@wavemaker-ai/react-runtime 1.0.0-rc.309 → 1.0.0-rc.314

package/store/slices/authSlice.js

@@ -1,35 +1,41 @@
-"use strict";
-
-var _interopRequireDefault = require("@babel/runtime/helpers/interopRequireDefault");
-Object.defineProperty(exports, "__esModule", {
-  value: true
-});
-exports.setToken = exports.setSecurityConfig = exports.setPageLoading = exports.setLoggedInUser = exports.setLandingPage = exports.setIsLoggedIn = exports.redirectToLogin = exports.navigateToLandingPage = exports.logout = exports.login = exports.loadSecurityInfo = exports.defaultUserState = exports["default"] = exports.clearError = exports.checkAccess = exports.canAccessPage = exports.XSRF_HEADER_NAME = exports.XSRF_COOKIE_NAME = exports.USER_ROLE = exports.SESSION = void 0;
-var _regenerator = _interopRequireDefault(require("@babel/runtime/regenerator"));
-var _asyncToGenerator2 = _interopRequireDefault(require("@babel/runtime/helpers/asyncToGenerator"));
-var _typeof2 = _interopRequireDefault(require("@babel/runtime/helpers/typeof"));
-var _defineProperty2 = _interopRequireDefault(require("@babel/runtime/helpers/defineProperty"));
-var _toolkit = require("@reduxjs/toolkit");
-var _axios = _interopRequireDefault(require("axios"));
-var _each = _interopRequireDefault(require("lodash-es/each"));
-var _navigationMiddleware = require("@wavemaker-ai/react-runtime/store/middleware/navigationMiddleware");
-var _appConfigSlice = require("@wavemaker-ai/react-runtime/store/slices/appConfigSlice");
-var _app = require("@wavemaker-ai/react-runtime/core/app.service");
-var _util = require("@wavemaker-ai/react-runtime/core/util");
-var _useAccess = require("@wavemaker-ai/react-runtime/hooks/useAccess");
-var _constants = require("../../core/constants");
-function ownKeys(e, r) { var t = Object.keys(e); if (Object.getOwnPropertySymbols) { var o = Object.getOwnPropertySymbols(e); r && (o = o.filter(function (r) { return Object.getOwnPropertyDescriptor(e, r).enumerable; })), t.push.apply(t, o); } return t; }
-function _objectSpread(e) { for (var r = 1; r < arguments.length; r++) { var t = null != arguments[r] ? arguments[r] : {}; r % 2 ? ownKeys(Object(t), !0).forEach(function (r) { (0, _defineProperty2["default"])(e, r, t[r]); }) : Object.getOwnPropertyDescriptors ? Object.defineProperties(e, Object.getOwnPropertyDescriptors(t)) : ownKeys(Object(t)).forEach(function (r) { Object.defineProperty(e, r, Object.getOwnPropertyDescriptor(t, r)); }); } return e; }
-var XSRF_COOKIE_NAME = exports.XSRF_COOKIE_NAME = process.env.NEXT_PUBLIC_XSRF_COOKIE_NAME || "wm_xsrf_token";
-var XSRF_HEADER_NAME = exports.XSRF_HEADER_NAME = process.env.NEXT_PUBLIC_XSRF_HEADER_NAME || "X-WM-XSRF-TOKEN";
-var SESSION = exports.SESSION = "SESSION";
-var USER_ROLE = exports.USER_ROLE = /*#__PURE__*/function (USER_ROLE) {
-  USER_ROLE["EVERYONE"] = "Everyone";
-  USER_ROLE["ANONYMOUS"] = "Anonymous";
-  USER_ROLE["AUTHENTICATED"] = "Authenticated";
-  return USER_ROLE;
-}({});
-var defaultUserState = exports.defaultUserState = {
+var __defProp = Object.defineProperty;
+var __defProps = Object.defineProperties;
+var __getOwnPropDescs = Object.getOwnPropertyDescriptors;
+var __getOwnPropSymbols = Object.getOwnPropertySymbols;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __propIsEnum = Object.prototype.propertyIsEnumerable;
+var __defNormalProp = (obj, key, value) => key in obj ? __defProp(obj, key, { enumerable: true, configurable: true, writable: true, value }) : obj[key] = value;
+var __spreadValues = (a, b) => {
+  for (var prop in b || (b = {}))
+    if (__hasOwnProp.call(b, prop))
+      __defNormalProp(a, prop, b[prop]);
+  if (__getOwnPropSymbols)
+    for (var prop of __getOwnPropSymbols(b)) {
+      if (__propIsEnum.call(b, prop))
+        __defNormalProp(a, prop, b[prop]);
+    }
+  return a;
+};
+var __spreadProps = (a, b) => __defProps(a, __getOwnPropDescs(b));
+import { createSlice, createAsyncThunk } from "@reduxjs/toolkit";
+import axios from "axios";
+import each from "lodash-es/each";
+import { getRouterInstance } from "../middleware/navigationMiddleware";
+import { getServiceDefinitions } from "./appConfigSlice";
+import { getCurrentRouteQueryParam, handle401 } from "../../core/app.service";
+import { checkPublicAccess, getValidJSON } from "../../core/util";
+import { clearAccessCache } from "../../hooks/useAccess";
+import { getActiveRoutingBasePath, PREVIEW_ROUTING_BASEPATH } from "../../core/constants";
+const XSRF_COOKIE_NAME = process.env.NEXT_PUBLIC_XSRF_COOKIE_NAME || "wm_xsrf_token";
+const XSRF_HEADER_NAME = process.env.NEXT_PUBLIC_XSRF_HEADER_NAME || "X-WM-XSRF-TOKEN";
+const SESSION = "SESSION";
+var USER_ROLE = /* @__PURE__ */ ((USER_ROLE2) => {
+  USER_ROLE2["EVERYONE"] = "Everyone";
+  USER_ROLE2["ANONYMOUS"] = "Anonymous";
+  USER_ROLE2["AUTHENTICATED"] = "Authenticated";
+  return USER_ROLE2;
+})(USER_ROLE || {});
+const defaultUserState = {
   isAuthenticated: false,
   isSecurityEnabled: false,
   roles: [],
@@ -39,7 +45,7 @@ var defaultUserState = exports.defaultUserState = {
   userAttributes: {},
   landingPage: ""
 };
-var initialState = {
+const initialState = {
   isLoggedIn: false,
   isPageLoading: false,
   loggedInUser: null,
@@ -48,479 +54,319 @@ var initialState = {
   landingPage: "",
   error: null
 };
-var saveUserInfo = function saveUserInfo(details, dispatch) {
-  var _details$userInfo, _details$userInfo2, _details$userInfo3, _details$userInfo4, _details$userInfo5, _details$userInfo6;
-  var user = _objectSpread(_objectSpread({}, details.userInfo), {}, {
+const saveUserInfo = (details, dispatch) => {
+  var _a, _b, _c, _d, _e, _f;
+  const user = __spreadProps(__spreadValues({}, details.userInfo), {
     isAuthenticated: Boolean(details.authenticated),
     isSecurityEnabled: Boolean(details.authenticated),
-    roles: Array.isArray((_details$userInfo = details.userInfo) === null || _details$userInfo === void 0 ? void 0 : _details$userInfo.userRoles) ? details.userInfo.userRoles : [],
-    name: ((_details$userInfo2 = details.userInfo) === null || _details$userInfo2 === void 0 ? void 0 : _details$userInfo2.userName) || "",
-    id: ((_details$userInfo3 = details.userInfo) === null || _details$userInfo3 === void 0 ? void 0 : _details$userInfo3.userId) || "",
-    tenantId: ((_details$userInfo4 = details.userInfo) === null || _details$userInfo4 === void 0 ? void 0 : _details$userInfo4.tenantId) || "",
-    userAttributes: (0, _typeof2["default"])((_details$userInfo5 = details.userInfo) === null || _details$userInfo5 === void 0 ? void 0 : _details$userInfo5.userAttributes) === "object" ? details.userInfo.userAttributes : {},
-    landingPage: ((_details$userInfo6 = details.userInfo) === null || _details$userInfo6 === void 0 ? void 0 : _details$userInfo6.landingPage) || ""
+    roles: Array.isArray((_a = details.userInfo) == null ? void 0 : _a.userRoles) ? details.userInfo.userRoles : [],
+    name: ((_b = details.userInfo) == null ? void 0 : _b.userName) || "",
+    id: ((_c = details.userInfo) == null ? void 0 : _c.userId) || "",
+    tenantId: ((_d = details.userInfo) == null ? void 0 : _d.tenantId) || "",
+    userAttributes: typeof ((_e = details.userInfo) == null ? void 0 : _e.userAttributes) === "object" ? details.userInfo.userAttributes : {},
+    landingPage: ((_f = details.userInfo) == null ? void 0 : _f.landingPage) || ""
   });
   dispatch(setLoggedInUser(user));
 };
-var loadSecurityInfo = exports.loadSecurityInfo = (0, _toolkit.createAsyncThunk)("auth/loadSecurityInfo", /*#__PURE__*/function () {
-  var _ref2 = (0, _asyncToGenerator2["default"])(/*#__PURE__*/_regenerator["default"].mark(function _callee(baseURL, _ref) {
-    var _document;
-    var dispatch, rejectWithValue, pathname, cookieToken, wmXsrfToken, response, details, secConfig, _secConfig$loginConfi, router, landingPage, loginPage, currentPageName, isOnLoginPage;
-    return _regenerator["default"].wrap(function _callee$(_context) {
-      while (1) switch (_context.prev = _context.next) {
-        case 0:
-          dispatch = _ref.dispatch, rejectWithValue = _ref.rejectWithValue;
-          pathname = window.location.pathname;
-          cookieToken = (_document = document) === null || _document === void 0 || (_document = _document.cookie) === null || _document === void 0 ? void 0 : _document.split(";").filter(function (item) {
-            return item.includes("wm_xsrf_token");
-          });
-          if (cookieToken && cookieToken.length > 0) {
-            wmXsrfToken = cookieToken[0].split("=")[1];
-            if (wmXsrfToken) {
-              dispatch(setToken(wmXsrfToken));
-            }
-          }
-          _context.prev = 4;
-          dispatch(setPageLoading(true));
-          _context.next = 8;
-          return _axios["default"].get("".concat(baseURL, "/services/security/info"));
-        case 8:
-          response = _context.sent;
-          details = response.data;
-          secConfig = details || {};
-          secConfig.isSecurityEnabled = !!(details !== null && details !== void 0 && details.securityEnabled);
-          if (!(typeof details !== "string" && (!(details !== null && details !== void 0 && details.securityEnabled) || details !== null && details !== void 0 && details.authenticated))) {
-            _context.next = 34;
-            break;
-          }
-          if (!(details !== null && details !== void 0 && details.authenticated)) {
-            _context.next = 28;
-            break;
-          }
-          router = (0, _navigationMiddleware.getRouterInstance)();
+const loadSecurityInfo = createAsyncThunk(
+  "auth/loadSecurityInfo",
+  async (baseURL, { dispatch, rejectWithValue }) => {
+    var _a, _b;
+    const pathname = window.location.pathname;
+    const cookieToken = (_a = document == null ? void 0 : document.cookie) == null ? void 0 : _a.split(";").filter((item) => item.includes("wm_xsrf_token"));
+    if (cookieToken && cookieToken.length > 0) {
+      const wmXsrfToken = cookieToken[0].split("=")[1];
+      if (wmXsrfToken) {
+        dispatch(setToken(wmXsrfToken));
+      }
+    }
+    try {
+      dispatch(setPageLoading(true));
+      const response = await axios.get(`${baseURL}/services/security/info`);
+      const details = response.data;
+      const secConfig = details || {};
+      secConfig.isSecurityEnabled = !!(details == null ? void 0 : details.securityEnabled);
+      if (typeof details !== "string" && (!(details == null ? void 0 : details.securityEnabled) || (details == null ? void 0 : details.authenticated))) {
+        if (details == null ? void 0 : details.authenticated) {
+          const router = getRouterInstance();
           saveUserInfo(details, dispatch);
-          _context.next = 18;
-          return dispatch((0, _appConfigSlice.getServiceDefinitions)(baseURL)).unwrap();
-        case 18:
+          await dispatch(getServiceDefinitions(baseURL)).unwrap();
           dispatch(setIsLoggedIn(true));
-
-          // Clear access cache when user logs in (permissions might have changed)
-          (0, _useAccess.clearAccessCache)();
-          landingPage = details.userInfo.landingPage;
-          loginPage = (_secConfig$loginConfi = secConfig.loginConfig) === null || _secConfig$loginConfi === void 0 ? void 0 : _secConfig$loginConfi.pageName; // Store the landing page as a full routable path so navigateToLandingPage
-          // can use it directly without accidentally producing a relative URL.
+          clearAccessCache();
+          const landingPage = details.userInfo.landingPage;
+          const loginPage = (_b = secConfig.loginConfig) == null ? void 0 : _b.pageName;
           if (landingPage) {
-            dispatch(setLandingPage("/".concat((0, _constants.getActiveRoutingBasePath)(), "/").concat(landingPage)));
+            dispatch(setLandingPage(`/${getActiveRoutingBasePath()}/${landingPage}`));
           }
-
-          // Extract the last segment of the pathname (the page name)
-          currentPageName = pathname.split("/").filter(Boolean).pop();
-          isOnLoginPage = currentPageName === loginPage;
+          const currentPageName = pathname.split("/").filter(Boolean).pop();
+          const isOnLoginPage = currentPageName === loginPage;
           if (router && landingPage && isOnLoginPage) {
-            router.push("/".concat((0, _constants.getActiveRoutingBasePath)(), "/").concat(landingPage));
-          }
-          _context.next = 30;
-          break;
-        case 28:
-          _context.next = 30;
-          return dispatch((0, _appConfigSlice.getServiceDefinitions)(baseURL)).unwrap();
-        case 30:
-          dispatch(setSecurityConfig(secConfig));
-          return _context.abrupt("return", Promise.resolve(details));
-        case 34:
-          saveUserInfo(details, dispatch);
-          _context.next = 37;
-          return dispatch((0, _appConfigSlice.getServiceDefinitions)(baseURL)).unwrap();
-        case 37:
-          dispatch(setSecurityConfig(secConfig));
-          // if security is not enabled don't redirect to login page
-          if (secConfig.isSecurityEnabled) {
-            _context.next = 40;
-            break;
+            router.push(`/${getActiveRoutingBasePath()}/${landingPage}`);
           }
-          return _context.abrupt("return", Promise.resolve({}));
-        case 40:
-          return _context.abrupt("return", Promise.resolve({}));
-        case 41:
-          _context.next = 48;
-          break;
-        case 43:
-          _context.prev = 43;
-          _context.t0 = _context["catch"](4);
-          _context.next = 47;
-          return dispatch(redirectToLogin({})).unwrap();
-        case 47:
-          throw _context.t0;
-        case 48:
-          _context.prev = 48;
-          dispatch(setPageLoading(false));
-          return _context.finish(48);
-        case 51:
-        case "end":
-          return _context.stop();
-      }
-    }, _callee, null, [[4, 43, 48, 51]]);
-  }));
-  return function (_x, _x2) {
-    return _ref2.apply(this, arguments);
-  };
-}());
-var login = exports.login = (0, _toolkit.createAsyncThunk)("auth/login", /*#__PURE__*/function () {
-  var _ref4 = (0, _asyncToGenerator2["default"])(/*#__PURE__*/_regenerator["default"].mark(function _callee2(options, _ref3) {
-    var dispatch, getState, rejectWithValue, payload, response, xsrfCookieValue, _error$response, _error$response2, _error$response3, _error$config, _error$config2, errorInfo;
-    return _regenerator["default"].wrap(function _callee2$(_context2) {
-      while (1) switch (_context2.prev = _context2.next) {
-        case 0:
-          dispatch = _ref3.dispatch, getState = _ref3.getState, rejectWithValue = _ref3.rejectWithValue;
-          payload = "";
-          (0, _each["default"])(options.formData, function (value, name) {
-            payload += (payload ? "&" : "") + encodeURIComponent(name) + "=" + encodeURIComponent(value);
-          });
-          _context2.prev = 3;
-          _axios["default"].defaults.withCredentials = true;
-          _context2.next = 7;
-          return _axios["default"].post("".concat(options.baseURL, "/j_spring_security_check"), payload, {
-            withCredentials: true,
-            headers: {
-              "Content-Type": "application/x-www-form-urlencoded",
-              "X-Requested-With": "XMLHttpRequest"
-            }
-          });
-        case 7:
-          response = _context2.sent;
-          xsrfCookieValue = response.data ? response.data[XSRF_COOKIE_NAME] : "";
-          dispatch(setToken(xsrfCookieValue));
-          dispatch(setIsLoggedIn(true));
-          _context2.next = 13;
-          return dispatch(loadSecurityInfo(options.baseURL)).unwrap();
-        case 13:
-          // Clear access cache after successful login
-          (0, _useAccess.clearAccessCache)();
-          return _context2.abrupt("return", getState().auth.loggedInUser);
-        case 17:
-          _context2.prev = 17;
-          _context2.t0 = _context2["catch"](3);
-          console.error("Login error:", _context2.t0);
-
-          // Extract relevant error information
-          errorInfo = {
-            message: _context2.t0.message,
-            status: (_error$response = _context2.t0.response) === null || _error$response === void 0 ? void 0 : _error$response.status,
-            statusText: (_error$response2 = _context2.t0.response) === null || _error$response2 === void 0 ? void 0 : _error$response2.statusText,
-            data: (_error$response3 = _context2.t0.response) === null || _error$response3 === void 0 ? void 0 : _error$response3.data,
-            url: (_error$config = _context2.t0.config) === null || _error$config === void 0 ? void 0 : _error$config.url,
-            method: (_error$config2 = _context2.t0.config) === null || _error$config2 === void 0 ? void 0 : _error$config2.method
-          };
-          return _context2.abrupt("return", rejectWithValue(errorInfo));
-        case 22:
-        case "end":
-          return _context2.stop();
+        } else {
+          await dispatch(getServiceDefinitions(baseURL)).unwrap();
+        }
+        dispatch(setSecurityConfig(secConfig));
+        return Promise.resolve(details);
+      } else {
+        saveUserInfo(details, dispatch);
+        await dispatch(getServiceDefinitions(baseURL)).unwrap();
+        dispatch(setSecurityConfig(secConfig));
+        if (!secConfig.isSecurityEnabled) {
+          return Promise.resolve({});
+        }
+        return Promise.resolve({});
       }
-    }, _callee2, null, [[3, 17]]);
-  }));
-  return function (_x3, _x4) {
-    return _ref4.apply(this, arguments);
-  };
-}());
-var logout = exports.logout = (0, _toolkit.createAsyncThunk)("auth/logout", /*#__PURE__*/function () {
-  var _ref6 = (0, _asyncToGenerator2["default"])(/*#__PURE__*/_regenerator["default"].mark(function _callee3(options, _ref5) {
-    var dispatch, getState, responseData, response, redirectURI, router, isPreview, _state$auth, state, loginPage;
-    return _regenerator["default"].wrap(function _callee3$(_context3) {
-      while (1) switch (_context3.prev = _context3.next) {
-        case 0:
-          dispatch = _ref5.dispatch, getState = _ref5.getState;
-          responseData = null;
-          _context3.prev = 2;
-          _context3.next = 5;
-          return _axios["default"].post("".concat(options.baseURL, "/j_spring_security_logout"), null, {
-            withCredentials: true,
-            headers: {
-              "X-Requested-With": "XMLHttpRequest"
-            }
-          });
-        case 5:
-          response = _context3.sent;
-          responseData = response === null || response === void 0 ? void 0 : response.data;
-          redirectURI = (0, _util.getValidJSON)(response === null || response === void 0 ? void 0 : response.data);
-          console.debug("Logout response", responseData, redirectURI);
-          if (redirectURI && redirectURI.result) {
-            window.location.href = redirectURI.result;
-          }
-          _context3.next = 15;
-          break;
-        case 12:
-          _context3.prev = 12;
-          _context3.t0 = _context3["catch"](2);
-          console.error("Logout error:", _context3.t0);
-        case 15:
-          _context3.prev = 15;
-          _context3.next = 18;
-          return dispatch(loadSecurityInfo(options.baseURL)).unwrap();
-        case 18:
-          dispatch(setIsLoggedIn(false));
-          dispatch(setLandingPage(""));
-
-          // Clear access cache when user logs out
-          (0, _useAccess.clearAccessCache)();
-
-          // In preview mode the router is registered; navigate to the login page so
-          // the SPA reflects the logged-out state. In production the server-side
-          // redirect (window.location.href above) or Next.js routing handles this.
-          router = (0, _navigationMiddleware.getRouterInstance)();
-          isPreview = (0, _constants.getActiveRoutingBasePath)() === _constants.PREVIEW_ROUTING_BASEPATH;
-          if (router && isPreview) {
-            state = getState();
-            loginPage = ((_state$auth = state.auth) === null || _state$auth === void 0 || (_state$auth = _state$auth.securityConfig) === null || _state$auth === void 0 || (_state$auth = _state$auth.loginConfig) === null || _state$auth === void 0 ? void 0 : _state$auth.pageName) || "Login";
-            router.replace("/".concat(_constants.PREVIEW_ROUTING_BASEPATH, "/").concat(loginPage));
-          }
-          return _context3.finish(15);
-        case 25:
-          return _context3.abrupt("return", Promise.resolve(responseData));
-        case 26:
-        case "end":
-          return _context3.stop();
-      }
-    }, _callee3, null, [[2, 12, 15, 25]]);
-  }));
-  return function (_x5, _x6) {
-    return _ref6.apply(this, arguments);
-  };
-}());
-var canAccessPage = exports.canAccessPage = (0, _toolkit.createAsyncThunk)("auth/canAccessPage", /*#__PURE__*/function () {
-  var _ref9 = (0, _asyncToGenerator2["default"])(/*#__PURE__*/_regenerator["default"].mark(function _callee4(_ref7, _ref8) {
-    var _state$auth$loggedInU, _state$auth$securityC, _state$info$appConfig, _routeConfig$allowedR;
-    var pageName, getState, dispatch, state, userRoles, isSecurityEnabled, pages, routeConfig, hasRequiredRole;
-    return _regenerator["default"].wrap(function _callee4$(_context4) {
-      while (1) switch (_context4.prev = _context4.next) {
-        case 0:
-          pageName = _ref7.pageName;
-          getState = _ref8.getState, dispatch = _ref8.dispatch;
-          state = getState();
-          userRoles = ((_state$auth$loggedInU = state.auth.loggedInUser) === null || _state$auth$loggedInU === void 0 ? void 0 : _state$auth$loggedInU.roles) || [];
-          isSecurityEnabled = (_state$auth$securityC = state.auth.securityConfig) === null || _state$auth$securityC === void 0 ? void 0 : _state$auth$securityC.isSecurityEnabled;
-          pages = ((_state$info$appConfig = state.info.appConfig) === null || _state$info$appConfig === void 0 ? void 0 : _state$info$appConfig.pages) || [];
-          routeConfig = pages.find(function (route) {
-            return route.name === pageName;
-          });
-          if (!(!isSecurityEnabled || !routeConfig)) {
-            _context4.next = 11;
-            break;
-          }
-          return _context4.abrupt("return", true);
-        case 11:
-          if (!((!routeConfig.allowedRoles || routeConfig.allowedRoles.length === 0) && (0, _util.checkPublicAccess)(pageName))) {
-            _context4.next = 13;
-            break;
-          }
-          return _context4.abrupt("return", true);
-        case 13:
-          hasRequiredRole = routeConfig === null || routeConfig === void 0 || (_routeConfig$allowedR = routeConfig.allowedRoles) === null || _routeConfig$allowedR === void 0 ? void 0 : _routeConfig$allowedR.some(function (role) {
-            return userRoles.includes(role);
-          });
-          if (!hasRequiredRole) {
-            dispatch(redirectToLogin({
-              redirectTo: pageName
-            })).unwrap();
-          }
-          return _context4.abrupt("return", hasRequiredRole);
-        case 16:
-        case "end":
-          return _context4.stop();
+    } catch (error) {
+      await dispatch(redirectToLogin({})).unwrap();
+      throw error;
+    } finally {
+      dispatch(setPageLoading(false));
+    }
+  }
+);
+const login = createAsyncThunk(
+  "auth/login",
+  async (options, { dispatch, getState, rejectWithValue }) => {
+    var _a, _b, _c, _d, _e;
+    let payload = "";
+    each(options.formData, (value, name) => {
+      payload += (payload ? "&" : "") + encodeURIComponent(name) + "=" + encodeURIComponent(value);
+    });
+    try {
+      axios.defaults.withCredentials = true;
+      const response = await axios.post(`${options.baseURL}/j_spring_security_check`, payload, {
+        withCredentials: true,
+        headers: {
+          "Content-Type": "application/x-www-form-urlencoded",
+          "X-Requested-With": "XMLHttpRequest"
+        }
+      });
+      const xsrfCookieValue = response.data ? response.data[XSRF_COOKIE_NAME] : "";
+      dispatch(setToken(xsrfCookieValue));
+      dispatch(setIsLoggedIn(true));
+      await dispatch(loadSecurityInfo(options.baseURL)).unwrap();
+      clearAccessCache();
+      return getState().auth.loggedInUser;
+    } catch (error) {
+      console.error("Login error:", error);
+      const errorInfo = {
+        message: error.message,
+        status: (_a = error.response) == null ? void 0 : _a.status,
+        statusText: (_b = error.response) == null ? void 0 : _b.statusText,
+        data: (_c = error.response) == null ? void 0 : _c.data,
+        url: (_d = error.config) == null ? void 0 : _d.url,
+        method: (_e = error.config) == null ? void 0 : _e.method
+      };
+      return rejectWithValue(errorInfo);
+    }
+  }
+);
+const logout = createAsyncThunk(
+  "auth/logout",
+  async (options, { dispatch, getState }) => {
+    var _a, _b, _c;
+    let responseData = null;
+    try {
+      const response = await axios.post(`${options.baseURL}/j_spring_security_logout`, null, {
+        withCredentials: true,
+        headers: {
+          "X-Requested-With": "XMLHttpRequest"
+        }
+      });
+      responseData = response == null ? void 0 : response.data;
+      const redirectURI = getValidJSON(response == null ? void 0 : response.data);
+      console.debug("Logout response", responseData, redirectURI);
+      if (redirectURI && redirectURI.result) {
+        window.location.href = redirectURI.result;
       }
-    }, _callee4);
-  }));
-  return function (_x7, _x8) {
-    return _ref9.apply(this, arguments);
-  };
-}());
-var checkAccess = exports.checkAccess = (0, _toolkit.createAsyncThunk)("auth/checkAccess", /*#__PURE__*/function () {
-  var _ref10 = (0, _asyncToGenerator2["default"])(/*#__PURE__*/_regenerator["default"].mark(function _callee5(_ref0, _ref1) {
-    var _state$auth$loggedInU2, _state$auth$loggedInU3, _state$auth$securityC2, _state$info$appConfig2, _state$info$prefabs$n, _state$info$appConfig3;
-    var name, type, getState, dispatch, state, userRoles, isAuthenticated, isSecurityEnabled, configs, config, allowedRoles, hasRole;
-    return _regenerator["default"].wrap(function _callee5$(_context5) {
-      while (1) switch (_context5.prev = _context5.next) {
-        case 0:
-          name = _ref0.name, type = _ref0.type;
-          getState = _ref1.getState, dispatch = _ref1.dispatch;
-          state = getState();
-          userRoles = ((_state$auth$loggedInU2 = state.auth.loggedInUser) === null || _state$auth$loggedInU2 === void 0 ? void 0 : _state$auth$loggedInU2.roles) || [];
-          isAuthenticated = ((_state$auth$loggedInU3 = state.auth.loggedInUser) === null || _state$auth$loggedInU3 === void 0 ? void 0 : _state$auth$loggedInU3.isAuthenticated) || false;
-          isSecurityEnabled = (_state$auth$securityC2 = state.auth.securityConfig) === null || _state$auth$securityC2 === void 0 ? void 0 : _state$auth$securityC2.isSecurityEnabled; // If security is not enabled, allow access to everything
-          if (isSecurityEnabled) {
-            _context5.next = 8;
-            break;
-          }
-          return _context5.abrupt("return", true);
-        case 8:
-          // Get the appropriate config based on type
-          configs = type === "PAGE" ? ((_state$info$appConfig2 = state.info.appConfig) === null || _state$info$appConfig2 === void 0 ? void 0 : _state$info$appConfig2.pages) || [] : type === "PREFAB" ? ((_state$info$prefabs$n = state.info.prefabs[name]) === null || _state$info$prefabs$n === void 0 ? void 0 : _state$info$prefabs$n.pages) || [] : ((_state$info$appConfig3 = state.info.appConfig) === null || _state$info$appConfig3 === void 0 ? void 0 : _state$info$appConfig3.partials) || [];
-          config = type === "PREFAB" ? configs[0] : configs === null || configs === void 0 ? void 0 : configs.find(function (item) {
-            return item.name.toLowerCase() === name.toLowerCase();
-          }); // If no config found, deny access for security
-          if (config) {
-            _context5.next = 12;
-            break;
-          }
-          return _context5.abrupt("return", false);
-        case 12:
-          _context5.t0 = config.permission;
-          _context5.next = _context5.t0 === "PermitAll" ? 15 : _context5.t0 === "Authenticated" ? 16 : _context5.t0 === "Role" ? 17 : 24;
-          break;
-        case 15:
-          return _context5.abrupt("return", true);
-        case 16:
-          return _context5.abrupt("return", isAuthenticated);
-        case 17:
-          if (isAuthenticated) {
-            _context5.next = 19;
-            break;
-          }
-          return _context5.abrupt("return", false);
-        case 19:
-          // Check if user has any of the required roles
-          allowedRoles = config.allowedRoles || [];
-          if (!(allowedRoles.length === 0)) {
-            _context5.next = 22;
-            break;
-          }
-          return _context5.abrupt("return", false);
-        case 22:
-          hasRole = allowedRoles.some(function (role) {
-            return userRoles.includes(role);
-          });
-          return _context5.abrupt("return", hasRole);
-        case 24:
-          return _context5.abrupt("return", false);
-        case 25:
-        case "end":
-          return _context5.stop();
+    } catch (error) {
+      console.error("Logout error:", error);
+    } finally {
+      await dispatch(loadSecurityInfo(options.baseURL)).unwrap();
+      dispatch(setIsLoggedIn(false));
+      dispatch(setLandingPage(""));
+      clearAccessCache();
+      const router = getRouterInstance();
+      const isPreview = getActiveRoutingBasePath() === PREVIEW_ROUTING_BASEPATH;
+      if (router && isPreview) {
+        const state = getState();
+        const loginPage = ((_c = (_b = (_a = state.auth) == null ? void 0 : _a.securityConfig) == null ? void 0 : _b.loginConfig) == null ? void 0 : _c.pageName) || "Login";
+        router.replace(`/${PREVIEW_ROUTING_BASEPATH}/${loginPage}`);
       }
-    }, _callee5);
-  }));
-  return function (_x9, _x0) {
-    return _ref10.apply(this, arguments);
-  };
-}());
-var navigateToLandingPage = exports.navigateToLandingPage = (0, _toolkit.createAsyncThunk)("auth/navigate/landingpage", /*#__PURE__*/function () {
-  var _ref13 = (0, _asyncToGenerator2["default"])(/*#__PURE__*/_regenerator["default"].mark(function _callee6(_ref11, _ref12) {
-    var baseUrl, pageName, getState, dispatch, state, _state$auth2, auth, redirectTo, landingPageToNavigate, _state$info, _auth$loggedInUser, homePage, userLandingPage, router;
-    return _regenerator["default"].wrap(function _callee6$(_context6) {
-      while (1) switch (_context6.prev = _context6.next) {
-        case 0:
-          baseUrl = _ref11.baseUrl, pageName = _ref11.pageName;
-          getState = _ref12.getState, dispatch = _ref12.dispatch;
-          state = getState();
-          _state$auth2 = state.auth, auth = _state$auth2 === void 0 ? {} : _state$auth2;
-          redirectTo = (0, _app.getCurrentRouteQueryParam)("redirectTo"); // Priority: redirectTo param > stored landingPage > user's default landingPage > Main
-          if (redirectTo) {
-            // Use the redirectTo parameter from URL
-            landingPageToNavigate = "/".concat((0, _constants.getActiveRoutingBasePath)(), "/").concat(redirectTo);
-          } else if (auth.landingPage) {
-            // Use stored landing page
-            landingPageToNavigate = auth.landingPage;
-          } else {
-            // Use user's default landing page or Main. The landingPage from the server
-            // is a plain page name (e.g. "Main"), so always build the full routable path.
-            homePage = ((_state$info = state.info) === null || _state$info === void 0 || (_state$info = _state$info.appConfig) === null || _state$info === void 0 || (_state$info = _state$info.appProperties) === null || _state$info === void 0 ? void 0 : _state$info.homePage) || "Main";
-            userLandingPage = (_auth$loggedInUser = auth.loggedInUser) === null || _auth$loggedInUser === void 0 ? void 0 : _auth$loggedInUser.landingPage;
-            landingPageToNavigate = userLandingPage ? "/".concat((0, _constants.getActiveRoutingBasePath)(), "/").concat(userLandingPage) : "/".concat((0, _constants.getActiveRoutingBasePath)(), "/").concat(homePage);
-          }
-          router = (0, _navigationMiddleware.getRouterInstance)();
-          if (router) {
-            router.push(landingPageToNavigate);
-          }
-
-          // Clear the stored landing page after navigation
-          if (auth.landingPage) {
-            dispatch(setLandingPage(""));
-          }
-        case 9:
-        case "end":
-          return _context6.stop();
+    }
+    return Promise.resolve(responseData);
+  }
+);
+const canAccessPage = createAsyncThunk(
+  "auth/canAccessPage",
+  async ({ pageName }, { getState, dispatch }) => {
+    var _a, _b, _c, _d;
+    const state = getState();
+    const userRoles = ((_a = state.auth.loggedInUser) == null ? void 0 : _a.roles) || [];
+    const isSecurityEnabled = (_b = state.auth.securityConfig) == null ? void 0 : _b.isSecurityEnabled;
+    const pages = ((_c = state.info.appConfig) == null ? void 0 : _c.pages) || [];
+    const routeConfig = pages.find((route) => route.name === pageName);
+    if (!isSecurityEnabled || !routeConfig) {
+      return true;
+    } else if ((!routeConfig.allowedRoles || routeConfig.allowedRoles.length === 0) && checkPublicAccess(pageName)) {
+      return true;
+    }
+    const hasRequiredRole = (_d = routeConfig == null ? void 0 : routeConfig.allowedRoles) == null ? void 0 : _d.some(
+      (role) => userRoles.includes(role)
+    );
+    if (!hasRequiredRole) {
+      dispatch(redirectToLogin({ redirectTo: pageName })).unwrap();
+    }
+    return hasRequiredRole;
+  }
+);
+const checkAccess = createAsyncThunk(
+  "auth/checkAccess",
+  async ({ name, type }, { getState, dispatch }) => {
+    var _a, _b, _c, _d, _e, _f;
+    const state = getState();
+    const userRoles = ((_a = state.auth.loggedInUser) == null ? void 0 : _a.roles) || [];
+    const isAuthenticated = ((_b = state.auth.loggedInUser) == null ? void 0 : _b.isAuthenticated) || false;
+    const isSecurityEnabled = (_c = state.auth.securityConfig) == null ? void 0 : _c.isSecurityEnabled;
+    if (!isSecurityEnabled) {
+      return true;
+    }
+    const configs = type === "PAGE" ? ((_d = state.info.appConfig) == null ? void 0 : _d.pages) || [] : type === "PREFAB" ? ((_e = state.info.prefabs[name]) == null ? void 0 : _e.pages) || [] : ((_f = state.info.appConfig) == null ? void 0 : _f.partials) || [];
+    const config = type === "PREFAB" ? configs[0] : configs == null ? void 0 : configs.find((item) => item.name.toLowerCase() === name.toLowerCase());
+    if (!config) {
+      return false;
+    }
+    switch (config.permission) {
+      case "PermitAll":
+        return true;
+      case "Authenticated":
+        return isAuthenticated;
+      case "Role":
+        if (!isAuthenticated) {
+          return false;
+        }
+        const allowedRoles = config.allowedRoles || [];
+        if (allowedRoles.length === 0) {
+          return false;
+        }
+        const hasRole = allowedRoles.some((role) => userRoles.includes(role));
+        return hasRole;
+      default:
+        return false;
+    }
+  }
+);
+const navigateToLandingPage = createAsyncThunk(
+  "auth/navigate/landingpage",
+  async ({ baseUrl, pageName }, { getState, dispatch }) => {
+    var _a, _b, _c, _d;
+    const state = getState();
+    const { auth = {} } = state;
+    const redirectTo = getCurrentRouteQueryParam("redirectTo");
+    let landingPageToNavigate;
+    if (redirectTo) {
+      landingPageToNavigate = `/${getActiveRoutingBasePath()}/${redirectTo}`;
+    } else if (auth.landingPage) {
+      landingPageToNavigate = auth.landingPage;
+    } else {
+      const homePage = ((_c = (_b = (_a = state.info) == null ? void 0 : _a.appConfig) == null ? void 0 : _b.appProperties) == null ? void 0 : _c.homePage) || "Main";
+      const userLandingPage = (_d = auth.loggedInUser) == null ? void 0 : _d.landingPage;
+      landingPageToNavigate = userLandingPage ? `/${getActiveRoutingBasePath()}/${userLandingPage}` : `/${getActiveRoutingBasePath()}/${homePage}`;
+    }
+    const router = getRouterInstance();
+    if (router) {
+      router.push(landingPageToNavigate);
+    }
+    if (auth.landingPage) {
+      dispatch(setLandingPage(""));
+    }
+  }
+);
+const redirectToLogin = createAsyncThunk(
+  "auth/navigate/loginPage",
+  async ({ redirectTo, securityConfig }, { getState }) => {
+    var _a, _b, _c, _d, _e;
+    const state = getState();
+    const homePage = (_c = (_b = (_a = state.info) == null ? void 0 : _a.appConfig) == null ? void 0 : _b.appProperties) == null ? void 0 : _c.homePage;
+    const isPublicPage = checkPublicAccess();
+    if (((_d = securityConfig == null ? void 0 : securityConfig.loginConfig) == null ? void 0 : _d.type) === "SSO" && !isPublicPage) {
+      handle401();
+    } else {
+      const loginPage = ((_e = securityConfig == null ? void 0 : securityConfig.loginConfig) == null ? void 0 : _e.pageName) || "Login";
+      if (redirectTo && !redirectTo.startsWith("/" + loginPage)) {
+        setLandingPage(`/${getActiveRoutingBasePath()}/${redirectTo}`);
       }
-    }, _callee6);
-  }));
-  return function (_x1, _x10) {
-    return _ref13.apply(this, arguments);
-  };
-}());
-var redirectToLogin = exports.redirectToLogin = (0, _toolkit.createAsyncThunk)("auth/navigate/loginPage", /*#__PURE__*/function () {
-  var _ref16 = (0, _asyncToGenerator2["default"])(/*#__PURE__*/_regenerator["default"].mark(function _callee7(_ref14, _ref15) {
-    var _info, _securityConfig$login;
-    var redirectTo, securityConfig, getState, state, homePage, isPublicPage, _securityConfig$login2, loginPage, router, loginPath, loginUrl;
-    return _regenerator["default"].wrap(function _callee7$(_context7) {
-      while (1) switch (_context7.prev = _context7.next) {
-        case 0:
-          redirectTo = _ref14.redirectTo, securityConfig = _ref14.securityConfig;
-          getState = _ref15.getState;
-          state = getState();
-          homePage = (_info = state.info) === null || _info === void 0 || (_info = _info.appConfig) === null || _info === void 0 || (_info = _info.appProperties) === null || _info === void 0 ? void 0 : _info.homePage;
-          isPublicPage = (0, _util.checkPublicAccess)();
-          if ((securityConfig === null || securityConfig === void 0 || (_securityConfig$login = securityConfig.loginConfig) === null || _securityConfig$login === void 0 ? void 0 : _securityConfig$login.type) === "SSO" && !isPublicPage) {
-            // const authUrl = `${baseUrl}/services/security/ssologin`;
-            // (window.parent || window).location.href = authUrl;
-            (0, _app.handle401)();
-          } else {
-            loginPage = (securityConfig === null || securityConfig === void 0 || (_securityConfig$login2 = securityConfig.loginConfig) === null || _securityConfig$login2 === void 0 ? void 0 : _securityConfig$login2.pageName) || "Login"; // Store landing page for post-login redirect
-            if (redirectTo && !redirectTo.startsWith("/" + loginPage)) {
-              setLandingPage("/".concat((0, _constants.getActiveRoutingBasePath)(), "/").concat(redirectTo));
-            }
-            router = (0, _navigationMiddleware.getRouterInstance)();
-            if (router && !isPublicPage) {
-              // Build login URL with redirectTo query parameter
-              loginPath = "/".concat((0, _constants.getActiveRoutingBasePath)(), "/").concat(loginPage);
-              loginUrl = redirectTo && redirectTo.toLowerCase() !== homePage.toLowerCase() ? "".concat(loginPath, "?redirectTo=").concat(redirectTo) : loginPath;
-              router.push(loginUrl);
-            }
-          }
-        case 6:
-        case "end":
-          return _context7.stop();
+      const router = getRouterInstance();
+      if (router && !isPublicPage) {
+        const loginPath = `/${getActiveRoutingBasePath()}/${loginPage}`;
+        const loginUrl = redirectTo && redirectTo.toLowerCase() !== homePage.toLowerCase() ? `${loginPath}?redirectTo=${redirectTo}` : loginPath;
+        router.push(loginUrl);
       }
-    }, _callee7);
-  }));
-  return function (_x11, _x12) {
-    return _ref16.apply(this, arguments);
-  };
-}());
-var authSlice = (0, _toolkit.createSlice)({
+    }
+  }
+);
+const authSlice = createSlice({
   name: "auth",
-  initialState: initialState,
+  initialState,
   reducers: {
-    setIsLoggedIn: function setIsLoggedIn(state, action) {
+    setIsLoggedIn: (state, action) => {
       state.isLoggedIn = action.payload;
     },
-    setLoggedInUser: function setLoggedInUser(state, action) {
-      state.loggedInUser = action.payload ? _objectSpread(_objectSpread(_objectSpread({}, defaultUserState), action.payload), {}, {
+    setLoggedInUser: (state, action) => {
+      state.loggedInUser = action.payload ? __spreadProps(__spreadValues(__spreadValues({}, defaultUserState), action.payload), {
         roles: action.payload.roles || [],
         userAttributes: action.payload.userAttributes || {},
         isAuthenticated: Boolean(action.payload.isAuthenticated),
         isSecurityEnabled: Boolean(action.payload.isSecurityEnabled)
       }) : defaultUserState;
     },
-    setSecurityConfig: function setSecurityConfig(state, action) {
+    setSecurityConfig: (state, action) => {
       state.securityConfig = action.payload;
     },
-    setToken: function setToken(state, action) {
+    setToken: (state, action) => {
       state.token = action.payload;
     },
-    setLandingPage: function setLandingPage(state, action) {
+    setLandingPage: (state, action) => {
       state.landingPage = action.payload;
     },
-    setPageLoading: function setPageLoading(state, action) {
+    setPageLoading: (state, action) => {
       state.isPageLoading = action.payload;
     },
-    clearError: function clearError(state) {
+    clearError: (state) => {
       state.error = null;
     }
   }
 });
-var _authSlice$actions = authSlice.actions,
-  setIsLoggedIn = exports.setIsLoggedIn = _authSlice$actions.setIsLoggedIn,
-  setLoggedInUser = exports.setLoggedInUser = _authSlice$actions.setLoggedInUser,
-  setSecurityConfig = exports.setSecurityConfig = _authSlice$actions.setSecurityConfig,
-  setToken = exports.setToken = _authSlice$actions.setToken,
-  setLandingPage = exports.setLandingPage = _authSlice$actions.setLandingPage,
-  setPageLoading = exports.setPageLoading = _authSlice$actions.setPageLoading,
-  clearError = exports.clearError = _authSlice$actions.clearError;
-var _default = exports["default"] = authSlice.reducer;
+const {
+  setIsLoggedIn,
+  setLoggedInUser,
+  setSecurityConfig,
+  setToken,
+  setLandingPage,
+  setPageLoading,
+  clearError
+} = authSlice.actions;
+var authSlice_default = authSlice.reducer;
+export {
+  SESSION,
+  USER_ROLE,
+  XSRF_COOKIE_NAME,
+  XSRF_HEADER_NAME,
+  canAccessPage,
+  checkAccess,
+  clearError,
+  authSlice_default as default,
+  defaultUserState,
+  loadSecurityInfo,
+  login,
+  logout,
+  navigateToLandingPage,
+  redirectToLogin,
+  setIsLoggedIn,
+  setLandingPage,
+  setLoggedInUser,
+  setPageLoading,
+  setSecurityConfig,
+  setToken
+};