@propelauth/nextjs 0.3.11 → 0.3.13

package/dist/client/index.js

@@ -752,6 +752,7 @@ function apiGetUserInfo() {
           createdAt: userinfo.created_at,
           lastActiveAt: userinfo.last_active_at,
           properties: userinfo.properties,
+          legacyUserId: userinfo.legacy_user_id,
           impersonatorUserId
         });
         return { user, accessToken, error: void 0 };

package/dist/client/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/client/index.ts","../../src/loginMethod.ts","../../src/user.ts","../../src/client/AuthProvider.tsx","../../src/client/utils.ts","../../src/client/useUser.tsx","../../src/client/useHostedPageUrls.tsx","../../src/client/useLogoutFunction.ts","../../src/client/useRedirectFunctions.tsx","../../src/client/useRefreshAuth.ts"],"sourcesContent":["export type {OrgIdToOrgMemberInfo} from \"../user\"\nexport {UserFromToken, OrgMemberInfo} from \"../user\"\nexport {AuthProvider} from \"./AuthProvider\"\nexport type {AuthProviderProps, RedirectToLoginOptions, RedirectToSignupOptions} from \"./AuthProvider\"\nexport {useUser, User} from \"./useUser\"\nexport type {UseUser, UseUserLoading, UseUserLoggedIn, UseUserNotLoggedIn} from \"./useUser\"\nexport {useHostedPageUrls} from \"./useHostedPageUrls\"\nexport {useLogoutFunction} from \"./useLogoutFunction\"\nexport {useRedirectFunctions, RedirectToLogin, RedirectToSignup} from \"./useRedirectFunctions\"\nexport type {RedirectProps} from \"./useRedirectFunctions\"\nexport {useRefreshAuth} from \"./useRefreshAuth\"","export enum SocialLoginProvider {\n    Google = 'Google',\n    GitHub = 'GitHub',\n    Microsoft = 'Microsoft',\n    Slack = 'Slack',\n    LinkedIn = 'LinkedIn',\n    Salesforce = 'Salesforce',\n    Xero = 'Xero',\n    QuickBooksOnline = 'QuickBooks Online',\n}\n\nexport enum SamlLoginProvider {\n    Google = 'Google',\n    Rippling = 'Rippling',\n    OneLogin = 'OneLogin',\n    JumpCloud = 'JumpCloud',\n    Okta = 'Okta',\n    Azure = 'Azure',\n    Duo = 'Duo',\n    Generic = 'Generic',\n}\n\ntype InternalPasswordLoginMethod = {\n    login_method: 'password'\n}\n\ntype InternalMagicLinkLoginMethod = {\n    login_method: 'magic_link'\n}\n\ntype InternalSocialSsoLoginMethod = {\n    login_method: 'social_sso'\n    provider: SocialLoginProvider\n}\n\ntype InternalEmailConfirmationLinkLoginMethod = {\n    login_method: 'email_confirmation_link'\n}\n\ntype InternalSamlSsoLoginMethod = {\n    login_method: 'saml_sso'\n    provider: SamlLoginProvider\n    org_id: string\n}\n\ntype InternalImpersonationLoginMethod = {\n    login_method: 'impersonation'\n}\n\ntype InternalGeneratedFromBackendApiLoginMethod = {\n    login_method: 'generated_from_backend_api'\n}\n\ntype InternalUnknownLoginMethod = {\n    login_method: 'unknown'\n}\n\nexport type InternalLoginMethod =\n    | InternalPasswordLoginMethod\n    | InternalMagicLinkLoginMethod\n    | InternalSocialSsoLoginMethod\n    | InternalEmailConfirmationLinkLoginMethod\n    | InternalSamlSsoLoginMethod\n    | InternalImpersonationLoginMethod\n    | InternalGeneratedFromBackendApiLoginMethod\n    | InternalUnknownLoginMethod\n\ntype PasswordLoginMethod = {\n    loginMethod: 'password'\n}\n\ntype MagicLinkLoginMethod = {\n    loginMethod: 'magic_link'\n}\n\ntype SocialSsoLoginMethod = {\n    loginMethod: 'social_sso'\n    provider: SocialLoginProvider\n}\n\ntype EmailConfirmationLinkLoginMethod = {\n    loginMethod: 'email_confirmation_link'\n}\n\ntype SamlSsoLoginMethod = {\n    loginMethod: 'saml_sso'\n    provider: SamlLoginProvider\n    orgId: string\n}\n\ntype ImpersonationLoginMethod = {\n    loginMethod: 'impersonation'\n}\n\ntype GeneratedFromBackendApiLoginMethod = {\n    loginMethod: 'generated_from_backend_api'\n}\n\ntype UnknownLoginMethod = {\n    loginMethod: 'unknown'\n}\n\nexport type LoginMethod =\n    | PasswordLoginMethod\n    | MagicLinkLoginMethod\n    | SocialSsoLoginMethod\n    | EmailConfirmationLinkLoginMethod\n    | SamlSsoLoginMethod\n    | ImpersonationLoginMethod\n    | GeneratedFromBackendApiLoginMethod\n    | UnknownLoginMethod\n\nexport function toLoginMethod(snake_case?: InternalLoginMethod): LoginMethod {\n    if (!snake_case) {\n        return { loginMethod: 'unknown' }\n    }\n\n    switch (snake_case.login_method) {\n        case 'password':\n            return { loginMethod: 'password' }\n        case 'magic_link':\n            return { loginMethod: 'magic_link' }\n        case 'social_sso':\n            return { loginMethod: 'social_sso', provider: snake_case.provider }\n        case 'email_confirmation_link':\n            return { loginMethod: 'email_confirmation_link' }\n        case 'saml_sso':\n            return { loginMethod: 'saml_sso', provider: snake_case.provider, orgId: snake_case.org_id }\n        case 'impersonation':\n            return { loginMethod: 'impersonation' }\n        case 'generated_from_backend_api':\n            return { loginMethod: 'generated_from_backend_api' }\n        default:\n            return { loginMethod: 'unknown' }\n    }\n}\n","import { InternalLoginMethod, LoginMethod, toLoginMethod } from './loginMethod'\n\nexport class UserFromToken {\n    public userId: string\n\n    public activeOrgId?: string\n    public orgIdToOrgMemberInfo?: OrgIdToOrgMemberInfo\n\n    // Metadata about the user\n    public email: string\n    public firstName?: string\n    public lastName?: string\n    public username?: string\n    public properties?: { [key: string]: unknown }\n    public loginMethod?: LoginMethod\n\n    // If you used our migration APIs to migrate this user from a different system,\n    //   this is their original ID from that system.\n    public legacyUserId?: string\n    public impersonatorUserId?: string\n\n    constructor(\n        userId: string,\n        email: string,\n        orgIdToOrgMemberInfo?: OrgIdToOrgMemberInfo,\n        firstName?: string,\n        lastName?: string,\n        username?: string,\n        legacyUserId?: string,\n        impersonatorUserId?: string,\n        properties?: { [key: string]: unknown },\n        activeOrgId?: string,\n        loginMethod?: LoginMethod\n    ) {\n        this.userId = userId\n\n        this.activeOrgId = activeOrgId\n        this.orgIdToOrgMemberInfo = orgIdToOrgMemberInfo\n\n        this.email = email\n        this.firstName = firstName\n        this.lastName = lastName\n        this.username = username\n\n        this.legacyUserId = legacyUserId\n        this.impersonatorUserId = impersonatorUserId\n\n        this.properties = properties\n        this.loginMethod = loginMethod\n    }\n\n    public getActiveOrg(): OrgMemberInfo | undefined {\n        if (!this.activeOrgId || !this.orgIdToOrgMemberInfo) {\n            return undefined\n        }\n\n        return this.orgIdToOrgMemberInfo[this.activeOrgId]\n    }\n\n    public getActiveOrgId(): string | undefined {\n        return this.activeOrgId\n    }\n\n    public getOrg(orgId: string): OrgMemberInfo | undefined {\n        if (!this.orgIdToOrgMemberInfo) {\n            return undefined\n        }\n\n        return this.orgIdToOrgMemberInfo[orgId]\n    }\n\n    public getOrgByName(orgName: string): OrgMemberInfo | undefined {\n        if (!this.orgIdToOrgMemberInfo) {\n            return undefined\n        }\n\n        const urlSafeOrgName = orgName.toLowerCase().replace(/ /g, '-')\n        for (const orgId in this.orgIdToOrgMemberInfo) {\n            const orgMemberInfo = this.orgIdToOrgMemberInfo[orgId]\n            if (orgMemberInfo.urlSafeOrgName === urlSafeOrgName) {\n                return orgMemberInfo\n            }\n        }\n\n        return undefined\n    }\n\n    public getOrgs(): OrgMemberInfo[] {\n        if (!this.orgIdToOrgMemberInfo) {\n            return []\n        }\n\n        return Object.values(this.orgIdToOrgMemberInfo)\n    }\n\n    public isImpersonating(): boolean {\n        return !!this.impersonatorUserId\n    }\n\n    public static fromJSON(json: string): UserFromToken {\n        const obj = JSON.parse(json)\n        const orgIdToOrgMemberInfo: OrgIdToOrgMemberInfo = {}\n        for (const orgId in obj.orgIdToOrgMemberInfo) {\n            orgIdToOrgMemberInfo[orgId] = OrgMemberInfo.fromJSON(JSON.stringify(obj.orgIdToOrgMemberInfo[orgId]))\n        }\n        return new UserFromToken(\n            obj.userId,\n            obj.email,\n            orgIdToOrgMemberInfo,\n            obj.firstName,\n            obj.lastName,\n            obj.username,\n            obj.legacyUserId,\n            obj.impersonatorUserId,\n            obj.properties,\n            obj.activeOrgId,\n            obj.loginMethod\n        )\n    }\n\n    public static fromJwtPayload(payload: InternalUser): UserFromToken {\n        let activeOrgId: string | undefined\n        let orgIdToOrgMemberInfo: OrgIdToOrgMemberInfo | undefined\n\n        if (payload.org_member_info) {\n            activeOrgId = payload.org_member_info.org_id\n            orgIdToOrgMemberInfo = toOrgIdToOrgMemberInfo({ [activeOrgId]: payload.org_member_info })\n        } else {\n            activeOrgId = undefined\n            orgIdToOrgMemberInfo = toOrgIdToOrgMemberInfo(payload.org_id_to_org_member_info)\n        }\n\n        const loginMethod = toLoginMethod(payload.login_method)\n\n        return new UserFromToken(\n            payload.user_id,\n            payload.email,\n            orgIdToOrgMemberInfo,\n            payload.first_name,\n            payload.last_name,\n            payload.username,\n            payload.legacy_user_id,\n            payload.impersonator_user_id,\n            payload.properties,\n            activeOrgId,\n            loginMethod\n        )\n    }\n}\n\nexport type OrgIdToOrgMemberInfo = {\n    [orgId: string]: OrgMemberInfo\n}\n\nexport enum OrgRoleStructure {\n    SingleRole = \"single_role_in_hierarchy\",\n    MultiRole = \"multi_role\",\n}\n\nexport class OrgMemberInfo {\n    public orgId: string\n    public orgName: string\n    public orgMetadata: { [key: string]: any }\n    public urlSafeOrgName: string\n    public orgRoleStructure: OrgRoleStructure\n\n    public userAssignedRole: string\n    public userInheritedRolesPlusCurrentRole: string[]\n    public userPermissions: string[]\n    public userAssignedAdditionalRoles: string[]\n\n    constructor(\n        orgId: string,\n        orgName: string,\n        orgMetadata: { [key: string]: any },\n        urlSafeOrgName: string,\n        userAssignedRole: string,\n        userInheritedRolesPlusCurrentRole: string[],\n        userPermissions: string[],\n        orgRoleStructure: OrgRoleStructure,\n        userAssignedAdditionalRoles: string[]\n    ) {\n        this.orgId = orgId\n        this.orgName = orgName\n        this.orgMetadata = orgMetadata\n        this.urlSafeOrgName = urlSafeOrgName\n        this.orgRoleStructure = orgRoleStructure\n\n        this.userAssignedRole = userAssignedRole\n        this.userInheritedRolesPlusCurrentRole = userInheritedRolesPlusCurrentRole\n        this.userPermissions = userPermissions\n        this.userAssignedAdditionalRoles = userAssignedAdditionalRoles\n    }\n\n    // validation methods\n\n    public isRole(role: string): boolean {\n        if (this.orgRoleStructure === OrgRoleStructure.MultiRole) {\n            return this.userAssignedRole === role || this.userAssignedAdditionalRoles.includes(role)\n        } else {\n            return this.userAssignedRole === role\n        }\n    }\n\n    public isAtLeastRole(role: string): boolean {\n        if (this.orgRoleStructure === OrgRoleStructure.MultiRole) {\n            return this.userAssignedRole === role || this.userAssignedAdditionalRoles.includes(role)\n        } else {\n            return this.userInheritedRolesPlusCurrentRole.includes(role)\n        }\n    }\n\n    public hasPermission(permission: string): boolean {\n        return this.userPermissions.includes(permission)\n    }\n\n    public hasAllPermissions(permissions: string[]): boolean {\n        return permissions.every((permission) => this.hasPermission(permission))\n    }\n\n    public static fromJSON(json: string): OrgMemberInfo {\n        const obj = JSON.parse(json)\n        return new OrgMemberInfo(\n            obj.orgId,\n            obj.orgName,\n            obj.orgMetadata,\n            obj.urlSafeOrgName,\n            obj.userAssignedRole,\n            obj.userInheritedRolesPlusCurrentRole,\n            obj.userPermissions,\n            obj.orgRoleStructure,\n            obj.userAssignedAdditionalRoles\n        )\n    }\n\n    // getters for the private fields\n\n    get assignedRole(): string {\n        return this.userAssignedRole\n    }\n\n    get assignedRoles(): string[] {\n        if (this.orgRoleStructure === OrgRoleStructure.MultiRole) {\n            return this.userAssignedAdditionalRoles.concat(this.userAssignedRole)\n        } else {\n            return [this.userAssignedRole]\n        }\n    }\n\n    get inheritedRolesPlusCurrentRole(): string[] {\n        if (this.orgRoleStructure === OrgRoleStructure.MultiRole) {\n            return this.userAssignedAdditionalRoles.concat(this.userAssignedRole)\n        } else {\n            return this.userInheritedRolesPlusCurrentRole\n        }\n    }\n\n    get permissions(): string[] {\n        return this.userPermissions\n    }\n}\n\n// These Internal types exist since the server returns snake case, but typescript/javascript\n// convention is camelCase.\nexport type InternalOrgMemberInfo = {\n    org_id: string\n    org_name: string\n    org_metadata: { [key: string]: any }\n    url_safe_org_name: string\n    org_role_structure: OrgRoleStructure\n    user_role: string\n    inherited_user_roles_plus_current_role: string[]\n    user_permissions: string[]\n    additional_roles: string[]\n}\n\nexport type InternalUser = {\n    user_id: string\n\n    org_member_info?: InternalOrgMemberInfo\n    org_id_to_org_member_info?: { [org_id: string]: InternalOrgMemberInfo }\n\n    email: string\n    first_name?: string\n    last_name?: string\n    username?: string\n    properties?: { [key: string]: unknown }\n    login_method?: InternalLoginMethod\n\n    // If you used our migration APIs to migrate this user from a different system, this is their original ID from that system.\n    legacy_user_id?: string\n    impersonator_user_id?: string\n}\n\nexport function toUser(snake_case: InternalUser): UserFromToken {\n    return UserFromToken.fromJwtPayload(snake_case)\n}\n\nexport function toOrgIdToOrgMemberInfo(snake_case?: {\n    [org_id: string]: InternalOrgMemberInfo\n}): OrgIdToOrgMemberInfo | undefined {\n    if (snake_case === undefined) {\n        return undefined\n    }\n    const camelCase: OrgIdToOrgMemberInfo = {}\n\n    for (const key of Object.keys(snake_case)) {\n        const snakeCaseValue = snake_case[key]\n        if (snakeCaseValue) {\n            camelCase[key] = new OrgMemberInfo(\n                snakeCaseValue.org_id,\n                snakeCaseValue.org_name,\n                snakeCaseValue.org_metadata,\n                snakeCaseValue.url_safe_org_name,\n                snakeCaseValue.user_role,\n                snakeCaseValue.inherited_user_roles_plus_current_role,\n                snakeCaseValue.user_permissions,\n                snakeCaseValue.org_role_structure,\n                snakeCaseValue.additional_roles\n            )\n        }\n    }\n\n    return camelCase\n}\n","'use client'\n\nimport React, { useCallback, useEffect, useReducer } from 'react'\nimport { useRouter } from 'next/navigation'\nimport { currentTimeSecs, hasWindow, isEqual } from './utils'\nimport { User } from './useUser'\nimport { toOrgIdToOrgMemberInfo } from '../user'\n\nexport interface RedirectToSignupOptions {\n    postSignupRedirectPath?: string\n    userSignupQueryParameters?: Record<string, string>\n}\nexport interface RedirectToLoginOptions {\n    postLoginRedirectPath?: string\n    userSignupQueryParameters?: Record<string, string>\n}\nexport interface RedirectOptions {\n    redirectBackToUrl?: string\n}\n\ninterface InternalAuthState {\n    loading: boolean\n    userAndAccessToken: UserAndAccessToken\n\n    logout: () => Promise<void>\n\n    redirectToLoginPage: (opts?: RedirectToLoginOptions) => void\n    redirectToSignupPage: (opts?: RedirectToSignupOptions) => void\n    redirectToAccountPage: (opts?: RedirectOptions) => void\n    redirectToOrgPage: (orgId?: string, opts?: RedirectOptions) => void\n    redirectToOrgSettingsPage: (orgId?: string, opts?: RedirectOptions) => void\n    redirectToCreateOrgPage: (opts?: RedirectOptions) => void\n    redirectToSetupSAMLPage: (orgId: string, opts?: RedirectOptions) => void\n    redirectToOrgApiKeysPage: (orgId?: string, opts?: RedirectOptions) => void\n\n    getSignupPageUrl(opts?: RedirectToSignupOptions): string\n    getLoginPageUrl(opts?: RedirectToLoginOptions): string\n    getAccountPageUrl(opts?: RedirectOptions): string\n    getOrgPageUrl(orgId?: string, opts?: RedirectOptions): string\n    getOrgSettingsPageUrl(orgId?: string, opts?: RedirectOptions): string\n    getCreateOrgPageUrl(opts?: RedirectOptions): string\n    getSetupSAMLPageUrl(orgId: string, opts?: RedirectOptions): string\n    getOrgApiKeysPageUrl(orgId?: string, opts?: RedirectOptions): string\n\n    refreshAuthInfo: () => Promise<User | undefined>\n    setActiveOrg: (orgId: string) => Promise<User | undefined>\n}\n\nconst DEFAULT_MIN_SECONDS_BEFORE_REFRESH = 120\n\nexport type AuthProviderProps = {\n    authUrl: string\n    reloadOnAuthChange?: boolean\n    minSecondsBeforeRefresh?: number\n    children?: React.ReactNode\n    refreshOnFocus?: boolean\n}\n\nexport const AuthContext = React.createContext<InternalAuthState | undefined>(undefined)\n\ntype UserAndAccessToken =\n    | {\n          user: User\n          accessToken: string\n      }\n    | {\n          user: undefined\n          accessToken: undefined\n      }\n\ntype AuthState = {\n    loading: boolean\n    userAndAccessToken: UserAndAccessToken\n\n    // There's no good way to trigger server components to reload outside of router.refresh()\n    // This is our workaround until the app router has something better\n    authChangeDetected: boolean\n}\n\nconst initialAuthState = {\n    loading: true,\n    userAndAccessToken: {\n        user: undefined,\n        accessToken: undefined,\n    },\n    authChangeDetected: false,\n}\n\ntype AuthStateAction =\n    | {\n          user: User\n          accessToken: string\n      }\n    | {\n          user: undefined\n          accessToken: undefined\n      }\n\nfunction authStateReducer(_state: AuthState, action: AuthStateAction): AuthState {\n    const newUserForEqualityChecking = { ...action.user, lastActiveAt: undefined }\n    const existingUserForEqualityChecking = { ..._state.userAndAccessToken.user, lastActiveAt: undefined }\n    const authChangeDetected = !_state.loading && !isEqual(newUserForEqualityChecking, existingUserForEqualityChecking)\n\n    if (!action.user) {\n        return {\n            loading: false,\n            userAndAccessToken: {\n                user: undefined,\n                accessToken: undefined,\n            },\n            authChangeDetected,\n        }\n    } else if (_state.loading) {\n        return {\n            loading: false,\n            userAndAccessToken: {\n                user: action.user,\n                accessToken: action.accessToken,\n            },\n            authChangeDetected,\n        }\n    } else {\n        return {\n            loading: false,\n            userAndAccessToken: {\n                user: action.user,\n                accessToken: action.accessToken,\n            },\n            authChangeDetected,\n        }\n    }\n}\n\nexport const AuthProvider = (props: AuthProviderProps) => {\n    const [authState, dispatchInner] = useReducer(authStateReducer, initialAuthState)\n    const [lastRefresh, setLastRefresh] = React.useState<number>(0)\n    const router = useRouter()\n    const reloadOnAuthChange = props.reloadOnAuthChange ?? true\n\n    const dispatch = useCallback(\n        (action: AuthStateAction) => {\n            dispatchInner(action)\n            setLastRefresh(currentTimeSecs())\n        },\n        [dispatchInner, setLastRefresh]\n    )\n\n    const shouldRefresh = useCallback(\n        (lastRefresh: number) => {\n            const minSecondsBeforeRefresh = props.minSecondsBeforeRefresh ?? DEFAULT_MIN_SECONDS_BEFORE_REFRESH\n            return currentTimeSecs() - lastRefresh >= minSecondsBeforeRefresh\n        },\n        [props.minSecondsBeforeRefresh]\n    )\n\n    // This is because we don't have a good way to trigger server components to reload outside of router.refresh()\n    useEffect(() => {\n        if (reloadOnAuthChange && authState.authChangeDetected) {\n            router.refresh()\n        }\n    }, [authState.authChangeDetected, reloadOnAuthChange, router])\n\n    // Trigger an initial refresh\n    useEffect(() => {\n        let didCancel = false\n\n        async function refreshAuthInfo() {\n            const action = await apiGetUserInfo()\n            if (!didCancel && !action.error) {\n                dispatch(action)\n            }\n        }\n\n        refreshAuthInfo()\n        return () => {\n            didCancel = true\n        }\n    }, [])\n\n    // Periodically refresh the token\n    useEffect(() => {\n        let didCancel = false\n\n        async function refreshAuthInfo() {\n            if (!shouldRefresh(lastRefresh)) {\n                return\n            }\n\n            const action = await apiGetUserInfo()\n            if (!didCancel && !action.error) {\n                dispatch(action)\n            }\n        }\n\n        const interval = setInterval(refreshAuthInfo, 5 * 60 * 1000)\n        return () => {\n            didCancel = true\n            clearInterval(interval)\n        }\n    }, [lastRefresh])\n\n    const backgroundRefreshAuthInfo = useCallback(async () => {\n        if (!shouldRefresh(lastRefresh)) {\n            return\n        }\n\n        const action = await apiGetUserInfo()\n        if (!action.error) {\n            dispatch(action)\n        }\n    }, [lastRefresh])\n\n    // Set up online and focus event listeners\n    useEffect(() => {\n        if (hasWindow()) {\n            window.addEventListener('online', backgroundRefreshAuthInfo)\n\n            // Default for refreshOnFocus is true\n            if (props.refreshOnFocus !== false) {\n                window.addEventListener('focus', backgroundRefreshAuthInfo)\n            }\n        }\n\n        return () => {\n            if (hasWindow()) {\n                window.removeEventListener('online', backgroundRefreshAuthInfo)\n                window.removeEventListener('focus', backgroundRefreshAuthInfo)\n            }\n        }\n    }, [props.refreshOnFocus, backgroundRefreshAuthInfo])\n\n    const logout = useCallback(async () => {\n        await fetch('/api/auth/logout', {\n            method: 'POST',\n            headers: {\n                'Content-Type': 'application/json',\n            },\n            credentials: 'include',\n        })\n        dispatch({ user: undefined, accessToken: undefined })\n    }, [dispatch])\n\n    const buildAuthPageUrl = (basePath: string, redirectPath?: string, queryParams?: Record<string, string>) => {\n        let qs = new URLSearchParams()\n        let url = basePath\n\n        if (queryParams) {\n            Object.entries(queryParams).forEach(([key, value]) => {\n                qs.set(key, value)\n            })\n        }\n\n        if (redirectPath) {\n            qs.set('return_to_path', redirectPath)\n        }\n\n        if (qs.toString()) {\n            url += `?${qs.toString()}`\n        }\n\n        return url\n    }\n\n    const getLoginPageUrl = (opts?: RedirectToLoginOptions) => {\n        return buildAuthPageUrl('/api/auth/login', opts?.postLoginRedirectPath, opts?.userSignupQueryParameters)\n    }\n\n    const getSignupPageUrl = (opts?: RedirectToSignupOptions) => {\n        return buildAuthPageUrl('/api/auth/signup', opts?.postSignupRedirectPath, opts?.userSignupQueryParameters)\n    }\n    const getAccountPageUrl = useCallback(\n        (opts?: RedirectOptions) => {\n            return addReturnToPath(`${props.authUrl}/account`, opts?.redirectBackToUrl)\n        },\n        [props.authUrl]\n    )\n    const getOrgPageUrl = useCallback(\n        (orgId?: string, opts?: RedirectOptions) => {\n            if (orgId) {\n                return addReturnToPath(`${props.authUrl}/org?id=${orgId}`, opts?.redirectBackToUrl)\n            } else {\n                return addReturnToPath(`${props.authUrl}/org`, opts?.redirectBackToUrl)\n            }\n        },\n        [props.authUrl]\n    )\n    const getOrgSettingsPageUrl = useCallback(\n        (orgId?: string, opts?: RedirectOptions) => {\n            if (orgId) {\n                return addReturnToPath(`${props.authUrl}/org/settings/${orgId}`, opts?.redirectBackToUrl)\n            } else {\n                return addReturnToPath(`${props.authUrl}/org/settings`, opts?.redirectBackToUrl)\n            }\n        },\n        [props.authUrl]\n    )\n    const getCreateOrgPageUrl = useCallback(\n        (opts?: RedirectOptions) => {\n            return addReturnToPath(`${props.authUrl}/create_org`, opts?.redirectBackToUrl)\n        },\n        [props.authUrl]\n    )\n\n    const getSetupSAMLPageUrl = useCallback(\n        (orgId: string, opts?: RedirectOptions) => {\n            return addReturnToPath(`${props.authUrl}/saml?id=${orgId}`, opts?.redirectBackToUrl)\n        },\n        [props.authUrl]\n    )\n\n    const getOrgApiKeysPageUrl = useCallback(\n        (orgId?: string, opts?: RedirectOptions) => {\n            if (orgId) {\n                return addReturnToPath(`${props.authUrl}/org/api_keys/${orgId}`, opts?.redirectBackToUrl)\n            } else {\n                return addReturnToPath(`${props.authUrl}/org/api_keys`, opts?.redirectBackToUrl)\n            }\n        },\n        [props.authUrl]\n    )\n\n    const redirectTo = (url: string) => {\n        window.location.href = url\n    }\n\n    const redirectToLoginPage = (opts?: RedirectToLoginOptions) => redirectTo(getLoginPageUrl(opts))\n    const redirectToSignupPage = (opts?: RedirectToSignupOptions) => redirectTo(getSignupPageUrl(opts))\n    const redirectToAccountPage = (opts?: RedirectOptions) => redirectTo(getAccountPageUrl(opts))\n    const redirectToOrgPage = (orgId?: string, opts?: RedirectOptions) => redirectTo(getOrgPageUrl(orgId, opts))\n    const redirectToOrgSettingsPage = (orgId?: string, opts?: RedirectOptions) =>\n        redirectTo(getOrgSettingsPageUrl(orgId, opts))\n    const redirectToCreateOrgPage = (opts?: RedirectOptions) => redirectTo(getCreateOrgPageUrl(opts))\n    const redirectToSetupSAMLPage = (orgId: string, opts?: RedirectOptions) =>\n        redirectTo(getSetupSAMLPageUrl(orgId, opts))\n    const redirectToOrgApiKeysPage = (orgId?: string, opts?: RedirectOptions) =>\n        redirectTo(getOrgApiKeysPageUrl(orgId, opts))\n\n    const setActiveOrg = useCallback(\n        async (orgId: string) => {\n            const action = await apiPostSetActiveOrg(orgId)\n            if (action.error === 'not_in_org') {\n                return undefined\n            } else {\n                dispatch(action)\n                return action.user\n            }\n        },\n        [dispatch]\n    )\n\n    const refreshAuthInfo = useCallback(async () => {\n        const action = await apiGetUserInfo()\n        if (action.error) {\n            throw new Error('Failed to refresh token')\n        } else {\n            dispatch(action)\n            return action.user\n        }\n    }, [dispatch])\n\n    const value = {\n        loading: authState.loading,\n        userAndAccessToken: authState.userAndAccessToken,\n        logout,\n        redirectToLoginPage,\n        redirectToSignupPage,\n        redirectToAccountPage,\n        redirectToOrgPage,\n        redirectToOrgSettingsPage,\n        redirectToCreateOrgPage,\n        redirectToSetupSAMLPage,\n        redirectToOrgApiKeysPage,\n        getLoginPageUrl,\n        getSignupPageUrl,\n        getAccountPageUrl,\n        getOrgPageUrl,\n        getOrgSettingsPageUrl,\n        getCreateOrgPageUrl,\n        getOrgApiKeysPageUrl,\n        getSetupSAMLPageUrl,\n        refreshAuthInfo,\n        setActiveOrg,\n    }\n    return <AuthContext.Provider value={value}>{props.children}</AuthContext.Provider>\n}\n\ntype UserInfoResponse =\n    | {\n          error: undefined\n          user: User\n          accessToken: string\n      }\n    | {\n          error: undefined\n          user: undefined\n          accessToken: undefined\n      }\n    | {\n          error: 'unexpected'\n      }\n\nasync function apiGetUserInfo(): Promise<UserInfoResponse> {\n    try {\n        const userInfoResponse = await fetch('/api/auth/userinfo', {\n            method: 'GET',\n            headers: {\n                'Content-Type': 'application/json',\n            },\n            credentials: 'include',\n        })\n\n        if (userInfoResponse.ok) {\n            const { userinfo, accessToken, impersonatorUserId, activeOrgId } = await userInfoResponse.json()\n            const user = new User({\n                userId: userinfo.user_id,\n                email: userinfo.email,\n                emailConfirmed: userinfo.email_confirmed,\n                hasPassword: userinfo.has_password,\n                username: userinfo.username,\n                firstName: userinfo.first_name,\n                lastName: userinfo.last_name,\n                pictureUrl: userinfo.picture_url,\n                orgIdToOrgMemberInfo: toOrgIdToOrgMemberInfo(userinfo.org_id_to_org_info),\n                activeOrgId,\n                mfaEnabled: userinfo.mfa_enabled,\n                canCreateOrgs: userinfo.can_create_orgs,\n                updatePasswordRequired: userinfo.update_password_required,\n                createdAt: userinfo.created_at,\n                lastActiveAt: userinfo.last_active_at,\n                properties: userinfo.properties,\n                impersonatorUserId,\n            })\n\n            return { user, accessToken, error: undefined }\n        } else if (userInfoResponse.status === 401) {\n            return { user: undefined, accessToken: undefined, error: undefined }\n        } else {\n            console.info('Failed to refresh token', userInfoResponse)\n            return { error: 'unexpected' }\n        }\n    } catch (e) {\n        console.info('Failed to refresh token', e)\n        return { error: 'unexpected' }\n    }\n}\n\ntype SetActiveOrgResponse =\n    | {\n          user: User\n          accessToken: string\n          error: undefined\n      }\n    | {\n          error: 'not_in_org'\n      }\n\nasync function apiPostSetActiveOrg(orgId: string): Promise<SetActiveOrgResponse> {\n    try {\n        const queryParams = new URLSearchParams({ active_org_id: orgId }).toString()\n        const url = `/api/auth/set-active-org?${queryParams}`\n        const userInfoResponse = await fetch(url, {\n            method: 'POST',\n            headers: {\n                'Content-Type': 'application/json',\n            },\n            credentials: 'include',\n        })\n\n        if (userInfoResponse.ok) {\n            const { userinfo, accessToken, impersonatorUserId, activeOrgId } = await userInfoResponse.json()\n            const user = new User({\n                userId: userinfo.user_id,\n                email: userinfo.email,\n                emailConfirmed: userinfo.email_confirmed,\n                hasPassword: userinfo.has_password,\n                username: userinfo.username,\n                firstName: userinfo.first_name,\n                lastName: userinfo.last_name,\n                pictureUrl: userinfo.picture_url,\n                orgIdToOrgMemberInfo: toOrgIdToOrgMemberInfo(userinfo.org_id_to_org_info),\n                activeOrgId,\n                mfaEnabled: userinfo.mfa_enabled,\n                canCreateOrgs: userinfo.can_create_orgs,\n                updatePasswordRequired: userinfo.update_password_required,\n                createdAt: userinfo.created_at,\n                lastActiveAt: userinfo.last_active_at,\n                properties: userinfo.properties,\n                impersonatorUserId,\n            })\n\n            return { user, accessToken, error: undefined }\n        } else if (userInfoResponse.status === 401) {\n            return { error: 'not_in_org' }\n        } else {\n            console.info('Failed to set active org', userInfoResponse)\n        }\n    } catch (e) {\n        console.info('Failed to set active org', e)\n    }\n    throw new Error('Failed to set active org')\n}\n\nconst encodeBase64 = (str: string) => {\n    const encode = window ? window.btoa : btoa\n    return encode(str)\n}\n\nconst addReturnToPath = (url: string, returnToPath?: string) => {\n    if (!returnToPath) {\n        return url\n    }\n\n    let qs = new URLSearchParams()\n    qs.set('rt', encodeBase64(returnToPath))\n    if (url.includes('?')) {\n        return `${url}&${qs.toString()}`\n    } else {\n        return `${url}?${qs.toString()}`\n    }\n}\n","export function hasWindow(): boolean {\n    return typeof window !== 'undefined'\n}\n\nexport const currentTimeSecs = (): number => {\n    return Math.floor(Date.now() / 1000)\n}\n\nexport function isEqual(a: any, b: any): boolean {\n    if (typeof a !== typeof b) {\n        return false\n    } else if (a === null || b === null) {\n        return a === b\n    }\n\n    if (Array.isArray(a) !== Array.isArray(b)) {\n        return false\n    }\n\n    if (Array.isArray(a)) {\n        const aArray = a as any[]\n        const bArray = b as any[]\n        if (aArray.length !== bArray.length) {\n            return false\n        }\n\n        for (let i = 0; i < aArray.length; i++) {\n            if (!isEqual(aArray[i], bArray[i])) {\n                return false\n            }\n        }\n\n        return true\n    }\n\n    if (typeof a === 'object') {\n        const aKeys = Object.keys(a)\n        const bKeys = Object.keys(b)\n        if (aKeys.length !== bKeys.length) {\n            return false\n        }\n\n        for (const key of aKeys) {\n            if (!isEqual(a[key], b[key])) {\n                return false\n            }\n        }\n\n        return true\n    } else {\n        return a === b\n    }\n}\n","'use client'\n\nimport { useContext } from 'react'\nimport { AuthContext } from './AuthProvider'\nimport { OrgIdToOrgMemberInfo, OrgMemberInfo } from '../user'\n\nexport class User {\n    public userId: string\n    public email: string\n    public emailConfirmed: boolean\n    public hasPassword: boolean\n\n    public username?: string\n    public firstName?: string\n    public lastName?: string\n    public pictureUrl?: string\n\n    public orgIdToOrgMemberInfo?: OrgIdToOrgMemberInfo\n    public activeOrgId?: string\n\n    public mfaEnabled: boolean\n    public canCreateOrgs: boolean\n    public updatePasswordRequired: boolean\n\n    public createdAt: number\n    public lastActiveAt: number\n\n    public properties?: { [key: string]: unknown }\n\n    public legacyUserId?: string\n    public impersonatorUserId?: string\n\n    constructor({\n        userId,\n        email,\n        emailConfirmed,\n        hasPassword,\n        username,\n        firstName,\n        lastName,\n        pictureUrl,\n        orgIdToOrgMemberInfo,\n        activeOrgId,\n        mfaEnabled,\n        canCreateOrgs,\n        updatePasswordRequired,\n        createdAt,\n        lastActiveAt,\n        legacyUserId,\n        properties,\n        impersonatorUserId,\n    }: {\n        userId: string\n        email: string\n        emailConfirmed: boolean\n        hasPassword: boolean\n        username?: string\n        firstName?: string\n        lastName?: string\n        pictureUrl?: string\n        orgIdToOrgMemberInfo?: OrgIdToOrgMemberInfo\n        activeOrgId?: string\n        mfaEnabled: boolean\n        canCreateOrgs: boolean\n        updatePasswordRequired: boolean\n        createdAt: number\n        lastActiveAt: number\n        legacyUserId?: string\n        properties?: { [key: string]: unknown }\n        impersonatorUserId?: string\n    }) {\n        this.userId = userId\n        this.email = email\n        this.emailConfirmed = emailConfirmed\n        this.hasPassword = hasPassword\n        this.username = username\n        this.firstName = firstName\n        this.lastName = lastName\n        this.pictureUrl = pictureUrl\n        this.orgIdToOrgMemberInfo = orgIdToOrgMemberInfo\n        this.activeOrgId = activeOrgId\n        this.mfaEnabled = mfaEnabled\n        this.canCreateOrgs = canCreateOrgs\n        this.updatePasswordRequired = updatePasswordRequired\n        this.createdAt = createdAt\n        this.lastActiveAt = lastActiveAt\n        this.legacyUserId = legacyUserId\n        this.properties = properties\n        this.impersonatorUserId = impersonatorUserId\n    }\n\n    public getActiveOrg(): OrgMemberInfo | undefined {\n        if (!this.activeOrgId) {\n            return undefined\n        }\n        return this.getOrg(this.activeOrgId)\n    }\n\n    public getActiveOrgId(): string | undefined {\n        return this.activeOrgId\n    }\n\n    public getOrg(orgId: string): OrgMemberInfo | undefined {\n        return this.orgIdToOrgMemberInfo?.[orgId]\n    }\n\n    public getOrgByName(orgName: string): OrgMemberInfo | undefined {\n        if (!this.orgIdToOrgMemberInfo) {\n            return undefined\n        }\n\n        const urlSafeOrgName = orgName.toLowerCase().replace(/ /g, '-')\n        for (const orgId in this.orgIdToOrgMemberInfo) {\n            const orgMemberInfo = this.orgIdToOrgMemberInfo[orgId]\n            if (orgMemberInfo.urlSafeOrgName === urlSafeOrgName) {\n                return orgMemberInfo\n            }\n        }\n\n        return undefined\n    }\n\n    public getOrgs(): OrgMemberInfo[] {\n        if (!this.orgIdToOrgMemberInfo) {\n            return []\n        }\n\n        return Object.values(this.orgIdToOrgMemberInfo)\n    }\n\n    public isImpersonating(): boolean {\n        return !!this.impersonatorUserId\n    }\n}\n\nexport type UseUserLoading = {\n    loading: true\n    isLoggedIn: never\n    user: never\n    accessToken: never\n    setActiveOrg: never\n}\n\nexport type UseUserLoggedIn = {\n    loading: false\n    isLoggedIn: true\n    user: User\n    accessToken: string\n    setActiveOrg: (orgId: string) => Promise<User | undefined>\n}\n\nexport type UseUserNotLoggedIn = {\n    loading: false\n    isLoggedIn: false\n    user: undefined\n    accessToken: undefined\n    setActiveOrg: never\n}\n\nexport type UseUser = UseUserLoading | UseUserLoggedIn | UseUserNotLoggedIn\n\nexport function useUser(): UseUser {\n    const context = useContext(AuthContext)\n    if (context === undefined) {\n        throw new Error('useUser must be used within an AuthProvider')\n    }\n\n    const { loading, userAndAccessToken } = context\n    if (loading) {\n        return {\n            loading: true,\n            isLoggedIn: undefined as never,\n            user: undefined as never,\n            accessToken: undefined as never,\n            setActiveOrg: undefined as never,\n        }\n    } else if (userAndAccessToken.user) {\n        return {\n            loading: false,\n            isLoggedIn: true,\n            user: userAndAccessToken.user,\n            accessToken: userAndAccessToken.accessToken,\n            setActiveOrg: context.setActiveOrg,\n        }\n    } else {\n        return {\n            loading: false,\n            isLoggedIn: false,\n            user: undefined,\n            accessToken: undefined,\n            setActiveOrg: undefined as never,\n        }\n    }\n}\n","import { useContext } from 'react'\nimport { AuthContext } from './AuthProvider'\n\nexport function useHostedPageUrls() {\n    const context = useContext(AuthContext)\n    if (context === undefined) {\n        throw new Error('useHostedPageUrls must be used within an AuthProvider')\n    }\n    const {\n        getLoginPageUrl,\n        getSignupPageUrl,\n        getAccountPageUrl,\n        getOrgPageUrl,\n        getOrgSettingsPageUrl,\n        getCreateOrgPageUrl,\n        getSetupSAMLPageUrl,\n    } = context\n    return {\n        getLoginPageUrl,\n        getSignupPageUrl,\n        getAccountPageUrl,\n        getOrgPageUrl,\n        getOrgSettingsPageUrl,\n        getCreateOrgPageUrl,\n        getSetupSAMLPageUrl,\n    }\n}\n","import { useContext } from \"react\"\nimport { AuthContext } from \"./AuthProvider\"\n\nexport function useLogoutFunction() {\n    const context = useContext(AuthContext)\n    if (context === undefined) {\n        throw new Error(\"useLogoutFunction must be used within an AuthProvider\")\n    }\n    const { logout } = context\n    return logout\n}\n","import React, { useContext, useEffect } from 'react'\nimport { AuthContext } from './AuthProvider'\n\nexport function useRedirectFunctions() {\n    const context = useContext(AuthContext)\n    if (context === undefined) {\n        throw new Error('useRedirectFunctions must be used within an AuthProvider')\n    }\n    const {\n        redirectToAccountPage,\n        redirectToSignupPage,\n        redirectToLoginPage,\n        redirectToOrgPage,\n        redirectToOrgSettingsPage,\n        redirectToCreateOrgPage,\n        redirectToSetupSAMLPage,\n        redirectToOrgApiKeysPage,\n    } = context\n    return {\n        redirectToSignupPage,\n        redirectToLoginPage,\n        redirectToAccountPage,\n        redirectToOrgPage,\n        redirectToOrgSettingsPage,\n        redirectToCreateOrgPage,\n        redirectToSetupSAMLPage,\n        redirectToOrgApiKeysPage,\n    }\n}\n\nexport interface RedirectProps {\n    children?: React.ReactNode\n}\n\nexport function RedirectToSignup({ children }: RedirectProps) {\n    const { redirectToSignupPage } = useRedirectFunctions()\n\n    useEffect(() => {\n        redirectToSignupPage()\n    }, [])\n\n    return <>{children}</>\n}\n\nexport function RedirectToLogin({ children }: RedirectProps) {\n    const { redirectToLoginPage } = useRedirectFunctions()\n    useEffect(() => {\n        redirectToLoginPage()\n    }, [])\n    return <>{children}</>\n}\n","import { useContext } from \"react\"\nimport { AuthContext } from \"./AuthProvider\"\n\nexport function useRefreshAuth() {\n    const context = useContext(AuthContext)\n    if (context === undefined) {\n        throw new Error(\"useRefreshAuth must be used within an AuthProvider\")\n    }\n    const { refreshAuthInfo } = context\n    return refreshAuthInfo\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;;ACgHO,SAAS,cAAc,YAA+C;AACzE,MAAI,CAAC,YAAY;AACb,WAAO,EAAE,aAAa,UAAU;AAAA,EACpC;AAEA,UAAQ,WAAW,cAAc;AAAA,IAC7B,KAAK;AACD,aAAO,EAAE,aAAa,WAAW;AAAA,IACrC,KAAK;AACD,aAAO,EAAE,aAAa,aAAa;AAAA,IACvC,KAAK;AACD,aAAO,EAAE,aAAa,cAAc,UAAU,WAAW,SAAS;AAAA,IACtE,KAAK;AACD,aAAO,EAAE,aAAa,0BAA0B;AAAA,IACpD,KAAK;AACD,aAAO,EAAE,aAAa,YAAY,UAAU,WAAW,UAAU,OAAO,WAAW,OAAO;AAAA,IAC9F,KAAK;AACD,aAAO,EAAE,aAAa,gBAAgB;AAAA,IAC1C,KAAK;AACD,aAAO,EAAE,aAAa,6BAA6B;AAAA,IACvD;AACI,aAAO,EAAE,aAAa,UAAU;AAAA,EACxC;AACJ;;;ACrIO,IAAM,gBAAN,MAAoB;AAAA,EAmBvB,YACI,QACA,OACA,sBACA,WACA,UACA,UACA,cACA,oBACA,YACA,aACA,aACF;AACE,SAAK,SAAS;AAEd,SAAK,cAAc;AACnB,SAAK,uBAAuB;AAE5B,SAAK,QAAQ;AACb,SAAK,YAAY;AACjB,SAAK,WAAW;AAChB,SAAK,WAAW;AAEhB,SAAK,eAAe;AACpB,SAAK,qBAAqB;AAE1B,SAAK,aAAa;AAClB,SAAK,cAAc;AAAA,EACvB;AAAA,EAEO,eAA0C;AAC7C,QAAI,CAAC,KAAK,eAAe,CAAC,KAAK,sBAAsB;AACjD,aAAO;AAAA,IACX;AAEA,WAAO,KAAK,qBAAqB,KAAK,WAAW;AAAA,EACrD;AAAA,EAEO,iBAAqC;AACxC,WAAO,KAAK;AAAA,EAChB;AAAA,EAEO,OAAO,OAA0C;AACpD,QAAI,CAAC,KAAK,sBAAsB;AAC5B,aAAO;AAAA,IACX;AAEA,WAAO,KAAK,qBAAqB,KAAK;AAAA,EAC1C;AAAA,EAEO,aAAa,SAA4C;AAC5D,QAAI,CAAC,KAAK,sBAAsB;AAC5B,aAAO;AAAA,IACX;AAEA,UAAM,iBAAiB,QAAQ,YAAY,EAAE,QAAQ,MAAM,GAAG;AAC9D,eAAW,SAAS,KAAK,sBAAsB;AAC3C,YAAM,gBAAgB,KAAK,qBAAqB,KAAK;AACrD,UAAI,cAAc,mBAAmB,gBAAgB;AACjD,eAAO;AAAA,MACX;AAAA,IACJ;AAEA,WAAO;AAAA,EACX;AAAA,EAEO,UAA2B;AAC9B,QAAI,CAAC,KAAK,sBAAsB;AAC5B,aAAO,CAAC;AAAA,IACZ;AAEA,WAAO,OAAO,OAAO,KAAK,oBAAoB;AAAA,EAClD;AAAA,EAEO,kBAA2B;AAC9B,WAAO,CAAC,CAAC,KAAK;AAAA,EAClB;AAAA,EAEA,OAAc,SAAS,MAA6B;AAChD,UAAM,MAAM,KAAK,MAAM,IAAI;AAC3B,UAAM,uBAA6C,CAAC;AACpD,eAAW,SAAS,IAAI,sBAAsB;AAC1C,2BAAqB,KAAK,IAAI,cAAc,SAAS,KAAK,UAAU,IAAI,qBAAqB,KAAK,CAAC,CAAC;AAAA,IACxG;AACA,WAAO,IAAI;AAAA,MACP,IAAI;AAAA,MACJ,IAAI;AAAA,MACJ;AAAA,MACA,IAAI;AAAA,MACJ,IAAI;AAAA,MACJ,IAAI;AAAA,MACJ,IAAI;AAAA,MACJ,IAAI;AAAA,MACJ,IAAI;AAAA,MACJ,IAAI;AAAA,MACJ,IAAI;AAAA,IACR;AAAA,EACJ;AAAA,EAEA,OAAc,eAAe,SAAsC;AAC/D,QAAI;AACJ,QAAI;AAEJ,QAAI,QAAQ,iBAAiB;AACzB,oBAAc,QAAQ,gBAAgB;AACtC,6BAAuB,uBAAuB,EAAE,CAAC,WAAW,GAAG,QAAQ,gBAAgB,CAAC;AAAA,IAC5F,OAAO;AACH,oBAAc;AACd,6BAAuB,uBAAuB,QAAQ,yBAAyB;AAAA,IACnF;AAEA,UAAM,cAAc,cAAc,QAAQ,YAAY;AAEtD,WAAO,IAAI;AAAA,MACP,QAAQ;AAAA,MACR,QAAQ;AAAA,MACR;AAAA,MACA,QAAQ;AAAA,MACR,QAAQ;AAAA,MACR,QAAQ;AAAA,MACR,QAAQ;AAAA,MACR,QAAQ;AAAA,MACR,QAAQ;AAAA,MACR;AAAA,MACA;AAAA,IACJ;AAAA,EACJ;AACJ;AAWO,IAAM,gBAAN,MAAoB;AAAA,EAYvB,YACI,OACA,SACA,aACA,gBACA,kBACA,mCACA,iBACA,kBACA,6BACF;AACE,SAAK,QAAQ;AACb,SAAK,UAAU;AACf,SAAK,cAAc;AACnB,SAAK,iBAAiB;AACtB,SAAK,mBAAmB;AAExB,SAAK,mBAAmB;AACxB,SAAK,oCAAoC;AACzC,SAAK,kBAAkB;AACvB,SAAK,8BAA8B;AAAA,EACvC;AAAA;AAAA,EAIO,OAAO,MAAuB;AACjC,QAAI,KAAK,qBAAqB,8BAA4B;AACtD,aAAO,KAAK,qBAAqB,QAAQ,KAAK,4BAA4B,SAAS,IAAI;AAAA,IAC3F,OAAO;AACH,aAAO,KAAK,qBAAqB;AAAA,IACrC;AAAA,EACJ;AAAA,EAEO,cAAc,MAAuB;AACxC,QAAI,KAAK,qBAAqB,8BAA4B;AACtD,aAAO,KAAK,qBAAqB,QAAQ,KAAK,4BAA4B,SAAS,IAAI;AAAA,IAC3F,OAAO;AACH,aAAO,KAAK,kCAAkC,SAAS,IAAI;AAAA,IAC/D;AAAA,EACJ;AAAA,EAEO,cAAc,YAA6B;AAC9C,WAAO,KAAK,gBAAgB,SAAS,UAAU;AAAA,EACnD;AAAA,EAEO,kBAAkB,aAAgC;AACrD,WAAO,YAAY,MAAM,CAAC,eAAe,KAAK,cAAc,UAAU,CAAC;AAAA,EAC3E;AAAA,EAEA,OAAc,SAAS,MAA6B;AAChD,UAAM,MAAM,KAAK,MAAM,IAAI;AAC3B,WAAO,IAAI;AAAA,MACP,IAAI;AAAA,MACJ,IAAI;AAAA,MACJ,IAAI;AAAA,MACJ,IAAI;AAAA,MACJ,IAAI;AAAA,MACJ,IAAI;AAAA,MACJ,IAAI;AAAA,MACJ,IAAI;AAAA,MACJ,IAAI;AAAA,IACR;AAAA,EACJ;AAAA;AAAA,EAIA,IAAI,eAAuB;AACvB,WAAO,KAAK;AAAA,EAChB;AAAA,EAEA,IAAI,gBAA0B;AAC1B,QAAI,KAAK,qBAAqB,8BAA4B;AACtD,aAAO,KAAK,4BAA4B,OAAO,KAAK,gBAAgB;AAAA,IACxE,OAAO;AACH,aAAO,CAAC,KAAK,gBAAgB;AAAA,IACjC;AAAA,EACJ;AAAA,EAEA,IAAI,gCAA0C;AAC1C,QAAI,KAAK,qBAAqB,8BAA4B;AACtD,aAAO,KAAK,4BAA4B,OAAO,KAAK,gBAAgB;AAAA,IACxE,OAAO;AACH,aAAO,KAAK;AAAA,IAChB;AAAA,EACJ;AAAA,EAEA,IAAI,cAAwB;AACxB,WAAO,KAAK;AAAA,EAChB;AACJ;AAsCO,SAAS,uBAAuB,YAEF;AACjC,MAAI,eAAe,QAAW;AAC1B,WAAO;AAAA,EACX;AACA,QAAM,YAAkC,CAAC;AAEzC,aAAW,OAAO,OAAO,KAAK,UAAU,GAAG;AACvC,UAAM,iBAAiB,WAAW,GAAG;AACrC,QAAI,gBAAgB;AAChB,gBAAU,GAAG,IAAI,IAAI;AAAA,QACjB,eAAe;AAAA,QACf,eAAe;AAAA,QACf,eAAe;AAAA,QACf,eAAe;AAAA,QACf,eAAe;AAAA,QACf,eAAe;AAAA,QACf,eAAe;AAAA,QACf,eAAe;AAAA,QACf,eAAe;AAAA,MACnB;AAAA,IACJ;AAAA,EACJ;AAEA,SAAO;AACX;;;AClUA,IAAAA,gBAA0D;AAC1D,wBAA0B;;;ACHnB,SAAS,YAAqB;AACjC,SAAO,OAAO,WAAW;AAC7B;AAEO,IAAM,kBAAkB,MAAc;AACzC,SAAO,KAAK,MAAM,KAAK,IAAI,IAAI,GAAI;AACvC;AAEO,SAAS,QAAQ,GAAQ,GAAiB;AAC7C,MAAI,OAAO,MAAM,OAAO,GAAG;AACvB,WAAO;AAAA,EACX,WAAW,MAAM,QAAQ,MAAM,MAAM;AACjC,WAAO,MAAM;AAAA,EACjB;AAEA,MAAI,MAAM,QAAQ,CAAC,MAAM,MAAM,QAAQ,CAAC,GAAG;AACvC,WAAO;AAAA,EACX;AAEA,MAAI,MAAM,QAAQ,CAAC,GAAG;AAClB,UAAM,SAAS;AACf,UAAM,SAAS;AACf,QAAI,OAAO,WAAW,OAAO,QAAQ;AACjC,aAAO;AAAA,IACX;AAEA,aAAS,IAAI,GAAG,IAAI,OAAO,QAAQ,KAAK;AACpC,UAAI,CAAC,QAAQ,OAAO,CAAC,GAAG,OAAO,CAAC,CAAC,GAAG;AAChC,eAAO;AAAA,MACX;AAAA,IACJ;AAEA,WAAO;AAAA,EACX;AAEA,MAAI,OAAO,MAAM,UAAU;AACvB,UAAM,QAAQ,OAAO,KAAK,CAAC;AAC3B,UAAM,QAAQ,OAAO,KAAK,CAAC;AAC3B,QAAI,MAAM,WAAW,MAAM,QAAQ;AAC/B,aAAO;AAAA,IACX;AAEA,eAAW,OAAO,OAAO;AACrB,UAAI,CAAC,QAAQ,EAAE,GAAG,GAAG,EAAE,GAAG,CAAC,GAAG;AAC1B,eAAO;AAAA,MACX;AAAA,IACJ;AAEA,WAAO;AAAA,EACX,OAAO;AACH,WAAO,MAAM;AAAA,EACjB;AACJ;;;AClDA,mBAA2B;AAIpB,IAAM,OAAN,MAAW;AAAA,EA0Bd,YAAY;AAAA,IACR;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACJ,GAmBG;AACC,SAAK,SAAS;AACd,SAAK,QAAQ;AACb,SAAK,iBAAiB;AACtB,SAAK,cAAc;AACnB,SAAK,WAAW;AAChB,SAAK,YAAY;AACjB,SAAK,WAAW;AAChB,SAAK,aAAa;AAClB,SAAK,uBAAuB;AAC5B,SAAK,cAAc;AACnB,SAAK,aAAa;AAClB,SAAK,gBAAgB;AACrB,SAAK,yBAAyB;AAC9B,SAAK,YAAY;AACjB,SAAK,eAAe;AACpB,SAAK,eAAe;AACpB,SAAK,aAAa;AAClB,SAAK,qBAAqB;AAAA,EAC9B;AAAA,EAEO,eAA0C;AAC7C,QAAI,CAAC,KAAK,aAAa;AACnB,aAAO;AAAA,IACX;AACA,WAAO,KAAK,OAAO,KAAK,WAAW;AAAA,EACvC;AAAA,EAEO,iBAAqC;AACxC,WAAO,KAAK;AAAA,EAChB;AAAA,EAEO,OAAO,OAA0C;AAtG5D;AAuGQ,YAAO,UAAK,yBAAL,mBAA4B;AAAA,EACvC;AAAA,EAEO,aAAa,SAA4C;AAC5D,QAAI,CAAC,KAAK,sBAAsB;AAC5B,aAAO;AAAA,IACX;AAEA,UAAM,iBAAiB,QAAQ,YAAY,EAAE,QAAQ,MAAM,GAAG;AAC9D,eAAW,SAAS,KAAK,sBAAsB;AAC3C,YAAM,gBAAgB,KAAK,qBAAqB,KAAK;AACrD,UAAI,cAAc,mBAAmB,gBAAgB;AACjD,eAAO;AAAA,MACX;AAAA,IACJ;AAEA,WAAO;AAAA,EACX;AAAA,EAEO,UAA2B;AAC9B,QAAI,CAAC,KAAK,sBAAsB;AAC5B,aAAO,CAAC;AAAA,IACZ;AAEA,WAAO,OAAO,OAAO,KAAK,oBAAoB;AAAA,EAClD;AAAA,EAEO,kBAA2B;AAC9B,WAAO,CAAC,CAAC,KAAK;AAAA,EAClB;AACJ;AA4BO,SAAS,UAAmB;AAC/B,QAAM,cAAU,yBAAW,WAAW;AACtC,MAAI,YAAY,QAAW;AACvB,UAAM,IAAI,MAAM,6CAA6C;AAAA,EACjE;AAEA,QAAM,EAAE,SAAS,mBAAmB,IAAI;AACxC,MAAI,SAAS;AACT,WAAO;AAAA,MACH,SAAS;AAAA,MACT,YAAY;AAAA,MACZ,MAAM;AAAA,MACN,aAAa;AAAA,MACb,cAAc;AAAA,IAClB;AAAA,EACJ,WAAW,mBAAmB,MAAM;AAChC,WAAO;AAAA,MACH,SAAS;AAAA,MACT,YAAY;AAAA,MACZ,MAAM,mBAAmB;AAAA,MACzB,aAAa,mBAAmB;AAAA,MAChC,cAAc,QAAQ;AAAA,IAC1B;AAAA,EACJ,OAAO;AACH,WAAO;AAAA,MACH,SAAS;AAAA,MACT,YAAY;AAAA,MACZ,MAAM;AAAA,MACN,aAAa;AAAA,MACb,cAAc;AAAA,IAClB;AAAA,EACJ;AACJ;;;AFjJA,IAAM,qCAAqC;AAUpC,IAAM,cAAc,cAAAC,QAAM,cAA6C,MAAS;AAqBvF,IAAM,mBAAmB;AAAA,EACrB,SAAS;AAAA,EACT,oBAAoB;AAAA,IAChB,MAAM;AAAA,IACN,aAAa;AAAA,EACjB;AAAA,EACA,oBAAoB;AACxB;AAYA,SAAS,iBAAiB,QAAmB,QAAoC;AAC7E,QAAM,6BAA6B,iCAAK,OAAO,OAAZ,EAAkB,cAAc,OAAU;AAC7E,QAAM,kCAAkC,iCAAK,OAAO,mBAAmB,OAA/B,EAAqC,cAAc,OAAU;AACrG,QAAM,qBAAqB,CAAC,OAAO,WAAW,CAAC,QAAQ,4BAA4B,+BAA+B;AAElH,MAAI,CAAC,OAAO,MAAM;AACd,WAAO;AAAA,MACH,SAAS;AAAA,MACT,oBAAoB;AAAA,QAChB,MAAM;AAAA,QACN,aAAa;AAAA,MACjB;AAAA,MACA;AAAA,IACJ;AAAA,EACJ,WAAW,OAAO,SAAS;AACvB,WAAO;AAAA,MACH,SAAS;AAAA,MACT,oBAAoB;AAAA,QAChB,MAAM,OAAO;AAAA,QACb,aAAa,OAAO;AAAA,MACxB;AAAA,MACA;AAAA,IACJ;AAAA,EACJ,OAAO;AACH,WAAO;AAAA,MACH,SAAS;AAAA,MACT,oBAAoB;AAAA,QAChB,MAAM,OAAO;AAAA,QACb,aAAa,OAAO;AAAA,MACxB;AAAA,MACA;AAAA,IACJ;AAAA,EACJ;AACJ;AAEO,IAAM,eAAe,CAAC,UAA6B;AArI1D;AAsII,QAAM,CAAC,WAAW,aAAa,QAAI,0BAAW,kBAAkB,gBAAgB;AAChF,QAAM,CAAC,aAAa,cAAc,IAAI,cAAAA,QAAM,SAAiB,CAAC;AAC9D,QAAM,aAAS,6BAAU;AACzB,QAAM,sBAAqB,WAAM,uBAAN,YAA4B;AAEvD,QAAM,eAAW;AAAA,IACb,CAAC,WAA4B;AACzB,oBAAc,MAAM;AACpB,qBAAe,gBAAgB,CAAC;AAAA,IACpC;AAAA,IACA,CAAC,eAAe,cAAc;AAAA,EAClC;AAEA,QAAM,oBAAgB;AAAA,IAClB,CAACC,iBAAwB;AApJjC,UAAAC;AAqJY,YAAM,2BAA0BA,MAAA,MAAM,4BAAN,OAAAA,MAAiC;AACjE,aAAO,gBAAgB,IAAID,gBAAe;AAAA,IAC9C;AAAA,IACA,CAAC,MAAM,uBAAuB;AAAA,EAClC;AAGA,+BAAU,MAAM;AACZ,QAAI,sBAAsB,UAAU,oBAAoB;AACpD,aAAO,QAAQ;AAAA,IACnB;AAAA,EACJ,GAAG,CAAC,UAAU,oBAAoB,oBAAoB,MAAM,CAAC;AAG7D,+BAAU,MAAM;AACZ,QAAI,YAAY;AAEhB,aAAeE,mBAAkB;AAAA;AAC7B,cAAM,SAAS,MAAM,eAAe;AACpC,YAAI,CAAC,aAAa,CAAC,OAAO,OAAO;AAC7B,mBAAS,MAAM;AAAA,QACnB;AAAA,MACJ;AAAA;AAEA,IAAAA,iBAAgB;AAChB,WAAO,MAAM;AACT,kBAAY;AAAA,IAChB;AAAA,EACJ,GAAG,CAAC,CAAC;AAGL,+BAAU,MAAM;AACZ,QAAI,YAAY;AAEhB,aAAeA,mBAAkB;AAAA;AAC7B,YAAI,CAAC,cAAc,WAAW,GAAG;AAC7B;AAAA,QACJ;AAEA,cAAM,SAAS,MAAM,eAAe;AACpC,YAAI,CAAC,aAAa,CAAC,OAAO,OAAO;AAC7B,mBAAS,MAAM;AAAA,QACnB;AAAA,MACJ;AAAA;AAEA,UAAM,WAAW,YAAYA,kBAAiB,IAAI,KAAK,GAAI;AAC3D,WAAO,MAAM;AACT,kBAAY;AACZ,oBAAc,QAAQ;AAAA,IAC1B;AAAA,EACJ,GAAG,CAAC,WAAW,CAAC;AAEhB,QAAM,gCAA4B,2BAAY,MAAY;AACtD,QAAI,CAAC,cAAc,WAAW,GAAG;AAC7B;AAAA,IACJ;AAEA,UAAM,SAAS,MAAM,eAAe;AACpC,QAAI,CAAC,OAAO,OAAO;AACf,eAAS,MAAM;AAAA,IACnB;AAAA,EACJ,IAAG,CAAC,WAAW,CAAC;AAGhB,+BAAU,MAAM;AACZ,QAAI,UAAU,GAAG;AACb,aAAO,iBAAiB,UAAU,yBAAyB;AAG3D,UAAI,MAAM,mBAAmB,OAAO;AAChC,eAAO,iBAAiB,SAAS,yBAAyB;AAAA,MAC9D;AAAA,IACJ;AAEA,WAAO,MAAM;AACT,UAAI,UAAU,GAAG;AACb,eAAO,oBAAoB,UAAU,yBAAyB;AAC9D,eAAO,oBAAoB,SAAS,yBAAyB;AAAA,MACjE;AAAA,IACJ;AAAA,EACJ,GAAG,CAAC,MAAM,gBAAgB,yBAAyB,CAAC;AAEpD,QAAM,aAAS,2BAAY,MAAY;AACnC,UAAM,MAAM,oBAAoB;AAAA,MAC5B,QAAQ;AAAA,MACR,SAAS;AAAA,QACL,gBAAgB;AAAA,MACpB;AAAA,MACA,aAAa;AAAA,IACjB,CAAC;AACD,aAAS,EAAE,MAAM,QAAW,aAAa,OAAU,CAAC;AAAA,EACxD,IAAG,CAAC,QAAQ,CAAC;AAEb,QAAM,mBAAmB,CAAC,UAAkB,cAAuB,gBAAyC;AACxG,QAAI,KAAK,IAAI,gBAAgB;AAC7B,QAAI,MAAM;AAEV,QAAI,aAAa;AACb,aAAO,QAAQ,WAAW,EAAE,QAAQ,CAAC,CAAC,KAAKC,MAAK,MAAM;AAClD,WAAG,IAAI,KAAKA,MAAK;AAAA,MACrB,CAAC;AAAA,IACL;AAEA,QAAI,cAAc;AACd,SAAG,IAAI,kBAAkB,YAAY;AAAA,IACzC;AAEA,QAAI,GAAG,SAAS,GAAG;AACf,aAAO,IAAI,GAAG,SAAS;AAAA,IAC3B;AAEA,WAAO;AAAA,EACX;AAEA,QAAM,kBAAkB,CAAC,SAAkC;AACvD,WAAO,iBAAiB,mBAAmB,6BAAM,uBAAuB,6BAAM,yBAAyB;AAAA,EAC3G;AAEA,QAAM,mBAAmB,CAAC,SAAmC;AACzD,WAAO,iBAAiB,oBAAoB,6BAAM,wBAAwB,6BAAM,yBAAyB;AAAA,EAC7G;AACA,QAAM,wBAAoB;AAAA,IACtB,CAAC,SAA2B;AACxB,aAAO,gBAAgB,GAAG,MAAM,mBAAmB,6BAAM,iBAAiB;AAAA,IAC9E;AAAA,IACA,CAAC,MAAM,OAAO;AAAA,EAClB;AACA,QAAM,oBAAgB;AAAA,IAClB,CAAC,OAAgB,SAA2B;AACxC,UAAI,OAAO;AACP,eAAO,gBAAgB,GAAG,MAAM,kBAAkB,SAAS,6BAAM,iBAAiB;AAAA,MACtF,OAAO;AACH,eAAO,gBAAgB,GAAG,MAAM,eAAe,6BAAM,iBAAiB;AAAA,MAC1E;AAAA,IACJ;AAAA,IACA,CAAC,MAAM,OAAO;AAAA,EAClB;AACA,QAAM,4BAAwB;AAAA,IAC1B,CAAC,OAAgB,SAA2B;AACxC,UAAI,OAAO;AACP,eAAO,gBAAgB,GAAG,MAAM,wBAAwB,SAAS,6BAAM,iBAAiB;AAAA,MAC5F,OAAO;AACH,eAAO,gBAAgB,GAAG,MAAM,wBAAwB,6BAAM,iBAAiB;AAAA,MACnF;AAAA,IACJ;AAAA,IACA,CAAC,MAAM,OAAO;AAAA,EAClB;AACA,QAAM,0BAAsB;AAAA,IACxB,CAAC,SAA2B;AACxB,aAAO,gBAAgB,GAAG,MAAM,sBAAsB,6BAAM,iBAAiB;AAAA,IACjF;AAAA,IACA,CAAC,MAAM,OAAO;AAAA,EAClB;AAEA,QAAM,0BAAsB;AAAA,IACxB,CAAC,OAAe,SAA2B;AACvC,aAAO,gBAAgB,GAAG,MAAM,mBAAmB,SAAS,6BAAM,iBAAiB;AAAA,IACvF;AAAA,IACA,CAAC,MAAM,OAAO;AAAA,EAClB;AAEA,QAAM,2BAAuB;AAAA,IACzB,CAAC,OAAgB,SAA2B;AACxC,UAAI,OAAO;AACP,eAAO,gBAAgB,GAAG,MAAM,wBAAwB,SAAS,6BAAM,iBAAiB;AAAA,MAC5F,OAAO;AACH,eAAO,gBAAgB,GAAG,MAAM,wBAAwB,6BAAM,iBAAiB;AAAA,MACnF;AAAA,IACJ;AAAA,IACA,CAAC,MAAM,OAAO;AAAA,EAClB;AAEA,QAAM,aAAa,CAAC,QAAgB;AAChC,WAAO,SAAS,OAAO;AAAA,EAC3B;AAEA,QAAM,sBAAsB,CAAC,SAAkC,WAAW,gBAAgB,IAAI,CAAC;AAC/F,QAAM,uBAAuB,CAAC,SAAmC,WAAW,iBAAiB,IAAI,CAAC;AAClG,QAAM,wBAAwB,CAAC,SAA2B,WAAW,kBAAkB,IAAI,CAAC;AAC5F,QAAM,oBAAoB,CAAC,OAAgB,SAA2B,WAAW,cAAc,OAAO,IAAI,CAAC;AAC3G,QAAM,4BAA4B,CAAC,OAAgB,SAC/C,WAAW,sBAAsB,OAAO,IAAI,CAAC;AACjD,QAAM,0BAA0B,CAAC,SAA2B,WAAW,oBAAoB,IAAI,CAAC;AAChG,QAAM,0BAA0B,CAAC,OAAe,SAC5C,WAAW,oBAAoB,OAAO,IAAI,CAAC;AAC/C,QAAM,2BAA2B,CAAC,OAAgB,SAC9C,WAAW,qBAAqB,OAAO,IAAI,CAAC;AAEhD,QAAM,mBAAe;AAAA,IACjB,CAAO,UAAkB;AACrB,YAAM,SAAS,MAAM,oBAAoB,KAAK;AAC9C,UAAI,OAAO,UAAU,cAAc;AAC/B,eAAO;AAAA,MACX,OAAO;AACH,iBAAS,MAAM;AACf,eAAO,OAAO;AAAA,MAClB;AAAA,IACJ;AAAA,IACA,CAAC,QAAQ;AAAA,EACb;AAEA,QAAM,sBAAkB,2BAAY,MAAY;AAC5C,UAAM,SAAS,MAAM,eAAe;AACpC,QAAI,OAAO,OAAO;AACd,YAAM,IAAI,MAAM,yBAAyB;AAAA,IAC7C,OAAO;AACH,eAAS,MAAM;AACf,aAAO,OAAO;AAAA,IAClB;AAAA,EACJ,IAAG,CAAC,QAAQ,CAAC;AAEb,QAAM,QAAQ;AAAA,IACV,SAAS,UAAU;AAAA,IACnB,oBAAoB,UAAU;AAAA,IAC9B;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACJ;AACA,SAAO,8BAAAJ,QAAA,cAAC,YAAY,UAAZ,EAAqB,SAAe,MAAM,QAAS;AAC/D;AAiBA,SAAe,iBAA4C;AAAA;AACvD,QAAI;AACA,YAAM,mBAAmB,MAAM,MAAM,sBAAsB;AAAA,QACvD,QAAQ;AAAA,QACR,SAAS;AAAA,UACL,gBAAgB;AAAA,QACpB;AAAA,QACA,aAAa;AAAA,MACjB,CAAC;AAED,UAAI,iBAAiB,IAAI;AACrB,cAAM,EAAE,UAAU,aAAa,oBAAoB,YAAY,IAAI,MAAM,iBAAiB,KAAK;AAC/F,cAAM,OAAO,IAAI,KAAK;AAAA,UAClB,QAAQ,SAAS;AAAA,UACjB,OAAO,SAAS;AAAA,UAChB,gBAAgB,SAAS;AAAA,UACzB,aAAa,SAAS;AAAA,UACtB,UAAU,SAAS;AAAA,UACnB,WAAW,SAAS;AAAA,UACpB,UAAU,SAAS;AAAA,UACnB,YAAY,SAAS;AAAA,UACrB,sBAAsB,uBAAuB,SAAS,kBAAkB;AAAA,UACxE;AAAA,UACA,YAAY,SAAS;AAAA,UACrB,eAAe,SAAS;AAAA,UACxB,wBAAwB,SAAS;AAAA,UACjC,WAAW,SAAS;AAAA,UACpB,cAAc,SAAS;AAAA,UACvB,YAAY,SAAS;AAAA,UACrB;AAAA,QACJ,CAAC;AAED,eAAO,EAAE,MAAM,aAAa,OAAO,OAAU;AAAA,MACjD,WAAW,iBAAiB,WAAW,KAAK;AACxC,eAAO,EAAE,MAAM,QAAW,aAAa,QAAW,OAAO,OAAU;AAAA,MACvE,OAAO;AACH,gBAAQ,KAAK,2BAA2B,gBAAgB;AACxD,eAAO,EAAE,OAAO,aAAa;AAAA,MACjC;AAAA,IACJ,SAAS,GAAP;AACE,cAAQ,KAAK,2BAA2B,CAAC;AACzC,aAAO,EAAE,OAAO,aAAa;AAAA,IACjC;AAAA,EACJ;AAAA;AAYA,SAAe,oBAAoB,OAA8C;AAAA;AAC7E,QAAI;AACA,YAAM,cAAc,IAAI,gBAAgB,EAAE,eAAe,MAAM,CAAC,EAAE,SAAS;AAC3E,YAAM,MAAM,4BAA4B;AACxC,YAAM,mBAAmB,MAAM,MAAM,KAAK;AAAA,QACtC,QAAQ;AAAA,QACR,SAAS;AAAA,UACL,gBAAgB;AAAA,QACpB;AAAA,QACA,aAAa;AAAA,MACjB,CAAC;AAED,UAAI,iBAAiB,IAAI;AACrB,cAAM,EAAE,UAAU,aAAa,oBAAoB,YAAY,IAAI,MAAM,iBAAiB,KAAK;AAC/F,cAAM,OAAO,IAAI,KAAK;AAAA,UAClB,QAAQ,SAAS;AAAA,UACjB,OAAO,SAAS;AAAA,UAChB,gBAAgB,SAAS;AAAA,UACzB,aAAa,SAAS;AAAA,UACtB,UAAU,SAAS;AAAA,UACnB,WAAW,SAAS;AAAA,UACpB,UAAU,SAAS;AAAA,UACnB,YAAY,SAAS;AAAA,UACrB,sBAAsB,uBAAuB,SAAS,kBAAkB;AAAA,UACxE;AAAA,UACA,YAAY,SAAS;AAAA,UACrB,eAAe,SAAS;AAAA,UACxB,wBAAwB,SAAS;AAAA,UACjC,WAAW,SAAS;AAAA,UACpB,cAAc,SAAS;AAAA,UACvB,YAAY,SAAS;AAAA,UACrB;AAAA,QACJ,CAAC;AAED,eAAO,EAAE,MAAM,aAAa,OAAO,OAAU;AAAA,MACjD,WAAW,iBAAiB,WAAW,KAAK;AACxC,eAAO,EAAE,OAAO,aAAa;AAAA,MACjC,OAAO;AACH,gBAAQ,KAAK,4BAA4B,gBAAgB;AAAA,MAC7D;AAAA,IACJ,SAAS,GAAP;AACE,cAAQ,KAAK,4BAA4B,CAAC;AAAA,IAC9C;AACA,UAAM,IAAI,MAAM,0BAA0B;AAAA,EAC9C;AAAA;AAEA,IAAM,eAAe,CAAC,QAAgB;AAClC,QAAM,SAAS,SAAS,OAAO,OAAO;AACtC,SAAO,OAAO,GAAG;AACrB;AAEA,IAAM,kBAAkB,CAAC,KAAa,iBAA0B;AAC5D,MAAI,CAAC,cAAc;AACf,WAAO;AAAA,EACX;AAEA,MAAI,KAAK,IAAI,gBAAgB;AAC7B,KAAG,IAAI,MAAM,aAAa,YAAY,CAAC;AACvC,MAAI,IAAI,SAAS,GAAG,GAAG;AACnB,WAAO,GAAG,OAAO,GAAG,SAAS;AAAA,EACjC,OAAO;AACH,WAAO,GAAG,OAAO,GAAG,SAAS;AAAA,EACjC;AACJ;;;AGvgBA,IAAAK,gBAA2B;AAGpB,SAAS,oBAAoB;AAChC,QAAM,cAAU,0BAAW,WAAW;AACtC,MAAI,YAAY,QAAW;AACvB,UAAM,IAAI,MAAM,uDAAuD;AAAA,EAC3E;AACA,QAAM;AAAA,IACF;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACJ,IAAI;AACJ,SAAO;AAAA,IACH;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACJ;AACJ;;;AC1BA,IAAAC,gBAA2B;AAGpB,SAAS,oBAAoB;AAChC,QAAM,cAAU,0BAAW,WAAW;AACtC,MAAI,YAAY,QAAW;AACvB,UAAM,IAAI,MAAM,uDAAuD;AAAA,EAC3E;AACA,QAAM,EAAE,OAAO,IAAI;AACnB,SAAO;AACX;;;ACVA,IAAAC,gBAA6C;AAGtC,SAAS,uBAAuB;AACnC,QAAM,cAAU,0BAAW,WAAW;AACtC,MAAI,YAAY,QAAW;AACvB,UAAM,IAAI,MAAM,0DAA0D;AAAA,EAC9E;AACA,QAAM;AAAA,IACF;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACJ,IAAI;AACJ,SAAO;AAAA,IACH;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACJ;AACJ;AAMO,SAAS,iBAAiB,EAAE,SAAS,GAAkB;AAC1D,QAAM,EAAE,qBAAqB,IAAI,qBAAqB;AAEtD,+BAAU,MAAM;AACZ,yBAAqB;AAAA,EACzB,GAAG,CAAC,CAAC;AAEL,SAAO,8BAAAC,QAAA,4BAAAA,QAAA,gBAAG,QAAS;AACvB;AAEO,SAAS,gBAAgB,EAAE,SAAS,GAAkB;AACzD,QAAM,EAAE,oBAAoB,IAAI,qBAAqB;AACrD,+BAAU,MAAM;AACZ,wBAAoB;AAAA,EACxB,GAAG,CAAC,CAAC;AACL,SAAO,8BAAAA,QAAA,4BAAAA,QAAA,gBAAG,QAAS;AACvB;;;AClDA,IAAAC,gBAA2B;AAGpB,SAAS,iBAAiB;AAC7B,QAAM,cAAU,0BAAW,WAAW;AACtC,MAAI,YAAY,QAAW;AACvB,UAAM,IAAI,MAAM,oDAAoD;AAAA,EACxE;AACA,QAAM,EAAE,gBAAgB,IAAI;AAC5B,SAAO;AACX;","names":["import_react","React","lastRefresh","_a","refreshAuthInfo","value","import_react","import_react","import_react","React","import_react"]}
+{"version":3,"sources":["../../src/client/index.ts","../../src/loginMethod.ts","../../src/user.ts","../../src/client/AuthProvider.tsx","../../src/client/utils.ts","../../src/client/useUser.tsx","../../src/client/useHostedPageUrls.tsx","../../src/client/useLogoutFunction.ts","../../src/client/useRedirectFunctions.tsx","../../src/client/useRefreshAuth.ts"],"sourcesContent":["export type {OrgIdToOrgMemberInfo} from \"../user\"\nexport {UserFromToken, OrgMemberInfo} from \"../user\"\nexport {AuthProvider} from \"./AuthProvider\"\nexport type {AuthProviderProps, RedirectToLoginOptions, RedirectToSignupOptions} from \"./AuthProvider\"\nexport {useUser, User} from \"./useUser\"\nexport type {UseUser, UseUserLoading, UseUserLoggedIn, UseUserNotLoggedIn} from \"./useUser\"\nexport {useHostedPageUrls} from \"./useHostedPageUrls\"\nexport {useLogoutFunction} from \"./useLogoutFunction\"\nexport {useRedirectFunctions, RedirectToLogin, RedirectToSignup} from \"./useRedirectFunctions\"\nexport type {RedirectProps} from \"./useRedirectFunctions\"\nexport {useRefreshAuth} from \"./useRefreshAuth\"","export enum SocialLoginProvider {\n    Google = 'Google',\n    GitHub = 'GitHub',\n    Microsoft = 'Microsoft',\n    Slack = 'Slack',\n    LinkedIn = 'LinkedIn',\n    Salesforce = 'Salesforce',\n    Xero = 'Xero',\n    QuickBooksOnline = 'QuickBooks Online',\n}\n\nexport enum SamlLoginProvider {\n    Google = 'Google',\n    Rippling = 'Rippling',\n    OneLogin = 'OneLogin',\n    JumpCloud = 'JumpCloud',\n    Okta = 'Okta',\n    Azure = 'Azure',\n    Duo = 'Duo',\n    Generic = 'Generic',\n}\n\ntype InternalPasswordLoginMethod = {\n    login_method: 'password'\n}\n\ntype InternalMagicLinkLoginMethod = {\n    login_method: 'magic_link'\n}\n\ntype InternalSocialSsoLoginMethod = {\n    login_method: 'social_sso'\n    provider: SocialLoginProvider\n}\n\ntype InternalEmailConfirmationLinkLoginMethod = {\n    login_method: 'email_confirmation_link'\n}\n\ntype InternalSamlSsoLoginMethod = {\n    login_method: 'saml_sso'\n    provider: SamlLoginProvider\n    org_id: string\n}\n\ntype InternalImpersonationLoginMethod = {\n    login_method: 'impersonation'\n}\n\ntype InternalGeneratedFromBackendApiLoginMethod = {\n    login_method: 'generated_from_backend_api'\n}\n\ntype InternalUnknownLoginMethod = {\n    login_method: 'unknown'\n}\n\nexport type InternalLoginMethod =\n    | InternalPasswordLoginMethod\n    | InternalMagicLinkLoginMethod\n    | InternalSocialSsoLoginMethod\n    | InternalEmailConfirmationLinkLoginMethod\n    | InternalSamlSsoLoginMethod\n    | InternalImpersonationLoginMethod\n    | InternalGeneratedFromBackendApiLoginMethod\n    | InternalUnknownLoginMethod\n\ntype PasswordLoginMethod = {\n    loginMethod: 'password'\n}\n\ntype MagicLinkLoginMethod = {\n    loginMethod: 'magic_link'\n}\n\ntype SocialSsoLoginMethod = {\n    loginMethod: 'social_sso'\n    provider: SocialLoginProvider\n}\n\ntype EmailConfirmationLinkLoginMethod = {\n    loginMethod: 'email_confirmation_link'\n}\n\ntype SamlSsoLoginMethod = {\n    loginMethod: 'saml_sso'\n    provider: SamlLoginProvider\n    orgId: string\n}\n\ntype ImpersonationLoginMethod = {\n    loginMethod: 'impersonation'\n}\n\ntype GeneratedFromBackendApiLoginMethod = {\n    loginMethod: 'generated_from_backend_api'\n}\n\ntype UnknownLoginMethod = {\n    loginMethod: 'unknown'\n}\n\nexport type LoginMethod =\n    | PasswordLoginMethod\n    | MagicLinkLoginMethod\n    | SocialSsoLoginMethod\n    | EmailConfirmationLinkLoginMethod\n    | SamlSsoLoginMethod\n    | ImpersonationLoginMethod\n    | GeneratedFromBackendApiLoginMethod\n    | UnknownLoginMethod\n\nexport function toLoginMethod(snake_case?: InternalLoginMethod): LoginMethod {\n    if (!snake_case) {\n        return { loginMethod: 'unknown' }\n    }\n\n    switch (snake_case.login_method) {\n        case 'password':\n            return { loginMethod: 'password' }\n        case 'magic_link':\n            return { loginMethod: 'magic_link' }\n        case 'social_sso':\n            return { loginMethod: 'social_sso', provider: snake_case.provider }\n        case 'email_confirmation_link':\n            return { loginMethod: 'email_confirmation_link' }\n        case 'saml_sso':\n            return { loginMethod: 'saml_sso', provider: snake_case.provider, orgId: snake_case.org_id }\n        case 'impersonation':\n            return { loginMethod: 'impersonation' }\n        case 'generated_from_backend_api':\n            return { loginMethod: 'generated_from_backend_api' }\n        default:\n            return { loginMethod: 'unknown' }\n    }\n}\n","import { InternalLoginMethod, LoginMethod, toLoginMethod } from './loginMethod'\n\nexport class UserFromToken {\n    public userId: string\n\n    public activeOrgId?: string\n    public orgIdToOrgMemberInfo?: OrgIdToOrgMemberInfo\n\n    // Metadata about the user\n    public email: string\n    public firstName?: string\n    public lastName?: string\n    public username?: string\n    public properties?: { [key: string]: unknown }\n    public loginMethod?: LoginMethod\n\n    // If you used our migration APIs to migrate this user from a different system,\n    //   this is their original ID from that system.\n    public legacyUserId?: string\n    public impersonatorUserId?: string\n\n    constructor(\n        userId: string,\n        email: string,\n        orgIdToOrgMemberInfo?: OrgIdToOrgMemberInfo,\n        firstName?: string,\n        lastName?: string,\n        username?: string,\n        legacyUserId?: string,\n        impersonatorUserId?: string,\n        properties?: { [key: string]: unknown },\n        activeOrgId?: string,\n        loginMethod?: LoginMethod\n    ) {\n        this.userId = userId\n\n        this.activeOrgId = activeOrgId\n        this.orgIdToOrgMemberInfo = orgIdToOrgMemberInfo\n\n        this.email = email\n        this.firstName = firstName\n        this.lastName = lastName\n        this.username = username\n\n        this.legacyUserId = legacyUserId\n        this.impersonatorUserId = impersonatorUserId\n\n        this.properties = properties\n        this.loginMethod = loginMethod\n    }\n\n    public getActiveOrg(): OrgMemberInfo | undefined {\n        if (!this.activeOrgId || !this.orgIdToOrgMemberInfo) {\n            return undefined\n        }\n\n        return this.orgIdToOrgMemberInfo[this.activeOrgId]\n    }\n\n    public getActiveOrgId(): string | undefined {\n        return this.activeOrgId\n    }\n\n    public getOrg(orgId: string): OrgMemberInfo | undefined {\n        if (!this.orgIdToOrgMemberInfo) {\n            return undefined\n        }\n\n        return this.orgIdToOrgMemberInfo[orgId]\n    }\n\n    public getOrgByName(orgName: string): OrgMemberInfo | undefined {\n        if (!this.orgIdToOrgMemberInfo) {\n            return undefined\n        }\n\n        const urlSafeOrgName = orgName.toLowerCase().replace(/ /g, '-')\n        for (const orgId in this.orgIdToOrgMemberInfo) {\n            const orgMemberInfo = this.orgIdToOrgMemberInfo[orgId]\n            if (orgMemberInfo.urlSafeOrgName === urlSafeOrgName) {\n                return orgMemberInfo\n            }\n        }\n\n        return undefined\n    }\n\n    public getOrgs(): OrgMemberInfo[] {\n        if (!this.orgIdToOrgMemberInfo) {\n            return []\n        }\n\n        return Object.values(this.orgIdToOrgMemberInfo)\n    }\n\n    public isImpersonating(): boolean {\n        return !!this.impersonatorUserId\n    }\n\n    public static fromJSON(json: string): UserFromToken {\n        const obj = JSON.parse(json)\n        const orgIdToOrgMemberInfo: OrgIdToOrgMemberInfo = {}\n        for (const orgId in obj.orgIdToOrgMemberInfo) {\n            orgIdToOrgMemberInfo[orgId] = OrgMemberInfo.fromJSON(JSON.stringify(obj.orgIdToOrgMemberInfo[orgId]))\n        }\n        return new UserFromToken(\n            obj.userId,\n            obj.email,\n            orgIdToOrgMemberInfo,\n            obj.firstName,\n            obj.lastName,\n            obj.username,\n            obj.legacyUserId,\n            obj.impersonatorUserId,\n            obj.properties,\n            obj.activeOrgId,\n            obj.loginMethod\n        )\n    }\n\n    public static fromJwtPayload(payload: InternalUser): UserFromToken {\n        let activeOrgId: string | undefined\n        let orgIdToOrgMemberInfo: OrgIdToOrgMemberInfo | undefined\n\n        if (payload.org_member_info) {\n            activeOrgId = payload.org_member_info.org_id\n            orgIdToOrgMemberInfo = toOrgIdToOrgMemberInfo({ [activeOrgId]: payload.org_member_info })\n        } else {\n            activeOrgId = undefined\n            orgIdToOrgMemberInfo = toOrgIdToOrgMemberInfo(payload.org_id_to_org_member_info)\n        }\n\n        const loginMethod = toLoginMethod(payload.login_method)\n\n        return new UserFromToken(\n            payload.user_id,\n            payload.email,\n            orgIdToOrgMemberInfo,\n            payload.first_name,\n            payload.last_name,\n            payload.username,\n            payload.legacy_user_id,\n            payload.impersonator_user_id,\n            payload.properties,\n            activeOrgId,\n            loginMethod\n        )\n    }\n}\n\nexport type OrgIdToOrgMemberInfo = {\n    [orgId: string]: OrgMemberInfo\n}\n\nexport enum OrgRoleStructure {\n    SingleRole = \"single_role_in_hierarchy\",\n    MultiRole = \"multi_role\",\n}\n\nexport class OrgMemberInfo {\n    public orgId: string\n    public orgName: string\n    public orgMetadata: { [key: string]: any }\n    public urlSafeOrgName: string\n    public orgRoleStructure: OrgRoleStructure\n\n    public userAssignedRole: string\n    public userInheritedRolesPlusCurrentRole: string[]\n    public userPermissions: string[]\n    public userAssignedAdditionalRoles: string[]\n\n    constructor(\n        orgId: string,\n        orgName: string,\n        orgMetadata: { [key: string]: any },\n        urlSafeOrgName: string,\n        userAssignedRole: string,\n        userInheritedRolesPlusCurrentRole: string[],\n        userPermissions: string[],\n        orgRoleStructure: OrgRoleStructure,\n        userAssignedAdditionalRoles: string[]\n    ) {\n        this.orgId = orgId\n        this.orgName = orgName\n        this.orgMetadata = orgMetadata\n        this.urlSafeOrgName = urlSafeOrgName\n        this.orgRoleStructure = orgRoleStructure\n\n        this.userAssignedRole = userAssignedRole\n        this.userInheritedRolesPlusCurrentRole = userInheritedRolesPlusCurrentRole\n        this.userPermissions = userPermissions\n        this.userAssignedAdditionalRoles = userAssignedAdditionalRoles\n    }\n\n    // validation methods\n\n    public isRole(role: string): boolean {\n        if (this.orgRoleStructure === OrgRoleStructure.MultiRole) {\n            return this.userAssignedRole === role || this.userAssignedAdditionalRoles.includes(role)\n        } else {\n            return this.userAssignedRole === role\n        }\n    }\n\n    public isAtLeastRole(role: string): boolean {\n        if (this.orgRoleStructure === OrgRoleStructure.MultiRole) {\n            return this.userAssignedRole === role || this.userAssignedAdditionalRoles.includes(role)\n        } else {\n            return this.userInheritedRolesPlusCurrentRole.includes(role)\n        }\n    }\n\n    public hasPermission(permission: string): boolean {\n        return this.userPermissions.includes(permission)\n    }\n\n    public hasAllPermissions(permissions: string[]): boolean {\n        return permissions.every((permission) => this.hasPermission(permission))\n    }\n\n    public static fromJSON(json: string): OrgMemberInfo {\n        const obj = JSON.parse(json)\n        return new OrgMemberInfo(\n            obj.orgId,\n            obj.orgName,\n            obj.orgMetadata,\n            obj.urlSafeOrgName,\n            obj.userAssignedRole,\n            obj.userInheritedRolesPlusCurrentRole,\n            obj.userPermissions,\n            obj.orgRoleStructure,\n            obj.userAssignedAdditionalRoles\n        )\n    }\n\n    // getters for the private fields\n\n    get assignedRole(): string {\n        return this.userAssignedRole\n    }\n\n    get assignedRoles(): string[] {\n        if (this.orgRoleStructure === OrgRoleStructure.MultiRole) {\n            return this.userAssignedAdditionalRoles.concat(this.userAssignedRole)\n        } else {\n            return [this.userAssignedRole]\n        }\n    }\n\n    get inheritedRolesPlusCurrentRole(): string[] {\n        if (this.orgRoleStructure === OrgRoleStructure.MultiRole) {\n            return this.userAssignedAdditionalRoles.concat(this.userAssignedRole)\n        } else {\n            return this.userInheritedRolesPlusCurrentRole\n        }\n    }\n\n    get permissions(): string[] {\n        return this.userPermissions\n    }\n}\n\n// These Internal types exist since the server returns snake case, but typescript/javascript\n// convention is camelCase.\nexport type InternalOrgMemberInfo = {\n    org_id: string\n    org_name: string\n    org_metadata: { [key: string]: any }\n    url_safe_org_name: string\n    org_role_structure: OrgRoleStructure\n    user_role: string\n    inherited_user_roles_plus_current_role: string[]\n    user_permissions: string[]\n    additional_roles: string[]\n}\n\nexport type InternalUser = {\n    user_id: string\n\n    org_member_info?: InternalOrgMemberInfo\n    org_id_to_org_member_info?: { [org_id: string]: InternalOrgMemberInfo }\n\n    email: string\n    first_name?: string\n    last_name?: string\n    username?: string\n    properties?: { [key: string]: unknown }\n    login_method?: InternalLoginMethod\n\n    // If you used our migration APIs to migrate this user from a different system, this is their original ID from that system.\n    legacy_user_id?: string\n    impersonator_user_id?: string\n}\n\nexport function toUser(snake_case: InternalUser): UserFromToken {\n    return UserFromToken.fromJwtPayload(snake_case)\n}\n\nexport function toOrgIdToOrgMemberInfo(snake_case?: {\n    [org_id: string]: InternalOrgMemberInfo\n}): OrgIdToOrgMemberInfo | undefined {\n    if (snake_case === undefined) {\n        return undefined\n    }\n    const camelCase: OrgIdToOrgMemberInfo = {}\n\n    for (const key of Object.keys(snake_case)) {\n        const snakeCaseValue = snake_case[key]\n        if (snakeCaseValue) {\n            camelCase[key] = new OrgMemberInfo(\n                snakeCaseValue.org_id,\n                snakeCaseValue.org_name,\n                snakeCaseValue.org_metadata,\n                snakeCaseValue.url_safe_org_name,\n                snakeCaseValue.user_role,\n                snakeCaseValue.inherited_user_roles_plus_current_role,\n                snakeCaseValue.user_permissions,\n                snakeCaseValue.org_role_structure,\n                snakeCaseValue.additional_roles\n            )\n        }\n    }\n\n    return camelCase\n}\n","'use client'\n\nimport React, { useCallback, useEffect, useReducer } from 'react'\nimport { useRouter } from 'next/navigation'\nimport { currentTimeSecs, hasWindow, isEqual } from './utils'\nimport { User } from './useUser'\nimport { toOrgIdToOrgMemberInfo } from '../user'\n\nexport interface RedirectToSignupOptions {\n    postSignupRedirectPath?: string\n    userSignupQueryParameters?: Record<string, string>\n}\nexport interface RedirectToLoginOptions {\n    postLoginRedirectPath?: string\n    userSignupQueryParameters?: Record<string, string>\n}\nexport interface RedirectOptions {\n    redirectBackToUrl?: string\n}\n\ninterface InternalAuthState {\n    loading: boolean\n    userAndAccessToken: UserAndAccessToken\n\n    logout: () => Promise<void>\n\n    redirectToLoginPage: (opts?: RedirectToLoginOptions) => void\n    redirectToSignupPage: (opts?: RedirectToSignupOptions) => void\n    redirectToAccountPage: (opts?: RedirectOptions) => void\n    redirectToOrgPage: (orgId?: string, opts?: RedirectOptions) => void\n    redirectToOrgSettingsPage: (orgId?: string, opts?: RedirectOptions) => void\n    redirectToCreateOrgPage: (opts?: RedirectOptions) => void\n    redirectToSetupSAMLPage: (orgId: string, opts?: RedirectOptions) => void\n    redirectToOrgApiKeysPage: (orgId?: string, opts?: RedirectOptions) => void\n\n    getSignupPageUrl(opts?: RedirectToSignupOptions): string\n    getLoginPageUrl(opts?: RedirectToLoginOptions): string\n    getAccountPageUrl(opts?: RedirectOptions): string\n    getOrgPageUrl(orgId?: string, opts?: RedirectOptions): string\n    getOrgSettingsPageUrl(orgId?: string, opts?: RedirectOptions): string\n    getCreateOrgPageUrl(opts?: RedirectOptions): string\n    getSetupSAMLPageUrl(orgId: string, opts?: RedirectOptions): string\n    getOrgApiKeysPageUrl(orgId?: string, opts?: RedirectOptions): string\n\n    refreshAuthInfo: () => Promise<User | undefined>\n    setActiveOrg: (orgId: string) => Promise<User | undefined>\n}\n\nconst DEFAULT_MIN_SECONDS_BEFORE_REFRESH = 120\n\nexport type AuthProviderProps = {\n    authUrl: string\n    reloadOnAuthChange?: boolean\n    minSecondsBeforeRefresh?: number\n    children?: React.ReactNode\n    refreshOnFocus?: boolean\n}\n\nexport const AuthContext = React.createContext<InternalAuthState | undefined>(undefined)\n\ntype UserAndAccessToken =\n    | {\n          user: User\n          accessToken: string\n      }\n    | {\n          user: undefined\n          accessToken: undefined\n      }\n\ntype AuthState = {\n    loading: boolean\n    userAndAccessToken: UserAndAccessToken\n\n    // There's no good way to trigger server components to reload outside of router.refresh()\n    // This is our workaround until the app router has something better\n    authChangeDetected: boolean\n}\n\nconst initialAuthState = {\n    loading: true,\n    userAndAccessToken: {\n        user: undefined,\n        accessToken: undefined,\n    },\n    authChangeDetected: false,\n}\n\ntype AuthStateAction =\n    | {\n          user: User\n          accessToken: string\n      }\n    | {\n          user: undefined\n          accessToken: undefined\n      }\n\nfunction authStateReducer(_state: AuthState, action: AuthStateAction): AuthState {\n    const newUserForEqualityChecking = { ...action.user, lastActiveAt: undefined }\n    const existingUserForEqualityChecking = { ..._state.userAndAccessToken.user, lastActiveAt: undefined }\n    const authChangeDetected = !_state.loading && !isEqual(newUserForEqualityChecking, existingUserForEqualityChecking)\n\n    if (!action.user) {\n        return {\n            loading: false,\n            userAndAccessToken: {\n                user: undefined,\n                accessToken: undefined,\n            },\n            authChangeDetected,\n        }\n    } else if (_state.loading) {\n        return {\n            loading: false,\n            userAndAccessToken: {\n                user: action.user,\n                accessToken: action.accessToken,\n            },\n            authChangeDetected,\n        }\n    } else {\n        return {\n            loading: false,\n            userAndAccessToken: {\n                user: action.user,\n                accessToken: action.accessToken,\n            },\n            authChangeDetected,\n        }\n    }\n}\n\nexport const AuthProvider = (props: AuthProviderProps) => {\n    const [authState, dispatchInner] = useReducer(authStateReducer, initialAuthState)\n    const [lastRefresh, setLastRefresh] = React.useState<number>(0)\n    const router = useRouter()\n    const reloadOnAuthChange = props.reloadOnAuthChange ?? true\n\n    const dispatch = useCallback(\n        (action: AuthStateAction) => {\n            dispatchInner(action)\n            setLastRefresh(currentTimeSecs())\n        },\n        [dispatchInner, setLastRefresh]\n    )\n\n    const shouldRefresh = useCallback(\n        (lastRefresh: number) => {\n            const minSecondsBeforeRefresh = props.minSecondsBeforeRefresh ?? DEFAULT_MIN_SECONDS_BEFORE_REFRESH\n            return currentTimeSecs() - lastRefresh >= minSecondsBeforeRefresh\n        },\n        [props.minSecondsBeforeRefresh]\n    )\n\n    // This is because we don't have a good way to trigger server components to reload outside of router.refresh()\n    useEffect(() => {\n        if (reloadOnAuthChange && authState.authChangeDetected) {\n            router.refresh()\n        }\n    }, [authState.authChangeDetected, reloadOnAuthChange, router])\n\n    // Trigger an initial refresh\n    useEffect(() => {\n        let didCancel = false\n\n        async function refreshAuthInfo() {\n            const action = await apiGetUserInfo()\n            if (!didCancel && !action.error) {\n                dispatch(action)\n            }\n        }\n\n        refreshAuthInfo()\n        return () => {\n            didCancel = true\n        }\n    }, [])\n\n    // Periodically refresh the token\n    useEffect(() => {\n        let didCancel = false\n\n        async function refreshAuthInfo() {\n            if (!shouldRefresh(lastRefresh)) {\n                return\n            }\n\n            const action = await apiGetUserInfo()\n            if (!didCancel && !action.error) {\n                dispatch(action)\n            }\n        }\n\n        const interval = setInterval(refreshAuthInfo, 5 * 60 * 1000)\n        return () => {\n            didCancel = true\n            clearInterval(interval)\n        }\n    }, [lastRefresh])\n\n    const backgroundRefreshAuthInfo = useCallback(async () => {\n        if (!shouldRefresh(lastRefresh)) {\n            return\n        }\n\n        const action = await apiGetUserInfo()\n        if (!action.error) {\n            dispatch(action)\n        }\n    }, [lastRefresh])\n\n    // Set up online and focus event listeners\n    useEffect(() => {\n        if (hasWindow()) {\n            window.addEventListener('online', backgroundRefreshAuthInfo)\n\n            // Default for refreshOnFocus is true\n            if (props.refreshOnFocus !== false) {\n                window.addEventListener('focus', backgroundRefreshAuthInfo)\n            }\n        }\n\n        return () => {\n            if (hasWindow()) {\n                window.removeEventListener('online', backgroundRefreshAuthInfo)\n                window.removeEventListener('focus', backgroundRefreshAuthInfo)\n            }\n        }\n    }, [props.refreshOnFocus, backgroundRefreshAuthInfo])\n\n    const logout = useCallback(async () => {\n        await fetch('/api/auth/logout', {\n            method: 'POST',\n            headers: {\n                'Content-Type': 'application/json',\n            },\n            credentials: 'include',\n        })\n        dispatch({ user: undefined, accessToken: undefined })\n    }, [dispatch])\n\n    const buildAuthPageUrl = (basePath: string, redirectPath?: string, queryParams?: Record<string, string>) => {\n        let qs = new URLSearchParams()\n        let url = basePath\n\n        if (queryParams) {\n            Object.entries(queryParams).forEach(([key, value]) => {\n                qs.set(key, value)\n            })\n        }\n\n        if (redirectPath) {\n            qs.set('return_to_path', redirectPath)\n        }\n\n        if (qs.toString()) {\n            url += `?${qs.toString()}`\n        }\n\n        return url\n    }\n\n    const getLoginPageUrl = (opts?: RedirectToLoginOptions) => {\n        return buildAuthPageUrl('/api/auth/login', opts?.postLoginRedirectPath, opts?.userSignupQueryParameters)\n    }\n\n    const getSignupPageUrl = (opts?: RedirectToSignupOptions) => {\n        return buildAuthPageUrl('/api/auth/signup', opts?.postSignupRedirectPath, opts?.userSignupQueryParameters)\n    }\n    const getAccountPageUrl = useCallback(\n        (opts?: RedirectOptions) => {\n            return addReturnToPath(`${props.authUrl}/account`, opts?.redirectBackToUrl)\n        },\n        [props.authUrl]\n    )\n    const getOrgPageUrl = useCallback(\n        (orgId?: string, opts?: RedirectOptions) => {\n            if (orgId) {\n                return addReturnToPath(`${props.authUrl}/org?id=${orgId}`, opts?.redirectBackToUrl)\n            } else {\n                return addReturnToPath(`${props.authUrl}/org`, opts?.redirectBackToUrl)\n            }\n        },\n        [props.authUrl]\n    )\n    const getOrgSettingsPageUrl = useCallback(\n        (orgId?: string, opts?: RedirectOptions) => {\n            if (orgId) {\n                return addReturnToPath(`${props.authUrl}/org/settings/${orgId}`, opts?.redirectBackToUrl)\n            } else {\n                return addReturnToPath(`${props.authUrl}/org/settings`, opts?.redirectBackToUrl)\n            }\n        },\n        [props.authUrl]\n    )\n    const getCreateOrgPageUrl = useCallback(\n        (opts?: RedirectOptions) => {\n            return addReturnToPath(`${props.authUrl}/create_org`, opts?.redirectBackToUrl)\n        },\n        [props.authUrl]\n    )\n\n    const getSetupSAMLPageUrl = useCallback(\n        (orgId: string, opts?: RedirectOptions) => {\n            return addReturnToPath(`${props.authUrl}/saml?id=${orgId}`, opts?.redirectBackToUrl)\n        },\n        [props.authUrl]\n    )\n\n    const getOrgApiKeysPageUrl = useCallback(\n        (orgId?: string, opts?: RedirectOptions) => {\n            if (orgId) {\n                return addReturnToPath(`${props.authUrl}/org/api_keys/${orgId}`, opts?.redirectBackToUrl)\n            } else {\n                return addReturnToPath(`${props.authUrl}/org/api_keys`, opts?.redirectBackToUrl)\n            }\n        },\n        [props.authUrl]\n    )\n\n    const redirectTo = (url: string) => {\n        window.location.href = url\n    }\n\n    const redirectToLoginPage = (opts?: RedirectToLoginOptions) => redirectTo(getLoginPageUrl(opts))\n    const redirectToSignupPage = (opts?: RedirectToSignupOptions) => redirectTo(getSignupPageUrl(opts))\n    const redirectToAccountPage = (opts?: RedirectOptions) => redirectTo(getAccountPageUrl(opts))\n    const redirectToOrgPage = (orgId?: string, opts?: RedirectOptions) => redirectTo(getOrgPageUrl(orgId, opts))\n    const redirectToOrgSettingsPage = (orgId?: string, opts?: RedirectOptions) =>\n        redirectTo(getOrgSettingsPageUrl(orgId, opts))\n    const redirectToCreateOrgPage = (opts?: RedirectOptions) => redirectTo(getCreateOrgPageUrl(opts))\n    const redirectToSetupSAMLPage = (orgId: string, opts?: RedirectOptions) =>\n        redirectTo(getSetupSAMLPageUrl(orgId, opts))\n    const redirectToOrgApiKeysPage = (orgId?: string, opts?: RedirectOptions) =>\n        redirectTo(getOrgApiKeysPageUrl(orgId, opts))\n\n    const setActiveOrg = useCallback(\n        async (orgId: string) => {\n            const action = await apiPostSetActiveOrg(orgId)\n            if (action.error === 'not_in_org') {\n                return undefined\n            } else {\n                dispatch(action)\n                return action.user\n            }\n        },\n        [dispatch]\n    )\n\n    const refreshAuthInfo = useCallback(async () => {\n        const action = await apiGetUserInfo()\n        if (action.error) {\n            throw new Error('Failed to refresh token')\n        } else {\n            dispatch(action)\n            return action.user\n        }\n    }, [dispatch])\n\n    const value = {\n        loading: authState.loading,\n        userAndAccessToken: authState.userAndAccessToken,\n        logout,\n        redirectToLoginPage,\n        redirectToSignupPage,\n        redirectToAccountPage,\n        redirectToOrgPage,\n        redirectToOrgSettingsPage,\n        redirectToCreateOrgPage,\n        redirectToSetupSAMLPage,\n        redirectToOrgApiKeysPage,\n        getLoginPageUrl,\n        getSignupPageUrl,\n        getAccountPageUrl,\n        getOrgPageUrl,\n        getOrgSettingsPageUrl,\n        getCreateOrgPageUrl,\n        getOrgApiKeysPageUrl,\n        getSetupSAMLPageUrl,\n        refreshAuthInfo,\n        setActiveOrg,\n    }\n    return <AuthContext.Provider value={value}>{props.children}</AuthContext.Provider>\n}\n\ntype UserInfoResponse =\n    | {\n          error: undefined\n          user: User\n          accessToken: string\n      }\n    | {\n          error: undefined\n          user: undefined\n          accessToken: undefined\n      }\n    | {\n          error: 'unexpected'\n      }\n\nasync function apiGetUserInfo(): Promise<UserInfoResponse> {\n    try {\n        const userInfoResponse = await fetch('/api/auth/userinfo', {\n            method: 'GET',\n            headers: {\n                'Content-Type': 'application/json',\n            },\n            credentials: 'include',\n        })\n\n        if (userInfoResponse.ok) {\n            const { userinfo, accessToken, impersonatorUserId, activeOrgId } = await userInfoResponse.json()\n            const user = new User({\n                userId: userinfo.user_id,\n                email: userinfo.email,\n                emailConfirmed: userinfo.email_confirmed,\n                hasPassword: userinfo.has_password,\n                username: userinfo.username,\n                firstName: userinfo.first_name,\n                lastName: userinfo.last_name,\n                pictureUrl: userinfo.picture_url,\n                orgIdToOrgMemberInfo: toOrgIdToOrgMemberInfo(userinfo.org_id_to_org_info),\n                activeOrgId,\n                mfaEnabled: userinfo.mfa_enabled,\n                canCreateOrgs: userinfo.can_create_orgs,\n                updatePasswordRequired: userinfo.update_password_required,\n                createdAt: userinfo.created_at,\n                lastActiveAt: userinfo.last_active_at,\n                properties: userinfo.properties,\n                legacyUserId: userinfo.legacy_user_id,\n                impersonatorUserId,\n            })\n\n            return { user, accessToken, error: undefined }\n        } else if (userInfoResponse.status === 401) {\n            return { user: undefined, accessToken: undefined, error: undefined }\n        } else {\n            console.info('Failed to refresh token', userInfoResponse)\n            return { error: 'unexpected' }\n        }\n    } catch (e) {\n        console.info('Failed to refresh token', e)\n        return { error: 'unexpected' }\n    }\n}\n\ntype SetActiveOrgResponse =\n    | {\n          user: User\n          accessToken: string\n          error: undefined\n      }\n    | {\n          error: 'not_in_org'\n      }\n\nasync function apiPostSetActiveOrg(orgId: string): Promise<SetActiveOrgResponse> {\n    try {\n        const queryParams = new URLSearchParams({ active_org_id: orgId }).toString()\n        const url = `/api/auth/set-active-org?${queryParams}`\n        const userInfoResponse = await fetch(url, {\n            method: 'POST',\n            headers: {\n                'Content-Type': 'application/json',\n            },\n            credentials: 'include',\n        })\n\n        if (userInfoResponse.ok) {\n            const { userinfo, accessToken, impersonatorUserId, activeOrgId } = await userInfoResponse.json()\n            const user = new User({\n                userId: userinfo.user_id,\n                email: userinfo.email,\n                emailConfirmed: userinfo.email_confirmed,\n                hasPassword: userinfo.has_password,\n                username: userinfo.username,\n                firstName: userinfo.first_name,\n                lastName: userinfo.last_name,\n                pictureUrl: userinfo.picture_url,\n                orgIdToOrgMemberInfo: toOrgIdToOrgMemberInfo(userinfo.org_id_to_org_info),\n                activeOrgId,\n                mfaEnabled: userinfo.mfa_enabled,\n                canCreateOrgs: userinfo.can_create_orgs,\n                updatePasswordRequired: userinfo.update_password_required,\n                createdAt: userinfo.created_at,\n                lastActiveAt: userinfo.last_active_at,\n                properties: userinfo.properties,\n                impersonatorUserId,\n            })\n\n            return { user, accessToken, error: undefined }\n        } else if (userInfoResponse.status === 401) {\n            return { error: 'not_in_org' }\n        } else {\n            console.info('Failed to set active org', userInfoResponse)\n        }\n    } catch (e) {\n        console.info('Failed to set active org', e)\n    }\n    throw new Error('Failed to set active org')\n}\n\nconst encodeBase64 = (str: string) => {\n    const encode = window ? window.btoa : btoa\n    return encode(str)\n}\n\nconst addReturnToPath = (url: string, returnToPath?: string) => {\n    if (!returnToPath) {\n        return url\n    }\n\n    let qs = new URLSearchParams()\n    qs.set('rt', encodeBase64(returnToPath))\n    if (url.includes('?')) {\n        return `${url}&${qs.toString()}`\n    } else {\n        return `${url}?${qs.toString()}`\n    }\n}\n","export function hasWindow(): boolean {\n    return typeof window !== 'undefined'\n}\n\nexport const currentTimeSecs = (): number => {\n    return Math.floor(Date.now() / 1000)\n}\n\nexport function isEqual(a: any, b: any): boolean {\n    if (typeof a !== typeof b) {\n        return false\n    } else if (a === null || b === null) {\n        return a === b\n    }\n\n    if (Array.isArray(a) !== Array.isArray(b)) {\n        return false\n    }\n\n    if (Array.isArray(a)) {\n        const aArray = a as any[]\n        const bArray = b as any[]\n        if (aArray.length !== bArray.length) {\n            return false\n        }\n\n        for (let i = 0; i < aArray.length; i++) {\n            if (!isEqual(aArray[i], bArray[i])) {\n                return false\n            }\n        }\n\n        return true\n    }\n\n    if (typeof a === 'object') {\n        const aKeys = Object.keys(a)\n        const bKeys = Object.keys(b)\n        if (aKeys.length !== bKeys.length) {\n            return false\n        }\n\n        for (const key of aKeys) {\n            if (!isEqual(a[key], b[key])) {\n                return false\n            }\n        }\n\n        return true\n    } else {\n        return a === b\n    }\n}\n","'use client'\n\nimport { useContext } from 'react'\nimport { AuthContext } from './AuthProvider'\nimport { OrgIdToOrgMemberInfo, OrgMemberInfo } from '../user'\n\nexport class User {\n    public userId: string\n    public email: string\n    public emailConfirmed: boolean\n    public hasPassword: boolean\n\n    public username?: string\n    public firstName?: string\n    public lastName?: string\n    public pictureUrl?: string\n\n    public orgIdToOrgMemberInfo?: OrgIdToOrgMemberInfo\n    public activeOrgId?: string\n\n    public mfaEnabled: boolean\n    public canCreateOrgs: boolean\n    public updatePasswordRequired: boolean\n\n    public createdAt: number\n    public lastActiveAt: number\n\n    public properties?: { [key: string]: unknown }\n\n    public legacyUserId?: string\n    public impersonatorUserId?: string\n\n    constructor({\n        userId,\n        email,\n        emailConfirmed,\n        hasPassword,\n        username,\n        firstName,\n        lastName,\n        pictureUrl,\n        orgIdToOrgMemberInfo,\n        activeOrgId,\n        mfaEnabled,\n        canCreateOrgs,\n        updatePasswordRequired,\n        createdAt,\n        lastActiveAt,\n        legacyUserId,\n        properties,\n        impersonatorUserId,\n    }: {\n        userId: string\n        email: string\n        emailConfirmed: boolean\n        hasPassword: boolean\n        username?: string\n        firstName?: string\n        lastName?: string\n        pictureUrl?: string\n        orgIdToOrgMemberInfo?: OrgIdToOrgMemberInfo\n        activeOrgId?: string\n        mfaEnabled: boolean\n        canCreateOrgs: boolean\n        updatePasswordRequired: boolean\n        createdAt: number\n        lastActiveAt: number\n        legacyUserId?: string\n        properties?: { [key: string]: unknown }\n        impersonatorUserId?: string\n    }) {\n        this.userId = userId\n        this.email = email\n        this.emailConfirmed = emailConfirmed\n        this.hasPassword = hasPassword\n        this.username = username\n        this.firstName = firstName\n        this.lastName = lastName\n        this.pictureUrl = pictureUrl\n        this.orgIdToOrgMemberInfo = orgIdToOrgMemberInfo\n        this.activeOrgId = activeOrgId\n        this.mfaEnabled = mfaEnabled\n        this.canCreateOrgs = canCreateOrgs\n        this.updatePasswordRequired = updatePasswordRequired\n        this.createdAt = createdAt\n        this.lastActiveAt = lastActiveAt\n        this.legacyUserId = legacyUserId\n        this.properties = properties\n        this.impersonatorUserId = impersonatorUserId\n    }\n\n    public getActiveOrg(): OrgMemberInfo | undefined {\n        if (!this.activeOrgId) {\n            return undefined\n        }\n        return this.getOrg(this.activeOrgId)\n    }\n\n    public getActiveOrgId(): string | undefined {\n        return this.activeOrgId\n    }\n\n    public getOrg(orgId: string): OrgMemberInfo | undefined {\n        return this.orgIdToOrgMemberInfo?.[orgId]\n    }\n\n    public getOrgByName(orgName: string): OrgMemberInfo | undefined {\n        if (!this.orgIdToOrgMemberInfo) {\n            return undefined\n        }\n\n        const urlSafeOrgName = orgName.toLowerCase().replace(/ /g, '-')\n        for (const orgId in this.orgIdToOrgMemberInfo) {\n            const orgMemberInfo = this.orgIdToOrgMemberInfo[orgId]\n            if (orgMemberInfo.urlSafeOrgName === urlSafeOrgName) {\n                return orgMemberInfo\n            }\n        }\n\n        return undefined\n    }\n\n    public getOrgs(): OrgMemberInfo[] {\n        if (!this.orgIdToOrgMemberInfo) {\n            return []\n        }\n\n        return Object.values(this.orgIdToOrgMemberInfo)\n    }\n\n    public isImpersonating(): boolean {\n        return !!this.impersonatorUserId\n    }\n}\n\nexport type UseUserLoading = {\n    loading: true\n    isLoggedIn: never\n    user: never\n    accessToken: never\n    setActiveOrg: never\n}\n\nexport type UseUserLoggedIn = {\n    loading: false\n    isLoggedIn: true\n    user: User\n    accessToken: string\n    setActiveOrg: (orgId: string) => Promise<User | undefined>\n}\n\nexport type UseUserNotLoggedIn = {\n    loading: false\n    isLoggedIn: false\n    user: undefined\n    accessToken: undefined\n    setActiveOrg: never\n}\n\nexport type UseUser = UseUserLoading | UseUserLoggedIn | UseUserNotLoggedIn\n\nexport function useUser(): UseUser {\n    const context = useContext(AuthContext)\n    if (context === undefined) {\n        throw new Error('useUser must be used within an AuthProvider')\n    }\n\n    const { loading, userAndAccessToken } = context\n    if (loading) {\n        return {\n            loading: true,\n            isLoggedIn: undefined as never,\n            user: undefined as never,\n            accessToken: undefined as never,\n            setActiveOrg: undefined as never,\n        }\n    } else if (userAndAccessToken.user) {\n        return {\n            loading: false,\n            isLoggedIn: true,\n            user: userAndAccessToken.user,\n            accessToken: userAndAccessToken.accessToken,\n            setActiveOrg: context.setActiveOrg,\n        }\n    } else {\n        return {\n            loading: false,\n            isLoggedIn: false,\n            user: undefined,\n            accessToken: undefined,\n            setActiveOrg: undefined as never,\n        }\n    }\n}\n","import { useContext } from 'react'\nimport { AuthContext } from './AuthProvider'\n\nexport function useHostedPageUrls() {\n    const context = useContext(AuthContext)\n    if (context === undefined) {\n        throw new Error('useHostedPageUrls must be used within an AuthProvider')\n    }\n    const {\n        getLoginPageUrl,\n        getSignupPageUrl,\n        getAccountPageUrl,\n        getOrgPageUrl,\n        getOrgSettingsPageUrl,\n        getCreateOrgPageUrl,\n        getSetupSAMLPageUrl,\n    } = context\n    return {\n        getLoginPageUrl,\n        getSignupPageUrl,\n        getAccountPageUrl,\n        getOrgPageUrl,\n        getOrgSettingsPageUrl,\n        getCreateOrgPageUrl,\n        getSetupSAMLPageUrl,\n    }\n}\n","import { useContext } from \"react\"\nimport { AuthContext } from \"./AuthProvider\"\n\nexport function useLogoutFunction() {\n    const context = useContext(AuthContext)\n    if (context === undefined) {\n        throw new Error(\"useLogoutFunction must be used within an AuthProvider\")\n    }\n    const { logout } = context\n    return logout\n}\n","import React, { useContext, useEffect } from 'react'\nimport { AuthContext } from './AuthProvider'\n\nexport function useRedirectFunctions() {\n    const context = useContext(AuthContext)\n    if (context === undefined) {\n        throw new Error('useRedirectFunctions must be used within an AuthProvider')\n    }\n    const {\n        redirectToAccountPage,\n        redirectToSignupPage,\n        redirectToLoginPage,\n        redirectToOrgPage,\n        redirectToOrgSettingsPage,\n        redirectToCreateOrgPage,\n        redirectToSetupSAMLPage,\n        redirectToOrgApiKeysPage,\n    } = context\n    return {\n        redirectToSignupPage,\n        redirectToLoginPage,\n        redirectToAccountPage,\n        redirectToOrgPage,\n        redirectToOrgSettingsPage,\n        redirectToCreateOrgPage,\n        redirectToSetupSAMLPage,\n        redirectToOrgApiKeysPage,\n    }\n}\n\nexport interface RedirectProps {\n    children?: React.ReactNode\n}\n\nexport function RedirectToSignup({ children }: RedirectProps) {\n    const { redirectToSignupPage } = useRedirectFunctions()\n\n    useEffect(() => {\n        redirectToSignupPage()\n    }, [])\n\n    return <>{children}</>\n}\n\nexport function RedirectToLogin({ children }: RedirectProps) {\n    const { redirectToLoginPage } = useRedirectFunctions()\n    useEffect(() => {\n        redirectToLoginPage()\n    }, [])\n    return <>{children}</>\n}\n","import { useContext } from \"react\"\nimport { AuthContext } from \"./AuthProvider\"\n\nexport function useRefreshAuth() {\n    const context = useContext(AuthContext)\n    if (context === undefined) {\n        throw new Error(\"useRefreshAuth must be used within an AuthProvider\")\n    }\n    const { refreshAuthInfo } = context\n    return refreshAuthInfo\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;;ACgHO,SAAS,cAAc,YAA+C;AACzE,MAAI,CAAC,YAAY;AACb,WAAO,EAAE,aAAa,UAAU;AAAA,EACpC;AAEA,UAAQ,WAAW,cAAc;AAAA,IAC7B,KAAK;AACD,aAAO,EAAE,aAAa,WAAW;AAAA,IACrC,KAAK;AACD,aAAO,EAAE,aAAa,aAAa;AAAA,IACvC,KAAK;AACD,aAAO,EAAE,aAAa,cAAc,UAAU,WAAW,SAAS;AAAA,IACtE,KAAK;AACD,aAAO,EAAE,aAAa,0BAA0B;AAAA,IACpD,KAAK;AACD,aAAO,EAAE,aAAa,YAAY,UAAU,WAAW,UAAU,OAAO,WAAW,OAAO;AAAA,IAC9F,KAAK;AACD,aAAO,EAAE,aAAa,gBAAgB;AAAA,IAC1C,KAAK;AACD,aAAO,EAAE,aAAa,6BAA6B;AAAA,IACvD;AACI,aAAO,EAAE,aAAa,UAAU;AAAA,EACxC;AACJ;;;ACrIO,IAAM,gBAAN,MAAoB;AAAA,EAmBvB,YACI,QACA,OACA,sBACA,WACA,UACA,UACA,cACA,oBACA,YACA,aACA,aACF;AACE,SAAK,SAAS;AAEd,SAAK,cAAc;AACnB,SAAK,uBAAuB;AAE5B,SAAK,QAAQ;AACb,SAAK,YAAY;AACjB,SAAK,WAAW;AAChB,SAAK,WAAW;AAEhB,SAAK,eAAe;AACpB,SAAK,qBAAqB;AAE1B,SAAK,aAAa;AAClB,SAAK,cAAc;AAAA,EACvB;AAAA,EAEO,eAA0C;AAC7C,QAAI,CAAC,KAAK,eAAe,CAAC,KAAK,sBAAsB;AACjD,aAAO;AAAA,IACX;AAEA,WAAO,KAAK,qBAAqB,KAAK,WAAW;AAAA,EACrD;AAAA,EAEO,iBAAqC;AACxC,WAAO,KAAK;AAAA,EAChB;AAAA,EAEO,OAAO,OAA0C;AACpD,QAAI,CAAC,KAAK,sBAAsB;AAC5B,aAAO;AAAA,IACX;AAEA,WAAO,KAAK,qBAAqB,KAAK;AAAA,EAC1C;AAAA,EAEO,aAAa,SAA4C;AAC5D,QAAI,CAAC,KAAK,sBAAsB;AAC5B,aAAO;AAAA,IACX;AAEA,UAAM,iBAAiB,QAAQ,YAAY,EAAE,QAAQ,MAAM,GAAG;AAC9D,eAAW,SAAS,KAAK,sBAAsB;AAC3C,YAAM,gBAAgB,KAAK,qBAAqB,KAAK;AACrD,UAAI,cAAc,mBAAmB,gBAAgB;AACjD,eAAO;AAAA,MACX;AAAA,IACJ;AAEA,WAAO;AAAA,EACX;AAAA,EAEO,UAA2B;AAC9B,QAAI,CAAC,KAAK,sBAAsB;AAC5B,aAAO,CAAC;AAAA,IACZ;AAEA,WAAO,OAAO,OAAO,KAAK,oBAAoB;AAAA,EAClD;AAAA,EAEO,kBAA2B;AAC9B,WAAO,CAAC,CAAC,KAAK;AAAA,EAClB;AAAA,EAEA,OAAc,SAAS,MAA6B;AAChD,UAAM,MAAM,KAAK,MAAM,IAAI;AAC3B,UAAM,uBAA6C,CAAC;AACpD,eAAW,SAAS,IAAI,sBAAsB;AAC1C,2BAAqB,KAAK,IAAI,cAAc,SAAS,KAAK,UAAU,IAAI,qBAAqB,KAAK,CAAC,CAAC;AAAA,IACxG;AACA,WAAO,IAAI;AAAA,MACP,IAAI;AAAA,MACJ,IAAI;AAAA,MACJ;AAAA,MACA,IAAI;AAAA,MACJ,IAAI;AAAA,MACJ,IAAI;AAAA,MACJ,IAAI;AAAA,MACJ,IAAI;AAAA,MACJ,IAAI;AAAA,MACJ,IAAI;AAAA,MACJ,IAAI;AAAA,IACR;AAAA,EACJ;AAAA,EAEA,OAAc,eAAe,SAAsC;AAC/D,QAAI;AACJ,QAAI;AAEJ,QAAI,QAAQ,iBAAiB;AACzB,oBAAc,QAAQ,gBAAgB;AACtC,6BAAuB,uBAAuB,EAAE,CAAC,WAAW,GAAG,QAAQ,gBAAgB,CAAC;AAAA,IAC5F,OAAO;AACH,oBAAc;AACd,6BAAuB,uBAAuB,QAAQ,yBAAyB;AAAA,IACnF;AAEA,UAAM,cAAc,cAAc,QAAQ,YAAY;AAEtD,WAAO,IAAI;AAAA,MACP,QAAQ;AAAA,MACR,QAAQ;AAAA,MACR;AAAA,MACA,QAAQ;AAAA,MACR,QAAQ;AAAA,MACR,QAAQ;AAAA,MACR,QAAQ;AAAA,MACR,QAAQ;AAAA,MACR,QAAQ;AAAA,MACR;AAAA,MACA;AAAA,IACJ;AAAA,EACJ;AACJ;AAWO,IAAM,gBAAN,MAAoB;AAAA,EAYvB,YACI,OACA,SACA,aACA,gBACA,kBACA,mCACA,iBACA,kBACA,6BACF;AACE,SAAK,QAAQ;AACb,SAAK,UAAU;AACf,SAAK,cAAc;AACnB,SAAK,iBAAiB;AACtB,SAAK,mBAAmB;AAExB,SAAK,mBAAmB;AACxB,SAAK,oCAAoC;AACzC,SAAK,kBAAkB;AACvB,SAAK,8BAA8B;AAAA,EACvC;AAAA;AAAA,EAIO,OAAO,MAAuB;AACjC,QAAI,KAAK,qBAAqB,8BAA4B;AACtD,aAAO,KAAK,qBAAqB,QAAQ,KAAK,4BAA4B,SAAS,IAAI;AAAA,IAC3F,OAAO;AACH,aAAO,KAAK,qBAAqB;AAAA,IACrC;AAAA,EACJ;AAAA,EAEO,cAAc,MAAuB;AACxC,QAAI,KAAK,qBAAqB,8BAA4B;AACtD,aAAO,KAAK,qBAAqB,QAAQ,KAAK,4BAA4B,SAAS,IAAI;AAAA,IAC3F,OAAO;AACH,aAAO,KAAK,kCAAkC,SAAS,IAAI;AAAA,IAC/D;AAAA,EACJ;AAAA,EAEO,cAAc,YAA6B;AAC9C,WAAO,KAAK,gBAAgB,SAAS,UAAU;AAAA,EACnD;AAAA,EAEO,kBAAkB,aAAgC;AACrD,WAAO,YAAY,MAAM,CAAC,eAAe,KAAK,cAAc,UAAU,CAAC;AAAA,EAC3E;AAAA,EAEA,OAAc,SAAS,MAA6B;AAChD,UAAM,MAAM,KAAK,MAAM,IAAI;AAC3B,WAAO,IAAI;AAAA,MACP,IAAI;AAAA,MACJ,IAAI;AAAA,MACJ,IAAI;AAAA,MACJ,IAAI;AAAA,MACJ,IAAI;AAAA,MACJ,IAAI;AAAA,MACJ,IAAI;AAAA,MACJ,IAAI;AAAA,MACJ,IAAI;AAAA,IACR;AAAA,EACJ;AAAA;AAAA,EAIA,IAAI,eAAuB;AACvB,WAAO,KAAK;AAAA,EAChB;AAAA,EAEA,IAAI,gBAA0B;AAC1B,QAAI,KAAK,qBAAqB,8BAA4B;AACtD,aAAO,KAAK,4BAA4B,OAAO,KAAK,gBAAgB;AAAA,IACxE,OAAO;AACH,aAAO,CAAC,KAAK,gBAAgB;AAAA,IACjC;AAAA,EACJ;AAAA,EAEA,IAAI,gCAA0C;AAC1C,QAAI,KAAK,qBAAqB,8BAA4B;AACtD,aAAO,KAAK,4BAA4B,OAAO,KAAK,gBAAgB;AAAA,IACxE,OAAO;AACH,aAAO,KAAK;AAAA,IAChB;AAAA,EACJ;AAAA,EAEA,IAAI,cAAwB;AACxB,WAAO,KAAK;AAAA,EAChB;AACJ;AAsCO,SAAS,uBAAuB,YAEF;AACjC,MAAI,eAAe,QAAW;AAC1B,WAAO;AAAA,EACX;AACA,QAAM,YAAkC,CAAC;AAEzC,aAAW,OAAO,OAAO,KAAK,UAAU,GAAG;AACvC,UAAM,iBAAiB,WAAW,GAAG;AACrC,QAAI,gBAAgB;AAChB,gBAAU,GAAG,IAAI,IAAI;AAAA,QACjB,eAAe;AAAA,QACf,eAAe;AAAA,QACf,eAAe;AAAA,QACf,eAAe;AAAA,QACf,eAAe;AAAA,QACf,eAAe;AAAA,QACf,eAAe;AAAA,QACf,eAAe;AAAA,QACf,eAAe;AAAA,MACnB;AAAA,IACJ;AAAA,EACJ;AAEA,SAAO;AACX;;;AClUA,IAAAA,gBAA0D;AAC1D,wBAA0B;;;ACHnB,SAAS,YAAqB;AACjC,SAAO,OAAO,WAAW;AAC7B;AAEO,IAAM,kBAAkB,MAAc;AACzC,SAAO,KAAK,MAAM,KAAK,IAAI,IAAI,GAAI;AACvC;AAEO,SAAS,QAAQ,GAAQ,GAAiB;AAC7C,MAAI,OAAO,MAAM,OAAO,GAAG;AACvB,WAAO;AAAA,EACX,WAAW,MAAM,QAAQ,MAAM,MAAM;AACjC,WAAO,MAAM;AAAA,EACjB;AAEA,MAAI,MAAM,QAAQ,CAAC,MAAM,MAAM,QAAQ,CAAC,GAAG;AACvC,WAAO;AAAA,EACX;AAEA,MAAI,MAAM,QAAQ,CAAC,GAAG;AAClB,UAAM,SAAS;AACf,UAAM,SAAS;AACf,QAAI,OAAO,WAAW,OAAO,QAAQ;AACjC,aAAO;AAAA,IACX;AAEA,aAAS,IAAI,GAAG,IAAI,OAAO,QAAQ,KAAK;AACpC,UAAI,CAAC,QAAQ,OAAO,CAAC,GAAG,OAAO,CAAC,CAAC,GAAG;AAChC,eAAO;AAAA,MACX;AAAA,IACJ;AAEA,WAAO;AAAA,EACX;AAEA,MAAI,OAAO,MAAM,UAAU;AACvB,UAAM,QAAQ,OAAO,KAAK,CAAC;AAC3B,UAAM,QAAQ,OAAO,KAAK,CAAC;AAC3B,QAAI,MAAM,WAAW,MAAM,QAAQ;AAC/B,aAAO;AAAA,IACX;AAEA,eAAW,OAAO,OAAO;AACrB,UAAI,CAAC,QAAQ,EAAE,GAAG,GAAG,EAAE,GAAG,CAAC,GAAG;AAC1B,eAAO;AAAA,MACX;AAAA,IACJ;AAEA,WAAO;AAAA,EACX,OAAO;AACH,WAAO,MAAM;AAAA,EACjB;AACJ;;;AClDA,mBAA2B;AAIpB,IAAM,OAAN,MAAW;AAAA,EA0Bd,YAAY;AAAA,IACR;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACJ,GAmBG;AACC,SAAK,SAAS;AACd,SAAK,QAAQ;AACb,SAAK,iBAAiB;AACtB,SAAK,cAAc;AACnB,SAAK,WAAW;AAChB,SAAK,YAAY;AACjB,SAAK,WAAW;AAChB,SAAK,aAAa;AAClB,SAAK,uBAAuB;AAC5B,SAAK,cAAc;AACnB,SAAK,aAAa;AAClB,SAAK,gBAAgB;AACrB,SAAK,yBAAyB;AAC9B,SAAK,YAAY;AACjB,SAAK,eAAe;AACpB,SAAK,eAAe;AACpB,SAAK,aAAa;AAClB,SAAK,qBAAqB;AAAA,EAC9B;AAAA,EAEO,eAA0C;AAC7C,QAAI,CAAC,KAAK,aAAa;AACnB,aAAO;AAAA,IACX;AACA,WAAO,KAAK,OAAO,KAAK,WAAW;AAAA,EACvC;AAAA,EAEO,iBAAqC;AACxC,WAAO,KAAK;AAAA,EAChB;AAAA,EAEO,OAAO,OAA0C;AAtG5D;AAuGQ,YAAO,UAAK,yBAAL,mBAA4B;AAAA,EACvC;AAAA,EAEO,aAAa,SAA4C;AAC5D,QAAI,CAAC,KAAK,sBAAsB;AAC5B,aAAO;AAAA,IACX;AAEA,UAAM,iBAAiB,QAAQ,YAAY,EAAE,QAAQ,MAAM,GAAG;AAC9D,eAAW,SAAS,KAAK,sBAAsB;AAC3C,YAAM,gBAAgB,KAAK,qBAAqB,KAAK;AACrD,UAAI,cAAc,mBAAmB,gBAAgB;AACjD,eAAO;AAAA,MACX;AAAA,IACJ;AAEA,WAAO;AAAA,EACX;AAAA,EAEO,UAA2B;AAC9B,QAAI,CAAC,KAAK,sBAAsB;AAC5B,aAAO,CAAC;AAAA,IACZ;AAEA,WAAO,OAAO,OAAO,KAAK,oBAAoB;AAAA,EAClD;AAAA,EAEO,kBAA2B;AAC9B,WAAO,CAAC,CAAC,KAAK;AAAA,EAClB;AACJ;AA4BO,SAAS,UAAmB;AAC/B,QAAM,cAAU,yBAAW,WAAW;AACtC,MAAI,YAAY,QAAW;AACvB,UAAM,IAAI,MAAM,6CAA6C;AAAA,EACjE;AAEA,QAAM,EAAE,SAAS,mBAAmB,IAAI;AACxC,MAAI,SAAS;AACT,WAAO;AAAA,MACH,SAAS;AAAA,MACT,YAAY;AAAA,MACZ,MAAM;AAAA,MACN,aAAa;AAAA,MACb,cAAc;AAAA,IAClB;AAAA,EACJ,WAAW,mBAAmB,MAAM;AAChC,WAAO;AAAA,MACH,SAAS;AAAA,MACT,YAAY;AAAA,MACZ,MAAM,mBAAmB;AAAA,MACzB,aAAa,mBAAmB;AAAA,MAChC,cAAc,QAAQ;AAAA,IAC1B;AAAA,EACJ,OAAO;AACH,WAAO;AAAA,MACH,SAAS;AAAA,MACT,YAAY;AAAA,MACZ,MAAM;AAAA,MACN,aAAa;AAAA,MACb,cAAc;AAAA,IAClB;AAAA,EACJ;AACJ;;;AFjJA,IAAM,qCAAqC;AAUpC,IAAM,cAAc,cAAAC,QAAM,cAA6C,MAAS;AAqBvF,IAAM,mBAAmB;AAAA,EACrB,SAAS;AAAA,EACT,oBAAoB;AAAA,IAChB,MAAM;AAAA,IACN,aAAa;AAAA,EACjB;AAAA,EACA,oBAAoB;AACxB;AAYA,SAAS,iBAAiB,QAAmB,QAAoC;AAC7E,QAAM,6BAA6B,iCAAK,OAAO,OAAZ,EAAkB,cAAc,OAAU;AAC7E,QAAM,kCAAkC,iCAAK,OAAO,mBAAmB,OAA/B,EAAqC,cAAc,OAAU;AACrG,QAAM,qBAAqB,CAAC,OAAO,WAAW,CAAC,QAAQ,4BAA4B,+BAA+B;AAElH,MAAI,CAAC,OAAO,MAAM;AACd,WAAO;AAAA,MACH,SAAS;AAAA,MACT,oBAAoB;AAAA,QAChB,MAAM;AAAA,QACN,aAAa;AAAA,MACjB;AAAA,MACA;AAAA,IACJ;AAAA,EACJ,WAAW,OAAO,SAAS;AACvB,WAAO;AAAA,MACH,SAAS;AAAA,MACT,oBAAoB;AAAA,QAChB,MAAM,OAAO;AAAA,QACb,aAAa,OAAO;AAAA,MACxB;AAAA,MACA;AAAA,IACJ;AAAA,EACJ,OAAO;AACH,WAAO;AAAA,MACH,SAAS;AAAA,MACT,oBAAoB;AAAA,QAChB,MAAM,OAAO;AAAA,QACb,aAAa,OAAO;AAAA,MACxB;AAAA,MACA;AAAA,IACJ;AAAA,EACJ;AACJ;AAEO,IAAM,eAAe,CAAC,UAA6B;AArI1D;AAsII,QAAM,CAAC,WAAW,aAAa,QAAI,0BAAW,kBAAkB,gBAAgB;AAChF,QAAM,CAAC,aAAa,cAAc,IAAI,cAAAA,QAAM,SAAiB,CAAC;AAC9D,QAAM,aAAS,6BAAU;AACzB,QAAM,sBAAqB,WAAM,uBAAN,YAA4B;AAEvD,QAAM,eAAW;AAAA,IACb,CAAC,WAA4B;AACzB,oBAAc,MAAM;AACpB,qBAAe,gBAAgB,CAAC;AAAA,IACpC;AAAA,IACA,CAAC,eAAe,cAAc;AAAA,EAClC;AAEA,QAAM,oBAAgB;AAAA,IAClB,CAACC,iBAAwB;AApJjC,UAAAC;AAqJY,YAAM,2BAA0BA,MAAA,MAAM,4BAAN,OAAAA,MAAiC;AACjE,aAAO,gBAAgB,IAAID,gBAAe;AAAA,IAC9C;AAAA,IACA,CAAC,MAAM,uBAAuB;AAAA,EAClC;AAGA,+BAAU,MAAM;AACZ,QAAI,sBAAsB,UAAU,oBAAoB;AACpD,aAAO,QAAQ;AAAA,IACnB;AAAA,EACJ,GAAG,CAAC,UAAU,oBAAoB,oBAAoB,MAAM,CAAC;AAG7D,+BAAU,MAAM;AACZ,QAAI,YAAY;AAEhB,aAAeE,mBAAkB;AAAA;AAC7B,cAAM,SAAS,MAAM,eAAe;AACpC,YAAI,CAAC,aAAa,CAAC,OAAO,OAAO;AAC7B,mBAAS,MAAM;AAAA,QACnB;AAAA,MACJ;AAAA;AAEA,IAAAA,iBAAgB;AAChB,WAAO,MAAM;AACT,kBAAY;AAAA,IAChB;AAAA,EACJ,GAAG,CAAC,CAAC;AAGL,+BAAU,MAAM;AACZ,QAAI,YAAY;AAEhB,aAAeA,mBAAkB;AAAA;AAC7B,YAAI,CAAC,cAAc,WAAW,GAAG;AAC7B;AAAA,QACJ;AAEA,cAAM,SAAS,MAAM,eAAe;AACpC,YAAI,CAAC,aAAa,CAAC,OAAO,OAAO;AAC7B,mBAAS,MAAM;AAAA,QACnB;AAAA,MACJ;AAAA;AAEA,UAAM,WAAW,YAAYA,kBAAiB,IAAI,KAAK,GAAI;AAC3D,WAAO,MAAM;AACT,kBAAY;AACZ,oBAAc,QAAQ;AAAA,IAC1B;AAAA,EACJ,GAAG,CAAC,WAAW,CAAC;AAEhB,QAAM,gCAA4B,2BAAY,MAAY;AACtD,QAAI,CAAC,cAAc,WAAW,GAAG;AAC7B;AAAA,IACJ;AAEA,UAAM,SAAS,MAAM,eAAe;AACpC,QAAI,CAAC,OAAO,OAAO;AACf,eAAS,MAAM;AAAA,IACnB;AAAA,EACJ,IAAG,CAAC,WAAW,CAAC;AAGhB,+BAAU,MAAM;AACZ,QAAI,UAAU,GAAG;AACb,aAAO,iBAAiB,UAAU,yBAAyB;AAG3D,UAAI,MAAM,mBAAmB,OAAO;AAChC,eAAO,iBAAiB,SAAS,yBAAyB;AAAA,MAC9D;AAAA,IACJ;AAEA,WAAO,MAAM;AACT,UAAI,UAAU,GAAG;AACb,eAAO,oBAAoB,UAAU,yBAAyB;AAC9D,eAAO,oBAAoB,SAAS,yBAAyB;AAAA,MACjE;AAAA,IACJ;AAAA,EACJ,GAAG,CAAC,MAAM,gBAAgB,yBAAyB,CAAC;AAEpD,QAAM,aAAS,2BAAY,MAAY;AACnC,UAAM,MAAM,oBAAoB;AAAA,MAC5B,QAAQ;AAAA,MACR,SAAS;AAAA,QACL,gBAAgB;AAAA,MACpB;AAAA,MACA,aAAa;AAAA,IACjB,CAAC;AACD,aAAS,EAAE,MAAM,QAAW,aAAa,OAAU,CAAC;AAAA,EACxD,IAAG,CAAC,QAAQ,CAAC;AAEb,QAAM,mBAAmB,CAAC,UAAkB,cAAuB,gBAAyC;AACxG,QAAI,KAAK,IAAI,gBAAgB;AAC7B,QAAI,MAAM;AAEV,QAAI,aAAa;AACb,aAAO,QAAQ,WAAW,EAAE,QAAQ,CAAC,CAAC,KAAKC,MAAK,MAAM;AAClD,WAAG,IAAI,KAAKA,MAAK;AAAA,MACrB,CAAC;AAAA,IACL;AAEA,QAAI,cAAc;AACd,SAAG,IAAI,kBAAkB,YAAY;AAAA,IACzC;AAEA,QAAI,GAAG,SAAS,GAAG;AACf,aAAO,IAAI,GAAG,SAAS;AAAA,IAC3B;AAEA,WAAO;AAAA,EACX;AAEA,QAAM,kBAAkB,CAAC,SAAkC;AACvD,WAAO,iBAAiB,mBAAmB,6BAAM,uBAAuB,6BAAM,yBAAyB;AAAA,EAC3G;AAEA,QAAM,mBAAmB,CAAC,SAAmC;AACzD,WAAO,iBAAiB,oBAAoB,6BAAM,wBAAwB,6BAAM,yBAAyB;AAAA,EAC7G;AACA,QAAM,wBAAoB;AAAA,IACtB,CAAC,SAA2B;AACxB,aAAO,gBAAgB,GAAG,MAAM,mBAAmB,6BAAM,iBAAiB;AAAA,IAC9E;AAAA,IACA,CAAC,MAAM,OAAO;AAAA,EAClB;AACA,QAAM,oBAAgB;AAAA,IAClB,CAAC,OAAgB,SAA2B;AACxC,UAAI,OAAO;AACP,eAAO,gBAAgB,GAAG,MAAM,kBAAkB,SAAS,6BAAM,iBAAiB;AAAA,MACtF,OAAO;AACH,eAAO,gBAAgB,GAAG,MAAM,eAAe,6BAAM,iBAAiB;AAAA,MAC1E;AAAA,IACJ;AAAA,IACA,CAAC,MAAM,OAAO;AAAA,EAClB;AACA,QAAM,4BAAwB;AAAA,IAC1B,CAAC,OAAgB,SAA2B;AACxC,UAAI,OAAO;AACP,eAAO,gBAAgB,GAAG,MAAM,wBAAwB,SAAS,6BAAM,iBAAiB;AAAA,MAC5F,OAAO;AACH,eAAO,gBAAgB,GAAG,MAAM,wBAAwB,6BAAM,iBAAiB;AAAA,MACnF;AAAA,IACJ;AAAA,IACA,CAAC,MAAM,OAAO;AAAA,EAClB;AACA,QAAM,0BAAsB;AAAA,IACxB,CAAC,SAA2B;AACxB,aAAO,gBAAgB,GAAG,MAAM,sBAAsB,6BAAM,iBAAiB;AAAA,IACjF;AAAA,IACA,CAAC,MAAM,OAAO;AAAA,EAClB;AAEA,QAAM,0BAAsB;AAAA,IACxB,CAAC,OAAe,SAA2B;AACvC,aAAO,gBAAgB,GAAG,MAAM,mBAAmB,SAAS,6BAAM,iBAAiB;AAAA,IACvF;AAAA,IACA,CAAC,MAAM,OAAO;AAAA,EAClB;AAEA,QAAM,2BAAuB;AAAA,IACzB,CAAC,OAAgB,SAA2B;AACxC,UAAI,OAAO;AACP,eAAO,gBAAgB,GAAG,MAAM,wBAAwB,SAAS,6BAAM,iBAAiB;AAAA,MAC5F,OAAO;AACH,eAAO,gBAAgB,GAAG,MAAM,wBAAwB,6BAAM,iBAAiB;AAAA,MACnF;AAAA,IACJ;AAAA,IACA,CAAC,MAAM,OAAO;AAAA,EAClB;AAEA,QAAM,aAAa,CAAC,QAAgB;AAChC,WAAO,SAAS,OAAO;AAAA,EAC3B;AAEA,QAAM,sBAAsB,CAAC,SAAkC,WAAW,gBAAgB,IAAI,CAAC;AAC/F,QAAM,uBAAuB,CAAC,SAAmC,WAAW,iBAAiB,IAAI,CAAC;AAClG,QAAM,wBAAwB,CAAC,SAA2B,WAAW,kBAAkB,IAAI,CAAC;AAC5F,QAAM,oBAAoB,CAAC,OAAgB,SAA2B,WAAW,cAAc,OAAO,IAAI,CAAC;AAC3G,QAAM,4BAA4B,CAAC,OAAgB,SAC/C,WAAW,sBAAsB,OAAO,IAAI,CAAC;AACjD,QAAM,0BAA0B,CAAC,SAA2B,WAAW,oBAAoB,IAAI,CAAC;AAChG,QAAM,0BAA0B,CAAC,OAAe,SAC5C,WAAW,oBAAoB,OAAO,IAAI,CAAC;AAC/C,QAAM,2BAA2B,CAAC,OAAgB,SAC9C,WAAW,qBAAqB,OAAO,IAAI,CAAC;AAEhD,QAAM,mBAAe;AAAA,IACjB,CAAO,UAAkB;AACrB,YAAM,SAAS,MAAM,oBAAoB,KAAK;AAC9C,UAAI,OAAO,UAAU,cAAc;AAC/B,eAAO;AAAA,MACX,OAAO;AACH,iBAAS,MAAM;AACf,eAAO,OAAO;AAAA,MAClB;AAAA,IACJ;AAAA,IACA,CAAC,QAAQ;AAAA,EACb;AAEA,QAAM,sBAAkB,2BAAY,MAAY;AAC5C,UAAM,SAAS,MAAM,eAAe;AACpC,QAAI,OAAO,OAAO;AACd,YAAM,IAAI,MAAM,yBAAyB;AAAA,IAC7C,OAAO;AACH,eAAS,MAAM;AACf,aAAO,OAAO;AAAA,IAClB;AAAA,EACJ,IAAG,CAAC,QAAQ,CAAC;AAEb,QAAM,QAAQ;AAAA,IACV,SAAS,UAAU;AAAA,IACnB,oBAAoB,UAAU;AAAA,IAC9B;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACJ;AACA,SAAO,8BAAAJ,QAAA,cAAC,YAAY,UAAZ,EAAqB,SAAe,MAAM,QAAS;AAC/D;AAiBA,SAAe,iBAA4C;AAAA;AACvD,QAAI;AACA,YAAM,mBAAmB,MAAM,MAAM,sBAAsB;AAAA,QACvD,QAAQ;AAAA,QACR,SAAS;AAAA,UACL,gBAAgB;AAAA,QACpB;AAAA,QACA,aAAa;AAAA,MACjB,CAAC;AAED,UAAI,iBAAiB,IAAI;AACrB,cAAM,EAAE,UAAU,aAAa,oBAAoB,YAAY,IAAI,MAAM,iBAAiB,KAAK;AAC/F,cAAM,OAAO,IAAI,KAAK;AAAA,UAClB,QAAQ,SAAS;AAAA,UACjB,OAAO,SAAS;AAAA,UAChB,gBAAgB,SAAS;AAAA,UACzB,aAAa,SAAS;AAAA,UACtB,UAAU,SAAS;AAAA,UACnB,WAAW,SAAS;AAAA,UACpB,UAAU,SAAS;AAAA,UACnB,YAAY,SAAS;AAAA,UACrB,sBAAsB,uBAAuB,SAAS,kBAAkB;AAAA,UACxE;AAAA,UACA,YAAY,SAAS;AAAA,UACrB,eAAe,SAAS;AAAA,UACxB,wBAAwB,SAAS;AAAA,UACjC,WAAW,SAAS;AAAA,UACpB,cAAc,SAAS;AAAA,UACvB,YAAY,SAAS;AAAA,UACrB,cAAc,SAAS;AAAA,UACvB;AAAA,QACJ,CAAC;AAED,eAAO,EAAE,MAAM,aAAa,OAAO,OAAU;AAAA,MACjD,WAAW,iBAAiB,WAAW,KAAK;AACxC,eAAO,EAAE,MAAM,QAAW,aAAa,QAAW,OAAO,OAAU;AAAA,MACvE,OAAO;AACH,gBAAQ,KAAK,2BAA2B,gBAAgB;AACxD,eAAO,EAAE,OAAO,aAAa;AAAA,MACjC;AAAA,IACJ,SAAS,GAAP;AACE,cAAQ,KAAK,2BAA2B,CAAC;AACzC,aAAO,EAAE,OAAO,aAAa;AAAA,IACjC;AAAA,EACJ;AAAA;AAYA,SAAe,oBAAoB,OAA8C;AAAA;AAC7E,QAAI;AACA,YAAM,cAAc,IAAI,gBAAgB,EAAE,eAAe,MAAM,CAAC,EAAE,SAAS;AAC3E,YAAM,MAAM,4BAA4B;AACxC,YAAM,mBAAmB,MAAM,MAAM,KAAK;AAAA,QACtC,QAAQ;AAAA,QACR,SAAS;AAAA,UACL,gBAAgB;AAAA,QACpB;AAAA,QACA,aAAa;AAAA,MACjB,CAAC;AAED,UAAI,iBAAiB,IAAI;AACrB,cAAM,EAAE,UAAU,aAAa,oBAAoB,YAAY,IAAI,MAAM,iBAAiB,KAAK;AAC/F,cAAM,OAAO,IAAI,KAAK;AAAA,UAClB,QAAQ,SAAS;AAAA,UACjB,OAAO,SAAS;AAAA,UAChB,gBAAgB,SAAS;AAAA,UACzB,aAAa,SAAS;AAAA,UACtB,UAAU,SAAS;AAAA,UACnB,WAAW,SAAS;AAAA,UACpB,UAAU,SAAS;AAAA,UACnB,YAAY,SAAS;AAAA,UACrB,sBAAsB,uBAAuB,SAAS,kBAAkB;AAAA,UACxE;AAAA,UACA,YAAY,SAAS;AAAA,UACrB,eAAe,SAAS;AAAA,UACxB,wBAAwB,SAAS;AAAA,UACjC,WAAW,SAAS;AAAA,UACpB,cAAc,SAAS;AAAA,UACvB,YAAY,SAAS;AAAA,UACrB;AAAA,QACJ,CAAC;AAED,eAAO,EAAE,MAAM,aAAa,OAAO,OAAU;AAAA,MACjD,WAAW,iBAAiB,WAAW,KAAK;AACxC,eAAO,EAAE,OAAO,aAAa;AAAA,MACjC,OAAO;AACH,gBAAQ,KAAK,4BAA4B,gBAAgB;AAAA,MAC7D;AAAA,IACJ,SAAS,GAAP;AACE,cAAQ,KAAK,4BAA4B,CAAC;AAAA,IAC9C;AACA,UAAM,IAAI,MAAM,0BAA0B;AAAA,EAC9C;AAAA;AAEA,IAAM,eAAe,CAAC,QAAgB;AAClC,QAAM,SAAS,SAAS,OAAO,OAAO;AACtC,SAAO,OAAO,GAAG;AACrB;AAEA,IAAM,kBAAkB,CAAC,KAAa,iBAA0B;AAC5D,MAAI,CAAC,cAAc;AACf,WAAO;AAAA,EACX;AAEA,MAAI,KAAK,IAAI,gBAAgB;AAC7B,KAAG,IAAI,MAAM,aAAa,YAAY,CAAC;AACvC,MAAI,IAAI,SAAS,GAAG,GAAG;AACnB,WAAO,GAAG,OAAO,GAAG,SAAS;AAAA,EACjC,OAAO;AACH,WAAO,GAAG,OAAO,GAAG,SAAS;AAAA,EACjC;AACJ;;;AGxgBA,IAAAK,gBAA2B;AAGpB,SAAS,oBAAoB;AAChC,QAAM,cAAU,0BAAW,WAAW;AACtC,MAAI,YAAY,QAAW;AACvB,UAAM,IAAI,MAAM,uDAAuD;AAAA,EAC3E;AACA,QAAM;AAAA,IACF;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACJ,IAAI;AACJ,SAAO;AAAA,IACH;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACJ;AACJ;;;AC1BA,IAAAC,gBAA2B;AAGpB,SAAS,oBAAoB;AAChC,QAAM,cAAU,0BAAW,WAAW;AACtC,MAAI,YAAY,QAAW;AACvB,UAAM,IAAI,MAAM,uDAAuD;AAAA,EAC3E;AACA,QAAM,EAAE,OAAO,IAAI;AACnB,SAAO;AACX;;;ACVA,IAAAC,gBAA6C;AAGtC,SAAS,uBAAuB;AACnC,QAAM,cAAU,0BAAW,WAAW;AACtC,MAAI,YAAY,QAAW;AACvB,UAAM,IAAI,MAAM,0DAA0D;AAAA,EAC9E;AACA,QAAM;AAAA,IACF;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACJ,IAAI;AACJ,SAAO;AAAA,IACH;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACJ;AACJ;AAMO,SAAS,iBAAiB,EAAE,SAAS,GAAkB;AAC1D,QAAM,EAAE,qBAAqB,IAAI,qBAAqB;AAEtD,+BAAU,MAAM;AACZ,yBAAqB;AAAA,EACzB,GAAG,CAAC,CAAC;AAEL,SAAO,8BAAAC,QAAA,4BAAAA,QAAA,gBAAG,QAAS;AACvB;AAEO,SAAS,gBAAgB,EAAE,SAAS,GAAkB;AACzD,QAAM,EAAE,oBAAoB,IAAI,qBAAqB;AACrD,+BAAU,MAAM;AACZ,wBAAoB;AAAA,EACxB,GAAG,CAAC,CAAC;AACL,SAAO,8BAAAA,QAAA,4BAAAA,QAAA,gBAAG,QAAS;AACvB;;;AClDA,IAAAC,gBAA2B;AAGpB,SAAS,iBAAiB;AAC7B,QAAM,cAAU,0BAAW,WAAW;AACtC,MAAI,YAAY,QAAW;AACvB,UAAM,IAAI,MAAM,oDAAoD;AAAA,EACxE;AACA,QAAM,EAAE,gBAAgB,IAAI;AAC5B,SAAO;AACX;","names":["import_react","React","lastRefresh","_a","refreshAuthInfo","value","import_react","import_react","import_react","React","import_react"]}

package/dist/client/index.mjs

@@ -709,6 +709,7 @@ function apiGetUserInfo() {
           createdAt: userinfo.created_at,
           lastActiveAt: userinfo.last_active_at,
           properties: userinfo.properties,
+          legacyUserId: userinfo.legacy_user_id,
           impersonatorUserId
         });
         return { user, accessToken, error: void 0 };

package/dist/client/index.mjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/loginMethod.ts","../../src/user.ts","../../src/client/AuthProvider.tsx","../../src/client/utils.ts","../../src/client/useUser.tsx","../../src/client/useHostedPageUrls.tsx","../../src/client/useLogoutFunction.ts","../../src/client/useRedirectFunctions.tsx","../../src/client/useRefreshAuth.ts"],"sourcesContent":["export enum SocialLoginProvider {\n    Google = 'Google',\n    GitHub = 'GitHub',\n    Microsoft = 'Microsoft',\n    Slack = 'Slack',\n    LinkedIn = 'LinkedIn',\n    Salesforce = 'Salesforce',\n    Xero = 'Xero',\n    QuickBooksOnline = 'QuickBooks Online',\n}\n\nexport enum SamlLoginProvider {\n    Google = 'Google',\n    Rippling = 'Rippling',\n    OneLogin = 'OneLogin',\n    JumpCloud = 'JumpCloud',\n    Okta = 'Okta',\n    Azure = 'Azure',\n    Duo = 'Duo',\n    Generic = 'Generic',\n}\n\ntype InternalPasswordLoginMethod = {\n    login_method: 'password'\n}\n\ntype InternalMagicLinkLoginMethod = {\n    login_method: 'magic_link'\n}\n\ntype InternalSocialSsoLoginMethod = {\n    login_method: 'social_sso'\n    provider: SocialLoginProvider\n}\n\ntype InternalEmailConfirmationLinkLoginMethod = {\n    login_method: 'email_confirmation_link'\n}\n\ntype InternalSamlSsoLoginMethod = {\n    login_method: 'saml_sso'\n    provider: SamlLoginProvider\n    org_id: string\n}\n\ntype InternalImpersonationLoginMethod = {\n    login_method: 'impersonation'\n}\n\ntype InternalGeneratedFromBackendApiLoginMethod = {\n    login_method: 'generated_from_backend_api'\n}\n\ntype InternalUnknownLoginMethod = {\n    login_method: 'unknown'\n}\n\nexport type InternalLoginMethod =\n    | InternalPasswordLoginMethod\n    | InternalMagicLinkLoginMethod\n    | InternalSocialSsoLoginMethod\n    | InternalEmailConfirmationLinkLoginMethod\n    | InternalSamlSsoLoginMethod\n    | InternalImpersonationLoginMethod\n    | InternalGeneratedFromBackendApiLoginMethod\n    | InternalUnknownLoginMethod\n\ntype PasswordLoginMethod = {\n    loginMethod: 'password'\n}\n\ntype MagicLinkLoginMethod = {\n    loginMethod: 'magic_link'\n}\n\ntype SocialSsoLoginMethod = {\n    loginMethod: 'social_sso'\n    provider: SocialLoginProvider\n}\n\ntype EmailConfirmationLinkLoginMethod = {\n    loginMethod: 'email_confirmation_link'\n}\n\ntype SamlSsoLoginMethod = {\n    loginMethod: 'saml_sso'\n    provider: SamlLoginProvider\n    orgId: string\n}\n\ntype ImpersonationLoginMethod = {\n    loginMethod: 'impersonation'\n}\n\ntype GeneratedFromBackendApiLoginMethod = {\n    loginMethod: 'generated_from_backend_api'\n}\n\ntype UnknownLoginMethod = {\n    loginMethod: 'unknown'\n}\n\nexport type LoginMethod =\n    | PasswordLoginMethod\n    | MagicLinkLoginMethod\n    | SocialSsoLoginMethod\n    | EmailConfirmationLinkLoginMethod\n    | SamlSsoLoginMethod\n    | ImpersonationLoginMethod\n    | GeneratedFromBackendApiLoginMethod\n    | UnknownLoginMethod\n\nexport function toLoginMethod(snake_case?: InternalLoginMethod): LoginMethod {\n    if (!snake_case) {\n        return { loginMethod: 'unknown' }\n    }\n\n    switch (snake_case.login_method) {\n        case 'password':\n            return { loginMethod: 'password' }\n        case 'magic_link':\n            return { loginMethod: 'magic_link' }\n        case 'social_sso':\n            return { loginMethod: 'social_sso', provider: snake_case.provider }\n        case 'email_confirmation_link':\n            return { loginMethod: 'email_confirmation_link' }\n        case 'saml_sso':\n            return { loginMethod: 'saml_sso', provider: snake_case.provider, orgId: snake_case.org_id }\n        case 'impersonation':\n            return { loginMethod: 'impersonation' }\n        case 'generated_from_backend_api':\n            return { loginMethod: 'generated_from_backend_api' }\n        default:\n            return { loginMethod: 'unknown' }\n    }\n}\n","import { InternalLoginMethod, LoginMethod, toLoginMethod } from './loginMethod'\n\nexport class UserFromToken {\n    public userId: string\n\n    public activeOrgId?: string\n    public orgIdToOrgMemberInfo?: OrgIdToOrgMemberInfo\n\n    // Metadata about the user\n    public email: string\n    public firstName?: string\n    public lastName?: string\n    public username?: string\n    public properties?: { [key: string]: unknown }\n    public loginMethod?: LoginMethod\n\n    // If you used our migration APIs to migrate this user from a different system,\n    //   this is their original ID from that system.\n    public legacyUserId?: string\n    public impersonatorUserId?: string\n\n    constructor(\n        userId: string,\n        email: string,\n        orgIdToOrgMemberInfo?: OrgIdToOrgMemberInfo,\n        firstName?: string,\n        lastName?: string,\n        username?: string,\n        legacyUserId?: string,\n        impersonatorUserId?: string,\n        properties?: { [key: string]: unknown },\n        activeOrgId?: string,\n        loginMethod?: LoginMethod\n    ) {\n        this.userId = userId\n\n        this.activeOrgId = activeOrgId\n        this.orgIdToOrgMemberInfo = orgIdToOrgMemberInfo\n\n        this.email = email\n        this.firstName = firstName\n        this.lastName = lastName\n        this.username = username\n\n        this.legacyUserId = legacyUserId\n        this.impersonatorUserId = impersonatorUserId\n\n        this.properties = properties\n        this.loginMethod = loginMethod\n    }\n\n    public getActiveOrg(): OrgMemberInfo | undefined {\n        if (!this.activeOrgId || !this.orgIdToOrgMemberInfo) {\n            return undefined\n        }\n\n        return this.orgIdToOrgMemberInfo[this.activeOrgId]\n    }\n\n    public getActiveOrgId(): string | undefined {\n        return this.activeOrgId\n    }\n\n    public getOrg(orgId: string): OrgMemberInfo | undefined {\n        if (!this.orgIdToOrgMemberInfo) {\n            return undefined\n        }\n\n        return this.orgIdToOrgMemberInfo[orgId]\n    }\n\n    public getOrgByName(orgName: string): OrgMemberInfo | undefined {\n        if (!this.orgIdToOrgMemberInfo) {\n            return undefined\n        }\n\n        const urlSafeOrgName = orgName.toLowerCase().replace(/ /g, '-')\n        for (const orgId in this.orgIdToOrgMemberInfo) {\n            const orgMemberInfo = this.orgIdToOrgMemberInfo[orgId]\n            if (orgMemberInfo.urlSafeOrgName === urlSafeOrgName) {\n                return orgMemberInfo\n            }\n        }\n\n        return undefined\n    }\n\n    public getOrgs(): OrgMemberInfo[] {\n        if (!this.orgIdToOrgMemberInfo) {\n            return []\n        }\n\n        return Object.values(this.orgIdToOrgMemberInfo)\n    }\n\n    public isImpersonating(): boolean {\n        return !!this.impersonatorUserId\n    }\n\n    public static fromJSON(json: string): UserFromToken {\n        const obj = JSON.parse(json)\n        const orgIdToOrgMemberInfo: OrgIdToOrgMemberInfo = {}\n        for (const orgId in obj.orgIdToOrgMemberInfo) {\n            orgIdToOrgMemberInfo[orgId] = OrgMemberInfo.fromJSON(JSON.stringify(obj.orgIdToOrgMemberInfo[orgId]))\n        }\n        return new UserFromToken(\n            obj.userId,\n            obj.email,\n            orgIdToOrgMemberInfo,\n            obj.firstName,\n            obj.lastName,\n            obj.username,\n            obj.legacyUserId,\n            obj.impersonatorUserId,\n            obj.properties,\n            obj.activeOrgId,\n            obj.loginMethod\n        )\n    }\n\n    public static fromJwtPayload(payload: InternalUser): UserFromToken {\n        let activeOrgId: string | undefined\n        let orgIdToOrgMemberInfo: OrgIdToOrgMemberInfo | undefined\n\n        if (payload.org_member_info) {\n            activeOrgId = payload.org_member_info.org_id\n            orgIdToOrgMemberInfo = toOrgIdToOrgMemberInfo({ [activeOrgId]: payload.org_member_info })\n        } else {\n            activeOrgId = undefined\n            orgIdToOrgMemberInfo = toOrgIdToOrgMemberInfo(payload.org_id_to_org_member_info)\n        }\n\n        const loginMethod = toLoginMethod(payload.login_method)\n\n        return new UserFromToken(\n            payload.user_id,\n            payload.email,\n            orgIdToOrgMemberInfo,\n            payload.first_name,\n            payload.last_name,\n            payload.username,\n            payload.legacy_user_id,\n            payload.impersonator_user_id,\n            payload.properties,\n            activeOrgId,\n            loginMethod\n        )\n    }\n}\n\nexport type OrgIdToOrgMemberInfo = {\n    [orgId: string]: OrgMemberInfo\n}\n\nexport enum OrgRoleStructure {\n    SingleRole = \"single_role_in_hierarchy\",\n    MultiRole = \"multi_role\",\n}\n\nexport class OrgMemberInfo {\n    public orgId: string\n    public orgName: string\n    public orgMetadata: { [key: string]: any }\n    public urlSafeOrgName: string\n    public orgRoleStructure: OrgRoleStructure\n\n    public userAssignedRole: string\n    public userInheritedRolesPlusCurrentRole: string[]\n    public userPermissions: string[]\n    public userAssignedAdditionalRoles: string[]\n\n    constructor(\n        orgId: string,\n        orgName: string,\n        orgMetadata: { [key: string]: any },\n        urlSafeOrgName: string,\n        userAssignedRole: string,\n        userInheritedRolesPlusCurrentRole: string[],\n        userPermissions: string[],\n        orgRoleStructure: OrgRoleStructure,\n        userAssignedAdditionalRoles: string[]\n    ) {\n        this.orgId = orgId\n        this.orgName = orgName\n        this.orgMetadata = orgMetadata\n        this.urlSafeOrgName = urlSafeOrgName\n        this.orgRoleStructure = orgRoleStructure\n\n        this.userAssignedRole = userAssignedRole\n        this.userInheritedRolesPlusCurrentRole = userInheritedRolesPlusCurrentRole\n        this.userPermissions = userPermissions\n        this.userAssignedAdditionalRoles = userAssignedAdditionalRoles\n    }\n\n    // validation methods\n\n    public isRole(role: string): boolean {\n        if (this.orgRoleStructure === OrgRoleStructure.MultiRole) {\n            return this.userAssignedRole === role || this.userAssignedAdditionalRoles.includes(role)\n        } else {\n            return this.userAssignedRole === role\n        }\n    }\n\n    public isAtLeastRole(role: string): boolean {\n        if (this.orgRoleStructure === OrgRoleStructure.MultiRole) {\n            return this.userAssignedRole === role || this.userAssignedAdditionalRoles.includes(role)\n        } else {\n            return this.userInheritedRolesPlusCurrentRole.includes(role)\n        }\n    }\n\n    public hasPermission(permission: string): boolean {\n        return this.userPermissions.includes(permission)\n    }\n\n    public hasAllPermissions(permissions: string[]): boolean {\n        return permissions.every((permission) => this.hasPermission(permission))\n    }\n\n    public static fromJSON(json: string): OrgMemberInfo {\n        const obj = JSON.parse(json)\n        return new OrgMemberInfo(\n            obj.orgId,\n            obj.orgName,\n            obj.orgMetadata,\n            obj.urlSafeOrgName,\n            obj.userAssignedRole,\n            obj.userInheritedRolesPlusCurrentRole,\n            obj.userPermissions,\n            obj.orgRoleStructure,\n            obj.userAssignedAdditionalRoles\n        )\n    }\n\n    // getters for the private fields\n\n    get assignedRole(): string {\n        return this.userAssignedRole\n    }\n\n    get assignedRoles(): string[] {\n        if (this.orgRoleStructure === OrgRoleStructure.MultiRole) {\n            return this.userAssignedAdditionalRoles.concat(this.userAssignedRole)\n        } else {\n            return [this.userAssignedRole]\n        }\n    }\n\n    get inheritedRolesPlusCurrentRole(): string[] {\n        if (this.orgRoleStructure === OrgRoleStructure.MultiRole) {\n            return this.userAssignedAdditionalRoles.concat(this.userAssignedRole)\n        } else {\n            return this.userInheritedRolesPlusCurrentRole\n        }\n    }\n\n    get permissions(): string[] {\n        return this.userPermissions\n    }\n}\n\n// These Internal types exist since the server returns snake case, but typescript/javascript\n// convention is camelCase.\nexport type InternalOrgMemberInfo = {\n    org_id: string\n    org_name: string\n    org_metadata: { [key: string]: any }\n    url_safe_org_name: string\n    org_role_structure: OrgRoleStructure\n    user_role: string\n    inherited_user_roles_plus_current_role: string[]\n    user_permissions: string[]\n    additional_roles: string[]\n}\n\nexport type InternalUser = {\n    user_id: string\n\n    org_member_info?: InternalOrgMemberInfo\n    org_id_to_org_member_info?: { [org_id: string]: InternalOrgMemberInfo }\n\n    email: string\n    first_name?: string\n    last_name?: string\n    username?: string\n    properties?: { [key: string]: unknown }\n    login_method?: InternalLoginMethod\n\n    // If you used our migration APIs to migrate this user from a different system, this is their original ID from that system.\n    legacy_user_id?: string\n    impersonator_user_id?: string\n}\n\nexport function toUser(snake_case: InternalUser): UserFromToken {\n    return UserFromToken.fromJwtPayload(snake_case)\n}\n\nexport function toOrgIdToOrgMemberInfo(snake_case?: {\n    [org_id: string]: InternalOrgMemberInfo\n}): OrgIdToOrgMemberInfo | undefined {\n    if (snake_case === undefined) {\n        return undefined\n    }\n    const camelCase: OrgIdToOrgMemberInfo = {}\n\n    for (const key of Object.keys(snake_case)) {\n        const snakeCaseValue = snake_case[key]\n        if (snakeCaseValue) {\n            camelCase[key] = new OrgMemberInfo(\n                snakeCaseValue.org_id,\n                snakeCaseValue.org_name,\n                snakeCaseValue.org_metadata,\n                snakeCaseValue.url_safe_org_name,\n                snakeCaseValue.user_role,\n                snakeCaseValue.inherited_user_roles_plus_current_role,\n                snakeCaseValue.user_permissions,\n                snakeCaseValue.org_role_structure,\n                snakeCaseValue.additional_roles\n            )\n        }\n    }\n\n    return camelCase\n}\n","'use client'\n\nimport React, { useCallback, useEffect, useReducer } from 'react'\nimport { useRouter } from 'next/navigation'\nimport { currentTimeSecs, hasWindow, isEqual } from './utils'\nimport { User } from './useUser'\nimport { toOrgIdToOrgMemberInfo } from '../user'\n\nexport interface RedirectToSignupOptions {\n    postSignupRedirectPath?: string\n    userSignupQueryParameters?: Record<string, string>\n}\nexport interface RedirectToLoginOptions {\n    postLoginRedirectPath?: string\n    userSignupQueryParameters?: Record<string, string>\n}\nexport interface RedirectOptions {\n    redirectBackToUrl?: string\n}\n\ninterface InternalAuthState {\n    loading: boolean\n    userAndAccessToken: UserAndAccessToken\n\n    logout: () => Promise<void>\n\n    redirectToLoginPage: (opts?: RedirectToLoginOptions) => void\n    redirectToSignupPage: (opts?: RedirectToSignupOptions) => void\n    redirectToAccountPage: (opts?: RedirectOptions) => void\n    redirectToOrgPage: (orgId?: string, opts?: RedirectOptions) => void\n    redirectToOrgSettingsPage: (orgId?: string, opts?: RedirectOptions) => void\n    redirectToCreateOrgPage: (opts?: RedirectOptions) => void\n    redirectToSetupSAMLPage: (orgId: string, opts?: RedirectOptions) => void\n    redirectToOrgApiKeysPage: (orgId?: string, opts?: RedirectOptions) => void\n\n    getSignupPageUrl(opts?: RedirectToSignupOptions): string\n    getLoginPageUrl(opts?: RedirectToLoginOptions): string\n    getAccountPageUrl(opts?: RedirectOptions): string\n    getOrgPageUrl(orgId?: string, opts?: RedirectOptions): string\n    getOrgSettingsPageUrl(orgId?: string, opts?: RedirectOptions): string\n    getCreateOrgPageUrl(opts?: RedirectOptions): string\n    getSetupSAMLPageUrl(orgId: string, opts?: RedirectOptions): string\n    getOrgApiKeysPageUrl(orgId?: string, opts?: RedirectOptions): string\n\n    refreshAuthInfo: () => Promise<User | undefined>\n    setActiveOrg: (orgId: string) => Promise<User | undefined>\n}\n\nconst DEFAULT_MIN_SECONDS_BEFORE_REFRESH = 120\n\nexport type AuthProviderProps = {\n    authUrl: string\n    reloadOnAuthChange?: boolean\n    minSecondsBeforeRefresh?: number\n    children?: React.ReactNode\n    refreshOnFocus?: boolean\n}\n\nexport const AuthContext = React.createContext<InternalAuthState | undefined>(undefined)\n\ntype UserAndAccessToken =\n    | {\n          user: User\n          accessToken: string\n      }\n    | {\n          user: undefined\n          accessToken: undefined\n      }\n\ntype AuthState = {\n    loading: boolean\n    userAndAccessToken: UserAndAccessToken\n\n    // There's no good way to trigger server components to reload outside of router.refresh()\n    // This is our workaround until the app router has something better\n    authChangeDetected: boolean\n}\n\nconst initialAuthState = {\n    loading: true,\n    userAndAccessToken: {\n        user: undefined,\n        accessToken: undefined,\n    },\n    authChangeDetected: false,\n}\n\ntype AuthStateAction =\n    | {\n          user: User\n          accessToken: string\n      }\n    | {\n          user: undefined\n          accessToken: undefined\n      }\n\nfunction authStateReducer(_state: AuthState, action: AuthStateAction): AuthState {\n    const newUserForEqualityChecking = { ...action.user, lastActiveAt: undefined }\n    const existingUserForEqualityChecking = { ..._state.userAndAccessToken.user, lastActiveAt: undefined }\n    const authChangeDetected = !_state.loading && !isEqual(newUserForEqualityChecking, existingUserForEqualityChecking)\n\n    if (!action.user) {\n        return {\n            loading: false,\n            userAndAccessToken: {\n                user: undefined,\n                accessToken: undefined,\n            },\n            authChangeDetected,\n        }\n    } else if (_state.loading) {\n        return {\n            loading: false,\n            userAndAccessToken: {\n                user: action.user,\n                accessToken: action.accessToken,\n            },\n            authChangeDetected,\n        }\n    } else {\n        return {\n            loading: false,\n            userAndAccessToken: {\n                user: action.user,\n                accessToken: action.accessToken,\n            },\n            authChangeDetected,\n        }\n    }\n}\n\nexport const AuthProvider = (props: AuthProviderProps) => {\n    const [authState, dispatchInner] = useReducer(authStateReducer, initialAuthState)\n    const [lastRefresh, setLastRefresh] = React.useState<number>(0)\n    const router = useRouter()\n    const reloadOnAuthChange = props.reloadOnAuthChange ?? true\n\n    const dispatch = useCallback(\n        (action: AuthStateAction) => {\n            dispatchInner(action)\n            setLastRefresh(currentTimeSecs())\n        },\n        [dispatchInner, setLastRefresh]\n    )\n\n    const shouldRefresh = useCallback(\n        (lastRefresh: number) => {\n            const minSecondsBeforeRefresh = props.minSecondsBeforeRefresh ?? DEFAULT_MIN_SECONDS_BEFORE_REFRESH\n            return currentTimeSecs() - lastRefresh >= minSecondsBeforeRefresh\n        },\n        [props.minSecondsBeforeRefresh]\n    )\n\n    // This is because we don't have a good way to trigger server components to reload outside of router.refresh()\n    useEffect(() => {\n        if (reloadOnAuthChange && authState.authChangeDetected) {\n            router.refresh()\n        }\n    }, [authState.authChangeDetected, reloadOnAuthChange, router])\n\n    // Trigger an initial refresh\n    useEffect(() => {\n        let didCancel = false\n\n        async function refreshAuthInfo() {\n            const action = await apiGetUserInfo()\n            if (!didCancel && !action.error) {\n                dispatch(action)\n            }\n        }\n\n        refreshAuthInfo()\n        return () => {\n            didCancel = true\n        }\n    }, [])\n\n    // Periodically refresh the token\n    useEffect(() => {\n        let didCancel = false\n\n        async function refreshAuthInfo() {\n            if (!shouldRefresh(lastRefresh)) {\n                return\n            }\n\n            const action = await apiGetUserInfo()\n            if (!didCancel && !action.error) {\n                dispatch(action)\n            }\n        }\n\n        const interval = setInterval(refreshAuthInfo, 5 * 60 * 1000)\n        return () => {\n            didCancel = true\n            clearInterval(interval)\n        }\n    }, [lastRefresh])\n\n    const backgroundRefreshAuthInfo = useCallback(async () => {\n        if (!shouldRefresh(lastRefresh)) {\n            return\n        }\n\n        const action = await apiGetUserInfo()\n        if (!action.error) {\n            dispatch(action)\n        }\n    }, [lastRefresh])\n\n    // Set up online and focus event listeners\n    useEffect(() => {\n        if (hasWindow()) {\n            window.addEventListener('online', backgroundRefreshAuthInfo)\n\n            // Default for refreshOnFocus is true\n            if (props.refreshOnFocus !== false) {\n                window.addEventListener('focus', backgroundRefreshAuthInfo)\n            }\n        }\n\n        return () => {\n            if (hasWindow()) {\n                window.removeEventListener('online', backgroundRefreshAuthInfo)\n                window.removeEventListener('focus', backgroundRefreshAuthInfo)\n            }\n        }\n    }, [props.refreshOnFocus, backgroundRefreshAuthInfo])\n\n    const logout = useCallback(async () => {\n        await fetch('/api/auth/logout', {\n            method: 'POST',\n            headers: {\n                'Content-Type': 'application/json',\n            },\n            credentials: 'include',\n        })\n        dispatch({ user: undefined, accessToken: undefined })\n    }, [dispatch])\n\n    const buildAuthPageUrl = (basePath: string, redirectPath?: string, queryParams?: Record<string, string>) => {\n        let qs = new URLSearchParams()\n        let url = basePath\n\n        if (queryParams) {\n            Object.entries(queryParams).forEach(([key, value]) => {\n                qs.set(key, value)\n            })\n        }\n\n        if (redirectPath) {\n            qs.set('return_to_path', redirectPath)\n        }\n\n        if (qs.toString()) {\n            url += `?${qs.toString()}`\n        }\n\n        return url\n    }\n\n    const getLoginPageUrl = (opts?: RedirectToLoginOptions) => {\n        return buildAuthPageUrl('/api/auth/login', opts?.postLoginRedirectPath, opts?.userSignupQueryParameters)\n    }\n\n    const getSignupPageUrl = (opts?: RedirectToSignupOptions) => {\n        return buildAuthPageUrl('/api/auth/signup', opts?.postSignupRedirectPath, opts?.userSignupQueryParameters)\n    }\n    const getAccountPageUrl = useCallback(\n        (opts?: RedirectOptions) => {\n            return addReturnToPath(`${props.authUrl}/account`, opts?.redirectBackToUrl)\n        },\n        [props.authUrl]\n    )\n    const getOrgPageUrl = useCallback(\n        (orgId?: string, opts?: RedirectOptions) => {\n            if (orgId) {\n                return addReturnToPath(`${props.authUrl}/org?id=${orgId}`, opts?.redirectBackToUrl)\n            } else {\n                return addReturnToPath(`${props.authUrl}/org`, opts?.redirectBackToUrl)\n            }\n        },\n        [props.authUrl]\n    )\n    const getOrgSettingsPageUrl = useCallback(\n        (orgId?: string, opts?: RedirectOptions) => {\n            if (orgId) {\n                return addReturnToPath(`${props.authUrl}/org/settings/${orgId}`, opts?.redirectBackToUrl)\n            } else {\n                return addReturnToPath(`${props.authUrl}/org/settings`, opts?.redirectBackToUrl)\n            }\n        },\n        [props.authUrl]\n    )\n    const getCreateOrgPageUrl = useCallback(\n        (opts?: RedirectOptions) => {\n            return addReturnToPath(`${props.authUrl}/create_org`, opts?.redirectBackToUrl)\n        },\n        [props.authUrl]\n    )\n\n    const getSetupSAMLPageUrl = useCallback(\n        (orgId: string, opts?: RedirectOptions) => {\n            return addReturnToPath(`${props.authUrl}/saml?id=${orgId}`, opts?.redirectBackToUrl)\n        },\n        [props.authUrl]\n    )\n\n    const getOrgApiKeysPageUrl = useCallback(\n        (orgId?: string, opts?: RedirectOptions) => {\n            if (orgId) {\n                return addReturnToPath(`${props.authUrl}/org/api_keys/${orgId}`, opts?.redirectBackToUrl)\n            } else {\n                return addReturnToPath(`${props.authUrl}/org/api_keys`, opts?.redirectBackToUrl)\n            }\n        },\n        [props.authUrl]\n    )\n\n    const redirectTo = (url: string) => {\n        window.location.href = url\n    }\n\n    const redirectToLoginPage = (opts?: RedirectToLoginOptions) => redirectTo(getLoginPageUrl(opts))\n    const redirectToSignupPage = (opts?: RedirectToSignupOptions) => redirectTo(getSignupPageUrl(opts))\n    const redirectToAccountPage = (opts?: RedirectOptions) => redirectTo(getAccountPageUrl(opts))\n    const redirectToOrgPage = (orgId?: string, opts?: RedirectOptions) => redirectTo(getOrgPageUrl(orgId, opts))\n    const redirectToOrgSettingsPage = (orgId?: string, opts?: RedirectOptions) =>\n        redirectTo(getOrgSettingsPageUrl(orgId, opts))\n    const redirectToCreateOrgPage = (opts?: RedirectOptions) => redirectTo(getCreateOrgPageUrl(opts))\n    const redirectToSetupSAMLPage = (orgId: string, opts?: RedirectOptions) =>\n        redirectTo(getSetupSAMLPageUrl(orgId, opts))\n    const redirectToOrgApiKeysPage = (orgId?: string, opts?: RedirectOptions) =>\n        redirectTo(getOrgApiKeysPageUrl(orgId, opts))\n\n    const setActiveOrg = useCallback(\n        async (orgId: string) => {\n            const action = await apiPostSetActiveOrg(orgId)\n            if (action.error === 'not_in_org') {\n                return undefined\n            } else {\n                dispatch(action)\n                return action.user\n            }\n        },\n        [dispatch]\n    )\n\n    const refreshAuthInfo = useCallback(async () => {\n        const action = await apiGetUserInfo()\n        if (action.error) {\n            throw new Error('Failed to refresh token')\n        } else {\n            dispatch(action)\n            return action.user\n        }\n    }, [dispatch])\n\n    const value = {\n        loading: authState.loading,\n        userAndAccessToken: authState.userAndAccessToken,\n        logout,\n        redirectToLoginPage,\n        redirectToSignupPage,\n        redirectToAccountPage,\n        redirectToOrgPage,\n        redirectToOrgSettingsPage,\n        redirectToCreateOrgPage,\n        redirectToSetupSAMLPage,\n        redirectToOrgApiKeysPage,\n        getLoginPageUrl,\n        getSignupPageUrl,\n        getAccountPageUrl,\n        getOrgPageUrl,\n        getOrgSettingsPageUrl,\n        getCreateOrgPageUrl,\n        getOrgApiKeysPageUrl,\n        getSetupSAMLPageUrl,\n        refreshAuthInfo,\n        setActiveOrg,\n    }\n    return <AuthContext.Provider value={value}>{props.children}</AuthContext.Provider>\n}\n\ntype UserInfoResponse =\n    | {\n          error: undefined\n          user: User\n          accessToken: string\n      }\n    | {\n          error: undefined\n          user: undefined\n          accessToken: undefined\n      }\n    | {\n          error: 'unexpected'\n      }\n\nasync function apiGetUserInfo(): Promise<UserInfoResponse> {\n    try {\n        const userInfoResponse = await fetch('/api/auth/userinfo', {\n            method: 'GET',\n            headers: {\n                'Content-Type': 'application/json',\n            },\n            credentials: 'include',\n        })\n\n        if (userInfoResponse.ok) {\n            const { userinfo, accessToken, impersonatorUserId, activeOrgId } = await userInfoResponse.json()\n            const user = new User({\n                userId: userinfo.user_id,\n                email: userinfo.email,\n                emailConfirmed: userinfo.email_confirmed,\n                hasPassword: userinfo.has_password,\n                username: userinfo.username,\n                firstName: userinfo.first_name,\n                lastName: userinfo.last_name,\n                pictureUrl: userinfo.picture_url,\n                orgIdToOrgMemberInfo: toOrgIdToOrgMemberInfo(userinfo.org_id_to_org_info),\n                activeOrgId,\n                mfaEnabled: userinfo.mfa_enabled,\n                canCreateOrgs: userinfo.can_create_orgs,\n                updatePasswordRequired: userinfo.update_password_required,\n                createdAt: userinfo.created_at,\n                lastActiveAt: userinfo.last_active_at,\n                properties: userinfo.properties,\n                impersonatorUserId,\n            })\n\n            return { user, accessToken, error: undefined }\n        } else if (userInfoResponse.status === 401) {\n            return { user: undefined, accessToken: undefined, error: undefined }\n        } else {\n            console.info('Failed to refresh token', userInfoResponse)\n            return { error: 'unexpected' }\n        }\n    } catch (e) {\n        console.info('Failed to refresh token', e)\n        return { error: 'unexpected' }\n    }\n}\n\ntype SetActiveOrgResponse =\n    | {\n          user: User\n          accessToken: string\n          error: undefined\n      }\n    | {\n          error: 'not_in_org'\n      }\n\nasync function apiPostSetActiveOrg(orgId: string): Promise<SetActiveOrgResponse> {\n    try {\n        const queryParams = new URLSearchParams({ active_org_id: orgId }).toString()\n        const url = `/api/auth/set-active-org?${queryParams}`\n        const userInfoResponse = await fetch(url, {\n            method: 'POST',\n            headers: {\n                'Content-Type': 'application/json',\n            },\n            credentials: 'include',\n        })\n\n        if (userInfoResponse.ok) {\n            const { userinfo, accessToken, impersonatorUserId, activeOrgId } = await userInfoResponse.json()\n            const user = new User({\n                userId: userinfo.user_id,\n                email: userinfo.email,\n                emailConfirmed: userinfo.email_confirmed,\n                hasPassword: userinfo.has_password,\n                username: userinfo.username,\n                firstName: userinfo.first_name,\n                lastName: userinfo.last_name,\n                pictureUrl: userinfo.picture_url,\n                orgIdToOrgMemberInfo: toOrgIdToOrgMemberInfo(userinfo.org_id_to_org_info),\n                activeOrgId,\n                mfaEnabled: userinfo.mfa_enabled,\n                canCreateOrgs: userinfo.can_create_orgs,\n                updatePasswordRequired: userinfo.update_password_required,\n                createdAt: userinfo.created_at,\n                lastActiveAt: userinfo.last_active_at,\n                properties: userinfo.properties,\n                impersonatorUserId,\n            })\n\n            return { user, accessToken, error: undefined }\n        } else if (userInfoResponse.status === 401) {\n            return { error: 'not_in_org' }\n        } else {\n            console.info('Failed to set active org', userInfoResponse)\n        }\n    } catch (e) {\n        console.info('Failed to set active org', e)\n    }\n    throw new Error('Failed to set active org')\n}\n\nconst encodeBase64 = (str: string) => {\n    const encode = window ? window.btoa : btoa\n    return encode(str)\n}\n\nconst addReturnToPath = (url: string, returnToPath?: string) => {\n    if (!returnToPath) {\n        return url\n    }\n\n    let qs = new URLSearchParams()\n    qs.set('rt', encodeBase64(returnToPath))\n    if (url.includes('?')) {\n        return `${url}&${qs.toString()}`\n    } else {\n        return `${url}?${qs.toString()}`\n    }\n}\n","export function hasWindow(): boolean {\n    return typeof window !== 'undefined'\n}\n\nexport const currentTimeSecs = (): number => {\n    return Math.floor(Date.now() / 1000)\n}\n\nexport function isEqual(a: any, b: any): boolean {\n    if (typeof a !== typeof b) {\n        return false\n    } else if (a === null || b === null) {\n        return a === b\n    }\n\n    if (Array.isArray(a) !== Array.isArray(b)) {\n        return false\n    }\n\n    if (Array.isArray(a)) {\n        const aArray = a as any[]\n        const bArray = b as any[]\n        if (aArray.length !== bArray.length) {\n            return false\n        }\n\n        for (let i = 0; i < aArray.length; i++) {\n            if (!isEqual(aArray[i], bArray[i])) {\n                return false\n            }\n        }\n\n        return true\n    }\n\n    if (typeof a === 'object') {\n        const aKeys = Object.keys(a)\n        const bKeys = Object.keys(b)\n        if (aKeys.length !== bKeys.length) {\n            return false\n        }\n\n        for (const key of aKeys) {\n            if (!isEqual(a[key], b[key])) {\n                return false\n            }\n        }\n\n        return true\n    } else {\n        return a === b\n    }\n}\n","'use client'\n\nimport { useContext } from 'react'\nimport { AuthContext } from './AuthProvider'\nimport { OrgIdToOrgMemberInfo, OrgMemberInfo } from '../user'\n\nexport class User {\n    public userId: string\n    public email: string\n    public emailConfirmed: boolean\n    public hasPassword: boolean\n\n    public username?: string\n    public firstName?: string\n    public lastName?: string\n    public pictureUrl?: string\n\n    public orgIdToOrgMemberInfo?: OrgIdToOrgMemberInfo\n    public activeOrgId?: string\n\n    public mfaEnabled: boolean\n    public canCreateOrgs: boolean\n    public updatePasswordRequired: boolean\n\n    public createdAt: number\n    public lastActiveAt: number\n\n    public properties?: { [key: string]: unknown }\n\n    public legacyUserId?: string\n    public impersonatorUserId?: string\n\n    constructor({\n        userId,\n        email,\n        emailConfirmed,\n        hasPassword,\n        username,\n        firstName,\n        lastName,\n        pictureUrl,\n        orgIdToOrgMemberInfo,\n        activeOrgId,\n        mfaEnabled,\n        canCreateOrgs,\n        updatePasswordRequired,\n        createdAt,\n        lastActiveAt,\n        legacyUserId,\n        properties,\n        impersonatorUserId,\n    }: {\n        userId: string\n        email: string\n        emailConfirmed: boolean\n        hasPassword: boolean\n        username?: string\n        firstName?: string\n        lastName?: string\n        pictureUrl?: string\n        orgIdToOrgMemberInfo?: OrgIdToOrgMemberInfo\n        activeOrgId?: string\n        mfaEnabled: boolean\n        canCreateOrgs: boolean\n        updatePasswordRequired: boolean\n        createdAt: number\n        lastActiveAt: number\n        legacyUserId?: string\n        properties?: { [key: string]: unknown }\n        impersonatorUserId?: string\n    }) {\n        this.userId = userId\n        this.email = email\n        this.emailConfirmed = emailConfirmed\n        this.hasPassword = hasPassword\n        this.username = username\n        this.firstName = firstName\n        this.lastName = lastName\n        this.pictureUrl = pictureUrl\n        this.orgIdToOrgMemberInfo = orgIdToOrgMemberInfo\n        this.activeOrgId = activeOrgId\n        this.mfaEnabled = mfaEnabled\n        this.canCreateOrgs = canCreateOrgs\n        this.updatePasswordRequired = updatePasswordRequired\n        this.createdAt = createdAt\n        this.lastActiveAt = lastActiveAt\n        this.legacyUserId = legacyUserId\n        this.properties = properties\n        this.impersonatorUserId = impersonatorUserId\n    }\n\n    public getActiveOrg(): OrgMemberInfo | undefined {\n        if (!this.activeOrgId) {\n            return undefined\n        }\n        return this.getOrg(this.activeOrgId)\n    }\n\n    public getActiveOrgId(): string | undefined {\n        return this.activeOrgId\n    }\n\n    public getOrg(orgId: string): OrgMemberInfo | undefined {\n        return this.orgIdToOrgMemberInfo?.[orgId]\n    }\n\n    public getOrgByName(orgName: string): OrgMemberInfo | undefined {\n        if (!this.orgIdToOrgMemberInfo) {\n            return undefined\n        }\n\n        const urlSafeOrgName = orgName.toLowerCase().replace(/ /g, '-')\n        for (const orgId in this.orgIdToOrgMemberInfo) {\n            const orgMemberInfo = this.orgIdToOrgMemberInfo[orgId]\n            if (orgMemberInfo.urlSafeOrgName === urlSafeOrgName) {\n                return orgMemberInfo\n            }\n        }\n\n        return undefined\n    }\n\n    public getOrgs(): OrgMemberInfo[] {\n        if (!this.orgIdToOrgMemberInfo) {\n            return []\n        }\n\n        return Object.values(this.orgIdToOrgMemberInfo)\n    }\n\n    public isImpersonating(): boolean {\n        return !!this.impersonatorUserId\n    }\n}\n\nexport type UseUserLoading = {\n    loading: true\n    isLoggedIn: never\n    user: never\n    accessToken: never\n    setActiveOrg: never\n}\n\nexport type UseUserLoggedIn = {\n    loading: false\n    isLoggedIn: true\n    user: User\n    accessToken: string\n    setActiveOrg: (orgId: string) => Promise<User | undefined>\n}\n\nexport type UseUserNotLoggedIn = {\n    loading: false\n    isLoggedIn: false\n    user: undefined\n    accessToken: undefined\n    setActiveOrg: never\n}\n\nexport type UseUser = UseUserLoading | UseUserLoggedIn | UseUserNotLoggedIn\n\nexport function useUser(): UseUser {\n    const context = useContext(AuthContext)\n    if (context === undefined) {\n        throw new Error('useUser must be used within an AuthProvider')\n    }\n\n    const { loading, userAndAccessToken } = context\n    if (loading) {\n        return {\n            loading: true,\n            isLoggedIn: undefined as never,\n            user: undefined as never,\n            accessToken: undefined as never,\n            setActiveOrg: undefined as never,\n        }\n    } else if (userAndAccessToken.user) {\n        return {\n            loading: false,\n            isLoggedIn: true,\n            user: userAndAccessToken.user,\n            accessToken: userAndAccessToken.accessToken,\n            setActiveOrg: context.setActiveOrg,\n        }\n    } else {\n        return {\n            loading: false,\n            isLoggedIn: false,\n            user: undefined,\n            accessToken: undefined,\n            setActiveOrg: undefined as never,\n        }\n    }\n}\n","import { useContext } from 'react'\nimport { AuthContext } from './AuthProvider'\n\nexport function useHostedPageUrls() {\n    const context = useContext(AuthContext)\n    if (context === undefined) {\n        throw new Error('useHostedPageUrls must be used within an AuthProvider')\n    }\n    const {\n        getLoginPageUrl,\n        getSignupPageUrl,\n        getAccountPageUrl,\n        getOrgPageUrl,\n        getOrgSettingsPageUrl,\n        getCreateOrgPageUrl,\n        getSetupSAMLPageUrl,\n    } = context\n    return {\n        getLoginPageUrl,\n        getSignupPageUrl,\n        getAccountPageUrl,\n        getOrgPageUrl,\n        getOrgSettingsPageUrl,\n        getCreateOrgPageUrl,\n        getSetupSAMLPageUrl,\n    }\n}\n","import { useContext } from \"react\"\nimport { AuthContext } from \"./AuthProvider\"\n\nexport function useLogoutFunction() {\n    const context = useContext(AuthContext)\n    if (context === undefined) {\n        throw new Error(\"useLogoutFunction must be used within an AuthProvider\")\n    }\n    const { logout } = context\n    return logout\n}\n","import React, { useContext, useEffect } from 'react'\nimport { AuthContext } from './AuthProvider'\n\nexport function useRedirectFunctions() {\n    const context = useContext(AuthContext)\n    if (context === undefined) {\n        throw new Error('useRedirectFunctions must be used within an AuthProvider')\n    }\n    const {\n        redirectToAccountPage,\n        redirectToSignupPage,\n        redirectToLoginPage,\n        redirectToOrgPage,\n        redirectToOrgSettingsPage,\n        redirectToCreateOrgPage,\n        redirectToSetupSAMLPage,\n        redirectToOrgApiKeysPage,\n    } = context\n    return {\n        redirectToSignupPage,\n        redirectToLoginPage,\n        redirectToAccountPage,\n        redirectToOrgPage,\n        redirectToOrgSettingsPage,\n        redirectToCreateOrgPage,\n        redirectToSetupSAMLPage,\n        redirectToOrgApiKeysPage,\n    }\n}\n\nexport interface RedirectProps {\n    children?: React.ReactNode\n}\n\nexport function RedirectToSignup({ children }: RedirectProps) {\n    const { redirectToSignupPage } = useRedirectFunctions()\n\n    useEffect(() => {\n        redirectToSignupPage()\n    }, [])\n\n    return <>{children}</>\n}\n\nexport function RedirectToLogin({ children }: RedirectProps) {\n    const { redirectToLoginPage } = useRedirectFunctions()\n    useEffect(() => {\n        redirectToLoginPage()\n    }, [])\n    return <>{children}</>\n}\n","import { useContext } from \"react\"\nimport { AuthContext } from \"./AuthProvider\"\n\nexport function useRefreshAuth() {\n    const context = useContext(AuthContext)\n    if (context === undefined) {\n        throw new Error(\"useRefreshAuth must be used within an AuthProvider\")\n    }\n    const { refreshAuthInfo } = context\n    return refreshAuthInfo\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAgHO,SAAS,cAAc,YAA+C;AACzE,MAAI,CAAC,YAAY;AACb,WAAO,EAAE,aAAa,UAAU;AAAA,EACpC;AAEA,UAAQ,WAAW,cAAc;AAAA,IAC7B,KAAK;AACD,aAAO,EAAE,aAAa,WAAW;AAAA,IACrC,KAAK;AACD,aAAO,EAAE,aAAa,aAAa;AAAA,IACvC,KAAK;AACD,aAAO,EAAE,aAAa,cAAc,UAAU,WAAW,SAAS;AAAA,IACtE,KAAK;AACD,aAAO,EAAE,aAAa,0BAA0B;AAAA,IACpD,KAAK;AACD,aAAO,EAAE,aAAa,YAAY,UAAU,WAAW,UAAU,OAAO,WAAW,OAAO;AAAA,IAC9F,KAAK;AACD,aAAO,EAAE,aAAa,gBAAgB;AAAA,IAC1C,KAAK;AACD,aAAO,EAAE,aAAa,6BAA6B;AAAA,IACvD;AACI,aAAO,EAAE,aAAa,UAAU;AAAA,EACxC;AACJ;;;ACrIO,IAAM,gBAAN,MAAoB;AAAA,EAmBvB,YACI,QACA,OACA,sBACA,WACA,UACA,UACA,cACA,oBACA,YACA,aACA,aACF;AACE,SAAK,SAAS;AAEd,SAAK,cAAc;AACnB,SAAK,uBAAuB;AAE5B,SAAK,QAAQ;AACb,SAAK,YAAY;AACjB,SAAK,WAAW;AAChB,SAAK,WAAW;AAEhB,SAAK,eAAe;AACpB,SAAK,qBAAqB;AAE1B,SAAK,aAAa;AAClB,SAAK,cAAc;AAAA,EACvB;AAAA,EAEO,eAA0C;AAC7C,QAAI,CAAC,KAAK,eAAe,CAAC,KAAK,sBAAsB;AACjD,aAAO;AAAA,IACX;AAEA,WAAO,KAAK,qBAAqB,KAAK,WAAW;AAAA,EACrD;AAAA,EAEO,iBAAqC;AACxC,WAAO,KAAK;AAAA,EAChB;AAAA,EAEO,OAAO,OAA0C;AACpD,QAAI,CAAC,KAAK,sBAAsB;AAC5B,aAAO;AAAA,IACX;AAEA,WAAO,KAAK,qBAAqB,KAAK;AAAA,EAC1C;AAAA,EAEO,aAAa,SAA4C;AAC5D,QAAI,CAAC,KAAK,sBAAsB;AAC5B,aAAO;AAAA,IACX;AAEA,UAAM,iBAAiB,QAAQ,YAAY,EAAE,QAAQ,MAAM,GAAG;AAC9D,eAAW,SAAS,KAAK,sBAAsB;AAC3C,YAAM,gBAAgB,KAAK,qBAAqB,KAAK;AACrD,UAAI,cAAc,mBAAmB,gBAAgB;AACjD,eAAO;AAAA,MACX;AAAA,IACJ;AAEA,WAAO;AAAA,EACX;AAAA,EAEO,UAA2B;AAC9B,QAAI,CAAC,KAAK,sBAAsB;AAC5B,aAAO,CAAC;AAAA,IACZ;AAEA,WAAO,OAAO,OAAO,KAAK,oBAAoB;AAAA,EAClD;AAAA,EAEO,kBAA2B;AAC9B,WAAO,CAAC,CAAC,KAAK;AAAA,EAClB;AAAA,EAEA,OAAc,SAAS,MAA6B;AAChD,UAAM,MAAM,KAAK,MAAM,IAAI;AAC3B,UAAM,uBAA6C,CAAC;AACpD,eAAW,SAAS,IAAI,sBAAsB;AAC1C,2BAAqB,KAAK,IAAI,cAAc,SAAS,KAAK,UAAU,IAAI,qBAAqB,KAAK,CAAC,CAAC;AAAA,IACxG;AACA,WAAO,IAAI;AAAA,MACP,IAAI;AAAA,MACJ,IAAI;AAAA,MACJ;AAAA,MACA,IAAI;AAAA,MACJ,IAAI;AAAA,MACJ,IAAI;AAAA,MACJ,IAAI;AAAA,MACJ,IAAI;AAAA,MACJ,IAAI;AAAA,MACJ,IAAI;AAAA,MACJ,IAAI;AAAA,IACR;AAAA,EACJ;AAAA,EAEA,OAAc,eAAe,SAAsC;AAC/D,QAAI;AACJ,QAAI;AAEJ,QAAI,QAAQ,iBAAiB;AACzB,oBAAc,QAAQ,gBAAgB;AACtC,6BAAuB,uBAAuB,EAAE,CAAC,WAAW,GAAG,QAAQ,gBAAgB,CAAC;AAAA,IAC5F,OAAO;AACH,oBAAc;AACd,6BAAuB,uBAAuB,QAAQ,yBAAyB;AAAA,IACnF;AAEA,UAAM,cAAc,cAAc,QAAQ,YAAY;AAEtD,WAAO,IAAI;AAAA,MACP,QAAQ;AAAA,MACR,QAAQ;AAAA,MACR;AAAA,MACA,QAAQ;AAAA,MACR,QAAQ;AAAA,MACR,QAAQ;AAAA,MACR,QAAQ;AAAA,MACR,QAAQ;AAAA,MACR,QAAQ;AAAA,MACR;AAAA,MACA;AAAA,IACJ;AAAA,EACJ;AACJ;AAWO,IAAM,gBAAN,MAAoB;AAAA,EAYvB,YACI,OACA,SACA,aACA,gBACA,kBACA,mCACA,iBACA,kBACA,6BACF;AACE,SAAK,QAAQ;AACb,SAAK,UAAU;AACf,SAAK,cAAc;AACnB,SAAK,iBAAiB;AACtB,SAAK,mBAAmB;AAExB,SAAK,mBAAmB;AACxB,SAAK,oCAAoC;AACzC,SAAK,kBAAkB;AACvB,SAAK,8BAA8B;AAAA,EACvC;AAAA;AAAA,EAIO,OAAO,MAAuB;AACjC,QAAI,KAAK,qBAAqB,8BAA4B;AACtD,aAAO,KAAK,qBAAqB,QAAQ,KAAK,4BAA4B,SAAS,IAAI;AAAA,IAC3F,OAAO;AACH,aAAO,KAAK,qBAAqB;AAAA,IACrC;AAAA,EACJ;AAAA,EAEO,cAAc,MAAuB;AACxC,QAAI,KAAK,qBAAqB,8BAA4B;AACtD,aAAO,KAAK,qBAAqB,QAAQ,KAAK,4BAA4B,SAAS,IAAI;AAAA,IAC3F,OAAO;AACH,aAAO,KAAK,kCAAkC,SAAS,IAAI;AAAA,IAC/D;AAAA,EACJ;AAAA,EAEO,cAAc,YAA6B;AAC9C,WAAO,KAAK,gBAAgB,SAAS,UAAU;AAAA,EACnD;AAAA,EAEO,kBAAkB,aAAgC;AACrD,WAAO,YAAY,MAAM,CAAC,eAAe,KAAK,cAAc,UAAU,CAAC;AAAA,EAC3E;AAAA,EAEA,OAAc,SAAS,MAA6B;AAChD,UAAM,MAAM,KAAK,MAAM,IAAI;AAC3B,WAAO,IAAI;AAAA,MACP,IAAI;AAAA,MACJ,IAAI;AAAA,MACJ,IAAI;AAAA,MACJ,IAAI;AAAA,MACJ,IAAI;AAAA,MACJ,IAAI;AAAA,MACJ,IAAI;AAAA,MACJ,IAAI;AAAA,MACJ,IAAI;AAAA,IACR;AAAA,EACJ;AAAA;AAAA,EAIA,IAAI,eAAuB;AACvB,WAAO,KAAK;AAAA,EAChB;AAAA,EAEA,IAAI,gBAA0B;AAC1B,QAAI,KAAK,qBAAqB,8BAA4B;AACtD,aAAO,KAAK,4BAA4B,OAAO,KAAK,gBAAgB;AAAA,IACxE,OAAO;AACH,aAAO,CAAC,KAAK,gBAAgB;AAAA,IACjC;AAAA,EACJ;AAAA,EAEA,IAAI,gCAA0C;AAC1C,QAAI,KAAK,qBAAqB,8BAA4B;AACtD,aAAO,KAAK,4BAA4B,OAAO,KAAK,gBAAgB;AAAA,IACxE,OAAO;AACH,aAAO,KAAK;AAAA,IAChB;AAAA,EACJ;AAAA,EAEA,IAAI,cAAwB;AACxB,WAAO,KAAK;AAAA,EAChB;AACJ;AAsCO,SAAS,uBAAuB,YAEF;AACjC,MAAI,eAAe,QAAW;AAC1B,WAAO;AAAA,EACX;AACA,QAAM,YAAkC,CAAC;AAEzC,aAAW,OAAO,OAAO,KAAK,UAAU,GAAG;AACvC,UAAM,iBAAiB,WAAW,GAAG;AACrC,QAAI,gBAAgB;AAChB,gBAAU,GAAG,IAAI,IAAI;AAAA,QACjB,eAAe;AAAA,QACf,eAAe;AAAA,QACf,eAAe;AAAA,QACf,eAAe;AAAA,QACf,eAAe;AAAA,QACf,eAAe;AAAA,QACf,eAAe;AAAA,QACf,eAAe;AAAA,QACf,eAAe;AAAA,MACnB;AAAA,IACJ;AAAA,EACJ;AAEA,SAAO;AACX;;;AClUA,OAAO,SAAS,aAAa,WAAW,kBAAkB;AAC1D,SAAS,iBAAiB;;;ACHnB,SAAS,YAAqB;AACjC,SAAO,OAAO,WAAW;AAC7B;AAEO,IAAM,kBAAkB,MAAc;AACzC,SAAO,KAAK,MAAM,KAAK,IAAI,IAAI,GAAI;AACvC;AAEO,SAAS,QAAQ,GAAQ,GAAiB;AAC7C,MAAI,OAAO,MAAM,OAAO,GAAG;AACvB,WAAO;AAAA,EACX,WAAW,MAAM,QAAQ,MAAM,MAAM;AACjC,WAAO,MAAM;AAAA,EACjB;AAEA,MAAI,MAAM,QAAQ,CAAC,MAAM,MAAM,QAAQ,CAAC,GAAG;AACvC,WAAO;AAAA,EACX;AAEA,MAAI,MAAM,QAAQ,CAAC,GAAG;AAClB,UAAM,SAAS;AACf,UAAM,SAAS;AACf,QAAI,OAAO,WAAW,OAAO,QAAQ;AACjC,aAAO;AAAA,IACX;AAEA,aAAS,IAAI,GAAG,IAAI,OAAO,QAAQ,KAAK;AACpC,UAAI,CAAC,QAAQ,OAAO,CAAC,GAAG,OAAO,CAAC,CAAC,GAAG;AAChC,eAAO;AAAA,MACX;AAAA,IACJ;AAEA,WAAO;AAAA,EACX;AAEA,MAAI,OAAO,MAAM,UAAU;AACvB,UAAM,QAAQ,OAAO,KAAK,CAAC;AAC3B,UAAM,QAAQ,OAAO,KAAK,CAAC;AAC3B,QAAI,MAAM,WAAW,MAAM,QAAQ;AAC/B,aAAO;AAAA,IACX;AAEA,eAAW,OAAO,OAAO;AACrB,UAAI,CAAC,QAAQ,EAAE,GAAG,GAAG,EAAE,GAAG,CAAC,GAAG;AAC1B,eAAO;AAAA,MACX;AAAA,IACJ;AAEA,WAAO;AAAA,EACX,OAAO;AACH,WAAO,MAAM;AAAA,EACjB;AACJ;;;AClDA,SAAS,kBAAkB;AAIpB,IAAM,OAAN,MAAW;AAAA,EA0Bd,YAAY;AAAA,IACR;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACJ,GAmBG;AACC,SAAK,SAAS;AACd,SAAK,QAAQ;AACb,SAAK,iBAAiB;AACtB,SAAK,cAAc;AACnB,SAAK,WAAW;AAChB,SAAK,YAAY;AACjB,SAAK,WAAW;AAChB,SAAK,aAAa;AAClB,SAAK,uBAAuB;AAC5B,SAAK,cAAc;AACnB,SAAK,aAAa;AAClB,SAAK,gBAAgB;AACrB,SAAK,yBAAyB;AAC9B,SAAK,YAAY;AACjB,SAAK,eAAe;AACpB,SAAK,eAAe;AACpB,SAAK,aAAa;AAClB,SAAK,qBAAqB;AAAA,EAC9B;AAAA,EAEO,eAA0C;AAC7C,QAAI,CAAC,KAAK,aAAa;AACnB,aAAO;AAAA,IACX;AACA,WAAO,KAAK,OAAO,KAAK,WAAW;AAAA,EACvC;AAAA,EAEO,iBAAqC;AACxC,WAAO,KAAK;AAAA,EAChB;AAAA,EAEO,OAAO,OAA0C;AAtG5D;AAuGQ,YAAO,UAAK,yBAAL,mBAA4B;AAAA,EACvC;AAAA,EAEO,aAAa,SAA4C;AAC5D,QAAI,CAAC,KAAK,sBAAsB;AAC5B,aAAO;AAAA,IACX;AAEA,UAAM,iBAAiB,QAAQ,YAAY,EAAE,QAAQ,MAAM,GAAG;AAC9D,eAAW,SAAS,KAAK,sBAAsB;AAC3C,YAAM,gBAAgB,KAAK,qBAAqB,KAAK;AACrD,UAAI,cAAc,mBAAmB,gBAAgB;AACjD,eAAO;AAAA,MACX;AAAA,IACJ;AAEA,WAAO;AAAA,EACX;AAAA,EAEO,UAA2B;AAC9B,QAAI,CAAC,KAAK,sBAAsB;AAC5B,aAAO,CAAC;AAAA,IACZ;AAEA,WAAO,OAAO,OAAO,KAAK,oBAAoB;AAAA,EAClD;AAAA,EAEO,kBAA2B;AAC9B,WAAO,CAAC,CAAC,KAAK;AAAA,EAClB;AACJ;AA4BO,SAAS,UAAmB;AAC/B,QAAM,UAAU,WAAW,WAAW;AACtC,MAAI,YAAY,QAAW;AACvB,UAAM,IAAI,MAAM,6CAA6C;AAAA,EACjE;AAEA,QAAM,EAAE,SAAS,mBAAmB,IAAI;AACxC,MAAI,SAAS;AACT,WAAO;AAAA,MACH,SAAS;AAAA,MACT,YAAY;AAAA,MACZ,MAAM;AAAA,MACN,aAAa;AAAA,MACb,cAAc;AAAA,IAClB;AAAA,EACJ,WAAW,mBAAmB,MAAM;AAChC,WAAO;AAAA,MACH,SAAS;AAAA,MACT,YAAY;AAAA,MACZ,MAAM,mBAAmB;AAAA,MACzB,aAAa,mBAAmB;AAAA,MAChC,cAAc,QAAQ;AAAA,IAC1B;AAAA,EACJ,OAAO;AACH,WAAO;AAAA,MACH,SAAS;AAAA,MACT,YAAY;AAAA,MACZ,MAAM;AAAA,MACN,aAAa;AAAA,MACb,cAAc;AAAA,IAClB;AAAA,EACJ;AACJ;;;AFjJA,IAAM,qCAAqC;AAUpC,IAAM,cAAc,MAAM,cAA6C,MAAS;AAqBvF,IAAM,mBAAmB;AAAA,EACrB,SAAS;AAAA,EACT,oBAAoB;AAAA,IAChB,MAAM;AAAA,IACN,aAAa;AAAA,EACjB;AAAA,EACA,oBAAoB;AACxB;AAYA,SAAS,iBAAiB,QAAmB,QAAoC;AAC7E,QAAM,6BAA6B,iCAAK,OAAO,OAAZ,EAAkB,cAAc,OAAU;AAC7E,QAAM,kCAAkC,iCAAK,OAAO,mBAAmB,OAA/B,EAAqC,cAAc,OAAU;AACrG,QAAM,qBAAqB,CAAC,OAAO,WAAW,CAAC,QAAQ,4BAA4B,+BAA+B;AAElH,MAAI,CAAC,OAAO,MAAM;AACd,WAAO;AAAA,MACH,SAAS;AAAA,MACT,oBAAoB;AAAA,QAChB,MAAM;AAAA,QACN,aAAa;AAAA,MACjB;AAAA,MACA;AAAA,IACJ;AAAA,EACJ,WAAW,OAAO,SAAS;AACvB,WAAO;AAAA,MACH,SAAS;AAAA,MACT,oBAAoB;AAAA,QAChB,MAAM,OAAO;AAAA,QACb,aAAa,OAAO;AAAA,MACxB;AAAA,MACA;AAAA,IACJ;AAAA,EACJ,OAAO;AACH,WAAO;AAAA,MACH,SAAS;AAAA,MACT,oBAAoB;AAAA,QAChB,MAAM,OAAO;AAAA,QACb,aAAa,OAAO;AAAA,MACxB;AAAA,MACA;AAAA,IACJ;AAAA,EACJ;AACJ;AAEO,IAAM,eAAe,CAAC,UAA6B;AArI1D;AAsII,QAAM,CAAC,WAAW,aAAa,IAAI,WAAW,kBAAkB,gBAAgB;AAChF,QAAM,CAAC,aAAa,cAAc,IAAI,MAAM,SAAiB,CAAC;AAC9D,QAAM,SAAS,UAAU;AACzB,QAAM,sBAAqB,WAAM,uBAAN,YAA4B;AAEvD,QAAM,WAAW;AAAA,IACb,CAAC,WAA4B;AACzB,oBAAc,MAAM;AACpB,qBAAe,gBAAgB,CAAC;AAAA,IACpC;AAAA,IACA,CAAC,eAAe,cAAc;AAAA,EAClC;AAEA,QAAM,gBAAgB;AAAA,IAClB,CAACA,iBAAwB;AApJjC,UAAAC;AAqJY,YAAM,2BAA0BA,MAAA,MAAM,4BAAN,OAAAA,MAAiC;AACjE,aAAO,gBAAgB,IAAID,gBAAe;AAAA,IAC9C;AAAA,IACA,CAAC,MAAM,uBAAuB;AAAA,EAClC;AAGA,YAAU,MAAM;AACZ,QAAI,sBAAsB,UAAU,oBAAoB;AACpD,aAAO,QAAQ;AAAA,IACnB;AAAA,EACJ,GAAG,CAAC,UAAU,oBAAoB,oBAAoB,MAAM,CAAC;AAG7D,YAAU,MAAM;AACZ,QAAI,YAAY;AAEhB,aAAeE,mBAAkB;AAAA;AAC7B,cAAM,SAAS,MAAM,eAAe;AACpC,YAAI,CAAC,aAAa,CAAC,OAAO,OAAO;AAC7B,mBAAS,MAAM;AAAA,QACnB;AAAA,MACJ;AAAA;AAEA,IAAAA,iBAAgB;AAChB,WAAO,MAAM;AACT,kBAAY;AAAA,IAChB;AAAA,EACJ,GAAG,CAAC,CAAC;AAGL,YAAU,MAAM;AACZ,QAAI,YAAY;AAEhB,aAAeA,mBAAkB;AAAA;AAC7B,YAAI,CAAC,cAAc,WAAW,GAAG;AAC7B;AAAA,QACJ;AAEA,cAAM,SAAS,MAAM,eAAe;AACpC,YAAI,CAAC,aAAa,CAAC,OAAO,OAAO;AAC7B,mBAAS,MAAM;AAAA,QACnB;AAAA,MACJ;AAAA;AAEA,UAAM,WAAW,YAAYA,kBAAiB,IAAI,KAAK,GAAI;AAC3D,WAAO,MAAM;AACT,kBAAY;AACZ,oBAAc,QAAQ;AAAA,IAC1B;AAAA,EACJ,GAAG,CAAC,WAAW,CAAC;AAEhB,QAAM,4BAA4B,YAAY,MAAY;AACtD,QAAI,CAAC,cAAc,WAAW,GAAG;AAC7B;AAAA,IACJ;AAEA,UAAM,SAAS,MAAM,eAAe;AACpC,QAAI,CAAC,OAAO,OAAO;AACf,eAAS,MAAM;AAAA,IACnB;AAAA,EACJ,IAAG,CAAC,WAAW,CAAC;AAGhB,YAAU,MAAM;AACZ,QAAI,UAAU,GAAG;AACb,aAAO,iBAAiB,UAAU,yBAAyB;AAG3D,UAAI,MAAM,mBAAmB,OAAO;AAChC,eAAO,iBAAiB,SAAS,yBAAyB;AAAA,MAC9D;AAAA,IACJ;AAEA,WAAO,MAAM;AACT,UAAI,UAAU,GAAG;AACb,eAAO,oBAAoB,UAAU,yBAAyB;AAC9D,eAAO,oBAAoB,SAAS,yBAAyB;AAAA,MACjE;AAAA,IACJ;AAAA,EACJ,GAAG,CAAC,MAAM,gBAAgB,yBAAyB,CAAC;AAEpD,QAAM,SAAS,YAAY,MAAY;AACnC,UAAM,MAAM,oBAAoB;AAAA,MAC5B,QAAQ;AAAA,MACR,SAAS;AAAA,QACL,gBAAgB;AAAA,MACpB;AAAA,MACA,aAAa;AAAA,IACjB,CAAC;AACD,aAAS,EAAE,MAAM,QAAW,aAAa,OAAU,CAAC;AAAA,EACxD,IAAG,CAAC,QAAQ,CAAC;AAEb,QAAM,mBAAmB,CAAC,UAAkB,cAAuB,gBAAyC;AACxG,QAAI,KAAK,IAAI,gBAAgB;AAC7B,QAAI,MAAM;AAEV,QAAI,aAAa;AACb,aAAO,QAAQ,WAAW,EAAE,QAAQ,CAAC,CAAC,KAAKC,MAAK,MAAM;AAClD,WAAG,IAAI,KAAKA,MAAK;AAAA,MACrB,CAAC;AAAA,IACL;AAEA,QAAI,cAAc;AACd,SAAG,IAAI,kBAAkB,YAAY;AAAA,IACzC;AAEA,QAAI,GAAG,SAAS,GAAG;AACf,aAAO,IAAI,GAAG,SAAS;AAAA,IAC3B;AAEA,WAAO;AAAA,EACX;AAEA,QAAM,kBAAkB,CAAC,SAAkC;AACvD,WAAO,iBAAiB,mBAAmB,6BAAM,uBAAuB,6BAAM,yBAAyB;AAAA,EAC3G;AAEA,QAAM,mBAAmB,CAAC,SAAmC;AACzD,WAAO,iBAAiB,oBAAoB,6BAAM,wBAAwB,6BAAM,yBAAyB;AAAA,EAC7G;AACA,QAAM,oBAAoB;AAAA,IACtB,CAAC,SAA2B;AACxB,aAAO,gBAAgB,GAAG,MAAM,mBAAmB,6BAAM,iBAAiB;AAAA,IAC9E;AAAA,IACA,CAAC,MAAM,OAAO;AAAA,EAClB;AACA,QAAM,gBAAgB;AAAA,IAClB,CAAC,OAAgB,SAA2B;AACxC,UAAI,OAAO;AACP,eAAO,gBAAgB,GAAG,MAAM,kBAAkB,SAAS,6BAAM,iBAAiB;AAAA,MACtF,OAAO;AACH,eAAO,gBAAgB,GAAG,MAAM,eAAe,6BAAM,iBAAiB;AAAA,MAC1E;AAAA,IACJ;AAAA,IACA,CAAC,MAAM,OAAO;AAAA,EAClB;AACA,QAAM,wBAAwB;AAAA,IAC1B,CAAC,OAAgB,SAA2B;AACxC,UAAI,OAAO;AACP,eAAO,gBAAgB,GAAG,MAAM,wBAAwB,SAAS,6BAAM,iBAAiB;AAAA,MAC5F,OAAO;AACH,eAAO,gBAAgB,GAAG,MAAM,wBAAwB,6BAAM,iBAAiB;AAAA,MACnF;AAAA,IACJ;AAAA,IACA,CAAC,MAAM,OAAO;AAAA,EAClB;AACA,QAAM,sBAAsB;AAAA,IACxB,CAAC,SAA2B;AACxB,aAAO,gBAAgB,GAAG,MAAM,sBAAsB,6BAAM,iBAAiB;AAAA,IACjF;AAAA,IACA,CAAC,MAAM,OAAO;AAAA,EAClB;AAEA,QAAM,sBAAsB;AAAA,IACxB,CAAC,OAAe,SAA2B;AACvC,aAAO,gBAAgB,GAAG,MAAM,mBAAmB,SAAS,6BAAM,iBAAiB;AAAA,IACvF;AAAA,IACA,CAAC,MAAM,OAAO;AAAA,EAClB;AAEA,QAAM,uBAAuB;AAAA,IACzB,CAAC,OAAgB,SAA2B;AACxC,UAAI,OAAO;AACP,eAAO,gBAAgB,GAAG,MAAM,wBAAwB,SAAS,6BAAM,iBAAiB;AAAA,MAC5F,OAAO;AACH,eAAO,gBAAgB,GAAG,MAAM,wBAAwB,6BAAM,iBAAiB;AAAA,MACnF;AAAA,IACJ;AAAA,IACA,CAAC,MAAM,OAAO;AAAA,EAClB;AAEA,QAAM,aAAa,CAAC,QAAgB;AAChC,WAAO,SAAS,OAAO;AAAA,EAC3B;AAEA,QAAM,sBAAsB,CAAC,SAAkC,WAAW,gBAAgB,IAAI,CAAC;AAC/F,QAAM,uBAAuB,CAAC,SAAmC,WAAW,iBAAiB,IAAI,CAAC;AAClG,QAAM,wBAAwB,CAAC,SAA2B,WAAW,kBAAkB,IAAI,CAAC;AAC5F,QAAM,oBAAoB,CAAC,OAAgB,SAA2B,WAAW,cAAc,OAAO,IAAI,CAAC;AAC3G,QAAM,4BAA4B,CAAC,OAAgB,SAC/C,WAAW,sBAAsB,OAAO,IAAI,CAAC;AACjD,QAAM,0BAA0B,CAAC,SAA2B,WAAW,oBAAoB,IAAI,CAAC;AAChG,QAAM,0BAA0B,CAAC,OAAe,SAC5C,WAAW,oBAAoB,OAAO,IAAI,CAAC;AAC/C,QAAM,2BAA2B,CAAC,OAAgB,SAC9C,WAAW,qBAAqB,OAAO,IAAI,CAAC;AAEhD,QAAM,eAAe;AAAA,IACjB,CAAO,UAAkB;AACrB,YAAM,SAAS,MAAM,oBAAoB,KAAK;AAC9C,UAAI,OAAO,UAAU,cAAc;AAC/B,eAAO;AAAA,MACX,OAAO;AACH,iBAAS,MAAM;AACf,eAAO,OAAO;AAAA,MAClB;AAAA,IACJ;AAAA,IACA,CAAC,QAAQ;AAAA,EACb;AAEA,QAAM,kBAAkB,YAAY,MAAY;AAC5C,UAAM,SAAS,MAAM,eAAe;AACpC,QAAI,OAAO,OAAO;AACd,YAAM,IAAI,MAAM,yBAAyB;AAAA,IAC7C,OAAO;AACH,eAAS,MAAM;AACf,aAAO,OAAO;AAAA,IAClB;AAAA,EACJ,IAAG,CAAC,QAAQ,CAAC;AAEb,QAAM,QAAQ;AAAA,IACV,SAAS,UAAU;AAAA,IACnB,oBAAoB,UAAU;AAAA,IAC9B;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACJ;AACA,SAAO,oCAAC,YAAY,UAAZ,EAAqB,SAAe,MAAM,QAAS;AAC/D;AAiBA,SAAe,iBAA4C;AAAA;AACvD,QAAI;AACA,YAAM,mBAAmB,MAAM,MAAM,sBAAsB;AAAA,QACvD,QAAQ;AAAA,QACR,SAAS;AAAA,UACL,gBAAgB;AAAA,QACpB;AAAA,QACA,aAAa;AAAA,MACjB,CAAC;AAED,UAAI,iBAAiB,IAAI;AACrB,cAAM,EAAE,UAAU,aAAa,oBAAoB,YAAY,IAAI,MAAM,iBAAiB,KAAK;AAC/F,cAAM,OAAO,IAAI,KAAK;AAAA,UAClB,QAAQ,SAAS;AAAA,UACjB,OAAO,SAAS;AAAA,UAChB,gBAAgB,SAAS;AAAA,UACzB,aAAa,SAAS;AAAA,UACtB,UAAU,SAAS;AAAA,UACnB,WAAW,SAAS;AAAA,UACpB,UAAU,SAAS;AAAA,UACnB,YAAY,SAAS;AAAA,UACrB,sBAAsB,uBAAuB,SAAS,kBAAkB;AAAA,UACxE;AAAA,UACA,YAAY,SAAS;AAAA,UACrB,eAAe,SAAS;AAAA,UACxB,wBAAwB,SAAS;AAAA,UACjC,WAAW,SAAS;AAAA,UACpB,cAAc,SAAS;AAAA,UACvB,YAAY,SAAS;AAAA,UACrB;AAAA,QACJ,CAAC;AAED,eAAO,EAAE,MAAM,aAAa,OAAO,OAAU;AAAA,MACjD,WAAW,iBAAiB,WAAW,KAAK;AACxC,eAAO,EAAE,MAAM,QAAW,aAAa,QAAW,OAAO,OAAU;AAAA,MACvE,OAAO;AACH,gBAAQ,KAAK,2BAA2B,gBAAgB;AACxD,eAAO,EAAE,OAAO,aAAa;AAAA,MACjC;AAAA,IACJ,SAAS,GAAP;AACE,cAAQ,KAAK,2BAA2B,CAAC;AACzC,aAAO,EAAE,OAAO,aAAa;AAAA,IACjC;AAAA,EACJ;AAAA;AAYA,SAAe,oBAAoB,OAA8C;AAAA;AAC7E,QAAI;AACA,YAAM,cAAc,IAAI,gBAAgB,EAAE,eAAe,MAAM,CAAC,EAAE,SAAS;AAC3E,YAAM,MAAM,4BAA4B;AACxC,YAAM,mBAAmB,MAAM,MAAM,KAAK;AAAA,QACtC,QAAQ;AAAA,QACR,SAAS;AAAA,UACL,gBAAgB;AAAA,QACpB;AAAA,QACA,aAAa;AAAA,MACjB,CAAC;AAED,UAAI,iBAAiB,IAAI;AACrB,cAAM,EAAE,UAAU,aAAa,oBAAoB,YAAY,IAAI,MAAM,iBAAiB,KAAK;AAC/F,cAAM,OAAO,IAAI,KAAK;AAAA,UAClB,QAAQ,SAAS;AAAA,UACjB,OAAO,SAAS;AAAA,UAChB,gBAAgB,SAAS;AAAA,UACzB,aAAa,SAAS;AAAA,UACtB,UAAU,SAAS;AAAA,UACnB,WAAW,SAAS;AAAA,UACpB,UAAU,SAAS;AAAA,UACnB,YAAY,SAAS;AAAA,UACrB,sBAAsB,uBAAuB,SAAS,kBAAkB;AAAA,UACxE;AAAA,UACA,YAAY,SAAS;AAAA,UACrB,eAAe,SAAS;AAAA,UACxB,wBAAwB,SAAS;AAAA,UACjC,WAAW,SAAS;AAAA,UACpB,cAAc,SAAS;AAAA,UACvB,YAAY,SAAS;AAAA,UACrB;AAAA,QACJ,CAAC;AAED,eAAO,EAAE,MAAM,aAAa,OAAO,OAAU;AAAA,MACjD,WAAW,iBAAiB,WAAW,KAAK;AACxC,eAAO,EAAE,OAAO,aAAa;AAAA,MACjC,OAAO;AACH,gBAAQ,KAAK,4BAA4B,gBAAgB;AAAA,MAC7D;AAAA,IACJ,SAAS,GAAP;AACE,cAAQ,KAAK,4BAA4B,CAAC;AAAA,IAC9C;AACA,UAAM,IAAI,MAAM,0BAA0B;AAAA,EAC9C;AAAA;AAEA,IAAM,eAAe,CAAC,QAAgB;AAClC,QAAM,SAAS,SAAS,OAAO,OAAO;AACtC,SAAO,OAAO,GAAG;AACrB;AAEA,IAAM,kBAAkB,CAAC,KAAa,iBAA0B;AAC5D,MAAI,CAAC,cAAc;AACf,WAAO;AAAA,EACX;AAEA,MAAI,KAAK,IAAI,gBAAgB;AAC7B,KAAG,IAAI,MAAM,aAAa,YAAY,CAAC;AACvC,MAAI,IAAI,SAAS,GAAG,GAAG;AACnB,WAAO,GAAG,OAAO,GAAG,SAAS;AAAA,EACjC,OAAO;AACH,WAAO,GAAG,OAAO,GAAG,SAAS;AAAA,EACjC;AACJ;;;AGvgBA,SAAS,cAAAC,mBAAkB;AAGpB,SAAS,oBAAoB;AAChC,QAAM,UAAUC,YAAW,WAAW;AACtC,MAAI,YAAY,QAAW;AACvB,UAAM,IAAI,MAAM,uDAAuD;AAAA,EAC3E;AACA,QAAM;AAAA,IACF;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACJ,IAAI;AACJ,SAAO;AAAA,IACH;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACJ;AACJ;;;AC1BA,SAAS,cAAAC,mBAAkB;AAGpB,SAAS,oBAAoB;AAChC,QAAM,UAAUC,YAAW,WAAW;AACtC,MAAI,YAAY,QAAW;AACvB,UAAM,IAAI,MAAM,uDAAuD;AAAA,EAC3E;AACA,QAAM,EAAE,OAAO,IAAI;AACnB,SAAO;AACX;;;ACVA,OAAOC,UAAS,cAAAC,aAAY,aAAAC,kBAAiB;AAGtC,SAAS,uBAAuB;AACnC,QAAM,UAAUC,YAAW,WAAW;AACtC,MAAI,YAAY,QAAW;AACvB,UAAM,IAAI,MAAM,0DAA0D;AAAA,EAC9E;AACA,QAAM;AAAA,IACF;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACJ,IAAI;AACJ,SAAO;AAAA,IACH;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACJ;AACJ;AAMO,SAAS,iBAAiB,EAAE,SAAS,GAAkB;AAC1D,QAAM,EAAE,qBAAqB,IAAI,qBAAqB;AAEtD,EAAAC,WAAU,MAAM;AACZ,yBAAqB;AAAA,EACzB,GAAG,CAAC,CAAC;AAEL,SAAO,gBAAAC,OAAA,cAAAA,OAAA,gBAAG,QAAS;AACvB;AAEO,SAAS,gBAAgB,EAAE,SAAS,GAAkB;AACzD,QAAM,EAAE,oBAAoB,IAAI,qBAAqB;AACrD,EAAAD,WAAU,MAAM;AACZ,wBAAoB;AAAA,EACxB,GAAG,CAAC,CAAC;AACL,SAAO,gBAAAC,OAAA,cAAAA,OAAA,gBAAG,QAAS;AACvB;;;AClDA,SAAS,cAAAC,mBAAkB;AAGpB,SAAS,iBAAiB;AAC7B,QAAM,UAAUC,YAAW,WAAW;AACtC,MAAI,YAAY,QAAW;AACvB,UAAM,IAAI,MAAM,oDAAoD;AAAA,EACxE;AACA,QAAM,EAAE,gBAAgB,IAAI;AAC5B,SAAO;AACX;","names":["lastRefresh","_a","refreshAuthInfo","value","useContext","useContext","useContext","useContext","React","useContext","useEffect","useContext","useEffect","React","useContext","useContext"]}
+{"version":3,"sources":["../../src/loginMethod.ts","../../src/user.ts","../../src/client/AuthProvider.tsx","../../src/client/utils.ts","../../src/client/useUser.tsx","../../src/client/useHostedPageUrls.tsx","../../src/client/useLogoutFunction.ts","../../src/client/useRedirectFunctions.tsx","../../src/client/useRefreshAuth.ts"],"sourcesContent":["export enum SocialLoginProvider {\n    Google = 'Google',\n    GitHub = 'GitHub',\n    Microsoft = 'Microsoft',\n    Slack = 'Slack',\n    LinkedIn = 'LinkedIn',\n    Salesforce = 'Salesforce',\n    Xero = 'Xero',\n    QuickBooksOnline = 'QuickBooks Online',\n}\n\nexport enum SamlLoginProvider {\n    Google = 'Google',\n    Rippling = 'Rippling',\n    OneLogin = 'OneLogin',\n    JumpCloud = 'JumpCloud',\n    Okta = 'Okta',\n    Azure = 'Azure',\n    Duo = 'Duo',\n    Generic = 'Generic',\n}\n\ntype InternalPasswordLoginMethod = {\n    login_method: 'password'\n}\n\ntype InternalMagicLinkLoginMethod = {\n    login_method: 'magic_link'\n}\n\ntype InternalSocialSsoLoginMethod = {\n    login_method: 'social_sso'\n    provider: SocialLoginProvider\n}\n\ntype InternalEmailConfirmationLinkLoginMethod = {\n    login_method: 'email_confirmation_link'\n}\n\ntype InternalSamlSsoLoginMethod = {\n    login_method: 'saml_sso'\n    provider: SamlLoginProvider\n    org_id: string\n}\n\ntype InternalImpersonationLoginMethod = {\n    login_method: 'impersonation'\n}\n\ntype InternalGeneratedFromBackendApiLoginMethod = {\n    login_method: 'generated_from_backend_api'\n}\n\ntype InternalUnknownLoginMethod = {\n    login_method: 'unknown'\n}\n\nexport type InternalLoginMethod =\n    | InternalPasswordLoginMethod\n    | InternalMagicLinkLoginMethod\n    | InternalSocialSsoLoginMethod\n    | InternalEmailConfirmationLinkLoginMethod\n    | InternalSamlSsoLoginMethod\n    | InternalImpersonationLoginMethod\n    | InternalGeneratedFromBackendApiLoginMethod\n    | InternalUnknownLoginMethod\n\ntype PasswordLoginMethod = {\n    loginMethod: 'password'\n}\n\ntype MagicLinkLoginMethod = {\n    loginMethod: 'magic_link'\n}\n\ntype SocialSsoLoginMethod = {\n    loginMethod: 'social_sso'\n    provider: SocialLoginProvider\n}\n\ntype EmailConfirmationLinkLoginMethod = {\n    loginMethod: 'email_confirmation_link'\n}\n\ntype SamlSsoLoginMethod = {\n    loginMethod: 'saml_sso'\n    provider: SamlLoginProvider\n    orgId: string\n}\n\ntype ImpersonationLoginMethod = {\n    loginMethod: 'impersonation'\n}\n\ntype GeneratedFromBackendApiLoginMethod = {\n    loginMethod: 'generated_from_backend_api'\n}\n\ntype UnknownLoginMethod = {\n    loginMethod: 'unknown'\n}\n\nexport type LoginMethod =\n    | PasswordLoginMethod\n    | MagicLinkLoginMethod\n    | SocialSsoLoginMethod\n    | EmailConfirmationLinkLoginMethod\n    | SamlSsoLoginMethod\n    | ImpersonationLoginMethod\n    | GeneratedFromBackendApiLoginMethod\n    | UnknownLoginMethod\n\nexport function toLoginMethod(snake_case?: InternalLoginMethod): LoginMethod {\n    if (!snake_case) {\n        return { loginMethod: 'unknown' }\n    }\n\n    switch (snake_case.login_method) {\n        case 'password':\n            return { loginMethod: 'password' }\n        case 'magic_link':\n            return { loginMethod: 'magic_link' }\n        case 'social_sso':\n            return { loginMethod: 'social_sso', provider: snake_case.provider }\n        case 'email_confirmation_link':\n            return { loginMethod: 'email_confirmation_link' }\n        case 'saml_sso':\n            return { loginMethod: 'saml_sso', provider: snake_case.provider, orgId: snake_case.org_id }\n        case 'impersonation':\n            return { loginMethod: 'impersonation' }\n        case 'generated_from_backend_api':\n            return { loginMethod: 'generated_from_backend_api' }\n        default:\n            return { loginMethod: 'unknown' }\n    }\n}\n","import { InternalLoginMethod, LoginMethod, toLoginMethod } from './loginMethod'\n\nexport class UserFromToken {\n    public userId: string\n\n    public activeOrgId?: string\n    public orgIdToOrgMemberInfo?: OrgIdToOrgMemberInfo\n\n    // Metadata about the user\n    public email: string\n    public firstName?: string\n    public lastName?: string\n    public username?: string\n    public properties?: { [key: string]: unknown }\n    public loginMethod?: LoginMethod\n\n    // If you used our migration APIs to migrate this user from a different system,\n    //   this is their original ID from that system.\n    public legacyUserId?: string\n    public impersonatorUserId?: string\n\n    constructor(\n        userId: string,\n        email: string,\n        orgIdToOrgMemberInfo?: OrgIdToOrgMemberInfo,\n        firstName?: string,\n        lastName?: string,\n        username?: string,\n        legacyUserId?: string,\n        impersonatorUserId?: string,\n        properties?: { [key: string]: unknown },\n        activeOrgId?: string,\n        loginMethod?: LoginMethod\n    ) {\n        this.userId = userId\n\n        this.activeOrgId = activeOrgId\n        this.orgIdToOrgMemberInfo = orgIdToOrgMemberInfo\n\n        this.email = email\n        this.firstName = firstName\n        this.lastName = lastName\n        this.username = username\n\n        this.legacyUserId = legacyUserId\n        this.impersonatorUserId = impersonatorUserId\n\n        this.properties = properties\n        this.loginMethod = loginMethod\n    }\n\n    public getActiveOrg(): OrgMemberInfo | undefined {\n        if (!this.activeOrgId || !this.orgIdToOrgMemberInfo) {\n            return undefined\n        }\n\n        return this.orgIdToOrgMemberInfo[this.activeOrgId]\n    }\n\n    public getActiveOrgId(): string | undefined {\n        return this.activeOrgId\n    }\n\n    public getOrg(orgId: string): OrgMemberInfo | undefined {\n        if (!this.orgIdToOrgMemberInfo) {\n            return undefined\n        }\n\n        return this.orgIdToOrgMemberInfo[orgId]\n    }\n\n    public getOrgByName(orgName: string): OrgMemberInfo | undefined {\n        if (!this.orgIdToOrgMemberInfo) {\n            return undefined\n        }\n\n        const urlSafeOrgName = orgName.toLowerCase().replace(/ /g, '-')\n        for (const orgId in this.orgIdToOrgMemberInfo) {\n            const orgMemberInfo = this.orgIdToOrgMemberInfo[orgId]\n            if (orgMemberInfo.urlSafeOrgName === urlSafeOrgName) {\n                return orgMemberInfo\n            }\n        }\n\n        return undefined\n    }\n\n    public getOrgs(): OrgMemberInfo[] {\n        if (!this.orgIdToOrgMemberInfo) {\n            return []\n        }\n\n        return Object.values(this.orgIdToOrgMemberInfo)\n    }\n\n    public isImpersonating(): boolean {\n        return !!this.impersonatorUserId\n    }\n\n    public static fromJSON(json: string): UserFromToken {\n        const obj = JSON.parse(json)\n        const orgIdToOrgMemberInfo: OrgIdToOrgMemberInfo = {}\n        for (const orgId in obj.orgIdToOrgMemberInfo) {\n            orgIdToOrgMemberInfo[orgId] = OrgMemberInfo.fromJSON(JSON.stringify(obj.orgIdToOrgMemberInfo[orgId]))\n        }\n        return new UserFromToken(\n            obj.userId,\n            obj.email,\n            orgIdToOrgMemberInfo,\n            obj.firstName,\n            obj.lastName,\n            obj.username,\n            obj.legacyUserId,\n            obj.impersonatorUserId,\n            obj.properties,\n            obj.activeOrgId,\n            obj.loginMethod\n        )\n    }\n\n    public static fromJwtPayload(payload: InternalUser): UserFromToken {\n        let activeOrgId: string | undefined\n        let orgIdToOrgMemberInfo: OrgIdToOrgMemberInfo | undefined\n\n        if (payload.org_member_info) {\n            activeOrgId = payload.org_member_info.org_id\n            orgIdToOrgMemberInfo = toOrgIdToOrgMemberInfo({ [activeOrgId]: payload.org_member_info })\n        } else {\n            activeOrgId = undefined\n            orgIdToOrgMemberInfo = toOrgIdToOrgMemberInfo(payload.org_id_to_org_member_info)\n        }\n\n        const loginMethod = toLoginMethod(payload.login_method)\n\n        return new UserFromToken(\n            payload.user_id,\n            payload.email,\n            orgIdToOrgMemberInfo,\n            payload.first_name,\n            payload.last_name,\n            payload.username,\n            payload.legacy_user_id,\n            payload.impersonator_user_id,\n            payload.properties,\n            activeOrgId,\n            loginMethod\n        )\n    }\n}\n\nexport type OrgIdToOrgMemberInfo = {\n    [orgId: string]: OrgMemberInfo\n}\n\nexport enum OrgRoleStructure {\n    SingleRole = \"single_role_in_hierarchy\",\n    MultiRole = \"multi_role\",\n}\n\nexport class OrgMemberInfo {\n    public orgId: string\n    public orgName: string\n    public orgMetadata: { [key: string]: any }\n    public urlSafeOrgName: string\n    public orgRoleStructure: OrgRoleStructure\n\n    public userAssignedRole: string\n    public userInheritedRolesPlusCurrentRole: string[]\n    public userPermissions: string[]\n    public userAssignedAdditionalRoles: string[]\n\n    constructor(\n        orgId: string,\n        orgName: string,\n        orgMetadata: { [key: string]: any },\n        urlSafeOrgName: string,\n        userAssignedRole: string,\n        userInheritedRolesPlusCurrentRole: string[],\n        userPermissions: string[],\n        orgRoleStructure: OrgRoleStructure,\n        userAssignedAdditionalRoles: string[]\n    ) {\n        this.orgId = orgId\n        this.orgName = orgName\n        this.orgMetadata = orgMetadata\n        this.urlSafeOrgName = urlSafeOrgName\n        this.orgRoleStructure = orgRoleStructure\n\n        this.userAssignedRole = userAssignedRole\n        this.userInheritedRolesPlusCurrentRole = userInheritedRolesPlusCurrentRole\n        this.userPermissions = userPermissions\n        this.userAssignedAdditionalRoles = userAssignedAdditionalRoles\n    }\n\n    // validation methods\n\n    public isRole(role: string): boolean {\n        if (this.orgRoleStructure === OrgRoleStructure.MultiRole) {\n            return this.userAssignedRole === role || this.userAssignedAdditionalRoles.includes(role)\n        } else {\n            return this.userAssignedRole === role\n        }\n    }\n\n    public isAtLeastRole(role: string): boolean {\n        if (this.orgRoleStructure === OrgRoleStructure.MultiRole) {\n            return this.userAssignedRole === role || this.userAssignedAdditionalRoles.includes(role)\n        } else {\n            return this.userInheritedRolesPlusCurrentRole.includes(role)\n        }\n    }\n\n    public hasPermission(permission: string): boolean {\n        return this.userPermissions.includes(permission)\n    }\n\n    public hasAllPermissions(permissions: string[]): boolean {\n        return permissions.every((permission) => this.hasPermission(permission))\n    }\n\n    public static fromJSON(json: string): OrgMemberInfo {\n        const obj = JSON.parse(json)\n        return new OrgMemberInfo(\n            obj.orgId,\n            obj.orgName,\n            obj.orgMetadata,\n            obj.urlSafeOrgName,\n            obj.userAssignedRole,\n            obj.userInheritedRolesPlusCurrentRole,\n            obj.userPermissions,\n            obj.orgRoleStructure,\n            obj.userAssignedAdditionalRoles\n        )\n    }\n\n    // getters for the private fields\n\n    get assignedRole(): string {\n        return this.userAssignedRole\n    }\n\n    get assignedRoles(): string[] {\n        if (this.orgRoleStructure === OrgRoleStructure.MultiRole) {\n            return this.userAssignedAdditionalRoles.concat(this.userAssignedRole)\n        } else {\n            return [this.userAssignedRole]\n        }\n    }\n\n    get inheritedRolesPlusCurrentRole(): string[] {\n        if (this.orgRoleStructure === OrgRoleStructure.MultiRole) {\n            return this.userAssignedAdditionalRoles.concat(this.userAssignedRole)\n        } else {\n            return this.userInheritedRolesPlusCurrentRole\n        }\n    }\n\n    get permissions(): string[] {\n        return this.userPermissions\n    }\n}\n\n// These Internal types exist since the server returns snake case, but typescript/javascript\n// convention is camelCase.\nexport type InternalOrgMemberInfo = {\n    org_id: string\n    org_name: string\n    org_metadata: { [key: string]: any }\n    url_safe_org_name: string\n    org_role_structure: OrgRoleStructure\n    user_role: string\n    inherited_user_roles_plus_current_role: string[]\n    user_permissions: string[]\n    additional_roles: string[]\n}\n\nexport type InternalUser = {\n    user_id: string\n\n    org_member_info?: InternalOrgMemberInfo\n    org_id_to_org_member_info?: { [org_id: string]: InternalOrgMemberInfo }\n\n    email: string\n    first_name?: string\n    last_name?: string\n    username?: string\n    properties?: { [key: string]: unknown }\n    login_method?: InternalLoginMethod\n\n    // If you used our migration APIs to migrate this user from a different system, this is their original ID from that system.\n    legacy_user_id?: string\n    impersonator_user_id?: string\n}\n\nexport function toUser(snake_case: InternalUser): UserFromToken {\n    return UserFromToken.fromJwtPayload(snake_case)\n}\n\nexport function toOrgIdToOrgMemberInfo(snake_case?: {\n    [org_id: string]: InternalOrgMemberInfo\n}): OrgIdToOrgMemberInfo | undefined {\n    if (snake_case === undefined) {\n        return undefined\n    }\n    const camelCase: OrgIdToOrgMemberInfo = {}\n\n    for (const key of Object.keys(snake_case)) {\n        const snakeCaseValue = snake_case[key]\n        if (snakeCaseValue) {\n            camelCase[key] = new OrgMemberInfo(\n                snakeCaseValue.org_id,\n                snakeCaseValue.org_name,\n                snakeCaseValue.org_metadata,\n                snakeCaseValue.url_safe_org_name,\n                snakeCaseValue.user_role,\n                snakeCaseValue.inherited_user_roles_plus_current_role,\n                snakeCaseValue.user_permissions,\n                snakeCaseValue.org_role_structure,\n                snakeCaseValue.additional_roles\n            )\n        }\n    }\n\n    return camelCase\n}\n","'use client'\n\nimport React, { useCallback, useEffect, useReducer } from 'react'\nimport { useRouter } from 'next/navigation'\nimport { currentTimeSecs, hasWindow, isEqual } from './utils'\nimport { User } from './useUser'\nimport { toOrgIdToOrgMemberInfo } from '../user'\n\nexport interface RedirectToSignupOptions {\n    postSignupRedirectPath?: string\n    userSignupQueryParameters?: Record<string, string>\n}\nexport interface RedirectToLoginOptions {\n    postLoginRedirectPath?: string\n    userSignupQueryParameters?: Record<string, string>\n}\nexport interface RedirectOptions {\n    redirectBackToUrl?: string\n}\n\ninterface InternalAuthState {\n    loading: boolean\n    userAndAccessToken: UserAndAccessToken\n\n    logout: () => Promise<void>\n\n    redirectToLoginPage: (opts?: RedirectToLoginOptions) => void\n    redirectToSignupPage: (opts?: RedirectToSignupOptions) => void\n    redirectToAccountPage: (opts?: RedirectOptions) => void\n    redirectToOrgPage: (orgId?: string, opts?: RedirectOptions) => void\n    redirectToOrgSettingsPage: (orgId?: string, opts?: RedirectOptions) => void\n    redirectToCreateOrgPage: (opts?: RedirectOptions) => void\n    redirectToSetupSAMLPage: (orgId: string, opts?: RedirectOptions) => void\n    redirectToOrgApiKeysPage: (orgId?: string, opts?: RedirectOptions) => void\n\n    getSignupPageUrl(opts?: RedirectToSignupOptions): string\n    getLoginPageUrl(opts?: RedirectToLoginOptions): string\n    getAccountPageUrl(opts?: RedirectOptions): string\n    getOrgPageUrl(orgId?: string, opts?: RedirectOptions): string\n    getOrgSettingsPageUrl(orgId?: string, opts?: RedirectOptions): string\n    getCreateOrgPageUrl(opts?: RedirectOptions): string\n    getSetupSAMLPageUrl(orgId: string, opts?: RedirectOptions): string\n    getOrgApiKeysPageUrl(orgId?: string, opts?: RedirectOptions): string\n\n    refreshAuthInfo: () => Promise<User | undefined>\n    setActiveOrg: (orgId: string) => Promise<User | undefined>\n}\n\nconst DEFAULT_MIN_SECONDS_BEFORE_REFRESH = 120\n\nexport type AuthProviderProps = {\n    authUrl: string\n    reloadOnAuthChange?: boolean\n    minSecondsBeforeRefresh?: number\n    children?: React.ReactNode\n    refreshOnFocus?: boolean\n}\n\nexport const AuthContext = React.createContext<InternalAuthState | undefined>(undefined)\n\ntype UserAndAccessToken =\n    | {\n          user: User\n          accessToken: string\n      }\n    | {\n          user: undefined\n          accessToken: undefined\n      }\n\ntype AuthState = {\n    loading: boolean\n    userAndAccessToken: UserAndAccessToken\n\n    // There's no good way to trigger server components to reload outside of router.refresh()\n    // This is our workaround until the app router has something better\n    authChangeDetected: boolean\n}\n\nconst initialAuthState = {\n    loading: true,\n    userAndAccessToken: {\n        user: undefined,\n        accessToken: undefined,\n    },\n    authChangeDetected: false,\n}\n\ntype AuthStateAction =\n    | {\n          user: User\n          accessToken: string\n      }\n    | {\n          user: undefined\n          accessToken: undefined\n      }\n\nfunction authStateReducer(_state: AuthState, action: AuthStateAction): AuthState {\n    const newUserForEqualityChecking = { ...action.user, lastActiveAt: undefined }\n    const existingUserForEqualityChecking = { ..._state.userAndAccessToken.user, lastActiveAt: undefined }\n    const authChangeDetected = !_state.loading && !isEqual(newUserForEqualityChecking, existingUserForEqualityChecking)\n\n    if (!action.user) {\n        return {\n            loading: false,\n            userAndAccessToken: {\n                user: undefined,\n                accessToken: undefined,\n            },\n            authChangeDetected,\n        }\n    } else if (_state.loading) {\n        return {\n            loading: false,\n            userAndAccessToken: {\n                user: action.user,\n                accessToken: action.accessToken,\n            },\n            authChangeDetected,\n        }\n    } else {\n        return {\n            loading: false,\n            userAndAccessToken: {\n                user: action.user,\n                accessToken: action.accessToken,\n            },\n            authChangeDetected,\n        }\n    }\n}\n\nexport const AuthProvider = (props: AuthProviderProps) => {\n    const [authState, dispatchInner] = useReducer(authStateReducer, initialAuthState)\n    const [lastRefresh, setLastRefresh] = React.useState<number>(0)\n    const router = useRouter()\n    const reloadOnAuthChange = props.reloadOnAuthChange ?? true\n\n    const dispatch = useCallback(\n        (action: AuthStateAction) => {\n            dispatchInner(action)\n            setLastRefresh(currentTimeSecs())\n        },\n        [dispatchInner, setLastRefresh]\n    )\n\n    const shouldRefresh = useCallback(\n        (lastRefresh: number) => {\n            const minSecondsBeforeRefresh = props.minSecondsBeforeRefresh ?? DEFAULT_MIN_SECONDS_BEFORE_REFRESH\n            return currentTimeSecs() - lastRefresh >= minSecondsBeforeRefresh\n        },\n        [props.minSecondsBeforeRefresh]\n    )\n\n    // This is because we don't have a good way to trigger server components to reload outside of router.refresh()\n    useEffect(() => {\n        if (reloadOnAuthChange && authState.authChangeDetected) {\n            router.refresh()\n        }\n    }, [authState.authChangeDetected, reloadOnAuthChange, router])\n\n    // Trigger an initial refresh\n    useEffect(() => {\n        let didCancel = false\n\n        async function refreshAuthInfo() {\n            const action = await apiGetUserInfo()\n            if (!didCancel && !action.error) {\n                dispatch(action)\n            }\n        }\n\n        refreshAuthInfo()\n        return () => {\n            didCancel = true\n        }\n    }, [])\n\n    // Periodically refresh the token\n    useEffect(() => {\n        let didCancel = false\n\n        async function refreshAuthInfo() {\n            if (!shouldRefresh(lastRefresh)) {\n                return\n            }\n\n            const action = await apiGetUserInfo()\n            if (!didCancel && !action.error) {\n                dispatch(action)\n            }\n        }\n\n        const interval = setInterval(refreshAuthInfo, 5 * 60 * 1000)\n        return () => {\n            didCancel = true\n            clearInterval(interval)\n        }\n    }, [lastRefresh])\n\n    const backgroundRefreshAuthInfo = useCallback(async () => {\n        if (!shouldRefresh(lastRefresh)) {\n            return\n        }\n\n        const action = await apiGetUserInfo()\n        if (!action.error) {\n            dispatch(action)\n        }\n    }, [lastRefresh])\n\n    // Set up online and focus event listeners\n    useEffect(() => {\n        if (hasWindow()) {\n            window.addEventListener('online', backgroundRefreshAuthInfo)\n\n            // Default for refreshOnFocus is true\n            if (props.refreshOnFocus !== false) {\n                window.addEventListener('focus', backgroundRefreshAuthInfo)\n            }\n        }\n\n        return () => {\n            if (hasWindow()) {\n                window.removeEventListener('online', backgroundRefreshAuthInfo)\n                window.removeEventListener('focus', backgroundRefreshAuthInfo)\n            }\n        }\n    }, [props.refreshOnFocus, backgroundRefreshAuthInfo])\n\n    const logout = useCallback(async () => {\n        await fetch('/api/auth/logout', {\n            method: 'POST',\n            headers: {\n                'Content-Type': 'application/json',\n            },\n            credentials: 'include',\n        })\n        dispatch({ user: undefined, accessToken: undefined })\n    }, [dispatch])\n\n    const buildAuthPageUrl = (basePath: string, redirectPath?: string, queryParams?: Record<string, string>) => {\n        let qs = new URLSearchParams()\n        let url = basePath\n\n        if (queryParams) {\n            Object.entries(queryParams).forEach(([key, value]) => {\n                qs.set(key, value)\n            })\n        }\n\n        if (redirectPath) {\n            qs.set('return_to_path', redirectPath)\n        }\n\n        if (qs.toString()) {\n            url += `?${qs.toString()}`\n        }\n\n        return url\n    }\n\n    const getLoginPageUrl = (opts?: RedirectToLoginOptions) => {\n        return buildAuthPageUrl('/api/auth/login', opts?.postLoginRedirectPath, opts?.userSignupQueryParameters)\n    }\n\n    const getSignupPageUrl = (opts?: RedirectToSignupOptions) => {\n        return buildAuthPageUrl('/api/auth/signup', opts?.postSignupRedirectPath, opts?.userSignupQueryParameters)\n    }\n    const getAccountPageUrl = useCallback(\n        (opts?: RedirectOptions) => {\n            return addReturnToPath(`${props.authUrl}/account`, opts?.redirectBackToUrl)\n        },\n        [props.authUrl]\n    )\n    const getOrgPageUrl = useCallback(\n        (orgId?: string, opts?: RedirectOptions) => {\n            if (orgId) {\n                return addReturnToPath(`${props.authUrl}/org?id=${orgId}`, opts?.redirectBackToUrl)\n            } else {\n                return addReturnToPath(`${props.authUrl}/org`, opts?.redirectBackToUrl)\n            }\n        },\n        [props.authUrl]\n    )\n    const getOrgSettingsPageUrl = useCallback(\n        (orgId?: string, opts?: RedirectOptions) => {\n            if (orgId) {\n                return addReturnToPath(`${props.authUrl}/org/settings/${orgId}`, opts?.redirectBackToUrl)\n            } else {\n                return addReturnToPath(`${props.authUrl}/org/settings`, opts?.redirectBackToUrl)\n            }\n        },\n        [props.authUrl]\n    )\n    const getCreateOrgPageUrl = useCallback(\n        (opts?: RedirectOptions) => {\n            return addReturnToPath(`${props.authUrl}/create_org`, opts?.redirectBackToUrl)\n        },\n        [props.authUrl]\n    )\n\n    const getSetupSAMLPageUrl = useCallback(\n        (orgId: string, opts?: RedirectOptions) => {\n            return addReturnToPath(`${props.authUrl}/saml?id=${orgId}`, opts?.redirectBackToUrl)\n        },\n        [props.authUrl]\n    )\n\n    const getOrgApiKeysPageUrl = useCallback(\n        (orgId?: string, opts?: RedirectOptions) => {\n            if (orgId) {\n                return addReturnToPath(`${props.authUrl}/org/api_keys/${orgId}`, opts?.redirectBackToUrl)\n            } else {\n                return addReturnToPath(`${props.authUrl}/org/api_keys`, opts?.redirectBackToUrl)\n            }\n        },\n        [props.authUrl]\n    )\n\n    const redirectTo = (url: string) => {\n        window.location.href = url\n    }\n\n    const redirectToLoginPage = (opts?: RedirectToLoginOptions) => redirectTo(getLoginPageUrl(opts))\n    const redirectToSignupPage = (opts?: RedirectToSignupOptions) => redirectTo(getSignupPageUrl(opts))\n    const redirectToAccountPage = (opts?: RedirectOptions) => redirectTo(getAccountPageUrl(opts))\n    const redirectToOrgPage = (orgId?: string, opts?: RedirectOptions) => redirectTo(getOrgPageUrl(orgId, opts))\n    const redirectToOrgSettingsPage = (orgId?: string, opts?: RedirectOptions) =>\n        redirectTo(getOrgSettingsPageUrl(orgId, opts))\n    const redirectToCreateOrgPage = (opts?: RedirectOptions) => redirectTo(getCreateOrgPageUrl(opts))\n    const redirectToSetupSAMLPage = (orgId: string, opts?: RedirectOptions) =>\n        redirectTo(getSetupSAMLPageUrl(orgId, opts))\n    const redirectToOrgApiKeysPage = (orgId?: string, opts?: RedirectOptions) =>\n        redirectTo(getOrgApiKeysPageUrl(orgId, opts))\n\n    const setActiveOrg = useCallback(\n        async (orgId: string) => {\n            const action = await apiPostSetActiveOrg(orgId)\n            if (action.error === 'not_in_org') {\n                return undefined\n            } else {\n                dispatch(action)\n                return action.user\n            }\n        },\n        [dispatch]\n    )\n\n    const refreshAuthInfo = useCallback(async () => {\n        const action = await apiGetUserInfo()\n        if (action.error) {\n            throw new Error('Failed to refresh token')\n        } else {\n            dispatch(action)\n            return action.user\n        }\n    }, [dispatch])\n\n    const value = {\n        loading: authState.loading,\n        userAndAccessToken: authState.userAndAccessToken,\n        logout,\n        redirectToLoginPage,\n        redirectToSignupPage,\n        redirectToAccountPage,\n        redirectToOrgPage,\n        redirectToOrgSettingsPage,\n        redirectToCreateOrgPage,\n        redirectToSetupSAMLPage,\n        redirectToOrgApiKeysPage,\n        getLoginPageUrl,\n        getSignupPageUrl,\n        getAccountPageUrl,\n        getOrgPageUrl,\n        getOrgSettingsPageUrl,\n        getCreateOrgPageUrl,\n        getOrgApiKeysPageUrl,\n        getSetupSAMLPageUrl,\n        refreshAuthInfo,\n        setActiveOrg,\n    }\n    return <AuthContext.Provider value={value}>{props.children}</AuthContext.Provider>\n}\n\ntype UserInfoResponse =\n    | {\n          error: undefined\n          user: User\n          accessToken: string\n      }\n    | {\n          error: undefined\n          user: undefined\n          accessToken: undefined\n      }\n    | {\n          error: 'unexpected'\n      }\n\nasync function apiGetUserInfo(): Promise<UserInfoResponse> {\n    try {\n        const userInfoResponse = await fetch('/api/auth/userinfo', {\n            method: 'GET',\n            headers: {\n                'Content-Type': 'application/json',\n            },\n            credentials: 'include',\n        })\n\n        if (userInfoResponse.ok) {\n            const { userinfo, accessToken, impersonatorUserId, activeOrgId } = await userInfoResponse.json()\n            const user = new User({\n                userId: userinfo.user_id,\n                email: userinfo.email,\n                emailConfirmed: userinfo.email_confirmed,\n                hasPassword: userinfo.has_password,\n                username: userinfo.username,\n                firstName: userinfo.first_name,\n                lastName: userinfo.last_name,\n                pictureUrl: userinfo.picture_url,\n                orgIdToOrgMemberInfo: toOrgIdToOrgMemberInfo(userinfo.org_id_to_org_info),\n                activeOrgId,\n                mfaEnabled: userinfo.mfa_enabled,\n                canCreateOrgs: userinfo.can_create_orgs,\n                updatePasswordRequired: userinfo.update_password_required,\n                createdAt: userinfo.created_at,\n                lastActiveAt: userinfo.last_active_at,\n                properties: userinfo.properties,\n                legacyUserId: userinfo.legacy_user_id,\n                impersonatorUserId,\n            })\n\n            return { user, accessToken, error: undefined }\n        } else if (userInfoResponse.status === 401) {\n            return { user: undefined, accessToken: undefined, error: undefined }\n        } else {\n            console.info('Failed to refresh token', userInfoResponse)\n            return { error: 'unexpected' }\n        }\n    } catch (e) {\n        console.info('Failed to refresh token', e)\n        return { error: 'unexpected' }\n    }\n}\n\ntype SetActiveOrgResponse =\n    | {\n          user: User\n          accessToken: string\n          error: undefined\n      }\n    | {\n          error: 'not_in_org'\n      }\n\nasync function apiPostSetActiveOrg(orgId: string): Promise<SetActiveOrgResponse> {\n    try {\n        const queryParams = new URLSearchParams({ active_org_id: orgId }).toString()\n        const url = `/api/auth/set-active-org?${queryParams}`\n        const userInfoResponse = await fetch(url, {\n            method: 'POST',\n            headers: {\n                'Content-Type': 'application/json',\n            },\n            credentials: 'include',\n        })\n\n        if (userInfoResponse.ok) {\n            const { userinfo, accessToken, impersonatorUserId, activeOrgId } = await userInfoResponse.json()\n            const user = new User({\n                userId: userinfo.user_id,\n                email: userinfo.email,\n                emailConfirmed: userinfo.email_confirmed,\n                hasPassword: userinfo.has_password,\n                username: userinfo.username,\n                firstName: userinfo.first_name,\n                lastName: userinfo.last_name,\n                pictureUrl: userinfo.picture_url,\n                orgIdToOrgMemberInfo: toOrgIdToOrgMemberInfo(userinfo.org_id_to_org_info),\n                activeOrgId,\n                mfaEnabled: userinfo.mfa_enabled,\n                canCreateOrgs: userinfo.can_create_orgs,\n                updatePasswordRequired: userinfo.update_password_required,\n                createdAt: userinfo.created_at,\n                lastActiveAt: userinfo.last_active_at,\n                properties: userinfo.properties,\n                impersonatorUserId,\n            })\n\n            return { user, accessToken, error: undefined }\n        } else if (userInfoResponse.status === 401) {\n            return { error: 'not_in_org' }\n        } else {\n            console.info('Failed to set active org', userInfoResponse)\n        }\n    } catch (e) {\n        console.info('Failed to set active org', e)\n    }\n    throw new Error('Failed to set active org')\n}\n\nconst encodeBase64 = (str: string) => {\n    const encode = window ? window.btoa : btoa\n    return encode(str)\n}\n\nconst addReturnToPath = (url: string, returnToPath?: string) => {\n    if (!returnToPath) {\n        return url\n    }\n\n    let qs = new URLSearchParams()\n    qs.set('rt', encodeBase64(returnToPath))\n    if (url.includes('?')) {\n        return `${url}&${qs.toString()}`\n    } else {\n        return `${url}?${qs.toString()}`\n    }\n}\n","export function hasWindow(): boolean {\n    return typeof window !== 'undefined'\n}\n\nexport const currentTimeSecs = (): number => {\n    return Math.floor(Date.now() / 1000)\n}\n\nexport function isEqual(a: any, b: any): boolean {\n    if (typeof a !== typeof b) {\n        return false\n    } else if (a === null || b === null) {\n        return a === b\n    }\n\n    if (Array.isArray(a) !== Array.isArray(b)) {\n        return false\n    }\n\n    if (Array.isArray(a)) {\n        const aArray = a as any[]\n        const bArray = b as any[]\n        if (aArray.length !== bArray.length) {\n            return false\n        }\n\n        for (let i = 0; i < aArray.length; i++) {\n            if (!isEqual(aArray[i], bArray[i])) {\n                return false\n            }\n        }\n\n        return true\n    }\n\n    if (typeof a === 'object') {\n        const aKeys = Object.keys(a)\n        const bKeys = Object.keys(b)\n        if (aKeys.length !== bKeys.length) {\n            return false\n        }\n\n        for (const key of aKeys) {\n            if (!isEqual(a[key], b[key])) {\n                return false\n            }\n        }\n\n        return true\n    } else {\n        return a === b\n    }\n}\n","'use client'\n\nimport { useContext } from 'react'\nimport { AuthContext } from './AuthProvider'\nimport { OrgIdToOrgMemberInfo, OrgMemberInfo } from '../user'\n\nexport class User {\n    public userId: string\n    public email: string\n    public emailConfirmed: boolean\n    public hasPassword: boolean\n\n    public username?: string\n    public firstName?: string\n    public lastName?: string\n    public pictureUrl?: string\n\n    public orgIdToOrgMemberInfo?: OrgIdToOrgMemberInfo\n    public activeOrgId?: string\n\n    public mfaEnabled: boolean\n    public canCreateOrgs: boolean\n    public updatePasswordRequired: boolean\n\n    public createdAt: number\n    public lastActiveAt: number\n\n    public properties?: { [key: string]: unknown }\n\n    public legacyUserId?: string\n    public impersonatorUserId?: string\n\n    constructor({\n        userId,\n        email,\n        emailConfirmed,\n        hasPassword,\n        username,\n        firstName,\n        lastName,\n        pictureUrl,\n        orgIdToOrgMemberInfo,\n        activeOrgId,\n        mfaEnabled,\n        canCreateOrgs,\n        updatePasswordRequired,\n        createdAt,\n        lastActiveAt,\n        legacyUserId,\n        properties,\n        impersonatorUserId,\n    }: {\n        userId: string\n        email: string\n        emailConfirmed: boolean\n        hasPassword: boolean\n        username?: string\n        firstName?: string\n        lastName?: string\n        pictureUrl?: string\n        orgIdToOrgMemberInfo?: OrgIdToOrgMemberInfo\n        activeOrgId?: string\n        mfaEnabled: boolean\n        canCreateOrgs: boolean\n        updatePasswordRequired: boolean\n        createdAt: number\n        lastActiveAt: number\n        legacyUserId?: string\n        properties?: { [key: string]: unknown }\n        impersonatorUserId?: string\n    }) {\n        this.userId = userId\n        this.email = email\n        this.emailConfirmed = emailConfirmed\n        this.hasPassword = hasPassword\n        this.username = username\n        this.firstName = firstName\n        this.lastName = lastName\n        this.pictureUrl = pictureUrl\n        this.orgIdToOrgMemberInfo = orgIdToOrgMemberInfo\n        this.activeOrgId = activeOrgId\n        this.mfaEnabled = mfaEnabled\n        this.canCreateOrgs = canCreateOrgs\n        this.updatePasswordRequired = updatePasswordRequired\n        this.createdAt = createdAt\n        this.lastActiveAt = lastActiveAt\n        this.legacyUserId = legacyUserId\n        this.properties = properties\n        this.impersonatorUserId = impersonatorUserId\n    }\n\n    public getActiveOrg(): OrgMemberInfo | undefined {\n        if (!this.activeOrgId) {\n            return undefined\n        }\n        return this.getOrg(this.activeOrgId)\n    }\n\n    public getActiveOrgId(): string | undefined {\n        return this.activeOrgId\n    }\n\n    public getOrg(orgId: string): OrgMemberInfo | undefined {\n        return this.orgIdToOrgMemberInfo?.[orgId]\n    }\n\n    public getOrgByName(orgName: string): OrgMemberInfo | undefined {\n        if (!this.orgIdToOrgMemberInfo) {\n            return undefined\n        }\n\n        const urlSafeOrgName = orgName.toLowerCase().replace(/ /g, '-')\n        for (const orgId in this.orgIdToOrgMemberInfo) {\n            const orgMemberInfo = this.orgIdToOrgMemberInfo[orgId]\n            if (orgMemberInfo.urlSafeOrgName === urlSafeOrgName) {\n                return orgMemberInfo\n            }\n        }\n\n        return undefined\n    }\n\n    public getOrgs(): OrgMemberInfo[] {\n        if (!this.orgIdToOrgMemberInfo) {\n            return []\n        }\n\n        return Object.values(this.orgIdToOrgMemberInfo)\n    }\n\n    public isImpersonating(): boolean {\n        return !!this.impersonatorUserId\n    }\n}\n\nexport type UseUserLoading = {\n    loading: true\n    isLoggedIn: never\n    user: never\n    accessToken: never\n    setActiveOrg: never\n}\n\nexport type UseUserLoggedIn = {\n    loading: false\n    isLoggedIn: true\n    user: User\n    accessToken: string\n    setActiveOrg: (orgId: string) => Promise<User | undefined>\n}\n\nexport type UseUserNotLoggedIn = {\n    loading: false\n    isLoggedIn: false\n    user: undefined\n    accessToken: undefined\n    setActiveOrg: never\n}\n\nexport type UseUser = UseUserLoading | UseUserLoggedIn | UseUserNotLoggedIn\n\nexport function useUser(): UseUser {\n    const context = useContext(AuthContext)\n    if (context === undefined) {\n        throw new Error('useUser must be used within an AuthProvider')\n    }\n\n    const { loading, userAndAccessToken } = context\n    if (loading) {\n        return {\n            loading: true,\n            isLoggedIn: undefined as never,\n            user: undefined as never,\n            accessToken: undefined as never,\n            setActiveOrg: undefined as never,\n        }\n    } else if (userAndAccessToken.user) {\n        return {\n            loading: false,\n            isLoggedIn: true,\n            user: userAndAccessToken.user,\n            accessToken: userAndAccessToken.accessToken,\n            setActiveOrg: context.setActiveOrg,\n        }\n    } else {\n        return {\n            loading: false,\n            isLoggedIn: false,\n            user: undefined,\n            accessToken: undefined,\n            setActiveOrg: undefined as never,\n        }\n    }\n}\n","import { useContext } from 'react'\nimport { AuthContext } from './AuthProvider'\n\nexport function useHostedPageUrls() {\n    const context = useContext(AuthContext)\n    if (context === undefined) {\n        throw new Error('useHostedPageUrls must be used within an AuthProvider')\n    }\n    const {\n        getLoginPageUrl,\n        getSignupPageUrl,\n        getAccountPageUrl,\n        getOrgPageUrl,\n        getOrgSettingsPageUrl,\n        getCreateOrgPageUrl,\n        getSetupSAMLPageUrl,\n    } = context\n    return {\n        getLoginPageUrl,\n        getSignupPageUrl,\n        getAccountPageUrl,\n        getOrgPageUrl,\n        getOrgSettingsPageUrl,\n        getCreateOrgPageUrl,\n        getSetupSAMLPageUrl,\n    }\n}\n","import { useContext } from \"react\"\nimport { AuthContext } from \"./AuthProvider\"\n\nexport function useLogoutFunction() {\n    const context = useContext(AuthContext)\n    if (context === undefined) {\n        throw new Error(\"useLogoutFunction must be used within an AuthProvider\")\n    }\n    const { logout } = context\n    return logout\n}\n","import React, { useContext, useEffect } from 'react'\nimport { AuthContext } from './AuthProvider'\n\nexport function useRedirectFunctions() {\n    const context = useContext(AuthContext)\n    if (context === undefined) {\n        throw new Error('useRedirectFunctions must be used within an AuthProvider')\n    }\n    const {\n        redirectToAccountPage,\n        redirectToSignupPage,\n        redirectToLoginPage,\n        redirectToOrgPage,\n        redirectToOrgSettingsPage,\n        redirectToCreateOrgPage,\n        redirectToSetupSAMLPage,\n        redirectToOrgApiKeysPage,\n    } = context\n    return {\n        redirectToSignupPage,\n        redirectToLoginPage,\n        redirectToAccountPage,\n        redirectToOrgPage,\n        redirectToOrgSettingsPage,\n        redirectToCreateOrgPage,\n        redirectToSetupSAMLPage,\n        redirectToOrgApiKeysPage,\n    }\n}\n\nexport interface RedirectProps {\n    children?: React.ReactNode\n}\n\nexport function RedirectToSignup({ children }: RedirectProps) {\n    const { redirectToSignupPage } = useRedirectFunctions()\n\n    useEffect(() => {\n        redirectToSignupPage()\n    }, [])\n\n    return <>{children}</>\n}\n\nexport function RedirectToLogin({ children }: RedirectProps) {\n    const { redirectToLoginPage } = useRedirectFunctions()\n    useEffect(() => {\n        redirectToLoginPage()\n    }, [])\n    return <>{children}</>\n}\n","import { useContext } from \"react\"\nimport { AuthContext } from \"./AuthProvider\"\n\nexport function useRefreshAuth() {\n    const context = useContext(AuthContext)\n    if (context === undefined) {\n        throw new Error(\"useRefreshAuth must be used within an AuthProvider\")\n    }\n    const { refreshAuthInfo } = context\n    return refreshAuthInfo\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAgHO,SAAS,cAAc,YAA+C;AACzE,MAAI,CAAC,YAAY;AACb,WAAO,EAAE,aAAa,UAAU;AAAA,EACpC;AAEA,UAAQ,WAAW,cAAc;AAAA,IAC7B,KAAK;AACD,aAAO,EAAE,aAAa,WAAW;AAAA,IACrC,KAAK;AACD,aAAO,EAAE,aAAa,aAAa;AAAA,IACvC,KAAK;AACD,aAAO,EAAE,aAAa,cAAc,UAAU,WAAW,SAAS;AAAA,IACtE,KAAK;AACD,aAAO,EAAE,aAAa,0BAA0B;AAAA,IACpD,KAAK;AACD,aAAO,EAAE,aAAa,YAAY,UAAU,WAAW,UAAU,OAAO,WAAW,OAAO;AAAA,IAC9F,KAAK;AACD,aAAO,EAAE,aAAa,gBAAgB;AAAA,IAC1C,KAAK;AACD,aAAO,EAAE,aAAa,6BAA6B;AAAA,IACvD;AACI,aAAO,EAAE,aAAa,UAAU;AAAA,EACxC;AACJ;;;ACrIO,IAAM,gBAAN,MAAoB;AAAA,EAmBvB,YACI,QACA,OACA,sBACA,WACA,UACA,UACA,cACA,oBACA,YACA,aACA,aACF;AACE,SAAK,SAAS;AAEd,SAAK,cAAc;AACnB,SAAK,uBAAuB;AAE5B,SAAK,QAAQ;AACb,SAAK,YAAY;AACjB,SAAK,WAAW;AAChB,SAAK,WAAW;AAEhB,SAAK,eAAe;AACpB,SAAK,qBAAqB;AAE1B,SAAK,aAAa;AAClB,SAAK,cAAc;AAAA,EACvB;AAAA,EAEO,eAA0C;AAC7C,QAAI,CAAC,KAAK,eAAe,CAAC,KAAK,sBAAsB;AACjD,aAAO;AAAA,IACX;AAEA,WAAO,KAAK,qBAAqB,KAAK,WAAW;AAAA,EACrD;AAAA,EAEO,iBAAqC;AACxC,WAAO,KAAK;AAAA,EAChB;AAAA,EAEO,OAAO,OAA0C;AACpD,QAAI,CAAC,KAAK,sBAAsB;AAC5B,aAAO;AAAA,IACX;AAEA,WAAO,KAAK,qBAAqB,KAAK;AAAA,EAC1C;AAAA,EAEO,aAAa,SAA4C;AAC5D,QAAI,CAAC,KAAK,sBAAsB;AAC5B,aAAO;AAAA,IACX;AAEA,UAAM,iBAAiB,QAAQ,YAAY,EAAE,QAAQ,MAAM,GAAG;AAC9D,eAAW,SAAS,KAAK,sBAAsB;AAC3C,YAAM,gBAAgB,KAAK,qBAAqB,KAAK;AACrD,UAAI,cAAc,mBAAmB,gBAAgB;AACjD,eAAO;AAAA,MACX;AAAA,IACJ;AAEA,WAAO;AAAA,EACX;AAAA,EAEO,UAA2B;AAC9B,QAAI,CAAC,KAAK,sBAAsB;AAC5B,aAAO,CAAC;AAAA,IACZ;AAEA,WAAO,OAAO,OAAO,KAAK,oBAAoB;AAAA,EAClD;AAAA,EAEO,kBAA2B;AAC9B,WAAO,CAAC,CAAC,KAAK;AAAA,EAClB;AAAA,EAEA,OAAc,SAAS,MAA6B;AAChD,UAAM,MAAM,KAAK,MAAM,IAAI;AAC3B,UAAM,uBAA6C,CAAC;AACpD,eAAW,SAAS,IAAI,sBAAsB;AAC1C,2BAAqB,KAAK,IAAI,cAAc,SAAS,KAAK,UAAU,IAAI,qBAAqB,KAAK,CAAC,CAAC;AAAA,IACxG;AACA,WAAO,IAAI;AAAA,MACP,IAAI;AAAA,MACJ,IAAI;AAAA,MACJ;AAAA,MACA,IAAI;AAAA,MACJ,IAAI;AAAA,MACJ,IAAI;AAAA,MACJ,IAAI;AAAA,MACJ,IAAI;AAAA,MACJ,IAAI;AAAA,MACJ,IAAI;AAAA,MACJ,IAAI;AAAA,IACR;AAAA,EACJ;AAAA,EAEA,OAAc,eAAe,SAAsC;AAC/D,QAAI;AACJ,QAAI;AAEJ,QAAI,QAAQ,iBAAiB;AACzB,oBAAc,QAAQ,gBAAgB;AACtC,6BAAuB,uBAAuB,EAAE,CAAC,WAAW,GAAG,QAAQ,gBAAgB,CAAC;AAAA,IAC5F,OAAO;AACH,oBAAc;AACd,6BAAuB,uBAAuB,QAAQ,yBAAyB;AAAA,IACnF;AAEA,UAAM,cAAc,cAAc,QAAQ,YAAY;AAEtD,WAAO,IAAI;AAAA,MACP,QAAQ;AAAA,MACR,QAAQ;AAAA,MACR;AAAA,MACA,QAAQ;AAAA,MACR,QAAQ;AAAA,MACR,QAAQ;AAAA,MACR,QAAQ;AAAA,MACR,QAAQ;AAAA,MACR,QAAQ;AAAA,MACR;AAAA,MACA;AAAA,IACJ;AAAA,EACJ;AACJ;AAWO,IAAM,gBAAN,MAAoB;AAAA,EAYvB,YACI,OACA,SACA,aACA,gBACA,kBACA,mCACA,iBACA,kBACA,6BACF;AACE,SAAK,QAAQ;AACb,SAAK,UAAU;AACf,SAAK,cAAc;AACnB,SAAK,iBAAiB;AACtB,SAAK,mBAAmB;AAExB,SAAK,mBAAmB;AACxB,SAAK,oCAAoC;AACzC,SAAK,kBAAkB;AACvB,SAAK,8BAA8B;AAAA,EACvC;AAAA;AAAA,EAIO,OAAO,MAAuB;AACjC,QAAI,KAAK,qBAAqB,8BAA4B;AACtD,aAAO,KAAK,qBAAqB,QAAQ,KAAK,4BAA4B,SAAS,IAAI;AAAA,IAC3F,OAAO;AACH,aAAO,KAAK,qBAAqB;AAAA,IACrC;AAAA,EACJ;AAAA,EAEO,cAAc,MAAuB;AACxC,QAAI,KAAK,qBAAqB,8BAA4B;AACtD,aAAO,KAAK,qBAAqB,QAAQ,KAAK,4BAA4B,SAAS,IAAI;AAAA,IAC3F,OAAO;AACH,aAAO,KAAK,kCAAkC,SAAS,IAAI;AAAA,IAC/D;AAAA,EACJ;AAAA,EAEO,cAAc,YAA6B;AAC9C,WAAO,KAAK,gBAAgB,SAAS,UAAU;AAAA,EACnD;AAAA,EAEO,kBAAkB,aAAgC;AACrD,WAAO,YAAY,MAAM,CAAC,eAAe,KAAK,cAAc,UAAU,CAAC;AAAA,EAC3E;AAAA,EAEA,OAAc,SAAS,MAA6B;AAChD,UAAM,MAAM,KAAK,MAAM,IAAI;AAC3B,WAAO,IAAI;AAAA,MACP,IAAI;AAAA,MACJ,IAAI;AAAA,MACJ,IAAI;AAAA,MACJ,IAAI;AAAA,MACJ,IAAI;AAAA,MACJ,IAAI;AAAA,MACJ,IAAI;AAAA,MACJ,IAAI;AAAA,MACJ,IAAI;AAAA,IACR;AAAA,EACJ;AAAA;AAAA,EAIA,IAAI,eAAuB;AACvB,WAAO,KAAK;AAAA,EAChB;AAAA,EAEA,IAAI,gBAA0B;AAC1B,QAAI,KAAK,qBAAqB,8BAA4B;AACtD,aAAO,KAAK,4BAA4B,OAAO,KAAK,gBAAgB;AAAA,IACxE,OAAO;AACH,aAAO,CAAC,KAAK,gBAAgB;AAAA,IACjC;AAAA,EACJ;AAAA,EAEA,IAAI,gCAA0C;AAC1C,QAAI,KAAK,qBAAqB,8BAA4B;AACtD,aAAO,KAAK,4BAA4B,OAAO,KAAK,gBAAgB;AAAA,IACxE,OAAO;AACH,aAAO,KAAK;AAAA,IAChB;AAAA,EACJ;AAAA,EAEA,IAAI,cAAwB;AACxB,WAAO,KAAK;AAAA,EAChB;AACJ;AAsCO,SAAS,uBAAuB,YAEF;AACjC,MAAI,eAAe,QAAW;AAC1B,WAAO;AAAA,EACX;AACA,QAAM,YAAkC,CAAC;AAEzC,aAAW,OAAO,OAAO,KAAK,UAAU,GAAG;AACvC,UAAM,iBAAiB,WAAW,GAAG;AACrC,QAAI,gBAAgB;AAChB,gBAAU,GAAG,IAAI,IAAI;AAAA,QACjB,eAAe;AAAA,QACf,eAAe;AAAA,QACf,eAAe;AAAA,QACf,eAAe;AAAA,QACf,eAAe;AAAA,QACf,eAAe;AAAA,QACf,eAAe;AAAA,QACf,eAAe;AAAA,QACf,eAAe;AAAA,MACnB;AAAA,IACJ;AAAA,EACJ;AAEA,SAAO;AACX;;;AClUA,OAAO,SAAS,aAAa,WAAW,kBAAkB;AAC1D,SAAS,iBAAiB;;;ACHnB,SAAS,YAAqB;AACjC,SAAO,OAAO,WAAW;AAC7B;AAEO,IAAM,kBAAkB,MAAc;AACzC,SAAO,KAAK,MAAM,KAAK,IAAI,IAAI,GAAI;AACvC;AAEO,SAAS,QAAQ,GAAQ,GAAiB;AAC7C,MAAI,OAAO,MAAM,OAAO,GAAG;AACvB,WAAO;AAAA,EACX,WAAW,MAAM,QAAQ,MAAM,MAAM;AACjC,WAAO,MAAM;AAAA,EACjB;AAEA,MAAI,MAAM,QAAQ,CAAC,MAAM,MAAM,QAAQ,CAAC,GAAG;AACvC,WAAO;AAAA,EACX;AAEA,MAAI,MAAM,QAAQ,CAAC,GAAG;AAClB,UAAM,SAAS;AACf,UAAM,SAAS;AACf,QAAI,OAAO,WAAW,OAAO,QAAQ;AACjC,aAAO;AAAA,IACX;AAEA,aAAS,IAAI,GAAG,IAAI,OAAO,QAAQ,KAAK;AACpC,UAAI,CAAC,QAAQ,OAAO,CAAC,GAAG,OAAO,CAAC,CAAC,GAAG;AAChC,eAAO;AAAA,MACX;AAAA,IACJ;AAEA,WAAO;AAAA,EACX;AAEA,MAAI,OAAO,MAAM,UAAU;AACvB,UAAM,QAAQ,OAAO,KAAK,CAAC;AAC3B,UAAM,QAAQ,OAAO,KAAK,CAAC;AAC3B,QAAI,MAAM,WAAW,MAAM,QAAQ;AAC/B,aAAO;AAAA,IACX;AAEA,eAAW,OAAO,OAAO;AACrB,UAAI,CAAC,QAAQ,EAAE,GAAG,GAAG,EAAE,GAAG,CAAC,GAAG;AAC1B,eAAO;AAAA,MACX;AAAA,IACJ;AAEA,WAAO;AAAA,EACX,OAAO;AACH,WAAO,MAAM;AAAA,EACjB;AACJ;;;AClDA,SAAS,kBAAkB;AAIpB,IAAM,OAAN,MAAW;AAAA,EA0Bd,YAAY;AAAA,IACR;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACJ,GAmBG;AACC,SAAK,SAAS;AACd,SAAK,QAAQ;AACb,SAAK,iBAAiB;AACtB,SAAK,cAAc;AACnB,SAAK,WAAW;AAChB,SAAK,YAAY;AACjB,SAAK,WAAW;AAChB,SAAK,aAAa;AAClB,SAAK,uBAAuB;AAC5B,SAAK,cAAc;AACnB,SAAK,aAAa;AAClB,SAAK,gBAAgB;AACrB,SAAK,yBAAyB;AAC9B,SAAK,YAAY;AACjB,SAAK,eAAe;AACpB,SAAK,eAAe;AACpB,SAAK,aAAa;AAClB,SAAK,qBAAqB;AAAA,EAC9B;AAAA,EAEO,eAA0C;AAC7C,QAAI,CAAC,KAAK,aAAa;AACnB,aAAO;AAAA,IACX;AACA,WAAO,KAAK,OAAO,KAAK,WAAW;AAAA,EACvC;AAAA,EAEO,iBAAqC;AACxC,WAAO,KAAK;AAAA,EAChB;AAAA,EAEO,OAAO,OAA0C;AAtG5D;AAuGQ,YAAO,UAAK,yBAAL,mBAA4B;AAAA,EACvC;AAAA,EAEO,aAAa,SAA4C;AAC5D,QAAI,CAAC,KAAK,sBAAsB;AAC5B,aAAO;AAAA,IACX;AAEA,UAAM,iBAAiB,QAAQ,YAAY,EAAE,QAAQ,MAAM,GAAG;AAC9D,eAAW,SAAS,KAAK,sBAAsB;AAC3C,YAAM,gBAAgB,KAAK,qBAAqB,KAAK;AACrD,UAAI,cAAc,mBAAmB,gBAAgB;AACjD,eAAO;AAAA,MACX;AAAA,IACJ;AAEA,WAAO;AAAA,EACX;AAAA,EAEO,UAA2B;AAC9B,QAAI,CAAC,KAAK,sBAAsB;AAC5B,aAAO,CAAC;AAAA,IACZ;AAEA,WAAO,OAAO,OAAO,KAAK,oBAAoB;AAAA,EAClD;AAAA,EAEO,kBAA2B;AAC9B,WAAO,CAAC,CAAC,KAAK;AAAA,EAClB;AACJ;AA4BO,SAAS,UAAmB;AAC/B,QAAM,UAAU,WAAW,WAAW;AACtC,MAAI,YAAY,QAAW;AACvB,UAAM,IAAI,MAAM,6CAA6C;AAAA,EACjE;AAEA,QAAM,EAAE,SAAS,mBAAmB,IAAI;AACxC,MAAI,SAAS;AACT,WAAO;AAAA,MACH,SAAS;AAAA,MACT,YAAY;AAAA,MACZ,MAAM;AAAA,MACN,aAAa;AAAA,MACb,cAAc;AAAA,IAClB;AAAA,EACJ,WAAW,mBAAmB,MAAM;AAChC,WAAO;AAAA,MACH,SAAS;AAAA,MACT,YAAY;AAAA,MACZ,MAAM,mBAAmB;AAAA,MACzB,aAAa,mBAAmB;AAAA,MAChC,cAAc,QAAQ;AAAA,IAC1B;AAAA,EACJ,OAAO;AACH,WAAO;AAAA,MACH,SAAS;AAAA,MACT,YAAY;AAAA,MACZ,MAAM;AAAA,MACN,aAAa;AAAA,MACb,cAAc;AAAA,IAClB;AAAA,EACJ;AACJ;;;AFjJA,IAAM,qCAAqC;AAUpC,IAAM,cAAc,MAAM,cAA6C,MAAS;AAqBvF,IAAM,mBAAmB;AAAA,EACrB,SAAS;AAAA,EACT,oBAAoB;AAAA,IAChB,MAAM;AAAA,IACN,aAAa;AAAA,EACjB;AAAA,EACA,oBAAoB;AACxB;AAYA,SAAS,iBAAiB,QAAmB,QAAoC;AAC7E,QAAM,6BAA6B,iCAAK,OAAO,OAAZ,EAAkB,cAAc,OAAU;AAC7E,QAAM,kCAAkC,iCAAK,OAAO,mBAAmB,OAA/B,EAAqC,cAAc,OAAU;AACrG,QAAM,qBAAqB,CAAC,OAAO,WAAW,CAAC,QAAQ,4BAA4B,+BAA+B;AAElH,MAAI,CAAC,OAAO,MAAM;AACd,WAAO;AAAA,MACH,SAAS;AAAA,MACT,oBAAoB;AAAA,QAChB,MAAM;AAAA,QACN,aAAa;AAAA,MACjB;AAAA,MACA;AAAA,IACJ;AAAA,EACJ,WAAW,OAAO,SAAS;AACvB,WAAO;AAAA,MACH,SAAS;AAAA,MACT,oBAAoB;AAAA,QAChB,MAAM,OAAO;AAAA,QACb,aAAa,OAAO;AAAA,MACxB;AAAA,MACA;AAAA,IACJ;AAAA,EACJ,OAAO;AACH,WAAO;AAAA,MACH,SAAS;AAAA,MACT,oBAAoB;AAAA,QAChB,MAAM,OAAO;AAAA,QACb,aAAa,OAAO;AAAA,MACxB;AAAA,MACA;AAAA,IACJ;AAAA,EACJ;AACJ;AAEO,IAAM,eAAe,CAAC,UAA6B;AArI1D;AAsII,QAAM,CAAC,WAAW,aAAa,IAAI,WAAW,kBAAkB,gBAAgB;AAChF,QAAM,CAAC,aAAa,cAAc,IAAI,MAAM,SAAiB,CAAC;AAC9D,QAAM,SAAS,UAAU;AACzB,QAAM,sBAAqB,WAAM,uBAAN,YAA4B;AAEvD,QAAM,WAAW;AAAA,IACb,CAAC,WAA4B;AACzB,oBAAc,MAAM;AACpB,qBAAe,gBAAgB,CAAC;AAAA,IACpC;AAAA,IACA,CAAC,eAAe,cAAc;AAAA,EAClC;AAEA,QAAM,gBAAgB;AAAA,IAClB,CAACA,iBAAwB;AApJjC,UAAAC;AAqJY,YAAM,2BAA0BA,MAAA,MAAM,4BAAN,OAAAA,MAAiC;AACjE,aAAO,gBAAgB,IAAID,gBAAe;AAAA,IAC9C;AAAA,IACA,CAAC,MAAM,uBAAuB;AAAA,EAClC;AAGA,YAAU,MAAM;AACZ,QAAI,sBAAsB,UAAU,oBAAoB;AACpD,aAAO,QAAQ;AAAA,IACnB;AAAA,EACJ,GAAG,CAAC,UAAU,oBAAoB,oBAAoB,MAAM,CAAC;AAG7D,YAAU,MAAM;AACZ,QAAI,YAAY;AAEhB,aAAeE,mBAAkB;AAAA;AAC7B,cAAM,SAAS,MAAM,eAAe;AACpC,YAAI,CAAC,aAAa,CAAC,OAAO,OAAO;AAC7B,mBAAS,MAAM;AAAA,QACnB;AAAA,MACJ;AAAA;AAEA,IAAAA,iBAAgB;AAChB,WAAO,MAAM;AACT,kBAAY;AAAA,IAChB;AAAA,EACJ,GAAG,CAAC,CAAC;AAGL,YAAU,MAAM;AACZ,QAAI,YAAY;AAEhB,aAAeA,mBAAkB;AAAA;AAC7B,YAAI,CAAC,cAAc,WAAW,GAAG;AAC7B;AAAA,QACJ;AAEA,cAAM,SAAS,MAAM,eAAe;AACpC,YAAI,CAAC,aAAa,CAAC,OAAO,OAAO;AAC7B,mBAAS,MAAM;AAAA,QACnB;AAAA,MACJ;AAAA;AAEA,UAAM,WAAW,YAAYA,kBAAiB,IAAI,KAAK,GAAI;AAC3D,WAAO,MAAM;AACT,kBAAY;AACZ,oBAAc,QAAQ;AAAA,IAC1B;AAAA,EACJ,GAAG,CAAC,WAAW,CAAC;AAEhB,QAAM,4BAA4B,YAAY,MAAY;AACtD,QAAI,CAAC,cAAc,WAAW,GAAG;AAC7B;AAAA,IACJ;AAEA,UAAM,SAAS,MAAM,eAAe;AACpC,QAAI,CAAC,OAAO,OAAO;AACf,eAAS,MAAM;AAAA,IACnB;AAAA,EACJ,IAAG,CAAC,WAAW,CAAC;AAGhB,YAAU,MAAM;AACZ,QAAI,UAAU,GAAG;AACb,aAAO,iBAAiB,UAAU,yBAAyB;AAG3D,UAAI,MAAM,mBAAmB,OAAO;AAChC,eAAO,iBAAiB,SAAS,yBAAyB;AAAA,MAC9D;AAAA,IACJ;AAEA,WAAO,MAAM;AACT,UAAI,UAAU,GAAG;AACb,eAAO,oBAAoB,UAAU,yBAAyB;AAC9D,eAAO,oBAAoB,SAAS,yBAAyB;AAAA,MACjE;AAAA,IACJ;AAAA,EACJ,GAAG,CAAC,MAAM,gBAAgB,yBAAyB,CAAC;AAEpD,QAAM,SAAS,YAAY,MAAY;AACnC,UAAM,MAAM,oBAAoB;AAAA,MAC5B,QAAQ;AAAA,MACR,SAAS;AAAA,QACL,gBAAgB;AAAA,MACpB;AAAA,MACA,aAAa;AAAA,IACjB,CAAC;AACD,aAAS,EAAE,MAAM,QAAW,aAAa,OAAU,CAAC;AAAA,EACxD,IAAG,CAAC,QAAQ,CAAC;AAEb,QAAM,mBAAmB,CAAC,UAAkB,cAAuB,gBAAyC;AACxG,QAAI,KAAK,IAAI,gBAAgB;AAC7B,QAAI,MAAM;AAEV,QAAI,aAAa;AACb,aAAO,QAAQ,WAAW,EAAE,QAAQ,CAAC,CAAC,KAAKC,MAAK,MAAM;AAClD,WAAG,IAAI,KAAKA,MAAK;AAAA,MACrB,CAAC;AAAA,IACL;AAEA,QAAI,cAAc;AACd,SAAG,IAAI,kBAAkB,YAAY;AAAA,IACzC;AAEA,QAAI,GAAG,SAAS,GAAG;AACf,aAAO,IAAI,GAAG,SAAS;AAAA,IAC3B;AAEA,WAAO;AAAA,EACX;AAEA,QAAM,kBAAkB,CAAC,SAAkC;AACvD,WAAO,iBAAiB,mBAAmB,6BAAM,uBAAuB,6BAAM,yBAAyB;AAAA,EAC3G;AAEA,QAAM,mBAAmB,CAAC,SAAmC;AACzD,WAAO,iBAAiB,oBAAoB,6BAAM,wBAAwB,6BAAM,yBAAyB;AAAA,EAC7G;AACA,QAAM,oBAAoB;AAAA,IACtB,CAAC,SAA2B;AACxB,aAAO,gBAAgB,GAAG,MAAM,mBAAmB,6BAAM,iBAAiB;AAAA,IAC9E;AAAA,IACA,CAAC,MAAM,OAAO;AAAA,EAClB;AACA,QAAM,gBAAgB;AAAA,IAClB,CAAC,OAAgB,SAA2B;AACxC,UAAI,OAAO;AACP,eAAO,gBAAgB,GAAG,MAAM,kBAAkB,SAAS,6BAAM,iBAAiB;AAAA,MACtF,OAAO;AACH,eAAO,gBAAgB,GAAG,MAAM,eAAe,6BAAM,iBAAiB;AAAA,MAC1E;AAAA,IACJ;AAAA,IACA,CAAC,MAAM,OAAO;AAAA,EAClB;AACA,QAAM,wBAAwB;AAAA,IAC1B,CAAC,OAAgB,SAA2B;AACxC,UAAI,OAAO;AACP,eAAO,gBAAgB,GAAG,MAAM,wBAAwB,SAAS,6BAAM,iBAAiB;AAAA,MAC5F,OAAO;AACH,eAAO,gBAAgB,GAAG,MAAM,wBAAwB,6BAAM,iBAAiB;AAAA,MACnF;AAAA,IACJ;AAAA,IACA,CAAC,MAAM,OAAO;AAAA,EAClB;AACA,QAAM,sBAAsB;AAAA,IACxB,CAAC,SAA2B;AACxB,aAAO,gBAAgB,GAAG,MAAM,sBAAsB,6BAAM,iBAAiB;AAAA,IACjF;AAAA,IACA,CAAC,MAAM,OAAO;AAAA,EAClB;AAEA,QAAM,sBAAsB;AAAA,IACxB,CAAC,OAAe,SAA2B;AACvC,aAAO,gBAAgB,GAAG,MAAM,mBAAmB,SAAS,6BAAM,iBAAiB;AAAA,IACvF;AAAA,IACA,CAAC,MAAM,OAAO;AAAA,EAClB;AAEA,QAAM,uBAAuB;AAAA,IACzB,CAAC,OAAgB,SAA2B;AACxC,UAAI,OAAO;AACP,eAAO,gBAAgB,GAAG,MAAM,wBAAwB,SAAS,6BAAM,iBAAiB;AAAA,MAC5F,OAAO;AACH,eAAO,gBAAgB,GAAG,MAAM,wBAAwB,6BAAM,iBAAiB;AAAA,MACnF;AAAA,IACJ;AAAA,IACA,CAAC,MAAM,OAAO;AAAA,EAClB;AAEA,QAAM,aAAa,CAAC,QAAgB;AAChC,WAAO,SAAS,OAAO;AAAA,EAC3B;AAEA,QAAM,sBAAsB,CAAC,SAAkC,WAAW,gBAAgB,IAAI,CAAC;AAC/F,QAAM,uBAAuB,CAAC,SAAmC,WAAW,iBAAiB,IAAI,CAAC;AAClG,QAAM,wBAAwB,CAAC,SAA2B,WAAW,kBAAkB,IAAI,CAAC;AAC5F,QAAM,oBAAoB,CAAC,OAAgB,SAA2B,WAAW,cAAc,OAAO,IAAI,CAAC;AAC3G,QAAM,4BAA4B,CAAC,OAAgB,SAC/C,WAAW,sBAAsB,OAAO,IAAI,CAAC;AACjD,QAAM,0BAA0B,CAAC,SAA2B,WAAW,oBAAoB,IAAI,CAAC;AAChG,QAAM,0BAA0B,CAAC,OAAe,SAC5C,WAAW,oBAAoB,OAAO,IAAI,CAAC;AAC/C,QAAM,2BAA2B,CAAC,OAAgB,SAC9C,WAAW,qBAAqB,OAAO,IAAI,CAAC;AAEhD,QAAM,eAAe;AAAA,IACjB,CAAO,UAAkB;AACrB,YAAM,SAAS,MAAM,oBAAoB,KAAK;AAC9C,UAAI,OAAO,UAAU,cAAc;AAC/B,eAAO;AAAA,MACX,OAAO;AACH,iBAAS,MAAM;AACf,eAAO,OAAO;AAAA,MAClB;AAAA,IACJ;AAAA,IACA,CAAC,QAAQ;AAAA,EACb;AAEA,QAAM,kBAAkB,YAAY,MAAY;AAC5C,UAAM,SAAS,MAAM,eAAe;AACpC,QAAI,OAAO,OAAO;AACd,YAAM,IAAI,MAAM,yBAAyB;AAAA,IAC7C,OAAO;AACH,eAAS,MAAM;AACf,aAAO,OAAO;AAAA,IAClB;AAAA,EACJ,IAAG,CAAC,QAAQ,CAAC;AAEb,QAAM,QAAQ;AAAA,IACV,SAAS,UAAU;AAAA,IACnB,oBAAoB,UAAU;AAAA,IAC9B;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACJ;AACA,SAAO,oCAAC,YAAY,UAAZ,EAAqB,SAAe,MAAM,QAAS;AAC/D;AAiBA,SAAe,iBAA4C;AAAA;AACvD,QAAI;AACA,YAAM,mBAAmB,MAAM,MAAM,sBAAsB;AAAA,QACvD,QAAQ;AAAA,QACR,SAAS;AAAA,UACL,gBAAgB;AAAA,QACpB;AAAA,QACA,aAAa;AAAA,MACjB,CAAC;AAED,UAAI,iBAAiB,IAAI;AACrB,cAAM,EAAE,UAAU,aAAa,oBAAoB,YAAY,IAAI,MAAM,iBAAiB,KAAK;AAC/F,cAAM,OAAO,IAAI,KAAK;AAAA,UAClB,QAAQ,SAAS;AAAA,UACjB,OAAO,SAAS;AAAA,UAChB,gBAAgB,SAAS;AAAA,UACzB,aAAa,SAAS;AAAA,UACtB,UAAU,SAAS;AAAA,UACnB,WAAW,SAAS;AAAA,UACpB,UAAU,SAAS;AAAA,UACnB,YAAY,SAAS;AAAA,UACrB,sBAAsB,uBAAuB,SAAS,kBAAkB;AAAA,UACxE;AAAA,UACA,YAAY,SAAS;AAAA,UACrB,eAAe,SAAS;AAAA,UACxB,wBAAwB,SAAS;AAAA,UACjC,WAAW,SAAS;AAAA,UACpB,cAAc,SAAS;AAAA,UACvB,YAAY,SAAS;AAAA,UACrB,cAAc,SAAS;AAAA,UACvB;AAAA,QACJ,CAAC;AAED,eAAO,EAAE,MAAM,aAAa,OAAO,OAAU;AAAA,MACjD,WAAW,iBAAiB,WAAW,KAAK;AACxC,eAAO,EAAE,MAAM,QAAW,aAAa,QAAW,OAAO,OAAU;AAAA,MACvE,OAAO;AACH,gBAAQ,KAAK,2BAA2B,gBAAgB;AACxD,eAAO,EAAE,OAAO,aAAa;AAAA,MACjC;AAAA,IACJ,SAAS,GAAP;AACE,cAAQ,KAAK,2BAA2B,CAAC;AACzC,aAAO,EAAE,OAAO,aAAa;AAAA,IACjC;AAAA,EACJ;AAAA;AAYA,SAAe,oBAAoB,OAA8C;AAAA;AAC7E,QAAI;AACA,YAAM,cAAc,IAAI,gBAAgB,EAAE,eAAe,MAAM,CAAC,EAAE,SAAS;AAC3E,YAAM,MAAM,4BAA4B;AACxC,YAAM,mBAAmB,MAAM,MAAM,KAAK;AAAA,QACtC,QAAQ;AAAA,QACR,SAAS;AAAA,UACL,gBAAgB;AAAA,QACpB;AAAA,QACA,aAAa;AAAA,MACjB,CAAC;AAED,UAAI,iBAAiB,IAAI;AACrB,cAAM,EAAE,UAAU,aAAa,oBAAoB,YAAY,IAAI,MAAM,iBAAiB,KAAK;AAC/F,cAAM,OAAO,IAAI,KAAK;AAAA,UAClB,QAAQ,SAAS;AAAA,UACjB,OAAO,SAAS;AAAA,UAChB,gBAAgB,SAAS;AAAA,UACzB,aAAa,SAAS;AAAA,UACtB,UAAU,SAAS;AAAA,UACnB,WAAW,SAAS;AAAA,UACpB,UAAU,SAAS;AAAA,UACnB,YAAY,SAAS;AAAA,UACrB,sBAAsB,uBAAuB,SAAS,kBAAkB;AAAA,UACxE;AAAA,UACA,YAAY,SAAS;AAAA,UACrB,eAAe,SAAS;AAAA,UACxB,wBAAwB,SAAS;AAAA,UACjC,WAAW,SAAS;AAAA,UACpB,cAAc,SAAS;AAAA,UACvB,YAAY,SAAS;AAAA,UACrB;AAAA,QACJ,CAAC;AAED,eAAO,EAAE,MAAM,aAAa,OAAO,OAAU;AAAA,MACjD,WAAW,iBAAiB,WAAW,KAAK;AACxC,eAAO,EAAE,OAAO,aAAa;AAAA,MACjC,OAAO;AACH,gBAAQ,KAAK,4BAA4B,gBAAgB;AAAA,MAC7D;AAAA,IACJ,SAAS,GAAP;AACE,cAAQ,KAAK,4BAA4B,CAAC;AAAA,IAC9C;AACA,UAAM,IAAI,MAAM,0BAA0B;AAAA,EAC9C;AAAA;AAEA,IAAM,eAAe,CAAC,QAAgB;AAClC,QAAM,SAAS,SAAS,OAAO,OAAO;AACtC,SAAO,OAAO,GAAG;AACrB;AAEA,IAAM,kBAAkB,CAAC,KAAa,iBAA0B;AAC5D,MAAI,CAAC,cAAc;AACf,WAAO;AAAA,EACX;AAEA,MAAI,KAAK,IAAI,gBAAgB;AAC7B,KAAG,IAAI,MAAM,aAAa,YAAY,CAAC;AACvC,MAAI,IAAI,SAAS,GAAG,GAAG;AACnB,WAAO,GAAG,OAAO,GAAG,SAAS;AAAA,EACjC,OAAO;AACH,WAAO,GAAG,OAAO,GAAG,SAAS;AAAA,EACjC;AACJ;;;AGxgBA,SAAS,cAAAC,mBAAkB;AAGpB,SAAS,oBAAoB;AAChC,QAAM,UAAUC,YAAW,WAAW;AACtC,MAAI,YAAY,QAAW;AACvB,UAAM,IAAI,MAAM,uDAAuD;AAAA,EAC3E;AACA,QAAM;AAAA,IACF;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACJ,IAAI;AACJ,SAAO;AAAA,IACH;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACJ;AACJ;;;AC1BA,SAAS,cAAAC,mBAAkB;AAGpB,SAAS,oBAAoB;AAChC,QAAM,UAAUC,YAAW,WAAW;AACtC,MAAI,YAAY,QAAW;AACvB,UAAM,IAAI,MAAM,uDAAuD;AAAA,EAC3E;AACA,QAAM,EAAE,OAAO,IAAI;AACnB,SAAO;AACX;;;ACVA,OAAOC,UAAS,cAAAC,aAAY,aAAAC,kBAAiB;AAGtC,SAAS,uBAAuB;AACnC,QAAM,UAAUC,YAAW,WAAW;AACtC,MAAI,YAAY,QAAW;AACvB,UAAM,IAAI,MAAM,0DAA0D;AAAA,EAC9E;AACA,QAAM;AAAA,IACF;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACJ,IAAI;AACJ,SAAO;AAAA,IACH;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACJ;AACJ;AAMO,SAAS,iBAAiB,EAAE,SAAS,GAAkB;AAC1D,QAAM,EAAE,qBAAqB,IAAI,qBAAqB;AAEtD,EAAAC,WAAU,MAAM;AACZ,yBAAqB;AAAA,EACzB,GAAG,CAAC,CAAC;AAEL,SAAO,gBAAAC,OAAA,cAAAA,OAAA,gBAAG,QAAS;AACvB;AAEO,SAAS,gBAAgB,EAAE,SAAS,GAAkB;AACzD,QAAM,EAAE,oBAAoB,IAAI,qBAAqB;AACrD,EAAAD,WAAU,MAAM;AACZ,wBAAoB;AAAA,EACxB,GAAG,CAAC,CAAC;AACL,SAAO,gBAAAC,OAAA,cAAAA,OAAA,gBAAG,QAAS;AACvB;;;AClDA,SAAS,cAAAC,mBAAkB;AAGpB,SAAS,iBAAiB;AAC7B,QAAM,UAAUC,YAAW,WAAW;AACtC,MAAI,YAAY,QAAW;AACvB,UAAM,IAAI,MAAM,oDAAoD;AAAA,EACxE;AACA,QAAM,EAAE,gBAAgB,IAAI;AAC5B,SAAO;AACX;","names":["lastRefresh","_a","refreshAuthInfo","value","useContext","useContext","useContext","useContext","React","useContext","useEffect","useContext","useEffect","React","useContext","useContext"]}

package/dist/server/index.d.ts

@@ -1,5 +1,5 @@
 import * as _propelauth_node_apis from '@propelauth/node-apis';
-export { AccessToken, AccessTokenCreationException, AddUserToOrgException, AddUserToOrgRequest, ApiKeyCreateException, ApiKeyDeleteException, ApiKeyFetchException, ApiKeyFull, ApiKeyNew, ApiKeyResultPage, ApiKeyUpdateException, ApiKeyUpdateRequest, ApiKeyValidateException, ApiKeyValidateRateLimitedException, ApiKeyValidation, ApiKeysCreateRequest, ApiKeysQueryRequest, ChangeUserRoleInOrgException, CreateAccessTokenRequest, CreateMagicLinkRequest, CreateOrgException, CreateOrgRequest, CreateUserException, CreateUserRequest, FetchPendingInvitesParams, FetchSamlSpMetadataResponse, ForbiddenException, IdpProvider, MagicLink, MagicLinkCreationException, MigrateUserException, MigrateUserFromExternalSourceRequest, MigrateUserPasswordException, MigrateUserPasswordRequest, Org, OrgApiKeyValidation, OrgQuery, OrgQueryResponse, Organization, PendingInvite, PendingInvitesPage, PersonalApiKeyValidation, RateLimitedException, RemoveUserFromOrgException, RemoveUserFromOrgRequest, RevokePendingOrgInviteRequest, SetSamlIdpMetadataRequest, TokenVerificationMetadata, UnexpectedException, UpdateOrgException, UpdateOrgRequest, UpdateUserEmailException, UpdateUserEmailRequest, UpdateUserMetadataException, UpdateUserMetadataRequest, UpdateUserPasswordException, UpdateUserPasswordRequest, UserInOrgMetadata, UserNotFoundException, UsersInOrgPagedResponse, UsersInOrgQuery, UsersPagedResponse, UsersQuery } from '@propelauth/node-apis';
+export { AccessToken, AccessTokenCreationException, AddUserToOrgException, AddUserToOrgRequest, ApiKeyCreateException, ApiKeyDeleteException, ApiKeyFetchException, ApiKeyFull, ApiKeyNew, ApiKeyResultPage, ApiKeyUpdateException, ApiKeyUpdateRequest, ApiKeyValidateException, ApiKeyValidateRateLimitedException, ApiKeyValidation, ApiKeysCreateRequest, ApiKeysQueryRequest, ChangeUserRoleInOrgException, CreateAccessTokenRequest, CreateMagicLinkRequest, CreateOrgException, CreateOrgRequest, CreateUserException, CreateUserRequest, FeatureGatedException, FetchPendingInvitesParams, FetchSamlSpMetadataResponse, ForbiddenException, IdpProvider, IncorrectMfaCodeException, InvalidRequestFieldsException, MagicLink, MagicLinkCreationException, MfaNotEnabledException, MigrateUserException, MigrateUserFromExternalSourceRequest, MigrateUserPasswordException, MigrateUserPasswordRequest, Org, OrgApiKeyValidation, OrgQuery, OrgQueryResponse, Organization, PendingInvite, PendingInvitesPage, PersonalApiKeyValidation, RateLimitedException, RemoveUserFromOrgException, RemoveUserFromOrgRequest, RevokePendingOrgInviteException, RevokePendingOrgInviteRequest, SetSamlIdpMetadataRequest, StepUpMfaGrantType, StepUpMfaVerifyGrantResponse, StepUpMfaVerifyTotpResponse, TokenVerificationMetadata, UnexpectedException, UpdateOrgException, UpdateOrgRequest, UpdateUserEmailException, UpdateUserEmailRequest, UpdateUserMetadataException, UpdateUserMetadataRequest, UpdateUserPasswordException, UpdateUserPasswordRequest, UserInOrgMetadata, UserNotFoundException, UsersInOrgPagedResponse, UsersInOrgQuery, UsersPagedResponse, UsersQuery, VerifyStepUpGrantRequest, VerifyTotpChallengeRequest } from '@propelauth/node-apis';
 import { NextResponse, NextRequest } from 'next/server';
 
 declare enum SocialLoginProvider {
@@ -245,6 +245,8 @@ declare const getPropelAuthApis: () => {
     validateApiKey: (apiKeyToken: string) => Promise<_propelauth_node_apis.ApiKeyValidation>;
     validatePersonalApiKey: (apiKeyToken: string) => Promise<_propelauth_node_apis.PersonalApiKeyValidation>;
     validateOrgApiKey: (apiKeyToken: string) => Promise<_propelauth_node_apis.OrgApiKeyValidation>;
+    verifyStepUpTotpChallenge: (verifyTotpChallengeRequest: _propelauth_node_apis.VerifyTotpChallengeRequest) => Promise<_propelauth_node_apis.StepUpMfaVerifyTotpResponse>;
+    verifyStepUpGrant: (verifyStepUpGrantRequest: _propelauth_node_apis.VerifyStepUpGrantRequest) => Promise<_propelauth_node_apis.StepUpMfaVerifyGrantResponse>;
 };
 
 declare class AuthHookResponse {

package/dist/server/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/server/index.ts","../../src/loginMethod.ts","../../src/user.ts","../../src/server/exceptions.ts","../../src/server/shared.ts","../../src/server/api.ts","../../src/server/middleware/auth-hook-response.ts","../../src/shared.ts","../../src/server/app-router.ts","../../src/server/middleware/advanced-middleware.ts"],"sourcesContent":["export { validateAccessToken, validateAccessTokenOrUndefined } from './shared'\nexport type { OrgIdToOrgMemberInfo } from '../user'\nexport { UserFromToken, OrgMemberInfo } from '../user'\nexport { UnauthorizedException, ConfigurationException } from './exceptions'\nexport { getPropelAuthApis } from './api'\nexport { AuthHookResponse } from './middleware/auth-hook-response'\nexport { buildAuthMiddleware } from './middleware/advanced-middleware'\nexport type { PropelAuthMiddlewareOptions } from './middleware/advanced-middleware'\nexport type {\n    AccessToken,\n    AccessTokenCreationException,\n    AddUserToOrgException,\n    AddUserToOrgRequest,\n    ApiKeyCreateException,\n    ApiKeyDeleteException,\n    ApiKeyFetchException,\n    ApiKeyFull,\n    ApiKeyNew,\n    ApiKeyResultPage,\n    ApiKeyUpdateException,\n    ApiKeyUpdateRequest,\n    ApiKeyValidateException,\n    ApiKeyValidateRateLimitedException,\n    ApiKeyValidation,\n    ApiKeysCreateRequest,\n    ApiKeysQueryRequest,\n    ChangeUserRoleInOrgException,\n    CreateAccessTokenRequest,\n    CreateMagicLinkRequest,\n    CreateOrgException,\n    CreateOrgRequest,\n    CreateUserException,\n    CreateUserRequest,\n    ForbiddenException,\n    MagicLink,\n    MagicLinkCreationException,\n    MigrateUserException,\n    MigrateUserFromExternalSourceRequest,\n    MigrateUserPasswordException,\n    MigrateUserPasswordRequest,\n    Org,\n    Organization,\n    OrgApiKeyValidation,\n    OrgQuery,\n    OrgQueryResponse,\n    PersonalApiKeyValidation,\n    RateLimitedException,\n    RemoveUserFromOrgException,\n    RemoveUserFromOrgRequest,\n    TokenVerificationMetadata,\n    UnexpectedException,\n    UpdateOrgException,\n    UpdateOrgRequest,\n    UpdateUserEmailException,\n    UpdateUserEmailRequest,\n    UpdateUserMetadataException,\n    UpdateUserMetadataRequest,\n    UpdateUserPasswordException,\n    UpdateUserPasswordRequest,\n    UserNotFoundException,\n    UserInOrgMetadata,\n    UsersInOrgQuery,\n    UsersPagedResponse,\n    UsersInOrgPagedResponse,\n    UsersQuery,\n    FetchPendingInvitesParams,\n    PendingInvitesPage,\n    PendingInvite,\n    RevokePendingOrgInviteRequest,\n    FetchSamlSpMetadataResponse,\n    SetSamlIdpMetadataRequest,\n    IdpProvider,\n} from '@propelauth/node-apis'\n","export enum SocialLoginProvider {\n    Google = 'Google',\n    GitHub = 'GitHub',\n    Microsoft = 'Microsoft',\n    Slack = 'Slack',\n    LinkedIn = 'LinkedIn',\n    Salesforce = 'Salesforce',\n    Xero = 'Xero',\n    QuickBooksOnline = 'QuickBooks Online',\n}\n\nexport enum SamlLoginProvider {\n    Google = 'Google',\n    Rippling = 'Rippling',\n    OneLogin = 'OneLogin',\n    JumpCloud = 'JumpCloud',\n    Okta = 'Okta',\n    Azure = 'Azure',\n    Duo = 'Duo',\n    Generic = 'Generic',\n}\n\ntype InternalPasswordLoginMethod = {\n    login_method: 'password'\n}\n\ntype InternalMagicLinkLoginMethod = {\n    login_method: 'magic_link'\n}\n\ntype InternalSocialSsoLoginMethod = {\n    login_method: 'social_sso'\n    provider: SocialLoginProvider\n}\n\ntype InternalEmailConfirmationLinkLoginMethod = {\n    login_method: 'email_confirmation_link'\n}\n\ntype InternalSamlSsoLoginMethod = {\n    login_method: 'saml_sso'\n    provider: SamlLoginProvider\n    org_id: string\n}\n\ntype InternalImpersonationLoginMethod = {\n    login_method: 'impersonation'\n}\n\ntype InternalGeneratedFromBackendApiLoginMethod = {\n    login_method: 'generated_from_backend_api'\n}\n\ntype InternalUnknownLoginMethod = {\n    login_method: 'unknown'\n}\n\nexport type InternalLoginMethod =\n    | InternalPasswordLoginMethod\n    | InternalMagicLinkLoginMethod\n    | InternalSocialSsoLoginMethod\n    | InternalEmailConfirmationLinkLoginMethod\n    | InternalSamlSsoLoginMethod\n    | InternalImpersonationLoginMethod\n    | InternalGeneratedFromBackendApiLoginMethod\n    | InternalUnknownLoginMethod\n\ntype PasswordLoginMethod = {\n    loginMethod: 'password'\n}\n\ntype MagicLinkLoginMethod = {\n    loginMethod: 'magic_link'\n}\n\ntype SocialSsoLoginMethod = {\n    loginMethod: 'social_sso'\n    provider: SocialLoginProvider\n}\n\ntype EmailConfirmationLinkLoginMethod = {\n    loginMethod: 'email_confirmation_link'\n}\n\ntype SamlSsoLoginMethod = {\n    loginMethod: 'saml_sso'\n    provider: SamlLoginProvider\n    orgId: string\n}\n\ntype ImpersonationLoginMethod = {\n    loginMethod: 'impersonation'\n}\n\ntype GeneratedFromBackendApiLoginMethod = {\n    loginMethod: 'generated_from_backend_api'\n}\n\ntype UnknownLoginMethod = {\n    loginMethod: 'unknown'\n}\n\nexport type LoginMethod =\n    | PasswordLoginMethod\n    | MagicLinkLoginMethod\n    | SocialSsoLoginMethod\n    | EmailConfirmationLinkLoginMethod\n    | SamlSsoLoginMethod\n    | ImpersonationLoginMethod\n    | GeneratedFromBackendApiLoginMethod\n    | UnknownLoginMethod\n\nexport function toLoginMethod(snake_case?: InternalLoginMethod): LoginMethod {\n    if (!snake_case) {\n        return { loginMethod: 'unknown' }\n    }\n\n    switch (snake_case.login_method) {\n        case 'password':\n            return { loginMethod: 'password' }\n        case 'magic_link':\n            return { loginMethod: 'magic_link' }\n        case 'social_sso':\n            return { loginMethod: 'social_sso', provider: snake_case.provider }\n        case 'email_confirmation_link':\n            return { loginMethod: 'email_confirmation_link' }\n        case 'saml_sso':\n            return { loginMethod: 'saml_sso', provider: snake_case.provider, orgId: snake_case.org_id }\n        case 'impersonation':\n            return { loginMethod: 'impersonation' }\n        case 'generated_from_backend_api':\n            return { loginMethod: 'generated_from_backend_api' }\n        default:\n            return { loginMethod: 'unknown' }\n    }\n}\n","import { InternalLoginMethod, LoginMethod, toLoginMethod } from './loginMethod'\n\nexport class UserFromToken {\n    public userId: string\n\n    public activeOrgId?: string\n    public orgIdToOrgMemberInfo?: OrgIdToOrgMemberInfo\n\n    // Metadata about the user\n    public email: string\n    public firstName?: string\n    public lastName?: string\n    public username?: string\n    public properties?: { [key: string]: unknown }\n    public loginMethod?: LoginMethod\n\n    // If you used our migration APIs to migrate this user from a different system,\n    //   this is their original ID from that system.\n    public legacyUserId?: string\n    public impersonatorUserId?: string\n\n    constructor(\n        userId: string,\n        email: string,\n        orgIdToOrgMemberInfo?: OrgIdToOrgMemberInfo,\n        firstName?: string,\n        lastName?: string,\n        username?: string,\n        legacyUserId?: string,\n        impersonatorUserId?: string,\n        properties?: { [key: string]: unknown },\n        activeOrgId?: string,\n        loginMethod?: LoginMethod\n    ) {\n        this.userId = userId\n\n        this.activeOrgId = activeOrgId\n        this.orgIdToOrgMemberInfo = orgIdToOrgMemberInfo\n\n        this.email = email\n        this.firstName = firstName\n        this.lastName = lastName\n        this.username = username\n\n        this.legacyUserId = legacyUserId\n        this.impersonatorUserId = impersonatorUserId\n\n        this.properties = properties\n        this.loginMethod = loginMethod\n    }\n\n    public getActiveOrg(): OrgMemberInfo | undefined {\n        if (!this.activeOrgId || !this.orgIdToOrgMemberInfo) {\n            return undefined\n        }\n\n        return this.orgIdToOrgMemberInfo[this.activeOrgId]\n    }\n\n    public getActiveOrgId(): string | undefined {\n        return this.activeOrgId\n    }\n\n    public getOrg(orgId: string): OrgMemberInfo | undefined {\n        if (!this.orgIdToOrgMemberInfo) {\n            return undefined\n        }\n\n        return this.orgIdToOrgMemberInfo[orgId]\n    }\n\n    public getOrgByName(orgName: string): OrgMemberInfo | undefined {\n        if (!this.orgIdToOrgMemberInfo) {\n            return undefined\n        }\n\n        const urlSafeOrgName = orgName.toLowerCase().replace(/ /g, '-')\n        for (const orgId in this.orgIdToOrgMemberInfo) {\n            const orgMemberInfo = this.orgIdToOrgMemberInfo[orgId]\n            if (orgMemberInfo.urlSafeOrgName === urlSafeOrgName) {\n                return orgMemberInfo\n            }\n        }\n\n        return undefined\n    }\n\n    public getOrgs(): OrgMemberInfo[] {\n        if (!this.orgIdToOrgMemberInfo) {\n            return []\n        }\n\n        return Object.values(this.orgIdToOrgMemberInfo)\n    }\n\n    public isImpersonating(): boolean {\n        return !!this.impersonatorUserId\n    }\n\n    public static fromJSON(json: string): UserFromToken {\n        const obj = JSON.parse(json)\n        const orgIdToOrgMemberInfo: OrgIdToOrgMemberInfo = {}\n        for (const orgId in obj.orgIdToOrgMemberInfo) {\n            orgIdToOrgMemberInfo[orgId] = OrgMemberInfo.fromJSON(JSON.stringify(obj.orgIdToOrgMemberInfo[orgId]))\n        }\n        return new UserFromToken(\n            obj.userId,\n            obj.email,\n            orgIdToOrgMemberInfo,\n            obj.firstName,\n            obj.lastName,\n            obj.username,\n            obj.legacyUserId,\n            obj.impersonatorUserId,\n            obj.properties,\n            obj.activeOrgId,\n            obj.loginMethod\n        )\n    }\n\n    public static fromJwtPayload(payload: InternalUser): UserFromToken {\n        let activeOrgId: string | undefined\n        let orgIdToOrgMemberInfo: OrgIdToOrgMemberInfo | undefined\n\n        if (payload.org_member_info) {\n            activeOrgId = payload.org_member_info.org_id\n            orgIdToOrgMemberInfo = toOrgIdToOrgMemberInfo({ [activeOrgId]: payload.org_member_info })\n        } else {\n            activeOrgId = undefined\n            orgIdToOrgMemberInfo = toOrgIdToOrgMemberInfo(payload.org_id_to_org_member_info)\n        }\n\n        const loginMethod = toLoginMethod(payload.login_method)\n\n        return new UserFromToken(\n            payload.user_id,\n            payload.email,\n            orgIdToOrgMemberInfo,\n            payload.first_name,\n            payload.last_name,\n            payload.username,\n            payload.legacy_user_id,\n            payload.impersonator_user_id,\n            payload.properties,\n            activeOrgId,\n            loginMethod\n        )\n    }\n}\n\nexport type OrgIdToOrgMemberInfo = {\n    [orgId: string]: OrgMemberInfo\n}\n\nexport enum OrgRoleStructure {\n    SingleRole = \"single_role_in_hierarchy\",\n    MultiRole = \"multi_role\",\n}\n\nexport class OrgMemberInfo {\n    public orgId: string\n    public orgName: string\n    public orgMetadata: { [key: string]: any }\n    public urlSafeOrgName: string\n    public orgRoleStructure: OrgRoleStructure\n\n    public userAssignedRole: string\n    public userInheritedRolesPlusCurrentRole: string[]\n    public userPermissions: string[]\n    public userAssignedAdditionalRoles: string[]\n\n    constructor(\n        orgId: string,\n        orgName: string,\n        orgMetadata: { [key: string]: any },\n        urlSafeOrgName: string,\n        userAssignedRole: string,\n        userInheritedRolesPlusCurrentRole: string[],\n        userPermissions: string[],\n        orgRoleStructure: OrgRoleStructure,\n        userAssignedAdditionalRoles: string[]\n    ) {\n        this.orgId = orgId\n        this.orgName = orgName\n        this.orgMetadata = orgMetadata\n        this.urlSafeOrgName = urlSafeOrgName\n        this.orgRoleStructure = orgRoleStructure\n\n        this.userAssignedRole = userAssignedRole\n        this.userInheritedRolesPlusCurrentRole = userInheritedRolesPlusCurrentRole\n        this.userPermissions = userPermissions\n        this.userAssignedAdditionalRoles = userAssignedAdditionalRoles\n    }\n\n    // validation methods\n\n    public isRole(role: string): boolean {\n        if (this.orgRoleStructure === OrgRoleStructure.MultiRole) {\n            return this.userAssignedRole === role || this.userAssignedAdditionalRoles.includes(role)\n        } else {\n            return this.userAssignedRole === role\n        }\n    }\n\n    public isAtLeastRole(role: string): boolean {\n        if (this.orgRoleStructure === OrgRoleStructure.MultiRole) {\n            return this.userAssignedRole === role || this.userAssignedAdditionalRoles.includes(role)\n        } else {\n            return this.userInheritedRolesPlusCurrentRole.includes(role)\n        }\n    }\n\n    public hasPermission(permission: string): boolean {\n        return this.userPermissions.includes(permission)\n    }\n\n    public hasAllPermissions(permissions: string[]): boolean {\n        return permissions.every((permission) => this.hasPermission(permission))\n    }\n\n    public static fromJSON(json: string): OrgMemberInfo {\n        const obj = JSON.parse(json)\n        return new OrgMemberInfo(\n            obj.orgId,\n            obj.orgName,\n            obj.orgMetadata,\n            obj.urlSafeOrgName,\n            obj.userAssignedRole,\n            obj.userInheritedRolesPlusCurrentRole,\n            obj.userPermissions,\n            obj.orgRoleStructure,\n            obj.userAssignedAdditionalRoles\n        )\n    }\n\n    // getters for the private fields\n\n    get assignedRole(): string {\n        return this.userAssignedRole\n    }\n\n    get assignedRoles(): string[] {\n        if (this.orgRoleStructure === OrgRoleStructure.MultiRole) {\n            return this.userAssignedAdditionalRoles.concat(this.userAssignedRole)\n        } else {\n            return [this.userAssignedRole]\n        }\n    }\n\n    get inheritedRolesPlusCurrentRole(): string[] {\n        if (this.orgRoleStructure === OrgRoleStructure.MultiRole) {\n            return this.userAssignedAdditionalRoles.concat(this.userAssignedRole)\n        } else {\n            return this.userInheritedRolesPlusCurrentRole\n        }\n    }\n\n    get permissions(): string[] {\n        return this.userPermissions\n    }\n}\n\n// These Internal types exist since the server returns snake case, but typescript/javascript\n// convention is camelCase.\nexport type InternalOrgMemberInfo = {\n    org_id: string\n    org_name: string\n    org_metadata: { [key: string]: any }\n    url_safe_org_name: string\n    org_role_structure: OrgRoleStructure\n    user_role: string\n    inherited_user_roles_plus_current_role: string[]\n    user_permissions: string[]\n    additional_roles: string[]\n}\n\nexport type InternalUser = {\n    user_id: string\n\n    org_member_info?: InternalOrgMemberInfo\n    org_id_to_org_member_info?: { [org_id: string]: InternalOrgMemberInfo }\n\n    email: string\n    first_name?: string\n    last_name?: string\n    username?: string\n    properties?: { [key: string]: unknown }\n    login_method?: InternalLoginMethod\n\n    // If you used our migration APIs to migrate this user from a different system, this is their original ID from that system.\n    legacy_user_id?: string\n    impersonator_user_id?: string\n}\n\nexport function toUser(snake_case: InternalUser): UserFromToken {\n    return UserFromToken.fromJwtPayload(snake_case)\n}\n\nexport function toOrgIdToOrgMemberInfo(snake_case?: {\n    [org_id: string]: InternalOrgMemberInfo\n}): OrgIdToOrgMemberInfo | undefined {\n    if (snake_case === undefined) {\n        return undefined\n    }\n    const camelCase: OrgIdToOrgMemberInfo = {}\n\n    for (const key of Object.keys(snake_case)) {\n        const snakeCaseValue = snake_case[key]\n        if (snakeCaseValue) {\n            camelCase[key] = new OrgMemberInfo(\n                snakeCaseValue.org_id,\n                snakeCaseValue.org_name,\n                snakeCaseValue.org_metadata,\n                snakeCaseValue.url_safe_org_name,\n                snakeCaseValue.user_role,\n                snakeCaseValue.inherited_user_roles_plus_current_role,\n                snakeCaseValue.user_permissions,\n                snakeCaseValue.org_role_structure,\n                snakeCaseValue.additional_roles\n            )\n        }\n    }\n\n    return camelCase\n}\n","export class UnauthorizedException extends Error {\n    readonly message: string\n    readonly status: number\n\n    constructor(message: string) {\n        super(message)\n        this.message = message\n        this.status = 401\n    }\n}\n\nexport class ConfigurationException extends Error {\n    readonly message: string\n    readonly status: number\n\n    constructor(message: string) {\n        super(message)\n        this.message = message\n        this.status = 500\n    }\n}\n","import { ResponseCookie } from 'next/dist/compiled/@edge-runtime/cookies'\nimport { InternalUser, toUser, UserFromToken } from '../user'\nimport { ConfigurationException, UnauthorizedException } from './exceptions'\nimport * as jose from 'jose'\n\ntype RefreshAndAccessTokens = {\n    refreshToken: string\n    accessToken: string\n    error: 'none'\n}\n\ntype RefreshAndAccessTokensUnauthorizedError = {\n    error: 'unauthorized'\n}\n\ntype RefreshAndAccessTokensUnexpectedError = {\n    error: 'unexpected'\n}\n\nexport type RefreshTokenResponse =\n    | RefreshAndAccessTokens\n    | RefreshAndAccessTokensUnauthorizedError\n    | RefreshAndAccessTokensUnexpectedError\n\nexport const LOGIN_PATH = '/api/auth/login'\nexport const CALLBACK_PATH = '/api/auth/callback'\nexport const USERINFO_PATH = '/api/auth/userinfo'\nexport const LOGOUT_PATH = '/api/auth/logout'\nexport const ACCESS_TOKEN_COOKIE_NAME = '__pa_at'\nexport const REFRESH_TOKEN_COOKIE_NAME = '__pa_rt'\nexport const STATE_COOKIE_NAME = '__pa_state'\nexport const CUSTOM_HEADER_FOR_ACCESS_TOKEN = 'x-propelauth-access-token'\nexport const CUSTOM_HEADER_FOR_URL = 'x-propelauth-current-url'\nexport const CUSTOM_HEADER_FOR_PATH = 'x-propelauth-current-path'\nexport const RETURN_TO_PATH_COOKIE_NAME = '__pa_return_to_path'\n\nexport const COOKIE_OPTIONS: Partial<ResponseCookie> = {\n    httpOnly: true,\n    secure: true,\n    path: '/',\n}\n\nexport function getAuthUrlOrigin() {\n    return getAuthUrl().origin\n}\n\nexport function getAuthUrl() {\n    const authUrl = process.env.PROPELAUTH_AUTH_URL || process.env.NEXT_PUBLIC_AUTH_URL\n    if (!authUrl) {\n        throw new Error('NEXT_PUBLIC_AUTH_URL is not set')\n    }\n    return new URL(authUrl)\n}\n\nexport function getRedirectUri() {\n    const redirectUri = process.env.PROPELAUTH_REDIRECT_URI\n    if (!redirectUri) {\n        throw new Error('PROPELAUTH_REDIRECT_URI is not set')\n    }\n    return redirectUri\n}\n\nexport function getIntegrationApiKey() {\n    const integrationApiKey = process.env.PROPELAUTH_API_KEY\n    if (!integrationApiKey) {\n        throw new Error('PROPELAUTH_API_KEY is not set')\n    }\n    return integrationApiKey\n}\n\nexport function getVerifierKey() {\n    const verifierKey = process.env.PROPELAUTH_VERIFIER_KEY\n    if (!verifierKey) {\n        throw new Error('PROPELAUTH_VERIFIER_KEY is not set')\n    }\n    return verifierKey.replace(/\\\\n/g, '\\n')\n}\n\nexport function getSameSiteCookieValue(): \"none\" | \"lax\" | \"strict\" {\n    const sameSiteOverride = process.env.PROPELAUTH_SAME_SITE_COOKIE_OVERRIDE\n    if (sameSiteOverride === 'none') {\n        return 'none'\n    } else if (sameSiteOverride === 'lax') {\n        return 'lax'\n    } else if (sameSiteOverride === 'strict') {\n        return 'strict'\n    } else if (sameSiteOverride) {\n        throw new Error(\n            'Invalid value for PROPELAUTH_SAME_SITE_COOKIE_OVERRIDE, must be one of \"none\", \"lax\", or \"strict\"'\n        )\n    } else {\n        return 'lax'\n    }\n}\n\nexport async function refreshTokenWithAccessAndRefreshToken(\n    refreshToken: string,\n    activeOrgId?: string\n): Promise<RefreshTokenResponse> {\n    const body = {\n        refresh_token: refreshToken,\n    }\n\n    const queryParams = new URLSearchParams()\n    if (activeOrgId) {\n        queryParams.set('with_active_org_support', 'true')\n        queryParams.set('active_org_id', activeOrgId)\n    }\n\n    const url = `${getAuthUrlOrigin()}/api/backend/v1/refresh_token?${queryParams.toString()}`\n    const response = await fetch(url, {\n        method: 'POST',\n        body: JSON.stringify(body),\n        headers: {\n            'Content-Type': 'application/json',\n            Authorization: 'Bearer ' + getIntegrationApiKey(),\n        },\n    })\n\n    if (response.ok) {\n        const data = await response.json()\n        const newRefreshToken = data.refresh_token\n        const { access_token: accessToken, expires_at_seconds: expiresAtSeconds } = data.access_token\n\n        return {\n            refreshToken: newRefreshToken,\n            accessToken,\n            error: 'none',\n        }\n    } else if (response.status === 400 || response.status === 401) {\n        return { error: 'unauthorized' }\n    } else {\n        return { error: 'unexpected' }\n    }\n}\n\nexport async function validateAccessTokenOrUndefined(\n    accessToken: string | undefined\n): Promise<UserFromToken | undefined> {\n    try {\n        return await validateAccessToken(accessToken)\n    } catch (err) {\n        if (err instanceof ConfigurationException) {\n            throw err\n        } else if (err instanceof UnauthorizedException) {\n            return undefined\n        } else {\n            console.info('Error validating access token', err)\n            return undefined\n        }\n    }\n}\n\nexport async function validateAccessToken(accessToken: string | undefined): Promise<UserFromToken> {\n    let publicKey\n    try {\n        publicKey = await jose.importSPKI(getVerifierKey(), 'RS256')\n    } catch (err) {\n        console.error(\"Verifier key is invalid. Make sure it's specified correctly, including the newlines.\", err)\n        throw new ConfigurationException('Invalid verifier key')\n    }\n\n    if (!accessToken) {\n        throw new UnauthorizedException('No access token provided')\n    }\n\n    let accessTokenWithoutBearer = accessToken\n    if (accessToken.toLowerCase().startsWith('bearer ')) {\n        accessTokenWithoutBearer = accessToken.substring('bearer '.length)\n    }\n\n    try {\n        const { payload } = await jose.jwtVerify(accessTokenWithoutBearer, publicKey, {\n            issuer: getAuthUrlOrigin(),\n            algorithms: ['RS256'],\n        })\n\n        return toUser(<InternalUser>payload)\n    } catch (e) {\n        if (e instanceof Error) {\n            throw new UnauthorizedException(e.message)\n        } else {\n            throw new UnauthorizedException('Unable to decode jwt')\n        }\n    }\n}\n","import {getApis} from \"@propelauth/node-apis\";\nimport {getAuthUrl, getIntegrationApiKey} from \"./shared\";\n\nexport const getPropelAuthApis = () => {\n    const authUrl = getAuthUrl()\n    const integrationApiKey = getIntegrationApiKey()\n\n    return getApis(authUrl, integrationApiKey)\n}","import { NextResponse } from 'next/server'\n\nexport class AuthHookResponse {\n    private constructor(\n        private readonly type: 'continue' | 'reject',\n        private readonly response?: NextResponse\n    ) {}\n\n    static continue(): AuthHookResponse {\n        return new AuthHookResponse('continue')\n    }\n\n    static reject(response: NextResponse): AuthHookResponse {\n        return new AuthHookResponse('reject', response)\n    }\n\n    shouldContinue(): boolean {\n        return this.type === 'continue'\n    }\n\n    getResponse(): NextResponse | undefined {\n        return this.response\n    }\n}\n","export const ACTIVE_ORG_ID_COOKIE_NAME = '__pa_org_id'\n","import { redirect } from 'next/navigation'\nimport { cookies, headers } from 'next/headers'\nimport { NextRequest, NextResponse } from 'next/server'\nimport {\n    ACCESS_TOKEN_COOKIE_NAME,\n    CALLBACK_PATH,\n    COOKIE_OPTIONS,\n    CUSTOM_HEADER_FOR_ACCESS_TOKEN,\n    CUSTOM_HEADER_FOR_PATH,\n    CUSTOM_HEADER_FOR_URL,\n    getAuthUrlOrigin,\n    getIntegrationApiKey,\n    getRedirectUri,\n    getSameSiteCookieValue,\n    LOGIN_PATH,\n    LOGOUT_PATH,\n    REFRESH_TOKEN_COOKIE_NAME,\n    refreshTokenWithAccessAndRefreshToken,\n    RETURN_TO_PATH_COOKIE_NAME,\n    STATE_COOKIE_NAME,\n    USERINFO_PATH,\n    validateAccessToken,\n    validateAccessTokenOrUndefined,\n} from './shared'\nimport { UserFromToken } from './index'\nimport { ACTIVE_ORG_ID_COOKIE_NAME } from '../shared'\nimport { buildAuthMiddleware } from './middleware/advanced-middleware'\n\nexport type RedirectOptions =\n    | {\n          returnToPath: string\n          returnToCurrentPath?: never\n      }\n    | {\n          returnToPath?: never\n          returnToCurrentPath: boolean\n      }\n\nexport async function getUserOrRedirect(redirectOptions?: RedirectOptions): Promise<UserFromToken> {\n    const user = await getUser()\n    if (user) {\n        return user\n    } else {\n        await redirectToLogin(redirectOptions)\n        throw new Error('Redirecting to login')\n    }\n}\n\nexport async function getUser(): Promise<UserFromToken | undefined> {\n    const accessToken = await getAccessTokenAsync()\n    if (accessToken) {\n        const user = await validateAccessTokenOrUndefined(accessToken)\n        if (user) {\n            return user\n        }\n    }\n    return undefined\n}\n\nexport function getAccessToken(): string | undefined {\n    return headers().get(CUSTOM_HEADER_FOR_ACCESS_TOKEN) || cookies().get(ACCESS_TOKEN_COOKIE_NAME)?.value\n}\n\nexport async function getAccessTokenAsync(): Promise<string | undefined> {\n    return (\n        (await headers()).get(CUSTOM_HEADER_FOR_ACCESS_TOKEN) || (await cookies()).get(ACCESS_TOKEN_COOKIE_NAME)?.value\n    )\n}\n\nexport async function authMiddleware(req: NextRequest): Promise<Response> {\n    return buildAuthMiddleware()(req)\n}\n\nexport function getNextResponse(request: NextRequest, newAccessToken?: string) {\n    const headers = new Headers(request.headers)\n    headers.set(CUSTOM_HEADER_FOR_URL, request.nextUrl.toString())\n    headers.set(CUSTOM_HEADER_FOR_PATH, request.nextUrl.pathname + request.nextUrl.search)\n    if (newAccessToken) {\n        headers.set(CUSTOM_HEADER_FOR_ACCESS_TOKEN, newAccessToken)\n    }\n    return NextResponse.next({\n        request: {\n            headers,\n        },\n    })\n}\n\nexport type RouteHandlerArgs = {\n    postLoginRedirectPathFn?: (req: NextRequest) => string\n    getDefaultActiveOrgId?: (req: NextRequest, user: UserFromToken) => string | undefined\n}\n\nexport function getRouteHandlers(args?: RouteHandlerArgs) {\n    function loginGetHandler(req: NextRequest) {\n        return signupOrLoginHandler(req, false)\n    }\n\n    function signupGetHandler(req: NextRequest) {\n        return signupOrLoginHandler(req, true)\n    }\n\n    function signupOrLoginHandler(req: NextRequest, isSignup: boolean) {\n        const returnToPath = req.nextUrl.searchParams.get('return_to_path')\n        const state = randomState()\n        const redirectUri = getRedirectUri()\n        const sameSite = getSameSiteCookieValue()\n\n        const authorizeUrlSearchParams = req.nextUrl.searchParams\n        authorizeUrlSearchParams.set('redirect_uri', redirectUri)\n        authorizeUrlSearchParams.set('state', state)\n        authorizeUrlSearchParams.set('signup', isSignup ? 'true' : 'false')\n        const authorize_url = getAuthUrlOrigin() + '/propelauth/ssr/authorize?' + authorizeUrlSearchParams.toString()\n\n        const headers = new Headers()\n        headers.append('Location', authorize_url)\n        headers.append('Set-Cookie', `${STATE_COOKIE_NAME}=${state}; Path=/; HttpOnly; Secure; SameSite=${sameSite}`)\n        if (returnToPath) {\n            if (returnToPath.startsWith('/')) {\n                headers.append(\n                    'Set-Cookie',\n                    `${RETURN_TO_PATH_COOKIE_NAME}=${returnToPath}; Path=/; HttpOnly; Secure; SameSite=${sameSite}; Max-Age=600`\n                )\n            } else {\n                console.warn('return_to_path must start with /')\n            }\n        }\n\n        return new Response(null, {\n            status: 302,\n            headers,\n        })\n    }\n\n    async function callbackGetHandler(req: NextRequest) {\n        const sameSite = getSameSiteCookieValue()\n        const oauthState = req.cookies.get(STATE_COOKIE_NAME)?.value\n        if (!oauthState || oauthState.length !== 64) {\n            return new Response(null, { status: 302, headers: { Location: LOGIN_PATH } })\n        }\n\n        const queryParams = req.nextUrl.searchParams\n        const state = queryParams.get('state')\n        const code = queryParams.get('code')\n        if (state !== oauthState) {\n            return new Response(null, { status: 302, headers: { Location: LOGIN_PATH } })\n        }\n\n        const authUrlOrigin = getAuthUrlOrigin()\n        const redirectUri = getRedirectUri()\n        const integrationApiKey = getIntegrationApiKey()\n        const oauth_token_body = {\n            redirect_uri: redirectUri,\n            code,\n        }\n        const url = `${authUrlOrigin}/propelauth/ssr/token`\n        const response = await fetch(url, {\n            method: 'POST',\n            body: JSON.stringify(oauth_token_body),\n            headers: {\n                'Content-Type': 'application/json',\n                Authorization: 'Bearer ' + integrationApiKey,\n            },\n        })\n\n        if (response.ok) {\n            const data = await response.json()\n\n            const accessToken = data.access_token\n\n            // If we have a return_to_path cookie, we'll use that\n            // Otherwise, we'll use the postLoginRedirectPathFn\n            const returnToPathFromCookie = req.cookies.get(RETURN_TO_PATH_COOKIE_NAME)?.value\n            const returnToPath =\n                returnToPathFromCookie ?? (args?.postLoginRedirectPathFn ? args.postLoginRedirectPathFn(req) : '/')\n            if (!returnToPath) {\n                console.error('postLoginRedirectPathFn returned undefined')\n                return new Response('Unexpected error', { status: 500 })\n            }\n\n            // For Active Org, if there is one set, we need to issue a new access token\n            // We start by checking if there's an existing cookie AND the user is in that org\n            // Otherwise, we'll use the default active org function to get the active org\n            // If none of that, we'll just use the access token as is\n            const currentActiveOrgId = req.cookies.get(ACTIVE_ORG_ID_COOKIE_NAME)?.value\n\n            const user = await validateAccessToken(accessToken)\n            const isUserInCurrentActiveOrg = !!currentActiveOrgId && !!user.getOrg(currentActiveOrgId)\n\n            let activeOrgId = undefined\n            if (isUserInCurrentActiveOrg) {\n                activeOrgId = currentActiveOrgId\n            } else if (args?.getDefaultActiveOrgId) {\n                activeOrgId = args.getDefaultActiveOrgId(req, user)\n            }\n\n            // If there's an active org, we need to re-issue a new access token for the active org\n            if (activeOrgId) {\n                const response = await refreshTokenWithAccessAndRefreshToken(data.refresh_token, activeOrgId)\n                if (response.error === 'unexpected') {\n                    throw new Error('Unexpected error while setting active org')\n                } else if (response.error === 'unauthorized') {\n                    console.error(\n                        'Unauthorized error while setting active org. Your user may not have access to this org'\n                    )\n                    return new Response('Unauthorized', { status: 401 })\n                } else {\n                    const headers = new Headers()\n                    headers.append('Location', returnToPath)\n                    headers.append(\n                        'Set-Cookie',\n                        `${ACCESS_TOKEN_COOKIE_NAME}=${response.accessToken}; Path=/; HttpOnly; Secure; SameSite=${sameSite}`\n                    )\n                    headers.append(\n                        'Set-Cookie',\n                        `${REFRESH_TOKEN_COOKIE_NAME}=${response.refreshToken}; Path=/; HttpOnly; Secure; SameSite=${sameSite}`\n                    )\n                    headers.append(\n                        'Set-Cookie',\n                        `${ACTIVE_ORG_ID_COOKIE_NAME}=${activeOrgId}; Path=/; HttpOnly; Secure; SameSite=${sameSite}`\n                    )\n                    headers.append('Set-Cookie', getCookieForReturnToPathInCallback(returnToPathFromCookie))\n                    return new Response(null, {\n                        status: 302,\n                        headers,\n                    })\n                }\n            }\n\n            const headers = new Headers()\n            headers.append('Location', returnToPath)\n            headers.append(\n                'Set-Cookie',\n                `${ACCESS_TOKEN_COOKIE_NAME}=${accessToken}; Path=/; HttpOnly; Secure; SameSite=${sameSite}`\n            )\n            headers.append(\n                'Set-Cookie',\n                `${REFRESH_TOKEN_COOKIE_NAME}=${data.refresh_token}; Path=/; HttpOnly; Secure; SameSite=${sameSite}`\n            )\n            headers.append(\n                'Set-Cookie',\n                `${ACTIVE_ORG_ID_COOKIE_NAME}=; Path=/; HttpOnly; Secure; SameSite=${sameSite}; Max-Age=0`\n            )\n            headers.append('Set-Cookie', getCookieForReturnToPathInCallback(returnToPathFromCookie))\n            return new Response(null, {\n                status: 302,\n                headers,\n            })\n        } else if (response.status === 401) {\n            const apiKey = getIntegrationApiKey()\n            const firstFourChars = apiKey.substring(0, 4)\n            console.error(\n                `Couldn't finish the login process for this user. This is most likely caused by an incorrect PROPELAUTH_API_KEY. Your API key starts with ${firstFourChars}... double check that that matches the API key in the PropelAuth dashboard for this environment.`\n            )\n            return new Response('Unexpected error', { status: 500 })\n        } else {\n            return new Response('Unexpected error', { status: 500 })\n        }\n    }\n\n    async function userinfoGetHandler(req: NextRequest) {\n        const oldRefreshToken = req.cookies.get(REFRESH_TOKEN_COOKIE_NAME)?.value\n        const activeOrgId = req.cookies.get(ACTIVE_ORG_ID_COOKIE_NAME)?.value\n        const sameSite = getSameSiteCookieValue()\n\n        // For the userinfo endpoint, we want to get the most up-to-date info, so we'll refresh the access token\n        if (oldRefreshToken) {\n            const refreshResponse = await refreshTokenWithAccessAndRefreshToken(oldRefreshToken, activeOrgId)\n            if (refreshResponse.error === 'unexpected') {\n                throw new Error('Unexpected error while refreshing access token')\n            } else if (refreshResponse.error === 'unauthorized') {\n                const headers = new Headers()\n                headers.append(\n                    'Set-Cookie',\n                    `${ACCESS_TOKEN_COOKIE_NAME}=; Path=/; HttpOnly; Secure; SameSite=${sameSite}; Max-Age=0`\n                )\n                headers.append(\n                    'Set-Cookie',\n                    `${REFRESH_TOKEN_COOKIE_NAME}=; Path=/; HttpOnly; Secure; SameSite=${sameSite}; Max-Age=0`\n                )\n                headers.append(\n                    'Set-Cookie',\n                    `${ACTIVE_ORG_ID_COOKIE_NAME}=; Path=/; HttpOnly; Secure; SameSite=${sameSite}; Max-Age=0`\n                )\n                return new Response('Unauthorized', { status: 401, headers })\n            }\n\n            const refreshToken = refreshResponse.refreshToken\n            const accessToken = refreshResponse.accessToken\n\n            const authUrlOrigin = getAuthUrlOrigin()\n            const path = `${authUrlOrigin}/propelauth/oauth/userinfo`\n            const response = await fetch(path, {\n                headers: {\n                    'Content-Type': 'application/json',\n                    Authorization: 'Bearer ' + accessToken,\n                },\n            })\n            if (response.ok) {\n                const userFromToken = await validateAccessToken(accessToken)\n                const data = await response.json()\n                const jsonResponse = {\n                    userinfo: data,\n                    accessToken,\n                    impersonatorUserId: userFromToken.impersonatorUserId,\n                    activeOrgId,\n                }\n\n                const headers = new Headers()\n                headers.append(\n                    'Set-Cookie',\n                    `${ACCESS_TOKEN_COOKIE_NAME}=${accessToken}; Path=/; HttpOnly; Secure; SameSite=${sameSite}`\n                )\n                headers.append(\n                    'Set-Cookie',\n                    `${REFRESH_TOKEN_COOKIE_NAME}=${refreshToken}; Path=/; HttpOnly; Secure; SameSite=${sameSite}`\n                )\n                headers.append('Content-Type', 'application/json')\n                return new Response(JSON.stringify(jsonResponse), {\n                    status: 200,\n                    headers,\n                })\n            } else if (response.status === 401) {\n                const headers = new Headers()\n                headers.append(\n                    'Set-Cookie',\n                    `${ACCESS_TOKEN_COOKIE_NAME}=; Path=/; HttpOnly; Secure; SameSite=${sameSite}; Max-Age=0`\n                )\n                headers.append(\n                    'Set-Cookie',\n                    `${REFRESH_TOKEN_COOKIE_NAME}=; Path=/; HttpOnly; Secure; SameSite=${sameSite}; Max-Age=0`\n                )\n                headers.append(\n                    'Set-Cookie',\n                    `${ACTIVE_ORG_ID_COOKIE_NAME}=; Path=/; HttpOnly; Secure; SameSite=${sameSite}; Max-Age=0`\n                )\n                return new Response(null, {\n                    status: 401,\n                    headers,\n                })\n            } else {\n                return new Response(null, { status: 500 })\n            }\n        }\n\n        const headers = new Headers()\n        headers.append(\n            'Set-Cookie',\n            `${ACCESS_TOKEN_COOKIE_NAME}=; Path=/; HttpOnly; Secure; SameSite=${sameSite}; Max-Age=0`\n        )\n        headers.append(\n            'Set-Cookie',\n            `${REFRESH_TOKEN_COOKIE_NAME}=; Path=/; HttpOnly; Secure; SameSite=${sameSite}; Max-Age=0`\n        )\n        headers.append(\n            'Set-Cookie',\n            `${ACTIVE_ORG_ID_COOKIE_NAME}=; Path=/; HttpOnly; Secure; SameSite=${sameSite}; Max-Age=0`\n        )\n        return new Response(null, { status: 401 })\n    }\n\n    async function logoutGetHandler(req: NextRequest) {\n        // Real logout requests will go to the logout POST handler\n        // This endpoint is a landing page for when people logout from the hosted UIs\n        // Instead of doing a logout we'll check the refresh token.\n        // If it's invalid, we'll clear the cookies and redirect using the postLoginRedirectPathFn\n        const path = args?.postLoginRedirectPathFn ? args.postLoginRedirectPathFn(req) : '/'\n        if (!path) {\n            console.error('postLoginPathFn returned undefined')\n            return new Response('Unexpected error', { status: 500 })\n        }\n        const sameSite = getSameSiteCookieValue()\n\n        const refreshToken = req.cookies.get(REFRESH_TOKEN_COOKIE_NAME)?.value\n        if (!refreshToken) {\n            const headers = new Headers()\n            headers.append('Location', path)\n            headers.append(\n                'Set-Cookie',\n                `${ACCESS_TOKEN_COOKIE_NAME}=; Path=/; HttpOnly; Secure; SameSite=${sameSite}; Max-Age=0`\n            )\n            headers.append(\n                'Set-Cookie',\n                `${REFRESH_TOKEN_COOKIE_NAME}=; Path=/; HttpOnly; Secure; SameSite=${sameSite}; Max-Age=0`\n            )\n            headers.append(\n                'Set-Cookie',\n                `${ACTIVE_ORG_ID_COOKIE_NAME}=; Path=/; HttpOnly; Secure; SameSite=${sameSite}; Max-Age=0`\n            )\n            return new Response(null, {\n                status: 302,\n                headers,\n            })\n        }\n\n        const activeOrgId = req.cookies.get(ACTIVE_ORG_ID_COOKIE_NAME)?.value\n        const refreshResponse = await refreshTokenWithAccessAndRefreshToken(refreshToken, activeOrgId)\n        if (refreshResponse.error === 'unexpected') {\n            console.error('Unexpected error while refreshing access token')\n            return new Response('Unexpected error', { status: 500 })\n        } else if (refreshResponse.error === 'unauthorized') {\n            const headers = new Headers()\n            headers.append('Location', path)\n            headers.append(\n                'Set-Cookie',\n                `${ACCESS_TOKEN_COOKIE_NAME}=; Path=/; HttpOnly; Secure; SameSite=${sameSite}; Max-Age=0`\n            )\n            headers.append(\n                'Set-Cookie',\n                `${REFRESH_TOKEN_COOKIE_NAME}=; Path=/; HttpOnly; Secure; SameSite=${sameSite}; Max-Age=0`\n            )\n            headers.append(\n                'Set-Cookie',\n                `${ACTIVE_ORG_ID_COOKIE_NAME}=; Path=/; HttpOnly; Secure; SameSite=${sameSite}; Max-Age=0`\n            )\n            return new Response(null, {\n                status: 302,\n                headers,\n            })\n        } else {\n            const headers = new Headers()\n            headers.append('Location', path)\n            return new Response(null, {\n                status: 302,\n                headers,\n            })\n        }\n    }\n\n    async function logoutPostHandler(req: NextRequest) {\n        const sameSite = getSameSiteCookieValue()\n        const refreshToken = req.cookies.get(REFRESH_TOKEN_COOKIE_NAME)?.value\n        if (!refreshToken) {\n            const headers = new Headers()\n            headers.append(\n                'Set-Cookie',\n                `${ACCESS_TOKEN_COOKIE_NAME}=; Path=/; HttpOnly; Secure; SameSite=${sameSite}; Max-Age=0`\n            )\n            headers.append(\n                'Set-Cookie',\n                `${REFRESH_TOKEN_COOKIE_NAME}=; Path=/; HttpOnly; Secure; SameSite=${sameSite}; Max-Age=0`\n            )\n            headers.append(\n                'Set-Cookie',\n                `${ACTIVE_ORG_ID_COOKIE_NAME}=; Path=/; HttpOnly; Secure; SameSite=${sameSite}; Max-Age=0`\n            )\n            return new Response(null, { status: 200, headers })\n        }\n\n        const authUrlOrigin = getAuthUrlOrigin()\n        const integrationApiKey = getIntegrationApiKey()\n        const logoutBody = { refresh_token: refreshToken }\n        const url = `${authUrlOrigin}/api/backend/v1/logout`\n        const response = await fetch(url, {\n            method: 'POST',\n            body: JSON.stringify(logoutBody),\n            headers: {\n                'Content-Type': 'application/json',\n                Authorization: 'Bearer ' + integrationApiKey,\n            },\n        })\n\n        if (!response.ok) {\n            console.warn(\n                'Unable to logout, clearing cookies and continuing anyway',\n                response.status,\n                response.statusText\n            )\n        }\n        const headers = new Headers()\n        headers.append(\n            'Set-Cookie',\n            `${ACCESS_TOKEN_COOKIE_NAME}=; Path=/; HttpOnly; Secure; SameSite=${sameSite}; Max-Age=0`\n        )\n        headers.append(\n            'Set-Cookie',\n            `${REFRESH_TOKEN_COOKIE_NAME}=; Path=/; HttpOnly; Secure; SameSite=${sameSite}; Max-Age=0`\n        )\n        headers.append(\n            'Set-Cookie',\n            `${ACTIVE_ORG_ID_COOKIE_NAME}=; Path=/; HttpOnly; Secure; SameSite=${sameSite}; Max-Age=0`\n        )\n        return new Response(null, { status: 200, headers })\n    }\n\n    async function setActiveOrgHandler(req: NextRequest) {\n        const oldRefreshToken = req.cookies.get(REFRESH_TOKEN_COOKIE_NAME)?.value\n        const activeOrgId = req.nextUrl.searchParams.get('active_org_id')\n        const sameSite = getSameSiteCookieValue()\n\n        if (!oldRefreshToken) {\n            const headers = new Headers()\n            headers.append(\n                'Set-Cookie',\n                `${ACTIVE_ORG_ID_COOKIE_NAME}=; Path=/; HttpOnly; Secure; SameSite=${sameSite}; Max-Age=0`\n            )\n            return new Response(null, { status: 401, headers })\n        }\n\n        if (!activeOrgId) {\n            return new Response(null, { status: 400 })\n        }\n\n        const refreshResponse = await refreshTokenWithAccessAndRefreshToken(oldRefreshToken, activeOrgId)\n        if (refreshResponse.error === 'unexpected') {\n            throw new Error('Unexpected error while setting active org id')\n        } else if (refreshResponse.error === 'unauthorized') {\n            return new Response('Unauthorized', { status: 401 })\n        }\n\n        const refreshToken = refreshResponse.refreshToken\n        const accessToken = refreshResponse.accessToken\n\n        const authUrlOrigin = getAuthUrlOrigin()\n        const path = `${authUrlOrigin}/propelauth/oauth/userinfo`\n        const response = await fetch(path, {\n            headers: {\n                'Content-Type': 'application/json',\n                Authorization: 'Bearer ' + accessToken,\n            },\n        })\n\n        if (response.ok) {\n            const userFromToken = await validateAccessToken(accessToken)\n            const data = await response.json()\n            const jsonResponse = {\n                userinfo: data,\n                accessToken,\n                impersonatorUserId: userFromToken.impersonatorUserId,\n                activeOrgId,\n            }\n\n            const headers = new Headers()\n            headers.append(\n                'Set-Cookie',\n                `${ACCESS_TOKEN_COOKIE_NAME}=${accessToken}; Path=/; HttpOnly; Secure; SameSite=${sameSite}`\n            )\n            headers.append(\n                'Set-Cookie',\n                `${REFRESH_TOKEN_COOKIE_NAME}=${refreshToken}; Path=/; HttpOnly; Secure; SameSite=${sameSite}`\n            )\n            headers.append(\n                'Set-Cookie',\n                `${ACTIVE_ORG_ID_COOKIE_NAME}=${activeOrgId}; Path=/; HttpOnly; Secure; SameSite=${sameSite}`\n            )\n            headers.append('Content-Type', 'application/json')\n            return new Response(JSON.stringify(jsonResponse), {\n                status: 200,\n                headers,\n            })\n        } else if (response.status === 401) {\n            return new Response(null, {\n                status: 401,\n            })\n        } else {\n            return new Response(null, { status: 500 })\n        }\n    }\n\n    async function getRouteHandler(req: NextRequest, { params }: { params: { slug: string } }) {\n        const { slug } = await params\n        if (slug === 'login') {\n            return loginGetHandler(req)\n        } else if (slug === 'signup') {\n            return signupGetHandler(req)\n        } else if (slug === 'callback') {\n            return callbackGetHandler(req)\n        } else if (slug === 'userinfo') {\n            return userinfoGetHandler(req)\n        } else if (slug === 'logout') {\n            return logoutGetHandler(req)\n        } else {\n            return new Response('', { status: 404 })\n        }\n    }\n\n    async function postRouteHandler(req: NextRequest, { params }: { params: { slug: string } }) {\n        const { slug } = await params\n        if (slug === 'logout') {\n            return logoutPostHandler(req)\n        } else if (slug === 'set-active-org') {\n            return setActiveOrgHandler(req)\n        } else {\n            return new Response('', { status: 404 })\n        }\n    }\n\n    async function getRouteHandlerAsync(req: NextRequest, { params }: { params: Promise<{ slug: string }> }) {\n        const awaitedParams = await params\n        return getRouteHandler(req, { params: awaitedParams })\n    }\n\n    async function postRouteHandlerAsync(req: NextRequest, { params }: { params: Promise<{ slug: string }> }) {\n        const awaitedParams = await params\n        return postRouteHandler(req, { params: awaitedParams })\n    }\n\n    return {\n        getRouteHandler,\n        postRouteHandler,\n        getRouteHandlerAsync,\n        postRouteHandlerAsync,\n    }\n}\n\nfunction randomState(): string {\n    const randomBytes = crypto.getRandomValues(new Uint8Array(32))\n    return Array.from(randomBytes)\n        .map((b) => b.toString(16).padStart(2, '0'))\n        .join('')\n}\n\nasync function redirectToLogin(redirectOptions?: RedirectOptions) {\n    if (!redirectOptions) {\n        redirect(LOGIN_PATH)\n    } else if (redirectOptions.returnToPath) {\n        const loginPath = LOGIN_PATH + '?return_to_path=' + encodeURI(redirectOptions.returnToPath)\n        redirect(loginPath)\n    } else if (redirectOptions.returnToCurrentPath) {\n        const encodedPath = await getUrlEncodedRedirectPathForCurrentPath()\n        if (encodedPath) {\n            const loginPath = LOGIN_PATH + '?return_to_path=' + encodedPath\n            redirect(loginPath)\n        } else {\n            console.warn('Could not get current URL to redirect to')\n            redirect(LOGIN_PATH)\n        }\n    }\n}\n\nexport async function getUrlEncodedRedirectPathForCurrentPath(): Promise<string | undefined> {\n    const path = await getCurrentPathAsync()\n    if (!path) {\n        return undefined\n    }\n\n    return encodeURIComponent(path)\n}\n\n// We should keep the redirect path around for a short period in case multiple windows are racing\nfunction getCookieForReturnToPathInCallback(returnToPathFromCookie: string | undefined) {\n    const sameSite = getSameSiteCookieValue()\n\n    if (returnToPathFromCookie) {\n        return `${RETURN_TO_PATH_COOKIE_NAME}=${returnToPathFromCookie}; Path=/; HttpOnly; Secure; SameSite=${sameSite}; Max-Age=15`\n    } else {\n        return `${RETURN_TO_PATH_COOKIE_NAME}=; Path=/; HttpOnly; Secure; SameSite=${sameSite}; Max-Age=0`\n    }\n}\n\n// It's really common to want to redirect back to the exact location you are on\n// Next.js unfortunately makes this pretty hard, as server components don't have access to the path\n// The only good way to do this is to set up some middleware and pass the path down from the middleware\n// Since we have the requirement that people set up middleware with us anyway, it's easy for us to expose\n// this functionality\nexport function getCurrentPath(): string | undefined {\n    const path = headers().get(CUSTOM_HEADER_FOR_PATH)\n    if (!path) {\n        console.warn(\n            'Attempting to redirect to the current path, but we could not find the current path in the headers. Is the middleware set up?'\n        )\n        return undefined\n    } else {\n        return path\n    }\n}\n\nexport async function getCurrentPathAsync(): Promise<string | undefined> {\n    const path = (await headers()).get(CUSTOM_HEADER_FOR_PATH)\n    if (!path) {\n        console.warn(\n            'Attempting to redirect to the current path, but we could not find the current path in the headers. Is the middleware set up?'\n        )\n        return undefined\n    } else {\n        return path\n    }\n}\n\n/**\n * @deprecated since version 0.1.0\n * Use getCurrentPath instead\n */\nexport function getCurrentUrl(): string | undefined {\n    console.warn('getCurrentUrl is deprecated in favor of getCurrentPath.')\n    const url = headers().get(CUSTOM_HEADER_FOR_URL)\n    if (!url) {\n        console.warn(\n            'Attempting to redirect to the current URL, but we could not find the current URL in the headers. Is the middleware set up?'\n        )\n        return undefined\n    } else {\n        return url\n    }\n}\n","import { NextRequest, NextResponse } from 'next/server'\nimport {\n    ACCESS_TOKEN_COOKIE_NAME,\n    CALLBACK_PATH,\n    COOKIE_OPTIONS,\n    LOGOUT_PATH,\n    REFRESH_TOKEN_COOKIE_NAME,\n    USERINFO_PATH,\n    getSameSiteCookieValue,\n    refreshTokenWithAccessAndRefreshToken,\n    validateAccessToken,\n    validateAccessTokenOrUndefined,\n} from '../shared'\nimport { ACTIVE_ORG_ID_COOKIE_NAME } from '../../shared'\nimport { getNextResponse } from '../app-router'\nimport { UserFromToken } from '../../user'\nimport { AuthHookResponse } from './auth-hook-response'\n\nexport type PropelAuthMiddlewareOptions = {\n    afterAuthHook?: (req: NextRequest, res: NextResponse, user?: UserFromToken) => Promise<AuthHookResponse>\n}\n\n// Purpose of this middleware is just to keep the access token cookie alive\n// In an ideal world, this could be done in `getUser`, however, you can't\n//   set a cookie in a server component.\n// There also doesn't seem to be any way right now to set a cookie in a\n//   middleware and pass it forward (you can only set them on the response).\n// You CAN, however, pass in custom headers,\n//   so we'll use CUSTOM_HEADER_FOR_ACCESS_TOKEN as a workaround\nexport function buildAuthMiddleware(options?: PropelAuthMiddlewareOptions): (req: NextRequest) => Promise<Response> {\n    return async (req: NextRequest) => {\n        if (\n            req.nextUrl.pathname === CALLBACK_PATH ||\n            req.nextUrl.pathname === LOGOUT_PATH ||\n            req.nextUrl.pathname === USERINFO_PATH\n        ) {\n            // Don't do anything for the callback, logout, or userinfo paths, as they will modify the cookies themselves\n            return getNextResponse(req)\n        }\n\n        const accessToken = req.cookies.get(ACCESS_TOKEN_COOKIE_NAME)?.value\n        const refreshToken = req.cookies.get(REFRESH_TOKEN_COOKIE_NAME)?.value\n        const activeOrgId = req.cookies.get(ACTIVE_ORG_ID_COOKIE_NAME)?.value\n\n        // If we are authenticated, we can continue\n        if (accessToken) {\n            const user = await validateAccessTokenOrUndefined(accessToken)\n            if (user) {\n                const nextResponse = getNextResponse(req)\n                return await handlePostAuthHook(req, nextResponse, user, options)\n            }\n        }\n\n        // Otherwise, we need to refresh the access token\n        if (refreshToken) {\n            const response = await refreshTokenWithAccessAndRefreshToken(refreshToken, activeOrgId)\n            if (response.error === 'unexpected') {\n                throw new Error('Unexpected error while refreshing access token')\n            } else if (response.error === 'unauthorized') {\n                const response = getNextResponse(req)\n                response.cookies.delete(ACCESS_TOKEN_COOKIE_NAME)\n                response.cookies.delete(REFRESH_TOKEN_COOKIE_NAME)\n                return await handlePostAuthHook(req, response, undefined, options)\n            } else {\n                const sameSite = getSameSiteCookieValue()\n                const nextResponse = getNextResponse(req, response.accessToken)\n                nextResponse.cookies.set(ACCESS_TOKEN_COOKIE_NAME, response.accessToken, {\n                    ...COOKIE_OPTIONS,\n                    sameSite,\n                })\n                nextResponse.cookies.set(REFRESH_TOKEN_COOKIE_NAME, response.refreshToken, {\n                    ...COOKIE_OPTIONS,\n                    sameSite,\n                })\n                const user = await validateAccessToken(response.accessToken)\n                return await handlePostAuthHook(req, nextResponse, user, options)\n            }\n        }\n\n        const res = getNextResponse(req)\n        return await handlePostAuthHook(req, res, undefined, options)\n    }\n}\n\nconst handlePostAuthHook = async (\n    req: NextRequest,\n    res: NextResponse,\n    user?: UserFromToken,\n    options?: PropelAuthMiddlewareOptions\n): Promise<NextResponse> => {\n    if (options?.afterAuthHook) {\n        const hookResponse = await options.afterAuthHook(req, res, user)\n        if (hookResponse instanceof AuthHookResponse) {\n            if (!hookResponse.shouldContinue()) {\n                return hookResponse.getResponse() ?? res\n            }\n        } else {\n            console.warn('afterAuthHook did not return a AuthHookResponse, continuing')\n        }\n    }\n    return res\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;;ACgHO,SAAS,cAAc,YAA+C;AACzE,MAAI,CAAC,YAAY;AACb,WAAO,EAAE,aAAa,UAAU;AAAA,EACpC;AAEA,UAAQ,WAAW,cAAc;AAAA,IAC7B,KAAK;AACD,aAAO,EAAE,aAAa,WAAW;AAAA,IACrC,KAAK;AACD,aAAO,EAAE,aAAa,aAAa;AAAA,IACvC,KAAK;AACD,aAAO,EAAE,aAAa,cAAc,UAAU,WAAW,SAAS;AAAA,IACtE,KAAK;AACD,aAAO,EAAE,aAAa,0BAA0B;AAAA,IACpD,KAAK;AACD,aAAO,EAAE,aAAa,YAAY,UAAU,WAAW,UAAU,OAAO,WAAW,OAAO;AAAA,IAC9F,KAAK;AACD,aAAO,EAAE,aAAa,gBAAgB;AAAA,IAC1C,KAAK;AACD,aAAO,EAAE,aAAa,6BAA6B;AAAA,IACvD;AACI,aAAO,EAAE,aAAa,UAAU;AAAA,EACxC;AACJ;;;ACrIO,IAAM,gBAAN,MAAoB;AAAA,EAmBvB,YACI,QACA,OACA,sBACA,WACA,UACA,UACA,cACA,oBACA,YACA,aACA,aACF;AACE,SAAK,SAAS;AAEd,SAAK,cAAc;AACnB,SAAK,uBAAuB;AAE5B,SAAK,QAAQ;AACb,SAAK,YAAY;AACjB,SAAK,WAAW;AAChB,SAAK,WAAW;AAEhB,SAAK,eAAe;AACpB,SAAK,qBAAqB;AAE1B,SAAK,aAAa;AAClB,SAAK,cAAc;AAAA,EACvB;AAAA,EAEO,eAA0C;AAC7C,QAAI,CAAC,KAAK,eAAe,CAAC,KAAK,sBAAsB;AACjD,aAAO;AAAA,IACX;AAEA,WAAO,KAAK,qBAAqB,KAAK,WAAW;AAAA,EACrD;AAAA,EAEO,iBAAqC;AACxC,WAAO,KAAK;AAAA,EAChB;AAAA,EAEO,OAAO,OAA0C;AACpD,QAAI,CAAC,KAAK,sBAAsB;AAC5B,aAAO;AAAA,IACX;AAEA,WAAO,KAAK,qBAAqB,KAAK;AAAA,EAC1C;AAAA,EAEO,aAAa,SAA4C;AAC5D,QAAI,CAAC,KAAK,sBAAsB;AAC5B,aAAO;AAAA,IACX;AAEA,UAAM,iBAAiB,QAAQ,YAAY,EAAE,QAAQ,MAAM,GAAG;AAC9D,eAAW,SAAS,KAAK,sBAAsB;AAC3C,YAAM,gBAAgB,KAAK,qBAAqB,KAAK;AACrD,UAAI,cAAc,mBAAmB,gBAAgB;AACjD,eAAO;AAAA,MACX;AAAA,IACJ;AAEA,WAAO;AAAA,EACX;AAAA,EAEO,UAA2B;AAC9B,QAAI,CAAC,KAAK,sBAAsB;AAC5B,aAAO,CAAC;AAAA,IACZ;AAEA,WAAO,OAAO,OAAO,KAAK,oBAAoB;AAAA,EAClD;AAAA,EAEO,kBAA2B;AAC9B,WAAO,CAAC,CAAC,KAAK;AAAA,EAClB;AAAA,EAEA,OAAc,SAAS,MAA6B;AAChD,UAAM,MAAM,KAAK,MAAM,IAAI;AAC3B,UAAM,uBAA6C,CAAC;AACpD,eAAW,SAAS,IAAI,sBAAsB;AAC1C,2BAAqB,KAAK,IAAI,cAAc,SAAS,KAAK,UAAU,IAAI,qBAAqB,KAAK,CAAC,CAAC;AAAA,IACxG;AACA,WAAO,IAAI;AAAA,MACP,IAAI;AAAA,MACJ,IAAI;AAAA,MACJ;AAAA,MACA,IAAI;AAAA,MACJ,IAAI;AAAA,MACJ,IAAI;AAAA,MACJ,IAAI;AAAA,MACJ,IAAI;AAAA,MACJ,IAAI;AAAA,MACJ,IAAI;AAAA,MACJ,IAAI;AAAA,IACR;AAAA,EACJ;AAAA,EAEA,OAAc,eAAe,SAAsC;AAC/D,QAAI;AACJ,QAAI;AAEJ,QAAI,QAAQ,iBAAiB;AACzB,oBAAc,QAAQ,gBAAgB;AACtC,6BAAuB,uBAAuB,EAAE,CAAC,WAAW,GAAG,QAAQ,gBAAgB,CAAC;AAAA,IAC5F,OAAO;AACH,oBAAc;AACd,6BAAuB,uBAAuB,QAAQ,yBAAyB;AAAA,IACnF;AAEA,UAAM,cAAc,cAAc,QAAQ,YAAY;AAEtD,WAAO,IAAI;AAAA,MACP,QAAQ;AAAA,MACR,QAAQ;AAAA,MACR;AAAA,MACA,QAAQ;AAAA,MACR,QAAQ;AAAA,MACR,QAAQ;AAAA,MACR,QAAQ;AAAA,MACR,QAAQ;AAAA,MACR,QAAQ;AAAA,MACR;AAAA,MACA;AAAA,IACJ;AAAA,EACJ;AACJ;AAWO,IAAM,gBAAN,MAAoB;AAAA,EAYvB,YACI,OACA,SACA,aACA,gBACA,kBACA,mCACA,iBACA,kBACA,6BACF;AACE,SAAK,QAAQ;AACb,SAAK,UAAU;AACf,SAAK,cAAc;AACnB,SAAK,iBAAiB;AACtB,SAAK,mBAAmB;AAExB,SAAK,mBAAmB;AACxB,SAAK,oCAAoC;AACzC,SAAK,kBAAkB;AACvB,SAAK,8BAA8B;AAAA,EACvC;AAAA;AAAA,EAIO,OAAO,MAAuB;AACjC,QAAI,KAAK,qBAAqB,8BAA4B;AACtD,aAAO,KAAK,qBAAqB,QAAQ,KAAK,4BAA4B,SAAS,IAAI;AAAA,IAC3F,OAAO;AACH,aAAO,KAAK,qBAAqB;AAAA,IACrC;AAAA,EACJ;AAAA,EAEO,cAAc,MAAuB;AACxC,QAAI,KAAK,qBAAqB,8BAA4B;AACtD,aAAO,KAAK,qBAAqB,QAAQ,KAAK,4BAA4B,SAAS,IAAI;AAAA,IAC3F,OAAO;AACH,aAAO,KAAK,kCAAkC,SAAS,IAAI;AAAA,IAC/D;AAAA,EACJ;AAAA,EAEO,cAAc,YAA6B;AAC9C,WAAO,KAAK,gBAAgB,SAAS,UAAU;AAAA,EACnD;AAAA,EAEO,kBAAkB,aAAgC;AACrD,WAAO,YAAY,MAAM,CAAC,eAAe,KAAK,cAAc,UAAU,CAAC;AAAA,EAC3E;AAAA,EAEA,OAAc,SAAS,MAA6B;AAChD,UAAM,MAAM,KAAK,MAAM,IAAI;AAC3B,WAAO,IAAI;AAAA,MACP,IAAI;AAAA,MACJ,IAAI;AAAA,MACJ,IAAI;AAAA,MACJ,IAAI;AAAA,MACJ,IAAI;AAAA,MACJ,IAAI;AAAA,MACJ,IAAI;AAAA,MACJ,IAAI;AAAA,MACJ,IAAI;AAAA,IACR;AAAA,EACJ;AAAA;AAAA,EAIA,IAAI,eAAuB;AACvB,WAAO,KAAK;AAAA,EAChB;AAAA,EAEA,IAAI,gBAA0B;AAC1B,QAAI,KAAK,qBAAqB,8BAA4B;AACtD,aAAO,KAAK,4BAA4B,OAAO,KAAK,gBAAgB;AAAA,IACxE,OAAO;AACH,aAAO,CAAC,KAAK,gBAAgB;AAAA,IACjC;AAAA,EACJ;AAAA,EAEA,IAAI,gCAA0C;AAC1C,QAAI,KAAK,qBAAqB,8BAA4B;AACtD,aAAO,KAAK,4BAA4B,OAAO,KAAK,gBAAgB;AAAA,IACxE,OAAO;AACH,aAAO,KAAK;AAAA,IAChB;AAAA,EACJ;AAAA,EAEA,IAAI,cAAwB;AACxB,WAAO,KAAK;AAAA,EAChB;AACJ;AAkCO,SAAS,OAAO,YAAyC;AAC5D,SAAO,cAAc,eAAe,UAAU;AAClD;AAEO,SAAS,uBAAuB,YAEF;AACjC,MAAI,eAAe,QAAW;AAC1B,WAAO;AAAA,EACX;AACA,QAAM,YAAkC,CAAC;AAEzC,aAAW,OAAO,OAAO,KAAK,UAAU,GAAG;AACvC,UAAM,iBAAiB,WAAW,GAAG;AACrC,QAAI,gBAAgB;AAChB,gBAAU,GAAG,IAAI,IAAI;AAAA,QACjB,eAAe;AAAA,QACf,eAAe;AAAA,QACf,eAAe;AAAA,QACf,eAAe;AAAA,QACf,eAAe;AAAA,QACf,eAAe;AAAA,QACf,eAAe;AAAA,QACf,eAAe;AAAA,QACf,eAAe;AAAA,MACnB;AAAA,IACJ;AAAA,EACJ;AAEA,SAAO;AACX;;;ACpUO,IAAM,wBAAN,cAAoC,MAAM;AAAA,EAI7C,YAAY,SAAiB;AACzB,UAAM,OAAO;AACb,SAAK,UAAU;AACf,SAAK,SAAS;AAAA,EAClB;AACJ;AAEO,IAAM,yBAAN,cAAqC,MAAM;AAAA,EAI9C,YAAY,SAAiB;AACzB,UAAM,OAAO;AACb,SAAK,UAAU;AACf,SAAK,SAAS;AAAA,EAClB;AACJ;;;ACjBA,WAAsB;AAsBf,IAAM,gBAAgB;AACtB,IAAM,gBAAgB;AACtB,IAAM,cAAc;AACpB,IAAM,2BAA2B;AACjC,IAAM,4BAA4B;AAElC,IAAM,iCAAiC;AACvC,IAAM,wBAAwB;AAC9B,IAAM,yBAAyB;AAG/B,IAAM,iBAA0C;AAAA,EACnD,UAAU;AAAA,EACV,QAAQ;AAAA,EACR,MAAM;AACV;AAEO,SAAS,mBAAmB;AAC/B,SAAO,WAAW,EAAE;AACxB;AAEO,SAAS,aAAa;AACzB,QAAM,UAAU,QAAQ,IAAI,uBAAuB,QAAQ,IAAI;AAC/D,MAAI,CAAC,SAAS;AACV,UAAM,IAAI,MAAM,iCAAiC;AAAA,EACrD;AACA,SAAO,IAAI,IAAI,OAAO;AAC1B;AAUO,SAAS,uBAAuB;AACnC,QAAM,oBAAoB,QAAQ,IAAI;AACtC,MAAI,CAAC,mBAAmB;AACpB,UAAM,IAAI,MAAM,+BAA+B;AAAA,EACnD;AACA,SAAO;AACX;AAEO,SAAS,iBAAiB;AAC7B,QAAM,cAAc,QAAQ,IAAI;AAChC,MAAI,CAAC,aAAa;AACd,UAAM,IAAI,MAAM,oCAAoC;AAAA,EACxD;AACA,SAAO,YAAY,QAAQ,QAAQ,IAAI;AAC3C;AAEO,SAAS,yBAAoD;AAChE,QAAM,mBAAmB,QAAQ,IAAI;AACrC,MAAI,qBAAqB,QAAQ;AAC7B,WAAO;AAAA,EACX,WAAW,qBAAqB,OAAO;AACnC,WAAO;AAAA,EACX,WAAW,qBAAqB,UAAU;AACtC,WAAO;AAAA,EACX,WAAW,kBAAkB;AACzB,UAAM,IAAI;AAAA,MACN;AAAA,IACJ;AAAA,EACJ,OAAO;AACH,WAAO;AAAA,EACX;AACJ;AAEA,SAAsB,sCAClB,cACA,aAC6B;AAAA;AAC7B,UAAM,OAAO;AAAA,MACT,eAAe;AAAA,IACnB;AAEA,UAAM,cAAc,IAAI,gBAAgB;AACxC,QAAI,aAAa;AACb,kBAAY,IAAI,2BAA2B,MAAM;AACjD,kBAAY,IAAI,iBAAiB,WAAW;AAAA,IAChD;AAEA,UAAM,MAAM,GAAG,iBAAiB,kCAAkC,YAAY,SAAS;AACvF,UAAM,WAAW,MAAM,MAAM,KAAK;AAAA,MAC9B,QAAQ;AAAA,MACR,MAAM,KAAK,UAAU,IAAI;AAAA,MACzB,SAAS;AAAA,QACL,gBAAgB;AAAA,QAChB,eAAe,YAAY,qBAAqB;AAAA,MACpD;AAAA,IACJ,CAAC;AAED,QAAI,SAAS,IAAI;AACb,YAAM,OAAO,MAAM,SAAS,KAAK;AACjC,YAAM,kBAAkB,KAAK;AAC7B,YAAM,EAAE,cAAc,aAAa,oBAAoB,iBAAiB,IAAI,KAAK;AAEjF,aAAO;AAAA,QACH,cAAc;AAAA,QACd;AAAA,QACA,OAAO;AAAA,MACX;AAAA,IACJ,WAAW,SAAS,WAAW,OAAO,SAAS,WAAW,KAAK;AAC3D,aAAO,EAAE,OAAO,eAAe;AAAA,IACnC,OAAO;AACH,aAAO,EAAE,OAAO,aAAa;AAAA,IACjC;AAAA,EACJ;AAAA;AAEA,SAAsB,+BAClB,aACkC;AAAA;AAClC,QAAI;AACA,aAAO,MAAM,oBAAoB,WAAW;AAAA,IAChD,SAAS,KAAP;AACE,UAAI,eAAe,wBAAwB;AACvC,cAAM;AAAA,MACV,WAAW,eAAe,uBAAuB;AAC7C,eAAO;AAAA,MACX,OAAO;AACH,gBAAQ,KAAK,iCAAiC,GAAG;AACjD,eAAO;AAAA,MACX;AAAA,IACJ;AAAA,EACJ;AAAA;AAEA,SAAsB,oBAAoB,aAAyD;AAAA;AAC/F,QAAI;AACJ,QAAI;AACA,kBAAY,MAAW,gBAAW,eAAe,GAAG,OAAO;AAAA,IAC/D,SAAS,KAAP;AACE,cAAQ,MAAM,wFAAwF,GAAG;AACzG,YAAM,IAAI,uBAAuB,sBAAsB;AAAA,IAC3D;AAEA,QAAI,CAAC,aAAa;AACd,YAAM,IAAI,sBAAsB,0BAA0B;AAAA,IAC9D;AAEA,QAAI,2BAA2B;AAC/B,QAAI,YAAY,YAAY,EAAE,WAAW,SAAS,GAAG;AACjD,iCAA2B,YAAY,UAAU,UAAU,MAAM;AAAA,IACrE;AAEA,QAAI;AACA,YAAM,EAAE,QAAQ,IAAI,MAAW,eAAU,0BAA0B,WAAW;AAAA,QAC1E,QAAQ,iBAAiB;AAAA,QACzB,YAAY,CAAC,OAAO;AAAA,MACxB,CAAC;AAED,aAAO,OAAqB,OAAO;AAAA,IACvC,SAAS,GAAP;AACE,UAAI,aAAa,OAAO;AACpB,cAAM,IAAI,sBAAsB,EAAE,OAAO;AAAA,MAC7C,OAAO;AACH,cAAM,IAAI,sBAAsB,sBAAsB;AAAA,MAC1D;AAAA,IACJ;AAAA,EACJ;AAAA;;;ACzLA,uBAAsB;AAGf,IAAM,oBAAoB,MAAM;AACnC,QAAM,UAAU,WAAW;AAC3B,QAAM,oBAAoB,qBAAqB;AAE/C,aAAO,0BAAQ,SAAS,iBAAiB;AAC7C;;;ACNO,IAAM,mBAAN,MAAuB;AAAA,EAClB,YACa,MACA,UACnB;AAFmB;AACA;AAAA,EAClB;AAAA,EAEH,OAAO,WAA6B;AAChC,WAAO,IAAI,iBAAiB,UAAU;AAAA,EAC1C;AAAA,EAEA,OAAO,OAAO,UAA0C;AACpD,WAAO,IAAI,iBAAiB,UAAU,QAAQ;AAAA,EAClD;AAAA,EAEA,iBAA0B;AACtB,WAAO,KAAK,SAAS;AAAA,EACzB;AAAA,EAEA,cAAwC;AACpC,WAAO,KAAK;AAAA,EAChB;AACJ;;;ACvBO,IAAM,4BAA4B;;;ACAzC,wBAAyB;AACzB,qBAAiC;AACjC,oBAA0C;AAuEnC,SAAS,gBAAgB,SAAsB,gBAAyB;AAC3E,QAAMA,WAAU,IAAI,QAAQ,QAAQ,OAAO;AAC3C,EAAAA,SAAQ,IAAI,uBAAuB,QAAQ,QAAQ,SAAS,CAAC;AAC7D,EAAAA,SAAQ,IAAI,wBAAwB,QAAQ,QAAQ,WAAW,QAAQ,QAAQ,MAAM;AACrF,MAAI,gBAAgB;AAChB,IAAAA,SAAQ,IAAI,gCAAgC,cAAc;AAAA,EAC9D;AACA,SAAO,2BAAa,KAAK;AAAA,IACrB,SAAS;AAAA,MACL,SAAAA;AAAA,IACJ;AAAA,EACJ,CAAC;AACL;;;ACxDO,SAAS,oBAAoB,SAAgF;AAChH,SAAO,CAAO,QAAqB;AA9BvC;AA+BQ,QACI,IAAI,QAAQ,aAAa,iBACzB,IAAI,QAAQ,aAAa,eACzB,IAAI,QAAQ,aAAa,eAC3B;AAEE,aAAO,gBAAgB,GAAG;AAAA,IAC9B;AAEA,UAAM,eAAc,SAAI,QAAQ,IAAI,wBAAwB,MAAxC,mBAA2C;AAC/D,UAAM,gBAAe,SAAI,QAAQ,IAAI,yBAAyB,MAAzC,mBAA4C;AACjE,UAAM,eAAc,SAAI,QAAQ,IAAI,yBAAyB,MAAzC,mBAA4C;AAGhE,QAAI,aAAa;AACb,YAAM,OAAO,MAAM,+BAA+B,WAAW;AAC7D,UAAI,MAAM;AACN,cAAM,eAAe,gBAAgB,GAAG;AACxC,eAAO,MAAM,mBAAmB,KAAK,cAAc,MAAM,OAAO;AAAA,MACpE;AAAA,IACJ;AAGA,QAAI,cAAc;AACd,YAAM,WAAW,MAAM,sCAAsC,cAAc,WAAW;AACtF,UAAI,SAAS,UAAU,cAAc;AACjC,cAAM,IAAI,MAAM,gDAAgD;AAAA,MACpE,WAAW,SAAS,UAAU,gBAAgB;AAC1C,cAAMC,YAAW,gBAAgB,GAAG;AACpC,QAAAA,UAAS,QAAQ,OAAO,wBAAwB;AAChD,QAAAA,UAAS,QAAQ,OAAO,yBAAyB;AACjD,eAAO,MAAM,mBAAmB,KAAKA,WAAU,QAAW,OAAO;AAAA,MACrE,OAAO;AACH,cAAM,WAAW,uBAAuB;AACxC,cAAM,eAAe,gBAAgB,KAAK,SAAS,WAAW;AAC9D,qBAAa,QAAQ,IAAI,0BAA0B,SAAS,aAAa,iCAClE,iBADkE;AAAA,UAErE;AAAA,QACJ,EAAC;AACD,qBAAa,QAAQ,IAAI,2BAA2B,SAAS,cAAc,iCACpE,iBADoE;AAAA,UAEvE;AAAA,QACJ,EAAC;AACD,cAAM,OAAO,MAAM,oBAAoB,SAAS,WAAW;AAC3D,eAAO,MAAM,mBAAmB,KAAK,cAAc,MAAM,OAAO;AAAA,MACpE;AAAA,IACJ;AAEA,UAAM,MAAM,gBAAgB,GAAG;AAC/B,WAAO,MAAM,mBAAmB,KAAK,KAAK,QAAW,OAAO;AAAA,EAChE;AACJ;AAEA,IAAM,qBAAqB,CACvB,KACA,KACA,MACA,YACwB;AAzF5B;AA0FI,MAAI,mCAAS,eAAe;AACxB,UAAM,eAAe,MAAM,QAAQ,cAAc,KAAK,KAAK,IAAI;AAC/D,QAAI,wBAAwB,kBAAkB;AAC1C,UAAI,CAAC,aAAa,eAAe,GAAG;AAChC,gBAAO,kBAAa,YAAY,MAAzB,YAA8B;AAAA,MACzC;AAAA,IACJ,OAAO;AACH,cAAQ,KAAK,6DAA6D;AAAA,IAC9E;AAAA,EACJ;AACA,SAAO;AACX;","names":["headers","response"]}
+{"version":3,"sources":["../../src/server/index.ts","../../src/loginMethod.ts","../../src/user.ts","../../src/server/exceptions.ts","../../src/server/shared.ts","../../src/server/api.ts","../../src/server/middleware/auth-hook-response.ts","../../src/shared.ts","../../src/server/app-router.ts","../../src/server/middleware/advanced-middleware.ts"],"sourcesContent":["export { validateAccessToken, validateAccessTokenOrUndefined } from './shared'\nexport type { OrgIdToOrgMemberInfo } from '../user'\nexport { UserFromToken, OrgMemberInfo } from '../user'\nexport { UnauthorizedException, ConfigurationException } from './exceptions'\nexport { getPropelAuthApis } from './api'\nexport { AuthHookResponse } from './middleware/auth-hook-response'\nexport { buildAuthMiddleware } from './middleware/advanced-middleware'\nexport type { PropelAuthMiddlewareOptions } from './middleware/advanced-middleware'\nexport type {\n    AccessToken,\n    AccessTokenCreationException,\n    AddUserToOrgException,\n    AddUserToOrgRequest,\n    ApiKeyCreateException,\n    ApiKeyDeleteException,\n    ApiKeyFetchException,\n    ApiKeyFull,\n    ApiKeyNew,\n    ApiKeyResultPage,\n    ApiKeyUpdateException,\n    ApiKeyUpdateRequest,\n    ApiKeyValidateException,\n    ApiKeyValidateRateLimitedException,\n    ApiKeyValidation,\n    ApiKeysCreateRequest,\n    ApiKeysQueryRequest,\n    ChangeUserRoleInOrgException,\n    CreateAccessTokenRequest,\n    CreateMagicLinkRequest,\n    CreateOrgException,\n    CreateOrgRequest,\n    CreateUserException,\n    CreateUserRequest,\n    ForbiddenException,\n    MagicLink,\n    MagicLinkCreationException,\n    MigrateUserException,\n    MigrateUserFromExternalSourceRequest,\n    MigrateUserPasswordException,\n    MigrateUserPasswordRequest,\n    Org,\n    Organization,\n    OrgApiKeyValidation,\n    OrgQuery,\n    OrgQueryResponse,\n    PersonalApiKeyValidation,\n    RateLimitedException,\n    RemoveUserFromOrgException,\n    RemoveUserFromOrgRequest,\n    TokenVerificationMetadata,\n    UnexpectedException,\n    UpdateOrgException,\n    UpdateOrgRequest,\n    UpdateUserEmailException,\n    UpdateUserEmailRequest,\n    UpdateUserMetadataException,\n    UpdateUserMetadataRequest,\n    UpdateUserPasswordException,\n    UpdateUserPasswordRequest,\n    UserNotFoundException,\n    UserInOrgMetadata,\n    UsersInOrgQuery,\n    UsersPagedResponse,\n    UsersInOrgPagedResponse,\n    UsersQuery,\n    FetchPendingInvitesParams,\n    PendingInvitesPage,\n    PendingInvite,\n    RevokePendingOrgInviteRequest,\n    FetchSamlSpMetadataResponse,\n    SetSamlIdpMetadataRequest,\n    IdpProvider,\n    StepUpMfaGrantType,\n    VerifyTotpChallengeRequest,\n    StepUpMfaVerifyTotpResponse,\n    VerifyStepUpGrantRequest,\n    StepUpMfaVerifyGrantResponse,\n    InvalidRequestFieldsException,\n    FeatureGatedException,\n    MfaNotEnabledException,\n    IncorrectMfaCodeException,\n    RevokePendingOrgInviteException,\n} from '@propelauth/node-apis'\n","export enum SocialLoginProvider {\n    Google = 'Google',\n    GitHub = 'GitHub',\n    Microsoft = 'Microsoft',\n    Slack = 'Slack',\n    LinkedIn = 'LinkedIn',\n    Salesforce = 'Salesforce',\n    Xero = 'Xero',\n    QuickBooksOnline = 'QuickBooks Online',\n}\n\nexport enum SamlLoginProvider {\n    Google = 'Google',\n    Rippling = 'Rippling',\n    OneLogin = 'OneLogin',\n    JumpCloud = 'JumpCloud',\n    Okta = 'Okta',\n    Azure = 'Azure',\n    Duo = 'Duo',\n    Generic = 'Generic',\n}\n\ntype InternalPasswordLoginMethod = {\n    login_method: 'password'\n}\n\ntype InternalMagicLinkLoginMethod = {\n    login_method: 'magic_link'\n}\n\ntype InternalSocialSsoLoginMethod = {\n    login_method: 'social_sso'\n    provider: SocialLoginProvider\n}\n\ntype InternalEmailConfirmationLinkLoginMethod = {\n    login_method: 'email_confirmation_link'\n}\n\ntype InternalSamlSsoLoginMethod = {\n    login_method: 'saml_sso'\n    provider: SamlLoginProvider\n    org_id: string\n}\n\ntype InternalImpersonationLoginMethod = {\n    login_method: 'impersonation'\n}\n\ntype InternalGeneratedFromBackendApiLoginMethod = {\n    login_method: 'generated_from_backend_api'\n}\n\ntype InternalUnknownLoginMethod = {\n    login_method: 'unknown'\n}\n\nexport type InternalLoginMethod =\n    | InternalPasswordLoginMethod\n    | InternalMagicLinkLoginMethod\n    | InternalSocialSsoLoginMethod\n    | InternalEmailConfirmationLinkLoginMethod\n    | InternalSamlSsoLoginMethod\n    | InternalImpersonationLoginMethod\n    | InternalGeneratedFromBackendApiLoginMethod\n    | InternalUnknownLoginMethod\n\ntype PasswordLoginMethod = {\n    loginMethod: 'password'\n}\n\ntype MagicLinkLoginMethod = {\n    loginMethod: 'magic_link'\n}\n\ntype SocialSsoLoginMethod = {\n    loginMethod: 'social_sso'\n    provider: SocialLoginProvider\n}\n\ntype EmailConfirmationLinkLoginMethod = {\n    loginMethod: 'email_confirmation_link'\n}\n\ntype SamlSsoLoginMethod = {\n    loginMethod: 'saml_sso'\n    provider: SamlLoginProvider\n    orgId: string\n}\n\ntype ImpersonationLoginMethod = {\n    loginMethod: 'impersonation'\n}\n\ntype GeneratedFromBackendApiLoginMethod = {\n    loginMethod: 'generated_from_backend_api'\n}\n\ntype UnknownLoginMethod = {\n    loginMethod: 'unknown'\n}\n\nexport type LoginMethod =\n    | PasswordLoginMethod\n    | MagicLinkLoginMethod\n    | SocialSsoLoginMethod\n    | EmailConfirmationLinkLoginMethod\n    | SamlSsoLoginMethod\n    | ImpersonationLoginMethod\n    | GeneratedFromBackendApiLoginMethod\n    | UnknownLoginMethod\n\nexport function toLoginMethod(snake_case?: InternalLoginMethod): LoginMethod {\n    if (!snake_case) {\n        return { loginMethod: 'unknown' }\n    }\n\n    switch (snake_case.login_method) {\n        case 'password':\n            return { loginMethod: 'password' }\n        case 'magic_link':\n            return { loginMethod: 'magic_link' }\n        case 'social_sso':\n            return { loginMethod: 'social_sso', provider: snake_case.provider }\n        case 'email_confirmation_link':\n            return { loginMethod: 'email_confirmation_link' }\n        case 'saml_sso':\n            return { loginMethod: 'saml_sso', provider: snake_case.provider, orgId: snake_case.org_id }\n        case 'impersonation':\n            return { loginMethod: 'impersonation' }\n        case 'generated_from_backend_api':\n            return { loginMethod: 'generated_from_backend_api' }\n        default:\n            return { loginMethod: 'unknown' }\n    }\n}\n","import { InternalLoginMethod, LoginMethod, toLoginMethod } from './loginMethod'\n\nexport class UserFromToken {\n    public userId: string\n\n    public activeOrgId?: string\n    public orgIdToOrgMemberInfo?: OrgIdToOrgMemberInfo\n\n    // Metadata about the user\n    public email: string\n    public firstName?: string\n    public lastName?: string\n    public username?: string\n    public properties?: { [key: string]: unknown }\n    public loginMethod?: LoginMethod\n\n    // If you used our migration APIs to migrate this user from a different system,\n    //   this is their original ID from that system.\n    public legacyUserId?: string\n    public impersonatorUserId?: string\n\n    constructor(\n        userId: string,\n        email: string,\n        orgIdToOrgMemberInfo?: OrgIdToOrgMemberInfo,\n        firstName?: string,\n        lastName?: string,\n        username?: string,\n        legacyUserId?: string,\n        impersonatorUserId?: string,\n        properties?: { [key: string]: unknown },\n        activeOrgId?: string,\n        loginMethod?: LoginMethod\n    ) {\n        this.userId = userId\n\n        this.activeOrgId = activeOrgId\n        this.orgIdToOrgMemberInfo = orgIdToOrgMemberInfo\n\n        this.email = email\n        this.firstName = firstName\n        this.lastName = lastName\n        this.username = username\n\n        this.legacyUserId = legacyUserId\n        this.impersonatorUserId = impersonatorUserId\n\n        this.properties = properties\n        this.loginMethod = loginMethod\n    }\n\n    public getActiveOrg(): OrgMemberInfo | undefined {\n        if (!this.activeOrgId || !this.orgIdToOrgMemberInfo) {\n            return undefined\n        }\n\n        return this.orgIdToOrgMemberInfo[this.activeOrgId]\n    }\n\n    public getActiveOrgId(): string | undefined {\n        return this.activeOrgId\n    }\n\n    public getOrg(orgId: string): OrgMemberInfo | undefined {\n        if (!this.orgIdToOrgMemberInfo) {\n            return undefined\n        }\n\n        return this.orgIdToOrgMemberInfo[orgId]\n    }\n\n    public getOrgByName(orgName: string): OrgMemberInfo | undefined {\n        if (!this.orgIdToOrgMemberInfo) {\n            return undefined\n        }\n\n        const urlSafeOrgName = orgName.toLowerCase().replace(/ /g, '-')\n        for (const orgId in this.orgIdToOrgMemberInfo) {\n            const orgMemberInfo = this.orgIdToOrgMemberInfo[orgId]\n            if (orgMemberInfo.urlSafeOrgName === urlSafeOrgName) {\n                return orgMemberInfo\n            }\n        }\n\n        return undefined\n    }\n\n    public getOrgs(): OrgMemberInfo[] {\n        if (!this.orgIdToOrgMemberInfo) {\n            return []\n        }\n\n        return Object.values(this.orgIdToOrgMemberInfo)\n    }\n\n    public isImpersonating(): boolean {\n        return !!this.impersonatorUserId\n    }\n\n    public static fromJSON(json: string): UserFromToken {\n        const obj = JSON.parse(json)\n        const orgIdToOrgMemberInfo: OrgIdToOrgMemberInfo = {}\n        for (const orgId in obj.orgIdToOrgMemberInfo) {\n            orgIdToOrgMemberInfo[orgId] = OrgMemberInfo.fromJSON(JSON.stringify(obj.orgIdToOrgMemberInfo[orgId]))\n        }\n        return new UserFromToken(\n            obj.userId,\n            obj.email,\n            orgIdToOrgMemberInfo,\n            obj.firstName,\n            obj.lastName,\n            obj.username,\n            obj.legacyUserId,\n            obj.impersonatorUserId,\n            obj.properties,\n            obj.activeOrgId,\n            obj.loginMethod\n        )\n    }\n\n    public static fromJwtPayload(payload: InternalUser): UserFromToken {\n        let activeOrgId: string | undefined\n        let orgIdToOrgMemberInfo: OrgIdToOrgMemberInfo | undefined\n\n        if (payload.org_member_info) {\n            activeOrgId = payload.org_member_info.org_id\n            orgIdToOrgMemberInfo = toOrgIdToOrgMemberInfo({ [activeOrgId]: payload.org_member_info })\n        } else {\n            activeOrgId = undefined\n            orgIdToOrgMemberInfo = toOrgIdToOrgMemberInfo(payload.org_id_to_org_member_info)\n        }\n\n        const loginMethod = toLoginMethod(payload.login_method)\n\n        return new UserFromToken(\n            payload.user_id,\n            payload.email,\n            orgIdToOrgMemberInfo,\n            payload.first_name,\n            payload.last_name,\n            payload.username,\n            payload.legacy_user_id,\n            payload.impersonator_user_id,\n            payload.properties,\n            activeOrgId,\n            loginMethod\n        )\n    }\n}\n\nexport type OrgIdToOrgMemberInfo = {\n    [orgId: string]: OrgMemberInfo\n}\n\nexport enum OrgRoleStructure {\n    SingleRole = \"single_role_in_hierarchy\",\n    MultiRole = \"multi_role\",\n}\n\nexport class OrgMemberInfo {\n    public orgId: string\n    public orgName: string\n    public orgMetadata: { [key: string]: any }\n    public urlSafeOrgName: string\n    public orgRoleStructure: OrgRoleStructure\n\n    public userAssignedRole: string\n    public userInheritedRolesPlusCurrentRole: string[]\n    public userPermissions: string[]\n    public userAssignedAdditionalRoles: string[]\n\n    constructor(\n        orgId: string,\n        orgName: string,\n        orgMetadata: { [key: string]: any },\n        urlSafeOrgName: string,\n        userAssignedRole: string,\n        userInheritedRolesPlusCurrentRole: string[],\n        userPermissions: string[],\n        orgRoleStructure: OrgRoleStructure,\n        userAssignedAdditionalRoles: string[]\n    ) {\n        this.orgId = orgId\n        this.orgName = orgName\n        this.orgMetadata = orgMetadata\n        this.urlSafeOrgName = urlSafeOrgName\n        this.orgRoleStructure = orgRoleStructure\n\n        this.userAssignedRole = userAssignedRole\n        this.userInheritedRolesPlusCurrentRole = userInheritedRolesPlusCurrentRole\n        this.userPermissions = userPermissions\n        this.userAssignedAdditionalRoles = userAssignedAdditionalRoles\n    }\n\n    // validation methods\n\n    public isRole(role: string): boolean {\n        if (this.orgRoleStructure === OrgRoleStructure.MultiRole) {\n            return this.userAssignedRole === role || this.userAssignedAdditionalRoles.includes(role)\n        } else {\n            return this.userAssignedRole === role\n        }\n    }\n\n    public isAtLeastRole(role: string): boolean {\n        if (this.orgRoleStructure === OrgRoleStructure.MultiRole) {\n            return this.userAssignedRole === role || this.userAssignedAdditionalRoles.includes(role)\n        } else {\n            return this.userInheritedRolesPlusCurrentRole.includes(role)\n        }\n    }\n\n    public hasPermission(permission: string): boolean {\n        return this.userPermissions.includes(permission)\n    }\n\n    public hasAllPermissions(permissions: string[]): boolean {\n        return permissions.every((permission) => this.hasPermission(permission))\n    }\n\n    public static fromJSON(json: string): OrgMemberInfo {\n        const obj = JSON.parse(json)\n        return new OrgMemberInfo(\n            obj.orgId,\n            obj.orgName,\n            obj.orgMetadata,\n            obj.urlSafeOrgName,\n            obj.userAssignedRole,\n            obj.userInheritedRolesPlusCurrentRole,\n            obj.userPermissions,\n            obj.orgRoleStructure,\n            obj.userAssignedAdditionalRoles\n        )\n    }\n\n    // getters for the private fields\n\n    get assignedRole(): string {\n        return this.userAssignedRole\n    }\n\n    get assignedRoles(): string[] {\n        if (this.orgRoleStructure === OrgRoleStructure.MultiRole) {\n            return this.userAssignedAdditionalRoles.concat(this.userAssignedRole)\n        } else {\n            return [this.userAssignedRole]\n        }\n    }\n\n    get inheritedRolesPlusCurrentRole(): string[] {\n        if (this.orgRoleStructure === OrgRoleStructure.MultiRole) {\n            return this.userAssignedAdditionalRoles.concat(this.userAssignedRole)\n        } else {\n            return this.userInheritedRolesPlusCurrentRole\n        }\n    }\n\n    get permissions(): string[] {\n        return this.userPermissions\n    }\n}\n\n// These Internal types exist since the server returns snake case, but typescript/javascript\n// convention is camelCase.\nexport type InternalOrgMemberInfo = {\n    org_id: string\n    org_name: string\n    org_metadata: { [key: string]: any }\n    url_safe_org_name: string\n    org_role_structure: OrgRoleStructure\n    user_role: string\n    inherited_user_roles_plus_current_role: string[]\n    user_permissions: string[]\n    additional_roles: string[]\n}\n\nexport type InternalUser = {\n    user_id: string\n\n    org_member_info?: InternalOrgMemberInfo\n    org_id_to_org_member_info?: { [org_id: string]: InternalOrgMemberInfo }\n\n    email: string\n    first_name?: string\n    last_name?: string\n    username?: string\n    properties?: { [key: string]: unknown }\n    login_method?: InternalLoginMethod\n\n    // If you used our migration APIs to migrate this user from a different system, this is their original ID from that system.\n    legacy_user_id?: string\n    impersonator_user_id?: string\n}\n\nexport function toUser(snake_case: InternalUser): UserFromToken {\n    return UserFromToken.fromJwtPayload(snake_case)\n}\n\nexport function toOrgIdToOrgMemberInfo(snake_case?: {\n    [org_id: string]: InternalOrgMemberInfo\n}): OrgIdToOrgMemberInfo | undefined {\n    if (snake_case === undefined) {\n        return undefined\n    }\n    const camelCase: OrgIdToOrgMemberInfo = {}\n\n    for (const key of Object.keys(snake_case)) {\n        const snakeCaseValue = snake_case[key]\n        if (snakeCaseValue) {\n            camelCase[key] = new OrgMemberInfo(\n                snakeCaseValue.org_id,\n                snakeCaseValue.org_name,\n                snakeCaseValue.org_metadata,\n                snakeCaseValue.url_safe_org_name,\n                snakeCaseValue.user_role,\n                snakeCaseValue.inherited_user_roles_plus_current_role,\n                snakeCaseValue.user_permissions,\n                snakeCaseValue.org_role_structure,\n                snakeCaseValue.additional_roles\n            )\n        }\n    }\n\n    return camelCase\n}\n","export class UnauthorizedException extends Error {\n    readonly message: string\n    readonly status: number\n\n    constructor(message: string) {\n        super(message)\n        this.message = message\n        this.status = 401\n    }\n}\n\nexport class ConfigurationException extends Error {\n    readonly message: string\n    readonly status: number\n\n    constructor(message: string) {\n        super(message)\n        this.message = message\n        this.status = 500\n    }\n}\n","import { ResponseCookie } from 'next/dist/compiled/@edge-runtime/cookies'\nimport { InternalUser, toUser, UserFromToken } from '../user'\nimport { ConfigurationException, UnauthorizedException } from './exceptions'\nimport * as jose from 'jose'\n\ntype RefreshAndAccessTokens = {\n    refreshToken: string\n    accessToken: string\n    error: 'none'\n}\n\ntype RefreshAndAccessTokensUnauthorizedError = {\n    error: 'unauthorized'\n}\n\ntype RefreshAndAccessTokensUnexpectedError = {\n    error: 'unexpected'\n}\n\nexport type RefreshTokenResponse =\n    | RefreshAndAccessTokens\n    | RefreshAndAccessTokensUnauthorizedError\n    | RefreshAndAccessTokensUnexpectedError\n\nexport const LOGIN_PATH = '/api/auth/login'\nexport const CALLBACK_PATH = '/api/auth/callback'\nexport const USERINFO_PATH = '/api/auth/userinfo'\nexport const LOGOUT_PATH = '/api/auth/logout'\nexport const ACCESS_TOKEN_COOKIE_NAME = '__pa_at'\nexport const REFRESH_TOKEN_COOKIE_NAME = '__pa_rt'\nexport const STATE_COOKIE_NAME = '__pa_state'\nexport const CUSTOM_HEADER_FOR_ACCESS_TOKEN = 'x-propelauth-access-token'\nexport const CUSTOM_HEADER_FOR_URL = 'x-propelauth-current-url'\nexport const CUSTOM_HEADER_FOR_PATH = 'x-propelauth-current-path'\nexport const RETURN_TO_PATH_COOKIE_NAME = '__pa_return_to_path'\n\nexport const COOKIE_OPTIONS: Partial<ResponseCookie> = {\n    httpOnly: true,\n    secure: true,\n    path: '/',\n}\n\nexport function getAuthUrlOrigin() {\n    return getAuthUrl().origin\n}\n\nexport function getAuthUrl() {\n    const authUrl = process.env.PROPELAUTH_AUTH_URL || process.env.NEXT_PUBLIC_AUTH_URL\n    if (!authUrl) {\n        throw new Error('NEXT_PUBLIC_AUTH_URL is not set')\n    }\n    return new URL(authUrl)\n}\n\nexport function getRedirectUri() {\n    const redirectUri = process.env.PROPELAUTH_REDIRECT_URI\n    if (!redirectUri) {\n        throw new Error('PROPELAUTH_REDIRECT_URI is not set')\n    }\n    return redirectUri\n}\n\nexport function getIntegrationApiKey() {\n    const integrationApiKey = process.env.PROPELAUTH_API_KEY\n    if (!integrationApiKey) {\n        throw new Error('PROPELAUTH_API_KEY is not set')\n    }\n    return integrationApiKey\n}\n\nexport function getVerifierKey() {\n    const verifierKey = process.env.PROPELAUTH_VERIFIER_KEY\n    if (!verifierKey) {\n        throw new Error('PROPELAUTH_VERIFIER_KEY is not set')\n    }\n    return verifierKey.replace(/\\\\n/g, '\\n')\n}\n\nexport function getSameSiteCookieValue(): \"none\" | \"lax\" | \"strict\" {\n    const sameSiteOverride = process.env.PROPELAUTH_SAME_SITE_COOKIE_OVERRIDE\n    if (sameSiteOverride === 'none') {\n        return 'none'\n    } else if (sameSiteOverride === 'lax') {\n        return 'lax'\n    } else if (sameSiteOverride === 'strict') {\n        return 'strict'\n    } else if (sameSiteOverride) {\n        throw new Error(\n            'Invalid value for PROPELAUTH_SAME_SITE_COOKIE_OVERRIDE, must be one of \"none\", \"lax\", or \"strict\"'\n        )\n    } else {\n        return 'lax'\n    }\n}\n\nexport async function refreshTokenWithAccessAndRefreshToken(\n    refreshToken: string,\n    activeOrgId?: string\n): Promise<RefreshTokenResponse> {\n    const body = {\n        refresh_token: refreshToken,\n    }\n\n    const queryParams = new URLSearchParams()\n    if (activeOrgId) {\n        queryParams.set('with_active_org_support', 'true')\n        queryParams.set('active_org_id', activeOrgId)\n    }\n\n    const url = `${getAuthUrlOrigin()}/api/backend/v1/refresh_token?${queryParams.toString()}`\n    const response = await fetch(url, {\n        method: 'POST',\n        body: JSON.stringify(body),\n        headers: {\n            'Content-Type': 'application/json',\n            Authorization: 'Bearer ' + getIntegrationApiKey(),\n        },\n    })\n\n    if (response.ok) {\n        const data = await response.json()\n        const newRefreshToken = data.refresh_token\n        const { access_token: accessToken, expires_at_seconds: expiresAtSeconds } = data.access_token\n\n        return {\n            refreshToken: newRefreshToken,\n            accessToken,\n            error: 'none',\n        }\n    } else if (response.status === 400 || response.status === 401) {\n        return { error: 'unauthorized' }\n    } else {\n        return { error: 'unexpected' }\n    }\n}\n\nexport async function validateAccessTokenOrUndefined(\n    accessToken: string | undefined\n): Promise<UserFromToken | undefined> {\n    try {\n        return await validateAccessToken(accessToken)\n    } catch (err) {\n        if (err instanceof ConfigurationException) {\n            throw err\n        } else if (err instanceof UnauthorizedException) {\n            return undefined\n        } else {\n            console.info('Error validating access token', err)\n            return undefined\n        }\n    }\n}\n\nexport async function validateAccessToken(accessToken: string | undefined): Promise<UserFromToken> {\n    let publicKey\n    try {\n        publicKey = await jose.importSPKI(getVerifierKey(), 'RS256')\n    } catch (err) {\n        console.error(\"Verifier key is invalid. Make sure it's specified correctly, including the newlines.\", err)\n        throw new ConfigurationException('Invalid verifier key')\n    }\n\n    if (!accessToken) {\n        throw new UnauthorizedException('No access token provided')\n    }\n\n    let accessTokenWithoutBearer = accessToken\n    if (accessToken.toLowerCase().startsWith('bearer ')) {\n        accessTokenWithoutBearer = accessToken.substring('bearer '.length)\n    }\n\n    try {\n        const { payload } = await jose.jwtVerify(accessTokenWithoutBearer, publicKey, {\n            issuer: getAuthUrlOrigin(),\n            algorithms: ['RS256'],\n        })\n\n        return toUser(<InternalUser>payload)\n    } catch (e) {\n        if (e instanceof Error) {\n            throw new UnauthorizedException(e.message)\n        } else {\n            throw new UnauthorizedException('Unable to decode jwt')\n        }\n    }\n}\n","import {getApis} from \"@propelauth/node-apis\";\nimport {getAuthUrl, getIntegrationApiKey} from \"./shared\";\n\nexport const getPropelAuthApis = () => {\n    const authUrl = getAuthUrl()\n    const integrationApiKey = getIntegrationApiKey()\n\n    return getApis(authUrl, integrationApiKey)\n}","import { NextResponse } from 'next/server'\n\nexport class AuthHookResponse {\n    private constructor(\n        private readonly type: 'continue' | 'reject',\n        private readonly response?: NextResponse\n    ) {}\n\n    static continue(): AuthHookResponse {\n        return new AuthHookResponse('continue')\n    }\n\n    static reject(response: NextResponse): AuthHookResponse {\n        return new AuthHookResponse('reject', response)\n    }\n\n    shouldContinue(): boolean {\n        return this.type === 'continue'\n    }\n\n    getResponse(): NextResponse | undefined {\n        return this.response\n    }\n}\n","export const ACTIVE_ORG_ID_COOKIE_NAME = '__pa_org_id'\n","import { redirect } from 'next/navigation'\nimport { cookies, headers } from 'next/headers'\nimport { NextRequest, NextResponse } from 'next/server'\nimport {\n    ACCESS_TOKEN_COOKIE_NAME,\n    CALLBACK_PATH,\n    COOKIE_OPTIONS,\n    CUSTOM_HEADER_FOR_ACCESS_TOKEN,\n    CUSTOM_HEADER_FOR_PATH,\n    CUSTOM_HEADER_FOR_URL,\n    getAuthUrlOrigin,\n    getIntegrationApiKey,\n    getRedirectUri,\n    getSameSiteCookieValue,\n    LOGIN_PATH,\n    LOGOUT_PATH,\n    REFRESH_TOKEN_COOKIE_NAME,\n    refreshTokenWithAccessAndRefreshToken,\n    RETURN_TO_PATH_COOKIE_NAME,\n    STATE_COOKIE_NAME,\n    USERINFO_PATH,\n    validateAccessToken,\n    validateAccessTokenOrUndefined,\n} from './shared'\nimport { UserFromToken } from './index'\nimport { ACTIVE_ORG_ID_COOKIE_NAME } from '../shared'\nimport { buildAuthMiddleware } from './middleware/advanced-middleware'\n\nexport type RedirectOptions =\n    | {\n          returnToPath: string\n          returnToCurrentPath?: never\n      }\n    | {\n          returnToPath?: never\n          returnToCurrentPath: boolean\n      }\n\nexport async function getUserOrRedirect(redirectOptions?: RedirectOptions): Promise<UserFromToken> {\n    const user = await getUser()\n    if (user) {\n        return user\n    } else {\n        await redirectToLogin(redirectOptions)\n        throw new Error('Redirecting to login')\n    }\n}\n\nexport async function getUser(): Promise<UserFromToken | undefined> {\n    const accessToken = await getAccessTokenAsync()\n    if (accessToken) {\n        const user = await validateAccessTokenOrUndefined(accessToken)\n        if (user) {\n            return user\n        }\n    }\n    return undefined\n}\n\nexport function getAccessToken(): string | undefined {\n    return headers().get(CUSTOM_HEADER_FOR_ACCESS_TOKEN) || cookies().get(ACCESS_TOKEN_COOKIE_NAME)?.value\n}\n\nexport async function getAccessTokenAsync(): Promise<string | undefined> {\n    return (\n        (await headers()).get(CUSTOM_HEADER_FOR_ACCESS_TOKEN) || (await cookies()).get(ACCESS_TOKEN_COOKIE_NAME)?.value\n    )\n}\n\nexport async function authMiddleware(req: NextRequest): Promise<Response> {\n    return buildAuthMiddleware()(req)\n}\n\nexport function getNextResponse(request: NextRequest, newAccessToken?: string) {\n    const headers = new Headers(request.headers)\n    headers.set(CUSTOM_HEADER_FOR_URL, request.nextUrl.toString())\n    headers.set(CUSTOM_HEADER_FOR_PATH, request.nextUrl.pathname + request.nextUrl.search)\n    if (newAccessToken) {\n        headers.set(CUSTOM_HEADER_FOR_ACCESS_TOKEN, newAccessToken)\n    }\n    return NextResponse.next({\n        request: {\n            headers,\n        },\n    })\n}\n\nexport type RouteHandlerArgs = {\n    postLoginRedirectPathFn?: (req: NextRequest) => string\n    getDefaultActiveOrgId?: (req: NextRequest, user: UserFromToken) => string | undefined\n}\n\nexport function getRouteHandlers(args?: RouteHandlerArgs) {\n    function loginGetHandler(req: NextRequest) {\n        return signupOrLoginHandler(req, false)\n    }\n\n    function signupGetHandler(req: NextRequest) {\n        return signupOrLoginHandler(req, true)\n    }\n\n    function signupOrLoginHandler(req: NextRequest, isSignup: boolean) {\n        const returnToPath = req.nextUrl.searchParams.get('return_to_path')\n        const state = randomState()\n        const redirectUri = getRedirectUri()\n        const sameSite = getSameSiteCookieValue()\n\n        const authorizeUrlSearchParams = req.nextUrl.searchParams\n        authorizeUrlSearchParams.set('redirect_uri', redirectUri)\n        authorizeUrlSearchParams.set('state', state)\n        authorizeUrlSearchParams.set('signup', isSignup ? 'true' : 'false')\n        const authorize_url = getAuthUrlOrigin() + '/propelauth/ssr/authorize?' + authorizeUrlSearchParams.toString()\n\n        const headers = new Headers()\n        headers.append('Location', authorize_url)\n        headers.append('Set-Cookie', `${STATE_COOKIE_NAME}=${state}; Path=/; HttpOnly; Secure; SameSite=${sameSite}`)\n        if (returnToPath) {\n            if (returnToPath.startsWith('/')) {\n                headers.append(\n                    'Set-Cookie',\n                    `${RETURN_TO_PATH_COOKIE_NAME}=${returnToPath}; Path=/; HttpOnly; Secure; SameSite=${sameSite}; Max-Age=600`\n                )\n            } else {\n                console.warn('return_to_path must start with /')\n            }\n        }\n\n        return new Response(null, {\n            status: 302,\n            headers,\n        })\n    }\n\n    async function callbackGetHandler(req: NextRequest) {\n        const sameSite = getSameSiteCookieValue()\n        const oauthState = req.cookies.get(STATE_COOKIE_NAME)?.value\n        if (!oauthState || oauthState.length !== 64) {\n            return new Response(null, { status: 302, headers: { Location: LOGIN_PATH } })\n        }\n\n        const queryParams = req.nextUrl.searchParams\n        const state = queryParams.get('state')\n        const code = queryParams.get('code')\n        if (state !== oauthState) {\n            return new Response(null, { status: 302, headers: { Location: LOGIN_PATH } })\n        }\n\n        const authUrlOrigin = getAuthUrlOrigin()\n        const redirectUri = getRedirectUri()\n        const integrationApiKey = getIntegrationApiKey()\n        const oauth_token_body = {\n            redirect_uri: redirectUri,\n            code,\n        }\n        const url = `${authUrlOrigin}/propelauth/ssr/token`\n        const response = await fetch(url, {\n            method: 'POST',\n            body: JSON.stringify(oauth_token_body),\n            headers: {\n                'Content-Type': 'application/json',\n                Authorization: 'Bearer ' + integrationApiKey,\n            },\n        })\n\n        if (response.ok) {\n            const data = await response.json()\n\n            const accessToken = data.access_token\n\n            // If we have a return_to_path cookie, we'll use that\n            // Otherwise, we'll use the postLoginRedirectPathFn\n            const returnToPathFromCookie = req.cookies.get(RETURN_TO_PATH_COOKIE_NAME)?.value\n            const returnToPath =\n                returnToPathFromCookie ?? (args?.postLoginRedirectPathFn ? args.postLoginRedirectPathFn(req) : '/')\n            if (!returnToPath) {\n                console.error('postLoginRedirectPathFn returned undefined')\n                return new Response('Unexpected error', { status: 500 })\n            }\n\n            // For Active Org, if there is one set, we need to issue a new access token\n            // We start by checking if there's an existing cookie AND the user is in that org\n            // Otherwise, we'll use the default active org function to get the active org\n            // If none of that, we'll just use the access token as is\n            const currentActiveOrgId = req.cookies.get(ACTIVE_ORG_ID_COOKIE_NAME)?.value\n\n            const user = await validateAccessToken(accessToken)\n            const isUserInCurrentActiveOrg = !!currentActiveOrgId && !!user.getOrg(currentActiveOrgId)\n\n            let activeOrgId = undefined\n            if (isUserInCurrentActiveOrg) {\n                activeOrgId = currentActiveOrgId\n            } else if (args?.getDefaultActiveOrgId) {\n                activeOrgId = args.getDefaultActiveOrgId(req, user)\n            }\n\n            // If there's an active org, we need to re-issue a new access token for the active org\n            if (activeOrgId) {\n                const response = await refreshTokenWithAccessAndRefreshToken(data.refresh_token, activeOrgId)\n                if (response.error === 'unexpected') {\n                    throw new Error('Unexpected error while setting active org')\n                } else if (response.error === 'unauthorized') {\n                    console.error(\n                        'Unauthorized error while setting active org. Your user may not have access to this org'\n                    )\n                    return new Response('Unauthorized', { status: 401 })\n                } else {\n                    const headers = new Headers()\n                    headers.append('Location', returnToPath)\n                    headers.append(\n                        'Set-Cookie',\n                        `${ACCESS_TOKEN_COOKIE_NAME}=${response.accessToken}; Path=/; HttpOnly; Secure; SameSite=${sameSite}`\n                    )\n                    headers.append(\n                        'Set-Cookie',\n                        `${REFRESH_TOKEN_COOKIE_NAME}=${response.refreshToken}; Path=/; HttpOnly; Secure; SameSite=${sameSite}`\n                    )\n                    headers.append(\n                        'Set-Cookie',\n                        `${ACTIVE_ORG_ID_COOKIE_NAME}=${activeOrgId}; Path=/; HttpOnly; Secure; SameSite=${sameSite}`\n                    )\n                    headers.append('Set-Cookie', getCookieForReturnToPathInCallback(returnToPathFromCookie))\n                    return new Response(null, {\n                        status: 302,\n                        headers,\n                    })\n                }\n            }\n\n            const headers = new Headers()\n            headers.append('Location', returnToPath)\n            headers.append(\n                'Set-Cookie',\n                `${ACCESS_TOKEN_COOKIE_NAME}=${accessToken}; Path=/; HttpOnly; Secure; SameSite=${sameSite}`\n            )\n            headers.append(\n                'Set-Cookie',\n                `${REFRESH_TOKEN_COOKIE_NAME}=${data.refresh_token}; Path=/; HttpOnly; Secure; SameSite=${sameSite}`\n            )\n            headers.append(\n                'Set-Cookie',\n                `${ACTIVE_ORG_ID_COOKIE_NAME}=; Path=/; HttpOnly; Secure; SameSite=${sameSite}; Max-Age=0`\n            )\n            headers.append('Set-Cookie', getCookieForReturnToPathInCallback(returnToPathFromCookie))\n            return new Response(null, {\n                status: 302,\n                headers,\n            })\n        } else if (response.status === 401) {\n            const apiKey = getIntegrationApiKey()\n            const firstFourChars = apiKey.substring(0, 4)\n            console.error(\n                `Couldn't finish the login process for this user. This is most likely caused by an incorrect PROPELAUTH_API_KEY. Your API key starts with ${firstFourChars}... double check that that matches the API key in the PropelAuth dashboard for this environment.`\n            )\n            return new Response('Unexpected error', { status: 500 })\n        } else {\n            return new Response('Unexpected error', { status: 500 })\n        }\n    }\n\n    async function userinfoGetHandler(req: NextRequest) {\n        const oldRefreshToken = req.cookies.get(REFRESH_TOKEN_COOKIE_NAME)?.value\n        const activeOrgId = req.cookies.get(ACTIVE_ORG_ID_COOKIE_NAME)?.value\n        const sameSite = getSameSiteCookieValue()\n\n        // For the userinfo endpoint, we want to get the most up-to-date info, so we'll refresh the access token\n        if (oldRefreshToken) {\n            const refreshResponse = await refreshTokenWithAccessAndRefreshToken(oldRefreshToken, activeOrgId)\n            if (refreshResponse.error === 'unexpected') {\n                throw new Error('Unexpected error while refreshing access token')\n            } else if (refreshResponse.error === 'unauthorized') {\n                const headers = new Headers()\n                headers.append(\n                    'Set-Cookie',\n                    `${ACCESS_TOKEN_COOKIE_NAME}=; Path=/; HttpOnly; Secure; SameSite=${sameSite}; Max-Age=0`\n                )\n                headers.append(\n                    'Set-Cookie',\n                    `${REFRESH_TOKEN_COOKIE_NAME}=; Path=/; HttpOnly; Secure; SameSite=${sameSite}; Max-Age=0`\n                )\n                headers.append(\n                    'Set-Cookie',\n                    `${ACTIVE_ORG_ID_COOKIE_NAME}=; Path=/; HttpOnly; Secure; SameSite=${sameSite}; Max-Age=0`\n                )\n                return new Response('Unauthorized', { status: 401, headers })\n            }\n\n            const refreshToken = refreshResponse.refreshToken\n            const accessToken = refreshResponse.accessToken\n\n            const authUrlOrigin = getAuthUrlOrigin()\n            const path = `${authUrlOrigin}/propelauth/oauth/userinfo`\n            const response = await fetch(path, {\n                headers: {\n                    'Content-Type': 'application/json',\n                    Authorization: 'Bearer ' + accessToken,\n                },\n            })\n            if (response.ok) {\n                const userFromToken = await validateAccessToken(accessToken)\n                const data = await response.json()\n                const jsonResponse = {\n                    userinfo: data,\n                    accessToken,\n                    impersonatorUserId: userFromToken.impersonatorUserId,\n                    activeOrgId,\n                }\n\n                const headers = new Headers()\n                headers.append(\n                    'Set-Cookie',\n                    `${ACCESS_TOKEN_COOKIE_NAME}=${accessToken}; Path=/; HttpOnly; Secure; SameSite=${sameSite}`\n                )\n                headers.append(\n                    'Set-Cookie',\n                    `${REFRESH_TOKEN_COOKIE_NAME}=${refreshToken}; Path=/; HttpOnly; Secure; SameSite=${sameSite}`\n                )\n                headers.append('Content-Type', 'application/json')\n                return new Response(JSON.stringify(jsonResponse), {\n                    status: 200,\n                    headers,\n                })\n            } else if (response.status === 401) {\n                const headers = new Headers()\n                headers.append(\n                    'Set-Cookie',\n                    `${ACCESS_TOKEN_COOKIE_NAME}=; Path=/; HttpOnly; Secure; SameSite=${sameSite}; Max-Age=0`\n                )\n                headers.append(\n                    'Set-Cookie',\n                    `${REFRESH_TOKEN_COOKIE_NAME}=; Path=/; HttpOnly; Secure; SameSite=${sameSite}; Max-Age=0`\n                )\n                headers.append(\n                    'Set-Cookie',\n                    `${ACTIVE_ORG_ID_COOKIE_NAME}=; Path=/; HttpOnly; Secure; SameSite=${sameSite}; Max-Age=0`\n                )\n                return new Response(null, {\n                    status: 401,\n                    headers,\n                })\n            } else {\n                return new Response(null, { status: 500 })\n            }\n        }\n\n        const headers = new Headers()\n        headers.append(\n            'Set-Cookie',\n            `${ACCESS_TOKEN_COOKIE_NAME}=; Path=/; HttpOnly; Secure; SameSite=${sameSite}; Max-Age=0`\n        )\n        headers.append(\n            'Set-Cookie',\n            `${REFRESH_TOKEN_COOKIE_NAME}=; Path=/; HttpOnly; Secure; SameSite=${sameSite}; Max-Age=0`\n        )\n        headers.append(\n            'Set-Cookie',\n            `${ACTIVE_ORG_ID_COOKIE_NAME}=; Path=/; HttpOnly; Secure; SameSite=${sameSite}; Max-Age=0`\n        )\n        return new Response(null, { status: 401 })\n    }\n\n    async function logoutGetHandler(req: NextRequest) {\n        // Real logout requests will go to the logout POST handler\n        // This endpoint is a landing page for when people logout from the hosted UIs\n        // Instead of doing a logout we'll check the refresh token.\n        // If it's invalid, we'll clear the cookies and redirect using the postLoginRedirectPathFn\n        const path = args?.postLoginRedirectPathFn ? args.postLoginRedirectPathFn(req) : '/'\n        if (!path) {\n            console.error('postLoginPathFn returned undefined')\n            return new Response('Unexpected error', { status: 500 })\n        }\n        const sameSite = getSameSiteCookieValue()\n\n        const refreshToken = req.cookies.get(REFRESH_TOKEN_COOKIE_NAME)?.value\n        if (!refreshToken) {\n            const headers = new Headers()\n            headers.append('Location', path)\n            headers.append(\n                'Set-Cookie',\n                `${ACCESS_TOKEN_COOKIE_NAME}=; Path=/; HttpOnly; Secure; SameSite=${sameSite}; Max-Age=0`\n            )\n            headers.append(\n                'Set-Cookie',\n                `${REFRESH_TOKEN_COOKIE_NAME}=; Path=/; HttpOnly; Secure; SameSite=${sameSite}; Max-Age=0`\n            )\n            headers.append(\n                'Set-Cookie',\n                `${ACTIVE_ORG_ID_COOKIE_NAME}=; Path=/; HttpOnly; Secure; SameSite=${sameSite}; Max-Age=0`\n            )\n            return new Response(null, {\n                status: 302,\n                headers,\n            })\n        }\n\n        const activeOrgId = req.cookies.get(ACTIVE_ORG_ID_COOKIE_NAME)?.value\n        const refreshResponse = await refreshTokenWithAccessAndRefreshToken(refreshToken, activeOrgId)\n        if (refreshResponse.error === 'unexpected') {\n            console.error('Unexpected error while refreshing access token')\n            return new Response('Unexpected error', { status: 500 })\n        } else if (refreshResponse.error === 'unauthorized') {\n            const headers = new Headers()\n            headers.append('Location', path)\n            headers.append(\n                'Set-Cookie',\n                `${ACCESS_TOKEN_COOKIE_NAME}=; Path=/; HttpOnly; Secure; SameSite=${sameSite}; Max-Age=0`\n            )\n            headers.append(\n                'Set-Cookie',\n                `${REFRESH_TOKEN_COOKIE_NAME}=; Path=/; HttpOnly; Secure; SameSite=${sameSite}; Max-Age=0`\n            )\n            headers.append(\n                'Set-Cookie',\n                `${ACTIVE_ORG_ID_COOKIE_NAME}=; Path=/; HttpOnly; Secure; SameSite=${sameSite}; Max-Age=0`\n            )\n            return new Response(null, {\n                status: 302,\n                headers,\n            })\n        } else {\n            const headers = new Headers()\n            headers.append('Location', path)\n            return new Response(null, {\n                status: 302,\n                headers,\n            })\n        }\n    }\n\n    async function logoutPostHandler(req: NextRequest) {\n        const sameSite = getSameSiteCookieValue()\n        const refreshToken = req.cookies.get(REFRESH_TOKEN_COOKIE_NAME)?.value\n        if (!refreshToken) {\n            const headers = new Headers()\n            headers.append(\n                'Set-Cookie',\n                `${ACCESS_TOKEN_COOKIE_NAME}=; Path=/; HttpOnly; Secure; SameSite=${sameSite}; Max-Age=0`\n            )\n            headers.append(\n                'Set-Cookie',\n                `${REFRESH_TOKEN_COOKIE_NAME}=; Path=/; HttpOnly; Secure; SameSite=${sameSite}; Max-Age=0`\n            )\n            headers.append(\n                'Set-Cookie',\n                `${ACTIVE_ORG_ID_COOKIE_NAME}=; Path=/; HttpOnly; Secure; SameSite=${sameSite}; Max-Age=0`\n            )\n            return new Response(null, { status: 200, headers })\n        }\n\n        const authUrlOrigin = getAuthUrlOrigin()\n        const integrationApiKey = getIntegrationApiKey()\n        const logoutBody = { refresh_token: refreshToken }\n        const url = `${authUrlOrigin}/api/backend/v1/logout`\n        const response = await fetch(url, {\n            method: 'POST',\n            body: JSON.stringify(logoutBody),\n            headers: {\n                'Content-Type': 'application/json',\n                Authorization: 'Bearer ' + integrationApiKey,\n            },\n        })\n\n        if (!response.ok) {\n            console.warn(\n                'Unable to logout, clearing cookies and continuing anyway',\n                response.status,\n                response.statusText\n            )\n        }\n        const headers = new Headers()\n        headers.append(\n            'Set-Cookie',\n            `${ACCESS_TOKEN_COOKIE_NAME}=; Path=/; HttpOnly; Secure; SameSite=${sameSite}; Max-Age=0`\n        )\n        headers.append(\n            'Set-Cookie',\n            `${REFRESH_TOKEN_COOKIE_NAME}=; Path=/; HttpOnly; Secure; SameSite=${sameSite}; Max-Age=0`\n        )\n        headers.append(\n            'Set-Cookie',\n            `${ACTIVE_ORG_ID_COOKIE_NAME}=; Path=/; HttpOnly; Secure; SameSite=${sameSite}; Max-Age=0`\n        )\n        return new Response(null, { status: 200, headers })\n    }\n\n    async function setActiveOrgHandler(req: NextRequest) {\n        const oldRefreshToken = req.cookies.get(REFRESH_TOKEN_COOKIE_NAME)?.value\n        const activeOrgId = req.nextUrl.searchParams.get('active_org_id')\n        const sameSite = getSameSiteCookieValue()\n\n        if (!oldRefreshToken) {\n            const headers = new Headers()\n            headers.append(\n                'Set-Cookie',\n                `${ACTIVE_ORG_ID_COOKIE_NAME}=; Path=/; HttpOnly; Secure; SameSite=${sameSite}; Max-Age=0`\n            )\n            return new Response(null, { status: 401, headers })\n        }\n\n        if (!activeOrgId) {\n            return new Response(null, { status: 400 })\n        }\n\n        const refreshResponse = await refreshTokenWithAccessAndRefreshToken(oldRefreshToken, activeOrgId)\n        if (refreshResponse.error === 'unexpected') {\n            throw new Error('Unexpected error while setting active org id')\n        } else if (refreshResponse.error === 'unauthorized') {\n            return new Response('Unauthorized', { status: 401 })\n        }\n\n        const refreshToken = refreshResponse.refreshToken\n        const accessToken = refreshResponse.accessToken\n\n        const authUrlOrigin = getAuthUrlOrigin()\n        const path = `${authUrlOrigin}/propelauth/oauth/userinfo`\n        const response = await fetch(path, {\n            headers: {\n                'Content-Type': 'application/json',\n                Authorization: 'Bearer ' + accessToken,\n            },\n        })\n\n        if (response.ok) {\n            const userFromToken = await validateAccessToken(accessToken)\n            const data = await response.json()\n            const jsonResponse = {\n                userinfo: data,\n                accessToken,\n                impersonatorUserId: userFromToken.impersonatorUserId,\n                activeOrgId,\n            }\n\n            const headers = new Headers()\n            headers.append(\n                'Set-Cookie',\n                `${ACCESS_TOKEN_COOKIE_NAME}=${accessToken}; Path=/; HttpOnly; Secure; SameSite=${sameSite}`\n            )\n            headers.append(\n                'Set-Cookie',\n                `${REFRESH_TOKEN_COOKIE_NAME}=${refreshToken}; Path=/; HttpOnly; Secure; SameSite=${sameSite}`\n            )\n            headers.append(\n                'Set-Cookie',\n                `${ACTIVE_ORG_ID_COOKIE_NAME}=${activeOrgId}; Path=/; HttpOnly; Secure; SameSite=${sameSite}`\n            )\n            headers.append('Content-Type', 'application/json')\n            return new Response(JSON.stringify(jsonResponse), {\n                status: 200,\n                headers,\n            })\n        } else if (response.status === 401) {\n            return new Response(null, {\n                status: 401,\n            })\n        } else {\n            return new Response(null, { status: 500 })\n        }\n    }\n\n    async function getRouteHandler(req: NextRequest, { params }: { params: { slug: string } }) {\n        const { slug } = await params\n        if (slug === 'login') {\n            return loginGetHandler(req)\n        } else if (slug === 'signup') {\n            return signupGetHandler(req)\n        } else if (slug === 'callback') {\n            return callbackGetHandler(req)\n        } else if (slug === 'userinfo') {\n            return userinfoGetHandler(req)\n        } else if (slug === 'logout') {\n            return logoutGetHandler(req)\n        } else {\n            return new Response('', { status: 404 })\n        }\n    }\n\n    async function postRouteHandler(req: NextRequest, { params }: { params: { slug: string } }) {\n        const { slug } = await params\n        if (slug === 'logout') {\n            return logoutPostHandler(req)\n        } else if (slug === 'set-active-org') {\n            return setActiveOrgHandler(req)\n        } else {\n            return new Response('', { status: 404 })\n        }\n    }\n\n    async function getRouteHandlerAsync(req: NextRequest, { params }: { params: Promise<{ slug: string }> }) {\n        const awaitedParams = await params\n        return getRouteHandler(req, { params: awaitedParams })\n    }\n\n    async function postRouteHandlerAsync(req: NextRequest, { params }: { params: Promise<{ slug: string }> }) {\n        const awaitedParams = await params\n        return postRouteHandler(req, { params: awaitedParams })\n    }\n\n    return {\n        getRouteHandler,\n        postRouteHandler,\n        getRouteHandlerAsync,\n        postRouteHandlerAsync,\n    }\n}\n\nfunction randomState(): string {\n    const randomBytes = crypto.getRandomValues(new Uint8Array(32))\n    return Array.from(randomBytes)\n        .map((b) => b.toString(16).padStart(2, '0'))\n        .join('')\n}\n\nasync function redirectToLogin(redirectOptions?: RedirectOptions) {\n    if (!redirectOptions) {\n        redirect(LOGIN_PATH)\n    } else if (redirectOptions.returnToPath) {\n        const loginPath = LOGIN_PATH + '?return_to_path=' + encodeURI(redirectOptions.returnToPath)\n        redirect(loginPath)\n    } else if (redirectOptions.returnToCurrentPath) {\n        const encodedPath = await getUrlEncodedRedirectPathForCurrentPath()\n        if (encodedPath) {\n            const loginPath = LOGIN_PATH + '?return_to_path=' + encodedPath\n            redirect(loginPath)\n        } else {\n            console.warn('Could not get current URL to redirect to')\n            redirect(LOGIN_PATH)\n        }\n    }\n}\n\nexport async function getUrlEncodedRedirectPathForCurrentPath(): Promise<string | undefined> {\n    const path = await getCurrentPathAsync()\n    if (!path) {\n        return undefined\n    }\n\n    return encodeURIComponent(path)\n}\n\n// We should keep the redirect path around for a short period in case multiple windows are racing\nfunction getCookieForReturnToPathInCallback(returnToPathFromCookie: string | undefined) {\n    const sameSite = getSameSiteCookieValue()\n\n    if (returnToPathFromCookie) {\n        return `${RETURN_TO_PATH_COOKIE_NAME}=${returnToPathFromCookie}; Path=/; HttpOnly; Secure; SameSite=${sameSite}; Max-Age=15`\n    } else {\n        return `${RETURN_TO_PATH_COOKIE_NAME}=; Path=/; HttpOnly; Secure; SameSite=${sameSite}; Max-Age=0`\n    }\n}\n\n// It's really common to want to redirect back to the exact location you are on\n// Next.js unfortunately makes this pretty hard, as server components don't have access to the path\n// The only good way to do this is to set up some middleware and pass the path down from the middleware\n// Since we have the requirement that people set up middleware with us anyway, it's easy for us to expose\n// this functionality\nexport function getCurrentPath(): string | undefined {\n    const path = headers().get(CUSTOM_HEADER_FOR_PATH)\n    if (!path) {\n        console.warn(\n            'Attempting to redirect to the current path, but we could not find the current path in the headers. Is the middleware set up?'\n        )\n        return undefined\n    } else {\n        return path\n    }\n}\n\nexport async function getCurrentPathAsync(): Promise<string | undefined> {\n    const path = (await headers()).get(CUSTOM_HEADER_FOR_PATH)\n    if (!path) {\n        console.warn(\n            'Attempting to redirect to the current path, but we could not find the current path in the headers. Is the middleware set up?'\n        )\n        return undefined\n    } else {\n        return path\n    }\n}\n\n/**\n * @deprecated since version 0.1.0\n * Use getCurrentPath instead\n */\nexport function getCurrentUrl(): string | undefined {\n    console.warn('getCurrentUrl is deprecated in favor of getCurrentPath.')\n    const url = headers().get(CUSTOM_HEADER_FOR_URL)\n    if (!url) {\n        console.warn(\n            'Attempting to redirect to the current URL, but we could not find the current URL in the headers. Is the middleware set up?'\n        )\n        return undefined\n    } else {\n        return url\n    }\n}\n","import { NextRequest, NextResponse } from 'next/server'\nimport {\n    ACCESS_TOKEN_COOKIE_NAME,\n    CALLBACK_PATH,\n    COOKIE_OPTIONS,\n    LOGOUT_PATH,\n    REFRESH_TOKEN_COOKIE_NAME,\n    USERINFO_PATH,\n    getSameSiteCookieValue,\n    refreshTokenWithAccessAndRefreshToken,\n    validateAccessToken,\n    validateAccessTokenOrUndefined,\n} from '../shared'\nimport { ACTIVE_ORG_ID_COOKIE_NAME } from '../../shared'\nimport { getNextResponse } from '../app-router'\nimport { UserFromToken } from '../../user'\nimport { AuthHookResponse } from './auth-hook-response'\n\nexport type PropelAuthMiddlewareOptions = {\n    afterAuthHook?: (req: NextRequest, res: NextResponse, user?: UserFromToken) => Promise<AuthHookResponse>\n}\n\n// Purpose of this middleware is just to keep the access token cookie alive\n// In an ideal world, this could be done in `getUser`, however, you can't\n//   set a cookie in a server component.\n// There also doesn't seem to be any way right now to set a cookie in a\n//   middleware and pass it forward (you can only set them on the response).\n// You CAN, however, pass in custom headers,\n//   so we'll use CUSTOM_HEADER_FOR_ACCESS_TOKEN as a workaround\nexport function buildAuthMiddleware(options?: PropelAuthMiddlewareOptions): (req: NextRequest) => Promise<Response> {\n    return async (req: NextRequest) => {\n        if (\n            req.nextUrl.pathname === CALLBACK_PATH ||\n            req.nextUrl.pathname === LOGOUT_PATH ||\n            req.nextUrl.pathname === USERINFO_PATH\n        ) {\n            // Don't do anything for the callback, logout, or userinfo paths, as they will modify the cookies themselves\n            return getNextResponse(req)\n        }\n\n        const accessToken = req.cookies.get(ACCESS_TOKEN_COOKIE_NAME)?.value\n        const refreshToken = req.cookies.get(REFRESH_TOKEN_COOKIE_NAME)?.value\n        const activeOrgId = req.cookies.get(ACTIVE_ORG_ID_COOKIE_NAME)?.value\n\n        // If we are authenticated, we can continue\n        if (accessToken) {\n            const user = await validateAccessTokenOrUndefined(accessToken)\n            if (user) {\n                const nextResponse = getNextResponse(req)\n                return await handlePostAuthHook(req, nextResponse, user, options)\n            }\n        }\n\n        // Otherwise, we need to refresh the access token\n        if (refreshToken) {\n            const response = await refreshTokenWithAccessAndRefreshToken(refreshToken, activeOrgId)\n            if (response.error === 'unexpected') {\n                throw new Error('Unexpected error while refreshing access token')\n            } else if (response.error === 'unauthorized') {\n                const response = getNextResponse(req)\n                response.cookies.delete(ACCESS_TOKEN_COOKIE_NAME)\n                response.cookies.delete(REFRESH_TOKEN_COOKIE_NAME)\n                return await handlePostAuthHook(req, response, undefined, options)\n            } else {\n                const sameSite = getSameSiteCookieValue()\n                const nextResponse = getNextResponse(req, response.accessToken)\n                nextResponse.cookies.set(ACCESS_TOKEN_COOKIE_NAME, response.accessToken, {\n                    ...COOKIE_OPTIONS,\n                    sameSite,\n                })\n                nextResponse.cookies.set(REFRESH_TOKEN_COOKIE_NAME, response.refreshToken, {\n                    ...COOKIE_OPTIONS,\n                    sameSite,\n                })\n                const user = await validateAccessToken(response.accessToken)\n                return await handlePostAuthHook(req, nextResponse, user, options)\n            }\n        }\n\n        const res = getNextResponse(req)\n        return await handlePostAuthHook(req, res, undefined, options)\n    }\n}\n\nconst handlePostAuthHook = async (\n    req: NextRequest,\n    res: NextResponse,\n    user?: UserFromToken,\n    options?: PropelAuthMiddlewareOptions\n): Promise<NextResponse> => {\n    if (options?.afterAuthHook) {\n        const hookResponse = await options.afterAuthHook(req, res, user)\n        if (hookResponse instanceof AuthHookResponse) {\n            if (!hookResponse.shouldContinue()) {\n                return hookResponse.getResponse() ?? res\n            }\n        } else {\n            console.warn('afterAuthHook did not return a AuthHookResponse, continuing')\n        }\n    }\n    return res\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;;ACgHO,SAAS,cAAc,YAA+C;AACzE,MAAI,CAAC,YAAY;AACb,WAAO,EAAE,aAAa,UAAU;AAAA,EACpC;AAEA,UAAQ,WAAW,cAAc;AAAA,IAC7B,KAAK;AACD,aAAO,EAAE,aAAa,WAAW;AAAA,IACrC,KAAK;AACD,aAAO,EAAE,aAAa,aAAa;AAAA,IACvC,KAAK;AACD,aAAO,EAAE,aAAa,cAAc,UAAU,WAAW,SAAS;AAAA,IACtE,KAAK;AACD,aAAO,EAAE,aAAa,0BAA0B;AAAA,IACpD,KAAK;AACD,aAAO,EAAE,aAAa,YAAY,UAAU,WAAW,UAAU,OAAO,WAAW,OAAO;AAAA,IAC9F,KAAK;AACD,aAAO,EAAE,aAAa,gBAAgB;AAAA,IAC1C,KAAK;AACD,aAAO,EAAE,aAAa,6BAA6B;AAAA,IACvD;AACI,aAAO,EAAE,aAAa,UAAU;AAAA,EACxC;AACJ;;;ACrIO,IAAM,gBAAN,MAAoB;AAAA,EAmBvB,YACI,QACA,OACA,sBACA,WACA,UACA,UACA,cACA,oBACA,YACA,aACA,aACF;AACE,SAAK,SAAS;AAEd,SAAK,cAAc;AACnB,SAAK,uBAAuB;AAE5B,SAAK,QAAQ;AACb,SAAK,YAAY;AACjB,SAAK,WAAW;AAChB,SAAK,WAAW;AAEhB,SAAK,eAAe;AACpB,SAAK,qBAAqB;AAE1B,SAAK,aAAa;AAClB,SAAK,cAAc;AAAA,EACvB;AAAA,EAEO,eAA0C;AAC7C,QAAI,CAAC,KAAK,eAAe,CAAC,KAAK,sBAAsB;AACjD,aAAO;AAAA,IACX;AAEA,WAAO,KAAK,qBAAqB,KAAK,WAAW;AAAA,EACrD;AAAA,EAEO,iBAAqC;AACxC,WAAO,KAAK;AAAA,EAChB;AAAA,EAEO,OAAO,OAA0C;AACpD,QAAI,CAAC,KAAK,sBAAsB;AAC5B,aAAO;AAAA,IACX;AAEA,WAAO,KAAK,qBAAqB,KAAK;AAAA,EAC1C;AAAA,EAEO,aAAa,SAA4C;AAC5D,QAAI,CAAC,KAAK,sBAAsB;AAC5B,aAAO;AAAA,IACX;AAEA,UAAM,iBAAiB,QAAQ,YAAY,EAAE,QAAQ,MAAM,GAAG;AAC9D,eAAW,SAAS,KAAK,sBAAsB;AAC3C,YAAM,gBAAgB,KAAK,qBAAqB,KAAK;AACrD,UAAI,cAAc,mBAAmB,gBAAgB;AACjD,eAAO;AAAA,MACX;AAAA,IACJ;AAEA,WAAO;AAAA,EACX;AAAA,EAEO,UAA2B;AAC9B,QAAI,CAAC,KAAK,sBAAsB;AAC5B,aAAO,CAAC;AAAA,IACZ;AAEA,WAAO,OAAO,OAAO,KAAK,oBAAoB;AAAA,EAClD;AAAA,EAEO,kBAA2B;AAC9B,WAAO,CAAC,CAAC,KAAK;AAAA,EAClB;AAAA,EAEA,OAAc,SAAS,MAA6B;AAChD,UAAM,MAAM,KAAK,MAAM,IAAI;AAC3B,UAAM,uBAA6C,CAAC;AACpD,eAAW,SAAS,IAAI,sBAAsB;AAC1C,2BAAqB,KAAK,IAAI,cAAc,SAAS,KAAK,UAAU,IAAI,qBAAqB,KAAK,CAAC,CAAC;AAAA,IACxG;AACA,WAAO,IAAI;AAAA,MACP,IAAI;AAAA,MACJ,IAAI;AAAA,MACJ;AAAA,MACA,IAAI;AAAA,MACJ,IAAI;AAAA,MACJ,IAAI;AAAA,MACJ,IAAI;AAAA,MACJ,IAAI;AAAA,MACJ,IAAI;AAAA,MACJ,IAAI;AAAA,MACJ,IAAI;AAAA,IACR;AAAA,EACJ;AAAA,EAEA,OAAc,eAAe,SAAsC;AAC/D,QAAI;AACJ,QAAI;AAEJ,QAAI,QAAQ,iBAAiB;AACzB,oBAAc,QAAQ,gBAAgB;AACtC,6BAAuB,uBAAuB,EAAE,CAAC,WAAW,GAAG,QAAQ,gBAAgB,CAAC;AAAA,IAC5F,OAAO;AACH,oBAAc;AACd,6BAAuB,uBAAuB,QAAQ,yBAAyB;AAAA,IACnF;AAEA,UAAM,cAAc,cAAc,QAAQ,YAAY;AAEtD,WAAO,IAAI;AAAA,MACP,QAAQ;AAAA,MACR,QAAQ;AAAA,MACR;AAAA,MACA,QAAQ;AAAA,MACR,QAAQ;AAAA,MACR,QAAQ;AAAA,MACR,QAAQ;AAAA,MACR,QAAQ;AAAA,MACR,QAAQ;AAAA,MACR;AAAA,MACA;AAAA,IACJ;AAAA,EACJ;AACJ;AAWO,IAAM,gBAAN,MAAoB;AAAA,EAYvB,YACI,OACA,SACA,aACA,gBACA,kBACA,mCACA,iBACA,kBACA,6BACF;AACE,SAAK,QAAQ;AACb,SAAK,UAAU;AACf,SAAK,cAAc;AACnB,SAAK,iBAAiB;AACtB,SAAK,mBAAmB;AAExB,SAAK,mBAAmB;AACxB,SAAK,oCAAoC;AACzC,SAAK,kBAAkB;AACvB,SAAK,8BAA8B;AAAA,EACvC;AAAA;AAAA,EAIO,OAAO,MAAuB;AACjC,QAAI,KAAK,qBAAqB,8BAA4B;AACtD,aAAO,KAAK,qBAAqB,QAAQ,KAAK,4BAA4B,SAAS,IAAI;AAAA,IAC3F,OAAO;AACH,aAAO,KAAK,qBAAqB;AAAA,IACrC;AAAA,EACJ;AAAA,EAEO,cAAc,MAAuB;AACxC,QAAI,KAAK,qBAAqB,8BAA4B;AACtD,aAAO,KAAK,qBAAqB,QAAQ,KAAK,4BAA4B,SAAS,IAAI;AAAA,IAC3F,OAAO;AACH,aAAO,KAAK,kCAAkC,SAAS,IAAI;AAAA,IAC/D;AAAA,EACJ;AAAA,EAEO,cAAc,YAA6B;AAC9C,WAAO,KAAK,gBAAgB,SAAS,UAAU;AAAA,EACnD;AAAA,EAEO,kBAAkB,aAAgC;AACrD,WAAO,YAAY,MAAM,CAAC,eAAe,KAAK,cAAc,UAAU,CAAC;AAAA,EAC3E;AAAA,EAEA,OAAc,SAAS,MAA6B;AAChD,UAAM,MAAM,KAAK,MAAM,IAAI;AAC3B,WAAO,IAAI;AAAA,MACP,IAAI;AAAA,MACJ,IAAI;AAAA,MACJ,IAAI;AAAA,MACJ,IAAI;AAAA,MACJ,IAAI;AAAA,MACJ,IAAI;AAAA,MACJ,IAAI;AAAA,MACJ,IAAI;AAAA,MACJ,IAAI;AAAA,IACR;AAAA,EACJ;AAAA;AAAA,EAIA,IAAI,eAAuB;AACvB,WAAO,KAAK;AAAA,EAChB;AAAA,EAEA,IAAI,gBAA0B;AAC1B,QAAI,KAAK,qBAAqB,8BAA4B;AACtD,aAAO,KAAK,4BAA4B,OAAO,KAAK,gBAAgB;AAAA,IACxE,OAAO;AACH,aAAO,CAAC,KAAK,gBAAgB;AAAA,IACjC;AAAA,EACJ;AAAA,EAEA,IAAI,gCAA0C;AAC1C,QAAI,KAAK,qBAAqB,8BAA4B;AACtD,aAAO,KAAK,4BAA4B,OAAO,KAAK,gBAAgB;AAAA,IACxE,OAAO;AACH,aAAO,KAAK;AAAA,IAChB;AAAA,EACJ;AAAA,EAEA,IAAI,cAAwB;AACxB,WAAO,KAAK;AAAA,EAChB;AACJ;AAkCO,SAAS,OAAO,YAAyC;AAC5D,SAAO,cAAc,eAAe,UAAU;AAClD;AAEO,SAAS,uBAAuB,YAEF;AACjC,MAAI,eAAe,QAAW;AAC1B,WAAO;AAAA,EACX;AACA,QAAM,YAAkC,CAAC;AAEzC,aAAW,OAAO,OAAO,KAAK,UAAU,GAAG;AACvC,UAAM,iBAAiB,WAAW,GAAG;AACrC,QAAI,gBAAgB;AAChB,gBAAU,GAAG,IAAI,IAAI;AAAA,QACjB,eAAe;AAAA,QACf,eAAe;AAAA,QACf,eAAe;AAAA,QACf,eAAe;AAAA,QACf,eAAe;AAAA,QACf,eAAe;AAAA,QACf,eAAe;AAAA,QACf,eAAe;AAAA,QACf,eAAe;AAAA,MACnB;AAAA,IACJ;AAAA,EACJ;AAEA,SAAO;AACX;;;ACpUO,IAAM,wBAAN,cAAoC,MAAM;AAAA,EAI7C,YAAY,SAAiB;AACzB,UAAM,OAAO;AACb,SAAK,UAAU;AACf,SAAK,SAAS;AAAA,EAClB;AACJ;AAEO,IAAM,yBAAN,cAAqC,MAAM;AAAA,EAI9C,YAAY,SAAiB;AACzB,UAAM,OAAO;AACb,SAAK,UAAU;AACf,SAAK,SAAS;AAAA,EAClB;AACJ;;;ACjBA,WAAsB;AAsBf,IAAM,gBAAgB;AACtB,IAAM,gBAAgB;AACtB,IAAM,cAAc;AACpB,IAAM,2BAA2B;AACjC,IAAM,4BAA4B;AAElC,IAAM,iCAAiC;AACvC,IAAM,wBAAwB;AAC9B,IAAM,yBAAyB;AAG/B,IAAM,iBAA0C;AAAA,EACnD,UAAU;AAAA,EACV,QAAQ;AAAA,EACR,MAAM;AACV;AAEO,SAAS,mBAAmB;AAC/B,SAAO,WAAW,EAAE;AACxB;AAEO,SAAS,aAAa;AACzB,QAAM,UAAU,QAAQ,IAAI,uBAAuB,QAAQ,IAAI;AAC/D,MAAI,CAAC,SAAS;AACV,UAAM,IAAI,MAAM,iCAAiC;AAAA,EACrD;AACA,SAAO,IAAI,IAAI,OAAO;AAC1B;AAUO,SAAS,uBAAuB;AACnC,QAAM,oBAAoB,QAAQ,IAAI;AACtC,MAAI,CAAC,mBAAmB;AACpB,UAAM,IAAI,MAAM,+BAA+B;AAAA,EACnD;AACA,SAAO;AACX;AAEO,SAAS,iBAAiB;AAC7B,QAAM,cAAc,QAAQ,IAAI;AAChC,MAAI,CAAC,aAAa;AACd,UAAM,IAAI,MAAM,oCAAoC;AAAA,EACxD;AACA,SAAO,YAAY,QAAQ,QAAQ,IAAI;AAC3C;AAEO,SAAS,yBAAoD;AAChE,QAAM,mBAAmB,QAAQ,IAAI;AACrC,MAAI,qBAAqB,QAAQ;AAC7B,WAAO;AAAA,EACX,WAAW,qBAAqB,OAAO;AACnC,WAAO;AAAA,EACX,WAAW,qBAAqB,UAAU;AACtC,WAAO;AAAA,EACX,WAAW,kBAAkB;AACzB,UAAM,IAAI;AAAA,MACN;AAAA,IACJ;AAAA,EACJ,OAAO;AACH,WAAO;AAAA,EACX;AACJ;AAEA,SAAsB,sCAClB,cACA,aAC6B;AAAA;AAC7B,UAAM,OAAO;AAAA,MACT,eAAe;AAAA,IACnB;AAEA,UAAM,cAAc,IAAI,gBAAgB;AACxC,QAAI,aAAa;AACb,kBAAY,IAAI,2BAA2B,MAAM;AACjD,kBAAY,IAAI,iBAAiB,WAAW;AAAA,IAChD;AAEA,UAAM,MAAM,GAAG,iBAAiB,kCAAkC,YAAY,SAAS;AACvF,UAAM,WAAW,MAAM,MAAM,KAAK;AAAA,MAC9B,QAAQ;AAAA,MACR,MAAM,KAAK,UAAU,IAAI;AAAA,MACzB,SAAS;AAAA,QACL,gBAAgB;AAAA,QAChB,eAAe,YAAY,qBAAqB;AAAA,MACpD;AAAA,IACJ,CAAC;AAED,QAAI,SAAS,IAAI;AACb,YAAM,OAAO,MAAM,SAAS,KAAK;AACjC,YAAM,kBAAkB,KAAK;AAC7B,YAAM,EAAE,cAAc,aAAa,oBAAoB,iBAAiB,IAAI,KAAK;AAEjF,aAAO;AAAA,QACH,cAAc;AAAA,QACd;AAAA,QACA,OAAO;AAAA,MACX;AAAA,IACJ,WAAW,SAAS,WAAW,OAAO,SAAS,WAAW,KAAK;AAC3D,aAAO,EAAE,OAAO,eAAe;AAAA,IACnC,OAAO;AACH,aAAO,EAAE,OAAO,aAAa;AAAA,IACjC;AAAA,EACJ;AAAA;AAEA,SAAsB,+BAClB,aACkC;AAAA;AAClC,QAAI;AACA,aAAO,MAAM,oBAAoB,WAAW;AAAA,IAChD,SAAS,KAAP;AACE,UAAI,eAAe,wBAAwB;AACvC,cAAM;AAAA,MACV,WAAW,eAAe,uBAAuB;AAC7C,eAAO;AAAA,MACX,OAAO;AACH,gBAAQ,KAAK,iCAAiC,GAAG;AACjD,eAAO;AAAA,MACX;AAAA,IACJ;AAAA,EACJ;AAAA;AAEA,SAAsB,oBAAoB,aAAyD;AAAA;AAC/F,QAAI;AACJ,QAAI;AACA,kBAAY,MAAW,gBAAW,eAAe,GAAG,OAAO;AAAA,IAC/D,SAAS,KAAP;AACE,cAAQ,MAAM,wFAAwF,GAAG;AACzG,YAAM,IAAI,uBAAuB,sBAAsB;AAAA,IAC3D;AAEA,QAAI,CAAC,aAAa;AACd,YAAM,IAAI,sBAAsB,0BAA0B;AAAA,IAC9D;AAEA,QAAI,2BAA2B;AAC/B,QAAI,YAAY,YAAY,EAAE,WAAW,SAAS,GAAG;AACjD,iCAA2B,YAAY,UAAU,UAAU,MAAM;AAAA,IACrE;AAEA,QAAI;AACA,YAAM,EAAE,QAAQ,IAAI,MAAW,eAAU,0BAA0B,WAAW;AAAA,QAC1E,QAAQ,iBAAiB;AAAA,QACzB,YAAY,CAAC,OAAO;AAAA,MACxB,CAAC;AAED,aAAO,OAAqB,OAAO;AAAA,IACvC,SAAS,GAAP;AACE,UAAI,aAAa,OAAO;AACpB,cAAM,IAAI,sBAAsB,EAAE,OAAO;AAAA,MAC7C,OAAO;AACH,cAAM,IAAI,sBAAsB,sBAAsB;AAAA,MAC1D;AAAA,IACJ;AAAA,EACJ;AAAA;;;ACzLA,uBAAsB;AAGf,IAAM,oBAAoB,MAAM;AACnC,QAAM,UAAU,WAAW;AAC3B,QAAM,oBAAoB,qBAAqB;AAE/C,aAAO,0BAAQ,SAAS,iBAAiB;AAC7C;;;ACNO,IAAM,mBAAN,MAAuB;AAAA,EAClB,YACa,MACA,UACnB;AAFmB;AACA;AAAA,EAClB;AAAA,EAEH,OAAO,WAA6B;AAChC,WAAO,IAAI,iBAAiB,UAAU;AAAA,EAC1C;AAAA,EAEA,OAAO,OAAO,UAA0C;AACpD,WAAO,IAAI,iBAAiB,UAAU,QAAQ;AAAA,EAClD;AAAA,EAEA,iBAA0B;AACtB,WAAO,KAAK,SAAS;AAAA,EACzB;AAAA,EAEA,cAAwC;AACpC,WAAO,KAAK;AAAA,EAChB;AACJ;;;ACvBO,IAAM,4BAA4B;;;ACAzC,wBAAyB;AACzB,qBAAiC;AACjC,oBAA0C;AAuEnC,SAAS,gBAAgB,SAAsB,gBAAyB;AAC3E,QAAMA,WAAU,IAAI,QAAQ,QAAQ,OAAO;AAC3C,EAAAA,SAAQ,IAAI,uBAAuB,QAAQ,QAAQ,SAAS,CAAC;AAC7D,EAAAA,SAAQ,IAAI,wBAAwB,QAAQ,QAAQ,WAAW,QAAQ,QAAQ,MAAM;AACrF,MAAI,gBAAgB;AAChB,IAAAA,SAAQ,IAAI,gCAAgC,cAAc;AAAA,EAC9D;AACA,SAAO,2BAAa,KAAK;AAAA,IACrB,SAAS;AAAA,MACL,SAAAA;AAAA,IACJ;AAAA,EACJ,CAAC;AACL;;;ACxDO,SAAS,oBAAoB,SAAgF;AAChH,SAAO,CAAO,QAAqB;AA9BvC;AA+BQ,QACI,IAAI,QAAQ,aAAa,iBACzB,IAAI,QAAQ,aAAa,eACzB,IAAI,QAAQ,aAAa,eAC3B;AAEE,aAAO,gBAAgB,GAAG;AAAA,IAC9B;AAEA,UAAM,eAAc,SAAI,QAAQ,IAAI,wBAAwB,MAAxC,mBAA2C;AAC/D,UAAM,gBAAe,SAAI,QAAQ,IAAI,yBAAyB,MAAzC,mBAA4C;AACjE,UAAM,eAAc,SAAI,QAAQ,IAAI,yBAAyB,MAAzC,mBAA4C;AAGhE,QAAI,aAAa;AACb,YAAM,OAAO,MAAM,+BAA+B,WAAW;AAC7D,UAAI,MAAM;AACN,cAAM,eAAe,gBAAgB,GAAG;AACxC,eAAO,MAAM,mBAAmB,KAAK,cAAc,MAAM,OAAO;AAAA,MACpE;AAAA,IACJ;AAGA,QAAI,cAAc;AACd,YAAM,WAAW,MAAM,sCAAsC,cAAc,WAAW;AACtF,UAAI,SAAS,UAAU,cAAc;AACjC,cAAM,IAAI,MAAM,gDAAgD;AAAA,MACpE,WAAW,SAAS,UAAU,gBAAgB;AAC1C,cAAMC,YAAW,gBAAgB,GAAG;AACpC,QAAAA,UAAS,QAAQ,OAAO,wBAAwB;AAChD,QAAAA,UAAS,QAAQ,OAAO,yBAAyB;AACjD,eAAO,MAAM,mBAAmB,KAAKA,WAAU,QAAW,OAAO;AAAA,MACrE,OAAO;AACH,cAAM,WAAW,uBAAuB;AACxC,cAAM,eAAe,gBAAgB,KAAK,SAAS,WAAW;AAC9D,qBAAa,QAAQ,IAAI,0BAA0B,SAAS,aAAa,iCAClE,iBADkE;AAAA,UAErE;AAAA,QACJ,EAAC;AACD,qBAAa,QAAQ,IAAI,2BAA2B,SAAS,cAAc,iCACpE,iBADoE;AAAA,UAEvE;AAAA,QACJ,EAAC;AACD,cAAM,OAAO,MAAM,oBAAoB,SAAS,WAAW;AAC3D,eAAO,MAAM,mBAAmB,KAAK,cAAc,MAAM,OAAO;AAAA,MACpE;AAAA,IACJ;AAEA,UAAM,MAAM,gBAAgB,GAAG;AAC/B,WAAO,MAAM,mBAAmB,KAAK,KAAK,QAAW,OAAO;AAAA,EAChE;AACJ;AAEA,IAAM,qBAAqB,CACvB,KACA,KACA,MACA,YACwB;AAzF5B;AA0FI,MAAI,mCAAS,eAAe;AACxB,UAAM,eAAe,MAAM,QAAQ,cAAc,KAAK,KAAK,IAAI;AAC/D,QAAI,wBAAwB,kBAAkB;AAC1C,UAAI,CAAC,aAAa,eAAe,GAAG;AAChC,gBAAO,kBAAa,YAAY,MAAzB,YAA8B;AAAA,MACzC;AAAA,IACJ,OAAO;AACH,cAAQ,KAAK,6DAA6D;AAAA,IAC9E;AAAA,EACJ;AACA,SAAO;AACX;","names":["headers","response"]}

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@propelauth/nextjs",
-    "version": "0.3.11",
+    "version": "0.3.13",
     "exports": {
         "./server": {
             "browser": "./dist/server/index.mjs",
@@ -68,7 +68,7 @@
         "react": "^18.2.0 || ^19.0.0"
     },
     "dependencies": {
-        "@propelauth/node-apis": "^2.1.32",
+        "@propelauth/node-apis": "^2.1.33",
         "jose": "^5.10.0"
     }
 }