@webda/google-auth 4.0.0-beta.2 → 4.0.0-beta.3

package/README.md

@@ -0,0 +1,119 @@
+# @webda/google-auth module
+
+This module is part of Webda Application Framework that allows you to quickly develop applications with all modern prerequisites: Security, Extensibility, GraphQL, REST, CloudNative [https://webda.io](https://webda.io)
+
+<img src="https://webda.io/images/webda.svg" width="128" />
+
+![CI](https://github.com/loopingz/webda.io/workflows/CI/badge.svg)
+
+[![Join the chat at https://gitter.im/loopingz/webda](https://badges.gitter.im/loopingz/webda.svg)](https://gitter.im/loopingz/webda?utm_source=badge&utm_medium=badge&utm_campaign=pr-badge&utm_content=badge)
+[![codecov](https://codecov.io/gh/loopingz/webda.io/branch/main/graph/badge.svg?token=8N9DNM3K3O)](https://codecov.io/gh/loopingz/webda.io)
+[![SonarCloud.io](https://sonarcloud.io/api/project_badges/measure?project=loopingz_webda.io&metric=alert_status)](https://sonarcloud.io/summary/new_code?id=loopingz_webda.io)
+![CodeQL](https://github.com/loopingz/webda.io/workflows/CodeQL/badge.svg)
+
+<!-- README_HEADER -->
+
+# @webda/google-auth
+
+> Google OAuth 2.0 authentication provider for Webda — adds `GET /auth/google` and callback handling to your application so users can sign in with their Google account.
+
+## When to use it
+
+- You want to add "Sign in with Google" to a Webda application without hand-rolling OAuth flows.
+- You need an offline access token (e.g. for server-side Google API calls on behalf of the user).
+- You are building a multi-provider auth system alongside other `@webda/oauth` providers.
+
+## Install
+
+```bash
+pnpm add @webda/google-auth
+```
+
+## Configuration
+
+```json
+{
+  "services": {
+    "Authentication": {
+      "type": "Authentication",
+      "providers": {
+        "google": {
+          "type": "GoogleAuthentication",
+          "client_id": "${GOOGLE_CLIENT_ID}",
+          "client_secret": "${GOOGLE_CLIENT_SECRET}",
+          "access_type": "online",
+          "redirect_uri": "https://myapp.example.com/auth/google/callback"
+        }
+      }
+    }
+  }
+}
+```
+
+| Parameter | Type | Default | Required | Description |
+|---|---|---|---|---|
+| `client_id` | string | — | Yes | Google OAuth 2.0 Client ID from Google Cloud Console |
+| `client_secret` | string | — | Yes | Google OAuth 2.0 Client Secret |
+| `access_type` | `"online"` \| `"offline"` | `"online"` | No | `"offline"` returns a refresh token for server-side API access |
+| `project_id` | string | — | No | Google Cloud Project ID (informational) |
+| `auth_options` | object | — | No | Additional parameters forwarded to the Google authorization URL |
+| `redirects.use_referer` | boolean | — | No | Redirect to the HTTP Referer after successful login |
+| `redirects.whitelist` | string[] | — | No | Allowed redirect URLs (regexp strings) |
+
+## Usage
+
+```typescript
+// 1. Register your OAuth credentials in Google Cloud Console:
+//    APIs & Services > Credentials > Create OAuth 2.0 Client ID
+//    Authorized redirect URI: https://myapp.example.com/auth/google/callback
+
+// 2. Configure (see above). The framework auto-registers these routes:
+//    GET  /auth/google           → redirects to Google consent screen
+//    GET  /auth/google/callback  → handles the OAuth callback, creates a session
+
+// 3. Listen to the auth event to customize post-login behaviour:
+import { GoogleAuthentication } from "@webda/google-auth";
+import { Bean, Inject } from "@webda/core";
+
+@Bean
+export class ProfileSync extends Service {
+  @Inject("Authentication")
+  auth: any;
+
+  async resolve(): Promise<this> {
+    await super.resolve();
+    // Fired after a successful Google login
+    this.auth.on("GoogleAuth.Tokens", async ({ tokens, context }) => {
+      // tokens.access_token, tokens.refresh_token (if access_type=offline)
+      const user = context.getCurrentUser();
+      // ... sync Google profile data to your User model
+    });
+    return this;
+  }
+}
+```
+
+## Reference
+
+- API reference: see the auto-generated typedoc at `docs/pages/Modules/google-auth/`.
+- Source: [`packages/google-auth`](https://github.com/loopingz/webda.io/tree/main/packages/google-auth)
+- Related: [`@webda/core`](../core) Authentication service; [`@webda/gcp`](../gcp) for Cloud-side GCP integrations.
+
+<!-- README_FOOTER -->
+## Sponsors
+
+<!--
+Support this project by becoming a sponsor. Your logo will show up here with a link to your website. [Become a sponsor](mailto:sponsor@webda.io)
+-->
+
+Arize AI is a machine learning observability and model monitoring platform. It helps you visualize, monitor, and explain your machine learning models. [Learn more](https://arize.com)
+
+[<img src="https://arize.com/hubfs/arize/brand/arize-logomark-1.png" width="200">](https://arize.com)
+
+Loopingz is a software development company that provides consulting and development services. [Learn more](https://loopingz.com)
+
+[<img src="https://loopingz.com/images/logo.png" width="200">](https://loopingz.com)
+
+Tellae is an innovative consulting firm specialized in cities transportation issues. We provide our clients, both public and private, with solutions to support your strategic and operational decisions. [Learn more](https://tellae.fr)
+
+[<img src="https://tellae.fr/" width="200">](https://tellae.fr)

package/lib/{google-auth.d.ts → google-auth.service.d.ts}

@@ -1,14 +1,10 @@
-import { OAuthEvents, OAuthService, OAuthServiceParameters, RequestFilter, WebContext } from "@webda/core";
+import { EventWithContext, OAuthEvents, OAuthService, OAuthServiceParameters, RequestFilter, WebContext } from "@webda/core";
 import { Credentials, OAuth2Client } from "google-auth-library";
-export interface EventGoogleOAuthToken {
+export interface EventGoogleOAuthToken extends EventWithContext<WebContext> {
     /**
      * Tokens retrieved from Google
      */
     tokens: Credentials;
-    /**
-     * Request context
-     */
-    context: WebContext;
 }
 /**
  * Credentials to manage Google Auth
@@ -34,14 +30,19 @@ export declare class GoogleParameters extends OAuthServiceParameters {
      */
     access_type?: "online" | "offline";
     auth_options?: any;
-    redirects: {
+    redirects?: {
         use_referer: boolean;
         whitelist: string[];
         defaults: {
             [key: string]: string;
         };
     };
-    constructor(params: any);
+    /**
+     * Load parameters with Google defaults
+     * @param params - the service parameters
+     * @returns this
+     */
+    load(params?: any): this;
 }
 type GoogleAuthEvents = OAuthEvents & {
     "GoogleAuth.Tokens": EventGoogleOAuthToken;
@@ -55,16 +56,17 @@ export default class GoogleAuthentication<T extends GoogleParameters = GooglePar
     protected _client: OAuth2Client;
     /**
      * Return provider name
-     * @returns
+     * @returns the provider name
      */
     getName(): string;
     /**
      * Allow every accounts.google.
+     * @returns the referer patterns allowed to call back
      */
     getCallbackReferer(): RegExp[];
     /**
      * Get OAuth callback query parameters
-     * @returns
+     * @returns the callback query parameters
      */
     getCallbackQueryParams(): {
         name: string;
@@ -72,29 +74,32 @@ export default class GoogleAuthentication<T extends GoogleParameters = GooglePar
     }[];
     /**
      * Expose on /google by default
+     * @returns the default url
      */
     getDefaultUrl(): string;
     /**
      * We manage Google Auth Token
+     * @returns true
      */
     hasToken(): boolean;
     /**
-     * @inheritdoc
-     */
-    loadParameters(params: any): GoogleParameters;
-    /**
-     *
-     * @param redirect_uri
-     * @param state
+     * Generate the Google authorization url
+     * @param redirect_uri - the url Google will redirect to
+     * @param state - the random state to verify on callback
+     * @param _ctx - the request context
+     * @returns the authorization url
      */
     generateAuthUrl(redirect_uri: string, state: string, _ctx: WebContext): string;
     /**
      * Return a google oauth client
-     * @param redirect_uri
+     * @param redirect_uri - the redirect url to use
+     * @returns a new OAuth2 client
      */
     getOAuthClient(redirect_uri?: string): OAuth2Client;
     /**
      * @inheritdoc
+     * @param ctx - the request context
+     * @returns the identity and profile
      */
     handleCallback(ctx: WebContext): Promise<{
         identId: any;
@@ -102,12 +107,14 @@ export default class GoogleAuthentication<T extends GoogleParameters = GooglePar
     }>;
     /**
      * Retrieve the user profile based on the token
-     * @param token
-     * @returns
+     * @param token - the Google id token
+     * @returns the token payload
      */
     getUserInfo(token: string): Promise<import("google-auth-library").TokenPayload>;
     /**
      * Verify a Google Auth Token
+     * @param context - the request context
+     * @returns the identity and profile
      */
     handleToken(context: WebContext): Promise<{
         identId: string;
@@ -118,8 +125,12 @@ export default class GoogleAuthentication<T extends GoogleParameters = GooglePar
      *
      * Redirecting to the webbrowser for the OAuth validation
      * Store the token in user store afterwards
+     * @param token - existing credentials to reuse, if any
+     * @param open - callback to open the authorization url in a browser
+     * @param storeToken - callback to persist the retrieved credentials
+     * @returns the authenticated OAuth2 client
      */
     getLocalClient(token: Credentials, open: (url: string) => void, storeToken: (token: Credentials) => Promise<void>): Promise<OAuth2Client>;
 }
 export { GoogleAuthentication };
-//# sourceMappingURL=google-auth.d.ts.map
+//# sourceMappingURL=google-auth.service.d.ts.map

package/lib/google-auth.service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"google-auth.service.d.ts","sourceRoot":"","sources":["../src/google-auth.service.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,gBAAgB,EAChB,WAAW,EACX,YAAY,EACZ,sBAAsB,EAEtB,aAAa,EACb,UAAU,EAEX,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAGhE,MAAM,WAAW,qBAAsB,SAAQ,gBAAgB,CAAC,UAAU,CAAC;IACzE;;OAEG;IACH,MAAM,EAAE,WAAW,CAAC;CACrB;AAED;;;GAGG;AACH,qBAAa,gBAAiB,SAAQ,sBAAsB;IAC1D;;OAEG;IACH,SAAS,EAAE,MAAM,CAAC;IAClB;;OAEG;IACH,aAAa,EAAE,MAAM,CAAC;IACtB;;OAEG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IAEpB;;;;OAIG;IACH,WAAW,CAAC,EAAE,QAAQ,GAAG,SAAS,CAAC;IAEnC,YAAY,CAAC,EAAE,GAAG,CAAC;IACnB,SAAS,CAAC,EAAE;QAEV,WAAW,EAAE,OAAO,CAAC;QAErB,SAAS,EAAE,MAAM,EAAE,CAAC;QAEpB,QAAQ,EAAE;YAAE,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAAA;SAAE,CAAC;KACrC,CAAC;IAEF;;;;OAIG;IACH,IAAI,CAAC,MAAM,GAAE,GAAQ,GAAG,IAAI,CAI3B;CACF;AAED,KAAK,gBAAgB,GAAG,WAAW,GAAG;IACpC,mBAAmB,EAAE,qBAAqB,CAAC;CAC5C,CAAC;AACF;;;;GAIG;AACH,MAAM,CAAC,OAAO,OAAO,oBAAoB,CAAC,CAAC,SAAS,gBAAgB,GAAG,gBAAgB,CACrF,SAAQ,YAAY,CAAC,CAAC,EAAE,gBAAgB,CACxC,YAAW,aAAa,CAAC,UAAU,CAAC;IAEpC,SAAS,CAAC,OAAO,EAAE,YAAY,CAAC;IAEhC;;;OAGG;IACH,OAAO,WAEN;IAED;;;OAGG;IACH,kBAAkB,IAAI,MAAM,EAAE,CAE7B;IAED;;;OAGG;IACH,sBAAsB,IAAI;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,OAAO,CAAA;KAAE,EAAE,CA2B9D;IAED;;;OAGG;IACH,aAAa,WAEZ;IAED;;;OAGG;IACH,QAAQ,YAEP;IAED;;;;;;OAMG;IACH,eAAe,CAAC,YAAY,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,UAUpE;IAED;;;;OAIG;IACH,cAAc,CAAC,YAAY,CAAC,EAAE,MAAM,GAAG,YAAY,CAElD;IAED;;;;OAIG;IACG,cAAc,CAAC,GAAG,EAAE,UAAU;;;OAwBnC;IAED;;;;OAIG;IACG,WAAW,CAAC,KAAK,EAAE,MAAM,uDAO9B;IAED;;;;OAIG;IACG,WAAW,CAAC,OAAO,EAAE,UAAU;;;OAUpC;IAED;;;;;;;;;OASG;IACG,cAAc,CAClB,KAAK,EAAE,WAAW,EAClB,IAAI,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,EAC3B,UAAU,EAAE,CAAC,KAAK,EAAE,WAAW,KAAK,OAAO,CAAC,IAAI,CAAC,GAChD,OAAO,CAAC,YAAY,CAAC,CAyDvB;CACF;AAED,OAAO,EAAE,oBAAoB,EAAE,CAAC"}

package/lib/{google-auth.js → google-auth.service.js}

@@ -1,14 +1,20 @@
 import { OAuthService, OAuthServiceParameters, WebdaError } from "@webda/core";
 import { OAuth2Client } from "google-auth-library";
-import * as http from "http";
+import * as http from "node:http";
 /**
  * Credentials to manage Google Auth
  * https://developers.google.com/identity/protocols/oauth2
  */
 export class GoogleParameters extends OAuthServiceParameters {
-    constructor(params) {
-        super(params);
+    /**
+     * Load parameters with Google defaults
+     * @param params - the service parameters
+     * @returns this
+     */
+    load(params = {}) {
+        super.load(params);
         this.access_type ?? (this.access_type = "online");
+        return this;
     }
 }
 /**
@@ -19,20 +25,21 @@ export class GoogleParameters extends OAuthServiceParameters {
 export default class GoogleAuthentication extends OAuthService {
     /**
      * Return provider name
-     * @returns
+     * @returns the provider name
      */
     getName() {
         return "google";
     }
     /**
      * Allow every accounts.google.
+     * @returns the referer patterns allowed to call back
      */
     getCallbackReferer() {
         return [/accounts\.google\.[a-z]+$/];
     }
     /**
      * Get OAuth callback query parameters
-     * @returns
+     * @returns the callback query parameters
      */
     getCallbackQueryParams() {
         return [
@@ -64,26 +71,24 @@ export default class GoogleAuthentication extends OAuthService {
     }
     /**
      * Expose on /google by default
+     * @returns the default url
      */
     getDefaultUrl() {
         return "/google";
     }
     /**
      * We manage Google Auth Token
+     * @returns true
      */
     hasToken() {
         return true;
     }
     /**
-     * @inheritdoc
-     */
-    loadParameters(params) {
-        return new GoogleParameters(params);
-    }
-    /**
-     *
-     * @param redirect_uri
-     * @param state
+     * Generate the Google authorization url
+     * @param redirect_uri - the url Google will redirect to
+     * @param state - the random state to verify on callback
+     * @param _ctx - the request context
+     * @returns the authorization url
      */
     generateAuthUrl(redirect_uri, state, _ctx) {
         const oauthClient = this.getOAuthClient(redirect_uri);
@@ -98,13 +103,16 @@ export default class GoogleAuthentication extends OAuthService {
     }
     /**
      * Return a google oauth client
-     * @param redirect_uri
+     * @param redirect_uri - the redirect url to use
+     * @returns a new OAuth2 client
      */
     getOAuthClient(redirect_uri) {
         return new OAuth2Client(this.parameters.client_id, this.parameters.client_secret, redirect_uri);
     }
     /**
      * @inheritdoc
+     * @param ctx - the request context
+     * @returns the identity and profile
      */
     async handleCallback(ctx) {
         // Verify state are equal
@@ -119,7 +127,7 @@ export default class GoogleAuthentication extends OAuthService {
         // Now that we have the code, use that to acquire tokens.
         try {
             const r = await oauthClient.getToken(code);
-            this.emitSync("GoogleAuth.Tokens", { tokens: r.tokens, context: ctx });
+            await this.emit("GoogleAuth.Tokens", { tokens: r.tokens, context: ctx });
             profile = await this.getUserInfo(r.tokens.id_token);
             identId = profile.sub;
         }
@@ -134,8 +142,8 @@ export default class GoogleAuthentication extends OAuthService {
     }
     /**
      * Retrieve the user profile based on the token
-     * @param token
-     * @returns
+     * @param token - the Google id token
+     * @returns the token payload
      */
     async getUserInfo(token) {
         const oauthClient = this.getOAuthClient();
@@ -147,6 +155,8 @@ export default class GoogleAuthentication extends OAuthService {
     }
     /**
      * Verify a Google Auth Token
+     * @param context - the request context
+     * @returns the identity and profile
      */
     async handleToken(context) {
         const tokens = (await context.getRequestBody()).tokens;
@@ -164,6 +174,10 @@ export default class GoogleAuthentication extends OAuthService {
      *
      * Redirecting to the webbrowser for the OAuth validation
      * Store the token in user store afterwards
+     * @param token - existing credentials to reuse, if any
+     * @param open - callback to open the authorization url in a browser
+     * @param storeToken - callback to persist the retrieved credentials
+     * @returns the authenticated OAuth2 client
      */
     async getLocalClient(token, open, storeToken) {
         if (this._client) {
@@ -207,7 +221,7 @@ export default class GoogleAuthentication extends OAuthService {
                         return resolve(this._client);
                     }
                     catch (err) {
-                        console.log(err);
+                        this.log("ERROR", err);
                         reject(err);
                     }
                     finally {
@@ -224,4 +238,4 @@ export default class GoogleAuthentication extends OAuthService {
     }
 }
 export { GoogleAuthentication };
-//# sourceMappingURL=google-auth.js.map
+//# sourceMappingURL=google-auth.service.js.map

package/lib/google-auth.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"google-auth.service.js","sourceRoot":"","sources":["../src/google-auth.service.ts"],"names":[],"mappings":"AAAA,OAAO,EAGL,YAAY,EACZ,sBAAsB,EAItB,UAAU,EACX,MAAM,aAAa,CAAC;AACrB,OAAO,EAAe,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAChE,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AASlC;;;GAGG;AACH,MAAM,OAAO,gBAAiB,SAAQ,sBAAsB;IA+B1D;;;;OAIG;IACH,IAAI,CAAC,MAAM,GAAQ,EAAE;QACnB,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACnB,IAAI,CAAC,WAAW,KAAhB,IAAI,CAAC,WAAW,GAAK,QAAQ,EAAC;QAC9B,OAAO,IAAI,CAAC;IACd,CAAC;CACF;AAKD;;;;GAIG;AACH,MAAM,CAAC,OAAO,OAAO,oBACnB,SAAQ,YAAiC;IAKzC;;;OAGG;IACH,OAAO;QACL,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED;;;OAGG;IACH,kBAAkB;QAChB,OAAO,CAAC,2BAA2B,CAAC,CAAC;IACvC,CAAC;IAED;;;OAGG;IACH,sBAAsB;QACpB,OAAO;YACL;gBACE,IAAI,EAAE,MAAM;gBACZ,QAAQ,EAAE,IAAI;aACf;YACD;gBACE,IAAI,EAAE,OAAO;gBACb,QAAQ,EAAE,IAAI;aACf;YACD;gBACE,IAAI,EAAE,OAAO;gBACb,QAAQ,EAAE,IAAI;aACf;YACD;gBACE,IAAI,EAAE,UAAU;gBAChB,QAAQ,EAAE,KAAK;aAChB;YACD;gBACE,IAAI,EAAE,IAAI;gBACV,QAAQ,EAAE,KAAK;aAChB;YACD;gBACE,IAAI,EAAE,QAAQ;gBACd,QAAQ,EAAE,KAAK;aAChB;SACF,CAAC;IACJ,CAAC;IAED;;;OAGG;IACH,aAAa;QACX,OAAO,SAAS,CAAC;IACnB,CAAC;IAED;;;OAGG;IACH,QAAQ;QACN,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;;;;;OAMG;IACH,eAAe,CAAC,YAAoB,EAAE,KAAa,EAAE,IAAgB;QACnE,MAAM,WAAW,GAAG,IAAI,CAAC,cAAc,CAAC,YAAY,CAAC,CAAC;QACtD,OAAO,WAAW,CAAC,eAAe,CAAC;YACjC,WAAW,EAAE,IAAI,CAAC,UAAU,CAAC,WAAW;YACxC,KAAK,EAAE,IAAI,CAAC,UAAU,CAAC,KAAK;YAC5B,YAAY;YACZ,aAAa,EAAE,MAAM;YACrB,KAAK;YACL,GAAG,IAAI,CAAC,UAAU,CAAC,YAAY;SAChC,CAAC,CAAC;IACL,CAAC;IAED;;;;OAIG;IACH,cAAc,CAAC,YAAqB;QAClC,OAAO,IAAI,YAAY,CAAC,IAAI,CAAC,UAAU,CAAC,SAAS,EAAE,IAAI,CAAC,UAAU,CAAC,aAAa,EAAE,YAAY,CAAC,CAAC;IAClG,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,cAAc,CAAC,GAAe;QAClC,yBAAyB;QACzB,IAAI,GAAG,CAAC,aAAa,EAAE,CAAC,KAAK,KAAK,GAAG,CAAC,UAAU,EAAgB,CAAC,KAAK,EAAE,KAAK,EAAE,CAAC;YAC9E,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,aAAa,GAAG,CAAC,aAAa,EAAE,CAAC,KAAK,QAAQ,GAAG,CAAC,UAAU,EAAgB,CAAC,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;YAC9G,MAAM,IAAI,UAAU,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;QAC9C,CAAC;QACD,MAAM,IAAI,GAAW,GAAG,CAAC,aAAa,EAAE,CAAC,IAAI,CAAC;QAC9C,MAAM,YAAY,GAAG,GAAG,CAAC,cAAc,EAAE,CAAC,cAAc,CAAC,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,WAAW,CAAC,CAAC;QAC5F,MAAM,WAAW,GAAG,IAAI,CAAC,cAAc,CAAC,YAAY,CAAC,CAAC;QACtD,IAAI,OAAO,EAAE,OAAO,CAAC;QACrB,yDAAyD;QACzD,IAAI,CAAC;YACH,MAAM,CAAC,GAAG,MAAM,WAAW,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;YAC3C,MAAM,IAAI,CAAC,IAAI,CAAC,mBAAmB,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC;YACzE,OAAO,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YACpD,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC;QACxB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;YACvB,MAAM,IAAI,UAAU,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC;QAChD,CAAC;QACD,OAAO;YACL,OAAO;YACP,OAAO;SACR,CAAC;IACJ,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,WAAW,CAAC,KAAa;QAC7B,MAAM,WAAW,GAAG,IAAI,CAAC,cAAc,EAAE,CAAC;QAC1C,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,aAAa,CAAC;YAC7C,OAAO,EAAE,KAAK;YACd,QAAQ,EAAE,IAAI,CAAC,UAAU,CAAC,SAAS;SACpC,CAAC,CAAC;QACH,OAAO,MAAM,CAAC,UAAU,EAAE,CAAC;IAC7B,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,WAAW,CAAC,OAAmB;QACnC,MAAM,MAAM,GAAG,CAAC,MAAM,OAAO,CAAC,cAAc,EAAE,CAAC,CAAC,MAAM,CAAC;QACvD,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,IAAI,UAAU,CAAC,UAAU,CAAC,oBAAoB,CAAC,CAAC;QACxD,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QACxD,OAAO;YACL,OAAO,EAAE,OAAO,CAAC,GAAG;YACpB,OAAO;SACR,CAAC;IACJ,CAAC;IAED;;;;;;;;;OASG;IACH,KAAK,CAAC,cAAc,CAClB,KAAkB,EAClB,IAA2B,EAC3B,UAAiD;QAEjD,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACjB,OAAO,IAAI,CAAC,OAAO,CAAC;QACtB,CAAC;QAED,MAAM,YAAY,GAAG,IAAI,CAAC,cAAc,EAAE,CAAC;QAE3C,IAAI,KAAK,EAAE,CAAC;YACV,YAAY,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;YACnC,IAAI,CAAC,OAAO,GAAG,YAAY,CAAC;YAC5B,OAAO,YAAY,CAAC;QACtB,CAAC;QACD,6DAA6D;QAC7D,MAAM,YAAY,GAAG,YAAY,CAAC,eAAe,CAAC;YAChD,WAAW,EAAE,SAAS;YACtB,KAAK,EAAE,IAAI,CAAC,UAAU,CAAC,KAAK;YAC5B,YAAY,EAAE,sCAAsC;SACrD,CAAC,CAAC;QAEH,gFAAgF;QAChF,kEAAkE;QAClE,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACrC,MAAM,MAAM,GAAG,IAAI;iBAChB,YAAY,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;gBAC/B,IAAI,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;oBAC5C,IAAI,CAAC;wBACH,mEAAmE;wBACnE,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,uBAAuB,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;wBAChF,IAAI,IAAI,EAAE,CAAC;4BACT,GAAG,CAAC,GAAG,CAAC,0DAA0D,CAAC,CAAC;wBACtE,CAAC;6BAAM,CAAC;4BACN,GAAG,CAAC,GAAG,CAAC,4DAA4D,CAAC,CAAC;4BACtE,OAAO,MAAM,CAAC,QAAQ,CAAC,CAAC;wBAC1B,CAAC;wBAED,yDAAyD;wBACzD,MAAM,CAAC,GAAG,MAAM,YAAY,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;wBAC5C,yDAAyD;wBACzD,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;wBACrB,YAAY,CAAC,cAAc,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;wBACtC,IAAI,CAAC,OAAO,GAAG,YAAY,CAAC;wBAC5B,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,iCAAiC,CAAC,CAAC;wBACpD,OAAO,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;oBAC/B,CAAC;oBAAC,OAAO,GAAG,EAAE,CAAC;wBACb,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;wBACvB,MAAM,CAAC,GAAG,CAAC,CAAC;oBACd,CAAC;4BAAS,CAAC;wBACT,MAAM,CAAC,KAAK,EAAE,CAAC;oBACjB,CAAC;gBACH,CAAC;YACH,CAAC,CAAC;iBACD,MAAM,CAAC,IAAI,EAAE,GAAG,EAAE;gBACjB,8DAA8D;gBAC9D,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,kDAAkD,CAAC,CAAC;gBACrE,IAAI,CAAC,YAAY,CAAC,CAAC;YACrB,CAAC,CAAC,CAAC;QACP,CAAC,CAAC,CAAC;IACL,CAAC;CACF;AAED,OAAO,EAAE,oBAAoB,EAAE,CAAC"}

package/lib/index.d.ts

@@ -1,2 +1,2 @@
-export * from "./google-auth.js";
+export * from "./google-auth.service.js";
 //# sourceMappingURL=index.d.ts.map

package/lib/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,eAAe,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,0BAA0B,CAAC"}

package/lib/index.js

@@ -1,2 +1,2 @@
-export * from "./google-auth.js";
+export * from "./google-auth.service.js";
 //# sourceMappingURL=index.js.map

package/lib/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,eAAe,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,0BAA0B,CAAC"}

package/package.json

@@ -1,18 +1,8 @@
 {
   "name": "@webda/google-auth",
-  "version": "4.0.0-beta.2",
+  "version": "4.0.0-beta.3",
   "description": "Webda Google Authentication",
   "main": "lib/index.js",
-  "scripts": {
-    "build": "webda build",
-    "build:watch": "webda build --watch",
-    "pretest": "npm run build",
-    "lint": "eslint",
-    "lint:fix": "eslint --fix",
-    "test": "c8 mocha",
-    "format": "prettier --check src/**/*",
-    "format:fix": "prettier --write src/**/*"
-  },
   "repository": {
     "type": "git",
     "url": "git+https://github.com/loopingz/webda.io.git"
@@ -33,41 +23,43 @@
   },
   "homepage": "https://github.com/loopingz/webda.io#readme",
   "dependencies": {
-    "@webda/core": "^4.0.0-beta.2",
-    "google-auth-library": "^9.0.0"
-  },
-  "c8": {
-    "report-dir": "./reports",
-    "reporter": [
-      "html",
-      "lcov",
-      "json",
-      "text"
-    ],
-    "exclude": [
-      "**/*.spec.ts"
-    ]
+    "google-auth-library": "^10.6.2",
+    "@webda/core": "4.0.0-beta.3"
   },
   "publishConfig": {
     "access": "public"
   },
   "devDependencies": {
-    "@testdeck/mocha": "^0.3.2",
-    "@types/node": "20.0.0",
-    "@webda/shell": "^4.0.0-beta.2",
-    "node-fetch": "^3.3.1",
-    "sinon": "^19.0.2",
-    "tsx": "^4.17.0"
+    "@types/node": "25.5.0",
+    "@vitest/coverage-v8": "^4.1.2",
+    "jscodeshift": "^17.3.0",
+    "skott": "^0.35.8",
+    "tsx": "^4.21.0",
+    "typescript": "7.1.0-dev.20260929.1",
+    "vite": "^6.0.0",
+    "vitest": "^4.1.2",
+    "@webda/compiler": "^4.0.0-beta.3",
+    "@webda/test": "4.0.0-beta.3"
   },
   "type": "module",
   "engines": {
-    "node": ">=20.0.0"
+    "node": ">=22.0.0"
   },
   "nx": {
     "implicitDependencies": [
-      "@webda/core",
-      "@webda/shell"
+      "@webda/core"
     ]
   },
-  "gitHead": "e992dcfb82cefa6cd5c61c54a0e63778b6f53d8e"
-}
+  "scripts": {
+    "build": "webdac build",
+    "build:watch": "webdac build --watch",
+    "pretest": "npm run build",
+    "lint": "eslint",
+    "lint:fix": "eslint --fix",
+    "test": "vitest run",
+    "format": "prettier --check src/**/*",
+    "format:fix": "prettier --write src/**/*",
+    "deps:graph": "skott --showCircularDependencies --no-trackTypeOnlyDependencies --displayMode=raw -e .ts",
+    "codemod": "jscodeshift --parser=ts --extensions=tsx,ts -t ../codemod/current.mjs src"
+  }
+}

package/webda.module.json

@@ -1,46 +1,171 @@
 {
+  "$schema": "https://webda.io/schemas/webda.module.v4.json",
   "beans": {},
   "deployers": {},
   "moddas": {
-    "Webda/GoogleAuthentication": "lib/google-auth:default"
-  },
-  "models": {
-    "graph": {},
-    "tree": {},
-    "plurals": {},
-    "list": {},
-    "reflections": {}
+    "Webda/GoogleAuthentication": {
+      "Import": "lib/google-auth.service:default",
+      "Schema": {
+        "$schema": "http://json-schema.org/draft-07/schema#",
+        "additionalProperties": false,
+        "definitions": {
+          "redirects": {
+            "additionalProperties": false,
+            "properties": {
+              "defaults": {
+                "$ref": "#/definitions/redirects%24defaults"
+              },
+              "use_referer": {
+                "default": false,
+                "type": "boolean"
+              },
+              "whitelist": {
+                "items": {
+                  "type": "string"
+                },
+                "type": "array"
+              }
+            },
+            "required": [
+              "defaults",
+              "whitelist"
+            ],
+            "type": "object"
+          },
+          "redirects$defaults": {
+            "additionalProperties": {
+              "type": "string"
+            },
+            "type": "object"
+          }
+        },
+        "description": "Credentials to manage Google Auth\nhttps://developers.google.com/identity/protocols/oauth2",
+        "properties": {
+          "access_type": {
+            "description": "Type of access for Google token\n\nonline by default",
+            "enum": [
+              "online",
+              "offline"
+            ],
+            "type": "string"
+          },
+          "auth_options": {},
+          "authenticationService": {
+            "default": "Authentication",
+            "description": "Name of the authentication service to use if exist",
+            "type": "string"
+          },
+          "authorized_uris": {
+            "default": [],
+            "description": "List of URIs authorized for redirect post authorization",
+            "items": {
+              "type": "string"
+            },
+            "type": "array"
+          },
+          "client_id": {
+            "description": "Google Auth Client id",
+            "type": "string"
+          },
+          "client_secret": {
+            "description": "Google Auth Client secret",
+            "type": "string"
+          },
+          "exposeScope": {
+            "default": false,
+            "description": "If set to true it will add a ${url}/scope\nSo client can anticipate the requested scope\n\nThis is useful when using the client api to generate\ntoken. This way the service can request the wanted scope",
+            "type": "boolean"
+          },
+          "no_referer": {
+            "default": false,
+            "description": "Allow direct connection without a referer",
+            "type": "boolean"
+          },
+          "project_id": {
+            "description": "Google Project ID",
+            "type": "string"
+          },
+          "redirect_uri": {
+            "default": "${url}/callback",
+            "description": "Default redirect_uri",
+            "type": "string"
+          },
+          "redirects": {
+            "$ref": "#/definitions/redirects"
+          },
+          "scope": {
+            "defaut": [
+              "email"
+            ],
+            "description": "Scope to request on OAuth flow",
+            "items": {
+              "type": "string"
+            },
+            "type": "array"
+          },
+          "type": {
+            "description": "Type of the service",
+            "type": "string"
+          },
+          "url": {
+            "SchemaOptional": true,
+            "description": "URL to use for expose\n\nThe default value varying based on implementation\nIt should by default be the provider name in lowercase",
+            "type": "string"
+          },
+          "openapi": {
+            "type": "object",
+            "additionalProperties": true
+          }
+        },
+        "required": [
+          "client_id",
+          "client_secret",
+          "scope",
+          "type"
+        ],
+        "type": "object",
+        "title": "GoogleAuthentication"
+      },
+      "Configuration": "lib/google-auth.service:GoogleParameters",
+      "capabilities": [
+        "request-filter"
+      ]
+    }
   },
+  "models": {},
   "schemas": {
     "Webda/BinaryFile": {
-      "type": "object",
+      "$schema": "http://json-schema.org/draft-07/schema#",
+      "WebdaSchema": true,
+      "additionalProperties": false,
+      "description": "Represent a file to store",
       "properties": {
-        "hash": {
-          "type": "string",
-          "description": "Will be computed by the service\n\nhash of the content"
-        },
         "challenge": {
-          "type": "string",
-          "description": "Will be computed by the service\n\nhash of the content prefixed by 'WEBDA'"
+          "description": "Will be computed by the service\n\nhash of the content prefixed by 'WEBDA'",
+          "type": "string"
         },
-        "size": {
-          "type": "number",
-          "description": "Size of the binary"
+        "hash": {
+          "description": "Will be computed by the service\n\nhash of the content",
+          "type": "string"
         },
-        "name": {
-          "type": "string",
-          "description": "Current name"
+        "metadata": {
+          "description": "Metadatas stored along with the binary"
         },
         "mimetype": {
-          "type": "string",
-          "description": "Mimetype of the binary"
+          "description": "Mimetype of the binary",
+          "type": "string"
         },
-        "metadata": {
-          "description": "Metadatas stored along with the binary"
+        "name": {
+          "description": "Current name",
+          "type": "string"
         },
         "originalname": {
-          "type": "string",
-          "description": "Original name"
+          "description": "Original name",
+          "type": "string"
+        },
+        "size": {
+          "description": "Size of the binary",
+          "type": "number"
         }
       },
       "required": [
@@ -48,120 +173,9 @@
         "name",
         "size"
       ],
-      "description": "Represent a file to store",
-      "$schema": "http://json-schema.org/draft-07/schema#",
-      "title": "BinaryFile"
-    },
-    "Webda/GoogleAuthentication": {
       "type": "object",
-      "properties": {
-        "type": {
-          "type": "string",
-          "description": "Type of the service"
-        },
-        "url": {
-          "type": "string",
-          "description": "URL to use for expose\n\nThe default value varying based on implementation It should by default be the provider name in lowercase"
-        },
-        "scope": {
-          "type": "array",
-          "items": {
-            "type": "string"
-          },
-          "description": "Scope to request on OAuth flow"
-        },
-        "exposeScope": {
-          "type": "boolean",
-          "description": "If set to true it will add a ${url}/scope So client can anticipate the requested scope\n\nThis is useful when using the client api to generate token. This way the service can request the wanted scope",
-          "default": false
-        },
-        "authorized_uris": {
-          "type": "array",
-          "items": {
-            "type": "string"
-          },
-          "description": "List of URIs authorized for redirect post authorization",
-          "default": []
-        },
-        "redirect_uri": {
-          "type": "string",
-          "description": "Default redirect_uri",
-          "default": "${url}/callback"
-        },
-        "no_referer": {
-          "type": "boolean",
-          "description": "Allow direct connection without a referer",
-          "default": false
-        },
-        "authenticationService": {
-          "type": "string",
-          "description": "Name of the authentication service to use if exist",
-          "default": "Authentication"
-        },
-        "client_id": {
-          "type": "string",
-          "description": "Google Auth Client id"
-        },
-        "client_secret": {
-          "type": "string",
-          "description": "Google Auth Client secret"
-        },
-        "project_id": {
-          "type": "string",
-          "description": "Google Project ID"
-        },
-        "access_type": {
-          "type": "string",
-          "enum": [
-            "online",
-            "offline"
-          ],
-          "description": "Type of access for Google token\n\nonline by default"
-        },
-        "auth_options": {},
-        "redirects": {
-          "type": "object",
-          "properties": {
-            "use_referer": {
-              "type": "boolean"
-            },
-            "whitelist": {
-              "type": "array",
-              "items": {
-                "type": "string"
-              }
-            },
-            "defaults": {
-              "type": "object",
-              "additionalProperties": {
-                "type": "string"
-              }
-            }
-          },
-          "required": [
-            "use_referer",
-            "whitelist",
-            "defaults"
-          ]
-        },
-        "openapi": {
-          "type": "object",
-          "additionalProperties": true
-        }
-      },
-      "required": [
-        "authenticationService",
-        "client_id",
-        "client_secret",
-        "exposeScope",
-        "no_referer",
-        "redirects",
-        "scope",
-        "type"
-      ],
-      "description": "Credentials to manage Google Auth https://developers.google.com/identity/protocols/oauth2",
-      "$schema": "http://json-schema.org/draft-07/schema#",
-      "title": "GoogleAuthentication"
+      "title": "BinaryFile"
     }
-  }
+  },
+  "behaviors": {}
 }

package/lib/google-auth.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"google-auth.d.ts","sourceRoot":"","sources":["../src/google-auth.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,WAAW,EACX,YAAY,EACZ,sBAAsB,EAEtB,aAAa,EACb,UAAU,EAEX,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAGhE,MAAM,WAAW,qBAAqB;IACpC;;OAEG;IACH,MAAM,EAAE,WAAW,CAAC;IACpB;;OAEG;IACH,OAAO,EAAE,UAAU,CAAC;CACrB;AAED;;;GAGG;AACH,qBAAa,gBAAiB,SAAQ,sBAAsB;IAC1D;;OAEG;IACH,SAAS,EAAE,MAAM,CAAC;IAClB;;OAEG;IACH,aAAa,EAAE,MAAM,CAAC;IACtB;;OAEG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IAEpB;;;;OAIG;IACH,WAAW,CAAC,EAAE,QAAQ,GAAG,SAAS,CAAC;IAEnC,YAAY,CAAC,EAAE,GAAG,CAAC;IACnB,SAAS,EAAE;QAET,WAAW,EAAE,OAAO,CAAC;QAErB,SAAS,EAAE,MAAM,EAAE,CAAC;QAEpB,QAAQ,EAAE;YAAE,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAAA;SAAE,CAAC;KACrC,CAAC;gBAEU,MAAM,KAAA;CAInB;AAED,KAAK,gBAAgB,GAAG,WAAW,GAAG;IACpC,mBAAmB,EAAE,qBAAqB,CAAC;CAC5C,CAAC;AACF;;;;GAIG;AACH,MAAM,CAAC,OAAO,OAAO,oBAAoB,CAAC,CAAC,SAAS,gBAAgB,GAAG,gBAAgB,CACrF,SAAQ,YAAY,CAAC,CAAC,EAAE,gBAAgB,CACxC,YAAW,aAAa,CAAC,UAAU,CAAC;IAEpC,SAAS,CAAC,OAAO,EAAE,YAAY,CAAC;IAEhC;;;OAGG;IACH,OAAO;IAIP;;OAEG;IACH,kBAAkB,IAAI,MAAM,EAAE;IAI9B;;;OAGG;IACH,sBAAsB,IAAI;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,OAAO,CAAA;KAAE,EAAE;IA6B/D;;OAEG;IACH,aAAa;IAIb;;OAEG;IACH,QAAQ;IAIR;;OAEG;IACH,cAAc,CAAC,MAAM,EAAE,GAAG,GAAG,gBAAgB;IAI7C;;;;OAIG;IACH,eAAe,CAAC,YAAY,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU;IAYrE;;;OAGG;IACH,cAAc,CAAC,YAAY,CAAC,EAAE,MAAM,GAAG,YAAY;IAInD;;OAEG;IACG,cAAc,CAAC,GAAG,EAAE,UAAU;;;;IA0BpC;;;;OAIG;IACG,WAAW,CAAC,KAAK,EAAE,MAAM;IAS/B;;OAEG;IACG,WAAW,CAAC,OAAO,EAAE,UAAU;;;;IAYrC;;;;;OAKG;IACG,cAAc,CAClB,KAAK,EAAE,WAAW,EAClB,IAAI,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,EAC3B,UAAU,EAAE,CAAC,KAAK,EAAE,WAAW,KAAK,OAAO,CAAC,IAAI,CAAC,GAChD,OAAO,CAAC,YAAY,CAAC;CA0DzB;AAED,OAAO,EAAE,oBAAoB,EAAE,CAAC"}

package/lib/google-auth.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"google-auth.js","sourceRoot":"","sources":["../src/google-auth.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,YAAY,EACZ,sBAAsB,EAItB,UAAU,EACX,MAAM,aAAa,CAAC;AACrB,OAAO,EAAe,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAChE,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAa7B;;;GAGG;AACH,MAAM,OAAO,gBAAiB,SAAQ,sBAAsB;IA+B1D,YAAY,MAAM;QAChB,KAAK,CAAC,MAAM,CAAC,CAAC;QACd,IAAI,CAAC,WAAW,KAAhB,IAAI,CAAC,WAAW,GAAK,QAAQ,EAAC;IAChC,CAAC;CACF;AAKD;;;;GAIG;AACH,MAAM,CAAC,OAAO,OAAO,oBACnB,SAAQ,YAAiC;IAKzC;;;OAGG;IACH,OAAO;QACL,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED;;OAEG;IACH,kBAAkB;QAChB,OAAO,CAAC,2BAA2B,CAAC,CAAC;IACvC,CAAC;IAED;;;OAGG;IACH,sBAAsB;QACpB,OAAO;YACL;gBACE,IAAI,EAAE,MAAM;gBACZ,QAAQ,EAAE,IAAI;aACf;YACD;gBACE,IAAI,EAAE,OAAO;gBACb,QAAQ,EAAE,IAAI;aACf;YACD;gBACE,IAAI,EAAE,OAAO;gBACb,QAAQ,EAAE,IAAI;aACf;YACD;gBACE,IAAI,EAAE,UAAU;gBAChB,QAAQ,EAAE,KAAK;aAChB;YACD;gBACE,IAAI,EAAE,IAAI;gBACV,QAAQ,EAAE,KAAK;aAChB;YACD;gBACE,IAAI,EAAE,QAAQ;gBACd,QAAQ,EAAE,KAAK;aAChB;SACF,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,aAAa;QACX,OAAO,SAAS,CAAC;IACnB,CAAC;IAED;;OAEG;IACH,QAAQ;QACN,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;OAEG;IACH,cAAc,CAAC,MAAW;QACxB,OAAO,IAAI,gBAAgB,CAAC,MAAM,CAAC,CAAC;IACtC,CAAC;IAED;;;;OAIG;IACH,eAAe,CAAC,YAAoB,EAAE,KAAa,EAAE,IAAgB;QACnE,MAAM,WAAW,GAAG,IAAI,CAAC,cAAc,CAAC,YAAY,CAAC,CAAC;QACtD,OAAO,WAAW,CAAC,eAAe,CAAC;YACjC,WAAW,EAAE,IAAI,CAAC,UAAU,CAAC,WAAW;YACxC,KAAK,EAAE,IAAI,CAAC,UAAU,CAAC,KAAK;YAC5B,YAAY;YACZ,aAAa,EAAE,MAAM;YACrB,KAAK;YACL,GAAG,IAAI,CAAC,UAAU,CAAC,YAAY;SAChC,CAAC,CAAC;IACL,CAAC;IAED;;;OAGG;IACH,cAAc,CAAC,YAAqB;QAClC,OAAO,IAAI,YAAY,CAAC,IAAI,CAAC,UAAU,CAAC,SAAS,EAAE,IAAI,CAAC,UAAU,CAAC,aAAa,EAAE,YAAY,CAAC,CAAC;IAClG,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,cAAc,CAAC,GAAe;QAClC,yBAAyB;QACzB,IAAI,GAAG,CAAC,aAAa,EAAE,CAAC,KAAK,KAAK,GAAG,CAAC,UAAU,EAAgB,CAAC,KAAK,EAAE,KAAK,EAAE,CAAC;YAC9E,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,aAAa,GAAG,CAAC,aAAa,EAAE,CAAC,KAAK,QAAQ,GAAG,CAAC,UAAU,EAAgB,CAAC,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;YAC9G,MAAM,IAAI,UAAU,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;QAC9C,CAAC;QACD,MAAM,IAAI,GAAW,GAAG,CAAC,aAAa,EAAE,CAAC,IAAI,CAAC;QAC9C,MAAM,YAAY,GAAG,GAAG,CAAC,cAAc,EAAE,CAAC,cAAc,CAAC,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,WAAW,CAAC,CAAC;QAC5F,MAAM,WAAW,GAAG,IAAI,CAAC,cAAc,CAAC,YAAY,CAAC,CAAC;QACtD,IAAI,OAAO,EAAE,OAAO,CAAC;QACrB,yDAAyD;QACzD,IAAI,CAAC;YACH,MAAM,CAAC,GAAG,MAAM,WAAW,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;YAC3C,IAAI,CAAC,QAAQ,CAAC,mBAAmB,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC;YACvE,OAAO,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YACpD,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC;QACxB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;YACvB,MAAM,IAAI,UAAU,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC;QAChD,CAAC;QACD,OAAO;YACL,OAAO;YACP,OAAO;SACR,CAAC;IACJ,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,WAAW,CAAC,KAAa;QAC7B,MAAM,WAAW,GAAG,IAAI,CAAC,cAAc,EAAE,CAAC;QAC1C,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,aAAa,CAAC;YAC7C,OAAO,EAAE,KAAK;YACd,QAAQ,EAAE,IAAI,CAAC,UAAU,CAAC,SAAS;SACpC,CAAC,CAAC;QACH,OAAO,MAAM,CAAC,UAAU,EAAE,CAAC;IAC7B,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,WAAW,CAAC,OAAmB;QACnC,MAAM,MAAM,GAAG,CAAC,MAAM,OAAO,CAAC,cAAc,EAAE,CAAC,CAAC,MAAM,CAAC;QACvD,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,IAAI,UAAU,CAAC,UAAU,CAAC,oBAAoB,CAAC,CAAC;QACxD,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QACxD,OAAO;YACL,OAAO,EAAE,OAAO,CAAC,GAAG;YACpB,OAAO;SACR,CAAC;IACJ,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,cAAc,CAClB,KAAkB,EAClB,IAA2B,EAC3B,UAAiD;QAEjD,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACjB,OAAO,IAAI,CAAC,OAAO,CAAC;QACtB,CAAC;QAED,MAAM,YAAY,GAAG,IAAI,CAAC,cAAc,EAAE,CAAC;QAE3C,IAAI,KAAK,EAAE,CAAC;YACV,YAAY,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;YACnC,IAAI,CAAC,OAAO,GAAG,YAAY,CAAC;YAC5B,OAAO,YAAY,CAAC;QACtB,CAAC;QACD,6DAA6D;QAC7D,MAAM,YAAY,GAAG,YAAY,CAAC,eAAe,CAAC;YAChD,WAAW,EAAE,SAAS;YACtB,KAAK,EAAE,IAAI,CAAC,UAAU,CAAC,KAAK;YAC5B,YAAY,EAAE,sCAAsC;SACrD,CAAC,CAAC;QAEH,gFAAgF;QAChF,kEAAkE;QAClE,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACrC,MAAM,MAAM,GAAG,IAAI;iBAChB,YAAY,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;gBAC/B,IAAI,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;oBAC5C,IAAI,CAAC;wBACH,mEAAmE;wBACnE,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,uBAAuB,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;wBAChF,IAAI,IAAI,EAAE,CAAC;4BACT,GAAG,CAAC,GAAG,CAAC,0DAA0D,CAAC,CAAC;wBACtE,CAAC;6BAAM,CAAC;4BACN,GAAG,CAAC,GAAG,CAAC,4DAA4D,CAAC,CAAC;4BACtE,OAAO,MAAM,CAAC,QAAQ,CAAC,CAAC;wBAC1B,CAAC;wBAED,yDAAyD;wBACzD,MAAM,CAAC,GAAG,MAAM,YAAY,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;wBAC5C,yDAAyD;wBACzD,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;wBACrB,YAAY,CAAC,cAAc,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;wBACtC,IAAI,CAAC,OAAO,GAAG,YAAY,CAAC;wBAC5B,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,iCAAiC,CAAC,CAAC;wBACpD,OAAO,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;oBAC/B,CAAC;oBAAC,OAAO,GAAG,EAAE,CAAC;wBACb,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;wBACjB,MAAM,CAAC,GAAG,CAAC,CAAC;oBACd,CAAC;4BAAS,CAAC;wBACT,MAAM,CAAC,KAAK,EAAE,CAAC;oBACjB,CAAC;gBACH,CAAC;YACH,CAAC,CAAC;iBACD,MAAM,CAAC,IAAI,EAAE,GAAG,EAAE;gBACjB,8DAA8D;gBAC9D,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,kDAAkD,CAAC,CAAC;gBACrE,IAAI,CAAC,YAAY,CAAC,CAAC;YACrB,CAAC,CAAC,CAAC;QACP,CAAC,CAAC,CAAC;IACL,CAAC;CACF;AAED,OAAO,EAAE,oBAAoB,EAAE,CAAC"}

package/lib/google-auth.spec.d.ts

@@ -1,2 +0,0 @@
-export {};
-//# sourceMappingURL=google-auth.spec.d.ts.map

package/lib/google-auth.spec.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"google-auth.spec.d.ts","sourceRoot":"","sources":["../src/google-auth.spec.ts"],"names":[],"mappings":""}

package/lib/google-auth.spec.js

@@ -1,131 +0,0 @@
-var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
-    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
-    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
-    return c > 3 && r && Object.defineProperty(target, key, r), r;
-};
-import { suite, test } from "@testdeck/mocha";
-import { WebdaError } from "@webda/core";
-import { WebdaTest } from "@webda/core/lib/test.js";
-import * as assert from "assert";
-import fetch from "node-fetch";
-import { GoogleAuthentication } from "./google-auth.js";
-let GoogleAuthTest = class GoogleAuthTest extends WebdaTest {
-    async before() {
-        await super.before();
-        this.service = new GoogleAuthentication(this.webda, "google", {
-            client_id: "fake",
-            client_secret: "secret"
-        });
-    }
-    cov() {
-        assert.strictEqual(this.service.getName(), "google");
-        assert.strictEqual(this.service.getDefaultUrl(), "/google");
-        assert.deepStrictEqual(this.service.getCallbackReferer(), [/accounts\.google\.[a-z]+$/]);
-        assert.strictEqual(this.service.hasToken(), true);
-        assert.strictEqual(this.service.getCallbackQueryParams().length, 6);
-    }
-    generateAuthUrl() {
-        const url = this.service.generateAuthUrl("plopor", "myState", undefined);
-        assert.strictEqual(url, "https://accounts.google.com/o/oauth2/v2/auth?access_type=online&scope=email&redirect_uri=plopor&response_type=code&state=myState&client_id=fake");
-    }
-    mockClient() {
-        // Mock client
-        // @ts-ignore
-        this.service.getOAuthClient = () => {
-            return {
-                getToken: async (arg) => {
-                    if (arg === "u1")
-                        return { tokens: { id_token: arg } };
-                },
-                generateAuthUrl: () => {
-                    return "/";
-                },
-                setCredentials: () => { },
-                verifyIdToken: async (args) => {
-                    if (args.idToken === "u1") {
-                        return {
-                            getPayload: () => {
-                                return {
-                                    sub: "u1",
-                                    email: "u1@webda.io"
-                                };
-                            }
-                        };
-                    }
-                }
-            };
-        };
-    }
-    async tokenAndCallback() {
-        var _a;
-        this.mockClient();
-        let ctx = await this.newContext();
-        // Verify normal callback
-        ctx.getParameters().state = "plop";
-        (_a = ctx.getSession()).oauth ?? (_a.oauth = {});
-        ctx.getSession().oauth.state = "bouzouf";
-        await assert.rejects(() => this.service.handleCallback(ctx), WebdaError.Forbidden);
-        ctx.getSession().oauth.state = "plop";
-        ctx.getParameters().code = "u1";
-        assert.deepStrictEqual(await this.service.handleCallback(ctx), {
-            identId: "u1",
-            profile: { sub: "u1", email: "u1@webda.io" }
-        });
-        ctx.getParameters().code = "u2";
-        await assert.rejects(() => this.service.handleCallback(ctx), WebdaError.Forbidden);
-        // Verify tokens verification
-        await assert.rejects(() => this.service.handleToken(ctx), WebdaError.BadRequest);
-        ctx = await this.newContext({ tokens: { id_token: "u1" } });
-        assert.deepStrictEqual(await this.service.handleToken(ctx), {
-            identId: "u1",
-            profile: { sub: "u1", email: "u1@webda.io" }
-        });
-    }
-    async localClient() {
-        const fakeClient = {};
-        // @ts-ignore
-        this.service._client = fakeClient;
-        assert.strictEqual(await this.service.getLocalClient(null, null, null), fakeClient);
-        // @ts-ignore
-        this.service._client = undefined;
-        const client = await this.service.getLocalClient({ id_token: "mytoken" }, null, null);
-        assert.deepStrictEqual(client.credentials, { id_token: "mytoken" });
-        // @ts-ignore
-        this.service._client = undefined;
-        let calledUrl;
-        await assert.rejects(async () => this.service.getLocalClient(null, url => {
-            calledUrl = url;
-            fetch("http://localhost:3000/oauth2callback", undefined);
-        }, null), /Failed/);
-        this.mockClient();
-        await assert.rejects(async () => this.service.getLocalClient(null, url => {
-            fetch("http://localhost:3000/oauth2callback?code=u2", undefined);
-        }, null), /Cannot read propert/);
-        let token;
-        await this.service.getLocalClient(null, url => {
-            // cov only
-            fetch("http://localhost:3000/cov", {});
-            fetch("http://localhost:3000/oauth2callback?code=u1", {});
-        }, async (t) => {
-            token = t;
-        });
-        assert.strictEqual(calledUrl, "https://accounts.google.com/o/oauth2/v2/auth?access_type=offline&scope=email&redirect_uri=http%3A%2F%2Flocalhost%3A3000%2Foauth2callback&response_type=code&client_id=fake");
-    }
-};
-__decorate([
-    test
-], GoogleAuthTest.prototype, "cov", null);
-__decorate([
-    test
-], GoogleAuthTest.prototype, "generateAuthUrl", null);
-__decorate([
-    test
-], GoogleAuthTest.prototype, "tokenAndCallback", null);
-__decorate([
-    test
-], GoogleAuthTest.prototype, "localClient", null);
-GoogleAuthTest = __decorate([
-    suite
-], GoogleAuthTest);
-//# sourceMappingURL=google-auth.spec.js.map

package/lib/google-auth.spec.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"google-auth.spec.js","sourceRoot":"","sources":["../src/google-auth.spec.ts"],"names":[],"mappings":";;;;;;AAAA,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,iBAAiB,CAAC;AAC9C,OAAO,EAAgB,UAAU,EAAE,MAAM,aAAa,CAAC;AACvD,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AACjD,OAAO,KAAK,MAAM,MAAM,QAAQ,CAAC;AACjC,OAAO,KAAK,MAAM,YAAY,CAAC;AAC/B,OAAO,EAAE,oBAAoB,EAAE,MAAM,eAAe,CAAC;AAErD,IAAM,cAAc,GAApB,MAAM,cAAe,SAAQ,SAAS;IAGpC,KAAK,CAAC,MAAM;QACV,MAAM,KAAK,CAAC,MAAM,EAAE,CAAC;QACrB,IAAI,CAAC,OAAO,GAAG,IAAI,oBAAoB,CAAC,IAAI,CAAC,KAAK,EAAE,QAAQ,EAAE;YAC5D,SAAS,EAAE,MAAM;YACjB,aAAa,EAAE,QAAQ;SACxB,CAAC,CAAC;IACL,CAAC;IAGD,GAAG;QACD,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,QAAQ,CAAC,CAAC;QACrD,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,aAAa,EAAE,EAAE,SAAS,CAAC,CAAC;QAC5D,MAAM,CAAC,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC,kBAAkB,EAAE,EAAE,CAAC,2BAA2B,CAAC,CAAC,CAAC;QACzF,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,IAAI,CAAC,CAAC;QAClD,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,sBAAsB,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IACtE,CAAC;IAGD,eAAe;QACb,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,eAAe,CAAC,QAAQ,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;QACzE,MAAM,CAAC,WAAW,CAChB,GAAG,EACH,iJAAiJ,CAClJ,CAAC;IACJ,CAAC;IAED,UAAU;QACR,cAAc;QACd,aAAa;QACb,IAAI,CAAC,OAAO,CAAC,cAAc,GAAG,GAAG,EAAE;YACjC,OAAO;gBACL,QAAQ,EAAE,KAAK,EAAC,GAAG,EAAC,EAAE;oBACpB,IAAI,GAAG,KAAK,IAAI;wBAAE,OAAO,EAAE,MAAM,EAAE,EAAE,QAAQ,EAAE,GAAG,EAAE,EAAE,CAAC;gBACzD,CAAC;gBACD,eAAe,EAAE,GAAG,EAAE;oBACpB,OAAO,GAAG,CAAC;gBACb,CAAC;gBACD,cAAc,EAAE,GAAG,EAAE,GAAE,CAAC;gBACxB,aAAa,EAAE,KAAK,EAAC,IAAI,EAAC,EAAE;oBAC1B,IAAI,IAAI,CAAC,OAAO,KAAK,IAAI,EAAE,CAAC;wBAC1B,OAAO;4BACL,UAAU,EAAE,GAAG,EAAE;gCACf,OAAO;oCACL,GAAG,EAAE,IAAI;oCACT,KAAK,EAAE,aAAa;iCACrB,CAAC;4BACJ,CAAC;yBACF,CAAC;oBACJ,CAAC;gBACH,CAAC;aACF,CAAC;QACJ,CAAC,CAAC;IACJ,CAAC;IAEK,AAAN,KAAK,CAAC,gBAAgB;;QACpB,IAAI,CAAC,UAAU,EAAE,CAAC;QAClB,IAAI,GAAG,GAAG,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC;QAClC,yBAAyB;QACzB,GAAG,CAAC,aAAa,EAAE,CAAC,KAAK,GAAG,MAAM,CAAC;QACnC,MAAA,GAAG,CAAC,UAAU,EAAgB,EAAC,KAAK,QAAL,KAAK,GAAK,EAAE,EAAC;QAC5C,GAAG,CAAC,UAAU,EAAgB,CAAC,KAAK,CAAC,KAAK,GAAG,SAAS,CAAC;QACvD,MAAM,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,GAAG,CAAC,EAAE,UAAU,CAAC,SAAS,CAAC,CAAC;QACnF,GAAG,CAAC,UAAU,EAAgB,CAAC,KAAK,CAAC,KAAK,GAAG,MAAM,CAAC;QACpD,GAAG,CAAC,aAAa,EAAE,CAAC,IAAI,GAAG,IAAI,CAAC;QAChC,MAAM,CAAC,eAAe,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,GAAG,CAAC,EAAE;YAC7D,OAAO,EAAE,IAAI;YACb,OAAO,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,aAAa,EAAE;SAC7C,CAAC,CAAC;QACH,GAAG,CAAC,aAAa,EAAE,CAAC,IAAI,GAAG,IAAI,CAAC;QAChC,MAAM,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,GAAG,CAAC,EAAE,UAAU,CAAC,SAAS,CAAC,CAAC;QAEnF,6BAA6B;QAC7B,MAAM,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,UAAU,CAAC,UAAU,CAAC,CAAC;QACjF,GAAG,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,EAAE,MAAM,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;QAC5D,MAAM,CAAC,eAAe,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE;YAC1D,OAAO,EAAE,IAAI;YACb,OAAO,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,aAAa,EAAE;SAC7C,CAAC,CAAC;IACL,CAAC;IAGK,AAAN,KAAK,CAAC,WAAW;QACf,MAAM,UAAU,GAAG,EAAE,CAAC;QACtB,aAAa;QACb,IAAI,CAAC,OAAO,CAAC,OAAO,GAAG,UAAU,CAAC;QAClC,MAAM,CAAC,WAAW,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,UAAU,CAAC,CAAC;QACpF,aAAa;QACb,IAAI,CAAC,OAAO,CAAC,OAAO,GAAG,SAAS,CAAC;QACjC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,EAAE,QAAQ,EAAE,SAAS,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;QACtF,MAAM,CAAC,eAAe,CAAC,MAAM,CAAC,WAAW,EAAE,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,CAAC;QACpE,aAAa;QACb,IAAI,CAAC,OAAO,CAAC,OAAO,GAAG,SAAS,CAAC;QACjC,IAAI,SAAS,CAAC;QACd,MAAM,MAAM,CAAC,OAAO,CAClB,KAAK,IAAI,EAAE,CACT,IAAI,CAAC,OAAO,CAAC,cAAc,CACzB,IAAI,EACJ,GAAG,CAAC,EAAE;YACJ,SAAS,GAAG,GAAG,CAAC;YAChB,KAAK,CAAC,sCAAsC,EAAE,SAAS,CAAC,CAAC;QAC3D,CAAC,EACD,IAAI,CACL,EACH,QAAQ,CACT,CAAC;QACF,IAAI,CAAC,UAAU,EAAE,CAAC;QAElB,MAAM,MAAM,CAAC,OAAO,CAClB,KAAK,IAAI,EAAE,CACT,IAAI,CAAC,OAAO,CAAC,cAAc,CACzB,IAAI,EACJ,GAAG,CAAC,EAAE;YACJ,KAAK,CAAC,8CAA8C,EAAE,SAAS,CAAC,CAAC;QACnE,CAAC,EACD,IAAI,CACL,EACH,qBAAqB,CACtB,CAAC;QACF,IAAI,KAAK,CAAC;QACV,MAAM,IAAI,CAAC,OAAO,CAAC,cAAc,CAC/B,IAAI,EACJ,GAAG,CAAC,EAAE;YACJ,WAAW;YACX,KAAK,CAAC,2BAA2B,EAAE,EAAE,CAAC,CAAC;YACvC,KAAK,CAAC,8CAA8C,EAAE,EAAE,CAAC,CAAC;QAC5D,CAAC,EACD,KAAK,EAAC,CAAC,EAAC,EAAE;YACR,KAAK,GAAG,CAAC,CAAC;QACZ,CAAC,CACF,CAAC;QACF,MAAM,CAAC,WAAW,CAChB,SAAS,EACT,4KAA4K,CAC7K,CAAC;IACJ,CAAC;CACF,CAAA;AA9HC;IADC,IAAI;yCAOJ;AAGD;IADC,IAAI;qDAOJ;AA8BK;IADL,IAAI;sDAyBJ;AAGK;IADL,IAAI;iDAsDJ;AAzIG,cAAc;IADnB,KAAK;GACA,cAAc,CA0InB"}