npm - @sd-angular/core - Versions diffs - 19.0.11 → 19.0.12 - Mend

@sd-angular/core 19.0.11 → 19.0.12

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (87) hide show

package/fesm2022/sd-angular-core-modules-authom.mjs.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"sd-angular-core-modules-authom.mjs","sources":["../../../projects/sd-angular/modules/authom/authom.configuration.ts","../../../projects/sd-angular/modules/authom/authom.service.ts","../../../projects/sd-angular/modules/authom/authom.interceptor.ts","../../../projects/sd-angular/modules/authom/authom.module.ts","../../../projects/sd-angular/modules/authom/index.ts","../../../projects/sd-angular/modules/authom/sd-angular-core-modules-authom.ts"],"sourcesContent":["import { InjectionToken } from '@angular/core';\r\n\r\nexport interface SdAuthOmTenantConfig {\r\n domain: string;\r\n clientId: string;\r\n\r\n redirectUri?: string;\r\n audience?: string;\r\n organization?: string;\r\n scope?: string;\r\n\r\n secureRoutes?: string[];\r\n\r\n silentRefreshRedirectUri?: string;\r\n refreshThresholdSeconds?: number;\r\n authorizeTimeoutInSeconds?: number;\r\n}\r\n\r\nexport interface ISdAuthOmConfiguration {\r\n loadTenantConfig: () => Promise<SdAuthOmTenantConfig>;\r\n}\r\n\r\nexport const SD_AUTHOM_CONFIGURATION = new InjectionToken<ISdAuthOmConfiguration>('sd-authom.configuration');\r\n","import { Injectable, PLATFORM_ID, computed, inject, signal } from '@angular/core';\r\nimport { isPlatformBrowser } from '@angular/common';\r\nimport { SdAuthOmTenantConfig } from './authom.configuration';\r\nimport { StringUtilities } from '@sdcorejs/utils/fns';\r\n\r\nconst STORAGE_KEY_STATE = 'authom_state';\r\nconst STORAGE_KEY_CODE_VERIFIER = 'authom_code_verifier';\r\nconst STORAGE_KEY_RETURN_TO = 'authom_return_to';\r\n\r\nconst DEFAULT_SCOPE = 'openid profile email';\r\nconst DEFAULT_REFRESH_THRESHOLD_SECONDS = 30;\r\nconst DEFAULT_AUTHORIZE_TIMEOUT_SECONDS = 5;\r\n\r\n@Injectable({ providedIn: 'root' })\r\nexport class SdAuthOmService {\r\n private readonly platformId = inject(PLATFORM_ID);\r\n private readonly isBrowser = isPlatformBrowser(this.platformId);\r\n\r\n readonly accessToken = signal<string \| null>(null);\r\n readonly idTokenClaims = signal<Record<string, unknown> \| null>(null);\r\n readonly isAuthenticated = computed(() => this.accessToken() !== null);\r\n\r\n config!: SdAuthOmTenantConfig;\r\n private refreshTimer: ReturnType<typeof setTimeout> \| null = null;\r\n\r\n getAccessToken(): string \| null {\r\n return this.accessToken();\r\n }\r\n\r\n private base64UrlEncode(bytes: Uint8Array): string {\r\n let binary = '';\r\n for (let i = 0; i < bytes.length; i++) binary += String.fromCharCode(bytes[i]);\r\n return btoa(binary).replace(/\\+/g, '-').replace(/\\//g, '_').replace(/=+$/, '');\r\n }\r\n\r\n private generateCodeVerifier(): string {\r\n const bytes = new Uint8Array(32);\r\n crypto.getRandomValues(bytes);\r\n return this.base64UrlEncode(bytes);\r\n }\r\n\r\n private async generateCodeChallenge(verifier: string): Promise<string> {\r\n return StringUtilities.sha256(verifier);\r\n }\r\n\r\n private buildAuthorizeUrl(params: {\r\n state: string;\r\n codeChallenge: string;\r\n redirectUri: string;\r\n prompt?: 'none';\r\n }): string {\r\n const search = new URLSearchParams({\r\n response_type: 'code',\r\n client_id: this.config.clientId,\r\n redirect_uri: params.redirectUri,\r\n state: params.state,\r\n code_challenge: params.codeChallenge,\r\n code_challenge_method: 'S256',\r\n scope: this.config.scope \|\| DEFAULT_SCOPE,\r\n });\r\n if (this.config.audience) search.set('audience', this.config.audience);\r\n if (this.config.organization) search.set('organization', this.config.organization);\r\n if (params.prompt) search.set('prompt', params.prompt);\r\n return `https://${this.config.domain}/authorize?${search.toString()}`;\r\n }\r\n\r\n private getDefaultRedirectUri(): string {\r\n return this.config.redirectUri \|\| window.location.origin;\r\n }\r\n\r\n private getSilentRedirectUri(): string {\r\n return this.config.silentRefreshRedirectUri \|\| `${window.location.origin}/silent-authom.html`;\r\n }\r\n\r\n private decodeJwtPayload(token: string): Record<string, unknown> \| null {\r\n try {\r\n const parts = token.split('.');\r\n if (parts.length !== 3) return null;\r\n const padded = parts[1].replace(/-/g, '+').replace(/_/g, '/');\r\n const json = atob(padded + '==='.slice((padded.length + 3) % 4));\r\n return JSON.parse(json);\r\n } catch {\r\n return null;\r\n }\r\n }\r\n\r\n async login(options?: { returnTo?: string }): Promise<void> {\r\n if (!this.isBrowser) return;\r\n\r\n const state = crypto.randomUUID();\r\n const codeVerifier = this.generateCodeVerifier();\r\n const codeChallenge = await this.generateCodeChallenge(codeVerifier);\r\n const returnTo = options?.returnTo \|\| (window.location.pathname + window.location.search);\r\n\r\n sessionStorage.setItem(STORAGE_KEY_STATE, state);\r\n sessionStorage.setItem(STORAGE_KEY_CODE_VERIFIER, codeVerifier);\r\n sessionStorage.setItem(STORAGE_KEY_RETURN_TO, returnTo);\r\n\r\n window.location.href = this.buildAuthorizeUrl({\r\n state,\r\n codeChallenge,\r\n redirectUri: this.getDefaultRedirectUri(),\r\n });\r\n }\r\n\r\n logout(options?: { returnTo?: string }): void {\r\n if (!this.isBrowser) return;\r\n\r\n this.accessToken.set(null);\r\n this.idTokenClaims.set(null);\r\n if (this.refreshTimer) {\r\n clearTimeout(this.refreshTimer);\r\n this.refreshTimer = null;\r\n }\r\n\r\n const returnTo = options?.returnTo \|\| window.location.origin;\r\n const search = new URLSearchParams({\r\n client_id: this.config.clientId,\r\n returnTo,\r\n });\r\n window.location.href = `https://${this.config.domain}/v2/logout?${search.toString()}`;\r\n }\r\n\r\n private async exchangeCode(code: string, codeVerifier: string, redirectUri: string): Promise<boolean> {\r\n try {\r\n const body = new URLSearchParams({\r\n grant_type: 'authorization_code',\r\n code,\r\n code_verifier: codeVerifier,\r\n redirect_uri: redirectUri,\r\n client_id: this.config.clientId,\r\n });\r\n const res = await fetch(`https://${this.config.domain}/oauth/token`, {\r\n method: 'POST',\r\n headers: { 'Content-Type': 'application/x-www-form-urlencoded' },\r\n body: body.toString(),\r\n });\r\n if (!res.ok) return false;\r\n const data = await res.json() as { access_token?: string; id_token?: string };\r\n if (!data.access_token) return false;\r\n\r\n this.accessToken.set(data.access_token);\r\n if (data.id_token) {\r\n this.idTokenClaims.set(this.decodeJwtPayload(data.id_token));\r\n }\r\n this.scheduleRefresh(data.access_token);\r\n return true;\r\n } catch {\r\n return false;\r\n }\r\n }\r\n\r\n private scheduleRefresh(token: string): void {\r\n if (this.refreshTimer) {\r\n clearTimeout(this.refreshTimer);\r\n this.refreshTimer = null;\r\n }\r\n const claims = this.decodeJwtPayload(token);\r\n const exp = claims?.['exp'];\r\n if (typeof exp !== 'number') {\r\n // @i18n-ignore — dev console warning\r\n console.warn('[SdAuthOmService] Token không có exp — bỏ qua auto-refresh');\r\n return;\r\n }\r\n const threshold = this.config.refreshThresholdSeconds ?? DEFAULT_REFRESH_THRESHOLD_SECONDS;\r\n const nowSeconds = Math.floor(Date.now() / 1000);\r\n const delayMs = Math.max(0, (exp - nowSeconds - threshold) * 1000);\r\n this.refreshTimer = setTimeout(() => {\r\n this.silentRefresh();\r\n }, delayMs);\r\n }\r\n\r\n silentRefresh(): Promise<boolean> {\r\n if (!this.isBrowser) return Promise.resolve(false);\r\n\r\n return new Promise(async (resolve) => {\r\n const state = crypto.randomUUID();\r\n const codeVerifier = this.generateCodeVerifier();\r\n const codeChallenge = await this.generateCodeChallenge(codeVerifier);\r\n const redirectUri = this.getSilentRedirectUri();\r\n const timeoutMs = (this.config.authorizeTimeoutInSeconds ?? DEFAULT_AUTHORIZE_TIMEOUT_SECONDS) * 1000;\r\n\r\n const iframe = document.createElement('iframe');\r\n iframe.style.display = 'none';\r\n\r\n let done = false;\r\n const finish = (success: boolean) => {\r\n if (done) return;\r\n done = true;\r\n clearTimeout(timer);\r\n iframe.remove();\r\n window.removeEventListener('message', onMessage);\r\n resolve(success);\r\n };\r\n\r\n const timer = setTimeout(() => finish(false), timeoutMs);\r\n\r\n const onMessage = async (event: MessageEvent) => {\r\n if (event.origin !== window.location.origin) return;\r\n const data = event.data as { type?: string; code?: string; state?: string } \| null;\r\n if (!data \|\| typeof data !== 'object') return;\r\n\r\n if (data.type === 'AUTHOM_SILENT_SUCCESS' && data.code && data.state === state) {\r\n const ok = await this.exchangeCode(data.code, codeVerifier, redirectUri);\r\n if (!ok) {\r\n this.accessToken.set(null);\r\n this.idTokenClaims.set(null);\r\n }\r\n finish(ok);\r\n } else if (data.type === 'AUTHOM_SILENT_ERROR') {\r\n this.accessToken.set(null);\r\n this.idTokenClaims.set(null);\r\n finish(false);\r\n }\r\n };\r\n\r\n window.addEventListener('message', onMessage);\r\n\r\n iframe.src = this.buildAuthorizeUrl({\r\n state,\r\n codeChallenge,\r\n redirectUri,\r\n prompt: 'none',\r\n });\r\n document.body.appendChild(iframe);\r\n });\r\n }\r\n\r\n async handleCallback(): Promise<boolean> {\r\n if (!this.isBrowser) return false;\r\n\r\n const params = new URLSearchParams(window.location.search);\r\n const code = params.get('code');\r\n const state = params.get('state');\r\n if (!code) return false;\r\n\r\n const savedState = sessionStorage.getItem(STORAGE_KEY_STATE);\r\n const codeVerifier = sessionStorage.getItem(STORAGE_KEY_CODE_VERIFIER);\r\n const returnTo = sessionStorage.getItem(STORAGE_KEY_RETURN_TO);\r\n sessionStorage.removeItem(STORAGE_KEY_STATE);\r\n sessionStorage.removeItem(STORAGE_KEY_CODE_VERIFIER);\r\n\r\n if (state !== savedState \|\| !codeVerifier) {\r\n window.history.replaceState({}, '', window.location.pathname);\r\n sessionStorage.removeItem(STORAGE_KEY_RETURN_TO);\r\n return false;\r\n }\r\n\r\n const redirectUri = this.getDefaultRedirectUri();\r\n const ok = await this.exchangeCode(code, codeVerifier, redirectUri);\r\n\r\n if (returnTo) {\r\n sessionStorage.removeItem(STORAGE_KEY_RETURN_TO);\r\n window.history.replaceState({}, '', returnTo);\r\n } else {\r\n window.history.replaceState({}, '', window.location.pathname);\r\n }\r\n\r\n return ok;\r\n }\r\n\r\n async init(config: SdAuthOmTenantConfig): Promise<boolean> {\r\n this.config = config;\r\n if (!this.isBrowser) return false;\r\n\r\n const hasCode = new URLSearchParams(window.location.search).has('code');\r\n if (hasCode) {\r\n const ok = await this.handleCallback();\r\n if (ok) return true;\r\n }\r\n\r\n return this.silentRefresh();\r\n }\r\n}\r\n","import { HttpInterceptorFn } from '@angular/common/http';\r\nimport { inject } from '@angular/core';\r\nimport { SdAuthOmService } from './authom.service';\r\n\r\nconst escapeRegExp = (str: string): string => str.replace(/[.+?^${}()\|[\\]\\\\]/g, '\\\\$&');\r\n\r\nexport const matchGlob = (pattern: string, url: string): boolean => {\r\n const regexBody = pattern.split('').map(escapeRegExp).join('.');\r\n return new RegExp(`^${regexBody}$`).test(url);\r\n};\r\n\r\nexport const SdAuthOmInterceptor: HttpInterceptorFn = (req, next) => {\r\n const authom = inject(SdAuthOmService);\r\n const token = authom.getAccessToken();\r\n const config = authom.config;\r\n\r\n if (!token \|\| !config) return next(req);\r\n\r\n const isSecure = config.secureRoutes?.some(pattern => matchGlob(pattern, req.url));\r\n if (!isSecure) return next(req);\r\n\r\n const authReq = req.clone({\r\n headers: req.headers.set('Authorization', `Bearer ${token}`),\r\n });\r\n return next(authReq);\r\n};\r\n","import {\r\n ModuleWithProviders,\r\n NgModule,\r\n Provider,\r\n Type,\r\n EnvironmentProviders,\r\n makeEnvironmentProviders,\r\n provideAppInitializer,\r\n inject,\r\n APP_INITIALIZER,\r\n} from '@angular/core';\r\nimport { ISdAuthOmConfiguration, SD_AUTHOM_CONFIGURATION } from './authom.configuration';\r\nimport { SdAuthOmService } from './authom.service';\r\n\r\ninterface ProvideOptions {\r\n useClass?: Type<ISdAuthOmConfiguration>;\r\n // eslint-disable-next-line @typescript-eslint/no-explicit-any\r\n useFactory?: (...args: any[]) => ISdAuthOmConfiguration;\r\n // eslint-disable-next-line @typescript-eslint/no-explicit-any\r\n deps?: any[];\r\n}\r\n\r\nexport function provideSdAuthOm(options: ProvideOptions): EnvironmentProviders {\r\n const providers: Array<Provider \| EnvironmentProviders> = [SdAuthOmService];\r\n\r\n if (options.useFactory) {\r\n providers.push({ provide: SD_AUTHOM_CONFIGURATION, useFactory: options.useFactory, deps: options.deps \|\| [] });\r\n } else if (options.useClass) {\r\n providers.push({ provide: SD_AUTHOM_CONFIGURATION, useClass: options.useClass });\r\n }\r\n\r\n providers.push(\r\n provideAppInitializer(() => {\r\n const configLoader = inject(SD_AUTHOM_CONFIGURATION);\r\n const authom = inject(SdAuthOmService);\r\n return configLoader.loadTenantConfig().then((config) => authom.init(config));\r\n })\r\n );\r\n\r\n return makeEnvironmentProviders(providers);\r\n}\r\n\r\n@NgModule({})\r\nexport class SdAuthOmModule {\r\n static forRoot(options: ProvideOptions): ModuleWithProviders<SdAuthOmModule> {\r\n return {\r\n ngModule: SdAuthOmModule,\r\n providers: [\r\n SdAuthOmService,\r\n ...(options.useFactory\r\n ? [{ provide: SD_AUTHOM_CONFIGURATION, useFactory: options.useFactory, deps: options.deps \|\| [] }]\r\n : [{ provide: SD_AUTHOM_CONFIGURATION, useClass: options.useClass! }]\r\n ),\r\n {\r\n provide: APP_INITIALIZER,\r\n multi: true,\r\n useFactory: () => {\r\n const configLoader = inject(SD_AUTHOM_CONFIGURATION);\r\n const authom = inject(SdAuthOmService);\r\n return () => configLoader.loadTenantConfig().then((config) => authom.init(config));\r\n },\r\n },\r\n ],\r\n };\r\n }\r\n}\r\n","/*\r\n Module `authom` — OAuth 2.0 + PKCE authentication client cho AuthOM (Auth0-based).\r\n \r\n Cách dùng (standalone):\r\n * ```ts\r\n * import { provideHttpClient, withInterceptors } from '@angular/common/http';\r\n * import { provideSdAuthOm, SdAuthOmInterceptor } from '@sd-angular/core/modules/authom';\r\n \r\n export const appConfig: ApplicationConfig = {\r\n * providers: [\r\n * provideHttpClient(withInterceptors([SdAuthOmInterceptor])),\r\n * provideSdAuthOm({\r\n * useFactory: () => ({\r\n * loadTenantConfig: () => Promise.resolve({\r\n * domain: 'login.example.com',\r\n * clientId: 'YOUR_CLIENT_ID',\r\n * audience: 'https://api.example.com',\r\n * organization: 'org_xxx',\r\n * scope: 'openid profile email offline_access',\r\n * secureRoutes: ['https://api.example.com/'],\r\n }),\r\n * }),\r\n * }),\r\n * ],\r\n * };\r\n * ```\r\n \r\n Yêu cầu setup thêm:\r\n * 1. Copy file `silent-authom.html` từ source module này vào thư mục `public/` của app.\r\n * 2. App phải chạy trên HTTPS (hoặc localhost) — Web Crypto API yêu cầu secure context.\r\n /\r\nexport from './authom.configuration';\r\nexport * from './authom.service';\r\nexport * from './authom.interceptor';\r\nexport * from './authom.module';\r\n","/*\n Generated bundle index. Do not edit.\n /\n\nexport from './index';\n"],"names":[],"mappings":";;;;;MAsBa,uBAAuB,GAAG,IAAI,cAAc,CAAyB,yBAAyB;;ACjB3G,MAAM,iBAAiB,GAAG,cAAc;AACxC,MAAM,yBAAyB,GAAG,sBAAsB;AACxD,MAAM,qBAAqB,GAAG,kBAAkB;AAEhD,MAAM,aAAa,GAAG,sBAAsB;AAC5C,MAAM,iCAAiC,GAAG,EAAE;AAC5C,MAAM,iCAAiC,GAAG,CAAC;MAG9B,eAAe,CAAA;AACT,IAAA,UAAU,GAAG,MAAM,CAAC,WAAW,CAAC;AAChC,IAAA,SAAS,GAAG,iBAAiB,CAAC,IAAI,CAAC,UAAU,CAAC;AAEtD,IAAA,WAAW,GAAG,MAAM,CAAgB,IAAI,CAAC;AACzC,IAAA,aAAa,GAAG,MAAM,CAAiC,IAAI,CAAC;AAC5D,IAAA,eAAe,GAAG,QAAQ,CAAC,MAAM,IAAI,CAAC,WAAW,EAAE,KAAK,IAAI,CAAC;AAEtE,IAAA,MAAM;IACE,YAAY,GAAyC,IAAI;IAEjE,cAAc,GAAA;AACZ,QAAA,OAAO,IAAI,CAAC,WAAW,EAAE;IAC3B;AAEQ,IAAA,eAAe,CAAC,KAAiB,EAAA;QACvC,IAAI,MAAM,GAAG,EAAE;AACf,QAAA,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE;YAAE,MAAM,IAAI,MAAM,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAC9E,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC;IAChF;IAEQ,oBAAoB,GAAA;AAC1B,QAAA,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC;AAChC,QAAA,MAAM,CAAC,eAAe,CAAC,KAAK,CAAC;AAC7B,QAAA,OAAO,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC;IACpC;IAEQ,MAAM,qBAAqB,CAAC,QAAgB,EAAA;AAClD,QAAA,OAAO,eAAe,CAAC,MAAM,CAAC,QAAQ,CAAC;IACzC;AAEQ,IAAA,iBAAiB,CAAC,MAKzB,EAAA;AACC,QAAA,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC;AACjC,YAAA,aAAa,EAAE,MAAM;AACrB,YAAA,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ;YAC/B,YAAY,EAAE,MAAM,CAAC,WAAW;YAChC,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,cAAc,EAAE,MAAM,CAAC,aAAa;AACpC,YAAA,qBAAqB,EAAE,MAAM;AAC7B,YAAA,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK,IAAI,aAAa;AAC1C,SAAA,CAAC;AACF,QAAA,IAAI,IAAI,CAAC,MAAM,CAAC,QAAQ;YAAE,MAAM,CAAC,GAAG,CAAC,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC;AACtE,QAAA,IAAI,IAAI,CAAC,MAAM,CAAC,YAAY;YAAE,MAAM,CAAC,GAAG,CAAC,cAAc,EAAE,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC;QAClF,IAAI,MAAM,CAAC,MAAM;YAAE,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC;AACtD,QAAA,OAAO,CAAA,QAAA,EAAW,IAAI,CAAC,MAAM,CAAC,MAAM,CAAA,WAAA,EAAc,MAAM,CAAC,QAAQ,EAAE,CAAA,CAAE;IACvE;IAEQ,qBAAqB,GAAA;QAC3B,OAAO,IAAI,CAAC,MAAM,CAAC,WAAW,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM;IAC1D;IAEQ,oBAAoB,GAAA;AAC1B,QAAA,OAAO,IAAI,CAAC,MAAM,CAAC,wBAAwB,IAAI,CAAA,EAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,qBAAqB;IAC/F;AAEQ,IAAA,gBAAgB,CAAC,KAAa,EAAA;AACpC,QAAA,IAAI;YACF,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC;AAC9B,YAAA,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;AAAE,gBAAA,OAAO,IAAI;YACnC,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC;YAC7D,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;AAChE,YAAA,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;QACzB;AAAE,QAAA,MAAM;AACN,YAAA,OAAO,IAAI;QACb;IACF;IAEA,MAAM,KAAK,CAAC,OAA+B,EAAA;QACzC,IAAI,CAAC,IAAI,CAAC,SAAS;YAAE;AAErB,QAAA,MAAM,KAAK,GAAG,MAAM,CAAC,UAAU,EAAE;AACjC,QAAA,MAAM,YAAY,GAAG,IAAI,CAAC,oBAAoB,EAAE;QAChD,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,qBAAqB,CAAC,YAAY,CAAC;AACpE,QAAA,MAAM,QAAQ,GAAG,OAAO,EAAE,QAAQ,KAAK,MAAM,CAAC,QAAQ,CAAC,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC;AAEzF,QAAA,cAAc,CAAC,OAAO,CAAC,iBAAiB,EAAE,KAAK,CAAC;AAChD,QAAA,cAAc,CAAC,OAAO,CAAC,yBAAyB,EAAE,YAAY,CAAC;AAC/D,QAAA,cAAc,CAAC,OAAO,CAAC,qBAAqB,EAAE,QAAQ,CAAC;QAEvD,MAAM,CAAC,QAAQ,CAAC,IAAI,GAAG,IAAI,CAAC,iBAAiB,CAAC;YAC5C,KAAK;YACL,aAAa;AACb,YAAA,WAAW,EAAE,IAAI,CAAC,qBAAqB,EAAE;AAC1C,SAAA,CAAC;IACJ;AAEA,IAAA,MAAM,CAAC,OAA+B,EAAA;QACpC,IAAI,CAAC,IAAI,CAAC,SAAS;YAAE;AAErB,QAAA,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC;AAC1B,QAAA,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC;AAC5B,QAAA,IAAI,IAAI,CAAC,YAAY,EAAE;AACrB,YAAA,YAAY,CAAC,IAAI,CAAC,YAAY,CAAC;AAC/B,YAAA,IAAI,CAAC,YAAY,GAAG,IAAI;QAC1B;QAEA,MAAM,QAAQ,GAAG,OAAO,EAAE,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM;AAC5D,QAAA,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC;AACjC,YAAA,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ;YAC/B,QAAQ;AACT,SAAA,CAAC;AACF,QAAA,MAAM,CAAC,QAAQ,CAAC,IAAI,GAAG,WAAW,IAAI,CAAC,MAAM,CAAC,MAAM,CAAA,WAAA,EAAc,MAAM,CAAC,QAAQ,EAAE,EAAE;IACvF;AAEQ,IAAA,MAAM,YAAY,CAAC,IAAY,EAAE,YAAoB,EAAE,WAAmB,EAAA;AAChF,QAAA,IAAI;AACF,YAAA,MAAM,IAAI,GAAG,IAAI,eAAe,CAAC;AAC/B,gBAAA,UAAU,EAAE,oBAAoB;gBAChC,IAAI;AACJ,gBAAA,aAAa,EAAE,YAAY;AAC3B,gBAAA,YAAY,EAAE,WAAW;AACzB,gBAAA,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ;AAChC,aAAA,CAAC;AACF,YAAA,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,CAAA,QAAA,EAAW,IAAI,CAAC,MAAM,CAAC,MAAM,CAAA,YAAA,CAAc,EAAE;AACnE,gBAAA,MAAM,EAAE,MAAM;AACd,gBAAA,OAAO,EAAE,EAAE,cAAc,EAAE,mCAAmC,EAAE;AAChE,gBAAA,IAAI,EAAE,IAAI,CAAC,QAAQ,EAAE;AACtB,aAAA,CAAC;YACF,IAAI,CAAC,GAAG,CAAC,EAAE;AAAE,gBAAA,OAAO,KAAK;AACzB,YAAA,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAkD;YAC7E,IAAI,CAAC,IAAI,CAAC,YAAY;AAAE,gBAAA,OAAO,KAAK;YAEpC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC;AACvC,YAAA,IAAI,IAAI,CAAC,QAAQ,EAAE;AACjB,gBAAA,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YAC9D;AACA,YAAA,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,YAAY,CAAC;AACvC,YAAA,OAAO,IAAI;QACb;AAAE,QAAA,MAAM;AACN,YAAA,OAAO,KAAK;QACd;IACF;AAEQ,IAAA,eAAe,CAAC,KAAa,EAAA;AACnC,QAAA,IAAI,IAAI,CAAC,YAAY,EAAE;AACrB,YAAA,YAAY,CAAC,IAAI,CAAC,YAAY,CAAC;AAC/B,YAAA,IAAI,CAAC,YAAY,GAAG,IAAI;QAC1B;QACA,MAAM,MAAM,GAAG,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC;AAC3C,QAAA,MAAM,GAAG,GAAG,MAAM,GAAG,KAAK,CAAC;AAC3B,QAAA,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE;;AAE3B,YAAA,OAAO,CAAC,IAAI,CAAC,4DAA4D,CAAC;YAC1E;QACF;QACA,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,uBAAuB,IAAI,iCAAiC;AAC1F,QAAA,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;AAChD,QAAA,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,GAAG,GAAG,UAAU,GAAG,SAAS,IAAI,IAAI,CAAC;AAClE,QAAA,IAAI,CAAC,YAAY,GAAG,UAAU,CAAC,MAAK;YAClC,IAAI,CAAC,aAAa,EAAE;QACtB,CAAC,EAAE,OAAO,CAAC;IACb;IAEA,aAAa,GAAA;QACX,IAAI,CAAC,IAAI,CAAC,SAAS;AAAE,YAAA,OAAO,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC;AAElD,QAAA,OAAO,IAAI,OAAO,CAAC,OAAO,OAAO,KAAI;AACnC,YAAA,MAAM,KAAK,GAAG,MAAM,CAAC,UAAU,EAAE;AACjC,YAAA,MAAM,YAAY,GAAG,IAAI,CAAC,oBAAoB,EAAE;YAChD,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,qBAAqB,CAAC,YAAY,CAAC;AACpE,YAAA,MAAM,WAAW,GAAG,IAAI,CAAC,oBAAoB,EAAE;AAC/C,YAAA,MAAM,SAAS,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,yBAAyB,IAAI,iCAAiC,IAAI,IAAI;YAErG,MAAM,MAAM,GAAG,QAAQ,CAAC,aAAa,CAAC,QAAQ,CAAC;AAC/C,YAAA,MAAM,CAAC,KAAK,CAAC,OAAO,GAAG,MAAM;YAE7B,IAAI,IAAI,GAAG,KAAK;AAChB,YAAA,MAAM,MAAM,GAAG,CAAC,OAAgB,KAAI;AAClC,gBAAA,IAAI,IAAI;oBAAE;gBACV,IAAI,GAAG,IAAI;gBACX,YAAY,CAAC,KAAK,CAAC;gBACnB,MAAM,CAAC,MAAM,EAAE;AACf,gBAAA,MAAM,CAAC,mBAAmB,CAAC,SAAS,EAAE,SAAS,CAAC;gBAChD,OAAO,CAAC,OAAO,CAAC;AAClB,YAAA,CAAC;AAED,YAAA,MAAM,KAAK,GAAG,UAAU,CAAC,MAAM,MAAM,CAAC,KAAK,CAAC,EAAE,SAAS,CAAC;AAExD,YAAA,MAAM,SAAS,GAAG,OAAO,KAAmB,KAAI;gBAC9C,IAAI,KAAK,CAAC,MAAM,KAAK,MAAM,CAAC,QAAQ,CAAC,MAAM;oBAAE;AAC7C,gBAAA,MAAM,IAAI,GAAG,KAAK,CAAC,IAA+D;AAClF,gBAAA,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ;oBAAE;AAEvC,gBAAA,IAAI,IAAI,CAAC,IAAI,KAAK,uBAAuB,IAAI,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,KAAK,KAAK,KAAK,EAAE;AAC9E,oBAAA,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,YAAY,EAAE,WAAW,CAAC;oBACxE,IAAI,CAAC,EAAE,EAAE;AACP,wBAAA,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC;AAC1B,wBAAA,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC;oBAC9B;oBACA,MAAM,CAAC,EAAE,CAAC;gBACZ;AAAO,qBAAA,IAAI,IAAI,CAAC,IAAI,KAAK,qBAAqB,EAAE;AAC9C,oBAAA,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC;AAC1B,oBAAA,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC;oBAC5B,MAAM,CAAC,KAAK,CAAC;gBACf;AACF,YAAA,CAAC;AAED,YAAA,MAAM,CAAC,gBAAgB,CAAC,SAAS,EAAE,SAAS,CAAC;AAE7C,YAAA,MAAM,CAAC,GAAG,GAAG,IAAI,CAAC,iBAAiB,CAAC;gBAClC,KAAK;gBACL,aAAa;gBACb,WAAW;AACX,gBAAA,MAAM,EAAE,MAAM;AACf,aAAA,CAAC;AACF,YAAA,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC;AACnC,QAAA,CAAC,CAAC;IACJ;AAEA,IAAA,MAAM,cAAc,GAAA;QAClB,IAAI,CAAC,IAAI,CAAC,SAAS;AAAE,YAAA,OAAO,KAAK;QAEjC,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC;QAC1D,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC;QAC/B,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC;AACjC,QAAA,IAAI,CAAC,IAAI;AAAE,YAAA,OAAO,KAAK;QAEvB,MAAM,UAAU,GAAG,cAAc,CAAC,OAAO,CAAC,iBAAiB,CAAC;QAC5D,MAAM,YAAY,GAAG,cAAc,CAAC,OAAO,CAAC,yBAAyB,CAAC;QACtE,MAAM,QAAQ,GAAG,cAAc,CAAC,OAAO,CAAC,qBAAqB,CAAC;AAC9D,QAAA,cAAc,CAAC,UAAU,CAAC,iBAAiB,CAAC;AAC5C,QAAA,cAAc,CAAC,UAAU,CAAC,yBAAyB,CAAC;AAEpD,QAAA,IAAI,KAAK,KAAK,UAAU,IAAI,CAAC,YAAY,EAAE;AACzC,YAAA,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,EAAE,EAAE,EAAE,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC;AAC7D,YAAA,cAAc,CAAC,UAAU,CAAC,qBAAqB,CAAC;AAChD,YAAA,OAAO,KAAK;QACd;AAEA,QAAA,MAAM,WAAW,GAAG,IAAI,CAAC,qBAAqB,EAAE;AAChD,QAAA,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,YAAY,EAAE,WAAW,CAAC;QAEnE,IAAI,QAAQ,EAAE;AACZ,YAAA,cAAc,CAAC,UAAU,CAAC,qBAAqB,CAAC;YAChD,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,EAAE,EAAE,EAAE,QAAQ,CAAC;QAC/C;aAAO;AACL,YAAA,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,EAAE,EAAE,EAAE,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAC/D;AAEA,QAAA,OAAO,EAAE;IACX;IAEA,MAAM,IAAI,CAAC,MAA4B,EAAA;AACrC,QAAA,IAAI,CAAC,MAAM,GAAG,MAAM;QACpB,IAAI,CAAC,IAAI,CAAC,SAAS;AAAE,YAAA,OAAO,KAAK;AAEjC,QAAA,MAAM,OAAO,GAAG,IAAI,eAAe,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC;QACvE,IAAI,OAAO,EAAE;AACX,YAAA,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,cAAc,EAAE;AACtC,YAAA,IAAI,EAAE;AAAE,gBAAA,OAAO,IAAI;QACrB;AAEA,QAAA,OAAO,IAAI,CAAC,aAAa,EAAE;IAC7B;wGAlQW,eAAe,EAAA,IAAA,EAAA,EAAA,EAAA,MAAA,EAAA,EAAA,CAAA,eAAA,CAAA,UAAA,EAAA,CAAA;AAAf,IAAA,OAAA,KAAA,GAAA,EAAA,CAAA,qBAAA,CAAA,EAAA,UAAA,EAAA,QAAA,EAAA,OAAA,EAAA,SAAA,EAAA,QAAA,EAAA,EAAA,EAAA,IAAA,EAAA,eAAe,cADF,MAAM,EAAA,CAAA;;4FACnB,eAAe,EAAA,UAAA,EAAA,CAAA;kBAD3B,UAAU;mBAAC,EAAE,UAAU,EAAE,MAAM,EAAE;;;ACTlC,MAAM,YAAY,GAAG,CAAC,GAAW,KAAa,GAAG,CAAC,OAAO,CAAC,oBAAoB,EAAE,MAAM,CAAC;MAE1E,SAAS,GAAG,CAAC,OAAe,EAAE,GAAW,KAAa;AACjE,IAAA,MAAM,SAAS,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;AACjE,IAAA,OAAO,IAAI,MAAM,CAAC,CAAA,CAAA,EAAI,SAAS,CAAA,CAAA,CAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;AAC/C;MAEa,mBAAmB,GAAsB,CAAC,GAAG,EAAE,IAAI,KAAI;AAClE,IAAA,MAAM,MAAM,GAAG,MAAM,CAAC,eAAe,CAAC;AACtC,IAAA,MAAM,KAAK,GAAG,MAAM,CAAC,cAAc,EAAE;AACrC,IAAA,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM;AAE5B,IAAA,IAAI,CAAC,KAAK,IAAI,CAAC,MAAM;AAAE,QAAA,OAAO,IAAI,CAAC,GAAG,CAAC;IAEvC,MAAM,QAAQ,GAAG,MAAM,CAAC,YAAY,EAAE,IAAI,CAAC,OAAO,IAAI,SAAS,CAAC,OAAO,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC;AAClF,IAAA,IAAI,CAAC,QAAQ;AAAE,QAAA,OAAO,IAAI,CAAC,GAAG,CAAC;AAE/B,IAAA,MAAM,OAAO,GAAG,GAAG,CAAC,KAAK,CAAC;AACxB,QAAA,OAAO,EAAE,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,CAAA,OAAA,EAAU,KAAK,CAAA,CAAE,CAAC;AAC7D,KAAA,CAAC;AACF,IAAA,OAAO,IAAI,CAAC,OAAO,CAAC;AACtB;;ACHM,SAAU,eAAe,CAAC,OAAuB,EAAA;AACrD,IAAA,MAAM,SAAS,GAA2C,CAAC,eAAe,CAAC;AAE3E,IAAA,IAAI,OAAO,CAAC,UAAU,EAAE;QACtB,SAAS,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,uBAAuB,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,EAAE,EAAE,CAAC;IAChH;AAAO,SAAA,IAAI,OAAO,CAAC,QAAQ,EAAE;AAC3B,QAAA,SAAS,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,uBAAuB,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC;IAClF;AAEA,IAAA,SAAS,CAAC,IAAI,CACZ,qBAAqB,CAAC,MAAK;AACzB,QAAA,MAAM,YAAY,GAAG,MAAM,CAAC,uBAAuB,CAAC;AACpD,QAAA,MAAM,MAAM,GAAG,MAAM,CAAC,eAAe,CAAC;AACtC,QAAA,OAAO,YAAY,CAAC,gBAAgB,EAAE,CAAC,IAAI,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC9E,CAAC,CAAC,CACH;AAED,IAAA,OAAO,wBAAwB,CAAC,SAAS,CAAC;AAC5C;MAGa,cAAc,CAAA;IACzB,OAAO,OAAO,CAAC,OAAuB,EAAA;QACpC,OAAO;AACL,YAAA,QAAQ,EAAE,cAAc;AACxB,YAAA,SAAS,EAAE;gBACT,eAAe;gBACf,IAAI,OAAO,CAAC;sBACR,CAAC,EAAE,OAAO,EAAE,uBAAuB,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,EAAE,EAAE;AACjG,sBAAE,CAAC,EAAE,OAAO,EAAE,uBAAuB,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAS,EAAE,CAAC,CACtE;AACD,gBAAA;AACE,oBAAA,OAAO,EAAE,eAAe;AACxB,oBAAA,KAAK,EAAE,IAAI;oBACX,UAAU,EAAE,MAAK;AACf,wBAAA,MAAM,YAAY,GAAG,MAAM,CAAC,uBAAuB,CAAC;AACpD,wBAAA,MAAM,MAAM,GAAG,MAAM,CAAC,eAAe,CAAC;wBACtC,OAAO,MAAM,YAAY,CAAC,gBAAgB,EAAE,CAAC,IAAI,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;oBACpF,CAAC;AACF,iBAAA;AACF,aAAA;SACF;IACH;wGArBW,cAAc,EAAA,IAAA,EAAA,EAAA,EAAA,MAAA,EAAA,EAAA,CAAA,eAAA,CAAA,QAAA,EAAA,CAAA;yGAAd,cAAc,EAAA,CAAA;yGAAd,cAAc,EAAA,CAAA;;4FAAd,cAAc,EAAA,UAAA,EAAA,CAAA;kBAD1B,QAAQ;mBAAC,EAAE;;;AC1CZ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA8BG;;AC9BH;;AAEG;;;;"}
1	+ {"version":3,"file":"sd-angular-core-modules-authom.mjs","sources":["../../../projects/sd-angular/modules/authom/authom.configuration.ts","../../../projects/sd-angular/modules/authom/authom.service.ts","../../../projects/sd-angular/modules/authom/authom.interceptor.ts","../../../projects/sd-angular/modules/authom/authom.module.ts","../../../projects/sd-angular/modules/authom/index.ts","../../../projects/sd-angular/modules/authom/sd-angular-core-modules-authom.ts"],"sourcesContent":["import { InjectionToken } from '@angular/core';\n\nexport interface SdAuthOmTenantConfig {\n domain: string;\n clientId: string;\n\n redirectUri?: string;\n audience?: string;\n organization?: string;\n scope?: string;\n\n secureRoutes?: string[];\n\n silentRefreshRedirectUri?: string;\n refreshThresholdSeconds?: number;\n authorizeTimeoutInSeconds?: number;\n}\n\nexport interface ISdAuthOmConfiguration {\n loadTenantConfig: () => Promise<SdAuthOmTenantConfig>;\n}\n\nexport const SD_AUTHOM_CONFIGURATION = new InjectionToken<ISdAuthOmConfiguration>('sd-authom.configuration');\n","import { Injectable, PLATFORM_ID, computed, inject, signal } from '@angular/core';\r\nimport { isPlatformBrowser } from '@angular/common';\r\nimport { SdAuthOmTenantConfig } from './authom.configuration';\r\nimport { StringUtilities } from '@sdcorejs/utils/fns';\r\n\r\nconst STORAGE_KEY_STATE = 'authom_state';\r\nconst STORAGE_KEY_CODE_VERIFIER = 'authom_code_verifier';\r\nconst STORAGE_KEY_RETURN_TO = 'authom_return_to';\r\n\r\nconst DEFAULT_SCOPE = 'openid profile email';\r\nconst DEFAULT_REFRESH_THRESHOLD_SECONDS = 30;\r\nconst DEFAULT_AUTHORIZE_TIMEOUT_SECONDS = 5;\r\n\r\n@Injectable({ providedIn: 'root' })\r\nexport class SdAuthOmService {\r\n private readonly platformId = inject(PLATFORM_ID);\r\n private readonly isBrowser = isPlatformBrowser(this.platformId);\r\n\r\n readonly accessToken = signal<string \| null>(null);\r\n readonly idTokenClaims = signal<Record<string, unknown> \| null>(null);\r\n readonly isAuthenticated = computed(() => this.accessToken() !== null);\r\n\r\n config!: SdAuthOmTenantConfig;\r\n private refreshTimer: ReturnType<typeof setTimeout> \| null = null;\r\n\r\n getAccessToken(): string \| null {\r\n return this.accessToken();\r\n }\r\n\r\n private base64UrlEncode(bytes: Uint8Array): string {\r\n let binary = '';\r\n for (let i = 0; i < bytes.length; i++) binary += String.fromCharCode(bytes[i]);\r\n return btoa(binary).replace(/\\+/g, '-').replace(/\\//g, '_').replace(/=+$/, '');\r\n }\r\n\r\n private generateCodeVerifier(): string {\r\n const bytes = new Uint8Array(32);\r\n crypto.getRandomValues(bytes);\r\n return this.base64UrlEncode(bytes);\r\n }\r\n\r\n private async generateCodeChallenge(verifier: string): Promise<string> {\r\n return StringUtilities.sha256(verifier);\r\n }\r\n\r\n private buildAuthorizeUrl(params: {\r\n state: string;\r\n codeChallenge: string;\r\n redirectUri: string;\r\n prompt?: 'none';\r\n }): string {\r\n const search = new URLSearchParams({\r\n response_type: 'code',\r\n client_id: this.config.clientId,\r\n redirect_uri: params.redirectUri,\r\n state: params.state,\r\n code_challenge: params.codeChallenge,\r\n code_challenge_method: 'S256',\r\n scope: this.config.scope \|\| DEFAULT_SCOPE,\r\n });\r\n if (this.config.audience) search.set('audience', this.config.audience);\r\n if (this.config.organization) search.set('organization', this.config.organization);\r\n if (params.prompt) search.set('prompt', params.prompt);\r\n return `https://${this.config.domain}/authorize?${search.toString()}`;\r\n }\r\n\r\n private getDefaultRedirectUri(): string {\r\n return this.config.redirectUri \|\| window.location.origin;\r\n }\r\n\r\n private getSilentRedirectUri(): string {\r\n return this.config.silentRefreshRedirectUri \|\| `${window.location.origin}/silent-authom.html`;\r\n }\r\n\r\n private decodeJwtPayload(token: string): Record<string, unknown> \| null {\r\n try {\r\n const parts = token.split('.');\r\n if (parts.length !== 3) return null;\r\n const padded = parts[1].replace(/-/g, '+').replace(/_/g, '/');\r\n const json = atob(padded + '==='.slice((padded.length + 3) % 4));\r\n return JSON.parse(json);\r\n } catch {\r\n return null;\r\n }\r\n }\r\n\r\n async login(options?: { returnTo?: string }): Promise<void> {\r\n if (!this.isBrowser) return;\r\n\r\n const state = crypto.randomUUID();\r\n const codeVerifier = this.generateCodeVerifier();\r\n const codeChallenge = await this.generateCodeChallenge(codeVerifier);\r\n const returnTo = options?.returnTo \|\| (window.location.pathname + window.location.search);\r\n\r\n sessionStorage.setItem(STORAGE_KEY_STATE, state);\r\n sessionStorage.setItem(STORAGE_KEY_CODE_VERIFIER, codeVerifier);\r\n sessionStorage.setItem(STORAGE_KEY_RETURN_TO, returnTo);\r\n\r\n window.location.href = this.buildAuthorizeUrl({\r\n state,\r\n codeChallenge,\r\n redirectUri: this.getDefaultRedirectUri(),\r\n });\r\n }\r\n\r\n logout(options?: { returnTo?: string }): void {\r\n if (!this.isBrowser) return;\r\n\r\n this.accessToken.set(null);\r\n this.idTokenClaims.set(null);\r\n if (this.refreshTimer) {\r\n clearTimeout(this.refreshTimer);\r\n this.refreshTimer = null;\r\n }\r\n\r\n const returnTo = options?.returnTo \|\| window.location.origin;\r\n const search = new URLSearchParams({\r\n client_id: this.config.clientId,\r\n returnTo,\r\n });\r\n window.location.href = `https://${this.config.domain}/v2/logout?${search.toString()}`;\r\n }\r\n\r\n private async exchangeCode(code: string, codeVerifier: string, redirectUri: string): Promise<boolean> {\r\n try {\r\n const body = new URLSearchParams({\r\n grant_type: 'authorization_code',\r\n code,\r\n code_verifier: codeVerifier,\r\n redirect_uri: redirectUri,\r\n client_id: this.config.clientId,\r\n });\r\n const res = await fetch(`https://${this.config.domain}/oauth/token`, {\r\n method: 'POST',\r\n headers: { 'Content-Type': 'application/x-www-form-urlencoded' },\r\n body: body.toString(),\r\n });\r\n if (!res.ok) return false;\r\n const data = await res.json() as { access_token?: string; id_token?: string };\r\n if (!data.access_token) return false;\r\n\r\n this.accessToken.set(data.access_token);\r\n if (data.id_token) {\r\n this.idTokenClaims.set(this.decodeJwtPayload(data.id_token));\r\n }\r\n this.scheduleRefresh(data.access_token);\r\n return true;\r\n } catch {\r\n return false;\r\n }\r\n }\r\n\r\n private scheduleRefresh(token: string): void {\r\n if (this.refreshTimer) {\r\n clearTimeout(this.refreshTimer);\r\n this.refreshTimer = null;\r\n }\r\n const claims = this.decodeJwtPayload(token);\r\n const exp = claims?.['exp'];\r\n if (typeof exp !== 'number') {\r\n // @i18n-ignore — dev console warning\r\n console.warn('[SdAuthOmService] Token không có exp — bỏ qua auto-refresh');\r\n return;\r\n }\r\n const threshold = this.config.refreshThresholdSeconds ?? DEFAULT_REFRESH_THRESHOLD_SECONDS;\r\n const nowSeconds = Math.floor(Date.now() / 1000);\r\n const delayMs = Math.max(0, (exp - nowSeconds - threshold) * 1000);\r\n this.refreshTimer = setTimeout(() => {\r\n this.silentRefresh();\r\n }, delayMs);\r\n }\r\n\r\n silentRefresh(): Promise<boolean> {\r\n if (!this.isBrowser) return Promise.resolve(false);\r\n\r\n return new Promise(async (resolve) => {\r\n const state = crypto.randomUUID();\r\n const codeVerifier = this.generateCodeVerifier();\r\n const codeChallenge = await this.generateCodeChallenge(codeVerifier);\r\n const redirectUri = this.getSilentRedirectUri();\r\n const timeoutMs = (this.config.authorizeTimeoutInSeconds ?? DEFAULT_AUTHORIZE_TIMEOUT_SECONDS) * 1000;\r\n\r\n const iframe = document.createElement('iframe');\r\n iframe.style.display = 'none';\r\n\r\n let done = false;\r\n const finish = (success: boolean) => {\r\n if (done) return;\r\n done = true;\r\n clearTimeout(timer);\r\n iframe.remove();\r\n window.removeEventListener('message', onMessage);\r\n resolve(success);\r\n };\r\n\r\n const timer = setTimeout(() => finish(false), timeoutMs);\r\n\r\n const onMessage = async (event: MessageEvent) => {\r\n if (event.origin !== window.location.origin) return;\r\n const data = event.data as { type?: string; code?: string; state?: string } \| null;\r\n if (!data \|\| typeof data !== 'object') return;\r\n\r\n if (data.type === 'AUTHOM_SILENT_SUCCESS' && data.code && data.state === state) {\r\n const ok = await this.exchangeCode(data.code, codeVerifier, redirectUri);\r\n if (!ok) {\r\n this.accessToken.set(null);\r\n this.idTokenClaims.set(null);\r\n }\r\n finish(ok);\r\n } else if (data.type === 'AUTHOM_SILENT_ERROR') {\r\n this.accessToken.set(null);\r\n this.idTokenClaims.set(null);\r\n finish(false);\r\n }\r\n };\r\n\r\n window.addEventListener('message', onMessage);\r\n\r\n iframe.src = this.buildAuthorizeUrl({\r\n state,\r\n codeChallenge,\r\n redirectUri,\r\n prompt: 'none',\r\n });\r\n document.body.appendChild(iframe);\r\n });\r\n }\r\n\r\n async handleCallback(): Promise<boolean> {\r\n if (!this.isBrowser) return false;\r\n\r\n const params = new URLSearchParams(window.location.search);\r\n const code = params.get('code');\r\n const state = params.get('state');\r\n if (!code) return false;\r\n\r\n const savedState = sessionStorage.getItem(STORAGE_KEY_STATE);\r\n const codeVerifier = sessionStorage.getItem(STORAGE_KEY_CODE_VERIFIER);\r\n const returnTo = sessionStorage.getItem(STORAGE_KEY_RETURN_TO);\r\n sessionStorage.removeItem(STORAGE_KEY_STATE);\r\n sessionStorage.removeItem(STORAGE_KEY_CODE_VERIFIER);\r\n\r\n if (state !== savedState \|\| !codeVerifier) {\r\n window.history.replaceState({}, '', window.location.pathname);\r\n sessionStorage.removeItem(STORAGE_KEY_RETURN_TO);\r\n return false;\r\n }\r\n\r\n const redirectUri = this.getDefaultRedirectUri();\r\n const ok = await this.exchangeCode(code, codeVerifier, redirectUri);\r\n\r\n if (returnTo) {\r\n sessionStorage.removeItem(STORAGE_KEY_RETURN_TO);\r\n window.history.replaceState({}, '', returnTo);\r\n } else {\r\n window.history.replaceState({}, '', window.location.pathname);\r\n }\r\n\r\n return ok;\r\n }\r\n\r\n async init(config: SdAuthOmTenantConfig): Promise<boolean> {\r\n this.config = config;\r\n if (!this.isBrowser) return false;\r\n\r\n const hasCode = new URLSearchParams(window.location.search).has('code');\r\n if (hasCode) {\r\n const ok = await this.handleCallback();\r\n if (ok) return true;\r\n }\r\n\r\n return this.silentRefresh();\r\n }\r\n}\r\n","import { HttpInterceptorFn } from '@angular/common/http';\nimport { inject } from '@angular/core';\nimport { SdAuthOmService } from './authom.service';\n\nconst escapeRegExp = (str: string): string => str.replace(/[.+?^${}()\|[\\]\\\\]/g, '\\\\$&');\n\nexport const matchGlob = (pattern: string, url: string): boolean => {\n const regexBody = pattern.split('').map(escapeRegExp).join('.');\n return new RegExp(`^${regexBody}$`).test(url);\n};\n\nexport const SdAuthOmInterceptor: HttpInterceptorFn = (req, next) => {\n const authom = inject(SdAuthOmService);\n const token = authom.getAccessToken();\n const config = authom.config;\n\n if (!token \|\| !config) return next(req);\n\n const isSecure = config.secureRoutes?.some(pattern => matchGlob(pattern, req.url));\n if (!isSecure) return next(req);\n\n const authReq = req.clone({\n headers: req.headers.set('Authorization', `Bearer ${token}`),\n });\n return next(authReq);\n};\n","import {\n ModuleWithProviders,\n NgModule,\n Provider,\n Type,\n EnvironmentProviders,\n makeEnvironmentProviders,\n provideAppInitializer,\n inject,\n APP_INITIALIZER,\n} from '@angular/core';\nimport { ISdAuthOmConfiguration, SD_AUTHOM_CONFIGURATION } from './authom.configuration';\nimport { SdAuthOmService } from './authom.service';\n\ninterface ProvideOptions {\n useClass?: Type<ISdAuthOmConfiguration>;\n // eslint-disable-next-line @typescript-eslint/no-explicit-any\n useFactory?: (...args: any[]) => ISdAuthOmConfiguration;\n // eslint-disable-next-line @typescript-eslint/no-explicit-any\n deps?: any[];\n}\n\nexport function provideSdAuthOm(options: ProvideOptions): EnvironmentProviders {\n const providers: Array<Provider \| EnvironmentProviders> = [SdAuthOmService];\n\n if (options.useFactory) {\n providers.push({ provide: SD_AUTHOM_CONFIGURATION, useFactory: options.useFactory, deps: options.deps \|\| [] });\n } else if (options.useClass) {\n providers.push({ provide: SD_AUTHOM_CONFIGURATION, useClass: options.useClass });\n }\n\n providers.push(\n provideAppInitializer(() => {\n const configLoader = inject(SD_AUTHOM_CONFIGURATION);\n const authom = inject(SdAuthOmService);\n return configLoader.loadTenantConfig().then((config) => authom.init(config));\n })\n );\n\n return makeEnvironmentProviders(providers);\n}\n\n@NgModule({})\nexport class SdAuthOmModule {\n static forRoot(options: ProvideOptions): ModuleWithProviders<SdAuthOmModule> {\n return {\n ngModule: SdAuthOmModule,\n providers: [\n SdAuthOmService,\n ...(options.useFactory\n ? [{ provide: SD_AUTHOM_CONFIGURATION, useFactory: options.useFactory, deps: options.deps \|\| [] }]\n : [{ provide: SD_AUTHOM_CONFIGURATION, useClass: options.useClass! }]\n ),\n {\n provide: APP_INITIALIZER,\n multi: true,\n useFactory: () => {\n const configLoader = inject(SD_AUTHOM_CONFIGURATION);\n const authom = inject(SdAuthOmService);\n return () => configLoader.loadTenantConfig().then((config) => authom.init(config));\n },\n },\n ],\n };\n }\n}\n","/*\n Module `authom` — OAuth 2.0 + PKCE authentication client cho AuthOM (Auth0-based).\n \n Cách dùng (standalone):\n * ```ts\n * import { provideHttpClient, withInterceptors } from '@angular/common/http';\n * import { provideSdAuthOm, SdAuthOmInterceptor } from '@sd-angular/core/modules/authom';\n \n export const appConfig: ApplicationConfig = {\n * providers: [\n * provideHttpClient(withInterceptors([SdAuthOmInterceptor])),\n * provideSdAuthOm({\n * useFactory: () => ({\n * loadTenantConfig: () => Promise.resolve({\n * domain: 'login.example.com',\n * clientId: 'YOUR_CLIENT_ID',\n * audience: 'https://api.example.com',\n * organization: 'org_xxx',\n * scope: 'openid profile email offline_access',\n * secureRoutes: ['https://api.example.com/'],\n }),\n * }),\n * }),\n * ],\n * };\n * ```\n \n Yêu cầu setup thêm:\n * 1. Copy file `silent-authom.html` từ source module này vào thư mục `public/` của app.\n * 2. App phải chạy trên HTTPS (hoặc localhost) — Web Crypto API yêu cầu secure context.\n /\nexport from './authom.configuration';\nexport * from './authom.service';\nexport * from './authom.interceptor';\nexport * from './authom.module';\n","/*\n Generated bundle index. Do not edit.\n /\n\nexport from './index';\n"],"names":[],"mappings":";;;;;MAsBa,uBAAuB,GAAG,IAAI,cAAc,CAAyB,yBAAyB;;ACjB3G,MAAM,iBAAiB,GAAG,cAAc;AACxC,MAAM,yBAAyB,GAAG,sBAAsB;AACxD,MAAM,qBAAqB,GAAG,kBAAkB;AAEhD,MAAM,aAAa,GAAG,sBAAsB;AAC5C,MAAM,iCAAiC,GAAG,EAAE;AAC5C,MAAM,iCAAiC,GAAG,CAAC;MAG9B,eAAe,CAAA;AACT,IAAA,UAAU,GAAG,MAAM,CAAC,WAAW,CAAC;AAChC,IAAA,SAAS,GAAG,iBAAiB,CAAC,IAAI,CAAC,UAAU,CAAC;AAEtD,IAAA,WAAW,GAAG,MAAM,CAAgB,IAAI,CAAC;AACzC,IAAA,aAAa,GAAG,MAAM,CAAiC,IAAI,CAAC;AAC5D,IAAA,eAAe,GAAG,QAAQ,CAAC,MAAM,IAAI,CAAC,WAAW,EAAE,KAAK,IAAI,CAAC;AAEtE,IAAA,MAAM;IACE,YAAY,GAAyC,IAAI;IAEjE,cAAc,GAAA;AACZ,QAAA,OAAO,IAAI,CAAC,WAAW,EAAE;IAC3B;AAEQ,IAAA,eAAe,CAAC,KAAiB,EAAA;QACvC,IAAI,MAAM,GAAG,EAAE;AACf,QAAA,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE;YAAE,MAAM,IAAI,MAAM,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAC9E,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC;IAChF;IAEQ,oBAAoB,GAAA;AAC1B,QAAA,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC;AAChC,QAAA,MAAM,CAAC,eAAe,CAAC,KAAK,CAAC;AAC7B,QAAA,OAAO,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC;IACpC;IAEQ,MAAM,qBAAqB,CAAC,QAAgB,EAAA;AAClD,QAAA,OAAO,eAAe,CAAC,MAAM,CAAC,QAAQ,CAAC;IACzC;AAEQ,IAAA,iBAAiB,CAAC,MAKzB,EAAA;AACC,QAAA,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC;AACjC,YAAA,aAAa,EAAE,MAAM;AACrB,YAAA,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ;YAC/B,YAAY,EAAE,MAAM,CAAC,WAAW;YAChC,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,cAAc,EAAE,MAAM,CAAC,aAAa;AACpC,YAAA,qBAAqB,EAAE,MAAM;AAC7B,YAAA,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK,IAAI,aAAa;AAC1C,SAAA,CAAC;AACF,QAAA,IAAI,IAAI,CAAC,MAAM,CAAC,QAAQ;YAAE,MAAM,CAAC,GAAG,CAAC,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC;AACtE,QAAA,IAAI,IAAI,CAAC,MAAM,CAAC,YAAY;YAAE,MAAM,CAAC,GAAG,CAAC,cAAc,EAAE,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC;QAClF,IAAI,MAAM,CAAC,MAAM;YAAE,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC;AACtD,QAAA,OAAO,CAAA,QAAA,EAAW,IAAI,CAAC,MAAM,CAAC,MAAM,CAAA,WAAA,EAAc,MAAM,CAAC,QAAQ,EAAE,CAAA,CAAE;IACvE;IAEQ,qBAAqB,GAAA;QAC3B,OAAO,IAAI,CAAC,MAAM,CAAC,WAAW,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM;IAC1D;IAEQ,oBAAoB,GAAA;AAC1B,QAAA,OAAO,IAAI,CAAC,MAAM,CAAC,wBAAwB,IAAI,CAAA,EAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,qBAAqB;IAC/F;AAEQ,IAAA,gBAAgB,CAAC,KAAa,EAAA;AACpC,QAAA,IAAI;YACF,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC;AAC9B,YAAA,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;AAAE,gBAAA,OAAO,IAAI;YACnC,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC;YAC7D,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;AAChE,YAAA,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;QACzB;AAAE,QAAA,MAAM;AACN,YAAA,OAAO,IAAI;QACb;IACF;IAEA,MAAM,KAAK,CAAC,OAA+B,EAAA;QACzC,IAAI,CAAC,IAAI,CAAC,SAAS;YAAE;AAErB,QAAA,MAAM,KAAK,GAAG,MAAM,CAAC,UAAU,EAAE;AACjC,QAAA,MAAM,YAAY,GAAG,IAAI,CAAC,oBAAoB,EAAE;QAChD,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,qBAAqB,CAAC,YAAY,CAAC;AACpE,QAAA,MAAM,QAAQ,GAAG,OAAO,EAAE,QAAQ,KAAK,MAAM,CAAC,QAAQ,CAAC,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC;AAEzF,QAAA,cAAc,CAAC,OAAO,CAAC,iBAAiB,EAAE,KAAK,CAAC;AAChD,QAAA,cAAc,CAAC,OAAO,CAAC,yBAAyB,EAAE,YAAY,CAAC;AAC/D,QAAA,cAAc,CAAC,OAAO,CAAC,qBAAqB,EAAE,QAAQ,CAAC;QAEvD,MAAM,CAAC,QAAQ,CAAC,IAAI,GAAG,IAAI,CAAC,iBAAiB,CAAC;YAC5C,KAAK;YACL,aAAa;AACb,YAAA,WAAW,EAAE,IAAI,CAAC,qBAAqB,EAAE;AAC1C,SAAA,CAAC;IACJ;AAEA,IAAA,MAAM,CAAC,OAA+B,EAAA;QACpC,IAAI,CAAC,IAAI,CAAC,SAAS;YAAE;AAErB,QAAA,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC;AAC1B,QAAA,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC;AAC5B,QAAA,IAAI,IAAI,CAAC,YAAY,EAAE;AACrB,YAAA,YAAY,CAAC,IAAI,CAAC,YAAY,CAAC;AAC/B,YAAA,IAAI,CAAC,YAAY,GAAG,IAAI;QAC1B;QAEA,MAAM,QAAQ,GAAG,OAAO,EAAE,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM;AAC5D,QAAA,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC;AACjC,YAAA,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ;YAC/B,QAAQ;AACT,SAAA,CAAC;AACF,QAAA,MAAM,CAAC,QAAQ,CAAC,IAAI,GAAG,WAAW,IAAI,CAAC,MAAM,CAAC,MAAM,CAAA,WAAA,EAAc,MAAM,CAAC,QAAQ,EAAE,EAAE;IACvF;AAEQ,IAAA,MAAM,YAAY,CAAC,IAAY,EAAE,YAAoB,EAAE,WAAmB,EAAA;AAChF,QAAA,IAAI;AACF,YAAA,MAAM,IAAI,GAAG,IAAI,eAAe,CAAC;AAC/B,gBAAA,UAAU,EAAE,oBAAoB;gBAChC,IAAI;AACJ,gBAAA,aAAa,EAAE,YAAY;AAC3B,gBAAA,YAAY,EAAE,WAAW;AACzB,gBAAA,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ;AAChC,aAAA,CAAC;AACF,YAAA,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,CAAA,QAAA,EAAW,IAAI,CAAC,MAAM,CAAC,MAAM,CAAA,YAAA,CAAc,EAAE;AACnE,gBAAA,MAAM,EAAE,MAAM;AACd,gBAAA,OAAO,EAAE,EAAE,cAAc,EAAE,mCAAmC,EAAE;AAChE,gBAAA,IAAI,EAAE,IAAI,CAAC,QAAQ,EAAE;AACtB,aAAA,CAAC;YACF,IAAI,CAAC,GAAG,CAAC,EAAE;AAAE,gBAAA,OAAO,KAAK;AACzB,YAAA,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAkD;YAC7E,IAAI,CAAC,IAAI,CAAC,YAAY;AAAE,gBAAA,OAAO,KAAK;YAEpC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC;AACvC,YAAA,IAAI,IAAI,CAAC,QAAQ,EAAE;AACjB,gBAAA,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YAC9D;AACA,YAAA,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,YAAY,CAAC;AACvC,YAAA,OAAO,IAAI;QACb;AAAE,QAAA,MAAM;AACN,YAAA,OAAO,KAAK;QACd;IACF;AAEQ,IAAA,eAAe,CAAC,KAAa,EAAA;AACnC,QAAA,IAAI,IAAI,CAAC,YAAY,EAAE;AACrB,YAAA,YAAY,CAAC,IAAI,CAAC,YAAY,CAAC;AAC/B,YAAA,IAAI,CAAC,YAAY,GAAG,IAAI;QAC1B;QACA,MAAM,MAAM,GAAG,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC;AAC3C,QAAA,MAAM,GAAG,GAAG,MAAM,GAAG,KAAK,CAAC;AAC3B,QAAA,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE;;AAE3B,YAAA,OAAO,CAAC,IAAI,CAAC,4DAA4D,CAAC;YAC1E;QACF;QACA,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,uBAAuB,IAAI,iCAAiC;AAC1F,QAAA,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;AAChD,QAAA,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,GAAG,GAAG,UAAU,GAAG,SAAS,IAAI,IAAI,CAAC;AAClE,QAAA,IAAI,CAAC,YAAY,GAAG,UAAU,CAAC,MAAK;YAClC,IAAI,CAAC,aAAa,EAAE;QACtB,CAAC,EAAE,OAAO,CAAC;IACb;IAEA,aAAa,GAAA;QACX,IAAI,CAAC,IAAI,CAAC,SAAS;AAAE,YAAA,OAAO,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC;AAElD,QAAA,OAAO,IAAI,OAAO,CAAC,OAAO,OAAO,KAAI;AACnC,YAAA,MAAM,KAAK,GAAG,MAAM,CAAC,UAAU,EAAE;AACjC,YAAA,MAAM,YAAY,GAAG,IAAI,CAAC,oBAAoB,EAAE;YAChD,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,qBAAqB,CAAC,YAAY,CAAC;AACpE,YAAA,MAAM,WAAW,GAAG,IAAI,CAAC,oBAAoB,EAAE;AAC/C,YAAA,MAAM,SAAS,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,yBAAyB,IAAI,iCAAiC,IAAI,IAAI;YAErG,MAAM,MAAM,GAAG,QAAQ,CAAC,aAAa,CAAC,QAAQ,CAAC;AAC/C,YAAA,MAAM,CAAC,KAAK,CAAC,OAAO,GAAG,MAAM;YAE7B,IAAI,IAAI,GAAG,KAAK;AAChB,YAAA,MAAM,MAAM,GAAG,CAAC,OAAgB,KAAI;AAClC,gBAAA,IAAI,IAAI;oBAAE;gBACV,IAAI,GAAG,IAAI;gBACX,YAAY,CAAC,KAAK,CAAC;gBACnB,MAAM,CAAC,MAAM,EAAE;AACf,gBAAA,MAAM,CAAC,mBAAmB,CAAC,SAAS,EAAE,SAAS,CAAC;gBAChD,OAAO,CAAC,OAAO,CAAC;AAClB,YAAA,CAAC;AAED,YAAA,MAAM,KAAK,GAAG,UAAU,CAAC,MAAM,MAAM,CAAC,KAAK,CAAC,EAAE,SAAS,CAAC;AAExD,YAAA,MAAM,SAAS,GAAG,OAAO,KAAmB,KAAI;gBAC9C,IAAI,KAAK,CAAC,MAAM,KAAK,MAAM,CAAC,QAAQ,CAAC,MAAM;oBAAE;AAC7C,gBAAA,MAAM,IAAI,GAAG,KAAK,CAAC,IAA+D;AAClF,gBAAA,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ;oBAAE;AAEvC,gBAAA,IAAI,IAAI,CAAC,IAAI,KAAK,uBAAuB,IAAI,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,KAAK,KAAK,KAAK,EAAE;AAC9E,oBAAA,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,YAAY,EAAE,WAAW,CAAC;oBACxE,IAAI,CAAC,EAAE,EAAE;AACP,wBAAA,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC;AAC1B,wBAAA,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC;oBAC9B;oBACA,MAAM,CAAC,EAAE,CAAC;gBACZ;AAAO,qBAAA,IAAI,IAAI,CAAC,IAAI,KAAK,qBAAqB,EAAE;AAC9C,oBAAA,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC;AAC1B,oBAAA,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC;oBAC5B,MAAM,CAAC,KAAK,CAAC;gBACf;AACF,YAAA,CAAC;AAED,YAAA,MAAM,CAAC,gBAAgB,CAAC,SAAS,EAAE,SAAS,CAAC;AAE7C,YAAA,MAAM,CAAC,GAAG,GAAG,IAAI,CAAC,iBAAiB,CAAC;gBAClC,KAAK;gBACL,aAAa;gBACb,WAAW;AACX,gBAAA,MAAM,EAAE,MAAM;AACf,aAAA,CAAC;AACF,YAAA,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC;AACnC,QAAA,CAAC,CAAC;IACJ;AAEA,IAAA,MAAM,cAAc,GAAA;QAClB,IAAI,CAAC,IAAI,CAAC,SAAS;AAAE,YAAA,OAAO,KAAK;QAEjC,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC;QAC1D,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC;QAC/B,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC;AACjC,QAAA,IAAI,CAAC,IAAI;AAAE,YAAA,OAAO,KAAK;QAEvB,MAAM,UAAU,GAAG,cAAc,CAAC,OAAO,CAAC,iBAAiB,CAAC;QAC5D,MAAM,YAAY,GAAG,cAAc,CAAC,OAAO,CAAC,yBAAyB,CAAC;QACtE,MAAM,QAAQ,GAAG,cAAc,CAAC,OAAO,CAAC,qBAAqB,CAAC;AAC9D,QAAA,cAAc,CAAC,UAAU,CAAC,iBAAiB,CAAC;AAC5C,QAAA,cAAc,CAAC,UAAU,CAAC,yBAAyB,CAAC;AAEpD,QAAA,IAAI,KAAK,KAAK,UAAU,IAAI,CAAC,YAAY,EAAE;AACzC,YAAA,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,EAAE,EAAE,EAAE,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC;AAC7D,YAAA,cAAc,CAAC,UAAU,CAAC,qBAAqB,CAAC;AAChD,YAAA,OAAO,KAAK;QACd;AAEA,QAAA,MAAM,WAAW,GAAG,IAAI,CAAC,qBAAqB,EAAE;AAChD,QAAA,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,YAAY,EAAE,WAAW,CAAC;QAEnE,IAAI,QAAQ,EAAE;AACZ,YAAA,cAAc,CAAC,UAAU,CAAC,qBAAqB,CAAC;YAChD,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,EAAE,EAAE,EAAE,QAAQ,CAAC;QAC/C;aAAO;AACL,YAAA,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,EAAE,EAAE,EAAE,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAC/D;AAEA,QAAA,OAAO,EAAE;IACX;IAEA,MAAM,IAAI,CAAC,MAA4B,EAAA;AACrC,QAAA,IAAI,CAAC,MAAM,GAAG,MAAM;QACpB,IAAI,CAAC,IAAI,CAAC,SAAS;AAAE,YAAA,OAAO,KAAK;AAEjC,QAAA,MAAM,OAAO,GAAG,IAAI,eAAe,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC;QACvE,IAAI,OAAO,EAAE;AACX,YAAA,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,cAAc,EAAE;AACtC,YAAA,IAAI,EAAE;AAAE,gBAAA,OAAO,IAAI;QACrB;AAEA,QAAA,OAAO,IAAI,CAAC,aAAa,EAAE;IAC7B;wGAlQW,eAAe,EAAA,IAAA,EAAA,EAAA,EAAA,MAAA,EAAA,EAAA,CAAA,eAAA,CAAA,UAAA,EAAA,CAAA;AAAf,IAAA,OAAA,KAAA,GAAA,EAAA,CAAA,qBAAA,CAAA,EAAA,UAAA,EAAA,QAAA,EAAA,OAAA,EAAA,SAAA,EAAA,QAAA,EAAA,EAAA,EAAA,IAAA,EAAA,eAAe,cADF,MAAM,EAAA,CAAA;;4FACnB,eAAe,EAAA,UAAA,EAAA,CAAA;kBAD3B,UAAU;mBAAC,EAAE,UAAU,EAAE,MAAM,EAAE;;;ACTlC,MAAM,YAAY,GAAG,CAAC,GAAW,KAAa,GAAG,CAAC,OAAO,CAAC,oBAAoB,EAAE,MAAM,CAAC;MAE1E,SAAS,GAAG,CAAC,OAAe,EAAE,GAAW,KAAa;AACjE,IAAA,MAAM,SAAS,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;AACjE,IAAA,OAAO,IAAI,MAAM,CAAC,CAAA,CAAA,EAAI,SAAS,CAAA,CAAA,CAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;AAC/C;MAEa,mBAAmB,GAAsB,CAAC,GAAG,EAAE,IAAI,KAAI;AAClE,IAAA,MAAM,MAAM,GAAG,MAAM,CAAC,eAAe,CAAC;AACtC,IAAA,MAAM,KAAK,GAAG,MAAM,CAAC,cAAc,EAAE;AACrC,IAAA,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM;AAE5B,IAAA,IAAI,CAAC,KAAK,IAAI,CAAC,MAAM;AAAE,QAAA,OAAO,IAAI,CAAC,GAAG,CAAC;IAEvC,MAAM,QAAQ,GAAG,MAAM,CAAC,YAAY,EAAE,IAAI,CAAC,OAAO,IAAI,SAAS,CAAC,OAAO,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC;AAClF,IAAA,IAAI,CAAC,QAAQ;AAAE,QAAA,OAAO,IAAI,CAAC,GAAG,CAAC;AAE/B,IAAA,MAAM,OAAO,GAAG,GAAG,CAAC,KAAK,CAAC;AACxB,QAAA,OAAO,EAAE,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,CAAA,OAAA,EAAU,KAAK,CAAA,CAAE,CAAC;AAC7D,KAAA,CAAC;AACF,IAAA,OAAO,IAAI,CAAC,OAAO,CAAC;AACtB;;ACHM,SAAU,eAAe,CAAC,OAAuB,EAAA;AACrD,IAAA,MAAM,SAAS,GAA2C,CAAC,eAAe,CAAC;AAE3E,IAAA,IAAI,OAAO,CAAC,UAAU,EAAE;QACtB,SAAS,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,uBAAuB,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,EAAE,EAAE,CAAC;IAChH;AAAO,SAAA,IAAI,OAAO,CAAC,QAAQ,EAAE;AAC3B,QAAA,SAAS,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,uBAAuB,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC;IAClF;AAEA,IAAA,SAAS,CAAC,IAAI,CACZ,qBAAqB,CAAC,MAAK;AACzB,QAAA,MAAM,YAAY,GAAG,MAAM,CAAC,uBAAuB,CAAC;AACpD,QAAA,MAAM,MAAM,GAAG,MAAM,CAAC,eAAe,CAAC;AACtC,QAAA,OAAO,YAAY,CAAC,gBAAgB,EAAE,CAAC,IAAI,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC9E,CAAC,CAAC,CACH;AAED,IAAA,OAAO,wBAAwB,CAAC,SAAS,CAAC;AAC5C;MAGa,cAAc,CAAA;IACzB,OAAO,OAAO,CAAC,OAAuB,EAAA;QACpC,OAAO;AACL,YAAA,QAAQ,EAAE,cAAc;AACxB,YAAA,SAAS,EAAE;gBACT,eAAe;gBACf,IAAI,OAAO,CAAC;sBACR,CAAC,EAAE,OAAO,EAAE,uBAAuB,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,EAAE,EAAE;AACjG,sBAAE,CAAC,EAAE,OAAO,EAAE,uBAAuB,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAS,EAAE,CAAC,CACtE;AACD,gBAAA;AACE,oBAAA,OAAO,EAAE,eAAe;AACxB,oBAAA,KAAK,EAAE,IAAI;oBACX,UAAU,EAAE,MAAK;AACf,wBAAA,MAAM,YAAY,GAAG,MAAM,CAAC,uBAAuB,CAAC;AACpD,wBAAA,MAAM,MAAM,GAAG,MAAM,CAAC,eAAe,CAAC;wBACtC,OAAO,MAAM,YAAY,CAAC,gBAAgB,EAAE,CAAC,IAAI,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;oBACpF,CAAC;AACF,iBAAA;AACF,aAAA;SACF;IACH;wGArBW,cAAc,EAAA,IAAA,EAAA,EAAA,EAAA,MAAA,EAAA,EAAA,CAAA,eAAA,CAAA,QAAA,EAAA,CAAA;yGAAd,cAAc,EAAA,CAAA;yGAAd,cAAc,EAAA,CAAA;;4FAAd,cAAc,EAAA,UAAA,EAAA,CAAA;kBAD1B,QAAQ;mBAAC,EAAE;;;AC1CZ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA8BG;;AC9BH;;AAEG;;;;"}

package/fesm2022/sd-angular-core-modules-keycloak.mjs.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"sd-angular-core-modules-keycloak.mjs","sources":["../../../projects/sd-angular/modules/keycloak/keycloak.configuration.ts","../../../projects/sd-angular/modules/keycloak/keycloak.service.ts","../../../projects/sd-angular/modules/keycloak/keycloak.interceptor.ts","../../../projects/sd-angular/modules/keycloak/keycloak.module.ts","../../../projects/sd-angular/modules/keycloak/sd-angular-core-modules-keycloak.ts"],"sourcesContent":["import { InjectionToken } from '@angular/core';\r\n\r\nexport interface SdKeycloakTenantConfig {\r\n url: string;\r\n realm: string;\r\n clientId: string;\r\n secureRoutes?: string[]; // Các API cần đính token (vd: ['/api/v1'])\r\n\r\n /*\r\n Basename (KHÔNG kèm đuôi `.html`) của file Keycloak silent SSO redirect mà consumer\r\n * BẮT BUỘC đặt trong thư mục `public/`. Mặc định `'silent-renew'`.\r\n \r\n Service sẽ truyền `${origin}/<silentRenewUrl>.html` vào `silentCheckSsoRedirectUri`. Với giá trị\r\n * mặc định, Keycloak gọi `${origin}/silent-renew.html` (giống hành vi cũ — không phá vỡ project hiện có).\r\n \r\n Consumer cần tạo file tĩnh này (nội dung mẫu ở `modules/keycloak/htmls/silent-renew.html`); nếu THIẾU,\r\n * silent `check-sso` thất bại và `init()` trả về `false` không mong muốn (user bị coi là chưa đăng nhập).\r\n * Cho phép truyền kèm `/` đầu hoặc đuôi `.html` (tự chuẩn hoá), hoặc đặt sâu hơn:\r\n * `'assets/silent-renew'` → `${origin}/assets/silent-renew.html`.\r\n /\r\n silentRenewUrl?: string;\r\n\r\n /\r\n Basename (KHÔNG kèm đuôi `.html`) của trang lỗi tĩnh trong `public/`, dùng làm đích redirect khi\r\n * `keycloak.init()` NÉM LỖI (Keycloak sập / mạng lỗi / cấu hình realm sai). Mặc định `'auth-keycloak-error'`.\r\n \r\n Khi init thất bại, app điều hướng full-page tới `${origin}/<authErrorUrl>.html`. Vì là file tĩnh nên\r\n * trang lỗi vẫn hiển thị kể cả khi bundle Angular chưa khởi tạo được. Service cũng tự bỏ qua `init()` nếu\r\n * đang đứng sẵn ở trang lỗi này (chống vòng lặp redirect).\r\n \r\n Consumer nên tạo file (nội dung mẫu ở `modules/keycloak/htmls/auth-keycloak-error.html`) và viết lại\r\n * branding/nội dung. Nếu THIẾU, redirect rơi vào trang 404 của host. Chuẩn hoá giá trị giống `silentRenewUrl`.\r\n /\r\n authErrorUrl?: string;\r\n}\r\n\r\nexport interface ISdKeycloakConfiguration {\r\n loadTenantConfig: () => Promise<SdKeycloakTenantConfig>;\r\n}\r\n\r\nexport const SD_KEYCLOAK_CONFIGURATION = new InjectionToken<ISdKeycloakConfiguration>('sd-keycloak.configuration');\r\n","import { Injectable } from '@angular/core';\r\nimport Keycloak from 'keycloak-js'; // Import trực tiếp SDK gốc của Keycloak\r\nimport { SdKeycloakTenantConfig } from './keycloak.configuration';\r\n\r\n@Injectable({ providedIn: 'root' })\r\nexport class SdKeycloakService {\r\n public keycloak!: Keycloak;\r\n public config!: SdKeycloakTenantConfig;\r\n\r\n async init(config: SdKeycloakTenantConfig): Promise<boolean> {\r\n this.config = config;\r\n\r\n // Đường dẫn 2 file tĩnh trong public/ (consumer cấu hình qua silentRenewUrl / authErrorUrl).\r\n const silentRenewHref = this.toPublicHtmlUrl(config.silentRenewUrl \|\| 'silent-renew');\r\n const authErrorHref = this.toPublicHtmlUrl(config.authErrorUrl \|\| 'auth-keycloak-error');\r\n\r\n // Nếu đang đứng ở chính trang lỗi → KHÔNG init lại (chống vòng lặp redirect khi init liên tục lỗi).\r\n if (window.location.pathname === new URL(authErrorHref).pathname) {\r\n return false;\r\n }\r\n\r\n // 1. Khởi tạo instance\r\n this.keycloak = new Keycloak({\r\n url: config.url,\r\n realm: config.realm,\r\n clientId: config.clientId,\r\n });\r\n\r\n // 2. Lắng nghe sự kiện hết hạn token để tự động làm mới ngầm\r\n this.keycloak.onTokenExpired = () => {\r\n this.keycloak.updateToken(30).catch(() => {\r\n // @i18n-ignore — dev console warning\r\n console.warn('Token refresh failed. Re-authentication required.');\r\n this.keycloak.login();\r\n });\r\n };\r\n\r\n // 3. Thực thi quá trình boot Keycloak; nếu lỗi → điều hướng tới trang lỗi tĩnh trong public/.\r\n try {\r\n return await this.keycloak.init({\r\n onLoad: 'check-sso',\r\n silentCheckSsoRedirectUri: silentRenewHref,\r\n checkLoginIframe: false, // Tắt check Iframe để chống lỗi vòng lặp\r\n });\r\n } catch (error) {\r\n // @i18n-ignore — dev console error\r\n console.error('Keycloak init failed:', error);\r\n window.location.href = authErrorHref;\r\n return false;\r\n }\r\n }\r\n\r\n /\r\n Chuẩn hoá basename file tĩnh trong public/ thành URL tuyệt đối.\r\n * `'silent-renew'` \| `'/silent-renew'` \| `'silent-renew.html'` → `${origin}/silent-renew.html`.\r\n /\r\n private toPublicHtmlUrl(name: string): string {\r\n const base = name.trim().replace(/^\\/+/, '').replace(/\\.html$/i, '');\r\n return `${window.location.origin}/${base}.html`;\r\n }\r\n\r\n // Tiện ích nhanh cho Dev sử dụng\r\n login() { return this.keycloak.login(); }\r\n logout() { return this.keycloak.logout({ redirectUri: window.location.origin }); }\r\n getToken() { return this.keycloak.token; }\r\n getIsAuthenticated() { return this.keycloak.authenticated; }\r\n}\r\n","import { HttpInterceptorFn } from '@angular/common/http';\r\nimport { inject } from '@angular/core';\r\nimport { from, switchMap } from 'rxjs';\r\nimport { SdKeycloakService } from './keycloak.service';\r\n\r\nexport const SdKeycloakInterceptor: HttpInterceptorFn = (req, next) => {\r\n const keycloakService = inject(SdKeycloakService);\r\n const { keycloak, config } = keycloakService;\r\n\r\n // Nếu chưa init xong hoặc chưa đăng nhập -> cho request đi qua bình thường\r\n if (!keycloak \|\| !keycloak.authenticated \|\| !config) {\r\n return next(req);\r\n }\r\n\r\n // Kiểm tra xem URL của request có nằm trong mảng secureRoutes không\r\n const isSecure = config.secureRoutes?.some(route => req.url.includes(route));\r\n if (!isSecure) {\r\n return next(req);\r\n }\r\n\r\n // Đảm bảo token luôn hợp lệ (cập nhật nếu token sẽ hết hạn trong 30s tới)\r\n return from(keycloak.updateToken(30)).pipe(\r\n switchMap(() => {\r\n const authReq = req.clone({\r\n headers: req.headers.set('Authorization', `Bearer ${keycloak.token}`)\r\n });\r\n return next(authReq);\r\n })\r\n );\r\n};","import { \r\n ModuleWithProviders, \r\n NgModule, \r\n Provider, \r\n Type, \r\n EnvironmentProviders, \r\n makeEnvironmentProviders, \r\n provideAppInitializer, \r\n inject,\r\n APP_INITIALIZER\r\n} from '@angular/core';\r\nimport { ISdKeycloakConfiguration, SD_KEYCLOAK_CONFIGURATION } from './keycloak.configuration';\r\nimport { SdKeycloakService } from './keycloak.service';\r\n\r\n// =======================================================================\r\n// CÁCH 1: Dùng cho Angular 19 Standalone (Gọi trong app.config.ts)\r\n// =======================================================================\r\nexport function provideSdKeycloak(options: {\r\n useClass?: Type<ISdKeycloakConfiguration>;\r\n // eslint-disable-next-line @typescript-eslint/no-explicit-any\r\n useFactory?: (...args: any[]) => ISdKeycloakConfiguration;\r\n // eslint-disable-next-line @typescript-eslint/no-explicit-any\r\n deps?: any[];\r\n}): EnvironmentProviders {\r\n \r\n // FIX 1: Khai báo mảng nhận cả Provider (cho Service/Token) lẫn EnvironmentProviders (cho AppInitializer)\r\n const providers: Array<Provider \| EnvironmentProviders> = [SdKeycloakService];\r\n\r\n if (options.useFactory) {\r\n providers.push({ provide: SD_KEYCLOAK_CONFIGURATION, useFactory: options.useFactory, deps: options.deps \|\| [] });\r\n } else if (options.useClass) {\r\n providers.push({ provide: SD_KEYCLOAK_CONFIGURATION, useClass: options.useClass });\r\n }\r\n\r\n // Standalone dùng được provideAppInitializer ngon lành\r\n providers.push(\r\n provideAppInitializer(() => {\r\n const configLoader = inject(SD_KEYCLOAK_CONFIGURATION);\r\n const keycloakService = inject(SdKeycloakService);\r\n return configLoader.loadTenantConfig().then((config) => keycloakService.init(config));\r\n })\r\n );\r\n\r\n return makeEnvironmentProviders(providers);\r\n}\r\n\r\n// =======================================================================\r\n// CÁCH 2: Dùng cho kiến trúc NgModule cũ (Backward Compatibility)\r\n// =======================================================================\r\n@NgModule({})\r\nexport class SdKeycloakModule {\r\n static forRoot(options: {\r\n useClass?: Type<ISdKeycloakConfiguration>;\r\n // eslint-disable-next-line @typescript-eslint/no-explicit-any\r\n useFactory?: (...args: any[]) => ISdKeycloakConfiguration;\r\n // eslint-disable-next-line @typescript-eslint/no-explicit-any\r\n deps?: any[];\r\n }): ModuleWithProviders<SdKeycloakModule> {\r\n \r\n return {\r\n ngModule: SdKeycloakModule,\r\n providers: [\r\n SdKeycloakService,\r\n ...(options.useFactory \r\n ? [{ provide: SD_KEYCLOAK_CONFIGURATION, useFactory: options.useFactory, deps: options.deps \|\| [] }]\r\n : [{ provide: SD_KEYCLOAK_CONFIGURATION, useClass: options.useClass! }]\r\n ),\r\n \r\n // FIX 2: NgModule bắt buộc phải dùng APP_INITIALIZER (nhưng viết kiểu xịn của Angular 14+, dùng inject)\r\n {\r\n provide: APP_INITIALIZER,\r\n multi: true,\r\n useFactory: () => {\r\n const configLoader = inject(SD_KEYCLOAK_CONFIGURATION);\r\n const keycloakService = inject(SdKeycloakService);\r\n return () => configLoader.loadTenantConfig().then((config) => keycloakService.init(config));\r\n }\r\n }\r\n ]\r\n };\r\n }\r\n}","/\n Generated bundle index. Do not edit.\n /\n\nexport from './index';\n"],"names":[],"mappings":";;;;;MAwCa,yBAAyB,GAAG,IAAI,cAAc,CAA2B,2BAA2B;;MCnCpG,iBAAiB,CAAA;AACrB,IAAA,QAAQ;AACR,IAAA,MAAM;IAEb,MAAM,IAAI,CAAC,MAA8B,EAAA;AACvC,QAAA,IAAI,CAAC,MAAM,GAAG,MAAM;;AAGpB,QAAA,MAAM,eAAe,GAAG,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,cAAc,IAAI,cAAc,CAAC;AACrF,QAAA,MAAM,aAAa,GAAG,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,YAAY,IAAI,qBAAqB,CAAC;;AAGxF,QAAA,IAAI,MAAM,CAAC,QAAQ,CAAC,QAAQ,KAAK,IAAI,GAAG,CAAC,aAAa,CAAC,CAAC,QAAQ,EAAE;AAChE,YAAA,OAAO,KAAK;QACd;;AAGA,QAAA,IAAI,CAAC,QAAQ,GAAG,IAAI,QAAQ,CAAC;YAC3B,GAAG,EAAE,MAAM,CAAC,GAAG;YACf,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,QAAQ,EAAE,MAAM,CAAC,QAAQ;AAC1B,SAAA,CAAC;;AAGF,QAAA,IAAI,CAAC,QAAQ,CAAC,cAAc,GAAG,MAAK;YAClC,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,MAAK;;AAEvC,gBAAA,OAAO,CAAC,IAAI,CAAC,mDAAmD,CAAC;AACjE,gBAAA,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE;AACvB,YAAA,CAAC,CAAC;AACJ,QAAA,CAAC;;AAGD,QAAA,IAAI;AACF,YAAA,OAAO,MAAM,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;AAC9B,gBAAA,MAAM,EAAE,WAAW;AACnB,gBAAA,yBAAyB,EAAE,eAAe;gBAC1C,gBAAgB,EAAE,KAAK;AACxB,aAAA,CAAC;QACJ;QAAE,OAAO,KAAK,EAAE;;AAEd,YAAA,OAAO,CAAC,KAAK,CAAC,uBAAuB,EAAE,KAAK,CAAC;AAC7C,YAAA,MAAM,CAAC,QAAQ,CAAC,IAAI,GAAG,aAAa;AACpC,YAAA,OAAO,KAAK;QACd;IACF;AAEA;;;AAGG;AACK,IAAA,eAAe,CAAC,IAAY,EAAA;QAClC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC;QACpE,OAAO,CAAA,EAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAA,CAAA,EAAI,IAAI,CAAA,KAAA,CAAO;IACjD;;IAGA,KAAK,GAAA,EAAK,OAAO,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC;IACxC,MAAM,GAAA,EAAK,OAAO,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IACjF,QAAQ,GAAA,EAAK,OAAO,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IACzC,kBAAkB,GAAA,EAAK,OAAO,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC;wGA5DhD,iBAAiB,EAAA,IAAA,EAAA,EAAA,EAAA,MAAA,EAAA,EAAA,CAAA,eAAA,CAAA,UAAA,EAAA,CAAA;AAAjB,IAAA,OAAA,KAAA,GAAA,EAAA,CAAA,qBAAA,CAAA,EAAA,UAAA,EAAA,QAAA,EAAA,OAAA,EAAA,SAAA,EAAA,QAAA,EAAA,EAAA,EAAA,IAAA,EAAA,iBAAiB,cADJ,MAAM,EAAA,CAAA;;4FACnB,iBAAiB,EAAA,UAAA,EAAA,CAAA;kBAD7B,UAAU;mBAAC,EAAE,UAAU,EAAE,MAAM,EAAE;;;MCCrB,qBAAqB,GAAsB,CAAC,GAAG,EAAE,IAAI,KAAI;AACpE,IAAA,MAAM,eAAe,GAAG,MAAM,CAAC,iBAAiB,CAAC;AACjD,IAAA,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,eAAe;;IAG5C,IAAI,CAAC,QAAQ,IAAI,CAAC,QAAQ,CAAC,aAAa,IAAI,CAAC,MAAM,EAAE;AACnD,QAAA,OAAO,IAAI,CAAC,GAAG,CAAC;IAClB;;IAGA,MAAM,QAAQ,GAAG,MAAM,CAAC,YAAY,EAAE,IAAI,CAAC,KAAK,IAAI,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC5E,IAAI,CAAC,QAAQ,EAAE;AACb,QAAA,OAAO,IAAI,CAAC,GAAG,CAAC;IAClB;;AAGA,IAAA,OAAO,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CACxC,SAAS,CAAC,MAAK;AACb,QAAA,MAAM,OAAO,GAAG,GAAG,CAAC,KAAK,CAAC;AACxB,YAAA,OAAO,EAAE,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,CAAA,OAAA,EAAU,QAAQ,CAAC,KAAK,EAAE;AACrE,SAAA,CAAC;AACF,QAAA,OAAO,IAAI,CAAC,OAAO,CAAC;IACtB,CAAC,CAAC,CACH;AACH;;ACfA;AACA;AACA;AACM,SAAU,iBAAiB,CAAC,OAMjC,EAAA;;AAGC,IAAA,MAAM,SAAS,GAA2C,CAAC,iBAAiB,CAAC;AAE7E,IAAA,IAAI,OAAO,CAAC,UAAU,EAAE;QACtB,SAAS,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,yBAAyB,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,EAAE,EAAE,CAAC;IAClH;AAAO,SAAA,IAAI,OAAO,CAAC,QAAQ,EAAE;AAC3B,QAAA,SAAS,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,yBAAyB,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC;IACpF;;AAGA,IAAA,SAAS,CAAC,IAAI,CACZ,qBAAqB,CAAC,MAAK;AACzB,QAAA,MAAM,YAAY,GAAG,MAAM,CAAC,yBAAyB,CAAC;AACtD,QAAA,MAAM,eAAe,GAAG,MAAM,CAAC,iBAAiB,CAAC;AACjD,QAAA,OAAO,YAAY,CAAC,gBAAgB,EAAE,CAAC,IAAI,CAAC,CAAC,MAAM,KAAK,eAAe,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACvF,CAAC,CAAC,CACH;AAED,IAAA,OAAO,wBAAwB,CAAC,SAAS,CAAC;AAC5C;AAEA;AACA;AACA;MAEa,gBAAgB,CAAA;IAC3B,OAAO,OAAO,CAAC,OAMd,EAAA;QAEC,OAAO;AACL,YAAA,QAAQ,EAAE,gBAAgB;AAC1B,YAAA,SAAS,EAAE;gBACT,iBAAiB;gBACjB,IAAI,OAAO,CAAC;sBACR,CAAC,EAAE,OAAO,EAAE,yBAAyB,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,EAAE,EAAE;AACnG,sBAAE,CAAC,EAAE,OAAO,EAAE,yBAAyB,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAS,EAAE,CAAC,CACxE;;AAGD,gBAAA;AACE,oBAAA,OAAO,EAAE,eAAe;AACxB,oBAAA,KAAK,EAAE,IAAI;oBACX,UAAU,EAAE,MAAK;AACf,wBAAA,MAAM,YAAY,GAAG,MAAM,CAAC,yBAAyB,CAAC;AACtD,wBAAA,MAAM,eAAe,GAAG,MAAM,CAAC,iBAAiB,CAAC;wBACjD,OAAO,MAAM,YAAY,CAAC,gBAAgB,EAAE,CAAC,IAAI,CAAC,CAAC,MAAM,KAAK,eAAe,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;oBAC7F;AACD;AACF;SACF;IACH;wGA9BW,gBAAgB,EAAA,IAAA,EAAA,EAAA,EAAA,MAAA,EAAA,EAAA,CAAA,eAAA,CAAA,QAAA,EAAA,CAAA;yGAAhB,gBAAgB,EAAA,CAAA;yGAAhB,gBAAgB,EAAA,CAAA;;4FAAhB,gBAAgB,EAAA,UAAA,EAAA,CAAA;kBAD5B,QAAQ;mBAAC,EAAE;;;ACjDZ;;AAEG;;;;"}
1	+ {"version":3,"file":"sd-angular-core-modules-keycloak.mjs","sources":["../../../projects/sd-angular/modules/keycloak/keycloak.configuration.ts","../../../projects/sd-angular/modules/keycloak/keycloak.service.ts","../../../projects/sd-angular/modules/keycloak/keycloak.interceptor.ts","../../../projects/sd-angular/modules/keycloak/keycloak.module.ts","../../../projects/sd-angular/modules/keycloak/sd-angular-core-modules-keycloak.ts"],"sourcesContent":["import { InjectionToken } from '@angular/core';\n\nexport interface SdKeycloakTenantConfig {\n url: string;\n realm: string;\n clientId: string;\n secureRoutes?: string[]; // Các API cần đính token (vd: ['/api/v1'])\n\n /*\n Basename (KHÔNG kèm đuôi `.html`) của file Keycloak silent SSO redirect mà consumer\n * BẮT BUỘC đặt trong thư mục `public/`. Mặc định `'silent-renew'`.\n \n Service sẽ truyền `${origin}/<silentRenewUrl>.html` vào `silentCheckSsoRedirectUri`. Với giá trị\n * mặc định, Keycloak gọi `${origin}/silent-renew.html` (giống hành vi cũ — không phá vỡ project hiện có).\n \n Consumer cần tạo file tĩnh này (nội dung mẫu ở `modules/keycloak/htmls/silent-renew.html`); nếu THIẾU,\n * silent `check-sso` thất bại và `init()` trả về `false` không mong muốn (user bị coi là chưa đăng nhập).\n * Cho phép truyền kèm `/` đầu hoặc đuôi `.html` (tự chuẩn hoá), hoặc đặt sâu hơn:\n * `'assets/silent-renew'` → `${origin}/assets/silent-renew.html`.\n /\n silentRenewUrl?: string;\n\n /\n Basename (KHÔNG kèm đuôi `.html`) của trang lỗi tĩnh trong `public/`, dùng làm đích redirect khi\n * `keycloak.init()` NÉM LỖI (Keycloak sập / mạng lỗi / cấu hình realm sai). Mặc định `'auth-keycloak-error'`.\n \n Khi init thất bại, app điều hướng full-page tới `${origin}/<authErrorUrl>.html`. Vì là file tĩnh nên\n * trang lỗi vẫn hiển thị kể cả khi bundle Angular chưa khởi tạo được. Service cũng tự bỏ qua `init()` nếu\n * đang đứng sẵn ở trang lỗi này (chống vòng lặp redirect).\n \n Consumer nên tạo file (nội dung mẫu ở `modules/keycloak/htmls/auth-keycloak-error.html`) và viết lại\n * branding/nội dung. Nếu THIẾU, redirect rơi vào trang 404 của host. Chuẩn hoá giá trị giống `silentRenewUrl`.\n /\n authErrorUrl?: string;\n}\n\nexport interface ISdKeycloakConfiguration {\n loadTenantConfig: () => Promise<SdKeycloakTenantConfig>;\n}\n\nexport const SD_KEYCLOAK_CONFIGURATION = new InjectionToken<ISdKeycloakConfiguration>('sd-keycloak.configuration');\n","import { Injectable } from '@angular/core';\nimport Keycloak from 'keycloak-js'; // Import trực tiếp SDK gốc của Keycloak\nimport { SdKeycloakTenantConfig } from './keycloak.configuration';\n\n@Injectable({ providedIn: 'root' })\nexport class SdKeycloakService {\n public keycloak!: Keycloak;\n public config!: SdKeycloakTenantConfig;\n\n async init(config: SdKeycloakTenantConfig): Promise<boolean> {\n this.config = config;\n\n // Đường dẫn 2 file tĩnh trong public/ (consumer cấu hình qua silentRenewUrl / authErrorUrl).\n const silentRenewHref = this.toPublicHtmlUrl(config.silentRenewUrl \|\| 'silent-renew');\n const authErrorHref = this.toPublicHtmlUrl(config.authErrorUrl \|\| 'auth-keycloak-error');\n\n // Nếu đang đứng ở chính trang lỗi → KHÔNG init lại (chống vòng lặp redirect khi init liên tục lỗi).\n if (window.location.pathname === new URL(authErrorHref).pathname) {\n return false;\n }\n\n // 1. Khởi tạo instance\n this.keycloak = new Keycloak({\n url: config.url,\n realm: config.realm,\n clientId: config.clientId,\n });\n\n // 2. Lắng nghe sự kiện hết hạn token để tự động làm mới ngầm\n this.keycloak.onTokenExpired = () => {\n this.keycloak.updateToken(30).catch(() => {\n // @i18n-ignore — dev console warning\n console.warn('Token refresh failed. Re-authentication required.');\n this.keycloak.login();\n });\n };\n\n // 3. Thực thi quá trình boot Keycloak; nếu lỗi → điều hướng tới trang lỗi tĩnh trong public/.\n try {\n return await this.keycloak.init({\n onLoad: 'check-sso',\n silentCheckSsoRedirectUri: silentRenewHref,\n checkLoginIframe: false, // Tắt check Iframe để chống lỗi vòng lặp\n });\n } catch (error) {\n // @i18n-ignore — dev console error\n console.error('Keycloak init failed:', error);\n window.location.href = authErrorHref;\n return false;\n }\n }\n\n /\n Chuẩn hoá basename file tĩnh trong public/ thành URL tuyệt đối.\n * `'silent-renew'` \| `'/silent-renew'` \| `'silent-renew.html'` → `${origin}/silent-renew.html`.\n /\n private toPublicHtmlUrl(name: string): string {\n const base = name.trim().replace(/^\\/+/, '').replace(/\\.html$/i, '');\n return `${window.location.origin}/${base}.html`;\n }\n\n // Tiện ích nhanh cho Dev sử dụng\n login() { return this.keycloak.login(); }\n logout() { return this.keycloak.logout({ redirectUri: window.location.origin }); }\n getToken() { return this.keycloak.token; }\n getIsAuthenticated() { return this.keycloak.authenticated; }\n}\n","import { HttpInterceptorFn } from '@angular/common/http';\r\nimport { inject } from '@angular/core';\r\nimport { from, switchMap } from 'rxjs';\r\nimport { SdKeycloakService } from './keycloak.service';\r\n\r\nexport const SdKeycloakInterceptor: HttpInterceptorFn = (req, next) => {\r\n const keycloakService = inject(SdKeycloakService);\r\n const { keycloak, config } = keycloakService;\r\n\r\n // Nếu chưa init xong hoặc chưa đăng nhập -> cho request đi qua bình thường\r\n if (!keycloak \|\| !keycloak.authenticated \|\| !config) {\r\n return next(req);\r\n }\r\n\r\n // Kiểm tra xem URL của request có nằm trong mảng secureRoutes không\r\n const isSecure = config.secureRoutes?.some(route => req.url.includes(route));\r\n if (!isSecure) {\r\n return next(req);\r\n }\r\n\r\n // Đảm bảo token luôn hợp lệ (cập nhật nếu token sẽ hết hạn trong 30s tới)\r\n return from(keycloak.updateToken(30)).pipe(\r\n switchMap(() => {\r\n const authReq = req.clone({\r\n headers: req.headers.set('Authorization', `Bearer ${keycloak.token}`)\r\n });\r\n return next(authReq);\r\n })\r\n );\r\n};","import { \r\n ModuleWithProviders, \r\n NgModule, \r\n Provider, \r\n Type, \r\n EnvironmentProviders, \r\n makeEnvironmentProviders, \r\n provideAppInitializer, \r\n inject,\r\n APP_INITIALIZER\r\n} from '@angular/core';\r\nimport { ISdKeycloakConfiguration, SD_KEYCLOAK_CONFIGURATION } from './keycloak.configuration';\r\nimport { SdKeycloakService } from './keycloak.service';\r\n\r\n// =======================================================================\r\n// CÁCH 1: Dùng cho Angular 19 Standalone (Gọi trong app.config.ts)\r\n// =======================================================================\r\nexport function provideSdKeycloak(options: {\r\n useClass?: Type<ISdKeycloakConfiguration>;\r\n // eslint-disable-next-line @typescript-eslint/no-explicit-any\r\n useFactory?: (...args: any[]) => ISdKeycloakConfiguration;\r\n // eslint-disable-next-line @typescript-eslint/no-explicit-any\r\n deps?: any[];\r\n}): EnvironmentProviders {\r\n \r\n // FIX 1: Khai báo mảng nhận cả Provider (cho Service/Token) lẫn EnvironmentProviders (cho AppInitializer)\r\n const providers: Array<Provider \| EnvironmentProviders> = [SdKeycloakService];\r\n\r\n if (options.useFactory) {\r\n providers.push({ provide: SD_KEYCLOAK_CONFIGURATION, useFactory: options.useFactory, deps: options.deps \|\| [] });\r\n } else if (options.useClass) {\r\n providers.push({ provide: SD_KEYCLOAK_CONFIGURATION, useClass: options.useClass });\r\n }\r\n\r\n // Standalone dùng được provideAppInitializer ngon lành\r\n providers.push(\r\n provideAppInitializer(() => {\r\n const configLoader = inject(SD_KEYCLOAK_CONFIGURATION);\r\n const keycloakService = inject(SdKeycloakService);\r\n return configLoader.loadTenantConfig().then((config) => keycloakService.init(config));\r\n })\r\n );\r\n\r\n return makeEnvironmentProviders(providers);\r\n}\r\n\r\n// =======================================================================\r\n// CÁCH 2: Dùng cho kiến trúc NgModule cũ (Backward Compatibility)\r\n// =======================================================================\r\n@NgModule({})\r\nexport class SdKeycloakModule {\r\n static forRoot(options: {\r\n useClass?: Type<ISdKeycloakConfiguration>;\r\n // eslint-disable-next-line @typescript-eslint/no-explicit-any\r\n useFactory?: (...args: any[]) => ISdKeycloakConfiguration;\r\n // eslint-disable-next-line @typescript-eslint/no-explicit-any\r\n deps?: any[];\r\n }): ModuleWithProviders<SdKeycloakModule> {\r\n \r\n return {\r\n ngModule: SdKeycloakModule,\r\n providers: [\r\n SdKeycloakService,\r\n ...(options.useFactory \r\n ? [{ provide: SD_KEYCLOAK_CONFIGURATION, useFactory: options.useFactory, deps: options.deps \|\| [] }]\r\n : [{ provide: SD_KEYCLOAK_CONFIGURATION, useClass: options.useClass! }]\r\n ),\r\n \r\n // FIX 2: NgModule bắt buộc phải dùng APP_INITIALIZER (nhưng viết kiểu xịn của Angular 14+, dùng inject)\r\n {\r\n provide: APP_INITIALIZER,\r\n multi: true,\r\n useFactory: () => {\r\n const configLoader = inject(SD_KEYCLOAK_CONFIGURATION);\r\n const keycloakService = inject(SdKeycloakService);\r\n return () => configLoader.loadTenantConfig().then((config) => keycloakService.init(config));\r\n }\r\n }\r\n ]\r\n };\r\n }\r\n}","/\n Generated bundle index. Do not edit.\n /\n\nexport from './index';\n"],"names":[],"mappings":";;;;;MAwCa,yBAAyB,GAAG,IAAI,cAAc,CAA2B,2BAA2B;;MCnCpG,iBAAiB,CAAA;AACrB,IAAA,QAAQ;AACR,IAAA,MAAM;IAEb,MAAM,IAAI,CAAC,MAA8B,EAAA;AACvC,QAAA,IAAI,CAAC,MAAM,GAAG,MAAM;;AAGpB,QAAA,MAAM,eAAe,GAAG,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,cAAc,IAAI,cAAc,CAAC;AACrF,QAAA,MAAM,aAAa,GAAG,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,YAAY,IAAI,qBAAqB,CAAC;;AAGxF,QAAA,IAAI,MAAM,CAAC,QAAQ,CAAC,QAAQ,KAAK,IAAI,GAAG,CAAC,aAAa,CAAC,CAAC,QAAQ,EAAE;AAChE,YAAA,OAAO,KAAK;QACd;;AAGA,QAAA,IAAI,CAAC,QAAQ,GAAG,IAAI,QAAQ,CAAC;YAC3B,GAAG,EAAE,MAAM,CAAC,GAAG;YACf,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,QAAQ,EAAE,MAAM,CAAC,QAAQ;AAC1B,SAAA,CAAC;;AAGF,QAAA,IAAI,CAAC,QAAQ,CAAC,cAAc,GAAG,MAAK;YAClC,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,MAAK;;AAEvC,gBAAA,OAAO,CAAC,IAAI,CAAC,mDAAmD,CAAC;AACjE,gBAAA,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE;AACvB,YAAA,CAAC,CAAC;AACJ,QAAA,CAAC;;AAGD,QAAA,IAAI;AACF,YAAA,OAAO,MAAM,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;AAC9B,gBAAA,MAAM,EAAE,WAAW;AACnB,gBAAA,yBAAyB,EAAE,eAAe;gBAC1C,gBAAgB,EAAE,KAAK;AACxB,aAAA,CAAC;QACJ;QAAE,OAAO,KAAK,EAAE;;AAEd,YAAA,OAAO,CAAC,KAAK,CAAC,uBAAuB,EAAE,KAAK,CAAC;AAC7C,YAAA,MAAM,CAAC,QAAQ,CAAC,IAAI,GAAG,aAAa;AACpC,YAAA,OAAO,KAAK;QACd;IACF;AAEA;;;AAGG;AACK,IAAA,eAAe,CAAC,IAAY,EAAA;QAClC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC;QACpE,OAAO,CAAA,EAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAA,CAAA,EAAI,IAAI,CAAA,KAAA,CAAO;IACjD;;IAGA,KAAK,GAAA,EAAK,OAAO,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC;IACxC,MAAM,GAAA,EAAK,OAAO,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IACjF,QAAQ,GAAA,EAAK,OAAO,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IACzC,kBAAkB,GAAA,EAAK,OAAO,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC;wGA5DhD,iBAAiB,EAAA,IAAA,EAAA,EAAA,EAAA,MAAA,EAAA,EAAA,CAAA,eAAA,CAAA,UAAA,EAAA,CAAA;AAAjB,IAAA,OAAA,KAAA,GAAA,EAAA,CAAA,qBAAA,CAAA,EAAA,UAAA,EAAA,QAAA,EAAA,OAAA,EAAA,SAAA,EAAA,QAAA,EAAA,EAAA,EAAA,IAAA,EAAA,iBAAiB,cADJ,MAAM,EAAA,CAAA;;4FACnB,iBAAiB,EAAA,UAAA,EAAA,CAAA;kBAD7B,UAAU;mBAAC,EAAE,UAAU,EAAE,MAAM,EAAE;;;MCCrB,qBAAqB,GAAsB,CAAC,GAAG,EAAE,IAAI,KAAI;AACpE,IAAA,MAAM,eAAe,GAAG,MAAM,CAAC,iBAAiB,CAAC;AACjD,IAAA,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,eAAe;;IAG5C,IAAI,CAAC,QAAQ,IAAI,CAAC,QAAQ,CAAC,aAAa,IAAI,CAAC,MAAM,EAAE;AACnD,QAAA,OAAO,IAAI,CAAC,GAAG,CAAC;IAClB;;IAGA,MAAM,QAAQ,GAAG,MAAM,CAAC,YAAY,EAAE,IAAI,CAAC,KAAK,IAAI,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC5E,IAAI,CAAC,QAAQ,EAAE;AACb,QAAA,OAAO,IAAI,CAAC,GAAG,CAAC;IAClB;;AAGA,IAAA,OAAO,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CACxC,SAAS,CAAC,MAAK;AACb,QAAA,MAAM,OAAO,GAAG,GAAG,CAAC,KAAK,CAAC;AACxB,YAAA,OAAO,EAAE,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,CAAA,OAAA,EAAU,QAAQ,CAAC,KAAK,EAAE;AACrE,SAAA,CAAC;AACF,QAAA,OAAO,IAAI,CAAC,OAAO,CAAC;IACtB,CAAC,CAAC,CACH;AACH;;ACfA;AACA;AACA;AACM,SAAU,iBAAiB,CAAC,OAMjC,EAAA;;AAGC,IAAA,MAAM,SAAS,GAA2C,CAAC,iBAAiB,CAAC;AAE7E,IAAA,IAAI,OAAO,CAAC,UAAU,EAAE;QACtB,SAAS,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,yBAAyB,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,EAAE,EAAE,CAAC;IAClH;AAAO,SAAA,IAAI,OAAO,CAAC,QAAQ,EAAE;AAC3B,QAAA,SAAS,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,yBAAyB,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC;IACpF;;AAGA,IAAA,SAAS,CAAC,IAAI,CACZ,qBAAqB,CAAC,MAAK;AACzB,QAAA,MAAM,YAAY,GAAG,MAAM,CAAC,yBAAyB,CAAC;AACtD,QAAA,MAAM,eAAe,GAAG,MAAM,CAAC,iBAAiB,CAAC;AACjD,QAAA,OAAO,YAAY,CAAC,gBAAgB,EAAE,CAAC,IAAI,CAAC,CAAC,MAAM,KAAK,eAAe,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACvF,CAAC,CAAC,CACH;AAED,IAAA,OAAO,wBAAwB,CAAC,SAAS,CAAC;AAC5C;AAEA;AACA;AACA;MAEa,gBAAgB,CAAA;IAC3B,OAAO,OAAO,CAAC,OAMd,EAAA;QAEC,OAAO;AACL,YAAA,QAAQ,EAAE,gBAAgB;AAC1B,YAAA,SAAS,EAAE;gBACT,iBAAiB;gBACjB,IAAI,OAAO,CAAC;sBACR,CAAC,EAAE,OAAO,EAAE,yBAAyB,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,EAAE,EAAE;AACnG,sBAAE,CAAC,EAAE,OAAO,EAAE,yBAAyB,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAS,EAAE,CAAC,CACxE;;AAGD,gBAAA;AACE,oBAAA,OAAO,EAAE,eAAe;AACxB,oBAAA,KAAK,EAAE,IAAI;oBACX,UAAU,EAAE,MAAK;AACf,wBAAA,MAAM,YAAY,GAAG,MAAM,CAAC,yBAAyB,CAAC;AACtD,wBAAA,MAAM,eAAe,GAAG,MAAM,CAAC,iBAAiB,CAAC;wBACjD,OAAO,MAAM,YAAY,CAAC,gBAAgB,EAAE,CAAC,IAAI,CAAC,CAAC,MAAM,KAAK,eAAe,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;oBAC7F;AACD;AACF;SACF;IACH;wGA9BW,gBAAgB,EAAA,IAAA,EAAA,EAAA,EAAA,MAAA,EAAA,EAAA,CAAA,eAAA,CAAA,QAAA,EAAA,CAAA;yGAAhB,gBAAgB,EAAA,CAAA;yGAAhB,gBAAgB,EAAA,CAAA;;4FAAhB,gBAAgB,EAAA,UAAA,EAAA,CAAA;kBAD5B,QAAQ;mBAAC,EAAE;;;ACjDZ;;AAEG;;;;"}

package/fesm2022/sd-angular-core-modules-layout.mjs CHANGED Viewed

@@ -43,11 +43,11 @@ class SdPageComponent {
         });
     }
     static ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "19.2.21", ngImport: i0, type: SdPageComponent, deps: [], target: i0.ɵɵFactoryTarget.Component });
-    static ɵcmp = i0.ɵɵngDeclareComponent({ minVersion: "17.0.0", version: "19.2.21", type: SdPageComponent, isStandalone: true, selector: "sd-page", inputs: { title: { classPropertyName: "title", publicName: "title", isSignal: true, isRequired: false, transformFunction: null }, description: { classPropertyName: "description", publicName: "description", isSignal: true, isRequired: false, transformFunction: null }, noHeader: { classPropertyName: "noHeader", publicName: "noHeader", isSignal: true, isRequired: false, transformFunction: null } }, ngImport: i0, template: "@if (!noHeader()) {\r\n  <div class=\"c-page-header bg-white\">\r\n    <div class=\"p-16 d-flex align-items-center w-full justify-content-between\">\r\n      <div class=\"d-flex\">\r\n        <ng-content select=\"[headerLeft]\">\r\n          <div class=\"d-flex flex-column\">\r\n            <div class=\"T20M\">{{ title() }}</div>\r\n            @if (description()) {\r\n              <div class=\"T14R text-secondary mt-4\">{{ description() }}</div>\r\n            }\r\n          </div>\r\n        </ng-content>\r\n      </div>\r\n      <ng-content select=\"[headerRight]\"></ng-content>\r\n    </div>\r\n  </div>\r\n}\r\n\r\n<div class=\"c-page-wrapper px-0\">\r\n  <div class=\"c-page-content\">\r\n    <ng-content></ng-content>\r\n  </div>\r\n</div>\r\n", styles: [":host{height:100%;display:flex;flex-direction:column;background-color:#f9f9f9}.c-page-header{box-shadow:0 1px 2px #2f31361a;z-index:1;position:relative}.c-page-wrapper{flex:1;display:flex;flex-direction:row;width:100%;overflow-y:auto;max-height:100vh}.c-page-wrapper .c-page-content{flex:1;height:100%;width:100%}.c-page-wrapper .c-page-right{position:-webkit-sticky;position:sticky;top:0;height:100%;overflow-y:auto}\n"] });
+    static ɵcmp = i0.ɵɵngDeclareComponent({ minVersion: "17.0.0", version: "19.2.21", type: SdPageComponent, isStandalone: true, selector: "sd-page", inputs: { title: { classPropertyName: "title", publicName: "title", isSignal: true, isRequired: false, transformFunction: null }, description: { classPropertyName: "description", publicName: "description", isSignal: true, isRequired: false, transformFunction: null }, noHeader: { classPropertyName: "noHeader", publicName: "noHeader", isSignal: true, isRequired: false, transformFunction: null } }, ngImport: i0, template: "@if (!noHeader()) {\n  <div class=\"c-page-header bg-white\">\n    <div class=\"p-16 d-flex align-items-center w-full justify-content-between\">\n      <div class=\"d-flex\">\n        <ng-content select=\"[headerLeft]\">\n          <div class=\"d-flex flex-column\">\n            <div class=\"T20M\">{{ title() }}</div>\n            @if (description()) {\n              <div class=\"T14R text-secondary mt-4\">{{ description() }}</div>\n            }\n          </div>\n        </ng-content>\n      </div>\n      <ng-content select=\"[headerRight]\"></ng-content>\n    </div>\n  </div>\n}\n\n<div class=\"c-page-wrapper px-0\">\n  <div class=\"c-page-content\">\n    <ng-content></ng-content>\n  </div>\n</div>\n", styles: [":host{height:100%;display:flex;flex-direction:column;background-color:#f9f9f9}.c-page-header{box-shadow:0 1px 2px #2f31361a;z-index:1;position:relative}.c-page-wrapper{flex:1;display:flex;flex-direction:row;width:100%;overflow-y:auto;max-height:100vh}.c-page-wrapper .c-page-content{flex:1;height:100%;width:100%}.c-page-wrapper .c-page-right{position:-webkit-sticky;position:sticky;top:0;height:100%;overflow-y:auto}\n"] });
 }
 i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "19.2.21", ngImport: i0, type: SdPageComponent, decorators: [{
             type: Component,
-            args: [{ selector: 'sd-page', template: "@if (!noHeader()) {\r\n  <div class=\"c-page-header bg-white\">\r\n    <div class=\"p-16 d-flex align-items-center w-full justify-content-between\">\r\n      <div class=\"d-flex\">\r\n        <ng-content select=\"[headerLeft]\">\r\n          <div class=\"d-flex flex-column\">\r\n            <div class=\"T20M\">{{ title() }}</div>\r\n            @if (description()) {\r\n              <div class=\"T14R text-secondary mt-4\">{{ description() }}</div>\r\n            }\r\n          </div>\r\n        </ng-content>\r\n      </div>\r\n      <ng-content select=\"[headerRight]\"></ng-content>\r\n    </div>\r\n  </div>\r\n}\r\n\r\n<div class=\"c-page-wrapper px-0\">\r\n  <div class=\"c-page-content\">\r\n    <ng-content></ng-content>\r\n  </div>\r\n</div>\r\n", styles: [":host{height:100%;display:flex;flex-direction:column;background-color:#f9f9f9}.c-page-header{box-shadow:0 1px 2px #2f31361a;z-index:1;position:relative}.c-page-wrapper{flex:1;display:flex;flex-direction:row;width:100%;overflow-y:auto;max-height:100vh}.c-page-wrapper .c-page-content{flex:1;height:100%;width:100%}.c-page-wrapper .c-page-right{position:-webkit-sticky;position:sticky;top:0;height:100%;overflow-y:auto}\n"] }]
+            args: [{ selector: 'sd-page', template: "@if (!noHeader()) {\n  <div class=\"c-page-header bg-white\">\n    <div class=\"p-16 d-flex align-items-center w-full justify-content-between\">\n      <div class=\"d-flex\">\n        <ng-content select=\"[headerLeft]\">\n          <div class=\"d-flex flex-column\">\n            <div class=\"T20M\">{{ title() }}</div>\n            @if (description()) {\n              <div class=\"T14R text-secondary mt-4\">{{ description() }}</div>\n            }\n          </div>\n        </ng-content>\n      </div>\n      <ng-content select=\"[headerRight]\"></ng-content>\n    </div>\n  </div>\n}\n\n<div class=\"c-page-wrapper px-0\">\n  <div class=\"c-page-content\">\n    <ng-content></ng-content>\n  </div>\n</div>\n", styles: [":host{height:100%;display:flex;flex-direction:column;background-color:#f9f9f9}.c-page-header{box-shadow:0 1px 2px #2f31361a;z-index:1;position:relative}.c-page-wrapper{flex:1;display:flex;flex-direction:row;width:100%;overflow-y:auto;max-height:100vh}.c-page-wrapper .c-page-content{flex:1;height:100%;width:100%}.c-page-wrapper .c-page-right{position:-webkit-sticky;position:sticky;top:0;height:100%;overflow-y:auto}\n"] }]
         }], ctorParameters: () => [] });
 class SdLayoutStorageService {