@vaadin/hilla-frontend 24.7.0-alpha9 → 24.8.0-alpha1

package/Authentication.d.ts

@@ -1,71 +1,70 @@
-import type { MiddlewareClass, MiddlewareContext, MiddlewareNext } from './Connect.js';
+import type { MiddlewareClass, MiddlewareContext, MiddlewareNext } from "./Connect.js";
 export interface LoginResult {
-    error: boolean;
-    token?: string;
-    errorTitle?: string;
-    errorMessage?: string;
-    redirectUrl?: string;
-    defaultUrl?: string;
+	error: boolean;
+	token?: string;
+	errorTitle?: string;
+	errorMessage?: string;
+	redirectUrl?: string;
+	defaultUrl?: string;
 }
 export type SuccessCallback = () => Promise<void> | void;
 export type NavigateFunction = (path: string) => void;
 export interface LoginOptions {
-    /**
-     * The URL for login request, defaults to `/login`.
-     */
-    loginProcessingUrl?: URL | string;
-    /**
-     * The success callback.
-     */
-    onSuccess?: SuccessCallback;
-    /**
-     * The navigation callback, called after successful login. The default
-     * reloads the page.
-     */
-    navigate?: NavigateFunction;
+	/**
+	* The URL for login request, defaults to `/login`.
+	*/
+	loginProcessingUrl?: URL | string;
+	/**
+	* The success callback.
+	*/
+	onSuccess?: SuccessCallback;
+	/**
+	* The navigation callback, called after successful login. The default
+	* reloads the page.
+	*/
+	navigate?: NavigateFunction;
 }
 export interface LogoutOptions {
-    /**
-     * The URL for logout request, defaults to `/logout`.
-     */
-    logoutUrl?: URL | string;
-    /**
-     * The success callback.
-     */
-    onSuccess?: SuccessCallback;
-    /**
-     * The navigation callback, called after successful logout. The default
-     * reloads the page.
-     */
-    navigate?: NavigateFunction;
+	/**
+	* The URL for logout request, defaults to `/logout`.
+	*/
+	logoutUrl?: URL | string;
+	/**
+	* The success callback.
+	*/
+	onSuccess?: SuccessCallback;
+	/**
+	* The navigation callback, called after successful logout. The default
+	* reloads the page.
+	*/
+	navigate?: NavigateFunction;
 }
 /**
- * A helper method for Spring Security based form login.
- * @param username - username
- * @param password - password
- * @param options - defines additional options, e.g, the loginProcessingUrl etc.
- */
+* A helper method for Spring Security based form login.
+* @param username - username
+* @param password - password
+* @param options - defines additional options, e.g, the loginProcessingUrl etc.
+*/
 export declare function login(username: string, password: string, options?: LoginOptions): Promise<LoginResult>;
 /**
- * A helper method for Spring Security based form logout
- * @param options - defines additional options, e.g, the logoutUrl.
- */
+* A helper method for Spring Security based form logout
+* @param options - defines additional options, e.g, the logoutUrl.
+*/
 export declare function logout(options?: LogoutOptions): Promise<void>;
 /**
- * It defines what to do when it detects a session is invalid. E.g.,
- * show a login view.
- * It takes an <code>EndpointCallContinue</code> parameter, which can be
- * used to continue the endpoint call.
- */
+* It defines what to do when it detects a session is invalid. E.g.,
+* show a login view.
+* It takes an <code>EndpointCallContinue</code> parameter, which can be
+* used to continue the endpoint call.
+*/
 export type OnInvalidSessionCallback = () => Promise<LoginResult>;
 /**
- * A helper class for handling invalid sessions during an endpoint call.
- * E.g., you can use this to show user a login page when the session has
- * expired.
- */
+* A helper class for handling invalid sessions during an endpoint call.
+* E.g., you can use this to show user a login page when the session has
+* expired.
+*/
 export declare class InvalidSessionMiddleware implements MiddlewareClass {
-    private readonly onInvalidSessionCallback;
-    constructor(onInvalidSessionCallback: OnInvalidSessionCallback);
-    invoke(context: MiddlewareContext, next: MiddlewareNext): Promise<Response>;
+	private readonly onInvalidSessionCallback;
+	constructor(onInvalidSessionCallback: OnInvalidSessionCallback);
+	invoke(context: MiddlewareContext, next: MiddlewareNext): Promise<Response>;
 }
-//# sourceMappingURL=Authentication.d.ts.map

package/Authentication.js

@@ -2,166 +2,182 @@ import CookieManager from "./CookieManager.js";
 import { getSpringCsrfInfo, getSpringCsrfTokenHeadersForAuthRequest, VAADIN_CSRF_HEADER } from "./CsrfUtils.js";
 const JWT_COOKIE_NAME = "jwt.headerAndPayload";
 function getSpringCsrfTokenFromResponseBody(body) {
-  const doc = new DOMParser().parseFromString(body, "text/html");
-  return getSpringCsrfInfo(doc);
+	const doc = new DOMParser().parseFromString(body, "text/html");
+	return getSpringCsrfInfo(doc);
 }
 function clearSpringCsrfMetaTags() {
-  Array.from(document.head.querySelectorAll('meta[name="_csrf"], meta[name="_csrf_header"]')).forEach(
-    (el) => el.remove()
-  );
+	Array.from(document.head.querySelectorAll("meta[name=\"_csrf\"], meta[name=\"_csrf_header\"]")).forEach((el) => el.remove());
 }
 function updateSpringCsrfMetaTags(springCsrfInfo) {
-  clearSpringCsrfMetaTags();
-  const headerNameMeta = document.createElement("meta");
-  headerNameMeta.name = "_csrf_header";
-  headerNameMeta.content = springCsrfInfo._csrf_header;
-  document.head.appendChild(headerNameMeta);
-  const tokenMeta = document.createElement("meta");
-  tokenMeta.name = "_csrf";
-  tokenMeta.content = springCsrfInfo._csrf;
-  document.head.appendChild(tokenMeta);
+	clearSpringCsrfMetaTags();
+	const headerNameMeta = document.createElement("meta");
+	headerNameMeta.name = "_csrf_header";
+	headerNameMeta.content = springCsrfInfo._csrf_header;
+	document.head.appendChild(headerNameMeta);
+	const tokenMeta = document.createElement("meta");
+	tokenMeta.name = "_csrf";
+	tokenMeta.content = springCsrfInfo._csrf;
+	document.head.appendChild(tokenMeta);
 }
 const getVaadinCsrfTokenFromResponseBody = (body) => {
-  const match = /window\.Vaadin = \{TypeScript: \{"csrfToken":"([0-9a-zA-Z\\-]{36})"\}\};/iu.exec(body);
-  return match ? match[1] : void 0;
+	const match = /window\.Vaadin = \{TypeScript: \{"csrfToken":"([0-9a-zA-Z\\-]{36})"\}\};/iu.exec(body);
+	return match ? match[1] : undefined;
 };
 async function updateCsrfTokensBasedOnResponse(response) {
-  const responseText = await response.text();
-  const token = getVaadinCsrfTokenFromResponseBody(responseText);
-  const springCsrfTokenInfo = getSpringCsrfTokenFromResponseBody(responseText);
-  updateSpringCsrfMetaTags(springCsrfTokenInfo);
-  return token;
+	const responseText = await response.text();
+	const token = getVaadinCsrfTokenFromResponseBody(responseText);
+	const springCsrfTokenInfo = getSpringCsrfTokenFromResponseBody(responseText);
+	updateSpringCsrfMetaTags(springCsrfTokenInfo);
+	return token;
 }
 async function doLogout(logoutUrl, headers) {
-  const response = await fetch(logoutUrl, { headers, method: "POST" });
-  if (!response.ok) {
-    throw new Error(`failed to logout with response ${response.status}`);
-  }
-  await updateCsrfTokensBasedOnResponse(response);
-  return response;
+	const response = await fetch(logoutUrl, {
+		headers,
+		method: "POST"
+	});
+	if (!response.ok) {
+		throw new Error(`failed to logout with response ${response.status}`);
+	}
+	await updateCsrfTokensBasedOnResponse(response);
+	return response;
 }
 function normalizePath(url) {
-  const effectiveBaseURL = new URL(".", document.baseURI);
-  const effectiveBaseURI = effectiveBaseURL.toString();
-  let normalized = url;
-  if (normalized.startsWith(effectiveBaseURL.pathname)) {
-    return `/${normalized.slice(effectiveBaseURL.pathname.length)}`;
-  }
-  normalized = normalized.startsWith(effectiveBaseURI) ? `/${normalized.slice(effectiveBaseURI.length)}` : normalized;
-  return normalized;
+	const effectiveBaseURL = new URL(".", document.baseURI);
+	const effectiveBaseURI = effectiveBaseURL.toString();
+	let normalized = url;
+	if (normalized.startsWith(effectiveBaseURL.pathname)) {
+		return `/${normalized.slice(effectiveBaseURL.pathname.length)}`;
+	}
+	normalized = normalized.startsWith(effectiveBaseURI) ? `/${normalized.slice(effectiveBaseURI.length)}` : normalized;
+	return normalized;
 }
+/**
+* Navigates to the provided path using page reload.
+*
+* @param to - navigation target path
+*/
 function navigateWithPageReload(to) {
-  const url = to.startsWith("/") ? new URL(`.${to}`, document.baseURI) : to;
-  window.location.replace(url);
+	const url = to.startsWith("/") ? new URL(`.${to}`, document.baseURI) : to;
+	window.location.replace(url);
 }
-async function login(username, password, options) {
-  try {
-    const data = new FormData();
-    data.append("username", username);
-    data.append("password", password);
-    const loginProcessingUrl = options?.loginProcessingUrl ?? "login";
-    const headers = getSpringCsrfTokenHeadersForAuthRequest(document);
-    headers.source = "typescript";
-    const response = await fetch(loginProcessingUrl, {
-      body: data,
-      headers,
-      method: "POST"
-    });
-    const result = response.headers.get("Result");
-    const savedUrl = response.headers.get("Saved-url") ?? void 0;
-    const defaultUrl = response.headers.get("Default-url") ?? void 0;
-    const loginSuccessful = response.ok && result === "success";
-    if (loginSuccessful) {
-      const vaadinCsrfToken = response.headers.get("Vaadin-CSRF") ?? void 0;
-      const springCsrfHeader = response.headers.get("Spring-CSRF-header") ?? void 0;
-      const springCsrfToken = response.headers.get("Spring-CSRF-token") ?? void 0;
-      if (springCsrfHeader && springCsrfToken) {
-        const springCsrfTokenInfo = {};
-        springCsrfTokenInfo._csrf = springCsrfToken;
-        springCsrfTokenInfo._csrf_header = springCsrfHeader;
-        updateSpringCsrfMetaTags(springCsrfTokenInfo);
-      }
-      if (options?.onSuccess) {
-        await options.onSuccess();
-      }
-      const url = savedUrl ?? defaultUrl ?? document.baseURI;
-      const toPath = normalizePath(url);
-      const navigate = options?.navigate ?? navigateWithPageReload;
-      navigate(toPath);
-      return {
-        defaultUrl,
-        error: false,
-        redirectUrl: savedUrl,
-        token: vaadinCsrfToken
-      };
-    }
-    return {
-      error: true,
-      errorMessage: "Check that you have entered the correct username and password and try again.",
-      errorTitle: "Incorrect username or password."
-    };
-  } catch (e) {
-    if (e instanceof Error) {
-      return {
-        error: true,
-        errorMessage: e.message,
-        errorTitle: e.name
-      };
-    }
-    throw e;
-  }
+/**
+* A helper method for Spring Security based form login.
+* @param username - username
+* @param password - password
+* @param options - defines additional options, e.g, the loginProcessingUrl etc.
+*/
+export async function login(username, password, options) {
+	try {
+		const data = new FormData();
+		data.append("username", username);
+		data.append("password", password);
+		const loginProcessingUrl = options?.loginProcessingUrl ?? "login";
+		const headers = getSpringCsrfTokenHeadersForAuthRequest(document);
+		headers.source = "typescript";
+		const response = await fetch(loginProcessingUrl, {
+			body: data,
+			headers,
+			method: "POST"
+		});
+		const result = response.headers.get("Result");
+		const savedUrl = response.headers.get("Saved-url") ?? undefined;
+		const defaultUrl = response.headers.get("Default-url") ?? undefined;
+		const loginSuccessful = response.ok && result === "success";
+		if (loginSuccessful) {
+			const vaadinCsrfToken = response.headers.get("Vaadin-CSRF") ?? undefined;
+			const springCsrfHeader = response.headers.get("Spring-CSRF-header") ?? undefined;
+			const springCsrfToken = response.headers.get("Spring-CSRF-token") ?? undefined;
+			if (springCsrfHeader && springCsrfToken) {
+				const springCsrfTokenInfo = {};
+				springCsrfTokenInfo._csrf = springCsrfToken;
+				springCsrfTokenInfo._csrf_header = springCsrfHeader;
+				updateSpringCsrfMetaTags(springCsrfTokenInfo);
+			}
+			if (options?.onSuccess) {
+				await options.onSuccess();
+			}
+			const url = savedUrl ?? defaultUrl ?? document.baseURI;
+			const toPath = normalizePath(url);
+			const navigate = options?.navigate ?? navigateWithPageReload;
+			navigate(toPath);
+			return {
+				defaultUrl,
+				error: false,
+				redirectUrl: savedUrl,
+				token: vaadinCsrfToken
+			};
+		}
+		return {
+			error: true,
+			errorMessage: "Check that you have entered the correct username and password and try again.",
+			errorTitle: "Incorrect username or password."
+		};
+	} catch (e) {
+		if (e instanceof Error) {
+			return {
+				error: true,
+				errorMessage: e.message,
+				errorTitle: e.name
+			};
+		}
+		throw e;
+	}
 }
-async function logout(options) {
-  const logoutUrl = options?.logoutUrl ?? "logout";
-  let response;
-  try {
-    const headers = getSpringCsrfTokenHeadersForAuthRequest(document);
-    response = await doLogout(logoutUrl, headers);
-  } catch {
-    try {
-      const noCacheResponse = await fetch("?nocache");
-      const responseText = await noCacheResponse.text();
-      const doc = new DOMParser().parseFromString(responseText, "text/html");
-      const headers = getSpringCsrfTokenHeadersForAuthRequest(doc);
-      response = await doLogout(logoutUrl, headers);
-    } catch (error) {
-      clearSpringCsrfMetaTags();
-      throw error;
-    }
-  } finally {
-    CookieManager.remove(JWT_COOKIE_NAME);
-    if (response && response.ok && response.redirected) {
-      if (options?.onSuccess) {
-        await options.onSuccess();
-      }
-      const toPath = normalizePath(response.url);
-      const navigate = options?.navigate ?? navigateWithPageReload;
-      navigate(toPath);
-    }
-  }
+/**
+* A helper method for Spring Security based form logout
+* @param options - defines additional options, e.g, the logoutUrl.
+*/
+export async function logout(options) {
+	const logoutUrl = options?.logoutUrl ?? "logout";
+	let response;
+	try {
+		const headers = getSpringCsrfTokenHeadersForAuthRequest(document);
+		response = await doLogout(logoutUrl, headers);
+	} catch {
+		try {
+			const noCacheResponse = await fetch("?nocache");
+			const responseText = await noCacheResponse.text();
+			const doc = new DOMParser().parseFromString(responseText, "text/html");
+			const headers = getSpringCsrfTokenHeadersForAuthRequest(doc);
+			response = await doLogout(logoutUrl, headers);
+		} catch (error) {
+			clearSpringCsrfMetaTags();
+			throw error;
+		}
+	} finally {
+		CookieManager.remove(JWT_COOKIE_NAME);
+		if (response && response.ok && response.redirected) {
+			if (options?.onSuccess) {
+				await options.onSuccess();
+			}
+			const toPath = normalizePath(response.url);
+			const navigate = options?.navigate ?? navigateWithPageReload;
+			navigate(toPath);
+		}
+	}
 }
-class InvalidSessionMiddleware {
-  onInvalidSessionCallback;
-  constructor(onInvalidSessionCallback) {
-    this.onInvalidSessionCallback = onInvalidSessionCallback;
-  }
-  async invoke(context, next) {
-    const clonedContext = { ...context };
-    clonedContext.request = context.request.clone();
-    const response = await next(context);
-    if (response.status === 401) {
-      const loginResult = await this.onInvalidSessionCallback();
-      if (loginResult.token) {
-        clonedContext.request.headers.set(VAADIN_CSRF_HEADER, loginResult.token);
-        return next(clonedContext);
-      }
-    }
-    return response;
-  }
+/**
+* A helper class for handling invalid sessions during an endpoint call.
+* E.g., you can use this to show user a login page when the session has
+* expired.
+*/
+export class InvalidSessionMiddleware {
+	onInvalidSessionCallback;
+	constructor(onInvalidSessionCallback) {
+		this.onInvalidSessionCallback = onInvalidSessionCallback;
+	}
+	async invoke(context, next) {
+		const clonedContext = { ...context };
+		clonedContext.request = context.request.clone();
+		const response = await next(context);
+		if (response.status === 401) {
+			const loginResult = await this.onInvalidSessionCallback();
+			if (loginResult.token) {
+				clonedContext.request.headers.set(VAADIN_CSRF_HEADER, loginResult.token);
+				return next(clonedContext);
+			}
+		}
+		return response;
+	}
 }
-export {
-  InvalidSessionMiddleware,
-  login,
-  logout
-};
-//# sourceMappingURL=Authentication.js.map
+//# sourceMappingURL=./Authentication.js.map

package/Authentication.js.map

@@ -1,7 +1 @@
-{
-  "version": 3,
-  "sources": ["src/Authentication.ts"],
-  "sourcesContent": ["import type { MiddlewareClass, MiddlewareContext, MiddlewareNext } from './Connect.js';\nimport CookieManager from './CookieManager.js';\nimport { getSpringCsrfInfo, getSpringCsrfTokenHeadersForAuthRequest, VAADIN_CSRF_HEADER } from './CsrfUtils.js';\n\nconst JWT_COOKIE_NAME = 'jwt.headerAndPayload';\n\nfunction getSpringCsrfTokenFromResponseBody(body: string): Record<string, string> {\n  const doc = new DOMParser().parseFromString(body, 'text/html');\n  return getSpringCsrfInfo(doc);\n}\n\nfunction clearSpringCsrfMetaTags() {\n  Array.from(document.head.querySelectorAll('meta[name=\"_csrf\"], meta[name=\"_csrf_header\"]')).forEach((el) =>\n    el.remove(),\n  );\n}\n\nfunction updateSpringCsrfMetaTags(springCsrfInfo: Record<string, string>) {\n  clearSpringCsrfMetaTags();\n  const headerNameMeta: HTMLMetaElement = document.createElement('meta');\n  headerNameMeta.name = '_csrf_header';\n  headerNameMeta.content = springCsrfInfo._csrf_header;\n  document.head.appendChild(headerNameMeta);\n  const tokenMeta: HTMLMetaElement = document.createElement('meta');\n  tokenMeta.name = '_csrf';\n  tokenMeta.content = springCsrfInfo._csrf;\n  document.head.appendChild(tokenMeta);\n}\n\nconst getVaadinCsrfTokenFromResponseBody = (body: string): string | undefined => {\n  const match = /window\\.Vaadin = \\{TypeScript: \\{\"csrfToken\":\"([0-9a-zA-Z\\\\-]{36})\"\\}\\};/iu.exec(body);\n  return match ? match[1] : undefined;\n};\n\nasync function updateCsrfTokensBasedOnResponse(response: Response): Promise<string | undefined> {\n  const responseText = await response.text();\n  const token = getVaadinCsrfTokenFromResponseBody(responseText);\n  const springCsrfTokenInfo = getSpringCsrfTokenFromResponseBody(responseText);\n  updateSpringCsrfMetaTags(springCsrfTokenInfo);\n\n  return token;\n}\n\nasync function doLogout(logoutUrl: URL | string, headers: Record<string, string>) {\n  const response = await fetch(logoutUrl, { headers, method: 'POST' });\n  if (!response.ok) {\n    throw new Error(`failed to logout with response ${response.status}`);\n  }\n\n  await updateCsrfTokensBasedOnResponse(response);\n\n  return response;\n}\n\nexport interface LoginResult {\n  error: boolean;\n  token?: string;\n  errorTitle?: string;\n  errorMessage?: string;\n  redirectUrl?: string;\n  defaultUrl?: string;\n}\n\nexport type SuccessCallback = () => Promise<void> | void;\n\nexport type NavigateFunction = (path: string) => void;\n\nexport interface LoginOptions {\n  /**\n   * The URL for login request, defaults to `/login`.\n   */\n  loginProcessingUrl?: URL | string;\n\n  /**\n   * The success callback.\n   */\n  onSuccess?: SuccessCallback;\n\n  /**\n   * The navigation callback, called after successful login. The default\n   * reloads the page.\n   */\n  navigate?: NavigateFunction;\n}\n\nexport interface LogoutOptions {\n  /**\n   * The URL for logout request, defaults to `/logout`.\n   */\n  logoutUrl?: URL | string;\n\n  /**\n   * The success callback.\n   */\n  onSuccess?: SuccessCallback;\n\n  /**\n   * The navigation callback, called after successful logout. The default\n   * reloads the page.\n   */\n  navigate?: NavigateFunction;\n}\n\nfunction normalizePath(url: string): string {\n  // URL with context path\n  const effectiveBaseURL = new URL('.', document.baseURI);\n  const effectiveBaseURI = effectiveBaseURL.toString();\n\n  let normalized = url;\n\n  // Strip context path prefix\n  if (normalized.startsWith(effectiveBaseURL.pathname)) {\n    return `/${normalized.slice(effectiveBaseURL.pathname.length)}`;\n  }\n\n  // Strip base URI\n  normalized = normalized.startsWith(effectiveBaseURI) ? `/${normalized.slice(effectiveBaseURI.length)}` : normalized;\n\n  return normalized;\n}\n\n/**\n * Navigates to the provided path using page reload.\n *\n * @param to - navigation target path\n */\nfunction navigateWithPageReload(to: string) {\n  // Consider absolute path to be within application context\n  const url = to.startsWith('/') ? new URL(`.${to}`, document.baseURI) : to;\n  window.location.replace(url);\n}\n\n/**\n * A helper method for Spring Security based form login.\n * @param username - username\n * @param password - password\n * @param options - defines additional options, e.g, the loginProcessingUrl etc.\n */\nexport async function login(username: string, password: string, options?: LoginOptions): Promise<LoginResult> {\n  try {\n    const data = new FormData();\n    data.append('username', username);\n    data.append('password', password);\n\n    const loginProcessingUrl = options?.loginProcessingUrl ?? 'login';\n    const headers = getSpringCsrfTokenHeadersForAuthRequest(document);\n    headers.source = 'typescript';\n    const response = await fetch(loginProcessingUrl, {\n      body: data,\n      headers,\n      method: 'POST',\n    });\n\n    // This code assumes that a VaadinSavedRequestAwareAuthenticationSuccessHandler is used on the server side,\n    // setting these header values based on the \"source=typescript\" header set above\n\n    const result = response.headers.get('Result');\n    const savedUrl = response.headers.get('Saved-url') ?? undefined;\n    const defaultUrl = response.headers.get('Default-url') ?? undefined;\n    const loginSuccessful = response.ok && result === 'success';\n\n    if (loginSuccessful) {\n      const vaadinCsrfToken = response.headers.get('Vaadin-CSRF') ?? undefined;\n\n      const springCsrfHeader = response.headers.get('Spring-CSRF-header') ?? undefined;\n      const springCsrfToken = response.headers.get('Spring-CSRF-token') ?? undefined;\n      if (springCsrfHeader && springCsrfToken) {\n        const springCsrfTokenInfo: Record<string, string> = {};\n        springCsrfTokenInfo._csrf = springCsrfToken;\n        // eslint-disable-next-line camelcase\n        springCsrfTokenInfo._csrf_header = springCsrfHeader;\n        updateSpringCsrfMetaTags(springCsrfTokenInfo);\n      }\n\n      if (options?.onSuccess) {\n        await options.onSuccess();\n      }\n\n      const url = savedUrl ?? defaultUrl ?? document.baseURI;\n      const toPath = normalizePath(url);\n      const navigate = options?.navigate ?? navigateWithPageReload;\n      navigate(toPath);\n\n      return {\n        defaultUrl,\n        error: false,\n        redirectUrl: savedUrl,\n        token: vaadinCsrfToken,\n      };\n    }\n    return {\n      error: true,\n      errorMessage: 'Check that you have entered the correct username and password and try again.',\n      errorTitle: 'Incorrect username or password.',\n    };\n  } catch (e: unknown) {\n    if (e instanceof Error) {\n      return {\n        error: true,\n        errorMessage: e.message,\n        errorTitle: e.name,\n      };\n    }\n\n    throw e;\n  }\n}\n\n/**\n * A helper method for Spring Security based form logout\n * @param options - defines additional options, e.g, the logoutUrl.\n */\nexport async function logout(options?: LogoutOptions): Promise<void> {\n  // this assumes the default Spring Security logout configuration (handler URL)\n  const logoutUrl = options?.logoutUrl ?? 'logout';\n  let response: Response | undefined;\n  try {\n    const headers = getSpringCsrfTokenHeadersForAuthRequest(document);\n    response = await doLogout(logoutUrl, headers);\n  } catch {\n    try {\n      const noCacheResponse = await fetch('?nocache');\n      const responseText = await noCacheResponse.text();\n      const doc = new DOMParser().parseFromString(responseText, 'text/html');\n      const headers = getSpringCsrfTokenHeadersForAuthRequest(doc);\n      response = await doLogout(logoutUrl, headers);\n    } catch (error) {\n      // clear the token if the call fails\n      clearSpringCsrfMetaTags();\n      throw error;\n    }\n  } finally {\n    CookieManager.remove(JWT_COOKIE_NAME);\n    if (response && response.ok && response.redirected) {\n      if (options?.onSuccess) {\n        await options.onSuccess();\n      }\n      const toPath = normalizePath(response.url);\n      const navigate = options?.navigate ?? navigateWithPageReload;\n      navigate(toPath);\n    }\n  }\n}\n\n/**\n * It defines what to do when it detects a session is invalid. E.g.,\n * show a login view.\n * It takes an <code>EndpointCallContinue</code> parameter, which can be\n * used to continue the endpoint call.\n */\nexport type OnInvalidSessionCallback = () => Promise<LoginResult>;\n\n/**\n * A helper class for handling invalid sessions during an endpoint call.\n * E.g., you can use this to show user a login page when the session has\n * expired.\n */\nexport class InvalidSessionMiddleware implements MiddlewareClass {\n  private readonly onInvalidSessionCallback: OnInvalidSessionCallback;\n\n  constructor(onInvalidSessionCallback: OnInvalidSessionCallback) {\n    this.onInvalidSessionCallback = onInvalidSessionCallback;\n  }\n\n  async invoke(context: MiddlewareContext, next: MiddlewareNext): Promise<Response> {\n    const clonedContext = { ...context };\n    clonedContext.request = context.request.clone();\n    const response = await next(context);\n    if (response.status === 401) {\n      const loginResult = await this.onInvalidSessionCallback();\n      if (loginResult.token) {\n        clonedContext.request.headers.set(VAADIN_CSRF_HEADER, loginResult.token);\n        return next(clonedContext) as Promise<Response>;\n      }\n    }\n    return response;\n  }\n}\n"],
-  "mappings": "AACA,OAAO,mBAAmB;AAC1B,SAAS,mBAAmB,yCAAyC,0BAA0B;AAE/F,MAAM,kBAAkB;AAExB,SAAS,mCAAmC,MAAsC;AAChF,QAAM,MAAM,IAAI,UAAU,EAAE,gBAAgB,MAAM,WAAW;AAC7D,SAAO,kBAAkB,GAAG;AAC9B;AAEA,SAAS,0BAA0B;AACjC,QAAM,KAAK,SAAS,KAAK,iBAAiB,+CAA+C,CAAC,EAAE;AAAA,IAAQ,CAAC,OACnG,GAAG,OAAO;AAAA,EACZ;AACF;AAEA,SAAS,yBAAyB,gBAAwC;AACxE,0BAAwB;AACxB,QAAM,iBAAkC,SAAS,cAAc,MAAM;AACrE,iBAAe,OAAO;AACtB,iBAAe,UAAU,eAAe;AACxC,WAAS,KAAK,YAAY,cAAc;AACxC,QAAM,YAA6B,SAAS,cAAc,MAAM;AAChE,YAAU,OAAO;AACjB,YAAU,UAAU,eAAe;AACnC,WAAS,KAAK,YAAY,SAAS;AACrC;AAEA,MAAM,qCAAqC,CAAC,SAAqC;AAC/E,QAAM,QAAQ,6EAA6E,KAAK,IAAI;AACpG,SAAO,QAAQ,MAAM,CAAC,IAAI;AAC5B;AAEA,eAAe,gCAAgC,UAAiD;AAC9F,QAAM,eAAe,MAAM,SAAS,KAAK;AACzC,QAAM,QAAQ,mCAAmC,YAAY;AAC7D,QAAM,sBAAsB,mCAAmC,YAAY;AAC3E,2BAAyB,mBAAmB;AAE5C,SAAO;AACT;AAEA,eAAe,SAAS,WAAyB,SAAiC;AAChF,QAAM,WAAW,MAAM,MAAM,WAAW,EAAE,SAAS,QAAQ,OAAO,CAAC;AACnE,MAAI,CAAC,SAAS,IAAI;AAChB,UAAM,IAAI,MAAM,kCAAkC,SAAS,MAAM,EAAE;AAAA,EACrE;AAEA,QAAM,gCAAgC,QAAQ;AAE9C,SAAO;AACT;AAmDA,SAAS,cAAc,KAAqB;AAE1C,QAAM,mBAAmB,IAAI,IAAI,KAAK,SAAS,OAAO;AACtD,QAAM,mBAAmB,iBAAiB,SAAS;AAEnD,MAAI,aAAa;AAGjB,MAAI,WAAW,WAAW,iBAAiB,QAAQ,GAAG;AACpD,WAAO,IAAI,WAAW,MAAM,iBAAiB,SAAS,MAAM,CAAC;AAAA,EAC/D;AAGA,eAAa,WAAW,WAAW,gBAAgB,IAAI,IAAI,WAAW,MAAM,iBAAiB,MAAM,CAAC,KAAK;AAEzG,SAAO;AACT;AAOA,SAAS,uBAAuB,IAAY;AAE1C,QAAM,MAAM,GAAG,WAAW,GAAG,IAAI,IAAI,IAAI,IAAI,EAAE,IAAI,SAAS,OAAO,IAAI;AACvE,SAAO,SAAS,QAAQ,GAAG;AAC7B;AAQA,eAAsB,MAAM,UAAkB,UAAkB,SAA8C;AAC5G,MAAI;AACF,UAAM,OAAO,IAAI,SAAS;AAC1B,SAAK,OAAO,YAAY,QAAQ;AAChC,SAAK,OAAO,YAAY,QAAQ;AAEhC,UAAM,qBAAqB,SAAS,sBAAsB;AAC1D,UAAM,UAAU,wCAAwC,QAAQ;AAChE,YAAQ,SAAS;AACjB,UAAM,WAAW,MAAM,MAAM,oBAAoB;AAAA,MAC/C,MAAM;AAAA,MACN;AAAA,MACA,QAAQ;AAAA,IACV,CAAC;AAKD,UAAM,SAAS,SAAS,QAAQ,IAAI,QAAQ;AAC5C,UAAM,WAAW,SAAS,QAAQ,IAAI,WAAW,KAAK;AACtD,UAAM,aAAa,SAAS,QAAQ,IAAI,aAAa,KAAK;AAC1D,UAAM,kBAAkB,SAAS,MAAM,WAAW;AAElD,QAAI,iBAAiB;AACnB,YAAM,kBAAkB,SAAS,QAAQ,IAAI,aAAa,KAAK;AAE/D,YAAM,mBAAmB,SAAS,QAAQ,IAAI,oBAAoB,KAAK;AACvE,YAAM,kBAAkB,SAAS,QAAQ,IAAI,mBAAmB,KAAK;AACrE,UAAI,oBAAoB,iBAAiB;AACvC,cAAM,sBAA8C,CAAC;AACrD,4BAAoB,QAAQ;AAE5B,4BAAoB,eAAe;AACnC,iCAAyB,mBAAmB;AAAA,MAC9C;AAEA,UAAI,SAAS,WAAW;AACtB,cAAM,QAAQ,UAAU;AAAA,MAC1B;AAEA,YAAM,MAAM,YAAY,cAAc,SAAS;AAC/C,YAAM,SAAS,cAAc,GAAG;AAChC,YAAM,WAAW,SAAS,YAAY;AACtC,eAAS,MAAM;AAEf,aAAO;AAAA,QACL;AAAA,QACA,OAAO;AAAA,QACP,aAAa;AAAA,QACb,OAAO;AAAA,MACT;AAAA,IACF;AACA,WAAO;AAAA,MACL,OAAO;AAAA,MACP,cAAc;AAAA,MACd,YAAY;AAAA,IACd;AAAA,EACF,SAAS,GAAY;AACnB,QAAI,aAAa,OAAO;AACtB,aAAO;AAAA,QACL,OAAO;AAAA,QACP,cAAc,EAAE;AAAA,QAChB,YAAY,EAAE;AAAA,MAChB;AAAA,IACF;AAEA,UAAM;AAAA,EACR;AACF;AAMA,eAAsB,OAAO,SAAwC;AAEnE,QAAM,YAAY,SAAS,aAAa;AACxC,MAAI;AACJ,MAAI;AACF,UAAM,UAAU,wCAAwC,QAAQ;AAChE,eAAW,MAAM,SAAS,WAAW,OAAO;AAAA,EAC9C,QAAQ;AACN,QAAI;AACF,YAAM,kBAAkB,MAAM,MAAM,UAAU;AAC9C,YAAM,eAAe,MAAM,gBAAgB,KAAK;AAChD,YAAM,MAAM,IAAI,UAAU,EAAE,gBAAgB,cAAc,WAAW;AACrE,YAAM,UAAU,wCAAwC,GAAG;AAC3D,iBAAW,MAAM,SAAS,WAAW,OAAO;AAAA,IAC9C,SAAS,OAAO;AAEd,8BAAwB;AACxB,YAAM;AAAA,IACR;AAAA,EACF,UAAE;AACA,kBAAc,OAAO,eAAe;AACpC,QAAI,YAAY,SAAS,MAAM,SAAS,YAAY;AAClD,UAAI,SAAS,WAAW;AACtB,cAAM,QAAQ,UAAU;AAAA,MAC1B;AACA,YAAM,SAAS,cAAc,SAAS,GAAG;AACzC,YAAM,WAAW,SAAS,YAAY;AACtC,eAAS,MAAM;AAAA,IACjB;AAAA,EACF;AACF;AAeO,MAAM,yBAAoD;AAAA,EAC9C;AAAA,EAEjB,YAAY,0BAAoD;AAC9D,SAAK,2BAA2B;AAAA,EAClC;AAAA,EAEA,MAAM,OAAO,SAA4B,MAAyC;AAChF,UAAM,gBAAgB,EAAE,GAAG,QAAQ;AACnC,kBAAc,UAAU,QAAQ,QAAQ,MAAM;AAC9C,UAAM,WAAW,MAAM,KAAK,OAAO;AACnC,QAAI,SAAS,WAAW,KAAK;AAC3B,YAAM,cAAc,MAAM,KAAK,yBAAyB;AACxD,UAAI,YAAY,OAAO;AACrB,sBAAc,QAAQ,QAAQ,IAAI,oBAAoB,YAAY,KAAK;AACvE,eAAO,KAAK,aAAa;AAAA,MAC3B;AAAA,IACF;AACA,WAAO;AAAA,EACT;AACF;",
-  "names": []
-}
+{"mappings":"AACA,OAAO,uCAAwC;AAC/C,SAAS,mBAAmB,yCAAyC,0CAA2C;AAEhH,MAAM,kBAAkB;AAExB,SAAS,mCAAmCA,MAAsC;CAChF,MAAM,MAAM,IAAI,YAAY,gBAAgB,MAAM,YAAY;AAC9D,QAAO,kBAAkB,IAAI;AAC9B;AAED,SAAS,0BAA0B;AACjC,OAAM,KAAK,SAAS,KAAK,iBAAiB,oDAAgD,CAAC,CAAC,QAAQ,CAAC,OACnG,GAAG,QAAQ,CACZ;AACF;AAED,SAAS,yBAAyBC,gBAAwC;AACxE,0BAAyB;CACzB,MAAMC,iBAAkC,SAAS,cAAc,OAAO;AACtE,gBAAe,OAAO;AACtB,gBAAe,UAAU,eAAe;AACxC,UAAS,KAAK,YAAY,eAAe;CACzC,MAAMC,YAA6B,SAAS,cAAc,OAAO;AACjE,WAAU,OAAO;AACjB,WAAU,UAAU,eAAe;AACnC,UAAS,KAAK,YAAY,UAAU;AACrC;AAED,MAAM,qCAAqC,CAACH,SAAqC;CAC/E,MAAM,QAAQ,6EAA6E,KAAK,KAAK;AACrG,QAAO,QAAQ,MAAM,KAAK;AAC3B;AAED,eAAe,gCAAgCI,UAAiD;CAC9F,MAAM,eAAe,MAAM,SAAS,MAAM;CAC1C,MAAM,QAAQ,mCAAmC,aAAa;CAC9D,MAAM,sBAAsB,mCAAmC,aAAa;AAC5E,0BAAyB,oBAAoB;AAE7C,QAAO;AACR;AAED,eAAe,SAASC,WAAyBC,SAAiC;CAChF,MAAM,WAAW,MAAM,MAAM,WAAW;EAAE;EAAS,QAAQ;CAAQ,EAAC;AACpE,MAAK,SAAS,IAAI;AAChB,QAAM,IAAI,OAAO,iCAAiC,SAAS,OAAO;CACnE;AAED,OAAM,gCAAgC,SAAS;AAE/C,QAAO;AACR;AAmDD,SAAS,cAAcC,KAAqB;CAE1C,MAAM,mBAAmB,IAAI,IAAI,KAAK,SAAS;CAC/C,MAAM,mBAAmB,iBAAiB,UAAU;CAEpD,IAAI,aAAa;AAGjB,KAAI,WAAW,WAAW,iBAAiB,SAAS,EAAE;AACpD,UAAQ,GAAG,WAAW,MAAM,iBAAiB,SAAS,OAAO,CAAC;CAC/D;AAGD,cAAa,WAAW,WAAW,iBAAiB,IAAI,GAAG,WAAW,MAAM,iBAAiB,OAAO,CAAC,IAAI;AAEzG,QAAO;AACR;;;;;;AAOD,SAAS,uBAAuBC,IAAY;CAE1C,MAAM,MAAM,GAAG,WAAW,IAAI,GAAG,IAAI,KAAK,GAAG,GAAG,GAAG,SAAS,WAAW;AACvE,QAAO,SAAS,QAAQ,IAAI;AAC7B;;;;;;;AAQD,OAAO,eAAe,MAAMC,UAAkBC,UAAkBC,SAA8C;AAC5G,KAAI;EACF,MAAM,OAAO,IAAI;AACjB,OAAK,OAAO,YAAY,SAAS;AACjC,OAAK,OAAO,YAAY,SAAS;EAEjC,MAAM,qBAAqB,SAAS,sBAAsB;EAC1D,MAAM,UAAU,wCAAwC,SAAS;AACjE,UAAQ,SAAS;EACjB,MAAM,WAAW,MAAM,MAAM,oBAAoB;GAC/C,MAAM;GACN;GACA,QAAQ;EACT,EAAC;EAKF,MAAM,SAAS,SAAS,QAAQ,IAAI,SAAS;EAC7C,MAAM,WAAW,SAAS,QAAQ,IAAI,YAAY,IAAI;EACtD,MAAM,aAAa,SAAS,QAAQ,IAAI,cAAc,IAAI;EAC1D,MAAM,kBAAkB,SAAS,MAAM,WAAW;AAElD,MAAI,iBAAiB;GACnB,MAAM,kBAAkB,SAAS,QAAQ,IAAI,cAAc,IAAI;GAE/D,MAAM,mBAAmB,SAAS,QAAQ,IAAI,qBAAqB,IAAI;GACvE,MAAM,kBAAkB,SAAS,QAAQ,IAAI,oBAAoB,IAAI;AACrE,OAAI,oBAAoB,iBAAiB;IACvC,MAAMC,sBAA8C,CAAE;AACtD,wBAAoB,QAAQ;AAE5B,wBAAoB,eAAe;AACnC,6BAAyB,oBAAoB;GAC9C;AAED,OAAI,SAAS,WAAW;AACtB,UAAM,QAAQ,WAAW;GAC1B;GAED,MAAM,MAAM,YAAY,cAAc,SAAS;GAC/C,MAAM,SAAS,cAAc,IAAI;GACjC,MAAM,WAAW,SAAS,YAAY;AACtC,YAAS,OAAO;AAEhB,UAAO;IACL;IACA,OAAO;IACP,aAAa;IACb,OAAO;GACR;EACF;AACD,SAAO;GACL,OAAO;GACP,cAAc;GACd,YAAY;EACb;CACF,SAAQC,GAAY;AACnB,MAAI,aAAa,OAAO;AACtB,UAAO;IACL,OAAO;IACP,cAAc,EAAE;IAChB,YAAY,EAAE;GACf;EACF;AAED,QAAM;CACP;AACF;;;;;AAMD,OAAO,eAAe,OAAOC,SAAwC;CAEnE,MAAM,YAAY,SAAS,aAAa;CACxC,IAAIC;AACJ,KAAI;EACF,MAAM,UAAU,wCAAwC,SAAS;AACjE,aAAW,MAAM,SAAS,WAAW,QAAQ;CAC9C,QAAO;AACN,MAAI;GACF,MAAM,kBAAkB,MAAM,MAAM,WAAW;GAC/C,MAAM,eAAe,MAAM,gBAAgB,MAAM;GACjD,MAAM,MAAM,IAAI,YAAY,gBAAgB,cAAc,YAAY;GACtE,MAAM,UAAU,wCAAwC,IAAI;AAC5D,cAAW,MAAM,SAAS,WAAW,QAAQ;EAC9C,SAAQ,OAAO;AAEd,4BAAyB;AACzB,SAAM;EACP;CACF,UAAS;AACR,gBAAc,OAAO,gBAAgB;AACrC,MAAI,YAAY,SAAS,MAAM,SAAS,YAAY;AAClD,OAAI,SAAS,WAAW;AACtB,UAAM,QAAQ,WAAW;GAC1B;GACD,MAAM,SAAS,cAAc,SAAS,IAAI;GAC1C,MAAM,WAAW,SAAS,YAAY;AACtC,YAAS,OAAO;EACjB;CACF;AACF;;;;;;AAeD,OAAO,MAAM,yBAAoD;CAC/D,AAAiB;CAEjB,YAAYC,0BAAoD;AAC9D,OAAK,2BAA2B;CACjC;CAED,MAAM,OAAOC,SAA4BC,MAAyC;EAChF,MAAM,gBAAgB,EAAE,GAAG,QAAS;AACpC,gBAAc,UAAU,QAAQ,QAAQ,OAAO;EAC/C,MAAM,WAAW,MAAM,KAAK,QAAQ;AACpC,MAAI,SAAS,WAAW,KAAK;GAC3B,MAAM,cAAc,MAAM,KAAK,0BAA0B;AACzD,OAAI,YAAY,OAAO;AACrB,kBAAc,QAAQ,QAAQ,IAAI,oBAAoB,YAAY,MAAM;AACxE,WAAO,KAAK,cAAc;GAC3B;EACF;AACD,SAAO;CACR;AACF","names":["body: string","springCsrfInfo: Record<string, string>","headerNameMeta: HTMLMetaElement","tokenMeta: HTMLMetaElement","response: Response","logoutUrl: URL | string","headers: Record<string, string>","url: string","to: string","username: string","password: string","options?: LoginOptions","springCsrfTokenInfo: Record<string, string>","e: unknown","options?: LogoutOptions","response: Response | undefined","onInvalidSessionCallback: OnInvalidSessionCallback","context: MiddlewareContext","next: MiddlewareNext"],"sources":["/opt/agent/work/1af72d8adc613024/hilla/packages/ts/frontend/src/Authentication.ts"],"sourcesContent":["import type { MiddlewareClass, MiddlewareContext, MiddlewareNext } from './Connect.js';\nimport CookieManager from './CookieManager.js';\nimport { getSpringCsrfInfo, getSpringCsrfTokenHeadersForAuthRequest, VAADIN_CSRF_HEADER } from './CsrfUtils.js';\n\nconst JWT_COOKIE_NAME = 'jwt.headerAndPayload';\n\nfunction getSpringCsrfTokenFromResponseBody(body: string): Record<string, string> {\n  const doc = new DOMParser().parseFromString(body, 'text/html');\n  return getSpringCsrfInfo(doc);\n}\n\nfunction clearSpringCsrfMetaTags() {\n  Array.from(document.head.querySelectorAll('meta[name=\"_csrf\"], meta[name=\"_csrf_header\"]')).forEach((el) =>\n    el.remove(),\n  );\n}\n\nfunction updateSpringCsrfMetaTags(springCsrfInfo: Record<string, string>) {\n  clearSpringCsrfMetaTags();\n  const headerNameMeta: HTMLMetaElement = document.createElement('meta');\n  headerNameMeta.name = '_csrf_header';\n  headerNameMeta.content = springCsrfInfo._csrf_header;\n  document.head.appendChild(headerNameMeta);\n  const tokenMeta: HTMLMetaElement = document.createElement('meta');\n  tokenMeta.name = '_csrf';\n  tokenMeta.content = springCsrfInfo._csrf;\n  document.head.appendChild(tokenMeta);\n}\n\nconst getVaadinCsrfTokenFromResponseBody = (body: string): string | undefined => {\n  const match = /window\\.Vaadin = \\{TypeScript: \\{\"csrfToken\":\"([0-9a-zA-Z\\\\-]{36})\"\\}\\};/iu.exec(body);\n  return match ? match[1] : undefined;\n};\n\nasync function updateCsrfTokensBasedOnResponse(response: Response): Promise<string | undefined> {\n  const responseText = await response.text();\n  const token = getVaadinCsrfTokenFromResponseBody(responseText);\n  const springCsrfTokenInfo = getSpringCsrfTokenFromResponseBody(responseText);\n  updateSpringCsrfMetaTags(springCsrfTokenInfo);\n\n  return token;\n}\n\nasync function doLogout(logoutUrl: URL | string, headers: Record<string, string>) {\n  const response = await fetch(logoutUrl, { headers, method: 'POST' });\n  if (!response.ok) {\n    throw new Error(`failed to logout with response ${response.status}`);\n  }\n\n  await updateCsrfTokensBasedOnResponse(response);\n\n  return response;\n}\n\nexport interface LoginResult {\n  error: boolean;\n  token?: string;\n  errorTitle?: string;\n  errorMessage?: string;\n  redirectUrl?: string;\n  defaultUrl?: string;\n}\n\nexport type SuccessCallback = () => Promise<void> | void;\n\nexport type NavigateFunction = (path: string) => void;\n\nexport interface LoginOptions {\n  /**\n   * The URL for login request, defaults to `/login`.\n   */\n  loginProcessingUrl?: URL | string;\n\n  /**\n   * The success callback.\n   */\n  onSuccess?: SuccessCallback;\n\n  /**\n   * The navigation callback, called after successful login. The default\n   * reloads the page.\n   */\n  navigate?: NavigateFunction;\n}\n\nexport interface LogoutOptions {\n  /**\n   * The URL for logout request, defaults to `/logout`.\n   */\n  logoutUrl?: URL | string;\n\n  /**\n   * The success callback.\n   */\n  onSuccess?: SuccessCallback;\n\n  /**\n   * The navigation callback, called after successful logout. The default\n   * reloads the page.\n   */\n  navigate?: NavigateFunction;\n}\n\nfunction normalizePath(url: string): string {\n  // URL with context path\n  const effectiveBaseURL = new URL('.', document.baseURI);\n  const effectiveBaseURI = effectiveBaseURL.toString();\n\n  let normalized = url;\n\n  // Strip context path prefix\n  if (normalized.startsWith(effectiveBaseURL.pathname)) {\n    return `/${normalized.slice(effectiveBaseURL.pathname.length)}`;\n  }\n\n  // Strip base URI\n  normalized = normalized.startsWith(effectiveBaseURI) ? `/${normalized.slice(effectiveBaseURI.length)}` : normalized;\n\n  return normalized;\n}\n\n/**\n * Navigates to the provided path using page reload.\n *\n * @param to - navigation target path\n */\nfunction navigateWithPageReload(to: string) {\n  // Consider absolute path to be within application context\n  const url = to.startsWith('/') ? new URL(`.${to}`, document.baseURI) : to;\n  window.location.replace(url);\n}\n\n/**\n * A helper method for Spring Security based form login.\n * @param username - username\n * @param password - password\n * @param options - defines additional options, e.g, the loginProcessingUrl etc.\n */\nexport async function login(username: string, password: string, options?: LoginOptions): Promise<LoginResult> {\n  try {\n    const data = new FormData();\n    data.append('username', username);\n    data.append('password', password);\n\n    const loginProcessingUrl = options?.loginProcessingUrl ?? 'login';\n    const headers = getSpringCsrfTokenHeadersForAuthRequest(document);\n    headers.source = 'typescript';\n    const response = await fetch(loginProcessingUrl, {\n      body: data,\n      headers,\n      method: 'POST',\n    });\n\n    // This code assumes that a VaadinSavedRequestAwareAuthenticationSuccessHandler is used on the server side,\n    // setting these header values based on the \"source=typescript\" header set above\n\n    const result = response.headers.get('Result');\n    const savedUrl = response.headers.get('Saved-url') ?? undefined;\n    const defaultUrl = response.headers.get('Default-url') ?? undefined;\n    const loginSuccessful = response.ok && result === 'success';\n\n    if (loginSuccessful) {\n      const vaadinCsrfToken = response.headers.get('Vaadin-CSRF') ?? undefined;\n\n      const springCsrfHeader = response.headers.get('Spring-CSRF-header') ?? undefined;\n      const springCsrfToken = response.headers.get('Spring-CSRF-token') ?? undefined;\n      if (springCsrfHeader && springCsrfToken) {\n        const springCsrfTokenInfo: Record<string, string> = {};\n        springCsrfTokenInfo._csrf = springCsrfToken;\n        // eslint-disable-next-line camelcase\n        springCsrfTokenInfo._csrf_header = springCsrfHeader;\n        updateSpringCsrfMetaTags(springCsrfTokenInfo);\n      }\n\n      if (options?.onSuccess) {\n        await options.onSuccess();\n      }\n\n      const url = savedUrl ?? defaultUrl ?? document.baseURI;\n      const toPath = normalizePath(url);\n      const navigate = options?.navigate ?? navigateWithPageReload;\n      navigate(toPath);\n\n      return {\n        defaultUrl,\n        error: false,\n        redirectUrl: savedUrl,\n        token: vaadinCsrfToken,\n      };\n    }\n    return {\n      error: true,\n      errorMessage: 'Check that you have entered the correct username and password and try again.',\n      errorTitle: 'Incorrect username or password.',\n    };\n  } catch (e: unknown) {\n    if (e instanceof Error) {\n      return {\n        error: true,\n        errorMessage: e.message,\n        errorTitle: e.name,\n      };\n    }\n\n    throw e;\n  }\n}\n\n/**\n * A helper method for Spring Security based form logout\n * @param options - defines additional options, e.g, the logoutUrl.\n */\nexport async function logout(options?: LogoutOptions): Promise<void> {\n  // this assumes the default Spring Security logout configuration (handler URL)\n  const logoutUrl = options?.logoutUrl ?? 'logout';\n  let response: Response | undefined;\n  try {\n    const headers = getSpringCsrfTokenHeadersForAuthRequest(document);\n    response = await doLogout(logoutUrl, headers);\n  } catch {\n    try {\n      const noCacheResponse = await fetch('?nocache');\n      const responseText = await noCacheResponse.text();\n      const doc = new DOMParser().parseFromString(responseText, 'text/html');\n      const headers = getSpringCsrfTokenHeadersForAuthRequest(doc);\n      response = await doLogout(logoutUrl, headers);\n    } catch (error) {\n      // clear the token if the call fails\n      clearSpringCsrfMetaTags();\n      throw error;\n    }\n  } finally {\n    CookieManager.remove(JWT_COOKIE_NAME);\n    if (response && response.ok && response.redirected) {\n      if (options?.onSuccess) {\n        await options.onSuccess();\n      }\n      const toPath = normalizePath(response.url);\n      const navigate = options?.navigate ?? navigateWithPageReload;\n      navigate(toPath);\n    }\n  }\n}\n\n/**\n * It defines what to do when it detects a session is invalid. E.g.,\n * show a login view.\n * It takes an <code>EndpointCallContinue</code> parameter, which can be\n * used to continue the endpoint call.\n */\nexport type OnInvalidSessionCallback = () => Promise<LoginResult>;\n\n/**\n * A helper class for handling invalid sessions during an endpoint call.\n * E.g., you can use this to show user a login page when the session has\n * expired.\n */\nexport class InvalidSessionMiddleware implements MiddlewareClass {\n  private readonly onInvalidSessionCallback: OnInvalidSessionCallback;\n\n  constructor(onInvalidSessionCallback: OnInvalidSessionCallback) {\n    this.onInvalidSessionCallback = onInvalidSessionCallback;\n  }\n\n  async invoke(context: MiddlewareContext, next: MiddlewareNext): Promise<Response> {\n    const clonedContext = { ...context };\n    clonedContext.request = context.request.clone();\n    const response = await next(context);\n    if (response.status === 401) {\n      const loginResult = await this.onInvalidSessionCallback();\n      if (loginResult.token) {\n        clonedContext.request.headers.set(VAADIN_CSRF_HEADER, loginResult.token);\n        return next(clonedContext) as Promise<Response>;\n      }\n    }\n    return response;\n  }\n}\n"],"version":3}