Ben Scholzen

May I recommend though that you make a note in the README, so people know the recommendation at least? Especially if they embed third party scripts (Google Analytics, some javascript...

That's quite easy, simply do the following: `userManager.signInSilent()` on page load :)

The only real downside to this is, that after the page loads, it takes a second or so for the user to show up as signed in.

That is exactly the point, yeah. As long as you don't have any foreign JavaScript on your your domain, you should be fine. At least from your side. Whether the...

That depends on your application architecture. But generally you'd create the error formatter in a factory and pass it down to your view layer. Where you source your error keys...

There is no catch-all route supplied by default (although in the new architecture, catch-all would be implemented as a path parser, not as an entire route). Hostname and scheme matching...

Doesn't seem like you need a regex at all: `'download-file/id-:id/:filename'` (with the constraints defined properly). Although I'm thinking about integrating the constraints directly into the route pattern like some other...

Sure it can do catch-all of the filename, simply define it's constraint to be `.*?`. The constraint can also contain alternatives and such. And again, the rare cases where a...

Yes, for instance. Although I'm not supplying one by default.

We should first decide, which kind of script errors we have to supply exit codes for. Could you compile a list?