@strivacity/sdk-core 3.0.0-rc.0 → 3.0.1

package/CHANGELOG.md

@@ -1,3 +1,36 @@
+## 3.0.1 (2026-04-20)
+
+### 🩹 Fixes
+
+- handle language parameter from response body url correctly ([e42294b](https://github.com/Strivacity/sdk-js/commit/e42294b))
+
+### 🧱 Updated Dependencies
+
+- Updated testing to 3.0.1
+
+# 3.0.0 (2026-04-09)
+
+### 🚀 Features
+
+- custom sdk mode added ([17812c6](https://github.com/Strivacity/sdk-js/commit/17812c6))
+- ⚠️  EmbeddedFlow implemented ([a0e3ad8](https://github.com/Strivacity/sdk-js/commit/a0e3ad8))
+- ⚠️  NativeFlow entry function now returns an object instead of a string ([9a8942d](https://github.com/Strivacity/sdk-js/commit/9a8942d))
+- popupUrlHandler refactored ([886f6ea](https://github.com/Strivacity/sdk-js/commit/886f6ea))
+
+### 🩹 Fixes
+
+- select and multiselect default value handling fixed ([25ecacd](https://github.com/Strivacity/sdk-js/commit/25ecacd))
+- widget type definitions fixed ([c2e9b12](https://github.com/Strivacity/sdk-js/commit/c2e9b12))
+
+### ⚠️  Breaking Changes
+
+- EmbeddedFlow implemented  ([a0e3ad8](https://github.com/Strivacity/sdk-js/commit/a0e3ad8))
+- NativeFlow entry function now returns an object instead of a string  ([9a8942d](https://github.com/Strivacity/sdk-js/commit/9a8942d))
+
+### 🧱 Updated Dependencies
+
+- Updated testing to 3.0.0
+
 ## 3.0.0-rc.0 (2026-02-18)
 
 ### 🚀 Features

package/README.md

@@ -1,65 +1,90 @@
 # @strivacity/sdk-core
 
-## Example App
+A framework-agnostic JavaScript/TypeScript client that integrates Strivacity's policy-driven authentication journeys into any application using the OAuth 2.0 PKCE flow. Supports `redirect`, `popup`, `native`, and `embedded` modes.
+
+See our [Developer Portal](https://www.strivacity.com/learn-support/developer-hub) to get started with developing with the Strivacity product.
+
+## Overview
+
+This SDK provides the core authentication primitives for Strivacity's policy-driven journeys. It is a standalone JavaScript/TypeScript library with no framework dependencies that can be used directly or as the foundation for framework-specific SDKs (React, Vue, Angular, etc.). The SDK uses the OAuth 2.0 PKCE flow to authenticate with Strivacity.
+
+## Demo Application
 
 - [Example app](https://github.com/Strivacity/sdk-js/tree/main/apps/web-component)
 
-### Install
+## Install
 
 ```bash
 npm install @strivacity/sdk-core
 ```
 
-### Usage
+## Usage
+
+### Initialization
+
+Create a flow instance using the `initFlow` factory function:
 
 ```js
 import { initFlow } from '@strivacity/sdk-core';
 
 const sdk = initFlow({
-	mode: 'redirect', // or 'popup' or 'native'
+	mode: 'redirect', // or 'popup', 'native', 'embedded'
 	issuer: 'https://<YOUR_DOMAIN>',
 	scopes: ['openid', 'profile'],
 	clientId: '<YOUR_CLIENT_ID>',
 	redirectUri: '<YOUR_REDIRECT_URI>',
 });
+```
+
+### Redirect / Popup mode
 
+In `redirect` mode the user is taken to the identity provider in the same window; in `popup` mode authentication happens in a popup. Both are initiated the same way from code.
+
+#### Login
+
+```js
 await sdk.login();
 ```
 
-### API Documentation
+#### Callback handling
 
-#### `initFlow(options: SDKOptions & { mode?: 'popup' | 'redirect' | 'native' }): PopupFlow | RedirectFlow | NativeFlow`
+Process the authorization callback after the identity provider redirects back to your application:
 
-The `initFlow` function initializes and returns an instance of either `PopupFlow`, `RedirectFlow`, or `NativeFlow`, based on the specified `mode`.
+```js
+await sdk.handleCallback();
+```
 
-**Parameters:**
+#### Logout
 
-- `options`: An object containing configuration options for the SDK.
+The `postLogoutRedirectUri` parameter is optional and specifies where users are redirected after logout. This URI must be configured in the Admin Console as an allowed post-logout redirect URI.
 
-  **Type:** `SDKOptions & { mode?: 'popup' | 'redirect' | 'native' }`
+```js
+await sdk.logout({ postLogoutRedirectUri: location.origin });
+```
 
-  **Properties:**
-  - `issuer` (string): The issuer URL of the OpenID Provider.
-  - `clientId` (string): The client identifier for the application.
-  - `redirectUri` (string): The URI to redirect to after authentication.
-  - `scopes` (Array<string>): The scopes to request during authentication.
-  - `responseType` (ResponseType): The response type requested from the OpenID Provider.
-  - `responseMode` (ResponseMode): The response mode to use.
-  - `storageTokenName` (string): The name of the token in storage.
-  - `storage` (SDKStorageType): A custom storage implementation.
+#### Token refresh
 
-  **Mode:**
-  - `popup`: Uses a popup window for authentication. Returns an instance of `PopupFlow`.
-  - `redirect`: Uses a full-page redirect for authentication. Returns an instance of `RedirectFlow`.
-  - `native`: Uses a native flow for authentication. Returns an instance of `NativeFlow`.
+Refreshes the access token using the stored refresh token, keeping the session alive without requiring the user to log in again.
 
-## Custom native flow
+```js
+await sdk.refresh();
+```
+
+#### Token revocation
+
+Revokes the current access and refresh tokens on the server, invalidating the session immediately.
+
+```js
+await sdk.revoke();
+```
+
+### Native mode
 
-You can use the `NativeFlowHandler` class if there is no existing Strivacity implementation for your JavaScript framework, or if you want to build a fully custom authentication flow.
+In `native` mode, `login()` returns a `NativeFlowHandler` instance that drives the authentication UI step by step.
 
-If you are looking for example implementations for different frameworks, visit [packages](https://github.com/Strivacity/sdk-js/tree/main/packages).
+#### Login page example
 
-### Usage
+The login page extracts `session_id` and optionally `language` from the URL on load and passes them to `startSession()` to resume an existing flow or start a new one. When a `language` parameter is present it overrides `uiLocales` to display the authentication UI in the specified language:
 
 ```js
 import { initFlow } from '@strivacity/sdk-core';
@@ -72,60 +97,243 @@ const sdk = initFlow({
 	redirectUri: '<YOUR_REDIRECT_URI>',
 });
 
-// This will return with a `NativeFlowHandler` instance
+// Returns a NativeFlowHandler instance
 const handler = await sdk.login();
 
+// Extract session_id from URL if present
+const url = new URL(window.location.href);
+const sessionId = url.searchParams.get('session_id');
+
 // Start a new session or resume an existing one
-const state = await handler.startSession();
+const state = await handler.startSession(sessionId);
 
 if (state.finalizeUrl) {
-	// If the response contains a finalize URL, you can finalize the session
+	// Finalize the session when the flow is complete
 	await handler.finalizeSession(state.finalizeUrl);
 } else {
-	// Handle the response as needed
-	console.log('Form submitted successfully:', state);
+	// Render the form from state.widgets and handle user input
+	console.log('Current form state:', state);
 }
+```
 
-// Submit a form in the native flow
+#### Submitting a form
+
+```js
 const formState = await handler.submitForm('formId', {
-	// Your form data here
+	email: 'user@example.com',
+	password: 'secret',
 });
 
-if (state.finalizeUrl) {
-	// If the response contains a finalize URL, you can finalize the session
-	await handler.finalizeSession(state.finalizeUrl);
+if (formState.finalizeUrl) {
+	await handler.finalizeSession(formState.finalizeUrl);
+}
+```
+
+#### Callback page example
+
+When a `session_id` is present in the URL the native flow is resumed by forwarding it to the login page. Otherwise the standard `handleCallback()` path is used:
+
+```js
+const url = new URL(location.href);
+const sessionId = url.searchParams.get('session_id');
+
+if (sessionId) {
+	// Forward to login page with session_id to resume the native flow
+	window.location.href = `/login?session_id=${sessionId}`;
 } else {
-	// Handle the response as needed
-	console.log('Form submitted successfully:', state);
+	try {
+		await sdk.handleCallback();
+		window.location.href = '/profile';
+	} catch (error) {
+		console.error('Error during callback handling:', error);
+	}
 }
 ```
 
----
+#### Entry page example
+
+The entry page processes flows started by an external process (e.g. password reset) by calling `entry()` to extract the necessary parameters to resume the flow:
+
+```js
+try {
+	const data = await sdk.entry();
+
+	if (data && Object.keys(data).length > 0) {
+		window.location.href = `/callback?${new URLSearchParams(data).toString()}`;
+	} else {
+		window.location.href = '/';
+	}
+} catch (error) {
+	console.error('Entry failed:', error);
+	window.location.href = '/';
+}
+```
+
+### Custom mode
+
+Custom mode lets you replace the built-in flow implementations with your own classes. This is useful when you need to proxy authentication through a backend server (BFF pattern) rather than communicating with the identity provider directly from the browser.
+
+Pass `mode: 'custom'` together with a `customFlow` class that extends one of the built-in flow base classes (`NativeFlow`, `EmbeddedFlow`, etc.):
 
-### API Documentation
+```ts
+import { initFlow } from '@strivacity/sdk-core';
+import { CustomNativeFlow } from './sdk/CustomNativeFlow';
 
-#### `startSession(sessionId?: string | null): Promise<LoginFlowState | void>`
+const sdk = initFlow({
+	mode: 'custom',
+	issuer: 'https://<YOUR_DOMAIN>',
+	scopes: ['openid', 'profile'],
+	clientId: '<YOUR_CLIENT_ID>',
+	redirectUri: '<YOUR_REDIRECT_URI>',
+	customFlow: CustomNativeFlow,
+});
+```
 
-Starts a new authentication session. If a `sessionId` is provided, resumes the session; otherwise, initiates a new one.
+#### Creating a custom flow class
 
-#### `submitForm(formId?: string, body?: Record<string, unknown>): Promise<LoginFlowState>`
+Extend `NativeFlow` (or `EmbeddedFlow`) and override the methods you need to change. The example below delegates session management to a backend API instead of calling the identity provider directly:
 
-Submits a form in the native flow. Optionally specify a form ID and request body.
+```ts
+import type { NativeParams } from '@strivacity/sdk-core';
+import { NativeFlow } from '@strivacity/sdk-core/flows/NativeFlow';
+import { Session } from '@strivacity/sdk-core/utils/Session';
+import { CustomNativeFlowHandler } from './CustomNativeFlowHandler';
 
-#### `finalizeSession(finalizeUrl: string): Promise<void>`
+export class CustomNativeFlow extends NativeFlow {
+	override login(params: NativeParams = {}): CustomNativeFlowHandler {
+		this.dispatchEvent('loginInitiated', []);
+		return new CustomNativeFlowHandler(this, params);
+	}
 
-Finalizes the session using the provided URL. You can gather the finalize URL from the `LoginFlowState` returned by `startSession` or `submitForm`.
+	override register(params: NativeParams = {}): CustomNativeFlowHandler {
+		params.prompt = 'create';
+		return this.login(params);
+	}
 
----
+	async fetchSessionData(): Promise<void> {
+		const response = await this.httpClient.request(new URL('/api/session/info', location.origin).toString(), { method: 'GET', credentials: 'include' });
+
+		this.session = Object.assign(new Session(), await response.json());
+
+		if (!this.accessTokenExpired) {
+			this.dispatchEvent('loggedIn', [{ claims: this.idTokenClaims! }]);
+		}
+	}
+
+	override async refresh(): Promise<void> {
+		const response = await this.httpClient.request(new URL('/api/session/refresh', location.origin).toString(), { method: 'POST', credentials: 'include' });
 
-## Event Subscription
+		if (!response.ok) {
+			this.session = null;
+			this.dispatchEvent('tokenRefreshFailed', [{}]);
+			return;
+		}
 
-The SDK provides an event subscription system that allows you to listen to various authentication lifecycle events.
+		this.session = Object.assign(new Session(), await response.json());
+		this.dispatchEvent('tokenRefreshed', [{ claims: this.idTokenClaims! }]);
+	}
 
-### Usage
+	override async logout(): Promise<void> {
+		this.dispatchEvent('logoutInitiated', []);
+
+		await this.httpClient.request(new URL('/api/session/logout', location.origin).toString(), { method: 'POST', credentials: 'include' });
+
+		this.session = null;
+	}
+}
+```
+
+#### Creating a custom flow handler
+
+Extend `NativeFlowHandler` and override `startSession` and `finalizeSession` to communicate with your backend:
+
+```ts
+import type { LoginFlowState } from '@strivacity/sdk-core';
+import { NativeFlowHandler } from '@strivacity/sdk-core/handlers/NativeFlowHandler';
+import { CustomNativeFlow } from './CustomNativeFlow';
+
+export class CustomNativeFlowHandler extends NativeFlowHandler {
+	declare sdk: CustomNativeFlow;
+
+	override async startSession(sessionId?: string | null): Promise<LoginFlowState | void> {
+		if (sessionId) {
+			this.sessionId = sessionId;
+			return this.submitForm();
+		}
+
+		const response = await this.sdk.httpClient.request(new URL('/api/session/start', location.origin).toString(), {
+			method: 'POST',
+			credentials: 'include',
+			headers: { 'Content-Type': 'application/json' },
+			body: JSON.stringify(this.params),
+		});
+
+		const data = await response.json();
+		this.sessionId = data.session_id;
+
+		return this.submitForm();
+	}
+
+	override async finalizeSession(finalizeUrl: string): Promise<void> {
+		const finalizeResponse = await this.sdk.httpClient.request(finalizeUrl, {
+			method: 'GET',
+			headers: { Authorization: `Bearer ${this.sessionId}` },
+			credentials: 'include',
+		});
+
+		const redirectUri = new URL(await finalizeResponse.text());
+
+		await this.sdk.httpClient.request(new URL('/api/session/finalize', location.origin).toString(), {
+			method: 'POST',
+			headers: {
+				'Content-Type': 'application/json',
+				Authorization: `Bearer ${this.sessionId}`,
+			},
+			body: JSON.stringify(Object.fromEntries(redirectUri.searchParams)),
+			credentials: 'include',
+		});
+
+		await this.sdk.fetchSessionData();
+	}
+}
+```
+
+### Event subscription
+
+The SDK provides an event system for listening to authentication lifecycle events:
 
 ```js
-import { initFlow } from '@strivacity/sdk-core';
+const { dispose } = sdk.subscribeToEvent('loggedIn', (eventData) => {
+	console.log('User logged in:', eventData);
+});
+
+// Later: unsubscribe
+dispose();
+```
+
+Available events:
+
+- **`init`**: Fired when the SDK is initialized.
+- **`loggedIn`**: Fired when a user successfully logs in.
+- **`loginInitiated`**: Fired when a login flow is initiated.
+- **`sessionLoaded`**: Fired when an existing session is loaded.
+- **`accessTokenExpired`**: Fired when the access token expires.
+- **`tokenRefreshed`**: Fired when access tokens are successfully refreshed.
+- **`tokenRefreshFailed`**: Fired when token refresh fails.
+- **`logoutInitiated`**: Fired when logout is initiated.
+- **`tokenRevoked`**: Fired when tokens are successfully revoked.
+- **`tokenRevokeFailed`**: Fired when token revocation fails.
+
+## Logging
+
+The SDK supports optional logging to help you debug authentication flows and monitor SDK behavior. You can enable the built-in console logger or provide your own custom logger implementation.
+
+### Using the Default Logger
+
+Enable the default console logger by adding the `logging` option when calling `initFlow`:
+
+```js
+import { initFlow, DefaultLogging } from '@strivacity/sdk-core';
 
 const sdk = initFlow({
 	mode: 'redirect',
@@ -133,48 +341,145 @@ const sdk = initFlow({
 	scopes: ['openid', 'profile'],
 	clientId: '<YOUR_CLIENT_ID>',
 	redirectUri: '<YOUR_REDIRECT_URI>',
+	logging: DefaultLogging,
 });
+```
+
+The default logger writes to the browser console and automatically prefixes messages with a correlation ID when available (via the `xEventId` property).
+
+### Creating a Custom Logger
+
+Implement the `SDKLogging` interface and pass your class to the `logging` option:
+
+```typescript
+import type { SDKLogging } from '@strivacity/sdk-core';
 
-// Subscribe to events
-function updateSession(eventData) {
-	console.log('Event received:', eventData);
-	// Handle the event as needed
+export class MyLogger implements SDKLogging {
+	xEventId?: string;
+
+	debug(message: string): void {
+		console.debug(this.xEventId ? `[${this.xEventId}] ${message}` : message);
+	}
+
+	info(message: string): void {
+		console.info(this.xEventId ? `[${this.xEventId}] ${message}` : message);
+	}
+
+	warn(message: string): void {
+		console.warn(this.xEventId ? `[${this.xEventId}] ${message}` : message);
+	}
+
+	error(message: string, error: Error): void {
+		console.error(this.xEventId ? `[${this.xEventId}] ${message}` : message, error);
+	}
 }
+```
+
+```js
+import { initFlow } from '@strivacity/sdk-core';
+import { MyLogger } from './logging/MyLogger';
+
+const sdk = initFlow({
+	// ...other options
+	logging: MyLogger,
+});
+```
+
+The `SDKLogging` interface requires `debug`, `info`, `warn`, and `error` methods. The optional `xEventId` property, when set by the SDK, provides a correlation ID to trace related log messages across the authentication flow.
+
+## API Documentation
+
+### `initFlow(options)`
 
-sdk.subscribeToEvent('init', updateSession);
-sdk.subscribeToEvent('loggedIn', updateSession);
-sdk.subscribeToEvent('sessionLoaded', updateSession);
-sdk.subscribeToEvent('tokenRefreshed', updateSession);
-sdk.subscribeToEvent('tokenRefreshFailed', updateSession);
-sdk.subscribeToEvent('logoutInitiated', updateSession);
-sdk.subscribeToEvent('tokenRevoked', updateSession);
-sdk.subscribeToEvent('tokenRevokeFailed', updateSession);
+```typescript
+initFlow(options: SDKOptions): PopupFlow | RedirectFlow | NativeFlow | EmbeddedFlow
 ```
 
-### Available Events
+The `initFlow` function creates and returns a flow instance based on the `mode` specified in `options`.
+
+**Parameters:**
+
+| Name               | Type                                                          | Required | Description                                                                    |
+| ------------------ | ------------------------------------------------------------- | -------- | ------------------------------------------------------------------------------ |
+| `issuer`           | `string`                                                      | ✅       | The issuer URL of the OpenID Provider.                                         |
+| `clientId`         | `string`                                                      | ✅       | The client identifier for the application.                                     |
+| `redirectUri`      | `string`                                                      | ✅       | The URI to redirect to after authentication.                                   |
+| `mode`             | `'redirect' \| 'popup' \| 'native' \| 'embedded' \| 'custom'` | ⬜       | The authentication flow mode. Defaults to `'redirect'`.                        |
+| `scopes`           | `string[]`                                                    | ⬜       | The scopes to request. Defaults to `['openid']`.                               |
+| `responseType`     | `'code' \| 'id_token'`                                        | ⬜       | The response type.                                                             |
+| `responseMode`     | `'query' \| 'fragment'`                                       | ⬜       | The response mode.                                                             |
+| `storageTokenName` | `string`                                                      | ⬜       | Custom name for the session storage key. Defaults to `'sty.session'`.          |
+| `storage`          | `SDKStorageType`                                              | ⬜       | Custom storage implementation. Defaults to `LocalStorage`.                     |
+| `httpClient`       | `SDKHttpClientType`                                           | ⬜       | Custom HTTP client implementation.                                             |
+| `logging`          | `SDKLoggingType`                                              | ⬜       | Logging implementation class.                                                  |
+| `customFlow`       | `FlowType`                                                    | ⬜       | Custom flow class. Required when `mode` is `'custom'`. Must extend `BaseFlow`. |
+
+**Returns:** A flow instance (`PopupFlow`, `RedirectFlow`, `NativeFlow`, `EmbeddedFlow`, or your custom flow class) depending on the configured `mode`.
+
+---
+
+### Flow instance methods
+
+All flow instances share the following methods:
 
-- **`init`**: Fired when the SDK is initialized
-- **`loggedIn`**: Fired when a user successfully logs in
-- **`sessionLoaded`**: Fired when an existing session is loaded
-- **`tokenRefreshed`**: Fired when access tokens are successfully refreshed
-- **`tokenRefreshFailed`**: Fired when token refresh fails
-- **`logoutInitiated`**: Fired when logout process is initiated
-- **`tokenRevoked`**: Fired when tokens are successfully revoked
-- **`tokenRevokeFailed`**: Fired when token revocation fails
+- **`login(options?: LoginOptions): Promise<void | NativeFlowHandler>`**: Initiates login. In `native` mode returns a `NativeFlowHandler`.
+- **`register(options?: RegisterOptions): Promise<void | NativeFlowHandler>`**: Initiates registration.
+- **`entry(url?: string): Promise<Record<string, string>>`**: Processes an externally-initiated flow URL and returns parameters needed to resume the flow.
+- **`handleCallback(url?: string): Promise<void>`**: Processes the authorization callback.
+- **`refresh(): Promise<void>`**: Refreshes the session tokens.
+- **`revoke(): Promise<void>`**: Revokes the current session tokens.
+- **`logout(options?: LogoutOptions): Promise<void>`**: Logs the user out.
+- **`subscribeToEvent(eventType: string, callback: Function): { dispose(): void }`**: Subscribes to an authentication lifecycle event. Returns an object with a `dispose()` method to unsubscribe.
 
-### API Documentation
+**Session state getters:**
 
-#### `subscribeToEvent(eventType: string, callback: (eventData: any) => void): void`
+- **`isAuthenticated: Promise<boolean>`**: Resolves to `true` when a valid session exists.
+- **`isAuthenticatedSync: boolean`**: Synchronous check for an active session.
+- **`idTokenClaims: IdTokenClaims | null`**: Claims from the ID token.
+- **`accessToken: string | null`**: The current access token.
+- **`refreshToken: string | null`**: The current refresh token.
+- **`accessTokenExpired: boolean`**: `true` when the access token has expired.
+- **`accessTokenExpirationDate: number | null`**: Expiration timestamp (Unix seconds) of the access token.
 
-Subscribe to SDK events to handle authentication state changes.
+---
+
+### `NativeFlowHandler`
+
+Returned by `NativeFlow.login()` and `NativeFlow.register()` to drive the step-by-step native authentication UI.
+
+- **`startSession(sessionId?: string | null): Promise<LoginFlowState | void>`**: Starts a new authentication session or resumes an existing one when `sessionId` is provided.
+- **`submitForm(formId?: string, body?: Record<string, unknown>): Promise<LoginFlowState>`**: Submits a form step in the authentication flow.
+- **`finalizeSession(finalizeUrl: string): Promise<void>`**: Finalizes the session using the URL returned in `LoginFlowState.finalizeUrl`.
+
+---
+
+### `subscribeToEvent(eventType, callback)`
+
+Subscribe to SDK lifecycle events.
 
 **Parameters:**
 
-- `eventType` (string): The type of event to listen for
-- `callback` (function): The function to call when the event is fired
+| Name        | Type                       | Required | Description                              |
+| ----------- | -------------------------- | -------- | ---------------------------------------- |
+| `eventType` | `string`                   | ✅       | The event type to listen for.            |
+| `callback`  | `(eventData: any) => void` | ✅       | The handler called when the event fires. |
+
+**Returns:** `{ dispose(): void }` — call `dispose()` to unsubscribe.
+
+## Vulnerability Reporting
+
+The [Guidelines for responsible disclosure](https://www.strivacity.com/report-a-security-issue) details the procedure for disclosing security issues. Please do not report security vulnerabilities on the public issue tracker.
+
+## License
+
+@strivacity/sdk-core is available under the MIT License. See the [LICENSE](https://github.com/Strivacity/sdk-js/blob/main/LICENSE) file for more info.
+
+## Contributing
+
+Please see our [contributing guide](https://github.com/Strivacity/sdk-js/blob/main/CONTRIBUTING.md).
 
 ## Migrating to v3.0
 
 ### Entry API Major Changes
 
-Strivacity SDK's `entry()` API now returns a structured object instead of a plain string. To see examples of these changes, check the apps folder in this repository.
+Strivacity SDK's `entry()` API now returns a structured object instead of a plain string. Check the example above in the usage section for more details.

package/dist/flows/EmbeddedFlow.cjs

@@ -1,2 +1,2 @@
-"use strict";Object.defineProperty(exports,Symbol.toStringTag,{value:"Module"});const c=require("../utils/handlers.cjs"),h=require("../utils/EmbeddedFlowHandler.cjs"),g=require("./BaseFlow.cjs");require("../utils/errors.cjs");require("../utils/State.cjs");require("../utils/crypto.cjs");require("../utils/base64Url.cjs");require("../utils/date.cjs");require("../utils/jwt.cjs");require("../utils/Metadata.cjs");require("../utils/Session.cjs");class u extends g.BaseFlow{constructor(r,e,s,i){r.urlHandler||(r.urlHandler=c.redirectUrlHandler),r.callbackHandler||(r.callbackHandler=c.redirectCallbackHandler),super(r,e,s,i),globalThis.sty||(globalThis.sty={}),globalThis.sty.oidcService=this}login(r={}){return this.dispatchEvent("loginInitiated",[]),new h.EmbeddedFlowHandler(this,r)}register(r={}){return r.prompt="create",this.login(r)}async entry(r){r||(r=globalThis.window?.location.href);const e=new URL(r);e.searchParams.append("sdk","web-embedded"),e.searchParams.append("client_id",this.options.clientId),e.searchParams.append("redirect_uri",this.options.redirectUri);const s=await this.httpClient.request(`${this.options.issuer}/provider/flow/entry?${e.searchParams.toString()}`);if(!s.ok){if(s.status===400){const o=await s.json();let n="Entry request failed with status 400";typeof o=="object"&&(o.error?n=`${o.error}: ${o.error_description}`:o.errorKey&&(n=o.errorKey));const d=new Error(n);throw this.logging?.error("Entry request error",d),d}const t=new Error(`Entry request failed with status ${s.status}`);throw this.logging?.error("Entry request error",t),t}let i;try{i=new URL(await s.text())}catch{i=new URL(s.url)}const a=i.searchParams.get("short_app_id"),l=i.searchParams.get("session_id");if(!a){const t=new Error('"short_app_id" is missing from the response');throw this.logging?.error("Entry response error",t),t}if(!l){const t=new Error('"session_id" is missing from the response');throw this.logging?.error("Entry response error",t),t}return{session_id:l,short_app_id:a}}async handleCallback(r){if(typeof this.options.callbackHandler!="function"){const e=new Error("Missing option: callbackHandler");throw this.logging?.error("Required option missing",e),e}r||(r=globalThis.window?.location.href),await this.tokenExchange(await this.options.callbackHandler(r,this.options.responseMode||"fragment"))}}exports.EmbeddedFlow=u;
+"use strict";Object.defineProperty(exports,Symbol.toStringTag,{value:"Module"});const c=require("../utils/handlers.cjs"),g=require("../handlers/EmbeddedFlowHandler.cjs"),u=require("./BaseFlow.cjs");require("../utils/errors.cjs");require("../handlers/BaseFlowHandler.cjs");require("../utils/State.cjs");require("../utils/crypto.cjs");require("../utils/base64Url.cjs");require("../utils/date.cjs");require("../utils/jwt.cjs");require("../utils/Metadata.cjs");require("../utils/Session.cjs");class p extends u.BaseFlow{constructor(r,e,s,i){r.urlHandler||(r.urlHandler=c.redirectUrlHandler),r.callbackHandler||(r.callbackHandler=c.redirectCallbackHandler),super(r,e,s,i),globalThis.sty||(globalThis.sty={}),globalThis.sty.oidcService=this}login(r={}){return this.dispatchEvent("loginInitiated",[]),new g.EmbeddedFlowHandler(this,r)}register(r={}){return r.prompt="create",this.login(r)}async entry(r){r||(r=globalThis.window?.location.href);const e=new URL(r);e.searchParams.append("sdk","web-embedded"),e.searchParams.append("client_id",this.options.clientId),e.searchParams.append("redirect_uri",this.options.redirectUri);const s=await this.httpClient.request(`${this.options.issuer}/provider/flow/entry?${e.searchParams.toString()}`,{headers:{"Accept-Language":"*"}});if(!s.ok){if(s.status===400){const o=await s.json();let n="Entry request failed with status 400";typeof o=="object"&&(o.error?n=`${o.error}: ${o.error_description}`:o.errorKey&&(n=o.errorKey));const d=new Error(n);throw this.logging?.error("Entry request error",d),d}const t=new Error(`Entry request failed with status ${s.status}`);throw this.logging?.error("Entry request error",t),t}let i;try{i=new URL(await s.text())}catch{i=new URL(s.url)}const a=i.searchParams.get("short_app_id"),l=i.searchParams.get("session_id"),h=i.searchParams.get("language")||navigator.language;if(!a){const t=new Error('"short_app_id" is missing from the response');throw this.logging?.error("Entry response error",t),t}if(!l){const t=new Error('"session_id" is missing from the response');throw this.logging?.error("Entry response error",t),t}return{session_id:l,short_app_id:a,language:h}}async handleCallback(r){if(typeof this.options.callbackHandler!="function"){const e=new Error("Missing option: callbackHandler");throw this.logging?.error("Required option missing",e),e}r||(r=globalThis.window?.location.href),await this.tokenExchange(await this.options.callbackHandler(r,this.options.responseMode||"fragment"))}}exports.EmbeddedFlow=p;
 //# sourceMappingURL=EmbeddedFlow.cjs.map

package/dist/flows/EmbeddedFlow.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"EmbeddedFlow.cjs","sources":["../../src/flows/EmbeddedFlow.ts"],"sourcesContent":["import type { SDKOptions, SDKStorage, SDKHttpClient, SDKLogging, ExtraRequestArgs } from '../types';\nimport { redirectUrlHandler, redirectCallbackHandler } from '../utils/handlers';\nimport { EmbeddedFlowHandler } from '../utils/EmbeddedFlowHandler';\nimport { BaseFlow } from './BaseFlow';\n\nexport class EmbeddedFlow extends BaseFlow<SDKOptions, ExtraRequestArgs> {\n\tconstructor(options: SDKOptions, storage: SDKStorage, httpClient: SDKHttpClient, logging?: SDKLogging) {\n\t\tif (!options.urlHandler) {\n\t\t\toptions.urlHandler = redirectUrlHandler;\n\t\t}\n\t\tif (!options.callbackHandler) {\n\t\t\toptions.callbackHandler = redirectCallbackHandler;\n\t\t}\n\n\t\tsuper(options, storage, httpClient, logging);\n\n\t\tif (!globalThis.sty) {\n\t\t\tglobalThis.sty = {};\n\t\t}\n\n\t\t// NOTE: Register the OIDC service instance globally for use in the login component\n\t\tglobalThis.sty.oidcService = this;\n\t}\n\n\t/**\n\t * Initiates the login process via embedded UI.\n\t * @param {ExtraRequestArgs} [params={}] Optional parameters for the login request.\n\t * @returns {EmbeddedFlowHandler} Returns with an embedded login handler.\n\t */\n\toverride login(params: ExtraRequestArgs = {}): EmbeddedFlowHandler {\n\t\tthis.dispatchEvent('loginInitiated', []);\n\n\t\treturn new EmbeddedFlowHandler(this, params);\n\t}\n\n\toverride register(params: ExtraRequestArgs = {}) {\n\t\tparams.prompt = 'create';\n\n\t\treturn this.login(params);\n\t}\n\n\toverride async entry(url?: string) {\n\t\tif (!url) {\n\t\t\turl = globalThis.window?.location.href;\n\t\t}\n\n\t\tconst entryUrl = new URL(url);\n\t\tentryUrl.searchParams.append('sdk', 'web-embedded');\n\t\tentryUrl.searchParams.append('client_id', this.options.clientId);\n\t\tentryUrl.searchParams.append('redirect_uri', this.options.redirectUri);\n\n\t\tconst response = await this.httpClient.request<string | Record<string, string>>(\n\t\t\t`${this.options.issuer}/provider/flow/entry?${entryUrl.searchParams.toString()}`,\n\t\t);\n\n\t\tif (!response.ok) {\n\t\t\tif (response.status === 400) {\n\t\t\t\tconst data = await response.json();\n\t\t\t\tlet message = 'Entry request failed with status 400';\n\n\t\t\t\tif (typeof data === 'object') {\n\t\t\t\t\tif (data.error) {\n\t\t\t\t\t\tmessage = `${data.error}: ${data.error_description}`;\n\t\t\t\t\t} else if (data.errorKey) {\n\t\t\t\t\t\tmessage = data.errorKey;\n\t\t\t\t\t}\n\t\t\t\t}\n\n\t\t\t\tconst error = new Error(message);\n\t\t\t\tthis.logging?.error('Entry request error', error);\n\t\t\t\tthrow error;\n\t\t\t}\n\n\t\t\tconst error = new Error(`Entry request failed with status ${response.status}`);\n\t\t\tthis.logging?.error('Entry request error', error);\n\t\t\tthrow error;\n\t\t}\n\n\t\tlet uri: URL;\n\n\t\ttry {\n\t\t\turi = new URL(await response.text());\n\t\t} catch {\n\t\t\turi = new URL(response.url);\n\t\t}\n\n\t\tconst shortAppId = uri.searchParams.get('short_app_id');\n\t\tconst sessionId = uri.searchParams.get('session_id');\n\n\t\tif (!shortAppId) {\n\t\t\tconst error = new Error('\"short_app_id\" is missing from the response');\n\t\t\tthis.logging?.error('Entry response error', error);\n\t\t\tthrow error;\n\t\t}\n\t\tif (!sessionId) {\n\t\t\tconst error = new Error('\"session_id\" is missing from the response');\n\t\t\tthis.logging?.error('Entry response error', error);\n\t\t\tthrow error;\n\t\t}\n\n\t\treturn { session_id: sessionId, short_app_id: shortAppId };\n\t}\n\n\t/**\n\t * Handles the callback after login or registration via a redirect.\n\t * @param {string} [url] The URL to handle the callback from. Defaults to the current window location.\n\t * @returns {Promise<void>} A promise that resolves when the callback is handled.\n\t *\n\t * @throws {Error} Throws an error if callback handler is not defined.\n\t */\n\tasync handleCallback(url?: string): Promise<void> {\n\t\tif (typeof this.options.callbackHandler !== 'function') {\n\t\t\tconst error = new Error('Missing option: callbackHandler');\n\t\t\tthis.logging?.error('Required option missing', error);\n\t\t\tthrow error;\n\t\t}\n\n\t\tif (!url) {\n\t\t\turl = globalThis.window?.location.href;\n\t\t}\n\n\t\tawait this.tokenExchange((await this.options.callbackHandler(url, this.options.responseMode || 'fragment')) as Record<string, string>);\n\t}\n}\n"],"names":["EmbeddedFlow","BaseFlow","options","storage","httpClient","logging","redirectUrlHandler","redirectCallbackHandler","params","EmbeddedFlowHandler","url","entryUrl","response","data","message","error","uri","shortAppId","sessionId"],"mappings":"2bAKO,MAAMA,UAAqBC,EAAAA,QAAuC,CACxE,YAAYC,EAAqBC,EAAqBC,EAA2BC,EAAsB,CACjGH,EAAQ,aACZA,EAAQ,WAAaI,EAAAA,oBAEjBJ,EAAQ,kBACZA,EAAQ,gBAAkBK,EAAAA,yBAG3B,MAAML,EAASC,EAASC,EAAYC,CAAO,EAEtC,WAAW,MACf,WAAW,IAAM,CAAA,GAIlB,WAAW,IAAI,YAAc,IAC9B,CAOS,MAAMG,EAA2B,GAAyB,CAClE,YAAK,cAAc,iBAAkB,EAAE,EAEhC,IAAIC,EAAAA,oBAAoB,KAAMD,CAAM,CAC5C,CAES,SAASA,EAA2B,GAAI,CAChD,OAAAA,EAAO,OAAS,SAET,KAAK,MAAMA,CAAM,CACzB,CAEA,MAAe,MAAME,EAAc,CAC7BA,IACJA,EAAM,WAAW,QAAQ,SAAS,MAGnC,MAAMC,EAAW,IAAI,IAAID,CAAG,EAC5BC,EAAS,aAAa,OAAO,MAAO,cAAc,EAClDA,EAAS,aAAa,OAAO,YAAa,KAAK,QAAQ,QAAQ,EAC/DA,EAAS,aAAa,OAAO,eAAgB,KAAK,QAAQ,WAAW,EAErE,MAAMC,EAAW,MAAM,KAAK,WAAW,QACtC,GAAG,KAAK,QAAQ,MAAM,wBAAwBD,EAAS,aAAa,UAAU,EAAA,EAG/E,GAAI,CAACC,EAAS,GAAI,CACjB,GAAIA,EAAS,SAAW,IAAK,CAC5B,MAAMC,EAAO,MAAMD,EAAS,KAAA,EAC5B,IAAIE,EAAU,uCAEV,OAAOD,GAAS,WACfA,EAAK,MACRC,EAAU,GAAGD,EAAK,KAAK,KAAKA,EAAK,iBAAiB,GACxCA,EAAK,WACfC,EAAUD,EAAK,WAIjB,MAAME,EAAQ,IAAI,MAAMD,CAAO,EAC/B,WAAK,SAAS,MAAM,sBAAuBC,CAAK,EAC1CA,CACP,CAEA,MAAMA,EAAQ,IAAI,MAAM,oCAAoCH,EAAS,MAAM,EAAE,EAC7E,WAAK,SAAS,MAAM,sBAAuBG,CAAK,EAC1CA,CACP,CAEA,IAAIC,EAEJ,GAAI,CACHA,EAAM,IAAI,IAAI,MAAMJ,EAAS,MAAM,CACpC,MAAQ,CACPI,EAAM,IAAI,IAAIJ,EAAS,GAAG,CAC3B,CAEA,MAAMK,EAAaD,EAAI,aAAa,IAAI,cAAc,EAChDE,EAAYF,EAAI,aAAa,IAAI,YAAY,EAEnD,GAAI,CAACC,EAAY,CAChB,MAAMF,EAAQ,IAAI,MAAM,6CAA6C,EACrE,WAAK,SAAS,MAAM,uBAAwBA,CAAK,EAC3CA,CACP,CACA,GAAI,CAACG,EAAW,CACf,MAAMH,EAAQ,IAAI,MAAM,2CAA2C,EACnE,WAAK,SAAS,MAAM,uBAAwBA,CAAK,EAC3CA,CACP,CAEA,MAAO,CAAE,WAAYG,EAAW,aAAcD,CAAA,CAC/C,CASA,MAAM,eAAeP,EAA6B,CACjD,GAAI,OAAO,KAAK,QAAQ,iBAAoB,WAAY,CACvD,MAAMK,EAAQ,IAAI,MAAM,iCAAiC,EACzD,WAAK,SAAS,MAAM,0BAA2BA,CAAK,EAC9CA,CACP,CAEKL,IACJA,EAAM,WAAW,QAAQ,SAAS,MAGnC,MAAM,KAAK,cAAe,MAAM,KAAK,QAAQ,gBAAgBA,EAAK,KAAK,QAAQ,cAAgB,UAAU,CAA4B,CACtI,CACD"}
+{"version":3,"file":"EmbeddedFlow.cjs","sources":["../../src/flows/EmbeddedFlow.ts"],"sourcesContent":["import type { SDKOptions, SDKStorage, SDKHttpClient, SDKLogging, ExtraRequestArgs } from '../types';\nimport { redirectUrlHandler, redirectCallbackHandler } from '../utils/handlers';\nimport { EmbeddedFlowHandler } from '../handlers/EmbeddedFlowHandler';\nimport { BaseFlow } from './BaseFlow';\n\nexport class EmbeddedFlow extends BaseFlow<SDKOptions, ExtraRequestArgs> {\n\tconstructor(options: SDKOptions, storage: SDKStorage, httpClient: SDKHttpClient, logging?: SDKLogging) {\n\t\tif (!options.urlHandler) {\n\t\t\toptions.urlHandler = redirectUrlHandler;\n\t\t}\n\t\tif (!options.callbackHandler) {\n\t\t\toptions.callbackHandler = redirectCallbackHandler;\n\t\t}\n\n\t\tsuper(options, storage, httpClient, logging);\n\n\t\tif (!globalThis.sty) {\n\t\t\tglobalThis.sty = {};\n\t\t}\n\n\t\t// NOTE: Register the OIDC service instance globally for use in the login component\n\t\tglobalThis.sty.oidcService = this;\n\t}\n\n\t/**\n\t * Initiates the login process via embedded UI.\n\t * @param {ExtraRequestArgs} [params={}] Optional parameters for the login request.\n\t * @returns {EmbeddedFlowHandler} Returns with an embedded login handler.\n\t */\n\toverride login(params: ExtraRequestArgs = {}): EmbeddedFlowHandler {\n\t\tthis.dispatchEvent('loginInitiated', []);\n\n\t\treturn new EmbeddedFlowHandler(this, params);\n\t}\n\n\toverride register(params: ExtraRequestArgs = {}) {\n\t\tparams.prompt = 'create';\n\n\t\treturn this.login(params);\n\t}\n\n\toverride async entry(url?: string) {\n\t\tif (!url) {\n\t\t\turl = globalThis.window?.location.href;\n\t\t}\n\n\t\tconst entryUrl = new URL(url);\n\t\tentryUrl.searchParams.append('sdk', 'web-embedded');\n\t\tentryUrl.searchParams.append('client_id', this.options.clientId);\n\t\tentryUrl.searchParams.append('redirect_uri', this.options.redirectUri);\n\n\t\tconst response = await this.httpClient.request<string | Record<string, string>>(\n\t\t\t`${this.options.issuer}/provider/flow/entry?${entryUrl.searchParams.toString()}`,\n\t\t\t{\n\t\t\t\theaders: {\n\t\t\t\t\t'Accept-Language': '*',\n\t\t\t\t},\n\t\t\t},\n\t\t);\n\n\t\tif (!response.ok) {\n\t\t\tif (response.status === 400) {\n\t\t\t\tconst data = await response.json();\n\t\t\t\tlet message = 'Entry request failed with status 400';\n\n\t\t\t\tif (typeof data === 'object') {\n\t\t\t\t\tif (data.error) {\n\t\t\t\t\t\tmessage = `${data.error}: ${data.error_description}`;\n\t\t\t\t\t} else if (data.errorKey) {\n\t\t\t\t\t\tmessage = data.errorKey;\n\t\t\t\t\t}\n\t\t\t\t}\n\n\t\t\t\tconst error = new Error(message);\n\t\t\t\tthis.logging?.error('Entry request error', error);\n\t\t\t\tthrow error;\n\t\t\t}\n\n\t\t\tconst error = new Error(`Entry request failed with status ${response.status}`);\n\t\t\tthis.logging?.error('Entry request error', error);\n\t\t\tthrow error;\n\t\t}\n\n\t\tlet uri: URL;\n\n\t\ttry {\n\t\t\turi = new URL(await response.text());\n\t\t} catch {\n\t\t\turi = new URL(response.url);\n\t\t}\n\n\t\tconst shortAppId = uri.searchParams.get('short_app_id');\n\t\tconst sessionId = uri.searchParams.get('session_id');\n\t\tconst language = uri.searchParams.get('language') || navigator.language;\n\n\t\tif (!shortAppId) {\n\t\t\tconst error = new Error('\"short_app_id\" is missing from the response');\n\t\t\tthis.logging?.error('Entry response error', error);\n\t\t\tthrow error;\n\t\t}\n\t\tif (!sessionId) {\n\t\t\tconst error = new Error('\"session_id\" is missing from the response');\n\t\t\tthis.logging?.error('Entry response error', error);\n\t\t\tthrow error;\n\t\t}\n\n\t\treturn { session_id: sessionId, short_app_id: shortAppId, language: language };\n\t}\n\n\t/**\n\t * Handles the callback after login or registration via a redirect.\n\t * @param {string} [url] The URL to handle the callback from. Defaults to the current window location.\n\t * @returns {Promise<void>} A promise that resolves when the callback is handled.\n\t *\n\t * @throws {Error} Throws an error if callback handler is not defined.\n\t */\n\tasync handleCallback(url?: string): Promise<void> {\n\t\tif (typeof this.options.callbackHandler !== 'function') {\n\t\t\tconst error = new Error('Missing option: callbackHandler');\n\t\t\tthis.logging?.error('Required option missing', error);\n\t\t\tthrow error;\n\t\t}\n\n\t\tif (!url) {\n\t\t\turl = globalThis.window?.location.href;\n\t\t}\n\n\t\tawait this.tokenExchange((await this.options.callbackHandler(url, this.options.responseMode || 'fragment')) as Record<string, string>);\n\t}\n}\n"],"names":["EmbeddedFlow","BaseFlow","options","storage","httpClient","logging","redirectUrlHandler","redirectCallbackHandler","params","EmbeddedFlowHandler","url","entryUrl","response","data","message","error","uri","shortAppId","sessionId","language"],"mappings":"yeAKO,MAAMA,UAAqBC,EAAAA,QAAuC,CACxE,YAAYC,EAAqBC,EAAqBC,EAA2BC,EAAsB,CACjGH,EAAQ,aACZA,EAAQ,WAAaI,EAAAA,oBAEjBJ,EAAQ,kBACZA,EAAQ,gBAAkBK,EAAAA,yBAG3B,MAAML,EAASC,EAASC,EAAYC,CAAO,EAEtC,WAAW,MACf,WAAW,IAAM,CAAA,GAIlB,WAAW,IAAI,YAAc,IAC9B,CAOS,MAAMG,EAA2B,GAAyB,CAClE,YAAK,cAAc,iBAAkB,EAAE,EAEhC,IAAIC,EAAAA,oBAAoB,KAAMD,CAAM,CAC5C,CAES,SAASA,EAA2B,GAAI,CAChD,OAAAA,EAAO,OAAS,SAET,KAAK,MAAMA,CAAM,CACzB,CAEA,MAAe,MAAME,EAAc,CAC7BA,IACJA,EAAM,WAAW,QAAQ,SAAS,MAGnC,MAAMC,EAAW,IAAI,IAAID,CAAG,EAC5BC,EAAS,aAAa,OAAO,MAAO,cAAc,EAClDA,EAAS,aAAa,OAAO,YAAa,KAAK,QAAQ,QAAQ,EAC/DA,EAAS,aAAa,OAAO,eAAgB,KAAK,QAAQ,WAAW,EAErE,MAAMC,EAAW,MAAM,KAAK,WAAW,QACtC,GAAG,KAAK,QAAQ,MAAM,wBAAwBD,EAAS,aAAa,UAAU,GAC9E,CACC,QAAS,CACR,kBAAmB,GAAA,CACpB,CACD,EAGD,GAAI,CAACC,EAAS,GAAI,CACjB,GAAIA,EAAS,SAAW,IAAK,CAC5B,MAAMC,EAAO,MAAMD,EAAS,KAAA,EAC5B,IAAIE,EAAU,uCAEV,OAAOD,GAAS,WACfA,EAAK,MACRC,EAAU,GAAGD,EAAK,KAAK,KAAKA,EAAK,iBAAiB,GACxCA,EAAK,WACfC,EAAUD,EAAK,WAIjB,MAAME,EAAQ,IAAI,MAAMD,CAAO,EAC/B,WAAK,SAAS,MAAM,sBAAuBC,CAAK,EAC1CA,CACP,CAEA,MAAMA,EAAQ,IAAI,MAAM,oCAAoCH,EAAS,MAAM,EAAE,EAC7E,WAAK,SAAS,MAAM,sBAAuBG,CAAK,EAC1CA,CACP,CAEA,IAAIC,EAEJ,GAAI,CACHA,EAAM,IAAI,IAAI,MAAMJ,EAAS,MAAM,CACpC,MAAQ,CACPI,EAAM,IAAI,IAAIJ,EAAS,GAAG,CAC3B,CAEA,MAAMK,EAAaD,EAAI,aAAa,IAAI,cAAc,EAChDE,EAAYF,EAAI,aAAa,IAAI,YAAY,EAC7CG,EAAWH,EAAI,aAAa,IAAI,UAAU,GAAK,UAAU,SAE/D,GAAI,CAACC,EAAY,CAChB,MAAMF,EAAQ,IAAI,MAAM,6CAA6C,EACrE,WAAK,SAAS,MAAM,uBAAwBA,CAAK,EAC3CA,CACP,CACA,GAAI,CAACG,EAAW,CACf,MAAMH,EAAQ,IAAI,MAAM,2CAA2C,EACnE,WAAK,SAAS,MAAM,uBAAwBA,CAAK,EAC3CA,CACP,CAEA,MAAO,CAAE,WAAYG,EAAW,aAAcD,EAAY,SAAAE,CAAA,CAC3D,CASA,MAAM,eAAeT,EAA6B,CACjD,GAAI,OAAO,KAAK,QAAQ,iBAAoB,WAAY,CACvD,MAAMK,EAAQ,IAAI,MAAM,iCAAiC,EACzD,WAAK,SAAS,MAAM,0BAA2BA,CAAK,EAC9CA,CACP,CAEKL,IACJA,EAAM,WAAW,QAAQ,SAAS,MAGnC,MAAM,KAAK,cAAe,MAAM,KAAK,QAAQ,gBAAgBA,EAAK,KAAK,QAAQ,cAAgB,UAAU,CAA4B,CACtI,CACD"}