@opengeoweb/authentication 14.0.0 → 14.1.0

package/index.esm.js

@@ -1,6 +1,6 @@
 import { jsx, jsxs, Fragment } from 'react/jsx-runtime';
 import * as React from 'react';
-import React__default, { useRef } from 'react';
+import React__default, { useRef, useEffect } from 'react';
 import axios from 'axios';
 import { Navigate, Link } from 'react-router-dom';
 import { sessionStorageProvider, useIsMounted, SHARED_NAMESPACE, AlertBanner, useDebounce } from '@opengeoweb/shared';
@@ -346,28 +346,18 @@ function _regeneratorRuntime() {
   })();
 }
 
-var API_NAMESPACE$1 = 'api';
 var DEFAULT_TIMEOUT = 15000;
 var KEEP_ALIVE_POLLER_IN_SECONDS = 60; // Number of seconds between the checks if the token should be refreshed.
 var REFRESH_TOKEN_WHEN_PCT_EXPIRED = 75; // Refresh token when 75% expired. Set to (10 / 3600) * 100 = 0.2777778% to test with 10 second interval (assuming 1 hour token expiration).
 var DEFAULT_TOKEN_EXPIRES_IN = 3600; // Number of seconds a token expires by default
 var MILLISECOND_TO_SECOND = 1 / 1000;
-var ns$1 = API_NAMESPACE$1;
 var GEOWEB_ROLE_PRESETS_ADMIN = {
   name: 'ROLE_PRESET_ADMIN',
-  getTitle: function getTitle(t) {
-    return t('api-role-title-preset-admin', {
-      ns: ns$1
-    });
-  }
+  title: 'api-role-title-preset-admin'
 };
 var GEOWEB_ROLE_USER = {
   name: 'ROLE_USER',
-  getTitle: function getTitle(t) {
-    return t('api-role-title-user', {
-      ns: ns$1
-    });
-  }
+  title: 'api-role-title-user'
 };
 /**
  * Creates a Credentials object based on the axios response from the token service.
@@ -378,7 +368,8 @@ var GEOWEB_ROLE_USER = {
  * @returns Credentials object.
  */
 var makeCredentialsFromTokenResponse = function makeCredentialsFromTokenResponse(tokenResponse, authConfig) {
-  var token = tokenResponse.data.body || tokenResponse.data;
+  var _tokenResponse$data$b;
+  var token = (_tokenResponse$data$b = tokenResponse.data.body) != null ? _tokenResponse$data$b : tokenResponse.data;
   // eslint-disable-next-line @typescript-eslint/naming-convention
   var access_token = token.access_token,
     refresh_token = token.refresh_token,
@@ -402,60 +393,67 @@ var makeCredentialsFromTokenResponse = function makeCredentialsFromTokenResponse
     username: isAuthCognito ? userInfo['cognito:username'] : userInfo.email,
     roles: groupsToRoles(groups, authConfig),
     token: access_token,
-    refresh_token: refresh_token || '',
+    refresh_token: refresh_token != null ? refresh_token : '',
     expires_at: epochTimeTokenExpirationInSeconds,
     has_connection_issue: false
   };
   return newAuth;
 };
-var refreshAccessToken = function refreshAccessToken(_ref) {
-  var auth = _ref.auth,
-    _ref$config = _ref.config,
-    _ref$config2 = _ref$config === void 0 ? {} : _ref$config,
-    authTokenURL = _ref$config2.authTokenURL,
-    authClientId = _ref$config2.authClientId,
-    appURL = _ref$config2.appURL,
-    _ref$timeout = _ref.timeout,
-    timeout = _ref$timeout === void 0 ? DEFAULT_TIMEOUT : _ref$timeout;
-  // Refresh token request with a new axios instance
-  // without request interceptor
-  var tokenAxiosInstance = axios.create({
-    headers: {},
-    timeout: timeout
-  });
-  var refreshPayload = {
-    refresh_token: auth.refresh_token,
-    redirect_uri: appURL + "/code",
-    grant_type: 'refresh_token',
-    client_id: authClientId
-  };
-  /* Send data in the "application/x-www-form-urlencoded" format.
-    If only JSON is supported, use Axios' default content type ("application/x-www-form-urlencoded"). */
-  var useDefaultContentType = authTokenURL.includes('amazonaws.com');
-  var data = useDefaultContentType ? refreshPayload : new URLSearchParams(refreshPayload);
-  var axiosConfig = {
-    headers: {
-      'Content-Type': useDefaultContentType ? 'application/json' : 'application/x-www-form-urlencoded'
-    }
-  };
-  return tokenAxiosInstance.post(authTokenURL, data, axiosConfig);
-};
-var refreshAccessTokenAndSetAuthContext = /*#__PURE__*/function () {
-  var _ref3 = _asyncToGenerator(/*#__PURE__*/_regeneratorRuntime().mark(function _callee(_ref2) {
-    var auth, onSetAuth, config, _ref2$timeout, timeout, configURLS, onLogin, refreshedToken, newAuth, _e$response, status;
+var refreshAccessToken = /*#__PURE__*/function () {
+  var _ref2 = _asyncToGenerator(/*#__PURE__*/_regeneratorRuntime().mark(function _callee(_ref) {
+    var auth, _ref$config, _ref$config2, authTokenURL, authClientId, appURL, _ref$timeout, timeout, tokenAxiosInstance, refreshPayload, useDefaultContentType, data, axiosConfig;
     return _regeneratorRuntime().wrap(function _callee$(_context) {
       while (1) switch (_context.prev = _context.next) {
         case 0:
-          auth = _ref2.auth, onSetAuth = _ref2.onSetAuth, config = _ref2.config, _ref2$timeout = _ref2.timeout, timeout = _ref2$timeout === void 0 ? DEFAULT_TIMEOUT : _ref2$timeout, configURLS = _ref2.configURLS, onLogin = _ref2.onLogin;
-          _context.prev = 1;
-          _context.next = 4;
+          auth = _ref.auth, _ref$config = _ref.config, _ref$config2 = _ref$config === void 0 ? {} : _ref$config, authTokenURL = _ref$config2.authTokenURL, authClientId = _ref$config2.authClientId, appURL = _ref$config2.appURL, _ref$timeout = _ref.timeout, timeout = _ref$timeout === void 0 ? DEFAULT_TIMEOUT : _ref$timeout;
+          // Refresh token request with a new axios instance
+          // without request interceptor
+          tokenAxiosInstance = axios.create({
+            headers: {},
+            timeout: timeout
+          });
+          refreshPayload = {
+            refresh_token: auth.refresh_token,
+            redirect_uri: appURL + "/code",
+            grant_type: 'refresh_token',
+            client_id: authClientId
+          };
+          /* Send data in the "application/x-www-form-urlencoded" format.
+            If only JSON is supported, use Axios' default content type ("application/x-www-form-urlencoded"). */
+          useDefaultContentType = authTokenURL.includes('amazonaws.com');
+          data = useDefaultContentType ? refreshPayload : new URLSearchParams(refreshPayload);
+          axiosConfig = {
+            headers: {
+              'Content-Type': useDefaultContentType ? 'application/json' : 'application/x-www-form-urlencoded'
+            }
+          };
+          return _context.abrupt("return", tokenAxiosInstance.post(authTokenURL, data, axiosConfig));
+        case 7:
+        case "end":
+          return _context.stop();
+      }
+    }, _callee);
+  }));
+  return function refreshAccessToken(_x) {
+    return _ref2.apply(this, arguments);
+  };
+}();
+var refreshAccessTokenAndSetAuthContext = /*#__PURE__*/function () {
+  var _ref4 = _asyncToGenerator(/*#__PURE__*/_regeneratorRuntime().mark(function _callee2(_ref3) {
+    var auth, onSetAuth, config, _ref3$timeout, timeout, configURLS, onLogin, refreshedToken, newAuth, _e$response, status;
+    return _regeneratorRuntime().wrap(function _callee2$(_context2) {
+      while (1) switch (_context2.prev = _context2.next) {
+        case 0:
+          auth = _ref3.auth, onSetAuth = _ref3.onSetAuth, config = _ref3.config, _ref3$timeout = _ref3.timeout, timeout = _ref3$timeout === void 0 ? DEFAULT_TIMEOUT : _ref3$timeout, configURLS = _ref3.configURLS, onLogin = _ref3.onLogin;
+          _context2.prev = 1;
+          _context2.next = 4;
           return refreshAccessToken({
             auth: auth,
             config: config,
             timeout: timeout
           });
         case 4:
-          refreshedToken = _context.sent;
+          refreshedToken = _context2.sent;
           newAuth = makeCredentialsFromTokenResponse(refreshedToken, configURLS); // Cognito does not send a new refresh token, but gitlab does. Set it here into the auth context.
           if (!newAuth.refresh_token || newAuth.refresh_token.length === 0) {
             newAuth.refresh_token = auth.refresh_token;
@@ -465,12 +463,12 @@ var refreshAccessTokenAndSetAuthContext = /*#__PURE__*/function () {
             newAuth.roles = auth.roles;
           }
           onSetAuth(newAuth);
-          _context.next = 15;
+          _context2.next = 15;
           break;
         case 11:
-          _context.prev = 11;
-          _context.t0 = _context["catch"](1);
-          status = (_e$response = _context.t0.response) == null ? void 0 : _e$response.status;
+          _context2.prev = 11;
+          _context2.t0 = _context2["catch"](1);
+          status = (_e$response = _context2.t0.response) == null ? void 0 : _e$response.status;
           if (status === 400) {
             onLogin(false);
           } else {
@@ -480,21 +478,21 @@ var refreshAccessTokenAndSetAuthContext = /*#__PURE__*/function () {
           }
         case 15:
         case "end":
-          return _context.stop();
+          return _context2.stop();
       }
-    }, _callee, null, [[1, 11]]);
+    }, _callee2, null, [[1, 11]]);
   }));
-  return function refreshAccessTokenAndSetAuthContext(_x) {
-    return _ref3.apply(this, arguments);
+  return function refreshAccessTokenAndSetAuthContext(_x2) {
+    return _ref4.apply(this, arguments);
   };
 }();
-var createApiInstance = function createApiInstance(_ref4) {
-  var auth = _ref4.auth,
-    _ref4$config = _ref4.config,
-    _ref4$config2 = _ref4$config === void 0 ? {} : _ref4$config,
-    baseURL = _ref4$config2.baseURL,
-    _ref4$timeout = _ref4.timeout,
-    timeout = _ref4$timeout === void 0 ? DEFAULT_TIMEOUT : _ref4$timeout;
+var createApiInstance = function createApiInstance(_ref5) {
+  var auth = _ref5.auth,
+    _ref5$config = _ref5.config,
+    _ref5$config2 = _ref5$config === void 0 ? {} : _ref5$config,
+    baseURL = _ref5$config2.baseURL,
+    _ref5$timeout = _ref5.timeout,
+    timeout = _ref5$timeout === void 0 ? DEFAULT_TIMEOUT : _ref5$timeout;
   var axiosInstance = axios.create({
     baseURL: baseURL,
     headers: {},
@@ -502,10 +500,10 @@ var createApiInstance = function createApiInstance(_ref4) {
   });
   // Request interceptor for API calls done BEFORE the request is made.
   axiosInstance.interceptors.request.use(/*#__PURE__*/function () {
-    var _ref5 = _asyncToGenerator(/*#__PURE__*/_regeneratorRuntime().mark(function _callee2(axiosConfig) {
+    var _ref6 = _asyncToGenerator(/*#__PURE__*/_regeneratorRuntime().mark(function _callee3(axiosConfig) {
       var newConfig;
-      return _regeneratorRuntime().wrap(function _callee2$(_context2) {
-        while (1) switch (_context2.prev = _context2.next) {
+      return _regeneratorRuntime().wrap(function _callee3$(_context3) {
+        while (1) switch (_context3.prev = _context3.next) {
           case 0:
             // Add the access token to the headers of the request.
             newConfig = Object.assign({}, axiosConfig, {
@@ -513,47 +511,48 @@ var createApiInstance = function createApiInstance(_ref4) {
                 'Content-Type': 'application/json',
                 Authorization: "Bearer " + auth.token,
                 Accept: 'application/json'
-              }, axiosConfig.headers)
+              }, axiosConfig.headers || {})
             });
-            return _context2.abrupt("return", newConfig);
+            return _context3.abrupt("return", newConfig);
           case 2:
           case "end":
-            return _context2.stop();
+            return _context3.stop();
         }
-      }, _callee2);
+      }, _callee3);
     }));
-    return function (_x2) {
-      return _ref5.apply(this, arguments);
+    return function (_x3) {
+      return _ref6.apply(this, arguments);
     };
   }(), /*#__PURE__*/function () {
-    var _ref6 = _asyncToGenerator(/*#__PURE__*/_regeneratorRuntime().mark(function _callee3(error) {
-      return _regeneratorRuntime().wrap(function _callee3$(_context3) {
-        while (1) switch (_context3.prev = _context3.next) {
+    var _ref7 = _asyncToGenerator(/*#__PURE__*/_regeneratorRuntime().mark(function _callee4(error) {
+      return _regeneratorRuntime().wrap(function _callee4$(_context4) {
+        while (1) switch (_context4.prev = _context4.next) {
           case 0:
-            _context3.next = 2;
+            _context4.next = 2;
             return Promise.reject(error);
           case 2:
           case "end":
-            return _context3.stop();
+            return _context4.stop();
         }
-      }, _callee3);
+      }, _callee4);
     }));
-    return function (_x3) {
-      return _ref6.apply(this, arguments);
+    return function (_x4) {
+      return _ref7.apply(this, arguments);
     };
   }());
   // Response interceptor for API calls done AFTER the request is made.
   axiosInstance.interceptors.response.use(function (response) {
     return response;
   }, /*#__PURE__*/function () {
-    var _ref7 = _asyncToGenerator(/*#__PURE__*/_regeneratorRuntime().mark(function _callee4(error) {
+    var _ref8 = _asyncToGenerator(/*#__PURE__*/_regeneratorRuntime().mark(function _callee5(error) {
+      var _error$response;
       var originalRequest, _originalRequest$head;
-      return _regeneratorRuntime().wrap(function _callee4$(_context4) {
-        while (1) switch (_context4.prev = _context4.next) {
+      return _regeneratorRuntime().wrap(function _callee5$(_context5) {
+        while (1) switch (_context5.prev = _context5.next) {
           case 0:
             originalRequest = error.config; // If request fails with 401, retry the request once.
-            if (!(error.response && error.response.status && error.response.status === 401 && !originalRequest.inRetry)) {
-              _context4.next = 5;
+            if (!((_error$response = error.response) != null && _error$response.status && error.response.status === 401 && !originalRequest.inRetry)) {
+              _context5.next = 5;
               break;
             }
             originalRequest.inRetry = true;
@@ -561,27 +560,27 @@ var createApiInstance = function createApiInstance(_ref4) {
             if ((_originalRequest$head = originalRequest.headers) != null && _originalRequest$head.Authorization) {
               originalRequest.headers.Authorization = "Bearer " + (auth == null ? void 0 : auth.token);
             }
-            return _context4.abrupt("return", axiosInstance(originalRequest));
+            return _context5.abrupt("return", axiosInstance(originalRequest));
           case 5:
-            return _context4.abrupt("return", Promise.reject(error));
+            return _context5.abrupt("return", Promise.reject(error));
           case 6:
           case "end":
-            return _context4.stop();
+            return _context5.stop();
         }
-      }, _callee4);
+      }, _callee5);
     }));
-    return function (_x4) {
-      return _ref7.apply(this, arguments);
+    return function (_x5) {
+      return _ref8.apply(this, arguments);
     };
   }());
   return axiosInstance;
 };
-var createNonAuthApiInstance = function createNonAuthApiInstance(_ref8) {
-  var _ref8$config = _ref8.config,
-    _ref8$config2 = _ref8$config === void 0 ? {} : _ref8$config,
-    baseURL = _ref8$config2.baseURL,
-    _ref8$timeout = _ref8.timeout,
-    timeout = _ref8$timeout === void 0 ? DEFAULT_TIMEOUT : _ref8$timeout;
+var createNonAuthApiInstance = function createNonAuthApiInstance(_ref9) {
+  var _ref9$config = _ref9.config,
+    _ref9$config2 = _ref9$config === void 0 ? {} : _ref9$config,
+    baseURL = _ref9$config2.baseURL,
+    _ref9$timeout = _ref9.timeout,
+    timeout = _ref9$timeout === void 0 ? DEFAULT_TIMEOUT : _ref9$timeout;
   var axiosInstance = axios.create({
     baseURL: baseURL,
     headers: {},
@@ -589,74 +588,157 @@ var createNonAuthApiInstance = function createNonAuthApiInstance(_ref8) {
   });
   // Request interceptor for API calls
   axiosInstance.interceptors.request.use(/*#__PURE__*/function () {
-    var _ref9 = _asyncToGenerator(/*#__PURE__*/_regeneratorRuntime().mark(function _callee5(config) {
+    var _ref0 = _asyncToGenerator(/*#__PURE__*/_regeneratorRuntime().mark(function _callee6(config) {
       var newConfig;
-      return _regeneratorRuntime().wrap(function _callee5$(_context5) {
-        while (1) switch (_context5.prev = _context5.next) {
+      return _regeneratorRuntime().wrap(function _callee6$(_context6) {
+        while (1) switch (_context6.prev = _context6.next) {
           case 0:
             newConfig = Object.assign({}, config, {
               headers: Object.assign({
                 'Content-Type': 'application/json',
                 Accept: 'application/json'
-              }, config.headers)
+              }, config.headers || {})
             });
-            return _context5.abrupt("return", newConfig);
+            return _context6.abrupt("return", newConfig);
           case 2:
           case "end":
-            return _context5.stop();
+            return _context6.stop();
         }
-      }, _callee5);
+      }, _callee6);
     }));
-    return function (_x5) {
-      return _ref9.apply(this, arguments);
+    return function (_x6) {
+      return _ref0.apply(this, arguments);
     };
   }(), /*#__PURE__*/function () {
-    var _ref0 = _asyncToGenerator(/*#__PURE__*/_regeneratorRuntime().mark(function _callee6(error) {
-      return _regeneratorRuntime().wrap(function _callee6$(_context6) {
-        while (1) switch (_context6.prev = _context6.next) {
+    var _ref1 = _asyncToGenerator(/*#__PURE__*/_regeneratorRuntime().mark(function _callee7(error) {
+      return _regeneratorRuntime().wrap(function _callee7$(_context7) {
+        while (1) switch (_context7.prev = _context7.next) {
           case 0:
-            _context6.next = 2;
+            _context7.next = 2;
             return Promise.reject(error);
           case 2:
           case "end":
-            return _context6.stop();
+            return _context7.stop();
         }
-      }, _callee6);
+      }, _callee7);
     }));
-    return function (_x6) {
-      return _ref0.apply(this, arguments);
+    return function (_x7) {
+      return _ref1.apply(this, arguments);
     };
   }());
   return axiosInstance;
 };
-var fakeApiRequest = function fakeApiRequest(signal) {
-  return new Promise(function (resolve, reject) {
-    var timer = setTimeout(function () {
-      resolve();
-    }, 300);
-    signal == null || signal.signal.addEventListener('abort', function () {
-      clearTimeout(timer);
-      reject(new Error('canceled'));
-    });
-  });
-};
+var fakeApiRequest = /*#__PURE__*/function () {
+  var _ref10 = _asyncToGenerator(/*#__PURE__*/_regeneratorRuntime().mark(function _callee8(signal) {
+    return _regeneratorRuntime().wrap(function _callee8$(_context8) {
+      while (1) switch (_context8.prev = _context8.next) {
+        case 0:
+          return _context8.abrupt("return", new Promise(function (resolve, reject) {
+            var timer = setTimeout(function () {
+              resolve();
+            }, 300);
+            signal == null || signal.signal.addEventListener('abort', function () {
+              clearTimeout(timer);
+              reject(new Error('canceled'));
+            });
+          }));
+        case 1:
+        case "end":
+          return _context8.stop();
+      }
+    }, _callee8);
+  }));
+  return function fakeApiRequest(_x8) {
+    return _ref10.apply(this, arguments);
+  };
+}();
 var createFakeApiInstance = function createFakeApiInstance() {
   return {
-    get: function get(_url, _params) {
-      return fakeApiRequest();
-    },
-    put: function put(_url, _params) {
-      return fakeApiRequest();
-    },
-    post: function post(_url, _params) {
-      return fakeApiRequest();
-    },
-    "delete": function _delete(_url, _params) {
-      return fakeApiRequest();
-    },
-    patch: function patch(_url, _params, _signal) {
-      return fakeApiRequest(_signal);
-    }
+    get: function () {
+      var _get = _asyncToGenerator(/*#__PURE__*/_regeneratorRuntime().mark(function _callee9(_url, _params) {
+        return _regeneratorRuntime().wrap(function _callee9$(_context9) {
+          while (1) switch (_context9.prev = _context9.next) {
+            case 0:
+              return _context9.abrupt("return", fakeApiRequest());
+            case 1:
+            case "end":
+              return _context9.stop();
+          }
+        }, _callee9);
+      }));
+      function get(_x9, _x0) {
+        return _get.apply(this, arguments);
+      }
+      return get;
+    }(),
+    put: function () {
+      var _put = _asyncToGenerator(/*#__PURE__*/_regeneratorRuntime().mark(function _callee0(_url, _params) {
+        return _regeneratorRuntime().wrap(function _callee0$(_context0) {
+          while (1) switch (_context0.prev = _context0.next) {
+            case 0:
+              return _context0.abrupt("return", fakeApiRequest());
+            case 1:
+            case "end":
+              return _context0.stop();
+          }
+        }, _callee0);
+      }));
+      function put(_x1, _x10) {
+        return _put.apply(this, arguments);
+      }
+      return put;
+    }(),
+    post: function () {
+      var _post = _asyncToGenerator(/*#__PURE__*/_regeneratorRuntime().mark(function _callee1(_url, _params) {
+        return _regeneratorRuntime().wrap(function _callee1$(_context1) {
+          while (1) switch (_context1.prev = _context1.next) {
+            case 0:
+              return _context1.abrupt("return", fakeApiRequest());
+            case 1:
+            case "end":
+              return _context1.stop();
+          }
+        }, _callee1);
+      }));
+      function post(_x11, _x12) {
+        return _post.apply(this, arguments);
+      }
+      return post;
+    }(),
+    "delete": function () {
+      var _delete2 = _asyncToGenerator(/*#__PURE__*/_regeneratorRuntime().mark(function _callee10(_url, _params) {
+        return _regeneratorRuntime().wrap(function _callee10$(_context10) {
+          while (1) switch (_context10.prev = _context10.next) {
+            case 0:
+              return _context10.abrupt("return", fakeApiRequest());
+            case 1:
+            case "end":
+              return _context10.stop();
+          }
+        }, _callee10);
+      }));
+      function _delete(_x13, _x14) {
+        return _delete2.apply(this, arguments);
+      }
+      return _delete;
+    }(),
+    patch: function () {
+      var _patch = _asyncToGenerator(/*#__PURE__*/_regeneratorRuntime().mark(function _callee11(_url, _params, _signal) {
+        return _regeneratorRuntime().wrap(function _callee11$(_context11) {
+          while (1) switch (_context11.prev = _context11.next) {
+            case 0:
+              return _context11.abrupt("return", fakeApiRequest(_signal));
+            case 1:
+            case "end":
+              return _context11.stop();
+          }
+        }, _callee11);
+      }));
+      function patch(_x15, _x16, _x17) {
+        return _patch.apply(this, arguments);
+      }
+      return patch;
+    }()
   };
 };
 var getCurrentTimeInSeconds = function getCurrentTimeInSeconds() {
@@ -751,10 +833,15 @@ var AuthenticationContext = /*#__PURE__*/React__default.createContext({
   sessionStorageProvider: null,
   currentRole: null
 });
+var authChangeListener = null;
+var setAuthChangeListener = function setAuthChangeListener(listener) {
+  authChangeListener = listener;
+};
 var useAuthenticationDefaultProps = function useAuthenticationDefaultProps() {
+  var _auth$roles$, _auth$roles;
   var _React$useState = React__default.useState(false),
     isLoggedIn = _React$useState[0],
-    onLogin = _React$useState[1];
+    setIsLoggedIn = _React$useState[1];
   var _React$useState2 = React__default.useState(false),
     hasConnectionIssue = _React$useState2[0],
     setHasConnectionIssue = _React$useState2[1];
@@ -766,27 +853,32 @@ var useAuthenticationDefaultProps = function useAuthenticationDefaultProps() {
     expires_at: 0,
     has_connection_issue: false
   };
-  var auth = React__default.useRef(Object.assign({}, emptyCredentials)).current;
-  var onSetAuth = function onSetAuth(newAuth) {
+  var _React$useState3 = React__default.useState(Object.assign({}, emptyCredentials)),
+    auth = _React$useState3[0],
+    setAuth = _React$useState3[1];
+  var onSetAuth = React__default.useCallback(function (newAuth) {
     if (newAuth) {
-      Object.assign(auth, newAuth);
-      if (newAuth.has_connection_issue !== undefined && hasConnectionIssue !== auth.has_connection_issue) {
-        /*
-         * The hasconnection issue should trigger a render.
-         * This is needed to make the connection banner show that there is an issue.
-         */
-        setHasConnectionIssue(auth.has_connection_issue === true);
+      setAuth(function (prevAuth) {
+        return Object.assign({}, prevAuth, newAuth);
+      });
+      if (newAuth.has_connection_issue !== undefined && hasConnectionIssue !== newAuth.has_connection_issue) {
+        setHasConnectionIssue(newAuth.has_connection_issue);
       }
     } else {
-      Object.assign(auth, emptyCredentials);
+      setAuth(Object.assign({}, emptyCredentials));
     }
-  };
-  var _React$useState3 = React__default.useState(auth.roles && auth.roles[0] || GEOWEB_ROLE_USER),
-    currentRole = _React$useState3[0],
-    setCurrentRole = _React$useState3[1];
+  },
+  // eslint-disable-next-line react-hooks/exhaustive-deps
+  [hasConnectionIssue]);
+  var _React$useState4 = React__default.useState((_auth$roles$ = (_auth$roles = auth.roles) == null ? void 0 : _auth$roles[0]) != null ? _auth$roles$ : GEOWEB_ROLE_USER),
+    currentRole = _React$useState4[0],
+    setCurrentRole = _React$useState4[1];
+  useEffect(function () {
+    authChangeListener == null || authChangeListener(isLoggedIn, auth);
+  }, [isLoggedIn, auth]);
   return {
     isLoggedIn: isLoggedIn,
-    onLogin: onLogin,
+    onLogin: setIsLoggedIn,
     auth: isLoggedIn ? auth : null,
     onSetAuth: onSetAuth,
     sessionStorageProvider: sessionStorageProvider,
@@ -800,7 +892,7 @@ var AuthenticationProvider = function AuthenticationProvider(_ref2) {
     _ref2$configURLS = _ref2.configURLS,
     configURLS = _ref2$configURLS === void 0 ? authConfigKeys : _ref2$configURLS;
   var defaultValues = useAuthenticationDefaultProps();
-  var _ref3 = value || defaultValues,
+  var _ref3 = value != null ? value : defaultValues,
     isLoggedIn = _ref3.isLoggedIn,
     onLogin = _ref3.onLogin,
     auth = _ref3.auth,
@@ -1155,7 +1247,7 @@ var UserMenuRoles = function UserMenuRoles(_ref) {
   var _useAuthenticationTra = useAuthenticationTranslation(),
     t = _useAuthenticationTra.t;
   return jsxs(Fragment, {
-    children: [isLoading && jsx(Box, {
+    children: [isLoading ? jsx(Box, {
       sx: {
         position: 'absolute',
         top: 0,
@@ -1166,7 +1258,7 @@ var UserMenuRoles = function UserMenuRoles(_ref) {
         "data-testid": "loading-bar",
         color: "secondary"
       })
-    }), jsxs(FormGroup, {
+    }) : null, jsxs(FormGroup, {
       children: [jsx(FormLabel, {
         component: "legend",
         sx: {
@@ -1176,13 +1268,13 @@ var UserMenuRoles = function UserMenuRoles(_ref) {
           opacity: 1
         },
         children: t('auth-role-title')
-      }), roles && roles.map(function (role) {
+      }), roles == null ? void 0 : roles.map(function (role) {
         return jsx(FormControlLabel, {
           control: jsx(Radio, {
             disabled: isLoading,
             checked: currentRole === role.name
           }),
-          label: role.getTitle(t),
+          label: t(role.title),
           onChange: function onChange() {
             return onChangeRole(role);
           }
@@ -1208,13 +1300,26 @@ var UserMenuRolesConnect = function UserMenuRolesConnect(_ref) {
   var dispatch = useDispatch();
   var _useAuthenticationTra = useAuthenticationTranslation(),
     t = _useAuthenticationTra.t;
-  var onFakeRequest = function onFakeRequest() {
-    return new Promise(function (resolve) {
-      setTimeout(function () {
-        resolve();
-      }, 300);
-    });
-  };
+  var onFakeRequest = /*#__PURE__*/function () {
+    var _ref2 = _asyncToGenerator(/*#__PURE__*/_regeneratorRuntime().mark(function _callee() {
+      return _regeneratorRuntime().wrap(function _callee$(_context) {
+        while (1) switch (_context.prev = _context.next) {
+          case 0:
+            return _context.abrupt("return", new Promise(function (resolve) {
+              setTimeout(function () {
+                resolve();
+              }, 300);
+            }));
+          case 1:
+          case "end":
+            return _context.stop();
+        }
+      }, _callee);
+    }));
+    return function onFakeRequest() {
+      return _ref2.apply(this, arguments);
+    };
+  }();
   var onChangeRole = function onChangeRole(role) {
     setIsLoading(true);
     onFakeRequest().then(function () {
@@ -1224,7 +1329,7 @@ var UserMenuRolesConnect = function UserMenuRolesConnect(_ref) {
         type: snackbarTypes.SnackbarMessageType.TRANSLATABLE_MESSAGE,
         key: 'auth-role-message-assigned',
         params: {
-          role: role.getTitle(t)
+          role: t(role.title)
         }
       };
       dispatch(snackbarActions.openSnackbar(message));
@@ -1382,4 +1487,4 @@ params, callbacks) {
   };
 };
 
-export { AUTH_NAMESPACE, ApiProvider, AuthenticationContext, AuthenticationProvider, HandleOAuth2Code as Code, GEOWEB_ROLE_PRESETS_ADMIN, GEOWEB_ROLE_USER, KEEP_ALIVE_POLLER_IN_SECONDS, OAuth2Login as Login, OAuth2Logout as Logout, MILLISECOND_TO_SECOND, REFRESH_TOKEN_WHEN_PCT_EXPIRED, UserMenuRoles, UserMenuRolesConnect, apiTranslations, authTranslations, createApiInstance, createFakeApiInstance, createNonAuthApiInstance, fakeApiRequest, getApi, getAuthConfig, getCodeChallenge, getCurrentTimeInSeconds, getCurrentUrlLocation, getRandomString, groupsToRoles, makeCredentialsFromTokenResponse, refreshAccessToken, refreshAccessTokenAndSetAuthContext, useApi, useApiContext, useAuthenticationContext, useAuthenticationDefaultProps };
+export { AUTH_NAMESPACE, ApiProvider, AuthenticationContext, AuthenticationProvider, HandleOAuth2Code as Code, GEOWEB_ROLE_PRESETS_ADMIN, GEOWEB_ROLE_USER, KEEP_ALIVE_POLLER_IN_SECONDS, OAuth2Login as Login, OAuth2Logout as Logout, MILLISECOND_TO_SECOND, REFRESH_TOKEN_WHEN_PCT_EXPIRED, UserMenuRoles, UserMenuRolesConnect, apiTranslations, authTranslations, createApiInstance, createFakeApiInstance, createNonAuthApiInstance, fakeApiRequest, getApi, getAuthConfig, getCodeChallenge, getCurrentTimeInSeconds, getCurrentUrlLocation, getRandomString, groupsToRoles, makeCredentialsFromTokenResponse, refreshAccessToken, refreshAccessTokenAndSetAuthContext, setAuthChangeListener, useApi, useApiContext, useAuthenticationContext, useAuthenticationDefaultProps };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@opengeoweb/authentication",
-  "version": "14.0.0",
+  "version": "14.1.0",
   "description": "GeoWeb authentication library for the opengeoweb project",
   "license": "Apache-2.0",
   "repository": {
@@ -10,11 +10,11 @@
   "dependencies": {
     "axios": "^1.7.7",
     "react-router-dom": "^6.23.1",
-    "@opengeoweb/shared": "14.0.0",
-    "@opengeoweb/theme": "14.0.0",
+    "@opengeoweb/shared": "14.1.0",
+    "@opengeoweb/theme": "14.1.0",
     "i18next": "^25.0.1",
     "react-i18next": "^15.1.1",
-    "@opengeoweb/snackbar": "14.0.0",
+    "@opengeoweb/snackbar": "14.1.0",
     "react-redux": "^9.2.0",
     "@reduxjs/toolkit": "^2.6.1",
     "@mui/material": "^7.0.1"

package/src/lib/components/ApiContext/types.d.ts

@@ -1,4 +1,3 @@
-import { TFunction } from 'i18next';
 export interface GeoWebJWT {
     access_token: string;
     refresh_token?: string;
@@ -32,5 +31,5 @@ export interface CreateApiProps extends ApiModule {
 export type CreateApiFn = (props: CreateApiProps) => void;
 export interface Role {
     name: string;
-    getTitle: (t: TFunction) => string;
+    title: string;
 }

package/src/lib/components/ApiContext/utils.d.ts

@@ -1,6 +1,6 @@
-import { AxiosInstance, AxiosResponse } from 'axios';
-import { ConfigType } from '@opengeoweb/shared';
-import { CreateApiProps, Credentials, Role } from './types';
+import type { AxiosInstance, AxiosResponse } from 'axios';
+import type { ConfigType } from '@opengeoweb/shared';
+import type { CreateApiProps, Credentials, Role } from './types';
 export declare const KEEP_ALIVE_POLLER_IN_SECONDS = 60;
 export declare const REFRESH_TOKEN_WHEN_PCT_EXPIRED = 75;
 export declare const MILLISECOND_TO_SECOND: number;

package/src/lib/components/AuthenticationContext/AuthenticationContext.d.ts

@@ -1,10 +1,13 @@
 import React from 'react';
-import { AuthenticationConfig, AuthenticationContextProps, AuthenticationDefaultStateProps } from './types';
+import type { AuthenticationConfig, AuthenticationContextProps, AuthenticationDefaultStateProps } from './types';
+import type { Credentials } from '../ApiContext/types';
 export declare const getRandomString: () => string;
 export declare const getCodeChallenge: (codeVerifier: string) => Promise<string>;
 export declare const replaceTemplateKeys: (url: string, clientId: string, appUrl: string, oauthState?: string, codeChallenge?: string) => string;
 export declare const getAuthConfig: (_configUrls: AuthenticationConfig) => AuthenticationConfig;
 export declare const AuthenticationContext: React.Context<AuthenticationContextProps>;
+type OnAuthChange = (isLoggedIn: boolean, auth: Credentials | null) => void;
+export declare const setAuthChangeListener: (listener: OnAuthChange) => void;
 export declare const useAuthenticationDefaultProps: () => AuthenticationDefaultStateProps;
 interface AuthenticationProviderProps {
     children: React.ReactNode;

package/src/lib/components/AuthenticationContext/index.d.ts

@@ -1,2 +1,2 @@
-export { useAuthenticationContext, AuthenticationProvider, useAuthenticationDefaultProps, AuthenticationContext, getAuthConfig, getRandomString, getCodeChallenge, } from './AuthenticationContext';
-export * from './types';
+export { useAuthenticationContext, AuthenticationProvider, useAuthenticationDefaultProps, AuthenticationContext, getAuthConfig, getRandomString, getCodeChallenge, setAuthChangeListener, } from './AuthenticationContext';
+export type * from './types';

package/src/lib/components/AuthenticationContext/types.d.ts

@@ -1,5 +1,5 @@
-import { SessionStorageProvider } from '@opengeoweb/shared';
-import { Credentials, Role } from '../ApiContext/types';
+import type { SessionStorageProvider } from '@opengeoweb/shared';
+import type { Credentials, Role } from '../ApiContext/types';
 export interface AuthenticationConfig {
     GW_AUTH_LOGIN_URL: string;
     GW_AUTH_LOGOUT_URL: string;
@@ -22,3 +22,4 @@ export interface AuthenticationDefaultStateProps {
 export interface AuthenticationContextProps extends AuthenticationDefaultStateProps {
     authConfig: AuthenticationConfig;
 }
+export type AuthChangeListener = (isLoggedIn: boolean, auth: Credentials | null) => void;

package/src/lib/components/UserMenuRoles/UserMenuRoles.d.ts

@@ -1,5 +1,5 @@
 import React from 'react';
-import { Role } from '../ApiContext/types';
+import type { Role } from '../ApiContext/types';
 export declare const UserMenuRoles: React.FC<{
     roles?: Role[];
     currentRole?: string;

package/src/lib/components/UserMenuRoles/UserMenuRolesConnect.d.ts

@@ -1,5 +1,5 @@
 import React from 'react';
-import { Role } from '../ApiContext/types';
+import type { Role } from '../ApiContext/types';
 export declare const UserMenuRolesConnect: React.FC<{
     temporaryOnChangeRoleForDemo?: (role: Role) => void;
     roles?: Role[];