@sd-angular/core 19.0.0-beta.83 → 19.0.0-beta.85

package/fesm2022/sd-angular-core-modules-authom.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"sd-angular-core-modules-authom.mjs","sources":["../../../projects/sd-angular/modules/authom/authom.configuration.ts","../../../projects/sd-angular/modules/authom/authom.service.ts","../../../projects/sd-angular/modules/authom/authom.interceptor.ts","../../../projects/sd-angular/modules/authom/authom.module.ts","../../../projects/sd-angular/modules/authom/index.ts","../../../projects/sd-angular/modules/authom/sd-angular-core-modules-authom.ts"],"sourcesContent":["import { InjectionToken } from '@angular/core';\n\nexport interface SdAuthOmTenantConfig {\n  domain: string;\n  clientId: string;\n\n  redirectUri?: string;\n  audience?: string;\n  organization?: string;\n  scope?: string;\n\n  secureRoutes?: string[];\n\n  silentRefreshRedirectUri?: string;\n  refreshThresholdSeconds?: number;\n  authorizeTimeoutInSeconds?: number;\n}\n\nexport interface ISdAuthOmConfiguration {\n  loadTenantConfig: () => Promise<SdAuthOmTenantConfig>;\n}\n\nexport const SD_AUTHOM_CONFIGURATION = new InjectionToken<ISdAuthOmConfiguration>('sd-authom.configuration');\n","import { Injectable, PLATFORM_ID, computed, inject, signal } from '@angular/core';\nimport { isPlatformBrowser } from '@angular/common';\nimport { SdAuthOmTenantConfig } from './authom.configuration';\nimport { StringUtilities } from '@sd-angular/core/utilities/extensions';\n\nconst STORAGE_KEY_STATE = 'authom_state';\nconst STORAGE_KEY_CODE_VERIFIER = 'authom_code_verifier';\nconst STORAGE_KEY_RETURN_TO = 'authom_return_to';\n\nconst DEFAULT_SCOPE = 'openid profile email';\nconst DEFAULT_REFRESH_THRESHOLD_SECONDS = 30;\nconst DEFAULT_AUTHORIZE_TIMEOUT_SECONDS = 5;\n\n@Injectable({ providedIn: 'root' })\nexport class SdAuthOmService {\n  private readonly platformId = inject(PLATFORM_ID);\n  private readonly isBrowser = isPlatformBrowser(this.platformId);\n\n  readonly accessToken = signal<string | null>(null);\n  readonly idTokenClaims = signal<Record<string, unknown> | null>(null);\n  readonly isAuthenticated = computed(() => this.accessToken() !== null);\n\n  config!: SdAuthOmTenantConfig;\n  private refreshTimer: ReturnType<typeof setTimeout> | null = null;\n\n  getAccessToken(): string | null {\n    return this.accessToken();\n  }\n\n  private base64UrlEncode(bytes: Uint8Array): string {\n    let binary = '';\n    for (let i = 0; i < bytes.length; i++) binary += String.fromCharCode(bytes[i]);\n    return btoa(binary).replace(/\\+/g, '-').replace(/\\//g, '_').replace(/=+$/, '');\n  }\n\n  private generateCodeVerifier(): string {\n    const bytes = new Uint8Array(32);\n    crypto.getRandomValues(bytes);\n    return this.base64UrlEncode(bytes);\n  }\n\n  private async generateCodeChallenge(verifier: string): Promise<string> {\n    return StringUtilities.sha256(verifier);\n  }\n\n  private buildAuthorizeUrl(params: {\n    state: string;\n    codeChallenge: string;\n    redirectUri: string;\n    prompt?: 'none';\n  }): string {\n    const search = new URLSearchParams({\n      response_type: 'code',\n      client_id: this.config.clientId,\n      redirect_uri: params.redirectUri,\n      state: params.state,\n      code_challenge: params.codeChallenge,\n      code_challenge_method: 'S256',\n      scope: this.config.scope || DEFAULT_SCOPE,\n    });\n    if (this.config.audience) search.set('audience', this.config.audience);\n    if (this.config.organization) search.set('organization', this.config.organization);\n    if (params.prompt) search.set('prompt', params.prompt);\n    return `https://${this.config.domain}/authorize?${search.toString()}`;\n  }\n\n  private getDefaultRedirectUri(): string {\n    return this.config.redirectUri || window.location.origin;\n  }\n\n  private getSilentRedirectUri(): string {\n    return this.config.silentRefreshRedirectUri || `${window.location.origin}/silent-authom.html`;\n  }\n\n  private decodeJwtPayload(token: string): Record<string, unknown> | null {\n    try {\n      const parts = token.split('.');\n      if (parts.length !== 3) return null;\n      const padded = parts[1].replace(/-/g, '+').replace(/_/g, '/');\n      const json = atob(padded + '==='.slice((padded.length + 3) % 4));\n      return JSON.parse(json);\n    } catch {\n      return null;\n    }\n  }\n\n  async login(options?: { returnTo?: string }): Promise<void> {\n    if (!this.isBrowser) return;\n\n    const state = crypto.randomUUID();\n    const codeVerifier = this.generateCodeVerifier();\n    const codeChallenge = await this.generateCodeChallenge(codeVerifier);\n    const returnTo = options?.returnTo || (window.location.pathname + window.location.search);\n\n    sessionStorage.setItem(STORAGE_KEY_STATE, state);\n    sessionStorage.setItem(STORAGE_KEY_CODE_VERIFIER, codeVerifier);\n    sessionStorage.setItem(STORAGE_KEY_RETURN_TO, returnTo);\n\n    window.location.href = this.buildAuthorizeUrl({\n      state,\n      codeChallenge,\n      redirectUri: this.getDefaultRedirectUri(),\n    });\n  }\n\n  logout(options?: { returnTo?: string }): void {\n    if (!this.isBrowser) return;\n\n    this.accessToken.set(null);\n    this.idTokenClaims.set(null);\n    if (this.refreshTimer) {\n      clearTimeout(this.refreshTimer);\n      this.refreshTimer = null;\n    }\n\n    const returnTo = options?.returnTo || window.location.origin;\n    const search = new URLSearchParams({\n      client_id: this.config.clientId,\n      returnTo,\n    });\n    window.location.href = `https://${this.config.domain}/v2/logout?${search.toString()}`;\n  }\n\n  private async exchangeCode(code: string, codeVerifier: string, redirectUri: string): Promise<boolean> {\n    try {\n      const body = new URLSearchParams({\n        grant_type: 'authorization_code',\n        code,\n        code_verifier: codeVerifier,\n        redirect_uri: redirectUri,\n        client_id: this.config.clientId,\n      });\n      const res = await fetch(`https://${this.config.domain}/oauth/token`, {\n        method: 'POST',\n        headers: { 'Content-Type': 'application/x-www-form-urlencoded' },\n        body: body.toString(),\n      });\n      if (!res.ok) return false;\n      const data = await res.json() as { access_token?: string; id_token?: string };\n      if (!data.access_token) return false;\n\n      this.accessToken.set(data.access_token);\n      if (data.id_token) {\n        this.idTokenClaims.set(this.decodeJwtPayload(data.id_token));\n      }\n      this.scheduleRefresh(data.access_token);\n      return true;\n    } catch {\n      return false;\n    }\n  }\n\n  private scheduleRefresh(token: string): void {\n    if (this.refreshTimer) {\n      clearTimeout(this.refreshTimer);\n      this.refreshTimer = null;\n    }\n    const claims = this.decodeJwtPayload(token);\n    const exp = claims?.['exp'];\n    if (typeof exp !== 'number') {\n      console.warn('[SdAuthOmService] Token không có exp — bỏ qua auto-refresh');\n      return;\n    }\n    const threshold = this.config.refreshThresholdSeconds ?? DEFAULT_REFRESH_THRESHOLD_SECONDS;\n    const nowSeconds = Math.floor(Date.now() / 1000);\n    const delayMs = Math.max(0, (exp - nowSeconds - threshold) * 1000);\n    this.refreshTimer = setTimeout(() => {\n      this.silentRefresh();\n    }, delayMs);\n  }\n\n  silentRefresh(): Promise<boolean> {\n    if (!this.isBrowser) return Promise.resolve(false);\n\n    return new Promise(async (resolve) => {\n      const state = crypto.randomUUID();\n      const codeVerifier = this.generateCodeVerifier();\n      const codeChallenge = await this.generateCodeChallenge(codeVerifier);\n      const redirectUri = this.getSilentRedirectUri();\n      const timeoutMs = (this.config.authorizeTimeoutInSeconds ?? DEFAULT_AUTHORIZE_TIMEOUT_SECONDS) * 1000;\n\n      const iframe = document.createElement('iframe');\n      iframe.style.display = 'none';\n\n      let done = false;\n      const finish = (success: boolean) => {\n        if (done) return;\n        done = true;\n        clearTimeout(timer);\n        iframe.remove();\n        window.removeEventListener('message', onMessage);\n        resolve(success);\n      };\n\n      const timer = setTimeout(() => finish(false), timeoutMs);\n\n      const onMessage = async (event: MessageEvent) => {\n        if (event.origin !== window.location.origin) return;\n        const data = event.data as { type?: string; code?: string; state?: string } | null;\n        if (!data || typeof data !== 'object') return;\n\n        if (data.type === 'AUTHOM_SILENT_SUCCESS' && data.code && data.state === state) {\n          const ok = await this.exchangeCode(data.code, codeVerifier, redirectUri);\n          if (!ok) {\n            this.accessToken.set(null);\n            this.idTokenClaims.set(null);\n          }\n          finish(ok);\n        } else if (data.type === 'AUTHOM_SILENT_ERROR') {\n          this.accessToken.set(null);\n          this.idTokenClaims.set(null);\n          finish(false);\n        }\n      };\n\n      window.addEventListener('message', onMessage);\n\n      iframe.src = this.buildAuthorizeUrl({\n        state,\n        codeChallenge,\n        redirectUri,\n        prompt: 'none',\n      });\n      document.body.appendChild(iframe);\n    });\n  }\n\n  async handleCallback(): Promise<boolean> {\n    if (!this.isBrowser) return false;\n\n    const params = new URLSearchParams(window.location.search);\n    const code = params.get('code');\n    const state = params.get('state');\n    if (!code) return false;\n\n    const savedState = sessionStorage.getItem(STORAGE_KEY_STATE);\n    const codeVerifier = sessionStorage.getItem(STORAGE_KEY_CODE_VERIFIER);\n    const returnTo = sessionStorage.getItem(STORAGE_KEY_RETURN_TO);\n    sessionStorage.removeItem(STORAGE_KEY_STATE);\n    sessionStorage.removeItem(STORAGE_KEY_CODE_VERIFIER);\n\n    if (state !== savedState || !codeVerifier) {\n      window.history.replaceState({}, '', window.location.pathname);\n      sessionStorage.removeItem(STORAGE_KEY_RETURN_TO);\n      return false;\n    }\n\n    const redirectUri = this.getDefaultRedirectUri();\n    const ok = await this.exchangeCode(code, codeVerifier, redirectUri);\n\n    if (returnTo) {\n      sessionStorage.removeItem(STORAGE_KEY_RETURN_TO);\n      window.history.replaceState({}, '', returnTo);\n    } else {\n      window.history.replaceState({}, '', window.location.pathname);\n    }\n\n    return ok;\n  }\n\n  async init(config: SdAuthOmTenantConfig): Promise<boolean> {\n    this.config = config;\n    if (!this.isBrowser) return false;\n\n    const hasCode = new URLSearchParams(window.location.search).has('code');\n    if (hasCode) {\n      const ok = await this.handleCallback();\n      if (ok) return true;\n    }\n\n    return this.silentRefresh();\n  }\n}\n","import { HttpInterceptorFn } from '@angular/common/http';\nimport { inject } from '@angular/core';\nimport { SdAuthOmService } from './authom.service';\n\nconst escapeRegExp = (str: string): string => str.replace(/[.+?^${}()|[\\]\\\\]/g, '\\\\$&');\n\nexport const matchGlob = (pattern: string, url: string): boolean => {\n  const regexBody = pattern.split('*').map(escapeRegExp).join('.*');\n  return new RegExp(`^${regexBody}$`).test(url);\n};\n\nexport const SdAuthOmInterceptor: HttpInterceptorFn = (req, next) => {\n  const authom = inject(SdAuthOmService);\n  const token = authom.getAccessToken();\n  const config = authom.config;\n\n  if (!token || !config) return next(req);\n\n  const isSecure = config.secureRoutes?.some(pattern => matchGlob(pattern, req.url));\n  if (!isSecure) return next(req);\n\n  const authReq = req.clone({\n    headers: req.headers.set('Authorization', `Bearer ${token}`),\n  });\n  return next(authReq);\n};\n","import {\n  ModuleWithProviders,\n  NgModule,\n  Provider,\n  Type,\n  EnvironmentProviders,\n  makeEnvironmentProviders,\n  provideAppInitializer,\n  inject,\n  APP_INITIALIZER,\n} from '@angular/core';\nimport { ISdAuthOmConfiguration, SD_AUTHOM_CONFIGURATION } from './authom.configuration';\nimport { SdAuthOmService } from './authom.service';\n\ninterface ProvideOptions {\n  useClass?: Type<ISdAuthOmConfiguration>;\n  // eslint-disable-next-line @typescript-eslint/no-explicit-any\n  useFactory?: (...args: any[]) => ISdAuthOmConfiguration;\n  // eslint-disable-next-line @typescript-eslint/no-explicit-any\n  deps?: any[];\n}\n\nexport function provideSdAuthOm(options: ProvideOptions): EnvironmentProviders {\n  const providers: Array<Provider | EnvironmentProviders> = [SdAuthOmService];\n\n  if (options.useFactory) {\n    providers.push({ provide: SD_AUTHOM_CONFIGURATION, useFactory: options.useFactory, deps: options.deps || [] });\n  } else if (options.useClass) {\n    providers.push({ provide: SD_AUTHOM_CONFIGURATION, useClass: options.useClass });\n  }\n\n  providers.push(\n    provideAppInitializer(() => {\n      const configLoader = inject(SD_AUTHOM_CONFIGURATION);\n      const authom = inject(SdAuthOmService);\n      return configLoader.loadTenantConfig().then((config) => authom.init(config));\n    })\n  );\n\n  return makeEnvironmentProviders(providers);\n}\n\n@NgModule({})\nexport class SdAuthOmModule {\n  static forRoot(options: ProvideOptions): ModuleWithProviders<SdAuthOmModule> {\n    return {\n      ngModule: SdAuthOmModule,\n      providers: [\n        SdAuthOmService,\n        ...(options.useFactory\n          ? [{ provide: SD_AUTHOM_CONFIGURATION, useFactory: options.useFactory, deps: options.deps || [] }]\n          : [{ provide: SD_AUTHOM_CONFIGURATION, useClass: options.useClass! }]\n        ),\n        {\n          provide: APP_INITIALIZER,\n          multi: true,\n          useFactory: () => {\n            const configLoader = inject(SD_AUTHOM_CONFIGURATION);\n            const authom = inject(SdAuthOmService);\n            return () => configLoader.loadTenantConfig().then((config) => authom.init(config));\n          },\n        },\n      ],\n    };\n  }\n}\n","/**\n * Module `authom` — OAuth 2.0 + PKCE authentication client cho AuthOM (Auth0-based).\n *\n * Cách dùng (standalone):\n * ```ts\n * import { provideHttpClient, withInterceptors } from '@angular/common/http';\n * import { provideSdAuthOm, SdAuthOmInterceptor } from '@sd-angular/core/modules/authom';\n *\n * export const appConfig: ApplicationConfig = {\n *   providers: [\n *     provideHttpClient(withInterceptors([SdAuthOmInterceptor])),\n *     provideSdAuthOm({\n *       useFactory: () => ({\n *         loadTenantConfig: () => Promise.resolve({\n *           domain: 'login.example.com',\n *           clientId: 'YOUR_CLIENT_ID',\n *           audience: 'https://api.example.com',\n *           organization: 'org_xxx',\n *           scope: 'openid profile email offline_access',\n *           secureRoutes: ['https://api.example.com/*'],\n *         }),\n *       }),\n *     }),\n *   ],\n * };\n * ```\n *\n * Yêu cầu setup thêm:\n * 1. Copy file `silent-authom.html` từ source module này vào thư mục `public/` của app.\n * 2. App phải chạy trên HTTPS (hoặc localhost) — Web Crypto API yêu cầu secure context.\n */\nexport * from './authom.configuration';\nexport * from './authom.service';\nexport * from './authom.interceptor';\nexport * from './authom.module';\n","/**\n * Generated bundle index. Do not edit.\n */\n\nexport * from './index';\n"],"names":[],"mappings":";;;;;MAsBa,uBAAuB,GAAG,IAAI,cAAc,CAAyB,yBAAyB;;ACjB3G,MAAM,iBAAiB,GAAG,cAAc;AACxC,MAAM,yBAAyB,GAAG,sBAAsB;AACxD,MAAM,qBAAqB,GAAG,kBAAkB;AAEhD,MAAM,aAAa,GAAG,sBAAsB;AAC5C,MAAM,iCAAiC,GAAG,EAAE;AAC5C,MAAM,iCAAiC,GAAG,CAAC;MAG9B,eAAe,CAAA;AACT,IAAA,UAAU,GAAG,MAAM,CAAC,WAAW,CAAC;AAChC,IAAA,SAAS,GAAG,iBAAiB,CAAC,IAAI,CAAC,UAAU,CAAC;AAEtD,IAAA,WAAW,GAAG,MAAM,CAAgB,IAAI,CAAC;AACzC,IAAA,aAAa,GAAG,MAAM,CAAiC,IAAI,CAAC;AAC5D,IAAA,eAAe,GAAG,QAAQ,CAAC,MAAM,IAAI,CAAC,WAAW,EAAE,KAAK,IAAI,CAAC;AAEtE,IAAA,MAAM;IACE,YAAY,GAAyC,IAAI;IAEjE,cAAc,GAAA;AACZ,QAAA,OAAO,IAAI,CAAC,WAAW,EAAE;IAC3B;AAEQ,IAAA,eAAe,CAAC,KAAiB,EAAA;QACvC,IAAI,MAAM,GAAG,EAAE;AACf,QAAA,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE;YAAE,MAAM,IAAI,MAAM,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAC9E,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC;IAChF;IAEQ,oBAAoB,GAAA;AAC1B,QAAA,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC;AAChC,QAAA,MAAM,CAAC,eAAe,CAAC,KAAK,CAAC;AAC7B,QAAA,OAAO,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC;IACpC;IAEQ,MAAM,qBAAqB,CAAC,QAAgB,EAAA;AAClD,QAAA,OAAO,eAAe,CAAC,MAAM,CAAC,QAAQ,CAAC;IACzC;AAEQ,IAAA,iBAAiB,CAAC,MAKzB,EAAA;AACC,QAAA,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC;AACjC,YAAA,aAAa,EAAE,MAAM;AACrB,YAAA,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ;YAC/B,YAAY,EAAE,MAAM,CAAC,WAAW;YAChC,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,cAAc,EAAE,MAAM,CAAC,aAAa;AACpC,YAAA,qBAAqB,EAAE,MAAM;AAC7B,YAAA,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK,IAAI,aAAa;AAC1C,SAAA,CAAC;AACF,QAAA,IAAI,IAAI,CAAC,MAAM,CAAC,QAAQ;YAAE,MAAM,CAAC,GAAG,CAAC,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC;AACtE,QAAA,IAAI,IAAI,CAAC,MAAM,CAAC,YAAY;YAAE,MAAM,CAAC,GAAG,CAAC,cAAc,EAAE,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC;QAClF,IAAI,MAAM,CAAC,MAAM;YAAE,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC;AACtD,QAAA,OAAO,CAAA,QAAA,EAAW,IAAI,CAAC,MAAM,CAAC,MAAM,CAAA,WAAA,EAAc,MAAM,CAAC,QAAQ,EAAE,CAAA,CAAE;IACvE;IAEQ,qBAAqB,GAAA;QAC3B,OAAO,IAAI,CAAC,MAAM,CAAC,WAAW,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM;IAC1D;IAEQ,oBAAoB,GAAA;AAC1B,QAAA,OAAO,IAAI,CAAC,MAAM,CAAC,wBAAwB,IAAI,CAAA,EAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,qBAAqB;IAC/F;AAEQ,IAAA,gBAAgB,CAAC,KAAa,EAAA;AACpC,QAAA,IAAI;YACF,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC;AAC9B,YAAA,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;AAAE,gBAAA,OAAO,IAAI;YACnC,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC;YAC7D,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;AAChE,YAAA,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;QACzB;AAAE,QAAA,MAAM;AACN,YAAA,OAAO,IAAI;QACb;IACF;IAEA,MAAM,KAAK,CAAC,OAA+B,EAAA;QACzC,IAAI,CAAC,IAAI,CAAC,SAAS;YAAE;AAErB,QAAA,MAAM,KAAK,GAAG,MAAM,CAAC,UAAU,EAAE;AACjC,QAAA,MAAM,YAAY,GAAG,IAAI,CAAC,oBAAoB,EAAE;QAChD,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,qBAAqB,CAAC,YAAY,CAAC;AACpE,QAAA,MAAM,QAAQ,GAAG,OAAO,EAAE,QAAQ,KAAK,MAAM,CAAC,QAAQ,CAAC,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC;AAEzF,QAAA,cAAc,CAAC,OAAO,CAAC,iBAAiB,EAAE,KAAK,CAAC;AAChD,QAAA,cAAc,CAAC,OAAO,CAAC,yBAAyB,EAAE,YAAY,CAAC;AAC/D,QAAA,cAAc,CAAC,OAAO,CAAC,qBAAqB,EAAE,QAAQ,CAAC;QAEvD,MAAM,CAAC,QAAQ,CAAC,IAAI,GAAG,IAAI,CAAC,iBAAiB,CAAC;YAC5C,KAAK;YACL,aAAa;AACb,YAAA,WAAW,EAAE,IAAI,CAAC,qBAAqB,EAAE;AAC1C,SAAA,CAAC;IACJ;AAEA,IAAA,MAAM,CAAC,OAA+B,EAAA;QACpC,IAAI,CAAC,IAAI,CAAC,SAAS;YAAE;AAErB,QAAA,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC;AAC1B,QAAA,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC;AAC5B,QAAA,IAAI,IAAI,CAAC,YAAY,EAAE;AACrB,YAAA,YAAY,CAAC,IAAI,CAAC,YAAY,CAAC;AAC/B,YAAA,IAAI,CAAC,YAAY,GAAG,IAAI;QAC1B;QAEA,MAAM,QAAQ,GAAG,OAAO,EAAE,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM;AAC5D,QAAA,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC;AACjC,YAAA,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ;YAC/B,QAAQ;AACT,SAAA,CAAC;AACF,QAAA,MAAM,CAAC,QAAQ,CAAC,IAAI,GAAG,WAAW,IAAI,CAAC,MAAM,CAAC,MAAM,CAAA,WAAA,EAAc,MAAM,CAAC,QAAQ,EAAE,EAAE;IACvF;AAEQ,IAAA,MAAM,YAAY,CAAC,IAAY,EAAE,YAAoB,EAAE,WAAmB,EAAA;AAChF,QAAA,IAAI;AACF,YAAA,MAAM,IAAI,GAAG,IAAI,eAAe,CAAC;AAC/B,gBAAA,UAAU,EAAE,oBAAoB;gBAChC,IAAI;AACJ,gBAAA,aAAa,EAAE,YAAY;AAC3B,gBAAA,YAAY,EAAE,WAAW;AACzB,gBAAA,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ;AAChC,aAAA,CAAC;AACF,YAAA,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,CAAA,QAAA,EAAW,IAAI,CAAC,MAAM,CAAC,MAAM,CAAA,YAAA,CAAc,EAAE;AACnE,gBAAA,MAAM,EAAE,MAAM;AACd,gBAAA,OAAO,EAAE,EAAE,cAAc,EAAE,mCAAmC,EAAE;AAChE,gBAAA,IAAI,EAAE,IAAI,CAAC,QAAQ,EAAE;AACtB,aAAA,CAAC;YACF,IAAI,CAAC,GAAG,CAAC,EAAE;AAAE,gBAAA,OAAO,KAAK;AACzB,YAAA,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAkD;YAC7E,IAAI,CAAC,IAAI,CAAC,YAAY;AAAE,gBAAA,OAAO,KAAK;YAEpC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC;AACvC,YAAA,IAAI,IAAI,CAAC,QAAQ,EAAE;AACjB,gBAAA,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YAC9D;AACA,YAAA,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,YAAY,CAAC;AACvC,YAAA,OAAO,IAAI;QACb;AAAE,QAAA,MAAM;AACN,YAAA,OAAO,KAAK;QACd;IACF;AAEQ,IAAA,eAAe,CAAC,KAAa,EAAA;AACnC,QAAA,IAAI,IAAI,CAAC,YAAY,EAAE;AACrB,YAAA,YAAY,CAAC,IAAI,CAAC,YAAY,CAAC;AAC/B,YAAA,IAAI,CAAC,YAAY,GAAG,IAAI;QAC1B;QACA,MAAM,MAAM,GAAG,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC;AAC3C,QAAA,MAAM,GAAG,GAAG,MAAM,GAAG,KAAK,CAAC;AAC3B,QAAA,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE;AAC3B,YAAA,OAAO,CAAC,IAAI,CAAC,4DAA4D,CAAC;YAC1E;QACF;QACA,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,uBAAuB,IAAI,iCAAiC;AAC1F,QAAA,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;AAChD,QAAA,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,GAAG,GAAG,UAAU,GAAG,SAAS,IAAI,IAAI,CAAC;AAClE,QAAA,IAAI,CAAC,YAAY,GAAG,UAAU,CAAC,MAAK;YAClC,IAAI,CAAC,aAAa,EAAE;QACtB,CAAC,EAAE,OAAO,CAAC;IACb;IAEA,aAAa,GAAA;QACX,IAAI,CAAC,IAAI,CAAC,SAAS;AAAE,YAAA,OAAO,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC;AAElD,QAAA,OAAO,IAAI,OAAO,CAAC,OAAO,OAAO,KAAI;AACnC,YAAA,MAAM,KAAK,GAAG,MAAM,CAAC,UAAU,EAAE;AACjC,YAAA,MAAM,YAAY,GAAG,IAAI,CAAC,oBAAoB,EAAE;YAChD,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,qBAAqB,CAAC,YAAY,CAAC;AACpE,YAAA,MAAM,WAAW,GAAG,IAAI,CAAC,oBAAoB,EAAE;AAC/C,YAAA,MAAM,SAAS,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,yBAAyB,IAAI,iCAAiC,IAAI,IAAI;YAErG,MAAM,MAAM,GAAG,QAAQ,CAAC,aAAa,CAAC,QAAQ,CAAC;AAC/C,YAAA,MAAM,CAAC,KAAK,CAAC,OAAO,GAAG,MAAM;YAE7B,IAAI,IAAI,GAAG,KAAK;AAChB,YAAA,MAAM,MAAM,GAAG,CAAC,OAAgB,KAAI;AAClC,gBAAA,IAAI,IAAI;oBAAE;gBACV,IAAI,GAAG,IAAI;gBACX,YAAY,CAAC,KAAK,CAAC;gBACnB,MAAM,CAAC,MAAM,EAAE;AACf,gBAAA,MAAM,CAAC,mBAAmB,CAAC,SAAS,EAAE,SAAS,CAAC;gBAChD,OAAO,CAAC,OAAO,CAAC;AAClB,YAAA,CAAC;AAED,YAAA,MAAM,KAAK,GAAG,UAAU,CAAC,MAAM,MAAM,CAAC,KAAK,CAAC,EAAE,SAAS,CAAC;AAExD,YAAA,MAAM,SAAS,GAAG,OAAO,KAAmB,KAAI;gBAC9C,IAAI,KAAK,CAAC,MAAM,KAAK,MAAM,CAAC,QAAQ,CAAC,MAAM;oBAAE;AAC7C,gBAAA,MAAM,IAAI,GAAG,KAAK,CAAC,IAA+D;AAClF,gBAAA,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ;oBAAE;AAEvC,gBAAA,IAAI,IAAI,CAAC,IAAI,KAAK,uBAAuB,IAAI,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,KAAK,KAAK,KAAK,EAAE;AAC9E,oBAAA,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,YAAY,EAAE,WAAW,CAAC;oBACxE,IAAI,CAAC,EAAE,EAAE;AACP,wBAAA,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC;AAC1B,wBAAA,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC;oBAC9B;oBACA,MAAM,CAAC,EAAE,CAAC;gBACZ;AAAO,qBAAA,IAAI,IAAI,CAAC,IAAI,KAAK,qBAAqB,EAAE;AAC9C,oBAAA,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC;AAC1B,oBAAA,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC;oBAC5B,MAAM,CAAC,KAAK,CAAC;gBACf;AACF,YAAA,CAAC;AAED,YAAA,MAAM,CAAC,gBAAgB,CAAC,SAAS,EAAE,SAAS,CAAC;AAE7C,YAAA,MAAM,CAAC,GAAG,GAAG,IAAI,CAAC,iBAAiB,CAAC;gBAClC,KAAK;gBACL,aAAa;gBACb,WAAW;AACX,gBAAA,MAAM,EAAE,MAAM;AACf,aAAA,CAAC;AACF,YAAA,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC;AACnC,QAAA,CAAC,CAAC;IACJ;AAEA,IAAA,MAAM,cAAc,GAAA;QAClB,IAAI,CAAC,IAAI,CAAC,SAAS;AAAE,YAAA,OAAO,KAAK;QAEjC,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC;QAC1D,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC;QAC/B,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC;AACjC,QAAA,IAAI,CAAC,IAAI;AAAE,YAAA,OAAO,KAAK;QAEvB,MAAM,UAAU,GAAG,cAAc,CAAC,OAAO,CAAC,iBAAiB,CAAC;QAC5D,MAAM,YAAY,GAAG,cAAc,CAAC,OAAO,CAAC,yBAAyB,CAAC;QACtE,MAAM,QAAQ,GAAG,cAAc,CAAC,OAAO,CAAC,qBAAqB,CAAC;AAC9D,QAAA,cAAc,CAAC,UAAU,CAAC,iBAAiB,CAAC;AAC5C,QAAA,cAAc,CAAC,UAAU,CAAC,yBAAyB,CAAC;AAEpD,QAAA,IAAI,KAAK,KAAK,UAAU,IAAI,CAAC,YAAY,EAAE;AACzC,YAAA,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,EAAE,EAAE,EAAE,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC;AAC7D,YAAA,cAAc,CAAC,UAAU,CAAC,qBAAqB,CAAC;AAChD,YAAA,OAAO,KAAK;QACd;AAEA,QAAA,MAAM,WAAW,GAAG,IAAI,CAAC,qBAAqB,EAAE;AAChD,QAAA,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,YAAY,EAAE,WAAW,CAAC;QAEnE,IAAI,QAAQ,EAAE;AACZ,YAAA,cAAc,CAAC,UAAU,CAAC,qBAAqB,CAAC;YAChD,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,EAAE,EAAE,EAAE,QAAQ,CAAC;QAC/C;aAAO;AACL,YAAA,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,EAAE,EAAE,EAAE,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAC/D;AAEA,QAAA,OAAO,EAAE;IACX;IAEA,MAAM,IAAI,CAAC,MAA4B,EAAA;AACrC,QAAA,IAAI,CAAC,MAAM,GAAG,MAAM;QACpB,IAAI,CAAC,IAAI,CAAC,SAAS;AAAE,YAAA,OAAO,KAAK;AAEjC,QAAA,MAAM,OAAO,GAAG,IAAI,eAAe,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC;QACvE,IAAI,OAAO,EAAE;AACX,YAAA,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,cAAc,EAAE;AACtC,YAAA,IAAI,EAAE;AAAE,gBAAA,OAAO,IAAI;QACrB;AAEA,QAAA,OAAO,IAAI,CAAC,aAAa,EAAE;IAC7B;wGAjQW,eAAe,EAAA,IAAA,EAAA,EAAA,EAAA,MAAA,EAAA,EAAA,CAAA,eAAA,CAAA,UAAA,EAAA,CAAA;AAAf,IAAA,OAAA,KAAA,GAAA,EAAA,CAAA,qBAAA,CAAA,EAAA,UAAA,EAAA,QAAA,EAAA,OAAA,EAAA,SAAA,EAAA,QAAA,EAAA,EAAA,EAAA,IAAA,EAAA,eAAe,cADF,MAAM,EAAA,CAAA;;4FACnB,eAAe,EAAA,UAAA,EAAA,CAAA;kBAD3B,UAAU;mBAAC,EAAE,UAAU,EAAE,MAAM,EAAE;;;ACTlC,MAAM,YAAY,GAAG,CAAC,GAAW,KAAa,GAAG,CAAC,OAAO,CAAC,oBAAoB,EAAE,MAAM,CAAC;MAE1E,SAAS,GAAG,CAAC,OAAe,EAAE,GAAW,KAAa;AACjE,IAAA,MAAM,SAAS,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;AACjE,IAAA,OAAO,IAAI,MAAM,CAAC,CAAA,CAAA,EAAI,SAAS,CAAA,CAAA,CAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;AAC/C;MAEa,mBAAmB,GAAsB,CAAC,GAAG,EAAE,IAAI,KAAI;AAClE,IAAA,MAAM,MAAM,GAAG,MAAM,CAAC,eAAe,CAAC;AACtC,IAAA,MAAM,KAAK,GAAG,MAAM,CAAC,cAAc,EAAE;AACrC,IAAA,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM;AAE5B,IAAA,IAAI,CAAC,KAAK,IAAI,CAAC,MAAM;AAAE,QAAA,OAAO,IAAI,CAAC,GAAG,CAAC;IAEvC,MAAM,QAAQ,GAAG,MAAM,CAAC,YAAY,EAAE,IAAI,CAAC,OAAO,IAAI,SAAS,CAAC,OAAO,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC;AAClF,IAAA,IAAI,CAAC,QAAQ;AAAE,QAAA,OAAO,IAAI,CAAC,GAAG,CAAC;AAE/B,IAAA,MAAM,OAAO,GAAG,GAAG,CAAC,KAAK,CAAC;AACxB,QAAA,OAAO,EAAE,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,CAAA,OAAA,EAAU,KAAK,CAAA,CAAE,CAAC;AAC7D,KAAA,CAAC;AACF,IAAA,OAAO,IAAI,CAAC,OAAO,CAAC;AACtB;;ACHM,SAAU,eAAe,CAAC,OAAuB,EAAA;AACrD,IAAA,MAAM,SAAS,GAA2C,CAAC,eAAe,CAAC;AAE3E,IAAA,IAAI,OAAO,CAAC,UAAU,EAAE;QACtB,SAAS,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,uBAAuB,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,EAAE,EAAE,CAAC;IAChH;AAAO,SAAA,IAAI,OAAO,CAAC,QAAQ,EAAE;AAC3B,QAAA,SAAS,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,uBAAuB,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC;IAClF;AAEA,IAAA,SAAS,CAAC,IAAI,CACZ,qBAAqB,CAAC,MAAK;AACzB,QAAA,MAAM,YAAY,GAAG,MAAM,CAAC,uBAAuB,CAAC;AACpD,QAAA,MAAM,MAAM,GAAG,MAAM,CAAC,eAAe,CAAC;AACtC,QAAA,OAAO,YAAY,CAAC,gBAAgB,EAAE,CAAC,IAAI,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC9E,CAAC,CAAC,CACH;AAED,IAAA,OAAO,wBAAwB,CAAC,SAAS,CAAC;AAC5C;MAGa,cAAc,CAAA;IACzB,OAAO,OAAO,CAAC,OAAuB,EAAA;QACpC,OAAO;AACL,YAAA,QAAQ,EAAE,cAAc;AACxB,YAAA,SAAS,EAAE;gBACT,eAAe;gBACf,IAAI,OAAO,CAAC;sBACR,CAAC,EAAE,OAAO,EAAE,uBAAuB,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,EAAE,EAAE;AACjG,sBAAE,CAAC,EAAE,OAAO,EAAE,uBAAuB,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAS,EAAE,CAAC,CACtE;AACD,gBAAA;AACE,oBAAA,OAAO,EAAE,eAAe;AACxB,oBAAA,KAAK,EAAE,IAAI;oBACX,UAAU,EAAE,MAAK;AACf,wBAAA,MAAM,YAAY,GAAG,MAAM,CAAC,uBAAuB,CAAC;AACpD,wBAAA,MAAM,MAAM,GAAG,MAAM,CAAC,eAAe,CAAC;wBACtC,OAAO,MAAM,YAAY,CAAC,gBAAgB,EAAE,CAAC,IAAI,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;oBACpF,CAAC;AACF,iBAAA;AACF,aAAA;SACF;IACH;wGArBW,cAAc,EAAA,IAAA,EAAA,EAAA,EAAA,MAAA,EAAA,EAAA,CAAA,eAAA,CAAA,QAAA,EAAA,CAAA;yGAAd,cAAc,EAAA,CAAA;yGAAd,cAAc,EAAA,CAAA;;4FAAd,cAAc,EAAA,UAAA,EAAA,CAAA;kBAD1B,QAAQ;mBAAC,EAAE;;;AC1CZ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA8BG;;AC9BH;;AAEG;;;;"}
+{"version":3,"file":"sd-angular-core-modules-authom.mjs","sources":["../../../projects/sd-angular/modules/authom/authom.configuration.ts","../../../projects/sd-angular/modules/authom/authom.service.ts","../../../projects/sd-angular/modules/authom/authom.interceptor.ts","../../../projects/sd-angular/modules/authom/authom.module.ts","../../../projects/sd-angular/modules/authom/index.ts","../../../projects/sd-angular/modules/authom/sd-angular-core-modules-authom.ts"],"sourcesContent":["import { InjectionToken } from '@angular/core';\r\n\r\nexport interface SdAuthOmTenantConfig {\r\n  domain: string;\r\n  clientId: string;\r\n\r\n  redirectUri?: string;\r\n  audience?: string;\r\n  organization?: string;\r\n  scope?: string;\r\n\r\n  secureRoutes?: string[];\r\n\r\n  silentRefreshRedirectUri?: string;\r\n  refreshThresholdSeconds?: number;\r\n  authorizeTimeoutInSeconds?: number;\r\n}\r\n\r\nexport interface ISdAuthOmConfiguration {\r\n  loadTenantConfig: () => Promise<SdAuthOmTenantConfig>;\r\n}\r\n\r\nexport const SD_AUTHOM_CONFIGURATION = new InjectionToken<ISdAuthOmConfiguration>('sd-authom.configuration');\r\n","import { Injectable, PLATFORM_ID, computed, inject, signal } from '@angular/core';\r\nimport { isPlatformBrowser } from '@angular/common';\r\nimport { SdAuthOmTenantConfig } from './authom.configuration';\r\nimport { StringUtilities } from '@sd-angular/core/utilities/extensions';\r\n\r\nconst STORAGE_KEY_STATE = 'authom_state';\r\nconst STORAGE_KEY_CODE_VERIFIER = 'authom_code_verifier';\r\nconst STORAGE_KEY_RETURN_TO = 'authom_return_to';\r\n\r\nconst DEFAULT_SCOPE = 'openid profile email';\r\nconst DEFAULT_REFRESH_THRESHOLD_SECONDS = 30;\r\nconst DEFAULT_AUTHORIZE_TIMEOUT_SECONDS = 5;\r\n\r\n@Injectable({ providedIn: 'root' })\r\nexport class SdAuthOmService {\r\n  private readonly platformId = inject(PLATFORM_ID);\r\n  private readonly isBrowser = isPlatformBrowser(this.platformId);\r\n\r\n  readonly accessToken = signal<string | null>(null);\r\n  readonly idTokenClaims = signal<Record<string, unknown> | null>(null);\r\n  readonly isAuthenticated = computed(() => this.accessToken() !== null);\r\n\r\n  config!: SdAuthOmTenantConfig;\r\n  private refreshTimer: ReturnType<typeof setTimeout> | null = null;\r\n\r\n  getAccessToken(): string | null {\r\n    return this.accessToken();\r\n  }\r\n\r\n  private base64UrlEncode(bytes: Uint8Array): string {\r\n    let binary = '';\r\n    for (let i = 0; i < bytes.length; i++) binary += String.fromCharCode(bytes[i]);\r\n    return btoa(binary).replace(/\\+/g, '-').replace(/\\//g, '_').replace(/=+$/, '');\r\n  }\r\n\r\n  private generateCodeVerifier(): string {\r\n    const bytes = new Uint8Array(32);\r\n    crypto.getRandomValues(bytes);\r\n    return this.base64UrlEncode(bytes);\r\n  }\r\n\r\n  private async generateCodeChallenge(verifier: string): Promise<string> {\r\n    return StringUtilities.sha256(verifier);\r\n  }\r\n\r\n  private buildAuthorizeUrl(params: {\r\n    state: string;\r\n    codeChallenge: string;\r\n    redirectUri: string;\r\n    prompt?: 'none';\r\n  }): string {\r\n    const search = new URLSearchParams({\r\n      response_type: 'code',\r\n      client_id: this.config.clientId,\r\n      redirect_uri: params.redirectUri,\r\n      state: params.state,\r\n      code_challenge: params.codeChallenge,\r\n      code_challenge_method: 'S256',\r\n      scope: this.config.scope || DEFAULT_SCOPE,\r\n    });\r\n    if (this.config.audience) search.set('audience', this.config.audience);\r\n    if (this.config.organization) search.set('organization', this.config.organization);\r\n    if (params.prompt) search.set('prompt', params.prompt);\r\n    return `https://${this.config.domain}/authorize?${search.toString()}`;\r\n  }\r\n\r\n  private getDefaultRedirectUri(): string {\r\n    return this.config.redirectUri || window.location.origin;\r\n  }\r\n\r\n  private getSilentRedirectUri(): string {\r\n    return this.config.silentRefreshRedirectUri || `${window.location.origin}/silent-authom.html`;\r\n  }\r\n\r\n  private decodeJwtPayload(token: string): Record<string, unknown> | null {\r\n    try {\r\n      const parts = token.split('.');\r\n      if (parts.length !== 3) return null;\r\n      const padded = parts[1].replace(/-/g, '+').replace(/_/g, '/');\r\n      const json = atob(padded + '==='.slice((padded.length + 3) % 4));\r\n      return JSON.parse(json);\r\n    } catch {\r\n      return null;\r\n    }\r\n  }\r\n\r\n  async login(options?: { returnTo?: string }): Promise<void> {\r\n    if (!this.isBrowser) return;\r\n\r\n    const state = crypto.randomUUID();\r\n    const codeVerifier = this.generateCodeVerifier();\r\n    const codeChallenge = await this.generateCodeChallenge(codeVerifier);\r\n    const returnTo = options?.returnTo || (window.location.pathname + window.location.search);\r\n\r\n    sessionStorage.setItem(STORAGE_KEY_STATE, state);\r\n    sessionStorage.setItem(STORAGE_KEY_CODE_VERIFIER, codeVerifier);\r\n    sessionStorage.setItem(STORAGE_KEY_RETURN_TO, returnTo);\r\n\r\n    window.location.href = this.buildAuthorizeUrl({\r\n      state,\r\n      codeChallenge,\r\n      redirectUri: this.getDefaultRedirectUri(),\r\n    });\r\n  }\r\n\r\n  logout(options?: { returnTo?: string }): void {\r\n    if (!this.isBrowser) return;\r\n\r\n    this.accessToken.set(null);\r\n    this.idTokenClaims.set(null);\r\n    if (this.refreshTimer) {\r\n      clearTimeout(this.refreshTimer);\r\n      this.refreshTimer = null;\r\n    }\r\n\r\n    const returnTo = options?.returnTo || window.location.origin;\r\n    const search = new URLSearchParams({\r\n      client_id: this.config.clientId,\r\n      returnTo,\r\n    });\r\n    window.location.href = `https://${this.config.domain}/v2/logout?${search.toString()}`;\r\n  }\r\n\r\n  private async exchangeCode(code: string, codeVerifier: string, redirectUri: string): Promise<boolean> {\r\n    try {\r\n      const body = new URLSearchParams({\r\n        grant_type: 'authorization_code',\r\n        code,\r\n        code_verifier: codeVerifier,\r\n        redirect_uri: redirectUri,\r\n        client_id: this.config.clientId,\r\n      });\r\n      const res = await fetch(`https://${this.config.domain}/oauth/token`, {\r\n        method: 'POST',\r\n        headers: { 'Content-Type': 'application/x-www-form-urlencoded' },\r\n        body: body.toString(),\r\n      });\r\n      if (!res.ok) return false;\r\n      const data = await res.json() as { access_token?: string; id_token?: string };\r\n      if (!data.access_token) return false;\r\n\r\n      this.accessToken.set(data.access_token);\r\n      if (data.id_token) {\r\n        this.idTokenClaims.set(this.decodeJwtPayload(data.id_token));\r\n      }\r\n      this.scheduleRefresh(data.access_token);\r\n      return true;\r\n    } catch {\r\n      return false;\r\n    }\r\n  }\r\n\r\n  private scheduleRefresh(token: string): void {\r\n    if (this.refreshTimer) {\r\n      clearTimeout(this.refreshTimer);\r\n      this.refreshTimer = null;\r\n    }\r\n    const claims = this.decodeJwtPayload(token);\r\n    const exp = claims?.['exp'];\r\n    if (typeof exp !== 'number') {\r\n      console.warn('[SdAuthOmService] Token không có exp — bỏ qua auto-refresh');\r\n      return;\r\n    }\r\n    const threshold = this.config.refreshThresholdSeconds ?? DEFAULT_REFRESH_THRESHOLD_SECONDS;\r\n    const nowSeconds = Math.floor(Date.now() / 1000);\r\n    const delayMs = Math.max(0, (exp - nowSeconds - threshold) * 1000);\r\n    this.refreshTimer = setTimeout(() => {\r\n      this.silentRefresh();\r\n    }, delayMs);\r\n  }\r\n\r\n  silentRefresh(): Promise<boolean> {\r\n    if (!this.isBrowser) return Promise.resolve(false);\r\n\r\n    return new Promise(async (resolve) => {\r\n      const state = crypto.randomUUID();\r\n      const codeVerifier = this.generateCodeVerifier();\r\n      const codeChallenge = await this.generateCodeChallenge(codeVerifier);\r\n      const redirectUri = this.getSilentRedirectUri();\r\n      const timeoutMs = (this.config.authorizeTimeoutInSeconds ?? DEFAULT_AUTHORIZE_TIMEOUT_SECONDS) * 1000;\r\n\r\n      const iframe = document.createElement('iframe');\r\n      iframe.style.display = 'none';\r\n\r\n      let done = false;\r\n      const finish = (success: boolean) => {\r\n        if (done) return;\r\n        done = true;\r\n        clearTimeout(timer);\r\n        iframe.remove();\r\n        window.removeEventListener('message', onMessage);\r\n        resolve(success);\r\n      };\r\n\r\n      const timer = setTimeout(() => finish(false), timeoutMs);\r\n\r\n      const onMessage = async (event: MessageEvent) => {\r\n        if (event.origin !== window.location.origin) return;\r\n        const data = event.data as { type?: string; code?: string; state?: string } | null;\r\n        if (!data || typeof data !== 'object') return;\r\n\r\n        if (data.type === 'AUTHOM_SILENT_SUCCESS' && data.code && data.state === state) {\r\n          const ok = await this.exchangeCode(data.code, codeVerifier, redirectUri);\r\n          if (!ok) {\r\n            this.accessToken.set(null);\r\n            this.idTokenClaims.set(null);\r\n          }\r\n          finish(ok);\r\n        } else if (data.type === 'AUTHOM_SILENT_ERROR') {\r\n          this.accessToken.set(null);\r\n          this.idTokenClaims.set(null);\r\n          finish(false);\r\n        }\r\n      };\r\n\r\n      window.addEventListener('message', onMessage);\r\n\r\n      iframe.src = this.buildAuthorizeUrl({\r\n        state,\r\n        codeChallenge,\r\n        redirectUri,\r\n        prompt: 'none',\r\n      });\r\n      document.body.appendChild(iframe);\r\n    });\r\n  }\r\n\r\n  async handleCallback(): Promise<boolean> {\r\n    if (!this.isBrowser) return false;\r\n\r\n    const params = new URLSearchParams(window.location.search);\r\n    const code = params.get('code');\r\n    const state = params.get('state');\r\n    if (!code) return false;\r\n\r\n    const savedState = sessionStorage.getItem(STORAGE_KEY_STATE);\r\n    const codeVerifier = sessionStorage.getItem(STORAGE_KEY_CODE_VERIFIER);\r\n    const returnTo = sessionStorage.getItem(STORAGE_KEY_RETURN_TO);\r\n    sessionStorage.removeItem(STORAGE_KEY_STATE);\r\n    sessionStorage.removeItem(STORAGE_KEY_CODE_VERIFIER);\r\n\r\n    if (state !== savedState || !codeVerifier) {\r\n      window.history.replaceState({}, '', window.location.pathname);\r\n      sessionStorage.removeItem(STORAGE_KEY_RETURN_TO);\r\n      return false;\r\n    }\r\n\r\n    const redirectUri = this.getDefaultRedirectUri();\r\n    const ok = await this.exchangeCode(code, codeVerifier, redirectUri);\r\n\r\n    if (returnTo) {\r\n      sessionStorage.removeItem(STORAGE_KEY_RETURN_TO);\r\n      window.history.replaceState({}, '', returnTo);\r\n    } else {\r\n      window.history.replaceState({}, '', window.location.pathname);\r\n    }\r\n\r\n    return ok;\r\n  }\r\n\r\n  async init(config: SdAuthOmTenantConfig): Promise<boolean> {\r\n    this.config = config;\r\n    if (!this.isBrowser) return false;\r\n\r\n    const hasCode = new URLSearchParams(window.location.search).has('code');\r\n    if (hasCode) {\r\n      const ok = await this.handleCallback();\r\n      if (ok) return true;\r\n    }\r\n\r\n    return this.silentRefresh();\r\n  }\r\n}\r\n","import { HttpInterceptorFn } from '@angular/common/http';\r\nimport { inject } from '@angular/core';\r\nimport { SdAuthOmService } from './authom.service';\r\n\r\nconst escapeRegExp = (str: string): string => str.replace(/[.+?^${}()|[\\]\\\\]/g, '\\\\$&');\r\n\r\nexport const matchGlob = (pattern: string, url: string): boolean => {\r\n  const regexBody = pattern.split('*').map(escapeRegExp).join('.*');\r\n  return new RegExp(`^${regexBody}$`).test(url);\r\n};\r\n\r\nexport const SdAuthOmInterceptor: HttpInterceptorFn = (req, next) => {\r\n  const authom = inject(SdAuthOmService);\r\n  const token = authom.getAccessToken();\r\n  const config = authom.config;\r\n\r\n  if (!token || !config) return next(req);\r\n\r\n  const isSecure = config.secureRoutes?.some(pattern => matchGlob(pattern, req.url));\r\n  if (!isSecure) return next(req);\r\n\r\n  const authReq = req.clone({\r\n    headers: req.headers.set('Authorization', `Bearer ${token}`),\r\n  });\r\n  return next(authReq);\r\n};\r\n","import {\r\n  ModuleWithProviders,\r\n  NgModule,\r\n  Provider,\r\n  Type,\r\n  EnvironmentProviders,\r\n  makeEnvironmentProviders,\r\n  provideAppInitializer,\r\n  inject,\r\n  APP_INITIALIZER,\r\n} from '@angular/core';\r\nimport { ISdAuthOmConfiguration, SD_AUTHOM_CONFIGURATION } from './authom.configuration';\r\nimport { SdAuthOmService } from './authom.service';\r\n\r\ninterface ProvideOptions {\r\n  useClass?: Type<ISdAuthOmConfiguration>;\r\n  // eslint-disable-next-line @typescript-eslint/no-explicit-any\r\n  useFactory?: (...args: any[]) => ISdAuthOmConfiguration;\r\n  // eslint-disable-next-line @typescript-eslint/no-explicit-any\r\n  deps?: any[];\r\n}\r\n\r\nexport function provideSdAuthOm(options: ProvideOptions): EnvironmentProviders {\r\n  const providers: Array<Provider | EnvironmentProviders> = [SdAuthOmService];\r\n\r\n  if (options.useFactory) {\r\n    providers.push({ provide: SD_AUTHOM_CONFIGURATION, useFactory: options.useFactory, deps: options.deps || [] });\r\n  } else if (options.useClass) {\r\n    providers.push({ provide: SD_AUTHOM_CONFIGURATION, useClass: options.useClass });\r\n  }\r\n\r\n  providers.push(\r\n    provideAppInitializer(() => {\r\n      const configLoader = inject(SD_AUTHOM_CONFIGURATION);\r\n      const authom = inject(SdAuthOmService);\r\n      return configLoader.loadTenantConfig().then((config) => authom.init(config));\r\n    })\r\n  );\r\n\r\n  return makeEnvironmentProviders(providers);\r\n}\r\n\r\n@NgModule({})\r\nexport class SdAuthOmModule {\r\n  static forRoot(options: ProvideOptions): ModuleWithProviders<SdAuthOmModule> {\r\n    return {\r\n      ngModule: SdAuthOmModule,\r\n      providers: [\r\n        SdAuthOmService,\r\n        ...(options.useFactory\r\n          ? [{ provide: SD_AUTHOM_CONFIGURATION, useFactory: options.useFactory, deps: options.deps || [] }]\r\n          : [{ provide: SD_AUTHOM_CONFIGURATION, useClass: options.useClass! }]\r\n        ),\r\n        {\r\n          provide: APP_INITIALIZER,\r\n          multi: true,\r\n          useFactory: () => {\r\n            const configLoader = inject(SD_AUTHOM_CONFIGURATION);\r\n            const authom = inject(SdAuthOmService);\r\n            return () => configLoader.loadTenantConfig().then((config) => authom.init(config));\r\n          },\r\n        },\r\n      ],\r\n    };\r\n  }\r\n}\r\n","/**\r\n * Module `authom` — OAuth 2.0 + PKCE authentication client cho AuthOM (Auth0-based).\r\n *\r\n * Cách dùng (standalone):\r\n * ```ts\r\n * import { provideHttpClient, withInterceptors } from '@angular/common/http';\r\n * import { provideSdAuthOm, SdAuthOmInterceptor } from '@sd-angular/core/modules/authom';\r\n *\r\n * export const appConfig: ApplicationConfig = {\r\n *   providers: [\r\n *     provideHttpClient(withInterceptors([SdAuthOmInterceptor])),\r\n *     provideSdAuthOm({\r\n *       useFactory: () => ({\r\n *         loadTenantConfig: () => Promise.resolve({\r\n *           domain: 'login.example.com',\r\n *           clientId: 'YOUR_CLIENT_ID',\r\n *           audience: 'https://api.example.com',\r\n *           organization: 'org_xxx',\r\n *           scope: 'openid profile email offline_access',\r\n *           secureRoutes: ['https://api.example.com/*'],\r\n *         }),\r\n *       }),\r\n *     }),\r\n *   ],\r\n * };\r\n * ```\r\n *\r\n * Yêu cầu setup thêm:\r\n * 1. Copy file `silent-authom.html` từ source module này vào thư mục `public/` của app.\r\n * 2. App phải chạy trên HTTPS (hoặc localhost) — Web Crypto API yêu cầu secure context.\r\n */\r\nexport * from './authom.configuration';\r\nexport * from './authom.service';\r\nexport * from './authom.interceptor';\r\nexport * from './authom.module';\r\n","/**\n * Generated bundle index. Do not edit.\n */\n\nexport * from './index';\n"],"names":[],"mappings":";;;;;MAsBa,uBAAuB,GAAG,IAAI,cAAc,CAAyB,yBAAyB;;ACjB3G,MAAM,iBAAiB,GAAG,cAAc;AACxC,MAAM,yBAAyB,GAAG,sBAAsB;AACxD,MAAM,qBAAqB,GAAG,kBAAkB;AAEhD,MAAM,aAAa,GAAG,sBAAsB;AAC5C,MAAM,iCAAiC,GAAG,EAAE;AAC5C,MAAM,iCAAiC,GAAG,CAAC;MAG9B,eAAe,CAAA;AACT,IAAA,UAAU,GAAG,MAAM,CAAC,WAAW,CAAC;AAChC,IAAA,SAAS,GAAG,iBAAiB,CAAC,IAAI,CAAC,UAAU,CAAC;AAEtD,IAAA,WAAW,GAAG,MAAM,CAAgB,IAAI,CAAC;AACzC,IAAA,aAAa,GAAG,MAAM,CAAiC,IAAI,CAAC;AAC5D,IAAA,eAAe,GAAG,QAAQ,CAAC,MAAM,IAAI,CAAC,WAAW,EAAE,KAAK,IAAI,CAAC;AAEtE,IAAA,MAAM;IACE,YAAY,GAAyC,IAAI;IAEjE,cAAc,GAAA;AACZ,QAAA,OAAO,IAAI,CAAC,WAAW,EAAE;IAC3B;AAEQ,IAAA,eAAe,CAAC,KAAiB,EAAA;QACvC,IAAI,MAAM,GAAG,EAAE;AACf,QAAA,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE;YAAE,MAAM,IAAI,MAAM,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAC9E,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC;IAChF;IAEQ,oBAAoB,GAAA;AAC1B,QAAA,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC;AAChC,QAAA,MAAM,CAAC,eAAe,CAAC,KAAK,CAAC;AAC7B,QAAA,OAAO,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC;IACpC;IAEQ,MAAM,qBAAqB,CAAC,QAAgB,EAAA;AAClD,QAAA,OAAO,eAAe,CAAC,MAAM,CAAC,QAAQ,CAAC;IACzC;AAEQ,IAAA,iBAAiB,CAAC,MAKzB,EAAA;AACC,QAAA,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC;AACjC,YAAA,aAAa,EAAE,MAAM;AACrB,YAAA,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ;YAC/B,YAAY,EAAE,MAAM,CAAC,WAAW;YAChC,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,cAAc,EAAE,MAAM,CAAC,aAAa;AACpC,YAAA,qBAAqB,EAAE,MAAM;AAC7B,YAAA,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK,IAAI,aAAa;AAC1C,SAAA,CAAC;AACF,QAAA,IAAI,IAAI,CAAC,MAAM,CAAC,QAAQ;YAAE,MAAM,CAAC,GAAG,CAAC,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC;AACtE,QAAA,IAAI,IAAI,CAAC,MAAM,CAAC,YAAY;YAAE,MAAM,CAAC,GAAG,CAAC,cAAc,EAAE,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC;QAClF,IAAI,MAAM,CAAC,MAAM;YAAE,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC;AACtD,QAAA,OAAO,CAAA,QAAA,EAAW,IAAI,CAAC,MAAM,CAAC,MAAM,CAAA,WAAA,EAAc,MAAM,CAAC,QAAQ,EAAE,CAAA,CAAE;IACvE;IAEQ,qBAAqB,GAAA;QAC3B,OAAO,IAAI,CAAC,MAAM,CAAC,WAAW,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM;IAC1D;IAEQ,oBAAoB,GAAA;AAC1B,QAAA,OAAO,IAAI,CAAC,MAAM,CAAC,wBAAwB,IAAI,CAAA,EAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,qBAAqB;IAC/F;AAEQ,IAAA,gBAAgB,CAAC,KAAa,EAAA;AACpC,QAAA,IAAI;YACF,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC;AAC9B,YAAA,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;AAAE,gBAAA,OAAO,IAAI;YACnC,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC;YAC7D,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;AAChE,YAAA,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;QACzB;AAAE,QAAA,MAAM;AACN,YAAA,OAAO,IAAI;QACb;IACF;IAEA,MAAM,KAAK,CAAC,OAA+B,EAAA;QACzC,IAAI,CAAC,IAAI,CAAC,SAAS;YAAE;AAErB,QAAA,MAAM,KAAK,GAAG,MAAM,CAAC,UAAU,EAAE;AACjC,QAAA,MAAM,YAAY,GAAG,IAAI,CAAC,oBAAoB,EAAE;QAChD,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,qBAAqB,CAAC,YAAY,CAAC;AACpE,QAAA,MAAM,QAAQ,GAAG,OAAO,EAAE,QAAQ,KAAK,MAAM,CAAC,QAAQ,CAAC,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC;AAEzF,QAAA,cAAc,CAAC,OAAO,CAAC,iBAAiB,EAAE,KAAK,CAAC;AAChD,QAAA,cAAc,CAAC,OAAO,CAAC,yBAAyB,EAAE,YAAY,CAAC;AAC/D,QAAA,cAAc,CAAC,OAAO,CAAC,qBAAqB,EAAE,QAAQ,CAAC;QAEvD,MAAM,CAAC,QAAQ,CAAC,IAAI,GAAG,IAAI,CAAC,iBAAiB,CAAC;YAC5C,KAAK;YACL,aAAa;AACb,YAAA,WAAW,EAAE,IAAI,CAAC,qBAAqB,EAAE;AAC1C,SAAA,CAAC;IACJ;AAEA,IAAA,MAAM,CAAC,OAA+B,EAAA;QACpC,IAAI,CAAC,IAAI,CAAC,SAAS;YAAE;AAErB,QAAA,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC;AAC1B,QAAA,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC;AAC5B,QAAA,IAAI,IAAI,CAAC,YAAY,EAAE;AACrB,YAAA,YAAY,CAAC,IAAI,CAAC,YAAY,CAAC;AAC/B,YAAA,IAAI,CAAC,YAAY,GAAG,IAAI;QAC1B;QAEA,MAAM,QAAQ,GAAG,OAAO,EAAE,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM;AAC5D,QAAA,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC;AACjC,YAAA,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ;YAC/B,QAAQ;AACT,SAAA,CAAC;AACF,QAAA,MAAM,CAAC,QAAQ,CAAC,IAAI,GAAG,WAAW,IAAI,CAAC,MAAM,CAAC,MAAM,CAAA,WAAA,EAAc,MAAM,CAAC,QAAQ,EAAE,EAAE;IACvF;AAEQ,IAAA,MAAM,YAAY,CAAC,IAAY,EAAE,YAAoB,EAAE,WAAmB,EAAA;AAChF,QAAA,IAAI;AACF,YAAA,MAAM,IAAI,GAAG,IAAI,eAAe,CAAC;AAC/B,gBAAA,UAAU,EAAE,oBAAoB;gBAChC,IAAI;AACJ,gBAAA,aAAa,EAAE,YAAY;AAC3B,gBAAA,YAAY,EAAE,WAAW;AACzB,gBAAA,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ;AAChC,aAAA,CAAC;AACF,YAAA,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,CAAA,QAAA,EAAW,IAAI,CAAC,MAAM,CAAC,MAAM,CAAA,YAAA,CAAc,EAAE;AACnE,gBAAA,MAAM,EAAE,MAAM;AACd,gBAAA,OAAO,EAAE,EAAE,cAAc,EAAE,mCAAmC,EAAE;AAChE,gBAAA,IAAI,EAAE,IAAI,CAAC,QAAQ,EAAE;AACtB,aAAA,CAAC;YACF,IAAI,CAAC,GAAG,CAAC,EAAE;AAAE,gBAAA,OAAO,KAAK;AACzB,YAAA,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAkD;YAC7E,IAAI,CAAC,IAAI,CAAC,YAAY;AAAE,gBAAA,OAAO,KAAK;YAEpC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC;AACvC,YAAA,IAAI,IAAI,CAAC,QAAQ,EAAE;AACjB,gBAAA,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YAC9D;AACA,YAAA,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,YAAY,CAAC;AACvC,YAAA,OAAO,IAAI;QACb;AAAE,QAAA,MAAM;AACN,YAAA,OAAO,KAAK;QACd;IACF;AAEQ,IAAA,eAAe,CAAC,KAAa,EAAA;AACnC,QAAA,IAAI,IAAI,CAAC,YAAY,EAAE;AACrB,YAAA,YAAY,CAAC,IAAI,CAAC,YAAY,CAAC;AAC/B,YAAA,IAAI,CAAC,YAAY,GAAG,IAAI;QAC1B;QACA,MAAM,MAAM,GAAG,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC;AAC3C,QAAA,MAAM,GAAG,GAAG,MAAM,GAAG,KAAK,CAAC;AAC3B,QAAA,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE;AAC3B,YAAA,OAAO,CAAC,IAAI,CAAC,4DAA4D,CAAC;YAC1E;QACF;QACA,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,uBAAuB,IAAI,iCAAiC;AAC1F,QAAA,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;AAChD,QAAA,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,GAAG,GAAG,UAAU,GAAG,SAAS,IAAI,IAAI,CAAC;AAClE,QAAA,IAAI,CAAC,YAAY,GAAG,UAAU,CAAC,MAAK;YAClC,IAAI,CAAC,aAAa,EAAE;QACtB,CAAC,EAAE,OAAO,CAAC;IACb;IAEA,aAAa,GAAA;QACX,IAAI,CAAC,IAAI,CAAC,SAAS;AAAE,YAAA,OAAO,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC;AAElD,QAAA,OAAO,IAAI,OAAO,CAAC,OAAO,OAAO,KAAI;AACnC,YAAA,MAAM,KAAK,GAAG,MAAM,CAAC,UAAU,EAAE;AACjC,YAAA,MAAM,YAAY,GAAG,IAAI,CAAC,oBAAoB,EAAE;YAChD,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,qBAAqB,CAAC,YAAY,CAAC;AACpE,YAAA,MAAM,WAAW,GAAG,IAAI,CAAC,oBAAoB,EAAE;AAC/C,YAAA,MAAM,SAAS,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,yBAAyB,IAAI,iCAAiC,IAAI,IAAI;YAErG,MAAM,MAAM,GAAG,QAAQ,CAAC,aAAa,CAAC,QAAQ,CAAC;AAC/C,YAAA,MAAM,CAAC,KAAK,CAAC,OAAO,GAAG,MAAM;YAE7B,IAAI,IAAI,GAAG,KAAK;AAChB,YAAA,MAAM,MAAM,GAAG,CAAC,OAAgB,KAAI;AAClC,gBAAA,IAAI,IAAI;oBAAE;gBACV,IAAI,GAAG,IAAI;gBACX,YAAY,CAAC,KAAK,CAAC;gBACnB,MAAM,CAAC,MAAM,EAAE;AACf,gBAAA,MAAM,CAAC,mBAAmB,CAAC,SAAS,EAAE,SAAS,CAAC;gBAChD,OAAO,CAAC,OAAO,CAAC;AAClB,YAAA,CAAC;AAED,YAAA,MAAM,KAAK,GAAG,UAAU,CAAC,MAAM,MAAM,CAAC,KAAK,CAAC,EAAE,SAAS,CAAC;AAExD,YAAA,MAAM,SAAS,GAAG,OAAO,KAAmB,KAAI;gBAC9C,IAAI,KAAK,CAAC,MAAM,KAAK,MAAM,CAAC,QAAQ,CAAC,MAAM;oBAAE;AAC7C,gBAAA,MAAM,IAAI,GAAG,KAAK,CAAC,IAA+D;AAClF,gBAAA,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ;oBAAE;AAEvC,gBAAA,IAAI,IAAI,CAAC,IAAI,KAAK,uBAAuB,IAAI,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,KAAK,KAAK,KAAK,EAAE;AAC9E,oBAAA,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,YAAY,EAAE,WAAW,CAAC;oBACxE,IAAI,CAAC,EAAE,EAAE;AACP,wBAAA,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC;AAC1B,wBAAA,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC;oBAC9B;oBACA,MAAM,CAAC,EAAE,CAAC;gBACZ;AAAO,qBAAA,IAAI,IAAI,CAAC,IAAI,KAAK,qBAAqB,EAAE;AAC9C,oBAAA,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC;AAC1B,oBAAA,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC;oBAC5B,MAAM,CAAC,KAAK,CAAC;gBACf;AACF,YAAA,CAAC;AAED,YAAA,MAAM,CAAC,gBAAgB,CAAC,SAAS,EAAE,SAAS,CAAC;AAE7C,YAAA,MAAM,CAAC,GAAG,GAAG,IAAI,CAAC,iBAAiB,CAAC;gBAClC,KAAK;gBACL,aAAa;gBACb,WAAW;AACX,gBAAA,MAAM,EAAE,MAAM;AACf,aAAA,CAAC;AACF,YAAA,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC;AACnC,QAAA,CAAC,CAAC;IACJ;AAEA,IAAA,MAAM,cAAc,GAAA;QAClB,IAAI,CAAC,IAAI,CAAC,SAAS;AAAE,YAAA,OAAO,KAAK;QAEjC,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC;QAC1D,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC;QAC/B,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC;AACjC,QAAA,IAAI,CAAC,IAAI;AAAE,YAAA,OAAO,KAAK;QAEvB,MAAM,UAAU,GAAG,cAAc,CAAC,OAAO,CAAC,iBAAiB,CAAC;QAC5D,MAAM,YAAY,GAAG,cAAc,CAAC,OAAO,CAAC,yBAAyB,CAAC;QACtE,MAAM,QAAQ,GAAG,cAAc,CAAC,OAAO,CAAC,qBAAqB,CAAC;AAC9D,QAAA,cAAc,CAAC,UAAU,CAAC,iBAAiB,CAAC;AAC5C,QAAA,cAAc,CAAC,UAAU,CAAC,yBAAyB,CAAC;AAEpD,QAAA,IAAI,KAAK,KAAK,UAAU,IAAI,CAAC,YAAY,EAAE;AACzC,YAAA,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,EAAE,EAAE,EAAE,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC;AAC7D,YAAA,cAAc,CAAC,UAAU,CAAC,qBAAqB,CAAC;AAChD,YAAA,OAAO,KAAK;QACd;AAEA,QAAA,MAAM,WAAW,GAAG,IAAI,CAAC,qBAAqB,EAAE;AAChD,QAAA,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,YAAY,EAAE,WAAW,CAAC;QAEnE,IAAI,QAAQ,EAAE;AACZ,YAAA,cAAc,CAAC,UAAU,CAAC,qBAAqB,CAAC;YAChD,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,EAAE,EAAE,EAAE,QAAQ,CAAC;QAC/C;aAAO;AACL,YAAA,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,EAAE,EAAE,EAAE,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAC/D;AAEA,QAAA,OAAO,EAAE;IACX;IAEA,MAAM,IAAI,CAAC,MAA4B,EAAA;AACrC,QAAA,IAAI,CAAC,MAAM,GAAG,MAAM;QACpB,IAAI,CAAC,IAAI,CAAC,SAAS;AAAE,YAAA,OAAO,KAAK;AAEjC,QAAA,MAAM,OAAO,GAAG,IAAI,eAAe,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC;QACvE,IAAI,OAAO,EAAE;AACX,YAAA,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,cAAc,EAAE;AACtC,YAAA,IAAI,EAAE;AAAE,gBAAA,OAAO,IAAI;QACrB;AAEA,QAAA,OAAO,IAAI,CAAC,aAAa,EAAE;IAC7B;wGAjQW,eAAe,EAAA,IAAA,EAAA,EAAA,EAAA,MAAA,EAAA,EAAA,CAAA,eAAA,CAAA,UAAA,EAAA,CAAA;AAAf,IAAA,OAAA,KAAA,GAAA,EAAA,CAAA,qBAAA,CAAA,EAAA,UAAA,EAAA,QAAA,EAAA,OAAA,EAAA,SAAA,EAAA,QAAA,EAAA,EAAA,EAAA,IAAA,EAAA,eAAe,cADF,MAAM,EAAA,CAAA;;4FACnB,eAAe,EAAA,UAAA,EAAA,CAAA;kBAD3B,UAAU;mBAAC,EAAE,UAAU,EAAE,MAAM,EAAE;;;ACTlC,MAAM,YAAY,GAAG,CAAC,GAAW,KAAa,GAAG,CAAC,OAAO,CAAC,oBAAoB,EAAE,MAAM,CAAC;MAE1E,SAAS,GAAG,CAAC,OAAe,EAAE,GAAW,KAAa;AACjE,IAAA,MAAM,SAAS,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;AACjE,IAAA,OAAO,IAAI,MAAM,CAAC,CAAA,CAAA,EAAI,SAAS,CAAA,CAAA,CAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;AAC/C;MAEa,mBAAmB,GAAsB,CAAC,GAAG,EAAE,IAAI,KAAI;AAClE,IAAA,MAAM,MAAM,GAAG,MAAM,CAAC,eAAe,CAAC;AACtC,IAAA,MAAM,KAAK,GAAG,MAAM,CAAC,cAAc,EAAE;AACrC,IAAA,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM;AAE5B,IAAA,IAAI,CAAC,KAAK,IAAI,CAAC,MAAM;AAAE,QAAA,OAAO,IAAI,CAAC,GAAG,CAAC;IAEvC,MAAM,QAAQ,GAAG,MAAM,CAAC,YAAY,EAAE,IAAI,CAAC,OAAO,IAAI,SAAS,CAAC,OAAO,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC;AAClF,IAAA,IAAI,CAAC,QAAQ;AAAE,QAAA,OAAO,IAAI,CAAC,GAAG,CAAC;AAE/B,IAAA,MAAM,OAAO,GAAG,GAAG,CAAC,KAAK,CAAC;AACxB,QAAA,OAAO,EAAE,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,CAAA,OAAA,EAAU,KAAK,CAAA,CAAE,CAAC;AAC7D,KAAA,CAAC;AACF,IAAA,OAAO,IAAI,CAAC,OAAO,CAAC;AACtB;;ACHM,SAAU,eAAe,CAAC,OAAuB,EAAA;AACrD,IAAA,MAAM,SAAS,GAA2C,CAAC,eAAe,CAAC;AAE3E,IAAA,IAAI,OAAO,CAAC,UAAU,EAAE;QACtB,SAAS,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,uBAAuB,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,EAAE,EAAE,CAAC;IAChH;AAAO,SAAA,IAAI,OAAO,CAAC,QAAQ,EAAE;AAC3B,QAAA,SAAS,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,uBAAuB,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC;IAClF;AAEA,IAAA,SAAS,CAAC,IAAI,CACZ,qBAAqB,CAAC,MAAK;AACzB,QAAA,MAAM,YAAY,GAAG,MAAM,CAAC,uBAAuB,CAAC;AACpD,QAAA,MAAM,MAAM,GAAG,MAAM,CAAC,eAAe,CAAC;AACtC,QAAA,OAAO,YAAY,CAAC,gBAAgB,EAAE,CAAC,IAAI,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC9E,CAAC,CAAC,CACH;AAED,IAAA,OAAO,wBAAwB,CAAC,SAAS,CAAC;AAC5C;MAGa,cAAc,CAAA;IACzB,OAAO,OAAO,CAAC,OAAuB,EAAA;QACpC,OAAO;AACL,YAAA,QAAQ,EAAE,cAAc;AACxB,YAAA,SAAS,EAAE;gBACT,eAAe;gBACf,IAAI,OAAO,CAAC;sBACR,CAAC,EAAE,OAAO,EAAE,uBAAuB,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,EAAE,EAAE;AACjG,sBAAE,CAAC,EAAE,OAAO,EAAE,uBAAuB,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAS,EAAE,CAAC,CACtE;AACD,gBAAA;AACE,oBAAA,OAAO,EAAE,eAAe;AACxB,oBAAA,KAAK,EAAE,IAAI;oBACX,UAAU,EAAE,MAAK;AACf,wBAAA,MAAM,YAAY,GAAG,MAAM,CAAC,uBAAuB,CAAC;AACpD,wBAAA,MAAM,MAAM,GAAG,MAAM,CAAC,eAAe,CAAC;wBACtC,OAAO,MAAM,YAAY,CAAC,gBAAgB,EAAE,CAAC,IAAI,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;oBACpF,CAAC;AACF,iBAAA;AACF,aAAA;SACF;IACH;wGArBW,cAAc,EAAA,IAAA,EAAA,EAAA,EAAA,MAAA,EAAA,EAAA,CAAA,eAAA,CAAA,QAAA,EAAA,CAAA;yGAAd,cAAc,EAAA,CAAA;yGAAd,cAAc,EAAA,CAAA;;4FAAd,cAAc,EAAA,UAAA,EAAA,CAAA;kBAD1B,QAAQ;mBAAC,EAAE;;;AC1CZ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA8BG;;AC9BH;;AAEG;;;;"}

package/fesm2022/sd-angular-core-modules-keycloak.mjs

@@ -35,10 +35,10 @@ class SdKeycloakService {
     logout() { return this.keycloak.logout({ redirectUri: window.location.origin }); }
     getToken() { return this.keycloak.token; }
     getIsAuthenticated() { return this.keycloak.authenticated; }
-    static ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "19.2.17", ngImport: i0, type: SdKeycloakService, deps: [], target: i0.ɵɵFactoryTarget.Injectable });
-    static ɵprov = i0.ɵɵngDeclareInjectable({ minVersion: "12.0.0", version: "19.2.17", ngImport: i0, type: SdKeycloakService, providedIn: 'root' });
+    static ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "19.2.21", ngImport: i0, type: SdKeycloakService, deps: [], target: i0.ɵɵFactoryTarget.Injectable });
+    static ɵprov = i0.ɵɵngDeclareInjectable({ minVersion: "12.0.0", version: "19.2.21", ngImport: i0, type: SdKeycloakService, providedIn: 'root' });
 }
-i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "19.2.17", ngImport: i0, type: SdKeycloakService, decorators: [{
+i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "19.2.21", ngImport: i0, type: SdKeycloakService, decorators: [{
             type: Injectable,
             args: [{ providedIn: 'root' }]
         }] });
@@ -109,11 +109,11 @@ class SdKeycloakModule {
             ]
         };
     }
-    static ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "19.2.17", ngImport: i0, type: SdKeycloakModule, deps: [], target: i0.ɵɵFactoryTarget.NgModule });
-    static ɵmod = i0.ɵɵngDeclareNgModule({ minVersion: "14.0.0", version: "19.2.17", ngImport: i0, type: SdKeycloakModule });
-    static ɵinj = i0.ɵɵngDeclareInjector({ minVersion: "12.0.0", version: "19.2.17", ngImport: i0, type: SdKeycloakModule });
+    static ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "19.2.21", ngImport: i0, type: SdKeycloakModule, deps: [], target: i0.ɵɵFactoryTarget.NgModule });
+    static ɵmod = i0.ɵɵngDeclareNgModule({ minVersion: "14.0.0", version: "19.2.21", ngImport: i0, type: SdKeycloakModule });
+    static ɵinj = i0.ɵɵngDeclareInjector({ minVersion: "12.0.0", version: "19.2.21", ngImport: i0, type: SdKeycloakModule });
 }
-i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "19.2.17", ngImport: i0, type: SdKeycloakModule, decorators: [{
+i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "19.2.21", ngImport: i0, type: SdKeycloakModule, decorators: [{
             type: NgModule,
             args: [{}]
         }] });