dh-auth-library 1.0.0

package/dist/index.es.js

@@ -0,0 +1,806 @@
+import { BasePage, LocalLoginPage, SessionManager, Url, baseTest, getUrl, isRunningOnLocalhost, urls } from "nl-portal-playwright-libraries";
+import * as process$2 from "node:process";
+import process$1 from "node:process";
+import { expect } from "@playwright/test";
+import * as path from "node:path";
+//#region \0rolldown/runtime.js
+var __require = /* @__PURE__ */ ((x) => typeof require !== "undefined" ? require : typeof Proxy !== "undefined" ? new Proxy(x, { get: (a, b) => (typeof require !== "undefined" ? require : a)[b] }) : x)(function(x) {
+	if (typeof require !== "undefined") return require.apply(this, arguments);
+	throw Error("Calling `require` for \"" + x + "\" in an environment that doesn't expose the `require` function. See https://rolldown.rs/in-depth/bundling-cjs#require-external-modules for more details.");
+});
+//#endregion
+//#region src/auth/loginhandlers/localhostLoginHandler.ts
+var LocalhostLoginHandler = class {
+	async loginAndCreateSessionStorage(page, account, file) {
+		await new LocalLoginPage(page).loginAndCreateNewSession(account, file);
+	}
+};
+//#endregion
+//#region src/auth/pages/loginOverzichtPage.ts
+var LoginOverzichtPage = class extends BasePage {
+	digidLoginKnop;
+	digidMachtigenLoginKnop;
+	eHerkenningLoginKnop;
+	eHerkenningMachtigingLoginKnop;
+	constructor(page) {
+		super(page);
+		this.digidLoginKnop = page.locator("#oidc-digid");
+		this.digidMachtigenLoginKnop = page.locator("#digid-machtigen");
+		this.eHerkenningLoginKnop = page.locator("#oidc-eHerkenning");
+		this.eHerkenningMachtigingLoginKnop = page.locator("#eherkenning-bewindvoering");
+	}
+	async klikOpDigidLoginOptie() {
+		await this.digidLoginKnop.waitFor();
+		await this.page.waitForTimeout(2e3);
+		await this.digidLoginKnop.click();
+	}
+	async klikOpDigidMachtigenLoginOptie() {
+		await this.digidMachtigenLoginKnop.waitFor();
+		await this.page.waitForTimeout(2e3);
+		await this.digidMachtigenLoginKnop.click();
+	}
+	async klikOpEHerkenningLoginOptie() {
+		await this.eHerkenningLoginKnop.waitFor();
+		await this.page.waitForTimeout(2e3);
+		try {
+			await this.eHerkenningLoginKnop.click();
+		} catch (_error) {
+			await this.reloadPage();
+			await this.eHerkenningLoginKnop.waitFor();
+			await this.page.waitForTimeout(2e3);
+			await this.eHerkenningLoginKnop.click();
+		}
+	}
+	async klikOpProfessioneelBewindvoerderLoginOptie() {
+		await this.eHerkenningMachtigingLoginKnop.waitFor();
+		await this.page.waitForTimeout(2e3);
+		try {
+			await this.eHerkenningMachtigingLoginKnop.click();
+		} catch (_error) {
+			await this.reloadPage();
+			await this.eHerkenningMachtigingLoginKnop.waitFor();
+			await this.page.waitForTimeout(2e3);
+			await this.eHerkenningMachtigingLoginKnop.click();
+		}
+	}
+	async valideerDatHetLoginOverzichtZichtbaarIs() {
+		await expect(this.page.getByRole("heading", { name: "Inloggen voor mijzelf" })).toBeVisible();
+	}
+	async accepteerCookies() {
+		try {
+			await this.page.locator("#ppms_cm_agree-to-all").click();
+		} catch (_ignore) {}
+	}
+	async reloadPage() {
+		try {
+			await this.page.reload();
+		} catch (_error) {}
+	}
+};
+//#endregion
+//#region src/constants/accounts.ts
+/**
+* To use these accounts they should be available as environment variables
+*/
+var localhostBurgerAccount = {
+	username: `${process.env.LOCAL_BURGER_USERNAME}`,
+	password: `${process.env.LOCAL_BURGER_PASSWORD}`
+};
+var localhostBedrijfAccount = {
+	username: `${process.env.LOCAL_BEDRIJF_USERNAME}`,
+	password: `${process.env.LOCAL_BEDRIJF_PASSWORD}`
+};
+var defaultDigidAccount = {
+	username: `${process.env.DIGID_USER}`,
+	password: `${process.env.DIGID_PASSWORD}`,
+	bsn: `${process.env.DIGID_BSN}`
+};
+var defaultDigidGemachtigdAccount = {
+	username: `${process.env.DIGID_GEMACHTIGDE_USER}`,
+	password: `${process.env.DIGID_GEMACHTIGDE_PASSWORD}`,
+	bsn: `${process.env.DIGID_GEMACHTIGDE_BSN}`
+};
+var defaultEHerkenningAccount = {
+	username: `${process.env.EHERKENNING_USER}`,
+	password: `${process.env.EHERKENNING_PASSWORD}`,
+	bsn: `${process.env.EHERKENNING_NUMMER}`
+};
+var defaultVestigingAccount = {
+	username: `${process.env.EHERKENNING_VESTIGING_NAME}`,
+	password: `${process.env.EHERKENNING_VESTIGING_PASSWORD}`,
+	bsn: `${process.env.EHERKENNING_VESTIGING_NUMMER}`
+};
+var defaultProfessioneelBewindvoerderAccount = {
+	username: `${process.env.EHERKENNING_BEWINDVOERDER_USER}`,
+	password: `${process.env.EHERKENNING_BEWINDVOERDER_PASSWORD}`,
+	bsn: `${process.env.EHERKENNING_BEWINDVOERDER_BSN}`
+};
+var defaultADAccount = {
+	username: `${process.env.AD_USER}`,
+	password: `${process.env.AD_PASSWORD}`
+};
+//#endregion
+//#region src/auth/pages/digidLoginPage.ts
+var DigidLoginPage = class extends LoginOverzichtPage {
+	constructor(page) {
+		super(page);
+	}
+	async loginAndCreateNewSession(account, fileName) {
+		await this.openPage();
+		await this.handleAnySpecialADLoginScreen();
+		try {
+			await this.klikOpDigidLoginOptie();
+		} catch (_error) {
+			await this.openPage();
+			await this.handleAnySpecialADLoginScreen();
+			await this.klikOpDigidLoginOptie();
+		}
+		if (!this.page.url().match(/authn/)) {
+			await this.loginWithDigid(account);
+			await this.accepteerCookies();
+		}
+		await this.page.context().storageState({ path: fileName });
+	}
+	async loginAndCreateNewGemachtigdeSession(account, fileName) {
+		await this.openPage();
+		await this.handleAnySpecialADLoginScreen();
+		try {
+			await this.klikOpDigidMachtigenLoginOptie();
+		} catch (_error) {
+			await this.openPage();
+			await this.klikOpDigidMachtigenLoginOptie();
+		}
+		await this.loginWithDigid(account, true);
+		await this.accepteerCookies();
+		await this.page.context().storageState({ path: fileName });
+	}
+	/**
+	* Indien er al een AD sessie is maar voor de verkeerde omgeving
+	* Je krijgt dan een speciaal scherm waar je moet bevestigen voordat je door kan
+	*/
+	async handleAnySpecialADLoginScreen() {
+		try {
+			await this.page.locator(`//div[contains(@data-test-id,'${process$1.env.AD_USER}')]`).first().waitFor({ timeout: 1e3 });
+			await this.page.locator(`//div[contains(@data-test-id,'${process$1.env.AD_USER}')]`).first().click();
+		} catch (_error) {}
+	}
+	async loginWithDigid(account, gemachtigde) {
+		account ??= defaultDigidAccount;
+		await this.page.getByLabel("Inlogoptie 5 van 5: Inloggen").click();
+		await this.page.getByLabel("Testen betrouwbaarheidsniveau").selectOption("25");
+		await this.page.getByLabel("DigiD gebruikersnaam").fill(account.username);
+		await this.page.getByLabel("Wachtwoord", { exact: true }).fill(account.password);
+		const responsePromise = this.page.waitForResponse(/callback/, { timeout: 6e4 });
+		await this.page.getByRole("button", { name: "Inloggen" }).click();
+		if (gemachtigde) await this.page.getByRole("button", { name: "Kies" }).click();
+		return await responsePromise;
+	}
+	async loginAlsDigidGemachtigde() {
+		const gemachtigde = {
+			username: `${process$1.env.DIGID_GEMACHTIGDE_USER}`,
+			password: `${process$1.env.DIGID_GEMACHTIGDE_PASSWORD}`
+		};
+		await this.klikOpDigidMachtigenLoginOptie();
+		await this.loginWithDigid(gemachtigde, true);
+	}
+};
+//#endregion
+//#region src/auth/loginhandlers/digidLoginHandler.ts
+var DigidLoginHandler = class {
+	async loginAndCreateSessionStorage(page, account, file) {
+		await new DigidLoginPage(page).loginAndCreateNewSession(account, file);
+	}
+};
+//#endregion
+//#region src/auth/pages/eHerkenningLoginPage.ts
+var EHerkenningLoginPage = class extends LoginOverzichtPage {
+	dropdownSelectIdentityProvider;
+	buttonConfirmIdentityProviderSelection;
+	textfieldUsername;
+	textfieldPassword;
+	inloggenKnop;
+	verderKnop;
+	verderLink;
+	inputBsn;
+	buttonZoek;
+	constructor(page) {
+		super(page);
+		this.dropdownSelectIdentityProvider = page.locator("#identity_provider");
+		this.buttonConfirmIdentityProviderSelection = page.locator("//*[@name='commit']");
+		this.textfieldUsername = page.locator("#account_username");
+		this.textfieldPassword = page.locator("#account_password");
+		this.inloggenKnop = page.getByRole("button", { name: /Inloggen|Log in/ });
+		this.verderKnop = page.getByRole("button", { name: /Verder|Continue|Ga verder/ });
+		this.inputBsn = page.locator("#bsn-input");
+		this.buttonZoek = page.locator("#search-submit");
+		this.verderLink = page.getByRole("link", { name: /Verder|Continue|Ga verder/ });
+	}
+	async probeerInTeLoggenMetEHerkenning(account) {
+		account ??= defaultEHerkenningAccount;
+		await this.dropdownSelectIdentityProvider.selectOption("Digidentity AD 1.13 (preproduction)");
+		await this.page.locator("#remember").click();
+		await this.buttonConfirmIdentityProviderSelection.click();
+		await this.textfieldUsername.fill(account.username);
+		await this.verderKnop.click();
+		await this.textfieldPassword.fill(account.password);
+		await this.inloggenKnop.click();
+	}
+	async loginWithEHerkenningAndCreateSession(fileName, account) {
+		await this.openPage();
+		try {
+			await this.klikOpEHerkenningLoginOptie();
+		} catch (_error) {
+			await this.openPage();
+			await this.klikOpEHerkenningLoginOptie();
+		}
+		await this.loginWithEHerkenning(account);
+		await this.page.context().storageState({ path: fileName });
+	}
+	async loginWithEHerkenning(account) {
+		await this.probeerInTeLoggenMetEHerkenning(account);
+		await this.page.waitForTimeout(2e3);
+		if (await this.verderKnop.isVisible()) await this.verderKnop.click();
+		await this.accepteerCookies();
+	}
+	async loginWithEHerkenningVestigingAndCreateSession(fileName, account) {
+		await this.openPage();
+		try {
+			await this.klikOpEHerkenningLoginOptie();
+		} catch (_error) {
+			await this.openPage();
+			await this.klikOpEHerkenningLoginOptie();
+		}
+		await this.loginWithEHerkenningVestiging(account);
+		await this.page.context().storageState({ path: fileName });
+	}
+	async loginWithEHerkenningVestiging(account) {
+		await this.probeerInTeLoggenMetEHerkenning(account);
+		await this.page.waitForTimeout(2e3);
+		if (await this.verderKnop.isVisible()) await this.verderKnop.click();
+		await this.accepteerCookies();
+	}
+	async loginAlsProfessioneelBewindvoerder(gemachtigde, file) {
+		await this.openPage();
+		await this.klikOpProfessioneelBewindvoerderLoginOptie();
+		if (gemachtigde) try {
+			await this.probeerInTeLoggenMetEHerkenning(gemachtigde);
+		} catch (_error) {
+			await this.openPage();
+			await this.probeerInTeLoggenMetEHerkenning(gemachtigde);
+		}
+		else {
+			gemachtigde = defaultProfessioneelBewindvoerderAccount;
+			try {
+				await this.loginWithEHerkenning(gemachtigde);
+			} catch (_error) {
+				await this.openPage();
+				await this.loginWithEHerkenning(gemachtigde);
+			}
+		}
+		if (gemachtigde.bsn != null) {
+			await this.verderLink.click();
+			await this.inputBsn.fill(gemachtigde.bsn);
+		}
+		await this.buttonZoek.click();
+		await this.verderLink.click();
+		await this.accepteerCookies();
+		if (file) await this.page.context().storageState({ path: file });
+	}
+	async valideerDatNietGemachtigdBerichtZichtbaarIs() {
+		await expect(this.page.getByText("Helaas bent u niet gemachtigd")).toBeVisible();
+		await expect(this.page.getByText("Helaas bent u niet gemachtigd voor toegang tot Aanvragen en regelen producten en diensten als bewindvoerder van Gemeente Den Haag.")).toBeVisible();
+	}
+};
+//#endregion
+//#region src/auth/loginhandlers/eHerkenningLoginHandler.ts
+var EHerkenningLoginHandler = class {
+	async loginAndCreateSessionStorage(page, account, file) {
+		await new EHerkenningLoginPage(page).loginWithEHerkenningVestigingAndCreateSession(file, account);
+	}
+};
+//#endregion
+//#region src/auth/loginhandlers/digidGemachtigdeLoginHandler.ts
+var DigidGemachtigdeLoginHandler = class {
+	async loginAndCreateSessionStorage(page, account, file) {
+		await new DigidLoginPage(page).loginAndCreateNewGemachtigdeSession(account, file);
+	}
+};
+//#endregion
+//#region src/auth/loginhandlers/eHerkenningBewindvoerderLoginHandler.ts
+var EHerkenningBewindvoerderLoginHandler = class {
+	async loginAndCreateSessionStorage(page, account, file) {
+		await new EHerkenningLoginPage(page).loginAlsProfessioneelBewindvoerder(account, file);
+	}
+};
+//#endregion
+//#region node_modules/.pnpm/totp-generator@2.0.1/node_modules/totp-generator/lib/esm/index.js
+var TOTP = class TOTP {
+	static _sign = async (t, e, r) => {
+		try {
+			const a = (globalThis.crypto || __require("node:crypto").webcrypto).subtle, i = await a.importKey("raw", t, {
+				name: "HMAC",
+				hash: { name: r }
+			}, !1, ["sign"]), n = TOTP.hex2buf(e);
+			return await a.sign("HMAC", i, n);
+		} catch (a) {
+			const { default: i } = await import("./sha-B5xpXfPW.mjs"), n = new i(r, "ARRAYBUFFER");
+			return n.setHMACKey(t, "ARRAYBUFFER"), n.update(TOTP.hex2buf(e)), n.getHMAC("ARRAYBUFFER");
+		}
+	};
+	static async generate(t, e) {
+		const r = {
+			digits: 6,
+			algorithm: "SHA-1",
+			encoding: "hex",
+			period: 30,
+			timestamp: Date.now(),
+			explicitZeroPad: !1,
+			...e
+		}, a = Math.floor(r.timestamp / 1e3), i = TOTP.dec2hex(Math.floor(a / r.period)).padStart(16, "0"), n = "hex" === r.encoding ? TOTP.base32ToBuffer(t) : TOTP.asciiToBuffer(t), o = await TOTP._sign(n, i, r.algorithm), s = TOTP.buf2hex(o), c = 2 * TOTP.hex2dec(s.slice(-1)), h = (2147483647 & TOTP.hex2dec(s.slice(c, c + 8))).toString().slice(-r.digits), T = r.explicitZeroPad ? h.padStart(r.digits, "0") : h, d = 1e3 * r.period;
+		return {
+			otp: T,
+			expires: Math.ceil((r.timestamp + 1) / d) * d
+		};
+	}
+	static hex2dec(t) {
+		return parseInt(t, 16);
+	}
+	static dec2hex(t) {
+		return (t < 15.5 ? "0" : "") + Math.round(t).toString(16);
+	}
+	static base32ToBuffer(t) {
+		let e = (t = t.toUpperCase()).length;
+		for (; 61 === t.charCodeAt(e - 1);) e--;
+		const r = new Uint8Array(5 * e / 8);
+		let a = 0, i = 0, n = 0;
+		for (let o = 0; o < e; o++) {
+			const e = TOTP.base32[t.charCodeAt(o)];
+			if (void 0 === e) throw new Error("Invalid base32 character in key");
+			a = a << 5 | e, i += 5, i >= 8 && (r[n++] = a >>> (i -= 8));
+		}
+		return r.buffer;
+	}
+	static asciiToBuffer(t) {
+		const e = new Uint8Array(t.length);
+		for (let r = 0; r < t.length; r++) e[r] = t.charCodeAt(r);
+		return e.buffer;
+	}
+	static hex2buf(t) {
+		const e = new Uint8Array(t.length / 2);
+		for (let r = 0, a = 0; r < t.length; r += 2, a++) e[a] = TOTP.hex2dec(t.slice(r, r + 2));
+		return e.buffer;
+	}
+	static buf2hex(t) {
+		return [...new Uint8Array(t)].map((t) => t.toString(16).padStart(2, "0")).join("");
+	}
+	static base32 = {
+		50: 26,
+		51: 27,
+		52: 28,
+		53: 29,
+		54: 30,
+		55: 31,
+		65: 0,
+		66: 1,
+		67: 2,
+		68: 3,
+		69: 4,
+		70: 5,
+		71: 6,
+		72: 7,
+		73: 8,
+		74: 9,
+		75: 10,
+		76: 11,
+		77: 12,
+		78: 13,
+		79: 14,
+		80: 15,
+		81: 16,
+		82: 17,
+		83: 18,
+		84: 19,
+		85: 20,
+		86: 21,
+		87: 22,
+		88: 23,
+		89: 24,
+		90: 25
+	};
+};
+//#endregion
+//#region src/auth/pages/adLoginPage.ts
+var gzacUrlProd = "https://alg-zgw.denhaag.nl";
+var gzacUrlAcp = "https://alg-zgw.acc.denhaag.nl";
+var gzacUrlTest = "https://alg-zgw.test.denhaag.nl";
+var ADLoginPage = class ADLoginPage extends BasePage {
+	gebruikersnaamInput;
+	wachtwoordInput;
+	volgendeInput;
+	aanmeldenInput;
+	kanAuthAppNietGebruikenLink;
+	gebruikVerificatieCode;
+	codeInput;
+	verifierenInput;
+	constructor(page) {
+		super(page);
+		this.gebruikersnaamInput = page.locator("//input[@type='email']");
+		this.wachtwoordInput = page.locator("//input[@name='passwd']");
+		this.volgendeInput = page.locator("//input[@type='submit']");
+		this.aanmeldenInput = page.locator("//input[@type='submit']");
+		this.kanAuthAppNietGebruikenLink = page.locator("//*[@id='signInAnotherWay']");
+		this.gebruikVerificatieCode = page.locator("//div[@id='idDiv_SAOTCS_Proofs']//div[contains(@role,'listitem')][2]");
+		this.codeInput = page.locator("//input[@name='otc']");
+		this.verifierenInput = page.locator("//input[@type='submit']");
+	}
+	async openPage(path) {
+		await this.page.goto(path);
+	}
+	/**
+	* Login with the AD account so we can get behind the firewall
+	*
+	* @param account
+	* @param fileName
+	*/
+	async loginWithADAccountAndCreateSession(account, fileName) {
+		const adLoginPage = new ADLoginPage(this.page);
+		await this.page.goto(this.getGzacUrl());
+		await adLoginPage.gebruikersnaamInput.waitFor();
+		await adLoginPage.gebruikersnaamInput.fill(account.username);
+		await adLoginPage.volgendeInput.click();
+		await adLoginPage.wachtwoordInput.fill(account.password);
+		await adLoginPage.aanmeldenInput.click();
+		await this.page.waitForTimeout(1e3);
+		try {
+			if (await this.page.getByText("Uw account is niet geverifieerd. Probeer het opnieuw").isVisible()) await this.tryAgainUntilSuccesful();
+		} catch (_error) {}
+		await adLoginPage.kanAuthAppNietGebruikenLink.click();
+		await adLoginPage.gebruikVerificatieCode.click();
+		const token = await TOTP.generate(`${process.env.AD_SECRET}`);
+		await adLoginPage.codeInput.fill(token.otp);
+		await adLoginPage.verifierenInput.click();
+		await adLoginPage.page.waitForTimeout(5e3);
+		adLoginPage.page.on("domcontentloaded", () => {});
+		await adLoginPage.page.context().storageState({ path: fileName });
+	}
+	async tryAgainUntilSuccesful() {
+		let maxNumberOfTries = 6;
+		let foutMeldingIsSHowing = true;
+		while (foutMeldingIsSHowing) {
+			await this.page.waitForTimeout(1e4);
+			maxNumberOfTries--;
+			if (maxNumberOfTries == 0) return;
+			try {
+				await this.page.goBack();
+				await this.page.waitForTimeout(1e3);
+				await this.page.locator("//div[contains(@role,'listitem')]").first().click();
+				await this.page.waitForTimeout(1e3);
+				foutMeldingIsSHowing = await this.page.getByText("Uw account is niet geverifieerd. Probeer het opnieuw").isVisible();
+			} catch (_error) {}
+		}
+	}
+	getGzacUrl() {
+		const baseUrl = this.getBaseUrl();
+		if (/klantportaal-zgw.denhaag.nl./.exec(baseUrl)) return gzacUrlProd;
+		if (/.acc./.exec(baseUrl)) return gzacUrlAcp;
+		if (/.test./.exec(baseUrl)) return gzacUrlTest;
+		else throw new Error("Cannot find current environment for baseUrl: " + baseUrl);
+	}
+};
+//#endregion
+//#region src/auth/loginhandlers/adLoginHandler.ts
+var ADLoginHandler = class {
+	async loginAndCreateSessionStorage(page, account, file) {
+		await new ADLoginPage(page).loginWithADAccountAndCreateSession(account, file);
+	}
+};
+//#endregion
+//#region src/auth/getLoginHandler.ts
+function getLoginHandler(authType) {
+	switch (authType) {
+		case "digid": return isRunningOnLocalhost() ? new LocalhostLoginHandler() : new DigidLoginHandler();
+		case "digid_gemachtigde": return new DigidGemachtigdeLoginHandler();
+		case "eherkenning": return isRunningOnLocalhost() ? new LocalhostLoginHandler() : new EHerkenningLoginHandler();
+		case "eherkenning_vestiging": return new EHerkenningLoginHandler();
+		case "eherkenning_bewindvoerder": return new EHerkenningBewindvoerderLoginHandler();
+		case "ad-session": return new ADLoginHandler();
+		default: throw new Error(`Unsupported auth type: ${authType}. If needed please create a new LoginHandler and register it here in getLoginHandler().`);
+	}
+}
+//#endregion
+//#region src/auth/utils/sessionFileHelper.ts
+var sessionsDir = process$2.env.SESSIONS_DIR ?? path.resolve(process$2.cwd(), "sessions");
+var environment = process$2.env.ENV ?? "test";
+/**
+* Easy way to create the filenames for the sessions
+*/
+var SessionFileHelper = class {
+	static getLocalhostFileName(browser) {
+		return path.join(sessionsDir, `${browser.browserType().name()}-${environment}-${localhostBurgerAccount.username}.json`);
+	}
+	static getLocalhostFileNameBedrijf(browser) {
+		return path.join(sessionsDir, `${browser.browserType().name()}-${environment}-${localhostBedrijfAccount.username}.json`);
+	}
+	static getDigidFileName(browser) {
+		return path.join(sessionsDir, `${browser.browserType().name()}-digid-${environment}-${defaultDigidAccount.username}.json`);
+	}
+	static getDigidGemachtigdeFileName(browser) {
+		return path.join(sessionsDir, `${browser.browserType().name()}-digid-gemachtigde-${environment}-${defaultDigidGemachtigdAccount.username}.json`);
+	}
+	static getEHerkenningFileName(browser) {
+		return path.join(sessionsDir, `${browser.browserType().name()}-eherkenning-${environment}.json`);
+	}
+	static getEHerkenningVestigingFileName(browser) {
+		return path.join(sessionsDir, `${browser.browserType().name()}-eherkenning-vestiging-${environment}.json`);
+	}
+	static getEHerkenningBewindvoerderFileName(browser) {
+		return path.join(sessionsDir, `${browser.browserType().name()}-eherkenning-bewindvoerder-${environment}.json`);
+	}
+	static getADFileName(browser) {
+		return path.join(sessionsDir, `${browser.browserType().name()}-ad-${environment}.json`);
+	}
+};
+//#endregion
+//#region src/auth/sessionHandler.ts
+var MAX_SESSION_TIME_IN_MINUTES = 10;
+/**
+* This class creates the correct SessionHandler
+* It will also perform the process of setting op the session
+*
+* @param authType type of login
+* @param account with login details
+* @param loginHandler that will handle the login itself
+*/
+function createSessionHandler(authType, account, loginHandler) {
+	return {
+		getFile: (browser) => {
+			switch (authType) {
+				case "digid": return SessionFileHelper.getDigidFileName(browser);
+				case "digid_gemachtigde": return SessionFileHelper.getDigidGemachtigdeFileName(browser);
+				case "eherkenning": return SessionFileHelper.getEHerkenningFileName(browser);
+				case "eherkenning_vestiging": return SessionFileHelper.getEHerkenningVestigingFileName(browser);
+				case "eherkenning_bewindvoerder": return SessionFileHelper.getEHerkenningBewindvoerderFileName(browser);
+				case "ad-session": return SessionFileHelper.getADFileName(browser);
+				default: throw new Error(`Unsupported auth type: ${authType}`);
+			}
+		},
+		/**
+		* Setup the new session
+		* If needed the AD Session if used (Needed outside the firewall)
+		*
+		* @param browser
+		* @param file
+		*/
+		setupSession: async (browser, file) => {
+			const useADSession = process.env.WITH_AD_SESSION === "true";
+			const page = await browser.newPage({
+				ignoreHTTPSErrors: true,
+				storageState: useADSession && authType !== "ad-session" ? SessionFileHelper.getADFileName(browser) : void 0
+			});
+			console.log(`New session will be created: ${file}`);
+			try {
+				await loginHandler.loginAndCreateSessionStorage(page, account, file);
+			} finally {
+				await page.close();
+			}
+		},
+		/**
+		* Refresh the current session by opening a page and storing that session
+		* The UI should have refreshed the session meanwhile
+		*
+		* This is being called from the nl-portal-base-library
+		*
+		* @param browser
+		* @param file
+		*/
+		refreshSession: async (browser, file) => {
+			const page = await browser.newPage({
+				ignoreHTTPSErrors: true,
+				storageState: file
+			});
+			console.log(`Refresh of session started for : ${file}`);
+			await page.goto(getUrl(Url.PortalBaseUrl));
+			await page.waitForLoadState("networkidle");
+			if (page.url().match(/authn/)) {
+				console.log(`New session will be created as the current one is no longer valid: ${file}`);
+				try {
+					await loginHandler.loginAndCreateSessionStorage(page, account, file);
+				} catch (_error) {
+					console.error(_error);
+				}
+			} else {
+				console.log(`Current session was still valid and will be refreshed now: ${file}`);
+				await page.context().storageState({ path: file });
+			}
+			await page.close();
+		}
+	};
+}
+//#endregion
+//#region src/auth/api/apiTokenHelper.ts
+/**
+* The token is often being refreshed so the easiest is to open a browser using the current session
+* The UI will automatically refresh the token and that is the token we will return
+*
+* That token can be used to perform some api requests for a short time
+* Per specfile it is not problem but this should be done in every specfile to assure a valid token
+*
+* @param baseTest
+* @param handlerResolver
+*/
+function getApiTokenFromSession(baseTest, handlerResolver) {
+	return baseTest.extend({
+		urls: async ({}, use) => {
+			await use(urls);
+		},
+		token: async ({ browser }, use) => {
+			const handler = handlerResolver();
+			const storageState = await SessionManager.getOrCreateSession(browser, handler);
+			const context = await browser.newContext(storageState ? { storageState } : {});
+			const page = await context.newPage();
+			try {
+				await page.goto("/");
+				await page.waitForFunction(() => {
+					const key = Object.keys(sessionStorage).find((k) => k.startsWith("oidc"));
+					if (!key) return false;
+					const raw = sessionStorage.getItem(key);
+					if (!raw) return false;
+					try {
+						return !!JSON.parse(raw)?.access_token;
+					} catch {
+						return false;
+					}
+				});
+				const token = await page.evaluate(() => {
+					const key = Object.keys(sessionStorage).find((k) => k.startsWith("oidc"));
+					if (!key) return null;
+					const raw = sessionStorage.getItem(key);
+					if (!raw) return null;
+					try {
+						return JSON.parse(raw)?.access_token ?? null;
+					} catch {
+						return null;
+					}
+				});
+				if (!token) throw new Error("❌ Token not found in sessionStorage");
+				await use(token);
+			} finally {
+				await context.close();
+			}
+		}
+	});
+}
+//#endregion
+//#region src/auth/api/sessionHandlerResolvers.ts
+function getBurgerSessionHandler() {
+	if (isRunningOnLocalhost()) return createSessionHandler("digid", localhostBurgerAccount, getLoginHandler("digid"));
+	return createSessionHandler("digid", defaultDigidAccount, getLoginHandler("digid"));
+}
+function getBedrijfSessionHandler() {
+	if (isRunningOnLocalhost()) return createSessionHandler("eherkenning", localhostBedrijfAccount, getLoginHandler("eherkenning"));
+	return createSessionHandler("eherkenning", defaultEHerkenningAccount, getLoginHandler("eherkenning"));
+}
+function getVestigingSessionHandler() {
+	return createSessionHandler("eherkenning_vestiging", defaultVestigingAccount, getLoginHandler("eherkenning_vestiging"));
+}
+function getDigidGemachtigdeSessionHandler() {
+	return createSessionHandler("digid_gemachtigde", defaultDigidGemachtigdAccount, getLoginHandler("digid_gemachtigde"));
+}
+function getEHerkenningBewindvoerderSessionHandler() {
+	return createSessionHandler("eherkenning_bewindvoerder", defaultProfessioneelBewindvoerderAccount, getLoginHandler("eherkenning_bewindvoerder"));
+}
+function getAdSessionHandler() {
+	return createSessionHandler("ad-session", defaultADAccount, getLoginHandler("ad-session"));
+}
+//#endregion
+//#region src/auth/api/apiAuthentication.ts
+/**
+* The api's will use an existing session and use that token for the requests.
+* The reason for this is that the token life-span is short and the UI always does a token-refresh.
+* By using the UI session and stealing that token it will always be valid.
+*/
+var burgerApiTest = getApiTokenFromSession(baseTest, getBurgerSessionHandler);
+var bedrijfApiTest = getApiTokenFromSession(baseTest, getBedrijfSessionHandler);
+var vestigingApiTest = getApiTokenFromSession(baseTest, getVestigingSessionHandler);
+var digidGemachtigdeApiTest = getApiTokenFromSession(baseTest, getDigidGemachtigdeSessionHandler);
+var eHerkenningBewindvoerderApiTest = getApiTokenFromSession(baseTest, getEHerkenningBewindvoerderSessionHandler);
+//#endregion
+//#region src/constants/accountTypes.ts
+var profiles = {
+	burger: {
+		accountType: "burger",
+		authType: "digid",
+		id: "999994499"
+	},
+	bedrijf: {
+		accountType: "bedrijf",
+		authType: "eherkenning",
+		id: "90002768"
+	},
+	vestiging: {
+		accountType: "vestiging",
+		authType: "eherkenning_vestiging",
+		id: "990000262129"
+	},
+	gemachtigde: {
+		accountType: "digid-gemachtigde",
+		authType: "digid_gemachtigde",
+		id: ""
+	},
+	bewindvoerder: {
+		accountType: "bedrijf",
+		authType: "eherkenning_bewindvoerder",
+		id: "999994499"
+	}
+};
+//#endregion
+//#region src/constants/testAccounts.ts
+var TestAccounts = {
+	zgwdigiduser1: {
+		id: "999991954",
+		type: "burger"
+	},
+	zgwdigiduser2: {
+		id: "999991115",
+		type: "burger"
+	},
+	zgwdigiduser3: {
+		id: "999991966",
+		type: "burger"
+	},
+	zgwdigiduser4: {
+		id: "999992922",
+		type: "burger"
+	},
+	zgwdigiduser5: {
+		id: "999991322",
+		type: "burger"
+	},
+	testautomatisering: {
+		id: "999994499",
+		type: "burger"
+	},
+	localhostaccount: {
+		id: "999993847",
+		type: "burger"
+	},
+	kvkAccount: {
+		id: "90002768",
+		type: "bedrijf"
+	},
+	kvkVestiging: {
+		id: "990000262129",
+		type: "vestiging"
+	}
+};
+//#endregion
+//#region src/constants/testProfiles.ts
+var testProfiles = {
+	burger: {
+		accountType: "burger",
+		authType: "digid",
+		id: "999994499"
+	},
+	bedrijf: {
+		accountType: "bedrijf",
+		authType: "eherkenning",
+		id: "90002768"
+	},
+	vestiging: {
+		accountType: "vestiging",
+		authType: "eherkenning_vestiging",
+		id: "990000262129"
+	},
+	gemachtigde: {
+		accountType: "digid-gemachtigde",
+		authType: "digid_gemachtigde",
+		id: ""
+	},
+	bewindvoerder: {
+		accountType: "bedrijf",
+		authType: "eherkenning_bewindvoerder",
+		id: "999994499"
+	}
+};
+//#endregion
+export { ADLoginHandler, ADLoginPage, DigidGemachtigdeLoginHandler, DigidLoginHandler, DigidLoginPage, EHerkenningBewindvoerderLoginHandler, EHerkenningLoginHandler, EHerkenningLoginPage, LocalhostLoginHandler, LoginOverzichtPage, MAX_SESSION_TIME_IN_MINUTES, SessionFileHelper, TestAccounts, bedrijfApiTest, burgerApiTest, createSessionHandler, defaultADAccount, defaultDigidAccount, defaultDigidGemachtigdAccount, defaultEHerkenningAccount, defaultProfessioneelBewindvoerderAccount, defaultVestigingAccount, digidGemachtigdeApiTest, eHerkenningBewindvoerderApiTest, getAdSessionHandler, getApiTokenFromSession, getBedrijfSessionHandler, getBurgerSessionHandler, getDigidGemachtigdeSessionHandler, getEHerkenningBewindvoerderSessionHandler, getLoginHandler, getVestigingSessionHandler, localhostBedrijfAccount, localhostBurgerAccount, profiles, testProfiles, vestigingApiTest };