@azure/msal-browser 4.21.0 → 4.22.0

package/lib/types/custom_auth/CustomAuthConstants.d.ts

@@ -17,7 +17,7 @@ export declare const HttpHeaderKeys: {
 };
 export declare const DefaultPackageInfo: {
     readonly SKU: "msal.browser";
-    readonly VERSION: "4.21.0";
+    readonly VERSION: "4.22.0";
     readonly OS: "";
     readonly CPU: "";
 };

package/lib/types/custom_auth/configuration/CustomAuthConfiguration.d.ts

@@ -2,6 +2,8 @@ import { BrowserConfiguration, Configuration } from "../../config/Configuration.
 export type CustomAuthOptions = {
     challengeTypes?: Array<string>;
     authApiProxyUrl: string;
+    customAuthApiQueryParams?: Record<string, string>;
+    capabilities?: Array<string>;
 };
 export type CustomAuthConfiguration = Configuration & {
     customAuth: CustomAuthOptions;

package/lib/types/custom_auth/configuration/CustomAuthConfiguration.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"CustomAuthConfiguration.d.ts","sourceRoot":"","sources":["../../../../src/custom_auth/configuration/CustomAuthConfiguration.ts"],"names":[],"mappings":"AAKA,OAAO,EACH,oBAAoB,EACpB,aAAa,EAChB,MAAM,+BAA+B,CAAC;AAEvC,MAAM,MAAM,iBAAiB,GAAG;IAC5B,cAAc,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IAC/B,eAAe,EAAE,MAAM,CAAC;CAC3B,CAAC;AAEF,MAAM,MAAM,uBAAuB,GAAG,aAAa,GAAG;IAClD,UAAU,EAAE,iBAAiB,CAAC;CACjC,CAAC;AAEF,MAAM,MAAM,8BAA8B,GAAG,oBAAoB,GAAG;IAChE,UAAU,EAAE,iBAAiB,CAAC;CACjC,CAAC"}
+{"version":3,"file":"CustomAuthConfiguration.d.ts","sourceRoot":"","sources":["../../../../src/custom_auth/configuration/CustomAuthConfiguration.ts"],"names":[],"mappings":"AAKA,OAAO,EACH,oBAAoB,EACpB,aAAa,EAChB,MAAM,+BAA+B,CAAC;AAEvC,MAAM,MAAM,iBAAiB,GAAG;IAC5B,cAAc,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IAC/B,eAAe,EAAE,MAAM,CAAC;IACxB,wBAAwB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAClD,YAAY,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;CAChC,CAAC;AAEF,MAAM,MAAM,uBAAuB,GAAG,aAAa,GAAG;IAClD,UAAU,EAAE,iBAAiB,CAAC;CACjC,CAAC;AAEF,MAAM,MAAM,8BAA8B,GAAG,oBAAoB,GAAG;IAChE,UAAU,EAAE,iBAAiB,CAAC;CACjC,CAAC"}

package/lib/types/custom_auth/controller/CustomAuthStandardController.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"CustomAuthStandardController.d.ts","sourceRoot":"","sources":["../../../../src/custom_auth/controller/CustomAuthStandardController.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,gBAAgB,EAAE,MAAM,qDAAqD,CAAC;AACvF,OAAO,EAAE,YAAY,EAAE,MAAM,6CAA6C,CAAC;AAC3E,OAAO,EAAE,YAAY,EAAE,MAAM,6CAA6C,CAAC;AAM3E,OAAO,EACH,sBAAsB,EACtB,YAAY,EACZ,YAAY,EACZ,mBAAmB,EAEtB,MAAM,8BAA8B,CAAC;AAEtC,OAAO,EAAE,0BAA0B,EAAE,MAAM,oDAAoD,CAAC;AAChG,OAAO,EAAE,6BAA6B,EAAE,MAAM,oCAAoC,CAAC;AAGnF,OAAO,EAAE,wBAAwB,EAAE,MAAM,gEAAgE,CAAC;AAa1G,OAAO,EAAE,oBAAoB,EAAE,MAAM,gEAAgE,CAAC;AAetG,OAAO,EAAE,kBAAkB,EAAE,MAAM,yCAAyC,CAAC;AAK7E,qBAAa,4BACT,SAAQ,kBACR,YAAW,6BAA6B;IAExC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAe;IAC5C,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAe;IAC5C,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAsB;IAC1D,OAAO,CAAC,QAAQ,CAAC,WAAW,CAA8B;IAC1D,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAiC;IAClE,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAsB;gBAQ5C,gBAAgB,EAAE,0BAA0B,EAC5C,mBAAmB,CAAC,EAAE,oBAAoB;IAyD9C,iBAAiB,CACb,sBAAsB,CAAC,EAAE,sBAAsB,GAChD,gBAAgB;IAqCb,MAAM,CAAC,YAAY,EAAE,YAAY,GAAG,OAAO,CAAC,YAAY,CAAC;IAiKzD,MAAM,CAAC,YAAY,EAAE,YAAY,GAAG,OAAO,CAAC,YAAY,CAAC;IA8GzD,aAAa,CACf,mBAAmB,EAAE,mBAAmB,GACzC,OAAO,CAAC,wBAAwB,CAAC;IAoDpC,OAAO,CAAC,gBAAgB;IAQxB,OAAO,CAAC,qBAAqB;CAWhC"}
+{"version":3,"file":"CustomAuthStandardController.d.ts","sourceRoot":"","sources":["../../../../src/custom_auth/controller/CustomAuthStandardController.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,gBAAgB,EAAE,MAAM,qDAAqD,CAAC;AACvF,OAAO,EAAE,YAAY,EAAE,MAAM,6CAA6C,CAAC;AAC3E,OAAO,EAAE,YAAY,EAAE,MAAM,6CAA6C,CAAC;AAM3E,OAAO,EACH,sBAAsB,EACtB,YAAY,EACZ,YAAY,EACZ,mBAAmB,EAEtB,MAAM,8BAA8B,CAAC;AAEtC,OAAO,EAAE,0BAA0B,EAAE,MAAM,oDAAoD,CAAC;AAChG,OAAO,EAAE,6BAA6B,EAAE,MAAM,oCAAoC,CAAC;AAGnF,OAAO,EAAE,wBAAwB,EAAE,MAAM,gEAAgE,CAAC;AAa1G,OAAO,EAAE,oBAAoB,EAAE,MAAM,gEAAgE,CAAC;AAetG,OAAO,EAAE,kBAAkB,EAAE,MAAM,yCAAyC,CAAC;AAK7E,qBAAa,4BACT,SAAQ,kBACR,YAAW,6BAA6B;IAExC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAe;IAC5C,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAe;IAC5C,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAsB;IAC1D,OAAO,CAAC,QAAQ,CAAC,WAAW,CAA8B;IAC1D,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAiC;IAClE,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAsB;gBAQ5C,gBAAgB,EAAE,0BAA0B,EAC5C,mBAAmB,CAAC,EAAE,oBAAoB;IA2D9C,iBAAiB,CACb,sBAAsB,CAAC,EAAE,sBAAsB,GAChD,gBAAgB;IAqCb,MAAM,CAAC,YAAY,EAAE,YAAY,GAAG,OAAO,CAAC,YAAY,CAAC;IAiKzD,MAAM,CAAC,YAAY,EAAE,YAAY,GAAG,OAAO,CAAC,YAAY,CAAC;IA8GzD,aAAa,CACf,mBAAmB,EAAE,mBAAmB,GACzC,OAAO,CAAC,wBAAwB,CAAC;IAoDpC,OAAO,CAAC,gBAAgB;IAQxB,OAAO,CAAC,qBAAqB;CAWhC"}

package/lib/types/custom_auth/core/auth_flow/AuthFlowErrorBase.d.ts

@@ -29,5 +29,10 @@ export declare abstract class AuthActionErrorBase extends AuthFlowErrorBase {
      * @returns {boolean} True if the error is due to the expired continuation token, false otherwise.
      */
     isTokenExpired(): boolean;
+    /**
+     * Check if client app supports the challenge type configured in Entra.
+     * @returns {boolean} True if client app doesn't support the challenge type configured in Entra, "loginPopup" function is required to continue the operation.
+     */
+    isRedirectRequired(): boolean;
 }
 //# sourceMappingURL=AuthFlowErrorBase.d.ts.map

package/lib/types/custom_auth/core/auth_flow/AuthFlowErrorBase.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"AuthFlowErrorBase.d.ts","sourceRoot":"","sources":["../../../../../src/custom_auth/core/auth_flow/AuthFlowErrorBase.ts"],"names":[],"mappings":"AASA,OAAO,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAC;AAK9D;;GAEG;AACH,8BAAsB,iBAAiB;IAChB,SAAS,EAAE,eAAe;gBAA1B,SAAS,EAAE,eAAe;IAE7C,SAAS,CAAC,mBAAmB,IAAI,OAAO;IAIxC,SAAS,CAAC,kBAAkB,IAAI,OAAO;IAYvC,SAAS,CAAC,+BAA+B,IAAI,OAAO;IAYpD,SAAS,CAAC,wBAAwB,IAAI,OAAO;IAa7C,SAAS,CAAC,kBAAkB,IAAI,OAAO;IAWvC,SAAS,CAAC,eAAe,IAAI,OAAO;IAIpC,SAAS,CAAC,yBAAyB,IAAI,OAAO;IAiB9C,SAAS,CAAC,wBAAwB,IAAI,OAAO;IAO7C,SAAS,CAAC,wBAAwB,IAAI,OAAO;IAO7C,SAAS,CAAC,gCAAgC,IAAI,OAAO;IAYrD,SAAS,CAAC,2BAA2B,IAAI,OAAO;IAIhD,SAAS,CAAC,mBAAmB,IAAI,OAAO;IAOxC;;;OAGG;IACH,SAAS,CAAC,4BAA4B,IAAI,OAAO;CAOpD;AAED,8BAAsB,mBAAoB,SAAQ,iBAAiB;IAC/D;;;OAGG;IACH,cAAc,IAAI,OAAO;CAG5B"}
+{"version":3,"file":"AuthFlowErrorBase.d.ts","sourceRoot":"","sources":["../../../../../src/custom_auth/core/auth_flow/AuthFlowErrorBase.ts"],"names":[],"mappings":"AASA,OAAO,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAC;AAK9D;;GAEG;AACH,8BAAsB,iBAAiB;IAChB,SAAS,EAAE,eAAe;gBAA1B,SAAS,EAAE,eAAe;IAE7C,SAAS,CAAC,mBAAmB,IAAI,OAAO;IAIxC,SAAS,CAAC,kBAAkB,IAAI,OAAO;IAYvC,SAAS,CAAC,+BAA+B,IAAI,OAAO;IAYpD,SAAS,CAAC,wBAAwB,IAAI,OAAO;IAa7C,SAAS,CAAC,kBAAkB,IAAI,OAAO;IAWvC,SAAS,CAAC,eAAe,IAAI,OAAO;IAIpC,SAAS,CAAC,yBAAyB,IAAI,OAAO;IAiB9C,SAAS,CAAC,wBAAwB,IAAI,OAAO;IAO7C,SAAS,CAAC,wBAAwB,IAAI,OAAO;IAO7C,SAAS,CAAC,gCAAgC,IAAI,OAAO;IAYrD,SAAS,CAAC,2BAA2B,IAAI,OAAO;IAIhD,SAAS,CAAC,mBAAmB,IAAI,OAAO;IAOxC;;;OAGG;IACH,SAAS,CAAC,4BAA4B,IAAI,OAAO;CAOpD;AAED,8BAAsB,mBAAoB,SAAQ,iBAAiB;IAC/D;;;OAGG;IACH,cAAc,IAAI,OAAO;IAIzB;;;OAGG;IACH,kBAAkB,IAAI,OAAO;CAGhC"}

package/lib/types/custom_auth/core/error/CustomAuthApiError.d.ts

@@ -4,7 +4,8 @@ import { CustomAuthError } from "./CustomAuthError.js";
  * Error when no required authentication method by Microsoft Entra is supported
  */
 export declare class RedirectError extends CustomAuthError {
-    constructor(correlationId?: string);
+    redirectReason?: string | undefined;
+    constructor(correlationId?: string, redirectReason?: string | undefined);
 }
 /**
  * Custom Auth API error.

package/lib/types/custom_auth/core/error/CustomAuthApiError.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"CustomAuthApiError.d.ts","sourceRoot":"","sources":["../../../../../src/custom_auth/core/error/CustomAuthApiError.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,aAAa,EAAE,MAAM,kEAAkE,CAAC;AACjG,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAEvD;;GAEG;AACH,qBAAa,aAAc,SAAQ,eAAe;gBAClC,aAAa,CAAC,EAAE,MAAM;CAQrC;AAED;;GAEG;AACH,qBAAa,kBAAmB,SAAQ,eAAe;IAOxC,UAAU,CAAC;IACX,iBAAiB,CAAC;IAClB,OAAO,CAAC;IACR,SAAS,CAAC;gBARjB,KAAK,EAAE,MAAM,EACb,gBAAgB,EAAE,MAAM,EACxB,aAAa,CAAC,EAAE,MAAM,EACtB,UAAU,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,EAC1B,QAAQ,CAAC,EAAE,MAAM,EACV,UAAU,CAAC,6BAAsB,EACjC,iBAAiB,CAAC,oBAAQ,EAC1B,OAAO,CAAC,oBAAQ,EAChB,SAAS,CAAC,oBAAQ;CAKhC"}
+{"version":3,"file":"CustomAuthApiError.d.ts","sourceRoot":"","sources":["../../../../../src/custom_auth/core/error/CustomAuthApiError.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,aAAa,EAAE,MAAM,kEAAkE,CAAC;AACjG,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAEvD;;GAEG;AACH,qBAAa,aAAc,SAAQ,eAAe;IACH,cAAc,CAAC;gBAA9C,aAAa,CAAC,EAAE,MAAM,EAAS,cAAc,CAAC,oBAAQ;CASrE;AAED;;GAEG;AACH,qBAAa,kBAAmB,SAAQ,eAAe;IAOxC,UAAU,CAAC;IACX,iBAAiB,CAAC;IAClB,OAAO,CAAC;IACR,SAAS,CAAC;gBARjB,KAAK,EAAE,MAAM,EACb,gBAAgB,EAAE,MAAM,EACxB,aAAa,CAAC,EAAE,MAAM,EACtB,UAAU,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,EAC1B,QAAQ,CAAC,EAAE,MAAM,EACV,UAAU,CAAC,6BAAsB,EACjC,iBAAiB,CAAC,oBAAQ,EAC1B,OAAO,CAAC,oBAAQ,EAChB,SAAS,CAAC,oBAAQ;CAKhC"}

package/lib/types/custom_auth/core/network_client/custom_auth_api/BaseApiClient.d.ts

@@ -3,8 +3,9 @@ import { ServerTelemetryManager } from "@azure/msal-common/browser";
 export declare abstract class BaseApiClient {
     private readonly clientId;
     private httpClient;
+    private customAuthApiQueryParams?;
     private readonly baseRequestUrl;
-    constructor(baseUrl: string, clientId: string, httpClient: IHttpClient);
+    constructor(baseUrl: string, clientId: string, httpClient: IHttpClient, customAuthApiQueryParams?: Record<string, string> | undefined);
     protected request<T>(endpoint: string, data: Record<string, string | boolean>, telemetryManager: ServerTelemetryManager, correlationId: string): Promise<T>;
     protected ensureContinuationTokenIsValid(continuationToken: string | undefined, correlationId: string): void;
     private readResponseCorrelationId;

package/lib/types/custom_auth/core/network_client/custom_auth_api/BaseApiClient.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"BaseApiClient.d.ts","sourceRoot":"","sources":["../../../../../../src/custom_auth/core/network_client/custom_auth_api/BaseApiClient.ts"],"names":[],"mappings":"AAUA,OAAO,EAAE,WAAW,EAAE,MAAM,+BAA+B,CAAC;AAO5D,OAAO,EAEH,sBAAsB,EACzB,MAAM,4BAA4B,CAAC;AAGpC,8BAAsB,aAAa;IAK3B,OAAO,CAAC,QAAQ,CAAC,QAAQ;IACzB,OAAO,CAAC,UAAU;IALtB,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAM;gBAGjC,OAAO,EAAE,MAAM,EACE,QAAQ,EAAE,MAAM,EACzB,UAAU,EAAE,WAAW;cAOnB,OAAO,CAAC,CAAC,EACrB,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,EACtC,gBAAgB,EAAE,sBAAsB,EACxC,aAAa,EAAE,MAAM,GACtB,OAAO,CAAC,CAAC,CAAC;IAuBb,SAAS,CAAC,8BAA8B,CACpC,iBAAiB,EAAE,MAAM,GAAG,SAAS,EACrC,aAAa,EAAE,MAAM,GACtB,IAAI;IAUP,OAAO,CAAC,yBAAyB;IAUjC,OAAO,CAAC,gBAAgB;YAkBV,iBAAiB;CA8DlC"}
+{"version":3,"file":"BaseApiClient.d.ts","sourceRoot":"","sources":["../../../../../../src/custom_auth/core/network_client/custom_auth_api/BaseApiClient.ts"],"names":[],"mappings":"AAUA,OAAO,EAAE,WAAW,EAAE,MAAM,+BAA+B,CAAC;AAO5D,OAAO,EAEH,sBAAsB,EACzB,MAAM,4BAA4B,CAAC;AAGpC,8BAAsB,aAAa;IAK3B,OAAO,CAAC,QAAQ,CAAC,QAAQ;IACzB,OAAO,CAAC,UAAU;IAClB,OAAO,CAAC,wBAAwB,CAAC;IANrC,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAM;gBAGjC,OAAO,EAAE,MAAM,EACE,QAAQ,EAAE,MAAM,EACzB,UAAU,EAAE,WAAW,EACvB,wBAAwB,CAAC,oCAAwB;cAO7C,OAAO,CAAC,CAAC,EACrB,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,EACtC,gBAAgB,EAAE,sBAAsB,EACxC,aAAa,EAAE,MAAM,GACtB,OAAO,CAAC,CAAC,CAAC;IA2Bb,SAAS,CAAC,8BAA8B,CACpC,iBAAiB,EAAE,MAAM,GAAG,SAAS,EACrC,aAAa,EAAE,MAAM,GACtB,IAAI;IAUP,OAAO,CAAC,yBAAyB;IAUjC,OAAO,CAAC,gBAAgB;YAkBV,iBAAiB;CAiElC"}

package/lib/types/custom_auth/core/network_client/custom_auth_api/CustomAuthApiClient.d.ts

@@ -7,6 +7,6 @@ export declare class CustomAuthApiClient implements ICustomAuthApiClient {
     signInApi: SignInApiClient;
     signUpApi: SignupApiClient;
     resetPasswordApi: ResetPasswordApiClient;
-    constructor(customAuthApiBaseUrl: string, clientId: string, httpClient: IHttpClient);
+    constructor(customAuthApiBaseUrl: string, clientId: string, httpClient: IHttpClient, capabilities?: string, customAuthApiQueryParams?: Record<string, string>);
 }
 //# sourceMappingURL=CustomAuthApiClient.d.ts.map

package/lib/types/custom_auth/core/network_client/custom_auth_api/CustomAuthApiClient.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"CustomAuthApiClient.d.ts","sourceRoot":"","sources":["../../../../../../src/custom_auth/core/network_client/custom_auth_api/CustomAuthApiClient.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,sBAAsB,EAAE,MAAM,6BAA6B,CAAC;AACrE,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AACvD,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AACvD,OAAO,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AACjE,OAAO,EAAE,WAAW,EAAE,MAAM,+BAA+B,CAAC;AAE5D,qBAAa,mBAAoB,YAAW,oBAAoB;IAC5D,SAAS,EAAE,eAAe,CAAC;IAC3B,SAAS,EAAE,eAAe,CAAC;IAC3B,gBAAgB,EAAE,sBAAsB,CAAC;gBAGrC,oBAAoB,EAAE,MAAM,EAC5B,QAAQ,EAAE,MAAM,EAChB,UAAU,EAAE,WAAW;CAkB9B"}
+{"version":3,"file":"CustomAuthApiClient.d.ts","sourceRoot":"","sources":["../../../../../../src/custom_auth/core/network_client/custom_auth_api/CustomAuthApiClient.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,sBAAsB,EAAE,MAAM,6BAA6B,CAAC;AACrE,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AACvD,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AACvD,OAAO,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AACjE,OAAO,EAAE,WAAW,EAAE,MAAM,+BAA+B,CAAC;AAE5D,qBAAa,mBAAoB,YAAW,oBAAoB;IAC5D,SAAS,EAAE,eAAe,CAAC;IAC3B,SAAS,EAAE,eAAe,CAAC;IAC3B,gBAAgB,EAAE,sBAAsB,CAAC;gBAGrC,oBAAoB,EAAE,MAAM,EAC5B,QAAQ,EAAE,MAAM,EAChB,UAAU,EAAE,WAAW,EACvB,YAAY,CAAC,EAAE,MAAM,EACrB,wBAAwB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC;CAwBxD"}

package/lib/types/custom_auth/core/network_client/custom_auth_api/ResetPasswordApiClient.d.ts

@@ -1,7 +1,10 @@
 import { BaseApiClient } from "./BaseApiClient.js";
+import { IHttpClient } from "../http_client/IHttpClient.js";
 import { ResetPasswordChallengeRequest, ResetPasswordContinueRequest, ResetPasswordPollCompletionRequest, ResetPasswordStartRequest, ResetPasswordSubmitRequest } from "./types/ApiRequestTypes.js";
 import { ResetPasswordChallengeResponse, ResetPasswordContinueResponse, ResetPasswordPollCompletionResponse, ResetPasswordStartResponse, ResetPasswordSubmitResponse } from "./types/ApiResponseTypes.js";
 export declare class ResetPasswordApiClient extends BaseApiClient {
+    private readonly capabilities?;
+    constructor(customAuthApiBaseUrl: string, clientId: string, httpClient: IHttpClient, capabilities?: string, customAuthApiQueryParams?: Record<string, string>);
     /**
      * Start the password reset flow
      */

package/lib/types/custom_auth/core/network_client/custom_auth_api/ResetPasswordApiClient.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ResetPasswordApiClient.d.ts","sourceRoot":"","sources":["../../../../../../src/custom_auth/core/network_client/custom_auth_api/ResetPasswordApiClient.ts"],"names":[],"mappings":"AAUA,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAGnD,OAAO,EACH,6BAA6B,EAC7B,4BAA4B,EAC5B,kCAAkC,EAClC,yBAAyB,EACzB,0BAA0B,EAC7B,MAAM,4BAA4B,CAAC;AACpC,OAAO,EACH,8BAA8B,EAC9B,6BAA6B,EAC7B,mCAAmC,EACnC,0BAA0B,EAC1B,2BAA2B,EAC9B,MAAM,6BAA6B,CAAC;AAErC,qBAAa,sBAAuB,SAAQ,aAAa;IACrD;;OAEG;IACG,KAAK,CACP,MAAM,EAAE,yBAAyB,GAClC,OAAO,CAAC,0BAA0B,CAAC;IAmBtC;;;OAGG;IACG,gBAAgB,CAClB,MAAM,EAAE,6BAA6B,GACtC,OAAO,CAAC,8BAA8B,CAAC;IAmB1C;;;OAGG;IACG,gBAAgB,CAClB,MAAM,EAAE,4BAA4B,GACrC,OAAO,CAAC,6BAA6B,CAAC;IAoBzC;;;OAGG;IACG,iBAAiB,CACnB,MAAM,EAAE,0BAA0B,GACnC,OAAO,CAAC,2BAA2B,CAAC;IAuBvC;;;OAGG;IACG,cAAc,CAChB,MAAM,EAAE,kCAAkC,GAC3C,OAAO,CAAC,mCAAmC,CAAC;IAe/C,SAAS,CAAC,uBAAuB,CAC7B,MAAM,EAAE,MAAM,EACd,aAAa,EAAE,MAAM,GACtB,IAAI;CAcV"}
+{"version":3,"file":"ResetPasswordApiClient.d.ts","sourceRoot":"","sources":["../../../../../../src/custom_auth/core/network_client/custom_auth_api/ResetPasswordApiClient.ts"],"names":[],"mappings":"AAUA,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACnD,OAAO,EAAE,WAAW,EAAE,MAAM,+BAA+B,CAAC;AAG5D,OAAO,EACH,6BAA6B,EAC7B,4BAA4B,EAC5B,kCAAkC,EAClC,yBAAyB,EACzB,0BAA0B,EAC7B,MAAM,4BAA4B,CAAC;AACpC,OAAO,EACH,8BAA8B,EAC9B,6BAA6B,EAC7B,mCAAmC,EACnC,0BAA0B,EAC1B,2BAA2B,EAC9B,MAAM,6BAA6B,CAAC;AAErC,qBAAa,sBAAuB,SAAQ,aAAa;IACrD,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAS;gBAGnC,oBAAoB,EAAE,MAAM,EAC5B,QAAQ,EAAE,MAAM,EAChB,UAAU,EAAE,WAAW,EACvB,YAAY,CAAC,EAAE,MAAM,EACrB,wBAAwB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC;IAWrD;;OAEG;IACG,KAAK,CACP,MAAM,EAAE,yBAAyB,GAClC,OAAO,CAAC,0BAA0B,CAAC;IAsBtC;;;OAGG;IACG,gBAAgB,CAClB,MAAM,EAAE,6BAA6B,GACtC,OAAO,CAAC,8BAA8B,CAAC;IAmB1C;;;OAGG;IACG,gBAAgB,CAClB,MAAM,EAAE,4BAA4B,GACrC,OAAO,CAAC,6BAA6B,CAAC;IAoBzC;;;OAGG;IACG,iBAAiB,CACnB,MAAM,EAAE,0BAA0B,GACnC,OAAO,CAAC,2BAA2B,CAAC;IAuBvC;;;OAGG;IACG,cAAc,CAChB,MAAM,EAAE,kCAAkC,GAC3C,OAAO,CAAC,mCAAmC,CAAC;IAe/C,SAAS,CAAC,uBAAuB,CAC7B,MAAM,EAAE,MAAM,EACd,aAAa,EAAE,MAAM,GACtB,IAAI;CAcV"}

package/lib/types/custom_auth/core/network_client/custom_auth_api/SignInApiClient.d.ts

@@ -1,7 +1,10 @@
 import { BaseApiClient } from "./BaseApiClient.js";
+import { IHttpClient } from "../http_client/IHttpClient.js";
 import { SignInChallengeRequest, SignInContinuationTokenRequest, SignInInitiateRequest, SignInOobTokenRequest, SignInPasswordTokenRequest } from "./types/ApiRequestTypes.js";
 import { SignInChallengeResponse, SignInInitiateResponse, SignInTokenResponse } from "./types/ApiResponseTypes.js";
 export declare class SignInApiClient extends BaseApiClient {
+    private readonly capabilities?;
+    constructor(customAuthApiBaseUrl: string, clientId: string, httpClient: IHttpClient, capabilities?: string, customAuthApiQueryParams?: Record<string, string>);
     /**
      * Initiates the sign-in flow
      * @param username User's email

package/lib/types/custom_auth/core/network_client/custom_auth_api/SignInApiClient.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"SignInApiClient.d.ts","sourceRoot":"","sources":["../../../../../../src/custom_auth/core/network_client/custom_auth_api/SignInApiClient.ts"],"names":[],"mappings":"AAQA,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAGnD,OAAO,EACH,sBAAsB,EACtB,8BAA8B,EAC9B,qBAAqB,EACrB,qBAAqB,EACrB,0BAA0B,EAC7B,MAAM,4BAA4B,CAAC;AACpC,OAAO,EACH,uBAAuB,EACvB,sBAAsB,EACtB,mBAAmB,EACtB,MAAM,6BAA6B,CAAC;AAErC,qBAAa,eAAgB,SAAQ,aAAa;IAC9C;;;;OAIG;IACG,QAAQ,CACV,MAAM,EAAE,qBAAqB,GAC9B,OAAO,CAAC,sBAAsB,CAAC;IAmBlC;;;;OAIG;IACG,gBAAgB,CAClB,MAAM,EAAE,sBAAsB,GAC/B,OAAO,CAAC,uBAAuB,CAAC;IAmBnC;;;;;OAKG;IACG,yBAAyB,CAC3B,MAAM,EAAE,0BAA0B,GACnC,OAAO,CAAC,mBAAmB,CAAC;IAczB,oBAAoB,CACtB,MAAM,EAAE,qBAAqB,GAC9B,OAAO,CAAC,mBAAmB,CAAC;IAczB,iCAAiC,CACnC,MAAM,EAAE,8BAA8B,GACvC,OAAO,CAAC,mBAAmB,CAAC;YAejB,aAAa;IAoB3B,OAAO,CAAC,MAAM,CAAC,0BAA0B;CAoC5C"}
+{"version":3,"file":"SignInApiClient.d.ts","sourceRoot":"","sources":["../../../../../../src/custom_auth/core/network_client/custom_auth_api/SignInApiClient.ts"],"names":[],"mappings":"AAQA,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACnD,OAAO,EAAE,WAAW,EAAE,MAAM,+BAA+B,CAAC;AAG5D,OAAO,EACH,sBAAsB,EACtB,8BAA8B,EAC9B,qBAAqB,EACrB,qBAAqB,EACrB,0BAA0B,EAC7B,MAAM,4BAA4B,CAAC;AACpC,OAAO,EACH,uBAAuB,EACvB,sBAAsB,EACtB,mBAAmB,EACtB,MAAM,6BAA6B,CAAC;AAErC,qBAAa,eAAgB,SAAQ,aAAa;IAC9C,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAS;gBAGnC,oBAAoB,EAAE,MAAM,EAC5B,QAAQ,EAAE,MAAM,EAChB,UAAU,EAAE,WAAW,EACvB,YAAY,CAAC,EAAE,MAAM,EACrB,wBAAwB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC;IAWrD;;;;OAIG;IACG,QAAQ,CACV,MAAM,EAAE,qBAAqB,GAC9B,OAAO,CAAC,sBAAsB,CAAC;IAsBlC;;;;OAIG;IACG,gBAAgB,CAClB,MAAM,EAAE,sBAAsB,GAC/B,OAAO,CAAC,uBAAuB,CAAC;IAmBnC;;;;;OAKG;IACG,yBAAyB,CAC3B,MAAM,EAAE,0BAA0B,GACnC,OAAO,CAAC,mBAAmB,CAAC;IAczB,oBAAoB,CACtB,MAAM,EAAE,qBAAqB,GAC9B,OAAO,CAAC,mBAAmB,CAAC;IAczB,iCAAiC,CACnC,MAAM,EAAE,8BAA8B,GACvC,OAAO,CAAC,mBAAmB,CAAC;YAejB,aAAa;IAoB3B,OAAO,CAAC,MAAM,CAAC,0BAA0B;CAoC5C"}

package/lib/types/custom_auth/core/network_client/custom_auth_api/SignupApiClient.d.ts

@@ -1,7 +1,10 @@
 import { BaseApiClient } from "./BaseApiClient.js";
+import { IHttpClient } from "../http_client/IHttpClient.js";
 import { SignUpChallengeRequest, SignUpContinueWithAttributesRequest, SignUpContinueWithOobRequest, SignUpContinueWithPasswordRequest, SignUpStartRequest } from "./types/ApiRequestTypes.js";
 import { SignUpChallengeResponse, SignUpContinueResponse, SignUpStartResponse } from "./types/ApiResponseTypes.js";
 export declare class SignupApiClient extends BaseApiClient {
+    private readonly capabilities?;
+    constructor(customAuthApiBaseUrl: string, clientId: string, httpClient: IHttpClient, capabilities?: string, customAuthApiQueryParams?: Record<string, string>);
     /**
      * Start the sign-up flow
      */

package/lib/types/custom_auth/core/network_client/custom_auth_api/SignupApiClient.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"SignupApiClient.d.ts","sourceRoot":"","sources":["../../../../../../src/custom_auth/core/network_client/custom_auth_api/SignupApiClient.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAEnD,OAAO,EACH,sBAAsB,EACtB,mCAAmC,EACnC,4BAA4B,EAC5B,iCAAiC,EACjC,kBAAkB,EACrB,MAAM,4BAA4B,CAAC;AACpC,OAAO,EACH,uBAAuB,EACvB,sBAAsB,EACtB,mBAAmB,EACtB,MAAM,6BAA6B,CAAC;AAErC,qBAAa,eAAgB,SAAQ,aAAa;IAC9C;;OAEG;IACG,KAAK,CAAC,MAAM,EAAE,kBAAkB,GAAG,OAAO,CAAC,mBAAmB,CAAC;IAuBrE;;OAEG;IACG,gBAAgB,CAClB,MAAM,EAAE,sBAAsB,GAC/B,OAAO,CAAC,uBAAuB,CAAC;IAmBnC;;OAEG;IACG,gBAAgB,CAClB,MAAM,EAAE,4BAA4B,GACrC,OAAO,CAAC,sBAAsB,CAAC;IAoB5B,oBAAoB,CACtB,MAAM,EAAE,iCAAiC,GAC1C,OAAO,CAAC,sBAAsB,CAAC;IAoB5B,sBAAsB,CACxB,MAAM,EAAE,mCAAmC,GAC5C,OAAO,CAAC,sBAAsB,CAAC;CAmBrC"}
+{"version":3,"file":"SignupApiClient.d.ts","sourceRoot":"","sources":["../../../../../../src/custom_auth/core/network_client/custom_auth_api/SignupApiClient.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACnD,OAAO,EAAE,WAAW,EAAE,MAAM,+BAA+B,CAAC;AAE5D,OAAO,EACH,sBAAsB,EACtB,mCAAmC,EACnC,4BAA4B,EAC5B,iCAAiC,EACjC,kBAAkB,EACrB,MAAM,4BAA4B,CAAC;AACpC,OAAO,EACH,uBAAuB,EACvB,sBAAsB,EACtB,mBAAmB,EACtB,MAAM,6BAA6B,CAAC;AAErC,qBAAa,eAAgB,SAAQ,aAAa;IAC9C,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAS;gBAGnC,oBAAoB,EAAE,MAAM,EAC5B,QAAQ,EAAE,MAAM,EAChB,UAAU,EAAE,WAAW,EACvB,YAAY,CAAC,EAAE,MAAM,EACrB,wBAAwB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC;IAWrD;;OAEG;IACG,KAAK,CAAC,MAAM,EAAE,kBAAkB,GAAG,OAAO,CAAC,mBAAmB,CAAC;IA0BrE;;OAEG;IACG,gBAAgB,CAClB,MAAM,EAAE,sBAAsB,GAC/B,OAAO,CAAC,uBAAuB,CAAC;IAmBnC;;OAEG;IACG,gBAAgB,CAClB,MAAM,EAAE,4BAA4B,GACrC,OAAO,CAAC,sBAAsB,CAAC;IAoB5B,oBAAoB,CACtB,MAAM,EAAE,iCAAiC,GAC1C,OAAO,CAAC,sBAAsB,CAAC;IAoB5B,sBAAsB,CACxB,MAAM,EAAE,mCAAmC,GAC5C,OAAO,CAAC,sBAAsB,CAAC;CAmBrC"}

package/lib/types/custom_auth/core/utils/UrlUtils.d.ts

@@ -1,3 +1,3 @@
 export declare function parseUrl(url: string): URL;
-export declare function buildUrl(baseUrl: string, path: string): URL;
+export declare function buildUrl(baseUrl: string, path: string, queryParams?: Record<string, string>): URL;
 //# sourceMappingURL=UrlUtils.d.ts.map

package/lib/types/custom_auth/core/utils/UrlUtils.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"UrlUtils.d.ts","sourceRoot":"","sources":["../../../../../src/custom_auth/core/utils/UrlUtils.ts"],"names":[],"mappings":"AAQA,wBAAgB,QAAQ,CAAC,GAAG,EAAE,MAAM,GAAG,GAAG,CASzC;AAED,wBAAgB,QAAQ,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,GAAG,CAK3D"}
+{"version":3,"file":"UrlUtils.d.ts","sourceRoot":"","sources":["../../../../../src/custom_auth/core/utils/UrlUtils.ts"],"names":[],"mappings":"AAQA,wBAAgB,QAAQ,CAAC,GAAG,EAAE,MAAM,GAAG,GAAG,CASzC;AAED,wBAAgB,QAAQ,CACpB,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,MAAM,EACZ,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GACrC,GAAG,CAeL"}

package/lib/types/custom_auth/reset_password/auth_flow/error_type/ResetPasswordError.d.ts

@@ -15,11 +15,6 @@ export declare class ResetPasswordError extends AuthActionErrorBase {
      * @returns {boolean} True if the error is due to the provided challenge type is not supported, false otherwise.
      */
     isUnsupportedChallengeType(): boolean;
-    /**
-     * Check if client app supports the challenge type configured in Entra.
-     * @returns {boolean} True if client app doesn't support the challenge type configured in Entra, "loginPopup" function is required to continue the operation.
-     */
-    isRedirectRequired(): boolean;
 }
 export declare class ResetPasswordSubmitPasswordError extends AuthActionErrorBase {
     /**
@@ -39,17 +34,7 @@ export declare class ResetPasswordSubmitCodeError extends AuthActionErrorBase {
      * @returns {boolean} True if the provided code is invalid, false otherwise.
      */
     isInvalidCode(): boolean;
-    /**
-     * Check if client app supports the challenge type configured in Entra.
-     * @returns {boolean} True if client app doesn't support the challenge type configured in Entra, "loginPopup" function is required to continue the operation.
-     */
-    isRedirectRequired(): boolean;
 }
 export declare class ResetPasswordResendCodeError extends AuthActionErrorBase {
-    /**
-     * Check if client app supports the challenge type configured in Entra.
-     * @returns {boolean} True if client app doesn't support the challenge type configured in Entra, "loginPopup" function is required to continue the operation.
-     */
-    isRedirectRequired(): boolean;
 }
 //# sourceMappingURL=ResetPasswordError.d.ts.map

package/lib/types/custom_auth/reset_password/auth_flow/error_type/ResetPasswordError.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ResetPasswordError.d.ts","sourceRoot":"","sources":["../../../../../../src/custom_auth/reset_password/auth_flow/error_type/ResetPasswordError.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,mBAAmB,EAAE,MAAM,8CAA8C,CAAC;AAInF,qBAAa,kBAAmB,SAAQ,mBAAmB;IACvD;;;OAGG;IACH,cAAc,IAAI,OAAO;IAIzB;;;OAGG;IACH,iBAAiB,IAAI,OAAO;IAI5B;;;OAGG;IACH,0BAA0B,IAAI,OAAO;IAIrC;;;OAGG;IACH,kBAAkB,IAAI,OAAO;CAGhC;AAED,qBAAa,gCAAiC,SAAQ,mBAAmB;IACrE;;;OAGG;IACH,iBAAiB,IAAI,OAAO;IAM5B;;;OAGG;IACH,qBAAqB,IAAI,OAAO;CASnC;AAED,qBAAa,4BAA6B,SAAQ,mBAAmB;IACjE;;;OAGG;IACH,aAAa,IAAI,OAAO;IAIxB;;;OAGG;IACH,kBAAkB,IAAI,OAAO;CAGhC;AAED,qBAAa,4BAA6B,SAAQ,mBAAmB;IACjE;;;OAGG;IACH,kBAAkB,IAAI,OAAO;CAGhC"}
+{"version":3,"file":"ResetPasswordError.d.ts","sourceRoot":"","sources":["../../../../../../src/custom_auth/reset_password/auth_flow/error_type/ResetPasswordError.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,mBAAmB,EAAE,MAAM,8CAA8C,CAAC;AAInF,qBAAa,kBAAmB,SAAQ,mBAAmB;IACvD;;;OAGG;IACH,cAAc,IAAI,OAAO;IAIzB;;;OAGG;IACH,iBAAiB,IAAI,OAAO;IAI5B;;;OAGG;IACH,0BAA0B,IAAI,OAAO;CAGxC;AAED,qBAAa,gCAAiC,SAAQ,mBAAmB;IACrE;;;OAGG;IACH,iBAAiB,IAAI,OAAO;IAM5B;;;OAGG;IACH,qBAAqB,IAAI,OAAO;CASnC;AAED,qBAAa,4BAA6B,SAAQ,mBAAmB;IACjE;;;OAGG;IACH,aAAa,IAAI,OAAO;CAG3B;AAED,qBAAa,4BAA6B,SAAQ,mBAAmB;CAAG"}

package/lib/types/custom_auth/sign_in/auth_flow/error_type/SignInError.d.ts

@@ -25,11 +25,6 @@ export declare class SignInError extends AuthActionErrorBase {
      * @returns {boolean} True if the error is due to the provided challenge type is not supported, false otherwise.
      */
     isUnsupportedChallengeType(): boolean;
-    /**
-     * Check if client app supports the challenge type configured in Entra.
-     * @returns {boolean} True if "loginPopup" function is required to continue sthe operation.
-     */
-    isRedirectRequired(): boolean;
 }
 export declare class SignInSubmitPasswordError extends AuthActionErrorBase {
     /**
@@ -46,10 +41,5 @@ export declare class SignInSubmitCodeError extends AuthActionErrorBase {
     isInvalidCode(): boolean;
 }
 export declare class SignInResendCodeError extends AuthActionErrorBase {
-    /**
-     * Check if client app supports the challenge type configured in Entra.
-     * @returns {boolean} True if "loginPopup" function is required to continue sthe operation.
-     */
-    isRedirectRequired(): boolean;
 }
 //# sourceMappingURL=SignInError.d.ts.map

package/lib/types/custom_auth/sign_in/auth_flow/error_type/SignInError.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"SignInError.d.ts","sourceRoot":"","sources":["../../../../../../src/custom_auth/sign_in/auth_flow/error_type/SignInError.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,mBAAmB,EAAE,MAAM,8CAA8C,CAAC;AAGnF,qBAAa,WAAY,SAAQ,mBAAmB;IAChD;;;OAGG;IACH,cAAc,IAAI,OAAO;IAIzB;;;OAGG;IACH,iBAAiB,IAAI,OAAO;IAI5B;;;OAGG;IACH,mBAAmB,IAAI,OAAO;IAI9B;;;OAGG;IACH,uBAAuB,IAAI,OAAO;IAIlC;;;OAGG;IACH,0BAA0B,IAAI,OAAO;IAIrC;;;OAGG;IACH,kBAAkB,IAAI,OAAO;CAGhC;AAED,qBAAa,yBAA0B,SAAQ,mBAAmB;IAC9D;;;OAGG;IACH,iBAAiB,IAAI,OAAO;CAG/B;AAED,qBAAa,qBAAsB,SAAQ,mBAAmB;IAC1D;;;OAGG;IACH,aAAa,IAAI,OAAO;CAG3B;AAED,qBAAa,qBAAsB,SAAQ,mBAAmB;IAC1D;;;OAGG;IACH,kBAAkB,IAAI,OAAO;CAGhC"}
+{"version":3,"file":"SignInError.d.ts","sourceRoot":"","sources":["../../../../../../src/custom_auth/sign_in/auth_flow/error_type/SignInError.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,mBAAmB,EAAE,MAAM,8CAA8C,CAAC;AAGnF,qBAAa,WAAY,SAAQ,mBAAmB;IAChD;;;OAGG;IACH,cAAc,IAAI,OAAO;IAIzB;;;OAGG;IACH,iBAAiB,IAAI,OAAO;IAI5B;;;OAGG;IACH,mBAAmB,IAAI,OAAO;IAI9B;;;OAGG;IACH,uBAAuB,IAAI,OAAO;IAIlC;;;OAGG;IACH,0BAA0B,IAAI,OAAO;CAGxC;AAED,qBAAa,yBAA0B,SAAQ,mBAAmB;IAC9D;;;OAGG;IACH,iBAAiB,IAAI,OAAO;CAG/B;AAED,qBAAa,qBAAsB,SAAQ,mBAAmB;IAC1D;;;OAGG;IACH,aAAa,IAAI,OAAO;CAG3B;AAED,qBAAa,qBAAsB,SAAQ,mBAAmB;CAAG"}

package/lib/types/custom_auth/sign_up/auth_flow/error_type/SignUpError.d.ts

@@ -30,11 +30,6 @@ export declare class SignUpError extends AuthActionErrorBase {
      * @returns {boolean} True if the error is due to the provided challenge type is not supported, false otherwise.
      */
     isUnsupportedChallengeType(): boolean;
-    /**
-     * Check if client app supports the challenge type configured in Entra.
-     * @returns {boolean} True if "loginPopup" function is required to continue sthe operation.
-     */
-    isRedirectRequired(): boolean;
 }
 export declare class SignUpSubmitPasswordError extends AuthActionErrorBase {
     /**
@@ -42,11 +37,6 @@ export declare class SignUpSubmitPasswordError extends AuthActionErrorBase {
      * @returns {boolean} True if the error is due to the password being invalid, false otherwise.
      */
     isInvalidPassword(): boolean;
-    /**
-     * Check if client app supports the challenge type configured in Entra.
-     * @returns {boolean} True if "loginPopup" function is required to continue sthe operation.
-     */
-    isRedirectRequired(): boolean;
 }
 export declare class SignUpSubmitCodeError extends AuthActionErrorBase {
     /**
@@ -54,11 +44,6 @@ export declare class SignUpSubmitCodeError extends AuthActionErrorBase {
      * @returns {boolean} True if the provided code is invalid, false otherwise.
      */
     isInvalidCode(): boolean;
-    /**
-     * Check if client app supports the challenge type configured in Entra.
-     * @returns {boolean} True if "loginPopup" function is required to continue sthe operation.
-     */
-    isRedirectRequired(): boolean;
 }
 export declare class SignUpSubmitAttributesError extends AuthActionErrorBase {
     /**
@@ -71,17 +56,7 @@ export declare class SignUpSubmitAttributesError extends AuthActionErrorBase {
      * @returns {boolean} True if the error is due to the attributes validation failed, false otherwise.
      */
     isAttributesValidationFailed(): boolean;
-    /**
-     * Check if client app supports the challenge type configured in Entra.
-     * @returns {boolean} True if "loginPopup" function is required to continue sthe operation.
-     */
-    isRedirectRequired(): boolean;
 }
 export declare class SignUpResendCodeError extends AuthActionErrorBase {
-    /**
-     * Check if client app supports the challenge type configured in Entra.
-     * @returns {boolean} True if "loginPopup" function is required to continue sthe operation.
-     */
-    isRedirectRequired(): boolean;
 }
 //# sourceMappingURL=SignUpError.d.ts.map

package/lib/types/custom_auth/sign_up/auth_flow/error_type/SignUpError.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"SignUpError.d.ts","sourceRoot":"","sources":["../../../../../../src/custom_auth/sign_up/auth_flow/error_type/SignUpError.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,mBAAmB,EAAE,MAAM,8CAA8C,CAAC;AAEnF,qBAAa,WAAY,SAAQ,mBAAmB;IAChD;;;OAGG;IACH,mBAAmB,IAAI,OAAO;IAI9B;;;OAGG;IACH,iBAAiB,IAAI,OAAO;IAI5B;;;OAGG;IACH,iBAAiB,IAAI,OAAO;IAI5B;;;OAGG;IACH,2BAA2B,IAAI,OAAO;IAItC;;;OAGG;IACH,4BAA4B,IAAI,OAAO;IAIvC;;;OAGG;IACH,0BAA0B,IAAI,OAAO;IAIrC;;;OAGG;IACH,kBAAkB,IAAI,OAAO;CAGhC;AAED,qBAAa,yBAA0B,SAAQ,mBAAmB;IAC9D;;;OAGG;IACH,iBAAiB,IAAI,OAAO;IAM5B;;;OAGG;IACH,kBAAkB,IAAI,OAAO;CAGhC;AAED,qBAAa,qBAAsB,SAAQ,mBAAmB;IAC1D;;;OAGG;IACH,aAAa,IAAI,OAAO;IAIxB;;;OAGG;IACH,kBAAkB,IAAI,OAAO;CAGhC;AAED,qBAAa,2BAA4B,SAAQ,mBAAmB;IAChE;;;OAGG;IACH,2BAA2B,IAAI,OAAO;IAItC;;;OAGG;IACH,4BAA4B,IAAI,OAAO;IAIvC;;;OAGG;IACH,kBAAkB,IAAI,OAAO;CAGhC;AAED,qBAAa,qBAAsB,SAAQ,mBAAmB;IAC1D;;;OAGG;IACH,kBAAkB,IAAI,OAAO;CAGhC"}
+{"version":3,"file":"SignUpError.d.ts","sourceRoot":"","sources":["../../../../../../src/custom_auth/sign_up/auth_flow/error_type/SignUpError.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,mBAAmB,EAAE,MAAM,8CAA8C,CAAC;AAEnF,qBAAa,WAAY,SAAQ,mBAAmB;IAChD;;;OAGG;IACH,mBAAmB,IAAI,OAAO;IAI9B;;;OAGG;IACH,iBAAiB,IAAI,OAAO;IAI5B;;;OAGG;IACH,iBAAiB,IAAI,OAAO;IAI5B;;;OAGG;IACH,2BAA2B,IAAI,OAAO;IAItC;;;OAGG;IACH,4BAA4B,IAAI,OAAO;IAIvC;;;OAGG;IACH,0BAA0B,IAAI,OAAO;CAGxC;AAED,qBAAa,yBAA0B,SAAQ,mBAAmB;IAC9D;;;OAGG;IACH,iBAAiB,IAAI,OAAO;CAK/B;AAED,qBAAa,qBAAsB,SAAQ,mBAAmB;IAC1D;;;OAGG;IACH,aAAa,IAAI,OAAO;CAG3B;AAED,qBAAa,2BAA4B,SAAQ,mBAAmB;IAChE;;;OAGG;IACH,2BAA2B,IAAI,OAAO;IAItC;;;OAGG;IACH,4BAA4B,IAAI,OAAO;CAG1C;AAED,qBAAa,qBAAsB,SAAQ,mBAAmB;CAAG"}

package/lib/types/packageMetadata.d.ts

@@ -1,3 +1,3 @@
 export declare const name = "@azure/msal-browser";
-export declare const version = "4.21.0";
+export declare const version = "4.22.0";
 //# sourceMappingURL=packageMetadata.d.ts.map

package/package.json

@@ -10,7 +10,7 @@
     "type": "git",
     "url": "https://github.com/AzureAD/microsoft-authentication-library-for-js.git"
   },
-  "version": "4.21.0",
+  "version": "4.22.0",
   "description": "Microsoft Authentication Library for js",
   "keywords": [
     "implicit",

package/src/custom_auth/configuration/CustomAuthConfiguration.ts

@@ -11,6 +11,8 @@ import {
 export type CustomAuthOptions = {
     challengeTypes?: Array<string>;
     authApiProxyUrl: string;
+    customAuthApiQueryParams?: Record<string, string>;
+    capabilities?: Array<string>;
 };
 
 export type CustomAuthConfiguration = Configuration & {

package/src/custom_auth/controller/CustomAuthStandardController.ts

@@ -112,7 +112,9 @@ export class CustomAuthStandardController
                 new CustomAuthApiClient(
                     this.authority.getCustomAuthApiDomain(),
                     this.customAuthConfig.auth.clientId,
-                    new FetchHttpClient(this.logger)
+                    new FetchHttpClient(this.logger),
+                    this.customAuthConfig.customAuth?.capabilities?.join(" "),
+                    this.customAuthConfig.customAuth?.customAuthApiQueryParams
                 ),
             this.authority
         );

package/src/custom_auth/core/auth_flow/AuthFlowErrorBase.ts

@@ -149,4 +149,12 @@ export abstract class AuthActionErrorBase extends AuthFlowErrorBase {
     isTokenExpired(): boolean {
         return this.isTokenExpiredError();
     }
+
+    /**
+     * Check if client app supports the challenge type configured in Entra.
+     * @returns {boolean} True if client app doesn't support the challenge type configured in Entra, "loginPopup" function is required to continue the operation.
+     */
+    isRedirectRequired(): boolean {
+        return this.isRedirectError();
+    }
 }

package/src/custom_auth/core/error/CustomAuthApiError.ts

@@ -10,10 +10,11 @@ import { CustomAuthError } from "./CustomAuthError.js";
  * Error when no required authentication method by Microsoft Entra is supported
  */
 export class RedirectError extends CustomAuthError {
-    constructor(correlationId?: string) {
+    constructor(correlationId?: string, public redirectReason?: string) {
         super(
             "redirect",
-            "No required authentication method by Microsoft Entra is supported, a fallback to the web-based authentication flow is needed.",
+            redirectReason ||
+                "Redirect Error, a fallback to the browser-delegated authentication is needed. Use loginPopup instead.",
             correlationId
         );
         Object.setPrototypeOf(this, RedirectError.prototype);

package/src/custom_auth/core/interaction_client/CustomAuthInteractionClientBase.ts

@@ -64,7 +64,7 @@ export abstract class CustomAuthInteractionClientBase extends StandardInteractio
 
     protected getScopes(scopes: string[] | undefined): string[] {
         if (!!scopes && scopes.length > 0) {
-            scopes;
+            return scopes;
         }
 
         return [

package/src/custom_auth/core/network_client/custom_auth_api/BaseApiClient.ts

@@ -27,7 +27,8 @@ export abstract class BaseApiClient {
     constructor(
         baseUrl: string,
         private readonly clientId: string,
-        private httpClient: IHttpClient
+        private httpClient: IHttpClient,
+        private customAuthApiQueryParams?: Record<string, string>
     ) {
         this.baseRequestUrl = parseUrl(
             !baseUrl.endsWith("/") ? `${baseUrl}/` : baseUrl
@@ -45,7 +46,11 @@ export abstract class BaseApiClient {
             ...data,
         });
         const headers = this.getCommonHeaders(correlationId, telemetryManager);
-        const url = buildUrl(this.baseRequestUrl.href, endpoint);
+        const url = buildUrl(
+            this.baseRequestUrl.href,
+            endpoint,
+            this.customAuthApiQueryParams
+        );
 
         let response: Response;
 
@@ -128,7 +133,10 @@ export abstract class BaseApiClient {
                 typeof responseData === "object" &&
                 responseData.challenge_type === ChallengeType.REDIRECT
             ) {
-                throw new RedirectError(correlationId);
+                throw new RedirectError(
+                    correlationId,
+                    responseData.redirect_reason
+                );
             }
 
             return {

package/src/custom_auth/core/network_client/custom_auth_api/CustomAuthApiClient.ts

@@ -17,22 +17,30 @@ export class CustomAuthApiClient implements ICustomAuthApiClient {
     constructor(
         customAuthApiBaseUrl: string,
         clientId: string,
-        httpClient: IHttpClient
+        httpClient: IHttpClient,
+        capabilities?: string,
+        customAuthApiQueryParams?: Record<string, string>
     ) {
         this.signInApi = new SignInApiClient(
             customAuthApiBaseUrl,
             clientId,
-            httpClient
+            httpClient,
+            capabilities,
+            customAuthApiQueryParams
         );
         this.signUpApi = new SignupApiClient(
             customAuthApiBaseUrl,
             clientId,
-            httpClient
+            httpClient,
+            capabilities,
+            customAuthApiQueryParams
         );
         this.resetPasswordApi = new ResetPasswordApiClient(
             customAuthApiBaseUrl,
             clientId,
-            httpClient
+            httpClient,
+            capabilities,
+            customAuthApiQueryParams
         );
     }
 }

package/src/custom_auth/core/network_client/custom_auth_api/ResetPasswordApiClient.ts

@@ -9,6 +9,7 @@ import {
 } from "../../../CustomAuthConstants.js";
 import { CustomAuthApiError } from "../../error/CustomAuthApiError.js";
 import { BaseApiClient } from "./BaseApiClient.js";
+import { IHttpClient } from "../http_client/IHttpClient.js";
 import * as CustomAuthApiEndpoint from "./CustomAuthApiEndpoint.js";
 import * as CustomAuthApiErrorCode from "./types/ApiErrorCodes.js";
 import {
@@ -27,6 +28,24 @@ import {
 } from "./types/ApiResponseTypes.js";
 
 export class ResetPasswordApiClient extends BaseApiClient {
+    private readonly capabilities?: string;
+
+    constructor(
+        customAuthApiBaseUrl: string,
+        clientId: string,
+        httpClient: IHttpClient,
+        capabilities?: string,
+        customAuthApiQueryParams?: Record<string, string>
+    ) {
+        super(
+            customAuthApiBaseUrl,
+            clientId,
+            httpClient,
+            customAuthApiQueryParams
+        );
+        this.capabilities = capabilities;
+    }
+
     /**
      * Start the password reset flow
      */
@@ -38,6 +57,9 @@ export class ResetPasswordApiClient extends BaseApiClient {
             {
                 challenge_type: params.challenge_type,
                 username: params.username,
+                ...(this.capabilities && {
+                    capabilities: this.capabilities,
+                }),
             },
             params.telemetryManager,
             params.correlationId

package/src/custom_auth/core/network_client/custom_auth_api/SignInApiClient.ts

@@ -7,6 +7,7 @@ import { ServerTelemetryManager } from "@azure/msal-common/browser";
 import { GrantType } from "../../../CustomAuthConstants.js";
 import { CustomAuthApiError } from "../../error/CustomAuthApiError.js";
 import { BaseApiClient } from "./BaseApiClient.js";
+import { IHttpClient } from "../http_client/IHttpClient.js";
 import * as CustomAuthApiEndpoint from "./CustomAuthApiEndpoint.js";
 import * as CustomAuthApiErrorCode from "./types/ApiErrorCodes.js";
 import {
@@ -23,6 +24,24 @@ import {
 } from "./types/ApiResponseTypes.js";
 
 export class SignInApiClient extends BaseApiClient {
+    private readonly capabilities?: string;
+
+    constructor(
+        customAuthApiBaseUrl: string,
+        clientId: string,
+        httpClient: IHttpClient,
+        capabilities?: string,
+        customAuthApiQueryParams?: Record<string, string>
+    ) {
+        super(
+            customAuthApiBaseUrl,
+            clientId,
+            httpClient,
+            customAuthApiQueryParams
+        );
+        this.capabilities = capabilities;
+    }
+
     /**
      * Initiates the sign-in flow
      * @param username User's email
@@ -36,6 +55,9 @@ export class SignInApiClient extends BaseApiClient {
             {
                 username: params.username,
                 challenge_type: params.challenge_type,
+                ...(this.capabilities && {
+                    capabilities: this.capabilities,
+                }),
             },
             params.telemetryManager,
             params.correlationId

package/src/custom_auth/core/network_client/custom_auth_api/SignupApiClient.ts

@@ -5,6 +5,7 @@
 
 import { GrantType } from "../../../CustomAuthConstants.js";
 import { BaseApiClient } from "./BaseApiClient.js";
+import { IHttpClient } from "../http_client/IHttpClient.js";
 import * as CustomAuthApiEndpoint from "./CustomAuthApiEndpoint.js";
 import {
     SignUpChallengeRequest,
@@ -20,6 +21,24 @@ import {
 } from "./types/ApiResponseTypes.js";
 
 export class SignupApiClient extends BaseApiClient {
+    private readonly capabilities?: string;
+
+    constructor(
+        customAuthApiBaseUrl: string,
+        clientId: string,
+        httpClient: IHttpClient,
+        capabilities?: string,
+        customAuthApiQueryParams?: Record<string, string>
+    ) {
+        super(
+            customAuthApiBaseUrl,
+            clientId,
+            httpClient,
+            customAuthApiQueryParams
+        );
+        this.capabilities = capabilities;
+    }
+
     /**
      * Start the sign-up flow
      */
@@ -33,6 +52,9 @@ export class SignupApiClient extends BaseApiClient {
                     attributes: JSON.stringify(params.attributes),
                 }),
                 challenge_type: params.challenge_type,
+                ...(this.capabilities && {
+                    capabilities: this.capabilities,
+                }),
             },
             params.telemetryManager,
             params.correlationId

package/src/custom_auth/core/utils/UrlUtils.ts

@@ -17,9 +17,23 @@ export function parseUrl(url: string): URL {
     }
 }
 
-export function buildUrl(baseUrl: string, path: string): URL {
+export function buildUrl(
+    baseUrl: string,
+    path: string,
+    queryParams?: Record<string, string>
+): URL {
     const newBaseUrl = !baseUrl.endsWith("/") ? `${baseUrl}/` : baseUrl;
     const newPath = path.startsWith("/") ? path.slice(1) : path;
     const url = new URL(newPath, newBaseUrl);
+
+    // Add query parameters if provided
+    if (queryParams) {
+        Object.entries(queryParams).forEach(([key, value]) => {
+            if (value !== undefined && value !== null) {
+                url.searchParams.set(key, String(value));
+            }
+        });
+    }
+
     return url;
 }