@owlmeans/mui-oidc-rp 0.1.3

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 OwlMeans Common — Fullstack typescript framework
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,77 @@
+# @owlmeans/mui-oidc-rp
+
+Browser-side OIDC relying party — guard, auth service, and React components for OIDC login flows.
+
+## Overview
+
+- `appendOidcGuard(context)` — registers the OIDC guard on a web context
+- `setupOidcGuard(modules, coguards?, extras?)` — attaches the guard onto module declarations
+- `makeOidcAuthService(alias?)` — browser-side OIDC auth service (built on `oidc-client-ts`)
+- React components for login and callback handling
+- `OidcAuthPurposes` enum — `Unknown` | `Subscribe` | `Login`
+
+## Installation
+
+```bash
+bun add @owlmeans/mui-oidc-rp
+```
+
+## Usage
+
+Register the guard in your web context:
+
+```typescript
+import { appendOidcGuard } from '@owlmeans/mui-oidc-rp'
+import { makeContext as makeBasicContext } from '@owlmeans/mui-panel'
+
+export const makeContext = <C extends Config, T extends Context<C>>(cfg: C): T => {
+  const context = makeBasicContext<C, T>(cfg) as T
+  appendOidcGuard<C, T>(context)
+  return context
+}
+```
+
+Wire OIDC onto module declarations:
+
+```typescript
+import { setupOidcGuard } from '@owlmeans/mui-oidc-rp'
+
+setupOidcGuard(modules, undefined, { payload: { simplified: true } })
+```
+
+## API
+
+### `appendOidcGuard<C, T>(context): T`
+
+Registers the OIDC guard service on the web context.
+
+### `setupOidcGuard(modules, coguards?, extras?)`
+
+Attaches the OIDC guard to the given module declarations. `coguards` lets you compose with another guard alias; `extras` overrides the parametrised props (e.g., `payload.simplified`).
+
+### `makeOidcAuthService(alias?): OidcAuthService`
+
+Creates the browser OIDC auth service. `alias` defaults to `DEFAULT_ALIAS` (`'oidc-rp'`).
+
+### Constants
+
+- `DEFAULT_ALIAS` — `'oidc-rp'`
+- `OidcAuthPurposes` enum: `Unknown`, `Subscribe`, `Login`
+
+### Components
+
+Login and callback React components exported from `./components` (re-exported at root).
+
+## Product-Viable Integration Notes
+
+- Import `@owlmeans/mui-oidc-rp/auth/plugins` for side effects to register `OIDC_CLIENT_AUTH` and `GOOGLE_CLIENT_AUTH` with `@owlmeans/client-auth`.
+- The Google plugin uses `useValue`, persists auth control state before redirect, restores it on return, and submits URL query params as `AuthCredentials`.
+- The browser starts login; the server exchanges provider code, links local identity, and returns a normal bearer token.
+- Keep product authorization server-side through module gates and identity profile scopes.
+
+## Related Packages
+
+- [`@owlmeans/oidc`](../oidc) — shared `OIDC_GATE`, `OIDC_GUARD`, dispatcher modules
+- [`@owlmeans/web-client`](../web-client) — base web context this guard plugs into
+- [`@owlmeans/mui-panel`](../mui-panel) — `makeContext` typically used as the base
+- [`@owlmeans/client-auth`](../client-auth) — auth manager primitives the guard interacts with

package/build/auth/plugins/google-client.d.ts

@@ -0,0 +1,3 @@
+import type { AuthenticationPlugin } from '@owlmeans/client-auth/manager/plugins';
+export declare const googleClientPlugin: AuthenticationPlugin;
+//# sourceMappingURL=google-client.d.ts.map

package/build/auth/plugins/google-client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"google-client.d.ts","sourceRoot":"","sources":["../../../src/auth/plugins/google-client.tsx"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,uCAAuC,CAAA;AAYjF,eAAO,MAAM,kBAAkB,EAAE,oBAgFhC,CAAA"}

package/build/auth/plugins/google-client.js

@@ -0,0 +1,71 @@
+import { jsx as _jsx } from "react/jsx-runtime";
+import { AuthenticationStage, CAUTHEN_AUTHEN_TYPED } from '@owlmeans/auth';
+import { DEFAULT_ALIAS as AUTH_SERVICE } from '@owlmeans/client-auth';
+import { GOOGLE_CLIENT_AUTH } from '@owlmeans/oidc';
+import { useContext, useValue } from '@owlmeans/client';
+import { HOME } from '@owlmeans/web-client';
+import LinearProgress from '@mui/material/LinearProgress';
+import { extractGoogleUrl, buildCallbackCredentials } from './helpers.js';
+export const googleClientPlugin = {
+    type: GOOGLE_CLIENT_AUTH,
+    Implementation: Renderer => ({ type, stage, control }) => {
+        const context = useContext();
+        Renderer = Renderer ?? googleClientPlugin.Renderer;
+        useValue(async (cancel) => {
+            switch (control.stage) {
+                case AuthenticationStage.Init: {
+                    const hasState = await control.hasPersistentState();
+                    if (cancel?.current)
+                        return;
+                    // Returning from Google redirect — restore state and authenticate
+                    if (hasState) {
+                        await control.restore();
+                        await control.cleanUpState();
+                        const url = new URL(window.location.href);
+                        const code = url.searchParams.get('code');
+                        if (code != null) {
+                            const auth = buildCallbackCredentials(url.searchParams.toString(), type, control.allowance?.challenge ?? '');
+                            const token = await control.authenticate(auth);
+                            if (token.token !== '') {
+                                const authService = context.service(AUTH_SERVICE);
+                                await authService.authenticate(token);
+                            }
+                            // Navigate to app root after successful authentication
+                            const [homeUrl] = await context.module(HOME).call({ full: true }) ?? [];
+                            window.location.href = homeUrl ?? window.location.origin;
+                            return;
+                        }
+                    }
+                    // Initial request — ask server for Google auth URL
+                    const [source] = await context.module(CAUTHEN_AUTHEN_TYPED).call({
+                        full: true, params: { type }
+                    }) ?? [];
+                    await control.requestAllowence({ type, source: source ?? '' });
+                    break;
+                }
+                case AuthenticationStage.Authenticate: {
+                    if (cancel?.current)
+                        return;
+                    if (control.allowance?.challenge != null) {
+                        // The server wraps challenge as "source:googleUrl" — extract the URL part
+                        const [source] = await context.module(CAUTHEN_AUTHEN_TYPED).call({
+                            full: true, params: { type }
+                        }) ?? [];
+                        const url = extractGoogleUrl(control.allowance.challenge, source ?? '');
+                        // Persist control state before redirect
+                        await control.persist();
+                        // Redirect to Google
+                        document.location.href = url;
+                    }
+                    break;
+                }
+            }
+        }, [type, stage]);
+        if (Renderer == null) {
+            throw new SyntaxError('Renderer is not defined for Google plugin');
+        }
+        return _jsx(Renderer, { type: type, stage: stage, control: control, params: {} });
+    },
+    Renderer: () => _jsx(LinearProgress, {})
+};
+//# sourceMappingURL=google-client.js.map

package/build/auth/plugins/google-client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"google-client.js","sourceRoot":"","sources":["../../../src/auth/plugins/google-client.tsx"],"names":[],"mappings":";AAEA,OAAO,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,MAAM,gBAAgB,CAAA;AAE1E,OAAO,EAAE,aAAa,IAAI,YAAY,EAAE,MAAM,uBAAuB,CAAA;AAErE,OAAO,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAA;AACnD,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAA;AACvD,OAAO,EAAE,IAAI,EAAE,MAAM,sBAAsB,CAAA;AAE3C,OAAO,cAAc,MAAM,8BAA8B,CAAA;AACzD,OAAO,EAAE,gBAAgB,EAAE,wBAAwB,EAAE,MAAM,cAAc,CAAA;AAEzE,MAAM,CAAC,MAAM,kBAAkB,GAAyB;IACtD,IAAI,EAAE,kBAAkB;IAExB,cAAc,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE;QACvD,MAAM,OAAO,GAAG,UAAU,EAAE,CAAA;QAC5B,QAAQ,GAAG,QAAQ,IAAI,kBAAkB,CAAC,QAAQ,CAAA;QAElD,QAAQ,CAAC,KAAK,EAAC,MAAM,EAAC,EAAE;YACtB,QAAQ,OAAO,CAAC,KAAK,EAAE,CAAC;gBACtB,KAAK,mBAAmB,CAAC,IAAI,CAAC,CAAC,CAAC;oBAC9B,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,kBAAkB,EAAE,CAAA;oBACnD,IAAI,MAAM,EAAE,OAAO;wBAAE,OAAM;oBAE3B,kEAAkE;oBAClE,IAAI,QAAQ,EAAE,CAAC;wBACb,MAAM,OAAO,CAAC,OAAO,EAAE,CAAA;wBACvB,MAAM,OAAO,CAAC,YAAY,EAAE,CAAA;wBAE5B,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAA;wBACzC,MAAM,IAAI,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;wBAEzC,IAAI,IAAI,IAAI,IAAI,EAAE,CAAC;4BACjB,MAAM,IAAI,GAAoB,wBAAwB,CACpD,GAAG,CAAC,YAAY,CAAC,QAAQ,EAAE,EAC3B,IAAI,EACJ,OAAO,CAAC,SAAS,EAAE,SAAS,IAAI,EAAE,CACnC,CAAA;4BAED,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,YAAY,CAAC,IAAI,CAAC,CAAA;4BAE9C,IAAI,KAAK,CAAC,KAAK,KAAK,EAAE,EAAE,CAAC;gCACvB,MAAM,WAAW,GAAG,OAAO,CAAC,OAAO,CAAc,YAAY,CAAC,CAAA;gCAC9D,MAAM,WAAW,CAAC,YAAY,CAAC,KAAK,CAAC,CAAA;4BACvC,CAAC;4BAED,uDAAuD;4BACvD,MAAM,CAAC,OAAO,CAAC,GAAG,MAAM,OAAO,CAAC,MAAM,CAAiB,IAAI,CAAC,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,IAAI,EAAE,CAAA;4BACvF,MAAM,CAAC,QAAQ,CAAC,IAAI,GAAG,OAAO,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAA;4BAExD,OAAM;wBACR,CAAC;oBACH,CAAC;oBAED,mDAAmD;oBACnD,MAAM,CAAC,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,MAAM,CAAiB,oBAAoB,CAAC,CAAC,IAAI,CAAC;wBAC/E,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE;qBAC7B,CAAC,IAAI,EAAE,CAAA;oBACR,MAAM,OAAO,CAAC,gBAAgB,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,IAAI,EAAE,EAAE,CAAC,CAAA;oBAC9D,MAAK;gBACP,CAAC;gBAED,KAAK,mBAAmB,CAAC,YAAY,CAAC,CAAC,CAAC;oBACtC,IAAI,MAAM,EAAE,OAAO;wBAAE,OAAM;oBAE3B,IAAI,OAAO,CAAC,SAAS,EAAE,SAAS,IAAI,IAAI,EAAE,CAAC;wBACzC,0EAA0E;wBAC1E,MAAM,CAAC,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,MAAM,CAAiB,oBAAoB,CAAC,CAAC,IAAI,CAAC;4BAC/E,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE;yBAC7B,CAAC,IAAI,EAAE,CAAA;wBACR,MAAM,GAAG,GAAG,gBAAgB,CAAC,OAAO,CAAC,SAAS,CAAC,SAAS,EAAE,MAAM,IAAI,EAAE,CAAC,CAAA;wBAEvE,wCAAwC;wBACxC,MAAM,OAAO,CAAC,OAAO,EAAE,CAAA;wBAEvB,qBAAqB;wBACrB,QAAQ,CAAC,QAAQ,CAAC,IAAI,GAAG,GAAG,CAAA;oBAC9B,CAAC;oBACD,MAAK;gBACP,CAAC;YACH,CAAC;QACH,CAAC,EAAE,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAA;QAEjB,IAAI,QAAQ,IAAI,IAAI,EAAE,CAAC;YACrB,MAAM,IAAI,WAAW,CAAC,2CAA2C,CAAC,CAAA;QACpE,CAAC;QAED,OAAO,KAAC,QAAQ,IAAC,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,GAAI,CAAA;IAC7E,CAAC;IAED,QAAQ,EAAE,GAAG,EAAE,CAAC,KAAC,cAAc,KAAG;CACnC,CAAA"}

package/build/auth/plugins/helpers.d.ts

@@ -0,0 +1,16 @@
+/**
+ * Pure helpers extracted from the Google client plugin for unit-testability.
+ * These perform the URL/challenge processing logic that doesn't depend on React.
+ */
+import type { AuthCredentials } from '@owlmeans/auth';
+/**
+ * Extract the Google auth URL from a signed challenge envelope message.
+ * The server wraps the challenge as "source:googleUrl" — this strips the source prefix.
+ * Also handles raw Google URLs (rolling deployment compatibility).
+ */
+export declare const extractGoogleUrl: (envelopeChallenge: string, sourcePrefix: string) => string;
+/**
+ * Build AuthCredentials from the Google callback URL query params.
+ */
+export declare const buildCallbackCredentials: (queryString: string, type: string, challenge: string) => AuthCredentials;
+//# sourceMappingURL=helpers.d.ts.map

package/build/auth/plugins/helpers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"helpers.d.ts","sourceRoot":"","sources":["../../../src/auth/plugins/helpers.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAIH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAA;AAErD;;;;GAIG;AACH,eAAO,MAAM,gBAAgB,GAAI,mBAAmB,MAAM,EAAE,cAAc,MAAM,KAAG,MAQlF,CAAA;AAED;;GAEG;AACH,eAAO,MAAM,wBAAwB,GACnC,aAAa,MAAM,EACnB,MAAM,MAAM,EACZ,WAAW,MAAM,KAChB,eAOD,CAAA"}

package/build/auth/plugins/helpers.js

@@ -0,0 +1,31 @@
+/**
+ * Pure helpers extracted from the Google client plugin for unit-testability.
+ * These perform the URL/challenge processing logic that doesn't depend on React.
+ */
+import { EnvelopeKind, makeEnvelopeModel } from '@owlmeans/basic-envelope';
+import { AUTH_SCOPE, AuthRole } from '@owlmeans/auth';
+/**
+ * Extract the Google auth URL from a signed challenge envelope message.
+ * The server wraps the challenge as "source:googleUrl" — this strips the source prefix.
+ * Also handles raw Google URLs (rolling deployment compatibility).
+ */
+export const extractGoogleUrl = (envelopeChallenge, sourcePrefix) => {
+    const envelope = makeEnvelopeModel(envelopeChallenge, EnvelopeKind.Wrap);
+    const msg = envelope.message(true);
+    if (msg.startsWith(sourcePrefix + ':')) {
+        return msg.slice(sourcePrefix.length + 1);
+    }
+    return msg;
+};
+/**
+ * Build AuthCredentials from the Google callback URL query params.
+ */
+export const buildCallbackCredentials = (queryString, type, challenge) => ({
+    type,
+    challenge,
+    credential: queryString,
+    role: AuthRole.User,
+    userId: 'code',
+    scopes: [AUTH_SCOPE],
+});
+//# sourceMappingURL=helpers.js.map

package/build/auth/plugins/helpers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"helpers.js","sourceRoot":"","sources":["../../../src/auth/plugins/helpers.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,YAAY,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAA;AAC1E,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAA;AAGrD;;;;GAIG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,iBAAyB,EAAE,YAAoB,EAAU,EAAE;IAC1F,MAAM,QAAQ,GAAG,iBAAiB,CAAC,iBAAiB,EAAE,YAAY,CAAC,IAAI,CAAC,CAAA;IACxE,MAAM,GAAG,GAAG,QAAQ,CAAC,OAAO,CAAS,IAAI,CAAC,CAAA;IAE1C,IAAI,GAAG,CAAC,UAAU,CAAC,YAAY,GAAG,GAAG,CAAC,EAAE,CAAC;QACvC,OAAO,GAAG,CAAC,KAAK,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,CAAC,CAAA;IAC3C,CAAC;IACD,OAAO,GAAG,CAAA;AACZ,CAAC,CAAA;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG,CACtC,WAAmB,EACnB,IAAY,EACZ,SAAiB,EACA,EAAE,CAAC,CAAC;IACrB,IAAI;IACJ,SAAS;IACT,UAAU,EAAE,WAAW;IACvB,IAAI,EAAE,QAAQ,CAAC,IAAI;IACnB,MAAM,EAAE,MAAM;IACd,MAAM,EAAE,CAAC,UAAU,CAAC;CACrB,CAAC,CAAA"}

package/build/auth/plugins/index.d.ts

@@ -0,0 +1,4 @@
+export declare const plugins: {
+    [type: string]: import("@owlmeans/client-auth/manager/plugins").AuthenticationPlugin;
+};
+//# sourceMappingURL=index.d.ts.map

package/build/auth/plugins/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/auth/plugins/index.ts"],"names":[],"mappings":"AASA,eAAO,MAAM,OAAO;;CAAc,CAAA"}

package/build/auth/plugins/index.js

@@ -0,0 +1,8 @@
+import { plugins as authPlugins } from '@owlmeans/client-auth/manager';
+import { OIDC_CLIENT_AUTH, GOOGLE_CLIENT_AUTH } from '@owlmeans/oidc';
+import { oidcClientPlugin } from './oidc-client.js';
+import { googleClientPlugin } from './google-client.js';
+authPlugins[OIDC_CLIENT_AUTH] = oidcClientPlugin;
+authPlugins[GOOGLE_CLIENT_AUTH] = googleClientPlugin;
+export const plugins = authPlugins;
+//# sourceMappingURL=index.js.map

package/build/auth/plugins/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/auth/plugins/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,OAAO,IAAI,WAAW,EAAE,MAAM,+BAA+B,CAAA;AACtE,OAAO,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAA;AACrE,OAAO,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAA;AACnD,OAAO,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAA;AAEvD,WAAW,CAAC,gBAAgB,CAAC,GAAG,gBAAgB,CAAA;AAChD,WAAW,CAAC,kBAAkB,CAAC,GAAG,kBAAkB,CAAA;AAEpD,MAAM,CAAC,MAAM,OAAO,GAAG,WAAW,CAAA"}

package/build/auth/plugins/oidc-client.d.ts

@@ -0,0 +1,3 @@
+import type { AuthenticationPlugin } from '@owlmeans/client-auth/manager/plugins';
+export declare const oidcClientPlugin: AuthenticationPlugin;
+//# sourceMappingURL=oidc-client.d.ts.map

package/build/auth/plugins/oidc-client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"oidc-client.d.ts","sourceRoot":"","sources":["../../../src/auth/plugins/oidc-client.tsx"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,uCAAuC,CAAA;AAajF,eAAO,MAAM,gBAAgB,EAAE,oBAuG9B,CAAA"}

package/build/auth/plugins/oidc-client.js

@@ -0,0 +1,101 @@
+import { jsx as _jsx } from "react/jsx-runtime";
+import { AUTH_SCOPE, AuthenticationStage, AuthManagerError, AuthRole } from '@owlmeans/auth';
+import { OIDC_CLIENT_AUTH } from '@owlmeans/oidc';
+import { useEffect } from 'react';
+import LinearProgress from '@mui/material/LinearProgress';
+import { EnvelopeKind, makeEnvelopeModel } from '@owlmeans/basic-envelope';
+import { useContext } from '@owlmeans/web-client';
+import { DEFAULT_ALIAS, OidcAuthPurposes } from '../../consts.js';
+import { OidcAuthStep, OidpAuthStep, UnknownFlowStep } from '@owlmeans/flow';
+import { useModule } from '@owlmeans/client';
+export const oidcClientPlugin = {
+    type: OIDC_CLIENT_AUTH,
+    Implementation: Renderer => ({ type, stage, control }) => {
+        const context = useContext();
+        Renderer = Renderer ?? oidcClientPlugin.Renderer;
+        const module = useModule();
+        useEffect(() => {
+            let canceled = false;
+            // @TODO extract somewhere else and make it more consequential
+            // This way it looks too messy
+            switch (control.stage) {
+                case AuthenticationStage.Init:
+                    control.hasPersistentState().then(async (hasState) => {
+                        if (canceled) {
+                            return;
+                        }
+                        // 3. Properly process additional paramters on sequential rendering to restore control state
+                        if (hasState) {
+                            await control.restore();
+                            await control.cleanUpState();
+                            const flow = await control.flow();
+                            if (flow != null) {
+                                const state = await flow.state();
+                                if ([OidcAuthStep.PostAuthen, OidpAuthStep.PostAuth].includes(state?.step().step)) {
+                                    const url = new URL(window.location.href);
+                                    const auth = {
+                                        ...control.allowance,
+                                        type,
+                                        challenge: control.allowance?.challenge ?? '',
+                                        credential: url.searchParams.toString(),
+                                        role: AuthRole.User,
+                                        userId: 'code',
+                                        scopes: [AUTH_SCOPE]
+                                    };
+                                    const tokenized = await control.authenticate(auth);
+                                    // @TODO Introduce some standard further flow in case this plugin/component 
+                                    // is used without a callback
+                                    if (tokenized.token !== '') {
+                                        throw new AuthManagerError('callback');
+                                    }
+                                    return; // @TODO Will it work here?
+                                }
+                            }
+                            // return
+                        }
+                        // 1. Initialize OIDC server side authentication
+                        const oidc = context.service(DEFAULT_ALIAS);
+                        // @TODO we need to provide an identity provider client as entityId here for flexibel usage
+                        const flow = await control.flow();
+                        const state = await flow?.state();
+                        const _source = await oidc.proceedToRedirectUrl({
+                            purpose: control.source ?? OidcAuthPurposes.Unknown,
+                            simplified: state?.payload().simplified,
+                            uid: 'uid' in module.params ? `${module.params.uid}` : undefined,
+                            alias: module.alias
+                        });
+                        const source = new URL(_source);
+                        source.search = '';
+                        await control.requestAllowence({ type, source: source.toString() });
+                    });
+                case AuthenticationStage.Authenticate:
+                    control.flow().then(async (flow) => {
+                        if (canceled) {
+                            return;
+                        }
+                        const flowState = await flow?.state();
+                        if (flowState == null) {
+                            throw new UnknownFlowStep(AuthenticationStage.Authenticate);
+                        }
+                        if (control.allowance?.challenge != null) {
+                            const envelope = makeEnvelopeModel(control.allowance?.challenge, EnvelopeKind.Wrap);
+                            const challenge = envelope.message(true);
+                            const parts = challenge.split(':http');
+                            // This thing includes url with flow state so the OIDC redirect it back a correct way
+                            const url = 'http' + parts[1];
+                            // 2. Include additional parameters (control state with allowance to flow state)
+                            await control.persist();
+                            document.location.href = url;
+                        }
+                    });
+            }
+            return () => { canceled = true; };
+        }, [type, stage]);
+        if (Renderer == null) {
+            throw new SyntaxError('Renderer is not defined for OIDC plugin');
+        }
+        return _jsx(Renderer, { type: type, stage: stage, control: control, params: module.params });
+    },
+    Renderer: () => _jsx(LinearProgress, {})
+};
+//# sourceMappingURL=oidc-client.js.map

package/build/auth/plugins/oidc-client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"oidc-client.js","sourceRoot":"","sources":["../../../src/auth/plugins/oidc-client.tsx"],"names":[],"mappings":";AAEA,OAAO,EAAE,UAAU,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAA;AAE5F,OAAO,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAA;AACjD,OAAO,EAAE,SAAS,EAAE,MAAM,OAAO,CAAA;AACjC,OAAO,cAAc,MAAM,8BAA8B,CAAA;AACzD,OAAO,EAAE,YAAY,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAA;AAE1E,OAAO,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAA;AACjD,OAAO,EAAE,aAAa,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAA;AACjE,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAA;AAC5E,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAA;AAE5C,MAAM,CAAC,MAAM,gBAAgB,GAAyB;IACpD,IAAI,EAAE,gBAAgB;IAEtB,cAAc,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE;QACvD,MAAM,OAAO,GAAG,UAAU,EAAmB,CAAA;QAC7C,QAAQ,GAAG,QAAQ,IAAI,gBAAgB,CAAC,QAAQ,CAAA;QAChD,MAAM,MAAM,GAAG,SAAS,EAAE,CAAA;QAE1B,SAAS,CAAC,GAAG,EAAE;YACb,IAAI,QAAQ,GAAG,KAAK,CAAA;YAEpB,8DAA8D;YAC9D,8BAA8B;YAC9B,QAAQ,OAAO,CAAC,KAAK,EAAE,CAAC;gBACtB,KAAK,mBAAmB,CAAC,IAAI;oBAC3B,OAAO,CAAC,kBAAkB,EAAE,CAAC,IAAI,CAAC,KAAK,EAAC,QAAQ,EAAC,EAAE;wBACjD,IAAI,QAAQ,EAAE,CAAC;4BACb,OAAM;wBACR,CAAC;wBACD,4FAA4F;wBAC5F,IAAI,QAAQ,EAAE,CAAC;4BACb,MAAM,OAAO,CAAC,OAAO,EAAE,CAAA;4BACvB,MAAM,OAAO,CAAC,YAAY,EAAE,CAAA;4BAC5B,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,CAAA;4BACjC,IAAI,IAAI,IAAI,IAAI,EAAE,CAAC;gCACjB,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,KAAK,EAAE,CAAA;gCAChC,IAAI,CAAC,YAAY,CAAC,UAAU,EAAE,YAAY,CAAC,QAAQ,CAAC,CAAC,QAAQ,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,IAAoB,CAAC,EAAE,CAAC;oCAClG,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAA;oCAEzC,MAAM,IAAI,GAAoB;wCAC5B,GAAG,OAAO,CAAC,SAAS;wCACpB,IAAI;wCACJ,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,SAAS,IAAI,EAAE;wCAC7C,UAAU,EAAE,GAAG,CAAC,YAAY,CAAC,QAAQ,EAAE;wCACvC,IAAI,EAAE,QAAQ,CAAC,IAAI;wCACnB,MAAM,EAAE,MAAM;wCACd,MAAM,EAAE,CAAC,UAAU,CAAC;qCACrB,CAAA;oCAED,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,YAAY,CAAC,IAAI,CAAC,CAAA;oCAClD,4EAA4E;oCAC5E,6BAA6B;oCAC7B,IAAI,SAAS,CAAC,KAAK,KAAK,EAAE,EAAE,CAAC;wCAC3B,MAAM,IAAI,gBAAgB,CAAC,UAAU,CAAC,CAAA;oCACxC,CAAC;oCACD,OAAM,CAAC,2BAA2B;gCACpC,CAAC;4BACH,CAAC;4BACD,SAAS;wBACX,CAAC;wBAED,gDAAgD;wBAChD,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAkB,aAAa,CAAC,CAAA;wBAE5D,2FAA2F;wBAC3F,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,CAAA;wBACjC,MAAM,KAAK,GAAG,MAAM,IAAI,EAAE,KAAK,EAAE,CAAA;wBACjC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,oBAAoB,CAAC;4BAC9C,OAAO,EAAE,OAAO,CAAC,MAA0B,IAAI,gBAAgB,CAAC,OAAO;4BACvE,UAAU,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,UAAoB;4BACjD,GAAG,EAAE,KAAK,IAAI,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,SAAS;4BAChE,KAAK,EAAE,MAAM,CAAC,KAAK;yBACpB,CAAC,CAAA;wBACF,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAA;wBAC/B,MAAM,CAAC,MAAM,GAAG,EAAE,CAAA;wBAClB,MAAM,OAAO,CAAC,gBAAgB,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAA;oBACrE,CAAC,CAAC,CAAA;gBACJ,KAAK,mBAAmB,CAAC,YAAY;oBACnC,OAAO,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,KAAK,EAAC,IAAI,EAAC,EAAE;wBAC/B,IAAI,QAAQ,EAAE,CAAC;4BACb,OAAM;wBACR,CAAC;wBACD,MAAM,SAAS,GAAG,MAAM,IAAI,EAAE,KAAK,EAAE,CAAA;wBACrC,IAAI,SAAS,IAAI,IAAI,EAAE,CAAC;4BACtB,MAAM,IAAI,eAAe,CAAC,mBAAmB,CAAC,YAAY,CAAC,CAAA;wBAC7D,CAAC;wBAED,IAAI,OAAO,CAAC,SAAS,EAAE,SAAS,IAAI,IAAI,EAAE,CAAC;4BACzC,MAAM,QAAQ,GAAG,iBAAiB,CAAC,OAAO,CAAC,SAAS,EAAE,SAAS,EAAE,YAAY,CAAC,IAAI,CAAC,CAAA;4BACnF,MAAM,SAAS,GAAG,QAAQ,CAAC,OAAO,CAAS,IAAI,CAAC,CAAA;4BAChD,MAAM,KAAK,GAAG,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;4BACtC,qFAAqF;4BACrF,MAAM,GAAG,GAAG,MAAM,GAAG,KAAK,CAAC,CAAC,CAAC,CAAA;4BAE7B,gFAAgF;4BAChF,MAAM,OAAO,CAAC,OAAO,EAAE,CAAA;4BAEvB,QAAQ,CAAC,QAAQ,CAAC,IAAI,GAAG,GAAG,CAAA;wBAC9B,CAAC;oBACH,CAAC,CAAC,CAAA;YACN,CAAC;YAED,OAAO,GAAG,EAAE,GAAG,QAAQ,GAAG,IAAI,CAAA,CAAC,CAAC,CAAA;QAClC,CAAC,EAAE,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAA;QAEjB,IAAI,QAAQ,IAAI,IAAI,EAAE,CAAC;YACrB,MAAM,IAAI,WAAW,CAAC,yCAAyC,CAAC,CAAA;QAClE,CAAC;QAED,OAAO,KAAC,QAAQ,IAAC,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,GAAI,CAAA;IACxF,CAAC;IAED,QAAQ,EAAE,GAAG,EAAE,CAAC,KAAC,cAAc,KAAG;CACnC,CAAA"}

package/build/components/dispatcher.d.ts

@@ -0,0 +1,2 @@
+export declare const Dispatcher: import("@owlmeans/client").RoutedComponent<import("@owlmeans/client-auth").DispatcherProps>;
+//# sourceMappingURL=dispatcher.d.ts.map

package/build/components/dispatcher.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dispatcher.d.ts","sourceRoot":"","sources":["../../src/components/dispatcher.tsx"],"names":[],"mappings":"AAWA,eAAO,MAAM,UAAU,6FAiDrB,CAAA"}

package/build/components/dispatcher.js

@@ -0,0 +1,58 @@
+import { jsx as _jsx } from "react/jsx-runtime";
+import { DispatcherHOC } from '@owlmeans/client-auth';
+import { useSearchParams } from 'react-router';
+import { useEffect } from 'react';
+import { useContext } from '@owlmeans/web-client';
+import { useI18nLib } from '@owlmeans/client-i18n';
+import { AUTH_QUERY } from '@owlmeans/auth';
+import { useFlow } from '@owlmeans/web-flow';
+import { DEFAULT_ALIAS } from '../consts.js';
+export const Dispatcher = DispatcherHOC(({ provideToken, navigate }) => {
+    const [query] = useSearchParams();
+    const context = useContext();
+    const client = useFlow();
+    const t = useI18nLib('auth', 'dispatcher');
+    useEffect(() => {
+        if (client == null) {
+            return;
+        }
+        const token = query.get(AUTH_QUERY);
+        const params = {};
+        query.forEach((value, key) => {
+            if (key !== AUTH_QUERY) {
+                params[key] = value;
+            }
+        });
+        if (token != null) {
+            // This is required for compatibility with a standard OwlMeans Auth flow.
+            provideToken({ token }, params);
+        }
+        else {
+            const oidc = context.service(DEFAULT_ALIAS);
+            oidc.dispatch(params).then(async (dispatched) => {
+                if (dispatched) {
+                    return await navigate();
+                }
+                if (client == null) {
+                    return;
+                }
+                const redirect = await oidc.authenticate(client.flow(), params);
+                if (redirect != null && redirect !== '') {
+                    document.location.href = redirect;
+                    return;
+                }
+                const authzToken = await context.auth().authenticated();
+                if (authzToken == null) {
+                    provideToken({ token: '' }, undefined);
+                }
+                else {
+                    await navigate();
+                }
+            });
+        }
+    }, [client]);
+    return query.has(AUTH_QUERY)
+        ? _jsx("div", { children: t('loading') })
+        : undefined;
+});
+//# sourceMappingURL=dispatcher.js.map

package/build/components/dispatcher.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dispatcher.js","sourceRoot":"","sources":["../../src/components/dispatcher.tsx"],"names":[],"mappings":";AACA,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAA;AACrD,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAA;AAC9C,OAAO,EAAE,SAAS,EAAE,MAAM,OAAO,CAAA;AACjC,OAAO,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAA;AACjD,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAA;AAClD,OAAO,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAA;AAC3C,OAAO,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAA;AAE5C,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAA;AAE5C,MAAM,CAAC,MAAM,UAAU,GAAG,aAAa,CAAC,CAAC,EAAE,YAAY,EAAE,QAAQ,EAAE,EAAE,EAAE;IACrE,MAAM,CAAC,KAAK,CAAC,GAAG,eAAe,EAAE,CAAA;IACjC,MAAM,OAAO,GAAG,UAAU,EAAE,CAAA;IAC5B,MAAM,MAAM,GAAG,OAAO,EAAE,CAAA;IAExB,MAAM,CAAC,GAAG,UAAU,CAAC,MAAM,EAAE,YAAY,CAAC,CAAA;IAE1C,SAAS,CAAC,GAAG,EAAE;QACb,IAAI,MAAM,IAAI,IAAI,EAAE,CAAC;YACnB,OAAM;QACR,CAAC;QACD,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,CAAA;QACnC,MAAM,MAAM,GAA2B,EAAE,CAAA;QACzC,KAAK,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;YAC3B,IAAI,GAAG,KAAK,UAAU,EAAE,CAAC;gBACvB,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,CAAA;YACrB,CAAC;QACH,CAAC,CAAC,CAAA;QAEF,IAAI,KAAK,IAAI,IAAI,EAAE,CAAC;YAClB,yEAAyE;YACzE,YAAY,CAAC,EAAE,KAAK,EAAE,EAAE,MAAM,CAAC,CAAA;QACjC,CAAC;aAAM,CAAC;YACN,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAkB,aAAa,CAAC,CAAA;YAC5D,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,KAAK,EAAC,UAAU,EAAC,EAAE;gBAC5C,IAAI,UAAU,EAAE,CAAC;oBACf,OAAO,MAAM,QAAQ,EAAE,CAAA;gBACzB,CAAC;gBACD,IAAI,MAAM,IAAI,IAAI,EAAE,CAAC;oBACnB,OAAM;gBACR,CAAC;gBACD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,MAAM,CAAC,CAAA;gBAC/D,IAAI,QAAQ,IAAI,IAAI,IAAI,QAAQ,KAAK,EAAE,EAAE,CAAC;oBACxC,QAAQ,CAAC,QAAQ,CAAC,IAAI,GAAG,QAAQ,CAAA;oBACjC,OAAM;gBACR,CAAC;gBACD,MAAM,UAAU,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC,aAAa,EAAE,CAAA;gBACvD,IAAI,UAAU,IAAI,IAAI,EAAE,CAAC;oBACvB,YAAY,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,SAAS,CAAC,CAAA;gBACxC,CAAC;qBAAM,CAAC;oBACN,MAAM,QAAQ,EAAE,CAAA;gBAClB,CAAC;YACH,CAAC,CAAC,CAAA;QACJ,CAAC;IACH,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,CAAA;IAEZ,OAAO,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC;QAC1B,CAAC,CAAC,wBAAM,CAAC,CAAC,SAAS,CAAC,GAAO;QAC3B,CAAC,CAAC,SAAS,CAAA;AACf,CAAC,CAAC,CAAA"}

package/build/components/index.d.ts

@@ -0,0 +1,2 @@
+export * from './dispatcher.js';
+//# sourceMappingURL=index.d.ts.map

package/build/components/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/components/index.ts"],"names":[],"mappings":"AACA,cAAc,iBAAiB,CAAA"}

package/build/components/index.js

@@ -0,0 +1,2 @@
+export * from './dispatcher.js';
+//# sourceMappingURL=index.js.map

package/build/components/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/components/index.ts"],"names":[],"mappings":"AACA,cAAc,iBAAiB,CAAA"}

package/build/consts.d.ts

@@ -0,0 +1,7 @@
+export declare const DEFAULT_ALIAS = "oidc-rp";
+export declare enum OidcAuthPurposes {
+    Unknown = "unknown",
+    Subscribe = "subscribe",
+    Login = "login"
+}
+//# sourceMappingURL=consts.d.ts.map

package/build/consts.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"consts.d.ts","sourceRoot":"","sources":["../src/consts.ts"],"names":[],"mappings":"AACA,eAAO,MAAM,aAAa,YAAY,CAAA;AAEtC,oBAAY,gBAAgB;IAC1B,OAAO,YAAY;IACnB,SAAS,cAAc;IACvB,KAAK,UAAU;CAChB"}

package/build/consts.js

@@ -0,0 +1,8 @@
+export const DEFAULT_ALIAS = 'oidc-rp';
+export var OidcAuthPurposes;
+(function (OidcAuthPurposes) {
+    OidcAuthPurposes["Unknown"] = "unknown";
+    OidcAuthPurposes["Subscribe"] = "subscribe";
+    OidcAuthPurposes["Login"] = "login";
+})(OidcAuthPurposes || (OidcAuthPurposes = {}));
+//# sourceMappingURL=consts.js.map

package/build/consts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"consts.js","sourceRoot":"","sources":["../src/consts.ts"],"names":[],"mappings":"AACA,MAAM,CAAC,MAAM,aAAa,GAAG,SAAS,CAAA;AAEtC,MAAM,CAAN,IAAY,gBAIX;AAJD,WAAY,gBAAgB;IAC1B,uCAAmB,CAAA;IACnB,2CAAuB,CAAA;IACvB,mCAAe,CAAA;AACjB,CAAC,EAJW,gBAAgB,KAAhB,gBAAgB,QAI3B"}

package/build/guard.d.ts

@@ -0,0 +1,7 @@
+import type { CommonEntrypoint } from '@owlmeans/entrypoint';
+import type { OidcGuardOptions } from '@owlmeans/oidc';
+import type { ParametrisedProps } from '@owlmeans/web-client';
+import type { Config, Context } from './types.js';
+export declare const appendOidcGuard: <C extends Config, T extends Context<C>>(context: T, opts?: OidcGuardOptions) => T;
+export declare const setupOidcGuard: (modules: CommonEntrypoint[], coguards?: string | string[], extras?: Partial<ParametrisedProps>) => void;
+//# sourceMappingURL=guard.d.ts.map

package/build/guard.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"guard.d.ts","sourceRoot":"","sources":["../src/guard.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAA;AAC5D,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAA;AAMtD,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAA;AAI7D,OAAO,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,YAAY,CAAA;AAEjD,eAAO,MAAM,eAAe,GAAI,CAAC,SAAS,MAAM,EAAE,CAAC,SAAS,OAAO,CAAC,CAAC,CAAC,EACpE,SAAS,CAAC,EAAE,OAAO,gBAAgB,MAOpC,CAAA;AAED,eAAO,MAAM,cAAc,GAAI,SAAS,gBAAgB,EAAE,EAAE,WAAW,MAAM,GAAG,MAAM,EAAE,EAAE,SAAS,OAAO,CAAC,iBAAiB,CAAC,SAQ5H,CAAA"}

package/build/guard.js

@@ -0,0 +1,19 @@
+import { DISPATCHER } from '@owlmeans/auth';
+import { handler } from '@owlmeans/client';
+import { appendOidcGuard as appendBasicOidcGuard, DISPATCHER_OIDC, DISPATCHER_OIDC_INIT, setupOidcGuard as setupBasicOidcGuard } from '@owlmeans/oidc';
+import { elevate, parametriseDispatcher } from '@owlmeans/web-client';
+import { Dispatcher } from './components/dispatcher.js';
+import { makeOidcAuthService } from './service.js';
+export const appendOidcGuard = (context, opts) => {
+    context.registerService(makeOidcAuthService());
+    const ctx = appendBasicOidcGuard(context, opts);
+    return ctx;
+};
+export const setupOidcGuard = (modules, coguards, extras) => {
+    const DispatcherCom = extras ? parametriseDispatcher(extras, Dispatcher) : Dispatcher;
+    setupBasicOidcGuard(modules, coguards);
+    elevate(modules, DISPATCHER_OIDC_INIT);
+    elevate(modules, DISPATCHER_OIDC);
+    elevate(modules, DISPATCHER, handler(DispatcherCom), { force: true });
+};
+//# sourceMappingURL=guard.js.map

package/build/guard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"guard.js","sourceRoot":"","sources":["../src/guard.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAA;AAC3C,OAAO,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAA;AAG1C,OAAO,EACL,eAAe,IAAI,oBAAoB,EACvC,eAAe,EAAE,oBAAoB,EACrC,cAAc,IAAI,mBAAmB,EACtC,MAAM,gBAAgB,CAAA;AAEvB,OAAO,EAAE,OAAO,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAA;AACrE,OAAO,EAAE,UAAU,EAAE,MAAM,4BAA4B,CAAA;AACvD,OAAO,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAA;AAGlD,MAAM,CAAC,MAAM,eAAe,GAAG,CAC7B,OAAU,EAAE,IAAuB,EACnC,EAAE;IACF,OAAO,CAAC,eAAe,CAAC,mBAAmB,EAAE,CAAC,CAAA;IAE9C,MAAM,GAAG,GAAG,oBAAoB,CAAO,OAAO,EAAE,IAAI,CAAC,CAAA;IAErD,OAAO,GAAG,CAAA;AACZ,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,OAA2B,EAAE,QAA4B,EAAE,MAAmC,EAAE,EAAE;IAC/H,MAAM,aAAa,GAAG,MAAM,CAAC,CAAC,CAAC,qBAAqB,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,UAAU,CAAA;IAErF,mBAAmB,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAA;IAEtC,OAAO,CAAC,OAAO,EAAE,oBAAoB,CAAC,CAAA;IACtC,OAAO,CAAC,OAAO,EAAE,eAAe,CAAC,CAAA;IACjC,OAAO,CAAC,OAAO,EAAE,UAAU,EAAE,OAAO,CAAC,aAAa,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;AACvE,CAAC,CAAA"}

package/build/index.d.ts

@@ -0,0 +1,6 @@
+export type * from './types.js';
+export * from './consts.js';
+export * from './service.js';
+export * from './guard.js';
+export * from './components/index.js';
+//# sourceMappingURL=index.d.ts.map

package/build/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AACA,mBAAmB,YAAY,CAAA;AAC/B,cAAc,aAAa,CAAA;AAC3B,cAAc,cAAc,CAAA;AAC5B,cAAc,YAAY,CAAA;AAC1B,cAAc,uBAAuB,CAAA"}

package/build/index.js

@@ -0,0 +1,5 @@
+export * from './consts.js';
+export * from './service.js';
+export * from './guard.js';
+export * from './components/index.js';
+//# sourceMappingURL=index.js.map

package/build/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAEA,cAAc,aAAa,CAAA;AAC3B,cAAc,cAAc,CAAA;AAC5B,cAAc,YAAY,CAAA;AAC1B,cAAc,uBAAuB,CAAA"}

package/build/service.d.ts

@@ -0,0 +1,3 @@
+import type { OidcAuthService } from './types.js';
+export declare const makeOidcAuthService: (alias?: string) => OidcAuthService;
+//# sourceMappingURL=service.d.ts.map

package/build/service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"service.d.ts","sourceRoot":"","sources":["../src/service.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAmB,eAAe,EAAmB,MAAM,YAAY,CAAA;AAenF,eAAO,MAAM,mBAAmB,GAAI,QAAO,MAAsB,KAAG,eA+InE,CAAA"}