@vertesia/ui 1.0.0-dev.20260203.130115Z → 1.0.0-dev.20260225.024852Z

package/lib/esm/session/auth/composable.js

@@ -0,0 +1,255 @@
+import { jwtDecode } from "jwt-decode";
+import { Env } from '@vertesia/ui/env';
+import { LastSelectedAccountId_KEY, LastSelectedProjectId_KEY } from '../constants';
+import { getFirebaseAuth, getFirebaseAuthToken } from './firebase';
+let AUTH_TOKEN_RAW;
+let AUTH_TOKEN;
+export async function fetchComposableToken(getIdToken, accountId, projectId, ttl, retryCount = 0) {
+    console.log(`Getting/refreshing composable token for account ${accountId} and project ${projectId} `);
+    Env.logger.info('Getting/refreshing composable token', {
+        vertesia: {
+            account_id: accountId,
+            project_id: projectId,
+            retry_count: retryCount,
+        },
+    });
+    const idToken = await getIdToken(); //get from firebase
+    if (!idToken) {
+        console.log('No id token found - using cookie auth');
+        throw new Error('No id token found');
+    }
+    // Use STS endpoint - either configured or default to sts.vertesia.io
+    const stsEndpoint = Env.endpoints.sts;
+    console.log('Using STS for token generation:', stsEndpoint);
+    Env.logger.info('Using STS for token generation', {
+        vertesia: {
+            account_id: accountId,
+            project_id: projectId,
+            sts_url: stsEndpoint,
+        },
+    });
+    try {
+        // Call STS to generate a user token
+        const stsUrl = new URL(stsEndpoint + '/token/issue');
+        const requestBody = {
+            type: 'user',
+            account_id: accountId,
+            project_id: projectId,
+            expires_at: ttl ? Math.floor(Date.now() / 1000) + ttl : undefined,
+        };
+        const stsRes = await fetch(stsUrl, {
+            method: 'POST',
+            headers: {
+                'Content-Type': 'application/json',
+                'Authorization': `Bearer ${idToken}` // Firebase token for authentication
+            },
+            body: JSON.stringify(requestBody)
+        });
+        if (idToken && stsRes?.status === 404) {
+            // User not found in token-server - call ensure-user endpoint
+            console.log('404: User not found - calling ensure-user endpoint');
+            Env.logger.info('404: User not found - calling ensure-user endpoint', {
+                vertesia: {
+                    account_id: accountId,
+                    project_id: projectId,
+                    status: stsRes?.status
+                },
+            });
+            const ensureResponse = await fetch(Env.endpoints.studio + '/auth/ensure-user', {
+                method: 'POST',
+                headers: {
+                    'Authorization': `Bearer ${idToken}`,
+                    'Content-Type': 'application/json'
+                }
+            });
+            if (ensureResponse.status === 412) {
+                // No invite - trigger signup
+                console.log('412: No invite found - signup required');
+                Env.logger.info('412: No invite found - signup required', {
+                    vertesia: {
+                        account_id: accountId,
+                        project_id: projectId,
+                    }
+                });
+                const idTokenDecoded = jwtDecode(idToken);
+                if (!idTokenDecoded?.email) {
+                    Env.logger.error('No email found in id token');
+                    throw new Error('No email found in id token');
+                }
+                throw new UserNotFoundError('User not found - signup required', idTokenDecoded.email);
+            }
+            if (!ensureResponse.ok) {
+                console.error('Failed to ensure user exists', ensureResponse.status);
+                Env.logger.error('Failed to ensure user exists', {
+                    vertesia: {
+                        account_id: accountId,
+                        project_id: projectId,
+                        status: ensureResponse.status,
+                    },
+                });
+                throw new Error('Failed to ensure user exists');
+            }
+            // User created/exists - retry token generation
+            console.log('User ensured - retrying token generation');
+            Env.logger.info('User ensured - retrying token generation', {
+                vertesia: {
+                    account_id: accountId,
+                    project_id: projectId,
+                }
+            });
+            return fetchComposableToken(getIdToken, accountId, projectId, ttl, retryCount);
+        }
+        if (idToken && stsRes?.status === 412) {
+            console.log("412: auth succeeded but user doesn't exist - signup required", stsRes?.status);
+            Env.logger.error("412: auth succeeded but user doesn't exist - signup required", {
+                vertesia: {
+                    account_id: accountId,
+                    project_id: projectId,
+                    status: stsRes?.status
+                },
+            });
+            const idTokenDecoded = jwtDecode(idToken);
+            if (!idTokenDecoded?.email) {
+                Env.logger.error('No email found in id token');
+                throw new Error('No email found in id token');
+            }
+            Env.logger.error('User not found', {
+                vertesia: {
+                    account_id: accountId,
+                    project_id: projectId,
+                    email: idTokenDecoded.email
+                }
+            });
+            throw new UserNotFoundError('User not found', idTokenDecoded.email);
+        }
+        if (stsRes.status === 403) {
+            // User doesn't have access to the requested account/project, or has no accounts
+            // This can happen with:
+            // 1. Stale localStorage from previous user
+            // 2. User invited to a new account (doesn't have access yet)
+            // 3. User exists but has no accounts at all
+            if (retryCount > 0) {
+                // Already retried without account scope - this is a real authorization failure
+                console.error('403: Access denied even without account scope - user may have no accounts');
+                Env.logger.error('403: Access denied after retry - authorization failure', {
+                    vertesia: {
+                        account_id: accountId,
+                        project_id: projectId,
+                        status: stsRes.status,
+                        retry_count: retryCount
+                    },
+                });
+                throw new Error('Access denied - user may not have access to any accounts');
+            }
+            console.log('403: Access denied - clearing cached account and retrying without account scope');
+            Env.logger.warn('403: Access denied - clearing cached account and retrying', {
+                vertesia: {
+                    account_id: accountId,
+                    project_id: projectId,
+                    status: stsRes.status,
+                    retry_count: retryCount
+                },
+            });
+            // Clear any stale account/project from localStorage
+            localStorage.removeItem(LastSelectedAccountId_KEY);
+            if (accountId) {
+                localStorage.removeItem(LastSelectedProjectId_KEY + '-' + accountId);
+            }
+            // Retry without account/project scope - let user log in to their default account
+            return fetchComposableToken(getIdToken, undefined, undefined, ttl, retryCount + 1);
+        }
+        if (!stsRes.ok) {
+            const errorText = await stsRes.text();
+            console.error('STS token generation failed:', stsRes.status, errorText);
+            Env.logger.error('STS token generation failed', {
+                vertesia: {
+                    status: stsRes.status,
+                    error: errorText,
+                    account_id: accountId,
+                    project_id: projectId,
+                },
+            });
+            throw new Error(`Failed to get token from STS: ${stsRes.status}`);
+        }
+        const { token } = await stsRes.json();
+        console.log('Successfully got token from STS');
+        Env.logger.info('Successfully got token from STS');
+        return token;
+    }
+    catch (error) {
+        if (error instanceof UserNotFoundError) {
+            throw error; // Re-throw UserNotFoundError
+        }
+        // Clear any stale account/project from localStorage on error
+        localStorage.removeItem(LastSelectedAccountId_KEY);
+        if (accountId) {
+            localStorage.removeItem(LastSelectedProjectId_KEY + '-' + accountId);
+        }
+        console.error('Failed to get composable token from STS', error);
+        Env.logger.error('Failed to get composable token from STS', {
+            vertesia: {
+                account_id: accountId,
+                project_id: projectId,
+                error: error,
+            },
+        });
+        throw new Error('Failed to get composable token');
+    }
+}
+/**
+ *
+ * @param accountId
+ * @param projectId
+ * @param ttl time to live for the token in seconds
+ * @returns
+ */
+export async function fetchComposableTokenFromFirebaseToken(accountId, projectId, ttl) {
+    return fetchComposableToken(getFirebaseAuthToken, accountId, projectId, ttl);
+}
+export async function getComposableToken(accountId, projectId, initToken, forceRefresh = false, useInternalAuth = false) {
+    const selectedAccount = accountId ?? localStorage.getItem(LastSelectedAccountId_KEY) ?? undefined;
+    const selectedProject = projectId ?? localStorage.getItem(LastSelectedProjectId_KEY + '-' + selectedAccount) ?? undefined;
+    //token is still valid for more than 5 minutes
+    if (!forceRefresh && AUTH_TOKEN_RAW && AUTH_TOKEN && AUTH_TOKEN.exp > (Date.now() / 1000 + 300)) {
+        return { rawToken: AUTH_TOKEN_RAW, token: AUTH_TOKEN, error: false };
+    }
+    //token is close to expire, refresh it
+    if (!useInternalAuth && getFirebaseAuth().currentUser) {
+        //we have a firebase user, get the token from there
+        AUTH_TOKEN_RAW = await fetchComposableTokenFromFirebaseToken(selectedAccount, selectedProject);
+    }
+    else if (initToken || AUTH_TOKEN_RAW) {
+        // we have a token already and no firebase user, refresh it
+        AUTH_TOKEN_RAW = await fetchComposableToken(() => Promise.resolve(initToken ?? AUTH_TOKEN_RAW), selectedAccount, selectedProject);
+    }
+    if (!AUTH_TOKEN_RAW) {
+        Env.logger.error('Cannot acquire a composable token', {
+            vertesia: {
+                account_id: selectedAccount,
+                project_id: selectedProject,
+            },
+        });
+        throw new Error('Cannot acquire a composable token');
+    }
+    AUTH_TOKEN = jwtDecode(AUTH_TOKEN_RAW);
+    if (!AUTH_TOKEN || !AUTH_TOKEN.exp || !AUTH_TOKEN_RAW) {
+        console.error('Invalid composable token', AUTH_TOKEN);
+        Env.logger.error('Invalid composable token', {
+            vertesia: {
+                account_id: selectedAccount,
+                project_id: selectedProject,
+            },
+        });
+        throw new Error('Invalid composable token');
+    }
+    return { rawToken: AUTH_TOKEN_RAW, token: AUTH_TOKEN, error: false };
+}
+export class UserNotFoundError extends Error {
+    email;
+    constructor(message, email) {
+        super(message);
+        this.name = 'UserNotFoundError';
+        this.email = email;
+    }
+}
+//# sourceMappingURL=composable.js.map

package/lib/esm/session/auth/composable.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"composable.js","sourceRoot":"","sources":["../../../../src/session/auth/composable.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AACvC,OAAO,EAAE,GAAG,EAAE,MAAM,kBAAkB,CAAC;AACvC,OAAO,EAAE,yBAAyB,EAAE,yBAAyB,EAAE,MAAM,cAAc,CAAC;AACpF,OAAO,EAAE,eAAe,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AAEnE,IAAI,cAAkC,CAAC;AACvC,IAAI,UAAwC,CAAC;AAS7C,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,UAAoD,EAAE,SAAkB,EAAE,SAAkB,EAAE,GAAY,EAAE,UAAU,GAAG,CAAC;IACjK,OAAO,CAAC,GAAG,CAAC,mDAAmD,SAAS,gBAAgB,SAAS,GAAG,CAAC,CAAC;IACtG,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,qCAAqC,EAAE;QACnD,QAAQ,EAAE;YACN,UAAU,EAAE,SAAS;YACrB,UAAU,EAAE,SAAS;YACrB,WAAW,EAAE,UAAU;SAC1B;KACJ,CAAC,CAAC;IAEH,MAAM,OAAO,GAAG,MAAM,UAAU,EAAE,CAAC,CAAC,mBAAmB;IACvD,IAAI,CAAC,OAAO,EAAE,CAAC;QACX,OAAO,CAAC,GAAG,CAAC,uCAAuC,CAAC,CAAC;QACrD,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC;IACzC,CAAC;IAED,qEAAqE;IACrE,MAAM,WAAW,GAAG,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC;IACtC,OAAO,CAAC,GAAG,CAAC,iCAAiC,EAAE,WAAW,CAAC,CAAC;IAC5D,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,gCAAgC,EAAE;QAC9C,QAAQ,EAAE;YACN,UAAU,EAAE,SAAS;YACrB,UAAU,EAAE,SAAS;YACrB,OAAO,EAAE,WAAW;SACvB;KACJ,CAAC,CAAC;IAEH,IAAI,CAAC;QACD,oCAAoC;QACpC,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,WAAW,GAAG,cAAc,CAAC,CAAC;QACrD,MAAM,WAAW,GAAG;YAChB,IAAI,EAAE,MAAM;YACZ,UAAU,EAAE,SAAS;YACrB,UAAU,EAAE,SAAS;YACrB,UAAU,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,SAAS;SACpE,CAAC;QAEF,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,MAAM,EAAE;YAC/B,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACL,cAAc,EAAE,kBAAkB;gBAClC,eAAe,EAAE,UAAU,OAAO,EAAE,CAAC,oCAAoC;aAC5E;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC;SACpC,CAAC,CAAC;QAEH,IAAI,OAAO,IAAI,MAAM,EAAE,MAAM,KAAK,GAAG,EAAE,CAAC;YACpC,6DAA6D;YAC7D,OAAO,CAAC,GAAG,CAAC,oDAAoD,CAAC,CAAC;YAClE,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,oDAAoD,EAAE;gBAClE,QAAQ,EAAE;oBACN,UAAU,EAAE,SAAS;oBACrB,UAAU,EAAE,SAAS;oBACrB,MAAM,EAAE,MAAM,EAAE,MAAM;iBACzB;aACJ,CAAC,CAAC;YAEH,MAAM,cAAc,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,MAAM,GAAG,mBAAmB,EAAE;gBAC3E,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE;oBACL,eAAe,EAAE,UAAU,OAAO,EAAE;oBACpC,cAAc,EAAE,kBAAkB;iBACrC;aACJ,CAAC,CAAC;YAEH,IAAI,cAAc,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;gBAChC,6BAA6B;gBAC7B,OAAO,CAAC,GAAG,CAAC,wCAAwC,CAAC,CAAC;gBACtD,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,wCAAwC,EAAE;oBACtD,QAAQ,EAAE;wBACN,UAAU,EAAE,SAAS;wBACrB,UAAU,EAAE,SAAS;qBACxB;iBACJ,CAAC,CAAC;gBACH,MAAM,cAAc,GAAG,SAAS,CAAC,OAAO,CAAQ,CAAC;gBACjD,IAAI,CAAC,cAAc,EAAE,KAAK,EAAE,CAAC;oBACzB,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,4BAA4B,CAAC,CAAC;oBAC/C,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;gBAClD,CAAC;gBACD,MAAM,IAAI,iBAAiB,CAAC,kCAAkC,EAAE,cAAc,CAAC,KAAK,CAAC,CAAC;YAC1F,CAAC;YAED,IAAI,CAAC,cAAc,CAAC,EAAE,EAAE,CAAC;gBACrB,OAAO,CAAC,KAAK,CAAC,8BAA8B,EAAE,cAAc,CAAC,MAAM,CAAC,CAAC;gBACrE,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,8BAA8B,EAAE;oBAC7C,QAAQ,EAAE;wBACN,UAAU,EAAE,SAAS;wBACrB,UAAU,EAAE,SAAS;wBACrB,MAAM,EAAE,cAAc,CAAC,MAAM;qBAChC;iBACJ,CAAC,CAAC;gBACH,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;YACpD,CAAC;YAED,+CAA+C;YAC/C,OAAO,CAAC,GAAG,CAAC,0CAA0C,CAAC,CAAC;YACxD,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,0CAA0C,EAAE;gBACxD,QAAQ,EAAE;oBACN,UAAU,EAAE,SAAS;oBACrB,UAAU,EAAE,SAAS;iBACxB;aACJ,CAAC,CAAC;YACH,OAAO,oBAAoB,CAAC,UAAU,EAAE,SAAS,EAAE,SAAS,EAAE,GAAG,EAAE,UAAU,CAAC,CAAC;QACnF,CAAC;QAED,IAAI,OAAO,IAAI,MAAM,EAAE,MAAM,KAAK,GAAG,EAAE,CAAC;YACpC,OAAO,CAAC,GAAG,CAAC,8DAA8D,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;YAC5F,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,8DAA8D,EAAE;gBAC7E,QAAQ,EAAE;oBACN,UAAU,EAAE,SAAS;oBACrB,UAAU,EAAE,SAAS;oBACrB,MAAM,EAAE,MAAM,EAAE,MAAM;iBACzB;aACJ,CAAC,CAAC;YACH,MAAM,cAAc,GAAG,SAAS,CAAC,OAAO,CAAQ,CAAC;YACjD,IAAI,CAAC,cAAc,EAAE,KAAK,EAAE,CAAC;gBACzB,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,4BAA4B,CAAC,CAAC;gBAC/C,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;YAClD,CAAC;YACD,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,gBAAgB,EAAE;gBAC/B,QAAQ,EAAE;oBACN,UAAU,EAAE,SAAS;oBACrB,UAAU,EAAE,SAAS;oBACrB,KAAK,EAAE,cAAc,CAAC,KAAK;iBAC9B;aACJ,CAAC,CAAC;YACH,MAAM,IAAI,iBAAiB,CAAC,gBAAgB,EAAE,cAAc,CAAC,KAAK,CAAC,CAAC;QACxE,CAAC;QAED,IAAI,MAAM,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YACxB,gFAAgF;YAChF,wBAAwB;YACxB,2CAA2C;YAC3C,6DAA6D;YAC7D,4CAA4C;YAE5C,IAAI,UAAU,GAAG,CAAC,EAAE,CAAC;gBACjB,+EAA+E;gBAC/E,OAAO,CAAC,KAAK,CAAC,2EAA2E,CAAC,CAAC;gBAC3F,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,wDAAwD,EAAE;oBACvE,QAAQ,EAAE;wBACN,UAAU,EAAE,SAAS;wBACrB,UAAU,EAAE,SAAS;wBACrB,MAAM,EAAE,MAAM,CAAC,MAAM;wBACrB,WAAW,EAAE,UAAU;qBAC1B;iBACJ,CAAC,CAAC;gBACH,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAC;YAChF,CAAC;YAED,OAAO,CAAC,GAAG,CAAC,iFAAiF,CAAC,CAAC;YAC/F,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,2DAA2D,EAAE;gBACzE,QAAQ,EAAE;oBACN,UAAU,EAAE,SAAS;oBACrB,UAAU,EAAE,SAAS;oBACrB,MAAM,EAAE,MAAM,CAAC,MAAM;oBACrB,WAAW,EAAE,UAAU;iBAC1B;aACJ,CAAC,CAAC;YAEH,oDAAoD;YACpD,YAAY,CAAC,UAAU,CAAC,yBAAyB,CAAC,CAAC;YACnD,IAAI,SAAS,EAAE,CAAC;gBACZ,YAAY,CAAC,UAAU,CAAC,yBAAyB,GAAG,GAAG,GAAG,SAAS,CAAC,CAAC;YACzE,CAAC;YAED,iFAAiF;YACjF,OAAO,oBAAoB,CAAC,UAAU,EAAE,SAAS,EAAE,SAAS,EAAE,GAAG,EAAE,UAAU,GAAG,CAAC,CAAC,CAAC;QACvF,CAAC;QAED,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;YACb,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;YACtC,OAAO,CAAC,KAAK,CAAC,8BAA8B,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;YACxE,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,6BAA6B,EAAE;gBAC5C,QAAQ,EAAE;oBACN,MAAM,EAAE,MAAM,CAAC,MAAM;oBACrB,KAAK,EAAE,SAAS;oBAChB,UAAU,EAAE,SAAS;oBACrB,UAAU,EAAE,SAAS;iBACxB;aACJ,CAAC,CAAC;YACH,MAAM,IAAI,KAAK,CAAC,iCAAiC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;QACtE,CAAC;QAED,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;QACtC,OAAO,CAAC,GAAG,CAAC,iCAAiC,CAAC,CAAC;QAC/C,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,iCAAiC,CAAC,CAAC;QACnD,OAAO,KAAK,CAAC;IAEjB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACb,IAAI,KAAK,YAAY,iBAAiB,EAAE,CAAC;YACrC,MAAM,KAAK,CAAC,CAAC,6BAA6B;QAC9C,CAAC;QAED,6DAA6D;QAC7D,YAAY,CAAC,UAAU,CAAC,yBAAyB,CAAC,CAAC;QACnD,IAAI,SAAS,EAAE,CAAC;YACZ,YAAY,CAAC,UAAU,CAAC,yBAAyB,GAAG,GAAG,GAAG,SAAS,CAAC,CAAC;QACzE,CAAC;QACD,OAAO,CAAC,KAAK,CAAC,yCAAyC,EAAE,KAAK,CAAC,CAAC;QAChE,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,yCAAyC,EAAE;YACxD,QAAQ,EAAE;gBACN,UAAU,EAAE,SAAS;gBACrB,UAAU,EAAE,SAAS;gBACrB,KAAK,EAAE,KAAK;aACf;SACJ,CAAC,CAAC;QACH,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;IACtD,CAAC;AACL,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,qCAAqC,CAAC,SAAkB,EAAE,SAAkB,EAAE,GAAY;IAC5G,OAAO,oBAAoB,CAAC,oBAAoB,EAAE,SAAS,EAAE,SAAS,EAAE,GAAG,CAAC,CAAC;AACjF,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,SAAkB,EAAE,SAAkB,EAAE,SAAkB,EAAE,YAAY,GAAG,KAAK,EAAE,eAAe,GAAG,KAAK;IAE9I,MAAM,eAAe,GAAG,SAAS,IAAI,YAAY,CAAC,OAAO,CAAC,yBAAyB,CAAC,IAAI,SAAS,CAAA;IACjG,MAAM,eAAe,GAAG,SAAS,IAAI,YAAY,CAAC,OAAO,CAAC,yBAAyB,GAAG,GAAG,GAAG,eAAe,CAAC,IAAI,SAAS,CAAA;IAEzH,8CAA8C;IAC9C,IAAI,CAAC,YAAY,IAAI,cAAc,IAAI,UAAU,IAAI,UAAU,CAAC,GAAG,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,GAAG,GAAG,CAAC,EAAE,CAAC;QAC9F,OAAO,EAAE,QAAQ,EAAE,cAAc,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;IACzE,CAAC;IAED,sCAAsC;IACtC,IAAI,CAAC,eAAe,IAAI,eAAe,EAAE,CAAC,WAAW,EAAE,CAAC;QACpD,mDAAmD;QACnD,cAAc,GAAG,MAAM,qCAAqC,CAAC,eAAe,EAAE,eAAe,CAAC,CAAC;IACnG,CAAC;SAAM,IAAI,SAAS,IAAI,cAAc,EAAE,CAAC;QACrC,2DAA2D;QAC3D,cAAc,GAAG,MAAM,oBAAoB,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,IAAI,cAAc,CAAC,EAAE,eAAe,EAAE,eAAe,CAAC,CAAC;IACtI,CAAC;IAED,IAAI,CAAC,cAAc,EAAE,CAAC;QAClB,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,mCAAmC,EAAE;YAClD,QAAQ,EAAE;gBACN,UAAU,EAAE,eAAe;gBAC3B,UAAU,EAAE,eAAe;aAC9B;SACJ,CAAC,CAAC;QACH,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;IACzD,CAAC;IAED,UAAU,GAAG,SAAS,CAAC,cAAc,CAAqB,CAAC;IAE3D,IAAI,CAAC,UAAU,IAAI,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,cAAc,EAAE,CAAC;QACpD,OAAO,CAAC,KAAK,CAAC,0BAA0B,EAAE,UAAU,CAAC,CAAC;QACtD,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,0BAA0B,EAAE;YACzC,QAAQ,EAAE;gBACN,UAAU,EAAE,eAAe;gBAC3B,UAAU,EAAE,eAAe;aAC9B;SACJ,CAAC,CAAC;QACH,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;IAChD,CAAC;IAED,OAAO,EAAE,QAAQ,EAAE,cAAc,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;AAEzE,CAAC;AAED,MAAM,OAAO,iBAAkB,SAAQ,KAAK;IACxC,KAAK,CAAS;IACd,YAAY,OAAe,EAAE,KAAa;QACtC,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,mBAAmB,CAAC;QAChC,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;IACvB,CAAC;CACJ"}

package/lib/esm/session/auth/firebase.js

@@ -0,0 +1,158 @@
+import { Env } from "@vertesia/ui/env";
+import { getAnalytics } from "firebase/analytics";
+import { initializeApp } from "firebase/app";
+import { getAuth } from "firebase/auth";
+// Use lazy initialization to avoid accessing Env before it's initialized
+let _firebaseApp = null;
+let _analytics = null;
+let _firebaseAuth = null;
+// Getters that lazily initialize Firebase components when first accessed
+export function getFirebaseApp() {
+    if (!_firebaseApp) {
+        try {
+            if (!Env.firebase) {
+                throw new Error("Firebase configuration is not available in the environment");
+            }
+            _firebaseApp = initializeApp(Env.firebase);
+        }
+        catch (error) {
+            console.error("Failed to initialize Firebase app:", error);
+            throw new Error("Firebase initialization failed - environment may not be properly initialized");
+        }
+    }
+    return _firebaseApp;
+}
+export function getFirebaseAnalytics() {
+    if (!_analytics) {
+        _analytics = getAnalytics(getFirebaseApp());
+    }
+    return _analytics;
+}
+export function getFirebaseAuth() {
+    if (!_firebaseAuth) {
+        _firebaseAuth = getAuth(getFirebaseApp());
+    }
+    return _firebaseAuth;
+}
+export async function setFirebaseTenant(tenantEmail) {
+    if (!tenantEmail) {
+        console.log("No tenant name or email specified, skipping tenant setup");
+        return;
+    }
+    if (!Env.firebase) {
+        console.log("Firebase configuration is not available in the environment");
+        return;
+    }
+    try {
+        if (tenantEmail)
+            console.log(`Resolving tenant ID from email: ${tenantEmail}`);
+        // Add retry logic with exponential backoff
+        let retries = 3;
+        let retryDelay = 250; // Start with 250ms delay
+        while (retries > 0) {
+            try {
+                // Call the API endpoint to resolve the tenant ID
+                const response = await fetch("/api/resolve-tenant", {
+                    method: "POST",
+                    headers: {
+                        "Content-Type": "application/json",
+                    },
+                    body: JSON.stringify({
+                        tenantEmail: tenantEmail,
+                    }),
+                    // Add timeout to prevent hanging requests
+                    signal: AbortSignal.timeout(5000),
+                });
+                // Check for network errors
+                if (!response) {
+                    throw new Error("No response received from tenant API");
+                }
+                // Handle HTTP error responses
+                if (!response.ok) {
+                    // Try to parse the error response
+                    try {
+                        const errorData = await response.json();
+                        console.error("Failed to resolve tenant ID:", errorData.error);
+                    }
+                    catch (parseError) {
+                        console.error(`Failed to resolve tenant ID: HTTP ${response.status}`);
+                    }
+                    // If the error is 404 Not Found, no need to retry
+                    if (response.status === 404) {
+                        console.warn(`Tenant not found for ${tenantEmail}`);
+                        return;
+                    }
+                    throw new Error(`HTTP error ${response.status}`);
+                }
+                // Successfully got a response, parse it
+                const data = (await response.json());
+                if (data && data.firebaseTenantId) {
+                    const auth = getFirebaseAuth();
+                    auth.tenantId = data.firebaseTenantId;
+                    Env.firebase.providerType = data.provider ?? "oidc";
+                    console.log(`Tenant ID set to ${auth.tenantId}`);
+                    return data;
+                }
+                else {
+                    console.error(`Invalid response format, missing tenantId for ${tenantEmail}`);
+                    return; // No need to retry for invalid response format
+                }
+            }
+            catch (fetchError) {
+                // Only retry for network-related errors
+                if (retries > 1) {
+                    console.warn(`Tenant resolution failed, retrying in ${retryDelay}ms...`, fetchError);
+                    await new Promise((resolve) => setTimeout(resolve, retryDelay));
+                    retryDelay *= 2; // Exponential backoff
+                    retries--;
+                }
+                else {
+                    throw fetchError; // Last retry failed, propagate error
+                }
+            }
+        }
+    }
+    catch (error) {
+        // Final error handler
+        console.error("Error setting Firebase tenant:", error instanceof Error ? error.message : "Unknown error");
+        // Continue without tenant ID - authentication will work without multi-tenancy
+        // but the user will access the default tenant
+    }
+}
+export async function getFirebaseAuthToken(refresh) {
+    const auth = getFirebaseAuth();
+    const user = auth.currentUser;
+    if (user) {
+        return user
+            .getIdToken(refresh)
+            .then((token) => {
+            Env.logger.info("Got Firebase token", {
+                vertesia: {
+                    user_email: user.email,
+                    user_name: user.displayName,
+                    user_id: user.uid,
+                    refresh: refresh,
+                },
+            });
+            return token;
+        })
+            .catch((err) => {
+            Env.logger.error("Failed to get Firebase token", {
+                vertesia: {
+                    user_email: user.email,
+                    user_name: user.displayName,
+                    user_id: user.uid,
+                    refresh: refresh,
+                    error: err,
+                },
+            });
+            console.error("Failed to get access token", err);
+            return null;
+        });
+    }
+    else {
+        Env.logger.warn("No user found");
+        return Promise.resolve(null);
+    }
+}
+//# sourceMappingURL=firebase.js.map

package/lib/esm/session/auth/firebase.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"firebase.js","sourceRoot":"","sources":["../../../../src/session/auth/firebase.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,GAAG,EAAE,MAAM,kBAAkB,CAAC;AACvC,OAAO,EAAa,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAC7D,OAAO,EAAe,aAAa,EAAE,MAAM,cAAc,CAAC;AAC1D,OAAO,EAAQ,OAAO,EAAE,MAAM,eAAe,CAAC;AAE9C,yEAAyE;AACzE,IAAI,YAAY,GAAuB,IAAI,CAAC;AAC5C,IAAI,UAAU,GAAqB,IAAI,CAAC;AACxC,IAAI,aAAa,GAAgB,IAAI,CAAC;AAEtC,yEAAyE;AACzE,MAAM,UAAU,cAAc;IAC1B,IAAI,CAAC,YAAY,EAAE,CAAC;QAChB,IAAI,CAAC;YACD,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC;gBAChB,MAAM,IAAI,KAAK,CAAC,4DAA4D,CAAC,CAAC;YAClF,CAAC;YACD,YAAY,GAAG,aAAa,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC/C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,OAAO,CAAC,KAAK,CAAC,oCAAoC,EAAE,KAAK,CAAC,CAAC;YAC3D,MAAM,IAAI,KAAK,CAAC,8EAA8E,CAAC,CAAC;QACpG,CAAC;IACL,CAAC;IACD,OAAO,YAAY,CAAC;AACxB,CAAC;AAED,MAAM,UAAU,oBAAoB;IAChC,IAAI,CAAC,UAAU,EAAE,CAAC;QACd,UAAU,GAAG,YAAY,CAAC,cAAc,EAAE,CAAC,CAAC;IAChD,CAAC;IACD,OAAO,UAAU,CAAC;AACtB,CAAC;AAED,MAAM,UAAU,eAAe;IAC3B,IAAI,CAAC,aAAa,EAAE,CAAC;QACjB,aAAa,GAAG,OAAO,CAAC,cAAc,EAAE,CAAC,CAAC;IAC9C,CAAC;IACD,OAAO,aAAa,CAAC;AACzB,CAAC;AAGD,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,WAAoB;IACxD,IAAI,CAAC,WAAW,EAAE,CAAC;QACf,OAAO,CAAC,GAAG,CAAC,0DAA0D,CAAC,CAAC;QACxE,OAAO;IACX,CAAC;IAED,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC;QAChB,OAAO,CAAC,GAAG,CAAC,4DAA4D,CAAC,CAAC;QAC1E,OAAO;IACX,CAAC;IAED,IAAI,CAAC;QACD,IAAI,WAAW;YAAE,OAAO,CAAC,GAAG,CAAC,mCAAmC,WAAW,EAAE,CAAC,CAAC;QAE/E,2CAA2C;QAC3C,IAAI,OAAO,GAAG,CAAC,CAAC;QAChB,IAAI,UAAU,GAAG,GAAG,CAAC,CAAC,yBAAyB;QAE/C,OAAO,OAAO,GAAG,CAAC,EAAE,CAAC;YACjB,IAAI,CAAC;gBACD,iDAAiD;gBACjD,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,qBAAqB,EAAE;oBAChD,MAAM,EAAE,MAAM;oBACd,OAAO,EAAE;wBACL,cAAc,EAAE,kBAAkB;qBACrC;oBACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;wBACjB,WAAW,EAAE,WAAW;qBAC3B,CAAC;oBACF,0CAA0C;oBAC1C,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC;iBACpC,CAAC,CAAC;gBAEH,2BAA2B;gBAC3B,IAAI,CAAC,QAAQ,EAAE,CAAC;oBACZ,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;gBAC5D,CAAC;gBAED,8BAA8B;gBAC9B,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;oBACf,kCAAkC;oBAClC,IAAI,CAAC;wBACD,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;wBACxC,OAAO,CAAC,KAAK,CAAC,8BAA8B,EAAE,SAAS,CAAC,KAAK,CAAC,CAAC;oBACnE,CAAC;oBAAC,OAAO,UAAU,EAAE,CAAC;wBAClB,OAAO,CAAC,KAAK,CAAC,qCAAqC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;oBAC1E,CAAC;oBAED,kDAAkD;oBAClD,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;wBAC1B,OAAO,CAAC,IAAI,CAAC,wBAAwB,WAAW,EAAE,CAAC,CAAC;wBACpD,OAAO;oBACX,CAAC;oBAED,MAAM,IAAI,KAAK,CAAC,cAAc,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;gBACrD,CAAC;gBAED,wCAAwC;gBACxC,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAqB,CAAC;gBAEzD,IAAI,IAAI,IAAI,IAAI,CAAC,gBAAgB,EAAE,CAAC;oBAChC,MAAM,IAAI,GAAG,eAAe,EAAE,CAAC;oBAC/B,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,gBAAgB,CAAC;oBACtC,GAAG,CAAC,QAAQ,CAAC,YAAY,GAAG,IAAI,CAAC,QAAQ,IAAI,MAAM,CAAC;oBACpD,OAAO,CAAC,GAAG,CAAC,oBAAoB,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;oBACjD,OAAO,IAAI,CAAC;gBAChB,CAAC;qBAAM,CAAC;oBACJ,OAAO,CAAC,KAAK,CAAC,iDAAiD,WAAW,EAAE,CAAC,CAAC;oBAC9E,OAAO,CAAC,+CAA+C;gBAC3D,CAAC;YACL,CAAC;YAAC,OAAO,UAAU,EAAE,CAAC;gBAClB,wCAAwC;gBACxC,IAAI,OAAO,GAAG,CAAC,EAAE,CAAC;oBACd,OAAO,CAAC,IAAI,CAAC,yCAAyC,UAAU,OAAO,EAAE,UAAU,CAAC,CAAC;oBACrF,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC,CAAC;oBAChE,UAAU,IAAI,CAAC,CAAC,CAAC,sBAAsB;oBACvC,OAAO,EAAE,CAAC;gBACd,CAAC;qBAAM,CAAC;oBACJ,MAAM,UAAU,CAAC,CAAC,qCAAqC;gBAC3D,CAAC;YACL,CAAC;QACL,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACb,sBAAsB;QACtB,OAAO,CAAC,KAAK,CAAC,gCAAgC,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC;QAE1G,8EAA8E;QAC9E,8CAA8C;IAClD,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,OAAiB;IACxD,MAAM,IAAI,GAAG,eAAe,EAAE,CAAC;IAC/B,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,CAAC;IAC9B,IAAI,IAAI,EAAE,CAAC;QACP,OAAO,IAAI;aACN,UAAU,CAAC,OAAO,CAAC;aACnB,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE;YACZ,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,oBAAoB,EAAE;gBAClC,QAAQ,EAAE;oBACN,UAAU,EAAE,IAAI,CAAC,KAAK;oBACtB,SAAS,EAAE,IAAI,CAAC,WAAW;oBAC3B,OAAO,EAAE,IAAI,CAAC,GAAG;oBACjB,OAAO,EAAE,OAAO;iBACnB;aACJ,CAAC,CAAC;YACH,OAAO,KAAK,CAAC;QACjB,CAAC,CAAC;aACD,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;YACX,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,8BAA8B,EAAE;gBAC7C,QAAQ,EAAE;oBACN,UAAU,EAAE,IAAI,CAAC,KAAK;oBACtB,SAAS,EAAE,IAAI,CAAC,WAAW;oBAC3B,OAAO,EAAE,IAAI,CAAC,GAAG;oBACjB,OAAO,EAAE,OAAO;oBAChB,KAAK,EAAE,GAAG;iBACb;aACJ,CAAC,CAAC;YACH,OAAO,CAAC,KAAK,CAAC,4BAA4B,EAAE,GAAG,CAAC,CAAC;YACjD,OAAO,IAAI,CAAC;QAChB,CAAC,CAAC,CAAC;IACX,CAAC;SAAM,CAAC;QACJ,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QACjC,OAAO,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACjC,CAAC;AACL,CAAC"}

package/lib/esm/session/auth/useAuthState.js

@@ -0,0 +1,46 @@
+/**
+ * This hook is used to generate and verify state for OAuth2 authorization requests.
+ * @returns
+ */
+import { useCallback } from "react";
+const AUTH_STATE_KEY = 'auth_state';
+const STATE_EXPIRY_KEY = 'auth_state_expiry';
+const STATE_TTL = 5 * 60 * 1000; // 5 min
+export function useAuthState() {
+    // Generate new state
+    const generateState = useCallback(() => {
+        const state = crypto.randomUUID();
+        const expiryTime = Date.now() + STATE_TTL;
+        // Store state and expiry
+        sessionStorage.setItem(AUTH_STATE_KEY, state);
+        sessionStorage.setItem(STATE_EXPIRY_KEY, expiryTime.toString());
+        return state;
+    }, []);
+    // Verify returned state
+    const verifyState = useCallback((returnedState) => {
+        if (!returnedState) {
+            return 'Missing state';
+        }
+        const savedState = sessionStorage.getItem(AUTH_STATE_KEY);
+        const expiryTime = parseInt(sessionStorage.getItem(STATE_EXPIRY_KEY) || '0');
+        let reason;
+        // Verify state matches and hasn't expired
+        if (savedState !== returnedState) {
+            reason = `State mismatched (${savedState} !== ${returnedState})`;
+        }
+        else if (Date.now() > expiryTime) {
+            reason = 'State expired';
+        }
+        else {
+            reason = undefined; // No errors
+        }
+        return reason;
+    }, []);
+    // Clear state (useful for cleanup)
+    const clearState = useCallback(() => {
+        sessionStorage.removeItem(AUTH_STATE_KEY);
+        sessionStorage.removeItem(STATE_EXPIRY_KEY);
+    }, []);
+    return { generateState, verifyState, clearState };
+}
+//# sourceMappingURL=useAuthState.js.map

package/lib/esm/session/auth/useAuthState.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"useAuthState.js","sourceRoot":"","sources":["../../../../src/session/auth/useAuthState.ts"],"names":[],"mappings":"AACA;;;GAGG;AAEH,OAAO,EAAE,WAAW,EAAE,MAAM,OAAO,CAAC;AAGpC,MAAM,cAAc,GAAG,YAAY,CAAC;AACpC,MAAM,gBAAgB,GAAG,mBAAmB,CAAC;AAC7C,MAAM,SAAS,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,QAAQ;AAGzC,MAAM,UAAU,YAAY;IACxB,qBAAqB;IACrB,MAAM,aAAa,GAAG,WAAW,CAAC,GAAG,EAAE;QACnC,MAAM,KAAK,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;QAClC,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;QAE1C,yBAAyB;QACzB,cAAc,CAAC,OAAO,CAAC,cAAc,EAAE,KAAK,CAAC,CAAC;QAC9C,cAAc,CAAC,OAAO,CAAC,gBAAgB,EAAE,UAAU,CAAC,QAAQ,EAAE,CAAC,CAAC;QAEhE,OAAO,KAAK,CAAC;IACjB,CAAC,EAAE,EAAE,CAAC,CAAC;IAEP,wBAAwB;IACxB,MAAM,WAAW,GAAG,WAAW,CAAC,CAAC,aAA4B,EAAsB,EAAE;QACjF,IAAI,CAAC,aAAa,EAAE,CAAC;YACjB,OAAO,eAAe,CAAC;QAC3B,CAAC;QAED,MAAM,UAAU,GAAG,cAAc,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;QAC1D,MAAM,UAAU,GAAG,QAAQ,CAAC,cAAc,CAAC,OAAO,CAAC,gBAAgB,CAAC,IAAI,GAAG,CAAC,CAAC;QAC7E,IAAI,MAA0B,CAAC;QAE/B,0CAA0C;QAC1C,IAAI,UAAU,KAAK,aAAa,EAAE,CAAC;YAC/B,MAAM,GAAG,qBAAqB,UAAU,QAAQ,aAAa,GAAG,CAAC;QACrE,CAAC;aAAM,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,UAAU,EAAE,CAAC;YACjC,MAAM,GAAG,eAAe,CAAC;QAC7B,CAAC;aAAM,CAAC;YACJ,MAAM,GAAG,SAAS,CAAC,CAAC,YAAY;QACpC,CAAC;QAED,OAAO,MAAM,CAAC;IAClB,CAAC,EAAE,EAAE,CAAC,CAAC;IAEP,mCAAmC;IACnC,MAAM,UAAU,GAAG,WAAW,CAAC,GAAG,EAAE;QAChC,cAAc,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC;QAC1C,cAAc,CAAC,UAAU,CAAC,gBAAgB,CAAC,CAAC;IAChD,CAAC,EAAE,EAAE,CAAC,CAAC;IAEP,OAAO,EAAE,aAAa,EAAE,WAAW,EAAE,UAAU,EAAE,CAAC;AACtD,CAAC"}

package/lib/esm/session/auth/useCurrentTenant.js

@@ -0,0 +1,63 @@
+import { useState, useEffect } from 'react';
+import { useUserSession } from "@vertesia/ui/session";
+export function useCurrentTenant() {
+    const { user } = useUserSession();
+    const [currentTenant, setCurrentTenant] = useState(null);
+    const [isLoading, setIsLoading] = useState(true);
+    const [error, setError] = useState(null);
+    useEffect(() => {
+        const loadCurrentTenant = async () => {
+            if (!user?.email) {
+                setCurrentTenant(null);
+                setIsLoading(false);
+                return;
+            }
+            try {
+                const response = await fetch('/api/resolve-tenant', {
+                    method: 'POST',
+                    headers: {
+                        'Content-Type': 'application/json',
+                    },
+                    body: JSON.stringify({
+                        tenantEmail: user.email
+                    })
+                });
+                if (response.ok) {
+                    const tenantData = await response.json();
+                    if (tenantData) {
+                        // Convert the resolved tenant data to our TenantConfig format
+                        setCurrentTenant({
+                            tenantKey: tenantData.name || 'unknown',
+                            name: tenantData.label || tenantData.name || 'Unknown',
+                            domain: tenantData.domain || [],
+                            firebaseTenantId: tenantData.firebaseTenantId,
+                            provider: tenantData.provider,
+                            logo: tenantData.logo
+                        });
+                    }
+                    else {
+                        setCurrentTenant(null);
+                    }
+                }
+                else {
+                    setCurrentTenant(null);
+                }
+            }
+            catch (error) {
+                console.error('Error loading current tenant:', error);
+                setError('Failed to load tenant configuration');
+                setCurrentTenant(null);
+            }
+            finally {
+                setIsLoading(false);
+            }
+        };
+        loadCurrentTenant();
+    }, [user?.email]);
+    return {
+        currentTenant,
+        isLoading,
+        error
+    };
+}
+//# sourceMappingURL=useCurrentTenant.js.map

package/lib/esm/session/auth/useCurrentTenant.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"useCurrentTenant.js","sourceRoot":"","sources":["../../../../src/session/auth/useCurrentTenant.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,OAAO,CAAC;AAC5C,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAWtD,MAAM,UAAU,gBAAgB;IAC5B,MAAM,EAAE,IAAI,EAAE,GAAG,cAAc,EAAE,CAAC;IAClC,MAAM,CAAC,aAAa,EAAE,gBAAgB,CAAC,GAAG,QAAQ,CAAsB,IAAI,CAAC,CAAC;IAC9E,MAAM,CAAC,SAAS,EAAE,YAAY,CAAC,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;IACjD,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,QAAQ,CAAgB,IAAI,CAAC,CAAC;IAExD,SAAS,CAAC,GAAG,EAAE;QACX,MAAM,iBAAiB,GAAG,KAAK,IAAI,EAAE;YACjC,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC;gBACf,gBAAgB,CAAC,IAAI,CAAC,CAAC;gBACvB,YAAY,CAAC,KAAK,CAAC,CAAC;gBACpB,OAAO;YACX,CAAC;YAED,IAAI,CAAC;gBACD,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,qBAAqB,EAAE;oBAChD,MAAM,EAAE,MAAM;oBACd,OAAO,EAAE;wBACL,cAAc,EAAE,kBAAkB;qBACrC;oBACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;wBACjB,WAAW,EAAE,IAAI,CAAC,KAAK;qBAC1B,CAAC;iBACL,CAAC,CAAC;gBAEH,IAAI,QAAQ,CAAC,EAAE,EAAE,CAAC;oBACd,MAAM,UAAU,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;oBACzC,IAAI,UAAU,EAAE,CAAC;wBACb,8DAA8D;wBAC9D,gBAAgB,CAAC;4BACb,SAAS,EAAE,UAAU,CAAC,IAAI,IAAI,SAAS;4BACvC,IAAI,EAAE,UAAU,CAAC,KAAK,IAAI,UAAU,CAAC,IAAI,IAAI,SAAS;4BACtD,MAAM,EAAE,UAAU,CAAC,MAAM,IAAI,EAAE;4BAC/B,gBAAgB,EAAE,UAAU,CAAC,gBAAgB;4BAC7C,QAAQ,EAAE,UAAU,CAAC,QAAQ;4BAC7B,IAAI,EAAE,UAAU,CAAC,IAAI;yBACxB,CAAC,CAAC;oBACP,CAAC;yBAAM,CAAC;wBACJ,gBAAgB,CAAC,IAAI,CAAC,CAAC;oBAC3B,CAAC;gBACL,CAAC;qBAAM,CAAC;oBACJ,gBAAgB,CAAC,IAAI,CAAC,CAAC;gBAC3B,CAAC;YACL,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACb,OAAO,CAAC,KAAK,CAAC,+BAA+B,EAAE,KAAK,CAAC,CAAC;gBACtD,QAAQ,CAAC,qCAAqC,CAAC,CAAC;gBAChD,gBAAgB,CAAC,IAAI,CAAC,CAAC;YAC3B,CAAC;oBAAS,CAAC;gBACP,YAAY,CAAC,KAAK,CAAC,CAAC;YACxB,CAAC;QACL,CAAC,CAAC;QAEF,iBAAiB,EAAE,CAAC;IACxB,CAAC,EAAE,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC;IAElB,OAAO;QACH,aAAa;QACb,SAAS;QACT,KAAK;KACR,CAAC;AACN,CAAC"}

package/lib/esm/session/constants.js

@@ -0,0 +1,3 @@
+export const LastSelectedAccountId_KEY = 'composableai.lastSelectedAccountId';
+export const LastSelectedProjectId_KEY = 'composableai.lastSelectedProjectId';
+//# sourceMappingURL=constants.js.map

package/lib/esm/session/constants.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"constants.js","sourceRoot":"","sources":["../../../src/session/constants.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,yBAAyB,GAAG,oCAAoC,CAAC;AAC9E,MAAM,CAAC,MAAM,yBAAyB,GAAG,oCAAoC,CAAC"}

package/lib/esm/session/index.js

@@ -0,0 +1,9 @@
+export * from "./auth/composable";
+export * from "./auth/useCurrentTenant";
+export * from "./auth/useAuthState";
+export * from "./auth/firebase";
+export * from "./TypeRegistry";
+export * from "./UserSession";
+export * from "./UserSessionProvider";
+export * from "./useUXTracking";
+//# sourceMappingURL=index.js.map

package/lib/esm/session/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/session/index.ts"],"names":[],"mappings":"AAAA,cAAc,mBAAmB,CAAC;AAClC,cAAc,yBAAyB,CAAC;AACxC,cAAc,qBAAqB,CAAC;AACpC,cAAc,iBAAiB,CAAC;AAChC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,eAAe,CAAC;AAC9B,cAAc,uBAAuB,CAAC;AACtC,cAAc,iBAAiB,CAAC"}

package/lib/esm/session/useUXTracking.js

@@ -0,0 +1,29 @@
+import { Env } from '@vertesia/ui/env';
+import { logEvent } from "firebase/analytics";
+import { getFirebaseAnalytics } from "./auth/firebase";
+export function useUXTracking() {
+    //identify user in monitoring and UX systems
+    const tagUserSession = async (user) => {
+        const signupData = window.localStorage.getItem("composableSignupData");
+        if (!user) {
+            console.error('No user found -- skipping tagging');
+            return;
+        }
+        if (signupData) {
+            window.localStorage.removeItem("composableSignupData");
+        }
+    };
+    //send event to analytics and UX systems
+    const trackEvent = (eventName, eventProperties) => {
+        if (!Env.isProd) {
+            console.debug('track event', eventName, eventProperties);
+        }
+        //GA via firebase
+        logEvent(getFirebaseAnalytics(), eventName, { ...eventProperties, debug_mode: !Env.isProd });
+    };
+    return {
+        tagUserSession,
+        trackEvent
+    };
+}
+//# sourceMappingURL=useUXTracking.js.map

package/lib/esm/session/useUXTracking.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"useUXTracking.js","sourceRoot":"","sources":["../../../src/session/useUXTracking.tsx"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,MAAM,kBAAkB,CAAC;AAEvC,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,oBAAoB,EAAE,MAAM,iBAAiB,CAAC;AAEvD,MAAM,UAAU,aAAa;IAEzB,4CAA4C;IAC5C,MAAM,cAAc,GAAG,KAAK,EAAE,IAAuB,EAAE,EAAE;QACrD,MAAM,UAAU,GAAG,MAAM,CAAC,YAAY,CAAC,OAAO,CAAC,sBAAsB,CAAC,CAAC;QACvE,IAAI,CAAC,IAAI,EAAE,CAAC;YACR,OAAO,CAAC,KAAK,CAAC,mCAAmC,CAAC,CAAC;YACnD,OAAO;QACX,CAAC;QAED,IAAI,UAAU,EAAE,CAAC;YACb,MAAM,CAAC,YAAY,CAAC,UAAU,CAAC,sBAAsB,CAAC,CAAC;QAC3D,CAAC;IACL,CAAC,CAAA;IAED,wCAAwC;IACxC,MAAM,UAAU,GAAG,CAAC,SAAiB,EAAE,eAAqB,EAAE,EAAE;QAE5D,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC;YACd,OAAO,CAAC,KAAK,CAAC,aAAa,EAAE,SAAS,EAAE,eAAe,CAAC,CAAC;QAC7D,CAAC;QAED,iBAAiB;QACjB,QAAQ,CAAC,oBAAoB,EAAE,EAAE,SAAS,EAAE,EAAE,GAAG,eAAe,EAAE,UAAU,EAAE,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;IAEjG,CAAC,CAAA;IAED,OAAO;QACH,cAAc;QACd,UAAU;KACb,CAAA;AAEL,CAAC"}

package/lib/esm/shell/SplashScreen.js

@@ -0,0 +1,26 @@
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+import { Transition } from "@headlessui/react";
+import { Fragment, useEffect, useState } from "react";
+import { useUserSession } from "@vertesia/ui/session";
+export function SplashScreen({ icon: Icon }) {
+    const { isLoading } = useUserSession();
+    const [show, setShow] = useState(true);
+    useEffect(() => {
+        if (!isLoading) {
+            setShow(false);
+        }
+        // setTimeout(() => {
+        //     setShow(false)
+        // }, 2000)
+    }, [isLoading]);
+    // 300 500 700 1000
+    return (_jsx(Transition, { appear: true, show: show, as: Fragment, unmount: true, leave: "transition ease-in duration-500", leaveFrom: "opacity-100", leaveTo: "opacity-0", children: _jsx("div", { style: { zIndex: 999999 }, className: 'fixed inset-x-0 inset-y-0', children: _jsx("div", { className: "flex w-full h-full items-center justify-center", children: _jsx("div", { className: "animate-[spin_4s_linear_infinite]", children: _jsx("div", { className: 'animate-pulse rounded-full bg-transparent', children: Icon || _jsx(LoadingIcon, {}) }) }) }) }) }));
+}
+function LoadingIcon() {
+    const stopColor1 = "currentColor";
+    const stopColor2 = "currentColor";
+    // const stopColor1 = "#4F46E5";
+    // const stopColor2 = "#4F46E5";
+    return (_jsxs("svg", { className: "w-8 h-8 text-indigo-600", viewBox: "0 0 50 50", xmlns: "http://www.w3.org/2000/svg", children: [_jsx("defs", { children: _jsxs("linearGradient", { id: "spinner-gradient", x1: "1", y1: "0", x2: "0", y2: "1", children: [_jsx("stop", { offset: "0%", stopColor: stopColor1, stopOpacity: "1" }), _jsx("stop", { offset: "100%", stopColor: stopColor2, stopOpacity: "0" })] }) }), _jsx("circle", { cx: "25", cy: "25", r: "20", stroke: "url(#spinner-gradient)", strokeWidth: "5", fill: "none", strokeLinecap: "round" })] }));
+}
+//# sourceMappingURL=SplashScreen.js.map

package/lib/esm/shell/SplashScreen.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"SplashScreen.js","sourceRoot":"","sources":["../../../src/shell/SplashScreen.tsx"],"names":[],"mappings":";AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAC/C,OAAO,EAAE,QAAQ,EAAa,SAAS,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAC;AACjE,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAMtD,MAAM,UAAU,YAAY,CAAC,EAAE,IAAI,EAAE,IAAI,EAAqB;IAC1D,MAAM,EAAE,SAAS,EAAE,GAAG,cAAc,EAAE,CAAC;IACvC,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;IAEvC,SAAS,CAAC,GAAG,EAAE;QACX,IAAI,CAAC,SAAS,EAAE,CAAC;YACb,OAAO,CAAC,KAAK,CAAC,CAAA;QAClB,CAAC;QACD,qBAAqB;QACrB,qBAAqB;QACrB,WAAW;IACf,CAAC,EAAE,CAAC,SAAS,CAAC,CAAC,CAAA;IAEf,mBAAmB;IACnB,OAAO,CACH,KAAC,UAAU,IACP,MAAM,EAAE,IAAI,EACZ,IAAI,EAAE,IAAI,EACV,EAAE,EAAE,QAAQ,EACZ,OAAO,QACP,KAAK,EAAC,iCAAiC,EACvC,SAAS,EAAC,aAAa,EACvB,OAAO,EAAC,WAAW,YAEnB,cAAK,KAAK,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,SAAS,EAAC,2BAA2B,YACjE,cAAK,SAAS,EAAC,gDAAgD,YAC3D,cAAK,SAAS,EAAC,mCAAmC,YAC9C,cAAK,SAAS,EAAC,2CAA2C,YACrD,IAAI,IAAI,KAAC,WAAW,KAAG,GACtB,GACJ,GACJ,GACJ,GACG,CAChB,CAAA;AACL,CAAC;AAED,SAAS,WAAW;IAChB,MAAM,UAAU,GAAG,cAAc,CAAC;IAClC,MAAM,UAAU,GAAG,cAAc,CAAC;IAClC,gCAAgC;IAChC,gCAAgC;IAChC,OAAO,CACH,eACI,SAAS,EAAC,yBAAyB,EACnC,OAAO,EAAC,WAAW,EACnB,KAAK,EAAC,4BAA4B,aAElC,yBACI,0BAAgB,EAAE,EAAC,kBAAkB,EAAC,EAAE,EAAC,GAAG,EAAC,EAAE,EAAC,GAAG,EAAC,EAAE,EAAC,GAAG,EAAC,EAAE,EAAC,GAAG,aAC7D,eAAM,MAAM,EAAC,IAAI,EAAC,SAAS,EAAE,UAAU,EAAE,WAAW,EAAC,GAAG,GAAG,EAC3D,eAAM,MAAM,EAAC,MAAM,EAAC,SAAS,EAAE,UAAU,EAAE,WAAW,EAAC,GAAG,GAAG,IAChD,GACd,EACP,iBACI,EAAE,EAAC,IAAI,EACP,EAAE,EAAC,IAAI,EACP,CAAC,EAAC,IAAI,EACN,MAAM,EAAC,wBAAwB,EAC/B,WAAW,EAAC,GAAG,EACf,IAAI,EAAC,MAAM,EACX,aAAa,EAAC,OAAO,GACvB,IACA,CACT,CAAA;AACL,CAAC"}