@azure/msal-browser 4.16.0 → 4.19.0

package/src/custom_auth/sign_in/auth_flow/state/SignInContinuationState.ts

@@ -10,6 +10,7 @@ import { SignInWithContinuationTokenInputs } from "../../../CustomAuthActionInpu
 import { SignInContinuationStateParameters } from "./SignInStateParameters.js";
 import { SignInState } from "./SignInState.js";
 import { SignInCompletedState } from "./SignInCompletedState.js";
+import * as ArgumentValidator from "../../../core/utils/ArgumentValidator.js";
 
 /*
  * Sign-in continuation state.
@@ -24,6 +25,14 @@ export class SignInContinuationState extends SignInState<SignInContinuationState
         signInWithContinuationTokenInputs?: SignInWithContinuationTokenInputs
     ): Promise<SignInResult> {
         try {
+            if (signInWithContinuationTokenInputs?.claims) {
+                ArgumentValidator.ensureArgumentIsJSONString(
+                    "signInWithContinuationTokenInputs.claims",
+                    signInWithContinuationTokenInputs.claims,
+                    this.stateParameters.correlationId
+                );
+            }
+
             const continuationTokenParams: SignInContinuationTokenParams = {
                 clientId: this.stateParameters.config.auth.clientId,
                 correlationId: this.stateParameters.correlationId,
@@ -33,6 +42,7 @@ export class SignInContinuationState extends SignInState<SignInContinuationState
                 continuationToken: this.stateParameters.continuationToken ?? "",
                 username: this.stateParameters.username,
                 signInScenario: this.stateParameters.signInScenario,
+                claims: signInWithContinuationTokenInputs?.claims,
             };
 
             this.stateParameters.logger.verbose(

package/src/custom_auth/sign_in/auth_flow/state/SignInPasswordRequiredState.ts

@@ -34,6 +34,7 @@ export class SignInPasswordRequiredState extends SignInState<SignInPasswordRequi
                 continuationToken: this.stateParameters.continuationToken ?? "",
                 password: password,
                 username: this.stateParameters.username,
+                claims: this.stateParameters.claims,
             };
 
             this.stateParameters.logger.verbose(

package/src/custom_auth/sign_in/auth_flow/state/SignInStateParameters.ts

@@ -13,6 +13,7 @@ export interface SignInStateParameters
     username: string;
     signInClient: SignInClient;
     cacheClient: CustomAuthSilentCacheClient;
+    claims?: string;
 }
 
 export interface SignInPasswordRequiredStateParameters

package/src/custom_auth/sign_in/interaction_client/SignInClient.ts

@@ -195,6 +195,9 @@ export class SignInClient extends CustomAuthInteractionClientBase {
             scope: scopes.join(" "),
             correlationId: parameters.correlationId,
             telemetryManager: telemetryManager,
+            ...(parameters.claims && {
+                claims: parameters.claims,
+            }),
         };
 
         return this.performTokenRequest(
@@ -230,6 +233,9 @@ export class SignInClient extends CustomAuthInteractionClientBase {
             scope: scopes.join(" "),
             correlationId: parameters.correlationId,
             telemetryManager: telemetryManager,
+            ...(parameters.claims && {
+                claims: parameters.claims,
+            }),
         };
 
         return this.performTokenRequest(
@@ -263,6 +269,9 @@ export class SignInClient extends CustomAuthInteractionClientBase {
             correlationId: parameters.correlationId,
             telemetryManager: telemetryManager,
             scope: scopes.join(" "),
+            ...(parameters.claims && {
+                claims: parameters.claims,
+            }),
         };
 
         // Call token endpoint.

package/src/custom_auth/sign_in/interaction_client/parameter/SignInParams.ts

@@ -24,16 +24,19 @@ export interface SignInSubmitCodeParams extends SignInParamsBase {
     continuationToken: string;
     code: string;
     scopes: Array<string>;
+    claims?: string;
 }
 
 export interface SignInSubmitPasswordParams extends SignInParamsBase {
     continuationToken: string;
     password: string;
     scopes: Array<string>;
+    claims?: string;
 }
 
 export interface SignInContinuationTokenParams extends SignInParamsBase {
     continuationToken: string;
     signInScenario: SignInScenarioType;
     scopes: Array<string>;
+    claims?: string;
 }

package/src/interaction_client/BaseInteractionClient.ts

@@ -8,7 +8,6 @@ import {
     INetworkModule,
     Logger,
     AccountInfo,
-    AccountEntity,
     UrlString,
     ServerTelemetryManager,
     ServerTelemetryRequest,
@@ -91,22 +90,9 @@ export abstract class BaseInteractionClient {
         account?: AccountInfo | null
     ): Promise<void> {
         if (account) {
-            if (
-                AccountEntity.accountInfoIsEqual(
-                    account,
-                    this.browserStorage.getActiveAccount(correlationId),
-                    false
-                )
-            ) {
-                this.logger.verbose("Setting active account to null");
-                this.browserStorage.setActiveAccount(null, correlationId);
-            }
             // Clear given account.
             try {
-                this.browserStorage.removeAccount(
-                    AccountEntity.generateAccountCacheKey(account),
-                    correlationId
-                );
+                this.browserStorage.removeAccount(account, correlationId);
                 this.logger.verbose(
                     "Cleared cache items belonging to the account provided in the logout request."
                 );

package/src/interaction_client/PlatformAuthInteractionClient.ts

@@ -722,9 +722,11 @@ export class PlatformAuthInteractionClient extends BaseInteractionClient {
     ): Promise<void> {
         // Store the account info and hence `nativeAccountId` in browser cache
         await this.browserStorage.setAccount(accountEntity, this.correlationId);
-
         // Remove any existing cached tokens for this account in browser storage
-        this.browserStorage.removeAccountContext(accountEntity, correlationId);
+        this.browserStorage.removeAccountContext(
+            accountEntity.getAccountInfo(),
+            correlationId
+        );
     }
 
     /**

package/src/interaction_client/PopupClient.ts

@@ -604,11 +604,6 @@ export class PopupClient extends StandardInteractionClient {
                     validRequest.postLogoutRedirectUri &&
                     authClient.authority.protocolMode === ProtocolMode.OIDC
                 ) {
-                    this.browserStorage.removeAccount(
-                        validRequest.account?.homeAccountId,
-                        this.correlationId
-                    );
-
                     this.eventHandler.emitEvent(
                         EventType.LOGOUT_SUCCESS,
                         InteractionType.Popup,

package/src/interaction_client/RedirectClient.ts

@@ -768,11 +768,6 @@ export class RedirectClient extends StandardInteractionClient {
                     authClient.authority.endSessionEndpoint;
                 } catch {
                     if (validLogoutRequest.account?.homeAccountId) {
-                        this.browserStorage.removeAccount(
-                            validLogoutRequest.account?.homeAccountId,
-                            this.correlationId
-                        );
-
                         this.eventHandler.emitEvent(
                             EventType.LOGOUT_SUCCESS,
                             InteractionType.Redirect,

package/src/naa/AccountInfo.ts

@@ -13,4 +13,5 @@ export type AccountInfo = {
     idToken?: string; // idTokenClaims can be parsed from idToken in MSAL.js
     platformBrokerId?: string; // Used by WAM previous called nativeAccountId
     idTokenClaims?: object;
+    loginHint?: string;
 };

package/src/naa/mapping/NestedAppAuthAdapter.ts

@@ -190,6 +190,9 @@ export class NestedAppAuthAdapter {
 
         const name = fromAccount.name || effectiveIdTokenClaims?.name;
 
+        const loginHint =
+            fromAccount.loginHint || effectiveIdTokenClaims?.login_hint;
+
         const tenantProfiles = new Map<string, TenantProfile>();
 
         const tenantProfile = buildTenantProfile(
@@ -207,6 +210,7 @@ export class NestedAppAuthAdapter {
             username,
             localAccountId,
             name,
+            loginHint,
             idToken: idToken,
             idTokenClaims: effectiveIdTokenClaims,
             tenantProfiles,

package/src/operatingcontext/BaseOperatingContext.ts

@@ -10,11 +10,8 @@ import {
     Configuration,
 } from "../config/Configuration.js";
 import { version, name } from "../packageMetadata.js";
-import {
-    BrowserCacheLocation,
-    LOG_LEVEL_CACHE_KEY,
-    LOG_PII_CACHE_KEY,
-} from "../utils/BrowserConstants.js";
+import { BrowserCacheLocation } from "../utils/BrowserConstants.js";
+import { LOG_LEVEL_CACHE_KEY, LOG_PII_CACHE_KEY } from "../cache/CacheKeys.js";
 
 /**
  * Base class for operating context

package/src/packageMetadata.ts

@@ -1,3 +1,3 @@
 /* eslint-disable header/header */
 export const name = "@azure/msal-browser";
-export const version = "4.16.0";
+export const version = "4.19.0";

package/src/telemetry/BrowserPerformanceClient.ts

@@ -16,11 +16,9 @@ import {
 } from "@azure/msal-common/browser";
 import { Configuration } from "../config/Configuration.js";
 import { name, version } from "../packageMetadata.js";
-import {
-    BROWSER_PERF_ENABLED_KEY,
-    BrowserCacheLocation,
-} from "../utils/BrowserConstants.js";
+import { BrowserCacheLocation } from "../utils/BrowserConstants.js";
 import * as BrowserCrypto from "../crypto/BrowserCrypto.js";
+import { BROWSER_PERF_ENABLED_KEY } from "../cache/CacheKeys.js";
 
 /**
  * Returns browser performance measurement module if session flag is enabled. Returns undefined otherwise.

package/src/utils/BrowserConstants.ts

@@ -100,14 +100,6 @@ export const TemporaryCacheKeys = {
 export type TemporaryCacheKeys =
     (typeof TemporaryCacheKeys)[keyof typeof TemporaryCacheKeys];
 
-export const StaticCacheKeys = {
-    ACCOUNT_KEYS: "msal.account.keys",
-    TOKEN_KEYS: "msal.token.keys",
-    VERSION: "msal.version",
-} as const;
-export type StaticCacheKeys =
-    (typeof StaticCacheKeys)[keyof typeof StaticCacheKeys];
-
 /**
  * Cache keys stored in-memory
  */
@@ -249,10 +241,3 @@ export const iFrameRenewalPolicies: CacheLookupPolicy[] = [
     CacheLookupPolicy.Skip,
     CacheLookupPolicy.RefreshTokenAndNetwork,
 ];
-
-export const LOG_LEVEL_CACHE_KEY = "msal.browser.log.level";
-export const LOG_PII_CACHE_KEY = "msal.browser.log.pii";
-
-export const BROWSER_PERF_ENABLED_KEY = "msal.browser.performance.enabled";
-
-export const PLATFORM_AUTH_DOM_SUPPORT = "msal.browser.platform.auth.dom";

package/src/utils/Helpers.ts

@@ -0,0 +1,19 @@
+/*
+ * Copyright (c) Microsoft Corporation. All rights reserved.
+ * Licensed under the MIT License.
+ */
+
+/**
+ * Utility function to remove an element from an array in place.
+ * @param array - The array from which to remove the element.
+ * @param element - The element to remove from the array.
+ */
+export function removeElementFromArray(
+    array: Array<string>,
+    element: string
+): void {
+    const index = array.indexOf(element);
+    if (index > -1) {
+        array.splice(index, 1);
+    }
+}