@azure/communication-common 2.3.2-alpha.20250317.3 → 2.3.2-alpha.20250320.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (79) hide show
  1. package/README.md +0 -48
  2. package/dist/browser/azureCommunicationTokenCredential.d.ts +0 -6
  3. package/dist/browser/azureCommunicationTokenCredential.d.ts.map +1 -1
  4. package/dist/browser/azureCommunicationTokenCredential.js +4 -8
  5. package/dist/browser/azureCommunicationTokenCredential.js.map +1 -1
  6. package/dist/browser/credential/clientArguments.d.ts.map +1 -1
  7. package/dist/browser/credential/connectionString.d.ts.map +1 -1
  8. package/dist/browser/credential/cryptoUtils-browser.d.mts.map +1 -1
  9. package/dist/browser/credential/encodeUtils.browser.d.ts.map +1 -1
  10. package/dist/browser/identifierModelSerializer.d.ts.map +1 -1
  11. package/dist/browser/identifierModels.d.ts.map +1 -1
  12. package/dist/browser/index.d.ts +1 -1
  13. package/dist/browser/index.d.ts.map +1 -1
  14. package/dist/browser/index.js +1 -0
  15. package/dist/browser/index.js.map +1 -1
  16. package/dist/browser/tokenParser.d.ts.map +1 -1
  17. package/dist/commonjs/azureCommunicationTokenCredential.d.ts +0 -6
  18. package/dist/commonjs/azureCommunicationTokenCredential.d.ts.map +1 -1
  19. package/dist/commonjs/azureCommunicationTokenCredential.js +4 -8
  20. package/dist/commonjs/azureCommunicationTokenCredential.js.map +1 -1
  21. package/dist/commonjs/credential/clientArguments.d.ts.map +1 -1
  22. package/dist/commonjs/credential/connectionString.d.ts.map +1 -1
  23. package/dist/commonjs/credential/cryptoUtils.d.ts.map +1 -1
  24. package/dist/commonjs/credential/encodeUtils.browser.d.ts.map +1 -1
  25. package/dist/commonjs/identifierModelSerializer.d.ts.map +1 -1
  26. package/dist/commonjs/identifierModels.d.ts.map +1 -1
  27. package/dist/commonjs/index.d.ts +1 -1
  28. package/dist/commonjs/index.d.ts.map +1 -1
  29. package/dist/commonjs/index.js +1 -0
  30. package/dist/commonjs/index.js.map +1 -1
  31. package/dist/commonjs/tokenParser.d.ts.map +1 -1
  32. package/dist/commonjs/tsdoc-metadata.json +1 -1
  33. package/dist/esm/azureCommunicationTokenCredential.d.ts +0 -6
  34. package/dist/esm/azureCommunicationTokenCredential.d.ts.map +1 -1
  35. package/dist/esm/azureCommunicationTokenCredential.js +4 -8
  36. package/dist/esm/azureCommunicationTokenCredential.js.map +1 -1
  37. package/dist/esm/credential/clientArguments.d.ts.map +1 -1
  38. package/dist/esm/credential/connectionString.d.ts.map +1 -1
  39. package/dist/esm/credential/cryptoUtils.d.ts.map +1 -1
  40. package/dist/esm/credential/encodeUtils.browser.d.ts.map +1 -1
  41. package/dist/esm/identifierModelSerializer.d.ts.map +1 -1
  42. package/dist/esm/identifierModels.d.ts.map +1 -1
  43. package/dist/esm/index.d.ts +1 -1
  44. package/dist/esm/index.d.ts.map +1 -1
  45. package/dist/esm/index.js +1 -0
  46. package/dist/esm/index.js.map +1 -1
  47. package/dist/esm/tokenParser.d.ts.map +1 -1
  48. package/dist/react-native/azureCommunicationTokenCredential.d.ts +0 -6
  49. package/dist/react-native/azureCommunicationTokenCredential.d.ts.map +1 -1
  50. package/dist/react-native/azureCommunicationTokenCredential.js +4 -8
  51. package/dist/react-native/azureCommunicationTokenCredential.js.map +1 -1
  52. package/dist/react-native/credential/clientArguments.d.ts.map +1 -1
  53. package/dist/react-native/credential/connectionString.d.ts.map +1 -1
  54. package/dist/react-native/credential/cryptoUtils.d.ts.map +1 -1
  55. package/dist/react-native/credential/encodeUtils.browser.d.ts.map +1 -1
  56. package/dist/react-native/identifierModelSerializer.d.ts.map +1 -1
  57. package/dist/react-native/identifierModels.d.ts.map +1 -1
  58. package/dist/react-native/index.d.ts +1 -1
  59. package/dist/react-native/index.d.ts.map +1 -1
  60. package/dist/react-native/index.js +1 -0
  61. package/dist/react-native/index.js.map +1 -1
  62. package/dist/react-native/tokenParser.d.ts.map +1 -1
  63. package/package.json +6 -9
  64. package/dist/browser/entraTokenCredential.d.ts +0 -44
  65. package/dist/browser/entraTokenCredential.d.ts.map +0 -1
  66. package/dist/browser/entraTokenCredential.js +0 -120
  67. package/dist/browser/entraTokenCredential.js.map +0 -1
  68. package/dist/commonjs/entraTokenCredential.d.ts +0 -44
  69. package/dist/commonjs/entraTokenCredential.d.ts.map +0 -1
  70. package/dist/commonjs/entraTokenCredential.js +0 -124
  71. package/dist/commonjs/entraTokenCredential.js.map +0 -1
  72. package/dist/esm/entraTokenCredential.d.ts +0 -44
  73. package/dist/esm/entraTokenCredential.d.ts.map +0 -1
  74. package/dist/esm/entraTokenCredential.js +0 -120
  75. package/dist/esm/entraTokenCredential.js.map +0 -1
  76. package/dist/react-native/entraTokenCredential.d.ts +0 -44
  77. package/dist/react-native/entraTokenCredential.d.ts.map +0 -1
  78. package/dist/react-native/entraTokenCredential.js +0 -120
  79. package/dist/react-native/entraTokenCredential.js.map +0 -1
@@ -1,44 +0,0 @@
1
- import { type AccessToken, type TokenCredential } from "@azure/core-auth";
2
- import { type TokenCredential as AcsTokenCredential, type CommunicationGetTokenOptions } from "./communicationTokenCredential.js";
3
- export interface ExchangeTokenResponse {
4
- identity: string;
5
- accessToken: {
6
- token: string;
7
- expiresOn: string;
8
- };
9
- }
10
- /**
11
- * The Entra Communication Token Options.
12
- */
13
- export interface EntraCommunicationTokenCredentialOptions {
14
- /**
15
- * The Azure Communication Service resource endpoint URL, e.g. https://myResource.communication.azure.com.
16
- */
17
- resourceEndpoint: string;
18
- /**
19
- * The Entra ID token credential.
20
- */
21
- tokenCredential: TokenCredential;
22
- /**
23
- * The scopes for retrieving the Entra ID access token.
24
- */
25
- scopes?: string[];
26
- }
27
- /**
28
- * Represents a credential that exchanges an Entra token for an Azure Communication Services (ACS) token, enabling access to ACS resources.
29
- */
30
- export declare class EntraTokenCredential implements AcsTokenCredential {
31
- private options;
32
- private isPending;
33
- private result;
34
- private client;
35
- private httpClient;
36
- constructor(options: EntraCommunicationTokenCredentialOptions);
37
- getToken(options?: CommunicationGetTokenOptions): Promise<AccessToken>;
38
- private getTokenInternal;
39
- dispose(): void;
40
- private exchangeEntraToken;
41
- private createRequestUri;
42
- private determineEndpointAndApiVersion;
43
- }
44
- //# sourceMappingURL=entraTokenCredential.d.ts.map
@@ -1 +0,0 @@
1
- {"version":3,"file":"entraTokenCredential.d.ts","sourceRoot":"","sources":["../../src/entraTokenCredential.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,KAAK,WAAW,EAAE,KAAK,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAC1E,OAAO,EACL,KAAK,eAAe,IAAI,kBAAkB,EAC1C,KAAK,4BAA4B,EAClC,MAAM,mCAAmC,CAAC;AAiB3C,MAAM,WAAW,qBAAqB;IACpC,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE;QACX,KAAK,EAAE,MAAM,CAAC;QACd,SAAS,EAAE,MAAM,CAAC;KACnB,CAAC;CACH;AAED;;GAEG;AACH,MAAM,WAAW,wCAAwC;IACvD;;OAEG;IACH,gBAAgB,EAAE,MAAM,CAAC;IACzB;;OAEG;IACH,eAAe,EAAE,eAAe,CAAC;IACjC;;OAEG;IACH,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;CACnB;AAED;;GAEG;AACH,qBAAa,oBAAqB,YAAW,kBAAkB;IASjD,OAAO,CAAC,OAAO;IAR3B,OAAO,CAAC,SAAS,CAA8B;IAC/C,OAAO,CAAC,MAAM,CAGZ;IACF,OAAO,CAAC,MAAM,CAAS;IACvB,OAAO,CAAC,UAAU,CAAa;gBAEX,OAAO,EAAE,wCAAwC;IAYxD,QAAQ,CAAC,OAAO,CAAC,EAAE,4BAA4B,GAAG,OAAO,CAAC,WAAW,CAAC;YAoBrE,gBAAgB;IAmCvB,OAAO,IAAI,IAAI;YAOR,kBAAkB;IA8BhC,OAAO,CAAC,gBAAgB;IAMxB,OAAO,CAAC,8BAA8B;CAiBvC"}
@@ -1,120 +0,0 @@
1
- // Copyright (c) Microsoft Corporation.
2
- // Licensed under the MIT License.
3
- import { getClient } from "@azure-rest/core-client";
4
- import { createDefaultHttpClient, createHttpHeaders, createPipelineRequest, } from "@azure/core-rest-pipeline";
5
- const TeamsExtensionScopePrefix = "https://auth.msft.communication.azure.com/";
6
- const CommunicationClientsScopePrefix = "https://communication.azure.com/clients/";
7
- const TeamsExtensionEndpoint = "/access/teamsPhone/:exchangeAccessToken";
8
- const TeamsExtensionApiVersion = "2025-03-02-preview";
9
- const CommunicationClientsEndpoint = "/access/entra/:exchangeAccessToken";
10
- const CommunicationClientsApiVersion = "2024-04-01-preview";
11
- /**
12
- * Represents a credential that exchanges an Entra token for an Azure Communication Services (ACS) token, enabling access to ACS resources.
13
- */
14
- export class EntraTokenCredential {
15
- constructor(options) {
16
- this.options = options;
17
- this.result = {
18
- entraToken: undefined,
19
- acsToken: { token: "", expiresOnTimestamp: 0 },
20
- };
21
- this.client = getClient(options.resourceEndpoint);
22
- this.httpClient = createDefaultHttpClient();
23
- this.options = options;
24
- this.options.scopes = this.options.scopes || [
25
- "https://communication.azure.com/clients/.default",
26
- ];
27
- // immediately fetch the token to pre-warm
28
- this.isPending = this.getToken();
29
- }
30
- async getToken(options) {
31
- var _a;
32
- if ((_a = options === null || options === void 0 ? void 0 : options.abortSignal) === null || _a === void 0 ? void 0 : _a.aborted) {
33
- return { token: "", expiresOnTimestamp: 0 };
34
- }
35
- // we're awaiting the token fetch, so we don't want to start another one
36
- // however, we're ignoring the new abortSignal, unfortunately
37
- if (!this.isPending) {
38
- this.isPending = this.getTokenInternal(options);
39
- }
40
- try {
41
- await this.isPending;
42
- }
43
- finally {
44
- this.isPending = null;
45
- }
46
- return this.result.acsToken;
47
- }
48
- async getTokenInternal(options) {
49
- const getTokenOptions = (options === null || options === void 0 ? void 0 : options.abortSignal) ? { abortSignal: options.abortSignal } : undefined;
50
- const token = await this.options.tokenCredential.getToken(this.options.scopes
51
- ? this.options.scopes
52
- : ["https://communication.azure.com/clients/.default"], getTokenOptions);
53
- const currentDateTime = new Date();
54
- const tokenExpiresOn = new Date(this.result.acsToken.expiresOnTimestamp);
55
- if (token === null) {
56
- this.result = {
57
- entraToken: undefined,
58
- acsToken: { token: "", expiresOnTimestamp: 0 },
59
- };
60
- }
61
- else if (this.result.acsToken.token === "" ||
62
- token.token !== this.result.entraToken ||
63
- tokenExpiresOn < currentDateTime) {
64
- const acsToken = await this.exchangeEntraToken(this.options.resourceEndpoint, token.token, getTokenOptions);
65
- this.result = {
66
- entraToken: token.token,
67
- acsToken,
68
- };
69
- }
70
- return this.result.acsToken;
71
- }
72
- dispose() {
73
- this.result = {
74
- entraToken: undefined,
75
- acsToken: { token: "", expiresOnTimestamp: 0 },
76
- };
77
- }
78
- async exchangeEntraToken(resourceEndpoint, entraToken, options) {
79
- const request = createPipelineRequest({
80
- url: this.createRequestUri(resourceEndpoint),
81
- method: "POST",
82
- headers: createHttpHeaders({
83
- Authorization: `Bearer ${entraToken}`,
84
- "Content-Type": "application/json",
85
- Accept: "application/json",
86
- }),
87
- abortSignal: options === null || options === void 0 ? void 0 : options.abortSignal,
88
- body: JSON.stringify({}),
89
- });
90
- const response = await this.client.pipeline.sendRequest(this.httpClient, request);
91
- if (response.status !== 200 || !response.bodyAsText) {
92
- throw new Error(`Service request failed. Status: ${response.status}, Body: ${response.bodyAsText}`);
93
- }
94
- const json = JSON.parse(response.bodyAsText);
95
- return {
96
- token: json.accessToken.token,
97
- expiresOnTimestamp: Date.parse(json.accessToken.expiresOn),
98
- };
99
- }
100
- createRequestUri(resourceEndpoint) {
101
- const [endpoint, apiVersion] = this.determineEndpointAndApiVersion();
102
- const requestUri = `${resourceEndpoint}${endpoint}?api-version=${apiVersion}`;
103
- return requestUri;
104
- }
105
- determineEndpointAndApiVersion() {
106
- if (!this.options.scopes || this.options.scopes.length === 0) {
107
- throw new Error(`Scopes validation failed. Ensure all scopes start with either {TeamsExtensionScopePrefix} or {CommunicationClientsScopePrefix}.`);
108
- }
109
- else if (this.options.scopes.every((scope) => scope.startsWith(TeamsExtensionScopePrefix))) {
110
- return [TeamsExtensionEndpoint, TeamsExtensionApiVersion];
111
- }
112
- else if (this.options.scopes.every((scope) => scope.startsWith(CommunicationClientsScopePrefix))) {
113
- return [CommunicationClientsEndpoint, CommunicationClientsApiVersion];
114
- }
115
- else {
116
- throw new Error(`Scopes validation failed. Ensure all scopes start with either {TeamsExtensionScopePrefix} or {CommunicationClientsScopePrefix}.`);
117
- }
118
- }
119
- }
120
- //# sourceMappingURL=entraTokenCredential.js.map
@@ -1 +0,0 @@
1
- {"version":3,"file":"entraTokenCredential.js","sourceRoot":"","sources":["../../src/entraTokenCredential.ts"],"names":[],"mappings":"AAAA,uCAAuC;AACvC,kCAAkC;AAQlC,OAAO,EAAe,SAAS,EAAE,MAAM,yBAAyB,CAAC;AACjE,OAAO,EAEL,uBAAuB,EACvB,iBAAiB,EACjB,qBAAqB,GACtB,MAAM,2BAA2B,CAAC;AAEnC,MAAM,yBAAyB,GAAG,4CAA4C,CAAC;AAC/E,MAAM,+BAA+B,GAAG,0CAA0C,CAAC;AACnF,MAAM,sBAAsB,GAAG,yCAAyC,CAAC;AACzE,MAAM,wBAAwB,GAAG,oBAAoB,CAAC;AACtD,MAAM,4BAA4B,GAAG,oCAAoC,CAAC;AAC1E,MAAM,8BAA8B,GAAG,oBAAoB,CAAC;AA4B5D;;GAEG;AACH,MAAM,OAAO,oBAAoB;IAS/B,YAAoB,OAAiD;QAAjD,YAAO,GAAP,OAAO,CAA0C;QAP7D,WAAM,GAAG;YACf,UAAU,EAAE,SAA+B;YAC3C,QAAQ,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,kBAAkB,EAAE,CAAC,EAAE;SAC/C,CAAC;QAKA,IAAI,CAAC,MAAM,GAAG,SAAS,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;QAClD,IAAI,CAAC,UAAU,GAAG,uBAAuB,EAAE,CAAC;QAC5C,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,IAAI;YAC3C,kDAAkD;SACnD,CAAC;QAEF,0CAA0C;QAC1C,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;IACnC,CAAC;IAEM,KAAK,CAAC,QAAQ,CAAC,OAAsC;;QAC1D,IAAI,MAAA,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,WAAW,0CAAE,OAAO,EAAE,CAAC;YAClC,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,kBAAkB,EAAE,CAAC,EAAE,CAAC;QAC9C,CAAC;QAED,wEAAwE;QACxE,6DAA6D;QAC7D,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;YACpB,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC;QAClD,CAAC;QAED,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,SAAS,CAAC;QACvB,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;QACxB,CAAC;QAED,OAAO,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC;IAC9B,CAAC;IAEO,KAAK,CAAC,gBAAgB,CAAC,OAAsC;QACnE,MAAM,eAAe,GAAG,CAAA,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,WAAW,EAAC,CAAC,CAAC,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;QAChG,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,eAAe,CAAC,QAAQ,CACvD,IAAI,CAAC,OAAO,CAAC,MAAM;YACjB,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM;YACrB,CAAC,CAAC,CAAC,kDAAkD,CAAC,EACxD,eAAe,CAChB,CAAC;QACF,MAAM,eAAe,GAAG,IAAI,IAAI,EAAE,CAAC;QACnC,MAAM,cAAc,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,kBAAkB,CAAC,CAAC;QAEzE,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;YACnB,IAAI,CAAC,MAAM,GAAG;gBACZ,UAAU,EAAE,SAAS;gBACrB,QAAQ,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,kBAAkB,EAAE,CAAC,EAAE;aAC/C,CAAC;QACJ,CAAC;aAAM,IACL,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,KAAK,EAAE;YACjC,KAAK,CAAC,KAAK,KAAK,IAAI,CAAC,MAAM,CAAC,UAAU;YACtC,cAAc,GAAG,eAAe,EAChC,CAAC;YACD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAC5C,IAAI,CAAC,OAAO,CAAC,gBAAgB,EAC7B,KAAK,CAAC,KAAK,EACX,eAAe,CAChB,CAAC;YACF,IAAI,CAAC,MAAM,GAAG;gBACZ,UAAU,EAAE,KAAK,CAAC,KAAK;gBACvB,QAAQ;aACT,CAAC;QACJ,CAAC;QAED,OAAO,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC;IAC9B,CAAC;IAEM,OAAO;QACZ,IAAI,CAAC,MAAM,GAAG;YACZ,UAAU,EAAE,SAAS;YACrB,QAAQ,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,kBAAkB,EAAE,CAAC,EAAE;SAC/C,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,kBAAkB,CAC9B,gBAAwB,EACxB,UAAkB,EAClB,OAA0C;QAE1C,MAAM,OAAO,GAAG,qBAAqB,CAAC;YACpC,GAAG,EAAE,IAAI,CAAC,gBAAgB,CAAC,gBAAgB,CAAC;YAC5C,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,iBAAiB,CAAC;gBACzB,aAAa,EAAE,UAAU,UAAU,EAAE;gBACrC,cAAc,EAAE,kBAAkB;gBAClC,MAAM,EAAE,kBAAkB;aAC3B,CAAC;YACF,WAAW,EAAE,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,WAAW;YACjC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;SACzB,CAAC,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;QAElF,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,UAAU,EAAE,CAAC;YACpD,MAAM,IAAI,KAAK,CACb,mCAAmC,QAAQ,CAAC,MAAM,WAAW,QAAQ,CAAC,UAAU,EAAE,CACnF,CAAC;QACJ,CAAC;QACD,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,UAAU,CAA0B,CAAC;QACtE,OAAO;YACL,KAAK,EAAE,IAAI,CAAC,WAAW,CAAC,KAAK;YAC7B,kBAAkB,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC;SAC3D,CAAC;IACJ,CAAC;IAEO,gBAAgB,CAAC,gBAAwB;QAC/C,MAAM,CAAC,QAAQ,EAAE,UAAU,CAAC,GAAG,IAAI,CAAC,8BAA8B,EAAE,CAAC;QACrE,MAAM,UAAU,GAAG,GAAG,gBAAgB,GAAG,QAAQ,gBAAgB,UAAU,EAAE,CAAC;QAC9E,OAAO,UAAU,CAAC;IACpB,CAAC;IAEO,8BAA8B;QACpC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC7D,MAAM,IAAI,KAAK,CACb,iIAAiI,CAClI,CAAC;QACJ,CAAC;aAAM,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,yBAAyB,CAAC,CAAC,EAAE,CAAC;YAC7F,OAAO,CAAC,sBAAsB,EAAE,wBAAwB,CAAC,CAAC;QAC5D,CAAC;aAAM,IACL,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,+BAA+B,CAAC,CAAC,EACvF,CAAC;YACD,OAAO,CAAC,4BAA4B,EAAE,8BAA8B,CAAC,CAAC;QACxE,CAAC;aAAM,CAAC;YACN,MAAM,IAAI,KAAK,CACb,iIAAiI,CAClI,CAAC;QACJ,CAAC;IACH,CAAC;CACF","sourcesContent":["// Copyright (c) Microsoft Corporation.\n// Licensed under the MIT License.\n\nimport { type AccessToken, type TokenCredential } from \"@azure/core-auth\";\nimport {\n type TokenCredential as AcsTokenCredential,\n type CommunicationGetTokenOptions,\n} from \"./communicationTokenCredential.js\";\nimport { type AbortSignalLike } from \"@azure/abort-controller\";\nimport { type Client, getClient } from \"@azure-rest/core-client\";\nimport {\n type HttpClient,\n createDefaultHttpClient,\n createHttpHeaders,\n createPipelineRequest,\n} from \"@azure/core-rest-pipeline\";\n\nconst TeamsExtensionScopePrefix = \"https://auth.msft.communication.azure.com/\";\nconst CommunicationClientsScopePrefix = \"https://communication.azure.com/clients/\";\nconst TeamsExtensionEndpoint = \"/access/teamsPhone/:exchangeAccessToken\";\nconst TeamsExtensionApiVersion = \"2025-03-02-preview\";\nconst CommunicationClientsEndpoint = \"/access/entra/:exchangeAccessToken\";\nconst CommunicationClientsApiVersion = \"2024-04-01-preview\";\n\nexport interface ExchangeTokenResponse {\n identity: string;\n accessToken: {\n token: string;\n expiresOn: string;\n };\n}\n\n/**\n * The Entra Communication Token Options.\n */\nexport interface EntraCommunicationTokenCredentialOptions {\n /**\n * The Azure Communication Service resource endpoint URL, e.g. https://myResource.communication.azure.com.\n */\n resourceEndpoint: string;\n /**\n * The Entra ID token credential.\n */\n tokenCredential: TokenCredential;\n /**\n * The scopes for retrieving the Entra ID access token.\n */\n scopes?: string[];\n}\n\n/**\n * Represents a credential that exchanges an Entra token for an Azure Communication Services (ACS) token, enabling access to ACS resources.\n */\nexport class EntraTokenCredential implements AcsTokenCredential {\n private isPending: Promise<AccessToken> | null;\n private result = {\n entraToken: undefined as string | undefined,\n acsToken: { token: \"\", expiresOnTimestamp: 0 },\n };\n private client: Client;\n private httpClient: HttpClient;\n\n constructor(private options: EntraCommunicationTokenCredentialOptions) {\n this.client = getClient(options.resourceEndpoint);\n this.httpClient = createDefaultHttpClient();\n this.options = options;\n this.options.scopes = this.options.scopes || [\n \"https://communication.azure.com/clients/.default\",\n ];\n\n // immediately fetch the token to pre-warm\n this.isPending = this.getToken();\n }\n\n public async getToken(options?: CommunicationGetTokenOptions): Promise<AccessToken> {\n if (options?.abortSignal?.aborted) {\n return { token: \"\", expiresOnTimestamp: 0 };\n }\n\n // we're awaiting the token fetch, so we don't want to start another one\n // however, we're ignoring the new abortSignal, unfortunately\n if (!this.isPending) {\n this.isPending = this.getTokenInternal(options);\n }\n\n try {\n await this.isPending;\n } finally {\n this.isPending = null;\n }\n\n return this.result.acsToken;\n }\n\n private async getTokenInternal(options?: CommunicationGetTokenOptions): Promise<AccessToken> {\n const getTokenOptions = options?.abortSignal ? { abortSignal: options.abortSignal } : undefined;\n const token = await this.options.tokenCredential.getToken(\n this.options.scopes\n ? this.options.scopes\n : [\"https://communication.azure.com/clients/.default\"],\n getTokenOptions,\n );\n const currentDateTime = new Date();\n const tokenExpiresOn = new Date(this.result.acsToken.expiresOnTimestamp);\n\n if (token === null) {\n this.result = {\n entraToken: undefined,\n acsToken: { token: \"\", expiresOnTimestamp: 0 },\n };\n } else if (\n this.result.acsToken.token === \"\" ||\n token.token !== this.result.entraToken ||\n tokenExpiresOn < currentDateTime\n ) {\n const acsToken = await this.exchangeEntraToken(\n this.options.resourceEndpoint,\n token.token,\n getTokenOptions,\n );\n this.result = {\n entraToken: token.token,\n acsToken,\n };\n }\n\n return this.result.acsToken;\n }\n\n public dispose(): void {\n this.result = {\n entraToken: undefined,\n acsToken: { token: \"\", expiresOnTimestamp: 0 },\n };\n }\n\n private async exchangeEntraToken(\n resourceEndpoint: string,\n entraToken: string,\n options?: { abortSignal: AbortSignalLike },\n ): Promise<AccessToken> {\n const request = createPipelineRequest({\n url: this.createRequestUri(resourceEndpoint),\n method: \"POST\",\n headers: createHttpHeaders({\n Authorization: `Bearer ${entraToken}`,\n \"Content-Type\": \"application/json\",\n Accept: \"application/json\",\n }),\n abortSignal: options?.abortSignal,\n body: JSON.stringify({}),\n });\n const response = await this.client.pipeline.sendRequest(this.httpClient, request);\n\n if (response.status !== 200 || !response.bodyAsText) {\n throw new Error(\n `Service request failed. Status: ${response.status}, Body: ${response.bodyAsText}`,\n );\n }\n const json = JSON.parse(response.bodyAsText) as ExchangeTokenResponse;\n return {\n token: json.accessToken.token,\n expiresOnTimestamp: Date.parse(json.accessToken.expiresOn),\n };\n }\n\n private createRequestUri(resourceEndpoint: string): string {\n const [endpoint, apiVersion] = this.determineEndpointAndApiVersion();\n const requestUri = `${resourceEndpoint}${endpoint}?api-version=${apiVersion}`;\n return requestUri;\n }\n\n private determineEndpointAndApiVersion(): [string, string] {\n if (!this.options.scopes || this.options.scopes.length === 0) {\n throw new Error(\n `Scopes validation failed. Ensure all scopes start with either {TeamsExtensionScopePrefix} or {CommunicationClientsScopePrefix}.`,\n );\n } else if (this.options.scopes.every((scope) => scope.startsWith(TeamsExtensionScopePrefix))) {\n return [TeamsExtensionEndpoint, TeamsExtensionApiVersion];\n } else if (\n this.options.scopes.every((scope) => scope.startsWith(CommunicationClientsScopePrefix))\n ) {\n return [CommunicationClientsEndpoint, CommunicationClientsApiVersion];\n } else {\n throw new Error(\n `Scopes validation failed. Ensure all scopes start with either {TeamsExtensionScopePrefix} or {CommunicationClientsScopePrefix}.`,\n );\n }\n }\n}\n"]}
@@ -1,44 +0,0 @@
1
- import { type AccessToken, type TokenCredential } from "@azure/core-auth";
2
- import { type TokenCredential as AcsTokenCredential, type CommunicationGetTokenOptions } from "./communicationTokenCredential.js";
3
- export interface ExchangeTokenResponse {
4
- identity: string;
5
- accessToken: {
6
- token: string;
7
- expiresOn: string;
8
- };
9
- }
10
- /**
11
- * The Entra Communication Token Options.
12
- */
13
- export interface EntraCommunicationTokenCredentialOptions {
14
- /**
15
- * The Azure Communication Service resource endpoint URL, e.g. https://myResource.communication.azure.com.
16
- */
17
- resourceEndpoint: string;
18
- /**
19
- * The Entra ID token credential.
20
- */
21
- tokenCredential: TokenCredential;
22
- /**
23
- * The scopes for retrieving the Entra ID access token.
24
- */
25
- scopes?: string[];
26
- }
27
- /**
28
- * Represents a credential that exchanges an Entra token for an Azure Communication Services (ACS) token, enabling access to ACS resources.
29
- */
30
- export declare class EntraTokenCredential implements AcsTokenCredential {
31
- private options;
32
- private isPending;
33
- private result;
34
- private client;
35
- private httpClient;
36
- constructor(options: EntraCommunicationTokenCredentialOptions);
37
- getToken(options?: CommunicationGetTokenOptions): Promise<AccessToken>;
38
- private getTokenInternal;
39
- dispose(): void;
40
- private exchangeEntraToken;
41
- private createRequestUri;
42
- private determineEndpointAndApiVersion;
43
- }
44
- //# sourceMappingURL=entraTokenCredential.d.ts.map
@@ -1 +0,0 @@
1
- {"version":3,"file":"entraTokenCredential.d.ts","sourceRoot":"","sources":["../../src/entraTokenCredential.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,KAAK,WAAW,EAAE,KAAK,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAC1E,OAAO,EACL,KAAK,eAAe,IAAI,kBAAkB,EAC1C,KAAK,4BAA4B,EAClC,MAAM,mCAAmC,CAAC;AAiB3C,MAAM,WAAW,qBAAqB;IACpC,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE;QACX,KAAK,EAAE,MAAM,CAAC;QACd,SAAS,EAAE,MAAM,CAAC;KACnB,CAAC;CACH;AAED;;GAEG;AACH,MAAM,WAAW,wCAAwC;IACvD;;OAEG;IACH,gBAAgB,EAAE,MAAM,CAAC;IACzB;;OAEG;IACH,eAAe,EAAE,eAAe,CAAC;IACjC;;OAEG;IACH,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;CACnB;AAED;;GAEG;AACH,qBAAa,oBAAqB,YAAW,kBAAkB;IASjD,OAAO,CAAC,OAAO;IAR3B,OAAO,CAAC,SAAS,CAA8B;IAC/C,OAAO,CAAC,MAAM,CAGZ;IACF,OAAO,CAAC,MAAM,CAAS;IACvB,OAAO,CAAC,UAAU,CAAa;gBAEX,OAAO,EAAE,wCAAwC;IAYxD,QAAQ,CAAC,OAAO,CAAC,EAAE,4BAA4B,GAAG,OAAO,CAAC,WAAW,CAAC;YAoBrE,gBAAgB;IAmCvB,OAAO,IAAI,IAAI;YAOR,kBAAkB;IA8BhC,OAAO,CAAC,gBAAgB;IAMxB,OAAO,CAAC,8BAA8B;CAiBvC"}
@@ -1,120 +0,0 @@
1
- // Copyright (c) Microsoft Corporation.
2
- // Licensed under the MIT License.
3
- import { getClient } from "@azure-rest/core-client";
4
- import { createDefaultHttpClient, createHttpHeaders, createPipelineRequest, } from "@azure/core-rest-pipeline";
5
- const TeamsExtensionScopePrefix = "https://auth.msft.communication.azure.com/";
6
- const CommunicationClientsScopePrefix = "https://communication.azure.com/clients/";
7
- const TeamsExtensionEndpoint = "/access/teamsPhone/:exchangeAccessToken";
8
- const TeamsExtensionApiVersion = "2025-03-02-preview";
9
- const CommunicationClientsEndpoint = "/access/entra/:exchangeAccessToken";
10
- const CommunicationClientsApiVersion = "2024-04-01-preview";
11
- /**
12
- * Represents a credential that exchanges an Entra token for an Azure Communication Services (ACS) token, enabling access to ACS resources.
13
- */
14
- export class EntraTokenCredential {
15
- constructor(options) {
16
- this.options = options;
17
- this.result = {
18
- entraToken: undefined,
19
- acsToken: { token: "", expiresOnTimestamp: 0 },
20
- };
21
- this.client = getClient(options.resourceEndpoint);
22
- this.httpClient = createDefaultHttpClient();
23
- this.options = options;
24
- this.options.scopes = this.options.scopes || [
25
- "https://communication.azure.com/clients/.default",
26
- ];
27
- // immediately fetch the token to pre-warm
28
- this.isPending = this.getToken();
29
- }
30
- async getToken(options) {
31
- var _a;
32
- if ((_a = options === null || options === void 0 ? void 0 : options.abortSignal) === null || _a === void 0 ? void 0 : _a.aborted) {
33
- return { token: "", expiresOnTimestamp: 0 };
34
- }
35
- // we're awaiting the token fetch, so we don't want to start another one
36
- // however, we're ignoring the new abortSignal, unfortunately
37
- if (!this.isPending) {
38
- this.isPending = this.getTokenInternal(options);
39
- }
40
- try {
41
- await this.isPending;
42
- }
43
- finally {
44
- this.isPending = null;
45
- }
46
- return this.result.acsToken;
47
- }
48
- async getTokenInternal(options) {
49
- const getTokenOptions = (options === null || options === void 0 ? void 0 : options.abortSignal) ? { abortSignal: options.abortSignal } : undefined;
50
- const token = await this.options.tokenCredential.getToken(this.options.scopes
51
- ? this.options.scopes
52
- : ["https://communication.azure.com/clients/.default"], getTokenOptions);
53
- const currentDateTime = new Date();
54
- const tokenExpiresOn = new Date(this.result.acsToken.expiresOnTimestamp);
55
- if (token === null) {
56
- this.result = {
57
- entraToken: undefined,
58
- acsToken: { token: "", expiresOnTimestamp: 0 },
59
- };
60
- }
61
- else if (this.result.acsToken.token === "" ||
62
- token.token !== this.result.entraToken ||
63
- tokenExpiresOn < currentDateTime) {
64
- const acsToken = await this.exchangeEntraToken(this.options.resourceEndpoint, token.token, getTokenOptions);
65
- this.result = {
66
- entraToken: token.token,
67
- acsToken,
68
- };
69
- }
70
- return this.result.acsToken;
71
- }
72
- dispose() {
73
- this.result = {
74
- entraToken: undefined,
75
- acsToken: { token: "", expiresOnTimestamp: 0 },
76
- };
77
- }
78
- async exchangeEntraToken(resourceEndpoint, entraToken, options) {
79
- const request = createPipelineRequest({
80
- url: this.createRequestUri(resourceEndpoint),
81
- method: "POST",
82
- headers: createHttpHeaders({
83
- Authorization: `Bearer ${entraToken}`,
84
- "Content-Type": "application/json",
85
- Accept: "application/json",
86
- }),
87
- abortSignal: options === null || options === void 0 ? void 0 : options.abortSignal,
88
- body: JSON.stringify({}),
89
- });
90
- const response = await this.client.pipeline.sendRequest(this.httpClient, request);
91
- if (response.status !== 200 || !response.bodyAsText) {
92
- throw new Error(`Service request failed. Status: ${response.status}, Body: ${response.bodyAsText}`);
93
- }
94
- const json = JSON.parse(response.bodyAsText);
95
- return {
96
- token: json.accessToken.token,
97
- expiresOnTimestamp: Date.parse(json.accessToken.expiresOn),
98
- };
99
- }
100
- createRequestUri(resourceEndpoint) {
101
- const [endpoint, apiVersion] = this.determineEndpointAndApiVersion();
102
- const requestUri = `${resourceEndpoint}${endpoint}?api-version=${apiVersion}`;
103
- return requestUri;
104
- }
105
- determineEndpointAndApiVersion() {
106
- if (!this.options.scopes || this.options.scopes.length === 0) {
107
- throw new Error(`Scopes validation failed. Ensure all scopes start with either {TeamsExtensionScopePrefix} or {CommunicationClientsScopePrefix}.`);
108
- }
109
- else if (this.options.scopes.every((scope) => scope.startsWith(TeamsExtensionScopePrefix))) {
110
- return [TeamsExtensionEndpoint, TeamsExtensionApiVersion];
111
- }
112
- else if (this.options.scopes.every((scope) => scope.startsWith(CommunicationClientsScopePrefix))) {
113
- return [CommunicationClientsEndpoint, CommunicationClientsApiVersion];
114
- }
115
- else {
116
- throw new Error(`Scopes validation failed. Ensure all scopes start with either {TeamsExtensionScopePrefix} or {CommunicationClientsScopePrefix}.`);
117
- }
118
- }
119
- }
120
- //# sourceMappingURL=entraTokenCredential.js.map
@@ -1 +0,0 @@
1
- {"version":3,"file":"entraTokenCredential.js","sourceRoot":"","sources":["../../src/entraTokenCredential.ts"],"names":[],"mappings":"AAAA,uCAAuC;AACvC,kCAAkC;AAQlC,OAAO,EAAe,SAAS,EAAE,MAAM,yBAAyB,CAAC;AACjE,OAAO,EAEL,uBAAuB,EACvB,iBAAiB,EACjB,qBAAqB,GACtB,MAAM,2BAA2B,CAAC;AAEnC,MAAM,yBAAyB,GAAG,4CAA4C,CAAC;AAC/E,MAAM,+BAA+B,GAAG,0CAA0C,CAAC;AACnF,MAAM,sBAAsB,GAAG,yCAAyC,CAAC;AACzE,MAAM,wBAAwB,GAAG,oBAAoB,CAAC;AACtD,MAAM,4BAA4B,GAAG,oCAAoC,CAAC;AAC1E,MAAM,8BAA8B,GAAG,oBAAoB,CAAC;AA4B5D;;GAEG;AACH,MAAM,OAAO,oBAAoB;IAS/B,YAAoB,OAAiD;QAAjD,YAAO,GAAP,OAAO,CAA0C;QAP7D,WAAM,GAAG;YACf,UAAU,EAAE,SAA+B;YAC3C,QAAQ,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,kBAAkB,EAAE,CAAC,EAAE;SAC/C,CAAC;QAKA,IAAI,CAAC,MAAM,GAAG,SAAS,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;QAClD,IAAI,CAAC,UAAU,GAAG,uBAAuB,EAAE,CAAC;QAC5C,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,IAAI;YAC3C,kDAAkD;SACnD,CAAC;QAEF,0CAA0C;QAC1C,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;IACnC,CAAC;IAEM,KAAK,CAAC,QAAQ,CAAC,OAAsC;;QAC1D,IAAI,MAAA,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,WAAW,0CAAE,OAAO,EAAE,CAAC;YAClC,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,kBAAkB,EAAE,CAAC,EAAE,CAAC;QAC9C,CAAC;QAED,wEAAwE;QACxE,6DAA6D;QAC7D,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;YACpB,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC;QAClD,CAAC;QAED,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,SAAS,CAAC;QACvB,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;QACxB,CAAC;QAED,OAAO,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC;IAC9B,CAAC;IAEO,KAAK,CAAC,gBAAgB,CAAC,OAAsC;QACnE,MAAM,eAAe,GAAG,CAAA,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,WAAW,EAAC,CAAC,CAAC,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;QAChG,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,eAAe,CAAC,QAAQ,CACvD,IAAI,CAAC,OAAO,CAAC,MAAM;YACjB,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM;YACrB,CAAC,CAAC,CAAC,kDAAkD,CAAC,EACxD,eAAe,CAChB,CAAC;QACF,MAAM,eAAe,GAAG,IAAI,IAAI,EAAE,CAAC;QACnC,MAAM,cAAc,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,kBAAkB,CAAC,CAAC;QAEzE,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;YACnB,IAAI,CAAC,MAAM,GAAG;gBACZ,UAAU,EAAE,SAAS;gBACrB,QAAQ,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,kBAAkB,EAAE,CAAC,EAAE;aAC/C,CAAC;QACJ,CAAC;aAAM,IACL,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,KAAK,EAAE;YACjC,KAAK,CAAC,KAAK,KAAK,IAAI,CAAC,MAAM,CAAC,UAAU;YACtC,cAAc,GAAG,eAAe,EAChC,CAAC;YACD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAC5C,IAAI,CAAC,OAAO,CAAC,gBAAgB,EAC7B,KAAK,CAAC,KAAK,EACX,eAAe,CAChB,CAAC;YACF,IAAI,CAAC,MAAM,GAAG;gBACZ,UAAU,EAAE,KAAK,CAAC,KAAK;gBACvB,QAAQ;aACT,CAAC;QACJ,CAAC;QAED,OAAO,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC;IAC9B,CAAC;IAEM,OAAO;QACZ,IAAI,CAAC,MAAM,GAAG;YACZ,UAAU,EAAE,SAAS;YACrB,QAAQ,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,kBAAkB,EAAE,CAAC,EAAE;SAC/C,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,kBAAkB,CAC9B,gBAAwB,EACxB,UAAkB,EAClB,OAA0C;QAE1C,MAAM,OAAO,GAAG,qBAAqB,CAAC;YACpC,GAAG,EAAE,IAAI,CAAC,gBAAgB,CAAC,gBAAgB,CAAC;YAC5C,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,iBAAiB,CAAC;gBACzB,aAAa,EAAE,UAAU,UAAU,EAAE;gBACrC,cAAc,EAAE,kBAAkB;gBAClC,MAAM,EAAE,kBAAkB;aAC3B,CAAC;YACF,WAAW,EAAE,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,WAAW;YACjC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;SACzB,CAAC,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;QAElF,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,UAAU,EAAE,CAAC;YACpD,MAAM,IAAI,KAAK,CACb,mCAAmC,QAAQ,CAAC,MAAM,WAAW,QAAQ,CAAC,UAAU,EAAE,CACnF,CAAC;QACJ,CAAC;QACD,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,UAAU,CAA0B,CAAC;QACtE,OAAO;YACL,KAAK,EAAE,IAAI,CAAC,WAAW,CAAC,KAAK;YAC7B,kBAAkB,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC;SAC3D,CAAC;IACJ,CAAC;IAEO,gBAAgB,CAAC,gBAAwB;QAC/C,MAAM,CAAC,QAAQ,EAAE,UAAU,CAAC,GAAG,IAAI,CAAC,8BAA8B,EAAE,CAAC;QACrE,MAAM,UAAU,GAAG,GAAG,gBAAgB,GAAG,QAAQ,gBAAgB,UAAU,EAAE,CAAC;QAC9E,OAAO,UAAU,CAAC;IACpB,CAAC;IAEO,8BAA8B;QACpC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC7D,MAAM,IAAI,KAAK,CACb,iIAAiI,CAClI,CAAC;QACJ,CAAC;aAAM,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,yBAAyB,CAAC,CAAC,EAAE,CAAC;YAC7F,OAAO,CAAC,sBAAsB,EAAE,wBAAwB,CAAC,CAAC;QAC5D,CAAC;aAAM,IACL,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,+BAA+B,CAAC,CAAC,EACvF,CAAC;YACD,OAAO,CAAC,4BAA4B,EAAE,8BAA8B,CAAC,CAAC;QACxE,CAAC;aAAM,CAAC;YACN,MAAM,IAAI,KAAK,CACb,iIAAiI,CAClI,CAAC;QACJ,CAAC;IACH,CAAC;CACF","sourcesContent":["// Copyright (c) Microsoft Corporation.\n// Licensed under the MIT License.\n\nimport { type AccessToken, type TokenCredential } from \"@azure/core-auth\";\nimport {\n type TokenCredential as AcsTokenCredential,\n type CommunicationGetTokenOptions,\n} from \"./communicationTokenCredential.js\";\nimport { type AbortSignalLike } from \"@azure/abort-controller\";\nimport { type Client, getClient } from \"@azure-rest/core-client\";\nimport {\n type HttpClient,\n createDefaultHttpClient,\n createHttpHeaders,\n createPipelineRequest,\n} from \"@azure/core-rest-pipeline\";\n\nconst TeamsExtensionScopePrefix = \"https://auth.msft.communication.azure.com/\";\nconst CommunicationClientsScopePrefix = \"https://communication.azure.com/clients/\";\nconst TeamsExtensionEndpoint = \"/access/teamsPhone/:exchangeAccessToken\";\nconst TeamsExtensionApiVersion = \"2025-03-02-preview\";\nconst CommunicationClientsEndpoint = \"/access/entra/:exchangeAccessToken\";\nconst CommunicationClientsApiVersion = \"2024-04-01-preview\";\n\nexport interface ExchangeTokenResponse {\n identity: string;\n accessToken: {\n token: string;\n expiresOn: string;\n };\n}\n\n/**\n * The Entra Communication Token Options.\n */\nexport interface EntraCommunicationTokenCredentialOptions {\n /**\n * The Azure Communication Service resource endpoint URL, e.g. https://myResource.communication.azure.com.\n */\n resourceEndpoint: string;\n /**\n * The Entra ID token credential.\n */\n tokenCredential: TokenCredential;\n /**\n * The scopes for retrieving the Entra ID access token.\n */\n scopes?: string[];\n}\n\n/**\n * Represents a credential that exchanges an Entra token for an Azure Communication Services (ACS) token, enabling access to ACS resources.\n */\nexport class EntraTokenCredential implements AcsTokenCredential {\n private isPending: Promise<AccessToken> | null;\n private result = {\n entraToken: undefined as string | undefined,\n acsToken: { token: \"\", expiresOnTimestamp: 0 },\n };\n private client: Client;\n private httpClient: HttpClient;\n\n constructor(private options: EntraCommunicationTokenCredentialOptions) {\n this.client = getClient(options.resourceEndpoint);\n this.httpClient = createDefaultHttpClient();\n this.options = options;\n this.options.scopes = this.options.scopes || [\n \"https://communication.azure.com/clients/.default\",\n ];\n\n // immediately fetch the token to pre-warm\n this.isPending = this.getToken();\n }\n\n public async getToken(options?: CommunicationGetTokenOptions): Promise<AccessToken> {\n if (options?.abortSignal?.aborted) {\n return { token: \"\", expiresOnTimestamp: 0 };\n }\n\n // we're awaiting the token fetch, so we don't want to start another one\n // however, we're ignoring the new abortSignal, unfortunately\n if (!this.isPending) {\n this.isPending = this.getTokenInternal(options);\n }\n\n try {\n await this.isPending;\n } finally {\n this.isPending = null;\n }\n\n return this.result.acsToken;\n }\n\n private async getTokenInternal(options?: CommunicationGetTokenOptions): Promise<AccessToken> {\n const getTokenOptions = options?.abortSignal ? { abortSignal: options.abortSignal } : undefined;\n const token = await this.options.tokenCredential.getToken(\n this.options.scopes\n ? this.options.scopes\n : [\"https://communication.azure.com/clients/.default\"],\n getTokenOptions,\n );\n const currentDateTime = new Date();\n const tokenExpiresOn = new Date(this.result.acsToken.expiresOnTimestamp);\n\n if (token === null) {\n this.result = {\n entraToken: undefined,\n acsToken: { token: \"\", expiresOnTimestamp: 0 },\n };\n } else if (\n this.result.acsToken.token === \"\" ||\n token.token !== this.result.entraToken ||\n tokenExpiresOn < currentDateTime\n ) {\n const acsToken = await this.exchangeEntraToken(\n this.options.resourceEndpoint,\n token.token,\n getTokenOptions,\n );\n this.result = {\n entraToken: token.token,\n acsToken,\n };\n }\n\n return this.result.acsToken;\n }\n\n public dispose(): void {\n this.result = {\n entraToken: undefined,\n acsToken: { token: \"\", expiresOnTimestamp: 0 },\n };\n }\n\n private async exchangeEntraToken(\n resourceEndpoint: string,\n entraToken: string,\n options?: { abortSignal: AbortSignalLike },\n ): Promise<AccessToken> {\n const request = createPipelineRequest({\n url: this.createRequestUri(resourceEndpoint),\n method: \"POST\",\n headers: createHttpHeaders({\n Authorization: `Bearer ${entraToken}`,\n \"Content-Type\": \"application/json\",\n Accept: \"application/json\",\n }),\n abortSignal: options?.abortSignal,\n body: JSON.stringify({}),\n });\n const response = await this.client.pipeline.sendRequest(this.httpClient, request);\n\n if (response.status !== 200 || !response.bodyAsText) {\n throw new Error(\n `Service request failed. Status: ${response.status}, Body: ${response.bodyAsText}`,\n );\n }\n const json = JSON.parse(response.bodyAsText) as ExchangeTokenResponse;\n return {\n token: json.accessToken.token,\n expiresOnTimestamp: Date.parse(json.accessToken.expiresOn),\n };\n }\n\n private createRequestUri(resourceEndpoint: string): string {\n const [endpoint, apiVersion] = this.determineEndpointAndApiVersion();\n const requestUri = `${resourceEndpoint}${endpoint}?api-version=${apiVersion}`;\n return requestUri;\n }\n\n private determineEndpointAndApiVersion(): [string, string] {\n if (!this.options.scopes || this.options.scopes.length === 0) {\n throw new Error(\n `Scopes validation failed. Ensure all scopes start with either {TeamsExtensionScopePrefix} or {CommunicationClientsScopePrefix}.`,\n );\n } else if (this.options.scopes.every((scope) => scope.startsWith(TeamsExtensionScopePrefix))) {\n return [TeamsExtensionEndpoint, TeamsExtensionApiVersion];\n } else if (\n this.options.scopes.every((scope) => scope.startsWith(CommunicationClientsScopePrefix))\n ) {\n return [CommunicationClientsEndpoint, CommunicationClientsApiVersion];\n } else {\n throw new Error(\n `Scopes validation failed. Ensure all scopes start with either {TeamsExtensionScopePrefix} or {CommunicationClientsScopePrefix}.`,\n );\n }\n }\n}\n"]}