@webiny/app-admin 6.5.0-beta.9 → 6.5.1-beta.0

package/features/formModel/fieldTypes/dateLimits.js

@@ -0,0 +1,64 @@
+import { z } from "zod";
+import { getLocalToday, resolveDateBound } from "@webiny/utils";
+const describeBound = (bound)=>"string" == typeof bound ? bound : `"${bound.expression}"`;
+function resolveDateLimits(limits, today = getLocalToday()) {
+    const resolve = (bounds = [])=>bounds.flatMap((bound)=>{
+            try {
+                return [
+                    resolveDateBound(bound, today)
+                ];
+            } catch  {
+                return [];
+            }
+        });
+    const gte = resolve(limits?.gte);
+    const lte = resolve(limits?.lte);
+    return {
+        min: gte.length ? gte.reduce((a, b)=>a > b ? a : b) : void 0,
+        max: lte.length ? lte.reduce((a, b)=>a < b ? a : b) : void 0
+    };
+}
+function getDateLimits(rendererSettings) {
+    if (!rendererSettings || "object" != typeof rendererSettings) return;
+    return rendererSettings.dateLimits;
+}
+const DEFAULT_DATE_GTE_MESSAGE = "Must be on or after {date}.";
+const DEFAULT_DATE_LTE_MESSAGE = "Must be on or before {date}.";
+function formatDateLimitMessage(message, date) {
+    return message.replace(/\{date}/g, date);
+}
+function createDateLimitsSchema(gte, lte, formatDate = (date)=>date) {
+    return z.any().superRefine((value, ctx)=>{
+        const values = (Array.isArray(value) ? value : [
+            value
+        ]).filter((v)=>null != v && "" !== v);
+        if (0 === values.length) return;
+        const today = getLocalToday();
+        const check = (limit, kind)=>{
+            let date;
+            try {
+                date = resolveDateBound(limit.bound, today);
+            } catch  {
+                ctx.addIssue({
+                    code: "custom",
+                    message: `Invalid date limit ${describeBound(limit.bound)}.`
+                });
+                return false;
+            }
+            const ok = values.every((v)=>"gte" === kind ? String(v) >= date : String(v) <= date);
+            if (!ok) {
+                const message = limit.message || ("gte" === kind ? DEFAULT_DATE_GTE_MESSAGE : DEFAULT_DATE_LTE_MESSAGE);
+                ctx.addIssue({
+                    code: "custom",
+                    message: formatDateLimitMessage(message, formatDate(date))
+                });
+            }
+            return ok;
+        };
+        for (const limit of gte)if (!check(limit, "gte")) return;
+        for (const limit of lte)if (!check(limit, "lte")) return;
+    });
+}
+export { DEFAULT_DATE_GTE_MESSAGE, DEFAULT_DATE_LTE_MESSAGE, createDateLimitsSchema, formatDateLimitMessage, getDateLimits, resolveDateLimits };
+
+//# sourceMappingURL=dateLimits.js.map

package/features/formModel/fieldTypes/dateLimits.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"features/formModel/fieldTypes/dateLimits.js","sources":["../../../../src/features/formModel/fieldTypes/dateLimits.ts"],"sourcesContent":["import { z } from \"zod\";\nimport { getLocalToday, resolveDateBound, type DateBound } from \"@webiny/utils\";\n\nexport type { DateBound };\n\nexport interface IDateLimit {\n    bound: DateBound;\n    message?: string;\n}\n\n/** A field's date limits, as `datetime()` hands them to its renderer in `rendererSettings`. */\nexport interface IDateLimits {\n    gte: DateBound[];\n    lte: DateBound[];\n}\n\n/** The resolved limits: the latest lower limit and the earliest upper one. */\nexport interface IResolvedDateLimits {\n    min?: string;\n    max?: string;\n}\n\nconst describeBound = (bound: DateBound) =>\n    typeof bound === \"string\" ? bound : `\"${bound.expression}\"`;\n\n/**\n * A field's limits as dates, with expressions worked out against `today` (the editor's local\n * date by default). An expression that can't be read is left out.\n */\nexport function resolveDateLimits(\n    limits: IDateLimits | undefined,\n    today: string = getLocalToday()\n): IResolvedDateLimits {\n    const resolve = (bounds: DateBound[] = []) =>\n        bounds.flatMap(bound => {\n            try {\n                return [resolveDateBound(bound, today)];\n            } catch {\n                return [];\n            }\n        });\n    const gte = resolve(limits?.gte);\n    const lte = resolve(limits?.lte);\n    return {\n        min: gte.length ? gte.reduce((a, b) => (a > b ? a : b)) : undefined,\n        max: lte.length ? lte.reduce((a, b) => (a < b ? a : b)) : undefined\n    };\n}\n\n/** Reads the limits `datetime()` put into a field's renderer settings. */\nexport function getDateLimits(rendererSettings: unknown): IDateLimits | undefined {\n    if (!rendererSettings || typeof rendererSettings !== \"object\") {\n        return undefined;\n    }\n    return (rendererSettings as { dateLimits?: IDateLimits }).dateLimits;\n}\n\n/** Shows a worked-out limit in a message; by default as it is stored (`2008-10-19`). */\nexport type DateLimitFormatter = (date: string) => string;\n\n/** The message when a limit has none of its own. */\nexport const DEFAULT_DATE_GTE_MESSAGE = \"Must be on or after {date}.\";\nexport const DEFAULT_DATE_LTE_MESSAGE = \"Must be on or before {date}.\";\n\n/** Puts the worked-out limit into a message's `{date}`. */\nexport function formatDateLimitMessage(message: string, date: string): string {\n    return message.replace(/\\{date}/g, date);\n}\n\n/**\n * A schema that checks a value, or each value of a list, against the limits. Expressions are\n * worked out against the editor's local date at the moment of the check, so a form left open\n * overnight checks against the new day. A message's `{date}` is the worked-out limit.\n */\nexport function createDateLimitsSchema(\n    gte: IDateLimit[],\n    lte: IDateLimit[],\n    formatDate: DateLimitFormatter = date => date\n): z.ZodTypeAny {\n    return z.any().superRefine((value, ctx) => {\n        const values = (Array.isArray(value) ? value : [value]).filter(\n            v => v !== null && v !== undefined && v !== \"\"\n        );\n        if (values.length === 0) {\n            return;\n        }\n        const today = getLocalToday();\n        const check = (limit: IDateLimit, kind: \"gte\" | \"lte\") => {\n            let date: string;\n            try {\n                date = resolveDateBound(limit.bound, today);\n            } catch {\n                ctx.addIssue({\n                    code: \"custom\",\n                    message: `Invalid date limit ${describeBound(limit.bound)}.`\n                });\n                return false;\n            }\n            const ok = values.every(v => (kind === \"gte\" ? String(v) >= date : String(v) <= date));\n            if (!ok) {\n                const message =\n                    limit.message ||\n                    (kind === \"gte\" ? DEFAULT_DATE_GTE_MESSAGE : DEFAULT_DATE_LTE_MESSAGE);\n                ctx.addIssue({\n                    code: \"custom\",\n                    message: formatDateLimitMessage(message, formatDate(date))\n                });\n            }\n            return ok;\n        };\n        for (const limit of gte) {\n            if (!check(limit, \"gte\")) {\n                return;\n            }\n        }\n        for (const limit of lte) {\n            if (!check(limit, \"lte\")) {\n                return;\n            }\n        }\n    });\n}\n"],"names":["describeBound","bound","resolveDateLimits","limits","today","getLocalToday","resolve","bounds","resolveDateBound","gte","lte","a","b","undefined","getDateLimits","rendererSettings","DEFAULT_DATE_GTE_MESSAGE","DEFAULT_DATE_LTE_MESSAGE","formatDateLimitMessage","message","date","createDateLimitsSchema","formatDate","z","value","ctx","values","Array","v","check","limit","kind","ok","String"],"mappings":";;AAsBA,MAAMA,gBAAgB,CAACC,QACnB,AAAiB,YAAjB,OAAOA,QAAqBA,QAAQ,CAAC,CAAC,EAAEA,MAAM,UAAU,CAAC,CAAC,CAAC;AAMxD,SAASC,kBACZC,MAA+B,EAC/BC,QAAgBC,eAAe;IAE/B,MAAMC,UAAU,CAACC,SAAsB,EAAE,GACrCA,OAAO,OAAO,CAACN,CAAAA;YACX,IAAI;gBACA,OAAO;oBAACO,iBAAiBP,OAAOG;iBAAO;YAC3C,EAAE,OAAM;gBACJ,OAAO,EAAE;YACb;QACJ;IACJ,MAAMK,MAAMH,QAAQH,QAAQ;IAC5B,MAAMO,MAAMJ,QAAQH,QAAQ;IAC5B,OAAO;QACH,KAAKM,IAAI,MAAM,GAAGA,IAAI,MAAM,CAAC,CAACE,GAAGC,IAAOD,IAAIC,IAAID,IAAIC,KAAMC;QAC1D,KAAKH,IAAI,MAAM,GAAGA,IAAI,MAAM,CAAC,CAACC,GAAGC,IAAOD,IAAIC,IAAID,IAAIC,KAAMC;IAC9D;AACJ;AAGO,SAASC,cAAcC,gBAAyB;IACnD,IAAI,CAACA,oBAAoB,AAA4B,YAA5B,OAAOA,kBAC5B;IAEJ,OAAQA,iBAAkD,UAAU;AACxE;AAMO,MAAMC,2BAA2B;AACjC,MAAMC,2BAA2B;AAGjC,SAASC,uBAAuBC,OAAe,EAAEC,IAAY;IAChE,OAAOD,QAAQ,OAAO,CAAC,YAAYC;AACvC;AAOO,SAASC,uBACZZ,GAAiB,EACjBC,GAAiB,EACjBY,aAAiCF,CAAAA,OAAQA,IAAI;IAE7C,OAAOG,EAAE,GAAG,GAAG,WAAW,CAAC,CAACC,OAAOC;QAC/B,MAAMC,SAAUC,AAAAA,CAAAA,MAAM,OAAO,CAACH,SAASA,QAAQ;YAACA;SAAK,A,EAAG,MAAM,CAC1DI,CAAAA,IAAKA,QAAAA,KAAiCA,AAAM,OAANA;QAE1C,IAAIF,AAAkB,MAAlBA,OAAO,MAAM,EACb;QAEJ,MAAMtB,QAAQC;QACd,MAAMwB,QAAQ,CAACC,OAAmBC;YAC9B,IAAIX;YACJ,IAAI;gBACAA,OAAOZ,iBAAiBsB,MAAM,KAAK,EAAE1B;YACzC,EAAE,OAAM;gBACJqB,IAAI,QAAQ,CAAC;oBACT,MAAM;oBACN,SAAS,CAAC,mBAAmB,EAAEzB,cAAc8B,MAAM,KAAK,EAAE,CAAC,CAAC;gBAChE;gBACA,OAAO;YACX;YACA,MAAME,KAAKN,OAAO,KAAK,CAACE,CAAAA,IAAMG,AAAS,UAATA,OAAiBE,OAAOL,MAAMR,OAAOa,OAAOL,MAAMR;YAChF,IAAI,CAACY,IAAI;gBACL,MAAMb,UACFW,MAAM,OAAO,IACZC,CAAAA,AAAS,UAATA,OAAiBf,2BAA2BC,wBAAuB;gBACxEQ,IAAI,QAAQ,CAAC;oBACT,MAAM;oBACN,SAASP,uBAAuBC,SAASG,WAAWF;gBACxD;YACJ;YACA,OAAOY;QACX;QACA,KAAK,MAAMF,SAASrB,IAChB,IAAI,CAACoB,MAAMC,OAAO,QACd;QAGR,KAAK,MAAMA,SAASpB,IAChB,IAAI,CAACmB,MAAMC,OAAO,QACd;IAGZ;AACJ"}

package/features/formModel/fieldTypes/dateLimits.test.d.ts

@@ -0,0 +1 @@
+export {};

package/features/formModel/fieldTypes/dateLimits.test.js

@@ -0,0 +1,60 @@
+import { describe, expect, it } from "vitest";
+import { getDateLimits, resolveDateLimits } from "./dateLimits.js";
+describe("resolveDateLimits", ()=>{
+    it("takes the latest lower limit and the earliest upper one", ()=>{
+        expect(resolveDateLimits({
+            gte: [
+                "1900-01-01",
+                {
+                    expression: "today-100y"
+                }
+            ],
+            lte: [
+                {
+                    expression: "today-18y"
+                },
+                "2020-01-01"
+            ]
+        }, "2026-10-19")).toEqual({
+            min: "1926-10-19",
+            max: "2008-10-19"
+        });
+    });
+    it("leaves out a side without limits and an expression it can't read", ()=>{
+        expect(resolveDateLimits({
+            gte: [],
+            lte: [
+                {
+                    expression: "nope"
+                }
+            ]
+        }, "2026-10-19")).toEqual({
+            min: void 0,
+            max: void 0
+        });
+        expect(resolveDateLimits(void 0, "2026-10-19")).toEqual({
+            min: void 0,
+            max: void 0
+        });
+    });
+});
+describe("getDateLimits", ()=>{
+    it("reads the limits from renderer settings", ()=>{
+        const dateLimits = {
+            gte: [
+                "2000-01-01"
+            ],
+            lte: []
+        };
+        expect(getDateLimits({
+            type: "date",
+            dateLimits
+        })).toBe(dateLimits);
+        expect(getDateLimits({
+            type: "date"
+        })).toBeUndefined();
+        expect(getDateLimits(void 0)).toBeUndefined();
+    });
+});
+
+//# sourceMappingURL=dateLimits.test.js.map

package/features/formModel/fieldTypes/dateLimits.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"features/formModel/fieldTypes/dateLimits.test.js","sources":["../../../../src/features/formModel/fieldTypes/dateLimits.test.ts"],"sourcesContent":["import { describe, it, expect } from \"vitest\";\nimport { getDateLimits, resolveDateLimits } from \"./dateLimits.js\";\n\ndescribe(\"resolveDateLimits\", () => {\n    it(\"takes the latest lower limit and the earliest upper one\", () => {\n        expect(\n            resolveDateLimits(\n                {\n                    gte: [\"1900-01-01\", { expression: \"today-100y\" }],\n                    lte: [{ expression: \"today-18y\" }, \"2020-01-01\"]\n                },\n                \"2026-10-19\"\n            )\n        ).toEqual({ min: \"1926-10-19\", max: \"2008-10-19\" });\n    });\n\n    it(\"leaves out a side without limits and an expression it can't read\", () => {\n        expect(resolveDateLimits({ gte: [], lte: [{ expression: \"nope\" }] }, \"2026-10-19\")).toEqual(\n            { min: undefined, max: undefined }\n        );\n        expect(resolveDateLimits(undefined, \"2026-10-19\")).toEqual({\n            min: undefined,\n            max: undefined\n        });\n    });\n});\n\ndescribe(\"getDateLimits\", () => {\n    it(\"reads the limits from renderer settings\", () => {\n        const dateLimits = { gte: [\"2000-01-01\"], lte: [] };\n        expect(getDateLimits({ type: \"date\", dateLimits })).toBe(dateLimits);\n        expect(getDateLimits({ type: \"date\" })).toBeUndefined();\n        expect(getDateLimits(undefined)).toBeUndefined();\n    });\n});\n"],"names":["describe","it","expect","resolveDateLimits","undefined","dateLimits","getDateLimits"],"mappings":";;AAGAA,SAAS,qBAAqB;IAC1BC,GAAG,2DAA2D;QAC1DC,OACIC,kBACI;YACI,KAAK;gBAAC;gBAAc;oBAAE,YAAY;gBAAa;aAAE;YACjD,KAAK;gBAAC;oBAAE,YAAY;gBAAY;gBAAG;aAAa;QACpD,GACA,eAEN,OAAO,CAAC;YAAE,KAAK;YAAc,KAAK;QAAa;IACrD;IAEAF,GAAG,oEAAoE;QACnEC,OAAOC,kBAAkB;YAAE,KAAK,EAAE;YAAE,KAAK;gBAAC;oBAAE,YAAY;gBAAO;aAAE;QAAC,GAAG,eAAe,OAAO,CACvF;YAAE,KAAKC;YAAW,KAAKA;QAAU;QAErCF,OAAOC,kBAAkBC,QAAW,eAAe,OAAO,CAAC;YACvD,KAAKA;YACL,KAAKA;QACT;IACJ;AACJ;AAEAJ,SAAS,iBAAiB;IACtBC,GAAG,2CAA2C;QAC1C,MAAMI,aAAa;YAAE,KAAK;gBAAC;aAAa;YAAE,KAAK,EAAE;QAAC;QAClDH,OAAOI,cAAc;YAAE,MAAM;YAAQD;QAAW,IAAI,IAAI,CAACA;QACzDH,OAAOI,cAAc;YAAE,MAAM;QAAO,IAAI,aAAa;QACrDJ,OAAOI,cAAcF,SAAY,aAAa;IAClD;AACJ"}

package/features/formModel/index.d.ts

@@ -1,7 +1,7 @@
 export { FormModelFeature } from "./feature.js";
 import "./renderers.js";
-export { FormModelFactory, RuleEvaluator, FieldType, FieldBuilderRegistry } from "./abstractions.js";
-export type { FormModel, IFieldRendererRegistry, FieldRendererName, FieldRendererSettings, IFormModelFactory, IFormModelConfig, ILayoutBuilder, ILayoutNodeBuilder, IRowBuilder, ISeparatorBuilder, ITabBuilder, ITabsBuilder, IElementBuilder, IObjectBuilder, IFieldBuilder, IOptionsFieldBuilder, IObjectFieldBuilder, IFieldBuilderRegistry, IFormModel, IField, IObjectField, IObjectFieldConfig, IListItemField, IObjectFieldVM, IObjectFieldItemVM, ITemplateBuilder, ITemplateIcon, ITemplateConfig, ITemplateVM, IObjectFieldTemplates, FieldTypeMap, ITypedField, IFieldConfig, IFieldVM, IFieldValidation, IFormVM, IFormError, IValueOption, IRowNode, IRowNodeHandle, IRowNodeVM, ISeparatorNode, ISeparatorNodeVM, IAlertNode, IAlertNodeVM, ITabsNode, ITabDefinition, ITabsNodeVM, ITabDefinitionVM, IElementNode, IElementNodeVM, IObjectNode, ILayoutNodeAccessHandle, LayoutNodeHandleMap, ITabsHandle, ITabHandle, LayoutNode, LayoutNodeVM, LayoutPosition, IPositionedLayoutNode, ILayoutNodeHandle, ILayoutModifier, IFormModifier, IRule, IRuleEvaluator, RuleAction, BeforeChangeCallback, AfterChangeCallback, AfterSetValueCallback, OnBlurCallback, CloneValueCallback, IFieldTypeFactory, FileValue } from "./abstractions.js";
+export { FormModelFactory, RuleEvaluator, FieldType, FieldValueFormatter, FieldBuilderRegistry } from "./abstractions.js";
+export type { FormModel, IFieldRendererRegistry, FieldRendererName, FieldRendererSettings, IFormModelFactory, IFormModelConfig, ILayoutBuilder, ILayoutNodeBuilder, IRowBuilder, ISeparatorBuilder, ITabBuilder, ITabsBuilder, IElementBuilder, IObjectBuilder, IFieldBuilder, IOptionsFieldBuilder, IObjectFieldBuilder, IFieldBuilderRegistry, IFormModel, IField, IObjectField, IObjectFieldConfig, IListItemField, IObjectFieldVM, IObjectFieldItemVM, ITemplateBuilder, ITemplateIcon, ITemplateConfig, ITemplateVM, IObjectFieldTemplates, FieldTypeMap, ITypedField, IFieldConfig, IFieldVM, IFieldValueFormatter, IFieldValidation, IFormVM, IFormError, IValueOption, IRowNode, IRowNodeHandle, IRowNodeVM, ISeparatorNode, ISeparatorNodeVM, IAlertNode, IAlertNodeVM, ITabsNode, ITabDefinition, ITabsNodeVM, ITabDefinitionVM, IElementNode, IElementNodeVM, IObjectNode, ILayoutNodeAccessHandle, LayoutNodeHandleMap, ITabsHandle, ITabHandle, LayoutNode, LayoutNodeVM, LayoutPosition, IPositionedLayoutNode, ILayoutNodeHandle, ILayoutModifier, IFormModifier, IRule, IRuleEvaluator, RuleAction, BeforeChangeCallback, AfterChangeCallback, AfterSetValueCallback, OnBlurCallback, CloneValueCallback, IFieldTypeFactory, FileValue } from "./abstractions.js";
 export { Field } from "./Field.js";
 export { FieldBuilder, createFieldBuilderRegistry } from "./FieldBuilder.js";
 import "./fieldTypes/TextFieldType.js";

package/features/formModel/index.js

@@ -7,7 +7,7 @@ import "./fieldTypes/TextFieldType.js";
 import "./fieldTypes/NumberFieldType.js";
 import "./fieldTypes/BooleanFieldType.js";
 export { FormModelFeature } from "./feature.js";
-export { FieldBuilderRegistry, FieldType, FormModelFactory, RuleEvaluator } from "./abstractions.js";
+export { FieldBuilderRegistry, FieldType, FieldValueFormatter, FormModelFactory, RuleEvaluator } from "./abstractions.js";
 export { Field } from "./Field.js";
 export { FieldBuilder, createFieldBuilderRegistry } from "./FieldBuilder.js";
 export { BooleanFieldBuilder, BooleanFieldType, DateTimeFieldBuilder, DateTimeFieldType, FileFieldBuilder, FileFieldType, FileUrlFieldBuilder, FileUrlFieldType, NumberFieldBuilder, NumberFieldType, ObjectFieldBuilder, ObjectFieldType, TextFieldBuilder, TextFieldType } from "./fieldTypes/index.js";

package/features/formModel/renderers.d.ts

@@ -16,6 +16,7 @@ import "../../base/Base/FieldRenderers/RadioButtonsRenderer.js";
 import "../../base/Base/FieldRenderers/CheckboxesRenderer.js";
 import "../../base/Base/FieldRenderers/DateTimeRenderer.js";
 import "../../base/Base/FieldRenderers/DateTimeInputsRenderer.js";
+import "../../base/Base/FieldRenderers/BirthdayInputRenderer.js";
 import "../../base/Base/FieldRenderers/HiddenRenderer.js";
 import "../../base/Base/FieldRenderers/FilePickerRenderer.js";
 import "../../base/Base/FieldRenderers/CodeEditorRenderer.js";

package/features/formModel/renderers.js

@@ -16,6 +16,7 @@ import "../../base/Base/FieldRenderers/RadioButtonsRenderer.js";
 import "../../base/Base/FieldRenderers/CheckboxesRenderer.js";
 import "../../base/Base/FieldRenderers/DateTimeRenderer.js";
 import "../../base/Base/FieldRenderers/DateTimeInputsRenderer.js";
+import "../../base/Base/FieldRenderers/BirthdayInputRenderer.js";
 import "../../base/Base/FieldRenderers/HiddenRenderer.js";
 import "../../base/Base/FieldRenderers/FilePickerRenderer.js";
 import "../../base/Base/FieldRenderers/CodeEditorRenderer.js";

package/features/security/LogIn/LogInError.d.ts

@@ -0,0 +1,15 @@
+export interface LogInErrorParams {
+    code?: string | null;
+    message: string;
+    data?: Record<string, any> | null;
+}
+/**
+ * A failed `security.login`: either the error the API returned, or the request's own failure
+ * (for example, the tenant in the `x-tenant` header couldn't be loaded).
+ */
+export declare class LogInError extends Error {
+    readonly code: string;
+    readonly data: Record<string, any>;
+    constructor(params: LogInErrorParams);
+    static from(error: unknown): LogInError;
+}

package/features/security/LogIn/LogInError.js

@@ -0,0 +1,25 @@
+class LogInError extends Error {
+    constructor(params){
+        super(params.message);
+        this.name = "LogInError";
+        this.code = params.code ?? "";
+        this.data = params.data ?? {};
+    }
+    static from(error) {
+        if (error instanceof LogInError) return error;
+        if (error && "object" == typeof error) {
+            const { code, message, data } = error;
+            return new LogInError({
+                code,
+                message: message || "Login failed.",
+                data
+            });
+        }
+        return new LogInError({
+            message: String(error)
+        });
+    }
+}
+export { LogInError };
+
+//# sourceMappingURL=LogInError.js.map

package/features/security/LogIn/LogInError.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"features/security/LogIn/LogInError.js","sources":["../../../../src/features/security/LogIn/LogInError.ts"],"sourcesContent":["export interface LogInErrorParams {\n    code?: string | null;\n    message: string;\n    data?: Record<string, any> | null;\n}\n\n/**\n * A failed `security.login`: either the error the API returned, or the request's own failure\n * (for example, the tenant in the `x-tenant` header couldn't be loaded).\n */\nexport class LogInError extends Error {\n    public readonly code: string;\n    public readonly data: Record<string, any>;\n\n    constructor(params: LogInErrorParams) {\n        super(params.message);\n        this.name = \"LogInError\";\n        this.code = params.code ?? \"\";\n        this.data = params.data ?? {};\n    }\n\n    static from(error: unknown): LogInError {\n        if (error instanceof LogInError) {\n            return error;\n        }\n\n        if (error && typeof error === \"object\") {\n            const { code, message, data } = error as Partial<LogInErrorParams>;\n            return new LogInError({\n                code,\n                message: message || \"Login failed.\",\n                data\n            });\n        }\n\n        return new LogInError({ message: String(error) });\n    }\n}\n"],"names":["LogInError","Error","params","error","code","message","data","String"],"mappings":"AAUO,MAAMA,mBAAmBC;IAI5B,YAAYC,MAAwB,CAAE;QAClC,KAAK,CAACA,OAAO,OAAO;QACpB,IAAI,CAAC,IAAI,GAAG;QACZ,IAAI,CAAC,IAAI,GAAGA,OAAO,IAAI,IAAI;QAC3B,IAAI,CAAC,IAAI,GAAGA,OAAO,IAAI,IAAI,CAAC;IAChC;IAEA,OAAO,KAAKC,KAAc,EAAc;QACpC,IAAIA,iBAAiBH,YACjB,OAAOG;QAGX,IAAIA,SAAS,AAAiB,YAAjB,OAAOA,OAAoB;YACpC,MAAM,EAAEC,IAAI,EAAEC,OAAO,EAAEC,IAAI,EAAE,GAAGH;YAChC,OAAO,IAAIH,WAAW;gBAClBI;gBACA,SAASC,WAAW;gBACpBC;YACJ;QACJ;QAEA,OAAO,IAAIN,WAAW;YAAE,SAASO,OAAOJ;QAAO;IACnD;AACJ"}

package/features/security/LogIn/LogInGateway.d.ts

@@ -1,9 +1,9 @@
 import { MainGraphQLClient } from "@webiny/app/features/mainGraphQLClient/index.js";
-import { LogInGateway as Abstraction, LogInRepository } from "./abstractions.js";
+import { LogInGateway as Abstraction } from "./abstractions.js";
 declare class LogInGatewayImpl implements Abstraction.Interface {
     private graphqlClient;
     constructor(graphqlClient: MainGraphQLClient.Interface);
-    execute(): Promise<LogInRepository.IdentityDTO>;
+    execute(): Promise<Abstraction.Result>;
 }
 export declare const LogInGateway: typeof LogInGatewayImpl & {
     __abstraction: import("@webiny/di").Abstraction<import("./abstractions.js").ILogInGateway>;

package/features/security/LogIn/LogInGateway.js

@@ -1,17 +1,34 @@
 import { MainGraphQLClient } from "@webiny/app/features/mainGraphQLClient/index.js";
 import { LogInGateway } from "./abstractions.js";
 import { createLoginMutation } from "./createLoginMutation.js";
+import { LogInError } from "./LogInError.js";
 class LogInGatewayImpl {
     constructor(graphqlClient){
         this.graphqlClient = graphqlClient;
     }
     async execute() {
-        const response = await this.graphqlClient.execute({
-            query: createLoginMutation()
-        });
+        let response;
+        try {
+            response = await this.graphqlClient.execute({
+                query: createLoginMutation()
+            });
+        } catch (error) {
+            throw LogInError.from(error);
+        }
         const { data, error } = response.security.login;
-        if (error) throw new Error(error.message);
-        return data;
+        if (error) throw new LogInError(error);
+        if (!data) throw new LogInError({
+            message: "Login returned no identity."
+        });
+        if ("SecurityLoginTenantSelection" === data.__typename) return {
+            step: "selectTenant",
+            tenants: data.tenants
+        };
+        const { __typename, ...identity } = data;
+        return {
+            step: "done",
+            identity
+        };
     }
 }
 const LogInGateway_LogInGateway = LogInGateway.createImplementation({

package/features/security/LogIn/LogInGateway.js.map

@@ -1 +1 @@
-{"version":3,"file":"features/security/LogIn/LogInGateway.js","sources":["../../../../src/features/security/LogIn/LogInGateway.ts"],"sourcesContent":["import { MainGraphQLClient } from \"@webiny/app/features/mainGraphQLClient/index.js\";\nimport { LogInGateway as Abstraction, LogInRepository } from \"./abstractions.js\";\nimport { createLoginMutation } from \"./createLoginMutation.js\";\n\ninterface LoginMutationResponse {\n    security: {\n        login: {\n            data: LogInRepository.IdentityDTO;\n            error: {\n                message: string;\n            };\n        };\n    };\n}\n\nclass LogInGatewayImpl implements Abstraction.Interface {\n    constructor(private graphqlClient: MainGraphQLClient.Interface) {}\n\n    async execute(): Promise<LogInRepository.IdentityDTO> {\n        const response = await this.graphqlClient.execute<LoginMutationResponse>({\n            query: createLoginMutation()\n        });\n\n        const { data, error } = response.security.login;\n\n        if (error) {\n            throw new Error(error.message);\n        }\n\n        return data;\n    }\n}\n\nexport const LogInGateway = Abstraction.createImplementation({\n    implementation: LogInGatewayImpl,\n    dependencies: [MainGraphQLClient]\n});\n"],"names":["LogInGatewayImpl","graphqlClient","response","createLoginMutation","data","error","Error","LogInGateway","Abstraction","MainGraphQLClient"],"mappings":";;;AAeA,MAAMA;IACF,YAAoBC,aAA0C,CAAE;aAA5CA,aAAa,GAAbA;IAA6C;IAEjE,MAAM,UAAgD;QAClD,MAAMC,WAAW,MAAM,IAAI,CAAC,aAAa,CAAC,OAAO,CAAwB;YACrE,OAAOC;QACX;QAEA,MAAM,EAAEC,IAAI,EAAEC,KAAK,EAAE,GAAGH,SAAS,QAAQ,CAAC,KAAK;QAE/C,IAAIG,OACA,MAAM,IAAIC,MAAMD,MAAM,OAAO;QAGjC,OAAOD;IACX;AACJ;AAEO,MAAMG,4BAAeC,aAAAA,oBAAgC,CAAC;IACzD,gBAAgBR;IAChB,cAAc;QAACS;KAAkB;AACrC"}
+{"version":3,"file":"features/security/LogIn/LogInGateway.js","sources":["../../../../src/features/security/LogIn/LogInGateway.ts"],"sourcesContent":["import { MainGraphQLClient } from \"@webiny/app/features/mainGraphQLClient/index.js\";\nimport type { Tenant } from \"~/features/tenancy/abstractions.js\";\nimport { LogInGateway as Abstraction, LogInRepository } from \"./abstractions.js\";\nimport { createLoginMutation } from \"./createLoginMutation.js\";\nimport { LogInError } from \"./LogInError.js\";\n\ntype LoginResultDTO =\n    | ({ __typename: \"SecurityIdentity\" } & LogInRepository.IdentityDTO)\n    | { __typename: \"SecurityLoginTenantSelection\"; tenants: Tenant[] };\n\ninterface LoginMutationResponse {\n    security: {\n        login: {\n            data: LoginResultDTO | null;\n            error: {\n                code: string;\n                message: string;\n                data: Record<string, any> | null;\n            };\n        };\n    };\n}\n\nclass LogInGatewayImpl implements Abstraction.Interface {\n    constructor(private graphqlClient: MainGraphQLClient.Interface) {}\n\n    async execute(): Promise<Abstraction.Result> {\n        let response: LoginMutationResponse;\n        try {\n            response = await this.graphqlClient.execute<LoginMutationResponse>({\n                query: createLoginMutation()\n            });\n        } catch (error) {\n            throw LogInError.from(error);\n        }\n\n        const { data, error } = response.security.login;\n\n        if (error) {\n            throw new LogInError(error);\n        }\n\n        if (!data) {\n            throw new LogInError({ message: \"Login returned no identity.\" });\n        }\n\n        if (data.__typename === \"SecurityLoginTenantSelection\") {\n            return { step: \"selectTenant\", tenants: data.tenants };\n        }\n\n        const { __typename, ...identity } = data;\n        return { step: \"done\", identity };\n    }\n}\n\nexport const LogInGateway = Abstraction.createImplementation({\n    implementation: LogInGatewayImpl,\n    dependencies: [MainGraphQLClient]\n});\n"],"names":["LogInGatewayImpl","graphqlClient","response","createLoginMutation","error","LogInError","data","__typename","identity","LogInGateway","Abstraction","MainGraphQLClient"],"mappings":";;;;AAuBA,MAAMA;IACF,YAAoBC,aAA0C,CAAE;aAA5CA,aAAa,GAAbA;IAA6C;IAEjE,MAAM,UAAuC;QACzC,IAAIC;QACJ,IAAI;YACAA,WAAW,MAAM,IAAI,CAAC,aAAa,CAAC,OAAO,CAAwB;gBAC/D,OAAOC;YACX;QACJ,EAAE,OAAOC,OAAO;YACZ,MAAMC,WAAW,IAAI,CAACD;QAC1B;QAEA,MAAM,EAAEE,IAAI,EAAEF,KAAK,EAAE,GAAGF,SAAS,QAAQ,CAAC,KAAK;QAE/C,IAAIE,OACA,MAAM,IAAIC,WAAWD;QAGzB,IAAI,CAACE,MACD,MAAM,IAAID,WAAW;YAAE,SAAS;QAA8B;QAGlE,IAAIC,AAAoB,mCAApBA,KAAK,UAAU,EACf,OAAO;YAAE,MAAM;YAAgB,SAASA,KAAK,OAAO;QAAC;QAGzD,MAAM,EAAEC,UAAU,EAAE,GAAGC,UAAU,GAAGF;QACpC,OAAO;YAAE,MAAM;YAAQE;QAAS;IACpC;AACJ;AAEO,MAAMC,4BAAeC,aAAAA,oBAAgC,CAAC;IACzD,gBAAgBV;IAChB,cAAc;QAACW;KAAkB;AACrC"}

package/features/security/LogIn/LogInRepository.d.ts

@@ -1,4 +1,3 @@
-import type { Identity } from "../../../domain/Identity.js";
 import { LogInRepository as Abstraction } from "./abstractions.js";
 import { LogInGateway } from "./abstractions.js";
 import { IdentityMapper } from "./abstractions.js";
@@ -6,7 +5,7 @@ declare class LogInRepositoryImpl implements Abstraction.Interface {
     private gateway;
     private mapper;
     constructor(gateway: LogInGateway.Interface, mapper: IdentityMapper.Interface);
-    login(): Promise<Identity>;
+    login(): Promise<Abstraction.Result>;
 }
 export declare const LogInRepository: typeof LogInRepositoryImpl & {
     __abstraction: import("@webiny/di").Abstraction<import("./abstractions.js").ILogInRepository>;

package/features/security/LogIn/LogInRepository.js

@@ -5,8 +5,12 @@ class LogInRepositoryImpl {
         this.mapper = mapper;
     }
     async login() {
-        const dto = await this.gateway.execute();
-        return this.mapper.toIdentity(dto);
+        const result = await this.gateway.execute();
+        if ("selectTenant" === result.step) return result;
+        return {
+            step: "done",
+            identity: this.mapper.toIdentity(result.identity)
+        };
     }
 }
 const LogInRepository_LogInRepository = LogInRepository.createImplementation({

package/features/security/LogIn/LogInRepository.js.map

@@ -1 +1 @@
-{"version":3,"file":"features/security/LogIn/LogInRepository.js","sources":["../../../../src/features/security/LogIn/LogInRepository.ts"],"sourcesContent":["import type { Identity } from \"~/domain/Identity.js\";\nimport { LogInRepository as Abstraction } from \"./abstractions.js\";\nimport { LogInGateway } from \"./abstractions.js\";\nimport { IdentityMapper } from \"./abstractions.js\";\n\nclass LogInRepositoryImpl implements Abstraction.Interface {\n    constructor(\n        private gateway: LogInGateway.Interface,\n        private mapper: IdentityMapper.Interface\n    ) {}\n\n    async login(): Promise<Identity> {\n        const dto = await this.gateway.execute();\n        return this.mapper.toIdentity(dto);\n    }\n}\n\nexport const LogInRepository = Abstraction.createImplementation({\n    implementation: LogInRepositoryImpl,\n    dependencies: [LogInGateway, IdentityMapper]\n});\n"],"names":["LogInRepositoryImpl","gateway","mapper","dto","LogInRepository","Abstraction","LogInGateway","IdentityMapper"],"mappings":";AAKA,MAAMA;IACF,YACYC,OAA+B,EAC/BC,MAAgC,CAC1C;aAFUD,OAAO,GAAPA;aACAC,MAAM,GAANA;IACT;IAEH,MAAM,QAA2B;QAC7B,MAAMC,MAAM,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO;QACtC,OAAO,IAAI,CAAC,MAAM,CAAC,UAAU,CAACA;IAClC;AACJ;AAEO,MAAMC,kCAAkBC,gBAAAA,oBAAgC,CAAC;IAC5D,gBAAgBL;IAChB,cAAc;QAACM;QAAcC;KAAe;AAChD"}
+{"version":3,"file":"features/security/LogIn/LogInRepository.js","sources":["../../../../src/features/security/LogIn/LogInRepository.ts"],"sourcesContent":["import { LogInRepository as Abstraction } from \"./abstractions.js\";\nimport { LogInGateway } from \"./abstractions.js\";\nimport { IdentityMapper } from \"./abstractions.js\";\n\nclass LogInRepositoryImpl implements Abstraction.Interface {\n    constructor(\n        private gateway: LogInGateway.Interface,\n        private mapper: IdentityMapper.Interface\n    ) {}\n\n    async login(): Promise<Abstraction.Result> {\n        const result = await this.gateway.execute();\n        if (result.step === \"selectTenant\") {\n            return result;\n        }\n\n        return { step: \"done\", identity: this.mapper.toIdentity(result.identity) };\n    }\n}\n\nexport const LogInRepository = Abstraction.createImplementation({\n    implementation: LogInRepositoryImpl,\n    dependencies: [LogInGateway, IdentityMapper]\n});\n"],"names":["LogInRepositoryImpl","gateway","mapper","result","LogInRepository","Abstraction","LogInGateway","IdentityMapper"],"mappings":";AAIA,MAAMA;IACF,YACYC,OAA+B,EAC/BC,MAAgC,CAC1C;aAFUD,OAAO,GAAPA;aACAC,MAAM,GAANA;IACT;IAEH,MAAM,QAAqC;QACvC,MAAMC,SAAS,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO;QACzC,IAAIA,AAAgB,mBAAhBA,OAAO,IAAI,EACX,OAAOA;QAGX,OAAO;YAAE,MAAM;YAAQ,UAAU,IAAI,CAAC,MAAM,CAAC,UAAU,CAACA,OAAO,QAAQ;QAAE;IAC7E;AACJ;AAEO,MAAMC,kCAAkBC,gBAAAA,oBAAgC,CAAC;IAC5D,gBAAgBL;IAChB,cAAc;QAACM;QAAcC;KAAe;AAChD"}

package/features/security/LogIn/LogInUseCase.d.ts

@@ -1,12 +1,17 @@
 import { LogInRepository, LogInUseCase as UseCase } from "./abstractions.js";
 import { AuthenticationContext } from "../../../features/security/AuthenticationContext/index.js";
 import { IdentityContext } from "../../../features/security/IdentityContext/index.js";
+import { LoginTenantResolver } from "../../../features/security/LoginTenantResolver/index.js";
+import { TenantContext } from "../../../features/tenancy/abstractions.js";
 declare class LoginUseCaseImpl implements UseCase.Interface {
     private authContext;
     private identityContext;
     private logInRepository;
-    constructor(authContext: AuthenticationContext.Interface, identityContext: IdentityContext.Interface, logInRepository: LogInRepository.Interface);
-    execute(params: UseCase.Params): Promise<void>;
+    private tenantResolver;
+    private tenantContext;
+    constructor(authContext: AuthenticationContext.Interface, identityContext: IdentityContext.Interface, logInRepository: LogInRepository.Interface, tenantResolver: LoginTenantResolver.Interface, tenantContext: TenantContext.Interface);
+    execute(params: UseCase.Params): Promise<UseCase.Result>;
+    private applyResolution;
     private validatePermissions;
 }
 export declare const LogInUseCase: typeof LoginUseCaseImpl & {

package/features/security/LogIn/LogInUseCase.js

@@ -1,11 +1,16 @@
 import { LogInRepository, LogInUseCase } from "./abstractions.js";
 import { AuthenticationContext } from "../AuthenticationContext/index.js";
 import { IdentityContext } from "../IdentityContext/index.js";
+import { LoginTenantResolver } from "../LoginTenantResolver/index.js";
+import { TenantContext } from "../../tenancy/abstractions.js";
+import { LogInError } from "./LogInError.js";
 class LoginUseCaseImpl {
-    constructor(authContext, identityContext, logInRepository){
+    constructor(authContext, identityContext, logInRepository, tenantResolver, tenantContext){
         this.authContext = authContext;
         this.identityContext = identityContext;
         this.logInRepository = logInRepository;
+        this.tenantResolver = tenantResolver;
+        this.tenantContext = tenantContext;
         this.validatePermissions = (permissions)=>{
             const appPermissions = permissions.filter((p)=>"aacl" !== p.name);
             if (0 === appPermissions.length) throw new Error("You have no permissions on this tenant!");
@@ -14,9 +19,52 @@ class LoginUseCaseImpl {
     async execute(params) {
         this.authContext.setIdTokenProvider(params.idTokenProvider);
         if (params.logoutCallback) this.authContext.setLogoutCallback(params.logoutCallback);
-        const identity = await this.logInRepository.login();
+        let result;
+        try {
+            result = await this.logInRepository.login();
+        } catch (error) {
+            const logInError = LogInError.from(error);
+            return this.applyResolution(await this.tenantResolver.resolveError(logInError), ()=>{
+                throw logInError;
+            });
+        }
+        if ("selectTenant" === result.step) {
+            const resolution = await this.tenantResolver.resolveTenants(result.tenants);
+            return this.applyResolution(resolution, ()=>{
+                throw new LogInError({
+                    code: "Security/Identity/TenantSelectionFailed",
+                    message: "Unable to find a tenant to log into."
+                });
+            });
+        }
+        const { identity } = result;
         this.validatePermissions(identity.getPermissions());
         this.identityContext.setIdentity(identity);
+        return {
+            type: "loggedIn"
+        };
+    }
+    applyResolution(resolution, unresolved) {
+        switch(resolution.type){
+            case "switchTenant":
+                if (resolution.tenantId === this.tenantContext.getCurrentTenant()) return unresolved();
+                this.tenantContext.setTenant(resolution.tenantId);
+                return {
+                    type: "switchingTenant",
+                    tenantId: resolution.tenantId
+                };
+            case "selectTenant":
+                return {
+                    type: "selectTenant",
+                    tenants: resolution.tenants
+                };
+            case "noTenantAccess":
+                return {
+                    type: "noTenantAccess"
+                };
+            default:
+                return unresolved();
+        }
     }
 }
 const LogInUseCase_LogInUseCase = LogInUseCase.createImplementation({
@@ -24,7 +72,9 @@ const LogInUseCase_LogInUseCase = LogInUseCase.createImplementation({
     dependencies: [
         AuthenticationContext,
         IdentityContext,
-        LogInRepository
+        LogInRepository,
+        LoginTenantResolver,
+        TenantContext
     ]
 });
 export { LogInUseCase_LogInUseCase as LogInUseCase };

package/features/security/LogIn/LogInUseCase.js.map

@@ -1 +1 @@
-{"version":3,"file":"features/security/LogIn/LogInUseCase.js","sources":["../../../../src/features/security/LogIn/LogInUseCase.ts"],"sourcesContent":["import { LogInRepository, LogInUseCase as UseCase } from \"./abstractions.js\";\nimport { AuthenticationContext } from \"~/features/security/AuthenticationContext/index.js\";\nimport { IdentityContext } from \"~/features/security/IdentityContext/index.js\";\nimport type { Identity } from \"~/domain/Identity.js\";\n\nclass LoginUseCaseImpl implements UseCase.Interface {\n    constructor(\n        private authContext: AuthenticationContext.Interface,\n        private identityContext: IdentityContext.Interface,\n        private logInRepository: LogInRepository.Interface\n    ) {}\n\n    async execute(params: UseCase.Params): Promise<void> {\n        // 1. Set authentication providers\n        this.authContext.setIdTokenProvider(params.idTokenProvider);\n        if (params.logoutCallback) {\n            this.authContext.setLogoutCallback(params.logoutCallback);\n        }\n\n        // TODO: if it's a multi-tenant system, and current tenant is not known (no URL param, no localStorage),\n        // execute the GET_DEFAULT_TENANT query to first determine the tenant. Only then login the user.\n\n        const identity = await this.logInRepository.login();\n\n        // 3. Ensure identity has some permissions\n        this.validatePermissions(identity.getPermissions());\n\n        // 4. Set identity (user is now \"logged in\")\n        this.identityContext.setIdentity(identity);\n    }\n\n    private validatePermissions = (permissions: Identity.Permission[]) => {\n        const appPermissions = permissions.filter(p => p.name !== \"aacl\");\n        if (appPermissions.length === 0) {\n            throw new Error(\"You have no permissions on this tenant!\");\n        }\n    };\n}\n\nexport const LogInUseCase = UseCase.createImplementation({\n    implementation: LoginUseCaseImpl,\n    dependencies: [AuthenticationContext, IdentityContext, LogInRepository]\n});\n"],"names":["LoginUseCaseImpl","authContext","identityContext","logInRepository","permissions","appPermissions","p","Error","params","identity","LogInUseCase","UseCase","AuthenticationContext","IdentityContext","LogInRepository"],"mappings":";;;AAKA,MAAMA;IACF,YACYC,WAA4C,EAC5CC,eAA0C,EAC1CC,eAA0C,CACpD;aAHUF,WAAW,GAAXA;aACAC,eAAe,GAAfA;aACAC,eAAe,GAAfA;aAsBJ,mBAAmB,GAAG,CAACC;YAC3B,MAAMC,iBAAiBD,YAAY,MAAM,CAACE,CAAAA,IAAKA,AAAW,WAAXA,EAAE,IAAI;YACrD,IAAID,AAA0B,MAA1BA,eAAe,MAAM,EACrB,MAAM,IAAIE,MAAM;QAExB;IA1BG;IAEH,MAAM,QAAQC,MAAsB,EAAiB;QAEjD,IAAI,CAAC,WAAW,CAAC,kBAAkB,CAACA,OAAO,eAAe;QAC1D,IAAIA,OAAO,cAAc,EACrB,IAAI,CAAC,WAAW,CAAC,iBAAiB,CAACA,OAAO,cAAc;QAM5D,MAAMC,WAAW,MAAM,IAAI,CAAC,eAAe,CAAC,KAAK;QAGjD,IAAI,CAAC,mBAAmB,CAACA,SAAS,cAAc;QAGhD,IAAI,CAAC,eAAe,CAAC,WAAW,CAACA;IACrC;AAQJ;AAEO,MAAMC,4BAAeC,aAAAA,oBAA4B,CAAC;IACrD,gBAAgBX;IAChB,cAAc;QAACY;QAAuBC;QAAiBC;KAAgB;AAC3E"}
+{"version":3,"file":"features/security/LogIn/LogInUseCase.js","sources":["../../../../src/features/security/LogIn/LogInUseCase.ts"],"sourcesContent":["import { LogInRepository, LogInUseCase as UseCase } from \"./abstractions.js\";\nimport { AuthenticationContext } from \"~/features/security/AuthenticationContext/index.js\";\nimport { IdentityContext } from \"~/features/security/IdentityContext/index.js\";\nimport { LoginTenantResolver } from \"~/features/security/LoginTenantResolver/index.js\";\nimport { TenantContext } from \"~/features/tenancy/abstractions.js\";\nimport type { Identity } from \"~/domain/Identity.js\";\nimport { LogInError } from \"./LogInError.js\";\n\nclass LoginUseCaseImpl implements UseCase.Interface {\n    constructor(\n        private authContext: AuthenticationContext.Interface,\n        private identityContext: IdentityContext.Interface,\n        private logInRepository: LogInRepository.Interface,\n        private tenantResolver: LoginTenantResolver.Interface,\n        private tenantContext: TenantContext.Interface\n    ) {}\n\n    async execute(params: UseCase.Params): Promise<UseCase.Result> {\n        // 1. Set authentication providers\n        this.authContext.setIdTokenProvider(params.idTokenProvider);\n        if (params.logoutCallback) {\n            this.authContext.setLogoutCallback(params.logoutCallback);\n        }\n\n        // 2. Log in on the current tenant. If the user can't, find the tenant they can log into.\n        let result: LogInRepository.Result;\n        try {\n            result = await this.logInRepository.login();\n        } catch (error) {\n            const logInError = LogInError.from(error);\n            return this.applyResolution(await this.tenantResolver.resolveError(logInError), () => {\n                throw logInError;\n            });\n        }\n\n        if (result.step === \"selectTenant\") {\n            const resolution = await this.tenantResolver.resolveTenants(result.tenants);\n            return this.applyResolution(resolution, () => {\n                throw new LogInError({\n                    code: \"Security/Identity/TenantSelectionFailed\",\n                    message: \"Unable to find a tenant to log into.\"\n                });\n            });\n        }\n\n        const { identity } = result;\n\n        // 3. Ensure identity has some permissions\n        this.validatePermissions(identity.getPermissions());\n\n        // 4. Set identity (user is now \"logged in\")\n        this.identityContext.setIdentity(identity);\n\n        return { type: \"loggedIn\" };\n    }\n\n    private applyResolution(\n        resolution: LoginTenantResolver.Resolution,\n        unresolved: () => never\n    ): UseCase.Result {\n        switch (resolution.type) {\n            case \"switchTenant\":\n                // Setting the current tenant again changes nothing and would leave the login pending.\n                if (resolution.tenantId === this.tenantContext.getCurrentTenant()) {\n                    return unresolved();\n                }\n                // Changing the tenant reloads the app, which logs in again on the new tenant.\n                this.tenantContext.setTenant(resolution.tenantId);\n                return { type: \"switchingTenant\", tenantId: resolution.tenantId };\n            case \"selectTenant\":\n                return { type: \"selectTenant\", tenants: resolution.tenants };\n            case \"noTenantAccess\":\n                return { type: \"noTenantAccess\" };\n            default:\n                return unresolved();\n        }\n    }\n\n    private validatePermissions = (permissions: Identity.Permission[]) => {\n        const appPermissions = permissions.filter(p => p.name !== \"aacl\");\n        if (appPermissions.length === 0) {\n            throw new Error(\"You have no permissions on this tenant!\");\n        }\n    };\n}\n\nexport const LogInUseCase = UseCase.createImplementation({\n    implementation: LoginUseCaseImpl,\n    dependencies: [\n        AuthenticationContext,\n        IdentityContext,\n        LogInRepository,\n        LoginTenantResolver,\n        TenantContext\n    ]\n});\n"],"names":["LoginUseCaseImpl","authContext","identityContext","logInRepository","tenantResolver","tenantContext","permissions","appPermissions","p","Error","params","result","error","logInError","LogInError","resolution","identity","unresolved","LogInUseCase","UseCase","AuthenticationContext","IdentityContext","LogInRepository","LoginTenantResolver","TenantContext"],"mappings":";;;;;;AAQA,MAAMA;IACF,YACYC,WAA4C,EAC5CC,eAA0C,EAC1CC,eAA0C,EAC1CC,cAA6C,EAC7CC,aAAsC,CAChD;aALUJ,WAAW,GAAXA;aACAC,eAAe,GAAfA;aACAC,eAAe,GAAfA;aACAC,cAAc,GAAdA;aACAC,aAAa,GAAbA;aAgEJ,mBAAmB,GAAG,CAACC;YAC3B,MAAMC,iBAAiBD,YAAY,MAAM,CAACE,CAAAA,IAAKA,AAAW,WAAXA,EAAE,IAAI;YACrD,IAAID,AAA0B,MAA1BA,eAAe,MAAM,EACrB,MAAM,IAAIE,MAAM;QAExB;IApEG;IAEH,MAAM,QAAQC,MAAsB,EAA2B;QAE3D,IAAI,CAAC,WAAW,CAAC,kBAAkB,CAACA,OAAO,eAAe;QAC1D,IAAIA,OAAO,cAAc,EACrB,IAAI,CAAC,WAAW,CAAC,iBAAiB,CAACA,OAAO,cAAc;QAI5D,IAAIC;QACJ,IAAI;YACAA,SAAS,MAAM,IAAI,CAAC,eAAe,CAAC,KAAK;QAC7C,EAAE,OAAOC,OAAO;YACZ,MAAMC,aAAaC,WAAW,IAAI,CAACF;YACnC,OAAO,IAAI,CAAC,eAAe,CAAC,MAAM,IAAI,CAAC,cAAc,CAAC,YAAY,CAACC,aAAa;gBAC5E,MAAMA;YACV;QACJ;QAEA,IAAIF,AAAgB,mBAAhBA,OAAO,IAAI,EAAqB;YAChC,MAAMI,aAAa,MAAM,IAAI,CAAC,cAAc,CAAC,cAAc,CAACJ,OAAO,OAAO;YAC1E,OAAO,IAAI,CAAC,eAAe,CAACI,YAAY;gBACpC,MAAM,IAAID,WAAW;oBACjB,MAAM;oBACN,SAAS;gBACb;YACJ;QACJ;QAEA,MAAM,EAAEE,QAAQ,EAAE,GAAGL;QAGrB,IAAI,CAAC,mBAAmB,CAACK,SAAS,cAAc;QAGhD,IAAI,CAAC,eAAe,CAAC,WAAW,CAACA;QAEjC,OAAO;YAAE,MAAM;QAAW;IAC9B;IAEQ,gBACJD,UAA0C,EAC1CE,UAAuB,EACT;QACd,OAAQF,WAAW,IAAI;YACnB,KAAK;gBAED,IAAIA,WAAW,QAAQ,KAAK,IAAI,CAAC,aAAa,CAAC,gBAAgB,IAC3D,OAAOE;gBAGX,IAAI,CAAC,aAAa,CAAC,SAAS,CAACF,WAAW,QAAQ;gBAChD,OAAO;oBAAE,MAAM;oBAAmB,UAAUA,WAAW,QAAQ;gBAAC;YACpE,KAAK;gBACD,OAAO;oBAAE,MAAM;oBAAgB,SAASA,WAAW,OAAO;gBAAC;YAC/D,KAAK;gBACD,OAAO;oBAAE,MAAM;gBAAiB;YACpC;gBACI,OAAOE;QACf;IACJ;AAQJ;AAEO,MAAMC,4BAAeC,aAAAA,oBAA4B,CAAC;IACrD,gBAAgBnB;IAChB,cAAc;QACVoB;QACAC;QACAC;QACAC;QACAC;KACH;AACL"}

package/features/security/LogIn/LogInUseCase.test.d.ts

@@ -0,0 +1 @@
+export {};