zudoku 0.0.0-e097cbb → 0.0.0-e0ffac16

package/dist/lib/authentication/authentication.d.ts

@@ -1,17 +1,17 @@
-import { ZudokuPlugin } from "../core/plugins.js";
-export interface AuthenticationProvider {
+export interface AuthenticationPlugin {
     signUp(options?: {
         redirectTo?: string;
+        replace?: boolean;
     }): Promise<void>;
     signIn(options?: {
         redirectTo?: string;
+        replace?: boolean;
     }): Promise<void>;
     signOut(): Promise<void>;
     getAccessToken(): Promise<string>;
-    getAuthenticationPlugin?(): ZudokuPlugin;
     onPageLoad?(): void;
     signRequest(request: Request): Promise<Request>;
 }
 export interface AuthenticationProviderInitializer<TConfig> {
-    (config: TConfig): AuthenticationProvider;
+    (config: TConfig): AuthenticationPlugin;
 }

package/dist/lib/authentication/components/CallbackHandler.js

@@ -1,24 +1,30 @@
 import { jsx as _jsx } from "react/jsx-runtime";
 import { useSuspenseQuery } from "@tanstack/react-query";
 import { Navigate } from "react-router";
-import { ZudokuError } from "../../util/invariant.js";
+import { useZudoku } from "zudoku/components";
+import { joinUrl } from "../../util/joinUrl.js";
+import { normalizeRedirectUrl } from "../../util/url.js";
+import { OAuthAuthorizationError } from "../errors.js";
 export function CallbackHandler({ handleCallback, }) {
+    const { options } = useZudoku();
     const executeCallback = useSuspenseQuery({
         retry: false,
         queryKey: ["oauth-callback"],
         queryFn: async () => {
-            try {
-                return await handleCallback();
-            }
-            catch (error) {
-                throw new ZudokuError("Could not validate user", {
-                    cause: error,
-                    title: "Authentication Error",
-                    developerHint: "Check the configuration of your authorization provider and ensure all settings such as the callback URL are configured correctly.",
+            const url = new URL(window.location.href);
+            const errorParam = url.searchParams.get("error");
+            const errorDescription = url.searchParams.get("error_description") ?? undefined;
+            const errorUri = url.searchParams.get("error_uri") ?? undefined;
+            if (errorParam) {
+                throw new OAuthAuthorizationError(`OAuth error '${errorParam}': ${errorDescription}`, {
+                    error: errorParam,
+                    error_description: errorDescription,
+                    error_uri: errorUri,
                 });
             }
+            return joinUrl(normalizeRedirectUrl(await handleCallback(), window.location.origin, options.basePath));
         },
     });
-    return _jsx(Navigate, { to: executeCallback.data });
+    return _jsx(Navigate, { to: executeCallback.data, replace: true });
 }
 //# sourceMappingURL=CallbackHandler.js.map

package/dist/lib/authentication/components/CallbackHandler.js.map

@@ -1 +1 @@
-{"version":3,"file":"CallbackHandler.js","sourceRoot":"","sources":["../../../../src/lib/authentication/components/CallbackHandler.tsx"],"names":[],"mappings":";AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AACzD,OAAO,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AACxC,OAAO,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AAEtD,MAAM,UAAU,eAAe,CAAC,EAC9B,cAAc,GAGf;IACC,MAAM,eAAe,GAAG,gBAAgB,CAAC;QACvC,KAAK,EAAE,KAAK;QACZ,QAAQ,EAAE,CAAC,gBAAgB,CAAC;QAC5B,OAAO,EAAE,KAAK,IAAI,EAAE;YAClB,IAAI,CAAC;gBACH,OAAO,MAAM,cAAc,EAAE,CAAC;YAChC,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,IAAI,WAAW,CAAC,yBAAyB,EAAE;oBAC/C,KAAK,EAAE,KAAK;oBACZ,KAAK,EAAE,sBAAsB;oBAC7B,aAAa,EACX,mIAAmI;iBACtI,CAAC,CAAC;YACL,CAAC;QACH,CAAC;KACF,CAAC,CAAC;IAEH,OAAO,KAAC,QAAQ,IAAC,EAAE,EAAE,eAAe,CAAC,IAAI,GAAI,CAAC;AAChD,CAAC"}
+{"version":3,"file":"CallbackHandler.js","sourceRoot":"","sources":["../../../../src/lib/authentication/components/CallbackHandler.tsx"],"names":[],"mappings":";AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AACzD,OAAO,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AACxC,OAAO,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AAC9C,OAAO,EAAE,OAAO,EAAE,MAAM,uBAAuB,CAAC;AAChD,OAAO,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AACzD,OAAO,EAAE,uBAAuB,EAAuB,MAAM,cAAc,CAAC;AAE5E,MAAM,UAAU,eAAe,CAAC,EAC9B,cAAc,GAGf;IACC,MAAM,EAAE,OAAO,EAAE,GAAG,SAAS,EAAE,CAAC;IAChC,MAAM,eAAe,GAAG,gBAAgB,CAAC;QACvC,KAAK,EAAE,KAAK;QACZ,QAAQ,EAAE,CAAC,gBAAgB,CAAC;QAC5B,OAAO,EAAE,KAAK,IAAI,EAAE;YAClB,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;YAE1C,MAAM,UAAU,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YACjD,MAAM,gBAAgB,GACpB,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,mBAAmB,CAAC,IAAI,SAAS,CAAC;YACzD,MAAM,QAAQ,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,SAAS,CAAC;YAChE,IAAI,UAAU,EAAE,CAAC;gBACf,MAAM,IAAI,uBAAuB,CAC/B,gBAAgB,UAAU,MAAM,gBAAgB,EAAE,EAClD;oBACE,KAAK,EAAE,UAA4B;oBACnC,iBAAiB,EAAE,gBAAgB;oBACnC,SAAS,EAAE,QAAQ;iBACpB,CACF,CAAC;YACJ,CAAC;YACD,OAAO,OAAO,CACZ,oBAAoB,CAClB,MAAM,cAAc,EAAE,EACtB,MAAM,CAAC,QAAQ,CAAC,MAAM,EACtB,OAAO,CAAC,QAAQ,CACjB,CACF,CAAC;QACJ,CAAC;KACF,CAAC,CAAC;IAEH,OAAO,KAAC,QAAQ,IAAC,EAAE,EAAE,eAAe,CAAC,IAAI,EAAE,OAAO,SAAG,CAAC;AACxD,CAAC"}

package/dist/lib/authentication/components/OAuthErrorPage.d.ts

@@ -0,0 +1,3 @@
+export declare function OAuthErrorPage({ error }: {
+    error: any;
+}): import("react/jsx-runtime").JSX.Element;

package/dist/lib/authentication/components/OAuthErrorPage.js

@@ -0,0 +1,99 @@
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+import { HomeIcon } from "lucide-react";
+import { Link } from "react-router";
+import { Heading } from "../../components/Heading.js";
+import { Typography } from "../../components/Typography.js";
+import { Button } from "../../ui/Button.js";
+import { OAuthAuthorizationError } from "../errors.js";
+import { useAuth } from "../hook.js";
+const errorDetailsMap = {
+    invalid_request: {
+        message: "The authentication request was invalid. Please try signing in again.",
+    },
+    unauthorized_client: {
+        message: "This application is not authorized to access your account. Please contact support.",
+    },
+    access_denied: {
+        message: "You denied access to this application. To continue, please sign in and grant access.",
+    },
+    unsupported_response_type: {
+        message: "The authentication method is not supported. Please contact support.",
+    },
+    invalid_scope: {
+        message: "The requested permissions are invalid. Please contact support.",
+    },
+    server_error: {
+        message: "The authentication server encountered an error. Please try again in a few moments.",
+    },
+    temporarily_unavailable: {
+        message: "The authentication service is temporarily unavailable. Please try again in a few moments.",
+    },
+    // Token errors
+    invalid_client: {
+        message: "Invalid application credentials. Please contact support.",
+    },
+    invalid_grant: {
+        message: "The authentication code has expired or is invalid. Please sign in again.",
+    },
+    unsupported_grant_type: {
+        message: "The authentication method is not supported. Please contact support.",
+    },
+    // Custom errors
+    invalid_state: {
+        message: "Security validation failed. This may be due to a potential security attack. Please try signing in again.",
+    },
+    missing_code_verifier: {
+        message: "Authentication security information is missing. Please clear your browser cache and try again.",
+    },
+    network_error: {
+        message: "A network error occurred during authentication. Please check your connection and try again.",
+    },
+    token_expired: {
+        message: "Your authentication session has expired. Please sign in again.",
+    },
+    configuration_error: {
+        message: "There is an issue with the authentication configuration. Please contact support.",
+    },
+    unknown_error: {
+        message: "An unexpected error occurred during authentication. Please try again or contact support.",
+    },
+};
+export function OAuthErrorPage({ error }) {
+    const { login } = useAuth();
+    if (!(error instanceof OAuthAuthorizationError)) {
+        throw error;
+    }
+    const oauthError = error.error;
+    const type = oauthError.error;
+    const details = errorDetailsMap[type] ?? errorDetailsMap.unknown_error;
+    return (_jsx("div", { className: "min-h-[400px] flex items-center justify-center p-4", children: _jsxs("div", { className: "max-w-md w-full text-center space-y-6", children: [_jsxs("div", { className: "space-y-4 items-center", children: [_jsx(Heading, { level: 2, className: "text-2xl inline-block font-bold", children: titles[type] || "Authentication Error" }), _jsx(Typography, { className: "text-gray-600 dark:text-gray-300 leading-relaxed", children: details?.message })] }), _jsxs("div", { className: "space-y-3 pt-4", children: [_jsx("div", { className: "space-y-2", children: (type === "access_denied" ||
+                                type === "invalid_grant" ||
+                                type === "token_expired") && (_jsx(Button, { onClick: login, className: "w-full capitalize", variant: "default", children: "Sign in again" })) }), _jsx("div", { className: "flex gap-2", children: _jsx(Button, { asChild: true, className: "flex-1", variant: "outline", children: _jsxs(Link, { to: "/", children: [_jsx(HomeIcon, { className: "w-4 h-4 mr-2" }), "Go Home"] }) }) })] }), helpMessages[type] && (_jsx(Typography, { className: "text-sm text-gray-500 dark:text-gray-400", children: helpMessages[type] }))] }) }));
+}
+const titles = {
+    access_denied: "Access Denied",
+    invalid_request: "Invalid Request",
+    unauthorized_client: "Unauthorized Application",
+    unsupported_response_type: "Unsupported Method",
+    invalid_scope: "Invalid Permissions",
+    server_error: "Server Error",
+    temporarily_unavailable: "Service Unavailable",
+    invalid_client: "Invalid Credentials",
+    invalid_grant: "Authentication Expired",
+    unsupported_grant_type: "Unsupported Authentication",
+    invalid_state: "Security Check Failed",
+    missing_code_verifier: "Security Information Missing",
+    network_error: "Network Error",
+    token_expired: "Session Expired",
+    configuration_error: "Configuration Error",
+    unknown_error: "Authentication Failed",
+};
+const helpMessages = {
+    access_denied: "If you changed your mind, you can try signing in again to grant access.",
+    invalid_state: "This error can occur if you have multiple tabs open or if your session was compromised.",
+    missing_code_verifier: "Try clearing your browser's cache and cookies for this site.",
+    network_error: "Check your internet connection and ensure you can access other websites.",
+    server_error: "The issue is on our end. Our team has been notified and is working to fix it.",
+    temporarily_unavailable: "This is usually temporary. Try again in a few minutes.",
+};
+//# sourceMappingURL=OAuthErrorPage.js.map

package/dist/lib/authentication/components/OAuthErrorPage.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"OAuthErrorPage.js","sourceRoot":"","sources":["../../../../src/lib/authentication/components/OAuthErrorPage.tsx"],"names":[],"mappings":";AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AACxC,OAAO,EAAE,IAAI,EAAE,MAAM,cAAc,CAAC;AACpC,OAAO,EAAE,OAAO,EAAE,MAAM,6BAA6B,CAAC;AACtD,OAAO,EAAE,UAAU,EAAE,MAAM,gCAAgC,CAAC;AAC5D,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAC5C,OAAO,EAAE,uBAAuB,EAAE,MAAM,cAAc,CAAC;AACvD,OAAO,EAAE,OAAO,EAAE,MAAM,YAAY,CAAC;AAErC,MAAM,eAAe,GAAwC;IAC3D,eAAe,EAAE;QACf,OAAO,EACL,sEAAsE;KACzE;IACD,mBAAmB,EAAE;QACnB,OAAO,EACL,oFAAoF;KACvF;IACD,aAAa,EAAE;QACb,OAAO,EACL,sFAAsF;KACzF;IACD,yBAAyB,EAAE;QACzB,OAAO,EACL,qEAAqE;KACxE;IACD,aAAa,EAAE;QACb,OAAO,EAAE,gEAAgE;KAC1E;IACD,YAAY,EAAE;QACZ,OAAO,EACL,oFAAoF;KACvF;IACD,uBAAuB,EAAE;QACvB,OAAO,EACL,2FAA2F;KAC9F;IACD,eAAe;IACf,cAAc,EAAE;QACd,OAAO,EAAE,0DAA0D;KACpE;IACD,aAAa,EAAE;QACb,OAAO,EACL,0EAA0E;KAC7E;IACD,sBAAsB,EAAE;QACtB,OAAO,EACL,qEAAqE;KACxE;IACD,gBAAgB;IAChB,aAAa,EAAE;QACb,OAAO,EACL,0GAA0G;KAC7G;IACD,qBAAqB,EAAE;QACrB,OAAO,EACL,gGAAgG;KACnG;IACD,aAAa,EAAE;QACb,OAAO,EACL,6FAA6F;KAChG;IACD,aAAa,EAAE;QACb,OAAO,EAAE,gEAAgE;KAC1E;IACD,mBAAmB,EAAE;QACnB,OAAO,EACL,kFAAkF;KACrF;IACD,aAAa,EAAE;QACb,OAAO,EACL,0FAA0F;KAC7F;CACF,CAAC;AAEF,MAAM,UAAU,cAAc,CAAC,EAAE,KAAK,EAAkB;IACtD,MAAM,EAAE,KAAK,EAAE,GAAG,OAAO,EAAE,CAAC;IAE5B,IAAI,CAAC,CAAC,KAAK,YAAY,uBAAuB,CAAC,EAAE,CAAC;QAChD,MAAM,KAAK,CAAC;IACd,CAAC;IAED,MAAM,UAAU,GAAG,KAAK,CAAC,KAAK,CAAC;IAC/B,MAAM,IAAI,GAAG,UAAU,CAAC,KAAK,CAAC;IAE9B,MAAM,OAAO,GAAG,eAAe,CAAC,IAAI,CAAC,IAAI,eAAe,CAAC,aAAa,CAAC;IAEvE,OAAO,CACL,cAAK,SAAS,EAAC,oDAAoD,YACjE,eAAK,SAAS,EAAC,uCAAuC,aACpD,eAAK,SAAS,EAAC,wBAAwB,aACrC,KAAC,OAAO,IAAC,KAAK,EAAE,CAAC,EAAE,SAAS,EAAC,iCAAiC,YAC3D,MAAM,CAAC,IAAI,CAAC,IAAI,sBAAsB,GAC/B,EAEV,KAAC,UAAU,IAAC,SAAS,EAAC,kDAAkD,YACrE,OAAO,EAAE,OAAO,GACN,IAGT,EAGN,eAAK,SAAS,EAAC,gBAAgB,aAC7B,cAAK,SAAS,EAAC,WAAW,YACvB,CAAC,IAAI,KAAK,eAAe;gCACxB,IAAI,KAAK,eAAe;gCACxB,IAAI,KAAK,eAAe,CAAC,IAAI,CAC7B,KAAC,MAAM,IACL,OAAO,EAAE,KAAK,EACd,SAAS,EAAC,mBAAmB,EAC7B,OAAO,EAAE,SAAS,8BAGX,CACV,GACG,EAEN,cAAK,SAAS,EAAC,YAAY,YACzB,KAAC,MAAM,IAAC,OAAO,QAAC,SAAS,EAAC,QAAQ,EAAC,OAAO,EAAC,SAAS,YAClD,MAAC,IAAI,IAAC,EAAE,EAAC,GAAG,aACV,KAAC,QAAQ,IAAC,SAAS,EAAC,cAAc,GAAG,eAEhC,GACA,GACL,IACF,EAGL,YAAY,CAAC,IAAI,CAAC,IAAI,CACrB,KAAC,UAAU,IAAC,SAAS,EAAC,0CAA0C,YAC7D,YAAY,CAAC,IAAI,CAAC,GACR,CACd,IACG,GACF,CACP,CAAC;AACJ,CAAC;AAED,MAAM,MAAM,GAA2B;IACrC,aAAa,EAAE,eAAe;IAC9B,eAAe,EAAE,iBAAiB;IAClC,mBAAmB,EAAE,0BAA0B;IAC/C,yBAAyB,EAAE,oBAAoB;IAC/C,aAAa,EAAE,qBAAqB;IACpC,YAAY,EAAE,cAAc;IAC5B,uBAAuB,EAAE,qBAAqB;IAC9C,cAAc,EAAE,qBAAqB;IACrC,aAAa,EAAE,wBAAwB;IACvC,sBAAsB,EAAE,4BAA4B;IACpD,aAAa,EAAE,uBAAuB;IACtC,qBAAqB,EAAE,8BAA8B;IACrD,aAAa,EAAE,eAAe;IAC9B,aAAa,EAAE,iBAAiB;IAChC,mBAAmB,EAAE,qBAAqB;IAC1C,aAAa,EAAE,uBAAuB;CACvC,CAAC;AAEF,MAAM,YAAY,GAA2B;IAC3C,aAAa,EACX,yEAAyE;IAC3E,aAAa,EACX,yFAAyF;IAC3F,qBAAqB,EACnB,8DAA8D;IAChE,aAAa,EACX,0EAA0E;IAC5E,YAAY,EACV,+EAA+E;IACjF,uBAAuB,EACrB,wDAAwD;CAC3D,CAAC"}

package/dist/lib/authentication/components/SignIn.js

@@ -1,7 +1,7 @@
 import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
 import { useEffect } from "react";
-import { Link, useSearchParams } from "react-router";
-import { Button } from "zudoku/ui/Button.js";
+import { useSearchParams } from "react-router";
+import { Spinner } from "zudoku/components";
 import { Card, CardContent, CardDescription, CardHeader, CardTitle, } from "zudoku/ui/Card.js";
 import { useZudoku } from "../../components/context/ZudokuContext.js";
 export const SignIn = () => {
@@ -10,8 +10,9 @@ export const SignIn = () => {
     useEffect(() => {
         void context.authentication?.signIn({
             redirectTo: search.get("redirect") ?? undefined,
+            replace: true,
         });
     }, [context.authentication, search]);
-    return (_jsx("div", { className: "flex items-center justify-center mt-8", children: _jsxs(Card, { className: "max-w-md w-full", children: [_jsxs(CardHeader, { children: [_jsx(CardTitle, { className: "text-lg", children: "Sign in" }), _jsx(CardDescription, { children: "You're being redirected to our secure login provider to complete your sign-in process." })] }), _jsx(CardContent, { children: _jsxs("div", { className: "flex flex-col gap-2 justify-center", children: [_jsx(Button, { onClick: () => context.authentication?.signIn(), variant: "default", children: "Login" }), _jsx(Button, { variant: "link", className: "text-muted-foreground", asChild: true, children: _jsx(Link, { to: "/", children: "Go home" }) })] }) })] }) }));
+    return (_jsx("div", { className: "flex items-center justify-center mt-8", children: _jsxs(Card, { className: "max-w-md w-full", children: [_jsxs(CardHeader, { children: [_jsx(CardTitle, { className: "text-lg", children: "Sign in" }), _jsx(CardDescription, { children: "You're being redirected to our secure login provider to complete your sign-in process." })] }), _jsx(CardContent, { children: _jsxs("div", { className: "flex items-center text-sm font-medium gap-2", children: [_jsx(Spinner, {}), " Redirecting..."] }) })] }) }));
 };
 //# sourceMappingURL=SignIn.js.map

package/dist/lib/authentication/components/SignIn.js.map

@@ -1 +1 @@
-{"version":3,"file":"SignIn.js","sourceRoot":"","sources":["../../../../src/lib/authentication/components/SignIn.tsx"],"names":[],"mappings":";AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,OAAO,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AACrD,OAAO,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAC;AAC7C,OAAO,EACL,IAAI,EACJ,WAAW,EACX,eAAe,EACf,UAAU,EACV,SAAS,GACV,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,SAAS,EAAE,MAAM,2CAA2C,CAAC;AAEtE,MAAM,CAAC,MAAM,MAAM,GAAG,GAAG,EAAE;IACzB,MAAM,OAAO,GAAG,SAAS,EAAE,CAAC;IAC5B,MAAM,CAAC,MAAM,CAAC,GAAG,eAAe,EAAE,CAAC;IACnC,SAAS,CAAC,GAAG,EAAE;QACb,KAAK,OAAO,CAAC,cAAc,EAAE,MAAM,CAAC;YAClC,UAAU,EAAE,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,SAAS;SAChD,CAAC,CAAC;IACL,CAAC,EAAE,CAAC,OAAO,CAAC,cAAc,EAAE,MAAM,CAAC,CAAC,CAAC;IAErC,OAAO,CACL,cAAK,SAAS,EAAC,uCAAuC,YACpD,MAAC,IAAI,IAAC,SAAS,EAAC,iBAAiB,aAC/B,MAAC,UAAU,eACT,KAAC,SAAS,IAAC,SAAS,EAAC,SAAS,wBAAoB,EAClD,KAAC,eAAe,yGAGE,IACP,EACb,KAAC,WAAW,cACV,eAAK,SAAS,EAAC,oCAAoC,aACjD,KAAC,MAAM,IACL,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,cAAc,EAAE,MAAM,EAAE,EAC/C,OAAO,EAAC,SAAS,sBAGV,EACT,KAAC,MAAM,IAAC,OAAO,EAAC,MAAM,EAAC,SAAS,EAAC,uBAAuB,EAAC,OAAO,kBAC9D,KAAC,IAAI,IAAC,EAAE,EAAC,GAAG,wBAAe,GACpB,IACL,GACM,IACT,GACH,CACP,CAAC;AACJ,CAAC,CAAC"}
+{"version":3,"file":"SignIn.js","sourceRoot":"","sources":["../../../../src/lib/authentication/components/SignIn.tsx"],"names":[],"mappings":";AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,OAAO,CAAC;AAClC,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAC/C,OAAO,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAC;AAC5C,OAAO,EACL,IAAI,EACJ,WAAW,EACX,eAAe,EACf,UAAU,EACV,SAAS,GACV,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,SAAS,EAAE,MAAM,2CAA2C,CAAC;AAEtE,MAAM,CAAC,MAAM,MAAM,GAAG,GAAG,EAAE;IACzB,MAAM,OAAO,GAAG,SAAS,EAAE,CAAC;IAC5B,MAAM,CAAC,MAAM,CAAC,GAAG,eAAe,EAAE,CAAC;IACnC,SAAS,CAAC,GAAG,EAAE;QACb,KAAK,OAAO,CAAC,cAAc,EAAE,MAAM,CAAC;YAClC,UAAU,EAAE,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,SAAS;YAC/C,OAAO,EAAE,IAAI;SACd,CAAC,CAAC;IACL,CAAC,EAAE,CAAC,OAAO,CAAC,cAAc,EAAE,MAAM,CAAC,CAAC,CAAC;IAErC,OAAO,CACL,cAAK,SAAS,EAAC,uCAAuC,YACpD,MAAC,IAAI,IAAC,SAAS,EAAC,iBAAiB,aAC/B,MAAC,UAAU,eACT,KAAC,SAAS,IAAC,SAAS,EAAC,SAAS,wBAAoB,EAClD,KAAC,eAAe,yGAGE,IACP,EACb,KAAC,WAAW,cACV,eAAK,SAAS,EAAC,6CAA6C,aAC1D,KAAC,OAAO,KAAG,uBACP,GACM,IACT,GACH,CACP,CAAC;AACJ,CAAC,CAAC"}

package/dist/lib/authentication/errors.d.ts

@@ -1,15 +1,9 @@
+import type { OAuth2Error } from "oauth4webapi";
+import { ZudokuError, type ZudokuErrorOptions } from "../util/invariant.js";
 export declare class AuthorizationError extends Error {
 }
-interface OAuthError {
-    readonly error: string;
-    readonly error_description?: string;
-    readonly error_uri?: string;
-    readonly algs?: string;
-    readonly scope?: string;
-    readonly [parameter: string]: any | undefined;
+export declare class OAuthAuthorizationError extends ZudokuError {
+    error: OAuth2Error;
+    constructor(message: string, error: OAuth2Error, options?: ZudokuErrorOptions);
 }
-export declare class OAuthAuthorizationError extends AuthorizationError {
-    error: OAuthError;
-    constructor(message: string, error: OAuthError, options?: ErrorOptions);
-}
-export {};
+export type OAuthErrorType = "invalid_request" | "unauthorized_client" | "access_denied" | "unsupported_response_type" | "invalid_scope" | "server_error" | "temporarily_unavailable" | "invalid_client" | "invalid_grant" | "unsupported_grant_type" | "invalid_state" | "missing_code_verifier" | "network_error" | "token_expired" | "configuration_error" | "unknown_error";

package/dist/lib/authentication/errors.js

@@ -1,6 +1,7 @@
+import { ZudokuError } from "../util/invariant.js";
 export class AuthorizationError extends Error {
 }
-export class OAuthAuthorizationError extends AuthorizationError {
+export class OAuthAuthorizationError extends ZudokuError {
     error;
     constructor(message, error, options) {
         super(message, options);

package/dist/lib/authentication/errors.js.map

@@ -1 +1 @@
-{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../../src/lib/authentication/errors.ts"],"names":[],"mappings":"AAAA,MAAM,OAAO,kBAAmB,SAAQ,KAAK;CAAG;AAYhD,MAAM,OAAO,uBAAwB,SAAQ,kBAAkB;IAGpD;IAFT,YACE,OAAe,EACR,KAAiB,EACxB,OAAsB;QAEtB,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAHjB,UAAK,GAAL,KAAK,CAAY;IAI1B,CAAC;CACF"}
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../../src/lib/authentication/errors.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,WAAW,EAA2B,MAAM,sBAAsB,CAAC;AAE5E,MAAM,OAAO,kBAAmB,SAAQ,KAAK;CAAG;AAEhD,MAAM,OAAO,uBAAwB,SAAQ,WAAW;IAG7C;IAFT,YACE,OAAe,EACR,KAAkB,EACzB,OAA4B;QAE5B,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAHjB,UAAK,GAAL,KAAK,CAAa;IAI3B,CAAC;CACF"}

package/dist/lib/authentication/hook.d.ts

@@ -1,3 +1,4 @@
+export type UseAuthReturn = ReturnType<typeof useAuth>;
 export declare const useAuth: () => {
     login: () => Promise<void>;
     logout: () => Promise<void>;
@@ -6,5 +7,11 @@ export declare const useAuth: () => {
     isPending: boolean;
     profile: import("./state.js").UserProfile | null;
     providerData: unknown;
+    setAuthenticationPending: () => void;
+    setLoggedOut: () => void;
+    setLoggedIn: ({ profile, providerData, }: {
+        profile: import("./state.js").UserProfile;
+        providerData: unknown;
+    }) => void;
     isAuthEnabled: boolean;
 };

package/dist/lib/authentication/hook.js.map

@@ -1 +1 @@
-{"version":3,"file":"hook.js","sourceRoot":"","sources":["../../../src/lib/authentication/hook.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,wCAAwC,CAAC;AACnE,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAE1C,MAAM,CAAC,MAAM,OAAO,GAAG,GAAG,EAAE;IAC1B,MAAM,EAAE,cAAc,EAAE,GAAG,SAAS,EAAE,CAAC;IACvC,MAAM,SAAS,GAAG,YAAY,EAAE,CAAC;IACjC,MAAM,aAAa,GAAG,OAAO,cAAc,KAAK,WAAW,CAAC;IAE5D,OAAO;QACL,aAAa;QACb,GAAG,SAAS;QAEZ,KAAK,EAAE,KAAK,IAAI,EAAE;YAChB,IAAI,CAAC,aAAa,EAAE,CAAC;gBACnB,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;YACpD,CAAC;YACD,mCAAmC;YACnC,MAAM,cAAc,CAAC,MAAM,CAAC;gBAC1B,UAAU,EAAE,MAAM,CAAC,QAAQ,CAAC,IAAI;aACjC,CAAC,CAAC;QACL,CAAC;QAED,MAAM,EAAE,KAAK,IAAI,EAAE;YACjB,IAAI,CAAC,aAAa,EAAE,CAAC;gBACnB,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;YACpD,CAAC;YACD,mCAAmC;YACnC,MAAM,cAAc,CAAC,OAAO,EAAE,CAAC;YAE/B,mBAAmB;YACnB,MAAM,CAAC,QAAQ,CAAC,IAAI,GAAG,GAAG,CAAC;QAC7B,CAAC;QAED,MAAM,EAAE,KAAK,IAAI,EAAE;YACjB,IAAI,CAAC,aAAa,EAAE,CAAC;gBACnB,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;YACpD,CAAC;YACD,MAAM,cAAc,CAAC,MAAM,CAAC;gBAC1B,UAAU,EAAE,MAAM,CAAC,QAAQ,CAAC,IAAI;aACjC,CAAC,CAAC;QACL,CAAC;KACF,CAAC;AACJ,CAAC,CAAC"}
+{"version":3,"file":"hook.js","sourceRoot":"","sources":["../../../src/lib/authentication/hook.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,wCAAwC,CAAC;AACnE,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAI1C,MAAM,CAAC,MAAM,OAAO,GAAG,GAAG,EAAE;IAC1B,MAAM,EAAE,cAAc,EAAE,GAAG,SAAS,EAAE,CAAC;IACvC,MAAM,SAAS,GAAG,YAAY,EAAE,CAAC;IACjC,MAAM,aAAa,GAAG,OAAO,cAAc,KAAK,WAAW,CAAC;IAE5D,OAAO;QACL,aAAa;QACb,GAAG,SAAS;QAEZ,KAAK,EAAE,KAAK,IAAI,EAAE;YAChB,IAAI,CAAC,aAAa,EAAE,CAAC;gBACnB,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;YACpD,CAAC;YACD,mCAAmC;YACnC,MAAM,cAAc,CAAC,MAAM,CAAC;gBAC1B,UAAU,EAAE,MAAM,CAAC,QAAQ,CAAC,IAAI;aACjC,CAAC,CAAC;QACL,CAAC;QAED,MAAM,EAAE,KAAK,IAAI,EAAE;YACjB,IAAI,CAAC,aAAa,EAAE,CAAC;gBACnB,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;YACpD,CAAC;YACD,mCAAmC;YACnC,MAAM,cAAc,CAAC,OAAO,EAAE,CAAC;YAE/B,mBAAmB;YACnB,MAAM,CAAC,QAAQ,CAAC,IAAI,GAAG,GAAG,CAAC;QAC7B,CAAC;QAED,MAAM,EAAE,KAAK,IAAI,EAAE;YACjB,IAAI,CAAC,aAAa,EAAE,CAAC;gBACnB,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;YACpD,CAAC;YACD,MAAM,cAAc,CAAC,MAAM,CAAC;gBAC1B,UAAU,EAAE,MAAM,CAAC,QAAQ,CAAC,IAAI;aACjC,CAAC,CAAC;QACL,CAAC;KACF,CAAC;AACJ,CAAC,CAAC"}

package/dist/lib/authentication/providers/auth0.js

@@ -5,7 +5,7 @@ class Auth0AuthenticationProvider extends OpenIDAuthenticationProvider {
         super({
             ...config,
             type: "openid",
-            issuer: `https://${config.domain}`,
+            issuer: `https://${config.domain}/`,
             clientId: config.clientId,
             audience: config.audience,
             scopes: config.scopes,
@@ -27,7 +27,7 @@ class Auth0AuthenticationProvider extends OpenIDAuthenticationProvider {
             providerData: null,
         });
         const redirectUrl = new URL(window.location.origin);
-        redirectUrl.pathname = this.logoutRedirectUrlPath;
+        redirectUrl.pathname = this.redirectToAfterSignOut;
         // SEE: https://auth0.com/docs/authenticate/login/logout/log-users-out-of-auth0
         // For Auth0 tenants created on or after 14 November 2023, RP-Initiated
         // Logout End Session Endpoint Discovery is enabled by default.

package/dist/lib/authentication/providers/auth0.js.map

@@ -1 +1 @@
-{"version":3,"file":"auth0.js","sourceRoot":"","sources":["../../../../src/lib/authentication/providers/auth0.tsx"],"names":[],"mappings":"AAEA,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EAAE,4BAA4B,EAAE,MAAM,aAAa,CAAC;AAE3D,MAAM,2BAA4B,SAAQ,4BAA4B;IACpE,YAAY,MAAiC;QAC3C,KAAK,CAAC;YACJ,GAAG,MAAM;YACT,IAAI,EAAE,QAAQ;YACd,MAAM,EAAE,WAAW,MAAM,CAAC,MAAM,EAAE;YAClC,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,MAAM,EAAE,MAAM,CAAC,MAAM;SACtB,CAAC,CAAC;IACL,CAAC;IAED,kBAAkB,GAAG,KAAK,EACxB,GAAQ,EACR,EAAE,QAAQ,EAAyB,EACnC,EAAE;QACF,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QACxC,IAAI,QAAQ,EAAE,CAAC;YACb,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,aAAa,EAAE,QAAQ,CAAC,CAAC;QAChD,CAAC;IACH,CAAC,CAAC;IAEF,OAAO,GAAG,KAAK,IAAmB,EAAE;QAClC,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,aAAa,EAAE,CAAC;QACtC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,cAAc,EAAE,CAAC;QAE5C,YAAY,CAAC,QAAQ,CAAC;YACpB,eAAe,EAAE,KAAK;YACtB,SAAS,EAAE,KAAK;YAChB,OAAO,EAAE,IAAI;YACb,YAAY,EAAE,IAAI;SACnB,CAAC,CAAC;QAEH,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACpD,WAAW,CAAC,QAAQ,GAAG,IAAI,CAAC,qBAAqB,CAAC;QAElD,+EAA+E;QAC/E,uEAAuE;QACvE,+DAA+D;QAC/D,wDAAwD;QAExD,uEAAuE;QACvE,sEAAsE;QACtE,IAAI,EAAE,CAAC,oBAAoB,EAAE,CAAC;YAC5B,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,EAAE,CAAC,oBAAoB,CAAC,CAAC;YACnD,IAAI,OAAO,EAAE,CAAC;gBACZ,SAAS,CAAC,YAAY,CAAC,GAAG,CAAC,eAAe,EAAE,OAAO,CAAC,CAAC;YACvD,CAAC;YACD,SAAS,CAAC,YAAY,CAAC,GAAG,CACxB,0BAA0B,EAC1B,WAAW,CAAC,QAAQ,EAAE,CACvB,CAAC;YAEF,+CAA+C;QACjD,CAAC;aAAM,CAAC;YACN,MAAM,SAAS,GAAG,IAAI,GAAG,CACvB,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,cAAc,CAChD,CAAC;YACF,+CAA+C;QACjD,CAAC;IACH,CAAC,CAAC;CACH;AAED,MAAM,SAAS,GAEX,CAAC,OAAO,EAAE,EAAE,CAAC,IAAI,2BAA2B,CAAC,OAAO,CAAC,CAAC;AAE1D,eAAe,SAAS,CAAC"}
+{"version":3,"file":"auth0.js","sourceRoot":"","sources":["../../../../src/lib/authentication/providers/auth0.tsx"],"names":[],"mappings":"AAKA,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EAAE,4BAA4B,EAAE,MAAM,aAAa,CAAC;AAE3D,MAAM,2BACJ,SAAQ,4BAA4B;IAGpC,YAAY,MAAiC;QAC3C,KAAK,CAAC;YACJ,GAAG,MAAM;YACT,IAAI,EAAE,QAAQ;YACd,MAAM,EAAE,WAAW,MAAM,CAAC,MAAM,GAAG;YACnC,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,MAAM,EAAE,MAAM,CAAC,MAAM;SACtB,CAAC,CAAC;IACL,CAAC;IAED,kBAAkB,GAAG,KAAK,EACxB,GAAQ,EACR,EAAE,QAAQ,EAAyB,EACnC,EAAE;QACF,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QACxC,IAAI,QAAQ,EAAE,CAAC;YACb,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,aAAa,EAAE,QAAQ,CAAC,CAAC;QAChD,CAAC;IACH,CAAC,CAAC;IAEF,OAAO,GAAG,KAAK,IAAmB,EAAE;QAClC,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,aAAa,EAAE,CAAC;QACtC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,cAAc,EAAE,CAAC;QAE5C,YAAY,CAAC,QAAQ,CAAC;YACpB,eAAe,EAAE,KAAK;YACtB,SAAS,EAAE,KAAK;YAChB,OAAO,EAAE,IAAI;YACb,YAAY,EAAE,IAAI;SACnB,CAAC,CAAC;QAEH,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACpD,WAAW,CAAC,QAAQ,GAAG,IAAI,CAAC,sBAAsB,CAAC;QAEnD,+EAA+E;QAC/E,uEAAuE;QACvE,+DAA+D;QAC/D,wDAAwD;QAExD,uEAAuE;QACvE,sEAAsE;QACtE,IAAI,EAAE,CAAC,oBAAoB,EAAE,CAAC;YAC5B,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,EAAE,CAAC,oBAAoB,CAAC,CAAC;YACnD,IAAI,OAAO,EAAE,CAAC;gBACZ,SAAS,CAAC,YAAY,CAAC,GAAG,CAAC,eAAe,EAAE,OAAO,CAAC,CAAC;YACvD,CAAC;YACD,SAAS,CAAC,YAAY,CAAC,GAAG,CACxB,0BAA0B,EAC1B,WAAW,CAAC,QAAQ,EAAE,CACvB,CAAC;YAEF,+CAA+C;QACjD,CAAC;aAAM,CAAC;YACN,MAAM,SAAS,GAAG,IAAI,GAAG,CACvB,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,cAAc,CAChD,CAAC;YACF,+CAA+C;QACjD,CAAC;IACH,CAAC,CAAC;CACH;AAED,MAAM,SAAS,GAEX,CAAC,OAAO,EAAE,EAAE,CAAC,IAAI,2BAA2B,CAAC,OAAO,CAAC,CAAC;AAE1D,eAAe,SAAS,CAAC"}

package/dist/lib/authentication/providers/azureb2c.d.ts

@@ -0,0 +1,28 @@
+import { type AzureB2CAuthenticationConfig } from "../../../config/config.js";
+import { type AuthenticationPlugin, type AuthenticationProviderInitializer } from "../authentication.js";
+import { CoreAuthenticationPlugin } from "../AuthenticationPlugin.js";
+export declare class AzureB2CAuthPlugin extends CoreAuthenticationPlugin implements AuthenticationPlugin {
+    private msalInstance;
+    private readonly scopes;
+    private readonly redirectToAfterSignUp?;
+    private readonly redirectToAfterSignIn?;
+    private readonly redirectToAfterSignOut;
+    constructor({ clientId, tenantName, policyName, scopes, redirectToAfterSignUp, redirectToAfterSignIn, redirectToAfterSignOut, basePath, }: AzureB2CAuthenticationConfig);
+    private handleAuthResponse;
+    signUp({ redirectTo }?: {
+        redirectTo?: string;
+    }): Promise<void>;
+    signIn({ redirectTo }?: {
+        redirectTo?: string;
+    }): Promise<void>;
+    getAccessToken(): Promise<string>;
+    signRequest: (request: Request) => Promise<Request>;
+    signOut: () => Promise<void>;
+    handleCallback: () => Promise<string>;
+    getRoutes(): {
+        path: string;
+        element: import("react/jsx-runtime").JSX.Element;
+    }[];
+}
+declare const azureB2CAuth: AuthenticationProviderInitializer<AzureB2CAuthenticationConfig>;
+export default azureB2CAuth;

package/dist/lib/authentication/providers/azureb2c.js

@@ -0,0 +1,147 @@
+import { jsx as _jsx } from "react/jsx-runtime";
+import { EventType, PublicClientApplication } from "@azure/msal-browser";
+import { ErrorBoundary } from "react-error-boundary";
+import { ClientOnly } from "../../components/ClientOnly.js";
+import { joinUrl } from "../../util/joinUrl.js";
+import { CoreAuthenticationPlugin } from "../AuthenticationPlugin.js";
+import { CallbackHandler } from "../components/CallbackHandler.js";
+import { OAuthErrorPage } from "../components/OAuthErrorPage.js";
+import { AuthorizationError } from "../errors.js";
+import { useAuthState } from "../state.js";
+const AZUREB2C_CALLBACK_PATH = "/oauth/callback";
+export class AzureB2CAuthPlugin extends CoreAuthenticationPlugin {
+    msalInstance;
+    scopes;
+    redirectToAfterSignUp;
+    redirectToAfterSignIn;
+    redirectToAfterSignOut;
+    constructor({ clientId, tenantName, policyName, scopes, redirectToAfterSignUp, redirectToAfterSignIn, redirectToAfterSignOut = "/", basePath = "", }) {
+        super();
+        this.scopes = scopes ?? ["openid", "profile", "email"];
+        this.redirectToAfterSignUp = redirectToAfterSignUp;
+        this.redirectToAfterSignIn = redirectToAfterSignIn;
+        this.redirectToAfterSignOut = redirectToAfterSignOut;
+        const authority = `https://${tenantName}.b2clogin.com/${tenantName}.onmicrosoft.com/${policyName}`;
+        const redirectUri = joinUrl(basePath, AZUREB2C_CALLBACK_PATH);
+        this.msalInstance = new PublicClientApplication({
+            auth: {
+                clientId,
+                authority,
+                redirectUri,
+                knownAuthorities: [`${tenantName}.b2clogin.com`],
+            },
+            cache: {
+                cacheLocation: "sessionStorage",
+                storeAuthStateInCookie: false,
+            },
+        });
+        void this.msalInstance.initialize().then(async () => {
+            void this.msalInstance
+                .handleRedirectPromise()
+                .then((response) => {
+                if (response) {
+                    this.handleAuthResponse(response);
+                }
+            });
+            // Add event callback
+            void this.msalInstance.addEventCallback((event) => {
+                if (event.eventType === EventType.LOGIN_SUCCESS) {
+                    this.handleAuthResponse(event.payload);
+                }
+            });
+        });
+    }
+    handleAuthResponse(response) {
+        const { accessToken, idToken, scopes, account } = response;
+        if (!account) {
+            throw new AuthorizationError("No account information in response");
+        }
+        // Get the user's name from Azure B2C claims
+        const name = [account.idTokenClaims?.given_name, account.idTokenClaims?.family_name]
+            .filter(Boolean)
+            .join(" ") || account.username;
+        useAuthState.getState().setLoggedIn({
+            providerData: {
+                accessToken,
+                idToken,
+                scopes,
+                account,
+            },
+            profile: {
+                sub: account.localAccountId,
+                email: account.username,
+                name,
+                emailVerified: true, // Azure B2C emails are verified
+                pictureUrl: undefined, // Azure B2C doesn't provide profile pictures by default
+            },
+        });
+    }
+    async signUp({ redirectTo } = {}) {
+        const redirectUri = this.redirectToAfterSignUp ?? redirectTo ?? "/";
+        sessionStorage.setItem("redirect-to", redirectUri);
+        await this.msalInstance.loginRedirect({
+            scopes: this.scopes,
+            prompt: "select_account",
+        });
+    }
+    async signIn({ redirectTo } = {}) {
+        const redirectUri = this.redirectToAfterSignIn ?? redirectTo ?? "/";
+        sessionStorage.setItem("redirect-to", redirectUri);
+        await this.msalInstance.loginRedirect({
+            scopes: this.scopes,
+        });
+    }
+    async getAccessToken() {
+        const account = this.msalInstance.getAllAccounts()[0];
+        if (!account) {
+            throw new AuthorizationError("No active account");
+        }
+        try {
+            const response = await this.msalInstance.acquireTokenSilent({
+                scopes: this.scopes,
+                account,
+            });
+            return response.accessToken;
+        }
+        catch {
+            // If silent token acquisition fails, try interactive
+            await this.msalInstance.acquireTokenRedirect({
+                scopes: this.scopes,
+                account,
+            });
+            throw new AuthorizationError("Token acquisition failed after interactive attempt");
+        }
+    }
+    signRequest = async (request) => {
+        const accessToken = await this.getAccessToken();
+        request.headers.set("Authorization", `Bearer ${accessToken}`);
+        return request;
+    };
+    signOut = async () => {
+        const account = this.msalInstance.getAllAccounts()[0];
+        if (account) {
+            await this.msalInstance.logoutRedirect({
+                account,
+                postLogoutRedirectUri: window.location.origin + this.redirectToAfterSignOut,
+            });
+        }
+        useAuthState.getState().setLoggedOut();
+    };
+    handleCallback = async () => {
+        const redirectTo = sessionStorage.getItem("redirect-to") ?? "/";
+        sessionStorage.removeItem("redirect-to");
+        return redirectTo;
+    };
+    getRoutes() {
+        return [
+            ...super.getRoutes(),
+            {
+                path: AZUREB2C_CALLBACK_PATH,
+                element: (_jsx(ClientOnly, { children: _jsx(ErrorBoundary, { fallbackRender: ({ error }) => _jsx(OAuthErrorPage, { error: error }), children: _jsx(CallbackHandler, { handleCallback: this.handleCallback }) }) })),
+            },
+        ];
+    }
+}
+const azureB2CAuth = (options) => new AzureB2CAuthPlugin(options);
+export default azureB2CAuth;
+//# sourceMappingURL=azureb2c.js.map

package/dist/lib/authentication/providers/azureb2c.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"azureb2c.js","sourceRoot":"","sources":["../../../../src/lib/authentication/providers/azureb2c.tsx"],"names":[],"mappings":";AACA,OAAO,EAAE,SAAS,EAAE,uBAAuB,EAAE,MAAM,qBAAqB,CAAC;AACzE,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAErD,OAAO,EAAE,UAAU,EAAE,MAAM,gCAAgC,CAAC;AAC5D,OAAO,EAAE,OAAO,EAAE,MAAM,uBAAuB,CAAC;AAKhD,OAAO,EAAE,wBAAwB,EAAE,MAAM,4BAA4B,CAAC;AACtE,OAAO,EAAE,eAAe,EAAE,MAAM,kCAAkC,CAAC;AACnE,OAAO,EAAE,cAAc,EAAE,MAAM,iCAAiC,CAAC;AACjE,OAAO,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAClD,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAE3C,MAAM,sBAAsB,GAAG,iBAAiB,CAAC;AAEjD,MAAM,OAAO,kBACX,SAAQ,wBAAwB;IAGxB,YAAY,CAA0B;IAC7B,MAAM,CAAW;IACjB,qBAAqB,CAAU;IAC/B,qBAAqB,CAAU;IAC/B,sBAAsB,CAAS;IAEhD,YAAY,EACV,QAAQ,EACR,UAAU,EACV,UAAU,EACV,MAAM,EACN,qBAAqB,EACrB,qBAAqB,EACrB,sBAAsB,GAAG,GAAG,EAC5B,QAAQ,GAAG,EAAE,GACgB;QAC7B,KAAK,EAAE,CAAC;QACR,IAAI,CAAC,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;QACvD,IAAI,CAAC,qBAAqB,GAAG,qBAAqB,CAAC;QACnD,IAAI,CAAC,qBAAqB,GAAG,qBAAqB,CAAC;QACnD,IAAI,CAAC,sBAAsB,GAAG,sBAAsB,CAAC;QAErD,MAAM,SAAS,GAAG,WAAW,UAAU,iBAAiB,UAAU,oBAAoB,UAAU,EAAE,CAAC;QACnG,MAAM,WAAW,GAAG,OAAO,CAAC,QAAQ,EAAE,sBAAsB,CAAC,CAAC;QAE9D,IAAI,CAAC,YAAY,GAAG,IAAI,uBAAuB,CAAC;YAC9C,IAAI,EAAE;gBACJ,QAAQ;gBACR,SAAS;gBACT,WAAW;gBACX,gBAAgB,EAAE,CAAC,GAAG,UAAU,eAAe,CAAC;aACjD;YACD,KAAK,EAAE;gBACL,aAAa,EAAE,gBAAgB;gBAC/B,sBAAsB,EAAE,KAAK;aAC9B;SACF,CAAC,CAAC;QAEH,KAAK,IAAI,CAAC,YAAY,CAAC,UAAU,EAAE,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE;YAClD,KAAK,IAAI,CAAC,YAAY;iBACnB,qBAAqB,EAAE;iBACvB,IAAI,CAAC,CAAC,QAAqC,EAAE,EAAE;gBAC9C,IAAI,QAAQ,EAAE,CAAC;oBACb,IAAI,CAAC,kBAAkB,CAAC,QAAQ,CAAC,CAAC;gBACpC,CAAC;YACH,CAAC,CAAC,CAAC;YAEL,qBAAqB;YACrB,KAAK,IAAI,CAAC,YAAY,CAAC,gBAAgB,CAAC,CAAC,KAAmB,EAAE,EAAE;gBAC9D,IAAI,KAAK,CAAC,SAAS,KAAK,SAAS,CAAC,aAAa,EAAE,CAAC;oBAChD,IAAI,CAAC,kBAAkB,CAAC,KAAK,CAAC,OAA+B,CAAC,CAAC;gBACjE,CAAC;YACH,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;IAEO,kBAAkB,CAAC,QAA8B;QACvD,MAAM,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,QAAQ,CAAC;QAE3D,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,IAAI,kBAAkB,CAAC,oCAAoC,CAAC,CAAC;QACrE,CAAC;QAED,4CAA4C;QAC5C,MAAM,IAAI,GACR,CAAC,OAAO,CAAC,aAAa,EAAE,UAAU,EAAE,OAAO,CAAC,aAAa,EAAE,WAAW,CAAC;aACpE,MAAM,CAAC,OAAO,CAAC;aACf,IAAI,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC;QAEnC,YAAY,CAAC,QAAQ,EAAE,CAAC,WAAW,CAAC;YAClC,YAAY,EAAE;gBACZ,WAAW;gBACX,OAAO;gBACP,MAAM;gBACN,OAAO;aACR;YACD,OAAO,EAAE;gBACP,GAAG,EAAE,OAAO,CAAC,cAAc;gBAC3B,KAAK,EAAE,OAAO,CAAC,QAAQ;gBACvB,IAAI;gBACJ,aAAa,EAAE,IAAI,EAAE,gCAAgC;gBACrD,UAAU,EAAE,SAAS,EAAE,wDAAwD;aAChF;SACF,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,EAAE,UAAU,KAA8B,EAAE;QACvD,MAAM,WAAW,GAAG,IAAI,CAAC,qBAAqB,IAAI,UAAU,IAAI,GAAG,CAAC;QACpE,cAAc,CAAC,OAAO,CAAC,aAAa,EAAE,WAAW,CAAC,CAAC;QAEnD,MAAM,IAAI,CAAC,YAAY,CAAC,aAAa,CAAC;YACpC,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,MAAM,EAAE,gBAAgB;SACzB,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,EAAE,UAAU,KAA8B,EAAE;QACvD,MAAM,WAAW,GAAG,IAAI,CAAC,qBAAqB,IAAI,UAAU,IAAI,GAAG,CAAC;QACpE,cAAc,CAAC,OAAO,CAAC,aAAa,EAAE,WAAW,CAAC,CAAC;QAEnD,MAAM,IAAI,CAAC,YAAY,CAAC,aAAa,CAAC;YACpC,MAAM,EAAE,IAAI,CAAC,MAAM;SACpB,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,cAAc;QAClB,MAAM,OAAO,GAAG,IAAI,CAAC,YAAY,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,CAAC;QACtD,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,IAAI,kBAAkB,CAAC,mBAAmB,CAAC,CAAC;QACpD,CAAC;QAED,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,kBAAkB,CAAC;gBAC1D,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,OAAO;aACR,CAAC,CAAC;YACH,OAAO,QAAQ,CAAC,WAAW,CAAC;QAC9B,CAAC;QAAC,MAAM,CAAC;YACP,qDAAqD;YACrD,MAAM,IAAI,CAAC,YAAY,CAAC,oBAAoB,CAAC;gBAC3C,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,OAAO;aACR,CAAC,CAAC;YAEH,MAAM,IAAI,kBAAkB,CAC1B,oDAAoD,CACrD,CAAC;QACJ,CAAC;IACH,CAAC;IAED,WAAW,GAAG,KAAK,EAAE,OAAgB,EAAoB,EAAE;QACzD,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,cAAc,EAAE,CAAC;QAChD,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,UAAU,WAAW,EAAE,CAAC,CAAC;QAC9D,OAAO,OAAO,CAAC;IACjB,CAAC,CAAC;IAEF,OAAO,GAAG,KAAK,IAAI,EAAE;QACnB,MAAM,OAAO,GAAG,IAAI,CAAC,YAAY,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,CAAC;QACtD,IAAI,OAAO,EAAE,CAAC;YACZ,MAAM,IAAI,CAAC,YAAY,CAAC,cAAc,CAAC;gBACrC,OAAO;gBACP,qBAAqB,EACnB,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG,IAAI,CAAC,sBAAsB;aACvD,CAAC,CAAC;QACL,CAAC;QAED,YAAY,CAAC,QAAQ,EAAE,CAAC,YAAY,EAAE,CAAC;IACzC,CAAC,CAAC;IAEF,cAAc,GAAG,KAAK,IAAI,EAAE;QAC1B,MAAM,UAAU,GAAG,cAAc,CAAC,OAAO,CAAC,aAAa,CAAC,IAAI,GAAG,CAAC;QAChE,cAAc,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;QACzC,OAAO,UAAU,CAAC;IACpB,CAAC,CAAC;IAEF,SAAS;QACP,OAAO;YACL,GAAG,KAAK,CAAC,SAAS,EAAE;YACpB;gBACE,IAAI,EAAE,sBAAsB;gBAC5B,OAAO,EAAE,CACP,KAAC,UAAU,cACT,KAAC,aAAa,IACZ,cAAc,EAAE,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,KAAC,cAAc,IAAC,KAAK,EAAE,KAAK,GAAI,YAE/D,KAAC,eAAe,IAAC,cAAc,EAAE,IAAI,CAAC,cAAc,GAAI,GAC1C,GACL,CACd;aACF;SACF,CAAC;IACJ,CAAC;CACF;AAED,MAAM,YAAY,GAEd,CAAC,OAAO,EAAE,EAAE,CAAC,IAAI,kBAAkB,CAAC,OAAO,CAAC,CAAC;AAEjD,eAAe,YAAY,CAAC"}