@snokam/auth 2.2.22 → 2.3.1

package/{lib/server.d.ts → src/server.tsx}

@@ -1,13 +1,16 @@
 import { getServerToken } from "./server/token";
+import { default as Routes } from "./options";
 import { default as Token } from "./server/handler";
 import { Auth } from "./utils/types";
+
 export { getServerToken };
 export { getServerSession } from "next-auth/next";
 export { getNextAuthOptions } from "./options";
 export { getAuth } from "./server/auth";
+
 export type { Auth };
-declare const _default: {
-    Routes: (config: Auth.Config) => any;
-    Token: typeof Token;
+
+export default {
+  Routes,
+  Token,
 };
-export default _default;

package/src/sso/exchange.ts

@@ -0,0 +1,64 @@
+import { createHash } from "node:crypto";
+import {
+  Configuration,
+  PlatformClient,
+  type TokenExchangeResult,
+} from "@snokam/platform-client";
+
+const EXPIRY_SKEW_SECONDS = 60;
+const MAX_ENTRIES = 500;
+
+const cache = new Map<string, TokenExchangeResult>();
+
+function platformBase(): string | null {
+  return (
+    process.env.NEXT_PUBLIC_PLATFORM_API_BASE_URL?.replace(/\/$/, "") ?? null
+  );
+}
+
+function keyFor(providerToken: string): string {
+  return createHash("sha256").update(providerToken).digest("base64url");
+}
+
+function isUsable(token: TokenExchangeResult, nowSeconds: number): boolean {
+  return token.expiresOn - EXPIRY_SKEW_SECONDS > nowSeconds;
+}
+
+function remember(key: string, token: TokenExchangeResult): void {
+  const now = Math.floor(Date.now() / 1000);
+  for (const [existing, value] of cache)
+    if (!isUsable(value, now)) cache.delete(existing);
+
+  while (cache.size >= MAX_ENTRIES) {
+    const oldest = cache.keys().next().value;
+    if (oldest === undefined) break;
+    cache.delete(oldest);
+  }
+
+  cache.set(key, token);
+}
+
+export async function exchangeSsoToken(
+  providerToken: string
+): Promise<TokenExchangeResult | null> {
+  const basePath = platformBase();
+  if (!basePath || !providerToken) return null;
+
+  const key = keyFor(providerToken);
+  const cached = cache.get(key);
+  if (cached && isUsable(cached, Math.floor(Date.now() / 1000))) return cached;
+  if (cached) cache.delete(key);
+
+  const client = new PlatformClient(new Configuration({ basePath }));
+  try {
+    const result = await client.ssoTokenExchange({
+      ssoExchangeRequest: { token: providerToken },
+    });
+    if (!result.accessToken) return null;
+    remember(key, result);
+    return result;
+  } catch (e) {
+    console.warn("sso exchange failed:", e);
+    return null;
+  }
+}

package/src/sso/tenant-cookie.ts

@@ -0,0 +1,18 @@
+export const SSO_TENANT_COOKIE = "snokam.sso_tenant";
+
+const DIRECTORY_ID =
+  /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
+
+export function rememberSsoTenant(directoryId: string): void {
+  if (!DIRECTORY_ID.test(directoryId)) return;
+  const secure = window.location.protocol === "https:" ? "; Secure" : "";
+  document.cookie = `${SSO_TENANT_COOKIE}=${directoryId}; Path=/; Max-Age=600; SameSite=Lax${secure}`;
+}
+
+export function ssoTenantFrom(cookieHeader: string | null): string | undefined {
+  const match = cookieHeader?.match(
+    new RegExp(`(?:^|;\\s*)${SSO_TENANT_COOKIE}=([^;]+)`)
+  );
+  const value = match ? decodeURIComponent(match[1]) : "";
+  return DIRECTORY_ID.test(value) ? value : undefined;
+}

package/src/theme/employee-theme-sync.tsx

@@ -0,0 +1,55 @@
+"use client";
+
+import { useEffect, useMemo, useRef } from "react";
+import { Configuration, EmployeesClient } from "@snokam/employees-client";
+import { useOptionalConfig } from "@snokam/config";
+import { useClientQuery } from "@snokam/react-query";
+import { useAdminTheme } from "@snokam/ui/theme/admin";
+import type { ColorSchemeMode } from "@snokam/ui/theme/admin";
+import { useAuth } from "../hooks";
+
+const MODES: ColorSchemeMode[] = ["system", "light", "dark"];
+
+function isMode(value: unknown): value is ColorSchemeMode {
+  return MODES.includes(value as ColorSchemeMode);
+}
+
+/**
+ * Seeds the page theme from the effective user's saved settings.colorScheme. The token handler
+ * swaps in the impersonation token during a view-as session, so /me is already the target's
+ * record and their theme applies without any impersonation-specific code here.
+ */
+export function EmployeeThemeSync() {
+  const { isAuthenticated, getToken } = useAuth();
+  const { setMode } = useAdminTheme();
+  const config = useOptionalConfig();
+  const seeded = useRef(false);
+
+  const basePath = config?.NEXT_PUBLIC_EMPLOYEES_API_BASE_URL;
+  const client = useMemo(
+    () =>
+      new EmployeesClient(
+        new Configuration({
+          basePath,
+          ...(isAuthenticated && { accessToken: () => getToken() }),
+        })
+      ),
+    [basePath, isAuthenticated, getToken]
+  );
+
+  // Same client name and param as every app's useEmployeesQuery, so this shares their cache entry.
+  const { data } = useClientQuery({
+    name: "Employees",
+    client,
+  }).useGetMeProtectedQuery({}, { enabled: isAuthenticated && !!basePath });
+
+  const saved = data?.settings?.colorScheme;
+
+  useEffect(() => {
+    if (seeded.current || !isMode(saved)) return;
+    seeded.current = true;
+    setMode(saved);
+  }, [saved, setMode]);
+
+  return null;
+}

package/src/token/claims.ts

@@ -0,0 +1,12 @@
+export function decodeJwtClaims<T = Record<string, unknown>>(
+  bearer: string
+): T | null {
+  const raw = bearer.startsWith("Bearer ") ? bearer.slice(7) : bearer;
+  const payload = raw.split(".")[1];
+  if (!payload) return null;
+  try {
+    return JSON.parse(atob(payload.replace(/-/g, "+").replace(/_/g, "/"))) as T;
+  } catch {
+    return null;
+  }
+}

package/src/utils/callback-url.ts

@@ -0,0 +1,17 @@
+const AUTH_FLOW = /\/auth\/complete|[?&]ticket=/;
+
+export function safeCallbackTarget(
+  raw: string | null | undefined,
+  base = "http://placeholder"
+): string {
+  if (!raw) return "/";
+  let target = raw;
+  for (let depth = 0; depth < 8 && AUTH_FLOW.test(target); depth++) {
+    try {
+      target = new URL(target, base).searchParams.get("callbackUrl") ?? "/";
+    } catch {
+      return "/";
+    }
+  }
+  return AUTH_FLOW.test(target) ? "/" : target;
+}

package/src/utils/consent.ts

@@ -0,0 +1,22 @@
+export interface AdminConsentParams {
+  clientId: string;
+  tenantId: string;
+  redirectUri: string;
+  state?: string;
+}
+
+export function buildAdminConsentUrl({
+  clientId,
+  tenantId,
+  redirectUri,
+  state,
+}: AdminConsentParams): string {
+  const query = new URLSearchParams({
+    client_id: clientId,
+    redirect_uri: redirectUri,
+  });
+  if (state) {
+    query.set("state", state);
+  }
+  return `https://login.microsoftonline.com/${tenantId || "organizations"}/adminconsent?${query.toString()}`;
+}

package/src/utils/cookies.ts

@@ -0,0 +1,75 @@
+export function resolveCookieDomain(
+  host: string | undefined
+): string | undefined {
+  const bareHost = (host ?? "").split(":")[0].toLowerCase();
+  if (!bareHost || bareHost === "localhost" || /^[\d.]+$/.test(bareHost)) {
+    return undefined;
+  }
+
+  const allow = (process.env.COOKIE_DOMAINS || "")
+    .split(",")
+    .map((c) => c.trim().replace(/^\./, ""))
+    .filter(Boolean);
+  const allowed = allow.find(
+    (base) => bareHost === base || bareHost.endsWith(`.${base}`)
+  );
+  if (allowed) return `.${allowed}`;
+
+  const platformZone = (process.env.NEXT_PUBLIC_PLATFORM_DOMAIN || "")
+    .replace(/^\./, "")
+    .toLowerCase();
+  if (
+    platformZone &&
+    (bareHost === platformZone || bareHost.endsWith(`.${platformZone}`))
+  ) {
+    return undefined;
+  }
+
+  const firstDot = bareHost.indexOf(".");
+  return firstDot > 0 ? `.${bareHost.slice(firstDot + 1)}` : undefined;
+}
+
+export function getSessionCookieSettings(nextAuthUrl: string) {
+  const cookieDomain = process.env.COOKIE_DOMAIN;
+  const cookieTag = process.env.COOKIE_TAG;
+
+  if (cookieTag) {
+    const reference = cookieDomain || nextAuthUrl;
+    const secure = !reference.includes("localhost");
+    const prefix = secure ? "__Secure-" : "";
+    return {
+      name: `${prefix}next-auth.${cookieTag}.session-token`,
+      domain: cookieDomain || undefined,
+      secure,
+    };
+  }
+
+  const { hostname, protocol } = new URL(nextAuthUrl);
+  const secure = protocol === "https:";
+  const prefix = secure ? "__Secure-" : "";
+
+  const getTagAndDomain = (): { tag: string; domain?: string } => {
+    if (hostname === "localhost" || /^[\d.]+$/.test(hostname)) {
+      return { tag: "local" };
+    }
+
+    if (hostname.endsWith(".vercel.app")) {
+      return { tag: "vercel" };
+    }
+
+    if (process.env.NEXT_PUBLIC_POOLED === "true") {
+      return { tag: hostname.replace(/\./g, "-") };
+    }
+
+    const parts = hostname.split(".");
+    if (parts.length >= 2) {
+      const base = parts.slice(-2).join(".");
+      return { tag: base.replace(/\./g, "-"), domain: `.${base}` };
+    }
+
+    return { tag: "host" };
+  };
+
+  const { tag, domain } = getTagAndDomain();
+  return { name: `${prefix}next-auth.${tag}.session-token`, domain, secure };
+}

package/src/utils/cors.ts

@@ -0,0 +1,68 @@
+import { NextResponse } from "next/server";
+import { Auth } from "./types";
+
+const DEFAULT_CORS_HEADERS = [
+  "X-CSRF-Token",
+  "X-Requested-With",
+  "Accept",
+  "Accept-Version",
+  "Content-Length",
+  "Content-MD5",
+  "Content-Type",
+  "Date",
+  "X-Api-Version",
+  "Authorization",
+  "Cookie",
+];
+
+export function isAllowedOrigin(
+  origin: string | null,
+  additionalOrigins: string[] = []
+): boolean {
+  if (!origin) return false;
+
+  try {
+    const url = new URL(origin);
+    if (url.hostname.endsWith(".snokam.no") || url.hostname === "snokam.no") {
+      return true;
+    }
+
+    if (url.hostname === "localhost" || url.hostname === "127.0.0.1") {
+      return true;
+    }
+
+    if (url.hostname.endsWith(".snosky.no") || url.hostname === "snosky.no") {
+      return true;
+    }
+
+    if (additionalOrigins.includes(origin)) {
+      return true;
+    }
+
+    return false;
+  } catch {
+    return false;
+  }
+}
+
+export function addCorsHeaders(
+  response: NextResponse,
+  origin: string | null,
+  corsOptions: Auth.Middleware.CorsOptions = {}
+): NextResponse {
+  const { additionalOrigins = [], additionalHeaders = [] } = corsOptions;
+
+  if (origin && isAllowedOrigin(origin, additionalOrigins)) {
+    response.headers.set("Access-Control-Allow-Origin", origin);
+    response.headers.set("Access-Control-Allow-Credentials", "true");
+    response.headers.set(
+      "Access-Control-Allow-Methods",
+      "GET,DELETE,PATCH,POST,PUT,OPTIONS"
+    );
+    response.headers.set(
+      "Access-Control-Allow-Headers",
+      [...DEFAULT_CORS_HEADERS, ...additionalHeaders].join(", ")
+    );
+  }
+  return response;
+}

package/src/utils/params.ts

@@ -0,0 +1,15 @@
+export const getDefaultAuthParams = (tenantId?: string) => {
+  const isBrowser = typeof window !== "undefined";
+  const isTest = isBrowser && window.location.hostname.includes("test.");
+  const multiTenant = tenantId === "organizations" || tenantId === "common";
+
+  const params: Record<string, string> = {
+    scope: `openid profile email offline_access https://graph.microsoft.com/User.Read`,
+  };
+
+  if (isBrowser && !multiTenant) {
+    params.domain_hint = isTest ? "test.snokam.no" : "snokam.no";
+  }
+
+  return params;
+};

package/src/utils/types.ts

@@ -0,0 +1,52 @@
+import { Session } from "next-auth";
+import { NextAuthMiddlewareOptions } from "next-auth/middleware";
+import { ReactNode } from "react";
+
+export namespace Auth {
+  export interface Config {
+    clientId: string;
+    clientSecret: string;
+    nextAuthSecret: string;
+    tenantId: string;
+    environment?: string;
+  }
+  export namespace Provider {
+    export interface Props {
+      children: ReactNode;
+      enforceLogin?: boolean;
+      showPageLoader?: boolean;
+      session?: Session | null;
+    }
+  }
+  export namespace Authenticate {
+    export interface Props {
+      children: ReactNode;
+      provider: string;
+      showPageLoader?: boolean;
+    }
+  }
+
+  export namespace Middleware {
+    export interface Builder {
+      proxy: import("next-auth/middleware").NextMiddlewareWithAuth;
+      config?: {
+        matcher: string[];
+      };
+    }
+    export interface CorsOptions {
+      additionalOrigins?: string[];
+      additionalHeaders?: string[];
+      enabled?: boolean;
+      allRoutes?: boolean;
+    }
+    export interface Props extends Omit<
+      NextAuthMiddlewareOptions,
+      "pages" | "callbacks"
+    > {
+      matcher?: string[];
+      callbacks?: NextAuthMiddlewareOptions["callbacks"];
+      protectAllRoutes?: boolean;
+      cors?: CorsOptions;
+    }
+  }
+}

package/src/utils/url.ts

@@ -0,0 +1,19 @@
+export function getAuthUrl(): string {
+  if (process.env.NEXTAUTH_URL) {
+    return process.env.NEXTAUTH_URL;
+  }
+
+  return "http://localhost:3000";
+}
+
+export function requestOrigin(request: Request): string {
+  const forwardedHost = request.headers.get("x-forwarded-host");
+  if (forwardedHost) {
+    const proto = request.headers.get("x-forwarded-proto") ?? "https";
+    return `${proto}://${forwardedHost.split(",")[0].trim()}`;
+  }
+  if (process.env.NEXTAUTH_URL) {
+    return process.env.NEXTAUTH_URL;
+  }
+  return new URL(request.url).origin;
+}

package/lib/components/Authenticate.d.ts

@@ -1,2 +0,0 @@
-import { Auth } from "../utils/types";
-export declare const Authenticate: import("react").MemoExoticComponent<(props: Auth.Authenticate.Props) => string | number | bigint | boolean | import("react/jsx-runtime").JSX.Element | Iterable<import("react").ReactNode> | Promise<string | number | bigint | boolean | import("react").ReactPortal | import("react").ReactElement<unknown, string | import("react").JSXElementConstructor<any>> | Iterable<import("react").ReactNode>>>;

package/lib/components/Authenticated.d.ts

@@ -1,6 +0,0 @@
-import { ReactNode } from "react";
-interface Props {
-    children: ReactNode;
-}
-export declare const Authenticated: ({ children }: Props) => ReactNode;
-export {};

package/lib/components/Error/index.d.ts

@@ -1,5 +0,0 @@
-export interface ErrorPageProps {
-    message?: string;
-}
-export declare const Error: ({ message }: ErrorPageProps) => import("react/jsx-runtime").JSX.Element;
-export default Error;

package/lib/components/Login.d.ts

@@ -1,2 +0,0 @@
-export declare const Login: () => import("react/jsx-runtime").JSX.Element;
-export default Login;

package/lib/components/Provider/index.d.ts

@@ -1,7 +0,0 @@
-import { ReactNode } from "react";
-import { Auth } from "../../utils/types";
-export declare const Provider: import("react").MemoExoticComponent<(props: Auth.Provider.Props) => import("react/jsx-runtime").JSX.Element>;
-export declare const Wrapper: ({ children }: {
-    children: ReactNode;
-}) => import("react/jsx-runtime").JSX.Element;
-export default Provider;

package/lib/components/Unauthenticated.d.ts

@@ -1,6 +0,0 @@
-import { ReactNode } from "react";
-interface Props {
-    children: ReactNode;
-}
-export declare const Unauthenticated: ({ children }: Props) => ReactNode;
-export {};

package/lib/hooks.d.ts

@@ -1,10 +0,0 @@
-import { signIn, signOut } from "next-auth/react";
-export declare function useAuth(): {
-    update: (data?: any) => Promise<import("next-auth").Session | null>;
-    signIn: typeof signIn;
-    signOut: typeof signOut;
-    session: import("next-auth").Session;
-    getToken: (scopes: string[]) => Promise<string>;
-    inProgress: boolean;
-    isAuthenticated: boolean;
-};

package/lib/index.d.ts

@@ -1,14 +0,0 @@
-import { Auth } from "./utils/types";
-export { Unauthenticated } from "./components/Unauthenticated";
-export { Authenticated } from "./components/Authenticated";
-export { useAuth } from "./hooks";
-export { default as middleware } from "next-auth/middleware";
-export { signIn } from "next-auth/react";
-declare const _default: {
-    Login: () => import("react/jsx-runtime").JSX.Element;
-    Error: ({ message }: import("./components/Error").ErrorPageProps) => import("react/jsx-runtime").JSX.Element;
-    Provider: import("react").MemoExoticComponent<(props: Auth.Provider.Props) => import("react/jsx-runtime").JSX.Element>;
-    Authenticate: import("react").MemoExoticComponent<(props: Auth.Authenticate.Props) => string | number | bigint | boolean | import("react/jsx-runtime").JSX.Element | Iterable<import("react").ReactNode> | Promise<string | number | bigint | boolean | import("react").ReactPortal | import("react").ReactElement<unknown, string | import("react").JSXElementConstructor<any>> | Iterable<import("react").ReactNode>>>;
-};
-export default _default;
-export type { Auth };

package/lib/index.js

@@ -1,42 +0,0 @@
-!function(e,n){"object"==typeof exports&&"object"==typeof module?module.exports=n():"function"==typeof define&&define.amd?define([],n):"object"==typeof exports?exports.snokam=n():e.snokam=n()}(this,(()=>(()=>{"use strict";var e={n:n=>{var t=n&&n.__esModule?()=>n.default:()=>n;return e.d(t,{a:t}),t},d:(n,t)=>{for(var r in t)e.o(t,r)&&!e.o(n,r)&&Object.defineProperty(n,r,{enumerable:!0,get:t[r]})},o:(e,n)=>Object.prototype.hasOwnProperty.call(e,n),r:e=>{"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})}},n={};e.r(n),e.d(n,{Authenticated:()=>L,Unauthenticated:()=>E,default:()=>T,middleware:()=>I(),signIn:()=>i.signIn,useAuth:()=>a});const t=require("react/jsx-runtime"),r=require("react"),o=require("next/router"),i=require("next-auth/react");var s=function(e,n,t,r){return new(t||(t=Promise))((function(o,i){function s(e){try{c(r.next(e))}catch(e){i(e)}}function a(e){try{c(r.throw(e))}catch(e){i(e)}}function c(e){var n;e.done?o(e.value):(n=e.value,n instanceof t?n:new t((function(e){e(n)}))).then(s,a)}c((r=r.apply(e,n||[])).next())}))};function a(){const{data:e,status:n,update:t}=(0,i.useSession)(),o=e=>s(this,void 0,void 0,(function*(){const n=e[0],t=yield fetch("/api/auth/token",{method:"POST",body:JSON.stringify({scope:n}),credentials:"include",headers:{"Content-Type":"application/json"}});if(!t.ok)throw new Error("Token fetch failed");const r=yield t.json(),{accessToken:o}=r;return`Bearer ${o}`}));return(0,r.useMemo)((()=>({update:t,signIn:i.signIn,signOut:i.signOut,session:e,getToken:e=>o(e).catch((e=>{console.error(e),window.location.href="/auth/login?error=true"})),inProgress:"loading"===n,isAuthenticated:"authenticated"===n})),[t,o,n,e,i.signIn,i.signOut])}const c=require("@snokam/core"),l=(0,r.memo)((e=>{const{children:n,provider:o}=e,{inProgress:s,isAuthenticated:l}=a();return(0,r.useEffect)((()=>{s||l||(0,i.signIn)(o)}),[s,l]),l?n:(0,t.jsx)(c.PageLoader,{})})),u=(0,r.memo)((e=>{const{session:n,children:r,enforceLogin:s}=e,a=(0,o.useRouter)(),c=null==a?void 0:a.query;return(null==c?void 0:c.enforceLogin)||s?(0,t.jsx)(i.SessionProvider,{session:n,children:(0,t.jsx)(l,Object.assign({provider:"azure-ad"},e,{children:r}))}):(0,t.jsx)(i.SessionProvider,{session:n,children:(0,t.jsx)(d,{children:r})})})),d=({children:e})=>{var n;const{signOut:i}=a(),s=(0,o.useRouter)();return(0,r.useEffect)((()=>{var e;"true"===(null===(e=null==s?void 0:s.query)||void 0===e?void 0:e.logout)&&i({callbackUrl:"/auth/login?callbackUrl=/"})}),[null===(n=null==s?void 0:s.query)||void 0===n?void 0:n.logout]),(0,t.jsx)(t.Fragment,{children:e})},g=require("@emotion/styled");var h=e.n(g);const m=require("@snokam/core/layout");var f=e.n(m);const p=h()(f().Container)`
-  flex: 1;
-  justify-content: center;
-`,x=h().div`
-  display: flex;
-  flex-direction: column;
-  gap: 1.5rem;
-  align-items: center;
-  width: 100%;
-  max-width: 600px;
-  padding: 2rem;
-  background-color: var(--color-dark-green);
-  border-radius: 1rem;
-  box-shadow: 0 4px 10px rgba(0, 0, 0, 0.9);
-`,v=h().h1`
-  font-size: 2rem;
-  font-weight: 600;
-  margin: 0;
-`,y=h().img`
-  width: 200px;
-  max-width: 100%;
-  height: auto;
-`,j=h().a`
-  text-decoration: underline;
-  color: inherit;
-`,b=h()(f().Section)`
-  display: flex;
-  justify-content: center;
-  align-items: center;
-  color: var(--color-light-blue);
-`,k={Container:p,Wrapper:x,Heading:v,Illustration:y,Description:h().div`
-  display: flex;
-  font-size: 1.15rem;
-  text-align: center;
-`,Section:b,Link:j,User:h().div`
-  display: flex;
-  align-items: center;
-  font-size: 1rem;
-  margin-top: 1rem;
-  gap: 1rem;
-`},w=require("@mui/material/Button");var S=e.n(w);const P=require("@mui/material"),O=({message:e})=>{const{session:n,signOut:r}=a(),o="production"===process.env.NEXT_PUBLIC_VERCEL_ENV;return(0,t.jsx)(k.Container,{transitions:{bottom:{type:m.TransitionType.Wave}},children:(0,t.jsx)(c.Layout.Content,{children:(0,t.jsx)(k.Section,{children:(0,t.jsxs)(k.Wrapper,{children:[(0,t.jsx)(k.Heading,{children:"Oops! Noe gikk galt."}),(0,t.jsx)(k.Illustration,{src:"https://ressurser.snokam.no/figures/snowman.svg",alt:"Feil illustrasjon"}),(0,t.jsx)(k.Description,{children:null!=e?e:(0,t.jsxs)(t.Fragment,{children:["En uventet feil har oppstått.",(0,t.jsx)("br",{}),"Prøv igjen, eller logg inn på nytt."]})}),n&&(0,t.jsxs)(k.User,{children:[(0,t.jsx)(P.Avatar,{src:n.user.image}),"Logget inn som: ",n.user.name,(0,t.jsx)("br",{}),"(",n.user.email,")"]}),!o&&(0,t.jsxs)(P.Alert,{severity:"warning",children:["Du er i test! Husk at det kun er mulig å logge inn ",(0,t.jsx)("br",{}),"med en av våre testbrukere som du finner i 1Password."]}),(0,t.jsx)(S(),{sx:{mt:3},color:"secondary",variant:"contained",onClick:()=>{r({callbackUrl:"/auth/login?callbackUrl=/&prompt=login"})},children:"Logg inn på nytt"})]})})})})},q=O,E=({children:e})=>{const{status:n}=(0,i.useSession)();return"unauthenticated"===n?e:null},L=({children:e})=>{const{status:n}=(0,i.useSession)();return"authenticated"===n?e:null},U=require("next-auth/middleware");var I=e.n(U);const T={Login:()=>{const{isAuthenticated:e}=a(),[n,s]=(0,r.useState)(null),[l,u]=(0,r.useState)({}),[d,g]=(0,r.useState)(!1),h=(0,o.useRouter)();return(0,r.useEffect)((()=>{const e=new URLSearchParams(window.location.search);s(e.get("callbackUrl")),g(!!e.get("error"));const n={};e.forEach(((e,t)=>{"error"!==t&&"callbackUrl"!==t&&(n[t]=e)})),u(n)}),[]),(0,r.useEffect)((()=>{n&&(e?h.replace("/"):(0,i.signIn)("azure-ad",{callbackUrl:n},l))}),[e,n,l]),d?(0,t.jsx)(q,{}):(0,t.jsx)(c.PageLoader,{})},Error:O,Provider:u,Authenticate:l};return n})()));
-//# sourceMappingURL=index.js.map

package/lib/index.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.js","mappings":"CAAA,SAA2CA,EAAMC,GAC1B,iBAAZC,SAA0C,iBAAXC,OACxCA,OAAOD,QAAUD,IACQ,mBAAXG,QAAyBA,OAAOC,IAC9CD,OAAO,GAAIH,GACe,iBAAZC,QACdA,QAAgB,OAAID,IAEpBD,EAAa,OAAIC,GAClB,CATD,CASGK,MAAM,I,mBCRT,IAAIC,EAAsB,CCA1BA,EAAyBJ,IACxB,IAAIK,EAASL,GAAUA,EAAOM,WAC7B,IAAON,EAAiB,QACxB,IAAM,EAEP,OADAI,EAAoBG,EAAEF,EAAQ,CAAEG,EAAGH,IAC5BA,CAAM,ECLdD,EAAwB,CAACL,EAASU,KACjC,IAAI,IAAIC,KAAOD,EACXL,EAAoBO,EAAEF,EAAYC,KAASN,EAAoBO,EAAEZ,EAASW,IAC5EE,OAAOC,eAAed,EAASW,EAAK,CAAEI,YAAY,EAAMC,IAAKN,EAAWC,IAE1E,ECNDN,EAAwB,CAACY,EAAKC,IAAUL,OAAOM,UAAUC,eAAeC,KAAKJ,EAAKC,GCClFb,EAAyBL,IACH,oBAAXsB,QAA0BA,OAAOC,aAC1CV,OAAOC,eAAed,EAASsB,OAAOC,YAAa,CAAEC,MAAO,WAE7DX,OAAOC,eAAed,EAAS,aAAc,CAAEwB,OAAO,GAAO,G,kICL9D,MAAM,EAA+BC,QAAQ,qBCAvC,EAA+BA,QAAQ,SCAvC,EAA+BA,QAAQ,eCAvC,EAA+BA,QAAQ,mBCA7C,IAAIC,EAAwC,SAAUC,EAASC,EAAYC,EAAGC,GAE1E,OAAO,IAAKD,IAAMA,EAAIE,WAAU,SAAUC,EAASC,GAC/C,SAASC,EAAUV,GAAS,IAAMW,EAAKL,EAAUM,KAAKZ,GAAS,CAAE,MAAOa,GAAKJ,EAAOI,EAAI,CAAE,CAC1F,SAASC,EAASd,GAAS,IAAMW,EAAKL,EAAiB,MAAEN,GAAS,CAAE,MAAOa,GAAKJ,EAAOI,EAAI,CAAE,CAC7F,SAASF,EAAKI,GAJlB,IAAef,EAIae,EAAOC,KAAOR,EAAQO,EAAOf,QAJ1CA,EAIyDe,EAAOf,MAJhDA,aAAiBK,EAAIL,EAAQ,IAAIK,GAAE,SAAUG,GAAWA,EAAQR,EAAQ,KAIjBiB,KAAKP,EAAWI,EAAW,CAC7GH,GAAML,EAAYA,EAAUY,MAAMf,EAASC,GAAc,KAAKQ,OAClE,GACJ,EAGO,SAASO,IACZ,MAAQC,KAAMC,EAAO,OAAEC,EAAM,OAAEC,IAAW,IAAAC,cACpCC,EAAYC,GAAWxB,EAAUtB,UAAM,OAAQ,GAAQ,YACzD,MAAM+C,EAAQD,EAAO,GACfE,QAAYC,MAAM,kBAAmB,CACvCC,OAAQ,OACRC,KAAMC,KAAKC,UAAU,CAAEN,UACvBO,YAAa,UACbC,QAAS,CACL,eAAgB,sBAGxB,IAAKP,EAAIQ,GACL,MAAM,IAAIC,MAAM,sBAEpB,MAAMC,QAAcV,EAAIW,QAClB,YAAEC,GAAgBF,EACxB,MAAO,UAAUE,GACrB,IAaA,OAZc,IAAAC,UAAQ,KAAM,CACxBlB,SACAmB,OAAM,SACNC,QAAO,UACPtB,UACAI,SAAWC,GAAWD,EAASC,GAAQkB,OAAOC,IAC1CC,QAAQD,MAAMA,GACdE,OAAOC,SAASC,KAAO,wBAAwB,IAEnDC,WAAuB,YAAX5B,EACZ6B,gBAA4B,kBAAX7B,KACjB,CAACC,EAAQE,EAAUH,EAAQD,EAAS,EAAAqB,OAAQ,EAAAC,SAEpD,CC3CA,MAAM,EAA+B1C,QAAQ,gBCKhCmD,GAAe,IAAAC,OAAMC,IAC9B,MAAM,SAAEC,EAAQ,SAAEC,GAAaF,GACzB,WAAEJ,EAAU,gBAAEC,GAAoBhC,IAMxC,OALA,IAAAsC,YAAU,KACDP,GAAeC,IAChB,IAAAT,QAAOc,EACX,GACD,CAACN,EAAYC,IACXA,EAGEI,GAFI,SAAK,EAAAG,WAAY,CAAC,EAEd,ICVNC,GAAW,IAAAN,OAAMC,IAC1B,MAAM,QAAEjC,EAAO,SAAEkC,EAAQ,aAAEK,GAAiBN,EACtCO,GAAS,IAAAC,aACTC,EAAQF,aAAuC,EAASA,EAAOE,MACrE,OAAKA,aAAqC,EAASA,EAAMH,eAAiBA,GAC9D,SAAK,EAAAI,gBAAiB,CAAE3C,QAASA,EAASkC,UAAU,SAAKH,EAAc/D,OAAO4E,OAAO,CAAET,SAAU,YAAcF,EAAO,CAAEC,SAAUA,QAEtI,SAAK,EAAAS,gBAAiB,CAAE3C,QAASA,EAASkC,UAAU,SAAKW,EAAS,CAAEX,SAAUA,KAAe,IAE5FW,EAAU,EAAGX,eACtB,IAAIY,EACJ,MAAM,QAAExB,GAAYxB,IACd0C,GAAS,IAAAC,aASf,OARA,IAAAL,YAAU,KACN,IAAIU,EACyH,UAAhD,QAAvEA,EAAKN,aAAuC,EAASA,EAAOE,aAA0B,IAAPI,OAAgB,EAASA,EAAGC,SAC7GzB,EAAQ,CACJ0B,YAAa,6BAErB,GACD,CAAyE,QAAvEF,EAAKN,aAAuC,EAASA,EAAOE,aAA0B,IAAPI,OAAgB,EAASA,EAAGC,UACzG,SAAK,WAAW,CAAEb,SAAUA,GAAW,EC3B5C,EAA+BtD,QAAQ,mB,aCA7C,MAAM,EAA+BA,QAAQ,uB,aCE7C,MAAMqE,EAAY,IAAO,cAAkB;;;EAIrC,EAAU,OAAW;;;;;;;;;;;EAYrBC,EAAU,MAAU;;;;EAKpBC,EAAe,OAAW;;;;EAK1BC,EAAO,KAAS;;;EAIhBC,EAAU,IAAO,YAAgB;;;;;EAkBvC,GACIJ,YACAJ,QAAO,EACPK,UACAC,eACAG,YAjBgB,OAAW;;;;EAkB3BD,UACAD,OACAG,KAfS,OAAW;;;;;;GC3ClB,EAA+B3E,QAAQ,wB,aCA7C,MAAM,EAA+BA,QAAQ,iBCOhC,EAAQ,EAAG4E,cACpB,MAAM,QAAExD,EAAO,QAAEsB,GAAYxB,IACvB2D,EAAgD,eAAvCC,QAAQC,IAAIC,uBAC3B,OAAQ,SAAK,EAAOX,UAAW,CAAEY,YAAa,CACtCC,OAAQ,CACJC,KAAM,EAAAC,eAAeC,OAE1B/B,UAAU,SAAK,EAAAgC,OAAOC,QAAS,CAAEjC,UAAU,SAAK,EAAOmB,QAAS,CAAEnB,UAAU,UAAM,EAAOW,QAAS,CAAEX,SAAU,EAAC,SAAK,EAAOgB,QAAS,CAAEhB,SAAU,0BAA2B,SAAK,EAAOiB,aAAc,CAAEiB,IAAK,kDAAmDC,IAAK,uBAAwB,SAAK,EAAOf,YAAa,CAAEpB,SAAUsB,QAAyCA,GAAW,UAAM,WAAW,CAAEtB,SAAU,CAAC,iCAAsC,SAAK,KAAM,CAAC,GAAI,2CAAyDlC,IAAY,UAAM,EAAOuD,KAAM,CAAErB,SAAU,EAAC,SAAK,EAAAoC,OAAQ,CAAEF,IAAKpE,EAAQuE,KAAKC,QAAU,mBAAoBxE,EAAQuE,KAAKE,MAAM,SAAK,KAAM,CAAC,GAAI,IAAKzE,EAAQuE,KAAKG,MAAO,QAAWjB,IAAW,UAAM,EAAAkB,MAAO,CAAEC,SAAU,UAAW1C,SAAU,CAAC,uDAA4D,SAAK,KAAM,CAAC,GAAI,4DAAmE,SAAK,IAAQ,CAAE2C,GAAI,CAAEC,GAAI,GAAKC,MAAO,YAAaC,QAAS,YAAaC,QAAS,KACz7B3D,EAAQ,CACJ0B,YAAa,0CACf,EACHd,SAAU,6BAAwC,EAEjF,ICnBagD,EAAkB,EAAGhD,eAC9B,MAAM,OAAEjC,IAAW,IAAAE,cACnB,MAAkB,oBAAXF,EAA+BiC,EAAW,IAAI,ECF5CiD,EAAgB,EAAGjD,eAC5B,MAAM,OAAEjC,IAAW,IAAAE,cACnB,MAAkB,kBAAXF,EAA6BiC,EAAW,IAAI,ECHjD,EAA+BtD,QAAQ,wB,aCS7C,SACIwG,MCHiB,KACjB,MAAM,gBAAEtD,GAAoBhC,KACrBkD,EAAaqC,IAAkB,IAAAC,UAAS,OACxCC,EAAYC,IAAiB,IAAAF,UAAS,CAAC,IACvCG,EAASC,IAAc,IAAAJ,WAAS,GACjC9C,GAAS,IAAAC,aAuBf,OAtBA,IAAAL,YAAU,KACN,MAAMuD,EAAS,IAAIC,gBAAgBlE,OAAOC,SAASkE,QACnDR,EAAeM,EAAOxH,IAAI,gBAC1BuH,IAAaC,EAAOxH,IAAI,UACxB,MAAM2H,EAAgB,CAAC,EACvBH,EAAOI,SAAQ,CAACpH,EAAOb,KACP,UAARA,GAA2B,gBAARA,IACnBgI,EAAchI,GAAOa,EACzB,IAEJ6G,EAAcM,EAAc,GAC7B,KACH,IAAA1D,YAAU,KACDY,IAEDlB,EACAU,EAAOwD,QAAQ,MAGf,IAAA3E,QAAO,WAAY,CAAE2B,eAAeuC,GACxC,GACD,CAACzD,EAAiBkB,EAAauC,IAC9BE,GACO,SAAK,EAAO,CAAC,IAEjB,SAAK,EAAApD,WAAY,CAAC,EAAE,ED3B3BrB,MAAK,EACLsB,SAAQ,EACRP,aAAY,G","sources":["webpack://snokam/webpack/universalModuleDefinition","webpack://snokam/webpack/bootstrap","webpack://snokam/webpack/runtime/compat get default export","webpack://snokam/webpack/runtime/define property getters","webpack://snokam/webpack/runtime/hasOwnProperty shorthand","webpack://snokam/webpack/runtime/make namespace object","webpack://snokam/external commonjs \"react/jsx-runtime\"","webpack://snokam/external commonjs \"react\"","webpack://snokam/external commonjs \"next/router\"","webpack://snokam/external commonjs \"next-auth/react\"","webpack://snokam/./src/hooks.ts","webpack://snokam/external commonjs \"@snokam/core\"","webpack://snokam/./src/components/Authenticate.tsx","webpack://snokam/./src/components/Provider/index.tsx","webpack://snokam/external commonjs \"@emotion/styled\"","webpack://snokam/external commonjs \"@snokam/core/layout\"","webpack://snokam/./src/components/Error/styled.tsx","webpack://snokam/external commonjs \"@mui/material/Button\"","webpack://snokam/external commonjs \"@mui/material\"","webpack://snokam/./src/components/Error/index.tsx","webpack://snokam/./src/components/Unauthenticated.tsx","webpack://snokam/./src/components/Authenticated.tsx","webpack://snokam/external commonjs \"next-auth/middleware\"","webpack://snokam/./src/index.tsx","webpack://snokam/./src/components/Login.tsx"],"sourcesContent":["(function webpackUniversalModuleDefinition(root, factory) {\n\tif(typeof exports === 'object' && typeof module === 'object')\n\t\tmodule.exports = factory();\n\telse if(typeof define === 'function' && define.amd)\n\t\tdefine([], factory);\n\telse if(typeof exports === 'object')\n\t\texports[\"snokam\"] = factory();\n\telse\n\t\troot[\"snokam\"] = factory();\n})(this, () => {\nreturn ","// The require scope\nvar __webpack_require__ = {};\n\n","// getDefaultExport function for compatibility with non-harmony modules\n__webpack_require__.n = (module) => {\n\tvar getter = module && module.__esModule ?\n\t\t() => (module['default']) :\n\t\t() => (module);\n\t__webpack_require__.d(getter, { a: getter });\n\treturn getter;\n};","// define getter functions for harmony exports\n__webpack_require__.d = (exports, definition) => {\n\tfor(var key in definition) {\n\t\tif(__webpack_require__.o(definition, key) && !__webpack_require__.o(exports, key)) {\n\t\t\tObject.defineProperty(exports, key, { enumerable: true, get: definition[key] });\n\t\t}\n\t}\n};","__webpack_require__.o = (obj, prop) => (Object.prototype.hasOwnProperty.call(obj, prop))","// define __esModule on exports\n__webpack_require__.r = (exports) => {\n\tif(typeof Symbol !== 'undefined' && Symbol.toStringTag) {\n\t\tObject.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });\n\t}\n\tObject.defineProperty(exports, '__esModule', { value: true });\n};","const __WEBPACK_NAMESPACE_OBJECT__ = require(\"react/jsx-runtime\");","const __WEBPACK_NAMESPACE_OBJECT__ = require(\"react\");","const __WEBPACK_NAMESPACE_OBJECT__ = require(\"next/router\");","const __WEBPACK_NAMESPACE_OBJECT__ = require(\"next-auth/react\");","var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {\n    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }\n    return new (P || (P = Promise))(function (resolve, reject) {\n        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }\n        function rejected(value) { try { step(generator[\"throw\"](value)); } catch (e) { reject(e); } }\n        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }\n        step((generator = generator.apply(thisArg, _arguments || [])).next());\n    });\n};\nimport { useSession, signIn, signOut } from \"next-auth/react\";\nimport { useMemo } from \"react\";\nexport function useAuth() {\n    const { data: session, status, update } = useSession();\n    const getToken = (scopes) => __awaiter(this, void 0, void 0, function* () {\n        const scope = scopes[0];\n        const res = yield fetch(\"/api/auth/token\", {\n            method: \"POST\",\n            body: JSON.stringify({ scope }),\n            credentials: \"include\",\n            headers: {\n                \"Content-Type\": \"application/json\",\n            },\n        });\n        if (!res.ok) {\n            throw new Error(\"Token fetch failed\");\n        }\n        const token = yield res.json();\n        const { accessToken } = token;\n        return `Bearer ${accessToken}`;\n    });\n    const value = useMemo(() => ({\n        update,\n        signIn,\n        signOut,\n        session,\n        getToken: (scopes) => getToken(scopes).catch((error) => {\n            console.error(error);\n            window.location.href = \"/auth/login?error=true\";\n        }),\n        inProgress: status === \"loading\",\n        isAuthenticated: status === \"authenticated\",\n    }), [update, getToken, status, session, signIn, signOut]);\n    return value;\n}\n","const __WEBPACK_NAMESPACE_OBJECT__ = require(\"@snokam/core\");","import { jsx as _jsx } from \"react/jsx-runtime\";\nimport { memo, useEffect } from \"react\";\nimport { signIn } from \"next-auth/react\";\nimport { useAuth } from \"../hooks\";\nimport { PageLoader } from \"@snokam/core\";\nexport const Authenticate = memo((props) => {\n    const { children, provider } = props;\n    const { inProgress, isAuthenticated } = useAuth();\n    useEffect(() => {\n        if (!inProgress && !isAuthenticated) {\n            signIn(provider);\n        }\n    }, [inProgress, isAuthenticated]);\n    if (!isAuthenticated) {\n        return _jsx(PageLoader, {});\n    }\n    return children;\n});\n","import { jsx as _jsx, Fragment as _Fragment } from \"react/jsx-runtime\";\nimport { memo, useEffect } from \"react\";\nimport { useRouter } from \"next/router\";\nimport { Authenticate } from \"../Authenticate\";\nimport { SessionProvider } from \"next-auth/react\";\nimport { useAuth } from \"../../hooks\";\nexport const Provider = memo((props) => {\n    const { session, children, enforceLogin } = props;\n    const router = useRouter();\n    const query = router === null || router === void 0 ? void 0 : router.query;\n    if ((query === null || query === void 0 ? void 0 : query.enforceLogin) || enforceLogin) {\n        return (_jsx(SessionProvider, { session: session, children: _jsx(Authenticate, Object.assign({ provider: \"azure-ad\" }, props, { children: children })) }));\n    }\n    return (_jsx(SessionProvider, { session: session, children: _jsx(Wrapper, { children: children }) }));\n});\nexport const Wrapper = ({ children }) => {\n    var _a;\n    const { signOut } = useAuth();\n    const router = useRouter();\n    useEffect(() => {\n        var _a;\n        if (((_a = router === null || router === void 0 ? void 0 : router.query) === null || _a === void 0 ? void 0 : _a.logout) === \"true\") {\n            signOut({\n                callbackUrl: \"/auth/login?callbackUrl=/\",\n            });\n        }\n    }, [(_a = router === null || router === void 0 ? void 0 : router.query) === null || _a === void 0 ? void 0 : _a.logout]);\n    return _jsx(_Fragment, { children: children });\n};\nexport default Provider;\n","const __WEBPACK_NAMESPACE_OBJECT__ = require(\"@emotion/styled\");","const __WEBPACK_NAMESPACE_OBJECT__ = require(\"@snokam/core/layout\");","import styled from \"@emotion/styled\";\nimport Layout from \"@snokam/core/layout\";\nconst Container = styled(Layout.Container) `\n  flex: 1;\n  justify-content: center;\n`;\nconst Wrapper = styled.div `\n  display: flex;\n  flex-direction: column;\n  gap: 1.5rem;\n  align-items: center;\n  width: 100%;\n  max-width: 600px;\n  padding: 2rem;\n  background-color: var(--color-dark-green);\n  border-radius: 1rem;\n  box-shadow: 0 4px 10px rgba(0, 0, 0, 0.9);\n`;\nconst Heading = styled.h1 `\n  font-size: 2rem;\n  font-weight: 600;\n  margin: 0;\n`;\nconst Illustration = styled.img `\n  width: 200px;\n  max-width: 100%;\n  height: auto;\n`;\nconst Link = styled.a `\n  text-decoration: underline;\n  color: inherit;\n`;\nconst Section = styled(Layout.Section) `\n  display: flex;\n  justify-content: center;\n  align-items: center;\n  color: var(--color-light-blue);\n`;\nconst Description = styled.div `\n  display: flex;\n  font-size: 1.15rem;\n  text-align: center;\n`;\nconst User = styled.div `\n  display: flex;\n  align-items: center;\n  font-size: 1rem;\n  margin-top: 1rem;\n  gap: 1rem;\n`;\nexport default {\n    Container,\n    Wrapper,\n    Heading,\n    Illustration,\n    Description,\n    Section,\n    Link,\n    User,\n};\n","const __WEBPACK_NAMESPACE_OBJECT__ = require(\"@mui/material/Button\");","const __WEBPACK_NAMESPACE_OBJECT__ = require(\"@mui/material\");","import { jsx as _jsx, Fragment as _Fragment, jsxs as _jsxs } from \"react/jsx-runtime\";\nimport Styled from \"./styled\";\nimport { Layout } from \"@snokam/core\";\nimport { TransitionType } from \"@snokam/core/layout\";\nimport { useAuth } from \"../../hooks\";\nimport Button from \"@mui/material/Button\";\nimport { Avatar, Alert } from \"@mui/material\";\nexport const Error = ({ message }) => {\n    const { session, signOut } = useAuth();\n    const isProd = process.env.NEXT_PUBLIC_VERCEL_ENV === \"production\";\n    return (_jsx(Styled.Container, { transitions: {\n            bottom: {\n                type: TransitionType.Wave,\n            },\n        }, children: _jsx(Layout.Content, { children: _jsx(Styled.Section, { children: _jsxs(Styled.Wrapper, { children: [_jsx(Styled.Heading, { children: \"Oops! Noe gikk galt.\" }), _jsx(Styled.Illustration, { src: \"https://ressurser.snokam.no/figures/snowman.svg\", alt: \"Feil illustrasjon\" }), _jsx(Styled.Description, { children: message !== null && message !== void 0 ? message : (_jsxs(_Fragment, { children: [\"En uventet feil har oppst\\u00E5tt.\", _jsx(\"br\", {}), \"Pr\\u00F8v igjen, eller logg inn p\\u00E5 nytt.\"] })) }), session && (_jsxs(Styled.User, { children: [_jsx(Avatar, { src: session.user.image }), \"Logget inn som: \", session.user.name, _jsx(\"br\", {}), \"(\", session.user.email, \")\"] })), !isProd && (_jsxs(Alert, { severity: \"warning\", children: [\"Du er i test! Husk at det kun er mulig \\u00E5 logge inn \", _jsx(\"br\", {}), \"med en av v\\u00E5re testbrukere som du finner i 1Password.\"] })), _jsx(Button, { sx: { mt: 3 }, color: \"secondary\", variant: \"contained\", onClick: () => {\n                                signOut({\n                                    callbackUrl: \"/auth/login?callbackUrl=/&prompt=login\",\n                                });\n                            }, children: \"Logg inn p\\u00E5 nytt\" })] }) }) }) }));\n};\nexport default Error;\n","import { useSession } from \"next-auth/react\";\nexport const Unauthenticated = ({ children }) => {\n    const { status } = useSession();\n    return status === \"unauthenticated\" ? children : null;\n};\n","import { useSession } from \"next-auth/react\";\nexport const Authenticated = ({ children }) => {\n    const { status } = useSession();\n    return status === \"authenticated\" ? children : null;\n};\n","const __WEBPACK_NAMESPACE_OBJECT__ = require(\"next-auth/middleware\");","import { Provider } from \"./components/Provider\";\nimport { Authenticate } from \"./components/Authenticate\";\nimport { Login } from \"./components/Login\";\nimport { Error } from \"./components/Error\";\nexport { Unauthenticated } from \"./components/Unauthenticated\";\nexport { Authenticated } from \"./components/Authenticated\";\nexport { useAuth } from \"./hooks\";\nexport { default as middleware } from \"next-auth/middleware\";\nexport { signIn } from \"next-auth/react\";\nexport default {\n    Login,\n    Error,\n    Provider,\n    Authenticate,\n};\n","import { jsx as _jsx } from \"react/jsx-runtime\";\nimport { useEffect, useState } from \"react\";\nimport { useRouter } from \"next/router\";\nimport { useAuth } from \"../hooks\";\nimport { signIn } from \"next-auth/react\";\nimport { PageLoader } from \"@snokam/core\";\nimport Error from \"./Error\";\nexport const Login = () => {\n    const { isAuthenticated } = useAuth();\n    const [callbackUrl, setCallbackUrl] = useState(null);\n    const [authParams, setAuthParams] = useState({});\n    const [isError, setIsError] = useState(false);\n    const router = useRouter();\n    useEffect(() => {\n        const params = new URLSearchParams(window.location.search);\n        setCallbackUrl(params.get(\"callbackUrl\"));\n        setIsError(!!params.get(\"error\"));\n        const authParamsObj = {};\n        params.forEach((value, key) => {\n            if (key !== \"error\" && key !== \"callbackUrl\") {\n                authParamsObj[key] = value;\n            }\n        });\n        setAuthParams(authParamsObj);\n    }, []);\n    useEffect(() => {\n        if (!callbackUrl)\n            return;\n        if (isAuthenticated) {\n            router.replace(\"/\");\n        }\n        else {\n            signIn(\"azure-ad\", { callbackUrl }, authParams);\n        }\n    }, [isAuthenticated, callbackUrl, authParams]);\n    if (isError) {\n        return _jsx(Error, {});\n    }\n    return _jsx(PageLoader, {});\n};\nexport default Login;\n"],"names":["root","factory","exports","module","define","amd","this","__webpack_require__","getter","__esModule","d","a","definition","key","o","Object","defineProperty","enumerable","get","obj","prop","prototype","hasOwnProperty","call","Symbol","toStringTag","value","require","__awaiter","thisArg","_arguments","P","generator","Promise","resolve","reject","fulfilled","step","next","e","rejected","result","done","then","apply","useAuth","data","session","status","update","useSession","getToken","scopes","scope","res","fetch","method","body","JSON","stringify","credentials","headers","ok","Error","token","json","accessToken","useMemo","signIn","signOut","catch","error","console","window","location","href","inProgress","isAuthenticated","Authenticate","memo","props","children","provider","useEffect","PageLoader","Provider","enforceLogin","router","useRouter","query","SessionProvider","assign","Wrapper","_a","logout","callbackUrl","Container","Heading","Illustration","Link","Section","Description","User","message","isProd","process","env","NEXT_PUBLIC_VERCEL_ENV","transitions","bottom","type","TransitionType","Wave","Layout","Content","src","alt","Avatar","user","image","name","email","Alert","severity","sx","mt","color","variant","onClick","Unauthenticated","Authenticated","Login","setCallbackUrl","useState","authParams","setAuthParams","isError","setIsError","params","URLSearchParams","search","authParamsObj","forEach","replace"],"sourceRoot":""}

package/lib/middleware.d.ts

@@ -1,7 +0,0 @@
-import { Auth } from "./utils/types";
-export declare function buildAuthMiddleware({ matcher, callbacks, protectAllRoutes, ...rest }?: Auth.Middleware.Props): Auth.Middleware.Builder;
-declare const middleware: import("next-auth/middleware").NextMiddlewareWithAuth, config: {
-    matcher: string[];
-};
-export { config };
-export default middleware;

package/lib/middleware.js

@@ -1,2 +0,0 @@
-!function(t,e){"object"==typeof exports&&"object"==typeof module?module.exports=e():"function"==typeof define&&define.amd?define([],e):"object"==typeof exports?exports.snokam=e():t.snokam=e()}(this,(()=>(()=>{"use strict";var t={d:(e,n)=>{for(var o in n)t.o(n,o)&&!t.o(e,o)&&Object.defineProperty(e,o,{enumerable:!0,get:n[o]})},o:(t,e)=>Object.prototype.hasOwnProperty.call(t,e),r:t=>{"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(t,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(t,"__esModule",{value:!0})}},e={};t.r(e),t.d(e,{buildAuthMiddleware:()=>i,config:()=>c,default:()=>l});const n=require("path-to-regexp"),o=require("next-auth/middleware");var r=function(t,e){var n={};for(var o in t)Object.prototype.hasOwnProperty.call(t,o)&&e.indexOf(o)<0&&(n[o]=t[o]);if(null!=t&&"function"==typeof Object.getOwnPropertySymbols){var r=0;for(o=Object.getOwnPropertySymbols(t);r<o.length;r++)e.indexOf(o[r])<0&&Object.prototype.propertyIsEnumerable.call(t,o[r])&&(n[o[r]]=t[o[r]])}return n};const a=["/((?!api/healthy|api/ready|_next/static|_next/image|favicon.ico|.*\\..*).*)"];function i(t={}){var e,{matcher:i=[],callbacks:s={},protectAllRoutes:c}=t,l=r(t,["matcher","callbacks","protectAllRoutes"]);const u="preview"===process.env.NEXT_PUBLIC_VERCEL_ENV,{name:d}=function(t){const{hostname:e,protocol:n}=new URL(t),o="https:"===n,r=o?"__Secure-":"",{tag:a,domain:i}=(()=>{if("localhost"===e||/^[\d.]+$/.test(e))return{tag:"local"};if(e.endsWith(".test.snokam.no"))return{tag:"test",domain:".test.snokam.no"};if(e.endsWith(".snokam.no"))return{tag:"prod",domain:".snokam.no"};const t=e.split(".");if(t.length>=2){const e=t.slice(-2).join(".");return{tag:e.replace(/\./g,"-"),domain:`.${e}`}}return{tag:"host"}})();return{name:`${r}next-auth.${a}.session-token`,domain:i,secure:o}}(`${process.env.NEXTAUTH_URL}`);return{middleware:(0,o.withAuth)((t=>{}),Object.assign({pages:{signIn:"/auth/login"},cookies:{sessionToken:{name:d}},callbacks:{authorized:null!==(e=s.authorized)&&void 0!==e?e:({req:t,token:e})=>{return!(!(o=t.nextUrl.pathname).startsWith("/api/healthy")&&!o.startsWith("/api/ready")&&(u||c&&0===(null==i?void 0:i.length)||i.some((t=>{if(!t)return!1;if(t.startsWith("/")&&t.endsWith(")")){const e=t.substring(1);let n=e;return e.startsWith("((?!")&&!e.startsWith("^")&&(n="^"+e),new RegExp(n).test(o)}if(t.endsWith(":path*")){const e=t.replace(/\/:path\*$/,"");return o.startsWith(e)}try{return!1!==(0,n.match)(t,{end:!0})(o)}catch(t){return console.warn(`Invalid path pattern in auth middleware: ${t}`),!1}})))&&!e);var o}}},l)),config:u?{matcher:a}:(null==i?void 0:i.length)>0?{matcher:i}:void 0}}const{middleware:s,config:c}=i(),l=s;return e})()));
-//# sourceMappingURL=middleware.js.map