@equinor/fusion-framework-module-msal 10.0.2 → 11.0.0-next.0

package/dist/esm/mock/MsalMockClient.js

@@ -0,0 +1,467 @@
+import { createMockToken } from './create-mock-token';
+/**
+ * A stand-in for the MSAL client that resolves tokens in-process.
+ *
+ * @remarks
+ * Constructed from {@link MsalClientConfig} — the very same argument
+ * {@link MsalClient} takes — so it is a drop-in substitute rather than a second
+ * API to learn. `setClientConfig` therefore means the same thing whether a test
+ * runs against Entra ID or against this client.
+ *
+ * Only the boundary that would contact Entra ID is replaced. The real
+ * `MsalProvider` runs on top of it unchanged, so account handling, silent-token
+ * preference, scope resolution, proxy providers and telemetry behave as they do in
+ * production — the test exercises the framework rather than the mock.
+ *
+ * Tokens are structurally valid, unsigned JWTs and are byte-identical between runs.
+ * They are **not** cryptographically valid and are rejected by any real service.
+ */
+export class MsalMockClient {
+    #user;
+    #cache = new Map();
+    #activeAccountId = null;
+    /**
+     * The account currently signed in, or `null`.
+     *
+     * @remarks
+     * Reads through the cache rather than holding an account of its own, so an
+     * account removed by a sign-out cannot linger as the active one.
+     *
+     * @returns The cached active account, or `null` when none is active.
+     */
+    get #account() {
+        return this.#activeAccountId ? (this.#cache.get(this.#activeAccountId) ?? null) : null;
+    }
+    /**
+     * Signs an account in, adding it to the cache and making it active.
+     *
+     * @param account - The account to sign in.
+     * @returns The signed-in account.
+     */
+    #signIn(account) {
+        this.#cache.set(account.homeAccountId, account);
+        this.#activeAccountId = account.homeAccountId;
+        return account;
+    }
+    /**
+     * Signs the active account out, as MSAL does — the account leaves the cache.
+     */
+    #signOut() {
+        // Only clear the cache entry when a session is active; this preserves an already signed-out state.
+        if (this.#activeAccountId) {
+            this.#cache.delete(this.#activeAccountId);
+            this.#activeAccountId = null;
+        }
+    }
+    /**
+     * Mirrors MSAL's redirect completion, which is a no-op for this in-process mock.
+     * @returns Always `null`, because the mock performs no redirect.
+     */
+    async handleRedirectPromise() {
+        return null;
+    }
+    /**
+     * Mirrors silent SSO and returns a token for the cached mock account.
+     * @param request - Silent SSO options and requested scopes.
+     * @returns A mock authentication result.
+     * @throws When no account is cached.
+     */
+    async ssoSilent(request) {
+        // Silent SSO must fail without a session so providers exercise their login path.
+        if (!this.#account) {
+            throw new Error('MsalMockClient: no cached account for silent sign-in');
+        }
+        return this.#createResult(request.scopes);
+    }
+    /**
+     * Mirrors popup login by signing in the configured mock user immediately.
+     * @param request - Optional popup options and requested scopes.
+     * @returns A mock authentication result.
+     */
+    async loginPopup(request) {
+        this.#signIn(this.#createAccount());
+        return this.#createResult(request?.scopes);
+    }
+    /**
+     * Mirrors redirect login without navigating, because the mock has no browser boundary.
+     * @param _request - Redirect options, accepted for interface compatibility.
+     */
+    async loginRedirect(_request) {
+        this.#signIn(this.#createAccount());
+    }
+    /**
+     * Mirrors the framework login entry point with an immediate mock sign-in.
+     * @param options - Login options including the requested scopes.
+     * @returns A mock login result.
+     */
+    async login(options) {
+        this.#signIn(this.#createAccount());
+        return this.#createResult(options.request?.scopes);
+    }
+    /** Mirrors logout by removing the active mock account from the cache. */
+    async logout() {
+        this.#signOut();
+    }
+    /**
+     * Mirrors MSAL initialization without performing a network handshake.
+     * @param _request - Initialization options, accepted for interface compatibility.
+     */
+    async initialize(_request) {
+        // No network handshake to perform
+    }
+    /**
+     * Mirrors popup token acquisition using the mock login flow.
+     * @param request - Popup token request.
+     * @returns A mock authentication result.
+     */
+    async acquireTokenPopup(request) {
+        return this.loginPopup(request);
+    }
+    /**
+     * Mirrors redirect token acquisition without browser navigation.
+     * @param request - Redirect token request.
+     */
+    async acquireTokenRedirect(request) {
+        return this.loginRedirect(request);
+    }
+    /**
+     * Mirrors silent token acquisition for the cached mock account.
+     * @param request - Silent token request.
+     * @returns A mock authentication result.
+     * @throws When no account is cached.
+     */
+    async acquireTokenSilent(request) {
+        // Silent acquisition must fail without a session, matching the real MSAL boundary.
+        if (!this.#account) {
+            throw new Error('MsalMockClient: no cached account for silent sign-in');
+        }
+        return this.#createResult(request.scopes);
+    }
+    /**
+     * Mirrors MSAL event registration; events are intentionally not emitted by the mock.
+     * @param _callback - Event handler, accepted for interface compatibility.
+     * @param _eventTypes - Event types, accepted for interface compatibility.
+     * @returns Always `null`, because the mock registers no callback.
+     */
+    addEventCallback(_callback, _eventTypes) {
+        return null;
+    }
+    /**
+     * Mirrors event removal as a no-op because this mock registers no callbacks.
+     * @param _callbackId - Callback identifier, accepted for interface compatibility.
+     */
+    removeEventCallback(_callbackId) {
+        // No-op for mock
+    }
+    /**
+     * Mirrors performance callback registration with a stable mock identifier.
+     * @param _callback - Performance handler, accepted for interface compatibility.
+     * @returns A stable mock callback identifier.
+     */
+    addPerformanceCallback(_callback) {
+        return 'mock-performance-callback';
+    }
+    /**
+     * Mirrors performance callback removal and reports successful mock removal.
+     * @param _callbackId - Callback identifier, accepted for interface compatibility.
+     * @returns Always `true` because no callback state is retained.
+     */
+    removePerformanceCallback(_callbackId) {
+        return true;
+    }
+    /**
+     * Mirrors MSAL account lookup against the mock cache.
+     * @param accountFilter - Account fields to match.
+     * @returns The first matching account, or `null`.
+     */
+    getAccount(accountFilter) {
+        const filter = (accountFilter ?? {});
+        // Filter the cache so callers observe the same account-selection semantics as MSAL.
+        const matches = this.getAllAccounts().filter((account) => (filter.homeAccountId === undefined || filter.homeAccountId === account.homeAccountId) &&
+            (filter.localAccountId === undefined || filter.localAccountId === account.localAccountId) &&
+            (filter.username === undefined || filter.username === account.username) &&
+            (filter.tenantId === undefined || filter.tenantId === account.tenantId));
+        return matches[0] ?? null;
+    }
+    /**
+     * Mirrors MSAL account enumeration using the mock cache.
+     * @param _accountFilter - Account filter, accepted for interface compatibility.
+     * @returns All accounts currently in the mock cache.
+     */
+    getAllAccounts(_accountFilter) {
+        return [...this.#cache.values()];
+    }
+    /**
+     * Mirrors redirect logout without navigating in the mock environment.
+     * @param _request - Logout options, accepted for interface compatibility.
+     */
+    async logoutRedirect(_request) {
+        this.#signOut();
+    }
+    /**
+     * Mirrors popup logout without opening a browser window.
+     * @param _request - Logout options, accepted for interface compatibility.
+     */
+    async logoutPopup(_request) {
+        this.#signOut();
+    }
+    /**
+     * Mirrors MSAL logger access; the mock does not retain a logger.
+     * @returns An interface-compatible empty logger value.
+     */
+    getLogger() {
+        // MSAL's Logger has a large internal surface with no mock consumers depend on; callers only pass it through
+        return undefined;
+    }
+    /**
+     * Mirrors logger configuration as a no-op for the mock.
+     * @param _logger - Logger, accepted for interface compatibility.
+     */
+    setLogger(_logger) {
+        // No-op for mock
+    }
+    /**
+     * Mirrors wrapper metadata initialization as a no-op for the mock.
+     * @param _sku - Wrapper identifier, accepted for interface compatibility.
+     * @param _version - Wrapper version, accepted for interface compatibility.
+     */
+    initializeWrapperLibrary(_sku, _version) {
+        // No-op for mock wrapper
+    }
+    /**
+     * Mirrors navigation-client configuration as a no-op because no navigation occurs.
+     * @param _navigationClient - Navigation client, accepted for interface compatibility.
+     */
+    setNavigationClient(_navigationClient) {
+        // No-op for mock
+    }
+    /**
+     * Mirrors configuration access and rejects it because the mock has no browser config.
+     * @returns Never; this mock does not expose browser configuration.
+     * @throws Always, because browser configuration is unsupported.
+     */
+    getConfiguration() {
+        throw new Error('MsalMockClient: getConfiguration is not supported in the mock client');
+    }
+    /**
+     * Mirrors cache hydration as a no-op because mock tokens are created in-process.
+     * @param _result - Authentication result, accepted for interface compatibility.
+     * @param _request - Original token request, accepted for interface compatibility.
+     */
+    async hydrateCache(_result, _request) {
+        // No-op for mock
+    }
+    /**
+     * Mirrors MSAL cache clearing by removing every mock account.
+     * @param _request - Cache-clear options, accepted for interface compatibility.
+     */
+    async clearCache(_request) {
+        this.#cache.clear();
+        this.#activeAccountId = null;
+    }
+    /**
+     * Mirrors the generic token acquisition entry point for the active mock account.
+     * @param options - Token acquisition options.
+     * @returns A mock result, or `null` without an active account.
+     */
+    async acquireToken(options) {
+        // Generic acquisition returns no result when no account is active, matching MSAL's nullable result.
+        if (!this.#account) {
+            return null;
+        }
+        return this.#createResult(options.request?.scopes);
+    }
+    /**
+     * Mirrors authorization-code exchange by signing in and returning a mock result.
+     * @param request - Authorization-code request.
+     * @returns A mock authentication result.
+     */
+    async acquireTokenByCode(request) {
+        this.#signIn(this.#createAccount());
+        return this.#createResult(request?.scopes);
+    }
+    /**
+     * Creates a mock client for the services the given configuration points at.
+     *
+     * @remarks
+     * Takes the same argument as {@link MsalClient}. A user named `Test User` is
+     * already in the account cache, so a provider built on this client boots the
+     * way one does for a returning user with a live session — no sign-in runs, and
+     * the provider's start-up path sees the state it would see in production. Use
+     * {@link MsalMockClient.setUser | setUser} to say who that user is.
+     *
+     * @param config - The same client configuration the real client is built from.
+     */
+    constructor(config) {
+        const tenantId = config.auth.tenantId ?? MsalMockClient.#tenantFromAuthority(config.auth);
+        this.#user = {
+            name: 'Test User',
+            username: 'test.user@equinor.com',
+            userId: 'fusion-mock-user',
+            tenantId: tenantId ?? 'fusion-mock-tenant',
+            scopes: ['fusion-mock-scope'],
+            clientId: config.auth.clientId,
+        };
+        this.#signIn(this.#createAccount());
+    }
+    /**
+     * Reads the tenant out of an authority URL.
+     *
+     * @remarks
+     * A configuration may carry only `authority`, in which case the tenant still
+     * has to end up on the tokens this client mints for the account to look like
+     * the one a real sign-in would have produced.
+     *
+     * @param auth - The auth section of the client configuration.
+     * @returns The tenant, or `undefined` when the authority carries none.
+     */
+    static #tenantFromAuthority(auth) {
+        // An explicit tenant takes precedence; only parse authority when configuration omitted it.
+        if (!auth.authority) {
+            return undefined;
+        }
+        try {
+            // Remove empty URL path segments to identify the authority's tenant consistently.
+            const segments = new URL(auth.authority).pathname.split('/').filter(Boolean);
+            return segments.at(-1);
+        }
+        catch {
+            return undefined;
+        }
+    }
+    /**
+     * Returns the client identifier used by tokens minted by this mock.
+     * @returns The configured client identifier.
+     */
+    get clientId() {
+        return this.#user.clientId;
+    }
+    /**
+     * Returns the tenant identifier used by tokens minted by this mock.
+     * @returns The configured tenant identifier.
+     */
+    get tenantId() {
+        return this.#user.tenantId;
+    }
+    /**
+     * Reports whether the mock currently has an active account.
+     * @returns Whether an account is active.
+     */
+    get hasValidClaims() {
+        return this.#account !== null;
+    }
+    /**
+     * Mirrors MSAL active-account access using the mock's single active account.
+     * @returns The active account, or `null`.
+     */
+    getActiveAccount() {
+        return this.#account;
+    }
+    /**
+     * Makes an account the active one, adding it to the cache if it is unknown.
+     *
+     * @remarks
+     * Real MSAL requires the account to already be cached. Accepting an unknown
+     * one is a deliberate concession to tests: it is the shortest way to swap the
+     * signed-in user between runs, without reconstructing the framework.
+     *
+     * @param next - The account to make active, or `null` to sign out.
+     */
+    setActiveAccount(next) {
+        // A null account is the MSAL sign-out signal, so clear the active mock session.
+        if (!next) {
+            this.#signOut();
+            return;
+        }
+        this.#signIn(next);
+    }
+    /**
+     * Declares who is signed in, replacing whoever was.
+     *
+     * @remarks
+     * This is the counterpart to a real sign-in: the client is configured with
+     * what it talks to, and learns the user separately. `MsalMockConfigurator`
+     * applies it as the configuration is assembled, so the account is in the cache
+     * before `MsalProvider.initialize` runs — the provider then behaves as it does
+     * for a returning user with a live session.
+     *
+     * Values left out keep whatever they were. Passing `null` signs out and
+     * forgets the identity, so the provider follows its unauthenticated path;
+     * `{ signedOut: true }` does the same but keeps the identity, so a later login
+     * resolves as that user.
+     *
+     * @param user - The user to sign in, or `null` when nobody is.
+     */
+    setUser(user) {
+        // Declaring a user replaces the session rather than adding to it, so a test
+        // that names a second user does not silently end up with two cached accounts
+        this.#cache.clear();
+        this.#activeAccountId = null;
+        // A null user explicitly clears the session and identity supplied to the mock.
+        if (!user) {
+            return;
+        }
+        const { account, signedOut, ...rest } = user;
+        // Merge overrides while retaining defaults for fields omitted by the test.
+        this.#user = {
+            ...this.#user,
+            ...rest,
+            name: rest.name ?? account?.name ?? this.#user.name,
+            username: rest.username ?? account?.username ?? this.#user.username,
+            userId: rest.userId ?? account?.localAccountId ?? this.#user.userId,
+            tenantId: rest.tenantId ?? account?.tenantId ?? this.#user.tenantId,
+            scopes: rest.scopes ?? this.#user.scopes,
+        };
+        // Keep identity data without caching an account when the test starts signed out.
+        if (signedOut) {
+            return;
+        }
+        this.#signIn(account ?? this.#createAccount());
+    }
+    /**
+     * Creates the one account represented by this mock's configured identity.
+     * @returns An MSAL-shaped account for the configured user.
+     */
+    #createAccount() {
+        return {
+            homeAccountId: `${this.#user.userId}.${this.#user.tenantId}`,
+            localAccountId: this.#user.userId,
+            environment: 'login.microsoftonline.com',
+            tenantId: this.#user.tenantId,
+            username: this.#user.username,
+            name: this.#user.name,
+        };
+    }
+    /**
+     * Creates an MSAL-shaped token result for the requested or default scopes.
+     * @param scopes - Requested scopes, or the user's configured defaults.
+     * @returns An MSAL-shaped mock authentication result.
+     */
+    #createResult(scopes) {
+        const granted = scopes?.length ? scopes : this.#user.scopes;
+        const token = createMockToken({
+            name: this.#user.name,
+            preferred_username: this.#user.username,
+            oid: this.#user.userId,
+            tid: this.#user.tenantId,
+            aud: this.#user.clientId,
+            scp: granted.join(' '),
+        });
+        // Object shape matches AuthenticationResult's fields consumers rely on; the real
+        // type also carries browser-only fields (e.g. `familyId`) this mock intentionally omits
+        return {
+            account: this.#account ?? this.#createAccount(),
+            accessToken: token,
+            idToken: token,
+            scopes: granted,
+            tokenType: 'Bearer',
+            expiresOn: new Date('2033-11-14T22:13:20.000Z'),
+            authority: `https://login.microsoftonline.com/${this.#user.tenantId}`,
+            uniqueId: this.#user.userId,
+            tenantId: this.#user.tenantId,
+            fromCache: false,
+            correlationId: 'fusion-mock-correlation',
+        };
+    }
+}
+//# sourceMappingURL=MsalMockClient.js.map

package/dist/esm/mock/MsalMockClient.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"MsalMockClient.js","sourceRoot":"","sources":["../../../src/mock/MsalMockClient.ts"],"names":[],"mappings":"AA8BA,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAqCtD;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,OAAO,cAAc;IACzB,KAAK,CAEH;IACF,MAAM,GAAG,IAAI,GAAG,EAAuB,CAAC;IACxC,gBAAgB,GAAkB,IAAI,CAAC;IAEvC;;;;;;;;OAQG;IACH,IAAI,QAAQ;QACV,OAAO,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,gBAAgB,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACzF,CAAC;IAED;;;;;OAKG;IACH,OAAO,CAAC,OAAoB;QAC1B,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC;QAChD,IAAI,CAAC,gBAAgB,GAAG,OAAO,CAAC,aAAa,CAAC;QAC9C,OAAO,OAAO,CAAC;IACjB,CAAC;IAED;;OAEG;IACH,QAAQ;QACN,mGAAmG;QACnG,IAAI,IAAI,CAAC,gBAAgB,EAAE,CAAC;YAC1B,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;YAC1C,IAAI,CAAC,gBAAgB,GAAG,IAAI,CAAC;QAC/B,CAAC;IACH,CAAC;IAED;;;OAGG;IACI,KAAK,CAAC,qBAAqB;QAChC,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;;;;OAKG;IACI,KAAK,CAAC,SAAS,CAAC,OAAyB;QAC9C,iFAAiF;QACjF,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACnB,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;QAC1E,CAAC;QAED,OAAO,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAC5C,CAAC;IAED;;;;OAIG;IACI,KAAK,CAAC,UAAU,CAAC,OAAsB;QAC5C,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC,CAAC;QACpC,OAAO,IAAI,CAAC,aAAa,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAC7C,CAAC;IAED;;;OAGG;IACI,KAAK,CAAC,aAAa,CAAC,QAA0B;QACnD,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC,CAAC;IACtC,CAAC;IAED;;;;OAIG;IACI,KAAK,CAAC,KAAK,CAAC,OAAqB;QACtC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC,CAAC;QACpC,OAAO,IAAI,CAAC,aAAa,CAAE,OAAO,CAAC,OAAiC,EAAE,MAAM,CAAC,CAAC;IAChF,CAAC;IAED,yEAAyE;IAClE,KAAK,CAAC,MAAM;QACjB,IAAI,CAAC,QAAQ,EAAE,CAAC;IAClB,CAAC;IAED;;;OAGG;IACI,KAAK,CAAC,UAAU,CAAC,QAAuC;QAC7D,kCAAkC;IACpC,CAAC;IAED;;;;OAIG;IACI,KAAK,CAAC,iBAAiB,CAAC,OAAqB;QAClD,OAAO,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;IAClC,CAAC;IAED;;;OAGG;IACI,KAAK,CAAC,oBAAoB,CAAC,OAAwB;QACxD,OAAO,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;IACrC,CAAC;IAED;;;;;OAKG;IACI,KAAK,CAAC,kBAAkB,CAAC,OAAsB;QACpD,mFAAmF;QACnF,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACnB,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;QAC1E,CAAC;QACD,OAAO,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAC5C,CAAC;IAED;;;;;OAKG;IACI,gBAAgB,CACrB,SAAgC,EAChC,WAAyB;QAEzB,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;;OAGG;IACI,mBAAmB,CAAC,WAAmB;QAC5C,iBAAiB;IACnB,CAAC;IAED;;;;OAIG;IACI,sBAAsB,CAAC,SAAsC;QAClE,OAAO,2BAA2B,CAAC;IACrC,CAAC;IAED;;;;OAIG;IACI,yBAAyB,CAAC,WAAmB;QAClD,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;;;OAIG;IACI,UAAU,CAAC,aAAsB;QACtC,MAAM,MAAM,GAAG,CAAC,aAAa,IAAI,EAAE,CAElC,CAAC;QAEF,oFAAoF;QACpF,MAAM,OAAO,GAAG,IAAI,CAAC,cAAc,EAAE,CAAC,MAAM,CAC1C,CAAC,OAAO,EAAE,EAAE,CACV,CAAC,MAAM,CAAC,aAAa,KAAK,SAAS,IAAI,MAAM,CAAC,aAAa,KAAK,OAAO,CAAC,aAAa,CAAC;YACtF,CAAC,MAAM,CAAC,cAAc,KAAK,SAAS,IAAI,MAAM,CAAC,cAAc,KAAK,OAAO,CAAC,cAAc,CAAC;YACzF,CAAC,MAAM,CAAC,QAAQ,KAAK,SAAS,IAAI,MAAM,CAAC,QAAQ,KAAK,OAAO,CAAC,QAAQ,CAAC;YACvE,CAAC,MAAM,CAAC,QAAQ,KAAK,SAAS,IAAI,MAAM,CAAC,QAAQ,KAAK,OAAO,CAAC,QAAQ,CAAC,CAC1E,CAAC;QAEF,OAAO,OAAO,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;IAC5B,CAAC;IAED;;;;OAIG;IACI,cAAc,CAAC,cAAwB;QAC5C,OAAO,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;IACnC,CAAC;IAED;;;OAGG;IACI,KAAK,CAAC,cAAc,CAAC,QAA4B;QACtD,IAAI,CAAC,QAAQ,EAAE,CAAC;IAClB,CAAC;IAED;;;OAGG;IACI,KAAK,CAAC,WAAW,CAAC,QAAiC;QACxD,IAAI,CAAC,QAAQ,EAAE,CAAC;IAClB,CAAC;IAED;;;OAGG;IACI,SAAS;QACd,4GAA4G;QAC5G,OAAO,SAA8B,CAAC;IACxC,CAAC;IAED;;;OAGG;IACI,SAAS,CAAC,OAAgB;QAC/B,iBAAiB;IACnB,CAAC;IAED;;;;OAIG;IACI,wBAAwB,CAAC,IAAgB,EAAE,QAAgB;QAChE,yBAAyB;IAC3B,CAAC;IAED;;;OAGG;IACI,mBAAmB,CAAC,iBAAoC;QAC7D,iBAAiB;IACnB,CAAC;IAED;;;;OAIG;IACI,gBAAgB;QACrB,MAAM,IAAI,KAAK,CAAC,sEAAsE,CAAC,CAAC;IAC1F,CAAC;IAED;;;;OAIG;IACI,KAAK,CAAC,YAAY,CACvB,OAA6B,EAC7B,QAA2E;QAE3E,iBAAiB;IACnB,CAAC;IAED;;;OAGG;IACI,KAAK,CAAC,UAAU,CAAC,QAA4B;QAClD,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;QACpB,IAAI,CAAC,gBAAgB,GAAG,IAAI,CAAC;IAC/B,CAAC;IAED;;;;OAIG;IACI,KAAK,CAAC,YAAY,CAAC,OAA4B;QACpD,oGAAoG;QACpG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACnB,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IACrD,CAAC;IAED;;;;OAIG;IACI,KAAK,CAAC,kBAAkB,CAC7B,OAAiC;QAEjC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC,CAAC;QACpC,OAAO,IAAI,CAAC,aAAa,CAAE,OAAiC,EAAE,MAAM,CAAC,CAAC;IACxE,CAAC;IAED;;;;;;;;;;;OAWG;IACH,YAAmB,MAAwB;QACzC,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,IAAI,cAAc,CAAC,oBAAoB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAE1F,IAAI,CAAC,KAAK,GAAG;YACX,IAAI,EAAE,WAAW;YACjB,QAAQ,EAAE,uBAAuB;YACjC,MAAM,EAAE,kBAAkB;YAC1B,QAAQ,EAAE,QAAQ,IAAI,oBAAoB;YAC1C,MAAM,EAAE,CAAC,mBAAmB,CAAC;YAC7B,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ;SAC/B,CAAC;QAEF,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC,CAAC;IACtC,CAAC;IAED;;;;;;;;;;OAUG;IACH,MAAM,CAAC,oBAAoB,CAAC,IAA8B;QACxD,2FAA2F;QAC3F,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;YACpB,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,IAAI,CAAC;YACH,kFAAkF;YAClF,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YAC7E,OAAO,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QACzB,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,SAAS,CAAC;QACnB,CAAC;IACH,CAAC;IAED;;;OAGG;IACH,IAAW,QAAQ;QACjB,OAAO,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC;IAC7B,CAAC;IAED;;;OAGG;IACH,IAAW,QAAQ;QACjB,OAAO,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC;IAC7B,CAAC;IAED;;;OAGG;IACH,IAAW,cAAc;QACvB,OAAO,IAAI,CAAC,QAAQ,KAAK,IAAI,CAAC;IAChC,CAAC;IAED;;;OAGG;IACI,gBAAgB;QACrB,OAAO,IAAI,CAAC,QAAQ,CAAC;IACvB,CAAC;IAED;;;;;;;;;OASG;IACI,gBAAgB,CAAC,IAAwB;QAC9C,gFAAgF;QAChF,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,IAAI,CAAC,QAAQ,EAAE,CAAC;YAChB,OAAO;QACT,CAAC;QAED,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACrB,CAAC;IAED;;;;;;;;;;;;;;;;OAgBG;IACI,OAAO,CAAC,IAAyB;QACtC,4EAA4E;QAC5E,6EAA6E;QAC7E,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;QACpB,IAAI,CAAC,gBAAgB,GAAG,IAAI,CAAC;QAE7B,+EAA+E;QAC/E,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,OAAO;QACT,CAAC;QAED,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,IAAI,EAAE,GAAG,IAAI,CAAC;QAE7C,2EAA2E;QAC3E,IAAI,CAAC,KAAK,GAAG;YACX,GAAG,IAAI,CAAC,KAAK;YACb,GAAG,IAAI;YACP,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,OAAO,EAAE,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI;YACnD,QAAQ,EAAE,IAAI,CAAC,QAAQ,IAAI,OAAO,EAAE,QAAQ,IAAI,IAAI,CAAC,KAAK,CAAC,QAAQ;YACnE,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,OAAO,EAAE,cAAc,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM;YACnE,QAAQ,EAAE,IAAI,CAAC,QAAQ,IAAI,OAAO,EAAE,QAAQ,IAAI,IAAI,CAAC,KAAK,CAAC,QAAQ;YACnE,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM;SACzC,CAAC;QAEF,iFAAiF;QACjF,IAAI,SAAS,EAAE,CAAC;YACd,OAAO;QACT,CAAC;QAED,IAAI,CAAC,OAAO,CAAC,OAAO,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC,CAAC;IACjD,CAAC;IAED;;;OAGG;IACH,cAAc;QACZ,OAAO;YACL,aAAa,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,IAAI,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE;YAC5D,cAAc,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM;YACjC,WAAW,EAAE,2BAA2B;YACxC,QAAQ,EAAE,IAAI,CAAC,KAAK,CAAC,QAAQ;YAC7B,QAAQ,EAAE,IAAI,CAAC,KAAK,CAAC,QAAQ;YAC7B,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI;SACP,CAAC;IACnB,CAAC;IAED;;;;OAIG;IACH,aAAa,CAAC,MAAiB;QAC7B,MAAM,OAAO,GAAG,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC;QAC5D,MAAM,KAAK,GAAG,eAAe,CAAC;YAC5B,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI;YACrB,kBAAkB,EAAE,IAAI,CAAC,KAAK,CAAC,QAAQ;YACvC,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM;YACtB,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,QAAQ;YACxB,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,QAAQ;YACxB,GAAG,EAAE,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC;SACvB,CAAC,CAAC;QAEH,iFAAiF;QACjF,wFAAwF;QACxF,OAAO;YACL,OAAO,EAAE,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,cAAc,EAAE;YAC/C,WAAW,EAAE,KAAK;YAClB,OAAO,EAAE,KAAK;YACd,MAAM,EAAE,OAAO;YACf,SAAS,EAAE,QAAQ;YACnB,SAAS,EAAE,IAAI,IAAI,CAAC,0BAA0B,CAAC;YAC/C,SAAS,EAAE,qCAAqC,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE;YACrE,QAAQ,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM;YAC3B,QAAQ,EAAE,IAAI,CAAC,KAAK,CAAC,QAAQ;YAC7B,SAAS,EAAE,KAAK;YAChB,aAAa,EAAE,yBAAyB;SACN,CAAC;IACvC,CAAC;CACF"}

package/dist/esm/mock/MsalMockConfigurator.js

@@ -0,0 +1,187 @@
+import { MsalConfigurator } from '../MsalConfigurator';
+import { MsalMockClient } from './MsalMockClient';
+/**
+ * The client configuration used when a test declares none.
+ *
+ * @remarks
+ * `MsalClientConfig.auth.clientId` is required, so a mock still needs a client
+ * configuration to exist. Supplying a default is what lets an application boot
+ * under test without declaring credentials it does not have.
+ */
+const defaultMockClientConfig = {
+    auth: {
+        clientId: 'fusion-mock-client',
+        tenantId: 'fusion-mock-tenant',
+    },
+};
+/**
+ * The real MSAL configurator, backed by an in-process client.
+ *
+ * @remarks
+ * Nothing else changes: the same builder API, the same validation and the same
+ * `MsalProvider` are used. Only the boundary that would contact Entra ID is
+ * substituted, through the same
+ * {@link MsalConfigurator._createClient | _createClient} seam the real
+ * configurator builds its own client from — and from the same
+ * {@link MsalConfigurator._createClientConfig | _createClientConfig}, so
+ * `setClientConfig` means exactly what it means in production.
+ *
+ * A user named `Test User` is signed in by default, so an application boots
+ * without declaring anything.
+ *
+ * @example Name the signed-in user
+ * ```typescript
+ * enableMsalMock(configurator, (builder) => {
+ *   builder.setAccount({ name: 'Ada Lovelace', username: 'ada@equinor.com' });
+ * });
+ * ```
+ *
+ * @example Configure the client exactly as in production
+ * ```typescript
+ * enableMsalMock(configurator, (builder) => {
+ *   builder.setClientConfig({ auth: { clientId: 'my-app', tenantId: 'my-tenant' } });
+ * });
+ * ```
+ *
+ * @example Take full control of authentication
+ * ```typescript
+ * enableMsalMock(configurator, (builder) => {
+ *   builder.setClient(new MyOwnMsalClient());
+ * });
+ * ```
+ */
+export class MsalMockConfigurator extends MsalConfigurator {
+    /**
+     * Declares the user to sign in.
+     *
+     * @remarks
+     * Who is signed in is session state, not client configuration — which is what
+     * lets {@link MsalMockClient} take the same argument the real client takes: a
+     * client is configured with *what it talks to*, never with *who is signed in*.
+     *
+     * The user is therefore recorded on the configuration as `mock.account`, not
+     * on this builder, and is signed in on whichever client the module ends up
+     * authenticating through — wherever that client was built:
+     *
+     * - The client this builder builds, normally. The user is in place before
+     *   `MsalProvider.initialize` runs, which is what makes the provider's own
+     *   start-up path observable: with `signedOut` and `setRequiresAuth(true)`, a
+     *   test sees the real automatic login run.
+     * - The **host's** client when the module is hoisted onto a host
+     *   application's provider, because none is built here. An application inside
+     *   a portal shares the portal's session, so this changes who the host sees
+     *   signed in too, as it would in production.
+     * - A client supplied through {@link MsalConfigurator.setClient | setClient},
+     *   when that client is a {@link MsalMockClient}.
+     *
+     * Throws when that client cannot represent a declared user, rather than
+     * failing quietly — a silent no-op is the whole failure mode this exists to
+     * prevent.
+     *
+     * Pass `null` when nobody is signed in, or `{ signedOut: true }` to keep an
+     * identity without a session — a later login then resolves as that user.
+     *
+     * @param account - The user, or an ordinary config-builder callback resolving it.
+     * @returns The builder, for chaining.
+     *
+     * @example Derive the user from the modules in scope
+     * ```typescript
+     * builder.setAccount(async ({ hasModule }) => ({
+     *   name: hasModule('app') ? 'App User' : 'Portal User',
+     * }));
+     * ```
+     */
+    setAccount(account) {
+        this._set('mock.account', account);
+        return this;
+    }
+    /**
+     * Signs the declared user in on the client the module authenticates through.
+     *
+     * @remarks
+     * Deliberately not done while the client is built: that would assume the scope
+     * declaring the user is the scope building the client, which is exactly what
+     * is not true when an application is tested inside a portal. The host built
+     * that client, in a scope this builder never sees, so the client has to be
+     * located rather than assumed.
+     *
+     * @param account - The user to sign in, or `null` when nobody is.
+     * @param config - The validated configuration, carrying the client when one was built.
+     * @param init - The builder arguments, carrying the host reference when hoisted.
+     * @throws When the resolved client is not a {@link MsalMockClient}.
+     */
+    #signIn(account, config, init) {
+        const host = init?.ref?.auth;
+        const client = config.client ?? host?.client;
+        // Reject a real client because mock account state cannot be applied to it.
+        if (!(client instanceof MsalMockClient)) {
+            throw new Error('MsalMockConfigurator: cannot sign a user in, because this module does not authenticate through a mock client. Declare the user where that client is configured instead.');
+        }
+        client.setUser(account);
+    }
+    /**
+     * Assembles the configuration, then signs the declared user in.
+     *
+     * @remarks
+     * Stands a client configuration in first when this builder is the one that
+     * will build a client: `MsalClientConfig.auth.clientId` is required to build
+     * any client at all and a test has no real credentials to declare. It then
+     * flows through the very same
+     * {@link MsalConfigurator._createClientConfig | _createClientConfig}
+     * enrichment the real client is built from, and anything declared through
+     * {@link MsalConfigurator.setClientConfig | setClientConfig} wins — exactly as
+     * in production.
+     *
+     * Doing that here rather than in the constructor is deliberate: a hoisted
+     * module authenticates through the host and builds no client, so it must not
+     * look configured either.
+     *
+     * The user is read from `rawConfig`, because the schema strips `mock` when it
+     * validates — the key exists to carry a test's declaration through the
+     * builder, never to reach the provider.
+     *
+     * @param rawConfig - The raw configuration to process.
+     * @param init - The builder arguments, carrying the host reference when hoisted.
+     * @returns The processed and validated configuration.
+     */
+    async _processConfig(rawConfig, init) {
+        // Supply mock credentials only when this builder owns client construction.
+        if (!this._isHoisted(init) && !this.getClientConfig()) {
+            this.setClientConfig(defaultMockClientConfig);
+        }
+        const config = await super._processConfig(rawConfig, init);
+        // `null` is a declaration in its own right — nobody is signed in — so only
+        // an absent one means the test said nothing about the user
+        const account = rawConfig.mock?.account;
+        // Apply even null because null explicitly requests a signed-out mock state.
+        if (account !== undefined) {
+            this.#signIn(account, config, init);
+        }
+        return config;
+    }
+    /**
+     * Builds an in-process client.
+     *
+     * @remarks
+     * Called only when no client was set, so
+     * {@link MsalConfigurator.setClient | setClient} still replaces authentication
+     * outright.
+     *
+     * Deliberately does not delegate to `super`, which would build a real
+     * `MsalClient` and contact Entra ID. It is never reached when the module is
+     * hoisted onto a host application's provider, because the base configurator
+     * gates client creation on {@link MsalConfigurator._isHoisted | _isHoisted} —
+     * a mock client built there would shadow the host's client, the exact scenario
+     * an application-inside-a-portal test exists to cover.
+     *
+     * Knows nothing about who is signed in: a client is built from what it talks
+     * to, and the declared user is applied to it afterwards.
+     *
+     * @param config - The validated configuration the client is built from.
+     * @returns A client resolving tokens in-process.
+     */
+    async _createClient(config) {
+        return new MsalMockClient(this._createClientConfig(config) ?? defaultMockClientConfig);
+    }
+}
+//# sourceMappingURL=MsalMockConfigurator.js.map

package/dist/esm/mock/MsalMockConfigurator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"MsalMockConfigurator.js","sourceRoot":"","sources":["../../../src/mock/MsalMockConfigurator.ts"],"names":[],"mappings":"AAQA,OAAO,EAAE,gBAAgB,EAAmB,MAAM,qBAAqB,CAAC;AAExE,OAAO,EAAE,cAAc,EAAqB,MAAM,kBAAkB,CAAC;AA2BrE;;;;;;;GAOG;AACH,MAAM,uBAAuB,GAAqB;IAChD,IAAI,EAAE;QACJ,QAAQ,EAAE,oBAAoB;QAC9B,QAAQ,EAAE,oBAAoB;KAC/B;CACF,CAAC;AAEF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AACH,MAAM,OAAO,oBAAqB,SAAQ,gBAAgB;IACxD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAuCG;IACI,UAAU,CACf,OAAyE;QAEzE,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,OAAO,CAAC,CAAC;QACnC,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;;;;;;;;;;;;;OAcG;IACH,OAAO,CACL,OAA4B,EAC5B,MAAkB,EAClB,IAAgC;QAEhC,MAAM,IAAI,GAAI,IAAI,EAAE,GAA4C,EAAE,IAAI,CAAC;QACvE,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,IAAI,IAAI,EAAE,MAAM,CAAC;QAE7C,2EAA2E;QAC3E,IAAI,CAAC,CAAC,MAAM,YAAY,cAAc,CAAC,EAAE,CAAC;YACxC,MAAM,IAAI,KAAK,CACb,yKAAyK,CAC1K,CAAC;QACJ,CAAC;QAED,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IAC1B,CAAC;IAED;;;;;;;;;;;;;;;;;;;;;;;;OAwBG;IACM,KAAK,CAAC,cAAc,CAC3B,SAAqB,EACrB,IAAgC;QAEhC,2EAA2E;QAC3E,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,EAAE,CAAC;YACtD,IAAI,CAAC,eAAe,CAAC,uBAAuB,CAAC,CAAC;QAChD,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,cAAc,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;QAE3D,2EAA2E;QAC3E,2DAA2D;QAC3D,MAAM,OAAO,GAAG,SAAS,CAAC,IAAI,EAAE,OAAO,CAAC;QACxC,4EAA4E;QAC5E,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YAC1B,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;QACtC,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;IAED;;;;;;;;;;;;;;;;;;;;OAoBG;IACgB,KAAK,CAAC,aAAa,CAAC,MAAkB;QACvD,OAAO,IAAI,cAAc,CAAC,IAAI,CAAC,mBAAmB,CAAC,MAAM,CAAC,IAAI,uBAAuB,CAAC,CAAC;IACzF,CAAC;CACF"}