@azure/identity 4.5.1-alpha.20241112.1 → 4.5.1-alpha.20241113.2

package/dist/browser/msal/utils.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"utils.js","sourceRoot":"","sources":["../../../src/msal/utils.ts"],"names":[],"mappings":"AAAA,uCAAuC;AACvC,kCAAkC;AAGlC,OAAO,EAAE,2BAA2B,EAAE,0BAA0B,EAAE,MAAM,cAAc,CAAC;AAEvF,OAAO,EAAE,gBAAgB,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACnE,OAAO,EAAE,oBAAoB,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AACxE,OAAO,EAAE,UAAU,IAAI,cAAc,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAEpF,OAAO,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AAGrD,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAMvC;;GAEG;AACH,MAAM,MAAM,GAAG,gBAAgB,CAAC,eAAe,CAAC,CAAC;AAEjD;;;GAGG;AACH,MAAM,iCAAiC,GAAG,KAAK,CAAC;AAEhD;;;GAGG;AACH,MAAM,UAAU,oBAAoB,CAClC,MAAyB,EACzB,SAA4B,EAC5B,eAAiC;IAEjC,MAAM,KAAK,GAAG,CAAC,OAAe,EAAS,EAAE;QACvC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC9B,OAAO,IAAI,2BAA2B,CAAC;YACrC,MAAM,EAAE,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;YACjD,eAAe;YACf,OAAO;SACR,CAAC,CAAC;IACL,CAAC,CAAC;IACF,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,MAAM,KAAK,CAAC,aAAa,CAAC,CAAC;IAC7B,CAAC;IACD,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,CAAC;QACzB,MAAM,KAAK,CAAC,uCAAuC,CAAC,CAAC;IACvD,CAAC;IACD,IAAI,CAAC,SAAS,CAAC,WAAW,EAAE,CAAC;QAC3B,MAAM,KAAK,CAAC,yCAAyC,CAAC,CAAC;IACzD,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB,CAAC,OAAoC;IACnE,IAAI,aAAa,GAAG,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,aAAa,CAAC;IAE3C,IAAI,CAAC,aAAa,IAAI,UAAU,EAAE,CAAC;QACjC,aAAa,GAAG,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC;IACnD,CAAC;IAED,OAAO,aAAa,aAAb,aAAa,cAAb,aAAa,GAAI,oBAAoB,CAAC;AAC/C,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,YAAY,CAAC,QAAgB,EAAE,IAAa;IAC1D,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,IAAI,GAAG,oBAAoB,CAAC;IAC9B,CAAC;IACD,IAAI,IAAI,MAAM,CAAC,GAAG,QAAQ,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAC5C,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QACvB,OAAO,IAAI,GAAG,QAAQ,CAAC;IACzB,CAAC;SAAM,CAAC;QACN,OAAO,GAAG,IAAI,IAAI,QAAQ,EAAE,CAAC;IAC/B,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,mBAAmB,CACjC,QAAgB,EAChB,aAAqB,EACrB,wBAAkC;IAElC,IAAI,CAAC,QAAQ,KAAK,MAAM,IAAI,aAAa,CAAC,IAAI,wBAAwB,EAAE,CAAC;QACvE,OAAO,CAAC,aAAa,CAAC,CAAC;IACzB,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAIhC,CAAC,UAA4B,EAAE,WAA+B,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,EAAE,EAAE,CAC7F,CAAC,KAAK,EAAE,OAAO,EAAE,WAAW,EAAQ,EAAE;IACpC,IAAI,WAAW,EAAE,CAAC;QAChB,OAAO;IACT,CAAC;IACD,QAAQ,KAAK,EAAE,CAAC;QACd,KAAK,UAAU,CAAC,QAAQ,CAAC,KAAK;YAC5B,UAAU,CAAC,IAAI,CAAC,QAAQ,QAAQ,cAAc,OAAO,EAAE,CAAC,CAAC;YACzD,OAAO;QACT,KAAK,UAAU,CAAC,QAAQ,CAAC,IAAI;YAC3B,UAAU,CAAC,IAAI,CAAC,QAAQ,QAAQ,qBAAqB,OAAO,EAAE,CAAC,CAAC;YAChE,OAAO;QACT,KAAK,UAAU,CAAC,QAAQ,CAAC,OAAO;YAC9B,UAAU,CAAC,IAAI,CAAC,QAAQ,QAAQ,wBAAwB,OAAO,EAAE,CAAC,CAAC;YACnE,OAAO;QACT,KAAK,UAAU,CAAC,QAAQ,CAAC,OAAO;YAC9B,UAAU,CAAC,IAAI,CAAC,QAAQ,QAAQ,gBAAgB,OAAO,EAAE,CAAC,CAAC;YAC3D,OAAO;IACX,CAAC;AACH,CAAC,CAAC;AAEJ;;GAEG;AACH,MAAM,UAAU,eAAe,CAAC,QAAmC;IACjE,QAAQ,QAAQ,EAAE,CAAC;QACjB,KAAK,OAAO;YACV,OAAO,UAAU,CAAC,QAAQ,CAAC,KAAK,CAAC;QACnC,KAAK,MAAM;YACT,OAAO,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC;QAClC,KAAK,SAAS;YACZ,OAAO,UAAU,CAAC,QAAQ,CAAC,OAAO,CAAC;QACrC,KAAK,SAAS;YACZ,OAAO,UAAU,CAAC,QAAQ,CAAC,OAAO,CAAC;QACrC;YACE,4CAA4C;YAC5C,OAAO,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC;IACpC,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,UAAU;IACxB,OAAO,cAAc,EAAE,CAAC;AAC1B,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,eAAe,CAC7B,MAAgB,EAChB,KAAY,EACZ,eAAiC;IAEjC,IACE,KAAK,CAAC,IAAI,KAAK,WAAW;QAC1B,KAAK,CAAC,IAAI,KAAK,iBAAiB;QAChC,KAAK,CAAC,IAAI,KAAK,kBAAkB,EACjC,CAAC;QACD,MAAM,SAAS,GAAG,KAA6B,CAAC;QAChD,QAAQ,SAAS,CAAC,SAAS,EAAE,CAAC;YAC5B,KAAK,4BAA4B;gBAC/B,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;gBAChD,OAAO,IAAI,0BAA0B,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YACvD,KAAK,+BAA+B;gBAClC,OAAO,IAAI,UAAU,CAAC,oDAAoD,CAAC,CAAC;YAC9E,KAAK,kBAAkB,CAAC;YACxB,KAAK,sBAAsB,CAAC;YAC5B,KAAK,gBAAgB;gBACnB,MAAM,CAAC,IAAI,CACT,WAAW,CAAC,MAAM,EAAE,qCAAqC,SAAS,CAAC,SAAS,EAAE,CAAC,CAChF,CAAC;gBACF,MAAM;YACR;gBACE,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,4BAA4B,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;gBAC9E,MAAM;QACV,CAAC;IACH,CAAC;IACD,IACE,KAAK,CAAC,IAAI,KAAK,0BAA0B;QACzC,KAAK,CAAC,IAAI,KAAK,+BAA+B;QAC9C,KAAK,CAAC,IAAI,KAAK,YAAY;QAC3B,KAAK,CAAC,IAAI,KAAK,qBAAqB,EACpC,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,KAAK,CAAC,IAAI,KAAK,iBAAiB,EAAE,CAAC;QACrC,MAAM,CAAC,IAAI,CACT,WAAW,CACT,MAAM,EACN,iCAAiC,KAAK,CAAC,OAAO,sBAC3C,KAAa,CAAC,UACjB,EAAE,CACH,CACF,CAAC;QACF,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,IAAI,2BAA2B,CAAC,EAAE,MAAM,EAAE,eAAe,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;AAC9F,CAAC;AAED,qBAAqB;AAErB,MAAM,UAAU,YAAY,CAAC,OAA6B;IACxD,MAAM,CAAC,WAAW,CAAC,GAAG,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC,0BAA0B,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAClF,uCACK,OAAO,KACV,cAAc,EAAE,OAAO,CAAC,aAAa,EACrC,WAAW,IACX;AACJ,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,QAAgB,EAAE,OAAwB;IACrE,MAAM,MAAM,GAAG;QACb,SAAS,EAAE,YAAY,CAAC,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,WAAW,CAAC;QAC9D,aAAa,EAAE,OAAO,CAAC,aAAa;QACpC,QAAQ,EAAE,OAAO,CAAC,QAAQ,IAAI,eAAe;QAC7C,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,QAAQ;QACR,OAAO,EAAE,iCAAiC;KAC3C,CAAC;IACF,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,6BAA6B,CAAC,MAA4B;IACxE,OAAO,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;AAChC,CAAC;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,UAAU,+BAA+B,CAAC,gBAAwB;IACtE,MAAM,MAAM,GAAgD,IAAI,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;IAEzF,IAAI,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,OAAO,KAAK,iCAAiC,EAAE,CAAC;QAC3E,MAAM,KAAK,CAAC,0CAA0C,CAAC,CAAC;IAC1D,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC","sourcesContent":["// Copyright (c) Microsoft Corporation.\n// Licensed under the MIT License.\n\nimport type { AuthenticationRecord, MsalAccountInfo, MsalToken, ValidMsalToken } from \"./types.js\";\nimport { AuthenticationRequiredError, CredentialUnavailableError } from \"../errors.js\";\nimport type { CredentialLogger } from \"../util/logging.js\";\nimport { credentialLogger, formatError } from \"../util/logging.js\";\nimport { DefaultAuthorityHost, DefaultTenantId } from \"../constants.js\";\nimport { randomUUID as coreRandomUUID, isNode, isNodeLike } from \"@azure/core-util\";\n\nimport { AbortError } from \"@azure/abort-controller\";\nimport type { AzureLogLevel } from \"@azure/logger\";\nimport type { GetTokenOptions } from \"@azure/core-auth\";\nimport { msalCommon } from \"./msal.js\";\n\nexport interface ILoggerCallback {\n  (level: msalCommon.LogLevel, message: string, containsPii: boolean): void;\n}\n\n/**\n * @internal\n */\nconst logger = credentialLogger(\"IdentityUtils\");\n\n/**\n * Latest AuthenticationRecord version\n * @internal\n */\nconst LatestAuthenticationRecordVersion = \"1.0\";\n\n/**\n * Ensures the validity of the MSAL token\n * @internal\n */\nexport function ensureValidMsalToken(\n  scopes: string | string[],\n  msalToken?: MsalToken | null,\n  getTokenOptions?: GetTokenOptions,\n): asserts msalToken is ValidMsalToken {\n  const error = (message: string): Error => {\n    logger.getToken.info(message);\n    return new AuthenticationRequiredError({\n      scopes: Array.isArray(scopes) ? scopes : [scopes],\n      getTokenOptions,\n      message,\n    });\n  };\n  if (!msalToken) {\n    throw error(\"No response\");\n  }\n  if (!msalToken.expiresOn) {\n    throw error(`Response had no \"expiresOn\" property.`);\n  }\n  if (!msalToken.accessToken) {\n    throw error(`Response had no \"accessToken\" property.`);\n  }\n}\n\n/**\n * Returns the authority host from either the options bag or the AZURE_AUTHORITY_HOST environment variable.\n *\n * Defaults to {@link DefaultAuthorityHost}.\n * @internal\n */\nexport function getAuthorityHost(options?: { authorityHost?: string }): string {\n  let authorityHost = options?.authorityHost;\n\n  if (!authorityHost && isNodeLike) {\n    authorityHost = process.env.AZURE_AUTHORITY_HOST;\n  }\n\n  return authorityHost ?? DefaultAuthorityHost;\n}\n\n/**\n * Generates a valid authority by combining a host with a tenantId.\n * @internal\n */\nexport function getAuthority(tenantId: string, host?: string): string {\n  if (!host) {\n    host = DefaultAuthorityHost;\n  }\n  if (new RegExp(`${tenantId}/?$`).test(host)) {\n    return host;\n  }\n  if (host.endsWith(\"/\")) {\n    return host + tenantId;\n  } else {\n    return `${host}/${tenantId}`;\n  }\n}\n\n/**\n * Generates the known authorities.\n * If the Tenant Id is `adfs`, the authority can't be validated since the format won't match the expected one.\n * For that reason, we have to force MSAL to disable validating the authority\n * by sending it within the known authorities in the MSAL configuration.\n * @internal\n */\nexport function getKnownAuthorities(\n  tenantId: string,\n  authorityHost: string,\n  disableInstanceDiscovery?: boolean,\n): string[] {\n  if ((tenantId === \"adfs\" && authorityHost) || disableInstanceDiscovery) {\n    return [authorityHost];\n  }\n  return [];\n}\n\n/**\n * Generates a logger that can be passed to the MSAL clients.\n * @param credLogger - The logger of the credential.\n * @internal\n */\nexport const defaultLoggerCallback: (\n  logger: CredentialLogger,\n  platform?: \"Node\" | \"Browser\",\n) => ILoggerCallback =\n  (credLogger: CredentialLogger, platform: \"Node\" | \"Browser\" = isNode ? \"Node\" : \"Browser\") =>\n  (level, message, containsPii): void => {\n    if (containsPii) {\n      return;\n    }\n    switch (level) {\n      case msalCommon.LogLevel.Error:\n        credLogger.info(`MSAL ${platform} V2 error: ${message}`);\n        return;\n      case msalCommon.LogLevel.Info:\n        credLogger.info(`MSAL ${platform} V2 info message: ${message}`);\n        return;\n      case msalCommon.LogLevel.Verbose:\n        credLogger.info(`MSAL ${platform} V2 verbose message: ${message}`);\n        return;\n      case msalCommon.LogLevel.Warning:\n        credLogger.info(`MSAL ${platform} V2 warning: ${message}`);\n        return;\n    }\n  };\n\n/**\n * @internal\n */\nexport function getMSALLogLevel(logLevel: AzureLogLevel | undefined): msalCommon.LogLevel {\n  switch (logLevel) {\n    case \"error\":\n      return msalCommon.LogLevel.Error;\n    case \"info\":\n      return msalCommon.LogLevel.Info;\n    case \"verbose\":\n      return msalCommon.LogLevel.Verbose;\n    case \"warning\":\n      return msalCommon.LogLevel.Warning;\n    default:\n      // default msal logging level should be Info\n      return msalCommon.LogLevel.Info;\n  }\n}\n\n/**\n * Wraps core-util's randomUUID in order to allow for mocking in tests.\n * This prepares the library for the upcoming core-util update to ESM.\n *\n * @internal\n * @returns A string containing a random UUID\n */\nexport function randomUUID(): string {\n  return coreRandomUUID();\n}\n\n/**\n * Handles MSAL errors.\n */\nexport function handleMsalError(\n  scopes: string[],\n  error: Error,\n  getTokenOptions?: GetTokenOptions,\n): Error {\n  if (\n    error.name === \"AuthError\" ||\n    error.name === \"ClientAuthError\" ||\n    error.name === \"BrowserAuthError\"\n  ) {\n    const msalError = error as msalCommon.AuthError;\n    switch (msalError.errorCode) {\n      case \"endpoints_resolution_error\":\n        logger.info(formatError(scopes, error.message));\n        return new CredentialUnavailableError(error.message);\n      case \"device_code_polling_cancelled\":\n        return new AbortError(\"The authentication has been aborted by the caller.\");\n      case \"consent_required\":\n      case \"interaction_required\":\n      case \"login_required\":\n        logger.info(\n          formatError(scopes, `Authentication returned errorCode ${msalError.errorCode}`),\n        );\n        break;\n      default:\n        logger.info(formatError(scopes, `Failed to acquire token: ${error.message}`));\n        break;\n    }\n  }\n  if (\n    error.name === \"ClientConfigurationError\" ||\n    error.name === \"BrowserConfigurationAuthError\" ||\n    error.name === \"AbortError\" ||\n    error.name === \"AuthenticationError\"\n  ) {\n    return error;\n  }\n  if (error.name === \"NativeAuthError\") {\n    logger.info(\n      formatError(\n        scopes,\n        `Error from the native broker: ${error.message} with status code: ${\n          (error as any).statusCode\n        }`,\n      ),\n    );\n    return error;\n  }\n  return new AuthenticationRequiredError({ scopes, getTokenOptions, message: error.message });\n}\n\n// transformations.ts\n\nexport function publicToMsal(account: AuthenticationRecord): msalCommon.AccountInfo {\n  const [environment] = account.authority.match(/([a-z]*\\.[a-z]*\\.[a-z]*)/) || [\"\"];\n  return {\n    ...account,\n    localAccountId: account.homeAccountId,\n    environment,\n  };\n}\n\nexport function msalToPublic(clientId: string, account: MsalAccountInfo): AuthenticationRecord {\n  const record = {\n    authority: getAuthority(account.tenantId, account.environment),\n    homeAccountId: account.homeAccountId,\n    tenantId: account.tenantId || DefaultTenantId,\n    username: account.username,\n    clientId,\n    version: LatestAuthenticationRecordVersion,\n  };\n  return record;\n}\n\n/**\n * Serializes an `AuthenticationRecord` into a string.\n *\n * The output of a serialized authentication record will contain the following properties:\n *\n * - \"authority\"\n * - \"homeAccountId\"\n * - \"clientId\"\n * - \"tenantId\"\n * - \"username\"\n * - \"version\"\n *\n * To later convert this string to a serialized `AuthenticationRecord`, please use the exported function `deserializeAuthenticationRecord()`.\n */\nexport function serializeAuthenticationRecord(record: AuthenticationRecord): string {\n  return JSON.stringify(record);\n}\n\n/**\n * Deserializes a previously serialized authentication record from a string into an object.\n *\n * The input string must contain the following properties:\n *\n * - \"authority\"\n * - \"homeAccountId\"\n * - \"clientId\"\n * - \"tenantId\"\n * - \"username\"\n * - \"version\"\n *\n * If the version we receive is unsupported, an error will be thrown.\n *\n * At the moment, the only available version is: \"1.0\", which is always set when the authentication record is serialized.\n *\n * @param serializedRecord - Authentication record previously serialized into string.\n * @returns AuthenticationRecord.\n */\nexport function deserializeAuthenticationRecord(serializedRecord: string): AuthenticationRecord {\n  const parsed: AuthenticationRecord & { version?: string } = JSON.parse(serializedRecord);\n\n  if (parsed.version && parsed.version !== LatestAuthenticationRecordVersion) {\n    throw Error(\"Unsupported AuthenticationRecord version\");\n  }\n\n  return parsed;\n}\n"]}

package/dist/browser/package.json

@@ -0,0 +1,3 @@
+{
+  "type": "module"
+}

package/dist/browser/plugins/consumer-browser.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"consumer-browser.d.mts","sourceRoot":"","sources":["../../../src/plugins/consumer-browser.mts"],"names":[],"mappings":"AAKA,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAExD"}

package/dist/browser/plugins/consumer-browser.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"consumer-browser.mjs","sourceRoot":"","sources":["../../../src/plugins/consumer-browser.mts"],"names":[],"mappings":"AAAA,uCAAuC;AACvC,kCAAkC;AAElC,+DAA+D;AAE/D,MAAM,UAAU,iBAAiB,CAAC,OAAgB;IAChD,MAAM,IAAI,KAAK,CAAC,6DAA6D,CAAC,CAAC;AACjF,CAAC","sourcesContent":["// Copyright (c) Microsoft Corporation.\n// Licensed under the MIT License.\n\n// This module is a shim for the plugin consumer in the browser\n\nexport function useIdentityPlugin(_plugin: unknown): void {\n  throw new Error(\"Identity plugins are not supported in browser environments.\");\n}\n"]}

package/dist/browser/plugins/consumer.d.ts

@@ -0,0 +1,2 @@
+export declare function useIdentityPlugin(_plugin: unknown): void;
+//# sourceMappingURL=consumer-browser.d.mts.map

package/dist/browser/plugins/consumer.js

@@ -0,0 +1,7 @@
+// Copyright (c) Microsoft Corporation.
+// Licensed under the MIT License.
+// This module is a shim for the plugin consumer in the browser
+export function useIdentityPlugin(_plugin) {
+    throw new Error("Identity plugins are not supported in browser environments.");
+}
+//# sourceMappingURL=consumer-browser.mjs.map

package/dist/browser/plugins/provider.d.ts

@@ -0,0 +1,36 @@
+import type { TokenCachePersistenceOptions } from "../msal/nodeFlows/tokenCachePersistenceOptions.js";
+import type { VSCodeCredentialFinder } from "../credentials/visualStudioCodeCredentialPlugin.js";
+/**
+ * The type of an Azure Identity plugin, a function accepting a plugin
+ * context.
+ */
+export type IdentityPlugin = (context: unknown) => void;
+/**
+ * Plugin context entries for controlling cache plugins.
+ */
+export interface CachePluginControl {
+    setPersistence(persistenceFactory: (options?: TokenCachePersistenceOptions) => Promise<import("@azure/msal-node").ICachePlugin>): void;
+}
+export interface NativeBrokerPluginControl {
+    setNativeBroker(nativeBroker: import("@azure/msal-node").INativeBrokerPlugin): void;
+}
+/**
+ * Plugin context entries for controlling VisualStudioCodeCredential.
+ */
+export interface VisualStudioCodeCredentialControl {
+    setVsCodeCredentialFinder(finder: VSCodeCredentialFinder): void;
+}
+/**
+ * Context options passed to a plugin during initialization.
+ *
+ * Plugin authors are responsible for casting their plugin context values
+ * to this type.
+ *
+ * @internal
+ */
+export interface AzurePluginContext {
+    cachePluginControl: CachePluginControl;
+    nativeBrokerPluginControl: NativeBrokerPluginControl;
+    vsCodeCredentialControl: VisualStudioCodeCredentialControl;
+}
+//# sourceMappingURL=provider.d.ts.map

package/dist/browser/plugins/provider.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider.d.ts","sourceRoot":"","sources":["../../../src/plugins/provider.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,mDAAmD,CAAC;AACtG,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,oDAAoD,CAAC;AAEjG;;;GAGG;AACH,MAAM,MAAM,cAAc,GAAG,CAAC,OAAO,EAAE,OAAO,KAAK,IAAI,CAAC;AAExD;;GAEG;AACH,MAAM,WAAW,kBAAkB;IACjC,cAAc,CACZ,kBAAkB,EAAE,CAClB,OAAO,CAAC,EAAE,4BAA4B,KACnC,OAAO,CAAC,OAAO,kBAAkB,EAAE,YAAY,CAAC,GACpD,IAAI,CAAC;CACT;AAED,MAAM,WAAW,yBAAyB;IACxC,eAAe,CAAC,YAAY,EAAE,OAAO,kBAAkB,EAAE,mBAAmB,GAAG,IAAI,CAAC;CACrF;AAED;;GAEG;AACH,MAAM,WAAW,iCAAiC;IAChD,yBAAyB,CAAC,MAAM,EAAE,sBAAsB,GAAG,IAAI,CAAC;CACjE;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,kBAAkB;IACjC,kBAAkB,EAAE,kBAAkB,CAAC;IACvC,yBAAyB,EAAE,yBAAyB,CAAC;IACrD,uBAAuB,EAAE,iCAAiC,CAAC;CAC5D"}

package/dist/browser/plugins/provider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider.js","sourceRoot":"","sources":["../../../src/plugins/provider.ts"],"names":[],"mappings":"AAAA,uCAAuC;AACvC,kCAAkC","sourcesContent":["// Copyright (c) Microsoft Corporation.\n// Licensed under the MIT License.\n\nimport type { TokenCachePersistenceOptions } from \"../msal/nodeFlows/tokenCachePersistenceOptions.js\";\nimport type { VSCodeCredentialFinder } from \"../credentials/visualStudioCodeCredentialPlugin.js\";\n\n/**\n * The type of an Azure Identity plugin, a function accepting a plugin\n * context.\n */\nexport type IdentityPlugin = (context: unknown) => void;\n\n/**\n * Plugin context entries for controlling cache plugins.\n */\nexport interface CachePluginControl {\n  setPersistence(\n    persistenceFactory: (\n      options?: TokenCachePersistenceOptions,\n    ) => Promise<import(\"@azure/msal-node\").ICachePlugin>,\n  ): void;\n}\n\nexport interface NativeBrokerPluginControl {\n  setNativeBroker(nativeBroker: import(\"@azure/msal-node\").INativeBrokerPlugin): void;\n}\n\n/**\n * Plugin context entries for controlling VisualStudioCodeCredential.\n */\nexport interface VisualStudioCodeCredentialControl {\n  setVsCodeCredentialFinder(finder: VSCodeCredentialFinder): void;\n}\n\n/**\n * Context options passed to a plugin during initialization.\n *\n * Plugin authors are responsible for casting their plugin context values\n * to this type.\n *\n * @internal\n */\nexport interface AzurePluginContext {\n  cachePluginControl: CachePluginControl;\n  nativeBrokerPluginControl: NativeBrokerPluginControl;\n  vsCodeCredentialControl: VisualStudioCodeCredentialControl;\n}\n"]}

package/dist/browser/regionalAuthority.d.ts

@@ -0,0 +1,122 @@
+/**
+ * Helps specify a regional authority, or "AutoDiscoverRegion" to auto-detect the region.
+ */
+export declare enum RegionalAuthority {
+    /** Instructs MSAL to attempt to discover the region */
+    AutoDiscoverRegion = "AutoDiscoverRegion",
+    /** Uses the {@link RegionalAuthority} for the Azure 'westus' region. */
+    USWest = "westus",
+    /** Uses the {@link RegionalAuthority} for the Azure 'westus2' region. */
+    USWest2 = "westus2",
+    /** Uses the {@link RegionalAuthority} for the Azure 'centralus' region. */
+    USCentral = "centralus",
+    /** Uses the {@link RegionalAuthority} for the Azure 'eastus' region. */
+    USEast = "eastus",
+    /** Uses the {@link RegionalAuthority} for the Azure 'eastus2' region. */
+    USEast2 = "eastus2",
+    /** Uses the {@link RegionalAuthority} for the Azure 'northcentralus' region. */
+    USNorthCentral = "northcentralus",
+    /** Uses the {@link RegionalAuthority} for the Azure 'southcentralus' region. */
+    USSouthCentral = "southcentralus",
+    /** Uses the {@link RegionalAuthority} for the Azure 'westcentralus' region. */
+    USWestCentral = "westcentralus",
+    /** Uses the {@link RegionalAuthority} for the Azure 'canadacentral' region. */
+    CanadaCentral = "canadacentral",
+    /** Uses the {@link RegionalAuthority} for the Azure 'canadaeast' region. */
+    CanadaEast = "canadaeast",
+    /** Uses the {@link RegionalAuthority} for the Azure 'brazilsouth' region. */
+    BrazilSouth = "brazilsouth",
+    /** Uses the {@link RegionalAuthority} for the Azure 'northeurope' region. */
+    EuropeNorth = "northeurope",
+    /** Uses the {@link RegionalAuthority} for the Azure 'westeurope' region. */
+    EuropeWest = "westeurope",
+    /** Uses the {@link RegionalAuthority} for the Azure 'uksouth' region. */
+    UKSouth = "uksouth",
+    /** Uses the {@link RegionalAuthority} for the Azure 'ukwest' region. */
+    UKWest = "ukwest",
+    /** Uses the {@link RegionalAuthority} for the Azure 'francecentral' region. */
+    FranceCentral = "francecentral",
+    /** Uses the {@link RegionalAuthority} for the Azure 'francesouth' region. */
+    FranceSouth = "francesouth",
+    /** Uses the {@link RegionalAuthority} for the Azure 'switzerlandnorth' region. */
+    SwitzerlandNorth = "switzerlandnorth",
+    /** Uses the {@link RegionalAuthority} for the Azure 'switzerlandwest' region. */
+    SwitzerlandWest = "switzerlandwest",
+    /** Uses the {@link RegionalAuthority} for the Azure 'germanynorth' region. */
+    GermanyNorth = "germanynorth",
+    /** Uses the {@link RegionalAuthority} for the Azure 'germanywestcentral' region. */
+    GermanyWestCentral = "germanywestcentral",
+    /** Uses the {@link RegionalAuthority} for the Azure 'norwaywest' region. */
+    NorwayWest = "norwaywest",
+    /** Uses the {@link RegionalAuthority} for the Azure 'norwayeast' region. */
+    NorwayEast = "norwayeast",
+    /** Uses the {@link RegionalAuthority} for the Azure 'eastasia' region. */
+    AsiaEast = "eastasia",
+    /** Uses the {@link RegionalAuthority} for the Azure 'southeastasia' region. */
+    AsiaSouthEast = "southeastasia",
+    /** Uses the {@link RegionalAuthority} for the Azure 'japaneast' region. */
+    JapanEast = "japaneast",
+    /** Uses the {@link RegionalAuthority} for the Azure 'japanwest' region. */
+    JapanWest = "japanwest",
+    /** Uses the {@link RegionalAuthority} for the Azure 'australiaeast' region. */
+    AustraliaEast = "australiaeast",
+    /** Uses the {@link RegionalAuthority} for the Azure 'australiasoutheast' region. */
+    AustraliaSouthEast = "australiasoutheast",
+    /** Uses the {@link RegionalAuthority} for the Azure 'australiacentral' region. */
+    AustraliaCentral = "australiacentral",
+    /** Uses the {@link RegionalAuthority} for the Azure 'australiacentral2' region. */
+    AustraliaCentral2 = "australiacentral2",
+    /** Uses the {@link RegionalAuthority} for the Azure 'centralindia' region. */
+    IndiaCentral = "centralindia",
+    /** Uses the {@link RegionalAuthority} for the Azure 'southindia' region. */
+    IndiaSouth = "southindia",
+    /** Uses the {@link RegionalAuthority} for the Azure 'westindia' region. */
+    IndiaWest = "westindia",
+    /** Uses the {@link RegionalAuthority} for the Azure 'koreasouth' region. */
+    KoreaSouth = "koreasouth",
+    /** Uses the {@link RegionalAuthority} for the Azure 'koreacentral' region. */
+    KoreaCentral = "koreacentral",
+    /** Uses the {@link RegionalAuthority} for the Azure 'uaecentral' region. */
+    UAECentral = "uaecentral",
+    /** Uses the {@link RegionalAuthority} for the Azure 'uaenorth' region. */
+    UAENorth = "uaenorth",
+    /** Uses the {@link RegionalAuthority} for the Azure 'southafricanorth' region. */
+    SouthAfricaNorth = "southafricanorth",
+    /** Uses the {@link RegionalAuthority} for the Azure 'southafricawest' region. */
+    SouthAfricaWest = "southafricawest",
+    /** Uses the {@link RegionalAuthority} for the Azure 'chinanorth' region. */
+    ChinaNorth = "chinanorth",
+    /** Uses the {@link RegionalAuthority} for the Azure 'chinaeast' region. */
+    ChinaEast = "chinaeast",
+    /** Uses the {@link RegionalAuthority} for the Azure 'chinanorth2' region. */
+    ChinaNorth2 = "chinanorth2",
+    /** Uses the {@link RegionalAuthority} for the Azure 'chinaeast2' region. */
+    ChinaEast2 = "chinaeast2",
+    /** Uses the {@link RegionalAuthority} for the Azure 'germanycentral' region. */
+    GermanyCentral = "germanycentral",
+    /** Uses the {@link RegionalAuthority} for the Azure 'germanynortheast' region. */
+    GermanyNorthEast = "germanynortheast",
+    /** Uses the {@link RegionalAuthority} for the Azure 'usgovvirginia' region. */
+    GovernmentUSVirginia = "usgovvirginia",
+    /** Uses the {@link RegionalAuthority} for the Azure 'usgoviowa' region. */
+    GovernmentUSIowa = "usgoviowa",
+    /** Uses the {@link RegionalAuthority} for the Azure 'usgovarizona' region. */
+    GovernmentUSArizona = "usgovarizona",
+    /** Uses the {@link RegionalAuthority} for the Azure 'usgovtexas' region. */
+    GovernmentUSTexas = "usgovtexas",
+    /** Uses the {@link RegionalAuthority} for the Azure 'usdodeast' region. */
+    GovernmentUSDodEast = "usdodeast",
+    /** Uses the {@link RegionalAuthority} for the Azure 'usdodcentral' region. */
+    GovernmentUSDodCentral = "usdodcentral"
+}
+/**
+ * Calculates the correct regional authority based on the supplied value
+ * and the AZURE_REGIONAL_AUTHORITY_NAME environment variable.
+ *
+ * Values will be returned verbatim, except for {@link RegionalAuthority.AutoDiscoverRegion}
+ * which is mapped to a value MSAL can understand.
+ *
+ * @internal
+ */
+export declare function calculateRegionalAuthority(regionalAuthority?: string): string | undefined;
+//# sourceMappingURL=regionalAuthority.d.ts.map

package/dist/browser/regionalAuthority.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"regionalAuthority.d.ts","sourceRoot":"","sources":["../../src/regionalAuthority.ts"],"names":[],"mappings":"AAGA;;GAEG;AACH,oBAAY,iBAAiB;IAC3B,uDAAuD;IACvD,kBAAkB,uBAAuB;IACzC,wEAAwE;IACxE,MAAM,WAAW;IACjB,yEAAyE;IACzE,OAAO,YAAY;IACnB,2EAA2E;IAC3E,SAAS,cAAc;IACvB,wEAAwE;IACxE,MAAM,WAAW;IACjB,yEAAyE;IACzE,OAAO,YAAY;IACnB,gFAAgF;IAChF,cAAc,mBAAmB;IACjC,gFAAgF;IAChF,cAAc,mBAAmB;IACjC,+EAA+E;IAC/E,aAAa,kBAAkB;IAC/B,+EAA+E;IAC/E,aAAa,kBAAkB;IAC/B,4EAA4E;IAC5E,UAAU,eAAe;IACzB,6EAA6E;IAC7E,WAAW,gBAAgB;IAC3B,6EAA6E;IAC7E,WAAW,gBAAgB;IAC3B,4EAA4E;IAC5E,UAAU,eAAe;IACzB,yEAAyE;IACzE,OAAO,YAAY;IACnB,wEAAwE;IACxE,MAAM,WAAW;IACjB,+EAA+E;IAC/E,aAAa,kBAAkB;IAC/B,6EAA6E;IAC7E,WAAW,gBAAgB;IAC3B,kFAAkF;IAClF,gBAAgB,qBAAqB;IACrC,iFAAiF;IACjF,eAAe,oBAAoB;IACnC,8EAA8E;IAC9E,YAAY,iBAAiB;IAC7B,oFAAoF;IACpF,kBAAkB,uBAAuB;IACzC,4EAA4E;IAC5E,UAAU,eAAe;IACzB,4EAA4E;IAC5E,UAAU,eAAe;IACzB,0EAA0E;IAC1E,QAAQ,aAAa;IACrB,+EAA+E;IAC/E,aAAa,kBAAkB;IAC/B,2EAA2E;IAC3E,SAAS,cAAc;IACvB,2EAA2E;IAC3E,SAAS,cAAc;IACvB,+EAA+E;IAC/E,aAAa,kBAAkB;IAC/B,oFAAoF;IACpF,kBAAkB,uBAAuB;IACzC,kFAAkF;IAClF,gBAAgB,qBAAqB;IACrC,mFAAmF;IACnF,iBAAiB,sBAAsB;IACvC,8EAA8E;IAC9E,YAAY,iBAAiB;IAC7B,4EAA4E;IAC5E,UAAU,eAAe;IACzB,2EAA2E;IAC3E,SAAS,cAAc;IACvB,4EAA4E;IAC5E,UAAU,eAAe;IACzB,8EAA8E;IAC9E,YAAY,iBAAiB;IAC7B,4EAA4E;IAC5E,UAAU,eAAe;IACzB,0EAA0E;IAC1E,QAAQ,aAAa;IACrB,kFAAkF;IAClF,gBAAgB,qBAAqB;IACrC,iFAAiF;IACjF,eAAe,oBAAoB;IACnC,4EAA4E;IAC5E,UAAU,eAAe;IACzB,2EAA2E;IAC3E,SAAS,cAAc;IACvB,6EAA6E;IAC7E,WAAW,gBAAgB;IAC3B,4EAA4E;IAC5E,UAAU,eAAe;IACzB,gFAAgF;IAChF,cAAc,mBAAmB;IACjC,kFAAkF;IAClF,gBAAgB,qBAAqB;IACrC,+EAA+E;IAC/E,oBAAoB,kBAAkB;IACtC,2EAA2E;IAC3E,gBAAgB,cAAc;IAC9B,8EAA8E;IAC9E,mBAAmB,iBAAiB;IACpC,4EAA4E;IAC5E,iBAAiB,eAAe;IAChC,2EAA2E;IAC3E,mBAAmB,cAAc;IACjC,8EAA8E;IAC9E,sBAAsB,iBAAiB;CACxC;AAED;;;;;;;;GAQG;AACH,wBAAgB,0BAA0B,CAAC,iBAAiB,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAoBzF"}

package/dist/browser/tokenCredentialOptions.d.ts

@@ -0,0 +1,28 @@
+import type { CommonClientOptions } from "@azure/core-client";
+import type { LogPolicyOptions } from "@azure/core-rest-pipeline";
+/**
+ * Provides options to configure how the Identity library makes authentication
+ * requests to Microsoft Entra ID.
+ */
+export interface TokenCredentialOptions extends CommonClientOptions {
+    /**
+     * The authority host to use for authentication requests.
+     * Possible values are available through {@link AzureAuthorityHosts}.
+     * The default is "https://login.microsoftonline.com".
+     */
+    authorityHost?: string;
+    /**
+     * Allows users to configure settings for logging policy options, allow logging account information and personally identifiable information for customer support.
+     */
+    loggingOptions?: LogPolicyOptions & {
+        /**
+         * Allows logging account information once the authentication flow succeeds.
+         */
+        allowLoggingAccountIdentifiers?: boolean;
+        /**
+         * Allows logging personally identifiable information for customer support.
+         */
+        enableUnsafeSupportLogging?: boolean;
+    };
+}
+//# sourceMappingURL=tokenCredentialOptions.d.ts.map

package/dist/browser/tokenCredentialOptions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tokenCredentialOptions.d.ts","sourceRoot":"","sources":["../../src/tokenCredentialOptions.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAC9D,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAC;AAElE;;;GAGG;AACH,MAAM,WAAW,sBAAuB,SAAQ,mBAAmB;IACjE;;;;OAIG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB;;OAEG;IACH,cAAc,CAAC,EAAE,gBAAgB,GAAG;QAClC;;WAEG;QACH,8BAA8B,CAAC,EAAE,OAAO,CAAC;QACzC;;WAEG;QACH,0BAA0B,CAAC,EAAE,OAAO,CAAC;KACtC,CAAC;CACH"}

package/dist/browser/tokenProvider.d.ts

@@ -0,0 +1,38 @@
+import type { TokenCredential, TracingContext } from "@azure/core-auth";
+/**
+ * The options to configure the token provider.
+ */
+export interface GetBearerTokenProviderOptions {
+    /** The abort signal to abort requests to get tokens */
+    abortSignal?: AbortSignal;
+    /** The tracing options for the requests to get tokens */
+    tracingOptions?: {
+        /**
+         * Tracing Context for the current request to get a token.
+         */
+        tracingContext?: TracingContext;
+    };
+}
+/**
+ * Returns a callback that provides a bearer token.
+ * For example, the bearer token can be used to authenticate a request as follows:
+ * ```ts snippet:token_provider_example
+ * import { DefaultAzureCredential, getBearerTokenProvider } from "@azure/identity";
+ * import { createPipelineRequest } from "@azure/core-rest-pipeline";
+ *
+ * const credential = new DefaultAzureCredential();
+ * const scope = "https://cognitiveservices.azure.com/.default";
+ * const getAccessToken = getBearerTokenProvider(credential, scope);
+ * const token = await getAccessToken();
+ * // usage
+ * const request = createPipelineRequest({ url: "https://example.com" });
+ * request.headers.set("Authorization", `Bearer ${token}`);
+ * ```
+ *
+ * @param credential - The credential used to authenticate the request.
+ * @param scopes - The scopes required for the bearer token.
+ * @param options - Options to configure the token provider.
+ * @returns a callback that provides a bearer token.
+ */
+export declare function getBearerTokenProvider(credential: TokenCredential, scopes: string | string[], options?: GetBearerTokenProviderOptions): () => Promise<string>;
+//# sourceMappingURL=tokenProvider.d.ts.map

package/dist/browser/tokenProvider.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tokenProvider.d.ts","sourceRoot":"","sources":["../../src/tokenProvider.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAOxE;;GAEG;AACH,MAAM,WAAW,6BAA6B;IAC5C,uDAAuD;IACvD,WAAW,CAAC,EAAE,WAAW,CAAC;IAC1B,yDAAyD;IACzD,cAAc,CAAC,EAAE;QACf;;WAEG;QACH,cAAc,CAAC,EAAE,cAAc,CAAC;KACjC,CAAC;CACH;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAgB,sBAAsB,CACpC,UAAU,EAAE,eAAe,EAC3B,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,EACzB,OAAO,CAAC,EAAE,6BAA6B,GACtC,MAAM,OAAO,CAAC,MAAM,CAAC,CA6BvB"}

package/dist/browser/util/authHostEnv-browser.d.mts

@@ -0,0 +1,4 @@
+export declare function getAuthorityHostEnvironment(): {
+    authorityHost: string;
+} | undefined;
+//# sourceMappingURL=authHostEnv-browser.d.mts.map

package/dist/browser/util/authHostEnv-browser.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"authHostEnv-browser.d.mts","sourceRoot":"","sources":["../../../src/util/authHostEnv-browser.mts"],"names":[],"mappings":"AAOA,wBAAgB,2BAA2B,IAAI;IAAE,aAAa,EAAE,MAAM,CAAA;CAAE,GAAG,SAAS,CAEnF"}

package/dist/browser/util/authHostEnv-browser.mjs

@@ -0,0 +1,7 @@
+// Copyright (c) Microsoft Corporation.
+// Licensed under the MIT License.
+const BrowserNotSupportedError = new Error("getAuthorityHostEnvironment is not supported in the browser.");
+export function getAuthorityHostEnvironment() {
+    throw BrowserNotSupportedError;
+}
+//# sourceMappingURL=authHostEnv-browser.mjs.map

package/dist/browser/util/authHostEnv-browser.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"authHostEnv-browser.mjs","sourceRoot":"","sources":["../../../src/util/authHostEnv-browser.mts"],"names":[],"mappings":"AAAA,uCAAuC;AACvC,kCAAkC;AAElC,MAAM,wBAAwB,GAAG,IAAI,KAAK,CACxC,8DAA8D,CAC/D,CAAC;AAEF,MAAM,UAAU,2BAA2B;IACzC,MAAM,wBAAwB,CAAC;AACjC,CAAC","sourcesContent":["// Copyright (c) Microsoft Corporation.\n// Licensed under the MIT License.\n\nconst BrowserNotSupportedError = new Error(\n  \"getAuthorityHostEnvironment is not supported in the browser.\",\n);\n\nexport function getAuthorityHostEnvironment(): { authorityHost: string } | undefined {\n  throw BrowserNotSupportedError;\n}\n"]}

package/dist/browser/util/identityTokenEndpoint.d.ts

@@ -0,0 +1,2 @@
+export declare function getIdentityTokenEndpointSuffix(tenantId: string): string;
+//# sourceMappingURL=identityTokenEndpoint.d.ts.map

package/dist/browser/util/identityTokenEndpoint.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"identityTokenEndpoint.d.ts","sourceRoot":"","sources":["../../../src/util/identityTokenEndpoint.ts"],"names":[],"mappings":"AAGA,wBAAgB,8BAA8B,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAMvE"}

package/dist/browser/util/logging.d.ts

@@ -0,0 +1,70 @@
+import type { AzureLogger } from "@azure/logger";
+/**
+ * The AzureLogger used for all clients within the identity package
+ */
+export declare const logger: AzureLogger;
+interface EnvironmentAccumulator {
+    missing: string[];
+    assigned: string[];
+}
+/**
+ * Separates a list of environment variable names into a plain object with two arrays: an array of missing environment variables and another array with assigned environment variables.
+ * @param supportedEnvVars - List of environment variable names
+ */
+export declare function processEnvVars(supportedEnvVars: string[]): EnvironmentAccumulator;
+/**
+ * Based on a given list of environment variable names,
+ * logs the environment variables currently assigned during the usage of a credential that goes by the given name.
+ * @param credentialName - Name of the credential in use
+ * @param supportedEnvVars - List of environment variables supported by that credential
+ */
+export declare function logEnvVars(credentialName: string, supportedEnvVars: string[]): void;
+/**
+ * Formatting the success event on the credentials
+ */
+export declare function formatSuccess(scope: string | string[]): string;
+/**
+ * Formatting the success event on the credentials
+ */
+export declare function formatError(scope: string | string[] | undefined, error: Error | string): string;
+/**
+ * A CredentialLoggerInstance is a logger properly formatted to work in a credential's constructor, and its methods.
+ */
+export interface CredentialLoggerInstance {
+    title: string;
+    fullTitle: string;
+    info(message: string): void;
+    warning(message: string): void;
+    verbose(message: string): void;
+    error(err: string): void;
+}
+/**
+ * Generates a CredentialLoggerInstance.
+ *
+ * It logs with the format:
+ *
+ *   `[title] => [message]`
+ *
+ */
+export declare function credentialLoggerInstance(title: string, parent?: CredentialLoggerInstance, log?: AzureLogger): CredentialLoggerInstance;
+/**
+ * A CredentialLogger is a logger declared at the credential's constructor, and used at any point in the credential.
+ * It has all the properties of a CredentialLoggerInstance, plus other logger instances, one per method.
+ */
+export interface CredentialLogger extends CredentialLoggerInstance {
+    parent: AzureLogger;
+    getToken: CredentialLoggerInstance;
+}
+/**
+ * Generates a CredentialLogger, which is a logger declared at the credential's constructor, and used at any point in the credential.
+ * It has all the properties of a CredentialLoggerInstance, plus other logger instances, one per method.
+ *
+ * It logs with the format:
+ *
+ *   `[title] => [message]`
+ *   `[title] => getToken() => [message]`
+ *
+ */
+export declare function credentialLogger(title: string, log?: AzureLogger): CredentialLogger;
+export {};
+//# sourceMappingURL=logging.d.ts.map

package/dist/browser/util/logging.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"logging.d.ts","sourceRoot":"","sources":["../../../src/util/logging.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAGjD;;GAEG;AACH,eAAO,MAAM,MAAM,aAAiC,CAAC;AAErD,UAAU,sBAAsB;IAC9B,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,QAAQ,EAAE,MAAM,EAAE,CAAC;CACpB;AAED;;;GAGG;AACH,wBAAgB,cAAc,CAAC,gBAAgB,EAAE,MAAM,EAAE,GAAG,sBAAsB,CAYjF;AAED;;;;;GAKG;AACH,wBAAgB,UAAU,CAAC,cAAc,EAAE,MAAM,EAAE,gBAAgB,EAAE,MAAM,EAAE,GAAG,IAAI,CAKnF;AAED;;GAEG;AACH,wBAAgB,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,MAAM,CAE9D;AAED;;GAEG;AACH,wBAAgB,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,SAAS,EAAE,KAAK,EAAE,KAAK,GAAG,MAAM,GAAG,MAAM,CAM/F;AAED;;GAEG;AACH,MAAM,WAAW,wBAAwB;IACvC,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,OAAO,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,OAAO,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,KAAK,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B;AAED;;;;;;;GAOG;AACH,wBAAgB,wBAAwB,CACtC,KAAK,EAAE,MAAM,EACb,MAAM,CAAC,EAAE,wBAAwB,EACjC,GAAG,GAAE,WAAoB,GACxB,wBAAwB,CA2B1B;AAED;;;GAGG;AACH,MAAM,WAAW,gBAAiB,SAAQ,wBAAwB;IAChE,MAAM,EAAE,WAAW,CAAC;IACpB,QAAQ,EAAE,wBAAwB,CAAC;CACpC;AAED;;;;;;;;;GASG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,GAAE,WAAoB,GAAG,gBAAgB,CAO3F"}

package/dist/browser/util/processMultiTenantRequest-browser.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"processMultiTenantRequest-browser.d.mts","sourceRoot":"","sources":["../../../src/util/processMultiTenantRequest-browser.mts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAMxD;;;;;GAKG;AACH,wBAAgB,yBAAyB,CACvC,QAAQ,CAAC,EAAE,MAAM,EACjB,eAAe,CAAC,EAAE,eAAe,EACjC,4BAA4B,GAAE,MAAM,EAAO,GAC1C,MAAM,GAAG,SAAS,CAkBpB"}

package/dist/browser/util/processMultiTenantRequest-browser.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"processMultiTenantRequest-browser.mjs","sourceRoot":"","sources":["../../../src/util/processMultiTenantRequest-browser.mts"],"names":[],"mappings":"AAAA,uCAAuC;AACvC,kCAAkC;AAIlC,SAAS,+BAA+B,CAAC,QAAgB;IACvD,OAAO,yEAAyE,QAAQ,qMAAqM,CAAC;AAChS,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,yBAAyB,CACvC,QAAiB,EACjB,eAAiC,EACjC,+BAAyC,EAAE;;IAE3C,IAAI,gBAAoC,CAAC;IACzC,IAAI,QAAQ,KAAK,MAAM,EAAE,CAAC;QACxB,gBAAgB,GAAG,QAAQ,CAAC;IAC9B,CAAC;SAAM,CAAC;QACN,gBAAgB,GAAG,MAAA,eAAe,aAAf,eAAe,uBAAf,eAAe,CAAE,QAAQ,mCAAI,QAAQ,CAAC;IAC3D,CAAC;IAED,IACE,QAAQ;QACR,gBAAgB,KAAK,QAAQ;QAC7B,CAAC,4BAA4B,CAAC,QAAQ,CAAC,GAAG,CAAC;QAC3C,CAAC,4BAA4B,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,gBAAiB,CAAC,KAAK,CAAC,CAAC,EACnF,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC7D,CAAC;IAED,OAAO,gBAAgB,CAAC;AAC1B,CAAC","sourcesContent":["// Copyright (c) Microsoft Corporation.\n// Licensed under the MIT License.\n\nimport type { GetTokenOptions } from \"@azure/core-auth\";\n\nfunction createConfigurationErrorMessage(tenantId: string): string {\n  return `The current credential is not configured to acquire tokens for tenant ${tenantId}. To enable acquiring tokens for this tenant add it to the AdditionallyAllowedTenants on the credential options, or add \"*\" to AdditionallyAllowedTenants to allow acquiring tokens for any tenant.`;\n}\n\n/**\n * Of getToken contains a tenantId, this functions allows picking this tenantId as the appropriate for authentication,\n * unless multitenant authentication has been disabled through the AZURE_IDENTITY_DISABLE_MULTITENANTAUTH (on Node.js),\n * or unless the original tenant Id is `adfs`.\n * @internal\n */\nexport function processMultiTenantRequest(\n  tenantId?: string,\n  getTokenOptions?: GetTokenOptions,\n  additionallyAllowedTenantIds: string[] = [],\n): string | undefined {\n  let resolvedTenantId: string | undefined;\n  if (tenantId === \"adfs\") {\n    resolvedTenantId = tenantId;\n  } else {\n    resolvedTenantId = getTokenOptions?.tenantId ?? tenantId;\n  }\n\n  if (\n    tenantId &&\n    resolvedTenantId !== tenantId &&\n    !additionallyAllowedTenantIds.includes(\"*\") &&\n    !additionallyAllowedTenantIds.some((t) => t.localeCompare(resolvedTenantId!) === 0)\n  ) {\n    throw new Error(createConfigurationErrorMessage(tenantId));\n  }\n\n  return resolvedTenantId;\n}\n"]}

package/dist/browser/util/processMultiTenantRequest.d.ts

@@ -0,0 +1,9 @@
+import type { GetTokenOptions } from "@azure/core-auth";
+/**
+ * Of getToken contains a tenantId, this functions allows picking this tenantId as the appropriate for authentication,
+ * unless multitenant authentication has been disabled through the AZURE_IDENTITY_DISABLE_MULTITENANTAUTH (on Node.js),
+ * or unless the original tenant Id is `adfs`.
+ * @internal
+ */
+export declare function processMultiTenantRequest(tenantId?: string, getTokenOptions?: GetTokenOptions, additionallyAllowedTenantIds?: string[]): string | undefined;
+//# sourceMappingURL=processMultiTenantRequest-browser.d.mts.map

package/dist/browser/util/processMultiTenantRequest.js

@@ -0,0 +1,29 @@
+// Copyright (c) Microsoft Corporation.
+// Licensed under the MIT License.
+function createConfigurationErrorMessage(tenantId) {
+    return `The current credential is not configured to acquire tokens for tenant ${tenantId}. To enable acquiring tokens for this tenant add it to the AdditionallyAllowedTenants on the credential options, or add "*" to AdditionallyAllowedTenants to allow acquiring tokens for any tenant.`;
+}
+/**
+ * Of getToken contains a tenantId, this functions allows picking this tenantId as the appropriate for authentication,
+ * unless multitenant authentication has been disabled through the AZURE_IDENTITY_DISABLE_MULTITENANTAUTH (on Node.js),
+ * or unless the original tenant Id is `adfs`.
+ * @internal
+ */
+export function processMultiTenantRequest(tenantId, getTokenOptions, additionallyAllowedTenantIds = []) {
+    var _a;
+    let resolvedTenantId;
+    if (tenantId === "adfs") {
+        resolvedTenantId = tenantId;
+    }
+    else {
+        resolvedTenantId = (_a = getTokenOptions === null || getTokenOptions === void 0 ? void 0 : getTokenOptions.tenantId) !== null && _a !== void 0 ? _a : tenantId;
+    }
+    if (tenantId &&
+        resolvedTenantId !== tenantId &&
+        !additionallyAllowedTenantIds.includes("*") &&
+        !additionallyAllowedTenantIds.some((t) => t.localeCompare(resolvedTenantId) === 0)) {
+        throw new Error(createConfigurationErrorMessage(tenantId));
+    }
+    return resolvedTenantId;
+}
+//# sourceMappingURL=processMultiTenantRequest-browser.mjs.map

package/dist/browser/util/processUtils.d.ts

@@ -0,0 +1,13 @@
+import * as childProcess from "child_process";
+/**
+ * Easy to mock childProcess utils.
+ * @internal
+ */
+export declare const processUtils: {
+    /**
+     * Promisifying childProcess.execFile
+     * @internal
+     */
+    execFile(file: string, params: string[], options?: childProcess.ExecFileOptionsWithStringEncoding): Promise<string | Buffer>;
+};
+//# sourceMappingURL=processUtils.d.ts.map

package/dist/browser/util/processUtils.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"processUtils.d.ts","sourceRoot":"","sources":["../../../src/util/processUtils.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,YAAY,MAAM,eAAe,CAAC;AAE9C;;;GAGG;AACH,eAAO,MAAM,YAAY;IACvB;;;OAGG;mBAEK,MAAM,UACJ,MAAM,EAAE,YACN,YAAY,CAAC,iCAAiC,GACvD,OAAO,CAAC,MAAM,GAAG,MAAM,CAAC;CAiB5B,CAAC"}

package/dist/browser/util/scopeUtils.d.ts

@@ -0,0 +1,17 @@
+import type { CredentialLogger } from "./logging.js";
+/**
+ * Ensures the scopes value is an array.
+ * @internal
+ */
+export declare function ensureScopes(scopes: string | string[]): string[];
+/**
+ * Throws if the received scope is not valid.
+ * @internal
+ */
+export declare function ensureValidScopeForDevTimeCreds(scope: string, logger: CredentialLogger): void;
+/**
+ * Returns the resource out of a scope.
+ * @internal
+ */
+export declare function getScopeResource(scope: string): string;
+//# sourceMappingURL=scopeUtils.d.ts.map

package/dist/browser/util/scopeUtils.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"scopeUtils.d.ts","sourceRoot":"","sources":["../../../src/util/scopeUtils.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAGrD;;;GAGG;AACH,wBAAgB,YAAY,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,MAAM,EAAE,CAEhE;AAED;;;GAGG;AACH,wBAAgB,+BAA+B,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,gBAAgB,GAAG,IAAI,CAM7F;AAED;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAEtD"}

package/dist/browser/util/scopeUtils.js

@@ -0,0 +1,29 @@
+// Copyright (c) Microsoft Corporation.
+// Licensed under the MIT License.
+import { formatError } from "./logging.js";
+/**
+ * Ensures the scopes value is an array.
+ * @internal
+ */
+export function ensureScopes(scopes) {
+    return Array.isArray(scopes) ? scopes : [scopes];
+}
+/**
+ * Throws if the received scope is not valid.
+ * @internal
+ */
+export function ensureValidScopeForDevTimeCreds(scope, logger) {
+    if (!scope.match(/^[0-9a-zA-Z-_.:/]+$/)) {
+        const error = new Error("Invalid scope was specified by the user or calling client");
+        logger.getToken.info(formatError(scope, error));
+        throw error;
+    }
+}
+/**
+ * Returns the resource out of a scope.
+ * @internal
+ */
+export function getScopeResource(scope) {
+    return scope.replace(/\/.default$/, "");
+}
+//# sourceMappingURL=scopeUtils.js.map

package/dist/browser/util/scopeUtils.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scopeUtils.js","sourceRoot":"","sources":["../../../src/util/scopeUtils.ts"],"names":[],"mappings":"AAAA,uCAAuC;AACvC,kCAAkC;AAGlC,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAE3C;;;GAGG;AACH,MAAM,UAAU,YAAY,CAAC,MAAyB;IACpD,OAAO,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;AACnD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,+BAA+B,CAAC,KAAa,EAAE,MAAwB;IACrF,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,qBAAqB,CAAC,EAAE,CAAC;QACxC,MAAM,KAAK,GAAG,IAAI,KAAK,CAAC,2DAA2D,CAAC,CAAC;QACrF,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC;QAChD,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAAC,KAAa;IAC5C,OAAO,KAAK,CAAC,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC;AAC1C,CAAC","sourcesContent":["// Copyright (c) Microsoft Corporation.\n// Licensed under the MIT License.\n\nimport type { CredentialLogger } from \"./logging.js\";\nimport { formatError } from \"./logging.js\";\n\n/**\n * Ensures the scopes value is an array.\n * @internal\n */\nexport function ensureScopes(scopes: string | string[]): string[] {\n  return Array.isArray(scopes) ? scopes : [scopes];\n}\n\n/**\n * Throws if the received scope is not valid.\n * @internal\n */\nexport function ensureValidScopeForDevTimeCreds(scope: string, logger: CredentialLogger): void {\n  if (!scope.match(/^[0-9a-zA-Z-_.:/]+$/)) {\n    const error = new Error(\"Invalid scope was specified by the user or calling client\");\n    logger.getToken.info(formatError(scope, error));\n    throw error;\n  }\n}\n\n/**\n * Returns the resource out of a scope.\n * @internal\n */\nexport function getScopeResource(scope: string): string {\n  return scope.replace(/\\/.default$/, \"\");\n}\n"]}

package/dist/browser/util/subscriptionUtils.d.ts

@@ -0,0 +1,6 @@
+import type { CredentialLogger } from "./logging.js";
+/**
+ * @internal
+ */
+export declare function checkSubscription(logger: CredentialLogger, subscription: string): void;
+//# sourceMappingURL=subscriptionUtils.d.ts.map

package/dist/browser/util/subscriptionUtils.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"subscriptionUtils.d.ts","sourceRoot":"","sources":["../../../src/util/subscriptionUtils.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAGrD;;GAEG;AACH,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,gBAAgB,EAAE,YAAY,EAAE,MAAM,GAAG,IAAI,CAQtF"}

package/dist/browser/util/subscriptionUtils.js

@@ -0,0 +1,14 @@
+// Copyright (c) Microsoft Corporation.
+// Licensed under the MIT License.
+import { formatError } from "./logging.js";
+/**
+ * @internal
+ */
+export function checkSubscription(logger, subscription) {
+    if (!subscription.match(/^[0-9a-zA-Z-._ ]+$/)) {
+        const error = new Error("Invalid subscription provided. You can locate your subscription by following the instructions listed here: https://learn.microsoft.com/azure/azure-portal/get-subscription-tenant-id.");
+        logger.info(formatError("", error));
+        throw error;
+    }
+}
+//# sourceMappingURL=subscriptionUtils.js.map

package/dist/browser/util/subscriptionUtils.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"subscriptionUtils.js","sourceRoot":"","sources":["../../../src/util/subscriptionUtils.ts"],"names":[],"mappings":"AAAA,uCAAuC;AACvC,kCAAkC;AAGlC,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAE3C;;GAEG;AACH,MAAM,UAAU,iBAAiB,CAAC,MAAwB,EAAE,YAAoB;IAC9E,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,oBAAoB,CAAC,EAAE,CAAC;QAC9C,MAAM,KAAK,GAAG,IAAI,KAAK,CACrB,uLAAuL,CACxL,CAAC;QACF,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC,CAAC;QACpC,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC","sourcesContent":["// Copyright (c) Microsoft Corporation.\n// Licensed under the MIT License.\n\nimport type { CredentialLogger } from \"./logging.js\";\nimport { formatError } from \"./logging.js\";\n\n/**\n * @internal\n */\nexport function checkSubscription(logger: CredentialLogger, subscription: string): void {\n  if (!subscription.match(/^[0-9a-zA-Z-._ ]+$/)) {\n    const error = new Error(\n      \"Invalid subscription provided. You can locate your subscription by following the instructions listed here: https://learn.microsoft.com/azure/azure-portal/get-subscription-tenant-id.\",\n    );\n    logger.info(formatError(\"\", error));\n    throw error;\n  }\n}\n"]}

package/dist/browser/util/tenantIdUtils.d.ts

@@ -0,0 +1,15 @@
+import type { CredentialLogger } from "./logging.js";
+export { processMultiTenantRequest } from "./processMultiTenantRequest.js";
+/**
+ * @internal
+ */
+export declare function checkTenantId(logger: CredentialLogger, tenantId: string): void;
+/**
+ * @internal
+ */
+export declare function resolveTenantId(logger: CredentialLogger, tenantId?: string, clientId?: string): string;
+/**
+ * @internal
+ */
+export declare function resolveAdditionallyAllowedTenantIds(additionallyAllowedTenants?: string[]): string[];
+//# sourceMappingURL=tenantIdUtils.d.ts.map

package/dist/browser/util/tenantIdUtils.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tenantIdUtils.d.ts","sourceRoot":"","sources":["../../../src/util/tenantIdUtils.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAErD,OAAO,EAAE,yBAAyB,EAAE,MAAM,gCAAgC,CAAC;AAE3E;;GAEG;AACH,wBAAgB,aAAa,CAAC,MAAM,EAAE,gBAAgB,EAAE,QAAQ,EAAE,MAAM,GAAG,IAAI,CAQ9E;AAED;;GAEG;AACH,wBAAgB,eAAe,CAC7B,MAAM,EAAE,gBAAgB,EACxB,QAAQ,CAAC,EAAE,MAAM,EACjB,QAAQ,CAAC,EAAE,MAAM,GAChB,MAAM,CAYR;AAED;;GAEG;AACH,wBAAgB,mCAAmC,CACjD,0BAA0B,CAAC,EAAE,MAAM,EAAE,GACpC,MAAM,EAAE,CAUV"}