@azure/identity 1.0.0-preview.1 → 1.0.0-preview.2

package/dist-esm/src/credentials/managedIdentityCredential.js

@@ -1,7 +1,13 @@
 // Copyright (c) Microsoft Corporation.
 // Licensed under the MIT License.
 import * as tslib_1 from "tslib";
+import qs from "qs";
+import { RestError } from "@azure/core-http";
 import { IdentityClient } from "../client/identityClient";
+const DefaultScopeSuffix = "/.default";
+export const ImdsEndpoint = "http://169.254.169.254/metadata/identity/oauth2/token";
+export const ImdsApiVersion = "2018-02-01";
+export const AppServiceMsiApiVersion = "2017-09-01";
 /**
  * Attempts authentication using a managed identity that has been assigned
  * to the deployment environment.  This authentication type works in Azure VMs,
@@ -15,7 +21,143 @@ export class ManagedIdentityCredential {
     constructor(clientId, options) {
         this.isEndpointUnavailable = null;
         this.identityClient = new IdentityClient(options);
-        this._clientId = clientId;
+        this.clientId = clientId;
+    }
+    mapScopesToResource(scopes) {
+        let scope = "";
+        if (Array.isArray(scopes)) {
+            if (scopes.length !== 1) {
+                throw "To convert to a resource string the specified array must be exactly length 1";
+            }
+            scope = scopes[0];
+        }
+        else if (typeof scopes === "string") {
+            scope = scopes;
+        }
+        if (!scope.endsWith(DefaultScopeSuffix)) {
+            return scope;
+        }
+        return scope.substr(0, scope.lastIndexOf(DefaultScopeSuffix));
+    }
+    createImdsAuthRequest(resource, clientId) {
+        const queryParameters = {
+            resource,
+            "api-version": ImdsApiVersion
+        };
+        if (clientId) {
+            queryParameters.client_id = clientId;
+        }
+        return {
+            url: ImdsEndpoint,
+            method: "GET",
+            queryParameters,
+            headers: {
+                Accept: "application/json",
+                Metadata: true
+            }
+        };
+    }
+    createAppServiceMsiAuthRequest(resource, clientId) {
+        const queryParameters = {
+            resource,
+            "api-version": AppServiceMsiApiVersion,
+        };
+        if (clientId) {
+            queryParameters.client_id = clientId;
+        }
+        return {
+            url: process.env.MSI_ENDPOINT,
+            method: "GET",
+            queryParameters,
+            headers: {
+                Accept: "application/json",
+                secret: process.env.MSI_SECRET
+            }
+        };
+    }
+    createCloudShellMsiAuthRequest(resource, clientId) {
+        const body = {
+            resource
+        };
+        if (clientId) {
+            body.client_id = clientId;
+        }
+        return {
+            url: process.env.MSI_ENDPOINT,
+            method: "POST",
+            body: qs.stringify(body),
+            headers: {
+                Accept: "application/json",
+                Metadata: true,
+                "Content-Type": "application/x-www-form-urlencoded"
+            }
+        };
+    }
+    pingImdsEndpoint(resource, clientId) {
+        return tslib_1.__awaiter(this, void 0, void 0, function* () {
+            const request = this.createImdsAuthRequest(resource, clientId);
+            // This will always be populated, but let's make TypeScript happy
+            if (request.headers) {
+                // Remove the Metadata header to invoke a request error from
+                // IMDS endpoint
+                delete request.headers.Metadata;
+            }
+            // Create a request with a 500 msec timeout since we expect that
+            // not having a "Metadata" header should cause an error to be
+            // returned quickly from the endpoint, proving its availability.
+            const webResource = this.identityClient.createWebResource(request);
+            webResource.timeout = 500;
+            try {
+                yield this.identityClient.sendRequest(webResource);
+            }
+            catch (err) {
+                if (err instanceof RestError && err.code === RestError.REQUEST_SEND_ERROR) {
+                    // Either request failed or IMDS endpoint isn't available
+                    return false;
+                }
+            }
+            // If we received any response, the endpoint is available
+            return true;
+        });
+    }
+    authenticateManagedIdentity(scopes, checkIfImdsEndpointAvailable, clientId, getTokenOptions) {
+        return tslib_1.__awaiter(this, void 0, void 0, function* () {
+            let authRequestOptions;
+            const resource = this.mapScopesToResource(scopes);
+            let expiresInParser;
+            // Detect which type of environment we are running in
+            if (process.env.MSI_ENDPOINT) {
+                if (process.env.MSI_SECRET) {
+                    // Running in App Service
+                    authRequestOptions = this.createAppServiceMsiAuthRequest(resource, clientId);
+                    expiresInParser = (requestBody) => {
+                        // Parse a date format like "06/20/2019 02:57:58 +00:00" and
+                        // convert it into a JavaScript-formatted date
+                        const m = requestBody.expires_on.match(/(\d\d)\/(\d\d)\/(\d\d\d\d) (\d\d):(\d\d):(\d\d) (\+|-)(\d\d):(\d\d)/);
+                        return Date.parse(`${m[3]}-${m[1]}-${m[2]}T${m[4]}:${m[5]}:${m[6]}${m[7]}${m[8]}:${m[9]}`);
+                    };
+                }
+                else {
+                    // Running in Cloud Shell
+                    authRequestOptions = this.createCloudShellMsiAuthRequest(resource, clientId);
+                }
+            }
+            else {
+                // Ping the IMDS endpoint to see if it's available
+                if (!checkIfImdsEndpointAvailable || (yield this.pingImdsEndpoint(resource, clientId))) {
+                    // Running in an Azure VM
+                    authRequestOptions = this.createImdsAuthRequest(resource, clientId);
+                }
+                else {
+                    // Returning null tells the ManagedIdentityCredential that
+                    // no MSI authentication endpoints are available
+                    return null;
+                }
+            }
+            const webResource = this.identityClient.createWebResource(Object.assign({ disableJsonStringifyOnBody: true, deserializationMapper: undefined, abortSignal: getTokenOptions && getTokenOptions.abortSignal }, authRequestOptions));
+            const tokenResponse = yield this.identityClient.sendTokenRequest(webResource, expiresInParser);
+            return (tokenResponse && tokenResponse.accessToken) || null;
+        });
     }
     /**
      * Authenticates with Azure Active Directory and returns an {@link AccessToken} if
@@ -35,7 +177,7 @@ export class ManagedIdentityCredential {
             // the endpoint is available and need to check for it.
             if (this.isEndpointUnavailable !== true) {
                 result =
-                    yield this.identityClient.authenticateManagedIdentity(scopes, this.isEndpointUnavailable === null, this._clientId, options);
+                    yield this.authenticateManagedIdentity(scopes, this.isEndpointUnavailable === null, this.clientId, options);
                 // If authenticateManagedIdentity returns null, it means no MSI
                 // endpoints are available.  In this case, don't try them in future
                 // requests.

package/dist-esm/src/credentials/managedIdentityCredential.js.map

@@ -1 +1 @@
-{"version":3,"file":"managedIdentityCredential.js","sourceRoot":"","sources":["../../../src/credentials/managedIdentityCredential.ts"],"names":[],"mappings":"AAAA,uCAAuC;AACvC,kCAAkC;;AAGlC,OAAO,EAAyB,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAEjF;;;;;;;;GAQG;AACH,MAAM,OAAO,yBAAyB;IAKpC,YAAY,QAAiB,EAAE,OAA+B;QAFtD,0BAAqB,GAAmB,IAAI,CAAC;QAGnD,IAAI,CAAC,cAAc,GAAG,IAAI,cAAc,CAAC,OAAO,CAAC,CAAC;QAClD,IAAI,CAAC,SAAS,GAAG,QAAQ,CAAC;IAC5B,CAAC;IAED;;;;;;;;;OASG;IACU,QAAQ,CACnB,MAAyB,EACzB,OAAyB;;YAEzB,IAAI,MAAM,GAAuB,IAAI,CAAC;YAEtC,mDAAmD;YACnD,uDAAuD;YACvD,sDAAsD;YACtD,IAAI,IAAI,CAAC,qBAAqB,KAAK,IAAI,EAAE;gBACvC,MAAM;oBACJ,MAAM,IAAI,CAAC,cAAc,CAAC,2BAA2B,CACnD,MAAM,EACN,IAAI,CAAC,qBAAqB,KAAK,IAAI,EACnC,IAAI,CAAC,SAAS,EACd,OAAO,CAAC,CAAC;gBAEb,+DAA+D;gBAC/D,mEAAmE;gBACnE,YAAY;gBACZ,IAAI,CAAC,qBAAqB,GAAG,MAAM,KAAK,IAAI,CAAC;aAC9C;YAED,OAAO,MAAM,CAAC;QAChB,CAAC;KAAA;CACF"}
+{"version":3,"file":"managedIdentityCredential.js","sourceRoot":"","sources":["../../../src/credentials/managedIdentityCredential.ts"],"names":[],"mappings":"AAAA,uCAAuC;AACvC,kCAAkC;;AAElC,OAAO,EAAE,MAAM,IAAI,CAAC;AACpB,OAAO,EAIL,SAAS,EAEV,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAyB,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAEjF,MAAM,kBAAkB,GAAG,WAAW,CAAC;AACvC,MAAM,CAAC,MAAM,YAAY,GAAG,uDAAuD,CAAC;AACpF,MAAM,CAAC,MAAM,cAAc,GAAG,YAAY,CAAC;AAC3C,MAAM,CAAC,MAAM,uBAAuB,GAAG,YAAY,CAAC;AAEpD;;;;;;;;GAQG;AACH,MAAM,OAAO,yBAAyB;IAKpC,YAAY,QAAiB,EAAE,OAA+B;QAFtD,0BAAqB,GAAmB,IAAI,CAAC;QAGnD,IAAI,CAAC,cAAc,GAAG,IAAI,cAAc,CAAC,OAAO,CAAC,CAAC;QAClD,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;IAC3B,CAAC;IAEO,mBAAmB,CAAC,MAAyB;QACnD,IAAI,KAAK,GAAG,EAAE,CAAC;QACf,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE;YACzB,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE;gBACvB,MAAM,8EAA8E,CAAC;aACtF;YAED,KAAK,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;SACnB;aAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE;YACrC,KAAK,GAAG,MAAM,CAAC;SAChB;QAED,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,kBAAkB,CAAC,EAAE;YACvC,OAAO,KAAK,CAAC;SACd;QAED,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC,EAAE,KAAK,CAAC,WAAW,CAAC,kBAAkB,CAAC,CAAC,CAAC;IAChE,CAAC;IAEO,qBAAqB,CAAC,QAAgB,EAAE,QAAiB;QAC/D,MAAM,eAAe,GAAQ;YAC3B,QAAQ;YACR,aAAa,EAAE,cAAc;SAC9B,CAAC;QAEF,IAAI,QAAQ,EAAE;YACZ,eAAe,CAAC,SAAS,GAAG,QAAQ,CAAC;SACtC;QAED,OAAO;YACL,GAAG,EAAE,YAAY;YACjB,MAAM,EAAE,KAAK;YACb,eAAe;YACf,OAAO,EAAE;gBACP,MAAM,EAAE,kBAAkB;gBAC1B,QAAQ,EAAE,IAAI;aACf;SACF,CAAC;IACJ,CAAC;IAEO,8BAA8B,CAAC,QAAgB,EAAE,QAAiB;QACxE,MAAM,eAAe,GAAQ;YAC3B,QAAQ;YACR,aAAa,EAAE,uBAAuB;SACvC,CAAC;QAEF,IAAI,QAAQ,EAAE;YACZ,eAAe,CAAC,SAAS,GAAG,QAAQ,CAAC;SACtC;QAED,OAAO;YACL,GAAG,EAAE,OAAO,CAAC,GAAG,CAAC,YAAY;YAC7B,MAAM,EAAE,KAAK;YACb,eAAe;YACf,OAAO,EAAE;gBACP,MAAM,EAAE,kBAAkB;gBAC1B,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,UAAU;aAC/B;SACF,CAAC;IACJ,CAAC;IAEO,8BAA8B,CAAC,QAAgB,EAAE,QAAiB;QACxE,MAAM,IAAI,GAAQ;YAChB,QAAQ;SACT,CAAC;QAEF,IAAI,QAAQ,EAAE;YACZ,IAAI,CAAC,SAAS,GAAG,QAAQ,CAAC;SAC3B;QAED,OAAO;YACL,GAAG,EAAE,OAAO,CAAC,GAAG,CAAC,YAAY;YAC7B,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC;YACxB,OAAO,EAAE;gBACP,MAAM,EAAE,kBAAkB;gBAC1B,QAAQ,EAAE,IAAI;gBACd,cAAc,EAAE,mCAAmC;aACpD;SACF,CAAC;IACJ,CAAC;IAEa,gBAAgB,CAAC,QAAgB,EAAE,QAAiB;;YAChE,MAAM,OAAO,GAAG,IAAI,CAAC,qBAAqB,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;YAE/D,iEAAiE;YACjE,IAAI,OAAO,CAAC,OAAO,EAAE;gBACnB,4DAA4D;gBAC5D,gBAAgB;gBAChB,OAAO,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC;aACjC;YAED,gEAAgE;YAChE,6DAA6D;YAC7D,gEAAgE;YAChE,MAAM,WAAW,GAAG,IAAI,CAAC,cAAc,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC;YACnE,WAAW,CAAC,OAAO,GAAG,GAAG,CAAC;YAE1B,IAAI;gBACF,MAAM,IAAI,CAAC,cAAc,CAAC,WAAW,CAAC,WAAW,CAAC,CAAC;aACpD;YAAC,OAAO,GAAG,EAAE;gBACZ,IAAI,GAAG,YAAY,SAAS,IAAI,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,kBAAkB,EAAE;oBACzE,yDAAyD;oBACzD,OAAO,KAAK,CAAC;iBACd;aACF;YAED,yDAAyD;YACzD,OAAO,IAAI,CAAC;QACd,CAAC;KAAA;IAEa,2BAA2B,CACvC,MAAyB,EACzB,4BAAqC,EACrC,QAAiB,EACjB,eAAiC;;YAEjC,IAAI,kBAAyC,CAAC;YAC9C,MAAM,QAAQ,GAAG,IAAI,CAAC,mBAAmB,CAAC,MAAM,CAAC,CAAC;YAClD,IAAI,eAA2D,CAAC;YAEhE,qDAAqD;YACrD,IAAI,OAAO,CAAC,GAAG,CAAC,YAAY,EAAE;gBAC5B,IAAI,OAAO,CAAC,GAAG,CAAC,UAAU,EAAE;oBAC1B,yBAAyB;oBACzB,kBAAkB,GAAG,IAAI,CAAC,8BAA8B,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;oBAC7E,eAAe,GAAG,CAAC,WAAgB,EAAE,EAAE;wBACrC,4DAA4D;wBAC5D,8CAA8C;wBAC9C,MAAM,CAAC,GAAG,WAAW,CAAC,UAAU,CAAC,KAAK,CAAC,qEAAqE,CAAC,CAAA;wBAC7G,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAA;oBAC5F,CAAC,CAAC;iBACH;qBAAM;oBACL,yBAAyB;oBACzB,kBAAkB,GAAG,IAAI,CAAC,8BAA8B,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;iBAC9E;aACF;iBAAM;gBACL,kDAAkD;gBAClD,IAAI,CAAC,4BAA4B,KAAI,MAAM,IAAI,CAAC,gBAAgB,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAA,EAAE;oBACpF,yBAAyB;oBACzB,kBAAkB,GAAG,IAAI,CAAC,qBAAqB,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;iBACrE;qBAAM;oBACL,0DAA0D;oBAC1D,gDAAgD;oBAChD,OAAO,IAAI,CAAC;iBACb;aACF;YAED,MAAM,WAAW,GAAG,IAAI,CAAC,cAAc,CAAC,iBAAiB,iBACvD,0BAA0B,EAAE,IAAI,EAChC,qBAAqB,EAAE,SAAS,EAChC,WAAW,EAAE,eAAe,IAAI,eAAe,CAAC,WAAW,IACxD,kBAAkB,EACrB,CAAC;YAEH,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,gBAAgB,CAAC,WAAW,EAAE,eAAe,CAAC,CAAC;YAC/F,OAAO,CAAC,aAAa,IAAI,aAAa,CAAC,WAAW,CAAC,IAAI,IAAI,CAAC;QAC9D,CAAC;KAAA;IAED;;;;;;;;;OASG;IACU,QAAQ,CACnB,MAAyB,EACzB,OAAyB;;YAEzB,IAAI,MAAM,GAAuB,IAAI,CAAC;YAEtC,mDAAmD;YACnD,uDAAuD;YACvD,sDAAsD;YACtD,IAAI,IAAI,CAAC,qBAAqB,KAAK,IAAI,EAAE;gBACvC,MAAM;oBACJ,MAAM,IAAI,CAAC,2BAA2B,CACpC,MAAM,EACN,IAAI,CAAC,qBAAqB,KAAK,IAAI,EACnC,IAAI,CAAC,QAAQ,EACb,OAAO,CAAC,CAAC;gBAEb,+DAA+D;gBAC/D,mEAAmE;gBACnE,YAAY;gBACZ,IAAI,CAAC,qBAAqB,GAAG,MAAM,KAAK,IAAI,CAAC;aAC9C;YAED,OAAO,MAAM,CAAC;QAChB,CAAC;KAAA;CACF"}

package/dist-esm/src/credentials/usernamePasswordCredential.d.ts

@@ -0,0 +1,39 @@
+import { TokenCredential, GetTokenOptions, AccessToken } from "@azure/core-http";
+import { IdentityClientOptions } from "../client/identityClient";
+/**
+ * Enables authentication to Azure Active Directory with a user's
+ * username and password. This credential requires a high degree of
+ * trust so you should only use it when other, more secure credential
+ * types can't be used.
+ */
+export declare class UsernamePasswordCredential implements TokenCredential {
+    private identityClient;
+    private tenantId;
+    private clientId;
+    private username;
+    private password;
+    /**
+     * Creates an instance of the UsernamePasswordCredential with the details
+     * needed to authenticate against Azure Active Directory with a username
+     * and password.
+     *
+     * @param tenantIdOrName The Azure Active Directory tenant (directory) ID or name.
+     * @param clientId The client (application) ID of an App Registration in the tenant.
+     * @param username The user account's e-mail address (user name).
+     * @param password The user account's account password
+     * @param options Options for configuring the client which makes the authentication request.
+     */
+    constructor(tenantIdOrName: string, clientId: string, username: string, password: string, options?: IdentityClientOptions);
+    /**
+     * Authenticates with Azure Active Directory and returns an {@link AccessToken} if
+     * successful.  If authentication cannot be performed at this time, this method may
+     * return null.  If an error occurs during authentication, an {@link AuthenticationError}
+     * containing failure details will be thrown.
+     *
+     * @param scopes The list of scopes for which the token will have access.
+     * @param options The options used to configure any requests this
+     *                TokenCredential implementation might make.
+     */
+    getToken(scopes: string | string[], options?: GetTokenOptions): Promise<AccessToken | null>;
+}
+//# sourceMappingURL=usernamePasswordCredential.d.ts.map

package/dist-esm/src/credentials/usernamePasswordCredential.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"usernamePasswordCredential.d.ts","sourceRoot":"","sources":["../../../src/credentials/usernamePasswordCredential.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,eAAe,EAAE,eAAe,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AACjF,OAAO,EAAE,qBAAqB,EAAkB,MAAM,0BAA0B,CAAC;AAEjF;;;;;GAKG;AACH,qBAAa,0BAA2B,YAAW,eAAe;IAChE,OAAO,CAAC,cAAc,CAAiB;IACvC,OAAO,CAAC,QAAQ,CAAS;IACzB,OAAO,CAAC,QAAQ,CAAS;IACzB,OAAO,CAAC,QAAQ,CAAS;IACzB,OAAO,CAAC,QAAQ,CAAS;IAEzB;;;;;;;;;;OAUG;gBAED,cAAc,EAAE,MAAM,EACtB,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,MAAM,EAChB,OAAO,CAAC,EAAE,qBAAqB;IASjC;;;;;;;;;OASG;IACU,QAAQ,CACnB,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,EACzB,OAAO,CAAC,EAAE,eAAe,GACxB,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC;CAwB/B"}

package/dist-esm/src/credentials/usernamePasswordCredential.js

@@ -0,0 +1,67 @@
+// Copyright (c) Microsoft Corporation.
+// Licensed under the MIT License.
+import * as tslib_1 from "tslib";
+import qs from "qs";
+import { IdentityClient } from "../client/identityClient";
+/**
+ * Enables authentication to Azure Active Directory with a user's
+ * username and password. This credential requires a high degree of
+ * trust so you should only use it when other, more secure credential
+ * types can't be used.
+ */
+export class UsernamePasswordCredential {
+    /**
+     * Creates an instance of the UsernamePasswordCredential with the details
+     * needed to authenticate against Azure Active Directory with a username
+     * and password.
+     *
+     * @param tenantIdOrName The Azure Active Directory tenant (directory) ID or name.
+     * @param clientId The client (application) ID of an App Registration in the tenant.
+     * @param username The user account's e-mail address (user name).
+     * @param password The user account's account password
+     * @param options Options for configuring the client which makes the authentication request.
+     */
+    constructor(tenantIdOrName, clientId, username, password, options) {
+        this.identityClient = new IdentityClient(options);
+        this.tenantId = tenantIdOrName;
+        this.clientId = clientId;
+        this.username = username;
+        this.password = password;
+    }
+    /**
+     * Authenticates with Azure Active Directory and returns an {@link AccessToken} if
+     * successful.  If authentication cannot be performed at this time, this method may
+     * return null.  If an error occurs during authentication, an {@link AuthenticationError}
+     * containing failure details will be thrown.
+     *
+     * @param scopes The list of scopes for which the token will have access.
+     * @param options The options used to configure any requests this
+     *                TokenCredential implementation might make.
+     */
+    getToken(scopes, options) {
+        return tslib_1.__awaiter(this, void 0, void 0, function* () {
+            const webResource = this.identityClient.createWebResource({
+                url: `${this.identityClient.authorityHost}/${this.tenantId}/oauth2/v2.0/token`,
+                method: "POST",
+                disableJsonStringifyOnBody: true,
+                deserializationMapper: undefined,
+                body: qs.stringify({
+                    response_type: "token",
+                    grant_type: "password",
+                    client_id: this.clientId,
+                    username: this.username,
+                    password: this.password,
+                    scope: typeof scopes === "string" ? scopes : scopes.join(" ")
+                }),
+                headers: {
+                    Accept: "application/json",
+                    "Content-Type": "application/x-www-form-urlencoded"
+                },
+                abortSignal: options && options.abortSignal
+            });
+            const tokenResponse = yield this.identityClient.sendTokenRequest(webResource);
+            return (tokenResponse && tokenResponse.accessToken) || null;
+        });
+    }
+}
+//# sourceMappingURL=usernamePasswordCredential.js.map

package/dist-esm/src/credentials/usernamePasswordCredential.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"usernamePasswordCredential.js","sourceRoot":"","sources":["../../../src/credentials/usernamePasswordCredential.ts"],"names":[],"mappings":"AAAA,uCAAuC;AACvC,kCAAkC;;AAElC,OAAO,EAAE,MAAM,IAAI,CAAC;AAEpB,OAAO,EAAyB,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAEjF;;;;;GAKG;AACH,MAAM,OAAO,0BAA0B;IAOrC;;;;;;;;;;OAUG;IACH,YACE,cAAsB,EACtB,QAAgB,EAChB,QAAgB,EAChB,QAAgB,EAChB,OAA+B;QAE/B,IAAI,CAAC,cAAc,GAAG,IAAI,cAAc,CAAC,OAAO,CAAC,CAAC;QAClD,IAAI,CAAC,QAAQ,GAAG,cAAc,CAAC;QAC/B,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACzB,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACzB,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;IAC3B,CAAC;IAED;;;;;;;;;OASG;IACU,QAAQ,CACnB,MAAyB,EACzB,OAAyB;;YAEzB,MAAM,WAAW,GAAG,IAAI,CAAC,cAAc,CAAC,iBAAiB,CAAC;gBACxD,GAAG,EAAE,GAAG,IAAI,CAAC,cAAc,CAAC,aAAa,IAAI,IAAI,CAAC,QAAQ,oBAAoB;gBAC9E,MAAM,EAAE,MAAM;gBACd,0BAA0B,EAAE,IAAI;gBAChC,qBAAqB,EAAE,SAAS;gBAChC,IAAI,EAAE,EAAE,CAAC,SAAS,CAAC;oBACjB,aAAa,EAAE,OAAO;oBACtB,UAAU,EAAE,UAAU;oBACtB,SAAS,EAAE,IAAI,CAAC,QAAQ;oBACxB,QAAQ,EAAE,IAAI,CAAC,QAAQ;oBACvB,QAAQ,EAAE,IAAI,CAAC,QAAQ;oBACvB,KAAK,EAAE,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC;iBAC9D,CAAC;gBACF,OAAO,EAAE;oBACP,MAAM,EAAE,kBAAkB;oBAC1B,cAAc,EAAE,mCAAmC;iBACpD;gBACD,WAAW,EAAE,OAAO,IAAI,OAAO,CAAC,WAAW;aAC5C,CAAC,CAAC;YAEH,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,gBAAgB,CAAC,WAAW,CAAC,CAAC;YAC9E,OAAO,CAAC,aAAa,IAAI,aAAa,CAAC,WAAW,CAAC,IAAI,IAAI,CAAC;QAC9D,CAAC;KAAA;CACF"}

package/dist-esm/src/index.d.ts

@@ -4,8 +4,12 @@ export { IdentityClientOptions } from "./client/identityClient";
 export { EnvironmentCredential } from "./credentials/environmentCredential";
 export { ClientSecretCredential } from "./credentials/clientSecretCredential";
 export { ClientCertificateCredential } from "./credentials/clientCertificateCredential";
+export { InteractiveBrowserCredential } from "./credentials/interactiveBrowserCredential";
+export { InteractiveBrowserCredentialOptions, BrowserLoginStyle } from "./credentials/interactiveBrowserCredentialOptions";
 export { ManagedIdentityCredential } from "./credentials/managedIdentityCredential";
+export { DeviceCodeCredential } from "./credentials/deviceCodeCredential";
 export { DefaultAzureCredential } from "./credentials/defaultAzureCredential";
+export { UsernamePasswordCredential } from "./credentials/usernamePasswordCredential";
 export { AuthenticationError, AggregateAuthenticationError } from "./client/errors";
 export { TokenCredential, GetTokenOptions, AccessToken } from "@azure/core-http";
 export declare function getDefaultAzureCredential(): TokenCredential;

package/dist-esm/src/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAGnD,OAAO,EAAE,sBAAsB,EAAE,MAAM,sCAAsC,CAAC;AAC9E,OAAO,EAAE,qBAAqB,EAAE,MAAM,yBAAyB,CAAC;AAChE,OAAO,EAAE,qBAAqB,EAAE,MAAM,qCAAqC,CAAC;AAC5E,OAAO,EAAE,sBAAsB,EAAE,MAAM,sCAAsC,CAAC;AAC9E,OAAO,EAAE,2BAA2B,EAAE,MAAM,2CAA2C,CAAC;AACxF,OAAO,EAAE,yBAAyB,EAAE,MAAM,yCAAyC,CAAC;AACpF,OAAO,EAAE,sBAAsB,EAAE,MAAM,sCAAsC,CAAC;AAC9E,OAAO,EAAE,mBAAmB,EAAE,4BAA4B,EAAE,MAAM,iBAAiB,CAAC;AAEpF,OAAO,EAAE,eAAe,EAAE,eAAe,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAEjF,wBAAgB,yBAAyB,IAAI,eAAe,CAE3D"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAGnD,OAAO,EAAE,sBAAsB,EAAE,MAAM,sCAAsC,CAAC;AAC9E,OAAO,EAAE,qBAAqB,EAAE,MAAM,yBAAyB,CAAC;AAChE,OAAO,EAAE,qBAAqB,EAAE,MAAM,qCAAqC,CAAC;AAC5E,OAAO,EAAE,sBAAsB,EAAE,MAAM,sCAAsC,CAAC;AAC9E,OAAO,EAAE,2BAA2B,EAAE,MAAM,2CAA2C,CAAC;AACxF,OAAO,EAAE,4BAA4B,EAAE,MAAM,4CAA4C,CAAC;AAC1F,OAAO,EAAE,mCAAmC,EAAE,iBAAiB,EAAE,MAAM,mDAAmD,CAAC;AAC3H,OAAO,EAAE,yBAAyB,EAAE,MAAM,yCAAyC,CAAC;AACpF,OAAO,EAAE,oBAAoB,EAAE,MAAM,oCAAoC,CAAC;AAC1E,OAAO,EAAE,sBAAsB,EAAE,MAAM,sCAAsC,CAAC;AAC9E,OAAO,EAAE,0BAA0B,EAAE,MAAM,0CAA0C,CAAC;AACtF,OAAO,EAAE,mBAAmB,EAAE,4BAA4B,EAAE,MAAM,iBAAiB,CAAC;AAEpF,OAAO,EAAE,eAAe,EAAE,eAAe,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAEjF,wBAAgB,yBAAyB,IAAI,eAAe,CAE3D"}

package/dist-esm/src/index.js

@@ -5,8 +5,11 @@ export { ChainedTokenCredential } from "./credentials/chainedTokenCredential";
 export { EnvironmentCredential } from "./credentials/environmentCredential";
 export { ClientSecretCredential } from "./credentials/clientSecretCredential";
 export { ClientCertificateCredential } from "./credentials/clientCertificateCredential";
+export { InteractiveBrowserCredential } from "./credentials/interactiveBrowserCredential";
 export { ManagedIdentityCredential } from "./credentials/managedIdentityCredential";
+export { DeviceCodeCredential } from "./credentials/deviceCodeCredential";
 export { DefaultAzureCredential } from "./credentials/defaultAzureCredential";
+export { UsernamePasswordCredential } from "./credentials/usernamePasswordCredential";
 export { AuthenticationError, AggregateAuthenticationError } from "./client/errors";
 export function getDefaultAzureCredential() {
     return new DefaultAzureCredential();

package/dist-esm/src/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA,uCAAuC;AACvC,kCAAkC;AAGlC,OAAO,EAAE,sBAAsB,EAAE,MAAM,sCAAsC,CAAC;AAE9E,OAAO,EAAE,sBAAsB,EAAE,MAAM,sCAAsC,CAAC;AAE9E,OAAO,EAAE,qBAAqB,EAAE,MAAM,qCAAqC,CAAC;AAC5E,OAAO,EAAE,sBAAsB,EAAE,MAAM,sCAAsC,CAAC;AAC9E,OAAO,EAAE,2BAA2B,EAAE,MAAM,2CAA2C,CAAC;AACxF,OAAO,EAAE,yBAAyB,EAAE,MAAM,yCAAyC,CAAC;AACpF,OAAO,EAAE,sBAAsB,EAAE,MAAM,sCAAsC,CAAC;AAC9E,OAAO,EAAE,mBAAmB,EAAE,4BAA4B,EAAE,MAAM,iBAAiB,CAAC;AAIpF,MAAM,UAAU,yBAAyB;IACvC,OAAO,IAAI,sBAAsB,EAAE,CAAC;AACtC,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA,uCAAuC;AACvC,kCAAkC;AAGlC,OAAO,EAAE,sBAAsB,EAAE,MAAM,sCAAsC,CAAC;AAE9E,OAAO,EAAE,sBAAsB,EAAE,MAAM,sCAAsC,CAAC;AAE9E,OAAO,EAAE,qBAAqB,EAAE,MAAM,qCAAqC,CAAC;AAC5E,OAAO,EAAE,sBAAsB,EAAE,MAAM,sCAAsC,CAAC;AAC9E,OAAO,EAAE,2BAA2B,EAAE,MAAM,2CAA2C,CAAC;AACxF,OAAO,EAAE,4BAA4B,EAAE,MAAM,4CAA4C,CAAC;AAE1F,OAAO,EAAE,yBAAyB,EAAE,MAAM,yCAAyC,CAAC;AACpF,OAAO,EAAE,oBAAoB,EAAE,MAAM,oCAAoC,CAAC;AAC1E,OAAO,EAAE,sBAAsB,EAAE,MAAM,sCAAsC,CAAC;AAC9E,OAAO,EAAE,0BAA0B,EAAE,MAAM,0CAA0C,CAAC;AACtF,OAAO,EAAE,mBAAmB,EAAE,4BAA4B,EAAE,MAAM,iBAAiB,CAAC;AAIpF,MAAM,UAAU,yBAAyB;IACvC,OAAO,IAAI,sBAAsB,EAAE,CAAC;AACtC,CAAC"}

package/package.json

@@ -1,13 +1,18 @@
 {
   "name": "@azure/identity",
   "sdk-type": "client",
-  "version": "1.0.0-preview.1",
+  "version": "1.0.0-preview.2",
   "description": "Provides credential implementations for Azure SDK libraries that can authenticate with Azure Active Directory",
   "main": "dist/index.js",
   "module": "dist-esm/src/index.js",
   "types": "dist-esm/src/index.d.ts",
   "browser": {
     "stream": "./node_modules/stream-browserify/index.js",
+    "./dist-esm/src/credentials/environmentCredential.js": "./dist-esm/src/credentials/environmentCredential.browser.js",
+    "./dist-esm/src/credentials/managedIdentityCredential.js": "./dist-esm/src/credentials/managedIdentityCredential.browser.js",
+    "./dist-esm/src/credentials/clientCertificateCredential.js": "./dist-esm/src/credentials/clientCertificateCredential.browser.js",
+    "./dist-esm/src/credentials/deviceCodeCredential.js": "./dist-esm/src/credentials/deviceCodeCredential.browser.js",
+    "./dist-esm/src/credentials/interactiveBrowserCredential.js": "./dist-esm/src/credentials/interactiveBrowserCredential.browser.js",
     "./dist/index.js": "./browser/index.js"
   },
   "scripts": {
@@ -17,10 +22,10 @@
     "build:samples": "cd samples && tsc -p .",
     "build:test:browser": "tsc -p . && cross-env ONLY_BROWSER=true rollup -c rollup.test.config.js 2>&1",
     "build:test:node": "tsc -p . && cross-env ONLY_NODE=true rollup -c rollup.test.config.js 2>&1",
-    "build:test": "npm run build:test:node",
-    "build": "npm run build:node",
+    "build:test": "tsc -p . && rollup -c rollup.test.config.js 2>&1",
+    "build": "tsc -p . && rollup -c 2>&1",
     "check-format": "prettier --list-different --config ../../.prettierrc.json \"src/**/*.ts\" \"test/**/*.ts\" \"*.{js,json}\"",
-    "clean": "rimraf dist dist-esm test-dist typings *.tgz *.log",
+    "clean": "rimraf dist dist-esm browser test-dist test-browser typings *.tgz *.log",
     "format": "prettier --write --config ../../.prettierrc.json \"src/**/*.ts\" \"test/**/*.ts\" \"*.{js,json}\"",
     "integration-test:browser": "echo skipped",
     "integration-test:node": "echo skipped",
@@ -32,7 +37,7 @@
     "test:browser": "npm run build:test && npm run unit-test:browser && npm run integration-test:browser",
     "test:node": "npm run build:test && npm run unit-test:node && npm run integration-test:node",
     "test": "npm run build:test && npm run unit-test && npm run integration-test",
-    "unit-test:browser": "echo skipped",
+    "unit-test:browser": "karma start",
     "unit-test:node": "mocha test-dist/**/*.js --reporter mocha-multi --reporter-options spec=-,mocha-junit-reporter=-",
     "unit-test": "npm run unit-test:node && npm run unit-test:browser"
   },
@@ -62,43 +67,56 @@
   "engine": {
     "node": ">=6.0.0"
   },
-  "homepage": "https://github.com/azure/azure-sdk-for-js/tree/master/sdk/core/identity",
+  "homepage": "https://github.com/azure/azure-sdk-for-js/tree/master/sdk/identity/identity",
   "sideEffects": false,
   "dependencies": {
-    "@azure/core-http": "^1.0.0-preview.1",
+    "@azure/core-http": "1.0.0-preview.2",
     "events": "^3.0.0",
     "jws": "~3.2.2",
+    "msal": "~1.0.2",
     "qs": "6.7.0",
     "tslib": "^1.9.3",
     "uuid": "^3.3.2"
   },
   "devDependencies": {
+    "@azure/abort-controller": "1.0.0-preview.1",
     "@types/jws": "~3.2.0",
     "@types/mocha": "^5.2.5",
     "@types/node": "^8.0.0",
     "@types/qs": "~6.5.3",
     "@types/uuid": "^3.4.3",
-    "@typescript-eslint/eslint-plugin": "~1.9.0",
-    "@typescript-eslint/parser": "^1.7.0",
+    "@typescript-eslint/eslint-plugin": "^1.11.0",
+    "@typescript-eslint/parser": "^1.11.0",
     "assert": "^1.4.1",
     "cross-env": "^5.2.0",
     "eslint": "^5.16.0",
     "inherits": "^2.0.3",
+    "karma": "^4.0.1",
+    "karma-chrome-launcher": "^3.0.0",
+    "karma-coverage": "^1.1.2",
+    "karma-env-preprocessor": "^0.1.1",
+    "karma-json-preprocessor": "^0.3.3",
+    "karma-json-to-file-reporter": "^1.0.1",
+    "karma-junit-reporter": "^1.2.0",
+    "karma-mocha": "^1.3.0",
+    "karma-mocha-reporter": "^2.2.5",
+    "karma-remap-coverage": "^0.1.5",
     "mocha": "^5.2.0",
     "mocha-junit-reporter": "^1.18.0",
     "mocha-multi": "^1.0.1",
     "prettier": "^1.16.4",
+    "puppeteer": "^1.11.0",
     "rimraf": "^2.6.2",
-    "rollup": "~1.13.1",
+    "rollup": "^1.16.3",
     "rollup-plugin-commonjs": "^10.0.0",
-    "rollup-plugin-json": "^3.1.0",
+    "rollup-plugin-json": "^4.0.0",
     "rollup-plugin-multi-entry": "^2.1.0",
     "rollup-plugin-node-resolve": "^5.0.2",
     "rollup-plugin-replace": "^2.1.0",
     "rollup-plugin-sourcemaps": "^0.4.2",
-    "rollup-plugin-uglify": "^6.0.0",
-    "rollup-plugin-visualizer": "^1.0.0",
+    "rollup-plugin-terser": "^5.1.1",
+    "rollup-plugin-visualizer": "^2.0.0",
     "typescript": "^3.2.2",
-    "util": "^0.11.1"
+    "util": "^0.12.1"
   }
 }

package/src/client/errors.ts

@@ -5,7 +5,7 @@
  * See the official documentation for more details:
  *
  * https://docs.microsoft.com/en-us/azure/active-directory/develop/v1-protocols-oauth-code#error-response-1
- * 
+ *
  * NOTE: This documentation is for v1 OAuth support but the same error
  * response details still apply to v2.
  */
@@ -18,6 +18,12 @@ export interface ErrorResponse {
   correlation_id?: string;
 }
 
+function isErrorResponse(errorResponse: any): errorResponse is ErrorResponse {
+  return errorResponse &&
+    typeof errorResponse.error === "string" &&
+    typeof errorResponse.error_description === "string";
+}
+
 /**
  * Provides details about a failure to authenticate with Azure Active
  * Directory.  The `errorResponse` field contains more details about
@@ -27,13 +33,15 @@ export class AuthenticationError extends Error {
   public readonly statusCode: number;
   public readonly errorResponse: ErrorResponse;
 
-  constructor(statusCode: number, errorBody: string | undefined | null) {
+  constructor(statusCode: number, errorBody: object | string | undefined | null) {
     let errorResponse = {
       error: "unknown",
       error_description: "An unknown error occurred and no additional details are available."
     };
 
-    if (errorBody) {
+    if (isErrorResponse(errorBody)) {
+      errorResponse = errorBody;
+    } else if (typeof errorBody === "string") {
       try {
         // Most error responses will contain JSON-formatted error details
         // in the response body