@sneat/auth-core 0.1.3 → 0.1.6

package/esm2022/index.js

@@ -0,0 +1,8 @@
+export * from './lib/login-required-service.service';
+export * from './lib/private-token-store.service';
+export * from './lib/sneat-auth.interface';
+export * from './lib/sneat-auth-guard';
+export * from './lib/sneat-auth-state-service';
+export * from './lib/telegram-auth.service';
+export * from './lib/user';
+//# sourceMappingURL=index.js.map

package/esm2022/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../libs/auth/core/src/index.ts"],"names":[],"mappings":"AAAA,cAAc,sCAAsC,CAAC;AACrD,cAAc,mCAAmC,CAAC;AAClD,cAAc,4BAA4B,CAAC;AAC3C,cAAc,wBAAwB,CAAC;AACvC,cAAc,gCAAgC,CAAC;AAC/C,cAAc,6BAA6B,CAAC;AAC5C,cAAc,YAAY,CAAC","sourcesContent":["export * from './lib/login-required-service.service';\nexport * from './lib/private-token-store.service';\nexport * from './lib/sneat-auth.interface';\nexport * from './lib/sneat-auth-guard';\nexport * from './lib/sneat-auth-state-service';\nexport * from './lib/telegram-auth.service';\nexport * from './lib/user';\n"]}

package/esm2022/lib/login-required-service.service.js

@@ -0,0 +1,20 @@
+import { Injectable, inject } from '@angular/core';
+import { SneatAuthStateService } from './sneat-auth-state-service';
+import * as i0 from "@angular/core";
+export class LoginRequiredServiceService {
+    constructor() {
+        const authState = inject(SneatAuthStateService);
+        authState.authState.subscribe(() => {
+            // Intentionally empty - just subscribing to trigger the observable
+        });
+    }
+    static { this.ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "21.2.0", ngImport: i0, type: LoginRequiredServiceService, deps: [], target: i0.ɵɵFactoryTarget.Injectable }); }
+    static { this.ɵprov = i0.ɵɵngDeclareInjectable({ minVersion: "12.0.0", version: "21.2.0", ngImport: i0, type: LoginRequiredServiceService, providedIn: 'root' }); }
+}
+i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "21.2.0", ngImport: i0, type: LoginRequiredServiceService, decorators: [{
+            type: Injectable,
+            args: [{
+                    providedIn: 'root',
+                }]
+        }], ctorParameters: () => [] });
+//# sourceMappingURL=login-required-service.service.js.map

package/esm2022/lib/login-required-service.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"login-required-service.service.js","sourceRoot":"","sources":["../../../../../../libs/auth/core/src/lib/login-required-service.service.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,eAAe,CAAC;AACnD,OAAO,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;;AAKnE,MAAM,OAAO,2BAA2B;IACtC;QACE,MAAM,SAAS,GAAG,MAAM,CAAC,qBAAqB,CAAC,CAAC;QAChD,SAAS,CAAC,SAAS,CAAC,SAAS,CAAC,GAAG,EAAE;YACjC,mEAAmE;QACrE,CAAC,CAAC,CAAC;IACL,CAAC;8GANU,2BAA2B;kHAA3B,2BAA2B,cAF1B,MAAM;;2FAEP,2BAA2B;kBAHvC,UAAU;mBAAC;oBACV,UAAU,EAAE,MAAM;iBACnB","sourcesContent":["import { Injectable, inject } from '@angular/core';\nimport { SneatAuthStateService } from './sneat-auth-state-service';\n\n@Injectable({\n  providedIn: 'root',\n})\nexport class LoginRequiredServiceService {\n  constructor() {\n    const authState = inject(SneatAuthStateService);\n    authState.authState.subscribe(() => {\n      // Intentionally empty - just subscribing to trigger the observable\n    });\n  }\n}\n"]}

package/esm2022/lib/private-token-store.service.js

@@ -0,0 +1,36 @@
+import { Injectable } from '@angular/core';
+import { of, Subject } from 'rxjs';
+import * as i0 from "@angular/core";
+const tokenKey = (domain, projectId) => `private/tokens/${domain}/${projectId}`;
+export const canceledByUser = 'canceled by user';
+export class PrivateTokenStoreService {
+    getPrivateToken(domain, projectId) {
+        // Consider storing all tokens in a single item
+        const key = tokenKey(domain, projectId);
+        let token = localStorage.getItem(key);
+        if (token) {
+            return of(token);
+        }
+        const subj = new Subject();
+        setTimeout(() => {
+            token = prompt(`Please provide access token for ${domain}:`);
+            if (token) {
+                localStorage.setItem(key, token);
+                subj.next(token);
+            }
+            else {
+                subj.error(canceledByUser);
+            }
+        }, 1);
+        return subj.asObservable();
+    }
+    static { this.ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "21.2.0", ngImport: i0, type: PrivateTokenStoreService, deps: [], target: i0.ɵɵFactoryTarget.Injectable }); }
+    static { this.ɵprov = i0.ɵɵngDeclareInjectable({ minVersion: "12.0.0", version: "21.2.0", ngImport: i0, type: PrivateTokenStoreService, providedIn: 'root' }); }
+}
+i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "21.2.0", ngImport: i0, type: PrivateTokenStoreService, decorators: [{
+            type: Injectable,
+            args: [{
+                    providedIn: 'root',
+                }]
+        }] });
+//# sourceMappingURL=private-token-store.service.js.map

package/esm2022/lib/private-token-store.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"private-token-store.service.js","sourceRoot":"","sources":["../../../../../../libs/auth/core/src/lib/private-token-store.service.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAC3C,OAAO,EAAc,EAAE,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;;AAE/C,MAAM,QAAQ,GAAG,CAAC,MAAc,EAAE,SAAiB,EAAE,EAAE,CACrD,kBAAkB,MAAM,IAAI,SAAS,EAAE,CAAC;AAE1C,MAAM,CAAC,MAAM,cAAc,GAAG,kBAAkB,CAAC;AAKjD,MAAM,OAAO,wBAAwB;IAC5B,eAAe,CACpB,MAAc,EACd,SAAiB;QAEjB,+CAA+C;QAC/C,MAAM,GAAG,GAAG,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;QACxC,IAAI,KAAK,GAAG,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACtC,IAAI,KAAK,EAAE,CAAC;YACV,OAAO,EAAE,CAAC,KAAK,CAAC,CAAC;QACnB,CAAC;QAED,MAAM,IAAI,GAAG,IAAI,OAAO,EAAU,CAAC;QACnC,UAAU,CAAC,GAAG,EAAE;YACd,KAAK,GAAG,MAAM,CAAC,mCAAmC,MAAM,GAAG,CAAC,CAAC;YAC7D,IAAI,KAAK,EAAE,CAAC;gBACV,YAAY,CAAC,OAAO,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;gBACjC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACnB,CAAC;iBAAM,CAAC;gBACN,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;YAC7B,CAAC;QACH,CAAC,EAAE,CAAC,CAAC,CAAC;QACN,OAAO,IAAI,CAAC,YAAY,EAAE,CAAC;IAC7B,CAAC;8GAvBU,wBAAwB;kHAAxB,wBAAwB,cAFvB,MAAM;;2FAEP,wBAAwB;kBAHpC,UAAU;mBAAC;oBACV,UAAU,EAAE,MAAM;iBACnB","sourcesContent":["import { Injectable } from '@angular/core';\nimport { Observable, of, Subject } from 'rxjs';\n\nconst tokenKey = (domain: string, projectId: string) =>\n  `private/tokens/${domain}/${projectId}`;\n\nexport const canceledByUser = 'canceled by user';\n\n@Injectable({\n  providedIn: 'root',\n})\nexport class PrivateTokenStoreService {\n  public getPrivateToken(\n    domain: string,\n    projectId: string,\n  ): Observable<string> {\n    // Consider storing all tokens in a single item\n    const key = tokenKey(domain, projectId);\n    let token = localStorage.getItem(key);\n    if (token) {\n      return of(token);\n    }\n\n    const subj = new Subject<string>();\n    setTimeout(() => {\n      token = prompt(`Please provide access token for ${domain}:`);\n      if (token) {\n        localStorage.setItem(key, token);\n        subj.next(token);\n      } else {\n        subj.error(canceledByUser);\n      }\n    }, 1);\n    return subj.asObservable();\n  }\n}\n"]}

package/esm2022/lib/sneat-auth-guard.js

@@ -0,0 +1,79 @@
+import { Router, } from '@angular/router';
+import { Injectable, inject } from '@angular/core';
+import { Auth } from '@angular/fire/auth';
+import { map } from 'rxjs/operators';
+import * as i0 from "@angular/core";
+export const redirectToLoginIfNotSignedIn = map((user) => {
+    if (user) {
+        return true;
+    }
+    let url = '/login';
+    if (location.pathname != '/') {
+        url += '#' + location.pathname;
+    }
+    return url;
+});
+export class SneatAuthGuard /*implements CanLoad, CanActivate, CanActivateChild*/ {
+    constructor() {
+        this.router = inject(Router);
+        this.auth = inject(Auth);
+    }
+    canLoad(_route, _segments) {
+        {
+            // console.log('SneatAuthGuard.canLoad', route, segments);
+            // const authPipeFactory =
+            // 	(route.data && route.data['authCanLoadGuardPipe'] as AuthCanLoadPipeGenerator) ||
+            // 	(() => redirectToLoginIfNotSignedIn);
+            // const subj = new Subject<boolean>();
+            // onAuthStateChanged(this.auth, {
+            // 	next: (user) => {
+            // 		console.log('onAuthStateChanged', user);
+            // 	}
+            // })
+            // return this.auth.user.pipe(
+            // 	map((user) => {
+            // 		console.log('user', user);
+            // 		return user;
+            // 	}),
+            // 	take(1),
+            // 	authPipeFactory(route, segments),
+            // 	map((can) => {
+            // 		console.log('can', can);
+            // 		if (typeof can === 'boolean') {
+            // 			return can;
+            // 		} else if (Array.isArray(can)) {
+            // 			return this.router.createUrlTree(can);
+            // 		} else {
+            // 			return this.router.parseUrl(can);
+            // 		}
+            // 	}),
+            // );
+            return true;
+        }
+    }
+    canActivate(_route, _state) {
+        // console.log('SneatAuthGuard.canActivate', route, state);
+        return true;
+    }
+    canActivateChild(_childRoute, _state) {
+        // console.log('SneatAuthGuard.canActivateChild', childRoute, state);
+        return true;
+    }
+    static { this.ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "21.2.0", ngImport: i0, type: SneatAuthGuard /*implements CanLoad, CanActivate, CanActivateChild*/, deps: [], target: i0.ɵɵFactoryTarget.Injectable }); }
+    static { this.ɵprov = i0.ɵɵngDeclareInjectable({ minVersion: "12.0.0", version: "21.2.0", ngImport: i0, type: SneatAuthGuard /*implements CanLoad, CanActivate, CanActivateChild*/, providedIn: 'root' }); }
+}
+i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "21.2.0", ngImport: i0, type: SneatAuthGuard /*implements CanLoad, CanActivate, CanActivateChild*/, decorators: [{
+            type: Injectable,
+            args: [{
+                    providedIn: 'root',
+                }]
+        }] });
+export const canLoad = (pipe) => ({
+    canLoad: [SneatAuthGuard],
+    data: { authCanLoadGuardPipe: pipe },
+});
+export const SNEAT_AUTH_GUARDS = {
+    canActivate: [SneatAuthGuard],
+    canLoad: [SneatAuthGuard],
+};
+//# sourceMappingURL=sneat-auth-guard.js.map

package/esm2022/lib/sneat-auth-guard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sneat-auth-guard.js","sourceRoot":"","sources":["../../../../../../libs/auth/core/src/lib/sneat-auth-guard.ts"],"names":[],"mappings":"AAAA,OAAO,EAML,MAAM,GAIP,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,eAAe,CAAC;AACnD,OAAO,EAAE,IAAI,EAAE,MAAM,oBAAoB,CAAC;AAC1C,OAAO,EAAE,GAAG,EAAE,MAAM,gBAAgB,CAAC;;AAQrC,MAAM,CAAC,MAAM,4BAA4B,GAAa,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;IACjE,IAAI,IAAI,EAAE,CAAC;QACT,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,GAAG,GAAG,QAAQ,CAAC;IACnB,IAAI,QAAQ,CAAC,QAAQ,IAAI,GAAG,EAAE,CAAC;QAC7B,GAAG,IAAI,GAAG,GAAG,QAAQ,CAAC,QAAQ,CAAC;IACjC,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC,CAAC,CAAC;AAKH,MAAM,OAAO,cAAc,CAAC,qDAAqD;IAHjF;QAImB,WAAM,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;QACxB,SAAI,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;KA0DtC;IAxDQ,OAAO,CACZ,MAAa,EACb,SAAuB;QAMvB,CAAC;YACC,0DAA0D;YAC1D,0BAA0B;YAC1B,qFAAqF;YACrF,yCAAyC;YACzC,uCAAuC;YACvC,kCAAkC;YAClC,qBAAqB;YACrB,6CAA6C;YAC7C,KAAK;YACL,KAAK;YACL,8BAA8B;YAC9B,mBAAmB;YACnB,+BAA+B;YAC/B,iBAAiB;YACjB,OAAO;YACP,YAAY;YACZ,qCAAqC;YACrC,kBAAkB;YAClB,6BAA6B;YAC7B,oCAAoC;YACpC,iBAAiB;YACjB,qCAAqC;YACrC,4CAA4C;YAC5C,aAAa;YACb,uCAAuC;YACvC,MAAM;YACN,OAAO;YACP,KAAK;YACL,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAEM,WAAW,CAChB,MAA8B,EAC9B,MAA2B;QAE3B,2DAA2D;QAC3D,OAAO,IAAI,CAAC;IACd,CAAC;IAED,gBAAgB,CACd,WAAmC,EACnC,MAA2B;QAE3B,qEAAqE;QACrE,OAAO,IAAI,CAAC;IACd,CAAC;8GA3DU,cAAc,CAAC,qDAAqD;kHAApE,cAAc,CAAC,qDAAqD,cAFnE,MAAM;;2FAEP,cAAc,CAAC,qDAAqD;kBAHhF,UAAU;mBAAC;oBACV,UAAU,EAAE,MAAM;iBACnB;;AA+DD,MAAM,CAAC,MAAM,OAAO,GAAG,CAAC,IAA+B,EAAE,EAAE,CAAC,CAAC;IAC3D,OAAO,EAAE,CAAC,cAAc,CAAC;IACzB,IAAI,EAAE,EAAE,oBAAoB,EAAE,IAAI,EAAE;CACrC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,iBAAiB,GAAG;IAC/B,WAAW,EAAE,CAAC,cAAc,CAAC;IAC7B,OAAO,EAAE,CAAC,cAAc,CAAC;CAC1B,CAAC","sourcesContent":["import {\n  ActivatedRouteSnapshot,\n  // CanActivate,\n  // CanActivateChild,\n  // CanLoad,\n  Route,\n  Router,\n  RouterStateSnapshot,\n  UrlSegment,\n  UrlTree,\n} from '@angular/router';\nimport { Observable } from 'rxjs';\nimport { Injectable, inject } from '@angular/core';\nimport { Auth } from '@angular/fire/auth';\nimport { map } from 'rxjs/operators';\nimport { AuthPipe } from '@angular/fire/auth-guard';\n\ntype AuthCanLoadPipeGenerator = (\n  route: Route,\n  segments: UrlSegment[],\n) => AuthPipe;\n\nexport const redirectToLoginIfNotSignedIn: AuthPipe = map((user) => {\n  if (user) {\n    return true;\n  }\n  let url = '/login';\n  if (location.pathname != '/') {\n    url += '#' + location.pathname;\n  }\n  return url;\n});\n\n@Injectable({\n  providedIn: 'root',\n})\nexport class SneatAuthGuard /*implements CanLoad, CanActivate, CanActivateChild*/ {\n  private readonly router = inject(Router);\n  private readonly auth = inject(Auth);\n\n  public canLoad(\n    _route: Route,\n    _segments: UrlSegment[],\n  ):\n    | Observable<boolean | UrlTree>\n    | Promise<boolean | UrlTree>\n    | boolean\n    | UrlTree {\n    {\n      // console.log('SneatAuthGuard.canLoad', route, segments);\n      // const authPipeFactory =\n      // \t(route.data && route.data['authCanLoadGuardPipe'] as AuthCanLoadPipeGenerator) ||\n      // \t(() => redirectToLoginIfNotSignedIn);\n      // const subj = new Subject<boolean>();\n      // onAuthStateChanged(this.auth, {\n      // \tnext: (user) => {\n      // \t\tconsole.log('onAuthStateChanged', user);\n      // \t}\n      // })\n      // return this.auth.user.pipe(\n      // \tmap((user) => {\n      // \t\tconsole.log('user', user);\n      // \t\treturn user;\n      // \t}),\n      // \ttake(1),\n      // \tauthPipeFactory(route, segments),\n      // \tmap((can) => {\n      // \t\tconsole.log('can', can);\n      // \t\tif (typeof can === 'boolean') {\n      // \t\t\treturn can;\n      // \t\t} else if (Array.isArray(can)) {\n      // \t\t\treturn this.router.createUrlTree(can);\n      // \t\t} else {\n      // \t\t\treturn this.router.parseUrl(can);\n      // \t\t}\n      // \t}),\n      // );\n      return true;\n    }\n  }\n\n  public canActivate(\n    _route: ActivatedRouteSnapshot,\n    _state: RouterStateSnapshot, //: Observable<boolean | UrlTree> | Promise<boolean | UrlTree> | boolean | UrlTree\n  ) {\n    // console.log('SneatAuthGuard.canActivate', route, state);\n    return true;\n  }\n\n  canActivateChild(\n    _childRoute: ActivatedRouteSnapshot,\n    _state: RouterStateSnapshot, // : Observable<boolean | UrlTree> | Promise<boolean | UrlTree> | boolean | UrlTree\n  ) {\n    // console.log('SneatAuthGuard.canActivateChild', childRoute, state);\n    return true;\n  }\n}\n\nexport const canLoad = (pipe?: AuthCanLoadPipeGenerator) => ({\n  canLoad: [SneatAuthGuard],\n  data: { authCanLoadGuardPipe: pipe },\n});\n\nexport const SNEAT_AUTH_GUARDS = {\n  canActivate: [SneatAuthGuard],\n  canLoad: [SneatAuthGuard],\n};\n"]}

package/esm2022/lib/sneat-auth-state-service.js

@@ -0,0 +1,267 @@
+import { Capacitor } from '@capacitor/core';
+import { FirebaseAuthentication, } from '@capacitor-firebase/authentication';
+import { AnalyticsService, } from '@sneat/core';
+import { BehaviorSubject, from } from 'rxjs';
+import { Injectable, inject } from '@angular/core';
+import { ErrorLogger } from '@sneat/core';
+import { distinctUntilChanged, shareReplay } from 'rxjs/operators';
+import { Auth, getAuth, signInWithCredential, } from '@angular/fire/auth';
+import { GoogleAuthProvider, OAuthProvider, GithubAuthProvider, FacebookAuthProvider, signInWithEmailLink, signInWithCustomToken, signInWithPopup, linkWithPopup, unlink, } from 'firebase/auth';
+// TODO: fix & remove this eslint hint @nrwl/nx/enforce-module-boundaries
+import { newRandomId } from '@sneat/random';
+import * as i0 from "@angular/core";
+export var AuthStatuses;
+(function (AuthStatuses) {
+    AuthStatuses["authenticating"] = "authenticating";
+    AuthStatuses["authenticated"] = "authenticated";
+    AuthStatuses["notAuthenticated"] = "notAuthenticated";
+})(AuthStatuses || (AuthStatuses = {}));
+const initialAuthStatus = AuthStatuses.authenticating;
+export const initialSneatAuthState = { status: initialAuthStatus };
+export class SneatAuthStateService {
+    // private readonly fbAuth: Auth;
+    constructor() {
+        this.errorLogger = inject(ErrorLogger);
+        this.analyticsService = inject(AnalyticsService);
+        this.fbAuth = inject(Auth);
+        this.id = newRandomId({ len: 5 });
+        this.authStatus$ = new BehaviorSubject(initialAuthStatus);
+        this.authStatus = this.authStatus$
+            .asObservable()
+            .pipe(distinctUntilChanged());
+        this.authUser$ = new BehaviorSubject(undefined);
+        this.authUser = this.authUser$.asObservable();
+        this.authState$ = new BehaviorSubject(initialSneatAuthState);
+        this.authState = this.authState$.asObservable().pipe(
+        // tap(v => console.log('SneatAuthStateService => SneatAuthState:', v)),
+        shareReplay(1));
+        const errorLogger = this.errorLogger;
+        this.fbAuth.onIdTokenChanged({
+            next: (firebaseUser) => {
+                const status = firebaseUser
+                    ? AuthStatuses.authenticated
+                    : AuthStatuses.notAuthenticated;
+                if (firebaseUser &&
+                    this.authState$.value?.user?.uid !== firebaseUser?.uid) {
+                    this.analyticsService.identify(firebaseUser.uid);
+                }
+                firebaseUser
+                    ?.getIdToken()
+                    .then((token) => {
+                    const current = this.authState$.value || {};
+                    this.authState$.next({
+                        ...current,
+                        status,
+                        token,
+                        user: this.authUser$.value,
+                    });
+                    this.authStatus$.next(status); // Should be after authState$
+                })
+                    .catch((err) => {
+                    const current = this.authState$.value || {};
+                    this.authState$.next({
+                        ...current,
+                        err: `fbUser.getIdToken() failed: ${err}`,
+                    });
+                    this.errorLogger.logError(err, 'Failed in fbUser.getIdToken()');
+                });
+            },
+            error: (err) => {
+                const current = this.authState$.value || {};
+                this.authState$.next({
+                    ...current,
+                    err: `fbAuth.onIdTokenChanged() failed: ${err}`,
+                });
+                errorLogger.logError(err, 'failed in fbAuth.onIdTokenChanged');
+            },
+            complete: () => void 0,
+        });
+        this.fbAuth.onAuthStateChanged({
+            complete: () => void 0,
+            next: (fbUser) => {
+                // console.log(
+                //   `SneatAuthStateService => authStatus: ${this.authStatus$.value}; fbUser`,
+                //   fbUser,
+                // );
+                const authUser = createSneatAuthUserFromFbUser(fbUser);
+                const status = authUser
+                    ? AuthStatuses.authenticated
+                    : AuthStatuses.notAuthenticated;
+                this.authStatus$.next(status);
+                this.authUser$.next(authUser);
+                this.authState$.next({
+                    ...this.authState$.value,
+                    user: authUser,
+                    status,
+                });
+            },
+            error: (err) => {
+                this.errorLogger.logError(err, 'failed to retrieve Firebase auth user information');
+                const current = this.authState$.value || {};
+                this.authState$.next({
+                    ...current,
+                    err: `fbAuth.onAuthStateChanged() failed: ${err}`,
+                });
+            },
+        });
+    }
+    signOut() {
+        return this.fbAuth.signOut();
+    }
+    signInWithToken(token) {
+        return signInWithCustomToken(this.fbAuth, token);
+    }
+    signInWithEmailLink(email) {
+        return from(signInWithEmailLink(this.fbAuth, email));
+    }
+    async signInOnNativeLayer(authProviderID) {
+        let signInResult;
+        const o = { skipNativeAuth: true };
+        switch (authProviderID) {
+            case 'google.com':
+                signInResult = await FirebaseAuthentication.signInWithGoogle(o);
+                break;
+            case 'apple.com':
+                signInResult = await FirebaseAuthentication.signInWithApple(o);
+                break;
+            case 'facebook.com':
+                signInResult = await FirebaseAuthentication.signInWithFacebook(o);
+                break;
+            case 'microsoft.com':
+                signInResult = await FirebaseAuthentication.signInWithMicrosoft(o);
+                break;
+            default:
+                return Promise.reject('unsupported auth provider: ' + authProviderID);
+        }
+        // console.log(
+        //   `SneatAuthStateService.signInWith(${authProviderID}) => signed in on native layer, authenticating in webview...`,
+        //   signInResult,
+        // );
+        // we need to authenticate on webview layer using the id token and nonce from signInResult
+        const userCredential = await this.authenticateOnWebviewLayer(authProviderID, signInResult);
+        return Promise.resolve(userCredential);
+    }
+    async authenticateOnWebviewLayer(authProviderID, signInResult) {
+        const oauthProvider = new OAuthProvider(authProviderID);
+        const credential = oauthProvider.credential({
+            idToken: signInResult.credential?.idToken,
+            accessToken: signInResult.credential?.accessToken,
+            rawNonce: signInResult.credential?.nonce,
+        });
+        const auth = getAuth();
+        const userCredential = await signInWithCredential(auth, credential);
+        // Get a valid Firebase ID token that has a 'kid' header
+        const _firebaseIdToken = await userCredential.user.getIdToken();
+        return Promise.resolve(userCredential);
+    }
+    async signInWithWebSDK(authProviderID) {
+        const authProvider = getAuthProvider(authProviderID);
+        const userCredential = await signInWithPopup(this.fbAuth, authProvider);
+        return Promise.resolve(userCredential);
+    }
+    async linkWith(authProviderID) {
+        const authProvider = getAuthProvider(authProviderID);
+        if (!this.fbAuth.currentUser) {
+            return Promise.reject('no current user');
+        }
+        const userCredential = await linkWithPopup(this.fbAuth.currentUser, authProvider);
+        return Promise.resolve(userCredential);
+    }
+    async unlinkAuthProvider(authProviderID) {
+        const currentUser = this.fbAuth.currentUser;
+        if (currentUser) {
+            try {
+                const updatedUser = await unlink(currentUser, authProviderID);
+                const authUser = createSneatAuthUserFromFbUser(updatedUser);
+                this.authUser$.next(authUser);
+                return Promise.resolve();
+            }
+            catch (error) {
+                return Promise.reject(`Failed to unlink ${authProviderID} account:` + error);
+            }
+        }
+        else {
+            return Promise.reject('No user is currently signed in.');
+        }
+    }
+    async signInWith(authProviderID) {
+        // console.log(
+        //   `SneatAuthStateService.signInWith(${authProviderID}), isSigningInWith=${this.isSigningInWith}, location.protocol=${location.protocol}`,
+        // );
+        this.analyticsService.logEvent('signingInWith', {
+            provider: authProviderID,
+        });
+        try {
+            if (this.isSigningInWith) {
+                return Promise.reject(new Error(`a repeated call to SneatAuthStateService.signInWith(${authProviderID}) white previous sign in with ${this.isSigningInWith} is in progress`));
+            }
+            let userCredential = undefined;
+            if (Capacitor.isNativePlatform()) {
+                userCredential = await this.signInOnNativeLayer(authProviderID);
+            }
+            else {
+                userCredential = await this.signInWithWebSDK(authProviderID);
+            }
+            this.isSigningInWith = undefined;
+            this.analyticsService.logEvent('signedInWith', {
+                provider: authProviderID,
+            });
+            return Promise.resolve(userCredential);
+        }
+        catch (e) {
+            this.isSigningInWith = undefined;
+            return Promise.reject(e);
+        }
+    }
+    static { this.ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "21.2.0", ngImport: i0, type: SneatAuthStateService, deps: [], target: i0.ɵɵFactoryTarget.Injectable }); }
+    static { this.ɵprov = i0.ɵɵngDeclareInjectable({ minVersion: "12.0.0", version: "21.2.0", ngImport: i0, type: SneatAuthStateService, providedIn: 'root' }); }
+}
+i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "21.2.0", ngImport: i0, type: SneatAuthStateService, decorators: [{
+            type: Injectable,
+            args: [{ providedIn: 'root' }]
+        }], ctorParameters: () => [] });
+function getAuthProvider(authProviderID) {
+    switch (authProviderID) {
+        case 'google.com':
+            return new GoogleAuthProvider();
+        case 'apple.com':
+            return new OAuthProvider('apple.com');
+        //
+        // https://developer.apple.com/documentation/sign_in_with_apple/incorporating-sign-in-with-apple-into-other-platforms
+        // (authProvider as OAuthProvider).setCustomParameters({
+        // 	// 	// Localize the Apple authentication screen in current app locale.
+        // 	locale: 'en', // TODO: set locale
+        // });
+        case 'microsoft.com':
+            return new OAuthProvider('microsoft.com');
+        case 'facebook.com': {
+            const facebookAuthProvider = new FacebookAuthProvider();
+            facebookAuthProvider.addScope('email');
+            return facebookAuthProvider;
+        }
+        case 'github.com': {
+            const githubAuthProvider = new GithubAuthProvider();
+            githubAuthProvider.addScope('read:user');
+            githubAuthProvider.addScope('user:email');
+            return githubAuthProvider;
+        }
+        default:
+            throw new Error('unsupported auth provider: ' + authProviderID);
+    }
+}
+function createSneatAuthUserFromFbUser(fbUser) {
+    return (fbUser && {
+        isAnonymous: fbUser.isAnonymous,
+        emailVerified: fbUser.emailVerified,
+        email: fbUser.email,
+        uid: fbUser.uid,
+        displayName: fbUser.displayName,
+        phoneNumber: fbUser.phoneNumber,
+        photoURL: fbUser.photoURL,
+        providerId: fbUser.providerData?.length === 1 && fbUser.providerData[0]
+            ? fbUser.providerData[0].providerId
+            : fbUser.providerId,
+        providerData: fbUser.providerData,
+    });
+}
+//# sourceMappingURL=sneat-auth-state-service.js.map

package/esm2022/lib/sneat-auth-state-service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sneat-auth-state-service.js","sourceRoot":"","sources":["../../../../../../libs/auth/core/src/lib/sneat-auth-state-service.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EACL,sBAAsB,GAEvB,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EACL,gBAAgB,GAGjB,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,eAAe,EAAE,IAAI,EAAc,MAAM,MAAM,CAAC;AACzD,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,eAAe,CAAC;AACnD,OAAO,EAAE,WAAW,EAAgB,MAAM,aAAa,CAAC;AACxD,OAAO,EAAE,oBAAoB,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AACnE,OAAO,EACL,IAAI,EAEJ,OAAO,EACP,oBAAoB,GAIrB,MAAM,oBAAoB,CAAC;AAE5B,OAAO,EACL,kBAAkB,EAClB,aAAa,EACb,kBAAkB,EAClB,oBAAoB,EACpB,mBAAmB,EACnB,qBAAqB,EACrB,eAAe,EACf,aAAa,EACb,MAAM,GACP,MAAM,eAAe,CAAC;AAEvB,yEAAyE;AAEzE,OAAO,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;;AAE5C,MAAM,CAAN,IAAY,YAIX;AAJD,WAAY,YAAY;IACtB,iDAAiC,CAAA;IACjC,+CAA+B,CAAA;IAC/B,qDAAqC,CAAA;AACvC,CAAC,EAJW,YAAY,KAAZ,YAAY,QAIvB;AAiBD,MAAM,iBAAiB,GAAG,YAAY,CAAC,cAAc,CAAC;AACtD,MAAM,CAAC,MAAM,qBAAqB,GAAG,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAAC;AAGnE,MAAM,OAAO,qBAAqB;IA4BhC,iCAAiC;IAEjC;QA7BiB,gBAAW,GAAG,MAAM,CAAe,WAAW,CAAC,CAAC;QAChD,qBAAgB,GAC/B,MAAM,CAAoB,gBAAgB,CAAC,CAAC;QACrC,WAAM,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;QAEd,OAAE,GAAG,WAAW,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;QAE7B,gBAAW,GAAG,IAAI,eAAe,CAChD,iBAAiB,CAClB,CAAC;QACc,eAAU,GAAG,IAAI,CAAC,WAAW;aAC1C,YAAY,EAAE;aACd,IAAI,CAAC,oBAAoB,EAAE,CAAC,CAAC;QAEf,cAAS,GAAG,IAAI,eAAe,CAE9C,SAAS,CAAC,CAAC;QACG,aAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,YAAY,EAAE,CAAC;QAExC,eAAU,GAAG,IAAI,eAAe,CAC/C,qBAAqB,CACtB,CAAC;QACc,cAAS,GAAG,IAAI,CAAC,UAAU,CAAC,YAAY,EAAE,CAAC,IAAI;QAC7D,wEAAwE;QACxE,WAAW,CAAC,CAAC,CAAC,CACf,CAAC;QAKA,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,CAAC;QACrC,IAAI,CAAC,MAAM,CAAC,gBAAgB,CAAC;YAC3B,IAAI,EAAE,CAAC,YAAY,EAAE,EAAE;gBACrB,MAAM,MAAM,GAAe,YAAY;oBACrC,CAAC,CAAC,YAAY,CAAC,aAAa;oBAC5B,CAAC,CAAC,YAAY,CAAC,gBAAgB,CAAC;gBAClC,IACE,YAAY;oBACZ,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,IAAI,EAAE,GAAG,KAAK,YAAY,EAAE,GAAG,EACtD,CAAC;oBACD,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;gBACnD,CAAC;gBACD,YAAY;oBACV,EAAE,UAAU,EAAE;qBACb,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE;oBACd,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,CAAC,KAAK,IAAI,EAAE,CAAC;oBAC5C,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;wBACnB,GAAG,OAAO;wBACV,MAAM;wBACN,KAAK;wBACL,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK;qBAC3B,CAAC,CAAC;oBACH,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,6BAA6B;gBAC9D,CAAC,CAAC;qBACD,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;oBACb,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,CAAC,KAAK,IAAI,EAAE,CAAC;oBAC5C,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;wBACnB,GAAG,OAAO;wBACV,GAAG,EAAE,+BAA+B,GAAG,EAAE;qBAC1C,CAAC,CAAC;oBACH,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,GAAG,EAAE,+BAA+B,CAAC,CAAC;gBAClE,CAAC,CAAC,CAAC;YACP,CAAC;YACD,KAAK,EAAE,CAAC,GAAG,EAAE,EAAE;gBACb,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,CAAC,KAAK,IAAI,EAAE,CAAC;gBAC5C,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;oBACnB,GAAG,OAAO;oBACV,GAAG,EAAE,qCAAqC,GAAG,EAAE;iBAChD,CAAC,CAAC;gBACH,WAAW,CAAC,QAAQ,CAAC,GAAG,EAAE,mCAAmC,CAAC,CAAC;YACjE,CAAC;YACD,QAAQ,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC;SACvB,CAAC,CAAC;QACH,IAAI,CAAC,MAAM,CAAC,kBAAkB,CAAC;YAC7B,QAAQ,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC;YACtB,IAAI,EAAE,CAAC,MAAM,EAAE,EAAE;gBACf,eAAe;gBACf,8EAA8E;gBAC9E,YAAY;gBACZ,KAAK;gBAEL,MAAM,QAAQ,GAAG,6BAA6B,CAAC,MAAM,CAAC,CAAC;gBAEvD,MAAM,MAAM,GAAG,QAAQ;oBACrB,CAAC,CAAC,YAAY,CAAC,aAAa;oBAC5B,CAAC,CAAC,YAAY,CAAC,gBAAgB,CAAC;gBAClC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;gBAC9B,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;gBAC9B,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;oBACnB,GAAG,IAAI,CAAC,UAAU,CAAC,KAAK;oBACxB,IAAI,EAAE,QAAQ;oBACd,MAAM;iBACP,CAAC,CAAC;YACL,CAAC;YACD,KAAK,EAAE,CAAC,GAAG,EAAE,EAAE;gBACb,IAAI,CAAC,WAAW,CAAC,QAAQ,CACvB,GAAG,EACH,mDAAmD,CACpD,CAAC;gBACF,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,CAAC,KAAK,IAAI,EAAE,CAAC;gBAC5C,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;oBACnB,GAAG,OAAO;oBACV,GAAG,EAAE,uCAAuC,GAAG,EAAE;iBAClD,CAAC,CAAC;YACL,CAAC;SACF,CAAC,CAAC;IACL,CAAC;IAEM,OAAO;QACZ,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;IAC/B,CAAC;IAEM,eAAe,CAAC,KAAa;QAClC,OAAO,qBAAqB,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IACnD,CAAC;IAEM,mBAAmB,CAAC,KAAa;QACtC,OAAO,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC;IACvD,CAAC;IAIO,KAAK,CAAC,mBAAmB,CAC/B,cAA8B;QAE9B,IAAI,YAAsC,CAAC;QAE3C,MAAM,CAAC,GAA2B,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC;QAE3D,QAAQ,cAAc,EAAE,CAAC;YACvB,KAAK,YAAY;gBACf,YAAY,GAAG,MAAM,sBAAsB,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC;gBAChE,MAAM;YACR,KAAK,WAAW;gBACd,YAAY,GAAG,MAAM,sBAAsB,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;gBAC/D,MAAM;YACR,KAAK,cAAc;gBACjB,YAAY,GAAG,MAAM,sBAAsB,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC;gBAClE,MAAM;YACR,KAAK,eAAe;gBAClB,YAAY,GAAG,MAAM,sBAAsB,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC;gBACnE,MAAM;YACR;gBACE,OAAO,OAAO,CAAC,MAAM,CAAC,6BAA6B,GAAG,cAAc,CAAC,CAAC;QAC1E,CAAC;QACD,eAAe;QACf,sHAAsH;QACtH,kBAAkB;QAClB,KAAK;QACL,0FAA0F;QAC1F,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,0BAA0B,CAC1D,cAAc,EACd,YAAY,CACb,CAAC;QAEF,OAAO,OAAO,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;IACzC,CAAC;IAEO,KAAK,CAAC,0BAA0B,CACtC,cAA8B,EAC9B,YAA0B;QAE1B,MAAM,aAAa,GAAG,IAAI,aAAa,CAAC,cAAc,CAAC,CAAC;QACxD,MAAM,UAAU,GAAG,aAAa,CAAC,UAAU,CAAC;YAC1C,OAAO,EAAE,YAAY,CAAC,UAAU,EAAE,OAAO;YACzC,WAAW,EAAE,YAAY,CAAC,UAAU,EAAE,WAAW;YACjD,QAAQ,EAAE,YAAY,CAAC,UAAU,EAAE,KAAK;SACzC,CAAC,CAAC;QACH,MAAM,IAAI,GAAG,OAAO,EAAE,CAAC;QACvB,MAAM,cAAc,GAAG,MAAM,oBAAoB,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;QAEpE,wDAAwD;QACxD,MAAM,gBAAgB,GAAG,MAAM,cAAc,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC;QAEhE,OAAO,OAAO,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;IACzC,CAAC;IAEO,KAAK,CAAC,gBAAgB,CAC5B,cAA8B;QAE9B,MAAM,YAAY,GAAG,eAAe,CAAC,cAAc,CAAC,CAAC;QACrD,MAAM,cAAc,GAAG,MAAM,eAAe,CAAC,IAAI,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;QACxE,OAAO,OAAO,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;IACzC,CAAC;IAEM,KAAK,CAAC,QAAQ,CACnB,cAA8B;QAE9B,MAAM,YAAY,GAAG,eAAe,CAAC,cAAc,CAAC,CAAC;QACrD,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;YAC7B,OAAO,OAAO,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC;QAC3C,CAAC;QACD,MAAM,cAAc,GAAG,MAAM,aAAa,CACxC,IAAI,CAAC,MAAM,CAAC,WAAW,EACvB,YAAY,CACb,CAAC;QACF,OAAO,OAAO,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;IACzC,CAAC;IAEM,KAAK,CAAC,kBAAkB,CAAC,cAAsB;QACpD,MAAM,WAAW,GAAG,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC;QAC5C,IAAI,WAAW,EAAE,CAAC;YAChB,IAAI,CAAC;gBACH,MAAM,WAAW,GAAG,MAAM,MAAM,CAAC,WAAW,EAAE,cAAc,CAAC,CAAC;gBAC9D,MAAM,QAAQ,GAAG,6BAA6B,CAAC,WAAW,CAAC,CAAC;gBAC5D,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;gBAC9B,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;YAC3B,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,OAAO,CAAC,MAAM,CACnB,oBAAoB,cAAc,WAAW,GAAG,KAAK,CACtD,CAAC;YACJ,CAAC;QACH,CAAC;aAAM,CAAC;YACN,OAAO,OAAO,CAAC,MAAM,CAAC,iCAAiC,CAAC,CAAC;QAC3D,CAAC;IACH,CAAC;IAEM,KAAK,CAAC,UAAU,CACrB,cAA8B;QAE9B,eAAe;QACf,4IAA4I;QAC5I,KAAK;QACL,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,eAAe,EAAE;YAC9C,QAAQ,EAAE,cAAc;SACzB,CAAC,CAAC;QACH,IAAI,CAAC;YACH,IAAI,IAAI,CAAC,eAAe,EAAE,CAAC;gBACzB,OAAO,OAAO,CAAC,MAAM,CACnB,IAAI,KAAK,CACP,uDAAuD,cAAc,iCAAiC,IAAI,CAAC,eAAe,iBAAiB,CAC5I,CACF,CAAC;YACJ,CAAC;YAED,IAAI,cAAc,GAA+B,SAAS,CAAC;YAE3D,IAAI,SAAS,CAAC,gBAAgB,EAAE,EAAE,CAAC;gBACjC,cAAc,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAAC,cAAc,CAAC,CAAC;YAClE,CAAC;iBAAM,CAAC;gBACN,cAAc,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,cAAc,CAAC,CAAC;YAC/D,CAAC;YAED,IAAI,CAAC,eAAe,GAAG,SAAS,CAAC;YACjC,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,cAAc,EAAE;gBAC7C,QAAQ,EAAE,cAAc;aACzB,CAAC,CAAC;YACH,OAAO,OAAO,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;QACzC,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,IAAI,CAAC,eAAe,GAAG,SAAS,CAAC;YACjC,OAAO,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QAC3B,CAAC;IACH,CAAC;8GA7PU,qBAAqB;kHAArB,qBAAqB,cADR,MAAM;;2FACnB,qBAAqB;kBADjC,UAAU;mBAAC,EAAE,UAAU,EAAE,MAAM,EAAE;;AAgRlC,SAAS,eAAe,CAAC,cAA8B;IACrD,QAAQ,cAAc,EAAE,CAAC;QACvB,KAAK,YAAY;YACf,OAAO,IAAI,kBAAkB,EAAE,CAAC;QAClC,KAAK,WAAW;YACd,OAAO,IAAI,aAAa,CAAC,WAAW,CAAC,CAAC;QACxC,EAAE;QACF,qHAAqH;QACrH,wDAAwD;QACxD,0EAA0E;QAC1E,qCAAqC;QACrC,MAAM;QACN,KAAK,eAAe;YAClB,OAAO,IAAI,aAAa,CAAC,eAAe,CAAC,CAAC;QAC5C,KAAK,cAAc,CAAC,CAAC,CAAC;YACpB,MAAM,oBAAoB,GAAG,IAAI,oBAAoB,EAAE,CAAC;YACxD,oBAAoB,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;YACvC,OAAO,oBAAoB,CAAC;QAC9B,CAAC;QACD,KAAK,YAAY,CAAC,CAAC,CAAC;YAClB,MAAM,kBAAkB,GAAG,IAAI,kBAAkB,EAAE,CAAC;YACpD,kBAAkB,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;YACzC,kBAAkB,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;YAC1C,OAAO,kBAAkB,CAAC;QAC5B,CAAC;QACD;YACE,MAAM,IAAI,KAAK,CAAC,6BAA6B,GAAG,cAAc,CAAC,CAAC;IACpE,CAAC;AACH,CAAC;AAED,SAAS,6BAA6B,CACpC,MAAmB;IAEnB,OAAO,CACL,MAAM,IAAI;QACR,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,aAAa,EAAE,MAAM,CAAC,aAAa;QACnC,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,GAAG,EAAE,MAAM,CAAC,GAAG;QACf,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,UAAU,EACR,MAAM,CAAC,YAAY,EAAE,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC;YACzD,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,UAAU;YACnC,CAAC,CAAC,MAAM,CAAC,UAAU;QACvB,YAAY,EAAE,MAAM,CAAC,YAAY;KAClC,CACF,CAAC;AACJ,CAAC","sourcesContent":["import { SignInWithOAuthOptions } from '@capacitor-firebase/authentication/dist/esm/definitions';\nimport { Capacitor } from '@capacitor/core';\nimport {\n  FirebaseAuthentication,\n  SignInResult,\n} from '@capacitor-firebase/authentication';\nimport {\n  AnalyticsService,\n  EnumAsUnionOfKeys,\n  IAnalyticsService,\n} from '@sneat/core';\nimport { BehaviorSubject, from, Observable } from 'rxjs';\nimport { Injectable, inject } from '@angular/core';\nimport { ErrorLogger, IErrorLogger } from '@sneat/core';\nimport { distinctUntilChanged, shareReplay } from 'rxjs/operators';\nimport {\n  Auth,\n  AuthProvider,\n  getAuth,\n  signInWithCredential,\n  User,\n  UserCredential,\n  UserInfo,\n} from '@angular/fire/auth';\n\nimport {\n  GoogleAuthProvider,\n  OAuthProvider,\n  GithubAuthProvider,\n  FacebookAuthProvider,\n  signInWithEmailLink,\n  signInWithCustomToken,\n  signInWithPopup,\n  linkWithPopup,\n  unlink,\n} from 'firebase/auth';\n\n// TODO: fix & remove this eslint hint @nrwl/nx/enforce-module-boundaries\n\nimport { newRandomId } from '@sneat/random';\n\nexport enum AuthStatuses {\n  authenticating = 'authenticating',\n  authenticated = 'authenticated',\n  notAuthenticated = 'notAuthenticated',\n}\n\nexport type AuthStatus = EnumAsUnionOfKeys<typeof AuthStatuses>;\n\nexport interface ISneatAuthUser extends UserInfo {\n  readonly isAnonymous: boolean;\n  readonly emailVerified: boolean;\n  readonly providerData: readonly UserInfo[];\n}\n\nexport interface ISneatAuthState {\n  readonly status: AuthStatus;\n  readonly token?: string | null;\n  readonly user?: ISneatAuthUser | null;\n  readonly err?: unknown;\n}\n\nconst initialAuthStatus = AuthStatuses.authenticating;\nexport const initialSneatAuthState = { status: initialAuthStatus };\n\n@Injectable({ providedIn: 'root' })\nexport class SneatAuthStateService {\n  private readonly errorLogger = inject<IErrorLogger>(ErrorLogger);\n  private readonly analyticsService =\n    inject<IAnalyticsService>(AnalyticsService);\n  readonly fbAuth = inject(Auth);\n\n  private readonly id = newRandomId({ len: 5 });\n\n  private readonly authStatus$ = new BehaviorSubject<AuthStatus>(\n    initialAuthStatus,\n  );\n  public readonly authStatus = this.authStatus$\n    .asObservable()\n    .pipe(distinctUntilChanged());\n\n  private readonly authUser$ = new BehaviorSubject<\n    ISneatAuthUser | null | undefined\n  >(undefined);\n  public readonly authUser = this.authUser$.asObservable();\n\n  private readonly authState$ = new BehaviorSubject<ISneatAuthState>(\n    initialSneatAuthState,\n  );\n  public readonly authState = this.authState$.asObservable().pipe(\n    // tap(v => console.log('SneatAuthStateService => SneatAuthState:', v)),\n    shareReplay(1),\n  );\n\n  // private readonly fbAuth: Auth;\n\n  constructor() {\n    const errorLogger = this.errorLogger;\n    this.fbAuth.onIdTokenChanged({\n      next: (firebaseUser) => {\n        const status: AuthStatus = firebaseUser\n          ? AuthStatuses.authenticated\n          : AuthStatuses.notAuthenticated;\n        if (\n          firebaseUser &&\n          this.authState$.value?.user?.uid !== firebaseUser?.uid\n        ) {\n          this.analyticsService.identify(firebaseUser.uid);\n        }\n        firebaseUser\n          ?.getIdToken()\n          .then((token) => {\n            const current = this.authState$.value || {};\n            this.authState$.next({\n              ...current,\n              status,\n              token,\n              user: this.authUser$.value,\n            });\n            this.authStatus$.next(status); // Should be after authState$\n          })\n          .catch((err) => {\n            const current = this.authState$.value || {};\n            this.authState$.next({\n              ...current,\n              err: `fbUser.getIdToken() failed: ${err}`,\n            });\n            this.errorLogger.logError(err, 'Failed in fbUser.getIdToken()');\n          });\n      },\n      error: (err) => {\n        const current = this.authState$.value || {};\n        this.authState$.next({\n          ...current,\n          err: `fbAuth.onIdTokenChanged() failed: ${err}`,\n        });\n        errorLogger.logError(err, 'failed in fbAuth.onIdTokenChanged');\n      },\n      complete: () => void 0,\n    });\n    this.fbAuth.onAuthStateChanged({\n      complete: () => void 0,\n      next: (fbUser) => {\n        // console.log(\n        //   `SneatAuthStateService => authStatus: ${this.authStatus$.value}; fbUser`,\n        //   fbUser,\n        // );\n\n        const authUser = createSneatAuthUserFromFbUser(fbUser);\n\n        const status = authUser\n          ? AuthStatuses.authenticated\n          : AuthStatuses.notAuthenticated;\n        this.authStatus$.next(status);\n        this.authUser$.next(authUser);\n        this.authState$.next({\n          ...this.authState$.value,\n          user: authUser,\n          status,\n        });\n      },\n      error: (err) => {\n        this.errorLogger.logError(\n          err,\n          'failed to retrieve Firebase auth user information',\n        );\n        const current = this.authState$.value || {};\n        this.authState$.next({\n          ...current,\n          err: `fbAuth.onAuthStateChanged() failed: ${err}`,\n        });\n      },\n    });\n  }\n\n  public signOut(): Promise<void> {\n    return this.fbAuth.signOut();\n  }\n\n  public signInWithToken(token: string): Promise<UserCredential> {\n    return signInWithCustomToken(this.fbAuth, token);\n  }\n\n  public signInWithEmailLink(email: string): Observable<UserCredential> {\n    return from(signInWithEmailLink(this.fbAuth, email));\n  }\n\n  private isSigningInWith?: AuthProviderName;\n\n  private async signInOnNativeLayer(\n    authProviderID: AuthProviderID,\n  ): Promise<UserCredential> {\n    let signInResult: SignInResult | undefined;\n\n    const o: SignInWithOAuthOptions = { skipNativeAuth: true };\n\n    switch (authProviderID) {\n      case 'google.com':\n        signInResult = await FirebaseAuthentication.signInWithGoogle(o);\n        break;\n      case 'apple.com':\n        signInResult = await FirebaseAuthentication.signInWithApple(o);\n        break;\n      case 'facebook.com':\n        signInResult = await FirebaseAuthentication.signInWithFacebook(o);\n        break;\n      case 'microsoft.com':\n        signInResult = await FirebaseAuthentication.signInWithMicrosoft(o);\n        break;\n      default:\n        return Promise.reject('unsupported auth provider: ' + authProviderID);\n    }\n    // console.log(\n    //   `SneatAuthStateService.signInWith(${authProviderID}) => signed in on native layer, authenticating in webview...`,\n    //   signInResult,\n    // );\n    // we need to authenticate on webview layer using the id token and nonce from signInResult\n    const userCredential = await this.authenticateOnWebviewLayer(\n      authProviderID,\n      signInResult,\n    );\n\n    return Promise.resolve(userCredential);\n  }\n\n  private async authenticateOnWebviewLayer(\n    authProviderID: AuthProviderID,\n    signInResult: SignInResult,\n  ): Promise<UserCredential> {\n    const oauthProvider = new OAuthProvider(authProviderID);\n    const credential = oauthProvider.credential({\n      idToken: signInResult.credential?.idToken,\n      accessToken: signInResult.credential?.accessToken,\n      rawNonce: signInResult.credential?.nonce,\n    });\n    const auth = getAuth();\n    const userCredential = await signInWithCredential(auth, credential);\n\n    // Get a valid Firebase ID token that has a 'kid' header\n    const _firebaseIdToken = await userCredential.user.getIdToken();\n\n    return Promise.resolve(userCredential);\n  }\n\n  private async signInWithWebSDK(\n    authProviderID: AuthProviderID,\n  ): Promise<UserCredential> {\n    const authProvider = getAuthProvider(authProviderID);\n    const userCredential = await signInWithPopup(this.fbAuth, authProvider);\n    return Promise.resolve(userCredential);\n  }\n\n  public async linkWith(\n    authProviderID: AuthProviderID,\n  ): Promise<UserCredential | undefined> {\n    const authProvider = getAuthProvider(authProviderID);\n    if (!this.fbAuth.currentUser) {\n      return Promise.reject('no current user');\n    }\n    const userCredential = await linkWithPopup(\n      this.fbAuth.currentUser,\n      authProvider,\n    );\n    return Promise.resolve(userCredential);\n  }\n\n  public async unlinkAuthProvider(authProviderID: string): Promise<void> {\n    const currentUser = this.fbAuth.currentUser;\n    if (currentUser) {\n      try {\n        const updatedUser = await unlink(currentUser, authProviderID);\n        const authUser = createSneatAuthUserFromFbUser(updatedUser);\n        this.authUser$.next(authUser);\n        return Promise.resolve();\n      } catch (error) {\n        return Promise.reject(\n          `Failed to unlink ${authProviderID} account:` + error,\n        );\n      }\n    } else {\n      return Promise.reject('No user is currently signed in.');\n    }\n  }\n\n  public async signInWith(\n    authProviderID: AuthProviderID,\n  ): Promise<UserCredential | undefined> {\n    // console.log(\n    //   `SneatAuthStateService.signInWith(${authProviderID}), isSigningInWith=${this.isSigningInWith}, location.protocol=${location.protocol}`,\n    // );\n    this.analyticsService.logEvent('signingInWith', {\n      provider: authProviderID,\n    });\n    try {\n      if (this.isSigningInWith) {\n        return Promise.reject(\n          new Error(\n            `a repeated call to SneatAuthStateService.signInWith(${authProviderID}) white previous sign in with ${this.isSigningInWith} is in progress`,\n          ),\n        );\n      }\n\n      let userCredential: UserCredential | undefined = undefined;\n\n      if (Capacitor.isNativePlatform()) {\n        userCredential = await this.signInOnNativeLayer(authProviderID);\n      } else {\n        userCredential = await this.signInWithWebSDK(authProviderID);\n      }\n\n      this.isSigningInWith = undefined;\n      this.analyticsService.logEvent('signedInWith', {\n        provider: authProviderID,\n      });\n      return Promise.resolve(userCredential);\n    } catch (e) {\n      this.isSigningInWith = undefined;\n      return Promise.reject(e);\n    }\n  }\n}\n\nexport type AuthProviderID =\n  | 'apple.com'\n  | 'google.com'\n  | 'microsoft.com'\n  | 'facebook.com'\n  | 'github.com'\n  | 'phone';\n\nexport type AuthProviderName =\n  | 'Google'\n  | 'Apple'\n  | 'Microsoft'\n  | 'Facebook'\n  | 'GitHub';\n\nfunction getAuthProvider(authProviderID: AuthProviderID): AuthProvider {\n  switch (authProviderID) {\n    case 'google.com':\n      return new GoogleAuthProvider();\n    case 'apple.com':\n      return new OAuthProvider('apple.com');\n    //\n    // https://developer.apple.com/documentation/sign_in_with_apple/incorporating-sign-in-with-apple-into-other-platforms\n    // (authProvider as OAuthProvider).setCustomParameters({\n    // \t// \t// Localize the Apple authentication screen in current app locale.\n    // \tlocale: 'en', // TODO: set locale\n    // });\n    case 'microsoft.com':\n      return new OAuthProvider('microsoft.com');\n    case 'facebook.com': {\n      const facebookAuthProvider = new FacebookAuthProvider();\n      facebookAuthProvider.addScope('email');\n      return facebookAuthProvider;\n    }\n    case 'github.com': {\n      const githubAuthProvider = new GithubAuthProvider();\n      githubAuthProvider.addScope('read:user');\n      githubAuthProvider.addScope('user:email');\n      return githubAuthProvider;\n    }\n    default:\n      throw new Error('unsupported auth provider: ' + authProviderID);\n  }\n}\n\nfunction createSneatAuthUserFromFbUser(\n  fbUser: User | null,\n): ISneatAuthUser | null {\n  return (\n    fbUser && {\n      isAnonymous: fbUser.isAnonymous,\n      emailVerified: fbUser.emailVerified,\n      email: fbUser.email,\n      uid: fbUser.uid,\n      displayName: fbUser.displayName,\n      phoneNumber: fbUser.phoneNumber,\n      photoURL: fbUser.photoURL,\n      providerId:\n        fbUser.providerData?.length === 1 && fbUser.providerData[0]\n          ? fbUser.providerData[0].providerId\n          : fbUser.providerId,\n      providerData: fbUser.providerData,\n    }\n  );\n}\n"]}

package/{src/lib/sneat-auth.interface.ts → esm2022/lib/sneat-auth.interface.js}

@@ -1,7 +1,3 @@
 import { InjectionToken } from '@angular/core';
-
-export interface ILoginEventsHandler {
-  onLoggedIn(): void;
-}
-
 export const LoginEventsHandler = new InjectionToken('ILoginEventsHandler');
+//# sourceMappingURL=sneat-auth.interface.js.map

package/esm2022/lib/sneat-auth.interface.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sneat-auth.interface.js","sourceRoot":"","sources":["../../../../../../libs/auth/core/src/lib/sneat-auth.interface.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAM/C,MAAM,CAAC,MAAM,kBAAkB,GAAG,IAAI,cAAc,CAAC,qBAAqB,CAAC,CAAC","sourcesContent":["import { InjectionToken } from '@angular/core';\n\nexport interface ILoginEventsHandler {\n  onLoggedIn(): void;\n}\n\nexport const LoginEventsHandler = new InjectionToken('ILoginEventsHandler');\n"]}

package/esm2022/lib/telegram-auth.service.js

@@ -0,0 +1,39 @@
+import { Injectable, inject } from '@angular/core';
+import { SneatApiService } from '@sneat/api';
+import { SneatAuthStateService } from './sneat-auth-state-service';
+import { ErrorLogger } from '@sneat/core';
+import * as i0 from "@angular/core";
+export class TelegramAuthService {
+    constructor() {
+        this.errorLogger = inject(ErrorLogger);
+        this.authStateService = inject(SneatAuthStateService);
+        this.sneatApiService = inject(SneatApiService);
+    }
+    authenticateIfTelegramWebApp() {
+        const telegramWebApp = window.Telegram?.WebApp;
+        if (telegramWebApp?.initData) {
+            this.sneatApiService
+                .postAsAnonymous('auth/login-from-telegram-miniapp', telegramWebApp?.initData)
+                .subscribe({
+                next: (response) => {
+                    this.authStateService
+                        .signInWithToken(response.token)
+                        .then(() => {
+                        telegramWebApp.ready();
+                    })
+                        .catch(this.errorLogger.logErrorHandler('Failed to sign-in to Firebase auth with a token issued for telegram web-app credentials'));
+                },
+                error: this.errorLogger.logErrorHandler('Failed to get Firebase auth token issued using telegram web-app credentials'),
+            });
+        }
+    }
+    static { this.ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "21.2.0", ngImport: i0, type: TelegramAuthService, deps: [], target: i0.ɵɵFactoryTarget.Injectable }); }
+    static { this.ɵprov = i0.ɵɵngDeclareInjectable({ minVersion: "12.0.0", version: "21.2.0", ngImport: i0, type: TelegramAuthService, providedIn: 'root' }); }
+}
+i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "21.2.0", ngImport: i0, type: TelegramAuthService, decorators: [{
+            type: Injectable,
+            args: [{
+                    providedIn: 'root',
+                }]
+        }] });
+//# sourceMappingURL=telegram-auth.service.js.map

package/esm2022/lib/telegram-auth.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"telegram-auth.service.js","sourceRoot":"","sources":["../../../../../../libs/auth/core/src/lib/telegram-auth.service.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,eAAe,CAAC;AACnD,OAAO,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAC7C,OAAO,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AACnE,OAAO,EAAE,WAAW,EAAgB,MAAM,aAAa,CAAC;;AAKxD,MAAM,OAAO,mBAAmB;IAHhC;QAImB,gBAAW,GAAG,MAAM,CAAe,WAAW,CAAC,CAAC;QAChD,qBAAgB,GAAG,MAAM,CAAC,qBAAqB,CAAC,CAAC;QACjD,oBAAe,GAAG,MAAM,CAAC,eAAe,CAAC,CAAC;KAqC5D;IAnCQ,4BAA4B;QACjC,MAAM,cAAc,GAClB,MAQD,CAAC,QAAQ,EAAE,MAAM,CAAC;QACnB,IAAI,cAAc,EAAE,QAAQ,EAAE,CAAC;YAC7B,IAAI,CAAC,eAAe;iBACjB,eAAe,CAEb,kCAAkC,EAAE,cAAc,EAAE,QAAQ,CAAC;iBAC/D,SAAS,CAAC;gBACT,IAAI,EAAE,CAAC,QAAQ,EAAE,EAAE;oBACjB,IAAI,CAAC,gBAAgB;yBAClB,eAAe,CAAC,QAAQ,CAAC,KAAK,CAAC;yBAC/B,IAAI,CAAC,GAAG,EAAE;wBACT,cAAc,CAAC,KAAK,EAAE,CAAC;oBACzB,CAAC,CAAC;yBACD,KAAK,CACJ,IAAI,CAAC,WAAW,CAAC,eAAe,CAC9B,yFAAyF,CAC1F,CACF,CAAC;gBACN,CAAC;gBACD,KAAK,EAAE,IAAI,CAAC,WAAW,CAAC,eAAe,CACrC,6EAA6E,CAC9E;aACF,CAAC,CAAC;QACP,CAAC;IACH,CAAC;8GAvCU,mBAAmB;kHAAnB,mBAAmB,cAFlB,MAAM;;2FAEP,mBAAmB;kBAH/B,UAAU;mBAAC;oBACV,UAAU,EAAE,MAAM;iBACnB","sourcesContent":["import { Injectable, inject } from '@angular/core';\nimport { SneatApiService } from '@sneat/api';\nimport { SneatAuthStateService } from './sneat-auth-state-service';\nimport { ErrorLogger, IErrorLogger } from '@sneat/core';\n\n@Injectable({\n  providedIn: 'root',\n})\nexport class TelegramAuthService {\n  private readonly errorLogger = inject<IErrorLogger>(ErrorLogger);\n  private readonly authStateService = inject(SneatAuthStateService);\n  private readonly sneatApiService = inject(SneatApiService);\n\n  public authenticateIfTelegramWebApp() {\n    const telegramWebApp = (\n      window as unknown as {\n        Telegram?: {\n          WebApp?: {\n            initData: unknown;\n            ready: () => void;\n          };\n        };\n      }\n    ).Telegram?.WebApp;\n    if (telegramWebApp?.initData) {\n      this.sneatApiService\n        .postAsAnonymous<{\n          token: string;\n        }>('auth/login-from-telegram-miniapp', telegramWebApp?.initData)\n        .subscribe({\n          next: (response) => {\n            this.authStateService\n              .signInWithToken(response.token)\n              .then(() => {\n                telegramWebApp.ready();\n              })\n              .catch(\n                this.errorLogger.logErrorHandler(\n                  'Failed to sign-in to Firebase auth with a token issued for telegram web-app credentials',\n                ),\n              );\n          },\n          error: this.errorLogger.logErrorHandler(\n            'Failed to get Firebase auth token issued using telegram web-app credentials',\n          ),\n        });\n    }\n  }\n}\n"]}

package/esm2022/lib/user/index.js

@@ -0,0 +1,3 @@
+export * from './user-record.service';
+export * from './sneat-user.service';
+//# sourceMappingURL=index.js.map

package/esm2022/lib/user/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../../../libs/auth/core/src/lib/user/index.ts"],"names":[],"mappings":"AAAA,cAAc,uBAAuB,CAAC;AACtC,cAAc,sBAAsB,CAAC","sourcesContent":["export * from './user-record.service';\nexport * from './sneat-user.service';\n"]}