emilsoftware-utilities 2.0.0-dev.22 → 2.0.0-dev.24

package/dist/accessi-module/AccessiModule.js.map

@@ -1 +1 @@
-{"version":3,"file":"AccessiModule.js","sourceRoot":"","sources":["../../src/accessi-module/AccessiModule.ts"],"names":[],"mappings":";;;;;;;;;;AAOA,2CAA+D;AAC/D,oEAAiE;AACjE,uEAAoE;AACpE,sFAAmF;AACnF,oEAAiE;AACjE,mEAAgE;AAChE,iEAA8D;AAC9D,6EAA0E;AAC1E,iEAA8D;AAC9D,0EAAuE;AACvE,qEAAkE;AAClE,iFAA8E;AAC9E,4FAAyF;AACzF,qDAAoD;AACpD,kEAAsE;AACtE,sFAAmF;AAkF5E,IAAM,aAAa,qBAAnB,MAAM,aAAa;IACxB,MAAM,CAAC,OAAO,CAAC,OAAuB;QACpC,OAAO;YACL,MAAM,EAAE,eAAa;YACrB,SAAS,EAAE;gBACT;oBACE,OAAO,EAAE,iBAAiB;oBAC1B,QAAQ,EAAE,OAAO;iBAClB;gBACD,yBAAW;gBACX,yBAAW;gBACX,2BAAY;gBACZ,qCAAiB;gBACjB,6BAAa;gBACb,yCAAmB;gBACnB,6BAAc;gBACd,wCAAsB;gBACtB,+CAAsB;aACvB;YACD,OAAO,EAAE;gBACP,iBAAiB;gBACjB,yBAAW;gBACX,yBAAW;gBACX,2BAAY;gBACZ,qCAAiB;gBACjB,6BAAa;gBACb,yCAAmB;gBACnB,6BAAc;gBACd,wCAAsB;aACvB;SACF,CAAC;IACJ,CAAC;CACF,CAAA;AAhCY,sCAAa;wBAAb,aAAa;IAbzB,IAAA,eAAM,GAAE;IACR,IAAA,eAAM,EAAC;QACN,WAAW,EAAE;YACX,iCAAe;YACf,+BAAc;YACd,2CAAoB;YACpB,+BAAc;YACd,mCAAgB;YAChB,+CAAsB;SACvB;QACD,SAAS,EAAE,CAAC,yBAAW,EAAE,yBAAW,EAAE,2BAAY,EAAE,qCAAiB,EAAE,6BAAa,EAAE,yCAAmB,EAAE,6BAAc,EAAE,wCAAsB,EAAE,+CAAsB,CAAC;QAC1K,OAAO,EAAE,CAAC,yBAAW,EAAE,yBAAW,EAAE,2BAAY,EAAE,qCAAiB,EAAE,6BAAa,EAAE,yCAAmB,EAAE,6BAAc,EAAE,wCAAsB,CAAC;KACjJ,CAAC;GACW,aAAa,CAgCzB","sourcesContent":["/**\n * Modulo che gestisce le operazioni di accesso degli utenti, incluse le rotte, il controller e il modello.\n *\n * @module AccessiModule\n * @author mttdev382\n */\nimport { Options } from 'node-firebird';\nimport { DynamicModule, Global, Module } from '@nestjs/common';\nimport { AuthService } from './Services/AuthService/AuthService';\nimport { EmailService } from './Services/EmailService/EmailService';\nimport { PermissionService } from './Services/PermissionService/PermissionService';\nimport { UserService } from './Services/UserService/UserService';\nimport { EmailController } from './Controllers/EmailController';\nimport { AuthController } from './Controllers/AuthController';\nimport { PermissionController } from './Controllers/PermissionController';\nimport { UserController } from './Controllers/UserController';\nimport { FiltriService } from './Services/FiltriService/FiltriService';\nimport { FiltriController } from './Controllers/FiltriController';\nimport { ConfiguratorController } from './Controllers/ConfiguratorController';\nimport { ConfiguratorService } from './Services/ConfiguratorService/ConfiguratorService';\nimport { JwtSimpleGuard } from './jwt/jwt.strategy';\nimport { AuthenticateGenService } from './middleware/authenticateGen';\nimport { AccessiDatabaseUpdater } from './database-updates/AccessiDatabaseUpdater';\n\nexport interface JwtOptions {\n  secret: string;\n  expiresIn: string;\n}\n\nexport interface EmailOptions {\n  host: string;\n  port: number;\n  secure: boolean;\n  requireTLS : boolean;\n  tls: {\n    rejectUnauthorized: boolean,\n  }\n  from: string;\n  auth: {\n    user: string;\n    pass: string;\n  };\n}\n\nexport interface ExtensionFieldsOptions {\n  databaseOptions: Options;\n  objectKey: string;\n  tableName: string;\n  tableFields: string[];\n  tableJoinFieldName: string;\n}\n\nexport interface PublicAuthRateLimitRuleOptions {\n  windowMs: number;\n  maxAttempts: number;\n}\n\nexport interface PublicAuthRateLimitOptions {\n  enabled?: boolean;\n  login?: PublicAuthRateLimitRuleOptions;\n  register?: PublicAuthRateLimitRuleOptions;\n  passwordResetEmail?: PublicAuthRateLimitRuleOptions;\n  passwordResetConfirm?: PublicAuthRateLimitRuleOptions;\n  getUserByToken?: PublicAuthRateLimitRuleOptions;\n}\n\nexport interface AccessiOptions {\n  databaseOptions: Options;\n  /**\n   * Basepath del sito es: 'http://www.il-mio-sito.it/nome-progetto(se c'è)'\n   */\n  confirmationEmailUrl: string;\n  /**\n   * Percorso della pagina di reset personalizzata es. http://localhost:4200/#/admin/reset-password\n   * N.B si sostituisce al confirmationMailURl\n   */\n  customResetPage?: string;\n  confirmationEmailReturnUrl: string;\n  confirmationEmailPrefix?: string;\n  encryptionKey: string;\n  mockDemoUser: boolean;\n  passwordExpiration?: boolean;\n  passwordExpirationDays?: number;\n  legacyPasswordMigrationOnStartup?: boolean;\n  autoUpdateDatabase?: boolean;\n  jwtOptions: JwtOptions;\n  emailOptions: EmailOptions;\n  publicAuthRateLimit?: PublicAuthRateLimitOptions;\n  extensionFieldsOptions?: ExtensionFieldsOptions[];\n}\n\n@Global()\n@Module({\n  controllers: [\n    EmailController,\n    AuthController,\n    PermissionController,\n    UserController,\n    FiltriController,\n    ConfiguratorController\n  ],\n  providers: [AuthService, UserService, EmailService, PermissionService, FiltriService, ConfiguratorService, JwtSimpleGuard, AuthenticateGenService, AccessiDatabaseUpdater],\n  exports: [AuthService, UserService, EmailService, PermissionService, FiltriService, ConfiguratorService, JwtSimpleGuard, AuthenticateGenService],\n})\nexport class AccessiModule {\n  static forRoot(options: AccessiOptions): DynamicModule {\n    return {\n      module: AccessiModule,\n      providers: [\n        {\n          provide: 'ACCESSI_OPTIONS',\n          useValue: options,\n        },\n        AuthService,\n        UserService,\n        EmailService,\n        PermissionService,\n        FiltriService,\n        ConfiguratorService,\n        JwtSimpleGuard,\n        AuthenticateGenService,\n        AccessiDatabaseUpdater\n      ],\n      exports: [\n        'ACCESSI_OPTIONS',\n        AuthService,\n        UserService,\n        EmailService,\n        PermissionService,\n        FiltriService,\n        ConfiguratorService,\n        JwtSimpleGuard,\n        AuthenticateGenService\n      ],\n    };\n  }\n}\n"]}
+{"version":3,"file":"AccessiModule.js","sourceRoot":"","sources":["../../src/accessi-module/AccessiModule.ts"],"names":[],"mappings":";;;;;;;;;;AAAA,mFAAgF;AAQhF,2CAA+D;AAC/D,oEAAiE;AACjE,uEAAoE;AACpE,sFAAmF;AACnF,oEAAiE;AACjE,mEAAgE;AAChE,iEAA8D;AAC9D,6EAA0E;AAC1E,iEAA8D;AAC9D,0EAAuE;AACvE,qEAAkE;AAClE,iFAA8E;AAC9E,4FAAyF;AACzF,qDAAoD;AACpD,kEAAsE;AACtE,sFAAmF;AACnF,gFAA6E;AAC7E,sFAAmF;AACnF,qFAAkF;AAClF,iFAA8E;AAC9E,4FAAyF;AACzF,oEAAiE;AAsJ1D,IAAM,aAAa,qBAAnB,MAAM,aAAa;IACxB;;;;;;OAMG;IACH,MAAM,CAAC,OAAO,CAAC,OAAuB;QACpC,OAAO;YACL,MAAM,EAAE,eAAa;YACrB,SAAS,EAAE;gBACT;oBACE,OAAO,EAAE,iBAAiB;oBAC1B,QAAQ,EAAE,OAAO;iBAClB;gBACD,yBAAW;gBACX,mCAAgB;gBAChB,yBAAW;gBACX,2BAAY;gBACZ,qCAAiB;gBACjB,6BAAa;gBACb,yCAAmB;gBACnB,6BAAc;gBACd,wCAAsB;gBACtB,+CAAsB;gBACtB,2CAAoB;gBACpB,yCAAmB;gBACnB,qCAAiB;aAClB;YACD,OAAO,EAAE;gBACP,iBAAiB;gBACjB,yBAAW;gBACX,yBAAW;gBACX,2BAAY;gBACZ,qCAAiB;gBACjB,6BAAa;gBACb,yCAAmB;gBACnB,6BAAc;gBACd,wCAAsB;gBACtB,2CAAoB;gBACpB,yCAAmB;gBACnB,qCAAiB;aAClB;SACF,CAAC;IACJ,CAAC;CACF,CAAA;AA9CY,sCAAa;wBAAb,aAAa;IAhBzB,IAAA,eAAM,GAAE;IACR,IAAA,eAAM,EAAC;QACN,WAAW,EAAE;YACX,iCAAe;YACf,+BAAc;YACd,2CAAoB;YACpB,+BAAc;YACd,mCAAgB;YAChB,+CAAsB;YACtB,iDAAuB;YACvB,mDAAwB;YACxB,+CAAsB;SACvB;QACD,SAAS,EAAE,CAAC,yBAAW,EAAE,mCAAgB,EAAE,yBAAW,EAAE,2BAAY,EAAE,qCAAiB,EAAE,6BAAa,EAAE,yCAAmB,EAAE,6BAAc,EAAE,wCAAsB,EAAE,+CAAsB,EAAE,2CAAoB,EAAE,yCAAmB,EAAE,qCAAiB,CAAC;QAC1P,OAAO,EAAE,CAAC,yBAAW,EAAE,yBAAW,EAAE,2BAAY,EAAE,qCAAiB,EAAE,6BAAa,EAAE,yCAAmB,EAAE,6BAAc,EAAE,wCAAsB,EAAE,2CAAoB,EAAE,yCAAmB,EAAE,qCAAiB,CAAC;KAC/M,CAAC;GACW,aAAa,CA8CzB","sourcesContent":["import { TwoFactorService } from './Services/TwoFactorService/TwoFactorService';\r\n/**\r\n * Modulo che gestisce le operazioni di accesso degli utenti, incluse le rotte, il controller e il modello.\r\n *\r\n * @module AccessiModule\r\n * @author mttdev382\r\n */\r\nimport { Options } from 'node-firebird';\r\nimport { DynamicModule, Global, Module } from '@nestjs/common';\r\nimport { AuthService } from './Services/AuthService/AuthService';\r\nimport { EmailService } from './Services/EmailService/EmailService';\r\nimport { PermissionService } from './Services/PermissionService/PermissionService';\r\nimport { UserService } from './Services/UserService/UserService';\r\nimport { EmailController } from './Controllers/EmailController';\r\nimport { AuthController } from './Controllers/AuthController';\r\nimport { PermissionController } from './Controllers/PermissionController';\r\nimport { UserController } from './Controllers/UserController';\r\nimport { FiltriService } from './Services/FiltriService/FiltriService';\r\nimport { FiltriController } from './Controllers/FiltriController';\r\nimport { ConfiguratorController } from './Controllers/ConfiguratorController';\r\nimport { ConfiguratorService } from './Services/ConfiguratorService/ConfiguratorService';\r\nimport { JwtSimpleGuard } from './jwt/jwt.strategy';\r\nimport { AuthenticateGenService } from './middleware/authenticateGen';\r\nimport { AccessiDatabaseUpdater } from './database-updates/AccessiDatabaseUpdater';\r\nimport { FederatedAuthService } from './federated-auth/FederatedAuthService';\r\nimport { FederatedAuthController } from './federated-auth/FederatedAuthController';\r\nimport { AccessiConsoleController } from './Controllers/AccessiConsoleController';\r\nimport { ServiceTokenController } from './Controllers/ServiceTokenController';\r\nimport { ServiceTokenService } from './Services/ServiceTokenService/ServiceTokenService';\r\nimport { ServiceTokenGuard } from './security/serviceTokenGuard';\r\n\r\n/** JWT emesso da Accessi dopo un login locale o SSO. Non riutilizzare il segreto del provider SSO. */\r\nexport interface JwtOptions {\r\n  /** Segreto simmetrico per firmare e verificare i JWT Accessi; deve essere unico per ambiente. */\r\n  secret: string;\r\n  /** Durata compatibile con `jsonwebtoken`, per esempio `24h` o `3600s`. */\r\n  expiresIn: string;\r\n}\r\n\r\n/** Parametri SMTP usati esclusivamente per impostazione e reset della password. */\r\nexport interface EmailOptions {\r\n  host: string;\r\n  port: number;\r\n  secure: boolean;\r\n  requireTLS : boolean;\r\n  tls: {\r\n    rejectUnauthorized: boolean,\r\n  }\r\n  from: string;\r\n  auth: {\r\n    user: string;\r\n    pass: string;\r\n  };\r\n}\r\n\r\n/** Configura campi applicativi aggiuntivi restituiti insieme al profilo Accessi. */\r\nexport interface ExtensionFieldsOptions {\r\n  /** Connessione al database contenente la tabella estesa. */\r\n  databaseOptions: Options;\r\n  /** Chiave con cui i dati saranno esposti nella risposta. */\r\n  objectKey: string;\r\n  /** Tabella applicativa contenente i dati estesi. */\r\n  tableName: string;\r\n  /** Colonne consentite; non valorizzarle mai con input HTTP. */\r\n  tableFields: string[];\r\n  /** Colonna correlata a `UTENTI.CODUTE`. */\r\n  tableJoinFieldName: string;\r\n}\r\n\r\n/** Limite per una singola categoria di endpoint pubblici. */\r\nexport interface PublicAuthRateLimitRuleOptions {\r\n  windowMs: number;\r\n  maxAttempts: number;\r\n}\r\n\r\n/** Protezione in-memory degli endpoint pubblici. In cluster aggiungere un limite anche al gateway. */\r\nexport interface PublicAuthRateLimitOptions {\r\n  enabled?: boolean;\r\n  login?: PublicAuthRateLimitRuleOptions;\r\n  register?: PublicAuthRateLimitRuleOptions;\r\n  passwordResetEmail?: PublicAuthRateLimitRuleOptions;\r\n  passwordResetConfirm?: PublicAuthRateLimitRuleOptions;\r\n  getUserByToken?: PublicAuthRateLimitRuleOptions;\r\n  twoFactorVerify?: PublicAuthRateLimitRuleOptions;\r\n  twoFactorResend?: PublicAuthRateLimitRuleOptions;\r\n}\r\n\r\n/** Controls the legacy public username/password registration endpoint. Disabled by default. */\r\nexport interface PublicRegistrationOptions {\r\n  /** Enables POST /accessi/user/register. Applications that used it before must opt in explicitly. */\r\n  enabled?: boolean;\r\n}\r\n\r\n/** Configurazione dei token di servizio (macchina-a-macchina, senza utente). */\r\nexport interface ServiceTokenOptions {\r\n  /** Abilita gli endpoint amministrativi dei service token. Default `true`. */\r\n  enabled?: boolean;\r\n  /** Durata predefinita in giorni quando non e indicata una scadenza esplicita. Default: nessuna scadenza. */\r\n  defaultTtlDays?: number;\r\n}\r\n\r\n/**\r\n * Enables Accessi's provider-agnostic federated identity capability.\r\n *\r\n * Accessi never validates Azure, Google, Apple, SAML, or other provider tokens.\r\n * The hosting backend must validate its own SSO flow and pass only a verified\r\n * `{ provider, subject }` identity to FederatedAuthService.\r\n */\r\nexport interface FederatedAuthenticationOptions {\r\n  /** Attiva le API SSO generiche; con `false` il comportamento password storico rimane invariato. */\r\n  enabled?: boolean;\r\n  /** @deprecated Schema management is centralized in autoUpdateDatabase. This legacy flag no longer starts separate SSO migrations. */\r\n  autoUpdateSchema?: boolean;\r\n  /** Allows a backend to create a user from a verified external identity without a master user. Default false. */\r\n  allowSelfRegistration?: boolean;\r\n}\r\n\r\n/**\r\n * Configurazione completa del modulo Accessi, fornita esclusivamente dal backend ospitante.\r\n * Segreti JWT, SMTP, database e le configurazioni tecniche dei provider SSO non devono mai raggiungere il browser.\r\n */\r\nexport interface AccessiOptions {\r\n  /** Connessione Firebird alla base dati Accessi. */\r\n  databaseOptions: Options;\r\n  /**\r\n   * Basepath del sito es: 'http://www.il-mio-sito.it/nome-progetto(se c'è)'\r\n   */\r\n  confirmationEmailUrl: string;\r\n  /**\r\n   * Percorso della pagina di reset personalizzata es. http://localhost:4200/#/admin/reset-password\r\n   * N.B si sostituisce al confirmationMailURl\r\n   */\r\n  customResetPage?: string;\r\n  /** URL di ritorno della pagina standard di reset dopo il completamento. */\r\n  confirmationEmailReturnUrl: string;\r\n  /** Prefisso applicativo facoltativo trasmesso alla pagina standard di reset. */\r\n  confirmationEmailPrefix?: string;\r\n  /** Chiave riservata alla compatibilita e alla migrazione delle password legacy cifrate. */\r\n  encryptionKey: string;\r\n  /** Abilita gli utenti fittizi `admin` e `demo` solo fuori produzione. */\r\n  mockDemoUser: boolean;\r\n  /** Attiva il controllo della scadenza password durante il login locale. */\r\n  passwordExpiration?: boolean;\r\n  /** Giorni di validita della password; quando assente Accessi usa 90 giorni. */\r\n  passwordExpirationDays?: number;\r\n  /** Esegue al bootstrap la conversione non distruttiva delle password legacy. Default `true`. */\r\n  legacyPasswordMigrationOnStartup?: boolean;\r\n  /** Riconcilia lo schema al bootstrap (default `true`). Con `false` verifica comunque la compatibilita in sola lettura e blocca avvii incompatibili. */\r\n  autoUpdateDatabase?: boolean;\r\n  /** Parametri JWT dei token emessi da Accessi. */\r\n  jwtOptions: JwtOptions;\r\n  /** Parametri SMTP per reset e attivazione password. */\r\n  emailOptions: EmailOptions;\r\n  publicAuthRateLimit?: PublicAuthRateLimitOptions;\r\n  /** Public local registration is deliberately opt-in. Existing applications must set enabled: true to retain it. */\r\n  publicRegistration?: PublicRegistrationOptions;\r\n  /** Optional provider-agnostic SSO support. Provider-specific configuration remains in the hosting backend. */\r\n  federatedAuthentication?: FederatedAuthenticationOptions;\r\n  extensionFieldsOptions?: ExtensionFieldsOptions[];\r\n  /** Token di servizio per chiamate tecniche macchina-a-macchina. Abilitati di default. */\r\n  serviceTokens?: ServiceTokenOptions;\r\n}\r\n\r\n@Global()\r\n@Module({\r\n  controllers: [\r\n    EmailController,\r\n    AuthController,\r\n    PermissionController,\r\n    UserController,\r\n    FiltriController,\r\n    ConfiguratorController,\r\n    FederatedAuthController,\r\n    AccessiConsoleController,\r\n    ServiceTokenController,\r\n  ],\r\n  providers: [AuthService, TwoFactorService, UserService, EmailService, PermissionService, FiltriService, ConfiguratorService, JwtSimpleGuard, AuthenticateGenService, AccessiDatabaseUpdater, FederatedAuthService, ServiceTokenService, ServiceTokenGuard],\r\n  exports: [AuthService, UserService, EmailService, PermissionService, FiltriService, ConfiguratorService, JwtSimpleGuard, AuthenticateGenService, FederatedAuthService, ServiceTokenService, ServiceTokenGuard],\r\n})\r\nexport class AccessiModule {\r\n  /**\r\n   * Registra Accessi nel contenitore Nest del backend ospitante.\r\n   *\r\n   * Usare questo metodo una sola volta nella composizione dell'applicazione. Per un backend\r\n   * Express esistente usare invece `initializeAccessiModule`, che crea e monta l'host Nest interno.\r\n   * La configurazione viene registrata con il token DI `ACCESSI_OPTIONS` ed e condivisa dai servizi.\r\n   */\r\n  static forRoot(options: AccessiOptions): DynamicModule {\r\n    return {\r\n      module: AccessiModule,\r\n      providers: [\r\n        {\r\n          provide: 'ACCESSI_OPTIONS',\r\n          useValue: options,\r\n        },\r\n        AuthService,\r\n        TwoFactorService,\r\n        UserService,\r\n        EmailService,\r\n        PermissionService,\r\n        FiltriService,\r\n        ConfiguratorService,\r\n        JwtSimpleGuard,\r\n        AuthenticateGenService,\r\n        AccessiDatabaseUpdater,\r\n        FederatedAuthService,\r\n        ServiceTokenService,\r\n        ServiceTokenGuard\r\n      ],\r\n      exports: [\r\n        'ACCESSI_OPTIONS',\r\n        AuthService,\r\n        UserService,\r\n        EmailService,\r\n        PermissionService,\r\n        FiltriService,\r\n        ConfiguratorService,\r\n        JwtSimpleGuard,\r\n        AuthenticateGenService,\r\n        FederatedAuthService,\r\n        ServiceTokenService,\r\n        ServiceTokenGuard\r\n      ],\r\n    };\r\n  }\r\n}\r\n"]}

package/dist/accessi-module/Console/accessiFetch.d.ts

@@ -0,0 +1,7 @@
+/** Imposta il JWT usato da tutte le funzioni generate da Orval. */
+export declare function setAccessiConsoleToken(token: string | null): void;
+/**
+ * Trasporto comune del client Orval: aggiunge il Bearer token e converte le
+ * risposte di errore Accessi in Error JavaScript leggibili dalla console.
+ */
+export declare function accessiFetch<T>(url: string, options: RequestInit): Promise<T>;

package/dist/accessi-module/Console/accessiFetch.js

@@ -0,0 +1,59 @@
+"use strict";
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.setAccessiConsoleToken = setAccessiConsoleToken;
+exports.accessiFetch = accessiFetch;
+let accessToken = null;
+const loadingEventName = 'accessi-console-network';
+/** Notifies the browser shell without coupling generated Orval calls to the UI implementation. */
+function notifyNetworkActivity(active) {
+    if (typeof window !== 'undefined') {
+        window.dispatchEvent(new CustomEvent(loadingEventName, { detail: { active } }));
+    }
+}
+/** Imposta il JWT usato da tutte le funzioni generate da Orval. */
+function setAccessiConsoleToken(token) {
+    accessToken = token;
+}
+/**
+ * Trasporto comune del client Orval: aggiunge il Bearer token e converte le
+ * risposte di errore Accessi in Error JavaScript leggibili dalla console.
+ */
+function accessiFetch(url, options) {
+    return __awaiter(this, void 0, void 0, function* () {
+        var _a, _b;
+        const headers = new Headers(options.headers);
+        headers.set('Accept', 'application/json');
+        if (options.body !== undefined && !headers.has('Content-Type')) {
+            headers.set('Content-Type', 'application/json');
+        }
+        if (accessToken)
+            headers.set('Authorization', `Bearer ${accessToken}`);
+        notifyNetworkActivity(true);
+        try {
+            const response = yield fetch(url, Object.assign(Object.assign({}, options), { headers }));
+            const payload = yield response.json().catch(() => undefined);
+            if (!response.ok) {
+                const message = (_b = (_a = payload === null || payload === void 0 ? void 0 : payload.message) !== null && _a !== void 0 ? _a : payload === null || payload === void 0 ? void 0 : payload.error) !== null && _b !== void 0 ? _b : `Errore HTTP ${response.status}`;
+                throw new Error(message);
+            }
+            return {
+                data: payload,
+                status: response.status,
+                headers: response.headers,
+            };
+        }
+        finally {
+            notifyNetworkActivity(false);
+        }
+    });
+}
+//# sourceMappingURL=accessiFetch.js.map

package/dist/accessi-module/Console/accessiFetch.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"accessiFetch.js","sourceRoot":"","sources":["../../../src/accessi-module/Console/accessiFetch.ts"],"names":[],"mappings":";;;;;;;;;;;AAYA,wDAEC;AAMD,oCAwBC;AA5CD,IAAI,WAAW,GAAkB,IAAI,CAAC;AAEtC,MAAM,gBAAgB,GAAG,yBAAyB,CAAC;AAEnD,kGAAkG;AAClG,SAAS,qBAAqB,CAAC,MAAe;IAC5C,IAAI,OAAO,MAAM,KAAK,WAAW,EAAE,CAAC;QAClC,MAAM,CAAC,aAAa,CAAC,IAAI,WAAW,CAAC,gBAAgB,EAAE,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC;IAClF,CAAC;AACH,CAAC;AAED,mEAAmE;AACnE,SAAgB,sBAAsB,CAAC,KAAoB;IACzD,WAAW,GAAG,KAAK,CAAC;AACtB,CAAC;AAED;;;GAGG;AACH,SAAsB,YAAY,CAAI,GAAW,EAAE,OAAoB;;;QACrE,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAC7C,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,kBAAkB,CAAC,CAAC;QAC1C,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,EAAE,CAAC;YAC/D,OAAO,CAAC,GAAG,CAAC,cAAc,EAAE,kBAAkB,CAAC,CAAC;QAClD,CAAC;QACD,IAAI,WAAW;YAAE,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,UAAU,WAAW,EAAE,CAAC,CAAC;QAEvE,qBAAqB,CAAC,IAAI,CAAC,CAAC;QAC5B,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,kCAAO,OAAO,KAAE,OAAO,IAAG,CAAC;YAC3D,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YAC7D,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACjB,MAAM,OAAO,GAAG,MAAA,MAAA,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,OAAO,mCAAI,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,KAAK,mCAAI,eAAe,QAAQ,CAAC,MAAM,EAAE,CAAC;gBACvF,MAAM,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC;YAC3B,CAAC;YACD,OAAO;gBACL,IAAI,EAAE,OAAO;gBACb,MAAM,EAAE,QAAQ,CAAC,MAAM;gBACvB,OAAO,EAAE,QAAQ,CAAC,OAAO;aACrB,CAAC;QACT,CAAC;gBAAS,CAAC;YACT,qBAAqB,CAAC,KAAK,CAAC,CAAC;QAC/B,CAAC;IACH,CAAC;CAAA","sourcesContent":["let accessToken: string | null = null;\n\nconst loadingEventName = 'accessi-console-network';\n\n/** Notifies the browser shell without coupling generated Orval calls to the UI implementation. */\nfunction notifyNetworkActivity(active: boolean): void {\n  if (typeof window !== 'undefined') {\n    window.dispatchEvent(new CustomEvent(loadingEventName, { detail: { active } }));\n  }\n}\n\n/** Imposta il JWT usato da tutte le funzioni generate da Orval. */\nexport function setAccessiConsoleToken(token: string | null): void {\n  accessToken = token;\n}\n\n/**\n * Trasporto comune del client Orval: aggiunge il Bearer token e converte le\n * risposte di errore Accessi in Error JavaScript leggibili dalla console.\n */\nexport async function accessiFetch<T>(url: string, options: RequestInit): Promise<T> {\n  const headers = new Headers(options.headers);\n  headers.set('Accept', 'application/json');\n  if (options.body !== undefined && !headers.has('Content-Type')) {\n    headers.set('Content-Type', 'application/json');\n  }\n  if (accessToken) headers.set('Authorization', `Bearer ${accessToken}`);\n\n  notifyNetworkActivity(true);\n  try {\n    const response = await fetch(url, { ...options, headers });\n    const payload = await response.json().catch(() => undefined);\n    if (!response.ok) {\n      const message = payload?.message ?? payload?.error ?? `Errore HTTP ${response.status}`;\n      throw new Error(message);\n    }\n    return {\n      data: payload,\n      status: response.status,\n      headers: response.headers,\n    } as T;\n  } finally {\n    notifyNetworkActivity(false);\n  }\n}\n"]}