@oxyhq/services 5.20.2 → 5.21.0

package/lib/commonjs/ui/hooks/useAuth.js

@@ -55,6 +55,7 @@ function useAuth() {
     isTokenReady,
     error,
     signIn: oxySignIn,
+    handlePopupSession,
     logout,
     logoutAll,
     refreshSessions,
@@ -68,36 +69,25 @@ function useAuth() {
     // Only auth.oxy.so has local login forms - accounts.oxy.so is a client app
     const isIdentityProvider = (0, _useWebSSO.isWebBrowser)() && window.location.hostname === 'auth.oxy.so';
 
-    // Web (not on IdP): Use FedCM or popup-based authentication
+    // Web (not on IdP): Use popup-based authentication
+    // We go straight to popup to preserve the "user gesture" (click event)
+    // FedCM silent SSO already runs on page load via useWebSSO
+    // If user is clicking "Sign In", they need interactive auth NOW
     if ((0, _useWebSSO.isWebBrowser)() && !publicKey && !isIdentityProvider) {
-      // Try FedCM first (instant if user already signed in at IdP)
-      if (oxyServices.isFedCMSupported?.()) {
-        try {
-          const fedcmSession = await oxyServices.signInWithFedCM?.();
-          if (fedcmSession?.user) {
-            return fedcmSession.user;
-          }
-        } catch (fedcmError) {
-          // FedCM failed (user not signed in at IdP, cancelled, etc.)
-          // Fall through to popup
-          console.debug('FedCM failed, falling back to popup:', fedcmError);
-        }
-      }
-
-      // Fallback to popup (opens auth.oxy.so in popup window)
       try {
         const popupSession = await oxyServices.signInWithPopup?.();
         if (popupSession?.user) {
+          // Update context state with the session (this updates user, sessions, storage)
+          await handlePopupSession(popupSession);
           return popupSession.user;
         }
+        throw new Error('Sign-in failed. Please try again.');
       } catch (popupError) {
-        // If popup blocked, suggest enabling popups
         if (popupError instanceof Error && popupError.message.includes('blocked')) {
           throw new Error('Popup blocked. Please allow popups for this site.');
         }
         throw popupError;
       }
-      throw new Error('Sign-in failed. Please try again.');
     }
 
     // Native: Use cryptographic identity
@@ -131,7 +121,7 @@ function useAuth() {
       return new Promise(() => {}); // Never resolves, page will redirect
     }
     throw new Error('No authentication method available');
-  }, [oxySignIn, hasIdentity, getPublicKey, showBottomSheet, oxyServices]);
+  }, [oxySignIn, hasIdentity, getPublicKey, showBottomSheet, oxyServices, handlePopupSession]);
   const signOut = (0, _react.useCallback)(async () => {
     await logout();
   }, [logout]);

package/lib/commonjs/ui/hooks/useAuth.js.map

@@ -1 +1 @@
-{"version":3,"names":["_react","require","_OxyContext","_useWebSSO","useAuth","user","isAuthenticated","isLoading","isTokenReady","error","signIn","oxySignIn","logout","logoutAll","refreshSessions","oxyServices","hasIdentity","getPublicKey","showBottomSheet","useOxy","useCallback","publicKey","isIdentityProvider","isWebBrowser","window","location","hostname","isFedCMSupported","fedcmSession","signInWithFedCM","fedcmError","console","debug","popupSession","signInWithPopup","popupError","Error","message","includes","hasExisting","existingKey","Promise","_","reject","loginUrl","href","signOut","signOutAll","refresh","isReady"],"sourceRoot":"../../../../src","sources":["ui/hooks/useAuth.ts"],"mappings":";;;;;;;;;;;;AAyBA,IAAAA,MAAA,GAAAC,OAAA;AACA,IAAAC,WAAA,GAAAD,OAAA;AAEA,IAAAE,UAAA,GAAAF,OAAA;AA5BA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAqDA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACO,SAASG,OAAOA,CAAA,EAAkB;EACvC,MAAM;IACJC,IAAI;IACJC,eAAe;IACfC,SAAS;IACTC,YAAY;IACZC,KAAK;IACLC,MAAM,EAAEC,SAAS;IACjBC,MAAM;IACNC,SAAS;IACTC,eAAe;IACfC,WAAW;IACXC,WAAW;IACXC,YAAY;IACZC;EACF,CAAC,GAAG,IAAAC,kBAAM,EAAC,CAAC;EAEZ,MAAMT,MAAM,GAAG,IAAAU,kBAAW,EAAC,MAAOC,SAAkB,IAAoB;IACtE;IACA;IACA,MAAMC,kBAAkB,GAAG,IAAAC,uBAAY,EAAC,CAAC,IACvCC,MAAM,CAACC,QAAQ,CAACC,QAAQ,KAAK,aAAa;;IAE5C;IACA,IAAI,IAAAH,uBAAY,EAAC,CAAC,IAAI,CAACF,SAAS,IAAI,CAACC,kBAAkB,EAAE;MACvD;MACA,IAAKP,WAAW,CAASY,gBAAgB,GAAG,CAAC,EAAE;QAC7C,IAAI;UACF,MAAMC,YAAY,GAAG,MAAOb,WAAW,CAASc,eAAe,GAAG,CAAC;UACnE,IAAID,YAAY,EAAEvB,IAAI,EAAE;YACtB,OAAOuB,YAAY,CAACvB,IAAI;UAC1B;QACF,CAAC,CAAC,OAAOyB,UAAU,EAAE;UACnB;UACA;UACAC,OAAO,CAACC,KAAK,CAAC,sCAAsC,EAAEF,UAAU,CAAC;QACnE;MACF;;MAEA;MACA,IAAI;QACF,MAAMG,YAAY,GAAG,MAAOlB,WAAW,CAASmB,eAAe,GAAG,CAAC;QACnE,IAAID,YAAY,EAAE5B,IAAI,EAAE;UACtB,OAAO4B,YAAY,CAAC5B,IAAI;QAC1B;MACF,CAAC,CAAC,OAAO8B,UAAU,EAAE;QACnB;QACA,IAAIA,UAAU,YAAYC,KAAK,IAAID,UAAU,CAACE,OAAO,CAACC,QAAQ,CAAC,SAAS,CAAC,EAAE;UACzE,MAAM,IAAIF,KAAK,CAAC,mDAAmD,CAAC;QACtE;QACA,MAAMD,UAAU;MAClB;MAEA,MAAM,IAAIC,KAAK,CAAC,mCAAmC,CAAC;IACtD;;IAEA;IACA;IACA,IAAIf,SAAS,EAAE;MACb,OAAOV,SAAS,CAACU,SAAS,CAAC;IAC7B;;IAEA;IACA,MAAMkB,WAAW,GAAG,MAAMvB,WAAW,CAAC,CAAC;IAEvC,IAAIuB,WAAW,EAAE;MACf,MAAMC,WAAW,GAAG,MAAMvB,YAAY,CAAC,CAAC;MACxC,IAAIuB,WAAW,EAAE;QACf,OAAO7B,SAAS,CAAC6B,WAAW,CAAC;MAC/B;IACF;;IAEA;IACA,IAAItB,eAAe,EAAE;MACnBA,eAAe,CAAC,SAAS,CAAC;MAC1B;MACA,OAAO,IAAIuB,OAAO,CAAC,CAACC,CAAC,EAAEC,MAAM,KAAK;QAChCA,MAAM,CAAC,IAAIP,KAAK,CAAC,2CAA2C,CAAC,CAAC;MAChE,CAAC,CAAC;IACJ;;IAEA;IACA,IAAI,IAAAb,uBAAY,EAAC,CAAC,EAAE;MAClB,MAAMqB,QAAQ,GAAGpB,MAAM,CAACC,QAAQ,CAACC,QAAQ,CAACY,QAAQ,CAAC,QAAQ,CAAC,GACxD,QAAQ,GACR,+BAA+B;MACnCd,MAAM,CAACC,QAAQ,CAACoB,IAAI,GAAGD,QAAQ;MAC/B,OAAO,IAAIH,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;IAChC;IAEA,MAAM,IAAIL,KAAK,CAAC,oCAAoC,CAAC;EACvD,CAAC,EAAE,CAACzB,SAAS,EAAEK,WAAW,EAAEC,YAAY,EAAEC,eAAe,EAAEH,WAAW,CAAC,CAAC;EAExE,MAAM+B,OAAO,GAAG,IAAA1B,kBAAW,EAAC,YAA2B;IACrD,MAAMR,MAAM,CAAC,CAAC;EAChB,CAAC,EAAE,CAACA,MAAM,CAAC,CAAC;EAEZ,MAAMmC,UAAU,GAAG,IAAA3B,kBAAW,EAAC,YAA2B;IACxD,MAAMP,SAAS,CAAC,CAAC;EACnB,CAAC,EAAE,CAACA,SAAS,CAAC,CAAC;EAEf,MAAMmC,OAAO,GAAG,IAAA5B,kBAAW,EAAC,YAA2B;IACrD,MAAMN,eAAe,CAAC,CAAC;EACzB,CAAC,EAAE,CAACA,eAAe,CAAC,CAAC;EAErB,OAAO;IACL;IACAT,IAAI;IACJC,eAAe;IACfC,SAAS;IACT0C,OAAO,EAAEzC,YAAY;IACrBC,KAAK;IAEL;IACAC,MAAM;IACNoC,OAAO;IACPC,UAAU;IACVC,OAAO;IAEP;IACAjC;EACF,CAAC;AACH;;AAEA","ignoreList":[]}
+{"version":3,"names":["_react","require","_OxyContext","_useWebSSO","useAuth","user","isAuthenticated","isLoading","isTokenReady","error","signIn","oxySignIn","handlePopupSession","logout","logoutAll","refreshSessions","oxyServices","hasIdentity","getPublicKey","showBottomSheet","useOxy","useCallback","publicKey","isIdentityProvider","isWebBrowser","window","location","hostname","popupSession","signInWithPopup","Error","popupError","message","includes","hasExisting","existingKey","Promise","_","reject","loginUrl","href","signOut","signOutAll","refresh","isReady"],"sourceRoot":"../../../../src","sources":["ui/hooks/useAuth.ts"],"mappings":";;;;;;;;;;;;AAyBA,IAAAA,MAAA,GAAAC,OAAA;AACA,IAAAC,WAAA,GAAAD,OAAA;AAEA,IAAAE,UAAA,GAAAF,OAAA;AA5BA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAqDA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACO,SAASG,OAAOA,CAAA,EAAkB;EACvC,MAAM;IACJC,IAAI;IACJC,eAAe;IACfC,SAAS;IACTC,YAAY;IACZC,KAAK;IACLC,MAAM,EAAEC,SAAS;IACjBC,kBAAkB;IAClBC,MAAM;IACNC,SAAS;IACTC,eAAe;IACfC,WAAW;IACXC,WAAW;IACXC,YAAY;IACZC;EACF,CAAC,GAAG,IAAAC,kBAAM,EAAC,CAAC;EAEZ,MAAMV,MAAM,GAAG,IAAAW,kBAAW,EAAC,MAAOC,SAAkB,IAAoB;IACtE;IACA;IACA,MAAMC,kBAAkB,GAAG,IAAAC,uBAAY,EAAC,CAAC,IACvCC,MAAM,CAACC,QAAQ,CAACC,QAAQ,KAAK,aAAa;;IAE5C;IACA;IACA;IACA;IACA,IAAI,IAAAH,uBAAY,EAAC,CAAC,IAAI,CAACF,SAAS,IAAI,CAACC,kBAAkB,EAAE;MACvD,IAAI;QACF,MAAMK,YAAY,GAAG,MAAOZ,WAAW,CAASa,eAAe,GAAG,CAAC;QACnE,IAAID,YAAY,EAAEvB,IAAI,EAAE;UACtB;UACA,MAAMO,kBAAkB,CAACgB,YAAY,CAAC;UACtC,OAAOA,YAAY,CAACvB,IAAI;QAC1B;QACA,MAAM,IAAIyB,KAAK,CAAC,mCAAmC,CAAC;MACtD,CAAC,CAAC,OAAOC,UAAU,EAAE;QACnB,IAAIA,UAAU,YAAYD,KAAK,IAAIC,UAAU,CAACC,OAAO,CAACC,QAAQ,CAAC,SAAS,CAAC,EAAE;UACzE,MAAM,IAAIH,KAAK,CAAC,mDAAmD,CAAC;QACtE;QACA,MAAMC,UAAU;MAClB;IACF;;IAEA;IACA;IACA,IAAIT,SAAS,EAAE;MACb,OAAOX,SAAS,CAACW,SAAS,CAAC;IAC7B;;IAEA;IACA,MAAMY,WAAW,GAAG,MAAMjB,WAAW,CAAC,CAAC;IAEvC,IAAIiB,WAAW,EAAE;MACf,MAAMC,WAAW,GAAG,MAAMjB,YAAY,CAAC,CAAC;MACxC,IAAIiB,WAAW,EAAE;QACf,OAAOxB,SAAS,CAACwB,WAAW,CAAC;MAC/B;IACF;;IAEA;IACA,IAAIhB,eAAe,EAAE;MACnBA,eAAe,CAAC,SAAS,CAAC;MAC1B;MACA,OAAO,IAAIiB,OAAO,CAAC,CAACC,CAAC,EAAEC,MAAM,KAAK;QAChCA,MAAM,CAAC,IAAIR,KAAK,CAAC,2CAA2C,CAAC,CAAC;MAChE,CAAC,CAAC;IACJ;;IAEA;IACA,IAAI,IAAAN,uBAAY,EAAC,CAAC,EAAE;MAClB,MAAMe,QAAQ,GAAGd,MAAM,CAACC,QAAQ,CAACC,QAAQ,CAACM,QAAQ,CAAC,QAAQ,CAAC,GACxD,QAAQ,GACR,+BAA+B;MACnCR,MAAM,CAACC,QAAQ,CAACc,IAAI,GAAGD,QAAQ;MAC/B,OAAO,IAAIH,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;IAChC;IAEA,MAAM,IAAIN,KAAK,CAAC,oCAAoC,CAAC;EACvD,CAAC,EAAE,CAACnB,SAAS,EAAEM,WAAW,EAAEC,YAAY,EAAEC,eAAe,EAAEH,WAAW,EAAEJ,kBAAkB,CAAC,CAAC;EAE5F,MAAM6B,OAAO,GAAG,IAAApB,kBAAW,EAAC,YAA2B;IACrD,MAAMR,MAAM,CAAC,CAAC;EAChB,CAAC,EAAE,CAACA,MAAM,CAAC,CAAC;EAEZ,MAAM6B,UAAU,GAAG,IAAArB,kBAAW,EAAC,YAA2B;IACxD,MAAMP,SAAS,CAAC,CAAC;EACnB,CAAC,EAAE,CAACA,SAAS,CAAC,CAAC;EAEf,MAAM6B,OAAO,GAAG,IAAAtB,kBAAW,EAAC,YAA2B;IACrD,MAAMN,eAAe,CAAC,CAAC;EACzB,CAAC,EAAE,CAACA,eAAe,CAAC,CAAC;EAErB,OAAO;IACL;IACAV,IAAI;IACJC,eAAe;IACfC,SAAS;IACTqC,OAAO,EAAEpC,YAAY;IACrBC,KAAK;IAEL;IACAC,MAAM;IACN+B,OAAO;IACPC,UAAU;IACVC,OAAO;IAEP;IACA3B;EACF,CAAC;AACH;;AAEA","ignoreList":[]}

package/lib/commonjs/ui/hooks/useWebSSO.js

@@ -69,12 +69,19 @@ function useWebSSO({
   // Check FedCM support once
   const fedCMSupported = isWebBrowser() && oxyServices.isFedCMSupported?.();
   const checkSSO = (0, _react.useCallback)(async () => {
+    console.log('[useWebSSO] checkSSO called', {
+      isWebBrowser: isWebBrowser(),
+      isChecking: isCheckingRef.current,
+      isIdP: isIdentityProvider(),
+      fedCMSupported
+    });
     if (!isWebBrowser() || isCheckingRef.current) {
       return null;
     }
 
     // Don't use FedCM on the auth domain itself - it would authenticate against itself
     if (isIdentityProvider()) {
+      console.log('[useWebSSO] Skipping - on identity provider domain');
       onSSOUnavailable?.();
       return null;
     }
@@ -82,24 +89,35 @@ function useWebSSO({
     // FedCM is the only reliable cross-domain SSO mechanism
     // Third-party cookies are deprecated and unreliable
     if (!fedCMSupported) {
+      console.log('[useWebSSO] Skipping - FedCM not supported');
       onSSOUnavailable?.();
       return null;
     }
     isCheckingRef.current = true;
+    console.log('[useWebSSO] Starting FedCM silent sign-in...');
     try {
       // Use FedCM for cross-domain SSO
       // This works because browser treats IdP requests as first-party
       const session = await oxyServices.silentSignInWithFedCM?.();
+      console.log('[useWebSSO] FedCM result:', {
+        hasSession: !!session,
+        hasUser: !!session?.user,
+        hasSessionId: !!session?.sessionId
+      });
       if (session) {
+        console.log('[useWebSSO] Session found, calling onSessionFound...');
         await onSessionFound(session);
+        console.log('[useWebSSO] onSessionFound completed');
         return session;
       }
 
       // No session found - user needs to sign in
+      console.log('[useWebSSO] No session returned from FedCM');
       onSSOUnavailable?.();
       return null;
     } catch (error) {
       // FedCM failed - could be network error, user not signed in, etc.
+      console.error('[useWebSSO] FedCM error:', error);
       onSSOUnavailable?.();
       onError?.(error instanceof Error ? error : new Error(String(error)));
       return null;
@@ -108,6 +126,47 @@ function useWebSSO({
     }
   }, [oxyServices, onSessionFound, onSSOUnavailable, onError, fedCMSupported]);
 
+  /**
+   * Trigger interactive FedCM sign-in
+   * This shows the browser's native "Sign in with Oxy" prompt.
+   * Use this when silent mediation fails (user hasn't previously consented).
+   */
+  const signInWithFedCM = (0, _react.useCallback)(async () => {
+    console.log('[useWebSSO] signInWithFedCM called');
+    if (!isWebBrowser() || isCheckingRef.current) {
+      return null;
+    }
+    if (!fedCMSupported) {
+      console.log('[useWebSSO] FedCM not supported for interactive sign-in');
+      onError?.(new Error('FedCM is not supported in this browser'));
+      return null;
+    }
+    isCheckingRef.current = true;
+    console.log('[useWebSSO] Starting interactive FedCM sign-in...');
+    try {
+      // Use interactive sign-in (shows browser UI)
+      const session = await oxyServices.signInWithFedCM?.();
+      console.log('[useWebSSO] Interactive FedCM result:', {
+        hasSession: !!session,
+        hasUser: !!session?.user,
+        hasSessionId: !!session?.sessionId
+      });
+      if (session) {
+        console.log('[useWebSSO] Interactive session found, calling onSessionFound...');
+        await onSessionFound(session);
+        console.log('[useWebSSO] onSessionFound completed');
+        return session;
+      }
+      return null;
+    } catch (error) {
+      console.error('[useWebSSO] Interactive FedCM error:', error);
+      onError?.(error instanceof Error ? error : new Error(String(error)));
+      return null;
+    } finally {
+      isCheckingRef.current = false;
+    }
+  }, [oxyServices, onSessionFound, onError, fedCMSupported]);
+
   // Auto-check SSO on mount (web only, FedCM only, not on auth domain)
   (0, _react.useEffect)(() => {
     if (!enabled || !isWebBrowser() || hasCheckedRef.current || isIdentityProvider()) {
@@ -126,6 +185,7 @@ function useWebSSO({
   }, [enabled, checkSSO, fedCMSupported, onSSOUnavailable]);
   return {
     checkSSO,
+    signInWithFedCM,
     isChecking: isCheckingRef.current,
     isFedCMSupported: fedCMSupported
   };

package/lib/commonjs/ui/hooks/useWebSSO.js.map

@@ -1 +1 @@
-{"version":3,"names":["_react","require","isWebBrowser","window","document","documentElement","isIdentityProvider","hostname","location","useWebSSO","oxyServices","onSessionFound","onSSOUnavailable","onError","enabled","isCheckingRef","useRef","hasCheckedRef","fedCMSupported","isFedCMSupported","checkSSO","useCallback","current","session","silentSignInWithFedCM","error","Error","String","useEffect","isChecking"],"sourceRoot":"../../../../src","sources":["ui/hooks/useWebSSO.ts"],"mappings":";;;;;;;AAiBA,IAAAA,MAAA,GAAAC,OAAA;AAjBA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAuBA;AACA;AACA;AACA,SAASC,YAAYA,CAAA,EAAY;EAC/B,OAAO,OAAOC,MAAM,KAAK,WAAW,IAC7B,OAAOC,QAAQ,KAAK,WAAW,IAC/B,OAAOA,QAAQ,CAACC,eAAe,KAAK,WAAW;AACxD;;AAEA;AACA;AACA;AACA;AACA,SAASC,kBAAkBA,CAAA,EAAY;EACrC,IAAI,CAACJ,YAAY,CAAC,CAAC,EAAE,OAAO,KAAK;EACjC,MAAMK,QAAQ,GAAGJ,MAAM,CAACK,QAAQ,CAACD,QAAQ;EACzC,OAAOA,QAAQ,KAAK,aAAa;AACnC;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACO,SAASE,SAASA,CAAC;EACxBC,WAAW;EACXC,cAAc;EACdC,gBAAgB;EAChBC,OAAO;EACPC,OAAO,GAAG;AACM,CAAC,EAAmB;EACpC,MAAMC,aAAa,GAAG,IAAAC,aAAM,EAAC,KAAK,CAAC;EACnC,MAAMC,aAAa,GAAG,IAAAD,aAAM,EAAC,KAAK,CAAC;;EAEnC;EACA,MAAME,cAAc,GAAGhB,YAAY,CAAC,CAAC,IAAKQ,WAAW,CAASS,gBAAgB,GAAG,CAAC;EAElF,MAAMC,QAAQ,GAAG,IAAAC,kBAAW,EAAC,YAAkD;IAC7E,IAAI,CAACnB,YAAY,CAAC,CAAC,IAAIa,aAAa,CAACO,OAAO,EAAE;MAC5C,OAAO,IAAI;IACb;;IAEA;IACA,IAAIhB,kBAAkB,CAAC,CAAC,EAAE;MACxBM,gBAAgB,GAAG,CAAC;MACpB,OAAO,IAAI;IACb;;IAEA;IACA;IACA,IAAI,CAACM,cAAc,EAAE;MACnBN,gBAAgB,GAAG,CAAC;MACpB,OAAO,IAAI;IACb;IAEAG,aAAa,CAACO,OAAO,GAAG,IAAI;IAE5B,IAAI;MACF;MACA;MACA,MAAMC,OAAO,GAAG,MAAOb,WAAW,CAASc,qBAAqB,GAAG,CAAC;MAEpE,IAAID,OAAO,EAAE;QACX,MAAMZ,cAAc,CAACY,OAAO,CAAC;QAC7B,OAAOA,OAAO;MAChB;;MAEA;MACAX,gBAAgB,GAAG,CAAC;MACpB,OAAO,IAAI;IACb,CAAC,CAAC,OAAOa,KAAK,EAAE;MACd;MACAb,gBAAgB,GAAG,CAAC;MACpBC,OAAO,GAAGY,KAAK,YAAYC,KAAK,GAAGD,KAAK,GAAG,IAAIC,KAAK,CAACC,MAAM,CAACF,KAAK,CAAC,CAAC,CAAC;MACpE,OAAO,IAAI;IACb,CAAC,SAAS;MACRV,aAAa,CAACO,OAAO,GAAG,KAAK;IAC/B;EACF,CAAC,EAAE,CAACZ,WAAW,EAAEC,cAAc,EAAEC,gBAAgB,EAAEC,OAAO,EAAEK,cAAc,CAAC,CAAC;;EAE5E;EACA,IAAAU,gBAAS,EAAC,MAAM;IACd,IAAI,CAACd,OAAO,IAAI,CAACZ,YAAY,CAAC,CAAC,IAAIe,aAAa,CAACK,OAAO,IAAIhB,kBAAkB,CAAC,CAAC,EAAE;MAChF,IAAIA,kBAAkB,CAAC,CAAC,EAAE;QACxBM,gBAAgB,GAAG,CAAC;MACtB;MACA;IACF;IAEAK,aAAa,CAACK,OAAO,GAAG,IAAI;IAE5B,IAAIJ,cAAc,EAAE;MAClBE,QAAQ,CAAC,CAAC;IACZ,CAAC,MAAM;MACL;MACAR,gBAAgB,GAAG,CAAC;IACtB;EACF,CAAC,EAAE,CAACE,OAAO,EAAEM,QAAQ,EAAEF,cAAc,EAAEN,gBAAgB,CAAC,CAAC;EAEzD,OAAO;IACLQ,QAAQ;IACRS,UAAU,EAAEd,aAAa,CAACO,OAAO;IACjCH,gBAAgB,EAAED;EACpB,CAAC;AACH","ignoreList":[]}
+{"version":3,"names":["_react","require","isWebBrowser","window","document","documentElement","isIdentityProvider","hostname","location","useWebSSO","oxyServices","onSessionFound","onSSOUnavailable","onError","enabled","isCheckingRef","useRef","hasCheckedRef","fedCMSupported","isFedCMSupported","checkSSO","useCallback","console","log","isChecking","current","isIdP","session","silentSignInWithFedCM","hasSession","hasUser","user","hasSessionId","sessionId","error","Error","String","signInWithFedCM","useEffect"],"sourceRoot":"../../../../src","sources":["ui/hooks/useWebSSO.ts"],"mappings":";;;;;;;AAiBA,IAAAA,MAAA,GAAAC,OAAA;AAjBA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAyBA;AACA;AACA;AACA,SAASC,YAAYA,CAAA,EAAY;EAC/B,OAAO,OAAOC,MAAM,KAAK,WAAW,IAC7B,OAAOC,QAAQ,KAAK,WAAW,IAC/B,OAAOA,QAAQ,CAACC,eAAe,KAAK,WAAW;AACxD;;AAEA;AACA;AACA;AACA;AACA,SAASC,kBAAkBA,CAAA,EAAY;EACrC,IAAI,CAACJ,YAAY,CAAC,CAAC,EAAE,OAAO,KAAK;EACjC,MAAMK,QAAQ,GAAGJ,MAAM,CAACK,QAAQ,CAACD,QAAQ;EACzC,OAAOA,QAAQ,KAAK,aAAa;AACnC;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACO,SAASE,SAASA,CAAC;EACxBC,WAAW;EACXC,cAAc;EACdC,gBAAgB;EAChBC,OAAO;EACPC,OAAO,GAAG;AACM,CAAC,EAAmB;EACpC,MAAMC,aAAa,GAAG,IAAAC,aAAM,EAAC,KAAK,CAAC;EACnC,MAAMC,aAAa,GAAG,IAAAD,aAAM,EAAC,KAAK,CAAC;;EAEnC;EACA,MAAME,cAAc,GAAGhB,YAAY,CAAC,CAAC,IAAKQ,WAAW,CAASS,gBAAgB,GAAG,CAAC;EAElF,MAAMC,QAAQ,GAAG,IAAAC,kBAAW,EAAC,YAAkD;IAC7EC,OAAO,CAACC,GAAG,CAAC,6BAA6B,EAAE;MACzCrB,YAAY,EAAEA,YAAY,CAAC,CAAC;MAC5BsB,UAAU,EAAET,aAAa,CAACU,OAAO;MACjCC,KAAK,EAAEpB,kBAAkB,CAAC,CAAC;MAC3BY;IACF,CAAC,CAAC;IAEF,IAAI,CAAChB,YAAY,CAAC,CAAC,IAAIa,aAAa,CAACU,OAAO,EAAE;MAC5C,OAAO,IAAI;IACb;;IAEA;IACA,IAAInB,kBAAkB,CAAC,CAAC,EAAE;MACxBgB,OAAO,CAACC,GAAG,CAAC,oDAAoD,CAAC;MACjEX,gBAAgB,GAAG,CAAC;MACpB,OAAO,IAAI;IACb;;IAEA;IACA;IACA,IAAI,CAACM,cAAc,EAAE;MACnBI,OAAO,CAACC,GAAG,CAAC,4CAA4C,CAAC;MACzDX,gBAAgB,GAAG,CAAC;MACpB,OAAO,IAAI;IACb;IAEAG,aAAa,CAACU,OAAO,GAAG,IAAI;IAC5BH,OAAO,CAACC,GAAG,CAAC,8CAA8C,CAAC;IAE3D,IAAI;MACF;MACA;MACA,MAAMI,OAAO,GAAG,MAAOjB,WAAW,CAASkB,qBAAqB,GAAG,CAAC;MAEpEN,OAAO,CAACC,GAAG,CAAC,2BAA2B,EAAE;QACvCM,UAAU,EAAE,CAAC,CAACF,OAAO;QACrBG,OAAO,EAAE,CAAC,CAACH,OAAO,EAAEI,IAAI;QACxBC,YAAY,EAAE,CAAC,CAACL,OAAO,EAAEM;MAC3B,CAAC,CAAC;MAEF,IAAIN,OAAO,EAAE;QACXL,OAAO,CAACC,GAAG,CAAC,sDAAsD,CAAC;QACnE,MAAMZ,cAAc,CAACgB,OAAO,CAAC;QAC7BL,OAAO,CAACC,GAAG,CAAC,sCAAsC,CAAC;QACnD,OAAOI,OAAO;MAChB;;MAEA;MACAL,OAAO,CAACC,GAAG,CAAC,4CAA4C,CAAC;MACzDX,gBAAgB,GAAG,CAAC;MACpB,OAAO,IAAI;IACb,CAAC,CAAC,OAAOsB,KAAK,EAAE;MACd;MACAZ,OAAO,CAACY,KAAK,CAAC,0BAA0B,EAAEA,KAAK,CAAC;MAChDtB,gBAAgB,GAAG,CAAC;MACpBC,OAAO,GAAGqB,KAAK,YAAYC,KAAK,GAAGD,KAAK,GAAG,IAAIC,KAAK,CAACC,MAAM,CAACF,KAAK,CAAC,CAAC,CAAC;MACpE,OAAO,IAAI;IACb,CAAC,SAAS;MACRnB,aAAa,CAACU,OAAO,GAAG,KAAK;IAC/B;EACF,CAAC,EAAE,CAACf,WAAW,EAAEC,cAAc,EAAEC,gBAAgB,EAAEC,OAAO,EAAEK,cAAc,CAAC,CAAC;;EAE5E;AACF;AACA;AACA;AACA;EACE,MAAMmB,eAAe,GAAG,IAAAhB,kBAAW,EAAC,YAAkD;IACpFC,OAAO,CAACC,GAAG,CAAC,oCAAoC,CAAC;IAEjD,IAAI,CAACrB,YAAY,CAAC,CAAC,IAAIa,aAAa,CAACU,OAAO,EAAE;MAC5C,OAAO,IAAI;IACb;IAEA,IAAI,CAACP,cAAc,EAAE;MACnBI,OAAO,CAACC,GAAG,CAAC,yDAAyD,CAAC;MACtEV,OAAO,GAAG,IAAIsB,KAAK,CAAC,wCAAwC,CAAC,CAAC;MAC9D,OAAO,IAAI;IACb;IAEApB,aAAa,CAACU,OAAO,GAAG,IAAI;IAC5BH,OAAO,CAACC,GAAG,CAAC,mDAAmD,CAAC;IAEhE,IAAI;MACF;MACA,MAAMI,OAAO,GAAG,MAAOjB,WAAW,CAAS2B,eAAe,GAAG,CAAC;MAE9Df,OAAO,CAACC,GAAG,CAAC,uCAAuC,EAAE;QACnDM,UAAU,EAAE,CAAC,CAACF,OAAO;QACrBG,OAAO,EAAE,CAAC,CAACH,OAAO,EAAEI,IAAI;QACxBC,YAAY,EAAE,CAAC,CAACL,OAAO,EAAEM;MAC3B,CAAC,CAAC;MAEF,IAAIN,OAAO,EAAE;QACXL,OAAO,CAACC,GAAG,CAAC,kEAAkE,CAAC;QAC/E,MAAMZ,cAAc,CAACgB,OAAO,CAAC;QAC7BL,OAAO,CAACC,GAAG,CAAC,sCAAsC,CAAC;QACnD,OAAOI,OAAO;MAChB;MAEA,OAAO,IAAI;IACb,CAAC,CAAC,OAAOO,KAAK,EAAE;MACdZ,OAAO,CAACY,KAAK,CAAC,sCAAsC,EAAEA,KAAK,CAAC;MAC5DrB,OAAO,GAAGqB,KAAK,YAAYC,KAAK,GAAGD,KAAK,GAAG,IAAIC,KAAK,CAACC,MAAM,CAACF,KAAK,CAAC,CAAC,CAAC;MACpE,OAAO,IAAI;IACb,CAAC,SAAS;MACRnB,aAAa,CAACU,OAAO,GAAG,KAAK;IAC/B;EACF,CAAC,EAAE,CAACf,WAAW,EAAEC,cAAc,EAAEE,OAAO,EAAEK,cAAc,CAAC,CAAC;;EAE1D;EACA,IAAAoB,gBAAS,EAAC,MAAM;IACd,IAAI,CAACxB,OAAO,IAAI,CAACZ,YAAY,CAAC,CAAC,IAAIe,aAAa,CAACQ,OAAO,IAAInB,kBAAkB,CAAC,CAAC,EAAE;MAChF,IAAIA,kBAAkB,CAAC,CAAC,EAAE;QACxBM,gBAAgB,GAAG,CAAC;MACtB;MACA;IACF;IAEAK,aAAa,CAACQ,OAAO,GAAG,IAAI;IAE5B,IAAIP,cAAc,EAAE;MAClBE,QAAQ,CAAC,CAAC;IACZ,CAAC,MAAM;MACL;MACAR,gBAAgB,GAAG,CAAC;IACtB;EACF,CAAC,EAAE,CAACE,OAAO,EAAEM,QAAQ,EAAEF,cAAc,EAAEN,gBAAgB,CAAC,CAAC;EAEzD,OAAO;IACLQ,QAAQ;IACRiB,eAAe;IACfb,UAAU,EAAET,aAAa,CAACU,OAAO;IACjCN,gBAAgB,EAAED;EACpB,CAAC;AACH","ignoreList":[]}

package/lib/module/core/mixins/OxyServices.fedcm.js

@@ -34,7 +34,8 @@ export function OxyServicesFedCMMixin(Base) {
       super(...args);
     }
     static DEFAULT_CONFIG_URL = 'https://auth.oxy.so/fedcm.json';
-    static FEDCM_TIMEOUT = 60000; // 1 minute
+    static FEDCM_TIMEOUT = 60000; // 1 minute for interactive
+    static FEDCM_SILENT_TIMEOUT = 10000; // 10 seconds for silent mediation
 
     /**
      * Check if FedCM is supported in the current browser
@@ -82,6 +83,9 @@ export function OxyServicesFedCMMixin(Base) {
       try {
         const nonce = options.nonce || this.generateNonce();
         const clientId = this.getClientId();
+        if (typeof __DEV__ !== 'undefined' && __DEV__) {
+          console.log('[FedCM] Interactive sign-in: Requesting credential for', clientId);
+        }
 
         // Request credential from browser's native identity flow
         const credential = await this.requestIdentityCredential({
@@ -93,6 +97,9 @@ export function OxyServicesFedCMMixin(Base) {
         if (!credential || !credential.token) {
           throw new OxyAuthenticationError('No credential received from browser');
         }
+        if (typeof __DEV__ !== 'undefined' && __DEV__) {
+          console.log('[FedCM] Interactive sign-in: Got credential, exchanging for session');
+        }
 
         // Exchange FedCM ID token for Oxy session
         const session = await this.exchangeIdTokenForSession(credential.token);
@@ -101,8 +108,16 @@ export function OxyServicesFedCMMixin(Base) {
         if (session && session.accessToken) {
           this.httpService.setTokens(session.accessToken);
         }
+        if (typeof __DEV__ !== 'undefined' && __DEV__) {
+          console.log('[FedCM] Interactive sign-in: Success!', {
+            userId: session?.user?.id
+          });
+        }
         return session;
       } catch (error) {
+        if (typeof __DEV__ !== 'undefined' && __DEV__) {
+          console.log('[FedCM] Interactive sign-in failed:', error);
+        }
         if (error.name === 'AbortError') {
           throw new OxyAuthenticationError('Sign-in was cancelled by user');
         }
@@ -145,31 +160,101 @@ export function OxyServicesFedCMMixin(Base) {
      */
     async silentSignInWithFedCM() {
       if (!this.isFedCMSupported()) {
+        console.log('[FedCM] Silent SSO: FedCM not supported in this browser');
         return null;
       }
+      const clientId = this.getClientId();
+      console.log('[FedCM] Silent SSO: Starting for', clientId);
+
+      // First try silent mediation (no UI) - works if user previously consented
+      let credential = null;
       try {
         const nonce = this.generateNonce();
-        const clientId = this.getClientId();
-
-        // Request credential with silent mediation (no UI)
-        const credential = await this.requestIdentityCredential({
+        console.log('[FedCM] Silent SSO: Attempting silent mediation...');
+        credential = await this.requestIdentityCredential({
           configURL: this.constructor.DEFAULT_CONFIG_URL,
           clientId,
           nonce,
           mediation: 'silent'
         });
-        if (!credential || !credential.token) {
+        console.log('[FedCM] Silent SSO: Silent mediation result:', {
+          hasCredential: !!credential,
+          hasToken: !!credential?.token
+        });
+      } catch (silentError) {
+        // Silent mediation failed - this is expected if user hasn't consented before or is in quiet period
+        const errorName = silentError instanceof Error ? silentError.name : 'Unknown';
+        const errorMessage = silentError instanceof Error ? silentError.message : String(silentError);
+        console.log('[FedCM] Silent SSO: Silent mediation error (will try optional):', {
+          name: errorName,
+          message: errorMessage
+        });
+      }
+
+      // If silent failed, try optional mediation which shows browser UI if needed
+      if (!credential || !credential.token) {
+        try {
+          const nonce = this.generateNonce();
+          console.log('[FedCM] Silent SSO: Trying optional mediation (may show browser UI)...');
+          credential = await this.requestIdentityCredential({
+            configURL: this.constructor.DEFAULT_CONFIG_URL,
+            clientId,
+            nonce,
+            mediation: 'optional'
+          });
+          console.log('[FedCM] Silent SSO: Optional mediation result:', {
+            hasCredential: !!credential,
+            hasToken: !!credential?.token
+          });
+        } catch (optionalError) {
+          const errorName = optionalError instanceof Error ? optionalError.name : 'Unknown';
+          const errorMessage = optionalError instanceof Error ? optionalError.message : String(optionalError);
+          console.log('[FedCM] Silent SSO: Optional mediation also failed:', {
+            name: errorName,
+            message: errorMessage
+          });
           return null;
         }
-        const session = await this.exchangeIdTokenForSession(credential.token);
-        if (session && session.accessToken) {
-          this.httpService.setTokens(session.accessToken);
-        }
-        return session;
-      } catch (error) {
-        // Silent failures are expected and should not throw
+      }
+      if (!credential || !credential.token) {
+        console.log('[FedCM] Silent SSO: No credential returned (user may have dismissed prompt or is not logged in at IdP)');
+        return null;
+      }
+      console.log('[FedCM] Silent SSO: Got credential, exchanging for session...');
+      let session;
+      try {
+        session = await this.exchangeIdTokenForSession(credential.token);
+      } catch (exchangeError) {
+        console.error('[FedCM] Silent SSO: Token exchange failed:', exchangeError);
+        return null;
+      }
+
+      // Validate session response has required fields
+      if (!session) {
+        console.error('[FedCM] Silent SSO: Exchange returned null session');
         return null;
       }
+      if (!session.sessionId) {
+        console.error('[FedCM] Silent SSO: Exchange returned session without sessionId:', session);
+        return null;
+      }
+      if (!session.user) {
+        console.error('[FedCM] Silent SSO: Exchange returned session without user:', session);
+        return null;
+      }
+
+      // Set the access token
+      if (session.accessToken) {
+        this.httpService.setTokens(session.accessToken);
+        console.log('[FedCM] Silent SSO: Access token set');
+      } else {
+        console.warn('[FedCM] Silent SSO: No accessToken in session response');
+      }
+      console.log('[FedCM] Silent SSO: Success!', {
+        sessionId: session.sessionId?.substring(0, 8) + '...',
+        userId: session.user?.id
+      });
+      return session;
     }
 
     /**
@@ -185,9 +270,15 @@ export function OxyServicesFedCMMixin(Base) {
     async requestIdentityCredential(options) {
       const requestedMediation = options.mediation || 'optional';
       const isInteractive = requestedMediation !== 'silent';
+      console.log('[FedCM] requestIdentityCredential called:', {
+        mediation: requestedMediation,
+        clientId: options.clientId,
+        inProgress: fedCMRequestInProgress
+      });
 
       // If a request is already in progress...
       if (fedCMRequestInProgress && fedCMRequestPromise) {
+        console.log('[FedCM] Request already in progress, waiting...');
         // If current request is silent and new request is interactive,
         // wait for silent to finish, then make the interactive request
         if (currentMediationMode === 'silent' && isInteractive) {
@@ -209,16 +300,27 @@ export function OxyServicesFedCMMixin(Base) {
       fedCMRequestInProgress = true;
       currentMediationMode = requestedMediation;
       const controller = new AbortController();
-      const timeout = setTimeout(() => controller.abort(), this.constructor.FEDCM_TIMEOUT);
+      // Use shorter timeout for silent mediation since it should be quick
+      const timeoutMs = requestedMediation === 'silent' ? this.constructor.FEDCM_SILENT_TIMEOUT : this.constructor.FEDCM_TIMEOUT;
+      const timeout = setTimeout(() => {
+        console.log('[FedCM] Request timed out after', timeoutMs, 'ms (mediation:', requestedMediation + ')');
+        controller.abort();
+      }, timeoutMs);
       fedCMRequestPromise = (async () => {
         try {
+          console.log('[FedCM] Calling navigator.credentials.get with mediation:', requestedMediation);
           // Type assertion needed as FedCM types may not be in all TypeScript versions
           const credential = await navigator.credentials.get({
             identity: {
               providers: [{
                 configURL: options.configURL,
                 clientId: options.clientId,
+                // Send nonce at both levels for backward compatibility
                 nonce: options.nonce,
+                // For older browsers
+                params: {
+                  nonce: options.nonce // For Chrome 145+
+                },
                 ...(options.context && {
                   loginHint: options.context
                 })
@@ -227,12 +329,27 @@ export function OxyServicesFedCMMixin(Base) {
             mediation: requestedMediation,
             signal: controller.signal
           });
+          console.log('[FedCM] navigator.credentials.get returned:', {
+            hasCredential: !!credential,
+            type: credential?.type,
+            hasToken: !!credential?.token
+          });
           if (!credential || credential.type !== 'identity') {
+            console.log('[FedCM] No valid identity credential returned');
             return null;
           }
+          console.log('[FedCM] Got valid identity credential with token');
           return {
             token: credential.token
           };
+        } catch (error) {
+          const errorName = error instanceof Error ? error.name : 'Unknown';
+          const errorMessage = error instanceof Error ? error.message : String(error);
+          console.log('[FedCM] navigator.credentials.get error:', {
+            name: errorName,
+            message: errorMessage
+          });
+          throw error;
         } finally {
           clearTimeout(timeout);
           fedCMRequestInProgress = false;
@@ -252,11 +369,33 @@ export function OxyServicesFedCMMixin(Base) {
      * @private
      */
     async exchangeIdTokenForSession(idToken) {
-      return this.makeRequest('POST', '/api/fedcm/exchange', {
-        id_token: idToken
-      }, {
-        cache: false
-      });
+      console.log('[FedCM] exchangeIdTokenForSession: Starting exchange...');
+      console.log('[FedCM] exchangeIdTokenForSession: Token length:', idToken?.length);
+      console.log('[FedCM] exchangeIdTokenForSession: Token preview:', idToken?.substring(0, 50) + '...');
+      try {
+        const response = await this.makeRequest('POST', '/api/fedcm/exchange', {
+          id_token: idToken
+        }, {
+          cache: false
+        });
+        console.log('[FedCM] exchangeIdTokenForSession: Response received:', {
+          hasResponse: !!response,
+          hasSessionId: !!response?.sessionId,
+          hasUser: !!response?.user,
+          hasAccessToken: !!response?.accessToken,
+          userId: response?.user?.id,
+          username: response?.user?.username,
+          responseKeys: response ? Object.keys(response) : []
+        });
+        return response;
+      } catch (error) {
+        console.error('[FedCM] exchangeIdTokenForSession: Error:', {
+          name: error instanceof Error ? error.name : 'Unknown',
+          message: error instanceof Error ? error.message : String(error),
+          stack: error instanceof Error ? error.stack : undefined
+        });
+        throw error;
+      }
     }
 
     /**

package/lib/module/core/mixins/OxyServices.fedcm.js.map

@@ -1 +1 @@
-{"version":3,"names":["OxyAuthenticationError","fedCMRequestInProgress","fedCMRequestPromise","currentMediationMode","OxyServicesFedCMMixin","Base","constructor","args","DEFAULT_CONFIG_URL","FEDCM_TIMEOUT","isFedCMSupported","window","navigator","signInWithFedCM","options","nonce","generateNonce","clientId","getClientId","credential","requestIdentityCredential","configURL","context","token","session","exchangeIdTokenForSession","accessToken","httpService","setTokens","error","name","silentSignInWithFedCM","mediation","requestedMediation","isInteractive","controller","AbortController","timeout","setTimeout","abort","credentials","get","identity","providers","loginHint","signal","type","clearTimeout","idToken","makeRequest","id_token","cache","revokeFedCMCredential","IdentityCredential","logout","getFedCMConfig","enabled","crypto","randomUUID","Date","now","Math","random","toString","substring","location","origin","FedCMMixin"],"sourceRoot":"../../../../src","sources":["core/mixins/OxyServices.fedcm.ts"],"mappings":";;AACA,SAASA,sBAAsB,QAAQ,0BAAuB;AAc9D;AACA;AACA,IAAIC,sBAAsB,GAAG,KAAK;AAClC,IAAIC,mBAAwC,GAAG,IAAI;AACnD,IAAIC,oBAAmC,GAAG,IAAI;;AAE9C;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,OAAO,SAASC,qBAAqBA,CAAmCC,IAAO,EAAE;EAC/E,OAAO,cAAcA,IAAI,CAAC;IACxBC,WAAWA,CAAC,GAAGC,IAAW,EAAE;MAC1B,KAAK,CAAC,GAAIA,IAAc,CAAC;IAC3B;IACF,OAAuBC,kBAAkB,GAAG,gCAAgC;IAC5E,OAAuBC,aAAa,GAAG,KAAK,CAAC,CAAC;;IAE9C;AACF;AACA;IACE,OAAOC,gBAAgBA,CAAA,EAAY;MACjC,IAAI,OAAOC,MAAM,KAAK,WAAW,EAAE,OAAO,KAAK;MAC/C,OAAO,oBAAoB,IAAIA,MAAM,IAAI,WAAW,IAAIA,MAAM,IAAI,aAAa,IAAIC,SAAS;IAC9F;;IAEA;AACF;AACA;IACEF,gBAAgBA,CAAA,EAAY;MAC1B,OAAQ,IAAI,CAACJ,WAAW,CAAkEI,gBAAgB,CAAC,CAAC;IAC9G;;IAEA;AACF;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;IACE,MAAMG,eAAeA,CAACC,OAAyB,GAAG,CAAC,CAAC,EAAiC;MACnF,IAAI,CAAC,IAAI,CAACJ,gBAAgB,CAAC,CAAC,EAAE;QAC5B,MAAM,IAAIV,sBAAsB,CAC9B,uGACF,CAAC;MACH;MAEA,IAAI;QACF,MAAMe,KAAK,GAAGD,OAAO,CAACC,KAAK,IAAI,IAAI,CAACC,aAAa,CAAC,CAAC;QACnD,MAAMC,QAAQ,GAAG,IAAI,CAACC,WAAW,CAAC,CAAC;;QAEnC;QACA,MAAMC,UAAU,GAAG,MAAM,IAAI,CAACC,yBAAyB,CAAC;UACtDC,SAAS,EAAG,IAAI,CAACf,WAAW,CAASE,kBAAkB;UACvDS,QAAQ;UACRF,KAAK;UACLO,OAAO,EAAER,OAAO,CAACQ;QACnB,CAAC,CAAC;QAEF,IAAI,CAACH,UAAU,IAAI,CAACA,UAAU,CAACI,KAAK,EAAE;UACpC,MAAM,IAAIvB,sBAAsB,CAAC,qCAAqC,CAAC;QACzE;;QAEA;QACA,MAAMwB,OAAO,GAAG,MAAM,IAAI,CAACC,yBAAyB,CAACN,UAAU,CAACI,KAAK,CAAC;;QAEtE;QACA,IAAIC,OAAO,IAAKA,OAAO,CAASE,WAAW,EAAE;UAC3C,IAAI,CAACC,WAAW,CAACC,SAAS,CAAEJ,OAAO,CAASE,WAAW,CAAC;QAC1D;QAEA,OAAOF,OAAO;MAChB,CAAC,CAAC,OAAOK,KAAK,EAAE;QACd,IAAKA,KAAK,CAASC,IAAI,KAAK,YAAY,EAAE;UACxC,MAAM,IAAI9B,sBAAsB,CAAC,+BAA+B,CAAC;QACnE;QACA,IAAK6B,KAAK,CAASC,IAAI,KAAK,cAAc,EAAE;UAC1C,MAAM,IAAI9B,sBAAsB,CAAC,6DAA6D,CAAC;QACjG;QACA,MAAM6B,KAAK;MACb;IACF;;IAEA;AACF;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;IACE,MAAME,qBAAqBA,CAAA,EAAyC;MAClE,IAAI,CAAC,IAAI,CAACrB,gBAAgB,CAAC,CAAC,EAAE;QAC5B,OAAO,IAAI;MACb;MAEA,IAAI;QACF,MAAMK,KAAK,GAAG,IAAI,CAACC,aAAa,CAAC,CAAC;QAClC,MAAMC,QAAQ,GAAG,IAAI,CAACC,WAAW,CAAC,CAAC;;QAEnC;QACA,MAAMC,UAAU,GAAG,MAAM,IAAI,CAACC,yBAAyB,CAAC;UACtDC,SAAS,EAAG,IAAI,CAACf,WAAW,CAASE,kBAAkB;UACvDS,QAAQ;UACRF,KAAK;UACLiB,SAAS,EAAE;QACb,CAAC,CAAC;QAEF,IAAI,CAACb,UAAU,IAAI,CAACA,UAAU,CAACI,KAAK,EAAE;UACpC,OAAO,IAAI;QACb;QAEA,MAAMC,OAAO,GAAG,MAAM,IAAI,CAACC,yBAAyB,CAACN,UAAU,CAACI,KAAK,CAAC;QACtE,IAAIC,OAAO,IAAKA,OAAO,CAASE,WAAW,EAAE;UAC3C,IAAI,CAACC,WAAW,CAACC,SAAS,CAAEJ,OAAO,CAASE,WAAW,CAAC;QAC1D;QAEA,OAAOF,OAAO;MAChB,CAAC,CAAC,OAAOK,KAAK,EAAE;QACd;QACA,OAAO,IAAI;MACb;IACF;;IAEA;AACF;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;IACE,MAAaT,yBAAyBA,CAACN,OAMtC,EAAqC;MACpC,MAAMmB,kBAAkB,GAAGnB,OAAO,CAACkB,SAAS,IAAI,UAAU;MAC1D,MAAME,aAAa,GAAGD,kBAAkB,KAAK,QAAQ;;MAErD;MACA,IAAIhC,sBAAsB,IAAIC,mBAAmB,EAAE;QACjD;QACA;QACA,IAAIC,oBAAoB,KAAK,QAAQ,IAAI+B,aAAa,EAAE;UACtD,IAAI;YACF,MAAMhC,mBAAmB;UAC3B,CAAC,CAAC,MAAM;YACN;UAAA;UAEF;QACF,CAAC,MAAM;UACL;UACA,IAAI;YACF,OAAO,MAAMA,mBAAmB;UAClC,CAAC,CAAC,MAAM;YACN,OAAO,IAAI;UACb;QACF;MACF;MAEAD,sBAAsB,GAAG,IAAI;MAC7BE,oBAAoB,GAAG8B,kBAAkB;MACzC,MAAME,UAAU,GAAG,IAAIC,eAAe,CAAC,CAAC;MACxC,MAAMC,OAAO,GAAGC,UAAU,CAAC,MAAMH,UAAU,CAACI,KAAK,CAAC,CAAC,EAAG,IAAI,CAACjC,WAAW,CAASG,aAAa,CAAC;MAE7FP,mBAAmB,GAAG,CAAC,YAAY;QACjC,IAAI;UACF;UACA,MAAMiB,UAAU,GAAI,MAAOP,SAAS,CAAC4B,WAAW,CAASC,GAAG,CAAC;YAC3DC,QAAQ,EAAE;cACRC,SAAS,EAAE,CACT;gBACEtB,SAAS,EAAEP,OAAO,CAACO,SAAS;gBAC5BJ,QAAQ,EAAEH,OAAO,CAACG,QAAQ;gBAC1BF,KAAK,EAAED,OAAO,CAACC,KAAK;gBACpB,IAAID,OAAO,CAACQ,OAAO,IAAI;kBAAEsB,SAAS,EAAE9B,OAAO,CAACQ;gBAAQ,CAAC;cACvD,CAAC;YAEL,CAAC;YACDU,SAAS,EAAEC,kBAAkB;YAC7BY,MAAM,EAAEV,UAAU,CAACU;UACrB,CAAC,CAAS;UAEV,IAAI,CAAC1B,UAAU,IAAIA,UAAU,CAAC2B,IAAI,KAAK,UAAU,EAAE;YACjD,OAAO,IAAI;UACb;UAEA,OAAO;YAAEvB,KAAK,EAAEJ,UAAU,CAACI;UAAM,CAAC;QACpC,CAAC,SAAS;UACRwB,YAAY,CAACV,OAAO,CAAC;UACrBpC,sBAAsB,GAAG,KAAK;UAC9BC,mBAAmB,GAAG,IAAI;UAC1BC,oBAAoB,GAAG,IAAI;QAC7B;MACF,CAAC,EAAE,CAAC;MAEJ,OAAOD,mBAAmB;IAC5B;;IAEA;AACF;AACA;AACA;AACA;AACA;AACA;AACA;IACE,MAAauB,yBAAyBA,CAACuB,OAAe,EAAiC;MACrF,OAAO,IAAI,CAACC,WAAW,CACrB,MAAM,EACN,qBAAqB,EACrB;QAAEC,QAAQ,EAAEF;MAAQ,CAAC,EACrB;QAAEG,KAAK,EAAE;MAAM,CACjB,CAAC;IACH;;IAEA;AACF;AACA;AACA;AACA;AACA;IACE,MAAMC,qBAAqBA,CAAA,EAAkB;MAC3C,IAAI,CAAC,IAAI,CAAC1C,gBAAgB,CAAC,CAAC,EAAE;QAC5B;MACF;MAEA,IAAI;QACF;QACA,IAAI,oBAAoB,IAAIC,MAAM,IAAI,QAAQ,IAAKA,MAAM,CAAS0C,kBAAkB,EAAE;UACpF,MAAMpC,QAAQ,GAAG,IAAI,CAACC,WAAW,CAAC,CAAC;UACnC,MAAOP,MAAM,CAAS0C,kBAAkB,CAACC,MAAM,CAAC;YAC9CjC,SAAS,EAAG,IAAI,CAACf,WAAW,CAASE,kBAAkB;YACvDS;UACF,CAAC,CAAC;QACJ;MACF,CAAC,CAAC,OAAOY,KAAK,EAAE;QACd;MAAA;IAEJ;;IAEA;AACF;AACA;AACA;AACA;IACE0B,cAAcA,CAAA,EAAgB;MAC5B,OAAO;QACLC,OAAO,EAAE,IAAI,CAAC9C,gBAAgB,CAAC,CAAC;QAChCW,SAAS,EAAG,IAAI,CAACf,WAAW,CAASE,kBAAkB;QACvDS,QAAQ,EAAE,IAAI,CAACC,WAAW,CAAC;MAC7B,CAAC;IACH;;IAEA;AACF;AACA;AACA;AACA;IACSF,aAAaA,CAAA,EAAW;MAC7B,IAAI,OAAOL,MAAM,KAAK,WAAW,IAAIA,MAAM,CAAC8C,MAAM,IAAI9C,MAAM,CAAC8C,MAAM,CAACC,UAAU,EAAE;QAC9E,OAAO/C,MAAM,CAAC8C,MAAM,CAACC,UAAU,CAAC,CAAC;MACnC;MACA;MACA,OAAO,GAAGC,IAAI,CAACC,GAAG,CAAC,CAAC,IAAIC,IAAI,CAACC,MAAM,CAAC,CAAC,CAACC,QAAQ,CAAC,EAAE,CAAC,CAACC,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE;IACvE;;IAEA;AACF;AACA;AACA;AACA;IACS9C,WAAWA,CAAA,EAAW;MAC3B,IAAI,OAAOP,MAAM,KAAK,WAAW,EAAE;QACjC,OAAO,SAAS;MAClB;MACA,OAAOA,MAAM,CAACsD,QAAQ,CAACC,MAAM;IAC/B;EACA,CAAC;AACH;;AAEA;AACA,SAAS9D,qBAAqB,IAAI+D,UAAU","ignoreList":[]}
+{"version":3,"names":["OxyAuthenticationError","fedCMRequestInProgress","fedCMRequestPromise","currentMediationMode","OxyServicesFedCMMixin","Base","constructor","args","DEFAULT_CONFIG_URL","FEDCM_TIMEOUT","FEDCM_SILENT_TIMEOUT","isFedCMSupported","window","navigator","signInWithFedCM","options","nonce","generateNonce","clientId","getClientId","__DEV__","console","log","credential","requestIdentityCredential","configURL","context","token","session","exchangeIdTokenForSession","accessToken","httpService","setTokens","userId","user","id","error","name","silentSignInWithFedCM","mediation","hasCredential","hasToken","silentError","errorName","Error","errorMessage","message","String","optionalError","exchangeError","sessionId","warn","substring","requestedMediation","isInteractive","inProgress","controller","AbortController","timeoutMs","timeout","setTimeout","abort","credentials","get","identity","providers","params","loginHint","signal","type","clearTimeout","idToken","length","response","makeRequest","id_token","cache","hasResponse","hasSessionId","hasUser","hasAccessToken","username","responseKeys","Object","keys","stack","undefined","revokeFedCMCredential","IdentityCredential","logout","getFedCMConfig","enabled","crypto","randomUUID","Date","now","Math","random","toString","location","origin","FedCMMixin"],"sourceRoot":"../../../../src","sources":["core/mixins/OxyServices.fedcm.ts"],"mappings":";;AACA,SAASA,sBAAsB,QAAQ,0BAAuB;AAc9D;AACA;AACA,IAAIC,sBAAsB,GAAG,KAAK;AAClC,IAAIC,mBAAwC,GAAG,IAAI;AACnD,IAAIC,oBAAmC,GAAG,IAAI;;AAE9C;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,OAAO,SAASC,qBAAqBA,CAAmCC,IAAO,EAAE;EAC/E,OAAO,cAAcA,IAAI,CAAC;IACxBC,WAAWA,CAAC,GAAGC,IAAW,EAAE;MAC1B,KAAK,CAAC,GAAIA,IAAc,CAAC;IAC3B;IACF,OAAuBC,kBAAkB,GAAG,gCAAgC;IAC5E,OAAuBC,aAAa,GAAG,KAAK,CAAC,CAAC;IAC9C,OAAuBC,oBAAoB,GAAG,KAAK,CAAC,CAAC;;IAErD;AACF;AACA;IACE,OAAOC,gBAAgBA,CAAA,EAAY;MACjC,IAAI,OAAOC,MAAM,KAAK,WAAW,EAAE,OAAO,KAAK;MAC/C,OAAO,oBAAoB,IAAIA,MAAM,IAAI,WAAW,IAAIA,MAAM,IAAI,aAAa,IAAIC,SAAS;IAC9F;;IAEA;AACF;AACA;IACEF,gBAAgBA,CAAA,EAAY;MAC1B,OAAQ,IAAI,CAACL,WAAW,CAAkEK,gBAAgB,CAAC,CAAC;IAC9G;;IAEA;AACF;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;IACE,MAAMG,eAAeA,CAACC,OAAyB,GAAG,CAAC,CAAC,EAAiC;MACnF,IAAI,CAAC,IAAI,CAACJ,gBAAgB,CAAC,CAAC,EAAE;QAC5B,MAAM,IAAIX,sBAAsB,CAC9B,uGACF,CAAC;MACH;MAEA,IAAI;QACF,MAAMgB,KAAK,GAAGD,OAAO,CAACC,KAAK,IAAI,IAAI,CAACC,aAAa,CAAC,CAAC;QACnD,MAAMC,QAAQ,GAAG,IAAI,CAACC,WAAW,CAAC,CAAC;QAEnC,IAAI,OAAOC,OAAO,KAAK,WAAW,IAAIA,OAAO,EAAE;UAC7CC,OAAO,CAACC,GAAG,CAAC,wDAAwD,EAAEJ,QAAQ,CAAC;QACjF;;QAEA;QACA,MAAMK,UAAU,GAAG,MAAM,IAAI,CAACC,yBAAyB,CAAC;UACtDC,SAAS,EAAG,IAAI,CAACnB,WAAW,CAASE,kBAAkB;UACvDU,QAAQ;UACRF,KAAK;UACLU,OAAO,EAAEX,OAAO,CAACW;QACnB,CAAC,CAAC;QAEF,IAAI,CAACH,UAAU,IAAI,CAACA,UAAU,CAACI,KAAK,EAAE;UACpC,MAAM,IAAI3B,sBAAsB,CAAC,qCAAqC,CAAC;QACzE;QAEA,IAAI,OAAOoB,OAAO,KAAK,WAAW,IAAIA,OAAO,EAAE;UAC7CC,OAAO,CAACC,GAAG,CAAC,qEAAqE,CAAC;QACpF;;QAEA;QACA,MAAMM,OAAO,GAAG,MAAM,IAAI,CAACC,yBAAyB,CAACN,UAAU,CAACI,KAAK,CAAC;;QAEtE;QACA,IAAIC,OAAO,IAAKA,OAAO,CAASE,WAAW,EAAE;UAC3C,IAAI,CAACC,WAAW,CAACC,SAAS,CAAEJ,OAAO,CAASE,WAAW,CAAC;QAC1D;QAEA,IAAI,OAAOV,OAAO,KAAK,WAAW,IAAIA,OAAO,EAAE;UAC7CC,OAAO,CAACC,GAAG,CAAC,uCAAuC,EAAE;YAAEW,MAAM,EAAGL,OAAO,EAAUM,IAAI,EAAEC;UAAG,CAAC,CAAC;QAC9F;QAEA,OAAOP,OAAO;MAChB,CAAC,CAAC,OAAOQ,KAAK,EAAE;QACd,IAAI,OAAOhB,OAAO,KAAK,WAAW,IAAIA,OAAO,EAAE;UAC7CC,OAAO,CAACC,GAAG,CAAC,qCAAqC,EAAEc,KAAK,CAAC;QAC3D;QACA,IAAKA,KAAK,CAASC,IAAI,KAAK,YAAY,EAAE;UACxC,MAAM,IAAIrC,sBAAsB,CAAC,+BAA+B,CAAC;QACnE;QACA,IAAKoC,KAAK,CAASC,IAAI,KAAK,cAAc,EAAE;UAC1C,MAAM,IAAIrC,sBAAsB,CAAC,6DAA6D,CAAC;QACjG;QACA,MAAMoC,KAAK;MACb;IACF;;IAEA;AACF;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;IACE,MAAME,qBAAqBA,CAAA,EAAyC;MAClE,IAAI,CAAC,IAAI,CAAC3B,gBAAgB,CAAC,CAAC,EAAE;QAC5BU,OAAO,CAACC,GAAG,CAAC,yDAAyD,CAAC;QACtE,OAAO,IAAI;MACb;MAEA,MAAMJ,QAAQ,GAAG,IAAI,CAACC,WAAW,CAAC,CAAC;MACnCE,OAAO,CAACC,GAAG,CAAC,kCAAkC,EAAEJ,QAAQ,CAAC;;MAEzD;MACA,IAAIK,UAAoC,GAAG,IAAI;MAE/C,IAAI;QACF,MAAMP,KAAK,GAAG,IAAI,CAACC,aAAa,CAAC,CAAC;QAClCI,OAAO,CAACC,GAAG,CAAC,oDAAoD,CAAC;QAEjEC,UAAU,GAAG,MAAM,IAAI,CAACC,yBAAyB,CAAC;UAChDC,SAAS,EAAG,IAAI,CAACnB,WAAW,CAASE,kBAAkB;UACvDU,QAAQ;UACRF,KAAK;UACLuB,SAAS,EAAE;QACb,CAAC,CAAC;QAEFlB,OAAO,CAACC,GAAG,CAAC,8CAA8C,EAAE;UAAEkB,aAAa,EAAE,CAAC,CAACjB,UAAU;UAAEkB,QAAQ,EAAE,CAAC,CAAClB,UAAU,EAAEI;QAAM,CAAC,CAAC;MAC7H,CAAC,CAAC,OAAOe,WAAW,EAAE;QACpB;QACA,MAAMC,SAAS,GAAGD,WAAW,YAAYE,KAAK,GAAGF,WAAW,CAACL,IAAI,GAAG,SAAS;QAC7E,MAAMQ,YAAY,GAAGH,WAAW,YAAYE,KAAK,GAAGF,WAAW,CAACI,OAAO,GAAGC,MAAM,CAACL,WAAW,CAAC;QAC7FrB,OAAO,CAACC,GAAG,CAAC,iEAAiE,EAAE;UAAEe,IAAI,EAAEM,SAAS;UAAEG,OAAO,EAAED;QAAa,CAAC,CAAC;MAC5H;;MAEA;MACA,IAAI,CAACtB,UAAU,IAAI,CAACA,UAAU,CAACI,KAAK,EAAE;QACpC,IAAI;UACF,MAAMX,KAAK,GAAG,IAAI,CAACC,aAAa,CAAC,CAAC;UAClCI,OAAO,CAACC,GAAG,CAAC,wEAAwE,CAAC;UAErFC,UAAU,GAAG,MAAM,IAAI,CAACC,yBAAyB,CAAC;YAChDC,SAAS,EAAG,IAAI,CAACnB,WAAW,CAASE,kBAAkB;YACvDU,QAAQ;YACRF,KAAK;YACLuB,SAAS,EAAE;UACb,CAAC,CAAC;UAEFlB,OAAO,CAACC,GAAG,CAAC,gDAAgD,EAAE;YAAEkB,aAAa,EAAE,CAAC,CAACjB,UAAU;YAAEkB,QAAQ,EAAE,CAAC,CAAClB,UAAU,EAAEI;UAAM,CAAC,CAAC;QAC/H,CAAC,CAAC,OAAOqB,aAAa,EAAE;UACtB,MAAML,SAAS,GAAGK,aAAa,YAAYJ,KAAK,GAAGI,aAAa,CAACX,IAAI,GAAG,SAAS;UACjF,MAAMQ,YAAY,GAAGG,aAAa,YAAYJ,KAAK,GAAGI,aAAa,CAACF,OAAO,GAAGC,MAAM,CAACC,aAAa,CAAC;UACnG3B,OAAO,CAACC,GAAG,CAAC,qDAAqD,EAAE;YAAEe,IAAI,EAAEM,SAAS;YAAEG,OAAO,EAAED;UAAa,CAAC,CAAC;UAC9G,OAAO,IAAI;QACb;MACF;MAEA,IAAI,CAACtB,UAAU,IAAI,CAACA,UAAU,CAACI,KAAK,EAAE;QACpCN,OAAO,CAACC,GAAG,CAAC,wGAAwG,CAAC;QACrH,OAAO,IAAI;MACb;MAEAD,OAAO,CAACC,GAAG,CAAC,+DAA+D,CAAC;MAE5E,IAAIM,OAA6B;MACjC,IAAI;QACFA,OAAO,GAAG,MAAM,IAAI,CAACC,yBAAyB,CAACN,UAAU,CAACI,KAAK,CAAC;MAClE,CAAC,CAAC,OAAOsB,aAAa,EAAE;QACtB5B,OAAO,CAACe,KAAK,CAAC,4CAA4C,EAAEa,aAAa,CAAC;QAC1E,OAAO,IAAI;MACb;;MAEA;MACA,IAAI,CAACrB,OAAO,EAAE;QACZP,OAAO,CAACe,KAAK,CAAC,oDAAoD,CAAC;QACnE,OAAO,IAAI;MACb;MAEA,IAAI,CAACR,OAAO,CAACsB,SAAS,EAAE;QACtB7B,OAAO,CAACe,KAAK,CAAC,kEAAkE,EAAER,OAAO,CAAC;QAC1F,OAAO,IAAI;MACb;MAEA,IAAI,CAACA,OAAO,CAACM,IAAI,EAAE;QACjBb,OAAO,CAACe,KAAK,CAAC,6DAA6D,EAAER,OAAO,CAAC;QACrF,OAAO,IAAI;MACb;;MAEA;MACA,IAAKA,OAAO,CAASE,WAAW,EAAE;QAChC,IAAI,CAACC,WAAW,CAACC,SAAS,CAAEJ,OAAO,CAASE,WAAW,CAAC;QACxDT,OAAO,CAACC,GAAG,CAAC,sCAAsC,CAAC;MACrD,CAAC,MAAM;QACLD,OAAO,CAAC8B,IAAI,CAAC,wDAAwD,CAAC;MACxE;MAEA9B,OAAO,CAACC,GAAG,CAAC,8BAA8B,EAAE;QAC1C4B,SAAS,EAAEtB,OAAO,CAACsB,SAAS,EAAEE,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,KAAK;QACrDnB,MAAM,EAAEL,OAAO,CAACM,IAAI,EAAEC;MACxB,CAAC,CAAC;MAEF,OAAOP,OAAO;IAChB;;IAEA;AACF;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;IACE,MAAaJ,yBAAyBA,CAACT,OAMtC,EAAqC;MACpC,MAAMsC,kBAAkB,GAAGtC,OAAO,CAACwB,SAAS,IAAI,UAAU;MAC1D,MAAMe,aAAa,GAAGD,kBAAkB,KAAK,QAAQ;MAErDhC,OAAO,CAACC,GAAG,CAAC,2CAA2C,EAAE;QACvDiB,SAAS,EAAEc,kBAAkB;QAC7BnC,QAAQ,EAAEH,OAAO,CAACG,QAAQ;QAC1BqC,UAAU,EAAEtD;MACd,CAAC,CAAC;;MAEF;MACA,IAAIA,sBAAsB,IAAIC,mBAAmB,EAAE;QACjDmB,OAAO,CAACC,GAAG,CAAC,iDAAiD,CAAC;QAC9D;QACA;QACA,IAAInB,oBAAoB,KAAK,QAAQ,IAAImD,aAAa,EAAE;UACtD,IAAI;YACF,MAAMpD,mBAAmB;UAC3B,CAAC,CAAC,MAAM;YACN;UAAA;UAEF;QACF,CAAC,MAAM;UACL;UACA,IAAI;YACF,OAAO,MAAMA,mBAAmB;UAClC,CAAC,CAAC,MAAM;YACN,OAAO,IAAI;UACb;QACF;MACF;MAEAD,sBAAsB,GAAG,IAAI;MAC7BE,oBAAoB,GAAGkD,kBAAkB;MACzC,MAAMG,UAAU,GAAG,IAAIC,eAAe,CAAC,CAAC;MACxC;MACA,MAAMC,SAAS,GAAGL,kBAAkB,KAAK,QAAQ,GAC5C,IAAI,CAAC/C,WAAW,CAASI,oBAAoB,GAC7C,IAAI,CAACJ,WAAW,CAASG,aAAa;MAC3C,MAAMkD,OAAO,GAAGC,UAAU,CAAC,MAAM;QAC/BvC,OAAO,CAACC,GAAG,CAAC,iCAAiC,EAAEoC,SAAS,EAAE,gBAAgB,EAAEL,kBAAkB,GAAG,GAAG,CAAC;QACrGG,UAAU,CAACK,KAAK,CAAC,CAAC;MACpB,CAAC,EAAEH,SAAS,CAAC;MAEbxD,mBAAmB,GAAG,CAAC,YAAY;QACjC,IAAI;UACFmB,OAAO,CAACC,GAAG,CAAC,2DAA2D,EAAE+B,kBAAkB,CAAC;UAC5F;UACA,MAAM9B,UAAU,GAAI,MAAOV,SAAS,CAACiD,WAAW,CAASC,GAAG,CAAC;YAC3DC,QAAQ,EAAE;cACRC,SAAS,EAAE,CACT;gBACExC,SAAS,EAAEV,OAAO,CAACU,SAAS;gBAC5BP,QAAQ,EAAEH,OAAO,CAACG,QAAQ;gBAC1B;gBACAF,KAAK,EAAED,OAAO,CAACC,KAAK;gBAAE;gBACtBkD,MAAM,EAAE;kBACNlD,KAAK,EAAED,OAAO,CAACC,KAAK,CAAE;gBACxB,CAAC;gBACD,IAAID,OAAO,CAACW,OAAO,IAAI;kBAAEyC,SAAS,EAAEpD,OAAO,CAACW;gBAAQ,CAAC;cACvD,CAAC;YAEL,CAAC;YACDa,SAAS,EAAEc,kBAAkB;YAC7Be,MAAM,EAAEZ,UAAU,CAACY;UACrB,CAAC,CAAS;UAEV/C,OAAO,CAACC,GAAG,CAAC,6CAA6C,EAAE;YACzDkB,aAAa,EAAE,CAAC,CAACjB,UAAU;YAC3B8C,IAAI,EAAE9C,UAAU,EAAE8C,IAAI;YACtB5B,QAAQ,EAAE,CAAC,CAAClB,UAAU,EAAEI;UAC1B,CAAC,CAAC;UAEF,IAAI,CAACJ,UAAU,IAAIA,UAAU,CAAC8C,IAAI,KAAK,UAAU,EAAE;YACjDhD,OAAO,CAACC,GAAG,CAAC,+CAA+C,CAAC;YAC5D,OAAO,IAAI;UACb;UAEAD,OAAO,CAACC,GAAG,CAAC,kDAAkD,CAAC;UAC/D,OAAO;YAAEK,KAAK,EAAEJ,UAAU,CAACI;UAAM,CAAC;QACpC,CAAC,CAAC,OAAOS,KAAK,EAAE;UACd,MAAMO,SAAS,GAAGP,KAAK,YAAYQ,KAAK,GAAGR,KAAK,CAACC,IAAI,GAAG,SAAS;UACjE,MAAMQ,YAAY,GAAGT,KAAK,YAAYQ,KAAK,GAAGR,KAAK,CAACU,OAAO,GAAGC,MAAM,CAACX,KAAK,CAAC;UAC3Ef,OAAO,CAACC,GAAG,CAAC,0CAA0C,EAAE;YAAEe,IAAI,EAAEM,SAAS;YAAEG,OAAO,EAAED;UAAa,CAAC,CAAC;UACnG,MAAMT,KAAK;QACb,CAAC,SAAS;UACRkC,YAAY,CAACX,OAAO,CAAC;UACrB1D,sBAAsB,GAAG,KAAK;UAC9BC,mBAAmB,GAAG,IAAI;UAC1BC,oBAAoB,GAAG,IAAI;QAC7B;MACF,CAAC,EAAE,CAAC;MAEJ,OAAOD,mBAAmB;IAC5B;;IAEA;AACF;AACA;AACA;AACA;AACA;AACA;AACA;IACE,MAAa2B,yBAAyBA,CAAC0C,OAAe,EAAiC;MACrFlD,OAAO,CAACC,GAAG,CAAC,yDAAyD,CAAC;MACtED,OAAO,CAACC,GAAG,CAAC,kDAAkD,EAAEiD,OAAO,EAAEC,MAAM,CAAC;MAChFnD,OAAO,CAACC,GAAG,CAAC,mDAAmD,EAAEiD,OAAO,EAAEnB,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,KAAK,CAAC;MAEnG,IAAI;QACF,MAAMqB,QAAQ,GAAG,MAAM,IAAI,CAACC,WAAW,CACrC,MAAM,EACN,qBAAqB,EACrB;UAAEC,QAAQ,EAAEJ;QAAQ,CAAC,EACrB;UAAEK,KAAK,EAAE;QAAM,CACjB,CAAC;QAEDvD,OAAO,CAACC,GAAG,CAAC,uDAAuD,EAAE;UACnEuD,WAAW,EAAE,CAAC,CAACJ,QAAQ;UACvBK,YAAY,EAAE,CAAC,CAAEL,QAAQ,EAAUvB,SAAS;UAC5C6B,OAAO,EAAE,CAAC,CAAEN,QAAQ,EAAUvC,IAAI;UAClC8C,cAAc,EAAE,CAAC,CAAEP,QAAQ,EAAU3C,WAAW;UAChDG,MAAM,EAAGwC,QAAQ,EAAUvC,IAAI,EAAEC,EAAE;UACnC8C,QAAQ,EAAGR,QAAQ,EAAUvC,IAAI,EAAE+C,QAAQ;UAC3CC,YAAY,EAAET,QAAQ,GAAGU,MAAM,CAACC,IAAI,CAACX,QAAQ,CAAC,GAAG;QACnD,CAAC,CAAC;QAEF,OAAOA,QAAQ;MACjB,CAAC,CAAC,OAAOrC,KAAK,EAAE;QACdf,OAAO,CAACe,KAAK,CAAC,2CAA2C,EAAE;UACzDC,IAAI,EAAED,KAAK,YAAYQ,KAAK,GAAGR,KAAK,CAACC,IAAI,GAAG,SAAS;UACrDS,OAAO,EAAEV,KAAK,YAAYQ,KAAK,GAAGR,KAAK,CAACU,OAAO,GAAGC,MAAM,CAACX,KAAK,CAAC;UAC/DiD,KAAK,EAAEjD,KAAK,YAAYQ,KAAK,GAAGR,KAAK,CAACiD,KAAK,GAAGC;QAChD,CAAC,CAAC;QACF,MAAMlD,KAAK;MACb;IACF;;IAEA;AACF;AACA;AACA;AACA;AACA;IACE,MAAMmD,qBAAqBA,CAAA,EAAkB;MAC3C,IAAI,CAAC,IAAI,CAAC5E,gBAAgB,CAAC,CAAC,EAAE;QAC5B;MACF;MAEA,IAAI;QACF;QACA,IAAI,oBAAoB,IAAIC,MAAM,IAAI,QAAQ,IAAKA,MAAM,CAAS4E,kBAAkB,EAAE;UACpF,MAAMtE,QAAQ,GAAG,IAAI,CAACC,WAAW,CAAC,CAAC;UACnC,MAAOP,MAAM,CAAS4E,kBAAkB,CAACC,MAAM,CAAC;YAC9ChE,SAAS,EAAG,IAAI,CAACnB,WAAW,CAASE,kBAAkB;YACvDU;UACF,CAAC,CAAC;QACJ;MACF,CAAC,CAAC,OAAOkB,KAAK,EAAE;QACd;MAAA;IAEJ;;IAEA;AACF;AACA;AACA;AACA;IACEsD,cAAcA,CAAA,EAAgB;MAC5B,OAAO;QACLC,OAAO,EAAE,IAAI,CAAChF,gBAAgB,CAAC,CAAC;QAChCc,SAAS,EAAG,IAAI,CAACnB,WAAW,CAASE,kBAAkB;QACvDU,QAAQ,EAAE,IAAI,CAACC,WAAW,CAAC;MAC7B,CAAC;IACH;;IAEA;AACF;AACA;AACA;AACA;IACSF,aAAaA,CAAA,EAAW;MAC7B,IAAI,OAAOL,MAAM,KAAK,WAAW,IAAIA,MAAM,CAACgF,MAAM,IAAIhF,MAAM,CAACgF,MAAM,CAACC,UAAU,EAAE;QAC9E,OAAOjF,MAAM,CAACgF,MAAM,CAACC,UAAU,CAAC,CAAC;MACnC;MACA;MACA,OAAO,GAAGC,IAAI,CAACC,GAAG,CAAC,CAAC,IAAIC,IAAI,CAACC,MAAM,CAAC,CAAC,CAACC,QAAQ,CAAC,EAAE,CAAC,CAAC9C,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE;IACvE;;IAEA;AACF;AACA;AACA;AACA;IACSjC,WAAWA,CAAA,EAAW;MAC3B,IAAI,OAAOP,MAAM,KAAK,WAAW,EAAE;QACjC,OAAO,SAAS;MAClB;MACA,OAAOA,MAAM,CAACuF,QAAQ,CAACC,MAAM;IAC/B;EACA,CAAC;AACH;;AAEA;AACA,SAAShG,qBAAqB,IAAIiG,UAAU","ignoreList":[]}

package/lib/module/core/mixins/OxyServices.popup.js

@@ -90,6 +90,22 @@ export function OxyServicesPopupAuthMixin(Base) {
         if (session && session.accessToken) {
           this.httpService.setTokens(session.accessToken);
         }
+
+        // Fetch user data using the session ID
+        // The callback page only sends sessionId/accessToken, not user data
+        if (session && session.sessionId && !session.user) {
+          try {
+            const userData = await this.makeRequest('GET', `/api/session/user/${session.sessionId}`, undefined, {
+              cache: false
+            });
+            if (userData) {
+              session.user = userData;
+            }
+          } catch (userError) {
+            console.warn('[PopupAuth] Failed to fetch user data:', userError);
+            // Continue without user data - caller can fetch separately
+          }
+        }
         return session;
       } catch (error) {
         throw error;
@@ -195,8 +211,21 @@ export function OxyServicesPopupAuthMixin(Base) {
           reject(new OxyAuthenticationError('Authentication timeout'));
         }, timeout);
         const messageHandler = event => {
+          const authUrl = this.constructor.AUTH_URL;
+
+          // Log all messages for debugging
+          if (event.data && typeof event.data === 'object' && event.data.type) {
+            console.log('[PopupAuth] Message received:', {
+              origin: event.origin,
+              expectedOrigin: authUrl,
+              type: event.data.type,
+              hasSession: !!event.data.session,
+              hasError: !!event.data.error
+            });
+          }
+
           // CRITICAL: Verify origin to prevent XSS attacks
-          if (event.origin !== this.constructor.AUTH_URL) {
+          if (event.origin !== authUrl) {
             return;
           }
           const {
@@ -208,19 +237,29 @@ export function OxyServicesPopupAuthMixin(Base) {
           if (type !== 'oxy_auth_response') {
             return;
           }
+          console.log('[PopupAuth] Valid auth response:', {
+            state,
+            expectedState,
+            hasSession: !!session,
+            error
+          });
 
           // Verify state parameter to prevent CSRF attacks
           if (state !== expectedState) {
             cleanup();
+            console.error('[PopupAuth] State mismatch');
             reject(new OxyAuthenticationError('Invalid state parameter. Possible CSRF attack.'));
             return;
           }
           cleanup();
           if (error) {
+            console.error('[PopupAuth] Auth error:', error);
             reject(new OxyAuthenticationError(error));
           } else if (session) {
+            console.log('[PopupAuth] Session received successfully');
             resolve(session);
           } else {
+            console.error('[PopupAuth] No session in response');
             reject(new OxyAuthenticationError('No session received from authentication server'));
           }
         };