@mintplayer/ng-spark 22.29.0 → 22.31.0

package/fesm2022/mintplayer-ng-spark-identity-provider-management.mjs

@@ -0,0 +1,350 @@
+import * as i0 from "@angular/core";
+import { ChangeDetectionStrategy, Component, inject, signal } from "@angular/core";
+import { RouterLink } from "@angular/router";
+import { Color } from "@mintplayer/ng-bootstrap";
+import { BsAlertComponent } from "@mintplayer/ng-bootstrap/alert";
+import { BsBadgeComponent } from "@mintplayer/ng-bootstrap/badge";
+import { BsCardComponent, BsCardHeaderComponent } from "@mintplayer/ng-bootstrap/card";
+import { BsSpinnerComponent } from "@mintplayer/ng-bootstrap/spinner";
+import { BsTableComponent } from "@mintplayer/ng-bootstrap/table";
+import { SPARK_IDENTITY_PROVIDER_QUERIES, SparkIdentityProviderDatePipe, SparkIdentityProviderPortalService, SparkIdentityProviderTextPipe, identityProviderQueryLink, injectIdentityProviderText } from "@mintplayer/ng-spark/identity-provider/core";
+const QUEUES = [
+	{
+		label: "query.DeveloperRequests",
+		alias: SPARK_IDENTITY_PROVIDER_QUERIES.developerRequests
+	},
+	{
+		label: "query.ScopeApprovals",
+		alias: SPARK_IDENTITY_PROVIDER_QUERIES.scopeApprovals
+	},
+	{
+		label: "query.GoLiveReviews",
+		alias: SPARK_IDENTITY_PROVIDER_QUERIES.goLiveReviews
+	},
+	{
+		label: "query.Applications",
+		alias: SPARK_IDENTITY_PROVIDER_QUERIES.applications
+	},
+	{
+		label: "query.Resources",
+		alias: SPARK_IDENTITY_PROVIDER_QUERIES.resources
+	},
+	{
+		label: "query.Grants",
+		alias: SPARK_IDENTITY_PROVIDER_QUERIES.grants
+	},
+	{
+		label: "query.AuditEvents",
+		alias: SPARK_IDENTITY_PROVIDER_QUERIES.auditEvents
+	}
+];
+var SparkIdentityProviderManagementComponent = class SparkIdentityProviderManagementComponent {
+	text = injectIdentityProviderText();
+	portal = inject(SparkIdentityProviderPortalService);
+	colors = Color;
+	queues = QUEUES;
+	queryLink = identityProviderQueryLink;
+	loading = signal(true, ...ngDevMode ? [{ debugName: "loading" }] : /* istanbul ignore next */ []);
+	busy = signal(false, ...ngDevMode ? [{ debugName: "busy" }] : /* istanbul ignore next */ []);
+	forbidden = signal(false, ...ngDevMode ? [{ debugName: "forbidden" }] : /* istanbul ignore next */ []);
+	keys = signal([], ...ngDevMode ? [{ debugName: "keys" }] : /* istanbul ignore next */ []);
+	changes = signal([], ...ngDevMode ? [{ debugName: "changes" }] : /* istanbul ignore next */ []);
+	error = signal("", ...ngDevMode ? [{ debugName: "error" }] : /* istanbul ignore next */ []);
+	notice = signal("", ...ngDevMode ? [{ debugName: "notice" }] : /* istanbul ignore next */ []);
+	constructor() {
+		this.load();
+	}
+	async load() {
+		const result = await this.portal.signingKeys();
+		if (result.ok) this.keys.set(result.value);
+		else if (result.status === 403) this.forbidden.set(true);
+		else this.error.set(this.text("loadFailed"));
+		this.loading.set(false);
+	}
+	async rotate() {
+		if (!confirm(this.text("admin.confirmRotate"))) return;
+		this.busy.set(true);
+		this.error.set("");
+		this.notice.set("");
+		const result = await this.portal.rotateSigningKeys();
+		if (result.ok) {
+			this.changes.set(result.value.changes ?? []);
+			this.notice.set(this.text("admin.rotated"));
+			await this.load();
+		} else if (result.status === 403) this.forbidden.set(true);
+		else this.error.set(this.text("admin.rotateFailed"));
+		this.busy.set(false);
+	}
+	stateColor(state) {
+		switch (state.toLowerCase()) {
+			case "active": return Color.success;
+			case "retired": return Color.secondary;
+			default: return Color.info;
+		}
+	}
+	static ɵfac = i0.ɵɵngDeclareFactory({
+		minVersion: "12.0.0",
+		version: "22.2.0",
+		ngImport: i0,
+		type: SparkIdentityProviderManagementComponent,
+		deps: [],
+		target: i0.ɵɵFactoryTarget.Component
+	});
+	static ɵcmp = i0.ɵɵngDeclareComponent({
+		minVersion: "17.0.0",
+		version: "22.2.0",
+		type: SparkIdentityProviderManagementComponent,
+		isStandalone: true,
+		selector: "spark-identity-provider-management",
+		ngImport: i0,
+		template: `
+    <div class="d-flex justify-content-center">
+      <bs-card style="width: 100%; max-width: 960px;">
+        <bs-card-header><h3 class="mb-0">{{ 'admin.title' | idp }}</h3></bs-card-header>
+        <div class="p-4">
+          @if (loading()) {
+            <div class="text-center"><bs-spinner /></div>
+          } @else if (forbidden()) {
+            <bs-alert [type]="colors.warning" class="d-block spark-idp-not-allowed">{{ 'admin.notAllowed' | idp }}</bs-alert>
+          } @else {
+            @if (notice()) {
+              <bs-alert [type]="colors.success" class="mb-3 d-block spark-idp-notice">{{ notice() }}</bs-alert>
+            }
+            @if (error()) {
+              <bs-alert [type]="colors.danger" class="mb-3 d-block spark-idp-error">{{ error() }}</bs-alert>
+            }
+
+            <h5>{{ 'admin.queues' | idp }}</h5>
+            <ul class="list-unstyled mb-4">
+              @for (queue of queues; track queue.alias) {
+                <li class="py-1"><a class="spark-idp-queue" [routerLink]="queryLink(queue.alias)">{{ queue.label | idp }}</a></li>
+              }
+            </ul>
+
+            <h5>{{ 'admin.keys' | idp }}</h5>
+            <p class="text-muted">{{ 'admin.keysHint' | idp }}</p>
+            @if (keys().length) {
+              <bs-table [isResponsive]="true">
+                <thead>
+                  <tr>
+                    <th>{{ 'admin.kid' | idp }}</th>
+                    <th>{{ 'admin.algorithm' | idp }}</th>
+                    <th>{{ 'admin.state' | idp }}</th>
+                    <th>{{ 'admin.created' | idp }}</th>
+                    <th>{{ 'admin.activated' | idp }}</th>
+                    <th>{{ 'admin.retired' | idp }}</th>
+                  </tr>
+                </thead>
+                <tbody>
+                  @for (key of keys(); track key.kid) {
+                    <tr class="spark-idp-key" [attr.data-state]="key.state">
+                      <td class="font-monospace text-break">{{ key.kid }}</td>
+                      <td>{{ key.algorithm }}</td>
+                      <td><bs-badge [type]="stateColor(key.state)">{{ key.state }}</bs-badge></td>
+                      <td>{{ key.createdAt | idpDate }}</td>
+                      <td>{{ key.activatedAt | idpDate }}</td>
+                      <td>{{ key.retiredAt | idpDate }}</td>
+                    </tr>
+                  }
+                </tbody>
+              </bs-table>
+            } @else {
+              <p class="text-muted spark-idp-no-keys">{{ 'admin.noKeys' | idp }}</p>
+            }
+            <button type="button" class="btn btn-outline-danger spark-idp-rotate" [disabled]="busy()" (click)="rotate()">
+              @if (busy()) { <bs-spinner class="me-1" /> }
+              {{ 'admin.rotate' | idp }}
+            </button>
+            @if (changes().length) {
+              <ul class="small text-muted mt-3 mb-0 spark-idp-rotation-changes">
+                @for (change of changes(); track $index) { <li>{{ change }}</li> }
+              </ul>
+            }
+          }
+        </div>
+      </bs-card>
+    </div>
+  `,
+		isInline: true,
+		dependencies: [
+			{
+				kind: "directive",
+				type: RouterLink,
+				selector: "[routerLink]",
+				inputs: [
+					"target",
+					"queryParams",
+					"fragment",
+					"queryParamsHandling",
+					"state",
+					"info",
+					"relativeTo",
+					"preserveFragment",
+					"skipLocationChange",
+					"replaceUrl",
+					"browserUrl",
+					"routerLink"
+				]
+			},
+			{
+				kind: "component",
+				type: BsAlertComponent,
+				selector: "bs-alert",
+				inputs: [
+					"type",
+					"announce",
+					"isVisible"
+				],
+				outputs: ["isVisibleChange", "afterOpenedOrClosed"]
+			},
+			{
+				kind: "component",
+				type: BsBadgeComponent,
+				selector: "bs-badge",
+				inputs: [
+					"type",
+					"unit",
+					"decorative"
+				]
+			},
+			{
+				kind: "component",
+				type: BsCardComponent,
+				selector: "bs-card",
+				inputs: ["color", "outline"]
+			},
+			{
+				kind: "component",
+				type: BsCardHeaderComponent,
+				selector: "bs-card-header",
+				inputs: ["color", "navStyle"]
+			},
+			{
+				kind: "component",
+				type: BsSpinnerComponent,
+				selector: "bs-spinner",
+				inputs: ["type", "color"]
+			},
+			{
+				kind: "component",
+				type: BsTableComponent,
+				selector: "bs-table",
+				inputs: [
+					"isResponsive",
+					"striped",
+					"hover",
+					"border",
+					"ariaRowCount"
+				]
+			},
+			{
+				kind: "pipe",
+				type: SparkIdentityProviderTextPipe,
+				name: "idp"
+			},
+			{
+				kind: "pipe",
+				type: SparkIdentityProviderDatePipe,
+				name: "idpDate"
+			}
+		],
+		changeDetection: i0.ChangeDetectionStrategy.OnPush
+	});
+};
+i0.ɵɵngDeclareClassMetadata({
+	minVersion: "12.0.0",
+	version: "22.2.0",
+	ngImport: i0,
+	type: SparkIdentityProviderManagementComponent,
+	decorators: [{
+		type: Component,
+		args: [{
+			selector: "spark-identity-provider-management",
+			standalone: true,
+			changeDetection: ChangeDetectionStrategy.OnPush,
+			imports: [
+				RouterLink,
+				BsAlertComponent,
+				BsBadgeComponent,
+				BsCardComponent,
+				BsCardHeaderComponent,
+				BsSpinnerComponent,
+				BsTableComponent,
+				SparkIdentityProviderTextPipe,
+				SparkIdentityProviderDatePipe
+			],
+			template: `
+    <div class="d-flex justify-content-center">
+      <bs-card style="width: 100%; max-width: 960px;">
+        <bs-card-header><h3 class="mb-0">{{ 'admin.title' | idp }}</h3></bs-card-header>
+        <div class="p-4">
+          @if (loading()) {
+            <div class="text-center"><bs-spinner /></div>
+          } @else if (forbidden()) {
+            <bs-alert [type]="colors.warning" class="d-block spark-idp-not-allowed">{{ 'admin.notAllowed' | idp }}</bs-alert>
+          } @else {
+            @if (notice()) {
+              <bs-alert [type]="colors.success" class="mb-3 d-block spark-idp-notice">{{ notice() }}</bs-alert>
+            }
+            @if (error()) {
+              <bs-alert [type]="colors.danger" class="mb-3 d-block spark-idp-error">{{ error() }}</bs-alert>
+            }
+
+            <h5>{{ 'admin.queues' | idp }}</h5>
+            <ul class="list-unstyled mb-4">
+              @for (queue of queues; track queue.alias) {
+                <li class="py-1"><a class="spark-idp-queue" [routerLink]="queryLink(queue.alias)">{{ queue.label | idp }}</a></li>
+              }
+            </ul>
+
+            <h5>{{ 'admin.keys' | idp }}</h5>
+            <p class="text-muted">{{ 'admin.keysHint' | idp }}</p>
+            @if (keys().length) {
+              <bs-table [isResponsive]="true">
+                <thead>
+                  <tr>
+                    <th>{{ 'admin.kid' | idp }}</th>
+                    <th>{{ 'admin.algorithm' | idp }}</th>
+                    <th>{{ 'admin.state' | idp }}</th>
+                    <th>{{ 'admin.created' | idp }}</th>
+                    <th>{{ 'admin.activated' | idp }}</th>
+                    <th>{{ 'admin.retired' | idp }}</th>
+                  </tr>
+                </thead>
+                <tbody>
+                  @for (key of keys(); track key.kid) {
+                    <tr class="spark-idp-key" [attr.data-state]="key.state">
+                      <td class="font-monospace text-break">{{ key.kid }}</td>
+                      <td>{{ key.algorithm }}</td>
+                      <td><bs-badge [type]="stateColor(key.state)">{{ key.state }}</bs-badge></td>
+                      <td>{{ key.createdAt | idpDate }}</td>
+                      <td>{{ key.activatedAt | idpDate }}</td>
+                      <td>{{ key.retiredAt | idpDate }}</td>
+                    </tr>
+                  }
+                </tbody>
+              </bs-table>
+            } @else {
+              <p class="text-muted spark-idp-no-keys">{{ 'admin.noKeys' | idp }}</p>
+            }
+            <button type="button" class="btn btn-outline-danger spark-idp-rotate" [disabled]="busy()" (click)="rotate()">
+              @if (busy()) { <bs-spinner class="me-1" /> }
+              {{ 'admin.rotate' | idp }}
+            </button>
+            @if (changes().length) {
+              <ul class="small text-muted mt-3 mb-0 spark-idp-rotation-changes">
+                @for (change of changes(); track $index) { <li>{{ change }}</li> }
+              </ul>
+            }
+          }
+        </div>
+      </bs-card>
+    </div>
+  `
+		}]
+	}],
+	ctorParameters: () => []
+});
+export { SparkIdentityProviderManagementComponent };
+
+//# sourceMappingURL=mintplayer-ng-spark-identity-provider-management.mjs.map

package/fesm2022/mintplayer-ng-spark-identity-provider-management.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"mintplayer-ng-spark-identity-provider-management.mjs","names":[],"sources":["../../identity-provider/management/src/spark-identity-provider-management.component.ts"],"sourcesContent":["import { ChangeDetectionStrategy, Component, inject, signal } from '@angular/core';\nimport { RouterLink } from '@angular/router';\nimport { Color } from '@mintplayer/ng-bootstrap';\nimport { BsAlertComponent } from '@mintplayer/ng-bootstrap/alert';\nimport { BsBadgeComponent } from '@mintplayer/ng-bootstrap/badge';\nimport { BsCardComponent, BsCardHeaderComponent } from '@mintplayer/ng-bootstrap/card';\nimport { BsSpinnerComponent } from '@mintplayer/ng-bootstrap/spinner';\nimport { BsTableComponent } from '@mintplayer/ng-bootstrap/table';\nimport {\n  SPARK_IDENTITY_PROVIDER_QUERIES,\n  SparkIdentityProviderDatePipe,\n  SparkIdentityProviderPortalService,\n  SparkIdentityProviderTextPipe,\n  SparkSigningKey,\n  identityProviderQueryLink,\n  injectIdentityProviderText,\n} from '@mintplayer/ng-spark/identity-provider/core';\n\n/** The library's queues and records, in the order an administrator works through them. */\nconst QUEUES: { label: string; alias: string }[] = [\n  { label: 'query.DeveloperRequests', alias: SPARK_IDENTITY_PROVIDER_QUERIES.developerRequests },\n  { label: 'query.ScopeApprovals', alias: SPARK_IDENTITY_PROVIDER_QUERIES.scopeApprovals },\n  { label: 'query.GoLiveReviews', alias: SPARK_IDENTITY_PROVIDER_QUERIES.goLiveReviews },\n  { label: 'query.Applications', alias: SPARK_IDENTITY_PROVIDER_QUERIES.applications },\n  { label: 'query.Resources', alias: SPARK_IDENTITY_PROVIDER_QUERIES.resources },\n  { label: 'query.Grants', alias: SPARK_IDENTITY_PROVIDER_QUERIES.grants },\n  { label: 'query.AuditEvents', alias: SPARK_IDENTITY_PROVIDER_QUERIES.auditEvents },\n];\n\n/**\n * The identity provider's management page (`identity-provider/admin`, PRD D9), for its\n * administrators (`ManageAll/IdentityProvider`): the signing keys with a rotate-now action, and links\n * to the library's queues (developer requests, scope approvals, go-live reviews) and records (grants,\n * the audit trail) in the generic query page. The server answers 403 to anyone else, and the page\n * then says so instead of rendering an empty administration screen.\n */\n@Component({\n  selector: 'spark-identity-provider-management',\n  standalone: true,\n  changeDetection: ChangeDetectionStrategy.OnPush,\n  imports: [\n    RouterLink, BsAlertComponent, BsBadgeComponent, BsCardComponent, BsCardHeaderComponent, BsSpinnerComponent,\n    BsTableComponent, SparkIdentityProviderTextPipe, SparkIdentityProviderDatePipe,\n  ],\n  template: `\n    <div class=\"d-flex justify-content-center\">\n      <bs-card style=\"width: 100%; max-width: 960px;\">\n        <bs-card-header><h3 class=\"mb-0\">{{ 'admin.title' | idp }}</h3></bs-card-header>\n        <div class=\"p-4\">\n          @if (loading()) {\n            <div class=\"text-center\"><bs-spinner /></div>\n          } @else if (forbidden()) {\n            <bs-alert [type]=\"colors.warning\" class=\"d-block spark-idp-not-allowed\">{{ 'admin.notAllowed' | idp }}</bs-alert>\n          } @else {\n            @if (notice()) {\n              <bs-alert [type]=\"colors.success\" class=\"mb-3 d-block spark-idp-notice\">{{ notice() }}</bs-alert>\n            }\n            @if (error()) {\n              <bs-alert [type]=\"colors.danger\" class=\"mb-3 d-block spark-idp-error\">{{ error() }}</bs-alert>\n            }\n\n            <h5>{{ 'admin.queues' | idp }}</h5>\n            <ul class=\"list-unstyled mb-4\">\n              @for (queue of queues; track queue.alias) {\n                <li class=\"py-1\"><a class=\"spark-idp-queue\" [routerLink]=\"queryLink(queue.alias)\">{{ queue.label | idp }}</a></li>\n              }\n            </ul>\n\n            <h5>{{ 'admin.keys' | idp }}</h5>\n            <p class=\"text-muted\">{{ 'admin.keysHint' | idp }}</p>\n            @if (keys().length) {\n              <bs-table [isResponsive]=\"true\">\n                <thead>\n                  <tr>\n                    <th>{{ 'admin.kid' | idp }}</th>\n                    <th>{{ 'admin.algorithm' | idp }}</th>\n                    <th>{{ 'admin.state' | idp }}</th>\n                    <th>{{ 'admin.created' | idp }}</th>\n                    <th>{{ 'admin.activated' | idp }}</th>\n                    <th>{{ 'admin.retired' | idp }}</th>\n                  </tr>\n                </thead>\n                <tbody>\n                  @for (key of keys(); track key.kid) {\n                    <tr class=\"spark-idp-key\" [attr.data-state]=\"key.state\">\n                      <td class=\"font-monospace text-break\">{{ key.kid }}</td>\n                      <td>{{ key.algorithm }}</td>\n                      <td><bs-badge [type]=\"stateColor(key.state)\">{{ key.state }}</bs-badge></td>\n                      <td>{{ key.createdAt | idpDate }}</td>\n                      <td>{{ key.activatedAt | idpDate }}</td>\n                      <td>{{ key.retiredAt | idpDate }}</td>\n                    </tr>\n                  }\n                </tbody>\n              </bs-table>\n            } @else {\n              <p class=\"text-muted spark-idp-no-keys\">{{ 'admin.noKeys' | idp }}</p>\n            }\n            <button type=\"button\" class=\"btn btn-outline-danger spark-idp-rotate\" [disabled]=\"busy()\" (click)=\"rotate()\">\n              @if (busy()) { <bs-spinner class=\"me-1\" /> }\n              {{ 'admin.rotate' | idp }}\n            </button>\n            @if (changes().length) {\n              <ul class=\"small text-muted mt-3 mb-0 spark-idp-rotation-changes\">\n                @for (change of changes(); track $index) { <li>{{ change }}</li> }\n              </ul>\n            }\n          }\n        </div>\n      </bs-card>\n    </div>\n  `,\n})\nexport class SparkIdentityProviderManagementComponent {\n  private readonly text = injectIdentityProviderText();\n  private readonly portal = inject(SparkIdentityProviderPortalService);\n  protected readonly colors = Color;\n  protected readonly queues = QUEUES;\n  protected readonly queryLink = identityProviderQueryLink;\n\n  readonly loading = signal(true);\n  readonly busy = signal(false);\n  readonly forbidden = signal(false);\n  readonly keys = signal<SparkSigningKey[]>([]);\n  readonly changes = signal<string[]>([]);\n  readonly error = signal('');\n  readonly notice = signal('');\n\n  constructor() {\n    void this.load();\n  }\n\n  async load(): Promise<void> {\n    const result = await this.portal.signingKeys();\n    if (result.ok) {\n      this.keys.set(result.value);\n    } else if (result.status === 403) {\n      this.forbidden.set(true);\n    } else {\n      this.error.set(this.text('loadFailed'));\n    }\n    this.loading.set(false);\n  }\n\n  async rotate(): Promise<void> {\n    if (!confirm(this.text('admin.confirmRotate'))) return;\n    this.busy.set(true);\n    this.error.set('');\n    this.notice.set('');\n    const result = await this.portal.rotateSigningKeys();\n    if (result.ok) {\n      this.changes.set(result.value.changes ?? []);\n      this.notice.set(this.text('admin.rotated'));\n      await this.load();\n    } else if (result.status === 403) {\n      this.forbidden.set(true);\n    } else {\n      this.error.set(this.text('admin.rotateFailed'));\n    }\n    this.busy.set(false);\n  }\n\n  protected stateColor(state: string): Color {\n    switch (state.toLowerCase()) {\n      case 'active': return Color.success;\n      case 'retired': return Color.secondary;\n      default: return Color.info;\n    }\n  }\n}\n"],"mappings":";;;;;;;;;;AAmBA,MAAM,SAA6C;CACjD;EAAE,OAAO;EAA2B,OAAO,gCAAgC;CAAiB;CAC5F;EAAE,OAAO;EAAwB,OAAO,gCAAgC;CAAc;CACtF;EAAE,OAAO;EAAuB,OAAO,gCAAgC;CAAa;CACpF;EAAE,OAAO;EAAsB,OAAO,gCAAgC;CAAY;CAClF;EAAE,OAAO;EAAmB,OAAO,gCAAgC;CAAS;CAC5E;EAAE,OAAO;EAAgB,OAAO,gCAAgC;CAAM;CACtE;EAAE,OAAO;EAAqB,OAAO,gCAAgC;CAAW;AACjF;AAsFD,IAAa,2CAAb,MAAa,yCAAwC;CAClC,OAAO,2BAA0B;CACjC,SAAS,OAAO,kCAAkC;CAChD,SAAS;CACT,SAAS;CACT,YAAY;CAEtB,UAAU,OAAO,MAAK,GAAA,YAAA,CAAA,EAAA,WAAA,UAAA,CAAA,+BAAA,CAAA,CAAA;CACtB,OAAO,OAAO,OAAM,GAAA,YAAA,CAAA,EAAA,WAAA,OAAA,CAAA,+BAAA,CAAA,CAAA;CACpB,YAAY,OAAO,OAAM,GAAA,YAAA,CAAA,EAAA,WAAA,YAAA,CAAA,+BAAA,CAAA,CAAA;CACzB,OAAO,OAA0B,CAAA,GAAG,GAAA,YAAA,CAAA,EAAA,WAAA,OAAA,CAAA,+BAAA,CAAA,CAAA;CACpC,UAAU,OAAiB,CAAA,GAAG,GAAA,YAAA,CAAA,EAAA,WAAA,UAAA,CAAA,+BAAA,CAAA,CAAA;CAC9B,QAAQ,OAAO,IAAG,GAAA,YAAA,CAAA,EAAA,WAAA,QAAA,CAAA,+BAAA,CAAA,CAAA;CAClB,SAAS,OAAO,IAAG,GAAA,YAAA,CAAA,EAAA,WAAA,SAAA,CAAA,+BAAA,CAAA,CAAA;CAE5B,cAAA;EACE,AAAK,KAAK,KAAI;CAChB;CAEA,MAAM,OAAI;EACR,MAAM,SAAS,MAAM,KAAK,OAAO,YAAW;EAC5C,IAAI,OAAO,IACT,KAAK,KAAK,IAAI,OAAO,KAAK;OACrB,IAAI,OAAO,WAAW,KAC3B,KAAK,UAAU,IAAI,IAAI;OAEvB,KAAK,MAAM,IAAI,KAAK,KAAK,YAAY,CAAC;EAExC,KAAK,QAAQ,IAAI,KAAK;CACxB;CAEA,MAAM,SAAM;EACV,IAAI,CAAC,QAAQ,KAAK,KAAK,qBAAqB,CAAC,GAAG;EAChD,KAAK,KAAK,IAAI,IAAI;EAClB,KAAK,MAAM,IAAI,EAAE;EACjB,KAAK,OAAO,IAAI,EAAE;EAClB,MAAM,SAAS,MAAM,KAAK,OAAO,kBAAiB;EAClD,IAAI,OAAO,IAAI;GACb,KAAK,QAAQ,IAAI,OAAO,MAAM,WAAW,CAAA,CAAE;GAC3C,KAAK,OAAO,IAAI,KAAK,KAAK,eAAe,CAAC;GAC1C,MAAM,KAAK,KAAI;EACjB,OAAO,IAAI,OAAO,WAAW,KAC3B,KAAK,UAAU,IAAI,IAAI;OAEvB,KAAK,MAAM,IAAI,KAAK,KAAK,oBAAoB,CAAC;EAEhD,KAAK,KAAK,IAAI,KAAK;CACrB;CAEU,WAAW,OAAa;EAChC,QAAQ,MAAM,YAAW,GAAzB;GACE,KAAK,UAAU,OAAO,MAAM;GAC5B,KAAK,WAAW,OAAO,MAAM;GAC7B,SAAS,OAAO,MAAM;EACxB;CACF;CAvDW,OAAA,OAAA,GAAA,mBAAA;EAAA,YAAA;EAAA,SAAA;EAAA,UAAA;EAAA,MAAA;EAAwC,MAAA,CAAA;EAAA,QAAA,GAAA,gBAAA;CAAA,CAAA;CAAxC,OAAA,OAAA,GAAA,qBAAA;EAAA,YAAA;EAAA,SAAA;EAAA,MAAA;EAAwC,cAAA;EAAA,UAAA;EAAA,UAAA;EAAA,UArEzC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAmET,UAAA;EAAA,cAAA;GAAA;IAAA,MAAA;IAAA,MAtEC;IAAU,UAAA;IAAA,QAAA;KAAA;KAAA;KAAA;KAAA;KAAA;KAAA;KAAA;KAAA;KAAA;KAAA;KAAA;KAAA;IAAA;GAAA;GAAA;IAAA,MAAA;IAAA,MAAE;IAAgB,UAAA;IAAA,QAAA;KAAA;KAAA;KAAA;IAAA;IAAA,SAAA,CAAA,mBAAA,qBAAA;GAAA;GAAA;IAAA,MAAA;IAAA,MAAE;IAAgB,UAAA;IAAA,QAAA;KAAA;KAAA;KAAA;IAAA;GAAA;GAAA;IAAA,MAAA;IAAA,MAAE;IAAe,UAAA;IAAA,QAAA,CAAA,SAAA,SAAA;GAAA;GAAA;IAAA,MAAA;IAAA,MAAE;IAAqB,UAAA;IAAA,QAAA,CAAA,SAAA,UAAA;GAAA;GAAA;IAAA,MAAA;IAAA,MAAE;IAAkB,UAAA;IAAA,QAAA,CAAA,QAAA,OAAA;GAAA;GAAA;IAAA,MAAA;IAAA,MAC1G;IAAgB,UAAA;IAAA,QAAA;KAAA;KAAA;KAAA;KAAA;KAAA;IAAA;GAAA;GAAA;IAAA,MAAA;IAAA,MAAE;IAA6B,MAAA;GAAA;GAAA;IAAA,MAAA;IAAA,MAAE;IAA6B,MAAA;GAAA;EAAA;EAAA,iBAAA,GAAA,wBAAA;CAAA,CAAA;;AAuErE,GAAA,yBAAA;CAAA,YAAA;CAAA,SAAA;CAAA,UAAA;CAAA,MAAA;CAAwC,YAAA,CAAA;EA7EpD,MAAA;EAAU,MAAA,CAAA;GACT,UAAU;GACV,YAAY;GACZ,iBAAiB,wBAAwB;GACzC,SAAS;IACP;IAAY;IAAkB;IAAkB;IAAiB;IAAuB;IACxF;IAAkB;IAA+B;GAClD;GACD,UAAU;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAoEX,CAAA"}

package/fesm2022/mintplayer-ng-spark-identity-provider.mjs

@@ -0,0 +1,66 @@
+import { sparkAuthGuard } from "@mintplayer/ng-spark/auth/guards";
+export * from "@mintplayer/ng-spark/identity-provider/core";
+function entryPath(entry, defaultPath) {
+	if (entry === void 0) return defaultPath;
+	return typeof entry === "string" ? entry : entry.path;
+}
+function child(entry, path, loader, guard) {
+	const component = typeof entry === "object" && entry.component ? entry.component : void 0;
+	return {
+		path,
+		loadComponent: component ? () => Promise.resolve(component) : loader,
+		...guard.length ? { canActivate: guard } : {}
+	};
+}
+function withIdentityProvider(...features) {
+	const children = [];
+	const paths = {};
+	const accountLinks = [];
+	for (const feature of features) {
+		children.push(...feature.children);
+		Object.assign(paths, feature.paths);
+		if (feature.accountLinks) accountLinks.push(...feature.accountLinks);
+	}
+	return {
+		children,
+		paths,
+		accountLinks
+	};
+}
+function withConnectedApplications(options) {
+	const guard = options?.canActivate ?? [sparkAuthGuard];
+	const path = entryPath(options?.connectedApplications, "account/applications");
+	return {
+		paths: { connectedApplications: "/" + path },
+		accountLinks: [{
+			key: "connectedApplications",
+			path: "/" + path,
+			label: {
+				en: "Connected applications",
+				fr: "Applications connectées",
+				nl: "Verbonden applicaties"
+			}
+		}],
+		children: [child(options?.connectedApplications, path, () => import("@mintplayer/ng-spark/identity-provider/connected-applications").then((m) => m.SparkConnectedApplicationsComponent), guard)]
+	};
+}
+function withDeveloperRoutes(options) {
+	const guard = options?.canActivate ?? [sparkAuthGuard];
+	const developers = entryPath(options?.developers, "developers");
+	const invitation = entryPath(options?.invitation, "developers/invitations/:token");
+	return {
+		paths: { developers: "/" + developers },
+		children: [child(options?.developers, developers, () => import("@mintplayer/ng-spark/identity-provider/developers").then((m) => m.SparkDevelopersComponent), guard), child(options?.invitation, invitation, () => import("@mintplayer/ng-spark/identity-provider/developers").then((m) => m.SparkAcceptInvitationComponent), guard)]
+	};
+}
+function withManagementRoutes(options) {
+	const guard = options?.canActivate ?? [sparkAuthGuard];
+	const path = entryPath(options?.identityProviderManagement, "identity-provider/admin");
+	return {
+		paths: { identityProviderManagement: "/" + path },
+		children: [child(options?.identityProviderManagement, path, () => import("@mintplayer/ng-spark/identity-provider/management").then((m) => m.SparkIdentityProviderManagementComponent), guard)]
+	};
+}
+export { withConnectedApplications, withDeveloperRoutes, withIdentityProvider, withManagementRoutes };
+
+//# sourceMappingURL=mintplayer-ng-spark-identity-provider.mjs.map

package/fesm2022/mintplayer-ng-spark-identity-provider.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"mintplayer-ng-spark-identity-provider.mjs","names":[],"sources":["../../identity-provider/src/identity-provider-routes.ts"],"sourcesContent":["import type { CanActivateFn } from '@angular/router';\nimport { sparkAuthGuard } from '@mintplayer/ng-spark/auth/guards';\nimport type { SparkAuthRouteEntry, SparkAuthRoutePaths, SparkAccountOverviewLink } from '@mintplayer/ng-spark/auth/models';\nimport type { SparkAuthRoutesFeature } from '@mintplayer/ng-spark/auth/routes';\n\ntype Child = SparkAuthRoutesFeature['children'][number];\ntype Loader = () => Promise<any>;\n\n/**\n * One group of identity-provider pages, passed to {@link withIdentityProvider}. Produced only by\n * `withConnectedApplications()`, `withDeveloperRoutes()` and `withManagementRoutes()`.\n */\nexport interface SparkIdentityProviderRoutesFeature {\n  readonly children: Child[];\n  readonly paths: SparkAuthRoutePaths;\n  readonly accountLinks?: SparkAccountOverviewLink[];\n}\n\n/** Every feature's guard option: defaults to `[sparkAuthGuard]`; `[]` under an already guarded parent. */\nexport interface SparkIdentityProviderGuardOptions {\n  canActivate?: CanActivateFn[];\n}\n\nfunction entryPath(entry: SparkAuthRouteEntry | undefined, defaultPath: string): string {\n  if (entry === undefined) return defaultPath;\n  return typeof entry === 'string' ? entry : entry.path;\n}\n\n/** An explicitly supplied component wins over the library's lazy import, as in `sparkAuthRoutes()`. */\nfunction child(entry: SparkAuthRouteEntry | undefined, path: string, loader: Loader, guard: CanActivateFn[]): Child {\n  const component = typeof entry === 'object' && entry.component ? entry.component : undefined;\n  return {\n    path,\n    loadComponent: component ? () => Promise.resolve(component) : loader,\n    ...(guard.length ? { canActivate: guard } : {}),\n  };\n}\n\n/**\n * The identity provider's SPA pages (`docs/identity_provider_platform_PRD.md` D7), as one\n * `sparkAuthRoutes()` feature:\n *\n * ```ts\n * sparkAuthRoutes(\n *   withLocalLogin(), withAccount(),\n *   withIdentityProvider(withConnectedApplications(), withDeveloperRoutes(), withManagementRoutes()),\n * )\n * ```\n *\n * The sub-features merge into one feature, and each page keeps its own `import()` (its own secondary\n * entry point), so a page nobody opts into is never bundled. The pages popups show (`/connect/*`:\n * sign-in, consent, device, logout, error) are server-rendered and not part of this.\n *\n * Every path has a literal first segment, so the group neither shadows `sparkRoutes()` nor is shadowed\n * by it. Apps and resources are edited in the generic `po/:type` screens (PRD Q1 = A).\n */\nexport function withIdentityProvider(...features: SparkIdentityProviderRoutesFeature[]): SparkAuthRoutesFeature {\n  const children: Child[] = [];\n  const paths: SparkAuthRoutePaths = {};\n  const accountLinks: SparkAccountOverviewLink[] = [];\n  for (const feature of features) {\n    children.push(...feature.children);\n    Object.assign(paths, feature.paths);\n    if (feature.accountLinks) accountLinks.push(...feature.accountLinks);\n  }\n  return { children, paths, accountLinks };\n}\n\n/**\n * Mounts the connected-applications page (default `account/applications`, PRD D6): the applications\n * the user granted access to, with whole-grant and per-scope withdrawal. Sets\n * `SPARK_AUTH_ROUTE_PATHS.connectedApplications` and adds a link to the account overview.\n */\nexport function withConnectedApplications(\n  options?: SparkIdentityProviderGuardOptions & { connectedApplications?: SparkAuthRouteEntry },\n): SparkIdentityProviderRoutesFeature {\n  const guard = options?.canActivate ?? [sparkAuthGuard];\n  const path = entryPath(options?.connectedApplications, 'account/applications');\n  return {\n    paths: { connectedApplications: '/' + path },\n    accountLinks: [{ key: 'connectedApplications', path: '/' + path, label: { en: 'Connected applications', fr: 'Applications connectées', nl: 'Verbonden applicaties' } }],\n    children: [\n      child(options?.connectedApplications, path,\n        () => import('@mintplayer/ng-spark/identity-provider/connected-applications').then(m => m.SparkConnectedApplicationsComponent),\n        guard),\n    ],\n  };\n}\n\n/**\n * Mounts the developer portal (PRD D2/D3): `developers` (status, terms, request, registration token)\n * and `developers/invitations/:token?app=<applicationId>` (accept a team invitation; the mailed link's\n * target, which the server builds from this default path). Both need a signed-in user; the guard sends\n * anyone else to sign in and back.\n */\nexport function withDeveloperRoutes(\n  options?: SparkIdentityProviderGuardOptions & { developers?: SparkAuthRouteEntry; invitation?: SparkAuthRouteEntry },\n): SparkIdentityProviderRoutesFeature {\n  const guard = options?.canActivate ?? [sparkAuthGuard];\n  const developers = entryPath(options?.developers, 'developers');\n  const invitation = entryPath(options?.invitation, 'developers/invitations/:token');\n  return {\n    paths: { developers: '/' + developers },\n    children: [\n      child(options?.developers, developers,\n        () => import('@mintplayer/ng-spark/identity-provider/developers').then(m => m.SparkDevelopersComponent),\n        guard),\n      child(options?.invitation, invitation,\n        () => import('@mintplayer/ng-spark/identity-provider/developers').then(m => m.SparkAcceptInvitationComponent),\n        guard),\n    ],\n  };\n}\n\n/**\n * Mounts the management page (default `identity-provider/admin`, PRD D9): signing keys with\n * rotate-now, and links to the queues (developer requests, scope approvals, go-live reviews) and\n * records (applications, resources, grants, audit trail). Mount it for everyone signed in: the server\n * decides who is an administrator, and the page tells anyone else they may not see it.\n */\nexport function withManagementRoutes(\n  options?: SparkIdentityProviderGuardOptions & { identityProviderManagement?: SparkAuthRouteEntry },\n): SparkIdentityProviderRoutesFeature {\n  const guard = options?.canActivate ?? [sparkAuthGuard];\n  const path = entryPath(options?.identityProviderManagement, 'identity-provider/admin');\n  return {\n    paths: { identityProviderManagement: '/' + path },\n    children: [\n      child(options?.identityProviderManagement, path,\n        () => import('@mintplayer/ng-spark/identity-provider/management').then(m => m.SparkIdentityProviderManagementComponent),\n        guard),\n    ],\n  };\n}\n"],"mappings":";;AAuBA,SAAS,UAAU,OAAwC,aAAmB;CAC5E,IAAI,UAAU,QAAW,OAAO;CAChC,OAAO,OAAO,UAAU,WAAW,QAAQ,MAAM;AACnD;AAGA,SAAS,MAAM,OAAwC,MAAc,QAAgB,OAAsB;CACzG,MAAM,YAAY,OAAO,UAAU,YAAY,MAAM,YAAY,MAAM,YAAY;CACnF,OAAO;EACL;EACA,eAAe,kBAAkB,QAAQ,QAAQ,SAAS,IAAI;EAC9D,GAAI,MAAM,SAAS,EAAE,aAAa,MAAK,IAAK,CAAA;CAC7C;AACH;AAoBA,SAAgB,qBAAqB,GAAG,UAA8C;CACpF,MAAM,WAAoB,CAAA;CAC1B,MAAM,QAA6B,CAAA;CACnC,MAAM,eAA2C,CAAA;CACjD,KAAK,MAAM,WAAW,UAAU;EAC9B,SAAS,KAAK,GAAG,QAAQ,QAAQ;EACjC,OAAO,OAAO,OAAO,QAAQ,KAAK;EAClC,IAAI,QAAQ,cAAc,aAAa,KAAK,GAAG,QAAQ,YAAY;CACrE;CACA,OAAO;EAAE;EAAU;EAAO;CAAY;AACxC;AAOA,SAAgB,0BACd,SAA6F;CAE7F,MAAM,QAAQ,SAAS,eAAe,CAAC,cAAc;CACrD,MAAM,OAAO,UAAU,SAAS,uBAAuB,sBAAsB;CAC7E,OAAO;EACL,OAAO,EAAE,uBAAuB,MAAM,KAAI;EAC1C,cAAc,CAAC;GAAE,KAAK;GAAyB,MAAM,MAAM;GAAM,OAAO;IAAE,IAAI;IAA0B,IAAI;IAA2B,IAAI;GAAuB;EAAE,CAAE;EACtK,UAAU,CACR,MAAM,SAAS,uBAAuB,YAC9B,OAAO,gEAAgE,CAAC,MAAK,MAAK,EAAE,mCAAmC,GAC7H,KAAK,CACR;CACF;AACH;AAQA,SAAgB,oBACd,SAAoH;CAEpH,MAAM,QAAQ,SAAS,eAAe,CAAC,cAAc;CACrD,MAAM,aAAa,UAAU,SAAS,YAAY,YAAY;CAC9D,MAAM,aAAa,UAAU,SAAS,YAAY,+BAA+B;CACjF,OAAO;EACL,OAAO,EAAE,YAAY,MAAM,WAAU;EACrC,UAAU,CACR,MAAM,SAAS,YAAY,kBACnB,OAAO,oDAAoD,CAAC,MAAK,MAAK,EAAE,wBAAwB,GACtG,KAAK,GACP,MAAM,SAAS,YAAY,kBACnB,OAAO,oDAAoD,CAAC,MAAK,MAAK,EAAE,8BAA8B,GAC5G,KAAK,CACR;CACF;AACH;AAQA,SAAgB,qBACd,SAAkG;CAElG,MAAM,QAAQ,SAAS,eAAe,CAAC,cAAc;CACrD,MAAM,OAAO,UAAU,SAAS,4BAA4B,yBAAyB;CACrF,OAAO;EACL,OAAO,EAAE,4BAA4B,MAAM,KAAI;EAC/C,UAAU,CACR,MAAM,SAAS,4BAA4B,YACnC,OAAO,oDAAoD,CAAC,MAAK,MAAK,EAAE,wCAAwC,GACtH,KAAK,CACR;CACF;AACH"}

package/fesm2022/mintplayer-ng-spark-models.mjs

@@ -227,6 +227,7 @@ var ELookupDisplayType;
 	ELookupDisplayType[ELookupDisplayType["Dropdown"] = 0] = "Dropdown";
 	ELookupDisplayType[ELookupDisplayType["Modal"] = 1] = "Modal";
 })(ELookupDisplayType || (ELookupDisplayType = {}));
+const SPARK_RETRY_CANCEL = "Cancel";
 function comparableValue(attribute) {
 	if (!attribute) return "\0absent";
 	return JSON.stringify({
@@ -481,6 +482,6 @@ function toNumber(value) {
 	const n = Number(value);
 	return Number.isFinite(n) ? n : null;
 }
-export { AS_DETAIL_BREADCRUMBS_KEY, AS_DETAIL_METADATA_KEY, AS_DETAIL_ORIGINAL_DATES_KEY, AS_DETAIL_ROW_KEY, AS_DETAIL_SELF_BREADCRUMB_KEY, ELookupDisplayType, EReferenceDisplayType, SPARK_MAX_SELECTED_ITEMS, ShowedOn, applyOverlay, builtInAction, comparableFormValue, comparableValue, confirmationText, currentLanguage, defaultQueryActions, dictToNestedPo, evaluateRules, filterDetailActions, filterQueryActions, formValuesEqual, fromDateInput, fromDateInputValue, fromDateTimeLocalInput, hasShowedOnFlag, isDateDataType, isPersistentObject, isQueryRow, isReservedAsDetailKey, isShowedOnDetail, isShowedOnQuery, mergeRefreshValues, needsSelection, nestedPoToDict, nestedPoToDisplayRow, normalizeSubQuery, overlayFromResponse, parseSelectionRule, parseWireDate, resolveTranslation, resolvedBreadcrumb, rowMetadata, selectionModeFor, selfBreadcrumb, subQueriesOf, toDateInput, toDateInputValue, toDateTimeLocalInput, valueFor, wireDatesEqual };
+export { AS_DETAIL_BREADCRUMBS_KEY, AS_DETAIL_METADATA_KEY, AS_DETAIL_ORIGINAL_DATES_KEY, AS_DETAIL_ROW_KEY, AS_DETAIL_SELF_BREADCRUMB_KEY, ELookupDisplayType, EReferenceDisplayType, SPARK_MAX_SELECTED_ITEMS, SPARK_RETRY_CANCEL, ShowedOn, applyOverlay, builtInAction, comparableFormValue, comparableValue, confirmationText, currentLanguage, defaultQueryActions, dictToNestedPo, evaluateRules, filterDetailActions, filterQueryActions, formValuesEqual, fromDateInput, fromDateInputValue, fromDateTimeLocalInput, hasShowedOnFlag, isDateDataType, isPersistentObject, isQueryRow, isReservedAsDetailKey, isShowedOnDetail, isShowedOnQuery, mergeRefreshValues, needsSelection, nestedPoToDict, nestedPoToDisplayRow, normalizeSubQuery, overlayFromResponse, parseSelectionRule, parseWireDate, resolveTranslation, resolvedBreadcrumb, rowMetadata, selectionModeFor, selfBreadcrumb, subQueriesOf, toDateInput, toDateInputValue, toDateTimeLocalInput, valueFor, wireDatesEqual };
 
 //# sourceMappingURL=mintplayer-ng-spark-models.mjs.map