@azure/identity 2.1.0-alpha.20220318.2 → 2.1.0-alpha.20220321.2

package/CHANGELOG.md

@@ -6,6 +6,7 @@
 
 - All of our credentials now support a new option on their constructor: `loggingOptions`, which allows configuring the logging options of the HTTP pipelines.
 - Within the new `loggingOptions` we have also added `allowLoggingAccountIdentifiers`, a property that if set to true logs information specific to the authenticated account after each successful authentication, including: the Client ID, the Tenant ID, the Object ID of the authenticated user, and if possible the User Principal Name.
+- Added `disableAuthorityValidation`, which allows passing any `authorityHost` regardless of whether it can be validated or not. This is specially useful in private clouds.
 
 ### Breaking Changes
 

package/dist/index.js

@@ -651,12 +651,16 @@ function getAuthority(tenantId, host) {
 }
 /**
  * Generates the known authorities.
+ * If `disableAuthorityValidation` is passed, it returns the authority host as a known host, thus disabling the authority validation.
  * If the Tenant Id is `adfs`, the authority can't be validated since the format won't match the expected one.
  * For that reason, we have to force MSAL to disable validating the authority
  * by sending it within the known authorities in the MSAL configuration.
  * @internal
  */
-function getKnownAuthorities(tenantId, authorityHost) {
+function getKnownAuthorities(tenantId, authorityHost, disableAuthorityValidation) {
+    if (disableAuthorityValidation) {
+        return [authorityHost];
+    }
     if (tenantId === "adfs" && authorityHost) {
         return [authorityHost];
     }
@@ -1019,12 +1023,12 @@ class MsalNode extends MsalBaseUtilities {
         if (process.env.AZURE_IDENTITY_DISABLE_CP1) {
             clientCapabilities = [];
         }
-        return {
+        const configuration = {
             auth: {
                 clientId,
                 authority,
-                knownAuthorities: getKnownAuthorities(tenantId, authority),
                 clientCapabilities,
+                knownAuthorities: getKnownAuthorities(tenantId, authority, options.disableAuthorityValidation),
             },
             // Cache is defined in this.prepare();
             system: {
@@ -1034,6 +1038,7 @@ class MsalNode extends MsalBaseUtilities {
                 },
             },
         };
+        return configuration;
     }
     /**
      * Prepares the MSAL applications.