@memberjunction/ng-auth-services 4.0.0 → 4.1.0

package/README.md

@@ -1,21 +1,38 @@
 # @memberjunction/ng-auth-services
 
-The `@memberjunction/ng-auth-services` package provides authentication services for MemberJunction Explorer Angular applications. It offers a unified abstraction layer that supports multiple authentication providers including Auth0 and Microsoft Authentication Library (MSAL) for Azure Active Directory.
+Angular authentication services for MemberJunction Explorer applications. Provides a unified abstraction layer supporting multiple OAuth providers (Auth0, Microsoft MSAL, Okta) through a consistent, type-safe API.
 
 ## Overview
 
-This package implements a provider pattern that allows seamless switching between different authentication services through configuration. It provides a consistent API regardless of which authentication provider is being used, making it easy to change authentication strategies without modifying application code.
+This package implements a provider-agnostic authentication system using the Strategy pattern. A single abstract base class (`MJAuthBase`) defines the contract, while concrete providers handle Auth0, MSAL (Azure AD), and Okta specifics. Application code interacts only with the standardized interface, making provider switches a configuration change rather than a code change.
+
+```mermaid
+graph TD
+    A["MJAuthBase\n(Abstract Service)"] --> B["MJAuth0Provider"]
+    A --> C["MJMSALProvider"]
+    A --> D["MJOktaProvider"]
+    B --> E["@auth0/auth0-angular"]
+    C --> F["@azure/msal-angular"]
+    D --> G["@okta/okta-auth-js"]
+
+    style A fill:#7c5295,stroke:#563a6b,color:#fff
+    style B fill:#2d6a9f,stroke:#1a4971,color:#fff
+    style C fill:#2d6a9f,stroke:#1a4971,color:#fff
+    style D fill:#2d6a9f,stroke:#1a4971,color:#fff
+    style E fill:#2d8659,stroke:#1a5c3a,color:#fff
+    style F fill:#2d8659,stroke:#1a5c3a,color:#fff
+    style G fill:#2d8659,stroke:#1a5c3a,color:#fff
+```
 
 ## Features
 
-- **Unified Authentication Interface**: Abstract base class (`MJAuthBase`) provides consistent API across providers
-- **Multiple Provider Support**: 
-  - Auth0 authentication provider
-  - Microsoft Authentication Library (MSAL) for Azure AD
-- **Easy Provider Switching**: Change providers via configuration without code changes
-- **Reactive State Management**: Observable-based authentication state and user information
-- **Token Management**: Built-in token refresh and expiration handling
-- **TypeScript Support**: Full TypeScript definitions for type safety
+- **Unified Authentication Interface**: Standardized API across all providers via `IAngularAuthProvider`
+- **Multiple Provider Support**: Auth0, Microsoft MSAL (Azure AD), and Okta
+- **Standardized Types (v3.0.0)**: `StandardUserInfo`, `StandardAuthToken`, `StandardAuthError` eliminate leaky abstractions
+- **Semantic Error Classification**: `AuthErrorType` enum replaces provider-specific error checking
+- **Token Management**: ID token retrieval, token info, and automatic refresh
+- **Observable State**: Reactive authentication state, user info, and email streams
+- **Configuration Validation**: Each provider declares and validates its required configuration
 - **Angular 21+ Compatible**: Built for modern Angular applications
 
 ## Installation
@@ -24,355 +41,132 @@ This package implements a provider pattern that allows seamless switching betwee
 npm install @memberjunction/ng-auth-services
 ```
 
-## Requirements
-
-### Peer Dependencies
-- `@angular/common`: ^18.0.2
-- `@angular/core`: ^18.0.2
-- `@angular/forms`: ^18.0.2
-- `@angular/router`: ^18.0.2
-- `@auth0/auth0-angular`: ^2.2.1 (required when using Auth0)
-- `@azure/msal-angular`: ^3.0.11 (required when using MSAL)
+## Key Dependencies
 
-### Dependencies
-- `@memberjunction/core`: ^2.43.0
-- `tslib`: ^2.3.0
+| Dependency | Purpose |
+|---|---|
+| `@angular/core`, `@angular/common` | Angular framework |
+| `@auth0/auth0-angular` | Auth0 provider (peer) |
+| `@azure/msal-angular`, `@azure/msal-browser` | MSAL provider (peer) |
+| `@okta/okta-auth-js` | Okta provider (peer) |
+| `@memberjunction/core` | Core MJ utilities |
+| `rxjs` | Reactive state management |
 
 ## Configuration
 
 ### Environment Setup
 
-Configure your authentication provider in your environment files:
-
-#### Auth0 Configuration
 ```typescript
-// environment.ts
+// Auth0
 export const environment = {
   AUTH_TYPE: 'auth0',
   AUTH0_DOMAIN: 'your-domain.auth0.com',
   AUTH0_CLIENTID: 'your-auth0-client-id',
-  // Other environment variables...
 };
-```
 
-#### MSAL (Azure AD) Configuration
-```typescript
-// environment.ts
+// MSAL (Azure AD)
 export const environment = {
   AUTH_TYPE: 'msal',
   CLIENT_ID: 'your-azure-ad-client-id',
   CLIENT_AUTHORITY: 'https://login.microsoftonline.com/your-tenant-id',
-  // Other environment variables...
+};
+
+// Okta
+export const environment = {
+  AUTH_TYPE: 'okta',
+  OKTA_ISSUER: 'https://your-org.okta.com/oauth2/default',
+  OKTA_CLIENTID: 'your-okta-client-id',
 };
 ```
 
 ### Module Setup
 
-Import and configure the `AuthServicesModule` in your app module:
-
 ```typescript
-import { NgModule } from '@angular/core';
-import { BrowserModule } from '@angular/platform-browser';
 import { AuthServicesModule } from '@memberjunction/ng-auth-services';
-import { environment } from '../environments/environment';
-import { AppComponent } from './app.component';
 
 @NgModule({
-  declarations: [
-    AppComponent
-  ],
   imports: [
-    BrowserModule,
-    AuthServicesModule.forRoot(environment), // Configure auth module
-    // Other imports...
-  ],
-  providers: [],
-  bootstrap: [AppComponent]
+    AuthServicesModule.forRoot(environment),
+  ]
 })
-export class AppModule { }
+export class AppModule {}
 ```
 
-### Routing Configuration (MSAL only)
-
-When using MSAL, add the redirect component to your routes:
-
-```typescript
-import { Routes } from '@angular/router';
-import { RedirectComponent } from '@memberjunction/ng-auth-services';
-
-const routes: Routes = [
-  // Your application routes...
-  { path: 'auth', component: RedirectComponent } // Required for MSAL
-];
-```
-
-## Usage Examples
-
-### Basic Authentication Operations
-
-```typescript
-import { Component, OnInit } from '@angular/core';
-import { MJAuthBase } from '@memberjunction/ng-auth-services';
-import { Observable } from 'rxjs';
-
-@Component({
-  selector: 'app-header',
-  template: `
-    <div class="header">
-      <button *ngIf="!(isAuthenticated$ | async)" (click)="login()">Login</button>
-      <button *ngIf="isAuthenticated$ | async" (click)="logout()">Logout</button>
-      <span *ngIf="user$ | async as user">Welcome, {{ user.name }}!</span>
-    </div>
-  `
-})
-export class HeaderComponent implements OnInit {
-  isAuthenticated$!: Observable<boolean>;
-  user$!: Observable<any>;
-
-  constructor(private authService: MJAuthBase) {}
-
-  async ngOnInit() {
-    this.isAuthenticated$ = await this.authService.isAuthenticated();
-    this.user$ = await this.authService.getUser();
-  }
-
-  login() {
-    this.authService.login();
-  }
-
-  logout() {
-    this.authService.logout();
-  }
-}
-```
+## Usage
 
-### Getting User Claims
+### Authentication Operations (v3.0.0 API)
 
 ```typescript
-import { Component, OnInit } from '@angular/core';
-import { MJAuthBase } from '@memberjunction/ng-auth-services';
-import { Observable } from 'rxjs';
-import { map } from 'rxjs/operators';
-
-@Component({
-  selector: 'app-user-profile',
-  template: `
-    <div *ngIf="userClaims$ | async as claims">
-      <h3>User Profile</h3>
-      <p>Email: {{ claims.email }}</p>
-      <p>Name: {{ claims.name }}</p>
-      <p>Roles: {{ claims.roles?.join(', ') }}</p>
-    </div>
-  `
-})
-export class UserProfileComponent implements OnInit {
-  userClaims$!: Observable<any>;
+import { MJAuthBase, StandardUserInfo } from '@memberjunction/ng-auth-services';
 
-  constructor(private authService: MJAuthBase) {}
+@Component({ selector: 'app-header', template: '...' })
+export class HeaderComponent {
+  constructor(private authBase: MJAuthBase) {}
 
   async ngOnInit() {
-    this.userClaims$ = await this.authService.getUserClaims();
-  }
-}
-```
+    // Reactive auth state
+    this.authBase.isAuthenticated().subscribe(isAuth => { /* ... */ });
 
-### Token Refresh and Error Handling
+    // Standardized user info
+    this.authBase.getUserInfo().subscribe((user: StandardUserInfo | null) => {
+      if (user) console.log(`Welcome ${user.name}!`);
+    });
 
-```typescript
-import { Injectable } from '@angular/core';
-import { HttpClient, HttpErrorResponse } from '@angular/common/http';
-import { MJAuthBase } from '@memberjunction/ng-auth-services';
-import { catchError, switchMap } from 'rxjs/operators';
-import { throwError } from 'rxjs';
-
-@Injectable({
-  providedIn: 'root'
-})
-export class ApiService {
-  constructor(
-    private http: HttpClient,
-    private authService: MJAuthBase
-  ) {}
-
-  getData() {
-    return this.http.get('/api/data').pipe(
-      catchError((error: HttpErrorResponse) => this.handleError(error))
-    );
+    // Token management
+    const token = await this.authBase.getIdToken();
+    const tokenInfo = await this.authBase.getTokenInfo();
   }
 
-  private async handleError(error: HttpErrorResponse) {
-    if (error.status === 401 && this.authService.checkExpiredTokenError(error.message)) {
-      // Token expired, try to refresh
-      const tokenObs = await this.authService.refresh();
-      return tokenObs.pipe(
-        switchMap(() => this.http.get('/api/data')) // Retry the request
-      );
-    }
-    return throwError(() => error);
-  }
+  login() { this.authBase.login(); }
+  logout() { this.authBase.logout(); }
 }
 ```
 
-### Protected Routes with Guards
+### Error Handling
 
 ```typescript
-import { Injectable } from '@angular/core';
-import { CanActivate, Router } from '@angular/router';
-import { MJAuthBase } from '@memberjunction/ng-auth-services';
-import { map, tap } from 'rxjs/operators';
-
-@Injectable({
-  providedIn: 'root'
-})
-export class AuthGuard implements CanActivate {
-  constructor(
-    private authService: MJAuthBase,
-    private router: Router
-  ) {}
-
-  async canActivate() {
-    const isAuthenticated$ = await this.authService.isAuthenticated();
-    return isAuthenticated$.pipe(
-      tap(authenticated => {
-        if (!authenticated) {
-          this.authService.login();
-        }
-      })
-    );
+import { AuthErrorType } from '@memberjunction/ng-auth-services';
+
+try {
+  await this.authBase.refreshToken();
+} catch (err) {
+  const authError = this.authBase.classifyError(err);
+  switch (authError.type) {
+    case AuthErrorType.TOKEN_EXPIRED:
+      // Session expired
+      break;
+    case AuthErrorType.USER_CANCELLED:
+      // User cancelled - no error needed
+      break;
+    case AuthErrorType.NETWORK_ERROR:
+      // Connectivity issue
+      break;
   }
 }
 ```
 
-## API Reference
+## Exported API
 
-### MJAuthBase (Abstract Class)
+| Export | Type | Description |
+|---|---|---|
+| `MJAuthBase` | Abstract Service | Base authentication service all providers implement |
+| `IAngularAuthProvider` | Interface | Contract for authentication providers |
+| `AngularAuthProviderFactory` | Factory | Creates provider instances from configuration |
+| `AuthServicesModule` | NgModule | Module with `forRoot()` configuration |
+| `RedirectComponent` | Component | Handles OAuth redirect callbacks |
+| `StandardUserInfo` | Interface | Standardized user profile data |
+| `StandardAuthToken` | Interface | Standardized token information |
+| `StandardAuthError` | Interface | Standardized error with classification |
+| `AuthErrorType` | Enum | Semantic error categories |
+| `TokenRefreshResult` | Interface | Token refresh operation result |
+| `AuthState` | Interface | Complete authentication state snapshot |
 
-The base authentication service that all providers implement.
+## Build
 
-#### Properties
-
-| Property | Type | Description |
-|----------|------|-------------|
-| `authenticated` | `boolean` | Current authentication state |
-
-#### Methods
-
-| Method | Parameters | Return Type | Description |
-|--------|------------|-------------|-------------|
-| `login` | `options?: any` | `Promise<any>` | Initiates the login flow. Options vary by provider. |
-| `logout` | None | `Promise<any>` | Logs the user out and clears authentication state |
-| `refresh` | None | `Promise<Observable<any>>` | Refreshes the authentication token |
-| `isAuthenticated` | None | `Promise<any>` | Returns an Observable of the authentication state |
-| `getUser` | None | `Promise<any>` | Returns user information (format varies by provider) |
-| `getUserClaims` | None | `Promise<Observable<any>>` | Returns the user's token claims |
-| `checkExpiredTokenError` | `error: string` | `boolean` | Checks if an error indicates an expired token |
-
-### MJAuth0Provider
-
-Auth0-specific implementation of `MJAuthBase`. Internally uses `@auth0/auth0-angular`.
-
-#### Provider-Specific Behavior
-- Uses Auth0's redirect flow for authentication
-- Returns Auth0 `User` object from `getUser()`
-- Token expiration check looks for "jwt expired" in error messages
-
-### MJMSALProvider
-
-MSAL-specific implementation of `MJAuthBase`. Internally uses `@azure/msal-angular`.
-
-#### Provider-Specific Behavior
-- Implements initialization handling to ensure MSAL is ready
-- Uses redirect flow with automatic account selection
-- Returns MSAL `AccountInfo` from `getUser()`
-- Includes refresh token policy in token operations
-- Token expiration check looks for authorization errors
-
-### AuthServicesModule
-
-The main module for configuring authentication services.
-
-#### Static Methods
-
-| Method | Parameters | Return Type | Description |
-|--------|------------|-------------|-------------|
-| `forRoot` | `environment: AuthEnvironment` | `ModuleWithProviders<AuthServicesModule>` | Configures the authentication module with environment settings |
-
-#### AuthEnvironment Type
-
-```typescript
-type AuthEnvironment = {
-  AUTH_TYPE: string;           // 'auth0' or 'msal'
-  CLIENT_ID: string;           // MSAL client ID
-  CLIENT_AUTHORITY: string;    // MSAL authority URL
-  AUTH0_CLIENTID: string;      // Auth0 client ID
-  AUTH0_DOMAIN: string;        // Auth0 domain
-};
-```
-
-### RedirectComponent
-
-Re-exported from `@azure/msal-angular`. Required for MSAL redirect flow handling.
-
-## Integration with Other MemberJunction Packages
-
-This package integrates with:
-- **@memberjunction/core**: Uses core logging utilities (`LogError`)
-- **MemberJunction Explorer**: Provides authentication for all Explorer UI components
-- **MemberJunction API**: Token management for API authentication
-
-## Build and Development
-
-### Building the Package
 ```bash
-# From the package directory
-npm run build
-
-# From the repository root
-npm run build -- --filter="@memberjunction/ng-auth-services"
+cd packages/Angular/Explorer/auth-services && npm run build
 ```
 
-### Development Notes
-- The package uses Angular Package Format (APF)
-- Compiled with Angular Compiler (`ngc`)
-- No side effects - tree-shakeable
-- Distributed files are in the `/dist` directory
-
-## Migration Guide
-
-### Switching Between Providers
-
-To switch authentication providers:
-
-1. Update your environment configuration:
-   ```typescript
-   // From Auth0 to MSAL
-   AUTH_TYPE: 'msal', // was 'auth0'
-   CLIENT_ID: 'your-azure-client-id',
-   CLIENT_AUTHORITY: 'https://login.microsoftonline.com/your-tenant',
-   ```
-
-2. Add redirect route (if switching to MSAL):
-   ```typescript
-   { path: 'auth', component: RedirectComponent }
-   ```
-
-3. No other code changes required - the `MJAuthBase` interface remains the same
-
-## Troubleshooting
-
-### Common Issues
-
-1. **MSAL Initialization Errors**: Ensure the MSAL redirect component is properly configured in routes
-2. **Token Refresh Failures**: Check that refresh token is enabled in your auth provider configuration
-3. **CORS Issues**: Verify redirect URIs are properly configured in your auth provider dashboard
-
-### Debug Tips
-
-- Check browser console for authentication errors
-- Verify localStorage contains auth tokens
-- Use browser dev tools to inspect network requests for auth headers
-- Enable verbose logging in your auth provider configuration
-
 ## License
 
-ISC
+ISC

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@memberjunction/ng-auth-services",
-  "version": "4.0.0",
+  "version": "4.1.0",
   "description": "MemberJunction Explorer: Authentication Services",
   "main": "./dist/public-api.js",
   "typings": "./dist/public-api.d.ts",
@@ -30,8 +30,8 @@
     "@okta/okta-auth-js": "^7.14.1"
   },
   "dependencies": {
-    "@memberjunction/core": "4.0.0",
-    "@memberjunction/global": "4.0.0",
+    "@memberjunction/core": "4.1.0",
+    "@memberjunction/global": "4.1.0",
     "rxjs": "^7.8.2",
     "tslib": "^2.8.1"
   },

package/dist/lib/mjexplorer-auth0-provider.service.d.ts

@@ -1,18 +0,0 @@
-import { MJAuthBase } from './mjexplorer-auth-base.service';
-import { AuthService, User } from '@auth0/auth0-angular';
-import { Observable } from 'rxjs';
-import * as i0 from "@angular/core";
-export declare class MJAuth0Provider extends MJAuthBase {
-    auth: AuthService;
-    constructor(auth: AuthService);
-    login(options?: any): any;
-    logout(): Promise<void>;
-    refresh(): Promise<Observable<any>>;
-    getUser(): Promise<Observable<User | null | undefined>>;
-    isAuthenticated(): Promise<Observable<boolean>>;
-    getUserClaims(): Promise<Observable<any>>;
-    checkExpiredTokenError(error: string): boolean;
-    static ɵfac: i0.ɵɵFactoryDeclaration<MJAuth0Provider, never>;
-    static ɵprov: i0.ɵɵInjectableDeclaration<MJAuth0Provider>;
-}
-//# sourceMappingURL=mjexplorer-auth0-provider.service.d.ts.map

package/dist/lib/mjexplorer-auth0-provider.service.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"mjexplorer-auth0-provider.service.d.ts","sourceRoot":"","sources":["../../src/lib/mjexplorer-auth0-provider.service.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,UAAU,EAAE,MAAM,gCAAgC,CAAC;AAC5D,OAAO,EAAE,WAAW,EAAW,IAAI,EAAE,MAAM,sBAAsB,CAAC;AAClE,OAAO,EAAE,UAAU,EAAM,MAAM,MAAM,CAAC;;AAEtC,qBAGa,eAAgB,SAAQ,UAAU;IAE1B,IAAI,EAAE,WAAW;gBAAjB,IAAI,EAAE,WAAW;IAO3B,KAAK,CAAC,OAAO,CAAC,EAAE,GAAG,GAAG,GAAG;IAIrB,MAAM,IAAI,OAAO,CAAC,IAAI,CAAC;IAIvB,OAAO,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;IAK1C,OAAO,IAAI,OAAO,CAAC,UAAU,CAAC,IAAI,GAAG,IAAI,GAAG,SAAS,CAAC,CAAC;IAIvD,eAAe;IAIf,aAAa,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;IAI/C,sBAAsB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO;yCAlCnC,eAAe;6CAAf,eAAe;CAsC3B"}

package/dist/lib/mjexplorer-auth0-provider.service.js

@@ -1,45 +0,0 @@
-import { Injectable } from '@angular/core';
-import { MJAuthBase } from './mjexplorer-auth-base.service';
-import * as i0 from "@angular/core";
-import * as i1 from "@auth0/auth0-angular";
-export class MJAuth0Provider extends MJAuthBase {
-    auth;
-    constructor(auth) {
-        super();
-        this.auth = auth;
-        this.auth.isAuthenticated$.subscribe((loggedIn) => {
-            this.setAuthenticated(loggedIn);
-        });
-    }
-    login(options) {
-        this.auth.loginWithRedirect(options);
-    }
-    async logout() {
-        this.auth.logout({ logoutParams: { returnTo: document.location.origin } });
-    }
-    async refresh() {
-        await this.auth.getAccessTokenSilently();
-        return this.auth.idTokenClaims$;
-    }
-    async getUser() {
-        return this.auth.user$;
-    }
-    async isAuthenticated() {
-        return this.auth.isAuthenticated$;
-    }
-    async getUserClaims() {
-        return this.auth.idTokenClaims$;
-    }
-    checkExpiredTokenError(error) {
-        return error?.includes('jwt expired');
-    }
-    static ɵfac = function MJAuth0Provider_Factory(t) { return new (t || MJAuth0Provider)(i0.ɵɵinject(i1.AuthService)); };
-    static ɵprov = /*@__PURE__*/ i0.ɵɵdefineInjectable({ token: MJAuth0Provider, factory: MJAuth0Provider.ɵfac, providedIn: 'root' });
-}
-(() => { (typeof ngDevMode === "undefined" || ngDevMode) && i0.ɵsetClassMetadata(MJAuth0Provider, [{
-        type: Injectable,
-        args: [{
-                providedIn: 'root'
-            }]
-    }], () => [{ type: i1.AuthService }], null); })();
-//# sourceMappingURL=mjexplorer-auth0-provider.service.js.map

package/dist/lib/mjexplorer-auth0-provider.service.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"mjexplorer-auth0-provider.service.js","sourceRoot":"","sources":["../../src/lib/mjexplorer-auth0-provider.service.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAC3C,OAAO,EAAE,UAAU,EAAE,MAAM,gCAAgC,CAAC;;;AAO5D,MAAM,OAAO,eAAgB,SAAQ,UAAU;IAE1B;IAAnB,YAAmB,IAAiB;QAClC,KAAK,EAAE,CAAC;QADS,SAAI,GAAJ,IAAI,CAAa;QAElC,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,SAAS,CAAC,CAAC,QAAQ,EAAE,EAAE;YAChD,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC;QAClC,CAAC,CAAC,CAAC;IACL,CAAC;IAEQ,KAAK,CAAC,OAAa;QAC1B,IAAI,CAAC,IAAI,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC;IACvC,CAAC;IAEM,KAAK,CAAC,MAAM;QACjB,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,YAAY,EAAE,EAAE,QAAQ,EAAE,QAAQ,CAAC,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAC7E,CAAC;IAEM,KAAK,CAAC,OAAO;QAClB,MAAM,IAAI,CAAC,IAAI,CAAC,sBAAsB,EAAE,CAAC;QACzC,OAAO,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC;IAClC,CAAC;IAED,KAAK,CAAC,OAAO;QACX,OAAO,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC;IACzB,CAAC;IAED,KAAK,CAAC,eAAe;QACnB,OAAO,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC;IACpC,CAAC;IAED,KAAK,CAAC,aAAa;QACjB,OAAO,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC;IAClC,CAAC;IAED,sBAAsB,CAAC,KAAa;QAClC,OAAO,KAAK,EAAE,QAAQ,CAAC,aAAa,CAAC,CAAC;IACxC,CAAC;yEApCU,eAAe;gEAAf,eAAe,WAAf,eAAe,mBAFd,MAAM;;iFAEP,eAAe;cAH3B,UAAU;eAAC;gBACV,UAAU,EAAE,MAAM;aACnB"}

package/dist/lib/mjexplorer-msal-provider.service.d.ts

@@ -1,24 +0,0 @@
-import { MJAuthBase } from './mjexplorer-auth-base.service';
-import { Observable } from 'rxjs';
-import { MsalBroadcastService, MsalService } from '@azure/msal-angular';
-import { AccountInfo } from '@azure/msal-common';
-import * as i0 from "@angular/core";
-export declare class MJMSALProvider extends MJAuthBase {
-    auth: MsalService;
-    private msalBroadcastService;
-    private readonly _destroying$;
-    private readonly _initializationCompleted$;
-    constructor(auth: MsalService, msalBroadcastService: MsalBroadcastService);
-    private initializeMSAL;
-    private ensureInitialized;
-    login(options?: any): Promise<any>;
-    logout(): Promise<void>;
-    refresh(): Promise<Observable<any>>;
-    getUser(): Promise<AccountInfo | null>;
-    isAuthenticated(): Promise<Observable<boolean>>;
-    getUserClaims(): Promise<Observable<any>>;
-    checkExpiredTokenError(error: string): boolean;
-    static ɵfac: i0.ɵɵFactoryDeclaration<MJMSALProvider, never>;
-    static ɵprov: i0.ɵɵInjectableDeclaration<MJMSALProvider>;
-}
-//# sourceMappingURL=mjexplorer-msal-provider.service.d.ts.map

package/dist/lib/mjexplorer-msal-provider.service.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"mjexplorer-msal-provider.service.d.ts","sourceRoot":"","sources":["../../src/lib/mjexplorer-msal-provider.service.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,UAAU,EAAE,MAAM,gCAAgC,CAAC;AAC5D,OAAO,EAAmB,UAAU,EAA2F,MAAM,MAAM,CAAC;AAC5I,OAAO,EAAE,oBAAoB,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AACxE,OAAO,EAAE,WAAW,EAAwB,MAAM,oBAAoB,CAAC;;AAIvE,qBAGa,cAAe,SAAQ,UAAU;IAKzB,IAAI,EAAE,WAAW;IAAE,OAAO,CAAC,oBAAoB;IAHlE,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAuB;IACpD,OAAO,CAAC,QAAQ,CAAC,yBAAyB,CAAuC;gBAE9D,IAAI,EAAE,WAAW,EAAU,oBAAoB,EAAE,oBAAoB;YAK1E,cAAc;YAcd,iBAAiB;IAMhB,KAAK,CAAC,OAAO,CAAC,EAAE,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC;IAgBpC,MAAM,IAAI,OAAO,CAAC,IAAI,CAAC;IAOvB,OAAO,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;IAS1C,OAAO,IAAI,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC;IAKtC,eAAe;IAKf,aAAa,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;IAwB/C,sBAAsB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO;yCAhGnC,cAAc;6CAAd,cAAc;CAoG1B"}

package/dist/lib/mjexplorer-msal-provider.service.js

@@ -1,108 +0,0 @@
-import { Injectable } from '@angular/core';
-import { MJAuthBase } from './mjexplorer-auth-base.service';
-import { BehaviorSubject, Subject, catchError, filter, from, map, of, throwError, takeUntil, take, firstValueFrom } from 'rxjs';
-import { CacheLookupPolicy, InteractionRequiredAuthError, InteractionStatus } from '@azure/msal-browser';
-import { LogError } from '@memberjunction/core';
-import * as i0 from "@angular/core";
-import * as i1 from "@azure/msal-angular";
-export class MJMSALProvider extends MJAuthBase {
-    auth;
-    msalBroadcastService;
-    _destroying$ = new Subject();
-    _initializationCompleted$ = new BehaviorSubject(false);
-    constructor(auth, msalBroadcastService) {
-        super();
-        this.auth = auth;
-        this.msalBroadcastService = msalBroadcastService;
-        this.initializeMSAL();
-    }
-    async initializeMSAL() {
-        await this.auth.instance.initialize();
-        // After initialization logic
-        this.auth.instance.setActiveAccount(this.auth.instance.getAllAccounts()[0] || null);
-        this.msalBroadcastService.inProgress$
-            .pipe(filter((status) => status === InteractionStatus.None), takeUntil(this._destroying$))
-            .subscribe(() => {
-            this.setAuthenticated(this.auth.instance.getAllAccounts().length > 0);
-            this.auth.instance.setActiveAccount(this.auth.instance.getAllAccounts()[0] || null);
-            this._initializationCompleted$.next(true); // Signal initialization complete
-        });
-    }
-    // Ensure methods wait for initialization
-    async ensureInitialized() {
-        if (!this._initializationCompleted$.value) {
-            await firstValueFrom(this._initializationCompleted$.pipe(filter(done => done), take(1)));
-        }
-    }
-    async login(options) {
-        await this.ensureInitialized();
-        const silentRequest = {
-            scopes: ['User.Read', 'email', 'profile']
-        };
-        this.auth.loginRedirect(silentRequest).subscribe({
-            next: () => {
-                this.auth.instance.setActiveAccount(this.auth.instance.getAllAccounts()[0] || null);
-                window.location.reload();
-            },
-            error: (error) => {
-                LogError(error);
-            }
-        });
-    }
-    async logout() {
-        await this.ensureInitialized();
-        this.auth.logoutRedirect().subscribe(() => {
-            window.location.reload();
-        });
-    }
-    async refresh() {
-        await this.ensureInitialized();
-        const silentRequest = {
-            scopes: ['User.Read', 'email', 'profile'],
-            cacheLookupPolicy: CacheLookupPolicy.RefreshTokenAndNetwork,
-        };
-        return from(this.auth.instance.acquireTokenSilent(silentRequest));
-    }
-    async getUser() {
-        await this.ensureInitialized();
-        return this.auth.instance.getActiveAccount();
-    }
-    async isAuthenticated() {
-        await this.ensureInitialized();
-        return of(this.auth.instance.getActiveAccount() != null);
-    }
-    async getUserClaims() {
-        await this.ensureInitialized();
-        const account = this.auth.instance.getActiveAccount();
-        const silentRequest = {
-            scopes: ['User.Read', 'email', 'profile'],
-            account: account,
-            cacheLookupPolicy: CacheLookupPolicy.RefreshTokenAndNetwork
-        };
-        if (account) {
-            return from(this.auth.instance.acquireTokenSilent(silentRequest)).pipe(map((response) => response), catchError((error) => {
-                LogError(error);
-                if (error instanceof InteractionRequiredAuthError) {
-                    return from(this.auth.instance.acquireTokenSilent(silentRequest));
-                }
-                this.authenticated = false;
-                return throwError(error);
-            }));
-        }
-        else {
-            return from(this.auth.instance.acquireTokenSilent(silentRequest));
-        }
-    }
-    checkExpiredTokenError(error) {
-        return error?.trim().toLowerCase().includes('you need to be authorized to perform');
-    }
-    static ɵfac = function MJMSALProvider_Factory(t) { return new (t || MJMSALProvider)(i0.ɵɵinject(i1.MsalService), i0.ɵɵinject(i1.MsalBroadcastService)); };
-    static ɵprov = /*@__PURE__*/ i0.ɵɵdefineInjectable({ token: MJMSALProvider, factory: MJMSALProvider.ɵfac, providedIn: 'root' });
-}
-(() => { (typeof ngDevMode === "undefined" || ngDevMode) && i0.ɵsetClassMetadata(MJMSALProvider, [{
-        type: Injectable,
-        args: [{
-                providedIn: 'root'
-            }]
-    }], () => [{ type: i1.MsalService }, { type: i1.MsalBroadcastService }], null); })();
-//# sourceMappingURL=mjexplorer-msal-provider.service.js.map

package/dist/lib/mjexplorer-msal-provider.service.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"mjexplorer-msal-provider.service.js","sourceRoot":"","sources":["../../src/lib/mjexplorer-msal-provider.service.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAC3C,OAAO,EAAE,UAAU,EAAE,MAAM,gCAAgC,CAAC;AAC5D,OAAO,EAAE,eAAe,EAAc,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE,EAAE,UAAU,EAAE,SAAS,EAAE,IAAI,EAAE,cAAc,EAAE,MAAM,MAAM,CAAC;AAG5I,OAAO,EAAE,iBAAiB,EAAE,4BAA4B,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AACzG,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;;;AAKhD,MAAM,OAAO,cAAe,SAAQ,UAAU;IAKzB;IAA2B;IAH7B,YAAY,GAAG,IAAI,OAAO,EAAQ,CAAC;IACnC,yBAAyB,GAAG,IAAI,eAAe,CAAU,KAAK,CAAC,CAAC;IAEjF,YAAmB,IAAiB,EAAU,oBAA0C;QACtF,KAAK,EAAE,CAAC;QADS,SAAI,GAAJ,IAAI,CAAa;QAAU,yBAAoB,GAApB,oBAAoB,CAAsB;QAEtF,IAAI,CAAC,cAAc,EAAE,CAAC;IACxB,CAAC;IAEO,KAAK,CAAC,cAAc;QAC1B,MAAM,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,EAAE,CAAC;QACtC,6BAA6B;QAC7B,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC;QACpF,IAAI,CAAC,oBAAoB,CAAC,WAAW;aAClC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAyB,EAAE,EAAE,CAAC,MAAM,KAAK,iBAAiB,CAAC,IAAI,CAAC,EAAE,SAAS,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;aAC5G,SAAS,CAAC,GAAG,EAAE;YACd,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,cAAc,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;YACtE,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC;YACpF,IAAI,CAAC,yBAAyB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,iCAAiC;QAC9E,CAAC,CAAC,CAAC;IACP,CAAC;IAED,yCAAyC;IACjC,KAAK,CAAC,iBAAiB;QAC7B,IAAI,CAAC,IAAI,CAAC,yBAAyB,CAAC,KAAK,EAAE,CAAC;YAC1C,MAAM,cAAc,CAAC,IAAI,CAAC,yBAAyB,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC3F,CAAC;IACH,CAAC;IAEQ,KAAK,CAAC,KAAK,CAAC,OAAa;QAChC,MAAM,IAAI,CAAC,iBAAiB,EAAE,CAAC;QAC/B,MAAM,aAAa,GAAQ;YACzB,MAAM,EAAE,CAAC,WAAW,EAAC,OAAO,EAAE,SAAS,CAAC;SACzC,CAAC;QACF,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,aAAa,CAAC,CAAC,SAAS,CAAC;YAC/C,IAAI,EAAE,GAAG,EAAE;gBACT,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC;gBACpF,MAAM,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;YAC3B,CAAC;YACD,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE;gBACf,QAAQ,CAAC,KAAK,CAAC,CAAC;YAClB,CAAC;SACF,CAAC,CAAC;IACL,CAAC;IAEM,KAAK,CAAC,MAAM;QACjB,MAAM,IAAI,CAAC,iBAAiB,EAAE,CAAC;QAC/B,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE;YACxC,MAAM,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;QAC3B,CAAC,CAAC,CAAC;IACL,CAAC;IAEM,KAAK,CAAC,OAAO;QAClB,MAAM,IAAI,CAAC,iBAAiB,EAAE,CAAC;QAC/B,MAAM,aAAa,GAAQ;YACzB,MAAM,EAAE,CAAC,WAAW,EAAE,OAAO,EAAE,SAAS,CAAC;YACzC,iBAAiB,EAAE,iBAAiB,CAAC,sBAAsB;SAC5D,CAAC;QACF,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,kBAAkB,CAAC,aAAa,CAAC,CAAC,CAAC;IACpE,CAAC;IAED,KAAK,CAAC,OAAO;QACX,MAAM,IAAI,CAAC,iBAAiB,EAAE,CAAC;QAC/B,OAAO,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,gBAAgB,EAAE,CAAC;IAC/C,CAAC;IAED,KAAK,CAAC,eAAe;QACnB,MAAM,IAAI,CAAC,iBAAiB,EAAE,CAAC;QAC/B,OAAO,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,gBAAgB,EAAE,IAAI,IAAI,CAAC,CAAC;IAC3D,CAAC;IAED,KAAK,CAAC,aAAa;QACjB,MAAM,IAAI,CAAC,iBAAiB,EAAE,CAAC;QAC/B,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,gBAAgB,EAAE,CAAC;QACtD,MAAM,aAAa,GAAQ;YACzB,MAAM,EAAE,CAAC,WAAW,EAAE,OAAO,EAAE,SAAS,CAAC;YACzC,OAAO,EAAE,OAAO;YAChB,iBAAiB,EAAE,iBAAiB,CAAC,sBAAsB;SAC5D,CAAC;QACF,IAAI,OAAO,EAAE,CAAC;YACZ,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,kBAAkB,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CACpE,GAAG,CAAC,CAAC,QAA8B,EAAE,EAAE,CAAC,QAAQ,CAAC,EACjD,UAAU,CAAC,CAAC,KAAK,EAAE,EAAE;gBACnB,QAAQ,CAAC,KAAK,CAAC,CAAC;gBAChB,IAAI,KAAK,YAAY,4BAA4B,EAAE,CAAC;oBAClD,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,kBAAkB,CAAC,aAAa,CAAC,CAAC,CAAC;gBACpE,CAAC;gBACD,IAAI,CAAC,aAAa,GAAG,KAAK,CAAC;gBAC3B,OAAO,UAAU,CAAC,KAAK,CAAC,CAAC;YAC3B,CAAC,CAAC,CAAC,CAAC;QACR,CAAC;aAAM,CAAC;YACN,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,kBAAkB,CAAC,aAAa,CAAC,CAAC,CAAC;QACpE,CAAC;IACH,CAAC;IAED,sBAAsB,CAAC,KAAa;QAClC,OAAO,KAAK,EAAE,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,sCAAsC,CAAC,CAAC;IACtF,CAAC;wEAlGU,cAAc;gEAAd,cAAc,WAAd,cAAc,mBAFb,MAAM;;iFAEP,cAAc;cAH1B,UAAU;eAAC;gBACV,UAAU,EAAE,MAAM;aACnB"}