@memberjunction/ng-auth-services 2.129.0 → 2.130.0

package/dist/lib/providers/mjexplorer-okta-provider.service.d.ts

@@ -1,61 +1,86 @@
-import { Observable } from 'rxjs';
 import { MJAuthBase } from '../mjexplorer-auth-base.service';
 import { OktaAuthOptions } from '@okta/okta-auth-js';
+import { StandardUserInfo, StandardAuthToken, StandardAuthError, TokenRefreshResult } from '../auth-types';
 import * as i0 from "@angular/core";
 export declare function LoadMJOktaProvider(): void;
 /**
- * Okta authentication provider for MemberJunction Explorer
+ * Okta authentication provider implementation - v3.0.0
+ *
+ * Implements the abstract methods from MJAuthBase to hide Okta-specific details.
+ * The key abstraction is that Okta stores the JWT in IDToken.idToken,
+ * but consumers never need to know this detail.
  */
 export declare class MJOktaProvider extends MJAuthBase {
     private oktaConfig;
     static readonly PROVIDER_TYPE = "okta";
-    type: string;
+    readonly type = "okta";
     private oktaAuth;
-    private userClaims$;
     private isRefreshing;
     /**
      * Factory function to provide Angular dependencies required by Okta
      * Stored as a static property for the factory to access without instantiation
      */
-    static angularProviderFactory: (environment: any) => {
+    static angularProviderFactory: (environment: Record<string, unknown>) => {
         provide: string;
         useValue: {
-            clientId: any;
-            domain: any;
-            issuer: any;
-            redirectUri: any;
-            scopes: any;
+            clientId: unknown;
+            domain: unknown;
+            issuer: {};
+            redirectUri: {};
+            scopes: {};
         };
     }[];
     constructor(oktaConfig: OktaAuthOptions & {
         domain?: string;
     });
-    private initializeOkta;
-    login(options?: any): Observable<void>;
-    private loginAsync;
-    logout(): Promise<any>;
-    refresh(): Promise<Observable<any>>;
-    isAuthenticated(): Observable<boolean>;
-    getUser(): Promise<any>;
-    getUserClaims(): Promise<Observable<any>>;
-    checkExpiredTokenError(error: string): boolean;
-    /**
-     * Handle callback after redirect from Okta
-     */
+    initialize(): Promise<void>;
+    protected loginInternal(options?: Record<string, unknown>): Promise<void>;
+    logout(): Promise<void>;
     handleCallback(): Promise<void>;
     /**
-     * Get the access token for API calls
+     * Extract ID token from Okta's storage
+     *
+     * Okta stores the JWT in IDToken.idToken
+     * This is the key abstraction - consumers never need to know about Okta's structure!
      */
-    getAccessToken(): Promise<string | undefined>;
+    protected extractIdTokenInternal(): Promise<string | null>;
     /**
-     * Get the ID token
+     * Extract complete token info from Okta
+     *
+     * Maps Okta's token structure to StandardAuthToken
      */
-    getIdToken(): Promise<string | undefined>;
-    initialize(): Promise<void>;
-    protected loginInternal(options?: any): Promise<void>;
-    getToken(): Promise<string | null>;
+    protected extractTokenInfoInternal(): Promise<StandardAuthToken | null>;
+    /**
+     * Extract user info from Okta claims
+     *
+     * Maps Okta's IDToken structure to StandardUserInfo
+     */
+    protected extractUserInfoInternal(): Promise<StandardUserInfo | null>;
+    /**
+     * Refresh token using Okta's token renewal
+     *
+     * Uses renewTokens() to get new tokens silently
+     */
+    protected refreshTokenInternal(): Promise<TokenRefreshResult>;
+    /**
+     * Classify Okta-specific errors into semantic types
+     *
+     * Maps Okta error patterns to AuthErrorType enum
+     */
+    protected classifyErrorInternal(error: unknown): StandardAuthError;
+    /**
+     * Map Okta IDToken to StandardUserInfo
+     */
+    private mapOktaTokenToStandard;
+    /**
+     * Get profile picture URL from Okta
+     *
+     * Okta may include picture URL in user claims, similar to Auth0.
+     * If available, we can also fetch from Okta's /userinfo endpoint.
+     */
+    protected getProfilePictureUrlInternal(): Promise<string | null>;
     getRequiredConfig(): string[];
-    validateConfig(_config: any): boolean;
+    validateConfig(config: Record<string, unknown>): boolean;
     static ɵfac: i0.ɵɵFactoryDeclaration<MJOktaProvider, never>;
     static ɵprov: i0.ɵɵInjectableDeclaration<MJOktaProvider>;
 }

package/dist/lib/providers/mjexplorer-okta-provider.service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"mjexplorer-okta-provider.service.d.ts","sourceRoot":"","sources":["../../../src/lib/providers/mjexplorer-okta-provider.service.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,UAAU,EAAyB,MAAM,MAAM,CAAC;AACzD,OAAO,EAAE,UAAU,EAAE,MAAM,iCAAiC,CAAC;AAE7D,OAAiB,EAAE,eAAe,EAAwB,MAAM,oBAAoB,CAAC;;AAGrF,wBAAgB,kBAAkB,SACjC;AAED;;GAEG;AACH,qBAIa,cAAe,SAAQ,UAAU;IAwBV,OAAO,CAAC,UAAU;IAvBpD,MAAM,CAAC,QAAQ,CAAC,aAAa,UAAU;IACvC,IAAI,SAAgC;IACpC,OAAO,CAAC,QAAQ,CAAW;IAC3B,OAAO,CAAC,WAAW,CAAkC;IACrD,OAAO,CAAC,YAAY,CAAS;IAE7B;;;OAGG;IACH,MAAM,CAAC,sBAAsB,gBAAiB,GAAG;;;;;;;;;QAW/C;gBAEwC,UAAU,EAAE,eAAe,GAAG;QAAE,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE;YAuC7E,cAAc;IAmFnB,KAAK,CAAC,OAAO,CAAC,EAAE,GAAG,GAAG,UAAU,CAAC,IAAI,CAAC;YAKjC,UAAU;IAmBlB,MAAM,IAAI,OAAO,CAAC,GAAG,CAAC;IAmCtB,OAAO,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;IA8EhC,eAAe,IAAI,UAAU,CAAC,OAAO,CAAC;IAMzC,OAAO,IAAI,OAAO,CAAC,GAAG,CAAC;IAgBvB,aAAa,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;IAyB/C,sBAAsB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO;IAY9C;;OAEG;IACG,cAAc,IAAI,OAAO,CAAC,IAAI,CAAC;IAqBrC;;OAEG;IACG,cAAc,IAAI,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC;IAUnD;;OAEG;IACG,UAAU,IAAI,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC;IAWzC,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC;cA4BjB,aAAa,CAAC,OAAO,CAAC,EAAE,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC;IAIrD,QAAQ,IAAI,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAOxC,iBAAiB,IAAI,MAAM,EAAE;IAI7B,cAAc,CAAC,OAAO,EAAE,GAAG,GAAG,OAAO;yCApb1B,cAAc;6CAAd,cAAc;CAwb1B"}
+{"version":3,"file":"mjexplorer-okta-provider.service.d.ts","sourceRoot":"","sources":["../../../src/lib/providers/mjexplorer-okta-provider.service.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,UAAU,EAAE,MAAM,iCAAiC,CAAC;AAE7D,OAAiB,EAAE,eAAe,EAAwB,MAAM,oBAAoB,CAAC;AACrF,OAAO,EACL,gBAAgB,EAChB,iBAAiB,EACjB,iBAAiB,EAEjB,kBAAkB,EACnB,MAAM,eAAe,CAAC;;AAGvB,wBAAgB,kBAAkB,SACjC;AAED;;;;;;GAMG;AACH,qBAIa,cAAe,SAAQ,UAAU;IAuBV,OAAO,CAAC,UAAU;IAtBpD,MAAM,CAAC,QAAQ,CAAC,aAAa,UAAU;IACvC,QAAQ,CAAC,IAAI,UAAgC;IAC7C,OAAO,CAAC,QAAQ,CAAW;IAC3B,OAAO,CAAC,YAAY,CAAS;IAE7B;;;OAGG;IACH,MAAM,CAAC,sBAAsB,gBAAiB,OAAO,MAAM,EAAE,OAAO,CAAC;;;;;;;;;QAWnE;gBAEwC,UAAU,EAAE,eAAe,GAAG;QAAE,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE;IAyCrF,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC;cA2DjB,aAAa,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;IAmBzE,MAAM,IAAI,OAAO,CAAC,IAAI,CAAC;IAuBvB,cAAc,IAAI,OAAO,CAAC,IAAI,CAAC;IAwBrC;;;;;OAKG;cACa,sBAAsB,IAAI,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAWhE;;;;OAIG;cACa,wBAAwB,IAAI,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC;IAqB7E;;;;OAIG;cACa,uBAAuB,IAAI,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC;IAc3E;;;;OAIG;cACa,oBAAoB,IAAI,OAAO,CAAC,kBAAkB,CAAC;IAwFnE;;;;OAIG;IACH,SAAS,CAAC,qBAAqB,CAAC,KAAK,EAAE,OAAO,GAAG,iBAAiB;IAgElE;;OAEG;IACH,OAAO,CAAC,sBAAsB;IAc9B;;;;;OAKG;cACa,4BAA4B,IAAI,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IA0B7D,iBAAiB,IAAI,MAAM,EAAE;IAI7B,cAAc,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO;yCAldtD,cAAc;6CAAd,cAAc;CAqd1B"}