@memberjunction/ng-auth-services 5.23.0 → 5.25.0

package/dist/lib/providers/mjexplorer-cognito-provider.service.d.ts

@@ -0,0 +1,127 @@
+import { MJAuthBase } from '../mjexplorer-auth-base.service';
+import { StandardUserInfo, StandardAuthToken, StandardAuthError, TokenRefreshResult } from '../auth-types';
+import * as i0 from "@angular/core";
+/**
+ * Configuration interface for the Cognito provider.
+ * Populated from environment config via the `angularProviderFactory`.
+ */
+interface CognitoConfig {
+    userPoolId: string;
+    userPoolClientId: string;
+    region?: string;
+    /** Cognito Hosted UI domain, e.g. 'myapp.auth.us-east-1.amazoncognito.com' */
+    domain: string;
+    /** OAuth redirect URI. Defaults to window.location.origin */
+    redirectUri?: string;
+    /** OAuth scopes. Defaults to ['openid', 'profile', 'email'] */
+    scopes?: string[];
+    /** When true, skips redirect callback processing (for MCP OAuth callback path) */
+    skipRedirectCallback?: boolean;
+}
+/**
+ * AWS Cognito authentication provider implementation - v3.0.0
+ *
+ * Implements the abstract methods from MJAuthBase to hide Cognito-specific details.
+ * Uses AWS Amplify v6 (tree-shakeable subpath imports) for authentication.
+ *
+ * Key abstraction: Cognito stores tokens in Amplify's internal storage, accessed
+ * via `fetchAuthSession().tokens?.idToken?.toString()`. Consumers never need to
+ * know this detail.
+ *
+ * ## Cognito Hosted UI Flow
+ * This provider uses the Cognito Hosted UI for login via `signInWithRedirect()`.
+ * The flow is: redirect to Hosted UI -> user authenticates -> redirect back with
+ * authorization code -> Amplify exchanges code for tokens (PKCE).
+ */
+export declare class MJCognitoProvider extends MJAuthBase {
+    private cognitoConfig;
+    static readonly PROVIDER_TYPE = "cognito";
+    readonly type = "cognito";
+    private _initialized;
+    private _hubListenerCancel;
+    /**
+     * Factory function to provide Angular dependencies required by the Cognito provider.
+     * Returns a config injection token following the Okta provider pattern.
+     */
+    static angularProviderFactory: (environment: Record<string, unknown>) => {
+        provide: string;
+        useValue: CognitoConfig;
+    }[];
+    constructor(cognitoConfig: CognitoConfig);
+    initialize(): Promise<void>;
+    protected loginInternal(_options?: Record<string, unknown>): Promise<void>;
+    protected logoutInternal(): Promise<void>;
+    handleCallback(): Promise<void>;
+    /**
+     * Extract ID token from Cognito via Amplify's fetchAuthSession.
+     *
+     * Cognito stores the JWT in session.tokens.idToken. The .toString()
+     * call extracts the raw JWT string. Consumers never need to know this detail.
+     */
+    protected extractIdTokenInternal(): Promise<string | null>;
+    /**
+     * Extract complete token info from Cognito session.
+     * Maps Amplify's token structure to StandardAuthToken.
+     */
+    protected extractTokenInfoInternal(): Promise<StandardAuthToken | null>;
+    /**
+     * Extract user info from Cognito user attributes.
+     * Maps Cognito's attribute structure to StandardUserInfo.
+     */
+    protected extractUserInfoInternal(): Promise<StandardUserInfo | null>;
+    /**
+     * Refresh token using Amplify's fetchAuthSession with forceRefresh.
+     *
+     * Amplify v6 handles the entire refresh token exchange internally:
+     * fetchAuthSession({ forceRefresh: true }) uses the stored refresh token
+     * to obtain new ID and access tokens from Cognito.
+     */
+    protected refreshTokenInternal(): Promise<TokenRefreshResult>;
+    /**
+     * Classify Cognito/Amplify-specific errors into semantic types.
+     *
+     * Maps Amplify v6 error names and messages to AuthErrorType enum.
+     */
+    protected classifyErrorInternal(error: unknown): StandardAuthError;
+    /**
+     * Get profile picture URL from Cognito user attributes.
+     *
+     * Cognito can store a `picture` attribute if configured in the user pool.
+     * Returns null if the attribute is not set.
+     */
+    protected getProfilePictureUrlInternal(): Promise<string | null>;
+    /**
+     * Handle session expiry by redirecting to Cognito Hosted UI.
+     *
+     * Cognito uses refresh tokens (responseType: 'code'), so silent refresh
+     * usually works. If it fails, we redirect to the Hosted UI for
+     * re-authentication. This will navigate the browser and may never return.
+     */
+    protected handleSessionExpiryInternal(): Promise<void>;
+    private ensureInitialized;
+    /**
+     * Refresh user info from Cognito and update the reactive state.
+     */
+    private refreshUserInfo;
+    /**
+     * Map Cognito user attributes to StandardUserInfo.
+     *
+     * Cognito attributes use snake_case keys (email, given_name, family_name, etc.)
+     * and all values are strings (including booleans like email_verified = 'true').
+     */
+    private mapCognitoAttributesToStandard;
+    /**
+     * Extract OAuth scopes from an access token's payload.
+     */
+    private extractScopes;
+    /**
+     * Cancel the Hub event listener if active.
+     */
+    private cancelHubListener;
+    getRequiredConfig(): string[];
+    validateConfig(config: Record<string, unknown>): boolean;
+    static ɵfac: i0.ɵɵFactoryDeclaration<MJCognitoProvider, never>;
+    static ɵprov: i0.ɵɵInjectableDeclaration<MJCognitoProvider>;
+}
+export {};
+//# sourceMappingURL=mjexplorer-cognito-provider.service.d.ts.map

package/dist/lib/providers/mjexplorer-cognito-provider.service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mjexplorer-cognito-provider.service.d.ts","sourceRoot":"","sources":["../../../src/lib/providers/mjexplorer-cognito-provider.service.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,UAAU,EAAE,MAAM,iCAAiC,CAAC;AAW7D,OAAO,EACL,gBAAgB,EAChB,iBAAiB,EACjB,iBAAiB,EAEjB,kBAAkB,EACnB,MAAM,eAAe,CAAC;;AAEvB;;;GAGG;AACH,UAAU,aAAa;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,gBAAgB,EAAE,MAAM,CAAC;IACzB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,8EAA8E;IAC9E,MAAM,EAAE,MAAM,CAAC;IACf,6DAA6D;IAC7D,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,+DAA+D;IAC/D,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,kFAAkF;IAClF,oBAAoB,CAAC,EAAE,OAAO,CAAC;CAChC;AAED;;;;;;;;;;;;;;GAcG;AACH,qBAIa,iBAAkB,SAAQ,UAAU;IA6BV,OAAO,CAAC,aAAa;IA5B1D,MAAM,CAAC,QAAQ,CAAC,aAAa,aAAa;IAC1C,QAAQ,CAAC,IAAI,aAAmC;IAChD,OAAO,CAAC,YAAY,CAAS;IAC7B,OAAO,CAAC,kBAAkB,CAA6B;IAEvD;;;OAGG;IACH,MAAM,CAAC,sBAAsB,GAAI,aAAa,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;;kBAc1D,aAAa;QAGtB;gBAE2C,aAAa,EAAE,aAAa;IAgCnE,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC;cAsDjB,aAAa,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;cAMhE,cAAc,IAAI,OAAO,CAAC,IAAI,CAAC;IAYzC,cAAc,IAAI,OAAO,CAAC,IAAI,CAAC;IAoBrC;;;;;OAKG;cACa,sBAAsB,IAAI,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAUhE;;;OAGG;cACa,wBAAwB,IAAI,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC;IAuB7E;;;OAGG;cACa,uBAAuB,IAAI,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC;IAY3E;;;;;;OAMG;cACa,oBAAoB,IAAI,OAAO,CAAC,kBAAkB,CAAC;IA2CnE;;;;OAIG;IACH,SAAS,CAAC,qBAAqB,CAAC,KAAK,EAAE,OAAO,GAAG,iBAAiB;IA2ElE;;;;;OAKG;cACa,4BAA4B,IAAI,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAUtE;;;;;;OAMG;cACa,2BAA2B,IAAI,OAAO,CAAC,IAAI,CAAC;YAU9C,iBAAiB;IAM/B;;OAEG;YACW,eAAe;IAW7B;;;;;OAKG;IACH,OAAO,CAAC,8BAA8B;IAsBtC;;OAEG;IACH,OAAO,CAAC,aAAa;IAQrB;;OAEG;IACH,OAAO,CAAC,iBAAiB;IAWhB,iBAAiB,IAAI,MAAM,EAAE;IAI7B,cAAc,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO;yCApctD,iBAAiB;6CAAjB,iBAAiB;CAuc7B"}

package/dist/lib/providers/mjexplorer-cognito-provider.service.js

@@ -0,0 +1,463 @@
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var MJCognitoProvider_1;
+import { Injectable, Inject } from '@angular/core';
+import { RegisterClass } from '@memberjunction/global';
+import { MJAuthBase } from '../mjexplorer-auth-base.service';
+import { Amplify } from 'aws-amplify';
+import { signInWithRedirect, signOut, fetchAuthSession, getCurrentUser, fetchUserAttributes } from 'aws-amplify/auth';
+import { Hub } from 'aws-amplify/utils';
+import { AuthErrorType } from '../auth-types';
+import * as i0 from "@angular/core";
+/**
+ * AWS Cognito authentication provider implementation - v3.0.0
+ *
+ * Implements the abstract methods from MJAuthBase to hide Cognito-specific details.
+ * Uses AWS Amplify v6 (tree-shakeable subpath imports) for authentication.
+ *
+ * Key abstraction: Cognito stores tokens in Amplify's internal storage, accessed
+ * via `fetchAuthSession().tokens?.idToken?.toString()`. Consumers never need to
+ * know this detail.
+ *
+ * ## Cognito Hosted UI Flow
+ * This provider uses the Cognito Hosted UI for login via `signInWithRedirect()`.
+ * The flow is: redirect to Hosted UI -> user authenticates -> redirect back with
+ * authorization code -> Amplify exchanges code for tokens (PKCE).
+ */
+let MJCognitoProvider = class MJCognitoProvider extends MJAuthBase {
+    static { MJCognitoProvider_1 = this; }
+    cognitoConfig;
+    static PROVIDER_TYPE = 'cognito';
+    type = MJCognitoProvider_1.PROVIDER_TYPE;
+    _initialized = false;
+    _hubListenerCancel = null;
+    /**
+     * Factory function to provide Angular dependencies required by the Cognito provider.
+     * Returns a config injection token following the Okta provider pattern.
+     */
+    static angularProviderFactory = (environment) => {
+        const isMCPOAuthCallback = window.location.pathname.startsWith('/oauth/callback');
+        return [
+            {
+                provide: 'cognitoConfig',
+                useValue: {
+                    userPoolId: environment['COGNITO_USER_POOL_ID'],
+                    userPoolClientId: environment['COGNITO_CLIENT_ID'] || environment['COGNITO_CLIENTID'],
+                    region: environment['COGNITO_REGION'] || environment['AWS_REGION'],
+                    domain: environment['COGNITO_DOMAIN'],
+                    redirectUri: environment['COGNITO_REDIRECT_URI'] || window.location.origin,
+                    scopes: environment['COGNITO_SCOPES'] || ['openid', 'profile', 'email', 'aws.cognito.signin.user.admin'],
+                    skipRedirectCallback: isMCPOAuthCallback,
+                }
+            }
+        ];
+    };
+    constructor(cognitoConfig) {
+        const config = {
+            name: MJCognitoProvider_1.PROVIDER_TYPE,
+            type: MJCognitoProvider_1.PROVIDER_TYPE
+        };
+        super(config);
+        this.cognitoConfig = cognitoConfig;
+        // Configure Amplify with the existing Cognito User Pool
+        const redirectUri = this.cognitoConfig.redirectUri || window.location.origin;
+        Amplify.configure({
+            Auth: {
+                Cognito: {
+                    userPoolId: this.cognitoConfig.userPoolId,
+                    userPoolClientId: this.cognitoConfig.userPoolClientId,
+                    loginWith: {
+                        oauth: {
+                            domain: this.cognitoConfig.domain,
+                            scopes: this.cognitoConfig.scopes || ['openid', 'profile', 'email', 'aws.cognito.signin.user.admin'],
+                            redirectSignIn: [redirectUri],
+                            redirectSignOut: [redirectUri],
+                            responseType: 'code', // Authorization code + PKCE for refresh tokens
+                        }
+                    }
+                }
+            }
+        });
+    }
+    // ============================================================================
+    // LIFECYCLE METHODS
+    // ============================================================================
+    async initialize() {
+        if (this._initialized) {
+            return;
+        }
+        // CRITICAL: Skip Amplify's redirect handling on the MCP OAuth callback path.
+        // The /oauth/callback path is used by MCP OAuth, not Cognito. If we don't skip,
+        // Amplify will consume the authorization code and prevent the MCP OAuth flow.
+        if (this.cognitoConfig.skipRedirectCallback) {
+            this._initialized = true;
+            return;
+        }
+        // Set up Hub listener for reactive auth events
+        this._hubListenerCancel = Hub.listen('auth', async ({ payload }) => {
+            switch (payload.event) {
+                case 'signedIn':
+                    this.updateAuthState(true);
+                    await this.refreshUserInfo();
+                    break;
+                case 'signedOut':
+                    this.updateAuthState(false);
+                    this.updateUserInfo(null);
+                    break;
+                case 'tokenRefresh':
+                    console.log('[Cognito] Token refreshed successfully');
+                    break;
+                case 'tokenRefresh_failure':
+                    console.warn('[Cognito] Token refresh failed');
+                    break;
+                case 'signInWithRedirect':
+                    console.log('[Cognito] OAuth redirect sign-in completed');
+                    break;
+                case 'signInWithRedirect_failure':
+                    console.error('[Cognito] OAuth redirect sign-in failed');
+                    break;
+            }
+        });
+        // Check for existing session (page refresh or returning from redirect)
+        try {
+            const user = await getCurrentUser();
+            if (user) {
+                this.updateAuthState(true);
+                await this.refreshUserInfo();
+            }
+        }
+        catch {
+            // Not authenticated — this is expected on fresh visits
+            this.updateAuthState(false);
+        }
+        this._initialized = true;
+    }
+    async loginInternal(_options) {
+        await this.ensureInitialized();
+        // Redirect to Cognito Hosted UI. This navigates the browser and never returns.
+        await signInWithRedirect();
+    }
+    async logoutInternal() {
+        this.updateAuthState(false);
+        this.updateUserInfo(null);
+        // Cancel Hub listener before sign-out to avoid race conditions
+        this.cancelHubListener();
+        await signOut();
+        // signOut() clears local tokens. With Hosted UI, it also redirects to the
+        // Cognito logout endpoint to clear the Hosted UI session cookie.
+    }
+    async handleCallback() {
+        // Amplify v6 handles OAuth code exchange automatically when it detects
+        // ?code= and ?state= in the URL during initialization. The Hub listener
+        // catches 'signInWithRedirect' events. This method exists for interface
+        // compatibility.
+        try {
+            const user = await getCurrentUser();
+            if (user) {
+                this.updateAuthState(true);
+                await this.refreshUserInfo();
+            }
+        }
+        catch {
+            // Not authenticated after callback
+        }
+    }
+    // ============================================================================
+    // ABSTRACT METHOD IMPLEMENTATIONS (v3.0.0)
+    // ============================================================================
+    /**
+     * Extract ID token from Cognito via Amplify's fetchAuthSession.
+     *
+     * Cognito stores the JWT in session.tokens.idToken. The .toString()
+     * call extracts the raw JWT string. Consumers never need to know this detail.
+     */
+    async extractIdTokenInternal() {
+        try {
+            const session = await fetchAuthSession();
+            return session.tokens?.idToken?.toString() || null;
+        }
+        catch (error) {
+            console.error('[Cognito] Error extracting ID token:', error);
+            return null;
+        }
+    }
+    /**
+     * Extract complete token info from Cognito session.
+     * Maps Amplify's token structure to StandardAuthToken.
+     */
+    async extractTokenInfoInternal() {
+        try {
+            const session = await fetchAuthSession();
+            const idToken = session.tokens?.idToken;
+            if (!idToken) {
+                return null;
+            }
+            const payload = idToken.payload;
+            const accessToken = session.tokens?.accessToken;
+            return {
+                idToken: idToken.toString(),
+                accessToken: accessToken?.toString(),
+                expiresAt: payload?.exp ? payload.exp * 1000 : 0, // Convert to ms
+                scopes: this.extractScopes(accessToken)
+            };
+        }
+        catch (error) {
+            console.error('[Cognito] Error extracting token info:', error);
+            return null;
+        }
+    }
+    /**
+     * Extract user info from Cognito user attributes.
+     * Maps Cognito's attribute structure to StandardUserInfo.
+     */
+    async extractUserInfoInternal() {
+        try {
+            const user = await getCurrentUser();
+            const attributes = await fetchUserAttributes();
+            return this.mapCognitoAttributesToStandard(user, attributes);
+        }
+        catch (error) {
+            console.error('[Cognito] Error extracting user info:', error);
+            return null;
+        }
+    }
+    /**
+     * Refresh token using Amplify's fetchAuthSession with forceRefresh.
+     *
+     * Amplify v6 handles the entire refresh token exchange internally:
+     * fetchAuthSession({ forceRefresh: true }) uses the stored refresh token
+     * to obtain new ID and access tokens from Cognito.
+     */
+    async refreshTokenInternal() {
+        try {
+            console.log('[Cognito] Attempting to refresh token...');
+            const session = await fetchAuthSession({ forceRefresh: true });
+            const idToken = session.tokens?.idToken;
+            if (!idToken) {
+                return {
+                    success: false,
+                    error: {
+                        type: AuthErrorType.NO_ACTIVE_SESSION,
+                        message: 'Token refresh succeeded but no ID token returned',
+                        userMessage: 'Session refresh failed. Please log in again.'
+                    }
+                };
+            }
+            const payload = idToken.payload;
+            const accessToken = session.tokens?.accessToken;
+            console.log('[Cognito] Token refresh successful', {
+                expiresAt: payload?.exp ? new Date(payload.exp * 1000).toISOString() : 'N/A'
+            });
+            return {
+                success: true,
+                token: {
+                    idToken: idToken.toString(),
+                    accessToken: accessToken?.toString(),
+                    expiresAt: payload?.exp ? payload.exp * 1000 : 0,
+                    scopes: this.extractScopes(accessToken)
+                }
+            };
+        }
+        catch (error) {
+            console.error('[Cognito] Token refresh failed:', error);
+            return {
+                success: false,
+                error: this.classifyErrorInternal(error)
+            };
+        }
+    }
+    /**
+     * Classify Cognito/Amplify-specific errors into semantic types.
+     *
+     * Maps Amplify v6 error names and messages to AuthErrorType enum.
+     */
+    classifyErrorInternal(error) {
+        const errorObj = error;
+        const message = errorObj?.['message'] || 'Unknown error';
+        const name = errorObj?.['name'] || '';
+        // Not authenticated / no session
+        if (name === 'UserUnAuthenticatedException' ||
+            message.includes('not authenticated') ||
+            message.includes('No current user') ||
+            name === 'UserNotFoundException') {
+            return {
+                type: AuthErrorType.NO_ACTIVE_SESSION,
+                message,
+                originalError: error,
+                userMessage: 'You need to log in to continue.'
+            };
+        }
+        // Token expired / invalid refresh token
+        if (name === 'NotAuthorizedException' ||
+            message.includes('not authorized') ||
+            message.includes('Invalid Refresh Token') ||
+            message.includes('expired') ||
+            message.includes('invalid_grant')) {
+            return {
+                type: AuthErrorType.TOKEN_EXPIRED,
+                message,
+                originalError: error,
+                userMessage: 'Your session has expired. Please log in again.'
+            };
+        }
+        // User cancelled login
+        if (message.includes('cancelled') || message.includes('canceled') ||
+            message.includes('user denied')) {
+            return {
+                type: AuthErrorType.USER_CANCELLED,
+                message,
+                originalError: error,
+                userMessage: 'Login was cancelled.'
+            };
+        }
+        // Network errors
+        if (message.includes('network') || message.includes('fetch') ||
+            message.includes('Network') || message.includes('Load failed')) {
+            return {
+                type: AuthErrorType.NETWORK_ERROR,
+                message,
+                originalError: error,
+                userMessage: 'Network error. Please check your connection and try again.'
+            };
+        }
+        // OAuth configuration errors
+        if (name === 'OAuthNotConfigureException' ||
+            name === 'AuthTokenConfigException' ||
+            message.includes('OAuth') || message.includes('configuration')) {
+            return {
+                type: AuthErrorType.CONFIGURATION_ERROR,
+                message,
+                originalError: error,
+                userMessage: 'Authentication configuration error. Please contact support.'
+            };
+        }
+        // Default to unknown
+        return {
+            type: AuthErrorType.UNKNOWN_ERROR,
+            message,
+            originalError: error,
+            userMessage: 'An unexpected error occurred. Please try again.'
+        };
+    }
+    /**
+     * Get profile picture URL from Cognito user attributes.
+     *
+     * Cognito can store a `picture` attribute if configured in the user pool.
+     * Returns null if the attribute is not set.
+     */
+    async getProfilePictureUrlInternal() {
+        try {
+            const attributes = await fetchUserAttributes();
+            return attributes.picture || null;
+        }
+        catch (error) {
+            console.error('[Cognito] Error getting profile picture:', error);
+            return null;
+        }
+    }
+    /**
+     * Handle session expiry by redirecting to Cognito Hosted UI.
+     *
+     * Cognito uses refresh tokens (responseType: 'code'), so silent refresh
+     * usually works. If it fails, we redirect to the Hosted UI for
+     * re-authentication. This will navigate the browser and may never return.
+     */
+    async handleSessionExpiryInternal() {
+        console.log('[Cognito] Session expired, redirecting to Hosted UI for re-authentication');
+        await signInWithRedirect();
+        // This redirects the page and never returns
+    }
+    // ============================================================================
+    // HELPER METHODS
+    // ============================================================================
+    async ensureInitialized() {
+        if (!this._initialized) {
+            await this.initialize();
+        }
+    }
+    /**
+     * Refresh user info from Cognito and update the reactive state.
+     */
+    async refreshUserInfo() {
+        try {
+            const userInfo = await this.extractUserInfoInternal();
+            if (userInfo) {
+                this.updateUserInfo(userInfo);
+            }
+        }
+        catch (error) {
+            console.warn('[Cognito] Failed to refresh user info:', error);
+        }
+    }
+    /**
+     * Map Cognito user attributes to StandardUserInfo.
+     *
+     * Cognito attributes use snake_case keys (email, given_name, family_name, etc.)
+     * and all values are strings (including booleans like email_verified = 'true').
+     */
+    mapCognitoAttributesToStandard(user, attributes) {
+        const givenName = attributes['given_name'];
+        const familyName = attributes['family_name'];
+        const fullName = attributes['name'] ||
+            (givenName && familyName ? `${givenName} ${familyName}` : givenName || familyName || '');
+        return {
+            id: user.userId || user.username,
+            email: attributes['email'] || '',
+            name: fullName,
+            givenName,
+            familyName,
+            preferredUsername: attributes['preferred_username'] || user.username,
+            pictureUrl: attributes['picture'],
+            emailVerified: attributes['email_verified'] === 'true',
+            locale: attributes['locale'],
+        };
+    }
+    /**
+     * Extract OAuth scopes from an access token's payload.
+     */
+    extractScopes(accessToken) {
+        const scope = accessToken?.payload?.['scope'];
+        if (typeof scope === 'string') {
+            return scope.split(' ');
+        }
+        return undefined;
+    }
+    /**
+     * Cancel the Hub event listener if active.
+     */
+    cancelHubListener() {
+        if (this._hubListenerCancel) {
+            this._hubListenerCancel();
+            this._hubListenerCancel = null;
+        }
+    }
+    // ============================================================================
+    // CONFIGURATION
+    // ============================================================================
+    getRequiredConfig() {
+        return ['userPoolId', 'userPoolClientId', 'domain'];
+    }
+    validateConfig(config) {
+        return !!(config['userPoolId'] && config['userPoolClientId'] && config['domain']);
+    }
+    static ɵfac = function MJCognitoProvider_Factory(__ngFactoryType__) { return new (__ngFactoryType__ || MJCognitoProvider)(i0.ɵɵinject('cognitoConfig')); };
+    static ɵprov = /*@__PURE__*/ i0.ɵɵdefineInjectable({ token: MJCognitoProvider, factory: MJCognitoProvider.ɵfac, providedIn: 'root' });
+};
+MJCognitoProvider = MJCognitoProvider_1 = __decorate([
+    RegisterClass(MJAuthBase, 'cognito')
+], MJCognitoProvider);
+export { MJCognitoProvider };
+(() => { (typeof ngDevMode === "undefined" || ngDevMode) && i0.ɵsetClassMetadata(MJCognitoProvider, [{
+        type: Injectable,
+        args: [{
+                providedIn: 'root'
+            }]
+    }], () => [{ type: undefined, decorators: [{
+                type: Inject,
+                args: ['cognitoConfig']
+            }] }], null); })();
+//# sourceMappingURL=mjexplorer-cognito-provider.service.js.map

package/dist/lib/providers/mjexplorer-cognito-provider.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mjexplorer-cognito-provider.service.js","sourceRoot":"","sources":["../../../src/lib/providers/mjexplorer-cognito-provider.service.ts"],"names":[],"mappings":";;;;;;;AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,eAAe,CAAC;AACnD,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AACvD,OAAO,EAAE,UAAU,EAAE,MAAM,iCAAiC,CAAC;AAE7D,OAAO,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AACtC,OAAO,EACL,kBAAkB,EAClB,OAAO,EACP,gBAAgB,EAChB,cAAc,EACd,mBAAmB,EACpB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,GAAG,EAAE,MAAM,mBAAmB,CAAC;AACxC,OAAO,EAIL,aAAa,EAEd,MAAM,eAAe,CAAC;;AAoBvB;;;;;;;;;;;;;;GAcG;AAKI,IAAM,iBAAiB,GAAvB,MAAM,iBAAkB,SAAQ,UAAU;;IA6BF;IA5B7C,MAAM,CAAU,aAAa,GAAG,SAAS,CAAC;IACjC,IAAI,GAAG,mBAAiB,CAAC,aAAa,CAAC;IACxC,YAAY,GAAG,KAAK,CAAC;IACrB,kBAAkB,GAAwB,IAAI,CAAC;IAEvD;;;OAGG;IACH,MAAM,CAAC,sBAAsB,GAAG,CAAC,WAAoC,EAAE,EAAE;QACvE,MAAM,kBAAkB,GAAG,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,UAAU,CAAC,iBAAiB,CAAC,CAAC;QAElF,OAAO;YACL;gBACE,OAAO,EAAE,eAAe;gBACxB,QAAQ,EAAE;oBACR,UAAU,EAAE,WAAW,CAAC,sBAAsB,CAAC;oBAC/C,gBAAgB,EAAE,WAAW,CAAC,mBAAmB,CAAC,IAAI,WAAW,CAAC,kBAAkB,CAAC;oBACrF,MAAM,EAAE,WAAW,CAAC,gBAAgB,CAAC,IAAI,WAAW,CAAC,YAAY,CAAC;oBAClE,MAAM,EAAE,WAAW,CAAC,gBAAgB,CAAC;oBACrC,WAAW,EAAE,WAAW,CAAC,sBAAsB,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM;oBAC1E,MAAM,EAAE,WAAW,CAAC,gBAAgB,CAAC,IAAI,CAAC,QAAQ,EAAE,SAAS,EAAE,OAAO,EAAE,+BAA+B,CAAC;oBACxG,oBAAoB,EAAE,kBAAkB;iBACxB;aACnB;SACF,CAAC;IACJ,CAAC,CAAC;IAEF,YAA6C,aAA4B;QACvE,MAAM,MAAM,GAA8B;YACxC,IAAI,EAAE,mBAAiB,CAAC,aAAa;YACrC,IAAI,EAAE,mBAAiB,CAAC,aAAa;SACtC,CAAC;QACF,KAAK,CAAC,MAAM,CAAC,CAAC;QAL6B,kBAAa,GAAb,aAAa,CAAe;QAOvE,wDAAwD;QACxD,MAAM,WAAW,GAAG,IAAI,CAAC,aAAa,CAAC,WAAW,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC;QAC7E,OAAO,CAAC,SAAS,CAAC;YAChB,IAAI,EAAE;gBACJ,OAAO,EAAE;oBACP,UAAU,EAAE,IAAI,CAAC,aAAa,CAAC,UAAU;oBACzC,gBAAgB,EAAE,IAAI,CAAC,aAAa,CAAC,gBAAgB;oBACrD,SAAS,EAAE;wBACT,KAAK,EAAE;4BACL,MAAM,EAAE,IAAI,CAAC,aAAa,CAAC,MAAM;4BACjC,MAAM,EAAE,IAAI,CAAC,aAAa,CAAC,MAAM,IAAI,CAAC,QAAQ,EAAE,SAAS,EAAE,OAAO,EAAE,+BAA+B,CAAC;4BACpG,cAAc,EAAE,CAAC,WAAW,CAAC;4BAC7B,eAAe,EAAE,CAAC,WAAW,CAAC;4BAC9B,YAAY,EAAE,MAAM,EAAE,+CAA+C;yBACtE;qBACF;iBACF;aACF;SACF,CAAC,CAAC;IACL,CAAC;IAED,+EAA+E;IAC/E,oBAAoB;IACpB,+EAA+E;IAE/E,KAAK,CAAC,UAAU;QACd,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;YACtB,OAAO;QACT,CAAC;QAED,6EAA6E;QAC7E,gFAAgF;QAChF,8EAA8E;QAC9E,IAAI,IAAI,CAAC,aAAa,CAAC,oBAAoB,EAAE,CAAC;YAC5C,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC;YACzB,OAAO;QACT,CAAC;QAED,+CAA+C;QAC/C,IAAI,CAAC,kBAAkB,GAAG,GAAG,CAAC,MAAM,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE;YACjE,QAAQ,OAAO,CAAC,KAAK,EAAE,CAAC;gBACtB,KAAK,UAAU;oBACb,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;oBAC3B,MAAM,IAAI,CAAC,eAAe,EAAE,CAAC;oBAC7B,MAAM;gBACR,KAAK,WAAW;oBACd,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;oBAC5B,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;oBAC1B,MAAM;gBACR,KAAK,cAAc;oBACjB,OAAO,CAAC,GAAG,CAAC,wCAAwC,CAAC,CAAC;oBACtD,MAAM;gBACR,KAAK,sBAAsB;oBACzB,OAAO,CAAC,IAAI,CAAC,gCAAgC,CAAC,CAAC;oBAC/C,MAAM;gBACR,KAAK,oBAAoB;oBACvB,OAAO,CAAC,GAAG,CAAC,4CAA4C,CAAC,CAAC;oBAC1D,MAAM;gBACR,KAAK,4BAA4B;oBAC/B,OAAO,CAAC,KAAK,CAAC,yCAAyC,CAAC,CAAC;oBACzD,MAAM;YACV,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,uEAAuE;QACvE,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,cAAc,EAAE,CAAC;YACpC,IAAI,IAAI,EAAE,CAAC;gBACT,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;gBAC3B,MAAM,IAAI,CAAC,eAAe,EAAE,CAAC;YAC/B,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,uDAAuD;YACvD,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;QAC9B,CAAC;QAED,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC;IAC3B,CAAC;IAES,KAAK,CAAC,aAAa,CAAC,QAAkC;QAC9D,MAAM,IAAI,CAAC,iBAAiB,EAAE,CAAC;QAC/B,+EAA+E;QAC/E,MAAM,kBAAkB,EAAE,CAAC;IAC7B,CAAC;IAES,KAAK,CAAC,cAAc;QAC5B,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;QAC5B,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;QAE1B,+DAA+D;QAC/D,IAAI,CAAC,iBAAiB,EAAE,CAAC;QAEzB,MAAM,OAAO,EAAE,CAAC;QAChB,0EAA0E;QAC1E,iEAAiE;IACnE,CAAC;IAED,KAAK,CAAC,cAAc;QAClB,uEAAuE;QACvE,wEAAwE;QACxE,wEAAwE;QACxE,iBAAiB;QACjB,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,cAAc,EAAE,CAAC;YACpC,IAAI,IAAI,EAAE,CAAC;gBACT,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;gBAC3B,MAAM,IAAI,CAAC,eAAe,EAAE,CAAC;YAC/B,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,mCAAmC;QACrC,CAAC;IACH,CAAC;IAED,+EAA+E;IAC/E,2CAA2C;IAC3C,+EAA+E;IAE/E;;;;;OAKG;IACO,KAAK,CAAC,sBAAsB;QACpC,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,gBAAgB,EAAE,CAAC;YACzC,OAAO,OAAO,CAAC,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,IAAI,CAAC;QACrD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,KAAK,CAAC,sCAAsC,EAAE,KAAK,CAAC,CAAC;YAC7D,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED;;;OAGG;IACO,KAAK,CAAC,wBAAwB;QACtC,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,gBAAgB,EAAE,CAAC;YACzC,MAAM,OAAO,GAAG,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC;YACxC,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,OAAO,IAAI,CAAC;YACd,CAAC;YAED,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;YAChC,MAAM,WAAW,GAAG,OAAO,CAAC,MAAM,EAAE,WAAW,CAAC;YAEhD,OAAO;gBACL,OAAO,EAAE,OAAO,CAAC,QAAQ,EAAE;gBAC3B,WAAW,EAAE,WAAW,EAAE,QAAQ,EAAE;gBACpC,SAAS,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC,CAAE,OAAO,CAAC,GAAc,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,gBAAgB;gBAC9E,MAAM,EAAE,IAAI,CAAC,aAAa,CAAC,WAAW,CAAC;aACxC,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,KAAK,CAAC,wCAAwC,EAAE,KAAK,CAAC,CAAC;YAC/D,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED;;;OAGG;IACO,KAAK,CAAC,uBAAuB;QACrC,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,cAAc,EAAE,CAAC;YACpC,MAAM,UAAU,GAAG,MAAM,mBAAmB,EAAE,CAAC;YAE/C,OAAO,IAAI,CAAC,8BAA8B,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;QAC/D,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,KAAK,CAAC,uCAAuC,EAAE,KAAK,CAAC,CAAC;YAC9D,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED;;;;;;OAMG;IACO,KAAK,CAAC,oBAAoB;QAClC,IAAI,CAAC;YACH,OAAO,CAAC,GAAG,CAAC,0CAA0C,CAAC,CAAC;YAExD,MAAM,OAAO,GAAG,MAAM,gBAAgB,CAAC,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC;YAC/D,MAAM,OAAO,GAAG,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC;YAExC,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,OAAO;oBACL,OAAO,EAAE,KAAK;oBACd,KAAK,EAAE;wBACL,IAAI,EAAE,aAAa,CAAC,iBAAiB;wBACrC,OAAO,EAAE,kDAAkD;wBAC3D,WAAW,EAAE,8CAA8C;qBAC5D;iBACF,CAAC;YACJ,CAAC;YAED,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;YAChC,MAAM,WAAW,GAAG,OAAO,CAAC,MAAM,EAAE,WAAW,CAAC;YAEhD,OAAO,CAAC,GAAG,CAAC,oCAAoC,EAAE;gBAChD,SAAS,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,IAAI,CAAE,OAAO,CAAC,GAAc,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,KAAK;aACzF,CAAC,CAAC;YAEH,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,KAAK,EAAE;oBACL,OAAO,EAAE,OAAO,CAAC,QAAQ,EAAE;oBAC3B,WAAW,EAAE,WAAW,EAAE,QAAQ,EAAE;oBACpC,SAAS,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC,CAAE,OAAO,CAAC,GAAc,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;oBAC5D,MAAM,EAAE,IAAI,CAAC,aAAa,CAAC,WAAW,CAAC;iBACxC;aACF,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,KAAK,CAAC,iCAAiC,EAAE,KAAK,CAAC,CAAC;YACxD,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,IAAI,CAAC,qBAAqB,CAAC,KAAK,CAAC;aACzC,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;;;OAIG;IACO,qBAAqB,CAAC,KAAc;QAC5C,MAAM,QAAQ,GAAG,KAAgC,CAAC;QAClD,MAAM,OAAO,GAAI,QAAQ,EAAE,CAAC,SAAS,CAAY,IAAI,eAAe,CAAC;QACrE,MAAM,IAAI,GAAI,QAAQ,EAAE,CAAC,MAAM,CAAY,IAAI,EAAE,CAAC;QAElD,iCAAiC;QACjC,IAAI,IAAI,KAAK,8BAA8B;YACvC,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAC;YACrC,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAC;YACnC,IAAI,KAAK,uBAAuB,EAAE,CAAC;YACrC,OAAO;gBACL,IAAI,EAAE,aAAa,CAAC,iBAAiB;gBACrC,OAAO;gBACP,aAAa,EAAE,KAAK;gBACpB,WAAW,EAAE,iCAAiC;aAC/C,CAAC;QACJ,CAAC;QAED,wCAAwC;QACxC,IAAI,IAAI,KAAK,wBAAwB;YACjC,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAC;YAClC,OAAO,CAAC,QAAQ,CAAC,uBAAuB,CAAC;YACzC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC;YAC3B,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAC,EAAE,CAAC;YACtC,OAAO;gBACL,IAAI,EAAE,aAAa,CAAC,aAAa;gBACjC,OAAO;gBACP,aAAa,EAAE,KAAK;gBACpB,WAAW,EAAE,gDAAgD;aAC9D,CAAC;QACJ,CAAC;QAED,uBAAuB;QACvB,IAAI,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC;YAC7D,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAC,EAAE,CAAC;YACpC,OAAO;gBACL,IAAI,EAAE,aAAa,CAAC,cAAc;gBAClC,OAAO;gBACP,aAAa,EAAE,KAAK;gBACpB,WAAW,EAAE,sBAAsB;aACpC,CAAC;QACJ,CAAC;QAED,iBAAiB;QACjB,IAAI,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC;YACxD,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAC,EAAE,CAAC;YACnE,OAAO;gBACL,IAAI,EAAE,aAAa,CAAC,aAAa;gBACjC,OAAO;gBACP,aAAa,EAAE,KAAK;gBACpB,WAAW,EAAE,4DAA4D;aAC1E,CAAC;QACJ,CAAC;QAED,6BAA6B;QAC7B,IAAI,IAAI,KAAK,4BAA4B;YACrC,IAAI,KAAK,0BAA0B;YACnC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAC,EAAE,CAAC;YACnE,OAAO;gBACL,IAAI,EAAE,aAAa,CAAC,mBAAmB;gBACvC,OAAO;gBACP,aAAa,EAAE,KAAK;gBACpB,WAAW,EAAE,6DAA6D;aAC3E,CAAC;QACJ,CAAC;QAED,qBAAqB;QACrB,OAAO;YACL,IAAI,EAAE,aAAa,CAAC,aAAa;YACjC,OAAO;YACP,aAAa,EAAE,KAAK;YACpB,WAAW,EAAE,iDAAiD;SAC/D,CAAC;IACJ,CAAC;IAED;;;;;OAKG;IACO,KAAK,CAAC,4BAA4B;QAC1C,IAAI,CAAC;YACH,MAAM,UAAU,GAAG,MAAM,mBAAmB,EAAE,CAAC;YAC/C,OAAO,UAAU,CAAC,OAAO,IAAI,IAAI,CAAC;QACpC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,KAAK,CAAC,0CAA0C,EAAE,KAAK,CAAC,CAAC;YACjE,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED;;;;;;OAMG;IACO,KAAK,CAAC,2BAA2B;QACzC,OAAO,CAAC,GAAG,CAAC,2EAA2E,CAAC,CAAC;QACzF,MAAM,kBAAkB,EAAE,CAAC;QAC3B,4CAA4C;IAC9C,CAAC;IAED,+EAA+E;IAC/E,iBAAiB;IACjB,+EAA+E;IAEvE,KAAK,CAAC,iBAAiB;QAC7B,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC;YACvB,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC;QAC1B,CAAC;IACH,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,eAAe;QAC3B,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,uBAAuB,EAAE,CAAC;YACtD,IAAI,QAAQ,EAAE,CAAC;gBACb,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC;YAChC,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,IAAI,CAAC,wCAAwC,EAAE,KAAK,CAAC,CAAC;QAChE,CAAC;IACH,CAAC;IAED;;;;;OAKG;IACK,8BAA8B,CACpC,IAAgF,EAChF,UAA2C;QAE3C,MAAM,SAAS,GAAG,UAAU,CAAC,YAAY,CAAC,CAAC;QAC3C,MAAM,UAAU,GAAG,UAAU,CAAC,aAAa,CAAC,CAAC;QAC7C,MAAM,QAAQ,GAAG,UAAU,CAAC,MAAM,CAAC;YACjC,CAAC,SAAS,IAAI,UAAU,CAAC,CAAC,CAAC,GAAG,SAAS,IAAI,UAAU,EAAE,CAAC,CAAC,CAAC,SAAS,IAAI,UAAU,IAAI,EAAE,CAAC,CAAC;QAE3F,OAAO;YACL,EAAE,EAAE,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,QAAQ;YAChC,KAAK,EAAE,UAAU,CAAC,OAAO,CAAC,IAAI,EAAE;YAChC,IAAI,EAAE,QAAQ;YACd,SAAS;YACT,UAAU;YACV,iBAAiB,EAAE,UAAU,CAAC,oBAAoB,CAAC,IAAI,IAAI,CAAC,QAAQ;YACpE,UAAU,EAAE,UAAU,CAAC,SAAS,CAAC;YACjC,aAAa,EAAE,UAAU,CAAC,gBAAgB,CAAC,KAAK,MAAM;YACtD,MAAM,EAAE,UAAU,CAAC,QAAQ,CAAC;SAC7B,CAAC;IACJ,CAAC;IAED;;OAEG;IACK,aAAa,CAAC,WAA8D;QAClF,MAAM,KAAK,GAAG,WAAW,EAAE,OAAO,EAAE,CAAC,OAAO,CAAC,CAAC;QAC9C,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC9B,OAAO,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC1B,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IAED;;OAEG;IACK,iBAAiB;QACvB,IAAI,IAAI,CAAC,kBAAkB,EAAE,CAAC;YAC5B,IAAI,CAAC,kBAAkB,EAAE,CAAC;YAC1B,IAAI,CAAC,kBAAkB,GAAG,IAAI,CAAC;QACjC,CAAC;IACH,CAAC;IAED,+EAA+E;IAC/E,gBAAgB;IAChB,+EAA+E;IAEtE,iBAAiB;QACxB,OAAO,CAAC,YAAY,EAAE,kBAAkB,EAAE,QAAQ,CAAC,CAAC;IACtD,CAAC;IAEQ,cAAc,CAAC,MAA+B;QACrD,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,IAAI,MAAM,CAAC,kBAAkB,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;IACpF,CAAC;2GAtcU,iBAAiB,cA6BR,eAAe;gEA7BxB,iBAAiB,WAAjB,iBAAiB,mBAHhB,MAAM;;AAGP,iBAAiB;IAD7B,aAAa,CAAC,UAAU,EAAE,SAAS,CAAC;GACxB,iBAAiB,CAuc7B;;iFAvcY,iBAAiB;cAJ7B,UAAU;eAAC;gBACV,UAAU,EAAE,MAAM;aACnB;;sBA+Bc,MAAM;uBAAC,eAAe","sourcesContent":["import { Injectable, Inject } from '@angular/core';\nimport { RegisterClass } from '@memberjunction/global';\nimport { MJAuthBase } from '../mjexplorer-auth-base.service';\nimport { AngularAuthProviderConfig } from '../IAuthProvider';\nimport { Amplify } from 'aws-amplify';\nimport {\n  signInWithRedirect,\n  signOut,\n  fetchAuthSession,\n  getCurrentUser,\n  fetchUserAttributes\n} from 'aws-amplify/auth';\nimport { Hub } from 'aws-amplify/utils';\nimport {\n  StandardUserInfo,\n  StandardAuthToken,\n  StandardAuthError,\n  AuthErrorType,\n  TokenRefreshResult\n} from '../auth-types';\n\n/**\n * Configuration interface for the Cognito provider.\n * Populated from environment config via the `angularProviderFactory`.\n */\ninterface CognitoConfig {\n  userPoolId: string;\n  userPoolClientId: string;\n  region?: string;\n  /** Cognito Hosted UI domain, e.g. 'myapp.auth.us-east-1.amazoncognito.com' */\n  domain: string;\n  /** OAuth redirect URI. Defaults to window.location.origin */\n  redirectUri?: string;\n  /** OAuth scopes. Defaults to ['openid', 'profile', 'email'] */\n  scopes?: string[];\n  /** When true, skips redirect callback processing (for MCP OAuth callback path) */\n  skipRedirectCallback?: boolean;\n}\n\n/**\n * AWS Cognito authentication provider implementation - v3.0.0\n *\n * Implements the abstract methods from MJAuthBase to hide Cognito-specific details.\n * Uses AWS Amplify v6 (tree-shakeable subpath imports) for authentication.\n *\n * Key abstraction: Cognito stores tokens in Amplify's internal storage, accessed\n * via `fetchAuthSession().tokens?.idToken?.toString()`. Consumers never need to\n * know this detail.\n *\n * ## Cognito Hosted UI Flow\n * This provider uses the Cognito Hosted UI for login via `signInWithRedirect()`.\n * The flow is: redirect to Hosted UI -> user authenticates -> redirect back with\n * authorization code -> Amplify exchanges code for tokens (PKCE).\n */\n@Injectable({\n  providedIn: 'root'\n})\n@RegisterClass(MJAuthBase, 'cognito')\nexport class MJCognitoProvider extends MJAuthBase {\n  static readonly PROVIDER_TYPE = 'cognito';\n  readonly type = MJCognitoProvider.PROVIDER_TYPE;\n  private _initialized = false;\n  private _hubListenerCancel: (() => void) | null = null;\n\n  /**\n   * Factory function to provide Angular dependencies required by the Cognito provider.\n   * Returns a config injection token following the Okta provider pattern.\n   */\n  static angularProviderFactory = (environment: Record<string, unknown>) => {\n    const isMCPOAuthCallback = window.location.pathname.startsWith('/oauth/callback');\n\n    return [\n      {\n        provide: 'cognitoConfig',\n        useValue: {\n          userPoolId: environment['COGNITO_USER_POOL_ID'],\n          userPoolClientId: environment['COGNITO_CLIENT_ID'] || environment['COGNITO_CLIENTID'],\n          region: environment['COGNITO_REGION'] || environment['AWS_REGION'],\n          domain: environment['COGNITO_DOMAIN'],\n          redirectUri: environment['COGNITO_REDIRECT_URI'] || window.location.origin,\n          scopes: environment['COGNITO_SCOPES'] || ['openid', 'profile', 'email', 'aws.cognito.signin.user.admin'],\n          skipRedirectCallback: isMCPOAuthCallback,\n        } as CognitoConfig\n      }\n    ];\n  };\n\n  constructor(@Inject('cognitoConfig') private cognitoConfig: CognitoConfig) {\n    const config: AngularAuthProviderConfig = {\n      name: MJCognitoProvider.PROVIDER_TYPE,\n      type: MJCognitoProvider.PROVIDER_TYPE\n    };\n    super(config);\n\n    // Configure Amplify with the existing Cognito User Pool\n    const redirectUri = this.cognitoConfig.redirectUri || window.location.origin;\n    Amplify.configure({\n      Auth: {\n        Cognito: {\n          userPoolId: this.cognitoConfig.userPoolId,\n          userPoolClientId: this.cognitoConfig.userPoolClientId,\n          loginWith: {\n            oauth: {\n              domain: this.cognitoConfig.domain,\n              scopes: this.cognitoConfig.scopes || ['openid', 'profile', 'email', 'aws.cognito.signin.user.admin'],\n              redirectSignIn: [redirectUri],\n              redirectSignOut: [redirectUri],\n              responseType: 'code', // Authorization code + PKCE for refresh tokens\n            }\n          }\n        }\n      }\n    });\n  }\n\n  // ============================================================================\n  // LIFECYCLE METHODS\n  // ============================================================================\n\n  async initialize(): Promise<void> {\n    if (this._initialized) {\n      return;\n    }\n\n    // CRITICAL: Skip Amplify's redirect handling on the MCP OAuth callback path.\n    // The /oauth/callback path is used by MCP OAuth, not Cognito. If we don't skip,\n    // Amplify will consume the authorization code and prevent the MCP OAuth flow.\n    if (this.cognitoConfig.skipRedirectCallback) {\n      this._initialized = true;\n      return;\n    }\n\n    // Set up Hub listener for reactive auth events\n    this._hubListenerCancel = Hub.listen('auth', async ({ payload }) => {\n      switch (payload.event) {\n        case 'signedIn':\n          this.updateAuthState(true);\n          await this.refreshUserInfo();\n          break;\n        case 'signedOut':\n          this.updateAuthState(false);\n          this.updateUserInfo(null);\n          break;\n        case 'tokenRefresh':\n          console.log('[Cognito] Token refreshed successfully');\n          break;\n        case 'tokenRefresh_failure':\n          console.warn('[Cognito] Token refresh failed');\n          break;\n        case 'signInWithRedirect':\n          console.log('[Cognito] OAuth redirect sign-in completed');\n          break;\n        case 'signInWithRedirect_failure':\n          console.error('[Cognito] OAuth redirect sign-in failed');\n          break;\n      }\n    });\n\n    // Check for existing session (page refresh or returning from redirect)\n    try {\n      const user = await getCurrentUser();\n      if (user) {\n        this.updateAuthState(true);\n        await this.refreshUserInfo();\n      }\n    } catch {\n      // Not authenticated — this is expected on fresh visits\n      this.updateAuthState(false);\n    }\n\n    this._initialized = true;\n  }\n\n  protected async loginInternal(_options?: Record<string, unknown>): Promise<void> {\n    await this.ensureInitialized();\n    // Redirect to Cognito Hosted UI. This navigates the browser and never returns.\n    await signInWithRedirect();\n  }\n\n  protected async logoutInternal(): Promise<void> {\n    this.updateAuthState(false);\n    this.updateUserInfo(null);\n\n    // Cancel Hub listener before sign-out to avoid race conditions\n    this.cancelHubListener();\n\n    await signOut();\n    // signOut() clears local tokens. With Hosted UI, it also redirects to the\n    // Cognito logout endpoint to clear the Hosted UI session cookie.\n  }\n\n  async handleCallback(): Promise<void> {\n    // Amplify v6 handles OAuth code exchange automatically when it detects\n    // ?code= and ?state= in the URL during initialization. The Hub listener\n    // catches 'signInWithRedirect' events. This method exists for interface\n    // compatibility.\n    try {\n      const user = await getCurrentUser();\n      if (user) {\n        this.updateAuthState(true);\n        await this.refreshUserInfo();\n      }\n    } catch {\n      // Not authenticated after callback\n    }\n  }\n\n  // ============================================================================\n  // ABSTRACT METHOD IMPLEMENTATIONS (v3.0.0)\n  // ============================================================================\n\n  /**\n   * Extract ID token from Cognito via Amplify's fetchAuthSession.\n   *\n   * Cognito stores the JWT in session.tokens.idToken. The .toString()\n   * call extracts the raw JWT string. Consumers never need to know this detail.\n   */\n  protected async extractIdTokenInternal(): Promise<string | null> {\n    try {\n      const session = await fetchAuthSession();\n      return session.tokens?.idToken?.toString() || null;\n    } catch (error) {\n      console.error('[Cognito] Error extracting ID token:', error);\n      return null;\n    }\n  }\n\n  /**\n   * Extract complete token info from Cognito session.\n   * Maps Amplify's token structure to StandardAuthToken.\n   */\n  protected async extractTokenInfoInternal(): Promise<StandardAuthToken | null> {\n    try {\n      const session = await fetchAuthSession();\n      const idToken = session.tokens?.idToken;\n      if (!idToken) {\n        return null;\n      }\n\n      const payload = idToken.payload;\n      const accessToken = session.tokens?.accessToken;\n\n      return {\n        idToken: idToken.toString(),\n        accessToken: accessToken?.toString(),\n        expiresAt: payload?.exp ? (payload.exp as number) * 1000 : 0, // Convert to ms\n        scopes: this.extractScopes(accessToken)\n      };\n    } catch (error) {\n      console.error('[Cognito] Error extracting token info:', error);\n      return null;\n    }\n  }\n\n  /**\n   * Extract user info from Cognito user attributes.\n   * Maps Cognito's attribute structure to StandardUserInfo.\n   */\n  protected async extractUserInfoInternal(): Promise<StandardUserInfo | null> {\n    try {\n      const user = await getCurrentUser();\n      const attributes = await fetchUserAttributes();\n\n      return this.mapCognitoAttributesToStandard(user, attributes);\n    } catch (error) {\n      console.error('[Cognito] Error extracting user info:', error);\n      return null;\n    }\n  }\n\n  /**\n   * Refresh token using Amplify's fetchAuthSession with forceRefresh.\n   *\n   * Amplify v6 handles the entire refresh token exchange internally:\n   * fetchAuthSession({ forceRefresh: true }) uses the stored refresh token\n   * to obtain new ID and access tokens from Cognito.\n   */\n  protected async refreshTokenInternal(): Promise<TokenRefreshResult> {\n    try {\n      console.log('[Cognito] Attempting to refresh token...');\n\n      const session = await fetchAuthSession({ forceRefresh: true });\n      const idToken = session.tokens?.idToken;\n\n      if (!idToken) {\n        return {\n          success: false,\n          error: {\n            type: AuthErrorType.NO_ACTIVE_SESSION,\n            message: 'Token refresh succeeded but no ID token returned',\n            userMessage: 'Session refresh failed. Please log in again.'\n          }\n        };\n      }\n\n      const payload = idToken.payload;\n      const accessToken = session.tokens?.accessToken;\n\n      console.log('[Cognito] Token refresh successful', {\n        expiresAt: payload?.exp ? new Date((payload.exp as number) * 1000).toISOString() : 'N/A'\n      });\n\n      return {\n        success: true,\n        token: {\n          idToken: idToken.toString(),\n          accessToken: accessToken?.toString(),\n          expiresAt: payload?.exp ? (payload.exp as number) * 1000 : 0,\n          scopes: this.extractScopes(accessToken)\n        }\n      };\n    } catch (error) {\n      console.error('[Cognito] Token refresh failed:', error);\n      return {\n        success: false,\n        error: this.classifyErrorInternal(error)\n      };\n    }\n  }\n\n  /**\n   * Classify Cognito/Amplify-specific errors into semantic types.\n   *\n   * Maps Amplify v6 error names and messages to AuthErrorType enum.\n   */\n  protected classifyErrorInternal(error: unknown): StandardAuthError {\n    const errorObj = error as Record<string, unknown>;\n    const message = (errorObj?.['message'] as string) || 'Unknown error';\n    const name = (errorObj?.['name'] as string) || '';\n\n    // Not authenticated / no session\n    if (name === 'UserUnAuthenticatedException' ||\n        message.includes('not authenticated') ||\n        message.includes('No current user') ||\n        name === 'UserNotFoundException') {\n      return {\n        type: AuthErrorType.NO_ACTIVE_SESSION,\n        message,\n        originalError: error,\n        userMessage: 'You need to log in to continue.'\n      };\n    }\n\n    // Token expired / invalid refresh token\n    if (name === 'NotAuthorizedException' ||\n        message.includes('not authorized') ||\n        message.includes('Invalid Refresh Token') ||\n        message.includes('expired') ||\n        message.includes('invalid_grant')) {\n      return {\n        type: AuthErrorType.TOKEN_EXPIRED,\n        message,\n        originalError: error,\n        userMessage: 'Your session has expired. Please log in again.'\n      };\n    }\n\n    // User cancelled login\n    if (message.includes('cancelled') || message.includes('canceled') ||\n        message.includes('user denied')) {\n      return {\n        type: AuthErrorType.USER_CANCELLED,\n        message,\n        originalError: error,\n        userMessage: 'Login was cancelled.'\n      };\n    }\n\n    // Network errors\n    if (message.includes('network') || message.includes('fetch') ||\n        message.includes('Network') || message.includes('Load failed')) {\n      return {\n        type: AuthErrorType.NETWORK_ERROR,\n        message,\n        originalError: error,\n        userMessage: 'Network error. Please check your connection and try again.'\n      };\n    }\n\n    // OAuth configuration errors\n    if (name === 'OAuthNotConfigureException' ||\n        name === 'AuthTokenConfigException' ||\n        message.includes('OAuth') || message.includes('configuration')) {\n      return {\n        type: AuthErrorType.CONFIGURATION_ERROR,\n        message,\n        originalError: error,\n        userMessage: 'Authentication configuration error. Please contact support.'\n      };\n    }\n\n    // Default to unknown\n    return {\n      type: AuthErrorType.UNKNOWN_ERROR,\n      message,\n      originalError: error,\n      userMessage: 'An unexpected error occurred. Please try again.'\n    };\n  }\n\n  /**\n   * Get profile picture URL from Cognito user attributes.\n   *\n   * Cognito can store a `picture` attribute if configured in the user pool.\n   * Returns null if the attribute is not set.\n   */\n  protected async getProfilePictureUrlInternal(): Promise<string | null> {\n    try {\n      const attributes = await fetchUserAttributes();\n      return attributes.picture || null;\n    } catch (error) {\n      console.error('[Cognito] Error getting profile picture:', error);\n      return null;\n    }\n  }\n\n  /**\n   * Handle session expiry by redirecting to Cognito Hosted UI.\n   *\n   * Cognito uses refresh tokens (responseType: 'code'), so silent refresh\n   * usually works. If it fails, we redirect to the Hosted UI for\n   * re-authentication. This will navigate the browser and may never return.\n   */\n  protected async handleSessionExpiryInternal(): Promise<void> {\n    console.log('[Cognito] Session expired, redirecting to Hosted UI for re-authentication');\n    await signInWithRedirect();\n    // This redirects the page and never returns\n  }\n\n  // ============================================================================\n  // HELPER METHODS\n  // ============================================================================\n\n  private async ensureInitialized(): Promise<void> {\n    if (!this._initialized) {\n      await this.initialize();\n    }\n  }\n\n  /**\n   * Refresh user info from Cognito and update the reactive state.\n   */\n  private async refreshUserInfo(): Promise<void> {\n    try {\n      const userInfo = await this.extractUserInfoInternal();\n      if (userInfo) {\n        this.updateUserInfo(userInfo);\n      }\n    } catch (error) {\n      console.warn('[Cognito] Failed to refresh user info:', error);\n    }\n  }\n\n  /**\n   * Map Cognito user attributes to StandardUserInfo.\n   *\n   * Cognito attributes use snake_case keys (email, given_name, family_name, etc.)\n   * and all values are strings (including booleans like email_verified = 'true').\n   */\n  private mapCognitoAttributesToStandard(\n    user: { userId: string; username: string; signInDetails?: { loginId?: string } },\n    attributes: Partial<Record<string, string>>\n  ): StandardUserInfo {\n    const givenName = attributes['given_name'];\n    const familyName = attributes['family_name'];\n    const fullName = attributes['name'] ||\n      (givenName && familyName ? `${givenName} ${familyName}` : givenName || familyName || '');\n\n    return {\n      id: user.userId || user.username,\n      email: attributes['email'] || '',\n      name: fullName,\n      givenName,\n      familyName,\n      preferredUsername: attributes['preferred_username'] || user.username,\n      pictureUrl: attributes['picture'],\n      emailVerified: attributes['email_verified'] === 'true',\n      locale: attributes['locale'],\n    };\n  }\n\n  /**\n   * Extract OAuth scopes from an access token's payload.\n   */\n  private extractScopes(accessToken: { payload?: Record<string, unknown> } | undefined): string[] | undefined {\n    const scope = accessToken?.payload?.['scope'];\n    if (typeof scope === 'string') {\n      return scope.split(' ');\n    }\n    return undefined;\n  }\n\n  /**\n   * Cancel the Hub event listener if active.\n   */\n  private cancelHubListener(): void {\n    if (this._hubListenerCancel) {\n      this._hubListenerCancel();\n      this._hubListenerCancel = null;\n    }\n  }\n\n  // ============================================================================\n  // CONFIGURATION\n  // ============================================================================\n\n  override getRequiredConfig(): string[] {\n    return ['userPoolId', 'userPoolClientId', 'domain'];\n  }\n\n  override validateConfig(config: Record<string, unknown>): boolean {\n    return !!(config['userPoolId'] && config['userPoolClientId'] && config['domain']);\n  }\n}\n"]}

package/dist/public-api.d.ts

@@ -7,4 +7,5 @@ export * from './lib/AngularAuthProviderFactory';
 export * from './lib/providers/mjexplorer-msal-provider.service';
 export * from './lib/providers/mjexplorer-auth0-provider.service';
 export * from './lib/providers/mjexplorer-okta-provider.service';
+export * from './lib/providers/mjexplorer-cognito-provider.service';
 //# sourceMappingURL=public-api.d.ts.map

package/dist/public-api.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"public-api.d.ts","sourceRoot":"","sources":["../src/public-api.ts"],"names":[],"mappings":"AAKA,cAAc,oCAAoC,CAAC;AACnD,cAAc,4BAA4B,CAAC;AAC3C,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAG7D,cAAc,kBAAkB,CAAC;AAGjC,cAAc,qBAAqB,CAAC;AACpC,cAAc,kCAAkC,CAAC;AAGjD,cAAc,kDAAkD,CAAC;AACjE,cAAc,mDAAmD,CAAC;AAClE,cAAc,kDAAkD,CAAC"}
+{"version":3,"file":"public-api.d.ts","sourceRoot":"","sources":["../src/public-api.ts"],"names":[],"mappings":"AAKA,cAAc,oCAAoC,CAAC;AACnD,cAAc,4BAA4B,CAAC;AAC3C,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAG7D,cAAc,kBAAkB,CAAC;AAGjC,cAAc,qBAAqB,CAAC;AACpC,cAAc,kCAAkC,CAAC;AAGjD,cAAc,kDAAkD,CAAC;AACjE,cAAc,mDAAmD,CAAC;AAClE,cAAc,kDAAkD,CAAC;AACjE,cAAc,qDAAqD,CAAC"}

package/dist/public-api.js

@@ -14,4 +14,5 @@ export * from './lib/AngularAuthProviderFactory';
 export * from './lib/providers/mjexplorer-msal-provider.service';
 export * from './lib/providers/mjexplorer-auth0-provider.service';
 export * from './lib/providers/mjexplorer-okta-provider.service';
+export * from './lib/providers/mjexplorer-cognito-provider.service';
 //# sourceMappingURL=public-api.js.map

package/dist/public-api.js.map

@@ -1 +1 @@
-{"version":3,"file":"public-api.js","sourceRoot":"","sources":["../src/public-api.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,eAAe;AACf,cAAc,oCAAoC,CAAC;AACnD,cAAc,4BAA4B,CAAC;AAC3C,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAE7D,2CAA2C;AAC3C,cAAc,kBAAkB,CAAC;AAEjC,oBAAoB;AACpB,cAAc,qBAAqB,CAAC;AACpC,cAAc,kCAAkC,CAAC;AAEjD,2BAA2B;AAC3B,cAAc,kDAAkD,CAAC;AACjE,cAAc,mDAAmD,CAAC;AAClE,cAAc,kDAAkD,CAAC","sourcesContent":["/*\n * Public API Surface\n */\n\n// Core exports\nexport * from './lib/mjexplorer-auth-base.service';\nexport * from './lib/auth-services.module';\nexport { RedirectComponent } from './lib/redirect.component';\n\n// Type exports - v3.0.0 standardized types\nexport * from './lib/auth-types';\n\n// Interface exports\nexport * from './lib/IAuthProvider';\nexport * from './lib/AngularAuthProviderFactory';\n\n// Provider implementations\nexport * from './lib/providers/mjexplorer-msal-provider.service';\nexport * from './lib/providers/mjexplorer-auth0-provider.service';\nexport * from './lib/providers/mjexplorer-okta-provider.service';"]}
+{"version":3,"file":"public-api.js","sourceRoot":"","sources":["../src/public-api.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,eAAe;AACf,cAAc,oCAAoC,CAAC;AACnD,cAAc,4BAA4B,CAAC;AAC3C,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAE7D,2CAA2C;AAC3C,cAAc,kBAAkB,CAAC;AAEjC,oBAAoB;AACpB,cAAc,qBAAqB,CAAC;AACpC,cAAc,kCAAkC,CAAC;AAEjD,2BAA2B;AAC3B,cAAc,kDAAkD,CAAC;AACjE,cAAc,mDAAmD,CAAC;AAClE,cAAc,kDAAkD,CAAC;AACjE,cAAc,qDAAqD,CAAC","sourcesContent":["/*\n * Public API Surface\n */\n\n// Core exports\nexport * from './lib/mjexplorer-auth-base.service';\nexport * from './lib/auth-services.module';\nexport { RedirectComponent } from './lib/redirect.component';\n\n// Type exports - v3.0.0 standardized types\nexport * from './lib/auth-types';\n\n// Interface exports\nexport * from './lib/IAuthProvider';\nexport * from './lib/AngularAuthProviderFactory';\n\n// Provider implementations\nexport * from './lib/providers/mjexplorer-msal-provider.service';\nexport * from './lib/providers/mjexplorer-auth0-provider.service';\nexport * from './lib/providers/mjexplorer-okta-provider.service';\nexport * from './lib/providers/mjexplorer-cognito-provider.service';"]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@memberjunction/ng-auth-services",
-  "version": "5.23.0",
+  "version": "5.25.0",
   "description": "MemberJunction Explorer: Authentication Services",
   "main": "./dist/public-api.js",
   "typings": "./dist/public-api.d.ts",
@@ -27,11 +27,12 @@
     "@azure/msal-angular": "^5.0.3",
     "@azure/msal-browser": "^5.1.0",
     "@azure/msal-common": "^16.0.3",
-    "@okta/okta-auth-js": "^7.14.1"
+    "@okta/okta-auth-js": "^7.14.1",
+    "aws-amplify": "^6.0.0"
   },
   "dependencies": {
-    "@memberjunction/core": "5.23.0",
-    "@memberjunction/global": "5.23.0",
+    "@memberjunction/core": "5.25.0",
+    "@memberjunction/global": "5.25.0",
     "rxjs": "^7.8.2",
     "tslib": "^2.8.1"
   },