zudoku 0.0.0-feda542 → 0.0.0-ff27e7ea

package/lib/zudoku.auth-auth0.js

@@ -1,45 +1,43 @@
-var r = Object.defineProperty;
-var c = (t, s, e) => s in t ? r(t, s, { enumerable: !0, configurable: !0, writable: !0, value: e }) : t[s] = e;
-var n = (t, s, e) => c(t, typeof s != "symbol" ? s + "" : s, e);
-import { u } from "./hook-CqpVYDqN.js";
-import { OpenIDAuthenticationProvider as d } from "./zudoku.auth-openid.js";
-class h extends d {
-  constructor(e) {
+import { u as r } from "./ZudokuContext-BUZ5hkWB.js";
+import { OpenIDAuthenticationProvider as a } from "./zudoku.auth-openid.js";
+class p extends a {
+  options;
+  constructor(t) {
     super({
-      ...e,
+      ...t,
       type: "openid",
-      issuer: `https://${e.domain}`,
-      clientId: e.clientId,
-      audience: e.audience,
-      scopes: e.scopes
-    });
-    n(this, "onAuthorizationUrl", async (e, { isSignUp: i }) => {
-      e.searchParams.set("prompt", "login"), i && e.searchParams.set("screen_hint", "signup");
-    });
-    n(this, "signOut", async () => {
-      const e = await this.getAuthServer(), i = await this.getAccessToken();
-      u.setState({
-        isAuthenticated: !1,
-        isPending: !1,
-        profile: null,
-        providerData: null
-      });
-      const o = new URL(window.location.origin);
-      if (o.pathname = this.logoutRedirectUrlPath, e.end_session_endpoint) {
-        const a = new URL(e.end_session_endpoint);
-        i && a.searchParams.set("id_token_hint", i), a.searchParams.set(
-          "post_logout_redirect_uri",
-          o.toString()
-        );
-      } else
-        new URL(
-          `${this.issuer.replace(/\/$/, "")}/oidc/logout`
-        );
-    });
+      issuer: `https://${t.domain}/`,
+      clientId: t.clientId,
+      audience: t.audience,
+      scopes: t.scopes
+    }), this.options = t.options;
   }
+  onAuthorizationUrl = async (t, { isSignUp: e }) => {
+    this.options?.prompt !== void 0 ? this.options.prompt !== "" && t.searchParams.set("prompt", this.options.prompt) : this.options?.alwaysPromptLogin !== !1 && t.searchParams.set("prompt", "login"), e && t.searchParams.set("screen_hint", "signup");
+  };
+  signOut = async (t) => {
+    const e = await this.getAuthServer(), i = await this.getAccessToken();
+    r.setState({
+      isAuthenticated: !1,
+      isPending: !1,
+      profile: void 0,
+      providerData: void 0
+    });
+    const o = new URL(window.location.origin);
+    if (o.pathname = this.redirectToAfterSignOut, e.end_session_endpoint) {
+      const n = new URL(e.end_session_endpoint);
+      i && n.searchParams.set("id_token_hint", i), n.searchParams.set(
+        "post_logout_redirect_uri",
+        o.toString()
+      );
+    } else
+      new URL(
+        `${this.issuer.replace(/\/$/, "")}/oidc/logout`
+      );
+  };
 }
-const _ = (t) => new h(t);
+const h = (s) => new p(s);
 export {
-  _ as default
+  h as default
 };
 //# sourceMappingURL=zudoku.auth-auth0.js.map

package/lib/zudoku.auth-auth0.js.map

@@ -1 +1 @@
-{"version":3,"file":"zudoku.auth-auth0.js","sources":["../src/lib/authentication/providers/auth0.tsx"],"sourcesContent":["import { type Auth0AuthenticationConfig } from \"../../../config/config.js\";\nimport { type AuthenticationProviderInitializer } from \"../authentication.js\";\nimport { useAuthState } from \"../state.js\";\nimport { OpenIDAuthenticationProvider } from \"./openid.js\";\n\nclass Auth0AuthenticationProvider extends OpenIDAuthenticationProvider {\n  constructor(config: Auth0AuthenticationConfig) {\n    super({\n      ...config,\n      type: \"openid\",\n      issuer: `https://${config.domain}`,\n      clientId: config.clientId,\n      audience: config.audience,\n      scopes: config.scopes,\n    });\n  }\n\n  onAuthorizationUrl = async (\n    url: URL,\n    { isSignUp }: { isSignUp: boolean },\n  ) => {\n    url.searchParams.set(\"prompt\", \"login\");\n    if (isSignUp) {\n      url.searchParams.set(\"screen_hint\", \"signup\");\n    }\n  };\n\n  signOut = async (): Promise<void> => {\n    const as = await this.getAuthServer();\n    const idToken = await this.getAccessToken();\n\n    useAuthState.setState({\n      isAuthenticated: false,\n      isPending: false,\n      profile: null,\n      providerData: null,\n    });\n\n    const redirectUrl = new URL(window.location.origin);\n    redirectUrl.pathname = this.logoutRedirectUrlPath;\n\n    // SEE: https://auth0.com/docs/authenticate/login/logout/log-users-out-of-auth0\n    // For Auth0 tenants created on or after 14 November 2023, RP-Initiated\n    // Logout End Session Endpoint Discovery is enabled by default.\n    // Otherwise we fallback to the old non-compliant logout\n\n    // The endSessionEndpoint is set, the IdP supports some form of logout,\n    // so we use the IdP logout. Otherwise, just redirect the user to home\n    if (as.end_session_endpoint) {\n      const logoutUrl = new URL(as.end_session_endpoint);\n      if (idToken) {\n        logoutUrl.searchParams.set(\"id_token_hint\", idToken);\n      }\n      logoutUrl.searchParams.set(\n        \"post_logout_redirect_uri\",\n        redirectUrl.toString(),\n      );\n\n      // window.location.href = logoutUrl.toString();\n    } else {\n      const logoutUrl = new URL(\n        `${this.issuer.replace(/\\/$/, \"\")}/oidc/logout`,\n      );\n      // window.location.href = logoutUrl.toString();\n    }\n  };\n}\n\nconst auth0Auth: AuthenticationProviderInitializer<\n  Auth0AuthenticationConfig\n> = (options) => new Auth0AuthenticationProvider(options);\n\nexport default auth0Auth;\n"],"names":["Auth0AuthenticationProvider","OpenIDAuthenticationProvider","config","__publicField","url","isSignUp","as","idToken","useAuthState","redirectUrl","logoutUrl","auth0Auth","options"],"mappings":";;;;;AAKA,MAAMA,UAAoCC,EAA6B;AAAA,EACrE,YAAYC,GAAmC;AACvC,UAAA;AAAA,MACJ,GAAGA;AAAA,MACH,MAAM;AAAA,MACN,QAAQ,WAAWA,EAAO,MAAM;AAAA,MAChC,UAAUA,EAAO;AAAA,MACjB,UAAUA,EAAO;AAAA,MACjB,QAAQA,EAAO;AAAA,IAAA,CAChB;AAGH,IAAAC,EAAA,4BAAqB,OACnBC,GACA,EAAE,UAAAC,QACC;AACC,MAAAD,EAAA,aAAa,IAAI,UAAU,OAAO,GAClCC,KACED,EAAA,aAAa,IAAI,eAAe,QAAQ;AAAA,IAEhD;AAEA,IAAAD,EAAA,iBAAU,YAA2B;AAC7B,YAAAG,IAAK,MAAM,KAAK,cAAc,GAC9BC,IAAU,MAAM,KAAK,eAAe;AAE1C,MAAAC,EAAa,SAAS;AAAA,QACpB,iBAAiB;AAAA,QACjB,WAAW;AAAA,QACX,SAAS;AAAA,QACT,cAAc;AAAA,MAAA,CACf;AAED,YAAMC,IAAc,IAAI,IAAI,OAAO,SAAS,MAAM;AAUlD,UATAA,EAAY,WAAW,KAAK,uBASxBH,EAAG,sBAAsB;AAC3B,cAAMI,IAAY,IAAI,IAAIJ,EAAG,oBAAoB;AACjD,QAAIC,KACQG,EAAA,aAAa,IAAI,iBAAiBH,CAAO,GAErDG,EAAU,aAAa;AAAA,UACrB;AAAA,UACAD,EAAY,SAAS;AAAA,QACvB;AAAA,MAAA;AAIkB,YAAI;AAAA,UACpB,GAAG,KAAK,OAAO,QAAQ,OAAO,EAAE,CAAC;AAAA,QAAA;AAAA,IAIvC;AAAA,EAnDG;AAoDL;AAEA,MAAME,IAEF,CAACC,MAAY,IAAIZ,EAA4BY,CAAO;"}
+{"version":3,"file":"zudoku.auth-auth0.js","sources":["../src/lib/authentication/providers/auth0.tsx"],"sourcesContent":["import type { Auth0AuthenticationConfig } from \"../../../config/config.js\";\nimport type {\n  AuthActionContext,\n  AuthenticationPlugin,\n  AuthenticationProviderInitializer,\n} from \"../authentication.js\";\nimport { useAuthState } from \"../state.js\";\nimport { OpenIDAuthenticationProvider } from \"./openid.js\";\n\nclass Auth0AuthenticationProvider\n  extends OpenIDAuthenticationProvider\n  implements AuthenticationPlugin\n{\n  private readonly options: Auth0AuthenticationConfig[\"options\"];\n  constructor(config: Auth0AuthenticationConfig) {\n    super({\n      ...config,\n      type: \"openid\",\n      issuer: `https://${config.domain}/`,\n      clientId: config.clientId,\n      audience: config.audience,\n      scopes: config.scopes,\n    });\n    this.options = config.options;\n  }\n\n  onAuthorizationUrl = async (\n    url: URL,\n    { isSignUp }: { isSignUp: boolean },\n  ) => {\n    if (this.options?.prompt !== undefined) {\n      if (this.options.prompt !== \"\") {\n        url.searchParams.set(\"prompt\", this.options.prompt);\n      }\n    } else if (this.options?.alwaysPromptLogin !== false) {\n      url.searchParams.set(\"prompt\", \"login\");\n    }\n\n    if (isSignUp) {\n      url.searchParams.set(\"screen_hint\", \"signup\");\n    }\n  };\n\n  signOut = async (_: AuthActionContext): Promise<void> => {\n    const as = await this.getAuthServer();\n    const idToken = await this.getAccessToken();\n\n    useAuthState.setState({\n      isAuthenticated: false,\n      isPending: false,\n      profile: undefined,\n      providerData: undefined,\n    });\n\n    const redirectUrl = new URL(window.location.origin);\n    redirectUrl.pathname = this.redirectToAfterSignOut;\n\n    // SEE: https://auth0.com/docs/authenticate/login/logout/log-users-out-of-auth0\n    // For Auth0 tenants created on or after 14 November 2023, RP-Initiated\n    // Logout End Session Endpoint Discovery is enabled by default.\n    // Otherwise we fallback to the old non-compliant logout\n\n    // The endSessionEndpoint is set, the IdP supports some form of logout,\n    // so we use the IdP logout. Otherwise, just redirect the user to home\n    if (as.end_session_endpoint) {\n      const logoutUrl = new URL(as.end_session_endpoint);\n      if (idToken) {\n        logoutUrl.searchParams.set(\"id_token_hint\", idToken);\n      }\n      logoutUrl.searchParams.set(\n        \"post_logout_redirect_uri\",\n        redirectUrl.toString(),\n      );\n\n      // window.location.href = logoutUrl.toString();\n    } else {\n      const _logoutUrl = new URL(\n        `${this.issuer.replace(/\\/$/, \"\")}/oidc/logout`,\n      );\n      // window.location.href = logoutUrl.toString();\n    }\n  };\n}\n\nconst auth0Auth: AuthenticationProviderInitializer<\n  Auth0AuthenticationConfig\n> = (options) => new Auth0AuthenticationProvider(options);\n\nexport default auth0Auth;\n"],"names":["Auth0AuthenticationProvider","OpenIDAuthenticationProvider","config","url","isSignUp","_","as","idToken","useAuthState","redirectUrl","logoutUrl","auth0Auth","options"],"mappings":";;AASA,MAAMA,UACIC,EAEV;AAAA,EACmB;AAAA,EACjB,YAAYC,GAAmC;AAC7C,UAAM;AAAA,MACJ,GAAGA;AAAA,MACH,MAAM;AAAA,MACN,QAAQ,WAAWA,EAAO,MAAM;AAAA,MAChC,UAAUA,EAAO;AAAA,MACjB,UAAUA,EAAO;AAAA,MACjB,QAAQA,EAAO;AAAA,IAAA,CAChB,GACD,KAAK,UAAUA,EAAO;AAAA,EACxB;AAAA,EAEA,qBAAqB,OACnBC,GACA,EAAE,UAAAC,QACC;AACH,IAAI,KAAK,SAAS,WAAW,SACvB,KAAK,QAAQ,WAAW,MAC1BD,EAAI,aAAa,IAAI,UAAU,KAAK,QAAQ,MAAM,IAE3C,KAAK,SAAS,sBAAsB,MAC7CA,EAAI,aAAa,IAAI,UAAU,OAAO,GAGpCC,KACFD,EAAI,aAAa,IAAI,eAAe,QAAQ;AAAA,EAEhD;AAAA,EAEA,UAAU,OAAOE,MAAwC;AACvD,UAAMC,IAAK,MAAM,KAAK,cAAA,GAChBC,IAAU,MAAM,KAAK,eAAA;AAE3B,IAAAC,EAAa,SAAS;AAAA,MACpB,iBAAiB;AAAA,MACjB,WAAW;AAAA,MACX,SAAS;AAAA,MACT,cAAc;AAAA,IAAA,CACf;AAED,UAAMC,IAAc,IAAI,IAAI,OAAO,SAAS,MAAM;AAUlD,QATAA,EAAY,WAAW,KAAK,wBASxBH,EAAG,sBAAsB;AAC3B,YAAMI,IAAY,IAAI,IAAIJ,EAAG,oBAAoB;AACjD,MAAIC,KACFG,EAAU,aAAa,IAAI,iBAAiBH,CAAO,GAErDG,EAAU,aAAa;AAAA,QACrB;AAAA,QACAD,EAAY,SAAA;AAAA,MAAS;AAAA,IAIzB;AACqB,UAAI;AAAA,QACrB,GAAG,KAAK,OAAO,QAAQ,OAAO,EAAE,CAAC;AAAA,MAAA;AAAA,EAIvC;AACF;AAEA,MAAME,IAEF,CAACC,MAAY,IAAIZ,EAA4BY,CAAO;"}

package/lib/zudoku.auth-azureb2c.js

@@ -0,0 +1,136 @@
+import { j as n } from "./jsx-runtime-BzflLqGi.js";
+import { PublicClientApplication as A, EventType as f } from "@azure/msal-browser";
+import { E as I } from "./index-pMMX55GH.js";
+import { C as T } from "./ClientOnly-E7hGysn1.js";
+import { j as S, u as h } from "./ZudokuContext-BUZ5hkWB.js";
+import { C, A as c } from "./errors-CD873hrG.js";
+import { C as k, O as w } from "./OAuthErrorPage-DnKnq4xK.js";
+const u = "/oauth/callback";
+class y extends C {
+  msalInstance;
+  scopes;
+  redirectToAfterSignUp;
+  redirectToAfterSignIn;
+  redirectToAfterSignOut;
+  constructor({
+    clientId: e,
+    tenantName: t,
+    policyName: i,
+    scopes: a,
+    redirectToAfterSignUp: s,
+    redirectToAfterSignIn: r,
+    redirectToAfterSignOut: d = "/",
+    basePath: m = ""
+  }) {
+    super(), this.scopes = a ?? ["openid", "profile", "email"], this.redirectToAfterSignUp = s, this.redirectToAfterSignIn = r, this.redirectToAfterSignOut = d;
+    const p = `https://${t}.b2clogin.com/${t}.onmicrosoft.com/${i}`, g = S(m, u);
+    this.msalInstance = new A({
+      auth: {
+        clientId: e,
+        authority: p,
+        redirectUri: g,
+        knownAuthorities: [`${t}.b2clogin.com`]
+      },
+      cache: {
+        cacheLocation: "sessionStorage",
+        storeAuthStateInCookie: !1
+      }
+    }), this.msalInstance.initialize().then(async () => {
+      this.msalInstance.handleRedirectPromise().then((o) => {
+        o && this.handleAuthResponse(o);
+      }), this.msalInstance.addEventCallback((o) => {
+        o.eventType === f.LOGIN_SUCCESS && this.handleAuthResponse(o.payload);
+      });
+    });
+  }
+  handleAuthResponse(e) {
+    const { accessToken: t, idToken: i, scopes: a, account: s } = e;
+    if (!s)
+      throw new c("No account information in response");
+    const r = [s.idTokenClaims?.given_name, s.idTokenClaims?.family_name].filter(Boolean).join(" ") || s.username;
+    h.getState().setLoggedIn({
+      providerData: {
+        accessToken: t,
+        idToken: i,
+        scopes: a,
+        account: s
+      },
+      profile: {
+        sub: s.localAccountId,
+        email: s.username,
+        name: r,
+        emailVerified: !0,
+        // Azure B2C emails are verified
+        pictureUrl: void 0
+        // Azure B2C doesn't provide profile pictures by default
+      }
+    });
+  }
+  async signUp(e, { redirectTo: t } = {}) {
+    const i = this.redirectToAfterSignUp ?? t ?? "/";
+    sessionStorage.setItem("redirect-to", i), await this.msalInstance.loginRedirect({
+      scopes: this.scopes,
+      prompt: "select_account"
+    });
+  }
+  async signIn(e, { redirectTo: t } = {}) {
+    const i = this.redirectToAfterSignIn ?? t ?? "/";
+    sessionStorage.setItem("redirect-to", i), await this.msalInstance.loginRedirect({
+      scopes: this.scopes
+    });
+  }
+  async getAccessToken() {
+    const e = this.msalInstance.getAllAccounts()[0];
+    if (!e)
+      throw new c("No active account");
+    try {
+      return (await this.msalInstance.acquireTokenSilent({
+        scopes: this.scopes,
+        account: e
+      })).accessToken;
+    } catch {
+      throw await this.msalInstance.acquireTokenRedirect({
+        scopes: this.scopes,
+        account: e
+      }), new c(
+        "Token acquisition failed after interactive attempt"
+      );
+    }
+  }
+  signRequest = async (e) => {
+    const t = await this.getAccessToken();
+    return e.headers.set("Authorization", `Bearer ${t}`), e;
+  };
+  signOut = async (e) => {
+    const t = this.msalInstance.getAllAccounts()[0];
+    t && await this.msalInstance.logoutRedirect({
+      account: t,
+      postLogoutRedirectUri: window.location.origin + this.redirectToAfterSignOut
+    }), h.getState().setLoggedOut();
+  };
+  handleCallback = async () => {
+    const e = sessionStorage.getItem("redirect-to") ?? "/";
+    return sessionStorage.removeItem("redirect-to"), e;
+  };
+  getRoutes() {
+    return [
+      ...super.getRoutes(),
+      {
+        path: u,
+        element: /* @__PURE__ */ n.jsx(T, { children: /* @__PURE__ */ n.jsx(
+          I,
+          {
+            fallbackRender: ({ error: e }) => /* @__PURE__ */ n.jsx(w, { error: e }),
+            children: /* @__PURE__ */ n.jsx(k, { handleCallback: this.handleCallback })
+          }
+        ) })
+      }
+    ];
+  }
+}
+const _ = (l) => new y(l);
+export {
+  y as AzureB2CAuthPlugin,
+  _ as default
+};
+//# sourceMappingURL=zudoku.auth-azureb2c.js.map

package/lib/zudoku.auth-azureb2c.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"zudoku.auth-azureb2c.js","sources":["../src/lib/authentication/providers/azureb2c.tsx"],"sourcesContent":["import type { AuthenticationResult, EventMessage } from \"@azure/msal-browser\";\nimport { EventType, PublicClientApplication } from \"@azure/msal-browser\";\nimport { ErrorBoundary } from \"react-error-boundary\";\nimport type { AzureB2CAuthenticationConfig } from \"../../../config/config.js\";\nimport { ClientOnly } from \"../../components/ClientOnly.js\";\nimport { joinUrl } from \"../../util/joinUrl.js\";\nimport { CoreAuthenticationPlugin } from \"../AuthenticationPlugin.js\";\nimport type {\n  AuthActionContext,\n  AuthenticationPlugin,\n  AuthenticationProviderInitializer,\n} from \"../authentication.js\";\nimport { CallbackHandler } from \"../components/CallbackHandler.js\";\nimport { OAuthErrorPage } from \"../components/OAuthErrorPage.js\";\nimport { AuthorizationError } from \"../errors.js\";\nimport { useAuthState } from \"../state.js\";\n\nconst AZUREB2C_CALLBACK_PATH = \"/oauth/callback\";\n\nexport class AzureB2CAuthPlugin\n  extends CoreAuthenticationPlugin\n  implements AuthenticationPlugin\n{\n  private msalInstance: PublicClientApplication;\n  private readonly scopes: string[];\n  private readonly redirectToAfterSignUp?: string;\n  private readonly redirectToAfterSignIn?: string;\n  private readonly redirectToAfterSignOut: string;\n\n  constructor({\n    clientId,\n    tenantName,\n    policyName,\n    scopes,\n    redirectToAfterSignUp,\n    redirectToAfterSignIn,\n    redirectToAfterSignOut = \"/\",\n    basePath = \"\",\n  }: AzureB2CAuthenticationConfig) {\n    super();\n    this.scopes = scopes ?? [\"openid\", \"profile\", \"email\"];\n    this.redirectToAfterSignUp = redirectToAfterSignUp;\n    this.redirectToAfterSignIn = redirectToAfterSignIn;\n    this.redirectToAfterSignOut = redirectToAfterSignOut;\n\n    const authority = `https://${tenantName}.b2clogin.com/${tenantName}.onmicrosoft.com/${policyName}`;\n    const redirectUri = joinUrl(basePath, AZUREB2C_CALLBACK_PATH);\n\n    this.msalInstance = new PublicClientApplication({\n      auth: {\n        clientId,\n        authority,\n        redirectUri,\n        knownAuthorities: [`${tenantName}.b2clogin.com`],\n      },\n      cache: {\n        cacheLocation: \"sessionStorage\",\n        storeAuthStateInCookie: false,\n      },\n    });\n\n    void this.msalInstance.initialize().then(async () => {\n      void this.msalInstance\n        .handleRedirectPromise()\n        .then((response: AuthenticationResult | null) => {\n          if (response) {\n            this.handleAuthResponse(response);\n          }\n        });\n\n      // Add event callback\n      void this.msalInstance.addEventCallback((event: EventMessage) => {\n        if (event.eventType === EventType.LOGIN_SUCCESS) {\n          this.handleAuthResponse(event.payload as AuthenticationResult);\n        }\n      });\n    });\n  }\n\n  private handleAuthResponse(response: AuthenticationResult) {\n    const { accessToken, idToken, scopes, account } = response;\n\n    if (!account) {\n      throw new AuthorizationError(\"No account information in response\");\n    }\n\n    // Get the user's name from Azure B2C claims\n    const name =\n      [account.idTokenClaims?.given_name, account.idTokenClaims?.family_name]\n        .filter(Boolean)\n        .join(\" \") || account.username;\n\n    useAuthState.getState().setLoggedIn({\n      providerData: {\n        accessToken,\n        idToken,\n        scopes,\n        account,\n      },\n      profile: {\n        sub: account.localAccountId,\n        email: account.username,\n        name,\n        emailVerified: true, // Azure B2C emails are verified\n        pictureUrl: undefined, // Azure B2C doesn't provide profile pictures by default\n      },\n    });\n  }\n\n  async signUp(\n    _: AuthActionContext,\n    { redirectTo }: { redirectTo?: string } = {},\n  ) {\n    const redirectUri = this.redirectToAfterSignUp ?? redirectTo ?? \"/\";\n    sessionStorage.setItem(\"redirect-to\", redirectUri);\n\n    await this.msalInstance.loginRedirect({\n      scopes: this.scopes,\n      prompt: \"select_account\",\n    });\n  }\n\n  async signIn(\n    _: AuthActionContext,\n    { redirectTo }: { redirectTo?: string } = {},\n  ) {\n    const redirectUri = this.redirectToAfterSignIn ?? redirectTo ?? \"/\";\n    sessionStorage.setItem(\"redirect-to\", redirectUri);\n\n    await this.msalInstance.loginRedirect({\n      scopes: this.scopes,\n    });\n  }\n\n  async getAccessToken(): Promise<string> {\n    const account = this.msalInstance.getAllAccounts()[0];\n    if (!account) {\n      throw new AuthorizationError(\"No active account\");\n    }\n\n    try {\n      const response = await this.msalInstance.acquireTokenSilent({\n        scopes: this.scopes,\n        account,\n      });\n      return response.accessToken;\n    } catch {\n      // If silent token acquisition fails, try interactive\n      await this.msalInstance.acquireTokenRedirect({\n        scopes: this.scopes,\n        account,\n      });\n\n      throw new AuthorizationError(\n        \"Token acquisition failed after interactive attempt\",\n      );\n    }\n  }\n\n  signRequest = async (request: Request): Promise<Request> => {\n    const accessToken = await this.getAccessToken();\n    request.headers.set(\"Authorization\", `Bearer ${accessToken}`);\n    return request;\n  };\n\n  signOut = async (_: AuthActionContext) => {\n    const account = this.msalInstance.getAllAccounts()[0];\n    if (account) {\n      await this.msalInstance.logoutRedirect({\n        account,\n        postLogoutRedirectUri:\n          window.location.origin + this.redirectToAfterSignOut,\n      });\n    }\n\n    useAuthState.getState().setLoggedOut();\n  };\n\n  handleCallback = async () => {\n    const redirectTo = sessionStorage.getItem(\"redirect-to\") ?? \"/\";\n    sessionStorage.removeItem(\"redirect-to\");\n    return redirectTo;\n  };\n\n  getRoutes() {\n    return [\n      ...super.getRoutes(),\n      {\n        path: AZUREB2C_CALLBACK_PATH,\n        element: (\n          <ClientOnly>\n            <ErrorBoundary\n              fallbackRender={({ error }) => <OAuthErrorPage error={error} />}\n            >\n              <CallbackHandler handleCallback={this.handleCallback} />\n            </ErrorBoundary>\n          </ClientOnly>\n        ),\n      },\n    ];\n  }\n}\n\nconst azureB2CAuth: AuthenticationProviderInitializer<\n  AzureB2CAuthenticationConfig\n> = (options) => new AzureB2CAuthPlugin(options);\n\nexport default azureB2CAuth;\n"],"names":["AZUREB2C_CALLBACK_PATH","AzureB2CAuthPlugin","CoreAuthenticationPlugin","clientId","tenantName","policyName","scopes","redirectToAfterSignUp","redirectToAfterSignIn","redirectToAfterSignOut","basePath","authority","redirectUri","joinUrl","PublicClientApplication","response","event","EventType","accessToken","idToken","account","AuthorizationError","name","useAuthState","_","redirectTo","request","ClientOnly","jsx","ErrorBoundary","error","OAuthErrorPage","CallbackHandler","azureB2CAuth","options"],"mappings":";;;;;;;AAiBA,MAAMA,IAAyB;AAExB,MAAMC,UACHC,EAEV;AAAA,EACU;AAAA,EACS;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EAEjB,YAAY;AAAA,IACV,UAAAC;AAAA,IACA,YAAAC;AAAA,IACA,YAAAC;AAAA,IACA,QAAAC;AAAA,IACA,uBAAAC;AAAA,IACA,uBAAAC;AAAA,IACA,wBAAAC,IAAyB;AAAA,IACzB,UAAAC,IAAW;AAAA,EAAA,GACoB;AAC/B,UAAA,GACA,KAAK,SAASJ,KAAU,CAAC,UAAU,WAAW,OAAO,GACrD,KAAK,wBAAwBC,GAC7B,KAAK,wBAAwBC,GAC7B,KAAK,yBAAyBC;AAE9B,UAAME,IAAY,WAAWP,CAAU,iBAAiBA,CAAU,oBAAoBC,CAAU,IAC1FO,IAAcC,EAAQH,GAAUV,CAAsB;AAE5D,SAAK,eAAe,IAAIc,EAAwB;AAAA,MAC9C,MAAM;AAAA,QACJ,UAAAX;AAAA,QACA,WAAAQ;AAAA,QACA,aAAAC;AAAA,QACA,kBAAkB,CAAC,GAAGR,CAAU,eAAe;AAAA,MAAA;AAAA,MAEjD,OAAO;AAAA,QACL,eAAe;AAAA,QACf,wBAAwB;AAAA,MAAA;AAAA,IAC1B,CACD,GAEI,KAAK,aAAa,WAAA,EAAa,KAAK,YAAY;AACnD,MAAK,KAAK,aACP,sBAAA,EACA,KAAK,CAACW,MAA0C;AAC/C,QAAIA,KACF,KAAK,mBAAmBA,CAAQ;AAAA,MAEpC,CAAC,GAGE,KAAK,aAAa,iBAAiB,CAACC,MAAwB;AAC/D,QAAIA,EAAM,cAAcC,EAAU,iBAChC,KAAK,mBAAmBD,EAAM,OAA+B;AAAA,MAEjE,CAAC;AAAA,IACH,CAAC;AAAA,EACH;AAAA,EAEQ,mBAAmBD,GAAgC;AACzD,UAAM,EAAE,aAAAG,GAAa,SAAAC,GAAS,QAAAb,GAAQ,SAAAc,MAAYL;AAElD,QAAI,CAACK;AACH,YAAM,IAAIC,EAAmB,oCAAoC;AAInE,UAAMC,IACJ,CAACF,EAAQ,eAAe,YAAYA,EAAQ,eAAe,WAAW,EACnE,OAAO,OAAO,EACd,KAAK,GAAG,KAAKA,EAAQ;AAE1B,IAAAG,EAAa,SAAA,EAAW,YAAY;AAAA,MAClC,cAAc;AAAA,QACZ,aAAAL;AAAA,QACA,SAAAC;AAAA,QACA,QAAAb;AAAA,QACA,SAAAc;AAAA,MAAA;AAAA,MAEF,SAAS;AAAA,QACP,KAAKA,EAAQ;AAAA,QACb,OAAOA,EAAQ;AAAA,QACf,MAAAE;AAAA,QACA,eAAe;AAAA;AAAA,QACf,YAAY;AAAA;AAAA,MAAA;AAAA,IACd,CACD;AAAA,EACH;AAAA,EAEA,MAAM,OACJE,GACA,EAAE,YAAAC,EAAA,IAAwC,CAAA,GAC1C;AACA,UAAMb,IAAc,KAAK,yBAAyBa,KAAc;AAChE,mBAAe,QAAQ,eAAeb,CAAW,GAEjD,MAAM,KAAK,aAAa,cAAc;AAAA,MACpC,QAAQ,KAAK;AAAA,MACb,QAAQ;AAAA,IAAA,CACT;AAAA,EACH;AAAA,EAEA,MAAM,OACJY,GACA,EAAE,YAAAC,EAAA,IAAwC,CAAA,GAC1C;AACA,UAAMb,IAAc,KAAK,yBAAyBa,KAAc;AAChE,mBAAe,QAAQ,eAAeb,CAAW,GAEjD,MAAM,KAAK,aAAa,cAAc;AAAA,MACpC,QAAQ,KAAK;AAAA,IAAA,CACd;AAAA,EACH;AAAA,EAEA,MAAM,iBAAkC;AACtC,UAAMQ,IAAU,KAAK,aAAa,eAAA,EAAiB,CAAC;AACpD,QAAI,CAACA;AACH,YAAM,IAAIC,EAAmB,mBAAmB;AAGlD,QAAI;AAKF,cAJiB,MAAM,KAAK,aAAa,mBAAmB;AAAA,QAC1D,QAAQ,KAAK;AAAA,QACb,SAAAD;AAAA,MAAA,CACD,GACe;AAAA,IAClB,QAAQ;AAEN,kBAAM,KAAK,aAAa,qBAAqB;AAAA,QAC3C,QAAQ,KAAK;AAAA,QACb,SAAAA;AAAA,MAAA,CACD,GAEK,IAAIC;AAAA,QACR;AAAA,MAAA;AAAA,IAEJ;AAAA,EACF;AAAA,EAEA,cAAc,OAAOK,MAAuC;AAC1D,UAAMR,IAAc,MAAM,KAAK,eAAA;AAC/B,WAAAQ,EAAQ,QAAQ,IAAI,iBAAiB,UAAUR,CAAW,EAAE,GACrDQ;AAAA,EACT;AAAA,EAEA,UAAU,OAAOF,MAAyB;AACxC,UAAMJ,IAAU,KAAK,aAAa,eAAA,EAAiB,CAAC;AACpD,IAAIA,KACF,MAAM,KAAK,aAAa,eAAe;AAAA,MACrC,SAAAA;AAAA,MACA,uBACE,OAAO,SAAS,SAAS,KAAK;AAAA,IAAA,CACjC,GAGHG,EAAa,SAAA,EAAW,aAAA;AAAA,EAC1B;AAAA,EAEA,iBAAiB,YAAY;AAC3B,UAAME,IAAa,eAAe,QAAQ,aAAa,KAAK;AAC5D,0BAAe,WAAW,aAAa,GAChCA;AAAA,EACT;AAAA,EAEA,YAAY;AACV,WAAO;AAAA,MACL,GAAG,MAAM,UAAA;AAAA,MACT;AAAA,QACE,MAAMzB;AAAA,QACN,+BACG2B,GAAA,EACC,UAAAC,gBAAAA,EAAAA;AAAAA,UAACC;AAAA,UAAA;AAAA,YACC,gBAAgB,CAAC,EAAE,OAAAC,QAAYF,gBAAAA,EAAAA,IAACG,KAAe,OAAAD,GAAc;AAAA,YAE7D,UAAAF,gBAAAA,EAAAA,IAACI,GAAA,EAAgB,gBAAgB,KAAK,eAAA,CAAgB;AAAA,UAAA;AAAA,QAAA,EACxD,CACF;AAAA,MAAA;AAAA,IAEJ;AAAA,EAEJ;AACF;AAEA,MAAMC,IAEF,CAACC,MAAY,IAAIjC,EAAmBiC,CAAO;"}

package/lib/zudoku.auth-clerk.js

@@ -1,66 +1,28 @@
-var g = Object.defineProperty;
-var m = (n, t, s) => t in n ? g(n, t, { enumerable: !0, configurable: !0, writable: !0, value: s }) : n[t] = s;
-var c = (n, t, s) => m(n, typeof t != "symbol" ? t + "" : t, s);
-import { A as h } from "./AuthenticationPlugin-foqdvvkf.js";
-import { u as l } from "./hook-CqpVYDqN.js";
-class p extends h {
-  constructor(s) {
-    super();
-    c(this, "initialize", async () => {
-      var r;
-      const s = await this.clerk;
-      if (s)
-        if (s.session) {
-          const e = s.session.user.emailAddresses.find(
-            (a) => a.verification.status === "verified"
-          );
-          l.setState({
-            isAuthenticated: !0,
-            isPending: !1,
-            profile: {
-              sub: s.session.user.id,
-              name: s.session.user.fullName ?? void 0,
-              email: (e == null ? void 0 : e.emailAddress) ?? ((r = s.session.user.emailAddresses[0]) == null ? void 0 : r.emailAddress),
-              emailVerified: e !== void 0,
-              pictureUrl: s.session.user.imageUrl
-            },
-            providerData: {
-              user: s.session.user
-            }
-          });
-        } else
-          l.setState({
-            isAuthenticated: !1,
-            isPending: !1,
-            profile: void 0
-          });
-    });
-    this.clerk = s;
-  }
-}
-const y = ({
-  clerkPubKey: n,
-  redirectToAfterSignOut: t = "/",
-  redirectToAfterSignUp: s = "/",
-  redirectToAfterSignIn: r = "/"
+import { j as l } from "./jsx-runtime-BzflLqGi.js";
+import { LogOutIcon as f } from "lucide-react";
+import { S as w, a as p, b as v } from "./SignUp-sGYAsj2K.js";
+import { u as n } from "./ZudokuContext-BUZ5hkWB.js";
+const b = ({
+  clerkPubKey: d,
+  jwtTemplateName: m,
+  redirectToAfterSignOut: c = "/",
+  redirectToAfterSignUp: a,
+  redirectToAfterSignIn: r
 }) => {
   let e;
-  const a = (async () => {
-    var o;
+  const t = (async () => {
     if (typeof window > "u") return;
-    const { Clerk: i } = await import("@clerk/clerk-js");
-    if (e = new i(n), await e.load(), e.user) {
-      const u = e.user.emailAddresses.find(
-        (w) => w.verification.status === "verified"
+    const { Clerk: s } = await import("@clerk/clerk-js");
+    if (e = new s(d), await e.load(), e.user) {
+      const i = e.user.emailAddresses.find(
+        (o) => o.verification.status === "verified"
       );
-      l.setState({
-        isAuthenticated: !0,
-        isPending: !1,
+      n.getState().setLoggedIn({
         profile: {
           sub: e.user.id,
           name: e.user.fullName ?? void 0,
-          email: (u == null ? void 0 : u.emailAddress) ?? ((o = e.user.emailAddresses[0]) == null ? void 0 : o.emailAddress),
-          emailVerified: u !== void 0,
+          email: i?.emailAddress ?? e.user.emailAddresses[0]?.emailAddress,
+          emailVerified: i !== void 0,
           pictureUrl: e.user.imageUrl
         },
         providerData: {
@@ -76,50 +38,93 @@ const y = ({
     }
     return e;
   })();
-  async function d() {
-    if (await a, !(e != null && e.session))
+  async function u() {
+    if (await t, !e?.session)
       throw new Error("No session available");
-    const i = await e.session.getToken();
-    if (!i)
+    const s = await e.session.getToken({
+      template: m
+    });
+    if (!s)
       throw new Error("Could not get access token from Clerk");
-    return i;
+    return s;
   }
-  async function f(i) {
-    const o = await d();
-    return i.headers.set("Authorization", `Bearer ${o}`), i;
+  async function g(s) {
+    const i = await u();
+    return s.headers.set("Authorization", `Bearer ${i}`), s;
   }
   return {
-    clerk: e,
-    getAccessToken: d,
-    signRequest: f,
-    signOut: async () => {
-      await a, await (e == null ? void 0 : e.signOut({
-        redirectUrl: window.location.origin + t
-      })), l.setState({
-        isAuthenticated: !1,
-        isPending: !1,
-        profile: null,
-        providerData: null
-      });
+    getRoutes: () => [
+      {
+        path: "/signout",
+        element: /* @__PURE__ */ l.jsx(w, {})
+      },
+      {
+        path: "/signin",
+        element: /* @__PURE__ */ l.jsx(p, {})
+      },
+      {
+        path: "/signup",
+        element: /* @__PURE__ */ l.jsx(v, {})
+      }
+    ],
+    getProfileMenuItems() {
+      return [
+        {
+          label: "Logout",
+          path: "/signout",
+          category: "bottom",
+          icon: f
+        }
+      ];
+    },
+    initialize: async () => {
+      const s = await t;
+      if (s)
+        if (s.session) {
+          const i = s.session.user.emailAddresses.find(
+            (o) => o.verification.status === "verified"
+          );
+          n.getState().setLoggedIn({
+            profile: {
+              sub: s.session.user.id,
+              name: s.session.user.fullName ?? void 0,
+              email: i?.emailAddress ?? s.session.user.emailAddresses[0]?.emailAddress,
+              emailVerified: i !== void 0,
+              pictureUrl: s.session.user.imageUrl
+            },
+            providerData: {
+              user: s.session.user
+            }
+          });
+        } else
+          n.setState({
+            isAuthenticated: !1,
+            isPending: !1,
+            profile: void 0
+          });
     },
-    signIn: async ({ redirectTo: i } = {}) => {
-      await a, await (e == null ? void 0 : e.redirectToSignIn({
-        signInForceRedirectUrl: i ?? window.location.origin + r,
-        signUpForceRedirectUrl: i ?? window.location.origin + s
-      }));
+    getAccessToken: u,
+    signRequest: g,
+    signOut: async () => {
+      await t, await e?.signOut({
+        redirectUrl: window.location.origin + c
+      }), n.getState().setLoggedOut();
     },
-    signUp: async ({ redirectTo: i } = {}) => {
-      await a, await (e == null ? void 0 : e.redirectToSignUp({
-        signInForceRedirectUrl: i ?? window.location.origin + r,
-        signUpForceRedirectUrl: i ?? window.location.origin + s
-      }));
+    signIn: async (s, { redirectTo: i } = {}) => {
+      await t, await e?.redirectToSignIn({
+        signInForceRedirectUrl: r ? window.location.origin + r : i,
+        signUpForceRedirectUrl: a ? window.location.origin + a : i
+      });
     },
-    getAuthenticationPlugin() {
-      return new p(a);
+    signUp: async (s, { redirectTo: i } = {}) => {
+      await t, await e?.redirectToSignUp({
+        signInForceRedirectUrl: r ? window.location.origin + r : i,
+        signUpForceRedirectUrl: a ? window.location.origin + a : i
+      });
     }
   };
 };
 export {
-  y as default
+  b as default
 };
 //# sourceMappingURL=zudoku.auth-clerk.js.map

package/lib/zudoku.auth-clerk.js.map

@@ -1 +1 @@
-{"version":3,"file":"zudoku.auth-clerk.js","sources":["../src/lib/authentication/providers/clerk.tsx"],"sourcesContent":["import type { Clerk } from \"@clerk/clerk-js\";\nimport { type ClerkAuthenticationConfig } from \"../../../config/config.js\";\nimport { type AuthenticationProviderInitializer } from \"../authentication.js\";\nimport { AuthenticationPlugin } from \"../AuthenticationPlugin.js\";\nimport { useAuthState } from \"../state.js\";\n\nclass ClerkAuthPlugin extends AuthenticationPlugin {\n  constructor(private clerk: Promise<Clerk | undefined>) {\n    super();\n  }\n  initialize = async () => {\n    const clerk = await this.clerk;\n\n    if (!clerk) {\n      return;\n    }\n\n    if (clerk.session) {\n      const verifiedEmail = clerk.session.user.emailAddresses.find(\n        (email) => email.verification.status === \"verified\",\n      );\n      useAuthState.setState({\n        isAuthenticated: true,\n        isPending: false,\n        profile: {\n          sub: clerk.session.user.id,\n          name: clerk.session.user.fullName ?? undefined,\n          email:\n            verifiedEmail?.emailAddress ??\n            clerk.session.user.emailAddresses[0]?.emailAddress,\n          emailVerified: verifiedEmail !== undefined,\n          pictureUrl: clerk.session.user.imageUrl,\n        },\n        providerData: {\n          user: clerk.session.user,\n        },\n      });\n    } else {\n      useAuthState.setState({\n        isAuthenticated: false,\n        isPending: false,\n        profile: undefined,\n      });\n    }\n  };\n}\n\nconst clerkAuth: AuthenticationProviderInitializer<\n  ClerkAuthenticationConfig\n> = ({\n  clerkPubKey,\n  redirectToAfterSignOut = \"/\",\n  redirectToAfterSignUp = \"/\",\n  redirectToAfterSignIn = \"/\",\n}) => {\n  let clerkApi: Clerk | undefined;\n  const ensureLoaded = (async () => {\n    if (typeof window === \"undefined\") return;\n    const { Clerk } = await import(\"@clerk/clerk-js\");\n    clerkApi = new Clerk(clerkPubKey);\n\n    await clerkApi.load();\n\n    if (clerkApi.user) {\n      const verifiedEmail = clerkApi.user.emailAddresses.find(\n        (email) => email.verification.status === \"verified\",\n      );\n      useAuthState.setState({\n        isAuthenticated: true,\n        isPending: false,\n        profile: {\n          sub: clerkApi.user.id,\n          name: clerkApi.user.fullName ?? undefined,\n          email:\n            verifiedEmail?.emailAddress ??\n            clerkApi.user.emailAddresses[0]?.emailAddress,\n          emailVerified: verifiedEmail !== undefined,\n          pictureUrl: clerkApi.user.imageUrl,\n        },\n        providerData: {\n          user: {\n            publicMetadata: clerkApi.user.publicMetadata,\n            id: clerkApi.user.id,\n            emailAddresses: clerkApi.user.emailAddresses,\n            imageUrl: clerkApi.user.imageUrl,\n            fullName: clerkApi.user.fullName,\n          },\n        },\n      });\n    }\n\n    return clerkApi;\n  })();\n\n  async function getAccessToken() {\n    await ensureLoaded;\n    if (!clerkApi?.session) {\n      throw new Error(\"No session available\");\n    }\n    const response = await clerkApi.session.getToken();\n    if (!response) {\n      throw new Error(\"Could not get access token from Clerk\");\n    }\n    return response;\n  }\n\n  async function signRequest(request: Request): Promise<Request> {\n    const response = await getAccessToken();\n    request.headers.set(\"Authorization\", `Bearer ${response}`);\n    return request;\n  }\n\n  return {\n    clerk: clerkApi,\n    getAccessToken,\n    signRequest,\n    signOut: async () => {\n      await ensureLoaded;\n      await clerkApi?.signOut({\n        redirectUrl: window.location.origin + redirectToAfterSignOut,\n      });\n      useAuthState.setState({\n        isAuthenticated: false,\n        isPending: false,\n        profile: null,\n        providerData: null,\n      });\n    },\n    signIn: async ({ redirectTo }: { redirectTo?: string } = {}) => {\n      await ensureLoaded;\n      await clerkApi?.redirectToSignIn({\n        signInForceRedirectUrl:\n          redirectTo ?? window.location.origin + redirectToAfterSignIn,\n        signUpForceRedirectUrl:\n          redirectTo ?? window.location.origin + redirectToAfterSignUp,\n      });\n    },\n    signUp: async ({ redirectTo }: { redirectTo?: string } = {}) => {\n      await ensureLoaded;\n      await clerkApi?.redirectToSignUp({\n        signInForceRedirectUrl:\n          redirectTo ?? window.location.origin + redirectToAfterSignIn,\n        signUpForceRedirectUrl:\n          redirectTo ?? window.location.origin + redirectToAfterSignUp,\n      });\n    },\n    getAuthenticationPlugin() {\n      return new ClerkAuthPlugin(ensureLoaded);\n    },\n  };\n};\n\nexport default clerkAuth;\n"],"names":["ClerkAuthPlugin","AuthenticationPlugin","clerk","__publicField","verifiedEmail","email","useAuthState","_a","clerkAuth","clerkPubKey","redirectToAfterSignOut","redirectToAfterSignUp","redirectToAfterSignIn","clerkApi","ensureLoaded","Clerk","getAccessToken","response","signRequest","request","redirectTo"],"mappings":";;;;;AAMA,MAAMA,UAAwBC,EAAqB;AAAA,EACjD,YAAoBC,GAAmC;AAC/C,UAAA;AAER,IAAAC,EAAA,oBAAa,YAAY;;AACjB,YAAAD,IAAQ,MAAM,KAAK;AAEzB,UAAKA;AAIL,YAAIA,EAAM,SAAS;AACjB,gBAAME,IAAgBF,EAAM,QAAQ,KAAK,eAAe;AAAA,YACtD,CAACG,MAAUA,EAAM,aAAa,WAAW;AAAA,UAC3C;AACA,UAAAC,EAAa,SAAS;AAAA,YACpB,iBAAiB;AAAA,YACjB,WAAW;AAAA,YACX,SAAS;AAAA,cACP,KAAKJ,EAAM,QAAQ,KAAK;AAAA,cACxB,MAAMA,EAAM,QAAQ,KAAK,YAAY;AAAA,cACrC,QACEE,KAAA,gBAAAA,EAAe,mBACfG,IAAAL,EAAM,QAAQ,KAAK,eAAe,CAAC,MAAnC,gBAAAK,EAAsC;AAAA,cACxC,eAAeH,MAAkB;AAAA,cACjC,YAAYF,EAAM,QAAQ,KAAK;AAAA,YACjC;AAAA,YACA,cAAc;AAAA,cACZ,MAAMA,EAAM,QAAQ;AAAA,YAAA;AAAA,UACtB,CACD;AAAA,QAAA;AAED,UAAAI,EAAa,SAAS;AAAA,YACpB,iBAAiB;AAAA,YACjB,WAAW;AAAA,YACX,SAAS;AAAA,UAAA,CACV;AAAA,IAEL;AArCoB,SAAA,QAAAJ;AAAA,EAAA;AAsCtB;AAEA,MAAMM,IAEF,CAAC;AAAA,EACH,aAAAC;AAAA,EACA,wBAAAC,IAAyB;AAAA,EACzB,uBAAAC,IAAwB;AAAA,EACxB,uBAAAC,IAAwB;AAC1B,MAAM;AACA,MAAAC;AACJ,QAAMC,KAAgB,YAAY;;AAC5B,QAAA,OAAO,SAAW,IAAa;AACnC,UAAM,EAAE,OAAAC,EAAA,IAAU,MAAM,OAAO,iBAAiB;AAKhD,QAJWF,IAAA,IAAIE,EAAMN,CAAW,GAEhC,MAAMI,EAAS,KAAK,GAEhBA,EAAS,MAAM;AACX,YAAAT,IAAgBS,EAAS,KAAK,eAAe;AAAA,QACjD,CAACR,MAAUA,EAAM,aAAa,WAAW;AAAA,MAC3C;AACA,MAAAC,EAAa,SAAS;AAAA,QACpB,iBAAiB;AAAA,QACjB,WAAW;AAAA,QACX,SAAS;AAAA,UACP,KAAKO,EAAS,KAAK;AAAA,UACnB,MAAMA,EAAS,KAAK,YAAY;AAAA,UAChC,QACET,KAAA,gBAAAA,EAAe,mBACfG,IAAAM,EAAS,KAAK,eAAe,CAAC,MAA9B,gBAAAN,EAAiC;AAAA,UACnC,eAAeH,MAAkB;AAAA,UACjC,YAAYS,EAAS,KAAK;AAAA,QAC5B;AAAA,QACA,cAAc;AAAA,UACZ,MAAM;AAAA,YACJ,gBAAgBA,EAAS,KAAK;AAAA,YAC9B,IAAIA,EAAS,KAAK;AAAA,YAClB,gBAAgBA,EAAS,KAAK;AAAA,YAC9B,UAAUA,EAAS,KAAK;AAAA,YACxB,UAAUA,EAAS,KAAK;AAAA,UAAA;AAAA,QAC1B;AAAA,MACF,CACD;AAAA,IAAA;AAGI,WAAAA;AAAA,EAAA,GACN;AAEH,iBAAeG,IAAiB;AAE1B,QADE,MAAAF,GACF,EAACD,KAAA,QAAAA,EAAU;AACP,YAAA,IAAI,MAAM,sBAAsB;AAExC,UAAMI,IAAW,MAAMJ,EAAS,QAAQ,SAAS;AACjD,QAAI,CAACI;AACG,YAAA,IAAI,MAAM,uCAAuC;AAElD,WAAAA;AAAA,EAAA;AAGT,iBAAeC,EAAYC,GAAoC;AACvD,UAAAF,IAAW,MAAMD,EAAe;AACtC,WAAAG,EAAQ,QAAQ,IAAI,iBAAiB,UAAUF,CAAQ,EAAE,GAClDE;AAAA,EAAA;AAGF,SAAA;AAAA,IACL,OAAON;AAAA,IACP,gBAAAG;AAAA,IACA,aAAAE;AAAA,IACA,SAAS,YAAY;AACb,YAAAJ,GACN,OAAMD,KAAA,gBAAAA,EAAU,QAAQ;AAAA,QACtB,aAAa,OAAO,SAAS,SAASH;AAAA,MAAA,KAExCJ,EAAa,SAAS;AAAA,QACpB,iBAAiB;AAAA,QACjB,WAAW;AAAA,QACX,SAAS;AAAA,QACT,cAAc;AAAA,MAAA,CACf;AAAA,IACH;AAAA,IACA,QAAQ,OAAO,EAAE,YAAAc,EAAW,IAA6B,OAAO;AACxD,YAAAN,GACN,OAAMD,KAAA,gBAAAA,EAAU,iBAAiB;AAAA,QAC/B,wBACEO,KAAc,OAAO,SAAS,SAASR;AAAA,QACzC,wBACEQ,KAAc,OAAO,SAAS,SAAST;AAAA,MAAA;AAAA,IAE7C;AAAA,IACA,QAAQ,OAAO,EAAE,YAAAS,EAAW,IAA6B,OAAO;AACxD,YAAAN,GACN,OAAMD,KAAA,gBAAAA,EAAU,iBAAiB;AAAA,QAC/B,wBACEO,KAAc,OAAO,SAAS,SAASR;AAAA,QACzC,wBACEQ,KAAc,OAAO,SAAS,SAAST;AAAA,MAAA;AAAA,IAE7C;AAAA,IACA,0BAA0B;AACjB,aAAA,IAAIX,EAAgBc,CAAY;AAAA,IAAA;AAAA,EAE3C;AACF;"}
+{"version":3,"file":"zudoku.auth-clerk.js","sources":["../src/lib/authentication/providers/clerk.tsx"],"sourcesContent":["import type { Clerk } from \"@clerk/clerk-js\";\nimport { LogOutIcon } from \"lucide-react\";\nimport type { ZudokuPlugin } from \"zudoku/plugins\";\nimport type { ClerkAuthenticationConfig } from \"../../../config/config.js\";\nimport type {\n  AuthActionContext,\n  AuthenticationPlugin,\n  AuthenticationProviderInitializer,\n} from \"../authentication.js\";\nimport { SignIn } from \"../components/SignIn.js\";\nimport { SignOut } from \"../components/SignOut.js\";\nimport { SignUp } from \"../components/SignUp.js\";\nimport { useAuthState } from \"../state.js\";\n\nconst clerkAuth: AuthenticationProviderInitializer<\n  ClerkAuthenticationConfig\n> = ({\n  clerkPubKey,\n  jwtTemplateName,\n  redirectToAfterSignOut = \"/\",\n  redirectToAfterSignUp,\n  redirectToAfterSignIn,\n}): AuthenticationPlugin & ZudokuPlugin => {\n  let clerkApi: Clerk | undefined;\n  const ensureLoaded = (async () => {\n    if (typeof window === \"undefined\") return;\n    const { Clerk } = await import(\"@clerk/clerk-js\");\n    clerkApi = new Clerk(clerkPubKey);\n\n    await clerkApi.load();\n\n    if (clerkApi.user) {\n      const verifiedEmail = clerkApi.user.emailAddresses.find(\n        (email) => email.verification.status === \"verified\",\n      );\n      useAuthState.getState().setLoggedIn({\n        profile: {\n          sub: clerkApi.user.id,\n          name: clerkApi.user.fullName ?? undefined,\n          email:\n            verifiedEmail?.emailAddress ??\n            clerkApi.user.emailAddresses[0]?.emailAddress,\n          emailVerified: verifiedEmail !== undefined,\n          pictureUrl: clerkApi.user.imageUrl,\n        },\n        providerData: {\n          user: {\n            publicMetadata: clerkApi.user.publicMetadata,\n            id: clerkApi.user.id,\n            emailAddresses: clerkApi.user.emailAddresses,\n            imageUrl: clerkApi.user.imageUrl,\n            fullName: clerkApi.user.fullName,\n          },\n        },\n      });\n    }\n\n    return clerkApi;\n  })();\n\n  async function getAccessToken() {\n    await ensureLoaded;\n    if (!clerkApi?.session) {\n      throw new Error(\"No session available\");\n    }\n    const response = await clerkApi.session.getToken({\n      template: jwtTemplateName,\n    });\n    if (!response) {\n      throw new Error(\"Could not get access token from Clerk\");\n    }\n    return response;\n  }\n\n  async function signRequest(request: Request): Promise<Request> {\n    const response = await getAccessToken();\n    request.headers.set(\"Authorization\", `Bearer ${response}`);\n    return request;\n  }\n\n  return {\n    getRoutes: () => {\n      return [\n        {\n          path: \"/signout\",\n          element: <SignOut />,\n        },\n        {\n          path: \"/signin\",\n          element: <SignIn />,\n        },\n        {\n          path: \"/signup\",\n          element: <SignUp />,\n        },\n      ];\n    },\n\n    getProfileMenuItems() {\n      return [\n        {\n          label: \"Logout\",\n          path: \"/signout\",\n          category: \"bottom\",\n          icon: LogOutIcon,\n        } as const,\n      ];\n    },\n    initialize: async () => {\n      const clerk = await ensureLoaded;\n\n      if (!clerk) {\n        return;\n      }\n\n      if (clerk.session) {\n        const verifiedEmail = clerk.session.user.emailAddresses.find(\n          (email) => email.verification.status === \"verified\",\n        );\n        useAuthState.getState().setLoggedIn({\n          profile: {\n            sub: clerk.session.user.id,\n            name: clerk.session.user.fullName ?? undefined,\n            email:\n              verifiedEmail?.emailAddress ??\n              clerk.session.user.emailAddresses[0]?.emailAddress,\n            emailVerified: verifiedEmail !== undefined,\n            pictureUrl: clerk.session.user.imageUrl,\n          },\n          providerData: {\n            user: clerk.session.user,\n          },\n        });\n      } else {\n        useAuthState.setState({\n          isAuthenticated: false,\n          isPending: false,\n          profile: undefined,\n        });\n      }\n    },\n    getAccessToken,\n    signRequest,\n    signOut: async () => {\n      await ensureLoaded;\n      await clerkApi?.signOut({\n        redirectUrl: window.location.origin + redirectToAfterSignOut,\n      });\n      useAuthState.getState().setLoggedOut();\n    },\n    signIn: async (\n      _: AuthActionContext,\n      { redirectTo }: { redirectTo?: string } = {},\n    ) => {\n      await ensureLoaded;\n      await clerkApi?.redirectToSignIn({\n        signInForceRedirectUrl: redirectToAfterSignIn\n          ? window.location.origin + redirectToAfterSignIn\n          : redirectTo,\n        signUpForceRedirectUrl: redirectToAfterSignUp\n          ? window.location.origin + redirectToAfterSignUp\n          : redirectTo,\n      });\n    },\n    signUp: async (\n      _: AuthActionContext,\n      { redirectTo }: { redirectTo?: string } = {},\n    ) => {\n      await ensureLoaded;\n      await clerkApi?.redirectToSignUp({\n        signInForceRedirectUrl: redirectToAfterSignIn\n          ? window.location.origin + redirectToAfterSignIn\n          : redirectTo,\n        signUpForceRedirectUrl: redirectToAfterSignUp\n          ? window.location.origin + redirectToAfterSignUp\n          : redirectTo,\n      });\n    },\n  };\n};\n\nexport default clerkAuth;\n"],"names":["clerkAuth","clerkPubKey","jwtTemplateName","redirectToAfterSignOut","redirectToAfterSignUp","redirectToAfterSignIn","clerkApi","ensureLoaded","Clerk","verifiedEmail","email","useAuthState","getAccessToken","response","signRequest","request","SignOut","SignIn","SignUp","LogOutIcon","clerk","_","redirectTo"],"mappings":";;;;AAcA,MAAMA,IAEF,CAAC;AAAA,EACH,aAAAC;AAAA,EACA,iBAAAC;AAAA,EACA,wBAAAC,IAAyB;AAAA,EACzB,uBAAAC;AAAA,EACA,uBAAAC;AACF,MAA2C;AACzC,MAAIC;AACJ,QAAMC,KAAgB,YAAY;AAChC,QAAI,OAAO,SAAW,IAAa;AACnC,UAAM,EAAE,OAAAC,EAAA,IAAU,MAAM,OAAO,iBAAiB;AAKhD,QAJAF,IAAW,IAAIE,EAAMP,CAAW,GAEhC,MAAMK,EAAS,KAAA,GAEXA,EAAS,MAAM;AACjB,YAAMG,IAAgBH,EAAS,KAAK,eAAe;AAAA,QACjD,CAACI,MAAUA,EAAM,aAAa,WAAW;AAAA,MAAA;AAE3C,MAAAC,EAAa,SAAA,EAAW,YAAY;AAAA,QAClC,SAAS;AAAA,UACP,KAAKL,EAAS,KAAK;AAAA,UACnB,MAAMA,EAAS,KAAK,YAAY;AAAA,UAChC,OACEG,GAAe,gBACfH,EAAS,KAAK,eAAe,CAAC,GAAG;AAAA,UACnC,eAAeG,MAAkB;AAAA,UACjC,YAAYH,EAAS,KAAK;AAAA,QAAA;AAAA,QAE5B,cAAc;AAAA,UACZ,MAAM;AAAA,YACJ,gBAAgBA,EAAS,KAAK;AAAA,YAC9B,IAAIA,EAAS,KAAK;AAAA,YAClB,gBAAgBA,EAAS,KAAK;AAAA,YAC9B,UAAUA,EAAS,KAAK;AAAA,YACxB,UAAUA,EAAS,KAAK;AAAA,UAAA;AAAA,QAC1B;AAAA,MACF,CACD;AAAA,IACH;AAEA,WAAOA;AAAA,EACT,GAAA;AAEA,iBAAeM,IAAiB;AAE9B,QADA,MAAML,GACF,CAACD,GAAU;AACb,YAAM,IAAI,MAAM,sBAAsB;AAExC,UAAMO,IAAW,MAAMP,EAAS,QAAQ,SAAS;AAAA,MAC/C,UAAUJ;AAAA,IAAA,CACX;AACD,QAAI,CAACW;AACH,YAAM,IAAI,MAAM,uCAAuC;AAEzD,WAAOA;AAAA,EACT;AAEA,iBAAeC,EAAYC,GAAoC;AAC7D,UAAMF,IAAW,MAAMD,EAAA;AACvB,WAAAG,EAAQ,QAAQ,IAAI,iBAAiB,UAAUF,CAAQ,EAAE,GAClDE;AAAA,EACT;AAEA,SAAO;AAAA,IACL,WAAW,MACF;AAAA,MACL;AAAA,QACE,MAAM;AAAA,QACN,+BAAUC,GAAA,CAAA,CAAQ;AAAA,MAAA;AAAA,MAEpB;AAAA,QACE,MAAM;AAAA,QACN,+BAAUC,GAAA,CAAA,CAAO;AAAA,MAAA;AAAA,MAEnB;AAAA,QACE,MAAM;AAAA,QACN,+BAAUC,GAAA,CAAA,CAAO;AAAA,MAAA;AAAA,IACnB;AAAA,IAIJ,sBAAsB;AACpB,aAAO;AAAA,QACL;AAAA,UACE,OAAO;AAAA,UACP,MAAM;AAAA,UACN,UAAU;AAAA,UACV,MAAMC;AAAA,QAAA;AAAA,MACR;AAAA,IAEJ;AAAA,IACA,YAAY,YAAY;AACtB,YAAMC,IAAQ,MAAMb;AAEpB,UAAKa;AAIL,YAAIA,EAAM,SAAS;AACjB,gBAAMX,IAAgBW,EAAM,QAAQ,KAAK,eAAe;AAAA,YACtD,CAACV,MAAUA,EAAM,aAAa,WAAW;AAAA,UAAA;AAE3C,UAAAC,EAAa,SAAA,EAAW,YAAY;AAAA,YAClC,SAAS;AAAA,cACP,KAAKS,EAAM,QAAQ,KAAK;AAAA,cACxB,MAAMA,EAAM,QAAQ,KAAK,YAAY;AAAA,cACrC,OACEX,GAAe,gBACfW,EAAM,QAAQ,KAAK,eAAe,CAAC,GAAG;AAAA,cACxC,eAAeX,MAAkB;AAAA,cACjC,YAAYW,EAAM,QAAQ,KAAK;AAAA,YAAA;AAAA,YAEjC,cAAc;AAAA,cACZ,MAAMA,EAAM,QAAQ;AAAA,YAAA;AAAA,UACtB,CACD;AAAA,QACH;AACE,UAAAT,EAAa,SAAS;AAAA,YACpB,iBAAiB;AAAA,YACjB,WAAW;AAAA,YACX,SAAS;AAAA,UAAA,CACV;AAAA,IAEL;AAAA,IACA,gBAAAC;AAAA,IACA,aAAAE;AAAA,IACA,SAAS,YAAY;AACnB,YAAMP,GACN,MAAMD,GAAU,QAAQ;AAAA,QACtB,aAAa,OAAO,SAAS,SAASH;AAAA,MAAA,CACvC,GACDQ,EAAa,SAAA,EAAW,aAAA;AAAA,IAC1B;AAAA,IACA,QAAQ,OACNU,GACA,EAAE,YAAAC,EAAA,IAAwC,CAAA,MACvC;AACH,YAAMf,GACN,MAAMD,GAAU,iBAAiB;AAAA,QAC/B,wBAAwBD,IACpB,OAAO,SAAS,SAASA,IACzBiB;AAAA,QACJ,wBAAwBlB,IACpB,OAAO,SAAS,SAASA,IACzBkB;AAAA,MAAA,CACL;AAAA,IACH;AAAA,IACA,QAAQ,OACND,GACA,EAAE,YAAAC,EAAA,IAAwC,CAAA,MACvC;AACH,YAAMf,GACN,MAAMD,GAAU,iBAAiB;AAAA,QAC/B,wBAAwBD,IACpB,OAAO,SAAS,SAASA,IACzBiB;AAAA,QACJ,wBAAwBlB,IACpB,OAAO,SAAS,SAASA,IACzBkB;AAAA,MAAA,CACL;AAAA,IACH;AAAA,EAAA;AAEJ;"}