zudoku 0.0.0-e09234c → 0.0.0-e097cbb

package/dist/lib/authentication/providers/auth0.js

@@ -8,41 +8,43 @@ class Auth0AuthenticationProvider extends OpenIDAuthenticationProvider {
             issuer: `https://${config.domain}`,
             clientId: config.clientId,
             audience: config.audience,
+            scopes: config.scopes,
         });
     }
     onAuthorizationUrl = async (url, { isSignUp }) => {
+        url.searchParams.set("prompt", "login");
         if (isSignUp) {
             url.searchParams.set("screen_hint", "signup");
         }
     };
     signOut = async () => {
+        const as = await this.getAuthServer();
+        const idToken = await this.getAccessToken();
         useAuthState.setState({
             isAuthenticated: false,
             isPending: false,
-            profile: undefined,
+            profile: null,
+            providerData: null,
         });
-        sessionStorage.clear();
-        const as = await this.getAuthServer();
-        const redirectUrl = new URL(window.location.origin + this.logoutRedirectUrlPath);
+        const redirectUrl = new URL(window.location.origin);
         redirectUrl.pathname = this.logoutRedirectUrlPath;
         // SEE: https://auth0.com/docs/authenticate/login/logout/log-users-out-of-auth0
         // For Auth0 tenants created on or after 14 November 2023, RP-Initiated
         // Logout End Session Endpoint Discovery is enabled by default.
         // Otherwise we fallback to the old non-compliant logout
-        let logoutUrl;
         // The endSessionEndpoint is set, the IdP supports some form of logout,
         // so we use the IdP logout. Otherwise, just redirect the user to home
         if (as.end_session_endpoint) {
-            logoutUrl = new URL(as.end_session_endpoint);
-            // TODO: get id_token and set hint
-            // const { id_token } = session;
-            // if (id_token) {
-            //   logoutUrl.searchParams.set("id_token_hint", id_token);
-            // }
+            const logoutUrl = new URL(as.end_session_endpoint);
+            if (idToken) {
+                logoutUrl.searchParams.set("id_token_hint", idToken);
+            }
             logoutUrl.searchParams.set("post_logout_redirect_uri", redirectUrl.toString());
+            // window.location.href = logoutUrl.toString();
         }
         else {
-            logoutUrl = new URL(`${this.issuer}oidc/logout`);
+            const logoutUrl = new URL(`${this.issuer.replace(/\/$/, "")}/oidc/logout`);
+            // window.location.href = logoutUrl.toString();
         }
     };
 }

package/dist/lib/authentication/providers/auth0.js.map

@@ -1 +1 @@
-{"version":3,"file":"auth0.js","sourceRoot":"","sources":["../../../../src/lib/authentication/providers/auth0.tsx"],"names":[],"mappings":"AAEA,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EAAE,4BAA4B,EAAE,MAAM,aAAa,CAAC;AAE3D,MAAM,2BAA4B,SAAQ,4BAA4B;IACpE,YAAY,MAAiC;QAC3C,KAAK,CAAC;YACJ,GAAG,MAAM;YACT,IAAI,EAAE,QAAQ;YACd,MAAM,EAAE,WAAW,MAAM,CAAC,MAAM,EAAE;YAClC,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,QAAQ,EAAE,MAAM,CAAC,QAAQ;SAC1B,CAAC,CAAC;IACL,CAAC;IAED,kBAAkB,GAAG,KAAK,EACxB,GAAQ,EACR,EAAE,QAAQ,EAAyB,EACnC,EAAE;QACF,IAAI,QAAQ,EAAE,CAAC;YACb,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,aAAa,EAAE,QAAQ,CAAC,CAAC;QAChD,CAAC;IACH,CAAC,CAAC;IAEF,OAAO,GAAG,KAAK,IAAmB,EAAE;QAClC,YAAY,CAAC,QAAQ,CAAC;YACpB,eAAe,EAAE,KAAK;YACtB,SAAS,EAAE,KAAK;YAChB,OAAO,EAAE,SAAS;SACnB,CAAC,CAAC;QACH,cAAc,CAAC,KAAK,EAAE,CAAC;QACvB,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,aAAa,EAAE,CAAC;QAEtC,MAAM,WAAW,GAAG,IAAI,GAAG,CACzB,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG,IAAI,CAAC,qBAAqB,CACpD,CAAC;QACF,WAAW,CAAC,QAAQ,GAAG,IAAI,CAAC,qBAAqB,CAAC;QAElD,+EAA+E;QAC/E,uEAAuE;QACvE,+DAA+D;QAC/D,wDAAwD;QAExD,IAAI,SAAc,CAAC;QACnB,uEAAuE;QACvE,sEAAsE;QACtE,IAAI,EAAE,CAAC,oBAAoB,EAAE,CAAC;YAC5B,SAAS,GAAG,IAAI,GAAG,CAAC,EAAE,CAAC,oBAAoB,CAAC,CAAC;YAC7C,kCAAkC;YAClC,gCAAgC;YAChC,kBAAkB;YAClB,2DAA2D;YAC3D,IAAI;YACJ,SAAS,CAAC,YAAY,CAAC,GAAG,CACxB,0BAA0B,EAC1B,WAAW,CAAC,QAAQ,EAAE,CACvB,CAAC;QACJ,CAAC;aAAM,CAAC;YACN,SAAS,GAAG,IAAI,GAAG,CAAC,GAAG,IAAI,CAAC,MAAM,aAAa,CAAC,CAAC;QACnD,CAAC;IACH,CAAC,CAAC;CACH;AAED,MAAM,SAAS,GAEX,CAAC,OAAO,EAAE,EAAE,CAAC,IAAI,2BAA2B,CAAC,OAAO,CAAC,CAAC;AAE1D,eAAe,SAAS,CAAC"}
+{"version":3,"file":"auth0.js","sourceRoot":"","sources":["../../../../src/lib/authentication/providers/auth0.tsx"],"names":[],"mappings":"AAEA,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EAAE,4BAA4B,EAAE,MAAM,aAAa,CAAC;AAE3D,MAAM,2BAA4B,SAAQ,4BAA4B;IACpE,YAAY,MAAiC;QAC3C,KAAK,CAAC;YACJ,GAAG,MAAM;YACT,IAAI,EAAE,QAAQ;YACd,MAAM,EAAE,WAAW,MAAM,CAAC,MAAM,EAAE;YAClC,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,MAAM,EAAE,MAAM,CAAC,MAAM;SACtB,CAAC,CAAC;IACL,CAAC;IAED,kBAAkB,GAAG,KAAK,EACxB,GAAQ,EACR,EAAE,QAAQ,EAAyB,EACnC,EAAE;QACF,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QACxC,IAAI,QAAQ,EAAE,CAAC;YACb,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,aAAa,EAAE,QAAQ,CAAC,CAAC;QAChD,CAAC;IACH,CAAC,CAAC;IAEF,OAAO,GAAG,KAAK,IAAmB,EAAE;QAClC,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,aAAa,EAAE,CAAC;QACtC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,cAAc,EAAE,CAAC;QAE5C,YAAY,CAAC,QAAQ,CAAC;YACpB,eAAe,EAAE,KAAK;YACtB,SAAS,EAAE,KAAK;YAChB,OAAO,EAAE,IAAI;YACb,YAAY,EAAE,IAAI;SACnB,CAAC,CAAC;QAEH,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACpD,WAAW,CAAC,QAAQ,GAAG,IAAI,CAAC,qBAAqB,CAAC;QAElD,+EAA+E;QAC/E,uEAAuE;QACvE,+DAA+D;QAC/D,wDAAwD;QAExD,uEAAuE;QACvE,sEAAsE;QACtE,IAAI,EAAE,CAAC,oBAAoB,EAAE,CAAC;YAC5B,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,EAAE,CAAC,oBAAoB,CAAC,CAAC;YACnD,IAAI,OAAO,EAAE,CAAC;gBACZ,SAAS,CAAC,YAAY,CAAC,GAAG,CAAC,eAAe,EAAE,OAAO,CAAC,CAAC;YACvD,CAAC;YACD,SAAS,CAAC,YAAY,CAAC,GAAG,CACxB,0BAA0B,EAC1B,WAAW,CAAC,QAAQ,EAAE,CACvB,CAAC;YAEF,+CAA+C;QACjD,CAAC;aAAM,CAAC;YACN,MAAM,SAAS,GAAG,IAAI,GAAG,CACvB,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,cAAc,CAChD,CAAC;YACF,+CAA+C;QACjD,CAAC;IACH,CAAC,CAAC;CACH;AAED,MAAM,SAAS,GAEX,CAAC,OAAO,EAAE,EAAE,CAAC,IAAI,2BAA2B,CAAC,OAAO,CAAC,CAAC;AAE1D,eAAe,SAAS,CAAC"}

package/dist/lib/authentication/providers/clerk.d.ts

@@ -1,4 +1,4 @@
-import { ClerkAuthenticationConfig } from "../../../config/config.js";
-import { AuthenticationProviderInitializer } from "../authentication.js";
+import { type ClerkAuthenticationConfig } from "../../../config/config.js";
+import { type AuthenticationProviderInitializer } from "../authentication.js";
 declare const clerkAuth: AuthenticationProviderInitializer<ClerkAuthenticationConfig>;
 export default clerkAuth;

package/dist/lib/authentication/providers/clerk.js

@@ -12,16 +12,21 @@ class ClerkAuthPlugin extends AuthenticationPlugin {
             return;
         }
         if (clerk.session) {
+            const verifiedEmail = clerk.session.user.emailAddresses.find((email) => email.verification.status === "verified");
             useAuthState.setState({
                 isAuthenticated: true,
                 isPending: false,
                 profile: {
                     sub: clerk.session.user.id,
                     name: clerk.session.user.fullName ?? undefined,
-                    email: clerk.session.user.emailAddresses[0]?.emailAddress,
-                    emailVerified: false, // TODO: Check this
+                    email: verifiedEmail?.emailAddress ??
+                        clerk.session.user.emailAddresses[0]?.emailAddress,
+                    emailVerified: verifiedEmail !== undefined,
                     pictureUrl: clerk.session.user.imageUrl,
                 },
+                providerData: {
+                    user: clerk.session.user,
+                },
             });
         }
         else {
@@ -41,11 +46,35 @@ const clerkAuth = ({ clerkPubKey, redirectToAfterSignOut = "/", redirectToAfterS
         const { Clerk } = await import("@clerk/clerk-js");
         clerkApi = new Clerk(clerkPubKey);
         await clerkApi.load();
+        if (clerkApi.user) {
+            const verifiedEmail = clerkApi.user.emailAddresses.find((email) => email.verification.status === "verified");
+            useAuthState.setState({
+                isAuthenticated: true,
+                isPending: false,
+                profile: {
+                    sub: clerkApi.user.id,
+                    name: clerkApi.user.fullName ?? undefined,
+                    email: verifiedEmail?.emailAddress ??
+                        clerkApi.user.emailAddresses[0]?.emailAddress,
+                    emailVerified: verifiedEmail !== undefined,
+                    pictureUrl: clerkApi.user.imageUrl,
+                },
+                providerData: {
+                    user: {
+                        publicMetadata: clerkApi.user.publicMetadata,
+                        id: clerkApi.user.id,
+                        emailAddresses: clerkApi.user.emailAddresses,
+                        imageUrl: clerkApi.user.imageUrl,
+                        fullName: clerkApi.user.fullName,
+                    },
+                },
+            });
+        }
         return clerkApi;
     })();
     async function getAccessToken() {
         await ensureLoaded;
-        if (!clerkApi.session) {
+        if (!clerkApi?.session) {
             throw new Error("No session available");
         }
         const response = await clerkApi.session.getToken();
@@ -54,26 +83,39 @@ const clerkAuth = ({ clerkPubKey, redirectToAfterSignOut = "/", redirectToAfterS
         }
         return response;
     }
+    async function signRequest(request) {
+        const response = await getAccessToken();
+        request.headers.set("Authorization", `Bearer ${response}`);
+        return request;
+    }
     return {
+        clerk: clerkApi,
         getAccessToken,
+        signRequest,
         signOut: async () => {
             await ensureLoaded;
-            await clerkApi.signOut({
+            await clerkApi?.signOut({
                 redirectUrl: window.location.origin + redirectToAfterSignOut,
             });
+            useAuthState.setState({
+                isAuthenticated: false,
+                isPending: false,
+                profile: null,
+                providerData: null,
+            });
         },
-        signIn: async () => {
+        signIn: async ({ redirectTo } = {}) => {
             await ensureLoaded;
-            await clerkApi.redirectToSignIn({
-                signInForceRedirectUrl: window.location.origin + redirectToAfterSignIn,
-                signUpForceRedirectUrl: window.location.origin + redirectToAfterSignUp,
+            await clerkApi?.redirectToSignIn({
+                signInForceRedirectUrl: redirectTo ?? window.location.origin + redirectToAfterSignIn,
+                signUpForceRedirectUrl: redirectTo ?? window.location.origin + redirectToAfterSignUp,
             });
         },
-        signUp: async () => {
+        signUp: async ({ redirectTo } = {}) => {
             await ensureLoaded;
-            await clerkApi.redirectToSignUp({
-                signInForceRedirectUrl: window.location.origin + redirectToAfterSignIn,
-                signUpForceRedirectUrl: window.location.origin + redirectToAfterSignUp,
+            await clerkApi?.redirectToSignUp({
+                signInForceRedirectUrl: redirectTo ?? window.location.origin + redirectToAfterSignIn,
+                signUpForceRedirectUrl: redirectTo ?? window.location.origin + redirectToAfterSignUp,
             });
         },
         getAuthenticationPlugin() {

package/dist/lib/authentication/providers/clerk.js.map

@@ -1 +1 @@
-{"version":3,"file":"clerk.js","sourceRoot":"","sources":["../../../../src/lib/authentication/providers/clerk.tsx"],"names":[],"mappings":"AAGA,OAAO,EAAE,oBAAoB,EAAE,MAAM,4BAA4B,CAAC;AAClE,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAE3C,MAAM,eAAgB,SAAQ,oBAAoB;IAC5B;IAApB,YAAoB,KAAiC;QACnD,KAAK,EAAE,CAAC;QADU,UAAK,GAAL,KAAK,CAA4B;IAErD,CAAC;IACD,UAAU,GAAG,KAAK,IAAI,EAAE;QACtB,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC;QAE/B,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO;QACT,CAAC;QAED,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;YAClB,YAAY,CAAC,QAAQ,CAAC;gBACpB,eAAe,EAAE,IAAI;gBACrB,SAAS,EAAE,KAAK;gBAChB,OAAO,EAAE;oBACP,GAAG,EAAE,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE;oBAC1B,IAAI,EAAE,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,IAAI,SAAS;oBAC9C,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,YAAY;oBACzD,aAAa,EAAE,KAAK,EAAE,mBAAmB;oBACzC,UAAU,EAAE,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ;iBACxC;aACF,CAAC,CAAC;QACL,CAAC;aAAM,CAAC;YACN,YAAY,CAAC,QAAQ,CAAC;gBACpB,eAAe,EAAE,KAAK;gBACtB,SAAS,EAAE,KAAK;gBAChB,OAAO,EAAE,SAAS;aACnB,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAC;CACH;AAED,MAAM,SAAS,GAEX,CAAC,EACH,WAAW,EACX,sBAAsB,GAAG,GAAG,EAC5B,qBAAqB,GAAG,GAAG,EAC3B,qBAAqB,GAAG,GAAG,GAC5B,EAAE,EAAE;IACH,IAAI,QAAe,CAAC;IACpB,MAAM,YAAY,GAAG,CAAC,KAAK,IAAI,EAAE;QAC/B,IAAI,OAAO,MAAM,KAAK,WAAW;YAAE,OAAO;QAC1C,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,MAAM,CAAC,iBAAiB,CAAC,CAAC;QAClD,QAAQ,GAAG,IAAI,KAAK,CAAC,WAAW,CAAC,CAAC;QAElC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QACtB,OAAO,QAAQ,CAAC;IAClB,CAAC,CAAC,EAAE,CAAC;IAEL,KAAK,UAAU,cAAc;QAC3B,MAAM,YAAY,CAAC;QACnB,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC;YACtB,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;QAC1C,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC;QACnD,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;QAC3D,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,OAAO;QACL,cAAc;QACd,OAAO,EAAE,KAAK,IAAI,EAAE;YAClB,MAAM,YAAY,CAAC;YACnB,MAAM,QAAQ,CAAC,OAAO,CAAC;gBACrB,WAAW,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG,sBAAsB;aAC7D,CAAC,CAAC;QACL,CAAC;QACD,MAAM,EAAE,KAAK,IAAI,EAAE;YACjB,MAAM,YAAY,CAAC;YACnB,MAAM,QAAQ,CAAC,gBAAgB,CAAC;gBAC9B,sBAAsB,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG,qBAAqB;gBACtE,sBAAsB,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG,qBAAqB;aACvE,CAAC,CAAC;QACL,CAAC;QACD,MAAM,EAAE,KAAK,IAAI,EAAE;YACjB,MAAM,YAAY,CAAC;YACnB,MAAM,QAAQ,CAAC,gBAAgB,CAAC;gBAC9B,sBAAsB,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG,qBAAqB;gBACtE,sBAAsB,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG,qBAAqB;aACvE,CAAC,CAAC;QACL,CAAC;QACD,uBAAuB;YACrB,OAAO,IAAI,eAAe,CAAC,YAAY,CAAC,CAAC;QAC3C,CAAC;KACF,CAAC;AACJ,CAAC,CAAC;AAEF,eAAe,SAAS,CAAC"}
+{"version":3,"file":"clerk.js","sourceRoot":"","sources":["../../../../src/lib/authentication/providers/clerk.tsx"],"names":[],"mappings":"AAGA,OAAO,EAAE,oBAAoB,EAAE,MAAM,4BAA4B,CAAC;AAClE,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAE3C,MAAM,eAAgB,SAAQ,oBAAoB;IAC5B;IAApB,YAAoB,KAAiC;QACnD,KAAK,EAAE,CAAC;QADU,UAAK,GAAL,KAAK,CAA4B;IAErD,CAAC;IACD,UAAU,GAAG,KAAK,IAAI,EAAE;QACtB,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC;QAE/B,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO;QACT,CAAC;QAED,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;YAClB,MAAM,aAAa,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,CAC1D,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,YAAY,CAAC,MAAM,KAAK,UAAU,CACpD,CAAC;YACF,YAAY,CAAC,QAAQ,CAAC;gBACpB,eAAe,EAAE,IAAI;gBACrB,SAAS,EAAE,KAAK;gBAChB,OAAO,EAAE;oBACP,GAAG,EAAE,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE;oBAC1B,IAAI,EAAE,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,IAAI,SAAS;oBAC9C,KAAK,EACH,aAAa,EAAE,YAAY;wBAC3B,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,YAAY;oBACpD,aAAa,EAAE,aAAa,KAAK,SAAS;oBAC1C,UAAU,EAAE,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ;iBACxC;gBACD,YAAY,EAAE;oBACZ,IAAI,EAAE,KAAK,CAAC,OAAO,CAAC,IAAI;iBACzB;aACF,CAAC,CAAC;QACL,CAAC;aAAM,CAAC;YACN,YAAY,CAAC,QAAQ,CAAC;gBACpB,eAAe,EAAE,KAAK;gBACtB,SAAS,EAAE,KAAK;gBAChB,OAAO,EAAE,SAAS;aACnB,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAC;CACH;AAED,MAAM,SAAS,GAEX,CAAC,EACH,WAAW,EACX,sBAAsB,GAAG,GAAG,EAC5B,qBAAqB,GAAG,GAAG,EAC3B,qBAAqB,GAAG,GAAG,GAC5B,EAAE,EAAE;IACH,IAAI,QAA2B,CAAC;IAChC,MAAM,YAAY,GAAG,CAAC,KAAK,IAAI,EAAE;QAC/B,IAAI,OAAO,MAAM,KAAK,WAAW;YAAE,OAAO;QAC1C,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,MAAM,CAAC,iBAAiB,CAAC,CAAC;QAClD,QAAQ,GAAG,IAAI,KAAK,CAAC,WAAW,CAAC,CAAC;QAElC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QAEtB,IAAI,QAAQ,CAAC,IAAI,EAAE,CAAC;YAClB,MAAM,aAAa,GAAG,QAAQ,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,CACrD,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,YAAY,CAAC,MAAM,KAAK,UAAU,CACpD,CAAC;YACF,YAAY,CAAC,QAAQ,CAAC;gBACpB,eAAe,EAAE,IAAI;gBACrB,SAAS,EAAE,KAAK;gBAChB,OAAO,EAAE;oBACP,GAAG,EAAE,QAAQ,CAAC,IAAI,CAAC,EAAE;oBACrB,IAAI,EAAE,QAAQ,CAAC,IAAI,CAAC,QAAQ,IAAI,SAAS;oBACzC,KAAK,EACH,aAAa,EAAE,YAAY;wBAC3B,QAAQ,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,YAAY;oBAC/C,aAAa,EAAE,aAAa,KAAK,SAAS;oBAC1C,UAAU,EAAE,QAAQ,CAAC,IAAI,CAAC,QAAQ;iBACnC;gBACD,YAAY,EAAE;oBACZ,IAAI,EAAE;wBACJ,cAAc,EAAE,QAAQ,CAAC,IAAI,CAAC,cAAc;wBAC5C,EAAE,EAAE,QAAQ,CAAC,IAAI,CAAC,EAAE;wBACpB,cAAc,EAAE,QAAQ,CAAC,IAAI,CAAC,cAAc;wBAC5C,QAAQ,EAAE,QAAQ,CAAC,IAAI,CAAC,QAAQ;wBAChC,QAAQ,EAAE,QAAQ,CAAC,IAAI,CAAC,QAAQ;qBACjC;iBACF;aACF,CAAC,CAAC;QACL,CAAC;QAED,OAAO,QAAQ,CAAC;IAClB,CAAC,CAAC,EAAE,CAAC;IAEL,KAAK,UAAU,cAAc;QAC3B,MAAM,YAAY,CAAC;QACnB,IAAI,CAAC,QAAQ,EAAE,OAAO,EAAE,CAAC;YACvB,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;QAC1C,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC;QACnD,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;QAC3D,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,KAAK,UAAU,WAAW,CAAC,OAAgB;QACzC,MAAM,QAAQ,GAAG,MAAM,cAAc,EAAE,CAAC;QACxC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,UAAU,QAAQ,EAAE,CAAC,CAAC;QAC3D,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,OAAO;QACL,KAAK,EAAE,QAAQ;QACf,cAAc;QACd,WAAW;QACX,OAAO,EAAE,KAAK,IAAI,EAAE;YAClB,MAAM,YAAY,CAAC;YACnB,MAAM,QAAQ,EAAE,OAAO,CAAC;gBACtB,WAAW,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG,sBAAsB;aAC7D,CAAC,CAAC;YACH,YAAY,CAAC,QAAQ,CAAC;gBACpB,eAAe,EAAE,KAAK;gBACtB,SAAS,EAAE,KAAK;gBAChB,OAAO,EAAE,IAAI;gBACb,YAAY,EAAE,IAAI;aACnB,CAAC,CAAC;QACL,CAAC;QACD,MAAM,EAAE,KAAK,EAAE,EAAE,UAAU,KAA8B,EAAE,EAAE,EAAE;YAC7D,MAAM,YAAY,CAAC;YACnB,MAAM,QAAQ,EAAE,gBAAgB,CAAC;gBAC/B,sBAAsB,EACpB,UAAU,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG,qBAAqB;gBAC9D,sBAAsB,EACpB,UAAU,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG,qBAAqB;aAC/D,CAAC,CAAC;QACL,CAAC;QACD,MAAM,EAAE,KAAK,EAAE,EAAE,UAAU,KAA8B,EAAE,EAAE,EAAE;YAC7D,MAAM,YAAY,CAAC;YACnB,MAAM,QAAQ,EAAE,gBAAgB,CAAC;gBAC/B,sBAAsB,EACpB,UAAU,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG,qBAAqB;gBAC9D,sBAAsB,EACpB,UAAU,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG,qBAAqB;aAC/D,CAAC,CAAC;QACL,CAAC;QACD,uBAAuB;YACrB,OAAO,IAAI,eAAe,CAAC,YAAY,CAAC,CAAC;QAC3C,CAAC;KACF,CAAC;AACJ,CAAC,CAAC;AAEF,eAAe,SAAS,CAAC"}

package/dist/lib/authentication/providers/openid.d.ts

@@ -1,7 +1,14 @@
 import * as oauth from "oauth4webapi";
-import { OpenIDAuthenticationConfig } from "../../../config/config.js";
-import { AuthenticationProvider, AuthenticationProviderInitializer } from "../authentication.js";
+import { type OpenIDAuthenticationConfig } from "../../../config/config.js";
+import { type AuthenticationProvider, type AuthenticationProviderInitializer } from "../authentication.js";
 import { AuthenticationPlugin } from "../AuthenticationPlugin.js";
+export interface OpenIdProviderData {
+    accessToken: string;
+    idToken?: string;
+    refreshToken?: string;
+    expiresOn: Date;
+    tokenType: string;
+}
 declare class OpenIdAuthPlugin extends AuthenticationPlugin {
     private callbackUrlPath;
     private handleCallback;
@@ -15,7 +22,8 @@ export declare class OpenIDAuthenticationProvider implements AuthenticationProvi
     protected client: oauth.Client;
     protected issuer: string;
     protected authorizationServer: oauth.AuthorizationServer | undefined;
-    protected callbackUrlPath: string;
+    protected absoluteCallbackUrlPath: string;
+    protected relativeCallbackUrlPath: string;
     protected logoutRedirectUrlPath: string;
     protected onAuthorizationUrl?: (authorizationUrl: URL, options: {
         isSignIn: boolean;
@@ -25,7 +33,9 @@ export declare class OpenIDAuthenticationProvider implements AuthenticationProvi
     private readonly redirectToAfterSignIn;
     private readonly redirectToAfterSignOut;
     private readonly audience?;
-    constructor({ issuer, audience, clientId, redirectToAfterSignUp, redirectToAfterSignIn, redirectToAfterSignOut, }: OpenIDAuthenticationConfig);
+    private readonly scopes;
+    private readonly root;
+    constructor({ issuer, audience, clientId, redirectToAfterSignUp, redirectToAfterSignIn, redirectToAfterSignOut, basePath, scopes, }: OpenIDAuthenticationConfig);
     protected getAuthServer(): Promise<oauth.AuthorizationServer>;
     /**
      * Sets the tokens from various OAuth responses
@@ -40,9 +50,9 @@ export declare class OpenIDAuthenticationProvider implements AuthenticationProvi
     }): Promise<void>;
     private authorize;
     getAccessToken(): Promise<string>;
+    signRequest: (request: Request) => Promise<Request>;
     signOut: () => Promise<void>;
     handleCallback: () => Promise<string>;
-    pageLoad(): void;
     getAuthenticationPlugin(): OpenIdAuthPlugin;
 }
 declare const openIDAuth: AuthenticationProviderInitializer<OpenIDAuthenticationConfig>;

package/dist/lib/authentication/providers/openid.js

@@ -1,11 +1,14 @@
 import { jsx as _jsx } from "react/jsx-runtime";
 import logger from "loglevel";
 import * as oauth from "oauth4webapi";
+import { ClientOnly } from "../../components/ClientOnly.js";
+import { joinUrl } from "../../util/joinUrl.js";
 import { AuthenticationPlugin } from "../AuthenticationPlugin.js";
 import { CallbackHandler } from "../components/CallbackHandler.js";
 import { AuthorizationError, OAuthAuthorizationError } from "../errors.js";
 import { useAuthState } from "../state.js";
 const CODE_VERIFIER_KEY = "code-verifier";
+const STATE_KEY = "oauth-state";
 class OpenIdAuthPlugin extends AuthenticationPlugin {
     callbackUrlPath;
     handleCallback;
@@ -19,7 +22,7 @@ class OpenIdAuthPlugin extends AuthenticationPlugin {
             ...super.getRoutes(),
             {
                 path: this.callbackUrlPath,
-                element: _jsx(CallbackHandler, { handleCallback: this.handleCallback }),
+                element: (_jsx(ClientOnly, { children: _jsx(CallbackHandler, { handleCallback: this.handleCallback }) })),
             },
         ];
     }
@@ -28,23 +31,31 @@ export class OpenIDAuthenticationProvider {
     client;
     issuer;
     authorizationServer;
-    callbackUrlPath = "/oauth/callback";
-    logoutRedirectUrlPath = "/";
+    absoluteCallbackUrlPath;
+    relativeCallbackUrlPath;
+    logoutRedirectUrlPath;
     onAuthorizationUrl;
     redirectToAfterSignUp;
     redirectToAfterSignIn;
     redirectToAfterSignOut;
     audience;
-    constructor({ issuer, audience, clientId, redirectToAfterSignUp, redirectToAfterSignIn, redirectToAfterSignOut, }) {
+    scopes;
+    root;
+    constructor({ issuer, audience, clientId, redirectToAfterSignUp, redirectToAfterSignIn, redirectToAfterSignOut, basePath, scopes, }) {
         this.client = {
             client_id: clientId,
             token_endpoint_auth_method: "none",
         };
         this.audience = audience;
         this.issuer = issuer;
-        this.redirectToAfterSignUp = redirectToAfterSignUp ?? "/";
-        this.redirectToAfterSignIn = redirectToAfterSignIn ?? "/";
-        this.redirectToAfterSignOut = redirectToAfterSignOut ?? "/";
+        this.relativeCallbackUrlPath = "/oauth/callback";
+        this.absoluteCallbackUrlPath = joinUrl(basePath, this.relativeCallbackUrlPath);
+        this.scopes = scopes ?? ["openid", "profile", "email"];
+        this.root = joinUrl(basePath, "/");
+        this.logoutRedirectUrlPath = this.root;
+        this.redirectToAfterSignUp = redirectToAfterSignUp ?? this.root;
+        this.redirectToAfterSignIn = redirectToAfterSignIn ?? this.root;
+        this.redirectToAfterSignOut = redirectToAfterSignOut ?? this.root;
     }
     async getAuthServer() {
         if (!this.authorizationServer) {
@@ -69,10 +80,13 @@ export class OpenIDAuthenticationProvider {
         const tokens = {
             accessToken: response.access_token,
             refreshToken: response.refresh_token,
+            idToken: response.id_token,
             expiresOn: new Date(Date.now() + response.expires_in * 1000),
             tokenType: response.token_type,
         };
-        sessionStorage.setItem("token-state", JSON.stringify(tokens));
+        useAuthState.setState({
+            providerData: tokens,
+        });
     }
     async signUp({ redirectTo } = {}) {
         return this.authorize({
@@ -101,14 +115,20 @@ export class OpenIDAuthenticationProvider {
         sessionStorage.setItem(CODE_VERIFIER_KEY, codeVerifier);
         // redirect user to as.authorization_endpoint
         const authorizationUrl = new URL(authorizationServer.authorization_endpoint);
-        sessionStorage.setItem("redirect-to", redirectTo);
+        const finalRedirect = redirectTo.startsWith(window.location.origin)
+            ? this.root !== "/" &&
+                redirectTo.startsWith(window.location.origin + this.root)
+                ? redirectTo.slice(window.location.origin.length + this.root.length)
+                : redirectTo.slice(window.location.origin.length)
+            : redirectTo;
+        sessionStorage.setItem("redirect-to", finalRedirect);
         const redirectUrl = new URL(window.location.origin);
-        redirectUrl.pathname = this.callbackUrlPath;
+        redirectUrl.pathname = this.absoluteCallbackUrlPath;
         redirectUrl.search = "";
         authorizationUrl.searchParams.set("client_id", this.client.client_id);
         authorizationUrl.searchParams.set("redirect_uri", redirectUrl.toString());
         authorizationUrl.searchParams.set("response_type", "code");
-        authorizationUrl.searchParams.set("scope", "openid profile email");
+        authorizationUrl.searchParams.set("scope", this.scopes.join(" "));
         authorizationUrl.searchParams.set("code_challenge", codeChallenge);
         authorizationUrl.searchParams.set("code_challenge_method", code_challenge_method);
         if (this.audience) {
@@ -119,30 +139,33 @@ export class OpenIDAuthenticationProvider {
             isSignUp,
         });
         /**
-         * We cannot be sure the AS supports PKCE so we're going to use state too. Use of PKCE is
-         * backwards compatible even if the AS doesn't support it which is why we're using it regardless.
+         * The state parameter is used to prevent CSRF attacks and should be used in all authorization requests.
+         * It is independent of PKCE and should be used regardless of PKCE support.
          */
-        if (authorizationServer.code_challenge_methods_supported?.includes("S256") !==
-            true) {
-            const state = oauth.generateRandomState();
-            authorizationUrl.searchParams.set("state", state);
-        }
+        const state = oauth.generateRandomState();
+        sessionStorage.setItem(STATE_KEY, state);
+        authorizationUrl.searchParams.set("state", state);
         // now redirect the user to authorizationUrl.href
         location.href = authorizationUrl.href;
     }
     async getAccessToken() {
         const as = await this.getAuthServer();
-        const tokenState = sessionStorage.getItem("token-state");
-        if (!tokenState) {
+        const { providerData } = useAuthState.getState();
+        if (!providerData) {
             throw new AuthorizationError("User is not authenticated");
         }
-        const state = JSON.parse(tokenState);
-        if (state.expiresOn < new Date()) {
-            if (!state.refreshToken) {
-                await this.signIn();
+        const tokenState = providerData;
+        if (new Date(tokenState.expiresOn) < new Date()) {
+            if (!tokenState.refreshToken) {
+                useAuthState.setState({
+                    isAuthenticated: false,
+                    isPending: false,
+                    profile: null,
+                    providerData: null,
+                });
                 return "";
             }
-            const request = await oauth.refreshTokenGrantRequest(as, this.client, state.refreshToken);
+            const request = await oauth.refreshTokenGrantRequest(as, this.client, tokenState.refreshToken);
             const response = await oauth.processRefreshTokenResponse(as, this.client, request);
             if (!response.access_token) {
                 throw new AuthorizationError("No access token in response");
@@ -151,16 +174,21 @@ export class OpenIDAuthenticationProvider {
             return response.access_token.toString();
         }
         else {
-            return state.accessToken;
+            return tokenState.accessToken;
         }
     }
+    signRequest = async (request) => {
+        const accessToken = await this.getAccessToken();
+        request.headers.set("Authorization", `Bearer ${accessToken}`);
+        return request;
+    };
     signOut = async () => {
         useAuthState.setState({
             isAuthenticated: false,
             isPending: false,
             profile: undefined,
+            providerData: undefined,
         });
-        sessionStorage.clear();
         const as = await this.getAuthServer();
         const redirectUrl = new URL(window.location.origin + this.redirectToAfterSignOut);
         redirectUrl.pathname = this.logoutRedirectUrlPath;
@@ -183,6 +211,11 @@ export class OpenIDAuthenticationProvider {
     handleCallback = async () => {
         const url = new URL(window.location.href);
         const state = url.searchParams.get("state");
+        const storedState = sessionStorage.getItem(STATE_KEY);
+        sessionStorage.removeItem(STATE_KEY);
+        if (state !== storedState) {
+            throw new AuthorizationError("Invalid state parameter");
+        }
         // one eternity later, the user lands back on the redirect_uri
         // Authorization Code Grant Request & Response
         const codeVerifier = sessionStorage.getItem(CODE_VERIFIER_KEY);
@@ -197,7 +230,7 @@ export class OpenIDAuthenticationProvider {
             throw new OAuthAuthorizationError("Error validating OAuth response", params);
         }
         const redirectUrl = new URL(url);
-        redirectUrl.pathname = this.redirectToAfterSignIn;
+        redirectUrl.pathname = this.absoluteCallbackUrlPath;
         redirectUrl.search = "";
         const response = await oauth.authorizationCodeGrantRequest(authServer, this.client, params, redirectUrl.toString(), codeVerifier);
         // TODO: do we need to do these
@@ -225,31 +258,14 @@ export class OpenIDAuthenticationProvider {
             isPending: false,
             profile,
         });
-        sessionStorage.setItem("profile-state", JSON.stringify(useAuthState.getState().profile));
         const redirectTo = sessionStorage.getItem("redirect-to") ?? "/";
         sessionStorage.removeItem("redirect-to");
         return redirectTo;
     };
-    pageLoad() {
-        const profileState = sessionStorage.getItem("profile-state");
-        if (profileState) {
-            try {
-                const profile = JSON.parse(profileState);
-                useAuthState.setState({
-                    isAuthenticated: true,
-                    isPending: false,
-                    profile,
-                });
-            }
-            catch (err) {
-                logger.error("Error parsing auth state", err);
-            }
-        }
-    }
     getAuthenticationPlugin() {
         // TODO: This API is a bit messy, we need to refactor auth plugins/providers
         // to remove the extra layers of abstraction.
-        return new OpenIdAuthPlugin(this.callbackUrlPath, this.handleCallback);
+        return new OpenIdAuthPlugin(this.relativeCallbackUrlPath, this.handleCallback);
     }
 }
 const openIDAuth = (options) => new OpenIDAuthenticationProvider(options);

package/dist/lib/authentication/providers/openid.js.map

@@ -1 +1 @@
-{"version":3,"file":"openid.js","sourceRoot":"","sources":["../../../../src/lib/authentication/providers/openid.tsx"],"names":[],"mappings":";AAAA,OAAO,MAAM,MAAM,UAAU,CAAC;AAC9B,OAAO,KAAK,KAAK,MAAM,cAAc,CAAC;AAMtC,OAAO,EAAE,oBAAoB,EAAE,MAAM,4BAA4B,CAAC;AAClE,OAAO,EAAE,eAAe,EAAE,MAAM,kCAAkC,CAAC;AACnE,OAAO,EAAE,kBAAkB,EAAE,uBAAuB,EAAE,MAAM,cAAc,CAAC;AAC3E,OAAO,EAAE,YAAY,EAAe,MAAM,aAAa,CAAC;AAExD,MAAM,iBAAiB,GAAG,eAAe,CAAC;AAS1C,MAAM,gBAAiB,SAAQ,oBAAoB;IAEvC;IACA;IAFV,YACU,eAAuB,EACvB,cAAqC;QAE7C,KAAK,EAAE,CAAC;QAHA,oBAAe,GAAf,eAAe,CAAQ;QACvB,mBAAc,GAAd,cAAc,CAAuB;IAG/C,CAAC;IACD,SAAS;QACP,OAAO;YACL,GAAG,KAAK,CAAC,SAAS,EAAE;YACpB;gBACE,IAAI,EAAE,IAAI,CAAC,eAAe;gBAC1B,OAAO,EAAE,KAAC,eAAe,IAAC,cAAc,EAAE,IAAI,CAAC,cAAc,GAAI;aAClE;SACF,CAAC;IACJ,CAAC;CACF;AAED,MAAM,OAAO,4BAA4B;IAC7B,MAAM,CAAe;IACrB,MAAM,CAAS;IAEf,mBAAmB,CAAwC;IAE3D,eAAe,GAAG,iBAAiB,CAAC;IACpC,qBAAqB,GAAG,GAAG,CAAC;IAC5B,kBAAkB,CAGlB;IACO,qBAAqB,CAAS;IAC9B,qBAAqB,CAAS;IAC9B,sBAAsB,CAAS;IAC/B,QAAQ,CAAU;IAEnC,YAAY,EACV,MAAM,EACN,QAAQ,EACR,QAAQ,EACR,qBAAqB,EACrB,qBAAqB,EACrB,sBAAsB,GACK;QAC3B,IAAI,CAAC,MAAM,GAAG;YACZ,SAAS,EAAE,QAAQ;YACnB,0BAA0B,EAAE,MAAM;SACnC,CAAC;QACF,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACzB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,qBAAqB,GAAG,qBAAqB,IAAI,GAAG,CAAC;QAC1D,IAAI,CAAC,qBAAqB,GAAG,qBAAqB,IAAI,GAAG,CAAC;QAC1D,IAAI,CAAC,sBAAsB,GAAG,sBAAsB,IAAI,GAAG,CAAC;IAC9D,CAAC;IAES,KAAK,CAAC,aAAa;QAC3B,IAAI,CAAC,IAAI,CAAC,mBAAmB,EAAE,CAAC;YAC9B,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACvC,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,gBAAgB,CAAC,SAAS,CAAC,CAAC;YACzD,IAAI,CAAC,mBAAmB,GAAG,MAAM,KAAK,CAAC,wBAAwB,CAC7D,SAAS,EACT,QAAQ,CACT,CAAC;QACJ,CAAC;QACD,OAAO,IAAI,CAAC,mBAAmB,CAAC;IAClC,CAAC;IAED;;;OAGG;IACO,qBAAqB,CAC7B,QAAyD;QAEzD,IAAI,KAAK,CAAC,aAAa,CAAC,QAAQ,CAAC,EAAE,CAAC;YAClC,MAAM,CAAC,KAAK,CAAC,oBAAoB,EAAE,QAAQ,CAAC,CAAC;YAC7C,MAAM,IAAI,uBAAuB,CAAC,oBAAoB,EAAE,QAAQ,CAAC,CAAC;QACpE,CAAC;QAED,IAAI,CAAC,QAAQ,CAAC,UAAU,EAAE,CAAC;YACzB,MAAM,IAAI,kBAAkB,CAAC,2BAA2B,CAAC,CAAC;QAC5D,CAAC;QAED,MAAM,MAAM,GAAe;YACzB,WAAW,EAAE,QAAQ,CAAC,YAAY;YAClC,YAAY,EAAE,QAAQ,CAAC,aAAa;YACpC,SAAS,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,CAAC,UAAU,GAAG,IAAI,CAAC;YAC5D,SAAS,EAAE,QAAQ,CAAC,UAAU;SAC/B,CAAC;QACF,cAAc,CAAC,OAAO,CAAC,aAAa,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;IAChE,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,EAAE,UAAU,KAA8B,EAAE;QACvD,OAAO,IAAI,CAAC,SAAS,CAAC;YACpB,UAAU,EAAE,UAAU,IAAI,IAAI,CAAC,qBAAqB;YACpD,QAAQ,EAAE,IAAI;SACf,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,EAAE,UAAU,KAA8B,EAAE;QACvD,OAAO,IAAI,CAAC,SAAS,CAAC;YACpB,UAAU,EAAE,UAAU,IAAI,IAAI,CAAC,qBAAqB;SACrD,CAAC,CAAC;IACL,CAAC;IAEO,KAAK,CAAC,SAAS,CAAC,EACtB,UAAU,EACV,QAAQ,GAAG,KAAK,GAIjB;QACC,MAAM,qBAAqB,GAAG,MAAM,CAAC;QACrC,MAAM,mBAAmB,GAAG,MAAM,IAAI,CAAC,aAAa,EAAE,CAAC;QAEvD,IAAI,CAAC,mBAAmB,CAAC,sBAAsB,EAAE,CAAC;YAChD,MAAM,IAAI,kBAAkB,CAAC,2BAA2B,CAAC,CAAC;QAC5D,CAAC;QAED;;;;WAIG;QACH,MAAM,YAAY,GAAG,KAAK,CAAC,0BAA0B,EAAE,CAAC;QACxD,MAAM,aAAa,GAAG,MAAM,KAAK,CAAC,0BAA0B,CAAC,YAAY,CAAC,CAAC;QAE3E,cAAc,CAAC,OAAO,CAAC,iBAAiB,EAAE,YAAY,CAAC,CAAC;QAExD,6CAA6C;QAC7C,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAC9B,mBAAmB,CAAC,sBAAsB,CAC3C,CAAC;QAEF,cAAc,CAAC,OAAO,CAAC,aAAa,EAAE,UAAU,CAAC,CAAC;QAElD,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACpD,WAAW,CAAC,QAAQ,GAAG,IAAI,CAAC,eAAe,CAAC;QAC5C,WAAW,CAAC,MAAM,GAAG,EAAE,CAAC;QAExB,gBAAgB,CAAC,YAAY,CAAC,GAAG,CAAC,WAAW,EAAE,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QACtE,gBAAgB,CAAC,YAAY,CAAC,GAAG,CAAC,cAAc,EAAE,WAAW,CAAC,QAAQ,EAAE,CAAC,CAAC;QAC1E,gBAAgB,CAAC,YAAY,CAAC,GAAG,CAAC,eAAe,EAAE,MAAM,CAAC,CAAC;QAC3D,gBAAgB,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,sBAAsB,CAAC,CAAC;QACnE,gBAAgB,CAAC,YAAY,CAAC,GAAG,CAAC,gBAAgB,EAAE,aAAa,CAAC,CAAC;QACnE,gBAAgB,CAAC,YAAY,CAAC,GAAG,CAC/B,uBAAuB,EACvB,qBAAqB,CACtB,CAAC;QACF,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAClB,gBAAgB,CAAC,YAAY,CAAC,GAAG,CAAC,UAAU,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC/D,CAAC;QAED,IAAI,CAAC,kBAAkB,EAAE,CAAC,gBAAgB,EAAE;YAC1C,QAAQ,EAAE,CAAC,QAAQ;YACnB,QAAQ;SACT,CAAC,CAAC;QAEH;;;WAGG;QACH,IACE,mBAAmB,CAAC,gCAAgC,EAAE,QAAQ,CAAC,MAAM,CAAC;YACtE,IAAI,EACJ,CAAC;YACD,MAAM,KAAK,GAAG,KAAK,CAAC,mBAAmB,EAAE,CAAC;YAC1C,gBAAgB,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QACpD,CAAC;QAED,iDAAiD;QACjD,QAAQ,CAAC,IAAI,GAAG,gBAAgB,CAAC,IAAI,CAAC;IACxC,CAAC;IAED,KAAK,CAAC,cAAc;QAClB,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,aAAa,EAAE,CAAC;QACtC,MAAM,UAAU,GAAG,cAAc,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;QACzD,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,MAAM,IAAI,kBAAkB,CAAC,2BAA2B,CAAC,CAAC;QAC5D,CAAC;QAED,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,CAAe,CAAC;QACnD,IAAI,KAAK,CAAC,SAAS,GAAG,IAAI,IAAI,EAAE,EAAE,CAAC;YACjC,IAAI,CAAC,KAAK,CAAC,YAAY,EAAE,CAAC;gBACxB,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC;gBACpB,OAAO,EAAE,CAAC;YACZ,CAAC;YAED,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,wBAAwB,CAClD,EAAE,EACF,IAAI,CAAC,MAAM,EACX,KAAK,CAAC,YAAY,CACnB,CAAC;YACF,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,2BAA2B,CACtD,EAAE,EACF,IAAI,CAAC,MAAM,EACX,OAAO,CACR,CAAC;YAEF,IAAI,CAAC,QAAQ,CAAC,YAAY,EAAE,CAAC;gBAC3B,MAAM,IAAI,kBAAkB,CAAC,6BAA6B,CAAC,CAAC;YAC9D,CAAC;YAED,IAAI,CAAC,qBAAqB,CAAC,QAAQ,CAAC,CAAC;YAErC,OAAO,QAAQ,CAAC,YAAY,CAAC,QAAQ,EAAE,CAAC;QAC1C,CAAC;aAAM,CAAC;YACN,OAAO,KAAK,CAAC,WAAW,CAAC;QAC3B,CAAC;IACH,CAAC;IAED,OAAO,GAAG,KAAK,IAAI,EAAE;QACnB,YAAY,CAAC,QAAQ,CAAC;YACpB,eAAe,EAAE,KAAK;YACtB,SAAS,EAAE,KAAK;YAChB,OAAO,EAAE,SAAS;SACnB,CAAC,CAAC;QACH,cAAc,CAAC,KAAK,EAAE,CAAC;QAEvB,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,aAAa,EAAE,CAAC;QAEtC,MAAM,WAAW,GAAG,IAAI,GAAG,CACzB,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG,IAAI,CAAC,sBAAsB,CACrD,CAAC;QACF,WAAW,CAAC,QAAQ,GAAG,IAAI,CAAC,qBAAqB,CAAC;QAElD,IAAI,SAAc,CAAC;QACnB,uEAAuE;QACvE,sEAAsE;QACtE,IAAI,EAAE,CAAC,oBAAoB,EAAE,CAAC;YAC5B,SAAS,GAAG,IAAI,GAAG,CAAC,EAAE,CAAC,oBAAoB,CAAC,CAAC;YAC7C,kCAAkC;YAClC,gCAAgC;YAChC,kBAAkB;YAClB,2DAA2D;YAC3D,IAAI;YACJ,SAAS,CAAC,YAAY,CAAC,GAAG,CACxB,0BAA0B,EAC1B,WAAW,CAAC,QAAQ,EAAE,CACvB,CAAC;QACJ,CAAC;aAAM,CAAC;YACN,SAAS,GAAG,WAAW,CAAC;QAC1B,CAAC;IACH,CAAC,CAAC;IAEF,cAAc,GAAG,KAAK,IAAI,EAAE;QAC1B,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAC1C,MAAM,KAAK,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAE5C,8DAA8D;QAC9D,8CAA8C;QAC9C,MAAM,YAAY,GAAG,cAAc,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;QAC/D,cAAc,CAAC,UAAU,CAAC,iBAAiB,CAAC,CAAC;QAC7C,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,MAAM,IAAI,kBAAkB,CAAC,kCAAkC,CAAC,CAAC;QACnE,CAAC;QAED,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,aAAa,EAAE,CAAC;QAE9C,MAAM,MAAM,GAAG,KAAK,CAAC,oBAAoB,CACvC,UAAU,EACV,IAAI,CAAC,MAAM,EACX,GAAG,CAAC,YAAY,EAChB,KAAK,IAAI,SAAS,CACnB,CAAC;QACF,IAAI,KAAK,CAAC,aAAa,CAAC,MAAM,CAAC,EAAE,CAAC;YAChC,MAAM,CAAC,KAAK,CAAC,iCAAiC,EAAE,MAAM,CAAC,CAAC;YACxD,MAAM,IAAI,uBAAuB,CAC/B,iCAAiC,EACjC,MAAM,CACP,CAAC;QACJ,CAAC;QAED,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;QACjC,WAAW,CAAC,QAAQ,GAAG,IAAI,CAAC,qBAAqB,CAAC;QAClD,WAAW,CAAC,MAAM,GAAG,EAAE,CAAC;QAExB,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,6BAA6B,CACxD,UAAU,EACV,IAAI,CAAC,MAAM,EACX,MAAM,EACN,WAAW,CAAC,QAAQ,EAAE,EACtB,YAAY,CACb,CAAC;QAEF,+BAA+B;QAC/B,qEAAqE;QACrE,oBAAoB;QACpB,0CAA0C;QAC1C,8DAA8D;QAC9D,MAAM;QACN,uEAAuE;QACvE,IAAI;QACJ,MAAM,WAAW,GAAG,MAAM,KAAK,CAAC,sCAAsC,CACpE,UAAU,EACV,IAAI,CAAC,MAAM,EACX,QAAQ,CACT,CAAC;QAEF,IAAI,CAAC,qBAAqB,CAAC,WAAW,CAAC,CAAC;QAExC,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,cAAc,EAAE,CAAC;QAEhD,MAAM,gBAAgB,GAAG,MAAM,KAAK,CAAC,eAAe,CAClD,UAAU,EACV,IAAI,CAAC,MAAM,EACX,WAAW,CACZ,CAAC;QACF,MAAM,QAAQ,GAAG,MAAM,gBAAgB,CAAC,IAAI,EAAE,CAAC;QAE/C,MAAM,OAAO,GAAgB;YAC3B,GAAG,EAAE,QAAQ,CAAC,GAAG;YACjB,KAAK,EAAE,QAAQ,CAAC,KAAK;YACrB,IAAI,EAAE,QAAQ,CAAC,IAAI;YACnB,aAAa,EAAE,QAAQ,CAAC,cAAc,IAAI,KAAK;YAC/C,UAAU,EAAE,QAAQ,CAAC,OAAO;SAC7B,CAAC;QAEF,YAAY,CAAC,QAAQ,CAAC;YACpB,eAAe,EAAE,IAAI;YACrB,SAAS,EAAE,KAAK;YAChB,OAAO;SACR,CAAC,CAAC;QAEH,cAAc,CAAC,OAAO,CACpB,eAAe,EACf,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,CAChD,CAAC;QAEF,MAAM,UAAU,GAAG,cAAc,CAAC,OAAO,CAAC,aAAa,CAAC,IAAI,GAAG,CAAC;QAChE,cAAc,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;QACzC,OAAO,UAAU,CAAC;IACpB,CAAC,CAAC;IAEF,QAAQ;QACN,MAAM,YAAY,GAAG,cAAc,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;QAC7D,IAAI,YAAY,EAAE,CAAC;YACjB,IAAI,CAAC;gBACH,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;gBACzC,YAAY,CAAC,QAAQ,CAAC;oBACpB,eAAe,EAAE,IAAI;oBACrB,SAAS,EAAE,KAAK;oBAChB,OAAO;iBACR,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,CAAC,KAAK,CAAC,0BAA0B,EAAE,GAAG,CAAC,CAAC;YAChD,CAAC;QACH,CAAC;IACH,CAAC;IAED,uBAAuB;QACrB,4EAA4E;QAC5E,6CAA6C;QAC7C,OAAO,IAAI,gBAAgB,CAAC,IAAI,CAAC,eAAe,EAAE,IAAI,CAAC,cAAc,CAAC,CAAC;IACzE,CAAC;CACF;AAED,MAAM,UAAU,GAEZ,CAAC,OAAO,EAAE,EAAE,CAAC,IAAI,4BAA4B,CAAC,OAAO,CAAC,CAAC;AAE3D,eAAe,UAAU,CAAC"}
+{"version":3,"file":"openid.js","sourceRoot":"","sources":["../../../../src/lib/authentication/providers/openid.tsx"],"names":[],"mappings":";AAAA,OAAO,MAAM,MAAM,UAAU,CAAC;AAC9B,OAAO,KAAK,KAAK,MAAM,cAAc,CAAC;AAEtC,OAAO,EAAE,UAAU,EAAE,MAAM,gCAAgC,CAAC;AAC5D,OAAO,EAAE,OAAO,EAAE,MAAM,uBAAuB,CAAC;AAKhD,OAAO,EAAE,oBAAoB,EAAE,MAAM,4BAA4B,CAAC;AAClE,OAAO,EAAE,eAAe,EAAE,MAAM,kCAAkC,CAAC;AACnE,OAAO,EAAE,kBAAkB,EAAE,uBAAuB,EAAE,MAAM,cAAc,CAAC;AAC3E,OAAO,EAAE,YAAY,EAAoB,MAAM,aAAa,CAAC;AAE7D,MAAM,iBAAiB,GAAG,eAAe,CAAC;AAC1C,MAAM,SAAS,GAAG,aAAa,CAAC;AAUhC,MAAM,gBAAiB,SAAQ,oBAAoB;IAEvC;IACA;IAFV,YACU,eAAuB,EACvB,cAAqC;QAE7C,KAAK,EAAE,CAAC;QAHA,oBAAe,GAAf,eAAe,CAAQ;QACvB,mBAAc,GAAd,cAAc,CAAuB;IAG/C,CAAC;IACD,SAAS;QACP,OAAO;YACL,GAAG,KAAK,CAAC,SAAS,EAAE;YACpB;gBACE,IAAI,EAAE,IAAI,CAAC,eAAe;gBAC1B,OAAO,EAAE,CACP,KAAC,UAAU,cACT,KAAC,eAAe,IAAC,cAAc,EAAE,IAAI,CAAC,cAAc,GAAI,GAC7C,CACd;aACF;SACF,CAAC;IACJ,CAAC;CACF;AAED,MAAM,OAAO,4BAA4B;IAC7B,MAAM,CAAe;IACrB,MAAM,CAAS;IAEf,mBAAmB,CAAwC;IAE3D,uBAAuB,CAAS;IAChC,uBAAuB,CAAS;IAChC,qBAAqB,CAAS;IAC9B,kBAAkB,CAGlB;IACO,qBAAqB,CAAS;IAC9B,qBAAqB,CAAS;IAC9B,sBAAsB,CAAS;IAC/B,QAAQ,CAAU;IAClB,MAAM,CAAW;IACjB,IAAI,CAAS;IAC9B,YAAY,EACV,MAAM,EACN,QAAQ,EACR,QAAQ,EACR,qBAAqB,EACrB,qBAAqB,EACrB,sBAAsB,EACtB,QAAQ,EACR,MAAM,GACqB;QAC3B,IAAI,CAAC,MAAM,GAAG;YACZ,SAAS,EAAE,QAAQ;YACnB,0BAA0B,EAAE,MAAM;SACnC,CAAC;QACF,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACzB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,uBAAuB,GAAG,iBAAiB,CAAC;QACjD,IAAI,CAAC,uBAAuB,GAAG,OAAO,CACpC,QAAQ,EACR,IAAI,CAAC,uBAAuB,CAC7B,CAAC;QACF,IAAI,CAAC,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;QAEvD,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;QAEnC,IAAI,CAAC,qBAAqB,GAAG,IAAI,CAAC,IAAI,CAAC;QACvC,IAAI,CAAC,qBAAqB,GAAG,qBAAqB,IAAI,IAAI,CAAC,IAAI,CAAC;QAChE,IAAI,CAAC,qBAAqB,GAAG,qBAAqB,IAAI,IAAI,CAAC,IAAI,CAAC;QAChE,IAAI,CAAC,sBAAsB,GAAG,sBAAsB,IAAI,IAAI,CAAC,IAAI,CAAC;IACpE,CAAC;IAES,KAAK,CAAC,aAAa;QAC3B,IAAI,CAAC,IAAI,CAAC,mBAAmB,EAAE,CAAC;YAC9B,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACvC,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,gBAAgB,CAAC,SAAS,CAAC,CAAC;YACzD,IAAI,CAAC,mBAAmB,GAAG,MAAM,KAAK,CAAC,wBAAwB,CAC7D,SAAS,EACT,QAAQ,CACT,CAAC;QACJ,CAAC;QACD,OAAO,IAAI,CAAC,mBAAmB,CAAC;IAClC,CAAC;IAED;;;OAGG;IACO,qBAAqB,CAC7B,QAAyD;QAEzD,IAAI,KAAK,CAAC,aAAa,CAAC,QAAQ,CAAC,EAAE,CAAC;YAClC,MAAM,CAAC,KAAK,CAAC,oBAAoB,EAAE,QAAQ,CAAC,CAAC;YAC7C,MAAM,IAAI,uBAAuB,CAAC,oBAAoB,EAAE,QAAQ,CAAC,CAAC;QACpE,CAAC;QAED,IAAI,CAAC,QAAQ,CAAC,UAAU,EAAE,CAAC;YACzB,MAAM,IAAI,kBAAkB,CAAC,2BAA2B,CAAC,CAAC;QAC5D,CAAC;QAED,MAAM,MAAM,GAAuB;YACjC,WAAW,EAAE,QAAQ,CAAC,YAAY;YAClC,YAAY,EAAE,QAAQ,CAAC,aAAa;YACpC,OAAO,EAAE,QAAQ,CAAC,QAAQ;YAC1B,SAAS,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,CAAC,UAAU,GAAG,IAAI,CAAC;YAC5D,SAAS,EAAE,QAAQ,CAAC,UAAU;SAC/B,CAAC;QAEF,YAAY,CAAC,QAAQ,CAAC;YACpB,YAAY,EAAE,MAAM;SACrB,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,EAAE,UAAU,KAA8B,EAAE;QACvD,OAAO,IAAI,CAAC,SAAS,CAAC;YACpB,UAAU,EAAE,UAAU,IAAI,IAAI,CAAC,qBAAqB;YACpD,QAAQ,EAAE,IAAI;SACf,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,EAAE,UAAU,KAA8B,EAAE;QACvD,OAAO,IAAI,CAAC,SAAS,CAAC;YACpB,UAAU,EAAE,UAAU,IAAI,IAAI,CAAC,qBAAqB;SACrD,CAAC,CAAC;IACL,CAAC;IAEO,KAAK,CAAC,SAAS,CAAC,EACtB,UAAU,EACV,QAAQ,GAAG,KAAK,GAIjB;QACC,MAAM,qBAAqB,GAAG,MAAM,CAAC;QACrC,MAAM,mBAAmB,GAAG,MAAM,IAAI,CAAC,aAAa,EAAE,CAAC;QAEvD,IAAI,CAAC,mBAAmB,CAAC,sBAAsB,EAAE,CAAC;YAChD,MAAM,IAAI,kBAAkB,CAAC,2BAA2B,CAAC,CAAC;QAC5D,CAAC;QAED;;;;WAIG;QACH,MAAM,YAAY,GAAG,KAAK,CAAC,0BAA0B,EAAE,CAAC;QACxD,MAAM,aAAa,GAAG,MAAM,KAAK,CAAC,0BAA0B,CAAC,YAAY,CAAC,CAAC;QAE3E,cAAc,CAAC,OAAO,CAAC,iBAAiB,EAAE,YAAY,CAAC,CAAC;QAExD,6CAA6C;QAC7C,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAC9B,mBAAmB,CAAC,sBAAsB,CAC3C,CAAC;QAEF,MAAM,aAAa,GAAG,UAAU,CAAC,UAAU,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC;YACjE,CAAC,CAAC,IAAI,CAAC,IAAI,KAAK,GAAG;gBACjB,UAAU,CAAC,UAAU,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC;gBACzD,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC;gBACpE,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC;YACnD,CAAC,CAAC,UAAU,CAAC;QAEf,cAAc,CAAC,OAAO,CAAC,aAAa,EAAE,aAAa,CAAC,CAAC;QAErD,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACpD,WAAW,CAAC,QAAQ,GAAG,IAAI,CAAC,uBAAuB,CAAC;QACpD,WAAW,CAAC,MAAM,GAAG,EAAE,CAAC;QAExB,gBAAgB,CAAC,YAAY,CAAC,GAAG,CAAC,WAAW,EAAE,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QACtE,gBAAgB,CAAC,YAAY,CAAC,GAAG,CAAC,cAAc,EAAE,WAAW,CAAC,QAAQ,EAAE,CAAC,CAAC;QAC1E,gBAAgB,CAAC,YAAY,CAAC,GAAG,CAAC,eAAe,EAAE,MAAM,CAAC,CAAC;QAC3D,gBAAgB,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;QAClE,gBAAgB,CAAC,YAAY,CAAC,GAAG,CAAC,gBAAgB,EAAE,aAAa,CAAC,CAAC;QACnE,gBAAgB,CAAC,YAAY,CAAC,GAAG,CAC/B,uBAAuB,EACvB,qBAAqB,CACtB,CAAC;QACF,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAClB,gBAAgB,CAAC,YAAY,CAAC,GAAG,CAAC,UAAU,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC/D,CAAC;QAED,IAAI,CAAC,kBAAkB,EAAE,CAAC,gBAAgB,EAAE;YAC1C,QAAQ,EAAE,CAAC,QAAQ;YACnB,QAAQ;SACT,CAAC,CAAC;QAEH;;;WAGG;QACH,MAAM,KAAK,GAAG,KAAK,CAAC,mBAAmB,EAAE,CAAC;QAC1C,cAAc,CAAC,OAAO,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;QACzC,gBAAgB,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QAElD,iDAAiD;QACjD,QAAQ,CAAC,IAAI,GAAG,gBAAgB,CAAC,IAAI,CAAC;IACxC,CAAC;IAED,KAAK,CAAC,cAAc;QAClB,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,aAAa,EAAE,CAAC;QACtC,MAAM,EAAE,YAAY,EAAE,GAAG,YAAY,CAAC,QAAQ,EAAE,CAAC;QACjD,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,MAAM,IAAI,kBAAkB,CAAC,2BAA2B,CAAC,CAAC;QAC5D,CAAC;QACD,MAAM,UAAU,GAAG,YAAkC,CAAC;QAEtD,IAAI,IAAI,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,GAAG,IAAI,IAAI,EAAE,EAAE,CAAC;YAChD,IAAI,CAAC,UAAU,CAAC,YAAY,EAAE,CAAC;gBAC7B,YAAY,CAAC,QAAQ,CAAC;oBACpB,eAAe,EAAE,KAAK;oBACtB,SAAS,EAAE,KAAK;oBAChB,OAAO,EAAE,IAAI;oBACb,YAAY,EAAE,IAAI;iBACnB,CAAC,CAAC;gBACH,OAAO,EAAE,CAAC;YACZ,CAAC;YAED,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,wBAAwB,CAClD,EAAE,EACF,IAAI,CAAC,MAAM,EACX,UAAU,CAAC,YAAY,CACxB,CAAC;YACF,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,2BAA2B,CACtD,EAAE,EACF,IAAI,CAAC,MAAM,EACX,OAAO,CACR,CAAC;YAEF,IAAI,CAAC,QAAQ,CAAC,YAAY,EAAE,CAAC;gBAC3B,MAAM,IAAI,kBAAkB,CAAC,6BAA6B,CAAC,CAAC;YAC9D,CAAC;YAED,IAAI,CAAC,qBAAqB,CAAC,QAAQ,CAAC,CAAC;YAErC,OAAO,QAAQ,CAAC,YAAY,CAAC,QAAQ,EAAE,CAAC;QAC1C,CAAC;aAAM,CAAC;YACN,OAAO,UAAU,CAAC,WAAW,CAAC;QAChC,CAAC;IACH,CAAC;IAED,WAAW,GAAG,KAAK,EAAE,OAAgB,EAAoB,EAAE;QACzD,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,cAAc,EAAE,CAAC;QAChD,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,UAAU,WAAW,EAAE,CAAC,CAAC;QAC9D,OAAO,OAAO,CAAC;IACjB,CAAC,CAAC;IAEF,OAAO,GAAG,KAAK,IAAI,EAAE;QACnB,YAAY,CAAC,QAAQ,CAAC;YACpB,eAAe,EAAE,KAAK;YACtB,SAAS,EAAE,KAAK;YAChB,OAAO,EAAE,SAAS;YAClB,YAAY,EAAE,SAAS;SACxB,CAAC,CAAC;QAEH,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,aAAa,EAAE,CAAC;QAEtC,MAAM,WAAW,GAAG,IAAI,GAAG,CACzB,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG,IAAI,CAAC,sBAAsB,CACrD,CAAC;QACF,WAAW,CAAC,QAAQ,GAAG,IAAI,CAAC,qBAAqB,CAAC;QAElD,IAAI,SAAc,CAAC;QACnB,uEAAuE;QACvE,sEAAsE;QACtE,IAAI,EAAE,CAAC,oBAAoB,EAAE,CAAC;YAC5B,SAAS,GAAG,IAAI,GAAG,CAAC,EAAE,CAAC,oBAAoB,CAAC,CAAC;YAC7C,kCAAkC;YAClC,gCAAgC;YAChC,kBAAkB;YAClB,2DAA2D;YAC3D,IAAI;YACJ,SAAS,CAAC,YAAY,CAAC,GAAG,CACxB,0BAA0B,EAC1B,WAAW,CAAC,QAAQ,EAAE,CACvB,CAAC;QACJ,CAAC;aAAM,CAAC;YACN,SAAS,GAAG,WAAW,CAAC;QAC1B,CAAC;IACH,CAAC,CAAC;IAEF,cAAc,GAAG,KAAK,IAAI,EAAE;QAC1B,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAC1C,MAAM,KAAK,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAC5C,MAAM,WAAW,GAAG,cAAc,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QACtD,cAAc,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;QAErC,IAAI,KAAK,KAAK,WAAW,EAAE,CAAC;YAC1B,MAAM,IAAI,kBAAkB,CAAC,yBAAyB,CAAC,CAAC;QAC1D,CAAC;QAED,8DAA8D;QAC9D,8CAA8C;QAC9C,MAAM,YAAY,GAAG,cAAc,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;QAC/D,cAAc,CAAC,UAAU,CAAC,iBAAiB,CAAC,CAAC;QAC7C,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,MAAM,IAAI,kBAAkB,CAAC,kCAAkC,CAAC,CAAC;QACnE,CAAC;QAED,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,aAAa,EAAE,CAAC;QAE9C,MAAM,MAAM,GAAG,KAAK,CAAC,oBAAoB,CACvC,UAAU,EACV,IAAI,CAAC,MAAM,EACX,GAAG,CAAC,YAAY,EAChB,KAAK,IAAI,SAAS,CACnB,CAAC;QACF,IAAI,KAAK,CAAC,aAAa,CAAC,MAAM,CAAC,EAAE,CAAC;YAChC,MAAM,CAAC,KAAK,CAAC,iCAAiC,EAAE,MAAM,CAAC,CAAC;YACxD,MAAM,IAAI,uBAAuB,CAC/B,iCAAiC,EACjC,MAAM,CACP,CAAC;QACJ,CAAC;QAED,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;QACjC,WAAW,CAAC,QAAQ,GAAG,IAAI,CAAC,uBAAuB,CAAC;QACpD,WAAW,CAAC,MAAM,GAAG,EAAE,CAAC;QAExB,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,6BAA6B,CACxD,UAAU,EACV,IAAI,CAAC,MAAM,EACX,MAAM,EACN,WAAW,CAAC,QAAQ,EAAE,EACtB,YAAY,CACb,CAAC;QAEF,+BAA+B;QAC/B,qEAAqE;QACrE,oBAAoB;QACpB,0CAA0C;QAC1C,8DAA8D;QAC9D,MAAM;QACN,uEAAuE;QACvE,IAAI;QACJ,MAAM,WAAW,GAAG,MAAM,KAAK,CAAC,sCAAsC,CACpE,UAAU,EACV,IAAI,CAAC,MAAM,EACX,QAAQ,CACT,CAAC;QAEF,IAAI,CAAC,qBAAqB,CAAC,WAAW,CAAC,CAAC;QAExC,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,cAAc,EAAE,CAAC;QAEhD,MAAM,gBAAgB,GAAG,MAAM,KAAK,CAAC,eAAe,CAClD,UAAU,EACV,IAAI,CAAC,MAAM,EACX,WAAW,CACZ,CAAC;QACF,MAAM,QAAQ,GAAG,MAAM,gBAAgB,CAAC,IAAI,EAAE,CAAC;QAE/C,MAAM,OAAO,GAAgB;YAC3B,GAAG,EAAE,QAAQ,CAAC,GAAG;YACjB,KAAK,EAAE,QAAQ,CAAC,KAAK;YACrB,IAAI,EAAE,QAAQ,CAAC,IAAI;YACnB,aAAa,EAAE,QAAQ,CAAC,cAAc,IAAI,KAAK;YAC/C,UAAU,EAAE,QAAQ,CAAC,OAAO;SAC7B,CAAC;QAEF,YAAY,CAAC,QAAQ,CAAC;YACpB,eAAe,EAAE,IAAI;YACrB,SAAS,EAAE,KAAK;YAChB,OAAO;SACR,CAAC,CAAC;QAEH,MAAM,UAAU,GAAG,cAAc,CAAC,OAAO,CAAC,aAAa,CAAC,IAAI,GAAG,CAAC;QAChE,cAAc,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;QACzC,OAAO,UAAU,CAAC;IACpB,CAAC,CAAC;IAEF,uBAAuB;QACrB,4EAA4E;QAC5E,6CAA6C;QAC7C,OAAO,IAAI,gBAAgB,CACzB,IAAI,CAAC,uBAAuB,EAC5B,IAAI,CAAC,cAAc,CACpB,CAAC;IACJ,CAAC;CACF;AAED,MAAM,UAAU,GAEZ,CAAC,OAAO,EAAE,EAAE,CAAC,IAAI,4BAA4B,CAAC,OAAO,CAAC,CAAC;AAE3D,eAAe,UAAU,CAAC"}

package/dist/lib/authentication/providers/supabase.d.ts

@@ -0,0 +1,4 @@
+import { type SupabaseAuthenticationConfig } from "../../../config/config.js";
+import { type AuthenticationProviderInitializer } from "../authentication.js";
+declare const supabaseAuth: AuthenticationProviderInitializer<SupabaseAuthenticationConfig>;
+export default supabaseAuth;

package/dist/lib/authentication/providers/supabase.js

@@ -0,0 +1,117 @@
+import { createClient, } from "@supabase/supabase-js";
+import { AuthenticationPlugin } from "../AuthenticationPlugin.js";
+import { AuthorizationError } from "../errors.js";
+import { useAuthState } from "../state.js";
+class SupabaseAuthPlugin extends AuthenticationPlugin {
+}
+class SupabaseAuthenticationProvider {
+    client;
+    provider;
+    redirectToAfterSignUp;
+    redirectToAfterSignIn;
+    redirectToAfterSignOut;
+    constructor({ supabaseUrl, supabaseKey, provider, redirectToAfterSignUp, redirectToAfterSignIn, redirectToAfterSignOut, basePath, }) {
+        this.provider = provider;
+        this.client = createClient(supabaseUrl, supabaseKey, {
+            auth: {
+                autoRefreshToken: true,
+                persistSession: true,
+            },
+        });
+        const root = basePath ?? "/";
+        this.redirectToAfterSignUp = redirectToAfterSignUp ?? root;
+        this.redirectToAfterSignIn = redirectToAfterSignIn ?? root;
+        this.redirectToAfterSignOut = redirectToAfterSignOut ?? root;
+        this.client.auth.onAuthStateChange(async (event, session) => {
+            if (session && (event === "SIGNED_IN" || event === "TOKEN_REFRESHED")) {
+                await this.updateUserState(session);
+            }
+            else if (event === "SIGNED_OUT") {
+                useAuthState.setState({
+                    isAuthenticated: false,
+                    isPending: false,
+                    profile: undefined,
+                    providerData: undefined,
+                });
+            }
+        });
+    }
+    async updateUserState(session) {
+        const { user } = session;
+        const profile = {
+            sub: user.id,
+            email: user.email,
+            name: user.user_metadata.full_name || user.user_metadata.name,
+            emailVerified: user.email_confirmed_at != null,
+            pictureUrl: user.user_metadata.avatar_url,
+        };
+        useAuthState.setState({
+            isAuthenticated: true,
+            isPending: false,
+            profile,
+            providerData: { session },
+        });
+    }
+    async getAccessToken() {
+        const { data, error } = await this.client.auth.getSession();
+        if (error || !data.session) {
+            throw new AuthorizationError("User is not authenticated");
+        }
+        return data.session.access_token;
+    }
+    async signRequest(request) {
+        const accessToken = await this.getAccessToken();
+        request.headers.set("Authorization", `Bearer ${accessToken}`);
+        return request;
+    }
+    signUp = async ({ redirectTo }) => {
+        const finalRedirectTo = redirectTo ?? this.redirectToAfterSignUp;
+        // Open Supabase Auth UI in a new window
+        await this.client.auth.signInWithOAuth({
+            provider: this.provider,
+            options: {
+                redirectTo: window.location.origin + finalRedirectTo,
+            },
+        });
+    };
+    signIn = async ({ redirectTo }) => {
+        const finalRedirectTo = redirectTo ?? this.redirectToAfterSignIn;
+        await this.client.auth.signInWithOAuth({
+            provider: this.provider,
+            options: {
+                redirectTo: window.location.origin + finalRedirectTo,
+                queryParams: {
+                    access_type: "offline",
+                    prompt: "consent",
+                },
+            },
+        });
+    };
+    signOut = async () => {
+        await new Promise((resolve) => {
+            const { data } = this.client.auth.onAuthStateChange(async (event) => {
+                if (event !== "SIGNED_OUT")
+                    return;
+                data.subscription.unsubscribe();
+                resolve();
+            });
+            void this.client.auth.signOut();
+        });
+        useAuthState.setState({
+            isAuthenticated: false,
+            isPending: false,
+            profile: undefined,
+            providerData: undefined,
+        });
+    };
+    getAuthenticationPlugin = () => new SupabaseAuthPlugin();
+    onPageLoad = async () => {
+        const { data, error } = await this.client.auth.getSession();
+        if (!error && data.session) {
+            await this.updateUserState(data.session);
+        }
+    };
+}
+const supabaseAuth = (options) => new SupabaseAuthenticationProvider(options);
+export default supabaseAuth;
+//# sourceMappingURL=supabase.js.map