@azure/msal-browser 4.22.1 → 4.23.0

package/dist/custom-auth-path/custom_auth/core/auth_flow/jit/state/AuthMethodRegistrationCompletedState.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"AuthMethodRegistrationCompletedState.mjs","sources":["../../../../../../../../src/custom_auth/core/auth_flow/jit/state/AuthMethodRegistrationCompletedState.ts"],"sourcesContent":[null],"names":[],"mappings":";;;;AAAA;;;AAGG;AAIG,MAAO,oCAAqC,SAAQ,iBAAiB,CAAA;AAAG;;;;"}

package/dist/custom-auth-path/custom_auth/core/auth_flow/jit/state/AuthMethodRegistrationFailedState.d.ts

@@ -0,0 +1,4 @@
+import { AuthFlowStateBase } from "../../AuthFlowState.js";
+export declare class AuthMethodRegistrationFailedState extends AuthFlowStateBase {
+}
+//# sourceMappingURL=AuthMethodRegistrationFailedState.d.ts.map

package/dist/custom-auth-path/custom_auth/core/auth_flow/jit/state/AuthMethodRegistrationFailedState.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"AuthMethodRegistrationFailedState.d.ts","sourceRoot":"","sources":["../../../../../../../src/custom_auth/core/auth_flow/jit/state/AuthMethodRegistrationFailedState.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAE3D,qBAAa,iCAAkC,SAAQ,iBAAiB;CAAG"}

package/dist/custom-auth-path/custom_auth/core/auth_flow/jit/state/AuthMethodRegistrationFailedState.mjs

@@ -0,0 +1,13 @@
+/*! @azure/msal-browser v4.23.0 2025-09-17 */
+'use strict';
+import { AuthFlowStateBase } from '../../AuthFlowState.mjs';
+
+/*
+ * Copyright (c) Microsoft Corporation. All rights reserved.
+ * Licensed under the MIT License.
+ */
+class AuthMethodRegistrationFailedState extends AuthFlowStateBase {
+}
+
+export { AuthMethodRegistrationFailedState };
+//# sourceMappingURL=AuthMethodRegistrationFailedState.mjs.map

package/dist/custom-auth-path/custom_auth/core/auth_flow/jit/state/AuthMethodRegistrationFailedState.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"AuthMethodRegistrationFailedState.mjs","sources":["../../../../../../../../src/custom_auth/core/auth_flow/jit/state/AuthMethodRegistrationFailedState.ts"],"sourcesContent":[null],"names":[],"mappings":";;;;AAAA;;;AAGG;AAIG,MAAO,iCAAkC,SAAQ,iBAAiB,CAAA;AAAG;;;;"}

package/dist/custom-auth-path/custom_auth/core/auth_flow/jit/state/AuthMethodRegistrationState.d.ts

@@ -0,0 +1,74 @@
+import { AuthMethodRegistrationStateParameters, AuthMethodRegistrationRequiredStateParameters, AuthMethodVerificationRequiredStateParameters } from "./AuthMethodRegistrationStateParameters.js";
+import { AuthMethodDetails } from "../AuthMethodDetails.js";
+import { AuthenticationMethod } from "../../../network_client/custom_auth_api/types/ApiResponseTypes.js";
+import { AuthFlowActionRequiredStateBase } from "../../AuthFlowState.js";
+import { AuthMethodRegistrationChallengeMethodResult } from "../result/AuthMethodRegistrationChallengeMethodResult.js";
+import { AuthMethodRegistrationSubmitChallengeResult } from "../result/AuthMethodRegistrationSubmitChallengeResult.js";
+/**
+ * Abstract base class for authentication method registration states.
+ */
+declare abstract class AuthMethodRegistrationState<TParameters extends AuthMethodRegistrationStateParameters> extends AuthFlowActionRequiredStateBase<TParameters> {
+    /**
+     * Internal method to challenge an authentication method.
+     * @param authMethodDetails The authentication method details to challenge.
+     * @returns Promise that resolves to AuthMethodRegistrationChallengeMethodResult.
+     */
+    protected challengeAuthMethodInternal(authMethodDetails: AuthMethodDetails): Promise<AuthMethodRegistrationChallengeMethodResult>;
+}
+/**
+ * State indicating that authentication method registration is required.
+ */
+export declare class AuthMethodRegistrationRequiredState extends AuthMethodRegistrationState<AuthMethodRegistrationRequiredStateParameters> {
+    /**
+     * Gets the available authentication methods for registration.
+     * @returns Array of available authentication methods.
+     * @warning This API is experimental. It may be changed in the future without notice. Do not use in production applications.
+     */
+    getAuthMethods(): AuthenticationMethod[];
+    /**
+     * Challenges an authentication method for registration.
+     * @param authMethodDetails The authentication method details to challenge.
+     * @returns Promise that resolves to AuthMethodRegistrationChallengeMethodResult.
+     * @warning This API is experimental. It may be changed in the future without notice. Do not use in production applications.
+     */
+    challengeAuthMethod(authMethodDetails: AuthMethodDetails): Promise<AuthMethodRegistrationChallengeMethodResult>;
+}
+/**
+ * State indicating that verification is required for the challenged authentication method.
+ */
+export declare class AuthMethodVerificationRequiredState extends AuthMethodRegistrationState<AuthMethodVerificationRequiredStateParameters> {
+    /**
+     * Gets the length of the expected verification code.
+     * @returns The code length.
+     * @warning This API is experimental. It may be changed in the future without notice. Do not use in production applications.
+     */
+    getCodeLength(): number;
+    /**
+     * Gets the channel through which the challenge was sent.
+     * @returns The challenge channel (e.g., "email").
+     * @warning This API is experimental. It may be changed in the future without notice. Do not use in production applications.
+     */
+    getChannel(): string;
+    /**
+     * Gets the target label indicating where the challenge was sent.
+     * @returns The challenge target label (e.g., masked email address).
+     * @warning This API is experimental. It may be changed in the future without notice. Do not use in production applications.
+     */
+    getSentTo(): string;
+    /**
+     * Submits the verification challenge to complete the authentication method registration.
+     * @param code The verification code entered by the user.
+     * @returns Promise that resolves to AuthMethodRegistrationSubmitChallengeResult.
+     * @warning This API is experimental. It may be changed in the future without notice. Do not use in production applications.
+     */
+    submitChallenge(code: string): Promise<AuthMethodRegistrationSubmitChallengeResult>;
+    /**
+     * Challenges a different authentication method for registration.
+     * @param authMethodDetails The authentication method details to challenge.
+     * @returns Promise that resolves to AuthMethodRegistrationChallengeMethodResult.
+     * @warning This API is experimental. It may be changed in the future without notice. Do not use in production applications.
+     */
+    challengeAuthMethod(authMethodDetails: AuthMethodDetails): Promise<AuthMethodRegistrationChallengeMethodResult>;
+}
+export {};
+//# sourceMappingURL=AuthMethodRegistrationState.d.ts.map

package/dist/custom-auth-path/custom_auth/core/auth_flow/jit/state/AuthMethodRegistrationState.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"AuthMethodRegistrationState.d.ts","sourceRoot":"","sources":["../../../../../../../src/custom_auth/core/auth_flow/jit/state/AuthMethodRegistrationState.ts"],"names":[],"mappings":"AAKA,OAAO,EACH,qCAAqC,EACrC,6CAA6C,EAC7C,6CAA6C,EAChD,MAAM,4CAA4C,CAAC;AACpD,OAAO,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAW5D,OAAO,EAAE,oBAAoB,EAAE,MAAM,mEAAmE,CAAC;AACzG,OAAO,EAAE,+BAA+B,EAAE,MAAM,wBAAwB,CAAC;AAEzE,OAAO,EAAE,2CAA2C,EAAE,MAAM,0DAA0D,CAAC;AACvH,OAAO,EAAE,2CAA2C,EAAE,MAAM,0DAA0D,CAAC;AAGvH;;GAEG;AACH,uBAAe,2BAA2B,CACtC,WAAW,SAAS,qCAAqC,CAC3D,SAAQ,+BAA+B,CAAC,WAAW,CAAC;IAClD;;;;OAIG;cACa,2BAA2B,CACvC,iBAAiB,EAAE,iBAAiB,GACrC,OAAO,CAAC,2CAA2C,CAAC;CAyF1D;AAED;;GAEG;AACH,qBAAa,mCAAoC,SAAQ,2BAA2B,CAAC,6CAA6C,CAAC;IAC/H;;;;OAIG;IACH,cAAc,IAAI,oBAAoB,EAAE;IAIxC;;;;;OAKG;IACG,mBAAmB,CACrB,iBAAiB,EAAE,iBAAiB,GACrC,OAAO,CAAC,2CAA2C,CAAC;CAG1D;AAED;;GAEG;AACH,qBAAa,mCAAoC,SAAQ,2BAA2B,CAAC,6CAA6C,CAAC;IAC/H;;;;OAIG;IACH,aAAa,IAAI,MAAM;IAIvB;;;;OAIG;IACH,UAAU,IAAI,MAAM;IAIpB;;;;OAIG;IACH,SAAS,IAAI,MAAM;IAInB;;;;;OAKG;IACG,eAAe,CACjB,IAAI,EAAE,MAAM,GACb,OAAO,CAAC,2CAA2C,CAAC;IAmDvD;;;;;OAKG;IACG,mBAAmB,CACrB,iBAAiB,EAAE,iBAAiB,GACrC,OAAO,CAAC,2CAA2C,CAAC;CAG1D"}

package/dist/custom-auth-path/custom_auth/core/auth_flow/jit/state/AuthMethodRegistrationState.mjs

@@ -0,0 +1,166 @@
+/*! @azure/msal-browser v4.23.0 2025-09-17 */
+'use strict';
+import { CustomAuthAccountData } from '../../../../get_account/auth_flow/CustomAuthAccountData.mjs';
+import { JIT_VERIFICATION_REQUIRED_RESULT_TYPE, JIT_COMPLETED_RESULT_TYPE } from '../../../interaction_client/jit/result/JitActionResult.mjs';
+import { UnexpectedError } from '../../../error/UnexpectedError.mjs';
+import { AuthFlowActionRequiredStateBase } from '../../AuthFlowState.mjs';
+import { GrantType } from '../../../../CustomAuthConstants.mjs';
+import { AuthMethodRegistrationChallengeMethodResult } from '../result/AuthMethodRegistrationChallengeMethodResult.mjs';
+import { AuthMethodRegistrationSubmitChallengeResult } from '../result/AuthMethodRegistrationSubmitChallengeResult.mjs';
+import { AuthMethodRegistrationCompletedState } from './AuthMethodRegistrationCompletedState.mjs';
+
+/*
+ * Copyright (c) Microsoft Corporation. All rights reserved.
+ * Licensed under the MIT License.
+ */
+/**
+ * Abstract base class for authentication method registration states.
+ */
+class AuthMethodRegistrationState extends AuthFlowActionRequiredStateBase {
+    /**
+     * Internal method to challenge an authentication method.
+     * @param authMethodDetails The authentication method details to challenge.
+     * @returns Promise that resolves to AuthMethodRegistrationChallengeMethodResult.
+     */
+    async challengeAuthMethodInternal(authMethodDetails) {
+        try {
+            this.stateParameters.logger.verbose(`Challenging authentication method - '${authMethodDetails.authMethodType.id}' for auth method registration.`, this.stateParameters.correlationId);
+            const challengeParams = {
+                correlationId: this.stateParameters.correlationId,
+                continuationToken: this.stateParameters.continuationToken ?? "",
+                authMethod: authMethodDetails.authMethodType,
+                verificationContact: authMethodDetails.verificationContact,
+                scopes: this.stateParameters.scopes ?? [],
+                username: this.stateParameters.username,
+                claims: this.stateParameters.claims,
+            };
+            const result = await this.stateParameters.jitClient.challengeAuthMethod(challengeParams);
+            this.stateParameters.logger.verbose("Authentication method challenged successfully for auth method registration.", this.stateParameters.correlationId);
+            if (result.type === JIT_VERIFICATION_REQUIRED_RESULT_TYPE) {
+                // Verification required
+                this.stateParameters.logger.verbose("Auth method verification required.", this.stateParameters.correlationId);
+                return new AuthMethodRegistrationChallengeMethodResult(new AuthMethodVerificationRequiredState({
+                    correlationId: result.correlationId,
+                    continuationToken: result.continuationToken,
+                    config: this.stateParameters.config,
+                    logger: this.stateParameters.logger,
+                    jitClient: this.stateParameters.jitClient,
+                    cacheClient: this.stateParameters.cacheClient,
+                    challengeChannel: result.challengeChannel,
+                    challengeTargetLabel: result.challengeTargetLabel,
+                    codeLength: result.codeLength,
+                    scopes: this.stateParameters.scopes ?? [],
+                    username: this.stateParameters.username,
+                    claims: this.stateParameters.claims,
+                }));
+            }
+            else if (result.type === JIT_COMPLETED_RESULT_TYPE) {
+                // Registration completed (fast-pass scenario)
+                this.stateParameters.logger.verbose("Auth method registration completed via fast-pass.", this.stateParameters.correlationId);
+                const accountInfo = new CustomAuthAccountData(result.authenticationResult.account, this.stateParameters.config, this.stateParameters.cacheClient, this.stateParameters.logger, this.stateParameters.correlationId);
+                return new AuthMethodRegistrationChallengeMethodResult(new AuthMethodRegistrationCompletedState(), accountInfo);
+            }
+            else {
+                // Handle unexpected result type with proper typing
+                this.stateParameters.logger.error("Unexpected result type from auth challenge method", this.stateParameters.correlationId);
+                throw new UnexpectedError("Unexpected result type from auth challenge method");
+            }
+        }
+        catch (error) {
+            this.stateParameters.logger.error("Failed to challenge authentication method for auth method registration.", this.stateParameters.correlationId);
+            return AuthMethodRegistrationChallengeMethodResult.createWithError(error);
+        }
+    }
+}
+/**
+ * State indicating that authentication method registration is required.
+ */
+class AuthMethodRegistrationRequiredState extends AuthMethodRegistrationState {
+    /**
+     * Gets the available authentication methods for registration.
+     * @returns Array of available authentication methods.
+     * @warning This API is experimental. It may be changed in the future without notice. Do not use in production applications.
+     */
+    getAuthMethods() {
+        return this.stateParameters.authMethods;
+    }
+    /**
+     * Challenges an authentication method for registration.
+     * @param authMethodDetails The authentication method details to challenge.
+     * @returns Promise that resolves to AuthMethodRegistrationChallengeMethodResult.
+     * @warning This API is experimental. It may be changed in the future without notice. Do not use in production applications.
+     */
+    async challengeAuthMethod(authMethodDetails) {
+        return this.challengeAuthMethodInternal(authMethodDetails);
+    }
+}
+/**
+ * State indicating that verification is required for the challenged authentication method.
+ */
+class AuthMethodVerificationRequiredState extends AuthMethodRegistrationState {
+    /**
+     * Gets the length of the expected verification code.
+     * @returns The code length.
+     * @warning This API is experimental. It may be changed in the future without notice. Do not use in production applications.
+     */
+    getCodeLength() {
+        return this.stateParameters.codeLength;
+    }
+    /**
+     * Gets the channel through which the challenge was sent.
+     * @returns The challenge channel (e.g., "email").
+     * @warning This API is experimental. It may be changed in the future without notice. Do not use in production applications.
+     */
+    getChannel() {
+        return this.stateParameters.challengeChannel;
+    }
+    /**
+     * Gets the target label indicating where the challenge was sent.
+     * @returns The challenge target label (e.g., masked email address).
+     * @warning This API is experimental. It may be changed in the future without notice. Do not use in production applications.
+     */
+    getSentTo() {
+        return this.stateParameters.challengeTargetLabel;
+    }
+    /**
+     * Submits the verification challenge to complete the authentication method registration.
+     * @param code The verification code entered by the user.
+     * @returns Promise that resolves to AuthMethodRegistrationSubmitChallengeResult.
+     * @warning This API is experimental. It may be changed in the future without notice. Do not use in production applications.
+     */
+    async submitChallenge(code) {
+        try {
+            this.ensureCodeIsValid(code, this.getCodeLength());
+            this.stateParameters.logger.verbose("Submitting auth method challenge.", this.stateParameters.correlationId);
+            const submitParams = {
+                correlationId: this.stateParameters.correlationId,
+                continuationToken: this.stateParameters.continuationToken ?? "",
+                scopes: this.stateParameters.scopes ?? [],
+                grantType: GrantType.OOB,
+                challenge: code,
+                username: this.stateParameters.username,
+                claims: this.stateParameters.claims,
+            };
+            const result = await this.stateParameters.jitClient.submitChallenge(submitParams);
+            this.stateParameters.logger.verbose("Auth method challenge submitted successfully.", this.stateParameters.correlationId);
+            const accountInfo = new CustomAuthAccountData(result.authenticationResult.account, this.stateParameters.config, this.stateParameters.cacheClient, this.stateParameters.logger, this.stateParameters.correlationId);
+            return new AuthMethodRegistrationSubmitChallengeResult(new AuthMethodRegistrationCompletedState(), accountInfo);
+        }
+        catch (error) {
+            this.stateParameters.logger.error("Failed to submit auth method challenge.", this.stateParameters.correlationId);
+            return AuthMethodRegistrationSubmitChallengeResult.createWithError(error);
+        }
+    }
+    /**
+     * Challenges a different authentication method for registration.
+     * @param authMethodDetails The authentication method details to challenge.
+     * @returns Promise that resolves to AuthMethodRegistrationChallengeMethodResult.
+     * @warning This API is experimental. It may be changed in the future without notice. Do not use in production applications.
+     */
+    async challengeAuthMethod(authMethodDetails) {
+        return this.challengeAuthMethodInternal(authMethodDetails);
+    }
+}
+
+export { AuthMethodRegistrationRequiredState, AuthMethodVerificationRequiredState };
+//# sourceMappingURL=AuthMethodRegistrationState.mjs.map

package/dist/custom-auth-path/custom_auth/core/auth_flow/jit/state/AuthMethodRegistrationState.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"AuthMethodRegistrationState.mjs","sources":["../../../../../../../../src/custom_auth/core/auth_flow/jit/state/AuthMethodRegistrationState.ts"],"sourcesContent":[null],"names":[],"mappings":";;;;;;;;;;;AAAA;;;AAGG;AAyBH;;AAEG;AACH,MAAe,2BAEb,SAAQ,+BAA4C,CAAA;AAClD;;;;AAIG;IACO,MAAM,2BAA2B,CACvC,iBAAoC,EAAA;QAEpC,IAAI;YACA,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,OAAO,CAC/B,wCAAwC,iBAAiB,CAAC,cAAc,CAAC,EAAE,iCAAiC,EAC5G,IAAI,CAAC,eAAe,CAAC,aAAa,CACrC,CAAC;AAEF,YAAA,MAAM,eAAe,GAAiC;AAClD,gBAAA,aAAa,EAAE,IAAI,CAAC,eAAe,CAAC,aAAa;AACjD,gBAAA,iBAAiB,EAAE,IAAI,CAAC,eAAe,CAAC,iBAAiB,IAAI,EAAE;gBAC/D,UAAU,EAAE,iBAAiB,CAAC,cAAc;gBAC5C,mBAAmB,EAAE,iBAAiB,CAAC,mBAAmB;AAC1D,gBAAA,MAAM,EAAE,IAAI,CAAC,eAAe,CAAC,MAAM,IAAI,EAAE;AACzC,gBAAA,QAAQ,EAAE,IAAI,CAAC,eAAe,CAAC,QAAQ;AACvC,gBAAA,MAAM,EAAE,IAAI,CAAC,eAAe,CAAC,MAAM;aACtC,CAAC;AAEF,YAAA,MAAM,MAAM,GACR,MAAM,IAAI,CAAC,eAAe,CAAC,SAAS,CAAC,mBAAmB,CACpD,eAAe,CAClB,CAAC;AAEN,YAAA,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,OAAO,CAC/B,6EAA6E,EAC7E,IAAI,CAAC,eAAe,CAAC,aAAa,CACrC,CAAC;AAEF,YAAA,IAAI,MAAM,CAAC,IAAI,KAAK,qCAAqC,EAAE;;AAEvD,gBAAA,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,OAAO,CAC/B,oCAAoC,EACpC,IAAI,CAAC,eAAe,CAAC,aAAa,CACrC,CAAC;AAEF,gBAAA,OAAO,IAAI,2CAA2C,CAClD,IAAI,mCAAmC,CAAC;oBACpC,aAAa,EAAE,MAAM,CAAC,aAAa;oBACnC,iBAAiB,EAAE,MAAM,CAAC,iBAAiB;AAC3C,oBAAA,MAAM,EAAE,IAAI,CAAC,eAAe,CAAC,MAAM;AACnC,oBAAA,MAAM,EAAE,IAAI,CAAC,eAAe,CAAC,MAAM;AACnC,oBAAA,SAAS,EAAE,IAAI,CAAC,eAAe,CAAC,SAAS;AACzC,oBAAA,WAAW,EAAE,IAAI,CAAC,eAAe,CAAC,WAAW;oBAC7C,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;oBACzC,oBAAoB,EAAE,MAAM,CAAC,oBAAoB;oBACjD,UAAU,EAAE,MAAM,CAAC,UAAU;AAC7B,oBAAA,MAAM,EAAE,IAAI,CAAC,eAAe,CAAC,MAAM,IAAI,EAAE;AACzC,oBAAA,QAAQ,EAAE,IAAI,CAAC,eAAe,CAAC,QAAQ;AACvC,oBAAA,MAAM,EAAE,IAAI,CAAC,eAAe,CAAC,MAAM;AACtC,iBAAA,CAAC,CACL,CAAC;AACL,aAAA;AAAM,iBAAA,IAAI,MAAM,CAAC,IAAI,KAAK,yBAAyB,EAAE;;AAElD,gBAAA,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,OAAO,CAC/B,mDAAmD,EACnD,IAAI,CAAC,eAAe,CAAC,aAAa,CACrC,CAAC;AAEF,gBAAA,MAAM,WAAW,GAAG,IAAI,qBAAqB,CACzC,MAAM,CAAC,oBAAoB,CAAC,OAAO,EACnC,IAAI,CAAC,eAAe,CAAC,MAAM,EAC3B,IAAI,CAAC,eAAe,CAAC,WAAW,EAChC,IAAI,CAAC,eAAe,CAAC,MAAM,EAC3B,IAAI,CAAC,eAAe,CAAC,aAAa,CACrC,CAAC;gBAEF,OAAO,IAAI,2CAA2C,CAClD,IAAI,oCAAoC,EAAE,EAC1C,WAAW,CACd,CAAC;AACL,aAAA;AAAM,iBAAA;;AAEH,gBAAA,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,KAAK,CAC7B,mDAAmD,EACnD,IAAI,CAAC,eAAe,CAAC,aAAa,CACrC,CAAC;AACF,gBAAA,MAAM,IAAI,eAAe,CACrB,mDAAmD,CACtD,CAAC;AACL,aAAA;AACJ,SAAA;AAAC,QAAA,OAAO,KAAK,EAAE;AACZ,YAAA,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,KAAK,CAC7B,yEAAyE,EACzE,IAAI,CAAC,eAAe,CAAC,aAAa,CACrC,CAAC;AACF,YAAA,OAAO,2CAA2C,CAAC,eAAe,CAC9D,KAAK,CACR,CAAC;AACL,SAAA;KACJ;AACJ,CAAA;AAED;;AAEG;AACG,MAAO,mCAAoC,SAAQ,2BAA0E,CAAA;AAC/H;;;;AAIG;IACH,cAAc,GAAA;AACV,QAAA,OAAO,IAAI,CAAC,eAAe,CAAC,WAAW,CAAC;KAC3C;AAED;;;;;AAKG;IACH,MAAM,mBAAmB,CACrB,iBAAoC,EAAA;AAEpC,QAAA,OAAO,IAAI,CAAC,2BAA2B,CAAC,iBAAiB,CAAC,CAAC;KAC9D;AACJ,CAAA;AAED;;AAEG;AACG,MAAO,mCAAoC,SAAQ,2BAA0E,CAAA;AAC/H;;;;AAIG;IACH,aAAa,GAAA;AACT,QAAA,OAAO,IAAI,CAAC,eAAe,CAAC,UAAU,CAAC;KAC1C;AAED;;;;AAIG;IACH,UAAU,GAAA;AACN,QAAA,OAAO,IAAI,CAAC,eAAe,CAAC,gBAAgB,CAAC;KAChD;AAED;;;;AAIG;IACH,SAAS,GAAA;AACL,QAAA,OAAO,IAAI,CAAC,eAAe,CAAC,oBAAoB,CAAC;KACpD;AAED;;;;;AAKG;IACH,MAAM,eAAe,CACjB,IAAY,EAAA;QAEZ,IAAI;YACA,IAAI,CAAC,iBAAiB,CAAC,IAAI,EAAE,IAAI,CAAC,aAAa,EAAE,CAAC,CAAC;AAEnD,YAAA,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,OAAO,CAC/B,mCAAmC,EACnC,IAAI,CAAC,eAAe,CAAC,aAAa,CACrC,CAAC;AAEF,YAAA,MAAM,YAAY,GAA6B;AAC3C,gBAAA,aAAa,EAAE,IAAI,CAAC,eAAe,CAAC,aAAa;AACjD,gBAAA,iBAAiB,EAAE,IAAI,CAAC,eAAe,CAAC,iBAAiB,IAAI,EAAE;AAC/D,gBAAA,MAAM,EAAE,IAAI,CAAC,eAAe,CAAC,MAAM,IAAI,EAAE;gBACzC,SAAS,EAAE,SAAS,CAAC,GAAG;AACxB,gBAAA,SAAS,EAAE,IAAI;AACf,gBAAA,QAAQ,EAAE,IAAI,CAAC,eAAe,CAAC,QAAQ;AACvC,gBAAA,MAAM,EAAE,IAAI,CAAC,eAAe,CAAC,MAAM;aACtC,CAAC;AAEF,YAAA,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,SAAS,CAAC,eAAe,CAC/D,YAAY,CACf,CAAC;AAEF,YAAA,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,OAAO,CAC/B,+CAA+C,EAC/C,IAAI,CAAC,eAAe,CAAC,aAAa,CACrC,CAAC;AAEF,YAAA,MAAM,WAAW,GAAG,IAAI,qBAAqB,CACzC,MAAM,CAAC,oBAAoB,CAAC,OAAO,EACnC,IAAI,CAAC,eAAe,CAAC,MAAM,EAC3B,IAAI,CAAC,eAAe,CAAC,WAAW,EAChC,IAAI,CAAC,eAAe,CAAC,MAAM,EAC3B,IAAI,CAAC,eAAe,CAAC,aAAa,CACrC,CAAC;YAEF,OAAO,IAAI,2CAA2C,CAClD,IAAI,oCAAoC,EAAE,EAC1C,WAAW,CACd,CAAC;AACL,SAAA;AAAC,QAAA,OAAO,KAAK,EAAE;AACZ,YAAA,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,KAAK,CAC7B,yCAAyC,EACzC,IAAI,CAAC,eAAe,CAAC,aAAa,CACrC,CAAC;AACF,YAAA,OAAO,2CAA2C,CAAC,eAAe,CAC9D,KAAK,CACR,CAAC;AACL,SAAA;KACJ;AAED;;;;;AAKG;IACH,MAAM,mBAAmB,CACrB,iBAAoC,EAAA;AAEpC,QAAA,OAAO,IAAI,CAAC,2BAA2B,CAAC,iBAAiB,CAAC,CAAC;KAC9D;AACJ;;;;"}

package/dist/custom-auth-path/custom_auth/core/auth_flow/jit/state/AuthMethodRegistrationStateParameters.d.ts

@@ -0,0 +1,20 @@
+import { AuthFlowActionRequiredStateParameters } from "../../AuthFlowState.js";
+import { JitClient } from "../../../interaction_client/jit/JitClient.js";
+import { AuthenticationMethod } from "../../../network_client/custom_auth_api/types/ApiResponseTypes.js";
+import { CustomAuthSilentCacheClient } from "../../../../get_account/interaction_client/CustomAuthSilentCacheClient.js";
+export interface AuthMethodRegistrationStateParameters extends AuthFlowActionRequiredStateParameters {
+    jitClient: JitClient;
+    cacheClient: CustomAuthSilentCacheClient;
+    scopes?: string[];
+    username?: string;
+    claims?: string;
+}
+export interface AuthMethodRegistrationRequiredStateParameters extends AuthMethodRegistrationStateParameters {
+    authMethods: AuthenticationMethod[];
+}
+export interface AuthMethodVerificationRequiredStateParameters extends AuthMethodRegistrationStateParameters {
+    challengeChannel: string;
+    challengeTargetLabel: string;
+    codeLength: number;
+}
+//# sourceMappingURL=AuthMethodRegistrationStateParameters.d.ts.map

package/dist/custom-auth-path/custom_auth/core/auth_flow/jit/state/AuthMethodRegistrationStateParameters.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"AuthMethodRegistrationStateParameters.d.ts","sourceRoot":"","sources":["../../../../../../../src/custom_auth/core/auth_flow/jit/state/AuthMethodRegistrationStateParameters.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,qCAAqC,EAAE,MAAM,wBAAwB,CAAC;AAC/E,OAAO,EAAE,SAAS,EAAE,MAAM,8CAA8C,CAAC;AACzE,OAAO,EAAE,oBAAoB,EAAE,MAAM,mEAAmE,CAAC;AACzG,OAAO,EAAE,2BAA2B,EAAE,MAAM,2EAA2E,CAAC;AAExH,MAAM,WAAW,qCACb,SAAQ,qCAAqC;IAC7C,SAAS,EAAE,SAAS,CAAC;IACrB,WAAW,EAAE,2BAA2B,CAAC;IACzC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,6CACb,SAAQ,qCAAqC;IAC7C,WAAW,EAAE,oBAAoB,EAAE,CAAC;CACvC;AAED,MAAM,WAAW,6CACb,SAAQ,qCAAqC;IAC7C,gBAAgB,EAAE,MAAM,CAAC;IACzB,oBAAoB,EAAE,MAAM,CAAC;IAC7B,UAAU,EAAE,MAAM,CAAC;CACtB"}

package/dist/custom-auth-path/custom_auth/core/error/CustomAuthApiError.mjs

@@ -1,4 +1,4 @@
-/*! @azure/msal-browser v4.22.1 2025-09-09 */
+/*! @azure/msal-browser v4.23.0 2025-09-17 */
 'use strict';
 import { CustomAuthError } from './CustomAuthError.mjs';
 

package/dist/custom-auth-path/custom_auth/core/error/CustomAuthError.mjs

@@ -1,4 +1,4 @@
-/*! @azure/msal-browser v4.22.1 2025-09-09 */
+/*! @azure/msal-browser v4.23.0 2025-09-17 */
 'use strict';
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.

package/dist/custom-auth-path/custom_auth/core/error/HttpError.mjs

@@ -1,4 +1,4 @@
-/*! @azure/msal-browser v4.22.1 2025-09-09 */
+/*! @azure/msal-browser v4.23.0 2025-09-17 */
 'use strict';
 import { CustomAuthError } from './CustomAuthError.mjs';
 

package/dist/custom-auth-path/custom_auth/core/error/HttpErrorCodes.mjs

@@ -1,4 +1,4 @@
-/*! @azure/msal-browser v4.22.1 2025-09-09 */
+/*! @azure/msal-browser v4.23.0 2025-09-17 */
 'use strict';
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.

package/dist/custom-auth-path/custom_auth/core/error/InvalidArgumentError.mjs

@@ -1,4 +1,4 @@
-/*! @azure/msal-browser v4.22.1 2025-09-09 */
+/*! @azure/msal-browser v4.23.0 2025-09-17 */
 'use strict';
 import { CustomAuthError } from './CustomAuthError.mjs';
 

package/dist/custom-auth-path/custom_auth/core/error/InvalidConfigurationError.mjs

@@ -1,4 +1,4 @@
-/*! @azure/msal-browser v4.22.1 2025-09-09 */
+/*! @azure/msal-browser v4.23.0 2025-09-17 */
 'use strict';
 import { CustomAuthError } from './CustomAuthError.mjs';
 

package/dist/custom-auth-path/custom_auth/core/error/InvalidConfigurationErrorCodes.mjs

@@ -1,4 +1,4 @@
-/*! @azure/msal-browser v4.22.1 2025-09-09 */
+/*! @azure/msal-browser v4.23.0 2025-09-17 */
 'use strict';
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.

package/dist/custom-auth-path/custom_auth/core/error/MethodNotImplementedError.mjs

@@ -1,4 +1,4 @@
-/*! @azure/msal-browser v4.22.1 2025-09-09 */
+/*! @azure/msal-browser v4.23.0 2025-09-17 */
 'use strict';
 import { CustomAuthError } from './CustomAuthError.mjs';
 

package/dist/custom-auth-path/custom_auth/core/error/MsalCustomAuthError.d.ts

@@ -1,6 +1,5 @@
 import { CustomAuthError } from "./CustomAuthError.js";
 export declare class MsalCustomAuthError extends CustomAuthError {
-    subError: string | undefined;
-    constructor(error: string, errorDescription?: string, subError?: string, correlationId?: string);
+    constructor(error: string, errorDescription?: string, subError?: string, errorCodes?: Array<number>, correlationId?: string);
 }
 //# sourceMappingURL=MsalCustomAuthError.d.ts.map

package/dist/custom-auth-path/custom_auth/core/error/MsalCustomAuthError.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"MsalCustomAuthError.d.ts","sourceRoot":"","sources":["../../../../../src/custom_auth/core/error/MsalCustomAuthError.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAEvD,qBAAa,mBAAoB,SAAQ,eAAe;IACpD,QAAQ,EAAE,MAAM,GAAG,SAAS,CAAC;gBAGzB,KAAK,EAAE,MAAM,EACb,gBAAgB,CAAC,EAAE,MAAM,EACzB,QAAQ,CAAC,EAAE,MAAM,EACjB,aAAa,CAAC,EAAE,MAAM;CAO7B"}
+{"version":3,"file":"MsalCustomAuthError.d.ts","sourceRoot":"","sources":["../../../../../src/custom_auth/core/error/MsalCustomAuthError.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAEvD,qBAAa,mBAAoB,SAAQ,eAAe;gBAEhD,KAAK,EAAE,MAAM,EACb,gBAAgB,CAAC,EAAE,MAAM,EACzB,QAAQ,CAAC,EAAE,MAAM,EACjB,UAAU,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,EAC1B,aAAa,CAAC,EAAE,MAAM;CAK7B"}

package/dist/custom-auth-path/custom_auth/core/error/MsalCustomAuthError.mjs

@@ -1,4 +1,4 @@
-/*! @azure/msal-browser v4.22.1 2025-09-09 */
+/*! @azure/msal-browser v4.23.0 2025-09-17 */
 'use strict';
 import { CustomAuthError } from './CustomAuthError.mjs';
 
@@ -7,10 +7,9 @@ import { CustomAuthError } from './CustomAuthError.mjs';
  * Licensed under the MIT License.
  */
 class MsalCustomAuthError extends CustomAuthError {
-    constructor(error, errorDescription, subError, correlationId) {
-        super(error, errorDescription, correlationId);
+    constructor(error, errorDescription, subError, errorCodes, correlationId) {
+        super(error, errorDescription, correlationId, errorCodes, subError);
         Object.setPrototypeOf(this, MsalCustomAuthError.prototype);
-        this.subError = subError || "";
     }
 }
 

package/dist/custom-auth-path/custom_auth/core/error/MsalCustomAuthError.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"MsalCustomAuthError.mjs","sources":["../../../../../../src/custom_auth/core/error/MsalCustomAuthError.ts"],"sourcesContent":[null],"names":[],"mappings":";;;;AAAA;;;AAGG;AAIG,MAAO,mBAAoB,SAAQ,eAAe,CAAA;AAGpD,IAAA,WAAA,CACI,KAAa,EACb,gBAAyB,EACzB,QAAiB,EACjB,aAAsB,EAAA;AAEtB,QAAA,KAAK,CAAC,KAAK,EAAE,gBAAgB,EAAE,aAAa,CAAC,CAAC;QAC9C,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,mBAAmB,CAAC,SAAS,CAAC,CAAC;AAE3D,QAAA,IAAI,CAAC,QAAQ,GAAG,QAAQ,IAAI,EAAE,CAAC;KAClC;AACJ;;;;"}
+{"version":3,"file":"MsalCustomAuthError.mjs","sources":["../../../../../../src/custom_auth/core/error/MsalCustomAuthError.ts"],"sourcesContent":[null],"names":[],"mappings":";;;;AAAA;;;AAGG;AAIG,MAAO,mBAAoB,SAAQ,eAAe,CAAA;IACpD,WACI,CAAA,KAAa,EACb,gBAAyB,EACzB,QAAiB,EACjB,UAA0B,EAC1B,aAAsB,EAAA;QAEtB,KAAK,CAAC,KAAK,EAAE,gBAAgB,EAAE,aAAa,EAAE,UAAU,EAAE,QAAQ,CAAC,CAAC;QACpE,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,mBAAmB,CAAC,SAAS,CAAC,CAAC;KAC9D;AACJ;;;;"}

package/dist/custom-auth-path/custom_auth/core/error/NoCachedAccountFoundError.mjs

@@ -1,4 +1,4 @@
-/*! @azure/msal-browser v4.22.1 2025-09-09 */
+/*! @azure/msal-browser v4.23.0 2025-09-17 */
 'use strict';
 import { CustomAuthError } from './CustomAuthError.mjs';
 

package/dist/custom-auth-path/custom_auth/core/error/ParsedUrlError.mjs

@@ -1,4 +1,4 @@
-/*! @azure/msal-browser v4.22.1 2025-09-09 */
+/*! @azure/msal-browser v4.23.0 2025-09-17 */
 'use strict';
 import { CustomAuthError } from './CustomAuthError.mjs';
 

package/dist/custom-auth-path/custom_auth/core/error/ParsedUrlErrorCodes.mjs

@@ -1,4 +1,4 @@
-/*! @azure/msal-browser v4.22.1 2025-09-09 */
+/*! @azure/msal-browser v4.23.0 2025-09-17 */
 'use strict';
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.

package/dist/custom-auth-path/custom_auth/core/error/UnexpectedError.mjs

@@ -1,4 +1,4 @@
-/*! @azure/msal-browser v4.22.1 2025-09-09 */
+/*! @azure/msal-browser v4.23.0 2025-09-17 */
 'use strict';
 import { CustomAuthError } from './CustomAuthError.mjs';
 

package/dist/custom-auth-path/custom_auth/core/error/UnsupportedEnvironmentError.mjs

@@ -1,4 +1,4 @@
-/*! @azure/msal-browser v4.22.1 2025-09-09 */
+/*! @azure/msal-browser v4.23.0 2025-09-17 */
 'use strict';
 import { CustomAuthError } from './CustomAuthError.mjs';
 

package/dist/custom-auth-path/custom_auth/core/error/UserAccountAttributeError.mjs

@@ -1,4 +1,4 @@
-/*! @azure/msal-browser v4.22.1 2025-09-09 */
+/*! @azure/msal-browser v4.23.0 2025-09-17 */
 'use strict';
 import { CustomAuthError } from './CustomAuthError.mjs';
 

package/dist/custom-auth-path/custom_auth/core/error/UserAlreadySignedInError.mjs

@@ -1,4 +1,4 @@
-/*! @azure/msal-browser v4.22.1 2025-09-09 */
+/*! @azure/msal-browser v4.23.0 2025-09-17 */
 'use strict';
 import { CustomAuthError } from './CustomAuthError.mjs';
 

package/dist/custom-auth-path/custom_auth/core/interaction_client/CustomAuthInteractionClientBase.d.ts

@@ -12,12 +12,22 @@ import { SsoSilentRequest } from "../../../request/SsoSilentRequest.js";
 import { EndSessionRequest } from "../../../request/EndSessionRequest.js";
 import { ClearCacheRequest } from "../../../request/ClearCacheRequest.js";
 import { AuthenticationResult } from "../../../response/AuthenticationResult.js";
+import { SignInTokenResponse } from "../network_client/custom_auth_api/types/ApiResponseTypes.js";
 export declare abstract class CustomAuthInteractionClientBase extends StandardInteractionClient {
     protected customAuthApiClient: ICustomAuthApiClient;
     protected customAuthAuthority: CustomAuthAuthority;
+    private readonly tokenResponseHandler;
     constructor(config: BrowserConfiguration, storageImpl: BrowserCacheManager, browserCrypto: ICrypto, logger: Logger, eventHandler: EventHandler, navigationClient: INavigationClient, performanceClient: IPerformanceClient, customAuthApiClient: ICustomAuthApiClient, customAuthAuthority: CustomAuthAuthority);
     protected getChallengeTypes(configuredChallengeTypes: string[] | undefined): string;
     protected getScopes(scopes: string[] | undefined): string[];
+    /**
+     * Common method to handle token response processing.
+     * @param tokenResponse The token response from the API
+     * @param requestScopes Scopes for the token request
+     * @param correlationId Correlation ID for logging
+     * @returns Authentication result from the token response
+     */
+    protected handleTokenResponse(tokenResponse: SignInTokenResponse, requestScopes: string[], correlationId: string): Promise<AuthenticationResult>;
     acquireToken(request: RedirectRequest | PopupRequest | SsoSilentRequest): Promise<AuthenticationResult | void>;
     logout(request: EndSessionRequest | ClearCacheRequest | undefined): Promise<void>;
 }

package/dist/custom-auth-path/custom_auth/core/interaction_client/CustomAuthInteractionClientBase.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"CustomAuthInteractionClientBase.d.ts","sourceRoot":"","sources":["../../../../../src/custom_auth/core/interaction_client/CustomAuthInteractionClientBase.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,oBAAoB,EAAE,MAAM,2DAA2D,CAAC;AAEjG,OAAO,EAAE,mBAAmB,EAAE,MAAM,2BAA2B,CAAC;AAEhE,OAAO,EAAE,yBAAyB,EAAE,MAAM,0DAA0D,CAAC;AACrG,OAAO,EAAE,oBAAoB,EAAE,MAAM,kCAAkC,CAAC;AACxE,OAAO,EAAE,mBAAmB,EAAE,MAAM,uCAAuC,CAAC;AAC5E,OAAO,EAEH,OAAO,EACP,kBAAkB,EAClB,MAAM,EACT,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAE,YAAY,EAAE,MAAM,gCAAgC,CAAC;AAC9D,OAAO,EAAE,iBAAiB,EAAE,MAAM,0CAA0C,CAAC;AAC7E,OAAO,EAAE,eAAe,EAAE,MAAM,qCAAqC,CAAC;AACtE,OAAO,EAAE,YAAY,EAAE,MAAM,kCAAkC,CAAC;AAChE,OAAO,EAAE,gBAAgB,EAAE,MAAM,sCAAsC,CAAC;AACxE,OAAO,EAAE,iBAAiB,EAAE,MAAM,uCAAuC,CAAC;AAC1E,OAAO,EAAE,iBAAiB,EAAE,MAAM,uCAAuC,CAAC;AAC1E,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AAEjF,8BAAsB,+BAAgC,SAAQ,yBAAyB;IAS/E,SAAS,CAAC,mBAAmB,EAAE,oBAAoB;IACnD,SAAS,CAAC,mBAAmB,EAAE,mBAAmB;gBARlD,MAAM,EAAE,oBAAoB,EAC5B,WAAW,EAAE,mBAAmB,EAChC,aAAa,EAAE,OAAO,EACtB,MAAM,EAAE,MAAM,EACd,YAAY,EAAE,YAAY,EAC1B,gBAAgB,EAAE,iBAAiB,EACnC,iBAAiB,EAAE,kBAAkB,EAC3B,mBAAmB,EAAE,oBAAoB,EACzC,mBAAmB,EAAE,mBAAmB;IAatD,SAAS,CAAC,iBAAiB,CACvB,wBAAwB,EAAE,MAAM,EAAE,GAAG,SAAS,GAC/C,MAAM;IAYT,SAAS,CAAC,SAAS,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,SAAS,GAAG,MAAM,EAAE;IAa3D,YAAY,CAER,OAAO,EAAE,eAAe,GAAG,YAAY,GAAG,gBAAgB,GAC3D,OAAO,CAAC,oBAAoB,GAAG,IAAI,CAAC;IAKvC,MAAM,CAEF,OAAO,EAAE,iBAAiB,GAAG,iBAAiB,GAAG,SAAS,GAC3D,OAAO,CAAC,IAAI,CAAC;CAGnB"}
+{"version":3,"file":"CustomAuthInteractionClientBase.d.ts","sourceRoot":"","sources":["../../../../../src/custom_auth/core/interaction_client/CustomAuthInteractionClientBase.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,oBAAoB,EAAE,MAAM,2DAA2D,CAAC;AAEjG,OAAO,EAAE,mBAAmB,EAAE,MAAM,2BAA2B,CAAC;AAEhE,OAAO,EAAE,yBAAyB,EAAE,MAAM,0DAA0D,CAAC;AACrG,OAAO,EAAE,oBAAoB,EAAE,MAAM,kCAAkC,CAAC;AACxE,OAAO,EAAE,mBAAmB,EAAE,MAAM,uCAAuC,CAAC;AAC5E,OAAO,EAEH,OAAO,EACP,kBAAkB,EAClB,MAAM,EAET,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAE,YAAY,EAAE,MAAM,gCAAgC,CAAC;AAC9D,OAAO,EAAE,iBAAiB,EAAE,MAAM,0CAA0C,CAAC;AAC7E,OAAO,EAAE,eAAe,EAAE,MAAM,qCAAqC,CAAC;AACtE,OAAO,EAAE,YAAY,EAAE,MAAM,kCAAkC,CAAC;AAChE,OAAO,EAAE,gBAAgB,EAAE,MAAM,sCAAsC,CAAC;AACxE,OAAO,EAAE,iBAAiB,EAAE,MAAM,uCAAuC,CAAC;AAC1E,OAAO,EAAE,iBAAiB,EAAE,MAAM,uCAAuC,CAAC;AAC1E,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AACjF,OAAO,EAAE,mBAAmB,EAAE,MAAM,6DAA6D,CAAC;AAElG,8BAAsB,+BAAgC,SAAQ,yBAAyB;IAW/E,SAAS,CAAC,mBAAmB,EAAE,oBAAoB;IACnD,SAAS,CAAC,mBAAmB,EAAE,mBAAmB;IAXtD,OAAO,CAAC,QAAQ,CAAC,oBAAoB,CAAkB;gBAGnD,MAAM,EAAE,oBAAoB,EAC5B,WAAW,EAAE,mBAAmB,EAChC,aAAa,EAAE,OAAO,EACtB,MAAM,EAAE,MAAM,EACd,YAAY,EAAE,YAAY,EAC1B,gBAAgB,EAAE,iBAAiB,EACnC,iBAAiB,EAAE,kBAAkB,EAC3B,mBAAmB,EAAE,oBAAoB,EACzC,mBAAmB,EAAE,mBAAmB;IAsBtD,SAAS,CAAC,iBAAiB,CACvB,wBAAwB,EAAE,MAAM,EAAE,GAAG,SAAS,GAC/C,MAAM;IAYT,SAAS,CAAC,SAAS,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,SAAS,GAAG,MAAM,EAAE;IAY3D;;;;;;OAMG;cACa,mBAAmB,CAC/B,aAAa,EAAE,mBAAmB,EAClC,aAAa,EAAE,MAAM,EAAE,EACvB,aAAa,EAAE,MAAM,GACtB,OAAO,CAAC,oBAAoB,CAAC;IAuBhC,YAAY,CAER,OAAO,EAAE,eAAe,GAAG,YAAY,GAAG,gBAAgB,GAC3D,OAAO,CAAC,oBAAoB,GAAG,IAAI,CAAC;IAKvC,MAAM,CAEF,OAAO,EAAE,iBAAiB,GAAG,iBAAiB,GAAG,SAAS,GAC3D,OAAO,CAAC,IAAI,CAAC;CAGnB"}

package/dist/custom-auth-path/custom_auth/core/interaction_client/CustomAuthInteractionClientBase.mjs

@@ -1,9 +1,9 @@
-/*! @azure/msal-browser v4.22.1 2025-09-09 */
+/*! @azure/msal-browser v4.23.0 2025-09-17 */
 'use strict';
 import { MethodNotImplementedError } from '../error/MethodNotImplementedError.mjs';
 import { ChallengeType } from '../../CustomAuthConstants.mjs';
 import { StandardInteractionClient } from '../../../interaction_client/StandardInteractionClient.mjs';
-import { Constants } from '@azure/msal-common/browser';
+import { ResponseHandler, Constants } from '@azure/msal-common/browser';
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -14,6 +14,7 @@ class CustomAuthInteractionClientBase extends StandardInteractionClient {
         super(config, storageImpl, browserCrypto, logger, eventHandler, navigationClient, performanceClient);
         this.customAuthApiClient = customAuthApiClient;
         this.customAuthAuthority = customAuthAuthority;
+        this.tokenResponseHandler = new ResponseHandler(this.config.auth.clientId, this.browserStorage, this.browserCrypto, this.logger, null, null);
     }
     getChallengeTypes(configuredChallengeTypes) {
         const challengeType = configuredChallengeTypes ?? [];
@@ -32,6 +33,24 @@ class CustomAuthInteractionClientBase extends StandardInteractionClient {
             Constants.OFFLINE_ACCESS_SCOPE,
         ];
     }
+    /**
+     * Common method to handle token response processing.
+     * @param tokenResponse The token response from the API
+     * @param requestScopes Scopes for the token request
+     * @param correlationId Correlation ID for logging
+     * @returns Authentication result from the token response
+     */
+    async handleTokenResponse(tokenResponse, requestScopes, correlationId) {
+        this.logger.verbose("Processing token response.", correlationId);
+        const requestTimestamp = Math.round(new Date().getTime() / 1000.0);
+        // Save tokens and create authentication result 44s
+        const result = await this.tokenResponseHandler.handleServerTokenResponse(tokenResponse, this.customAuthAuthority, requestTimestamp, {
+            authority: this.customAuthAuthority.canonicalAuthority,
+            correlationId: tokenResponse.correlation_id ?? correlationId,
+            scopes: requestScopes,
+        });
+        return result;
+    }
     // It is not necessary to implement this method from base class.
     acquireToken(
     // eslint-disable-next-line @typescript-eslint/no-unused-vars

package/dist/custom-auth-path/custom_auth/core/interaction_client/CustomAuthInteractionClientBase.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"CustomAuthInteractionClientBase.mjs","sources":["../../../../../../src/custom_auth/core/interaction_client/CustomAuthInteractionClientBase.ts"],"sourcesContent":[null],"names":[],"mappings":";;;;;;;AAAA;;;AAGG;AAwBG,MAAgB,+BAAgC,SAAQ,yBAAyB,CAAA;AACnF,IAAA,WAAA,CACI,MAA4B,EAC5B,WAAgC,EAChC,aAAsB,EACtB,MAAc,EACd,YAA0B,EAC1B,gBAAmC,EACnC,iBAAqC,EAC3B,mBAAyC,EACzC,mBAAwC,EAAA;AAElD,QAAA,KAAK,CACD,MAAM,EACN,WAAW,EACX,aAAa,EACb,MAAM,EACN,YAAY,EACZ,gBAAgB,EAChB,iBAAiB,CACpB,CAAC;QAXQ,IAAmB,CAAA,mBAAA,GAAnB,mBAAmB,CAAsB;QACzC,IAAmB,CAAA,mBAAA,GAAnB,mBAAmB,CAAqB;KAWrD;AAES,IAAA,iBAAiB,CACvB,wBAA8C,EAAA;AAE9C,QAAA,MAAM,aAAa,GAAG,wBAAwB,IAAI,EAAE,CAAC;AACrD,QAAA,IACI,CAAC,aAAa,CAAC,IAAI,CACf,CAAC,IAAI,KAAK,IAAI,CAAC,WAAW,EAAE,KAAK,aAAa,CAAC,QAAQ,CAC1D,EACH;AACE,YAAA,aAAa,CAAC,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC;AAC9C,SAAA;AACD,QAAA,OAAO,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;KAClC;AAES,IAAA,SAAS,CAAC,MAA4B,EAAA;QAC5C,IAAI,CAAC,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE;AAC/B,YAAA,OAAO,MAAM,CAAC;AACjB,SAAA;QAED,OAAO;AACH,YAAA,SAAS,CAAC,YAAY;AACtB,YAAA,SAAS,CAAC,aAAa;AACvB,YAAA,SAAS,CAAC,oBAAoB;SACjC,CAAC;KACL;;IAGD,YAAY;;IAER,OAA0D,EAAA;AAE1D,QAAA,MAAM,IAAI,yBAAyB,CAAC,2BAA2B,CAAC,CAAC;KACpE;;IAGD,MAAM;;IAEF,OAA0D,EAAA;AAE1D,QAAA,MAAM,IAAI,yBAAyB,CAAC,qBAAqB,CAAC,CAAC;KAC9D;AACJ;;;;"}
+{"version":3,"file":"CustomAuthInteractionClientBase.mjs","sources":["../../../../../../src/custom_auth/core/interaction_client/CustomAuthInteractionClientBase.ts"],"sourcesContent":[null],"names":[],"mappings":";;;;;;;AAAA;;;AAGG;AA0BG,MAAgB,+BAAgC,SAAQ,yBAAyB,CAAA;AAGnF,IAAA,WAAA,CACI,MAA4B,EAC5B,WAAgC,EAChC,aAAsB,EACtB,MAAc,EACd,YAA0B,EAC1B,gBAAmC,EACnC,iBAAqC,EAC3B,mBAAyC,EACzC,mBAAwC,EAAA;AAElD,QAAA,KAAK,CACD,MAAM,EACN,WAAW,EACX,aAAa,EACb,MAAM,EACN,YAAY,EACZ,gBAAgB,EAChB,iBAAiB,CACpB,CAAC;QAXQ,IAAmB,CAAA,mBAAA,GAAnB,mBAAmB,CAAsB;QACzC,IAAmB,CAAA,mBAAA,GAAnB,mBAAmB,CAAqB;AAYlD,QAAA,IAAI,CAAC,oBAAoB,GAAG,IAAI,eAAe,CAC3C,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,EACzB,IAAI,CAAC,cAAc,EACnB,IAAI,CAAC,aAAa,EAClB,IAAI,CAAC,MAAM,EACX,IAAI,EACJ,IAAI,CACP,CAAC;KACL;AAES,IAAA,iBAAiB,CACvB,wBAA8C,EAAA;AAE9C,QAAA,MAAM,aAAa,GAAG,wBAAwB,IAAI,EAAE,CAAC;AACrD,QAAA,IACI,CAAC,aAAa,CAAC,IAAI,CACf,CAAC,IAAI,KAAK,IAAI,CAAC,WAAW,EAAE,KAAK,aAAa,CAAC,QAAQ,CAC1D,EACH;AACE,YAAA,aAAa,CAAC,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC;AAC9C,SAAA;AACD,QAAA,OAAO,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;KAClC;AAES,IAAA,SAAS,CAAC,MAA4B,EAAA;QAC5C,IAAI,CAAC,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE;AAC/B,YAAA,OAAO,MAAM,CAAC;AACjB,SAAA;QAED,OAAO;AACH,YAAA,SAAS,CAAC,YAAY;AACtB,YAAA,SAAS,CAAC,aAAa;AACvB,YAAA,SAAS,CAAC,oBAAoB;SACjC,CAAC;KACL;AAED;;;;;;AAMG;AACO,IAAA,MAAM,mBAAmB,CAC/B,aAAkC,EAClC,aAAuB,EACvB,aAAqB,EAAA;QAErB,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,4BAA4B,EAAE,aAAa,CAAC,CAAC;AAEjE,QAAA,MAAM,gBAAgB,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,IAAI,EAAE,CAAC,OAAO,EAAE,GAAG,MAAM,CAAC,CAAC;;AAGnE,QAAA,MAAM,MAAM,GACR,MAAM,IAAI,CAAC,oBAAoB,CAAC,yBAAyB,CACrD,aAAa,EACb,IAAI,CAAC,mBAAmB,EACxB,gBAAgB,EAChB;AACI,YAAA,SAAS,EAAE,IAAI,CAAC,mBAAmB,CAAC,kBAAkB;AACtD,YAAA,aAAa,EACT,aAAa,CAAC,cAAc,IAAI,aAAa;AACjD,YAAA,MAAM,EAAE,aAAa;AACxB,SAAA,CACJ,CAAC;AAEN,QAAA,OAAO,MAA8B,CAAC;KACzC;;IAGD,YAAY;;IAER,OAA0D,EAAA;AAE1D,QAAA,MAAM,IAAI,yBAAyB,CAAC,2BAA2B,CAAC,CAAC;KACpE;;IAGD,MAAM;;IAEF,OAA0D,EAAA;AAE1D,QAAA,MAAM,IAAI,yBAAyB,CAAC,qBAAqB,CAAC,CAAC;KAC9D;AACJ;;;;"}

package/dist/custom-auth-path/custom_auth/core/interaction_client/CustomAuthInterationClientFactory.mjs

@@ -1,4 +1,4 @@
-/*! @azure/msal-browser v4.22.1 2025-09-09 */
+/*! @azure/msal-browser v4.23.0 2025-09-17 */
 'use strict';
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.

package/dist/custom-auth-path/custom_auth/core/interaction_client/jit/JitClient.d.ts

@@ -0,0 +1,27 @@
+import { CustomAuthInteractionClientBase } from "../CustomAuthInteractionClientBase.js";
+import { JitGetAuthMethodsParams, JitChallengeAuthMethodParams, JitSubmitChallengeParams } from "./parameter/JitParams.js";
+import { JitGetAuthMethodsResult, JitVerificationRequiredResult, JitCompletedResult } from "./result/JitActionResult.js";
+/**
+ * JIT client for handling just-in-time authentication method registration flows.
+ */
+export declare class JitClient extends CustomAuthInteractionClientBase {
+    /**
+     * Gets available authentication methods for JIT registration.
+     * @param parameters The parameters for getting auth methods.
+     * @returns Promise that resolves to JitGetAuthMethodsResult.
+     */
+    getAuthMethods(parameters: JitGetAuthMethodsParams): Promise<JitGetAuthMethodsResult>;
+    /**
+     * Challenges an authentication method for JIT registration.
+     * @param parameters The parameters for challenging the auth method.
+     * @returns Promise that resolves to either JitVerificationRequiredResult or JitCompletedResult.
+     */
+    challengeAuthMethod(parameters: JitChallengeAuthMethodParams): Promise<JitVerificationRequiredResult | JitCompletedResult>;
+    /**
+     * Submits challenge response and completes JIT registration.
+     * @param parameters The parameters for submitting the challenge.
+     * @returns Promise that resolves to JitCompletedResult.
+     */
+    submitChallenge(parameters: JitSubmitChallengeParams): Promise<JitCompletedResult>;
+}
+//# sourceMappingURL=JitClient.d.ts.map

package/dist/custom-auth-path/custom_auth/core/interaction_client/jit/JitClient.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"JitClient.d.ts","sourceRoot":"","sources":["../../../../../../src/custom_auth/core/interaction_client/jit/JitClient.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,+BAA+B,EAAE,MAAM,uCAAuC,CAAC;AACxF,OAAO,EACH,uBAAuB,EACvB,4BAA4B,EAC5B,wBAAwB,EAC3B,MAAM,0BAA0B,CAAC;AAClC,OAAO,EACH,uBAAuB,EACvB,6BAA6B,EAC7B,kBAAkB,EAIrB,MAAM,6BAA6B,CAAC;AAcrC;;GAEG;AACH,qBAAa,SAAU,SAAQ,+BAA+B;IAC1D;;;;OAIG;IACG,cAAc,CAChB,UAAU,EAAE,uBAAuB,GACpC,OAAO,CAAC,uBAAuB,CAAC;IA8BnC;;;;OAIG;IACG,mBAAmB,CACrB,UAAU,EAAE,4BAA4B,GACzC,OAAO,CAAC,6BAA6B,GAAG,kBAAkB,CAAC;IA8D9D;;;;OAIG;IACG,eAAe,CACjB,UAAU,EAAE,wBAAwB,GACrC,OAAO,CAAC,kBAAkB,CAAC;CAwDjC"}