@azure/identity 2.0.2-alpha.20211028.2 → 2.0.2-alpha.20211105.2

package/CHANGELOG.md

@@ -8,6 +8,8 @@
 
 ### Bugs Fixed
 
+- Challenge claims now are properly being passed through to the outgoing token requests.
+
 ### Other Changes
 
 ## 2.0.1 (2021-10-28)

package/dist/index.js

@@ -938,7 +938,7 @@ class MsalNode extends MsalBaseUtilities {
         this.authorityHost = options.authorityHost || process.env.AZURE_AUTHORITY_HOST;
         const authority = getAuthority(tenantId, this.authorityHost);
         this.identityClient = new IdentityClient(Object.assign(Object.assign({}, options.tokenCredentialOptions), { authorityHost: authority }));
-        let clientCapabilities = ["CP1"];
+        let clientCapabilities = ["cp1"];
         if (process.env.AZURE_IDENTITY_DISABLE_CP1) {
             clientCapabilities = [];
         }
@@ -1052,7 +1052,8 @@ To work with multiple accounts for the same Client ID and Tenant ID, please prov
             account: publicToMsal(this.account),
             correlationId: options === null || options === void 0 ? void 0 : options.correlationId,
             scopes,
-            authority: options === null || options === void 0 ? void 0 : options.authority
+            authority: options === null || options === void 0 ? void 0 : options.authority,
+            claims: options === null || options === void 0 ? void 0 : options.claims
         };
         try {
             this.logger.info("Attempting to acquire token silently");
@@ -1750,7 +1751,8 @@ class MsalClientSecret extends MsalNode {
                 scopes,
                 correlationId: options.correlationId,
                 azureRegion: this.azureRegion,
-                authority: options.authority
+                authority: options.authority,
+                claims: options.claims
             });
             // The Client Credential flow does not return an account,
             // so each time getToken gets called, we will have to acquire a new token through the service.
@@ -1877,7 +1879,8 @@ class MsalClientCertificate extends MsalNode {
                 scopes,
                 correlationId: options.correlationId,
                 azureRegion: this.azureRegion,
-                authority: options.authority
+                authority: options.authority,
+                claims: options.claims
             });
             // Even though we're providing the same default in memory persistence cache that we use for DeviceCodeCredential,
             // The Client Credential flow does not return the account information from the authentication service,
@@ -1956,7 +1959,8 @@ class MsalUsernamePassword extends MsalNode {
                 username: this.username,
                 password: this.password,
                 correlationId: options === null || options === void 0 ? void 0 : options.correlationId,
-                authority: options === null || options === void 0 ? void 0 : options.authority
+                authority: options === null || options === void 0 ? void 0 : options.authority,
+                claims: options === null || options === void 0 ? void 0 : options.claims
             };
             const result = await this.publicApp.acquireTokenByUsernamePassword(requestOptions);
             return this.handleResult(scopes, this.clientId, result || undefined);
@@ -3002,8 +3006,10 @@ class MsalOpenBrowser extends MsalNode {
         this.pkceCodes = await cryptoProvider.generatePkceCodes();
         const authCodeUrlParameters = {
             scopes: scopeArray,
+            correlationId: options === null || options === void 0 ? void 0 : options.correlationId,
             redirectUri: this.redirectUri,
             authority: options === null || options === void 0 ? void 0 : options.authority,
+            claims: options === null || options === void 0 ? void 0 : options.claims,
             loginHint: this.loginHint,
             codeChallenge: this.pkceCodes.challenge,
             codeChallengeMethod: "S256" // Use SHA256 Algorithm
@@ -3102,7 +3108,8 @@ class MsalDeviceCode extends MsalNode {
                 scopes,
                 cancel: false,
                 correlationId: options === null || options === void 0 ? void 0 : options.correlationId,
-                authority: options === null || options === void 0 ? void 0 : options.authority
+                authority: options === null || options === void 0 ? void 0 : options.authority,
+                claims: options === null || options === void 0 ? void 0 : options.claims
             };
             const promise = this.publicApp.acquireTokenByDeviceCode(requestOptions);
             // TODO:
@@ -3219,7 +3226,10 @@ class MsalAuthorizationCode extends MsalNode {
             const result = await ((_a = this.confidentialApp) === null || _a === void 0 ? void 0 : _a.acquireTokenByCode({
                 scopes,
                 redirectUri: this.redirectUri,
-                code: this.authorizationCode
+                code: this.authorizationCode,
+                correlationId: options === null || options === void 0 ? void 0 : options.correlationId,
+                authority: options === null || options === void 0 ? void 0 : options.authority,
+                claims: options === null || options === void 0 ? void 0 : options.claims
             }));
             // The Client Credential flow does not return an account,
             // so each time getToken gets called, we will have to acquire a new token through the service.
@@ -3322,6 +3332,7 @@ class MsalOnBehalfOf extends MsalNode {
                 scopes,
                 correlationId: options.correlationId,
                 authority: options.authority,
+                claims: options.claims,
                 oboAssertion: this.userAssertionToken
             });
             return this.handleResult(scopes, this.clientId, result || undefined);