@snokam/auth 2.2.22 → 2.3.0

package/lib/middleware.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"middleware.js","mappings":"CAAA,SAA2CA,EAAMC,GAC1B,iBAAZC,SAA0C,iBAAXC,OACxCA,OAAOD,QAAUD,IACQ,mBAAXG,QAAyBA,OAAOC,IAC9CD,OAAO,GAAIH,GACe,iBAAZC,QACdA,QAAgB,OAAID,IAEpBD,EAAa,OAAIC,GAClB,CATD,CASGK,MAAM,I,mBCRT,IAAIC,EAAsB,CCA1BA,EAAwB,CAACL,EAASM,KACjC,IAAI,IAAIC,KAAOD,EACXD,EAAoBG,EAAEF,EAAYC,KAASF,EAAoBG,EAAER,EAASO,IAC5EE,OAAOC,eAAeV,EAASO,EAAK,CAAEI,YAAY,EAAMC,IAAKN,EAAWC,IAE1E,ECNDF,EAAwB,CAACQ,EAAKC,IAAUL,OAAOM,UAAUC,eAAeC,KAAKJ,EAAKC,GCClFT,EAAyBL,IACH,oBAAXkB,QAA0BA,OAAOC,aAC1CV,OAAOC,eAAeV,EAASkB,OAAOC,YAAa,CAAEC,MAAO,WAE7DX,OAAOC,eAAeV,EAAS,aAAc,CAAEoB,OAAO,GAAO,G,0ECL9D,MAAM,EAA+BC,QAAQ,kBCAvC,EAA+BA,QAAQ,wBCA7C,IAAIC,EAAkC,SAAUC,EAAGC,GAC/C,IAAIC,EAAI,CAAC,EACT,IAAK,IAAIC,KAAKH,EAAOd,OAAOM,UAAUC,eAAeC,KAAKM,EAAGG,IAAMF,EAAEG,QAAQD,GAAK,IAC9ED,EAAEC,GAAKH,EAAEG,IACb,GAAS,MAALH,GAAqD,mBAAjCd,OAAOmB,sBACtB,KAAIC,EAAI,EAAb,IAAgBH,EAAIjB,OAAOmB,sBAAsBL,GAAIM,EAAIH,EAAEI,OAAQD,IAC3DL,EAAEG,QAAQD,EAAEG,IAAM,GAAKpB,OAAOM,UAAUgB,qBAAqBd,KAAKM,EAAGG,EAAEG,MACvEJ,EAAEC,EAAEG,IAAMN,EAAEG,EAAEG,IAF4B,CAItD,OAAOJ,CACX,EAKA,MAAMO,EAAiB,CACnB,+EAEG,SAASC,EAAoBC,EAAK,CAAC,GACtC,IAAIC,GACA,QAAEC,EAAU,GAAE,UAAEC,EAAY,CAAC,EAAC,iBAAEC,GAAqBJ,EAAIK,EAAOjB,EAAOY,EAAI,CAAC,UAAW,YAAa,qBACxG,MAAMM,EAAmD,YAAvCC,QAAQC,IAAIC,wBACxB,KAAEC,GCtBL,SAAkCC,GACrC,MAAM,SAAEC,EAAQ,SAAEC,GAAa,IAAIC,IAAIH,GACjCI,EAAsB,WAAbF,EACTG,EAASD,EAAS,YAAc,IAkBhC,IAAEE,EAAG,OAAEC,GAjBW,MACpB,GAAiB,cAAbN,GAA4B,WAAWO,KAAKP,GAC5C,MAAO,CAAEK,IAAK,SAElB,GAAIL,EAASQ,SAAS,mBAClB,MAAO,CAAEH,IAAK,OAAQC,OAAQ,mBAElC,GAAIN,EAASQ,SAAS,cAClB,MAAO,CAAEH,IAAK,OAAQC,OAAQ,cAElC,MAAMG,EAAQT,EAASU,MAAM,KAC7B,GAAID,EAAMzB,QAAU,EAAG,CACnB,MAAM2B,EAAOF,EAAMG,OAAO,GAAGC,KAAK,KAClC,MAAO,CAAER,IAAKM,EAAKG,QAAQ,MAAO,KAAMR,OAAQ,IAAIK,IACxD,CACA,MAAO,CAAEN,IAAK,OAAQ,EAEFU,GAExB,MAAO,CAAEjB,KADI,GAAGM,cAAmBC,kBACpBC,SAAQH,SAC3B,CDFqBa,CAAyB,GAAGrB,QAAQC,IAAIqB,gBAyDzD,MAAO,CAAEC,YAhBU,IAAAC,WAAUC,IAAD,GAAezD,OAAO0D,OAAO,CAAEC,MAAO,CAC1DC,OAAQ,eACTC,QAAS,CACRC,aAAc,CACV3B,SAELP,UAAW,CACVmC,WAA4C,QAA/BrC,EAAKE,EAAUmC,kBAA+B,IAAPrC,EAAgBA,EAAK,EAAIsC,MAAKC,YAC9E,UAhDeC,EAgDUF,EAAIG,QAAQD,UA9ChCE,WAAW,kBAIpBF,EAASE,WAAW,gBAGpBrC,GAAcF,GAA2F,KAAtEF,aAAyC,EAASA,EAAQN,SAG1FM,EAAQ0C,MAAMC,IACjB,IAAKA,EACD,OAAO,EAGX,GAAIA,EAAQF,WAAW,MAAQE,EAAQzB,SAAS,KAAM,CAClD,MAAM0B,EAAeD,EAAQE,UAAU,GACvC,IAAIC,EAAeF,EAKnB,OAJIA,EAAaH,WAAW,UAAYG,EAAaH,WAAW,OAC5DK,EAAe,IAAMF,GAEX,IAAIG,OAAOD,GACZ7B,KAAKsB,EACtB,CAEA,GAAII,EAAQzB,SAAS,UAAW,CAC5B,MAAMG,EAAOsB,EAAQnB,QAAQ,aAAc,IAC3C,OAAOe,EAASE,WAAWpB,EAC/B,CACA,IACI,OAAmD,KAA5C,IAAA2B,OAAML,EAAS,CAAEM,KAAK,GAAtB,CAA8BV,EACzC,CACA,MAAOW,GAEH,OADAC,QAAQC,KAAK,4CAA4CF,MAClD,CACX,QAWuDZ,GAhDrC,IAACC,CAiDlB,IACApC,IAMYkD,OALNjD,EACT,CAAEJ,QAASJ,IACVI,aAAyC,EAASA,EAAQN,QAAU,EACjE,CAAEM,gBACFsD,EAEd,CAEA,MAAM,WAAE1B,EAAU,OAAEyB,GAAWxD,IAE/B,I","sources":["webpack://snokam/webpack/universalModuleDefinition","webpack://snokam/webpack/bootstrap","webpack://snokam/webpack/runtime/define property getters","webpack://snokam/webpack/runtime/hasOwnProperty shorthand","webpack://snokam/webpack/runtime/make namespace object","webpack://snokam/external commonjs \"path-to-regexp\"","webpack://snokam/external commonjs \"next-auth/middleware\"","webpack://snokam/./src/middleware.tsx","webpack://snokam/./src/utils/cookies.ts"],"sourcesContent":["(function webpackUniversalModuleDefinition(root, factory) {\n\tif(typeof exports === 'object' && typeof module === 'object')\n\t\tmodule.exports = factory();\n\telse if(typeof define === 'function' && define.amd)\n\t\tdefine([], factory);\n\telse if(typeof exports === 'object')\n\t\texports[\"snokam\"] = factory();\n\telse\n\t\troot[\"snokam\"] = factory();\n})(this, () => {\nreturn ","// The require scope\nvar __webpack_require__ = {};\n\n","// define getter functions for harmony exports\n__webpack_require__.d = (exports, definition) => {\n\tfor(var key in definition) {\n\t\tif(__webpack_require__.o(definition, key) && !__webpack_require__.o(exports, key)) {\n\t\t\tObject.defineProperty(exports, key, { enumerable: true, get: definition[key] });\n\t\t}\n\t}\n};","__webpack_require__.o = (obj, prop) => (Object.prototype.hasOwnProperty.call(obj, prop))","// define __esModule on exports\n__webpack_require__.r = (exports) => {\n\tif(typeof Symbol !== 'undefined' && Symbol.toStringTag) {\n\t\tObject.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });\n\t}\n\tObject.defineProperty(exports, '__esModule', { value: true });\n};","const __WEBPACK_NAMESPACE_OBJECT__ = require(\"path-to-regexp\");","const __WEBPACK_NAMESPACE_OBJECT__ = require(\"next-auth/middleware\");","var __rest = (this && this.__rest) || function (s, e) {\n    var t = {};\n    for (var p in s) if (Object.prototype.hasOwnProperty.call(s, p) && e.indexOf(p) < 0)\n        t[p] = s[p];\n    if (s != null && typeof Object.getOwnPropertySymbols === \"function\")\n        for (var i = 0, p = Object.getOwnPropertySymbols(s); i < p.length; i++) {\n            if (e.indexOf(p[i]) < 0 && Object.prototype.propertyIsEnumerable.call(s, p[i]))\n                t[p[i]] = s[p[i]];\n        }\n    return t;\n};\nimport { match } from \"path-to-regexp\";\nimport { withAuth } from \"next-auth/middleware\";\nimport { getSessionCookieSettings } from \"./utils/cookies\";\n// Default catch-all matcher used in Vercel preview environments\nconst previewMatcher = [\n    \"/((?!api/healthy|api/ready|_next/static|_next/image|favicon.ico|.*\\\\..*).*)\",\n];\nexport function buildAuthMiddleware(_a = {}) {\n    var _b;\n    var { matcher = [], callbacks = {}, protectAllRoutes } = _a, rest = __rest(_a, [\"matcher\", \"callbacks\", \"protectAllRoutes\"]);\n    const isPreview = process.env.NEXT_PUBLIC_VERCEL_ENV === \"preview\";\n    const { name } = getSessionCookieSettings(`${process.env.NEXTAUTH_URL}`);\n    const shouldProtectPath = (pathname) => {\n        // Container health check paths\n        if (pathname.startsWith(\"/api/healthy\")) {\n            return false;\n        }\n        // Container readiness check paths\n        if (pathname.startsWith(\"/api/ready\")) {\n            return false;\n        }\n        if (isPreview || (protectAllRoutes && (matcher === null || matcher === void 0 ? void 0 : matcher.length) === 0)) {\n            return true;\n        }\n        return matcher.some((pattern) => {\n            if (!pattern) {\n                return false;\n            }\n            // Fix to handle Nextjs regex patterns\n            if (pattern.startsWith(\"/\") && pattern.endsWith(\")\")) {\n                const cleanPattern = pattern.substring(1);\n                let fixedPattern = cleanPattern;\n                if (cleanPattern.startsWith(\"((?!\") && !cleanPattern.startsWith(\"^\")) {\n                    fixedPattern = \"^\" + cleanPattern;\n                }\n                const regex = new RegExp(fixedPattern);\n                return regex.test(pathname);\n            }\n            // Handle simple path patterns with :path*\n            if (pattern.endsWith(\":path*\")) {\n                const base = pattern.replace(/\\/:path\\*$/, \"\");\n                return pathname.startsWith(base);\n            }\n            try {\n                return match(pattern, { end: true })(pathname) !== false;\n            }\n            catch (error) {\n                console.warn(`Invalid path pattern in auth middleware: ${error}`);\n                return false;\n            }\n        });\n    };\n    const middleware = withAuth((_req) => { }, Object.assign({ pages: {\n            signIn: \"/auth/login\",\n        }, cookies: {\n            sessionToken: {\n                name,\n            },\n        }, callbacks: {\n            authorized: (_b = callbacks.authorized) !== null && _b !== void 0 ? _b : (({ req, token }) => {\n                return shouldProtectPath(req.nextUrl.pathname) ? !!token : true;\n            }),\n        } }, rest));\n    const config = isPreview\n        ? { matcher: previewMatcher }\n        : (matcher === null || matcher === void 0 ? void 0 : matcher.length) > 0\n            ? { matcher }\n            : undefined;\n    return { middleware, config };\n}\n// Default: protect all HTML pages in preview, do nothing in production\nconst { middleware, config } = buildAuthMiddleware();\nexport { config };\nexport default middleware;\n","export function getSessionCookieSettings(nextAuthUrl) {\n    const { hostname, protocol } = new URL(nextAuthUrl);\n    const secure = protocol === \"https:\";\n    const prefix = secure ? \"__Secure-\" : \"\";\n    const getTagAndDomain = () => {\n        if (hostname === \"localhost\" || /^[\\d.]+$/.test(hostname)) {\n            return { tag: \"local\" };\n        }\n        if (hostname.endsWith(\".test.snokam.no\")) {\n            return { tag: \"test\", domain: \".test.snokam.no\" };\n        }\n        if (hostname.endsWith(\".snokam.no\")) {\n            return { tag: \"prod\", domain: \".snokam.no\" };\n        }\n        const parts = hostname.split(\".\");\n        if (parts.length >= 2) {\n            const base = parts.slice(-2).join(\".\");\n            return { tag: base.replace(/\\./g, \"-\"), domain: `.${base}` };\n        }\n        return { tag: \"host\" };\n    };\n    const { tag, domain } = getTagAndDomain();\n    const name = `${prefix}next-auth.${tag}.session-token`;\n    return { name, domain, secure };\n}\n"],"names":["root","factory","exports","module","define","amd","this","__webpack_require__","definition","key","o","Object","defineProperty","enumerable","get","obj","prop","prototype","hasOwnProperty","call","Symbol","toStringTag","value","require","__rest","s","e","t","p","indexOf","getOwnPropertySymbols","i","length","propertyIsEnumerable","previewMatcher","buildAuthMiddleware","_a","_b","matcher","callbacks","protectAllRoutes","rest","isPreview","process","env","NEXT_PUBLIC_VERCEL_ENV","name","nextAuthUrl","hostname","protocol","URL","secure","prefix","tag","domain","test","endsWith","parts","split","base","slice","join","replace","getTagAndDomain","getSessionCookieSettings","NEXTAUTH_URL","middleware","withAuth","_req","assign","pages","signIn","cookies","sessionToken","authorized","req","token","pathname","nextUrl","startsWith","some","pattern","cleanPattern","substring","fixedPattern","RegExp","match","end","error","console","warn","config","undefined"],"sourceRoot":""}

package/lib/options.d.ts

@@ -1,5 +0,0 @@
-import { NextAuthOptions } from "next-auth";
-import { Auth } from "./utils/types";
-export declare const getNextAuthOptions: (config: Auth.Config) => NextAuthOptions;
-declare const _default: (config: Auth.Config) => any;
-export default _default;

package/lib/options.js

@@ -1,2 +0,0 @@
-!function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define([],t):"object"==typeof exports?exports.snokam=t():e.snokam=t()}(this,(()=>(()=>{"use strict";var e={542:e=>{e.exports=require("next-auth")},672:e=>{e.exports=require("@azure/msal-node")}},t={};function n(o){var r=t[o];if(void 0!==r)return r.exports;var s=t[o]={exports:{}};return e[o](s,s.exports,n),s.exports}n.n=e=>{var t=e&&e.__esModule?()=>e.default:()=>e;return n.d(t,{a:t}),t},n.d=(e,t)=>{for(var o in t)n.o(t,o)&&!n.o(e,o)&&Object.defineProperty(e,o,{enumerable:!0,get:t[o]})},n.o=(e,t)=>Object.prototype.hasOwnProperty.call(e,t),n.r=e=>{"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})};var o={};n.r(o),n.d(o,{default:()=>p,getNextAuthOptions:()=>l});var r=n(542),s=n.n(r);const i=require("next-auth/providers/azure-ad");var a=n.n(i);const c=()=>{const e="undefined"!=typeof window,t=e&&window.location.hostname.includes("test."),n={scope:"openid profile email offline_access https://graph.microsoft.com/User.Read"};return e&&(n.domain_hint=t?"test.snokam.no":"snokam.no"),n};var u=n(672),d=function(e,t,n,o){return new(n||(n=Promise))((function(r,s){function i(e){try{c(o.next(e))}catch(e){s(e)}}function a(e){try{c(o.throw(e))}catch(e){s(e)}}function c(e){var t;e.done?r(e.value):(t=e.value,t instanceof n?t:new n((function(e){e(t)}))).then(i,a)}c((o=o.apply(e,t||[])).next())}))};const l=e=>{const{name:t,domain:n,secure:o}=function(e){const{hostname:t,protocol:n}=new URL(e),o="https:"===n,r=o?"__Secure-":"",{tag:s,domain:i}=(()=>{if("localhost"===t||/^[\d.]+$/.test(t))return{tag:"local"};if(t.endsWith(".test.snokam.no"))return{tag:"test",domain:".test.snokam.no"};if(t.endsWith(".snokam.no"))return{tag:"prod",domain:".snokam.no"};const e=t.split(".");if(e.length>=2){const t=e.slice(-2).join(".");return{tag:t.replace(/\./g,"-"),domain:`.${t}`}}return{tag:"host"}})();return{name:`${r}next-auth.${s}.session-token`,domain:i,secure:o}}(process.env.NEXTAUTH_URL);return{secret:e.nextAuthSecret,pages:{signIn:"/auth/login"},providers:[a()({clientId:e.clientId,clientSecret:e.clientSecret,tenantId:e.tenantId,authorization:{params:c()}})],cookies:{sessionToken:{name:t,options:{path:"/",httpOnly:!0,sameSite:"lax",secure:o,domain:n}}},callbacks:{signIn(t){return d(this,arguments,void 0,(function*({account:t}){if("production"===process.env.NEXT_PUBLIC_VERCEL_ENV)return!0;const n=new u.ConfidentialClientApplication({auth:{clientId:e.clientId,clientSecret:e.clientSecret,authority:`https://login.microsoftonline.com/${e.tenantId}`}}),{accessToken:o}=yield n.acquireTokenByRefreshToken({scopes:[`${process.env.NEXT_PUBLIC_EMPLOYEES_API_SCOPE}`],refreshToken:null==t?void 0:t.refresh_token});return 200===(yield fetch(`${process.env.NEXT_PUBLIC_EMPLOYEES_API_BASE_URL}/v1.0/protected/me`,{headers:{Authorization:`Bearer ${o}`,"Content-Type":"application/json","Cache-Control":"no-cache, no-transform"}})).status||"/auth/login?error=true"}))},jwt(e){return d(this,arguments,void 0,(function*({token:e,account:t}){return(null==t?void 0:t.access_token)&&(e.refreshToken=t.refresh_token,e.expiresAt=t.expires_at),e}))}}}},p=e=>s()(l(e));return o})()));
-//# sourceMappingURL=options.js.map

package/lib/options.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"options.js","mappings":"CAAA,SAA2CA,EAAMC,GAC1B,iBAAZC,SAA0C,iBAAXC,OACxCA,OAAOD,QAAUD,IACQ,mBAAXG,QAAyBA,OAAOC,IAC9CD,OAAO,GAAIH,GACe,iBAAZC,QACdA,QAAgB,OAAID,IAEpBD,EAAa,OAAIC,GAClB,CATD,CASGK,MAAM,I,kCCTTH,EAAOD,QAAUK,QAAQ,Y,UCAzBJ,EAAOD,QAAUK,QAAQ,mB,GCCrBC,EAA2B,CAAC,EAGhC,SAASC,EAAoBC,GAE5B,IAAIC,EAAeH,EAAyBE,GAC5C,QAAqBE,IAAjBD,EACH,OAAOA,EAAaT,QAGrB,IAAIC,EAASK,EAAyBE,GAAY,CAGjDR,QAAS,CAAC,GAOX,OAHAW,EAAoBH,GAAUP,EAAQA,EAAOD,QAASO,GAG/CN,EAAOD,OACf,CCrBAO,EAAoBK,EAAKX,IACxB,IAAIY,EAASZ,GAAUA,EAAOa,WAC7B,IAAOb,EAAiB,QACxB,IAAM,EAEP,OADAM,EAAoBQ,EAAEF,EAAQ,CAAEG,EAAGH,IAC5BA,CAAM,ECLdN,EAAoBQ,EAAI,CAACf,EAASiB,KACjC,IAAI,IAAIC,KAAOD,EACXV,EAAoBY,EAAEF,EAAYC,KAASX,EAAoBY,EAAEnB,EAASkB,IAC5EE,OAAOC,eAAerB,EAASkB,EAAK,CAAEI,YAAY,EAAMC,IAAKN,EAAWC,IAE1E,ECNDX,EAAoBY,EAAI,CAACK,EAAKC,IAAUL,OAAOM,UAAUC,eAAeC,KAAKJ,EAAKC,GCClFlB,EAAoBsB,EAAK7B,IACH,oBAAX8B,QAA0BA,OAAOC,aAC1CX,OAAOC,eAAerB,EAAS8B,OAAOC,YAAa,CAAEC,MAAO,WAE7DZ,OAAOC,eAAerB,EAAS,aAAc,CAAEgC,OAAO,GAAO,E,sFCL9D,MAAM,EAA+B3B,QAAQ,gC,aCAtC,MAAM4B,EAAuB,KAChC,MAAMC,EAA8B,oBAAXC,OACnBC,EAASF,GAAaC,OAAOE,SAASC,SAASC,SAAS,SACxDC,EAAS,CACXC,MAAO,6EAKX,OAHIP,IACAM,EAAOE,YAAcN,EAAS,iBAAmB,aAE9CI,CAAM,E,aCTbG,EAAwC,SAAUC,EAASC,EAAYC,EAAGC,GAE1E,OAAO,IAAKD,IAAMA,EAAIE,WAAU,SAAUC,EAASC,GAC/C,SAASC,EAAUnB,GAAS,IAAMoB,EAAKL,EAAUM,KAAKrB,GAAS,CAAE,MAAOsB,GAAKJ,EAAOI,EAAI,CAAE,CAC1F,SAASC,EAASvB,GAAS,IAAMoB,EAAKL,EAAiB,MAAEf,GAAS,CAAE,MAAOsB,GAAKJ,EAAOI,EAAI,CAAE,CAC7F,SAASF,EAAKI,GAJlB,IAAexB,EAIawB,EAAOC,KAAOR,EAAQO,EAAOxB,QAJ1CA,EAIyDwB,EAAOxB,MAJhDA,aAAiBc,EAAId,EAAQ,IAAIc,GAAE,SAAUG,GAAWA,EAAQjB,EAAQ,KAIjB0B,KAAKP,EAAWI,EAAW,CAC7GH,GAAML,EAAYA,EAAUY,MAAMf,EAASC,GAAc,KAAKQ,OAClE,GACJ,EAMO,MAAMO,EAAsBC,IAC/B,MAAM,KAAEC,EAAI,OAAEC,EAAM,OAAEC,GCfnB,SAAkCC,GACrC,MAAM,SAAE3B,EAAQ,SAAE4B,GAAa,IAAIC,IAAIF,GACjCD,EAAsB,WAAbE,EACTE,EAASJ,EAAS,YAAc,IAkBhC,IAAEK,EAAG,OAAEN,GAjBW,MACpB,GAAiB,cAAbzB,GAA4B,WAAWgC,KAAKhC,GAC5C,MAAO,CAAE+B,IAAK,SAElB,GAAI/B,EAASiC,SAAS,mBAClB,MAAO,CAAEF,IAAK,OAAQN,OAAQ,mBAElC,GAAIzB,EAASiC,SAAS,cAClB,MAAO,CAAEF,IAAK,OAAQN,OAAQ,cAElC,MAAMS,EAAQlC,EAASmC,MAAM,KAC7B,GAAID,EAAME,QAAU,EAAG,CACnB,MAAMC,EAAOH,EAAMI,OAAO,GAAGC,KAAK,KAClC,MAAO,CAAER,IAAKM,EAAKG,QAAQ,MAAO,KAAMf,OAAQ,IAAIY,IACxD,CACA,MAAO,CAAEN,IAAK,OAAQ,EAEFU,GAExB,MAAO,CAAEjB,KADI,GAAGM,cAAmBC,kBACpBN,SAAQC,SAC3B,CDTqCgB,CAAyBC,QAAQC,IAAIC,cACtE,MAAO,CACHC,OAAQvB,EAAOwB,eACfC,MAAO,CACHC,OAAQ,eAEZC,UAAW,CACP,IAAgB,CACZC,SAAU5B,EAAO4B,SACjBC,aAAc7B,EAAO6B,aACrBC,SAAU9B,EAAO8B,SACjBC,cAAe,CACXpD,OAAQP,QAIpB4D,QAAS,CACLC,aAAc,CACVhC,OACAiC,QAAS,CACLC,KAAM,IACNC,UAAU,EACVC,SAAU,MACVlC,SACAD,YAIZoC,UAAW,CACP,MAAAZ,CAAOa,GACH,OAAOzD,EAAUvC,KAAMiG,eAAW,GAAQ,WAAW,QAAEC,IAEnD,GADsD,eAAvCrB,QAAQC,IAAIqB,uBAEvB,OAAO,EAEX,MAAMC,EAAM,IAAI,EAAAC,8BAA8B,CAC1CC,KAAM,CACFjB,SAAU5B,EAAO4B,SACjBC,aAAc7B,EAAO6B,aACrBiB,UAAW,qCAAqC9C,EAAO8B,eAGzD,YAAEiB,SAAsBJ,EAAIK,2BAA2B,CACzDC,OAAQ,CAAC,GAAG7B,QAAQC,IAAI6B,mCACxBC,aAAcV,aAAyC,EAASA,EAAQW,gBAS5E,OAAmB,aAPDC,MAAM,GAAGjC,QAAQC,IAAIiC,uDAAwD,CAC3FC,QAAS,CACLC,cAAe,UAAUT,IACzB,eAAgB,mBAChB,gBAAiB,6BAGjBU,QAGD,wBACX,GACJ,EACA,GAAAC,CAAInB,GACA,OAAOzD,EAAUvC,KAAMiG,eAAW,GAAQ,WAAW,MAAEmB,EAAK,QAAElB,IAK1D,OAJIA,aAAyC,EAASA,EAAQmB,gBAC1DD,EAAMR,aAAeV,EAAQW,cAC7BO,EAAME,UAAYpB,EAAQqB,YAEvBH,CACX,GACJ,GAEP,EAEL,EAAgB3D,GAAW,IAASD,EAAmBC,I","sources":["webpack://snokam/webpack/universalModuleDefinition","webpack://snokam/external commonjs \"next-auth\"","webpack://snokam/external commonjs \"@azure/msal-node\"","webpack://snokam/webpack/bootstrap","webpack://snokam/webpack/runtime/compat get default export","webpack://snokam/webpack/runtime/define property getters","webpack://snokam/webpack/runtime/hasOwnProperty shorthand","webpack://snokam/webpack/runtime/make namespace object","webpack://snokam/external commonjs \"next-auth/providers/azure-ad\"","webpack://snokam/./src/utils/params.ts","webpack://snokam/./src/options.tsx","webpack://snokam/./src/utils/cookies.ts"],"sourcesContent":["(function webpackUniversalModuleDefinition(root, factory) {\n\tif(typeof exports === 'object' && typeof module === 'object')\n\t\tmodule.exports = factory();\n\telse if(typeof define === 'function' && define.amd)\n\t\tdefine([], factory);\n\telse if(typeof exports === 'object')\n\t\texports[\"snokam\"] = factory();\n\telse\n\t\troot[\"snokam\"] = factory();\n})(this, () => {\nreturn ","module.exports = require(\"next-auth\");","module.exports = require(\"@azure/msal-node\");","// The module cache\nvar __webpack_module_cache__ = {};\n\n// The require function\nfunction __webpack_require__(moduleId) {\n\t// Check if module is in cache\n\tvar cachedModule = __webpack_module_cache__[moduleId];\n\tif (cachedModule !== undefined) {\n\t\treturn cachedModule.exports;\n\t}\n\t// Create a new module (and put it into the cache)\n\tvar module = __webpack_module_cache__[moduleId] = {\n\t\t// no module.id needed\n\t\t// no module.loaded needed\n\t\texports: {}\n\t};\n\n\t// Execute the module function\n\t__webpack_modules__[moduleId](module, module.exports, __webpack_require__);\n\n\t// Return the exports of the module\n\treturn module.exports;\n}\n\n","// getDefaultExport function for compatibility with non-harmony modules\n__webpack_require__.n = (module) => {\n\tvar getter = module && module.__esModule ?\n\t\t() => (module['default']) :\n\t\t() => (module);\n\t__webpack_require__.d(getter, { a: getter });\n\treturn getter;\n};","// define getter functions for harmony exports\n__webpack_require__.d = (exports, definition) => {\n\tfor(var key in definition) {\n\t\tif(__webpack_require__.o(definition, key) && !__webpack_require__.o(exports, key)) {\n\t\t\tObject.defineProperty(exports, key, { enumerable: true, get: definition[key] });\n\t\t}\n\t}\n};","__webpack_require__.o = (obj, prop) => (Object.prototype.hasOwnProperty.call(obj, prop))","// define __esModule on exports\n__webpack_require__.r = (exports) => {\n\tif(typeof Symbol !== 'undefined' && Symbol.toStringTag) {\n\t\tObject.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });\n\t}\n\tObject.defineProperty(exports, '__esModule', { value: true });\n};","const __WEBPACK_NAMESPACE_OBJECT__ = require(\"next-auth/providers/azure-ad\");","export const getDefaultAuthParams = () => {\n    const isBrowser = typeof window !== \"undefined\";\n    const isTest = isBrowser && window.location.hostname.includes(\"test.\");\n    const params = {\n        scope: `openid profile email offline_access https://graph.microsoft.com/User.Read`,\n    };\n    if (isBrowser) {\n        params.domain_hint = isTest ? \"test.snokam.no\" : \"snokam.no\";\n    }\n    return params;\n};\n","var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {\n    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }\n    return new (P || (P = Promise))(function (resolve, reject) {\n        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }\n        function rejected(value) { try { step(generator[\"throw\"](value)); } catch (e) { reject(e); } }\n        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }\n        step((generator = generator.apply(thisArg, _arguments || [])).next());\n    });\n};\nimport NextAuth from \"next-auth\";\nimport AzureADProvider from \"next-auth/providers/azure-ad\";\nimport { getDefaultAuthParams } from \"./utils/params\";\nimport { ConfidentialClientApplication } from \"@azure/msal-node\";\nimport { getSessionCookieSettings } from \"./utils/cookies\";\nexport const getNextAuthOptions = (config) => {\n    const { name, domain, secure } = getSessionCookieSettings(process.env.NEXTAUTH_URL);\n    return {\n        secret: config.nextAuthSecret,\n        pages: {\n            signIn: \"/auth/login\",\n        },\n        providers: [\n            AzureADProvider({\n                clientId: config.clientId,\n                clientSecret: config.clientSecret,\n                tenantId: config.tenantId,\n                authorization: {\n                    params: getDefaultAuthParams(),\n                },\n            }),\n        ],\n        cookies: {\n            sessionToken: {\n                name,\n                options: {\n                    path: \"/\",\n                    httpOnly: true,\n                    sameSite: \"lax\",\n                    secure,\n                    domain,\n                },\n            },\n        },\n        callbacks: {\n            signIn(_a) {\n                return __awaiter(this, arguments, void 0, function* ({ account }) {\n                    const isProd = process.env.NEXT_PUBLIC_VERCEL_ENV === \"production\";\n                    if (isProd) {\n                        return true;\n                    }\n                    const cca = new ConfidentialClientApplication({\n                        auth: {\n                            clientId: config.clientId,\n                            clientSecret: config.clientSecret,\n                            authority: `https://login.microsoftonline.com/${config.tenantId}`,\n                        },\n                    });\n                    const { accessToken } = yield cca.acquireTokenByRefreshToken({\n                        scopes: [`${process.env.NEXT_PUBLIC_EMPLOYEES_API_SCOPE}`],\n                        refreshToken: account === null || account === void 0 ? void 0 : account.refresh_token,\n                    });\n                    const res = yield fetch(`${process.env.NEXT_PUBLIC_EMPLOYEES_API_BASE_URL}/v1.0/protected/me`, {\n                        headers: {\n                            Authorization: `Bearer ${accessToken}`,\n                            \"Content-Type\": \"application/json\",\n                            \"Cache-Control\": \"no-cache, no-transform\",\n                        },\n                    });\n                    if (res.status === 200) {\n                        return true;\n                    }\n                    return \"/auth/login?error=true\";\n                });\n            },\n            jwt(_a) {\n                return __awaiter(this, arguments, void 0, function* ({ token, account }) {\n                    if (account === null || account === void 0 ? void 0 : account.access_token) {\n                        token.refreshToken = account.refresh_token;\n                        token.expiresAt = account.expires_at;\n                    }\n                    return token;\n                });\n            },\n        },\n    };\n};\nexport default (config) => NextAuth(getNextAuthOptions(config));\n","export function getSessionCookieSettings(nextAuthUrl) {\n    const { hostname, protocol } = new URL(nextAuthUrl);\n    const secure = protocol === \"https:\";\n    const prefix = secure ? \"__Secure-\" : \"\";\n    const getTagAndDomain = () => {\n        if (hostname === \"localhost\" || /^[\\d.]+$/.test(hostname)) {\n            return { tag: \"local\" };\n        }\n        if (hostname.endsWith(\".test.snokam.no\")) {\n            return { tag: \"test\", domain: \".test.snokam.no\" };\n        }\n        if (hostname.endsWith(\".snokam.no\")) {\n            return { tag: \"prod\", domain: \".snokam.no\" };\n        }\n        const parts = hostname.split(\".\");\n        if (parts.length >= 2) {\n            const base = parts.slice(-2).join(\".\");\n            return { tag: base.replace(/\\./g, \"-\"), domain: `.${base}` };\n        }\n        return { tag: \"host\" };\n    };\n    const { tag, domain } = getTagAndDomain();\n    const name = `${prefix}next-auth.${tag}.session-token`;\n    return { name, domain, secure };\n}\n"],"names":["root","factory","exports","module","define","amd","this","require","__webpack_module_cache__","__webpack_require__","moduleId","cachedModule","undefined","__webpack_modules__","n","getter","__esModule","d","a","definition","key","o","Object","defineProperty","enumerable","get","obj","prop","prototype","hasOwnProperty","call","r","Symbol","toStringTag","value","getDefaultAuthParams","isBrowser","window","isTest","location","hostname","includes","params","scope","domain_hint","__awaiter","thisArg","_arguments","P","generator","Promise","resolve","reject","fulfilled","step","next","e","rejected","result","done","then","apply","getNextAuthOptions","config","name","domain","secure","nextAuthUrl","protocol","URL","prefix","tag","test","endsWith","parts","split","length","base","slice","join","replace","getTagAndDomain","getSessionCookieSettings","process","env","NEXTAUTH_URL","secret","nextAuthSecret","pages","signIn","providers","clientId","clientSecret","tenantId","authorization","cookies","sessionToken","options","path","httpOnly","sameSite","callbacks","_a","arguments","account","NEXT_PUBLIC_VERCEL_ENV","cca","ConfidentialClientApplication","auth","authority","accessToken","acquireTokenByRefreshToken","scopes","NEXT_PUBLIC_EMPLOYEES_API_SCOPE","refreshToken","refresh_token","fetch","NEXT_PUBLIC_EMPLOYEES_API_BASE_URL","headers","Authorization","status","jwt","token","access_token","expiresAt","expires_at"],"sourceRoot":""}

package/lib/server/auth.d.ts

@@ -1,11 +0,0 @@
-import { GetServerSidePropsContext, GetStaticPropsContext } from "next";
-import { Auth } from "../utils/types";
-export declare const getAuth: (context: GetServerSidePropsContext | GetStaticPropsContext, authConfig: Auth.Config) => Promise<{
-    isAuthenticated: boolean;
-    user: {
-        name?: string | null;
-        email?: string | null;
-        image?: string | null;
-    };
-    session: import("next-auth").Session;
-}>;

package/lib/server/handler.d.ts

@@ -1,14 +0,0 @@
-import type { NextApiRequest, NextApiResponse } from "next";
-import { Auth } from "../utils/types";
-export interface Props {
-    req: NextApiRequest;
-    res: NextApiResponse<{
-        accessToken: string;
-        expiresOn: number;
-    } | string>;
-    authConfig: Auth.Config;
-}
-export default function handler(props: Props): Promise<void | NextApiResponse<string | {
-    accessToken: string;
-    expiresOn: number;
-}>>;

package/lib/server/token.d.ts

@@ -1,8 +0,0 @@
-interface Config {
-    scopes: string[];
-    tenantId: string;
-    clientId: string;
-    secret: string;
-}
-export declare const getServerToken: (props: Config) => Promise<string>;
-export {};

package/lib/server.js

@@ -1,2 +0,0 @@
-!function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define([],t):"object"==typeof exports?exports.snokam=t():e.snokam=t()}(this,(()=>(()=>{"use strict";var e={333:(e,t,n)=>{n.d(t,{default:()=>d,getNextAuthOptions:()=>l});var o=n(542),r=n.n(o);const i=require("next-auth/providers/azure-ad");var s=n.n(i);const c=()=>{const e="undefined"!=typeof window,t=e&&window.location.hostname.includes("test."),n={scope:"openid profile email offline_access https://graph.microsoft.com/User.Read"};return e&&(n.domain_hint=t?"test.snokam.no":"snokam.no"),n};var a=n(672),u=function(e,t,n,o){return new(n||(n=Promise))((function(r,i){function s(e){try{a(o.next(e))}catch(e){i(e)}}function c(e){try{a(o.throw(e))}catch(e){i(e)}}function a(e){var t;e.done?r(e.value):(t=e.value,t instanceof n?t:new n((function(e){e(t)}))).then(s,c)}a((o=o.apply(e,t||[])).next())}))};const l=e=>{const{name:t,domain:n,secure:o}=function(e){const{hostname:t,protocol:n}=new URL(e),o="https:"===n,r=o?"__Secure-":"",{tag:i,domain:s}=(()=>{if("localhost"===t||/^[\d.]+$/.test(t))return{tag:"local"};if(t.endsWith(".test.snokam.no"))return{tag:"test",domain:".test.snokam.no"};if(t.endsWith(".snokam.no"))return{tag:"prod",domain:".snokam.no"};const e=t.split(".");if(e.length>=2){const t=e.slice(-2).join(".");return{tag:t.replace(/\./g,"-"),domain:`.${t}`}}return{tag:"host"}})();return{name:`${r}next-auth.${i}.session-token`,domain:s,secure:o}}(process.env.NEXTAUTH_URL);return{secret:e.nextAuthSecret,pages:{signIn:"/auth/login"},providers:[s()({clientId:e.clientId,clientSecret:e.clientSecret,tenantId:e.tenantId,authorization:{params:c()}})],cookies:{sessionToken:{name:t,options:{path:"/",httpOnly:!0,sameSite:"lax",secure:o,domain:n}}},callbacks:{signIn(t){return u(this,arguments,void 0,(function*({account:t}){if("production"===process.env.NEXT_PUBLIC_VERCEL_ENV)return!0;const n=new a.ConfidentialClientApplication({auth:{clientId:e.clientId,clientSecret:e.clientSecret,authority:`https://login.microsoftonline.com/${e.tenantId}`}}),{accessToken:o}=yield n.acquireTokenByRefreshToken({scopes:[`${process.env.NEXT_PUBLIC_EMPLOYEES_API_SCOPE}`],refreshToken:null==t?void 0:t.refresh_token});return 200===(yield fetch(`${process.env.NEXT_PUBLIC_EMPLOYEES_API_BASE_URL}/v1.0/protected/me`,{headers:{Authorization:`Bearer ${o}`,"Content-Type":"application/json","Cache-Control":"no-cache, no-transform"}})).status||"/auth/login?error=true"}))},jwt(e){return u(this,arguments,void 0,(function*({token:e,account:t}){return(null==t?void 0:t.access_token)&&(e.refreshToken=t.refresh_token,e.expiresAt=t.expires_at),e}))}}}},d=e=>r()(l(e))},542:e=>{e.exports=require("next-auth")},672:e=>{e.exports=require("@azure/msal-node")}},t={};function n(o){var r=t[o];if(void 0!==r)return r.exports;var i=t[o]={exports:{}};return e[o](i,i.exports,n),i.exports}n.n=e=>{var t=e&&e.__esModule?()=>e.default:()=>e;return n.d(t,{a:t}),t},n.d=(e,t)=>{for(var o in t)n.o(t,o)&&!n.o(e,o)&&Object.defineProperty(e,o,{enumerable:!0,get:t[o]})},n.o=(e,t)=>Object.prototype.hasOwnProperty.call(e,t),n.r=e=>{"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})};var o={};n.r(o),n.d(o,{default:()=>d,getAuth:()=>l,getNextAuthOptions:()=>s.getNextAuthOptions,getServerSession:()=>u.getServerSession,getServerToken:()=>i});var r=n(672);const i=e=>{return t=void 0,n=void 0,i=function*(){const{scopes:t}=e,n=new r.ConfidentialClientApplication({auth:{clientId:`${e.clientId}`,authority:`https://login.microsoftonline.com/${e.tenantId}/oauth2/v2.0`,clientSecret:`${e.secret}`}}),o=yield n.acquireTokenByClientCredential({scopes:t.map((e=>e.replace("user_impersonation",".default")))}).catch((e=>{throw console.error(e),e}));return`Bearer ${null==o?void 0:o.accessToken}`},new((o=void 0)||(o=Promise))((function(e,r){function s(e){try{a(i.next(e))}catch(e){r(e)}}function c(e){try{a(i.throw(e))}catch(e){r(e)}}function a(t){var n;t.done?e(t.value):(n=t.value,n instanceof o?n:new o((function(e){e(n)}))).then(s,c)}a((i=i.apply(t,n||[])).next())}));var t,n,o,i};var s=n(333);const c=require("next-auth/jwt");var a=n(542);const u=require("next-auth/next");const l=(e,t)=>{return n=void 0,o=void 0,i=function*(){if(!("req"in e)||!("res"in e))return{isAuthenticated:!1,session:null,user:null};const n=(0,s.getNextAuthOptions)(t),o=yield(0,u.getServerSession)(e.req,e.res,n);return{isAuthenticated:!!(null==o?void 0:o.user),user:(null==o?void 0:o.user)||null,session:o}},new((r=void 0)||(r=Promise))((function(e,t){function s(e){try{a(i.next(e))}catch(e){t(e)}}function c(e){try{a(i.throw(e))}catch(e){t(e)}}function a(t){var n;t.done?e(t.value):(n=t.value,n instanceof r?n:new r((function(e){e(n)}))).then(s,c)}a((i=i.apply(n,o||[])).next())}));var n,o,r,i},d={Routes:s.default,Token:function(e){return t=this,n=void 0,i=function*(){const{req:t,res:n,authConfig:o}=e,i=(0,s.getNextAuthOptions)(o),u=yield(0,a.getServerSession)(t,n,i);if(!(null==u?void 0:u.user))return n.status(401).end("Not authenticated");if(!t.body.scope)return n.status(400).end("Invalid or missing scope");try{const{nextAuthSecret:e}=o,s=yield(0,c.getToken)({req:t,secret:e,cookieName:i.cookies.sessionToken.name});if(!s)return n.status(500).end("Failed to get refetch token");const a=new r.ConfidentialClientApplication({auth:{clientId:o.clientId,clientSecret:o.clientSecret,authority:`https://login.microsoftonline.com/${o.tenantId}`}}),u=yield a.acquireTokenByRefreshToken({scopes:[t.body.scope],refreshToken:null==s?void 0:s.refreshToken});return u?n.status(200).json({accessToken:null==u?void 0:u.accessToken,expiresOn:Math.floor(u.expiresOn.getTime()/1e3)}):n.status(500).end("Failed to get access token")}catch(e){console.error("Token exchange error:",e),n.status(500).end("Token exchange failed")}},new((o=void 0)||(o=Promise))((function(e,r){function s(e){try{a(i.next(e))}catch(e){r(e)}}function c(e){try{a(i.throw(e))}catch(e){r(e)}}function a(t){var n;t.done?e(t.value):(n=t.value,n instanceof o?n:new o((function(e){e(n)}))).then(s,c)}a((i=i.apply(t,n||[])).next())}));var t,n,o,i}};return o})()));
-//# sourceMappingURL=server.js.map

package/lib/server.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"server.js","mappings":"CAAA,SAA2CA,EAAMC,GAC1B,iBAAZC,SAA0C,iBAAXC,OACxCA,OAAOD,QAAUD,IACQ,mBAAXG,QAAyBA,OAAOC,IAC9CD,OAAO,GAAIH,GACe,iBAAZC,QACdA,QAAgB,OAAID,IAEpBD,EAAa,OAAIC,GAClB,CATD,CASGK,MAAM,I,8GCTT,MAAM,EAA+BC,QAAQ,gC,aCAtC,MAAMC,EAAuB,KAChC,MAAMC,EAA8B,oBAAXC,OACnBC,EAASF,GAAaC,OAAOE,SAASC,SAASC,SAAS,SACxDC,EAAS,CACXC,MAAO,6EAKX,OAHIP,IACAM,EAAOE,YAAcN,EAAS,iBAAmB,aAE9CI,CAAM,E,aCTbG,EAAwC,SAAUC,EAASC,EAAYC,EAAGC,GAE1E,OAAO,IAAKD,IAAMA,EAAIE,WAAU,SAAUC,EAASC,GAC/C,SAASC,EAAUC,GAAS,IAAMC,EAAKN,EAAUO,KAAKF,GAAS,CAAE,MAAOG,GAAKL,EAAOK,EAAI,CAAE,CAC1F,SAASC,EAASJ,GAAS,IAAMC,EAAKN,EAAiB,MAAEK,GAAS,CAAE,MAAOG,GAAKL,EAAOK,EAAI,CAAE,CAC7F,SAASF,EAAKI,GAJlB,IAAeL,EAIaK,EAAOC,KAAOT,EAAQQ,EAAOL,QAJ1CA,EAIyDK,EAAOL,MAJhDA,aAAiBN,EAAIM,EAAQ,IAAIN,GAAE,SAAUG,GAAWA,EAAQG,EAAQ,KAIjBO,KAAKR,EAAWK,EAAW,CAC7GH,GAAMN,EAAYA,EAAUa,MAAMhB,EAASC,GAAc,KAAKS,OAClE,GACJ,EAMO,MAAMO,EAAsBC,IAC/B,MAAM,KAAEC,EAAI,OAAEC,EAAM,OAAEC,GCfnB,SAAkCC,GACrC,MAAM,SAAE5B,EAAQ,SAAE6B,GAAa,IAAIC,IAAIF,GACjCD,EAAsB,WAAbE,EACTE,EAASJ,EAAS,YAAc,IAkBhC,IAAEK,EAAG,OAAEN,GAjBW,MACpB,GAAiB,cAAb1B,GAA4B,WAAWiC,KAAKjC,GAC5C,MAAO,CAAEgC,IAAK,SAElB,GAAIhC,EAASkC,SAAS,mBAClB,MAAO,CAAEF,IAAK,OAAQN,OAAQ,mBAElC,GAAI1B,EAASkC,SAAS,cAClB,MAAO,CAAEF,IAAK,OAAQN,OAAQ,cAElC,MAAMS,EAAQnC,EAASoC,MAAM,KAC7B,GAAID,EAAME,QAAU,EAAG,CACnB,MAAMC,EAAOH,EAAMI,OAAO,GAAGC,KAAK,KAClC,MAAO,CAAER,IAAKM,EAAKG,QAAQ,MAAO,KAAMf,OAAQ,IAAIY,IACxD,CACA,MAAO,CAAEN,IAAK,OAAQ,EAEFU,GAExB,MAAO,CAAEjB,KADI,GAAGM,cAAmBC,kBACpBN,SAAQC,SAC3B,CDTqCgB,CAAyBC,QAAQC,IAAIC,cACtE,MAAO,CACHC,OAAQvB,EAAOwB,eACfC,MAAO,CACHC,OAAQ,eAEZC,UAAW,CACP,IAAgB,CACZC,SAAU5B,EAAO4B,SACjBC,aAAc7B,EAAO6B,aACrBC,SAAU9B,EAAO8B,SACjBC,cAAe,CACXrD,OAAQP,QAIpB6D,QAAS,CACLC,aAAc,CACVhC,OACAiC,QAAS,CACLC,KAAM,IACNC,UAAU,EACVC,SAAU,MACVlC,SACAD,YAIZoC,UAAW,CACP,MAAAZ,CAAOa,GACH,OAAO1D,EAAUZ,KAAMuE,eAAW,GAAQ,WAAW,QAAEC,IAEnD,GADsD,eAAvCrB,QAAQC,IAAIqB,uBAEvB,OAAO,EAEX,MAAMC,EAAM,IAAI,EAAAC,8BAA8B,CAC1CC,KAAM,CACFjB,SAAU5B,EAAO4B,SACjBC,aAAc7B,EAAO6B,aACrBiB,UAAW,qCAAqC9C,EAAO8B,eAGzD,YAAEiB,SAAsBJ,EAAIK,2BAA2B,CACzDC,OAAQ,CAAC,GAAG7B,QAAQC,IAAI6B,mCACxBC,aAAcV,aAAyC,EAASA,EAAQW,gBAS5E,OAAmB,aAPDC,MAAM,GAAGjC,QAAQC,IAAIiC,uDAAwD,CAC3FC,QAAS,CACLC,cAAe,UAAUT,IACzB,eAAgB,mBAChB,gBAAiB,6BAGjBU,QAGD,wBACX,GACJ,EACA,GAAAC,CAAInB,GACA,OAAO1D,EAAUZ,KAAMuE,eAAW,GAAQ,WAAW,MAAEmB,EAAK,QAAElB,IAK1D,OAJIA,aAAyC,EAASA,EAAQmB,gBAC1DD,EAAMR,aAAeV,EAAQW,cAC7BO,EAAME,UAAYpB,EAAQqB,YAEvBH,CACX,GACJ,GAEP,EAEL,EAAgB3D,GAAW,IAASD,EAAmBC,G,UEtFvDlC,EAAOD,QAAUK,QAAQ,Y,UCAzBJ,EAAOD,QAAUK,QAAQ,mB,GCCrB6F,EAA2B,CAAC,EAGhC,SAASC,EAAoBC,GAE5B,IAAIC,EAAeH,EAAyBE,GAC5C,QAAqBE,IAAjBD,EACH,OAAOA,EAAarG,QAGrB,IAAIC,EAASiG,EAAyBE,GAAY,CAGjDpG,QAAS,CAAC,GAOX,OAHAuG,EAAoBH,GAAUnG,EAAQA,EAAOD,QAASmG,GAG/ClG,EAAOD,OACf,CCrBAmG,EAAoBK,EAAKvG,IACxB,IAAIwG,EAASxG,GAAUA,EAAOyG,WAC7B,IAAOzG,EAAiB,QACxB,IAAM,EAEP,OADAkG,EAAoBQ,EAAEF,EAAQ,CAAEG,EAAGH,IAC5BA,CAAM,ECLdN,EAAoBQ,EAAI,CAAC3G,EAAS6G,KACjC,IAAI,IAAIC,KAAOD,EACXV,EAAoBY,EAAEF,EAAYC,KAASX,EAAoBY,EAAE/G,EAAS8G,IAC5EE,OAAOC,eAAejH,EAAS8G,EAAK,CAAEI,YAAY,EAAMC,IAAKN,EAAWC,IAE1E,ECNDX,EAAoBY,EAAI,CAACK,EAAKC,IAAUL,OAAOM,UAAUC,eAAeC,KAAKJ,EAAKC,GCClFlB,EAAoBsB,EAAKzH,IACH,oBAAX0H,QAA0BA,OAAOC,aAC1CX,OAAOC,eAAejH,EAAS0H,OAAOC,YAAa,CAAElG,MAAO,WAE7DuF,OAAOC,eAAejH,EAAS,aAAc,CAAEyB,OAAO,GAAO,E,2KCKvD,MAAMmG,EAAkBC,IAAU7G,OAVaC,OAUH,EAVYC,OAUJ,EAVmBE,EAUH,YACvE,MAAM,OAAEgE,GAAWyC,EACb/C,EAAM,IAAI,EAAAC,8BAA8B,CAC1CC,KAAM,CACFjB,SAAU,GAAG8D,EAAM9D,WACnBkB,UAAW,qCAAqC4C,EAAM5D,uBACtDD,aAAc,GAAG6D,EAAMnE,YAGzBoE,QAAiBhD,EAClBiD,+BAA+B,CAChC3C,OAAQA,EAAO4C,KAAKlH,GAAUA,EAAMsC,QAAQ,qBAAsB,gBAEjE6E,OAAOrG,IAER,MADAsG,QAAQC,MAAMvG,GACRA,CAAC,IAEX,MAAO,UAAUkG,aAA2C,EAASA,EAAS5C,aAClF,EA1BW,KAFgE/D,OAUR,KAR7CA,EAAIE,WAAU,SAAUC,EAASC,GAC/C,SAASC,EAAUC,GAAS,IAAMC,EAAKN,EAAUO,KAAKF,GAAS,CAAE,MAAOG,GAAKL,EAAOK,EAAI,CAAE,CAC1F,SAASC,EAASJ,GAAS,IAAMC,EAAKN,EAAiB,MAAEK,GAAS,CAAE,MAAOG,GAAKL,EAAOK,EAAI,CAAE,CAC7F,SAASF,EAAKI,GAJlB,IAAeL,EAIaK,EAAOC,KAAOT,EAAQQ,EAAOL,QAJ1CA,EAIyDK,EAAOL,MAJhDA,aAAiBN,EAAIM,EAAQ,IAAIN,GAAE,SAAUG,GAAWA,EAAQG,EAAQ,KAIjBO,KAAKR,EAAWK,EAAW,CAC7GH,GAAMN,EAAYA,EAAUa,MAAMhB,EAASC,GAAc,KAAKS,OAClE,IAPwC,IAAUV,EAASC,EAAYC,EAAGC,CA4B5E,E,aC5BF,MAAM,EAA+Bf,QAAQ,iB,aCA7C,MAAM,EAA+BA,QAAQ,kBCYtC,MAAM+H,EAAU,CAACC,EAASC,KAAe,OAZMrH,OAYI,EAZKC,OAYG,EAZYE,EAYI,YAE9E,KAAM,QAASiH,MAAW,QAASA,GAC/B,MAAO,CACHE,iBAAiB,EACjBC,QAAS,KACTC,KAAM,MAGd,MAAMpE,GAAU,IAAAnC,oBAAmBoG,GAC7BE,QAAgB,IAAAE,kBAAiBL,EAAQM,IAAKN,EAAQO,IAAKvE,GACjE,MAAO,CACHkE,mBAAoBC,aAAyC,EAASA,EAAQC,MAC9EA,MAAOD,aAAyC,EAASA,EAAQC,OAAS,KAC1ED,UAER,EA1BW,KAFgErH,OAYD,KAVpDA,EAAIE,WAAU,SAAUC,EAASC,GAC/C,SAASC,EAAUC,GAAS,IAAMC,EAAKN,EAAUO,KAAKF,GAAS,CAAE,MAAOG,GAAKL,EAAOK,EAAI,CAAE,CAC1F,SAASC,EAASJ,GAAS,IAAMC,EAAKN,EAAiB,MAAEK,GAAS,CAAE,MAAOG,GAAKL,EAAOK,EAAI,CAAE,CAC7F,SAASF,EAAKI,GAJlB,IAAeL,EAIaK,EAAOC,KAAOT,EAAQQ,EAAOL,QAJ1CA,EAIyDK,EAAOL,MAJhDA,aAAiBN,EAAIM,EAAQ,IAAIN,GAAE,SAAUG,GAAWA,EAAQG,EAAQ,KAIjBO,KAAKR,EAAWK,EAAW,CAC7GH,GAAMN,EAAYA,EAAUa,MAAMhB,EAASC,GAAc,KAAKS,OAClE,IAPwC,IAAUV,EAASC,EAAYC,EAAGC,CA4B5E,ECrBF,GACIyH,OAAM,UACNC,MCIW,SAAiBjB,GAC5B,OAdkD5G,EAcjCb,KAd0Cc,OAcpC,EAdmDE,EAcnC,YACnC,MAAM,IAAEuH,EAAG,IAAEC,EAAG,WAAEN,GAAeT,EAC3BxD,GAAU,IAAAnC,oBAAmBoG,GAC7BE,QAAgB,IAAAE,kBAAiBC,EAAKC,EAAKvE,GACjD,KAAMmE,aAAyC,EAASA,EAAQC,MAC5D,OAAOG,EAAIhD,OAAO,KAAKmD,IAAI,qBAE/B,IAAKJ,EAAIK,KAAKlI,MACV,OAAO8H,EAAIhD,OAAO,KAAKmD,IAAI,4BAE/B,IACI,MAAM,eAAEpF,GAAmB2E,EACrBW,QAA2B,IAAAC,UAAS,CACtCP,MACAjF,OAAQC,EACRwF,WAAY9E,EAAQF,QAAQC,aAAahC,OAE7C,IAAK6G,EACD,OAAOL,EAAIhD,OAAO,KAAKmD,IAAI,+BAE/B,MAAMjE,EAAM,IAAI,EAAAC,8BAA8B,CAC1CC,KAAM,CACFjB,SAAUuE,EAAWvE,SACrBC,aAAcsE,EAAWtE,aACzBiB,UAAW,qCAAqCqD,EAAWrE,cAG7DmF,QAA0BtE,EAAIK,2BAA2B,CAC3DC,OAAQ,CAACuD,EAAIK,KAAKlI,OAClBwE,aAAc2D,aAA+D,EAASA,EAAmB3D,eAE7G,OAAK8D,EAGER,EAAIhD,OAAO,KAAKyD,KAAK,CACxBnE,YAAakE,aAA6D,EAASA,EAAkBlE,YACrGoE,UAAWC,KAAKC,MAAMJ,EAAkBE,UAAUG,UAAY,OAJvDb,EAAIhD,OAAO,KAAKmD,IAAI,6BAMnC,CACA,MAAOnH,GACHsG,QAAQC,MAAM,wBAAyBvG,GACvCgH,EAAIhD,OAAO,KAAKmD,IAAI,wBACxB,CACJ,EAvDO,KAFgE5H,OAcxC,KAZbA,EAAIE,WAAU,SAAUC,EAASC,GAC/C,SAASC,EAAUC,GAAS,IAAMC,EAAKN,EAAUO,KAAKF,GAAS,CAAE,MAAOG,GAAKL,EAAOK,EAAI,CAAE,CAC1F,SAASC,EAASJ,GAAS,IAAMC,EAAKN,EAAiB,MAAEK,GAAS,CAAE,MAAOG,GAAKL,EAAOK,EAAI,CAAE,CAC7F,SAASF,EAAKI,GAJlB,IAAeL,EAIaK,EAAOC,KAAOT,EAAQQ,EAAOL,QAJ1CA,EAIyDK,EAAOL,MAJhDA,aAAiBN,EAAIM,EAAQ,IAAIN,GAAE,SAAUG,GAAWA,EAAQG,EAAQ,KAIjBO,KAAKR,EAAWK,EAAW,CAC7GH,GAAMN,EAAYA,EAAUa,MAAMhB,EAASC,GAAc,KAAKS,OAClE,IAPwC,IAAUV,EAASC,EAAYC,EAAGC,CA0D9E,G","sources":["webpack://snokam/webpack/universalModuleDefinition","webpack://snokam/external commonjs \"next-auth/providers/azure-ad\"","webpack://snokam/./src/utils/params.ts","webpack://snokam/./src/options.tsx","webpack://snokam/./src/utils/cookies.ts","webpack://snokam/external commonjs \"next-auth\"","webpack://snokam/external commonjs \"@azure/msal-node\"","webpack://snokam/webpack/bootstrap","webpack://snokam/webpack/runtime/compat get default export","webpack://snokam/webpack/runtime/define property getters","webpack://snokam/webpack/runtime/hasOwnProperty shorthand","webpack://snokam/webpack/runtime/make namespace object","webpack://snokam/./src/server/token.tsx","webpack://snokam/external commonjs \"next-auth/jwt\"","webpack://snokam/external commonjs \"next-auth/next\"","webpack://snokam/./src/server/auth.tsx","webpack://snokam/./src/server.tsx","webpack://snokam/./src/server/handler.tsx"],"sourcesContent":["(function webpackUniversalModuleDefinition(root, factory) {\n\tif(typeof exports === 'object' && typeof module === 'object')\n\t\tmodule.exports = factory();\n\telse if(typeof define === 'function' && define.amd)\n\t\tdefine([], factory);\n\telse if(typeof exports === 'object')\n\t\texports[\"snokam\"] = factory();\n\telse\n\t\troot[\"snokam\"] = factory();\n})(this, () => {\nreturn ","const __WEBPACK_NAMESPACE_OBJECT__ = require(\"next-auth/providers/azure-ad\");","export const getDefaultAuthParams = () => {\n    const isBrowser = typeof window !== \"undefined\";\n    const isTest = isBrowser && window.location.hostname.includes(\"test.\");\n    const params = {\n        scope: `openid profile email offline_access https://graph.microsoft.com/User.Read`,\n    };\n    if (isBrowser) {\n        params.domain_hint = isTest ? \"test.snokam.no\" : \"snokam.no\";\n    }\n    return params;\n};\n","var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {\n    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }\n    return new (P || (P = Promise))(function (resolve, reject) {\n        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }\n        function rejected(value) { try { step(generator[\"throw\"](value)); } catch (e) { reject(e); } }\n        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }\n        step((generator = generator.apply(thisArg, _arguments || [])).next());\n    });\n};\nimport NextAuth from \"next-auth\";\nimport AzureADProvider from \"next-auth/providers/azure-ad\";\nimport { getDefaultAuthParams } from \"./utils/params\";\nimport { ConfidentialClientApplication } from \"@azure/msal-node\";\nimport { getSessionCookieSettings } from \"./utils/cookies\";\nexport const getNextAuthOptions = (config) => {\n    const { name, domain, secure } = getSessionCookieSettings(process.env.NEXTAUTH_URL);\n    return {\n        secret: config.nextAuthSecret,\n        pages: {\n            signIn: \"/auth/login\",\n        },\n        providers: [\n            AzureADProvider({\n                clientId: config.clientId,\n                clientSecret: config.clientSecret,\n                tenantId: config.tenantId,\n                authorization: {\n                    params: getDefaultAuthParams(),\n                },\n            }),\n        ],\n        cookies: {\n            sessionToken: {\n                name,\n                options: {\n                    path: \"/\",\n                    httpOnly: true,\n                    sameSite: \"lax\",\n                    secure,\n                    domain,\n                },\n            },\n        },\n        callbacks: {\n            signIn(_a) {\n                return __awaiter(this, arguments, void 0, function* ({ account }) {\n                    const isProd = process.env.NEXT_PUBLIC_VERCEL_ENV === \"production\";\n                    if (isProd) {\n                        return true;\n                    }\n                    const cca = new ConfidentialClientApplication({\n                        auth: {\n                            clientId: config.clientId,\n                            clientSecret: config.clientSecret,\n                            authority: `https://login.microsoftonline.com/${config.tenantId}`,\n                        },\n                    });\n                    const { accessToken } = yield cca.acquireTokenByRefreshToken({\n                        scopes: [`${process.env.NEXT_PUBLIC_EMPLOYEES_API_SCOPE}`],\n                        refreshToken: account === null || account === void 0 ? void 0 : account.refresh_token,\n                    });\n                    const res = yield fetch(`${process.env.NEXT_PUBLIC_EMPLOYEES_API_BASE_URL}/v1.0/protected/me`, {\n                        headers: {\n                            Authorization: `Bearer ${accessToken}`,\n                            \"Content-Type\": \"application/json\",\n                            \"Cache-Control\": \"no-cache, no-transform\",\n                        },\n                    });\n                    if (res.status === 200) {\n                        return true;\n                    }\n                    return \"/auth/login?error=true\";\n                });\n            },\n            jwt(_a) {\n                return __awaiter(this, arguments, void 0, function* ({ token, account }) {\n                    if (account === null || account === void 0 ? void 0 : account.access_token) {\n                        token.refreshToken = account.refresh_token;\n                        token.expiresAt = account.expires_at;\n                    }\n                    return token;\n                });\n            },\n        },\n    };\n};\nexport default (config) => NextAuth(getNextAuthOptions(config));\n","export function getSessionCookieSettings(nextAuthUrl) {\n    const { hostname, protocol } = new URL(nextAuthUrl);\n    const secure = protocol === \"https:\";\n    const prefix = secure ? \"__Secure-\" : \"\";\n    const getTagAndDomain = () => {\n        if (hostname === \"localhost\" || /^[\\d.]+$/.test(hostname)) {\n            return { tag: \"local\" };\n        }\n        if (hostname.endsWith(\".test.snokam.no\")) {\n            return { tag: \"test\", domain: \".test.snokam.no\" };\n        }\n        if (hostname.endsWith(\".snokam.no\")) {\n            return { tag: \"prod\", domain: \".snokam.no\" };\n        }\n        const parts = hostname.split(\".\");\n        if (parts.length >= 2) {\n            const base = parts.slice(-2).join(\".\");\n            return { tag: base.replace(/\\./g, \"-\"), domain: `.${base}` };\n        }\n        return { tag: \"host\" };\n    };\n    const { tag, domain } = getTagAndDomain();\n    const name = `${prefix}next-auth.${tag}.session-token`;\n    return { name, domain, secure };\n}\n","module.exports = require(\"next-auth\");","module.exports = require(\"@azure/msal-node\");","// The module cache\nvar __webpack_module_cache__ = {};\n\n// The require function\nfunction __webpack_require__(moduleId) {\n\t// Check if module is in cache\n\tvar cachedModule = __webpack_module_cache__[moduleId];\n\tif (cachedModule !== undefined) {\n\t\treturn cachedModule.exports;\n\t}\n\t// Create a new module (and put it into the cache)\n\tvar module = __webpack_module_cache__[moduleId] = {\n\t\t// no module.id needed\n\t\t// no module.loaded needed\n\t\texports: {}\n\t};\n\n\t// Execute the module function\n\t__webpack_modules__[moduleId](module, module.exports, __webpack_require__);\n\n\t// Return the exports of the module\n\treturn module.exports;\n}\n\n","// getDefaultExport function for compatibility with non-harmony modules\n__webpack_require__.n = (module) => {\n\tvar getter = module && module.__esModule ?\n\t\t() => (module['default']) :\n\t\t() => (module);\n\t__webpack_require__.d(getter, { a: getter });\n\treturn getter;\n};","// define getter functions for harmony exports\n__webpack_require__.d = (exports, definition) => {\n\tfor(var key in definition) {\n\t\tif(__webpack_require__.o(definition, key) && !__webpack_require__.o(exports, key)) {\n\t\t\tObject.defineProperty(exports, key, { enumerable: true, get: definition[key] });\n\t\t}\n\t}\n};","__webpack_require__.o = (obj, prop) => (Object.prototype.hasOwnProperty.call(obj, prop))","// define __esModule on exports\n__webpack_require__.r = (exports) => {\n\tif(typeof Symbol !== 'undefined' && Symbol.toStringTag) {\n\t\tObject.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });\n\t}\n\tObject.defineProperty(exports, '__esModule', { value: true });\n};","var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {\n    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }\n    return new (P || (P = Promise))(function (resolve, reject) {\n        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }\n        function rejected(value) { try { step(generator[\"throw\"](value)); } catch (e) { reject(e); } }\n        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }\n        step((generator = generator.apply(thisArg, _arguments || [])).next());\n    });\n};\nimport { ConfidentialClientApplication } from \"@azure/msal-node\";\nexport const getServerToken = (props) => __awaiter(void 0, void 0, void 0, function* () {\n    const { scopes } = props;\n    const cca = new ConfidentialClientApplication({\n        auth: {\n            clientId: `${props.clientId}`,\n            authority: `https://login.microsoftonline.com/${props.tenantId}/oauth2/v2.0`,\n            clientSecret: `${props.secret}`,\n        },\n    });\n    const response = yield cca\n        .acquireTokenByClientCredential({\n        scopes: scopes.map((scope) => scope.replace(\"user_impersonation\", \".default\")),\n    })\n        .catch((e) => {\n        console.error(e);\n        throw e;\n    });\n    return `Bearer ${response === null || response === void 0 ? void 0 : response.accessToken}`;\n});\n","const __WEBPACK_NAMESPACE_OBJECT__ = require(\"next-auth/jwt\");","const __WEBPACK_NAMESPACE_OBJECT__ = require(\"next-auth/next\");","var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {\n    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }\n    return new (P || (P = Promise))(function (resolve, reject) {\n        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }\n        function rejected(value) { try { step(generator[\"throw\"](value)); } catch (e) { reject(e); } }\n        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }\n        step((generator = generator.apply(thisArg, _arguments || [])).next());\n    });\n};\nimport { getNextAuthOptions } from \"../options\";\nimport { getServerSession } from \"next-auth/next\";\n// New utility function for easy authentication in getServerSideProps\nexport const getAuth = (context, authConfig) => __awaiter(void 0, void 0, void 0, function* () {\n    // Only works with getServerSideProps context (has req/res)\n    if (!(\"req\" in context && \"res\" in context)) {\n        return {\n            isAuthenticated: false,\n            session: null,\n            user: null,\n        };\n    }\n    const options = getNextAuthOptions(authConfig);\n    const session = yield getServerSession(context.req, context.res, options);\n    return {\n        isAuthenticated: !!(session === null || session === void 0 ? void 0 : session.user),\n        user: (session === null || session === void 0 ? void 0 : session.user) || null,\n        session,\n    };\n});\n","import { getServerToken } from \"./server/token\";\nimport { default as Routes } from \"./options\";\nimport { default as Token } from \"./server/handler\";\nexport { getServerToken };\nexport { getServerSession } from \"next-auth/next\";\nexport { getNextAuthOptions } from \"./options\";\nexport { getAuth } from \"./server/auth\";\nexport default {\n    Routes,\n    Token,\n};\n","var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {\n    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }\n    return new (P || (P = Promise))(function (resolve, reject) {\n        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }\n        function rejected(value) { try { step(generator[\"throw\"](value)); } catch (e) { reject(e); } }\n        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }\n        step((generator = generator.apply(thisArg, _arguments || [])).next());\n    });\n};\nimport { getToken } from \"next-auth/jwt\";\nimport { ConfidentialClientApplication } from \"@azure/msal-node\";\nimport { getServerSession } from \"next-auth\";\nimport { getNextAuthOptions } from \"../options\";\nexport default function handler(props) {\n    return __awaiter(this, void 0, void 0, function* () {\n        const { req, res, authConfig } = props;\n        const options = getNextAuthOptions(authConfig);\n        const session = yield getServerSession(req, res, options);\n        if (!(session === null || session === void 0 ? void 0 : session.user)) {\n            return res.status(401).end(\"Not authenticated\");\n        }\n        if (!req.body.scope) {\n            return res.status(400).end(\"Invalid or missing scope\");\n        }\n        try {\n            const { nextAuthSecret } = authConfig;\n            const refetchTokenResult = yield getToken({\n                req,\n                secret: nextAuthSecret,\n                cookieName: options.cookies.sessionToken.name,\n            });\n            if (!refetchTokenResult) {\n                return res.status(500).end(\"Failed to get refetch token\");\n            }\n            const cca = new ConfidentialClientApplication({\n                auth: {\n                    clientId: authConfig.clientId,\n                    clientSecret: authConfig.clientSecret,\n                    authority: `https://login.microsoftonline.com/${authConfig.tenantId}`,\n                },\n            });\n            const accessTokenResult = yield cca.acquireTokenByRefreshToken({\n                scopes: [req.body.scope],\n                refreshToken: refetchTokenResult === null || refetchTokenResult === void 0 ? void 0 : refetchTokenResult.refreshToken,\n            });\n            if (!accessTokenResult) {\n                return res.status(500).end(\"Failed to get access token\");\n            }\n            return res.status(200).json({\n                accessToken: accessTokenResult === null || accessTokenResult === void 0 ? void 0 : accessTokenResult.accessToken,\n                expiresOn: Math.floor(accessTokenResult.expiresOn.getTime() / 1000),\n            });\n        }\n        catch (e) {\n            console.error(\"Token exchange error:\", e);\n            res.status(500).end(\"Token exchange failed\");\n        }\n    });\n}\n"],"names":["root","factory","exports","module","define","amd","this","require","getDefaultAuthParams","isBrowser","window","isTest","location","hostname","includes","params","scope","domain_hint","__awaiter","thisArg","_arguments","P","generator","Promise","resolve","reject","fulfilled","value","step","next","e","rejected","result","done","then","apply","getNextAuthOptions","config","name","domain","secure","nextAuthUrl","protocol","URL","prefix","tag","test","endsWith","parts","split","length","base","slice","join","replace","getTagAndDomain","getSessionCookieSettings","process","env","NEXTAUTH_URL","secret","nextAuthSecret","pages","signIn","providers","clientId","clientSecret","tenantId","authorization","cookies","sessionToken","options","path","httpOnly","sameSite","callbacks","_a","arguments","account","NEXT_PUBLIC_VERCEL_ENV","cca","ConfidentialClientApplication","auth","authority","accessToken","acquireTokenByRefreshToken","scopes","NEXT_PUBLIC_EMPLOYEES_API_SCOPE","refreshToken","refresh_token","fetch","NEXT_PUBLIC_EMPLOYEES_API_BASE_URL","headers","Authorization","status","jwt","token","access_token","expiresAt","expires_at","__webpack_module_cache__","__webpack_require__","moduleId","cachedModule","undefined","__webpack_modules__","n","getter","__esModule","d","a","definition","key","o","Object","defineProperty","enumerable","get","obj","prop","prototype","hasOwnProperty","call","r","Symbol","toStringTag","getServerToken","props","response","acquireTokenByClientCredential","map","catch","console","error","getAuth","context","authConfig","isAuthenticated","session","user","getServerSession","req","res","Routes","Token","end","body","refetchTokenResult","getToken","cookieName","accessTokenResult","json","expiresOn","Math","floor","getTime"],"sourceRoot":""}

package/lib/utils/cookies.d.ts

@@ -1,5 +0,0 @@
-export declare function getSessionCookieSettings(nextAuthUrl: string): {
-    name: string;
-    domain: string;
-    secure: boolean;
-};

package/lib/utils/params.d.ts

@@ -1 +0,0 @@
-export declare const getDefaultAuthParams: () => Record<string, string>;

package/lib/utils/types.d.ts

@@ -1,39 +0,0 @@
-import { Session } from "next-auth";
-import { NextAuthMiddlewareOptions } from "next-auth/middleware";
-import { ReactNode } from "react";
-export declare namespace Auth {
-    interface Config {
-        clientId: string;
-        clientSecret: string;
-        nextAuthSecret: string;
-        tenantId: string;
-    }
-    namespace Provider {
-        interface Props {
-            children: ReactNode;
-            enforceLogin?: boolean;
-            showPageLoader?: boolean;
-            session: Session;
-        }
-    }
-    namespace Authenticate {
-        interface Props {
-            children: ReactNode;
-            provider: string;
-            showPageLoader?: boolean;
-        }
-    }
-    namespace Middleware {
-        interface Builder {
-            middleware: import("next-auth/middleware").NextMiddlewareWithAuth;
-            config?: {
-                matcher: string[];
-            };
-        }
-        interface Props extends Omit<NextAuthMiddlewareOptions, "pages" | "callbacks"> {
-            matcher?: string[];
-            callbacks?: NextAuthMiddlewareOptions["callbacks"];
-            protectAllRoutes?: boolean;
-        }
-    }
-}