@azure/msal-browser 3.1.0 → 3.3.0

package/dist/naa/BridgeRequestEnvelope.d.ts

@@ -0,0 +1,14 @@
+import { TokenRequest } from "./TokenRequest";
+import { AccountByHomeIdRequest, AccountByLocalIdRequest, AccountByUsernameRequest } from "./AccountRequests";
+export type BridgeMethods = "GetToken" | "GetActiveAccount" | "GetAllAccounts" | "GetAccountByHomeId" | "GetAccountByLocalId" | "GetAccountByUsername" | "GetInitContext" | "GetTokenPopup";
+export type BridgeRequestEnvelope = {
+    messageType: "NestedAppAuthRequest";
+    method: BridgeMethods;
+    sendTime?: number;
+    clientLibrary?: string;
+    clientLibraryVersion?: string;
+    requestId: string;
+    body?: TokenRequest | AccountByHomeIdRequest | AccountByLocalIdRequest | AccountByUsernameRequest;
+};
+export declare function isBridgeRequestEnvelope(obj: unknown): obj is BridgeRequestEnvelope;
+//# sourceMappingURL=BridgeRequestEnvelope.d.ts.map

package/dist/naa/BridgeRequestEnvelope.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"BridgeRequestEnvelope.d.ts","sourceRoot":"","sources":["../../src/naa/BridgeRequestEnvelope.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC9C,OAAO,EACH,sBAAsB,EACtB,uBAAuB,EACvB,wBAAwB,EAC3B,MAAM,mBAAmB,CAAC;AAE3B,MAAM,MAAM,aAAa,GACnB,UAAU,GACV,kBAAkB,GAClB,gBAAgB,GAChB,oBAAoB,GACpB,qBAAqB,GACrB,sBAAsB,GACtB,gBAAgB,GAChB,eAAe,CAAC;AAEtB,MAAM,MAAM,qBAAqB,GAAG;IAChC,WAAW,EAAE,sBAAsB,CAAC;IACpC,MAAM,EAAE,aAAa,CAAC;IACtB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,CAAC,EACC,YAAY,GACZ,sBAAsB,GACtB,uBAAuB,GACvB,wBAAwB,CAAC;CAClC,CAAC;AAEF,wBAAgB,uBAAuB,CACnC,GAAG,EAAE,OAAO,GACb,GAAG,IAAI,qBAAqB,CAO9B"}

package/dist/naa/BridgeResponseEnvelope.d.ts

@@ -0,0 +1,11 @@
+import { BridgeError } from "./BridgeError";
+import { TokenResponse } from "./TokenResponse";
+import { AccountInfo } from "./AccountInfo";
+import { InitializeBridgeResponse } from "./InitializeBridgeResponse";
+export type BridgeResponseEnvelope = {
+    messageType: "NestedAppAuthResponse";
+    requestId: string;
+    success: boolean;
+    body: TokenResponse | BridgeError | AccountInfo | AccountInfo[] | InitializeBridgeResponse;
+};
+//# sourceMappingURL=BridgeResponseEnvelope.d.ts.map

package/dist/naa/BridgeResponseEnvelope.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"BridgeResponseEnvelope.d.ts","sourceRoot":"","sources":["../../src/naa/BridgeResponseEnvelope.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAC5C,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAChD,OAAO,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAC5C,OAAO,EAAE,wBAAwB,EAAE,MAAM,4BAA4B,CAAC;AAEtE,MAAM,MAAM,sBAAsB,GAAG;IACjC,WAAW,EAAE,uBAAuB,CAAC;IACrC,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,OAAO,CAAC;IACjB,IAAI,EACE,aAAa,GACb,WAAW,GACX,WAAW,GACX,WAAW,EAAE,GACb,wBAAwB,CAAC;CAClC,CAAC"}

package/dist/naa/BridgeStatusCode.d.ts

@@ -0,0 +1,11 @@
+export declare enum BridgeStatusCode {
+    USER_INTERACTION_REQUIRED = "USER_INTERACTION_REQUIRED",
+    USER_CANCEL = "USER_CANCEL",
+    NO_NETWORK = "NO_NETWORK",
+    TRANSIENT_ERROR = "TRANSIENT_ERROR",
+    PERSISTENT_ERROR = "PERSISTENT_ERROR",
+    DISABLED = "DISABLED",
+    ACCOUNT_UNAVAILABLE = "ACCOUNT_UNAVAILABLE",
+    NESTED_APP_AUTH_UNAVAILABLE = "NESTED_APP_AUTH_UNAVAILABLE"
+}
+//# sourceMappingURL=BridgeStatusCode.d.ts.map

package/dist/naa/BridgeStatusCode.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"BridgeStatusCode.d.ts","sourceRoot":"","sources":["../../src/naa/BridgeStatusCode.ts"],"names":[],"mappings":"AAKA,oBAAY,gBAAgB;IACxB,yBAAyB,8BAA8B;IACvD,WAAW,gBAAgB;IAC3B,UAAU,eAAe;IACzB,eAAe,oBAAoB;IACnC,gBAAgB,qBAAqB;IACrC,QAAQ,aAAa;IACrB,mBAAmB,wBAAwB;IAC3C,2BAA2B,gCAAgC;CAC9D"}

package/dist/naa/BridgeStatusCode.mjs

@@ -0,0 +1,20 @@
+/*! @azure/msal-browser v3.3.0 2023-10-20 */
+'use strict';
+/*
+ * Copyright (c) Microsoft Corporation. All rights reserved.
+ * Licensed under the MIT License.
+ */
+var BridgeStatusCode;
+(function (BridgeStatusCode) {
+    BridgeStatusCode["USER_INTERACTION_REQUIRED"] = "USER_INTERACTION_REQUIRED";
+    BridgeStatusCode["USER_CANCEL"] = "USER_CANCEL";
+    BridgeStatusCode["NO_NETWORK"] = "NO_NETWORK";
+    BridgeStatusCode["TRANSIENT_ERROR"] = "TRANSIENT_ERROR";
+    BridgeStatusCode["PERSISTENT_ERROR"] = "PERSISTENT_ERROR";
+    BridgeStatusCode["DISABLED"] = "DISABLED";
+    BridgeStatusCode["ACCOUNT_UNAVAILABLE"] = "ACCOUNT_UNAVAILABLE";
+    BridgeStatusCode["NESTED_APP_AUTH_UNAVAILABLE"] = "NESTED_APP_AUTH_UNAVAILABLE";
+})(BridgeStatusCode || (BridgeStatusCode = {}));
+
+export { BridgeStatusCode };
+//# sourceMappingURL=BridgeStatusCode.mjs.map

package/dist/naa/BridgeStatusCode.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"BridgeStatusCode.mjs","sources":["../../src/naa/BridgeStatusCode.ts"],"sourcesContent":[null],"names":[],"mappings":";;AAKA;AACI;AACA;AACA;AACA,IAAA,iBAAmC;AACnC,CAAA,UAAA,gBAAqC,EAAA;AACrC,IAAA,gBAAqB,CAAA,2BAAA,CAAA,GAAA,2BAAA,CAAA;AACrB,IAAA,gBAAA,CAAA,aAA2C,CAAA,GAAA,aAAA,CAAA;AAC3C,IAAA,gBAAA,CAAA,YAA2D,CAAA,GAAA,YAAA,CAAA;AAC9D,IAAA,gBAAA,CAAA,iBAAA,CAAA,GAAA,iBAAA,CAAA;;;;;;;;;"}

package/dist/naa/IBridgeProxy.d.ts

@@ -0,0 +1,11 @@
+import { AccountInfo } from "./AccountInfo";
+import { AccountByHomeIdRequest, AccountByLocalIdRequest, AccountByUsernameRequest } from "./AccountRequests";
+import { TokenRequest } from "./TokenRequest";
+import { TokenResponse } from "./TokenResponse";
+export interface IBridgeProxy {
+    getTokenInteractive(request: TokenRequest): Promise<TokenResponse>;
+    getTokenSilent(request: TokenRequest): Promise<TokenResponse>;
+    getAccountInfo(request: AccountByHomeIdRequest | AccountByLocalIdRequest | AccountByUsernameRequest): Promise<AccountInfo>;
+    getActiveAccount(): Promise<AccountInfo>;
+}
+//# sourceMappingURL=IBridgeProxy.d.ts.map

package/dist/naa/IBridgeProxy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"IBridgeProxy.d.ts","sourceRoot":"","sources":["../../src/naa/IBridgeProxy.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAC5C,OAAO,EACH,sBAAsB,EACtB,uBAAuB,EACvB,wBAAwB,EAC3B,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC9C,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAEhD,MAAM,WAAW,YAAY;IACzB,mBAAmB,CAAC,OAAO,EAAE,YAAY,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC;IACnE,cAAc,CAAC,OAAO,EAAE,YAAY,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC;IAC9D,cAAc,CACV,OAAO,EACD,sBAAsB,GACtB,uBAAuB,GACvB,wBAAwB,GAC/B,OAAO,CAAC,WAAW,CAAC,CAAC;IACxB,gBAAgB,IAAI,OAAO,CAAC,WAAW,CAAC,CAAC;CAC5C"}

package/dist/naa/InitializeBridgeResponse.d.ts

@@ -0,0 +1,7 @@
+import { BridgeCapabilities } from "./BridgeCapabilities";
+export interface InitializeBridgeResponse {
+    capabilities: BridgeCapabilities;
+    sdkName: string;
+    sdkVersion: string;
+}
+//# sourceMappingURL=InitializeBridgeResponse.d.ts.map

package/dist/naa/InitializeBridgeResponse.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"InitializeBridgeResponse.d.ts","sourceRoot":"","sources":["../../src/naa/InitializeBridgeResponse.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAE1D,MAAM,WAAW,wBAAwB;IACrC,YAAY,EAAE,kBAAkB,CAAC;IACjC,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;CACtB"}

package/dist/naa/TokenRequest.d.ts

@@ -0,0 +1,22 @@
+export type TokenRequest = {
+    userObjectId?: string;
+    clientId: string;
+    authority?: string;
+    scope: string;
+    correlationId: string;
+    prompt?: string;
+    nonce?: string;
+    claims?: string;
+    state?: string;
+    reqCnf?: string;
+    keyId?: string;
+    authenticationScheme?: string;
+    shrClaims?: string;
+    shrNonce?: string;
+    clientCapabilities?: string[];
+    resourceRequestMethod?: string;
+    resourceRequestUri?: string;
+    extendedExpiryToken?: boolean;
+    extraParameters?: Map<string, string>;
+};
+//# sourceMappingURL=TokenRequest.d.ts.map

package/dist/naa/TokenRequest.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"TokenRequest.d.ts","sourceRoot":"","sources":["../../src/naa/TokenRequest.ts"],"names":[],"mappings":"AAKA,MAAM,MAAM,YAAY,GAAG;IACvB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,MAAM,CAAC;IACd,aAAa,EAAE,MAAM,CAAC;IACtB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,kBAAkB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC9B,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,mBAAmB,CAAC,EAAE,OAAO,CAAC;IAC9B,eAAe,CAAC,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACzC,CAAC"}

package/dist/naa/TokenResponse.d.ts

@@ -0,0 +1,17 @@
+import { AccountInfo } from "./AccountInfo";
+export type TokenResponse = {
+    access_token: string;
+    account: AccountInfo;
+    client_info: string;
+    expires_in: number;
+    id_token: string;
+    properties: TokenResponseProperties | null;
+    scope: string;
+    state: string;
+    shr?: string;
+    extendedLifetimeToken?: boolean;
+};
+export type TokenResponseProperties = {
+    MATS?: string;
+};
+//# sourceMappingURL=TokenResponse.d.ts.map

package/dist/naa/TokenResponse.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"TokenResponse.d.ts","sourceRoot":"","sources":["../../src/naa/TokenResponse.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAE5C,MAAM,MAAM,aAAa,GAAG;IACxB,YAAY,EAAE,MAAM,CAAC;IACrB,OAAO,EAAE,WAAW,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,uBAAuB,GAAG,IAAI,CAAC;IAC3C,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,qBAAqB,CAAC,EAAE,OAAO,CAAC;CACnC,CAAC;AAEF,MAAM,MAAM,uBAAuB,GAAG;IAClC,IAAI,CAAC,EAAE,MAAM,CAAC;CACjB,CAAC"}

package/dist/naa/mapping/NestedAppAuthAdapter.d.ts

@@ -0,0 +1,26 @@
+import { TokenRequest } from "../TokenRequest";
+import { AccountInfo as NaaAccountInfo } from "../AccountInfo";
+import { RedirectRequest } from "../../request/RedirectRequest";
+import { PopupRequest } from "../../request/PopupRequest";
+import { TokenResponse } from "../TokenResponse";
+import { AccountInfo as MsalAccountInfo, AuthError, ClientAuthError, ClientConfigurationError, InteractionRequiredAuthError, ServerError, ICrypto, Logger } from "@azure/msal-common";
+import { SilentRequest } from "../../request/SilentRequest";
+import { AuthenticationResult } from "../../response/AuthenticationResult";
+export declare class NestedAppAuthAdapter {
+    protected crypto: ICrypto;
+    protected logger: Logger;
+    protected clientId: string;
+    protected clientCapabilities: string[];
+    constructor(clientId: string, clientCapabilities: string[], crypto: ICrypto, logger: Logger);
+    toNaaSilentTokenRequest(request: SilentRequest): TokenRequest;
+    toNaaTokenRequest(request: PopupRequest | RedirectRequest): TokenRequest;
+    fromNaaTokenResponse(request: TokenRequest, response: TokenResponse): AuthenticationResult;
+    fromNaaAccountInfo(fromAccount: NaaAccountInfo): MsalAccountInfo;
+    /**
+     *
+     * @param error BridgeError
+     * @returns AuthError, ClientAuthError, ClientConfigurationError, ServerError, InteractionRequiredError
+     */
+    fromBridgeError(error: unknown): AuthError | ClientAuthError | ClientConfigurationError | ServerError | InteractionRequiredAuthError;
+}
+//# sourceMappingURL=NestedAppAuthAdapter.d.ts.map

package/dist/naa/mapping/NestedAppAuthAdapter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"NestedAppAuthAdapter.d.ts","sourceRoot":"","sources":["../../../src/naa/mapping/NestedAppAuthAdapter.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAC/C,OAAO,EAAE,WAAW,IAAI,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAC/D,OAAO,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AAChE,OAAO,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAC;AAC1D,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACjD,OAAO,EACH,WAAW,IAAI,eAAe,EAC9B,SAAS,EACT,eAAe,EACf,wBAAwB,EACxB,4BAA4B,EAC5B,WAAW,EAEX,OAAO,EACP,MAAM,EAIT,MAAM,oBAAoB,CAAC;AAG5B,OAAO,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AAC5D,OAAO,EAAE,oBAAoB,EAAE,MAAM,qCAAqC,CAAC;AAG3E,qBAAa,oBAAoB;IAC7B,SAAS,CAAC,MAAM,EAAE,OAAO,CAAC;IAC1B,SAAS,CAAC,MAAM,EAAE,MAAM,CAAC;IACzB,SAAS,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC3B,SAAS,CAAC,kBAAkB,EAAE,MAAM,EAAE,CAAC;gBAGnC,QAAQ,EAAE,MAAM,EAChB,kBAAkB,EAAE,MAAM,EAAE,EAC5B,MAAM,EAAE,OAAO,EACf,MAAM,EAAE,MAAM;IAQX,uBAAuB,CAAC,OAAO,EAAE,aAAa,GAAG,YAAY;IAmC7D,iBAAiB,CACpB,OAAO,EAAE,YAAY,GAAG,eAAe,GACxC,YAAY;IAkCR,oBAAoB,CACvB,OAAO,EAAE,YAAY,EACrB,QAAQ,EAAE,aAAa,GACxB,oBAAoB;IAwDhB,kBAAkB,CAAC,WAAW,EAAE,cAAc,GAAG,eAAe;IAyBvE;;;;OAIG;IACI,eAAe,CAClB,KAAK,EAAE,OAAO,GAEZ,SAAS,GACT,eAAe,GACf,wBAAwB,GACxB,WAAW,GACX,4BAA4B;CAoCrC"}

package/dist/naa/mapping/NestedAppAuthAdapter.mjs

@@ -0,0 +1,178 @@
+/*! @azure/msal-browser v3.3.0 2023-10-20 */
+'use strict';
+import { TimeUtils, AuthToken, AuthError, InteractionRequiredAuthError, ServerError, ClientAuthError, ClientAuthErrorCodes } from '@azure/msal-common';
+import { isBridgeError } from '../BridgeError.mjs';
+import { BridgeStatusCode } from '../BridgeStatusCode.mjs';
+
+/*
+ * Copyright (c) Microsoft Corporation. All rights reserved.
+ * Licensed under the MIT License.
+ */
+class NestedAppAuthAdapter {
+    constructor(clientId, clientCapabilities, crypto, logger) {
+        this.clientId = clientId;
+        this.clientCapabilities = clientCapabilities;
+        this.crypto = crypto;
+        this.logger = logger;
+    }
+    toNaaSilentTokenRequest(request) {
+        let extraParams;
+        if (request.extraQueryParameters === undefined) {
+            extraParams = new Map();
+        }
+        else {
+            extraParams = new Map(Object.entries(request.extraQueryParameters));
+        }
+        /**
+         * Need to get information about the client to populate request correctly
+         * For example: client id, client capabilities
+         */
+        const tokenRequest = {
+            userObjectId: request.account?.homeAccountId,
+            clientId: this.clientId,
+            authority: request.authority,
+            scope: request.scopes.join(" "),
+            correlationId: request.correlationId !== undefined
+                ? request.correlationId
+                : this.crypto.createNewGuid(),
+            prompt: request.prompt !== undefined ? request.prompt : "",
+            claims: request.claims !== undefined ? request.claims : "",
+            authenticationScheme: request.authenticationScheme !== undefined
+                ? request.authenticationScheme
+                : "",
+            clientCapabilities: this.clientCapabilities,
+            extraParameters: extraParams,
+        };
+        return tokenRequest;
+    }
+    toNaaTokenRequest(request) {
+        let extraParams;
+        if (request.extraQueryParameters === undefined) {
+            extraParams = new Map();
+        }
+        else {
+            extraParams = new Map(Object.entries(request.extraQueryParameters));
+        }
+        const tokenRequest = {
+            userObjectId: request.account?.homeAccountId,
+            clientId: this.clientId,
+            authority: request.authority,
+            scope: request.scopes.join(" "),
+            correlationId: request.correlationId !== undefined
+                ? request.correlationId
+                : "",
+            prompt: request.prompt !== undefined ? request.prompt : "",
+            nonce: request.nonce !== undefined ? request.nonce : "",
+            claims: request.claims !== undefined ? request.claims : "",
+            state: request.state !== undefined ? request.state : "",
+            authenticationScheme: request.authenticationScheme !== undefined
+                ? request.authenticationScheme
+                : "",
+            clientCapabilities: undefined,
+            extraParameters: extraParams,
+        };
+        return tokenRequest;
+    }
+    fromNaaTokenResponse(request, response) {
+        const expiresOn = new Date(TimeUtils.nowSeconds() + (response.expires_in || 0) * 1000);
+        const account = this.fromNaaAccountInfo(response.account);
+        const authenticationResult = {
+            authority: response.account.environment,
+            uniqueId: response.account.homeAccountId,
+            tenantId: response.account.tenantId,
+            scopes: response.scope.split(" "),
+            account: this.fromNaaAccountInfo(response.account),
+            idToken: response.id_token !== undefined ? response.id_token : "",
+            idTokenClaims: account.idTokenClaims !== undefined
+                ? account.idTokenClaims
+                : {},
+            accessToken: response.access_token,
+            fromCache: true,
+            expiresOn: expiresOn,
+            tokenType: request.authenticationScheme !== undefined
+                ? request.authenticationScheme
+                : "Bearer",
+            correlationId: request.correlationId,
+            requestId: "",
+            extExpiresOn: expiresOn,
+            state: response.state,
+        };
+        return authenticationResult;
+    }
+    /*
+     *  export type AccountInfo = {
+     *     homeAccountId: string;
+     *     environment: string;
+     *     tenantId: string;
+     *     username: string;
+     *     localAccountId: string;
+     *     name?: string;
+     *     idToken?: string;
+     *     idTokenClaims?: TokenClaims & {
+     *         [key: string]:
+     *             | string
+     *             | number
+     *             | string[]
+     *             | object
+     *             | undefined
+     *             | unknown;
+     *     };
+     *     nativeAccountId?: string;
+     *     authorityType?: string;
+     * };
+     */
+    fromNaaAccountInfo(fromAccount) {
+        let tokenClaims;
+        if (fromAccount.idToken !== undefined) {
+            tokenClaims = AuthToken.extractTokenClaims(fromAccount.idToken, this.crypto.base64Decode);
+        }
+        else {
+            tokenClaims = undefined;
+        }
+        const account = {
+            homeAccountId: fromAccount.homeAccountId,
+            environment: fromAccount.environment,
+            tenantId: fromAccount.tenantId,
+            username: fromAccount.username,
+            localAccountId: fromAccount.localAccountId,
+            name: fromAccount.name,
+            idToken: fromAccount.idToken,
+            idTokenClaims: tokenClaims,
+        };
+        return account;
+    }
+    /**
+     *
+     * @param error BridgeError
+     * @returns AuthError, ClientAuthError, ClientConfigurationError, ServerError, InteractionRequiredError
+     */
+    fromBridgeError(error) {
+        if (isBridgeError(error)) {
+            switch (error.status) {
+                case BridgeStatusCode.USER_CANCEL:
+                    return new ClientAuthError(ClientAuthErrorCodes.userCanceled);
+                case BridgeStatusCode.NO_NETWORK:
+                    return new ClientAuthError(ClientAuthErrorCodes.noNetworkConnectivity);
+                case BridgeStatusCode.ACCOUNT_UNAVAILABLE:
+                    return new ClientAuthError(ClientAuthErrorCodes.noAccountFound);
+                case BridgeStatusCode.DISABLED:
+                    return new ClientAuthError(ClientAuthErrorCodes.nestedAppAuthBridgeDisabled);
+                case BridgeStatusCode.NESTED_APP_AUTH_UNAVAILABLE:
+                    return new ClientAuthError(error.code, error.description);
+                case BridgeStatusCode.TRANSIENT_ERROR:
+                case BridgeStatusCode.PERSISTENT_ERROR:
+                    return new ServerError(error.code, error.description);
+                case BridgeStatusCode.USER_INTERACTION_REQUIRED:
+                    return new InteractionRequiredAuthError(error.code, error.description);
+                default:
+                    return new AuthError(error.code, error.description);
+            }
+        }
+        else {
+            return new AuthError("unknown_error", "An unknown error occurred");
+        }
+    }
+}
+
+export { NestedAppAuthAdapter };
+//# sourceMappingURL=NestedAppAuthAdapter.mjs.map

package/dist/naa/mapping/NestedAppAuthAdapter.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"NestedAppAuthAdapter.mjs","sources":["../../../src/naa/mapping/NestedAppAuthAdapter.ts"],"sourcesContent":[null],"names":[],"mappings":";;;;;;AAKA;AACA;AACA;AACA;AAmBO,MAAE,oBAAsB,CAAA;AAG/B,IAAA,WAAA,CAAA,QAAiC,EAAA,kBAAA,EAAA,MAAA,EAAA,MAAA,EAAA;AAC7B,QAAA,IAAA,CAAS,QAAS,GAAA,QAAQ,CAAA;AAC1B,QAAA,IAAA,CAAS,kBAAgB,GAAA,kBAAA,CAAA;AACzB,QAAA,IAAA,CAAS,MAAC,GAAQ,MAAE,CAAA;AACpB,QAAA,IAAA,CAAS,MAAC,GAAA,MAAA,CAAA;AAGN,KAAA;AAWG,IAAA,uBAAuB,CAAC,OAAO,EAAE;AAmCjC,QAAA,IAAA,WACI,CAAA;QAmCgB,IAAA,OAAA,CAAA,oBACd,KAAA,SACD,EAAA;AAyDL,YAAA,WAAmB,GAAA,IAAA,GAAA,EAAa,CAAA;AAyBvC,SAAA;;;;AAIG;AACI;AA2CV;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;"}

package/dist/navigation/NavigationClient.mjs

@@ -1,4 +1,4 @@
-/*! @azure/msal-browser v3.1.0 2023-09-05 */
+/*! @azure/msal-browser v3.3.0 2023-10-20 */
 'use strict';
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.

package/dist/network/FetchClient.mjs

@@ -1,4 +1,4 @@
-/*! @azure/msal-browser v3.1.0 2023-09-05 */
+/*! @azure/msal-browser v3.3.0 2023-10-20 */
 'use strict';
 import { Constants } from '@azure/msal-common';
 import { createBrowserAuthError } from '../error/BrowserAuthError.mjs';

package/dist/operatingcontext/BaseOperatingContext.mjs

@@ -1,4 +1,4 @@
-/*! @azure/msal-browser v3.1.0 2023-09-05 */
+/*! @azure/msal-browser v3.3.0 2023-10-20 */
 'use strict';
 import { Logger } from '@azure/msal-common';
 import { buildConfiguration } from '../config/Configuration.mjs';

package/dist/operatingcontext/StandardOperatingContext.mjs

@@ -1,4 +1,4 @@
-/*! @azure/msal-browser v3.1.0 2023-09-05 */
+/*! @azure/msal-browser v3.3.0 2023-10-20 */
 'use strict';
 import { BaseOperatingContext } from './BaseOperatingContext.mjs';
 

package/dist/operatingcontext/TeamsAppOperatingContext.d.ts

@@ -1,5 +1,9 @@
 import { BaseOperatingContext } from "./BaseOperatingContext";
+import { IBridgeProxy } from "../naa/IBridgeProxy";
+import { AccountInfo } from "../naa/AccountInfo";
 export declare class TeamsAppOperatingContext extends BaseOperatingContext {
+    protected bridgeProxy: IBridgeProxy | undefined;
+    protected activeAccount: AccountInfo | undefined;
     static readonly MODULE_NAME: string;
     /**
      * Unique identifier for the operating context
@@ -16,6 +20,9 @@ export declare class TeamsAppOperatingContext extends BaseOperatingContext {
      * @returns string
      */
     getId(): string;
+    getBridgeProxy(): IBridgeProxy | undefined;
+    getActiveAccount(): AccountInfo | undefined;
+    setActiveAccount(account: AccountInfo): void;
     /**
      * Checks whether the operating context is available.
      * Confirms that the code is running a browser rather.  This is required.

package/dist/operatingcontext/TeamsAppOperatingContext.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"TeamsAppOperatingContext.d.ts","sourceRoot":"","sources":["../../src/operatingcontext/TeamsAppOperatingContext.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AAE9D,qBAAa,wBAAyB,SAAQ,oBAAoB;IAK9D,MAAM,CAAC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAM;IAEzC;;OAEG;IACH,MAAM,CAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAA8B;IAExD;;;;OAIG;IACH,aAAa,IAAI,MAAM;IAGvB;;;OAGG;IACH,KAAK,IAAI,MAAM;IAIf;;;;OAIG;IACG,UAAU,IAAI,OAAO,CAAC,OAAO,CAAC;CAOvC"}
+{"version":3,"file":"TeamsAppOperatingContext.d.ts","sourceRoot":"","sources":["../../src/operatingcontext/TeamsAppOperatingContext.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AAC9D,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAEnD,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAEjD,qBAAa,wBAAyB,SAAQ,oBAAoB;IAC9D,SAAS,CAAC,WAAW,EAAE,YAAY,GAAG,SAAS,CAAa;IAC5D,SAAS,CAAC,aAAa,EAAE,WAAW,GAAG,SAAS,CAAa;IAM7D,MAAM,CAAC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAM;IAEzC;;OAEG;IACH,MAAM,CAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAA8B;IAExD;;;;OAIG;IACH,aAAa,IAAI,MAAM;IAGvB;;;OAGG;IACH,KAAK,IAAI,MAAM;IAIf,cAAc,IAAI,YAAY,GAAG,SAAS;IAI1C,gBAAgB,IAAI,WAAW,GAAG,SAAS;IAI3C,gBAAgB,CAAC,OAAO,EAAE,WAAW,GAAG,IAAI;IAI5C;;;;OAIG;IACG,UAAU,IAAI,OAAO,CAAC,OAAO,CAAC;CA6BvC"}

package/dist/operatingcontext/TeamsAppOperatingContext.mjs

@@ -1,12 +1,18 @@
-/*! @azure/msal-browser v3.1.0 2023-09-05 */
+/*! @azure/msal-browser v3.3.0 2023-10-20 */
 'use strict';
 import { BaseOperatingContext } from './BaseOperatingContext.mjs';
+import { BridgeProxy } from '../naa/BridgeProxy.mjs';
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
  */
 class TeamsAppOperatingContext extends BaseOperatingContext {
+    constructor() {
+        super(...arguments);
+        this.bridgeProxy = undefined;
+        this.activeAccount = undefined;
+    }
     /**
      * Return the module name.  Intended for use with import() to enable dynamic import
      * of the implementation associated with this operating context
@@ -22,6 +28,15 @@ class TeamsAppOperatingContext extends BaseOperatingContext {
     getId() {
         return TeamsAppOperatingContext.ID;
     }
+    getBridgeProxy() {
+        return this.bridgeProxy;
+    }
+    getActiveAccount() {
+        return this.activeAccount;
+    }
+    setActiveAccount(account) {
+        this.activeAccount = account;
+    }
     /**
      * Checks whether the operating context is available.
      * Confirms that the code is running a browser rather.  This is required.
@@ -29,10 +44,36 @@ class TeamsAppOperatingContext extends BaseOperatingContext {
      */
     async initialize() {
         /*
-         * TODO: Add implementation to check for presence of inject MetaOSHub JavaScript interface
-         * TODO: Make pre-flight token request to ensure that App is eligible to use Nested App Auth
+         * TODO: Add implementation to check for presence of inject Nested App Auth Bridge JavaScript interface
+         *
          */
-        return false;
+        try {
+            if (typeof window !== "undefined") {
+                const bridgeProxy = await BridgeProxy.create();
+                /*
+                 * Because we want single sign on we need to attempt to
+                 * grab the active account as part of initialization
+                 * this.activeAccount = await bridgeProxy.getActiveAccount();
+                 */
+                try {
+                    this.activeAccount = await bridgeProxy.getActiveAccount();
+                }
+                catch (e) {
+                    this.activeAccount = undefined;
+                }
+                this.bridgeProxy = bridgeProxy;
+                this.available = bridgeProxy !== undefined;
+            }
+            else {
+                this.available = false;
+            }
+        }
+        catch (e) {
+            this.available = false;
+        }
+        finally {
+            return this.available;
+        }
     }
 }
 /*

package/dist/operatingcontext/TeamsAppOperatingContext.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"TeamsAppOperatingContext.mjs","sources":["../../src/operatingcontext/TeamsAppOperatingContext.ts"],"sourcesContent":[null],"names":[],"mappings":";;;;AAKA;AAEA;AAKI;AAEA;AAEG,MAAA,wBAAA,SAAA,oBAAA,CAAA;AACH;AAEA;;;;AAIG,IAAA,aAAA,GAAA;AACH,QAAA,OAAA,wBAAuB,CAAA,WAAA,CAAA;AAGvB,KAAA;;;AAGG;AACH;AAIA,IAAA,KAAA,GAAA;;;;AAIG;AACG;AAOT;;;;;;;;;;;;;;;;;;;;;;"}
+{"version":3,"file":"TeamsAppOperatingContext.mjs","sources":["../../src/operatingcontext/TeamsAppOperatingContext.ts"],"sourcesContent":[null],"names":[],"mappings":";;;;;AAKA;AACA;AAEA;AAEA;AAQI,MAAe,iCAA0B,oBAAA,CAAA;AAEzC,IAAA,WAAA,GAAA;;AAEG,QAAA,IAAA,CAAA,WAAA,GAAA,SAAA,CAAA;AACH,QAAA,IAAe,CAAA,yBAAyC,CAAA;AAExD,KAAA;;;;AAIG;AACH;AAGA,IAAA,aAAA,GAAA;;;AAGG;AACH;;;AAYA,IAAA,KAAA,GAAA;AAIA,QAAA,OAAA,wBAAA,CAAA,EAAA,CAAA;;;;AAIG,KAAA;AACG,IAAA,gBAAc,GAAA;AA6BvB,QAAA,OAAA,IAAA,CAAA,aAAA,CAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;"}

package/dist/operatingcontext/UnknownOperatingContext.d.ts

@@ -0,0 +1,26 @@
+import { BaseOperatingContext } from "./BaseOperatingContext";
+export declare class UnknownOperatingContext extends BaseOperatingContext {
+    static readonly MODULE_NAME: string;
+    /**
+     * Unique identifier for the operating context
+     */
+    static readonly ID: string;
+    /**
+     * Return the module name.  Intended for use with import() to enable dynamic import
+     * of the implementation associated with this operating context
+     * @returns
+     */
+    getModuleName(): string;
+    /**
+     * Returns the unique identifier for this operating context
+     * @returns string
+     */
+    getId(): string;
+    /**
+     * Checks whether the operating context is available.
+     * Confirms that the code is running a browser rather.  This is required.
+     * @returns Promise<boolean> indicating whether this operating context is currently available.
+     */
+    initialize(): Promise<boolean>;
+}
+//# sourceMappingURL=UnknownOperatingContext.d.ts.map

package/dist/operatingcontext/UnknownOperatingContext.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"UnknownOperatingContext.d.ts","sourceRoot":"","sources":["../../src/operatingcontext/UnknownOperatingContext.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AAE9D,qBAAa,uBAAwB,SAAQ,oBAAoB;IAK7D,MAAM,CAAC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAM;IAEzC;;OAEG;IACH,MAAM,CAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAA6B;IAEvD;;;;OAIG;IACH,aAAa,IAAI,MAAM;IAGvB;;;OAGG;IACH,KAAK,IAAI,MAAM;IAIf;;;;OAIG;IACG,UAAU,IAAI,OAAO,CAAC,OAAO,CAAC;CAOvC"}

package/dist/operatingcontext/UnknownOperatingContext.mjs

@@ -0,0 +1,49 @@
+/*! @azure/msal-browser v3.3.0 2023-10-20 */
+'use strict';
+import { BaseOperatingContext } from './BaseOperatingContext.mjs';
+
+/*
+ * Copyright (c) Microsoft Corporation. All rights reserved.
+ * Licensed under the MIT License.
+ */
+class UnknownOperatingContext extends BaseOperatingContext {
+    /**
+     * Return the module name.  Intended for use with import() to enable dynamic import
+     * of the implementation associated with this operating context
+     * @returns
+     */
+    getModuleName() {
+        return UnknownOperatingContext.MODULE_NAME;
+    }
+    /**
+     * Returns the unique identifier for this operating context
+     * @returns string
+     */
+    getId() {
+        return UnknownOperatingContext.ID;
+    }
+    /**
+     * Checks whether the operating context is available.
+     * Confirms that the code is running a browser rather.  This is required.
+     * @returns Promise<boolean> indicating whether this operating context is currently available.
+     */
+    async initialize() {
+        /**
+         * This operating context is in use when we have not checked for what the operating context is.
+         * The context is unknown until we check it.
+         */
+        return true;
+    }
+}
+/*
+ * TODO: Once we have determine the bundling code return here to specify the name of the bundle
+ * containing the implementation for this operating context
+ */
+UnknownOperatingContext.MODULE_NAME = "";
+/**
+ * Unique identifier for the operating context
+ */
+UnknownOperatingContext.ID = "UnknownOperatingContext";
+
+export { UnknownOperatingContext };
+//# sourceMappingURL=UnknownOperatingContext.mjs.map

package/dist/operatingcontext/UnknownOperatingContext.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"UnknownOperatingContext.mjs","sources":["../../src/operatingcontext/UnknownOperatingContext.ts"],"sourcesContent":[null],"names":[],"mappings":";;;;AAKA;AAEA;AAKI;AAEA;AAEG,MAAA,uBAAA,SAAA,oBAAA,CAAA;AACH;AAEA;;;;AAIG,IAAA,aAAA,GAAA;AACH,QAAA,OAAA,uBAAuB,CAAA,WAAA,CAAA;AAGvB,KAAA;;;AAGG;AACH;AAIA,IAAA,KAAA,GAAA;;;;AAIG;AACG;AAOT;;;;;;;;;;;;;;;;;;;;;;"}

package/dist/packageMetadata.d.ts

@@ -1,3 +1,3 @@
 export declare const name = "@azure/msal-browser";
-export declare const version = "3.1.0";
+export declare const version = "3.3.0";
 //# sourceMappingURL=packageMetadata.d.ts.map

package/dist/packageMetadata.mjs

@@ -1,8 +1,8 @@
-/*! @azure/msal-browser v3.1.0 2023-09-05 */
+/*! @azure/msal-browser v3.3.0 2023-10-20 */
 'use strict';
 /* eslint-disable header/header */
 const name = "@azure/msal-browser";
-const version = "3.1.0";
+const version = "3.3.0";
 
 export { name, version };
 //# sourceMappingURL=packageMetadata.mjs.map

package/dist/telemetry/BrowserPerformanceClient.mjs

@@ -1,4 +1,4 @@
-/*! @azure/msal-browser v3.1.0 2023-09-05 */
+/*! @azure/msal-browser v3.3.0 2023-10-20 */
 'use strict';
 import { PerformanceClient, Constants, Logger } from '@azure/msal-common';
 import { BrowserPerformanceMeasurement } from './BrowserPerformanceMeasurement.mjs';

package/dist/telemetry/BrowserPerformanceMeasurement.mjs

@@ -1,4 +1,4 @@
-/*! @azure/msal-browser v3.1.0 2023-09-05 */
+/*! @azure/msal-browser v3.3.0 2023-10-20 */
 'use strict';
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.

package/dist/utils/BrowserConstants.mjs

@@ -1,4 +1,4 @@
-/*! @azure/msal-browser v3.1.0 2023-09-05 */
+/*! @azure/msal-browser v3.3.0 2023-10-20 */
 'use strict';
 import { OIDC_DEFAULT_SCOPES } from '@azure/msal-common';
 

package/dist/utils/BrowserProtocolUtils.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"BrowserProtocolUtils.d.ts","sourceRoot":"","sources":["../../src/utils/BrowserProtocolUtils.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AACrD,OAAO,EAEH,OAAO,EAGP,+BAA+B,EAElC,MAAM,oBAAoB,CAAC;AAE5B,MAAM,MAAM,kBAAkB,GAAG;IAC7B,eAAe,EAAE,eAAe,CAAC;CACpC,CAAC;AAEF,qBAAa,oBAAoB;IAC7B;;;;OAIG;IACH,MAAM,CAAC,0BAA0B,CAC7B,aAAa,EAAE,OAAO,EACtB,KAAK,EAAE,MAAM,GACd,kBAAkB,GAAG,IAAI;IAc5B;;;OAGG;IACH,MAAM,CAAC,2BAA2B,CAC9B,YAAY,EAAE,MAAM,GACrB,+BAA+B;CAQrC"}
+{"version":3,"file":"BrowserProtocolUtils.d.ts","sourceRoot":"","sources":["../../src/utils/BrowserProtocolUtils.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AACrD,OAAO,EACH,OAAO,EAGP,+BAA+B,EAIlC,MAAM,oBAAoB,CAAC;AAE5B,MAAM,MAAM,kBAAkB,GAAG;IAC7B,eAAe,EAAE,eAAe,CAAC;CACpC,CAAC;AAEF,qBAAa,oBAAoB;IAC7B;;;;OAIG;IACH,MAAM,CAAC,0BAA0B,CAC7B,aAAa,EAAE,OAAO,EACtB,KAAK,EAAE,MAAM,GACd,kBAAkB,GAAG,IAAI;IAc5B;;;OAGG;IACH,MAAM,CAAC,2BAA2B,CAC9B,YAAY,EAAE,MAAM,GACrB,+BAA+B;CAQrC"}