@azure/msal-browser 4.13.1 → 4.14.0

package/dist/custom-auth-path/interaction_client/StandardInteractionClient.mjs

@@ -0,0 +1,209 @@
+/*! @azure/msal-browser v4.14.0 2025-07-01 */
+'use strict';
+import { UrlString, PerformanceEvents, invokeAsync, AuthorizationCodeClient, Constants, ProtocolUtils } from '@azure/msal-common/browser';
+import { BaseInteractionClient } from './BaseInteractionClient.mjs';
+import { BrowserConstants } from '../utils/BrowserConstants.mjs';
+import { version } from '../packageMetadata.mjs';
+import { getCurrentUri } from '../utils/BrowserUtils.mjs';
+import { createNewGuid } from '../crypto/BrowserCrypto.mjs';
+import { initializeBaseRequest } from '../request/RequestHelpers.mjs';
+
+/*
+ * Copyright (c) Microsoft Corporation. All rights reserved.
+ * Licensed under the MIT License.
+ */
+/**
+ * Defines the class structure and helper functions used by the "standard", non-brokered auth flows (popup, redirect, silent (RT), silent (iframe))
+ */
+class StandardInteractionClient extends BaseInteractionClient {
+    /**
+     * Initializer for the logout request.
+     * @param logoutRequest
+     */
+    initializeLogoutRequest(logoutRequest) {
+        this.logger.verbose("initializeLogoutRequest called", logoutRequest?.correlationId);
+        const validLogoutRequest = {
+            correlationId: this.correlationId || createNewGuid(),
+            ...logoutRequest,
+        };
+        /**
+         * Set logout_hint to be login_hint from ID Token Claims if present
+         * and logoutHint attribute wasn't manually set in logout request
+         */
+        if (logoutRequest) {
+            // If logoutHint isn't set and an account was passed in, try to extract logoutHint from ID Token Claims
+            if (!logoutRequest.logoutHint) {
+                if (logoutRequest.account) {
+                    const logoutHint = this.getLogoutHintFromIdTokenClaims(logoutRequest.account);
+                    if (logoutHint) {
+                        this.logger.verbose("Setting logoutHint to login_hint ID Token Claim value for the account provided");
+                        validLogoutRequest.logoutHint = logoutHint;
+                    }
+                }
+                else {
+                    this.logger.verbose("logoutHint was not set and account was not passed into logout request, logoutHint will not be set");
+                }
+            }
+            else {
+                this.logger.verbose("logoutHint has already been set in logoutRequest");
+            }
+        }
+        else {
+            this.logger.verbose("logoutHint will not be set since no logout request was configured");
+        }
+        /*
+         * Only set redirect uri if logout request isn't provided or the set uri isn't null.
+         * Otherwise, use passed uri, config, or current page.
+         */
+        if (!logoutRequest || logoutRequest.postLogoutRedirectUri !== null) {
+            if (logoutRequest && logoutRequest.postLogoutRedirectUri) {
+                this.logger.verbose("Setting postLogoutRedirectUri to uri set on logout request", validLogoutRequest.correlationId);
+                validLogoutRequest.postLogoutRedirectUri =
+                    UrlString.getAbsoluteUrl(logoutRequest.postLogoutRedirectUri, getCurrentUri());
+            }
+            else if (this.config.auth.postLogoutRedirectUri === null) {
+                this.logger.verbose("postLogoutRedirectUri configured as null and no uri set on request, not passing post logout redirect", validLogoutRequest.correlationId);
+            }
+            else if (this.config.auth.postLogoutRedirectUri) {
+                this.logger.verbose("Setting postLogoutRedirectUri to configured uri", validLogoutRequest.correlationId);
+                validLogoutRequest.postLogoutRedirectUri =
+                    UrlString.getAbsoluteUrl(this.config.auth.postLogoutRedirectUri, getCurrentUri());
+            }
+            else {
+                this.logger.verbose("Setting postLogoutRedirectUri to current page", validLogoutRequest.correlationId);
+                validLogoutRequest.postLogoutRedirectUri =
+                    UrlString.getAbsoluteUrl(getCurrentUri(), getCurrentUri());
+            }
+        }
+        else {
+            this.logger.verbose("postLogoutRedirectUri passed as null, not setting post logout redirect uri", validLogoutRequest.correlationId);
+        }
+        return validLogoutRequest;
+    }
+    /**
+     * Parses login_hint ID Token Claim out of AccountInfo object to be used as
+     * logout_hint in end session request.
+     * @param account
+     */
+    getLogoutHintFromIdTokenClaims(account) {
+        const idTokenClaims = account.idTokenClaims;
+        if (idTokenClaims) {
+            if (idTokenClaims.login_hint) {
+                return idTokenClaims.login_hint;
+            }
+            else {
+                this.logger.verbose("The ID Token Claims tied to the provided account do not contain a login_hint claim, logoutHint will not be added to logout request");
+            }
+        }
+        else {
+            this.logger.verbose("The provided account does not contain ID Token Claims, logoutHint will not be added to logout request");
+        }
+        return null;
+    }
+    /**
+     * Creates an Authorization Code Client with the given authority, or the default authority.
+     * @param params {
+     *         serverTelemetryManager: ServerTelemetryManager;
+     *         authorityUrl?: string;
+     *         requestAzureCloudOptions?: AzureCloudOptions;
+     *         requestExtraQueryParameters?: StringDict;
+     *         account?: AccountInfo;
+     *        }
+     */
+    async createAuthCodeClient(params) {
+        this.performanceClient.addQueueMeasurement(PerformanceEvents.StandardInteractionClientCreateAuthCodeClient, this.correlationId);
+        // Create auth module.
+        const clientConfig = await invokeAsync(this.getClientConfiguration.bind(this), PerformanceEvents.StandardInteractionClientGetClientConfiguration, this.logger, this.performanceClient, this.correlationId)(params);
+        return new AuthorizationCodeClient(clientConfig, this.performanceClient);
+    }
+    /**
+     * Creates a Client Configuration object with the given request authority, or the default authority.
+     * @param params {
+     *         serverTelemetryManager: ServerTelemetryManager;
+     *         requestAuthority?: string;
+     *         requestAzureCloudOptions?: AzureCloudOptions;
+     *         requestExtraQueryParameters?: boolean;
+     *         account?: AccountInfo;
+     *        }
+     */
+    async getClientConfiguration(params) {
+        const { serverTelemetryManager, requestAuthority, requestAzureCloudOptions, requestExtraQueryParameters, account, } = params;
+        this.performanceClient.addQueueMeasurement(PerformanceEvents.StandardInteractionClientGetClientConfiguration, this.correlationId);
+        const discoveredAuthority = await invokeAsync(this.getDiscoveredAuthority.bind(this), PerformanceEvents.StandardInteractionClientGetDiscoveredAuthority, this.logger, this.performanceClient, this.correlationId)({
+            requestAuthority,
+            requestAzureCloudOptions,
+            requestExtraQueryParameters,
+            account,
+        });
+        const logger = this.config.system.loggerOptions;
+        return {
+            authOptions: {
+                clientId: this.config.auth.clientId,
+                authority: discoveredAuthority,
+                clientCapabilities: this.config.auth.clientCapabilities,
+                redirectUri: this.config.auth.redirectUri,
+            },
+            systemOptions: {
+                tokenRenewalOffsetSeconds: this.config.system.tokenRenewalOffsetSeconds,
+                preventCorsPreflight: true,
+            },
+            loggerOptions: {
+                loggerCallback: logger.loggerCallback,
+                piiLoggingEnabled: logger.piiLoggingEnabled,
+                logLevel: logger.logLevel,
+                correlationId: this.correlationId,
+            },
+            cacheOptions: {
+                claimsBasedCachingEnabled: this.config.cache.claimsBasedCachingEnabled,
+            },
+            cryptoInterface: this.browserCrypto,
+            networkInterface: this.networkClient,
+            storageInterface: this.browserStorage,
+            serverTelemetryManager: serverTelemetryManager,
+            libraryInfo: {
+                sku: BrowserConstants.MSAL_SKU,
+                version: version,
+                cpu: Constants.EMPTY_STRING,
+                os: Constants.EMPTY_STRING,
+            },
+            telemetry: this.config.telemetry,
+        };
+    }
+    /**
+     * Helper to initialize required request parameters for interactive APIs and ssoSilent()
+     * @param request
+     * @param interactionType
+     */
+    async initializeAuthorizationRequest(request, interactionType) {
+        this.performanceClient.addQueueMeasurement(PerformanceEvents.StandardInteractionClientInitializeAuthorizationRequest, this.correlationId);
+        const redirectUri = this.getRedirectUri(request.redirectUri);
+        const browserState = {
+            interactionType: interactionType,
+        };
+        const state = ProtocolUtils.setRequestState(this.browserCrypto, (request && request.state) || Constants.EMPTY_STRING, browserState);
+        const baseRequest = await invokeAsync(initializeBaseRequest, PerformanceEvents.InitializeBaseRequest, this.logger, this.performanceClient, this.correlationId)({ ...request, correlationId: this.correlationId }, this.config, this.performanceClient, this.logger);
+        const validatedRequest = {
+            ...baseRequest,
+            redirectUri: redirectUri,
+            state: state,
+            nonce: request.nonce || createNewGuid(),
+            responseMode: this.config.auth.OIDCOptions
+                .serverResponseType,
+        };
+        // Skip active account lookup if either login hint or session id is set
+        if (request.loginHint || request.sid) {
+            return validatedRequest;
+        }
+        const account = request.account ||
+            this.browserStorage.getActiveAccount(this.correlationId);
+        if (account) {
+            this.logger.verbose("Setting validated request account", this.correlationId);
+            this.logger.verbosePii(`Setting validated request account: ${account.homeAccountId}`, this.correlationId);
+            validatedRequest.account = account;
+        }
+        return validatedRequest;
+    }
+}
+
+export { StandardInteractionClient };
+//# sourceMappingURL=StandardInteractionClient.mjs.map

package/dist/custom-auth-path/interaction_client/StandardInteractionClient.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"StandardInteractionClient.mjs","sources":["../../../../src/interaction_client/StandardInteractionClient.ts"],"sourcesContent":[null],"names":["BrowserUtils.getCurrentUri"],"mappings":";;;;;;;;;;AAAA;;;AAGG;AAmCH;;AAEG;AACG,MAAgB,yBAA0B,SAAQ,qBAAqB,CAAA;AACzE;;;AAGG;AACO,IAAA,uBAAuB,CAC7B,aAAiC,EAAA;QAEjC,IAAI,CAAC,MAAM,CAAC,OAAO,CACf,gCAAgC,EAChC,aAAa,EAAE,aAAa,CAC/B,CAAC;AAEF,QAAA,MAAM,kBAAkB,GAA4B;AAChD,YAAA,aAAa,EAAE,IAAI,CAAC,aAAa,IAAI,aAAa,EAAE;AACpD,YAAA,GAAG,aAAa;SACnB,CAAC;AAEF;;;AAGG;AACH,QAAA,IAAI,aAAa,EAAE;;AAEf,YAAA,IAAI,CAAC,aAAa,CAAC,UAAU,EAAE;gBAC3B,IAAI,aAAa,CAAC,OAAO,EAAE;oBACvB,MAAM,UAAU,GAAG,IAAI,CAAC,8BAA8B,CAClD,aAAa,CAAC,OAAO,CACxB,CAAC;AACF,oBAAA,IAAI,UAAU,EAAE;AACZ,wBAAA,IAAI,CAAC,MAAM,CAAC,OAAO,CACf,gFAAgF,CACnF,CAAC;AACF,wBAAA,kBAAkB,CAAC,UAAU,GAAG,UAAU,CAAC;AAC9C,qBAAA;AACJ,iBAAA;AAAM,qBAAA;AACH,oBAAA,IAAI,CAAC,MAAM,CAAC,OAAO,CACf,mGAAmG,CACtG,CAAC;AACL,iBAAA;AACJ,aAAA;AAAM,iBAAA;AACH,gBAAA,IAAI,CAAC,MAAM,CAAC,OAAO,CACf,kDAAkD,CACrD,CAAC;AACL,aAAA;AACJ,SAAA;AAAM,aAAA;AACH,YAAA,IAAI,CAAC,MAAM,CAAC,OAAO,CACf,mEAAmE,CACtE,CAAC;AACL,SAAA;AAED;;;AAGG;QACH,IAAI,CAAC,aAAa,IAAI,aAAa,CAAC,qBAAqB,KAAK,IAAI,EAAE;AAChE,YAAA,IAAI,aAAa,IAAI,aAAa,CAAC,qBAAqB,EAAE;gBACtD,IAAI,CAAC,MAAM,CAAC,OAAO,CACf,4DAA4D,EAC5D,kBAAkB,CAAC,aAAa,CACnC,CAAC;AACF,gBAAA,kBAAkB,CAAC,qBAAqB;AACpC,oBAAA,SAAS,CAAC,cAAc,CACpB,aAAa,CAAC,qBAAqB,EACnCA,aAA0B,EAAE,CAC/B,CAAC;AACT,aAAA;iBAAM,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,qBAAqB,KAAK,IAAI,EAAE;gBACxD,IAAI,CAAC,MAAM,CAAC,OAAO,CACf,sGAAsG,EACtG,kBAAkB,CAAC,aAAa,CACnC,CAAC;AACL,aAAA;AAAM,iBAAA,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,qBAAqB,EAAE;gBAC/C,IAAI,CAAC,MAAM,CAAC,OAAO,CACf,iDAAiD,EACjD,kBAAkB,CAAC,aAAa,CACnC,CAAC;AACF,gBAAA,kBAAkB,CAAC,qBAAqB;AACpC,oBAAA,SAAS,CAAC,cAAc,CACpB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,qBAAqB,EACtCA,aAA0B,EAAE,CAC/B,CAAC;AACT,aAAA;AAAM,iBAAA;gBACH,IAAI,CAAC,MAAM,CAAC,OAAO,CACf,+CAA+C,EAC/C,kBAAkB,CAAC,aAAa,CACnC,CAAC;AACF,gBAAA,kBAAkB,CAAC,qBAAqB;AACpC,oBAAA,SAAS,CAAC,cAAc,CACpBA,aAA0B,EAAE,EAC5BA,aAA0B,EAAE,CAC/B,CAAC;AACT,aAAA;AACJ,SAAA;AAAM,aAAA;YACH,IAAI,CAAC,MAAM,CAAC,OAAO,CACf,4EAA4E,EAC5E,kBAAkB,CAAC,aAAa,CACnC,CAAC;AACL,SAAA;AAED,QAAA,OAAO,kBAAkB,CAAC;KAC7B;AAED;;;;AAIG;AACO,IAAA,8BAA8B,CACpC,OAAoB,EAAA;AAEpB,QAAA,MAAM,aAAa,GAA8B,OAAO,CAAC,aAAa,CAAC;AACvE,QAAA,IAAI,aAAa,EAAE;YACf,IAAI,aAAa,CAAC,UAAU,EAAE;gBAC1B,OAAO,aAAa,CAAC,UAAU,CAAC;AACnC,aAAA;AAAM,iBAAA;AACH,gBAAA,IAAI,CAAC,MAAM,CAAC,OAAO,CACf,oIAAoI,CACvI,CAAC;AACL,aAAA;AACJ,SAAA;AAAM,aAAA;AACH,YAAA,IAAI,CAAC,MAAM,CAAC,OAAO,CACf,uGAAuG,CAC1G,CAAC;AACL,SAAA;AAED,QAAA,OAAO,IAAI,CAAC;KACf;AAED;;;;;;;;;AASG;IACO,MAAM,oBAAoB,CAAC,MAMpC,EAAA;AACG,QAAA,IAAI,CAAC,iBAAiB,CAAC,mBAAmB,CACtC,iBAAiB,CAAC,6CAA6C,EAC/D,IAAI,CAAC,aAAa,CACrB,CAAC;;AAEF,QAAA,MAAM,YAAY,GAAG,MAAM,WAAW,CAClC,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,IAAI,CAAC,EACtC,iBAAiB,CAAC,+CAA+C,EACjE,IAAI,CAAC,MAAM,EACX,IAAI,CAAC,iBAAiB,EACtB,IAAI,CAAC,aAAa,CACrB,CAAC,MAAM,CAAC,CAAC;QAEV,OAAO,IAAI,uBAAuB,CAC9B,YAAY,EACZ,IAAI,CAAC,iBAAiB,CACzB,CAAC;KACL;AAED;;;;;;;;;AASG;IACO,MAAM,sBAAsB,CAAC,MAMtC,EAAA;AACG,QAAA,MAAM,EACF,sBAAsB,EACtB,gBAAgB,EAChB,wBAAwB,EACxB,2BAA2B,EAC3B,OAAO,GACV,GAAG,MAAM,CAAC;AAEX,QAAA,IAAI,CAAC,iBAAiB,CAAC,mBAAmB,CACtC,iBAAiB,CAAC,+CAA+C,EACjE,IAAI,CAAC,aAAa,CACrB,CAAC;AACF,QAAA,MAAM,mBAAmB,GAAG,MAAM,WAAW,CACzC,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,IAAI,CAAC,EACtC,iBAAiB,CAAC,+CAA+C,EACjE,IAAI,CAAC,MAAM,EACX,IAAI,CAAC,iBAAiB,EACtB,IAAI,CAAC,aAAa,CACrB,CAAC;YACE,gBAAgB;YAChB,wBAAwB;YACxB,2BAA2B;YAC3B,OAAO;AACV,SAAA,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC;QAEhD,OAAO;AACH,YAAA,WAAW,EAAE;AACT,gBAAA,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ;AACnC,gBAAA,SAAS,EAAE,mBAAmB;AAC9B,gBAAA,kBAAkB,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,kBAAkB;AACvD,gBAAA,WAAW,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW;AAC5C,aAAA;AACD,YAAA,aAAa,EAAE;AACX,gBAAA,yBAAyB,EACrB,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,yBAAyB;AAChD,gBAAA,oBAAoB,EAAE,IAAI;AAC7B,aAAA;AACD,YAAA,aAAa,EAAE;gBACX,cAAc,EAAE,MAAM,CAAC,cAAc;gBACrC,iBAAiB,EAAE,MAAM,CAAC,iBAAiB;gBAC3C,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,aAAa,EAAE,IAAI,CAAC,aAAa;AACpC,aAAA;AACD,YAAA,YAAY,EAAE;AACV,gBAAA,yBAAyB,EACrB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,yBAAyB;AAClD,aAAA;YACD,eAAe,EAAE,IAAI,CAAC,aAAa;YACnC,gBAAgB,EAAE,IAAI,CAAC,aAAa;YACpC,gBAAgB,EAAE,IAAI,CAAC,cAAc;AACrC,YAAA,sBAAsB,EAAE,sBAAsB;AAC9C,YAAA,WAAW,EAAE;gBACT,GAAG,EAAE,gBAAgB,CAAC,QAAQ;AAC9B,gBAAA,OAAO,EAAE,OAAO;gBAChB,GAAG,EAAE,SAAS,CAAC,YAAY;gBAC3B,EAAE,EAAE,SAAS,CAAC,YAAY;AAC7B,aAAA;AACD,YAAA,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,SAAS;SACnC,CAAC;KACL;AAED;;;;AAIG;AACO,IAAA,MAAM,8BAA8B,CAC1C,OAA0D,EAC1D,eAAgC,EAAA;AAEhC,QAAA,IAAI,CAAC,iBAAiB,CAAC,mBAAmB,CACtC,iBAAiB,CAAC,uDAAuD,EACzE,IAAI,CAAC,aAAa,CACrB,CAAC;QAEF,MAAM,WAAW,GAAG,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;AAC7D,QAAA,MAAM,YAAY,GAAuB;AACrC,YAAA,eAAe,EAAE,eAAe;SACnC,CAAC;QACF,MAAM,KAAK,GAAG,aAAa,CAAC,eAAe,CACvC,IAAI,CAAC,aAAa,EAClB,CAAC,OAAO,IAAI,OAAO,CAAC,KAAK,KAAK,SAAS,CAAC,YAAY,EACpD,YAAY,CACf,CAAC;QAEF,MAAM,WAAW,GAAoB,MAAM,WAAW,CAClD,qBAAqB,EACrB,iBAAiB,CAAC,qBAAqB,EACvC,IAAI,CAAC,MAAM,EACX,IAAI,CAAC,iBAAiB,EACtB,IAAI,CAAC,aAAa,CACrB,CACG,EAAE,GAAG,OAAO,EAAE,aAAa,EAAE,IAAI,CAAC,aAAa,EAAE,EACjD,IAAI,CAAC,MAAM,EACX,IAAI,CAAC,iBAAiB,EACtB,IAAI,CAAC,MAAM,CACd,CAAC;AAEF,QAAA,MAAM,gBAAgB,GAAkC;AACpD,YAAA,GAAG,WAAW;AACd,YAAA,WAAW,EAAE,WAAW;AACxB,YAAA,KAAK,EAAE,KAAK;AACZ,YAAA,KAAK,EAAE,OAAO,CAAC,KAAK,IAAI,aAAa,EAAE;AACvC,YAAA,YAAY,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW;iBACrC,kBAAkC;SAC1C,CAAC;;AAGF,QAAA,IAAI,OAAO,CAAC,SAAS,IAAI,OAAO,CAAC,GAAG,EAAE;AAClC,YAAA,OAAO,gBAAgB,CAAC;AAC3B,SAAA;AAED,QAAA,MAAM,OAAO,GACT,OAAO,CAAC,OAAO;YACf,IAAI,CAAC,cAAc,CAAC,gBAAgB,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;AAC7D,QAAA,IAAI,OAAO,EAAE;YACT,IAAI,CAAC,MAAM,CAAC,OAAO,CACf,mCAAmC,EACnC,IAAI,CAAC,aAAa,CACrB,CAAC;AACF,YAAA,IAAI,CAAC,MAAM,CAAC,UAAU,CAClB,CAAsC,mCAAA,EAAA,OAAO,CAAC,aAAa,EAAE,EAC7D,IAAI,CAAC,aAAa,CACrB,CAAC;AACF,YAAA,gBAAgB,CAAC,OAAO,GAAG,OAAO,CAAC;AACtC,SAAA;AAED,QAAA,OAAO,gBAAgB,CAAC;KAC3B;AACJ;;;;"}

package/dist/custom-auth-path/interaction_handler/InteractionHandler.d.ts

@@ -0,0 +1,33 @@
+import { AuthorizationCodePayload, CommonAuthorizationCodeRequest, AuthorizationCodeClient, CcsCredential, Logger, IPerformanceClient, AuthorizeResponse, CommonAuthorizationUrlRequest } from "@azure/msal-common/browser";
+import { BrowserCacheManager } from "../cache/BrowserCacheManager.js";
+import { AuthenticationResult } from "../response/AuthenticationResult.js";
+/**
+ * Abstract class which defines operations for a browser interaction handling class.
+ */
+export declare class InteractionHandler {
+    protected authModule: AuthorizationCodeClient;
+    protected browserStorage: BrowserCacheManager;
+    protected authCodeRequest: CommonAuthorizationCodeRequest;
+    protected logger: Logger;
+    protected performanceClient: IPerformanceClient;
+    constructor(authCodeModule: AuthorizationCodeClient, storageImpl: BrowserCacheManager, authCodeRequest: CommonAuthorizationCodeRequest, logger: Logger, performanceClient: IPerformanceClient);
+    /**
+     * Function to handle response parameters from hash.
+     * @param locationHash
+     */
+    handleCodeResponse(response: AuthorizeResponse, request: CommonAuthorizationUrlRequest): Promise<AuthenticationResult>;
+    /**
+     * Process auth code response from AAD
+     * @param authCodeResponse
+     * @param state
+     * @param authority
+     * @param networkModule
+     * @returns
+     */
+    handleCodeResponseFromServer(authCodeResponse: AuthorizationCodePayload, request: CommonAuthorizationUrlRequest, validateNonce?: boolean): Promise<AuthenticationResult>;
+    /**
+     * Build ccs creds if available
+     */
+    protected createCcsCredentials(request: CommonAuthorizationUrlRequest): CcsCredential | null;
+}
+//# sourceMappingURL=InteractionHandler.d.ts.map

package/dist/custom-auth-path/interaction_handler/InteractionHandler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"InteractionHandler.d.ts","sourceRoot":"","sources":["../../../src/interaction_handler/InteractionHandler.ts"],"names":[],"mappings":"AAKA,OAAO,EACH,wBAAwB,EACxB,8BAA8B,EAC9B,uBAAuB,EACvB,aAAa,EACb,MAAM,EAEN,kBAAkB,EAIlB,iBAAiB,EAEjB,6BAA6B,EAChC,MAAM,4BAA4B,CAAC;AAEpC,OAAO,EAAE,mBAAmB,EAAE,MAAM,iCAAiC,CAAC;AAKtE,OAAO,EAAE,oBAAoB,EAAE,MAAM,qCAAqC,CAAC;AAE3E;;GAEG;AACH,qBAAa,kBAAkB;IAC3B,SAAS,CAAC,UAAU,EAAE,uBAAuB,CAAC;IAC9C,SAAS,CAAC,cAAc,EAAE,mBAAmB,CAAC;IAC9C,SAAS,CAAC,eAAe,EAAE,8BAA8B,CAAC;IAC1D,SAAS,CAAC,MAAM,EAAE,MAAM,CAAC;IACzB,SAAS,CAAC,iBAAiB,EAAE,kBAAkB,CAAC;gBAG5C,cAAc,EAAE,uBAAuB,EACvC,WAAW,EAAE,mBAAmB,EAChC,eAAe,EAAE,8BAA8B,EAC/C,MAAM,EAAE,MAAM,EACd,iBAAiB,EAAE,kBAAkB;IASzC;;;OAGG;IACG,kBAAkB,CACpB,QAAQ,EAAE,iBAAiB,EAC3B,OAAO,EAAE,6BAA6B,GACvC,OAAO,CAAC,oBAAoB,CAAC;IAmChC;;;;;;;OAOG;IACG,4BAA4B,CAC9B,gBAAgB,EAAE,wBAAwB,EAC1C,OAAO,EAAE,6BAA6B,EACtC,aAAa,GAAE,OAAc,GAC9B,OAAO,CAAC,oBAAoB,CAAC;IAoDhC;;OAEG;IACH,SAAS,CAAC,oBAAoB,CAC1B,OAAO,EAAE,6BAA6B,GACvC,aAAa,GAAG,IAAI;CAe1B"}

package/dist/custom-auth-path/interaction_handler/InteractionHandler.mjs

@@ -0,0 +1,102 @@
+/*! @azure/msal-browser v4.14.0 2025-07-01 */
+'use strict';
+import { PerformanceEvents, AuthorizeProtocol, ServerError, invokeAsync, CcsCredentialType } from '@azure/msal-common/browser';
+import { createBrowserAuthError } from '../error/BrowserAuthError.mjs';
+import { userCancelled } from '../error/BrowserAuthErrorCodes.mjs';
+
+/*
+ * Copyright (c) Microsoft Corporation. All rights reserved.
+ * Licensed under the MIT License.
+ */
+/**
+ * Abstract class which defines operations for a browser interaction handling class.
+ */
+class InteractionHandler {
+    constructor(authCodeModule, storageImpl, authCodeRequest, logger, performanceClient) {
+        this.authModule = authCodeModule;
+        this.browserStorage = storageImpl;
+        this.authCodeRequest = authCodeRequest;
+        this.logger = logger;
+        this.performanceClient = performanceClient;
+    }
+    /**
+     * Function to handle response parameters from hash.
+     * @param locationHash
+     */
+    async handleCodeResponse(response, request) {
+        this.performanceClient.addQueueMeasurement(PerformanceEvents.HandleCodeResponse, request.correlationId);
+        let authCodeResponse;
+        try {
+            authCodeResponse = AuthorizeProtocol.getAuthorizationCodePayload(response, request.state);
+        }
+        catch (e) {
+            if (e instanceof ServerError &&
+                e.subError === userCancelled) {
+                // Translate server error caused by user closing native prompt to corresponding first class MSAL error
+                throw createBrowserAuthError(userCancelled);
+            }
+            else {
+                throw e;
+            }
+        }
+        return invokeAsync(this.handleCodeResponseFromServer.bind(this), PerformanceEvents.HandleCodeResponseFromServer, this.logger, this.performanceClient, request.correlationId)(authCodeResponse, request);
+    }
+    /**
+     * Process auth code response from AAD
+     * @param authCodeResponse
+     * @param state
+     * @param authority
+     * @param networkModule
+     * @returns
+     */
+    async handleCodeResponseFromServer(authCodeResponse, request, validateNonce = true) {
+        this.performanceClient.addQueueMeasurement(PerformanceEvents.HandleCodeResponseFromServer, request.correlationId);
+        this.logger.trace("InteractionHandler.handleCodeResponseFromServer called");
+        // Assign code to request
+        this.authCodeRequest.code = authCodeResponse.code;
+        // Check for new cloud instance
+        if (authCodeResponse.cloud_instance_host_name) {
+            await invokeAsync(this.authModule.updateAuthority.bind(this.authModule), PerformanceEvents.UpdateTokenEndpointAuthority, this.logger, this.performanceClient, request.correlationId)(authCodeResponse.cloud_instance_host_name, request.correlationId);
+        }
+        // Nonce validation not needed when redirect not involved (e.g. hybrid spa, renewing token via rt)
+        if (validateNonce) {
+            // TODO: Assigning "response nonce" to "request nonce" is confusing. Refactor the function doing validation to accept request nonce directly
+            authCodeResponse.nonce = request.nonce || undefined;
+        }
+        authCodeResponse.state = request.state;
+        // Add CCS parameters if available
+        if (authCodeResponse.client_info) {
+            this.authCodeRequest.clientInfo = authCodeResponse.client_info;
+        }
+        else {
+            const ccsCred = this.createCcsCredentials(request);
+            if (ccsCred) {
+                this.authCodeRequest.ccsCredential = ccsCred;
+            }
+        }
+        // Acquire token with retrieved code.
+        const tokenResponse = (await invokeAsync(this.authModule.acquireToken.bind(this.authModule), PerformanceEvents.AuthClientAcquireToken, this.logger, this.performanceClient, request.correlationId)(this.authCodeRequest, authCodeResponse));
+        return tokenResponse;
+    }
+    /**
+     * Build ccs creds if available
+     */
+    createCcsCredentials(request) {
+        if (request.account) {
+            return {
+                credential: request.account.homeAccountId,
+                type: CcsCredentialType.HOME_ACCOUNT_ID,
+            };
+        }
+        else if (request.loginHint) {
+            return {
+                credential: request.loginHint,
+                type: CcsCredentialType.UPN,
+            };
+        }
+        return null;
+    }
+}
+
+export { InteractionHandler };
+//# sourceMappingURL=InteractionHandler.mjs.map

package/dist/custom-auth-path/interaction_handler/InteractionHandler.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"InteractionHandler.mjs","sources":["../../../../src/interaction_handler/InteractionHandler.ts"],"sourcesContent":[null],"names":["BrowserAuthErrorCodes.userCancelled"],"mappings":";;;;;;AAAA;;;AAGG;AAyBH;;AAEG;MACU,kBAAkB,CAAA;IAO3B,WACI,CAAA,cAAuC,EACvC,WAAgC,EAChC,eAA+C,EAC/C,MAAc,EACd,iBAAqC,EAAA;AAErC,QAAA,IAAI,CAAC,UAAU,GAAG,cAAc,CAAC;AACjC,QAAA,IAAI,CAAC,cAAc,GAAG,WAAW,CAAC;AAClC,QAAA,IAAI,CAAC,eAAe,GAAG,eAAe,CAAC;AACvC,QAAA,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;AACrB,QAAA,IAAI,CAAC,iBAAiB,GAAG,iBAAiB,CAAC;KAC9C;AAED;;;AAGG;AACH,IAAA,MAAM,kBAAkB,CACpB,QAA2B,EAC3B,OAAsC,EAAA;AAEtC,QAAA,IAAI,CAAC,iBAAiB,CAAC,mBAAmB,CACtC,iBAAiB,CAAC,kBAAkB,EACpC,OAAO,CAAC,aAAa,CACxB,CAAC;AAEF,QAAA,IAAI,gBAAgB,CAAC;QACrB,IAAI;YACA,gBAAgB,GAAG,iBAAiB,CAAC,2BAA2B,CAC5D,QAAQ,EACR,OAAO,CAAC,KAAK,CAChB,CAAC;AACL,SAAA;AAAC,QAAA,OAAO,CAAC,EAAE;YACR,IACI,CAAC,YAAY,WAAW;AACxB,gBAAA,CAAC,CAAC,QAAQ,KAAKA,aAAmC,EACpD;;AAEE,gBAAA,MAAM,sBAAsB,CACxBA,aAAmC,CACtC,CAAC;AACL,aAAA;AAAM,iBAAA;AACH,gBAAA,MAAM,CAAC,CAAC;AACX,aAAA;AACJ,SAAA;AAED,QAAA,OAAO,WAAW,CACd,IAAI,CAAC,4BAA4B,CAAC,IAAI,CAAC,IAAI,CAAC,EAC5C,iBAAiB,CAAC,4BAA4B,EAC9C,IAAI,CAAC,MAAM,EACX,IAAI,CAAC,iBAAiB,EACtB,OAAO,CAAC,aAAa,CACxB,CAAC,gBAAgB,EAAE,OAAO,CAAC,CAAC;KAChC;AAED;;;;;;;AAOG;IACH,MAAM,4BAA4B,CAC9B,gBAA0C,EAC1C,OAAsC,EACtC,gBAAyB,IAAI,EAAA;AAE7B,QAAA,IAAI,CAAC,iBAAiB,CAAC,mBAAmB,CACtC,iBAAiB,CAAC,4BAA4B,EAC9C,OAAO,CAAC,aAAa,CACxB,CAAC;AACF,QAAA,IAAI,CAAC,MAAM,CAAC,KAAK,CACb,wDAAwD,CAC3D,CAAC;;QAGF,IAAI,CAAC,eAAe,CAAC,IAAI,GAAG,gBAAgB,CAAC,IAAI,CAAC;;QAGlD,IAAI,gBAAgB,CAAC,wBAAwB,EAAE;AAC3C,YAAA,MAAM,WAAW,CACb,IAAI,CAAC,UAAU,CAAC,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,EACrD,iBAAiB,CAAC,4BAA4B,EAC9C,IAAI,CAAC,MAAM,EACX,IAAI,CAAC,iBAAiB,EACtB,OAAO,CAAC,aAAa,CACxB,CAAC,gBAAgB,CAAC,wBAAwB,EAAE,OAAO,CAAC,aAAa,CAAC,CAAC;AACvE,SAAA;;AAGD,QAAA,IAAI,aAAa,EAAE;;YAEf,gBAAgB,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,SAAS,CAAC;AACvD,SAAA;AAED,QAAA,gBAAgB,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;;QAGvC,IAAI,gBAAgB,CAAC,WAAW,EAAE;YAC9B,IAAI,CAAC,eAAe,CAAC,UAAU,GAAG,gBAAgB,CAAC,WAAW,CAAC;AAClE,SAAA;AAAM,aAAA;YACH,MAAM,OAAO,GAAG,IAAI,CAAC,oBAAoB,CAAC,OAAO,CAAC,CAAC;AACnD,YAAA,IAAI,OAAO,EAAE;AACT,gBAAA,IAAI,CAAC,eAAe,CAAC,aAAa,GAAG,OAAO,CAAC;AAChD,aAAA;AACJ,SAAA;;AAGD,QAAA,MAAM,aAAa,IAAI,MAAM,WAAW,CACpC,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,EAClD,iBAAiB,CAAC,sBAAsB,EACxC,IAAI,CAAC,MAAM,EACX,IAAI,CAAC,iBAAiB,EACtB,OAAO,CAAC,aAAa,CACxB,CAAC,IAAI,CAAC,eAAe,EAAE,gBAAgB,CAAC,CAAyB,CAAC;AACnE,QAAA,OAAO,aAAa,CAAC;KACxB;AAED;;AAEG;AACO,IAAA,oBAAoB,CAC1B,OAAsC,EAAA;QAEtC,IAAI,OAAO,CAAC,OAAO,EAAE;YACjB,OAAO;AACH,gBAAA,UAAU,EAAE,OAAO,CAAC,OAAO,CAAC,aAAa;gBACzC,IAAI,EAAE,iBAAiB,CAAC,eAAe;aAC1C,CAAC;AACL,SAAA;aAAM,IAAI,OAAO,CAAC,SAAS,EAAE;YAC1B,OAAO;gBACH,UAAU,EAAE,OAAO,CAAC,SAAS;gBAC7B,IAAI,EAAE,iBAAiB,CAAC,GAAG;aAC9B,CAAC;AACL,SAAA;AAED,QAAA,OAAO,IAAI,CAAC;KACf;AACJ;;;;"}

package/dist/custom-auth-path/interaction_handler/SilentHandler.d.ts

@@ -0,0 +1,16 @@
+import { Logger, IPerformanceClient, ServerResponseType, Authority, CommonAuthorizationUrlRequest } from "@azure/msal-common/browser";
+import { BrowserConfiguration } from "../config/Configuration.js";
+/**
+ * Creates a hidden iframe to given URL using user-requested scopes as an id.
+ * @param urlNavigate
+ * @param userRequestScopes
+ */
+export declare function initiateCodeRequest(requestUrl: string, performanceClient: IPerformanceClient, logger: Logger, correlationId: string, navigateFrameWait?: number): Promise<HTMLIFrameElement>;
+export declare function initiateEarRequest(config: BrowserConfiguration, authority: Authority, request: CommonAuthorizationUrlRequest, logger: Logger, performanceClient: IPerformanceClient): Promise<HTMLIFrameElement>;
+/**
+ * Monitors an iframe content window until it loads a url with a known hash, or hits a specified timeout.
+ * @param iframe
+ * @param timeout
+ */
+export declare function monitorIframeForHash(iframe: HTMLIFrameElement, timeout: number, pollIntervalMilliseconds: number, performanceClient: IPerformanceClient, logger: Logger, correlationId: string, responseType: ServerResponseType): Promise<string>;
+//# sourceMappingURL=SilentHandler.d.ts.map

package/dist/custom-auth-path/interaction_handler/SilentHandler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"SilentHandler.d.ts","sourceRoot":"","sources":["../../../src/interaction_handler/SilentHandler.ts"],"names":[],"mappings":"AAKA,OAAO,EACH,MAAM,EACN,kBAAkB,EAIlB,kBAAkB,EAClB,SAAS,EACT,6BAA6B,EAChC,MAAM,4BAA4B,CAAC;AAKpC,OAAO,EACH,oBAAoB,EAEvB,MAAM,4BAA4B,CAAC;AAGpC;;;;GAIG;AACH,wBAAsB,mBAAmB,CACrC,UAAU,EAAE,MAAM,EAClB,iBAAiB,EAAE,kBAAkB,EACrC,MAAM,EAAE,MAAM,EACd,aAAa,EAAE,MAAM,EACrB,iBAAiB,CAAC,EAAE,MAAM,GAC3B,OAAO,CAAC,iBAAiB,CAAC,CA2B5B;AAED,wBAAsB,kBAAkB,CACpC,MAAM,EAAE,oBAAoB,EAC5B,SAAS,EAAE,SAAS,EACpB,OAAO,EAAE,6BAA6B,EACtC,MAAM,EAAE,MAAM,EACd,iBAAiB,EAAE,kBAAkB,GACtC,OAAO,CAAC,iBAAiB,CAAC,CAe5B;AAED;;;;GAIG;AACH,wBAAsB,oBAAoB,CACtC,MAAM,EAAE,iBAAiB,EACzB,OAAO,EAAE,MAAM,EACf,wBAAwB,EAAE,MAAM,EAChC,iBAAiB,EAAE,kBAAkB,EACrC,MAAM,EAAE,MAAM,EACd,aAAa,EAAE,MAAM,EACrB,YAAY,EAAE,kBAAkB,GACjC,OAAO,CAAC,MAAM,CAAC,CA+DjB"}

package/dist/custom-auth-path/interaction_handler/SilentHandler.mjs

@@ -0,0 +1,154 @@
+/*! @azure/msal-browser v4.14.0 2025-07-01 */
+'use strict';
+import { PerformanceEvents, invoke, invokeAsync, ServerResponseType } from '@azure/msal-common/browser';
+import { createBrowserAuthError } from '../error/BrowserAuthError.mjs';
+import { DEFAULT_IFRAME_TIMEOUT_MS } from '../config/Configuration.mjs';
+import { getEARForm } from '../protocol/Authorize.mjs';
+import { monitorWindowTimeout, emptyNavigateUri } from '../error/BrowserAuthErrorCodes.mjs';
+
+/*
+ * Copyright (c) Microsoft Corporation. All rights reserved.
+ * Licensed under the MIT License.
+ */
+/**
+ * Creates a hidden iframe to given URL using user-requested scopes as an id.
+ * @param urlNavigate
+ * @param userRequestScopes
+ */
+async function initiateCodeRequest(requestUrl, performanceClient, logger, correlationId, navigateFrameWait) {
+    performanceClient.addQueueMeasurement(PerformanceEvents.SilentHandlerInitiateAuthRequest, correlationId);
+    if (!requestUrl) {
+        // Throw error if request URL is empty.
+        logger.info("Navigate url is empty");
+        throw createBrowserAuthError(emptyNavigateUri);
+    }
+    if (navigateFrameWait) {
+        return invokeAsync(loadFrame, PerformanceEvents.SilentHandlerLoadFrame, logger, performanceClient, correlationId)(requestUrl, navigateFrameWait, performanceClient, correlationId);
+    }
+    return invoke(loadFrameSync, PerformanceEvents.SilentHandlerLoadFrameSync, logger, performanceClient, correlationId)(requestUrl);
+}
+async function initiateEarRequest(config, authority, request, logger, performanceClient) {
+    const frame = createHiddenIframe();
+    if (!frame.contentDocument) {
+        throw "No document associated with iframe!";
+    }
+    const form = await getEARForm(frame.contentDocument, config, authority, request, logger, performanceClient);
+    form.submit();
+    return frame;
+}
+/**
+ * Monitors an iframe content window until it loads a url with a known hash, or hits a specified timeout.
+ * @param iframe
+ * @param timeout
+ */
+async function monitorIframeForHash(iframe, timeout, pollIntervalMilliseconds, performanceClient, logger, correlationId, responseType) {
+    performanceClient.addQueueMeasurement(PerformanceEvents.SilentHandlerMonitorIframeForHash, correlationId);
+    return new Promise((resolve, reject) => {
+        if (timeout < DEFAULT_IFRAME_TIMEOUT_MS) {
+            logger.warning(`system.loadFrameTimeout or system.iframeHashTimeout set to lower (${timeout}ms) than the default (${DEFAULT_IFRAME_TIMEOUT_MS}ms). This may result in timeouts.`);
+        }
+        /*
+         * Polling for iframes can be purely timing based,
+         * since we don't need to account for interaction.
+         */
+        const timeoutId = window.setTimeout(() => {
+            window.clearInterval(intervalId);
+            reject(createBrowserAuthError(monitorWindowTimeout));
+        }, timeout);
+        const intervalId = window.setInterval(() => {
+            let href = "";
+            const contentWindow = iframe.contentWindow;
+            try {
+                /*
+                 * Will throw if cross origin,
+                 * which should be caught and ignored
+                 * since we need the interval to keep running while on STS UI.
+                 */
+                href = contentWindow ? contentWindow.location.href : "";
+            }
+            catch (e) { }
+            if (!href || href === "about:blank") {
+                return;
+            }
+            let responseString = "";
+            if (contentWindow) {
+                if (responseType === ServerResponseType.QUERY) {
+                    responseString = contentWindow.location.search;
+                }
+                else {
+                    responseString = contentWindow.location.hash;
+                }
+            }
+            window.clearTimeout(timeoutId);
+            window.clearInterval(intervalId);
+            resolve(responseString);
+        }, pollIntervalMilliseconds);
+    }).finally(() => {
+        invoke(removeHiddenIframe, PerformanceEvents.RemoveHiddenIframe, logger, performanceClient, correlationId)(iframe);
+    });
+}
+/**
+ * @hidden
+ * Loads iframe with authorization endpoint URL
+ * @ignore
+ * @deprecated
+ */
+function loadFrame(urlNavigate, navigateFrameWait, performanceClient, correlationId) {
+    performanceClient.addQueueMeasurement(PerformanceEvents.SilentHandlerLoadFrame, correlationId);
+    /*
+     * This trick overcomes iframe navigation in IE
+     * IE does not load the page consistently in iframe
+     */
+    return new Promise((resolve, reject) => {
+        const frameHandle = createHiddenIframe();
+        window.setTimeout(() => {
+            if (!frameHandle) {
+                reject("Unable to load iframe");
+                return;
+            }
+            frameHandle.src = urlNavigate;
+            resolve(frameHandle);
+        }, navigateFrameWait);
+    });
+}
+/**
+ * @hidden
+ * Loads the iframe synchronously when the navigateTimeFrame is set to `0`
+ * @param urlNavigate
+ * @param frameName
+ * @param logger
+ */
+function loadFrameSync(urlNavigate) {
+    const frameHandle = createHiddenIframe();
+    frameHandle.src = urlNavigate;
+    return frameHandle;
+}
+/**
+ * @hidden
+ * Creates a new hidden iframe or gets an existing one for silent token renewal.
+ * @ignore
+ */
+function createHiddenIframe() {
+    const authFrame = document.createElement("iframe");
+    authFrame.className = "msalSilentIframe";
+    authFrame.style.visibility = "hidden";
+    authFrame.style.position = "absolute";
+    authFrame.style.width = authFrame.style.height = "0";
+    authFrame.style.border = "0";
+    authFrame.setAttribute("sandbox", "allow-scripts allow-same-origin allow-forms");
+    document.body.appendChild(authFrame);
+    return authFrame;
+}
+/**
+ * @hidden
+ * Removes a hidden iframe from the page.
+ * @ignore
+ */
+function removeHiddenIframe(iframe) {
+    if (document.body === iframe.parentNode) {
+        document.body.removeChild(iframe);
+    }
+}
+
+export { initiateCodeRequest, initiateEarRequest, monitorIframeForHash };
+//# sourceMappingURL=SilentHandler.mjs.map

package/dist/custom-auth-path/interaction_handler/SilentHandler.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"SilentHandler.mjs","sources":["../../../../src/interaction_handler/SilentHandler.ts"],"sourcesContent":[null],"names":["BrowserAuthErrorCodes.emptyNavigateUri","BrowserAuthErrorCodes.monitorWindowTimeout"],"mappings":";;;;;;;;AAAA;;;AAGG;AAsBH;;;;AAIG;AACI,eAAe,mBAAmB,CACrC,UAAkB,EAClB,iBAAqC,EACrC,MAAc,EACd,aAAqB,EACrB,iBAA0B,EAAA;IAE1B,iBAAiB,CAAC,mBAAmB,CACjC,iBAAiB,CAAC,gCAAgC,EAClD,aAAa,CAChB,CAAC;IAEF,IAAI,CAAC,UAAU,EAAE;;AAEb,QAAA,MAAM,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;AACrC,QAAA,MAAM,sBAAsB,CAACA,gBAAsC,CAAC,CAAC;AACxE,KAAA;AACD,IAAA,IAAI,iBAAiB,EAAE;QACnB,OAAO,WAAW,CACd,SAAS,EACT,iBAAiB,CAAC,sBAAsB,EACxC,MAAM,EACN,iBAAiB,EACjB,aAAa,CAChB,CAAC,UAAU,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,aAAa,CAAC,CAAC;AACtE,KAAA;AACD,IAAA,OAAO,MAAM,CACT,aAAa,EACb,iBAAiB,CAAC,0BAA0B,EAC5C,MAAM,EACN,iBAAiB,EACjB,aAAa,CAChB,CAAC,UAAU,CAAC,CAAC;AAClB,CAAC;AAEM,eAAe,kBAAkB,CACpC,MAA4B,EAC5B,SAAoB,EACpB,OAAsC,EACtC,MAAc,EACd,iBAAqC,EAAA;AAErC,IAAA,MAAM,KAAK,GAAG,kBAAkB,EAAE,CAAC;AACnC,IAAA,IAAI,CAAC,KAAK,CAAC,eAAe,EAAE;AACxB,QAAA,MAAM,qCAAqC,CAAC;AAC/C,KAAA;AACD,IAAA,MAAM,IAAI,GAAG,MAAM,UAAU,CACzB,KAAK,CAAC,eAAe,EACrB,MAAM,EACN,SAAS,EACT,OAAO,EACP,MAAM,EACN,iBAAiB,CACpB,CAAC;IACF,IAAI,CAAC,MAAM,EAAE,CAAC;AACd,IAAA,OAAO,KAAK,CAAC;AACjB,CAAC;AAED;;;;AAIG;AACI,eAAe,oBAAoB,CACtC,MAAyB,EACzB,OAAe,EACf,wBAAgC,EAChC,iBAAqC,EACrC,MAAc,EACd,aAAqB,EACrB,YAAgC,EAAA;IAEhC,iBAAiB,CAAC,mBAAmB,CACjC,iBAAiB,CAAC,iCAAiC,EACnD,aAAa,CAChB,CAAC;IAEF,OAAO,IAAI,OAAO,CAAS,CAAC,OAAO,EAAE,MAAM,KAAI;QAC3C,IAAI,OAAO,GAAG,yBAAyB,EAAE;YACrC,MAAM,CAAC,OAAO,CACV,CAAA,kEAAA,EAAqE,OAAO,CAAyB,sBAAA,EAAA,yBAAyB,CAAmC,iCAAA,CAAA,CACpK,CAAC;AACL,SAAA;AAED;;;AAGG;AACH,QAAA,MAAM,SAAS,GAAG,MAAM,CAAC,UAAU,CAAC,MAAK;AACrC,YAAA,MAAM,CAAC,aAAa,CAAC,UAAU,CAAC,CAAC;YACjC,MAAM,CACF,sBAAsB,CAClBC,oBAA0C,CAC7C,CACJ,CAAC;SACL,EAAE,OAAO,CAAC,CAAC;AAEZ,QAAA,MAAM,UAAU,GAAG,MAAM,CAAC,WAAW,CAAC,MAAK;YACvC,IAAI,IAAI,GAAW,EAAE,CAAC;AACtB,YAAA,MAAM,aAAa,GAAG,MAAM,CAAC,aAAa,CAAC;YAC3C,IAAI;AACA;;;;AAIG;AACH,gBAAA,IAAI,GAAG,aAAa,GAAG,aAAa,CAAC,QAAQ,CAAC,IAAI,GAAG,EAAE,CAAC;AAC3D,aAAA;YAAC,OAAO,CAAC,EAAE,GAAE;AAEd,YAAA,IAAI,CAAC,IAAI,IAAI,IAAI,KAAK,aAAa,EAAE;gBACjC,OAAO;AACV,aAAA;YAED,IAAI,cAAc,GAAG,EAAE,CAAC;AACxB,YAAA,IAAI,aAAa,EAAE;AACf,gBAAA,IAAI,YAAY,KAAK,kBAAkB,CAAC,KAAK,EAAE;AAC3C,oBAAA,cAAc,GAAG,aAAa,CAAC,QAAQ,CAAC,MAAM,CAAC;AAClD,iBAAA;AAAM,qBAAA;AACH,oBAAA,cAAc,GAAG,aAAa,CAAC,QAAQ,CAAC,IAAI,CAAC;AAChD,iBAAA;AACJ,aAAA;AACD,YAAA,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC;AAC/B,YAAA,MAAM,CAAC,aAAa,CAAC,UAAU,CAAC,CAAC;YACjC,OAAO,CAAC,cAAc,CAAC,CAAC;SAC3B,EAAE,wBAAwB,CAAC,CAAC;AACjC,KAAC,CAAC,CAAC,OAAO,CAAC,MAAK;AACZ,QAAA,MAAM,CACF,kBAAkB,EAClB,iBAAiB,CAAC,kBAAkB,EACpC,MAAM,EACN,iBAAiB,EACjB,aAAa,CAChB,CAAC,MAAM,CAAC,CAAC;AACd,KAAC,CAAC,CAAC;AACP,CAAC;AAED;;;;;AAKG;AACH,SAAS,SAAS,CACd,WAAmB,EACnB,iBAAyB,EACzB,iBAAqC,EACrC,aAAqB,EAAA;IAErB,iBAAiB,CAAC,mBAAmB,CACjC,iBAAiB,CAAC,sBAAsB,EACxC,aAAa,CAChB,CAAC;AAEF;;;AAGG;IAEH,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,KAAI;AACnC,QAAA,MAAM,WAAW,GAAG,kBAAkB,EAAE,CAAC;AAEzC,QAAA,MAAM,CAAC,UAAU,CAAC,MAAK;YACnB,IAAI,CAAC,WAAW,EAAE;gBACd,MAAM,CAAC,uBAAuB,CAAC,CAAC;gBAChC,OAAO;AACV,aAAA;AAED,YAAA,WAAW,CAAC,GAAG,GAAG,WAAW,CAAC;YAE9B,OAAO,CAAC,WAAW,CAAC,CAAC;SACxB,EAAE,iBAAiB,CAAC,CAAC;AAC1B,KAAC,CAAC,CAAC;AACP,CAAC;AACD;;;;;;AAMG;AACH,SAAS,aAAa,CAAC,WAAmB,EAAA;AACtC,IAAA,MAAM,WAAW,GAAG,kBAAkB,EAAE,CAAC;AAEzC,IAAA,WAAW,CAAC,GAAG,GAAG,WAAW,CAAC;AAE9B,IAAA,OAAO,WAAW,CAAC;AACvB,CAAC;AAED;;;;AAIG;AACH,SAAS,kBAAkB,GAAA;IACvB,MAAM,SAAS,GAAG,QAAQ,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC;AAEnD,IAAA,SAAS,CAAC,SAAS,GAAG,kBAAkB,CAAC;AACzC,IAAA,SAAS,CAAC,KAAK,CAAC,UAAU,GAAG,QAAQ,CAAC;AACtC,IAAA,SAAS,CAAC,KAAK,CAAC,QAAQ,GAAG,UAAU,CAAC;AACtC,IAAA,SAAS,CAAC,KAAK,CAAC,KAAK,GAAG,SAAS,CAAC,KAAK,CAAC,MAAM,GAAG,GAAG,CAAC;AACrD,IAAA,SAAS,CAAC,KAAK,CAAC,MAAM,GAAG,GAAG,CAAC;AAC7B,IAAA,SAAS,CAAC,YAAY,CAClB,SAAS,EACT,6CAA6C,CAChD,CAAC;AACF,IAAA,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC;AAErC,IAAA,OAAO,SAAS,CAAC;AACrB,CAAC;AAED;;;;AAIG;AACH,SAAS,kBAAkB,CAAC,MAAyB,EAAA;AACjD,IAAA,IAAI,QAAQ,CAAC,IAAI,KAAK,MAAM,CAAC,UAAU,EAAE;AACrC,QAAA,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;AACrC,KAAA;AACL;;;;"}

package/dist/custom-auth-path/naa/AccountInfo.d.ts

@@ -0,0 +1,12 @@
+export type AccountInfo = {
+    homeAccountId?: string;
+    environment: string;
+    tenantId?: string;
+    username: string;
+    localAccountId?: string;
+    name?: string;
+    idToken?: string;
+    platformBrokerId?: string;
+    idTokenClaims?: object;
+};
+//# sourceMappingURL=AccountInfo.d.ts.map

package/dist/custom-auth-path/naa/AccountInfo.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"AccountInfo.d.ts","sourceRoot":"","sources":["../../../src/naa/AccountInfo.ts"],"names":[],"mappings":"AAKA,MAAM,MAAM,WAAW,GAAG;IACtB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,aAAa,CAAC,EAAE,MAAM,CAAC;CAC1B,CAAC"}

package/dist/custom-auth-path/naa/AuthBridge.d.ts

@@ -0,0 +1,9 @@
+export type AuthBridgeResponse = string | {
+    data: string;
+};
+export interface AuthBridge {
+    addEventListener: (eventName: string, callback: (response: AuthBridgeResponse) => void) => void;
+    postMessage: (message: string) => void;
+    removeEventListener: (eventName: string, callback: (response: AuthBridgeResponse) => void) => void;
+}
+//# sourceMappingURL=AuthBridge.d.ts.map

package/dist/custom-auth-path/naa/AuthBridge.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"AuthBridge.d.ts","sourceRoot":"","sources":["../../../src/naa/AuthBridge.ts"],"names":[],"mappings":"AAKA,MAAM,MAAM,kBAAkB,GAAG,MAAM,GAAG;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC;AAC3D,MAAM,WAAW,UAAU;IACvB,gBAAgB,EAAE,CACd,SAAS,EAAE,MAAM,EACjB,QAAQ,EAAE,CAAC,QAAQ,EAAE,kBAAkB,KAAK,IAAI,KAC/C,IAAI,CAAC;IACV,WAAW,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;IACvC,mBAAmB,EAAE,CACjB,SAAS,EAAE,MAAM,EACjB,QAAQ,EAAE,CAAC,QAAQ,EAAE,kBAAkB,KAAK,IAAI,KAC/C,IAAI,CAAC;CACb"}

package/dist/custom-auth-path/naa/AuthResult.d.ts

@@ -0,0 +1,7 @@
+import { AccountInfo } from "./AccountInfo.js";
+import { TokenResponse } from "./TokenResponse.js";
+export type AuthResult = {
+    token: TokenResponse;
+    account: AccountInfo;
+};
+//# sourceMappingURL=AuthResult.d.ts.map

package/dist/custom-auth-path/naa/AuthResult.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"AuthResult.d.ts","sourceRoot":"","sources":["../../../src/naa/AuthResult.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAC/C,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAEnD,MAAM,MAAM,UAAU,GAAG;IACrB,KAAK,EAAE,aAAa,CAAC;IACrB,OAAO,EAAE,WAAW,CAAC;CACxB,CAAC"}

package/dist/custom-auth-path/naa/BridgeAccountContext.d.ts

@@ -0,0 +1,13 @@
+/**
+ * AccountContext is used to pass account information when the bridge is initialized
+ *
+ * NAA (MetaOS) apps are created and destroyed for the same session multiple times.
+ * `AccountContext` helps in booting up the cached account when the bridge
+ * is recreated for a new NAA instance in the same auth session.
+ */
+export interface AccountContext {
+    homeAccountId: string;
+    environment: string;
+    tenantId: string;
+}
+//# sourceMappingURL=BridgeAccountContext.d.ts.map

package/dist/custom-auth-path/naa/BridgeAccountContext.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"BridgeAccountContext.d.ts","sourceRoot":"","sources":["../../../src/naa/BridgeAccountContext.ts"],"names":[],"mappings":"AAKA;;;;;;GAMG;AACH,MAAM,WAAW,cAAc;IAC3B,aAAa,EAAE,MAAM,CAAC;IACtB,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;CACpB"}

package/dist/custom-auth-path/naa/BridgeCapabilities.d.ts

@@ -0,0 +1,4 @@
+export interface BridgeCapabilities {
+    queryAccount?: boolean;
+}
+//# sourceMappingURL=BridgeCapabilities.d.ts.map

package/dist/custom-auth-path/naa/BridgeCapabilities.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"BridgeCapabilities.d.ts","sourceRoot":"","sources":["../../../src/naa/BridgeCapabilities.ts"],"names":[],"mappings":"AAMA,MAAM,WAAW,kBAAkB;IAC/B,YAAY,CAAC,EAAE,OAAO,CAAC;CAC1B"}

package/dist/custom-auth-path/naa/BridgeError.d.ts

@@ -0,0 +1,10 @@
+import { BridgeStatusCode } from "./BridgeStatusCode.js";
+export type BridgeError = {
+    status: BridgeStatusCode;
+    code?: string;
+    subError?: string;
+    description?: string;
+    properties?: object;
+};
+export declare function isBridgeError(error: unknown): error is BridgeError;
+//# sourceMappingURL=BridgeError.d.ts.map

package/dist/custom-auth-path/naa/BridgeError.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"BridgeError.d.ts","sourceRoot":"","sources":["../../../src/naa/BridgeError.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAEzD,MAAM,MAAM,WAAW,GAAG;IACtB,MAAM,EAAE,gBAAgB,CAAC;IACzB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;CACvB,CAAC;AAEF,wBAAgB,aAAa,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,WAAW,CAElE"}