@azure/msal-browser 4.16.0 → 4.18.0

package/lib/types/custom_auth/CustomAuthActionInputs.d.ts

@@ -7,6 +7,7 @@ export type SignInInputs = CustomAuthActionInputs & {
     username: string;
     password?: string;
     scopes?: Array<string>;
+    claims?: string;
 };
 export type SignUpInputs = CustomAuthActionInputs & {
     username: string;
@@ -19,8 +20,10 @@ export type ResetPasswordInputs = CustomAuthActionInputs & {
 export type AccessTokenRetrievalInputs = {
     forceRefresh: boolean;
     scopes?: Array<string>;
+    claims?: string;
 };
 export type SignInWithContinuationTokenInputs = {
     scopes?: Array<string>;
+    claims?: string;
 };
 //# sourceMappingURL=CustomAuthActionInputs.d.ts.map

package/lib/types/custom_auth/CustomAuthActionInputs.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"CustomAuthActionInputs.d.ts","sourceRoot":"","sources":["../../../src/custom_auth/CustomAuthActionInputs.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AAEnE,MAAM,MAAM,sBAAsB,GAAG;IACjC,aAAa,CAAC,EAAE,MAAM,CAAC;CAC1B,CAAC;AAEF,MAAM,MAAM,sBAAsB,GAAG,sBAAsB,CAAC;AAE5D,MAAM,MAAM,YAAY,GAAG,sBAAsB,GAAG;IAChD,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;CAC1B,CAAC;AAEF,MAAM,MAAM,YAAY,GAAG,sBAAsB,GAAG;IAChD,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,qBAAqB,CAAC;CACtC,CAAC;AAEF,MAAM,MAAM,mBAAmB,GAAG,sBAAsB,GAAG;IACvD,QAAQ,EAAE,MAAM,CAAC;CACpB,CAAC;AAEF,MAAM,MAAM,0BAA0B,GAAG;IACrC,YAAY,EAAE,OAAO,CAAC;IACtB,MAAM,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;CAC1B,CAAC;AAEF,MAAM,MAAM,iCAAiC,GAAG;IAC5C,MAAM,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;CAC1B,CAAC"}
+{"version":3,"file":"CustomAuthActionInputs.d.ts","sourceRoot":"","sources":["../../../src/custom_auth/CustomAuthActionInputs.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AAEnE,MAAM,MAAM,sBAAsB,GAAG;IACjC,aAAa,CAAC,EAAE,MAAM,CAAC;CAC1B,CAAC;AAEF,MAAM,MAAM,sBAAsB,GAAG,sBAAsB,CAAC;AAE5D,MAAM,MAAM,YAAY,GAAG,sBAAsB,GAAG;IAChD,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IACvB,MAAM,CAAC,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF,MAAM,MAAM,YAAY,GAAG,sBAAsB,GAAG;IAChD,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,qBAAqB,CAAC;CACtC,CAAC;AAEF,MAAM,MAAM,mBAAmB,GAAG,sBAAsB,GAAG;IACvD,QAAQ,EAAE,MAAM,CAAC;CACpB,CAAC;AAEF,MAAM,MAAM,0BAA0B,GAAG;IACrC,YAAY,EAAE,OAAO,CAAC;IACtB,MAAM,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IACvB,MAAM,CAAC,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF,MAAM,MAAM,iCAAiC,GAAG;IAC5C,MAAM,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IACvB,MAAM,CAAC,EAAE,MAAM,CAAC;CACnB,CAAC"}

package/lib/types/custom_auth/CustomAuthConstants.d.ts

@@ -17,7 +17,7 @@ export declare const HttpHeaderKeys: {
 };
 export declare const DefaultPackageInfo: {
     readonly SKU: "msal.browser";
-    readonly VERSION: "4.16.0";
+    readonly VERSION: "4.18.0";
     readonly OS: "";
     readonly CPU: "";
 };

package/lib/types/custom_auth/controller/CustomAuthStandardController.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"CustomAuthStandardController.d.ts","sourceRoot":"","sources":["../../../../src/custom_auth/controller/CustomAuthStandardController.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,gBAAgB,EAAE,MAAM,qDAAqD,CAAC;AACvF,OAAO,EAAE,YAAY,EAAE,MAAM,6CAA6C,CAAC;AAC3E,OAAO,EAAE,YAAY,EAAE,MAAM,6CAA6C,CAAC;AAM3E,OAAO,EACH,sBAAsB,EACtB,YAAY,EACZ,YAAY,EACZ,mBAAmB,EAEtB,MAAM,8BAA8B,CAAC;AAEtC,OAAO,EAAE,0BAA0B,EAAE,MAAM,oDAAoD,CAAC;AAChG,OAAO,EAAE,6BAA6B,EAAE,MAAM,oCAAoC,CAAC;AAGnF,OAAO,EAAE,wBAAwB,EAAE,MAAM,gEAAgE,CAAC;AAa1G,OAAO,EAAE,oBAAoB,EAAE,MAAM,gEAAgE,CAAC;AAkBtG,OAAO,EAAE,kBAAkB,EAAE,MAAM,yCAAyC,CAAC;AAK7E,qBAAa,4BACT,SAAQ,kBACR,YAAW,6BAA6B;IAExC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAe;IAC5C,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAe;IAC5C,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAsB;IAC1D,OAAO,CAAC,QAAQ,CAAC,WAAW,CAA8B;IAC1D,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAiC;IAClE,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAsB;gBAQ5C,gBAAgB,EAAE,0BAA0B,EAC5C,mBAAmB,CAAC,EAAE,oBAAoB;IAyD9C,iBAAiB,CACb,sBAAsB,CAAC,EAAE,sBAAsB,GAChD,gBAAgB;IAqCb,MAAM,CAAC,YAAY,EAAE,YAAY,GAAG,OAAO,CAAC,YAAY,CAAC;IAsJzD,MAAM,CAAC,YAAY,EAAE,YAAY,GAAG,OAAO,CAAC,YAAY,CAAC;IA8GzD,aAAa,CACf,mBAAmB,EAAE,mBAAmB,GACzC,OAAO,CAAC,wBAAwB,CAAC;IAoDpC,OAAO,CAAC,gBAAgB;IAQxB,OAAO,CAAC,qBAAqB;CAWhC"}
+{"version":3,"file":"CustomAuthStandardController.d.ts","sourceRoot":"","sources":["../../../../src/custom_auth/controller/CustomAuthStandardController.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,gBAAgB,EAAE,MAAM,qDAAqD,CAAC;AACvF,OAAO,EAAE,YAAY,EAAE,MAAM,6CAA6C,CAAC;AAC3E,OAAO,EAAE,YAAY,EAAE,MAAM,6CAA6C,CAAC;AAM3E,OAAO,EACH,sBAAsB,EACtB,YAAY,EACZ,YAAY,EACZ,mBAAmB,EAEtB,MAAM,8BAA8B,CAAC;AAEtC,OAAO,EAAE,0BAA0B,EAAE,MAAM,oDAAoD,CAAC;AAChG,OAAO,EAAE,6BAA6B,EAAE,MAAM,oCAAoC,CAAC;AAGnF,OAAO,EAAE,wBAAwB,EAAE,MAAM,gEAAgE,CAAC;AAa1G,OAAO,EAAE,oBAAoB,EAAE,MAAM,gEAAgE,CAAC;AAetG,OAAO,EAAE,kBAAkB,EAAE,MAAM,yCAAyC,CAAC;AAK7E,qBAAa,4BACT,SAAQ,kBACR,YAAW,6BAA6B;IAExC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAe;IAC5C,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAe;IAC5C,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAsB;IAC1D,OAAO,CAAC,QAAQ,CAAC,WAAW,CAA8B;IAC1D,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAiC;IAClE,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAsB;gBAQ5C,gBAAgB,EAAE,0BAA0B,EAC5C,mBAAmB,CAAC,EAAE,oBAAoB;IAyD9C,iBAAiB,CACb,sBAAsB,CAAC,EAAE,sBAAsB,GAChD,gBAAgB;IAqCb,MAAM,CAAC,YAAY,EAAE,YAAY,GAAG,OAAO,CAAC,YAAY,CAAC;IAiKzD,MAAM,CAAC,YAAY,EAAE,YAAY,GAAG,OAAO,CAAC,YAAY,CAAC;IA8GzD,aAAa,CACf,mBAAmB,EAAE,mBAAmB,GACzC,OAAO,CAAC,wBAAwB,CAAC;IAoDpC,OAAO,CAAC,gBAAgB;IAQxB,OAAO,CAAC,qBAAqB;CAWhC"}

package/lib/types/custom_auth/core/auth_flow/AuthFlowErrorBase.d.ts

@@ -17,6 +17,11 @@ export declare abstract class AuthFlowErrorBase {
     protected isAttributeValidationFailedError(): boolean;
     protected isNoCachedAccountFoundError(): boolean;
     protected isTokenExpiredError(): boolean;
+    /**
+     * @todo verify the password change required error can be detected once the MFA is in place.
+     * This error will be raised during signin and refresh tokens when calling /token endpoint.
+     */
+    protected isPasswordResetRequiredError(): boolean;
 }
 export declare abstract class AuthActionErrorBase extends AuthFlowErrorBase {
     /**

package/lib/types/custom_auth/core/auth_flow/AuthFlowErrorBase.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"AuthFlowErrorBase.d.ts","sourceRoot":"","sources":["../../../../../src/custom_auth/core/auth_flow/AuthFlowErrorBase.ts"],"names":[],"mappings":"AASA,OAAO,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAC;AAK9D;;GAEG;AACH,8BAAsB,iBAAiB;IAChB,SAAS,EAAE,eAAe;gBAA1B,SAAS,EAAE,eAAe;IAE7C,SAAS,CAAC,mBAAmB,IAAI,OAAO;IAIxC,SAAS,CAAC,kBAAkB,IAAI,OAAO;IAYvC,SAAS,CAAC,+BAA+B,IAAI,OAAO;IAYpD,SAAS,CAAC,wBAAwB,IAAI,OAAO;IAa7C,SAAS,CAAC,kBAAkB,IAAI,OAAO;IAWvC,SAAS,CAAC,eAAe,IAAI,OAAO;IAIpC,SAAS,CAAC,yBAAyB,IAAI,OAAO;IAiB9C,SAAS,CAAC,wBAAwB,IAAI,OAAO;IAO7C,SAAS,CAAC,wBAAwB,IAAI,OAAO;IAO7C,SAAS,CAAC,gCAAgC,IAAI,OAAO;IAYrD,SAAS,CAAC,2BAA2B,IAAI,OAAO;IAIhD,SAAS,CAAC,mBAAmB,IAAI,OAAO;CAM3C;AAED,8BAAsB,mBAAoB,SAAQ,iBAAiB;IAC/D;;;OAGG;IACH,cAAc,IAAI,OAAO;CAG5B"}
+{"version":3,"file":"AuthFlowErrorBase.d.ts","sourceRoot":"","sources":["../../../../../src/custom_auth/core/auth_flow/AuthFlowErrorBase.ts"],"names":[],"mappings":"AASA,OAAO,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAC;AAK9D;;GAEG;AACH,8BAAsB,iBAAiB;IAChB,SAAS,EAAE,eAAe;gBAA1B,SAAS,EAAE,eAAe;IAE7C,SAAS,CAAC,mBAAmB,IAAI,OAAO;IAIxC,SAAS,CAAC,kBAAkB,IAAI,OAAO;IAYvC,SAAS,CAAC,+BAA+B,IAAI,OAAO;IAYpD,SAAS,CAAC,wBAAwB,IAAI,OAAO;IAa7C,SAAS,CAAC,kBAAkB,IAAI,OAAO;IAWvC,SAAS,CAAC,eAAe,IAAI,OAAO;IAIpC,SAAS,CAAC,yBAAyB,IAAI,OAAO;IAiB9C,SAAS,CAAC,wBAAwB,IAAI,OAAO;IAO7C,SAAS,CAAC,wBAAwB,IAAI,OAAO;IAO7C,SAAS,CAAC,gCAAgC,IAAI,OAAO;IAYrD,SAAS,CAAC,2BAA2B,IAAI,OAAO;IAIhD,SAAS,CAAC,mBAAmB,IAAI,OAAO;IAOxC;;;OAGG;IACH,SAAS,CAAC,4BAA4B,IAAI,OAAO;CAOpD;AAED,8BAAsB,mBAAoB,SAAQ,iBAAiB;IAC/D;;;OAGG;IACH,cAAc,IAAI,OAAO;CAG5B"}

package/lib/types/custom_auth/core/network_client/custom_auth_api/SignInApiClient.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"SignInApiClient.d.ts","sourceRoot":"","sources":["../../../../../../src/custom_auth/core/network_client/custom_auth_api/SignInApiClient.ts"],"names":[],"mappings":"AAQA,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAGnD,OAAO,EACH,sBAAsB,EACtB,8BAA8B,EAC9B,qBAAqB,EACrB,qBAAqB,EACrB,0BAA0B,EAC7B,MAAM,4BAA4B,CAAC;AACpC,OAAO,EACH,uBAAuB,EACvB,sBAAsB,EACtB,mBAAmB,EACtB,MAAM,6BAA6B,CAAC;AAErC,qBAAa,eAAgB,SAAQ,aAAa;IAC9C;;;;OAIG;IACG,QAAQ,CACV,MAAM,EAAE,qBAAqB,GAC9B,OAAO,CAAC,sBAAsB,CAAC;IAmBlC;;;;OAIG;IACG,gBAAgB,CAClB,MAAM,EAAE,sBAAsB,GAC/B,OAAO,CAAC,uBAAuB,CAAC;IAmBnC;;;;;OAKG;IACG,yBAAyB,CAC3B,MAAM,EAAE,0BAA0B,GACnC,OAAO,CAAC,mBAAmB,CAAC;IAazB,oBAAoB,CACtB,MAAM,EAAE,qBAAqB,GAC9B,OAAO,CAAC,mBAAmB,CAAC;IAazB,iCAAiC,CACnC,MAAM,EAAE,8BAA8B,GACvC,OAAO,CAAC,mBAAmB,CAAC;YAcjB,aAAa;IAoB3B,OAAO,CAAC,MAAM,CAAC,0BAA0B;CAoC5C"}
+{"version":3,"file":"SignInApiClient.d.ts","sourceRoot":"","sources":["../../../../../../src/custom_auth/core/network_client/custom_auth_api/SignInApiClient.ts"],"names":[],"mappings":"AAQA,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAGnD,OAAO,EACH,sBAAsB,EACtB,8BAA8B,EAC9B,qBAAqB,EACrB,qBAAqB,EACrB,0BAA0B,EAC7B,MAAM,4BAA4B,CAAC;AACpC,OAAO,EACH,uBAAuB,EACvB,sBAAsB,EACtB,mBAAmB,EACtB,MAAM,6BAA6B,CAAC;AAErC,qBAAa,eAAgB,SAAQ,aAAa;IAC9C;;;;OAIG;IACG,QAAQ,CACV,MAAM,EAAE,qBAAqB,GAC9B,OAAO,CAAC,sBAAsB,CAAC;IAmBlC;;;;OAIG;IACG,gBAAgB,CAClB,MAAM,EAAE,sBAAsB,GAC/B,OAAO,CAAC,uBAAuB,CAAC;IAmBnC;;;;;OAKG;IACG,yBAAyB,CAC3B,MAAM,EAAE,0BAA0B,GACnC,OAAO,CAAC,mBAAmB,CAAC;IAczB,oBAAoB,CACtB,MAAM,EAAE,qBAAqB,GAC9B,OAAO,CAAC,mBAAmB,CAAC;IAczB,iCAAiC,CACnC,MAAM,EAAE,8BAA8B,GACvC,OAAO,CAAC,mBAAmB,CAAC;YAejB,aAAa;IAoB3B,OAAO,CAAC,MAAM,CAAC,0BAA0B;CAoC5C"}

package/lib/types/custom_auth/core/network_client/custom_auth_api/types/ApiRequestTypes.d.ts

@@ -10,6 +10,7 @@ export interface SignInChallengeRequest extends ApiRequestBase {
 interface SignInTokenRequestBase extends ApiRequestBase {
     continuation_token: string;
     scope: string;
+    claims?: string;
 }
 export interface SignInPasswordTokenRequest extends SignInTokenRequestBase {
     password: string;

package/lib/types/custom_auth/core/network_client/custom_auth_api/types/ApiRequestTypes.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ApiRequestTypes.d.ts","sourceRoot":"","sources":["../../../../../../../src/custom_auth/core/network_client/custom_auth_api/types/ApiRequestTypes.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAGnD,MAAM,WAAW,qBAAsB,SAAQ,cAAc;IACzD,cAAc,EAAE,MAAM,CAAC;IACvB,QAAQ,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,sBAAuB,SAAQ,cAAc;IAC1D,cAAc,EAAE,MAAM,CAAC;IACvB,kBAAkB,EAAE,MAAM,CAAC;CAC9B;AAED,UAAU,sBAAuB,SAAQ,cAAc;IACnD,kBAAkB,EAAE,MAAM,CAAC;IAC3B,KAAK,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,0BAA2B,SAAQ,sBAAsB;IACtE,QAAQ,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,qBAAsB,SAAQ,sBAAsB;IACjE,GAAG,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,8BAA+B,SAAQ,sBAAsB;IAC1E,QAAQ,EAAE,MAAM,CAAC;CACpB;AAGD,MAAM,WAAW,kBAAmB,SAAQ,cAAc;IACtD,QAAQ,EAAE,MAAM,CAAC;IACjB,cAAc,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACvC;AAED,MAAM,WAAW,sBAAuB,SAAQ,cAAc;IAC1D,kBAAkB,EAAE,MAAM,CAAC;IAC3B,cAAc,EAAE,MAAM,CAAC;CAC1B;AAED,UAAU,yBAA0B,SAAQ,cAAc;IACtD,kBAAkB,EAAE,MAAM,CAAC;CAC9B;AAED,MAAM,WAAW,4BACb,SAAQ,yBAAyB;IACjC,GAAG,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,iCACb,SAAQ,yBAAyB;IACjC,QAAQ,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,mCACb,SAAQ,yBAAyB;IACjC,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACtC;AAGD,MAAM,WAAW,yBAA0B,SAAQ,cAAc;IAC7D,cAAc,EAAE,MAAM,CAAC;IACvB,QAAQ,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,6BAA8B,SAAQ,cAAc;IACjE,cAAc,EAAE,MAAM,CAAC;IACvB,kBAAkB,EAAE,MAAM,CAAC;CAC9B;AAED,MAAM,WAAW,4BAA6B,SAAQ,cAAc;IAChE,kBAAkB,EAAE,MAAM,CAAC;IAC3B,GAAG,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,0BAA2B,SAAQ,cAAc;IAC9D,kBAAkB,EAAE,MAAM,CAAC;IAC3B,YAAY,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,kCAAmC,SAAQ,cAAc;IACtE,kBAAkB,EAAE,MAAM,CAAC;CAC9B"}
+{"version":3,"file":"ApiRequestTypes.d.ts","sourceRoot":"","sources":["../../../../../../../src/custom_auth/core/network_client/custom_auth_api/types/ApiRequestTypes.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAGnD,MAAM,WAAW,qBAAsB,SAAQ,cAAc;IACzD,cAAc,EAAE,MAAM,CAAC;IACvB,QAAQ,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,sBAAuB,SAAQ,cAAc;IAC1D,cAAc,EAAE,MAAM,CAAC;IACvB,kBAAkB,EAAE,MAAM,CAAC;CAC9B;AAED,UAAU,sBAAuB,SAAQ,cAAc;IACnD,kBAAkB,EAAE,MAAM,CAAC;IAC3B,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,0BAA2B,SAAQ,sBAAsB;IACtE,QAAQ,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,qBAAsB,SAAQ,sBAAsB;IACjE,GAAG,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,8BAA+B,SAAQ,sBAAsB;IAC1E,QAAQ,EAAE,MAAM,CAAC;CACpB;AAGD,MAAM,WAAW,kBAAmB,SAAQ,cAAc;IACtD,QAAQ,EAAE,MAAM,CAAC;IACjB,cAAc,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACvC;AAED,MAAM,WAAW,sBAAuB,SAAQ,cAAc;IAC1D,kBAAkB,EAAE,MAAM,CAAC;IAC3B,cAAc,EAAE,MAAM,CAAC;CAC1B;AAED,UAAU,yBAA0B,SAAQ,cAAc;IACtD,kBAAkB,EAAE,MAAM,CAAC;CAC9B;AAED,MAAM,WAAW,4BACb,SAAQ,yBAAyB;IACjC,GAAG,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,iCACb,SAAQ,yBAAyB;IACjC,QAAQ,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,mCACb,SAAQ,yBAAyB;IACjC,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACtC;AAGD,MAAM,WAAW,yBAA0B,SAAQ,cAAc;IAC7D,cAAc,EAAE,MAAM,CAAC;IACvB,QAAQ,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,6BAA8B,SAAQ,cAAc;IACjE,cAAc,EAAE,MAAM,CAAC;IACvB,kBAAkB,EAAE,MAAM,CAAC;CAC9B;AAED,MAAM,WAAW,4BAA6B,SAAQ,cAAc;IAChE,kBAAkB,EAAE,MAAM,CAAC;IAC3B,GAAG,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,0BAA2B,SAAQ,cAAc;IAC9D,kBAAkB,EAAE,MAAM,CAAC;IAC3B,YAAY,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,kCAAmC,SAAQ,cAAc;IACtE,kBAAkB,EAAE,MAAM,CAAC;CAC9B"}

package/lib/types/custom_auth/core/utils/ArgumentValidator.d.ts

@@ -1,3 +1,4 @@
 export declare function ensureArgumentIsNotNullOrUndefined<T>(argName: string, argValue: T | undefined | null, correlationId?: string): asserts argValue is T;
 export declare function ensureArgumentIsNotEmptyString(argName: string, argValue: string | undefined, correlationId?: string): void;
+export declare function ensureArgumentIsJSONString(argName: string, argValue: string, correlationId?: string): void;
 //# sourceMappingURL=ArgumentValidator.d.ts.map

package/lib/types/custom_auth/core/utils/ArgumentValidator.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ArgumentValidator.d.ts","sourceRoot":"","sources":["../../../../../src/custom_auth/core/utils/ArgumentValidator.ts"],"names":[],"mappings":"AAOA,wBAAgB,kCAAkC,CAAC,CAAC,EAChD,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,CAAC,GAAG,SAAS,GAAG,IAAI,EAC9B,aAAa,CAAC,EAAE,MAAM,GACvB,OAAO,CAAC,QAAQ,IAAI,CAAC,CAIvB;AAED,wBAAgB,8BAA8B,CAC1C,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,MAAM,GAAG,SAAS,EAC5B,aAAa,CAAC,EAAE,MAAM,GACvB,IAAI,CAIN"}
+{"version":3,"file":"ArgumentValidator.d.ts","sourceRoot":"","sources":["../../../../../src/custom_auth/core/utils/ArgumentValidator.ts"],"names":[],"mappings":"AAOA,wBAAgB,kCAAkC,CAAC,CAAC,EAChD,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,CAAC,GAAG,SAAS,GAAG,IAAI,EAC9B,aAAa,CAAC,EAAE,MAAM,GACvB,OAAO,CAAC,QAAQ,IAAI,CAAC,CAIvB;AAED,wBAAgB,8BAA8B,CAC1C,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,MAAM,GAAG,SAAS,EAC5B,aAAa,CAAC,EAAE,MAAM,GACvB,IAAI,CAIN;AAED,wBAAgB,0BAA0B,CACtC,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,MAAM,EAChB,aAAa,CAAC,EAAE,MAAM,GACvB,IAAI,CAgBN"}

package/lib/types/custom_auth/get_account/auth_flow/CustomAuthAccountData.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"CustomAuthAccountData.d.ts","sourceRoot":"","sources":["../../../../../src/custom_auth/get_account/auth_flow/CustomAuthAccountData.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,8BAA8B,EAAE,MAAM,gDAAgD,CAAC;AAChG,OAAO,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAC;AAC1D,OAAO,EAAE,oBAAoB,EAAE,MAAM,kCAAkC,CAAC;AACxE,OAAO,EAAE,2BAA2B,EAAE,MAAM,sDAAsD,CAAC;AAGnG,OAAO,EAAE,0BAA0B,EAAE,MAAM,iCAAiC,CAAC;AAC7E,OAAO,EACH,WAAW,EAGX,MAAM,EACN,WAAW,EACd,MAAM,4BAA4B,CAAC;AAUpC,qBAAa,qBAAqB;IAE1B,OAAO,CAAC,QAAQ,CAAC,OAAO;IACxB,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,OAAO,CAAC,QAAQ,CAAC,WAAW;IAC5B,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,OAAO,CAAC,QAAQ,CAAC,aAAa;gBAJb,OAAO,EAAE,WAAW,EACpB,MAAM,EAAE,8BAA8B,EACtC,WAAW,EAAE,2BAA2B,EACxC,MAAM,EAAE,MAAM,EACd,aAAa,EAAE,MAAM;IAM1C;;;;;OAKG;IACG,OAAO,IAAI,OAAO,CAAC,aAAa,CAAC;IA8BvC,UAAU,IAAI,WAAW;IAIzB;;;;;OAKG;IACH,UAAU,IAAI,MAAM,GAAG,SAAS;IAIhC;;;OAGG;IACH,SAAS,IAAI,eAAe,GAAG,SAAS;IAIxC;;;;;;OAMG;IACG,cAAc,CAChB,0BAA0B,EAAE,0BAA0B,GACvD,OAAO,CAAC,oBAAoB,CAAC;IAkDhC,OAAO,CAAC,6BAA6B;CAuBxC;AAED,MAAM,MAAM,eAAe,GAAG,WAAW,GAAG;IACxC,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,MAAM,GAAG,MAAM,EAAE,GAAG,MAAM,GAAG,SAAS,GAAG,OAAO,CAAC;CAC5E,CAAC"}
+{"version":3,"file":"CustomAuthAccountData.d.ts","sourceRoot":"","sources":["../../../../../src/custom_auth/get_account/auth_flow/CustomAuthAccountData.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,8BAA8B,EAAE,MAAM,gDAAgD,CAAC;AAChG,OAAO,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAC;AAC1D,OAAO,EAAE,oBAAoB,EAAE,MAAM,kCAAkC,CAAC;AACxE,OAAO,EAAE,2BAA2B,EAAE,MAAM,sDAAsD,CAAC;AAGnG,OAAO,EAAE,0BAA0B,EAAE,MAAM,iCAAiC,CAAC;AAC7E,OAAO,EACH,WAAW,EAGX,MAAM,EACN,WAAW,EACd,MAAM,4BAA4B,CAAC;AAOpC,qBAAa,qBAAqB;IAE1B,OAAO,CAAC,QAAQ,CAAC,OAAO;IACxB,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,OAAO,CAAC,QAAQ,CAAC,WAAW;IAC5B,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,OAAO,CAAC,QAAQ,CAAC,aAAa;gBAJb,OAAO,EAAE,WAAW,EACpB,MAAM,EAAE,8BAA8B,EACtC,WAAW,EAAE,2BAA2B,EACxC,MAAM,EAAE,MAAM,EACd,aAAa,EAAE,MAAM;IAa1C;;;;;OAKG;IACG,OAAO,IAAI,OAAO,CAAC,aAAa,CAAC;IA8BvC,UAAU,IAAI,WAAW;IAIzB;;;;;OAKG;IACH,UAAU,IAAI,MAAM,GAAG,SAAS;IAIhC;;;OAGG;IACH,SAAS,IAAI,eAAe,GAAG,SAAS;IAIxC;;;;;;OAMG;IACG,cAAc,CAChB,0BAA0B,EAAE,0BAA0B,GACvD,OAAO,CAAC,oBAAoB,CAAC;IA2DhC,OAAO,CAAC,6BAA6B;CAyBxC;AAED,MAAM,MAAM,eAAe,GAAG,WAAW,GAAG;IACxC,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,MAAM,GAAG,MAAM,EAAE,GAAG,MAAM,GAAG,SAAS,GAAG,OAAO,CAAC;CAC5E,CAAC"}

package/lib/types/custom_auth/sign_in/auth_flow/error_type/SignInError.d.ts

@@ -15,6 +15,11 @@ export declare class SignInError extends AuthActionErrorBase {
      * @returns true if the error is due to the provided password being incorrect, false otherwise.
      */
     isPasswordIncorrect(): boolean;
+    /**
+     * Checks if the error is due to password reset being required.
+     * @returns true if the error is due to password reset being required, false otherwise.
+     */
+    isPasswordResetRequired(): boolean;
     /**
      * Checks if the error is due to the provided challenge type is not supported.
      * @returns {boolean} True if the error is due to the provided challenge type is not supported, false otherwise.

package/lib/types/custom_auth/sign_in/auth_flow/error_type/SignInError.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"SignInError.d.ts","sourceRoot":"","sources":["../../../../../../src/custom_auth/sign_in/auth_flow/error_type/SignInError.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,mBAAmB,EAAE,MAAM,8CAA8C,CAAC;AAGnF,qBAAa,WAAY,SAAQ,mBAAmB;IAChD;;;OAGG;IACH,cAAc,IAAI,OAAO;IAIzB;;;OAGG;IACH,iBAAiB,IAAI,OAAO;IAI5B;;;OAGG;IACH,mBAAmB,IAAI,OAAO;IAI9B;;;OAGG;IACH,0BAA0B,IAAI,OAAO;IAIrC;;;OAGG;IACH,kBAAkB,IAAI,OAAO;CAGhC;AAED,qBAAa,yBAA0B,SAAQ,mBAAmB;IAC9D;;;OAGG;IACH,iBAAiB,IAAI,OAAO;CAG/B;AAED,qBAAa,qBAAsB,SAAQ,mBAAmB;IAC1D;;;OAGG;IACH,aAAa,IAAI,OAAO;CAG3B;AAED,qBAAa,qBAAsB,SAAQ,mBAAmB;IAC1D;;;OAGG;IACH,kBAAkB,IAAI,OAAO;CAGhC"}
+{"version":3,"file":"SignInError.d.ts","sourceRoot":"","sources":["../../../../../../src/custom_auth/sign_in/auth_flow/error_type/SignInError.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,mBAAmB,EAAE,MAAM,8CAA8C,CAAC;AAGnF,qBAAa,WAAY,SAAQ,mBAAmB;IAChD;;;OAGG;IACH,cAAc,IAAI,OAAO;IAIzB;;;OAGG;IACH,iBAAiB,IAAI,OAAO;IAI5B;;;OAGG;IACH,mBAAmB,IAAI,OAAO;IAI9B;;;OAGG;IACH,uBAAuB,IAAI,OAAO;IAIlC;;;OAGG;IACH,0BAA0B,IAAI,OAAO;IAIrC;;;OAGG;IACH,kBAAkB,IAAI,OAAO;CAGhC;AAED,qBAAa,yBAA0B,SAAQ,mBAAmB;IAC9D;;;OAGG;IACH,iBAAiB,IAAI,OAAO;CAG/B;AAED,qBAAa,qBAAsB,SAAQ,mBAAmB;IAC1D;;;OAGG;IACH,aAAa,IAAI,OAAO;CAG3B;AAED,qBAAa,qBAAsB,SAAQ,mBAAmB;IAC1D;;;OAGG;IACH,kBAAkB,IAAI,OAAO;CAGhC"}

package/lib/types/custom_auth/sign_in/auth_flow/state/SignInCodeRequiredState.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"SignInCodeRequiredState.d.ts","sourceRoot":"","sources":["../../../../../../src/custom_auth/sign_in/auth_flow/state/SignInCodeRequiredState.ts"],"names":[],"mappings":"AAUA,OAAO,EAAE,sBAAsB,EAAE,MAAM,qCAAqC,CAAC;AAC7E,OAAO,EAAE,sBAAsB,EAAE,MAAM,qCAAqC,CAAC;AAC7E,OAAO,EAAE,iCAAiC,EAAE,MAAM,4BAA4B,CAAC;AAC/E,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAM/C,qBAAa,uBAAwB,SAAQ,WAAW,CAAC,iCAAiC,CAAC;IACvF;;;;;OAKG;IACG,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,sBAAsB,CAAC;IAoD/D;;;OAGG;IACG,UAAU,IAAI,OAAO,CAAC,sBAAsB,CAAC;IA2CnD;;;OAGG;IACH,aAAa,IAAI,MAAM;IAIvB;;;OAGG;IACH,SAAS,IAAI,MAAM,EAAE,GAAG,SAAS;CAGpC"}
+{"version":3,"file":"SignInCodeRequiredState.d.ts","sourceRoot":"","sources":["../../../../../../src/custom_auth/sign_in/auth_flow/state/SignInCodeRequiredState.ts"],"names":[],"mappings":"AAUA,OAAO,EAAE,sBAAsB,EAAE,MAAM,qCAAqC,CAAC;AAC7E,OAAO,EAAE,sBAAsB,EAAE,MAAM,qCAAqC,CAAC;AAC7E,OAAO,EAAE,iCAAiC,EAAE,MAAM,4BAA4B,CAAC;AAC/E,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAM/C,qBAAa,uBAAwB,SAAQ,WAAW,CAAC,iCAAiC,CAAC;IACvF;;;;;OAKG;IACG,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,sBAAsB,CAAC;IAqD/D;;;OAGG;IACG,UAAU,IAAI,OAAO,CAAC,sBAAsB,CAAC;IA2CnD;;;OAGG;IACH,aAAa,IAAI,MAAM;IAIvB;;;OAGG;IACH,SAAS,IAAI,MAAM,EAAE,GAAG,SAAS;CAGpC"}

package/lib/types/custom_auth/sign_in/auth_flow/state/SignInContinuationState.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"SignInContinuationState.d.ts","sourceRoot":"","sources":["../../../../../../src/custom_auth/sign_in/auth_flow/state/SignInContinuationState.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AACzD,OAAO,EAAE,iCAAiC,EAAE,MAAM,oCAAoC,CAAC;AACvF,OAAO,EAAE,iCAAiC,EAAE,MAAM,4BAA4B,CAAC;AAC/E,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAM/C,qBAAa,uBAAwB,SAAQ,WAAW,CAAC,iCAAiC,CAAC;IACvF;;;;OAIG;IACG,MAAM,CACR,iCAAiC,CAAC,EAAE,iCAAiC,GACtE,OAAO,CAAC,YAAY,CAAC;CA8C3B"}
+{"version":3,"file":"SignInContinuationState.d.ts","sourceRoot":"","sources":["../../../../../../src/custom_auth/sign_in/auth_flow/state/SignInContinuationState.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AACzD,OAAO,EAAE,iCAAiC,EAAE,MAAM,oCAAoC,CAAC;AACvF,OAAO,EAAE,iCAAiC,EAAE,MAAM,4BAA4B,CAAC;AAC/E,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAO/C,qBAAa,uBAAwB,SAAQ,WAAW,CAAC,iCAAiC,CAAC;IACvF;;;;OAIG;IACG,MAAM,CACR,iCAAiC,CAAC,EAAE,iCAAiC,GACtE,OAAO,CAAC,YAAY,CAAC;CAuD3B"}

package/lib/types/custom_auth/sign_in/auth_flow/state/SignInPasswordRequiredState.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"SignInPasswordRequiredState.d.ts","sourceRoot":"","sources":["../../../../../../src/custom_auth/sign_in/auth_flow/state/SignInPasswordRequiredState.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,0BAA0B,EAAE,MAAM,yCAAyC,CAAC;AAErF,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAC/C,OAAO,EAAE,qCAAqC,EAAE,MAAM,4BAA4B,CAAC;AAKnF,qBAAa,2BAA4B,SAAQ,WAAW,CAAC,qCAAqC,CAAC;IAC/F;;;;OAIG;IACG,cAAc,CAChB,QAAQ,EAAE,MAAM,GACjB,OAAO,CAAC,0BAA0B,CAAC;IAoDtC;;;OAGG;IACH,SAAS,IAAI,MAAM,EAAE,GAAG,SAAS;CAGpC"}
+{"version":3,"file":"SignInPasswordRequiredState.d.ts","sourceRoot":"","sources":["../../../../../../src/custom_auth/sign_in/auth_flow/state/SignInPasswordRequiredState.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,0BAA0B,EAAE,MAAM,yCAAyC,CAAC;AAErF,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAC/C,OAAO,EAAE,qCAAqC,EAAE,MAAM,4BAA4B,CAAC;AAKnF,qBAAa,2BAA4B,SAAQ,WAAW,CAAC,qCAAqC,CAAC;IAC/F;;;;OAIG;IACG,cAAc,CAChB,QAAQ,EAAE,MAAM,GACjB,OAAO,CAAC,0BAA0B,CAAC;IAqDtC;;;OAGG;IACH,SAAS,IAAI,MAAM,EAAE,GAAG,SAAS;CAGpC"}

package/lib/types/custom_auth/sign_in/auth_flow/state/SignInStateParameters.d.ts

@@ -6,6 +6,7 @@ export interface SignInStateParameters extends AuthFlowActionRequiredStateParame
     username: string;
     signInClient: SignInClient;
     cacheClient: CustomAuthSilentCacheClient;
+    claims?: string;
 }
 export interface SignInPasswordRequiredStateParameters extends SignInStateParameters {
     scopes?: string[];

package/lib/types/custom_auth/sign_in/auth_flow/state/SignInStateParameters.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"SignInStateParameters.d.ts","sourceRoot":"","sources":["../../../../../../src/custom_auth/sign_in/auth_flow/state/SignInStateParameters.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,qCAAqC,EAAE,MAAM,0CAA0C,CAAC;AACjG,OAAO,EAAE,2BAA2B,EAAE,MAAM,wEAAwE,CAAC;AACrH,OAAO,EAAE,YAAY,EAAE,MAAM,0CAA0C,CAAC;AACxE,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAE1D,MAAM,WAAW,qBACb,SAAQ,qCAAqC;IAC7C,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,YAAY,CAAC;IAC3B,WAAW,EAAE,2BAA2B,CAAC;CAC5C;AAED,MAAM,WAAW,qCACb,SAAQ,qBAAqB;IAC7B,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;CACrB;AAED,MAAM,WAAW,iCACb,SAAQ,qBAAqB;IAC7B,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;CACrB;AAED,MAAM,WAAW,iCACb,SAAQ,qBAAqB;IAC7B,cAAc,EAAE,kBAAkB,CAAC;CACtC"}
+{"version":3,"file":"SignInStateParameters.d.ts","sourceRoot":"","sources":["../../../../../../src/custom_auth/sign_in/auth_flow/state/SignInStateParameters.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,qCAAqC,EAAE,MAAM,0CAA0C,CAAC;AACjG,OAAO,EAAE,2BAA2B,EAAE,MAAM,wEAAwE,CAAC;AACrH,OAAO,EAAE,YAAY,EAAE,MAAM,0CAA0C,CAAC;AACxE,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAE1D,MAAM,WAAW,qBACb,SAAQ,qCAAqC;IAC7C,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,YAAY,CAAC;IAC3B,WAAW,EAAE,2BAA2B,CAAC;IACzC,MAAM,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,qCACb,SAAQ,qBAAqB;IAC7B,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;CACrB;AAED,MAAM,WAAW,iCACb,SAAQ,qBAAqB;IAC7B,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;CACrB;AAED,MAAM,WAAW,iCACb,SAAQ,qBAAqB;IAC7B,cAAc,EAAE,kBAAkB,CAAC;CACtC"}

package/lib/types/custom_auth/sign_in/interaction_client/SignInClient.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"SignInClient.d.ts","sourceRoot":"","sources":["../../../../../src/custom_auth/sign_in/interaction_client/SignInClient.ts"],"names":[],"mappings":"AAYA,OAAO,EAAE,+BAA+B,EAAE,MAAM,kEAAkE,CAAC;AACnH,OAAO,EACH,iBAAiB,EACjB,sBAAsB,EACtB,sBAAsB,EACtB,0BAA0B,EAC1B,6BAA6B,EAChC,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAKH,oBAAoB,EACpB,qBAAqB,EACrB,4BAA4B,EAC/B,MAAM,gCAAgC,CAAC;AAexC,OAAO,EAAE,oBAAoB,EAAE,MAAM,mEAAmE,CAAC;AACzG,OAAO,EAAE,mBAAmB,EAAE,MAAM,mCAAmC,CAAC;AACxE,OAAO,EACH,OAAO,EACP,kBAAkB,EAClB,MAAM,EAET,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAE,oBAAoB,EAAE,MAAM,kCAAkC,CAAC;AACxE,OAAO,EAAE,mBAAmB,EAAE,MAAM,uCAAuC,CAAC;AAC5E,OAAO,EAAE,YAAY,EAAE,MAAM,gCAAgC,CAAC;AAC9D,OAAO,EAAE,iBAAiB,EAAE,MAAM,0CAA0C,CAAC;AAI7E,qBAAa,YAAa,SAAQ,+BAA+B;IAC7D,OAAO,CAAC,QAAQ,CAAC,oBAAoB,CAAkB;gBAGnD,MAAM,EAAE,oBAAoB,EAC5B,WAAW,EAAE,mBAAmB,EAChC,aAAa,EAAE,OAAO,EACtB,MAAM,EAAE,MAAM,EACd,YAAY,EAAE,YAAY,EAC1B,gBAAgB,EAAE,iBAAiB,EACnC,iBAAiB,EAAE,kBAAkB,EACrC,mBAAmB,EAAE,oBAAoB,EACzC,mBAAmB,EAAE,mBAAmB;IAwB5C;;;;OAIG;IACG,KAAK,CACP,UAAU,EAAE,iBAAiB,GAC9B,OAAO,CAAC,4BAA4B,GAAG,oBAAoB,CAAC;IAoC/D;;;;OAIG;IACG,UAAU,CACZ,UAAU,EAAE,sBAAsB,GACnC,OAAO,CAAC,oBAAoB,CAAC;IA6BhC;;;;OAIG;IACG,UAAU,CACZ,UAAU,EAAE,sBAAsB,GACnC,OAAO,CAAC,qBAAqB,CAAC;IA4BjC;;;;OAIG;IACG,cAAc,CAChB,UAAU,EAAE,0BAA0B,GACvC,OAAO,CAAC,qBAAqB,CAAC;IA4BjC;;;;OAIG;IACG,2BAA2B,CAC7B,UAAU,EAAE,6BAA6B,GAC1C,OAAO,CAAC,qBAAqB,CAAC;YA2BnB,mBAAmB;YAyCnB,uBAAuB;IA6DrC,OAAO,CAAC,8BAA8B;CAgBzC"}
+{"version":3,"file":"SignInClient.d.ts","sourceRoot":"","sources":["../../../../../src/custom_auth/sign_in/interaction_client/SignInClient.ts"],"names":[],"mappings":"AAYA,OAAO,EAAE,+BAA+B,EAAE,MAAM,kEAAkE,CAAC;AACnH,OAAO,EACH,iBAAiB,EACjB,sBAAsB,EACtB,sBAAsB,EACtB,0BAA0B,EAC1B,6BAA6B,EAChC,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAKH,oBAAoB,EACpB,qBAAqB,EACrB,4BAA4B,EAC/B,MAAM,gCAAgC,CAAC;AAexC,OAAO,EAAE,oBAAoB,EAAE,MAAM,mEAAmE,CAAC;AACzG,OAAO,EAAE,mBAAmB,EAAE,MAAM,mCAAmC,CAAC;AACxE,OAAO,EACH,OAAO,EACP,kBAAkB,EAClB,MAAM,EAET,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAE,oBAAoB,EAAE,MAAM,kCAAkC,CAAC;AACxE,OAAO,EAAE,mBAAmB,EAAE,MAAM,uCAAuC,CAAC;AAC5E,OAAO,EAAE,YAAY,EAAE,MAAM,gCAAgC,CAAC;AAC9D,OAAO,EAAE,iBAAiB,EAAE,MAAM,0CAA0C,CAAC;AAI7E,qBAAa,YAAa,SAAQ,+BAA+B;IAC7D,OAAO,CAAC,QAAQ,CAAC,oBAAoB,CAAkB;gBAGnD,MAAM,EAAE,oBAAoB,EAC5B,WAAW,EAAE,mBAAmB,EAChC,aAAa,EAAE,OAAO,EACtB,MAAM,EAAE,MAAM,EACd,YAAY,EAAE,YAAY,EAC1B,gBAAgB,EAAE,iBAAiB,EACnC,iBAAiB,EAAE,kBAAkB,EACrC,mBAAmB,EAAE,oBAAoB,EACzC,mBAAmB,EAAE,mBAAmB;IAwB5C;;;;OAIG;IACG,KAAK,CACP,UAAU,EAAE,iBAAiB,GAC9B,OAAO,CAAC,4BAA4B,GAAG,oBAAoB,CAAC;IAoC/D;;;;OAIG;IACG,UAAU,CACZ,UAAU,EAAE,sBAAsB,GACnC,OAAO,CAAC,oBAAoB,CAAC;IA6BhC;;;;OAIG;IACG,UAAU,CACZ,UAAU,EAAE,sBAAsB,GACnC,OAAO,CAAC,qBAAqB,CAAC;IA+BjC;;;;OAIG;IACG,cAAc,CAChB,UAAU,EAAE,0BAA0B,GACvC,OAAO,CAAC,qBAAqB,CAAC;IA+BjC;;;;OAIG;IACG,2BAA2B,CAC7B,UAAU,EAAE,6BAA6B,GAC1C,OAAO,CAAC,qBAAqB,CAAC;YA8BnB,mBAAmB;YAyCnB,uBAAuB;IA6DrC,OAAO,CAAC,8BAA8B;CAgBzC"}

package/lib/types/custom_auth/sign_in/interaction_client/parameter/SignInParams.d.ts

@@ -15,15 +15,18 @@ export interface SignInSubmitCodeParams extends SignInParamsBase {
     continuationToken: string;
     code: string;
     scopes: Array<string>;
+    claims?: string;
 }
 export interface SignInSubmitPasswordParams extends SignInParamsBase {
     continuationToken: string;
     password: string;
     scopes: Array<string>;
+    claims?: string;
 }
 export interface SignInContinuationTokenParams extends SignInParamsBase {
     continuationToken: string;
     signInScenario: SignInScenarioType;
     scopes: Array<string>;
+    claims?: string;
 }
 //# sourceMappingURL=SignInParams.d.ts.map

package/lib/types/custom_auth/sign_in/interaction_client/parameter/SignInParams.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"SignInParams.d.ts","sourceRoot":"","sources":["../../../../../../src/custom_auth/sign_in/interaction_client/parameter/SignInParams.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,kBAAkB,EAAE,MAAM,mCAAmC,CAAC;AAEvE,MAAM,WAAW,gBAAgB;IAC7B,QAAQ,EAAE,MAAM,CAAC;IACjB,aAAa,EAAE,MAAM,CAAC;IACtB,aAAa,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IAC7B,QAAQ,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,sBAAuB,SAAQ,gBAAgB;IAC5D,iBAAiB,EAAE,MAAM,CAAC;CAC7B;AAED,MAAM,WAAW,iBAAkB,SAAQ,gBAAgB;IACvD,QAAQ,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,sBAAuB,SAAQ,gBAAgB;IAC5D,iBAAiB,EAAE,MAAM,CAAC;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;CACzB;AAED,MAAM,WAAW,0BAA2B,SAAQ,gBAAgB;IAChE,iBAAiB,EAAE,MAAM,CAAC;IAC1B,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;CACzB;AAED,MAAM,WAAW,6BAA8B,SAAQ,gBAAgB;IACnE,iBAAiB,EAAE,MAAM,CAAC;IAC1B,cAAc,EAAE,kBAAkB,CAAC;IACnC,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;CACzB"}
+{"version":3,"file":"SignInParams.d.ts","sourceRoot":"","sources":["../../../../../../src/custom_auth/sign_in/interaction_client/parameter/SignInParams.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,kBAAkB,EAAE,MAAM,mCAAmC,CAAC;AAEvE,MAAM,WAAW,gBAAgB;IAC7B,QAAQ,EAAE,MAAM,CAAC;IACjB,aAAa,EAAE,MAAM,CAAC;IACtB,aAAa,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IAC7B,QAAQ,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,sBAAuB,SAAQ,gBAAgB;IAC5D,iBAAiB,EAAE,MAAM,CAAC;CAC7B;AAED,MAAM,WAAW,iBAAkB,SAAQ,gBAAgB;IACvD,QAAQ,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,sBAAuB,SAAQ,gBAAgB;IAC5D,iBAAiB,EAAE,MAAM,CAAC;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IACtB,MAAM,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,0BAA2B,SAAQ,gBAAgB;IAChE,iBAAiB,EAAE,MAAM,CAAC;IAC1B,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IACtB,MAAM,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,6BAA8B,SAAQ,gBAAgB;IACnE,iBAAiB,EAAE,MAAM,CAAC;IAC1B,cAAc,EAAE,kBAAkB,CAAC;IACnC,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IACtB,MAAM,CAAC,EAAE,MAAM,CAAC;CACnB"}

package/lib/types/packageMetadata.d.ts

@@ -1,3 +1,3 @@
 export declare const name = "@azure/msal-browser";
-export declare const version = "4.16.0";
+export declare const version = "4.18.0";
 //# sourceMappingURL=packageMetadata.d.ts.map

package/package.json

@@ -10,7 +10,7 @@
     "type": "git",
     "url": "https://github.com/AzureAD/microsoft-authentication-library-for-js.git"
   },
-  "version": "4.16.0",
+  "version": "4.18.0",
   "description": "Microsoft Authentication Library for js",
   "keywords": [
     "implicit",

package/src/custom_auth/CustomAuthActionInputs.ts

@@ -15,6 +15,7 @@ export type SignInInputs = CustomAuthActionInputs & {
     username: string;
     password?: string;
     scopes?: Array<string>;
+    claims?: string;
 };
 
 export type SignUpInputs = CustomAuthActionInputs & {
@@ -30,8 +31,10 @@ export type ResetPasswordInputs = CustomAuthActionInputs & {
 export type AccessTokenRetrievalInputs = {
     forceRefresh: boolean;
     scopes?: Array<string>;
+    claims?: string;
 };
 
 export type SignInWithContinuationTokenInputs = {
     scopes?: Array<string>;
+    claims?: string;
 };

package/src/custom_auth/controller/CustomAuthStandardController.ts

@@ -41,10 +41,7 @@ import { CustomAuthApiClient } from "../core/network_client/custom_auth_api/Cust
 import { FetchHttpClient } from "../core/network_client/http_client/FetchHttpClient.js";
 import { ResetPasswordClient } from "../reset_password/interaction_client/ResetPasswordClient.js";
 import { NoCachedAccountFoundError } from "../core/error/NoCachedAccountFoundError.js";
-import {
-    ensureArgumentIsNotEmptyString,
-    ensureArgumentIsNotNullOrUndefined,
-} from "../core/utils/ArgumentValidator.js";
+import * as ArgumentValidator from "../core/utils/ArgumentValidator.js";
 import { UserAlreadySignedInError } from "../core/error/UserAlreadySignedInError.js";
 import { CustomAuthSilentCacheClient } from "../get_account/interaction_client/CustomAuthSilentCacheClient.js";
 import { UnsupportedEnvironmentError } from "../core/error/UnsupportedEnvironmentError.js";
@@ -177,19 +174,27 @@ export class CustomAuthStandardController
         const correlationId = this.getCorrelationId(signInInputs);
 
         try {
-            ensureArgumentIsNotNullOrUndefined(
+            ArgumentValidator.ensureArgumentIsNotNullOrUndefined(
                 "signInInputs",
                 signInInputs,
                 correlationId
             );
 
-            ensureArgumentIsNotEmptyString(
+            ArgumentValidator.ensureArgumentIsNotEmptyString(
                 "signInInputs.username",
                 signInInputs.username,
                 correlationId
             );
             this.ensureUserNotSignedIn(correlationId);
 
+            if (signInInputs.claims) {
+                ArgumentValidator.ensureArgumentIsJSONString(
+                    "signInInputs.claims",
+                    signInInputs.claims,
+                    correlationId
+                );
+            }
+
             // start the signin flow
             const signInStartParams: SignInStartParams = {
                 clientId: this.customAuthConfig.auth.clientId,
@@ -231,6 +236,7 @@ export class CustomAuthStandardController
                         username: signInInputs.username,
                         codeLength: startResult.codeLength,
                         scopes: signInInputs.scopes ?? [],
+                        claims: signInInputs.claims,
                     })
                 );
             } else if (
@@ -258,6 +264,7 @@ export class CustomAuthStandardController
                             cacheClient: this.cacheClient,
                             username: signInInputs.username,
                             scopes: signInInputs.scopes ?? [],
+                            claims: signInInputs.claims,
                         })
                     );
                 }
@@ -277,6 +284,7 @@ export class CustomAuthStandardController
                     continuationToken: startResult.continuationToken,
                     password: signInInputs.password,
                     username: signInInputs.username,
+                    claims: signInInputs.claims,
                 };
 
                 const completedResult = await this.signInClient.submitPassword(
@@ -327,13 +335,13 @@ export class CustomAuthStandardController
         const correlationId = this.getCorrelationId(signUpInputs);
 
         try {
-            ensureArgumentIsNotNullOrUndefined(
+            ArgumentValidator.ensureArgumentIsNotNullOrUndefined(
                 "signUpInputs",
                 signUpInputs,
                 correlationId
             );
 
-            ensureArgumentIsNotEmptyString(
+            ArgumentValidator.ensureArgumentIsNotEmptyString(
                 "signUpInputs.username",
                 signUpInputs.username,
                 correlationId
@@ -439,13 +447,13 @@ export class CustomAuthStandardController
         const correlationId = this.getCorrelationId(resetPasswordInputs);
 
         try {
-            ensureArgumentIsNotNullOrUndefined(
+            ArgumentValidator.ensureArgumentIsNotNullOrUndefined(
                 "resetPasswordInputs",
                 resetPasswordInputs,
                 correlationId
             );
 
-            ensureArgumentIsNotEmptyString(
+            ArgumentValidator.ensureArgumentIsNotEmptyString(
                 "resetPasswordInputs.username",
                 resetPasswordInputs.username,
                 correlationId

package/src/custom_auth/core/auth_flow/AuthFlowErrorBase.ts

@@ -127,6 +127,18 @@ export abstract class AuthFlowErrorBase {
             this.errorData.error === CustomAuthApiErrorCode.EXPIRED_TOKEN
         );
     }
+
+    /**
+     * @todo verify the password change required error can be detected once the MFA is in place.
+     * This error will be raised during signin and refresh tokens when calling /token endpoint.
+     */
+    protected isPasswordResetRequiredError(): boolean {
+        return (
+            this.errorData instanceof CustomAuthApiError &&
+            this.errorData.error === CustomAuthApiErrorCode.INVALID_REQUEST &&
+            this.errorData.errorCodes?.includes(50142) === true
+        );
+    }
 }
 
 export abstract class AuthActionErrorBase extends AuthFlowErrorBase {

package/src/custom_auth/core/network_client/custom_auth_api/SignInApiClient.ts

@@ -90,6 +90,7 @@ export class SignInApiClient extends BaseApiClient {
                 grant_type: GrantType.PASSWORD,
                 scope: params.scope,
                 password: params.password,
+                ...(params.claims && { claims: params.claims }),
             },
             params.telemetryManager,
             params.correlationId
@@ -105,6 +106,7 @@ export class SignInApiClient extends BaseApiClient {
                 scope: params.scope,
                 oob: params.oob,
                 grant_type: GrantType.OOB,
+                ...(params.claims && { claims: params.claims }),
             },
             params.telemetryManager,
             params.correlationId
@@ -121,6 +123,7 @@ export class SignInApiClient extends BaseApiClient {
                 scope: params.scope,
                 grant_type: GrantType.CONTINUATION_TOKEN,
                 client_info: true,
+                ...(params.claims && { claims: params.claims }),
             },
             params.telemetryManager,
             params.correlationId

package/src/custom_auth/core/network_client/custom_auth_api/types/ApiRequestTypes.ts

@@ -19,6 +19,7 @@ export interface SignInChallengeRequest extends ApiRequestBase {
 interface SignInTokenRequestBase extends ApiRequestBase {
     continuation_token: string;
     scope: string;
+    claims?: string;
 }
 
 export interface SignInPasswordTokenRequest extends SignInTokenRequestBase {

package/src/custom_auth/core/utils/ArgumentValidator.ts

@@ -24,3 +24,25 @@ export function ensureArgumentIsNotEmptyString(
         throw new InvalidArgumentError(argName, correlationId);
     }
 }
+
+export function ensureArgumentIsJSONString(
+    argName: string,
+    argValue: string,
+    correlationId?: string
+): void {
+    try {
+        const parsed = JSON.parse(argValue);
+        if (
+            typeof parsed !== "object" ||
+            parsed === null ||
+            Array.isArray(parsed)
+        ) {
+            throw new InvalidArgumentError(argName, correlationId);
+        }
+    } catch (e) {
+        if (e instanceof SyntaxError) {
+            throw new InvalidArgumentError(argName, correlationId);
+        }
+        throw e; // Rethrow unexpected errors
+    }
+}

package/src/custom_auth/get_account/auth_flow/CustomAuthAccountData.ts

@@ -18,10 +18,7 @@ import {
     TokenClaims,
 } from "@azure/msal-common/browser";
 import { SilentRequest } from "../../../request/SilentRequest.js";
-import {
-    ensureArgumentIsNotEmptyString,
-    ensureArgumentIsNotNullOrUndefined,
-} from "../../core/utils/ArgumentValidator.js";
+import * as ArgumentValidator from "../../core/utils/ArgumentValidator.js";
 
 /*
  * Account information.
@@ -34,8 +31,15 @@ export class CustomAuthAccountData {
         private readonly logger: Logger,
         private readonly correlationId: string
     ) {
-        ensureArgumentIsNotEmptyString("correlationId", correlationId);
-        ensureArgumentIsNotNullOrUndefined("account", account, correlationId);
+        ArgumentValidator.ensureArgumentIsNotEmptyString(
+            "correlationId",
+            correlationId
+        );
+        ArgumentValidator.ensureArgumentIsNotNullOrUndefined(
+            "account",
+            account,
+            correlationId
+        );
     }
 
     /**
@@ -107,12 +111,20 @@ export class CustomAuthAccountData {
         accessTokenRetrievalInputs: AccessTokenRetrievalInputs
     ): Promise<GetAccessTokenResult> {
         try {
-            ensureArgumentIsNotNullOrUndefined(
+            ArgumentValidator.ensureArgumentIsNotNullOrUndefined(
                 "accessTokenRetrievalInputs",
                 accessTokenRetrievalInputs,
                 this.correlationId
             );
 
+            if (accessTokenRetrievalInputs.claims) {
+                ArgumentValidator.ensureArgumentIsJSONString(
+                    "accessTokenRetrievalInputs.claims",
+                    accessTokenRetrievalInputs.claims,
+                    this.correlationId
+                );
+            }
+
             this.logger.verbose("Getting current account.", this.correlationId);
 
             const currentAccount = this.cacheClient.getCurrentAccount(
@@ -133,7 +145,8 @@ export class CustomAuthAccountData {
             const commonSilentFlowRequest = this.createCommonSilentFlowRequest(
                 currentAccount,
                 accessTokenRetrievalInputs.forceRefresh,
-                newScopes
+                newScopes,
+                accessTokenRetrievalInputs.claims
             );
             const result = await this.cacheClient.acquireToken(
                 commonSilentFlowRequest
@@ -158,7 +171,8 @@ export class CustomAuthAccountData {
     private createCommonSilentFlowRequest(
         accountInfo: AccountInfo,
         forceRefresh: boolean = false,
-        requestScopes: Array<string>
+        requestScopes: Array<string>,
+        claims?: string
     ): CommonSilentFlowRequest {
         const silentRequest: SilentRequest = {
             authority: this.config.auth.authority,
@@ -171,6 +185,7 @@ export class CustomAuthAccountData {
                 accessToken: true,
                 refreshToken: true,
             },
+            ...(claims && { claims: claims }),
         };
 
         return {

package/src/custom_auth/sign_in/auth_flow/error_type/SignInError.ts

@@ -31,6 +31,14 @@ export class SignInError extends AuthActionErrorBase {
         return this.isPasswordIncorrectError();
     }
 
+    /**
+     * Checks if the error is due to password reset being required.
+     * @returns true if the error is due to password reset being required, false otherwise.
+     */
+    isPasswordResetRequired(): boolean {
+        return this.isPasswordResetRequiredError();
+    }
+
     /**
      * Checks if the error is due to the provided challenge type is not supported.
      * @returns {boolean} True if the error is due to the provided challenge type is not supported, false otherwise.

package/src/custom_auth/sign_in/auth_flow/state/SignInCodeRequiredState.ts

@@ -37,6 +37,7 @@ export class SignInCodeRequiredState extends SignInState<SignInCodeRequiredState
                 continuationToken: this.stateParameters.continuationToken ?? "",
                 code: code,
                 username: this.stateParameters.username,
+                claims: this.stateParameters.claims,
             };
 
             this.stateParameters.logger.verbose(

package/src/custom_auth/sign_in/auth_flow/state/SignInContinuationState.ts

@@ -10,6 +10,7 @@ import { SignInWithContinuationTokenInputs } from "../../../CustomAuthActionInpu
 import { SignInContinuationStateParameters } from "./SignInStateParameters.js";
 import { SignInState } from "./SignInState.js";
 import { SignInCompletedState } from "./SignInCompletedState.js";
+import * as ArgumentValidator from "../../../core/utils/ArgumentValidator.js";
 
 /*
  * Sign-in continuation state.
@@ -24,6 +25,14 @@ export class SignInContinuationState extends SignInState<SignInContinuationState
         signInWithContinuationTokenInputs?: SignInWithContinuationTokenInputs
     ): Promise<SignInResult> {
         try {
+            if (signInWithContinuationTokenInputs?.claims) {
+                ArgumentValidator.ensureArgumentIsJSONString(
+                    "signInWithContinuationTokenInputs.claims",
+                    signInWithContinuationTokenInputs.claims,
+                    this.stateParameters.correlationId
+                );
+            }
+
             const continuationTokenParams: SignInContinuationTokenParams = {
                 clientId: this.stateParameters.config.auth.clientId,
                 correlationId: this.stateParameters.correlationId,
@@ -33,6 +42,7 @@ export class SignInContinuationState extends SignInState<SignInContinuationState
                 continuationToken: this.stateParameters.continuationToken ?? "",
                 username: this.stateParameters.username,
                 signInScenario: this.stateParameters.signInScenario,
+                claims: signInWithContinuationTokenInputs?.claims,
             };
 
             this.stateParameters.logger.verbose(

package/src/custom_auth/sign_in/auth_flow/state/SignInPasswordRequiredState.ts

@@ -34,6 +34,7 @@ export class SignInPasswordRequiredState extends SignInState<SignInPasswordRequi
                 continuationToken: this.stateParameters.continuationToken ?? "",
                 password: password,
                 username: this.stateParameters.username,
+                claims: this.stateParameters.claims,
             };
 
             this.stateParameters.logger.verbose(

package/src/custom_auth/sign_in/auth_flow/state/SignInStateParameters.ts

@@ -13,6 +13,7 @@ export interface SignInStateParameters
     username: string;
     signInClient: SignInClient;
     cacheClient: CustomAuthSilentCacheClient;
+    claims?: string;
 }
 
 export interface SignInPasswordRequiredStateParameters

package/src/custom_auth/sign_in/interaction_client/SignInClient.ts

@@ -195,6 +195,9 @@ export class SignInClient extends CustomAuthInteractionClientBase {
             scope: scopes.join(" "),
             correlationId: parameters.correlationId,
             telemetryManager: telemetryManager,
+            ...(parameters.claims && {
+                claims: parameters.claims,
+            }),
         };
 
         return this.performTokenRequest(
@@ -230,6 +233,9 @@ export class SignInClient extends CustomAuthInteractionClientBase {
             scope: scopes.join(" "),
             correlationId: parameters.correlationId,
             telemetryManager: telemetryManager,
+            ...(parameters.claims && {
+                claims: parameters.claims,
+            }),
         };
 
         return this.performTokenRequest(
@@ -263,6 +269,9 @@ export class SignInClient extends CustomAuthInteractionClientBase {
             correlationId: parameters.correlationId,
             telemetryManager: telemetryManager,
             scope: scopes.join(" "),
+            ...(parameters.claims && {
+                claims: parameters.claims,
+            }),
         };
 
         // Call token endpoint.

package/src/custom_auth/sign_in/interaction_client/parameter/SignInParams.ts

@@ -24,16 +24,19 @@ export interface SignInSubmitCodeParams extends SignInParamsBase {
     continuationToken: string;
     code: string;
     scopes: Array<string>;
+    claims?: string;
 }
 
 export interface SignInSubmitPasswordParams extends SignInParamsBase {
     continuationToken: string;
     password: string;
     scopes: Array<string>;
+    claims?: string;
 }
 
 export interface SignInContinuationTokenParams extends SignInParamsBase {
     continuationToken: string;
     signInScenario: SignInScenarioType;
     scopes: Array<string>;
+    claims?: string;
 }