@azure/msal-browser 3.5.1-beta.1 → 3.7.0

package/dist/crypto/BrowserCrypto.d.ts

@@ -1,45 +1,45 @@
-import { IPerformanceClient, Logger } from "@azure/msal-common";
-/**
- * Check whether browser crypto is available.
- */
-export declare function validateCryptoAvailable(logger: Logger): void;
-/**
- * Returns a sha-256 hash of the given dataString as an ArrayBuffer.
- * @param dataString
- */
-export declare function sha256Digest(dataString: string, performanceClient?: IPerformanceClient, correlationId?: string): Promise<ArrayBuffer>;
-/**
- * Populates buffer with cryptographically random values.
- * @param dataBuffer
- */
-export declare function getRandomValues(dataBuffer: Uint8Array): Uint8Array;
-/**
- * Creates a new random GUID
- * @returns
- */
-export declare function createNewGuid(): string;
-/**
- * Generates a keypair based on current keygen algorithm config.
- * @param extractable
- * @param usages
- */
-export declare function generateKeyPair(extractable: boolean, usages: Array<KeyUsage>): Promise<CryptoKeyPair>;
-/**
- * Export key as Json Web Key (JWK)
- * @param key
- */
-export declare function exportJwk(key: CryptoKey): Promise<JsonWebKey>;
-/**
- * Imports key as Json Web Key (JWK), can set extractable and usages.
- * @param key
- * @param extractable
- * @param usages
- */
-export declare function importJwk(key: JsonWebKey, extractable: boolean, usages: Array<KeyUsage>): Promise<CryptoKey>;
-/**
- * Signs given data with given key
- * @param key
- * @param data
- */
-export declare function sign(key: CryptoKey, data: ArrayBuffer): Promise<ArrayBuffer>;
+import { IPerformanceClient, Logger } from "@azure/msal-common";
+/**
+ * Check whether browser crypto is available.
+ */
+export declare function validateCryptoAvailable(logger: Logger): void;
+/**
+ * Returns a sha-256 hash of the given dataString as an ArrayBuffer.
+ * @param dataString
+ */
+export declare function sha256Digest(dataString: string, performanceClient?: IPerformanceClient, correlationId?: string): Promise<ArrayBuffer>;
+/**
+ * Populates buffer with cryptographically random values.
+ * @param dataBuffer
+ */
+export declare function getRandomValues(dataBuffer: Uint8Array): Uint8Array;
+/**
+ * Creates a new random GUID
+ * @returns
+ */
+export declare function createNewGuid(): string;
+/**
+ * Generates a keypair based on current keygen algorithm config.
+ * @param extractable
+ * @param usages
+ */
+export declare function generateKeyPair(extractable: boolean, usages: Array<KeyUsage>): Promise<CryptoKeyPair>;
+/**
+ * Export key as Json Web Key (JWK)
+ * @param key
+ */
+export declare function exportJwk(key: CryptoKey): Promise<JsonWebKey>;
+/**
+ * Imports key as Json Web Key (JWK), can set extractable and usages.
+ * @param key
+ * @param extractable
+ * @param usages
+ */
+export declare function importJwk(key: JsonWebKey, extractable: boolean, usages: Array<KeyUsage>): Promise<CryptoKey>;
+/**
+ * Signs given data with given key
+ * @param key
+ * @param data
+ */
+export declare function sign(key: CryptoKey, data: ArrayBuffer): Promise<ArrayBuffer>;
 //# sourceMappingURL=BrowserCrypto.d.ts.map

package/dist/crypto/BrowserCrypto.mjs

@@ -1,102 +1,102 @@
-/*! @azure/msal-browser v3.5.1-beta.1 2023-11-14 */
+/*! @azure/msal-browser v3.7.0 2024-01-09 */
 'use strict';
 import { createBrowserAuthError } from '../error/BrowserAuthError.mjs';
 import { PerformanceEvents } from '@azure/msal-common';
 import { KEY_FORMAT_JWK } from '../utils/BrowserConstants.mjs';
 import { cryptoNonExistent } from '../error/BrowserAuthErrorCodes.mjs';
 
-/*
- * Copyright (c) Microsoft Corporation. All rights reserved.
- * Licensed under the MIT License.
- */
-/**
- * This file defines functions used by the browser library to perform cryptography operations such as
- * hashing and encoding. It also has helper functions to validate the availability of specific APIs.
- */
-/**
- * See here for more info on RsaHashedKeyGenParams: https://developer.mozilla.org/en-US/docs/Web/API/RsaHashedKeyGenParams
- */
-// RSA KeyGen Algorithm
-const PKCS1_V15_KEYGEN_ALG = "RSASSA-PKCS1-v1_5";
-// SHA-256 hashing algorithm
-const S256_HASH_ALG = "SHA-256";
-// MOD length for PoP tokens
-const MODULUS_LENGTH = 2048;
-// Public Exponent
-const PUBLIC_EXPONENT = new Uint8Array([0x01, 0x00, 0x01]);
-const keygenAlgorithmOptions = {
-    name: PKCS1_V15_KEYGEN_ALG,
-    hash: S256_HASH_ALG,
-    modulusLength: MODULUS_LENGTH,
-    publicExponent: PUBLIC_EXPONENT,
-};
-/**
- * Check whether browser crypto is available.
- */
-function validateCryptoAvailable(logger) {
-    if ("crypto" in window) {
-        logger.verbose("BrowserCrypto: modern crypto interface available");
-    }
-    else {
-        logger.error("BrowserCrypto: crypto interface is unavailable");
-        throw createBrowserAuthError(cryptoNonExistent);
-    }
-}
-/**
- * Returns a sha-256 hash of the given dataString as an ArrayBuffer.
- * @param dataString
- */
-async function sha256Digest(dataString, performanceClient, correlationId) {
-    performanceClient?.addQueueMeasurement(PerformanceEvents.Sha256Digest, correlationId);
-    const encoder = new TextEncoder();
-    const data = encoder.encode(dataString);
-    return window.crypto.subtle.digest(S256_HASH_ALG, data);
-}
-/**
- * Populates buffer with cryptographically random values.
- * @param dataBuffer
- */
-function getRandomValues(dataBuffer) {
-    return window.crypto.getRandomValues(dataBuffer);
-}
-/**
- * Creates a new random GUID
- * @returns
- */
-function createNewGuid() {
-    return window.crypto.randomUUID();
-}
-/**
- * Generates a keypair based on current keygen algorithm config.
- * @param extractable
- * @param usages
- */
-async function generateKeyPair(extractable, usages) {
-    return window.crypto.subtle.generateKey(keygenAlgorithmOptions, extractable, usages);
-}
-/**
- * Export key as Json Web Key (JWK)
- * @param key
- */
-async function exportJwk(key) {
-    return window.crypto.subtle.exportKey(KEY_FORMAT_JWK, key);
-}
-/**
- * Imports key as Json Web Key (JWK), can set extractable and usages.
- * @param key
- * @param extractable
- * @param usages
- */
-async function importJwk(key, extractable, usages) {
-    return window.crypto.subtle.importKey(KEY_FORMAT_JWK, key, keygenAlgorithmOptions, extractable, usages);
-}
-/**
- * Signs given data with given key
- * @param key
- * @param data
- */
-async function sign(key, data) {
-    return window.crypto.subtle.sign(keygenAlgorithmOptions, key, data);
+/*
+ * Copyright (c) Microsoft Corporation. All rights reserved.
+ * Licensed under the MIT License.
+ */
+/**
+ * This file defines functions used by the browser library to perform cryptography operations such as
+ * hashing and encoding. It also has helper functions to validate the availability of specific APIs.
+ */
+/**
+ * See here for more info on RsaHashedKeyGenParams: https://developer.mozilla.org/en-US/docs/Web/API/RsaHashedKeyGenParams
+ */
+// RSA KeyGen Algorithm
+const PKCS1_V15_KEYGEN_ALG = "RSASSA-PKCS1-v1_5";
+// SHA-256 hashing algorithm
+const S256_HASH_ALG = "SHA-256";
+// MOD length for PoP tokens
+const MODULUS_LENGTH = 2048;
+// Public Exponent
+const PUBLIC_EXPONENT = new Uint8Array([0x01, 0x00, 0x01]);
+const keygenAlgorithmOptions = {
+    name: PKCS1_V15_KEYGEN_ALG,
+    hash: S256_HASH_ALG,
+    modulusLength: MODULUS_LENGTH,
+    publicExponent: PUBLIC_EXPONENT,
+};
+/**
+ * Check whether browser crypto is available.
+ */
+function validateCryptoAvailable(logger) {
+    if ("crypto" in window) {
+        logger.verbose("BrowserCrypto: modern crypto interface available");
+    }
+    else {
+        logger.error("BrowserCrypto: crypto interface is unavailable");
+        throw createBrowserAuthError(cryptoNonExistent);
+    }
+}
+/**
+ * Returns a sha-256 hash of the given dataString as an ArrayBuffer.
+ * @param dataString
+ */
+async function sha256Digest(dataString, performanceClient, correlationId) {
+    performanceClient?.addQueueMeasurement(PerformanceEvents.Sha256Digest, correlationId);
+    const encoder = new TextEncoder();
+    const data = encoder.encode(dataString);
+    return window.crypto.subtle.digest(S256_HASH_ALG, data);
+}
+/**
+ * Populates buffer with cryptographically random values.
+ * @param dataBuffer
+ */
+function getRandomValues(dataBuffer) {
+    return window.crypto.getRandomValues(dataBuffer);
+}
+/**
+ * Creates a new random GUID
+ * @returns
+ */
+function createNewGuid() {
+    return window.crypto.randomUUID();
+}
+/**
+ * Generates a keypair based on current keygen algorithm config.
+ * @param extractable
+ * @param usages
+ */
+async function generateKeyPair(extractable, usages) {
+    return window.crypto.subtle.generateKey(keygenAlgorithmOptions, extractable, usages);
+}
+/**
+ * Export key as Json Web Key (JWK)
+ * @param key
+ */
+async function exportJwk(key) {
+    return window.crypto.subtle.exportKey(KEY_FORMAT_JWK, key);
+}
+/**
+ * Imports key as Json Web Key (JWK), can set extractable and usages.
+ * @param key
+ * @param extractable
+ * @param usages
+ */
+async function importJwk(key, extractable, usages) {
+    return window.crypto.subtle.importKey(KEY_FORMAT_JWK, key, keygenAlgorithmOptions, extractable, usages);
+}
+/**
+ * Signs given data with given key
+ * @param key
+ * @param data
+ */
+async function sign(key, data) {
+    return window.crypto.subtle.sign(keygenAlgorithmOptions, key, data);
 }
 
 export { createNewGuid, exportJwk, generateKeyPair, getRandomValues, importJwk, sha256Digest, sign, validateCryptoAvailable };

package/dist/crypto/BrowserCrypto.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"BrowserCrypto.mjs","sources":["../../src/crypto/BrowserCrypto.ts"],"sourcesContent":[null],"names":["BrowserAuthErrorCodes.cryptoNonExistent"],"mappings":";;;;;;;AASA;AA+BA;;AAEG;;AAaA;AACH;AAiBA;;;AAGG;AACH;AAIA,MAAA,oBAAA,GAAA,mBAAA,CAAA;;;AAGG;AACH,MAAgB,cAAA,GAAA,IAAA,CAAA;AAIhB;;;;AAIG,IAAA,IAAA,EAAA,aAAA;AACH,IAAA,aAAA,EAAA;AAWA,IAAA,cAAA,EAAA,eAAA;;;AAGG;AACH;AAOA,SAAA,uBAAA,CAAA,MAAA,EAAA;;;;;AAKG,QAAA,MAAA,CAAA,KAAA,CAAA,gDAAA,CAAA,CAAA;AACH,QAAsB,MAAA,sBACf,CAAAA;AAaP,KAAA;;;;AAIG;AACH;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;"}
+{"version":3,"file":"BrowserCrypto.mjs","sources":["../../src/crypto/BrowserCrypto.ts"],"sourcesContent":[null],"names":["BrowserAuthErrorCodes.cryptoNonExistent"],"mappings":";;;;;;;AAAA;;;AAGG;AAaH;;;AAGG;AAEH;;AAEG;AACH;AACA,MAAM,oBAAoB,GAAG,mBAAmB,CAAC;AACjD;AACA,MAAM,aAAa,GAAG,SAAS,CAAC;AAChC;AACA,MAAM,cAAc,GAAG,IAAI,CAAC;AAC5B;AACA,MAAM,eAAe,GAAe,IAAI,UAAU,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;AAEvE,MAAM,sBAAsB,GAA0B;AAClD,IAAA,IAAI,EAAE,oBAAoB;AAC1B,IAAA,IAAI,EAAE,aAAa;AACnB,IAAA,aAAa,EAAE,cAAc;AAC7B,IAAA,cAAc,EAAE,eAAe;CAClC,CAAC;AAEF;;AAEG;AACG,SAAU,uBAAuB,CAAC,MAAc,EAAA;IAClD,IAAI,QAAQ,IAAI,MAAM,EAAE;AACpB,QAAA,MAAM,CAAC,OAAO,CAAC,kDAAkD,CAAC,CAAC;AACtE,KAAA;AAAM,SAAA;AACH,QAAA,MAAM,CAAC,KAAK,CAAC,gDAAgD,CAAC,CAAC;AAC/D,QAAA,MAAM,sBAAsB,CAACA,iBAAuC,CAAC,CAAC;AACzE,KAAA;AACL,CAAC;AAED;;;AAGG;AACI,eAAe,YAAY,CAC9B,UAAkB,EAClB,iBAAsC,EACtC,aAAsB,EAAA;IAEtB,iBAAiB,EAAE,mBAAmB,CAClC,iBAAiB,CAAC,YAAY,EAC9B,aAAa,CAChB,CAAC;AACF,IAAA,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;IAClC,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;AACxC,IAAA,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAC9B,aAAa,EACb,IAAI,CACiB,CAAC;AAC9B,CAAC;AAED;;;AAGG;AACG,SAAU,eAAe,CAAC,UAAsB,EAAA;IAClD,OAAO,MAAM,CAAC,MAAM,CAAC,eAAe,CAAC,UAAU,CAAC,CAAC;AACrD,CAAC;AAED;;;AAGG;SACa,aAAa,GAAA;AACzB,IAAA,OAAO,MAAM,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;AACtC,CAAC;AAED;;;;AAIG;AACI,eAAe,eAAe,CACjC,WAAoB,EACpB,MAAuB,EAAA;AAEvB,IAAA,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,WAAW,CACnC,sBAAsB,EACtB,WAAW,EACX,MAAM,CACiB,CAAC;AAChC,CAAC;AAED;;;AAGG;AACI,eAAe,SAAS,CAAC,GAAc,EAAA;AAC1C,IAAA,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,CACjC,cAAc,EACd,GAAG,CACiB,CAAC;AAC7B,CAAC;AAED;;;;;AAKG;AACI,eAAe,SAAS,CAC3B,GAAe,EACf,WAAoB,EACpB,MAAuB,EAAA;AAEvB,IAAA,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,CACjC,cAAc,EACd,GAAG,EACH,sBAAsB,EACtB,WAAW,EACX,MAAM,CACa,CAAC;AAC5B,CAAC;AAED;;;;AAIG;AACI,eAAe,IAAI,CACtB,GAAc,EACd,IAAiB,EAAA;AAEjB,IAAA,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAC5B,sBAAsB,EACtB,GAAG,EACH,IAAI,CACiB,CAAC;AAC9B;;;;"}

package/dist/crypto/CryptoOps.d.ts

@@ -1,64 +1,64 @@
-import { ICrypto, IPerformanceClient, Logger, ShrOptions, SignedHttpRequest, SignedHttpRequestParameters } from "@azure/msal-common";
-export type CachedKeyPair = {
-    publicKey: CryptoKey;
-    privateKey: CryptoKey;
-    requestMethod?: string;
-    requestUri?: string;
-};
-/**
- * This class implements MSAL's crypto interface, which allows it to perform base64 encoding and decoding, generating cryptographically random GUIDs and
- * implementing Proof Key for Code Exchange specs for the OAuth Authorization Code Flow using PKCE (rfc here: https://tools.ietf.org/html/rfc7636).
- */
-export declare class CryptoOps implements ICrypto {
-    private logger;
-    /**
-     * CryptoOps can be used in contexts outside a PCA instance,
-     * meaning there won't be a performance manager available.
-     */
-    private performanceClient;
-    private static POP_KEY_USAGES;
-    private static EXTRACTABLE;
-    private cache;
-    constructor(logger: Logger, performanceClient?: IPerformanceClient);
-    /**
-     * Creates a new random GUID - used to populate state and nonce.
-     * @returns string (GUID)
-     */
-    createNewGuid(): string;
-    /**
-     * Encodes input string to base64.
-     * @param input
-     */
-    base64Encode(input: string): string;
-    /**
-     * Decodes input string from base64.
-     * @param input
-     */
-    base64Decode(input: string): string;
-    /**
-     * Generates a keypair, stores it and returns a thumbprint
-     * @param request
-     */
-    getPublicKeyThumbprint(request: SignedHttpRequestParameters): Promise<string>;
-    /**
-     * Removes cryptographic keypair from key store matching the keyId passed in
-     * @param kid
-     */
-    removeTokenBindingKey(kid: string): Promise<boolean>;
-    /**
-     * Removes all cryptographic keys from IndexedDB storage
-     */
-    clearKeystore(): Promise<boolean>;
-    /**
-     * Signs the given object as a jwt payload with private key retrieved by given kid.
-     * @param payload
-     * @param kid
-     */
-    signJwt(payload: SignedHttpRequest, kid: string, shrOptions?: ShrOptions, correlationId?: string): Promise<string>;
-    /**
-     * Returns the SHA-256 hash of an input string
-     * @param plainText
-     */
-    hashString(plainText: string): Promise<string>;
-}
+import { ICrypto, IPerformanceClient, Logger, ShrOptions, SignedHttpRequest, SignedHttpRequestParameters } from "@azure/msal-common";
+export type CachedKeyPair = {
+    publicKey: CryptoKey;
+    privateKey: CryptoKey;
+    requestMethod?: string;
+    requestUri?: string;
+};
+/**
+ * This class implements MSAL's crypto interface, which allows it to perform base64 encoding and decoding, generating cryptographically random GUIDs and
+ * implementing Proof Key for Code Exchange specs for the OAuth Authorization Code Flow using PKCE (rfc here: https://tools.ietf.org/html/rfc7636).
+ */
+export declare class CryptoOps implements ICrypto {
+    private logger;
+    /**
+     * CryptoOps can be used in contexts outside a PCA instance,
+     * meaning there won't be a performance manager available.
+     */
+    private performanceClient;
+    private static POP_KEY_USAGES;
+    private static EXTRACTABLE;
+    private cache;
+    constructor(logger: Logger, performanceClient?: IPerformanceClient);
+    /**
+     * Creates a new random GUID - used to populate state and nonce.
+     * @returns string (GUID)
+     */
+    createNewGuid(): string;
+    /**
+     * Encodes input string to base64.
+     * @param input
+     */
+    base64Encode(input: string): string;
+    /**
+     * Decodes input string from base64.
+     * @param input
+     */
+    base64Decode(input: string): string;
+    /**
+     * Generates a keypair, stores it and returns a thumbprint
+     * @param request
+     */
+    getPublicKeyThumbprint(request: SignedHttpRequestParameters): Promise<string>;
+    /**
+     * Removes cryptographic keypair from key store matching the keyId passed in
+     * @param kid
+     */
+    removeTokenBindingKey(kid: string): Promise<boolean>;
+    /**
+     * Removes all cryptographic keys from IndexedDB storage
+     */
+    clearKeystore(): Promise<boolean>;
+    /**
+     * Signs the given object as a jwt payload with private key retrieved by given kid.
+     * @param payload
+     * @param kid
+     */
+    signJwt(payload: SignedHttpRequest, kid: string, shrOptions?: ShrOptions, correlationId?: string): Promise<string>;
+    /**
+     * Returns the SHA-256 hash of an input string
+     * @param plainText
+     */
+    hashString(plainText: string): Promise<string>;
+}
 //# sourceMappingURL=CryptoOps.d.ts.map