@ncim/sdk 0.1.0 → 0.2.0

package/fesm2022/ncim-sdk-sso-callback-DxhXnPAG.mjs

@@ -0,0 +1,110 @@
+import * as i0 from '@angular/core';
+import { inject, signal, ChangeDetectionStrategy, Component } from '@angular/core';
+import { takeUntilDestroyed } from '@angular/core/rxjs-interop';
+import { Router, ActivatedRoute } from '@angular/router';
+import { AuthService, SSO_CALLBACK_PARAMS_KEY } from './ncim-sdk-core.mjs';
+import { ROUTE_PATHS } from './ncim-sdk-core.mjs';
+import { SsoCallbackView } from './ncim-sdk-ui.mjs';
+import { S as SSO_ERROR_PARAM, a as SSO_ERROR_DESCRIPTION_PARAM, b as buildSsoErrorQueryParams } from './ncim-sdk-ncim-sdk-DPJwZ1er.mjs';
+
+/**
+ * Smart container for the MOMRAH SSO redirect callback (/sso-callback).
+ *
+ * Handles redirect logic; delegates UI to dumb SsoCallbackView.
+ * By the time this component is created, APP_INITIALIZER has already processed
+ * the authorization code via OidcAuthService.initialize(). This component:
+ * 1. Restores the full callback params (code, scope, state, session_state, iss)
+ *    from localStorage → restores to the URL query string.
+ * 2. Checks for an error query param (e.g. ?error=access_denied) → redirects to /sso-error
+ * 3. Exchanges the OIDC access token for a backend JWT via POST /auth/sso-callback
+ * 4. On success → navigates to the pre-login redirect URL (or Dashboard as fallback)
+ * 5. On failure → redirects to /sso-error with server_error code
+ *
+ * Any app that uses `ssoCallbackRoute()` from `@libs/features` will lazy-load
+ * this component automatically.
+ */
+class SsoCallback {
+    router = inject(Router);
+    authService = inject(AuthService);
+    route = inject(ActivatedRoute);
+    /**
+     * True while the backend token-exchange POST is in-flight.
+     * Drives the "Verifying identity…" message in the view — more accurate
+     * than "Redirecting…" which only applies once the exchange succeeds.
+     */
+    isVerifying = signal(true, ...(ngDevMode ? [{ debugName: "isVerifying" }] : []));
+    constructor() {
+        // this.handleCallback();
+    }
+    handleCallback() {
+        // Restore and persist the callback params that tryLogin() stripped from the URL.
+        const savedParams = this.restoreCallbackParams();
+        // ── Error from SSO server (e.g. access_denied, login_required) ──────────────
+        // Check both the live route params (iss still present) and the saved snapshot.
+        const error = this.route.snapshot.queryParamMap.get(SSO_ERROR_PARAM) ?? savedParams?.[SSO_ERROR_PARAM] ?? null;
+        if (error) {
+            const description = this.route.snapshot.queryParamMap.get(SSO_ERROR_DESCRIPTION_PARAM) ??
+                savedParams?.[SSO_ERROR_DESCRIPTION_PARAM] ??
+                null;
+            this.redirectToError(error, description);
+            return;
+        }
+        // ── Exchange OIDC access token for backend JWT ────────────────────────────────
+        this.authService
+            .completeSsoCallback()
+            .pipe(takeUntilDestroyed())
+            .subscribe({
+            next: () => {
+                // Token exchange succeeded — switch message to "Redirecting…" briefly.
+                this.isVerifying.set(false);
+                // Restore user to the page they were on before SSO login, or Dashboard.
+                // Validate that the stored URL is a local path to prevent open redirects.
+                const redirectUrl = this.authService.getAndClearRedirectUrl();
+                const safeUrl = redirectUrl && redirectUrl.startsWith('/') && !redirectUrl.startsWith('//') && !redirectUrl.includes('://')
+                    ? redirectUrl
+                    : ROUTE_PATHS.DASHBOARD;
+                void this.router.navigateByUrl(safeUrl, { replaceUrl: true });
+            },
+            // Backend rejected the token or network error → send user to error page.
+            error: () => this.redirectToError('server_error', null),
+        });
+    }
+    /**
+     * Reads the param snapshot written by OidcAuthService before tryLogin() ran,
+     * keeps it in localStorage, and restores the full query string to the URL
+     * so the callback URL shows all original params (code, scope, state, session_state, iss).
+     */
+    restoreCallbackParams() {
+        const raw = localStorage.getItem(SSO_CALLBACK_PARAMS_KEY);
+        if (!raw) {
+            return null;
+        }
+        let params;
+        try {
+            params = JSON.parse(raw);
+        }
+        catch {
+            return null;
+        }
+        // Restore full query string to the URL (replaceUrl so no history entry is added).
+        void this.router.navigate([], {
+            relativeTo: this.route,
+            queryParams: params,
+            replaceUrl: true,
+        });
+        return params;
+    }
+    redirectToError(error, description) {
+        const queryParams = buildSsoErrorQueryParams(error, description);
+        void this.router.navigate([ROUTE_PATHS.SSO_ERROR], { queryParams, replaceUrl: true });
+    }
+    static ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "21.1.3", ngImport: i0, type: SsoCallback, deps: [], target: i0.ɵɵFactoryTarget.Component });
+    static ɵcmp = i0.ɵɵngDeclareComponent({ minVersion: "14.0.0", version: "21.1.3", type: SsoCallback, isStandalone: true, selector: "ncim-sso-callback", ngImport: i0, template: "<ncim-sso-callback-view\n  [titleKey]=\"isVerifying() ? 'AUTH.SSO.VERIFYING' : 'AUTH.SSO.REDIRECTING'\"\n  [messageKey]=\"isVerifying() ? 'AUTH.SSO.VERIFYING_DESC' : 'AUTH.SSO.REDIRECTING_DESC'\"\n/>\n", dependencies: [{ kind: "component", type: SsoCallbackView, selector: "ncim-sso-callback-view", inputs: ["titleKey", "messageKey", "spinnerSize"] }], changeDetection: i0.ChangeDetectionStrategy.OnPush });
+}
+i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "21.1.3", ngImport: i0, type: SsoCallback, decorators: [{
+            type: Component,
+            args: [{ selector: 'ncim-sso-callback', imports: [SsoCallbackView], changeDetection: ChangeDetectionStrategy.OnPush, template: "<ncim-sso-callback-view\n  [titleKey]=\"isVerifying() ? 'AUTH.SSO.VERIFYING' : 'AUTH.SSO.REDIRECTING'\"\n  [messageKey]=\"isVerifying() ? 'AUTH.SSO.VERIFYING_DESC' : 'AUTH.SSO.REDIRECTING_DESC'\"\n/>\n" }]
+        }], ctorParameters: () => [] });
+
+export { SsoCallback };
+//# sourceMappingURL=ncim-sdk-sso-callback-DxhXnPAG.mjs.map

package/fesm2022/ncim-sdk-sso-callback-DxhXnPAG.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"ncim-sdk-sso-callback-DxhXnPAG.mjs","sources":["../../../../libs/features/src/lib/sso/components/sso-callback/sso-callback.ts","../../../../libs/features/src/lib/sso/components/sso-callback/sso-callback.html"],"sourcesContent":["import { ChangeDetectionStrategy, Component, inject, signal } from '@angular/core';\nimport { takeUntilDestroyed } from '@angular/core/rxjs-interop';\nimport { ActivatedRoute, Router } from '@angular/router';\nimport { AuthService, SSO_CALLBACK_PARAMS_KEY } from '@libs/core/services';\nimport { ROUTE_PATHS } from '@libs/core/constants';\nimport { SsoCallbackView } from '@libs/ui-components/sso';\nimport { buildSsoErrorQueryParams, SSO_ERROR_DESCRIPTION_PARAM, SSO_ERROR_PARAM } from '../../utils/sso-query-params';\n\n/**\n * Smart container for the MOMRAH SSO redirect callback (/sso-callback).\n *\n * Handles redirect logic; delegates UI to dumb SsoCallbackView.\n * By the time this component is created, APP_INITIALIZER has already processed\n * the authorization code via OidcAuthService.initialize(). This component:\n * 1. Restores the full callback params (code, scope, state, session_state, iss)\n *    from localStorage → restores to the URL query string.\n * 2. Checks for an error query param (e.g. ?error=access_denied) → redirects to /sso-error\n * 3. Exchanges the OIDC access token for a backend JWT via POST /auth/sso-callback\n * 4. On success → navigates to the pre-login redirect URL (or Dashboard as fallback)\n * 5. On failure → redirects to /sso-error with server_error code\n *\n * Any app that uses `ssoCallbackRoute()` from `@libs/features` will lazy-load\n * this component automatically.\n */\n@Component({\n  selector: 'ncim-sso-callback',\n  imports: [SsoCallbackView],\n  templateUrl: './sso-callback.html',\n  changeDetection: ChangeDetectionStrategy.OnPush,\n})\nexport class SsoCallback {\n  private readonly router = inject(Router);\n  private readonly authService = inject(AuthService);\n  private readonly route = inject(ActivatedRoute);\n\n  /**\n   * True while the backend token-exchange POST is in-flight.\n   * Drives the \"Verifying identity…\" message in the view — more accurate\n   * than \"Redirecting…\" which only applies once the exchange succeeds.\n   */\n  readonly isVerifying = signal(true);\n\n  constructor() {\n    // this.handleCallback();\n  }\n\n  private handleCallback(): void {\n    // Restore and persist the callback params that tryLogin() stripped from the URL.\n    const savedParams = this.restoreCallbackParams();\n\n    // ── Error from SSO server (e.g. access_denied, login_required) ──────────────\n    // Check both the live route params (iss still present) and the saved snapshot.\n    const error = this.route.snapshot.queryParamMap.get(SSO_ERROR_PARAM) ?? savedParams?.[SSO_ERROR_PARAM] ?? null;\n\n    if (error) {\n      const description =\n        this.route.snapshot.queryParamMap.get(SSO_ERROR_DESCRIPTION_PARAM) ??\n        savedParams?.[SSO_ERROR_DESCRIPTION_PARAM] ??\n        null;\n      this.redirectToError(error, description);\n      return;\n    }\n\n    // ── Exchange OIDC access token for backend JWT ────────────────────────────────\n    this.authService\n      .completeSsoCallback()\n      .pipe(takeUntilDestroyed())\n      .subscribe({\n        next: () => {\n          // Token exchange succeeded — switch message to \"Redirecting…\" briefly.\n          this.isVerifying.set(false);\n          // Restore user to the page they were on before SSO login, or Dashboard.\n          // Validate that the stored URL is a local path to prevent open redirects.\n          const redirectUrl = this.authService.getAndClearRedirectUrl();\n          const safeUrl =\n            redirectUrl && redirectUrl.startsWith('/') && !redirectUrl.startsWith('//') && !redirectUrl.includes('://')\n              ? redirectUrl\n              : ROUTE_PATHS.DASHBOARD;\n          void this.router.navigateByUrl(safeUrl, { replaceUrl: true });\n        },\n        // Backend rejected the token or network error → send user to error page.\n        error: () => this.redirectToError('server_error', null),\n      });\n  }\n\n  /**\n   * Reads the param snapshot written by OidcAuthService before tryLogin() ran,\n   * keeps it in localStorage, and restores the full query string to the URL\n   * so the callback URL shows all original params (code, scope, state, session_state, iss).\n   */\n  private restoreCallbackParams(): Record<string, string> | null {\n    const raw = localStorage.getItem(SSO_CALLBACK_PARAMS_KEY);\n    if (!raw) {\n      return null;\n    }\n\n    let params: Record<string, string>;\n    try {\n      params = JSON.parse(raw) as Record<string, string>;\n    } catch {\n      return null;\n    }\n\n    // Restore full query string to the URL (replaceUrl so no history entry is added).\n    void this.router.navigate([], {\n      relativeTo: this.route,\n      queryParams: params,\n      replaceUrl: true,\n    });\n\n    return params;\n  }\n\n  private redirectToError(error: string, description: string | null): void {\n    const queryParams = buildSsoErrorQueryParams(error, description);\n    void this.router.navigate([ROUTE_PATHS.SSO_ERROR], { queryParams, replaceUrl: true });\n  }\n}\n","<ncim-sso-callback-view\n  [titleKey]=\"isVerifying() ? 'AUTH.SSO.VERIFYING' : 'AUTH.SSO.REDIRECTING'\"\n  [messageKey]=\"isVerifying() ? 'AUTH.SSO.VERIFYING_DESC' : 'AUTH.SSO.REDIRECTING_DESC'\"\n/>\n"],"names":[],"mappings":";;;;;;;;;AAQA;;;;;;;;;;;;;;;AAeG;MAOU,WAAW,CAAA;AACL,IAAA,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;AACvB,IAAA,WAAW,GAAG,MAAM,CAAC,WAAW,CAAC;AACjC,IAAA,KAAK,GAAG,MAAM,CAAC,cAAc,CAAC;AAE/C;;;;AAIG;AACM,IAAA,WAAW,GAAG,MAAM,CAAC,IAAI,uDAAC;AAEnC,IAAA,WAAA,GAAA;;IAEA;IAEQ,cAAc,GAAA;;AAEpB,QAAA,MAAM,WAAW,GAAG,IAAI,CAAC,qBAAqB,EAAE;;;QAIhD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,aAAa,CAAC,GAAG,CAAC,eAAe,CAAC,IAAI,WAAW,GAAG,eAAe,CAAC,IAAI,IAAI;QAE9G,IAAI,KAAK,EAAE;AACT,YAAA,MAAM,WAAW,GACf,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,aAAa,CAAC,GAAG,CAAC,2BAA2B,CAAC;gBAClE,WAAW,GAAG,2BAA2B,CAAC;AAC1C,gBAAA,IAAI;AACN,YAAA,IAAI,CAAC,eAAe,CAAC,KAAK,EAAE,WAAW,CAAC;YACxC;QACF;;AAGA,QAAA,IAAI,CAAC;AACF,aAAA,mBAAmB;aACnB,IAAI,CAAC,kBAAkB,EAAE;AACzB,aAAA,SAAS,CAAC;YACT,IAAI,EAAE,MAAK;;AAET,gBAAA,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC;;;gBAG3B,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,CAAC,sBAAsB,EAAE;gBAC7D,MAAM,OAAO,GACX,WAAW,IAAI,WAAW,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,KAAK;AACxG,sBAAE;AACF,sBAAE,WAAW,CAAC,SAAS;AAC3B,gBAAA,KAAK,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,OAAO,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;YAC/D,CAAC;;YAED,KAAK,EAAE,MAAM,IAAI,CAAC,eAAe,CAAC,cAAc,EAAE,IAAI,CAAC;AACxD,SAAA,CAAC;IACN;AAEA;;;;AAIG;IACK,qBAAqB,GAAA;QAC3B,MAAM,GAAG,GAAG,YAAY,CAAC,OAAO,CAAC,uBAAuB,CAAC;QACzD,IAAI,CAAC,GAAG,EAAE;AACR,YAAA,OAAO,IAAI;QACb;AAEA,QAAA,IAAI,MAA8B;AAClC,QAAA,IAAI;AACF,YAAA,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAA2B;QACpD;AAAE,QAAA,MAAM;AACN,YAAA,OAAO,IAAI;QACb;;AAGA,QAAA,KAAK,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,EAAE;YAC5B,UAAU,EAAE,IAAI,CAAC,KAAK;AACtB,YAAA,WAAW,EAAE,MAAM;AACnB,YAAA,UAAU,EAAE,IAAI;AACjB,SAAA,CAAC;AAEF,QAAA,OAAO,MAAM;IACf;IAEQ,eAAe,CAAC,KAAa,EAAE,WAA0B,EAAA;QAC/D,MAAM,WAAW,GAAG,wBAAwB,CAAC,KAAK,EAAE,WAAW,CAAC;QAChE,KAAK,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,WAAW,CAAC,SAAS,CAAC,EAAE,EAAE,WAAW,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;IACvF;uGAtFW,WAAW,EAAA,IAAA,EAAA,EAAA,EAAA,MAAA,EAAA,EAAA,CAAA,eAAA,CAAA,SAAA,EAAA,CAAA;2FAAX,WAAW,EAAA,YAAA,EAAA,IAAA,EAAA,QAAA,EAAA,mBAAA,EAAA,QAAA,EAAA,EAAA,EAAA,QAAA,EC9BxB,2MAIA,EAAA,YAAA,EAAA,CAAA,EAAA,IAAA,EAAA,WAAA,EAAA,IAAA,EDsBY,eAAe,EAAA,QAAA,EAAA,wBAAA,EAAA,MAAA,EAAA,CAAA,UAAA,EAAA,YAAA,EAAA,aAAA,CAAA,EAAA,CAAA,EAAA,eAAA,EAAA,EAAA,CAAA,uBAAA,CAAA,MAAA,EAAA,CAAA;;2FAId,WAAW,EAAA,UAAA,EAAA,CAAA;kBANvB,SAAS;AACE,YAAA,IAAA,EAAA,CAAA,EAAA,QAAA,EAAA,mBAAmB,WACpB,CAAC,eAAe,CAAC,EAAA,eAAA,EAET,uBAAuB,CAAC,MAAM,EAAA,QAAA,EAAA,2MAAA,EAAA;;;;;"}

package/fesm2022/ncim-sdk-sso-error-CVdCgF23.mjs

@@ -0,0 +1,73 @@
+import * as i0 from '@angular/core';
+import { inject, computed, ChangeDetectionStrategy, Component } from '@angular/core';
+import { toSignal } from '@angular/core/rxjs-interop';
+import { ActivatedRoute } from '@angular/router';
+import { AuthService } from './ncim-sdk-core.mjs';
+import { ROUTE_PATHS } from './ncim-sdk-core.mjs';
+import { SsoErrorDisplay } from './ncim-sdk-ui.mjs';
+import { c as SSO_UNKNOWN_ERROR_CODE, S as SSO_ERROR_PARAM, a as SSO_ERROR_DESCRIPTION_PARAM, g as getSsoErrorMessageKey } from './ncim-sdk-ncim-sdk-DPJwZ1er.mjs';
+
+/**
+ * Internal/generic error codes generated by the app itself — not meaningful to
+ * show as a raw badge to users (e.g. "server_error", "unknown_error").
+ * Only codes sent directly by the SSO server (access_denied, login_required, …)
+ * are shown as badges.
+ */
+const INTERNAL_ERROR_CODES = new Set(['server_error', 'unknown_error']);
+/**
+ * Errors that the user can recover from by simply retrying the SSO flow.
+ * Non-retryable errors (access_denied, unauthorized_client, …) indicate a
+ * permanent problem that retrying will not fix.
+ */
+const RETRYABLE_ERROR_CODES = new Set([
+    'login_required', // session expired — login again
+    'interaction_required', // user action needed — retry triggers it
+    'consent_required', // user must grant consent — retry asks again
+    'invalid_grant', // code expired — fresh retry starts new flow
+    'temporarily_unavailable', // server busy — retry may succeed
+]);
+/**
+ * Smart container for SSO error display.
+ * Reads route params and passes data to the dumb SsoErrorDisplay component.
+ *
+ * Displayed when the MOMRAH SSO server returns an error on the callback,
+ * e.g. error=access_denied, error=login_required, or an expired/reused code.
+ */
+class SsoError {
+    route = inject(ActivatedRoute);
+    authService = inject(AuthService);
+    queryParamMap = toSignal(this.route.queryParamMap, {
+        initialValue: null,
+    });
+    errorCode = computed(() => this.queryParamMap()?.get(SSO_ERROR_PARAM) ?? SSO_UNKNOWN_ERROR_CODE, ...(ngDevMode ? [{ debugName: "errorCode" }] : []));
+    errorDescription = computed(() => this.queryParamMap()?.get(SSO_ERROR_DESCRIPTION_PARAM) ?? null, ...(ngDevMode ? [{ debugName: "errorDescription" }] : []));
+    errorMessageKey = computed(() => getSsoErrorMessageKey(this.errorCode()), ...(ngDevMode ? [{ debugName: "errorMessageKey" }] : []));
+    /**
+     * Show the error code badge only for codes sent directly by the SSO server.
+     * Internal codes (server_error, unknown_error) are not surfaced as raw strings.
+     */
+    showCodeBadge = computed(() => {
+        const code = this.errorCode();
+        return this.queryParamMap()?.has(SSO_ERROR_PARAM) === true && !INTERNAL_ERROR_CODES.has(code);
+    }, ...(ngDevMode ? [{ debugName: "showCodeBadge" }] : []));
+    /**
+     * True when SSO is enabled and the error is recoverable by retrying the login flow.
+     * Non-retryable errors (access_denied, unauthorized_client, …) only show the back link.
+     */
+    canRetry = computed(() => this.authService.isSsoEnabled && RETRYABLE_ERROR_CODES.has(this.errorCode()), ...(ngDevMode ? [{ debugName: "canRetry" }] : []));
+    /** Login route path for the "Back to login" link. */
+    loginPath = ROUTE_PATHS.AUTH_LOGIN;
+    /** Restart the SSO authorization code flow from the error page. */
+    handleRetry() {
+        this.authService.loginWithSso();
+    }
+    static ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "21.1.3", ngImport: i0, type: SsoError, deps: [], target: i0.ɵɵFactoryTarget.Component });
+    static ɵcmp = i0.ɵɵngDeclareComponent({ minVersion: "14.0.0", version: "21.1.3", type: SsoError, isStandalone: true, selector: "ncim-sso-error", ngImport: i0, template: "<ncim-sso-error-display\n  [errorCode]=\"errorCode()\"\n  [errorDescription]=\"errorDescription()\"\n  [errorMessageKey]=\"errorMessageKey()\"\n  [showCodeBadge]=\"showCodeBadge()\"\n  [showRetryButton]=\"canRetry()\"\n  [loginPath]=\"loginPath\"\n  (retryClick)=\"handleRetry()\"\n/>\n", dependencies: [{ kind: "component", type: SsoErrorDisplay, selector: "ncim-sso-error-display", inputs: ["errorCode", "errorDescription", "errorMessageKey", "showCodeBadge", "showRetryButton", "loginPath", "titleKey", "codeLabelKey", "backToLoginKey", "retryLabelKey"], outputs: ["retryClick"] }], changeDetection: i0.ChangeDetectionStrategy.OnPush });
+}
+i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "21.1.3", ngImport: i0, type: SsoError, decorators: [{
+            type: Component,
+            args: [{ selector: 'ncim-sso-error', imports: [SsoErrorDisplay], changeDetection: ChangeDetectionStrategy.OnPush, template: "<ncim-sso-error-display\n  [errorCode]=\"errorCode()\"\n  [errorDescription]=\"errorDescription()\"\n  [errorMessageKey]=\"errorMessageKey()\"\n  [showCodeBadge]=\"showCodeBadge()\"\n  [showRetryButton]=\"canRetry()\"\n  [loginPath]=\"loginPath\"\n  (retryClick)=\"handleRetry()\"\n/>\n" }]
+        }] });
+
+export { SsoError };
+//# sourceMappingURL=ncim-sdk-sso-error-CVdCgF23.mjs.map

package/fesm2022/ncim-sdk-sso-error-CVdCgF23.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"ncim-sdk-sso-error-CVdCgF23.mjs","sources":["../../../../libs/features/src/lib/sso/components/sso-error/sso-error.ts","../../../../libs/features/src/lib/sso/components/sso-error/sso-error.html"],"sourcesContent":["import { ChangeDetectionStrategy, Component, computed, inject } from '@angular/core';\nimport { toSignal } from '@angular/core/rxjs-interop';\nimport { ActivatedRoute } from '@angular/router';\nimport { AuthService } from '@libs/core/services';\nimport { ROUTE_PATHS } from '@libs/core/constants';\nimport { SsoErrorDisplay } from '@libs/ui-components/sso';\nimport { SSO_ERROR_DESCRIPTION_PARAM, SSO_ERROR_PARAM } from '../../utils/sso-query-params';\nimport { getSsoErrorMessageKey, SSO_UNKNOWN_ERROR_CODE } from '../../constants/sso-error-codes';\n\n/**\n * Internal/generic error codes generated by the app itself — not meaningful to\n * show as a raw badge to users (e.g. \"server_error\", \"unknown_error\").\n * Only codes sent directly by the SSO server (access_denied, login_required, …)\n * are shown as badges.\n */\nconst INTERNAL_ERROR_CODES = new Set(['server_error', 'unknown_error']);\n\n/**\n * Errors that the user can recover from by simply retrying the SSO flow.\n * Non-retryable errors (access_denied, unauthorized_client, …) indicate a\n * permanent problem that retrying will not fix.\n */\nconst RETRYABLE_ERROR_CODES = new Set([\n  'login_required', // session expired — login again\n  'interaction_required', // user action needed — retry triggers it\n  'consent_required', // user must grant consent — retry asks again\n  'invalid_grant', // code expired — fresh retry starts new flow\n  'temporarily_unavailable', // server busy — retry may succeed\n]);\n\n/**\n * Smart container for SSO error display.\n * Reads route params and passes data to the dumb SsoErrorDisplay component.\n *\n * Displayed when the MOMRAH SSO server returns an error on the callback,\n * e.g. error=access_denied, error=login_required, or an expired/reused code.\n */\n@Component({\n  selector: 'ncim-sso-error',\n  imports: [SsoErrorDisplay],\n  templateUrl: './sso-error.html',\n  changeDetection: ChangeDetectionStrategy.OnPush,\n})\nexport class SsoError {\n  private readonly route = inject(ActivatedRoute);\n  private readonly authService = inject(AuthService);\n\n  private readonly queryParamMap = toSignal(this.route.queryParamMap, {\n    initialValue: null,\n  });\n\n  readonly errorCode = computed(() => this.queryParamMap()?.get(SSO_ERROR_PARAM) ?? SSO_UNKNOWN_ERROR_CODE);\n\n  readonly errorDescription = computed(() => this.queryParamMap()?.get(SSO_ERROR_DESCRIPTION_PARAM) ?? null);\n\n  readonly errorMessageKey = computed(() => getSsoErrorMessageKey(this.errorCode()));\n\n  /**\n   * Show the error code badge only for codes sent directly by the SSO server.\n   * Internal codes (server_error, unknown_error) are not surfaced as raw strings.\n   */\n  readonly showCodeBadge = computed(() => {\n    const code = this.errorCode();\n    return this.queryParamMap()?.has(SSO_ERROR_PARAM) === true && !INTERNAL_ERROR_CODES.has(code);\n  });\n\n  /**\n   * True when SSO is enabled and the error is recoverable by retrying the login flow.\n   * Non-retryable errors (access_denied, unauthorized_client, …) only show the back link.\n   */\n  readonly canRetry = computed(() => this.authService.isSsoEnabled && RETRYABLE_ERROR_CODES.has(this.errorCode()));\n\n  /** Login route path for the \"Back to login\" link. */\n  protected readonly loginPath = ROUTE_PATHS.AUTH_LOGIN;\n\n  /** Restart the SSO authorization code flow from the error page. */\n  handleRetry(): void {\n    this.authService.loginWithSso();\n  }\n}\n","<ncim-sso-error-display\n  [errorCode]=\"errorCode()\"\n  [errorDescription]=\"errorDescription()\"\n  [errorMessageKey]=\"errorMessageKey()\"\n  [showCodeBadge]=\"showCodeBadge()\"\n  [showRetryButton]=\"canRetry()\"\n  [loginPath]=\"loginPath\"\n  (retryClick)=\"handleRetry()\"\n/>\n"],"names":[],"mappings":";;;;;;;;;AASA;;;;;AAKG;AACH,MAAM,oBAAoB,GAAG,IAAI,GAAG,CAAC,CAAC,cAAc,EAAE,eAAe,CAAC,CAAC;AAEvE;;;;AAIG;AACH,MAAM,qBAAqB,GAAG,IAAI,GAAG,CAAC;AACpC,IAAA,gBAAgB;AAChB,IAAA,sBAAsB;AACtB,IAAA,kBAAkB;AAClB,IAAA,eAAe;AACf,IAAA,yBAAyB;AAC1B,CAAA,CAAC;AAEF;;;;;;AAMG;MAOU,QAAQ,CAAA;AACF,IAAA,KAAK,GAAG,MAAM,CAAC,cAAc,CAAC;AAC9B,IAAA,WAAW,GAAG,MAAM,CAAC,WAAW,CAAC;IAEjC,aAAa,GAAG,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,aAAa,EAAE;AAClE,QAAA,YAAY,EAAE,IAAI;AACnB,KAAA,CAAC;AAEO,IAAA,SAAS,GAAG,QAAQ,CAAC,MAAM,IAAI,CAAC,aAAa,EAAE,EAAE,GAAG,CAAC,eAAe,CAAC,IAAI,sBAAsB,qDAAC;AAEhG,IAAA,gBAAgB,GAAG,QAAQ,CAAC,MAAM,IAAI,CAAC,aAAa,EAAE,EAAE,GAAG,CAAC,2BAA2B,CAAC,IAAI,IAAI,4DAAC;AAEjG,IAAA,eAAe,GAAG,QAAQ,CAAC,MAAM,qBAAqB,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC,2DAAC;AAElF;;;AAGG;AACM,IAAA,aAAa,GAAG,QAAQ,CAAC,MAAK;AACrC,QAAA,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,EAAE;AAC7B,QAAA,OAAO,IAAI,CAAC,aAAa,EAAE,EAAE,GAAG,CAAC,eAAe,CAAC,KAAK,IAAI,IAAI,CAAC,oBAAoB,CAAC,GAAG,CAAC,IAAI,CAAC;AAC/F,IAAA,CAAC,yDAAC;AAEF;;;AAGG;IACM,QAAQ,GAAG,QAAQ,CAAC,MAAM,IAAI,CAAC,WAAW,CAAC,YAAY,IAAI,qBAAqB,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC,EAAA,IAAA,SAAA,GAAA,CAAA,EAAA,SAAA,EAAA,UAAA,EAAA,CAAA,GAAA,EAAA,CAAA,CAAC;;AAG7F,IAAA,SAAS,GAAG,WAAW,CAAC,UAAU;;IAGrD,WAAW,GAAA;AACT,QAAA,IAAI,CAAC,WAAW,CAAC,YAAY,EAAE;IACjC;uGAnCW,QAAQ,EAAA,IAAA,EAAA,EAAA,EAAA,MAAA,EAAA,EAAA,CAAA,eAAA,CAAA,SAAA,EAAA,CAAA;2FAAR,QAAQ,EAAA,YAAA,EAAA,IAAA,EAAA,QAAA,EAAA,gBAAA,EAAA,QAAA,EAAA,EAAA,EAAA,QAAA,EC3CrB,gSASA,EAAA,YAAA,EAAA,CAAA,EAAA,IAAA,EAAA,WAAA,EAAA,IAAA,ED8BY,eAAe,EAAA,QAAA,EAAA,wBAAA,EAAA,MAAA,EAAA,CAAA,WAAA,EAAA,kBAAA,EAAA,iBAAA,EAAA,eAAA,EAAA,iBAAA,EAAA,WAAA,EAAA,UAAA,EAAA,cAAA,EAAA,gBAAA,EAAA,eAAA,CAAA,EAAA,OAAA,EAAA,CAAA,YAAA,CAAA,EAAA,CAAA,EAAA,eAAA,EAAA,EAAA,CAAA,uBAAA,CAAA,MAAA,EAAA,CAAA;;2FAId,QAAQ,EAAA,UAAA,EAAA,CAAA;kBANpB,SAAS;AACE,YAAA,IAAA,EAAA,CAAA,EAAA,QAAA,EAAA,gBAAgB,WACjB,CAAC,eAAe,CAAC,EAAA,eAAA,EAET,uBAAuB,CAAC,MAAM,EAAA,QAAA,EAAA,gSAAA,EAAA;;;;;"}

package/fesm2022/ncim-sdk-state.mjs

@@ -1,6 +1,52 @@
-export * from '@libs/shared-state';
+import { createActionGroup, emptyProps, props, createFeature, createReducer, on } from '@ngrx/store';
+
+/** User feature actions (load, set/clear current user). */
+const UserActions = createActionGroup({
+    source: 'User',
+    events: {
+        'Load Users': emptyProps(),
+        'Load Users Success': props(),
+        'Load Users Failure': props(),
+        'Set Current User': props(),
+        'Clear Current User': emptyProps(),
+    },
+});
+
+const initialState = {
+    users: [],
+    currentUser: null,
+    loading: false,
+    error: null,
+};
+const userFeature = createFeature({
+    name: 'user',
+    reducer: createReducer(initialState, on(UserActions.loadUsers, state => ({
+        ...state,
+        loading: true,
+        error: null,
+    })), on(UserActions.loadUsersSuccess, (state, { users }) => ({
+        ...state,
+        users,
+        loading: false,
+    })), on(UserActions.loadUsersFailure, (state, { error }) => ({
+        ...state,
+        loading: false,
+        error,
+    })), on(UserActions.setCurrentUser, (state, { user }) => ({
+        ...state,
+        currentUser: user,
+    })), on(UserActions.clearCurrentUser, state => ({
+        ...state,
+        currentUser: null,
+    }))),
+});
+const { name: userFeatureKey, reducer: userReducer, selectUserState, selectUsers, selectCurrentUser, selectLoading, selectError, } = userFeature;
+
+/** User feature selectors. */
 
 /**
  * Generated bundle index. Do not edit.
  */
+
+export { UserActions, selectUsers as selectAllUsers, selectCurrentUser, selectError as selectUserError, selectLoading as selectUserLoading, selectUserState, userFeature, userFeatureKey, userReducer };
 //# sourceMappingURL=ncim-sdk-state.mjs.map

package/fesm2022/ncim-sdk-state.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"ncim-sdk-state.mjs","sources":["../../../../libs/ncim-sdk/state/ncim-sdk-state.ts"],"sourcesContent":["/**\n * Generated bundle index. Do not edit.\n */\n\nexport * from './index';\n"],"names":[],"mappings":";;AAAA;;AAEG"}
+{"version":3,"file":"ncim-sdk-state.mjs","sources":["../../../../libs/shared-state/src/lib/user/user.actions.ts","../../../../libs/shared-state/src/lib/user/user.reducer.ts","../../../../libs/shared-state/src/lib/user/user.selectors.ts","../../../../libs/ncim-sdk-state.ts"],"sourcesContent":["import { createActionGroup, emptyProps, props } from '@ngrx/store';\nimport { User } from './user.model';\n\n/** User feature actions (load, set/clear current user). */\nexport const UserActions = createActionGroup({\n  source: 'User',\n  events: {\n    'Load Users': emptyProps(),\n    'Load Users Success': props<{ users: User[] }>(),\n    'Load Users Failure': props<{ error: string }>(),\n    'Set Current User': props<{ user: User }>(),\n    'Clear Current User': emptyProps(),\n  },\n});\n","import { createFeature, createReducer, on } from '@ngrx/store';\nimport { User } from './user.model';\nimport { UserActions } from './user.actions';\n\n/** User feature state. */\nexport interface UserState {\n  users: User[];\n  currentUser: User | null;\n  loading: boolean;\n  error: string | null;\n}\n\nconst initialState: UserState = {\n  users: [],\n  currentUser: null,\n  loading: false,\n  error: null,\n};\n\nexport const userFeature = createFeature({\n  name: 'user',\n  reducer: createReducer(\n    initialState,\n    on(UserActions.loadUsers, state => ({\n      ...state,\n      loading: true,\n      error: null,\n    })),\n    on(UserActions.loadUsersSuccess, (state, { users }) => ({\n      ...state,\n      users,\n      loading: false,\n    })),\n    on(UserActions.loadUsersFailure, (state, { error }) => ({\n      ...state,\n      loading: false,\n      error,\n    })),\n    on(UserActions.setCurrentUser, (state, { user }) => ({\n      ...state,\n      currentUser: user,\n    })),\n    on(UserActions.clearCurrentUser, state => ({\n      ...state,\n      currentUser: null,\n    }))\n  ),\n});\n\nexport const {\n  name: userFeatureKey,\n  reducer: userReducer,\n  selectUserState,\n  selectUsers,\n  selectCurrentUser,\n  selectLoading,\n  selectError,\n} = userFeature;\n","/** User feature selectors. */\nexport {\n  selectUserState,\n  selectUsers as selectAllUsers,\n  selectCurrentUser,\n  selectLoading as selectUserLoading,\n  selectError as selectUserError,\n} from './user.reducer';\n","/**\n * Generated bundle index. Do not edit.\n */\n\nexport * from './ncim-sdk-state-entry';\n"],"names":[],"mappings":";;AAGA;AACO,MAAM,WAAW,GAAG,iBAAiB,CAAC;AAC3C,IAAA,MAAM,EAAE,MAAM;AACd,IAAA,MAAM,EAAE;QACN,YAAY,EAAE,UAAU,EAAE;QAC1B,oBAAoB,EAAE,KAAK,EAAqB;QAChD,oBAAoB,EAAE,KAAK,EAAqB;QAChD,kBAAkB,EAAE,KAAK,EAAkB;QAC3C,oBAAoB,EAAE,UAAU,EAAE;AACnC,KAAA;AACF,CAAA;;ACDD,MAAM,YAAY,GAAc;AAC9B,IAAA,KAAK,EAAE,EAAE;AACT,IAAA,WAAW,EAAE,IAAI;AACjB,IAAA,OAAO,EAAE,KAAK;AACd,IAAA,KAAK,EAAE,IAAI;CACZ;AAEM,MAAM,WAAW,GAAG,aAAa,CAAC;AACvC,IAAA,IAAI,EAAE,MAAM;AACZ,IAAA,OAAO,EAAE,aAAa,CACpB,YAAY,EACZ,EAAE,CAAC,WAAW,CAAC,SAAS,EAAE,KAAK,KAAK;AAClC,QAAA,GAAG,KAAK;AACR,QAAA,OAAO,EAAE,IAAI;AACb,QAAA,KAAK,EAAE,IAAI;AACZ,KAAA,CAAC,CAAC,EACH,EAAE,CAAC,WAAW,CAAC,gBAAgB,EAAE,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,MAAM;AACtD,QAAA,GAAG,KAAK;QACR,KAAK;AACL,QAAA,OAAO,EAAE,KAAK;AACf,KAAA,CAAC,CAAC,EACH,EAAE,CAAC,WAAW,CAAC,gBAAgB,EAAE,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,MAAM;AACtD,QAAA,GAAG,KAAK;AACR,QAAA,OAAO,EAAE,KAAK;QACd,KAAK;AACN,KAAA,CAAC,CAAC,EACH,EAAE,CAAC,WAAW,CAAC,cAAc,EAAE,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,MAAM;AACnD,QAAA,GAAG,KAAK;AACR,QAAA,WAAW,EAAE,IAAI;AAClB,KAAA,CAAC,CAAC,EACH,EAAE,CAAC,WAAW,CAAC,gBAAgB,EAAE,KAAK,KAAK;AACzC,QAAA,GAAG,KAAK;AACR,QAAA,WAAW,EAAE,IAAI;AAClB,KAAA,CAAC,CAAC,CACJ;AACF,CAAA;MAEY,EACX,IAAI,EAAE,cAAc,EACpB,OAAO,EAAE,WAAW,EACpB,eAAe,EACf,WAAW,EACX,iBAAiB,EACjB,aAAa,EACb,WAAW,GACZ,GAAG;;ACzDJ;;ACAA;;AAEG;;;;"}