@vertesia/ui 1.3.0 → 1.4.0-dev.20260615.042549Z

package/lib/session/UserSessionProvider.js

@@ -0,0 +1,252 @@
+import { jsx as _jsx } from "react/jsx-runtime";
+import { Env } from '@vertesia/ui/env';
+import { onAuthStateChanged } from 'firebase/auth';
+import { useEffect, useRef, useState } from 'react';
+import { getComposableToken, STSError, UserNotFoundError } from './auth/composable';
+import { shouldRedirectToCentralAuth } from './auth/domainRouting';
+import { getFirebaseAuth } from './auth/firebase';
+import { useAuthState } from './auth/useAuthState';
+import { LastSelectedAccountId_KEY, LastSelectedProjectId_KEY, UserSession, UserSessionContext } from './UserSession';
+const CENTRAL_AUTH_REDIRECT = 'https://internal-auth.vertesia.app/';
+export function UserSessionProvider({ children, loadOnboardingStatus = true }) {
+    const hashParams = new URLSearchParams(location.hash.substring(1));
+    const token = hashParams.get('token');
+    const state = hashParams.get('state');
+    const [session, setSession] = useState(new UserSession());
+    const { generateState, verifyState, clearState } = useAuthState();
+    const hasInitiatedAuthRef = useRef(false);
+    const authFlowRef = useRef(undefined);
+    const redirectToCentralAuth = (projectId, accountId) => {
+        const url = new URL(`${CENTRAL_AUTH_REDIRECT}?sts=${Env.endpoints.sts ?? 'https://sts.vertesia.io'}`);
+        const currentUrl = new URL(window.location.href);
+        currentUrl.hash = '';
+        if (projectId)
+            currentUrl.searchParams.set('p', projectId);
+        if (accountId)
+            currentUrl.searchParams.set('a', accountId);
+        url.searchParams.set('redirect_uri', currentUrl.toString());
+        url.searchParams.set('state', generateState());
+        location.replace(url.toString());
+    };
+    authFlowRef.current = () => {
+        // Make this effect idempotent - only run auth flow once
+        if (hasInitiatedAuthRef.current) {
+            console.log('Auth: skipping duplicate auth flow initiation');
+            return;
+        }
+        hasInitiatedAuthRef.current = true;
+        console.log('Auth: starting auth flow');
+        Env.logger.info('Starting auth flow');
+        const currentUrl = new URL(window.location.href);
+        const selectedAccount = currentUrl.searchParams.get('a') ?? localStorage.getItem(LastSelectedAccountId_KEY) ?? undefined;
+        const selectedProject = currentUrl.searchParams.get('p') ??
+            localStorage.getItem(`${LastSelectedProjectId_KEY}-${selectedAccount}`) ??
+            undefined;
+        console.log('Auth: selected account', selectedAccount);
+        console.log('Auth: selected project', selectedProject);
+        Env.logger.info('Selected account and project', {
+            vertesia: {
+                account_id: selectedAccount,
+                project_id: selectedProject,
+            },
+        });
+        if (Env.isLocalDev && Env.devAuthToken) {
+            session.setSession = setSession;
+            getComposableToken(selectedAccount, selectedProject, Env.devAuthToken)
+                .then((res) => {
+                session.login(res.rawToken).then(() => setSession(session.clone()));
+            })
+                .catch((err) => {
+                console.error('Failed to initialize dev auth token', err);
+                Env.logger.error('Failed to initialize dev auth token', {
+                    vertesia: {
+                        account_id: selectedAccount,
+                        project_id: selectedProject,
+                        error: err,
+                    },
+                });
+                session.isLoading = false;
+                session.authError = err instanceof Error ? err : new Error(String(err));
+                setSession(session.clone());
+            });
+            return;
+        }
+        if (token && state) {
+            session.setSession = setSession;
+            const validationError = verifyState(state);
+            if (validationError) {
+                console.error(`Auth: invalid state: ${validationError}`);
+                Env.logger.error(`Invalid state: ${validationError}`, {
+                    vertesia: {
+                        state: state,
+                    },
+                });
+                redirectToCentralAuth();
+            }
+            else {
+                clearState();
+            }
+            getComposableToken(selectedAccount, selectedProject, token, false, shouldRedirectToCentralAuth())
+                .then((res) => {
+                session.login(res.rawToken, { loadOnboardingStatus }).then(() => {
+                    setSession(session.clone());
+                    //cleanup the hash
+                    window.location.hash = '';
+                });
+            })
+                .catch((err) => {
+                // Don't redirect to central auth for UserNotFoundError - let signup flow handle it
+                if (err instanceof UserNotFoundError) {
+                    console.log('User not found - will trigger signup flow', err);
+                    session.isLoading = false;
+                    session.authError = err;
+                    setSession(session.clone());
+                    return;
+                }
+                if (err instanceof STSError) {
+                    console.error('STS error during token exchange', err);
+                    Env.logger.error('STS error during token exchange', {
+                        vertesia: {
+                            account_id: selectedAccount,
+                            project_id: selectedProject,
+                            sts_url: err.stsURL,
+                            error: err,
+                        },
+                    });
+                    window.alert('Authentication failed due to an issue with the authentication service. Please try again later.');
+                    session.logout();
+                    setSession(session.clone());
+                    window.location.hash = '';
+                    return;
+                }
+                console.error('Failed to fetch user token from studio, redirecting to central auth', err);
+                Env.logger.error('Failed to fetch user token from studio, redirecting to central auth', {
+                    vertesia: {
+                        error: err,
+                    },
+                });
+                redirectToCentralAuth();
+            });
+            return;
+        }
+        let cancelled = false;
+        let unsubscribe;
+        const startFirebaseOrCentralAuth = () => {
+            if (cancelled)
+                return;
+            // If the current host is not in the Firebase allowlist, central auth owns sign-in.
+            if (!session.isLoggedIn()) {
+                console.log('Auth: not logged in & no token/state');
+                Env.logger.info('Not logged in & no token/state', {
+                    vertesia: {
+                        account_id: selectedAccount,
+                        project_id: selectedProject,
+                    },
+                });
+                if (shouldRedirectToCentralAuth()) {
+                    console.log('Auth: host is not in Firebase auth allowlist, redirecting to central auth with selection', selectedAccount, selectedProject);
+                    Env.logger.info('Redirecting to central auth with selection', {
+                        vertesia: {
+                            account_id: selectedAccount,
+                            project_id: selectedProject,
+                        },
+                    });
+                    redirectToCentralAuth();
+                    return; // Don't register onAuthStateChanged listener when redirecting
+                }
+                console.log('Auth: host is in Firebase auth allowlist');
+                Env.logger.info('Host is in Firebase auth allowlist', {
+                    vertesia: {
+                        account_id: selectedAccount,
+                        project_id: selectedProject,
+                    },
+                });
+            }
+            unsubscribe = onAuthStateChanged(getFirebaseAuth(), async (firebaseUser) => {
+                if (firebaseUser) {
+                    console.log('Auth: successful login with firebase');
+                    Env.logger.info('Successful login with firebase', {
+                        vertesia: {
+                            account_id: selectedAccount,
+                            project_id: selectedProject,
+                        },
+                    });
+                    session.setSession = setSession;
+                    await getComposableToken(selectedAccount, selectedProject, undefined, false, shouldRedirectToCentralAuth())
+                        .then((res) => {
+                        session
+                            .login(res.rawToken, { loadOnboardingStatus })
+                            .then(() => setSession(session.clone()));
+                    })
+                        .catch((err) => {
+                        console.error('Failed to fetch user token from studio', err);
+                        Env.logger.error('Failed to fetch user token from studio', {
+                            vertesia: {
+                                account_id: selectedAccount,
+                                project_id: selectedProject,
+                                error: err,
+                            },
+                        });
+                        if (!(err instanceof UserNotFoundError))
+                            session.logout();
+                        session.isLoading = false;
+                        session.authError = err;
+                        setSession(session.clone());
+                    });
+                }
+                else {
+                    // anonymous user
+                    console.log('Auth: using anonymous user');
+                    Env.logger.info('Using anonymous user', {
+                        vertesia: {
+                            account_id: selectedAccount,
+                            project_id: selectedProject,
+                        },
+                    });
+                    session.client.withAuthCallback(undefined);
+                    session.logout();
+                    setSession(session.clone());
+                }
+            });
+        };
+        if (Env.authTokenProvider) {
+            session.setSession = setSession;
+            void Env.authTokenProvider()
+                .then(async (injectedToken) => {
+                if (!injectedToken) {
+                    startFirebaseOrCentralAuth();
+                    return;
+                }
+                const res = await getComposableToken(selectedAccount, selectedProject, injectedToken, false, shouldRedirectToCentralAuth());
+                await session.login(res.rawToken, { loadOnboardingStatus });
+                if (!cancelled)
+                    setSession(session.clone());
+            })
+                .catch((err) => {
+                console.warn('Auth: failed to initialize injected auth token', err);
+                Env.logger.warn('Failed to initialize injected auth token', {
+                    vertesia: {
+                        account_id: selectedAccount,
+                        project_id: selectedProject,
+                        error: err,
+                    },
+                });
+                startFirebaseOrCentralAuth();
+            });
+            return () => {
+                cancelled = true;
+                unsubscribe?.();
+            };
+        }
+        startFirebaseOrCentralAuth();
+        return () => {
+            cancelled = true;
+            unsubscribe?.();
+        };
+    };
+    useEffect(() => {
+        return authFlowRef.current?.();
+    }, []);
+    return _jsx(UserSessionContext.Provider, { value: session, children: children });
+}
+//# sourceMappingURL=UserSessionProvider.js.map

package/lib/session/UserSessionProvider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"UserSessionProvider.js","sourceRoot":"","sources":["../../src/session/UserSessionProvider.tsx"],"names":[],"mappings":";AAAA,OAAO,EAAE,GAAG,EAAE,MAAM,kBAAkB,CAAC;AACvC,OAAO,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AACnD,OAAO,EAAkB,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAC;AACpE,OAAO,EAAE,kBAAkB,EAAE,QAAQ,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AACpF,OAAO,EAAE,2BAA2B,EAAE,MAAM,sBAAsB,CAAC;AACnE,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAClD,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,yBAAyB,EAAE,yBAAyB,EAAE,WAAW,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AAEtH,MAAM,qBAAqB,GAAG,qCAAqC,CAAC;AAMpE,MAAM,UAAU,mBAAmB,CAAC,EAAE,QAAQ,EAAE,oBAAoB,GAAG,IAAI,EAA4B;IACnG,MAAM,UAAU,GAAG,IAAI,eAAe,CAAC,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;IACnE,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IACtC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IACtC,MAAM,CAAC,OAAO,EAAE,UAAU,CAAC,GAAG,QAAQ,CAAc,IAAI,WAAW,EAAE,CAAC,CAAC;IACvE,MAAM,EAAE,aAAa,EAAE,WAAW,EAAE,UAAU,EAAE,GAAG,YAAY,EAAE,CAAC;IAClE,MAAM,mBAAmB,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAC1C,MAAM,WAAW,GAAG,MAAM,CAA+C,SAAS,CAAC,CAAC;IAEpF,MAAM,qBAAqB,GAAG,CAAC,SAAkB,EAAE,SAAkB,EAAE,EAAE;QACrE,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,qBAAqB,QAAQ,GAAG,CAAC,SAAS,CAAC,GAAG,IAAI,yBAAyB,EAAE,CAAC,CAAC;QACtG,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QACjD,UAAU,CAAC,IAAI,GAAG,EAAE,CAAC;QACrB,IAAI,SAAS;YAAE,UAAU,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;QAC3D,IAAI,SAAS;YAAE,UAAU,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;QAC3D,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,cAAc,EAAE,UAAU,CAAC,QAAQ,EAAE,CAAC,CAAC;QAC5D,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,aAAa,EAAE,CAAC,CAAC;QAC/C,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC;IACrC,CAAC,CAAC;IAEF,WAAW,CAAC,OAAO,GAAG,GAAG,EAAE;QACvB,wDAAwD;QACxD,IAAI,mBAAmB,CAAC,OAAO,EAAE,CAAC;YAC9B,OAAO,CAAC,GAAG,CAAC,+CAA+C,CAAC,CAAC;YAC7D,OAAO;QACX,CAAC;QACD,mBAAmB,CAAC,OAAO,GAAG,IAAI,CAAC;QAEnC,OAAO,CAAC,GAAG,CAAC,0BAA0B,CAAC,CAAC;QACxC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;QACtC,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QACjD,MAAM,eAAe,GACjB,UAAU,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,YAAY,CAAC,OAAO,CAAC,yBAAyB,CAAC,IAAI,SAAS,CAAC;QACrG,MAAM,eAAe,GACjB,UAAU,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC;YAChC,YAAY,CAAC,OAAO,CAAC,GAAG,yBAAyB,IAAI,eAAe,EAAE,CAAC;YACvE,SAAS,CAAC;QACd,OAAO,CAAC,GAAG,CAAC,wBAAwB,EAAE,eAAe,CAAC,CAAC;QACvD,OAAO,CAAC,GAAG,CAAC,wBAAwB,EAAE,eAAe,CAAC,CAAC;QACvD,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,8BAA8B,EAAE;YAC5C,QAAQ,EAAE;gBACN,UAAU,EAAE,eAAe;gBAC3B,UAAU,EAAE,eAAe;aAC9B;SACJ,CAAC,CAAC;QAEH,IAAI,GAAG,CAAC,UAAU,IAAI,GAAG,CAAC,YAAY,EAAE,CAAC;YACrC,OAAO,CAAC,UAAU,GAAG,UAAU,CAAC;YAChC,kBAAkB,CAAC,eAAe,EAAE,eAAe,EAAE,GAAG,CAAC,YAAY,CAAC;iBACjE,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE;gBACV,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;YACxE,CAAC,CAAC;iBACD,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;gBACX,OAAO,CAAC,KAAK,CAAC,qCAAqC,EAAE,GAAG,CAAC,CAAC;gBAC1D,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,qCAAqC,EAAE;oBACpD,QAAQ,EAAE;wBACN,UAAU,EAAE,eAAe;wBAC3B,UAAU,EAAE,eAAe;wBAC3B,KAAK,EAAE,GAAG;qBACb;iBACJ,CAAC,CAAC;gBACH,OAAO,CAAC,SAAS,GAAG,KAAK,CAAC;gBAC1B,OAAO,CAAC,SAAS,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;gBACxE,UAAU,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC;YAChC,CAAC,CAAC,CAAC;YACP,OAAO;QACX,CAAC;QAED,IAAI,KAAK,IAAI,KAAK,EAAE,CAAC;YACjB,OAAO,CAAC,UAAU,GAAG,UAAU,CAAC;YAChC,MAAM,eAAe,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC;YAC3C,IAAI,eAAe,EAAE,CAAC;gBAClB,OAAO,CAAC,KAAK,CAAC,wBAAwB,eAAe,EAAE,CAAC,CAAC;gBACzD,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,kBAAkB,eAAe,EAAE,EAAE;oBAClD,QAAQ,EAAE;wBACN,KAAK,EAAE,KAAK;qBACf;iBACJ,CAAC,CAAC;gBACH,qBAAqB,EAAE,CAAC;YAC5B,CAAC;iBAAM,CAAC;gBACJ,UAAU,EAAE,CAAC;YACjB,CAAC;YACD,kBAAkB,CAAC,eAAe,EAAE,eAAe,EAAE,KAAK,EAAE,KAAK,EAAE,2BAA2B,EAAE,CAAC;iBAC5F,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE;gBACV,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,oBAAoB,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE;oBAC5D,UAAU,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC;oBAC5B,kBAAkB;oBAClB,MAAM,CAAC,QAAQ,CAAC,IAAI,GAAG,EAAE,CAAC;gBAC9B,CAAC,CAAC,CAAC;YACP,CAAC,CAAC;iBACD,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;gBACX,mFAAmF;gBACnF,IAAI,GAAG,YAAY,iBAAiB,EAAE,CAAC;oBACnC,OAAO,CAAC,GAAG,CAAC,2CAA2C,EAAE,GAAG,CAAC,CAAC;oBAC9D,OAAO,CAAC,SAAS,GAAG,KAAK,CAAC;oBAC1B,OAAO,CAAC,SAAS,GAAG,GAAG,CAAC;oBACxB,UAAU,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC;oBAC5B,OAAO;gBACX,CAAC;gBAED,IAAI,GAAG,YAAY,QAAQ,EAAE,CAAC;oBAC1B,OAAO,CAAC,KAAK,CAAC,iCAAiC,EAAE,GAAG,CAAC,CAAC;oBACtD,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,iCAAiC,EAAE;wBAChD,QAAQ,EAAE;4BACN,UAAU,EAAE,eAAe;4BAC3B,UAAU,EAAE,eAAe;4BAC3B,OAAO,EAAE,GAAG,CAAC,MAAM;4BACnB,KAAK,EAAE,GAAG;yBACb;qBACJ,CAAC,CAAC;oBACH,MAAM,CAAC,KAAK,CACR,gGAAgG,CACnG,CAAC;oBACF,OAAO,CAAC,MAAM,EAAE,CAAC;oBACjB,UAAU,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC;oBAC5B,MAAM,CAAC,QAAQ,CAAC,IAAI,GAAG,EAAE,CAAC;oBAC1B,OAAO;gBACX,CAAC;gBAED,OAAO,CAAC,KAAK,CAAC,qEAAqE,EAAE,GAAG,CAAC,CAAC;gBAC1F,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,qEAAqE,EAAE;oBACpF,QAAQ,EAAE;wBACN,KAAK,EAAE,GAAG;qBACb;iBACJ,CAAC,CAAC;gBACH,qBAAqB,EAAE,CAAC;YAC5B,CAAC,CAAC,CAAC;YACP,OAAO;QACX,CAAC;QAED,IAAI,SAAS,GAAG,KAAK,CAAC;QACtB,IAAI,WAAqC,CAAC;QAE1C,MAAM,0BAA0B,GAAG,GAAG,EAAE;YACpC,IAAI,SAAS;gBAAE,OAAO;YAEtB,mFAAmF;YACnF,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC;gBACxB,OAAO,CAAC,GAAG,CAAC,sCAAsC,CAAC,CAAC;gBACpD,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,gCAAgC,EAAE;oBAC9C,QAAQ,EAAE;wBACN,UAAU,EAAE,eAAe;wBAC3B,UAAU,EAAE,eAAe;qBAC9B;iBACJ,CAAC,CAAC;gBACH,IAAI,2BAA2B,EAAE,EAAE,CAAC;oBAChC,OAAO,CAAC,GAAG,CACP,0FAA0F,EAC1F,eAAe,EACf,eAAe,CAClB,CAAC;oBACF,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,4CAA4C,EAAE;wBAC1D,QAAQ,EAAE;4BACN,UAAU,EAAE,eAAe;4BAC3B,UAAU,EAAE,eAAe;yBAC9B;qBACJ,CAAC,CAAC;oBACH,qBAAqB,EAAE,CAAC;oBACxB,OAAO,CAAC,8DAA8D;gBAC1E,CAAC;gBAED,OAAO,CAAC,GAAG,CAAC,0CAA0C,CAAC,CAAC;gBACxD,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,oCAAoC,EAAE;oBAClD,QAAQ,EAAE;wBACN,UAAU,EAAE,eAAe;wBAC3B,UAAU,EAAE,eAAe;qBAC9B;iBACJ,CAAC,CAAC;YACP,CAAC;YAED,WAAW,GAAG,kBAAkB,CAAC,eAAe,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE,EAAE;gBACvE,IAAI,YAAY,EAAE,CAAC;oBACf,OAAO,CAAC,GAAG,CAAC,sCAAsC,CAAC,CAAC;oBACpD,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,gCAAgC,EAAE;wBAC9C,QAAQ,EAAE;4BACN,UAAU,EAAE,eAAe;4BAC3B,UAAU,EAAE,eAAe;yBAC9B;qBACJ,CAAC,CAAC;oBACH,OAAO,CAAC,UAAU,GAAG,UAAU,CAAC;oBAChC,MAAM,kBAAkB,CACpB,eAAe,EACf,eAAe,EACf,SAAS,EACT,KAAK,EACL,2BAA2B,EAAE,CAChC;yBACI,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE;wBACV,OAAO;6BACF,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,oBAAoB,EAAE,CAAC;6BAC7C,IAAI,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;oBACjD,CAAC,CAAC;yBACD,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;wBACX,OAAO,CAAC,KAAK,CAAC,wCAAwC,EAAE,GAAG,CAAC,CAAC;wBAC7D,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,wCAAwC,EAAE;4BACvD,QAAQ,EAAE;gCACN,UAAU,EAAE,eAAe;gCAC3B,UAAU,EAAE,eAAe;gCAC3B,KAAK,EAAE,GAAG;6BACb;yBACJ,CAAC,CAAC;wBACH,IAAI,CAAC,CAAC,GAAG,YAAY,iBAAiB,CAAC;4BAAE,OAAO,CAAC,MAAM,EAAE,CAAC;wBAC1D,OAAO,CAAC,SAAS,GAAG,KAAK,CAAC;wBAC1B,OAAO,CAAC,SAAS,GAAG,GAAG,CAAC;wBACxB,UAAU,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC;oBAChC,CAAC,CAAC,CAAC;gBACX,CAAC;qBAAM,CAAC;oBACJ,iBAAiB;oBACjB,OAAO,CAAC,GAAG,CAAC,4BAA4B,CAAC,CAAC;oBAC1C,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,sBAAsB,EAAE;wBACpC,QAAQ,EAAE;4BACN,UAAU,EAAE,eAAe;4BAC3B,UAAU,EAAE,eAAe;yBAC9B;qBACJ,CAAC,CAAC;oBACH,OAAO,CAAC,MAAM,CAAC,gBAAgB,CAAC,SAAS,CAAC,CAAC;oBAC3C,OAAO,CAAC,MAAM,EAAE,CAAC;oBACjB,UAAU,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC;gBAChC,CAAC;YACL,CAAC,CAAC,CAAC;QACP,CAAC,CAAC;QAEF,IAAI,GAAG,CAAC,iBAAiB,EAAE,CAAC;YACxB,OAAO,CAAC,UAAU,GAAG,UAAU,CAAC;YAChC,KAAK,GAAG,CAAC,iBAAiB,EAAE;iBACvB,IAAI,CAAC,KAAK,EAAE,aAAa,EAAE,EAAE;gBAC1B,IAAI,CAAC,aAAa,EAAE,CAAC;oBACjB,0BAA0B,EAAE,CAAC;oBAC7B,OAAO;gBACX,CAAC;gBACD,MAAM,GAAG,GAAG,MAAM,kBAAkB,CAChC,eAAe,EACf,eAAe,EACf,aAAa,EACb,KAAK,EACL,2BAA2B,EAAE,CAChC,CAAC;gBACF,MAAM,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,oBAAoB,EAAE,CAAC,CAAC;gBAC5D,IAAI,CAAC,SAAS;oBAAE,UAAU,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC;YAChD,CAAC,CAAC;iBACD,KAAK,CAAC,CAAC,GAAY,EAAE,EAAE;gBACpB,OAAO,CAAC,IAAI,CAAC,gDAAgD,EAAE,GAAG,CAAC,CAAC;gBACpE,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,0CAA0C,EAAE;oBACxD,QAAQ,EAAE;wBACN,UAAU,EAAE,eAAe;wBAC3B,UAAU,EAAE,eAAe;wBAC3B,KAAK,EAAE,GAAG;qBACb;iBACJ,CAAC,CAAC;gBACH,0BAA0B,EAAE,CAAC;YACjC,CAAC,CAAC,CAAC;YACP,OAAO,GAAG,EAAE;gBACR,SAAS,GAAG,IAAI,CAAC;gBACjB,WAAW,EAAE,EAAE,CAAC;YACpB,CAAC,CAAC;QACN,CAAC;QAED,0BAA0B,EAAE,CAAC;QAC7B,OAAO,GAAG,EAAE;YACR,SAAS,GAAG,IAAI,CAAC;YACjB,WAAW,EAAE,EAAE,CAAC;QACpB,CAAC,CAAC;IACN,CAAC,CAAC;IAEF,SAAS,CAAC,GAAG,EAAE;QACX,OAAO,WAAW,CAAC,OAAO,EAAE,EAAE,CAAC;IACnC,CAAC,EAAE,EAAE,CAAC,CAAC;IAEP,OAAO,KAAC,kBAAkB,CAAC,QAAQ,IAAC,KAAK,EAAE,OAAO,YAAG,QAAQ,GAA+B,CAAC;AACjG,CAAC"}

package/lib/session/auth/composable.d.ts

@@ -0,0 +1,38 @@
+/**
+ * Handle client caching and refresh of auth token
+ */
+import type { AuthTokenPayload } from '@vertesia/common';
+interface ComposableTokenResponse {
+    rawToken: string;
+    token: AuthTokenPayload;
+    error: boolean;
+    message?: string;
+}
+export declare function fetchComposableToken(getIdToken: () => Promise<string | null | undefined>, accountId?: string, projectId?: string, ttl?: number, retryCount?: number): Promise<string>;
+/**
+ *
+ * @param accountId
+ * @param projectId
+ * @param ttl time to live for the token in seconds
+ * @returns
+ */
+export declare function fetchComposableTokenFromFirebaseToken(accountId?: string, projectId?: string, ttl?: number): Promise<string>;
+/**
+ * Mint a scoped Vertesia token from an existing Vertesia JWT. STS accepts STS-issued
+ * tokens on /token/issue, so this works for sessions established via Central Auth where
+ * the browser has no Firebase user.
+ */
+export declare function fetchComposableTokenFromVertesiaToken(vertesiaToken: string, accountId?: string, projectId?: string, ttl?: number): Promise<string>;
+/** Returns the cached Vertesia raw JWT, if any. Does not refresh. */
+export declare function getCurrentVertesiaToken(): string | undefined;
+export declare function getComposableToken(accountId?: string, projectId?: string, initToken?: string, forceRefresh?: boolean, useInternalAuth?: boolean): Promise<ComposableTokenResponse>;
+export declare class UserNotFoundError extends Error {
+    email: string;
+    constructor(message: string, email: string);
+}
+export declare class STSError extends Error {
+    stsURL: string;
+    constructor(message: string, stsURL: string);
+}
+export {};
+//# sourceMappingURL=composable.d.ts.map

package/lib/session/auth/composable.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"composable.d.ts","sourceRoot":"","sources":["../../../src/session/auth/composable.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AASzD,UAAU,uBAAuB;IAC7B,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,gBAAgB,CAAC;IACxB,KAAK,EAAE,OAAO,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;CACpB;AAoBD,wBAAsB,oBAAoB,CACtC,UAAU,EAAE,MAAM,OAAO,CAAC,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC,EACpD,SAAS,CAAC,EAAE,MAAM,EAClB,SAAS,CAAC,EAAE,MAAM,EAClB,GAAG,CAAC,EAAE,MAAM,EACZ,UAAU,SAAI,GACf,OAAO,CAAC,MAAM,CAAC,CAqOjB;AAED;;;;;;GAMG;AACH,wBAAsB,qCAAqC,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,MAAM,mBAE/G;AAED;;;;GAIG;AACH,wBAAsB,qCAAqC,CACvD,aAAa,EAAE,MAAM,EACrB,SAAS,CAAC,EAAE,MAAM,EAClB,SAAS,CAAC,EAAE,MAAM,EAClB,GAAG,CAAC,EAAE,MAAM,mBAGf;AAED,qEAAqE;AACrE,wBAAgB,uBAAuB,IAAI,MAAM,GAAG,SAAS,CAE5D;AAED,wBAAsB,kBAAkB,CACpC,SAAS,CAAC,EAAE,MAAM,EAClB,SAAS,CAAC,EAAE,MAAM,EAClB,SAAS,CAAC,EAAE,MAAM,EAClB,YAAY,UAAQ,EACpB,eAAe,UAAQ,GACxB,OAAO,CAAC,uBAAuB,CAAC,CA4DlC;AAED,qBAAa,iBAAkB,SAAQ,KAAK;IACxC,KAAK,EAAE,MAAM,CAAC;gBACF,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM;CAK7C;AAED,qBAAa,QAAS,SAAQ,KAAK;IAC/B,MAAM,EAAE,MAAM,CAAC;gBACH,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM;CAK9C"}

package/lib/session/auth/composable.js

@@ -0,0 +1,325 @@
+import { Env } from '@vertesia/ui/env';
+import { jwtDecode } from 'jwt-decode';
+import { LastSelectedAccountId_KEY, LastSelectedProjectId_KEY } from '../constants';
+import { getFirebaseAuth, getFirebaseAuthToken } from './firebase';
+let AUTH_TOKEN_RAW;
+let AUTH_TOKEN;
+function normalizeIssuer(value) {
+    return value?.replace(/\/+$/, '');
+}
+function decodeToken(token) {
+    return jwtDecode(token);
+}
+function isVertesiaIssuedToken(token) {
+    if (!token)
+        return false;
+    try {
+        const decoded = decodeToken(token);
+        return normalizeIssuer(decoded.iss) === normalizeIssuer(Env.endpoints.sts);
+    }
+    catch {
+        return false;
+    }
+}
+export async function fetchComposableToken(getIdToken, accountId, projectId, ttl, retryCount = 0) {
+    console.log(`Getting/refreshing composable token for account ${accountId} and project ${projectId} `);
+    Env.logger.info('Getting/refreshing composable token', {
+        vertesia: {
+            account_id: accountId,
+            project_id: projectId,
+            retry_count: retryCount,
+        },
+    });
+    const idToken = await getIdToken(); //get from firebase
+    if (!idToken) {
+        console.log('No id token found - using cookie auth');
+        throw new Error('No id token found');
+    }
+    // Use STS endpoint - either configured or default to sts.vertesia.io
+    const stsEndpoint = Env.endpoints.sts;
+    console.log('Using STS for token generation:', stsEndpoint);
+    Env.logger.info('Using STS for token generation', {
+        vertesia: {
+            account_id: accountId,
+            project_id: projectId,
+            sts_url: stsEndpoint,
+        },
+    });
+    try {
+        // Call STS to generate a user token
+        const stsUrl = new URL(`${stsEndpoint}/token/issue`);
+        const requestBody = {
+            type: 'user',
+            account_id: accountId,
+            project_id: projectId,
+            expires_at: ttl ? Math.floor(Date.now() / 1000) + ttl : undefined,
+        };
+        const stsRes = await fetch(stsUrl, {
+            method: 'POST',
+            headers: {
+                'Content-Type': 'application/json',
+                Authorization: `Bearer ${idToken}`, // Firebase token for authentication
+            },
+            body: JSON.stringify(requestBody),
+        }).catch((error) => {
+            console.error('Failed to call STS endpoint', error);
+            Env.logger.error('Failed to call STS endpoint', {
+                vertesia: {
+                    account_id: accountId,
+                    project_id: projectId,
+                    error: error,
+                },
+            });
+            throw new STSError('Failed to call STS endpoint', stsEndpoint);
+        });
+        if (idToken && stsRes?.status === 404) {
+            // User not found in token-server - call ensure-user endpoint
+            console.log('404: User not found - calling ensure-user endpoint');
+            Env.logger.info('404: User not found - calling ensure-user endpoint', {
+                vertesia: {
+                    account_id: accountId,
+                    project_id: projectId,
+                    status: stsRes?.status,
+                },
+            });
+            const ensureResponse = await fetch(`${Env.endpoints.studio}/auth/ensure-user`, {
+                method: 'POST',
+                headers: {
+                    Authorization: `Bearer ${idToken}`,
+                    'Content-Type': 'application/json',
+                },
+            });
+            if (ensureResponse.status === 412) {
+                // No invite - trigger signup
+                console.log('412: No invite found - signup required');
+                Env.logger.info('412: No invite found - signup required', {
+                    vertesia: {
+                        account_id: accountId,
+                        project_id: projectId,
+                    },
+                });
+                const idTokenDecoded = jwtDecode(idToken);
+                if (!idTokenDecoded?.email) {
+                    Env.logger.error('No email found in id token');
+                    throw new Error('No email found in id token');
+                }
+                throw new UserNotFoundError('User not found - signup required', idTokenDecoded.email);
+            }
+            if (ensureResponse.status === 403) {
+                // SigninScreen keys the invite-required view off this message.
+                Env.logger.warn('403: Customer-domain user requires an invite to join', {
+                    vertesia: {
+                        account_id: accountId,
+                        project_id: projectId,
+                    },
+                });
+                throw new Error('Customer-domain user requires an invite to join');
+            }
+            if (!ensureResponse.ok) {
+                console.error('Failed to ensure user exists', ensureResponse.status);
+                Env.logger.error('Failed to ensure user exists', {
+                    vertesia: {
+                        account_id: accountId,
+                        project_id: projectId,
+                        status: ensureResponse.status,
+                    },
+                });
+                throw new Error('Failed to ensure user exists');
+            }
+            // User created/exists - retry token generation
+            console.log('User ensured - retrying token generation');
+            Env.logger.info('User ensured - retrying token generation', {
+                vertesia: {
+                    account_id: accountId,
+                    project_id: projectId,
+                },
+            });
+            return fetchComposableToken(getIdToken, accountId, projectId, ttl, retryCount);
+        }
+        if (idToken && stsRes?.status === 412) {
+            console.log("412: auth succeeded but user doesn't exist - signup required", stsRes?.status);
+            Env.logger.error("412: auth succeeded but user doesn't exist - signup required", {
+                vertesia: {
+                    account_id: accountId,
+                    project_id: projectId,
+                    status: stsRes?.status,
+                },
+            });
+            const idTokenDecoded = jwtDecode(idToken);
+            if (!idTokenDecoded?.email) {
+                Env.logger.error('No email found in id token');
+                throw new Error('No email found in id token');
+            }
+            Env.logger.error('User not found', {
+                vertesia: {
+                    account_id: accountId,
+                    project_id: projectId,
+                    email: idTokenDecoded.email,
+                },
+            });
+            throw new UserNotFoundError('User not found', idTokenDecoded.email);
+        }
+        if (stsRes.status === 403) {
+            // User doesn't have access to the requested account/project, or has no accounts
+            // This can happen with:
+            // 1. Stale localStorage from previous user
+            // 2. User invited to a new account (doesn't have access yet)
+            // 3. User exists but has no accounts at all
+            if (retryCount > 0) {
+                // Already retried without account scope - this is a real authorization failure
+                console.error('403: Access denied even without account scope - user may have no accounts');
+                Env.logger.error('403: Access denied after retry - authorization failure', {
+                    vertesia: {
+                        account_id: accountId,
+                        project_id: projectId,
+                        status: stsRes.status,
+                        retry_count: retryCount,
+                    },
+                });
+                throw new Error('Access denied - user may not have access to any accounts');
+            }
+            console.log('403: Access denied - clearing cached account and retrying without account scope');
+            Env.logger.warn('403: Access denied - clearing cached account and retrying', {
+                vertesia: {
+                    account_id: accountId,
+                    project_id: projectId,
+                    status: stsRes.status,
+                    retry_count: retryCount,
+                },
+            });
+            // Clear any stale account/project from localStorage
+            localStorage.removeItem(LastSelectedAccountId_KEY);
+            if (accountId) {
+                localStorage.removeItem(`${LastSelectedProjectId_KEY}-${accountId}`);
+            }
+            // Retry without account/project scope - let user log in to their default account
+            return fetchComposableToken(getIdToken, undefined, undefined, ttl, retryCount + 1);
+        }
+        if (!stsRes.ok) {
+            const errorText = await stsRes.text();
+            console.error('STS token generation failed:', stsRes.status, errorText);
+            Env.logger.error('STS token generation failed', {
+                vertesia: {
+                    status: stsRes.status,
+                    error: errorText,
+                    account_id: accountId,
+                    project_id: projectId,
+                },
+            });
+            throw new Error(`Failed to get token from STS: ${stsRes.status}`);
+        }
+        const { token } = await stsRes.json();
+        console.log('Successfully got token from STS');
+        Env.logger.info('Successfully got token from STS');
+        return token;
+    }
+    catch (error) {
+        if (error instanceof UserNotFoundError || error instanceof STSError) {
+            throw error; // Re-throw UserNotFoundError and STSError to be handled separately in the caller
+        }
+        // Clear any stale account/project from localStorage on error
+        localStorage.removeItem(LastSelectedAccountId_KEY);
+        if (accountId) {
+            localStorage.removeItem(`${LastSelectedProjectId_KEY}-${accountId}`);
+        }
+        console.error('Failed to get composable token from STS', error);
+        Env.logger.error('Failed to get composable token from STS', {
+            vertesia: {
+                account_id: accountId,
+                project_id: projectId,
+                error: error,
+            },
+        });
+        throw new Error('Failed to get composable token', { cause: error });
+    }
+}
+/**
+ *
+ * @param accountId
+ * @param projectId
+ * @param ttl time to live for the token in seconds
+ * @returns
+ */
+export async function fetchComposableTokenFromFirebaseToken(accountId, projectId, ttl) {
+    return fetchComposableToken(getFirebaseAuthToken, accountId, projectId, ttl);
+}
+/**
+ * Mint a scoped Vertesia token from an existing Vertesia JWT. STS accepts STS-issued
+ * tokens on /token/issue, so this works for sessions established via Central Auth where
+ * the browser has no Firebase user.
+ */
+export async function fetchComposableTokenFromVertesiaToken(vertesiaToken, accountId, projectId, ttl) {
+    return fetchComposableToken(() => Promise.resolve(vertesiaToken), accountId, projectId, ttl);
+}
+/** Returns the cached Vertesia raw JWT, if any. Does not refresh. */
+export function getCurrentVertesiaToken() {
+    return AUTH_TOKEN_RAW;
+}
+export async function getComposableToken(accountId, projectId, initToken, forceRefresh = false, useInternalAuth = false) {
+    const selectedAccount = accountId ?? localStorage.getItem(LastSelectedAccountId_KEY) ?? undefined;
+    const selectedProject = projectId ?? localStorage.getItem(`${LastSelectedProjectId_KEY}-${selectedAccount}`) ?? undefined;
+    const devAuthToken = Env.isLocalDev ? Env.devAuthToken : undefined;
+    const suppliedToken = devAuthToken ?? initToken ?? AUTH_TOKEN_RAW;
+    //token is still valid for more than 5 minutes
+    if (!forceRefresh && AUTH_TOKEN_RAW && AUTH_TOKEN && AUTH_TOKEN.exp > Date.now() / 1000 + 300) {
+        return { rawToken: AUTH_TOKEN_RAW, token: AUTH_TOKEN, error: false };
+    }
+    if (!forceRefresh && isVertesiaIssuedToken(suppliedToken)) {
+        AUTH_TOKEN_RAW = suppliedToken;
+        AUTH_TOKEN = decodeToken(AUTH_TOKEN_RAW);
+        if (!AUTH_TOKEN.exp) {
+            throw new Error('Invalid composable token');
+        }
+        return { rawToken: AUTH_TOKEN_RAW, token: AUTH_TOKEN, error: false };
+    }
+    //token is close to expire, refresh it
+    if (!devAuthToken && !useInternalAuth && getFirebaseAuth().currentUser) {
+        //we have a firebase user, get the token from there
+        AUTH_TOKEN_RAW = await fetchComposableTokenFromFirebaseToken(selectedAccount, selectedProject);
+    }
+    else if (!devAuthToken && (initToken || AUTH_TOKEN_RAW)) {
+        // we have a token already and no firebase user, refresh it
+        AUTH_TOKEN_RAW = await fetchComposableToken(() => Promise.resolve(initToken ?? AUTH_TOKEN_RAW), selectedAccount, selectedProject);
+    }
+    else if (devAuthToken) {
+        AUTH_TOKEN_RAW = devAuthToken;
+    }
+    if (!AUTH_TOKEN_RAW) {
+        Env.logger.error('Cannot acquire a composable token', {
+            vertesia: {
+                account_id: selectedAccount,
+                project_id: selectedProject,
+            },
+        });
+        throw new Error('Cannot acquire a composable token');
+    }
+    AUTH_TOKEN = decodeToken(AUTH_TOKEN_RAW);
+    if (!AUTH_TOKEN?.exp || !AUTH_TOKEN_RAW) {
+        console.error('Invalid composable token', AUTH_TOKEN);
+        Env.logger.error('Invalid composable token', {
+            vertesia: {
+                account_id: selectedAccount,
+                project_id: selectedProject,
+            },
+        });
+        throw new Error('Invalid composable token');
+    }
+    return { rawToken: AUTH_TOKEN_RAW, token: AUTH_TOKEN, error: false };
+}
+export class UserNotFoundError extends Error {
+    email;
+    constructor(message, email) {
+        super(message);
+        this.name = 'UserNotFoundError';
+        this.email = email;
+    }
+}
+export class STSError extends Error {
+    stsURL;
+    constructor(message, stsURL) {
+        super(message);
+        this.name = 'STSError';
+        this.stsURL = stsURL;
+    }
+}
+//# sourceMappingURL=composable.js.map

package/lib/session/auth/composable.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"composable.js","sourceRoot":"","sources":["../../../src/session/auth/composable.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,GAAG,EAAE,MAAM,kBAAkB,CAAC;AACvC,OAAO,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AACvC,OAAO,EAAE,yBAAyB,EAAE,yBAAyB,EAAE,MAAM,cAAc,CAAC;AACpF,OAAO,EAAE,eAAe,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AAEnE,IAAI,cAAkC,CAAC;AACvC,IAAI,UAAwC,CAAC;AAS7C,SAAS,eAAe,CAAC,KAAyB;IAC9C,OAAO,KAAK,EAAE,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AACtC,CAAC;AAED,SAAS,WAAW,CAAC,KAAa;IAC9B,OAAO,SAAS,CAAC,KAAK,CAAqB,CAAC;AAChD,CAAC;AAED,SAAS,qBAAqB,CAAC,KAAyB;IACpD,IAAI,CAAC,KAAK;QAAE,OAAO,KAAK,CAAC;IACzB,IAAI,CAAC;QACD,MAAM,OAAO,GAAG,WAAW,CAAC,KAAK,CAAwC,CAAC;QAC1E,OAAO,eAAe,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,eAAe,CAAC,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IAC/E,CAAC;IAAC,MAAM,CAAC;QACL,OAAO,KAAK,CAAC;IACjB,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACtC,UAAoD,EACpD,SAAkB,EAClB,SAAkB,EAClB,GAAY,EACZ,UAAU,GAAG,CAAC;IAEd,OAAO,CAAC,GAAG,CAAC,mDAAmD,SAAS,gBAAgB,SAAS,GAAG,CAAC,CAAC;IACtG,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,qCAAqC,EAAE;QACnD,QAAQ,EAAE;YACN,UAAU,EAAE,SAAS;YACrB,UAAU,EAAE,SAAS;YACrB,WAAW,EAAE,UAAU;SAC1B;KACJ,CAAC,CAAC;IAEH,MAAM,OAAO,GAAG,MAAM,UAAU,EAAE,CAAC,CAAC,mBAAmB;IACvD,IAAI,CAAC,OAAO,EAAE,CAAC;QACX,OAAO,CAAC,GAAG,CAAC,uCAAuC,CAAC,CAAC;QACrD,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC;IACzC,CAAC;IAED,qEAAqE;IACrE,MAAM,WAAW,GAAG,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC;IACtC,OAAO,CAAC,GAAG,CAAC,iCAAiC,EAAE,WAAW,CAAC,CAAC;IAC5D,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,gCAAgC,EAAE;QAC9C,QAAQ,EAAE;YACN,UAAU,EAAE,SAAS;YACrB,UAAU,EAAE,SAAS;YACrB,OAAO,EAAE,WAAW;SACvB;KACJ,CAAC,CAAC;IAEH,IAAI,CAAC;QACD,oCAAoC;QACpC,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,WAAW,cAAc,CAAC,CAAC;QACrD,MAAM,WAAW,GAAG;YAChB,IAAI,EAAE,MAAM;YACZ,UAAU,EAAE,SAAS;YACrB,UAAU,EAAE,SAAS;YACrB,UAAU,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,SAAS;SACpE,CAAC;QAEF,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,MAAM,EAAE;YAC/B,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACL,cAAc,EAAE,kBAAkB;gBAClC,aAAa,EAAE,UAAU,OAAO,EAAE,EAAE,oCAAoC;aAC3E;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC;SACpC,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;YACf,OAAO,CAAC,KAAK,CAAC,6BAA6B,EAAE,KAAK,CAAC,CAAC;YACpD,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,6BAA6B,EAAE;gBAC5C,QAAQ,EAAE;oBACN,UAAU,EAAE,SAAS;oBACrB,UAAU,EAAE,SAAS;oBACrB,KAAK,EAAE,KAAK;iBACf;aACJ,CAAC,CAAC;YACH,MAAM,IAAI,QAAQ,CAAC,6BAA6B,EAAE,WAAW,CAAC,CAAC;QACnE,CAAC,CAAC,CAAC;QAEH,IAAI,OAAO,IAAI,MAAM,EAAE,MAAM,KAAK,GAAG,EAAE,CAAC;YACpC,6DAA6D;YAC7D,OAAO,CAAC,GAAG,CAAC,oDAAoD,CAAC,CAAC;YAClE,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,oDAAoD,EAAE;gBAClE,QAAQ,EAAE;oBACN,UAAU,EAAE,SAAS;oBACrB,UAAU,EAAE,SAAS;oBACrB,MAAM,EAAE,MAAM,EAAE,MAAM;iBACzB;aACJ,CAAC,CAAC;YAEH,MAAM,cAAc,GAAG,MAAM,KAAK,CAAC,GAAG,GAAG,CAAC,SAAS,CAAC,MAAM,mBAAmB,EAAE;gBAC3E,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE;oBACL,aAAa,EAAE,UAAU,OAAO,EAAE;oBAClC,cAAc,EAAE,kBAAkB;iBACrC;aACJ,CAAC,CAAC;YAEH,IAAI,cAAc,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;gBAChC,6BAA6B;gBAC7B,OAAO,CAAC,GAAG,CAAC,wCAAwC,CAAC,CAAC;gBACtD,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,wCAAwC,EAAE;oBACtD,QAAQ,EAAE;wBACN,UAAU,EAAE,SAAS;wBACrB,UAAU,EAAE,SAAS;qBACxB;iBACJ,CAAC,CAAC;gBACH,MAAM,cAAc,GAAG,SAAS,CAAqB,OAAO,CAAC,CAAC;gBAC9D,IAAI,CAAC,cAAc,EAAE,KAAK,EAAE,CAAC;oBACzB,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,4BAA4B,CAAC,CAAC;oBAC/C,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;gBAClD,CAAC;gBACD,MAAM,IAAI,iBAAiB,CAAC,kCAAkC,EAAE,cAAc,CAAC,KAAK,CAAC,CAAC;YAC1F,CAAC;YAED,IAAI,cAAc,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;gBAChC,+DAA+D;gBAC/D,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,sDAAsD,EAAE;oBACpE,QAAQ,EAAE;wBACN,UAAU,EAAE,SAAS;wBACrB,UAAU,EAAE,SAAS;qBACxB;iBACJ,CAAC,CAAC;gBACH,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;YACvE,CAAC;YAED,IAAI,CAAC,cAAc,CAAC,EAAE,EAAE,CAAC;gBACrB,OAAO,CAAC,KAAK,CAAC,8BAA8B,EAAE,cAAc,CAAC,MAAM,CAAC,CAAC;gBACrE,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,8BAA8B,EAAE;oBAC7C,QAAQ,EAAE;wBACN,UAAU,EAAE,SAAS;wBACrB,UAAU,EAAE,SAAS;wBACrB,MAAM,EAAE,cAAc,CAAC,MAAM;qBAChC;iBACJ,CAAC,CAAC;gBACH,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;YACpD,CAAC;YAED,+CAA+C;YAC/C,OAAO,CAAC,GAAG,CAAC,0CAA0C,CAAC,CAAC;YACxD,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,0CAA0C,EAAE;gBACxD,QAAQ,EAAE;oBACN,UAAU,EAAE,SAAS;oBACrB,UAAU,EAAE,SAAS;iBACxB;aACJ,CAAC,CAAC;YACH,OAAO,oBAAoB,CAAC,UAAU,EAAE,SAAS,EAAE,SAAS,EAAE,GAAG,EAAE,UAAU,CAAC,CAAC;QACnF,CAAC;QAED,IAAI,OAAO,IAAI,MAAM,EAAE,MAAM,KAAK,GAAG,EAAE,CAAC;YACpC,OAAO,CAAC,GAAG,CAAC,8DAA8D,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;YAC5F,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,8DAA8D,EAAE;gBAC7E,QAAQ,EAAE;oBACN,UAAU,EAAE,SAAS;oBACrB,UAAU,EAAE,SAAS;oBACrB,MAAM,EAAE,MAAM,EAAE,MAAM;iBACzB;aACJ,CAAC,CAAC;YACH,MAAM,cAAc,GAAG,SAAS,CAAqB,OAAO,CAAC,CAAC;YAC9D,IAAI,CAAC,cAAc,EAAE,KAAK,EAAE,CAAC;gBACzB,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,4BAA4B,CAAC,CAAC;gBAC/C,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;YAClD,CAAC;YACD,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,gBAAgB,EAAE;gBAC/B,QAAQ,EAAE;oBACN,UAAU,EAAE,SAAS;oBACrB,UAAU,EAAE,SAAS;oBACrB,KAAK,EAAE,cAAc,CAAC,KAAK;iBAC9B;aACJ,CAAC,CAAC;YACH,MAAM,IAAI,iBAAiB,CAAC,gBAAgB,EAAE,cAAc,CAAC,KAAK,CAAC,CAAC;QACxE,CAAC;QAED,IAAI,MAAM,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YACxB,gFAAgF;YAChF,wBAAwB;YACxB,2CAA2C;YAC3C,6DAA6D;YAC7D,4CAA4C;YAE5C,IAAI,UAAU,GAAG,CAAC,EAAE,CAAC;gBACjB,+EAA+E;gBAC/E,OAAO,CAAC,KAAK,CAAC,2EAA2E,CAAC,CAAC;gBAC3F,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,wDAAwD,EAAE;oBACvE,QAAQ,EAAE;wBACN,UAAU,EAAE,SAAS;wBACrB,UAAU,EAAE,SAAS;wBACrB,MAAM,EAAE,MAAM,CAAC,MAAM;wBACrB,WAAW,EAAE,UAAU;qBAC1B;iBACJ,CAAC,CAAC;gBACH,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAC;YAChF,CAAC;YAED,OAAO,CAAC,GAAG,CAAC,iFAAiF,CAAC,CAAC;YAC/F,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,2DAA2D,EAAE;gBACzE,QAAQ,EAAE;oBACN,UAAU,EAAE,SAAS;oBACrB,UAAU,EAAE,SAAS;oBACrB,MAAM,EAAE,MAAM,CAAC,MAAM;oBACrB,WAAW,EAAE,UAAU;iBAC1B;aACJ,CAAC,CAAC;YAEH,oDAAoD;YACpD,YAAY,CAAC,UAAU,CAAC,yBAAyB,CAAC,CAAC;YACnD,IAAI,SAAS,EAAE,CAAC;gBACZ,YAAY,CAAC,UAAU,CAAC,GAAG,yBAAyB,IAAI,SAAS,EAAE,CAAC,CAAC;YACzE,CAAC;YAED,iFAAiF;YACjF,OAAO,oBAAoB,CAAC,UAAU,EAAE,SAAS,EAAE,SAAS,EAAE,GAAG,EAAE,UAAU,GAAG,CAAC,CAAC,CAAC;QACvF,CAAC;QAED,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;YACb,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;YACtC,OAAO,CAAC,KAAK,CAAC,8BAA8B,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;YACxE,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,6BAA6B,EAAE;gBAC5C,QAAQ,EAAE;oBACN,MAAM,EAAE,MAAM,CAAC,MAAM;oBACrB,KAAK,EAAE,SAAS;oBAChB,UAAU,EAAE,SAAS;oBACrB,UAAU,EAAE,SAAS;iBACxB;aACJ,CAAC,CAAC;YACH,MAAM,IAAI,KAAK,CAAC,iCAAiC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;QACtE,CAAC;QAED,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;QACtC,OAAO,CAAC,GAAG,CAAC,iCAAiC,CAAC,CAAC;QAC/C,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,iCAAiC,CAAC,CAAC;QACnD,OAAO,KAAK,CAAC;IACjB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACb,IAAI,KAAK,YAAY,iBAAiB,IAAI,KAAK,YAAY,QAAQ,EAAE,CAAC;YAClE,MAAM,KAAK,CAAC,CAAC,iFAAiF;QAClG,CAAC;QAED,6DAA6D;QAC7D,YAAY,CAAC,UAAU,CAAC,yBAAyB,CAAC,CAAC;QACnD,IAAI,SAAS,EAAE,CAAC;YACZ,YAAY,CAAC,UAAU,CAAC,GAAG,yBAAyB,IAAI,SAAS,EAAE,CAAC,CAAC;QACzE,CAAC;QACD,OAAO,CAAC,KAAK,CAAC,yCAAyC,EAAE,KAAK,CAAC,CAAC;QAChE,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,yCAAyC,EAAE;YACxD,QAAQ,EAAE;gBACN,UAAU,EAAE,SAAS;gBACrB,UAAU,EAAE,SAAS;gBACrB,KAAK,EAAE,KAAK;aACf;SACJ,CAAC,CAAC;QACH,MAAM,IAAI,KAAK,CAAC,gCAAgC,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;IACxE,CAAC;AACL,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,qCAAqC,CAAC,SAAkB,EAAE,SAAkB,EAAE,GAAY;IAC5G,OAAO,oBAAoB,CAAC,oBAAoB,EAAE,SAAS,EAAE,SAAS,EAAE,GAAG,CAAC,CAAC;AACjF,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,qCAAqC,CACvD,aAAqB,EACrB,SAAkB,EAClB,SAAkB,EAClB,GAAY;IAEZ,OAAO,oBAAoB,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,SAAS,EAAE,SAAS,EAAE,GAAG,CAAC,CAAC;AACjG,CAAC;AAED,qEAAqE;AACrE,MAAM,UAAU,uBAAuB;IACnC,OAAO,cAAc,CAAC;AAC1B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACpC,SAAkB,EAClB,SAAkB,EAClB,SAAkB,EAClB,YAAY,GAAG,KAAK,EACpB,eAAe,GAAG,KAAK;IAEvB,MAAM,eAAe,GAAG,SAAS,IAAI,YAAY,CAAC,OAAO,CAAC,yBAAyB,CAAC,IAAI,SAAS,CAAC;IAClG,MAAM,eAAe,GACjB,SAAS,IAAI,YAAY,CAAC,OAAO,CAAC,GAAG,yBAAyB,IAAI,eAAe,EAAE,CAAC,IAAI,SAAS,CAAC;IACtG,MAAM,YAAY,GAAG,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;IACnE,MAAM,aAAa,GAAG,YAAY,IAAI,SAAS,IAAI,cAAc,CAAC;IAElE,8CAA8C;IAC9C,IAAI,CAAC,YAAY,IAAI,cAAc,IAAI,UAAU,IAAI,UAAU,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,GAAG,GAAG,EAAE,CAAC;QAC5F,OAAO,EAAE,QAAQ,EAAE,cAAc,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;IACzE,CAAC;IAED,IAAI,CAAC,YAAY,IAAI,qBAAqB,CAAC,aAAa,CAAC,EAAE,CAAC;QACxD,cAAc,GAAG,aAAa,CAAC;QAC/B,UAAU,GAAG,WAAW,CAAC,cAAc,CAAC,CAAC;QACzC,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,CAAC;YAClB,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;QAChD,CAAC;QACD,OAAO,EAAE,QAAQ,EAAE,cAAc,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;IACzE,CAAC;IAED,sCAAsC;IACtC,IAAI,CAAC,YAAY,IAAI,CAAC,eAAe,IAAI,eAAe,EAAE,CAAC,WAAW,EAAE,CAAC;QACrE,mDAAmD;QACnD,cAAc,GAAG,MAAM,qCAAqC,CAAC,eAAe,EAAE,eAAe,CAAC,CAAC;IACnG,CAAC;SAAM,IAAI,CAAC,YAAY,IAAI,CAAC,SAAS,IAAI,cAAc,CAAC,EAAE,CAAC;QACxD,2DAA2D;QAC3D,cAAc,GAAG,MAAM,oBAAoB,CACvC,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,IAAI,cAAc,CAAC,EAClD,eAAe,EACf,eAAe,CAClB,CAAC;IACN,CAAC;SAAM,IAAI,YAAY,EAAE,CAAC;QACtB,cAAc,GAAG,YAAY,CAAC;IAClC,CAAC;IAED,IAAI,CAAC,cAAc,EAAE,CAAC;QAClB,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,mCAAmC,EAAE;YAClD,QAAQ,EAAE;gBACN,UAAU,EAAE,eAAe;gBAC3B,UAAU,EAAE,eAAe;aAC9B;SACJ,CAAC,CAAC;QACH,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;IACzD,CAAC;IAED,UAAU,GAAG,WAAW,CAAC,cAAc,CAAC,CAAC;IAEzC,IAAI,CAAC,UAAU,EAAE,GAAG,IAAI,CAAC,cAAc,EAAE,CAAC;QACtC,OAAO,CAAC,KAAK,CAAC,0BAA0B,EAAE,UAAU,CAAC,CAAC;QACtD,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,0BAA0B,EAAE;YACzC,QAAQ,EAAE;gBACN,UAAU,EAAE,eAAe;gBAC3B,UAAU,EAAE,eAAe;aAC9B;SACJ,CAAC,CAAC;QACH,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;IAChD,CAAC;IAED,OAAO,EAAE,QAAQ,EAAE,cAAc,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;AACzE,CAAC;AAED,MAAM,OAAO,iBAAkB,SAAQ,KAAK;IACxC,KAAK,CAAS;IACd,YAAY,OAAe,EAAE,KAAa;QACtC,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,mBAAmB,CAAC;QAChC,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;IACvB,CAAC;CACJ;AAED,MAAM,OAAO,QAAS,SAAQ,KAAK;IAC/B,MAAM,CAAS;IACf,YAAY,OAAe,EAAE,MAAc;QACvC,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,UAAU,CAAC;QACvB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACzB,CAAC;CACJ"}

package/lib/session/auth/domainRouting.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"domainRouting.d.ts","sourceRoot":"","sources":["../../../src/session/auth/domainRouting.ts"],"names":[],"mappings":"AAAA,OAAO,CAAC,MAAM,CAAC;IACX,UAAU,MAAM;QACZ,SAAS,CAAC,EAAE,UAAU,GAAG,SAAS,CAAC;KACtC;CACJ;AAED,wBAAgB,qBAAqB,CAAC,SAAS,CAAC,EAAE,MAAM,WAEvD;AAED,wBAAgB,2BAA2B,CAAC,SAAS,CAAC,EAAE,MAAM,WAE7D"}