@azure/msal-browser 4.13.1 → 4.14.0

package/dist/custom-auth-path/operatingcontext/BaseOperatingContext.mjs

@@ -0,0 +1,104 @@
+/*! @azure/msal-browser v4.14.0 2025-07-01 */
+'use strict';
+import { LogLevel, Logger } from '@azure/msal-common/browser';
+import { buildConfiguration } from '../config/Configuration.mjs';
+import { name, version } from '../packageMetadata.mjs';
+import { BrowserCacheLocation, LOG_LEVEL_CACHE_KEY, LOG_PII_CACHE_KEY } from '../utils/BrowserConstants.mjs';
+
+/*
+ * Copyright (c) Microsoft Corporation. All rights reserved.
+ * Licensed under the MIT License.
+ */
+/**
+ * Base class for operating context
+ * Operating contexts are contexts in which MSAL.js is being run
+ * More than one operating context may be available at a time
+ * It's important from a logging and telemetry point of view for us to be able to identify the operating context.
+ * For example: Some operating contexts will pre-cache tokens impacting performance telemetry
+ */
+class BaseOperatingContext {
+    static loggerCallback(level, message) {
+        switch (level) {
+            case LogLevel.Error:
+                // eslint-disable-next-line no-console
+                console.error(message);
+                return;
+            case LogLevel.Info:
+                // eslint-disable-next-line no-console
+                console.info(message);
+                return;
+            case LogLevel.Verbose:
+                // eslint-disable-next-line no-console
+                console.debug(message);
+                return;
+            case LogLevel.Warning:
+                // eslint-disable-next-line no-console
+                console.warn(message);
+                return;
+            default:
+                // eslint-disable-next-line no-console
+                console.log(message);
+                return;
+        }
+    }
+    constructor(config) {
+        /*
+         * If loaded in an environment where window is not available,
+         * set internal flag to false so that further requests fail.
+         * This is to support server-side rendering environments.
+         */
+        this.browserEnvironment = typeof window !== "undefined";
+        this.config = buildConfiguration(config, this.browserEnvironment);
+        let sessionStorage;
+        try {
+            sessionStorage = window[BrowserCacheLocation.SessionStorage];
+            // Mute errors if it's a non-browser environment or cookies are blocked.
+        }
+        catch (e) { }
+        const logLevelKey = sessionStorage?.getItem(LOG_LEVEL_CACHE_KEY);
+        const piiLoggingKey = sessionStorage
+            ?.getItem(LOG_PII_CACHE_KEY)
+            ?.toLowerCase();
+        const piiLoggingEnabled = piiLoggingKey === "true"
+            ? true
+            : piiLoggingKey === "false"
+                ? false
+                : undefined;
+        const loggerOptions = { ...this.config.system.loggerOptions };
+        const logLevel = logLevelKey && Object.keys(LogLevel).includes(logLevelKey)
+            ? LogLevel[logLevelKey]
+            : undefined;
+        if (logLevel) {
+            loggerOptions.loggerCallback = BaseOperatingContext.loggerCallback;
+            loggerOptions.logLevel = logLevel;
+        }
+        if (piiLoggingEnabled !== undefined) {
+            loggerOptions.piiLoggingEnabled = piiLoggingEnabled;
+        }
+        this.logger = new Logger(loggerOptions, name, version);
+        this.available = false;
+    }
+    /**
+     * Return the MSAL config
+     * @returns BrowserConfiguration
+     */
+    getConfig() {
+        return this.config;
+    }
+    /**
+     * Returns the MSAL Logger
+     * @returns Logger
+     */
+    getLogger() {
+        return this.logger;
+    }
+    isAvailable() {
+        return this.available;
+    }
+    isBrowserEnvironment() {
+        return this.browserEnvironment;
+    }
+}
+
+export { BaseOperatingContext };
+//# sourceMappingURL=BaseOperatingContext.mjs.map

package/dist/custom-auth-path/operatingcontext/BaseOperatingContext.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"BaseOperatingContext.mjs","sources":["../../../../src/operatingcontext/BaseOperatingContext.ts"],"sourcesContent":[null],"names":[],"mappings":";;;;;;;AAAA;;;AAGG;AAeH;;;;;;AAMG;MACmB,oBAAoB,CAAA;AAM5B,IAAA,OAAO,cAAc,CAAC,KAAe,EAAE,OAAe,EAAA;AAC5D,QAAA,QAAQ,KAAK;YACT,KAAK,QAAQ,CAAC,KAAK;;AAEf,gBAAA,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;gBACvB,OAAO;YACX,KAAK,QAAQ,CAAC,IAAI;;AAEd,gBAAA,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;gBACtB,OAAO;YACX,KAAK,QAAQ,CAAC,OAAO;;AAEjB,gBAAA,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;gBACvB,OAAO;YACX,KAAK,QAAQ,CAAC,OAAO;;AAEjB,gBAAA,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;gBACtB,OAAO;AACX,YAAA;;AAEI,gBAAA,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;gBACrB,OAAO;AACd,SAAA;KACJ;AAED,IAAA,WAAA,CAAY,MAAqB,EAAA;AAC7B;;;;AAIG;AACH,QAAA,IAAI,CAAC,kBAAkB,GAAG,OAAO,MAAM,KAAK,WAAW,CAAC;QACxD,IAAI,CAAC,MAAM,GAAG,kBAAkB,CAAC,MAAM,EAAE,IAAI,CAAC,kBAAkB,CAAC,CAAC;AAElE,QAAA,IAAI,cAAmC,CAAC;QACxC,IAAI;AACA,YAAA,cAAc,GAAG,MAAM,CAAC,oBAAoB,CAAC,cAAc,CAAC,CAAC;;AAEhE,SAAA;QAAC,OAAO,CAAC,EAAE,GAAE;QAEd,MAAM,WAAW,GAAG,cAAc,EAAE,OAAO,CAAC,mBAAmB,CAAC,CAAC;QACjE,MAAM,aAAa,GAAG,cAAc;cAC9B,OAAO,CAAC,iBAAiB,CAAC;cAC1B,WAAW,EAAE,CAAC;AAEpB,QAAA,MAAM,iBAAiB,GACnB,aAAa,KAAK,MAAM;AACpB,cAAE,IAAI;cACJ,aAAa,KAAK,OAAO;AAC3B,kBAAE,KAAK;kBACL,SAAS,CAAC;AACpB,QAAA,MAAM,aAAa,GAAG,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,aAAa,EAAE,CAAC;AAE9D,QAAA,MAAM,QAAQ,GACV,WAAW,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC;AACtD,cAAE,QAAQ,CAAC,WAAW,CAAC;cACrB,SAAS,CAAC;AACpB,QAAA,IAAI,QAAQ,EAAE;AACV,YAAA,aAAa,CAAC,cAAc,GAAG,oBAAoB,CAAC,cAAc,CAAC;AACnE,YAAA,aAAa,CAAC,QAAQ,GAAG,QAAQ,CAAC;AACrC,SAAA;QACD,IAAI,iBAAiB,KAAK,SAAS,EAAE;AACjC,YAAA,aAAa,CAAC,iBAAiB,GAAG,iBAAiB,CAAC;AACvD,SAAA;AAED,QAAA,IAAI,CAAC,MAAM,GAAG,IAAI,MAAM,CAAC,aAAa,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;AACvD,QAAA,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC;KAC1B;AAiBD;;;AAGG;IACH,SAAS,GAAA;QACL,OAAO,IAAI,CAAC,MAAM,CAAC;KACtB;AAED;;;AAGG;IACH,SAAS,GAAA;QACL,OAAO,IAAI,CAAC,MAAM,CAAC;KACtB;IAED,WAAW,GAAA;QACP,OAAO,IAAI,CAAC,SAAS,CAAC;KACzB;IAED,oBAAoB,GAAA;QAChB,OAAO,IAAI,CAAC,kBAAkB,CAAC;KAClC;AACJ;;;;"}

package/dist/custom-auth-path/operatingcontext/NestedAppOperatingContext.d.ts

@@ -0,0 +1,40 @@
+import { BaseOperatingContext } from "./BaseOperatingContext.js";
+import { IBridgeProxy } from "../naa/IBridgeProxy.js";
+import { AccountContext } from "../naa/BridgeAccountContext.js";
+declare global {
+    interface Window {
+        __initializeNestedAppAuth?(): Promise<void>;
+    }
+}
+export declare class NestedAppOperatingContext extends BaseOperatingContext {
+    protected bridgeProxy: IBridgeProxy | undefined;
+    protected accountContext: AccountContext | null;
+    static readonly MODULE_NAME: string;
+    /**
+     * Unique identifier for the operating context
+     */
+    static readonly ID: string;
+    /**
+     * Return the module name.  Intended for use with import() to enable dynamic import
+     * of the implementation associated with this operating context
+     * @returns
+     */
+    getModuleName(): string;
+    /**
+     * Returns the unique identifier for this operating context
+     * @returns string
+     */
+    getId(): string;
+    /**
+     * Returns the current BridgeProxy
+     * @returns IBridgeProxy | undefined
+     */
+    getBridgeProxy(): IBridgeProxy | undefined;
+    /**
+     * Checks whether the operating context is available.
+     * Confirms that the code is running a browser rather.  This is required.
+     * @returns Promise<boolean> indicating whether this operating context is currently available.
+     */
+    initialize(): Promise<boolean>;
+}
+//# sourceMappingURL=NestedAppOperatingContext.d.ts.map

package/dist/custom-auth-path/operatingcontext/NestedAppOperatingContext.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"NestedAppOperatingContext.d.ts","sourceRoot":"","sources":["../../../src/operatingcontext/NestedAppOperatingContext.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AACjE,OAAO,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AAEtD,OAAO,EAAE,cAAc,EAAE,MAAM,gCAAgC,CAAC;AAEhE,OAAO,CAAC,MAAM,CAAC;IACX,UAAU,MAAM;QACZ,yBAAyB,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;KAC/C;CACJ;AAED,qBAAa,yBAA0B,SAAQ,oBAAoB;IAC/D,SAAS,CAAC,WAAW,EAAE,YAAY,GAAG,SAAS,CAAa;IAC5D,SAAS,CAAC,cAAc,EAAE,cAAc,GAAG,IAAI,CAAQ;IAMvD,MAAM,CAAC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAM;IAEzC;;OAEG;IACH,MAAM,CAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAA+B;IAEzD;;;;OAIG;IACH,aAAa,IAAI,MAAM;IAIvB;;;OAGG;IACH,KAAK,IAAI,MAAM;IAIf;;;OAGG;IACH,cAAc,IAAI,YAAY,GAAG,SAAS;IAI1C;;;;OAIG;IACG,UAAU,IAAI,OAAO,CAAC,OAAO,CAAC;CA0BvC"}

package/dist/custom-auth-path/operatingcontext/StandardOperatingContext.d.ts

@@ -0,0 +1,26 @@
+import { BaseOperatingContext } from "./BaseOperatingContext.js";
+export declare class StandardOperatingContext extends BaseOperatingContext {
+    static readonly MODULE_NAME: string;
+    /**
+     * Unique identifier for the operating context
+     */
+    static readonly ID: string;
+    /**
+     * Return the module name.  Intended for use with import() to enable dynamic import
+     * of the implementation associated with this operating context
+     * @returns
+     */
+    getModuleName(): string;
+    /**
+     * Returns the unique identifier for this operating context
+     * @returns string
+     */
+    getId(): string;
+    /**
+     * Checks whether the operating context is available.
+     * Confirms that the code is running a browser rather.  This is required.
+     * @returns Promise<boolean> indicating whether this operating context is currently available.
+     */
+    initialize(): Promise<boolean>;
+}
+//# sourceMappingURL=StandardOperatingContext.d.ts.map

package/dist/custom-auth-path/operatingcontext/StandardOperatingContext.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"StandardOperatingContext.d.ts","sourceRoot":"","sources":["../../../src/operatingcontext/StandardOperatingContext.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AAEjE,qBAAa,wBAAyB,SAAQ,oBAAoB;IAK9D,MAAM,CAAC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAM;IAEzC;;OAEG;IACH,MAAM,CAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAA8B;IAExD;;;;OAIG;IACH,aAAa,IAAI,MAAM;IAIvB;;;OAGG;IACH,KAAK,IAAI,MAAM;IAIf;;;;OAIG;IACG,UAAU,IAAI,OAAO,CAAC,OAAO,CAAC;CAQvC"}

package/dist/custom-auth-path/operatingcontext/StandardOperatingContext.mjs

@@ -0,0 +1,50 @@
+/*! @azure/msal-browser v4.14.0 2025-07-01 */
+'use strict';
+import { BaseOperatingContext } from './BaseOperatingContext.mjs';
+
+/*
+ * Copyright (c) Microsoft Corporation. All rights reserved.
+ * Licensed under the MIT License.
+ */
+class StandardOperatingContext extends BaseOperatingContext {
+    /**
+     * Return the module name.  Intended for use with import() to enable dynamic import
+     * of the implementation associated with this operating context
+     * @returns
+     */
+    getModuleName() {
+        return StandardOperatingContext.MODULE_NAME;
+    }
+    /**
+     * Returns the unique identifier for this operating context
+     * @returns string
+     */
+    getId() {
+        return StandardOperatingContext.ID;
+    }
+    /**
+     * Checks whether the operating context is available.
+     * Confirms that the code is running a browser rather.  This is required.
+     * @returns Promise<boolean> indicating whether this operating context is currently available.
+     */
+    async initialize() {
+        this.available = typeof window !== "undefined";
+        return this.available;
+        /*
+         * NOTE: The standard context is available as long as there is a window.  If/when we split out WAM from Browser
+         * We can move the current contents of the initialize method to here and verify that the WAM extension is available
+         */
+    }
+}
+/*
+ * TODO: Once we have determine the bundling code return here to specify the name of the bundle
+ * containing the implementation for this operating context
+ */
+StandardOperatingContext.MODULE_NAME = "";
+/**
+ * Unique identifier for the operating context
+ */
+StandardOperatingContext.ID = "StandardOperatingContext";
+
+export { StandardOperatingContext };
+//# sourceMappingURL=StandardOperatingContext.mjs.map

package/dist/custom-auth-path/operatingcontext/StandardOperatingContext.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"StandardOperatingContext.mjs","sources":["../../../../src/operatingcontext/StandardOperatingContext.ts"],"sourcesContent":[null],"names":[],"mappings":";;;;AAAA;;;AAGG;AAIG,MAAO,wBAAyB,SAAQ,oBAAoB,CAAA;AAY9D;;;;AAIG;IACH,aAAa,GAAA;QACT,OAAO,wBAAwB,CAAC,WAAW,CAAC;KAC/C;AAED;;;AAGG;IACH,KAAK,GAAA;QACD,OAAO,wBAAwB,CAAC,EAAE,CAAC;KACtC;AAED;;;;AAIG;AACH,IAAA,MAAM,UAAU,GAAA;AACZ,QAAA,IAAI,CAAC,SAAS,GAAG,OAAO,MAAM,KAAK,WAAW,CAAC;QAC/C,OAAO,IAAI,CAAC,SAAS,CAAC;AACtB;;;AAGG;KACN;;AAxCD;;;AAGG;AACa,wBAAW,CAAA,WAAA,GAAW,EAAE,CAAC;AAEzC;;AAEG;AACa,wBAAE,CAAA,EAAA,GAAW,0BAA0B;;;;"}

package/dist/custom-auth-path/operatingcontext/UnknownOperatingContext.d.ts

@@ -0,0 +1,26 @@
+import { BaseOperatingContext } from "./BaseOperatingContext.js";
+export declare class UnknownOperatingContext extends BaseOperatingContext {
+    static readonly MODULE_NAME: string;
+    /**
+     * Unique identifier for the operating context
+     */
+    static readonly ID: string;
+    /**
+     * Returns the unique identifier for this operating context
+     * @returns string
+     */
+    getId(): string;
+    /**
+     * Return the module name.  Intended for use with import() to enable dynamic import
+     * of the implementation associated with this operating context
+     * @returns
+     */
+    getModuleName(): string;
+    /**
+     * Checks whether the operating context is available.
+     * Confirms that the code is running a browser rather.  This is required.
+     * @returns Promise<boolean> indicating whether this operating context is currently available.
+     */
+    initialize(): Promise<boolean>;
+}
+//# sourceMappingURL=UnknownOperatingContext.d.ts.map

package/dist/custom-auth-path/operatingcontext/UnknownOperatingContext.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"UnknownOperatingContext.d.ts","sourceRoot":"","sources":["../../../src/operatingcontext/UnknownOperatingContext.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AAEjE,qBAAa,uBAAwB,SAAQ,oBAAoB;IAK7D,MAAM,CAAC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAM;IAEzC;;OAEG;IACH,MAAM,CAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAA6B;IAEvD;;;OAGG;IACH,KAAK,IAAI,MAAM;IAIf;;;;OAIG;IACH,aAAa,IAAI,MAAM;IAIvB;;;;OAIG;IACG,UAAU,IAAI,OAAO,CAAC,OAAO,CAAC;CAOvC"}

package/dist/custom-auth-path/packageMetadata.d.ts

@@ -0,0 +1,3 @@
+export declare const name = "@azure/msal-browser";
+export declare const version = "4.14.0";
+//# sourceMappingURL=packageMetadata.d.ts.map

package/dist/custom-auth-path/packageMetadata.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"packageMetadata.d.ts","sourceRoot":"","sources":["../../src/packageMetadata.ts"],"names":[],"mappings":"AACA,eAAO,MAAM,IAAI,wBAAwB,CAAC;AAC1C,eAAO,MAAM,OAAO,WAAW,CAAC"}

package/dist/custom-auth-path/packageMetadata.mjs

@@ -0,0 +1,8 @@
+/*! @azure/msal-browser v4.14.0 2025-07-01 */
+'use strict';
+/* eslint-disable header/header */
+const name = "@azure/msal-browser";
+const version = "4.14.0";
+
+export { name, version };
+//# sourceMappingURL=packageMetadata.mjs.map

package/dist/custom-auth-path/packageMetadata.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"packageMetadata.mjs","sources":["../../../src/packageMetadata.ts"],"sourcesContent":[null],"names":[],"mappings":";;AAAA;AACO,MAAM,IAAI,GAAG,sBAAsB;AACnC,MAAM,OAAO,GAAG;;;;"}

package/dist/custom-auth-path/protocol/Authorize.d.ts

@@ -0,0 +1,65 @@
+import { Authority, CommonAuthorizationUrlRequest, IPerformanceClient, Logger, AuthorizationCodeClient, AuthorizeResponse } from "@azure/msal-common/browser";
+import { BrowserConfiguration } from "../config/Configuration.js";
+import { ApiId } from "../utils/BrowserConstants.js";
+import { AuthenticationResult } from "../response/AuthenticationResult.js";
+import { BrowserCacheManager } from "../cache/BrowserCacheManager.js";
+import { EventHandler } from "../event/EventHandler.js";
+import { IPlatformAuthHandler } from "../broker/nativeBroker/IPlatformAuthHandler.js";
+/**
+ * Gets the full /authorize URL with request parameters when using Auth Code + PKCE
+ * @param config
+ * @param authority
+ * @param request
+ * @param logger
+ * @param performanceClient
+ * @returns
+ */
+export declare function getAuthCodeRequestUrl(config: BrowserConfiguration, authority: Authority, request: CommonAuthorizationUrlRequest, logger: Logger, performanceClient: IPerformanceClient): Promise<string>;
+/**
+ * Gets the form that will be posted to /authorize with request parameters when using EAR
+ */
+export declare function getEARForm(frame: Document, config: BrowserConfiguration, authority: Authority, request: CommonAuthorizationUrlRequest, logger: Logger, performanceClient: IPerformanceClient): Promise<HTMLFormElement>;
+/**
+ * Response handler when server returns accountId on the /authorize request
+ * @param request
+ * @param accountId
+ * @param apiId
+ * @param config
+ * @param browserStorage
+ * @param nativeStorage
+ * @param eventHandler
+ * @param logger
+ * @param performanceClient
+ * @param nativeMessageHandler
+ * @returns
+ */
+export declare function handleResponsePlatformBroker(request: CommonAuthorizationUrlRequest, accountId: string, apiId: ApiId, config: BrowserConfiguration, browserStorage: BrowserCacheManager, nativeStorage: BrowserCacheManager, eventHandler: EventHandler, logger: Logger, performanceClient: IPerformanceClient, platformAuthProvider?: IPlatformAuthHandler): Promise<AuthenticationResult>;
+/**
+ * Response handler when server returns code on the /authorize request
+ * @param request
+ * @param response
+ * @param codeVerifier
+ * @param authClient
+ * @param browserStorage
+ * @param logger
+ * @param performanceClient
+ * @returns
+ */
+export declare function handleResponseCode(request: CommonAuthorizationUrlRequest, response: AuthorizeResponse, codeVerifier: string, apiId: ApiId, config: BrowserConfiguration, authClient: AuthorizationCodeClient, browserStorage: BrowserCacheManager, nativeStorage: BrowserCacheManager, eventHandler: EventHandler, logger: Logger, performanceClient: IPerformanceClient, platformAuthProvider?: IPlatformAuthHandler): Promise<AuthenticationResult>;
+/**
+ * Response handler when server returns ear_jwe on the /authorize request
+ * @param request
+ * @param response
+ * @param apiId
+ * @param config
+ * @param authority
+ * @param browserStorage
+ * @param nativeStorage
+ * @param eventHandler
+ * @param logger
+ * @param performanceClient
+ * @param nativeMessageHandler
+ * @returns
+ */
+export declare function handleResponseEAR(request: CommonAuthorizationUrlRequest, response: AuthorizeResponse, apiId: ApiId, config: BrowserConfiguration, authority: Authority, browserStorage: BrowserCacheManager, nativeStorage: BrowserCacheManager, eventHandler: EventHandler, logger: Logger, performanceClient: IPerformanceClient, platformAuthProvider?: IPlatformAuthHandler): Promise<AuthenticationResult>;
+//# sourceMappingURL=Authorize.d.ts.map

package/dist/custom-auth-path/protocol/Authorize.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"Authorize.d.ts","sourceRoot":"","sources":["../../../src/protocol/Authorize.ts"],"names":[],"mappings":"AAKA,OAAO,EAEH,SAAS,EAGT,6BAA6B,EAG7B,kBAAkB,EAClB,MAAM,EAQN,uBAAuB,EAGvB,iBAAiB,EAKpB,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAE,oBAAoB,EAAE,MAAM,4BAA4B,CAAC;AAClE,OAAO,EAAE,KAAK,EAAoB,MAAM,8BAA8B,CAAC;AAOvE,OAAO,EAAE,oBAAoB,EAAE,MAAM,qCAAqC,CAAC;AAE3E,OAAO,EAAE,mBAAmB,EAAE,MAAM,iCAAiC,CAAC;AAEtE,OAAO,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AAExD,OAAO,EAAE,oBAAoB,EAAE,MAAM,gDAAgD,CAAC;AAyEtF;;;;;;;;GAQG;AACH,wBAAsB,qBAAqB,CACvC,MAAM,EAAE,oBAAoB,EAC5B,SAAS,EAAE,SAAS,EACpB,OAAO,EAAE,6BAA6B,EACtC,MAAM,EAAE,MAAM,EACd,iBAAiB,EAAE,kBAAkB,GACtC,OAAO,CAAC,MAAM,CAAC,CAiCjB;AAED;;GAEG;AACH,wBAAsB,UAAU,CAC5B,KAAK,EAAE,QAAQ,EACf,MAAM,EAAE,oBAAoB,EAC5B,SAAS,EAAE,SAAS,EACpB,OAAO,EAAE,6BAA6B,EACtC,MAAM,EAAE,MAAM,EACd,iBAAiB,EAAE,kBAAkB,GACtC,OAAO,CAAC,eAAe,CAAC,CAgC1B;AA+BD;;;;;;;;;;;;;GAaG;AACH,wBAAsB,4BAA4B,CAC9C,OAAO,EAAE,6BAA6B,EACtC,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,KAAK,EACZ,MAAM,EAAE,oBAAoB,EAC5B,cAAc,EAAE,mBAAmB,EACnC,aAAa,EAAE,mBAAmB,EAClC,YAAY,EAAE,YAAY,EAC1B,MAAM,EAAE,MAAM,EACd,iBAAiB,EAAE,kBAAkB,EACrC,oBAAoB,CAAC,EAAE,oBAAoB,GAC5C,OAAO,CAAC,oBAAoB,CAAC,CAsC/B;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,kBAAkB,CACpC,OAAO,EAAE,6BAA6B,EACtC,QAAQ,EAAE,iBAAiB,EAC3B,YAAY,EAAE,MAAM,EACpB,KAAK,EAAE,KAAK,EACZ,MAAM,EAAE,oBAAoB,EAC5B,UAAU,EAAE,uBAAuB,EACnC,cAAc,EAAE,mBAAmB,EACnC,aAAa,EAAE,mBAAmB,EAClC,YAAY,EAAE,YAAY,EAC1B,MAAM,EAAE,MAAM,EACd,iBAAiB,EAAE,kBAAkB,EACrC,oBAAoB,CAAC,EAAE,oBAAoB,GAC5C,OAAO,CAAC,oBAAoB,CAAC,CAkD/B;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAsB,iBAAiB,CACnC,OAAO,EAAE,6BAA6B,EACtC,QAAQ,EAAE,iBAAiB,EAC3B,KAAK,EAAE,KAAK,EACZ,MAAM,EAAE,oBAAoB,EAC5B,SAAS,EAAE,SAAS,EACpB,cAAc,EAAE,mBAAmB,EACnC,aAAa,EAAE,mBAAmB,EAClC,YAAY,EAAE,YAAY,EAC1B,MAAM,EAAE,MAAM,EACd,iBAAiB,EAAE,kBAAkB,EACrC,oBAAoB,CAAC,EAAE,oBAAoB,GAC5C,OAAO,CAAC,oBAAoB,CAAC,CA4F/B"}

package/dist/custom-auth-path/protocol/Authorize.mjs

@@ -0,0 +1,218 @@
+/*! @azure/msal-browser v4.14.0 2025-07-01 */
+'use strict';
+import { createClientConfigurationError, ClientConfigurationErrorCodes, invokeAsync, PerformanceEvents, RequestParameterBuilder, OAuthResponseType, Constants, AuthorizeProtocol, ThrottlingUtils, ResponseHandler, TimeUtils, ProtocolMode, AuthenticationScheme, PopTokenGenerator, ProtocolUtils } from '@azure/msal-common/browser';
+import { BrowserConstants } from '../utils/BrowserConstants.mjs';
+import { version } from '../packageMetadata.mjs';
+import { CryptoOps } from '../crypto/CryptoOps.mjs';
+import { createBrowserAuthError } from '../error/BrowserAuthError.mjs';
+import { InteractionHandler } from '../interaction_handler/InteractionHandler.mjs';
+import { PlatformAuthInteractionClient } from '../interaction_client/PlatformAuthInteractionClient.mjs';
+import { decryptEarResponse } from '../crypto/BrowserCrypto.mjs';
+import { earJwkEmpty, earJweEmpty, nativeConnectionNotEstablished } from '../error/BrowserAuthErrorCodes.mjs';
+
+/*
+ * Copyright (c) Microsoft Corporation. All rights reserved.
+ * Licensed under the MIT License.
+ */
+/**
+ * Returns map of parameters that are applicable to all calls to /authorize whether using PKCE or EAR
+ * @param config
+ * @param authority
+ * @param request
+ * @param logger
+ * @param performanceClient
+ * @returns
+ */
+async function getStandardParameters(config, authority, request, logger, performanceClient) {
+    const parameters = AuthorizeProtocol.getStandardAuthorizeRequestParameters({ ...config.auth, authority: authority }, request, logger, performanceClient);
+    RequestParameterBuilder.addLibraryInfo(parameters, {
+        sku: BrowserConstants.MSAL_SKU,
+        version: version,
+        os: "",
+        cpu: "",
+    });
+    if (config.auth.protocolMode !== ProtocolMode.OIDC) {
+        RequestParameterBuilder.addApplicationTelemetry(parameters, config.telemetry.application);
+    }
+    if (request.platformBroker) {
+        // signal ests that this is a WAM call
+        RequestParameterBuilder.addNativeBroker(parameters);
+        // pass the req_cnf for POP
+        if (request.authenticationScheme === AuthenticationScheme.POP) {
+            const cryptoOps = new CryptoOps(logger, performanceClient);
+            const popTokenGenerator = new PopTokenGenerator(cryptoOps);
+            // req_cnf is always sent as a string for SPAs
+            let reqCnfData;
+            if (!request.popKid) {
+                const generatedReqCnfData = await invokeAsync(popTokenGenerator.generateCnf.bind(popTokenGenerator), PerformanceEvents.PopTokenGenerateCnf, logger, performanceClient, request.correlationId)(request, logger);
+                reqCnfData = generatedReqCnfData.reqCnfString;
+            }
+            else {
+                reqCnfData = cryptoOps.encodeKid(request.popKid);
+            }
+            RequestParameterBuilder.addPopToken(parameters, reqCnfData);
+        }
+    }
+    RequestParameterBuilder.instrumentBrokerParams(parameters, request.correlationId, performanceClient);
+    return parameters;
+}
+/**
+ * Gets the full /authorize URL with request parameters when using Auth Code + PKCE
+ * @param config
+ * @param authority
+ * @param request
+ * @param logger
+ * @param performanceClient
+ * @returns
+ */
+async function getAuthCodeRequestUrl(config, authority, request, logger, performanceClient) {
+    if (!request.codeChallenge) {
+        throw createClientConfigurationError(ClientConfigurationErrorCodes.pkceParamsMissing);
+    }
+    const parameters = await invokeAsync(getStandardParameters, PerformanceEvents.GetStandardParams, logger, performanceClient, request.correlationId)(config, authority, request, logger, performanceClient);
+    RequestParameterBuilder.addResponseType(parameters, OAuthResponseType.CODE);
+    RequestParameterBuilder.addCodeChallengeParams(parameters, request.codeChallenge, Constants.S256_CODE_CHALLENGE_METHOD);
+    RequestParameterBuilder.addExtraQueryParameters(parameters, request.extraQueryParameters || {});
+    return AuthorizeProtocol.getAuthorizeUrl(authority, parameters, config.auth.encodeExtraQueryParams, request.extraQueryParameters);
+}
+/**
+ * Gets the form that will be posted to /authorize with request parameters when using EAR
+ */
+async function getEARForm(frame, config, authority, request, logger, performanceClient) {
+    if (!request.earJwk) {
+        throw createBrowserAuthError(earJwkEmpty);
+    }
+    const parameters = await getStandardParameters(config, authority, request, logger, performanceClient);
+    RequestParameterBuilder.addResponseType(parameters, OAuthResponseType.IDTOKEN_TOKEN_REFRESHTOKEN);
+    RequestParameterBuilder.addEARParameters(parameters, request.earJwk);
+    const queryParams = new Map();
+    RequestParameterBuilder.addExtraQueryParameters(queryParams, request.extraQueryParameters || {});
+    const url = AuthorizeProtocol.getAuthorizeUrl(authority, queryParams, config.auth.encodeExtraQueryParams, request.extraQueryParameters);
+    return createForm(frame, url, parameters);
+}
+/**
+ * Creates form element in the provided document with auth parameters in the post body
+ * @param frame
+ * @param authorizeUrl
+ * @param parameters
+ * @returns
+ */
+function createForm(frame, authorizeUrl, parameters) {
+    const form = frame.createElement("form");
+    form.method = "post";
+    form.action = authorizeUrl;
+    parameters.forEach((value, key) => {
+        const param = frame.createElement("input");
+        param.hidden = true;
+        param.name = key;
+        param.value = value;
+        form.appendChild(param);
+    });
+    frame.body.appendChild(form);
+    return form;
+}
+/**
+ * Response handler when server returns accountId on the /authorize request
+ * @param request
+ * @param accountId
+ * @param apiId
+ * @param config
+ * @param browserStorage
+ * @param nativeStorage
+ * @param eventHandler
+ * @param logger
+ * @param performanceClient
+ * @param nativeMessageHandler
+ * @returns
+ */
+async function handleResponsePlatformBroker(request, accountId, apiId, config, browserStorage, nativeStorage, eventHandler, logger, performanceClient, platformAuthProvider) {
+    logger.verbose("Account id found, calling WAM for token");
+    if (!platformAuthProvider) {
+        throw createBrowserAuthError(nativeConnectionNotEstablished);
+    }
+    const browserCrypto = new CryptoOps(logger, performanceClient);
+    const nativeInteractionClient = new PlatformAuthInteractionClient(config, browserStorage, browserCrypto, logger, eventHandler, config.system.navigationClient, apiId, performanceClient, platformAuthProvider, accountId, nativeStorage, request.correlationId);
+    const { userRequestState } = ProtocolUtils.parseRequestState(browserCrypto, request.state);
+    return invokeAsync(nativeInteractionClient.acquireToken.bind(nativeInteractionClient), PerformanceEvents.NativeInteractionClientAcquireToken, logger, performanceClient, request.correlationId)({
+        ...request,
+        state: userRequestState,
+        prompt: undefined, // Server should handle the prompt, ideally native broker can do this part silently
+    });
+}
+/**
+ * Response handler when server returns code on the /authorize request
+ * @param request
+ * @param response
+ * @param codeVerifier
+ * @param authClient
+ * @param browserStorage
+ * @param logger
+ * @param performanceClient
+ * @returns
+ */
+async function handleResponseCode(request, response, codeVerifier, apiId, config, authClient, browserStorage, nativeStorage, eventHandler, logger, performanceClient, platformAuthProvider) {
+    // Remove throttle if it exists
+    ThrottlingUtils.removeThrottle(browserStorage, config.auth.clientId, request);
+    if (response.accountId) {
+        return invokeAsync(handleResponsePlatformBroker, PerformanceEvents.HandleResponsePlatformBroker, logger, performanceClient, request.correlationId)(request, response.accountId, apiId, config, browserStorage, nativeStorage, eventHandler, logger, performanceClient, platformAuthProvider);
+    }
+    const authCodeRequest = {
+        ...request,
+        code: response.code || "",
+        codeVerifier: codeVerifier,
+    };
+    // Create popup interaction handler.
+    const interactionHandler = new InteractionHandler(authClient, browserStorage, authCodeRequest, logger, performanceClient);
+    // Handle response from hash string.
+    const result = await invokeAsync(interactionHandler.handleCodeResponse.bind(interactionHandler), PerformanceEvents.HandleCodeResponse, logger, performanceClient, request.correlationId)(response, request);
+    return result;
+}
+/**
+ * Response handler when server returns ear_jwe on the /authorize request
+ * @param request
+ * @param response
+ * @param apiId
+ * @param config
+ * @param authority
+ * @param browserStorage
+ * @param nativeStorage
+ * @param eventHandler
+ * @param logger
+ * @param performanceClient
+ * @param nativeMessageHandler
+ * @returns
+ */
+async function handleResponseEAR(request, response, apiId, config, authority, browserStorage, nativeStorage, eventHandler, logger, performanceClient, platformAuthProvider) {
+    // Remove throttle if it exists
+    ThrottlingUtils.removeThrottle(browserStorage, config.auth.clientId, request);
+    // Validate state & check response for errors
+    AuthorizeProtocol.validateAuthorizationResponse(response, request.state);
+    if (!response.ear_jwe) {
+        throw createBrowserAuthError(earJweEmpty);
+    }
+    if (!request.earJwk) {
+        throw createBrowserAuthError(earJwkEmpty);
+    }
+    const decryptedData = JSON.parse(await invokeAsync(decryptEarResponse, PerformanceEvents.DecryptEarResponse, logger, performanceClient, request.correlationId)(request.earJwk, response.ear_jwe));
+    if (decryptedData.accountId) {
+        return invokeAsync(handleResponsePlatformBroker, PerformanceEvents.HandleResponsePlatformBroker, logger, performanceClient, request.correlationId)(request, decryptedData.accountId, apiId, config, browserStorage, nativeStorage, eventHandler, logger, performanceClient, platformAuthProvider);
+    }
+    const responseHandler = new ResponseHandler(config.auth.clientId, browserStorage, new CryptoOps(logger, performanceClient), logger, null, null, performanceClient);
+    // Validate response. This function throws a server error if an error is returned by the server.
+    responseHandler.validateTokenResponse(decryptedData);
+    // Temporary until response handler is refactored to be more flow agnostic.
+    const additionalData = {
+        code: "",
+        state: request.state,
+        nonce: request.nonce,
+        client_info: decryptedData.client_info,
+        cloud_graph_host_name: decryptedData.cloud_graph_host_name,
+        cloud_instance_host_name: decryptedData.cloud_instance_host_name,
+        cloud_instance_name: decryptedData.cloud_instance_name,
+        msgraph_host: decryptedData.msgraph_host,
+    };
+    return (await invokeAsync(responseHandler.handleServerTokenResponse.bind(responseHandler), PerformanceEvents.HandleServerTokenResponse, logger, performanceClient, request.correlationId)(decryptedData, authority, TimeUtils.nowSeconds(), request, additionalData, undefined, undefined, undefined, undefined));
+}
+
+export { getAuthCodeRequestUrl, getEARForm, handleResponseCode, handleResponseEAR, handleResponsePlatformBroker };
+//# sourceMappingURL=Authorize.mjs.map

package/dist/custom-auth-path/protocol/Authorize.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"Authorize.mjs","sources":["../../../../src/protocol/Authorize.ts"],"sourcesContent":[null],"names":["BrowserAuthErrorCodes.earJwkEmpty","BrowserAuthErrorCodes.nativeConnectionNotEstablished","BrowserAuthErrorCodes.earJweEmpty"],"mappings":";;;;;;;;;;;;AAAA;;;AAGG;AA4CH;;;;;;;;AAQG;AACH,eAAe,qBAAqB,CAChC,MAA4B,EAC5B,SAAoB,EACpB,OAAsC,EACtC,MAAc,EACd,iBAAqC,EAAA;IAErC,MAAM,UAAU,GAAG,iBAAiB,CAAC,qCAAqC,CACtE,EAAE,GAAG,MAAM,CAAC,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,EACxC,OAAO,EACP,MAAM,EACN,iBAAiB,CACpB,CAAC;AACF,IAAA,uBAAuB,CAAC,cAAc,CAAC,UAAU,EAAE;QAC/C,GAAG,EAAE,gBAAgB,CAAC,QAAQ;AAC9B,QAAA,OAAO,EAAE,OAAO;AAChB,QAAA,EAAE,EAAE,EAAE;AACN,QAAA,GAAG,EAAE,EAAE;AACV,KAAA,CAAC,CAAC;IACH,IAAI,MAAM,CAAC,IAAI,CAAC,YAAY,KAAK,YAAY,CAAC,IAAI,EAAE;QAChD,uBAAuB,CAAC,uBAAuB,CAC3C,UAAU,EACV,MAAM,CAAC,SAAS,CAAC,WAAW,CAC/B,CAAC;AACL,KAAA;IAED,IAAI,OAAO,CAAC,cAAc,EAAE;;AAExB,QAAA,uBAAuB,CAAC,eAAe,CAAC,UAAU,CAAC,CAAC;;AAGpD,QAAA,IAAI,OAAO,CAAC,oBAAoB,KAAK,oBAAoB,CAAC,GAAG,EAAE;YAC3D,MAAM,SAAS,GAAG,IAAI,SAAS,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAC;AAC3D,YAAA,MAAM,iBAAiB,GAAG,IAAI,iBAAiB,CAAC,SAAS,CAAC,CAAC;;AAG3D,YAAA,IAAI,UAAU,CAAC;AACf,YAAA,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE;AACjB,gBAAA,MAAM,mBAAmB,GAAG,MAAM,WAAW,CACzC,iBAAiB,CAAC,WAAW,CAAC,IAAI,CAAC,iBAAiB,CAAC,EACrD,iBAAiB,CAAC,mBAAmB,EACrC,MAAM,EACN,iBAAiB,EACjB,OAAO,CAAC,aAAa,CACxB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;AACnB,gBAAA,UAAU,GAAG,mBAAmB,CAAC,YAAY,CAAC;AACjD,aAAA;AAAM,iBAAA;gBACH,UAAU,GAAG,SAAS,CAAC,SAAS,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;AACpD,aAAA;AACD,YAAA,uBAAuB,CAAC,WAAW,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC;AAC/D,SAAA;AACJ,KAAA;IAED,uBAAuB,CAAC,sBAAsB,CAC1C,UAAU,EACV,OAAO,CAAC,aAAa,EACrB,iBAAiB,CACpB,CAAC;AAEF,IAAA,OAAO,UAAU,CAAC;AACtB,CAAC;AAED;;;;;;;;AAQG;AACI,eAAe,qBAAqB,CACvC,MAA4B,EAC5B,SAAoB,EACpB,OAAsC,EACtC,MAAc,EACd,iBAAqC,EAAA;AAErC,IAAA,IAAI,CAAC,OAAO,CAAC,aAAa,EAAE;AACxB,QAAA,MAAM,8BAA8B,CAChC,6BAA6B,CAAC,iBAAiB,CAClD,CAAC;AACL,KAAA;AAED,IAAA,MAAM,UAAU,GAAG,MAAM,WAAW,CAChC,qBAAqB,EACrB,iBAAiB,CAAC,iBAAiB,EACnC,MAAM,EACN,iBAAiB,EACjB,OAAO,CAAC,aAAa,CACxB,CAAC,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,EAAE,iBAAiB,CAAC,CAAC;IACzD,uBAAuB,CAAC,eAAe,CAAC,UAAU,EAAE,iBAAiB,CAAC,IAAI,CAAC,CAAC;AAE5E,IAAA,uBAAuB,CAAC,sBAAsB,CAC1C,UAAU,EACV,OAAO,CAAC,aAAa,EACrB,SAAS,CAAC,0BAA0B,CACvC,CAAC;IAEF,uBAAuB,CAAC,uBAAuB,CAC3C,UAAU,EACV,OAAO,CAAC,oBAAoB,IAAI,EAAE,CACrC,CAAC;AAEF,IAAA,OAAO,iBAAiB,CAAC,eAAe,CACpC,SAAS,EACT,UAAU,EACV,MAAM,CAAC,IAAI,CAAC,sBAAsB,EAClC,OAAO,CAAC,oBAAoB,CAC/B,CAAC;AACN,CAAC;AAED;;AAEG;AACI,eAAe,UAAU,CAC5B,KAAe,EACf,MAA4B,EAC5B,SAAoB,EACpB,OAAsC,EACtC,MAAc,EACd,iBAAqC,EAAA;AAErC,IAAA,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE;AACjB,QAAA,MAAM,sBAAsB,CAACA,WAAiC,CAAC,CAAC;AACnE,KAAA;AAED,IAAA,MAAM,UAAU,GAAG,MAAM,qBAAqB,CAC1C,MAAM,EACN,SAAS,EACT,OAAO,EACP,MAAM,EACN,iBAAiB,CACpB,CAAC;IAEF,uBAAuB,CAAC,eAAe,CACnC,UAAU,EACV,iBAAiB,CAAC,0BAA0B,CAC/C,CAAC;IACF,uBAAuB,CAAC,gBAAgB,CAAC,UAAU,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;AAErE,IAAA,MAAM,WAAW,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC9C,uBAAuB,CAAC,uBAAuB,CAC3C,WAAW,EACX,OAAO,CAAC,oBAAoB,IAAI,EAAE,CACrC,CAAC;IACF,MAAM,GAAG,GAAG,iBAAiB,CAAC,eAAe,CACzC,SAAS,EACT,WAAW,EACX,MAAM,CAAC,IAAI,CAAC,sBAAsB,EAClC,OAAO,CAAC,oBAAoB,CAC/B,CAAC;IAEF,OAAO,UAAU,CAAC,KAAK,EAAE,GAAG,EAAE,UAAU,CAAC,CAAC;AAC9C,CAAC;AAED;;;;;;AAMG;AACH,SAAS,UAAU,CACf,KAAe,EACf,YAAoB,EACpB,UAA+B,EAAA;IAE/B,MAAM,IAAI,GAAG,KAAK,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC;AACzC,IAAA,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;AACrB,IAAA,IAAI,CAAC,MAAM,GAAG,YAAY,CAAC;IAE3B,UAAU,CAAC,OAAO,CAAC,CAAC,KAAa,EAAE,GAAW,KAAI;QAC9C,MAAM,KAAK,GAAG,KAAK,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;AAC3C,QAAA,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC;AACpB,QAAA,KAAK,CAAC,IAAI,GAAG,GAAG,CAAC;AACjB,QAAA,KAAK,CAAC,KAAK,GAAG,KAAK,CAAC;AAEpB,QAAA,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;AAC5B,KAAC,CAAC,CAAC;AAEH,IAAA,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;AAC7B,IAAA,OAAO,IAAI,CAAC;AAChB,CAAC;AAED;;;;;;;;;;;;;AAaG;AACI,eAAe,4BAA4B,CAC9C,OAAsC,EACtC,SAAiB,EACjB,KAAY,EACZ,MAA4B,EAC5B,cAAmC,EACnC,aAAkC,EAClC,YAA0B,EAC1B,MAAc,EACd,iBAAqC,EACrC,oBAA2C,EAAA;AAE3C,IAAA,MAAM,CAAC,OAAO,CAAC,yCAAyC,CAAC,CAAC;IAE1D,IAAI,CAAC,oBAAoB,EAAE;AACvB,QAAA,MAAM,sBAAsB,CACxBC,8BAAoD,CACvD,CAAC;AACL,KAAA;IACD,MAAM,aAAa,GAAG,IAAI,SAAS,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAC;AAC/D,IAAA,MAAM,uBAAuB,GAAG,IAAI,6BAA6B,CAC7D,MAAM,EACN,cAAc,EACd,aAAa,EACb,MAAM,EACN,YAAY,EACZ,MAAM,CAAC,MAAM,CAAC,gBAAgB,EAC9B,KAAK,EACL,iBAAiB,EACjB,oBAAoB,EACpB,SAAS,EACT,aAAa,EACb,OAAO,CAAC,aAAa,CACxB,CAAC;AACF,IAAA,MAAM,EAAE,gBAAgB,EAAE,GAAG,aAAa,CAAC,iBAAiB,CACxD,aAAa,EACb,OAAO,CAAC,KAAK,CAChB,CAAC;IACF,OAAO,WAAW,CACd,uBAAuB,CAAC,YAAY,CAAC,IAAI,CAAC,uBAAuB,CAAC,EAClE,iBAAiB,CAAC,mCAAmC,EACrD,MAAM,EACN,iBAAiB,EACjB,OAAO,CAAC,aAAa,CACxB,CAAC;AACE,QAAA,GAAG,OAAO;AACV,QAAA,KAAK,EAAE,gBAAgB;QACvB,MAAM,EAAE,SAAS;AACpB,KAAA,CAAC,CAAC;AACP,CAAC;AAED;;;;;;;;;;AAUG;AACI,eAAe,kBAAkB,CACpC,OAAsC,EACtC,QAA2B,EAC3B,YAAoB,EACpB,KAAY,EACZ,MAA4B,EAC5B,UAAmC,EACnC,cAAmC,EACnC,aAAkC,EAClC,YAA0B,EAC1B,MAAc,EACd,iBAAqC,EACrC,oBAA2C,EAAA;;AAG3C,IAAA,eAAe,CAAC,cAAc,CAC1B,cAAc,EACd,MAAM,CAAC,IAAI,CAAC,QAAQ,EACpB,OAAO,CACV,CAAC;IACF,IAAI,QAAQ,CAAC,SAAS,EAAE;AACpB,QAAA,OAAO,WAAW,CACd,4BAA4B,EAC5B,iBAAiB,CAAC,4BAA4B,EAC9C,MAAM,EACN,iBAAiB,EACjB,OAAO,CAAC,aAAa,CACxB,CACG,OAAO,EACP,QAAQ,CAAC,SAAS,EAClB,KAAK,EACL,MAAM,EACN,cAAc,EACd,aAAa,EACb,YAAY,EACZ,MAAM,EACN,iBAAiB,EACjB,oBAAoB,CACvB,CAAC;AACL,KAAA;AACD,IAAA,MAAM,eAAe,GAAmC;AACpD,QAAA,GAAG,OAAO;AACV,QAAA,IAAI,EAAE,QAAQ,CAAC,IAAI,IAAI,EAAE;AACzB,QAAA,YAAY,EAAE,YAAY;KAC7B,CAAC;;AAEF,IAAA,MAAM,kBAAkB,GAAG,IAAI,kBAAkB,CAC7C,UAAU,EACV,cAAc,EACd,eAAe,EACf,MAAM,EACN,iBAAiB,CACpB,CAAC;;AAEF,IAAA,MAAM,MAAM,GAAG,MAAM,WAAW,CAC5B,kBAAkB,CAAC,kBAAkB,CAAC,IAAI,CAAC,kBAAkB,CAAC,EAC9D,iBAAiB,CAAC,kBAAkB,EACpC,MAAM,EACN,iBAAiB,EACjB,OAAO,CAAC,aAAa,CACxB,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;AAErB,IAAA,OAAO,MAAM,CAAC;AAClB,CAAC;AAED;;;;;;;;;;;;;;AAcG;AACI,eAAe,iBAAiB,CACnC,OAAsC,EACtC,QAA2B,EAC3B,KAAY,EACZ,MAA4B,EAC5B,SAAoB,EACpB,cAAmC,EACnC,aAAkC,EAClC,YAA0B,EAC1B,MAAc,EACd,iBAAqC,EACrC,oBAA2C,EAAA;;AAG3C,IAAA,eAAe,CAAC,cAAc,CAC1B,cAAc,EACd,MAAM,CAAC,IAAI,CAAC,QAAQ,EACpB,OAAO,CACV,CAAC;;IAGF,iBAAiB,CAAC,6BAA6B,CAAC,QAAQ,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;AAEzE,IAAA,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE;AACnB,QAAA,MAAM,sBAAsB,CAACC,WAAiC,CAAC,CAAC;AACnE,KAAA;AAED,IAAA,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE;AACjB,QAAA,MAAM,sBAAsB,CAACF,WAAiC,CAAC,CAAC;AACnE,KAAA;AAED,IAAA,MAAM,aAAa,GAAG,IAAI,CAAC,KAAK,CAC5B,MAAM,WAAW,CACb,kBAAkB,EAClB,iBAAiB,CAAC,kBAAkB,EACpC,MAAM,EACN,iBAAiB,EACjB,OAAO,CAAC,aAAa,CACxB,CAAC,OAAO,CAAC,MAAM,EAAE,QAAQ,CAAC,OAAO,CAAC,CACkB,CAAC;IAE1D,IAAI,aAAa,CAAC,SAAS,EAAE;AACzB,QAAA,OAAO,WAAW,CACd,4BAA4B,EAC5B,iBAAiB,CAAC,4BAA4B,EAC9C,MAAM,EACN,iBAAiB,EACjB,OAAO,CAAC,aAAa,CACxB,CACG,OAAO,EACP,aAAa,CAAC,SAAS,EACvB,KAAK,EACL,MAAM,EACN,cAAc,EACd,aAAa,EACb,YAAY,EACZ,MAAM,EACN,iBAAiB,EACjB,oBAAoB,CACvB,CAAC;AACL,KAAA;AAED,IAAA,MAAM,eAAe,GAAG,IAAI,eAAe,CACvC,MAAM,CAAC,IAAI,CAAC,QAAQ,EACpB,cAAc,EACd,IAAI,SAAS,CAAC,MAAM,EAAE,iBAAiB,CAAC,EACxC,MAAM,EACN,IAAI,EACJ,IAAI,EACJ,iBAAiB,CACpB,CAAC;;AAGF,IAAA,eAAe,CAAC,qBAAqB,CAAC,aAAa,CAAC,CAAC;;AAGrD,IAAA,MAAM,cAAc,GAA6B;AAC7C,QAAA,IAAI,EAAE,EAAE;QACR,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,WAAW,EAAE,aAAa,CAAC,WAAW;QACtC,qBAAqB,EAAE,aAAa,CAAC,qBAAqB;QAC1D,wBAAwB,EAAE,aAAa,CAAC,wBAAwB;QAChE,mBAAmB,EAAE,aAAa,CAAC,mBAAmB;QACtD,YAAY,EAAE,aAAa,CAAC,YAAY;KAC3C,CAAC;IAEF,QAAQ,MAAM,WAAW,CACrB,eAAe,CAAC,yBAAyB,CAAC,IAAI,CAAC,eAAe,CAAC,EAC/D,iBAAiB,CAAC,yBAAyB,EAC3C,MAAM,EACN,iBAAiB,EACjB,OAAO,CAAC,aAAa,CACxB,CACG,aAAa,EACb,SAAS,EACT,SAAS,CAAC,UAAU,EAAE,EACtB,OAAO,EACP,cAAc,EACd,SAAS,EACT,SAAS,EACT,SAAS,EACT,SAAS,CACZ,EAA0B;AAC/B;;;;"}

package/dist/custom-auth-path/request/AuthorizationCodeRequest.d.ts

@@ -0,0 +1,9 @@
+import { CommonAuthorizationCodeRequest } from "@azure/msal-common/browser";
+export type AuthorizationCodeRequest = Partial<Omit<CommonAuthorizationCodeRequest, "code" | "enableSpaAuthorizationCode" | "requestedClaimsHash">> & {
+    code?: string;
+    nativeAccountId?: string;
+    cloudGraphHostName?: string;
+    msGraphHost?: string;
+    cloudInstanceHostName?: string;
+};
+//# sourceMappingURL=AuthorizationCodeRequest.d.ts.map

package/dist/custom-auth-path/request/AuthorizationCodeRequest.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"AuthorizationCodeRequest.d.ts","sourceRoot":"","sources":["../../../src/request/AuthorizationCodeRequest.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,8BAA8B,EAAE,MAAM,4BAA4B,CAAC;AAE5E,MAAM,MAAM,wBAAwB,GAAG,OAAO,CAC1C,IAAI,CACA,8BAA8B,EAC9B,MAAM,GAAG,4BAA4B,GAAG,qBAAqB,CAChE,CACJ,GAAG;IACA,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,qBAAqB,CAAC,EAAE,MAAM,CAAC;CAClC,CAAC"}

package/dist/custom-auth-path/request/AuthorizationUrlRequest.d.ts

@@ -0,0 +1,7 @@
+import { CommonAuthorizationUrlRequest } from "@azure/msal-common/browser";
+/**
+ * This type is deprecated and will be removed on the next major version update
+ * @deprecated Will be removed in future version
+ */
+export type AuthorizationUrlRequest = Omit<CommonAuthorizationUrlRequest, "requestedClaimsHash" | "platformBroker">;
+//# sourceMappingURL=AuthorizationUrlRequest.d.ts.map

package/dist/custom-auth-path/request/AuthorizationUrlRequest.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"AuthorizationUrlRequest.d.ts","sourceRoot":"","sources":["../../../src/request/AuthorizationUrlRequest.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,6BAA6B,EAAE,MAAM,4BAA4B,CAAC;AAE3E;;;GAGG;AACH,MAAM,MAAM,uBAAuB,GAAG,IAAI,CACtC,6BAA6B,EAC7B,qBAAqB,GAAG,gBAAgB,CAC3C,CAAC"}

package/dist/custom-auth-path/request/ClearCacheRequest.d.ts

@@ -0,0 +1,11 @@
+import { AccountInfo } from "@azure/msal-common/browser";
+/**
+ * ClearCacheRequest
+ * - correlationId          - Unique GUID set per request to trace a request end-to-end for telemetry purposes.
+ * - account                - Account object that will be logged out of. All tokens tied to this account will be cleared.
+ */
+export type ClearCacheRequest = {
+    correlationId?: string;
+    account?: AccountInfo | null;
+};
+//# sourceMappingURL=ClearCacheRequest.d.ts.map

package/dist/custom-auth-path/request/ClearCacheRequest.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ClearCacheRequest.d.ts","sourceRoot":"","sources":["../../../src/request/ClearCacheRequest.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,WAAW,EAAE,MAAM,4BAA4B,CAAC;AAEzD;;;;GAIG;AACH,MAAM,MAAM,iBAAiB,GAAG;IAC5B,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,OAAO,CAAC,EAAE,WAAW,GAAG,IAAI,CAAC;CAChC,CAAC"}