@equinor/fusion-framework-vite-plugin-spa 4.1.4 → 5.1.0

package/README.md

@@ -177,7 +177,6 @@ fusionSpaPlugin({
       redirectUri: 'https://my-app.com/auth-callback',
       requiresAuth: 'true',
       mock: 'true', // (Optional) Use mock authentication for CI/Playwright
-      mockToken: '<token>', // (Optional) JWT that identifies the mock user
     },
 
     // Service Worker configuration for API proxying and authentication
@@ -241,7 +240,6 @@ Configures Azure AD authentication via the Microsoft Authentication Library (MSA
 - `redirectUri` — URL to redirect to after authentication
 - `requiresAuth` _(optional, string)_ — When `'true'`, automatically prompts for login on first load
 - `mock` _(optional, string)_ — When `'true'`, uses mock authentication instead of Entra ID
-- `mockToken` _(optional, string)_ — JWT used as-is to identify and authenticate the mock user
 
 ### Service Worker
 
@@ -396,8 +394,8 @@ FUSION_SPA_MSAL_REDIRECT_URI=https://my-app.com/auth-callback
 FUSION_SPA_MSAL_REQUIRES_AUTH=true
 # Set to skip Entra ID and sign in a mock user instead — for CI/Playwright runs
 FUSION_SPA_MSAL_MOCK=true
-# Optional: a mock JWT whose claims (name, preferred_username, oid, tid, scp) name the signed-in user
-FUSION_SPA_MSAL_MOCK_TOKEN=eyJhbGciOiJub25lIiwidHlwIjoiSldUIn0....
+# Optional: standalone mock-server origin used for session-scoped token acquisition
+FUSION_SPA_MSAL_MOCK_SERVER_URL=http://localhost:4010
 
 # Telemetry
 FUSION_SPA_TELEMETRY_CONSOLE_LEVEL=2
@@ -423,103 +421,23 @@ server headlessly in GitHub Actions or a Playwright suite.
 FUSION_SPA_MSAL_MOCK=true
 ```
 
-By default the mock signs in a generic `Test User`. To control who that user is, set
-`FUSION_SPA_MSAL_MOCK_TOKEN` to a JWT — generate one with `createMockToken` from
-`@equinor/fusion-framework-module-msal/mock`, or use one issued by your backend's own mock —
-and its `name`, `preferred_username`, `oid`, `tid`, and `scp` claims name the signed-in user:
-
-```ts
-import { createMockToken } from '@equinor/fusion-framework-module-msal/mock';
-
-const token = createMockToken({
-  name: 'Ada Lovelace',
-  preferred_username: 'ada.lovelace@equinor.com',
-  oid: 'ada-object-id',
-  scp: 'user_impersonation',
-});
-```
-
-```sh
-FUSION_SPA_MSAL_MOCK_TOKEN=<token>
-```
-
-### Generate a mock user and update `.env`
-
-> [!WARNING]
-> The script below writes `FUSION_SPA_MSAL_MOCK=true` to the project-root `.env`. This is
-> persistent configuration: the application remains locked to mock authentication across restarts
-> until the variable is removed or set to `false`. `ffc app dev --mock` and
-> `ffc app serve --mock` already enable mock authentication for that command, so do not persist
-> `FUSION_SPA_MSAL_MOCK=true` merely to use those CLI flags. Never deploy an environment file that
-> enables mock authentication.
-
-Run the following from the application root. The application needs
-`@equinor/fusion-framework-module-msal` as a direct development dependency so the Node.js script
-can import `createMockToken` when pnpm uses strict dependency resolution:
-
-```sh
-pnpm add --save-dev @equinor/fusion-framework-module-msal
-```
-
-Create `scripts/set-mock-user.mjs`. The script creates the project-root `.env` when it does not
-exist. When `.env` already exists, it preserves comments and unrelated variables while replacing
-the existing mock-auth values or appending them when absent:
-
-```js
-#!/usr/bin/env node
-
-import { readFile, writeFile } from 'node:fs/promises';
-import { createMockToken } from '@equinor/fusion-framework-module-msal/mock';
-
-const envFile = new URL('../.env', import.meta.url);
-const token = createMockToken({
-  name: 'Ada Lovelace',
-  preferred_username: 'ada.lovelace@equinor.com',
-  oid: 'ada-object-id',
-  scp: 'user_impersonation',
-});
-
-let contents = await readFile(envFile, 'utf8').catch((error) => {
-  if (error.code === 'ENOENT') return '';
-  throw error;
-});
-
-const updates = {
-  FUSION_SPA_MSAL_MOCK: 'true',
-  FUSION_SPA_MSAL_MOCK_TOKEN: token,
-};
-
-for (const [key, value] of Object.entries(updates)) {
-  const line = `${key}=${value}`;
-  const existing = new RegExp(`^${key}=.*$`, 'm');
-  if (existing.test(contents)) {
-    contents = contents.replace(existing, line);
-  } else {
-    const separator = contents.length > 0 && !contents.endsWith('\n') ? '\n' : '';
-    contents = `${contents}${separator}${line}\n`;
-  }
-}
-
-await writeFile(envFile, contents);
-console.log('Updated .env with the mock user token.');
-```
-
-Make the script executable and run it:
+By default the mock signs in a generic `Test User`. To select and switch users at runtime, start
+the standalone mock server with the browser origin explicitly allowed, then point the app at it:
 
 ```sh
-chmod +x scripts/set-mock-user.mjs
-./scripts/set-mock-user.mjs
+ffc mock-server ./mocks --port 4010 --allow-origin http://localhost:3000
+ffc app dev --mock http://localhost:4010
 ```
 
-Restart the Vite or Fusion Framework development server after updating `.env`. To return to real
-Entra ID authentication, remove both `FUSION_SPA_MSAL_MOCK` and `FUSION_SPA_MSAL_MOCK_TOKEN` from
-`.env` (or set `FUSION_SPA_MSAL_MOCK=false`), then restart the server again. The generated JWT is
-deterministic and unsigned; use it only with the in-process MSAL mock and mocked backend services,
-never as a credential for a real service.
+The `--mock` option enables mock authentication and supplies the mock-server URL to the SPA. A
+direct Vite setup can provide the same values through `FUSION_SPA_MSAL_MOCK=true` and
+`FUSION_SPA_MSAL_MOCK_SERVER_URL=http://localhost:4010`.
 
-The token itself is also sent as-is as the access/id token — it is not regenerated — so a
-backend mock that validates its own tokens (specific claims, audience, or signature) sees
-exactly the token it issued.
+Playwright and other cookie-aware HTTP clients can select users through `createMockAuth` from
+`@equinor/fusion-openapi-mock-server`. The standalone mock server stores the user per browser
+context and issues an unsigned OBO-style token for each scope set requested by Fusion MSAL. This
+supports switching and parallel personas without restarting the app or dev server; see the
+[Playwright guide](../../utils/openapi-mock-server/docs/testing-with-playwright.md).
 
 Mocking authentication does not mock the rest of the API surface — service discovery and
 any backend calls the portal makes still hit real URLs unless you also override them. Use
@@ -718,5 +636,3 @@ See [API Service Plugin docs](https://github.com/equinor/fusion-framework/tree/m
 ## Contributing
 
 Contributions, bug reports, and feature requests are welcome! See [CONTRIBUTING.md](../../../CONTRIBUTING.md) for guidelines.
-
-

package/dist/esm/html/acquire-mock-server-token.js

@@ -0,0 +1,40 @@
+/**
+ * Acquires a token for the active browser session from a Fusion mock server.
+ *
+ * @param mockServerUrl - Origin of the standalone mock server.
+ * @param scopes - OAuth scopes requested by MSAL.
+ * @param request - Fetch-compatible browser request function.
+ * @returns The issued token, or `null` when the session has no selected user.
+ * @throws When the mock server rejects the request or returns an unsupported response.
+ */
+export async function acquireMockServerToken(mockServerUrl, scopes, request = globalThis.fetch) {
+    const response = await request(new URL('/@fusion-mock/auth/token', mockServerUrl), {
+        method: 'POST',
+        credentials: 'include',
+        headers: { 'content-type': 'application/json' },
+        body: JSON.stringify({ scopes }),
+    });
+    // Surface protocol and configuration failures instead of falling back to another identity.
+    if (!response.ok) {
+        throw new Error(`Mock auth token acquisition failed with status ${response.status}`);
+    }
+    const resolution = await response.json();
+    // A missing persona deliberately restores the MSAL mock's built-in identity.
+    if (typeof resolution === 'object' &&
+        resolution !== null &&
+        'status' in resolution &&
+        resolution.status === 'missing') {
+        return null;
+    }
+    // Accept only the documented issued-token response shape.
+    if (typeof resolution === 'object' &&
+        resolution !== null &&
+        'status' in resolution &&
+        resolution.status === 'issued' &&
+        'token' in resolution &&
+        typeof resolution.token === 'string') {
+        return resolution.token;
+    }
+    throw new Error('Mock auth token acquisition returned an unsupported status');
+}
+//# sourceMappingURL=acquire-mock-server-token.js.map

package/dist/esm/html/acquire-mock-server-token.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"acquire-mock-server-token.js","sourceRoot":"","sources":["../../../src/html/acquire-mock-server-token.ts"],"names":[],"mappings":"AAEA;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,aAAqB,EACrB,MAAgB,EAChB,OAAO,GAAoB,UAAU,CAAC,KAAK;IAE3C,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,IAAI,GAAG,CAAC,0BAA0B,EAAE,aAAa,CAAC,EAAE;QACjF,MAAM,EAAE,MAAM;QACd,WAAW,EAAE,SAAS;QACtB,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;QAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;KACjC,CAAC,CAAC;IAEH,2FAA2F;IAC3F,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,IAAI,KAAK,CAAC,kDAAkD,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;IACvF,CAAC;IAED,MAAM,UAAU,GAAY,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;IAClD,6EAA6E;IAC7E,IACE,OAAO,UAAU,KAAK,QAAQ;QAC9B,UAAU,KAAK,IAAI;QACnB,QAAQ,IAAI,UAAU;QACtB,UAAU,CAAC,MAAM,KAAK,SAAS,EAC/B,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,0DAA0D;IAC1D,IACE,OAAO,UAAU,KAAK,QAAQ;QAC9B,UAAU,KAAK,IAAI;QACnB,QAAQ,IAAI,UAAU;QACtB,UAAU,CAAC,MAAM,KAAK,QAAQ;QAC9B,OAAO,IAAI,UAAU;QACrB,OAAO,UAAU,CAAC,KAAK,KAAK,QAAQ,EACpC,CAAC;QACD,OAAO,UAAU,CAAC,KAAK,CAAC;IAC1B,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,4DAA4D,CAAC,CAAC;AAChF,CAAC"}

package/dist/esm/html/bootstrap.js

@@ -4,6 +4,7 @@ import { enableMSAL } from '@equinor/fusion-framework-module-msal';
 import { enableServiceDiscovery, } from '@equinor/fusion-framework-module-service-discovery';
 import { enableTelemetry, TelemetryLevel, } from '@equinor/fusion-framework-module-telemetry';
 import { ConsoleAdapter } from '@equinor/fusion-framework-module-telemetry/console-adapter';
+import { acquireMockServerToken } from './acquire-mock-server-token.js';
 import { createPortalEntryPoint } from './create-portal-entry-point.js';
 import { isEnabledEnvValue } from './is-enabled-env-value.js';
 import { registerServiceWorker } from './register-service-worker.js';
@@ -27,12 +28,12 @@ enableServiceDiscovery(configurator, async (builder) => {
 // Avoid interactive Entra ID authentication when the SPA runs in CI or Playwright.
 if (isEnabledEnvValue(import.meta.env.FUSION_SPA_MSAL_MOCK)) {
     const { enableMsalMock } = await import('@equinor/fusion-framework-module-msal/mock');
-    const mockToken = import.meta.env.FUSION_SPA_MSAL_MOCK_TOKEN;
+    const mockServerUrl = import.meta.env.FUSION_SPA_MSAL_MOCK_SERVER_URL;
     enableMsalMock(configurator, (builder) => {
-        // Preserve the mock client's default identity when no backend-specific token is configured.
-        if (!mockToken)
-            return;
-        builder.setToken(mockToken);
+        // The SPA owns the HTTP adapter; MSAL owns applying the returned token and account.
+        if (mockServerUrl) {
+            builder.setAcquireToken(({ scopes }) => acquireMockServerToken(mockServerUrl, scopes));
+        }
     });
 }
 else {

package/dist/esm/html/bootstrap.js.map

@@ -1 +1 @@
-{"version":3,"file":"bootstrap.js","sourceRoot":"","sources":["../../../src/html/bootstrap.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,MAAM,kCAAkC,CAAC;AAEvE,OAAO,EAAE,mBAAmB,EAAmB,MAAM,uCAAuC,CAAC;AAC7F,OAAO,EAAE,UAAU,EAAmB,MAAM,uCAAuC,CAAC;AACpF,OAAO,EACL,sBAAsB,GAEvB,MAAM,oDAAoD,CAAC;AAE5D,OAAO,EACL,eAAe,EACf,cAAc,GAEf,MAAM,4CAA4C,CAAC;AACpD,OAAO,EAAE,cAAc,EAAE,MAAM,4DAA4D,CAAC;AAE5F,OAAO,EAAE,sBAAsB,EAAE,MAAM,gCAAgC,CAAC;AACxE,OAAO,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAC9D,OAAO,EAAE,qBAAqB,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AAWxC,oCAAoC;AACpC,MAAM,iBAAiB,GAAG,CAAI,IAAY,EAAc,EAAE,CAAC,MAAM,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC;AAE3F,uCAAuC;AACvC,MAAM,YAAY,GAAG,IAAI,mBAAmB,EAAE,CAAC;AAE/C,MAAM,mBAAmB,GAAG,IAAI,GAAG,CACjC,OAAO,IAAI,CAAC,GAAG,CAAC,gCAAgC,EAChD,OAAO,IAAI,CAAC,GAAG,CAAC,gCAAgC,CAAC,UAAU,CAAC,MAAM,CAAC;IACjE,CAAC,CAAC,SAAS;IACX,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAC3B,CAAC;AAEF,iFAAiF;AACjF,YAAY,CAAC,SAAS,CACpB,mBAAmB,CAAC,mBAAmB,EAAE;IACvC,OAAO,EAAE,MAAM,CAAC,mBAAmB,CAAC;IACpC,aAAa,EAAE,OAAO,IAAI,CAAC,GAAG,CAAC,mCAAmC;CACnE,CAAC,CACH,CAAC;AAEF,uEAAuE;AACvE,sBAAsB,CAAC,YAAY,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;IACrD,OAAO,CAAC,0CAA0C,CAAC,mBAAmB,CAAC,CAAC;AAC1E,CAAC,CAAC,CAAC;AAEH,mFAAmF;AACnF,IAAI,iBAAiB,CAAC,OAAO,IAAI,CAAC,GAAG,CAAC,oBAAoB,CAAC,EAAE,CAAC;IAC5D,MAAM,EAAE,cAAc,EAAE,GAAG,MAAM,MAAM,CAAC,4CAA4C,CAAC,CAAC;IAEtF,MAAM,SAAS,GAAG,OAAO,IAAI,CAAC,GAAG,CAAC,0BAA0B,CAAC;IAE7D,cAAc,CAAC,YAAY,EAAE,CAAC,OAAO,EAAE,EAAE;QACvC,4FAA4F;QAC5F,IAAI,CAAC,SAAS;YAAE,OAAO;QAEvB,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;IAC9B,CAAC,CAAC,CAAC;AACL,CAAC;KAAM,CAAC;IACN,UAAU,CAAC,YAAY,EAAE,CAAC,OAAO,EAAE,EAAE;QACnC,OAAO,CAAC,eAAe,CAAC;YACtB,IAAI,EAAE;gBACJ,QAAQ,EAAE,OAAO,IAAI,CAAC,GAAG,CAAC,yBAAyB;gBACnD,QAAQ,EAAE,OAAO,IAAI,CAAC,GAAG,CAAC,yBAAyB;gBACnD,WAAW,EAAE,OAAO,IAAI,CAAC,GAAG,CAAC,4BAA4B;aAC1D;SACF,CAAC,CAAC;QAEH,OAAO,CAAC,eAAe,CAAC,iBAAiB,CAAC,OAAO,IAAI,CAAC,GAAG,CAAC,6BAA6B,CAAC,CAAC,CAAC;IAC5F,CAAC,CAAC,CAAC;AACL,CAAC;AAED,eAAe,CAAC,YAAY,EAAE;IAC5B,wBAAwB,EAAE,IAAI;IAC9B,SAAS,EAAE,CAAC,OAAO,EAAE,EAAE;QACrB,MAAM,YAAY,GAAG,MAAM,CACzB,OAAO,IAAI,CAAC,GAAG,CAAC,kCAAkC,IAAI,cAAc,CAAC,WAAW,CACjF,CAAC;QAEF,MAAM,cAAc,GAAG,IAAI,cAAc,CAAC;YACxC,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,IAAI,YAAY;SACtF,CAAC,CAAC;QAEH,OAAO,CAAC,UAAU,CAAC,SAAS,EAAE,cAAc,CAAC,CAAC;QAE9C,OAAO,CAAC,WAAW,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE;YAClC,MAAM,QAAQ,GAAG;gBACf,MAAM,EAAE;oBACN,GAAG,EAAE;wBACH,OAAO;qBACR;iBACF;gBACD,kGAAkG;aAC5E,CAAC;YACzB,yEAAyE;YACzE,IAAI,OAAO,EAAE,IAAI,EAAE,CAAC;gBAClB,QAAQ,CAAC,MAAM,CAAC,IAAI,GAAG;oBACrB,EAAE,EAAE,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,aAAa;oBACvC,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI;oBAChC,KAAK,EAAE,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ;iBACtC,CAAC;YACJ,CAAC;YACD,OAAO,QAAQ,CAAC;QAClB,CAAC,CAAC,CAAC;IACL,CAAC;CACF,CAAC,CAAC;AAEH,CAAC,KAAK,IAAI,EAAE;IACV,+FAA+F;IAC/F,MAAM,GAAG,GACP,MAAM,YAAY,CAAC,UAAU,EAE1B,CAAC;IAEN,MAAM,SAAS,GAAG,GAAG,CAAC,SAAS,CAAC;IAEhC,wFAAwF;IACxF,MAAM,WAAW,GAAG,SAAS,CAAC,OAAO,CAAC;QACpC,IAAI,EAAE,WAAW;QACjB,KAAK,EAAE,cAAc,CAAC,WAAW;KAClC,CAAC,CAAC;IAEH,MAAM,WAAW,CAAC,KAAK,EAAE,CAAC,OAAO,CAAC,qBAAqB,CAAC,GAAG,CAAC,EAAE;QAC5D,IAAI,EAAE;YACJ,KAAK,EAAE,cAAc,CAAC,KAAK;YAC3B,IAAI,EAAE,kCAAkC;SACzC;KACF,CAAC,CAAC;IAEH,qFAAqF;IACrF,MAAM,YAAY,GAAG,MAAM,GAAG,CAAC,gBAAgB,CAAC,YAAY,CAAC,eAAe,CAAC,CAAC;IAE9E,uEAAuE;IACvE,MAAM,QAAQ,GAAG,OAAO,IAAI,CAAC,GAAG,CAAC,oBAAoB,CAAC;IACtD,MAAM,SAAS,GAAG,OAAO,IAAI,CAAC,GAAG,CAAC,qBAAqB,IAAI,QAAQ,CAAC;IACpE,MAAM,WAAW,GAAG,OAAO,IAAI,CAAC,GAAG,CAAC,uBAAuB,IAAI,KAAK,CAAC;IACrE,MAAM,eAAe,GAAG,MAAM,WAAW;SACtC,KAAK,EAAE;SACP,OAAO,CAAC,YAAY,CAAC,IAAI,CAAiB,YAAY,QAAQ,IAAI,SAAS,EAAE,CAAC,EAAE;QAC/E,IAAI,EAAE,CAAC,QAAwB,EAAE,EAAE,CAAC,CAAC;YACnC,IAAI,EAAE,+BAA+B;YACrC,KAAK,EAAE,cAAc,CAAC,KAAK;YAC3B,UAAU,EAAE;gBACV,QAAQ;gBACR,SAAS;gBACT,aAAa,EAAE,QAAQ,CAAC,KAAK,CAAC,aAAa;gBAC3C,eAAe,EAAE,QAAQ,CAAC,KAAK,CAAC,MAAM,EAAE,OAAO;gBAC/C,SAAS,EAAE,QAAQ,CAAC,KAAK,CAAC,SAAS;aACpC;SACF,CAAC;KACH,CAAC,CAAC;IAEL,MAAM,aAAa,GAAG,MAAM,WAAW;SACpC,KAAK,EAAE;SACP,OAAO,CAAC,YAAY,CAAC,IAAI,CAAC,YAAY,QAAQ,IAAI,SAAS,SAAS,CAAC,EAAE;QACtE,IAAI,EAAE;YACJ,IAAI,EAAE,6BAA6B;YACnC,KAAK,EAAE,cAAc,CAAC,KAAK;YAC3B,UAAU,EAAE;gBACV,QAAQ;gBACR,SAAS;aACV;SACF;KACF,CAAC,CAAC;IAEL,yEAAyE;IACzE,MAAM,EAAE,GAAG,QAAQ,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;IACzC,QAAQ,CAAC,IAAI,CAAC,SAAS,GAAG,EAAE,CAAC;IAC7B,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;IAE9B,MAAM,gBAAgB,GAAG,sBAAsB,CAC7C,WAAW,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,EACzC,eAAe,CAAC,KAAK,CAAC,SAAS,EAC/B,eAAe,CAAC,KAAK,CAAC,aAAa,CACpC,CAAC;IAEF,qEAAqE;IACrE,sCAAsC;IACtC,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,WAAW;SACjC,KAAK,EAAE;SACP,OAAO,CACN,iBAAiB,CAAoD,gBAAgB,CAAC,EACtF;QACE,IAAI,EAAE;YACJ,IAAI,EAAE,iCAAiC;YACvC,KAAK,EAAE,cAAc,CAAC,KAAK;YAC3B,UAAU,EAAE;gBACV,QAAQ;gBACR,SAAS;gBACT,UAAU,EAAE,gBAAgB;aAC7B;SACF;KACF,CACF,CAAC;IAEJ,uEAAuE;IACvE,MAAM,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,QAAQ,EAAE,eAAe,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC,CAAC;AACxE,CAAC,CAAC,EAAE,CAAC"}
+{"version":3,"file":"bootstrap.js","sourceRoot":"","sources":["../../../src/html/bootstrap.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,MAAM,kCAAkC,CAAC;AAEvE,OAAO,EAAE,mBAAmB,EAAmB,MAAM,uCAAuC,CAAC;AAC7F,OAAO,EAAE,UAAU,EAAmB,MAAM,uCAAuC,CAAC;AACpF,OAAO,EACL,sBAAsB,GAEvB,MAAM,oDAAoD,CAAC;AAE5D,OAAO,EACL,eAAe,EACf,cAAc,GAEf,MAAM,4CAA4C,CAAC;AACpD,OAAO,EAAE,cAAc,EAAE,MAAM,4DAA4D,CAAC;AAE5F,OAAO,EAAE,sBAAsB,EAAE,MAAM,gCAAgC,CAAC;AACxE,OAAO,EAAE,sBAAsB,EAAE,MAAM,gCAAgC,CAAC;AACxE,OAAO,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAC9D,OAAO,EAAE,qBAAqB,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AAWxC,oCAAoC;AACpC,MAAM,iBAAiB,GAAG,CAAI,IAAY,EAAc,EAAE,CAAC,MAAM,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC;AAE3F,uCAAuC;AACvC,MAAM,YAAY,GAAG,IAAI,mBAAmB,EAAE,CAAC;AAE/C,MAAM,mBAAmB,GAAG,IAAI,GAAG,CACjC,OAAO,IAAI,CAAC,GAAG,CAAC,gCAAgC,EAChD,OAAO,IAAI,CAAC,GAAG,CAAC,gCAAgC,CAAC,UAAU,CAAC,MAAM,CAAC;IACjE,CAAC,CAAC,SAAS;IACX,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAC3B,CAAC;AAEF,iFAAiF;AACjF,YAAY,CAAC,SAAS,CACpB,mBAAmB,CAAC,mBAAmB,EAAE;IACvC,OAAO,EAAE,MAAM,CAAC,mBAAmB,CAAC;IACpC,aAAa,EAAE,OAAO,IAAI,CAAC,GAAG,CAAC,mCAAmC;CACnE,CAAC,CACH,CAAC;AAEF,uEAAuE;AACvE,sBAAsB,CAAC,YAAY,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;IACrD,OAAO,CAAC,0CAA0C,CAAC,mBAAmB,CAAC,CAAC;AAC1E,CAAC,CAAC,CAAC;AAEH,mFAAmF;AACnF,IAAI,iBAAiB,CAAC,OAAO,IAAI,CAAC,GAAG,CAAC,oBAAoB,CAAC,EAAE,CAAC;IAC5D,MAAM,EAAE,cAAc,EAAE,GAAG,MAAM,MAAM,CAAC,4CAA4C,CAAC,CAAC;IAEtF,MAAM,aAAa,GAAG,OAAO,IAAI,CAAC,GAAG,CAAC,+BAA+B,CAAC;IAEtE,cAAc,CAAC,YAAY,EAAE,CAAC,OAAO,EAAE,EAAE;QACvC,oFAAoF;QACpF,IAAI,aAAa,EAAE,CAAC;YAClB,OAAO,CAAC,eAAe,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,sBAAsB,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC,CAAC;QACzF,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC;KAAM,CAAC;IACN,UAAU,CAAC,YAAY,EAAE,CAAC,OAAO,EAAE,EAAE;QACnC,OAAO,CAAC,eAAe,CAAC;YACtB,IAAI,EAAE;gBACJ,QAAQ,EAAE,OAAO,IAAI,CAAC,GAAG,CAAC,yBAAyB;gBACnD,QAAQ,EAAE,OAAO,IAAI,CAAC,GAAG,CAAC,yBAAyB;gBACnD,WAAW,EAAE,OAAO,IAAI,CAAC,GAAG,CAAC,4BAA4B;aAC1D;SACF,CAAC,CAAC;QAEH,OAAO,CAAC,eAAe,CAAC,iBAAiB,CAAC,OAAO,IAAI,CAAC,GAAG,CAAC,6BAA6B,CAAC,CAAC,CAAC;IAC5F,CAAC,CAAC,CAAC;AACL,CAAC;AAED,eAAe,CAAC,YAAY,EAAE;IAC5B,wBAAwB,EAAE,IAAI;IAC9B,SAAS,EAAE,CAAC,OAAO,EAAE,EAAE;QACrB,MAAM,YAAY,GAAG,MAAM,CACzB,OAAO,IAAI,CAAC,GAAG,CAAC,kCAAkC,IAAI,cAAc,CAAC,WAAW,CACjF,CAAC;QAEF,MAAM,cAAc,GAAG,IAAI,cAAc,CAAC;YACxC,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,IAAI,YAAY;SACtF,CAAC,CAAC;QAEH,OAAO,CAAC,UAAU,CAAC,SAAS,EAAE,cAAc,CAAC,CAAC;QAE9C,OAAO,CAAC,WAAW,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE;YAClC,MAAM,QAAQ,GAAG;gBACf,MAAM,EAAE;oBACN,GAAG,EAAE;wBACH,OAAO;qBACR;iBACF;gBACD,kGAAkG;aAC5E,CAAC;YACzB,yEAAyE;YACzE,IAAI,OAAO,EAAE,IAAI,EAAE,CAAC;gBAClB,QAAQ,CAAC,MAAM,CAAC,IAAI,GAAG;oBACrB,EAAE,EAAE,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,aAAa;oBACvC,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI;oBAChC,KAAK,EAAE,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ;iBACtC,CAAC;YACJ,CAAC;YACD,OAAO,QAAQ,CAAC;QAClB,CAAC,CAAC,CAAC;IACL,CAAC;CACF,CAAC,CAAC;AAEH,CAAC,KAAK,IAAI,EAAE;IACV,+FAA+F;IAC/F,MAAM,GAAG,GACP,MAAM,YAAY,CAAC,UAAU,EAE1B,CAAC;IAEN,MAAM,SAAS,GAAG,GAAG,CAAC,SAAS,CAAC;IAEhC,wFAAwF;IACxF,MAAM,WAAW,GAAG,SAAS,CAAC,OAAO,CAAC;QACpC,IAAI,EAAE,WAAW;QACjB,KAAK,EAAE,cAAc,CAAC,WAAW;KAClC,CAAC,CAAC;IAEH,MAAM,WAAW,CAAC,KAAK,EAAE,CAAC,OAAO,CAAC,qBAAqB,CAAC,GAAG,CAAC,EAAE;QAC5D,IAAI,EAAE;YACJ,KAAK,EAAE,cAAc,CAAC,KAAK;YAC3B,IAAI,EAAE,kCAAkC;SACzC;KACF,CAAC,CAAC;IAEH,qFAAqF;IACrF,MAAM,YAAY,GAAG,MAAM,GAAG,CAAC,gBAAgB,CAAC,YAAY,CAAC,eAAe,CAAC,CAAC;IAE9E,uEAAuE;IACvE,MAAM,QAAQ,GAAG,OAAO,IAAI,CAAC,GAAG,CAAC,oBAAoB,CAAC;IACtD,MAAM,SAAS,GAAG,OAAO,IAAI,CAAC,GAAG,CAAC,qBAAqB,IAAI,QAAQ,CAAC;IACpE,MAAM,WAAW,GAAG,OAAO,IAAI,CAAC,GAAG,CAAC,uBAAuB,IAAI,KAAK,CAAC;IACrE,MAAM,eAAe,GAAG,MAAM,WAAW;SACtC,KAAK,EAAE;SACP,OAAO,CAAC,YAAY,CAAC,IAAI,CAAiB,YAAY,QAAQ,IAAI,SAAS,EAAE,CAAC,EAAE;QAC/E,IAAI,EAAE,CAAC,QAAwB,EAAE,EAAE,CAAC,CAAC;YACnC,IAAI,EAAE,+BAA+B;YACrC,KAAK,EAAE,cAAc,CAAC,KAAK;YAC3B,UAAU,EAAE;gBACV,QAAQ;gBACR,SAAS;gBACT,aAAa,EAAE,QAAQ,CAAC,KAAK,CAAC,aAAa;gBAC3C,eAAe,EAAE,QAAQ,CAAC,KAAK,CAAC,MAAM,EAAE,OAAO;gBAC/C,SAAS,EAAE,QAAQ,CAAC,KAAK,CAAC,SAAS;aACpC;SACF,CAAC;KACH,CAAC,CAAC;IAEL,MAAM,aAAa,GAAG,MAAM,WAAW;SACpC,KAAK,EAAE;SACP,OAAO,CAAC,YAAY,CAAC,IAAI,CAAC,YAAY,QAAQ,IAAI,SAAS,SAAS,CAAC,EAAE;QACtE,IAAI,EAAE;YACJ,IAAI,EAAE,6BAA6B;YACnC,KAAK,EAAE,cAAc,CAAC,KAAK;YAC3B,UAAU,EAAE;gBACV,QAAQ;gBACR,SAAS;aACV;SACF;KACF,CAAC,CAAC;IAEL,yEAAyE;IACzE,MAAM,EAAE,GAAG,QAAQ,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;IACzC,QAAQ,CAAC,IAAI,CAAC,SAAS,GAAG,EAAE,CAAC;IAC7B,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;IAE9B,MAAM,gBAAgB,GAAG,sBAAsB,CAC7C,WAAW,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,EACzC,eAAe,CAAC,KAAK,CAAC,SAAS,EAC/B,eAAe,CAAC,KAAK,CAAC,aAAa,CACpC,CAAC;IAEF,qEAAqE;IACrE,sCAAsC;IACtC,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,WAAW;SACjC,KAAK,EAAE;SACP,OAAO,CACN,iBAAiB,CAAoD,gBAAgB,CAAC,EACtF;QACE,IAAI,EAAE;YACJ,IAAI,EAAE,iCAAiC;YACvC,KAAK,EAAE,cAAc,CAAC,KAAK;YAC3B,UAAU,EAAE;gBACV,QAAQ;gBACR,SAAS;gBACT,UAAU,EAAE,gBAAgB;aAC7B;SACF;KACF,CACF,CAAC;IAEJ,uEAAuE;IACvE,MAAM,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,QAAQ,EAAE,eAAe,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC,CAAC;AACxE,CAAC,CAAC,EAAE,CAAC"}

package/dist/esm/html/html.js

@@ -28,6 +28,10 @@ export const html = `
       <script>
         // Set AG Grid license key globally if provided
         window.FUSION_AG_GRID_KEY = '%FUSION_SPA_AG_GRID_KEY%';
+
+        // Expose the mock server origin when served with --mock, so the portal can tell it is
+        // running against local mocks; the placeholder stays unreplaced (not a URL) otherwise.
+        window.FUSION_MOCK_SERVER_URL = '%FUSION_SPA_MSAL_MOCK_SERVER_URL%';
         
         // suppress console error for custom elements already defined. 
         // WebComponents should be added by the portal, but not removed from application

package/dist/esm/html/html.js.map

@@ -1 +1 @@
-{"version":3,"file":"html.js","sourceRoot":"","sources":["../../../src/html/html.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AAExC;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,CAAC,MAAM,IAAI,GAAG;;;;;;wDAMoC,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;CA2B9D,CAAC;AAEF,eAAe,IAAI,CAAC"}
+{"version":3,"file":"html.js","sourceRoot":"","sources":["../../../src/html/html.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AAExC;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,CAAC,MAAM,IAAI,GAAG;;;;;;wDAMoC,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA+B9D,CAAC;AAEF,eAAe,IAAI,CAAC"}

package/dist/esm/version.js

@@ -1,3 +1,3 @@
 // Generated by genversion.
-export const version = '4.1.4';
+export const version = '5.1.0';
 //# sourceMappingURL=version.js.map

package/dist/html/bootstrap.js

@@ -1,4 +1,4 @@
-import { c as createErrorClass, _ as __extends, e as errorContext, E as EMPTY_SUBSCRIPTION, S as Subscription, a as arrRemove, O as Observable, b as __values, d as __spreadArray, f as __read, i as isFunction$1, g as SafeSubscriber, h as EmptyError, o as operate, j as executeSchedule, k as innerFrom, l as createOperatorSubscriber, m as map, n as mergeMap, p as identity, q as isArrayLike, r as isScheduler, s as popScheduler, t as popNumber, u as EMPTY, v as from, w as mergeInternals, x as scanInternals, y as noop, z as popResultSelector, A as reduce, B as lastValueFrom, M as ModuleEventLevel, C as filter, D as BaseModuleProvider, F as catchError, G as of, H as object, I as _instanceof, J as _enum, K as string, L as boolean, N as record, P as union, Q as __rest, R as __assign, T as switchMap, U as observeOn, V as deepmerge, W as BaseConfigBuilder, X as TelemetryExceptionSchema, Y as TelemetryItemNames, Z as TelemetryType, $ as TelemetryEventSchema, a0 as TelemetryMetricSchema, a1 as TelemetryCustomEventSchema, a2 as array, a3 as TelemetryLevel, a4 as enableMSAL } from '../module-CybelWKy.js';
+import { c as createErrorClass, _ as __extends, e as errorContext, E as EMPTY_SUBSCRIPTION, S as Subscription, a as arrRemove, O as Observable, b as __values, d as __spreadArray, f as __read, i as isFunction$1, g as SafeSubscriber, h as EmptyError, o as operate, j as executeSchedule, k as innerFrom, l as createOperatorSubscriber, m as map, n as mergeMap, p as identity, q as isArrayLike, r as isScheduler, s as popScheduler, t as popNumber, u as EMPTY, v as from, w as mergeInternals, x as scanInternals, y as noop, z as popResultSelector, A as reduce, B as lastValueFrom, M as ModuleEventLevel, C as filter, D as BaseModuleProvider, F as catchError, G as of, H as object, I as _instanceof, J as _enum, K as string, L as boolean, N as record, P as union, Q as __rest, R as __assign, T as switchMap, U as observeOn, V as deepmerge, W as BaseConfigBuilder, X as TelemetryExceptionSchema, Y as TelemetryItemNames, Z as TelemetryType, $ as TelemetryEventSchema, a0 as TelemetryMetricSchema, a1 as TelemetryCustomEventSchema, a2 as array, a3 as TelemetryLevel, a4 as enableMSAL } from '../module-DzjJ4gjy.js';
 
 var ObjectUnsubscribedError = createErrorClass(function (_super) {
     return function ObjectUnsubscribedErrorImpl() {
@@ -2993,7 +2993,7 @@ class HttpClientConfigurator {
 }
 
 // Generated by genversion.
-const version$3 = '8.1.1';
+const version$3 = '8.1.2';
 
 /** URL protocols accepted as valid ad-hoc base URIs. */
 const SUPPORTED_PROTOCOLS = ['http:', 'https:', 'ws:', 'wss:'];
@@ -9127,6 +9127,46 @@ class ConsoleAdapter extends BaseTelemetryAdapter {
     }
 }
 
+/**
+ * Acquires a token for the active browser session from a Fusion mock server.
+ *
+ * @param mockServerUrl - Origin of the standalone mock server.
+ * @param scopes - OAuth scopes requested by MSAL.
+ * @param request - Fetch-compatible browser request function.
+ * @returns The issued token, or `null` when the session has no selected user.
+ * @throws When the mock server rejects the request or returns an unsupported response.
+ */
+async function acquireMockServerToken(mockServerUrl, scopes, request = globalThis.fetch) {
+    const response = await request(new URL('/@fusion-mock/auth/token', mockServerUrl), {
+        method: 'POST',
+        credentials: 'include',
+        headers: { 'content-type': 'application/json' },
+        body: JSON.stringify({ scopes }),
+    });
+    // Surface protocol and configuration failures instead of falling back to another identity.
+    if (!response.ok) {
+        throw new Error(`Mock auth token acquisition failed with status ${response.status}`);
+    }
+    const resolution = await response.json();
+    // A missing persona deliberately restores the MSAL mock's built-in identity.
+    if (typeof resolution === 'object' &&
+        resolution !== null &&
+        'status' in resolution &&
+        resolution.status === 'missing') {
+        return null;
+    }
+    // Accept only the documented issued-token response shape.
+    if (typeof resolution === 'object' &&
+        resolution !== null &&
+        'status' in resolution &&
+        resolution.status === 'issued' &&
+        'token' in resolution &&
+        typeof resolution.token === 'string') {
+        return resolution.token;
+    }
+    throw new Error('Mock auth token acquisition returned an unsupported status');
+}
+
 /**
  * Builds the portal template entrypoint URL used by the SPA bootstrap loader.
  *
@@ -9362,7 +9402,7 @@ async function registerServiceWorker(framework) {
 }
 
 // Generated by genversion.
-const version = '4.1.4';
+const version = '5.1.0';
 
 // Allow dynamic import without vite
 const importWithoutVite = (path) => import(/* @vite-ignore */ path);
@@ -9382,13 +9422,13 @@ enableServiceDiscovery(configurator, async (builder) => {
 });
 // Avoid interactive Entra ID authentication when the SPA runs in CI or Playwright.
 if (isEnabledEnvValue(import.meta.env.FUSION_SPA_MSAL_MOCK)) {
-    const { enableMsalMock } = await import('../index-8TS-eku8.js');
-    const mockToken = import.meta.env.FUSION_SPA_MSAL_MOCK_TOKEN;
+    const { enableMsalMock } = await import('../index-Df9EZ6lh.js');
+    const mockServerUrl = import.meta.env.FUSION_SPA_MSAL_MOCK_SERVER_URL;
     enableMsalMock(configurator, (builder) => {
-        // Preserve the mock client's default identity when no backend-specific token is configured.
-        if (!mockToken)
-            return;
-        builder.setToken(mockToken);
+        // The SPA owns the HTTP adapter; MSAL owns applying the returned token and account.
+        if (mockServerUrl) {
+            builder.setAcquireToken(({ scopes }) => acquireMockServerToken(mockServerUrl, scopes));
+        }
     });
 }
 else {