zudoku 0.0.0-ff3bc72 → 0.0.0-zuplo-api-keys.95df9e9

package/dist/lib/authentication/providers/openid.js

@@ -1,50 +1,40 @@
 import { jsx as _jsx } from "react/jsx-runtime";
 import logger from "loglevel";
 import * as oauth from "oauth4webapi";
-import { AuthenticationPlugin } from "../AuthenticationPlugin.js";
+import { ClientOnly } from "../../components/ClientOnly.js";
+import { joinUrl } from "../../util/joinUrl.js";
+import { CoreAuthenticationPlugin } from "../AuthenticationPlugin.js";
 import { CallbackHandler } from "../components/CallbackHandler.js";
 import { AuthorizationError, OAuthAuthorizationError } from "../errors.js";
 import { useAuthState } from "../state.js";
 const CODE_VERIFIER_KEY = "code-verifier";
-class OpenIdAuthPlugin extends AuthenticationPlugin {
-    callbackUrlPath;
-    handleCallback;
-    constructor(callbackUrlPath, handleCallback) {
-        super();
-        this.callbackUrlPath = callbackUrlPath;
-        this.handleCallback = handleCallback;
-    }
-    getRoutes() {
-        return [
-            ...super.getRoutes(),
-            {
-                path: this.callbackUrlPath,
-                element: _jsx(CallbackHandler, { handleCallback: this.handleCallback }),
-            },
-        ];
-    }
-}
-export class OpenIDAuthenticationProvider {
+const STATE_KEY = "oauth-state";
+export const OPENID_CALLBACK_PATH = "/oauth/callback";
+export class OpenIDAuthenticationProvider extends CoreAuthenticationPlugin {
     client;
     issuer;
     authorizationServer;
-    callbackUrlPath = "/oauth/callback";
-    logoutRedirectUrlPath = "/";
+    callbackUrlPath;
     onAuthorizationUrl;
     redirectToAfterSignUp;
     redirectToAfterSignIn;
     redirectToAfterSignOut;
     audience;
-    constructor({ issuer, audience, clientId, redirectToAfterSignUp, redirectToAfterSignIn, redirectToAfterSignOut, }) {
+    scopes;
+    constructor({ issuer, audience, clientId, redirectToAfterSignUp, redirectToAfterSignIn, redirectToAfterSignOut = "/", basePath, scopes, }) {
+        super();
         this.client = {
             client_id: clientId,
             token_endpoint_auth_method: "none",
         };
         this.audience = audience;
         this.issuer = issuer;
-        this.redirectToAfterSignUp = redirectToAfterSignUp ?? "/";
-        this.redirectToAfterSignIn = redirectToAfterSignIn ?? "/";
-        this.redirectToAfterSignOut = redirectToAfterSignOut ?? "/";
+        // This is the callback URL for the OAuth provider. So it needs the base path.
+        this.callbackUrlPath = joinUrl(basePath, OPENID_CALLBACK_PATH);
+        this.scopes = scopes ?? ["openid", "profile", "email"];
+        this.redirectToAfterSignUp = redirectToAfterSignUp;
+        this.redirectToAfterSignIn = redirectToAfterSignIn;
+        this.redirectToAfterSignOut = redirectToAfterSignOut;
     }
     async getAuthServer() {
         if (!this.authorizationServer) {
@@ -69,20 +59,23 @@ export class OpenIDAuthenticationProvider {
         const tokens = {
             accessToken: response.access_token,
             refreshToken: response.refresh_token,
+            idToken: response.id_token,
             expiresOn: new Date(Date.now() + response.expires_in * 1000),
             tokenType: response.token_type,
         };
-        sessionStorage.setItem("token-state", JSON.stringify(tokens));
+        useAuthState.setState({
+            providerData: tokens,
+        });
     }
     async signUp({ redirectTo } = {}) {
         return this.authorize({
-            redirectTo: redirectTo ?? this.redirectToAfterSignUp,
+            redirectTo: this.redirectToAfterSignUp ?? redirectTo ?? "/",
             isSignUp: true,
         });
     }
     async signIn({ redirectTo } = {}) {
         return this.authorize({
-            redirectTo: redirectTo ?? this.redirectToAfterSignIn,
+            redirectTo: this.redirectToAfterSignIn ?? redirectTo ?? "/",
         });
     }
     async authorize({ redirectTo, isSignUp = false, }) {
@@ -108,7 +101,7 @@ export class OpenIDAuthenticationProvider {
         authorizationUrl.searchParams.set("client_id", this.client.client_id);
         authorizationUrl.searchParams.set("redirect_uri", redirectUrl.toString());
         authorizationUrl.searchParams.set("response_type", "code");
-        authorizationUrl.searchParams.set("scope", "openid profile email");
+        authorizationUrl.searchParams.set("scope", this.scopes.join(" "));
         authorizationUrl.searchParams.set("code_challenge", codeChallenge);
         authorizationUrl.searchParams.set("code_challenge_method", code_challenge_method);
         if (this.audience) {
@@ -119,30 +112,33 @@ export class OpenIDAuthenticationProvider {
             isSignUp,
         });
         /**
-         * We cannot be sure the AS supports PKCE so we're going to use state too. Use of PKCE is
-         * backwards compatible even if the AS doesn't support it which is why we're using it regardless.
+         * The state parameter is used to prevent CSRF attacks and should be used in all authorization requests.
+         * It is independent of PKCE and should be used regardless of PKCE support.
          */
-        if (authorizationServer.code_challenge_methods_supported?.includes("S256") !==
-            true) {
-            const state = oauth.generateRandomState();
-            authorizationUrl.searchParams.set("state", state);
-        }
+        const state = oauth.generateRandomState();
+        sessionStorage.setItem(STATE_KEY, state);
+        authorizationUrl.searchParams.set("state", state);
         // now redirect the user to authorizationUrl.href
         location.href = authorizationUrl.href;
     }
     async getAccessToken() {
         const as = await this.getAuthServer();
-        const tokenState = sessionStorage.getItem("token-state");
-        if (!tokenState) {
+        const { providerData } = useAuthState.getState();
+        if (!providerData) {
             throw new AuthorizationError("User is not authenticated");
         }
-        const state = JSON.parse(tokenState);
-        if (state.expiresOn < new Date()) {
-            if (!state.refreshToken) {
-                await this.signIn();
+        const tokenState = providerData;
+        if (new Date(tokenState.expiresOn) < new Date()) {
+            if (!tokenState.refreshToken) {
+                useAuthState.setState({
+                    isAuthenticated: false,
+                    isPending: false,
+                    profile: null,
+                    providerData: null,
+                });
                 return "";
             }
-            const request = await oauth.refreshTokenGrantRequest(as, this.client, state.refreshToken);
+            const request = await oauth.refreshTokenGrantRequest(as, this.client, tokenState.refreshToken);
             const response = await oauth.processRefreshTokenResponse(as, this.client, request);
             if (!response.access_token) {
                 throw new AuthorizationError("No access token in response");
@@ -151,19 +147,24 @@ export class OpenIDAuthenticationProvider {
             return response.access_token.toString();
         }
         else {
-            return state.accessToken;
+            return tokenState.accessToken;
         }
     }
+    signRequest = async (request) => {
+        const accessToken = await this.getAccessToken();
+        request.headers.set("Authorization", `Bearer ${accessToken}`);
+        return request;
+    };
     signOut = async () => {
         useAuthState.setState({
             isAuthenticated: false,
             isPending: false,
             profile: undefined,
+            providerData: undefined,
         });
-        sessionStorage.clear();
         const as = await this.getAuthServer();
         const redirectUrl = new URL(window.location.origin + this.redirectToAfterSignOut);
-        redirectUrl.pathname = this.logoutRedirectUrlPath;
+        redirectUrl.pathname = this.callbackUrlPath;
         let logoutUrl;
         // The endSessionEndpoint is set, the IdP supports some form of logout,
         // so we use the IdP logout. Otherwise, just redirect the user to home
@@ -183,6 +184,11 @@ export class OpenIDAuthenticationProvider {
     handleCallback = async () => {
         const url = new URL(window.location.href);
         const state = url.searchParams.get("state");
+        const storedState = sessionStorage.getItem(STATE_KEY);
+        sessionStorage.removeItem(STATE_KEY);
+        if (state !== storedState) {
+            throw new AuthorizationError("Invalid state parameter");
+        }
         // one eternity later, the user lands back on the redirect_uri
         // Authorization Code Grant Request & Response
         const codeVerifier = sessionStorage.getItem(CODE_VERIFIER_KEY);
@@ -197,7 +203,7 @@ export class OpenIDAuthenticationProvider {
             throw new OAuthAuthorizationError("Error validating OAuth response", params);
         }
         const redirectUrl = new URL(url);
-        redirectUrl.pathname = this.redirectToAfterSignIn;
+        redirectUrl.pathname = this.callbackUrlPath;
         redirectUrl.search = "";
         const response = await oauth.authorizationCodeGrantRequest(authServer, this.client, params, redirectUrl.toString(), codeVerifier);
         // TODO: do we need to do these
@@ -225,31 +231,18 @@ export class OpenIDAuthenticationProvider {
             isPending: false,
             profile,
         });
-        sessionStorage.setItem("profile-state", JSON.stringify(useAuthState.getState().profile));
         const redirectTo = sessionStorage.getItem("redirect-to") ?? "/";
         sessionStorage.removeItem("redirect-to");
         return redirectTo;
     };
-    pageLoad() {
-        const profileState = sessionStorage.getItem("profile-state");
-        if (profileState) {
-            try {
-                const profile = JSON.parse(profileState);
-                useAuthState.setState({
-                    isAuthenticated: true,
-                    isPending: false,
-                    profile,
-                });
-            }
-            catch (err) {
-                logger.error("Error parsing auth state", err);
-            }
-        }
-    }
-    getAuthenticationPlugin() {
-        // TODO: This API is a bit messy, we need to refactor auth plugins/providers
-        // to remove the extra layers of abstraction.
-        return new OpenIdAuthPlugin(this.callbackUrlPath, this.handleCallback);
+    getRoutes() {
+        return [
+            ...super.getRoutes(),
+            {
+                path: OPENID_CALLBACK_PATH,
+                element: (_jsx(ClientOnly, { children: _jsx(CallbackHandler, { handleCallback: this.handleCallback }) })),
+            },
+        ];
     }
 }
 const openIDAuth = (options) => new OpenIDAuthenticationProvider(options);

package/dist/lib/authentication/providers/openid.js.map

@@ -1 +1 @@
-{"version":3,"file":"openid.js","sourceRoot":"","sources":["../../../../src/lib/authentication/providers/openid.tsx"],"names":[],"mappings":";AAAA,OAAO,MAAM,MAAM,UAAU,CAAC;AAC9B,OAAO,KAAK,KAAK,MAAM,cAAc,CAAC;AAMtC,OAAO,EAAE,oBAAoB,EAAE,MAAM,4BAA4B,CAAC;AAClE,OAAO,EAAE,eAAe,EAAE,MAAM,kCAAkC,CAAC;AACnE,OAAO,EAAE,kBAAkB,EAAE,uBAAuB,EAAE,MAAM,cAAc,CAAC;AAC3E,OAAO,EAAE,YAAY,EAAe,MAAM,aAAa,CAAC;AAExD,MAAM,iBAAiB,GAAG,eAAe,CAAC;AAS1C,MAAM,gBAAiB,SAAQ,oBAAoB;IAEvC;IACA;IAFV,YACU,eAAuB,EACvB,cAAqC;QAE7C,KAAK,EAAE,CAAC;QAHA,oBAAe,GAAf,eAAe,CAAQ;QACvB,mBAAc,GAAd,cAAc,CAAuB;IAG/C,CAAC;IACD,SAAS;QACP,OAAO;YACL,GAAG,KAAK,CAAC,SAAS,EAAE;YACpB;gBACE,IAAI,EAAE,IAAI,CAAC,eAAe;gBAC1B,OAAO,EAAE,KAAC,eAAe,IAAC,cAAc,EAAE,IAAI,CAAC,cAAc,GAAI;aAClE;SACF,CAAC;IACJ,CAAC;CACF;AAED,MAAM,OAAO,4BAA4B;IAC7B,MAAM,CAAe;IACrB,MAAM,CAAS;IAEf,mBAAmB,CAAwC;IAE3D,eAAe,GAAG,iBAAiB,CAAC;IACpC,qBAAqB,GAAG,GAAG,CAAC;IAC5B,kBAAkB,CAGlB;IACO,qBAAqB,CAAS;IAC9B,qBAAqB,CAAS;IAC9B,sBAAsB,CAAS;IAC/B,QAAQ,CAAU;IAEnC,YAAY,EACV,MAAM,EACN,QAAQ,EACR,QAAQ,EACR,qBAAqB,EACrB,qBAAqB,EACrB,sBAAsB,GACK;QAC3B,IAAI,CAAC,MAAM,GAAG;YACZ,SAAS,EAAE,QAAQ;YACnB,0BAA0B,EAAE,MAAM;SACnC,CAAC;QACF,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACzB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,qBAAqB,GAAG,qBAAqB,IAAI,GAAG,CAAC;QAC1D,IAAI,CAAC,qBAAqB,GAAG,qBAAqB,IAAI,GAAG,CAAC;QAC1D,IAAI,CAAC,sBAAsB,GAAG,sBAAsB,IAAI,GAAG,CAAC;IAC9D,CAAC;IAES,KAAK,CAAC,aAAa;QAC3B,IAAI,CAAC,IAAI,CAAC,mBAAmB,EAAE,CAAC;YAC9B,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACvC,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,gBAAgB,CAAC,SAAS,CAAC,CAAC;YACzD,IAAI,CAAC,mBAAmB,GAAG,MAAM,KAAK,CAAC,wBAAwB,CAC7D,SAAS,EACT,QAAQ,CACT,CAAC;QACJ,CAAC;QACD,OAAO,IAAI,CAAC,mBAAmB,CAAC;IAClC,CAAC;IAED;;;OAGG;IACO,qBAAqB,CAC7B,QAAyD;QAEzD,IAAI,KAAK,CAAC,aAAa,CAAC,QAAQ,CAAC,EAAE,CAAC;YAClC,MAAM,CAAC,KAAK,CAAC,oBAAoB,EAAE,QAAQ,CAAC,CAAC;YAC7C,MAAM,IAAI,uBAAuB,CAAC,oBAAoB,EAAE,QAAQ,CAAC,CAAC;QACpE,CAAC;QAED,IAAI,CAAC,QAAQ,CAAC,UAAU,EAAE,CAAC;YACzB,MAAM,IAAI,kBAAkB,CAAC,2BAA2B,CAAC,CAAC;QAC5D,CAAC;QAED,MAAM,MAAM,GAAe;YACzB,WAAW,EAAE,QAAQ,CAAC,YAAY;YAClC,YAAY,EAAE,QAAQ,CAAC,aAAa;YACpC,SAAS,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,CAAC,UAAU,GAAG,IAAI,CAAC;YAC5D,SAAS,EAAE,QAAQ,CAAC,UAAU;SAC/B,CAAC;QACF,cAAc,CAAC,OAAO,CAAC,aAAa,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;IAChE,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,EAAE,UAAU,KAA8B,EAAE;QACvD,OAAO,IAAI,CAAC,SAAS,CAAC;YACpB,UAAU,EAAE,UAAU,IAAI,IAAI,CAAC,qBAAqB;YACpD,QAAQ,EAAE,IAAI;SACf,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,EAAE,UAAU,KAA8B,EAAE;QACvD,OAAO,IAAI,CAAC,SAAS,CAAC;YACpB,UAAU,EAAE,UAAU,IAAI,IAAI,CAAC,qBAAqB;SACrD,CAAC,CAAC;IACL,CAAC;IAEO,KAAK,CAAC,SAAS,CAAC,EACtB,UAAU,EACV,QAAQ,GAAG,KAAK,GAIjB;QACC,MAAM,qBAAqB,GAAG,MAAM,CAAC;QACrC,MAAM,mBAAmB,GAAG,MAAM,IAAI,CAAC,aAAa,EAAE,CAAC;QAEvD,IAAI,CAAC,mBAAmB,CAAC,sBAAsB,EAAE,CAAC;YAChD,MAAM,IAAI,kBAAkB,CAAC,2BAA2B,CAAC,CAAC;QAC5D,CAAC;QAED;;;;WAIG;QACH,MAAM,YAAY,GAAG,KAAK,CAAC,0BAA0B,EAAE,CAAC;QACxD,MAAM,aAAa,GAAG,MAAM,KAAK,CAAC,0BAA0B,CAAC,YAAY,CAAC,CAAC;QAE3E,cAAc,CAAC,OAAO,CAAC,iBAAiB,EAAE,YAAY,CAAC,CAAC;QAExD,6CAA6C;QAC7C,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAC9B,mBAAmB,CAAC,sBAAsB,CAC3C,CAAC;QAEF,cAAc,CAAC,OAAO,CAAC,aAAa,EAAE,UAAU,CAAC,CAAC;QAElD,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACpD,WAAW,CAAC,QAAQ,GAAG,IAAI,CAAC,eAAe,CAAC;QAC5C,WAAW,CAAC,MAAM,GAAG,EAAE,CAAC;QAExB,gBAAgB,CAAC,YAAY,CAAC,GAAG,CAAC,WAAW,EAAE,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QACtE,gBAAgB,CAAC,YAAY,CAAC,GAAG,CAAC,cAAc,EAAE,WAAW,CAAC,QAAQ,EAAE,CAAC,CAAC;QAC1E,gBAAgB,CAAC,YAAY,CAAC,GAAG,CAAC,eAAe,EAAE,MAAM,CAAC,CAAC;QAC3D,gBAAgB,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,sBAAsB,CAAC,CAAC;QACnE,gBAAgB,CAAC,YAAY,CAAC,GAAG,CAAC,gBAAgB,EAAE,aAAa,CAAC,CAAC;QACnE,gBAAgB,CAAC,YAAY,CAAC,GAAG,CAC/B,uBAAuB,EACvB,qBAAqB,CACtB,CAAC;QACF,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAClB,gBAAgB,CAAC,YAAY,CAAC,GAAG,CAAC,UAAU,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC/D,CAAC;QAED,IAAI,CAAC,kBAAkB,EAAE,CAAC,gBAAgB,EAAE;YAC1C,QAAQ,EAAE,CAAC,QAAQ;YACnB,QAAQ;SACT,CAAC,CAAC;QAEH;;;WAGG;QACH,IACE,mBAAmB,CAAC,gCAAgC,EAAE,QAAQ,CAAC,MAAM,CAAC;YACtE,IAAI,EACJ,CAAC;YACD,MAAM,KAAK,GAAG,KAAK,CAAC,mBAAmB,EAAE,CAAC;YAC1C,gBAAgB,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QACpD,CAAC;QAED,iDAAiD;QACjD,QAAQ,CAAC,IAAI,GAAG,gBAAgB,CAAC,IAAI,CAAC;IACxC,CAAC;IAED,KAAK,CAAC,cAAc;QAClB,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,aAAa,EAAE,CAAC;QACtC,MAAM,UAAU,GAAG,cAAc,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;QACzD,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,MAAM,IAAI,kBAAkB,CAAC,2BAA2B,CAAC,CAAC;QAC5D,CAAC;QAED,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,CAAe,CAAC;QACnD,IAAI,KAAK,CAAC,SAAS,GAAG,IAAI,IAAI,EAAE,EAAE,CAAC;YACjC,IAAI,CAAC,KAAK,CAAC,YAAY,EAAE,CAAC;gBACxB,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC;gBACpB,OAAO,EAAE,CAAC;YACZ,CAAC;YAED,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,wBAAwB,CAClD,EAAE,EACF,IAAI,CAAC,MAAM,EACX,KAAK,CAAC,YAAY,CACnB,CAAC;YACF,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,2BAA2B,CACtD,EAAE,EACF,IAAI,CAAC,MAAM,EACX,OAAO,CACR,CAAC;YAEF,IAAI,CAAC,QAAQ,CAAC,YAAY,EAAE,CAAC;gBAC3B,MAAM,IAAI,kBAAkB,CAAC,6BAA6B,CAAC,CAAC;YAC9D,CAAC;YAED,IAAI,CAAC,qBAAqB,CAAC,QAAQ,CAAC,CAAC;YAErC,OAAO,QAAQ,CAAC,YAAY,CAAC,QAAQ,EAAE,CAAC;QAC1C,CAAC;aAAM,CAAC;YACN,OAAO,KAAK,CAAC,WAAW,CAAC;QAC3B,CAAC;IACH,CAAC;IAED,OAAO,GAAG,KAAK,IAAI,EAAE;QACnB,YAAY,CAAC,QAAQ,CAAC;YACpB,eAAe,EAAE,KAAK;YACtB,SAAS,EAAE,KAAK;YAChB,OAAO,EAAE,SAAS;SACnB,CAAC,CAAC;QACH,cAAc,CAAC,KAAK,EAAE,CAAC;QAEvB,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,aAAa,EAAE,CAAC;QAEtC,MAAM,WAAW,GAAG,IAAI,GAAG,CACzB,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG,IAAI,CAAC,sBAAsB,CACrD,CAAC;QACF,WAAW,CAAC,QAAQ,GAAG,IAAI,CAAC,qBAAqB,CAAC;QAElD,IAAI,SAAc,CAAC;QACnB,uEAAuE;QACvE,sEAAsE;QACtE,IAAI,EAAE,CAAC,oBAAoB,EAAE,CAAC;YAC5B,SAAS,GAAG,IAAI,GAAG,CAAC,EAAE,CAAC,oBAAoB,CAAC,CAAC;YAC7C,kCAAkC;YAClC,gCAAgC;YAChC,kBAAkB;YAClB,2DAA2D;YAC3D,IAAI;YACJ,SAAS,CAAC,YAAY,CAAC,GAAG,CACxB,0BAA0B,EAC1B,WAAW,CAAC,QAAQ,EAAE,CACvB,CAAC;QACJ,CAAC;aAAM,CAAC;YACN,SAAS,GAAG,WAAW,CAAC;QAC1B,CAAC;IACH,CAAC,CAAC;IAEF,cAAc,GAAG,KAAK,IAAI,EAAE;QAC1B,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAC1C,MAAM,KAAK,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAE5C,8DAA8D;QAC9D,8CAA8C;QAC9C,MAAM,YAAY,GAAG,cAAc,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;QAC/D,cAAc,CAAC,UAAU,CAAC,iBAAiB,CAAC,CAAC;QAC7C,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,MAAM,IAAI,kBAAkB,CAAC,kCAAkC,CAAC,CAAC;QACnE,CAAC;QAED,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,aAAa,EAAE,CAAC;QAE9C,MAAM,MAAM,GAAG,KAAK,CAAC,oBAAoB,CACvC,UAAU,EACV,IAAI,CAAC,MAAM,EACX,GAAG,CAAC,YAAY,EAChB,KAAK,IAAI,SAAS,CACnB,CAAC;QACF,IAAI,KAAK,CAAC,aAAa,CAAC,MAAM,CAAC,EAAE,CAAC;YAChC,MAAM,CAAC,KAAK,CAAC,iCAAiC,EAAE,MAAM,CAAC,CAAC;YACxD,MAAM,IAAI,uBAAuB,CAC/B,iCAAiC,EACjC,MAAM,CACP,CAAC;QACJ,CAAC;QAED,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;QACjC,WAAW,CAAC,QAAQ,GAAG,IAAI,CAAC,qBAAqB,CAAC;QAClD,WAAW,CAAC,MAAM,GAAG,EAAE,CAAC;QAExB,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,6BAA6B,CACxD,UAAU,EACV,IAAI,CAAC,MAAM,EACX,MAAM,EACN,WAAW,CAAC,QAAQ,EAAE,EACtB,YAAY,CACb,CAAC;QAEF,+BAA+B;QAC/B,qEAAqE;QACrE,oBAAoB;QACpB,0CAA0C;QAC1C,8DAA8D;QAC9D,MAAM;QACN,uEAAuE;QACvE,IAAI;QACJ,MAAM,WAAW,GAAG,MAAM,KAAK,CAAC,sCAAsC,CACpE,UAAU,EACV,IAAI,CAAC,MAAM,EACX,QAAQ,CACT,CAAC;QAEF,IAAI,CAAC,qBAAqB,CAAC,WAAW,CAAC,CAAC;QAExC,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,cAAc,EAAE,CAAC;QAEhD,MAAM,gBAAgB,GAAG,MAAM,KAAK,CAAC,eAAe,CAClD,UAAU,EACV,IAAI,CAAC,MAAM,EACX,WAAW,CACZ,CAAC;QACF,MAAM,QAAQ,GAAG,MAAM,gBAAgB,CAAC,IAAI,EAAE,CAAC;QAE/C,MAAM,OAAO,GAAgB;YAC3B,GAAG,EAAE,QAAQ,CAAC,GAAG;YACjB,KAAK,EAAE,QAAQ,CAAC,KAAK;YACrB,IAAI,EAAE,QAAQ,CAAC,IAAI;YACnB,aAAa,EAAE,QAAQ,CAAC,cAAc,IAAI,KAAK;YAC/C,UAAU,EAAE,QAAQ,CAAC,OAAO;SAC7B,CAAC;QAEF,YAAY,CAAC,QAAQ,CAAC;YACpB,eAAe,EAAE,IAAI;YACrB,SAAS,EAAE,KAAK;YAChB,OAAO;SACR,CAAC,CAAC;QAEH,cAAc,CAAC,OAAO,CACpB,eAAe,EACf,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,CAChD,CAAC;QAEF,MAAM,UAAU,GAAG,cAAc,CAAC,OAAO,CAAC,aAAa,CAAC,IAAI,GAAG,CAAC;QAChE,cAAc,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;QACzC,OAAO,UAAU,CAAC;IACpB,CAAC,CAAC;IAEF,QAAQ;QACN,MAAM,YAAY,GAAG,cAAc,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;QAC7D,IAAI,YAAY,EAAE,CAAC;YACjB,IAAI,CAAC;gBACH,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;gBACzC,YAAY,CAAC,QAAQ,CAAC;oBACpB,eAAe,EAAE,IAAI;oBACrB,SAAS,EAAE,KAAK;oBAChB,OAAO;iBACR,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,CAAC,KAAK,CAAC,0BAA0B,EAAE,GAAG,CAAC,CAAC;YAChD,CAAC;QACH,CAAC;IACH,CAAC;IAED,uBAAuB;QACrB,4EAA4E;QAC5E,6CAA6C;QAC7C,OAAO,IAAI,gBAAgB,CAAC,IAAI,CAAC,eAAe,EAAE,IAAI,CAAC,cAAc,CAAC,CAAC;IACzE,CAAC;CACF;AAED,MAAM,UAAU,GAEZ,CAAC,OAAO,EAAE,EAAE,CAAC,IAAI,4BAA4B,CAAC,OAAO,CAAC,CAAC;AAE3D,eAAe,UAAU,CAAC"}
+{"version":3,"file":"openid.js","sourceRoot":"","sources":["../../../../src/lib/authentication/providers/openid.tsx"],"names":[],"mappings":";AAAA,OAAO,MAAM,MAAM,UAAU,CAAC;AAC9B,OAAO,KAAK,KAAK,MAAM,cAAc,CAAC;AAEtC,OAAO,EAAE,UAAU,EAAE,MAAM,gCAAgC,CAAC;AAC5D,OAAO,EAAE,OAAO,EAAE,MAAM,uBAAuB,CAAC;AAKhD,OAAO,EAAE,wBAAwB,EAAE,MAAM,4BAA4B,CAAC;AACtE,OAAO,EAAE,eAAe,EAAE,MAAM,kCAAkC,CAAC;AACnE,OAAO,EAAE,kBAAkB,EAAE,uBAAuB,EAAE,MAAM,cAAc,CAAC;AAC3E,OAAO,EAAE,YAAY,EAAoB,MAAM,aAAa,CAAC;AAE7D,MAAM,iBAAiB,GAAG,eAAe,CAAC;AAC1C,MAAM,SAAS,GAAG,aAAa,CAAC;AAUhC,MAAM,CAAC,MAAM,oBAAoB,GAAG,iBAAiB,CAAC;AAEtD,MAAM,OAAO,4BACX,SAAQ,wBAAwB;IAGtB,MAAM,CAAe;IACrB,MAAM,CAAS;IACf,mBAAmB,CAAwC;IAE3D,eAAe,CAAS;IAExB,kBAAkB,CAGlB;IAES,qBAAqB,CAAqB;IAC1C,qBAAqB,CAAqB;IAC1C,sBAAsB,CAAS;IACjC,QAAQ,CAAU;IAClB,MAAM,CAAW;IAElC,YAAY,EACV,MAAM,EACN,QAAQ,EACR,QAAQ,EACR,qBAAqB,EACrB,qBAAqB,EACrB,sBAAsB,GAAG,GAAG,EAC5B,QAAQ,EACR,MAAM,GACqB;QAC3B,KAAK,EAAE,CAAC;QACR,IAAI,CAAC,MAAM,GAAG;YACZ,SAAS,EAAE,QAAQ;YACnB,0BAA0B,EAAE,MAAM;SACnC,CAAC;QACF,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACzB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,8EAA8E;QAC9E,IAAI,CAAC,eAAe,GAAG,OAAO,CAAC,QAAQ,EAAE,oBAAoB,CAAC,CAAC;QAC/D,IAAI,CAAC,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;QAEvD,IAAI,CAAC,qBAAqB,GAAG,qBAAqB,CAAC;QACnD,IAAI,CAAC,qBAAqB,GAAG,qBAAqB,CAAC;QACnD,IAAI,CAAC,sBAAsB,GAAG,sBAAsB,CAAC;IACvD,CAAC;IAES,KAAK,CAAC,aAAa;QAC3B,IAAI,CAAC,IAAI,CAAC,mBAAmB,EAAE,CAAC;YAC9B,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACvC,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,gBAAgB,CAAC,SAAS,CAAC,CAAC;YACzD,IAAI,CAAC,mBAAmB,GAAG,MAAM,KAAK,CAAC,wBAAwB,CAC7D,SAAS,EACT,QAAQ,CACT,CAAC;QACJ,CAAC;QACD,OAAO,IAAI,CAAC,mBAAmB,CAAC;IAClC,CAAC;IAED;;;OAGG;IACO,qBAAqB,CAC7B,QAAyD;QAEzD,IAAI,KAAK,CAAC,aAAa,CAAC,QAAQ,CAAC,EAAE,CAAC;YAClC,MAAM,CAAC,KAAK,CAAC,oBAAoB,EAAE,QAAQ,CAAC,CAAC;YAC7C,MAAM,IAAI,uBAAuB,CAAC,oBAAoB,EAAE,QAAQ,CAAC,CAAC;QACpE,CAAC;QAED,IAAI,CAAC,QAAQ,CAAC,UAAU,EAAE,CAAC;YACzB,MAAM,IAAI,kBAAkB,CAAC,2BAA2B,CAAC,CAAC;QAC5D,CAAC;QAED,MAAM,MAAM,GAAuB;YACjC,WAAW,EAAE,QAAQ,CAAC,YAAY;YAClC,YAAY,EAAE,QAAQ,CAAC,aAAa;YACpC,OAAO,EAAE,QAAQ,CAAC,QAAQ;YAC1B,SAAS,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,CAAC,UAAU,GAAG,IAAI,CAAC;YAC5D,SAAS,EAAE,QAAQ,CAAC,UAAU;SAC/B,CAAC;QAEF,YAAY,CAAC,QAAQ,CAAC;YACpB,YAAY,EAAE,MAAM;SACrB,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,EAAE,UAAU,KAA8B,EAAE;QACvD,OAAO,IAAI,CAAC,SAAS,CAAC;YACpB,UAAU,EAAE,IAAI,CAAC,qBAAqB,IAAI,UAAU,IAAI,GAAG;YAC3D,QAAQ,EAAE,IAAI;SACf,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,EAAE,UAAU,KAA8B,EAAE;QACvD,OAAO,IAAI,CAAC,SAAS,CAAC;YACpB,UAAU,EAAE,IAAI,CAAC,qBAAqB,IAAI,UAAU,IAAI,GAAG;SAC5D,CAAC,CAAC;IACL,CAAC;IAEO,KAAK,CAAC,SAAS,CAAC,EACtB,UAAU,EACV,QAAQ,GAAG,KAAK,GAIjB;QACC,MAAM,qBAAqB,GAAG,MAAM,CAAC;QACrC,MAAM,mBAAmB,GAAG,MAAM,IAAI,CAAC,aAAa,EAAE,CAAC;QAEvD,IAAI,CAAC,mBAAmB,CAAC,sBAAsB,EAAE,CAAC;YAChD,MAAM,IAAI,kBAAkB,CAAC,2BAA2B,CAAC,CAAC;QAC5D,CAAC;QAED;;;;WAIG;QACH,MAAM,YAAY,GAAG,KAAK,CAAC,0BAA0B,EAAE,CAAC;QACxD,MAAM,aAAa,GAAG,MAAM,KAAK,CAAC,0BAA0B,CAAC,YAAY,CAAC,CAAC;QAE3E,cAAc,CAAC,OAAO,CAAC,iBAAiB,EAAE,YAAY,CAAC,CAAC;QAExD,6CAA6C;QAC7C,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAC9B,mBAAmB,CAAC,sBAAsB,CAC3C,CAAC;QAEF,cAAc,CAAC,OAAO,CAAC,aAAa,EAAE,UAAU,CAAC,CAAC;QAElD,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACpD,WAAW,CAAC,QAAQ,GAAG,IAAI,CAAC,eAAe,CAAC;QAC5C,WAAW,CAAC,MAAM,GAAG,EAAE,CAAC;QAExB,gBAAgB,CAAC,YAAY,CAAC,GAAG,CAAC,WAAW,EAAE,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QACtE,gBAAgB,CAAC,YAAY,CAAC,GAAG,CAAC,cAAc,EAAE,WAAW,CAAC,QAAQ,EAAE,CAAC,CAAC;QAC1E,gBAAgB,CAAC,YAAY,CAAC,GAAG,CAAC,eAAe,EAAE,MAAM,CAAC,CAAC;QAC3D,gBAAgB,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;QAClE,gBAAgB,CAAC,YAAY,CAAC,GAAG,CAAC,gBAAgB,EAAE,aAAa,CAAC,CAAC;QACnE,gBAAgB,CAAC,YAAY,CAAC,GAAG,CAC/B,uBAAuB,EACvB,qBAAqB,CACtB,CAAC;QACF,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAClB,gBAAgB,CAAC,YAAY,CAAC,GAAG,CAAC,UAAU,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC/D,CAAC;QAED,IAAI,CAAC,kBAAkB,EAAE,CAAC,gBAAgB,EAAE;YAC1C,QAAQ,EAAE,CAAC,QAAQ;YACnB,QAAQ;SACT,CAAC,CAAC;QAEH;;;WAGG;QACH,MAAM,KAAK,GAAG,KAAK,CAAC,mBAAmB,EAAE,CAAC;QAC1C,cAAc,CAAC,OAAO,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;QACzC,gBAAgB,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QAElD,iDAAiD;QACjD,QAAQ,CAAC,IAAI,GAAG,gBAAgB,CAAC,IAAI,CAAC;IACxC,CAAC;IAED,KAAK,CAAC,cAAc;QAClB,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,aAAa,EAAE,CAAC;QACtC,MAAM,EAAE,YAAY,EAAE,GAAG,YAAY,CAAC,QAAQ,EAAE,CAAC;QACjD,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,MAAM,IAAI,kBAAkB,CAAC,2BAA2B,CAAC,CAAC;QAC5D,CAAC;QACD,MAAM,UAAU,GAAG,YAAkC,CAAC;QAEtD,IAAI,IAAI,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,GAAG,IAAI,IAAI,EAAE,EAAE,CAAC;YAChD,IAAI,CAAC,UAAU,CAAC,YAAY,EAAE,CAAC;gBAC7B,YAAY,CAAC,QAAQ,CAAC;oBACpB,eAAe,EAAE,KAAK;oBACtB,SAAS,EAAE,KAAK;oBAChB,OAAO,EAAE,IAAI;oBACb,YAAY,EAAE,IAAI;iBACnB,CAAC,CAAC;gBACH,OAAO,EAAE,CAAC;YACZ,CAAC;YAED,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,wBAAwB,CAClD,EAAE,EACF,IAAI,CAAC,MAAM,EACX,UAAU,CAAC,YAAY,CACxB,CAAC;YACF,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,2BAA2B,CACtD,EAAE,EACF,IAAI,CAAC,MAAM,EACX,OAAO,CACR,CAAC;YAEF,IAAI,CAAC,QAAQ,CAAC,YAAY,EAAE,CAAC;gBAC3B,MAAM,IAAI,kBAAkB,CAAC,6BAA6B,CAAC,CAAC;YAC9D,CAAC;YAED,IAAI,CAAC,qBAAqB,CAAC,QAAQ,CAAC,CAAC;YAErC,OAAO,QAAQ,CAAC,YAAY,CAAC,QAAQ,EAAE,CAAC;QAC1C,CAAC;aAAM,CAAC;YACN,OAAO,UAAU,CAAC,WAAW,CAAC;QAChC,CAAC;IACH,CAAC;IAED,WAAW,GAAG,KAAK,EAAE,OAAgB,EAAoB,EAAE;QACzD,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,cAAc,EAAE,CAAC;QAChD,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,UAAU,WAAW,EAAE,CAAC,CAAC;QAC9D,OAAO,OAAO,CAAC;IACjB,CAAC,CAAC;IAEF,OAAO,GAAG,KAAK,IAAI,EAAE;QACnB,YAAY,CAAC,QAAQ,CAAC;YACpB,eAAe,EAAE,KAAK;YACtB,SAAS,EAAE,KAAK;YAChB,OAAO,EAAE,SAAS;YAClB,YAAY,EAAE,SAAS;SACxB,CAAC,CAAC;QAEH,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,aAAa,EAAE,CAAC;QAEtC,MAAM,WAAW,GAAG,IAAI,GAAG,CACzB,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG,IAAI,CAAC,sBAAsB,CACrD,CAAC;QACF,WAAW,CAAC,QAAQ,GAAG,IAAI,CAAC,eAAe,CAAC;QAE5C,IAAI,SAAc,CAAC;QACnB,uEAAuE;QACvE,sEAAsE;QACtE,IAAI,EAAE,CAAC,oBAAoB,EAAE,CAAC;YAC5B,SAAS,GAAG,IAAI,GAAG,CAAC,EAAE,CAAC,oBAAoB,CAAC,CAAC;YAC7C,kCAAkC;YAClC,gCAAgC;YAChC,kBAAkB;YAClB,2DAA2D;YAC3D,IAAI;YACJ,SAAS,CAAC,YAAY,CAAC,GAAG,CACxB,0BAA0B,EAC1B,WAAW,CAAC,QAAQ,EAAE,CACvB,CAAC;QACJ,CAAC;aAAM,CAAC;YACN,SAAS,GAAG,WAAW,CAAC;QAC1B,CAAC;IACH,CAAC,CAAC;IAEF,cAAc,GAAG,KAAK,IAAI,EAAE;QAC1B,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAC1C,MAAM,KAAK,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAC5C,MAAM,WAAW,GAAG,cAAc,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QACtD,cAAc,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;QAErC,IAAI,KAAK,KAAK,WAAW,EAAE,CAAC;YAC1B,MAAM,IAAI,kBAAkB,CAAC,yBAAyB,CAAC,CAAC;QAC1D,CAAC;QAED,8DAA8D;QAC9D,8CAA8C;QAC9C,MAAM,YAAY,GAAG,cAAc,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;QAC/D,cAAc,CAAC,UAAU,CAAC,iBAAiB,CAAC,CAAC;QAC7C,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,MAAM,IAAI,kBAAkB,CAAC,kCAAkC,CAAC,CAAC;QACnE,CAAC;QAED,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,aAAa,EAAE,CAAC;QAE9C,MAAM,MAAM,GAAG,KAAK,CAAC,oBAAoB,CACvC,UAAU,EACV,IAAI,CAAC,MAAM,EACX,GAAG,CAAC,YAAY,EAChB,KAAK,IAAI,SAAS,CACnB,CAAC;QACF,IAAI,KAAK,CAAC,aAAa,CAAC,MAAM,CAAC,EAAE,CAAC;YAChC,MAAM,CAAC,KAAK,CAAC,iCAAiC,EAAE,MAAM,CAAC,CAAC;YACxD,MAAM,IAAI,uBAAuB,CAC/B,iCAAiC,EACjC,MAAM,CACP,CAAC;QACJ,CAAC;QAED,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;QACjC,WAAW,CAAC,QAAQ,GAAG,IAAI,CAAC,eAAe,CAAC;QAC5C,WAAW,CAAC,MAAM,GAAG,EAAE,CAAC;QAExB,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,6BAA6B,CACxD,UAAU,EACV,IAAI,CAAC,MAAM,EACX,MAAM,EACN,WAAW,CAAC,QAAQ,EAAE,EACtB,YAAY,CACb,CAAC;QAEF,+BAA+B;QAC/B,qEAAqE;QACrE,oBAAoB;QACpB,0CAA0C;QAC1C,8DAA8D;QAC9D,MAAM;QACN,uEAAuE;QACvE,IAAI;QACJ,MAAM,WAAW,GAAG,MAAM,KAAK,CAAC,sCAAsC,CACpE,UAAU,EACV,IAAI,CAAC,MAAM,EACX,QAAQ,CACT,CAAC;QAEF,IAAI,CAAC,qBAAqB,CAAC,WAAW,CAAC,CAAC;QAExC,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,cAAc,EAAE,CAAC;QAEhD,MAAM,gBAAgB,GAAG,MAAM,KAAK,CAAC,eAAe,CAClD,UAAU,EACV,IAAI,CAAC,MAAM,EACX,WAAW,CACZ,CAAC;QACF,MAAM,QAAQ,GAAG,MAAM,gBAAgB,CAAC,IAAI,EAAE,CAAC;QAE/C,MAAM,OAAO,GAAgB;YAC3B,GAAG,EAAE,QAAQ,CAAC,GAAG;YACjB,KAAK,EAAE,QAAQ,CAAC,KAAK;YACrB,IAAI,EAAE,QAAQ,CAAC,IAAI;YACnB,aAAa,EAAE,QAAQ,CAAC,cAAc,IAAI,KAAK;YAC/C,UAAU,EAAE,QAAQ,CAAC,OAAO;SAC7B,CAAC;QAEF,YAAY,CAAC,QAAQ,CAAC;YACpB,eAAe,EAAE,IAAI;YACrB,SAAS,EAAE,KAAK;YAChB,OAAO;SACR,CAAC,CAAC;QAEH,MAAM,UAAU,GAAG,cAAc,CAAC,OAAO,CAAC,aAAa,CAAC,IAAI,GAAG,CAAC;QAChE,cAAc,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;QACzC,OAAO,UAAU,CAAC;IACpB,CAAC,CAAC;IAEF,SAAS;QACP,OAAO;YACL,GAAG,KAAK,CAAC,SAAS,EAAE;YACpB;gBACE,IAAI,EAAE,oBAAoB;gBAC1B,OAAO,EAAE,CACP,KAAC,UAAU,cACT,KAAC,eAAe,IAAC,cAAc,EAAE,IAAI,CAAC,cAAc,GAAI,GAC7C,CACd;aACF;SACF,CAAC;IACJ,CAAC;CACF;AAED,MAAM,UAAU,GAEZ,CAAC,OAAO,EAAE,EAAE,CAAC,IAAI,4BAA4B,CAAC,OAAO,CAAC,CAAC;AAE3D,eAAe,UAAU,CAAC"}

package/dist/lib/authentication/providers/supabase.d.ts

@@ -0,0 +1,4 @@
+import { type SupabaseAuthenticationConfig } from "../../../config/config.js";
+import { type AuthenticationProviderInitializer } from "../authentication.js";
+declare const supabaseAuth: AuthenticationProviderInitializer<SupabaseAuthenticationConfig>;
+export default supabaseAuth;

package/dist/lib/authentication/providers/supabase.js

@@ -0,0 +1,115 @@
+import { createClient, } from "@supabase/supabase-js";
+import { CoreAuthenticationPlugin } from "../AuthenticationPlugin.js";
+import { AuthorizationError } from "../errors.js";
+import { useAuthState } from "../state.js";
+class SupabaseAuthenticationProvider extends CoreAuthenticationPlugin {
+    client;
+    provider;
+    redirectToAfterSignUp;
+    redirectToAfterSignIn;
+    redirectToAfterSignOut;
+    constructor({ supabaseUrl, supabaseKey, provider, redirectToAfterSignUp, redirectToAfterSignIn, redirectToAfterSignOut, basePath, }) {
+        super();
+        this.provider = provider;
+        this.client = createClient(supabaseUrl, supabaseKey, {
+            auth: {
+                autoRefreshToken: true,
+                persistSession: true,
+            },
+        });
+        const root = basePath ?? "/";
+        this.redirectToAfterSignUp = redirectToAfterSignUp ?? root;
+        this.redirectToAfterSignIn = redirectToAfterSignIn ?? root;
+        this.redirectToAfterSignOut = redirectToAfterSignOut ?? root;
+        this.client.auth.onAuthStateChange(async (event, session) => {
+            if (session && (event === "SIGNED_IN" || event === "TOKEN_REFRESHED")) {
+                await this.updateUserState(session);
+            }
+            else if (event === "SIGNED_OUT") {
+                useAuthState.setState({
+                    isAuthenticated: false,
+                    isPending: false,
+                    profile: undefined,
+                    providerData: undefined,
+                });
+            }
+        });
+    }
+    async updateUserState(session) {
+        const { user } = session;
+        const profile = {
+            sub: user.id,
+            email: user.email,
+            name: user.user_metadata.full_name || user.user_metadata.name,
+            emailVerified: user.email_confirmed_at != null,
+            pictureUrl: user.user_metadata.avatar_url,
+        };
+        useAuthState.setState({
+            isAuthenticated: true,
+            isPending: false,
+            profile,
+            providerData: { session },
+        });
+    }
+    async getAccessToken() {
+        const { data, error } = await this.client.auth.getSession();
+        if (error || !data.session) {
+            throw new AuthorizationError("User is not authenticated");
+        }
+        return data.session.access_token;
+    }
+    async signRequest(request) {
+        const accessToken = await this.getAccessToken();
+        request.headers.set("Authorization", `Bearer ${accessToken}`);
+        return request;
+    }
+    signUp = async ({ redirectTo }) => {
+        const finalRedirectTo = redirectTo ?? this.redirectToAfterSignUp;
+        // Open Supabase Auth UI in a new window
+        await this.client.auth.signInWithOAuth({
+            provider: this.provider,
+            options: {
+                redirectTo: window.location.origin + finalRedirectTo,
+            },
+        });
+    };
+    signIn = async ({ redirectTo }) => {
+        const finalRedirectTo = redirectTo ?? this.redirectToAfterSignIn;
+        await this.client.auth.signInWithOAuth({
+            provider: this.provider,
+            options: {
+                redirectTo: window.location.origin + finalRedirectTo,
+                queryParams: {
+                    access_type: "offline",
+                    prompt: "consent",
+                },
+            },
+        });
+    };
+    signOut = async () => {
+        await new Promise((resolve) => {
+            const { data } = this.client.auth.onAuthStateChange(async (event) => {
+                if (event !== "SIGNED_OUT")
+                    return;
+                data.subscription.unsubscribe();
+                resolve();
+            });
+            void this.client.auth.signOut();
+        });
+        useAuthState.setState({
+            isAuthenticated: false,
+            isPending: false,
+            profile: undefined,
+            providerData: undefined,
+        });
+    };
+    onPageLoad = async () => {
+        const { data, error } = await this.client.auth.getSession();
+        if (!error && data.session) {
+            await this.updateUserState(data.session);
+        }
+    };
+}
+const supabaseAuth = (options) => new SupabaseAuthenticationProvider(options);
+export default supabaseAuth;
+//# sourceMappingURL=supabase.js.map

package/dist/lib/authentication/providers/supabase.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"supabase.js","sourceRoot":"","sources":["../../../../src/lib/authentication/providers/supabase.tsx"],"names":[],"mappings":"AAAA,OAAO,EACL,YAAY,GAIb,MAAM,uBAAuB,CAAC;AAM/B,OAAO,EAAE,wBAAwB,EAAE,MAAM,4BAA4B,CAAC;AACtE,OAAO,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAClD,OAAO,EAAE,YAAY,EAAoB,MAAM,aAAa,CAAC;AAE7D,MAAM,8BACJ,SAAQ,wBAAwB;IAGf,MAAM,CAAiB;IACvB,QAAQ,CAAW;IACnB,qBAAqB,CAAS;IAC9B,qBAAqB,CAAS;IAC9B,sBAAsB,CAAS;IAEhD,YAAY,EACV,WAAW,EACX,WAAW,EACX,QAAQ,EACR,qBAAqB,EACrB,qBAAqB,EACrB,sBAAsB,EACtB,QAAQ,GACqB;QAC7B,KAAK,EAAE,CAAC;QACR,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACzB,IAAI,CAAC,MAAM,GAAG,YAAY,CAAC,WAAW,EAAE,WAAW,EAAE;YACnD,IAAI,EAAE;gBACJ,gBAAgB,EAAE,IAAI;gBACtB,cAAc,EAAE,IAAI;aACrB;SACF,CAAC,CAAC;QAEH,MAAM,IAAI,GAAG,QAAQ,IAAI,GAAG,CAAC;QAE7B,IAAI,CAAC,qBAAqB,GAAG,qBAAqB,IAAI,IAAI,CAAC;QAC3D,IAAI,CAAC,qBAAqB,GAAG,qBAAqB,IAAI,IAAI,CAAC;QAC3D,IAAI,CAAC,sBAAsB,GAAG,sBAAsB,IAAI,IAAI,CAAC;QAE7D,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,iBAAiB,CAAC,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;YAC1D,IAAI,OAAO,IAAI,CAAC,KAAK,KAAK,WAAW,IAAI,KAAK,KAAK,iBAAiB,CAAC,EAAE,CAAC;gBACtE,MAAM,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC;YACtC,CAAC;iBAAM,IAAI,KAAK,KAAK,YAAY,EAAE,CAAC;gBAClC,YAAY,CAAC,QAAQ,CAAC;oBACpB,eAAe,EAAE,KAAK;oBACtB,SAAS,EAAE,KAAK;oBAChB,OAAO,EAAE,SAAS;oBAClB,YAAY,EAAE,SAAS;iBACxB,CAAC,CAAC;YACL,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;IAEO,KAAK,CAAC,eAAe,CAAC,OAAgB;QAC5C,MAAM,EAAE,IAAI,EAAE,GAAG,OAAO,CAAC;QAEzB,MAAM,OAAO,GAAgB;YAC3B,GAAG,EAAE,IAAI,CAAC,EAAE;YACZ,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,IAAI,EAAE,IAAI,CAAC,aAAa,CAAC,SAAS,IAAI,IAAI,CAAC,aAAa,CAAC,IAAI;YAC7D,aAAa,EAAE,IAAI,CAAC,kBAAkB,IAAI,IAAI;YAC9C,UAAU,EAAE,IAAI,CAAC,aAAa,CAAC,UAAU;SAC1C,CAAC;QAEF,YAAY,CAAC,QAAQ,CAAC;YACpB,eAAe,EAAE,IAAI;YACrB,SAAS,EAAE,KAAK;YAChB,OAAO;YACP,YAAY,EAAE,EAAE,OAAO,EAAE;SAC1B,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,cAAc;QAClB,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC;QAE5D,IAAI,KAAK,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;YAC3B,MAAM,IAAI,kBAAkB,CAAC,2BAA2B,CAAC,CAAC;QAC5D,CAAC;QAED,OAAO,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC;IACnC,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,OAAgB;QAChC,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,cAAc,EAAE,CAAC;QAChD,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,UAAU,WAAW,EAAE,CAAC,CAAC;QAC9D,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,MAAM,GAAG,KAAK,EAAE,EAAE,UAAU,EAA2B,EAAE,EAAE;QACzD,MAAM,eAAe,GAAG,UAAU,IAAI,IAAI,CAAC,qBAAqB,CAAC;QAEjE,wCAAwC;QACxC,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC;YACrC,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,OAAO,EAAE;gBACP,UAAU,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG,eAAe;aACrD;SACF,CAAC,CAAC;IACL,CAAC,CAAC;IAEF,MAAM,GAAG,KAAK,EAAE,EAAE,UAAU,EAA2B,EAAE,EAAE;QACzD,MAAM,eAAe,GAAG,UAAU,IAAI,IAAI,CAAC,qBAAqB,CAAC;QAEjE,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC;YACrC,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,OAAO,EAAE;gBACP,UAAU,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG,eAAe;gBACpD,WAAW,EAAE;oBACX,WAAW,EAAE,SAAS;oBACtB,MAAM,EAAE,SAAS;iBAClB;aACF;SACF,CAAC,CAAC;IACL,CAAC,CAAC;IAEF,OAAO,GAAG,KAAK,IAAI,EAAE;QACnB,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;YAClC,MAAM,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,iBAAiB,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;gBAClE,IAAI,KAAK,KAAK,YAAY;oBAAE,OAAO;gBACnC,IAAI,CAAC,YAAY,CAAC,WAAW,EAAE,CAAC;gBAChC,OAAO,EAAE,CAAC;YACZ,CAAC,CAAC,CAAC;YACH,KAAK,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;QAClC,CAAC,CAAC,CAAC;QAEH,YAAY,CAAC,QAAQ,CAAC;YACpB,eAAe,EAAE,KAAK;YACtB,SAAS,EAAE,KAAK;YAChB,OAAO,EAAE,SAAS;YAClB,YAAY,EAAE,SAAS;SACxB,CAAC,CAAC;IACL,CAAC,CAAC;IAEF,UAAU,GAAG,KAAK,IAAI,EAAE;QACtB,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC;QAE5D,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YAC3B,MAAM,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC3C,CAAC;IACH,CAAC,CAAC;CACH;AAED,MAAM,YAAY,GAEd,CAAC,OAAO,EAAE,EAAE,CAAC,IAAI,8BAA8B,CAAC,OAAO,CAAC,CAAC;AAE7D,eAAe,YAAY,CAAC"}

package/dist/lib/authentication/state.d.ts

@@ -1,9 +1,29 @@
-export declare const useAuthState: import("zustand").UseBoundStore<import("zustand").StoreApi<AuthState>>;
-export interface AuthState {
+import { type Mutate, type StoreApi } from "zustand";
+export interface AuthState<ProviderData = unknown> {
     isAuthenticated: boolean;
     isPending: boolean;
-    profile?: UserProfile;
+    profile: UserProfile | null;
+    providerData: ProviderData | null;
 }
+export declare class Authentication {
+    setLoggedIn(isLoggedIn: boolean): Promise<void>;
+    setProfile(): Promise<void>;
+    setPersistentProviderData(): Promise<void>;
+}
+export type StoreWithPersist<T> = Mutate<StoreApi<T>, [
+    ["zustand/persist", unknown]
+]>;
+export declare const useAuthState: import("zustand").UseBoundStore<Omit<StoreApi<AuthState<unknown>>, "persist"> & {
+    persist: {
+        setOptions: (options: Partial<import("zustand/middleware").PersistOptions<AuthState<unknown>, unknown>>) => void;
+        clearStorage: () => void;
+        rehydrate: () => Promise<void> | void;
+        hasHydrated: () => boolean;
+        onHydrate: (fn: (state: AuthState<unknown>) => void) => () => void;
+        onFinishHydration: (fn: (state: AuthState<unknown>) => void) => () => void;
+        getOptions: () => Partial<import("zustand/middleware").PersistOptions<AuthState<unknown>, unknown>>;
+    };
+}>;
 export interface UserProfile {
     sub: string;
     email: string | undefined;
@@ -12,19 +32,3 @@ export interface UserProfile {
     pictureUrl: string | undefined;
     [key: string]: string | boolean | undefined;
 }
-interface SelectedServerState {
-    selectedServer?: string;
-    setSelectedServer: (newServer: string) => void;
-}
-export declare const useSelectedServerStore: import("zustand").UseBoundStore<Omit<import("zustand").StoreApi<SelectedServerState>, "persist"> & {
-    persist: {
-        setOptions: (options: Partial<import("zustand/middleware").PersistOptions<SelectedServerState, SelectedServerState>>) => void;
-        clearStorage: () => void;
-        rehydrate: () => Promise<void> | void;
-        hasHydrated: () => boolean;
-        onHydrate: (fn: (state: SelectedServerState) => void) => () => void;
-        onFinishHydration: (fn: (state: SelectedServerState) => void) => () => void;
-        getOptions: () => Partial<import("zustand/middleware").PersistOptions<SelectedServerState, SelectedServerState>>;
-    };
-}>;
-export {};

package/dist/lib/authentication/state.js

@@ -1,11 +1,38 @@
 import { create } from "zustand";
-import { persist } from "zustand/middleware";
-export const useAuthState = create(() => ({
-    isPending: false,
+import { createJSONStorage, persist } from "zustand/middleware";
+export class Authentication {
+    async setLoggedIn(isLoggedIn) { }
+    async setProfile() { }
+    async setPersistentProviderData() { }
+}
+const withStorageDOMEvents = (store) => {
+    const storageEventCallback = (e) => {
+        if (e.key === store.persist.getOptions().name && e.newValue) {
+            void store.persist.rehydrate();
+        }
+    };
+    window.addEventListener("storage", storageEventCallback);
+    return () => {
+        window.removeEventListener("storage", storageEventCallback);
+    };
+};
+export const useAuthState = create()(persist((state) => ({
     isAuthenticated: false,
+    isPending: true,
+    profile: null,
+    providerData: null,
+}), {
+    merge: (persistedState, currentState) => {
+        return {
+            ...currentState,
+            isPending: false,
+            ...(typeof persistedState === "object" ? persistedState : {}),
+        };
+    },
+    name: "auth-state",
+    storage: createJSONStorage(() => localStorage),
 }));
-export const useSelectedServerStore = create()(persist((set) => ({
-    selectedServer: undefined,
-    setSelectedServer: (newServer) => set({ selectedServer: newServer }),
-}), { name: "zudoku-selected-server" }));
+if (typeof window !== "undefined") {
+    withStorageDOMEvents(useAuthState);
+}
 //# sourceMappingURL=state.js.map

package/dist/lib/authentication/state.js.map

@@ -1 +1 @@
-{"version":3,"file":"state.js","sourceRoot":"","sources":["../../../src/lib/authentication/state.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAC;AAE7C,MAAM,CAAC,MAAM,YAAY,GAAG,MAAM,CAAY,GAAG,EAAE,CAAC,CAAC;IACnD,SAAS,EAAE,KAAK;IAChB,eAAe,EAAE,KAAK;CACvB,CAAC,CAAC,CAAC;AAsBJ,MAAM,CAAC,MAAM,sBAAsB,GAAG,MAAM,EAAuB,CACjE,OAAO,CACL,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;IACR,cAAc,EAAE,SAAS;IACzB,iBAAiB,EAAE,CAAC,SAAiB,EAAE,EAAE,CACvC,GAAG,CAAC,EAAE,cAAc,EAAE,SAAS,EAAE,CAAC;CACrC,CAAC,EACF,EAAE,IAAI,EAAE,wBAAwB,EAAE,CACnC,CACF,CAAC"}
+{"version":3,"file":"state.js","sourceRoot":"","sources":["../../../src/lib/authentication/state.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAA8B,MAAM,SAAS,CAAC;AAC7D,OAAO,EAAE,iBAAiB,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAC;AAShE,MAAM,OAAO,cAAc;IACzB,KAAK,CAAC,WAAW,CAAC,UAAmB,IAAG,CAAC;IACzC,KAAK,CAAC,UAAU,KAAI,CAAC;IACrB,KAAK,CAAC,yBAAyB,KAAI,CAAC;CACrC;AAOD,MAAM,oBAAoB,GAAG,CAAI,KAA0B,EAAE,EAAE;IAC7D,MAAM,oBAAoB,GAAG,CAAC,CAAe,EAAE,EAAE;QAC/C,IAAI,CAAC,CAAC,GAAG,KAAK,KAAK,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC,IAAI,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC;YAC5D,KAAK,KAAK,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC;QACjC,CAAC;IACH,CAAC,CAAC;IAEF,MAAM,CAAC,gBAAgB,CAAC,SAAS,EAAE,oBAAoB,CAAC,CAAC;IAEzD,OAAO,GAAG,EAAE;QACV,MAAM,CAAC,mBAAmB,CAAC,SAAS,EAAE,oBAAoB,CAAC,CAAC;IAC9D,CAAC,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,YAAY,GAAG,MAAM,EAAa,CAC7C,OAAO,CACL,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACV,eAAe,EAAE,KAAK;IACtB,SAAS,EAAE,IAAI;IACf,OAAO,EAAE,IAAI;IACb,YAAY,EAAE,IAAI;CACnB,CAAC,EACF;IACE,KAAK,EAAE,CAAC,cAAc,EAAE,YAAY,EAAE,EAAE;QACtC,OAAO;YACL,GAAG,YAAY;YACf,SAAS,EAAE,KAAK;YAChB,GAAG,CAAC,OAAO,cAAc,KAAK,QAAQ,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,CAAC;SAC9D,CAAC;IACJ,CAAC;IACD,IAAI,EAAE,YAAY;IAClB,OAAO,EAAE,iBAAiB,CAAC,GAAG,EAAE,CAAC,YAAY,CAAC;CAC/C,CACF,CACF,CAAC;AAEF,IAAI,OAAO,MAAM,KAAK,WAAW,EAAE,CAAC;IAClC,oBAAoB,CAAC,YAAY,CAAC,CAAC;AACrC,CAAC"}

package/dist/lib/authentication/use-broadcast/shared.d.ts

@@ -0,0 +1,48 @@
+import { StateCreator, StoreMutatorIdentifier } from "zustand";
+export type SharedOptions = {
+    /**
+     * The name of the broadcast channel
+     * It must be unique
+     */
+    name?: string;
+    /**
+     * Main timeout
+     * If the main tab / window doesn't respond in this time, this tab / window will become the main
+     * @default 100 ms
+     */
+    mainTimeout?: number;
+    /**
+     * If true, the store will only synchronize once with the main tab. After that, the store will be unsynchronized.
+     * @default false
+     */
+    unsync?: boolean;
+    /**
+     * Callback when this tab / window becomes the main tab / window
+     * Triggered only in the main tab / window
+     */
+    onBecomeMain?: (id: number) => void;
+    /**
+     * Callback when a new tab is opened / closed
+     * Triggered only in the main tab / window
+     */
+    onTabsChange?: (ids: number[]) => void;
+};
+/**
+ * The Shared type
+ */
+export type Shared = <T, Mps extends [StoreMutatorIdentifier, unknown][] = [], Mcs extends [StoreMutatorIdentifier, unknown][] = []>(f: StateCreator<T, Mps, Mcs>, options?: SharedOptions) => StateCreator<T, Mps, Mcs>;
+/**
+ * Shared middleware
+ *
+ * @example
+ * import { create } from 'zustand';
+ * import { shared } from 'use-broadcast-ts';
+ *
+ * const useStore = create(
+ *      shared(
+ *          (set) => ({ count: 0 }),
+ *          { name: 'my-store' }
+ *      )
+ * );
+ */
+export declare const shared: Shared;