@valtimo/security 0.0.0

package/fesm2022/valtimo-security.mjs

@@ -0,0 +1,458 @@
+import * as i0 from '@angular/core';
+import { Injectable, Component, NgModule, SecurityContext } from '@angular/core';
+import * as i1 from '@valtimo/shared';
+import { InterceptorSkip } from '@valtimo/shared';
+import * as i2 from 'ngx-logger';
+import * as i2$1 from '@angular/common/http';
+import { HTTP_INTERCEPTORS } from '@angular/common/http';
+import * as i1$1 from '@angular/router';
+import { RouterModule } from '@angular/router';
+import { CommonModule } from '@angular/common';
+import { throwError } from 'rxjs';
+import { catchError } from 'rxjs/operators';
+import moment from 'moment';
+import { getCSP } from 'csp-header';
+
+/*
+ * Copyright 2015-2025 Ritense BV, the Netherlands.
+ *
+ * Licensed under EUPL, Version 1.2 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ * https://joinup.ec.europa.eu/collection/eupl/eupl-text-eupl-12
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" basis,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+class AuthGuardService {
+    constructor(configService, injector, logger) {
+        this.injector = injector;
+        this.logger = logger;
+        this.authGuardServiceProvider = injector.get(configService.config.authentication.authProviders.guardServiceProvider);
+        this.logger.debug('Loading AuthGuardServiceProvider service', this.authGuardServiceProvider);
+    }
+    canActivate(route, state) {
+        this.logger.debug('Delegating AuthGuard canActivate');
+        return this.authGuardServiceProvider.canActivate(route, state);
+    }
+    static { this.ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "19.2.17", ngImport: i0, type: AuthGuardService, deps: [{ token: i1.ConfigService }, { token: i0.Injector }, { token: i2.NGXLogger }], target: i0.ɵɵFactoryTarget.Injectable }); }
+    static { this.ɵprov = i0.ɵɵngDeclareInjectable({ minVersion: "12.0.0", version: "19.2.17", ngImport: i0, type: AuthGuardService, providedIn: 'root' }); }
+}
+i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "19.2.17", ngImport: i0, type: AuthGuardService, decorators: [{
+            type: Injectable,
+            args: [{
+                    providedIn: 'root',
+                }]
+        }], ctorParameters: () => [{ type: i1.ConfigService }, { type: i0.Injector }, { type: i2.NGXLogger }] });
+
+/*
+ * Copyright 2015-2025 Ritense BV, the Netherlands.
+ *
+ * Licensed under EUPL, Version 1.2 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ * https://joinup.ec.europa.eu/collection/eupl/eupl-text-eupl-12
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" basis,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+class ErrorComponent {
+    constructor(activatedRoute) {
+        this.activatedRoute = activatedRoute;
+    }
+    ngOnInit() {
+        if (this.activatedRoute.snapshot.data) {
+            this.err = {
+                title: this.activatedRoute.snapshot.data.title,
+                error: this.activatedRoute.snapshot.data.error,
+            };
+        }
+    }
+    static { this.ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "19.2.17", ngImport: i0, type: ErrorComponent, deps: [{ token: i1$1.ActivatedRoute }], target: i0.ɵɵFactoryTarget.Component }); }
+    static { this.ɵcmp = i0.ɵɵngDeclareComponent({ minVersion: "14.0.0", version: "19.2.17", type: ErrorComponent, isStandalone: false, selector: "valtimo-error", ngImport: i0, template: "<!--\n  ~ Copyright 2015-2025 Ritense BV, the Netherlands.\n  ~\n  ~ Licensed under EUPL, Version 1.2 (the \"License\");\n  ~ you may not use this file except in compliance with the License.\n  ~ You may obtain a copy of the License at\n  ~\n  ~ https://joinup.ec.europa.eu/collection/eupl/eupl-text-eupl-12\n  ~\n  ~ Unless required by applicable law or agreed to in writing, software\n  ~ distributed under the License is distributed on an \"AS IS\" basis,\n  ~ WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n  ~ See the License for the specific language governing permissions and\n  ~ limitations under the License.\n  -->\n\n<div class=\"main-content\">\n  <div class=\"container-fluid\">\n    <div class=\"row\">\n      <div class=\"col-12\">\n        <h1>{{ err.error }}</h1>\n        <p>{{ err.title }}</p>\n      </div>\n    </div>\n  </div>\n</div>\n", styles: [""] }); }
+}
+i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "19.2.17", ngImport: i0, type: ErrorComponent, decorators: [{
+            type: Component,
+            args: [{ selector: 'valtimo-error', standalone: false, template: "<!--\n  ~ Copyright 2015-2025 Ritense BV, the Netherlands.\n  ~\n  ~ Licensed under EUPL, Version 1.2 (the \"License\");\n  ~ you may not use this file except in compliance with the License.\n  ~ You may obtain a copy of the License at\n  ~\n  ~ https://joinup.ec.europa.eu/collection/eupl/eupl-text-eupl-12\n  ~\n  ~ Unless required by applicable law or agreed to in writing, software\n  ~ distributed under the License is distributed on an \"AS IS\" basis,\n  ~ WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n  ~ See the License for the specific language governing permissions and\n  ~ limitations under the License.\n  -->\n\n<div class=\"main-content\">\n  <div class=\"container-fluid\">\n    <div class=\"row\">\n      <div class=\"col-12\">\n        <h1>{{ err.error }}</h1>\n        <p>{{ err.title }}</p>\n      </div>\n    </div>\n  </div>\n</div>\n" }]
+        }], ctorParameters: () => [{ type: i1$1.ActivatedRoute }] });
+
+class HttpErrorInterceptor {
+    constructor(globalNotificationService) {
+        this.globalNotificationService = globalNotificationService;
+    }
+    intercept(request, next) {
+        let skipStatusCodes = [];
+        let response$;
+        if (request.headers && request.headers.has(InterceptorSkip)) {
+            skipStatusCodes = request.headers.get(InterceptorSkip)?.split(',') ?? [];
+            const headers = request.headers.delete(InterceptorSkip);
+            response$ = next.handle(request.clone({ headers }));
+        }
+        else {
+            response$ = next.handle(request);
+        }
+        return response$.pipe(catchError((error) => {
+            if (skipStatusCodes.find(skipStatusCode => skipStatusCode === 'all' || skipStatusCode === error.status.toString())) {
+                return throwError(() => error);
+            }
+            let errorMessage = '';
+            if (error?.error instanceof ErrorEvent) {
+                // client-side error
+                errorMessage = `Error: ${error.error.message}`;
+            }
+            else {
+                // server-side error
+                if (error?.error?.errors) {
+                    errorMessage = error?.error?.errors;
+                }
+                else if (error?.error?.title && error?.error?.detail) {
+                    errorMessage = `${error?.error?.title}. Details: </br>${error?.error?.detail}`;
+                }
+                else if (error?.error?.title && error?.error?.referenceId) {
+                    errorMessage = `${error?.error?.title}. Reference ID: ${error?.error?.referenceId}`;
+                }
+                else if (error?.error?.message) {
+                    errorMessage = error?.error?.message;
+                }
+                else {
+                    errorMessage = `Error Code: ${error?.status} </br>Message: ${error?.message}`;
+                }
+            }
+            this.globalNotificationService.showToast({
+                title: 'An unexpected error occurred',
+                caption: errorMessage,
+                type: 'error',
+            });
+            return throwError(() => error);
+        }));
+    }
+    static { this.ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "19.2.17", ngImport: i0, type: HttpErrorInterceptor, deps: [{ token: i1.GlobalNotificationService }], target: i0.ɵɵFactoryTarget.Injectable }); }
+    static { this.ɵprov = i0.ɵɵngDeclareInjectable({ minVersion: "12.0.0", version: "19.2.17", ngImport: i0, type: HttpErrorInterceptor, providedIn: 'root' }); }
+}
+i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "19.2.17", ngImport: i0, type: HttpErrorInterceptor, decorators: [{
+            type: Injectable,
+            args: [{
+                    providedIn: 'root',
+                }]
+        }], ctorParameters: () => [{ type: i1.GlobalNotificationService }] });
+
+/*
+ * Copyright 2015-2025 Ritense BV, the Netherlands.
+ *
+ * Licensed under EUPL, Version 1.2 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ * https://joinup.ec.europa.eu/collection/eupl/eupl-text-eupl-12
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" basis,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+const routes = [
+    { path: '403', component: ErrorComponent, data: { title: 'Access Forbidden', error: 403 } },
+    { path: '404', component: ErrorComponent, data: { title: 'Not Found', error: 404 } },
+    { path: '500', component: ErrorComponent, data: { title: 'Internal Server Error', error: 500 } },
+    { path: '503', component: ErrorComponent, data: { title: 'Service Unavailable', error: 503 } },
+];
+class ErrorRoutingModule {
+    static { this.ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "19.2.17", ngImport: i0, type: ErrorRoutingModule, deps: [], target: i0.ɵɵFactoryTarget.NgModule }); }
+    static { this.ɵmod = i0.ɵɵngDeclareNgModule({ minVersion: "14.0.0", version: "19.2.17", ngImport: i0, type: ErrorRoutingModule, imports: [CommonModule, i1$1.RouterModule], exports: [RouterModule] }); }
+    static { this.ɵinj = i0.ɵɵngDeclareInjector({ minVersion: "12.0.0", version: "19.2.17", ngImport: i0, type: ErrorRoutingModule, providers: [{ provide: HTTP_INTERCEPTORS, useClass: HttpErrorInterceptor, multi: true }], imports: [CommonModule, RouterModule.forChild(routes), RouterModule] }); }
+}
+i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "19.2.17", ngImport: i0, type: ErrorRoutingModule, decorators: [{
+            type: NgModule,
+            args: [{
+                    declarations: [],
+                    imports: [CommonModule, RouterModule.forChild(routes)],
+                    exports: [RouterModule],
+                    providers: [{ provide: HTTP_INTERCEPTORS, useClass: HttpErrorInterceptor, multi: true }],
+                }]
+        }] });
+
+class ZoneOffsetInterceptor {
+    intercept(req, next) {
+        const modifiedReq = req.clone({
+            headers: req.headers.set('X-Timezone-Offset', this.getFormattedZoneOffset()),
+        });
+        return next.handle(modifiedReq);
+    }
+    getFormattedZoneOffset() {
+        let offset = new Date().getTimezoneOffset();
+        let isNegative = false;
+        if (offset < 0) {
+            isNegative = true;
+            offset = offset * -1;
+        }
+        const duration = moment.duration(offset, 'minutes');
+        const momentOffset = moment.utc(duration.asMilliseconds()).format('HH:mm');
+        return `${isNegative ? '+' : '-'}${momentOffset}`;
+    }
+    static { this.ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "19.2.17", ngImport: i0, type: ZoneOffsetInterceptor, deps: [], target: i0.ɵɵFactoryTarget.Injectable }); }
+    static { this.ɵprov = i0.ɵɵngDeclareInjectable({ minVersion: "12.0.0", version: "19.2.17", ngImport: i0, type: ZoneOffsetInterceptor }); }
+}
+i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "19.2.17", ngImport: i0, type: ZoneOffsetInterceptor, decorators: [{
+            type: Injectable
+        }] });
+
+/*
+ * Copyright 2015-2025 Ritense BV, the Netherlands.
+ *
+ * Licensed under EUPL, Version 1.2 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ * https://joinup.ec.europa.eu/collection/eupl/eupl-text-eupl-12
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" basis,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+/*
+ * Copyright 2015-2025 Ritense BV, the Netherlands.
+ *
+ * Licensed under EUPL, Version 1.2 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ * https://joinup.ec.europa.eu/collection/eupl/eupl-text-eupl-12
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" basis,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+class SecurityModule {
+    static { this.ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "19.2.17", ngImport: i0, type: SecurityModule, deps: [], target: i0.ɵɵFactoryTarget.NgModule }); }
+    static { this.ɵmod = i0.ɵɵngDeclareNgModule({ minVersion: "14.0.0", version: "19.2.17", ngImport: i0, type: SecurityModule, imports: [ErrorRoutingModule] }); }
+    static { this.ɵinj = i0.ɵɵngDeclareInjector({ minVersion: "12.0.0", version: "19.2.17", ngImport: i0, type: SecurityModule, providers: [
+            AuthGuardService,
+            { provide: HTTP_INTERCEPTORS, useClass: ZoneOffsetInterceptor, multi: true },
+        ], imports: [ErrorRoutingModule] }); }
+}
+i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "19.2.17", ngImport: i0, type: SecurityModule, decorators: [{
+            type: NgModule,
+            args: [{
+                    imports: [ErrorRoutingModule],
+                    providers: [
+                        AuthGuardService,
+                        { provide: HTTP_INTERCEPTORS, useClass: ZoneOffsetInterceptor, multi: true },
+                    ],
+                }]
+        }] });
+
+/*
+ * Copyright 2015-2025 Ritense BV, the Netherlands.
+ *
+ * Licensed under EUPL, Version 1.2 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ * https://joinup.ec.europa.eu/collection/eupl/eupl-text-eupl-12
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" basis,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+/*
+ * Copyright 2015-2025 Ritense BV, the Netherlands.
+ *
+ * Licensed under EUPL, Version 1.2 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ * https://joinup.ec.europa.eu/collection/eupl/eupl-text-eupl-12
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" basis,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+class UserProviderService {
+    constructor(configService, injector, http, logger) {
+        this.configService = configService;
+        this.injector = injector;
+        this.http = http;
+        this.logger = logger;
+        this.valtimoApiConfig = configService.config.valtimoApi;
+        this.userService = injector.get(configService.config.authentication.authProviders.userServiceProvider);
+        this.logger.debug('Loading UserProviderService service', this.userService);
+    }
+    getUserSubject() {
+        this.logger.debug('Delegating UserProviderService::getUserIdentity');
+        return this.userService.getUserSubject();
+    }
+    logout() {
+        this.logger.debug('Delegating UserProviderService::logout');
+        return this.userService.logout();
+    }
+    async getToken() {
+        this.logger.debug('Delegating UserProviderService::getToken');
+        return this.userService.getToken();
+    }
+    async updateToken(minValidity) {
+        this.logger.debug('Delegating UserProviderService::updateToken');
+        if (this.userService.updateToken) {
+            return this.userService.updateToken(minValidity);
+        }
+        return new Promise(resolve => resolve(true));
+    }
+    getEmailNotificationSettings() {
+        this.logger.debug('getEmailNotificationSettings');
+        return this.http.get(`${this.valtimoApiConfig.endpointUri}v1/email-notification-settings`);
+    }
+    updateEmailNotificationSettings(settings) {
+        this.logger.debug('updateEmailNotificationSettings', settings);
+        return this.http.put(`${this.valtimoApiConfig.endpointUri}v1/email-notification-settings`, settings);
+    }
+    static { this.ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "19.2.17", ngImport: i0, type: UserProviderService, deps: [{ token: i1.ConfigService }, { token: i0.Injector }, { token: i2$1.HttpClient }, { token: i2.NGXLogger }], target: i0.ɵɵFactoryTarget.Injectable }); }
+    static { this.ɵprov = i0.ɵɵngDeclareInjectable({ minVersion: "12.0.0", version: "19.2.17", ngImport: i0, type: UserProviderService, providedIn: 'root' }); }
+}
+i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "19.2.17", ngImport: i0, type: UserProviderService, decorators: [{
+            type: Injectable,
+            args: [{
+                    providedIn: 'root',
+                }]
+        }], ctorParameters: () => [{ type: i1.ConfigService }, { type: i0.Injector }, { type: i2$1.HttpClient }, { type: i2.NGXLogger }] });
+
+/*
+ * Copyright 2015-2025 Ritense BV, the Netherlands.
+ *
+ * Licensed under EUPL, Version 1.2 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ * https://joinup.ec.europa.eu/collection/eupl/eupl-text-eupl-12
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" basis,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+const CSP_HTTP_EQUIV = 'Content-Security-Policy';
+const CSP_META_ID = 'CSP_META';
+
+/*
+ * Copyright 2015-2025 Ritense BV, the Netherlands.
+ *
+ * Licensed under EUPL, Version 1.2 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ * https://joinup.ec.europa.eu/collection/eupl/eupl-text-eupl-12
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" basis,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+/*
+ * Copyright 2015-2025 Ritense BV, the Netherlands.
+ *
+ * Licensed under EUPL, Version 1.2 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ * https://joinup.ec.europa.eu/collection/eupl/eupl-text-eupl-12
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" basis,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+const getSanitizedCspString = (cspHeaderParams, domSanitizer) => {
+    const csp = getCSP(cspHeaderParams);
+    return domSanitizer.sanitize(SecurityContext.HTML, csp);
+};
+const getCspHeaderElement = (cspHeaderParams, domSanitizer, document) => {
+    const csp = getSanitizedCspString(cspHeaderParams, domSanitizer);
+    const cspMeta = document.createElement('meta');
+    cspMeta.httpEquiv = CSP_HTTP_EQUIV;
+    cspMeta.content = csp;
+    cspMeta.id = CSP_META_ID;
+    return cspMeta;
+};
+const appendElementToHead = (element, document) => {
+    document.head.appendChild(element);
+};
+const isElementLoaded = async (elementId, document) => {
+    while (document.getElementById(elementId) === null) {
+        await new Promise(resolve => requestAnimationFrame(resolve));
+    }
+    return !!document.getElementById(elementId);
+};
+const initializeCsp = (logger, configService, document, domSanitizer) => async () => {
+    const cspHeaderParams = configService?.config?.csp;
+    if (cspHeaderParams) {
+        logger.log('Create CSP header element from:', cspHeaderParams);
+        const cspHeaderElement = getCspHeaderElement(cspHeaderParams, domSanitizer, document);
+        appendElementToHead(cspHeaderElement, document);
+        return await isElementLoaded(CSP_META_ID, document);
+    }
+    logger.log('No CSP config present.');
+    return true;
+};
+
+/*
+ * Copyright 2015-2025 Ritense BV, the Netherlands.
+ *
+ * Licensed under EUPL, Version 1.2 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ * https://joinup.ec.europa.eu/collection/eupl/eupl-text-eupl-12
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" basis,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+/*
+ * Copyright 2015-2025 Ritense BV, the Netherlands.
+ *
+ * Licensed under EUPL, Version 1.2 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ * https://joinup.ec.europa.eu/collection/eupl/eupl-text-eupl-12
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" basis,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+/*
+ * Public API Surface of security
+ */
+
+/**
+ * Generated bundle index. Do not edit.
+ */
+
+export { AuthGuardService, CSP_HTTP_EQUIV, CSP_META_ID, ErrorComponent, SecurityModule, UserProviderService, initializeCsp };
+//# sourceMappingURL=valtimo-security.mjs.map

package/fesm2022/valtimo-security.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"valtimo-security.mjs","sources":["../../../../projects/valtimo/security/src/lib/guard/auth-guard.service.ts","../../../../projects/valtimo/security/src/lib/error/error.component.ts","../../../../projects/valtimo/security/src/lib/error/error.component.html","../../../../projects/valtimo/security/src/lib/error/http-error.interceptor.ts","../../../../projects/valtimo/security/src/lib/error/error-routing.module.ts","../../../../projects/valtimo/security/src/lib/interceptors/zone-offset.interceptor.ts","../../../../projects/valtimo/security/src/lib/interceptors/index.ts","../../../../projects/valtimo/security/src/lib/security.module.ts","../../../../projects/valtimo/security/src/lib/error/error.ts","../../../../projects/valtimo/security/src/lib/user-provider.service.ts","../../../../projects/valtimo/security/src/lib/constants/csp.constant.ts","../../../../projects/valtimo/security/src/lib/constants/index.ts","../../../../projects/valtimo/security/src/lib/initializers/initialize-csp.ts","../../../../projects/valtimo/security/src/lib/initializers/index.ts","../../../../projects/valtimo/security/src/public_api.ts","../../../../projects/valtimo/security/src/valtimo-security.ts"],"sourcesContent":["/*\n * Copyright 2015-2025 Ritense BV, the Netherlands.\n *\n * Licensed under EUPL, Version 1.2 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n * https://joinup.ec.europa.eu/collection/eupl/eupl-text-eupl-12\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" basis,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport {Injectable, Injector} from '@angular/core';\nimport {\n  ActivatedRouteSnapshot,\n  CanActivate,\n  GuardResult,\n  MaybeAsync,\n  RouterStateSnapshot,\n} from '@angular/router';\nimport {NGXLogger} from 'ngx-logger';\nimport {ConfigService} from '@valtimo/shared';\n\n@Injectable({\n  providedIn: 'root',\n})\nexport class AuthGuardService implements CanActivate {\n  private readonly authGuardServiceProvider: CanActivate;\n\n  constructor(\n    configService: ConfigService,\n    private injector: Injector,\n    protected logger: NGXLogger\n  ) {\n    this.authGuardServiceProvider = injector.get<any>(\n      configService.config.authentication.authProviders.guardServiceProvider\n    );\n    this.logger.debug('Loading AuthGuardServiceProvider service', this.authGuardServiceProvider);\n  }\n\n  canActivate(route: ActivatedRouteSnapshot, state: RouterStateSnapshot): MaybeAsync<GuardResult> {\n    this.logger.debug('Delegating AuthGuard canActivate');\n    return this.authGuardServiceProvider.canActivate(route, state);\n  }\n}\n","/*\n * Copyright 2015-2025 Ritense BV, the Netherlands.\n *\n * Licensed under EUPL, Version 1.2 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n * https://joinup.ec.europa.eu/collection/eupl/eupl-text-eupl-12\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" basis,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport {Component, OnInit} from '@angular/core';\nimport {ActivatedRoute} from '@angular/router';\nimport {Error} from './error';\n\n@Component({\n  selector: 'valtimo-error',\n  templateUrl: './error.component.html',\n  styleUrls: ['./error.component.css'],\n  standalone: false,\n})\nexport class ErrorComponent implements OnInit {\n  public err: Error;\n\n  constructor(private activatedRoute: ActivatedRoute) {}\n\n  ngOnInit() {\n    if (this.activatedRoute.snapshot.data) {\n      this.err = {\n        title: this.activatedRoute.snapshot.data.title,\n        error: this.activatedRoute.snapshot.data.error,\n      };\n    }\n  }\n}\n","<!--\n  ~ Copyright 2015-2025 Ritense BV, the Netherlands.\n  ~\n  ~ Licensed under EUPL, Version 1.2 (the \"License\");\n  ~ you may not use this file except in compliance with the License.\n  ~ You may obtain a copy of the License at\n  ~\n  ~ https://joinup.ec.europa.eu/collection/eupl/eupl-text-eupl-12\n  ~\n  ~ Unless required by applicable law or agreed to in writing, software\n  ~ distributed under the License is distributed on an \"AS IS\" basis,\n  ~ WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n  ~ See the License for the specific language governing permissions and\n  ~ limitations under the License.\n  -->\n\n<div class=\"main-content\">\n  <div class=\"container-fluid\">\n    <div class=\"row\">\n      <div class=\"col-12\">\n        <h1>{{ err.error }}</h1>\n        <p>{{ err.title }}</p>\n      </div>\n    </div>\n  </div>\n</div>\n","/*\n * Copyright 2015-2025 Ritense BV, the Netherlands.\n *\n * Licensed under EUPL, Version 1.2 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n * https://joinup.ec.europa.eu/collection/eupl/eupl-text-eupl-12\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" basis,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\nimport {\n  HttpErrorResponse,\n  HttpEvent,\n  HttpHandler,\n  HttpInterceptor,\n  HttpRequest,\n} from '@angular/common/http';\nimport {Injectable} from '@angular/core';\nimport {GlobalNotificationService, InterceptorSkip} from '@valtimo/shared';\nimport {Observable, throwError} from 'rxjs';\nimport {catchError} from 'rxjs/operators';\n\n@Injectable({\n  providedIn: 'root',\n})\nexport class HttpErrorInterceptor implements HttpInterceptor {\n  constructor(private readonly globalNotificationService: GlobalNotificationService) {}\n\n  intercept(request: HttpRequest<any>, next: HttpHandler): Observable<HttpEvent<any>> {\n    let skipStatusCodes: string[] = [];\n    let response$: Observable<HttpEvent<any>>;\n    if (request.headers && request.headers.has(InterceptorSkip)) {\n      skipStatusCodes = request.headers.get(InterceptorSkip)?.split(',') ?? [];\n      const headers = request.headers.delete(InterceptorSkip);\n      response$ = next.handle(request.clone({headers}));\n    } else {\n      response$ = next.handle(request);\n    }\n\n    return response$.pipe(\n      catchError((error: HttpErrorResponse) => {\n        if (\n          skipStatusCodes.find(\n            skipStatusCode => skipStatusCode === 'all' || skipStatusCode === error.status.toString()\n          )\n        ) {\n          return throwError(() => error);\n        }\n        let errorMessage = '';\n        if (error?.error instanceof ErrorEvent) {\n          // client-side error\n          errorMessage = `Error: ${error.error.message}`;\n        } else {\n          // server-side error\n          if (error?.error?.errors) {\n            errorMessage = error?.error?.errors;\n          } else if (error?.error?.title && error?.error?.detail) {\n            errorMessage = `${error?.error?.title}. Details: </br>${error?.error?.detail}`;\n          } else if (error?.error?.title && error?.error?.referenceId) {\n            errorMessage = `${error?.error?.title}. Reference ID: ${error?.error?.referenceId}`;\n          } else if (error?.error?.message) {\n            errorMessage = error?.error?.message;\n          } else {\n            errorMessage = `Error Code: ${error?.status} </br>Message: ${error?.message}`;\n          }\n        }\n        this.globalNotificationService.showToast({\n          title: 'An unexpected error occurred',\n          caption: errorMessage,\n          type: 'error',\n        });\n        return throwError(() => error);\n      })\n    );\n  }\n}\n","/*\n * Copyright 2015-2025 Ritense BV, the Netherlands.\n *\n * Licensed under EUPL, Version 1.2 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n * https://joinup.ec.europa.eu/collection/eupl/eupl-text-eupl-12\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" basis,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport {NgModule} from '@angular/core';\nimport {RouterModule, Routes} from '@angular/router';\nimport {CommonModule} from '@angular/common';\nimport {ErrorComponent} from './error.component';\nimport {HttpErrorInterceptor} from './http-error.interceptor';\nimport {HTTP_INTERCEPTORS} from '@angular/common/http';\n\nconst routes: Routes = [\n  {path: '403', component: ErrorComponent, data: {title: 'Access Forbidden', error: 403}},\n  {path: '404', component: ErrorComponent, data: {title: 'Not Found', error: 404}},\n  {path: '500', component: ErrorComponent, data: {title: 'Internal Server Error', error: 500}},\n  {path: '503', component: ErrorComponent, data: {title: 'Service Unavailable', error: 503}},\n];\n\n@NgModule({\n  declarations: [],\n  imports: [CommonModule, RouterModule.forChild(routes)],\n  exports: [RouterModule],\n  providers: [{provide: HTTP_INTERCEPTORS, useClass: HttpErrorInterceptor, multi: true}],\n})\nexport class ErrorRoutingModule {}\n","/*\n * Copyright 2015-2025 Ritense BV, the Netherlands.\n *\n * Licensed under EUPL, Version 1.2 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n * https://joinup.ec.europa.eu/collection/eupl/eupl-text-eupl-12\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" basis,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport {HttpEvent, HttpHandler, HttpInterceptor, HttpRequest} from '@angular/common/http';\nimport {Injectable} from '@angular/core';\nimport {Observable} from 'rxjs';\nimport moment from 'moment';\n\n@Injectable()\nexport class ZoneOffsetInterceptor implements HttpInterceptor {\n  public intercept(req: HttpRequest<any>, next: HttpHandler): Observable<HttpEvent<any>> {\n    const modifiedReq = req.clone({\n      headers: req.headers.set('X-Timezone-Offset', this.getFormattedZoneOffset()),\n    });\n    return next.handle(modifiedReq);\n  }\n\n  private getFormattedZoneOffset(): string {\n    let offset = new Date().getTimezoneOffset();\n    let isNegative = false;\n\n    if (offset < 0) {\n      isNegative = true;\n      offset = offset * -1;\n    }\n\n    const duration = moment.duration(offset, 'minutes');\n    const momentOffset = moment.utc(duration.asMilliseconds()).format('HH:mm');\n\n    return `${isNegative ? '+' : '-'}${momentOffset}`;\n  }\n}\n","/*\n * Copyright 2015-2025 Ritense BV, the Netherlands.\n *\n * Licensed under EUPL, Version 1.2 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n * https://joinup.ec.europa.eu/collection/eupl/eupl-text-eupl-12\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" basis,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nexport * from './zone-offset.interceptor';\n","/*\n * Copyright 2015-2025 Ritense BV, the Netherlands.\n *\n * Licensed under EUPL, Version 1.2 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n * https://joinup.ec.europa.eu/collection/eupl/eupl-text-eupl-12\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" basis,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\nimport {HTTP_INTERCEPTORS} from '@angular/common/http';\nimport {NgModule} from '@angular/core';\nimport {ErrorRoutingModule} from './error/error-routing.module';\nimport {AuthGuardService} from './guard/auth-guard.service';\nimport {ZoneOffsetInterceptor} from './interceptors';\n\n@NgModule({\n  imports: [ErrorRoutingModule],\n  providers: [\n    AuthGuardService,\n    {provide: HTTP_INTERCEPTORS, useClass: ZoneOffsetInterceptor, multi: true},\n  ],\n})\nexport class SecurityModule {}\n","/*\n * Copyright 2015-2025 Ritense BV, the Netherlands.\n *\n * Licensed under EUPL, Version 1.2 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n * https://joinup.ec.europa.eu/collection/eupl/eupl-text-eupl-12\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" basis,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nexport interface Error {\n  title: string;\n  error: number;\n}\n","/*\n * Copyright 2015-2025 Ritense BV, the Netherlands.\n *\n * Licensed under EUPL, Version 1.2 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n * https://joinup.ec.europa.eu/collection/eupl/eupl-text-eupl-12\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" basis,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport {Injectable, Injector} from '@angular/core';\nimport {Observable, ReplaySubject} from 'rxjs';\nimport {NGXLogger} from 'ngx-logger';\nimport {\n  ConfigService,\n  EmailNotificationService,\n  EmailNotificationSettings,\n  UserIdentity,\n  UserService,\n} from '@valtimo/shared';\nimport {HttpClient} from '@angular/common/http';\n\n@Injectable({\n  providedIn: 'root',\n})\nexport class UserProviderService implements UserService, EmailNotificationService {\n  private readonly userService: UserService;\n  private valtimoApiConfig: {\n    endpointUri: string;\n  };\n\n  constructor(\n    private configService: ConfigService,\n    private injector: Injector,\n    private http: HttpClient,\n    private logger: NGXLogger\n  ) {\n    this.valtimoApiConfig = configService.config.valtimoApi;\n    this.userService = injector.get<any>(\n      configService.config.authentication.authProviders.userServiceProvider\n    );\n    this.logger.debug('Loading UserProviderService service', this.userService);\n  }\n\n  getUserSubject(): ReplaySubject<UserIdentity> {\n    this.logger.debug('Delegating UserProviderService::getUserIdentity');\n    return this.userService.getUserSubject();\n  }\n\n  logout(): void {\n    this.logger.debug('Delegating UserProviderService::logout');\n    return this.userService.logout();\n  }\n\n  async getToken(): Promise<string> {\n    this.logger.debug('Delegating UserProviderService::getToken');\n    return this.userService.getToken();\n  }\n\n  async updateToken(minValidity: number): Promise<boolean> {\n    this.logger.debug('Delegating UserProviderService::updateToken');\n    if (this.userService.updateToken) {\n      return this.userService.updateToken(minValidity);\n    }\n\n    return new Promise(resolve => resolve(true));\n  }\n\n  public getEmailNotificationSettings(): Observable<EmailNotificationSettings> {\n    this.logger.debug('getEmailNotificationSettings');\n    return this.http.get<EmailNotificationSettings>(\n      `${this.valtimoApiConfig.endpointUri}v1/email-notification-settings`\n    );\n  }\n\n  public updateEmailNotificationSettings(\n    settings: EmailNotificationSettings\n  ): Observable<EmailNotificationSettings> {\n    this.logger.debug('updateEmailNotificationSettings', settings);\n    return this.http.put<EmailNotificationSettings>(\n      `${this.valtimoApiConfig.endpointUri}v1/email-notification-settings`,\n      settings\n    );\n  }\n}\n","/*\n * Copyright 2015-2025 Ritense BV, the Netherlands.\n *\n * Licensed under EUPL, Version 1.2 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n * https://joinup.ec.europa.eu/collection/eupl/eupl-text-eupl-12\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" basis,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nconst CSP_HTTP_EQUIV = 'Content-Security-Policy';\n\nconst CSP_META_ID = 'CSP_META';\n\nexport {CSP_HTTP_EQUIV, CSP_META_ID};\n","/*\n * Copyright 2015-2025 Ritense BV, the Netherlands.\n *\n * Licensed under EUPL, Version 1.2 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n * https://joinup.ec.europa.eu/collection/eupl/eupl-text-eupl-12\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" basis,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nexport * from './csp.constant';\n","/*\n * Copyright 2015-2025 Ritense BV, the Netherlands.\n *\n * Licensed under EUPL, Version 1.2 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n * https://joinup.ec.europa.eu/collection/eupl/eupl-text-eupl-12\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" basis,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport {NGXLogger} from 'ngx-logger';\nimport {ConfigService} from '@valtimo/shared';\nimport {CSP_HTTP_EQUIV, CSP_META_ID} from '../constants';\nimport {DomSanitizer} from '@angular/platform-browser';\nimport {CSPHeaderParams, getCSP} from 'csp-header';\nimport {SecurityContext} from '@angular/core';\n\nconst getSanitizedCspString = (\n  cspHeaderParams: CSPHeaderParams,\n  domSanitizer: DomSanitizer\n): string => {\n  const csp = getCSP(cspHeaderParams);\n  return domSanitizer.sanitize(SecurityContext.HTML, csp);\n};\n\nconst getCspHeaderElement = (\n  cspHeaderParams: CSPHeaderParams,\n  domSanitizer: DomSanitizer,\n  document: Document\n): HTMLMetaElement => {\n  const csp = getSanitizedCspString(cspHeaderParams, domSanitizer);\n  const cspMeta = document.createElement('meta');\n\n  cspMeta.httpEquiv = CSP_HTTP_EQUIV;\n  cspMeta.content = csp;\n  cspMeta.id = CSP_META_ID;\n\n  return cspMeta;\n};\n\nconst appendElementToHead = (element: HTMLMetaElement, document: Document): void => {\n  document.head.appendChild(element);\n};\n\nconst isElementLoaded = async (elementId: string, document: Document): Promise<boolean> => {\n  while (document.getElementById(elementId) === null) {\n    await new Promise(resolve => requestAnimationFrame(resolve));\n  }\n  return !!document.getElementById(elementId);\n};\n\nexport const initializeCsp =\n  (\n    logger: NGXLogger,\n    configService: ConfigService,\n    document: Document,\n    domSanitizer: DomSanitizer\n  ): (() => Promise<boolean>) =>\n  async (): Promise<boolean> => {\n    const cspHeaderParams = configService?.config?.csp;\n\n    if (cspHeaderParams) {\n      logger.log('Create CSP header element from:', cspHeaderParams);\n\n      const cspHeaderElement = getCspHeaderElement(cspHeaderParams, domSanitizer, document);\n\n      appendElementToHead(cspHeaderElement, document);\n\n      return await isElementLoaded(CSP_META_ID, document);\n    }\n\n    logger.log('No CSP config present.');\n\n    return true;\n  };\n","/*\n * Copyright 2015-2025 Ritense BV, the Netherlands.\n *\n * Licensed under EUPL, Version 1.2 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n * https://joinup.ec.europa.eu/collection/eupl/eupl-text-eupl-12\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" basis,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nexport * from './initialize-csp';\n","/*\n * Copyright 2015-2025 Ritense BV, the Netherlands.\n *\n * Licensed under EUPL, Version 1.2 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n * https://joinup.ec.europa.eu/collection/eupl/eupl-text-eupl-12\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" basis,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\n/*\n * Public API Surface of security\n */\nexport * from './lib/guard/auth-guard.service';\nexport * from './lib/security.module';\nexport * from './lib/error/error';\nexport * from './lib/error/error.component';\nexport * from './lib/user-provider.service';\nexport * from './lib/constants';\nexport * from './lib/initializers';\n","/**\n * Generated bundle index. Do not edit.\n */\n\nexport * from './public_api';\n"],"names":["i1","i2","i3"],"mappings":";;;;;;;;;;;;;;;AAAA;;;;;;;;;;;;;;AAcG;MAgBU,gBAAgB,CAAA;AAG3B,IAAA,WAAA,CACE,aAA4B,EACpB,QAAkB,EAChB,MAAiB,EAAA;QADnB,IAAQ,CAAA,QAAA,GAAR,QAAQ;QACN,IAAM,CAAA,MAAA,GAAN,MAAM;AAEhB,QAAA,IAAI,CAAC,wBAAwB,GAAG,QAAQ,CAAC,GAAG,CAC1C,aAAa,CAAC,MAAM,CAAC,cAAc,CAAC,aAAa,CAAC,oBAAoB,CACvE;QACD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,0CAA0C,EAAE,IAAI,CAAC,wBAAwB,CAAC;;IAG9F,WAAW,CAAC,KAA6B,EAAE,KAA0B,EAAA;AACnE,QAAA,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,kCAAkC,CAAC;QACrD,OAAO,IAAI,CAAC,wBAAwB,CAAC,WAAW,CAAC,KAAK,EAAE,KAAK,CAAC;;+GAhBrD,gBAAgB,EAAA,IAAA,EAAA,CAAA,EAAA,KAAA,EAAA,EAAA,CAAA,aAAA,EAAA,EAAA,EAAA,KAAA,EAAA,EAAA,CAAA,QAAA,EAAA,EAAA,EAAA,KAAA,EAAA,EAAA,CAAA,SAAA,EAAA,CAAA,EAAA,MAAA,EAAA,EAAA,CAAA,eAAA,CAAA,UAAA,EAAA,CAAA,CAAA;AAAhB,IAAA,SAAA,IAAA,CAAA,KAAA,GAAA,EAAA,CAAA,qBAAA,CAAA,EAAA,UAAA,EAAA,QAAA,EAAA,OAAA,EAAA,SAAA,EAAA,QAAA,EAAA,EAAA,EAAA,IAAA,EAAA,gBAAgB,cAFf,MAAM,EAAA,CAAA,CAAA;;4FAEP,gBAAgB,EAAA,UAAA,EAAA,CAAA;kBAH5B,UAAU;AAAC,YAAA,IAAA,EAAA,CAAA;AACV,oBAAA,UAAU,EAAE,MAAM;AACnB,iBAAA;;;AC7BD;;;;;;;;;;;;;;AAcG;MAYU,cAAc,CAAA;AAGzB,IAAA,WAAA,CAAoB,cAA8B,EAAA;QAA9B,IAAc,CAAA,cAAA,GAAd,cAAc;;IAElC,QAAQ,GAAA;QACN,IAAI,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,IAAI,EAAE;YACrC,IAAI,CAAC,GAAG,GAAG;gBACT,KAAK,EAAE,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK;gBAC9C,KAAK,EAAE,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK;aAC/C;;;+GAVM,cAAc,EAAA,IAAA,EAAA,CAAA,EAAA,KAAA,EAAAA,IAAA,CAAA,cAAA,EAAA,CAAA,EAAA,MAAA,EAAA,EAAA,CAAA,eAAA,CAAA,SAAA,EAAA,CAAA,CAAA;AAAd,IAAA,SAAA,IAAA,CAAA,IAAA,GAAA,EAAA,CAAA,oBAAA,CAAA,EAAA,UAAA,EAAA,QAAA,EAAA,OAAA,EAAA,SAAA,EAAA,IAAA,EAAA,cAAc,0EC1B3B,w3BA0BA,EAAA,MAAA,EAAA,CAAA,EAAA,CAAA,EAAA,CAAA,CAAA;;4FDAa,cAAc,EAAA,UAAA,EAAA,CAAA;kBAN1B,SAAS;AACE,YAAA,IAAA,EAAA,CAAA,EAAA,QAAA,EAAA,eAAe,cAGb,KAAK,EAAA,QAAA,EAAA,w3BAAA,EAAA;;;MEMN,oBAAoB,CAAA;AAC/B,IAAA,WAAA,CAA6B,yBAAoD,EAAA;QAApD,IAAyB,CAAA,yBAAA,GAAzB,yBAAyB;;IAEtD,SAAS,CAAC,OAAyB,EAAE,IAAiB,EAAA;QACpD,IAAI,eAAe,GAAa,EAAE;AAClC,QAAA,IAAI,SAAqC;AACzC,QAAA,IAAI,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,EAAE;AAC3D,YAAA,eAAe,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,EAAE,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE;YACxE,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,eAAe,CAAC;AACvD,YAAA,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAC,OAAO,EAAC,CAAC,CAAC;;aAC5C;AACL,YAAA,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC;;QAGlC,OAAO,SAAS,CAAC,IAAI,CACnB,UAAU,CAAC,CAAC,KAAwB,KAAI;YACtC,IACE,eAAe,CAAC,IAAI,CAClB,cAAc,IAAI,cAAc,KAAK,KAAK,IAAI,cAAc,KAAK,KAAK,CAAC,MAAM,CAAC,QAAQ,EAAE,CACzF,EACD;AACA,gBAAA,OAAO,UAAU,CAAC,MAAM,KAAK,CAAC;;YAEhC,IAAI,YAAY,GAAG,EAAE;AACrB,YAAA,IAAI,KAAK,EAAE,KAAK,YAAY,UAAU,EAAE;;gBAEtC,YAAY,GAAG,UAAU,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE;;iBACzC;;AAEL,gBAAA,IAAI,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE;AACxB,oBAAA,YAAY,GAAG,KAAK,EAAE,KAAK,EAAE,MAAM;;AAC9B,qBAAA,IAAI,KAAK,EAAE,KAAK,EAAE,KAAK,IAAI,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE;AACtD,oBAAA,YAAY,GAAG,CAAA,EAAG,KAAK,EAAE,KAAK,EAAE,KAAK,CAAmB,gBAAA,EAAA,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE;;AACzE,qBAAA,IAAI,KAAK,EAAE,KAAK,EAAE,KAAK,IAAI,KAAK,EAAE,KAAK,EAAE,WAAW,EAAE;AAC3D,oBAAA,YAAY,GAAG,CAAA,EAAG,KAAK,EAAE,KAAK,EAAE,KAAK,CAAmB,gBAAA,EAAA,KAAK,EAAE,KAAK,EAAE,WAAW,EAAE;;AAC9E,qBAAA,IAAI,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE;AAChC,oBAAA,YAAY,GAAG,KAAK,EAAE,KAAK,EAAE,OAAO;;qBAC/B;oBACL,YAAY,GAAG,CAAe,YAAA,EAAA,KAAK,EAAE,MAAM,kBAAkB,KAAK,EAAE,OAAO,CAAA,CAAE;;;AAGjF,YAAA,IAAI,CAAC,yBAAyB,CAAC,SAAS,CAAC;AACvC,gBAAA,KAAK,EAAE,8BAA8B;AACrC,gBAAA,OAAO,EAAE,YAAY;AACrB,gBAAA,IAAI,EAAE,OAAO;AACd,aAAA,CAAC;AACF,YAAA,OAAO,UAAU,CAAC,MAAM,KAAK,CAAC;SAC/B,CAAC,CACH;;+GAhDQ,oBAAoB,EAAA,IAAA,EAAA,CAAA,EAAA,KAAA,EAAA,EAAA,CAAA,yBAAA,EAAA,CAAA,EAAA,MAAA,EAAA,EAAA,CAAA,eAAA,CAAA,UAAA,EAAA,CAAA,CAAA;AAApB,IAAA,SAAA,IAAA,CAAA,KAAA,GAAA,EAAA,CAAA,qBAAA,CAAA,EAAA,UAAA,EAAA,QAAA,EAAA,OAAA,EAAA,SAAA,EAAA,QAAA,EAAA,EAAA,EAAA,IAAA,EAAA,oBAAoB,cAFnB,MAAM,EAAA,CAAA,CAAA;;4FAEP,oBAAoB,EAAA,UAAA,EAAA,CAAA;kBAHhC,UAAU;AAAC,YAAA,IAAA,EAAA,CAAA;AACV,oBAAA,UAAU,EAAE,MAAM;AACnB,iBAAA;;;AC7BD;;;;;;;;;;;;;;AAcG;AASH,MAAM,MAAM,GAAW;AACrB,IAAA,EAAC,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,cAAc,EAAE,IAAI,EAAE,EAAC,KAAK,EAAE,kBAAkB,EAAE,KAAK,EAAE,GAAG,EAAC,EAAC;AACvF,IAAA,EAAC,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,cAAc,EAAE,IAAI,EAAE,EAAC,KAAK,EAAE,WAAW,EAAE,KAAK,EAAE,GAAG,EAAC,EAAC;AAChF,IAAA,EAAC,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,cAAc,EAAE,IAAI,EAAE,EAAC,KAAK,EAAE,uBAAuB,EAAE,KAAK,EAAE,GAAG,EAAC,EAAC;AAC5F,IAAA,EAAC,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,cAAc,EAAE,IAAI,EAAE,EAAC,KAAK,EAAE,qBAAqB,EAAE,KAAK,EAAE,GAAG,EAAC,EAAC;CAC3F;MAQY,kBAAkB,CAAA;+GAAlB,kBAAkB,EAAA,IAAA,EAAA,EAAA,EAAA,MAAA,EAAA,EAAA,CAAA,eAAA,CAAA,QAAA,EAAA,CAAA,CAAA;gHAAlB,kBAAkB,EAAA,OAAA,EAAA,CAJnB,YAAY,EAAAA,IAAA,CAAA,YAAA,CAAA,EAAA,OAAA,EAAA,CACZ,YAAY,CAAA,EAAA,CAAA,CAAA;gHAGX,kBAAkB,EAAA,SAAA,EAFlB,CAAC,EAAC,OAAO,EAAE,iBAAiB,EAAE,QAAQ,EAAE,oBAAoB,EAAE,KAAK,EAAE,IAAI,EAAC,CAAC,EAF5E,OAAA,EAAA,CAAA,YAAY,EAAE,YAAY,CAAC,QAAQ,CAAC,MAAM,CAAC,EAC3C,YAAY,CAAA,EAAA,CAAA,CAAA;;4FAGX,kBAAkB,EAAA,UAAA,EAAA,CAAA;kBAN9B,QAAQ;AAAC,YAAA,IAAA,EAAA,CAAA;AACR,oBAAA,YAAY,EAAE,EAAE;oBAChB,OAAO,EAAE,CAAC,YAAY,EAAE,YAAY,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;oBACtD,OAAO,EAAE,CAAC,YAAY,CAAC;AACvB,oBAAA,SAAS,EAAE,CAAC,EAAC,OAAO,EAAE,iBAAiB,EAAE,QAAQ,EAAE,oBAAoB,EAAE,KAAK,EAAE,IAAI,EAAC,CAAC;AACvF,iBAAA;;;MCbY,qBAAqB,CAAA;IACzB,SAAS,CAAC,GAAqB,EAAE,IAAiB,EAAA;AACvD,QAAA,MAAM,WAAW,GAAG,GAAG,CAAC,KAAK,CAAC;AAC5B,YAAA,OAAO,EAAE,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,mBAAmB,EAAE,IAAI,CAAC,sBAAsB,EAAE,CAAC;AAC7E,SAAA,CAAC;AACF,QAAA,OAAO,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC;;IAGzB,sBAAsB,GAAA;QAC5B,IAAI,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC,iBAAiB,EAAE;QAC3C,IAAI,UAAU,GAAG,KAAK;AAEtB,QAAA,IAAI,MAAM,GAAG,CAAC,EAAE;YACd,UAAU,GAAG,IAAI;AACjB,YAAA,MAAM,GAAG,MAAM,GAAG,CAAC,CAAC;;QAGtB,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC;AACnD,QAAA,MAAM,YAAY,GAAG,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,cAAc,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC;AAE1E,QAAA,OAAO,CAAG,EAAA,UAAU,GAAG,GAAG,GAAG,GAAG,CAAG,EAAA,YAAY,EAAE;;+GApBxC,qBAAqB,EAAA,IAAA,EAAA,EAAA,EAAA,MAAA,EAAA,EAAA,CAAA,eAAA,CAAA,UAAA,EAAA,CAAA,CAAA;mHAArB,qBAAqB,EAAA,CAAA,CAAA;;4FAArB,qBAAqB,EAAA,UAAA,EAAA,CAAA;kBADjC;;;ACrBD;;;;;;;;;;;;;;AAcG;;ACdH;;;;;;;;;;;;;;AAcG;MAcU,cAAc,CAAA;+GAAd,cAAc,EAAA,IAAA,EAAA,EAAA,EAAA,MAAA,EAAA,EAAA,CAAA,eAAA,CAAA,QAAA,EAAA,CAAA,CAAA;AAAd,IAAA,SAAA,IAAA,CAAA,IAAA,GAAA,EAAA,CAAA,mBAAA,CAAA,EAAA,UAAA,EAAA,QAAA,EAAA,OAAA,EAAA,SAAA,EAAA,QAAA,EAAA,EAAA,EAAA,IAAA,EAAA,cAAc,YANf,kBAAkB,CAAA,EAAA,CAAA,CAAA;AAMjB,IAAA,SAAA,IAAA,CAAA,IAAA,GAAA,EAAA,CAAA,mBAAA,CAAA,EAAA,UAAA,EAAA,QAAA,EAAA,OAAA,EAAA,SAAA,EAAA,QAAA,EAAA,EAAA,EAAA,IAAA,EAAA,cAAc,EALd,SAAA,EAAA;YACT,gBAAgB;YAChB,EAAC,OAAO,EAAE,iBAAiB,EAAE,QAAQ,EAAE,qBAAqB,EAAE,KAAK,EAAE,IAAI,EAAC;AAC3E,SAAA,EAAA,OAAA,EAAA,CAJS,kBAAkB,CAAA,EAAA,CAAA,CAAA;;4FAMjB,cAAc,EAAA,UAAA,EAAA,CAAA;kBAP1B,QAAQ;AAAC,YAAA,IAAA,EAAA,CAAA;oBACR,OAAO,EAAE,CAAC,kBAAkB,CAAC;AAC7B,oBAAA,SAAS,EAAE;wBACT,gBAAgB;wBAChB,EAAC,OAAO,EAAE,iBAAiB,EAAE,QAAQ,EAAE,qBAAqB,EAAE,KAAK,EAAE,IAAI,EAAC;AAC3E,qBAAA;AACF,iBAAA;;;AC3BD;;;;;;;;;;;;;;AAcG;;ACdH;;;;;;;;;;;;;;AAcG;MAiBU,mBAAmB,CAAA;AAM9B,IAAA,WAAA,CACU,aAA4B,EAC5B,QAAkB,EAClB,IAAgB,EAChB,MAAiB,EAAA;QAHjB,IAAa,CAAA,aAAA,GAAb,aAAa;QACb,IAAQ,CAAA,QAAA,GAAR,QAAQ;QACR,IAAI,CAAA,IAAA,GAAJ,IAAI;QACJ,IAAM,CAAA,MAAA,GAAN,MAAM;QAEd,IAAI,CAAC,gBAAgB,GAAG,aAAa,CAAC,MAAM,CAAC,UAAU;AACvD,QAAA,IAAI,CAAC,WAAW,GAAG,QAAQ,CAAC,GAAG,CAC7B,aAAa,CAAC,MAAM,CAAC,cAAc,CAAC,aAAa,CAAC,mBAAmB,CACtE;QACD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,qCAAqC,EAAE,IAAI,CAAC,WAAW,CAAC;;IAG5E,cAAc,GAAA;AACZ,QAAA,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,iDAAiD,CAAC;AACpE,QAAA,OAAO,IAAI,CAAC,WAAW,CAAC,cAAc,EAAE;;IAG1C,MAAM,GAAA;AACJ,QAAA,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,wCAAwC,CAAC;AAC3D,QAAA,OAAO,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE;;AAGlC,IAAA,MAAM,QAAQ,GAAA;AACZ,QAAA,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,0CAA0C,CAAC;AAC7D,QAAA,OAAO,IAAI,CAAC,WAAW,CAAC,QAAQ,EAAE;;IAGpC,MAAM,WAAW,CAAC,WAAmB,EAAA;AACnC,QAAA,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,6CAA6C,CAAC;AAChE,QAAA,IAAI,IAAI,CAAC,WAAW,CAAC,WAAW,EAAE;YAChC,OAAO,IAAI,CAAC,WAAW,CAAC,WAAW,CAAC,WAAW,CAAC;;AAGlD,QAAA,OAAO,IAAI,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;;IAGvC,4BAA4B,GAAA;AACjC,QAAA,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,8BAA8B,CAAC;AACjD,QAAA,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,CAClB,CAAA,EAAG,IAAI,CAAC,gBAAgB,CAAC,WAAW,CAAA,8BAAA,CAAgC,CACrE;;AAGI,IAAA,+BAA+B,CACpC,QAAmC,EAAA;QAEnC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,iCAAiC,EAAE,QAAQ,CAAC;AAC9D,QAAA,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,CAClB,CAAG,EAAA,IAAI,CAAC,gBAAgB,CAAC,WAAW,CAAA,8BAAA,CAAgC,EACpE,QAAQ,CACT;;+GAzDQ,mBAAmB,EAAA,IAAA,EAAA,CAAA,EAAA,KAAA,EAAA,EAAA,CAAA,aAAA,EAAA,EAAA,EAAA,KAAA,EAAA,EAAA,CAAA,QAAA,EAAA,EAAA,EAAA,KAAA,EAAAC,IAAA,CAAA,UAAA,EAAA,EAAA,EAAA,KAAA,EAAAC,EAAA,CAAA,SAAA,EAAA,CAAA,EAAA,MAAA,EAAA,EAAA,CAAA,eAAA,CAAA,UAAA,EAAA,CAAA,CAAA;AAAnB,IAAA,SAAA,IAAA,CAAA,KAAA,GAAA,EAAA,CAAA,qBAAA,CAAA,EAAA,UAAA,EAAA,QAAA,EAAA,OAAA,EAAA,SAAA,EAAA,QAAA,EAAA,EAAA,EAAA,IAAA,EAAA,mBAAmB,cAFlB,MAAM,EAAA,CAAA,CAAA;;4FAEP,mBAAmB,EAAA,UAAA,EAAA,CAAA;kBAH/B,UAAU;AAAC,YAAA,IAAA,EAAA,CAAA;AACV,oBAAA,UAAU,EAAE,MAAM;AACnB,iBAAA;;;AC9BD;;;;;;;;;;;;;;AAcG;AAEG,MAAA,cAAc,GAAG;AAEjB,MAAA,WAAW,GAAG;;AClBpB;;;;;;;;;;;;;;AAcG;;ACdH;;;;;;;;;;;;;;AAcG;AASH,MAAM,qBAAqB,GAAG,CAC5B,eAAgC,EAChC,YAA0B,KAChB;AACV,IAAA,MAAM,GAAG,GAAG,MAAM,CAAC,eAAe,CAAC;IACnC,OAAO,YAAY,CAAC,QAAQ,CAAC,eAAe,CAAC,IAAI,EAAE,GAAG,CAAC;AACzD,CAAC;AAED,MAAM,mBAAmB,GAAG,CAC1B,eAAgC,EAChC,YAA0B,EAC1B,QAAkB,KACC;IACnB,MAAM,GAAG,GAAG,qBAAqB,CAAC,eAAe,EAAE,YAAY,CAAC;IAChE,MAAM,OAAO,GAAG,QAAQ,CAAC,aAAa,CAAC,MAAM,CAAC;AAE9C,IAAA,OAAO,CAAC,SAAS,GAAG,cAAc;AAClC,IAAA,OAAO,CAAC,OAAO,GAAG,GAAG;AACrB,IAAA,OAAO,CAAC,EAAE,GAAG,WAAW;AAExB,IAAA,OAAO,OAAO;AAChB,CAAC;AAED,MAAM,mBAAmB,GAAG,CAAC,OAAwB,EAAE,QAAkB,KAAU;AACjF,IAAA,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC;AACpC,CAAC;AAED,MAAM,eAAe,GAAG,OAAO,SAAiB,EAAE,QAAkB,KAAsB;IACxF,OAAO,QAAQ,CAAC,cAAc,CAAC,SAAS,CAAC,KAAK,IAAI,EAAE;AAClD,QAAA,MAAM,IAAI,OAAO,CAAC,OAAO,IAAI,qBAAqB,CAAC,OAAO,CAAC,CAAC;;IAE9D,OAAO,CAAC,CAAC,QAAQ,CAAC,cAAc,CAAC,SAAS,CAAC;AAC7C,CAAC;AAEY,MAAA,aAAa,GACxB,CACE,MAAiB,EACjB,aAA4B,EAC5B,QAAkB,EAClB,YAA0B,KAE5B,YAA6B;AAC3B,IAAA,MAAM,eAAe,GAAG,aAAa,EAAE,MAAM,EAAE,GAAG;IAElD,IAAI,eAAe,EAAE;AACnB,QAAA,MAAM,CAAC,GAAG,CAAC,iCAAiC,EAAE,eAAe,CAAC;QAE9D,MAAM,gBAAgB,GAAG,mBAAmB,CAAC,eAAe,EAAE,YAAY,EAAE,QAAQ,CAAC;AAErF,QAAA,mBAAmB,CAAC,gBAAgB,EAAE,QAAQ,CAAC;AAE/C,QAAA,OAAO,MAAM,eAAe,CAAC,WAAW,EAAE,QAAQ,CAAC;;AAGrD,IAAA,MAAM,CAAC,GAAG,CAAC,wBAAwB,CAAC;AAEpC,IAAA,OAAO,IAAI;AACb;;AChFF;;;;;;;;;;;;;;AAcG;;ACdH;;;;;;;;;;;;;;AAcG;AAEH;;AAEG;;AClBH;;AAEG;;;;"}

package/index.d.ts

@@ -0,0 +1,6 @@
+/**
+ * Generated bundle index. Do not edit.
+ */
+/// <amd-module name="@valtimo/security" />
+export * from './public_api';
+//# sourceMappingURL=valtimo-security.d.ts.map

package/lib/constants/csp.constant.d.ts

@@ -0,0 +1,4 @@
+declare const CSP_HTTP_EQUIV = "Content-Security-Policy";
+declare const CSP_META_ID = "CSP_META";
+export { CSP_HTTP_EQUIV, CSP_META_ID };
+//# sourceMappingURL=csp.constant.d.ts.map

package/lib/constants/csp.constant.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"csp.constant.d.ts","sourceRoot":"","sources":["../../../../../projects/valtimo/security/src/lib/constants/csp.constant.ts"],"names":[],"mappings":"AAgBA,QAAA,MAAM,cAAc,4BAA4B,CAAC;AAEjD,QAAA,MAAM,WAAW,aAAa,CAAC;AAE/B,OAAO,EAAC,cAAc,EAAE,WAAW,EAAC,CAAC"}

package/lib/constants/index.d.ts

@@ -0,0 +1,2 @@
+export * from './csp.constant';
+//# sourceMappingURL=index.d.ts.map

package/lib/constants/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../projects/valtimo/security/src/lib/constants/index.ts"],"names":[],"mappings":"AAgBA,cAAc,gBAAgB,CAAC"}

package/lib/error/error-routing.module.d.ts

@@ -0,0 +1,9 @@
+import * as i0 from "@angular/core";
+import * as i1 from "@angular/common";
+import * as i2 from "@angular/router";
+export declare class ErrorRoutingModule {
+    static ɵfac: i0.ɵɵFactoryDeclaration<ErrorRoutingModule, never>;
+    static ɵmod: i0.ɵɵNgModuleDeclaration<ErrorRoutingModule, never, [typeof i1.CommonModule, typeof i2.RouterModule], [typeof i2.RouterModule]>;
+    static ɵinj: i0.ɵɵInjectorDeclaration<ErrorRoutingModule>;
+}
+//# sourceMappingURL=error-routing.module.d.ts.map

package/lib/error/error-routing.module.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"error-routing.module.d.ts","sourceRoot":"","sources":["../../../../../projects/valtimo/security/src/lib/error/error-routing.module.ts"],"names":[],"mappings":";;;AA8BA,qBAMa,kBAAkB;yCAAlB,kBAAkB;0CAAlB,kBAAkB;0CAAlB,kBAAkB;CAAG"}

package/lib/error/error.component.d.ts

@@ -0,0 +1,13 @@
+import { OnInit } from '@angular/core';
+import { ActivatedRoute } from '@angular/router';
+import { Error } from './error';
+import * as i0 from "@angular/core";
+export declare class ErrorComponent implements OnInit {
+    private activatedRoute;
+    err: Error;
+    constructor(activatedRoute: ActivatedRoute);
+    ngOnInit(): void;
+    static ɵfac: i0.ɵɵFactoryDeclaration<ErrorComponent, never>;
+    static ɵcmp: i0.ɵɵComponentDeclaration<ErrorComponent, "valtimo-error", never, {}, {}, never, never, false, never>;
+}
+//# sourceMappingURL=error.component.d.ts.map

package/lib/error/error.component.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"error.component.d.ts","sourceRoot":"","sources":["../../../../../projects/valtimo/security/src/lib/error/error.component.ts"],"names":[],"mappings":"AAgBA,OAAO,EAAY,MAAM,EAAC,MAAM,eAAe,CAAC;AAChD,OAAO,EAAC,cAAc,EAAC,MAAM,iBAAiB,CAAC;AAC/C,OAAO,EAAC,KAAK,EAAC,MAAM,SAAS,CAAC;;AAE9B,qBAMa,cAAe,YAAW,MAAM;IAG/B,OAAO,CAAC,cAAc;IAF3B,GAAG,EAAE,KAAK,CAAC;gBAEE,cAAc,EAAE,cAAc;IAElD,QAAQ;yCALG,cAAc;2CAAd,cAAc;CAa1B"}

package/lib/error/error.d.ts

@@ -0,0 +1,5 @@
+export interface Error {
+    title: string;
+    error: number;
+}
+//# sourceMappingURL=error.d.ts.map

package/lib/error/error.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"error.d.ts","sourceRoot":"","sources":["../../../../../projects/valtimo/security/src/lib/error/error.ts"],"names":[],"mappings":"AAgBA,MAAM,WAAW,KAAK;IACpB,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;CACf"}

package/lib/error/http-error.interceptor.d.ts

@@ -0,0 +1,12 @@
+import { HttpEvent, HttpHandler, HttpInterceptor, HttpRequest } from '@angular/common/http';
+import { GlobalNotificationService } from '@valtimo/shared';
+import { Observable } from 'rxjs';
+import * as i0 from "@angular/core";
+export declare class HttpErrorInterceptor implements HttpInterceptor {
+    private readonly globalNotificationService;
+    constructor(globalNotificationService: GlobalNotificationService);
+    intercept(request: HttpRequest<any>, next: HttpHandler): Observable<HttpEvent<any>>;
+    static ɵfac: i0.ɵɵFactoryDeclaration<HttpErrorInterceptor, never>;
+    static ɵprov: i0.ɵɵInjectableDeclaration<HttpErrorInterceptor>;
+}
+//# sourceMappingURL=http-error.interceptor.d.ts.map

package/lib/error/http-error.interceptor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"http-error.interceptor.d.ts","sourceRoot":"","sources":["../../../../../projects/valtimo/security/src/lib/error/http-error.interceptor.ts"],"names":[],"mappings":"AAeA,OAAO,EAEL,SAAS,EACT,WAAW,EACX,eAAe,EACf,WAAW,EACZ,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EAAC,yBAAyB,EAAkB,MAAM,iBAAiB,CAAC;AAC3E,OAAO,EAAC,UAAU,EAAa,MAAM,MAAM,CAAC;;AAG5C,qBAGa,oBAAqB,YAAW,eAAe;IAC9C,OAAO,CAAC,QAAQ,CAAC,yBAAyB;gBAAzB,yBAAyB,EAAE,yBAAyB;IAEjF,SAAS,CAAC,OAAO,EAAE,WAAW,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,WAAW,GAAG,UAAU,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;yCAHxE,oBAAoB;6CAApB,oBAAoB;CAkDhC"}

package/lib/guard/auth-guard.service.d.ts

@@ -0,0 +1,15 @@
+import { Injector } from '@angular/core';
+import { ActivatedRouteSnapshot, CanActivate, GuardResult, MaybeAsync, RouterStateSnapshot } from '@angular/router';
+import { NGXLogger } from 'ngx-logger';
+import { ConfigService } from '@valtimo/shared';
+import * as i0 from "@angular/core";
+export declare class AuthGuardService implements CanActivate {
+    private injector;
+    protected logger: NGXLogger;
+    private readonly authGuardServiceProvider;
+    constructor(configService: ConfigService, injector: Injector, logger: NGXLogger);
+    canActivate(route: ActivatedRouteSnapshot, state: RouterStateSnapshot): MaybeAsync<GuardResult>;
+    static ɵfac: i0.ɵɵFactoryDeclaration<AuthGuardService, never>;
+    static ɵprov: i0.ɵɵInjectableDeclaration<AuthGuardService>;
+}
+//# sourceMappingURL=auth-guard.service.d.ts.map

package/lib/guard/auth-guard.service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-guard.service.d.ts","sourceRoot":"","sources":["../../../../../projects/valtimo/security/src/lib/guard/auth-guard.service.ts"],"names":[],"mappings":"AAgBA,OAAO,EAAa,QAAQ,EAAC,MAAM,eAAe,CAAC;AACnD,OAAO,EACL,sBAAsB,EACtB,WAAW,EACX,WAAW,EACX,UAAU,EACV,mBAAmB,EACpB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAC,SAAS,EAAC,MAAM,YAAY,CAAC;AACrC,OAAO,EAAC,aAAa,EAAC,MAAM,iBAAiB,CAAC;;AAE9C,qBAGa,gBAAiB,YAAW,WAAW;IAKhD,OAAO,CAAC,QAAQ;IAChB,SAAS,CAAC,MAAM,EAAE,SAAS;IAL7B,OAAO,CAAC,QAAQ,CAAC,wBAAwB,CAAc;gBAGrD,aAAa,EAAE,aAAa,EACpB,QAAQ,EAAE,QAAQ,EAChB,MAAM,EAAE,SAAS;IAQ7B,WAAW,CAAC,KAAK,EAAE,sBAAsB,EAAE,KAAK,EAAE,mBAAmB,GAAG,UAAU,CAAC,WAAW,CAAC;yCAdpF,gBAAgB;6CAAhB,gBAAgB;CAkB5B"}

package/lib/initializers/index.d.ts

@@ -0,0 +1,2 @@
+export * from './initialize-csp';
+//# sourceMappingURL=index.d.ts.map

package/lib/initializers/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../projects/valtimo/security/src/lib/initializers/index.ts"],"names":[],"mappings":"AAgBA,cAAc,kBAAkB,CAAC"}

package/lib/initializers/initialize-csp.d.ts

@@ -0,0 +1,5 @@
+import { NGXLogger } from 'ngx-logger';
+import { ConfigService } from '@valtimo/shared';
+import { DomSanitizer } from '@angular/platform-browser';
+export declare const initializeCsp: (logger: NGXLogger, configService: ConfigService, document: Document, domSanitizer: DomSanitizer) => (() => Promise<boolean>);
+//# sourceMappingURL=initialize-csp.d.ts.map

package/lib/initializers/initialize-csp.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"initialize-csp.d.ts","sourceRoot":"","sources":["../../../../../projects/valtimo/security/src/lib/initializers/initialize-csp.ts"],"names":[],"mappings":"AAgBA,OAAO,EAAC,SAAS,EAAC,MAAM,YAAY,CAAC;AACrC,OAAO,EAAC,aAAa,EAAC,MAAM,iBAAiB,CAAC;AAE9C,OAAO,EAAC,YAAY,EAAC,MAAM,2BAA2B,CAAC;AAsCvD,eAAO,MAAM,aAAa,GAEtB,QAAQ,SAAS,EACjB,eAAe,aAAa,EAC5B,UAAU,QAAQ,EAClB,cAAc,YAAY,KACzB,CAAC,MAAM,OAAO,CAAC,OAAO,CAAC,CAiBzB,CAAC"}

package/lib/interceptors/index.d.ts

@@ -0,0 +1,2 @@
+export * from './zone-offset.interceptor';
+//# sourceMappingURL=index.d.ts.map

package/lib/interceptors/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../projects/valtimo/security/src/lib/interceptors/index.ts"],"names":[],"mappings":"AAgBA,cAAc,2BAA2B,CAAC"}

package/lib/interceptors/zone-offset.interceptor.d.ts

@@ -0,0 +1,10 @@
+import { HttpEvent, HttpHandler, HttpInterceptor, HttpRequest } from '@angular/common/http';
+import { Observable } from 'rxjs';
+import * as i0 from "@angular/core";
+export declare class ZoneOffsetInterceptor implements HttpInterceptor {
+    intercept(req: HttpRequest<any>, next: HttpHandler): Observable<HttpEvent<any>>;
+    private getFormattedZoneOffset;
+    static ɵfac: i0.ɵɵFactoryDeclaration<ZoneOffsetInterceptor, never>;
+    static ɵprov: i0.ɵɵInjectableDeclaration<ZoneOffsetInterceptor>;
+}
+//# sourceMappingURL=zone-offset.interceptor.d.ts.map

package/lib/interceptors/zone-offset.interceptor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"zone-offset.interceptor.d.ts","sourceRoot":"","sources":["../../../../../projects/valtimo/security/src/lib/interceptors/zone-offset.interceptor.ts"],"names":[],"mappings":"AAgBA,OAAO,EAAC,SAAS,EAAE,WAAW,EAAE,eAAe,EAAE,WAAW,EAAC,MAAM,sBAAsB,CAAC;AAE1F,OAAO,EAAC,UAAU,EAAC,MAAM,MAAM,CAAC;;AAGhC,qBACa,qBAAsB,YAAW,eAAe;IACpD,SAAS,CAAC,GAAG,EAAE,WAAW,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,WAAW,GAAG,UAAU,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IAOtF,OAAO,CAAC,sBAAsB;yCARnB,qBAAqB;6CAArB,qBAAqB;CAsBjC"}

package/lib/security.module.d.ts

@@ -0,0 +1,8 @@
+import * as i0 from "@angular/core";
+import * as i1 from "./error/error-routing.module";
+export declare class SecurityModule {
+    static ɵfac: i0.ɵɵFactoryDeclaration<SecurityModule, never>;
+    static ɵmod: i0.ɵɵNgModuleDeclaration<SecurityModule, never, [typeof i1.ErrorRoutingModule], never>;
+    static ɵinj: i0.ɵɵInjectorDeclaration<SecurityModule>;
+}
+//# sourceMappingURL=security.module.d.ts.map

package/lib/security.module.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"security.module.d.ts","sourceRoot":"","sources":["../../../../projects/valtimo/security/src/lib/security.module.ts"],"names":[],"mappings":";;AAqBA,qBAOa,cAAc;yCAAd,cAAc;0CAAd,cAAc;0CAAd,cAAc;CAAG"}

package/lib/user-provider.service.d.ts

@@ -0,0 +1,24 @@
+import { Injector } from '@angular/core';
+import { Observable, ReplaySubject } from 'rxjs';
+import { NGXLogger } from 'ngx-logger';
+import { ConfigService, EmailNotificationService, EmailNotificationSettings, UserIdentity, UserService } from '@valtimo/shared';
+import { HttpClient } from '@angular/common/http';
+import * as i0 from "@angular/core";
+export declare class UserProviderService implements UserService, EmailNotificationService {
+    private configService;
+    private injector;
+    private http;
+    private logger;
+    private readonly userService;
+    private valtimoApiConfig;
+    constructor(configService: ConfigService, injector: Injector, http: HttpClient, logger: NGXLogger);
+    getUserSubject(): ReplaySubject<UserIdentity>;
+    logout(): void;
+    getToken(): Promise<string>;
+    updateToken(minValidity: number): Promise<boolean>;
+    getEmailNotificationSettings(): Observable<EmailNotificationSettings>;
+    updateEmailNotificationSettings(settings: EmailNotificationSettings): Observable<EmailNotificationSettings>;
+    static ɵfac: i0.ɵɵFactoryDeclaration<UserProviderService, never>;
+    static ɵprov: i0.ɵɵInjectableDeclaration<UserProviderService>;
+}
+//# sourceMappingURL=user-provider.service.d.ts.map

package/lib/user-provider.service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"user-provider.service.d.ts","sourceRoot":"","sources":["../../../../projects/valtimo/security/src/lib/user-provider.service.ts"],"names":[],"mappings":"AAgBA,OAAO,EAAa,QAAQ,EAAC,MAAM,eAAe,CAAC;AACnD,OAAO,EAAC,UAAU,EAAE,aAAa,EAAC,MAAM,MAAM,CAAC;AAC/C,OAAO,EAAC,SAAS,EAAC,MAAM,YAAY,CAAC;AACrC,OAAO,EACL,aAAa,EACb,wBAAwB,EACxB,yBAAyB,EACzB,YAAY,EACZ,WAAW,EACZ,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAC,UAAU,EAAC,MAAM,sBAAsB,CAAC;;AAEhD,qBAGa,mBAAoB,YAAW,WAAW,EAAE,wBAAwB;IAO7E,OAAO,CAAC,aAAa;IACrB,OAAO,CAAC,QAAQ;IAChB,OAAO,CAAC,IAAI;IACZ,OAAO,CAAC,MAAM;IAThB,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAc;IAC1C,OAAO,CAAC,gBAAgB,CAEtB;gBAGQ,aAAa,EAAE,aAAa,EAC5B,QAAQ,EAAE,QAAQ,EAClB,IAAI,EAAE,UAAU,EAChB,MAAM,EAAE,SAAS;IAS3B,cAAc,IAAI,aAAa,CAAC,YAAY,CAAC;IAK7C,MAAM,IAAI,IAAI;IAKR,QAAQ,IAAI,OAAO,CAAC,MAAM,CAAC;IAK3B,WAAW,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IASjD,4BAA4B,IAAI,UAAU,CAAC,yBAAyB,CAAC;IAOrE,+BAA+B,CACpC,QAAQ,EAAE,yBAAyB,GAClC,UAAU,CAAC,yBAAyB,CAAC;yCApD7B,mBAAmB;6CAAnB,mBAAmB;CA2D/B"}

package/package.json

@@ -0,0 +1,26 @@
+{
+  "name": "@valtimo/security",
+  "license": "EUPL-1.2",
+  "version": "0.0.0",
+  "peerDependencies": {
+    "@angular/common": "^19.2.8",
+    "@angular/core": "^19.2.8"
+  },
+  "dependencies": {
+    "tslib": "2.8.1",
+    "moment": "2.30.1",
+    "csp-header": "6.1.0"
+  },
+  "module": "fesm2022/valtimo-security.mjs",
+  "typings": "index.d.ts",
+  "exports": {
+    "./package.json": {
+      "default": "./package.json"
+    },
+    ".": {
+      "types": "./index.d.ts",
+      "default": "./fesm2022/valtimo-security.mjs"
+    }
+  },
+  "sideEffects": false
+}

package/public_api.d.ts

@@ -0,0 +1,8 @@
+export * from './lib/guard/auth-guard.service';
+export * from './lib/security.module';
+export * from './lib/error/error';
+export * from './lib/error/error.component';
+export * from './lib/user-provider.service';
+export * from './lib/constants';
+export * from './lib/initializers';
+//# sourceMappingURL=public_api.d.ts.map

package/public_api.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"public_api.d.ts","sourceRoot":"","sources":["../../../projects/valtimo/security/src/public_api.ts"],"names":[],"mappings":"AAmBA,cAAc,gCAAgC,CAAC;AAC/C,cAAc,uBAAuB,CAAC;AACtC,cAAc,mBAAmB,CAAC;AAClC,cAAc,6BAA6B,CAAC;AAC5C,cAAc,6BAA6B,CAAC;AAC5C,cAAc,iBAAiB,CAAC;AAChC,cAAc,oBAAoB,CAAC"}

package/valtimo-security.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"valtimo-security.d.ts","sourceRoot":"","sources":["../../../projects/valtimo/security/src/valtimo-security.ts"],"names":[],"mappings":"AAAA;;GAEG;;AAEH,cAAc,cAAc,CAAC"}