schemes are dropped and reported-but-not-declared ones keep a default button, so
+     * neither side can produce a provider the other does not have.
+     */
+    providers = computed(() => {
+        const declarations = new Map(this.declaredProviders.map(p => [p.scheme.toLowerCase(), p]));
+        return this.reported()
+            .map((provider, index) => {
+            const declared = declarations.get(provider.scheme.toLowerCase());
+            return {
+                provider: {
+                    ...provider,
+                    displayName: declared?.displayName ?? provider.displayName,
+                    iconClass: declared?.iconClass,
+                },
+                // Undeclared providers sort after declared ones, keeping the server's relative order among
+                // themselves — so adding a provider server-side appends a button rather than reshuffling.
+                order: declared?.order ?? Number.MAX_SAFE_INTEGER,
+                index,
+            };
+        })
+            .sort((a, b) => a.order - b.order || a.index - b.index)
+            .map(entry => entry.provider);
+    }, /* @ts-ignore */
+    ...(ngDevMode ? [{ debugName: "providers" }] : /* istanbul ignore next */ []));
     constructor() {
         void this.load();
     }
     async load() {
         try {
             const capabilities = await this.authService.capabilities();
-            this.providers.set(capabilities.externalProviders);
+            this.reported.set(capabilities.externalProviders);
             this.localCredentialsAvailable.set(capabilities.localCredentials !== 'Disabled');
             this.warnOnMismatch(capabilities);
         }
@@ -57,20 +115,27 @@ class SparkSignInComponent {
     warnOnMismatch(capabilities) {
         if (isDevMode() && capabilities.localCredentials === 'Full') {
             console.warn('[ng-spark-auth] This app routes the sign-in landing page, but the server reports '
-                + 'localCredentials = Full. The two are configured independently — check that '
-                + "sparkAuthRoutes({ localCredentials: … }) matches AddAuthentication's LocalCredentials mode.");
+                + 'localCredentials = Full. The two are configured independently — check that the features '
+                + "passed to sparkAuthRoutes() match AddAuthentication's LocalCredentials mode.");
         }
     }
+    /** The closure handed to a projected template, so a consumer never names a scheme itself. */
+    contextFor(provider) {
+        return { $implicit: provider, signIn: () => this.signInWith(provider) };
+    }
     signInWith(provider) {
-        void this.authService.loginWithProvider(provider.scheme);
+        void this.authService.loginWithProvider(provider.scheme, { returnUrl: this.effectiveReturnUrl() });
     }
-    static ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "22.0.0", ngImport: i0, type: SparkSignInComponent, deps: [], target: i0.ɵɵFactoryTarget.Component });
-    static ɵcmp = i0.ɵɵngDeclareComponent({ minVersion: "17.0.0", version: "22.0.0", type: SparkSignInComponent, isStandalone: true, selector: "spark-sign-in", ngImport: i0, template: "<div class=\"d-flex justify-content-center\">\n  <bs-card style=\"width: 100%; max-width: 400px;\">\n    <bs-card-header>\n      <h3 class=\"mb-0 text-center\">{{ 'auth.login' | t }}</h3>\n    </bs-card-header>\n    <div class=\"p-4\">\n      @if (loading()) {\n        <div class=\"text-center\"><bs-spinner /></div>\n      } @else if (failed()) {\n        <bs-alert [type]=\"colors.danger\" class=\"mb-0\">{{ 'auth.signInUnavailable' | t }}</bs-alert>\n      } @else {\n        @for (provider of providers(); track provider.scheme) {\n          <button type=\"button\" class=\"btn btn-outline-primary w-100 mb-2\" (click)=\"signInWith(provider)\">\n            {{ provider.displayName }}\n          </button>\n        } @empty {\n          <bs-alert [type]=\"colors.warning\" class=\"mb-0\">{{ 'auth.noSignInMethods' | t }}</bs-alert>\n        }\n\n        @if (localCredentialsAvailable()) {\n          <div class=\"text-center mt-3\">\n            <a [routerLink]=\"routePaths.login\">{{ 'auth.login' | t }}</a>\n          </div>\n        }\n      }\n    </div>\n  </bs-card>\n</div>\n", dependencies: [{ kind: "directive", type: RouterLink, selector: "[routerLink]", inputs: ["target", "queryParams", "fragment", "queryParamsHandling", "state", "info", "relativeTo", "preserveFragment", "skipLocationChange", "replaceUrl", "browserUrl", "routerLink"] }, { kind: "component", type: BsAlertComponent, selector: "bs-alert", inputs: ["type", "announce", "isVisible"], outputs: ["isVisibleChange", "afterOpenedOrClosed"] }, { kind: "component", type: BsCardComponent, selector: "bs-card", inputs: ["color", "outline"] }, { kind: "component", type: BsCardHeaderComponent, selector: "bs-card-header", inputs: ["color", "navStyle"] }, { kind: "component", type: BsSpinnerComponent, selector: "bs-spinner", inputs: ["type", "color"] }, { kind: "pipe", type: TranslateKeyPipe, name: "t" }], changeDetection: i0.ChangeDetectionStrategy.OnPush });
+    static ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "22.1.3", ngImport: i0, type: SparkSignInComponent, deps: [], target: i0.ɵɵFactoryTarget.Component });
+    static ɵcmp = i0.ɵɵngDeclareComponent({ minVersion: "17.0.0", version: "22.1.3", type: SparkSignInComponent, isStandalone: true, selector: "spark-sign-in", inputs: { returnUrl: { classPropertyName: "returnUrl", publicName: "returnUrl", isSignal: true, isRequired: false, transformFunction: null }, providerTemplate: { classPropertyName: "providerTemplate", publicName: "providerTemplate", isSignal: true, isRequired: false, transformFunction: null } }, ngImport: i0, template: "<div class=\"d-flex justify-content-center\">\n  <bs-card style=\"width: 100%; max-width: 400px;\">\n    <bs-card-header>\n      <h3 class=\"mb-0 text-center\">{{ 'auth.login' | t }}</h3>\n    </bs-card-header>\n    <div class=\"p-4\">\n      @if (loading()) {\n        <div class=\"text-center\"><bs-spinner /></div>\n      } @else if (failed()) {\n        <bs-alert [type]=\"colors.danger\" class=\"mb-0\">{{ 'auth.signInUnavailable' | t }}</bs-alert>\n      } @else {\n        @for (provider of providers(); track provider.scheme) {\n          @if (providerTemplate(); as tpl) {\n            <ng-container *ngTemplateOutlet=\"tpl; context: contextFor(provider)\" />\n          } @else {\n            <button type=\"button\" class=\"btn btn-outline-primary w-100 mb-2\" (click)=\"signInWith(provider)\">\n              @if (provider.iconClass) {\n                <i [class]=\"provider.iconClass\" class=\"me-2\"></i>\n              }\n              {{ provider.displayName }}\n            </button>\n          }\n        } @empty {\n          <bs-alert [type]=\"colors.warning\" class=\"mb-0\">{{ 'auth.noSignInMethods' | t }}</bs-alert>\n        }\n\n        <!-- Two conditions, not one. The server may still accept passwords while this app chose not\n             to mount the page \u2014 sparkAuthRoutes is opt-in per feature now \u2014 and a [routerLink] bound\n             to undefined silently navigates to the current route rather than failing. -->\n        @if (localCredentialsAvailable() && routePaths.login) {\n          <div class=\"text-center mt-3\">\n            <a [routerLink]=\"routePaths.login\">{{ 'auth.login' | t }}</a>\n          </div>\n        }\n      }\n    </div>\n  </bs-card>\n</div>\n", dependencies: [{ kind: "directive", type: NgTemplateOutlet, selector: "[ngTemplateOutlet]", inputs: ["ngTemplateOutletContext", "ngTemplateOutlet", "ngTemplateOutletInjector"] }, { kind: "directive", type: RouterLink, selector: "[routerLink]", inputs: ["target", "queryParams", "fragment", "queryParamsHandling", "state", "info", "relativeTo", "preserveFragment", "skipLocationChange", "replaceUrl", "browserUrl", "routerLink"] }, { kind: "component", type: BsAlertComponent, selector: "bs-alert", inputs: ["type", "announce", "isVisible"], outputs: ["isVisibleChange", "afterOpenedOrClosed"] }, { kind: "component", type: BsCardComponent, selector: "bs-card", inputs: ["color", "outline"] }, { kind: "component", type: BsCardHeaderComponent, selector: "bs-card-header", inputs: ["color", "navStyle"] }, { kind: "component", type: BsSpinnerComponent, selector: "bs-spinner", inputs: ["type", "color"] }, { kind: "pipe", type: TranslateKeyPipe, name: "t" }], changeDetection: i0.ChangeDetectionStrategy.OnPush });
 }
-i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "22.0.0", ngImport: i0, type: SparkSignInComponent, decorators: [{
+i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "22.1.3", ngImport: i0, type: SparkSignInComponent, decorators: [{
             type: Component,
-            args: [{ selector: 'spark-sign-in', standalone: true, changeDetection: ChangeDetectionStrategy.OnPush, imports: [RouterLink, BsAlertComponent, BsCardComponent, BsCardHeaderComponent, BsSpinnerComponent, TranslateKeyPipe], template: "<div class=\"d-flex justify-content-center\">\n  <bs-card style=\"width: 100%; max-width: 400px;\">\n    <bs-card-header>\n      <h3 class=\"mb-0 text-center\">{{ 'auth.login' | t }}</h3>\n    </bs-card-header>\n    <div class=\"p-4\">\n      @if (loading()) {\n        <div class=\"text-center\"><bs-spinner /></div>\n      } @else if (failed()) {\n        <bs-alert [type]=\"colors.danger\" class=\"mb-0\">{{ 'auth.signInUnavailable' | t }}</bs-alert>\n      } @else {\n        @for (provider of providers(); track provider.scheme) {\n          <button type=\"button\" class=\"btn btn-outline-primary w-100 mb-2\" (click)=\"signInWith(provider)\">\n            {{ provider.displayName }}\n          </button>\n        } @empty {\n          <bs-alert [type]=\"colors.warning\" class=\"mb-0\">{{ 'auth.noSignInMethods' | t }}</bs-alert>\n        }\n\n        @if (localCredentialsAvailable()) {\n          <div class=\"text-center mt-3\">\n            <a [routerLink]=\"routePaths.login\">{{ 'auth.login' | t }}</a>\n          </div>\n        }\n      }\n    </div>\n  </bs-card>\n</div>\n" }]
-        }], ctorParameters: () => [] });
+            args: [{ selector: 'spark-sign-in', standalone: true, changeDetection: ChangeDetectionStrategy.OnPush, imports: [
+                        NgTemplateOutlet, RouterLink, BsAlertComponent, BsCardComponent, BsCardHeaderComponent,
+                        BsSpinnerComponent, TranslateKeyPipe,
+                    ], template: "<div class=\"d-flex justify-content-center\">\n  <bs-card style=\"width: 100%; max-width: 400px;\">\n    <bs-card-header>\n      <h3 class=\"mb-0 text-center\">{{ 'auth.login' | t }}</h3>\n    </bs-card-header>\n    <div class=\"p-4\">\n      @if (loading()) {\n        <div class=\"text-center\"><bs-spinner /></div>\n      } @else if (failed()) {\n        <bs-alert [type]=\"colors.danger\" class=\"mb-0\">{{ 'auth.signInUnavailable' | t }}</bs-alert>\n      } @else {\n        @for (provider of providers(); track provider.scheme) {\n          @if (providerTemplate(); as tpl) {\n            <ng-container *ngTemplateOutlet=\"tpl; context: contextFor(provider)\" />\n          } @else {\n            <button type=\"button\" class=\"btn btn-outline-primary w-100 mb-2\" (click)=\"signInWith(provider)\">\n              @if (provider.iconClass) {\n                <i [class]=\"provider.iconClass\" class=\"me-2\"></i>\n              }\n              {{ provider.displayName }}\n            </button>\n          }\n        } @empty {\n          <bs-alert [type]=\"colors.warning\" class=\"mb-0\">{{ 'auth.noSignInMethods' | t }}</bs-alert>\n        }\n\n        <!-- Two conditions, not one. The server may still accept passwords while this app chose not\n             to mount the page \u2014 sparkAuthRoutes is opt-in per feature now \u2014 and a [routerLink] bound\n             to undefined silently navigates to the current route rather than failing. -->\n        @if (localCredentialsAvailable() && routePaths.login) {\n          <div class=\"text-center mt-3\">\n            <a [routerLink]=\"routePaths.login\">{{ 'auth.login' | t }}</a>\n          </div>\n        }\n      }\n    </div>\n  </bs-card>\n</div>\n" }]
+        }], ctorParameters: () => [], propDecorators: { returnUrl: [{ type: i0.Input, args: [{ isSignal: true, alias: "returnUrl", required: false }] }], providerTemplate: [{ type: i0.Input, args: [{ isSignal: true, alias: "providerTemplate", required: false }] }] } });
 
 /**
  * Generated bundle index. Do not edit.

package/fesm2022/mintplayer-ng-spark-auth-sign-in.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"mintplayer-ng-spark-auth-sign-in.mjs","sources":["../../sign-in/src/spark-sign-in.component.ts","../../sign-in/src/spark-sign-in.component.html","../../sign-in/mintplayer-ng-spark-auth-sign-in.ts"],"sourcesContent":["import { ChangeDetectionStrategy, Component, inject, isDevMode, signal } from '@angular/core';\nimport { RouterLink } from '@angular/router';\nimport { Color } from '@mintplayer/ng-bootstrap';\nimport { BsAlertComponent } from '@mintplayer/ng-bootstrap/alert';\nimport { BsCardComponent, BsCardHeaderComponent } from '@mintplayer/ng-bootstrap/card';\nimport { BsSpinnerComponent } from '@mintplayer/ng-bootstrap/spinner';\nimport { SPARK_AUTH_ROUTE_PATHS, SparkAuthCapabilities, SparkExternalProvider } from '@mintplayer/ng-spark-auth/models';\nimport { SparkAuthService } from '@mintplayer/ng-spark-auth/core';\nimport { TranslateKeyPipe } from '@mintplayer/ng-spark-auth/pipes';\n\n/**\n * The sign-in landing page for an application whose local credentials are turned off — a button per\n * external provider, and a link to the password form when there still is one.\n *\n * The providers come from `GET /spark/auth/capabilities` rather than from a list the application\n * hard-codes. That is the point of the component: every consumer that hand-rolled this before wrote\n * the scheme name as a string literal, which is a silent mismatch waiting to happen the moment the\n * server's provider registration changes.\n */\n@Component({\n  selector: 'spark-sign-in',\n  standalone: true,\n  changeDetection: ChangeDetectionStrategy.OnPush,\n  imports: [RouterLink, BsAlertComponent, BsCardComponent, BsCardHeaderComponent, BsSpinnerComponent, TranslateKeyPipe],\n  templateUrl: './spark-sign-in.component.html',\n})\nexport class SparkSignInComponent {\n  private readonly authService = inject(SparkAuthService);\n  readonly routePaths = inject(SPARK_AUTH_ROUTE_PATHS);\n  readonly colors = Color;\n\n  readonly providers = signal<SparkExternalProvider[]>([]);\n  readonly localCredentialsAvailable = signal(false);\n  readonly loading = signal(true);\n  readonly failed = signal(false);\n\n  constructor() {\n    void this.load();\n  }\n\n  private async load(): Promise<void> {\n    try {\n      const capabilities = await this.authService.capabilities();\n      this.providers.set(capabilities.externalProviders);\n      this.localCredentialsAvailable.set(capabilities.localCredentials !== 'Disabled');\n      this.warnOnMismatch(capabilities);\n    } catch {\n      // A sign-in page that renders nothing looks identical to one whose providers all failed to\n      // load, so say which happened rather than showing an empty page.\n      this.failed.set(true);\n    } finally {\n      this.loading.set(false);\n    }\n  }\n\n  /**\n   * The routes are a build-time decision and the server's mode a deployment-time one, so they can\n   * disagree without anything failing loudly. Reaching this page at all means the app routed it,\n   * which it only does when local credentials are meant to be limited.\n   */\n  private warnOnMismatch(capabilities: SparkAuthCapabilities): void {\n    if (isDevMode() && capabilities.localCredentials === 'Full') {\n      console.warn(\n        '[ng-spark-auth] This app routes the sign-in landing page, but the server reports '\n        + 'localCredentials = Full. The two are configured independently — check that '\n        + \"sparkAuthRoutes({ localCredentials: … }) matches AddAuthentication's LocalCredentials mode.\",\n      );\n    }\n  }\n\n  signInWith(provider: SparkExternalProvider): void {\n    void this.authService.loginWithProvider(provider.scheme);\n  }\n}\n\nexport default SparkSignInComponent;\n","<div class=\"d-flex justify-content-center\">\n  <bs-card style=\"width: 100%; max-width: 400px;\">\n    <bs-card-header>\n      <h3 class=\"mb-0 text-center\">{{ 'auth.login' | t }}</h3>\n    </bs-card-header>\n    <div class=\"p-4\">\n      @if (loading()) {\n        <div class=\"text-center\"><bs-spinner /></div>\n      } @else if (failed()) {\n        <bs-alert [type]=\"colors.danger\" class=\"mb-0\">{{ 'auth.signInUnavailable' | t }}</bs-alert>\n      } @else {\n        @for (provider of providers(); track provider.scheme) {\n          <button type=\"button\" class=\"btn btn-outline-primary w-100 mb-2\" (click)=\"signInWith(provider)\">\n            {{ provider.displayName }}\n          </button>\n        } @empty {\n          <bs-alert [type]=\"colors.warning\" class=\"mb-0\">{{ 'auth.noSignInMethods' | t }}</bs-alert>\n        }\n\n        @if (localCredentialsAvailable()) {\n          <div class=\"text-center mt-3\">\n            <a [routerLink]=\"routePaths.login\">{{ 'auth.login' | t }}</a>\n          </div>\n        }\n      }\n    </div>\n  </bs-card>\n</div>\n","/**\n * Generated bundle index. Do not edit.\n */\n\nexport * from './index';\n"],"names":[],"mappings":";;;;;;;;;;;AAUA;;;;;;;;AAQG;MAQU,oBAAoB,CAAA;AACd,IAAA,WAAW,GAAG,MAAM,CAAC,gBAAgB,CAAC;AAC9C,IAAA,UAAU,GAAG,MAAM,CAAC,sBAAsB,CAAC;IAC3C,MAAM,GAAG,KAAK;IAEd,SAAS,GAAG,MAAM,CAA0B,EAAE;kFAAC;IAC/C,yBAAyB,GAAG,MAAM,CAAC,KAAK;kGAAC;IACzC,OAAO,GAAG,MAAM,CAAC,IAAI;gFAAC;IACtB,MAAM,GAAG,MAAM,CAAC,KAAK;+EAAC;AAE/B,IAAA,WAAA,GAAA;AACE,QAAA,KAAK,IAAI,CAAC,IAAI,EAAE;IAClB;AAEQ,IAAA,MAAM,IAAI,GAAA;AAChB,QAAA,IAAI;YACF,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,YAAY,EAAE;YAC1D,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,YAAY,CAAC,iBAAiB,CAAC;YAClD,IAAI,CAAC,yBAAyB,CAAC,GAAG,CAAC,YAAY,CAAC,gBAAgB,KAAK,UAAU,CAAC;AAChF,YAAA,IAAI,CAAC,cAAc,CAAC,YAAY,CAAC;QACnC;AAAE,QAAA,MAAM;;;AAGN,YAAA,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC;QACvB;gBAAU;AACR,YAAA,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC;QACzB;IACF;AAEA;;;;AAIG;AACK,IAAA,cAAc,CAAC,YAAmC,EAAA;QACxD,IAAI,SAAS,EAAE,IAAI,YAAY,CAAC,gBAAgB,KAAK,MAAM,EAAE;YAC3D,OAAO,CAAC,IAAI,CACV;kBACE;AACA,kBAAA,6FAA6F,CAChG;QACH;IACF;AAEA,IAAA,UAAU,CAAC,QAA+B,EAAA;QACxC,KAAK,IAAI,CAAC,WAAW,CAAC,iBAAiB,CAAC,QAAQ,CAAC,MAAM,CAAC;IAC1D;uGA9CW,oBAAoB,EAAA,IAAA,EAAA,EAAA,EAAA,MAAA,EAAA,EAAA,CAAA,eAAA,CAAA,SAAA,EAAA,CAAA;AAApB,IAAA,OAAA,IAAA,GAAA,EAAA,CAAA,oBAAA,CAAA,EAAA,UAAA,EAAA,QAAA,EAAA,OAAA,EAAA,QAAA,EAAA,IAAA,EAAA,oBAAoB,EAAA,YAAA,EAAA,IAAA,EAAA,QAAA,EAAA,eAAA,EAAA,QAAA,EAAA,EAAA,EAAA,QAAA,EC1BjC,mkCA4BA,EAAA,YAAA,EAAA,CAAA,EAAA,IAAA,EAAA,WAAA,EAAA,IAAA,EDLY,UAAU,EAAA,QAAA,EAAA,cAAA,EAAA,MAAA,EAAA,CAAA,QAAA,EAAA,aAAA,EAAA,UAAA,EAAA,qBAAA,EAAA,OAAA,EAAA,MAAA,EAAA,YAAA,EAAA,kBAAA,EAAA,oBAAA,EAAA,YAAA,EAAA,YAAA,EAAA,YAAA,CAAA,EAAA,EAAA,EAAA,IAAA,EAAA,WAAA,EAAA,IAAA,EAAE,gBAAgB,EAAA,QAAA,EAAA,UAAA,EAAA,MAAA,EAAA,CAAA,MAAA,EAAA,UAAA,EAAA,WAAA,CAAA,EAAA,OAAA,EAAA,CAAA,iBAAA,EAAA,qBAAA,CAAA,EAAA,EAAA,EAAA,IAAA,EAAA,WAAA,EAAA,IAAA,EAAE,eAAe,EAAA,QAAA,EAAA,SAAA,EAAA,MAAA,EAAA,CAAA,OAAA,EAAA,SAAA,CAAA,EAAA,EAAA,EAAA,IAAA,EAAA,WAAA,EAAA,IAAA,EAAE,qBAAqB,EAAA,QAAA,EAAA,gBAAA,EAAA,MAAA,EAAA,CAAA,OAAA,EAAA,UAAA,CAAA,EAAA,EAAA,EAAA,IAAA,EAAA,WAAA,EAAA,IAAA,EAAE,kBAAkB,6EAAE,gBAAgB,EAAA,IAAA,EAAA,GAAA,EAAA,CAAA,EAAA,eAAA,EAAA,EAAA,CAAA,uBAAA,CAAA,MAAA,EAAA,CAAA;;2FAGzG,oBAAoB,EAAA,UAAA,EAAA,CAAA;kBAPhC,SAAS;AACE,YAAA,IAAA,EAAA,CAAA,EAAA,QAAA,EAAA,eAAe,cACb,IAAI,EAAA,eAAA,EACC,uBAAuB,CAAC,MAAM,WACtC,CAAC,UAAU,EAAE,gBAAgB,EAAE,eAAe,EAAE,qBAAqB,EAAE,kBAAkB,EAAE,gBAAgB,CAAC,EAAA,QAAA,EAAA,mkCAAA,EAAA;;;AEvBvH;;AAEG;;;;"}
+{"version":3,"file":"mintplayer-ng-spark-auth-sign-in.mjs","sources":["../../sign-in/src/spark-sign-in.component.ts","../../sign-in/src/spark-sign-in.component.html","../../sign-in/mintplayer-ng-spark-auth-sign-in.ts"],"sourcesContent":["import { ChangeDetectionStrategy, Component, TemplateRef, computed, inject, input, isDevMode, signal } from '@angular/core';\nimport { NgTemplateOutlet } from '@angular/common';\nimport { ActivatedRoute, RouterLink } from '@angular/router';\nimport { Color } from '@mintplayer/ng-bootstrap';\nimport { BsAlertComponent } from '@mintplayer/ng-bootstrap/alert';\nimport { BsCardComponent, BsCardHeaderComponent } from '@mintplayer/ng-bootstrap/card';\nimport { BsSpinnerComponent } from '@mintplayer/ng-bootstrap/spinner';\nimport {\n  SPARK_AUTH_ROUTE_PATHS,\n  SPARK_EXTERNAL_PROVIDERS,\n  SparkAuthCapabilities,\n  SparkExternalProvider,\n  SparkExternalProviderPresentation,\n  isSafeReturnUrl,\n} from '@mintplayer/ng-spark-auth/models';\nimport { SparkAuthService } from '@mintplayer/ng-spark-auth/core';\nimport { TranslateKeyPipe } from '@mintplayer/ng-spark-auth/pipes';\n\n/**\n * One provider's button, as the template sees it: the provider itself, and the call that signs in\n * with it.\n *\n * **Passing the closure is the point.** A consumer never touches `provider.scheme`, so the failure\n * this component exists to prevent — a hard-coded scheme string that silently stops matching when\n * the server's registration changes — is unreachable by construction. It also means busy state,\n * `returnUrl` handling and popup-versus-redirect can move behind `signIn` later without a\n * consumer-facing change.\n */\nexport interface SparkProviderButtonContext {\n  $implicit: SparkExternalProviderView;\n  signIn: () => void;\n}\n\n/** A provider the server reported, merged with whatever presentation the app declared for it. */\nexport interface SparkExternalProviderView extends SparkExternalProvider {\n  iconClass?: string;\n}\n\n/**\n * The sign-in landing page: a button per external provider, and a link to the password form when the\n * application mounted one.\n *\n * The providers come from `GET /spark/auth/capabilities` rather than from a list the application\n * hard-codes. That is the point of the component: every consumer that hand-rolled this before wrote\n * the scheme name as a string literal, which is a silent mismatch waiting to happen the moment the\n * server's provider registration changes. A `withExternalLogin(githubProvider())` declaration only\n * *decorates* what the server reports — it cannot conjure a provider the server does not have.\n */\n@Component({\n  selector: 'spark-sign-in',\n  standalone: true,\n  changeDetection: ChangeDetectionStrategy.OnPush,\n  imports: [\n    NgTemplateOutlet, RouterLink, BsAlertComponent, BsCardComponent, BsCardHeaderComponent,\n    BsSpinnerComponent, TranslateKeyPipe,\n  ],\n  templateUrl: './spark-sign-in.component.html',\n})\nexport class SparkSignInComponent {\n  private readonly authService = inject(SparkAuthService);\n  private readonly declaredProviders = inject(SPARK_EXTERNAL_PROVIDERS, { optional: true }) ?? [];\n  private readonly route = inject(ActivatedRoute, { optional: true });\n  readonly routePaths = inject(SPARK_AUTH_ROUTE_PATHS);\n  readonly colors = Color;\n\n  /**\n   * Where to land after a successful external sign-in.\n   *\n   * Falls back to a `?returnUrl=` query parameter, matching what the login page already does — so a\n   * plain `<a routerLink=\"/sign-in\" [queryParams]=\"{ returnUrl: '/somewhere' }\">` works with no\n   * wiring, which is what a routed page needs since the router passes it no inputs. The query value\n   * is validated as a local path before use; an off-site one is dropped rather than followed.\n   */\n  readonly returnUrl = input<string | undefined>(undefined);\n\n  private effectiveReturnUrl(): string | undefined {\n    const explicit = this.returnUrl();\n    if (explicit) return explicit;\n\n    const fromQuery = this.route?.snapshot.queryParamMap.get('returnUrl');\n    return isSafeReturnUrl(fromQuery) ? fromQuery! : undefined;\n  }\n\n  /**\n   * Replaces the default provider button. Rendered once per provider with a\n   * {@link SparkProviderButtonContext}.\n   *\n   * Reachable only when the consumer *hosts* this component — the router instantiates it with no\n   * projected content, so on a default `withExternalLogin()` route there is nothing to project into.\n   * Host it via `withExternalLogin({ signIn: { path: 'sign-in', component: MySignIn } })` and pass\n   * the template from there.\n   */\n  readonly providerTemplate = input<TemplateRef<SparkProviderButtonContext> | null>(null);\n\n  private readonly reported = signal<SparkExternalProvider[]>([]);\n  readonly localCredentialsAvailable = signal(false);\n  readonly loading = signal(true);\n  readonly failed = signal(false);\n\n  /**\n   * The server's list, decorated and ordered by whatever the application declared. Declared-but-not-\n   * reported schemes are dropped and reported-but-not-declared ones keep a default button, so\n   * neither side can produce a provider the other does not have.\n   */\n  readonly providers = computed<SparkExternalProviderView[]>(() => {\n    const declarations = new Map<string, SparkExternalProviderPresentation>(\n      this.declaredProviders.map(p => [p.scheme.toLowerCase(), p]),\n    );\n\n    return this.reported()\n      .map((provider, index) => {\n        const declared = declarations.get(provider.scheme.toLowerCase());\n        return {\n          provider: {\n            ...provider,\n            displayName: declared?.displayName ?? provider.displayName,\n            iconClass: declared?.iconClass,\n          } satisfies SparkExternalProviderView,\n          // Undeclared providers sort after declared ones, keeping the server's relative order among\n          // themselves — so adding a provider server-side appends a button rather than reshuffling.\n          order: declared?.order ?? Number.MAX_SAFE_INTEGER,\n          index,\n        };\n      })\n      .sort((a, b) => a.order - b.order || a.index - b.index)\n      .map(entry => entry.provider);\n  });\n\n  constructor() {\n    void this.load();\n  }\n\n  private async load(): Promise<void> {\n    try {\n      const capabilities = await this.authService.capabilities();\n      this.reported.set(capabilities.externalProviders);\n      this.localCredentialsAvailable.set(capabilities.localCredentials !== 'Disabled');\n      this.warnOnMismatch(capabilities);\n    } catch {\n      // A sign-in page that renders nothing looks identical to one whose providers all failed to\n      // load, so say which happened rather than showing an empty page.\n      this.failed.set(true);\n    } finally {\n      this.loading.set(false);\n    }\n  }\n\n  /**\n   * The routes are a build-time decision and the server's mode a deployment-time one, so they can\n   * disagree without anything failing loudly. Reaching this page at all means the app routed it,\n   * which it only does when local credentials are meant to be limited.\n   */\n  private warnOnMismatch(capabilities: SparkAuthCapabilities): void {\n    if (isDevMode() && capabilities.localCredentials === 'Full') {\n      console.warn(\n        '[ng-spark-auth] This app routes the sign-in landing page, but the server reports '\n        + 'localCredentials = Full. The two are configured independently — check that the features '\n        + \"passed to sparkAuthRoutes() match AddAuthentication's LocalCredentials mode.\",\n      );\n    }\n  }\n\n  /** The closure handed to a projected template, so a consumer never names a scheme itself. */\n  contextFor(provider: SparkExternalProviderView): SparkProviderButtonContext {\n    return { $implicit: provider, signIn: () => this.signInWith(provider) };\n  }\n\n  signInWith(provider: SparkExternalProviderView): void {\n    void this.authService.loginWithProvider(provider.scheme, { returnUrl: this.effectiveReturnUrl() });\n  }\n}\n\nexport default SparkSignInComponent;\n","<div class=\"d-flex justify-content-center\">\n  <bs-card style=\"width: 100%; max-width: 400px;\">\n    <bs-card-header>\n      <h3 class=\"mb-0 text-center\">{{ 'auth.login' | t }}</h3>\n    </bs-card-header>\n    <div class=\"p-4\">\n      @if (loading()) {\n        <div class=\"text-center\"><bs-spinner /></div>\n      } @else if (failed()) {\n        <bs-alert [type]=\"colors.danger\" class=\"mb-0\">{{ 'auth.signInUnavailable' | t }}</bs-alert>\n      } @else {\n        @for (provider of providers(); track provider.scheme) {\n          @if (providerTemplate(); as tpl) {\n            <ng-container *ngTemplateOutlet=\"tpl; context: contextFor(provider)\" />\n          } @else {\n            <button type=\"button\" class=\"btn btn-outline-primary w-100 mb-2\" (click)=\"signInWith(provider)\">\n              @if (provider.iconClass) {\n                <i [class]=\"provider.iconClass\" class=\"me-2\"></i>\n              }\n              {{ provider.displayName }}\n            </button>\n          }\n        } @empty {\n          <bs-alert [type]=\"colors.warning\" class=\"mb-0\">{{ 'auth.noSignInMethods' | t }}</bs-alert>\n        }\n\n        <!-- Two conditions, not one. The server may still accept passwords while this app chose not\n             to mount the page — sparkAuthRoutes is opt-in per feature now — and a [routerLink] bound\n             to undefined silently navigates to the current route rather than failing. -->\n        @if (localCredentialsAvailable() && routePaths.login) {\n          <div class=\"text-center mt-3\">\n            <a [routerLink]=\"routePaths.login\">{{ 'auth.login' | t }}</a>\n          </div>\n        }\n      }\n    </div>\n  </bs-card>\n</div>\n","/**\n * Generated bundle index. Do not edit.\n */\n\nexport * from './index';\n"],"names":[],"mappings":";;;;;;;;;;;;AAsCA;;;;;;;;;AASG;MAWU,oBAAoB,CAAA;AACd,IAAA,WAAW,GAAG,MAAM,CAAC,gBAAgB,CAAC;AACtC,IAAA,iBAAiB,GAAG,MAAM,CAAC,wBAAwB,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,IAAI,EAAE;IAC9E,KAAK,GAAG,MAAM,CAAC,cAAc,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;AAC1D,IAAA,UAAU,GAAG,MAAM,CAAC,sBAAsB,CAAC;IAC3C,MAAM,GAAG,KAAK;AAEvB;;;;;;;AAOG;IACM,SAAS,GAAG,KAAK,CAAqB,SAAS;kFAAC;IAEjD,kBAAkB,GAAA;AACxB,QAAA,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,EAAE;AACjC,QAAA,IAAI,QAAQ;AAAE,YAAA,OAAO,QAAQ;AAE7B,QAAA,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,EAAE,QAAQ,CAAC,aAAa,CAAC,GAAG,CAAC,WAAW,CAAC;AACrE,QAAA,OAAO,eAAe,CAAC,SAAS,CAAC,GAAG,SAAU,GAAG,SAAS;IAC5D;AAEA;;;;;;;;AAQG;IACM,gBAAgB,GAAG,KAAK,CAAiD,IAAI;yFAAC;IAEtE,QAAQ,GAAG,MAAM,CAA0B,EAAE;iFAAC;IACtD,yBAAyB,GAAG,MAAM,CAAC,KAAK;kGAAC;IACzC,OAAO,GAAG,MAAM,CAAC,IAAI;gFAAC;IACtB,MAAM,GAAG,MAAM,CAAC,KAAK;+EAAC;AAE/B;;;;AAIG;AACM,IAAA,SAAS,GAAG,QAAQ,CAA8B,MAAK;QAC9D,MAAM,YAAY,GAAG,IAAI,GAAG,CAC1B,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,CAAC,CAC7D;QAED,OAAO,IAAI,CAAC,QAAQ;AACjB,aAAA,GAAG,CAAC,CAAC,QAAQ,EAAE,KAAK,KAAI;AACvB,YAAA,MAAM,QAAQ,GAAG,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;YAChE,OAAO;AACL,gBAAA,QAAQ,EAAE;AACR,oBAAA,GAAG,QAAQ;AACX,oBAAA,WAAW,EAAE,QAAQ,EAAE,WAAW,IAAI,QAAQ,CAAC,WAAW;oBAC1D,SAAS,EAAE,QAAQ,EAAE,SAAS;AACK,iBAAA;;;AAGrC,gBAAA,KAAK,EAAE,QAAQ,EAAE,KAAK,IAAI,MAAM,CAAC,gBAAgB;gBACjD,KAAK;aACN;AACH,QAAA,CAAC;aACA,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK;aACrD,GAAG,CAAC,KAAK,IAAI,KAAK,CAAC,QAAQ,CAAC;IACjC,CAAC;kFAAC;AAEF,IAAA,WAAA,GAAA;AACE,QAAA,KAAK,IAAI,CAAC,IAAI,EAAE;IAClB;AAEQ,IAAA,MAAM,IAAI,GAAA;AAChB,QAAA,IAAI;YACF,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,YAAY,EAAE;YAC1D,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,YAAY,CAAC,iBAAiB,CAAC;YACjD,IAAI,CAAC,yBAAyB,CAAC,GAAG,CAAC,YAAY,CAAC,gBAAgB,KAAK,UAAU,CAAC;AAChF,YAAA,IAAI,CAAC,cAAc,CAAC,YAAY,CAAC;QACnC;AAAE,QAAA,MAAM;;;AAGN,YAAA,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC;QACvB;gBAAU;AACR,YAAA,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC;QACzB;IACF;AAEA;;;;AAIG;AACK,IAAA,cAAc,CAAC,YAAmC,EAAA;QACxD,IAAI,SAAS,EAAE,IAAI,YAAY,CAAC,gBAAgB,KAAK,MAAM,EAAE;YAC3D,OAAO,CAAC,IAAI,CACV;kBACE;AACA,kBAAA,8EAA8E,CACjF;QACH;IACF;;AAGA,IAAA,UAAU,CAAC,QAAmC,EAAA;AAC5C,QAAA,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE;IACzE;AAEA,IAAA,UAAU,CAAC,QAAmC,EAAA;AAC5C,QAAA,KAAK,IAAI,CAAC,WAAW,CAAC,iBAAiB,CAAC,QAAQ,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,kBAAkB,EAAE,EAAE,CAAC;IACpG;uGA/GW,oBAAoB,EAAA,IAAA,EAAA,EAAA,EAAA,MAAA,EAAA,EAAA,CAAA,eAAA,CAAA,SAAA,EAAA,CAAA;AAApB,IAAA,OAAA,IAAA,GAAA,EAAA,CAAA,oBAAA,CAAA,EAAA,UAAA,EAAA,QAAA,EAAA,OAAA,EAAA,QAAA,EAAA,IAAA,EAAA,oBAAoB,EAAA,YAAA,EAAA,IAAA,EAAA,QAAA,EAAA,eAAA,EAAA,MAAA,EAAA,EAAA,SAAA,EAAA,EAAA,iBAAA,EAAA,WAAA,EAAA,UAAA,EAAA,WAAA,EAAA,QAAA,EAAA,IAAA,EAAA,UAAA,EAAA,KAAA,EAAA,iBAAA,EAAA,IAAA,EAAA,EAAA,gBAAA,EAAA,EAAA,iBAAA,EAAA,kBAAA,EAAA,UAAA,EAAA,kBAAA,EAAA,QAAA,EAAA,IAAA,EAAA,UAAA,EAAA,KAAA,EAAA,iBAAA,EAAA,IAAA,EAAA,EAAA,EAAA,QAAA,EAAA,EAAA,EAAA,QAAA,EC1DjC,yrDAsCA,EAAA,YAAA,EAAA,CAAA,EAAA,IAAA,EAAA,WAAA,EAAA,IAAA,EDeI,gBAAgB,oJAAE,UAAU,EAAA,QAAA,EAAA,cAAA,EAAA,MAAA,EAAA,CAAA,QAAA,EAAA,aAAA,EAAA,UAAA,EAAA,qBAAA,EAAA,OAAA,EAAA,MAAA,EAAA,YAAA,EAAA,kBAAA,EAAA,oBAAA,EAAA,YAAA,EAAA,YAAA,EAAA,YAAA,CAAA,EAAA,EAAA,EAAA,IAAA,EAAA,WAAA,EAAA,IAAA,EAAE,gBAAgB,EAAA,QAAA,EAAA,UAAA,EAAA,MAAA,EAAA,CAAA,MAAA,EAAA,UAAA,EAAA,WAAA,CAAA,EAAA,OAAA,EAAA,CAAA,iBAAA,EAAA,qBAAA,CAAA,EAAA,EAAA,EAAA,IAAA,EAAA,WAAA,EAAA,IAAA,EAAE,eAAe,EAAA,QAAA,EAAA,SAAA,EAAA,MAAA,EAAA,CAAA,OAAA,EAAA,SAAA,CAAA,EAAA,EAAA,EAAA,IAAA,EAAA,WAAA,EAAA,IAAA,EAAE,qBAAqB,EAAA,QAAA,EAAA,gBAAA,EAAA,MAAA,EAAA,CAAA,OAAA,EAAA,UAAA,CAAA,EAAA,EAAA,EAAA,IAAA,EAAA,WAAA,EAAA,IAAA,EACtF,kBAAkB,6EAAE,gBAAgB,EAAA,IAAA,EAAA,GAAA,EAAA,CAAA,EAAA,eAAA,EAAA,EAAA,CAAA,uBAAA,CAAA,MAAA,EAAA,CAAA;;2FAI3B,oBAAoB,EAAA,UAAA,EAAA,CAAA;kBAVhC,SAAS;AACE,YAAA,IAAA,EAAA,CAAA,EAAA,QAAA,EAAA,eAAe,cACb,IAAI,EAAA,eAAA,EACC,uBAAuB,CAAC,MAAM,EAAA,OAAA,EACtC;AACP,wBAAA,gBAAgB,EAAE,UAAU,EAAE,gBAAgB,EAAE,eAAe,EAAE,qBAAqB;AACtF,wBAAA,kBAAkB,EAAE,gBAAgB;AACrC,qBAAA,EAAA,QAAA,EAAA,yrDAAA,EAAA;;;AEvDH;;AAEG;;;;"}

package/fesm2022/mintplayer-ng-spark-auth-two-factor.mjs

@@ -64,10 +64,10 @@ class SparkTwoFactorComponent {
             this.loading.set(false);
         }
     }
-    static ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "22.0.0", ngImport: i0, type: SparkTwoFactorComponent, deps: [], target: i0.ɵɵFactoryTarget.Component });
-    static ɵcmp = i0.ɵɵngDeclareComponent({ minVersion: "17.0.0", version: "22.0.0", type: SparkTwoFactorComponent, isStandalone: true, selector: "spark-two-factor", ngImport: i0, template: "<div class=\"d-flex justify-content-center\">\n  <bs-card style=\"width: 100%; max-width: 400px;\">\n    <bs-card-header>\n      <h3 class=\"mb-0 text-center\">{{ 'auth.twoFactorTitle' | t }}</h3>\n    </bs-card-header>\n    <div class=\"p-4\">\n      @if (errorMessage()) {\n        <bs-alert [type]=\"colors.danger\" class=\"mb-3\">{{ errorMessage() }}</bs-alert>\n      }\n\n      <bs-form>\n        <form [formGroup]=\"form\" (ngSubmit)=\"onSubmit()\">\n          @if (!useRecoveryCode()) {\n            <div class=\"mb-3\">\n              <label for=\"code\" class=\"form-label\">{{ 'auth.code' | t }}</label>\n              <input\n                type=\"text\"\n                id=\"code\"\n                formControlName=\"code\"\n                autocomplete=\"one-time-code\"\n                maxlength=\"6\"\n                [placeholder]=\"'auth.enterCode' | t\"\n              />\n            </div>\n          } @else {\n            <div class=\"mb-3\">\n              <label for=\"recoveryCode\" class=\"form-label\">{{ 'auth.recoveryCode' | t }}</label>\n              <input\n                type=\"text\"\n                id=\"recoveryCode\"\n                formControlName=\"recoveryCode\"\n                autocomplete=\"off\"\n                [placeholder]=\"'auth.enterRecoveryCode' | t\"\n              />\n            </div>\n          }\n\n          <button\n            type=\"submit\"\n            class=\"btn btn-primary w-100\"\n            [disabled]=\"loading()\"\n          >\n            @if (loading()) {\n              <bs-spinner class=\"me-1\" />\n            }\n            {{ 'auth.verify' | t }}\n          </button>\n        </form>\n      </bs-form>\n\n      <div class=\"mt-3 text-center\">\n        <button class=\"btn btn-link\" (click)=\"toggleRecoveryCode()\">\n          @if (useRecoveryCode()) {\n            {{ 'auth.useAuthCode' | t }}\n          } @else {\n            {{ 'auth.useRecoveryCode' | t }}\n          }\n        </button>\n      </div>\n      <div class=\"mt-2 text-center\">\n        <a [routerLink]=\"routePaths.login\">{{ 'auth.backToLogin' | t }}</a>\n      </div>\n    </div>\n  </bs-card>\n</div>\n", dependencies: [{ kind: "ngmodule", type: ReactiveFormsModule }, { kind: "directive", type: i1.ɵNgNoValidate, selector: "form:not([ngNoForm]):not([ngNativeValidate])" }, { kind: "directive", type: i1.DefaultValueAccessor, selector: "input:not([type=checkbox]):not([ngNoCva])[formControlName],textarea:not([ngNoCva])[formControlName],input:not([type=checkbox]):not([ngNoCva])[formControl],textarea:not([ngNoCva])[formControl],input:not([type=checkbox]):not([ngNoCva])[ngModel],textarea:not([ngNoCva])[ngModel],[ngDefaultControl]" }, { kind: "directive", type: i1.NgControlStatus, selector: "[formControlName],[ngModel],[formControl]" }, { kind: "directive", type: i1.NgControlStatusGroup, selector: "[formGroupName],[formArrayName],[ngModelGroup],[formGroup],[formArray],form:not([ngNoForm]),[ngForm]" }, { kind: "directive", type: i1.MaxLengthValidator, selector: "[maxlength][formControlName],[maxlength][formControl],[maxlength][ngModel]", inputs: ["maxlength"] }, { kind: "directive", type: i1.FormGroupDirective, selector: "[formGroup]", inputs: ["formGroup"], outputs: ["ngSubmit"], exportAs: ["ngForm"] }, { kind: "directive", type: i1.FormControlName, selector: "[formControlName]", inputs: ["formControlName", "disabled", "ngModel"], outputs: ["ngModelChange"] }, { kind: "directive", type: RouterLink, selector: "[routerLink]", inputs: ["target", "queryParams", "fragment", "queryParamsHandling", "state", "info", "relativeTo", "preserveFragment", "skipLocationChange", "replaceUrl", "browserUrl", "routerLink"] }, { kind: "component", type: BsAlertComponent, selector: "bs-alert", inputs: ["type", "announce", "isVisible"], outputs: ["isVisibleChange", "afterOpenedOrClosed"] }, { kind: "component", type: BsCardComponent, selector: "bs-card", inputs: ["color", "outline"] }, { kind: "component", type: BsCardHeaderComponent, selector: "bs-card-header", inputs: ["color", "navStyle"] }, { kind: "component", type: BsFormComponent, selector: "bs-form", inputs: ["action", "method"], outputs: ["submitted"] }, { kind: "directive", type: BsFormControlDirective, selector: "bs-form input:not(.no-form-control), bs-form textarea:not(.no-form-control)" }, { kind: "component", type: BsSpinnerComponent, selector: "bs-spinner", inputs: ["type", "color"] }, { kind: "pipe", type: TranslateKeyPipe, name: "t" }], changeDetection: i0.ChangeDetectionStrategy.OnPush });
+    static ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "22.1.3", ngImport: i0, type: SparkTwoFactorComponent, deps: [], target: i0.ɵɵFactoryTarget.Component });
+    static ɵcmp = i0.ɵɵngDeclareComponent({ minVersion: "17.0.0", version: "22.1.3", type: SparkTwoFactorComponent, isStandalone: true, selector: "spark-two-factor", ngImport: i0, template: "<div class=\"d-flex justify-content-center\">\n  <bs-card style=\"width: 100%; max-width: 400px;\">\n    <bs-card-header>\n      <h3 class=\"mb-0 text-center\">{{ 'auth.twoFactorTitle' | t }}</h3>\n    </bs-card-header>\n    <div class=\"p-4\">\n      @if (errorMessage()) {\n        <bs-alert [type]=\"colors.danger\" class=\"mb-3\">{{ errorMessage() }}</bs-alert>\n      }\n\n      <bs-form>\n        <form [formGroup]=\"form\" (ngSubmit)=\"onSubmit()\">\n          @if (!useRecoveryCode()) {\n            <div class=\"mb-3\">\n              <label for=\"code\" class=\"form-label\">{{ 'auth.code' | t }}</label>\n              <input\n                type=\"text\"\n                id=\"code\"\n                formControlName=\"code\"\n                autocomplete=\"one-time-code\"\n                maxlength=\"6\"\n                [placeholder]=\"'auth.enterCode' | t\"\n              />\n            </div>\n          } @else {\n            <div class=\"mb-3\">\n              <label for=\"recoveryCode\" class=\"form-label\">{{ 'auth.recoveryCode' | t }}</label>\n              <input\n                type=\"text\"\n                id=\"recoveryCode\"\n                formControlName=\"recoveryCode\"\n                autocomplete=\"off\"\n                [placeholder]=\"'auth.enterRecoveryCode' | t\"\n              />\n            </div>\n          }\n\n          <button\n            type=\"submit\"\n            class=\"btn btn-primary w-100\"\n            [disabled]=\"loading()\"\n          >\n            @if (loading()) {\n              <bs-spinner class=\"me-1\" />\n            }\n            {{ 'auth.verify' | t }}\n          </button>\n        </form>\n      </bs-form>\n\n      <div class=\"mt-3 text-center\">\n        <button class=\"btn btn-link\" (click)=\"toggleRecoveryCode()\">\n          @if (useRecoveryCode()) {\n            {{ 'auth.useAuthCode' | t }}\n          } @else {\n            {{ 'auth.useRecoveryCode' | t }}\n          }\n        </button>\n      </div>\n      <div class=\"mt-2 text-center\">\n        <a [routerLink]=\"routePaths.login\">{{ 'auth.backToLogin' | t }}</a>\n      </div>\n    </div>\n  </bs-card>\n</div>\n", dependencies: [{ kind: "ngmodule", type: ReactiveFormsModule }, { kind: "directive", type: i1.ɵNgNoValidate, selector: "form:not([ngNoForm]):not([ngNativeValidate])" }, { kind: "directive", type: i1.DefaultValueAccessor, selector: "input:not([type=checkbox]):not([ngNoCva])[formControlName],textarea:not([ngNoCva])[formControlName],input:not([type=checkbox]):not([ngNoCva])[formControl],textarea:not([ngNoCva])[formControl],input:not([type=checkbox]):not([ngNoCva])[ngModel],textarea:not([ngNoCva])[ngModel],[ngDefaultControl]" }, { kind: "directive", type: i1.NgControlStatus, selector: "[formControlName],[ngModel],[formControl]" }, { kind: "directive", type: i1.NgControlStatusGroup, selector: "[formGroupName],[formArrayName],[ngModelGroup],[formGroup],[formArray],form:not([ngNoForm]),[ngForm]" }, { kind: "directive", type: i1.MaxLengthValidator, selector: "[maxlength][formControlName],[maxlength][formControl],[maxlength][ngModel]", inputs: ["maxlength"] }, { kind: "directive", type: i1.FormGroupDirective, selector: "[formGroup]", inputs: ["formGroup"], outputs: ["ngSubmit"], exportAs: ["ngForm"] }, { kind: "directive", type: i1.FormControlName, selector: "[formControlName]", inputs: ["formControlName", "disabled", "ngModel"], outputs: ["ngModelChange"] }, { kind: "directive", type: RouterLink, selector: "[routerLink]", inputs: ["target", "queryParams", "fragment", "queryParamsHandling", "state", "info", "relativeTo", "preserveFragment", "skipLocationChange", "replaceUrl", "browserUrl", "routerLink"] }, { kind: "component", type: BsAlertComponent, selector: "bs-alert", inputs: ["type", "announce", "isVisible"], outputs: ["isVisibleChange", "afterOpenedOrClosed"] }, { kind: "component", type: BsCardComponent, selector: "bs-card", inputs: ["color", "outline"] }, { kind: "component", type: BsCardHeaderComponent, selector: "bs-card-header", inputs: ["color", "navStyle"] }, { kind: "component", type: BsFormComponent, selector: "bs-form", inputs: ["action", "method"], outputs: ["submitted"] }, { kind: "directive", type: BsFormControlDirective, selector: "bs-form input:not(.no-form-control), bs-form textarea:not(.no-form-control)" }, { kind: "component", type: BsSpinnerComponent, selector: "bs-spinner", inputs: ["type", "color"] }, { kind: "pipe", type: TranslateKeyPipe, name: "t" }], changeDetection: i0.ChangeDetectionStrategy.OnPush });
 }
-i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "22.0.0", ngImport: i0, type: SparkTwoFactorComponent, decorators: [{
+i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "22.1.3", ngImport: i0, type: SparkTwoFactorComponent, decorators: [{
             type: Component,
             args: [{ selector: 'spark-two-factor', standalone: true, changeDetection: ChangeDetectionStrategy.OnPush, imports: [ReactiveFormsModule, RouterLink, BsAlertComponent, BsCardComponent, BsCardHeaderComponent, BsFormComponent, BsFormControlDirective, BsSpinnerComponent, TranslateKeyPipe], template: "<div class=\"d-flex justify-content-center\">\n  <bs-card style=\"width: 100%; max-width: 400px;\">\n    <bs-card-header>\n      <h3 class=\"mb-0 text-center\">{{ 'auth.twoFactorTitle' | t }}</h3>\n    </bs-card-header>\n    <div class=\"p-4\">\n      @if (errorMessage()) {\n        <bs-alert [type]=\"colors.danger\" class=\"mb-3\">{{ errorMessage() }}</bs-alert>\n      }\n\n      <bs-form>\n        <form [formGroup]=\"form\" (ngSubmit)=\"onSubmit()\">\n          @if (!useRecoveryCode()) {\n            <div class=\"mb-3\">\n              <label for=\"code\" class=\"form-label\">{{ 'auth.code' | t }}</label>\n              <input\n                type=\"text\"\n                id=\"code\"\n                formControlName=\"code\"\n                autocomplete=\"one-time-code\"\n                maxlength=\"6\"\n                [placeholder]=\"'auth.enterCode' | t\"\n              />\n            </div>\n          } @else {\n            <div class=\"mb-3\">\n              <label for=\"recoveryCode\" class=\"form-label\">{{ 'auth.recoveryCode' | t }}</label>\n              <input\n                type=\"text\"\n                id=\"recoveryCode\"\n                formControlName=\"recoveryCode\"\n                autocomplete=\"off\"\n                [placeholder]=\"'auth.enterRecoveryCode' | t\"\n              />\n            </div>\n          }\n\n          <button\n            type=\"submit\"\n            class=\"btn btn-primary w-100\"\n            [disabled]=\"loading()\"\n          >\n            @if (loading()) {\n              <bs-spinner class=\"me-1\" />\n            }\n            {{ 'auth.verify' | t }}\n          </button>\n        </form>\n      </bs-form>\n\n      <div class=\"mt-3 text-center\">\n        <button class=\"btn btn-link\" (click)=\"toggleRecoveryCode()\">\n          @if (useRecoveryCode()) {\n            {{ 'auth.useAuthCode' | t }}\n          } @else {\n            {{ 'auth.useRecoveryCode' | t }}\n          }\n        </button>\n      </div>\n      <div class=\"mt-2 text-center\">\n        <a [routerLink]=\"routePaths.login\">{{ 'auth.backToLogin' | t }}</a>\n      </div>\n    </div>\n  </bs-card>\n</div>\n" }]
         }] });

package/fesm2022/mintplayer-ng-spark-auth.mjs

@@ -1,8 +1,10 @@
 import { defaultSparkAuthConfig, SPARK_AUTH_CONFIG } from '@mintplayer/ng-spark-auth/models';
 export { SPARK_AUTH_CONFIG, defaultSparkAuthConfig } from '@mintplayer/ng-spark-auth/models';
-import { makeEnvironmentProviders } from '@angular/core';
+import { makeEnvironmentProviders, inject } from '@angular/core';
 import { withInterceptors, withXsrfConfiguration } from '@angular/common/http';
+import { SPARK_AUTH_STATE } from '@mintplayer/ng-spark';
 import { sparkAuthInterceptor } from '@mintplayer/ng-spark-auth/interceptors';
+import { SparkAuthService } from '@mintplayer/ng-spark-auth/core';
 
 function provideSparkAuth(config) {
     return makeEnvironmentProviders([
@@ -10,6 +12,12 @@ function provideSparkAuth(config) {
             provide: SPARK_AUTH_CONFIG,
             useValue: { ...defaultSparkAuthConfig, ...config },
         },
+        // Bridges sign-in/out into ng-spark (which must not depend on this package): auth-sensitive
+        // consumers there — the program-units menu — track this signal and re-fetch on change.
+        {
+            provide: SPARK_AUTH_STATE,
+            useFactory: () => inject(SparkAuthService).user,
+        },
     ]);
 }
 function withSparkAuth() {
@@ -26,9 +34,9 @@ function withSparkAuth() {
 //   @mintplayer/ng-spark-auth/guards       (sparkAuthGuard)
 //   @mintplayer/ng-spark-auth/interceptors (sparkAuthInterceptor)
 //   @mintplayer/ng-spark-auth/pipes        (TranslateKeyPipe)
-//   @mintplayer/ng-spark-auth/routes       (sparkAuthRoutes)
+//   @mintplayer/ng-spark-auth/routes       (sparkAuthRoutes + its with* features)
 //   @mintplayer/ng-spark-auth/auth-bar     (SparkAuthBarComponent)
-//   @mintplayer/ng-spark-auth/{login,two-factor,register,forgot-password,reset-password}
+//   @mintplayer/ng-spark-auth/{login,two-factor,register,forgot-password,reset-password,sign-in}
 
 /**
  * Generated bundle index. Do not edit.

package/fesm2022/mintplayer-ng-spark-auth.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"mintplayer-ng-spark-auth.mjs","sources":["../../src/lib/provide-spark-auth.ts","../../src/public-api.ts","../../src/mintplayer-ng-spark-auth.ts"],"sourcesContent":["import { EnvironmentProviders, makeEnvironmentProviders } from '@angular/core';\nimport { HttpFeature, HttpFeatureKind, withInterceptors, withXsrfConfiguration } from '@angular/common/http';\nimport {\n  defaultSparkAuthConfig,\n  SPARK_AUTH_CONFIG,\n  SparkAuthConfig,\n} from '@mintplayer/ng-spark-auth/models';\nimport { sparkAuthInterceptor } from '@mintplayer/ng-spark-auth/interceptors';\n\nexport function provideSparkAuth(\n  config?: Partial<SparkAuthConfig>,\n): EnvironmentProviders {\n  return makeEnvironmentProviders([\n    {\n      provide: SPARK_AUTH_CONFIG,\n      useValue: { ...defaultSparkAuthConfig, ...config },\n    },\n  ]);\n}\n\nexport function withSparkAuth(): HttpFeature<HttpFeatureKind>[] {\n  return [\n    withInterceptors([sparkAuthInterceptor]),\n    withXsrfConfiguration({ cookieName: 'XSRF-TOKEN', headerName: 'X-XSRF-TOKEN' }),\n  ];\n}\n","// Root entry point — bootstrap API only.\n// For other members import from sub-paths:\n//   @mintplayer/ng-spark-auth/core         (SparkAuthService, SparkAuthTranslationService)\n//   @mintplayer/ng-spark-auth/models       (types + SPARK_AUTH_ROUTE_PATHS)\n//   @mintplayer/ng-spark-auth/guards       (sparkAuthGuard)\n//   @mintplayer/ng-spark-auth/interceptors (sparkAuthInterceptor)\n//   @mintplayer/ng-spark-auth/pipes        (TranslateKeyPipe)\n//   @mintplayer/ng-spark-auth/routes       (sparkAuthRoutes)\n//   @mintplayer/ng-spark-auth/auth-bar     (SparkAuthBarComponent)\n//   @mintplayer/ng-spark-auth/{login,two-factor,register,forgot-password,reset-password}\n\nexport type { SparkAuthConfig } from '@mintplayer/ng-spark-auth/models';\nexport { SPARK_AUTH_CONFIG, defaultSparkAuthConfig } from '@mintplayer/ng-spark-auth/models';\nexport { provideSparkAuth, withSparkAuth } from './lib/provide-spark-auth';\n","/**\n * Generated bundle index. Do not edit.\n */\n\nexport * from './public-api';\n"],"names":[],"mappings":";;;;;;AASM,SAAU,gBAAgB,CAC9B,MAAiC,EAAA;AAEjC,IAAA,OAAO,wBAAwB,CAAC;AAC9B,QAAA;AACE,YAAA,OAAO,EAAE,iBAAiB;AAC1B,YAAA,QAAQ,EAAE,EAAE,GAAG,sBAAsB,EAAE,GAAG,MAAM,EAAE;AACnD,SAAA;AACF,KAAA,CAAC;AACJ;SAEgB,aAAa,GAAA;IAC3B,OAAO;AACL,QAAA,gBAAgB,CAAC,CAAC,oBAAoB,CAAC,CAAC;QACxC,qBAAqB,CAAC,EAAE,UAAU,EAAE,YAAY,EAAE,UAAU,EAAE,cAAc,EAAE,CAAC;KAChF;AACH;;ACzBA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;ACTA;;AAEG;;;;"}
+{"version":3,"file":"mintplayer-ng-spark-auth.mjs","sources":["../../src/lib/provide-spark-auth.ts","../../src/public-api.ts","../../src/mintplayer-ng-spark-auth.ts"],"sourcesContent":["import { EnvironmentProviders, inject, makeEnvironmentProviders } from '@angular/core';\nimport { HttpFeature, HttpFeatureKind, withInterceptors, withXsrfConfiguration } from '@angular/common/http';\nimport { SPARK_AUTH_STATE } from '@mintplayer/ng-spark';\nimport {\n  defaultSparkAuthConfig,\n  SPARK_AUTH_CONFIG,\n  SparkAuthConfig,\n} from '@mintplayer/ng-spark-auth/models';\nimport { sparkAuthInterceptor } from '@mintplayer/ng-spark-auth/interceptors';\nimport { SparkAuthService } from '@mintplayer/ng-spark-auth/core';\n\nexport function provideSparkAuth(\n  config?: Partial<SparkAuthConfig>,\n): EnvironmentProviders {\n  return makeEnvironmentProviders([\n    {\n      provide: SPARK_AUTH_CONFIG,\n      useValue: { ...defaultSparkAuthConfig, ...config },\n    },\n    // Bridges sign-in/out into ng-spark (which must not depend on this package): auth-sensitive\n    // consumers there — the program-units menu — track this signal and re-fetch on change.\n    {\n      provide: SPARK_AUTH_STATE,\n      useFactory: () => inject(SparkAuthService).user,\n    },\n  ]);\n}\n\nexport function withSparkAuth(): HttpFeature<HttpFeatureKind>[] {\n  return [\n    withInterceptors([sparkAuthInterceptor]),\n    withXsrfConfiguration({ cookieName: 'XSRF-TOKEN', headerName: 'X-XSRF-TOKEN' }),\n  ];\n}\n","// Root entry point — bootstrap API only.\n// For other members import from sub-paths:\n//   @mintplayer/ng-spark-auth/core         (SparkAuthService, SparkAuthTranslationService)\n//   @mintplayer/ng-spark-auth/models       (types + SPARK_AUTH_ROUTE_PATHS)\n//   @mintplayer/ng-spark-auth/guards       (sparkAuthGuard)\n//   @mintplayer/ng-spark-auth/interceptors (sparkAuthInterceptor)\n//   @mintplayer/ng-spark-auth/pipes        (TranslateKeyPipe)\n//   @mintplayer/ng-spark-auth/routes       (sparkAuthRoutes + its with* features)\n//   @mintplayer/ng-spark-auth/auth-bar     (SparkAuthBarComponent)\n//   @mintplayer/ng-spark-auth/{login,two-factor,register,forgot-password,reset-password,sign-in}\n\nexport type { SparkAuthConfig } from '@mintplayer/ng-spark-auth/models';\nexport { SPARK_AUTH_CONFIG, defaultSparkAuthConfig } from '@mintplayer/ng-spark-auth/models';\nexport { provideSparkAuth, withSparkAuth } from './lib/provide-spark-auth';\n","/**\n * Generated bundle index. Do not edit.\n */\n\nexport * from './public-api';\n"],"names":[],"mappings":";;;;;;;;AAWM,SAAU,gBAAgB,CAC9B,MAAiC,EAAA;AAEjC,IAAA,OAAO,wBAAwB,CAAC;AAC9B,QAAA;AACE,YAAA,OAAO,EAAE,iBAAiB;AAC1B,YAAA,QAAQ,EAAE,EAAE,GAAG,sBAAsB,EAAE,GAAG,MAAM,EAAE;AACnD,SAAA;;;AAGD,QAAA;AACE,YAAA,OAAO,EAAE,gBAAgB;YACzB,UAAU,EAAE,MAAM,MAAM,CAAC,gBAAgB,CAAC,CAAC,IAAI;AAChD,SAAA;AACF,KAAA,CAAC;AACJ;SAEgB,aAAa,GAAA;IAC3B,OAAO;AACL,QAAA,gBAAgB,CAAC,CAAC,oBAAoB,CAAC,CAAC;QACxC,qBAAqB,CAAC,EAAE,UAAU,EAAE,YAAY,EAAE,UAAU,EAAE,cAAc,EAAE,CAAC;KAChF;AACH;;ACjCA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;ACTA;;AAEG;;;;"}

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@mintplayer/ng-spark-auth",
   "private": false,
-  "version": "22.2.1",
+  "version": "22.6.0",
   "description": "Angular authentication library for MintPlayer.Spark",
   "repository": {
     "type": "git",
@@ -14,6 +14,7 @@
     "@angular/router": "^22.0.0",
     "@angular/forms": "^22.0.0",
     "@mintplayer/ng-bootstrap": "^22.2.0",
+    "@mintplayer/ng-spark": "^22.6.0",
     "rxjs": "~7.8.0"
   },
   "sideEffects": false,

package/types/mintplayer-ng-spark-auth-forgot-password.d.ts

@@ -7,7 +7,7 @@ declare class SparkForgotPasswordComponent {
     private readonly fb;
     private readonly authService;
     private readonly translation;
-    readonly routePaths: Required<Record<keyof _mintplayer_ng_spark_auth_models.SparkAuthRouteEntries, string>>;
+    readonly routePaths: Partial<Record<keyof _mintplayer_ng_spark_auth_models.SparkAuthRouteEntries, string>>;
     colors: typeof Color;
     readonly loading: _angular_core.WritableSignal<boolean>;
     readonly errorMessage: _angular_core.WritableSignal<string>;

package/types/mintplayer-ng-spark-auth-login.d.ts

@@ -10,7 +10,7 @@ declare class SparkLoginComponent {
     private readonly route;
     private readonly config;
     private readonly translation;
-    readonly routePaths: Required<Record<keyof _mintplayer_ng_spark_auth_models.SparkAuthRouteEntries, string>>;
+    readonly routePaths: Partial<Record<keyof _mintplayer_ng_spark_auth_models.SparkAuthRouteEntries, string>>;
     colors: typeof Color;
     readonly loading: _angular_core.WritableSignal<boolean>;
     readonly errorMessage: _angular_core.WritableSignal<string>;