dh-auth-library 1.0.0

package/dist/index.cjs.js

@@ -0,0 +1,860 @@
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+//#region \0rolldown/runtime.js
+var __create = Object.create;
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __getProtoOf = Object.getPrototypeOf;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __copyProps = (to, from, except, desc) => {
+	if (from && typeof from === "object" || typeof from === "function") for (var keys = __getOwnPropNames(from), i = 0, n = keys.length, key; i < n; i++) {
+		key = keys[i];
+		if (!__hasOwnProp.call(to, key) && key !== except) __defProp(to, key, {
+			get: ((k) => from[k]).bind(null, key),
+			enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable
+		});
+	}
+	return to;
+};
+var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", {
+	value: mod,
+	enumerable: true
+}) : target, mod));
+//#endregion
+let nl_portal_playwright_libraries = require("nl-portal-playwright-libraries");
+let node_process = require("node:process");
+node_process = __toESM(node_process);
+let _playwright_test = require("@playwright/test");
+let node_path = require("node:path");
+node_path = __toESM(node_path);
+//#region src/auth/loginhandlers/localhostLoginHandler.ts
+var LocalhostLoginHandler = class {
+	async loginAndCreateSessionStorage(page, account, file) {
+		await new nl_portal_playwright_libraries.LocalLoginPage(page).loginAndCreateNewSession(account, file);
+	}
+};
+//#endregion
+//#region src/auth/pages/loginOverzichtPage.ts
+var LoginOverzichtPage = class extends nl_portal_playwright_libraries.BasePage {
+	digidLoginKnop;
+	digidMachtigenLoginKnop;
+	eHerkenningLoginKnop;
+	eHerkenningMachtigingLoginKnop;
+	constructor(page) {
+		super(page);
+		this.digidLoginKnop = page.locator("#oidc-digid");
+		this.digidMachtigenLoginKnop = page.locator("#digid-machtigen");
+		this.eHerkenningLoginKnop = page.locator("#oidc-eHerkenning");
+		this.eHerkenningMachtigingLoginKnop = page.locator("#eherkenning-bewindvoering");
+	}
+	async klikOpDigidLoginOptie() {
+		await this.digidLoginKnop.waitFor();
+		await this.page.waitForTimeout(2e3);
+		await this.digidLoginKnop.click();
+	}
+	async klikOpDigidMachtigenLoginOptie() {
+		await this.digidMachtigenLoginKnop.waitFor();
+		await this.page.waitForTimeout(2e3);
+		await this.digidMachtigenLoginKnop.click();
+	}
+	async klikOpEHerkenningLoginOptie() {
+		await this.eHerkenningLoginKnop.waitFor();
+		await this.page.waitForTimeout(2e3);
+		try {
+			await this.eHerkenningLoginKnop.click();
+		} catch (_error) {
+			await this.reloadPage();
+			await this.eHerkenningLoginKnop.waitFor();
+			await this.page.waitForTimeout(2e3);
+			await this.eHerkenningLoginKnop.click();
+		}
+	}
+	async klikOpProfessioneelBewindvoerderLoginOptie() {
+		await this.eHerkenningMachtigingLoginKnop.waitFor();
+		await this.page.waitForTimeout(2e3);
+		try {
+			await this.eHerkenningMachtigingLoginKnop.click();
+		} catch (_error) {
+			await this.reloadPage();
+			await this.eHerkenningMachtigingLoginKnop.waitFor();
+			await this.page.waitForTimeout(2e3);
+			await this.eHerkenningMachtigingLoginKnop.click();
+		}
+	}
+	async valideerDatHetLoginOverzichtZichtbaarIs() {
+		await (0, _playwright_test.expect)(this.page.getByRole("heading", { name: "Inloggen voor mijzelf" })).toBeVisible();
+	}
+	async accepteerCookies() {
+		try {
+			await this.page.locator("#ppms_cm_agree-to-all").click();
+		} catch (_ignore) {}
+	}
+	async reloadPage() {
+		try {
+			await this.page.reload();
+		} catch (_error) {}
+	}
+};
+//#endregion
+//#region src/constants/accounts.ts
+/**
+* To use these accounts they should be available as environment variables
+*/
+var localhostBurgerAccount = {
+	username: `${process.env.LOCAL_BURGER_USERNAME}`,
+	password: `${process.env.LOCAL_BURGER_PASSWORD}`
+};
+var localhostBedrijfAccount = {
+	username: `${process.env.LOCAL_BEDRIJF_USERNAME}`,
+	password: `${process.env.LOCAL_BEDRIJF_PASSWORD}`
+};
+var defaultDigidAccount = {
+	username: `${process.env.DIGID_USER}`,
+	password: `${process.env.DIGID_PASSWORD}`,
+	bsn: `${process.env.DIGID_BSN}`
+};
+var defaultDigidGemachtigdAccount = {
+	username: `${process.env.DIGID_GEMACHTIGDE_USER}`,
+	password: `${process.env.DIGID_GEMACHTIGDE_PASSWORD}`,
+	bsn: `${process.env.DIGID_GEMACHTIGDE_BSN}`
+};
+var defaultEHerkenningAccount = {
+	username: `${process.env.EHERKENNING_USER}`,
+	password: `${process.env.EHERKENNING_PASSWORD}`,
+	bsn: `${process.env.EHERKENNING_NUMMER}`
+};
+var defaultVestigingAccount = {
+	username: `${process.env.EHERKENNING_VESTIGING_NAME}`,
+	password: `${process.env.EHERKENNING_VESTIGING_PASSWORD}`,
+	bsn: `${process.env.EHERKENNING_VESTIGING_NUMMER}`
+};
+var defaultProfessioneelBewindvoerderAccount = {
+	username: `${process.env.EHERKENNING_BEWINDVOERDER_USER}`,
+	password: `${process.env.EHERKENNING_BEWINDVOERDER_PASSWORD}`,
+	bsn: `${process.env.EHERKENNING_BEWINDVOERDER_BSN}`
+};
+var defaultADAccount = {
+	username: `${process.env.AD_USER}`,
+	password: `${process.env.AD_PASSWORD}`
+};
+//#endregion
+//#region src/auth/pages/digidLoginPage.ts
+var DigidLoginPage = class extends LoginOverzichtPage {
+	constructor(page) {
+		super(page);
+	}
+	async loginAndCreateNewSession(account, fileName) {
+		await this.openPage();
+		await this.handleAnySpecialADLoginScreen();
+		try {
+			await this.klikOpDigidLoginOptie();
+		} catch (_error) {
+			await this.openPage();
+			await this.handleAnySpecialADLoginScreen();
+			await this.klikOpDigidLoginOptie();
+		}
+		if (!this.page.url().match(/authn/)) {
+			await this.loginWithDigid(account);
+			await this.accepteerCookies();
+		}
+		await this.page.context().storageState({ path: fileName });
+	}
+	async loginAndCreateNewGemachtigdeSession(account, fileName) {
+		await this.openPage();
+		await this.handleAnySpecialADLoginScreen();
+		try {
+			await this.klikOpDigidMachtigenLoginOptie();
+		} catch (_error) {
+			await this.openPage();
+			await this.klikOpDigidMachtigenLoginOptie();
+		}
+		await this.loginWithDigid(account, true);
+		await this.accepteerCookies();
+		await this.page.context().storageState({ path: fileName });
+	}
+	/**
+	* Indien er al een AD sessie is maar voor de verkeerde omgeving
+	* Je krijgt dan een speciaal scherm waar je moet bevestigen voordat je door kan
+	*/
+	async handleAnySpecialADLoginScreen() {
+		try {
+			await this.page.locator(`//div[contains(@data-test-id,'${node_process.default.env.AD_USER}')]`).first().waitFor({ timeout: 1e3 });
+			await this.page.locator(`//div[contains(@data-test-id,'${node_process.default.env.AD_USER}')]`).first().click();
+		} catch (_error) {}
+	}
+	async loginWithDigid(account, gemachtigde) {
+		account ??= defaultDigidAccount;
+		await this.page.getByLabel("Inlogoptie 5 van 5: Inloggen").click();
+		await this.page.getByLabel("Testen betrouwbaarheidsniveau").selectOption("25");
+		await this.page.getByLabel("DigiD gebruikersnaam").fill(account.username);
+		await this.page.getByLabel("Wachtwoord", { exact: true }).fill(account.password);
+		const responsePromise = this.page.waitForResponse(/callback/, { timeout: 6e4 });
+		await this.page.getByRole("button", { name: "Inloggen" }).click();
+		if (gemachtigde) await this.page.getByRole("button", { name: "Kies" }).click();
+		return await responsePromise;
+	}
+	async loginAlsDigidGemachtigde() {
+		const gemachtigde = {
+			username: `${node_process.default.env.DIGID_GEMACHTIGDE_USER}`,
+			password: `${node_process.default.env.DIGID_GEMACHTIGDE_PASSWORD}`
+		};
+		await this.klikOpDigidMachtigenLoginOptie();
+		await this.loginWithDigid(gemachtigde, true);
+	}
+};
+//#endregion
+//#region src/auth/loginhandlers/digidLoginHandler.ts
+var DigidLoginHandler = class {
+	async loginAndCreateSessionStorage(page, account, file) {
+		await new DigidLoginPage(page).loginAndCreateNewSession(account, file);
+	}
+};
+//#endregion
+//#region src/auth/pages/eHerkenningLoginPage.ts
+var EHerkenningLoginPage = class extends LoginOverzichtPage {
+	dropdownSelectIdentityProvider;
+	buttonConfirmIdentityProviderSelection;
+	textfieldUsername;
+	textfieldPassword;
+	inloggenKnop;
+	verderKnop;
+	verderLink;
+	inputBsn;
+	buttonZoek;
+	constructor(page) {
+		super(page);
+		this.dropdownSelectIdentityProvider = page.locator("#identity_provider");
+		this.buttonConfirmIdentityProviderSelection = page.locator("//*[@name='commit']");
+		this.textfieldUsername = page.locator("#account_username");
+		this.textfieldPassword = page.locator("#account_password");
+		this.inloggenKnop = page.getByRole("button", { name: /Inloggen|Log in/ });
+		this.verderKnop = page.getByRole("button", { name: /Verder|Continue|Ga verder/ });
+		this.inputBsn = page.locator("#bsn-input");
+		this.buttonZoek = page.locator("#search-submit");
+		this.verderLink = page.getByRole("link", { name: /Verder|Continue|Ga verder/ });
+	}
+	async probeerInTeLoggenMetEHerkenning(account) {
+		account ??= defaultEHerkenningAccount;
+		await this.dropdownSelectIdentityProvider.selectOption("Digidentity AD 1.13 (preproduction)");
+		await this.page.locator("#remember").click();
+		await this.buttonConfirmIdentityProviderSelection.click();
+		await this.textfieldUsername.fill(account.username);
+		await this.verderKnop.click();
+		await this.textfieldPassword.fill(account.password);
+		await this.inloggenKnop.click();
+	}
+	async loginWithEHerkenningAndCreateSession(fileName, account) {
+		await this.openPage();
+		try {
+			await this.klikOpEHerkenningLoginOptie();
+		} catch (_error) {
+			await this.openPage();
+			await this.klikOpEHerkenningLoginOptie();
+		}
+		await this.loginWithEHerkenning(account);
+		await this.page.context().storageState({ path: fileName });
+	}
+	async loginWithEHerkenning(account) {
+		await this.probeerInTeLoggenMetEHerkenning(account);
+		await this.page.waitForTimeout(2e3);
+		if (await this.verderKnop.isVisible()) await this.verderKnop.click();
+		await this.accepteerCookies();
+	}
+	async loginWithEHerkenningVestigingAndCreateSession(fileName, account) {
+		await this.openPage();
+		try {
+			await this.klikOpEHerkenningLoginOptie();
+		} catch (_error) {
+			await this.openPage();
+			await this.klikOpEHerkenningLoginOptie();
+		}
+		await this.loginWithEHerkenningVestiging(account);
+		await this.page.context().storageState({ path: fileName });
+	}
+	async loginWithEHerkenningVestiging(account) {
+		await this.probeerInTeLoggenMetEHerkenning(account);
+		await this.page.waitForTimeout(2e3);
+		if (await this.verderKnop.isVisible()) await this.verderKnop.click();
+		await this.accepteerCookies();
+	}
+	async loginAlsProfessioneelBewindvoerder(gemachtigde, file) {
+		await this.openPage();
+		await this.klikOpProfessioneelBewindvoerderLoginOptie();
+		if (gemachtigde) try {
+			await this.probeerInTeLoggenMetEHerkenning(gemachtigde);
+		} catch (_error) {
+			await this.openPage();
+			await this.probeerInTeLoggenMetEHerkenning(gemachtigde);
+		}
+		else {
+			gemachtigde = defaultProfessioneelBewindvoerderAccount;
+			try {
+				await this.loginWithEHerkenning(gemachtigde);
+			} catch (_error) {
+				await this.openPage();
+				await this.loginWithEHerkenning(gemachtigde);
+			}
+		}
+		if (gemachtigde.bsn != null) {
+			await this.verderLink.click();
+			await this.inputBsn.fill(gemachtigde.bsn);
+		}
+		await this.buttonZoek.click();
+		await this.verderLink.click();
+		await this.accepteerCookies();
+		if (file) await this.page.context().storageState({ path: file });
+	}
+	async valideerDatNietGemachtigdBerichtZichtbaarIs() {
+		await (0, _playwright_test.expect)(this.page.getByText("Helaas bent u niet gemachtigd")).toBeVisible();
+		await (0, _playwright_test.expect)(this.page.getByText("Helaas bent u niet gemachtigd voor toegang tot Aanvragen en regelen producten en diensten als bewindvoerder van Gemeente Den Haag.")).toBeVisible();
+	}
+};
+//#endregion
+//#region src/auth/loginhandlers/eHerkenningLoginHandler.ts
+var EHerkenningLoginHandler = class {
+	async loginAndCreateSessionStorage(page, account, file) {
+		await new EHerkenningLoginPage(page).loginWithEHerkenningVestigingAndCreateSession(file, account);
+	}
+};
+//#endregion
+//#region src/auth/loginhandlers/digidGemachtigdeLoginHandler.ts
+var DigidGemachtigdeLoginHandler = class {
+	async loginAndCreateSessionStorage(page, account, file) {
+		await new DigidLoginPage(page).loginAndCreateNewGemachtigdeSession(account, file);
+	}
+};
+//#endregion
+//#region src/auth/loginhandlers/eHerkenningBewindvoerderLoginHandler.ts
+var EHerkenningBewindvoerderLoginHandler = class {
+	async loginAndCreateSessionStorage(page, account, file) {
+		await new EHerkenningLoginPage(page).loginAlsProfessioneelBewindvoerder(account, file);
+	}
+};
+//#endregion
+//#region node_modules/.pnpm/totp-generator@2.0.1/node_modules/totp-generator/lib/esm/index.js
+var TOTP = class TOTP {
+	static _sign = async (t, e, r) => {
+		try {
+			const a = (globalThis.crypto || require("node:crypto").webcrypto).subtle, i = await a.importKey("raw", t, {
+				name: "HMAC",
+				hash: { name: r }
+			}, !1, ["sign"]), n = TOTP.hex2buf(e);
+			return await a.sign("HMAC", i, n);
+		} catch (a) {
+			const { default: i } = await Promise.resolve().then(() => require("./sha-Eh0BcCJ_.js")), n = new i(r, "ARRAYBUFFER");
+			return n.setHMACKey(t, "ARRAYBUFFER"), n.update(TOTP.hex2buf(e)), n.getHMAC("ARRAYBUFFER");
+		}
+	};
+	static async generate(t, e) {
+		const r = {
+			digits: 6,
+			algorithm: "SHA-1",
+			encoding: "hex",
+			period: 30,
+			timestamp: Date.now(),
+			explicitZeroPad: !1,
+			...e
+		}, a = Math.floor(r.timestamp / 1e3), i = TOTP.dec2hex(Math.floor(a / r.period)).padStart(16, "0"), n = "hex" === r.encoding ? TOTP.base32ToBuffer(t) : TOTP.asciiToBuffer(t), o = await TOTP._sign(n, i, r.algorithm), s = TOTP.buf2hex(o), c = 2 * TOTP.hex2dec(s.slice(-1)), h = (2147483647 & TOTP.hex2dec(s.slice(c, c + 8))).toString().slice(-r.digits), T = r.explicitZeroPad ? h.padStart(r.digits, "0") : h, d = 1e3 * r.period;
+		return {
+			otp: T,
+			expires: Math.ceil((r.timestamp + 1) / d) * d
+		};
+	}
+	static hex2dec(t) {
+		return parseInt(t, 16);
+	}
+	static dec2hex(t) {
+		return (t < 15.5 ? "0" : "") + Math.round(t).toString(16);
+	}
+	static base32ToBuffer(t) {
+		let e = (t = t.toUpperCase()).length;
+		for (; 61 === t.charCodeAt(e - 1);) e--;
+		const r = new Uint8Array(5 * e / 8);
+		let a = 0, i = 0, n = 0;
+		for (let o = 0; o < e; o++) {
+			const e = TOTP.base32[t.charCodeAt(o)];
+			if (void 0 === e) throw new Error("Invalid base32 character in key");
+			a = a << 5 | e, i += 5, i >= 8 && (r[n++] = a >>> (i -= 8));
+		}
+		return r.buffer;
+	}
+	static asciiToBuffer(t) {
+		const e = new Uint8Array(t.length);
+		for (let r = 0; r < t.length; r++) e[r] = t.charCodeAt(r);
+		return e.buffer;
+	}
+	static hex2buf(t) {
+		const e = new Uint8Array(t.length / 2);
+		for (let r = 0, a = 0; r < t.length; r += 2, a++) e[a] = TOTP.hex2dec(t.slice(r, r + 2));
+		return e.buffer;
+	}
+	static buf2hex(t) {
+		return [...new Uint8Array(t)].map((t) => t.toString(16).padStart(2, "0")).join("");
+	}
+	static base32 = {
+		50: 26,
+		51: 27,
+		52: 28,
+		53: 29,
+		54: 30,
+		55: 31,
+		65: 0,
+		66: 1,
+		67: 2,
+		68: 3,
+		69: 4,
+		70: 5,
+		71: 6,
+		72: 7,
+		73: 8,
+		74: 9,
+		75: 10,
+		76: 11,
+		77: 12,
+		78: 13,
+		79: 14,
+		80: 15,
+		81: 16,
+		82: 17,
+		83: 18,
+		84: 19,
+		85: 20,
+		86: 21,
+		87: 22,
+		88: 23,
+		89: 24,
+		90: 25
+	};
+};
+//#endregion
+//#region src/auth/pages/adLoginPage.ts
+var gzacUrlProd = "https://alg-zgw.denhaag.nl";
+var gzacUrlAcp = "https://alg-zgw.acc.denhaag.nl";
+var gzacUrlTest = "https://alg-zgw.test.denhaag.nl";
+var ADLoginPage = class ADLoginPage extends nl_portal_playwright_libraries.BasePage {
+	gebruikersnaamInput;
+	wachtwoordInput;
+	volgendeInput;
+	aanmeldenInput;
+	kanAuthAppNietGebruikenLink;
+	gebruikVerificatieCode;
+	codeInput;
+	verifierenInput;
+	constructor(page) {
+		super(page);
+		this.gebruikersnaamInput = page.locator("//input[@type='email']");
+		this.wachtwoordInput = page.locator("//input[@name='passwd']");
+		this.volgendeInput = page.locator("//input[@type='submit']");
+		this.aanmeldenInput = page.locator("//input[@type='submit']");
+		this.kanAuthAppNietGebruikenLink = page.locator("//*[@id='signInAnotherWay']");
+		this.gebruikVerificatieCode = page.locator("//div[@id='idDiv_SAOTCS_Proofs']//div[contains(@role,'listitem')][2]");
+		this.codeInput = page.locator("//input[@name='otc']");
+		this.verifierenInput = page.locator("//input[@type='submit']");
+	}
+	async openPage(path) {
+		await this.page.goto(path);
+	}
+	/**
+	* Login with the AD account so we can get behind the firewall
+	*
+	* @param account
+	* @param fileName
+	*/
+	async loginWithADAccountAndCreateSession(account, fileName) {
+		const adLoginPage = new ADLoginPage(this.page);
+		await this.page.goto(this.getGzacUrl());
+		await adLoginPage.gebruikersnaamInput.waitFor();
+		await adLoginPage.gebruikersnaamInput.fill(account.username);
+		await adLoginPage.volgendeInput.click();
+		await adLoginPage.wachtwoordInput.fill(account.password);
+		await adLoginPage.aanmeldenInput.click();
+		await this.page.waitForTimeout(1e3);
+		try {
+			if (await this.page.getByText("Uw account is niet geverifieerd. Probeer het opnieuw").isVisible()) await this.tryAgainUntilSuccesful();
+		} catch (_error) {}
+		await adLoginPage.kanAuthAppNietGebruikenLink.click();
+		await adLoginPage.gebruikVerificatieCode.click();
+		const token = await TOTP.generate(`${process.env.AD_SECRET}`);
+		await adLoginPage.codeInput.fill(token.otp);
+		await adLoginPage.verifierenInput.click();
+		await adLoginPage.page.waitForTimeout(5e3);
+		adLoginPage.page.on("domcontentloaded", () => {});
+		await adLoginPage.page.context().storageState({ path: fileName });
+	}
+	async tryAgainUntilSuccesful() {
+		let maxNumberOfTries = 6;
+		let foutMeldingIsSHowing = true;
+		while (foutMeldingIsSHowing) {
+			await this.page.waitForTimeout(1e4);
+			maxNumberOfTries--;
+			if (maxNumberOfTries == 0) return;
+			try {
+				await this.page.goBack();
+				await this.page.waitForTimeout(1e3);
+				await this.page.locator("//div[contains(@role,'listitem')]").first().click();
+				await this.page.waitForTimeout(1e3);
+				foutMeldingIsSHowing = await this.page.getByText("Uw account is niet geverifieerd. Probeer het opnieuw").isVisible();
+			} catch (_error) {}
+		}
+	}
+	getGzacUrl() {
+		const baseUrl = this.getBaseUrl();
+		if (/klantportaal-zgw.denhaag.nl./.exec(baseUrl)) return gzacUrlProd;
+		if (/.acc./.exec(baseUrl)) return gzacUrlAcp;
+		if (/.test./.exec(baseUrl)) return gzacUrlTest;
+		else throw new Error("Cannot find current environment for baseUrl: " + baseUrl);
+	}
+};
+//#endregion
+//#region src/auth/loginhandlers/adLoginHandler.ts
+var ADLoginHandler = class {
+	async loginAndCreateSessionStorage(page, account, file) {
+		await new ADLoginPage(page).loginWithADAccountAndCreateSession(account, file);
+	}
+};
+//#endregion
+//#region src/auth/getLoginHandler.ts
+function getLoginHandler(authType) {
+	switch (authType) {
+		case "digid": return (0, nl_portal_playwright_libraries.isRunningOnLocalhost)() ? new LocalhostLoginHandler() : new DigidLoginHandler();
+		case "digid_gemachtigde": return new DigidGemachtigdeLoginHandler();
+		case "eherkenning": return (0, nl_portal_playwright_libraries.isRunningOnLocalhost)() ? new LocalhostLoginHandler() : new EHerkenningLoginHandler();
+		case "eherkenning_vestiging": return new EHerkenningLoginHandler();
+		case "eherkenning_bewindvoerder": return new EHerkenningBewindvoerderLoginHandler();
+		case "ad-session": return new ADLoginHandler();
+		default: throw new Error(`Unsupported auth type: ${authType}. If needed please create a new LoginHandler and register it here in getLoginHandler().`);
+	}
+}
+//#endregion
+//#region src/auth/utils/sessionFileHelper.ts
+var sessionsDir = node_process.env.SESSIONS_DIR ?? node_path.resolve(node_process.cwd(), "sessions");
+var environment = node_process.env.ENV ?? "test";
+/**
+* Easy way to create the filenames for the sessions
+*/
+var SessionFileHelper = class {
+	static getLocalhostFileName(browser) {
+		return node_path.join(sessionsDir, `${browser.browserType().name()}-${environment}-${localhostBurgerAccount.username}.json`);
+	}
+	static getLocalhostFileNameBedrijf(browser) {
+		return node_path.join(sessionsDir, `${browser.browserType().name()}-${environment}-${localhostBedrijfAccount.username}.json`);
+	}
+	static getDigidFileName(browser) {
+		return node_path.join(sessionsDir, `${browser.browserType().name()}-digid-${environment}-${defaultDigidAccount.username}.json`);
+	}
+	static getDigidGemachtigdeFileName(browser) {
+		return node_path.join(sessionsDir, `${browser.browserType().name()}-digid-gemachtigde-${environment}-${defaultDigidGemachtigdAccount.username}.json`);
+	}
+	static getEHerkenningFileName(browser) {
+		return node_path.join(sessionsDir, `${browser.browserType().name()}-eherkenning-${environment}.json`);
+	}
+	static getEHerkenningVestigingFileName(browser) {
+		return node_path.join(sessionsDir, `${browser.browserType().name()}-eherkenning-vestiging-${environment}.json`);
+	}
+	static getEHerkenningBewindvoerderFileName(browser) {
+		return node_path.join(sessionsDir, `${browser.browserType().name()}-eherkenning-bewindvoerder-${environment}.json`);
+	}
+	static getADFileName(browser) {
+		return node_path.join(sessionsDir, `${browser.browserType().name()}-ad-${environment}.json`);
+	}
+};
+//#endregion
+//#region src/auth/sessionHandler.ts
+var MAX_SESSION_TIME_IN_MINUTES = 10;
+/**
+* This class creates the correct SessionHandler
+* It will also perform the process of setting op the session
+*
+* @param authType type of login
+* @param account with login details
+* @param loginHandler that will handle the login itself
+*/
+function createSessionHandler(authType, account, loginHandler) {
+	return {
+		getFile: (browser) => {
+			switch (authType) {
+				case "digid": return SessionFileHelper.getDigidFileName(browser);
+				case "digid_gemachtigde": return SessionFileHelper.getDigidGemachtigdeFileName(browser);
+				case "eherkenning": return SessionFileHelper.getEHerkenningFileName(browser);
+				case "eherkenning_vestiging": return SessionFileHelper.getEHerkenningVestigingFileName(browser);
+				case "eherkenning_bewindvoerder": return SessionFileHelper.getEHerkenningBewindvoerderFileName(browser);
+				case "ad-session": return SessionFileHelper.getADFileName(browser);
+				default: throw new Error(`Unsupported auth type: ${authType}`);
+			}
+		},
+		/**
+		* Setup the new session
+		* If needed the AD Session if used (Needed outside the firewall)
+		*
+		* @param browser
+		* @param file
+		*/
+		setupSession: async (browser, file) => {
+			const useADSession = process.env.WITH_AD_SESSION === "true";
+			const page = await browser.newPage({
+				ignoreHTTPSErrors: true,
+				storageState: useADSession && authType !== "ad-session" ? SessionFileHelper.getADFileName(browser) : void 0
+			});
+			console.log(`New session will be created: ${file}`);
+			try {
+				await loginHandler.loginAndCreateSessionStorage(page, account, file);
+			} finally {
+				await page.close();
+			}
+		},
+		/**
+		* Refresh the current session by opening a page and storing that session
+		* The UI should have refreshed the session meanwhile
+		*
+		* This is being called from the nl-portal-base-library
+		*
+		* @param browser
+		* @param file
+		*/
+		refreshSession: async (browser, file) => {
+			const page = await browser.newPage({
+				ignoreHTTPSErrors: true,
+				storageState: file
+			});
+			console.log(`Refresh of session started for : ${file}`);
+			await page.goto((0, nl_portal_playwright_libraries.getUrl)(nl_portal_playwright_libraries.Url.PortalBaseUrl));
+			await page.waitForLoadState("networkidle");
+			if (page.url().match(/authn/)) {
+				console.log(`New session will be created as the current one is no longer valid: ${file}`);
+				try {
+					await loginHandler.loginAndCreateSessionStorage(page, account, file);
+				} catch (_error) {
+					console.error(_error);
+				}
+			} else {
+				console.log(`Current session was still valid and will be refreshed now: ${file}`);
+				await page.context().storageState({ path: file });
+			}
+			await page.close();
+		}
+	};
+}
+//#endregion
+//#region src/auth/api/apiTokenHelper.ts
+/**
+* The token is often being refreshed so the easiest is to open a browser using the current session
+* The UI will automatically refresh the token and that is the token we will return
+*
+* That token can be used to perform some api requests for a short time
+* Per specfile it is not problem but this should be done in every specfile to assure a valid token
+*
+* @param baseTest
+* @param handlerResolver
+*/
+function getApiTokenFromSession(baseTest, handlerResolver) {
+	return baseTest.extend({
+		urls: async ({}, use) => {
+			await use(nl_portal_playwright_libraries.urls);
+		},
+		token: async ({ browser }, use) => {
+			const handler = handlerResolver();
+			const storageState = await nl_portal_playwright_libraries.SessionManager.getOrCreateSession(browser, handler);
+			const context = await browser.newContext(storageState ? { storageState } : {});
+			const page = await context.newPage();
+			try {
+				await page.goto("/");
+				await page.waitForFunction(() => {
+					const key = Object.keys(sessionStorage).find((k) => k.startsWith("oidc"));
+					if (!key) return false;
+					const raw = sessionStorage.getItem(key);
+					if (!raw) return false;
+					try {
+						return !!JSON.parse(raw)?.access_token;
+					} catch {
+						return false;
+					}
+				});
+				const token = await page.evaluate(() => {
+					const key = Object.keys(sessionStorage).find((k) => k.startsWith("oidc"));
+					if (!key) return null;
+					const raw = sessionStorage.getItem(key);
+					if (!raw) return null;
+					try {
+						return JSON.parse(raw)?.access_token ?? null;
+					} catch {
+						return null;
+					}
+				});
+				if (!token) throw new Error("❌ Token not found in sessionStorage");
+				await use(token);
+			} finally {
+				await context.close();
+			}
+		}
+	});
+}
+//#endregion
+//#region src/auth/api/sessionHandlerResolvers.ts
+function getBurgerSessionHandler() {
+	if ((0, nl_portal_playwright_libraries.isRunningOnLocalhost)()) return createSessionHandler("digid", localhostBurgerAccount, getLoginHandler("digid"));
+	return createSessionHandler("digid", defaultDigidAccount, getLoginHandler("digid"));
+}
+function getBedrijfSessionHandler() {
+	if ((0, nl_portal_playwright_libraries.isRunningOnLocalhost)()) return createSessionHandler("eherkenning", localhostBedrijfAccount, getLoginHandler("eherkenning"));
+	return createSessionHandler("eherkenning", defaultEHerkenningAccount, getLoginHandler("eherkenning"));
+}
+function getVestigingSessionHandler() {
+	return createSessionHandler("eherkenning_vestiging", defaultVestigingAccount, getLoginHandler("eherkenning_vestiging"));
+}
+function getDigidGemachtigdeSessionHandler() {
+	return createSessionHandler("digid_gemachtigde", defaultDigidGemachtigdAccount, getLoginHandler("digid_gemachtigde"));
+}
+function getEHerkenningBewindvoerderSessionHandler() {
+	return createSessionHandler("eherkenning_bewindvoerder", defaultProfessioneelBewindvoerderAccount, getLoginHandler("eherkenning_bewindvoerder"));
+}
+function getAdSessionHandler() {
+	return createSessionHandler("ad-session", defaultADAccount, getLoginHandler("ad-session"));
+}
+//#endregion
+//#region src/auth/api/apiAuthentication.ts
+/**
+* The api's will use an existing session and use that token for the requests.
+* The reason for this is that the token life-span is short and the UI always does a token-refresh.
+* By using the UI session and stealing that token it will always be valid.
+*/
+var burgerApiTest = getApiTokenFromSession(nl_portal_playwright_libraries.baseTest, getBurgerSessionHandler);
+var bedrijfApiTest = getApiTokenFromSession(nl_portal_playwright_libraries.baseTest, getBedrijfSessionHandler);
+var vestigingApiTest = getApiTokenFromSession(nl_portal_playwright_libraries.baseTest, getVestigingSessionHandler);
+var digidGemachtigdeApiTest = getApiTokenFromSession(nl_portal_playwright_libraries.baseTest, getDigidGemachtigdeSessionHandler);
+var eHerkenningBewindvoerderApiTest = getApiTokenFromSession(nl_portal_playwright_libraries.baseTest, getEHerkenningBewindvoerderSessionHandler);
+//#endregion
+//#region src/constants/accountTypes.ts
+var profiles = {
+	burger: {
+		accountType: "burger",
+		authType: "digid",
+		id: "999994499"
+	},
+	bedrijf: {
+		accountType: "bedrijf",
+		authType: "eherkenning",
+		id: "90002768"
+	},
+	vestiging: {
+		accountType: "vestiging",
+		authType: "eherkenning_vestiging",
+		id: "990000262129"
+	},
+	gemachtigde: {
+		accountType: "digid-gemachtigde",
+		authType: "digid_gemachtigde",
+		id: ""
+	},
+	bewindvoerder: {
+		accountType: "bedrijf",
+		authType: "eherkenning_bewindvoerder",
+		id: "999994499"
+	}
+};
+//#endregion
+//#region src/constants/testAccounts.ts
+var TestAccounts = {
+	zgwdigiduser1: {
+		id: "999991954",
+		type: "burger"
+	},
+	zgwdigiduser2: {
+		id: "999991115",
+		type: "burger"
+	},
+	zgwdigiduser3: {
+		id: "999991966",
+		type: "burger"
+	},
+	zgwdigiduser4: {
+		id: "999992922",
+		type: "burger"
+	},
+	zgwdigiduser5: {
+		id: "999991322",
+		type: "burger"
+	},
+	testautomatisering: {
+		id: "999994499",
+		type: "burger"
+	},
+	localhostaccount: {
+		id: "999993847",
+		type: "burger"
+	},
+	kvkAccount: {
+		id: "90002768",
+		type: "bedrijf"
+	},
+	kvkVestiging: {
+		id: "990000262129",
+		type: "vestiging"
+	}
+};
+//#endregion
+//#region src/constants/testProfiles.ts
+var testProfiles = {
+	burger: {
+		accountType: "burger",
+		authType: "digid",
+		id: "999994499"
+	},
+	bedrijf: {
+		accountType: "bedrijf",
+		authType: "eherkenning",
+		id: "90002768"
+	},
+	vestiging: {
+		accountType: "vestiging",
+		authType: "eherkenning_vestiging",
+		id: "990000262129"
+	},
+	gemachtigde: {
+		accountType: "digid-gemachtigde",
+		authType: "digid_gemachtigde",
+		id: ""
+	},
+	bewindvoerder: {
+		accountType: "bedrijf",
+		authType: "eherkenning_bewindvoerder",
+		id: "999994499"
+	}
+};
+//#endregion
+exports.ADLoginHandler = ADLoginHandler;
+exports.ADLoginPage = ADLoginPage;
+exports.DigidGemachtigdeLoginHandler = DigidGemachtigdeLoginHandler;
+exports.DigidLoginHandler = DigidLoginHandler;
+exports.DigidLoginPage = DigidLoginPage;
+exports.EHerkenningBewindvoerderLoginHandler = EHerkenningBewindvoerderLoginHandler;
+exports.EHerkenningLoginHandler = EHerkenningLoginHandler;
+exports.EHerkenningLoginPage = EHerkenningLoginPage;
+exports.LocalhostLoginHandler = LocalhostLoginHandler;
+exports.LoginOverzichtPage = LoginOverzichtPage;
+exports.MAX_SESSION_TIME_IN_MINUTES = MAX_SESSION_TIME_IN_MINUTES;
+exports.SessionFileHelper = SessionFileHelper;
+exports.TestAccounts = TestAccounts;
+exports.bedrijfApiTest = bedrijfApiTest;
+exports.burgerApiTest = burgerApiTest;
+exports.createSessionHandler = createSessionHandler;
+exports.defaultADAccount = defaultADAccount;
+exports.defaultDigidAccount = defaultDigidAccount;
+exports.defaultDigidGemachtigdAccount = defaultDigidGemachtigdAccount;
+exports.defaultEHerkenningAccount = defaultEHerkenningAccount;
+exports.defaultProfessioneelBewindvoerderAccount = defaultProfessioneelBewindvoerderAccount;
+exports.defaultVestigingAccount = defaultVestigingAccount;
+exports.digidGemachtigdeApiTest = digidGemachtigdeApiTest;
+exports.eHerkenningBewindvoerderApiTest = eHerkenningBewindvoerderApiTest;
+exports.getAdSessionHandler = getAdSessionHandler;
+exports.getApiTokenFromSession = getApiTokenFromSession;
+exports.getBedrijfSessionHandler = getBedrijfSessionHandler;
+exports.getBurgerSessionHandler = getBurgerSessionHandler;
+exports.getDigidGemachtigdeSessionHandler = getDigidGemachtigdeSessionHandler;
+exports.getEHerkenningBewindvoerderSessionHandler = getEHerkenningBewindvoerderSessionHandler;
+exports.getLoginHandler = getLoginHandler;
+exports.getVestigingSessionHandler = getVestigingSessionHandler;
+exports.localhostBedrijfAccount = localhostBedrijfAccount;
+exports.localhostBurgerAccount = localhostBurgerAccount;
+exports.profiles = profiles;
+exports.testProfiles = testProfiles;
+exports.vestigingApiTest = vestigingApiTest;