zudoku 0.0.0-f9d5b02 → 0.0.0-f9e3b34

package/dist/lib/MissingIcon.js

@@ -0,0 +1,7 @@
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+import { CircleDashed } from "lucide-react";
+import { Tooltip, TooltipContent, TooltipProvider, TooltipTrigger, } from "./ui/Tooltip.js";
+export const MissingIcon = (props) => {
+    return (_jsx(TooltipProvider, { children: _jsxs(Tooltip, { children: [_jsx(TooltipTrigger, { className: "text-red-500", children: _jsx(CircleDashed, { ...props }) }), _jsx(TooltipContent, { children: "Icon not found, see: https://lucide.dev/icons/" })] }) }));
+};
+//# sourceMappingURL=MissingIcon.js.map

package/dist/lib/MissingIcon.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"MissingIcon.js","sourceRoot":"","sources":["../../src/lib/MissingIcon.tsx"],"names":[],"mappings":";AAAA,OAAO,EAAE,YAAY,EAAe,MAAM,cAAc,CAAC;AACzD,OAAO,EACL,OAAO,EACP,cAAc,EACd,eAAe,EACf,cAAc,GACf,MAAM,iBAAiB,CAAC;AAEzB,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,KAAkB,EAAE,EAAE;IAChD,OAAO,CACL,KAAC,eAAe,cACd,MAAC,OAAO,eACN,KAAC,cAAc,IAAC,SAAS,EAAC,cAAc,YACtC,KAAC,YAAY,OAAK,KAAK,GAAI,GACZ,EACjB,KAAC,cAAc,iEAEE,IACT,GACM,CACnB,CAAC;AACJ,CAAC,CAAC"}

package/dist/lib/auth/issuer.d.ts

@@ -0,0 +1,2 @@
+import type { ZudokuConfig } from "../../config/validators/validate.js";
+export declare const getIssuer: (config: ZudokuConfig) => Promise<string | undefined>;

package/dist/lib/auth/issuer.js

@@ -0,0 +1,37 @@
+import invariant from "../util/invariant.js";
+export const getIssuer = async (config) => {
+    switch (config.authentication?.type) {
+        case "clerk": {
+            const frontendApiEncoded = config.authentication.clerkPubKey
+                .split("_")
+                .at(-1);
+            invariant(frontendApiEncoded, "Clerk public key is invalid");
+            const frontendApiParts = atob(frontendApiEncoded).split("$");
+            if (frontendApiParts.length !== 2) {
+                throw new Error("Clerk public key is invalid");
+            }
+            const frontendApi = frontendApiParts.at(0);
+            invariant(frontendApi, "Clerk public key is invalid");
+            return `https://${frontendApi}`;
+        }
+        case "auth0": {
+            return `https://${config.authentication.domain}/`;
+        }
+        case "openid": {
+            return config.authentication.issuer;
+        }
+        case "supabase": {
+            return config.authentication.supabaseUrl;
+        }
+        case "azureb2c": {
+            return config.authentication.issuer;
+        }
+        case undefined: {
+            return undefined;
+        }
+        default: {
+            throw new Error(`Unsupported authentication type`);
+        }
+    }
+};
+//# sourceMappingURL=issuer.js.map

package/dist/lib/auth/issuer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"issuer.js","sourceRoot":"","sources":["../../../src/lib/auth/issuer.ts"],"names":[],"mappings":"AACA,OAAO,SAAS,MAAM,sBAAsB,CAAC;AAE7C,MAAM,CAAC,MAAM,SAAS,GAAG,KAAK,EAAE,MAAoB,EAAE,EAAE;IACtD,QAAQ,MAAM,CAAC,cAAc,EAAE,IAAI,EAAE,CAAC;QACpC,KAAK,OAAO,CAAC,CAAC,CAAC;YACb,MAAM,kBAAkB,GAAG,MAAM,CAAC,cAAc,CAAC,WAAW;iBACzD,KAAK,CAAC,GAAG,CAAC;iBACV,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;YACV,SAAS,CAAC,kBAAkB,EAAE,6BAA6B,CAAC,CAAC;YAC7D,MAAM,gBAAgB,GAAG,IAAI,CAAC,kBAAkB,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAE7D,IAAI,gBAAgB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAClC,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;YACjD,CAAC;YAED,MAAM,WAAW,GAAG,gBAAgB,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;YAC3C,SAAS,CAAC,WAAW,EAAE,6BAA6B,CAAC,CAAC;YAEtD,OAAO,WAAW,WAAW,EAAE,CAAC;QAClC,CAAC;QACD,KAAK,OAAO,CAAC,CAAC,CAAC;YACb,OAAO,WAAW,MAAM,CAAC,cAAc,CAAC,MAAM,GAAG,CAAC;QACpD,CAAC;QACD,KAAK,QAAQ,CAAC,CAAC,CAAC;YACd,OAAO,MAAM,CAAC,cAAc,CAAC,MAAM,CAAC;QACtC,CAAC;QACD,KAAK,UAAU,CAAC,CAAC,CAAC;YAChB,OAAO,MAAM,CAAC,cAAc,CAAC,WAAW,CAAC;QAC3C,CAAC;QACD,KAAK,UAAU,CAAC,CAAC,CAAC;YAChB,OAAO,MAAM,CAAC,cAAc,CAAC,MAAM,CAAC;QACtC,CAAC;QACD,KAAK,SAAS,CAAC,CAAC,CAAC;YACf,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,OAAO,CAAC,CAAC,CAAC;YACR,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;QACrD,CAAC;IACH,CAAC;AACH,CAAC,CAAC"}

package/dist/lib/auth/issuer.test.js

@@ -0,0 +1,94 @@
+import { describe, expect, it } from "vitest";
+import { getIssuer } from "./issuer.js";
+describe("getIssuer", () => {
+    it("should return clerk frontend API for clerk authentication", async () => {
+        // Using a valid base64 encoded string: "example.example$test" -> "ZXhhbXBsZS5leGFtcGxlJHRlc3Q="
+        const config = {
+            authentication: {
+                type: "clerk",
+                clerkPubKey: "pk_test_dG9sZXJhbnQtaG9ybmV0LTQ2LmNsZXJrLmFjY291bnRzLmRldiQ",
+            },
+        };
+        const result = await getIssuer(config);
+        expect(result).toBe("https://tolerant-hornet-46.clerk.accounts.dev");
+    });
+    it("should throw error for invalid clerk public key format", async () => {
+        const config = {
+            authentication: {
+                type: "clerk",
+                clerkPubKey: "pk_test_invalid",
+            },
+        };
+        await expect(getIssuer(config)).rejects.toThrow("Clerk public key is invalid");
+    });
+    it("should throw error for clerk key with invalid base64", async () => {
+        const config = {
+            authentication: {
+                type: "clerk",
+                clerkPubKey: "pk_test_invalid_base64",
+            },
+        };
+        await expect(getIssuer(config)).rejects.toThrow("Clerk public key is invalid");
+    });
+    it("should return auth0 issuer URL for auth0 authentication", async () => {
+        const config = {
+            authentication: {
+                type: "auth0",
+                domain: "example.auth0.com",
+                clientId: "test-client-id",
+            },
+        };
+        const result = await getIssuer(config);
+        expect(result).toBe("https://example.auth0.com/");
+    });
+    it("should return openid issuer for openid authentication", async () => {
+        const config = {
+            authentication: {
+                type: "openid",
+                issuer: "https://example.com/auth",
+                clientId: "test-client-id",
+            },
+        };
+        const result = await getIssuer(config);
+        expect(result).toBe("https://example.com/auth");
+    });
+    it("should return azureb2c issuer for azureb2c authentication", async () => {
+        const config = {
+            authentication: {
+                type: "azureb2c",
+                tenantName: "example",
+                policyName: "B2C_1_SignUpSignIn",
+                issuer: "https://example.b2clogin.com/example.onmicrosoft.com/v2.0/",
+                clientId: "test-client-id",
+            },
+        };
+        const result = await getIssuer(config);
+        expect(result).toBe("https://example.b2clogin.com/example.onmicrosoft.com/v2.0/");
+    });
+    it("should return supabase URL for supabase authentication", async () => {
+        const config = {
+            authentication: {
+                type: "supabase",
+                supabaseUrl: "https://project.supabase.co",
+                supabaseKey: "test-anon-key",
+                provider: "github",
+            },
+        };
+        const result = await getIssuer(config);
+        expect(result).toBe("https://project.supabase.co");
+    });
+    it("should return undefined for no authentication", async () => {
+        const config = {};
+        const result = await getIssuer(config);
+        expect(result).toBeUndefined();
+    });
+    it("should throw error for unsupported authentication type", async () => {
+        const config = {
+            authentication: {
+                type: "unsupported",
+            },
+        };
+        await expect(getIssuer(config)).rejects.toThrow("Unsupported authentication type");
+    });
+});
+//# sourceMappingURL=issuer.test.js.map

package/dist/lib/auth/issuer.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"issuer.test.js","sourceRoot":"","sources":["../../../src/lib/auth/issuer.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAE9C,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAExC,QAAQ,CAAC,WAAW,EAAE,GAAG,EAAE;IACzB,EAAE,CAAC,2DAA2D,EAAE,KAAK,IAAI,EAAE;QACzE,gGAAgG;QAChG,MAAM,MAAM,GAAiB;YAC3B,cAAc,EAAE;gBACd,IAAI,EAAE,OAAO;gBACb,WAAW,EACT,6DAA6D;aAChE;SACF,CAAC;QAEF,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,MAAM,CAAC,CAAC;QACvC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,+CAA+C,CAAC,CAAC;IACvE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wDAAwD,EAAE,KAAK,IAAI,EAAE;QACtE,MAAM,MAAM,GAAiB;YAC3B,cAAc,EAAE;gBACd,IAAI,EAAE,OAAO;gBACb,WAAW,EAAE,iBAAiB;aAC/B;SACF,CAAC;QAEF,MAAM,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAC7C,6BAA6B,CAC9B,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sDAAsD,EAAE,KAAK,IAAI,EAAE;QACpE,MAAM,MAAM,GAAiB;YAC3B,cAAc,EAAE;gBACd,IAAI,EAAE,OAAO;gBACb,WAAW,EAAE,wBAAwB;aACtC;SACF,CAAC;QAEF,MAAM,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAC7C,6BAA6B,CAC9B,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yDAAyD,EAAE,KAAK,IAAI,EAAE;QACvE,MAAM,MAAM,GAAiB;YAC3B,cAAc,EAAE;gBACd,IAAI,EAAE,OAAO;gBACb,MAAM,EAAE,mBAAmB;gBAC3B,QAAQ,EAAE,gBAAgB;aAC3B;SACF,CAAC;QAEF,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,MAAM,CAAC,CAAC;QACvC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;IACpD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uDAAuD,EAAE,KAAK,IAAI,EAAE;QACrE,MAAM,MAAM,GAAiB;YAC3B,cAAc,EAAE;gBACd,IAAI,EAAE,QAAQ;gBACd,MAAM,EAAE,0BAA0B;gBAClC,QAAQ,EAAE,gBAAgB;aAC3B;SACF,CAAC;QAEF,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,MAAM,CAAC,CAAC;QACvC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;IAClD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2DAA2D,EAAE,KAAK,IAAI,EAAE;QACzE,MAAM,MAAM,GAAiB;YAC3B,cAAc,EAAE;gBACd,IAAI,EAAE,UAAU;gBAChB,UAAU,EAAE,SAAS;gBACrB,UAAU,EAAE,oBAAoB;gBAChC,MAAM,EAAE,4DAA4D;gBACpE,QAAQ,EAAE,gBAAgB;aAC3B;SACF,CAAC;QACF,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,MAAM,CAAC,CAAC;QACvC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CACjB,4DAA4D,CAC7D,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wDAAwD,EAAE,KAAK,IAAI,EAAE;QACtE,MAAM,MAAM,GAAiB;YAC3B,cAAc,EAAE;gBACd,IAAI,EAAE,UAAU;gBAChB,WAAW,EAAE,6BAA6B;gBAC1C,WAAW,EAAE,eAAe;gBAC5B,QAAQ,EAAE,QAAQ;aACnB;SACF,CAAC;QAEF,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,MAAM,CAAC,CAAC;QACvC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAC;IACrD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+CAA+C,EAAE,KAAK,IAAI,EAAE;QAC7D,MAAM,MAAM,GAAiB,EAAE,CAAC;QAEhC,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,MAAM,CAAC,CAAC;QACvC,MAAM,CAAC,MAAM,CAAC,CAAC,aAAa,EAAE,CAAC;IACjC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wDAAwD,EAAE,KAAK,IAAI,EAAE;QACtE,MAAM,MAAM,GAAG;YACb,cAAc,EAAE;gBACd,IAAI,EAAE,aAAoB;aAC3B;SACc,CAAC;QAElB,MAAM,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAC7C,iCAAiC,CAClC,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/lib/authentication/AuthenticationPlugin.d.ts

@@ -1,13 +1,15 @@
-import { CommonPlugin, NavigationPlugin, ProfileMenuPlugin } from "../core/plugins.js";
+import { type CommonPlugin, type NavigationPlugin, type ProfileMenuPlugin } from "../core/plugins.js";
 type PluginInterface = NavigationPlugin & CommonPlugin & ProfileMenuPlugin;
-export declare class AuthenticationPlugin implements PluginInterface {
+export declare class CoreAuthenticationPlugin implements PluginInterface {
     getRoutes(): {
         path: string;
         element: import("react/jsx-runtime").JSX.Element;
     }[];
     getProfileMenuItems(): {
-        label: string;
-        path: string;
+        readonly label: "Logout";
+        readonly path: "/signout";
+        readonly category: "bottom";
+        readonly icon: import("react").ForwardRefExoticComponent<Omit<import("lucide-react").LucideProps, "ref"> & import("react").RefAttributes<SVGSVGElement>>;
     }[];
 }
 export {};

package/dist/lib/authentication/AuthenticationPlugin.js

@@ -1,8 +1,9 @@
 import { jsx as _jsx } from "react/jsx-runtime";
+import { LogOutIcon } from "lucide-react";
 import { SignIn } from "./components/SignIn.js";
 import { SignOut } from "./components/SignOut.js";
 import { SignUp } from "./components/SignUp.js";
-export class AuthenticationPlugin {
+export class CoreAuthenticationPlugin {
     getRoutes() {
         return [
             {
@@ -24,6 +25,8 @@ export class AuthenticationPlugin {
             {
                 label: "Logout",
                 path: "/signout",
+                category: "bottom",
+                icon: LogOutIcon,
             },
         ];
     }

package/dist/lib/authentication/AuthenticationPlugin.js.map

@@ -1 +1 @@
-{"version":3,"file":"AuthenticationPlugin.js","sourceRoot":"","sources":["../../../src/lib/authentication/AuthenticationPlugin.tsx"],"names":[],"mappings":";AAKA,OAAO,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAC;AAChD,OAAO,EAAE,OAAO,EAAE,MAAM,yBAAyB,CAAC;AAClD,OAAO,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAC;AAIhD,MAAM,OAAO,oBAAoB;IAC/B,SAAS;QACP,OAAO;YACL;gBACE,IAAI,EAAE,UAAU;gBAChB,OAAO,EAAE,KAAC,OAAO,KAAG;aACrB;YACD;gBACE,IAAI,EAAE,SAAS;gBACf,OAAO,EAAE,KAAC,MAAM,KAAG;aACpB;YACD;gBACE,IAAI,EAAE,SAAS;gBACf,OAAO,EAAE,KAAC,MAAM,KAAG;aACpB;SACF,CAAC;IACJ,CAAC;IAED,mBAAmB;QACjB,OAAO;YACL;gBACE,KAAK,EAAE,QAAQ;gBACf,IAAI,EAAE,UAAU;aACjB;SACF,CAAC;IACJ,CAAC;CACF"}
+{"version":3,"file":"AuthenticationPlugin.js","sourceRoot":"","sources":["../../../src/lib/authentication/AuthenticationPlugin.tsx"],"names":[],"mappings":";AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAM1C,OAAO,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAC;AAChD,OAAO,EAAE,OAAO,EAAE,MAAM,yBAAyB,CAAC;AAClD,OAAO,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAC;AAIhD,MAAM,OAAO,wBAAwB;IACnC,SAAS;QACP,OAAO;YACL;gBACE,IAAI,EAAE,UAAU;gBAChB,OAAO,EAAE,KAAC,OAAO,KAAG;aACrB;YACD;gBACE,IAAI,EAAE,SAAS;gBACf,OAAO,EAAE,KAAC,MAAM,KAAG;aACpB;YACD;gBACE,IAAI,EAAE,SAAS;gBACf,OAAO,EAAE,KAAC,MAAM,KAAG;aACpB;SACF,CAAC;IACJ,CAAC;IAED,mBAAmB;QACjB,OAAO;YACL;gBACE,KAAK,EAAE,QAAQ;gBACf,IAAI,EAAE,UAAU;gBAChB,QAAQ,EAAE,QAAQ;gBAClB,IAAI,EAAE,UAAU;aACR;SACX,CAAC;IACJ,CAAC;CACF"}

package/dist/lib/authentication/authentication.d.ts

@@ -1,5 +1,4 @@
-import { ZudokuPlugin } from "../core/plugins.js";
-export interface AuthenticationProvider {
+export interface AuthenticationPlugin {
     signUp(options?: {
         redirectTo?: string;
     }): Promise<void>;
@@ -8,9 +7,9 @@ export interface AuthenticationProvider {
     }): Promise<void>;
     signOut(): Promise<void>;
     getAccessToken(): Promise<string>;
-    pageLoad?(): void;
-    getAuthenticationPlugin?(): ZudokuPlugin;
+    onPageLoad?(): void;
+    signRequest(request: Request): Promise<Request>;
 }
 export interface AuthenticationProviderInitializer<TConfig> {
-    (config: TConfig): AuthenticationProvider;
+    (config: TConfig): AuthenticationPlugin;
 }

package/dist/lib/authentication/components/CallbackHandler.js

@@ -1,14 +1,18 @@
 import { jsx as _jsx } from "react/jsx-runtime";
 import { useSuspenseQuery } from "@tanstack/react-query";
-import { Navigate } from "react-router-dom";
+import { Navigate } from "react-router";
+import { useZudoku } from "zudoku/components";
 import { ZudokuError } from "../../util/invariant.js";
+import { joinUrl } from "../../util/joinUrl.js";
+import { normalizeRedirectUrl } from "../../util/url.js";
 export function CallbackHandler({ handleCallback, }) {
+    const { options } = useZudoku();
     const executeCallback = useSuspenseQuery({
         retry: false,
         queryKey: ["oauth-callback"],
         queryFn: async () => {
             try {
-                return await handleCallback();
+                return joinUrl(normalizeRedirectUrl(await handleCallback(), window.location.origin, options.basePath));
             }
             catch (error) {
                 throw new ZudokuError("Could not validate user", {

package/dist/lib/authentication/components/CallbackHandler.js.map

@@ -1 +1 @@
-{"version":3,"file":"CallbackHandler.js","sourceRoot":"","sources":["../../../../src/lib/authentication/components/CallbackHandler.tsx"],"names":[],"mappings":";AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AACzD,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AAEtD,MAAM,UAAU,eAAe,CAAC,EAC9B,cAAc,GAGf;IACC,MAAM,eAAe,GAAG,gBAAgB,CAAC;QACvC,KAAK,EAAE,KAAK;QACZ,QAAQ,EAAE,CAAC,gBAAgB,CAAC;QAC5B,OAAO,EAAE,KAAK,IAAI,EAAE;YAClB,IAAI,CAAC;gBACH,OAAO,MAAM,cAAc,EAAE,CAAC;YAChC,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,IAAI,WAAW,CAAC,yBAAyB,EAAE;oBAC/C,KAAK,EAAE,KAAK;oBACZ,KAAK,EAAE,sBAAsB;oBAC7B,aAAa,EACX,mIAAmI;iBACtI,CAAC,CAAC;YACL,CAAC;QACH,CAAC;KACF,CAAC,CAAC;IAEH,OAAO,KAAC,QAAQ,IAAC,EAAE,EAAE,eAAe,CAAC,IAAI,GAAI,CAAC;AAChD,CAAC"}
+{"version":3,"file":"CallbackHandler.js","sourceRoot":"","sources":["../../../../src/lib/authentication/components/CallbackHandler.tsx"],"names":[],"mappings":";AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AACzD,OAAO,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AACxC,OAAO,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AAC9C,OAAO,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AACtD,OAAO,EAAE,OAAO,EAAE,MAAM,uBAAuB,CAAC;AAChD,OAAO,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AAEzD,MAAM,UAAU,eAAe,CAAC,EAC9B,cAAc,GAGf;IACC,MAAM,EAAE,OAAO,EAAE,GAAG,SAAS,EAAE,CAAC;IAChC,MAAM,eAAe,GAAG,gBAAgB,CAAC;QACvC,KAAK,EAAE,KAAK;QACZ,QAAQ,EAAE,CAAC,gBAAgB,CAAC;QAC5B,OAAO,EAAE,KAAK,IAAI,EAAE;YAClB,IAAI,CAAC;gBACH,OAAO,OAAO,CACZ,oBAAoB,CAClB,MAAM,cAAc,EAAE,EACtB,MAAM,CAAC,QAAQ,CAAC,MAAM,EACtB,OAAO,CAAC,QAAQ,CACjB,CACF,CAAC;YACJ,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,IAAI,WAAW,CAAC,yBAAyB,EAAE;oBAC/C,KAAK,EAAE,KAAK;oBACZ,KAAK,EAAE,sBAAsB;oBAC7B,aAAa,EACX,mIAAmI;iBACtI,CAAC,CAAC;YACL,CAAC;QACH,CAAC;KACF,CAAC,CAAC;IAEH,OAAO,KAAC,QAAQ,IAAC,EAAE,EAAE,eAAe,CAAC,IAAI,GAAI,CAAC;AAChD,CAAC"}

package/dist/lib/authentication/components/SignIn.d.ts

@@ -1 +1 @@
-export declare const SignIn: () => null;
+export declare const SignIn: () => import("react/jsx-runtime").JSX.Element;

package/dist/lib/authentication/components/SignIn.js

@@ -1,5 +1,8 @@
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
 import { useEffect } from "react";
-import { useSearchParams } from "react-router-dom";
+import { Link, useSearchParams } from "react-router";
+import { Button } from "zudoku/ui/Button.js";
+import { Card, CardContent, CardDescription, CardHeader, CardTitle, } from "zudoku/ui/Card.js";
 import { useZudoku } from "../../components/context/ZudokuContext.js";
 export const SignIn = () => {
     const context = useZudoku();
@@ -9,6 +12,6 @@ export const SignIn = () => {
             redirectTo: search.get("redirect") ?? undefined,
         });
     }, [context.authentication, search]);
-    return null;
+    return (_jsx("div", { className: "flex items-center justify-center mt-8", children: _jsxs(Card, { className: "max-w-md w-full", children: [_jsxs(CardHeader, { children: [_jsx(CardTitle, { className: "text-lg", children: "Sign in" }), _jsx(CardDescription, { children: "You're being redirected to our secure login provider to complete your sign-in process." })] }), _jsx(CardContent, { children: _jsxs("div", { className: "flex flex-col gap-2 justify-center", children: [_jsx(Button, { onClick: () => context.authentication?.signIn(), variant: "default", children: "Login" }), _jsx(Button, { variant: "link", className: "text-muted-foreground", asChild: true, children: _jsx(Link, { to: "/", children: "Go home" }) })] }) })] }) }));
 };
 //# sourceMappingURL=SignIn.js.map

package/dist/lib/authentication/components/SignIn.js.map

@@ -1 +1 @@
-{"version":3,"file":"SignIn.js","sourceRoot":"","sources":["../../../../src/lib/authentication/components/SignIn.tsx"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,OAAO,CAAC;AAClC,OAAO,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,EAAE,SAAS,EAAE,MAAM,2CAA2C,CAAC;AAEtE,MAAM,CAAC,MAAM,MAAM,GAAG,GAAG,EAAE;IACzB,MAAM,OAAO,GAAG,SAAS,EAAE,CAAC;IAC5B,MAAM,CAAC,MAAM,CAAC,GAAG,eAAe,EAAE,CAAC;IACnC,SAAS,CAAC,GAAG,EAAE;QACb,KAAK,OAAO,CAAC,cAAc,EAAE,MAAM,CAAC;YAClC,UAAU,EAAE,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,SAAS;SAChD,CAAC,CAAC;IACL,CAAC,EAAE,CAAC,OAAO,CAAC,cAAc,EAAE,MAAM,CAAC,CAAC,CAAC;IAErC,OAAO,IAAI,CAAC;AACd,CAAC,CAAC"}
+{"version":3,"file":"SignIn.js","sourceRoot":"","sources":["../../../../src/lib/authentication/components/SignIn.tsx"],"names":[],"mappings":";AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,OAAO,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AACrD,OAAO,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAC;AAC7C,OAAO,EACL,IAAI,EACJ,WAAW,EACX,eAAe,EACf,UAAU,EACV,SAAS,GACV,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,SAAS,EAAE,MAAM,2CAA2C,CAAC;AAEtE,MAAM,CAAC,MAAM,MAAM,GAAG,GAAG,EAAE;IACzB,MAAM,OAAO,GAAG,SAAS,EAAE,CAAC;IAC5B,MAAM,CAAC,MAAM,CAAC,GAAG,eAAe,EAAE,CAAC;IACnC,SAAS,CAAC,GAAG,EAAE;QACb,KAAK,OAAO,CAAC,cAAc,EAAE,MAAM,CAAC;YAClC,UAAU,EAAE,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,SAAS;SAChD,CAAC,CAAC;IACL,CAAC,EAAE,CAAC,OAAO,CAAC,cAAc,EAAE,MAAM,CAAC,CAAC,CAAC;IAErC,OAAO,CACL,cAAK,SAAS,EAAC,uCAAuC,YACpD,MAAC,IAAI,IAAC,SAAS,EAAC,iBAAiB,aAC/B,MAAC,UAAU,eACT,KAAC,SAAS,IAAC,SAAS,EAAC,SAAS,wBAAoB,EAClD,KAAC,eAAe,yGAGE,IACP,EACb,KAAC,WAAW,cACV,eAAK,SAAS,EAAC,oCAAoC,aACjD,KAAC,MAAM,IACL,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,cAAc,EAAE,MAAM,EAAE,EAC/C,OAAO,EAAC,SAAS,sBAGV,EACT,KAAC,MAAM,IAAC,OAAO,EAAC,MAAM,EAAC,SAAS,EAAC,uBAAuB,EAAC,OAAO,kBAC9D,KAAC,IAAI,IAAC,EAAE,EAAC,GAAG,wBAAe,GACpB,IACL,GACM,IACT,GACH,CACP,CAAC;AACJ,CAAC,CAAC"}

package/dist/lib/authentication/components/SignOut.js

@@ -1,12 +1,12 @@
 import { useEffect } from "react";
-import { useNavigate } from "react-router-dom";
+import { useNavigate } from "react-router";
 import { useZudoku } from "../../components/context/ZudokuContext.js";
 export const SignOut = () => {
     const context = useZudoku();
     const navigate = useNavigate();
     useEffect(() => {
         void context.authentication?.signOut().then(() => navigate("/"));
-    }, [navigate, context.authentication]);
+    }, []);
     return null;
 };
 //# sourceMappingURL=SignOut.js.map

package/dist/lib/authentication/components/SignOut.js.map

@@ -1 +1 @@
-{"version":3,"file":"SignOut.js","sourceRoot":"","sources":["../../../../src/lib/authentication/components/SignOut.tsx"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,OAAO,CAAC;AAClC,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAC/C,OAAO,EAAE,SAAS,EAAE,MAAM,2CAA2C,CAAC;AAEtE,MAAM,CAAC,MAAM,OAAO,GAAG,GAAG,EAAE;IAC1B,MAAM,OAAO,GAAG,SAAS,EAAE,CAAC;IAC5B,MAAM,QAAQ,GAAG,WAAW,EAAE,CAAC;IAC/B,SAAS,CAAC,GAAG,EAAE;QACb,KAAK,OAAO,CAAC,cAAc,EAAE,OAAO,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;IACnE,CAAC,EAAE,CAAC,QAAQ,EAAE,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC;IAEvC,OAAO,IAAI,CAAC;AACd,CAAC,CAAC"}
+{"version":3,"file":"SignOut.js","sourceRoot":"","sources":["../../../../src/lib/authentication/components/SignOut.tsx"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,OAAO,CAAC;AAClC,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAC3C,OAAO,EAAE,SAAS,EAAE,MAAM,2CAA2C,CAAC;AAEtE,MAAM,CAAC,MAAM,OAAO,GAAG,GAAG,EAAE;IAC1B,MAAM,OAAO,GAAG,SAAS,EAAE,CAAC;IAC5B,MAAM,QAAQ,GAAG,WAAW,EAAE,CAAC;IAE/B,SAAS,CAAC,GAAG,EAAE;QACb,KAAK,OAAO,CAAC,cAAc,EAAE,OAAO,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;IACnE,CAAC,EAAE,EAAE,CAAC,CAAC;IAEP,OAAO,IAAI,CAAC;AACd,CAAC,CAAC"}

package/dist/lib/authentication/components/SignUp.d.ts

@@ -1 +1 @@
-export declare const SignUp: () => null;
+export declare const SignUp: () => import("react/jsx-runtime").JSX.Element;

package/dist/lib/authentication/components/SignUp.js

@@ -1,10 +1,13 @@
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
 import { useEffect } from "react";
+import { Button, Link } from "zudoku/components";
+import { Card, CardContent, CardDescription, CardHeader, CardTitle, } from "zudoku/ui/Card.js";
 import { useZudoku } from "../../components/context/ZudokuContext.js";
 export const SignUp = () => {
     const context = useZudoku();
     useEffect(() => {
         void (context.authentication?.signUp() ?? context.authentication?.signIn());
     }, [context.authentication]);
-    return null;
+    return (_jsx("div", { className: "flex items-center justify-center mt-8", children: _jsxs(Card, { className: "max-w-md w-full", children: [_jsxs(CardHeader, { children: [_jsx(CardTitle, { className: "text-lg", children: "Sign up" }), _jsx(CardDescription, { children: "You're being redirected to our secure login provider to complete your sign up process." })] }), _jsx(CardContent, { children: _jsxs("div", { className: "flex flex-col gap-2 justify-center", children: [_jsx(Button, { onClick: () => context.authentication?.signIn(), variant: "default", children: "Register" }), _jsx(Button, { variant: "link", className: "text-muted-foreground", asChild: true, children: _jsx(Link, { to: "/", children: "Go home" }) })] }) })] }) }));
 };
 //# sourceMappingURL=SignUp.js.map

package/dist/lib/authentication/components/SignUp.js.map

@@ -1 +1 @@
-{"version":3,"file":"SignUp.js","sourceRoot":"","sources":["../../../../src/lib/authentication/components/SignUp.tsx"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,OAAO,CAAC;AAClC,OAAO,EAAE,SAAS,EAAE,MAAM,2CAA2C,CAAC;AAEtE,MAAM,CAAC,MAAM,MAAM,GAAG,GAAG,EAAE;IACzB,MAAM,OAAO,GAAG,SAAS,EAAE,CAAC;IAC5B,SAAS,CAAC,GAAG,EAAE;QACb,KAAK,CAAC,OAAO,CAAC,cAAc,EAAE,MAAM,EAAE,IAAI,OAAO,CAAC,cAAc,EAAE,MAAM,EAAE,CAAC,CAAC;IAC9E,CAAC,EAAE,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC;IAE7B,OAAO,IAAI,CAAC;AACd,CAAC,CAAC"}
+{"version":3,"file":"SignUp.js","sourceRoot":"","sources":["../../../../src/lib/authentication/components/SignUp.tsx"],"names":[],"mappings":";AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,OAAO,CAAC;AAClC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,mBAAmB,CAAC;AACjD,OAAO,EACL,IAAI,EACJ,WAAW,EACX,eAAe,EACf,UAAU,EACV,SAAS,GACV,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,SAAS,EAAE,MAAM,2CAA2C,CAAC;AAEtE,MAAM,CAAC,MAAM,MAAM,GAAG,GAAG,EAAE;IACzB,MAAM,OAAO,GAAG,SAAS,EAAE,CAAC;IAE5B,SAAS,CAAC,GAAG,EAAE;QACb,KAAK,CAAC,OAAO,CAAC,cAAc,EAAE,MAAM,EAAE,IAAI,OAAO,CAAC,cAAc,EAAE,MAAM,EAAE,CAAC,CAAC;IAC9E,CAAC,EAAE,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC;IAE7B,OAAO,CACL,cAAK,SAAS,EAAC,uCAAuC,YACpD,MAAC,IAAI,IAAC,SAAS,EAAC,iBAAiB,aAC/B,MAAC,UAAU,eACT,KAAC,SAAS,IAAC,SAAS,EAAC,SAAS,wBAAoB,EAClD,KAAC,eAAe,yGAGE,IACP,EACb,KAAC,WAAW,cACV,eAAK,SAAS,EAAC,oCAAoC,aACjD,KAAC,MAAM,IACL,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,cAAc,EAAE,MAAM,EAAE,EAC/C,OAAO,EAAC,SAAS,yBAGV,EACT,KAAC,MAAM,IAAC,OAAO,EAAC,MAAM,EAAC,SAAS,EAAC,uBAAuB,EAAC,OAAO,kBAC9D,KAAC,IAAI,IAAC,EAAE,EAAC,GAAG,wBAAe,GACpB,IACL,GACM,IACT,GACH,CACP,CAAC;AACJ,CAAC,CAAC"}

package/dist/lib/authentication/hook.d.ts

@@ -1,8 +1,16 @@
 export declare const useAuth: () => {
-    isAuthEnabled: boolean;
-    isPending: boolean;
-    profile: import("./state.js").UserProfile | undefined;
-    isAuthenticated: boolean;
     login: () => Promise<void>;
     logout: () => Promise<void>;
+    signup: () => Promise<void>;
+    isAuthenticated: boolean;
+    isPending: boolean;
+    profile: import("./state.js").UserProfile | null;
+    providerData: unknown;
+    setAuthenticationPending: () => void;
+    setLoggedOut: () => void;
+    setLoggedIn: ({ profile, providerData, }: {
+        profile: import("./state.js").UserProfile;
+        providerData: unknown;
+    }) => void;
+    isAuthEnabled: boolean;
 };

package/dist/lib/authentication/hook.js

@@ -6,15 +6,15 @@ export const useAuth = () => {
     const isAuthEnabled = typeof authentication !== "undefined";
     return {
         isAuthEnabled,
-        isPending: authState.isPending,
-        profile: authState.profile,
-        isAuthenticated: Boolean(authState.profile),
+        ...authState,
         login: async () => {
             if (!isAuthEnabled) {
                 throw new Error("Authentication is not enabled.");
             }
             // TODO: Should handle errors/state
-            await authentication.signIn();
+            await authentication.signIn({
+                redirectTo: window.location.href,
+            });
         },
         logout: async () => {
             if (!isAuthEnabled) {
@@ -25,6 +25,14 @@ export const useAuth = () => {
             // Redirect to home
             window.location.href = "/";
         },
+        signup: async () => {
+            if (!isAuthEnabled) {
+                throw new Error("Authentication is not enabled.");
+            }
+            await authentication.signUp({
+                redirectTo: window.location.href,
+            });
+        },
     };
 };
 //# sourceMappingURL=hook.js.map

package/dist/lib/authentication/hook.js.map

@@ -1 +1 @@
-{"version":3,"file":"hook.js","sourceRoot":"","sources":["../../../src/lib/authentication/hook.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,wCAAwC,CAAC;AACnE,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAE1C,MAAM,CAAC,MAAM,OAAO,GAAG,GAAG,EAAE;IAC1B,MAAM,EAAE,cAAc,EAAE,GAAG,SAAS,EAAE,CAAC;IACvC,MAAM,SAAS,GAAG,YAAY,EAAE,CAAC;IACjC,MAAM,aAAa,GAAG,OAAO,cAAc,KAAK,WAAW,CAAC;IAE5D,OAAO;QACL,aAAa;QACb,SAAS,EAAE,SAAS,CAAC,SAAS;QAC9B,OAAO,EAAE,SAAS,CAAC,OAAO;QAC1B,eAAe,EAAE,OAAO,CAAC,SAAS,CAAC,OAAO,CAAC;QAE3C,KAAK,EAAE,KAAK,IAAI,EAAE;YAChB,IAAI,CAAC,aAAa,EAAE,CAAC;gBACnB,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;YACpD,CAAC;YACD,mCAAmC;YACnC,MAAM,cAAc,CAAC,MAAM,EAAE,CAAC;QAChC,CAAC;QAED,MAAM,EAAE,KAAK,IAAI,EAAE;YACjB,IAAI,CAAC,aAAa,EAAE,CAAC;gBACnB,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;YACpD,CAAC;YACD,mCAAmC;YACnC,MAAM,cAAc,CAAC,OAAO,EAAE,CAAC;YAE/B,mBAAmB;YACnB,MAAM,CAAC,QAAQ,CAAC,IAAI,GAAG,GAAG,CAAC;QAC7B,CAAC;KACF,CAAC;AACJ,CAAC,CAAC"}
+{"version":3,"file":"hook.js","sourceRoot":"","sources":["../../../src/lib/authentication/hook.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,wCAAwC,CAAC;AACnE,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAE1C,MAAM,CAAC,MAAM,OAAO,GAAG,GAAG,EAAE;IAC1B,MAAM,EAAE,cAAc,EAAE,GAAG,SAAS,EAAE,CAAC;IACvC,MAAM,SAAS,GAAG,YAAY,EAAE,CAAC;IACjC,MAAM,aAAa,GAAG,OAAO,cAAc,KAAK,WAAW,CAAC;IAE5D,OAAO;QACL,aAAa;QACb,GAAG,SAAS;QAEZ,KAAK,EAAE,KAAK,IAAI,EAAE;YAChB,IAAI,CAAC,aAAa,EAAE,CAAC;gBACnB,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;YACpD,CAAC;YACD,mCAAmC;YACnC,MAAM,cAAc,CAAC,MAAM,CAAC;gBAC1B,UAAU,EAAE,MAAM,CAAC,QAAQ,CAAC,IAAI;aACjC,CAAC,CAAC;QACL,CAAC;QAED,MAAM,EAAE,KAAK,IAAI,EAAE;YACjB,IAAI,CAAC,aAAa,EAAE,CAAC;gBACnB,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;YACpD,CAAC;YACD,mCAAmC;YACnC,MAAM,cAAc,CAAC,OAAO,EAAE,CAAC;YAE/B,mBAAmB;YACnB,MAAM,CAAC,QAAQ,CAAC,IAAI,GAAG,GAAG,CAAC;QAC7B,CAAC;QAED,MAAM,EAAE,KAAK,IAAI,EAAE;YACjB,IAAI,CAAC,aAAa,EAAE,CAAC;gBACnB,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;YACpD,CAAC;YACD,MAAM,cAAc,CAAC,MAAM,CAAC;gBAC1B,UAAU,EAAE,MAAM,CAAC,QAAQ,CAAC,IAAI;aACjC,CAAC,CAAC;QACL,CAAC;KACF,CAAC;AACJ,CAAC,CAAC"}

package/dist/lib/authentication/providers/auth0.d.ts

@@ -1,4 +1,4 @@
-import { Auth0AuthenticationConfig } from "../../../config/config.js";
-import { AuthenticationProviderInitializer } from "../authentication.js";
+import { type Auth0AuthenticationConfig } from "../../../config/config.js";
+import { type AuthenticationProviderInitializer } from "../authentication.js";
 declare const auth0Auth: AuthenticationProviderInitializer<Auth0AuthenticationConfig>;
 export default auth0Auth;

package/dist/lib/authentication/providers/auth0.js

@@ -5,9 +5,10 @@ class Auth0AuthenticationProvider extends OpenIDAuthenticationProvider {
         super({
             ...config,
             type: "openid",
-            issuer: `https://${config.domain}`,
+            issuer: `https://${config.domain}/`,
             clientId: config.clientId,
             audience: config.audience,
+            scopes: config.scopes,
         });
     }
     onAuthorizationUrl = async (url, { isSignUp }) => {
@@ -22,11 +23,11 @@ class Auth0AuthenticationProvider extends OpenIDAuthenticationProvider {
         useAuthState.setState({
             isAuthenticated: false,
             isPending: false,
-            profile: undefined,
+            profile: null,
+            providerData: null,
         });
-        sessionStorage.clear();
-        const redirectUrl = new URL(window.location.origin + this.logoutRedirectUrlPath);
-        redirectUrl.pathname = this.logoutRedirectUrlPath;
+        const redirectUrl = new URL(window.location.origin);
+        redirectUrl.pathname = this.redirectToAfterSignOut;
         // SEE: https://auth0.com/docs/authenticate/login/logout/log-users-out-of-auth0
         // For Auth0 tenants created on or after 14 November 2023, RP-Initiated
         // Logout End Session Endpoint Discovery is enabled by default.

package/dist/lib/authentication/providers/auth0.js.map

@@ -1 +1 @@
-{"version":3,"file":"auth0.js","sourceRoot":"","sources":["../../../../src/lib/authentication/providers/auth0.tsx"],"names":[],"mappings":"AAEA,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EAAE,4BAA4B,EAAE,MAAM,aAAa,CAAC;AAE3D,MAAM,2BAA4B,SAAQ,4BAA4B;IACpE,YAAY,MAAiC;QAC3C,KAAK,CAAC;YACJ,GAAG,MAAM;YACT,IAAI,EAAE,QAAQ;YACd,MAAM,EAAE,WAAW,MAAM,CAAC,MAAM,EAAE;YAClC,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,QAAQ,EAAE,MAAM,CAAC,QAAQ;SAC1B,CAAC,CAAC;IACL,CAAC;IAED,kBAAkB,GAAG,KAAK,EACxB,GAAQ,EACR,EAAE,QAAQ,EAAyB,EACnC,EAAE;QACF,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QACxC,IAAI,QAAQ,EAAE,CAAC;YACb,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,aAAa,EAAE,QAAQ,CAAC,CAAC;QAChD,CAAC;IACH,CAAC,CAAC;IAEF,OAAO,GAAG,KAAK,IAAmB,EAAE;QAClC,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,aAAa,EAAE,CAAC;QACtC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,cAAc,EAAE,CAAC;QAE5C,YAAY,CAAC,QAAQ,CAAC;YACpB,eAAe,EAAE,KAAK;YACtB,SAAS,EAAE,KAAK;YAChB,OAAO,EAAE,SAAS;SACnB,CAAC,CAAC;QACH,cAAc,CAAC,KAAK,EAAE,CAAC;QACvB,MAAM,WAAW,GAAG,IAAI,GAAG,CACzB,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG,IAAI,CAAC,qBAAqB,CACpD,CAAC;QAEF,WAAW,CAAC,QAAQ,GAAG,IAAI,CAAC,qBAAqB,CAAC;QAElD,+EAA+E;QAC/E,uEAAuE;QACvE,+DAA+D;QAC/D,wDAAwD;QAExD,uEAAuE;QACvE,sEAAsE;QACtE,IAAI,EAAE,CAAC,oBAAoB,EAAE,CAAC;YAC5B,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,EAAE,CAAC,oBAAoB,CAAC,CAAC;YACnD,IAAI,OAAO,EAAE,CAAC;gBACZ,SAAS,CAAC,YAAY,CAAC,GAAG,CAAC,eAAe,EAAE,OAAO,CAAC,CAAC;YACvD,CAAC;YACD,SAAS,CAAC,YAAY,CAAC,GAAG,CACxB,0BAA0B,EAC1B,WAAW,CAAC,QAAQ,EAAE,CACvB,CAAC;YAEF,+CAA+C;QACjD,CAAC;aAAM,CAAC;YACN,MAAM,SAAS,GAAG,IAAI,GAAG,CACvB,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,cAAc,CAChD,CAAC;YACF,+CAA+C;QACjD,CAAC;IACH,CAAC,CAAC;CACH;AAED,MAAM,SAAS,GAEX,CAAC,OAAO,EAAE,EAAE,CAAC,IAAI,2BAA2B,CAAC,OAAO,CAAC,CAAC;AAE1D,eAAe,SAAS,CAAC"}
+{"version":3,"file":"auth0.js","sourceRoot":"","sources":["../../../../src/lib/authentication/providers/auth0.tsx"],"names":[],"mappings":"AAKA,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EAAE,4BAA4B,EAAE,MAAM,aAAa,CAAC;AAE3D,MAAM,2BACJ,SAAQ,4BAA4B;IAGpC,YAAY,MAAiC;QAC3C,KAAK,CAAC;YACJ,GAAG,MAAM;YACT,IAAI,EAAE,QAAQ;YACd,MAAM,EAAE,WAAW,MAAM,CAAC,MAAM,GAAG;YACnC,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,MAAM,EAAE,MAAM,CAAC,MAAM;SACtB,CAAC,CAAC;IACL,CAAC;IAED,kBAAkB,GAAG,KAAK,EACxB,GAAQ,EACR,EAAE,QAAQ,EAAyB,EACnC,EAAE;QACF,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QACxC,IAAI,QAAQ,EAAE,CAAC;YACb,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,aAAa,EAAE,QAAQ,CAAC,CAAC;QAChD,CAAC;IACH,CAAC,CAAC;IAEF,OAAO,GAAG,KAAK,IAAmB,EAAE;QAClC,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,aAAa,EAAE,CAAC;QACtC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,cAAc,EAAE,CAAC;QAE5C,YAAY,CAAC,QAAQ,CAAC;YACpB,eAAe,EAAE,KAAK;YACtB,SAAS,EAAE,KAAK;YAChB,OAAO,EAAE,IAAI;YACb,YAAY,EAAE,IAAI;SACnB,CAAC,CAAC;QAEH,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACpD,WAAW,CAAC,QAAQ,GAAG,IAAI,CAAC,sBAAsB,CAAC;QAEnD,+EAA+E;QAC/E,uEAAuE;QACvE,+DAA+D;QAC/D,wDAAwD;QAExD,uEAAuE;QACvE,sEAAsE;QACtE,IAAI,EAAE,CAAC,oBAAoB,EAAE,CAAC;YAC5B,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,EAAE,CAAC,oBAAoB,CAAC,CAAC;YACnD,IAAI,OAAO,EAAE,CAAC;gBACZ,SAAS,CAAC,YAAY,CAAC,GAAG,CAAC,eAAe,EAAE,OAAO,CAAC,CAAC;YACvD,CAAC;YACD,SAAS,CAAC,YAAY,CAAC,GAAG,CACxB,0BAA0B,EAC1B,WAAW,CAAC,QAAQ,EAAE,CACvB,CAAC;YAEF,+CAA+C;QACjD,CAAC;aAAM,CAAC;YACN,MAAM,SAAS,GAAG,IAAI,GAAG,CACvB,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,cAAc,CAChD,CAAC;YACF,+CAA+C;QACjD,CAAC;IACH,CAAC,CAAC;CACH;AAED,MAAM,SAAS,GAEX,CAAC,OAAO,EAAE,EAAE,CAAC,IAAI,2BAA2B,CAAC,OAAO,CAAC,CAAC;AAE1D,eAAe,SAAS,CAAC"}

package/dist/lib/authentication/providers/azureb2c.d.ts

@@ -0,0 +1,28 @@
+import { type AzureB2CAuthenticationConfig } from "../../../config/config.js";
+import { type AuthenticationPlugin, type AuthenticationProviderInitializer } from "../authentication.js";
+import { CoreAuthenticationPlugin } from "../AuthenticationPlugin.js";
+export declare class AzureB2CAuthPlugin extends CoreAuthenticationPlugin implements AuthenticationPlugin {
+    private msalInstance;
+    private readonly scopes;
+    private readonly redirectToAfterSignUp?;
+    private readonly redirectToAfterSignIn?;
+    private readonly redirectToAfterSignOut;
+    constructor({ clientId, tenantName, policyName, scopes, redirectToAfterSignUp, redirectToAfterSignIn, redirectToAfterSignOut, basePath, }: AzureB2CAuthenticationConfig);
+    private handleAuthResponse;
+    signUp({ redirectTo }?: {
+        redirectTo?: string;
+    }): Promise<void>;
+    signIn({ redirectTo }?: {
+        redirectTo?: string;
+    }): Promise<void>;
+    getAccessToken(): Promise<string>;
+    signRequest: (request: Request) => Promise<Request>;
+    signOut: () => Promise<void>;
+    handleCallback: () => Promise<string>;
+    getRoutes(): {
+        path: string;
+        element: import("react/jsx-runtime").JSX.Element;
+    }[];
+}
+declare const azureB2CAuth: AuthenticationProviderInitializer<AzureB2CAuthenticationConfig>;
+export default azureB2CAuth;

package/dist/lib/authentication/providers/azureb2c.js

@@ -0,0 +1,145 @@
+import { jsx as _jsx } from "react/jsx-runtime";
+import { EventType, PublicClientApplication } from "@azure/msal-browser";
+import { ClientOnly } from "../../components/ClientOnly.js";
+import { joinUrl } from "../../util/joinUrl.js";
+import { CallbackHandler } from "../components/CallbackHandler.js";
+import { AuthorizationError } from "../errors.js";
+import { useAuthState } from "../state.js";
+import { CoreAuthenticationPlugin } from "../AuthenticationPlugin.js";
+const AZUREB2C_CALLBACK_PATH = "/oauth/callback";
+export class AzureB2CAuthPlugin extends CoreAuthenticationPlugin {
+    msalInstance;
+    scopes;
+    redirectToAfterSignUp;
+    redirectToAfterSignIn;
+    redirectToAfterSignOut;
+    constructor({ clientId, tenantName, policyName, scopes, redirectToAfterSignUp, redirectToAfterSignIn, redirectToAfterSignOut = "/", basePath = "", }) {
+        super();
+        this.scopes = scopes ?? ["openid", "profile", "email"];
+        this.redirectToAfterSignUp = redirectToAfterSignUp;
+        this.redirectToAfterSignIn = redirectToAfterSignIn;
+        this.redirectToAfterSignOut = redirectToAfterSignOut;
+        const authority = `https://${tenantName}.b2clogin.com/${tenantName}.onmicrosoft.com/${policyName}`;
+        const redirectUri = joinUrl(basePath, AZUREB2C_CALLBACK_PATH);
+        this.msalInstance = new PublicClientApplication({
+            auth: {
+                clientId,
+                authority,
+                redirectUri,
+                knownAuthorities: [`${tenantName}.b2clogin.com`],
+            },
+            cache: {
+                cacheLocation: "sessionStorage",
+                storeAuthStateInCookie: false,
+            },
+        });
+        void this.msalInstance.initialize().then(async () => {
+            void this.msalInstance
+                .handleRedirectPromise()
+                .then((response) => {
+                if (response) {
+                    this.handleAuthResponse(response);
+                }
+            });
+            // Add event callback
+            void this.msalInstance.addEventCallback((event) => {
+                if (event.eventType === EventType.LOGIN_SUCCESS) {
+                    this.handleAuthResponse(event.payload);
+                }
+            });
+        });
+    }
+    handleAuthResponse(response) {
+        const { accessToken, idToken, scopes, account } = response;
+        if (!account) {
+            throw new AuthorizationError("No account information in response");
+        }
+        // Get the user's name from Azure B2C claims
+        const name = [account.idTokenClaims?.given_name, account.idTokenClaims?.family_name]
+            .filter(Boolean)
+            .join(" ") || account.username;
+        useAuthState.getState().setLoggedIn({
+            providerData: {
+                accessToken,
+                idToken,
+                scopes,
+                account,
+            },
+            profile: {
+                sub: account.localAccountId,
+                email: account.username,
+                name,
+                emailVerified: true, // Azure B2C emails are verified
+                pictureUrl: undefined, // Azure B2C doesn't provide profile pictures by default
+            },
+        });
+    }
+    async signUp({ redirectTo } = {}) {
+        const redirectUri = this.redirectToAfterSignUp ?? redirectTo ?? "/";
+        sessionStorage.setItem("redirect-to", redirectUri);
+        await this.msalInstance.loginRedirect({
+            scopes: this.scopes,
+            prompt: "select_account",
+        });
+    }
+    async signIn({ redirectTo } = {}) {
+        const redirectUri = this.redirectToAfterSignIn ?? redirectTo ?? "/";
+        sessionStorage.setItem("redirect-to", redirectUri);
+        await this.msalInstance.loginRedirect({
+            scopes: this.scopes,
+        });
+    }
+    async getAccessToken() {
+        const account = this.msalInstance.getAllAccounts()[0];
+        if (!account) {
+            throw new AuthorizationError("No active account");
+        }
+        try {
+            const response = await this.msalInstance.acquireTokenSilent({
+                scopes: this.scopes,
+                account,
+            });
+            return response.accessToken;
+        }
+        catch {
+            // If silent token acquisition fails, try interactive
+            await this.msalInstance.acquireTokenRedirect({
+                scopes: this.scopes,
+                account,
+            });
+            throw new AuthorizationError("Token acquisition failed after interactive attempt");
+        }
+    }
+    signRequest = async (request) => {
+        const accessToken = await this.getAccessToken();
+        request.headers.set("Authorization", `Bearer ${accessToken}`);
+        return request;
+    };
+    signOut = async () => {
+        const account = this.msalInstance.getAllAccounts()[0];
+        if (account) {
+            await this.msalInstance.logoutRedirect({
+                account,
+                postLogoutRedirectUri: window.location.origin + this.redirectToAfterSignOut,
+            });
+        }
+        useAuthState.getState().setLoggedOut();
+    };
+    handleCallback = async () => {
+        const redirectTo = sessionStorage.getItem("redirect-to") ?? "/";
+        sessionStorage.removeItem("redirect-to");
+        return redirectTo;
+    };
+    getRoutes() {
+        return [
+            ...super.getRoutes(),
+            {
+                path: AZUREB2C_CALLBACK_PATH,
+                element: (_jsx(ClientOnly, { children: _jsx(CallbackHandler, { handleCallback: this.handleCallback }) })),
+            },
+        ];
+    }
+}
+const azureB2CAuth = (options) => new AzureB2CAuthPlugin(options);
+export default azureB2CAuth;
+//# sourceMappingURL=azureb2c.js.map