@memberjunction/ng-auth-services 2.129.0 → 2.130.0

package/dist/lib/providers/mjexplorer-auth0-provider.service.d.ts

@@ -1,24 +1,32 @@
 import { MJAuthBase } from '../mjexplorer-auth-base.service';
-import { AuthService, User, AuthGuard, Auth0ClientFactory, AuthClientConfig } from '@auth0/auth0-angular';
-import { Observable } from 'rxjs';
+import { AuthService, AuthGuard, Auth0ClientFactory, AuthClientConfig } from '@auth0/auth0-angular';
+import { StandardUserInfo, StandardAuthToken, StandardAuthError, TokenRefreshResult } from '../auth-types';
 import * as i0 from "@angular/core";
 export declare function LoadMJAuth0Provider(): void;
+/**
+ * Auth0 authentication provider implementation - v3.0.0
+ *
+ * Implements the abstract methods from MJAuthBase to hide Auth0-specific details.
+ * The key abstraction is that Auth0 stores the JWT in `idTokenClaims.__raw`,
+ * but consumers never need to know this detail.
+ */
 export declare class MJAuth0Provider extends MJAuthBase {
     auth: AuthService;
     static readonly PROVIDER_TYPE = "auth0";
-    type: string;
+    readonly type = "auth0";
     private _initialized;
     /**
      * Factory function to provide Angular dependencies required by Auth0
      * Stored as a static property for the factory to access without instantiation
      */
-    static angularProviderFactory: (environment: any) => (typeof AuthService | typeof AuthGuard | {
+    static angularProviderFactory: (environment: Record<string, unknown>) => (typeof AuthService | typeof AuthGuard | {
         provide: import("@angular/core").InjectionToken<import("@auth0/auth0-angular").AuthConfig>;
         useValue: {
-            domain: any;
-            clientId: any;
+            domain: unknown;
+            clientId: unknown;
             authorizationParams: {
                 redirect_uri: string;
+                scope: string;
             };
             cacheLocation: string;
             useRefreshTokens: boolean;
@@ -33,20 +41,56 @@ export declare class MJAuth0Provider extends MJAuthBase {
         useValue?: undefined;
     })[];
     constructor(auth: AuthService);
-    login(options?: any): Observable<void>;
-    private ensureInitialized;
-    logout(): Promise<void>;
-    refresh(): Promise<Observable<any>>;
-    getUser(): Promise<Observable<User | null | undefined>>;
-    isAuthenticated(): Observable<boolean>;
-    getUserClaims(): Promise<Observable<any>>;
-    checkExpiredTokenError(error: string): boolean;
     initialize(): Promise<void>;
-    protected loginInternal(options?: any): Promise<void>;
-    getToken(): Promise<string | null>;
+    protected loginInternal(options?: Record<string, unknown>): Promise<void>;
+    logout(): Promise<void>;
     handleCallback(): Promise<void>;
+    /**
+     * Extract ID token from Auth0's storage
+     *
+     * Auth0 stores the JWT string in idTokenClaims.__raw
+     * This is the key abstraction - consumers never need to know about __raw!
+     */
+    protected extractIdTokenInternal(): Promise<string | null>;
+    /**
+     * Extract complete token info from Auth0
+     *
+     * Maps Auth0's token structure to StandardAuthToken
+     */
+    protected extractTokenInfoInternal(): Promise<StandardAuthToken | null>;
+    /**
+     * Extract user info from Auth0 claims
+     *
+     * Maps Auth0's user object structure to StandardUserInfo
+     */
+    protected extractUserInfoInternal(): Promise<StandardUserInfo | null>;
+    /**
+     * Refresh token using Auth0's silent authentication
+     *
+     * Uses cacheMode: 'off' to bypass cache and force token refresh
+     * With useRefreshTokens: true and offline_access scope, this will use refresh tokens
+     */
+    protected refreshTokenInternal(): Promise<TokenRefreshResult>;
+    /**
+     * Classify Auth0-specific errors into semantic types
+     *
+     * Maps Auth0 error patterns to AuthErrorType enum
+     */
+    protected classifyErrorInternal(error: unknown): StandardAuthError;
+    private ensureInitialized;
+    /**
+     * Map Auth0 User object to StandardUserInfo
+     */
+    private mapAuth0UserToStandard;
+    /**
+     * Get profile picture URL from Auth0
+     *
+     * Auth0 includes the picture URL directly in user claims.
+     * No additional API call needed.
+     */
+    protected getProfilePictureUrlInternal(): Promise<string | null>;
     getRequiredConfig(): string[];
-    validateConfig(_config: any): boolean;
+    validateConfig(_config: Record<string, unknown>): boolean;
     static ɵfac: i0.ɵɵFactoryDeclaration<MJAuth0Provider, never>;
     static ɵprov: i0.ɵɵInjectableDeclaration<MJAuth0Provider>;
 }

package/dist/lib/providers/mjexplorer-auth0-provider.service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"mjexplorer-auth0-provider.service.d.ts","sourceRoot":"","sources":["../../../src/lib/providers/mjexplorer-auth0-provider.service.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,UAAU,EAAE,MAAM,iCAAiC,CAAC;AAC7D,OAAO,EAAE,WAAW,EAAW,IAAI,EAAE,SAAS,EAAyC,kBAAkB,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AAC1J,OAAO,EAAE,UAAU,EAAsB,MAAM,MAAM,CAAC;;AAKtD,wBAAgB,mBAAmB,SAClC;AAED,qBAIa,eAAgB,SAAQ,UAAU;IAoC1B,IAAI,EAAE,WAAW;IAnCpC,MAAM,CAAC,QAAQ,CAAC,aAAa,WAAW;IACxC,IAAI,SAAiC;IACrC,OAAO,CAAC,YAAY,CAAS;IAE7B;;;OAGG;IACH,MAAM,CAAC,sBAAsB,gBAAiB,GAAG;;;;;;;;;;;;;;;;;;;SAyB/C;gBAEiB,IAAI,EAAE,WAAW;IAS3B,KAAK,CAAC,OAAO,CAAC,EAAE,GAAG,GAAG,UAAU,CAAC,IAAI,CAAC;YASjC,iBAAiB;IAMlB,MAAM,IAAI,OAAO,CAAC,IAAI,CAAC;IAIvB,OAAO,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;IAmC1C,OAAO,IAAI,OAAO,CAAC,UAAU,CAAC,IAAI,GAAG,IAAI,GAAG,SAAS,CAAC,CAAC;IAIpD,eAAe,IAAI,UAAU,CAAC,OAAO,CAAC;IAMzC,aAAa,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;IAe/C,sBAAsB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO;IAKxC,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC;cAcjB,aAAa,CAAC,OAAO,CAAC,EAAE,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC;IAIrD,QAAQ,IAAI,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAUlC,cAAc,IAAI,OAAO,CAAC,IAAI,CAAC;IAKrC,iBAAiB,IAAI,MAAM,EAAE;IAI7B,cAAc,CAAC,OAAO,EAAE,GAAG,GAAG,OAAO;yCAtK1B,eAAe;6CAAf,eAAe;CA2K3B"}
+{"version":3,"file":"mjexplorer-auth0-provider.service.d.ts","sourceRoot":"","sources":["../../../src/lib/providers/mjexplorer-auth0-provider.service.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,UAAU,EAAE,MAAM,iCAAiC,CAAC;AAC7D,OAAO,EAAE,WAAW,EAAiB,SAAS,EAAyC,kBAAkB,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AAI1J,OAAO,EACL,gBAAgB,EAChB,iBAAiB,EACjB,iBAAiB,EAEjB,kBAAkB,EACnB,MAAM,eAAe,CAAC;;AAGvB,wBAAgB,mBAAmB,SAClC;AAED;;;;;;GAMG;AACH,qBAIa,eAAgB,SAAQ,UAAU;IAqC1B,IAAI,EAAE,WAAW;IApCpC,MAAM,CAAC,QAAQ,CAAC,aAAa,WAAW;IACxC,QAAQ,CAAC,IAAI,WAAiC;IAC9C,OAAO,CAAC,YAAY,CAAS;IAE7B;;;OAGG;IACH,MAAM,CAAC,sBAAsB,gBAAiB,OAAO,MAAM,EAAE,OAAO,CAAC;;;;;;;;;;;;;;;;;;;;SA0BnE;gBAEiB,IAAI,EAAE,WAAW;IAY9B,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC;cA0CjB,aAAa,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;IAKzE,MAAM,IAAI,OAAO,CAAC,IAAI,CAAC;IAIvB,cAAc,IAAI,OAAO,CAAC,IAAI,CAAC;IASrC;;;;;OAKG;cACa,sBAAsB,IAAI,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAWhE;;;;OAIG;cACa,wBAAwB,IAAI,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC;IAuB7E;;;;OAIG;cACa,uBAAuB,IAAI,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC;IAc3E;;;;;OAKG;cACa,oBAAoB,IAAI,OAAO,CAAC,kBAAkB,CAAC;IA6CnE;;;;OAIG;IACH,SAAS,CAAC,qBAAqB,CAAC,KAAK,EAAE,OAAO,GAAG,iBAAiB;YAgEpD,iBAAiB;IAM/B;;OAEG;IACH,OAAO,CAAC,sBAAsB;IAc9B;;;;;OAKG;cACa,4BAA4B,IAAI,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAc7D,iBAAiB,IAAI,MAAM,EAAE;IAI7B,cAAc,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO;yCApVvD,eAAe;6CAAf,eAAe;CAwV3B"}

package/dist/lib/providers/mjexplorer-auth0-provider.service.js

@@ -9,12 +9,21 @@ import { Injectable } from '@angular/core';
 import { RegisterClass } from '@memberjunction/global';
 import { MJAuthBase } from '../mjexplorer-auth-base.service';
 import { AuthService, AuthGuard, AuthConfigService, Auth0ClientService, Auth0ClientFactory, AuthClientConfig } from '@auth0/auth0-angular';
-import { of, firstValueFrom } from 'rxjs';
+import { firstValueFrom } from 'rxjs';
+import { take, filter } from 'rxjs/operators';
+import { AuthErrorType } from '../auth-types';
 import * as i0 from "@angular/core";
 import * as i1 from "@auth0/auth0-angular";
 // Prevent tree-shaking by explicitly referencing the class
 export function LoadMJAuth0Provider() {
 }
+/**
+ * Auth0 authentication provider implementation - v3.0.0
+ *
+ * Implements the abstract methods from MJAuthBase to hide Auth0-specific details.
+ * The key abstraction is that Auth0 stores the JWT in `idTokenClaims.__raw`,
+ * but consumers never need to know this detail.
+ */
 let MJAuth0Provider = class MJAuth0Provider extends MJAuthBase {
     static { MJAuth0Provider_1 = this; }
     auth;
@@ -31,10 +40,11 @@ let MJAuth0Provider = class MJAuth0Provider extends MJAuthBase {
         {
             provide: AuthConfigService,
             useValue: {
-                domain: environment.AUTH0_DOMAIN,
-                clientId: environment.AUTH0_CLIENTID,
+                domain: environment['AUTH0_DOMAIN'],
+                clientId: environment['AUTH0_CLIENTID'],
                 authorizationParams: {
                     redirect_uri: window.location.origin,
+                    scope: 'openid profile email offline_access',
                     // No audience parameter - uses ID tokens (matches pre-refactor behavior)
                     // ID tokens have aud=clientId by default and contain user claims
                 },
@@ -58,109 +68,268 @@ let MJAuth0Provider = class MJAuth0Provider extends MJAuthBase {
         };
         super(config);
         this.auth = auth;
-        // Defer subscription to avoid blocking app startup
     }
-    login(options) {
-        // Ensure initialized before login
-        this.ensureInitialized();
-        // Auth0's loginWithRedirect executes immediately
-        this.auth.loginWithRedirect(options);
-        // Return an observable for backward compatibility
-        return of(void 0);
-    }
-    async ensureInitialized() {
-        if (!this._initialized) {
-            await this.initialize();
+    // ============================================================================
+    // LIFECYCLE METHODS
+    // ============================================================================
+    async initialize() {
+        if (this._initialized) {
+            return;
         }
+        // CRITICAL: Wait for Auth0 SDK to process any redirect callback
+        // The SDK handles this internally and updates isLoading$ when done
+        await firstValueFrom(this.auth.isLoading$.pipe(filter(loading => !loading), take(1)));
+        // Get current authentication state
+        const isAuthenticated = await firstValueFrom(this.auth.isAuthenticated$);
+        // CRITICAL: Get current user BEFORE setting up subscriptions
+        // This ensures userInfo$ has a value before app.component.ts subscribes
+        if (isAuthenticated) {
+            const user = await firstValueFrom(this.auth.user$);
+            if (user) {
+                const userInfo = this.mapAuth0UserToStandard(user);
+                this.updateUserInfo(userInfo);
+            }
+        }
+        // Subscribe to authentication state and user info for future changes
+        this.auth.isAuthenticated$.subscribe((loggedIn) => {
+            this.updateAuthState(loggedIn);
+        });
+        this.auth.user$.subscribe((user) => {
+            if (user) {
+                const userInfo = this.mapAuth0UserToStandard(user);
+                this.updateUserInfo(userInfo);
+            }
+            else {
+                this.updateUserInfo(null);
+            }
+        });
+        this._initialized = true;
+    }
+    async loginInternal(options) {
+        await this.ensureInitialized();
+        this.auth.loginWithRedirect(options);
     }
     async logout() {
         this.auth.logout({ logoutParams: { returnTo: document.location.origin } });
     }
-    async refresh() {
+    async handleCallback() {
+        // Auth0 Angular SDK handles callbacks internally via interceptors
+        // This method exists for interface compatibility
+    }
+    // ============================================================================
+    // ABSTRACT METHOD IMPLEMENTATIONS (v3.0.0)
+    // ============================================================================
+    /**
+     * Extract ID token from Auth0's storage
+     *
+     * Auth0 stores the JWT string in idTokenClaims.__raw
+     * This is the key abstraction - consumers never need to know about __raw!
+     */
+    async extractIdTokenInternal() {
+        try {
+            const claims = await firstValueFrom(this.auth.idTokenClaims$);
+            // Auth0-specific detail: JWT is in __raw property
+            return claims?.__raw || null;
+        }
+        catch (error) {
+            console.error('[Auth0] Error extracting ID token:', error);
+            return null;
+        }
+    }
+    /**
+     * Extract complete token info from Auth0
+     *
+     * Maps Auth0's token structure to StandardAuthToken
+     */
+    async extractTokenInfoInternal() {
+        try {
+            const claims = await firstValueFrom(this.auth.idTokenClaims$);
+            if (!claims) {
+                return null;
+            }
+            const idToken = claims.__raw;
+            if (!idToken) {
+                return null;
+            }
+            return {
+                idToken,
+                expiresAt: claims.exp ? claims.exp * 1000 : 0, // Convert to milliseconds
+                scopes: claims.scope ? claims.scope.split(' ') : undefined
+            };
+        }
+        catch (error) {
+            console.error('[Auth0] Error extracting token info:', error);
+            return null;
+        }
+    }
+    /**
+     * Extract user info from Auth0 claims
+     *
+     * Maps Auth0's user object structure to StandardUserInfo
+     */
+    async extractUserInfoInternal() {
+        try {
+            const user = await firstValueFrom(this.auth.user$);
+            if (!user) {
+                return null;
+            }
+            return this.mapAuth0UserToStandard(user);
+        }
+        catch (error) {
+            console.error('[Auth0] Error extracting user info:', error);
+            return null;
+        }
+    }
+    /**
+     * Refresh token using Auth0's silent authentication
+     *
+     * Uses cacheMode: 'off' to bypass cache and force token refresh
+     * With useRefreshTokens: true and offline_access scope, this will use refresh tokens
+     */
+    async refreshTokenInternal() {
         try {
-            console.log('[Auth0] refresh() - Attempting to refresh session...');
-            // Force token refresh using refresh tokens (if available) or silent auth
-            // ignoreCache forces fetching new tokens instead of returning cached ones
+            console.log('[Auth0] Attempting to refresh token...');
+            // Force token refresh by bypassing cache
+            // With useRefreshTokens: true and offline_access scope, this will use refresh tokens
             await firstValueFrom(this.auth.getAccessTokenSilently({
-                cacheMode: 'off',
-                authorizationParams: {
-                    ignoreCache: true
-                }
+                cacheMode: 'off'
             }));
-            console.log('[Auth0] refresh() - getAccessTokenSilently completed');
-            // Small delay to ensure Auth0 SDK has updated idTokenClaims$ observable
+            // Small delay to ensure Auth0 SDK has updated observables
             await new Promise(resolve => setTimeout(resolve, 100));
-            // Get fresh ID token claims after session refresh
-            const freshClaims = await firstValueFrom(this.auth.idTokenClaims$);
-            console.log('[Auth0] refresh() - Got fresh ID token', {
-                exp: freshClaims?.exp,
-                expiryDate: freshClaims?.exp ? new Date(freshClaims.exp * 1000).toISOString() : 'N/A'
+            // Extract fresh token info from updated observables
+            const token = await this.extractTokenInfoInternal();
+            if (!token) {
+                return {
+                    success: false,
+                    error: {
+                        type: AuthErrorType.NO_ACTIVE_SESSION,
+                        message: 'Token refresh succeeded but could not extract token info',
+                        userMessage: 'Session refresh failed. Please log in again.'
+                    }
+                };
+            }
+            console.log('[Auth0] Token refresh successful', {
+                expiresAt: new Date(token.expiresAt).toISOString()
             });
-            // Return the fresh claims
-            return of(freshClaims);
+            return {
+                success: true,
+                token
+            };
         }
         catch (error) {
-            console.error('[Auth0] refresh() - Session refresh failed:', error);
-            // Re-throw to trigger re-login
-            throw error;
+            console.error('[Auth0] Token refresh failed:', error);
+            return {
+                success: false,
+                error: this.classifyErrorInternal(error)
+            };
         }
     }
-    async getUser() {
-        return this.auth.user$;
-    }
-    isAuthenticated() {
-        // Don't initialize just for checking auth state
-        // Auth0 SDK handles this internally
-        return this.auth.isAuthenticated$;
-    }
-    async getUserClaims() {
-        await this.ensureInitialized();
-        console.log('[Auth0] getUserClaims: Getting ID token claims...');
-        // Get ID token claims (matches pre-refactor behavior)
-        // These always contain user information
-        const idTokenClaims = await firstValueFrom(this.auth.idTokenClaims$);
-        console.log('[Auth0] Got ID token claims');
-        // Return claims with __raw containing the JWT string
-        return of(idTokenClaims);
-    }
-    checkExpiredTokenError(error) {
-        return error?.includes('jwt expired');
+    /**
+     * Classify Auth0-specific errors into semantic types
+     *
+     * Maps Auth0 error patterns to AuthErrorType enum
+     */
+    classifyErrorInternal(error) {
+        const errorObj = error;
+        const message = errorObj?.['message'] || 'Unknown error';
+        const errorType = errorObj?.['error'] || '';
+        // Check for specific Auth0 error patterns
+        if (message.includes('jwt expired') || message.includes('token expired')) {
+            return {
+                type: AuthErrorType.TOKEN_EXPIRED,
+                message,
+                originalError: error,
+                userMessage: 'Your session has expired. Please log in again.'
+            };
+        }
+        if (errorType === 'login_required' || message.includes('login_required')) {
+            return {
+                type: AuthErrorType.NO_ACTIVE_SESSION,
+                message,
+                originalError: error,
+                userMessage: 'You need to log in to continue.'
+            };
+        }
+        if (errorType === 'consent_required' || message.includes('consent_required')) {
+            return {
+                type: AuthErrorType.INTERACTION_REQUIRED,
+                message,
+                originalError: error,
+                userMessage: 'Additional permissions are required. Please log in again.'
+            };
+        }
+        if (message.includes('user closed') || message.includes('cancelled')) {
+            return {
+                type: AuthErrorType.USER_CANCELLED,
+                message,
+                originalError: error,
+                userMessage: 'Login was cancelled.'
+            };
+        }
+        if (message.includes('network') || message.includes('fetch')) {
+            return {
+                type: AuthErrorType.NETWORK_ERROR,
+                message,
+                originalError: error,
+                userMessage: 'Network error. Please check your connection and try again.'
+            };
+        }
+        // Default to unknown error
+        return {
+            type: AuthErrorType.UNKNOWN_ERROR,
+            message,
+            originalError: error,
+            userMessage: 'An unexpected error occurred. Please try again.'
+        };
     }
-    // Add required methods for the new interface
-    async initialize() {
-        if (this._initialized) {
-            return;
+    // ============================================================================
+    // HELPER METHODS
+    // ============================================================================
+    async ensureInitialized() {
+        if (!this._initialized) {
+            await this.initialize();
         }
-        // Auth0 Angular SDK handles initialization internally
-        // Just subscribe to authentication state once
-        this.auth.isAuthenticated$.subscribe((loggedIn) => {
-            this.updateAuthState(loggedIn);
-        });
-        this._initialized = true;
     }
-    async loginInternal(options) {
-        this.auth.loginWithRedirect(options);
+    /**
+     * Map Auth0 User object to StandardUserInfo
+     */
+    mapAuth0UserToStandard(user) {
+        return {
+            id: user.sub || '',
+            email: user.email || '',
+            name: user.name || '',
+            givenName: user.given_name,
+            familyName: user.family_name,
+            preferredUsername: user.nickname,
+            pictureUrl: user.picture,
+            locale: user.locale,
+            emailVerified: user.email_verified
+        };
     }
-    async getToken() {
+    /**
+     * Get profile picture URL from Auth0
+     *
+     * Auth0 includes the picture URL directly in user claims.
+     * No additional API call needed.
+     */
+    async getProfilePictureUrlInternal() {
         try {
-            const token = await firstValueFrom(this.auth.getAccessTokenSilently());
-            return token || null;
+            const user = await firstValueFrom(this.auth.user$);
+            return user?.picture || null;
         }
         catch (error) {
-            console.error('Error getting Auth0 token:', error);
+            console.error('[Auth0] Error getting profile picture:', error);
             return null;
         }
     }
-    async handleCallback() {
-        // Auth0 Angular SDK handles callbacks internally
-        // This method is here for interface compatibility
-    }
+    // ============================================================================
+    // CONFIGURATION
+    // ============================================================================
     getRequiredConfig() {
         return ['clientId', 'domain'];
     }
     validateConfig(_config) {
         // Auth0 configuration is handled by Angular module providers
-        // Prefix with underscore to indicate intentionally unused
         return true;
     }
     static ɵfac = function MJAuth0Provider_Factory(t) { return new (t || MJAuth0Provider)(i0.ɵɵinject(i1.AuthService)); };

package/dist/lib/providers/mjexplorer-auth0-provider.service.js.map

@@ -1 +1 @@
-{"version":3,"file":"mjexplorer-auth0-provider.service.js","sourceRoot":"","sources":["../../../src/lib/providers/mjexplorer-auth0-provider.service.ts"],"names":[],"mappings":";;;;;;;AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAC3C,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AACvD,OAAO,EAAE,UAAU,EAAE,MAAM,iCAAiC,CAAC;AAC7D,OAAO,EAAE,WAAW,EAAiB,SAAS,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AAC1J,OAAO,EAAc,EAAE,EAAE,cAAc,EAAE,MAAM,MAAM,CAAC;;;AAItD,2DAA2D;AAC3D,MAAM,UAAU,mBAAmB;AACnC,CAAC;AAMM,IAAM,eAAe,GAArB,MAAM,eAAgB,SAAQ,UAAU;;IAoC1B;IAnCnB,MAAM,CAAU,aAAa,GAAG,OAAO,CAAC;IACxC,IAAI,GAAG,iBAAe,CAAC,aAAa,CAAC;IAC7B,YAAY,GAAG,KAAK,CAAC;IAE7B;;;OAGG;IACH,MAAM,CAAC,sBAAsB,GAAG,CAAC,WAAgB,EAAE,EAAE,CAAC;QACpD,WAAW;QACX,SAAS;QACT;YACE,OAAO,EAAE,iBAAiB;YAC1B,QAAQ,EAAE;gBACR,MAAM,EAAE,WAAW,CAAC,YAAY;gBAChC,QAAQ,EAAE,WAAW,CAAC,cAAc;gBACpC,mBAAmB,EAAE;oBACnB,YAAY,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM;oBACpC,yEAAyE;oBACzE,iEAAiE;iBAClE;gBACD,aAAa,EAAE,cAAc;gBAC7B,mFAAmF;gBACnF,gBAAgB,EAAE,IAAI;gBACtB,kDAAkD;gBAClD,wBAAwB,EAAE,IAAI;aAC/B;SACF;QACD;YACE,OAAO,EAAE,kBAAkB;YAC3B,UAAU,EAAE,kBAAkB,CAAC,YAAY;YAC3C,IAAI,EAAE,CAAC,gBAAgB,CAAC;SACzB;KACF,CAAC;IAEF,YAAmB,IAAiB;QAClC,MAAM,MAAM,GAA8B;YACxC,IAAI,EAAE,iBAAe,CAAC,aAAa;YACnC,IAAI,EAAE,iBAAe,CAAC,aAAa;SACpC,CAAC;QACF,KAAK,CAAC,MAAM,CAAC,CAAC;QALG,SAAI,GAAJ,IAAI,CAAa;QAMlC,mDAAmD;IACrD,CAAC;IAEQ,KAAK,CAAC,OAAa;QAC1B,kCAAkC;QAClC,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACzB,iDAAiD;QACjD,IAAI,CAAC,IAAI,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC;QACrC,kDAAkD;QAClD,OAAO,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC;IACpB,CAAC;IAEO,KAAK,CAAC,iBAAiB;QAC7B,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC;YACvB,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC;QAC1B,CAAC;IACH,CAAC;IAEM,KAAK,CAAC,MAAM;QACjB,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,YAAY,EAAE,EAAE,QAAQ,EAAE,QAAQ,CAAC,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAC7E,CAAC;IAEM,KAAK,CAAC,OAAO;QAClB,IAAI,CAAC;YACH,OAAO,CAAC,GAAG,CAAC,sDAAsD,CAAC,CAAC;YAEpE,yEAAyE;YACzE,0EAA0E;YAC1E,MAAM,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,sBAAsB,CAAC;gBACpD,SAAS,EAAE,KAAK;gBAChB,mBAAmB,EAAE;oBACnB,WAAW,EAAE,IAAI;iBAClB;aACF,CAAC,CAAC,CAAC;YAEJ,OAAO,CAAC,GAAG,CAAC,sDAAsD,CAAC,CAAC;YAEpE,wEAAwE;YACxE,MAAM,IAAI,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC;YAEvD,kDAAkD;YAClD,MAAM,WAAW,GAAG,MAAM,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;YAEnE,OAAO,CAAC,GAAG,CAAC,wCAAwC,EAAE;gBACpD,GAAG,EAAE,WAAW,EAAE,GAAG;gBACrB,UAAU,EAAE,WAAW,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,WAAW,CAAC,GAAG,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,KAAK;aACtF,CAAC,CAAC;YAEH,0BAA0B;YAC1B,OAAO,EAAE,CAAC,WAAW,CAAC,CAAC;QACzB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,KAAK,CAAC,6CAA6C,EAAE,KAAK,CAAC,CAAC;YACpE,+BAA+B;YAC/B,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED,KAAK,CAAC,OAAO;QACX,OAAO,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC;IACzB,CAAC;IAEQ,eAAe;QACtB,gDAAgD;QAChD,oCAAoC;QACpC,OAAO,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC;IACpC,CAAC;IAED,KAAK,CAAC,aAAa;QACjB,MAAM,IAAI,CAAC,iBAAiB,EAAE,CAAC;QAE/B,OAAO,CAAC,GAAG,CAAC,mDAAmD,CAAC,CAAC;QAEjE,sDAAsD;QACtD,wCAAwC;QACxC,MAAM,aAAa,GAAG,MAAM,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QAErE,OAAO,CAAC,GAAG,CAAC,6BAA6B,CAAC,CAAC;QAE3C,qDAAqD;QACrD,OAAO,EAAE,CAAC,aAAa,CAAC,CAAC;IAC3B,CAAC;IAED,sBAAsB,CAAC,KAAa;QAClC,OAAO,KAAK,EAAE,QAAQ,CAAC,aAAa,CAAC,CAAC;IACxC,CAAC;IAED,6CAA6C;IAC7C,KAAK,CAAC,UAAU;QACd,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;YACtB,OAAO;QACT,CAAC;QAED,sDAAsD;QACtD,8CAA8C;QAC9C,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,SAAS,CAAC,CAAC,QAAQ,EAAE,EAAE;YAChD,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC;QACjC,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC;IAC3B,CAAC;IAES,KAAK,CAAC,aAAa,CAAC,OAAa;QACzC,IAAI,CAAC,IAAI,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC;IACvC,CAAC;IAED,KAAK,CAAC,QAAQ;QACZ,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,sBAAsB,EAAE,CAAC,CAAC;YACvE,OAAO,KAAK,IAAI,IAAI,CAAC;QACvB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,KAAK,CAAC,4BAA4B,EAAE,KAAK,CAAC,CAAC;YACnD,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED,KAAK,CAAC,cAAc;QAClB,iDAAiD;QACjD,kDAAkD;IACpD,CAAC;IAED,iBAAiB;QACf,OAAO,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;IAChC,CAAC;IAED,cAAc,CAAC,OAAY;QACzB,6DAA6D;QAC7D,0DAA0D;QAC1D,OAAO,IAAI,CAAC;IACd,CAAC;yEA1KU,eAAe;gEAAf,eAAe,WAAf,eAAe,mBAHd,MAAM;;AAGP,eAAe;IAD3B,aAAa,CAAC,UAAU,EAAE,OAAO,CAAC;GACtB,eAAe,CA2K3B;;iFA3KY,eAAe;cAJ3B,UAAU;eAAC;gBACV,UAAU,EAAE,MAAM;aACnB"}
+{"version":3,"file":"mjexplorer-auth0-provider.service.js","sourceRoot":"","sources":["../../../src/lib/providers/mjexplorer-auth0-provider.service.ts"],"names":[],"mappings":";;;;;;;AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAC3C,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AACvD,OAAO,EAAE,UAAU,EAAE,MAAM,iCAAiC,CAAC;AAC7D,OAAO,EAAE,WAAW,EAAiB,SAAS,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AAC1J,OAAO,EAAkB,cAAc,EAAE,MAAM,MAAM,CAAC;AACtD,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,gBAAgB,CAAC;AAE9C,OAAO,EAIL,aAAa,EAEd,MAAM,eAAe,CAAC;;;AAEvB,2DAA2D;AAC3D,MAAM,UAAU,mBAAmB;AACnC,CAAC;AAED;;;;;;GAMG;AAKI,IAAM,eAAe,GAArB,MAAM,eAAgB,SAAQ,UAAU;;IAqC1B;IApCnB,MAAM,CAAU,aAAa,GAAG,OAAO,CAAC;IAC/B,IAAI,GAAG,iBAAe,CAAC,aAAa,CAAC;IACtC,YAAY,GAAG,KAAK,CAAC;IAE7B;;;OAGG;IACH,MAAM,CAAC,sBAAsB,GAAG,CAAC,WAAoC,EAAE,EAAE,CAAC;QACxE,WAAW;QACX,SAAS;QACT;YACE,OAAO,EAAE,iBAAiB;YAC1B,QAAQ,EAAE;gBACR,MAAM,EAAE,WAAW,CAAC,cAAc,CAAC;gBACnC,QAAQ,EAAE,WAAW,CAAC,gBAAgB,CAAC;gBACvC,mBAAmB,EAAE;oBACnB,YAAY,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM;oBACpC,KAAK,EAAE,qCAAqC;oBAC5C,yEAAyE;oBACzE,iEAAiE;iBAClE;gBACD,aAAa,EAAE,cAAc;gBAC7B,mFAAmF;gBACnF,gBAAgB,EAAE,IAAI;gBACtB,kDAAkD;gBAClD,wBAAwB,EAAE,IAAI;aAC/B;SACF;QACD;YACE,OAAO,EAAE,kBAAkB;YAC3B,UAAU,EAAE,kBAAkB,CAAC,YAAY;YAC3C,IAAI,EAAE,CAAC,gBAAgB,CAAC;SACzB;KACF,CAAC;IAEF,YAAmB,IAAiB;QAClC,MAAM,MAAM,GAA8B;YACxC,IAAI,EAAE,iBAAe,CAAC,aAAa;YACnC,IAAI,EAAE,iBAAe,CAAC,aAAa;SACpC,CAAC;QACF,KAAK,CAAC,MAAM,CAAC,CAAC;QALG,SAAI,GAAJ,IAAI,CAAa;IAMpC,CAAC;IAED,+EAA+E;IAC/E,oBAAoB;IACpB,+EAA+E;IAE/E,KAAK,CAAC,UAAU;QACd,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;YACtB,OAAO;QACT,CAAC;QAED,gEAAgE;QAChE,mEAAmE;QACnE,MAAM,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAC5C,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,EAC3B,IAAI,CAAC,CAAC,CAAC,CACR,CAAC,CAAC;QAEH,mCAAmC;QACnC,MAAM,eAAe,GAAG,MAAM,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;QAEzE,6DAA6D;QAC7D,wEAAwE;QACxE,IAAI,eAAe,EAAE,CAAC;YACpB,MAAM,IAAI,GAAG,MAAM,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACnD,IAAI,IAAI,EAAE,CAAC;gBACT,MAAM,QAAQ,GAAG,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,CAAC;gBACnD,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC;YAChC,CAAC;QACH,CAAC;QAED,qEAAqE;QACrE,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,SAAS,CAAC,CAAC,QAAQ,EAAE,EAAE;YAChD,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC;QACjC,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,IAAI,EAAE,EAAE;YACjC,IAAI,IAAI,EAAE,CAAC;gBACT,MAAM,QAAQ,GAAG,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,CAAC;gBACnD,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC;YAChC,CAAC;iBAAM,CAAC;gBACN,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;YAC5B,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC;IAC3B,CAAC;IAES,KAAK,CAAC,aAAa,CAAC,OAAiC;QAC7D,MAAM,IAAI,CAAC,iBAAiB,EAAE,CAAC;QAC/B,IAAI,CAAC,IAAI,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC;IACvC,CAAC;IAED,KAAK,CAAC,MAAM;QACV,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,YAAY,EAAE,EAAE,QAAQ,EAAE,QAAQ,CAAC,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAC7E,CAAC;IAED,KAAK,CAAC,cAAc;QAClB,kEAAkE;QAClE,iDAAiD;IACnD,CAAC;IAED,+EAA+E;IAC/E,2CAA2C;IAC3C,+EAA+E;IAE/E;;;;;OAKG;IACO,KAAK,CAAC,sBAAsB;QACpC,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;YAC9D,kDAAkD;YAClD,OAAO,MAAM,EAAE,KAAK,IAAI,IAAI,CAAC;QAC/B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,KAAK,CAAC,oCAAoC,EAAE,KAAK,CAAC,CAAC;YAC3D,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED;;;;OAIG;IACO,KAAK,CAAC,wBAAwB;QACtC,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;YAC9D,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,OAAO,IAAI,CAAC;YACd,CAAC;YAED,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC;YAC7B,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,OAAO,IAAI,CAAC;YACd,CAAC;YAED,OAAO;gBACL,OAAO;gBACP,SAAS,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,0BAA0B;gBACzE,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS;aAC3D,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,KAAK,CAAC,sCAAsC,EAAE,KAAK,CAAC,CAAC;YAC7D,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED;;;;OAIG;IACO,KAAK,CAAC,uBAAuB;QACrC,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACnD,IAAI,CAAC,IAAI,EAAE,CAAC;gBACV,OAAO,IAAI,CAAC;YACd,CAAC;YAED,OAAO,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,CAAC;QAC3C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,KAAK,CAAC,qCAAqC,EAAE,KAAK,CAAC,CAAC;YAC5D,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED;;;;;OAKG;IACO,KAAK,CAAC,oBAAoB;QAClC,IAAI,CAAC;YACH,OAAO,CAAC,GAAG,CAAC,wCAAwC,CAAC,CAAC;YAEtD,yCAAyC;YACzC,qFAAqF;YACrF,MAAM,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,sBAAsB,CAAC;gBACpD,SAAS,EAAE,KAAK;aACjB,CAAC,CAAC,CAAC;YAEJ,0DAA0D;YAC1D,MAAM,IAAI,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC;YAEvD,oDAAoD;YACpD,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,wBAAwB,EAAE,CAAC;YAEpD,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,OAAO;oBACL,OAAO,EAAE,KAAK;oBACd,KAAK,EAAE;wBACL,IAAI,EAAE,aAAa,CAAC,iBAAiB;wBACrC,OAAO,EAAE,0DAA0D;wBACnE,WAAW,EAAE,8CAA8C;qBAC5D;iBACF,CAAC;YACJ,CAAC;YAED,OAAO,CAAC,GAAG,CAAC,kCAAkC,EAAE;gBAC9C,SAAS,EAAE,IAAI,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE;aACnD,CAAC,CAAC;YAEH,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,KAAK;aACN,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,KAAK,CAAC,+BAA+B,EAAE,KAAK,CAAC,CAAC;YAEtD,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,IAAI,CAAC,qBAAqB,CAAC,KAAK,CAAC;aACzC,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;;;OAIG;IACO,qBAAqB,CAAC,KAAc;QAC5C,MAAM,QAAQ,GAAG,KAAgC,CAAC;QAClD,MAAM,OAAO,GAAG,QAAQ,EAAE,CAAC,SAAS,CAAW,IAAI,eAAe,CAAC;QACnE,MAAM,SAAS,GAAG,QAAQ,EAAE,CAAC,OAAO,CAAW,IAAI,EAAE,CAAC;QAEtD,0CAA0C;QAC1C,IAAI,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAC,EAAE,CAAC;YACzE,OAAO;gBACL,IAAI,EAAE,aAAa,CAAC,aAAa;gBACjC,OAAO;gBACP,aAAa,EAAE,KAAK;gBACpB,WAAW,EAAE,gDAAgD;aAC9D,CAAC;QACJ,CAAC;QAED,IAAI,SAAS,KAAK,gBAAgB,IAAI,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,CAAC;YACzE,OAAO;gBACL,IAAI,EAAE,aAAa,CAAC,iBAAiB;gBACrC,OAAO;gBACP,aAAa,EAAE,KAAK;gBACpB,WAAW,EAAE,iCAAiC;aAC/C,CAAC;QACJ,CAAC;QAED,IAAI,SAAS,KAAK,kBAAkB,IAAI,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,CAAC;YAC7E,OAAO;gBACL,IAAI,EAAE,aAAa,CAAC,oBAAoB;gBACxC,OAAO;gBACP,aAAa,EAAE,KAAK;gBACpB,WAAW,EAAE,2DAA2D;aACzE,CAAC;QACJ,CAAC;QAED,IAAI,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;YACrE,OAAO;gBACL,IAAI,EAAE,aAAa,CAAC,cAAc;gBAClC,OAAO;gBACP,aAAa,EAAE,KAAK;gBACpB,WAAW,EAAE,sBAAsB;aACpC,CAAC;QACJ,CAAC;QAED,IAAI,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;YAC7D,OAAO;gBACL,IAAI,EAAE,aAAa,CAAC,aAAa;gBACjC,OAAO;gBACP,aAAa,EAAE,KAAK;gBACpB,WAAW,EAAE,4DAA4D;aAC1E,CAAC;QACJ,CAAC;QAED,2BAA2B;QAC3B,OAAO;YACL,IAAI,EAAE,aAAa,CAAC,aAAa;YACjC,OAAO;YACP,aAAa,EAAE,KAAK;YACpB,WAAW,EAAE,iDAAiD;SAC/D,CAAC;IACJ,CAAC;IAED,+EAA+E;IAC/E,iBAAiB;IACjB,+EAA+E;IAEvE,KAAK,CAAC,iBAAiB;QAC7B,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC;YACvB,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC;QAC1B,CAAC;IACH,CAAC;IAED;;OAEG;IACK,sBAAsB,CAAC,IAAU;QACvC,OAAO;YACL,EAAE,EAAE,IAAI,CAAC,GAAG,IAAI,EAAE;YAClB,KAAK,EAAE,IAAI,CAAC,KAAK,IAAI,EAAE;YACvB,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,EAAE;YACrB,SAAS,EAAE,IAAI,CAAC,UAAU;YAC1B,UAAU,EAAE,IAAI,CAAC,WAAW;YAC5B,iBAAiB,EAAE,IAAI,CAAC,QAAQ;YAChC,UAAU,EAAE,IAAI,CAAC,OAAO;YACxB,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,aAAa,EAAE,IAAI,CAAC,cAAc;SACnC,CAAC;IACJ,CAAC;IAED;;;;;OAKG;IACO,KAAK,CAAC,4BAA4B;QAC1C,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACnD,OAAO,IAAI,EAAE,OAAO,IAAI,IAAI,CAAC;QAC/B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,KAAK,CAAC,wCAAwC,EAAE,KAAK,CAAC,CAAC;YAC/D,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED,+EAA+E;IAC/E,gBAAgB;IAChB,+EAA+E;IAEtE,iBAAiB;QACxB,OAAO,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;IAChC,CAAC;IAEQ,cAAc,CAAC,OAAgC;QACtD,6DAA6D;QAC7D,OAAO,IAAI,CAAC;IACd,CAAC;yEAvVU,eAAe;gEAAf,eAAe,WAAf,eAAe,mBAHd,MAAM;;AAGP,eAAe;IAD3B,aAAa,CAAC,UAAU,EAAE,OAAO,CAAC;GACtB,eAAe,CAwV3B;;iFAxVY,eAAe;cAJ3B,UAAU;eAAC;gBACV,UAAU,EAAE,MAAM;aACnB"}

package/dist/lib/providers/mjexplorer-msal-provider.service.d.ts

@@ -1,16 +1,22 @@
 import { OnDestroy } from '@angular/core';
 import { MJAuthBase } from '../mjexplorer-auth-base.service';
-import { Observable } from 'rxjs';
 import { MsalBroadcastService, MsalService, MsalGuard } from '@azure/msal-angular';
-import { AccountInfo } from '@azure/msal-common';
 import { PublicClientApplication, InteractionType } from '@azure/msal-browser';
+import { StandardUserInfo, StandardAuthToken, StandardAuthError, TokenRefreshResult } from '../auth-types';
 import * as i0 from "@angular/core";
 export declare function LoadMJMSALProvider(): void;
+/**
+ * MSAL (Microsoft Authentication Library) provider implementation - v3.0.0
+ *
+ * Implements the abstract methods from MJAuthBase to hide MSAL-specific details.
+ * The key abstraction is that MSAL stores the JWT in AuthenticationResult.idToken,
+ * but consumers never need to know this detail.
+ */
 export declare class MJMSALProvider extends MJAuthBase implements OnDestroy {
     auth: MsalService;
     private msalBroadcastService;
     static readonly PROVIDER_TYPE = "msal";
-    type: string;
+    readonly type = "msal";
     private readonly _destroying$;
     private readonly _initializationCompleted$;
     private _initPromise;
@@ -18,7 +24,7 @@ export declare class MJMSALProvider extends MJAuthBase implements OnDestroy {
      * Factory function to provide Angular dependencies required by MSAL
      * Stored as a static property for the factory to access without instantiation
      */
-    static angularProviderFactory: (environment: any) => (typeof MsalService | typeof MsalBroadcastService | typeof MsalGuard | {
+    static angularProviderFactory: (environment: Record<string, unknown>) => (typeof MsalService | typeof MsalBroadcastService | typeof MsalGuard | {
         provide: import("@angular/core").InjectionToken<string>;
         useValue: PublicClientApplication;
     } | {
@@ -39,22 +45,57 @@ export declare class MJMSALProvider extends MJAuthBase implements OnDestroy {
         };
     })[];
     constructor(auth: MsalService, msalBroadcastService: MsalBroadcastService);
-    private initializeMSAL;
+    initialize(): Promise<void>;
     private _performInitialization;
-    private ensureInitialized;
-    login(options?: any): Observable<void>;
+    protected loginInternal(options?: Record<string, unknown>): Promise<void>;
     logout(): Promise<void>;
-    refresh(): Promise<Observable<any>>;
-    getUser(): Promise<AccountInfo | null>;
-    isAuthenticated(): Observable<boolean>;
-    getUserClaims(): Promise<Observable<any>>;
-    checkExpiredTokenError(error: string): boolean;
-    initialize(): Promise<void>;
-    protected loginInternal(options?: any): Promise<void>;
-    getToken(): Promise<string | null>;
     handleCallback(): Promise<void>;
+    /**
+     * Extract ID token from MSAL's storage
+     *
+     * MSAL stores the JWT in AuthenticationResult.idToken
+     * This is the key abstraction - consumers never need to know about MSAL's structure!
+     */
+    protected extractIdTokenInternal(): Promise<string | null>;
+    /**
+     * Extract complete token info from MSAL
+     *
+     * Maps MSAL's AuthenticationResult to StandardAuthToken
+     */
+    protected extractTokenInfoInternal(): Promise<StandardAuthToken | null>;
+    /**
+     * Extract user info from MSAL account
+     *
+     * Maps MSAL's AccountInfo structure to StandardUserInfo
+     */
+    protected extractUserInfoInternal(): Promise<StandardUserInfo | null>;
+    /**
+     * Refresh token using MSAL's silent token acquisition
+     *
+     * Uses acquireTokenSilent with forceRefresh to get new tokens
+     */
+    protected refreshTokenInternal(): Promise<TokenRefreshResult>;
+    /**
+     * Classify MSAL-specific errors into semantic types
+     *
+     * Maps MSAL error classes to AuthErrorType enum
+     */
+    protected classifyErrorInternal(error: unknown): StandardAuthError;
+    private ensureInitialized;
+    /**
+     * Map MSAL AccountInfo to StandardUserInfo
+     */
+    private mapMSALAccountToStandard;
+    /**
+     * Get profile picture URL from Microsoft Graph API
+     *
+     * MSAL requires fetching the photo from Microsoft Graph.
+     * This is the key advantage of encapsulation - consumers don't need
+     * to know about Graph API, they just call getProfilePictureUrl()!
+     */
+    protected getProfilePictureUrlInternal(): Promise<string | null>;
     getRequiredConfig(): string[];
-    validateConfig(_config: any): boolean;
+    validateConfig(_config: Record<string, unknown>): boolean;
     ngOnDestroy(): void;
     static ɵfac: i0.ɵɵFactoryDeclaration<MJMSALProvider, never>;
     static ɵprov: i0.ɵɵInjectableDeclaration<MJMSALProvider>;

package/dist/lib/providers/mjexplorer-msal-provider.service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"mjexplorer-msal-provider.service.d.ts","sourceRoot":"","sources":["../../../src/lib/providers/mjexplorer-msal-provider.service.ts"],"names":[],"mappings":"AAAA,OAAO,EAAc,SAAS,EAAE,MAAM,eAAe,CAAC;AAEtD,OAAO,EAAE,UAAU,EAAE,MAAM,iCAAiC,CAAC;AAC7D,OAAO,EAAmB,UAAU,EAA2F,MAAM,MAAM,CAAC;AAC5I,OAAO,EAAE,oBAAoB,EAAE,WAAW,EAA6D,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAC9I,OAAO,EAAE,WAAW,EAAwB,MAAM,oBAAoB,CAAC;AACvE,OAAO,EAAsE,uBAAuB,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;;AAKnJ,wBAAgB,kBAAkB,SACjC;AAED,qBAIa,cAAe,SAAQ,UAAW,YAAW,SAAS;IAgD9C,IAAI,EAAE,WAAW;IAAE,OAAO,CAAC,oBAAoB;IA/ClE,MAAM,CAAC,QAAQ,CAAC,aAAa,UAAU;IACvC,IAAI,SAAgC;IAEpC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAuB;IACpD,OAAO,CAAC,QAAQ,CAAC,yBAAyB,CAAuC;IACjF,OAAO,CAAC,YAAY,CAA8B;IAElD;;;OAGG;IACH,MAAM,CAAC,sBAAsB,gBAAiB,GAAG;;;;;;;;;;;;;;;;;;;SAkC/C;gBAEiB,IAAI,EAAE,WAAW,EAAU,oBAAoB,EAAE,oBAAoB;YAU1E,cAAc;YAUd,sBAAsB;YAuCtB,iBAAiB;IAUtB,KAAK,CAAC,OAAO,CAAC,EAAE,GAAG,GAAG,UAAU,CAAC,IAAI,CAAC;IAmBlC,MAAM,IAAI,OAAO,CAAC,IAAI,CAAC;IAOvB,OAAO,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;IAS1C,OAAO,IAAI,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC;IAKnC,eAAe,IAAI,UAAU,CAAC,OAAO,CAAC;IAKzC,aAAa,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;IA+B/C,sBAAsB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO;IAKxC,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC;cAIjB,aAAa,CAAC,OAAO,CAAC,EAAE,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC;IAoBrD,QAAQ,IAAI,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IA8BlC,cAAc,IAAI,OAAO,CAAC,IAAI,CAAC;IAMrC,iBAAiB,IAAI,MAAM,EAAE;IAI7B,cAAc,CAAC,OAAO,EAAE,GAAG,GAAG,OAAO;IAKrC,WAAW,IAAI,IAAI;yCA3QR,cAAc;6CAAd,cAAc;CAyR1B"}
+{"version":3,"file":"mjexplorer-msal-provider.service.d.ts","sourceRoot":"","sources":["../../../src/lib/providers/mjexplorer-msal-provider.service.ts"],"names":[],"mappings":"AAAA,OAAO,EAAc,SAAS,EAAE,MAAM,eAAe,CAAC;AAEtD,OAAO,EAAE,UAAU,EAAE,MAAM,iCAAiC,CAAC;AAE7D,OAAO,EAAE,oBAAoB,EAAE,WAAW,EAA6D,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAE9I,OAAO,EAAsE,uBAAuB,EAAE,eAAe,EAAoB,MAAM,qBAAqB,CAAC;AAGrK,OAAO,EACL,gBAAgB,EAChB,iBAAiB,EACjB,iBAAiB,EAEjB,kBAAkB,EACnB,MAAM,eAAe,CAAC;;AAGvB,wBAAgB,kBAAkB,SACjC;AAED;;;;;;GAMG;AACH,qBAIa,cAAe,SAAQ,UAAW,YAAW,SAAS;IAgD9C,IAAI,EAAE,WAAW;IAAE,OAAO,CAAC,oBAAoB;IA/ClE,MAAM,CAAC,QAAQ,CAAC,aAAa,UAAU;IACvC,QAAQ,CAAC,IAAI,UAAgC;IAE7C,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAuB;IACpD,OAAO,CAAC,QAAQ,CAAC,yBAAyB,CAAuC;IACjF,OAAO,CAAC,YAAY,CAA8B;IAElD;;;OAGG;IACH,MAAM,CAAC,sBAAsB,gBAAiB,OAAO,MAAM,EAAE,OAAO,CAAC;;;;;;;;;;;;;;;;;;;SAkCnE;gBAEiB,IAAI,EAAE,WAAW,EAAU,oBAAoB,EAAE,oBAAoB;IAYlF,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC;YASnB,sBAAsB;cAwDpB,aAAa,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;IAqBzE,MAAM,IAAI,OAAO,CAAC,IAAI,CAAC;IAOvB,cAAc,IAAI,OAAO,CAAC,IAAI,CAAC;IAUrC;;;;;OAKG;cACa,sBAAsB,IAAI,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IA+BhE;;;;OAIG;cACa,wBAAwB,IAAI,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC;IA4C7E;;;;OAIG;cACa,uBAAuB,IAAI,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC;IAgB3E;;;;OAIG;cACa,oBAAoB,IAAI,OAAO,CAAC,kBAAkB,CAAC;IAuDnE;;;;OAIG;IACH,SAAS,CAAC,qBAAqB,CAAC,KAAK,EAAE,OAAO,GAAG,iBAAiB;YA2EpD,iBAAiB;IAQ/B;;OAEG;IACH,OAAO,CAAC,wBAAwB;IAYhC;;;;;;OAMG;cACa,4BAA4B,IAAI,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAyC7D,iBAAiB,IAAI,MAAM,EAAE;IAI7B,cAAc,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO;IASlE,WAAW,IAAI,IAAI;yCA9eR,cAAc;6CAAd,cAAc;CAof1B"}