Class MJOktaProvider

Contains the initial path from window.location.pathname before any work was done by auth services

Contains the initial search/query string from window.location.search before any work was done by auth services

Classify an error into standard error type

Converts provider-specific errors into semantic categories. Eliminates need for consumers to check error.name or error types.

Example

const authError = this.authBase.classifyError(err);
if (authError.type === AuthErrorType.TOKEN_EXPIRED) {
  this.showMessage(authError.userMessage);
}
Copy

Get ID token string (primary token method)

This is the clean abstraction - no provider-specific logic needed! Replaces the old pattern of: claims?.__raw || claims?.idToken

Example

const token = await this.authBase.getIdToken();
if (token) {
  setupGraphQLClient(token, apiUrl);
}
Copy

Get profile picture URL from auth provider

Returns the user's profile picture URL if available from the auth provider. This abstracts away provider-specific logic:

• Microsoft/MSAL: Fetches from Graph API
• Auth0/Okta: Returns from user claims

Example

const pictureUrl = await this.authBase.getProfilePictureUrl();
if (pictureUrl) {
  this.userAvatar = pictureUrl;
}
Copy

Get complete token information

Returns full token details including expiration and scopes. Use this when you need more than just the token string.

Get user email as Observable stream

Get user info as Observable stream

Returns standardized user info, hiding provider-specific claim structures. No more need for consumers to merge claims or check provider-specific fields!

Check if user is authenticated (Observable stream)

Returns a reactive stream that emits authentication state changes. Consumers can subscribe to react to login/logout events.

Public login method with Observable wrapper for backward compatibility

Consumers can use either:

• await this.authBase.login() (Promise)
• this.authBase.login().subscribe() (Observable)

Refresh authentication token

Attempts to obtain a fresh authentication token using the provider's refresh mechanism. If silent refresh fails due to session expiry, the provider will handle re-authentication automatically (which may involve redirecting to the auth provider's login page).

Returns StandardAuthToken on success, or throws on complete failure.

IMPORTANT: If the provider requires interactive re-authentication (redirect or popup), this method may never return. The app will reload after authentication completes and re-initialize with a fresh token.

Example

const token = await this.authBase.refreshToken();
return token.idToken; // Always succeeds or throws
Copy