valtech-components 2.0.463 → 2.0.465

package/fesm2022/valtech-components.mjs

@@ -13,7 +13,7 @@ import * as i1$2 from '@angular/platform-browser';
 import QRCodeStyling from 'qr-code-styling';
 import * as i1$3 from '@angular/forms';
 import { ReactiveFormsModule, FormsModule, FormControl, Validators } from '@angular/forms';
-import { BehaviorSubject, filter, map, distinctUntilChanged, Subject, firstValueFrom, throwError, of } from 'rxjs';
+import { BehaviorSubject, filter, map, distinctUntilChanged, Subject, firstValueFrom, throwError, of, from } from 'rxjs';
 import * as i1$4 from 'ng-otp-input';
 import { NgOtpInputComponent, NgOtpInputModule } from 'ng-otp-input';
 import * as i2 from '@ionic/angular';
@@ -38,7 +38,7 @@ import * as i1$7 from '@angular/fire/storage';
 import { provideStorage, getStorage, connectStorageEmulator, ref, uploadBytesResumable, getDownloadURL, getMetadata, deleteObject, listAll } from '@angular/fire/storage';
 import * as i1$9 from '@angular/common/http';
 import { provideHttpClient, withInterceptors } from '@angular/common/http';
-import { tap, catchError, switchMap, finalize, filter as filter$1, take } from 'rxjs/operators';
+import { tap, catchError, switchMap, map as map$1, finalize, filter as filter$1, take } from 'rxjs/operators';
 
 /**
  * val-avatar
@@ -21480,6 +21480,11 @@ class FirebaseService {
     async signInWithCustomToken(token) {
         try {
             const credential = await signInWithCustomToken(this.auth, token);
+            // Forzar refresh del token para asegurar que los claims estén actualizados
+            // Esto es necesario porque getIdTokenResult() cachea el resultado
+            if (credential.user) {
+                await credential.user.getIdToken(true);
+            }
             return credential;
         }
         catch (error) {
@@ -21557,14 +21562,15 @@ class FirebaseService {
      * Obtiene los claims personalizados del token del usuario.
      * Los claims son establecidos por tu backend al crear el Custom Token.
      *
+     * @param forceRefresh - Si true, fuerza la renovación del token para obtener claims actualizados
      * @returns Objeto con los claims o vacío si no hay usuario
      */
-    async getClaims() {
+    async getClaims(forceRefresh = false) {
         const user = this.auth.currentUser;
         if (!user)
             return {};
         try {
-            const result = await user.getIdTokenResult();
+            const result = await user.getIdTokenResult(forceRefresh);
             return result.claims;
         }
         catch {
@@ -21589,6 +21595,7 @@ class FirebaseService {
      * Obtiene las memberships (organizaciones) del usuario.
      * Cada membership contiene el rol y permisos en esa organización.
      *
+     * @param forceRefresh - Si true, fuerza la renovación del token
      * @returns Mapa de orgId → MembershipInfo
      *
      * @example
@@ -21597,27 +21604,29 @@ class FirebaseService {
      * // { 'org_abc': { roleId: 'admin', roleName: 'admin', permissions: ['users:*', ...] } }
      * ```
      */
-    async getMemberships() {
-        const claims = await this.getClaims();
+    async getMemberships(forceRefresh = false) {
+        const claims = await this.getClaims(forceRefresh);
         return claims['memberships'] || {};
     }
     /**
      * Obtiene la organización activa del usuario.
      * La organización activa se establece al hacer login o al cambiar de org.
      *
+     * @param forceRefresh - Si true, fuerza la renovación del token
      * @returns ID de la organización activa o null si no hay ninguna
      */
-    async getActiveOrg() {
-        const claims = await this.getClaims();
+    async getActiveOrg(forceRefresh = false) {
+        const claims = await this.getClaims(forceRefresh);
         return claims['activeOrg'] || null;
     }
     /**
      * Obtiene información de todas las organizaciones del usuario.
      *
+     * @param forceRefresh - Si true, fuerza la renovación del token
      * @returns Array con información de cada organización
      */
-    async getOrganizations() {
-        const memberships = await this.getMemberships();
+    async getOrganizations(forceRefresh = false) {
+        const memberships = await this.getMemberships(forceRefresh);
         return Object.entries(memberships).map(([id, info]) => ({
             id,
             roleId: info.roleId,
@@ -24938,16 +24947,21 @@ class AuthService {
     switchOrg(organizationId) {
         return this.http
             .post(`${this.baseUrl}/switch-org`, { organizationId })
-            .pipe(tap(async (response) => {
+            .pipe(switchMap(response => {
             // Re-autenticar en Firebase con el nuevo token
-            if (response.firebaseToken) {
-                await this.signInWithFirebase(response.firebaseToken);
-            }
-            // Notificar cambio a otras pestañas
-            this.syncService.broadcast({
-                type: 'ORG_SWITCH',
-                payload: { activeOrg: response.activeOrg },
-            });
+            // Usar switchMap + from para esperar a que Firebase complete
+            const firebaseAuth$ = response.firebaseToken
+                ? from(this.signInWithFirebase(response.firebaseToken))
+                : of(undefined);
+            return firebaseAuth$.pipe(tap(() => {
+                // Notificar cambio a otras pestañas
+                this.syncService.broadcast({
+                    type: 'ORG_SWITCH',
+                    payload: { activeOrg: response.activeOrg },
+                });
+            }), 
+            // Retornar response original después de que Firebase complete
+            map$1(() => response));
         }), catchError(error => this.handleAuthError(error)));
     }
     // =============================================
@@ -25216,8 +25230,8 @@ const authInterceptor = (request, next) => {
     if (!isApiRequest(request, config.apiUrl)) {
         return next(request);
     }
-    // Omitir endpoints de auth que no necesitan token
-    if (isAuthEndpoint(request, config.authPrefix)) {
+    // Omitir endpoints públicos que no necesitan token
+    if (isPublicEndpoint(request, config.authPrefix)) {
         return next(request);
     }
     const accessToken = authService.accessToken();
@@ -25226,7 +25240,7 @@ const authInterceptor = (request, next) => {
         request = addAuthHeader(request, accessToken);
     }
     return next(request).pipe(catchError((error) => {
-        if (error.status === 401 && !isAuthEndpoint(request, config.authPrefix)) {
+        if (error.status === 401 && !isNoRefreshEndpoint(request, config.authPrefix)) {
             return handle401Error(request, next, authService);
         }
         if (error.status === 403) {
@@ -25252,22 +25266,35 @@ function isApiRequest(request, apiUrl) {
     return request.url.startsWith(apiUrl) || request.url.includes('/v2/auth');
 }
 /**
- * Verifica si la request es a un endpoint de auth que no debe reintentar.
+ * Verifica si la request es a un endpoint público que NO requiere token.
  */
-function isAuthEndpoint(request, authPrefix) {
-    // Endpoints que no deben intentar refresh en 401
+function isPublicEndpoint(request, authPrefix) {
+    const publicEndpoints = [
+        '/signin',
+        '/signup',
+        '/refresh',
+        '/logout',
+        '/mfa/verify', // Solo durante login
+    ];
+    return publicEndpoints.some((endpoint) => request.url.includes(`${authPrefix}${endpoint}`));
+}
+/**
+ * Verifica si la request es a un endpoint que NO debe reintentar refresh en 401.
+ */
+function isNoRefreshEndpoint(request, authPrefix) {
+    // Endpoints que no deben intentar refresh en 401:
     // - Públicos: signin, signup, refresh, logout
-    // - MFA: verify (durante login), disable (401 = contraseña incorrecta), confirm (401 = código incorrecto)
-    const authEndpoints = [
+    // - MFA: verify (durante login), confirm (401 = código incorrecto), disable (401 = contraseña incorrecta)
+    const noRefreshEndpoints = [
         '/signin',
         '/signup',
         '/refresh',
         '/logout',
         '/mfa/verify',
-        '/mfa/disable',
         '/mfa/confirm',
+        '/mfa/disable',
     ];
-    return authEndpoints.some((endpoint) => request.url.includes(`${authPrefix}${endpoint}`));
+    return noRefreshEndpoints.some((endpoint) => request.url.includes(`${authPrefix}${endpoint}`));
 }
 /**
  * Maneja errores 401 refrescando el token.