@sd-angular/core 19.0.0-beta.10 → 19.0.0-beta.100

package/fesm2022/sd-angular-core-interceptors.mjs

@@ -1,13 +1,16 @@
 import { HttpClient } from '@angular/common/http';
 import * as i0 from '@angular/core';
-import { Injectable } from '@angular/core';
+import { inject, Injectable } from '@angular/core';
+import { I18nService } from '@sd-angular/core/i18n';
 import { throwError } from 'rxjs';
 import { catchError, switchMap } from 'rxjs/operators';
 import * as i1 from '@angular/material/snack-bar';
+import * as i1$1 from '@sd-angular/core/modules';
 
 class SdNoInternetInterceptor {
     snackBar;
     injector;
+    #i18n = inject(I18nService);
     // Trạng thái offline để tránh spam request check hoặc hiển thị nhiều snackbar
     #isOffline = false;
     // Giữ tham chiếu để có thể đóng/thao tác snackbar
@@ -38,7 +41,7 @@ class SdNoInternetInterceptor {
                 // 1. Ưu tiên bắt lỗi kết nối trước (Đây là logic MẤT MẠNG THẬT)
                 catchError(_checkError => {
                     // Hiển thị thông báo và bắt đầu polling chờ mạng
-                    this.#showReloadSnackbar('Không có kết nối mạng. Đang chờ kết nối...', { isSticky: true });
+                    this.#showReloadSnackbar(this.#i18n.t('core.interceptor.no-internet.offline'), { isSticky: true });
                     this.#startPolling();
                     // Ném lại lỗi gốc để Component biết request thất bại
                     return throwError(() => error);
@@ -47,7 +50,7 @@ class SdNoInternetInterceptor {
                 // Lỗi status 0 ban đầu là do CORS, SSL, hoặc Server chặn connection
                 switchMap(() => {
                     this.#isOffline = false; // Reset cờ
-                    this.snackBar.open('Không thể kết nối đến máy chủ (Lỗi CORS hoặc cấu hình).', 'Đóng', {
+                    this.snackBar.open(this.#i18n.t('core.interceptor.no-internet.cors-error'), this.#i18n.t('core.common.close'), {
                         duration: 5000,
                         horizontalPosition: 'center',
                         verticalPosition: 'top',
@@ -58,7 +61,7 @@ class SdNoInternetInterceptor {
             }
             // --- TRƯỜNG HỢP 2: Server bảo trì (503) ---
             else if (error.status === 503) {
-                this.snackBar.open('Máy chủ đang bảo trì. Vui lòng thử lại sau!', 'Đóng', {
+                this.snackBar.open(this.#i18n.t('core.interceptor.no-internet.maintenance'), this.#i18n.t('core.common.close'), {
                     horizontalPosition: 'center',
                     verticalPosition: 'top',
                     duration: 5000,
@@ -77,7 +80,7 @@ class SdNoInternetInterceptor {
         if (this.#snackBarRef) {
             this.#snackBarRef.dismiss();
         }
-        this.#snackBarRef = this.snackBar.open(message, 'Tải lại trang', {
+        this.#snackBarRef = this.snackBar.open(message, this.#i18n.t('core.common.reload'), {
             horizontalPosition: 'center',
             verticalPosition: 'top',
             // Nếu isSticky = true (mất mạng) -> Không tự tắt. Nếu có duration -> tự tắt.
@@ -94,6 +97,7 @@ class SdNoInternetInterceptor {
      */
     #startPolling = () => {
         this.#stopPolling(); // Clear cũ nếu có
+        // @i18n-ignore — dev console log
         console.log('--- Bắt đầu chế độ theo dõi mạng ---');
         this.#pollInterval = setInterval(() => {
             if (!this.#http) {
@@ -103,11 +107,12 @@ class SdNoInternetInterceptor {
             this.#http.get(this.#healthCheckUrl).subscribe({
                 next: () => {
                     // --> ĐÃ CÓ MẠNG LẠI
+                    // @i18n-ignore — dev console log
                     console.log('--> Kết nối đã được khôi phục!');
                     this.#stopPolling();
                     this.#isOffline = false;
                     // Thông báo thành công (tự tắt sau 5s)
-                    this.#showReloadSnackbar('Kết nối đã được khôi phục!', { duration: 5000, isSticky: false });
+                    this.#showReloadSnackbar(this.#i18n.t('core.interceptor.no-internet.restored'), { duration: 5000, isSticky: false });
                 },
                 error: () => {
                     // --> VẪN MẤT MẠNG: Không làm gì cả, chờ lần check tiếp theo
@@ -124,16 +129,38 @@ class SdNoInternetInterceptor {
             this.#pollInterval = null;
         }
     };
-    static ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "19.2.17", ngImport: i0, type: SdNoInternetInterceptor, deps: [{ token: i1.MatSnackBar }, { token: i0.Injector }], target: i0.ɵɵFactoryTarget.Injectable });
-    static ɵprov = i0.ɵɵngDeclareInjectable({ minVersion: "12.0.0", version: "19.2.17", ngImport: i0, type: SdNoInternetInterceptor });
+    static ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "19.2.21", ngImport: i0, type: SdNoInternetInterceptor, deps: [{ token: i1.MatSnackBar }, { token: i0.Injector }], target: i0.ɵɵFactoryTarget.Injectable });
+    static ɵprov = i0.ɵɵngDeclareInjectable({ minVersion: "12.0.0", version: "19.2.21", ngImport: i0, type: SdNoInternetInterceptor });
 }
-i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "19.2.17", ngImport: i0, type: SdNoInternetInterceptor, decorators: [{
+i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "19.2.21", ngImport: i0, type: SdNoInternetInterceptor, decorators: [{
             type: Injectable
         }], ctorParameters: () => [{ type: i1.MatSnackBar }, { type: i0.Injector }] });
 
+class SdUnauthorizedInterceptor {
+    authService;
+    #unauthorizedHandled = false;
+    constructor(authService) {
+        this.authService = authService;
+    }
+    intercept(request, next) {
+        return next.handle(request).pipe(catchError((error) => {
+            if (error.status === 401 && !this.#unauthorizedHandled) {
+                this.#unauthorizedHandled = true;
+                this.authService.signout();
+            }
+            return throwError(() => error);
+        }));
+    }
+    static ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "19.2.21", ngImport: i0, type: SdUnauthorizedInterceptor, deps: [{ token: i1$1.SdAuthService }], target: i0.ɵɵFactoryTarget.Injectable });
+    static ɵprov = i0.ɵɵngDeclareInjectable({ minVersion: "12.0.0", version: "19.2.21", ngImport: i0, type: SdUnauthorizedInterceptor });
+}
+i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "19.2.21", ngImport: i0, type: SdUnauthorizedInterceptor, decorators: [{
+            type: Injectable
+        }], ctorParameters: () => [{ type: i1$1.SdAuthService }] });
+
 /**
  * Generated bundle index. Do not edit.
  */
 
-export { SdNoInternetInterceptor };
+export { SdNoInternetInterceptor, SdUnauthorizedInterceptor };
 //# sourceMappingURL=sd-angular-core-interceptors.mjs.map

package/fesm2022/sd-angular-core-interceptors.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"sd-angular-core-interceptors.mjs","sources":["../../../projects/sd-angular/interceptors/no-internet/no-internet.interceptor.ts","../../../projects/sd-angular/interceptors/sd-angular-core-interceptors.ts"],"sourcesContent":["import { HttpClient, HttpErrorResponse, HttpEvent, HttpHandler, HttpInterceptor, HttpRequest } from '@angular/common/http';\r\nimport { Injectable, Injector } from '@angular/core';\r\nimport { MatSnackBar, MatSnackBarRef } from '@angular/material/snack-bar';\r\nimport { Observable, throwError } from 'rxjs';\r\nimport { catchError, switchMap } from 'rxjs/operators';\r\n\r\n@Injectable()\r\nexport class SdNoInternetInterceptor implements HttpInterceptor {\r\n  // Trạng thái offline để tránh spam request check hoặc hiển thị nhiều snackbar\r\n  #isOffline = false;\r\n\r\n  // Giữ tham chiếu để có thể đóng/thao tác snackbar\r\n  #snackBarRef: MatSnackBarRef<any> | null = null;\r\n\r\n  // Giữ tham chiếu interval để clear khi có mạng lại\r\n  #pollInterval: ReturnType<typeof setInterval> | null = null;\r\n\r\n  // Lazy load HttpClient\r\n  #http: HttpClient | null = null;\r\n\r\n  // Endpoint kiểm tra mạng (Nên dùng 1 file tĩnh nhẹ hoặc API ping public uy tín)\r\n  readonly #healthCheckUrl = 'https://jsonplaceholder.typicode.com/todos/1';\r\n\r\n  // Thời gian lặp lại việc kiểm tra mạng (ms)\r\n  readonly #checkIntervalDuration = 3000;\r\n\r\n  constructor(\r\n    private snackBar: MatSnackBar,\r\n    private injector: Injector\r\n  ) {}\r\n\r\n  intercept(request: HttpRequest<unknown>, next: HttpHandler): Observable<HttpEvent<unknown>> {\r\n    return next.handle(request).pipe(\r\n      catchError((error: HttpErrorResponse) => {\r\n        // --- TRƯỜNG HỢP 1: Lỗi mất kết nối (Status 0) ---\r\n        if (error.status === 0 && !this.#isOffline) {\r\n          this.#isOffline = true;\r\n\r\n          // Lazy load HttpClient để tránh lỗi Circular Dependency\r\n          if (!this.#http) {\r\n            this.#http = this.injector.get(HttpClient);\r\n          }\r\n\r\n          // Gọi thử một API public để xác minh xem là Mất mạng thật hay do CORS/Server chặn\r\n          return this.#http.get(this.#healthCheckUrl).pipe(\r\n            // 1. Ưu tiên bắt lỗi kết nối trước (Đây là logic MẤT MẠNG THẬT)\r\n            catchError(_checkError => {\r\n              // Hiển thị thông báo và bắt đầu polling chờ mạng\r\n              this.#showReloadSnackbar('Không có kết nối mạng. Đang chờ kết nối...', { isSticky: true });\r\n              this.#startPolling();\r\n\r\n              // Ném lại lỗi gốc để Component biết request thất bại\r\n              return throwError(() => error);\r\n            }),\r\n\r\n            // 2. Nếu không vào catchError ở trên -> Check thành công -> CÓ MẠNG\r\n            // Lỗi status 0 ban đầu là do CORS, SSL, hoặc Server chặn connection\r\n            switchMap(() => {\r\n              this.#isOffline = false; // Reset cờ\r\n\r\n              this.snackBar.open('Không thể kết nối đến máy chủ (Lỗi CORS hoặc cấu hình).', 'Đóng', {\r\n                duration: 5000,\r\n                horizontalPosition: 'center',\r\n                verticalPosition: 'top',\r\n              });\r\n\r\n              // Ném lại lỗi gốc\r\n              return throwError(() => error);\r\n            })\r\n          );\r\n        }\r\n\r\n        // --- TRƯỜNG HỢP 2: Server bảo trì (503) ---\r\n        else if (error.status === 503) {\r\n          this.snackBar.open('Máy chủ đang bảo trì. Vui lòng thử lại sau!', 'Đóng', {\r\n            horizontalPosition: 'center',\r\n            verticalPosition: 'top',\r\n            duration: 5000,\r\n          });\r\n        }\r\n\r\n        // --- TRƯỜNG HỢP KHÁC: 401, 404, 500... ---\r\n        // Ném lỗi ra để component xử lý bình thường\r\n        return throwError(() => error);\r\n      })\r\n    );\r\n  }\r\n\r\n  /**\r\n   * Hiển thị Snackbar thông báo trạng thái mạng\r\n   */\r\n  #showReloadSnackbar = (message: string, options?: { duration?: number; isSticky?: boolean }): void => {\r\n    // Đóng snackbar cũ nếu đang hiện\r\n    if (this.#snackBarRef) {\r\n      this.#snackBarRef.dismiss();\r\n    }\r\n\r\n    this.#snackBarRef = this.snackBar.open(message, 'Tải lại trang', {\r\n      horizontalPosition: 'center',\r\n      verticalPosition: 'top',\r\n      // Nếu isSticky = true (mất mạng) -> Không tự tắt. Nếu có duration -> tự tắt.\r\n      duration: options?.duration,\r\n      panelClass: options?.isSticky ? ['offline-snackbar'] : undefined, // Class CSS tùy chọn\r\n    });\r\n\r\n    // Xử lý sự kiện bấm nút \"Tải lại trang\"\r\n    this.#snackBarRef.onAction().subscribe(() => {\r\n      window.location.reload();\r\n    });\r\n  };\r\n\r\n  /**\r\n   * Bắt đầu vòng lặp kiểm tra kết nối mạng\r\n   */\r\n  #startPolling = (): void => {\r\n    this.#stopPolling(); // Clear cũ nếu có\r\n\r\n    console.log('--- Bắt đầu chế độ theo dõi mạng ---');\r\n\r\n    this.#pollInterval = setInterval(() => {\r\n      if (!this.#http) {\r\n        this.#http = this.injector.get(HttpClient);\r\n      }\r\n\r\n      // Check nhẹ\r\n      this.#http.get(this.#healthCheckUrl).subscribe({\r\n        next: () => {\r\n          // --> ĐÃ CÓ MẠNG LẠI\r\n          console.log('--> Kết nối đã được khôi phục!');\r\n\r\n          this.#stopPolling();\r\n          this.#isOffline = false;\r\n\r\n          // Thông báo thành công (tự tắt sau 5s)\r\n          this.#showReloadSnackbar('Kết nối đã được khôi phục!', { duration: 5000, isSticky: false });\r\n        },\r\n        error: () => {\r\n          // --> VẪN MẤT MẠNG: Không làm gì cả, chờ lần check tiếp theo\r\n        },\r\n      });\r\n    }, this.#checkIntervalDuration);\r\n  };\r\n\r\n  /**\r\n   * Dừng vòng lặp kiểm tra\r\n   */\r\n  #stopPolling = (): void => {\r\n    if (this.#pollInterval) {\r\n      clearInterval(this.#pollInterval);\r\n      this.#pollInterval = null;\r\n    }\r\n  };\r\n}\r\n","/**\n * Generated bundle index. Do not edit.\n */\n\nexport * from './index';\n"],"names":[],"mappings":";;;;;;;MAOa,uBAAuB,CAAA;AAoBxB,IAAA,QAAA;AACA,IAAA,QAAA;;IAnBV,UAAU,GAAG,KAAK;;IAGlB,YAAY,GAA+B,IAAI;;IAG/C,aAAa,GAA0C,IAAI;;IAG3D,KAAK,GAAsB,IAAI;;IAGtB,eAAe,GAAG,8CAA8C;;IAGhE,sBAAsB,GAAG,IAAI;IAEtC,WAAA,CACU,QAAqB,EACrB,QAAkB,EAAA;QADlB,IAAA,CAAA,QAAQ,GAAR,QAAQ;QACR,IAAA,CAAA,QAAQ,GAAR,QAAQ;IACf;IAEH,SAAS,CAAC,OAA6B,EAAE,IAAiB,EAAA;AACxD,QAAA,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAC9B,UAAU,CAAC,CAAC,KAAwB,KAAI;;YAEtC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE;AAC1C,gBAAA,IAAI,CAAC,UAAU,GAAG,IAAI;;AAGtB,gBAAA,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE;oBACf,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC;gBAC5C;;gBAGA,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,IAAI;;gBAE9C,UAAU,CAAC,WAAW,IAAG;;oBAEvB,IAAI,CAAC,mBAAmB,CAAC,4CAA4C,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;oBAC1F,IAAI,CAAC,aAAa,EAAE;;AAGpB,oBAAA,OAAO,UAAU,CAAC,MAAM,KAAK,CAAC;AAChC,gBAAA,CAAC,CAAC;;;gBAIF,SAAS,CAAC,MAAK;AACb,oBAAA,IAAI,CAAC,UAAU,GAAG,KAAK,CAAC;oBAExB,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,yDAAyD,EAAE,MAAM,EAAE;AACpF,wBAAA,QAAQ,EAAE,IAAI;AACd,wBAAA,kBAAkB,EAAE,QAAQ;AAC5B,wBAAA,gBAAgB,EAAE,KAAK;AACxB,qBAAA,CAAC;;AAGF,oBAAA,OAAO,UAAU,CAAC,MAAM,KAAK,CAAC;gBAChC,CAAC,CAAC,CACH;YACH;;AAGK,iBAAA,IAAI,KAAK,CAAC,MAAM,KAAK,GAAG,EAAE;gBAC7B,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,6CAA6C,EAAE,MAAM,EAAE;AACxE,oBAAA,kBAAkB,EAAE,QAAQ;AAC5B,oBAAA,gBAAgB,EAAE,KAAK;AACvB,oBAAA,QAAQ,EAAE,IAAI;AACf,iBAAA,CAAC;YACJ;;;AAIA,YAAA,OAAO,UAAU,CAAC,MAAM,KAAK,CAAC;QAChC,CAAC,CAAC,CACH;IACH;AAEA;;AAEG;AACH,IAAA,mBAAmB,GAAG,CAAC,OAAe,EAAE,OAAmD,KAAU;;AAEnG,QAAA,IAAI,IAAI,CAAC,YAAY,EAAE;AACrB,YAAA,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE;QAC7B;AAEA,QAAA,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,eAAe,EAAE;AAC/D,YAAA,kBAAkB,EAAE,QAAQ;AAC5B,YAAA,gBAAgB,EAAE,KAAK;;YAEvB,QAAQ,EAAE,OAAO,EAAE,QAAQ;AAC3B,YAAA,UAAU,EAAE,OAAO,EAAE,QAAQ,GAAG,CAAC,kBAAkB,CAAC,GAAG,SAAS;AACjE,SAAA,CAAC;;QAGF,IAAI,CAAC,YAAY,CAAC,QAAQ,EAAE,CAAC,SAAS,CAAC,MAAK;AAC1C,YAAA,MAAM,CAAC,QAAQ,CAAC,MAAM,EAAE;AAC1B,QAAA,CAAC,CAAC;AACJ,IAAA,CAAC;AAED;;AAEG;IACH,aAAa,GAAG,MAAW;AACzB,QAAA,IAAI,CAAC,YAAY,EAAE,CAAC;AAEpB,QAAA,OAAO,CAAC,GAAG,CAAC,sCAAsC,CAAC;AAEnD,QAAA,IAAI,CAAC,aAAa,GAAG,WAAW,CAAC,MAAK;AACpC,YAAA,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE;gBACf,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC;YAC5C;;YAGA,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,SAAS,CAAC;gBAC7C,IAAI,EAAE,MAAK;;AAET,oBAAA,OAAO,CAAC,GAAG,CAAC,gCAAgC,CAAC;oBAE7C,IAAI,CAAC,YAAY,EAAE;AACnB,oBAAA,IAAI,CAAC,UAAU,GAAG,KAAK;;AAGvB,oBAAA,IAAI,CAAC,mBAAmB,CAAC,4BAA4B,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;gBAC7F,CAAC;gBACD,KAAK,EAAE,MAAK;;gBAEZ,CAAC;AACF,aAAA,CAAC;AACJ,QAAA,CAAC,EAAE,IAAI,CAAC,sBAAsB,CAAC;AACjC,IAAA,CAAC;AAED;;AAEG;IACH,YAAY,GAAG,MAAW;AACxB,QAAA,IAAI,IAAI,CAAC,aAAa,EAAE;AACtB,YAAA,aAAa,CAAC,IAAI,CAAC,aAAa,CAAC;AACjC,YAAA,IAAI,CAAC,aAAa,GAAG,IAAI;QAC3B;AACF,IAAA,CAAC;wGAhJU,uBAAuB,EAAA,IAAA,EAAA,CAAA,EAAA,KAAA,EAAA,EAAA,CAAA,WAAA,EAAA,EAAA,EAAA,KAAA,EAAA,EAAA,CAAA,QAAA,EAAA,CAAA,EAAA,MAAA,EAAA,EAAA,CAAA,eAAA,CAAA,UAAA,EAAA,CAAA;4GAAvB,uBAAuB,EAAA,CAAA;;4FAAvB,uBAAuB,EAAA,UAAA,EAAA,CAAA;kBADnC;;;ACND;;AAEG;;;;"}
+{"version":3,"file":"sd-angular-core-interceptors.mjs","sources":["../../../projects/sd-angular/interceptors/no-internet/no-internet.interceptor.ts","../../../projects/sd-angular/interceptors/unauthorized/unauthorized.interceptor.ts","../../../projects/sd-angular/interceptors/sd-angular-core-interceptors.ts"],"sourcesContent":["import { HttpClient, HttpErrorResponse, HttpEvent, HttpHandler, HttpInterceptor, HttpRequest } from '@angular/common/http';\r\nimport { inject, Injectable, Injector } from '@angular/core';\r\nimport { MatSnackBar, MatSnackBarRef } from '@angular/material/snack-bar';\r\nimport { I18nService } from '@sd-angular/core/i18n';\r\nimport { Observable, throwError } from 'rxjs';\r\nimport { catchError, switchMap } from 'rxjs/operators';\r\n\r\n@Injectable()\r\nexport class SdNoInternetInterceptor implements HttpInterceptor {\r\n  readonly #i18n = inject(I18nService);\r\n\r\n  // Trạng thái offline để tránh spam request check hoặc hiển thị nhiều snackbar\r\n  #isOffline = false;\r\n\r\n  // Giữ tham chiếu để có thể đóng/thao tác snackbar\r\n  #snackBarRef: MatSnackBarRef<any> | null = null;\r\n\r\n  // Giữ tham chiếu interval để clear khi có mạng lại\r\n  #pollInterval: ReturnType<typeof setInterval> | null = null;\r\n\r\n  // Lazy load HttpClient\r\n  #http: HttpClient | null = null;\r\n\r\n  // Endpoint kiểm tra mạng (Nên dùng 1 file tĩnh nhẹ hoặc API ping public uy tín)\r\n  readonly #healthCheckUrl = 'https://jsonplaceholder.typicode.com/todos/1';\r\n\r\n  // Thời gian lặp lại việc kiểm tra mạng (ms)\r\n  readonly #checkIntervalDuration = 3000;\r\n\r\n  constructor(\r\n    private snackBar: MatSnackBar,\r\n    private injector: Injector\r\n  ) {}\r\n\r\n  intercept(request: HttpRequest<unknown>, next: HttpHandler): Observable<HttpEvent<unknown>> {\r\n    return next.handle(request).pipe(\r\n      catchError((error: HttpErrorResponse) => {\r\n        // --- TRƯỜNG HỢP 1: Lỗi mất kết nối (Status 0) ---\r\n        if (error.status === 0 && !this.#isOffline) {\r\n          this.#isOffline = true;\r\n\r\n          // Lazy load HttpClient để tránh lỗi Circular Dependency\r\n          if (!this.#http) {\r\n            this.#http = this.injector.get(HttpClient);\r\n          }\r\n\r\n          // Gọi thử một API public để xác minh xem là Mất mạng thật hay do CORS/Server chặn\r\n          return this.#http.get(this.#healthCheckUrl).pipe(\r\n            // 1. Ưu tiên bắt lỗi kết nối trước (Đây là logic MẤT MẠNG THẬT)\r\n            catchError(_checkError => {\r\n              // Hiển thị thông báo và bắt đầu polling chờ mạng\r\n              this.#showReloadSnackbar(this.#i18n.t('core.interceptor.no-internet.offline'), { isSticky: true });\r\n              this.#startPolling();\r\n\r\n              // Ném lại lỗi gốc để Component biết request thất bại\r\n              return throwError(() => error);\r\n            }),\r\n\r\n            // 2. Nếu không vào catchError ở trên -> Check thành công -> CÓ MẠNG\r\n            // Lỗi status 0 ban đầu là do CORS, SSL, hoặc Server chặn connection\r\n            switchMap(() => {\r\n              this.#isOffline = false; // Reset cờ\r\n\r\n              this.snackBar.open(this.#i18n.t('core.interceptor.no-internet.cors-error'), this.#i18n.t('core.common.close'), {\r\n                duration: 5000,\r\n                horizontalPosition: 'center',\r\n                verticalPosition: 'top',\r\n              });\r\n\r\n              // Ném lại lỗi gốc\r\n              return throwError(() => error);\r\n            })\r\n          );\r\n        }\r\n\r\n        // --- TRƯỜNG HỢP 2: Server bảo trì (503) ---\r\n        else if (error.status === 503) {\r\n          this.snackBar.open(this.#i18n.t('core.interceptor.no-internet.maintenance'), this.#i18n.t('core.common.close'), {\r\n            horizontalPosition: 'center',\r\n            verticalPosition: 'top',\r\n            duration: 5000,\r\n          });\r\n        }\r\n\r\n        // --- TRƯỜNG HỢP KHÁC: 401, 404, 500... ---\r\n        // Ném lỗi ra để component xử lý bình thường\r\n        return throwError(() => error);\r\n      })\r\n    );\r\n  }\r\n\r\n  /**\r\n   * Hiển thị Snackbar thông báo trạng thái mạng\r\n   */\r\n  #showReloadSnackbar = (message: string, options?: { duration?: number; isSticky?: boolean }): void => {\r\n    // Đóng snackbar cũ nếu đang hiện\r\n    if (this.#snackBarRef) {\r\n      this.#snackBarRef.dismiss();\r\n    }\r\n\r\n    this.#snackBarRef = this.snackBar.open(message, this.#i18n.t('core.common.reload'), {\r\n      horizontalPosition: 'center',\r\n      verticalPosition: 'top',\r\n      // Nếu isSticky = true (mất mạng) -> Không tự tắt. Nếu có duration -> tự tắt.\r\n      duration: options?.duration,\r\n      panelClass: options?.isSticky ? ['offline-snackbar'] : undefined, // Class CSS tùy chọn\r\n    });\r\n\r\n    // Xử lý sự kiện bấm nút \"Tải lại trang\"\r\n    this.#snackBarRef.onAction().subscribe(() => {\r\n      window.location.reload();\r\n    });\r\n  };\r\n\r\n  /**\r\n   * Bắt đầu vòng lặp kiểm tra kết nối mạng\r\n   */\r\n  #startPolling = (): void => {\r\n    this.#stopPolling(); // Clear cũ nếu có\r\n\r\n    // @i18n-ignore — dev console log\r\n    console.log('--- Bắt đầu chế độ theo dõi mạng ---');\r\n\r\n    this.#pollInterval = setInterval(() => {\r\n      if (!this.#http) {\r\n        this.#http = this.injector.get(HttpClient);\r\n      }\r\n\r\n      // Check nhẹ\r\n      this.#http.get(this.#healthCheckUrl).subscribe({\r\n        next: () => {\r\n          // --> ĐÃ CÓ MẠNG LẠI\r\n          // @i18n-ignore — dev console log\r\n          console.log('--> Kết nối đã được khôi phục!');\r\n\r\n          this.#stopPolling();\r\n          this.#isOffline = false;\r\n\r\n          // Thông báo thành công (tự tắt sau 5s)\r\n          this.#showReloadSnackbar(this.#i18n.t('core.interceptor.no-internet.restored'), { duration: 5000, isSticky: false });\r\n        },\r\n        error: () => {\r\n          // --> VẪN MẤT MẠNG: Không làm gì cả, chờ lần check tiếp theo\r\n        },\r\n      });\r\n    }, this.#checkIntervalDuration);\r\n  };\r\n\r\n  /**\r\n   * Dừng vòng lặp kiểm tra\r\n   */\r\n  #stopPolling = (): void => {\r\n    if (this.#pollInterval) {\r\n      clearInterval(this.#pollInterval);\r\n      this.#pollInterval = null;\r\n    }\r\n  };\r\n}\r\n","import { HttpErrorResponse, HttpEvent, HttpHandler, HttpInterceptor, HttpRequest } from '@angular/common/http';\r\nimport { Injectable } from '@angular/core';\r\nimport { SdAuthService } from '@sd-angular/core/modules';\r\nimport { Observable, throwError } from 'rxjs';\r\nimport { catchError } from 'rxjs/operators';\r\n\r\n@Injectable()\r\nexport class SdUnauthorizedInterceptor implements HttpInterceptor {\r\n  #unauthorizedHandled = false;\r\n\r\n  constructor(private authService: SdAuthService) {}\r\n\r\n  intercept(request: HttpRequest<unknown>, next: HttpHandler): Observable<HttpEvent<unknown>> {\r\n    return next.handle(request).pipe(\r\n      catchError((error: HttpErrorResponse) => {\r\n        if (error.status === 401 && !this.#unauthorizedHandled) {\r\n          this.#unauthorizedHandled = true;\r\n          this.authService.signout();\r\n        }\r\n\r\n        return throwError(() => error);\r\n      })\r\n    );\r\n  }\r\n}\r\n","/**\n * Generated bundle index. Do not edit.\n */\n\nexport * from './index';\n"],"names":["i1"],"mappings":";;;;;;;;;MAQa,uBAAuB,CAAA;AAsBxB,IAAA,QAAA;AACA,IAAA,QAAA;AAtBD,IAAA,KAAK,GAAG,MAAM,CAAC,WAAW,CAAC;;IAGpC,UAAU,GAAG,KAAK;;IAGlB,YAAY,GAA+B,IAAI;;IAG/C,aAAa,GAA0C,IAAI;;IAG3D,KAAK,GAAsB,IAAI;;IAGtB,eAAe,GAAG,8CAA8C;;IAGhE,sBAAsB,GAAG,IAAI;IAEtC,WAAA,CACU,QAAqB,EACrB,QAAkB,EAAA;QADlB,IAAA,CAAA,QAAQ,GAAR,QAAQ;QACR,IAAA,CAAA,QAAQ,GAAR,QAAQ;IACf;IAEH,SAAS,CAAC,OAA6B,EAAE,IAAiB,EAAA;AACxD,QAAA,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAC9B,UAAU,CAAC,CAAC,KAAwB,KAAI;;YAEtC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE;AAC1C,gBAAA,IAAI,CAAC,UAAU,GAAG,IAAI;;AAGtB,gBAAA,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE;oBACf,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC;gBAC5C;;gBAGA,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,IAAI;;gBAE9C,UAAU,CAAC,WAAW,IAAG;;AAEvB,oBAAA,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,sCAAsC,CAAC,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;oBAClG,IAAI,CAAC,aAAa,EAAE;;AAGpB,oBAAA,OAAO,UAAU,CAAC,MAAM,KAAK,CAAC;AAChC,gBAAA,CAAC,CAAC;;;gBAIF,SAAS,CAAC,MAAK;AACb,oBAAA,IAAI,CAAC,UAAU,GAAG,KAAK,CAAC;oBAExB,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,yCAAyC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,mBAAmB,CAAC,EAAE;AAC7G,wBAAA,QAAQ,EAAE,IAAI;AACd,wBAAA,kBAAkB,EAAE,QAAQ;AAC5B,wBAAA,gBAAgB,EAAE,KAAK;AACxB,qBAAA,CAAC;;AAGF,oBAAA,OAAO,UAAU,CAAC,MAAM,KAAK,CAAC;gBAChC,CAAC,CAAC,CACH;YACH;;AAGK,iBAAA,IAAI,KAAK,CAAC,MAAM,KAAK,GAAG,EAAE;gBAC7B,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,0CAA0C,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,mBAAmB,CAAC,EAAE;AAC9G,oBAAA,kBAAkB,EAAE,QAAQ;AAC5B,oBAAA,gBAAgB,EAAE,KAAK;AACvB,oBAAA,QAAQ,EAAE,IAAI;AACf,iBAAA,CAAC;YACJ;;;AAIA,YAAA,OAAO,UAAU,CAAC,MAAM,KAAK,CAAC;QAChC,CAAC,CAAC,CACH;IACH;AAEA;;AAEG;AACH,IAAA,mBAAmB,GAAG,CAAC,OAAe,EAAE,OAAmD,KAAU;;AAEnG,QAAA,IAAI,IAAI,CAAC,YAAY,EAAE;AACrB,YAAA,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE;QAC7B;AAEA,QAAA,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,oBAAoB,CAAC,EAAE;AAClF,YAAA,kBAAkB,EAAE,QAAQ;AAC5B,YAAA,gBAAgB,EAAE,KAAK;;YAEvB,QAAQ,EAAE,OAAO,EAAE,QAAQ;AAC3B,YAAA,UAAU,EAAE,OAAO,EAAE,QAAQ,GAAG,CAAC,kBAAkB,CAAC,GAAG,SAAS;AACjE,SAAA,CAAC;;QAGF,IAAI,CAAC,YAAY,CAAC,QAAQ,EAAE,CAAC,SAAS,CAAC,MAAK;AAC1C,YAAA,MAAM,CAAC,QAAQ,CAAC,MAAM,EAAE;AAC1B,QAAA,CAAC,CAAC;AACJ,IAAA,CAAC;AAED;;AAEG;IACH,aAAa,GAAG,MAAW;AACzB,QAAA,IAAI,CAAC,YAAY,EAAE,CAAC;;AAGpB,QAAA,OAAO,CAAC,GAAG,CAAC,sCAAsC,CAAC;AAEnD,QAAA,IAAI,CAAC,aAAa,GAAG,WAAW,CAAC,MAAK;AACpC,YAAA,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE;gBACf,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC;YAC5C;;YAGA,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,SAAS,CAAC;gBAC7C,IAAI,EAAE,MAAK;;;AAGT,oBAAA,OAAO,CAAC,GAAG,CAAC,gCAAgC,CAAC;oBAE7C,IAAI,CAAC,YAAY,EAAE;AACnB,oBAAA,IAAI,CAAC,UAAU,GAAG,KAAK;;oBAGvB,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,uCAAuC,CAAC,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;gBACtH,CAAC;gBACD,KAAK,EAAE,MAAK;;gBAEZ,CAAC;AACF,aAAA,CAAC;AACJ,QAAA,CAAC,EAAE,IAAI,CAAC,sBAAsB,CAAC;AACjC,IAAA,CAAC;AAED;;AAEG;IACH,YAAY,GAAG,MAAW;AACxB,QAAA,IAAI,IAAI,CAAC,aAAa,EAAE;AACtB,YAAA,aAAa,CAAC,IAAI,CAAC,aAAa,CAAC;AACjC,YAAA,IAAI,CAAC,aAAa,GAAG,IAAI;QAC3B;AACF,IAAA,CAAC;wGApJU,uBAAuB,EAAA,IAAA,EAAA,CAAA,EAAA,KAAA,EAAA,EAAA,CAAA,WAAA,EAAA,EAAA,EAAA,KAAA,EAAA,EAAA,CAAA,QAAA,EAAA,CAAA,EAAA,MAAA,EAAA,EAAA,CAAA,eAAA,CAAA,UAAA,EAAA,CAAA;4GAAvB,uBAAuB,EAAA,CAAA;;4FAAvB,uBAAuB,EAAA,UAAA,EAAA,CAAA;kBADnC;;;MCAY,yBAAyB,CAAA;AAGhB,IAAA,WAAA;IAFpB,oBAAoB,GAAG,KAAK;AAE5B,IAAA,WAAA,CAAoB,WAA0B,EAAA;QAA1B,IAAA,CAAA,WAAW,GAAX,WAAW;IAAkB;IAEjD,SAAS,CAAC,OAA6B,EAAE,IAAiB,EAAA;AACxD,QAAA,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAC9B,UAAU,CAAC,CAAC,KAAwB,KAAI;YACtC,IAAI,KAAK,CAAC,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,oBAAoB,EAAE;AACtD,gBAAA,IAAI,CAAC,oBAAoB,GAAG,IAAI;AAChC,gBAAA,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE;YAC5B;AAEA,YAAA,OAAO,UAAU,CAAC,MAAM,KAAK,CAAC;QAChC,CAAC,CAAC,CACH;IACH;wGAhBW,yBAAyB,EAAA,IAAA,EAAA,CAAA,EAAA,KAAA,EAAAA,IAAA,CAAA,aAAA,EAAA,CAAA,EAAA,MAAA,EAAA,EAAA,CAAA,eAAA,CAAA,UAAA,EAAA,CAAA;4GAAzB,yBAAyB,EAAA,CAAA;;4FAAzB,yBAAyB,EAAA,UAAA,EAAA,CAAA;kBADrC;;;ACND;;AAEG;;;;"}

package/fesm2022/sd-angular-core-models.mjs

@@ -0,0 +1,6 @@
+export { SUPPORTED_LANGUAGES } from '@sdcorejs/utils/constants';
+
+/**
+ * Generated bundle index. Do not edit.
+ */
+//# sourceMappingURL=sd-angular-core-models.mjs.map

package/fesm2022/sd-angular-core-models.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"sd-angular-core-models.mjs","sources":["../../../projects/sd-angular/models/sd-angular-core-models.ts"],"sourcesContent":["/**\n * Generated bundle index. Do not edit.\n */\n\nexport * from './index';\n"],"names":[],"mappings":";;AAAA;;AAEG"}

package/fesm2022/sd-angular-core-modules-auth.mjs

@@ -62,10 +62,10 @@ class SdAuthService {
             });
         }
     };
-    static ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "19.2.17", ngImport: i0, type: SdAuthService, deps: [{ token: SD_AUTH_CONFIGURATION, optional: true }], target: i0.ɵɵFactoryTarget.Injectable });
-    static ɵprov = i0.ɵɵngDeclareInjectable({ minVersion: "12.0.0", version: "19.2.17", ngImport: i0, type: SdAuthService, providedIn: 'root' });
+    static ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "19.2.21", ngImport: i0, type: SdAuthService, deps: [{ token: SD_AUTH_CONFIGURATION, optional: true }], target: i0.ɵɵFactoryTarget.Injectable });
+    static ɵprov = i0.ɵɵngDeclareInjectable({ minVersion: "12.0.0", version: "19.2.21", ngImport: i0, type: SdAuthService, providedIn: 'root' });
 }
-i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "19.2.17", ngImport: i0, type: SdAuthService, decorators: [{
+i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "19.2.21", ngImport: i0, type: SdAuthService, decorators: [{
             type: Injectable,
             args: [{ providedIn: 'root' }]
         }], ctorParameters: () => [{ type: undefined, decorators: [{
@@ -89,10 +89,10 @@ class SdAuthGuard {
         // Nếu chưa tích hợp Auth Guard thì pass canActive
         return true;
     };
-    static ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "19.2.17", ngImport: i0, type: SdAuthGuard, deps: [{ token: SD_AUTH_CONFIGURATION, optional: true }, { token: i1.Router }], target: i0.ɵɵFactoryTarget.Injectable });
-    static ɵprov = i0.ɵɵngDeclareInjectable({ minVersion: "12.0.0", version: "19.2.17", ngImport: i0, type: SdAuthGuard, providedIn: 'root' });
+    static ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "19.2.21", ngImport: i0, type: SdAuthGuard, deps: [{ token: SD_AUTH_CONFIGURATION, optional: true }, { token: i1.Router }], target: i0.ɵɵFactoryTarget.Injectable });
+    static ɵprov = i0.ɵɵngDeclareInjectable({ minVersion: "12.0.0", version: "19.2.21", ngImport: i0, type: SdAuthGuard, providedIn: 'root' });
 }
-i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "19.2.17", ngImport: i0, type: SdAuthGuard, decorators: [{
+i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "19.2.21", ngImport: i0, type: SdAuthGuard, decorators: [{
             type: Injectable,
             args: [{ providedIn: 'root' }]
         }], ctorParameters: () => [{ type: undefined, decorators: [{
@@ -116,10 +116,10 @@ class SdPortalGuard {
         // Nếu chưa tích hợp Portal Guard thì pass canActive
         return true;
     };
-    static ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "19.2.17", ngImport: i0, type: SdPortalGuard, deps: [{ token: SD_AUTH_CONFIGURATION, optional: true }, { token: i1.Router }], target: i0.ɵɵFactoryTarget.Injectable });
-    static ɵprov = i0.ɵɵngDeclareInjectable({ minVersion: "12.0.0", version: "19.2.17", ngImport: i0, type: SdPortalGuard, providedIn: 'root' });
+    static ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "19.2.21", ngImport: i0, type: SdPortalGuard, deps: [{ token: SD_AUTH_CONFIGURATION, optional: true }, { token: i1.Router }], target: i0.ɵɵFactoryTarget.Injectable });
+    static ɵprov = i0.ɵɵngDeclareInjectable({ minVersion: "12.0.0", version: "19.2.21", ngImport: i0, type: SdPortalGuard, providedIn: 'root' });
 }
-i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "19.2.17", ngImport: i0, type: SdPortalGuard, decorators: [{
+i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "19.2.21", ngImport: i0, type: SdPortalGuard, decorators: [{
             type: Injectable,
             args: [{ providedIn: 'root' }]
         }], ctorParameters: () => [{ type: undefined, decorators: [{

package/fesm2022/sd-angular-core-modules-authom.mjs

@@ -0,0 +1,360 @@
+import * as i0 from '@angular/core';
+import { InjectionToken, inject, PLATFORM_ID, signal, computed, Injectable, provideAppInitializer, makeEnvironmentProviders, APP_INITIALIZER, NgModule } from '@angular/core';
+import { isPlatformBrowser } from '@angular/common';
+import { StringUtilities } from '@sd-angular/core/utilities/extensions';
+
+const SD_AUTHOM_CONFIGURATION = new InjectionToken('sd-authom.configuration');
+
+const STORAGE_KEY_STATE = 'authom_state';
+const STORAGE_KEY_CODE_VERIFIER = 'authom_code_verifier';
+const STORAGE_KEY_RETURN_TO = 'authom_return_to';
+const DEFAULT_SCOPE = 'openid profile email';
+const DEFAULT_REFRESH_THRESHOLD_SECONDS = 30;
+const DEFAULT_AUTHORIZE_TIMEOUT_SECONDS = 5;
+class SdAuthOmService {
+    platformId = inject(PLATFORM_ID);
+    isBrowser = isPlatformBrowser(this.platformId);
+    accessToken = signal(null);
+    idTokenClaims = signal(null);
+    isAuthenticated = computed(() => this.accessToken() !== null);
+    config;
+    refreshTimer = null;
+    getAccessToken() {
+        return this.accessToken();
+    }
+    base64UrlEncode(bytes) {
+        let binary = '';
+        for (let i = 0; i < bytes.length; i++)
+            binary += String.fromCharCode(bytes[i]);
+        return btoa(binary).replace(/\+/g, '-').replace(/\//g, '_').replace(/=+$/, '');
+    }
+    generateCodeVerifier() {
+        const bytes = new Uint8Array(32);
+        crypto.getRandomValues(bytes);
+        return this.base64UrlEncode(bytes);
+    }
+    async generateCodeChallenge(verifier) {
+        return StringUtilities.sha256(verifier);
+    }
+    buildAuthorizeUrl(params) {
+        const search = new URLSearchParams({
+            response_type: 'code',
+            client_id: this.config.clientId,
+            redirect_uri: params.redirectUri,
+            state: params.state,
+            code_challenge: params.codeChallenge,
+            code_challenge_method: 'S256',
+            scope: this.config.scope || DEFAULT_SCOPE,
+        });
+        if (this.config.audience)
+            search.set('audience', this.config.audience);
+        if (this.config.organization)
+            search.set('organization', this.config.organization);
+        if (params.prompt)
+            search.set('prompt', params.prompt);
+        return `https://${this.config.domain}/authorize?${search.toString()}`;
+    }
+    getDefaultRedirectUri() {
+        return this.config.redirectUri || window.location.origin;
+    }
+    getSilentRedirectUri() {
+        return this.config.silentRefreshRedirectUri || `${window.location.origin}/silent-authom.html`;
+    }
+    decodeJwtPayload(token) {
+        try {
+            const parts = token.split('.');
+            if (parts.length !== 3)
+                return null;
+            const padded = parts[1].replace(/-/g, '+').replace(/_/g, '/');
+            const json = atob(padded + '==='.slice((padded.length + 3) % 4));
+            return JSON.parse(json);
+        }
+        catch {
+            return null;
+        }
+    }
+    async login(options) {
+        if (!this.isBrowser)
+            return;
+        const state = crypto.randomUUID();
+        const codeVerifier = this.generateCodeVerifier();
+        const codeChallenge = await this.generateCodeChallenge(codeVerifier);
+        const returnTo = options?.returnTo || (window.location.pathname + window.location.search);
+        sessionStorage.setItem(STORAGE_KEY_STATE, state);
+        sessionStorage.setItem(STORAGE_KEY_CODE_VERIFIER, codeVerifier);
+        sessionStorage.setItem(STORAGE_KEY_RETURN_TO, returnTo);
+        window.location.href = this.buildAuthorizeUrl({
+            state,
+            codeChallenge,
+            redirectUri: this.getDefaultRedirectUri(),
+        });
+    }
+    logout(options) {
+        if (!this.isBrowser)
+            return;
+        this.accessToken.set(null);
+        this.idTokenClaims.set(null);
+        if (this.refreshTimer) {
+            clearTimeout(this.refreshTimer);
+            this.refreshTimer = null;
+        }
+        const returnTo = options?.returnTo || window.location.origin;
+        const search = new URLSearchParams({
+            client_id: this.config.clientId,
+            returnTo,
+        });
+        window.location.href = `https://${this.config.domain}/v2/logout?${search.toString()}`;
+    }
+    async exchangeCode(code, codeVerifier, redirectUri) {
+        try {
+            const body = new URLSearchParams({
+                grant_type: 'authorization_code',
+                code,
+                code_verifier: codeVerifier,
+                redirect_uri: redirectUri,
+                client_id: this.config.clientId,
+            });
+            const res = await fetch(`https://${this.config.domain}/oauth/token`, {
+                method: 'POST',
+                headers: { 'Content-Type': 'application/x-www-form-urlencoded' },
+                body: body.toString(),
+            });
+            if (!res.ok)
+                return false;
+            const data = await res.json();
+            if (!data.access_token)
+                return false;
+            this.accessToken.set(data.access_token);
+            if (data.id_token) {
+                this.idTokenClaims.set(this.decodeJwtPayload(data.id_token));
+            }
+            this.scheduleRefresh(data.access_token);
+            return true;
+        }
+        catch {
+            return false;
+        }
+    }
+    scheduleRefresh(token) {
+        if (this.refreshTimer) {
+            clearTimeout(this.refreshTimer);
+            this.refreshTimer = null;
+        }
+        const claims = this.decodeJwtPayload(token);
+        const exp = claims?.['exp'];
+        if (typeof exp !== 'number') {
+            // @i18n-ignore — dev console warning
+            console.warn('[SdAuthOmService] Token không có exp — bỏ qua auto-refresh');
+            return;
+        }
+        const threshold = this.config.refreshThresholdSeconds ?? DEFAULT_REFRESH_THRESHOLD_SECONDS;
+        const nowSeconds = Math.floor(Date.now() / 1000);
+        const delayMs = Math.max(0, (exp - nowSeconds - threshold) * 1000);
+        this.refreshTimer = setTimeout(() => {
+            this.silentRefresh();
+        }, delayMs);
+    }
+    silentRefresh() {
+        if (!this.isBrowser)
+            return Promise.resolve(false);
+        return new Promise(async (resolve) => {
+            const state = crypto.randomUUID();
+            const codeVerifier = this.generateCodeVerifier();
+            const codeChallenge = await this.generateCodeChallenge(codeVerifier);
+            const redirectUri = this.getSilentRedirectUri();
+            const timeoutMs = (this.config.authorizeTimeoutInSeconds ?? DEFAULT_AUTHORIZE_TIMEOUT_SECONDS) * 1000;
+            const iframe = document.createElement('iframe');
+            iframe.style.display = 'none';
+            let done = false;
+            const finish = (success) => {
+                if (done)
+                    return;
+                done = true;
+                clearTimeout(timer);
+                iframe.remove();
+                window.removeEventListener('message', onMessage);
+                resolve(success);
+            };
+            const timer = setTimeout(() => finish(false), timeoutMs);
+            const onMessage = async (event) => {
+                if (event.origin !== window.location.origin)
+                    return;
+                const data = event.data;
+                if (!data || typeof data !== 'object')
+                    return;
+                if (data.type === 'AUTHOM_SILENT_SUCCESS' && data.code && data.state === state) {
+                    const ok = await this.exchangeCode(data.code, codeVerifier, redirectUri);
+                    if (!ok) {
+                        this.accessToken.set(null);
+                        this.idTokenClaims.set(null);
+                    }
+                    finish(ok);
+                }
+                else if (data.type === 'AUTHOM_SILENT_ERROR') {
+                    this.accessToken.set(null);
+                    this.idTokenClaims.set(null);
+                    finish(false);
+                }
+            };
+            window.addEventListener('message', onMessage);
+            iframe.src = this.buildAuthorizeUrl({
+                state,
+                codeChallenge,
+                redirectUri,
+                prompt: 'none',
+            });
+            document.body.appendChild(iframe);
+        });
+    }
+    async handleCallback() {
+        if (!this.isBrowser)
+            return false;
+        const params = new URLSearchParams(window.location.search);
+        const code = params.get('code');
+        const state = params.get('state');
+        if (!code)
+            return false;
+        const savedState = sessionStorage.getItem(STORAGE_KEY_STATE);
+        const codeVerifier = sessionStorage.getItem(STORAGE_KEY_CODE_VERIFIER);
+        const returnTo = sessionStorage.getItem(STORAGE_KEY_RETURN_TO);
+        sessionStorage.removeItem(STORAGE_KEY_STATE);
+        sessionStorage.removeItem(STORAGE_KEY_CODE_VERIFIER);
+        if (state !== savedState || !codeVerifier) {
+            window.history.replaceState({}, '', window.location.pathname);
+            sessionStorage.removeItem(STORAGE_KEY_RETURN_TO);
+            return false;
+        }
+        const redirectUri = this.getDefaultRedirectUri();
+        const ok = await this.exchangeCode(code, codeVerifier, redirectUri);
+        if (returnTo) {
+            sessionStorage.removeItem(STORAGE_KEY_RETURN_TO);
+            window.history.replaceState({}, '', returnTo);
+        }
+        else {
+            window.history.replaceState({}, '', window.location.pathname);
+        }
+        return ok;
+    }
+    async init(config) {
+        this.config = config;
+        if (!this.isBrowser)
+            return false;
+        const hasCode = new URLSearchParams(window.location.search).has('code');
+        if (hasCode) {
+            const ok = await this.handleCallback();
+            if (ok)
+                return true;
+        }
+        return this.silentRefresh();
+    }
+    static ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "19.2.21", ngImport: i0, type: SdAuthOmService, deps: [], target: i0.ɵɵFactoryTarget.Injectable });
+    static ɵprov = i0.ɵɵngDeclareInjectable({ minVersion: "12.0.0", version: "19.2.21", ngImport: i0, type: SdAuthOmService, providedIn: 'root' });
+}
+i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "19.2.21", ngImport: i0, type: SdAuthOmService, decorators: [{
+            type: Injectable,
+            args: [{ providedIn: 'root' }]
+        }] });
+
+const escapeRegExp = (str) => str.replace(/[.+?^${}()|[\]\\]/g, '\\$&');
+const matchGlob = (pattern, url) => {
+    const regexBody = pattern.split('*').map(escapeRegExp).join('.*');
+    return new RegExp(`^${regexBody}$`).test(url);
+};
+const SdAuthOmInterceptor = (req, next) => {
+    const authom = inject(SdAuthOmService);
+    const token = authom.getAccessToken();
+    const config = authom.config;
+    if (!token || !config)
+        return next(req);
+    const isSecure = config.secureRoutes?.some(pattern => matchGlob(pattern, req.url));
+    if (!isSecure)
+        return next(req);
+    const authReq = req.clone({
+        headers: req.headers.set('Authorization', `Bearer ${token}`),
+    });
+    return next(authReq);
+};
+
+function provideSdAuthOm(options) {
+    const providers = [SdAuthOmService];
+    if (options.useFactory) {
+        providers.push({ provide: SD_AUTHOM_CONFIGURATION, useFactory: options.useFactory, deps: options.deps || [] });
+    }
+    else if (options.useClass) {
+        providers.push({ provide: SD_AUTHOM_CONFIGURATION, useClass: options.useClass });
+    }
+    providers.push(provideAppInitializer(() => {
+        const configLoader = inject(SD_AUTHOM_CONFIGURATION);
+        const authom = inject(SdAuthOmService);
+        return configLoader.loadTenantConfig().then((config) => authom.init(config));
+    }));
+    return makeEnvironmentProviders(providers);
+}
+class SdAuthOmModule {
+    static forRoot(options) {
+        return {
+            ngModule: SdAuthOmModule,
+            providers: [
+                SdAuthOmService,
+                ...(options.useFactory
+                    ? [{ provide: SD_AUTHOM_CONFIGURATION, useFactory: options.useFactory, deps: options.deps || [] }]
+                    : [{ provide: SD_AUTHOM_CONFIGURATION, useClass: options.useClass }]),
+                {
+                    provide: APP_INITIALIZER,
+                    multi: true,
+                    useFactory: () => {
+                        const configLoader = inject(SD_AUTHOM_CONFIGURATION);
+                        const authom = inject(SdAuthOmService);
+                        return () => configLoader.loadTenantConfig().then((config) => authom.init(config));
+                    },
+                },
+            ],
+        };
+    }
+    static ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "19.2.21", ngImport: i0, type: SdAuthOmModule, deps: [], target: i0.ɵɵFactoryTarget.NgModule });
+    static ɵmod = i0.ɵɵngDeclareNgModule({ minVersion: "14.0.0", version: "19.2.21", ngImport: i0, type: SdAuthOmModule });
+    static ɵinj = i0.ɵɵngDeclareInjector({ minVersion: "12.0.0", version: "19.2.21", ngImport: i0, type: SdAuthOmModule });
+}
+i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "19.2.21", ngImport: i0, type: SdAuthOmModule, decorators: [{
+            type: NgModule,
+            args: [{}]
+        }] });
+
+/**
+ * Module `authom` — OAuth 2.0 + PKCE authentication client cho AuthOM (Auth0-based).
+ *
+ * Cách dùng (standalone):
+ * ```ts
+ * import { provideHttpClient, withInterceptors } from '@angular/common/http';
+ * import { provideSdAuthOm, SdAuthOmInterceptor } from '@sd-angular/core/modules/authom';
+ *
+ * export const appConfig: ApplicationConfig = {
+ *   providers: [
+ *     provideHttpClient(withInterceptors([SdAuthOmInterceptor])),
+ *     provideSdAuthOm({
+ *       useFactory: () => ({
+ *         loadTenantConfig: () => Promise.resolve({
+ *           domain: 'login.example.com',
+ *           clientId: 'YOUR_CLIENT_ID',
+ *           audience: 'https://api.example.com',
+ *           organization: 'org_xxx',
+ *           scope: 'openid profile email offline_access',
+ *           secureRoutes: ['https://api.example.com/*'],
+ *         }),
+ *       }),
+ *     }),
+ *   ],
+ * };
+ * ```
+ *
+ * Yêu cầu setup thêm:
+ * 1. Copy file `silent-authom.html` từ source module này vào thư mục `public/` của app.
+ * 2. App phải chạy trên HTTPS (hoặc localhost) — Web Crypto API yêu cầu secure context.
+ */
+
+/**
+ * Generated bundle index. Do not edit.
+ */
+
+export { SD_AUTHOM_CONFIGURATION, SdAuthOmInterceptor, SdAuthOmModule, SdAuthOmService, matchGlob, provideSdAuthOm };
+//# sourceMappingURL=sd-angular-core-modules-authom.mjs.map