var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
    return c > 3 && r && Object.defineProperty(target, key, r), r;
};
import { HttpClient } from '@angular/common/http';
import { Injectable, inject } from '@angular/core';
import { AUTH_API_URL } from '../config';
/**
 * Thin HTTP client for the Ed25519 admin auth endpoints. These endpoints may
 * not exist on every backend yet - calling them before the backend ships
 * 404s or connection-errors, which AuthService maps to the
 * `backend-unavailable` error screen. No mock/fake responses are fabricated
 * here; this is real HttpClient wiring against the real contract.
 */
let AuthApiService = class AuthApiService {
    constructor() {
        this.http = inject(HttpClient);
        this.baseUrl = `${inject(AUTH_API_URL)}/api/admin/auth`;
    }
    requestChallenge() {
        return this.http.get(`${this.baseUrl}/challenge`);
    }
    verifySignature(request) {
        return this.http.post(`${this.baseUrl}/verify`, request);
    }
    refresh(request) {
        return this.http.post(`${this.baseUrl}/refresh`, request);
    }
    logout(refreshToken) {
        return this.http.post(`${this.baseUrl}/logout`, { refreshToken });
    }
};
AuthApiService = __decorate([
    Injectable({ providedIn: 'root' })
], AuthApiService);
export { AuthApiService };