@xh/hoist 79.0.0-SNAPSHOT.1766260837143 → 79.0.0-SNAPSHOT.1766275267656

package/CHANGELOG.md

@@ -43,6 +43,8 @@
     * `GroupingChooserProps.popoverTitle` - use `editorTitle`
     * `RelativeTimestampProps.options` - provide directly as top-level props
 
+* Improved the efficiency and logging of MsalClient.
+*
 ## 78.1.4 - 2025-12-05
 
 ### 🐞 Bug Fixes

package/appcontainer/AppContainerModel.ts

@@ -197,7 +197,7 @@ export class AppContainerModel extends HoistModel {
 
             // Check auth, locking out, or showing login if possible
             this.setAppState('AUTHENTICATING');
-            XH.authModel = createSingleton(this.appSpec.authModelClass);
+            XH.authModel = createSingleton(appSpec.authModelClass);
             const isAuthenticated = await XH.authModel.completeAuthAsync();
             if (!isAuthenticated) {
                 throwIf(

package/appcontainer/AppStateModel.ts

@@ -28,8 +28,8 @@ export class AppStateModel extends HoistModel {
      * Read from timestamp set on window within index.html.
      */
     readonly loadStarted: number = window['_xhLoadTimestamp'];
+    readonly timings: Record<AppState, number> = {} as Record<AppState, number>;
 
-    private timings: Record<AppState, number> = {} as Record<AppState, number>;
     private lastStateChangeTime: number = this.loadStarted;
 
     constructor() {
@@ -85,7 +85,7 @@ export class AppStateModel extends HoistModel {
         const {timings, loadStarted} = this;
         this.addReaction({
             when: () => this.state === 'RUNNING',
-            run: () =>
+            run: () => {
                 XH.track({
                     category: 'App',
                     message: `Loaded ${XH.clientAppCode}`,
@@ -98,7 +98,9 @@ export class AppStateModel extends HoistModel {
                         screen: this.getScreenData()
                     },
                     omit: !XH.appSpec.trackAppLoad
-                })
+                });
+                this.logDebug('Load timings', this.timings);
+            }
         });
     }
 

package/build/types/appcontainer/AppStateModel.d.ts

@@ -15,7 +15,7 @@ export declare class AppStateModel extends HoistModel {
      * Read from timestamp set on window within index.html.
      */
     readonly loadStarted: number;
-    private timings;
+    readonly timings: Record<AppState, number>;
     private lastStateChangeTime;
     constructor();
     setAppState(nextState: AppState): void;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@xh/hoist",
-  "version": "79.0.0-SNAPSHOT.1766260837143",
+  "version": "79.0.0-SNAPSHOT.1766275267656",
   "description": "Hoist add-on for building and deploying React Applications.",
   "repository": "github:xh/hoist-react",
   "homepage": "https://xh.io",

package/security/msal/MsalClient.ts

@@ -170,17 +170,19 @@ export class MsalClient extends BaseOAuthClient<MsalClientConfig, MsalTokenSpec>
         const account =
             accounts.length == 1
                 ? accounts[0]
-                : accounts.find(a => (a.username = this.getSelectedUsername()));
+                : accounts.find(a => a.username == this.getSelectedUsername());
+        let trySsoSilent = enableSsoSilent;
         if (account) {
             this.setAccount(account);
             try {
-                this.initialTokenLoad = true;
                 this.logDebug('Attempting silent token load.');
+                this.initialTokenLoad = true;
                 const ret = await this.fetchAllTokensAsync({eagerOnly: true});
                 this.noteAuthComplete('acquireSilent');
                 return ret;
             } catch (e) {
-                this.logDebug('Failed to load tokens on init, fall back to login', e.message ?? e);
+                if (e instanceof InteractionRequiredAuthError) trySsoSilent = false;
+                this.logDebug('AcquireSilent failed', e.message ?? e);
             } finally {
                 this.initialTokenLoad = false;
             }
@@ -189,15 +191,18 @@ export class MsalClient extends BaseOAuthClient<MsalClientConfig, MsalTokenSpec>
         // 2) Try `ssoSilent` API to potentially reuse logged-in user on other apps
         // in same domain without interaction.  This should never trigger popup/redirect, and will
         // use an iFrame (3rd party cookies required). Must fail gently.
-        if (enableSsoSilent) {
+        if (trySsoSilent) {
             try {
                 this.logDebug('Attempting SSO');
                 await this.loginSsoAsync();
+                this.initialTokenLoad = true;
                 const ret = await this.fetchAllTokensAsync({eagerOnly: true});
                 this.noteAuthComplete('ssoSilent');
                 return ret;
             } catch (e) {
                 this.logDebug('SSO failed', e.message ?? e);
+            } finally {
+                this.initialTokenLoad = false;
             }
         }
 
@@ -453,7 +458,7 @@ export class MsalClient extends BaseOAuthClient<MsalClientConfig, MsalTokenSpec>
 
     private noteAuthComplete(authMethod: AuthMethod) {
         if (this.telemetry) this.telemetry.authMethod = authMethod;
-        this.logInfo(`Authenticated user ${this.account.username} via ${authMethod}`);
+        this.logInfo(`Authenticated user '${this.account.username}' via ${authMethod}`);
     }
 
     private authRequestCore(): AuthRequestCore {