@vertesia/ui 0.81.1 → 0.82.0

package/lib/esm/session/UserSessionProvider.js

@@ -1,179 +0,0 @@
-import { jsx as _jsx } from "react/jsx-runtime";
-import { onAuthStateChanged } from "firebase/auth";
-import { useEffect, useRef, useState } from "react";
-import { UserNotFoundError, getComposableToken } from "./auth/composable";
-import { getFirebaseAuth } from "./auth/firebase";
-import { useAuthState } from "./auth/useAuthState";
-import { Env } from "@vertesia/ui/env";
-import { LastSelectedAccountId_KEY, LastSelectedProjectId_KEY, UserSession, UserSessionContext } from "./UserSession";
-const devDomains = [".composable.sh", ".vertesia.dev", "vertesia.app"];
-const CENTRAL_AUTH_REDIRECT = "https://internal-auth.vertesia.app/";
-function shouldRedirectToCentralAuth() {
-    // Authentication is not supported in Docker environment.
-    // See https://github.com/vertesia/studio/wiki/Composable-UI-Hosting-Options
-    if (Env.isDocker) {
-        return true;
-    }
-    return devDomains.some((domain) => window.location.hostname.endsWith(domain));
-}
-export function UserSessionProvider({ children }) {
-    const hashParams = new URLSearchParams(location.hash.substring(1));
-    const token = hashParams.get("token");
-    const state = hashParams.get("state");
-    const [session, setSession] = useState(new UserSession());
-    const { generateState, verifyState, clearState } = useAuthState();
-    const hasInitiatedAuthRef = useRef(false);
-    const redirectToCentralAuth = (projectId, accountId) => {
-        const url = new URL(`${CENTRAL_AUTH_REDIRECT}?sts=${Env.endpoints.sts ?? "https://sts.vertesia.io"}`);
-        const currentUrl = new URL(window.location.href);
-        currentUrl.hash = "";
-        if (projectId)
-            currentUrl.searchParams.set("p", projectId);
-        if (accountId)
-            currentUrl.searchParams.set("a", accountId);
-        url.searchParams.set("redirect_uri", currentUrl.toString());
-        url.searchParams.set("state", generateState());
-        location.replace(url.toString());
-    };
-    useEffect(() => {
-        // Make this effect idempotent - only run auth flow once
-        if (hasInitiatedAuthRef.current) {
-            console.log("Auth: skipping duplicate auth flow initiation");
-            return;
-        }
-        hasInitiatedAuthRef.current = true;
-        console.log("Auth: starting auth flow");
-        Env.logger.info("Starting auth flow");
-        const currentUrl = new URL(window.location.href);
-        const selectedAccount = currentUrl.searchParams.get("a") ?? localStorage.getItem(LastSelectedAccountId_KEY) ?? undefined;
-        const selectedProject = currentUrl.searchParams.get("p") ??
-            localStorage.getItem(LastSelectedProjectId_KEY + "-" + selectedAccount) ??
-            undefined;
-        console.log("Auth: selected account", selectedAccount);
-        console.log("Auth: selected project", selectedProject);
-        Env.logger.info("Selected account and project", {
-            vertesia: {
-                account_id: selectedAccount,
-                project_id: selectedProject,
-            },
-        });
-        if (token && state) {
-            const validationError = verifyState(state);
-            if (validationError) {
-                console.error(`Auth: invalid state: ${validationError}`);
-                Env.logger.error(`Invalid state: ${validationError}`, {
-                    vertesia: {
-                        state: state,
-                    },
-                });
-                redirectToCentralAuth();
-            }
-            else {
-                clearState();
-            }
-            getComposableToken(selectedAccount, selectedProject, token, false, shouldRedirectToCentralAuth())
-                .then((res) => {
-                session.login(res.rawToken).then(() => {
-                    setSession(session.clone());
-                    //cleanup the hash
-                    window.location.hash = "";
-                });
-            })
-                .catch((err) => {
-                // Don't redirect to central auth for UserNotFoundError - let signup flow handle it
-                if (err instanceof UserNotFoundError) {
-                    console.log("User not found - will trigger signup flow", err);
-                    session.isLoading = false;
-                    session.authError = err;
-                    setSession(session.clone());
-                    return;
-                }
-                console.error("Failed to fetch user token from studio, redirecting to central auth", err);
-                Env.logger.error("Failed to fetch user token from studio, redirecting to central auth", {
-                    vertesia: {
-                        error: err,
-                    },
-                });
-                redirectToCentralAuth();
-            });
-            return;
-        }
-        else {
-            //if on a dev domain and not logged in, redirect to central auth
-            if (!session.isLoggedIn()) {
-                console.log("Auth: not logged in & no token/state");
-                Env.logger.info("Not logged in & no token/state", {
-                    vertesia: {
-                        account_id: selectedAccount,
-                        project_id: selectedProject,
-                    },
-                });
-                if (shouldRedirectToCentralAuth()) {
-                    console.log("Auth: on dev domain, redirecting to central auth with selection", selectedAccount, selectedProject);
-                    Env.logger.info("Redirecting to central auth with selection", {
-                        vertesia: {
-                            account_id: selectedAccount,
-                            project_id: selectedProject,
-                        },
-                    });
-                    redirectToCentralAuth();
-                }
-                else {
-                    console.log("Auth: not on dev domain");
-                    Env.logger.info("Not on dev domain", {
-                        vertesia: {
-                            account_id: selectedAccount,
-                            project_id: selectedProject,
-                        },
-                    });
-                }
-            }
-        }
-        return onAuthStateChanged(getFirebaseAuth(), async (firebaseUser) => {
-            if (firebaseUser) {
-                console.log("Auth: successful login with firebase");
-                Env.logger.info("Successful login with firebase", {
-                    vertesia: {
-                        account_id: selectedAccount,
-                        project_id: selectedProject,
-                    },
-                });
-                session.setSession = setSession;
-                await getComposableToken(selectedAccount, selectedProject, undefined, false, shouldRedirectToCentralAuth())
-                    .then((res) => {
-                    session.login(res.rawToken).then(() => setSession(session.clone()));
-                })
-                    .catch((err) => {
-                    console.error("Failed to fetch user token from studio", err);
-                    Env.logger.error("Failed to fetch user token from studio", {
-                        vertesia: {
-                            account_id: selectedAccount,
-                            project_id: selectedProject,
-                            error: err,
-                        },
-                    });
-                    if (!(err instanceof UserNotFoundError))
-                        session.logout();
-                    session.isLoading = false;
-                    session.authError = err;
-                    setSession(session.clone());
-                });
-            }
-            else {
-                // anonymous user
-                console.log("Auth: using anonymous user");
-                Env.logger.info("Using anonymous user", {
-                    vertesia: {
-                        account_id: selectedAccount,
-                        project_id: selectedProject,
-                    },
-                });
-                session.client.withAuthCallback(undefined);
-                session.logout();
-                setSession(session.clone());
-            }
-        });
-    }, []);
-    return _jsx(UserSessionContext.Provider, { value: session, children: children });
-}
-//# sourceMappingURL=UserSessionProvider.js.map

package/lib/esm/session/UserSessionProvider.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"UserSessionProvider.js","sourceRoot":"","sources":["../../../src/session/UserSessionProvider.tsx"],"names":[],"mappings":";AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AACnD,OAAO,EAAa,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAC;AAC/D,OAAO,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AAC1E,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAClD,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,GAAG,EAAE,MAAM,kBAAkB,CAAC;AACvC,OAAO,EAAE,yBAAyB,EAAE,yBAAyB,EAAE,WAAW,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AAEtH,MAAM,UAAU,GAAG,CAAC,gBAAgB,EAAE,eAAe,EAAE,cAAc,CAAC,CAAC;AACvE,MAAM,qBAAqB,GAAG,qCAAqC,CAAC;AAEpE,SAAS,2BAA2B;IAChC,yDAAyD;IACzD,4EAA4E;IAC5E,IAAI,GAAG,CAAC,QAAQ,EAAE,CAAC;QACf,OAAO,IAAI,CAAC;IAChB,CAAC;IACD,OAAO,UAAU,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;AAClF,CAAC;AAKD,MAAM,UAAU,mBAAmB,CAAC,EAAE,QAAQ,EAA4B;IACtE,MAAM,UAAU,GAAG,IAAI,eAAe,CAAC,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;IACnE,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IACtC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IACtC,MAAM,CAAC,OAAO,EAAE,UAAU,CAAC,GAAG,QAAQ,CAAc,IAAI,WAAW,EAAE,CAAC,CAAC;IACvE,MAAM,EAAE,aAAa,EAAE,WAAW,EAAE,UAAU,EAAE,GAAG,YAAY,EAAE,CAAC;IAClE,MAAM,mBAAmB,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAE1C,MAAM,qBAAqB,GAAG,CAAC,SAAkB,EAAE,SAAkB,EAAE,EAAE;QACrE,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,qBAAqB,QAAQ,GAAG,CAAC,SAAS,CAAC,GAAG,IAAI,yBAAyB,EAAE,CAAC,CAAC;QACtG,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QACjD,UAAU,CAAC,IAAI,GAAG,EAAE,CAAC;QACrB,IAAI,SAAS;YAAE,UAAU,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;QAC3D,IAAI,SAAS;YAAE,UAAU,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;QAC3D,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,cAAc,EAAE,UAAU,CAAC,QAAQ,EAAE,CAAC,CAAC;QAC5D,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,aAAa,EAAE,CAAC,CAAC;QAC/C,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC;IACrC,CAAC,CAAC;IAEF,SAAS,CAAC,GAAG,EAAE;QACX,wDAAwD;QACxD,IAAI,mBAAmB,CAAC,OAAO,EAAE,CAAC;YAC9B,OAAO,CAAC,GAAG,CAAC,+CAA+C,CAAC,CAAC;YAC7D,OAAO;QACX,CAAC;QACD,mBAAmB,CAAC,OAAO,GAAG,IAAI,CAAC;QAEnC,OAAO,CAAC,GAAG,CAAC,0BAA0B,CAAC,CAAC;QACxC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;QACtC,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QACjD,MAAM,eAAe,GACjB,UAAU,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,YAAY,CAAC,OAAO,CAAC,yBAAyB,CAAC,IAAI,SAAS,CAAC;QACrG,MAAM,eAAe,GACjB,UAAU,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC;YAChC,YAAY,CAAC,OAAO,CAAC,yBAAyB,GAAG,GAAG,GAAG,eAAe,CAAC;YACvE,SAAS,CAAC;QACd,OAAO,CAAC,GAAG,CAAC,wBAAwB,EAAE,eAAe,CAAC,CAAC;QACvD,OAAO,CAAC,GAAG,CAAC,wBAAwB,EAAE,eAAe,CAAC,CAAC;QACvD,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,8BAA8B,EAAE;YAC5C,QAAQ,EAAE;gBACN,UAAU,EAAE,eAAe;gBAC3B,UAAU,EAAE,eAAe;aAC9B;SACJ,CAAC,CAAC;QAEH,IAAI,KAAK,IAAI,KAAK,EAAE,CAAC;YACjB,MAAM,eAAe,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC;YAC3C,IAAI,eAAe,EAAE,CAAC;gBAClB,OAAO,CAAC,KAAK,CAAC,wBAAwB,eAAe,EAAE,CAAC,CAAC;gBACzD,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,kBAAkB,eAAe,EAAE,EAAE;oBAClD,QAAQ,EAAE;wBACN,KAAK,EAAE,KAAK;qBACf;iBACJ,CAAC,CAAC;gBACH,qBAAqB,EAAE,CAAC;YAC5B,CAAC;iBAAM,CAAC;gBACJ,UAAU,EAAE,CAAA;YAChB,CAAC;YACD,kBAAkB,CAAC,eAAe,EAAE,eAAe,EAAE,KAAK,EAAE,KAAK,EAAE,2BAA2B,EAAE,CAAC;iBAC5F,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE;gBACV,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE;oBAClC,UAAU,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC;oBAC5B,kBAAkB;oBAClB,MAAM,CAAC,QAAQ,CAAC,IAAI,GAAG,EAAE,CAAC;gBAC9B,CAAC,CAAC,CAAC;YACP,CAAC,CAAC;iBACD,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;gBACX,mFAAmF;gBACnF,IAAI,GAAG,YAAY,iBAAiB,EAAE,CAAC;oBACnC,OAAO,CAAC,GAAG,CAAC,2CAA2C,EAAE,GAAG,CAAC,CAAC;oBAC9D,OAAO,CAAC,SAAS,GAAG,KAAK,CAAC;oBAC1B,OAAO,CAAC,SAAS,GAAG,GAAG,CAAC;oBACxB,UAAU,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC;oBAC5B,OAAO;gBACX,CAAC;gBAED,OAAO,CAAC,KAAK,CAAC,qEAAqE,EAAE,GAAG,CAAC,CAAC;gBAC1F,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,qEAAqE,EAAE;oBACpF,QAAQ,EAAE;wBACN,KAAK,EAAE,GAAG;qBACb;iBACJ,CAAC,CAAC;gBACH,qBAAqB,EAAE,CAAC;YAC5B,CAAC,CAAC,CAAC;YACP,OAAO;QACX,CAAC;aAAM,CAAC;YACJ,gEAAgE;YAChE,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC;gBACxB,OAAO,CAAC,GAAG,CAAC,sCAAsC,CAAC,CAAC;gBACpD,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,gCAAgC,EAAE;oBAC9C,QAAQ,EAAE;wBACN,UAAU,EAAE,eAAe;wBAC3B,UAAU,EAAE,eAAe;qBAC9B;iBACJ,CAAC,CAAC;gBACH,IAAI,2BAA2B,EAAE,EAAE,CAAC;oBAChC,OAAO,CAAC,GAAG,CACP,iEAAiE,EACjE,eAAe,EACf,eAAe,CAClB,CAAC;oBACF,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,4CAA4C,EAAE;wBAC1D,QAAQ,EAAE;4BACN,UAAU,EAAE,eAAe;4BAC3B,UAAU,EAAE,eAAe;yBAC9B;qBACJ,CAAC,CAAC;oBACH,qBAAqB,EAAE,CAAC;gBAC5B,CAAC;qBAAM,CAAC;oBACJ,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC,CAAC;oBACvC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,mBAAmB,EAAE;wBACjC,QAAQ,EAAE;4BACN,UAAU,EAAE,eAAe;4BAC3B,UAAU,EAAE,eAAe;yBAC9B;qBACJ,CAAC,CAAC;gBACP,CAAC;YACL,CAAC;QACL,CAAC;QAED,OAAO,kBAAkB,CAAC,eAAe,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE,EAAE;YAChE,IAAI,YAAY,EAAE,CAAC;gBACf,OAAO,CAAC,GAAG,CAAC,sCAAsC,CAAC,CAAC;gBACpD,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,gCAAgC,EAAE;oBAC9C,QAAQ,EAAE;wBACN,UAAU,EAAE,eAAe;wBAC3B,UAAU,EAAE,eAAe;qBAC9B;iBACJ,CAAC,CAAC;gBACH,OAAO,CAAC,UAAU,GAAG,UAAU,CAAC;gBAChC,MAAM,kBAAkB,CAAC,eAAe,EAAE,eAAe,EAAE,SAAS,EAAE,KAAK,EAAE,2BAA2B,EAAE,CAAC;qBACtG,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE;oBACV,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;gBACxE,CAAC,CAAC;qBACD,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;oBACX,OAAO,CAAC,KAAK,CAAC,wCAAwC,EAAE,GAAG,CAAC,CAAC;oBAC7D,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,wCAAwC,EAAE;wBACvD,QAAQ,EAAE;4BACN,UAAU,EAAE,eAAe;4BAC3B,UAAU,EAAE,eAAe;4BAC3B,KAAK,EAAE,GAAG;yBACb;qBACJ,CAAC,CAAC;oBACH,IAAI,CAAC,CAAC,GAAG,YAAY,iBAAiB,CAAC;wBAAE,OAAO,CAAC,MAAM,EAAE,CAAC;oBAC1D,OAAO,CAAC,SAAS,GAAG,KAAK,CAAC;oBAC1B,OAAO,CAAC,SAAS,GAAG,GAAG,CAAC;oBACxB,UAAU,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC;gBAChC,CAAC,CAAC,CAAC;YACX,CAAC;iBAAM,CAAC;gBACJ,iBAAiB;gBACjB,OAAO,CAAC,GAAG,CAAC,4BAA4B,CAAC,CAAC;gBAC1C,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,sBAAsB,EAAE;oBACpC,QAAQ,EAAE;wBACN,UAAU,EAAE,eAAe;wBAC3B,UAAU,EAAE,eAAe;qBAC9B;iBACJ,CAAC,CAAC;gBACH,OAAO,CAAC,MAAM,CAAC,gBAAgB,CAAC,SAAS,CAAC,CAAC;gBAC3C,OAAO,CAAC,MAAM,EAAE,CAAC;gBACjB,UAAU,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC;YAChC,CAAC;QACL,CAAC,CAAC,CAAC;IACP,CAAC,EAAE,EAAE,CAAC,CAAC;IAEP,OAAO,KAAC,kBAAkB,CAAC,QAAQ,IAAC,KAAK,EAAE,OAAO,YAAG,QAAQ,GAA+B,CAAC;AACjG,CAAC"}

package/lib/esm/session/auth/composable.js

@@ -1,255 +0,0 @@
-import { jwtDecode } from "jwt-decode";
-import { Env } from '@vertesia/ui/env';
-import { LastSelectedAccountId_KEY, LastSelectedProjectId_KEY } from '../constants';
-import { getFirebaseAuth, getFirebaseAuthToken } from './firebase';
-let AUTH_TOKEN_RAW;
-let AUTH_TOKEN;
-export async function fetchComposableToken(getIdToken, accountId, projectId, ttl, retryCount = 0) {
-    console.log(`Getting/refreshing composable token for account ${accountId} and project ${projectId} `);
-    Env.logger.info('Getting/refreshing composable token', {
-        vertesia: {
-            account_id: accountId,
-            project_id: projectId,
-            retry_count: retryCount,
-        },
-    });
-    const idToken = await getIdToken(); //get from firebase
-    if (!idToken) {
-        console.log('No id token found - using cookie auth');
-        throw new Error('No id token found');
-    }
-    // Use STS endpoint - either configured or default to sts.vertesia.io
-    const stsEndpoint = Env.endpoints.sts;
-    console.log('Using STS for token generation:', stsEndpoint);
-    Env.logger.info('Using STS for token generation', {
-        vertesia: {
-            account_id: accountId,
-            project_id: projectId,
-            sts_url: stsEndpoint,
-        },
-    });
-    try {
-        // Call STS to generate a user token
-        const stsUrl = new URL(stsEndpoint + '/token/issue');
-        const requestBody = {
-            type: 'user',
-            account_id: accountId,
-            project_id: projectId,
-            expires_at: ttl ? Math.floor(Date.now() / 1000) + ttl : undefined,
-        };
-        const stsRes = await fetch(stsUrl, {
-            method: 'POST',
-            headers: {
-                'Content-Type': 'application/json',
-                'Authorization': `Bearer ${idToken}` // Firebase token for authentication
-            },
-            body: JSON.stringify(requestBody)
-        });
-        if (idToken && stsRes?.status === 404) {
-            // User not found in token-server - call ensure-user endpoint
-            console.log('404: User not found - calling ensure-user endpoint');
-            Env.logger.info('404: User not found - calling ensure-user endpoint', {
-                vertesia: {
-                    account_id: accountId,
-                    project_id: projectId,
-                    status: stsRes?.status
-                },
-            });
-            const ensureResponse = await fetch(Env.endpoints.studio + '/auth/ensure-user', {
-                method: 'POST',
-                headers: {
-                    'Authorization': `Bearer ${idToken}`,
-                    'Content-Type': 'application/json'
-                }
-            });
-            if (ensureResponse.status === 412) {
-                // No invite - trigger signup
-                console.log('412: No invite found - signup required');
-                Env.logger.info('412: No invite found - signup required', {
-                    vertesia: {
-                        account_id: accountId,
-                        project_id: projectId,
-                    }
-                });
-                const idTokenDecoded = jwtDecode(idToken);
-                if (!idTokenDecoded?.email) {
-                    Env.logger.error('No email found in id token');
-                    throw new Error('No email found in id token');
-                }
-                throw new UserNotFoundError('User not found - signup required', idTokenDecoded.email);
-            }
-            if (!ensureResponse.ok) {
-                console.error('Failed to ensure user exists', ensureResponse.status);
-                Env.logger.error('Failed to ensure user exists', {
-                    vertesia: {
-                        account_id: accountId,
-                        project_id: projectId,
-                        status: ensureResponse.status,
-                    },
-                });
-                throw new Error('Failed to ensure user exists');
-            }
-            // User created/exists - retry token generation
-            console.log('User ensured - retrying token generation');
-            Env.logger.info('User ensured - retrying token generation', {
-                vertesia: {
-                    account_id: accountId,
-                    project_id: projectId,
-                }
-            });
-            return fetchComposableToken(getIdToken, accountId, projectId, ttl, retryCount);
-        }
-        if (idToken && stsRes?.status === 412) {
-            console.log("412: auth succeeded but user doesn't exist - signup required", stsRes?.status);
-            Env.logger.error("412: auth succeeded but user doesn't exist - signup required", {
-                vertesia: {
-                    account_id: accountId,
-                    project_id: projectId,
-                    status: stsRes?.status
-                },
-            });
-            const idTokenDecoded = jwtDecode(idToken);
-            if (!idTokenDecoded?.email) {
-                Env.logger.error('No email found in id token');
-                throw new Error('No email found in id token');
-            }
-            Env.logger.error('User not found', {
-                vertesia: {
-                    account_id: accountId,
-                    project_id: projectId,
-                    email: idTokenDecoded.email
-                }
-            });
-            throw new UserNotFoundError('User not found', idTokenDecoded.email);
-        }
-        if (stsRes.status === 403) {
-            // User doesn't have access to the requested account/project, or has no accounts
-            // This can happen with:
-            // 1. Stale localStorage from previous user
-            // 2. User invited to a new account (doesn't have access yet)
-            // 3. User exists but has no accounts at all
-            if (retryCount > 0) {
-                // Already retried without account scope - this is a real authorization failure
-                console.error('403: Access denied even without account scope - user may have no accounts');
-                Env.logger.error('403: Access denied after retry - authorization failure', {
-                    vertesia: {
-                        account_id: accountId,
-                        project_id: projectId,
-                        status: stsRes.status,
-                        retry_count: retryCount
-                    },
-                });
-                throw new Error('Access denied - user may not have access to any accounts');
-            }
-            console.log('403: Access denied - clearing cached account and retrying without account scope');
-            Env.logger.warn('403: Access denied - clearing cached account and retrying', {
-                vertesia: {
-                    account_id: accountId,
-                    project_id: projectId,
-                    status: stsRes.status,
-                    retry_count: retryCount
-                },
-            });
-            // Clear any stale account/project from localStorage
-            localStorage.removeItem(LastSelectedAccountId_KEY);
-            if (accountId) {
-                localStorage.removeItem(LastSelectedProjectId_KEY + '-' + accountId);
-            }
-            // Retry without account/project scope - let user log in to their default account
-            return fetchComposableToken(getIdToken, undefined, undefined, ttl, retryCount + 1);
-        }
-        if (!stsRes.ok) {
-            const errorText = await stsRes.text();
-            console.error('STS token generation failed:', stsRes.status, errorText);
-            Env.logger.error('STS token generation failed', {
-                vertesia: {
-                    status: stsRes.status,
-                    error: errorText,
-                    account_id: accountId,
-                    project_id: projectId,
-                },
-            });
-            throw new Error(`Failed to get token from STS: ${stsRes.status}`);
-        }
-        const { token } = await stsRes.json();
-        console.log('Successfully got token from STS');
-        Env.logger.info('Successfully got token from STS');
-        return token;
-    }
-    catch (error) {
-        if (error instanceof UserNotFoundError) {
-            throw error; // Re-throw UserNotFoundError
-        }
-        // Clear any stale account/project from localStorage on error
-        localStorage.removeItem(LastSelectedAccountId_KEY);
-        if (accountId) {
-            localStorage.removeItem(LastSelectedProjectId_KEY + '-' + accountId);
-        }
-        console.error('Failed to get composable token from STS', error);
-        Env.logger.error('Failed to get composable token from STS', {
-            vertesia: {
-                account_id: accountId,
-                project_id: projectId,
-                error: error,
-            },
-        });
-        throw new Error('Failed to get composable token');
-    }
-}
-/**
- *
- * @param accountId
- * @param projectId
- * @param ttl time to live for the token in seconds
- * @returns
- */
-export async function fetchComposableTokenFromFirebaseToken(accountId, projectId, ttl) {
-    return fetchComposableToken(getFirebaseAuthToken, accountId, projectId, ttl);
-}
-export async function getComposableToken(accountId, projectId, initToken, forceRefresh = false, useInternalAuth = false) {
-    const selectedAccount = accountId ?? localStorage.getItem(LastSelectedAccountId_KEY) ?? undefined;
-    const selectedProject = projectId ?? localStorage.getItem(LastSelectedProjectId_KEY + '-' + selectedAccount) ?? undefined;
-    //token is still valid for more than 5 minutes
-    if (!forceRefresh && AUTH_TOKEN_RAW && AUTH_TOKEN && AUTH_TOKEN.exp > (Date.now() / 1000 + 300)) {
-        return { rawToken: AUTH_TOKEN_RAW, token: AUTH_TOKEN, error: false };
-    }
-    //token is close to expire, refresh it
-    if (!useInternalAuth && getFirebaseAuth().currentUser) {
-        //we have a firebase user, get the token from there
-        AUTH_TOKEN_RAW = await fetchComposableTokenFromFirebaseToken(selectedAccount, selectedProject);
-    }
-    else if (initToken || AUTH_TOKEN_RAW) {
-        // we have a token already and no firebase user, refresh it
-        AUTH_TOKEN_RAW = await fetchComposableToken(() => Promise.resolve(initToken ?? AUTH_TOKEN_RAW), selectedAccount, selectedProject);
-    }
-    if (!AUTH_TOKEN_RAW) {
-        Env.logger.error('Cannot acquire a composable token', {
-            vertesia: {
-                account_id: selectedAccount,
-                project_id: selectedProject,
-            },
-        });
-        throw new Error('Cannot acquire a composable token');
-    }
-    AUTH_TOKEN = jwtDecode(AUTH_TOKEN_RAW);
-    if (!AUTH_TOKEN || !AUTH_TOKEN.exp || !AUTH_TOKEN_RAW) {
-        console.error('Invalid composable token', AUTH_TOKEN);
-        Env.logger.error('Invalid composable token', {
-            vertesia: {
-                account_id: selectedAccount,
-                project_id: selectedProject,
-            },
-        });
-        throw new Error('Invalid composable token');
-    }
-    return { rawToken: AUTH_TOKEN_RAW, token: AUTH_TOKEN, error: false };
-}
-export class UserNotFoundError extends Error {
-    email;
-    constructor(message, email) {
-        super(message);
-        this.name = 'UserNotFoundError';
-        this.email = email;
-    }
-}
-//# sourceMappingURL=composable.js.map

package/lib/esm/session/auth/composable.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"composable.js","sourceRoot":"","sources":["../../../../src/session/auth/composable.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AACvC,OAAO,EAAE,GAAG,EAAE,MAAM,kBAAkB,CAAC;AACvC,OAAO,EAAE,yBAAyB,EAAE,yBAAyB,EAAE,MAAM,cAAc,CAAC;AACpF,OAAO,EAAE,eAAe,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AAEnE,IAAI,cAAkC,CAAC;AACvC,IAAI,UAAwC,CAAC;AAS7C,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,UAAoD,EAAE,SAAkB,EAAE,SAAkB,EAAE,GAAY,EAAE,UAAU,GAAG,CAAC;IACjK,OAAO,CAAC,GAAG,CAAC,mDAAmD,SAAS,gBAAgB,SAAS,GAAG,CAAC,CAAC;IACtG,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,qCAAqC,EAAE;QACnD,QAAQ,EAAE;YACN,UAAU,EAAE,SAAS;YACrB,UAAU,EAAE,SAAS;YACrB,WAAW,EAAE,UAAU;SAC1B;KACJ,CAAC,CAAC;IAEH,MAAM,OAAO,GAAG,MAAM,UAAU,EAAE,CAAC,CAAC,mBAAmB;IACvD,IAAI,CAAC,OAAO,EAAE,CAAC;QACX,OAAO,CAAC,GAAG,CAAC,uCAAuC,CAAC,CAAC;QACrD,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC;IACzC,CAAC;IAED,qEAAqE;IACrE,MAAM,WAAW,GAAG,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC;IACtC,OAAO,CAAC,GAAG,CAAC,iCAAiC,EAAE,WAAW,CAAC,CAAC;IAC5D,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,gCAAgC,EAAE;QAC9C,QAAQ,EAAE;YACN,UAAU,EAAE,SAAS;YACrB,UAAU,EAAE,SAAS;YACrB,OAAO,EAAE,WAAW;SACvB;KACJ,CAAC,CAAC;IAEH,IAAI,CAAC;QACD,oCAAoC;QACpC,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,WAAW,GAAG,cAAc,CAAC,CAAC;QACrD,MAAM,WAAW,GAAG;YAChB,IAAI,EAAE,MAAM;YACZ,UAAU,EAAE,SAAS;YACrB,UAAU,EAAE,SAAS;YACrB,UAAU,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,SAAS;SACpE,CAAC;QAEF,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,MAAM,EAAE;YAC/B,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACL,cAAc,EAAE,kBAAkB;gBAClC,eAAe,EAAE,UAAU,OAAO,EAAE,CAAC,oCAAoC;aAC5E;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC;SACpC,CAAC,CAAC;QAEH,IAAI,OAAO,IAAI,MAAM,EAAE,MAAM,KAAK,GAAG,EAAE,CAAC;YACpC,6DAA6D;YAC7D,OAAO,CAAC,GAAG,CAAC,oDAAoD,CAAC,CAAC;YAClE,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,oDAAoD,EAAE;gBAClE,QAAQ,EAAE;oBACN,UAAU,EAAE,SAAS;oBACrB,UAAU,EAAE,SAAS;oBACrB,MAAM,EAAE,MAAM,EAAE,MAAM;iBACzB;aACJ,CAAC,CAAC;YAEH,MAAM,cAAc,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,MAAM,GAAG,mBAAmB,EAAE;gBAC3E,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE;oBACL,eAAe,EAAE,UAAU,OAAO,EAAE;oBACpC,cAAc,EAAE,kBAAkB;iBACrC;aACJ,CAAC,CAAC;YAEH,IAAI,cAAc,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;gBAChC,6BAA6B;gBAC7B,OAAO,CAAC,GAAG,CAAC,wCAAwC,CAAC,CAAC;gBACtD,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,wCAAwC,EAAE;oBACtD,QAAQ,EAAE;wBACN,UAAU,EAAE,SAAS;wBACrB,UAAU,EAAE,SAAS;qBACxB;iBACJ,CAAC,CAAC;gBACH,MAAM,cAAc,GAAG,SAAS,CAAC,OAAO,CAAQ,CAAC;gBACjD,IAAI,CAAC,cAAc,EAAE,KAAK,EAAE,CAAC;oBACzB,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,4BAA4B,CAAC,CAAC;oBAC/C,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;gBAClD,CAAC;gBACD,MAAM,IAAI,iBAAiB,CAAC,kCAAkC,EAAE,cAAc,CAAC,KAAK,CAAC,CAAC;YAC1F,CAAC;YAED,IAAI,CAAC,cAAc,CAAC,EAAE,EAAE,CAAC;gBACrB,OAAO,CAAC,KAAK,CAAC,8BAA8B,EAAE,cAAc,CAAC,MAAM,CAAC,CAAC;gBACrE,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,8BAA8B,EAAE;oBAC7C,QAAQ,EAAE;wBACN,UAAU,EAAE,SAAS;wBACrB,UAAU,EAAE,SAAS;wBACrB,MAAM,EAAE,cAAc,CAAC,MAAM;qBAChC;iBACJ,CAAC,CAAC;gBACH,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;YACpD,CAAC;YAED,+CAA+C;YAC/C,OAAO,CAAC,GAAG,CAAC,0CAA0C,CAAC,CAAC;YACxD,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,0CAA0C,EAAE;gBACxD,QAAQ,EAAE;oBACN,UAAU,EAAE,SAAS;oBACrB,UAAU,EAAE,SAAS;iBACxB;aACJ,CAAC,CAAC;YACH,OAAO,oBAAoB,CAAC,UAAU,EAAE,SAAS,EAAE,SAAS,EAAE,GAAG,EAAE,UAAU,CAAC,CAAC;QACnF,CAAC;QAED,IAAI,OAAO,IAAI,MAAM,EAAE,MAAM,KAAK,GAAG,EAAE,CAAC;YACpC,OAAO,CAAC,GAAG,CAAC,8DAA8D,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;YAC5F,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,8DAA8D,EAAE;gBAC7E,QAAQ,EAAE;oBACN,UAAU,EAAE,SAAS;oBACrB,UAAU,EAAE,SAAS;oBACrB,MAAM,EAAE,MAAM,EAAE,MAAM;iBACzB;aACJ,CAAC,CAAC;YACH,MAAM,cAAc,GAAG,SAAS,CAAC,OAAO,CAAQ,CAAC;YACjD,IAAI,CAAC,cAAc,EAAE,KAAK,EAAE,CAAC;gBACzB,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,4BAA4B,CAAC,CAAC;gBAC/C,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;YAClD,CAAC;YACD,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,gBAAgB,EAAE;gBAC/B,QAAQ,EAAE;oBACN,UAAU,EAAE,SAAS;oBACrB,UAAU,EAAE,SAAS;oBACrB,KAAK,EAAE,cAAc,CAAC,KAAK;iBAC9B;aACJ,CAAC,CAAC;YACH,MAAM,IAAI,iBAAiB,CAAC,gBAAgB,EAAE,cAAc,CAAC,KAAK,CAAC,CAAC;QACxE,CAAC;QAED,IAAI,MAAM,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YACxB,gFAAgF;YAChF,wBAAwB;YACxB,2CAA2C;YAC3C,6DAA6D;YAC7D,4CAA4C;YAE5C,IAAI,UAAU,GAAG,CAAC,EAAE,CAAC;gBACjB,+EAA+E;gBAC/E,OAAO,CAAC,KAAK,CAAC,2EAA2E,CAAC,CAAC;gBAC3F,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,wDAAwD,EAAE;oBACvE,QAAQ,EAAE;wBACN,UAAU,EAAE,SAAS;wBACrB,UAAU,EAAE,SAAS;wBACrB,MAAM,EAAE,MAAM,CAAC,MAAM;wBACrB,WAAW,EAAE,UAAU;qBAC1B;iBACJ,CAAC,CAAC;gBACH,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAC;YAChF,CAAC;YAED,OAAO,CAAC,GAAG,CAAC,iFAAiF,CAAC,CAAC;YAC/F,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,2DAA2D,EAAE;gBACzE,QAAQ,EAAE;oBACN,UAAU,EAAE,SAAS;oBACrB,UAAU,EAAE,SAAS;oBACrB,MAAM,EAAE,MAAM,CAAC,MAAM;oBACrB,WAAW,EAAE,UAAU;iBAC1B;aACJ,CAAC,CAAC;YAEH,oDAAoD;YACpD,YAAY,CAAC,UAAU,CAAC,yBAAyB,CAAC,CAAC;YACnD,IAAI,SAAS,EAAE,CAAC;gBACZ,YAAY,CAAC,UAAU,CAAC,yBAAyB,GAAG,GAAG,GAAG,SAAS,CAAC,CAAC;YACzE,CAAC;YAED,iFAAiF;YACjF,OAAO,oBAAoB,CAAC,UAAU,EAAE,SAAS,EAAE,SAAS,EAAE,GAAG,EAAE,UAAU,GAAG,CAAC,CAAC,CAAC;QACvF,CAAC;QAED,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;YACb,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;YACtC,OAAO,CAAC,KAAK,CAAC,8BAA8B,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;YACxE,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,6BAA6B,EAAE;gBAC5C,QAAQ,EAAE;oBACN,MAAM,EAAE,MAAM,CAAC,MAAM;oBACrB,KAAK,EAAE,SAAS;oBAChB,UAAU,EAAE,SAAS;oBACrB,UAAU,EAAE,SAAS;iBACxB;aACJ,CAAC,CAAC;YACH,MAAM,IAAI,KAAK,CAAC,iCAAiC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;QACtE,CAAC;QAED,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;QACtC,OAAO,CAAC,GAAG,CAAC,iCAAiC,CAAC,CAAC;QAC/C,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,iCAAiC,CAAC,CAAC;QACnD,OAAO,KAAK,CAAC;IAEjB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACb,IAAI,KAAK,YAAY,iBAAiB,EAAE,CAAC;YACrC,MAAM,KAAK,CAAC,CAAC,6BAA6B;QAC9C,CAAC;QAED,6DAA6D;QAC7D,YAAY,CAAC,UAAU,CAAC,yBAAyB,CAAC,CAAC;QACnD,IAAI,SAAS,EAAE,CAAC;YACZ,YAAY,CAAC,UAAU,CAAC,yBAAyB,GAAG,GAAG,GAAG,SAAS,CAAC,CAAC;QACzE,CAAC;QACD,OAAO,CAAC,KAAK,CAAC,yCAAyC,EAAE,KAAK,CAAC,CAAC;QAChE,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,yCAAyC,EAAE;YACxD,QAAQ,EAAE;gBACN,UAAU,EAAE,SAAS;gBACrB,UAAU,EAAE,SAAS;gBACrB,KAAK,EAAE,KAAK;aACf;SACJ,CAAC,CAAC;QACH,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;IACtD,CAAC;AACL,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,qCAAqC,CAAC,SAAkB,EAAE,SAAkB,EAAE,GAAY;IAC5G,OAAO,oBAAoB,CAAC,oBAAoB,EAAE,SAAS,EAAE,SAAS,EAAE,GAAG,CAAC,CAAC;AACjF,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,SAAkB,EAAE,SAAkB,EAAE,SAAkB,EAAE,YAAY,GAAG,KAAK,EAAE,eAAe,GAAG,KAAK;IAE9I,MAAM,eAAe,GAAG,SAAS,IAAI,YAAY,CAAC,OAAO,CAAC,yBAAyB,CAAC,IAAI,SAAS,CAAA;IACjG,MAAM,eAAe,GAAG,SAAS,IAAI,YAAY,CAAC,OAAO,CAAC,yBAAyB,GAAG,GAAG,GAAG,eAAe,CAAC,IAAI,SAAS,CAAA;IAEzH,8CAA8C;IAC9C,IAAI,CAAC,YAAY,IAAI,cAAc,IAAI,UAAU,IAAI,UAAU,CAAC,GAAG,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,GAAG,GAAG,CAAC,EAAE,CAAC;QAC9F,OAAO,EAAE,QAAQ,EAAE,cAAc,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;IACzE,CAAC;IAED,sCAAsC;IACtC,IAAI,CAAC,eAAe,IAAI,eAAe,EAAE,CAAC,WAAW,EAAE,CAAC;QACpD,mDAAmD;QACnD,cAAc,GAAG,MAAM,qCAAqC,CAAC,eAAe,EAAE,eAAe,CAAC,CAAC;IACnG,CAAC;SAAM,IAAI,SAAS,IAAI,cAAc,EAAE,CAAC;QACrC,2DAA2D;QAC3D,cAAc,GAAG,MAAM,oBAAoB,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,IAAI,cAAc,CAAC,EAAE,eAAe,EAAE,eAAe,CAAC,CAAC;IACtI,CAAC;IAED,IAAI,CAAC,cAAc,EAAE,CAAC;QAClB,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,mCAAmC,EAAE;YAClD,QAAQ,EAAE;gBACN,UAAU,EAAE,eAAe;gBAC3B,UAAU,EAAE,eAAe;aAC9B;SACJ,CAAC,CAAC;QACH,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;IACzD,CAAC;IAED,UAAU,GAAG,SAAS,CAAC,cAAc,CAAqB,CAAC;IAE3D,IAAI,CAAC,UAAU,IAAI,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,cAAc,EAAE,CAAC;QACpD,OAAO,CAAC,KAAK,CAAC,0BAA0B,EAAE,UAAU,CAAC,CAAC;QACtD,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,0BAA0B,EAAE;YACzC,QAAQ,EAAE;gBACN,UAAU,EAAE,eAAe;gBAC3B,UAAU,EAAE,eAAe;aAC9B;SACJ,CAAC,CAAC;QACH,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;IAChD,CAAC;IAED,OAAO,EAAE,QAAQ,EAAE,cAAc,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;AAEzE,CAAC;AAED,MAAM,OAAO,iBAAkB,SAAQ,KAAK;IACxC,KAAK,CAAS;IACd,YAAY,OAAe,EAAE,KAAa;QACtC,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,mBAAmB,CAAC;QAChC,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;IACvB,CAAC;CACJ"}

package/lib/esm/session/auth/firebase.js

@@ -1,158 +0,0 @@
-import { Env } from "@vertesia/ui/env";
-import { getAnalytics } from "firebase/analytics";
-import { initializeApp } from "firebase/app";
-import { getAuth } from "firebase/auth";
-// Use lazy initialization to avoid accessing Env before it's initialized
-let _firebaseApp = null;
-let _analytics = null;
-let _firebaseAuth = null;
-// Getters that lazily initialize Firebase components when first accessed
-export function getFirebaseApp() {
-    if (!_firebaseApp) {
-        try {
-            if (!Env.firebase) {
-                throw new Error("Firebase configuration is not available in the environment");
-            }
-            _firebaseApp = initializeApp(Env.firebase);
-        }
-        catch (error) {
-            console.error("Failed to initialize Firebase app:", error);
-            throw new Error("Firebase initialization failed - environment may not be properly initialized");
-        }
-    }
-    return _firebaseApp;
-}
-export function getFirebaseAnalytics() {
-    if (!_analytics) {
-        _analytics = getAnalytics(getFirebaseApp());
-    }
-    return _analytics;
-}
-export function getFirebaseAuth() {
-    if (!_firebaseAuth) {
-        _firebaseAuth = getAuth(getFirebaseApp());
-    }
-    return _firebaseAuth;
-}
-export async function setFirebaseTenant(tenantEmail) {
-    if (!tenantEmail) {
-        console.log("No tenant name or email specified, skipping tenant setup");
-        return;
-    }
-    if (!Env.firebase) {
-        console.log("Firebase configuration is not available in the environment");
-        return;
-    }
-    try {
-        if (tenantEmail)
-            console.log(`Resolving tenant ID from email: ${tenantEmail}`);
-        // Add retry logic with exponential backoff
-        let retries = 3;
-        let retryDelay = 250; // Start with 250ms delay
-        while (retries > 0) {
-            try {
-                // Call the API endpoint to resolve the tenant ID
-                const response = await fetch("/api/resolve-tenant", {
-                    method: "POST",
-                    headers: {
-                        "Content-Type": "application/json",
-                    },
-                    body: JSON.stringify({
-                        tenantEmail: tenantEmail,
-                    }),
-                    // Add timeout to prevent hanging requests
-                    signal: AbortSignal.timeout(5000),
-                });
-                // Check for network errors
-                if (!response) {
-                    throw new Error("No response received from tenant API");
-                }
-                // Handle HTTP error responses
-                if (!response.ok) {
-                    // Try to parse the error response
-                    try {
-                        const errorData = await response.json();
-                        console.error("Failed to resolve tenant ID:", errorData.error);
-                    }
-                    catch (parseError) {
-                        console.error(`Failed to resolve tenant ID: HTTP ${response.status}`);
-                    }
-                    // If the error is 404 Not Found, no need to retry
-                    if (response.status === 404) {
-                        console.warn(`Tenant not found for ${tenantEmail}`);
-                        return;
-                    }
-                    throw new Error(`HTTP error ${response.status}`);
-                }
-                // Successfully got a response, parse it
-                const data = (await response.json());
-                if (data && data.firebaseTenantId) {
-                    const auth = getFirebaseAuth();
-                    auth.tenantId = data.firebaseTenantId;
-                    Env.firebase.providerType = data.provider ?? "oidc";
-                    console.log(`Tenant ID set to ${auth.tenantId}`);
-                    return data;
-                }
-                else {
-                    console.error(`Invalid response format, missing tenantId for ${tenantEmail}`);
-                    return; // No need to retry for invalid response format
-                }
-            }
-            catch (fetchError) {
-                // Only retry for network-related errors
-                if (retries > 1) {
-                    console.warn(`Tenant resolution failed, retrying in ${retryDelay}ms...`, fetchError);
-                    await new Promise((resolve) => setTimeout(resolve, retryDelay));
-                    retryDelay *= 2; // Exponential backoff
-                    retries--;
-                }
-                else {
-                    throw fetchError; // Last retry failed, propagate error
-                }
-            }
-        }
-    }
-    catch (error) {
-        // Final error handler
-        console.error("Error setting Firebase tenant:", error instanceof Error ? error.message : "Unknown error");
-        // Continue without tenant ID - authentication will work without multi-tenancy
-        // but the user will access the default tenant
-    }
-}
-export async function getFirebaseAuthToken(refresh) {
-    const auth = getFirebaseAuth();
-    const user = auth.currentUser;
-    if (user) {
-        return user
-            .getIdToken(refresh)
-            .then((token) => {
-            Env.logger.info("Got Firebase token", {
-                vertesia: {
-                    user_email: user.email,
-                    user_name: user.displayName,
-                    user_id: user.uid,
-                    refresh: refresh,
-                },
-            });
-            return token;
-        })
-            .catch((err) => {
-            Env.logger.error("Failed to get Firebase token", {
-                vertesia: {
-                    user_email: user.email,
-                    user_name: user.displayName,
-                    user_id: user.uid,
-                    refresh: refresh,
-                    error: err,
-                },
-            });
-            console.error("Failed to get access token", err);
-            return null;
-        });
-    }
-    else {
-        Env.logger.warn("No user found");
-        return Promise.resolve(null);
-    }
-}
-//# sourceMappingURL=firebase.js.map

package/lib/esm/session/auth/firebase.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"firebase.js","sourceRoot":"","sources":["../../../../src/session/auth/firebase.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,GAAG,EAAE,MAAM,kBAAkB,CAAC;AACvC,OAAO,EAAa,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAC7D,OAAO,EAAe,aAAa,EAAE,MAAM,cAAc,CAAC;AAC1D,OAAO,EAAQ,OAAO,EAAE,MAAM,eAAe,CAAC;AAE9C,yEAAyE;AACzE,IAAI,YAAY,GAAuB,IAAI,CAAC;AAC5C,IAAI,UAAU,GAAqB,IAAI,CAAC;AACxC,IAAI,aAAa,GAAgB,IAAI,CAAC;AAEtC,yEAAyE;AACzE,MAAM,UAAU,cAAc;IAC1B,IAAI,CAAC,YAAY,EAAE,CAAC;QAChB,IAAI,CAAC;YACD,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC;gBAChB,MAAM,IAAI,KAAK,CAAC,4DAA4D,CAAC,CAAC;YAClF,CAAC;YACD,YAAY,GAAG,aAAa,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC/C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,OAAO,CAAC,KAAK,CAAC,oCAAoC,EAAE,KAAK,CAAC,CAAC;YAC3D,MAAM,IAAI,KAAK,CAAC,8EAA8E,CAAC,CAAC;QACpG,CAAC;IACL,CAAC;IACD,OAAO,YAAY,CAAC;AACxB,CAAC;AAED,MAAM,UAAU,oBAAoB;IAChC,IAAI,CAAC,UAAU,EAAE,CAAC;QACd,UAAU,GAAG,YAAY,CAAC,cAAc,EAAE,CAAC,CAAC;IAChD,CAAC;IACD,OAAO,UAAU,CAAC;AACtB,CAAC;AAED,MAAM,UAAU,eAAe;IAC3B,IAAI,CAAC,aAAa,EAAE,CAAC;QACjB,aAAa,GAAG,OAAO,CAAC,cAAc,EAAE,CAAC,CAAC;IAC9C,CAAC;IACD,OAAO,aAAa,CAAC;AACzB,CAAC;AAGD,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,WAAoB;IACxD,IAAI,CAAC,WAAW,EAAE,CAAC;QACf,OAAO,CAAC,GAAG,CAAC,0DAA0D,CAAC,CAAC;QACxE,OAAO;IACX,CAAC;IAED,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC;QAChB,OAAO,CAAC,GAAG,CAAC,4DAA4D,CAAC,CAAC;QAC1E,OAAO;IACX,CAAC;IAED,IAAI,CAAC;QACD,IAAI,WAAW;YAAE,OAAO,CAAC,GAAG,CAAC,mCAAmC,WAAW,EAAE,CAAC,CAAC;QAE/E,2CAA2C;QAC3C,IAAI,OAAO,GAAG,CAAC,CAAC;QAChB,IAAI,UAAU,GAAG,GAAG,CAAC,CAAC,yBAAyB;QAE/C,OAAO,OAAO,GAAG,CAAC,EAAE,CAAC;YACjB,IAAI,CAAC;gBACD,iDAAiD;gBACjD,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,qBAAqB,EAAE;oBAChD,MAAM,EAAE,MAAM;oBACd,OAAO,EAAE;wBACL,cAAc,EAAE,kBAAkB;qBACrC;oBACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;wBACjB,WAAW,EAAE,WAAW;qBAC3B,CAAC;oBACF,0CAA0C;oBAC1C,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC;iBACpC,CAAC,CAAC;gBAEH,2BAA2B;gBAC3B,IAAI,CAAC,QAAQ,EAAE,CAAC;oBACZ,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;gBAC5D,CAAC;gBAED,8BAA8B;gBAC9B,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;oBACf,kCAAkC;oBAClC,IAAI,CAAC;wBACD,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;wBACxC,OAAO,CAAC,KAAK,CAAC,8BAA8B,EAAE,SAAS,CAAC,KAAK,CAAC,CAAC;oBACnE,CAAC;oBAAC,OAAO,UAAU,EAAE,CAAC;wBAClB,OAAO,CAAC,KAAK,CAAC,qCAAqC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;oBAC1E,CAAC;oBAED,kDAAkD;oBAClD,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;wBAC1B,OAAO,CAAC,IAAI,CAAC,wBAAwB,WAAW,EAAE,CAAC,CAAC;wBACpD,OAAO;oBACX,CAAC;oBAED,MAAM,IAAI,KAAK,CAAC,cAAc,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;gBACrD,CAAC;gBAED,wCAAwC;gBACxC,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAqB,CAAC;gBAEzD,IAAI,IAAI,IAAI,IAAI,CAAC,gBAAgB,EAAE,CAAC;oBAChC,MAAM,IAAI,GAAG,eAAe,EAAE,CAAC;oBAC/B,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,gBAAgB,CAAC;oBACtC,GAAG,CAAC,QAAQ,CAAC,YAAY,GAAG,IAAI,CAAC,QAAQ,IAAI,MAAM,CAAC;oBACpD,OAAO,CAAC,GAAG,CAAC,oBAAoB,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;oBACjD,OAAO,IAAI,CAAC;gBAChB,CAAC;qBAAM,CAAC;oBACJ,OAAO,CAAC,KAAK,CAAC,iDAAiD,WAAW,EAAE,CAAC,CAAC;oBAC9E,OAAO,CAAC,+CAA+C;gBAC3D,CAAC;YACL,CAAC;YAAC,OAAO,UAAU,EAAE,CAAC;gBAClB,wCAAwC;gBACxC,IAAI,OAAO,GAAG,CAAC,EAAE,CAAC;oBACd,OAAO,CAAC,IAAI,CAAC,yCAAyC,UAAU,OAAO,EAAE,UAAU,CAAC,CAAC;oBACrF,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC,CAAC;oBAChE,UAAU,IAAI,CAAC,CAAC,CAAC,sBAAsB;oBACvC,OAAO,EAAE,CAAC;gBACd,CAAC;qBAAM,CAAC;oBACJ,MAAM,UAAU,CAAC,CAAC,qCAAqC;gBAC3D,CAAC;YACL,CAAC;QACL,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACb,sBAAsB;QACtB,OAAO,CAAC,KAAK,CAAC,gCAAgC,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC;QAE1G,8EAA8E;QAC9E,8CAA8C;IAClD,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,OAAiB;IACxD,MAAM,IAAI,GAAG,eAAe,EAAE,CAAC;IAC/B,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,CAAC;IAC9B,IAAI,IAAI,EAAE,CAAC;QACP,OAAO,IAAI;aACN,UAAU,CAAC,OAAO,CAAC;aACnB,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE;YACZ,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,oBAAoB,EAAE;gBAClC,QAAQ,EAAE;oBACN,UAAU,EAAE,IAAI,CAAC,KAAK;oBACtB,SAAS,EAAE,IAAI,CAAC,WAAW;oBAC3B,OAAO,EAAE,IAAI,CAAC,GAAG;oBACjB,OAAO,EAAE,OAAO;iBACnB;aACJ,CAAC,CAAC;YACH,OAAO,KAAK,CAAC;QACjB,CAAC,CAAC;aACD,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;YACX,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,8BAA8B,EAAE;gBAC7C,QAAQ,EAAE;oBACN,UAAU,EAAE,IAAI,CAAC,KAAK;oBACtB,SAAS,EAAE,IAAI,CAAC,WAAW;oBAC3B,OAAO,EAAE,IAAI,CAAC,GAAG;oBACjB,OAAO,EAAE,OAAO;oBAChB,KAAK,EAAE,GAAG;iBACb;aACJ,CAAC,CAAC;YACH,OAAO,CAAC,KAAK,CAAC,4BAA4B,EAAE,GAAG,CAAC,CAAC;YACjD,OAAO,IAAI,CAAC;QAChB,CAAC,CAAC,CAAC;IACX,CAAC;SAAM,CAAC;QACJ,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QACjC,OAAO,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACjC,CAAC;AACL,CAAC"}