@equinor/fusion-framework-app 13.1.7 → 13.1.10

package/README.md

@@ -80,6 +80,26 @@ const modules = await initialize({ fusion, env });
 
 ## Key Concepts
 
+### Portal authentication is inherited by default
+
+`configureModules` creates an `AppConfigurator` that registers `auth` alongside `event` and `http`
+before the app's configuration callback runs. It initializes these modules with `fusion.modules`
+as the parent reference. MSAL then reuses the portal auth provider through its version-compatible
+`createProxyProvider` path, sharing the existing client and live account without another login.
+The React app bootstrap uses this same path.
+
+Ordinary hosted apps do not need `enableMSAL` to use Roles V2. Register `enableRoles` normally;
+the real Roles client reads the inherited account before each account-scoped operation, so parent
+account changes and sign-out are reflected in subsequent requests. An unavailable account produces
+`RequiredAccessRolesError`, not a new login flow.
+
+For deliberate custom authentication, use `enableMSAL` with `builder.setProvider(customAuthProvider)`.
+The explicitly supplied provider remains authoritative, even when signed out. A bare
+`enableMSAL` call is redundant here, and client settings alone do not override a parent provider.
+This default registration is independent of telemetry and does not apply to bare
+`ModulesConfigurator` bootstraps. See the
+[Roles authentication boundary](../modules/roles/README.md#authentication-inheritance-and-custom-app-authentication).
+
 | Concept | Description |
 |---|---|
 | `configureModules` | Factory function that creates an async initializer for application modules. |
@@ -180,4 +200,3 @@ and customizing the mocked parent's service discovery.
 
 - [Fusion Framework documentation](https://equinor.github.io/fusion-framework/)
 - [`@equinor/fusion-framework-react-app`](../react/app/) — React wrapper with hooks and providers
-

package/dist/esm/AppConfigurator.js

@@ -2,9 +2,9 @@ import { ModulesConfigurator, } from '@equinor/fusion-framework-module';
 import event from '@equinor/fusion-framework-module-event';
 import http, { configureHttpClient, configureHttp, } from '@equinor/fusion-framework-module-http';
 import auth from '@equinor/fusion-framework-module-msal';
-import { AppModulesConfiguredEvent } from './AppModulesConfiguredEvent';
-import { AppConfiguratorError } from './AppConfiguratorError';
-import { deepClone, deepFreeze } from './utils';
+import { AppModulesConfiguredEvent } from './AppModulesConfiguredEvent.js';
+import { AppConfiguratorError } from './AppConfiguratorError.js';
+import { deepClone, deepFreeze } from './utils.js';
 /**
  * Configurator that bootstraps default Fusion application modules and provides
  * helper methods for HTTP client and service-discovery setup.
@@ -13,6 +13,10 @@ import { deepClone, deepFreeze } from './utils';
  * the `event`, `http`, and `msal` (auth) modules by default and reads any HTTP
  * endpoints declared in the application's environment config.
  *
+ * Hosted apps inherit parent authentication through MSAL's version-compatible proxy during
+ * initialization; no app-side `enableMSAL` call is needed. An explicitly configured auth
+ * provider takes precedence over the parent, including when that provider is signed out.
+ *
  * @template TModules - Additional application-specific modules beyond the defaults.
  * @template TRef - The resolved Fusion modules instance used as an initialization reference.
  * @template TEnv - The application environment descriptor (manifest, config, basename).

package/dist/esm/AppConfigurator.js.map

@@ -1 +1 @@
-{"version":3,"file":"AppConfigurator.js","sourceRoot":"","sources":["../../src/AppConfigurator.ts"],"names":[],"mappings":"AAEA,OAAO,EAGL,mBAAmB,GACpB,MAAM,kCAAkC,CAAC;AAE1C,OAAO,KAAK,MAAM,wCAAwC,CAAC;AAE3D,OAAO,IAAI,EAAE,EACX,mBAAmB,EACnB,aAAa,GAEd,MAAM,uCAAuC,CAAC;AAE/C,OAAO,IAAI,MAAM,uCAAuC,CAAC;AAGzD,OAAO,EAAE,yBAAyB,EAAE,MAAM,6BAA6B,CAAC;AACxE,OAAO,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AAC9D,OAAO,EAAE,SAAS,EAAE,UAAU,EAAsB,MAAM,SAAS,CAAC;AA2FpE;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,OAAO,eAKX,SAAQ,mBAA+C;IAqBrC,GAAG;IAlBrB;;;OAGG;IACH,MAAM,CAAU,SAAS,GAAW,iBAAiB,CAAC;IAEtD,SAAS,CAAoC;IAE7C;;;;;;;;OAQG;IACH,YACkB,GAAS,EACzB,GAAU;QAEV,KAAK,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;mBAHX,GAAG;QAInB,IAAI,CAAC,SAAS,GAAG,UAAU,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC;QACrD,IAAI,CAAC,kCAAkC,EAAE,CAAC;QAE1C,IAAI,CAAC,YAAY,CAAC,CAAC,OAAO,EAAE,EAAE;YAC5B,MAAM,eAAe,GAAG,IAAI,yBAAyB,CAAW;gBAC9D,MAAM,EAAE;oBACN,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM;oBAC7B,OAAO;iBACR;aACF,CAAC,CAAC;YACH,GAAG,EAAE,KAAK,CAAC,aAAa,CAAC,eAAe,CAAC,CAAC;QAC5C,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;;;;;OAMG;IACH,IAAI,QAAQ;QACV,OAAO,IAAI,CAAC,SAAS,CAAC;IACxB,CAAC;IAED;;;;;;OAMG;IACO,kCAAkC;QAC1C,MAAM,EAAE,SAAS,GAAG,EAAE,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC;QACjD,8EAA8E;QAC9E,KAAK,MAAM,CAAC,GAAG,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;YAC/D,IAAI,CAAC,mBAAmB,CAAC,GAAG,EAAE;gBAC5B,OAAO,EAAE,GAAG;gBACZ,aAAa,EAAE,MAAM;aACtB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,mDAAmD;IAC5C,aAAa,CAAC,GAAG,IAAsC;QAC5D,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC;IACzC,CAAC;IAED,yDAAyD;IAClD,mBAAmB,CAAC,GAAG,IAA4C;QACxE,IAAI,CAAC,SAAS,CAAC,mBAAmB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC;IAC/C,CAAC;IAED;;;;;;;;;;;;;;;;;;;;;;OAsBG;IACI,yBAAyB,CAC9B,WAAmB;IACnB,6HAA6H;IAC7H,OAAmE;QAEnE,IAAI,CAAC,SAAS,CAAC;YACb,MAAM,EAAE,IAAI;YACZ,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE;gBAC/B,iEAAiE;gBACjE,MAAM,OAAO,GAAG,MAAM,GAAG,EAAE,gBAAgB,CAAC,cAAc,CAAC,WAAW,CAAC,CAAC;gBACxE,wEAAwE;gBACxE,IAAI,CAAC,OAAO,EAAE,CAAC;oBACb,MAAM,IAAI,oBAAoB,CAC5B,8BAA8B,WAAW,yBAAyB,EAClE,eAAe,CAChB,CAAC;gBACJ,CAAC;gBAED,2EAA2E;gBAC3E,0EAA0E;gBAC1E,uCAAuC;gBACvC,IAAI,MAAM,CAAC,SAAS,CAAC,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC;oBACzD,OAAO,CAAC,IAAI,CACV,GAAG,WAAW;;oCAEU,CACzB,CAAC;oBACF,OAAO;gBACT,CAAC;gBACD,MAAM,CAAC,eAAe,CAAC,WAAW,EAAE;oBAClC,GAAG,OAAO;oBACV,OAAO,EAAE,OAAO,CAAC,GAAG;oBACpB,aAAa,EAAE,OAAO,CAAC,aAAa;iBACrC,CAAC,CAAC;YACL,CAAC;SACF,CAAC,CAAC;IACL,CAAC;CACF;AAED,eAAe,eAAe,CAAC"}
+{"version":3,"file":"AppConfigurator.js","sourceRoot":"","sources":["../../src/AppConfigurator.ts"],"names":[],"mappings":"AAEA,OAAO,EAGL,mBAAmB,GACpB,MAAM,kCAAkC,CAAC;AAE1C,OAAO,KAAK,MAAM,wCAAwC,CAAC;AAE3D,OAAO,IAAI,EAAE,EACX,mBAAmB,EACnB,aAAa,GAEd,MAAM,uCAAuC,CAAC;AAE/C,OAAO,IAAI,MAAM,uCAAuC,CAAC;AAGzD,OAAO,EAAE,yBAAyB,EAAE,MAAM,gCAAgC,CAAC;AAC3E,OAAO,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AACjE,OAAO,EAAE,SAAS,EAAE,UAAU,EAAsB,MAAM,YAAY,CAAC;AA2FvE;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,MAAM,OAAO,eAKX,SAAQ,mBAA+C;IAqBrC,GAAG;IAlBrB;;;OAGG;IACH,MAAM,CAAU,SAAS,GAAW,iBAAiB,CAAC;IAEtD,SAAS,CAAoC;IAE7C;;;;;;;;OAQG;IACH,YACkB,GAAS,EACzB,GAAU;QAEV,KAAK,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;mBAHX,GAAG;QAInB,IAAI,CAAC,SAAS,GAAG,UAAU,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC;QACrD,IAAI,CAAC,kCAAkC,EAAE,CAAC;QAE1C,IAAI,CAAC,YAAY,CAAC,CAAC,OAAO,EAAE,EAAE;YAC5B,MAAM,eAAe,GAAG,IAAI,yBAAyB,CAAW;gBAC9D,MAAM,EAAE;oBACN,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM;oBAC7B,OAAO;iBACR;aACF,CAAC,CAAC;YACH,GAAG,EAAE,KAAK,CAAC,aAAa,CAAC,eAAe,CAAC,CAAC;QAC5C,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;;;;;OAMG;IACH,IAAI,QAAQ;QACV,OAAO,IAAI,CAAC,SAAS,CAAC;IACxB,CAAC;IAED;;;;;;OAMG;IACO,kCAAkC;QAC1C,MAAM,EAAE,SAAS,GAAG,EAAE,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC;QACjD,8EAA8E;QAC9E,KAAK,MAAM,CAAC,GAAG,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;YAC/D,IAAI,CAAC,mBAAmB,CAAC,GAAG,EAAE;gBAC5B,OAAO,EAAE,GAAG;gBACZ,aAAa,EAAE,MAAM;aACtB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,mDAAmD;IAC5C,aAAa,CAAC,GAAG,IAAsC;QAC5D,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC;IACzC,CAAC;IAED,yDAAyD;IAClD,mBAAmB,CAAC,GAAG,IAA4C;QACxE,IAAI,CAAC,SAAS,CAAC,mBAAmB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC;IAC/C,CAAC;IAED;;;;;;;;;;;;;;;;;;;;;;OAsBG;IACI,yBAAyB,CAC9B,WAAmB;IACnB,6HAA6H;IAC7H,OAAmE;QAEnE,IAAI,CAAC,SAAS,CAAC;YACb,MAAM,EAAE,IAAI;YACZ,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE;gBAC/B,iEAAiE;gBACjE,MAAM,OAAO,GAAG,MAAM,GAAG,EAAE,gBAAgB,CAAC,cAAc,CAAC,WAAW,CAAC,CAAC;gBACxE,wEAAwE;gBACxE,IAAI,CAAC,OAAO,EAAE,CAAC;oBACb,MAAM,IAAI,oBAAoB,CAC5B,8BAA8B,WAAW,yBAAyB,EAClE,eAAe,CAChB,CAAC;gBACJ,CAAC;gBAED,2EAA2E;gBAC3E,0EAA0E;gBAC1E,uCAAuC;gBACvC,IAAI,MAAM,CAAC,SAAS,CAAC,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC;oBACzD,OAAO,CAAC,IAAI,CACV,GAAG,WAAW;;oCAEU,CACzB,CAAC;oBACF,OAAO;gBACT,CAAC;gBACD,MAAM,CAAC,eAAe,CAAC,WAAW,EAAE;oBAClC,GAAG,OAAO;oBACV,OAAO,EAAE,OAAO,CAAC,GAAG;oBACpB,aAAa,EAAE,OAAO,CAAC,aAAa;iBACrC,CAAC,CAAC;YACL,CAAC;SACF,CAAC,CAAC;IACL,CAAC;CACF;AAED,eAAe,eAAe,CAAC"}

package/dist/esm/__tests__/roles-auth-inheritance.test.js

@@ -0,0 +1,226 @@
+import { FrameworkConfigurator, init } from '@equinor/fusion-framework';
+import { ModulesConfigurator } from '@equinor/fusion-framework-module';
+import { enableMSAL, MsalClient, module as authModule, } from '@equinor/fusion-framework-module-msal';
+import { enableRoles, rolesModule } from '@equinor/fusion-framework-module-roles';
+import { RequiredAccessRolesError } from '@equinor/fusion-framework-module-roles/errors';
+import { enableTelemetry } from '@equinor/fusion-framework-module-telemetry';
+import { afterEach, describe, expect, it, vi } from 'vitest';
+import { AppConfigurator } from '../AppConfigurator.js';
+import { configureModules } from '../configure-modules.js';
+const env = {
+    manifest: {
+        appKey: 'roles-auth-inheritance',
+        displayName: 'Roles authentication inheritance',
+        description: 'Exercises the production hosted application bootstrap',
+        type: 'standalone',
+    },
+};
+const activeRoles = [
+    { systemName: 'Fusion', accessRoleName: 'Reports.Read', assignmentType: 'Global' },
+];
+const disposeCallbacks = [];
+/**
+ * Supplies a deterministic external MSAL session while retaining the real client and provider.
+ *
+ * @param identifier - Local account identifier, or null for a signed-out session.
+ * @returns Client and mutable session used to simulate parent account changes.
+ */
+function createSession(identifier) {
+    const session = {
+        account: identifier === null ? null : createAccount(identifier),
+    };
+    const client = new MsalClient({ auth: { clientId: 'roles-inheritance-test' } });
+    const initialize = vi.spyOn(client, 'initialize').mockResolvedValue();
+    const login = vi.spyOn(client, 'login').mockRejectedValue(new Error('Unexpected login flow'));
+    vi.spyOn(client, 'getActiveAccount').mockImplementation(() => session.account);
+    return { client, session, initialize, login };
+}
+/**
+ * Creates a complete MSAL account without requiring an Entra login.
+ *
+ * @param localAccountId - Account selected by the external authentication session.
+ * @returns Account shape consumed by the production MSAL provider.
+ */
+function createAccount(localAccountId) {
+    return {
+        localAccountId,
+        homeAccountId: `${localAccountId}.tenant`,
+        tenantId: 'tenant',
+        environment: 'login.microsoftonline.com',
+        username: 'roles-test@example.test',
+    };
+}
+/**
+ * Initializes a real portal framework with controlled network and Entra boundaries.
+ *
+ * @param identifier - Initial authenticated account, or null for sign-out.
+ * @returns Portal framework, external session and HTTP request recorder.
+ */
+async function createPortal(identifier = 'portal-account') {
+    const external = createSession(identifier);
+    const requests = [];
+    const fetch = vi.fn(async (input, options) => {
+        const url = new URL(String(input));
+        requests.push({ url, headers: new Headers(options?.headers) });
+        // Only the external service responses are substituted; discovery, HTTP and Roles stay real.
+        if (url.hostname === 'discovery.example.test') {
+            return Response.json([
+                { key: 'rolesv2', uri: 'https://roles.example.test', scopes: ['roles.read'] },
+                { key: 'context', uri: 'https://context.example.test', scopes: [] },
+            ]);
+        }
+        if (url.hostname === 'roles.example.test' &&
+            url.pathname.endsWith('/active-access-role-assignments')) {
+            return Response.json(activeRoles);
+        }
+        throw new Error(`Unexpected HTTP request: ${url}`);
+    });
+    vi.stubGlobal('fetch', fetch);
+    const configurator = new FrameworkConfigurator();
+    configurator.configureMsal((builder) => {
+        builder.setClient(external.client);
+        builder.setRequiresAuth(false);
+    });
+    configurator.configureServiceDiscovery({
+        client: { baseUri: 'https://discovery.example.test' },
+    });
+    const fusion = await init(configurator);
+    disposeCallbacks.push(() => configurator.dispose(fusion.modules));
+    const acquireToken = vi
+        .spyOn(fusion.modules.auth, 'acquireAccessToken')
+        .mockResolvedValue('portal-test-token');
+    const createProxy = vi.spyOn(fusion.modules.auth, 'createProxyProvider');
+    return { fusion, requests, acquireToken, createProxy, ...external };
+}
+/**
+ * Boots an ordinary application through the same entry point used by React makeComponent.
+ *
+ * @param portal - Initialized portal whose modules are passed into app initialization.
+ * @param configure - Optional deliberate application authentication customization.
+ * @returns Application modules with the production Roles client initialized.
+ */
+async function initializeApp(portal, configure) {
+    const initialize = configureModules(async (configurator, args) => {
+        await configure?.(configurator, args);
+        enableRoles(configurator);
+    });
+    const modules = await initialize({ fusion: portal.fusion, env });
+    disposeCallbacks.push(() => modules.roles.dispose());
+    return modules;
+}
+describe('hosted Roles authentication through configureModules', () => {
+    afterEach(async () => {
+        // Dispose application clients before their portal and restore external boundaries last.
+        for (const dispose of disposeCallbacks.splice(0).reverse()) {
+            await dispose();
+        }
+        vi.restoreAllMocks();
+        vi.unstubAllGlobals();
+    });
+    it.each([false, true])('uses portal auth with real Roles HTTP requests (redundant enableMSAL: %s)', async (explicitEnable) => {
+        const portal = await createPortal();
+        const defaults = new AppConfigurator(env);
+        expect(defaults.modules.map(({ name }) => name)).toEqual(['event', 'http', 'auth']);
+        const modules = await initializeApp(portal, (configurator) => {
+            // Compare the historical troubleshooting workaround with ordinary app bootstrap.
+            if (explicitEnable) {
+                enableMSAL(configurator);
+            }
+        });
+        await expect(modules.roles.getActiveAccessRoleAssignments()).resolves.toEqual(activeRoles);
+        expect(portal.createProxy).toHaveBeenCalledOnce();
+        expect(portal.createProxy).toHaveBeenCalledWith(String(authModule.version));
+        expect(modules.auth.client).toBe(portal.client);
+        expect(modules.auth.account).toBe(portal.session.account);
+        expect(portal.requests.at(-1)?.url.pathname).toBe('/accounts/portal-account/active-access-role-assignments');
+        expect(portal.requests.at(-1)?.url.searchParams.get('api-version')).toBe('1.0');
+        expect(portal.requests.at(-1)?.headers.get('Authorization')).toBe('Bearer portal-test-token');
+        expect(portal.acquireToken).toHaveBeenCalledWith({ request: { scopes: ['roles.read'] } });
+        expect(portal.initialize).toHaveBeenCalledOnce();
+        expect(portal.login).not.toHaveBeenCalled();
+    });
+    it('reads parent account switches and sign-out before cache lookup, and recovers after sign-in', async () => {
+        const portal = await createPortal();
+        const modules = await initializeApp(portal);
+        await modules.roles.getActiveAccessRoleAssignments();
+        portal.session.account = createAccount('second-account');
+        await modules.roles.getActiveAccessRoleAssignments();
+        expect(portal.requests.at(-1)?.url.pathname).toContain('/accounts/second-account/');
+        const requestCount = portal.requests.length;
+        portal.session.account = null;
+        await expect(modules.roles.getActiveAccessRoleAssignments()).rejects.toBeInstanceOf(RequiredAccessRolesError);
+        expect(portal.requests).toHaveLength(requestCount);
+        portal.session.account = createAccount('third-account');
+        await expect(modules.roles.getActiveAccessRoleAssignments()).resolves.toEqual(activeRoles);
+        expect(portal.requests.at(-1)?.url.pathname).toContain('/accounts/third-account/');
+        expect(portal.initialize).toHaveBeenCalledOnce();
+        expect(portal.login).not.toHaveBeenCalled();
+    });
+    it.each([null, ''])('rejects an unauthenticated or unidentified parent account (%s)', async (id) => {
+        const portal = await createPortal(id);
+        const modules = await initializeApp(portal);
+        const requestCount = portal.requests.length;
+        await expect(modules.roles.getActiveAccessRoleAssignments()).rejects.toThrow('Roles module requires an active authenticated account to resolve Roles V2 data.');
+        expect(portal.requests).toHaveLength(requestCount);
+        expect(portal.login).not.toHaveBeenCalled();
+    });
+    it('retains an explicitly supplied app provider, including its signed-out state', async () => {
+        const portal = await createPortal();
+        const custom = createSession('custom-account');
+        const customConfigurator = new ModulesConfigurator([authModule]);
+        enableTelemetry(customConfigurator);
+        enableMSAL(customConfigurator, (builder) => {
+            builder.setClient(custom.client);
+            builder.setRequiresAuth(false);
+        });
+        const customModules = await customConfigurator.initialize();
+        const { auth } = customModules;
+        disposeCallbacks.push(() => customConfigurator.dispose(customModules));
+        const modules = await initializeApp(portal, (configurator) => {
+            enableMSAL(configurator, (builder) => builder.setProvider(auth));
+        });
+        expect(modules.auth).toBe(auth);
+        expect(portal.createProxy).not.toHaveBeenCalled();
+        await modules.roles.getActiveAccessRoleAssignments();
+        expect(portal.requests.at(-1)?.url.pathname).toContain('/accounts/custom-account/');
+        portal.session.account = createAccount('changed-portal-account');
+        custom.session.account = null;
+        const requestCount = portal.requests.length;
+        await expect(modules.roles.getActiveAccessRoleAssignments()).rejects.toBeInstanceOf(RequiredAccessRolesError);
+        expect(portal.requests).toHaveLength(requestCount);
+        expect(custom.login).not.toHaveBeenCalled();
+    });
+    it('reuses a legacy v4 parent proxy through the existing MSAL compatibility path', async () => {
+        const portal = await createPortal();
+        portal.fusion.modules.auth = portal.fusion.modules.auth.createProxyProvider('4.0.0');
+        const modules = await initializeApp(portal);
+        expect(modules.auth.client).toBe(portal.client);
+        await expect(modules.roles.getActiveAccessRoleAssignments()).resolves.toEqual(activeRoles);
+        portal.session.account = createAccount('legacy-parent-next-account');
+        await modules.roles.getActiveAccessRoleAssignments();
+        expect(portal.requests.at(-1)?.url.pathname).toContain('/accounts/legacy-parent-next-account/');
+        expect(portal.initialize).toHaveBeenCalledOnce();
+        expect(portal.login).not.toHaveBeenCalled();
+    });
+    it('distinguishes a bare module registry from the automatic app auth registration', async () => {
+        const portal = await createPortal();
+        const configurator = new ModulesConfigurator([rolesModule]);
+        const modules = await configurator.initialize(portal.fusion.modules);
+        disposeCallbacks.push(() => configurator.dispose(modules));
+        await expect(modules.roles.getActiveAccessRoleAssignments()).rejects.toBeInstanceOf(RequiredAccessRolesError);
+        expect(portal.requests.some(({ url }) => url.hostname === 'roles.example.test')).toBe(false);
+        expect(portal.createProxy).not.toHaveBeenCalled();
+    });
+    it('checks startup requirements using the inherited account without app auth configuration', async () => {
+        const portal = await createPortal();
+        const initialize = configureModules((configurator) => {
+            enableRoles(configurator, (builder) => builder.requireAccessRoles(['Reports.Read']));
+        });
+        const modules = await initialize({ fusion: portal.fusion, env });
+        disposeCallbacks.push(() => modules.roles.dispose());
+        expect(portal.requests.at(-1)?.url.pathname).toContain('/accounts/portal-account/');
+        await expect(modules.roles.hasAccessRole(['Reports.Read'], { required: true })).resolves.toBe(true);
+        expect(portal.login).not.toHaveBeenCalled();
+    });
+});
+//# sourceMappingURL=roles-auth-inheritance.test.js.map

package/dist/esm/__tests__/roles-auth-inheritance.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"roles-auth-inheritance.test.js","sourceRoot":"","sources":["../../../src/__tests__/roles-auth-inheritance.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,qBAAqB,EAAE,IAAI,EAAE,MAAM,2BAA2B,CAAC;AACxE,OAAO,EAAE,mBAAmB,EAAE,MAAM,kCAAkC,CAAC;AACvE,OAAO,EAEL,UAAU,EACV,UAAU,EACV,MAAM,IAAI,UAAU,GACrB,MAAM,uCAAuC,CAAC;AAC/C,OAAO,EAAE,WAAW,EAAE,WAAW,EAAoB,MAAM,wCAAwC,CAAC;AACpG,OAAO,EAAE,wBAAwB,EAAE,MAAM,+CAA+C,CAAC;AACzF,OAAO,EAAE,eAAe,EAAE,MAAM,4CAA4C,CAAC;AAC7E,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAE7D,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACxD,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAG3D,MAAM,GAAG,GAAW;IAClB,QAAQ,EAAE;QACR,MAAM,EAAE,wBAAwB;QAChC,WAAW,EAAE,kCAAkC;QAC/C,WAAW,EAAE,uDAAuD;QACpE,IAAI,EAAE,YAAY;KACnB;CACF,CAAC;AACF,MAAM,WAAW,GAAG;IAClB,EAAE,UAAU,EAAE,QAAQ,EAAE,cAAc,EAAE,cAAc,EAAE,cAAc,EAAE,QAAQ,EAAE;CACnF,CAAC;AACF,MAAM,gBAAgB,GAAsC,EAAE,CAAC;AAE/D;;;;;GAKG;AACH,SAAS,aAAa,CAAC,UAAyB;IAC9C,MAAM,OAAO,GAAG;QACd,OAAO,EAAE,UAAU,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,aAAa,CAAC,UAAU,CAAC;KAChE,CAAC;IACF,MAAM,MAAM,GAAG,IAAI,UAAU,CAAC,EAAE,IAAI,EAAE,EAAE,QAAQ,EAAE,wBAAwB,EAAE,EAAE,CAAC,CAAC;IAChF,MAAM,UAAU,GAAG,EAAE,CAAC,KAAK,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC,iBAAiB,EAAE,CAAC;IACtE,MAAM,KAAK,GAAG,EAAE,CAAC,KAAK,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,iBAAiB,CAAC,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC,CAAC;IAC9F,EAAE,CAAC,KAAK,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAC,kBAAkB,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IAC/E,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC;AAChD,CAAC;AAED;;;;;GAKG;AACH,SAAS,aAAa,CAAC,cAAsB;IAC3C,OAAO;QACL,cAAc;QACd,aAAa,EAAE,GAAG,cAAc,SAAS;QACzC,QAAQ,EAAE,QAAQ;QAClB,WAAW,EAAE,2BAA2B;QACxC,QAAQ,EAAE,yBAAyB;KACpC,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,YAAY,CAAC,UAAU,GAAkB,gBAAgB;IACtE,MAAM,QAAQ,GAAG,aAAa,CAAC,UAAU,CAAC,CAAC;IAC3C,MAAM,QAAQ,GAA0C,EAAE,CAAC;IAC3D,MAAM,KAAK,GAAG,EAAE,CAAC,EAAE,CAA0B,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QACpE,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QACnC,QAAQ,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC;QAC/D,4FAA4F;QAC5F,IAAI,GAAG,CAAC,QAAQ,KAAK,wBAAwB,EAAE,CAAC;YAC9C,OAAO,QAAQ,CAAC,IAAI,CAAC;gBACnB,EAAE,GAAG,EAAE,SAAS,EAAE,GAAG,EAAE,4BAA4B,EAAE,MAAM,EAAE,CAAC,YAAY,CAAC,EAAE;gBAC7E,EAAE,GAAG,EAAE,SAAS,EAAE,GAAG,EAAE,8BAA8B,EAAE,MAAM,EAAE,EAAE,EAAE;aACpE,CAAC,CAAC;QACL,CAAC;QACD,IACE,GAAG,CAAC,QAAQ,KAAK,oBAAoB;YACrC,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,iCAAiC,CAAC,EACxD,CAAC;YACD,OAAO,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QACpC,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,4BAA4B,GAAG,EAAE,CAAC,CAAC;IACrD,CAAC,CAAC,CAAC;IACH,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IAE9B,MAAM,YAAY,GAAG,IAAI,qBAAqB,EAAE,CAAC;IACjD,YAAY,CAAC,aAAa,CAAC,CAAC,OAAO,EAAE,EAAE;QACrC,OAAO,CAAC,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACnC,OAAO,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;IACjC,CAAC,CAAC,CAAC;IACH,YAAY,CAAC,yBAAyB,CAAC;QACrC,MAAM,EAAE,EAAE,OAAO,EAAE,gCAAgC,EAAE;KACtD,CAAC,CAAC;IACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,CAAC;IACxC,gBAAgB,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,YAAY,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;IAClE,MAAM,YAAY,GAAG,EAAE;SACpB,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,oBAAoB,CAAC;SAChD,iBAAiB,CAAC,mBAAmB,CAAC,CAAC;IAC1C,MAAM,WAAW,GAAG,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,qBAAqB,CAAC,CAAC;IACzE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,YAAY,EAAE,WAAW,EAAE,GAAG,QAAQ,EAAE,CAAC;AACtE,CAAC;AAED;;;;;;GAMG;AACH,KAAK,UAAU,aAAa,CAC1B,MAAgD,EAChD,SAA6C;IAE7C,MAAM,UAAU,GAAG,gBAAgB,CAAgB,KAAK,EAAE,YAAY,EAAE,IAAI,EAAE,EAAE;QAC9E,MAAM,SAAS,EAAE,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC;QACtC,WAAW,CAAC,YAAY,CAAC,CAAC;IAC5B,CAAC,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;IACjE,gBAAgB,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;IACrD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,QAAQ,CAAC,sDAAsD,EAAE,GAAG,EAAE;IACpE,SAAS,CAAC,KAAK,IAAI,EAAE;QACnB,wFAAwF;QACxF,KAAK,MAAM,OAAO,IAAI,gBAAgB,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC;YAC3D,MAAM,OAAO,EAAE,CAAC;QAClB,CAAC;QACD,EAAE,CAAC,eAAe,EAAE,CAAC;QACrB,EAAE,CAAC,gBAAgB,EAAE,CAAC;IACxB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CACpB,2EAA2E,EAC3E,KAAK,EAAE,cAAc,EAAE,EAAE;QACvB,MAAM,MAAM,GAAG,MAAM,YAAY,EAAE,CAAC;QACpC,MAAM,QAAQ,GAAG,IAAI,eAAe,CAAC,GAAG,CAAC,CAAC;QAC1C,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;QACpF,MAAM,OAAO,GAAG,MAAM,aAAa,CAAC,MAAM,EAAE,CAAC,YAAY,EAAE,EAAE;YAC3D,iFAAiF;YACjF,IAAI,cAAc,EAAE,CAAC;gBACnB,UAAU,CAAC,YAAY,CAAC,CAAC;YAC3B,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,MAAM,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,8BAA8B,EAAE,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;QAC3F,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,oBAAoB,EAAE,CAAC;QAClD,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,oBAAoB,CAAC,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC;QAC5E,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAChD,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAC1D,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC,IAAI,CAC/C,yDAAyD,CAC1D,CAAC;QACF,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAChF,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;QAC9F,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,oBAAoB,CAAC,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,CAAC,YAAY,CAAC,EAAE,EAAE,CAAC,CAAC;QAC1F,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,oBAAoB,EAAE,CAAC;QACjD,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IAC9C,CAAC,CACF,CAAC;IAEF,EAAE,CAAC,4FAA4F,EAAE,KAAK,IAAI,EAAE;QAC1G,MAAM,MAAM,GAAG,MAAM,YAAY,EAAE,CAAC;QACpC,MAAM,OAAO,GAAG,MAAM,aAAa,CAAC,MAAM,CAAC,CAAC;QAC5C,MAAM,OAAO,CAAC,KAAK,CAAC,8BAA8B,EAAE,CAAC;QACrD,MAAM,CAAC,OAAO,CAAC,OAAO,GAAG,aAAa,CAAC,gBAAgB,CAAC,CAAC;QACzD,MAAM,OAAO,CAAC,KAAK,CAAC,8BAA8B,EAAE,CAAC;QACrD,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC,SAAS,CAAC,2BAA2B,CAAC,CAAC;QAEpF,MAAM,YAAY,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC;QAC5C,MAAM,CAAC,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC;QAC9B,MAAM,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,8BAA8B,EAAE,CAAC,CAAC,OAAO,CAAC,cAAc,CACjF,wBAAwB,CACzB,CAAC;QACF,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,YAAY,CAAC,YAAY,CAAC,CAAC;QAEnD,MAAM,CAAC,OAAO,CAAC,OAAO,GAAG,aAAa,CAAC,eAAe,CAAC,CAAC;QACxD,MAAM,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,8BAA8B,EAAE,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;QAC3F,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC,SAAS,CAAC,0BAA0B,CAAC,CAAC;QACnF,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,oBAAoB,EAAE,CAAC;QACjD,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IAC9C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CACjB,gEAAgE,EAChE,KAAK,EAAE,EAAE,EAAE,EAAE;QACX,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,EAAE,CAAC,CAAC;QACtC,MAAM,OAAO,GAAG,MAAM,aAAa,CAAC,MAAM,CAAC,CAAC;QAC5C,MAAM,YAAY,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC;QAE5C,MAAM,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,8BAA8B,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAC1E,iFAAiF,CAClF,CAAC;QACF,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,YAAY,CAAC,YAAY,CAAC,CAAC;QACnD,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IAC9C,CAAC,CACF,CAAC;IAEF,EAAE,CAAC,6EAA6E,EAAE,KAAK,IAAI,EAAE;QAC3F,MAAM,MAAM,GAAG,MAAM,YAAY,EAAE,CAAC;QACpC,MAAM,MAAM,GAAG,aAAa,CAAC,gBAAgB,CAAC,CAAC;QAC/C,MAAM,kBAAkB,GAAG,IAAI,mBAAmB,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC;QACjE,eAAe,CAAC,kBAAkB,CAAC,CAAC;QACpC,UAAU,CAAC,kBAAkB,EAAE,CAAC,OAAO,EAAE,EAAE;YACzC,OAAO,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YACjC,OAAO,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;QACjC,CAAC,CAAC,CAAC;QACH,MAAM,aAAa,GAAG,MAAM,kBAAkB,CAAC,UAAU,EAAE,CAAC;QAC5D,MAAM,EAAE,IAAI,EAAE,GAAG,aAAa,CAAC;QAC/B,gBAAgB,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,kBAAkB,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC;QACvE,MAAM,OAAO,GAAG,MAAM,aAAa,CAAC,MAAM,EAAE,CAAC,YAAY,EAAE,EAAE;YAC3D,UAAU,CAAC,YAAY,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC;QACnE,CAAC,CAAC,CAAC;QAEH,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAChC,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;QAClD,MAAM,OAAO,CAAC,KAAK,CAAC,8BAA8B,EAAE,CAAC;QACrD,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC,SAAS,CAAC,2BAA2B,CAAC,CAAC;QACpF,MAAM,CAAC,OAAO,CAAC,OAAO,GAAG,aAAa,CAAC,wBAAwB,CAAC,CAAC;QACjE,MAAM,CAAC,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC;QAC9B,MAAM,YAAY,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC;QAC5C,MAAM,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,8BAA8B,EAAE,CAAC,CAAC,OAAO,CAAC,cAAc,CACjF,wBAAwB,CACzB,CAAC;QACF,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,YAAY,CAAC,YAAY,CAAC,CAAC;QACnD,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IAC9C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8EAA8E,EAAE,KAAK,IAAI,EAAE;QAC5F,MAAM,MAAM,GAAG,MAAM,YAAY,EAAE,CAAC;QACpC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,mBAAmB,CAAC,OAAO,CAAC,CAAC;QACrF,MAAM,OAAO,GAAG,MAAM,aAAa,CAAC,MAAM,CAAC,CAAC;QAE5C,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAChD,MAAM,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,8BAA8B,EAAE,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;QAC3F,MAAM,CAAC,OAAO,CAAC,OAAO,GAAG,aAAa,CAAC,4BAA4B,CAAC,CAAC;QACrE,MAAM,OAAO,CAAC,KAAK,CAAC,8BAA8B,EAAE,CAAC;QACrD,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC,SAAS,CAAC,uCAAuC,CAAC,CAAC;QAChG,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,oBAAoB,EAAE,CAAC;QACjD,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IAC9C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+EAA+E,EAAE,KAAK,IAAI,EAAE;QAC7F,MAAM,MAAM,GAAG,MAAM,YAAY,EAAE,CAAC;QACpC,MAAM,YAAY,GAAG,IAAI,mBAAmB,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC;QAC5D,MAAM,OAAO,GAAG,MAAM,YAAY,CAAC,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QACrE,gBAAgB,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,YAAY,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;QAE3D,MAAM,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,8BAA8B,EAAE,CAAC,CAAC,OAAO,CAAC,cAAc,CACjF,wBAAwB,CACzB,CAAC;QACF,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC,GAAG,CAAC,QAAQ,KAAK,oBAAoB,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC7F,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IACpD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wFAAwF,EAAE,KAAK,IAAI,EAAE;QACtG,MAAM,MAAM,GAAG,MAAM,YAAY,EAAE,CAAC;QACpC,MAAM,UAAU,GAAG,gBAAgB,CAAgB,CAAC,YAAY,EAAE,EAAE;YAClE,WAAW,CAAC,YAAY,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC;QACvF,CAAC,CAAC,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;QACjE,gBAAgB,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QAErD,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC,SAAS,CAAC,2BAA2B,CAAC,CAAC;QACpF,MAAM,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,cAAc,CAAC,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAC3F,IAAI,CACL,CAAC;QACF,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IAC9C,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/esm/configure-modules.js

@@ -4,8 +4,8 @@
  * Provides the core factory function for configuring and initializing
  * application-specific modules in the Fusion framework.
  */
-import { AppConfigurator } from './AppConfigurator';
-import { initializeAppModules } from './initialize-app-modules';
+import { AppConfigurator } from './AppConfigurator.js';
+import { initializeAppModules } from './initialize-app-modules.js';
 /**
  * Create an application module initializer for a Fusion application.
  *
@@ -18,6 +18,13 @@ import { initializeAppModules } from './initialize-app-modules';
  * 3. Invoke the optional user-supplied configuration callback.
  * 4. Initialize all registered modules and dispatch an `onAppModulesLoaded` event.
  *
+ * @remarks
+ * `AppConfigurator` registers auth before the callback runs. Ordinary portal-hosted apps,
+ * including apps using Roles V2, do not need to call `enableMSAL`: initialization passes
+ * `fusion.modules` as the parent reference and MSAL reuses the portal provider through its
+ * version-compatible proxy. An explicit `setProvider` configuration takes precedence.
+ * Telemetry does not supply this auth registration.
+ *
  * @template TModules - Additional application-specific modules to register.
  * @template TRef - The Fusion instance type, used as a configuration reference.
  * @template TEnv - The application environment descriptor (manifest, config, basename).

package/dist/esm/configure-modules.js.map

@@ -1 +1 @@
-{"version":3,"file":"configure-modules.js","sourceRoot":"","sources":["../../src/configure-modules.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAKH,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAGpD,OAAO,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAC;AAEhE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAC3B,CAKE,EAA6C,EACmC,EAAE;AACpF;;;;;;;GAOG;AACH,KAAK,EAAE,IAAiC,EAAyC,EAAE;IACjF,0BAA0B;IAC1B,MAAM,YAAY,GAAG,IAAI,eAAe,CAAkC,IAAI,CAAC,GAAG,CAAC,CAAC;IACpF,OAAO,oBAAoB,CAAC,YAAY,EAAE,EAAE,EAAE,IAAI,CAAC,CAAC;AACtD,CAAC,CAAC;AAEJ,eAAe,gBAAgB,CAAC"}
+{"version":3,"file":"configure-modules.js","sourceRoot":"","sources":["../../src/configure-modules.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAKH,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAGvD,OAAO,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AAEnE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuCG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAC3B,CAKE,EAA6C,EACmC,EAAE;AACpF;;;;;;;GAOG;AACH,KAAK,EAAE,IAAiC,EAAyC,EAAE;IACjF,0BAA0B;IAC1B,MAAM,YAAY,GAAG,IAAI,eAAe,CAAkC,IAAI,CAAC,GAAG,CAAC,CAAC;IACpF,OAAO,oBAAoB,CAAC,YAAY,EAAE,EAAE,EAAE,IAAI,CAAC,CAAC;AACtD,CAAC,CAAC;AAEJ,eAAe,gBAAgB,CAAC"}

package/dist/esm/index.js

@@ -15,14 +15,14 @@
  * Bookmark support is available via the `@equinor/fusion-framework-app/enable-bookmark`
  * sub-path export.
  */
-export { AppConfigurator } from './AppConfigurator';
-export * from './types';
-export { configureModules, default } from './configure-modules';
-export { AppConfiguratorError } from './AppConfiguratorError';
-export { AppModulesConfiguredEvent } from './AppModulesConfiguredEvent';
-export { AppModulesInitializedEvent } from './AppModulesInitializedEvent';
+export { AppConfigurator, } from './AppConfigurator.js';
+export * from './types.js';
+export { configureModules, default } from './configure-modules.js';
+export { AppConfiguratorError } from './AppConfiguratorError.js';
+export { AppModulesConfiguredEvent } from './AppModulesConfiguredEvent.js';
+export { AppModulesInitializedEvent } from './AppModulesInitializedEvent.js';
 /**
  * @deprecated Use {@link configureModules} instead. This alias will be removed in a future major version.
  */
-export { configureModules as initAppModules } from './configure-modules';
+export { configureModules as initAppModules } from './configure-modules.js';
 //# sourceMappingURL=index.js.map

package/dist/esm/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,EAAE,eAAe,EAAgD,MAAM,mBAAmB,CAAC;AAElG,cAAc,SAAS,CAAC;AAExB,OAAO,EAAE,gBAAgB,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAC;AAEhE,OAAO,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AAE9D,OAAO,EAAE,yBAAyB,EAAE,MAAM,6BAA6B,CAAC;AAExE,OAAO,EAAE,0BAA0B,EAAE,MAAM,8BAA8B,CAAC;AAE1E;;GAEG;AACH,OAAO,EAAE,gBAAgB,IAAI,cAAc,EAAE,MAAM,qBAAqB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,EACL,eAAe,GAGhB,MAAM,sBAAsB,CAAC;AAE9B,cAAc,YAAY,CAAC;AAE3B,OAAO,EAAE,gBAAgB,EAAE,OAAO,EAAE,MAAM,wBAAwB,CAAC;AAEnE,OAAO,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AAEjE,OAAO,EAAE,yBAAyB,EAAE,MAAM,gCAAgC,CAAC;AAE3E,OAAO,EAAE,0BAA0B,EAAE,MAAM,iCAAiC,CAAC;AAE7E;;GAEG;AACH,OAAO,EAAE,gBAAgB,IAAI,cAAc,EAAE,MAAM,wBAAwB,CAAC"}

package/dist/esm/version.js

@@ -1,3 +1,3 @@
 // Generated by genversion.
-export const version = '13.1.7';
+export const version = '13.1.10';
 //# sourceMappingURL=version.js.map

package/dist/esm/version.js.map

@@ -1 +1 @@
-{"version":3,"file":"version.js","sourceRoot":"","sources":["../../src/version.ts"],"names":[],"mappings":"AAAA,2BAA2B;AAC3B,MAAM,CAAC,MAAM,OAAO,GAAG,QAAQ,CAAC"}
+{"version":3,"file":"version.js","sourceRoot":"","sources":["../../src/version.ts"],"names":[],"mappings":"AAAA,2BAA2B;AAC3B,MAAM,CAAC,MAAM,OAAO,GAAG,SAAS,CAAC"}