@sneat/auth-core 0.27.28 → 0.27.30

package/esm2022/lib/sneat-auth-guard.js

@@ -13,13 +13,13 @@ import * as i0 from "@angular/core";
  * never read, and that injection is what coupled this file to `@angular/fire`.
  */
 export class SneatAuthGuard {
-    canLoad(_route, _segments) {
+    canLoad() {
         return true;
     }
-    canActivate(_route, _state) {
+    canActivate() {
         return true;
     }
-    canActivateChild(_childRoute, _state) {
+    canActivateChild() {
         return true;
     }
     static { this.ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "22.1.3", ngImport: i0, type: SneatAuthGuard, deps: [], target: i0.ɵɵFactoryTarget.Injectable }); }

package/esm2022/lib/sneat-auth-guard.js.map

@@ -1 +1 @@
-{"version":3,"file":"sneat-auth-guard.js","sourceRoot":"","sources":["../../../../../../libs/auth/core/src/lib/sneat-auth-guard.ts"],"names":[],"mappings":"AAQA,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;;AAE3C;;;;;;;;;;;GAWG;AAIH,MAAM,OAAO,cAAc;IAClB,OAAO,CACZ,MAAa,EACb,SAAuB;QAMvB,OAAO,IAAI,CAAC;IACd,CAAC;IAEM,WAAW,CAChB,MAA8B,EAC9B,MAA2B;QAE3B,OAAO,IAAI,CAAC;IACd,CAAC;IAED,gBAAgB,CACd,WAAmC,EACnC,MAA2B;QAE3B,OAAO,IAAI,CAAC;IACd,CAAC;8GAxBU,cAAc;kHAAd,cAAc,cAFb,MAAM;;2FAEP,cAAc;kBAH1B,UAAU;mBAAC;oBACV,UAAU,EAAE,MAAM;iBACnB;;AA4BD;;;;GAIG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG;IAC/B,WAAW,EAAE,CAAC,cAAc,CAAC;IAC7B,OAAO,EAAE,CAAC,cAAc,CAAC;CAC1B,CAAC","sourcesContent":["import {\n  ActivatedRouteSnapshot,\n  Route,\n  RouterStateSnapshot,\n  UrlSegment,\n  UrlTree,\n} from '@angular/router';\nimport { Observable } from 'rxjs';\nimport { Injectable } from '@angular/core';\n\n/**\n * Permissive class-based route guard: every hook returns `true`.\n *\n * @deprecated Prefer the functional `sneatAuthGuard`\n * (`./redirect-to-login.guard`), which actually blocks an unauthenticated\n * visitor and redirects them to `/login`. This guard admits everyone — it\n * never gated anything — and is kept only so existing route configs\n * referencing `SNEAT_AUTH_GUARDS` keep compiling.\n *\n * As of 0.27.0 it no longer injects Firebase `Auth`: the injected instance was\n * never read, and that injection is what coupled this file to `@angular/fire`.\n */\n@Injectable({\n  providedIn: 'root',\n})\nexport class SneatAuthGuard {\n  public canLoad(\n    _route: Route,\n    _segments: UrlSegment[],\n  ):\n    | Observable<boolean | UrlTree>\n    | Promise<boolean | UrlTree>\n    | boolean\n    | UrlTree {\n    return true;\n  }\n\n  public canActivate(\n    _route: ActivatedRouteSnapshot,\n    _state: RouterStateSnapshot,\n  ) {\n    return true;\n  }\n\n  canActivateChild(\n    _childRoute: ActivatedRouteSnapshot,\n    _state: RouterStateSnapshot,\n  ) {\n    return true;\n  }\n}\n\n/**\n * @deprecated Use `{ canActivate: [sneatAuthGuard] }` instead — see\n * `./redirect-to-login.guard`. Retained for route configs that still reference\n * it; both hooks resolve to the permissive `SneatAuthGuard` above.\n */\nexport const SNEAT_AUTH_GUARDS = {\n  canActivate: [SneatAuthGuard],\n  canLoad: [SneatAuthGuard],\n};\n"]}
+{"version":3,"file":"sneat-auth-guard.js","sourceRoot":"","sources":["../../../../../../libs/auth/core/src/lib/sneat-auth-guard.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;;AAE3C;;;;;;;;;;;GAWG;AAIH,MAAM,OAAO,cAAc;IAClB,OAAO;QAKZ,OAAO,IAAI,CAAC;IACd,CAAC;IAEM,WAAW;QAChB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,gBAAgB;QACd,OAAO,IAAI,CAAC;IACd,CAAC;8GAfU,cAAc;kHAAd,cAAc,cAFb,MAAM;;2FAEP,cAAc;kBAH1B,UAAU;mBAAC;oBACV,UAAU,EAAE,MAAM;iBACnB;;AAmBD;;;;GAIG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG;IAC/B,WAAW,EAAE,CAAC,cAAc,CAAC;IAC7B,OAAO,EAAE,CAAC,cAAc,CAAC;CAC1B,CAAC","sourcesContent":["import {\n  UrlTree,\n} from '@angular/router';\nimport { Observable } from 'rxjs';\nimport { Injectable } from '@angular/core';\n\n/**\n * Permissive class-based route guard: every hook returns `true`.\n *\n * @deprecated Prefer the functional `sneatAuthGuard`\n * (`./redirect-to-login.guard`), which actually blocks an unauthenticated\n * visitor and redirects them to `/login`. This guard admits everyone — it\n * never gated anything — and is kept only so existing route configs\n * referencing `SNEAT_AUTH_GUARDS` keep compiling.\n *\n * As of 0.27.0 it no longer injects Firebase `Auth`: the injected instance was\n * never read, and that injection is what coupled this file to `@angular/fire`.\n */\n@Injectable({\n  providedIn: 'root',\n})\nexport class SneatAuthGuard {\n  public canLoad():\n    | Observable<boolean | UrlTree>\n    | Promise<boolean | UrlTree>\n    | boolean\n    | UrlTree {\n    return true;\n  }\n\n  public canActivate() {\n    return true;\n  }\n\n  canActivateChild() {\n    return true;\n  }\n}\n\n/**\n * @deprecated Use `{ canActivate: [sneatAuthGuard] }` instead — see\n * `./redirect-to-login.guard`. Retained for route configs that still reference\n * it; both hooks resolve to the permissive `SneatAuthGuard` above.\n */\nexport const SNEAT_AUTH_GUARDS = {\n  canActivate: [SneatAuthGuard],\n  canLoad: [SneatAuthGuard],\n};\n"]}

package/esm2022/lib/sneat-auth-state-service.js

@@ -58,14 +58,18 @@ export class SneatAuthStateService {
                     this.publishSignedOutState();
                     return;
                 }
+                const authUser = createSneatAuthUserFromFbUser(firebaseUser);
+                const current = this.authState$.value || {};
+                if (current.user?.uid !== authUser?.uid) {
+                    this.analyticsService.identify(firebaseUser.uid);
+                }
                 this.authState$.next({
-                    ...this.authState$.value,
+                    ...current,
                     status: AuthStatuses.authenticating,
                     loadingPhase: 'getting-token',
+                    token: current.user?.uid === authUser?.uid ? current.token : null,
+                    user: authUser,
                 });
-                if (this.authState$.value?.user?.uid !== firebaseUser?.uid) {
-                    this.analyticsService.identify(firebaseUser.uid);
-                }
                 firebaseUser
                     .getIdToken(false)
                     .then((token) => {
@@ -75,7 +79,9 @@ export class SneatAuthStateService {
                     }
                     this.tokenUserID = firebaseUser.uid;
                     const authUser = createSneatAuthUserFromFbUser(firebaseUser);
-                    if (this.authUser$.value?.uid !== authUser?.uid) {
+                    const previousAuthUser = this.authUser$.value;
+                    if (previousAuthUser?.uid !== authUser?.uid ||
+                        previousAuthUser?.isAnonymous !== authUser?.isAnonymous) {
                         this.authUser$.next(authUser);
                     }
                     const current = this.authState$.value || {};
@@ -232,7 +238,7 @@ export class SneatAuthStateService {
         const auth = getAuth();
         const userCredential = await signInWithCredential(auth, credential);
         // Get a valid Firebase ID token that has a 'kid' header
-        const _firebaseIdToken = await userCredential.user.getIdToken();
+        await userCredential.user.getIdToken();
         return Promise.resolve(userCredential);
     }
     async signInWithWebSDK(authProviderID) {

package/esm2022/lib/sneat-auth-state-service.js.map

@@ -1 +1 @@
-{"version":3,"file":"sneat-auth-state-service.js","sourceRoot":"","sources":["../../../../../../libs/auth/core/src/lib/sneat-auth-state-service.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EACL,sBAAsB,GAEvB,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EACL,gBAAgB,EAChB,iBAAiB,EAEjB,cAAc,EAEd,mBAAmB,EACnB,wBAAwB,GACzB,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,eAAe,EAAE,IAAI,EAAc,MAAM,MAAM,CAAC;AACzD,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,eAAe,CAAC;AACnD,OAAO,EAAE,WAAW,EAAgB,MAAM,aAAa,CAAC;AACxD,OAAO,EAAE,oBAAoB,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AACnE,OAAO,EAEL,OAAO,EACP,oBAAoB,EAIpB,kBAAkB,EAClB,aAAa,EACb,kBAAkB,EAClB,oBAAoB,EACpB,mBAAmB,EACnB,qBAAqB,EACrB,eAAe,EACf,kBAAkB,EAClB,aAAa,EACb,MAAM,EACN,8BAA8B,EAC9B,0BAA0B,GAC3B,MAAM,eAAe,CAAC;AAEvB,yEAAyE;AAEzE,OAAO,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;;AAE5C,MAAM,CAAN,IAAY,YAIX;AAJD,WAAY,YAAY;IACtB,iDAAiC,CAAA;IACjC,+CAA+B,CAAA;IAC/B,qDAAqC,CAAA;AACvC,CAAC,EAJW,YAAY,KAAZ,YAAY,QAIvB;AAiCD,MAAM,iBAAiB,GAAG,YAAY,CAAC,cAAc,CAAC;AACtD,MAAM,CAAC,MAAM,qBAAqB,GAAG;IACnC,MAAM,EAAE,iBAAiB;IACzB,YAAY,EAAE,kBAA2B;CAC1C,CAAC;AAEF,4EAA4E;AAC5E,6EAA6E;AAC7E,qDAAqD;AAErD,MAAM,OAAO,qBAAqB;IAoChC,iCAAiC;IAEjC;QArCiB,gBAAW,GAAG,MAAM,CAAe,WAAW,CAAC,CAAC;QAChD,qBAAgB,GAC/B,MAAM,CAAoB,gBAAgB,CAAC,CAAC;QACrC,WAAM,GAAG,MAAM,CAAC,mBAAmB,CAAC,CAAC;QAC7B,qBAAgB,GAAG,MAAM,CAAC,wBAAwB,CAAC,CAAC;QAErE,gFAAgF;QAC/D,iBAAY,GAC3B,MAAM,CAAC,cAAc,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,EAAE,YAAY,IAAI,OAAO,CAAC;QAErD,OAAE,GAAG,WAAW,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;QAE7B,gBAAW,GAAG,IAAI,eAAe,CAChD,iBAAiB,CAClB,CAAC;QACc,eAAU,GAAG,IAAI,CAAC,WAAW;aAC1C,YAAY,EAAE;aACd,IAAI,CAAC,oBAAoB,EAAE,CAAC,CAAC;QAEf,cAAS,GAAG,IAAI,eAAe,CAE9C,SAAS,CAAC,CAAC;QACG,aAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,YAAY,EAAE,CAAC;QAExC,eAAU,GAAG,IAAI,eAAe,CAC/C,qBAAqB,CACtB,CAAC;QACc,cAAS,GAAG,IAAI,CAAC,UAAU,CAAC,YAAY,EAAE,CAAC,IAAI;QAC7D,wEAAwE;QACxE,WAAW,CAAC,CAAC,CAAC,CACf,CAAC;QAEM,oBAAe,GAAG,CAAC,CAAC;QAM1B,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,CAAC;QACrC,IAAI,CAAC,MAAM,CAAC,gBAAgB,CAAC;YAC3B,IAAI,EAAE,CAAC,YAAY,EAAE,EAAE;gBACrB,IAAI,IAAI,CAAC,gBAAgB,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC;oBAC5C,OAAO;gBACT,CAAC;gBACD,MAAM,eAAe,GAAG,EAAE,IAAI,CAAC,eAAe,CAAC;gBAC/C,MAAM,MAAM,GAAe,YAAY;oBACrC,CAAC,CAAC,YAAY,CAAC,aAAa;oBAC5B,CAAC,CAAC,YAAY,CAAC,gBAAgB,CAAC;gBAClC,IAAI,CAAC,YAAY,EAAE,CAAC;oBAClB,IAAI,CAAC,qBAAqB,EAAE,CAAC;oBAC7B,OAAO;gBACT,CAAC;gBACD,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;oBACnB,GAAG,IAAI,CAAC,UAAU,CAAC,KAAK;oBACxB,MAAM,EAAE,YAAY,CAAC,cAAc;oBACnC,YAAY,EAAE,eAAe;iBAC9B,CAAC,CAAC;gBACH,IACE,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,IAAI,EAAE,GAAG,KAAK,YAAY,EAAE,GAAG,EACtD,CAAC;oBACD,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;gBACnD,CAAC;gBACD,YAAY;qBACT,UAAU,CAAC,KAAK,CAAC;qBACjB,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE;oBACd,IACE,eAAe,KAAK,IAAI,CAAC,eAAe;wBACxC,IAAI,CAAC,MAAM,CAAC,WAAW,KAAK,YAAY,EACxC,CAAC;wBACD,OAAO;oBACT,CAAC;oBACD,IAAI,CAAC,WAAW,GAAG,YAAY,CAAC,GAAG,CAAC;oBACpC,MAAM,QAAQ,GAAG,6BAA6B,CAAC,YAAY,CAAC,CAAC;oBAC7D,IAAI,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,GAAG,KAAK,QAAQ,EAAE,GAAG,EAAE,CAAC;wBAChD,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;oBAChC,CAAC;oBACD,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,CAAC,KAAK,IAAI,EAAE,CAAC;oBAC5C,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;wBACnB,GAAG,OAAO;wBACV,MAAM;wBACN,YAAY,EAAE,OAAO;wBACrB,KAAK;wBACL,IAAI,EAAE,QAAQ;qBACf,CAAC,CAAC;oBACH,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,6BAA6B;gBAC9D,CAAC,CAAC;qBACD,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;oBACb,IACE,eAAe,KAAK,IAAI,CAAC,eAAe;wBACxC,IAAI,CAAC,MAAM,CAAC,WAAW,KAAK,YAAY,EACxC,CAAC;wBACD,OAAO;oBACT,CAAC;oBACD,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,CAAC,KAAK,IAAI,EAAE,CAAC;oBAC5C,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;wBACnB,GAAG,OAAO;wBACV,YAAY,EAAE,QAAQ;wBACtB,GAAG,EAAE,+BAA+B,GAAG,EAAE;qBAC1C,CAAC,CAAC;oBACH,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,GAAG,EAAE,+BAA+B,CAAC,CAAC;gBAClE,CAAC,CAAC,CAAC;YACP,CAAC;YACD,KAAK,EAAE,CAAC,GAAG,EAAE,EAAE;gBACb,IAAI,IAAI,CAAC,gBAAgB,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC;oBAC5C,OAAO;gBACT,CAAC;gBACD,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,CAAC,KAAK,IAAI,EAAE,CAAC;gBAC5C,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;oBACnB,GAAG,OAAO;oBACV,YAAY,EAAE,QAAQ;oBACtB,GAAG,EAAE,qCAAqC,GAAG,EAAE;iBAChD,CAAC,CAAC;gBACH,WAAW,CAAC,QAAQ,CAAC,GAAG,EAAE,mCAAmC,CAAC,CAAC;YACjE,CAAC;YACD,QAAQ,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC;SACvB,CAAC,CAAC;QACH,IAAI,CAAC,MAAM,CAAC,kBAAkB,CAAC;YAC7B,QAAQ,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC;YACtB,IAAI,EAAE,CAAC,MAAM,EAAE,EAAE;gBACf,IAAI,IAAI,CAAC,gBAAgB,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC;oBAC5C,OAAO;gBACT,CAAC;gBACD,eAAe;gBACf,8EAA8E;gBAC9E,YAAY;gBACZ,KAAK;gBACL,MAAM,QAAQ,GAAG,6BAA6B,CAAC,MAAM,CAAC,CAAC;gBACvD,IAAI,CAAC,QAAQ,EAAE,CAAC;oBACd,EAAE,IAAI,CAAC,eAAe,CAAC;oBACvB,IAAI,CAAC,qBAAqB,EAAE,CAAC;oBAC7B,OAAO;gBACT,CAAC;gBACD,MAAM,MAAM,GAAG,YAAY,CAAC,aAAa,CAAC;gBAC1C,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;gBAC9B,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;oBACnB,GAAG,IAAI,CAAC,UAAU,CAAC,KAAK;oBACxB,KAAK,EACH,IAAI,CAAC,WAAW,KAAK,QAAQ,CAAC,GAAG;wBAC/B,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,KAAK;wBAC7B,CAAC,CAAC,IAAI;oBACV,IAAI,EAAE,QAAQ;oBACd,MAAM;oBACN,YAAY,EAAE,OAAO;iBACtB,CAAC,CAAC;gBACH,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAChC,CAAC;YACD,KAAK,EAAE,CAAC,GAAG,EAAE,EAAE;gBACb,IAAI,IAAI,CAAC,gBAAgB,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC;oBAC5C,OAAO;gBACT,CAAC;gBACD,IAAI,CAAC,WAAW,CAAC,QAAQ,CACvB,GAAG,EACH,mDAAmD,CACpD,CAAC;gBACF,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,CAAC,KAAK,IAAI,EAAE,CAAC;gBAC5C,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;oBACnB,GAAG,OAAO;oBACV,YAAY,EAAE,QAAQ;oBACtB,GAAG,EAAE,uCAAuC,GAAG,EAAE;iBAClD,CAAC,CAAC;YACL,CAAC;SACF,CAAC,CAAC;IACL,CAAC;IAEO,qBAAqB;QAC3B,iBAAiB,EAAE,CAAC;QACpB,IAAI,CAAC,WAAW,GAAG,SAAS,CAAC;QAC7B,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC1B,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;YACnB,GAAG,IAAI,CAAC,UAAU,CAAC,KAAK;YACxB,MAAM,EAAE,YAAY,CAAC,gBAAgB;YACrC,YAAY,EAAE,OAAO;YACrB,KAAK,EAAE,IAAI;YACX,IAAI,EAAE,IAAI;SACX,CAAC,CAAC;QACH,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,YAAY,CAAC,gBAAgB,CAAC,CAAC;IACvD,CAAC;IAEM,OAAO;QACZ,iBAAiB,EAAE,CAAC;QACpB,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;IAC/B,CAAC;IAEM,eAAe,CAAC,KAAa;QAClC,OAAO,qBAAqB,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IACnD,CAAC;IAEM,mBAAmB,CAAC,KAAa;QACtC,OAAO,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC;IACvD,CAAC;IAEM,8BAA8B,CACnC,KAAa,EACb,QAAgB;QAEhB,OAAO,IAAI,CAAC,iBAAiB,CAC3B,8BAA8B,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,QAAQ,CAAC,CAC7D,CAAC;IACJ,CAAC;IAEM,0BAA0B,CAC/B,KAAa,EACb,QAAgB;QAEhB,OAAO,IAAI,CAAC,iBAAiB,CAC3B,0BAA0B,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,QAAQ,CAAC,CACzD,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,iBAAiB,CAC7B,UAAmC;QAEnC,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,UAAU,CAAC;QAClC,OAAO;YACL,MAAM,EAAE,IAAI,CAAC,GAAG;YAChB,KAAK,EAAE,MAAM,IAAI,CAAC,UAAU,EAAE;SAC/B,CAAC;IACJ,CAAC;IAIO,KAAK,CAAC,mBAAmB,CAC/B,cAA8B;QAE9B,IAAI,YAAsC,CAAC;QAE3C,MAAM,CAAC,GAA2B,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC;QAE3D,QAAQ,cAAc,EAAE,CAAC;YACvB,KAAK,YAAY;gBACf,YAAY,GAAG,MAAM,sBAAsB,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC;gBAChE,MAAM;YACR,KAAK,WAAW;gBACd,YAAY,GAAG,MAAM,sBAAsB,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;gBAC/D,MAAM;YACR,KAAK,cAAc;gBACjB,YAAY,GAAG,MAAM,sBAAsB,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC;gBAClE,MAAM;YACR,KAAK,eAAe;gBAClB,YAAY,GAAG,MAAM,sBAAsB,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC;gBACnE,MAAM;YACR;gBACE,OAAO,OAAO,CAAC,MAAM,CAAC,6BAA6B,GAAG,cAAc,CAAC,CAAC;QAC1E,CAAC;QACD,eAAe;QACf,sHAAsH;QACtH,kBAAkB;QAClB,KAAK;QACL,0FAA0F;QAC1F,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,0BAA0B,CAC1D,cAAc,EACd,YAAY,CACb,CAAC;QAEF,OAAO,OAAO,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;IACzC,CAAC;IAEO,KAAK,CAAC,0BAA0B,CACtC,cAA8B,EAC9B,YAA0B;QAE1B,MAAM,aAAa,GAAG,IAAI,aAAa,CAAC,cAAc,CAAC,CAAC;QACxD,MAAM,UAAU,GAAG,aAAa,CAAC,UAAU,CAAC;YAC1C,OAAO,EAAE,YAAY,CAAC,UAAU,EAAE,OAAO;YACzC,WAAW,EAAE,YAAY,CAAC,UAAU,EAAE,WAAW;YACjD,QAAQ,EAAE,YAAY,CAAC,UAAU,EAAE,KAAK;SACzC,CAAC,CAAC;QACH,MAAM,IAAI,GAAG,OAAO,EAAE,CAAC;QACvB,MAAM,cAAc,GAAG,MAAM,oBAAoB,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;QAEpE,wDAAwD;QACxD,MAAM,gBAAgB,GAAG,MAAM,cAAc,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC;QAEhE,OAAO,OAAO,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;IACzC,CAAC;IAEO,KAAK,CAAC,gBAAgB,CAC5B,cAA8B;QAE9B,MAAM,YAAY,GAAG,eAAe,CAAC,cAAc,CAAC,CAAC;QACrD,IAAI,IAAI,CAAC,YAAY,KAAK,UAAU,EAAE,CAAC;YACrC,0EAA0E;YAC1E,yEAAyE;YACzE,MAAM,kBAAkB,CAAC,IAAI,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;YACpD,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,MAAM,cAAc,GAAG,MAAM,eAAe,CAAC,IAAI,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;QACxE,OAAO,OAAO,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;IACzC,CAAC;IAEM,KAAK,CAAC,QAAQ,CACnB,cAA8B;QAE9B,MAAM,YAAY,GAAG,eAAe,CAAC,cAAc,CAAC,CAAC;QACrD,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;YAC7B,OAAO,OAAO,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC;QAC3C,CAAC;QACD,MAAM,cAAc,GAAG,MAAM,aAAa,CACxC,IAAI,CAAC,MAAM,CAAC,WAAW,EACvB,YAAY,CACb,CAAC;QACF,OAAO,OAAO,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;IACzC,CAAC;IAEM,KAAK,CAAC,kBAAkB,CAAC,cAAsB;QACpD,MAAM,WAAW,GAAG,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC;QAC5C,IAAI,WAAW,EAAE,CAAC;YAChB,IAAI,CAAC;gBACH,MAAM,WAAW,GAAG,MAAM,MAAM,CAAC,WAAW,EAAE,cAAc,CAAC,CAAC;gBAC9D,MAAM,QAAQ,GAAG,6BAA6B,CAAC,WAAW,CAAC,CAAC;gBAC5D,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;gBAC9B,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;YAC3B,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,OAAO,CAAC,MAAM,CACnB,oBAAoB,cAAc,WAAW,GAAG,KAAK,CACtD,CAAC;YACJ,CAAC;QACH,CAAC;aAAM,CAAC;YACN,OAAO,OAAO,CAAC,MAAM,CAAC,iCAAiC,CAAC,CAAC;QAC3D,CAAC;IACH,CAAC;IAEM,KAAK,CAAC,UAAU,CACrB,cAA8B;QAE9B,eAAe;QACf,4IAA4I;QAC5I,KAAK;QACL,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,eAAe,EAAE;YAC9C,QAAQ,EAAE,cAAc;SACzB,CAAC,CAAC;QACH,IAAI,CAAC;YACH,IAAI,IAAI,CAAC,eAAe,EAAE,CAAC;gBACzB,OAAO,OAAO,CAAC,MAAM,CACnB,IAAI,KAAK,CACP,uDAAuD,cAAc,iCAAiC,IAAI,CAAC,eAAe,iBAAiB,CAC5I,CACF,CAAC;YACJ,CAAC;YAED,IAAI,cAAc,GAA+B,SAAS,CAAC;YAE3D,IAAI,SAAS,CAAC,gBAAgB,EAAE,EAAE,CAAC;gBACjC,cAAc,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAAC,cAAc,CAAC,CAAC;YAClE,CAAC;iBAAM,CAAC;gBACN,cAAc,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,cAAc,CAAC,CAAC;YAC/D,CAAC;YAED,IAAI,CAAC,eAAe,GAAG,SAAS,CAAC;YACjC,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,cAAc,EAAE;gBAC7C,QAAQ,EAAE,cAAc;aACzB,CAAC,CAAC;YACH,OAAO,OAAO,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;QACzC,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,IAAI,CAAC,eAAe,GAAG,SAAS,CAAC;YACjC,OAAO,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QAC3B,CAAC;IACH,CAAC;8GAtWU,qBAAqB;kHAArB,qBAAqB;;2FAArB,qBAAqB;kBADjC,UAAU;;AAyXX,SAAS,eAAe,CAAC,cAA8B;IACrD,QAAQ,cAAc,EAAE,CAAC;QACvB,KAAK,YAAY;YACf,OAAO,IAAI,kBAAkB,EAAE,CAAC;QAClC,KAAK,WAAW;YACd,OAAO,IAAI,aAAa,CAAC,WAAW,CAAC,CAAC;QACxC,EAAE;QACF,qHAAqH;QACrH,wDAAwD;QACxD,0EAA0E;QAC1E,qCAAqC;QACrC,MAAM;QACN,KAAK,eAAe;YAClB,OAAO,IAAI,aAAa,CAAC,eAAe,CAAC,CAAC;QAC5C,KAAK,cAAc,CAAC,CAAC,CAAC;YACpB,MAAM,oBAAoB,GAAG,IAAI,oBAAoB,EAAE,CAAC;YACxD,oBAAoB,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;YACvC,OAAO,oBAAoB,CAAC;QAC9B,CAAC;QACD,KAAK,YAAY,CAAC,CAAC,CAAC;YAClB,MAAM,kBAAkB,GAAG,IAAI,kBAAkB,EAAE,CAAC;YACpD,kBAAkB,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;YACzC,kBAAkB,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;YAC1C,OAAO,kBAAkB,CAAC;QAC5B,CAAC;QACD;YACE,MAAM,IAAI,KAAK,CAAC,6BAA6B,GAAG,cAAc,CAAC,CAAC;IACpE,CAAC;AACH,CAAC;AAED,SAAS,6BAA6B,CACpC,MAAmB;IAEnB,OAAO,CACL,MAAM,IAAI;QACR,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,aAAa,EAAE,MAAM,CAAC,aAAa;QACnC,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,GAAG,EAAE,MAAM,CAAC,GAAG;QACf,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,UAAU,EACR,MAAM,CAAC,YAAY,EAAE,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC;YACzD,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,UAAU;YACnC,CAAC,CAAC,MAAM,CAAC,UAAU;QACvB,YAAY,EAAE,MAAM,CAAC,YAAY;KAClC,CACF,CAAC;AACJ,CAAC","sourcesContent":["import { SignInWithOAuthOptions } from '@capacitor-firebase/authentication/dist/esm/definitions';\nimport { Capacitor } from '@capacitor/core';\nimport {\n  FirebaseAuthentication,\n  SignInResult,\n} from '@capacitor-firebase/authentication';\nimport {\n  AnalyticsService,\n  clearCurrentSpace,\n  EnumAsUnionOfKeys,\n  EnvConfigToken,\n  IAnalyticsService,\n  SNEAT_FIREBASE_AUTH,\n  SneatUrlOperationBlocker,\n} from '@sneat/core';\nimport { BehaviorSubject, from, Observable } from 'rxjs';\nimport { Injectable, inject } from '@angular/core';\nimport { ErrorLogger, IErrorLogger } from '@sneat/core';\nimport { distinctUntilChanged, shareReplay } from 'rxjs/operators';\nimport {\n  AuthProvider,\n  getAuth,\n  signInWithCredential,\n  User,\n  UserCredential,\n  UserInfo,\n  GoogleAuthProvider,\n  OAuthProvider,\n  GithubAuthProvider,\n  FacebookAuthProvider,\n  signInWithEmailLink,\n  signInWithCustomToken,\n  signInWithPopup,\n  signInWithRedirect,\n  linkWithPopup,\n  unlink,\n  createUserWithEmailAndPassword,\n  signInWithEmailAndPassword,\n} from 'firebase/auth';\n\n// TODO: fix & remove this eslint hint @nrwl/nx/enforce-module-boundaries\n\nimport { newRandomId } from '@sneat/random';\n\nexport enum AuthStatuses {\n  authenticating = 'authenticating',\n  authenticated = 'authenticated',\n  notAuthenticated = 'notAuthenticated',\n}\n\nexport type AuthStatus = EnumAsUnionOfKeys<typeof AuthStatuses>;\n\n/**\n * A user-visible, evidence-based session progress phase. The UI maps these to\n * friendly copy (for example “Checking your sign-in”), never SDK terminology.\n */\nexport type SneatAuthLoadingPhase =\n  | 'checking-session'\n  | 'getting-token'\n  | 'ready'\n  | 'failed';\n\nexport interface ISneatAuthUser extends UserInfo {\n  readonly isAnonymous: boolean;\n  readonly emailVerified: boolean;\n  readonly providerData: readonly UserInfo[];\n}\n\nexport interface ISneatAuthState {\n  readonly status: AuthStatus;\n  readonly loadingPhase?: SneatAuthLoadingPhase;\n  readonly token?: string | null;\n  readonly user?: ISneatAuthUser | null;\n  readonly err?: unknown;\n}\n\nexport interface ISneatEmailAuthResult {\n  readonly userID: string;\n  readonly token: string;\n}\n\nconst initialAuthStatus = AuthStatuses.authenticating;\nexport const initialSneatAuthState = {\n  status: initialAuthStatus,\n  loadingPhase: 'checking-session' as const,\n};\n\n// The host must provide this from its authenticated route/session boundary.\n// Keeping it out of the root injector is what allows public shells to render\n// before Firebase Auth and Firestore are downloaded.\n@Injectable()\nexport class SneatAuthStateService {\n  private readonly errorLogger = inject<IErrorLogger>(ErrorLogger);\n  private readonly analyticsService =\n    inject<IAnalyticsService>(AnalyticsService);\n  readonly fbAuth = inject(SNEAT_FIREBASE_AUTH);\n  private readonly operationBlocker = inject(SneatUrlOperationBlocker);\n\n  // Web OAuth sign-in strategy from the app's environment config (default popup).\n  private readonly signInMethod =\n    inject(EnvConfigToken, { optional: true })?.signInMethod ?? 'popup';\n\n  private readonly id = newRandomId({ len: 5 });\n\n  private readonly authStatus$ = new BehaviorSubject<AuthStatus>(\n    initialAuthStatus,\n  );\n  public readonly authStatus = this.authStatus$\n    .asObservable()\n    .pipe(distinctUntilChanged());\n\n  private readonly authUser$ = new BehaviorSubject<\n    ISneatAuthUser | null | undefined\n  >(undefined);\n  public readonly authUser = this.authUser$.asObservable();\n\n  private readonly authState$ = new BehaviorSubject<ISneatAuthState>(\n    initialSneatAuthState,\n  );\n  public readonly authState = this.authState$.asObservable().pipe(\n    // tap(v => console.log('SneatAuthStateService => SneatAuthState:', v)),\n    shareReplay(1),\n  );\n\n  private tokenGeneration = 0;\n  private tokenUserID?: string;\n\n  // private readonly fbAuth: Auth;\n\n  constructor() {\n    const errorLogger = this.errorLogger;\n    this.fbAuth.onIdTokenChanged({\n      next: (firebaseUser) => {\n        if (this.operationBlocker.isBlocked('auth')) {\n          return;\n        }\n        const tokenGeneration = ++this.tokenGeneration;\n        const status: AuthStatus = firebaseUser\n          ? AuthStatuses.authenticated\n          : AuthStatuses.notAuthenticated;\n        if (!firebaseUser) {\n          this.publishSignedOutState();\n          return;\n        }\n        this.authState$.next({\n          ...this.authState$.value,\n          status: AuthStatuses.authenticating,\n          loadingPhase: 'getting-token',\n        });\n        if (\n          this.authState$.value?.user?.uid !== firebaseUser?.uid\n        ) {\n          this.analyticsService.identify(firebaseUser.uid);\n        }\n        firebaseUser\n          .getIdToken(false)\n          .then((token) => {\n            if (\n              tokenGeneration !== this.tokenGeneration ||\n              this.fbAuth.currentUser !== firebaseUser\n            ) {\n              return;\n            }\n            this.tokenUserID = firebaseUser.uid;\n            const authUser = createSneatAuthUserFromFbUser(firebaseUser);\n            if (this.authUser$.value?.uid !== authUser?.uid) {\n              this.authUser$.next(authUser);\n            }\n            const current = this.authState$.value || {};\n            this.authState$.next({\n              ...current,\n              status,\n              loadingPhase: 'ready',\n              token,\n              user: authUser,\n            });\n            this.authStatus$.next(status); // Should be after authState$\n          })\n          .catch((err) => {\n            if (\n              tokenGeneration !== this.tokenGeneration ||\n              this.fbAuth.currentUser !== firebaseUser\n            ) {\n              return;\n            }\n            const current = this.authState$.value || {};\n            this.authState$.next({\n              ...current,\n              loadingPhase: 'failed',\n              err: `fbUser.getIdToken() failed: ${err}`,\n            });\n            this.errorLogger.logError(err, 'Failed in fbUser.getIdToken()');\n          });\n      },\n      error: (err) => {\n        if (this.operationBlocker.isBlocked('auth')) {\n          return;\n        }\n        const current = this.authState$.value || {};\n        this.authState$.next({\n          ...current,\n          loadingPhase: 'failed',\n          err: `fbAuth.onIdTokenChanged() failed: ${err}`,\n        });\n        errorLogger.logError(err, 'failed in fbAuth.onIdTokenChanged');\n      },\n      complete: () => void 0,\n    });\n    this.fbAuth.onAuthStateChanged({\n      complete: () => void 0,\n      next: (fbUser) => {\n        if (this.operationBlocker.isBlocked('auth')) {\n          return;\n        }\n        // console.log(\n        //   `SneatAuthStateService => authStatus: ${this.authStatus$.value}; fbUser`,\n        //   fbUser,\n        // );\n        const authUser = createSneatAuthUserFromFbUser(fbUser);\n        if (!authUser) {\n          ++this.tokenGeneration;\n          this.publishSignedOutState();\n          return;\n        }\n        const status = AuthStatuses.authenticated;\n        this.authUser$.next(authUser);\n        this.authState$.next({\n          ...this.authState$.value,\n          token:\n            this.tokenUserID === authUser.uid\n              ? this.authState$.value.token\n              : null,\n          user: authUser,\n          status,\n          loadingPhase: 'ready',\n        });\n        this.authStatus$.next(status);\n      },\n      error: (err) => {\n        if (this.operationBlocker.isBlocked('auth')) {\n          return;\n        }\n        this.errorLogger.logError(\n          err,\n          'failed to retrieve Firebase auth user information',\n        );\n        const current = this.authState$.value || {};\n        this.authState$.next({\n          ...current,\n          loadingPhase: 'failed',\n          err: `fbAuth.onAuthStateChanged() failed: ${err}`,\n        });\n      },\n    });\n  }\n\n  private publishSignedOutState(): void {\n    clearCurrentSpace();\n    this.tokenUserID = undefined;\n    this.authUser$.next(null);\n    this.authState$.next({\n      ...this.authState$.value,\n      status: AuthStatuses.notAuthenticated,\n      loadingPhase: 'ready',\n      token: null,\n      user: null,\n    });\n    this.authStatus$.next(AuthStatuses.notAuthenticated);\n  }\n\n  public signOut(): Promise<void> {\n    clearCurrentSpace();\n    return this.fbAuth.signOut();\n  }\n\n  public signInWithToken(token: string): Promise<UserCredential> {\n    return signInWithCustomToken(this.fbAuth, token);\n  }\n\n  public signInWithEmailLink(email: string): Observable<UserCredential> {\n    return from(signInWithEmailLink(this.fbAuth, email));\n  }\n\n  public createUserWithEmailAndPassword(\n    email: string,\n    password: string,\n  ): Promise<ISneatEmailAuthResult> {\n    return this.toEmailAuthResult(\n      createUserWithEmailAndPassword(this.fbAuth, email, password),\n    );\n  }\n\n  public signInWithEmailAndPassword(\n    email: string,\n    password: string,\n  ): Promise<ISneatEmailAuthResult> {\n    return this.toEmailAuthResult(\n      signInWithEmailAndPassword(this.fbAuth, email, password),\n    );\n  }\n\n  private async toEmailAuthResult(\n    credential: Promise<UserCredential>,\n  ): Promise<ISneatEmailAuthResult> {\n    const { user } = await credential;\n    return {\n      userID: user.uid,\n      token: await user.getIdToken(),\n    };\n  }\n\n  private isSigningInWith?: AuthProviderName;\n\n  private async signInOnNativeLayer(\n    authProviderID: AuthProviderID,\n  ): Promise<UserCredential> {\n    let signInResult: SignInResult | undefined;\n\n    const o: SignInWithOAuthOptions = { skipNativeAuth: true };\n\n    switch (authProviderID) {\n      case 'google.com':\n        signInResult = await FirebaseAuthentication.signInWithGoogle(o);\n        break;\n      case 'apple.com':\n        signInResult = await FirebaseAuthentication.signInWithApple(o);\n        break;\n      case 'facebook.com':\n        signInResult = await FirebaseAuthentication.signInWithFacebook(o);\n        break;\n      case 'microsoft.com':\n        signInResult = await FirebaseAuthentication.signInWithMicrosoft(o);\n        break;\n      default:\n        return Promise.reject('unsupported auth provider: ' + authProviderID);\n    }\n    // console.log(\n    //   `SneatAuthStateService.signInWith(${authProviderID}) => signed in on native layer, authenticating in webview...`,\n    //   signInResult,\n    // );\n    // we need to authenticate on webview layer using the id token and nonce from signInResult\n    const userCredential = await this.authenticateOnWebviewLayer(\n      authProviderID,\n      signInResult,\n    );\n\n    return Promise.resolve(userCredential);\n  }\n\n  private async authenticateOnWebviewLayer(\n    authProviderID: AuthProviderID,\n    signInResult: SignInResult,\n  ): Promise<UserCredential> {\n    const oauthProvider = new OAuthProvider(authProviderID);\n    const credential = oauthProvider.credential({\n      idToken: signInResult.credential?.idToken,\n      accessToken: signInResult.credential?.accessToken,\n      rawNonce: signInResult.credential?.nonce,\n    });\n    const auth = getAuth();\n    const userCredential = await signInWithCredential(auth, credential);\n\n    // Get a valid Firebase ID token that has a 'kid' header\n    const _firebaseIdToken = await userCredential.user.getIdToken();\n\n    return Promise.resolve(userCredential);\n  }\n\n  private async signInWithWebSDK(\n    authProviderID: AuthProviderID,\n  ): Promise<UserCredential | undefined> {\n    const authProvider = getAuthProvider(authProviderID);\n    if (this.signInMethod === 'redirect') {\n      // Full-page redirect; this navigates away and never resolves. The sign-in\n      // is completed on return by BaseAppComponent's getRedirectResult() call.\n      await signInWithRedirect(this.fbAuth, authProvider);\n      return undefined;\n    }\n    const userCredential = await signInWithPopup(this.fbAuth, authProvider);\n    return Promise.resolve(userCredential);\n  }\n\n  public async linkWith(\n    authProviderID: AuthProviderID,\n  ): Promise<UserCredential | undefined> {\n    const authProvider = getAuthProvider(authProviderID);\n    if (!this.fbAuth.currentUser) {\n      return Promise.reject('no current user');\n    }\n    const userCredential = await linkWithPopup(\n      this.fbAuth.currentUser,\n      authProvider,\n    );\n    return Promise.resolve(userCredential);\n  }\n\n  public async unlinkAuthProvider(authProviderID: string): Promise<void> {\n    const currentUser = this.fbAuth.currentUser;\n    if (currentUser) {\n      try {\n        const updatedUser = await unlink(currentUser, authProviderID);\n        const authUser = createSneatAuthUserFromFbUser(updatedUser);\n        this.authUser$.next(authUser);\n        return Promise.resolve();\n      } catch (error) {\n        return Promise.reject(\n          `Failed to unlink ${authProviderID} account:` + error,\n        );\n      }\n    } else {\n      return Promise.reject('No user is currently signed in.');\n    }\n  }\n\n  public async signInWith(\n    authProviderID: AuthProviderID,\n  ): Promise<UserCredential | undefined> {\n    // console.log(\n    //   `SneatAuthStateService.signInWith(${authProviderID}), isSigningInWith=${this.isSigningInWith}, location.protocol=${location.protocol}`,\n    // );\n    this.analyticsService.logEvent('signingInWith', {\n      provider: authProviderID,\n    });\n    try {\n      if (this.isSigningInWith) {\n        return Promise.reject(\n          new Error(\n            `a repeated call to SneatAuthStateService.signInWith(${authProviderID}) white previous sign in with ${this.isSigningInWith} is in progress`,\n          ),\n        );\n      }\n\n      let userCredential: UserCredential | undefined = undefined;\n\n      if (Capacitor.isNativePlatform()) {\n        userCredential = await this.signInOnNativeLayer(authProviderID);\n      } else {\n        userCredential = await this.signInWithWebSDK(authProviderID);\n      }\n\n      this.isSigningInWith = undefined;\n      this.analyticsService.logEvent('signedInWith', {\n        provider: authProviderID,\n      });\n      return Promise.resolve(userCredential);\n    } catch (e) {\n      this.isSigningInWith = undefined;\n      return Promise.reject(e);\n    }\n  }\n}\n\nexport type AuthProviderID =\n  | 'apple.com'\n  | 'google.com'\n  | 'microsoft.com'\n  | 'facebook.com'\n  | 'github.com'\n  | 'phone';\n\nexport type AuthProviderName =\n  | 'Google'\n  | 'Apple'\n  | 'Microsoft'\n  | 'Facebook'\n  | 'GitHub';\n\nfunction getAuthProvider(authProviderID: AuthProviderID): AuthProvider {\n  switch (authProviderID) {\n    case 'google.com':\n      return new GoogleAuthProvider();\n    case 'apple.com':\n      return new OAuthProvider('apple.com');\n    //\n    // https://developer.apple.com/documentation/sign_in_with_apple/incorporating-sign-in-with-apple-into-other-platforms\n    // (authProvider as OAuthProvider).setCustomParameters({\n    // \t// \t// Localize the Apple authentication screen in current app locale.\n    // \tlocale: 'en', // TODO: set locale\n    // });\n    case 'microsoft.com':\n      return new OAuthProvider('microsoft.com');\n    case 'facebook.com': {\n      const facebookAuthProvider = new FacebookAuthProvider();\n      facebookAuthProvider.addScope('email');\n      return facebookAuthProvider;\n    }\n    case 'github.com': {\n      const githubAuthProvider = new GithubAuthProvider();\n      githubAuthProvider.addScope('read:user');\n      githubAuthProvider.addScope('user:email');\n      return githubAuthProvider;\n    }\n    default:\n      throw new Error('unsupported auth provider: ' + authProviderID);\n  }\n}\n\nfunction createSneatAuthUserFromFbUser(\n  fbUser: User | null,\n): ISneatAuthUser | null {\n  return (\n    fbUser && {\n      isAnonymous: fbUser.isAnonymous,\n      emailVerified: fbUser.emailVerified,\n      email: fbUser.email,\n      uid: fbUser.uid,\n      displayName: fbUser.displayName,\n      phoneNumber: fbUser.phoneNumber,\n      photoURL: fbUser.photoURL,\n      providerId:\n        fbUser.providerData?.length === 1 && fbUser.providerData[0]\n          ? fbUser.providerData[0].providerId\n          : fbUser.providerId,\n      providerData: fbUser.providerData,\n    }\n  );\n}\n"]}
+{"version":3,"file":"sneat-auth-state-service.js","sourceRoot":"","sources":["../../../../../../libs/auth/core/src/lib/sneat-auth-state-service.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EACL,sBAAsB,GAEvB,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EACL,gBAAgB,EAChB,iBAAiB,EAEjB,cAAc,EAEd,mBAAmB,EACnB,wBAAwB,GACzB,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,eAAe,EAAE,IAAI,EAAc,MAAM,MAAM,CAAC;AACzD,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,eAAe,CAAC;AACnD,OAAO,EAAE,WAAW,EAAgB,MAAM,aAAa,CAAC;AACxD,OAAO,EAAE,oBAAoB,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AACnE,OAAO,EAEL,OAAO,EACP,oBAAoB,EAIpB,kBAAkB,EAClB,aAAa,EACb,kBAAkB,EAClB,oBAAoB,EACpB,mBAAmB,EACnB,qBAAqB,EACrB,eAAe,EACf,kBAAkB,EAClB,aAAa,EACb,MAAM,EACN,8BAA8B,EAC9B,0BAA0B,GAC3B,MAAM,eAAe,CAAC;AAEvB,yEAAyE;AAEzE,OAAO,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;;AAE5C,MAAM,CAAN,IAAY,YAIX;AAJD,WAAY,YAAY;IACtB,iDAAiC,CAAA;IACjC,+CAA+B,CAAA;IAC/B,qDAAqC,CAAA;AACvC,CAAC,EAJW,YAAY,KAAZ,YAAY,QAIvB;AAiCD,MAAM,iBAAiB,GAAG,YAAY,CAAC,cAAc,CAAC;AACtD,MAAM,CAAC,MAAM,qBAAqB,GAAG;IACnC,MAAM,EAAE,iBAAiB;IACzB,YAAY,EAAE,kBAA2B;CAC1C,CAAC;AAEF,4EAA4E;AAC5E,6EAA6E;AAC7E,qDAAqD;AAErD,MAAM,OAAO,qBAAqB;IAoChC,iCAAiC;IAEjC;QArCiB,gBAAW,GAAG,MAAM,CAAe,WAAW,CAAC,CAAC;QAChD,qBAAgB,GAC/B,MAAM,CAAoB,gBAAgB,CAAC,CAAC;QACrC,WAAM,GAAG,MAAM,CAAC,mBAAmB,CAAC,CAAC;QAC7B,qBAAgB,GAAG,MAAM,CAAC,wBAAwB,CAAC,CAAC;QAErE,gFAAgF;QAC/D,iBAAY,GAC3B,MAAM,CAAC,cAAc,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,EAAE,YAAY,IAAI,OAAO,CAAC;QAErD,OAAE,GAAG,WAAW,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;QAE7B,gBAAW,GAAG,IAAI,eAAe,CAChD,iBAAiB,CAClB,CAAC;QACc,eAAU,GAAG,IAAI,CAAC,WAAW;aAC1C,YAAY,EAAE;aACd,IAAI,CAAC,oBAAoB,EAAE,CAAC,CAAC;QAEf,cAAS,GAAG,IAAI,eAAe,CAE9C,SAAS,CAAC,CAAC;QACG,aAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,YAAY,EAAE,CAAC;QAExC,eAAU,GAAG,IAAI,eAAe,CAC/C,qBAAqB,CACtB,CAAC;QACc,cAAS,GAAG,IAAI,CAAC,UAAU,CAAC,YAAY,EAAE,CAAC,IAAI;QAC7D,wEAAwE;QACxE,WAAW,CAAC,CAAC,CAAC,CACf,CAAC;QAEM,oBAAe,GAAG,CAAC,CAAC;QAM1B,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,CAAC;QACrC,IAAI,CAAC,MAAM,CAAC,gBAAgB,CAAC;YAC3B,IAAI,EAAE,CAAC,YAAY,EAAE,EAAE;gBACrB,IAAI,IAAI,CAAC,gBAAgB,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC;oBAC5C,OAAO;gBACT,CAAC;gBACD,MAAM,eAAe,GAAG,EAAE,IAAI,CAAC,eAAe,CAAC;gBAC/C,MAAM,MAAM,GAAe,YAAY;oBACrC,CAAC,CAAC,YAAY,CAAC,aAAa;oBAC5B,CAAC,CAAC,YAAY,CAAC,gBAAgB,CAAC;gBAClC,IAAI,CAAC,YAAY,EAAE,CAAC;oBAClB,IAAI,CAAC,qBAAqB,EAAE,CAAC;oBAC7B,OAAO;gBACT,CAAC;gBACD,MAAM,QAAQ,GAAG,6BAA6B,CAAC,YAAY,CAAC,CAAC;gBAC7D,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,CAAC,KAAK,IAAI,EAAE,CAAC;gBAC5C,IAAI,OAAO,CAAC,IAAI,EAAE,GAAG,KAAK,QAAQ,EAAE,GAAG,EAAE,CAAC;oBACxC,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;gBACnD,CAAC;gBACD,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;oBACnB,GAAG,OAAO;oBACV,MAAM,EAAE,YAAY,CAAC,cAAc;oBACnC,YAAY,EAAE,eAAe;oBAC7B,KAAK,EAAE,OAAO,CAAC,IAAI,EAAE,GAAG,KAAK,QAAQ,EAAE,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI;oBACjE,IAAI,EAAE,QAAQ;iBACf,CAAC,CAAC;gBACH,YAAY;qBACT,UAAU,CAAC,KAAK,CAAC;qBACjB,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE;oBACd,IACE,eAAe,KAAK,IAAI,CAAC,eAAe;wBACxC,IAAI,CAAC,MAAM,CAAC,WAAW,KAAK,YAAY,EACxC,CAAC;wBACD,OAAO;oBACT,CAAC;oBACD,IAAI,CAAC,WAAW,GAAG,YAAY,CAAC,GAAG,CAAC;oBACpC,MAAM,QAAQ,GAAG,6BAA6B,CAAC,YAAY,CAAC,CAAC;oBAC7D,MAAM,gBAAgB,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC;oBAC9C,IACE,gBAAgB,EAAE,GAAG,KAAK,QAAQ,EAAE,GAAG;wBACvC,gBAAgB,EAAE,WAAW,KAAK,QAAQ,EAAE,WAAW,EACvD,CAAC;wBACD,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;oBAChC,CAAC;oBACD,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,CAAC,KAAK,IAAI,EAAE,CAAC;oBAC5C,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;wBACnB,GAAG,OAAO;wBACV,MAAM;wBACN,YAAY,EAAE,OAAO;wBACrB,KAAK;wBACL,IAAI,EAAE,QAAQ;qBACf,CAAC,CAAC;oBACH,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,6BAA6B;gBAC9D,CAAC,CAAC;qBACD,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;oBACb,IACE,eAAe,KAAK,IAAI,CAAC,eAAe;wBACxC,IAAI,CAAC,MAAM,CAAC,WAAW,KAAK,YAAY,EACxC,CAAC;wBACD,OAAO;oBACT,CAAC;oBACD,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,CAAC,KAAK,IAAI,EAAE,CAAC;oBAC5C,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;wBACnB,GAAG,OAAO;wBACV,YAAY,EAAE,QAAQ;wBACtB,GAAG,EAAE,+BAA+B,GAAG,EAAE;qBAC1C,CAAC,CAAC;oBACH,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,GAAG,EAAE,+BAA+B,CAAC,CAAC;gBAClE,CAAC,CAAC,CAAC;YACP,CAAC;YACD,KAAK,EAAE,CAAC,GAAG,EAAE,EAAE;gBACb,IAAI,IAAI,CAAC,gBAAgB,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC;oBAC5C,OAAO;gBACT,CAAC;gBACD,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,CAAC,KAAK,IAAI,EAAE,CAAC;gBAC5C,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;oBACnB,GAAG,OAAO;oBACV,YAAY,EAAE,QAAQ;oBACtB,GAAG,EAAE,qCAAqC,GAAG,EAAE;iBAChD,CAAC,CAAC;gBACH,WAAW,CAAC,QAAQ,CAAC,GAAG,EAAE,mCAAmC,CAAC,CAAC;YACjE,CAAC;YACD,QAAQ,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC;SACvB,CAAC,CAAC;QACH,IAAI,CAAC,MAAM,CAAC,kBAAkB,CAAC;YAC7B,QAAQ,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC;YACtB,IAAI,EAAE,CAAC,MAAM,EAAE,EAAE;gBACf,IAAI,IAAI,CAAC,gBAAgB,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC;oBAC5C,OAAO;gBACT,CAAC;gBACD,eAAe;gBACf,8EAA8E;gBAC9E,YAAY;gBACZ,KAAK;gBACL,MAAM,QAAQ,GAAG,6BAA6B,CAAC,MAAM,CAAC,CAAC;gBACvD,IAAI,CAAC,QAAQ,EAAE,CAAC;oBACd,EAAE,IAAI,CAAC,eAAe,CAAC;oBACvB,IAAI,CAAC,qBAAqB,EAAE,CAAC;oBAC7B,OAAO;gBACT,CAAC;gBACD,MAAM,MAAM,GAAG,YAAY,CAAC,aAAa,CAAC;gBAC1C,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;gBAC9B,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;oBACnB,GAAG,IAAI,CAAC,UAAU,CAAC,KAAK;oBACxB,KAAK,EACH,IAAI,CAAC,WAAW,KAAK,QAAQ,CAAC,GAAG;wBAC/B,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,KAAK;wBAC7B,CAAC,CAAC,IAAI;oBACV,IAAI,EAAE,QAAQ;oBACd,MAAM;oBACN,YAAY,EAAE,OAAO;iBACtB,CAAC,CAAC;gBACH,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAChC,CAAC;YACD,KAAK,EAAE,CAAC,GAAG,EAAE,EAAE;gBACb,IAAI,IAAI,CAAC,gBAAgB,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC;oBAC5C,OAAO;gBACT,CAAC;gBACD,IAAI,CAAC,WAAW,CAAC,QAAQ,CACvB,GAAG,EACH,mDAAmD,CACpD,CAAC;gBACF,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,CAAC,KAAK,IAAI,EAAE,CAAC;gBAC5C,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;oBACnB,GAAG,OAAO;oBACV,YAAY,EAAE,QAAQ;oBACtB,GAAG,EAAE,uCAAuC,GAAG,EAAE;iBAClD,CAAC,CAAC;YACL,CAAC;SACF,CAAC,CAAC;IACL,CAAC;IAEO,qBAAqB;QAC3B,iBAAiB,EAAE,CAAC;QACpB,IAAI,CAAC,WAAW,GAAG,SAAS,CAAC;QAC7B,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC1B,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;YACnB,GAAG,IAAI,CAAC,UAAU,CAAC,KAAK;YACxB,MAAM,EAAE,YAAY,CAAC,gBAAgB;YACrC,YAAY,EAAE,OAAO;YACrB,KAAK,EAAE,IAAI;YACX,IAAI,EAAE,IAAI;SACX,CAAC,CAAC;QACH,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,YAAY,CAAC,gBAAgB,CAAC,CAAC;IACvD,CAAC;IAEM,OAAO;QACZ,iBAAiB,EAAE,CAAC;QACpB,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;IAC/B,CAAC;IAEM,eAAe,CAAC,KAAa;QAClC,OAAO,qBAAqB,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IACnD,CAAC;IAEM,mBAAmB,CAAC,KAAa;QACtC,OAAO,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC;IACvD,CAAC;IAEM,8BAA8B,CACnC,KAAa,EACb,QAAgB;QAEhB,OAAO,IAAI,CAAC,iBAAiB,CAC3B,8BAA8B,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,QAAQ,CAAC,CAC7D,CAAC;IACJ,CAAC;IAEM,0BAA0B,CAC/B,KAAa,EACb,QAAgB;QAEhB,OAAO,IAAI,CAAC,iBAAiB,CAC3B,0BAA0B,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,QAAQ,CAAC,CACzD,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,iBAAiB,CAC7B,UAAmC;QAEnC,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,UAAU,CAAC;QAClC,OAAO;YACL,MAAM,EAAE,IAAI,CAAC,GAAG;YAChB,KAAK,EAAE,MAAM,IAAI,CAAC,UAAU,EAAE;SAC/B,CAAC;IACJ,CAAC;IAIO,KAAK,CAAC,mBAAmB,CAC/B,cAA8B;QAE9B,IAAI,YAAsC,CAAC;QAE3C,MAAM,CAAC,GAA2B,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC;QAE3D,QAAQ,cAAc,EAAE,CAAC;YACvB,KAAK,YAAY;gBACf,YAAY,GAAG,MAAM,sBAAsB,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC;gBAChE,MAAM;YACR,KAAK,WAAW;gBACd,YAAY,GAAG,MAAM,sBAAsB,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;gBAC/D,MAAM;YACR,KAAK,cAAc;gBACjB,YAAY,GAAG,MAAM,sBAAsB,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC;gBAClE,MAAM;YACR,KAAK,eAAe;gBAClB,YAAY,GAAG,MAAM,sBAAsB,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC;gBACnE,MAAM;YACR;gBACE,OAAO,OAAO,CAAC,MAAM,CAAC,6BAA6B,GAAG,cAAc,CAAC,CAAC;QAC1E,CAAC;QACD,eAAe;QACf,sHAAsH;QACtH,kBAAkB;QAClB,KAAK;QACL,0FAA0F;QAC1F,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,0BAA0B,CAC1D,cAAc,EACd,YAAY,CACb,CAAC;QAEF,OAAO,OAAO,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;IACzC,CAAC;IAEO,KAAK,CAAC,0BAA0B,CACtC,cAA8B,EAC9B,YAA0B;QAE1B,MAAM,aAAa,GAAG,IAAI,aAAa,CAAC,cAAc,CAAC,CAAC;QACxD,MAAM,UAAU,GAAG,aAAa,CAAC,UAAU,CAAC;YAC1C,OAAO,EAAE,YAAY,CAAC,UAAU,EAAE,OAAO;YACzC,WAAW,EAAE,YAAY,CAAC,UAAU,EAAE,WAAW;YACjD,QAAQ,EAAE,YAAY,CAAC,UAAU,EAAE,KAAK;SACzC,CAAC,CAAC;QACH,MAAM,IAAI,GAAG,OAAO,EAAE,CAAC;QACvB,MAAM,cAAc,GAAG,MAAM,oBAAoB,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;QAEpE,wDAAwD;QACxD,MAAM,cAAc,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC;QAEvC,OAAO,OAAO,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;IACzC,CAAC;IAEO,KAAK,CAAC,gBAAgB,CAC5B,cAA8B;QAE9B,MAAM,YAAY,GAAG,eAAe,CAAC,cAAc,CAAC,CAAC;QACrD,IAAI,IAAI,CAAC,YAAY,KAAK,UAAU,EAAE,CAAC;YACrC,0EAA0E;YAC1E,yEAAyE;YACzE,MAAM,kBAAkB,CAAC,IAAI,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;YACpD,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,MAAM,cAAc,GAAG,MAAM,eAAe,CAAC,IAAI,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;QACxE,OAAO,OAAO,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;IACzC,CAAC;IAEM,KAAK,CAAC,QAAQ,CACnB,cAA8B;QAE9B,MAAM,YAAY,GAAG,eAAe,CAAC,cAAc,CAAC,CAAC;QACrD,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;YAC7B,OAAO,OAAO,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC;QAC3C,CAAC;QACD,MAAM,cAAc,GAAG,MAAM,aAAa,CACxC,IAAI,CAAC,MAAM,CAAC,WAAW,EACvB,YAAY,CACb,CAAC;QACF,OAAO,OAAO,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;IACzC,CAAC;IAEM,KAAK,CAAC,kBAAkB,CAAC,cAAsB;QACpD,MAAM,WAAW,GAAG,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC;QAC5C,IAAI,WAAW,EAAE,CAAC;YAChB,IAAI,CAAC;gBACH,MAAM,WAAW,GAAG,MAAM,MAAM,CAAC,WAAW,EAAE,cAAc,CAAC,CAAC;gBAC9D,MAAM,QAAQ,GAAG,6BAA6B,CAAC,WAAW,CAAC,CAAC;gBAC5D,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;gBAC9B,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;YAC3B,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,OAAO,CAAC,MAAM,CACnB,oBAAoB,cAAc,WAAW,GAAG,KAAK,CACtD,CAAC;YACJ,CAAC;QACH,CAAC;aAAM,CAAC;YACN,OAAO,OAAO,CAAC,MAAM,CAAC,iCAAiC,CAAC,CAAC;QAC3D,CAAC;IACH,CAAC;IAEM,KAAK,CAAC,UAAU,CACrB,cAA8B;QAE9B,eAAe;QACf,4IAA4I;QAC5I,KAAK;QACL,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,eAAe,EAAE;YAC9C,QAAQ,EAAE,cAAc;SACzB,CAAC,CAAC;QACH,IAAI,CAAC;YACH,IAAI,IAAI,CAAC,eAAe,EAAE,CAAC;gBACzB,OAAO,OAAO,CAAC,MAAM,CACnB,IAAI,KAAK,CACP,uDAAuD,cAAc,iCAAiC,IAAI,CAAC,eAAe,iBAAiB,CAC5I,CACF,CAAC;YACJ,CAAC;YAED,IAAI,cAAc,GAA+B,SAAS,CAAC;YAE3D,IAAI,SAAS,CAAC,gBAAgB,EAAE,EAAE,CAAC;gBACjC,cAAc,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAAC,cAAc,CAAC,CAAC;YAClE,CAAC;iBAAM,CAAC;gBACN,cAAc,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,cAAc,CAAC,CAAC;YAC/D,CAAC;YAED,IAAI,CAAC,eAAe,GAAG,SAAS,CAAC;YACjC,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,cAAc,EAAE;gBAC7C,QAAQ,EAAE,cAAc;aACzB,CAAC,CAAC;YACH,OAAO,OAAO,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;QACzC,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,IAAI,CAAC,eAAe,GAAG,SAAS,CAAC;YACjC,OAAO,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QAC3B,CAAC;IACH,CAAC;8GA5WU,qBAAqB;kHAArB,qBAAqB;;2FAArB,qBAAqB;kBADjC,UAAU;;AA+XX,SAAS,eAAe,CAAC,cAA8B;IACrD,QAAQ,cAAc,EAAE,CAAC;QACvB,KAAK,YAAY;YACf,OAAO,IAAI,kBAAkB,EAAE,CAAC;QAClC,KAAK,WAAW;YACd,OAAO,IAAI,aAAa,CAAC,WAAW,CAAC,CAAC;QACxC,EAAE;QACF,qHAAqH;QACrH,wDAAwD;QACxD,0EAA0E;QAC1E,qCAAqC;QACrC,MAAM;QACN,KAAK,eAAe;YAClB,OAAO,IAAI,aAAa,CAAC,eAAe,CAAC,CAAC;QAC5C,KAAK,cAAc,CAAC,CAAC,CAAC;YACpB,MAAM,oBAAoB,GAAG,IAAI,oBAAoB,EAAE,CAAC;YACxD,oBAAoB,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;YACvC,OAAO,oBAAoB,CAAC;QAC9B,CAAC;QACD,KAAK,YAAY,CAAC,CAAC,CAAC;YAClB,MAAM,kBAAkB,GAAG,IAAI,kBAAkB,EAAE,CAAC;YACpD,kBAAkB,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;YACzC,kBAAkB,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;YAC1C,OAAO,kBAAkB,CAAC;QAC5B,CAAC;QACD;YACE,MAAM,IAAI,KAAK,CAAC,6BAA6B,GAAG,cAAc,CAAC,CAAC;IACpE,CAAC;AACH,CAAC;AAED,SAAS,6BAA6B,CACpC,MAAmB;IAEnB,OAAO,CACL,MAAM,IAAI;QACR,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,aAAa,EAAE,MAAM,CAAC,aAAa;QACnC,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,GAAG,EAAE,MAAM,CAAC,GAAG;QACf,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,UAAU,EACR,MAAM,CAAC,YAAY,EAAE,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC;YACzD,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,UAAU;YACnC,CAAC,CAAC,MAAM,CAAC,UAAU;QACvB,YAAY,EAAE,MAAM,CAAC,YAAY;KAClC,CACF,CAAC;AACJ,CAAC","sourcesContent":["import { SignInWithOAuthOptions } from '@capacitor-firebase/authentication/dist/esm/definitions';\nimport { Capacitor } from '@capacitor/core';\nimport {\n  FirebaseAuthentication,\n  SignInResult,\n} from '@capacitor-firebase/authentication';\nimport {\n  AnalyticsService,\n  clearCurrentSpace,\n  EnumAsUnionOfKeys,\n  EnvConfigToken,\n  IAnalyticsService,\n  SNEAT_FIREBASE_AUTH,\n  SneatUrlOperationBlocker,\n} from '@sneat/core';\nimport { BehaviorSubject, from, Observable } from 'rxjs';\nimport { Injectable, inject } from '@angular/core';\nimport { ErrorLogger, IErrorLogger } from '@sneat/core';\nimport { distinctUntilChanged, shareReplay } from 'rxjs/operators';\nimport {\n  AuthProvider,\n  getAuth,\n  signInWithCredential,\n  User,\n  UserCredential,\n  UserInfo,\n  GoogleAuthProvider,\n  OAuthProvider,\n  GithubAuthProvider,\n  FacebookAuthProvider,\n  signInWithEmailLink,\n  signInWithCustomToken,\n  signInWithPopup,\n  signInWithRedirect,\n  linkWithPopup,\n  unlink,\n  createUserWithEmailAndPassword,\n  signInWithEmailAndPassword,\n} from 'firebase/auth';\n\n// TODO: fix & remove this eslint hint @nrwl/nx/enforce-module-boundaries\n\nimport { newRandomId } from '@sneat/random';\n\nexport enum AuthStatuses {\n  authenticating = 'authenticating',\n  authenticated = 'authenticated',\n  notAuthenticated = 'notAuthenticated',\n}\n\nexport type AuthStatus = EnumAsUnionOfKeys<typeof AuthStatuses>;\n\n/**\n * A user-visible, evidence-based session progress phase. The UI maps these to\n * friendly copy (for example “Checking your sign-in”), never SDK terminology.\n */\nexport type SneatAuthLoadingPhase =\n  | 'checking-session'\n  | 'getting-token'\n  | 'ready'\n  | 'failed';\n\nexport interface ISneatAuthUser extends UserInfo {\n  readonly isAnonymous: boolean;\n  readonly emailVerified: boolean;\n  readonly providerData: readonly UserInfo[];\n}\n\nexport interface ISneatAuthState {\n  readonly status: AuthStatus;\n  readonly loadingPhase?: SneatAuthLoadingPhase;\n  readonly token?: string | null;\n  readonly user?: ISneatAuthUser | null;\n  readonly err?: unknown;\n}\n\nexport interface ISneatEmailAuthResult {\n  readonly userID: string;\n  readonly token: string;\n}\n\nconst initialAuthStatus = AuthStatuses.authenticating;\nexport const initialSneatAuthState = {\n  status: initialAuthStatus,\n  loadingPhase: 'checking-session' as const,\n};\n\n// The host must provide this from its authenticated route/session boundary.\n// Keeping it out of the root injector is what allows public shells to render\n// before Firebase Auth and Firestore are downloaded.\n@Injectable()\nexport class SneatAuthStateService {\n  private readonly errorLogger = inject<IErrorLogger>(ErrorLogger);\n  private readonly analyticsService =\n    inject<IAnalyticsService>(AnalyticsService);\n  readonly fbAuth = inject(SNEAT_FIREBASE_AUTH);\n  private readonly operationBlocker = inject(SneatUrlOperationBlocker);\n\n  // Web OAuth sign-in strategy from the app's environment config (default popup).\n  private readonly signInMethod =\n    inject(EnvConfigToken, { optional: true })?.signInMethod ?? 'popup';\n\n  private readonly id = newRandomId({ len: 5 });\n\n  private readonly authStatus$ = new BehaviorSubject<AuthStatus>(\n    initialAuthStatus,\n  );\n  public readonly authStatus = this.authStatus$\n    .asObservable()\n    .pipe(distinctUntilChanged());\n\n  private readonly authUser$ = new BehaviorSubject<\n    ISneatAuthUser | null | undefined\n  >(undefined);\n  public readonly authUser = this.authUser$.asObservable();\n\n  private readonly authState$ = new BehaviorSubject<ISneatAuthState>(\n    initialSneatAuthState,\n  );\n  public readonly authState = this.authState$.asObservable().pipe(\n    // tap(v => console.log('SneatAuthStateService => SneatAuthState:', v)),\n    shareReplay(1),\n  );\n\n  private tokenGeneration = 0;\n  private tokenUserID?: string;\n\n  // private readonly fbAuth: Auth;\n\n  constructor() {\n    const errorLogger = this.errorLogger;\n    this.fbAuth.onIdTokenChanged({\n      next: (firebaseUser) => {\n        if (this.operationBlocker.isBlocked('auth')) {\n          return;\n        }\n        const tokenGeneration = ++this.tokenGeneration;\n        const status: AuthStatus = firebaseUser\n          ? AuthStatuses.authenticated\n          : AuthStatuses.notAuthenticated;\n        if (!firebaseUser) {\n          this.publishSignedOutState();\n          return;\n        }\n        const authUser = createSneatAuthUserFromFbUser(firebaseUser);\n        const current = this.authState$.value || {};\n        if (current.user?.uid !== authUser?.uid) {\n          this.analyticsService.identify(firebaseUser.uid);\n        }\n        this.authState$.next({\n          ...current,\n          status: AuthStatuses.authenticating,\n          loadingPhase: 'getting-token',\n          token: current.user?.uid === authUser?.uid ? current.token : null,\n          user: authUser,\n        });\n        firebaseUser\n          .getIdToken(false)\n          .then((token) => {\n            if (\n              tokenGeneration !== this.tokenGeneration ||\n              this.fbAuth.currentUser !== firebaseUser\n            ) {\n              return;\n            }\n            this.tokenUserID = firebaseUser.uid;\n            const authUser = createSneatAuthUserFromFbUser(firebaseUser);\n            const previousAuthUser = this.authUser$.value;\n            if (\n              previousAuthUser?.uid !== authUser?.uid ||\n              previousAuthUser?.isAnonymous !== authUser?.isAnonymous\n            ) {\n              this.authUser$.next(authUser);\n            }\n            const current = this.authState$.value || {};\n            this.authState$.next({\n              ...current,\n              status,\n              loadingPhase: 'ready',\n              token,\n              user: authUser,\n            });\n            this.authStatus$.next(status); // Should be after authState$\n          })\n          .catch((err) => {\n            if (\n              tokenGeneration !== this.tokenGeneration ||\n              this.fbAuth.currentUser !== firebaseUser\n            ) {\n              return;\n            }\n            const current = this.authState$.value || {};\n            this.authState$.next({\n              ...current,\n              loadingPhase: 'failed',\n              err: `fbUser.getIdToken() failed: ${err}`,\n            });\n            this.errorLogger.logError(err, 'Failed in fbUser.getIdToken()');\n          });\n      },\n      error: (err) => {\n        if (this.operationBlocker.isBlocked('auth')) {\n          return;\n        }\n        const current = this.authState$.value || {};\n        this.authState$.next({\n          ...current,\n          loadingPhase: 'failed',\n          err: `fbAuth.onIdTokenChanged() failed: ${err}`,\n        });\n        errorLogger.logError(err, 'failed in fbAuth.onIdTokenChanged');\n      },\n      complete: () => void 0,\n    });\n    this.fbAuth.onAuthStateChanged({\n      complete: () => void 0,\n      next: (fbUser) => {\n        if (this.operationBlocker.isBlocked('auth')) {\n          return;\n        }\n        // console.log(\n        //   `SneatAuthStateService => authStatus: ${this.authStatus$.value}; fbUser`,\n        //   fbUser,\n        // );\n        const authUser = createSneatAuthUserFromFbUser(fbUser);\n        if (!authUser) {\n          ++this.tokenGeneration;\n          this.publishSignedOutState();\n          return;\n        }\n        const status = AuthStatuses.authenticated;\n        this.authUser$.next(authUser);\n        this.authState$.next({\n          ...this.authState$.value,\n          token:\n            this.tokenUserID === authUser.uid\n              ? this.authState$.value.token\n              : null,\n          user: authUser,\n          status,\n          loadingPhase: 'ready',\n        });\n        this.authStatus$.next(status);\n      },\n      error: (err) => {\n        if (this.operationBlocker.isBlocked('auth')) {\n          return;\n        }\n        this.errorLogger.logError(\n          err,\n          'failed to retrieve Firebase auth user information',\n        );\n        const current = this.authState$.value || {};\n        this.authState$.next({\n          ...current,\n          loadingPhase: 'failed',\n          err: `fbAuth.onAuthStateChanged() failed: ${err}`,\n        });\n      },\n    });\n  }\n\n  private publishSignedOutState(): void {\n    clearCurrentSpace();\n    this.tokenUserID = undefined;\n    this.authUser$.next(null);\n    this.authState$.next({\n      ...this.authState$.value,\n      status: AuthStatuses.notAuthenticated,\n      loadingPhase: 'ready',\n      token: null,\n      user: null,\n    });\n    this.authStatus$.next(AuthStatuses.notAuthenticated);\n  }\n\n  public signOut(): Promise<void> {\n    clearCurrentSpace();\n    return this.fbAuth.signOut();\n  }\n\n  public signInWithToken(token: string): Promise<UserCredential> {\n    return signInWithCustomToken(this.fbAuth, token);\n  }\n\n  public signInWithEmailLink(email: string): Observable<UserCredential> {\n    return from(signInWithEmailLink(this.fbAuth, email));\n  }\n\n  public createUserWithEmailAndPassword(\n    email: string,\n    password: string,\n  ): Promise<ISneatEmailAuthResult> {\n    return this.toEmailAuthResult(\n      createUserWithEmailAndPassword(this.fbAuth, email, password),\n    );\n  }\n\n  public signInWithEmailAndPassword(\n    email: string,\n    password: string,\n  ): Promise<ISneatEmailAuthResult> {\n    return this.toEmailAuthResult(\n      signInWithEmailAndPassword(this.fbAuth, email, password),\n    );\n  }\n\n  private async toEmailAuthResult(\n    credential: Promise<UserCredential>,\n  ): Promise<ISneatEmailAuthResult> {\n    const { user } = await credential;\n    return {\n      userID: user.uid,\n      token: await user.getIdToken(),\n    };\n  }\n\n  private isSigningInWith?: AuthProviderName;\n\n  private async signInOnNativeLayer(\n    authProviderID: AuthProviderID,\n  ): Promise<UserCredential> {\n    let signInResult: SignInResult | undefined;\n\n    const o: SignInWithOAuthOptions = { skipNativeAuth: true };\n\n    switch (authProviderID) {\n      case 'google.com':\n        signInResult = await FirebaseAuthentication.signInWithGoogle(o);\n        break;\n      case 'apple.com':\n        signInResult = await FirebaseAuthentication.signInWithApple(o);\n        break;\n      case 'facebook.com':\n        signInResult = await FirebaseAuthentication.signInWithFacebook(o);\n        break;\n      case 'microsoft.com':\n        signInResult = await FirebaseAuthentication.signInWithMicrosoft(o);\n        break;\n      default:\n        return Promise.reject('unsupported auth provider: ' + authProviderID);\n    }\n    // console.log(\n    //   `SneatAuthStateService.signInWith(${authProviderID}) => signed in on native layer, authenticating in webview...`,\n    //   signInResult,\n    // );\n    // we need to authenticate on webview layer using the id token and nonce from signInResult\n    const userCredential = await this.authenticateOnWebviewLayer(\n      authProviderID,\n      signInResult,\n    );\n\n    return Promise.resolve(userCredential);\n  }\n\n  private async authenticateOnWebviewLayer(\n    authProviderID: AuthProviderID,\n    signInResult: SignInResult,\n  ): Promise<UserCredential> {\n    const oauthProvider = new OAuthProvider(authProviderID);\n    const credential = oauthProvider.credential({\n      idToken: signInResult.credential?.idToken,\n      accessToken: signInResult.credential?.accessToken,\n      rawNonce: signInResult.credential?.nonce,\n    });\n    const auth = getAuth();\n    const userCredential = await signInWithCredential(auth, credential);\n\n    // Get a valid Firebase ID token that has a 'kid' header\n    await userCredential.user.getIdToken();\n\n    return Promise.resolve(userCredential);\n  }\n\n  private async signInWithWebSDK(\n    authProviderID: AuthProviderID,\n  ): Promise<UserCredential | undefined> {\n    const authProvider = getAuthProvider(authProviderID);\n    if (this.signInMethod === 'redirect') {\n      // Full-page redirect; this navigates away and never resolves. The sign-in\n      // is completed on return by BaseAppComponent's getRedirectResult() call.\n      await signInWithRedirect(this.fbAuth, authProvider);\n      return undefined;\n    }\n    const userCredential = await signInWithPopup(this.fbAuth, authProvider);\n    return Promise.resolve(userCredential);\n  }\n\n  public async linkWith(\n    authProviderID: AuthProviderID,\n  ): Promise<UserCredential | undefined> {\n    const authProvider = getAuthProvider(authProviderID);\n    if (!this.fbAuth.currentUser) {\n      return Promise.reject('no current user');\n    }\n    const userCredential = await linkWithPopup(\n      this.fbAuth.currentUser,\n      authProvider,\n    );\n    return Promise.resolve(userCredential);\n  }\n\n  public async unlinkAuthProvider(authProviderID: string): Promise<void> {\n    const currentUser = this.fbAuth.currentUser;\n    if (currentUser) {\n      try {\n        const updatedUser = await unlink(currentUser, authProviderID);\n        const authUser = createSneatAuthUserFromFbUser(updatedUser);\n        this.authUser$.next(authUser);\n        return Promise.resolve();\n      } catch (error) {\n        return Promise.reject(\n          `Failed to unlink ${authProviderID} account:` + error,\n        );\n      }\n    } else {\n      return Promise.reject('No user is currently signed in.');\n    }\n  }\n\n  public async signInWith(\n    authProviderID: AuthProviderID,\n  ): Promise<UserCredential | undefined> {\n    // console.log(\n    //   `SneatAuthStateService.signInWith(${authProviderID}), isSigningInWith=${this.isSigningInWith}, location.protocol=${location.protocol}`,\n    // );\n    this.analyticsService.logEvent('signingInWith', {\n      provider: authProviderID,\n    });\n    try {\n      if (this.isSigningInWith) {\n        return Promise.reject(\n          new Error(\n            `a repeated call to SneatAuthStateService.signInWith(${authProviderID}) white previous sign in with ${this.isSigningInWith} is in progress`,\n          ),\n        );\n      }\n\n      let userCredential: UserCredential | undefined = undefined;\n\n      if (Capacitor.isNativePlatform()) {\n        userCredential = await this.signInOnNativeLayer(authProviderID);\n      } else {\n        userCredential = await this.signInWithWebSDK(authProviderID);\n      }\n\n      this.isSigningInWith = undefined;\n      this.analyticsService.logEvent('signedInWith', {\n        provider: authProviderID,\n      });\n      return Promise.resolve(userCredential);\n    } catch (e) {\n      this.isSigningInWith = undefined;\n      return Promise.reject(e);\n    }\n  }\n}\n\nexport type AuthProviderID =\n  | 'apple.com'\n  | 'google.com'\n  | 'microsoft.com'\n  | 'facebook.com'\n  | 'github.com'\n  | 'phone';\n\nexport type AuthProviderName =\n  | 'Google'\n  | 'Apple'\n  | 'Microsoft'\n  | 'Facebook'\n  | 'GitHub';\n\nfunction getAuthProvider(authProviderID: AuthProviderID): AuthProvider {\n  switch (authProviderID) {\n    case 'google.com':\n      return new GoogleAuthProvider();\n    case 'apple.com':\n      return new OAuthProvider('apple.com');\n    //\n    // https://developer.apple.com/documentation/sign_in_with_apple/incorporating-sign-in-with-apple-into-other-platforms\n    // (authProvider as OAuthProvider).setCustomParameters({\n    // \t// \t// Localize the Apple authentication screen in current app locale.\n    // \tlocale: 'en', // TODO: set locale\n    // });\n    case 'microsoft.com':\n      return new OAuthProvider('microsoft.com');\n    case 'facebook.com': {\n      const facebookAuthProvider = new FacebookAuthProvider();\n      facebookAuthProvider.addScope('email');\n      return facebookAuthProvider;\n    }\n    case 'github.com': {\n      const githubAuthProvider = new GithubAuthProvider();\n      githubAuthProvider.addScope('read:user');\n      githubAuthProvider.addScope('user:email');\n      return githubAuthProvider;\n    }\n    default:\n      throw new Error('unsupported auth provider: ' + authProviderID);\n  }\n}\n\nfunction createSneatAuthUserFromFbUser(\n  fbUser: User | null,\n): ISneatAuthUser | null {\n  return (\n    fbUser && {\n      isAnonymous: fbUser.isAnonymous,\n      emailVerified: fbUser.emailVerified,\n      email: fbUser.email,\n      uid: fbUser.uid,\n      displayName: fbUser.displayName,\n      phoneNumber: fbUser.phoneNumber,\n      photoURL: fbUser.photoURL,\n      providerId:\n        fbUser.providerData?.length === 1 && fbUser.providerData[0]\n          ? fbUser.providerData[0].providerId\n          : fbUser.providerId,\n      providerData: fbUser.providerData,\n    }\n  );\n}\n"]}

package/esm2022/lib/user/index.js

@@ -1,3 +1,4 @@
 export * from './user-record.service';
 export * from './sneat-user.service';
+export * from './sneat-account-readiness';
 //# sourceMappingURL=index.js.map

package/esm2022/lib/user/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../../../libs/auth/core/src/lib/user/index.ts"],"names":[],"mappings":"AAAA,cAAc,uBAAuB,CAAC;AACtC,cAAc,sBAAsB,CAAC","sourcesContent":["export * from './user-record.service';\nexport * from './sneat-user.service';\n"]}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../../../libs/auth/core/src/lib/user/index.ts"],"names":[],"mappings":"AAAA,cAAc,uBAAuB,CAAC;AACtC,cAAc,sBAAsB,CAAC;AACrC,cAAc,2BAA2B,CAAC","sourcesContent":["export * from './user-record.service';\nexport * from './sneat-user.service';\nexport * from './sneat-account-readiness';\n"]}

package/esm2022/lib/user/sneat-account-readiness.js

@@ -0,0 +1,21 @@
+/**
+ * Returns true only when the current permanent Firebase identity has a usable
+ * token and its matching persisted Sneat user record is ready.
+ */
+export function isSneatAccountReady(authState, userState) {
+    const authUser = authState?.user;
+    const user = userState?.user;
+    const uid = authUser?.uid;
+    return (authState?.status === 'authenticated' &&
+        authState.loadingPhase === 'ready' &&
+        typeof authState.token === 'string' &&
+        authState.token.trim().length > 0 &&
+        !!uid?.trim() &&
+        authUser?.isAnonymous === false &&
+        userState?.status === 'authenticated' &&
+        user?.uid === uid &&
+        user?.isAnonymous === false &&
+        userState.userRecordStatus === 'ready' &&
+        !!userState.record);
+}
+//# sourceMappingURL=sneat-account-readiness.js.map

package/esm2022/lib/user/sneat-account-readiness.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sneat-account-readiness.js","sourceRoot":"","sources":["../../../../../../../libs/auth/core/src/lib/user/sneat-account-readiness.ts"],"names":[],"mappings":"AAGA;;;GAGG;AACH,MAAM,UAAU,mBAAmB,CACjC,SAA6C,EAC7C,SAA6C;IAE7C,MAAM,QAAQ,GAAG,SAAS,EAAE,IAAI,CAAC;IACjC,MAAM,IAAI,GAAG,SAAS,EAAE,IAAI,CAAC;IAC7B,MAAM,GAAG,GAAG,QAAQ,EAAE,GAAG,CAAC;IAC1B,OAAO,CACL,SAAS,EAAE,MAAM,KAAK,eAAe;QACrC,SAAS,CAAC,YAAY,KAAK,OAAO;QAClC,OAAO,SAAS,CAAC,KAAK,KAAK,QAAQ;QACnC,SAAS,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC;QACjC,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE;QACb,QAAQ,EAAE,WAAW,KAAK,KAAK;QAC/B,SAAS,EAAE,MAAM,KAAK,eAAe;QACrC,IAAI,EAAE,GAAG,KAAK,GAAG;QACjB,IAAI,EAAE,WAAW,KAAK,KAAK;QAC3B,SAAS,CAAC,gBAAgB,KAAK,OAAO;QACtC,CAAC,CAAC,SAAS,CAAC,MAAM,CACnB,CAAC;AACJ,CAAC","sourcesContent":["import { ISneatAuthState } from '../sneat-auth-state-service';\nimport { ISneatUserState } from './sneat-user.service';\n\n/**\n * Returns true only when the current permanent Firebase identity has a usable\n * token and its matching persisted Sneat user record is ready.\n */\nexport function isSneatAccountReady(\n  authState: ISneatAuthState | null | undefined,\n  userState: ISneatUserState | null | undefined,\n): boolean {\n  const authUser = authState?.user;\n  const user = userState?.user;\n  const uid = authUser?.uid;\n  return (\n    authState?.status === 'authenticated' &&\n    authState.loadingPhase === 'ready' &&\n    typeof authState.token === 'string' &&\n    authState.token.trim().length > 0 &&\n    !!uid?.trim() &&\n    authUser?.isAnonymous === false &&\n    userState?.status === 'authenticated' &&\n    user?.uid === uid &&\n    user?.isAnonymous === false &&\n    userState.userRecordStatus === 'ready' &&\n    !!userState.record\n  );\n}\n"]}

package/esm2022/lib/user/sneat-user.service.js

@@ -4,17 +4,17 @@ import {
 Firestore as AngularFirestore, collection, doc, onSnapshot, } from 'firebase/firestore';
 import { SneatApiService } from '@sneat/api';
 import { ErrorLogger, SneatUrlOperationBlocker, } from '@sneat/core';
-import { initialSneatAuthState, SneatAuthStateService, } from '../sneat-auth-state-service';
+import { initialSneatAuthState, AuthStatuses, SneatAuthStateService, } from '../sneat-auth-state-service';
 import { BehaviorSubject, Observable, ReplaySubject } from 'rxjs';
 import { UserRecordService, } from './user-record.service';
 import * as i0 from "@angular/core";
 const UsersCollection = 'users';
 export class SneatUserService {
-    unsubscribeFromUserDoc(_from) {
+    unsubscribeFromUserDoc() {
+        clearTimeout(this.watchTimer);
+        this.watchTimer = undefined;
+        this.watchGeneration++;
         if (this._unsubscribeFromUserDoc) {
-            // console.log(
-            //   'SneatUserService.unsubscribeFromUserDoc() called from ' + _from,
-            // );
             this._unsubscribeFromUserDoc();
             this._unsubscribeFromUserDoc = undefined;
         }
@@ -27,6 +27,9 @@ export class SneatUserService {
         // private userDocSubscription?: Subscription;
         this.injector = inject(Injector);
         this.userDocRef = (uid) => runInInjectionContext(this.injector, () => doc(this.userCollection, uid));
+        this.watchGeneration = 0;
+        this.accountGeneration = 0;
+        this.initOperationID = 0;
         this.userChanged$ = new ReplaySubject(1);
         this.userChanged = this.userChanged$.asObservable();
         this.userState$ = new BehaviorSubject(initialSneatAuthState);
@@ -34,7 +37,12 @@ export class SneatUserService {
         this.onAuthStateChanged = (authState) => {
             // console.log('SneatUserService => authState changed:', authState);
             if (authState.user) {
-                this.onUserSignedIn(authState);
+                if (this.isReadyForUserRecord(authState)) {
+                    this.onUserSignedIn(authState);
+                }
+                else {
+                    this.onAuthStatePending(authState);
+                }
             }
             else {
                 this.userState$.next(authState);
@@ -87,10 +95,28 @@ export class SneatUserService {
         if (authUser?.email && authUser.emailVerified) {
             this.$userTitle = authUser.email;
         }
+        this.pendingUID = undefined;
         if (this.uid === authUser?.uid) {
+            this.currentAuthState = authState;
+            this.pendingAuthState = undefined;
+            const current = this.userState$.value;
+            if (current.user?.isAnonymous !== authUser?.isAnonymous) {
+                this.userState$.next({
+                    ...authState,
+                    record: current.record,
+                    userRecordStatus: current.userRecordStatus,
+                });
+            }
+            const deferredSnapshot = this.deferredMissingUserDocSnapshot;
+            this.deferredMissingUserDocSnapshot = undefined;
+            if (deferredSnapshot) {
+                this.userDocChanged(deferredSnapshot, authState, this.watchGeneration);
+            }
             return;
         }
-        this.unsubscribeFromUserDoc('onUserSignedIn()');
+        this.pendingAuthState = undefined;
+        this.deferredMissingUserDocSnapshot = undefined;
+        this.unsubscribeFromUserDoc();
         if (!authUser) {
             if (this.userState$.value?.record !== null) {
                 this.userState$.next({ ...this.userState$.value });
@@ -98,9 +124,13 @@ export class SneatUserService {
             return;
         }
         const { uid } = authUser;
+        this.currentAuthState = authState;
+        this.accountGeneration++;
+        this.initAcknowledged = undefined;
         this.uid = uid;
         this.userState$.next({
             ...authState,
+            userRecordStatus: 'loading',
         });
         this.userChanged$.next(uid);
         this.watchUserRecord(uid, authState);
@@ -109,38 +139,107 @@ export class SneatUserService {
         // console.log(
         //   `SneatUserService.watchUserRecord(uid=${uid}): Loading user record...`,
         // );
-        this.unsubscribeFromUserDoc('whatUserRecord()');
+        this.unsubscribeFromUserDoc();
+        const generation = this.watchGeneration;
         if (this.operationBlocker.isBlocked('server-requests')) {
+            this.setUserRecordStatus(uid, authState, 'failed');
             return;
         }
         // TODO: Remove - setTimeout() not needed but trying to troubleshoot user record issue
-        setTimeout(() => {
+        this.watchTimer = setTimeout(() => {
+            this.watchTimer = undefined;
+            if (!this.isCurrentIdentity(uid, authState, generation))
+                return;
             if (this.operationBlocker.isBlocked('server-requests')) {
+                this.setUserRecordStatus(uid, authState, 'failed');
                 return;
             }
             try {
                 const userDocRef = this.userDocRef(uid);
-                this._unsubscribeFromUserDoc = runInInjectionContext(this.injector, () => onSnapshot(userDocRef, {
+                const unsubscribe = runInInjectionContext(this.injector, () => onSnapshot(userDocRef, {
                     next: (userDocSnapshot) => {
+                        const currentAuthState = this.currentAuthState;
+                        if (!currentAuthState ||
+                            !this.isCurrentIdentity(uid, currentAuthState, generation))
+                            return;
                         // console.log(
                         //   `SneatUserService.watchUserRecord(uid=${uid}) => userDocSnapshot:`,
                         //   userDocSnapshot,
                         // );
-                        this.onAuthStateChanged(authState);
-                        this.userDocChanged(userDocSnapshot, authState);
+                        this.userDocChanged(userDocSnapshot, currentAuthState, generation);
                     },
                     error: (err) => {
-                        console.error(`SneatUserService.watchUserRecord(uid=${uid}) => failed:`, err);
+                        const currentAuthState = this.currentAuthState;
+                        if (!currentAuthState ||
+                            !this.isCurrentIdentity(uid, currentAuthState, generation))
+                            return;
+                        this.deferredMissingUserDocSnapshot = undefined;
+                        this.setUserRecordStatus(uid, currentAuthState, 'failed');
+                        this.unsubscribeFromUserDoc();
+                        this.errorLogger.logError(err, 'Failed to read user record');
                     },
                 }));
+                if (this.watchGeneration === generation) {
+                    this._unsubscribeFromUserDoc = unsubscribe;
+                }
+                else {
+                    unsubscribe();
+                }
             }
             catch (err) {
-                console.error(`SneatUserService.watchUserRecord(uid=${uid}) => Failed to setup watcher for user record::`, err);
+                const currentAuthState = this.currentAuthState;
+                if (currentAuthState &&
+                    this.isCurrentIdentity(uid, currentAuthState, generation)) {
+                    this.deferredMissingUserDocSnapshot = undefined;
+                    this.setUserRecordStatus(uid, currentAuthState, 'failed');
+                    this.errorLogger.logError(err, 'Failed to watch user record');
+                }
                 return;
             }
         }, 100);
     }
-    userDocChanged(userDocSnapshot, authState) {
+    isReadyForUserRecord(authState) {
+        if (authState.status !== AuthStatuses.authenticated)
+            return false;
+        // Older callers that provide the original minimal auth-state shape remain
+        // supported. SneatAuthStateService always includes loadingPhase and token.
+        return authState.loadingPhase === undefined ||
+            (authState.loadingPhase === 'ready' && !!authState.token);
+    }
+    onAuthStatePending(authState) {
+        const uid = authState.user?.uid;
+        if (!uid)
+            return;
+        // A token refresh for the account already owning this watcher must not
+        // replace its stable authenticated identity with a transient auth state.
+        if (this.uid === uid && this.currentAuthState?.status === AuthStatuses.authenticated) {
+            this.pendingAuthState = authState;
+            return;
+        }
+        // A different identity is visible before its token is ready. Retire the
+        // previous account immediately, but do not assign this UID or start a
+        // watcher until the auth service publishes the matching ready token.
+        if (this.pendingUID !== uid || this.uid) {
+            this.accountGeneration++;
+            this.initAcknowledged = undefined;
+            this.activeInit = undefined;
+            this.pendingAuthState = undefined;
+            this.deferredMissingUserDocSnapshot = undefined;
+            const hadCurrentUID = !!this.uid;
+            this.uid = undefined;
+            this.currentAuthState = undefined;
+            this.pendingUID = uid;
+            this.unsubscribeFromUserDoc();
+            if (hadCurrentUID)
+                this.userChanged$.next(undefined);
+        }
+        this.userState$.next({
+            ...authState,
+            record: undefined,
+            userRecordStatus: 'loading',
+        });
+    }
+    userDocChanged(userDocSnapshot, authState, generation) {
         // console.log(
         //   'SneatUserService.userDocChanged() => userDocSnapshot.exists:',
         //   userDocSnapshot.exists(),
@@ -149,26 +248,64 @@ export class SneatUserService {
         //   'userDocSnapshot:',
         //   userDocSnapshot,
         // );
-        if (userDocSnapshot.ref.id !== this.uid) {
+        if (!this.isCurrentIdentity(authState.user?.uid ?? '', authState, generation) ||
+            userDocSnapshot.ref.id !== this.uid) {
             console.error('userDocSnapshot.ref.id !== this.uid - Should always be equal as we unsubscribe if uid changes');
             return;
         }
         // console.log('SneatUserService => userDocSnapshot.exists:', userDocSnapshot.exists)
         const authUser = authState.user;
-        if (authUser && !userDocSnapshot.exists()) {
-            this.initUserRecordFromAuthUser(authUser);
+        const recordExists = userDocSnapshot.exists();
+        const initAcknowledged = this.initAcknowledged;
+        if (recordExists &&
+            authUser?.uid === initAcknowledged?.uid &&
+            this.accountGeneration === initAcknowledged?.accountGeneration) {
+            this.initAcknowledged = undefined;
         }
-        const userRecord = userDocSnapshot.exists()
+        const userRecord = recordExists
             ? userDocSnapshot.data()
             : authUser
                 ? { title: authUser.displayName || authUser.email || authUser.uid }
                 : null;
+        if (recordExists) {
+            this.deferredMissingUserDocSnapshot = undefined;
+        }
+        else if (this.pendingAuthState?.user?.uid === authUser?.uid) {
+            this.deferredMissingUserDocSnapshot = userDocSnapshot;
+        }
+        else {
+            this.deferredMissingUserDocSnapshot = undefined;
+        }
+        const current = this.userState$.value;
         this.userState$.next({
             ...authState,
             record: userRecord,
+            userRecordStatus: recordExists
+                ? 'ready'
+                : current.userRecordStatus === 'failed'
+                    ? 'failed'
+                    : 'loading',
         });
+        if (authUser &&
+            !recordExists &&
+            current.userRecordStatus !== 'failed' &&
+            !this.pendingAuthState &&
+            !(this.initAcknowledged?.uid === authUser.uid &&
+                this.initAcknowledged.accountGeneration === this.accountGeneration)) {
+            this.initUserRecordFromAuthUser(authUser);
+        }
     }
     initUserRecordFromAuthUser(authUser) {
+        const uid = authUser.uid;
+        const accountGeneration = this.accountGeneration;
+        if (!uid || !this.isCurrentAuthIdentity(uid, authUser, accountGeneration))
+            return;
+        if (this.activeInit?.uid === uid &&
+            this.activeInit.accountGeneration === accountGeneration) {
+            return;
+        }
+        const operation = { uid, accountGeneration, id: ++this.initOperationID };
+        this.activeInit = operation;
         let request = {
             email: authUser.email || undefined,
             emailIsVerified: authUser.emailVerified,
@@ -178,15 +315,71 @@ export class SneatUserService {
             request = { ...request, names: { fullName: authUser.displayName } };
         }
         this.userRecordService.initUserRecord(request).subscribe({
-            next: (_userDto) => {
-                // User record created successfully - no additional action needed
+            next: () => {
+                if (this.activeInit === operation)
+                    this.activeInit = undefined;
+                if (!this.isCurrentAuthIdentity(uid, authUser, accountGeneration) ||
+                    this.userState$.value.userRecordStatus === 'ready')
+                    return;
+                this.initAcknowledged = { uid, accountGeneration };
+                // API acknowledgement is not readiness. Wait for the persisted snapshot.
+            },
+            error: (error) => {
+                if (this.activeInit === operation)
+                    this.activeInit = undefined;
+                if (!this.isCurrentAuthIdentity(uid, authUser, accountGeneration) ||
+                    this.userState$.value.userRecordStatus === 'ready')
+                    return;
+                this.setUserRecordStatus(uid, { status: 'authenticated', user: authUser }, 'failed');
+                this.errorLogger.logError(error, 'Failed to initialize user record');
             },
-            error: this.errorLogger.logErrorHandler('failed to create user record'),
         });
     }
+    /** Retry record watch and initialization after a failed first-load attempt. */
+    retryUserRecordInitialization() {
+        const current = this.userState$.value;
+        const uid = this.uid;
+        if (!uid ||
+            current.status !== 'authenticated' ||
+            current.user?.uid !== uid ||
+            current.userRecordStatus !== 'failed') {
+            return;
+        }
+        this.userState$.next({ ...current, userRecordStatus: 'loading' });
+        this.watchUserRecord(uid, current);
+    }
+    isCurrentIdentity(uid, authState, generation) {
+        return (!!uid &&
+            this.uid === uid &&
+            this.watchGeneration === generation &&
+            authState.status === 'authenticated' &&
+            authState.user?.uid === uid &&
+            this.userState$.value.user?.uid === uid);
+    }
+    isCurrentAuthIdentity(uid, authUser, accountGeneration) {
+        return (uid === this.uid &&
+            accountGeneration === this.accountGeneration &&
+            this.userState$.value.status === 'authenticated' &&
+            this.userState$.value.user?.uid === uid &&
+            authUser.uid === uid);
+    }
+    setUserRecordStatus(uid, authState, userRecordStatus) {
+        if (uid !== this.uid ||
+            authState.user?.uid !== uid ||
+            this.userState$.value.user?.uid !== uid) {
+            return;
+        }
+        this.userState$.next({ ...this.userState$.value, userRecordStatus });
+    }
     onUserSignedOut() {
+        this.accountGeneration++;
+        this.initAcknowledged = undefined;
         this.uid = undefined;
-        this.unsubscribeFromUserDoc('onUserSignedOut()');
+        this.pendingUID = undefined;
+        this.currentAuthState = undefined;
+        this.pendingAuthState = undefined;
+        this.deferredMissingUserDocSnapshot = undefined;
+        this.unsubscribeFromUserDoc();
     }
     static { this.ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "22.1.3", ngImport: i0, type: SneatUserService, deps: [], target: i0.ɵɵFactoryTarget.Injectable }); }
     static { this.ɵprov = i0.ɵɵngDeclareInjectable({ minVersion: "12.0.0", version: "22.1.3", ngImport: i0, type: SneatUserService, providedIn: 'root' }); }