@memberjunction/ng-auth-services 6.2.0-edge.0 → 6.2.0-edge.1

package/dist/lib/AngularAuthProviderFactory.d.ts

@@ -18,27 +18,39 @@ export declare class AngularAuthProviderFactory {
     /**
      * Create a provider based on configuration
      */
+    CreateProvider(config: AngularAuthProviderConfig): IAngularAuthProvider;
+    /** @deprecated Use {@link CreateProvider}. */
     createProvider(config: AngularAuthProviderConfig): IAngularAuthProvider;
     /**
      * Get a provider by type
      */
+    GetProvider(type: string): IAngularAuthProvider | undefined;
+    /** @deprecated Use {@link GetProvider}. */
     getProvider(type: string): IAngularAuthProvider | undefined;
     /**
      * Get all registered provider types
      */
+    GetRegisteredTypes(): string[];
+    /** @deprecated Use {@link GetRegisteredTypes}. */
     getRegisteredTypes(): string[];
     /**
      * Check if a provider type is registered
      */
+    IsTypeRegistered(type: string): boolean;
+    /** @deprecated Use {@link IsTypeRegistered}. */
     isTypeRegistered(type: string): boolean;
     /**
      * Clear all providers (useful for testing)
      */
+    ClearProviders(): void;
+    /** @deprecated Use {@link ClearProviders}. */
     clearProviders(): void;
     /**
      * Get provider-specific Angular services that need to be injected
      * This uses the static angularProviderFactory property on each provider class for extensibility
      */
+    static GetProviderAngularServices(type: string, environment: any): any[];
+    /** @deprecated Use {@link GetProviderAngularServices}. */
     static getProviderAngularServices(type: string, environment: any): any[];
     static ɵfac: i0.ɵɵFactoryDeclaration<AngularAuthProviderFactory, never>;
     static ɵprov: i0.ɵɵInjectableDeclaration<AngularAuthProviderFactory>;

package/dist/lib/AngularAuthProviderFactory.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"AngularAuthProviderFactory.d.ts","sourceRoot":"","sources":["../../src/lib/AngularAuthProviderFactory.ts"],"names":[],"mappings":"AAAA,OAAO,EAAc,QAAQ,EAAE,MAAM,eAAe,CAAC;AAGrD,OAAO,EAAE,oBAAoB,EAAE,yBAAyB,EAAE,MAAM,iBAAiB,CAAC;;AAElF;;;GAGG;AACH,qBAGa,0BAA0B;IAKzB,OAAO,CAAC,QAAQ;IAJ5B,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,eAAe,CAA8C;IACrF,OAAO,CAAC,SAAS,CAAgD;IACjE,OAAO,CAAC,eAAe,CAA+B;gBAElC,QAAQ,EAAE,QAAQ;IAQtC;;OAEG;IACH,WAAkB,QAAQ,IAAI,0BAA0B,CAMvD;IAED;;OAEG;IACH,cAAc,CAAC,MAAM,EAAE,yBAAyB,GAAG,oBAAoB;IAoCvE;;OAEG;IACH,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,oBAAoB,GAAG,SAAS;IAI3D;;OAEG;IACH,kBAAkB,IAAI,MAAM,EAAE;IAO9B;;OAEG;IACH,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO;IAIvC;;OAEG;IACH,cAAc,IAAI,IAAI;IAKtB;;;OAGG;IACH,MAAM,CAAC,0BAA0B,CAAC,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,GAAG,GAAG,GAAG,EAAE;yCAnG7D,0BAA0B;6CAA1B,0BAA0B;CAoItC"}
+{"version":3,"file":"AngularAuthProviderFactory.d.ts","sourceRoot":"","sources":["../../src/lib/AngularAuthProviderFactory.ts"],"names":[],"mappings":"AAAA,OAAO,EAAc,QAAQ,EAAE,MAAM,eAAe,CAAC;AAGrD,OAAO,EAAE,oBAAoB,EAAE,yBAAyB,EAAE,MAAM,iBAAiB,CAAC;;AAElF;;;GAGG;AACH,qBAGa,0BAA0B;IAKzB,OAAO,CAAC,QAAQ;IAJ5B,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,eAAe,CAA8C;IACrF,OAAO,CAAC,SAAS,CAAgD;IACjE,OAAO,CAAC,eAAe,CAA+B;gBAElC,QAAQ,EAAE,QAAQ;IAQtC;;OAEG;IACH,WAAkB,QAAQ,IAAI,0BAA0B,CAMvD;IAED;;OAEG;IACH,cAAc,CAAC,MAAM,EAAE,yBAAyB,GAAG,oBAAoB;IAoCvE,8CAA8C;IAC9C,cAAc,CAAC,MAAM,EAAE,yBAAyB,GAAG,oBAAoB;IAIvE;;OAEG;IACH,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,oBAAoB,GAAG,SAAS;IAI3D,2CAA2C;IAC3C,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,oBAAoB,GAAG,SAAS;IAI3D;;OAEG;IACH,kBAAkB,IAAI,MAAM,EAAE;IAO9B,kDAAkD;IAClD,kBAAkB,IAAI,MAAM,EAAE;IAI9B;;OAEG;IACH,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO;IAIvC,gDAAgD;IAChD,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO;IAIvC;;OAEG;IACH,cAAc,IAAI,IAAI;IAKtB,8CAA8C;IAC9C,cAAc,IAAI,IAAI;IAItB;;;OAGG;IACH,MAAM,CAAC,0BAA0B,CAAC,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,GAAG,GAAG,GAAG,EAAE;IAiCxE,0DAA0D;IAC1D,MAAM,CAAC,0BAA0B,CAAC,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,GAAG,GAAG,GAAG,EAAE;yCA9J7D,0BAA0B;6CAA1B,0BAA0B;CAkKtC"}

package/dist/lib/AngularAuthProviderFactory.js

@@ -32,7 +32,7 @@ export class AngularAuthProviderFactory {
     /**
      * Create a provider based on configuration
      */
-    createProvider(config) {
+    CreateProvider(config) {
         const existingProvider = this.providers.get(config.type);
         if (existingProvider) {
             return existingProvider;
@@ -43,7 +43,7 @@ export class AngularAuthProviderFactory {
             const provider = MJGlobal.Instance.ClassFactory.CreateInstance(MJAuthBase, config.type, config // Pass config as constructor argument, not injector
             );
             if (!provider) {
-                throw new Error(`No provider registered for type: ${config.type}. Available types: ${this.getRegisteredTypes().join(', ')}`);
+                throw new Error(`No provider registered for type: ${config.type}. Available types: ${this.GetRegisteredTypes().join(', ')}`);
             }
             // Validate the configuration
             if (!provider.validateConfig(config)) {
@@ -59,39 +59,59 @@ export class AngularAuthProviderFactory {
             throw error;
         }
     }
+    /** @deprecated Use {@link CreateProvider}. */
+    createProvider(config) {
+        return this.CreateProvider(config);
+    }
     /**
      * Get a provider by type
      */
-    getProvider(type) {
+    GetProvider(type) {
         return this.providers.get(type);
     }
+    /** @deprecated Use {@link GetProvider}. */
+    getProvider(type) {
+        return this.GetProvider(type);
+    }
     /**
      * Get all registered provider types
      */
-    getRegisteredTypes() {
+    GetRegisteredTypes() {
         const registrations = MJGlobal.Instance.ClassFactory.GetRegistrationsByRootClass(MJAuthBase);
         const types = registrations.map(reg => reg.Key).filter((key) => key !== null);
         // Return unique types only, as multiple classes can be registered with the same key
         return [...new Set(types)];
     }
+    /** @deprecated Use {@link GetRegisteredTypes}. */
+    getRegisteredTypes() {
+        return this.GetRegisteredTypes();
+    }
     /**
      * Check if a provider type is registered
      */
+    IsTypeRegistered(type) {
+        return this.GetRegisteredTypes().includes(type);
+    }
+    /** @deprecated Use {@link IsTypeRegistered}. */
     isTypeRegistered(type) {
-        return this.getRegisteredTypes().includes(type);
+        return this.IsTypeRegistered(type);
     }
     /**
      * Clear all providers (useful for testing)
      */
-    clearProviders() {
+    ClearProviders() {
         this.providers.clear();
         this.providerConfigs.clear();
     }
+    /** @deprecated Use {@link ClearProviders}. */
+    clearProviders() {
+        return this.ClearProviders();
+    }
     /**
      * Get provider-specific Angular services that need to be injected
      * This uses the static angularProviderFactory property on each provider class for extensibility
      */
-    static getProviderAngularServices(type, environment) {
+    static GetProviderAngularServices(type, environment) {
         const normalizedType = type?.toLowerCase();
         // Get the provider class from the ClassFactory
         const registration = MJGlobal.Instance.ClassFactory.GetRegistration(MJAuthBase, normalizedType);
@@ -116,6 +136,10 @@ export class AngularAuthProviderFactory {
             return [];
         }
     }
+    /** @deprecated Use {@link GetProviderAngularServices}. */
+    static getProviderAngularServices(type, environment) {
+        return this.GetProviderAngularServices(type, environment);
+    }
     static ɵfac = function AngularAuthProviderFactory_Factory(__ngFactoryType__) { return new (__ngFactoryType__ || AngularAuthProviderFactory)(i0.ɵɵinject(i0.Injector)); };
     static ɵprov = /*@__PURE__*/ i0.ɵɵdefineInjectable({ token: AngularAuthProviderFactory, factory: AngularAuthProviderFactory.ɵfac, providedIn: 'root' });
 }

package/dist/lib/AngularAuthProviderFactory.js.map

@@ -1 +1 @@
-{"version":3,"file":"AngularAuthProviderFactory.js","sourceRoot":"","sources":["../../src/lib/AngularAuthProviderFactory.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAY,MAAM,eAAe,CAAC;AACrD,OAAO,EAAE,QAAQ,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AACxE,OAAO,EAAE,UAAU,EAAE,MAAM,gCAAgC,CAAC;;AAG5D;;;GAGG;AAIH,MAAM,OAAO,0BAA0B;IAKjB;IAJZ,MAAM,CAAU,eAAe,GAAG,0CAA0C,CAAC;IAC7E,SAAS,GAAsC,IAAI,GAAG,EAAE,CAAC;IACzD,eAAe,GAAqB,IAAI,GAAG,EAAE,CAAC;IAEtD,YAAoB,QAAkB;QAAlB,aAAQ,GAAR,QAAQ,CAAU;QACpC,MAAM,CAAC,GAAG,oBAAoB,EAAG,CAAC;QAClC,IAAI,CAAC,CAAC,0BAA0B,CAAC,eAAe,CAAC,EAAE,CAAC;YAClD,OAAO,CAAC,CAAC,0BAA0B,CAAC,eAAe,CAA+B,CAAC;QACrF,CAAC;QACD,CAAC,CAAC,0BAA0B,CAAC,eAAe,CAAC,GAAG,IAAI,CAAC;IACvD,CAAC;IAED;;OAEG;IACI,MAAM,KAAK,QAAQ;QACxB,MAAM,QAAQ,GAAG,oBAAoB,EAAG,CAAC,0BAA0B,CAAC,eAAe,CAA+B,CAAC;QACnH,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,IAAI,KAAK,CAAC,mFAAmF,CAAC,CAAC;QACvG,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED;;OAEG;IACH,cAAc,CAAC,MAAiC;QAE9C,MAAM,gBAAgB,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACzD,IAAI,gBAAgB,EAAE,CAAC;YACrB,OAAO,gBAAgB,CAAC;QAC1B,CAAC;QAED,IAAI,CAAC;YACH,4DAA4D;YAC5D,gDAAgD;YAChD,MAAM,QAAQ,GAAG,QAAQ,CAAC,QAAQ,CAAC,YAAY,CAAC,cAAc,CAC5D,UAAU,EACV,MAAM,CAAC,IAAI,EACX,MAAM,CAAE,oDAAoD;aAC7D,CAAC;YAEF,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,MAAM,IAAI,KAAK,CAAC,oCAAoC,MAAM,CAAC,IAAI,sBAAsB,IAAI,CAAC,kBAAkB,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YAC/H,CAAC;YAED,6BAA6B;YAC7B,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC,MAAM,CAAC,EAAE,CAAC;gBACrC,MAAM,IAAI,KAAK,CAAC,4CAA4C,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;YAC7E,CAAC;YAED,8BAA8B;YAC9B,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;YAC1C,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;YAE9C,OAAO,QAAQ,CAAC;QAClB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,KAAK,CAAC,2CAA2C,MAAM,CAAC,IAAI,GAAG,EAAE,KAAK,CAAC,CAAC;YAChF,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED;;OAEG;IACH,WAAW,CAAC,IAAY;QACtB,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAClC,CAAC;IAED;;OAEG;IACH,kBAAkB;QAChB,MAAM,aAAa,GAAG,QAAQ,CAAC,QAAQ,CAAC,YAAY,CAAC,2BAA2B,CAAC,UAAU,CAAC,CAAC;QAC7F,MAAM,KAAK,GAAG,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,EAAiB,EAAE,CAAC,GAAG,KAAK,IAAI,CAAC,CAAC;QAC7F,oFAAoF;QACpF,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC;IAC7B,CAAC;IAED;;OAEG;IACH,gBAAgB,CAAC,IAAY;QAC3B,OAAO,IAAI,CAAC,kBAAkB,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IAClD,CAAC;IAED;;OAEG;IACH,cAAc;QACZ,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC;QACvB,IAAI,CAAC,eAAe,CAAC,KAAK,EAAE,CAAC;IAC/B,CAAC;IAED;;;OAGG;IACH,MAAM,CAAC,0BAA0B,CAAC,IAAY,EAAE,WAAgB;QAE9D,MAAM,cAAc,GAAG,IAAI,EAAE,WAAW,EAAE,CAAC;QAE3C,+CAA+C;QAC/C,MAAM,YAAY,GAAG,QAAQ,CAAC,QAAQ,CAAC,YAAY,CAAC,eAAe,CACjE,UAAU,EACV,cAAc,CACf,CAAC;QACF,MAAM,aAAa,GAAG,YAAY,EAAE,QAAe,CAAC;QAEpD,IAAI,CAAC,aAAa,EAAE,CAAC;YACnB,OAAO,CAAC,IAAI,CAAC,0CAA0C,IAAI,EAAE,CAAC,CAAC;YAC/D,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,qEAAqE;QACrE,IAAI,aAAa,CAAC,sBAAsB,EAAE,CAAC;YACzC,0DAA0D;YAC1D,MAAM,QAAQ,GAAG,aAAa,CAAC,sBAAsB,CAAC,WAAW,CAAC,CAAC;YACnE,OAAO,QAAQ,CAAC;QAClB,CAAC;QACD,yDAAyD;aACpD,IAAI,OAAO,aAAa,CAAC,2BAA2B,KAAK,UAAU,EAAE,CAAC;YACzE,OAAO,CAAC,IAAI,CAAC,YAAY,IAAI,4GAA4G,CAAC,CAAC;YAC3I,OAAO,aAAa,CAAC,2BAA2B,CAAC,WAAW,CAAC,CAAC;QAChE,CAAC;aACI,CAAC;YACJ,yEAAyE;YACzE,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;oHAlIU,0BAA0B;gEAA1B,0BAA0B,WAA1B,0BAA0B,mBAFzB,MAAM;;iFAEP,0BAA0B;cAHtC,UAAU;eAAC;gBACV,UAAU,EAAE,MAAM;aACnB","sourcesContent":["import { Injectable, Injector } from '@angular/core';\nimport { MJGlobal, GetGlobalObjectStore } from '@memberjunction/global';\nimport { MJAuthBase } from './mjexplorer-auth-base.service';\nimport { IAngularAuthProvider, AngularAuthProviderConfig } from './IAuthProvider';\n\n/**\n * Factory for creating Angular authentication providers\n * Uses MJGlobal ClassFactory pattern for extensibility\n */\n@Injectable({\n  providedIn: 'root'\n})\nexport class AngularAuthProviderFactory {\n  private static readonly _globalStoreKey = '___SINGLETON__AngularAuthProviderFactory';\n  private providers: Map<string, IAngularAuthProvider> = new Map();\n  private providerConfigs: Map<string, any> = new Map();\n\n  constructor(private injector: Injector) {\n    const g = GetGlobalObjectStore()!;\n    if (g[AngularAuthProviderFactory._globalStoreKey]) {\n      return g[AngularAuthProviderFactory._globalStoreKey] as AngularAuthProviderFactory;\n    }\n    g[AngularAuthProviderFactory._globalStoreKey] = this;\n  }\n\n  /**\n   * Get singleton instance\n   */\n  public static get Instance(): AngularAuthProviderFactory {\n    const instance = GetGlobalObjectStore()![AngularAuthProviderFactory._globalStoreKey] as AngularAuthProviderFactory;\n    if (!instance) {\n      throw new Error('AngularAuthProviderFactory not initialized. Ensure it is provided in your module.');\n    }\n    return instance;\n  }\n\n  /**\n   * Create a provider based on configuration\n   */\n  createProvider(config: AngularAuthProviderConfig): IAngularAuthProvider {\n    \n    const existingProvider = this.providers.get(config.type);\n    if (existingProvider) {\n      return existingProvider;\n    }\n\n    try {\n      // Use MJGlobal ClassFactory to create the provider instance\n      // Pass config as the first constructor argument\n      const provider = MJGlobal.Instance.ClassFactory.CreateInstance<MJAuthBase>(\n        MJAuthBase, \n        config.type,\n        config  // Pass config as constructor argument, not injector\n      );\n\n      if (!provider) {\n        throw new Error(`No provider registered for type: ${config.type}. Available types: ${this.getRegisteredTypes().join(', ')}`);\n      }\n\n      // Validate the configuration\n      if (!provider.validateConfig(config)) {\n        throw new Error(`Invalid configuration for provider type: ${config.type}`);\n      }\n\n      // Store the provider instance\n      this.providers.set(config.type, provider);\n      this.providerConfigs.set(config.type, config);\n\n      return provider;\n    } catch (error) {\n      console.error(`Failed to create auth provider for type ${config.type}:`, error);\n      throw error;\n    }\n  }\n\n  /**\n   * Get a provider by type\n   */\n  getProvider(type: string): IAngularAuthProvider | undefined {\n    return this.providers.get(type);\n  }\n\n  /**\n   * Get all registered provider types\n   */\n  getRegisteredTypes(): string[] {\n    const registrations = MJGlobal.Instance.ClassFactory.GetRegistrationsByRootClass(MJAuthBase);\n    const types = registrations.map(reg => reg.Key).filter((key): key is string => key !== null);\n    // Return unique types only, as multiple classes can be registered with the same key\n    return [...new Set(types)];\n  }\n\n  /**\n   * Check if a provider type is registered\n   */\n  isTypeRegistered(type: string): boolean {\n    return this.getRegisteredTypes().includes(type);\n  }\n\n  /**\n   * Clear all providers (useful for testing)\n   */\n  clearProviders(): void {\n    this.providers.clear();\n    this.providerConfigs.clear();\n  }\n\n  /**\n   * Get provider-specific Angular services that need to be injected\n   * This uses the static angularProviderFactory property on each provider class for extensibility\n   */\n  static getProviderAngularServices(type: string, environment: any): any[] {\n    \n    const normalizedType = type?.toLowerCase();\n    \n    // Get the provider class from the ClassFactory\n    const registration = MJGlobal.Instance.ClassFactory.GetRegistration(\n      MJAuthBase, \n      normalizedType\n    );\n    const providerClass = registration?.SubClass as any;\n    \n    if (!providerClass) {\n      console.warn(`No provider class registered for type: ${type}`);\n      return [];\n    }\n    \n    // Check if the provider class has the factory property (new pattern)\n    if (providerClass.angularProviderFactory) {\n      // Call the factory function to get the required providers\n      const services = providerClass.angularProviderFactory(environment);\n      return services;\n    } \n    // Fallback to old method name for backward compatibility\n    else if (typeof providerClass.getRequiredAngularProviders === 'function') {\n      console.warn(`Provider ${type} uses deprecated getRequiredAngularProviders method. Please update to use angularProviderFactory property.`);\n      return providerClass.getRequiredAngularProviders(environment);\n    } \n    else {\n      // Provider doesn't define required Angular services (might not need any)\n      return [];\n    }\n  }\n\n}"]}
+{"version":3,"file":"AngularAuthProviderFactory.js","sourceRoot":"","sources":["../../src/lib/AngularAuthProviderFactory.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAY,MAAM,eAAe,CAAC;AACrD,OAAO,EAAE,QAAQ,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AACxE,OAAO,EAAE,UAAU,EAAE,MAAM,gCAAgC,CAAC;;AAG5D;;;GAGG;AAIH,MAAM,OAAO,0BAA0B;IAKjB;IAJZ,MAAM,CAAU,eAAe,GAAG,0CAA0C,CAAC;IAC7E,SAAS,GAAsC,IAAI,GAAG,EAAE,CAAC;IACzD,eAAe,GAAqB,IAAI,GAAG,EAAE,CAAC;IAEtD,YAAoB,QAAkB;QAAlB,aAAQ,GAAR,QAAQ,CAAU;QACpC,MAAM,CAAC,GAAG,oBAAoB,EAAG,CAAC;QAClC,IAAI,CAAC,CAAC,0BAA0B,CAAC,eAAe,CAAC,EAAE,CAAC;YAClD,OAAO,CAAC,CAAC,0BAA0B,CAAC,eAAe,CAA+B,CAAC;QACrF,CAAC;QACD,CAAC,CAAC,0BAA0B,CAAC,eAAe,CAAC,GAAG,IAAI,CAAC;IACvD,CAAC;IAED;;OAEG;IACI,MAAM,KAAK,QAAQ;QACxB,MAAM,QAAQ,GAAG,oBAAoB,EAAG,CAAC,0BAA0B,CAAC,eAAe,CAA+B,CAAC;QACnH,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,IAAI,KAAK,CAAC,mFAAmF,CAAC,CAAC;QACvG,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED;;OAEG;IACH,cAAc,CAAC,MAAiC;QAE9C,MAAM,gBAAgB,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACzD,IAAI,gBAAgB,EAAE,CAAC;YACrB,OAAO,gBAAgB,CAAC;QAC1B,CAAC;QAED,IAAI,CAAC;YACH,4DAA4D;YAC5D,gDAAgD;YAChD,MAAM,QAAQ,GAAG,QAAQ,CAAC,QAAQ,CAAC,YAAY,CAAC,cAAc,CAC5D,UAAU,EACV,MAAM,CAAC,IAAI,EACX,MAAM,CAAE,oDAAoD;aAC7D,CAAC;YAEF,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,MAAM,IAAI,KAAK,CAAC,oCAAoC,MAAM,CAAC,IAAI,sBAAsB,IAAI,CAAC,kBAAkB,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YAC/H,CAAC;YAED,6BAA6B;YAC7B,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC,MAAM,CAAC,EAAE,CAAC;gBACrC,MAAM,IAAI,KAAK,CAAC,4CAA4C,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;YAC7E,CAAC;YAED,8BAA8B;YAC9B,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;YAC1C,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;YAE9C,OAAO,QAAQ,CAAC;QAClB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,KAAK,CAAC,2CAA2C,MAAM,CAAC,IAAI,GAAG,EAAE,KAAK,CAAC,CAAC;YAChF,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED,8CAA8C;IAC9C,cAAc,CAAC,MAAiC;QAC9C,OAAO,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;IACrC,CAAC;IAED;;OAEG;IACH,WAAW,CAAC,IAAY;QACtB,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAClC,CAAC;IAED,2CAA2C;IAC3C,WAAW,CAAC,IAAY;QACtB,OAAO,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;IAChC,CAAC;IAED;;OAEG;IACH,kBAAkB;QAChB,MAAM,aAAa,GAAG,QAAQ,CAAC,QAAQ,CAAC,YAAY,CAAC,2BAA2B,CAAC,UAAU,CAAC,CAAC;QAC7F,MAAM,KAAK,GAAG,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,EAAiB,EAAE,CAAC,GAAG,KAAK,IAAI,CAAC,CAAC;QAC7F,oFAAoF;QACpF,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC;IAC7B,CAAC;IAED,kDAAkD;IAClD,kBAAkB;QAChB,OAAO,IAAI,CAAC,kBAAkB,EAAE,CAAC;IACnC,CAAC;IAED;;OAEG;IACH,gBAAgB,CAAC,IAAY;QAC3B,OAAO,IAAI,CAAC,kBAAkB,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IAClD,CAAC;IAED,gDAAgD;IAChD,gBAAgB,CAAC,IAAY;QAC3B,OAAO,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC;IACrC,CAAC;IAED;;OAEG;IACH,cAAc;QACZ,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC;QACvB,IAAI,CAAC,eAAe,CAAC,KAAK,EAAE,CAAC;IAC/B,CAAC;IAED,8CAA8C;IAC9C,cAAc;QACZ,OAAO,IAAI,CAAC,cAAc,EAAE,CAAC;IAC/B,CAAC;IAED;;;OAGG;IACH,MAAM,CAAC,0BAA0B,CAAC,IAAY,EAAE,WAAgB;QAE9D,MAAM,cAAc,GAAG,IAAI,EAAE,WAAW,EAAE,CAAC;QAE3C,+CAA+C;QAC/C,MAAM,YAAY,GAAG,QAAQ,CAAC,QAAQ,CAAC,YAAY,CAAC,eAAe,CACjE,UAAU,EACV,cAAc,CACf,CAAC;QACF,MAAM,aAAa,GAAG,YAAY,EAAE,QAAe,CAAC;QAEpD,IAAI,CAAC,aAAa,EAAE,CAAC;YACnB,OAAO,CAAC,IAAI,CAAC,0CAA0C,IAAI,EAAE,CAAC,CAAC;YAC/D,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,qEAAqE;QACrE,IAAI,aAAa,CAAC,sBAAsB,EAAE,CAAC;YACzC,0DAA0D;YAC1D,MAAM,QAAQ,GAAG,aAAa,CAAC,sBAAsB,CAAC,WAAW,CAAC,CAAC;YACnE,OAAO,QAAQ,CAAC;QAClB,CAAC;QACD,yDAAyD;aACpD,IAAI,OAAO,aAAa,CAAC,2BAA2B,KAAK,UAAU,EAAE,CAAC;YACzE,OAAO,CAAC,IAAI,CAAC,YAAY,IAAI,4GAA4G,CAAC,CAAC;YAC3I,OAAO,aAAa,CAAC,2BAA2B,CAAC,WAAW,CAAC,CAAC;QAChE,CAAC;aACI,CAAC;YACJ,yEAAyE;YACzE,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;IAED,0DAA0D;IAC1D,MAAM,CAAC,0BAA0B,CAAC,IAAY,EAAE,WAAgB;QAC9D,OAAO,IAAI,CAAC,0BAA0B,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;IAC5D,CAAC;oHAhKU,0BAA0B;gEAA1B,0BAA0B,WAA1B,0BAA0B,mBAFzB,MAAM;;iFAEP,0BAA0B;cAHtC,UAAU;eAAC;gBACV,UAAU,EAAE,MAAM;aACnB","sourcesContent":["import { Injectable, Injector } from '@angular/core';\nimport { MJGlobal, GetGlobalObjectStore } from '@memberjunction/global';\nimport { MJAuthBase } from './mjexplorer-auth-base.service';\nimport { IAngularAuthProvider, AngularAuthProviderConfig } from './IAuthProvider';\n\n/**\n * Factory for creating Angular authentication providers\n * Uses MJGlobal ClassFactory pattern for extensibility\n */\n@Injectable({\n  providedIn: 'root'\n})\nexport class AngularAuthProviderFactory {\n  private static readonly _globalStoreKey = '___SINGLETON__AngularAuthProviderFactory';\n  private providers: Map<string, IAngularAuthProvider> = new Map();\n  private providerConfigs: Map<string, any> = new Map();\n\n  constructor(private injector: Injector) {\n    const g = GetGlobalObjectStore()!;\n    if (g[AngularAuthProviderFactory._globalStoreKey]) {\n      return g[AngularAuthProviderFactory._globalStoreKey] as AngularAuthProviderFactory;\n    }\n    g[AngularAuthProviderFactory._globalStoreKey] = this;\n  }\n\n  /**\n   * Get singleton instance\n   */\n  public static get Instance(): AngularAuthProviderFactory {\n    const instance = GetGlobalObjectStore()![AngularAuthProviderFactory._globalStoreKey] as AngularAuthProviderFactory;\n    if (!instance) {\n      throw new Error('AngularAuthProviderFactory not initialized. Ensure it is provided in your module.');\n    }\n    return instance;\n  }\n\n  /**\n   * Create a provider based on configuration\n   */\n  CreateProvider(config: AngularAuthProviderConfig): IAngularAuthProvider {\n    \n    const existingProvider = this.providers.get(config.type);\n    if (existingProvider) {\n      return existingProvider;\n    }\n\n    try {\n      // Use MJGlobal ClassFactory to create the provider instance\n      // Pass config as the first constructor argument\n      const provider = MJGlobal.Instance.ClassFactory.CreateInstance<MJAuthBase>(\n        MJAuthBase, \n        config.type,\n        config  // Pass config as constructor argument, not injector\n      );\n\n      if (!provider) {\n        throw new Error(`No provider registered for type: ${config.type}. Available types: ${this.GetRegisteredTypes().join(', ')}`);\n      }\n\n      // Validate the configuration\n      if (!provider.validateConfig(config)) {\n        throw new Error(`Invalid configuration for provider type: ${config.type}`);\n      }\n\n      // Store the provider instance\n      this.providers.set(config.type, provider);\n      this.providerConfigs.set(config.type, config);\n\n      return provider;\n    } catch (error) {\n      console.error(`Failed to create auth provider for type ${config.type}:`, error);\n      throw error;\n    }\n  }\n\n  /** @deprecated Use {@link CreateProvider}. */\n  createProvider(config: AngularAuthProviderConfig): IAngularAuthProvider {\n    return this.CreateProvider(config);\n  }\n\n  /**\n   * Get a provider by type\n   */\n  GetProvider(type: string): IAngularAuthProvider | undefined {\n    return this.providers.get(type);\n  }\n\n  /** @deprecated Use {@link GetProvider}. */\n  getProvider(type: string): IAngularAuthProvider | undefined {\n    return this.GetProvider(type);\n  }\n\n  /**\n   * Get all registered provider types\n   */\n  GetRegisteredTypes(): string[] {\n    const registrations = MJGlobal.Instance.ClassFactory.GetRegistrationsByRootClass(MJAuthBase);\n    const types = registrations.map(reg => reg.Key).filter((key): key is string => key !== null);\n    // Return unique types only, as multiple classes can be registered with the same key\n    return [...new Set(types)];\n  }\n\n  /** @deprecated Use {@link GetRegisteredTypes}. */\n  getRegisteredTypes(): string[] {\n    return this.GetRegisteredTypes();\n  }\n\n  /**\n   * Check if a provider type is registered\n   */\n  IsTypeRegistered(type: string): boolean {\n    return this.GetRegisteredTypes().includes(type);\n  }\n\n  /** @deprecated Use {@link IsTypeRegistered}. */\n  isTypeRegistered(type: string): boolean {\n    return this.IsTypeRegistered(type);\n  }\n\n  /**\n   * Clear all providers (useful for testing)\n   */\n  ClearProviders(): void {\n    this.providers.clear();\n    this.providerConfigs.clear();\n  }\n\n  /** @deprecated Use {@link ClearProviders}. */\n  clearProviders(): void {\n    return this.ClearProviders();\n  }\n\n  /**\n   * Get provider-specific Angular services that need to be injected\n   * This uses the static angularProviderFactory property on each provider class for extensibility\n   */\n  static GetProviderAngularServices(type: string, environment: any): any[] {\n    \n    const normalizedType = type?.toLowerCase();\n    \n    // Get the provider class from the ClassFactory\n    const registration = MJGlobal.Instance.ClassFactory.GetRegistration(\n      MJAuthBase, \n      normalizedType\n    );\n    const providerClass = registration?.SubClass as any;\n    \n    if (!providerClass) {\n      console.warn(`No provider class registered for type: ${type}`);\n      return [];\n    }\n    \n    // Check if the provider class has the factory property (new pattern)\n    if (providerClass.angularProviderFactory) {\n      // Call the factory function to get the required providers\n      const services = providerClass.angularProviderFactory(environment);\n      return services;\n    } \n    // Fallback to old method name for backward compatibility\n    else if (typeof providerClass.getRequiredAngularProviders === 'function') {\n      console.warn(`Provider ${type} uses deprecated getRequiredAngularProviders method. Please update to use angularProviderFactory property.`);\n      return providerClass.getRequiredAngularProviders(environment);\n    } \n    else {\n      // Provider doesn't define required Angular services (might not need any)\n      return [];\n    }\n  }\n\n  /** @deprecated Use {@link GetProviderAngularServices}. */\n  static getProviderAngularServices(type: string, environment: any): any[] {\n    return this.GetProviderAngularServices(type, environment);\n  }\n\n}"]}

package/dist/lib/IAuthProvider.js.map

@@ -1 +1 @@
-{"version":3,"file":"IAuthProvider.js","sourceRoot":"","sources":["../../src/lib/IAuthProvider.ts"],"names":[],"mappings":"","sourcesContent":["import { Observable } from 'rxjs';\nimport { AuthProviderConfig } from '@memberjunction/core';\nimport {\n  StandardUserInfo,\n  StandardAuthToken,\n  StandardAuthError,\n  TokenRefreshResult\n} from './auth-types';\n\n// Create an alias for Angular-specific config that extends the base\nexport interface AngularAuthProviderConfig extends AuthProviderConfig {\n  // Angular-specific extensions can be added here if needed\n}\n\n/**\n * Interface for Angular authentication providers - v3.0.0\n *\n * This interface defines the contract that all auth providers must implement.\n * It ensures consistent behavior across different OAuth providers while hiding\n * provider-specific implementation details.\n *\n * ## Breaking Changes from v2.x:\n * - Removed: getUserProfile() - Use getUserInfo() instead\n * - Removed: getUser() - Use getUserInfo() instead\n * - Removed: getUserClaims() - Use getTokenInfo() instead\n * - Removed: getToken() - Use getIdToken() instead\n * - Removed: refresh() - Use refreshToken() instead\n * - Removed: checkExpiredTokenError() - Use classifyError() instead\n *\n * @version 3.0.0\n */\nexport interface IAngularAuthProvider {\n  /**\n   * Provider type identifier (e.g., 'msal', 'auth0', 'okta')\n   */\n  readonly type: string;\n\n  // ============================================================================\n  // CORE AUTHENTICATION METHODS\n  // ============================================================================\n\n  /**\n   * Initialize the authentication provider\n   *\n   * This should handle callback processing, session restoration, etc.\n   * Called automatically during app startup.\n   */\n  initialize(): Promise<void>;\n\n  /**\n   * Initiate login flow\n   *\n   * @param options Optional provider-specific login options\n   * @returns Observable for backward compatibility, can also return Promise\n   *\n   * @example\n   * ```typescript\n   * await this.authBase.login({ appState: { target: '/dashboard' } });\n   * ```\n   */\n  login(options?: Record<string, unknown>): Observable<void> | Promise<void>;\n\n  /**\n   * Log out the current user\n   *\n   * Clears local session and redirects to provider's logout endpoint.\n   *\n   * @example\n   * ```typescript\n   * await this.authBase.logout();\n   * ```\n   */\n  logout(): Promise<void>;\n\n  /**\n   * Handle OAuth callback after redirect\n   *\n   * This is called automatically by the redirect component.\n   * Application code typically doesn't need to call this directly.\n   */\n  handleCallback(): Promise<void>;\n\n  // ============================================================================\n  // AUTHENTICATION STATE (Observable Streams)\n  // ============================================================================\n\n  /**\n   * Observable stream of authentication state\n   *\n   * Emits true when user is authenticated, false otherwise.\n   * Subscribe to this for reactive UI updates.\n   *\n   * @example\n   * ```typescript\n   * this.authBase.isAuthenticated().subscribe(isAuth => {\n   *   this.showLoginButton = !isAuth;\n   * });\n   * ```\n   */\n  isAuthenticated(): Observable<boolean>;\n\n  /**\n   * Observable stream of user profile information\n   *\n   * Emits StandardUserInfo when authenticated, null otherwise.\n   * This replaces the old getUserProfile() which returned 'any'.\n   *\n   * @example\n   * ```typescript\n   * this.authBase.getUserInfo().subscribe(user => {\n   *   if (user) {\n   *     console.log(`Welcome ${user.name}!`);\n   *   }\n   * });\n   * ```\n   */\n  getUserInfo(): Observable<StandardUserInfo | null>;\n\n  /**\n   * Observable stream of user's email address\n   *\n   * Emits email string when authenticated, empty string otherwise.\n   *\n   * @example\n   * ```typescript\n   * this.userEmail$ = this.authBase.getUserEmail();\n   * ```\n   */\n  getUserEmail(): Observable<string>;\n\n  // ============================================================================\n  // TOKEN MANAGEMENT (v3.0.0 - Fixes Leaky Abstraction)\n  // ============================================================================\n\n  /**\n   * Get the current ID token as a string\n   *\n   * This is the primary method applications should use to get the token\n   * for backend API calls. It abstracts away provider-specific token storage\n   * (Auth0's __raw vs MSAL's idToken).\n   *\n   * @returns Promise resolving to the ID token string, or null if not authenticated\n   *\n   * @example\n   * ```typescript\n   * const token = await this.authBase.getIdToken();\n   * if (token) {\n   *   // Use token for GraphQL or REST API calls\n   *   setupGraphQLClient(token, apiUrl);\n   * }\n   * ```\n   */\n  getIdToken(): Promise<string | null>;\n\n  /**\n   * Get complete token information\n   *\n   * Returns a standardized token object with ID token, access token, and expiration.\n   * Use this when you need more than just the token string.\n   *\n   * @returns Promise resolving to StandardAuthToken or null if not authenticated\n   *\n   * @example\n   * ```typescript\n   * const tokenInfo = await this.authBase.getTokenInfo();\n   * if (tokenInfo) {\n   *   console.log(`Token expires at: ${new Date(tokenInfo.expiresAt)}`);\n   * }\n   * ```\n   */\n  getTokenInfo(): Promise<StandardAuthToken | null>;\n\n  /**\n   * Refresh the current authentication token\n   *\n   * Attempts to obtain a fresh authentication token using the provider's\n   * refresh mechanism. If silent refresh fails due to session expiry, the\n   * provider will handle re-authentication automatically (which may involve\n   * redirecting to the auth provider's login page).\n   *\n   * Returns a fresh token on success, or throws on complete failure.\n   *\n   * IMPORTANT: If the provider requires interactive re-authentication (redirect\n   * or popup), this method may never return. The app will reload after\n   * authentication completes and re-initialize with a fresh token.\n   *\n   * @returns Promise resolving to StandardAuthToken or throws on failure\n   *\n   * @example\n   * ```typescript\n   * const token = await this.authBase.refreshToken();\n   * return token.idToken; // Always succeeds or throws\n   * ```\n   */\n  refreshToken(): Promise<StandardAuthToken>;\n\n  // ============================================================================\n  // ERROR HANDLING (v3.0.0 - Fixes Error Type Leakage)\n  // ============================================================================\n\n  /**\n   * Classify an error into a standard error type\n   *\n   * This method converts provider-specific errors into semantic error types\n   * that application code can handle consistently. Eliminates the need for\n   * consumers to check provider-specific error names like 'BrowserAuthError'.\n   *\n   * @param error The error to classify (can be any type)\n   * @returns StandardAuthError with categorized error type\n   *\n   * @example\n   * ```typescript\n   * try {\n   *   await this.authBase.login();\n   * } catch (err) {\n   *   const authError = this.authBase.classifyError(err);\n   *\n   *   switch (authError.type) {\n   *     case AuthErrorType.TOKEN_EXPIRED:\n   *       // Show \"session expired\" message\n   *       break;\n   *     case AuthErrorType.USER_CANCELLED:\n   *       // User cancelled - don't show error\n   *       break;\n   *     default:\n   *       // Show generic error\n   *       alert(authError.userMessage);\n   *   }\n   * }\n   * ```\n   */\n  classifyError(error: unknown): StandardAuthError;\n\n  // ============================================================================\n  // CONFIGURATION & VALIDATION\n  // ============================================================================\n\n  /**\n   * Get list of required configuration fields for this provider\n   *\n   * @returns Array of required config field names\n   *\n   * @example\n   * ```typescript\n   * // Auth0 requires: ['clientId', 'domain']\n   * // MSAL requires: ['clientId', 'tenantId']\n   * ```\n   */\n  getRequiredConfig(): string[];\n\n  /**\n   * Validate provider configuration\n   *\n   * @param config Configuration object to validate\n   * @returns True if configuration is valid\n   */\n  validateConfig(config: Record<string, unknown>): boolean;\n}"]}
+{"version":3,"file":"IAuthProvider.js","sourceRoot":"","sources":["../../src/lib/IAuthProvider.ts"],"names":[],"mappings":"","sourcesContent":["import { Observable } from 'rxjs';\nimport { AuthProviderConfig } from '@memberjunction/core';\nimport {\n  StandardUserInfo,\n  StandardAuthToken,\n  StandardAuthError,\n  TokenRefreshResult\n} from './auth-types';\n\n// Create an alias for Angular-specific config that extends the base\nexport interface AngularAuthProviderConfig extends AuthProviderConfig {\n  // Angular-specific extensions can be added here if needed\n}\n\n/**\n * Interface for Angular authentication providers - v3.0.0\n *\n * This interface defines the contract that all auth providers must implement.\n * It ensures consistent behavior across different OAuth providers while hiding\n * provider-specific implementation details.\n *\n * ## Breaking Changes from v2.x:\n * - Removed: getUserProfile() - Use getUserInfo() instead\n * - Removed: getUser() - Use getUserInfo() instead\n * - Removed: getUserClaims() - Use getTokenInfo() instead\n * - Removed: getToken() - Use getIdToken() instead\n * - Removed: refresh() - Use refreshToken() instead\n * - Removed: checkExpiredTokenError() - Use classifyError() instead\n *\n * @version 3.0.0\n */\nexport interface IAngularAuthProvider {\n  /**\n   * Provider type identifier (e.g., 'msal', 'auth0', 'okta')\n   */\n  readonly type: string;  // case-violation-ok-legacy-back-compat: the type is named in an exported signature, so consumers build object literals against it; an interface has no runtime carrier for a stub\n\n  // ============================================================================\n  // CORE AUTHENTICATION METHODS\n  // ============================================================================\n\n  /**\n   * Initialize the authentication provider\n   *\n   * This should handle callback processing, session restoration, etc.\n   * Called automatically during app startup.\n   */\n  initialize(): Promise<void>;  // case-violation-ok-legacy-back-compat: the type is named in an exported signature, so consumers build object literals against it; an interface has no runtime carrier for a stub\n\n  /**\n   * Initiate login flow\n   *\n   * @param options Optional provider-specific login options\n   * @returns Observable for backward compatibility, can also return Promise\n   *\n   * @example\n   * ```typescript\n   * await this.authBase.login({ appState: { target: '/dashboard' } });\n   * ```\n   */\n  login(options?: Record<string, unknown>): Observable<void> | Promise<void>;  // case-violation-ok-legacy-back-compat: the type is named in an exported signature, so consumers build object literals against it; an interface has no runtime carrier for a stub\n\n  /**\n   * Log out the current user\n   *\n   * Clears local session and redirects to provider's logout endpoint.\n   *\n   * @example\n   * ```typescript\n   * await this.authBase.logout();\n   * ```\n   */\n  logout(): Promise<void>;  // case-violation-ok-legacy-back-compat: the type is named in an exported signature, so consumers build object literals against it; an interface has no runtime carrier for a stub\n\n  /**\n   * Handle OAuth callback after redirect\n   *\n   * This is called automatically by the redirect component.\n   * Application code typically doesn't need to call this directly.\n   */\n  handleCallback(): Promise<void>;  // case-violation-ok-legacy-back-compat: the type is named in an exported signature, so consumers build object literals against it; an interface has no runtime carrier for a stub\n\n  // ============================================================================\n  // AUTHENTICATION STATE (Observable Streams)\n  // ============================================================================\n\n  /**\n   * Observable stream of authentication state\n   *\n   * Emits true when user is authenticated, false otherwise.\n   * Subscribe to this for reactive UI updates.\n   *\n   * @example\n   * ```typescript\n   * this.authBase.isAuthenticated().subscribe(isAuth => {\n   *   this.showLoginButton = !isAuth;\n   * });\n   * ```\n   */\n  isAuthenticated(): Observable<boolean>;  // case-violation-ok-legacy-back-compat: the type is named in an exported signature, so consumers build object literals against it; an interface has no runtime carrier for a stub\n\n  /**\n   * Observable stream of user profile information\n   *\n   * Emits StandardUserInfo when authenticated, null otherwise.\n   * This replaces the old getUserProfile() which returned 'any'.\n   *\n   * @example\n   * ```typescript\n   * this.authBase.getUserInfo().subscribe(user => {\n   *   if (user) {\n   *     console.log(`Welcome ${user.name}!`);\n   *   }\n   * });\n   * ```\n   */\n  getUserInfo(): Observable<StandardUserInfo | null>;  // case-violation-ok-legacy-back-compat: the type is named in an exported signature, so consumers build object literals against it; an interface has no runtime carrier for a stub\n\n  /**\n   * Observable stream of user's email address\n   *\n   * Emits email string when authenticated, empty string otherwise.\n   *\n   * @example\n   * ```typescript\n   * this.userEmail$ = this.authBase.getUserEmail();\n   * ```\n   */\n  getUserEmail(): Observable<string>;  // case-violation-ok-legacy-back-compat: the type is named in an exported signature, so consumers build object literals against it; an interface has no runtime carrier for a stub\n\n  // ============================================================================\n  // TOKEN MANAGEMENT (v3.0.0 - Fixes Leaky Abstraction)\n  // ============================================================================\n\n  /**\n   * Get the current ID token as a string\n   *\n   * This is the primary method applications should use to get the token\n   * for backend API calls. It abstracts away provider-specific token storage\n   * (Auth0's __raw vs MSAL's idToken).\n   *\n   * @returns Promise resolving to the ID token string, or null if not authenticated\n   *\n   * @example\n   * ```typescript\n   * const token = await this.authBase.getIdToken();\n   * if (token) {\n   *   // Use token for GraphQL or REST API calls\n   *   setupGraphQLClient(token, apiUrl);\n   * }\n   * ```\n   */\n  getIdToken(): Promise<string | null>;  // case-violation-ok-legacy-back-compat: the type is named in an exported signature, so consumers build object literals against it; an interface has no runtime carrier for a stub\n\n  /**\n   * Get complete token information\n   *\n   * Returns a standardized token object with ID token, access token, and expiration.\n   * Use this when you need more than just the token string.\n   *\n   * @returns Promise resolving to StandardAuthToken or null if not authenticated\n   *\n   * @example\n   * ```typescript\n   * const tokenInfo = await this.authBase.getTokenInfo();\n   * if (tokenInfo) {\n   *   console.log(`Token expires at: ${new Date(tokenInfo.expiresAt)}`);\n   * }\n   * ```\n   */\n  getTokenInfo(): Promise<StandardAuthToken | null>;  // case-violation-ok-legacy-back-compat: the type is named in an exported signature, so consumers build object literals against it; an interface has no runtime carrier for a stub\n\n  /**\n   * Refresh the current authentication token\n   *\n   * Attempts to obtain a fresh authentication token using the provider's\n   * refresh mechanism. If silent refresh fails due to session expiry, the\n   * provider will handle re-authentication automatically (which may involve\n   * redirecting to the auth provider's login page).\n   *\n   * Returns a fresh token on success, or throws on complete failure.\n   *\n   * IMPORTANT: If the provider requires interactive re-authentication (redirect\n   * or popup), this method may never return. The app will reload after\n   * authentication completes and re-initialize with a fresh token.\n   *\n   * @returns Promise resolving to StandardAuthToken or throws on failure\n   *\n   * @example\n   * ```typescript\n   * const token = await this.authBase.refreshToken();\n   * return token.idToken; // Always succeeds or throws\n   * ```\n   */\n  refreshToken(): Promise<StandardAuthToken>;  // case-violation-ok-legacy-back-compat: the type is named in an exported signature, so consumers build object literals against it; an interface has no runtime carrier for a stub\n\n  // ============================================================================\n  // ERROR HANDLING (v3.0.0 - Fixes Error Type Leakage)\n  // ============================================================================\n\n  /**\n   * Classify an error into a standard error type\n   *\n   * This method converts provider-specific errors into semantic error types\n   * that application code can handle consistently. Eliminates the need for\n   * consumers to check provider-specific error names like 'BrowserAuthError'.\n   *\n   * @param error The error to classify (can be any type)\n   * @returns StandardAuthError with categorized error type\n   *\n   * @example\n   * ```typescript\n   * try {\n   *   await this.authBase.login();\n   * } catch (err) {\n   *   const authError = this.authBase.classifyError(err);\n   *\n   *   switch (authError.type) {\n   *     case AuthErrorType.TOKEN_EXPIRED:\n   *       // Show \"session expired\" message\n   *       break;\n   *     case AuthErrorType.USER_CANCELLED:\n   *       // User cancelled - don't show error\n   *       break;\n   *     default:\n   *       // Show generic error\n   *       alert(authError.userMessage);\n   *   }\n   * }\n   * ```\n   */\n  classifyError(error: unknown): StandardAuthError;  // case-violation-ok-legacy-back-compat: the type is named in an exported signature, so consumers build object literals against it; an interface has no runtime carrier for a stub\n\n  // ============================================================================\n  // CONFIGURATION & VALIDATION\n  // ============================================================================\n\n  /**\n   * Get list of required configuration fields for this provider\n   *\n   * @returns Array of required config field names\n   *\n   * @example\n   * ```typescript\n   * // Auth0 requires: ['clientId', 'domain']\n   * // MSAL requires: ['clientId', 'tenantId']\n   * ```\n   */\n  getRequiredConfig(): string[];  // case-violation-ok-legacy-back-compat: the type is named in an exported signature, so consumers build object literals against it; an interface has no runtime carrier for a stub\n\n  /**\n   * Validate provider configuration\n   *\n   * @param config Configuration object to validate\n   * @returns True if configuration is valid\n   */\n  validateConfig(config: Record<string, unknown>): boolean;  // case-violation-ok-legacy-back-compat: the type is named in an exported signature, so consumers build object literals against it; an interface has no runtime carrier for a stub\n}"]}

package/dist/lib/auth-services.module.d.ts

@@ -39,6 +39,8 @@ export declare class AuthServicesModule {
      *        behaviour is byte-for-byte what it was before the catalog existed, which is what
      *        keeps every existing deployment working untouched.
      */
+    static ForRoot(environment: any, catalog?: PublicAuthProviderInfo[]): ModuleWithProviders<AuthServicesModule>;
+    /** @deprecated Use {@link ForRoot}. */
     static forRoot(environment: any, catalog?: PublicAuthProviderInfo[]): ModuleWithProviders<AuthServicesModule>;
     static ɵfac: i0.ɵɵFactoryDeclaration<AuthServicesModule, never>;
     static ɵmod: i0.ɵɵNgModuleDeclaration<AuthServicesModule, [typeof i1.RedirectComponent], [typeof i2.CommonModule, typeof i3.MJLoginPickerComponent], [typeof i1.RedirectComponent, typeof i3.MJLoginPickerComponent]>;

package/dist/lib/auth-services.module.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"auth-services.module.d.ts","sourceRoot":"","sources":["../../src/lib/auth-services.module.ts"],"names":[],"mappings":"AAAA,OAAO,EAAY,mBAAmB,EAAE,cAAc,EAAY,MAAM,eAAe,CAAC;AAMxF,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,sBAAsB,CAAC;AACnE,OAAO,EAAuB,KAAK,sBAAsB,EAAE,MAAM,yBAAyB,CAAC;AAK3F,OAAO,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;;;;;AAGzD,OAAO,EAAE,iBAAiB,EAAE,CAAC;AAE7B;;;;;;GAMG;AACH,eAAO,MAAM,2BAA2B,wCAA4E,CAAC;AAKrH;;;GAGG;AACH,qBAKa,kBAAkB;IAC7B;;;;;;;;;;;;;;;;;;OAkBG;IACH,MAAM,CAAC,OAAO,CAAC,WAAW,EAAE,GAAG,EAAE,OAAO,CAAC,EAAE,sBAAsB,EAAE,GAAG,mBAAmB,CAAC,kBAAkB,CAAC;yCApBlG,kBAAkB;0CAAlB,kBAAkB;0CAAlB,kBAAkB;CA6F9B"}
+{"version":3,"file":"auth-services.module.d.ts","sourceRoot":"","sources":["../../src/lib/auth-services.module.ts"],"names":[],"mappings":"AAAA,OAAO,EAAY,mBAAmB,EAAE,cAAc,EAAY,MAAM,eAAe,CAAC;AAMxF,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,sBAAsB,CAAC;AACnE,OAAO,EAAuB,KAAK,sBAAsB,EAAE,MAAM,yBAAyB,CAAC;AAK3F,OAAO,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;;;;;AAGzD,OAAO,EAAE,iBAAiB,EAAE,CAAC;AAE7B;;;;;;GAMG;AACH,eAAO,MAAM,2BAA2B,wCAA4E,CAAC;AAKrH;;;GAGG;AACH,qBAKa,kBAAkB;IAC7B;;;;;;;;;;;;;;;;;;OAkBG;IACH,MAAM,CAAC,OAAO,CAAC,WAAW,EAAE,GAAG,EAAE,OAAO,CAAC,EAAE,sBAAsB,EAAE,GAAG,mBAAmB,CAAC,kBAAkB,CAAC;IA0E7G,uCAAuC;IACvC,MAAM,CAAC,OAAO,CAAC,WAAW,EAAE,GAAG,EAAE,OAAO,CAAC,EAAE,sBAAsB,EAAE,GAAG,mBAAmB,CAAC,kBAAkB,CAAC;yCA/FlG,kBAAkB;0CAAlB,kBAAkB;0CAAlB,kBAAkB;CAkG9B"}

package/dist/lib/auth-services.module.js

@@ -5,7 +5,7 @@ import { AngularAuthProviderFactory } from './AngularAuthProviderFactory';
 import { MJMagicLinkProvider } from './providers/mjexplorer-magic-link-provider.service';
 import { MJGlobal } from '@memberjunction/global';
 import { AuthProviderCatalog } from './auth-provider-catalog';
-import { mergeCatalogEnvironment } from './catalog-environment';
+import { MergeCatalogEnvironment } from './catalog-environment';
 import { MJLoginPickerComponent } from './login-picker.component';
 // Import our generic redirect component
 import { RedirectComponent } from './redirect.component';
@@ -46,7 +46,7 @@ export class AuthServicesModule {
      *        behaviour is byte-for-byte what it was before the catalog existed, which is what
      *        keeps every existing deployment working untouched.
      */
-    static forRoot(environment, catalog) {
+    static ForRoot(environment, catalog) {
         const env = environment;
         const providers = [];
         const configuredType = env['AUTH_TYPE']?.toLowerCase();
@@ -82,7 +82,7 @@ export class AuthServicesModule {
         // environment, so the driver receives the row's values overlaid on the app's environment.
         // Magic-link is excluded: its session is established by the redeem flow, not by catalog config.
         const effectiveEnvironment = resolution.active && !magicLinkActive
-            ? mergeCatalogEnvironment(environment, resolution.active, providerClass)
+            ? MergeCatalogEnvironment(environment, resolution.active, providerClass)
             : environment;
         // Use the factory to get provider-specific Angular services
         // This uses the static method on each provider class for extensibility
@@ -105,6 +105,10 @@ export class AuthServicesModule {
             providers: providers
         };
     }
+    /** @deprecated Use {@link ForRoot}. */
+    static forRoot(environment, catalog) {
+        return this.ForRoot(environment, catalog);
+    }
     static ɵfac = function AuthServicesModule_Factory(__ngFactoryType__) { return new (__ngFactoryType__ || AuthServicesModule)(); };
     static ɵmod = /*@__PURE__*/ i0.ɵɵdefineNgModule({ type: AuthServicesModule });
     static ɵinj = /*@__PURE__*/ i0.ɵɵdefineInjector({ imports: [CommonModule] });

package/dist/lib/auth-services.module.js.map

@@ -1 +1 @@
-{"version":3,"file":"auth-services.module.js","sourceRoot":"","sources":["../../src/lib/auth-services.module.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAuB,cAAc,EAAY,MAAM,eAAe,CAAC;AACxF,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAC/C,OAAO,EAAE,UAAU,EAAE,MAAM,gCAAgC,CAAC;AAC5D,OAAO,EAAE,0BAA0B,EAAE,MAAM,8BAA8B,CAAC;AAC1E,OAAO,EAAE,mBAAmB,EAAE,MAAM,oDAAoD,CAAC;AACzF,OAAO,EAAE,QAAQ,EAAE,MAAM,wBAAwB,CAAC;AAElD,OAAO,EAAE,mBAAmB,EAA+B,MAAM,yBAAyB,CAAC;AAC3F,OAAO,EAAE,uBAAuB,EAAiC,MAAM,uBAAuB,CAAC;AAC/F,OAAO,EAAE,sBAAsB,EAAE,MAAM,0BAA0B,CAAC;AAElE,wCAAwC;AACxC,OAAO,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;;AAEzD,mEAAmE;AACnE,OAAO,EAAE,iBAAiB,EAAE,CAAC;AAE7B;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAG,IAAI,cAAc,CAAyB,6BAA6B,CAAC,CAAC;AAErH,oGAAoG;AACpG,MAAM,qBAAqB,GAA2B,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,UAAU,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;AAEzH;;;GAGG;AAMH,MAAM,OAAO,kBAAkB;IAC7B;;;;;;;;;;;;;;;;;;OAkBG;IACH,MAAM,CAAC,OAAO,CAAC,WAAgB,EAAE,OAAkC;QACjE,MAAM,GAAG,GAAG,WAAsC,CAAC;QACnD,MAAM,SAAS,GAAe,EAAE,CAAC;QACjC,MAAM,cAAc,GAAI,GAAG,CAAC,WAAW,CAAwB,EAAE,WAAW,EAAE,CAAC;QAC/E,MAAM,eAAe,GAAG,OAAO,IAAI,mBAAmB,CAAC,YAAY,EAAE,CAAC;QAEtE,0EAA0E;QAC1E,4EAA4E;QAC5E,8EAA8E;QAC9E,8EAA8E;QAC9E,iFAAiF;QACjF,8EAA8E;QAC9E,4BAA4B;QAC5B,MAAM,eAAe,GAAG,mBAAmB,CAAC,eAAe,EAAE,CAAC;QAE9D,mFAAmF;QACnF,6FAA6F;QAC7F,MAAM,UAAU,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC,mBAAmB,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,qBAAqB,CAAC;QACjH,SAAS,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,2BAA2B,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC,CAAC;QAE/E,MAAM,WAAW,GAAG,UAAU,CAAC,MAAM,EAAE,WAAW,EAAE,WAAW,EAAE,CAAC;QAClE,MAAM,QAAQ,GAAG,eAAe,CAAC,CAAC,CAAC,mBAAmB,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,WAAW,IAAI,cAAc,CAAC,CAAC;QAEvG,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,OAAO,CAAC,KAAK,CAAC,kHAAkH,CAAC,CAAC;YAClI,OAAO;gBACL,QAAQ,EAAE,kBAAkB;gBAC5B,SAAS,EAAE,SAAoB;aAChC,CAAC;QACJ,CAAC;QAED,IAAI,eAAe,IAAI,QAAQ,KAAK,CAAC,WAAW,IAAI,cAAc,CAAC,EAAE,CAAC;YACpE,OAAO,CAAC,GAAG,CAAC,gHAAgH,WAAW,IAAI,cAAc,IAAI,MAAM,KAAK,CAAC,CAAC;QAC5K,CAAC;QAED,6DAA6D;QAC7D,MAAM,YAAY,GAAG,QAAQ,CAAC,QAAQ,CAAC,YAAY,CAAC,eAAe,CACjE,UAAU,EACV,QAAQ,CACT,CAAC;QACF,MAAM,aAAa,GAAG,YAAY,EAAE,QAAQ,CAAC;QAE7C,6FAA6F;QAC7F,0FAA0F;QAC1F,gGAAgG;QAChG,MAAM,oBAAoB,GACxB,UAAU,CAAC,MAAM,IAAI,CAAC,eAAe;YACnC,CAAC,CAAC,uBAAuB,CAAC,WAAW,EAAE,UAAU,CAAC,MAAM,EAAE,aAAqD,CAAC;YAChH,CAAC,CAAC,WAAW,CAAC;QAElB,4DAA4D;QAC5D,uEAAuE;QACvE,MAAM,eAAe,GAAG,0BAA0B,CAAC,0BAA0B,CAAC,QAAQ,EAAE,oBAAoB,CAAC,CAAC;QAC9G,SAAS,CAAC,IAAI,CAAC,GAAG,eAAe,CAAC,CAAC;QAEnC,IAAI,aAAa,EAAE,CAAC;YAClB,0BAA0B;YAC1B,SAAS,CAAC,IAAI,CAAC;gBACb,OAAO,EAAE,UAAU;gBACnB,QAAQ,EAAE,aAAa;aACxB,CAAC,CAAC;QACL,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,KAAK,CAAC,+CAA+C,QAAQ,EAAE,CAAC,CAAC;QAC3E,CAAC;QAED,yBAAyB;QACzB,SAAS,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;QAE3C,OAAO;YACL,QAAQ,EAAE,kBAAkB;YAC5B,SAAS,EAAE,SAAoB;SAChC,CAAC;IACJ,CAAC;4GA5FU,kBAAkB;4DAAlB,kBAAkB;gEAJnB,YAAY;;iFAIX,kBAAkB;cAL9B,QAAQ;eAAC;gBACR,OAAO,EAAE,CAAC,YAAY,EAAE,sBAAsB,CAAC;gBAC/C,YAAY,EAAE,CAAC,iBAAiB,CAAC;gBACjC,OAAO,EAAE,CAAC,iBAAiB,EAAE,sBAAsB,CAAC;aACrD;;wFACY,kBAAkB,mBAHd,iBAAiB,aADtB,YAAY,EAAE,sBAAsB,aAEpC,iBAAiB,EAAE,sBAAsB","sourcesContent":["import { NgModule, ModuleWithProviders, InjectionToken, Provider } from '@angular/core';\nimport { CommonModule } from '@angular/common';\nimport { MJAuthBase } from './mjexplorer-auth-base.service';\nimport { AngularAuthProviderFactory } from './AngularAuthProviderFactory';\nimport { MJMagicLinkProvider } from './providers/mjexplorer-magic-link-provider.service';\nimport { MJGlobal } from '@memberjunction/global';\nimport type { PublicAuthProviderInfo } from '@memberjunction/core';\nimport { AuthProviderCatalog, type AuthProviderResolution } from './auth-provider-catalog';\nimport { mergeCatalogEnvironment, type CatalogEnvironmentMapper } from './catalog-environment';\nimport { MJLoginPickerComponent } from './login-picker.component';\n\n// Import our generic redirect component\nimport { RedirectComponent } from './redirect.component';\n\n// Export the generic redirect component for backward compatibility\nexport { RedirectComponent };\n\n/**\n * Injection token carrying how authentication resolved for this page load.\n *\n * A login surface injects this to decide whether to render the multi-provider picker or the\n * single sign-in button, and whether to start the login flow immediately after a picker\n * choice caused a reload.\n */\nexport const MJ_AUTH_PROVIDER_RESOLUTION = new InjectionToken<AuthProviderResolution>('MJ_AUTH_PROVIDER_RESOLUTION');\n\n/** The resolution used when no catalog is supplied — i.e. the pre-existing single-provider path. */\nconst NO_CATALOG_RESOLUTION: AuthProviderResolution = { active: null, choices: [], showPicker: false, autoLogin: false };\n\n/**\n * Extensible authentication module that supports N providers\n * Uses MJGlobal ClassFactory pattern for dynamic provider creation\n */\n@NgModule({\n  imports: [CommonModule, MJLoginPickerComponent],\n  declarations: [RedirectComponent],\n  exports: [RedirectComponent, MJLoginPickerComponent]\n})\nexport class AuthServicesModule {\n  /**\n   * Wires the authentication provider into DI.\n   *\n   * @param environment The app's compiled environment. Typed loosely on purpose: every app\n   *        declares its own environment shape (`MJEnvironmentConfig` and downstream equivalents\n   *        are interfaces, which TypeScript will not assign to an indexed record), so narrowing\n   *        this parameter would break every existing caller. It is narrowed once, below.\n   * @param catalog Optional pre-auth provider catalog. Defaults to whatever the app preloaded\n   *        via {@link AuthProviderCatalog.Preload} in its bootstrap entry point — passing it\n   *        explicitly is for tests and for apps that source the catalog some other way. Callers\n   *        must NOT pass `AuthProviderCatalog.GetPreloaded()` themselves: Angular's compiler\n   *        requires every `imports` entry to be statically analyzable, and a function call in\n   *        the argument list fails AOT with \"Value could not be determined statically\".\n   *\n   *        When the catalog is empty — an older server, a failed fetch, or a deployment that\n   *        never adopted the entity — resolution falls back to `environment.AUTH_TYPE` and\n   *        behaviour is byte-for-byte what it was before the catalog existed, which is what\n   *        keeps every existing deployment working untouched.\n   */\n  static forRoot(environment: any, catalog?: PublicAuthProviderInfo[]): ModuleWithProviders<AuthServicesModule> {\n    const env = environment as Record<string, unknown>;\n    const providers: Provider[] = [];\n    const configuredType = (env['AUTH_TYPE'] as string | undefined)?.toLowerCase();\n    const resolvedCatalog = catalog ?? AuthProviderCatalog.GetPreloaded();\n\n    // Coexistence resolution: a single Explorer deployment can serve both SSO\n    // users and magic-link guests. If a magic-link session token is present for\n    // this page load (URL fragment from /redeem, or stored earlier this tab), use\n    // the magic-link provider regardless of the configured primary IdP. Otherwise\n    // use the catalog selection, then the configured AUTH_TYPE. This auto-falls-back\n    // to the IdP once a guest's token is gone (expired/logged out), so the normal\n    // login button works again.\n    const magicLinkActive = MJMagicLinkProvider.hasSessionToken();\n\n    // The catalog resolves which provider this load uses; it never overrides an active\n    // magic-link session, which is a property of THIS page load rather than a configured choice.\n    const resolution = resolvedCatalog.length ? AuthProviderCatalog.Resolve(resolvedCatalog) : NO_CATALOG_RESOLUTION;\n    providers.push({ provide: MJ_AUTH_PROVIDER_RESOLUTION, useValue: resolution });\n\n    const catalogType = resolution.active?.driverClass?.toLowerCase();\n    const authType = magicLinkActive ? MJMagicLinkProvider.PROVIDER_TYPE : (catalogType ?? configuredType);\n\n    if (!authType) {\n      console.error('No authentication provider available: the server published no catalog and no AUTH_TYPE is set in the environment');\n      return {\n        ngModule: AuthServicesModule,\n        providers: providers as never[]\n      };\n    }\n\n    if (magicLinkActive && authType !== (catalogType ?? configuredType)) {\n      console.log(`[Auth] Magic-link session token detected — using the magic-link provider for this load (configured primary: '${catalogType ?? configuredType ?? 'none'}').`);\n    }\n\n    // Get the provider class from ClassFactory for extensibility\n    const registration = MJGlobal.Instance.ClassFactory.GetRegistration(\n      MJAuthBase,\n      authType\n    );\n    const providerClass = registration?.SubClass;\n\n    // A catalog-selected provider takes its settings from metadata rather than from the compiled\n    // environment, so the driver receives the row's values overlaid on the app's environment.\n    // Magic-link is excluded: its session is established by the redeem flow, not by catalog config.\n    const effectiveEnvironment =\n      resolution.active && !magicLinkActive\n        ? mergeCatalogEnvironment(environment, resolution.active, providerClass as CatalogEnvironmentMapper | undefined)\n        : environment;\n\n    // Use the factory to get provider-specific Angular services\n    // This uses the static method on each provider class for extensibility\n    const angularServices = AngularAuthProviderFactory.getProviderAngularServices(authType, effectiveEnvironment);\n    providers.push(...angularServices);\n\n    if (providerClass) {\n      // Add the provider itself\n      providers.push({\n        provide: MJAuthBase,\n        useClass: providerClass\n      });\n    } else {\n      console.error(`No provider class registered for auth type: ${authType}`);\n    }\n\n    // Add the factory itself\n    providers.push(AngularAuthProviderFactory);\n\n    return {\n      ngModule: AuthServicesModule,\n      providers: providers as never[]\n    };\n  }\n}\n"]}
+{"version":3,"file":"auth-services.module.js","sourceRoot":"","sources":["../../src/lib/auth-services.module.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAuB,cAAc,EAAY,MAAM,eAAe,CAAC;AACxF,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAC/C,OAAO,EAAE,UAAU,EAAE,MAAM,gCAAgC,CAAC;AAC5D,OAAO,EAAE,0BAA0B,EAAE,MAAM,8BAA8B,CAAC;AAC1E,OAAO,EAAE,mBAAmB,EAAE,MAAM,oDAAoD,CAAC;AACzF,OAAO,EAAE,QAAQ,EAAE,MAAM,wBAAwB,CAAC;AAElD,OAAO,EAAE,mBAAmB,EAA+B,MAAM,yBAAyB,CAAC;AAC3F,OAAO,EAAE,uBAAuB,EAAiC,MAAM,uBAAuB,CAAC;AAC/F,OAAO,EAAE,sBAAsB,EAAE,MAAM,0BAA0B,CAAC;AAElE,wCAAwC;AACxC,OAAO,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;;AAEzD,mEAAmE;AACnE,OAAO,EAAE,iBAAiB,EAAE,CAAC;AAE7B;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAG,IAAI,cAAc,CAAyB,6BAA6B,CAAC,CAAC;AAErH,oGAAoG;AACpG,MAAM,qBAAqB,GAA2B,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,UAAU,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;AAEzH;;;GAGG;AAMH,MAAM,OAAO,kBAAkB;IAC7B;;;;;;;;;;;;;;;;;;OAkBG;IACH,MAAM,CAAC,OAAO,CAAC,WAAgB,EAAE,OAAkC;QACjE,MAAM,GAAG,GAAG,WAAsC,CAAC;QACnD,MAAM,SAAS,GAAe,EAAE,CAAC;QACjC,MAAM,cAAc,GAAI,GAAG,CAAC,WAAW,CAAwB,EAAE,WAAW,EAAE,CAAC;QAC/E,MAAM,eAAe,GAAG,OAAO,IAAI,mBAAmB,CAAC,YAAY,EAAE,CAAC;QAEtE,0EAA0E;QAC1E,4EAA4E;QAC5E,8EAA8E;QAC9E,8EAA8E;QAC9E,iFAAiF;QACjF,8EAA8E;QAC9E,4BAA4B;QAC5B,MAAM,eAAe,GAAG,mBAAmB,CAAC,eAAe,EAAE,CAAC;QAE9D,mFAAmF;QACnF,6FAA6F;QAC7F,MAAM,UAAU,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC,mBAAmB,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,qBAAqB,CAAC;QACjH,SAAS,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,2BAA2B,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC,CAAC;QAE/E,MAAM,WAAW,GAAG,UAAU,CAAC,MAAM,EAAE,WAAW,EAAE,WAAW,EAAE,CAAC;QAClE,MAAM,QAAQ,GAAG,eAAe,CAAC,CAAC,CAAC,mBAAmB,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,WAAW,IAAI,cAAc,CAAC,CAAC;QAEvG,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,OAAO,CAAC,KAAK,CAAC,kHAAkH,CAAC,CAAC;YAClI,OAAO;gBACL,QAAQ,EAAE,kBAAkB;gBAC5B,SAAS,EAAE,SAAoB;aAChC,CAAC;QACJ,CAAC;QAED,IAAI,eAAe,IAAI,QAAQ,KAAK,CAAC,WAAW,IAAI,cAAc,CAAC,EAAE,CAAC;YACpE,OAAO,CAAC,GAAG,CAAC,gHAAgH,WAAW,IAAI,cAAc,IAAI,MAAM,KAAK,CAAC,CAAC;QAC5K,CAAC;QAED,6DAA6D;QAC7D,MAAM,YAAY,GAAG,QAAQ,CAAC,QAAQ,CAAC,YAAY,CAAC,eAAe,CACjE,UAAU,EACV,QAAQ,CACT,CAAC;QACF,MAAM,aAAa,GAAG,YAAY,EAAE,QAAQ,CAAC;QAE7C,6FAA6F;QAC7F,0FAA0F;QAC1F,gGAAgG;QAChG,MAAM,oBAAoB,GACxB,UAAU,CAAC,MAAM,IAAI,CAAC,eAAe;YACnC,CAAC,CAAC,uBAAuB,CAAC,WAAW,EAAE,UAAU,CAAC,MAAM,EAAE,aAAqD,CAAC;YAChH,CAAC,CAAC,WAAW,CAAC;QAElB,4DAA4D;QAC5D,uEAAuE;QACvE,MAAM,eAAe,GAAG,0BAA0B,CAAC,0BAA0B,CAAC,QAAQ,EAAE,oBAAoB,CAAC,CAAC;QAC9G,SAAS,CAAC,IAAI,CAAC,GAAG,eAAe,CAAC,CAAC;QAEnC,IAAI,aAAa,EAAE,CAAC;YAClB,0BAA0B;YAC1B,SAAS,CAAC,IAAI,CAAC;gBACb,OAAO,EAAE,UAAU;gBACnB,QAAQ,EAAE,aAAa;aACxB,CAAC,CAAC;QACL,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,KAAK,CAAC,+CAA+C,QAAQ,EAAE,CAAC,CAAC;QAC3E,CAAC;QAED,yBAAyB;QACzB,SAAS,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;QAE3C,OAAO;YACL,QAAQ,EAAE,kBAAkB;YAC5B,SAAS,EAAE,SAAoB;SAChC,CAAC;IACJ,CAAC;IAED,uCAAuC;IACvC,MAAM,CAAC,OAAO,CAAC,WAAgB,EAAE,OAAkC;QACjE,OAAO,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;IAC5C,CAAC;4GAjGU,kBAAkB;4DAAlB,kBAAkB;gEAJnB,YAAY;;iFAIX,kBAAkB;cAL9B,QAAQ;eAAC;gBACR,OAAO,EAAE,CAAC,YAAY,EAAE,sBAAsB,CAAC;gBAC/C,YAAY,EAAE,CAAC,iBAAiB,CAAC;gBACjC,OAAO,EAAE,CAAC,iBAAiB,EAAE,sBAAsB,CAAC;aACrD;;wFACY,kBAAkB,mBAHd,iBAAiB,aADtB,YAAY,EAAE,sBAAsB,aAEpC,iBAAiB,EAAE,sBAAsB","sourcesContent":["import { NgModule, ModuleWithProviders, InjectionToken, Provider } from '@angular/core';\nimport { CommonModule } from '@angular/common';\nimport { MJAuthBase } from './mjexplorer-auth-base.service';\nimport { AngularAuthProviderFactory } from './AngularAuthProviderFactory';\nimport { MJMagicLinkProvider } from './providers/mjexplorer-magic-link-provider.service';\nimport { MJGlobal } from '@memberjunction/global';\nimport type { PublicAuthProviderInfo } from '@memberjunction/core';\nimport { AuthProviderCatalog, type AuthProviderResolution } from './auth-provider-catalog';\nimport { MergeCatalogEnvironment, type CatalogEnvironmentMapper } from './catalog-environment';\nimport { MJLoginPickerComponent } from './login-picker.component';\n\n// Import our generic redirect component\nimport { RedirectComponent } from './redirect.component';\n\n// Export the generic redirect component for backward compatibility\nexport { RedirectComponent };\n\n/**\n * Injection token carrying how authentication resolved for this page load.\n *\n * A login surface injects this to decide whether to render the multi-provider picker or the\n * single sign-in button, and whether to start the login flow immediately after a picker\n * choice caused a reload.\n */\nexport const MJ_AUTH_PROVIDER_RESOLUTION = new InjectionToken<AuthProviderResolution>('MJ_AUTH_PROVIDER_RESOLUTION');\n\n/** The resolution used when no catalog is supplied — i.e. the pre-existing single-provider path. */\nconst NO_CATALOG_RESOLUTION: AuthProviderResolution = { active: null, choices: [], showPicker: false, autoLogin: false };\n\n/**\n * Extensible authentication module that supports N providers\n * Uses MJGlobal ClassFactory pattern for dynamic provider creation\n */\n@NgModule({\n  imports: [CommonModule, MJLoginPickerComponent],\n  declarations: [RedirectComponent],\n  exports: [RedirectComponent, MJLoginPickerComponent]\n})\nexport class AuthServicesModule {\n  /**\n   * Wires the authentication provider into DI.\n   *\n   * @param environment The app's compiled environment. Typed loosely on purpose: every app\n   *        declares its own environment shape (`MJEnvironmentConfig` and downstream equivalents\n   *        are interfaces, which TypeScript will not assign to an indexed record), so narrowing\n   *        this parameter would break every existing caller. It is narrowed once, below.\n   * @param catalog Optional pre-auth provider catalog. Defaults to whatever the app preloaded\n   *        via {@link AuthProviderCatalog.Preload} in its bootstrap entry point — passing it\n   *        explicitly is for tests and for apps that source the catalog some other way. Callers\n   *        must NOT pass `AuthProviderCatalog.GetPreloaded()` themselves: Angular's compiler\n   *        requires every `imports` entry to be statically analyzable, and a function call in\n   *        the argument list fails AOT with \"Value could not be determined statically\".\n   *\n   *        When the catalog is empty — an older server, a failed fetch, or a deployment that\n   *        never adopted the entity — resolution falls back to `environment.AUTH_TYPE` and\n   *        behaviour is byte-for-byte what it was before the catalog existed, which is what\n   *        keeps every existing deployment working untouched.\n   */\n  static ForRoot(environment: any, catalog?: PublicAuthProviderInfo[]): ModuleWithProviders<AuthServicesModule> {\n    const env = environment as Record<string, unknown>;\n    const providers: Provider[] = [];\n    const configuredType = (env['AUTH_TYPE'] as string | undefined)?.toLowerCase();\n    const resolvedCatalog = catalog ?? AuthProviderCatalog.GetPreloaded();\n\n    // Coexistence resolution: a single Explorer deployment can serve both SSO\n    // users and magic-link guests. If a magic-link session token is present for\n    // this page load (URL fragment from /redeem, or stored earlier this tab), use\n    // the magic-link provider regardless of the configured primary IdP. Otherwise\n    // use the catalog selection, then the configured AUTH_TYPE. This auto-falls-back\n    // to the IdP once a guest's token is gone (expired/logged out), so the normal\n    // login button works again.\n    const magicLinkActive = MJMagicLinkProvider.hasSessionToken();\n\n    // The catalog resolves which provider this load uses; it never overrides an active\n    // magic-link session, which is a property of THIS page load rather than a configured choice.\n    const resolution = resolvedCatalog.length ? AuthProviderCatalog.Resolve(resolvedCatalog) : NO_CATALOG_RESOLUTION;\n    providers.push({ provide: MJ_AUTH_PROVIDER_RESOLUTION, useValue: resolution });\n\n    const catalogType = resolution.active?.driverClass?.toLowerCase();\n    const authType = magicLinkActive ? MJMagicLinkProvider.PROVIDER_TYPE : (catalogType ?? configuredType);\n\n    if (!authType) {\n      console.error('No authentication provider available: the server published no catalog and no AUTH_TYPE is set in the environment');\n      return {\n        ngModule: AuthServicesModule,\n        providers: providers as never[]\n      };\n    }\n\n    if (magicLinkActive && authType !== (catalogType ?? configuredType)) {\n      console.log(`[Auth] Magic-link session token detected — using the magic-link provider for this load (configured primary: '${catalogType ?? configuredType ?? 'none'}').`);\n    }\n\n    // Get the provider class from ClassFactory for extensibility\n    const registration = MJGlobal.Instance.ClassFactory.GetRegistration(\n      MJAuthBase,\n      authType\n    );\n    const providerClass = registration?.SubClass;\n\n    // A catalog-selected provider takes its settings from metadata rather than from the compiled\n    // environment, so the driver receives the row's values overlaid on the app's environment.\n    // Magic-link is excluded: its session is established by the redeem flow, not by catalog config.\n    const effectiveEnvironment =\n      resolution.active && !magicLinkActive\n        ? MergeCatalogEnvironment(environment, resolution.active, providerClass as CatalogEnvironmentMapper | undefined)\n        : environment;\n\n    // Use the factory to get provider-specific Angular services\n    // This uses the static method on each provider class for extensibility\n    const angularServices = AngularAuthProviderFactory.getProviderAngularServices(authType, effectiveEnvironment);\n    providers.push(...angularServices);\n\n    if (providerClass) {\n      // Add the provider itself\n      providers.push({\n        provide: MJAuthBase,\n        useClass: providerClass\n      });\n    } else {\n      console.error(`No provider class registered for auth type: ${authType}`);\n    }\n\n    // Add the factory itself\n    providers.push(AngularAuthProviderFactory);\n\n    return {\n      ngModule: AuthServicesModule,\n      providers: providers as never[]\n    };\n  }\n\n  /** @deprecated Use {@link ForRoot}. */\n  static forRoot(environment: any, catalog?: PublicAuthProviderInfo[]): ModuleWithProviders<AuthServicesModule> {\n    return this.ForRoot(environment, catalog);\n  }\n}\n"]}

package/dist/lib/catalog-environment.d.ts

@@ -33,6 +33,8 @@ export interface CatalogEnvironmentMapper {
  * `buildProviderConfig`, where a blob must not silently redefine a described, reviewable column
  * (`{"scopes": "..."}` in the blob would otherwise clobber the parsed `Scopes` column).
  */
+export declare function BuildGenericEnvironmentOverlay(info: PublicAuthProviderInfo): Record<string, unknown>;
+/** @deprecated Use {@link BuildGenericEnvironmentOverlay}. */
 export declare function buildGenericEnvironmentOverlay(info: PublicAuthProviderInfo): Record<string, unknown>;
 /**
  * Produces the environment record to hand a driver for a catalog-selected provider.
@@ -46,5 +48,7 @@ export declare function buildGenericEnvironmentOverlay(info: PublicAuthProviderI
  * @param info The provider selected from the catalog.
  * @param providerClass The resolved `MJAuthBase` subclass, consulted for a custom mapper.
  */
+export declare function MergeCatalogEnvironment(environment: Record<string, unknown>, info: PublicAuthProviderInfo, providerClass?: CatalogEnvironmentMapper): Record<string, unknown>;
+/** @deprecated Use {@link MergeCatalogEnvironment}. */
 export declare function mergeCatalogEnvironment(environment: Record<string, unknown>, info: PublicAuthProviderInfo, providerClass?: CatalogEnvironmentMapper): Record<string, unknown>;
 //# sourceMappingURL=catalog-environment.d.ts.map

package/dist/lib/catalog-environment.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"catalog-environment.d.ts","sourceRoot":"","sources":["../../src/lib/catalog-environment.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,sBAAsB,CAAC;AAEnE;;;;GAIG;AACH,MAAM,WAAW,wBAAwB;IACvC,sBAAsB,CAAC,EAAE,CAAC,IAAI,EAAE,sBAAsB,KAAK,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACpF;AAmBD;;;;;;;;;;;;;GAaG;AACH,wBAAgB,8BAA8B,CAAC,IAAI,EAAE,sBAAsB,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CA6BpG;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,uBAAuB,CACrC,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACpC,IAAI,EAAE,sBAAsB,EAC5B,aAAa,CAAC,EAAE,wBAAwB,GACvC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAOzB"}
+{"version":3,"file":"catalog-environment.d.ts","sourceRoot":"","sources":["../../src/lib/catalog-environment.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,sBAAsB,CAAC;AAEnE;;;;GAIG;AACH,MAAM,WAAW,wBAAwB;IACvC,sBAAsB,CAAC,EAAE,CAAC,IAAI,EAAE,sBAAsB,KAAK,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACpF;AAmBD;;;;;;;;;;;;;GAaG;AACH,wBAAgB,8BAA8B,CAAC,IAAI,EAAE,sBAAsB,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CA6BpG;AAED,8DAA8D;AAC9D,wBAAgB,8BAA8B,CAAC,IAAI,EAAE,sBAAsB,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAEpG;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,uBAAuB,CACrC,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACpC,IAAI,EAAE,sBAAsB,EAC5B,aAAa,CAAC,EAAE,wBAAwB,GACvC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAOzB;AAED,uDAAuD;AACvD,wBAAgB,uBAAuB,CACrC,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACpC,IAAI,EAAE,sBAAsB,EAC5B,aAAa,CAAC,EAAE,wBAAwB,GACvC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAEzB"}

package/dist/lib/catalog-environment.js

@@ -39,7 +39,7 @@ function environmentPrefix(driverClass) {
  * `buildProviderConfig`, where a blob must not silently redefine a described, reviewable column
  * (`{"scopes": "..."}` in the blob would otherwise clobber the parsed `Scopes` column).
  */
-export function buildGenericEnvironmentOverlay(info) {
+export function BuildGenericEnvironmentOverlay(info) {
     const prefix = environmentPrefix(info.driverClass);
     const overlay = {};
     for (const [key, value] of Object.entries(info.clientConfiguration ?? {})) {
@@ -66,6 +66,10 @@ export function buildGenericEnvironmentOverlay(info) {
     }
     return overlay;
 }
+/** @deprecated Use {@link BuildGenericEnvironmentOverlay}. */
+export function buildGenericEnvironmentOverlay(info) {
+    return BuildGenericEnvironmentOverlay(info);
+}
 /**
  * Produces the environment record to hand a driver for a catalog-selected provider.
  *
@@ -78,10 +82,14 @@ export function buildGenericEnvironmentOverlay(info) {
  * @param info The provider selected from the catalog.
  * @param providerClass The resolved `MJAuthBase` subclass, consulted for a custom mapper.
  */
-export function mergeCatalogEnvironment(environment, info, providerClass) {
+export function MergeCatalogEnvironment(environment, info, providerClass) {
     const overlay = typeof providerClass?.EnvironmentFromCatalog === 'function'
         ? providerClass.EnvironmentFromCatalog(info)
-        : buildGenericEnvironmentOverlay(info);
+        : BuildGenericEnvironmentOverlay(info);
     return { ...environment, ...overlay, AUTH_TYPE: info.driverClass };
 }
+/** @deprecated Use {@link MergeCatalogEnvironment}. */
+export function mergeCatalogEnvironment(environment, info, providerClass) {
+    return MergeCatalogEnvironment(environment, info, providerClass);
+}
 //# sourceMappingURL=catalog-environment.js.map

package/dist/lib/catalog-environment.js.map

@@ -1 +1 @@
-{"version":3,"file":"catalog-environment.js","sourceRoot":"","sources":["../../src/lib/catalog-environment.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAaH;;GAEG;AACH,SAAS,iBAAiB,CAAC,GAAW;IACpC,OAAO,GAAG;SACP,OAAO,CAAC,oBAAoB,EAAE,OAAO,CAAC;SACtC,OAAO,CAAC,SAAS,EAAE,GAAG,CAAC;SACvB,WAAW,EAAE,CAAC;AACnB,CAAC;AAED;;GAEG;AACH,SAAS,iBAAiB,CAAC,WAAmB;IAC5C,OAAO,iBAAiB,CAAC,WAAW,CAAC,CAAC;AACxC,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,8BAA8B,CAAC,IAA4B;IACzE,MAAM,MAAM,GAAG,iBAAiB,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IACnD,MAAM,OAAO,GAA4B,EAAE,CAAC;IAE5C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,mBAAmB,IAAI,EAAE,CAAC,EAAE,CAAC;QAC1E,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YAC1C,OAAO,CAAC,GAAG,MAAM,IAAI,iBAAiB,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC;QACzD,CAAC;IACH,CAAC;IAED,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;QAClB,OAAO,CAAC,GAAG,MAAM,WAAW,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC;IAChD,CAAC;IACD,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;QAChB,OAAO,CAAC,GAAG,MAAM,SAAS,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC;IAC5C,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACzD,yFAAyF;QACzF,2FAA2F;QAC3F,2FAA2F;QAC3F,2FAA2F;QAC3F,mDAAmD;QACnD,OAAO,CAAC,GAAG,MAAM,SAAS,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC;IAC5C,CAAC;IACD,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;QAChB,OAAO,CAAC,GAAG,MAAM,SAAS,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC;IAC5C,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,uBAAuB,CACrC,WAAoC,EACpC,IAA4B,EAC5B,aAAwC;IAExC,MAAM,OAAO,GACX,OAAO,aAAa,EAAE,sBAAsB,KAAK,UAAU;QACzD,CAAC,CAAC,aAAa,CAAC,sBAAsB,CAAC,IAAI,CAAC;QAC5C,CAAC,CAAC,8BAA8B,CAAC,IAAI,CAAC,CAAC;IAE3C,OAAO,EAAE,GAAG,WAAW,EAAE,GAAG,OAAO,EAAE,SAAS,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC;AACrE,CAAC","sourcesContent":["/**\n * @fileoverview Bridges a metadata provider row to the flat `environment` record that the\n * browser auth drivers already consume.\n *\n * Every `MJAuthBase` subclass exposes `static angularProviderFactory(environment)` and reads\n * its settings from prefixed keys on that record (`AUTH0_DOMAIN`, `WORKOS_CLIENTID`, ...).\n * Rather than rewrite each driver to accept a catalog row, the catalog is projected INTO that\n * record — so a provider configured from metadata and one configured from `environment.ts`\n * take an identical code path, and drivers keep working untouched.\n *\n * @module @memberjunction/ng-auth-services\n */\n\nimport type { PublicAuthProviderInfo } from '@memberjunction/core';\n\n/**\n * Optional hook a provider class may expose when the generic prefixed-key convention does not\n * describe its configuration. MSAL is the built-in example: it reads unprefixed `CLIENT_ID` /\n * `CLIENT_AUTHORITY`, so it maps the catalog row itself.\n */\nexport interface CatalogEnvironmentMapper {\n  EnvironmentFromCatalog?: (info: PublicAuthProviderInfo) => Record<string, unknown>;\n}\n\n/**\n * `redirectUri` → `REDIRECT_URI`, `apiHostname` → `API_HOSTNAME`, `userPoolId` → `USER_POOL_ID`.\n */\nfunction camelToUpperSnake(key: string): string {\n  return key\n    .replace(/([a-z0-9])([A-Z])/g, '$1_$2')\n    .replace(/[-\\s]+/g, '_')\n    .toUpperCase();\n}\n\n/**\n * The environment-key prefix for a driver: `workos` → `WORKOS`, `magic-link` → `MAGIC_LINK`.\n */\nfunction environmentPrefix(driverClass: string): string {\n  return camelToUpperSnake(driverClass);\n}\n\n/**\n * Projects a catalog row onto the conventional prefixed environment keys.\n *\n * The convention — `<DRIVER>_CLIENTID`, `<DRIVER>_DOMAIN`, `<DRIVER>_SCOPES`, plus one key per\n * `clientConfiguration` entry — is exactly what the Auth0, Okta, Cognito and WorkOS drivers\n * already read, so those four need no per-driver mapping at all. A driver that deviates\n * supplies `EnvironmentFromCatalog`.\n *\n * Only defined values are emitted, so a catalog row never blanks out a key the app's compiled\n * environment legitimately supplies. `clientConfiguration` entries are projected FIRST so the\n * modelled columns win a key collision — the same precedence the server enforces in\n * `buildProviderConfig`, where a blob must not silently redefine a described, reviewable column\n * (`{\"scopes\": \"...\"}` in the blob would otherwise clobber the parsed `Scopes` column).\n */\nexport function buildGenericEnvironmentOverlay(info: PublicAuthProviderInfo): Record<string, unknown> {\n  const prefix = environmentPrefix(info.driverClass);\n  const overlay: Record<string, unknown> = {};\n\n  for (const [key, value] of Object.entries(info.clientConfiguration ?? {})) {\n    if (value !== null && value !== undefined) {\n      overlay[`${prefix}_${camelToUpperSnake(key)}`] = value;\n    }\n  }\n\n  if (info.clientId) {\n    overlay[`${prefix}_CLIENTID`] = info.clientId;\n  }\n  if (info.domain) {\n    overlay[`${prefix}_DOMAIN`] = info.domain;\n  }\n  if (Array.isArray(info.scopes) && info.scopes.length > 0) {\n    // The catalog publishes scopes pre-parsed (the server splits the delimited column at the\n    // trust boundary). The drivers that read this key — Okta and Cognito — hand it straight to\n    // SDK config typed `string[]`. The Array.isArray guard keeps a malformed or older server's\n    // string value from reaching those SDKs: this module runs at bootstrap, where the contract\n    // is degrade-to-compiled-environment, never throw.\n    overlay[`${prefix}_SCOPES`] = info.scopes;\n  }\n  if (info.issuer) {\n    overlay[`${prefix}_ISSUER`] = info.issuer;\n  }\n\n  return overlay;\n}\n\n/**\n * Produces the environment record to hand a driver for a catalog-selected provider.\n *\n * The app's compiled environment stays the base layer — it carries app-wide settings such as\n * `GRAPHQL_URI` that have nothing to do with the identity provider — and the catalog overlays\n * only the provider's own keys on top. Metadata therefore wins over a stale compiled value for\n * the settings it owns, without the catalog having to restate the whole environment.\n *\n * @param environment The app's compiled environment object.\n * @param info The provider selected from the catalog.\n * @param providerClass The resolved `MJAuthBase` subclass, consulted for a custom mapper.\n */\nexport function mergeCatalogEnvironment(\n  environment: Record<string, unknown>,\n  info: PublicAuthProviderInfo,\n  providerClass?: CatalogEnvironmentMapper\n): Record<string, unknown> {\n  const overlay =\n    typeof providerClass?.EnvironmentFromCatalog === 'function'\n      ? providerClass.EnvironmentFromCatalog(info)\n      : buildGenericEnvironmentOverlay(info);\n\n  return { ...environment, ...overlay, AUTH_TYPE: info.driverClass };\n}\n"]}
+{"version":3,"file":"catalog-environment.js","sourceRoot":"","sources":["../../src/lib/catalog-environment.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAaH;;GAEG;AACH,SAAS,iBAAiB,CAAC,GAAW;IACpC,OAAO,GAAG;SACP,OAAO,CAAC,oBAAoB,EAAE,OAAO,CAAC;SACtC,OAAO,CAAC,SAAS,EAAE,GAAG,CAAC;SACvB,WAAW,EAAE,CAAC;AACnB,CAAC;AAED;;GAEG;AACH,SAAS,iBAAiB,CAAC,WAAmB;IAC5C,OAAO,iBAAiB,CAAC,WAAW,CAAC,CAAC;AACxC,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,8BAA8B,CAAC,IAA4B;IACzE,MAAM,MAAM,GAAG,iBAAiB,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IACnD,MAAM,OAAO,GAA4B,EAAE,CAAC;IAE5C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,mBAAmB,IAAI,EAAE,CAAC,EAAE,CAAC;QAC1E,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YAC1C,OAAO,CAAC,GAAG,MAAM,IAAI,iBAAiB,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC;QACzD,CAAC;IACH,CAAC;IAED,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;QAClB,OAAO,CAAC,GAAG,MAAM,WAAW,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC;IAChD,CAAC;IACD,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;QAChB,OAAO,CAAC,GAAG,MAAM,SAAS,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC;IAC5C,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACzD,yFAAyF;QACzF,2FAA2F;QAC3F,2FAA2F;QAC3F,2FAA2F;QAC3F,mDAAmD;QACnD,OAAO,CAAC,GAAG,MAAM,SAAS,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC;IAC5C,CAAC;IACD,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;QAChB,OAAO,CAAC,GAAG,MAAM,SAAS,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC;IAC5C,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,8DAA8D;AAC9D,MAAM,UAAU,8BAA8B,CAAC,IAA4B;IACzE,OAAO,8BAA8B,CAAC,IAAI,CAAC,CAAC;AAC9C,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,uBAAuB,CACrC,WAAoC,EACpC,IAA4B,EAC5B,aAAwC;IAExC,MAAM,OAAO,GACX,OAAO,aAAa,EAAE,sBAAsB,KAAK,UAAU;QACzD,CAAC,CAAC,aAAa,CAAC,sBAAsB,CAAC,IAAI,CAAC;QAC5C,CAAC,CAAC,8BAA8B,CAAC,IAAI,CAAC,CAAC;IAE3C,OAAO,EAAE,GAAG,WAAW,EAAE,GAAG,OAAO,EAAE,SAAS,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC;AACrE,CAAC;AAED,uDAAuD;AACvD,MAAM,UAAU,uBAAuB,CACrC,WAAoC,EACpC,IAA4B,EAC5B,aAAwC;IAExC,OAAO,uBAAuB,CAAC,WAAW,EAAE,IAAI,EAAE,aAAa,CAAC,CAAC;AACnE,CAAC","sourcesContent":["/**\n * @fileoverview Bridges a metadata provider row to the flat `environment` record that the\n * browser auth drivers already consume.\n *\n * Every `MJAuthBase` subclass exposes `static angularProviderFactory(environment)` and reads\n * its settings from prefixed keys on that record (`AUTH0_DOMAIN`, `WORKOS_CLIENTID`, ...).\n * Rather than rewrite each driver to accept a catalog row, the catalog is projected INTO that\n * record — so a provider configured from metadata and one configured from `environment.ts`\n * take an identical code path, and drivers keep working untouched.\n *\n * @module @memberjunction/ng-auth-services\n */\n\nimport type { PublicAuthProviderInfo } from '@memberjunction/core';\n\n/**\n * Optional hook a provider class may expose when the generic prefixed-key convention does not\n * describe its configuration. MSAL is the built-in example: it reads unprefixed `CLIENT_ID` /\n * `CLIENT_AUTHORITY`, so it maps the catalog row itself.\n */\nexport interface CatalogEnvironmentMapper {\n  EnvironmentFromCatalog?: (info: PublicAuthProviderInfo) => Record<string, unknown>;\n}\n\n/**\n * `redirectUri` → `REDIRECT_URI`, `apiHostname` → `API_HOSTNAME`, `userPoolId` → `USER_POOL_ID`.\n */\nfunction camelToUpperSnake(key: string): string {\n  return key\n    .replace(/([a-z0-9])([A-Z])/g, '$1_$2')\n    .replace(/[-\\s]+/g, '_')\n    .toUpperCase();\n}\n\n/**\n * The environment-key prefix for a driver: `workos` → `WORKOS`, `magic-link` → `MAGIC_LINK`.\n */\nfunction environmentPrefix(driverClass: string): string {\n  return camelToUpperSnake(driverClass);\n}\n\n/**\n * Projects a catalog row onto the conventional prefixed environment keys.\n *\n * The convention — `<DRIVER>_CLIENTID`, `<DRIVER>_DOMAIN`, `<DRIVER>_SCOPES`, plus one key per\n * `clientConfiguration` entry — is exactly what the Auth0, Okta, Cognito and WorkOS drivers\n * already read, so those four need no per-driver mapping at all. A driver that deviates\n * supplies `EnvironmentFromCatalog`.\n *\n * Only defined values are emitted, so a catalog row never blanks out a key the app's compiled\n * environment legitimately supplies. `clientConfiguration` entries are projected FIRST so the\n * modelled columns win a key collision — the same precedence the server enforces in\n * `buildProviderConfig`, where a blob must not silently redefine a described, reviewable column\n * (`{\"scopes\": \"...\"}` in the blob would otherwise clobber the parsed `Scopes` column).\n */\nexport function BuildGenericEnvironmentOverlay(info: PublicAuthProviderInfo): Record<string, unknown> {\n  const prefix = environmentPrefix(info.driverClass);\n  const overlay: Record<string, unknown> = {};\n\n  for (const [key, value] of Object.entries(info.clientConfiguration ?? {})) {\n    if (value !== null && value !== undefined) {\n      overlay[`${prefix}_${camelToUpperSnake(key)}`] = value;\n    }\n  }\n\n  if (info.clientId) {\n    overlay[`${prefix}_CLIENTID`] = info.clientId;\n  }\n  if (info.domain) {\n    overlay[`${prefix}_DOMAIN`] = info.domain;\n  }\n  if (Array.isArray(info.scopes) && info.scopes.length > 0) {\n    // The catalog publishes scopes pre-parsed (the server splits the delimited column at the\n    // trust boundary). The drivers that read this key — Okta and Cognito — hand it straight to\n    // SDK config typed `string[]`. The Array.isArray guard keeps a malformed or older server's\n    // string value from reaching those SDKs: this module runs at bootstrap, where the contract\n    // is degrade-to-compiled-environment, never throw.\n    overlay[`${prefix}_SCOPES`] = info.scopes;\n  }\n  if (info.issuer) {\n    overlay[`${prefix}_ISSUER`] = info.issuer;\n  }\n\n  return overlay;\n}\n\n/** @deprecated Use {@link BuildGenericEnvironmentOverlay}. */\nexport function buildGenericEnvironmentOverlay(info: PublicAuthProviderInfo): Record<string, unknown> {\n  return BuildGenericEnvironmentOverlay(info);\n}\n\n/**\n * Produces the environment record to hand a driver for a catalog-selected provider.\n *\n * The app's compiled environment stays the base layer — it carries app-wide settings such as\n * `GRAPHQL_URI` that have nothing to do with the identity provider — and the catalog overlays\n * only the provider's own keys on top. Metadata therefore wins over a stale compiled value for\n * the settings it owns, without the catalog having to restate the whole environment.\n *\n * @param environment The app's compiled environment object.\n * @param info The provider selected from the catalog.\n * @param providerClass The resolved `MJAuthBase` subclass, consulted for a custom mapper.\n */\nexport function MergeCatalogEnvironment(\n  environment: Record<string, unknown>,\n  info: PublicAuthProviderInfo,\n  providerClass?: CatalogEnvironmentMapper\n): Record<string, unknown> {\n  const overlay =\n    typeof providerClass?.EnvironmentFromCatalog === 'function'\n      ? providerClass.EnvironmentFromCatalog(info)\n      : BuildGenericEnvironmentOverlay(info);\n\n  return { ...environment, ...overlay, AUTH_TYPE: info.driverClass };\n}\n\n/** @deprecated Use {@link MergeCatalogEnvironment}. */\nexport function mergeCatalogEnvironment(\n  environment: Record<string, unknown>,\n  info: PublicAuthProviderInfo,\n  providerClass?: CatalogEnvironmentMapper\n): Record<string, unknown> {\n  return MergeCatalogEnvironment(environment, info, providerClass);\n}\n"]}

package/dist/lib/providers/mjexplorer-auth0-provider.service.d.ts

@@ -11,7 +11,7 @@ import * as i0 from "@angular/core";
  * but consumers never need to know this detail.
  */
 export declare class MJAuth0Provider extends MJAuthBase {
-    auth: AuthService;
+    Auth: AuthService;
     static readonly PROVIDER_TYPE = "auth0";
     readonly type = "auth0";
     private _initialized;
@@ -19,8 +19,16 @@ export declare class MJAuth0Provider extends MJAuthBase {
      * Factory function to provide Angular dependencies required by Auth0
      * Stored as a static property for the factory to access without instantiation
      */
-    static angularProviderFactory: (environment: Record<string, unknown>) => Provider[];
-    constructor(auth: AuthService);
+    static AngularProviderFactory: (environment: Record<string, unknown>) => Provider[];
+    /** @deprecated Use {@link AngularProviderFactory}. */
+    static get angularProviderFactory(): (environment: Record<string, unknown>) => Provider[];
+    /** @deprecated Use {@link AngularProviderFactory}. */
+    static set angularProviderFactory(value: (environment: Record<string, unknown>) => Provider[]);
+    constructor(Auth: AuthService);
+    /** @deprecated Use {@link Auth}. */
+    get auth(): AuthService;
+    /** @deprecated Use {@link Auth}. */
+    set auth(value: AuthService);
     initialize(): Promise<void>;
     protected loginInternal(options?: Record<string, unknown>): Promise<void>;
     protected logoutInternal(): Promise<void>;

package/dist/lib/providers/mjexplorer-auth0-provider.service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"mjexplorer-auth0-provider.service.d.ts","sourceRoot":"","sources":["../../../src/lib/providers/mjexplorer-auth0-provider.service.ts"],"names":[],"mappings":"AAAA,OAAO,EAAc,QAAQ,EAAE,MAAM,eAAe,CAAC;AAErD,OAAO,EAAE,UAAU,EAAE,MAAM,iCAAiC,CAAC;AAC7D,OAAO,EAAE,WAAW,EAAyG,MAAM,sBAAsB,CAAC;AAI1J,OAAO,EACL,gBAAgB,EAChB,iBAAiB,EACjB,iBAAiB,EAEjB,kBAAkB,EACnB,MAAM,eAAe,CAAC;;AACvB;;;;;;GAMG;AACH,qBAIa,eAAgB,SAAQ,UAAU;IA+C1B,IAAI,EAAE,WAAW;IA9CpC,MAAM,CAAC,QAAQ,CAAC,aAAa,WAAW;IACxC,QAAQ,CAAC,IAAI,WAAiC;IAC9C,OAAO,CAAC,YAAY,CAAS;IAE7B;;;OAGG;IACH,MAAM,CAAC,sBAAsB,GAAI,aAAa,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAG,QAAQ,EAAE,CAoChF;gBAEiB,IAAI,EAAE,WAAW;IAY9B,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC;cA0CjB,aAAa,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;cAK/D,cAAc,IAAI,OAAO,CAAC,IAAI,CAAC;IAWzC,cAAc,IAAI,OAAO,CAAC,IAAI,CAAC;IASrC;;;;;OAKG;cACa,sBAAsB,IAAI,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAWhE;;;;OAIG;cACa,wBAAwB,IAAI,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC;IAuB7E;;;;OAIG;cACa,uBAAuB,IAAI,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC;IAc3E;;;;;OAKG;cACa,oBAAoB,IAAI,OAAO,CAAC,kBAAkB,CAAC;IA6CnE;;;;OAIG;IACH,SAAS,CAAC,qBAAqB,CAAC,KAAK,EAAE,OAAO,GAAG,iBAAiB;YAgEpD,iBAAiB;IAM/B;;OAEG;IACH,OAAO,CAAC,sBAAsB;IAc9B;;;;;OAKG;cACa,4BAA4B,IAAI,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAUtE;;;;;;OAMG;cACa,2BAA2B,IAAI,OAAO,CAAC,IAAI,CAAC;IASnD,iBAAiB,IAAI,MAAM,EAAE;IAI7B,cAAc,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO;yCAjXvD,eAAe;6CAAf,eAAe;CAqX3B"}
+{"version":3,"file":"mjexplorer-auth0-provider.service.d.ts","sourceRoot":"","sources":["../../../src/lib/providers/mjexplorer-auth0-provider.service.ts"],"names":[],"mappings":"AAAA,OAAO,EAAc,QAAQ,EAAE,MAAM,eAAe,CAAC;AAErD,OAAO,EAAE,UAAU,EAAE,MAAM,iCAAiC,CAAC;AAC7D,OAAO,EAAE,WAAW,EAAyG,MAAM,sBAAsB,CAAC;AAI1J,OAAO,EACL,gBAAgB,EAChB,iBAAiB,EACjB,iBAAiB,EAEjB,kBAAkB,EACnB,MAAM,eAAe,CAAC;;AACvB;;;;;;GAMG;AACH,qBAIa,eAAgB,SAAQ,UAAU;IAwD1B,IAAI,EAAE,WAAW;IAvDpC,MAAM,CAAC,QAAQ,CAAC,aAAa,WAAW;IACxC,QAAQ,CAAC,IAAI,WAAiC;IAC9C,OAAO,CAAC,YAAY,CAAS;IAE7B;;;OAGG;IACH,MAAM,CAAC,sBAAsB,GAAI,aAAa,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAG,QAAQ,EAAE,CAoChF;IAEF,sDAAsD;IACtD,MAAM,KAAK,sBAAsB,kBAvCa,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAG,QAAQ,EAAE,CAyCjF;IACD,sDAAsD;IACtD,MAAM,KAAK,sBAAsB,CAAC,KAAK,gBA3CO,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAG,QAAQ,EA2CzC,EAEtC;gBAEkB,IAAI,EAAE,WAAW;IAQpC,oCAAoC;IACpC,IAAW,IAAI,IAAI,WAAW,CAE7B;IACD,oCAAoC;IACpC,IAAW,IAAI,CAAC,KAAK,EAAE,WAAW,EAEjC;IAMK,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC;cA0CjB,aAAa,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;cAK/D,cAAc,IAAI,OAAO,CAAC,IAAI,CAAC;IAWzC,cAAc,IAAI,OAAO,CAAC,IAAI,CAAC;IASrC;;;;;OAKG;cACa,sBAAsB,IAAI,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAWhE;;;;OAIG;cACa,wBAAwB,IAAI,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC;IAuB7E;;;;OAIG;cACa,uBAAuB,IAAI,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC;IAc3E;;;;;OAKG;cACa,oBAAoB,IAAI,OAAO,CAAC,kBAAkB,CAAC;IA6CnE;;;;OAIG;IACH,SAAS,CAAC,qBAAqB,CAAC,KAAK,EAAE,OAAO,GAAG,iBAAiB;YAgEpD,iBAAiB;IAM/B;;OAEG;IACH,OAAO,CAAC,sBAAsB;IAc9B;;;;;OAKG;cACa,4BAA4B,IAAI,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAUtE;;;;;;OAMG;cACa,2BAA2B,IAAI,OAAO,CAAC,IAAI,CAAC;IASnD,iBAAiB,IAAI,MAAM,EAAE;IAI7B,cAAc,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO;yCAnYvD,eAAe;6CAAf,eAAe;CAuY3B"}

package/dist/lib/providers/mjexplorer-auth0-provider.service.js

@@ -23,7 +23,7 @@ import * as i1 from "@auth0/auth0-angular";
  */
 let MJAuth0Provider = class MJAuth0Provider extends MJAuthBase {
     static { MJAuth0Provider_1 = this; }
-    auth;
+    Auth;
     static PROVIDER_TYPE = 'auth0';
     type = MJAuth0Provider_1.PROVIDER_TYPE;
     _initialized = false;
@@ -31,7 +31,7 @@ let MJAuth0Provider = class MJAuth0Provider extends MJAuthBase {
      * Factory function to provide Angular dependencies required by Auth0
      * Stored as a static property for the factory to access without instantiation
      */
-    static angularProviderFactory = (environment) => {
+    static AngularProviderFactory = (environment) => {
         // Check if we're on the MCP OAuth callback path
         const isMCPOAuthCallback = window.location.pathname.startsWith('/oauth/callback');
         return [
@@ -67,13 +67,29 @@ let MJAuth0Provider = class MJAuth0Provider extends MJAuthBase {
             }
         ];
     };
-    constructor(auth) {
+    /** @deprecated Use {@link AngularProviderFactory}. */
+    static get angularProviderFactory() {
+        return this.AngularProviderFactory;
+    }
+    /** @deprecated Use {@link AngularProviderFactory}. */
+    static set angularProviderFactory(value) {
+        this.AngularProviderFactory = value;
+    }
+    constructor(Auth) {
         const config = {
             name: MJAuth0Provider_1.PROVIDER_TYPE,
             type: MJAuth0Provider_1.PROVIDER_TYPE
         };
         super(config);
-        this.auth = auth;
+        this.Auth = Auth;
+    }
+    /** @deprecated Use {@link Auth}. */
+    get auth() {
+        return this.Auth;
+    }
+    /** @deprecated Use {@link Auth}. */
+    set auth(value) {
+        this.Auth = value;
     }
     // ============================================================================
     // LIFECYCLE METHODS
@@ -84,23 +100,23 @@ let MJAuth0Provider = class MJAuth0Provider extends MJAuthBase {
         }
         // CRITICAL: Wait for Auth0 SDK to process any redirect callback
         // The SDK handles this internally and updates isLoading$ when done
-        await firstValueFrom(this.auth.isLoading$.pipe(filter(loading => !loading), take(1)));
+        await firstValueFrom(this.Auth.isLoading$.pipe(filter(loading => !loading), take(1)));
         // Get current authentication state
-        const isAuthenticated = await firstValueFrom(this.auth.isAuthenticated$);
+        const isAuthenticated = await firstValueFrom(this.Auth.isAuthenticated$);
         // CRITICAL: Get current user BEFORE setting up subscriptions
         // This ensures userInfo$ has a value before app.component.ts subscribes
         if (isAuthenticated) {
-            const user = await firstValueFrom(this.auth.user$);
+            const user = await firstValueFrom(this.Auth.user$);
             if (user) {
                 const userInfo = this.mapAuth0UserToStandard(user);
                 this.updateUserInfo(userInfo);
             }
         }
         // Subscribe to authentication state and user info for future changes
-        this.auth.isAuthenticated$.subscribe((loggedIn) => {
+        this.Auth.isAuthenticated$.subscribe((loggedIn) => {
             this.updateAuthState(loggedIn);
         });
-        this.auth.user$.subscribe((user) => {
+        this.Auth.user$.subscribe((user) => {
             if (user) {
                 const userInfo = this.mapAuth0UserToStandard(user);
                 this.updateUserInfo(userInfo);
@@ -113,12 +129,12 @@ let MJAuth0Provider = class MJAuth0Provider extends MJAuthBase {
     }
     async loginInternal(options) {
         await this.ensureInitialized();
-        this.auth.loginWithRedirect(options);
+        this.Auth.loginWithRedirect(options);
     }
     async logoutInternal() {
         // Subscribe to the Observable so Auth0 Angular SDK v2's authState.refresh() fires.
         try {
-            await firstValueFrom(this.auth.logout({ logoutParams: { returnTo: document.location.origin } }));
+            await firstValueFrom(this.Auth.logout({ logoutParams: { returnTo: document.location.origin } }));
         }
         catch {
             // Expected when Auth0 redirects the browser before the Observable completes.
@@ -139,7 +155,7 @@ let MJAuth0Provider = class MJAuth0Provider extends MJAuthBase {
      */
     async extractIdTokenInternal() {
         try {
-            const claims = await firstValueFrom(this.auth.idTokenClaims$);
+            const claims = await firstValueFrom(this.Auth.idTokenClaims$);
             // Auth0-specific detail: JWT is in __raw property
             return claims?.__raw || null;
         }
@@ -155,7 +171,7 @@ let MJAuth0Provider = class MJAuth0Provider extends MJAuthBase {
      */
     async extractTokenInfoInternal() {
         try {
-            const claims = await firstValueFrom(this.auth.idTokenClaims$);
+            const claims = await firstValueFrom(this.Auth.idTokenClaims$);
             if (!claims) {
                 return null;
             }
@@ -181,7 +197,7 @@ let MJAuth0Provider = class MJAuth0Provider extends MJAuthBase {
      */
     async extractUserInfoInternal() {
         try {
-            const user = await firstValueFrom(this.auth.user$);
+            const user = await firstValueFrom(this.Auth.user$);
             if (!user) {
                 return null;
             }
@@ -203,7 +219,7 @@ let MJAuth0Provider = class MJAuth0Provider extends MJAuthBase {
             console.log('[Auth0] Attempting to refresh token...');
             // Force token refresh by bypassing cache
             // With useRefreshTokens: true and offline_access scope, this will use refresh tokens
-            await firstValueFrom(this.auth.getAccessTokenSilently({
+            await firstValueFrom(this.Auth.getAccessTokenSilently({
                 cacheMode: 'off'
             }));
             // Small delay to ensure Auth0 SDK has updated observables
@@ -326,7 +342,7 @@ let MJAuth0Provider = class MJAuth0Provider extends MJAuthBase {
      */
     async getProfilePictureUrlInternal() {
         try {
-            const user = await firstValueFrom(this.auth.user$);
+            const user = await firstValueFrom(this.Auth.user$);
             return user?.picture || null;
         }
         catch (error) {