@memberjunction/ng-auth-services 2.90.0 → 2.91.0

package/dist/lib/mjexplorer-auth-base.service.js

@@ -1,18 +1,119 @@
 import { Injectable } from '@angular/core';
+import { BehaviorSubject, from } from 'rxjs';
 import * as i0 from "@angular/core";
+/**
+ * Base class for Angular authentication providers
+ * Provides common functionality and enforces the provider interface
+ */
 export class MJAuthBase {
-    authenticated = false;
-    constructor() { }
-    setAuthenticated(value) {
-        this.authenticated = value;
+    config;
+    isAuthenticated$ = new BehaviorSubject(false);
+    userProfile$ = new BehaviorSubject(null);
+    userEmail$ = new BehaviorSubject('');
+    constructor(config) {
+        this.config = config;
     }
-    static ɵfac = function MJAuthBase_Factory(t) { return new (t || MJAuthBase)(); };
-    static ɵprov = /*@__PURE__*/ i0.ɵɵdefineInjectable({ token: MJAuthBase, factory: MJAuthBase.ɵfac, providedIn: 'root' });
+    /**
+     * Login the user - public API that returns Observable for backward compatibility
+     */
+    login(options) {
+        return from(this.loginInternal(options));
+    }
+    /**
+     * Check if user is authenticated
+     */
+    isAuthenticated() {
+        return this.isAuthenticated$.asObservable();
+    }
+    /**
+     * Get user profile information
+     */
+    getUserProfile() {
+        return this.userProfile$.asObservable();
+    }
+    /**
+     * Get user email
+     */
+    getUserEmail() {
+        return this.userEmail$.asObservable();
+    }
+    /**
+     * Get provider-specific configuration requirements
+     * Override to specify required config fields
+     */
+    getRequiredConfig() {
+        return ['clientId'];
+    }
+    /**
+     * Validate provider configuration
+     * Override to add provider-specific validation
+     */
+    validateConfig(config) {
+        const requiredFields = this.getRequiredConfig();
+        return requiredFields.every(field => config[field] !== undefined && config[field] !== '');
+    }
+    /**
+     * Helper method to update authentication state
+     */
+    updateAuthState(isAuthenticated) {
+        this.isAuthenticated$.next(isAuthenticated);
+    }
+    /**
+     * Helper method to update user profile
+     */
+    updateUserProfile(profile) {
+        this.userProfile$.next(profile);
+        if (profile?.email) {
+            this.userEmail$.next(profile.email);
+        }
+    }
+    // Backward compatibility methods for existing code
+    /**
+     * Legacy property for authentication state
+     */
+    get authenticated() {
+        return this.isAuthenticated$.value;
+    }
+    /**
+     * Legacy setter for authentication state
+     * Used by MJExplorer for backward compatibility
+     */
+    set authenticated(value) {
+        this.updateAuthState(value);
+    }
+    /**
+     * Legacy method to get user
+     */
+    async getUser() {
+        return this.userProfile$.value;
+    }
+    /**
+     * Legacy method to get user claims
+     */
+    async getUserClaims() {
+        return this.userProfile$.asObservable();
+    }
+    /**
+     * Legacy method to check expired token error
+     */
+    checkExpiredTokenError(error) {
+        // Check for common token expiration error messages
+        return error?.toLowerCase().includes('expired') ||
+            error?.toLowerCase().includes('invalid token') ||
+            error?.toLowerCase().includes('unauthorized');
+    }
+    /**
+     * Legacy refresh method
+     */
+    async refresh() {
+        // Try to get a new token
+        await this.getToken();
+        return this.userProfile$.asObservable();
+    }
+    static ɵfac = function MJAuthBase_Factory(t) { i0.ɵɵinvalidFactory(); };
+    static ɵprov = /*@__PURE__*/ i0.ɵɵdefineInjectable({ token: MJAuthBase, factory: MJAuthBase.ɵfac });
 }
 (() => { (typeof ngDevMode === "undefined" || ngDevMode) && i0.ɵsetClassMetadata(MJAuthBase, [{
-        type: Injectable,
-        args: [{
-                providedIn: 'root'
-            }]
-    }], () => [], null); })();
+        type: Injectable
+    }], () => [{ type: undefined }], null); })();
 //# sourceMappingURL=mjexplorer-auth-base.service.js.map

package/dist/lib/mjexplorer-auth-base.service.js.map

@@ -1 +1 @@
-{"version":3,"file":"mjexplorer-auth-base.service.js","sourceRoot":"","sources":["../../src/lib/mjexplorer-auth-base.service.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;;AAM3C,MAAM,OAAgB,UAAU;IAC9B,aAAa,GAAY,KAAK,CAAC;IAE/B,gBAAgB,CAAC;IASP,gBAAgB,CAAC,KAAc;QACvC,IAAI,CAAC,aAAa,GAAG,KAAK,CAAC;IAC7B,CAAC;oEAdmB,UAAU;gEAAV,UAAU,WAAV,UAAU,mBAFlB,MAAM;;iFAEE,UAAU;cAH/B,UAAU;eAAC;gBACV,UAAU,EAAE,MAAM;aACnB"}
+{"version":3,"file":"mjexplorer-auth-base.service.js","sourceRoot":"","sources":["../../src/lib/mjexplorer-auth-base.service.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAC3C,OAAO,EAAc,eAAe,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;;AAGzD;;;GAGG;AAEH,MAAM,OAAgB,UAAU;IACpB,MAAM,CAA4B;IAClC,gBAAgB,GAAG,IAAI,eAAe,CAAU,KAAK,CAAC,CAAC;IACvD,YAAY,GAAG,IAAI,eAAe,CAAM,IAAI,CAAC,CAAC;IAC9C,UAAU,GAAG,IAAI,eAAe,CAAS,EAAE,CAAC,CAAC;IAIvD,YAAY,MAAiC;QAC3C,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;IAcD;;OAEG;IACH,KAAK,CAAC,OAAa;QACjB,OAAO,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC;IAC3C,CAAC;IAoBD;;OAEG;IACH,eAAe;QACb,OAAO,IAAI,CAAC,gBAAgB,CAAC,YAAY,EAAE,CAAC;IAC9C,CAAC;IAED;;OAEG;IACH,cAAc;QACZ,OAAO,IAAI,CAAC,YAAY,CAAC,YAAY,EAAE,CAAC;IAC1C,CAAC;IAED;;OAEG;IACH,YAAY;QACV,OAAO,IAAI,CAAC,UAAU,CAAC,YAAY,EAAE,CAAC;IACxC,CAAC;IAED;;;OAGG;IACH,iBAAiB;QACf,OAAO,CAAC,UAAU,CAAC,CAAC;IACtB,CAAC;IAED;;;OAGG;IACH,cAAc,CAAC,MAAW;QACxB,MAAM,cAAc,GAAG,IAAI,CAAC,iBAAiB,EAAE,CAAC;QAChD,OAAO,cAAc,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,SAAS,IAAI,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC;IAC5F,CAAC;IAED;;OAEG;IACO,eAAe,CAAC,eAAwB;QAChD,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;IAC9C,CAAC;IAED;;OAEG;IACO,iBAAiB,CAAC,OAAY;QACtC,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAChC,IAAI,OAAO,EAAE,KAAK,EAAE,CAAC;YACnB,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QACtC,CAAC;IACH,CAAC;IAED,mDAAmD;IAEnD;;OAEG;IACH,IAAI,aAAa;QACf,OAAO,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC;IACrC,CAAC;IAED;;;OAGG;IACH,IAAI,aAAa,CAAC,KAAc;QAC9B,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;IAC9B,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,OAAO;QACX,OAAO,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC;IACjC,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,aAAa;QACjB,OAAO,IAAI,CAAC,YAAY,CAAC,YAAY,EAAE,CAAC;IAC1C,CAAC;IAED;;OAEG;IACH,sBAAsB,CAAC,KAAa;QAClC,mDAAmD;QACnD,OAAO,KAAK,EAAE,WAAW,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC;YACxC,KAAK,EAAE,WAAW,EAAE,CAAC,QAAQ,CAAC,eAAe,CAAC;YAC9C,KAAK,EAAE,WAAW,EAAE,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC;IACvD,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,OAAO;QACX,yBAAyB;QACzB,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC;QACtB,OAAO,IAAI,CAAC,YAAY,CAAC,YAAY,EAAE,CAAC;IAC1C,CAAC;;gEAxJmB,UAAU,WAAV,UAAU;;iFAAV,UAAU;cAD/B,UAAU"}

package/dist/lib/providers/mjexplorer-auth0-provider.service.d.ts

@@ -0,0 +1,49 @@
+import { MJAuthBase } from '../mjexplorer-auth-base.service';
+import { AuthService, User, AuthGuard, Auth0ClientFactory, AuthClientConfig } from '@auth0/auth0-angular';
+import { Observable } from 'rxjs';
+import * as i0 from "@angular/core";
+export declare function LoadMJAuth0Provider(): typeof MJAuth0Provider;
+export declare class MJAuth0Provider extends MJAuthBase {
+    auth: AuthService;
+    static readonly PROVIDER_TYPE = "auth0";
+    type: string;
+    /**
+     * Factory function to provide Angular dependencies required by Auth0
+     * Stored as a static property for the factory to access without instantiation
+     */
+    static angularProviderFactory: (environment: any) => (typeof AuthService | typeof AuthGuard | {
+        provide: import("@angular/core").InjectionToken<import("@auth0/auth0-angular").AuthConfig>;
+        useValue: {
+            domain: any;
+            clientId: any;
+            authorizationParams: {
+                redirect_uri: string;
+            };
+            cacheLocation: string;
+        };
+        useFactory?: undefined;
+        deps?: undefined;
+    } | {
+        provide: import("@angular/core").InjectionToken<import("@auth0/auth0-spa-js").Auth0Client>;
+        useFactory: typeof Auth0ClientFactory.createClient;
+        deps: (typeof AuthClientConfig)[];
+        useValue?: undefined;
+    })[];
+    constructor(auth: AuthService);
+    login(options?: any): Observable<void>;
+    logout(): Promise<void>;
+    refresh(): Promise<Observable<any>>;
+    getUser(): Promise<Observable<User | null | undefined>>;
+    isAuthenticated(): Observable<boolean>;
+    getUserClaims(): Promise<Observable<any>>;
+    checkExpiredTokenError(error: string): boolean;
+    initialize(): Promise<void>;
+    protected loginInternal(options?: any): Promise<void>;
+    getToken(): Promise<string | null>;
+    handleCallback(): Promise<void>;
+    getRequiredConfig(): string[];
+    validateConfig(_config: any): boolean;
+    static ɵfac: i0.ɵɵFactoryDeclaration<MJAuth0Provider, never>;
+    static ɵprov: i0.ɵɵInjectableDeclaration<MJAuth0Provider>;
+}
+//# sourceMappingURL=mjexplorer-auth0-provider.service.d.ts.map

package/dist/lib/providers/mjexplorer-auth0-provider.service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mjexplorer-auth0-provider.service.d.ts","sourceRoot":"","sources":["../../../src/lib/providers/mjexplorer-auth0-provider.service.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,UAAU,EAAE,MAAM,iCAAiC,CAAC;AAC7D,OAAO,EAAE,WAAW,EAAW,IAAI,EAAE,SAAS,EAAyC,kBAAkB,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AAC1J,OAAO,EAAE,UAAU,EAAM,MAAM,MAAM,CAAC;;AAItC,wBAAgB,mBAAmB,2BAGlC;AAED,qBAIa,eAAgB,SAAQ,UAAU;IA6B1B,IAAI,EAAE,WAAW;IA5BpC,MAAM,CAAC,QAAQ,CAAC,aAAa,WAAW;IACxC,IAAI,SAAiC;IAErC;;;OAGG;IACH,MAAM,CAAC,sBAAsB,gBAAiB,GAAG;;;;;;;;;;;;;;;;;SAmB/C;gBAEiB,IAAI,EAAE,WAAW;IAW3B,KAAK,CAAC,OAAO,CAAC,EAAE,GAAG,GAAG,UAAU,CAAC,IAAI,CAAC;IAOlC,MAAM,IAAI,OAAO,CAAC,IAAI,CAAC;IAIvB,OAAO,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;IAK1C,OAAO,IAAI,OAAO,CAAC,UAAU,CAAC,IAAI,GAAG,IAAI,GAAG,SAAS,CAAC,CAAC;IAIpD,eAAe,IAAI,UAAU,CAAC,OAAO,CAAC;IAIzC,aAAa,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;IAI/C,sBAAsB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO;IAKxC,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC;cAQjB,aAAa,CAAC,OAAO,CAAC,EAAE,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC;IAIrD,QAAQ,IAAI,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAUlC,cAAc,IAAI,OAAO,CAAC,IAAI,CAAC;IAKrC,iBAAiB,IAAI,MAAM,EAAE;IAI7B,cAAc,CAAC,OAAO,EAAE,GAAG,GAAG,OAAO;yCAxG1B,eAAe;6CAAf,eAAe;CA6G3B"}

package/dist/lib/providers/mjexplorer-auth0-provider.service.js

@@ -0,0 +1,131 @@
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var MJAuth0Provider_1;
+import { Injectable } from '@angular/core';
+import { RegisterClass } from '@memberjunction/global';
+import { MJAuthBase } from '../mjexplorer-auth-base.service';
+import { AuthService, AuthGuard, AuthConfigService, Auth0ClientService, Auth0ClientFactory, AuthClientConfig } from '@auth0/auth0-angular';
+import { of } from 'rxjs';
+import * as i0 from "@angular/core";
+import * as i1 from "@auth0/auth0-angular";
+// Prevent tree-shaking by explicitly referencing the class
+export function LoadMJAuth0Provider() {
+    // This function ensures the class is included in the bundle
+    return MJAuth0Provider;
+}
+let MJAuth0Provider = class MJAuth0Provider extends MJAuthBase {
+    static { MJAuth0Provider_1 = this; }
+    auth;
+    static PROVIDER_TYPE = 'auth0';
+    type = MJAuth0Provider_1.PROVIDER_TYPE;
+    /**
+     * Factory function to provide Angular dependencies required by Auth0
+     * Stored as a static property for the factory to access without instantiation
+     */
+    static angularProviderFactory = (environment) => [
+        AuthService,
+        AuthGuard,
+        {
+            provide: AuthConfigService,
+            useValue: {
+                domain: environment.AUTH0_DOMAIN,
+                clientId: environment.AUTH0_CLIENTID,
+                authorizationParams: {
+                    redirect_uri: window.location.origin,
+                },
+                cacheLocation: 'localstorage',
+            },
+        },
+        {
+            provide: Auth0ClientService,
+            useFactory: Auth0ClientFactory.createClient,
+            deps: [AuthClientConfig],
+        }
+    ];
+    constructor(auth) {
+        const config = {
+            name: MJAuth0Provider_1.PROVIDER_TYPE,
+            type: MJAuth0Provider_1.PROVIDER_TYPE
+        };
+        super(config);
+        this.auth = auth;
+        this.auth.isAuthenticated$.subscribe((loggedIn) => {
+            this.updateAuthState(loggedIn);
+        });
+    }
+    login(options) {
+        // Auth0's loginWithRedirect executes immediately
+        this.auth.loginWithRedirect(options);
+        // Return an observable for backward compatibility
+        return of(void 0);
+    }
+    async logout() {
+        this.auth.logout({ logoutParams: { returnTo: document.location.origin } });
+    }
+    async refresh() {
+        await this.auth.getAccessTokenSilently();
+        return this.auth.idTokenClaims$;
+    }
+    async getUser() {
+        return this.auth.user$;
+    }
+    isAuthenticated() {
+        return this.auth.isAuthenticated$;
+    }
+    async getUserClaims() {
+        return this.auth.idTokenClaims$;
+    }
+    checkExpiredTokenError(error) {
+        return error?.includes('jwt expired');
+    }
+    // Add required methods for the new interface
+    async initialize() {
+        // Auth0 Angular SDK handles initialization internally
+        // Just subscribe to authentication state
+        this.auth.isAuthenticated$.subscribe((loggedIn) => {
+            this.updateAuthState(loggedIn);
+        });
+    }
+    async loginInternal(options) {
+        this.auth.loginWithRedirect(options);
+    }
+    async getToken() {
+        try {
+            const token = await this.auth.getAccessTokenSilently().toPromise();
+            return token || null;
+        }
+        catch (error) {
+            console.error('Error getting Auth0 token:', error);
+            return null;
+        }
+    }
+    async handleCallback() {
+        // Auth0 Angular SDK handles callbacks internally
+        // This method is here for interface compatibility
+    }
+    getRequiredConfig() {
+        return ['clientId', 'domain'];
+    }
+    validateConfig(_config) {
+        // Auth0 configuration is handled by Angular module providers
+        // Prefix with underscore to indicate intentionally unused
+        return true;
+    }
+    static ɵfac = function MJAuth0Provider_Factory(t) { return new (t || MJAuth0Provider)(i0.ɵɵinject(i1.AuthService)); };
+    static ɵprov = /*@__PURE__*/ i0.ɵɵdefineInjectable({ token: MJAuth0Provider, factory: MJAuth0Provider.ɵfac, providedIn: 'root' });
+};
+MJAuth0Provider = MJAuth0Provider_1 = __decorate([
+    RegisterClass(MJAuthBase, 'auth0')
+], MJAuth0Provider);
+export { MJAuth0Provider };
+(() => { (typeof ngDevMode === "undefined" || ngDevMode) && i0.ɵsetClassMetadata(MJAuth0Provider, [{
+        type: Injectable,
+        args: [{
+                providedIn: 'root'
+            }]
+    }], () => [{ type: i1.AuthService }], null); })();
+//# sourceMappingURL=mjexplorer-auth0-provider.service.js.map

package/dist/lib/providers/mjexplorer-auth0-provider.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mjexplorer-auth0-provider.service.js","sourceRoot":"","sources":["../../../src/lib/providers/mjexplorer-auth0-provider.service.ts"],"names":[],"mappings":";;;;;;;AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAC3C,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AACvD,OAAO,EAAE,UAAU,EAAE,MAAM,iCAAiC,CAAC;AAC7D,OAAO,EAAE,WAAW,EAAiB,SAAS,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AAC1J,OAAO,EAAc,EAAE,EAAE,MAAM,MAAM,CAAC;;;AAGtC,2DAA2D;AAC3D,MAAM,UAAU,mBAAmB;IACjC,4DAA4D;IAC5D,OAAO,eAAe,CAAC;AACzB,CAAC;AAMM,IAAM,eAAe,GAArB,MAAM,eAAgB,SAAQ,UAAU;;IA6B1B;IA5BnB,MAAM,CAAU,aAAa,GAAG,OAAO,CAAC;IACxC,IAAI,GAAG,iBAAe,CAAC,aAAa,CAAC;IAErC;;;OAGG;IACH,MAAM,CAAC,sBAAsB,GAAG,CAAC,WAAgB,EAAE,EAAE,CAAC;QACpD,WAAW;QACX,SAAS;QACT;YACE,OAAO,EAAE,iBAAiB;YAC1B,QAAQ,EAAE;gBACR,MAAM,EAAE,WAAW,CAAC,YAAY;gBAChC,QAAQ,EAAE,WAAW,CAAC,cAAc;gBACpC,mBAAmB,EAAE;oBACnB,YAAY,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM;iBACrC;gBACD,aAAa,EAAE,cAAc;aAC9B;SACF;QACD;YACE,OAAO,EAAE,kBAAkB;YAC3B,UAAU,EAAE,kBAAkB,CAAC,YAAY;YAC3C,IAAI,EAAE,CAAC,gBAAgB,CAAC;SACzB;KACF,CAAC;IAEF,YAAmB,IAAiB;QAClC,MAAM,MAAM,GAA8B;YACxC,IAAI,EAAE,iBAAe,CAAC,aAAa;YACnC,IAAI,EAAE,iBAAe,CAAC,aAAa;SACpC,CAAC;QACF,KAAK,CAAC,MAAM,CAAC,CAAC;QALG,SAAI,GAAJ,IAAI,CAAa;QAMlC,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,SAAS,CAAC,CAAC,QAAQ,EAAE,EAAE;YAChD,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC;QACjC,CAAC,CAAC,CAAC;IACL,CAAC;IAEQ,KAAK,CAAC,OAAa;QAC1B,iDAAiD;QACjD,IAAI,CAAC,IAAI,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC;QACrC,kDAAkD;QAClD,OAAO,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC;IACpB,CAAC;IAEM,KAAK,CAAC,MAAM;QACjB,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,YAAY,EAAE,EAAE,QAAQ,EAAE,QAAQ,CAAC,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAC7E,CAAC;IAEM,KAAK,CAAC,OAAO;QAClB,MAAM,IAAI,CAAC,IAAI,CAAC,sBAAsB,EAAE,CAAC;QACzC,OAAO,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC;IAClC,CAAC;IAED,KAAK,CAAC,OAAO;QACX,OAAO,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC;IACzB,CAAC;IAEQ,eAAe;QACtB,OAAO,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC;IACpC,CAAC;IAED,KAAK,CAAC,aAAa;QACjB,OAAO,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC;IAClC,CAAC;IAED,sBAAsB,CAAC,KAAa;QAClC,OAAO,KAAK,EAAE,QAAQ,CAAC,aAAa,CAAC,CAAC;IACxC,CAAC;IAED,6CAA6C;IAC7C,KAAK,CAAC,UAAU;QACd,sDAAsD;QACtD,yCAAyC;QACzC,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,SAAS,CAAC,CAAC,QAAQ,EAAE,EAAE;YAChD,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC;QACjC,CAAC,CAAC,CAAC;IACL,CAAC;IAES,KAAK,CAAC,aAAa,CAAC,OAAa;QACzC,IAAI,CAAC,IAAI,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC;IACvC,CAAC;IAED,KAAK,CAAC,QAAQ;QACZ,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,sBAAsB,EAAE,CAAC,SAAS,EAAE,CAAC;YACnE,OAAO,KAAK,IAAI,IAAI,CAAC;QACvB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,KAAK,CAAC,4BAA4B,EAAE,KAAK,CAAC,CAAC;YACnD,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED,KAAK,CAAC,cAAc;QAClB,iDAAiD;QACjD,kDAAkD;IACpD,CAAC;IAED,iBAAiB;QACf,OAAO,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;IAChC,CAAC;IAED,cAAc,CAAC,OAAY;QACzB,6DAA6D;QAC7D,0DAA0D;QAC1D,OAAO,IAAI,CAAC;IACd,CAAC;yEA5GU,eAAe;gEAAf,eAAe,WAAf,eAAe,mBAHd,MAAM;;AAGP,eAAe;IAD3B,aAAa,CAAC,UAAU,EAAE,OAAO,CAAC;GACtB,eAAe,CA6G3B;;iFA7GY,eAAe;cAJ3B,UAAU;eAAC;gBACV,UAAU,EAAE,MAAM;aACnB"}

package/dist/lib/providers/mjexplorer-msal-provider.service.d.ts

@@ -0,0 +1,58 @@
+import { MJAuthBase } from '../mjexplorer-auth-base.service';
+import { Observable } from 'rxjs';
+import { MsalBroadcastService, MsalService, MsalGuard } from '@azure/msal-angular';
+import { AccountInfo } from '@azure/msal-common';
+import { PublicClientApplication, InteractionType } from '@azure/msal-browser';
+import * as i0 from "@angular/core";
+export declare function LoadMJMSALProvider(): typeof MJMSALProvider;
+export declare class MJMSALProvider extends MJAuthBase {
+    auth: MsalService;
+    private msalBroadcastService;
+    static readonly PROVIDER_TYPE = "msal";
+    type: string;
+    private readonly _destroying$;
+    private readonly _initializationCompleted$;
+    /**
+     * Factory function to provide Angular dependencies required by MSAL
+     * Stored as a static property for the factory to access without instantiation
+     */
+    static angularProviderFactory: (environment: any) => (typeof MsalService | typeof MsalBroadcastService | typeof MsalGuard | {
+        provide: import("@angular/core").InjectionToken<string>;
+        useValue: PublicClientApplication;
+    } | {
+        provide: import("@angular/core").InjectionToken<string>;
+        useValue: {
+            interactionType: InteractionType;
+            authRequest: {
+                scopes: string[];
+            };
+            protectedResourceMap?: undefined;
+        };
+    } | {
+        provide: import("@angular/core").InjectionToken<string>;
+        useValue: {
+            interactionType: InteractionType;
+            protectedResourceMap: Map<string, string[]>;
+            authRequest?: undefined;
+        };
+    })[];
+    constructor(auth: MsalService, msalBroadcastService: MsalBroadcastService);
+    private initializeMSAL;
+    private ensureInitialized;
+    login(options?: any): Observable<void>;
+    logout(): Promise<void>;
+    refresh(): Promise<Observable<any>>;
+    getUser(): Promise<AccountInfo | null>;
+    isAuthenticated(): Observable<boolean>;
+    getUserClaims(): Promise<Observable<any>>;
+    checkExpiredTokenError(error: string): boolean;
+    initialize(): Promise<void>;
+    protected loginInternal(options?: any): Promise<void>;
+    getToken(): Promise<string | null>;
+    handleCallback(): Promise<void>;
+    getRequiredConfig(): string[];
+    validateConfig(_config: any): boolean;
+    static ɵfac: i0.ɵɵFactoryDeclaration<MJMSALProvider, never>;
+    static ɵprov: i0.ɵɵInjectableDeclaration<MJMSALProvider>;
+}
+//# sourceMappingURL=mjexplorer-msal-provider.service.d.ts.map

package/dist/lib/providers/mjexplorer-msal-provider.service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mjexplorer-msal-provider.service.d.ts","sourceRoot":"","sources":["../../../src/lib/providers/mjexplorer-msal-provider.service.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,UAAU,EAAE,MAAM,iCAAiC,CAAC;AAC7D,OAAO,EAAmB,UAAU,EAA2F,MAAM,MAAM,CAAC;AAC5I,OAAO,EAAE,oBAAoB,EAAE,WAAW,EAA6D,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAC9I,OAAO,EAAE,WAAW,EAAwB,MAAM,oBAAoB,CAAC;AACvE,OAAO,EAAsE,uBAAuB,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;;AAKnJ,wBAAgB,kBAAkB,0BAGjC;AAED,qBAIa,cAAe,SAAQ,UAAU;IA+CzB,IAAI,EAAE,WAAW;IAAE,OAAO,CAAC,oBAAoB;IA9ClE,MAAM,CAAC,QAAQ,CAAC,aAAa,UAAU;IACvC,IAAI,SAAgC;IAEpC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAuB;IACpD,OAAO,CAAC,QAAQ,CAAC,yBAAyB,CAAuC;IAEjF;;;OAGG;IACH,MAAM,CAAC,sBAAsB,gBAAiB,GAAG;;;;;;;;;;;;;;;;;;;SAkC/C;gBAEiB,IAAI,EAAE,WAAW,EAAU,oBAAoB,EAAE,oBAAoB;YAS1E,cAAc;YA4Cd,iBAAiB;IAMtB,KAAK,CAAC,OAAO,CAAC,EAAE,GAAG,GAAG,UAAU,CAAC,IAAI,CAAC;IAmBlC,MAAM,IAAI,OAAO,CAAC,IAAI,CAAC;IAOvB,OAAO,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;IAS1C,OAAO,IAAI,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC;IAKnC,eAAe,IAAI,UAAU,CAAC,OAAO,CAAC;IAKzC,aAAa,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;IA+B/C,sBAAsB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO;IAKxC,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC;cAIjB,aAAa,CAAC,OAAO,CAAC,EAAE,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC;IAoBrD,QAAQ,IAAI,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IA8BlC,cAAc,IAAI,OAAO,CAAC,IAAI,CAAC;IAMrC,iBAAiB,IAAI,MAAM,EAAE;IAI7B,cAAc,CAAC,OAAO,EAAE,GAAG,GAAG,OAAO;yCA3P1B,cAAc;6CAAd,cAAc;CA+P1B"}

package/dist/lib/providers/mjexplorer-msal-provider.service.js

@@ -0,0 +1,267 @@
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var MJMSALProvider_1;
+import { Injectable } from '@angular/core';
+import { RegisterClass } from '@memberjunction/global';
+import { MJAuthBase } from '../mjexplorer-auth-base.service';
+import { BehaviorSubject, Subject, catchError, filter, from, map, of, throwError, takeUntil, take, firstValueFrom } from 'rxjs';
+import { MsalBroadcastService, MsalService, MSAL_INSTANCE, MSAL_GUARD_CONFIG, MSAL_INTERCEPTOR_CONFIG, MsalGuard } from '@azure/msal-angular';
+import { CacheLookupPolicy, InteractionRequiredAuthError, InteractionStatus, PublicClientApplication, InteractionType } from '@azure/msal-browser';
+import { LogError } from '@memberjunction/core';
+import * as i0 from "@angular/core";
+import * as i1 from "@azure/msal-angular";
+// Prevent tree-shaking by explicitly referencing the class
+export function LoadMJMSALProvider() {
+    // This function ensures the class is included in the bundle
+    return MJMSALProvider;
+}
+let MJMSALProvider = class MJMSALProvider extends MJAuthBase {
+    static { MJMSALProvider_1 = this; }
+    auth;
+    msalBroadcastService;
+    static PROVIDER_TYPE = 'msal';
+    type = MJMSALProvider_1.PROVIDER_TYPE;
+    _destroying$ = new Subject();
+    _initializationCompleted$ = new BehaviorSubject(false);
+    /**
+     * Factory function to provide Angular dependencies required by MSAL
+     * Stored as a static property for the factory to access without instantiation
+     */
+    static angularProviderFactory = (environment) => [
+        {
+            provide: MSAL_INSTANCE,
+            useValue: new PublicClientApplication({
+                auth: {
+                    clientId: environment.CLIENT_ID,
+                    authority: environment.CLIENT_AUTHORITY,
+                    redirectUri: window.location.origin,
+                },
+                cache: {
+                    cacheLocation: 'localStorage',
+                    storeAuthStateInCookie: false,
+                },
+            }),
+        },
+        {
+            provide: MSAL_GUARD_CONFIG,
+            useValue: {
+                interactionType: InteractionType.Redirect,
+                authRequest: {
+                    scopes: ['User.Read'],
+                },
+            },
+        },
+        {
+            provide: MSAL_INTERCEPTOR_CONFIG,
+            useValue: {
+                interactionType: InteractionType.Redirect,
+                protectedResourceMap: new Map([['https://graph.microsoft.com/v1.0/me', ['user.read']]]),
+            },
+        },
+        MsalService,
+        MsalGuard,
+        MsalBroadcastService
+    ];
+    constructor(auth, msalBroadcastService) {
+        const config = {
+            name: MJMSALProvider_1.PROVIDER_TYPE,
+            type: MJMSALProvider_1.PROVIDER_TYPE
+        };
+        super(config);
+        this.auth = auth;
+        this.msalBroadcastService = msalBroadcastService;
+        this.initializeMSAL();
+    }
+    async initializeMSAL() {
+        await this.auth.instance.initialize();
+        // Handle redirect immediately after initialization  
+        const redirectResponse = await this.auth.instance.handleRedirectPromise();
+        if (redirectResponse && redirectResponse.account) {
+            // User just logged in via redirect
+            this.auth.instance.setActiveAccount(redirectResponse.account);
+            this.updateAuthState(true);
+            this.authenticated = true;
+            this._initializationCompleted$.next(true); // Signal initialization complete
+            // Do a controlled reload after successful login
+            // This ensures the app fully reinitializes with the authenticated state
+            setTimeout(() => {
+                window.location.href = window.location.origin;
+            }, 100);
+            return;
+        }
+        else {
+            // Set active account if we have one
+            const accounts = this.auth.instance.getAllAccounts();
+            if (accounts.length > 0) {
+                this.auth.instance.setActiveAccount(accounts[0]);
+                this.updateAuthState(true);
+                this.authenticated = true;
+                this._initializationCompleted$.next(true);
+            }
+        }
+        // Subscribe to broadcast service for ongoing auth state changes
+        this.msalBroadcastService.inProgress$
+            .pipe(filter((status) => status === InteractionStatus.None), takeUntil(this._destroying$))
+            .subscribe(() => {
+            const isAuth = this.auth.instance.getAllAccounts().length > 0;
+            this.updateAuthState(isAuth);
+            this.authenticated = isAuth;
+            if (isAuth) {
+                this.auth.instance.setActiveAccount(this.auth.instance.getAllAccounts()[0]);
+            }
+            this._initializationCompleted$.next(true);
+        });
+    }
+    // Ensure methods wait for initialization
+    async ensureInitialized() {
+        if (!this._initializationCompleted$.value) {
+            await firstValueFrom(this._initializationCompleted$.pipe(filter(done => done), take(1)));
+        }
+    }
+    login(options) {
+        const silentRequest = {
+            scopes: ['User.Read', 'email', 'profile'],
+            ...options
+        };
+        this.auth.loginRedirect(silentRequest).subscribe({
+            next: () => {
+                this.auth.instance.setActiveAccount(this.auth.instance.getAllAccounts()[0] || null);
+                // Don't reload here - let the redirect handler manage the flow
+            },
+            error: (error) => {
+                LogError(error);
+            }
+        });
+        return of(void 0);
+    }
+    async logout() {
+        await this.ensureInitialized();
+        this.auth.logoutRedirect().subscribe(() => {
+            // Logout will trigger a redirect
+        });
+    }
+    async refresh() {
+        await this.ensureInitialized();
+        const silentRequest = {
+            scopes: ['User.Read', 'email', 'profile'],
+            cacheLookupPolicy: CacheLookupPolicy.RefreshTokenAndNetwork,
+        };
+        return from(this.auth.instance.acquireTokenSilent(silentRequest));
+    }
+    async getUser() {
+        await this.ensureInitialized();
+        return this.auth.instance.getActiveAccount();
+    }
+    isAuthenticated() {
+        // Return the base class observable which is being updated in initializeMSAL
+        return this.isAuthenticated$.asObservable();
+    }
+    async getUserClaims() {
+        await this.ensureInitialized();
+        const account = this.auth.instance.getActiveAccount();
+        if (!account) {
+            // No account, return null observable
+            return of(null);
+        }
+        const silentRequest = {
+            scopes: ['User.Read', 'email', 'profile'],
+            account: account,
+            cacheLookupPolicy: CacheLookupPolicy.RefreshTokenAndNetwork
+        };
+        return from(this.auth.instance.acquireTokenSilent(silentRequest)).pipe(map((response) => response), catchError((error) => {
+            LogError(error);
+            if (error instanceof InteractionRequiredAuthError) {
+                // Try popup as fallback
+                return from(this.auth.instance.acquireTokenPopup({
+                    scopes: ['User.Read', 'email', 'profile']
+                }));
+            }
+            this.authenticated = false;
+            return throwError(() => error);
+        }));
+    }
+    checkExpiredTokenError(error) {
+        return error?.trim().toLowerCase().includes('you need to be authorized to perform');
+    }
+    // Required methods for the new interface
+    async initialize() {
+        await this.ensureInitialized();
+    }
+    async loginInternal(options) {
+        await this.ensureInitialized();
+        const silentRequest = {
+            scopes: ['User.Read', 'email', 'profile'],
+            ...options
+        };
+        return new Promise((resolve, reject) => {
+            this.auth.loginRedirect(silentRequest).subscribe({
+                next: () => {
+                    resolve();
+                },
+                error: (error) => {
+                    LogError(error);
+                    reject(error);
+                }
+            });
+        });
+    }
+    async getToken() {
+        await this.ensureInitialized();
+        try {
+            const account = this.auth.instance.getActiveAccount();
+            if (!account) {
+                return null;
+            }
+            const response = await this.auth.instance.acquireTokenSilent({
+                scopes: ['User.Read'],
+                account: account,
+                forceRefresh: false
+            });
+            return response.accessToken;
+        }
+        catch (error) {
+            if (error instanceof InteractionRequiredAuthError) {
+                // Try interactive login if silent acquisition fails
+                try {
+                    const response = await this.auth.instance.acquireTokenPopup({
+                        scopes: ['User.Read']
+                    });
+                    return response.accessToken;
+                }
+                catch (popupError) {
+                    console.error('Failed to acquire token via popup:', popupError);
+                }
+            }
+            return null;
+        }
+    }
+    async handleCallback() {
+        // MSAL Angular handles callbacks internally through its broadcast service
+        // The handleRedirectPromise is called in initializeMSAL
+        await this.ensureInitialized();
+    }
+    getRequiredConfig() {
+        return ['clientId', 'tenantId'];
+    }
+    validateConfig(_config) {
+        // MSAL configuration is handled by Angular module providers
+        return true;
+    }
+    static ɵfac = function MJMSALProvider_Factory(t) { return new (t || MJMSALProvider)(i0.ɵɵinject(i1.MsalService), i0.ɵɵinject(i1.MsalBroadcastService)); };
+    static ɵprov = /*@__PURE__*/ i0.ɵɵdefineInjectable({ token: MJMSALProvider, factory: MJMSALProvider.ɵfac, providedIn: 'root' });
+};
+MJMSALProvider = MJMSALProvider_1 = __decorate([
+    RegisterClass(MJAuthBase, 'msal')
+], MJMSALProvider);
+export { MJMSALProvider };
+(() => { (typeof ngDevMode === "undefined" || ngDevMode) && i0.ɵsetClassMetadata(MJMSALProvider, [{
+        type: Injectable,
+        args: [{
+                providedIn: 'root'
+            }]
+    }], () => [{ type: i1.MsalService }, { type: i1.MsalBroadcastService }], null); })();
+//# sourceMappingURL=mjexplorer-msal-provider.service.js.map