@sinequa/atomic-angular 1.9.3 → 1.9.7

package/fesm2022/sinequa-atomic-angular.mjs

@@ -1249,41 +1249,51 @@ const PrincipalStore = signalStore({ providedIn: 'root' }, withDevtools('Princip
             .map(word => word[0]?.toUpperCase())
             .join('');
     }),
-})), withMethods((store) => ({
-    /**
-    * @deprecated use getState(PrincipalStore))
-    */
-    principal() {
-        const { userOverrideActive: _, ...rest } = getState(store);
-        // this block cannot be put in a computed due to dynamic construction object with signals, which is not supported in computed.
-        // using a method allows us to construct the principal object on each call, ensuring that the signals are properly evaluated and returned as values.
-        const principal = Object.entries(rest).reduce((acc, [k, v]) => {
-            acc[k] = v;
-            return acc;
-        }, {});
-        return principal;
-    }
-})), withPrincipalFeatures());
-function withPrincipalFeatures() {
-    return signalStoreFeature(withMethods((store) => ({
+})), withMethods((store) => {
+    // Shared across concurrent callers so two overlapping `initialize()` calls (e.g. a guard running
+    // while another initialization is already in flight) await the same fetch instead of racing two
+    // `fetchPrincipal()` requests.
+    let pendingInitialization = null;
+    return {
+        /**
+        * @deprecated use getState(PrincipalStore))
+        */
+        principal() {
+            const { userOverrideActive: _, ...rest } = getState(store);
+            // this block cannot be put in a computed due to dynamic construction object with signals, which is not supported in computed.
+            // using a method allows us to construct the principal object on each call, ensuring that the signals are properly evaluated and returned as values.
+            const principal = Object.entries(rest).reduce((acc, [k, v]) => {
+                acc[k] = v;
+                return acc;
+            }, {});
+            return principal;
+        },
         async initialize() {
-            patchState(store, { state: 'loading' });
-            try {
-                // Use the SDK's fetchPrincipal so the principal load goes through the same auth handling
-                // as the rest of atomic (credentials: "include" + the authMode-aware noAutoAuthentication
-                // flag). In SSO mode it sends noAutoAuthentication=false, letting IIS/Windows authenticate.
-                const principal = await fetchPrincipal();
-                const { userOverrideActive = false } = globalConfig;
-                patchState(store, { ...initialPrincipal, ...principal, userOverrideActive, state: 'loaded' });
-            }
-            catch (error) {
-                console.error('Principal fetch failed', error);
-                patchState(store, { state: 'error' });
-                throw error;
-            }
+            if (pendingInitialization)
+                return pendingInitialization;
+            pendingInitialization = (async () => {
+                patchState(store, { state: 'loading' });
+                try {
+                    // Use the SDK's fetchPrincipal so the principal load goes through the same auth handling
+                    // as the rest of atomic (credentials: "include" + the authMode-aware noAutoAuthentication
+                    // flag). In SSO mode it sends noAutoAuthentication=false, letting IIS/Windows authenticate.
+                    const principal = await fetchPrincipal();
+                    const { userOverrideActive = false } = globalConfig;
+                    patchState(store, { ...initialPrincipal, ...principal, userOverrideActive, state: 'loaded' });
+                }
+                catch (error) {
+                    console.error('Principal fetch failed', error);
+                    patchState(store, { state: 'error' });
+                    throw error;
+                }
+                finally {
+                    pendingInitialization = null;
+                }
+            })();
+            return pendingInitialization;
         }
-    })));
-}
+    };
+}));
 
 /**
  * Creates a debounced signal that updates its value after a specified timeout.
@@ -1580,6 +1590,12 @@ function withThemes(app, themes) {
     return app;
 }
 
+/**
+ * Mirrors @sinequa/atomic's `AUTH_REDIRECT_ATTEMPT_KEY` (authentication/constants.ts): the
+ * sessionStorage flag set right before a provider (oauth/saml) full-page redirect. Not re-exported
+ * by atomic, so mirrored here as well — the same mirroring already used in sign-in-form.ts.
+ */
+const AUTH_REDIRECT_ATTEMPT_KEY$1 = "sinequa-auth-redirect-attempt";
 /**
  * sessionStorage flag recording that an SSO re-authentication reload has already been attempted.
  *
@@ -1597,6 +1613,10 @@ function markSsoReloadAttempted() {
 function clearSsoReloadAttempt() {
     sessionStorage.removeItem(SSO_RELOAD_ATTEMPT_KEY);
 }
+// Shared across concurrent callers (e.g. the error interceptor reacting to a 401 while a component
+// also calls signIn() itself) so only one clearSessionTokens()/login() handshake actually runs; the
+// others await and receive the same result instead of each clearing/re-establishing the session.
+let pendingSignIn = null;
 /**
  * Signs the user in according to the resolved {@link globalConfig.authMode}.
  *
@@ -1614,8 +1634,34 @@ function clearSsoReloadAttempt() {
  */
 async function signIn() {
     assertInInjectionContext(signIn);
+    if (pendingSignIn)
+        return pendingSignIn;
     const router = inject(Router);
     const lastUrlAfterNavigation = inject(NavigationService).urlAfterNavigation;
+    pendingSignIn = performSignIn(router, lastUrlAfterNavigation).finally(() => {
+        // A provider redirect (oauth/saml) or an SSO reload was just triggered: the page is about to
+        // unload, but browser navigations are asynchronous — other pending work (e.g. a second,
+        // independent signIn() call from a component that bypasses the HTTP interceptor) can still run
+        // before that happens. Keep the mutex held in that case instead of releasing it, so any such
+        // late arrival gets this same (already-decided) outcome rather than starting a fresh recovery
+        // attempt that would misread the one-shot loop-guard flag — already set by THIS attempt — as a
+        // genuine repeat failure and flash the error page moments before the pending navigation succeeds.
+        const navigatingAway = sessionStorage.getItem(AUTH_REDIRECT_ATTEMPT_KEY$1) !== null || hasAttemptedSsoReload();
+        if (!navigatingAway) {
+            pendingSignIn = null;
+        }
+    });
+    return pendingSignIn;
+}
+/**
+ * @internal Test-only hook: forces the concurrent-call mutex back to its initial (unheld) state.
+ * Production code never needs this — the mutex only stays held while a redirect/reload triggered
+ * by `signIn()` is pending, a state a real page unload naturally clears by tearing down the module.
+ */
+function __resetSignInMutexForTests() {
+    pendingSignIn = null;
+}
+async function performSignIn(router, lastUrlAfterNavigation) {
     const { loginPath, authMode } = globalConfig;
     // Always clear authentication tokens first to clear any existing session
     clearSessionTokens();
@@ -1762,7 +1808,7 @@ async function bootstrapApp({ createRoutes = true } = {}) {
     }
     info('User authenticated, initializing application...');
     try {
-        await applicationService.initialize(createRoutes);
+        await applicationService.initialize(createRoutes, { isBootstrap: true });
         info(`Application initialized successfully (createRoutes: ${createRoutes}).`);
         return true;
     }
@@ -3726,9 +3772,13 @@ function AuthGuard() {
             router.navigate([loginPath], { queryParams: { returnUrl: state.url } });
             return false;
         }
-        // If the user is authenticated, initialize the principal store if it's in the initial state
+        // If the user is authenticated, make sure the principal store is loaded. Calling initialize()
+        // whenever it isn't (instead of only when state is exactly "initial") means an initialization
+        // already in flight elsewhere ("loading") is awaited rather than assumed absent — initialize()
+        // itself dedupes concurrent calls into the same in-flight fetch — and a previous failed attempt
+        // ("error") gets retried instead of permanently redirecting to login.
         try {
-            if (principalStore.state() === "initial") {
+            if (principalStore.state() !== "loaded") {
                 await principalStore.initialize();
             }
         }
@@ -3741,7 +3791,7 @@ function AuthGuard() {
         // check if the "princiapl" infos are loaded, if not navigate to the login page
         const { passwordExpirationDate, editablePartition, name, state: principalState } = getState(principalStore);
         if (principalState !== "loaded") {
-            info("PrincipalStore state is still initial after initialization attempt. Redirecting to login.");
+            info("PrincipalStore state is not 'loaded' after initialization attempt. Redirecting to login.");
             router.navigate([loginPath], { queryParams: { returnUrl: state.url } });
             return false;
         }
@@ -3784,9 +3834,12 @@ class ApplicationService {
      * 1. Calls the `initializeStores` function to initialize all the application's stores.
      * 2. Calls the `createRoutes` function to set up the application routes.
      *
+     * @param options.isBootstrap - Whether this is the initial app bootstrap (before Angular
+     * Router's own initial navigation), as opposed to a later re-initialization (e.g. user
+     * override). Forwarded to `initializeStores` — see there for why it matters.
      * @returns {Promise<void>} A promise that resolves when the initialization and route creation are complete.
      */
-    async initialize(withCreateRoutes = true) {
+    async initialize(withCreateRoutes = true, options) {
         // throw an error if no components are registered and withCreateRoutes is true
         // components are required to create the routes
         if (withCreateRoutes && !this.components.length)
@@ -3795,7 +3848,7 @@ class ApplicationService {
         // this will override the value set in your global config
         setGlobalConfig({ createRoutes: withCreateRoutes });
         info("Initializing application...");
-        await this.initializeStores();
+        await this.initializeStores(options);
         info("Application initialized");
         // this will set the title and logo of the application
         // it will also set the logo in the css variables
@@ -3824,8 +3877,16 @@ class ApplicationService {
      * - Resets the query params store (runs on first login as well as on every subsequent
      *   re-initialization, e.g. user override, so no previous user's search state leaks in).
      * - Loads the user settings and logs the state of the user settings store.
+     *
+     * @param options.isBootstrap - During the initial app bootstrap this runs inside a
+     * `provideAppInitializer`, BEFORE Angular Router's own initial navigation has processed the
+     * browser's real URL. Resetting the query params store would otherwise navigate (consuming
+     * the router's initial-navigation slot) and land the user on the wildcard route instead of the
+     * deep link they actually loaded — so URL sync is skipped in that case. Later
+     * re-initializations (user override) run with the router already navigated, so they keep
+     * syncing the reset to the URL as before.
      */
-    async initializeStores() {
+    async initializeStores(options) {
         try {
             // Fetch the application configuration
             await this.appStore.initialize();
@@ -3835,7 +3896,7 @@ class ApplicationService {
             info("principalStore", getState(this.principalStore));
             // Reset the query params (search text, filters, sort, ...) so a previous user's
             // in-memory search state doesn't leak into the next user's session. ES-32053.
-            this.queryParamsStore.reset();
+            this.queryParamsStore.reset({ syncUrl: !options?.isBootstrap });
             // Load the user settings
             await this.userSettingsStore.initialize();
             info("userSettingsStore", getState(this.userSettingsStore));
@@ -4331,8 +4392,20 @@ i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "20.3.25", ngImpo
 class NavigationService {
     router = inject(Router);
     auditService = inject(AuditService);
-    // The URL after the last navigation event, used to redirect the user after login
-    urlAfterNavigation = null;
+    // Tracks the previous NavigationEnd url, used only to dedupe audit route-change notifications
+    // in navigationEnd$ below. Kept separate from urlAfterNavigation so that getter stays correct
+    // regardless of whether anything subscribes to navigationEnd$.
+    previousNavigationUrl = null;
+    /**
+     * The URL of the current navigation, used to redirect the user after login.
+     *
+     * Sourced directly from `Router.url`, which Angular keeps up to date on every navigation with no
+     * subscription required — unlike a field updated as a side effect of `navigationEnd$` below,
+     * which only happens for whoever actually subscribes to it.
+     */
+    get urlAfterNavigation() {
+        return this.router.url !== "/login" ? this.router.url : null;
+    }
     /**
      * Observable that emits events of type `NavigationEnd` from the Angular Router.
      *
@@ -4341,19 +4414,18 @@ class NavigationService {
      * - Filters the events to only include instances of `NavigationEnd`.
      * - Taps into the event stream to extract the route name from the URL and notify the audit service of route changes,
      *   excluding duplicate navigations.
-     * - Updates the `urlAfterNavigation` property with the current URL after navigation.
      * - Shares the replayed value with a buffer size of 1 to ensure subscribers receive the latest emitted value.
      *
      * @type Observable<RouterEvent>
      */
     navigationEnd$ = this.router.events.pipe(map((event) => event), filter$1((event) => event instanceof NavigationEnd), tap((event) => {
         const url = event.url.slice(1).split("?")[0]; // Extract route name
-        if (url && url !== this.urlAfterNavigation) {
+        if (url && url !== this.previousNavigationUrl) {
             this.auditService.notifyRouteChange(url);
         }
     }), tap((event) => {
         if (event.url !== "/login") {
-            this.urlAfterNavigation = event.url;
+            this.previousNavigationUrl = event.url;
         }
     }), shareReplay(1));
     static ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "20.3.25", ngImport: i0, type: NavigationService, deps: [], target: i0.ɵɵFactoryTarget.Injectable });
@@ -4615,14 +4687,28 @@ class PreviewService {
     /**
      * Sends a message to the iframe if it exists.
      *
+     * Also keeps `selectedHighlightId` in sync with any `select` action, regardless of which
+     * caller triggered it (side panel navigation, snippet auto-select on preview open, assistant
+     * citations, etc.), so that re-enabling highlighting after it was toggled off can restore the
+     * currently selected highlight.
+     *
      * @param message - The message to be sent. It can be of any type.
      */
     sendMessage(message) {
+        if (this.isSelectMessage(message)) {
+            this.selectedHighlightId.set(message.id);
+        }
         const iframe = this.iframe;
         if (iframe) {
             iframe.postMessage(message, "*");
         }
     }
+    isSelectMessage(message) {
+        return (typeof message === "object" &&
+            message !== null &&
+            message.action === "select" &&
+            typeof message.id === "string");
+    }
     /**
      * Get preview id for an entity value for an index
      * @param entity the entity type (i.e. "geo")
@@ -10124,7 +10210,6 @@ class ArticleExtracts {
     scrollTo(type, index, usePassageHighlighter = false) {
         // if previewData contains "matchingpassages" then we use the passage highlighter otherwise we use "extractslocations"
         const category = type || this.previewService.highlightCategory;
-        this.previewService.selectedHighlightId.set(`${category}_${index}`);
         this.previewService.events.set("scrollTo");
         this.previewService.sendMessage({ action: "select", id: `${category}_${index}`, usePassageHighlighter });
     }
@@ -12442,8 +12527,12 @@ class OverrideUserDialogComponent {
             notify.success(`Welcome back ${fullName}!`, { duration: 2000 });
         })
             .catch((err) => {
+            // `err.message` already carries the backend's specific reason (e.g. "The user XYZ is
+            // disabled") when @sinequa/atomic's UnauthorizedError is thrown with one — surface it
+            // instead of a generic string so admins know why the override was rejected.
+            const message = err?.message || "An error occurred while overriding";
             error("An error occurred while overriding (initialize)", err);
-            notify.error("An error occurred while overriding (initialize)", { duration: 2000 });
+            notify.error(message, { duration: 5000, closeButton: true });
             setGlobalConfig({ userOverrideActive: false, userOverride: undefined });
         });
     }
@@ -17646,5 +17735,5 @@ const queryNameResolver = () => {
  * Generated bundle index. Do not edit.
  */
 
-export { AGGREGATIONS_NAMES, AGGREGATIONS_NAMES_PRESET_DEFAULT, APP_FEATURES, AdvancedFiltersComponent, AdvancedSearch, AdvancedSearchComponent, AggregationComponent, AggregationDateComponent, AggregationDateRangeDialogComponent, AggregationItemDirective, AggregationListComponent, AggregationPanelComponent, AggregationTreeComponent, AggregationsService, AggregationsStore, Alert, AlertDialog, AlertsComponent, AppService, AppStore, ApplicationService, ApplicationStore, ArticleEntities, ArticleExtracts, ArticleLabels, ArticleSimilarDocuments, AsideFiltersComponent, AuditFeedbackType, AuditService, AuthGuard, AuthPageComponent, AutocompleteService, BOOKMARKS_CONFIG, BOOKMARKS_OPTIONS, BackdropComponent, BackdropService, BookmarkButtonComponent, BookmarksComponent, COLLECTIONS_CONFIG, COLLECTIONS_OPTIONS, COMPONENTS_FOR_DOCUMENT_TYPE, ChangePasswordComponent, ChildMarkerDirective, CollectionsComponent, CollectionsDialog, DRAWER_COMPONENT, DRAWER_STACK_MAX_COUNT, DateComponent, DeleteCollectionDialog, DidYouMeanComponent, DocumentLocatorComponent, DrawerAdvancedFiltersComponent, DrawerComponent, DrawerNavbarComponent, DrawerPreviewComponent, DrawerService, DrawerStackComponent, DrawerStackService, DropdownInputComponent, DropdownListComponent, ErrorComponent, ExportDialog, ExportService, FILTERS_BREAKPOINT, FILTER_DATE_ALLOW_CUSTOM_RANGE, FeatureFlagsDialogComponent, FeedbackDialogComponent, FileSizePipe, FilterButtonComponent, FiltersBarComponent, HIGHLIGHTS, HighlightWordPipe, InfinityScrollDirective, InlineWorker, JsonMethodPluginService, KeyboardNavigatorDirective, LabelService, LabelsEditDialog, LoadingComponent, MetadataComponent, MissingTermsComponent, MoreButtonComponent, MoreComponent, MultiSelectLabelsComponent, MultiSelectionToolbarComponent, NON_SEARCHABLE_COLUMNS, NON_SEARCHABLE_DEFAULTS, NavbarTabsComponent, NavigationService, NoResultComponent, OpenArticleOnCtrlEnterDirective, OperatorPipe, OverflowItemDirective, OverflowManagerDirective, OverflowStopDirective, OverrideUserDialogComponent, PREVIEW_CONFIG, PagerComponent, PreviewNavigator, PreviewService, PrincipalService, PrincipalStore, QueryParamsStore, QueryService, RECENT_SEARCHES_CONFIG, RECENT_SEARCHES_OPTIONS, ROUTE_COMPONENTS, RecentSearchesComponent, ResetUserSettingsDialogComponent, SAVED_SEARCHES_CONFIG, SAVED_SEARCHES_OPTIONS, SavedSearchDialog, SavedSearchesComponent, SavedSearchesService, SearchFeedbackComponent, SearchInputFooter, SearchService, SelectArticleDirective, SelectArticleOnClickDirective, SelectionHistoryService, SelectionService, SelectionStore, ShowBookmarkDirective, SidebarNavComponent, SignInComponent, SignedOutComponent, SortSelectorComponent, SourceComponent, SourceIconPipe, SponsoredResultsComponent, SyslangPipe, THEMES, TextChunkService, ThemeProviderDirective, ThemeSelectorComponent, ThemeStore, ThemeToggleComponent, TranslocoDateImpurePipe, UserProfileDialog, UserProfileFormComponent, UserProfileService, UserSettingsStore, applyThemeToNativeElement, auditInterceptorFn, authInterceptorFn, bodyInterceptorFn, bootstrapApp, buildQuery, debouncedSignal, errorInterceptorFn, getCurrentPath, getCurrentQueryName, getQueryNameFromRoute, injectRouteNavigation, legacyFilterToFilter, processCssVars, queryNameResolver, signIn, themeColorNameToCssVariable, themeColorsToCssVariables, toastInterceptorFn, withAggregationsFeatures, withAlertsFeatures, withAppFeatures, withApplicationFeatures, withAssistantFeatures, withBasketsFeatures, withBookmarkFeatures, withBootstrapApp, withExtractsFeatures, withFetch, withMultiSelectionFeatures, withPrincipalFeatures, withQueryParamsFeatures, withRecentSearchesFeatures, withSavedSearchesFeatures, withSelectionFeatures, withThemeBodyHook, withThemes, withThemesFeatures, withUserSettingsFeatures };
+export { AGGREGATIONS_NAMES, AGGREGATIONS_NAMES_PRESET_DEFAULT, APP_FEATURES, AdvancedFiltersComponent, AdvancedSearch, AdvancedSearchComponent, AggregationComponent, AggregationDateComponent, AggregationDateRangeDialogComponent, AggregationItemDirective, AggregationListComponent, AggregationPanelComponent, AggregationTreeComponent, AggregationsService, AggregationsStore, Alert, AlertDialog, AlertsComponent, AppService, AppStore, ApplicationService, ApplicationStore, ArticleEntities, ArticleExtracts, ArticleLabels, ArticleSimilarDocuments, AsideFiltersComponent, AuditFeedbackType, AuditService, AuthGuard, AuthPageComponent, AutocompleteService, BOOKMARKS_CONFIG, BOOKMARKS_OPTIONS, BackdropComponent, BackdropService, BookmarkButtonComponent, BookmarksComponent, COLLECTIONS_CONFIG, COLLECTIONS_OPTIONS, COMPONENTS_FOR_DOCUMENT_TYPE, ChangePasswordComponent, ChildMarkerDirective, CollectionsComponent, CollectionsDialog, DRAWER_COMPONENT, DRAWER_STACK_MAX_COUNT, DateComponent, DeleteCollectionDialog, DidYouMeanComponent, DocumentLocatorComponent, DrawerAdvancedFiltersComponent, DrawerComponent, DrawerNavbarComponent, DrawerPreviewComponent, DrawerService, DrawerStackComponent, DrawerStackService, DropdownInputComponent, DropdownListComponent, ErrorComponent, ExportDialog, ExportService, FILTERS_BREAKPOINT, FILTER_DATE_ALLOW_CUSTOM_RANGE, FeatureFlagsDialogComponent, FeedbackDialogComponent, FileSizePipe, FilterButtonComponent, FiltersBarComponent, HIGHLIGHTS, HighlightWordPipe, InfinityScrollDirective, InlineWorker, JsonMethodPluginService, KeyboardNavigatorDirective, LabelService, LabelsEditDialog, LoadingComponent, MetadataComponent, MissingTermsComponent, MoreButtonComponent, MoreComponent, MultiSelectLabelsComponent, MultiSelectionToolbarComponent, NON_SEARCHABLE_COLUMNS, NON_SEARCHABLE_DEFAULTS, NavbarTabsComponent, NavigationService, NoResultComponent, OpenArticleOnCtrlEnterDirective, OperatorPipe, OverflowItemDirective, OverflowManagerDirective, OverflowStopDirective, OverrideUserDialogComponent, PREVIEW_CONFIG, PagerComponent, PreviewNavigator, PreviewService, PrincipalService, PrincipalStore, QueryParamsStore, QueryService, RECENT_SEARCHES_CONFIG, RECENT_SEARCHES_OPTIONS, ROUTE_COMPONENTS, RecentSearchesComponent, ResetUserSettingsDialogComponent, SAVED_SEARCHES_CONFIG, SAVED_SEARCHES_OPTIONS, SavedSearchDialog, SavedSearchesComponent, SavedSearchesService, SearchFeedbackComponent, SearchInputFooter, SearchService, SelectArticleDirective, SelectArticleOnClickDirective, SelectionHistoryService, SelectionService, SelectionStore, ShowBookmarkDirective, SidebarNavComponent, SignInComponent, SignedOutComponent, SortSelectorComponent, SourceComponent, SourceIconPipe, SponsoredResultsComponent, SyslangPipe, THEMES, TextChunkService, ThemeProviderDirective, ThemeSelectorComponent, ThemeStore, ThemeToggleComponent, TranslocoDateImpurePipe, UserProfileDialog, UserProfileFormComponent, UserProfileService, UserSettingsStore, __resetSignInMutexForTests, applyThemeToNativeElement, auditInterceptorFn, authInterceptorFn, bodyInterceptorFn, bootstrapApp, buildQuery, debouncedSignal, errorInterceptorFn, getCurrentPath, getCurrentQueryName, getQueryNameFromRoute, injectRouteNavigation, legacyFilterToFilter, processCssVars, queryNameResolver, signIn, themeColorNameToCssVariable, themeColorsToCssVariables, toastInterceptorFn, withAggregationsFeatures, withAlertsFeatures, withAppFeatures, withApplicationFeatures, withAssistantFeatures, withBasketsFeatures, withBookmarkFeatures, withBootstrapApp, withExtractsFeatures, withFetch, withMultiSelectionFeatures, withQueryParamsFeatures, withRecentSearchesFeatures, withSavedSearchesFeatures, withSelectionFeatures, withThemeBodyHook, withThemes, withThemesFeatures, withUserSettingsFeatures };
 //# sourceMappingURL=sinequa-atomic-angular.mjs.map