Redirect login. (#919)

frontend/src/app/framework/configurations.ts

@@ -7,7 +7,7 @@
 
 export class UIOptions {
     constructor(
-        private readonly value: any,
+        public readonly value: any,
     ) {
     }
 

frontend/src/app/shared/guards/must-be-authenticated.guard.spec.ts

@@ -5,6 +5,7 @@
  * Copyright (c) Squidex UG (haftungsbeschränkt). All rights reserved.
  */
 
+import { Location } from '@angular/common';
 import { Router } from '@angular/router';
 import { firstValueFrom, of } from 'rxjs';
 import { IMock, It, Mock, Times } from 'typemoq';
@@ -13,19 +14,25 @@ import { MustBeAuthenticatedGuard } from './must-be-authenticated.guard';
 
 describe('MustBeAuthenticatedGuard', () => {
     let router: IMock<Router>;
+    let location: IMock<Location>;
     let authService: IMock<AuthService>;
-    const uiOptions = new UIOptions({ map: { type: 'OSM' } });
-    const uiOptionsRedirect = new UIOptions({ map: { type: 'OSM' }, redirectToLogin: true });
+    let authGuard: MustBeAuthenticatedGuard;
+
+    const uiOptions = new UIOptions({});
 
     beforeEach(() => {
+        location = Mock.ofType<Location>();
+
+        location.setup(x => x.path(true))
+            .returns(() => '/my-path');
+
         router = Mock.ofType<Router>();
 
         authService = Mock.ofType<AuthService>();
+        authGuard = new MustBeAuthenticatedGuard(authService.object, location.object, router.object, uiOptions);
     });
 
     it('should navigate to default page if not authenticated', async () => {
-        const authGuard = new MustBeAuthenticatedGuard(uiOptions, authService.object, router.object);
-
         authService.setup(x => x.userChanges)
             .returns(() => of(null));
 
@@ -33,12 +40,10 @@ describe('MustBeAuthenticatedGuard', () => {
 
         expect(result).toBeFalsy();
 
-        router.verify(x => x.navigate(['']), Times.once());
+        router.verify(x => x.navigate([''], { queryParams: { redirectPath: '/my-path' } }), Times.once());
     });
 
     it('should return true if authenticated', async () => {
-        const authGuard = new MustBeAuthenticatedGuard(uiOptions, authService.object, router.object);
-
         authService.setup(x => x.userChanges)
             .returns(() => of(<any>{}));
 
@@ -50,7 +55,7 @@ describe('MustBeAuthenticatedGuard', () => {
     });
 
     it('should login redirect if redirect enabled', async () => {
-        const authGuard = new MustBeAuthenticatedGuard(uiOptionsRedirect, authService.object, router.object);
+        uiOptions.value.redirectToLogin = true;
 
         authService.setup(x => x.userChanges)
             .returns(() => of(null));
@@ -59,6 +64,6 @@ describe('MustBeAuthenticatedGuard', () => {
 
         expect(result!).toBeFalsy();
 
-        authService.verify(x => x.loginRedirect(), Times.once());
+        authService.verify(x => x.loginRedirect('/my-path'), Times.once());
     });
 });

frontend/src/app/shared/guards/must-be-authenticated.guard.ts

@@ -5,6 +5,7 @@
  * Copyright (c) Squidex UG (haftungsbeschränkt). All rights reserved.
  */
 
+import { Location } from '@angular/common';
 import { Injectable } from '@angular/core';
 import { CanActivate, Router } from '@angular/router';
 import { Observable } from 'rxjs';
@@ -14,24 +15,27 @@ import { AuthService } from './../services/auth.service';
 
 @Injectable()
 export class MustBeAuthenticatedGuard implements CanActivate {
-    private readonly redirect: boolean;
-
-    constructor(uiOptions: UIOptions,
+    constructor(
         private readonly authService: AuthService,
+        private readonly location: Location,
         private readonly router: Router,
+        private readonly uiOptions: UIOptions,
     ) {
-        this.redirect = uiOptions.get('redirectToLogin');
     }
 
     public canActivate(): Observable<boolean> {
+        const redirect = this.uiOptions.get('redirectToLogin');
+
         return this.authService.userChanges.pipe(
             take(1),
             tap(user => {
                 if (!user) {
-                    if (this.redirect) {
-                        this.authService.loginRedirect();
+                    const redirectPath = this.location.path(true);
+
+                    if (redirect) {
+                        this.authService.loginRedirect(redirectPath);
                     } else {
-                        this.router.navigate(['']);
+                        this.router.navigate([''], { queryParams: { redirectPath } });
                     }
                 }
             }),

frontend/src/app/shared/guards/must-be-not-authenticated.guard.spec.ts

@@ -5,6 +5,7 @@
  * Copyright (c) Squidex UG (haftungsbeschränkt). All rights reserved.
  */
 
+import { Location } from '@angular/common';
 import { Router } from '@angular/router';
 import { firstValueFrom, of } from 'rxjs';
 import { IMock, It, Mock, Times } from 'typemoq';
@@ -13,19 +14,25 @@ import { MustBeNotAuthenticatedGuard } from './must-be-not-authenticated.guard';
 
 describe('MustBeNotAuthenticatedGuard', () => {
     let router: IMock<Router>;
+    let location: IMock<Location>;
     let authService: IMock<AuthService>;
-    const uiOptions = new UIOptions({ map: { type: 'OSM' } });
-    const uiOptionsRedirect = new UIOptions({ map: { type: 'OSM' }, redirectToLogin: true });
+    let authGuard: MustBeNotAuthenticatedGuard;
+
+    const uiOptions = new UIOptions({});
 
     beforeEach(() => {
+        location = Mock.ofType<Location>();
+
+        location.setup(x => x.path(true))
+            .returns(() => '/my-path');
+
         router = Mock.ofType<Router>();
 
         authService = Mock.ofType<AuthService>();
+        authGuard = new MustBeNotAuthenticatedGuard(authService.object, location.object, router.object, uiOptions);
     });
 
     it('should navigate to app page if authenticated', async () => {
-        const authGuard = new MustBeNotAuthenticatedGuard(uiOptions, authService.object, router.object);
-
         authService.setup(x => x.userChanges)
             .returns(() => of(<any>{}));
 
@@ -33,12 +40,10 @@ describe('MustBeNotAuthenticatedGuard', () => {
 
         expect(result!).toBeFalsy();
 
-        router.verify(x => x.navigate(['app']), Times.once());
+        router.verify(x => x.navigate(['app'], { queryParams: { redirectPath: '/my-path' } }), Times.once());
     });
 
     it('should return true if not authenticated', async () => {
-        const authGuard = new MustBeNotAuthenticatedGuard(uiOptions, authService.object, router.object);
-
         authService.setup(x => x.userChanges)
             .returns(() => of(null));
 
@@ -50,7 +55,7 @@ describe('MustBeNotAuthenticatedGuard', () => {
     });
 
     it('should login redirect and return false if redirect enabled', async () => {
-        const authGuard = new MustBeNotAuthenticatedGuard(uiOptionsRedirect, authService.object, router.object);
+        uiOptions.value.redirectToLogin = true;
 
         authService.setup(x => x.userChanges)
             .returns(() => of(null));
@@ -59,6 +64,6 @@ describe('MustBeNotAuthenticatedGuard', () => {
 
         expect(result).toBeFalsy();
 
-        authService.verify(x => x.loginRedirect(), Times.once());
+        authService.verify(x => x.loginRedirect('/my-path'), Times.once());
     });
 });

frontend/src/app/shared/guards/must-be-not-authenticated.guard.ts

@@ -5,6 +5,7 @@
  * Copyright (c) Squidex UG (haftungsbeschränkt). All rights reserved.
  */
 
+import { Location } from '@angular/common';
 import { Injectable } from '@angular/core';
 import { CanActivate, Router } from '@angular/router';
 import { Observable } from 'rxjs';
@@ -14,25 +15,29 @@ import { AuthService } from './../services/auth.service';
 
 @Injectable()
 export class MustBeNotAuthenticatedGuard implements CanActivate {
-    private readonly redirect: boolean;
 
-    constructor(uiOptions: UIOptions,
+    constructor(
         private readonly authService: AuthService,
+        private readonly location: Location,
         private readonly router: Router,
+        private readonly uiOptions: UIOptions,
     ) {
-        this.redirect = uiOptions.get('redirectToLogin');
     }
 
     public canActivate(): Observable<boolean> {
+        const redirect = this.uiOptions.get('redirectToLogin');
+
         return this.authService.userChanges.pipe(
             take(1),
             tap(user => {
-                if (this.redirect) {
-                    this.authService.loginRedirect();
+                const redirectPath = this.location.path(true);
+
+                if (redirect) {
+                    this.authService.loginRedirect(redirectPath);
                 } else if (user) {
-                    this.router.navigate(['app']);
+                    this.router.navigate(['app'], { queryParams: { redirectPath } });
                 }
             }),
-            map(user => !user && !this.redirect));
+            map(user => !user && !redirect));
     }
 }

frontend/src/app/shared/interceptors/auth.interceptor.spec.ts

@@ -7,6 +7,7 @@
 
 /* eslint-disable deprecation/deprecation */
 
+import { Location } from '@angular/common';
 import { HTTP_INTERCEPTORS, HttpClient, HttpHeaders } from '@angular/common/http';
 import { HttpClientTestingModule, HttpTestingController } from '@angular/common/http/testing';
 import { inject, TestBed } from '@angular/core/testing';
@@ -19,9 +20,15 @@ import { AuthInterceptor } from './auth.interceptor';
 
 describe('AuthInterceptor', () => {
     let authService: IMock<AuthService>;
+    let location: IMock<Location>;
     let router: IMock<Router>;
 
     beforeEach(() => {
+        location = Mock.ofType<Location>();
+
+        location.setup(x => x.path())
+            .returns(() => '/my-path');
+
         authService = Mock.ofType(AuthService);
 
         router = Mock.ofType<Router>();
@@ -32,6 +39,7 @@ describe('AuthInterceptor', () => {
             ],
             providers: [
                 { provide: Router, useFactory: () => router.object },
+                { provide: Location, useFactory: () => location.object },
                 { provide: AuthService, useValue: authService.object },
                 { provide: ApiUrlConfig, useValue: new ApiUrlConfig('http://service/p/') },
                 {
@@ -100,7 +108,7 @@ describe('AuthInterceptor', () => {
 
             expect().nothing();
 
-            authService.verify(x => x.logoutRedirect(), Times.once());
+            authService.verify(x => x.logoutRedirect('/my-path'), Times.once());
         }));
 
     const AUTH_ERRORS = [403];
@@ -137,7 +145,7 @@ describe('AuthInterceptor', () => {
 
                 expect().nothing();
 
-                authService.verify(x => x.logoutRedirect(), Times.never());
+                authService.verify(x => x.logoutRedirect('/my-path'), Times.never());
             }));
     });
 });

frontend/src/app/shared/interceptors/auth.interceptor.ts

@@ -5,6 +5,7 @@
  * Copyright (c) Squidex UG (haftungsbeschränkt). All rights reserved.
  */
 
+import { Location } from '@angular/common';
 import { HttpErrorResponse, HttpEvent, HttpHandler, HttpInterceptor, HttpRequest } from '@angular/common/http';
 import { Injectable } from '@angular/core';
 import { Router } from '@angular/router';
@@ -19,6 +20,7 @@ export class AuthInterceptor implements HttpInterceptor {
 
     constructor(apiUrlConfig: ApiUrlConfig,
         private readonly authService: AuthService,
+        private readonly location: Location,
         private readonly router: Router,
     ) {
         this.baseUrl = apiUrlConfig.buildUrl('');
@@ -50,7 +52,7 @@ export class AuthInterceptor implements HttpInterceptor {
                 if (error.status === 401 && renew) {
                     return this.authService.loginSilent().pipe(
                         catchError(() => {
-                            this.authService.logoutRedirect();
+                            this.authService.logoutRedirect(this.location.path());
 
                             return EMPTY;
                         }),
@@ -58,7 +60,7 @@ export class AuthInterceptor implements HttpInterceptor {
                 } else if (error.status === 401 || error.status === 403) {
                     if (req.method === 'GET') {
                         if (error.status === 401) {
-                            this.authService.logoutRedirect();
+                            this.authService.logoutRedirect(this.location.path());
                         } else {
                             this.router.navigate(['/forbidden'], { replaceUrl: true });
                         }

frontend/src/app/shared/services/auth.service.ts

@@ -7,7 +7,7 @@
 
 import { Injectable } from '@angular/core';
 import { Log, User, UserManager, WebStorageStateStore } from 'oidc-client';
-import { concat, Observable, Observer, of, ReplaySubject, throwError, TimeoutError } from 'rxjs';
+import { concat, Observable, of, ReplaySubject, throwError, TimeoutError } from 'rxjs';
 import { delay, mergeMap, retryWhen, take, timeout } from 'rxjs/operators';
 import { ApiUrlConfig, Types } from '@app/framework';
 
@@ -124,19 +124,19 @@ export class AuthService {
         this.checkState(this.userManager.getUser());
     }
 
-    public logoutRedirect() {
-        this.userManager.signoutRedirect();
+    public logoutRedirect(redirectPath: string) {
+        this.userManager.signoutRedirect({ state: { redirectPath } });
     }
 
-    public loginRedirect() {
-        this.userManager.signinRedirect();
+    public loginRedirect(redirectPath: string) {
+        this.userManager.signinRedirect({ state: { redirectPath } });
     }
 
-    public logoutRedirectComplete(): Observable<any> {
-        return new Observable((observer: Observer<any>) => {
+    public logoutRedirectComplete(): Observable<string | undefined> {
+        return new Observable<string | undefined>(observer => {
             this.userManager.signoutRedirectCallback()
                 .then(x => {
-                    observer.next(x);
+                    observer.next(x.state?.redirectPath);
                     observer.complete();
                 }, err => {
                     observer.error(err);
@@ -145,11 +145,11 @@ export class AuthService {
         });
     }
 
-    public loginPopup(): Observable<Profile> {
-        return new Observable<Profile>(observer => {
-            this.userManager.signinPopup()
+    public loginPopup(redirectPath: string): Observable<string | undefined> {
+        return new Observable<string | undefined>(observer => {
+            this.userManager.signinPopup({ state: { redirectPath } })
                 .then(x => {
-                    observer.next(AuthService.createProfile(x));
+                    observer.next(x.state?.redirectPath);
                     observer.complete();
                 }, err => {
                     observer.error(err);
@@ -158,11 +158,11 @@ export class AuthService {
         });
     }
 
-    public loginRedirectComplete(): Observable<Profile> {
-        return new Observable<Profile>(observer => {
+    public loginRedirectComplete(): Observable<string | undefined> {
+        return new Observable<string | undefined>(observer => {
             this.userManager.signinRedirectCallback()
                 .then(x => {
-                    observer.next(AuthService.createProfile(x));
+                    observer.next(x.state?.redirectPath);
                     observer.complete();
                 }, err => {
                     observer.error(err);

frontend/src/app/shell/pages/home/home-page.component.ts

@@ -5,8 +5,9 @@
  * Copyright (c) Squidex UG (haftungsbeschränkt). All rights reserved.
  */
 
+import { Location } from '@angular/common';
 import { Component } from '@angular/core';
-import { Router } from '@angular/router';
+import { ActivatedRoute, Router } from '@angular/router';
 import { AuthService } from '@app/shared';
 
 @Component({
@@ -19,18 +20,26 @@ export class HomePageComponent {
 
     constructor(
         private readonly authService: AuthService,
+        private readonly location: Location,
+        private readonly route: ActivatedRoute,
         private readonly router: Router,
     ) {
     }
 
     public login() {
+        const redirectPath =
+            this.route.snapshot.queryParams.redirectPath ||
+            this.location.path();
+
         if (this.isIE()) {
-            this.authService.loginRedirect();
+            this.authService.loginRedirect(redirectPath);
         } else {
-            this.authService.loginPopup()
+            this.authService.loginPopup(redirectPath)
                 .subscribe({
-                    next: () => {
-                        this.router.navigate(['/app']);
+                    next: path => {
+                        path ||= '/app';
+
+                        this.router.navigateByUrl(path);
                     },
                     error: () => {
                         this.showLoginError = true;
@@ -40,8 +49,6 @@ export class HomePageComponent {
     }
 
     public isIE() {
-        const isIE = !!navigator.userAgent.match(/Trident/g) || !!navigator.userAgent.match(/MSIE/g);
-
-        return isIE;
+        return !!navigator.userAgent.match(/Trident/g) || !!navigator.userAgent.match(/MSIE/g);
     }
 }

frontend/src/app/shell/pages/internal/profile-menu.component.ts

@@ -93,6 +93,6 @@ export class ProfileMenuComponent extends StatefulComponent<State> implements On
     }
 
     public logout() {
-        this.authService.logoutRedirect();
+        this.authService.logoutRedirect('/');
     }
 }

frontend/src/app/shell/pages/login/login-page.component.ts

@@ -23,8 +23,10 @@ export class LoginPageComponent implements OnInit {
     public ngOnInit() {
         this.authService.loginRedirectComplete()
             .subscribe({
-                next: () => {
-                    this.router.navigate(['/app'], { replaceUrl: true });
+                next: path => {
+                    path ||= '/app';
+
+                    this.router.navigateByUrl(path, { replaceUrl: true });
                 },
                 error: () => {
                     this.router.navigate(['/'], { replaceUrl: true });

frontend/src/app/shell/pages/logout/logout-page.component.ts

@@ -23,8 +23,10 @@ export class LogoutPageComponent implements OnInit {
     public ngOnInit() {
         this.authService.logoutRedirectComplete()
             .subscribe({
-                next: () => {
-                    this.router.navigate(['/'], { replaceUrl: true });
+                next: path => {
+                    path ||= '/';
+
+                    this.router.navigateByUrl(path, { replaceUrl: true });
                 },
                 error: () => {
                     this.router.navigate(['/'], { replaceUrl: true });