@azure/msal-browser 3.14.0 → 3.15.0

package/src/controllers/StandardController.ts

@@ -33,6 +33,7 @@ import {
     BrowserCacheManager,
     DEFAULT_BROWSER_CACHE_MANAGER,
 } from "../cache/BrowserCacheManager";
+import * as AccountManager from "../cache/AccountManager";
 import { BrowserConfiguration, CacheOptions } from "../config/Configuration";
 import {
     InteractionType,
@@ -100,6 +101,18 @@ function getAccountType(
     return "AAD";
 }
 
+function preflightCheck(
+    initialized: boolean,
+    performanceEvent: InProgressPerformanceEvent
+) {
+    try {
+        BrowserUtils.preflightCheck(initialized);
+    } catch (e) {
+        performanceEvent.end({ success: false }, e);
+        throw e;
+    }
+}
+
 export class StandardController implements IController {
     // OperatingContext
     protected readonly operatingContext: StandardOperatingContext;
@@ -663,7 +676,7 @@ export class StandardController implements IController {
 
         try {
             this.logger.verbose("acquireTokenPopup called", correlationId);
-            BrowserUtils.preflightCheck(this.initialized);
+            preflightCheck(this.initialized, atPopupMeasurement);
             this.browserStorage.setInteractionInProgress(true);
         } catch (e) {
             // Since this function is syncronous we need to reject
@@ -833,18 +846,18 @@ export class StandardController implements IController {
             prompt: request.prompt,
             correlationId: correlationId,
         };
-        BrowserUtils.preflightCheck(this.initialized);
         this.ssoSilentMeasurement = this.performanceClient.startMeasurement(
             PerformanceEvents.SsoSilent,
             correlationId
         );
-        this.ssoSilentMeasurement?.increment({
-            visibilityChangeCount: 0,
-        });
         this.ssoSilentMeasurement?.add({
             scenarioId: request.scenarioId,
             accountType: getAccountType(request.account),
         });
+        preflightCheck(this.initialized, this.ssoSilentMeasurement);
+        this.ssoSilentMeasurement?.increment({
+            visibilityChangeCount: 0,
+        });
 
         document.addEventListener(
             "visibilitychange",
@@ -936,16 +949,16 @@ export class StandardController implements IController {
     ): Promise<AuthenticationResult> {
         const correlationId = this.getRequestCorrelationId(request);
         this.logger.trace("acquireTokenByCode called", correlationId);
-        BrowserUtils.preflightCheck(this.initialized);
+        const atbcMeasurement = this.performanceClient.startMeasurement(
+            PerformanceEvents.AcquireTokenByCode,
+            correlationId
+        );
+        preflightCheck(this.initialized, atbcMeasurement);
         this.eventHandler.emitEvent(
             EventType.ACQUIRE_TOKEN_BY_CODE_START,
             InteractionType.Silent,
             request
         );
-        const atbcMeasurement = this.performanceClient.startMeasurement(
-            PerformanceEvents.AcquireTokenByCode,
-            correlationId
-        );
         atbcMeasurement.add({ scenarioId: request.scenarioId });
 
         try {
@@ -1287,10 +1300,12 @@ export class StandardController implements IController {
      * @returns Array of AccountInfo objects in cache
      */
     getAllAccounts(accountFilter?: AccountFilter): AccountInfo[] {
-        this.logger.verbose("getAllAccounts called");
-        return this.isBrowserEnvironment
-            ? this.browserStorage.getAllAccounts(accountFilter)
-            : [];
+        return AccountManager.getAllAccounts(
+            this.logger,
+            this.browserStorage,
+            this.isBrowserEnvironment,
+            accountFilter
+        );
     }
 
     /**
@@ -1299,26 +1314,11 @@ export class StandardController implements IController {
      * @returns The first account found in the cache matching the provided filter or null if no account could be found.
      */
     getAccount(accountFilter: AccountFilter): AccountInfo | null {
-        this.logger.trace("getAccount called");
-        if (Object.keys(accountFilter).length === 0) {
-            this.logger.warning("getAccount: No accountFilter provided");
-            return null;
-        }
-
-        const account: AccountInfo | null =
-            this.browserStorage.getAccountInfoFilteredBy(accountFilter);
-
-        if (account) {
-            this.logger.verbose(
-                "getAccount: Account matching provided filter found, returning"
-            );
-            return account;
-        } else {
-            this.logger.verbose(
-                "getAccount: No matching account found, returning null"
-            );
-            return null;
-        }
+        return AccountManager.getAccount(
+            accountFilter,
+            this.logger,
+            this.browserStorage
+        );
     }
 
     /**
@@ -1330,29 +1330,11 @@ export class StandardController implements IController {
      * @returns The account object stored in MSAL
      */
     getAccountByUsername(username: string): AccountInfo | null {
-        this.logger.trace("getAccountByUsername called");
-        if (!username) {
-            this.logger.warning("getAccountByUsername: No username provided");
-            return null;
-        }
-
-        const account = this.browserStorage.getAccountInfoFilteredBy({
+        return AccountManager.getAccountByUsername(
             username,
-        });
-        if (account) {
-            this.logger.verbose(
-                "getAccountByUsername: Account matching username found, returning"
-            );
-            this.logger.verbosePii(
-                `getAccountByUsername: Returning signed-in accounts matching username: ${username}`
-            );
-            return account;
-        } else {
-            this.logger.verbose(
-                "getAccountByUsername: No matching account found, returning null"
-            );
-            return null;
-        }
+            this.logger,
+            this.browserStorage
+        );
     }
 
     /**
@@ -1363,31 +1345,11 @@ export class StandardController implements IController {
      * @returns The account object stored in MSAL
      */
     getAccountByHomeId(homeAccountId: string): AccountInfo | null {
-        this.logger.trace("getAccountByHomeId called");
-        if (!homeAccountId) {
-            this.logger.warning(
-                "getAccountByHomeId: No homeAccountId provided"
-            );
-            return null;
-        }
-
-        const account = this.browserStorage.getAccountInfoFilteredBy({
+        return AccountManager.getAccountByHomeId(
             homeAccountId,
-        });
-        if (account) {
-            this.logger.verbose(
-                "getAccountByHomeId: Account matching homeAccountId found, returning"
-            );
-            this.logger.verbosePii(
-                `getAccountByHomeId: Returning signed-in accounts matching homeAccountId: ${homeAccountId}`
-            );
-            return account;
-        } else {
-            this.logger.verbose(
-                "getAccountByHomeId: No matching account found, returning null"
-            );
-            return null;
-        }
+            this.logger,
+            this.browserStorage
+        );
     }
 
     /**
@@ -1398,31 +1360,11 @@ export class StandardController implements IController {
      * @returns The account object stored in MSAL
      */
     getAccountByLocalId(localAccountId: string): AccountInfo | null {
-        this.logger.trace("getAccountByLocalId called");
-        if (!localAccountId) {
-            this.logger.warning(
-                "getAccountByLocalId: No localAccountId provided"
-            );
-            return null;
-        }
-
-        const account = this.browserStorage.getAccountInfoFilteredBy({
+        return AccountManager.getAccountByLocalId(
             localAccountId,
-        });
-        if (account) {
-            this.logger.verbose(
-                "getAccountByLocalId: Account matching localAccountId found, returning"
-            );
-            this.logger.verbosePii(
-                `getAccountByLocalId: Returning signed-in accounts matching localAccountId: ${localAccountId}`
-            );
-            return account;
-        } else {
-            this.logger.verbose(
-                "getAccountByLocalId: No matching account found, returning null"
-            );
-            return null;
-        }
+            this.logger,
+            this.browserStorage
+        );
     }
 
     /**
@@ -1430,14 +1372,14 @@ export class StandardController implements IController {
      * @param account
      */
     setActiveAccount(account: AccountInfo | null): void {
-        this.browserStorage.setActiveAccount(account);
+        AccountManager.setActiveAccount(account, this.browserStorage);
     }
 
     /**
      * Gets the currently active account
      */
     getActiveAccount(): AccountInfo | null {
-        return this.browserStorage.getActiveAccount();
+        return AccountManager.getActiveAccount(this.browserStorage);
     }
 
     // #endregion
@@ -1898,7 +1840,7 @@ export class StandardController implements IController {
             scenarioId: request.scenarioId,
         });
 
-        BrowserUtils.preflightCheck(this.initialized);
+        preflightCheck(this.initialized, atsMeasurement);
         this.logger.verbose("acquireTokenSilent called", correlationId);
 
         const account = request.account || this.getActiveAccount();

package/src/index.ts

@@ -11,7 +11,11 @@
 import * as BrowserUtils from "./utils/BrowserUtils";
 export { BrowserUtils };
 
-export { PublicClientApplication } from "./app/PublicClientApplication";
+export {
+    PublicClientApplication,
+    createNestablePublicClientApplication,
+    createStandardPublicClientApplication,
+} from "./app/PublicClientApplication";
 export { PublicClientNext } from "./app/PublicClientNext";
 export { IController } from "./controllers/IController";
 export {

package/src/naa/BridgeAccountContext.ts

@@ -0,0 +1,17 @@
+/*
+ * Copyright (c) Microsoft Corporation. All rights reserved.
+ * Licensed under the MIT License.
+ */
+
+/**
+ * AccountContext is used to pass account information when the bridge is initialized
+ *
+ * NAA (MetaOS) apps are created and destroyed for the same session multiple times.
+ * `AccountContext` helps in booting up the cached account when the bridge
+ * is recreated for a new NAA instance in the same auth session.
+ */
+export interface AccountContext {
+    homeAccountId: string;
+    environment: string;
+    tenantId: string;
+}

package/src/naa/BridgeCapabilities.ts

@@ -3,6 +3,7 @@
  * Licensed under the MIT License.
  */
 
+// Capabilities are intended to future proof the bridge against any feature support
 export interface BridgeCapabilities {
-    queryAccount: boolean;
+    queryAccount?: boolean;
 }

package/src/naa/BridgeProxy.ts

@@ -3,10 +3,10 @@
  * Licensed under the MIT License.
  */
 
-import { AccountInfo } from "./AccountInfo";
 import { AuthBridge, AuthBridgeResponse } from "./AuthBridge";
 import { AuthResult } from "./AuthResult";
 import { BridgeCapabilities } from "./BridgeCapabilities";
+import { AccountContext } from "./BridgeAccountContext";
 import { BridgeError } from "./BridgeError";
 import { BridgeRequest } from "./BridgeRequest";
 import { BridgeRequestEnvelope, BridgeMethods } from "./BridgeRequestEnvelope";
@@ -33,6 +33,7 @@ export class BridgeProxy implements IBridgeProxy {
     sdkName: string;
     sdkVersion: string;
     capabilities?: BridgeCapabilities;
+    accountContext?: AccountContext;
 
     /**
      * initializeNestedAppAuthBridge - Initializes the bridge to the host app
@@ -80,6 +81,7 @@ export class BridgeProxy implements IBridgeProxy {
                         messageType: "NestedAppAuthRequest",
                         method: "GetInitContext",
                         requestId: BrowserCrypto.createNewGuid(),
+                        sendTime: Date.now(),
                     };
                     const request: BridgeRequest = {
                         requestId: message.requestId,
@@ -134,15 +136,14 @@ export class BridgeProxy implements IBridgeProxy {
         };
     }
 
-    public async getActiveAccount(): Promise<AccountInfo> {
-        const result = await this.sendRequest("GetActiveAccount");
-        return BridgeProxy.validateBridgeResultOrThrow(result.account);
-    }
-
     public getHostCapabilities(): BridgeCapabilities | null {
         return this.capabilities ?? null;
     }
 
+    public getAccountContext(): AccountContext | null {
+        return this.accountContext ? this.accountContext : null;
+    }
+
     /**
      * A method used to send a request to the bridge
      * @param request A token request
@@ -156,6 +157,7 @@ export class BridgeProxy implements IBridgeProxy {
             messageType: "NestedAppAuthRequest",
             method: method,
             requestId: BrowserCrypto.createNewGuid(),
+            sendTime: Date.now(),
             ...requestParams,
         };
 
@@ -194,10 +196,12 @@ export class BridgeProxy implements IBridgeProxy {
     private constructor(
         sdkName: string,
         sdkVersion: string,
+        accountContext?: AccountContext,
         capabilities?: BridgeCapabilities
     ) {
         this.sdkName = sdkName;
         this.sdkVersion = sdkVersion;
+        this.accountContext = accountContext;
         this.capabilities = capabilities;
     }
 
@@ -210,6 +214,7 @@ export class BridgeProxy implements IBridgeProxy {
         return new BridgeProxy(
             response.sdkName,
             response.sdkVersion,
+            response.accountContext,
             response.capabilities
         );
     }

package/src/naa/BridgeRequestEnvelope.ts

@@ -5,12 +5,7 @@
 
 import { TokenRequest } from "./TokenRequest";
 
-export type BridgeMethods =
-    | "GetToken"
-    | "GetActiveAccount"
-    | "GetAllAccounts"
-    | "GetInitContext"
-    | "GetTokenPopup";
+export type BridgeMethods = "GetToken" | "GetInitContext" | "GetTokenPopup";
 
 export type BridgeRequestEnvelope = {
     messageType: "NestedAppAuthRequest";

package/src/naa/IBridgeProxy.ts

@@ -3,14 +3,14 @@
  * Licensed under the MIT License.
  */
 
-import { AccountInfo } from "./AccountInfo";
 import { AuthResult } from "./AuthResult";
+import { AccountContext } from "./BridgeAccountContext";
 import { BridgeCapabilities } from "./BridgeCapabilities";
 import { TokenRequest } from "./TokenRequest";
 
 export interface IBridgeProxy {
     getTokenInteractive(request: TokenRequest): Promise<AuthResult>;
     getTokenSilent(request: TokenRequest): Promise<AuthResult>;
-    getActiveAccount(): Promise<AccountInfo>;
     getHostCapabilities(): BridgeCapabilities | null;
+    getAccountContext(): AccountContext | null;
 }

package/src/naa/InitContext.ts

@@ -4,9 +4,11 @@
  */
 
 import { BridgeCapabilities } from "./BridgeCapabilities";
+import { AccountContext } from "./BridgeAccountContext";
 
 export interface InitContext {
     capabilities?: BridgeCapabilities;
     sdkName: string;
     sdkVersion: string;
+    accountContext?: AccountContext;
 }

package/src/naa/mapping/NestedAppAuthAdapter.ts

@@ -24,6 +24,11 @@ import {
     StringUtils,
     createClientAuthError,
     OIDC_DEFAULT_SCOPES,
+    AccountInfo,
+    IdTokenEntity,
+    AccessTokenEntity,
+    TenantProfile,
+    buildTenantProfileFromIdTokenClaims,
 } from "@azure/msal-common";
 import { isBridgeError } from "../BridgeError";
 import { BridgeStatusCode } from "../BridgeStatusCode";
@@ -110,6 +115,7 @@ export class NestedAppAuthAdapter {
         );
         const account = this.fromNaaAccountInfo(
             response.account,
+            response.token.id_token,
             idTokenClaims
         );
         const scopes = response.token.scope || request.scope;
@@ -123,7 +129,7 @@ export class NestedAppAuthAdapter {
             idToken: response.token.id_token,
             idTokenClaims,
             accessToken: response.token.access_token,
-            fromCache: true,
+            fromCache: false,
             expiresOn: expiresOn,
             tokenType:
                 request.authenticationScheme || AuthenticationScheme.BEARER,
@@ -159,6 +165,7 @@ export class NestedAppAuthAdapter {
      */
     public fromNaaAccountInfo(
         fromAccount: NaaAccountInfo,
+        idToken?: string,
         idTokenClaims?: TokenClaims
     ): MsalAccountInfo {
         const effectiveIdTokenClaims =
@@ -183,6 +190,14 @@ export class NestedAppAuthAdapter {
 
         const name = fromAccount.name || effectiveIdTokenClaims?.name;
 
+        const tenantProfiles = new Map<string, TenantProfile>();
+
+        const tenantProfile = buildTenantProfileFromIdTokenClaims(
+            homeAccountId,
+            effectiveIdTokenClaims
+        );
+        tenantProfiles.set(tenantId, tenantProfile);
+
         const account: MsalAccountInfo = {
             homeAccountId,
             environment: fromAccount.environment,
@@ -190,8 +205,9 @@ export class NestedAppAuthAdapter {
             username,
             localAccountId,
             name,
-            idToken: fromAccount.idToken,
+            idToken: idToken,
             idTokenClaims: effectiveIdTokenClaims,
+            tenantProfiles,
         };
 
         return account;
@@ -249,4 +265,54 @@ export class NestedAppAuthAdapter {
             return new AuthError("unknown_error", "An unknown error occurred");
         }
     }
+
+    /**
+     * Returns an AuthenticationResult from the given cache items
+     *
+     * @param account
+     * @param idToken
+     * @param accessToken
+     * @param reqTimestamp
+     * @returns
+     */
+    public toAuthenticationResultFromCache(
+        account: AccountInfo,
+        idToken: IdTokenEntity,
+        accessToken: AccessTokenEntity,
+        request: SilentRequest,
+        correlationId: string
+    ): AuthenticationResult {
+        if (!idToken || !accessToken) {
+            throw createClientAuthError(ClientAuthErrorCodes.nullOrEmptyToken);
+        }
+
+        const idTokenClaims = AuthToken.extractTokenClaims(
+            idToken.secret,
+            this.crypto.base64Decode
+        );
+
+        const scopes = accessToken.target || request.scopes.join(" ");
+
+        const authenticationResult: AuthenticationResult = {
+            authority: accessToken.environment || account.environment,
+            uniqueId: account.localAccountId,
+            tenantId: account.tenantId,
+            scopes: scopes.split(" "),
+            account,
+            idToken: idToken.secret,
+            idTokenClaims: idTokenClaims || {},
+            accessToken: accessToken.secret,
+            fromCache: true,
+            expiresOn: new Date(Number(accessToken.expiresOn) * 1000),
+            tokenType:
+                request.authenticationScheme || AuthenticationScheme.BEARER,
+            correlationId,
+            extExpiresOn: new Date(
+                Number(accessToken.extendedExpiresOn) * 1000
+            ),
+            state: request.state,
+        };
+
+        return authenticationResult;
+    }
 }

package/src/operatingcontext/{TeamsAppOperatingContext.ts → NestedAppOperatingContext.ts}

@@ -6,11 +6,11 @@
 import { BaseOperatingContext } from "./BaseOperatingContext";
 import { IBridgeProxy } from "../naa/IBridgeProxy";
 import { BridgeProxy } from "../naa/BridgeProxy";
-import { AccountInfo } from "../naa/AccountInfo";
+import { AccountContext } from "../naa/BridgeAccountContext";
 
-export class TeamsAppOperatingContext extends BaseOperatingContext {
+export class NestedAppOperatingContext extends BaseOperatingContext {
     protected bridgeProxy: IBridgeProxy | undefined = undefined;
-    protected activeAccount: AccountInfo | undefined = undefined;
+    protected accountContext: AccountContext | null = null;
 
     /*
      * TODO: Once we have determine the bundling code return here to specify the name of the bundle
@@ -21,7 +21,7 @@ export class TeamsAppOperatingContext extends BaseOperatingContext {
     /**
      * Unique identifier for the operating context
      */
-    static readonly ID: string = "TeamsAppOperatingContext";
+    static readonly ID: string = "NestedAppOperatingContext";
 
     /**
      * Return the module name.  Intended for use with import() to enable dynamic import
@@ -29,28 +29,25 @@ export class TeamsAppOperatingContext extends BaseOperatingContext {
      * @returns
      */
     getModuleName(): string {
-        return TeamsAppOperatingContext.MODULE_NAME;
+        return NestedAppOperatingContext.MODULE_NAME;
     }
+
     /**
      * Returns the unique identifier for this operating context
      * @returns string
      */
     getId(): string {
-        return TeamsAppOperatingContext.ID;
+        return NestedAppOperatingContext.ID;
     }
 
+    /**
+     * Returns the current BridgeProxy
+     * @returns IBridgeProxy | undefined
+     */
     getBridgeProxy(): IBridgeProxy | undefined {
         return this.bridgeProxy;
     }
 
-    getActiveAccount(): AccountInfo | undefined {
-        return this.activeAccount;
-    }
-
-    setActiveAccount(account: AccountInfo): void {
-        this.activeAccount = account;
-    }
-
     /**
      * Checks whether the operating context is available.
      * Confirms that the code is running a browser rather.  This is required.
@@ -62,26 +59,15 @@ export class TeamsAppOperatingContext extends BaseOperatingContext {
          *
          */
 
-        if (!this.getConfig().auth.supportsNestedAppAuth) {
-            return false;
-        }
-
         try {
             if (typeof window !== "undefined") {
                 const bridgeProxy: IBridgeProxy = await BridgeProxy.create();
                 /*
-                 * Because we want single sign on we need to attempt to
-                 * grab the active account as part of initialization
-                 * this.activeAccount = await bridgeProxy.getActiveAccount();
+                 * Because we want single sign on we expect the host app to provide the account context
+                 * with a min set of params that can be used to identify the account
+                 * this.account = nestedApp.getAccountByFilter(bridgeProxy.getAccountContext());
                  */
-                try {
-                    if (bridgeProxy.getHostCapabilities()?.queryAccount) {
-                        this.activeAccount =
-                            await bridgeProxy.getActiveAccount();
-                    }
-                } catch {
-                    // Ignore errors
-                }
+                this.accountContext = bridgeProxy.getAccountContext();
                 this.bridgeProxy = bridgeProxy;
                 this.available = bridgeProxy !== undefined;
             }

package/src/operatingcontext/StandardOperatingContext.ts

@@ -25,6 +25,7 @@ export class StandardOperatingContext extends BaseOperatingContext {
     getModuleName(): string {
         return StandardOperatingContext.MODULE_NAME;
     }
+
     /**
      * Returns the unique identifier for this operating context
      * @returns string

package/src/operatingcontext/UnknownOperatingContext.ts

@@ -17,6 +17,14 @@ export class UnknownOperatingContext extends BaseOperatingContext {
      */
     static readonly ID: string = "UnknownOperatingContext";
 
+    /**
+     * Returns the unique identifier for this operating context
+     * @returns string
+     */
+    getId(): string {
+        return UnknownOperatingContext.ID;
+    }
+
     /**
      * Return the module name.  Intended for use with import() to enable dynamic import
      * of the implementation associated with this operating context
@@ -25,13 +33,6 @@ export class UnknownOperatingContext extends BaseOperatingContext {
     getModuleName(): string {
         return UnknownOperatingContext.MODULE_NAME;
     }
-    /**
-     * Returns the unique identifier for this operating context
-     * @returns string
-     */
-    getId(): string {
-        return UnknownOperatingContext.ID;
-    }
 
     /**
      * Checks whether the operating context is available.

package/src/packageMetadata.ts

@@ -1,3 +1,3 @@
 /* eslint-disable header/header */
 export const name = "@azure/msal-browser";
-export const version = "3.14.0";
+export const version = "3.15.0";

package/dist/operatingcontext/TeamsAppOperatingContext.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"TeamsAppOperatingContext.d.ts","sourceRoot":"","sources":["../../src/operatingcontext/TeamsAppOperatingContext.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AAC9D,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAEnD,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAEjD,qBAAa,wBAAyB,SAAQ,oBAAoB;IAC9D,SAAS,CAAC,WAAW,EAAE,YAAY,GAAG,SAAS,CAAa;IAC5D,SAAS,CAAC,aAAa,EAAE,WAAW,GAAG,SAAS,CAAa;IAM7D,MAAM,CAAC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAM;IAEzC;;OAEG;IACH,MAAM,CAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAA8B;IAExD;;;;OAIG;IACH,aAAa,IAAI,MAAM;IAGvB;;;OAGG;IACH,KAAK,IAAI,MAAM;IAIf,cAAc,IAAI,YAAY,GAAG,SAAS;IAI1C,gBAAgB,IAAI,WAAW,GAAG,SAAS;IAI3C,gBAAgB,CAAC,OAAO,EAAE,WAAW,GAAG,IAAI;IAI5C;;;;OAIG;IACG,UAAU,IAAI,OAAO,CAAC,OAAO,CAAC;CAsCvC"}

package/dist/operatingcontext/TeamsAppOperatingContext.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"TeamsAppOperatingContext.mjs","sources":["../../src/operatingcontext/TeamsAppOperatingContext.ts"],"sourcesContent":[null],"names":[],"mappings":";;;;;AAAA;;;AAGG;AAOG,MAAO,wBAAyB,SAAQ,oBAAoB,CAAA;AAAlE,IAAA,WAAA,GAAA;;QACc,IAAW,CAAA,WAAA,GAA6B,SAAS,CAAC;QAClD,IAAa,CAAA,aAAA,GAA4B,SAAS,CAAC;KAoFhE;AAvEG;;;;AAIG;IACH,aAAa,GAAA;QACT,OAAO,wBAAwB,CAAC,WAAW,CAAC;KAC/C;AACD;;;AAGG;IACH,KAAK,GAAA;QACD,OAAO,wBAAwB,CAAC,EAAE,CAAC;KACtC;IAED,cAAc,GAAA;QACV,OAAO,IAAI,CAAC,WAAW,CAAC;KAC3B;IAED,gBAAgB,GAAA;QACZ,OAAO,IAAI,CAAC,aAAa,CAAC;KAC7B;AAED,IAAA,gBAAgB,CAAC,OAAoB,EAAA;AACjC,QAAA,IAAI,CAAC,aAAa,GAAG,OAAO,CAAC;KAChC;AAED;;;;AAIG;AACH,IAAA,MAAM,UAAU,GAAA;AACZ;;;AAGG;QAEH,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC,IAAI,CAAC,qBAAqB,EAAE;AAC9C,YAAA,OAAO,KAAK,CAAC;AAChB,SAAA;QAED,IAAI;AACA,YAAA,IAAI,OAAO,MAAM,KAAK,WAAW,EAAE;AAC/B,gBAAA,MAAM,WAAW,GAAiB,MAAM,WAAW,CAAC,MAAM,EAAE,CAAC;AAC7D;;;;AAIG;gBACH,IAAI;AACA,oBAAA,IAAI,WAAW,CAAC,mBAAmB,EAAE,EAAE,YAAY,EAAE;AACjD,wBAAA,IAAI,CAAC,aAAa;AACd,4BAAA,MAAM,WAAW,CAAC,gBAAgB,EAAE,CAAC;AAC5C,qBAAA;AACJ,iBAAA;gBAAC,MAAM;;AAEP,iBAAA;AACD,gBAAA,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;AAC/B,gBAAA,IAAI,CAAC,SAAS,GAAG,WAAW,KAAK,SAAS,CAAC;AAC9C,aAAA;AACJ,SAAA;AAAC,QAAA,OAAO,EAAE,EAAE;YACT,IAAI,CAAC,MAAM,CAAC,OAAO,CACf,CAAgD,6CAAA,EAAA,EAAE,CAAG,CAAA,CAAA,CACxD,CAAC;AACL,SAAA;QAED,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAqC,kCAAA,EAAA,IAAI,CAAC,SAAS,CAAE,CAAA,CAAC,CAAC;QACxE,OAAO,IAAI,CAAC,SAAS,CAAC;KACzB;;AAjFD;;;AAGG;AACa,wBAAW,CAAA,WAAA,GAAW,EAAE,CAAC;AAEzC;;AAEG;AACa,wBAAE,CAAA,EAAA,GAAW,0BAA0B;;;;"}