问未通过Microsoft认证的Range11应用程序

EN

authService => instance of MsalService.
msalBroadCastService => instance of MsalBroadcastService.
msalGuardConfig => instance of MsalGuardConfiguration.
isUserLoggedIn: boolean = false;

ngOnInit(): void {

this.authService.handleRedirectObservable().subscribe({
      next: (result: AuthenticationResult) => { // few console log code snippet },
      error: (error) => console.log(error)
    });
}

ngOnInit() {
// have tried the following with "handleRedirectPromise" also, but it didn't work.

this.authService.handleRedirectObservable().subscribe({
            next: (result: AuthenticationResult) => {
                this.msalBroadCastService.inProgress$
                    .pipe(
                        filter((status: InteractionStatus) => status === InteractionStatus.None),
                        takeUntil(this.destroy$)
                    )
                    .subscribe((x) => {
                        // the component "redirect-path" is the redirectURI mentioned in the application configuration file and also in the Azure Active Directory redirectURI section.
                        if (result)
                            this.router.navigate(['redirect-path']);
                    })
            },
            error: (errorMsg) => {
                debugger;
                console.log(errorMsg)
            }
        });
....
....
// Existing logic to load the application "Login" page.
}

onLogin(){
this.authService.instance.handleRedirectPromise()
            .then((tokenResponse) => {
                if (!tokenResponse) {
                    this.isUserLoggedIn = this.authService.instance.getAllAccounts().length == 0;
                    if (this.isUserLoggedIn) {
                        this.authService.loginRedirect({ ...this.msalGuardConfig.authRequest } as RedirectRequest);
                    }
                }
            });
}

MsalModule.forRoot(new PublicClientApplication(
      {
        auth: {
          clientId: '<Client ID>',
          redirectUri: 'http://localhost:4200/#/redirect-path',
          authority: 'https://login.microsoftonline.com/organizations'
          // authority: 'https://login.microsoftonline.com/common' // Tried this also, but didn't work.
        },
        cache: {
          cacheLocation: 'localStorage',
          storeAuthStateInCookie: isIE
        },
        system: {
          loggerOptions: {
            loggerCallback: (level: LogLevel, message: string, containsPii: boolean): void => {
              if (containsPii) {
                return;
              }
              switch (level) {
                case LogLevel.Error:
                  console.error(message);
                  return;
                case LogLevel.Info:
                  console.info(message);
                  return;
                case LogLevel.Verbose:
                  console.debug(message);
                  return;
                case LogLevel.Warning:
                  console.warn(message);
                  return;
              }
            },
            piiLoggingEnabled: false
          },
          windowHashTimeout: 60000,
          iframeHashTimeout: 6000,
          loadFrameTimeout: 0,
          asyncPopups: false
        }
      }
    ),
      {
        interactionType: InteractionType.Redirect,
        authRequest: {
          scopes: ['user.read']
        }
      },
      {
        interactionType: InteractionType.Redirect,
        protectedResourceMap: new Map(
          [
            ['https://graph.microsoft.com/v1.0/me', ['user.read']]
          ]
        )
      }    
    )

providers: [
    {
      provide: HTTP_INTERCEPTORS,
      useClass: MsalInterceptor,
      multi: true
    }, MsalGuard    
  ]

const routes: Routes = [
  { path: '', component: LoginComponent, pathMatch: 'full' },
  // { path: '', component: LoginComponent, pathMatch: 'full', canActivate: [MsalGuard] },
  { path: 'redirect-path', component: RedirectPathComponent, pathMatch: 'full' },
  // { path: 'redirect-path', component: RedirectPathComponent, pathMatch: 'full', canActivate: [MsalGuard] },
]

<body>
  <app-root></app-root>
  <app-redirect></app-redirect>
</body>