@azure/msal-browser 4.13.2 → 4.14.0

package/dist/custom-auth-path/broker/nativeBroker/PlatformAuthExtensionHandler.mjs

@@ -0,0 +1,274 @@
+/*! @azure/msal-browser v4.14.0 2025-07-01 */
+'use strict';
+import { PlatformAuthConstants, NativeExtensionMethod } from '../../utils/BrowserConstants.mjs';
+import { PerformanceEvents, createAuthError, AuthErrorCodes } from '@azure/msal-common/browser';
+import { createNativeAuthError } from '../../error/NativeAuthError.mjs';
+import { createBrowserAuthError } from '../../error/BrowserAuthError.mjs';
+import { createNewGuid } from '../../crypto/BrowserCrypto.mjs';
+import { nativeHandshakeTimeout, nativeExtensionNotInstalled } from '../../error/BrowserAuthErrorCodes.mjs';
+
+/*
+ * Copyright (c) Microsoft Corporation. All rights reserved.
+ * Licensed under the MIT License.
+ */
+class PlatformAuthExtensionHandler {
+    constructor(logger, handshakeTimeoutMs, performanceClient, extensionId) {
+        this.logger = logger;
+        this.handshakeTimeoutMs = handshakeTimeoutMs;
+        this.extensionId = extensionId;
+        this.resolvers = new Map(); // Used for non-handshake messages
+        this.handshakeResolvers = new Map(); // Used for handshake messages
+        this.messageChannel = new MessageChannel();
+        this.windowListener = this.onWindowMessage.bind(this); // Window event callback doesn't have access to 'this' unless it's bound
+        this.performanceClient = performanceClient;
+        this.handshakeEvent = performanceClient.startMeasurement(PerformanceEvents.NativeMessageHandlerHandshake);
+        this.platformAuthType =
+            PlatformAuthConstants.PLATFORM_EXTENSION_PROVIDER;
+    }
+    /**
+     * Sends a given message to the extension and resolves with the extension response
+     * @param request
+     */
+    async sendMessage(request) {
+        this.logger.trace(this.platformAuthType + " - sendMessage called.");
+        // fall back to native calls
+        const messageBody = {
+            method: NativeExtensionMethod.GetToken,
+            request: request,
+        };
+        const req = {
+            channel: PlatformAuthConstants.CHANNEL_ID,
+            extensionId: this.extensionId,
+            responseId: createNewGuid(),
+            body: messageBody,
+        };
+        this.logger.trace(this.platformAuthType + " - Sending request to browser extension");
+        this.logger.tracePii(this.platformAuthType +
+            ` - Sending request to browser extension: ${JSON.stringify(req)}`);
+        this.messageChannel.port1.postMessage(req);
+        const response = await new Promise((resolve, reject) => {
+            this.resolvers.set(req.responseId, { resolve, reject });
+        });
+        const validatedResponse = this.validatePlatformBrokerResponse(response);
+        return validatedResponse;
+    }
+    /**
+     * Returns an instance of the MessageHandler that has successfully established a connection with an extension
+     * @param {Logger} logger
+     * @param {number} handshakeTimeoutMs
+     * @param {IPerformanceClient} performanceClient
+     * @param {ICrypto} crypto
+     */
+    static async createProvider(logger, handshakeTimeoutMs, performanceClient) {
+        logger.trace("PlatformAuthExtensionHandler - createProvider called.");
+        try {
+            const preferredProvider = new PlatformAuthExtensionHandler(logger, handshakeTimeoutMs, performanceClient, PlatformAuthConstants.PREFERRED_EXTENSION_ID);
+            await preferredProvider.sendHandshakeRequest();
+            return preferredProvider;
+        }
+        catch (e) {
+            // If preferred extension fails for whatever reason, fallback to using any installed extension
+            const backupProvider = new PlatformAuthExtensionHandler(logger, handshakeTimeoutMs, performanceClient);
+            await backupProvider.sendHandshakeRequest();
+            return backupProvider;
+        }
+    }
+    /**
+     * Send handshake request helper.
+     */
+    async sendHandshakeRequest() {
+        this.logger.trace(this.platformAuthType + " - sendHandshakeRequest called.");
+        // Register this event listener before sending handshake
+        window.addEventListener("message", this.windowListener, false); // false is important, because content script message processing should work first
+        const req = {
+            channel: PlatformAuthConstants.CHANNEL_ID,
+            extensionId: this.extensionId,
+            responseId: createNewGuid(),
+            body: {
+                method: NativeExtensionMethod.HandshakeRequest,
+            },
+        };
+        this.handshakeEvent.add({
+            extensionId: this.extensionId,
+            extensionHandshakeTimeoutMs: this.handshakeTimeoutMs,
+        });
+        this.messageChannel.port1.onmessage = (event) => {
+            this.onChannelMessage(event);
+        };
+        window.postMessage(req, window.origin, [this.messageChannel.port2]);
+        return new Promise((resolve, reject) => {
+            this.handshakeResolvers.set(req.responseId, { resolve, reject });
+            this.timeoutId = window.setTimeout(() => {
+                /*
+                 * Throw an error if neither HandshakeResponse nor original Handshake request are received in a reasonable timeframe.
+                 * This typically suggests an event handler stopped propagation of the Handshake request but did not respond to it on the MessageChannel port
+                 */
+                window.removeEventListener("message", this.windowListener, false);
+                this.messageChannel.port1.close();
+                this.messageChannel.port2.close();
+                this.handshakeEvent.end({
+                    extensionHandshakeTimedOut: true,
+                    success: false,
+                });
+                reject(createBrowserAuthError(nativeHandshakeTimeout));
+                this.handshakeResolvers.delete(req.responseId);
+            }, this.handshakeTimeoutMs); // Use a reasonable timeout in milliseconds here
+        });
+    }
+    /**
+     * Invoked when a message is posted to the window. If a handshake request is received it means the extension is not installed.
+     * @param event
+     */
+    onWindowMessage(event) {
+        this.logger.trace(this.platformAuthType + " - onWindowMessage called");
+        // We only accept messages from ourselves
+        if (event.source !== window) {
+            return;
+        }
+        const request = event.data;
+        if (!request.channel ||
+            request.channel !== PlatformAuthConstants.CHANNEL_ID) {
+            return;
+        }
+        if (request.extensionId && request.extensionId !== this.extensionId) {
+            return;
+        }
+        if (request.body.method === NativeExtensionMethod.HandshakeRequest) {
+            const handshakeResolver = this.handshakeResolvers.get(request.responseId);
+            /*
+             * Filter out responses with no matched resolvers sooner to keep channel ports open while waiting for
+             * the proper response.
+             */
+            if (!handshakeResolver) {
+                this.logger.trace(this.platformAuthType +
+                    `.onWindowMessage - resolver can't be found for request ${request.responseId}`);
+                return;
+            }
+            // If we receive this message back it means no extension intercepted the request, meaning no extension supporting handshake protocol is installed
+            this.logger.verbose(request.extensionId
+                ? `Extension with id: ${request.extensionId} not installed`
+                : "No extension installed");
+            clearTimeout(this.timeoutId);
+            this.messageChannel.port1.close();
+            this.messageChannel.port2.close();
+            window.removeEventListener("message", this.windowListener, false);
+            this.handshakeEvent.end({
+                success: false,
+                extensionInstalled: false,
+            });
+            handshakeResolver.reject(createBrowserAuthError(nativeExtensionNotInstalled));
+        }
+    }
+    /**
+     * Invoked when a message is received from the extension on the MessageChannel port
+     * @param event
+     */
+    onChannelMessage(event) {
+        this.logger.trace(this.platformAuthType + " - onChannelMessage called.");
+        const request = event.data;
+        const resolver = this.resolvers.get(request.responseId);
+        const handshakeResolver = this.handshakeResolvers.get(request.responseId);
+        try {
+            const method = request.body.method;
+            if (method === NativeExtensionMethod.Response) {
+                if (!resolver) {
+                    return;
+                }
+                const response = request.body.response;
+                this.logger.trace(this.platformAuthType +
+                    " - Received response from browser extension");
+                this.logger.tracePii(this.platformAuthType +
+                    ` - Received response from browser extension: ${JSON.stringify(response)}`);
+                if (response.status !== "Success") {
+                    resolver.reject(createNativeAuthError(response.code, response.description, response.ext));
+                }
+                else if (response.result) {
+                    if (response.result["code"] &&
+                        response.result["description"]) {
+                        resolver.reject(createNativeAuthError(response.result["code"], response.result["description"], response.result["ext"]));
+                    }
+                    else {
+                        resolver.resolve(response.result);
+                    }
+                }
+                else {
+                    throw createAuthError(AuthErrorCodes.unexpectedError, "Event does not contain result.");
+                }
+                this.resolvers.delete(request.responseId);
+            }
+            else if (method === NativeExtensionMethod.HandshakeResponse) {
+                if (!handshakeResolver) {
+                    this.logger.trace(this.platformAuthType +
+                        `.onChannelMessage - resolver can't be found for request ${request.responseId}`);
+                    return;
+                }
+                clearTimeout(this.timeoutId); // Clear setTimeout
+                window.removeEventListener("message", this.windowListener, false); // Remove 'No extension' listener
+                this.extensionId = request.extensionId;
+                this.extensionVersion = request.body.version;
+                this.logger.verbose(this.platformAuthType +
+                    ` - Received HandshakeResponse from extension: ${this.extensionId}`);
+                this.handshakeEvent.end({
+                    extensionInstalled: true,
+                    success: true,
+                });
+                handshakeResolver.resolve();
+                this.handshakeResolvers.delete(request.responseId);
+            }
+            // Do nothing if method is not Response or HandshakeResponse
+        }
+        catch (err) {
+            this.logger.error("Error parsing response from WAM Extension");
+            this.logger.errorPii(`Error parsing response from WAM Extension: ${err}`);
+            this.logger.errorPii(`Unable to parse ${event}`);
+            if (resolver) {
+                resolver.reject(err);
+            }
+            else if (handshakeResolver) {
+                handshakeResolver.reject(err);
+            }
+        }
+    }
+    /**
+     * Validates native platform response before processing
+     * @param response
+     */
+    validatePlatformBrokerResponse(response) {
+        if (response.hasOwnProperty("access_token") &&
+            response.hasOwnProperty("id_token") &&
+            response.hasOwnProperty("client_info") &&
+            response.hasOwnProperty("account") &&
+            response.hasOwnProperty("scope") &&
+            response.hasOwnProperty("expires_in")) {
+            return response;
+        }
+        else {
+            throw createAuthError(AuthErrorCodes.unexpectedError, "Response missing expected properties.");
+        }
+    }
+    /**
+     * Returns the Id for the browser extension this handler is communicating with
+     * @returns
+     */
+    getExtensionId() {
+        return this.extensionId;
+    }
+    /**
+     * Returns the version for the browser extension this handler is communicating with
+     * @returns
+     */
+    getExtensionVersion() {
+        return this.extensionVersion;
+    }
+    getExtensionName() {
+        return this.getExtensionId() ===
+            PlatformAuthConstants.PREFERRED_EXTENSION_ID
+            ? "chrome"
+            : this.getExtensionId()?.length
+                ? "unknown"
+                : undefined;
+    }
+}
+
+export { PlatformAuthExtensionHandler };
+//# sourceMappingURL=PlatformAuthExtensionHandler.mjs.map

package/dist/custom-auth-path/broker/nativeBroker/PlatformAuthExtensionHandler.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"PlatformAuthExtensionHandler.mjs","sources":["../../../../../src/broker/nativeBroker/PlatformAuthExtensionHandler.ts"],"sourcesContent":[null],"names":["BrowserAuthErrorCodes.nativeHandshakeTimeout","BrowserAuthErrorCodes.nativeExtensionNotInstalled"],"mappings":";;;;;;;;;AAAA;;;AAGG;MAoCU,4BAA4B,CAAA;AAcrC,IAAA,WAAA,CACI,MAAc,EACd,kBAA0B,EAC1B,iBAAqC,EACrC,WAAoB,EAAA;AAEpB,QAAA,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;AACrB,QAAA,IAAI,CAAC,kBAAkB,GAAG,kBAAkB,CAAC;AAC7C,QAAA,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;QAC/B,IAAI,CAAC,SAAS,GAAG,IAAI,GAAG,EAAE,CAAC;QAC3B,IAAI,CAAC,kBAAkB,GAAG,IAAI,GAAG,EAAE,CAAC;AACpC,QAAA,IAAI,CAAC,cAAc,GAAG,IAAI,cAAc,EAAE,CAAC;AAC3C,QAAA,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACtD,QAAA,IAAI,CAAC,iBAAiB,GAAG,iBAAiB,CAAC;QAC3C,IAAI,CAAC,cAAc,GAAG,iBAAiB,CAAC,gBAAgB,CACpD,iBAAiB,CAAC,6BAA6B,CAClD,CAAC;AACF,QAAA,IAAI,CAAC,gBAAgB;YACjB,qBAAqB,CAAC,2BAA2B,CAAC;KACzD;AAED;;;AAGG;IACH,MAAM,WAAW,CACb,OAA4B,EAAA;QAE5B,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,gBAAgB,GAAG,wBAAwB,CAAC,CAAC;;AAGpE,QAAA,MAAM,WAAW,GAA+B;YAC5C,MAAM,EAAE,qBAAqB,CAAC,QAAQ;AACtC,YAAA,OAAO,EAAE,OAAO;SACnB,CAAC;AAEF,QAAA,MAAM,GAAG,GAA2B;YAChC,OAAO,EAAE,qBAAqB,CAAC,UAAU;YACzC,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,UAAU,EAAE,aAAa,EAAE;AAC3B,YAAA,IAAI,EAAE,WAAW;SACpB,CAAC;QAEF,IAAI,CAAC,MAAM,CAAC,KAAK,CACb,IAAI,CAAC,gBAAgB,GAAG,yCAAyC,CACpE,CAAC;AACF,QAAA,IAAI,CAAC,MAAM,CAAC,QAAQ,CAChB,IAAI,CAAC,gBAAgB;YACjB,CAA4C,yCAAA,EAAA,IAAI,CAAC,SAAS,CACtD,GAAG,CACN,CAAA,CAAE,CACV,CAAC;QACF,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;QAE3C,MAAM,QAAQ,GAAW,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,KAAI;AAC3D,YAAA,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,UAAU,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;AAC5D,SAAC,CAAC,CAAC;QAEH,MAAM,iBAAiB,GACnB,IAAI,CAAC,8BAA8B,CAAC,QAAQ,CAAC,CAAC;AAElD,QAAA,OAAO,iBAAiB,CAAC;KAC5B;AAED;;;;;;AAMG;IACH,aAAa,cAAc,CACvB,MAAc,EACd,kBAA0B,EAC1B,iBAAqC,EAAA;AAErC,QAAA,MAAM,CAAC,KAAK,CAAC,uDAAuD,CAAC,CAAC;QAEtE,IAAI;AACA,YAAA,MAAM,iBAAiB,GAAG,IAAI,4BAA4B,CACtD,MAAM,EACN,kBAAkB,EAClB,iBAAiB,EACjB,qBAAqB,CAAC,sBAAsB,CAC/C,CAAC;AACF,YAAA,MAAM,iBAAiB,CAAC,oBAAoB,EAAE,CAAC;AAC/C,YAAA,OAAO,iBAAiB,CAAC;AAC5B,SAAA;AAAC,QAAA,OAAO,CAAC,EAAE;;YAER,MAAM,cAAc,GAAG,IAAI,4BAA4B,CACnD,MAAM,EACN,kBAAkB,EAClB,iBAAiB,CACpB,CAAC;AACF,YAAA,MAAM,cAAc,CAAC,oBAAoB,EAAE,CAAC;AAC5C,YAAA,OAAO,cAAc,CAAC;AACzB,SAAA;KACJ;AAED;;AAEG;AACK,IAAA,MAAM,oBAAoB,GAAA;QAC9B,IAAI,CAAC,MAAM,CAAC,KAAK,CACb,IAAI,CAAC,gBAAgB,GAAG,iCAAiC,CAC5D,CAAC;;AAEF,QAAA,MAAM,CAAC,gBAAgB,CAAC,SAAS,EAAE,IAAI,CAAC,cAAc,EAAE,KAAK,CAAC,CAAC;AAE/D,QAAA,MAAM,GAAG,GAA2B;YAChC,OAAO,EAAE,qBAAqB,CAAC,UAAU;YACzC,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,UAAU,EAAE,aAAa,EAAE;AAC3B,YAAA,IAAI,EAAE;gBACF,MAAM,EAAE,qBAAqB,CAAC,gBAAgB;AACjD,aAAA;SACJ,CAAC;AACF,QAAA,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC;YACpB,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,2BAA2B,EAAE,IAAI,CAAC,kBAAkB;AACvD,SAAA,CAAC,CAAC;QAEH,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,SAAS,GAAG,CAAC,KAAK,KAAI;AAC5C,YAAA,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC;AACjC,SAAC,CAAC;AAEF,QAAA,MAAM,CAAC,WAAW,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC;QAEpE,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,KAAI;AACnC,YAAA,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,GAAG,CAAC,UAAU,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;YACjE,IAAI,CAAC,SAAS,GAAG,MAAM,CAAC,UAAU,CAAC,MAAK;AACpC;;;AAGG;gBACH,MAAM,CAAC,mBAAmB,CACtB,SAAS,EACT,IAAI,CAAC,cAAc,EACnB,KAAK,CACR,CAAC;AACF,gBAAA,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;AAClC,gBAAA,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;AAClC,gBAAA,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC;AACpB,oBAAA,0BAA0B,EAAE,IAAI;AAChC,oBAAA,OAAO,EAAE,KAAK;AACjB,iBAAA,CAAC,CAAC;gBACH,MAAM,CACF,sBAAsB,CAClBA,sBAA4C,CAC/C,CACJ,CAAC;gBACF,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;AACnD,aAAC,EAAE,IAAI,CAAC,kBAAkB,CAAC,CAAC;AAChC,SAAC,CAAC,CAAC;KACN;AAED;;;AAGG;AACK,IAAA,eAAe,CAAC,KAAmB,EAAA;QACvC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,gBAAgB,GAAG,2BAA2B,CAAC,CAAC;;AAEvE,QAAA,IAAI,KAAK,CAAC,MAAM,KAAK,MAAM,EAAE;YACzB,OAAO;AACV,SAAA;AAED,QAAA,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC;QAE3B,IACI,CAAC,OAAO,CAAC,OAAO;AAChB,YAAA,OAAO,CAAC,OAAO,KAAK,qBAAqB,CAAC,UAAU,EACtD;YACE,OAAO;AACV,SAAA;QAED,IAAI,OAAO,CAAC,WAAW,IAAI,OAAO,CAAC,WAAW,KAAK,IAAI,CAAC,WAAW,EAAE;YACjE,OAAO;AACV,SAAA;QAED,IAAI,OAAO,CAAC,IAAI,CAAC,MAAM,KAAK,qBAAqB,CAAC,gBAAgB,EAAE;AAChE,YAAA,MAAM,iBAAiB,GAAG,IAAI,CAAC,kBAAkB,CAAC,GAAG,CACjD,OAAO,CAAC,UAAU,CACrB,CAAC;AACF;;;AAGG;YACH,IAAI,CAAC,iBAAiB,EAAE;AACpB,gBAAA,IAAI,CAAC,MAAM,CAAC,KAAK,CACb,IAAI,CAAC,gBAAgB;AACjB,oBAAA,CAAA,uDAAA,EAA0D,OAAO,CAAC,UAAU,CAAA,CAAE,CACrF,CAAC;gBACF,OAAO;AACV,aAAA;;AAGD,YAAA,IAAI,CAAC,MAAM,CAAC,OAAO,CACf,OAAO,CAAC,WAAW;AACf,kBAAE,CAAA,mBAAA,EAAsB,OAAO,CAAC,WAAW,CAAgB,cAAA,CAAA;kBACzD,wBAAwB,CACjC,CAAC;AACF,YAAA,YAAY,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;AAC7B,YAAA,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;AAClC,YAAA,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;YAClC,MAAM,CAAC,mBAAmB,CAAC,SAAS,EAAE,IAAI,CAAC,cAAc,EAAE,KAAK,CAAC,CAAC;AAClE,YAAA,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC;AACpB,gBAAA,OAAO,EAAE,KAAK;AACd,gBAAA,kBAAkB,EAAE,KAAK;AAC5B,aAAA,CAAC,CAAC;YACH,iBAAiB,CAAC,MAAM,CACpB,sBAAsB,CAClBC,2BAAiD,CACpD,CACJ,CAAC;AACL,SAAA;KACJ;AAED;;;AAGG;AACK,IAAA,gBAAgB,CAAC,KAAmB,EAAA;QACxC,IAAI,CAAC,MAAM,CAAC,KAAK,CACb,IAAI,CAAC,gBAAgB,GAAG,6BAA6B,CACxD,CAAC;AACF,QAAA,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC;AAE3B,QAAA,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;AACxD,QAAA,MAAM,iBAAiB,GAAG,IAAI,CAAC,kBAAkB,CAAC,GAAG,CACjD,OAAO,CAAC,UAAU,CACrB,CAAC;QAEF,IAAI;AACA,YAAA,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC;AAEnC,YAAA,IAAI,MAAM,KAAK,qBAAqB,CAAC,QAAQ,EAAE;gBAC3C,IAAI,CAAC,QAAQ,EAAE;oBACX,OAAO;AACV,iBAAA;AACD,gBAAA,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC;AACvC,gBAAA,IAAI,CAAC,MAAM,CAAC,KAAK,CACb,IAAI,CAAC,gBAAgB;AACjB,oBAAA,6CAA6C,CACpD,CAAC;AACF,gBAAA,IAAI,CAAC,MAAM,CAAC,QAAQ,CAChB,IAAI,CAAC,gBAAgB;oBACjB,CAAgD,6CAAA,EAAA,IAAI,CAAC,SAAS,CAC1D,QAAQ,CACX,CAAA,CAAE,CACV,CAAC;AACF,gBAAA,IAAI,QAAQ,CAAC,MAAM,KAAK,SAAS,EAAE;AAC/B,oBAAA,QAAQ,CAAC,MAAM,CACX,qBAAqB,CACjB,QAAQ,CAAC,IAAI,EACb,QAAQ,CAAC,WAAW,EACpB,QAAQ,CAAC,GAAG,CACf,CACJ,CAAC;AACL,iBAAA;qBAAM,IAAI,QAAQ,CAAC,MAAM,EAAE;AACxB,oBAAA,IACI,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC;AACvB,wBAAA,QAAQ,CAAC,MAAM,CAAC,aAAa,CAAC,EAChC;wBACE,QAAQ,CAAC,MAAM,CACX,qBAAqB,CACjB,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,EACvB,QAAQ,CAAC,MAAM,CAAC,aAAa,CAAC,EAC9B,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,CACzB,CACJ,CAAC;AACL,qBAAA;AAAM,yBAAA;AACH,wBAAA,QAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;AACrC,qBAAA;AACJ,iBAAA;AAAM,qBAAA;oBACH,MAAM,eAAe,CACjB,cAAc,CAAC,eAAe,EAC9B,gCAAgC,CACnC,CAAC;AACL,iBAAA;gBACD,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;AAC7C,aAAA;AAAM,iBAAA,IAAI,MAAM,KAAK,qBAAqB,CAAC,iBAAiB,EAAE;gBAC3D,IAAI,CAAC,iBAAiB,EAAE;AACpB,oBAAA,IAAI,CAAC,MAAM,CAAC,KAAK,CACb,IAAI,CAAC,gBAAgB;AACjB,wBAAA,CAAA,wDAAA,EAA2D,OAAO,CAAC,UAAU,CAAA,CAAE,CACtF,CAAC;oBACF,OAAO;AACV,iBAAA;AACD,gBAAA,YAAY,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;AAC7B,gBAAA,MAAM,CAAC,mBAAmB,CACtB,SAAS,EACT,IAAI,CAAC,cAAc,EACnB,KAAK,CACR,CAAC;AACF,gBAAA,IAAI,CAAC,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC;gBACvC,IAAI,CAAC,gBAAgB,GAAG,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC;AAC7C,gBAAA,IAAI,CAAC,MAAM,CAAC,OAAO,CACf,IAAI,CAAC,gBAAgB;AACjB,oBAAA,CAAA,8CAAA,EAAiD,IAAI,CAAC,WAAW,CAAA,CAAE,CAC1E,CAAC;AACF,gBAAA,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC;AACpB,oBAAA,kBAAkB,EAAE,IAAI;AACxB,oBAAA,OAAO,EAAE,IAAI;AAChB,iBAAA,CAAC,CAAC;gBAEH,iBAAiB,CAAC,OAAO,EAAE,CAAC;gBAC5B,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;AACtD,aAAA;;AAEJ,SAAA;AAAC,QAAA,OAAO,GAAG,EAAE;AACV,YAAA,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,2CAA2C,CAAC,CAAC;YAC/D,IAAI,CAAC,MAAM,CAAC,QAAQ,CAChB,CAA8C,2CAAA,EAAA,GAAa,CAAE,CAAA,CAChE,CAAC;YACF,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAmB,gBAAA,EAAA,KAAK,CAAE,CAAA,CAAC,CAAC;AAEjD,YAAA,IAAI,QAAQ,EAAE;AACV,gBAAA,QAAQ,CAAC,MAAM,CAAC,GAAgB,CAAC,CAAC;AACrC,aAAA;AAAM,iBAAA,IAAI,iBAAiB,EAAE;AAC1B,gBAAA,iBAAiB,CAAC,MAAM,CAAC,GAAgB,CAAC,CAAC;AAC9C,aAAA;AACJ,SAAA;KACJ;AAED;;;AAGG;AACK,IAAA,8BAA8B,CAClC,QAAgB,EAAA;AAEhB,QAAA,IACI,QAAQ,CAAC,cAAc,CAAC,cAAc,CAAC;AACvC,YAAA,QAAQ,CAAC,cAAc,CAAC,UAAU,CAAC;AACnC,YAAA,QAAQ,CAAC,cAAc,CAAC,aAAa,CAAC;AACtC,YAAA,QAAQ,CAAC,cAAc,CAAC,SAAS,CAAC;AAClC,YAAA,QAAQ,CAAC,cAAc,CAAC,OAAO,CAAC;AAChC,YAAA,QAAQ,CAAC,cAAc,CAAC,YAAY,CAAC,EACvC;AACE,YAAA,OAAO,QAAgC,CAAC;AAC3C,SAAA;AAAM,aAAA;YACH,MAAM,eAAe,CACjB,cAAc,CAAC,eAAe,EAC9B,uCAAuC,CAC1C,CAAC;AACL,SAAA;KACJ;AAED;;;AAGG;IACH,cAAc,GAAA;QACV,OAAO,IAAI,CAAC,WAAW,CAAC;KAC3B;AAED;;;AAGG;IACH,mBAAmB,GAAA;QACf,OAAO,IAAI,CAAC,gBAAgB,CAAC;KAChC;IAED,gBAAgB,GAAA;QACZ,OAAO,IAAI,CAAC,cAAc,EAAE;AACxB,YAAA,qBAAqB,CAAC,sBAAsB;AAC5C,cAAE,QAAQ;AACV,cAAE,IAAI,CAAC,cAAc,EAAE,EAAE,MAAM;AAC/B,kBAAE,SAAS;kBACT,SAAS,CAAC;KACnB;AACJ;;;;"}

package/dist/custom-auth-path/broker/nativeBroker/PlatformAuthProvider.d.ts

@@ -0,0 +1,26 @@
+import { LoggerOptions, IPerformanceClient, Logger, AuthenticationScheme } from "@azure/msal-common/browser";
+import { BrowserConfiguration } from "../../config/Configuration.js";
+import { IPlatformAuthHandler } from "./IPlatformAuthHandler.js";
+/**
+ * Checks if the platform broker is available in the current environment.
+ * @param loggerOptions
+ * @param perfClient
+ * @returns
+ */
+export declare function isPlatformBrokerAvailable(loggerOptions?: LoggerOptions, perfClient?: IPerformanceClient, correlationId?: string): Promise<boolean>;
+export declare function getPlatformAuthProvider(logger: Logger, performanceClient: IPerformanceClient, correlationId: string, nativeBrokerHandshakeTimeout?: number): Promise<IPlatformAuthHandler | undefined>;
+/**
+ * Returns true if the DOM API support for platform auth is enabled in session storage
+ * @returns boolean
+ * @deprecated
+ */
+export declare function isDomEnabledForPlatformAuth(): boolean;
+/**
+ * Returns boolean indicating whether or not the request should attempt to use native broker
+ * @param logger
+ * @param config
+ * @param platformAuthProvider
+ * @param authenticationScheme
+ */
+export declare function isPlatformAuthAllowed(config: BrowserConfiguration, logger: Logger, platformAuthProvider?: IPlatformAuthHandler, authenticationScheme?: AuthenticationScheme): boolean;
+//# sourceMappingURL=PlatformAuthProvider.d.ts.map

package/dist/custom-auth-path/broker/nativeBroker/PlatformAuthProvider.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"PlatformAuthProvider.d.ts","sourceRoot":"","sources":["../../../../src/broker/nativeBroker/PlatformAuthProvider.ts"],"names":[],"mappings":"AAKA,OAAO,EACH,aAAa,EACb,kBAAkB,EAClB,MAAM,EACN,oBAAoB,EAEvB,MAAM,4BAA4B,CAAC;AAEpC,OAAO,EACH,oBAAoB,EAEvB,MAAM,+BAA+B,CAAC;AAEvC,OAAO,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AAQjE;;;;;GAKG;AACH,wBAAsB,yBAAyB,CAC3C,aAAa,CAAC,EAAE,aAAa,EAC7B,UAAU,CAAC,EAAE,kBAAkB,EAC/B,aAAa,CAAC,EAAE,MAAM,GACvB,OAAO,CAAC,OAAO,CAAC,CAiBlB;AAED,wBAAsB,uBAAuB,CACzC,MAAM,EAAE,MAAM,EACd,iBAAiB,EAAE,kBAAkB,EACrC,aAAa,EAAE,MAAM,EACrB,4BAA4B,CAAC,EAAE,MAAM,GACtC,OAAO,CAAC,oBAAoB,GAAG,SAAS,CAAC,CAuC3C;AAED;;;;GAIG;AACH,wBAAgB,2BAA2B,IAAI,OAAO,CASrD;AAED;;;;;;GAMG;AACH,wBAAgB,qBAAqB,CACjC,MAAM,EAAE,oBAAoB,EAC5B,MAAM,EAAE,MAAM,EACd,oBAAoB,CAAC,EAAE,oBAAoB,EAC3C,oBAAoB,CAAC,EAAE,oBAAoB,GAC5C,OAAO,CAkCT"}

package/dist/custom-auth-path/broker/nativeBroker/PlatformAuthProvider.mjs

@@ -0,0 +1,90 @@
+/*! @azure/msal-browser v4.14.0 2025-07-01 */
+'use strict';
+import { AuthenticationScheme } from '@azure/msal-common/browser';
+import { DEFAULT_NATIVE_BROKER_HANDSHAKE_TIMEOUT_MS } from '../../config/Configuration.mjs';
+import { PlatformAuthExtensionHandler } from './PlatformAuthExtensionHandler.mjs';
+import { PlatformAuthDOMHandler } from './PlatformAuthDOMHandler.mjs';
+import { BrowserCacheLocation, PLATFORM_AUTH_DOM_SUPPORT } from '../../utils/BrowserConstants.mjs';
+
+/*
+ * Copyright (c) Microsoft Corporation. All rights reserved.
+ * Licensed under the MIT License.
+ */
+async function getPlatformAuthProvider(logger, performanceClient, correlationId, nativeBrokerHandshakeTimeout) {
+    logger.trace("getPlatformAuthProvider called", correlationId);
+    const enablePlatformBrokerDOMSupport = isDomEnabledForPlatformAuth();
+    logger.trace("Has client allowed platform auth via DOM API: " +
+        enablePlatformBrokerDOMSupport);
+    let platformAuthProvider;
+    try {
+        if (enablePlatformBrokerDOMSupport) {
+            // Check if DOM platform API is supported first
+            platformAuthProvider = await PlatformAuthDOMHandler.createProvider(logger, performanceClient, correlationId);
+        }
+        if (!platformAuthProvider) {
+            logger.trace("Platform auth via DOM API not available, checking for extension");
+            /*
+             * If DOM APIs are not available, check if browser extension is available.
+             * Platform authentication via DOM APIs is preferred over extension APIs.
+             */
+            platformAuthProvider =
+                await PlatformAuthExtensionHandler.createProvider(logger, nativeBrokerHandshakeTimeout ||
+                    DEFAULT_NATIVE_BROKER_HANDSHAKE_TIMEOUT_MS, performanceClient);
+        }
+    }
+    catch (e) {
+        logger.trace("Platform auth not available", e);
+    }
+    return platformAuthProvider;
+}
+/**
+ * Returns true if the DOM API support for platform auth is enabled in session storage
+ * @returns boolean
+ * @deprecated
+ */
+function isDomEnabledForPlatformAuth() {
+    let sessionStorage;
+    try {
+        sessionStorage = window[BrowserCacheLocation.SessionStorage];
+        // Mute errors if it's a non-browser environment or cookies are blocked.
+        return sessionStorage?.getItem(PLATFORM_AUTH_DOM_SUPPORT) === "true";
+    }
+    catch (e) {
+        return false;
+    }
+}
+/**
+ * Returns boolean indicating whether or not the request should attempt to use native broker
+ * @param logger
+ * @param config
+ * @param platformAuthProvider
+ * @param authenticationScheme
+ */
+function isPlatformAuthAllowed(config, logger, platformAuthProvider, authenticationScheme) {
+    logger.trace("isPlatformAuthAllowed called");
+    if (!config.system.allowPlatformBroker) {
+        logger.trace("isPlatformAuthAllowed: allowPlatformBroker is not enabled, returning false");
+        // Developer disabled WAM
+        return false;
+    }
+    if (!platformAuthProvider) {
+        logger.trace("isPlatformAuthAllowed: Platform auth provider is not initialized, returning false");
+        // Platform broker auth providers are not available
+        return false;
+    }
+    if (authenticationScheme) {
+        switch (authenticationScheme) {
+            case AuthenticationScheme.BEARER:
+            case AuthenticationScheme.POP:
+                logger.trace("isPlatformAuthAllowed: authenticationScheme is supported, returning true");
+                return true;
+            default:
+                logger.trace("isPlatformAuthAllowed: authenticationScheme is not supported, returning false");
+                return false;
+        }
+    }
+    return true;
+}
+
+export { getPlatformAuthProvider, isDomEnabledForPlatformAuth, isPlatformAuthAllowed };
+//# sourceMappingURL=PlatformAuthProvider.mjs.map

package/dist/custom-auth-path/broker/nativeBroker/PlatformAuthProvider.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"PlatformAuthProvider.mjs","sources":["../../../../../src/broker/nativeBroker/PlatformAuthProvider.ts"],"sourcesContent":[null],"names":[],"mappings":";;;;;;;;AAAA;;;AAGG;AAoDI,eAAe,uBAAuB,CACzC,MAAc,EACd,iBAAqC,EACrC,aAAqB,EACrB,4BAAqC,EAAA;AAErC,IAAA,MAAM,CAAC,KAAK,CAAC,gCAAgC,EAAE,aAAa,CAAC,CAAC;AAE9D,IAAA,MAAM,8BAA8B,GAAG,2BAA2B,EAAE,CAAC;IAErE,MAAM,CAAC,KAAK,CACR,gDAAgD;AAC5C,QAAA,8BAA8B,CACrC,CAAC;AACF,IAAA,IAAI,oBAAsD,CAAC;IAC3D,IAAI;AACA,QAAA,IAAI,8BAA8B,EAAE;;AAEhC,YAAA,oBAAoB,GAAG,MAAM,sBAAsB,CAAC,cAAc,CAC9D,MAAM,EACN,iBAAiB,EACjB,aAAa,CAChB,CAAC;AACL,SAAA;QACD,IAAI,CAAC,oBAAoB,EAAE;AACvB,YAAA,MAAM,CAAC,KAAK,CACR,iEAAiE,CACpE,CAAC;AACF;;;AAGG;YACH,oBAAoB;AAChB,gBAAA,MAAM,4BAA4B,CAAC,cAAc,CAC7C,MAAM,EACN,4BAA4B;oBACxB,0CAA0C,EAC9C,iBAAiB,CACpB,CAAC;AACT,SAAA;AACJ,KAAA;AAAC,IAAA,OAAO,CAAC,EAAE;AACR,QAAA,MAAM,CAAC,KAAK,CAAC,6BAA6B,EAAE,CAAW,CAAC,CAAC;AAC5D,KAAA;AACD,IAAA,OAAO,oBAAoB,CAAC;AAChC,CAAC;AAED;;;;AAIG;SACa,2BAA2B,GAAA;AACvC,IAAA,IAAI,cAAmC,CAAC;IACxC,IAAI;AACA,QAAA,cAAc,GAAG,MAAM,CAAC,oBAAoB,CAAC,cAAc,CAAC,CAAC;;QAE7D,OAAO,cAAc,EAAE,OAAO,CAAC,yBAAyB,CAAC,KAAK,MAAM,CAAC;AACxE,KAAA;AAAC,IAAA,OAAO,CAAC,EAAE;AACR,QAAA,OAAO,KAAK,CAAC;AAChB,KAAA;AACL,CAAC;AAED;;;;;;AAMG;AACG,SAAU,qBAAqB,CACjC,MAA4B,EAC5B,MAAc,EACd,oBAA2C,EAC3C,oBAA2C,EAAA;AAE3C,IAAA,MAAM,CAAC,KAAK,CAAC,8BAA8B,CAAC,CAAC;AAC7C,IAAA,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,mBAAmB,EAAE;AACpC,QAAA,MAAM,CAAC,KAAK,CACR,4EAA4E,CAC/E,CAAC;;AAEF,QAAA,OAAO,KAAK,CAAC;AAChB,KAAA;IAED,IAAI,CAAC,oBAAoB,EAAE;AACvB,QAAA,MAAM,CAAC,KAAK,CACR,mFAAmF,CACtF,CAAC;;AAEF,QAAA,OAAO,KAAK,CAAC;AAChB,KAAA;AAED,IAAA,IAAI,oBAAoB,EAAE;AACtB,QAAA,QAAQ,oBAAoB;YACxB,KAAK,oBAAoB,CAAC,MAAM,CAAC;YACjC,KAAK,oBAAoB,CAAC,GAAG;AACzB,gBAAA,MAAM,CAAC,KAAK,CACR,0EAA0E,CAC7E,CAAC;AACF,gBAAA,OAAO,IAAI,CAAC;AAChB,YAAA;AACI,gBAAA,MAAM,CAAC,KAAK,CACR,+EAA+E,CAClF,CAAC;AACF,gBAAA,OAAO,KAAK,CAAC;AACpB,SAAA;AACJ,KAAA;AACD,IAAA,OAAO,IAAI,CAAC;AAChB;;;;"}

package/dist/custom-auth-path/broker/nativeBroker/PlatformAuthRequest.d.ts

@@ -0,0 +1,78 @@
+import { NativeExtensionMethod } from "../../utils/BrowserConstants.js";
+import { StoreInCache, StringDict } from "@azure/msal-common/browser";
+/**
+ * Token request which native broker will use to acquire tokens
+ */
+export type PlatformAuthRequest = {
+    accountId: string;
+    clientId: string;
+    authority: string;
+    redirectUri: string;
+    scope: string;
+    correlationId: string;
+    windowTitleSubstring: string;
+    prompt?: string;
+    nonce?: string;
+    claims?: string;
+    state?: string;
+    reqCnf?: string;
+    keyId?: string;
+    tokenType?: string;
+    shrClaims?: string;
+    shrNonce?: string;
+    resourceRequestMethod?: string;
+    resourceRequestUri?: string;
+    extendedExpiryToken?: boolean;
+    extraParameters?: StringDict;
+    storeInCache?: StoreInCache;
+    signPopToken?: boolean;
+    embeddedClientId?: string;
+};
+/**
+ * Request which will be forwarded to native broker by the browser extension
+ */
+export type NativeExtensionRequestBody = {
+    method: NativeExtensionMethod;
+    request?: PlatformAuthRequest;
+};
+/**
+ * Browser extension request
+ */
+export type NativeExtensionRequest = {
+    channel: string;
+    responseId: string;
+    extensionId?: string;
+    body: NativeExtensionRequestBody;
+};
+export type PlatformDOMTokenRequest = {
+    brokerId: string;
+    accountId?: string;
+    clientId: string;
+    authority: string;
+    scope: string;
+    redirectUri: string;
+    correlationId: string;
+    isSecurityTokenService: boolean;
+    state?: string;
+    extraParameters?: DOMExtraParameters;
+    embeddedClientId?: string;
+    storeInCache?: StoreInCache;
+};
+export type DOMExtraParameters = StringDict & {
+    prompt?: string;
+    nonce?: string;
+    claims?: string;
+    loginHint?: string;
+    instanceAware?: string;
+    windowTitleSubstring?: string;
+    extendedExpiryToken?: string;
+    reqCnf?: string;
+    keyId?: string;
+    tokenType?: string;
+    shrClaims?: string;
+    shrNonce?: string;
+    resourceRequestMethod?: string;
+    resourceRequestUri?: string;
+    signPopToken?: string;
+};
+//# sourceMappingURL=PlatformAuthRequest.d.ts.map

package/dist/custom-auth-path/broker/nativeBroker/PlatformAuthRequest.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"PlatformAuthRequest.d.ts","sourceRoot":"","sources":["../../../../src/broker/nativeBroker/PlatformAuthRequest.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,qBAAqB,EAAE,MAAM,iCAAiC,CAAC;AACxE,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,4BAA4B,CAAC;AAEtE;;GAEG;AACH,MAAM,MAAM,mBAAmB,GAAG;IAC9B,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,EAAE,MAAM,CAAC;IACd,aAAa,EAAE,MAAM,CAAC;IACtB,oBAAoB,EAAE,MAAM,CAAC;IAC7B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,mBAAmB,CAAC,EAAE,OAAO,CAAC;IAC9B,eAAe,CAAC,EAAE,UAAU,CAAC;IAC7B,YAAY,CAAC,EAAE,YAAY,CAAC;IAC5B,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC7B,CAAC;AAEF;;GAEG;AACH,MAAM,MAAM,0BAA0B,GAAG;IACrC,MAAM,EAAE,qBAAqB,CAAC;IAC9B,OAAO,CAAC,EAAE,mBAAmB,CAAC;CACjC,CAAC;AAEF;;GAEG;AACH,MAAM,MAAM,sBAAsB,GAAG;IACjC,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,IAAI,EAAE,0BAA0B,CAAC;CACpC,CAAC;AAEF,MAAM,MAAM,uBAAuB,GAAG;IAClC,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,MAAM,CAAC;IACtB,sBAAsB,EAAE,OAAO,CAAC;IAChC,KAAK,CAAC,EAAE,MAAM,CAAC;IAOf,eAAe,CAAC,EAAE,kBAAkB,CAAC;IACrC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,YAAY,CAAC,EAAE,YAAY,CAAC;CAC/B,CAAC;AAEF,MAAM,MAAM,kBAAkB,GAAG,UAAU,GAAG;IAC1C,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,YAAY,CAAC,EAAE,MAAM,CAAC;CACzB,CAAC"}

package/dist/custom-auth-path/broker/nativeBroker/PlatformAuthResponse.d.ts

@@ -0,0 +1,71 @@
+/**
+ * Account properties returned by Native Platform e.g. WAM
+ */
+export type NativeAccountInfo = {
+    id: string;
+    properties: object;
+    userName: string;
+};
+/**
+ * Token response returned by Native Platform
+ */
+export type PlatformAuthResponse = {
+    access_token: string;
+    account: NativeAccountInfo;
+    client_info: string;
+    expires_in: number;
+    id_token: string;
+    properties: NativeResponseProperties;
+    scope: string;
+    state: string;
+    shr?: string;
+    extendedLifetimeToken?: boolean;
+};
+/**
+ * Properties returned under "properties" of the NativeResponse
+ */
+export type NativeResponseProperties = {
+    MATS?: string;
+};
+/**
+ * The native token broker can optionally include additional information about operations it performs. If that data is returned, MSAL.js will include the following properties in the telemetry it collects.
+ */
+export type MATS = {
+    is_cached?: number;
+    broker_version?: string;
+    account_join_on_start?: string;
+    account_join_on_end?: string;
+    device_join?: string;
+    prompt_behavior?: string;
+    api_error_code?: number;
+    ui_visible?: boolean;
+    silent_code?: number;
+    silent_bi_sub_code?: number;
+    silent_message?: string;
+    silent_status?: number;
+    http_status?: number;
+    http_event_count?: number;
+};
+export type PlatformDOMTokenResponse = {
+    isSuccess: boolean;
+    state?: string;
+    accessToken: string;
+    expiresIn: number;
+    account: NativeAccountInfo;
+    clientInfo: string;
+    idToken: string;
+    scopes: string;
+    proofOfPossessionPayload?: string;
+    extendedLifetimeToken?: boolean;
+    error: ErrorResult;
+    properties?: Record<string, string>;
+};
+export type ErrorResult = {
+    code: string;
+    description?: string;
+    errorCode: string;
+    protocolError?: string;
+    status: string;
+    properties?: object;
+};
+//# sourceMappingURL=PlatformAuthResponse.d.ts.map

package/dist/custom-auth-path/broker/nativeBroker/PlatformAuthResponse.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"PlatformAuthResponse.d.ts","sourceRoot":"","sources":["../../../../src/broker/nativeBroker/PlatformAuthResponse.ts"],"names":[],"mappings":"AAKA;;GAEG;AACH,MAAM,MAAM,iBAAiB,GAAG;IAC5B,EAAE,EAAE,MAAM,CAAC;IACX,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;CACpB,CAAC;AAEF;;GAEG;AACH,MAAM,MAAM,oBAAoB,GAAG;IAC/B,YAAY,EAAE,MAAM,CAAC;IACrB,OAAO,EAAE,iBAAiB,CAAC;IAC3B,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,wBAAwB,CAAC;IACrC,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,qBAAqB,CAAC,EAAE,OAAO,CAAC;CACnC,CAAC;AAEF;;GAEG;AACH,MAAM,MAAM,wBAAwB,GAAG;IACnC,IAAI,CAAC,EAAE,MAAM,CAAC;CACjB,CAAC;AAEF;;GAEG;AACH,MAAM,MAAM,IAAI,GAAG;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC7B,CAAC;AAEF,MAAM,MAAM,wBAAwB,GAAG;IACnC,SAAS,EAAE,OAAO,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,iBAAiB,CAAC;IAC3B,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,wBAAwB,CAAC,EAAE,MAAM,CAAC;IAClC,qBAAqB,CAAC,EAAE,OAAO,CAAC;IAChC,KAAK,EAAE,WAAW,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACvC,CAAC;AAEF,MAAM,MAAM,WAAW,GAAG;IACtB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,CAAC,EAAE,MAAM,CAAC;CACvB,CAAC"}

package/dist/custom-auth-path/cache/AccountManager.d.ts

@@ -0,0 +1,49 @@
+import { AccountInfo, AccountFilter, Logger } from "@azure/msal-common/browser";
+import { BrowserCacheManager } from "./BrowserCacheManager.js";
+/**
+ * Returns all the accounts in the cache that match the optional filter. If no filter is provided, all accounts are returned.
+ * @param accountFilter - (Optional) filter to narrow down the accounts returned
+ * @returns Array of AccountInfo objects in cache
+ */
+export declare function getAllAccounts(logger: Logger, browserStorage: BrowserCacheManager, isInBrowser: boolean, correlationId: string, accountFilter?: AccountFilter): AccountInfo[];
+/**
+ * Returns the first account found in the cache that matches the account filter passed in.
+ * @param accountFilter
+ * @returns The first account found in the cache matching the provided filter or null if no account could be found.
+ */
+export declare function getAccount(accountFilter: AccountFilter, logger: Logger, browserStorage: BrowserCacheManager, correlationId: string): AccountInfo | null;
+/**
+ * Returns the signed in account matching username.
+ * (the account object is created at the time of successful login)
+ * or null when no matching account is found.
+ * This API is provided for convenience but getAccountById should be used for best reliability
+ * @param username
+ * @returns The account object stored in MSAL
+ */
+export declare function getAccountByUsername(username: string, logger: Logger, browserStorage: BrowserCacheManager, correlationId: string): AccountInfo | null;
+/**
+ * Returns the signed in account matching homeAccountId.
+ * (the account object is created at the time of successful login)
+ * or null when no matching account is found
+ * @param homeAccountId
+ * @returns The account object stored in MSAL
+ */
+export declare function getAccountByHomeId(homeAccountId: string, logger: Logger, browserStorage: BrowserCacheManager, correlationId: string): AccountInfo | null;
+/**
+ * Returns the signed in account matching localAccountId.
+ * (the account object is created at the time of successful login)
+ * or null when no matching account is found
+ * @param localAccountId
+ * @returns The account object stored in MSAL
+ */
+export declare function getAccountByLocalId(localAccountId: string, logger: Logger, browserStorage: BrowserCacheManager, correlationId: string): AccountInfo | null;
+/**
+ * Sets the account to use as the active account. If no account is passed to the acquireToken APIs, then MSAL will use this active account.
+ * @param account
+ */
+export declare function setActiveAccount(account: AccountInfo | null, browserStorage: BrowserCacheManager, correlationId: string): void;
+/**
+ * Gets the currently active account
+ */
+export declare function getActiveAccount(browserStorage: BrowserCacheManager, correlationId: string): AccountInfo | null;
+//# sourceMappingURL=AccountManager.d.ts.map

package/dist/custom-auth-path/cache/AccountManager.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"AccountManager.d.ts","sourceRoot":"","sources":["../../../src/cache/AccountManager.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,EAAE,MAAM,4BAA4B,CAAC;AAChF,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAE/D;;;;GAIG;AACH,wBAAgB,cAAc,CAC1B,MAAM,EAAE,MAAM,EACd,cAAc,EAAE,mBAAmB,EACnC,WAAW,EAAE,OAAO,EACpB,aAAa,EAAE,MAAM,EACrB,aAAa,CAAC,EAAE,aAAa,GAC9B,WAAW,EAAE,CAKf;AAED;;;;GAIG;AACH,wBAAgB,UAAU,CACtB,aAAa,EAAE,aAAa,EAC5B,MAAM,EAAE,MAAM,EACd,cAAc,EAAE,mBAAmB,EACnC,aAAa,EAAE,MAAM,GACtB,WAAW,GAAG,IAAI,CAqBpB;AAED;;;;;;;GAOG;AACH,wBAAgB,oBAAoB,CAChC,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,MAAM,EACd,cAAc,EAAE,mBAAmB,EACnC,aAAa,EAAE,MAAM,GACtB,WAAW,GAAG,IAAI,CA2BpB;AAED;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAC9B,aAAa,EAAE,MAAM,EACrB,MAAM,EAAE,MAAM,EACd,cAAc,EAAE,mBAAmB,EACnC,aAAa,EAAE,MAAM,GACtB,WAAW,GAAG,IAAI,CA2BpB;AAED;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CAC/B,cAAc,EAAE,MAAM,EACtB,MAAM,EAAE,MAAM,EACd,cAAc,EAAE,mBAAmB,EACnC,aAAa,EAAE,MAAM,GACtB,WAAW,GAAG,IAAI,CA2BpB;AAED;;;GAGG;AACH,wBAAgB,gBAAgB,CAC5B,OAAO,EAAE,WAAW,GAAG,IAAI,EAC3B,cAAc,EAAE,mBAAmB,EACnC,aAAa,EAAE,MAAM,GACtB,IAAI,CAEN;AAED;;GAEG;AACH,wBAAgB,gBAAgB,CAC5B,cAAc,EAAE,mBAAmB,EACnC,aAAa,EAAE,MAAM,GACtB,WAAW,GAAG,IAAI,CAEpB"}