@azure/communication-common 2.4.2-alpha.20260211.1 → 2.4.2

package/dist/commonjs/entraTokenCredential.js

@@ -1,127 +1,151 @@
-"use strict";
-// Copyright (c) Microsoft Corporation.
-// Licensed under the MIT License.
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.EntraTokenCredential = void 0;
-const core_client_1 = require("@azure-rest/core-client");
-const core_rest_pipeline_1 = require("@azure/core-rest-pipeline");
-const TeamsExtensionScopePrefix = "https://auth.msft.communication.azure.com/";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+var entraTokenCredential_exports = {};
+__export(entraTokenCredential_exports, {
+  EntraTokenCredential: () => EntraTokenCredential
+});
+module.exports = __toCommonJS(entraTokenCredential_exports);
+var import_core_client = require("@azure-rest/core-client");
+var import_core_rest_pipeline = require("@azure/core-rest-pipeline");
+const TeamsExtensionScopePrefixes = [
+  "https://auth.msft.communication.azure.com/",
+  "https://auth.msft.communication.azure.us/"
+];
 const CommunicationClientsScopePrefix = "https://communication.azure.com/clients/";
+const ScopeValidationErrorMessage = `Scopes validation failed. Ensure all scopes start with one of ${[
+  ...TeamsExtensionScopePrefixes,
+  CommunicationClientsScopePrefix
+].join(", ")}.`;
 const TeamsExtensionEndpoint = "/access/teamsExtension/:exchangeAccessToken";
 const TeamsExtensionApiVersion = "2025-06-30";
 const CommunicationClientsEndpoint = "/access/entra/:exchangeAccessToken";
 const CommunicationClientsApiVersion = "2025-03-02-preview";
-/**
- * Represents a credential that exchanges an Entra token for an Azure Communication Services (ACS) token, enabling access to ACS resources.
- */
 class EntraTokenCredential {
-    options;
-    isPending;
-    result = {
-        entraToken: undefined,
-        acsToken: { token: "", expiresOnTimestamp: 0 },
-    };
-    client;
-    httpClient;
-    constructor(options) {
-        this.options = options;
-        this.client = (0, core_client_1.getClient)(options.resourceEndpoint);
-        this.httpClient = (0, core_rest_pipeline_1.createDefaultHttpClient)();
-        this.options = options;
-        this.options.scopes = this.options.scopes || [
-            "https://communication.azure.com/clients/.default",
-        ];
-        // immediately fetch the token to pre-warm
-        this.isPending = this.getToken();
+  constructor(options) {
+    this.options = options;
+    this.client = (0, import_core_client.getClient)(options.resourceEndpoint);
+    this.httpClient = (0, import_core_rest_pipeline.createDefaultHttpClient)();
+    this.options = options;
+    this.options.scopes = this.options.scopes || [
+      "https://communication.azure.com/clients/.default"
+    ];
+    this.isPending = this.getToken();
+  }
+  options;
+  isPending;
+  result = {
+    entraToken: void 0,
+    acsToken: { token: "", expiresOnTimestamp: 0 }
+  };
+  client;
+  httpClient;
+  async getToken(options) {
+    if (options?.abortSignal?.aborted) {
+      return { token: "", expiresOnTimestamp: 0 };
+    }
+    if (!this.isPending) {
+      this.isPending = this.getTokenInternal(options);
     }
-    async getToken(options) {
-        if (options?.abortSignal?.aborted) {
-            return { token: "", expiresOnTimestamp: 0 };
-        }
-        // we're awaiting the token fetch, so we don't want to start another one
-        // however, we're ignoring the new abortSignal, unfortunately
-        if (!this.isPending) {
-            this.isPending = this.getTokenInternal(options);
-        }
-        try {
-            await this.isPending;
-        }
-        finally {
-            this.isPending = null;
-        }
-        return this.result.acsToken;
+    try {
+      await this.isPending;
+    } finally {
+      this.isPending = null;
     }
-    async getTokenInternal(options) {
-        const getTokenOptions = options?.abortSignal ? { abortSignal: options.abortSignal } : undefined;
-        const token = await this.options.tokenCredential.getToken(this.options.scopes
-            ? this.options.scopes
-            : ["https://communication.azure.com/clients/.default"], getTokenOptions);
-        const currentDateTime = new Date();
-        const tokenExpiresOn = new Date(this.result.acsToken.expiresOnTimestamp);
-        if (token === null) {
-            this.result = {
-                entraToken: undefined,
-                acsToken: { token: "", expiresOnTimestamp: 0 },
-            };
-        }
-        else if (this.result.acsToken.token === "" ||
-            token.token !== this.result.entraToken ||
-            tokenExpiresOn < currentDateTime) {
-            const acsToken = await this.exchangeEntraToken(this.options.resourceEndpoint, token.token, getTokenOptions);
-            this.result = {
-                entraToken: token.token,
-                acsToken,
-            };
-        }
-        return this.result.acsToken;
+    return this.result.acsToken;
+  }
+  async getTokenInternal(options) {
+    const getTokenOptions = options?.abortSignal ? { abortSignal: options.abortSignal } : void 0;
+    const token = await this.options.tokenCredential.getToken(
+      this.options.scopes ? this.options.scopes : ["https://communication.azure.com/clients/.default"],
+      getTokenOptions
+    );
+    const currentDateTime = /* @__PURE__ */ new Date();
+    const tokenExpiresOn = new Date(this.result.acsToken.expiresOnTimestamp);
+    if (token === null) {
+      this.result = {
+        entraToken: void 0,
+        acsToken: { token: "", expiresOnTimestamp: 0 }
+      };
+    } else if (this.result.acsToken.token === "" || token.token !== this.result.entraToken || tokenExpiresOn < currentDateTime) {
+      const acsToken = await this.exchangeEntraToken(
+        this.options.resourceEndpoint,
+        token.token,
+        getTokenOptions
+      );
+      this.result = {
+        entraToken: token.token,
+        acsToken
+      };
     }
-    dispose() {
-        this.result = {
-            entraToken: undefined,
-            acsToken: { token: "", expiresOnTimestamp: 0 },
-        };
+    return this.result.acsToken;
+  }
+  dispose() {
+    this.result = {
+      entraToken: void 0,
+      acsToken: { token: "", expiresOnTimestamp: 0 }
+    };
+  }
+  async exchangeEntraToken(resourceEndpoint, entraToken, options) {
+    const request = (0, import_core_rest_pipeline.createPipelineRequest)({
+      url: this.createRequestUri(resourceEndpoint),
+      method: "POST",
+      headers: (0, import_core_rest_pipeline.createHttpHeaders)({
+        Authorization: `Bearer ${entraToken}`,
+        "Content-Type": "application/json",
+        Accept: "application/json"
+      }),
+      abortSignal: options?.abortSignal,
+      body: JSON.stringify({})
+    });
+    const response = await this.client.pipeline.sendRequest(this.httpClient, request);
+    if (response.status !== 200 || !response.bodyAsText) {
+      throw new Error(
+        `Service request failed. Status: ${response.status}, Body: ${response.bodyAsText}`
+      );
     }
-    async exchangeEntraToken(resourceEndpoint, entraToken, options) {
-        const request = (0, core_rest_pipeline_1.createPipelineRequest)({
-            url: this.createRequestUri(resourceEndpoint),
-            method: "POST",
-            headers: (0, core_rest_pipeline_1.createHttpHeaders)({
-                Authorization: `Bearer ${entraToken}`,
-                "Content-Type": "application/json",
-                Accept: "application/json",
-            }),
-            abortSignal: options?.abortSignal,
-            body: JSON.stringify({}),
-        });
-        const response = await this.client.pipeline.sendRequest(this.httpClient, request);
-        if (response.status !== 200 || !response.bodyAsText) {
-            throw new Error(`Service request failed. Status: ${response.status}, Body: ${response.bodyAsText}`);
-        }
-        const json = JSON.parse(response.bodyAsText);
-        return {
-            token: json.accessToken.token,
-            expiresOnTimestamp: Date.parse(json.accessToken.expiresOn),
-        };
+    const json = JSON.parse(response.bodyAsText);
+    return {
+      token: json.accessToken.token,
+      expiresOnTimestamp: Date.parse(json.accessToken.expiresOn)
+    };
+  }
+  createRequestUri(resourceEndpoint) {
+    const [endpoint, apiVersion] = this.determineEndpointAndApiVersion();
+    const requestUri = `${resourceEndpoint}${endpoint}?api-version=${apiVersion}`;
+    return requestUri;
+  }
+  determineEndpointAndApiVersion() {
+    if (!this.options.scopes || this.options.scopes.length === 0) {
+      throw new Error(ScopeValidationErrorMessage);
     }
-    createRequestUri(resourceEndpoint) {
-        const [endpoint, apiVersion] = this.determineEndpointAndApiVersion();
-        const requestUri = `${resourceEndpoint}${endpoint}?api-version=${apiVersion}`;
-        return requestUri;
+    if (this.options.scopes.every(
+      (scope) => TeamsExtensionScopePrefixes.some((prefix) => scope.startsWith(prefix))
+    )) {
+      return [TeamsExtensionEndpoint, TeamsExtensionApiVersion];
     }
-    determineEndpointAndApiVersion() {
-        if (!this.options.scopes || this.options.scopes.length === 0) {
-            throw new Error(`Scopes validation failed. Ensure all scopes start with either {TeamsExtensionScopePrefix} or {CommunicationClientsScopePrefix}.`);
-        }
-        else if (this.options.scopes.every((scope) => scope.startsWith(TeamsExtensionScopePrefix))) {
-            return [TeamsExtensionEndpoint, TeamsExtensionApiVersion];
-        }
-        else if (this.options.scopes.every((scope) => scope.startsWith(CommunicationClientsScopePrefix))) {
-            return [CommunicationClientsEndpoint, CommunicationClientsApiVersion];
-        }
-        else {
-            throw new Error(`Scopes validation failed. Ensure all scopes start with either {TeamsExtensionScopePrefix} or {CommunicationClientsScopePrefix}.`);
-        }
+    if (this.options.scopes.every((scope) => scope.startsWith(CommunicationClientsScopePrefix))) {
+      return [CommunicationClientsEndpoint, CommunicationClientsApiVersion];
     }
+    throw new Error(ScopeValidationErrorMessage);
+  }
 }
-exports.EntraTokenCredential = EntraTokenCredential;
-//# sourceMappingURL=entraTokenCredential.js.map
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  EntraTokenCredential
+});
+//# sourceMappingURL=entraTokenCredential.js.map

package/dist/commonjs/entraTokenCredential.js.map

@@ -1 +1,7 @@
-{"version":3,"file":"entraTokenCredential.js","sourceRoot":"","sources":["../../src/entraTokenCredential.ts"],"names":[],"mappings":";AAAA,uCAAuC;AACvC,kCAAkC;;;AAQlC,yDAAiE;AACjE,kEAKmC;AAEnC,MAAM,yBAAyB,GAAG,4CAA4C,CAAC;AAC/E,MAAM,+BAA+B,GAAG,0CAA0C,CAAC;AACnF,MAAM,sBAAsB,GAAG,6CAA6C,CAAC;AAC7E,MAAM,wBAAwB,GAAG,YAAY,CAAC;AAC9C,MAAM,4BAA4B,GAAG,oCAAoC,CAAC;AAC1E,MAAM,8BAA8B,GAAG,oBAAoB,CAAC;AA4B5D;;GAEG;AACH,MAAa,oBAAoB;IASX;IARZ,SAAS,CAA8B;IACvC,MAAM,GAAG;QACf,UAAU,EAAE,SAA+B;QAC3C,QAAQ,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,kBAAkB,EAAE,CAAC,EAAE;KAC/C,CAAC;IACM,MAAM,CAAS;IACf,UAAU,CAAa;IAE/B,YAAoB,OAAiD;QAAjD,YAAO,GAAP,OAAO,CAA0C;QACnE,IAAI,CAAC,MAAM,GAAG,IAAA,uBAAS,EAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;QAClD,IAAI,CAAC,UAAU,GAAG,IAAA,4CAAuB,GAAE,CAAC;QAC5C,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,IAAI;YAC3C,kDAAkD;SACnD,CAAC;QAEF,0CAA0C;QAC1C,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;IACnC,CAAC;IAEM,KAAK,CAAC,QAAQ,CAAC,OAAsC;QAC1D,IAAI,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,CAAC;YAClC,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,kBAAkB,EAAE,CAAC,EAAE,CAAC;QAC9C,CAAC;QAED,wEAAwE;QACxE,6DAA6D;QAC7D,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;YACpB,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC;QAClD,CAAC;QAED,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,SAAS,CAAC;QACvB,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;QACxB,CAAC;QAED,OAAO,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC;IAC9B,CAAC;IAEO,KAAK,CAAC,gBAAgB,CAAC,OAAsC;QACnE,MAAM,eAAe,GAAG,OAAO,EAAE,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;QAChG,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,eAAe,CAAC,QAAQ,CACvD,IAAI,CAAC,OAAO,CAAC,MAAM;YACjB,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM;YACrB,CAAC,CAAC,CAAC,kDAAkD,CAAC,EACxD,eAAe,CAChB,CAAC;QACF,MAAM,eAAe,GAAG,IAAI,IAAI,EAAE,CAAC;QACnC,MAAM,cAAc,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,kBAAkB,CAAC,CAAC;QAEzE,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;YACnB,IAAI,CAAC,MAAM,GAAG;gBACZ,UAAU,EAAE,SAAS;gBACrB,QAAQ,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,kBAAkB,EAAE,CAAC,EAAE;aAC/C,CAAC;QACJ,CAAC;aAAM,IACL,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,KAAK,EAAE;YACjC,KAAK,CAAC,KAAK,KAAK,IAAI,CAAC,MAAM,CAAC,UAAU;YACtC,cAAc,GAAG,eAAe,EAChC,CAAC;YACD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAC5C,IAAI,CAAC,OAAO,CAAC,gBAAgB,EAC7B,KAAK,CAAC,KAAK,EACX,eAAe,CAChB,CAAC;YACF,IAAI,CAAC,MAAM,GAAG;gBACZ,UAAU,EAAE,KAAK,CAAC,KAAK;gBACvB,QAAQ;aACT,CAAC;QACJ,CAAC;QAED,OAAO,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC;IAC9B,CAAC;IAEM,OAAO;QACZ,IAAI,CAAC,MAAM,GAAG;YACZ,UAAU,EAAE,SAAS;YACrB,QAAQ,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,kBAAkB,EAAE,CAAC,EAAE;SAC/C,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,kBAAkB,CAC9B,gBAAwB,EACxB,UAAkB,EAClB,OAA0C;QAE1C,MAAM,OAAO,GAAG,IAAA,0CAAqB,EAAC;YACpC,GAAG,EAAE,IAAI,CAAC,gBAAgB,CAAC,gBAAgB,CAAC;YAC5C,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,IAAA,sCAAiB,EAAC;gBACzB,aAAa,EAAE,UAAU,UAAU,EAAE;gBACrC,cAAc,EAAE,kBAAkB;gBAClC,MAAM,EAAE,kBAAkB;aAC3B,CAAC;YACF,WAAW,EAAE,OAAO,EAAE,WAAW;YACjC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;SACzB,CAAC,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;QAElF,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,UAAU,EAAE,CAAC;YACpD,MAAM,IAAI,KAAK,CACb,mCAAmC,QAAQ,CAAC,MAAM,WAAW,QAAQ,CAAC,UAAU,EAAE,CACnF,CAAC;QACJ,CAAC;QACD,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,UAAU,CAA0B,CAAC;QACtE,OAAO;YACL,KAAK,EAAE,IAAI,CAAC,WAAW,CAAC,KAAK;YAC7B,kBAAkB,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC;SAC3D,CAAC;IACJ,CAAC;IAEO,gBAAgB,CAAC,gBAAwB;QAC/C,MAAM,CAAC,QAAQ,EAAE,UAAU,CAAC,GAAG,IAAI,CAAC,8BAA8B,EAAE,CAAC;QACrE,MAAM,UAAU,GAAG,GAAG,gBAAgB,GAAG,QAAQ,gBAAgB,UAAU,EAAE,CAAC;QAC9E,OAAO,UAAU,CAAC;IACpB,CAAC;IAEO,8BAA8B;QACpC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC7D,MAAM,IAAI,KAAK,CACb,iIAAiI,CAClI,CAAC;QACJ,CAAC;aAAM,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,yBAAyB,CAAC,CAAC,EAAE,CAAC;YAC7F,OAAO,CAAC,sBAAsB,EAAE,wBAAwB,CAAC,CAAC;QAC5D,CAAC;aAAM,IACL,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,+BAA+B,CAAC,CAAC,EACvF,CAAC;YACD,OAAO,CAAC,4BAA4B,EAAE,8BAA8B,CAAC,CAAC;QACxE,CAAC;aAAM,CAAC;YACN,MAAM,IAAI,KAAK,CACb,iIAAiI,CAClI,CAAC;QACJ,CAAC;IACH,CAAC;CACF;AAxID,oDAwIC","sourcesContent":["// Copyright (c) Microsoft Corporation.\n// Licensed under the MIT License.\n\nimport { type AccessToken, type TokenCredential } from \"@azure/core-auth\";\nimport {\n  type TokenCredential as AcsTokenCredential,\n  type CommunicationGetTokenOptions,\n} from \"./communicationTokenCredential.js\";\nimport { type AbortSignalLike } from \"@azure/abort-controller\";\nimport { type Client, getClient } from \"@azure-rest/core-client\";\nimport {\n  type HttpClient,\n  createDefaultHttpClient,\n  createHttpHeaders,\n  createPipelineRequest,\n} from \"@azure/core-rest-pipeline\";\n\nconst TeamsExtensionScopePrefix = \"https://auth.msft.communication.azure.com/\";\nconst CommunicationClientsScopePrefix = \"https://communication.azure.com/clients/\";\nconst TeamsExtensionEndpoint = \"/access/teamsExtension/:exchangeAccessToken\";\nconst TeamsExtensionApiVersion = \"2025-06-30\";\nconst CommunicationClientsEndpoint = \"/access/entra/:exchangeAccessToken\";\nconst CommunicationClientsApiVersion = \"2025-03-02-preview\";\n\nexport interface ExchangeTokenResponse {\n  identity: string;\n  accessToken: {\n    token: string;\n    expiresOn: string;\n  };\n}\n\n/**\n * The Entra Communication Token Options.\n */\nexport interface EntraCommunicationTokenCredentialOptions {\n  /**\n   * The Azure Communication Service resource endpoint URL, e.g. https://myResource.communication.azure.com.\n   */\n  resourceEndpoint: string;\n  /**\n   * The Entra ID token credential.\n   */\n  tokenCredential: TokenCredential;\n  /**\n   * The scopes for retrieving the Entra ID access token.\n   */\n  scopes?: string[];\n}\n\n/**\n * Represents a credential that exchanges an Entra token for an Azure Communication Services (ACS) token, enabling access to ACS resources.\n */\nexport class EntraTokenCredential implements AcsTokenCredential {\n  private isPending: Promise<AccessToken> | null;\n  private result = {\n    entraToken: undefined as string | undefined,\n    acsToken: { token: \"\", expiresOnTimestamp: 0 },\n  };\n  private client: Client;\n  private httpClient: HttpClient;\n\n  constructor(private options: EntraCommunicationTokenCredentialOptions) {\n    this.client = getClient(options.resourceEndpoint);\n    this.httpClient = createDefaultHttpClient();\n    this.options = options;\n    this.options.scopes = this.options.scopes || [\n      \"https://communication.azure.com/clients/.default\",\n    ];\n\n    // immediately fetch the token to pre-warm\n    this.isPending = this.getToken();\n  }\n\n  public async getToken(options?: CommunicationGetTokenOptions): Promise<AccessToken> {\n    if (options?.abortSignal?.aborted) {\n      return { token: \"\", expiresOnTimestamp: 0 };\n    }\n\n    // we're awaiting the token fetch, so we don't want to start another one\n    // however, we're ignoring the new abortSignal, unfortunately\n    if (!this.isPending) {\n      this.isPending = this.getTokenInternal(options);\n    }\n\n    try {\n      await this.isPending;\n    } finally {\n      this.isPending = null;\n    }\n\n    return this.result.acsToken;\n  }\n\n  private async getTokenInternal(options?: CommunicationGetTokenOptions): Promise<AccessToken> {\n    const getTokenOptions = options?.abortSignal ? { abortSignal: options.abortSignal } : undefined;\n    const token = await this.options.tokenCredential.getToken(\n      this.options.scopes\n        ? this.options.scopes\n        : [\"https://communication.azure.com/clients/.default\"],\n      getTokenOptions,\n    );\n    const currentDateTime = new Date();\n    const tokenExpiresOn = new Date(this.result.acsToken.expiresOnTimestamp);\n\n    if (token === null) {\n      this.result = {\n        entraToken: undefined,\n        acsToken: { token: \"\", expiresOnTimestamp: 0 },\n      };\n    } else if (\n      this.result.acsToken.token === \"\" ||\n      token.token !== this.result.entraToken ||\n      tokenExpiresOn < currentDateTime\n    ) {\n      const acsToken = await this.exchangeEntraToken(\n        this.options.resourceEndpoint,\n        token.token,\n        getTokenOptions,\n      );\n      this.result = {\n        entraToken: token.token,\n        acsToken,\n      };\n    }\n\n    return this.result.acsToken;\n  }\n\n  public dispose(): void {\n    this.result = {\n      entraToken: undefined,\n      acsToken: { token: \"\", expiresOnTimestamp: 0 },\n    };\n  }\n\n  private async exchangeEntraToken(\n    resourceEndpoint: string,\n    entraToken: string,\n    options?: { abortSignal: AbortSignalLike },\n  ): Promise<AccessToken> {\n    const request = createPipelineRequest({\n      url: this.createRequestUri(resourceEndpoint),\n      method: \"POST\",\n      headers: createHttpHeaders({\n        Authorization: `Bearer ${entraToken}`,\n        \"Content-Type\": \"application/json\",\n        Accept: \"application/json\",\n      }),\n      abortSignal: options?.abortSignal,\n      body: JSON.stringify({}),\n    });\n    const response = await this.client.pipeline.sendRequest(this.httpClient, request);\n\n    if (response.status !== 200 || !response.bodyAsText) {\n      throw new Error(\n        `Service request failed. Status: ${response.status}, Body: ${response.bodyAsText}`,\n      );\n    }\n    const json = JSON.parse(response.bodyAsText) as ExchangeTokenResponse;\n    return {\n      token: json.accessToken.token,\n      expiresOnTimestamp: Date.parse(json.accessToken.expiresOn),\n    };\n  }\n\n  private createRequestUri(resourceEndpoint: string): string {\n    const [endpoint, apiVersion] = this.determineEndpointAndApiVersion();\n    const requestUri = `${resourceEndpoint}${endpoint}?api-version=${apiVersion}`;\n    return requestUri;\n  }\n\n  private determineEndpointAndApiVersion(): [string, string] {\n    if (!this.options.scopes || this.options.scopes.length === 0) {\n      throw new Error(\n        `Scopes validation failed. Ensure all scopes start with either {TeamsExtensionScopePrefix} or {CommunicationClientsScopePrefix}.`,\n      );\n    } else if (this.options.scopes.every((scope) => scope.startsWith(TeamsExtensionScopePrefix))) {\n      return [TeamsExtensionEndpoint, TeamsExtensionApiVersion];\n    } else if (\n      this.options.scopes.every((scope) => scope.startsWith(CommunicationClientsScopePrefix))\n    ) {\n      return [CommunicationClientsEndpoint, CommunicationClientsApiVersion];\n    } else {\n      throw new Error(\n        `Scopes validation failed. Ensure all scopes start with either {TeamsExtensionScopePrefix} or {CommunicationClientsScopePrefix}.`,\n      );\n    }\n  }\n}\n"]}
+{
+  "version": 3,
+  "sources": ["../../src/entraTokenCredential.ts"],
+  "sourcesContent": ["// Copyright (c) Microsoft Corporation.\n// Licensed under the MIT License.\n\nimport { type AccessToken, type TokenCredential } from \"@azure/core-auth\";\nimport {\n  type TokenCredential as AcsTokenCredential,\n  type CommunicationGetTokenOptions,\n} from \"./communicationTokenCredential.js\";\nimport { type AbortSignalLike } from \"@azure/abort-controller\";\nimport { type Client, getClient } from \"@azure-rest/core-client\";\nimport {\n  type HttpClient,\n  createDefaultHttpClient,\n  createHttpHeaders,\n  createPipelineRequest,\n} from \"@azure/core-rest-pipeline\";\n\nconst TeamsExtensionScopePrefixes = [\n  \"https://auth.msft.communication.azure.com/\",\n  \"https://auth.msft.communication.azure.us/\",\n];\nconst CommunicationClientsScopePrefix = \"https://communication.azure.com/clients/\";\nconst ScopeValidationErrorMessage = `Scopes validation failed. Ensure all scopes start with one of ${[\n  ...TeamsExtensionScopePrefixes,\n  CommunicationClientsScopePrefix,\n].join(\", \")}.`;\nconst TeamsExtensionEndpoint = \"/access/teamsExtension/:exchangeAccessToken\";\nconst TeamsExtensionApiVersion = \"2025-06-30\";\nconst CommunicationClientsEndpoint = \"/access/entra/:exchangeAccessToken\";\nconst CommunicationClientsApiVersion = \"2025-03-02-preview\";\n\nexport interface ExchangeTokenResponse {\n  identity: string;\n  accessToken: {\n    token: string;\n    expiresOn: string;\n  };\n}\n\n/**\n * The Entra Communication Token Options.\n */\nexport interface EntraCommunicationTokenCredentialOptions {\n  /**\n   * The Azure Communication Service resource endpoint URL, e.g. https://myResource.communication.azure.com.\n   */\n  resourceEndpoint: string;\n  /**\n   * The Entra ID token credential.\n   */\n  tokenCredential: TokenCredential;\n  /**\n   * The scopes for retrieving the Entra ID access token.\n   */\n  scopes?: string[];\n}\n\n/**\n * Represents a credential that exchanges an Entra token for an Azure Communication Services (ACS) token, enabling access to ACS resources.\n */\nexport class EntraTokenCredential implements AcsTokenCredential {\n  private isPending: Promise<AccessToken> | null;\n  private result = {\n    entraToken: undefined as string | undefined,\n    acsToken: { token: \"\", expiresOnTimestamp: 0 },\n  };\n  private client: Client;\n  private httpClient: HttpClient;\n\n  constructor(private options: EntraCommunicationTokenCredentialOptions) {\n    this.client = getClient(options.resourceEndpoint);\n    this.httpClient = createDefaultHttpClient();\n    this.options = options;\n    this.options.scopes = this.options.scopes || [\n      \"https://communication.azure.com/clients/.default\",\n    ];\n\n    // immediately fetch the token to pre-warm\n    this.isPending = this.getToken();\n  }\n\n  public async getToken(options?: CommunicationGetTokenOptions): Promise<AccessToken> {\n    if (options?.abortSignal?.aborted) {\n      return { token: \"\", expiresOnTimestamp: 0 };\n    }\n\n    // we're awaiting the token fetch, so we don't want to start another one\n    // however, we're ignoring the new abortSignal, unfortunately\n    if (!this.isPending) {\n      this.isPending = this.getTokenInternal(options);\n    }\n\n    try {\n      await this.isPending;\n    } finally {\n      this.isPending = null;\n    }\n\n    return this.result.acsToken;\n  }\n\n  private async getTokenInternal(options?: CommunicationGetTokenOptions): Promise<AccessToken> {\n    const getTokenOptions = options?.abortSignal ? { abortSignal: options.abortSignal } : undefined;\n    const token = await this.options.tokenCredential.getToken(\n      this.options.scopes\n        ? this.options.scopes\n        : [\"https://communication.azure.com/clients/.default\"],\n      getTokenOptions,\n    );\n    const currentDateTime = new Date();\n    const tokenExpiresOn = new Date(this.result.acsToken.expiresOnTimestamp);\n\n    if (token === null) {\n      this.result = {\n        entraToken: undefined,\n        acsToken: { token: \"\", expiresOnTimestamp: 0 },\n      };\n    } else if (\n      this.result.acsToken.token === \"\" ||\n      token.token !== this.result.entraToken ||\n      tokenExpiresOn < currentDateTime\n    ) {\n      const acsToken = await this.exchangeEntraToken(\n        this.options.resourceEndpoint,\n        token.token,\n        getTokenOptions,\n      );\n      this.result = {\n        entraToken: token.token,\n        acsToken,\n      };\n    }\n\n    return this.result.acsToken;\n  }\n\n  public dispose(): void {\n    this.result = {\n      entraToken: undefined,\n      acsToken: { token: \"\", expiresOnTimestamp: 0 },\n    };\n  }\n\n  private async exchangeEntraToken(\n    resourceEndpoint: string,\n    entraToken: string,\n    options?: { abortSignal: AbortSignalLike },\n  ): Promise<AccessToken> {\n    const request = createPipelineRequest({\n      url: this.createRequestUri(resourceEndpoint),\n      method: \"POST\",\n      headers: createHttpHeaders({\n        Authorization: `Bearer ${entraToken}`,\n        \"Content-Type\": \"application/json\",\n        Accept: \"application/json\",\n      }),\n      abortSignal: options?.abortSignal,\n      body: JSON.stringify({}),\n    });\n    const response = await this.client.pipeline.sendRequest(this.httpClient, request);\n\n    if (response.status !== 200 || !response.bodyAsText) {\n      throw new Error(\n        `Service request failed. Status: ${response.status}, Body: ${response.bodyAsText}`,\n      );\n    }\n    const json = JSON.parse(response.bodyAsText) as ExchangeTokenResponse;\n    return {\n      token: json.accessToken.token,\n      expiresOnTimestamp: Date.parse(json.accessToken.expiresOn),\n    };\n  }\n\n  private createRequestUri(resourceEndpoint: string): string {\n    const [endpoint, apiVersion] = this.determineEndpointAndApiVersion();\n    const requestUri = `${resourceEndpoint}${endpoint}?api-version=${apiVersion}`;\n    return requestUri;\n  }\n\n  private determineEndpointAndApiVersion(): [string, string] {\n    if (!this.options.scopes || this.options.scopes.length === 0) {\n      throw new Error(ScopeValidationErrorMessage);\n    }\n\n    if (\n      this.options.scopes.every((scope) =>\n        TeamsExtensionScopePrefixes.some((prefix) => scope.startsWith(prefix)),\n      )\n    ) {\n      return [TeamsExtensionEndpoint, TeamsExtensionApiVersion];\n    }\n\n    if (this.options.scopes.every((scope) => scope.startsWith(CommunicationClientsScopePrefix))) {\n      return [CommunicationClientsEndpoint, CommunicationClientsApiVersion];\n    }\n\n    throw new Error(ScopeValidationErrorMessage);\n  }\n}\n"],
+  "mappings": ";;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AASA,yBAAuC;AACvC,gCAKO;AAEP,MAAM,8BAA8B;AAAA,EAClC;AAAA,EACA;AACF;AACA,MAAM,kCAAkC;AACxC,MAAM,8BAA8B,iEAAiE;AAAA,EACnG,GAAG;AAAA,EACH;AACF,EAAE,KAAK,IAAI,CAAC;AACZ,MAAM,yBAAyB;AAC/B,MAAM,2BAA2B;AACjC,MAAM,+BAA+B;AACrC,MAAM,iCAAiC;AA+BhC,MAAM,qBAAmD;AAAA,EAS9D,YAAoB,SAAmD;AAAnD;AAClB,SAAK,aAAS,8BAAU,QAAQ,gBAAgB;AAChD,SAAK,iBAAa,mDAAwB;AAC1C,SAAK,UAAU;AACf,SAAK,QAAQ,SAAS,KAAK,QAAQ,UAAU;AAAA,MAC3C;AAAA,IACF;AAGA,SAAK,YAAY,KAAK,SAAS;AAAA,EACjC;AAAA,EAVoB;AAAA,EARZ;AAAA,EACA,SAAS;AAAA,IACf,YAAY;AAAA,IACZ,UAAU,EAAE,OAAO,IAAI,oBAAoB,EAAE;AAAA,EAC/C;AAAA,EACQ;AAAA,EACA;AAAA,EAcR,MAAa,SAAS,SAA8D;AAClF,QAAI,SAAS,aAAa,SAAS;AACjC,aAAO,EAAE,OAAO,IAAI,oBAAoB,EAAE;AAAA,IAC5C;AAIA,QAAI,CAAC,KAAK,WAAW;AACnB,WAAK,YAAY,KAAK,iBAAiB,OAAO;AAAA,IAChD;AAEA,QAAI;AACF,YAAM,KAAK;AAAA,IACb,UAAE;AACA,WAAK,YAAY;AAAA,IACnB;AAEA,WAAO,KAAK,OAAO;AAAA,EACrB;AAAA,EAEA,MAAc,iBAAiB,SAA8D;AAC3F,UAAM,kBAAkB,SAAS,cAAc,EAAE,aAAa,QAAQ,YAAY,IAAI;AACtF,UAAM,QAAQ,MAAM,KAAK,QAAQ,gBAAgB;AAAA,MAC/C,KAAK,QAAQ,SACT,KAAK,QAAQ,SACb,CAAC,kDAAkD;AAAA,MACvD;AAAA,IACF;AACA,UAAM,kBAAkB,oBAAI,KAAK;AACjC,UAAM,iBAAiB,IAAI,KAAK,KAAK,OAAO,SAAS,kBAAkB;AAEvE,QAAI,UAAU,MAAM;AAClB,WAAK,SAAS;AAAA,QACZ,YAAY;AAAA,QACZ,UAAU,EAAE,OAAO,IAAI,oBAAoB,EAAE;AAAA,MAC/C;AAAA,IACF,WACE,KAAK,OAAO,SAAS,UAAU,MAC/B,MAAM,UAAU,KAAK,OAAO,cAC5B,iBAAiB,iBACjB;AACA,YAAM,WAAW,MAAM,KAAK;AAAA,QAC1B,KAAK,QAAQ;AAAA,QACb,MAAM;AAAA,QACN;AAAA,MACF;AACA,WAAK,SAAS;AAAA,QACZ,YAAY,MAAM;AAAA,QAClB;AAAA,MACF;AAAA,IACF;AAEA,WAAO,KAAK,OAAO;AAAA,EACrB;AAAA,EAEO,UAAgB;AACrB,SAAK,SAAS;AAAA,MACZ,YAAY;AAAA,MACZ,UAAU,EAAE,OAAO,IAAI,oBAAoB,EAAE;AAAA,IAC/C;AAAA,EACF;AAAA,EAEA,MAAc,mBACZ,kBACA,YACA,SACsB;AACtB,UAAM,cAAU,iDAAsB;AAAA,MACpC,KAAK,KAAK,iBAAiB,gBAAgB;AAAA,MAC3C,QAAQ;AAAA,MACR,aAAS,6CAAkB;AAAA,QACzB,eAAe,UAAU,UAAU;AAAA,QACnC,gBAAgB;AAAA,QAChB,QAAQ;AAAA,MACV,CAAC;AAAA,MACD,aAAa,SAAS;AAAA,MACtB,MAAM,KAAK,UAAU,CAAC,CAAC;AAAA,IACzB,CAAC;AACD,UAAM,WAAW,MAAM,KAAK,OAAO,SAAS,YAAY,KAAK,YAAY,OAAO;AAEhF,QAAI,SAAS,WAAW,OAAO,CAAC,SAAS,YAAY;AACnD,YAAM,IAAI;AAAA,QACR,mCAAmC,SAAS,MAAM,WAAW,SAAS,UAAU;AAAA,MAClF;AAAA,IACF;AACA,UAAM,OAAO,KAAK,MAAM,SAAS,UAAU;AAC3C,WAAO;AAAA,MACL,OAAO,KAAK,YAAY;AAAA,MACxB,oBAAoB,KAAK,MAAM,KAAK,YAAY,SAAS;AAAA,IAC3D;AAAA,EACF;AAAA,EAEQ,iBAAiB,kBAAkC;AACzD,UAAM,CAAC,UAAU,UAAU,IAAI,KAAK,+BAA+B;AACnE,UAAM,aAAa,GAAG,gBAAgB,GAAG,QAAQ,gBAAgB,UAAU;AAC3E,WAAO;AAAA,EACT;AAAA,EAEQ,iCAAmD;AACzD,QAAI,CAAC,KAAK,QAAQ,UAAU,KAAK,QAAQ,OAAO,WAAW,GAAG;AAC5D,YAAM,IAAI,MAAM,2BAA2B;AAAA,IAC7C;AAEA,QACE,KAAK,QAAQ,OAAO;AAAA,MAAM,CAAC,UACzB,4BAA4B,KAAK,CAAC,WAAW,MAAM,WAAW,MAAM,CAAC;AAAA,IACvE,GACA;AACA,aAAO,CAAC,wBAAwB,wBAAwB;AAAA,IAC1D;AAEA,QAAI,KAAK,QAAQ,OAAO,MAAM,CAAC,UAAU,MAAM,WAAW,+BAA+B,CAAC,GAAG;AAC3F,aAAO,CAAC,8BAA8B,8BAA8B;AAAA,IACtE;AAEA,UAAM,IAAI,MAAM,2BAA2B;AAAA,EAC7C;AACF;",
+  "names": []
+}