@opensourcekd/ng-common-libs 2.0.8 → 2.0.9

package/dist/index.d.ts

@@ -111,6 +111,7 @@ interface Auth0ConfigOptions {
     redirectUri?: string;
     logoutUri?: string;
     audience?: string;
+    defaultAudience?: string;
     scope?: string;
     connection?: string;
 }
@@ -127,6 +128,7 @@ declare const AUTH0_CONFIG: {
     redirectUri: string;
     logoutUri: string;
     audience: string;
+    defaultAudience: string;
     scope: string;
     connection: string | undefined;
 };
@@ -163,6 +165,7 @@ declare const STORAGE_CONFIG: {
 declare const STORAGE_KEYS: {
     ACCESS_TOKEN: string;
     USER_INFO: string;
+    DECODED_TOKEN: string;
 };
 /**
  * Reset AUTH0_CONFIG to default values
@@ -218,6 +221,20 @@ interface UserInfo {
     organization?: string;
     [key: string]: unknown;
 }
+/**
+ * Decoded access token payload
+ * Standard JWT claims plus any custom claims
+ */
+interface TokenPayload {
+    iss?: string;
+    sub?: string;
+    aud?: string | string[];
+    exp?: number;
+    iat?: number;
+    scope?: string;
+    permissions?: string[];
+    [key: string]: unknown;
+}
 /**
  * Simplified user data extracted from token
  */
@@ -263,6 +280,7 @@ interface Auth0Config {
     redirectUri: string;
     logoutUri: string;
     audience?: string;
+    defaultAudience?: string;
     scope: string;
     connection?: string;
 }
@@ -285,6 +303,7 @@ interface StorageConfig {
 interface StorageKeys {
     ACCESS_TOKEN: string;
     USER_INFO: string;
+    DECODED_TOKEN: string;
 }
 /**
  * Pure TypeScript Authentication Service for Auth0 integration
@@ -325,6 +344,8 @@ declare class AuthService {
     private readonly STANDARD_JWT_CLAIMS;
     private auth0Client;
     private initializationPromise;
+    private callbackHandled;
+    private callbackPromise;
     private userSubject;
     user$: Observable<UserInfo | null>;
     private config;
@@ -346,6 +367,11 @@ declare class AuthService {
      * @returns The id if provided during initialization, undefined otherwise
      */
     getId(): string | undefined;
+    /**
+     * Get effective audience value (with fallback to defaultAudience)
+     * @private
+     */
+    private getEffectiveAudience;
     /**
      * Initialize Auth0 client
      */
@@ -354,6 +380,13 @@ declare class AuthService {
      * Ensure Auth0 client is initialized before use
      */
     private ensureInitialized;
+    /**
+     * Check for OAuth callback parameters in URL and auto-handle if present
+     * Note: The Auth0 SDK's handleRedirectCallback() validates the state parameter
+     * to prevent CSRF attacks. This method only checks for the presence of callback
+     * parameters before delegating to the Auth0 SDK for secure processing.
+     */
+    private checkAndHandleCallback;
     /**
      * Login with Auth0
      */
@@ -390,6 +423,21 @@ declare class AuthService {
      * Set access token in storage and emit event
      */
     private setToken;
+    /**
+     * Decode JWT token and store its payload
+     * Note: This only decodes the JWT structure without verifying the signature.
+     * The token signature is already validated by Auth0 SDK when obtained.
+     * This decoded data is for informational purposes (e.g., checking expiration, viewing scopes).
+     * Do NOT use decoded token data for authorization decisions - always validate on the backend.
+     */
+    private decodeAndStoreToken;
+    /**
+     * Get decoded token payload from storage
+     * Note: This data is for informational purposes only (checking expiration, viewing scopes, etc.).
+     * Do NOT use this for authorization decisions - always validate permissions on the backend.
+     * The token signature is validated by Auth0 SDK when the token is obtained.
+     */
+    getDecodedToken(): TokenPayload | null;
     /**
      * Check if user is authenticated
      */
@@ -652,4 +700,4 @@ declare class Logger {
 }
 
 export { APP_CONFIG, AUTH0_CONFIG, AuthService, EventBus, LogSeverity, Logger, STORAGE_CONFIG, STORAGE_KEYS, configureAuth0, createAuthService, getStorageItem, removeStorageItem, resetAuth0Config, setStorageItem };
-export type { AppState, Auth0Config, Auth0ConfigOptions, AuthServiceOptions, AuthorizationParams, CallbackResult, EventBusOptions, EventPayload, LogAttributes, LogRecord, LoggerOptions, StorageConfig, StorageKeys, UserData, UserInfo };
+export type { AppState, Auth0Config, Auth0ConfigOptions, AuthServiceOptions, AuthorizationParams, CallbackResult, EventBusOptions, EventPayload, LogAttributes, LogRecord, LoggerOptions, StorageConfig, StorageKeys, TokenPayload, UserData, UserInfo };