{"version":3,"file":"Auth.DZgCpgy_.js","sources":["../../../../../../src/lib/components/Auth/Auth.svelte"],"sourcesContent":["<script>\n\timport constants from '$lib/constants';\n\timport { configureClient, isAuthenticated as _isAuthenticated, getAccessToken, login } from '@ctm/auth';\n\timport { appState, signedInUser } from '@ctm/auth/store';\n\timport { onMount } from 'svelte';\n\timport { isAuthenticated, accessToken } from '$lib/stores/user';\n\timport { loadSettings, settingsError, settingsLoaded, debtorSettings, applicationTiles, permissions, userDebtors } from '$lib/stores/settings';\n\timport { goto } from '$app/navigation';\n\timport { page } from '$app/stores';\n\timport { appInsights } from '$lib/helpers/appInsights';\n\timport { appUserLink } from '$lib/helpers/appUserLink.js';\n\n\tconst auth0ClientOptions = {\n\t\tdomain: constants.AUTH_DOMAIN,\n\t\tclient_id: constants.AUTH_CLIENT_ID,\n\t\tredirect_uri: constants.AUTH_CALLBACK_URL,\n\t\taudience: 'http://concierge',\n\t\tscope: constants.AUTH_SCOPES,\n\t};\n\n\tconst authConfig = {\n\t\tcallbackLogoutUrl: constants.AUTH_CALLBACK_URL,\n\t\tauth0ClientOptions,\n\t};\n\n\tconst { debtor } = $page.data;\n\tif (debtor) auth0ClientOptions.debtor = debtor;\n\n\tonMount(handleMount);\n\n\tasync function handleMount() {\n\t\tif ($isAuthenticated) return;\n\n\t\t// handle an error that is thrown in the auth0 SDK when there is an active session\n\t\t// but reloading the page returns an error from auth0. This is the same error\n\t\t// when signing in but the SDK will throw the error when there is existing previous session\n\t\ttry {\n\t\t\tif (appInsights) {\n\t\t\t\t// Pass operationId from AppInsights in auth requests so that\n\t\t\t\t// we can correlate app data with rules data in AppInsights\n\t\t\t\tauth0ClientOptions.operationId = encodeURIComponent(appInsights.context.telemetryTrace.parentID ?? appInsights.context.telemetryTrace.traceID);\n\t\t\t}\n\t\t\tawait configureClient(authConfig);\n\t\t} catch (exception) {\n\t\t\tconsole.error(exception);\n\t\t\tconst url = new URL('/', $page.url.origin);\n\t\t\turl.searchParams.set('error', exception.error || exception.message);\n\n\t\t\tif (exception.error_description) url.searchParams.set('error_description', exception.error_description);\n\n\t\t\tgoto(url);\n\t\t}\n\n\t\t$isAuthenticated = await _isAuthenticated();\n\n\t\tif ($signedInUser) {\n\t\t\t$accessToken = await getAccessToken();\n\t\t}\n\n\t\tif ($isAuthenticated && $signedInUser && !$signedInUser.hasPasswordExpired) {\n\t\t\tawait handleSettings();\n\t\t\tif ($page.route.id === '/(sigin-in)') {\n\t\t\t\tlet userLink = $appState?.targetUrl ?? appUserLink('/dashboard');\n\t\t\t\tgoto(userLink);\n\t\t\t}\n\t\t} else if ($page.route.id !== '/(sigin-in)') {\n\t\t\t// If the site has loaded in a new tab/window then we are most likely already authenticated in auth0\n\t\t\t// and getting to this code plus meeting the condition below means that the user may have 3rd party cookies\n\t\t\t// disabled and therefore we silently login to resume the session and load the target URL\n\t\t\tif (window.opener?.location.origin === $page.url.origin) {\n\t\t\t\tlogin({ targetUrl: $page.url.pathname + $page.url.search, login_prompt: 'none' });\n\t\t\t} else {\n\t\t\t\tconst url = new URL(appUserLink('/'), $page.url.origin);\n\t\t\t\turl.searchParams.set('return_to', appUserLink($page.url.pathname));\n\t\t\t\tgoto(url);\n\t\t\t}\n\t\t}\n\t}\n\n\tasync function handleSettings() {\n\t\ttry {\n\t\t\tconst { data } = await loadSettings();\n\t\t\t$settingsError = false;\n\t\t\t$settingsLoaded = true;\n\t\t\t$debtorSettings = data.debtorSettings || {};\n\t\t\t$applicationTiles = data.applicationTiles;\n\t\t\t$permissions = data.permissions;\n\t\t\t$userDebtors = data.userDebtors || [];\n\t\t} catch (err) {\n\t\t\t$settingsError = true;\n\t\t}\n\t}\n</script>\n"],"names":["auth0ClientOptions","constants","authConfig","debtor","$page","onMount","handleMount","$isAuthenticated","appInsights","configureClient","exception","url","goto","set_store_value","isAuthenticated","_isAuthenticated","$signedInUser","accessToken","$accessToken","getAccessToken","handleSettings","userLink","$appState","appUserLink","_a","login","data","loadSettings","settingsError","$settingsError","settingsLoaded","$settingsLoaded","$debtorSettings","$applicationTiles","$permissions","$userDebtors"],"mappings":"yzBAYOA,EAAkB,CACvB,OAAQC,EAAU,YAClB,UAAWA,EAAU,eACrB,aAAcA,EAAU,kBACxB,SAAU,mBACV,MAAOA,EAAU,aAGZC,EAAU,CACf,kBAAmBD,EAAU,kBAC7B,mBAAAD,IAGO,OAAAG,CAAM,EAAKC,EAAM,KACrBD,IAAQH,EAAmB,OAASG,GAExCE,EAAQC,CAAW,iBAEJA,GAAW,UACrB,CAAAC,OAMCC,IAGHR,EAAmB,YAAc,mBAAmBQ,EAAY,QAAQ,eAAe,UAAYA,EAAY,QAAQ,eAAe,OAAO,GAExI,MAAAC,EAAgBP,CAAU,QACxBQ,EAAS,CACjB,QAAQ,MAAMA,CAAS,QACjBC,EAAG,IAAO,IAAI,IAAKP,EAAM,IAAI,MAAM,EACzCO,EAAI,aAAa,IAAI,QAASD,EAAU,OAASA,EAAU,OAAO,EAE9DA,EAAU,mBAAmBC,EAAI,aAAa,IAAI,oBAAqBD,EAAU,iBAAiB,EAEtGE,EAAKD,CAAG,EASL,GANJE,EAAAC,EAAAP,QAAyBQ,EAAgB,EAAAR,CAAA,EAErCS,GACHH,EAAAI,EAAAC,QAAqBC,EAAc,EAAAD,CAAA,EAGhCX,GAAoBS,GAAkB,CAAAA,EAAc,oBAEnD,SADEI,EAAc,EAChBhB,EAAM,MAAM,KAAO,cAAa,CAC/B,IAAAiB,GAAWC,GAAA,YAAAA,EAAW,YAAaC,EAAY,YAAY,EAC/DX,EAAKS,CAAQ,WAEJjB,EAAM,MAAM,KAAO,mBAIzBoB,EAAA,OAAO,SAAP,YAAAA,EAAe,SAAS,UAAWpB,EAAM,IAAI,OAChDqB,EAAK,CAAG,UAAWrB,EAAM,IAAI,SAAWA,EAAM,IAAI,OAAQ,aAAc,oBAElEO,EAAG,IAAO,IAAIY,EAAY,GAAG,EAAGnB,EAAM,IAAI,MAAM,EACtDO,EAAI,aAAa,IAAI,YAAaY,EAAYnB,EAAM,IAAI,QAAQ,CAAA,EAChEQ,EAAKD,CAAG,mBAKIS,GAAc,KAEnB,KAAA,CAAA,KAAAM,CAAI,QAAWC,IACvBd,EAAAe,EAAAC,EAAiB,GAAKA,CAAA,EACtBhB,EAAAiB,EAAAC,EAAkB,GAAIA,CAAA,MACtBC,EAAkBN,EAAK,gBAAc,CAAA,EAAAM,CAAA,MACrCC,EAAoBP,EAAK,iBAAgBO,CAAA,MACzCC,EAAeR,EAAK,YAAWQ,CAAA,MAC/BC,EAAeT,EAAK,aAAW,CAAA,EAAAS,CAAA,OACpB,CACXtB,EAAAe,EAAAC,EAAiB,GAAIA,CAAA"}