@ovok/native 1.16.1-dev.2147 → 1.16.1-dev.2151

package/lib/commonjs/modules/auth/sign-in/utils/jwt-claims.js

@@ -0,0 +1,21 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.jwtClaims = void 0;
+/** The claims web sign-in reads from a provider's JWT. */
+
+const asClaims = value => typeof value === "object" && value !== null ? value : {};
+
+/** A JWT's claims, read without checking the signature; Ovok verifies the token itself. */
+const jwtClaims = jwt => {
+  try {
+    const payload = (jwt.split(".")[1] ?? "").replace(/-/g, "+").replace(/_/g, "/");
+    return asClaims(JSON.parse(atob(payload)));
+  } catch {
+    return {};
+  }
+};
+exports.jwtClaims = jwtClaims;
+//# sourceMappingURL=jwt-claims.js.map

package/lib/commonjs/modules/auth/sign-in/utils/jwt-claims.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["asClaims","value","jwtClaims","jwt","payload","split","replace","JSON","parse","atob","exports"],"sourceRoot":"../../../../../../src","sources":["modules/auth/sign-in/utils/jwt-claims.ts"],"mappings":";;;;;;AAAA;;AAMA,MAAMA,QAAQ,GAAIC,KAAc,IAC9B,OAAOA,KAAK,KAAK,QAAQ,IAAIA,KAAK,KAAK,IAAI,GAAIA,KAAK,GAAiB,CAAC,CAAC;;AAEzE;AACA,MAAMC,SAAS,GAAIC,GAAW,IAAgB;EAC5C,IAAI;IACF,MAAMC,OAAO,GAAG,CAACD,GAAG,CAACE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,EAAEC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAACA,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC;IAE/E,OAAON,QAAQ,CAACO,IAAI,CAACC,KAAK,CAACC,IAAI,CAACL,OAAO,CAAC,CAAC,CAAC;EAC5C,CAAC,CAAC,MAAM;IACN,OAAO,CAAC,CAAC;EACX;AACF,CAAC;AAACM,OAAA,CAAAR,SAAA,GAAAA,SAAA","ignoreList":[]}

package/lib/commonjs/modules/auth/utils/sign-out-google.web.js

@@ -0,0 +1,10 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.signOutGoogleIfNeeded = void 0;
+/** The web keeps no Google account in the app, so there is nothing to clear. */
+const signOutGoogleIfNeeded = async () => undefined;
+exports.signOutGoogleIfNeeded = signOutGoogleIfNeeded;
+//# sourceMappingURL=sign-out-google.web.js.map

package/lib/commonjs/modules/auth/utils/sign-out-google.web.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["signOutGoogleIfNeeded","undefined","exports"],"sourceRoot":"../../../../../src","sources":["modules/auth/utils/sign-out-google.web.ts"],"mappings":";;;;;;AAAA;AACO,MAAMA,qBAAqB,GAAG,MAAAA,CAAA,KAA2BC,SAAS;AAACC,OAAA,CAAAF,qBAAA,GAAAA,qBAAA","ignoreList":[]}

package/lib/commonjs/modules/bt-management/services/devices/bp2/bp2.history-sequencer.js

@@ -18,6 +18,9 @@ const BP2_RESULT_STATES = new Set(["05", "07", "11"]);
 const BP2_ECG_STATE = "06";
 const BP2_IDLE_STATES = new Set(["00", "01", "03"]);
 const BP2_POLL_INTERVAL_MS = 200;
+
+/** How long a realtime poll may go unanswered before it is sent again. */
+const BP2_POLL_ANSWER_TIMEOUT_MS = 1_000;
 /** Reads unseen BP2 history on connect and after each realtime result. */
 class BP2HistorySequencer {
   builder = new _lepuCommandBuilder.LepuCommandBuilder();
@@ -38,6 +41,15 @@ class BP2HistorySequencer {
     return this.startTransfer();
   };
   isHistoryTransfer = () => true;
+  commandTimeoutMs = () => this.isPolling() ? BP2_POLL_ANSWER_TIMEOUT_MS : undefined;
+
+  /** The BP2 can drop a poll while it starts measuring, so a missing answer is asked for again. */
+  onCommandTimeout = () => this.isPolling() ? {
+    commands: [this.pollCommand()]
+  } : {};
+
+  /** Only the realtime answer settles a poll; any other frame leaves its timeout running. */
+  commandProgress = frame => this.isPolling() && (0, _lepuFrame.lepuCommandOf)(frame) !== BP2_REALTIME_COMMAND ? "ignored" : "complete";
   nextCommand = frame => {
     if (this.phase === "clock") {
       if ((0, _lepuFrame.lepuCommandOf)(frame) !== _lepuCommands.LepuCommand.SET_TIME) {
@@ -85,6 +97,7 @@ class BP2HistorySequencer {
     this.params.onTransferFinished();
     return [this.pollCommand()];
   };
+  isPolling = () => this.phase === "files" && this.transfer === undefined;
   pollCommand = () => ({
     ...this.params.write,
     frame: this.builder.build(BP2_REALTIME_COMMAND),

package/lib/commonjs/modules/bt-management/services/devices/bp2/bp2.history-sequencer.js.map

@@ -1 +1 @@
-{"version":3,"names":["_sentryLogger","require","_clockSync","_hexToByte","_lepuCommandBuilder","_lepuCommands","_lepuEcgTransfer","_lepuFileTransfer","_lepuFrame","_lepuResponseType","BP2_REALTIME_COMMAND","exports","BP2_RESULT_STATES","Set","BP2_ECG_STATE","BP2_IDLE_STATES","BP2_POLL_INTERVAL_MS","BP2HistorySequencer","builder","LepuCommandBuilder","lastRunStatusFrameCount","realtimeEcgActive","phase","constructor","params","initialCommands","isClockSyncEnabled","clockSync","write","frame","build","LepuCommand","SET_TIME","clockPayload","startTransfer","isHistoryTransfer","nextCommand","lepuCommandOf","undefined","isLepuSuccess","onError","describeLepuResponseType","transfer","logRunStatus","isResult","isResultFrame","endedWithoutResult","isIdleFrame","onOrphanStreamEnd","shouldStartTransfer","onTransferRequested","pollCommand","delayBeforeWriteMs","LepuFileTransfer","onFile","skipFiles","afterTransfer","finishTransfer","onTransferFinished","hexToByte","has","toLowerCase","runStatus","lastRunStatus","sentryLogger"],"sourceRoot":"../../../../../../../src","sources":["modules/bt-management/services/devices/bp2/bp2.history-sequencer.ts"],"mappings":";;;;;;AAAA,IAAAA,aAAA,GAAAC,OAAA;AACA,IAAAC,UAAA,GAAAD,OAAA;AAMA,IAAAE,UAAA,GAAAF,OAAA;AACA,IAAAG,mBAAA,GAAAH,OAAA;AACA,IAAAI,aAAA,GAAAJ,OAAA;AACA,IAAAK,gBAAA,GAAAL,OAAA;AACA,IAAAM,iBAAA,GAAAN,OAAA;AACA,IAAAO,UAAA,GAAAP,OAAA;AACA,IAAAQ,iBAAA,GAAAR,OAAA;AAKA,MAAMS,oBAAoB,GAAAC,OAAA,CAAAD,oBAAA,GAAG,IAAI;AACjC,MAAME,iBAAiB,GAAG,IAAIC,GAAG,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;AACrD,MAAMC,aAAa,GAAG,IAAI;AAC1B,MAAMC,eAAe,GAAG,IAAIF,GAAG,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;AACnD,MAAMG,oBAAoB,GAAG,GAAG;AAgBhC;AACA,MAAMC,mBAAmB,CAA6B;EACnCC,OAAO,GAAG,IAAIC,sCAAkB,CAAC,CAAC;EAG3CC,uBAAuB,GAAG,CAAC;EAC3BC,iBAAiB,GAAG,KAAK;EACzBC,KAAK,GAAoB,OAAO;EAEjCC,WAAWA,CAAkBC,MAAiC,EAAE;IAAA,KAAnCA,MAAiC,GAAjCA,MAAiC;EAAG;EAEjEC,eAAe,GAAGA,CAAA,KAAgC;IACvD,IAAI,IAAAC,6BAAkB,EAAC,IAAI,CAACF,MAAM,CAACG,SAAS,CAAC,EAAE;MAC7C,IAAI,CAACL,KAAK,GAAG,OAAO;MAEpB,OAAO,CACL;QACE,GAAG,IAAI,CAACE,MAAM,CAACI,KAAK;QACpBC,KAAK,EAAE,IAAI,CAACX,OAAO,CAACY,KAAK,CACvBC,yBAAW,CAACC,QAAQ,EACpB,IAAAC,6BAAY,EAAC,IAAI,CAACT,MAAM,CAACG,SAAS,CACpC;MACF,CAAC,CACF;IACH;IAEA,OAAO,IAAI,CAACO,aAAa,CAAC,CAAC;EAC7B,CAAC;EAEMC,iBAAiB,GAAGA,CAAA,KAAe,IAAI;EAEvCC,WAAW,GAChBP,KAAwB,IACiB;IACzC,IAAI,IAAI,CAACP,KAAK,KAAK,OAAO,EAAE;MAC1B,IAAI,IAAAe,wBAAa,EAACR,KAAK,CAAC,KAAKE,yBAAW,CAACC,QAAQ,EAAE;QACjD,OAAOM,SAAS;MAClB;MAEA,IAAI,CAAC,IAAAC,+BAAa,EAACV,KAAK,CAAC,EAAE;QACzB,IAAI,CAACL,MAAM,CAACgB,OAAO,CACjB,gCAAgC,IAAAC,0CAAwB,EAACZ,KAAK,CAAC,EACjE,CAAC;MACH;MAEA,OAAO,IAAI,CAACK,aAAa,CAAC,CAAC;IAC7B;IAEA,IAAI,IAAI,CAACQ,QAAQ,EAAE;MACjB,OAAO,IAAI,CAACA,QAAQ,CAACN,WAAW,CAACP,KAAK,CAAC;IACzC;IAEA,IAAI,CAACc,YAAY,CAACd,KAAK,CAAC;IAExB,MAAMe,QAAQ,GAAG,IAAI,CAACC,aAAa,CAAChB,KAAK,CAAC;IAE1C,MAAMiB,kBAAkB,GACtB,IAAI,CAACzB,iBAAiB,IAAI,IAAI,CAAC0B,WAAW,CAAClB,KAAK,CAAC;IAEnD,IAAIe,QAAQ,EAAE;MACZ,IAAI,CAACvB,iBAAiB,GAAG,KAAK;IAChC,CAAC,MAAM,IAAIyB,kBAAkB,EAAE;MAC7B,IAAI,CAACzB,iBAAiB,GAAG,KAAK;MAC9B,IAAI,CAACG,MAAM,CAACwB,iBAAiB,CAAC,CAAC;IACjC;IAEA,IAAI,IAAI,CAACxB,MAAM,CAACyB,mBAAmB,CAAC,CAAC,IAAIH,kBAAkB,EAAE;MAC3D,IAAI,CAACtB,MAAM,CAAC0B,mBAAmB,CAAC,CAAC;MAEjC,OAAO,IAAI,CAAChB,aAAa,CAACU,QAAQ,GAAG,KAAK,GAAGN,SAAS,CAAC;IACzD;;IAEA;IACA,OAAO,IAAAD,wBAAa,EAACR,KAAK,CAAC,KAAKnB,oBAAoB,GAAG,CAAC,IAAI,CAACyC,WAAW,CAAC,CAAC,CAAC,GAAGb,SAAS;EACzF,CAAC;EAEOJ,aAAa,GACnBkB,kBAA2B,IACE;IAC7B,IAAI,CAAC9B,KAAK,GAAG,OAAO;IACpB,IAAI,CAACoB,QAAQ,GAAG,IAAIW,kCAAgB,CAAC;MACnCzB,KAAK,EAAE,IAAI,CAACJ,MAAM,CAACI,KAAK;MACxBV,OAAO,EAAE,IAAI,CAACA,OAAO;MACrBoC,MAAM,EAAE,IAAI,CAAC9B,MAAM,CAAC8B,MAAM;MAC1Bd,OAAO,EAAE,IAAI,CAAChB,MAAM,CAACgB,OAAO;MAC5Be,SAAS,EAAE,IAAI,CAAC/B,MAAM,CAAC+B,SAAS;MAChCC,aAAa,EAAE,IAAI,CAACC;IACtB,CAAC,CAAC;IAEF,OAAO,IAAI,CAACf,QAAQ,CAACjB,eAAe,CAAC2B,kBAAkB,CAAC;EAC1D,CAAC;EAEOK,cAAc,GAAGA,CAAA,KAAgC;IACvD,IAAI,CAACf,QAAQ,GAAGJ,SAAS;IACzB,IAAI,CAACd,MAAM,CAACkC,kBAAkB,CAAC,CAAC;IAEhC,OAAO,CAAC,IAAI,CAACP,WAAW,CAAC,CAAC,CAAC;EAC7B,CAAC;EAEOA,WAAW,GAAGA,CAAA,MAAsB;IAC1C,GAAG,IAAI,CAAC3B,MAAM,CAACI,KAAK;IACpBC,KAAK,EAAE,IAAI,CAACX,OAAO,CAACY,KAAK,CAACpB,oBAAoB,CAAC;IAC/C0C,kBAAkB,EAAEpC;EACtB,CAAC,CAAC;EAEM6B,aAAa,GAAIhB,KAAwB,IAC/C,IAAA8B,oBAAS,EAAC9B,KAAK,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,KAAKnB,oBAAoB,IACnDE,iBAAiB,CAACgD,GAAG,CAAC,CAAC/B,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,EAAEgC,WAAW,CAAC,CAAC,CAAC;EAE/Cd,WAAW,GAAIlB,KAAwB,IAC7C,IAAA8B,oBAAS,EAAC9B,KAAK,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,KAAKnB,oBAAoB,IACnDK,eAAe,CAAC6C,GAAG,CAAC,CAAC/B,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,EAAEgC,WAAW,CAAC,CAAC,CAAC;EAE7ClB,YAAY,GAAId,KAAwB,IAAW;IACzD,IAAI,IAAA8B,oBAAS,EAAC9B,KAAK,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,KAAKnB,oBAAoB,EAAE;MACvD;IACF;IAEA,MAAMoD,SAAS,GAAG,CAACjC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,EAAEgC,WAAW,CAAC,CAAC;IAEhD,IAAIC,SAAS,KAAKhD,aAAa,EAAE;MAC/B,IAAI,CAACO,iBAAiB,GAAG,IAAI;IAC/B;IAEA,IAAIyC,SAAS,KAAK,IAAI,CAACC,aAAa,EAAE;MACpC,IAAI,CAAC3C,uBAAuB,EAAE;MAE9B;IACF;IAEA,IAAI,IAAI,CAAC2C,aAAa,KAAKzB,SAAS,EAAE;MACpC,IAAA0B,0BAAY,EAAC,MAAM,EAAE,oCAAoC,CAAC;IAC5D;IAEA,IAAI,CAACD,aAAa,GAAGD,SAAS;IAC9B,IAAI,CAAC1C,uBAAuB,GAAG,CAAC;EAClC,CAAC;AACH;AAACT,OAAA,CAAAM,mBAAA,GAAAA,mBAAA","ignoreList":[]}
+{"version":3,"names":["_sentryLogger","require","_clockSync","_hexToByte","_lepuCommandBuilder","_lepuCommands","_lepuEcgTransfer","_lepuFileTransfer","_lepuFrame","_lepuResponseType","BP2_REALTIME_COMMAND","exports","BP2_RESULT_STATES","Set","BP2_ECG_STATE","BP2_IDLE_STATES","BP2_POLL_INTERVAL_MS","BP2_POLL_ANSWER_TIMEOUT_MS","BP2HistorySequencer","builder","LepuCommandBuilder","lastRunStatusFrameCount","realtimeEcgActive","phase","constructor","params","initialCommands","isClockSyncEnabled","clockSync","write","frame","build","LepuCommand","SET_TIME","clockPayload","startTransfer","isHistoryTransfer","commandTimeoutMs","isPolling","undefined","onCommandTimeout","commands","pollCommand","commandProgress","lepuCommandOf","nextCommand","isLepuSuccess","onError","describeLepuResponseType","transfer","logRunStatus","isResult","isResultFrame","endedWithoutResult","isIdleFrame","onOrphanStreamEnd","shouldStartTransfer","onTransferRequested","delayBeforeWriteMs","LepuFileTransfer","onFile","skipFiles","afterTransfer","finishTransfer","onTransferFinished","hexToByte","has","toLowerCase","runStatus","lastRunStatus","sentryLogger"],"sourceRoot":"../../../../../../../src","sources":["modules/bt-management/services/devices/bp2/bp2.history-sequencer.ts"],"mappings":";;;;;;AAAA,IAAAA,aAAA,GAAAC,OAAA;AACA,IAAAC,UAAA,GAAAD,OAAA;AASA,IAAAE,UAAA,GAAAF,OAAA;AACA,IAAAG,mBAAA,GAAAH,OAAA;AACA,IAAAI,aAAA,GAAAJ,OAAA;AACA,IAAAK,gBAAA,GAAAL,OAAA;AACA,IAAAM,iBAAA,GAAAN,OAAA;AACA,IAAAO,UAAA,GAAAP,OAAA;AACA,IAAAQ,iBAAA,GAAAR,OAAA;AAKA,MAAMS,oBAAoB,GAAAC,OAAA,CAAAD,oBAAA,GAAG,IAAI;AACjC,MAAME,iBAAiB,GAAG,IAAIC,GAAG,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;AACrD,MAAMC,aAAa,GAAG,IAAI;AAC1B,MAAMC,eAAe,GAAG,IAAIF,GAAG,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;AACnD,MAAMG,oBAAoB,GAAG,GAAG;;AAEhC;AACA,MAAMC,0BAA0B,GAAG,KAAK;AAgBxC;AACA,MAAMC,mBAAmB,CAA6B;EACnCC,OAAO,GAAG,IAAIC,sCAAkB,CAAC,CAAC;EAG3CC,uBAAuB,GAAG,CAAC;EAC3BC,iBAAiB,GAAG,KAAK;EACzBC,KAAK,GAAoB,OAAO;EAEjCC,WAAWA,CAAkBC,MAAiC,EAAE;IAAA,KAAnCA,MAAiC,GAAjCA,MAAiC;EAAG;EAEjEC,eAAe,GAAGA,CAAA,KAAgC;IACvD,IAAI,IAAAC,6BAAkB,EAAC,IAAI,CAACF,MAAM,CAACG,SAAS,CAAC,EAAE;MAC7C,IAAI,CAACL,KAAK,GAAG,OAAO;MAEpB,OAAO,CACL;QACE,GAAG,IAAI,CAACE,MAAM,CAACI,KAAK;QACpBC,KAAK,EAAE,IAAI,CAACX,OAAO,CAACY,KAAK,CACvBC,yBAAW,CAACC,QAAQ,EACpB,IAAAC,6BAAY,EAAC,IAAI,CAACT,MAAM,CAACG,SAAS,CACpC;MACF,CAAC,CACF;IACH;IAEA,OAAO,IAAI,CAACO,aAAa,CAAC,CAAC;EAC7B,CAAC;EAEMC,iBAAiB,GAAGA,CAAA,KAAe,IAAI;EAEvCC,gBAAgB,GAAGA,CAAA,KACxB,IAAI,CAACC,SAAS,CAAC,CAAC,GAAGrB,0BAA0B,GAAGsB,SAAS;;EAE3D;EACOC,gBAAgB,GAAGA,CAAA,KACxB,IAAI,CAACF,SAAS,CAAC,CAAC,GAAG;IAAEG,QAAQ,EAAE,CAAC,IAAI,CAACC,WAAW,CAAC,CAAC;EAAE,CAAC,GAAG,CAAC,CAAC;;EAE5D;EACOC,eAAe,GAAIb,KAAwB,IAChD,IAAI,CAACQ,SAAS,CAAC,CAAC,IAAI,IAAAM,wBAAa,EAACd,KAAK,CAAC,KAAKpB,oBAAoB,GAC7D,SAAS,GACT,UAAU;EAETmC,WAAW,GAChBf,KAAwB,IACiB;IACzC,IAAI,IAAI,CAACP,KAAK,KAAK,OAAO,EAAE;MAC1B,IAAI,IAAAqB,wBAAa,EAACd,KAAK,CAAC,KAAKE,yBAAW,CAACC,QAAQ,EAAE;QACjD,OAAOM,SAAS;MAClB;MAEA,IAAI,CAAC,IAAAO,+BAAa,EAAChB,KAAK,CAAC,EAAE;QACzB,IAAI,CAACL,MAAM,CAACsB,OAAO,CACjB,gCAAgC,IAAAC,0CAAwB,EAAClB,KAAK,CAAC,EACjE,CAAC;MACH;MAEA,OAAO,IAAI,CAACK,aAAa,CAAC,CAAC;IAC7B;IAEA,IAAI,IAAI,CAACc,QAAQ,EAAE;MACjB,OAAO,IAAI,CAACA,QAAQ,CAACJ,WAAW,CAACf,KAAK,CAAC;IACzC;IAEA,IAAI,CAACoB,YAAY,CAACpB,KAAK,CAAC;IAExB,MAAMqB,QAAQ,GAAG,IAAI,CAACC,aAAa,CAACtB,KAAK,CAAC;IAE1C,MAAMuB,kBAAkB,GACtB,IAAI,CAAC/B,iBAAiB,IAAI,IAAI,CAACgC,WAAW,CAACxB,KAAK,CAAC;IAEnD,IAAIqB,QAAQ,EAAE;MACZ,IAAI,CAAC7B,iBAAiB,GAAG,KAAK;IAChC,CAAC,MAAM,IAAI+B,kBAAkB,EAAE;MAC7B,IAAI,CAAC/B,iBAAiB,GAAG,KAAK;MAC9B,IAAI,CAACG,MAAM,CAAC8B,iBAAiB,CAAC,CAAC;IACjC;IAEA,IAAI,IAAI,CAAC9B,MAAM,CAAC+B,mBAAmB,CAAC,CAAC,IAAIH,kBAAkB,EAAE;MAC3D,IAAI,CAAC5B,MAAM,CAACgC,mBAAmB,CAAC,CAAC;MAEjC,OAAO,IAAI,CAACtB,aAAa,CAACgB,QAAQ,GAAG,KAAK,GAAGZ,SAAS,CAAC;IACzD;;IAEA;IACA,OAAO,IAAAK,wBAAa,EAACd,KAAK,CAAC,KAAKpB,oBAAoB,GAAG,CAAC,IAAI,CAACgC,WAAW,CAAC,CAAC,CAAC,GAAGH,SAAS;EACzF,CAAC;EAEOJ,aAAa,GACnBuB,kBAA2B,IACE;IAC7B,IAAI,CAACnC,KAAK,GAAG,OAAO;IACpB,IAAI,CAAC0B,QAAQ,GAAG,IAAIU,kCAAgB,CAAC;MACnC9B,KAAK,EAAE,IAAI,CAACJ,MAAM,CAACI,KAAK;MACxBV,OAAO,EAAE,IAAI,CAACA,OAAO;MACrByC,MAAM,EAAE,IAAI,CAACnC,MAAM,CAACmC,MAAM;MAC1Bb,OAAO,EAAE,IAAI,CAACtB,MAAM,CAACsB,OAAO;MAC5Bc,SAAS,EAAE,IAAI,CAACpC,MAAM,CAACoC,SAAS;MAChCC,aAAa,EAAE,IAAI,CAACC;IACtB,CAAC,CAAC;IAEF,OAAO,IAAI,CAACd,QAAQ,CAACvB,eAAe,CAACgC,kBAAkB,CAAC;EAC1D,CAAC;EAEOK,cAAc,GAAGA,CAAA,KAAgC;IACvD,IAAI,CAACd,QAAQ,GAAGV,SAAS;IACzB,IAAI,CAACd,MAAM,CAACuC,kBAAkB,CAAC,CAAC;IAEhC,OAAO,CAAC,IAAI,CAACtB,WAAW,CAAC,CAAC,CAAC;EAC7B,CAAC;EAEOJ,SAAS,GAAGA,CAAA,KAClB,IAAI,CAACf,KAAK,KAAK,OAAO,IAAI,IAAI,CAAC0B,QAAQ,KAAKV,SAAS;EAE/CG,WAAW,GAAGA,CAAA,MAAsB;IAC1C,GAAG,IAAI,CAACjB,MAAM,CAACI,KAAK;IACpBC,KAAK,EAAE,IAAI,CAACX,OAAO,CAACY,KAAK,CAACrB,oBAAoB,CAAC;IAC/CgD,kBAAkB,EAAE1C;EACtB,CAAC,CAAC;EAEMoC,aAAa,GAAItB,KAAwB,IAC/C,IAAAmC,oBAAS,EAACnC,KAAK,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,KAAKpB,oBAAoB,IACnDE,iBAAiB,CAACsD,GAAG,CAAC,CAACpC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,EAAEqC,WAAW,CAAC,CAAC,CAAC;EAE/Cb,WAAW,GAAIxB,KAAwB,IAC7C,IAAAmC,oBAAS,EAACnC,KAAK,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,KAAKpB,oBAAoB,IACnDK,eAAe,CAACmD,GAAG,CAAC,CAACpC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,EAAEqC,WAAW,CAAC,CAAC,CAAC;EAE7CjB,YAAY,GAAIpB,KAAwB,IAAW;IACzD,IAAI,IAAAmC,oBAAS,EAACnC,KAAK,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,KAAKpB,oBAAoB,EAAE;MACvD;IACF;IAEA,MAAM0D,SAAS,GAAG,CAACtC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,EAAEqC,WAAW,CAAC,CAAC;IAEhD,IAAIC,SAAS,KAAKtD,aAAa,EAAE;MAC/B,IAAI,CAACQ,iBAAiB,GAAG,IAAI;IAC/B;IAEA,IAAI8C,SAAS,KAAK,IAAI,CAACC,aAAa,EAAE;MACpC,IAAI,CAAChD,uBAAuB,EAAE;MAE9B;IACF;IAEA,IAAI,IAAI,CAACgD,aAAa,KAAK9B,SAAS,EAAE;MACpC,IAAA+B,0BAAY,EAAC,MAAM,EAAE,oCAAoC,CAAC;IAC5D;IAEA,IAAI,CAACD,aAAa,GAAGD,SAAS;IAC9B,IAAI,CAAC/C,uBAAuB,GAAG,CAAC;EAClC,CAAC;AACH;AAACV,OAAA,CAAAO,mBAAA,GAAAA,mBAAA","ignoreList":[]}

package/lib/module/modules/auth/google-return-page/index.js

@@ -0,0 +1,21 @@
+"use strict";
+
+import { GOOGLE_ANSWER_KEY, GOOGLE_REQUEST_KEY } from "../sign-in/utils/google-redirect-sign-in.js";
+
+/**
+ * The page Google returns to when `GoogleLogin` signs in on the web.
+ *
+ * Serve it as a static file at the redirect URI, by default `/oauth/google.html`. It keeps Google's answer
+ * for this tab and sends the tab back to the sign-in screen, so the token never stays in the address.
+ */
+export const GOOGLE_RETURN_PAGE_HTML = `<!doctype html>
+<meta charset="utf-8">
+<title>Signing in</title>
+<script>
+  var request = JSON.parse(sessionStorage.getItem("${GOOGLE_REQUEST_KEY}") || "{}");
+  var target = new URL(request.returnTo || "/", location.origin);
+  sessionStorage.setItem("${GOOGLE_ANSWER_KEY}", location.hash.slice(1));
+  location.replace(target.origin === location.origin ? target.href : "/");
+</script>
+`;
+//# sourceMappingURL=index.js.map

package/lib/module/modules/auth/google-return-page/index.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["GOOGLE_ANSWER_KEY","GOOGLE_REQUEST_KEY","GOOGLE_RETURN_PAGE_HTML"],"sourceRoot":"../../../../../src","sources":["modules/auth/google-return-page/index.ts"],"mappings":";;AAAA,SACEA,iBAAiB,EACjBC,kBAAkB,QACb,6CAA0C;;AAEjD;AACA;AACA;AACA;AACA;AACA;AACA,OAAO,MAAMC,uBAA+B,GAAG;AAC/C;AACA;AACA;AACA,qDAAqDD,kBAAkB;AACvE;AACA,4BAA4BD,iBAAiB;AAC7C;AACA;AACA,CAAC","ignoreList":[]}

package/lib/module/modules/auth/hooks/use-social-sign-in.web.js

@@ -0,0 +1,10 @@
+"use strict";
+
+import { useAuthAction } from "./use-auth-action.js";
+const NOT_ON_THE_WEB = "useSocialSignIn is not available on the web; render SignIn.SocialLogins.GoogleLogin or AppleLogin instead";
+
+/** Rejects: the web signs in through the `SignIn.SocialLogins` buttons, which leave and return to the page. */
+export const useSocialSignIn = _options => useAuthAction(async () => {
+  throw new Error(NOT_ON_THE_WEB);
+});
+//# sourceMappingURL=use-social-sign-in.web.js.map

package/lib/module/modules/auth/hooks/use-social-sign-in.web.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["useAuthAction","NOT_ON_THE_WEB","useSocialSignIn","_options","Error"],"sourceRoot":"../../../../../src","sources":["modules/auth/hooks/use-social-sign-in.web.ts"],"mappings":";;AAGA,SAASA,aAAa,QAAQ,sBAAmB;AAEjD,MAAMC,cAAc,GAClB,2GAA2G;;AAE7G;AACA,OAAO,MAAMC,eAAe,GAAIC,QAA6B,IAC3DH,aAAa,CAAC,YAA8B;EAC1C,MAAM,IAAII,KAAK,CAACH,cAAc,CAAC;AACjC,CAAC,CAAC","ignoreList":[]}

package/lib/module/modules/auth/index.js

@@ -9,6 +9,7 @@
  */
 import "./default-translation.js";
 export * from "./sign-in/index.js";
+export * from "./google-return-page/index.js";
 export * from "./register/index.js";
 export * from "./profile/index.js";
 export * from "./delete-account-button/index.js";
@@ -18,7 +19,7 @@ export * from "./hooks/use-rate-limit-cooldown.js";
 export * from "./hooks/use-auth-action.js";
 export * from "./hooks/use-sign-in.js";
 export * from "./hooks/use-accept-invite-link.js";
-export * from "./hooks/use-social-sign-in.js";
+export * from "./hooks/use-social-sign-in";
 export * from "./hooks/use-sign-out.js";
 export * from "./hooks/use-delete-account.js";
 export * from "./utils/rate-limit.js";

package/lib/module/modules/auth/index.js.map

@@ -1 +1 @@
-{"version":3,"names":[],"sourceRoot":"../../../../src","sources":["modules/auth/index.tsx"],"mappings":";;AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,OAAO,0BAAuB;AAE9B,cAAc,oBAAW;AACzB,cAAc,qBAAY;AAC1B,cAAc,oBAAW;AACzB,cAAc,kCAAyB;AACvC,cAAc,0BAAiB;AAC/B,cAAc,2BAAkB;AAChC,cAAc,oCAAiC;AAC/C,cAAc,4BAAyB;AACvC,cAAc,wBAAqB;AACnC,cAAc,mCAAgC;AAC9C,cAAc,+BAA4B;AAC1C,cAAc,yBAAsB;AACpC,cAAc,+BAA4B;AAC1C,cAAc,uBAAoB;AAClC,cAAc,0BAAuB;AACrC,cAAc,wBAAqB;AACnC,cAAc,oBAAW","ignoreList":[]}
+{"version":3,"names":[],"sourceRoot":"../../../../src","sources":["modules/auth/index.tsx"],"mappings":";;AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,OAAO,0BAAuB;AAE9B,cAAc,oBAAW;AACzB,cAAc,+BAAsB;AACpC,cAAc,qBAAY;AAC1B,cAAc,oBAAW;AACzB,cAAc,kCAAyB;AACvC,cAAc,0BAAiB;AAC/B,cAAc,2BAAkB;AAChC,cAAc,oCAAiC;AAC/C,cAAc,4BAAyB;AACvC,cAAc,wBAAqB;AACnC,cAAc,mCAAgC;AAC9C,cAAc,4BAA4B;AAC1C,cAAc,yBAAsB;AACpC,cAAc,+BAA4B;AAC1C,cAAc,uBAAoB;AAClC,cAAc,0BAAuB;AACrC,cAAc,wBAAqB;AACnC,cAAc,oBAAW","ignoreList":[]}

package/lib/module/modules/auth/session/logout-session.js

@@ -1,6 +1,6 @@
 "use strict";
 
-import { signOutGoogleIfNeeded } from "../utils/sign-out-google.js";
+import { signOutGoogleIfNeeded } from "../utils/sign-out-google";
 const logoutRequests = new WeakMap();
 const logoutInProgress = new WeakSet();
 const isLogoutInProgress = client => logoutInProgress.has(client);

package/lib/module/modules/auth/session/logout-session.js.map

@@ -1 +1 @@
-{"version":3,"names":["signOutGoogleIfNeeded","logoutRequests","WeakMap","logoutInProgress","WeakSet","isLogoutInProgress","client","has","logoutSession","key","pending","get","add","request","auth","logout","finally","delete","set"],"sourceRoot":"../../../../../src","sources":["modules/auth/session/logout-session.ts"],"mappings":";;AAEA,SAASA,qBAAqB,QAAQ,6BAA0B;AAEhE,MAAMC,cAAc,GAAG,IAAIC,OAAO,CAAwB,CAAC;AAC3D,MAAMC,gBAAgB,GAAG,IAAIC,OAAO,CAAS,CAAC;AAE9C,MAAMC,kBAAkB,GAAIC,MAAc,IACxCH,gBAAgB,CAACI,GAAG,CAACD,MAAM,CAAC;;AAE9B;AACA,MAAME,aAAa,GAAIF,MAAY,IAAoB;EACrD,MAAMG,GAAG,GAAGH,MAAgB;EAC5B,MAAMI,OAAO,GAAGT,cAAc,CAACU,GAAG,CAACF,GAAG,CAAC;EAEvC,IAAIC,OAAO,EAAE;IACX,OAAOA,OAAO;EAChB;EAEAP,gBAAgB,CAACS,GAAG,CAACH,GAAG,CAAC;EAEzB,MAAMI,OAAO,GAAG,CAAC,YAAY;IAC3B,IAAI;MACF,MAAMP,MAAM,CAACQ,IAAI,CAACC,MAAM,CAAC,CAAC;IAC5B,CAAC,SAAS;MACR,MAAMf,qBAAqB,CAAC,CAAC;IAC/B;EACF,CAAC,EAAE,CAAC,CAACgB,OAAO,CAAC,MAAM;IACjBf,cAAc,CAACgB,MAAM,CAACR,GAAG,CAAC;IAC1BN,gBAAgB,CAACc,MAAM,CAACR,GAAG,CAAC;EAC9B,CAAC,CAAC;EAEFR,cAAc,CAACiB,GAAG,CAACT,GAAG,EAAEI,OAAO,CAAC;EAEhC,OAAOA,OAAO;AAChB,CAAC;AAED,SAASR,kBAAkB,EAAEG,aAAa","ignoreList":[]}
+{"version":3,"names":["signOutGoogleIfNeeded","logoutRequests","WeakMap","logoutInProgress","WeakSet","isLogoutInProgress","client","has","logoutSession","key","pending","get","add","request","auth","logout","finally","delete","set"],"sourceRoot":"../../../../../src","sources":["modules/auth/session/logout-session.ts"],"mappings":";;AAEA,SAASA,qBAAqB,QAAQ,0BAA0B;AAEhE,MAAMC,cAAc,GAAG,IAAIC,OAAO,CAAwB,CAAC;AAC3D,MAAMC,gBAAgB,GAAG,IAAIC,OAAO,CAAS,CAAC;AAE9C,MAAMC,kBAAkB,GAAIC,MAAc,IACxCH,gBAAgB,CAACI,GAAG,CAACD,MAAM,CAAC;;AAE9B;AACA,MAAME,aAAa,GAAIF,MAAY,IAAoB;EACrD,MAAMG,GAAG,GAAGH,MAAgB;EAC5B,MAAMI,OAAO,GAAGT,cAAc,CAACU,GAAG,CAACF,GAAG,CAAC;EAEvC,IAAIC,OAAO,EAAE;IACX,OAAOA,OAAO;EAChB;EAEAP,gBAAgB,CAACS,GAAG,CAACH,GAAG,CAAC;EAEzB,MAAMI,OAAO,GAAG,CAAC,YAAY;IAC3B,IAAI;MACF,MAAMP,MAAM,CAACQ,IAAI,CAACC,MAAM,CAAC,CAAC;IAC5B,CAAC,SAAS;MACR,MAAMf,qBAAqB,CAAC,CAAC;IAC/B;EACF,CAAC,EAAE,CAAC,CAACgB,OAAO,CAAC,MAAM;IACjBf,cAAc,CAACgB,MAAM,CAACR,GAAG,CAAC;IAC1BN,gBAAgB,CAACc,MAAM,CAACR,GAAG,CAAC;EAC9B,CAAC,CAAC;EAEFR,cAAc,CAACiB,GAAG,CAACT,GAAG,EAAEI,OAAO,CAAC;EAEhC,OAAOA,OAAO;AAChB,CAAC;AAED,SAASR,kBAAkB,EAAEG,aAAa","ignoreList":[]}

package/lib/module/modules/auth/sign-in/components/social-logins/apple-login-button.web.js

@@ -0,0 +1,67 @@
+"use strict";
+
+import { useOvok } from "@ovok/core/next/react";
+import * as React from "react";
+import { parseSignInError } from "../../../utils/sign-in-error.js";
+import { isAppleCancel, loadAppleScript, signInWithApple } from "../../utils/apple-web-sign-in.js";
+import { SocialLoginButton } from "./social-login-button.js";
+import { jsx as _jsx } from "react/jsx-runtime";
+const AppleServicesLoginButton = ({
+  appleServicesId,
+  appleRedirectUri,
+  internalId,
+  onSuccess,
+  onError,
+  testID,
+  style,
+  disabled,
+  children,
+  ...props
+}) => {
+  const client = useOvok();
+  const [isLoading, setIsLoading] = React.useState(false);
+  const handleAppleLogin = React.useCallback(async () => {
+    try {
+      setIsLoading(true);
+      const credentials = await signInWithApple({
+        servicesId: appleServicesId,
+        redirectUri: appleRedirectUri
+      });
+      const loginResponse = await client.auth.socialLogin("apple", {
+        ...credentials,
+        internalId
+      });
+      onSuccess?.(loginResponse);
+    } catch (cause) {
+      if (!isAppleCancel(cause)) {
+        onError?.(parseSignInError(cause).error);
+      }
+    } finally {
+      setIsLoading(false);
+    }
+  }, [appleRedirectUri, appleServicesId, client, internalId, onError, onSuccess]);
+
+  // Browsers only open the popup right after a tap, so Apple's script is loaded before one.
+  React.useEffect(() => {
+    loadAppleScript().catch(() => undefined);
+  }, []);
+  return /*#__PURE__*/_jsx(SocialLoginButton, {
+    ...props,
+    backgroundColor: "#000",
+    style: style,
+    disabled: disabled || isLoading,
+    onPress: handleAppleLogin,
+    testID: testID,
+    children: children
+  });
+};
+
+/** Sign in with Apple in a popup, for the Services ID registered for this site; renders nothing without one. */
+export const AppleLoginButton = ({
+  appleServicesId,
+  ...props
+}) => appleServicesId ? /*#__PURE__*/_jsx(AppleServicesLoginButton, {
+  ...props,
+  appleServicesId: appleServicesId
+}) : null;
+//# sourceMappingURL=apple-login-button.web.js.map

package/lib/module/modules/auth/sign-in/components/social-logins/apple-login-button.web.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["useOvok","React","parseSignInError","isAppleCancel","loadAppleScript","signInWithApple","SocialLoginButton","jsx","_jsx","AppleServicesLoginButton","appleServicesId","appleRedirectUri","internalId","onSuccess","onError","testID","style","disabled","children","props","client","isLoading","setIsLoading","useState","handleAppleLogin","useCallback","credentials","servicesId","redirectUri","loginResponse","auth","socialLogin","cause","error","useEffect","catch","undefined","backgroundColor","onPress","AppleLoginButton"],"sourceRoot":"../../../../../../../src","sources":["modules/auth/sign-in/components/social-logins/apple-login-button.web.tsx"],"mappings":";;AAAA,SAASA,OAAO,QAAQ,uBAAuB;AAC/C,OAAO,KAAKC,KAAK,MAAM,OAAO;AAE9B,SAASC,gBAAgB,QAAQ,iCAA8B;AAE/D,SACEC,aAAa,EACbC,eAAe,EACfC,eAAe,QACV,kCAA+B;AAEtC,SAASC,iBAAiB,QAAQ,0BAAuB;AAAC,SAAAC,GAAA,IAAAC,IAAA;AAM1D,MAAMC,wBAAwB,GAAGA,CAAC;EAChCC,eAAe;EACfC,gBAAgB;EAChBC,UAAU;EACVC,SAAS;EACTC,OAAO;EACPC,MAAM;EACNC,KAAK;EACLC,QAAQ;EACRC,QAAQ;EACR,GAAGC;AAC6C,CAAC,KAAK;EACtD,MAAMC,MAAM,GAAGpB,OAAO,CAAC,CAAC;EAExB,MAAM,CAACqB,SAAS,EAAEC,YAAY,CAAC,GAAGrB,KAAK,CAACsB,QAAQ,CAAC,KAAK,CAAC;EAEvD,MAAMC,gBAAgB,GAAGvB,KAAK,CAACwB,WAAW,CAAC,YAAY;IACrD,IAAI;MACFH,YAAY,CAAC,IAAI,CAAC;MAElB,MAAMI,WAAW,GAAG,MAAMrB,eAAe,CAAC;QACxCsB,UAAU,EAAEjB,eAAe;QAC3BkB,WAAW,EAAEjB;MACf,CAAC,CAAC;MAEF,MAAMkB,aAAa,GAAG,MAAMT,MAAM,CAACU,IAAI,CAACC,WAAW,CAAC,OAAO,EAAE;QAAE,GAAGL,WAAW;QAAEd;MAAW,CAAC,CAAC;MAE5FC,SAAS,GAAGgB,aAAa,CAAC;IAC5B,CAAC,CAAC,OAAOG,KAAK,EAAE;MACd,IAAI,CAAC7B,aAAa,CAAC6B,KAAK,CAAC,EAAE;QACzBlB,OAAO,GAAGZ,gBAAgB,CAAC8B,KAAK,CAAC,CAACC,KAAK,CAAC;MAC1C;IACF,CAAC,SAAS;MACRX,YAAY,CAAC,KAAK,CAAC;IACrB;EACF,CAAC,EAAE,CAACX,gBAAgB,EAAED,eAAe,EAAEU,MAAM,EAAER,UAAU,EAAEE,OAAO,EAAED,SAAS,CAAC,CAAC;;EAE/E;EACAZ,KAAK,CAACiC,SAAS,CAAC,MAAM;IACpB9B,eAAe,CAAC,CAAC,CAAC+B,KAAK,CAAC,MAAMC,SAAS,CAAC;EAC1C,CAAC,EAAE,EAAE,CAAC;EAEN,oBACE5B,IAAA,CAACF,iBAAiB;IAAA,GACZa,KAAK;IACTkB,eAAe,EAAC,MAAM;IACtBrB,KAAK,EAAEA,KAAM;IACbC,QAAQ,EAAEA,QAAQ,IAAII,SAAU;IAChCiB,OAAO,EAAEd,gBAAiB;IAC1BT,MAAM,EAAEA,MAAO;IAAAG,QAAA,EAEdA;EAAQ,CACQ,CAAC;AAExB,CAAC;;AAED;AACA,OAAO,MAAMqB,gBAAgB,GAAGA,CAAC;EAC/B7B,eAAe;EACf,GAAGS;AACqC,CAAC,KACzCT,eAAe,gBACbF,IAAA,CAACC,wBAAwB;EAAA,GAAKU,KAAK;EAAET,eAAe,EAAEA;AAAgB,CAAE,CAAC,GACvE,IAAI","ignoreList":[]}

package/lib/module/modules/auth/sign-in/components/social-logins/apple-login.js

@@ -1,6 +1,6 @@
 "use strict";
 
-import { AppleLoginButton } from "./apple-login-button.js";
+import { AppleLoginButton } from "./apple-login-button";
 import { AppleLoginIcon } from "./apple-login-icon.js";
 import { AppleLoginText } from "./apple-login-text.js";
 

package/lib/module/modules/auth/sign-in/components/social-logins/apple-login.js.map

@@ -1 +1 @@
-{"version":3,"names":["AppleLoginButton","AppleLoginIcon","AppleLoginText","AppleLogin","Object","assign","Icon","Text"],"sourceRoot":"../../../../../../../src","sources":["modules/auth/sign-in/components/social-logins/apple-login.tsx"],"mappings":";;AAAA,SAASA,gBAAgB,QAAQ,yBAAsB;AACvD,SAASC,cAAc,QAAQ,uBAAoB;AACnD,SAASC,cAAc,QAAQ,uBAAoB;;AAEnD;AACA;AACA;AACA;AACA;AACA,OAAO,MAAMC,UAAU,GAAGC,MAAM,CAACC,MAAM,CAACL,gBAAgB,EAAE;EACxD;EACAM,IAAI,EAAEL,cAAc;EAEpB;EACAM,IAAI,EAAEL;AACR,CAAC,CAAC","ignoreList":[]}
+{"version":3,"names":["AppleLoginButton","AppleLoginIcon","AppleLoginText","AppleLogin","Object","assign","Icon","Text"],"sourceRoot":"../../../../../../../src","sources":["modules/auth/sign-in/components/social-logins/apple-login.tsx"],"mappings":";;AAAA,SAASA,gBAAgB,QAAQ,sBAAsB;AACvD,SAASC,cAAc,QAAQ,uBAAoB;AACnD,SAASC,cAAc,QAAQ,uBAAoB;;AAEnD;AACA;AACA;AACA;AACA;AACA,OAAO,MAAMC,UAAU,GAAGC,MAAM,CAACC,MAAM,CAACL,gBAAgB,EAAE;EACxD;EACAM,IAAI,EAAEL,cAAc;EAEpB;EACAM,IAAI,EAAEL;AACR,CAAC,CAAC","ignoreList":[]}

package/lib/module/modules/auth/sign-in/components/social-logins/google-login-button.web.js

@@ -0,0 +1,68 @@
+"use strict";
+
+import { useOvok } from "@ovok/core/next/react";
+import * as React from "react";
+import { useAppTheme } from "../../../../theme/index.js";
+import { parseSignInError } from "../../../utils/sign-in-error.js";
+import { startGoogleSignIn, takeGoogleIdToken } from "../../utils/google-redirect-sign-in.js";
+import { SocialLoginButton } from "./social-login-button.js";
+
+/** Google's sign-in page in this tab; back on the sign-in screen, the ID token it sent signs the user in. */
+import { jsx as _jsx } from "react/jsx-runtime";
+export const GoogleLoginButton = ({
+  googleIosClientId: _googleIosClientId,
+  googleWebClientId,
+  googleRedirectUri,
+  internalId,
+  onSuccess,
+  onError,
+  testID,
+  style,
+  disabled,
+  children,
+  ...props
+}) => {
+  const theme = useAppTheme();
+  const client = useOvok();
+  const [isLoading, setIsLoading] = React.useState(false);
+  const signInWithIdToken = React.useCallback(async idToken => {
+    try {
+      setIsLoading(true);
+      const loginResponse = await client.auth.socialLogin("google", {
+        idToken,
+        internalId
+      });
+      onSuccess?.(loginResponse);
+    } catch (error) {
+      onError?.(parseSignInError(error).error);
+    } finally {
+      setIsLoading(false);
+    }
+  }, [client, internalId, onError, onSuccess]);
+  const handleGoogleSignIn = React.useCallback(() => {
+    try {
+      startGoogleSignIn({
+        clientId: googleWebClientId,
+        redirectUri: googleRedirectUri
+      });
+    } catch (error) {
+      onError?.(parseSignInError(error).error);
+    }
+  }, [googleRedirectUri, googleWebClientId, onError]);
+  React.useEffect(() => {
+    const idToken = takeGoogleIdToken();
+    if (idToken) {
+      void signInWithIdToken(idToken);
+    }
+  }, [signInWithIdToken]);
+  return /*#__PURE__*/_jsx(SocialLoginButton, {
+    ...props,
+    backgroundColor: theme.dark ? "#000" : "#fff",
+    style: style,
+    disabled: isLoading || disabled,
+    onPress: handleGoogleSignIn,
+    testID: testID,
+    children: children
+  });
+};
+//# sourceMappingURL=google-login-button.web.js.map

package/lib/module/modules/auth/sign-in/components/social-logins/google-login-button.web.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["useOvok","React","useAppTheme","parseSignInError","startGoogleSignIn","takeGoogleIdToken","SocialLoginButton","jsx","_jsx","GoogleLoginButton","googleIosClientId","_googleIosClientId","googleWebClientId","googleRedirectUri","internalId","onSuccess","onError","testID","style","disabled","children","props","theme","client","isLoading","setIsLoading","useState","signInWithIdToken","useCallback","idToken","loginResponse","auth","socialLogin","error","handleGoogleSignIn","clientId","redirectUri","useEffect","backgroundColor","dark","onPress"],"sourceRoot":"../../../../../../../src","sources":["modules/auth/sign-in/components/social-logins/google-login-button.web.tsx"],"mappings":";;AAAA,SAASA,OAAO,QAAQ,uBAAuB;AAC/C,OAAO,KAAKC,KAAK,MAAM,OAAO;AAE9B,SAASC,WAAW,QAAQ,4BAAmB;AAC/C,SAASC,gBAAgB,QAAQ,iCAA8B;AAE/D,SACEC,iBAAiB,EACjBC,iBAAiB,QACZ,wCAAqC;AAE5C,SAASC,iBAAiB,QAAQ,0BAAuB;;AAEzD;AAAA,SAAAC,GAAA,IAAAC,IAAA;AACA,OAAO,MAAMC,iBAAiB,GAAGA,CAAC;EAChCC,iBAAiB,EAAEC,kBAAkB;EACrCC,iBAAiB;EACjBC,iBAAiB;EACjBC,UAAU;EACVC,SAAS;EACTC,OAAO;EACPC,MAAM;EACNC,KAAK;EACLC,QAAQ;EACRC,QAAQ;EACR,GAAGC;AACsC,CAAC,KAAK;EAC/C,MAAMC,KAAK,GAAGpB,WAAW,CAAC,CAAC;EAC3B,MAAMqB,MAAM,GAAGvB,OAAO,CAAC,CAAC;EAExB,MAAM,CAACwB,SAAS,EAAEC,YAAY,CAAC,GAAGxB,KAAK,CAACyB,QAAQ,CAAC,KAAK,CAAC;EAEvD,MAAMC,iBAAiB,GAAG1B,KAAK,CAAC2B,WAAW,CACzC,MAAOC,OAAe,IAAK;IACzB,IAAI;MACFJ,YAAY,CAAC,IAAI,CAAC;MAElB,MAAMK,aAAa,GAAG,MAAMP,MAAM,CAACQ,IAAI,CAACC,WAAW,CAAC,QAAQ,EAAE;QAAEH,OAAO;QAAEf;MAAW,CAAC,CAAC;MAEtFC,SAAS,GAAGe,aAAa,CAAC;IAC5B,CAAC,CAAC,OAAOG,KAAK,EAAE;MACdjB,OAAO,GAAGb,gBAAgB,CAAC8B,KAAK,CAAC,CAACA,KAAK,CAAC;IAC1C,CAAC,SAAS;MACRR,YAAY,CAAC,KAAK,CAAC;IACrB;EACF,CAAC,EACD,CAACF,MAAM,EAAET,UAAU,EAAEE,OAAO,EAAED,SAAS,CACzC,CAAC;EAED,MAAMmB,kBAAkB,GAAGjC,KAAK,CAAC2B,WAAW,CAAC,MAAM;IACjD,IAAI;MACFxB,iBAAiB,CAAC;QAAE+B,QAAQ,EAAEvB,iBAAiB;QAAEwB,WAAW,EAAEvB;MAAkB,CAAC,CAAC;IACpF,CAAC,CAAC,OAAOoB,KAAK,EAAE;MACdjB,OAAO,GAAGb,gBAAgB,CAAC8B,KAAK,CAAC,CAACA,KAAK,CAAC;IAC1C;EACF,CAAC,EAAE,CAACpB,iBAAiB,EAAED,iBAAiB,EAAEI,OAAO,CAAC,CAAC;EAEnDf,KAAK,CAACoC,SAAS,CAAC,MAAM;IACpB,MAAMR,OAAO,GAAGxB,iBAAiB,CAAC,CAAC;IAEnC,IAAIwB,OAAO,EAAE;MACX,KAAKF,iBAAiB,CAACE,OAAO,CAAC;IACjC;EACF,CAAC,EAAE,CAACF,iBAAiB,CAAC,CAAC;EAEvB,oBACEnB,IAAA,CAACF,iBAAiB;IAAA,GACZe,KAAK;IACTiB,eAAe,EAAEhB,KAAK,CAACiB,IAAI,GAAG,MAAM,GAAG,MAAO;IAC9CrB,KAAK,EAAEA,KAAM;IACbC,QAAQ,EAAEK,SAAS,IAAIL,QAAS;IAChCqB,OAAO,EAAEN,kBAAmB;IAC5BjB,MAAM,EAAEA,MAAO;IAAAG,QAAA,EAEdA;EAAQ,CACQ,CAAC;AAExB,CAAC","ignoreList":[]}

package/lib/module/modules/auth/sign-in/components/social-logins/google-login.js

@@ -1,7 +1,7 @@
 "use strict";
 
 import { GoogleIcon } from "./google-icon.js";
-import { GoogleLoginButton } from "./google-login-button.js";
+import { GoogleLoginButton } from "./google-login-button";
 import { GoogleLoginText } from "./google-login-text.js";
 
 /**

package/lib/module/modules/auth/sign-in/components/social-logins/google-login.js.map

@@ -1 +1 @@
-{"version":3,"names":["GoogleIcon","GoogleLoginButton","GoogleLoginText","GoogleLogin","Object","assign","Icon","Text"],"sourceRoot":"../../../../../../../src","sources":["modules/auth/sign-in/components/social-logins/google-login.tsx"],"mappings":";;AAAA,SAASA,UAAU,QAAQ,kBAAe;AAC1C,SAASC,iBAAiB,QAAQ,0BAAuB;AACzD,SAASC,eAAe,QAAQ,wBAAqB;;AAErD;AACA;AACA;AACA;AACA;AACA,OAAO,MAAMC,WAAW,GAAGC,MAAM,CAACC,MAAM,CAACJ,iBAAiB,EAAE;EAC1D;EACAK,IAAI,EAAEN,UAAU;EAEhB;EACAO,IAAI,EAAEL;AACR,CAAC,CAAC","ignoreList":[]}
+{"version":3,"names":["GoogleIcon","GoogleLoginButton","GoogleLoginText","GoogleLogin","Object","assign","Icon","Text"],"sourceRoot":"../../../../../../../src","sources":["modules/auth/sign-in/components/social-logins/google-login.tsx"],"mappings":";;AAAA,SAASA,UAAU,QAAQ,kBAAe;AAC1C,SAASC,iBAAiB,QAAQ,uBAAuB;AACzD,SAASC,eAAe,QAAQ,wBAAqB;;AAErD;AACA;AACA;AACA;AACA;AACA,OAAO,MAAMC,WAAW,GAAGC,MAAM,CAACC,MAAM,CAACJ,iBAAiB,EAAE;EAC1D;EACAK,IAAI,EAAEN,UAAU;EAEhB;EACAO,IAAI,EAAEL;AACR,CAAC,CAAC","ignoreList":[]}

package/lib/module/modules/auth/sign-in/index.js

@@ -9,5 +9,7 @@ export * from "./types/spacing-props.js";
 export * from "./types/signin-form-forgot-password-props.js";
 export * from "./types/login-with-separator-props.js";
 export * from "./types/social-logins-props.js";
+export * from "./types/google-login-props.js";
+export * from "./types/apple-login-props.js";
 export * from "./types/footer-props.js";
 //# sourceMappingURL=index.js.map

package/lib/module/modules/auth/sign-in/index.js.map

@@ -1 +1 @@
-{"version":3,"names":["SignIn"],"sourceRoot":"../../../../../src","sources":["modules/auth/sign-in/index.tsx"],"mappings":";;AAAA,SAASA,MAAM,QAAQ,yBAAsB;AAE7C,cAAc,0BAAuB;AACrC,cAAc,iCAA8B;AAC5C,cAAc,6BAA0B;AACxC,cAAc,gCAA6B;AAC3C,cAAc,0BAAuB;AACrC,cAAc,8CAA2C;AACzD,cAAc,uCAAoC;AAClD,cAAc,gCAA6B;AAC3C,cAAc,yBAAsB","ignoreList":[]}
+{"version":3,"names":["SignIn"],"sourceRoot":"../../../../../src","sources":["modules/auth/sign-in/index.tsx"],"mappings":";;AAAA,SAASA,MAAM,QAAQ,yBAAsB;AAE7C,cAAc,0BAAuB;AACrC,cAAc,iCAA8B;AAC5C,cAAc,6BAA0B;AACxC,cAAc,gCAA6B;AAC3C,cAAc,0BAAuB;AACrC,cAAc,8CAA2C;AACzD,cAAc,uCAAoC;AAClD,cAAc,gCAA6B;AAC3C,cAAc,+BAA4B;AAC1C,cAAc,8BAA2B;AACzC,cAAc,yBAAsB","ignoreList":[]}

package/lib/module/modules/auth/sign-in/utils/apple-web-sign-in.js

@@ -0,0 +1,84 @@
+"use strict";
+
+import { jwtClaims } from "./jwt-claims.js";
+const APPLE_SCRIPT_URL = "https://appleid.cdn-apple.com/appleauth/static/jsapi/appleid/1/en_US/appleid.auth.js";
+const APPLE_CANCEL_ERRORS = new Set(["popup_closed_by_user", "user_cancelled_authorize"]);
+const APPLE_REAL_USER_STATUS_UNKNOWN = 1;
+
+/** The Apple credentials Ovok takes, without the `internalId` of the sign-in entry. */
+
+/** The Services ID Apple signs the user in for, and the return URL registered for it. */
+
+const browser = () => globalThis;
+let appleScript;
+
+/** Loads Sign in with Apple JS once; a failed load is tried again on the next call. */
+const loadAppleScript = () => {
+  appleScript ??= new Promise((resolve, reject) => {
+    const {
+      document
+    } = browser();
+    const script = document.createElement("script");
+    script.src = APPLE_SCRIPT_URL;
+    script.async = true;
+    script.onload = () => resolve();
+    script.onerror = () => {
+      appleScript = undefined;
+      reject(new Error("Sign in with Apple could not be loaded"));
+    };
+    document.head.append(script);
+  });
+  return appleScript;
+};
+const appleId = () => {
+  const {
+    AppleID
+  } = browser();
+  if (!AppleID) {
+    throw new Error("Sign in with Apple is not available");
+  }
+  return AppleID;
+};
+
+// Apple sends the name only the first time the user signs in.
+const appleFullName = name => name ? {
+  givenName: name.firstName ?? null,
+  familyName: name.lastName ?? null,
+  middleName: null,
+  namePrefix: null,
+  nameSuffix: null,
+  nickname: null
+} : null;
+const appleCredentials = ({
+  authorization,
+  user
+}) => ({
+  identityToken: authorization.id_token,
+  authorizationCode: authorization.code,
+  state: authorization.state ?? null,
+  user: jwtClaims(authorization.id_token).sub ?? "",
+  email: user?.email ?? "",
+  fullName: appleFullName(user?.name),
+  realUserStatus: APPLE_REAL_USER_STATUS_UNKNOWN
+});
+
+/** Opens Apple's sign-in popup; it must run from a user gesture such as a tap. */
+const signInWithApple = async ({
+  servicesId,
+  redirectUri
+}) => {
+  await loadAppleScript();
+  const apple = appleId();
+  apple.auth.init({
+    clientId: servicesId,
+    scope: "name email",
+    redirectURI: redirectUri ?? browser().location.origin,
+    usePopup: true
+  });
+  return appleCredentials(await apple.auth.signIn());
+};
+
+/** Whether the user closed Apple's popup or declined, which is not an error to report. */
+const isAppleCancel = cause => typeof cause === "object" && cause !== null && APPLE_CANCEL_ERRORS.has(cause.error ?? "");
+export { isAppleCancel, loadAppleScript, signInWithApple };
+//# sourceMappingURL=apple-web-sign-in.js.map

package/lib/module/modules/auth/sign-in/utils/apple-web-sign-in.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["jwtClaims","APPLE_SCRIPT_URL","APPLE_CANCEL_ERRORS","Set","APPLE_REAL_USER_STATUS_UNKNOWN","browser","globalThis","appleScript","loadAppleScript","Promise","resolve","reject","document","script","createElement","src","async","onload","onerror","undefined","Error","head","append","appleId","AppleID","appleFullName","name","givenName","firstName","familyName","lastName","middleName","namePrefix","nameSuffix","nickname","appleCredentials","authorization","user","identityToken","id_token","authorizationCode","code","state","sub","email","fullName","realUserStatus","signInWithApple","servicesId","redirectUri","apple","auth","init","clientId","scope","redirectURI","location","origin","usePopup","signIn","isAppleCancel","cause","has","error"],"sourceRoot":"../../../../../../src","sources":["modules/auth/sign-in/utils/apple-web-sign-in.ts"],"mappings":";;AAEA,SAASA,SAAS,QAAQ,iBAAc;AAExC,MAAMC,gBAAgB,GACpB,sFAAsF;AAExF,MAAMC,mBAAmB,GAAG,IAAIC,GAAG,CAAC,CAAC,sBAAsB,EAAE,0BAA0B,CAAC,CAAC;AACzF,MAAMC,8BAA8B,GAAG,CAAC;;AAExC;;AAGA;;AAsCA,MAAMC,OAAO,GAAGA,CAAA,KAAMC,UAAuC;AAE7D,IAAIC,WAAsC;;AAE1C;AACA,MAAMC,eAAe,GAAGA,CAAA,KAAqB;EAC3CD,WAAW,KAAK,IAAIE,OAAO,CAAO,CAACC,OAAO,EAAEC,MAAM,KAAK;IACrD,MAAM;MAAEC;IAAS,CAAC,GAAGP,OAAO,CAAC,CAAC;IAC9B,MAAMQ,MAAM,GAAGD,QAAQ,CAACE,aAAa,CAAC,QAAQ,CAAC;IAE/CD,MAAM,CAACE,GAAG,GAAGd,gBAAgB;IAC7BY,MAAM,CAACG,KAAK,GAAG,IAAI;IACnBH,MAAM,CAACI,MAAM,GAAG,MAAMP,OAAO,CAAC,CAAC;IAC/BG,MAAM,CAACK,OAAO,GAAG,MAAM;MACrBX,WAAW,GAAGY,SAAS;MACvBR,MAAM,CAAC,IAAIS,KAAK,CAAC,wCAAwC,CAAC,CAAC;IAC7D,CAAC;IACDR,QAAQ,CAACS,IAAI,CAACC,MAAM,CAACT,MAAM,CAAC;EAC9B,CAAC,CAAC;EAEF,OAAON,WAAW;AACpB,CAAC;AAED,MAAMgB,OAAO,GAAGA,CAAA,KAAe;EAC7B,MAAM;IAAEC;EAAQ,CAAC,GAAGnB,OAAO,CAAC,CAAC;EAE7B,IAAI,CAACmB,OAAO,EAAE;IACZ,MAAM,IAAIJ,KAAK,CAAC,qCAAqC,CAAC;EACxD;EAEA,OAAOI,OAAO;AAChB,CAAC;;AAED;AACA,MAAMC,aAAa,GAAIC,IAAuB,IAC5CA,IAAI,GACA;EACEC,SAAS,EAAED,IAAI,CAACE,SAAS,IAAI,IAAI;EACjCC,UAAU,EAAEH,IAAI,CAACI,QAAQ,IAAI,IAAI;EACjCC,UAAU,EAAE,IAAI;EAChBC,UAAU,EAAE,IAAI;EAChBC,UAAU,EAAE,IAAI;EAChBC,QAAQ,EAAE;AACZ,CAAC,GACD,IAAI;AAEV,MAAMC,gBAAgB,GAAGA,CAAC;EAAEC,aAAa;EAAEC;AAA0B,CAAC,MAA2B;EAC/FC,aAAa,EAAEF,aAAa,CAACG,QAAQ;EACrCC,iBAAiB,EAAEJ,aAAa,CAACK,IAAI;EACrCC,KAAK,EAAEN,aAAa,CAACM,KAAK,IAAI,IAAI;EAClCL,IAAI,EAAErC,SAAS,CAACoC,aAAa,CAACG,QAAQ,CAAC,CAACI,GAAG,IAAI,EAAE;EACjDC,KAAK,EAAEP,IAAI,EAAEO,KAAK,IAAI,EAAE;EACxBC,QAAQ,EAAEpB,aAAa,CAACY,IAAI,EAAEX,IAAI,CAAC;EACnCoB,cAAc,EAAE1C;AAClB,CAAC,CAAC;;AAEF;AACA,MAAM2C,eAAe,GAAG,MAAAA,CAAO;EAC7BC,UAAU;EACVC;AACe,CAAC,KAAmC;EACnD,MAAMzC,eAAe,CAAC,CAAC;EAEvB,MAAM0C,KAAK,GAAG3B,OAAO,CAAC,CAAC;EAEvB2B,KAAK,CAACC,IAAI,CAACC,IAAI,CAAC;IACdC,QAAQ,EAAEL,UAAU;IACpBM,KAAK,EAAE,YAAY;IACnBC,WAAW,EAAEN,WAAW,IAAI5C,OAAO,CAAC,CAAC,CAACmD,QAAQ,CAACC,MAAM;IACrDC,QAAQ,EAAE;EACZ,CAAC,CAAC;EAEF,OAAOvB,gBAAgB,CAAC,MAAMe,KAAK,CAACC,IAAI,CAACQ,MAAM,CAAC,CAAC,CAAC;AACpD,CAAC;;AAED;AACA,MAAMC,aAAa,GAAIC,KAAc,IACnC,OAAOA,KAAK,KAAK,QAAQ,IACzBA,KAAK,KAAK,IAAI,IACd3D,mBAAmB,CAAC4D,GAAG,CAAED,KAAK,CAAwBE,KAAK,IAAI,EAAE,CAAC;AAEpE,SACEH,aAAa,EACbpD,eAAe,EACfuC,eAAe","ignoreList":[]}

package/lib/module/modules/auth/sign-in/utils/google-redirect-sign-in.js

@@ -0,0 +1,84 @@
+"use strict";
+
+import { jwtClaims } from "./jwt-claims.js";
+const GOOGLE_AUTHORIZE_URL = "https://accounts.google.com/o/oauth2/v2/auth";
+const GOOGLE_RETURN_PATH = "/oauth/google.html";
+const GOOGLE_REQUEST_KEY = "ovok.google-sign-in";
+const GOOGLE_ANSWER_KEY = "ovok.google-sign-in.answer";
+
+/** What this tab asked Google for, kept until the answer comes back. */
+
+/** Where the tab goes for the ID token, and which address Google returns it to. */
+
+const browser = () => globalThis;
+const authorizeUrl = ({
+  clientId,
+  redirectUri
+}, {
+  state,
+  nonce
+}) => {
+  const query = new URLSearchParams({
+    client_id: clientId,
+    redirect_uri: redirectUri,
+    response_type: "id_token",
+    scope: "openid email profile",
+    prompt: "select_account",
+    state,
+    nonce
+  });
+  return `${GOOGLE_AUTHORIZE_URL}?${query.toString()}`;
+};
+
+/** Sends this tab to Google's sign-in page, remembering the request its answer must match. */
+const startGoogleSignIn = ({
+  clientId,
+  redirectUri
+}) => {
+  const {
+    sessionStorage,
+    location,
+    crypto
+  } = browser();
+  const request = {
+    state: crypto.randomUUID(),
+    nonce: crypto.randomUUID(),
+    returnTo: `${location.pathname}${location.search}`
+  };
+  sessionStorage.setItem(GOOGLE_REQUEST_KEY, JSON.stringify(request));
+  location.assign(authorizeUrl({
+    clientId,
+    redirectUri: redirectUri ?? `${location.origin}${GOOGLE_RETURN_PATH}`
+  }, request));
+};
+const parseRequest = stored => {
+  try {
+    return JSON.parse(stored ?? "null") ?? undefined;
+  } catch {
+    return undefined;
+  }
+};
+const answeredIdToken = (answer, request) => {
+  const idToken = answer.get("id_token");
+  if (!request || !idToken || answer.get("state") !== request.state) {
+    return undefined;
+  }
+  return jwtClaims(idToken).nonce === request.nonce ? idToken : undefined;
+};
+
+/** The ID token Google sent back for this tab's own request; the request and the answer are forgotten either way. */
+const takeGoogleIdToken = () => {
+  const {
+    sessionStorage
+  } = browser();
+  const answer = sessionStorage.getItem(GOOGLE_ANSWER_KEY);
+  if (answer === null) {
+    return undefined;
+  }
+  const request = parseRequest(sessionStorage.getItem(GOOGLE_REQUEST_KEY));
+  sessionStorage.removeItem(GOOGLE_ANSWER_KEY);
+  sessionStorage.removeItem(GOOGLE_REQUEST_KEY);
+  return answeredIdToken(new URLSearchParams(answer), request);
+};
+export { GOOGLE_ANSWER_KEY, GOOGLE_REQUEST_KEY, startGoogleSignIn, takeGoogleIdToken };
+//# sourceMappingURL=google-redirect-sign-in.js.map

package/lib/module/modules/auth/sign-in/utils/google-redirect-sign-in.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["jwtClaims","GOOGLE_AUTHORIZE_URL","GOOGLE_RETURN_PATH","GOOGLE_REQUEST_KEY","GOOGLE_ANSWER_KEY","browser","globalThis","authorizeUrl","clientId","redirectUri","state","nonce","query","URLSearchParams","client_id","redirect_uri","response_type","scope","prompt","toString","startGoogleSignIn","sessionStorage","location","crypto","request","randomUUID","returnTo","pathname","search","setItem","JSON","stringify","assign","origin","parseRequest","stored","parse","undefined","answeredIdToken","answer","idToken","get","takeGoogleIdToken","getItem","removeItem"],"sourceRoot":"../../../../../../src","sources":["modules/auth/sign-in/utils/google-redirect-sign-in.ts"],"mappings":";;AAAA,SAASA,SAAS,QAAQ,iBAAc;AAExC,MAAMC,oBAAoB,GAAG,8CAA8C;AAC3E,MAAMC,kBAAkB,GAAG,oBAAoB;AAC/C,MAAMC,kBAAkB,GAAG,qBAAqB;AAChD,MAAMC,iBAAiB,GAAG,4BAA4B;;AAEtD;;AASA;;AAuBA,MAAMC,OAAO,GAAGA,CAAA,KAAMC,UAAuC;AAE7D,MAAMC,YAAY,GAAGA,CACnB;EAAEC,QAAQ;EAAEC;AAA6C,CAAC,EAC1D;EAAEC,KAAK;EAAEC;AAAqB,CAAC,KAC5B;EACH,MAAMC,KAAK,GAAG,IAAIC,eAAe,CAAC;IAChCC,SAAS,EAAEN,QAAQ;IACnBO,YAAY,EAAEN,WAAW;IACzBO,aAAa,EAAE,UAAU;IACzBC,KAAK,EAAE,sBAAsB;IAC7BC,MAAM,EAAE,gBAAgB;IACxBR,KAAK;IACLC;EACF,CAAC,CAAC;EAEF,OAAO,GAAGV,oBAAoB,IAAIW,KAAK,CAACO,QAAQ,CAAC,CAAC,EAAE;AACtD,CAAC;;AAED;AACA,MAAMC,iBAAiB,GAAGA,CAAC;EAAEZ,QAAQ;EAAEC;AAAmC,CAAC,KAAW;EACpF,MAAM;IAAEY,cAAc;IAAEC,QAAQ;IAAEC;EAAO,CAAC,GAAGlB,OAAO,CAAC,CAAC;EAEtD,MAAMmB,OAAsB,GAAG;IAC7Bd,KAAK,EAAEa,MAAM,CAACE,UAAU,CAAC,CAAC;IAC1Bd,KAAK,EAAEY,MAAM,CAACE,UAAU,CAAC,CAAC;IAC1BC,QAAQ,EAAE,GAAGJ,QAAQ,CAACK,QAAQ,GAAGL,QAAQ,CAACM,MAAM;EAClD,CAAC;EAEDP,cAAc,CAACQ,OAAO,CAAC1B,kBAAkB,EAAE2B,IAAI,CAACC,SAAS,CAACP,OAAO,CAAC,CAAC;EACnEF,QAAQ,CAACU,MAAM,CACbzB,YAAY,CACV;IAAEC,QAAQ;IAAEC,WAAW,EAAEA,WAAW,IAAI,GAAGa,QAAQ,CAACW,MAAM,GAAG/B,kBAAkB;EAAG,CAAC,EACnFsB,OACF,CACF,CAAC;AACH,CAAC;AAED,MAAMU,YAAY,GAAIC,MAAqB,IAAgC;EACzE,IAAI;IACF,OAAOL,IAAI,CAACM,KAAK,CAACD,MAAM,IAAI,MAAM,CAAC,IAAIE,SAAS;EAClD,CAAC,CAAC,MAAM;IACN,OAAOA,SAAS;EAClB;AACF,CAAC;AAED,MAAMC,eAAe,GAAGA,CAACC,MAAuB,EAAEf,OAAuB,KAAyB;EAChG,MAAMgB,OAAO,GAAGD,MAAM,CAACE,GAAG,CAAC,UAAU,CAAC;EAEtC,IAAI,CAACjB,OAAO,IAAI,CAACgB,OAAO,IAAID,MAAM,CAACE,GAAG,CAAC,OAAO,CAAC,KAAKjB,OAAO,CAACd,KAAK,EAAE;IACjE,OAAO2B,SAAS;EAClB;EAEA,OAAOrC,SAAS,CAACwC,OAAO,CAAC,CAAC7B,KAAK,KAAKa,OAAO,CAACb,KAAK,GAAG6B,OAAO,GAAGH,SAAS;AACzE,CAAC;;AAED;AACA,MAAMK,iBAAiB,GAAGA,CAAA,KAA0B;EAClD,MAAM;IAAErB;EAAe,CAAC,GAAGhB,OAAO,CAAC,CAAC;EACpC,MAAMkC,MAAM,GAAGlB,cAAc,CAACsB,OAAO,CAACvC,iBAAiB,CAAC;EAExD,IAAImC,MAAM,KAAK,IAAI,EAAE;IACnB,OAAOF,SAAS;EAClB;EAEA,MAAMb,OAAO,GAAGU,YAAY,CAACb,cAAc,CAACsB,OAAO,CAACxC,kBAAkB,CAAC,CAAC;EAExEkB,cAAc,CAACuB,UAAU,CAACxC,iBAAiB,CAAC;EAC5CiB,cAAc,CAACuB,UAAU,CAACzC,kBAAkB,CAAC;EAE7C,OAAOmC,eAAe,CAAC,IAAIzB,eAAe,CAAC0B,MAAM,CAAC,EAAEf,OAAO,CAAC;AAC9D,CAAC;AAED,SACEpB,iBAAiB,EACjBD,kBAAkB,EAClBiB,iBAAiB,EACjBsB,iBAAiB","ignoreList":[]}

package/lib/module/modules/auth/sign-in/utils/jwt-claims.js

@@ -0,0 +1,17 @@
+"use strict";
+
+/** The claims web sign-in reads from a provider's JWT. */
+
+const asClaims = value => typeof value === "object" && value !== null ? value : {};
+
+/** A JWT's claims, read without checking the signature; Ovok verifies the token itself. */
+const jwtClaims = jwt => {
+  try {
+    const payload = (jwt.split(".")[1] ?? "").replace(/-/g, "+").replace(/_/g, "/");
+    return asClaims(JSON.parse(atob(payload)));
+  } catch {
+    return {};
+  }
+};
+export { jwtClaims };
+//# sourceMappingURL=jwt-claims.js.map

package/lib/module/modules/auth/sign-in/utils/jwt-claims.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["asClaims","value","jwtClaims","jwt","payload","split","replace","JSON","parse","atob"],"sourceRoot":"../../../../../../src","sources":["modules/auth/sign-in/utils/jwt-claims.ts"],"mappings":";;AAAA;;AAMA,MAAMA,QAAQ,GAAIC,KAAc,IAC9B,OAAOA,KAAK,KAAK,QAAQ,IAAIA,KAAK,KAAK,IAAI,GAAIA,KAAK,GAAiB,CAAC,CAAC;;AAEzE;AACA,MAAMC,SAAS,GAAIC,GAAW,IAAgB;EAC5C,IAAI;IACF,MAAMC,OAAO,GAAG,CAACD,GAAG,CAACE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,EAAEC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAACA,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC;IAE/E,OAAON,QAAQ,CAACO,IAAI,CAACC,KAAK,CAACC,IAAI,CAACL,OAAO,CAAC,CAAC,CAAC;EAC5C,CAAC,CAAC,MAAM;IACN,OAAO,CAAC,CAAC;EACX;AACF,CAAC;AAED,SAASF,SAAS","ignoreList":[]}

package/lib/module/modules/auth/utils/sign-out-google.web.js

@@ -0,0 +1,5 @@
+"use strict";
+
+/** The web keeps no Google account in the app, so there is nothing to clear. */
+export const signOutGoogleIfNeeded = async () => undefined;
+//# sourceMappingURL=sign-out-google.web.js.map

package/lib/module/modules/auth/utils/sign-out-google.web.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["signOutGoogleIfNeeded","undefined"],"sourceRoot":"../../../../../src","sources":["modules/auth/utils/sign-out-google.web.ts"],"mappings":";;AAAA;AACA,OAAO,MAAMA,qBAAqB,GAAG,MAAAA,CAAA,KAA2BC,SAAS","ignoreList":[]}