@azure/msal-browser 4.24.0 → 4.25.0

package/dist/custom-auth-path/custom_auth/core/auth_flow/jit/result/AuthMethodRegistrationSubmitChallengeResult.mjs

@@ -1,4 +1,4 @@
-/*! @azure/msal-browser v4.24.0 2025-09-24 */
+/*! @azure/msal-browser v4.25.0 2025-10-09 */
 'use strict';
 import { AuthFlowResultBase } from '../../AuthFlowResultBase.mjs';
 import { AuthMethodRegistrationSubmitChallengeError } from '../error_type/AuthMethodRegistrationError.mjs';

package/dist/custom-auth-path/custom_auth/core/auth_flow/jit/state/AuthMethodRegistrationCompletedState.mjs

@@ -1,4 +1,4 @@
-/*! @azure/msal-browser v4.24.0 2025-09-24 */
+/*! @azure/msal-browser v4.25.0 2025-10-09 */
 'use strict';
 import { AuthFlowStateBase } from '../../AuthFlowState.mjs';
 

package/dist/custom-auth-path/custom_auth/core/auth_flow/jit/state/AuthMethodRegistrationFailedState.mjs

@@ -1,4 +1,4 @@
-/*! @azure/msal-browser v4.24.0 2025-09-24 */
+/*! @azure/msal-browser v4.25.0 2025-10-09 */
 'use strict';
 import { AuthFlowStateBase } from '../../AuthFlowState.mjs';
 

package/dist/custom-auth-path/custom_auth/core/auth_flow/jit/state/AuthMethodRegistrationState.mjs

@@ -1,4 +1,4 @@
-/*! @azure/msal-browser v4.24.0 2025-09-24 */
+/*! @azure/msal-browser v4.25.0 2025-10-09 */
 'use strict';
 import { CustomAuthAccountData } from '../../../../get_account/auth_flow/CustomAuthAccountData.mjs';
 import { JIT_VERIFICATION_REQUIRED_RESULT_TYPE, JIT_COMPLETED_RESULT_TYPE } from '../../../interaction_client/jit/result/JitActionResult.mjs';

package/dist/custom-auth-path/custom_auth/core/auth_flow/mfa/error_type/MfaError.d.ts

@@ -8,6 +8,11 @@ export declare class MfaRequestChallengeError extends AuthActionErrorBase {
      * @returns true if the input is incorrect, false otherwise.
      */
     isInvalidInput(): boolean;
+    /**
+     * Checks if the error is due to the verification contact (e.g., phone number or email) being blocked. Consider contacting customer support for assistance.
+     * @returns true if the error is due to the verification contact being blocked, false otherwise.
+     */
+    isVerificationContactBlocked(): boolean;
 }
 /**
  * Error that occurred during MFA challenge submission.

package/dist/custom-auth-path/custom_auth/core/auth_flow/mfa/error_type/MfaError.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"MfaError.d.ts","sourceRoot":"","sources":["../../../../../../../src/custom_auth/core/auth_flow/mfa/error_type/MfaError.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;AAEjE;;GAEG;AACH,qBAAa,wBAAyB,SAAQ,mBAAmB;IAC7D;;;OAGG;IACH,cAAc,IAAI,OAAO;CAG5B;AAED;;GAEG;AACH,qBAAa,uBAAwB,SAAQ,mBAAmB;IAC5D;;;OAGG;IACH,oBAAoB,IAAI,OAAO;CAGlC"}
+{"version":3,"file":"MfaError.d.ts","sourceRoot":"","sources":["../../../../../../../src/custom_auth/core/auth_flow/mfa/error_type/MfaError.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;AAEjE;;GAEG;AACH,qBAAa,wBAAyB,SAAQ,mBAAmB;IAC7D;;;OAGG;IACH,cAAc,IAAI,OAAO;IAIzB;;;OAGG;IACH,4BAA4B,IAAI,OAAO;CAG1C;AAED;;GAEG;AACH,qBAAa,uBAAwB,SAAQ,mBAAmB;IAC5D;;;OAGG;IACH,oBAAoB,IAAI,OAAO;CAGlC"}

package/dist/custom-auth-path/custom_auth/core/auth_flow/mfa/error_type/MfaError.mjs

@@ -0,0 +1,42 @@
+/*! @azure/msal-browser v4.25.0 2025-10-09 */
+'use strict';
+import { AuthActionErrorBase } from '../../AuthFlowErrorBase.mjs';
+
+/*
+ * Copyright (c) Microsoft Corporation. All rights reserved.
+ * Licensed under the MIT License.
+ */
+/**
+ * Error that occurred during MFA challenge request.
+ */
+class MfaRequestChallengeError extends AuthActionErrorBase {
+    /**
+     * Checks if the input for MFA challenge is incorrect.
+     * @returns true if the input is incorrect, false otherwise.
+     */
+    isInvalidInput() {
+        return this.isInvalidInputError();
+    }
+    /**
+     * Checks if the error is due to the verification contact (e.g., phone number or email) being blocked. Consider contacting customer support for assistance.
+     * @returns true if the error is due to the verification contact being blocked, false otherwise.
+     */
+    isVerificationContactBlocked() {
+        return this.isVerificationContactBlockedError();
+    }
+}
+/**
+ * Error that occurred during MFA challenge submission.
+ */
+class MfaSubmitChallengeError extends AuthActionErrorBase {
+    /**
+     * Checks if the submitted challenge code (e.g., OTP code) is incorrect.
+     * @returns true if the challenge code is invalid, false otherwise.
+     */
+    isIncorrectChallenge() {
+        return this.isInvalidCodeError();
+    }
+}
+
+export { MfaRequestChallengeError, MfaSubmitChallengeError };
+//# sourceMappingURL=MfaError.mjs.map

package/dist/custom-auth-path/custom_auth/core/auth_flow/mfa/error_type/MfaError.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"MfaError.mjs","sources":["../../../../../../../../src/custom_auth/core/auth_flow/mfa/error_type/MfaError.ts"],"sourcesContent":[null],"names":[],"mappings":";;;;AAAA;;;AAGG;AAIH;;AAEG;AACG,MAAO,wBAAyB,SAAQ,mBAAmB,CAAA;AAC7D;;;AAGG;IACH,cAAc,GAAA;AACV,QAAA,OAAO,IAAI,CAAC,mBAAmB,EAAE,CAAC;KACrC;AAED;;;AAGG;IACH,4BAA4B,GAAA;AACxB,QAAA,OAAO,IAAI,CAAC,iCAAiC,EAAE,CAAC;KACnD;AACJ,CAAA;AAED;;AAEG;AACG,MAAO,uBAAwB,SAAQ,mBAAmB,CAAA;AAC5D;;;AAGG;IACH,oBAAoB,GAAA;AAChB,QAAA,OAAO,IAAI,CAAC,kBAAkB,EAAE,CAAC;KACpC;AACJ;;;;"}

package/dist/custom-auth-path/custom_auth/core/auth_flow/mfa/result/MfaRequestChallengeResult.mjs

@@ -0,0 +1,45 @@
+/*! @azure/msal-browser v4.25.0 2025-10-09 */
+'use strict';
+import { AuthFlowResultBase } from '../../AuthFlowResultBase.mjs';
+import { MfaRequestChallengeError } from '../error_type/MfaError.mjs';
+import { MfaFailedState } from '../state/MfaFailedState.mjs';
+
+/*
+ * Copyright (c) Microsoft Corporation. All rights reserved.
+ * Licensed under the MIT License.
+ */
+/**
+ * Result of requesting an MFA challenge.
+ * Uses base state type to avoid circular dependencies.
+ */
+class MfaRequestChallengeResult extends AuthFlowResultBase {
+    /**
+     * Creates an MfaRequestChallengeResult with an error.
+     * @param error The error that occurred.
+     * @returns The MfaRequestChallengeResult with error.
+     */
+    static createWithError(error) {
+        const result = new MfaRequestChallengeResult(new MfaFailedState());
+        result.error = new MfaRequestChallengeError(MfaRequestChallengeResult.createErrorData(error));
+        return result;
+    }
+    /**
+     * Checks if the result indicates that verification is required.
+     * @returns true if verification is required, false otherwise.
+     * @warning This API is experimental. It may be changed in the future without notice. Do not use in production applications.
+     */
+    isVerificationRequired() {
+        return this.state.constructor?.name === "MfaVerificationRequiredState";
+    }
+    /**
+     * Checks if the result is in a failed state.
+     * @returns true if the result is failed, false otherwise.
+     * @warning This API is experimental. It may be changed in the future without notice. Do not use in production applications.
+     */
+    isFailed() {
+        return this.state instanceof MfaFailedState;
+    }
+}
+
+export { MfaRequestChallengeResult };
+//# sourceMappingURL=MfaRequestChallengeResult.mjs.map

package/dist/custom-auth-path/custom_auth/core/auth_flow/mfa/result/MfaRequestChallengeResult.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"MfaRequestChallengeResult.mjs","sources":["../../../../../../../../src/custom_auth/core/auth_flow/mfa/result/MfaRequestChallengeResult.ts"],"sourcesContent":[null],"names":[],"mappings":";;;;;;AAAA;;;AAGG;AAOH;;;AAGG;AACG,MAAO,yBAA0B,SAAQ,kBAG9C,CAAA;AACG;;;;AAIG;IACH,OAAO,eAAe,CAAC,KAAc,EAAA;QACjC,MAAM,MAAM,GAAG,IAAI,yBAAyB,CAAC,IAAI,cAAc,EAAE,CAAC,CAAC;AACnE,QAAA,MAAM,CAAC,KAAK,GAAG,IAAI,wBAAwB,CACvC,yBAAyB,CAAC,eAAe,CAAC,KAAK,CAAC,CACnD,CAAC;AACF,QAAA,OAAO,MAAM,CAAC;KACjB;AAED;;;;AAIG;IACH,sBAAsB,GAAA;QAClB,OAAO,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,IAAI,KAAK,8BAA8B,CAAC;KAC1E;AAED;;;;AAIG;IACH,QAAQ,GAAA;AACJ,QAAA,OAAO,IAAI,CAAC,KAAK,YAAY,cAAc,CAAC;KAC/C;AACJ;;;;"}

package/dist/custom-auth-path/custom_auth/core/auth_flow/mfa/result/MfaSubmitChallengeResult.mjs

@@ -0,0 +1,45 @@
+/*! @azure/msal-browser v4.25.0 2025-10-09 */
+'use strict';
+import { AuthFlowResultBase } from '../../AuthFlowResultBase.mjs';
+import { MfaSubmitChallengeError } from '../error_type/MfaError.mjs';
+import { MfaCompletedState } from '../state/MfaCompletedState.mjs';
+import { MfaFailedState } from '../state/MfaFailedState.mjs';
+
+/*
+ * Copyright (c) Microsoft Corporation. All rights reserved.
+ * Licensed under the MIT License.
+ */
+/**
+ * Result of submitting an MFA challenge.
+ */
+class MfaSubmitChallengeResult extends AuthFlowResultBase {
+    /**
+     * Creates an MfaSubmitChallengeResult with an error.
+     * @param error The error that occurred.
+     * @returns The MfaSubmitChallengeResult with error.
+     */
+    static createWithError(error) {
+        const result = new MfaSubmitChallengeResult(new MfaFailedState());
+        result.error = new MfaSubmitChallengeError(MfaSubmitChallengeResult.createErrorData(error));
+        return result;
+    }
+    /**
+     * Checks if the MFA flow is completed successfully.
+     * @returns true if completed, false otherwise.
+     * @warning This API is experimental. It may be changed in the future without notice. Do not use in production applications.
+     */
+    isCompleted() {
+        return this.state instanceof MfaCompletedState;
+    }
+    /**
+     * Checks if the result is in a failed state.
+     * @returns true if the result is failed, false otherwise.
+     * @warning This API is experimental. It may be changed in the future without notice. Do not use in production applications.
+     */
+    isFailed() {
+        return this.state instanceof MfaFailedState;
+    }
+}
+
+export { MfaSubmitChallengeResult };
+//# sourceMappingURL=MfaSubmitChallengeResult.mjs.map

package/dist/custom-auth-path/custom_auth/core/auth_flow/mfa/result/MfaSubmitChallengeResult.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"MfaSubmitChallengeResult.mjs","sources":["../../../../../../../../src/custom_auth/core/auth_flow/mfa/result/MfaSubmitChallengeResult.ts"],"sourcesContent":[null],"names":[],"mappings":";;;;;;;AAAA;;;AAGG;AAQH;;AAEG;AACG,MAAO,wBAAyB,SAAQ,kBAI7C,CAAA;AACG;;;;AAIG;IACH,OAAO,eAAe,CAAC,KAAc,EAAA;QACjC,MAAM,MAAM,GAAG,IAAI,wBAAwB,CAAC,IAAI,cAAc,EAAE,CAAC,CAAC;AAClE,QAAA,MAAM,CAAC,KAAK,GAAG,IAAI,uBAAuB,CACtC,wBAAwB,CAAC,eAAe,CAAC,KAAK,CAAC,CAClD,CAAC;AACF,QAAA,OAAO,MAAM,CAAC;KACjB;AAED;;;;AAIG;IACH,WAAW,GAAA;AACP,QAAA,OAAO,IAAI,CAAC,KAAK,YAAY,iBAAiB,CAAC;KAClD;AAED;;;;AAIG;IACH,QAAQ,GAAA;AACJ,QAAA,OAAO,IAAI,CAAC,KAAK,YAAY,cAAc,CAAC;KAC/C;AACJ;;;;"}

package/dist/custom-auth-path/custom_auth/core/auth_flow/mfa/state/MfaCompletedState.mjs

@@ -0,0 +1,16 @@
+/*! @azure/msal-browser v4.25.0 2025-10-09 */
+'use strict';
+import { AuthFlowStateBase } from '../../AuthFlowState.mjs';
+
+/*
+ * Copyright (c) Microsoft Corporation. All rights reserved.
+ * Licensed under the MIT License.
+ */
+/**
+ * State indicating that the MFA flow has completed successfully.
+ */
+class MfaCompletedState extends AuthFlowStateBase {
+}
+
+export { MfaCompletedState };
+//# sourceMappingURL=MfaCompletedState.mjs.map

package/dist/custom-auth-path/custom_auth/core/auth_flow/mfa/state/MfaCompletedState.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"MfaCompletedState.mjs","sources":["../../../../../../../../src/custom_auth/core/auth_flow/mfa/state/MfaCompletedState.ts"],"sourcesContent":[null],"names":[],"mappings":";;;;AAAA;;;AAGG;AAIH;;AAEG;AACG,MAAO,iBAAkB,SAAQ,iBAAiB,CAAA;AAAG;;;;"}

package/dist/custom-auth-path/custom_auth/core/auth_flow/mfa/state/MfaFailedState.mjs

@@ -0,0 +1,16 @@
+/*! @azure/msal-browser v4.25.0 2025-10-09 */
+'use strict';
+import { AuthFlowStateBase } from '../../AuthFlowState.mjs';
+
+/*
+ * Copyright (c) Microsoft Corporation. All rights reserved.
+ * Licensed under the MIT License.
+ */
+/**
+ * State indicating that the MFA flow has failed.
+ */
+class MfaFailedState extends AuthFlowStateBase {
+}
+
+export { MfaFailedState };
+//# sourceMappingURL=MfaFailedState.mjs.map

package/dist/custom-auth-path/custom_auth/core/auth_flow/mfa/state/MfaFailedState.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"MfaFailedState.mjs","sources":["../../../../../../../../src/custom_auth/core/auth_flow/mfa/state/MfaFailedState.ts"],"sourcesContent":[null],"names":[],"mappings":";;;;AAAA;;;AAGG;AAIH;;AAEG;AACG,MAAO,cAAe,SAAQ,iBAAiB,CAAA;AAAG;;;;"}

package/dist/custom-auth-path/custom_auth/core/auth_flow/mfa/state/MfaState.mjs

@@ -0,0 +1,125 @@
+/*! @azure/msal-browser v4.25.0 2025-10-09 */
+'use strict';
+import { MfaSubmitChallengeResult } from '../result/MfaSubmitChallengeResult.mjs';
+import { MfaRequestChallengeResult } from '../result/MfaRequestChallengeResult.mjs';
+import { CustomAuthAccountData } from '../../../../get_account/auth_flow/CustomAuthAccountData.mjs';
+import { MfaCompletedState } from './MfaCompletedState.mjs';
+import { ensureArgumentIsNotEmptyString } from '../../../utils/ArgumentValidator.mjs';
+import { AuthFlowActionRequiredStateBase } from '../../AuthFlowState.mjs';
+
+/*
+ * Copyright (c) Microsoft Corporation. All rights reserved.
+ * Licensed under the MIT License.
+ */
+class MfaState extends AuthFlowActionRequiredStateBase {
+    /**
+     * Requests an MFA challenge for a specific authentication method.
+     * @param authMethodId The authentication method ID to use for the challenge.
+     * @returns Promise that resolves to MfaRequestChallengeResult.
+     * @warning This API is experimental. It may be changed in the future without notice. Do not use in production applications.
+     */
+    async requestChallenge(authMethodId) {
+        try {
+            ensureArgumentIsNotEmptyString("authMethodId", authMethodId);
+            this.stateParameters.logger.verbose(`Requesting MFA challenge with authentication method - '${authMethodId}'.`, this.stateParameters.correlationId);
+            const requestParams = {
+                correlationId: this.stateParameters.correlationId,
+                continuationToken: this.stateParameters.continuationToken ?? "",
+                challengeType: this.stateParameters.config.customAuth.challengeTypes ?? [],
+                authMethodId: authMethodId,
+            };
+            const result = await this.stateParameters.mfaClient.requestChallenge(requestParams);
+            this.stateParameters.logger.verbose("MFA challenge requested successfully.", this.stateParameters.correlationId);
+            return new MfaRequestChallengeResult(new MfaVerificationRequiredState({
+                correlationId: result.correlationId,
+                continuationToken: result.continuationToken,
+                config: this.stateParameters.config,
+                logger: this.stateParameters.logger,
+                mfaClient: this.stateParameters.mfaClient,
+                cacheClient: this.stateParameters.cacheClient,
+                challengeChannel: result.challengeChannel,
+                challengeTargetLabel: result.challengeTargetLabel,
+                codeLength: result.codeLength,
+                selectedAuthMethodId: authMethodId,
+                scopes: this.stateParameters.scopes ?? [],
+            }));
+        }
+        catch (error) {
+            this.stateParameters.logger.errorPii(`Failed to request MFA challenge. Error: ${error}.`, this.stateParameters.correlationId);
+            return MfaRequestChallengeResult.createWithError(error);
+        }
+    }
+}
+/**
+ * State indicating that MFA is required and awaiting user action.
+ * This state allows the developer to pause execution before sending the code to the user's email.
+ */
+class MfaAwaitingState extends MfaState {
+    /**
+     * Gets the available authentication methods for MFA.
+     * @returns Array of available authentication methods.
+     * @warning This API is experimental. It may be changed in the future without notice. Do not use in production applications.
+     */
+    getAuthMethods() {
+        return this.stateParameters.authMethods;
+    }
+}
+/**
+ * State indicating that MFA verification is required.
+ * The challenge has been sent and the user needs to provide the code.
+ */
+class MfaVerificationRequiredState extends MfaState {
+    /**
+     * Gets the length of the code that the user needs to provide.
+     * @returns The expected code length.
+     * @warning This API is experimental. It may be changed in the future without notice. Do not use in production applications.
+     */
+    getCodeLength() {
+        return this.stateParameters.codeLength;
+    }
+    /**
+     * Gets the channel through which the challenge was sent.
+     * @returns The challenge channel (e.g., "email").
+     * @warning This API is experimental. It may be changed in the future without notice. Do not use in production applications.
+     */
+    getChannel() {
+        return this.stateParameters.challengeChannel;
+    }
+    /**
+     * Gets the target label indicating where the challenge was sent.
+     * @returns The challenge target label (e.g., masked email address).
+     * @warning This API is experimental. It may be changed in the future without notice. Do not use in production applications.
+     */
+    getSentTo() {
+        return this.stateParameters.challengeTargetLabel;
+    }
+    /**
+     * Submits the MFA challenge (e.g., OTP code) to complete the authentication.
+     * @param challenge The challenge code (e.g., OTP code) entered by the user.
+     * @returns Promise that resolves to MfaSubmitChallengeResult.
+     * @warning This API is experimental. It may be changed in the future without notice. Do not use in production applications.
+     */
+    async submitChallenge(challenge) {
+        try {
+            this.ensureCodeIsValid(challenge, this.getCodeLength());
+            this.stateParameters.logger.verbose("Submitting MFA challenge.", this.stateParameters.correlationId);
+            const submitParams = {
+                correlationId: this.stateParameters.correlationId,
+                continuationToken: this.stateParameters.continuationToken ?? "",
+                scopes: this.stateParameters.scopes ?? [],
+                challenge: challenge,
+            };
+            const result = await this.stateParameters.mfaClient.submitChallenge(submitParams);
+            this.stateParameters.logger.verbose("MFA challenge submitted successfully.", this.stateParameters.correlationId);
+            const accountInfo = new CustomAuthAccountData(result.authenticationResult.account, this.stateParameters.config, this.stateParameters.cacheClient, this.stateParameters.logger, this.stateParameters.correlationId);
+            return new MfaSubmitChallengeResult(new MfaCompletedState(), accountInfo);
+        }
+        catch (error) {
+            this.stateParameters.logger.errorPii(`Failed to submit MFA challenge. Error: ${error}.`, this.stateParameters.correlationId);
+            return MfaSubmitChallengeResult.createWithError(error);
+        }
+    }
+}
+
+export { MfaAwaitingState, MfaVerificationRequiredState };
+//# sourceMappingURL=MfaState.mjs.map

package/dist/custom-auth-path/custom_auth/core/auth_flow/mfa/state/MfaState.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"MfaState.mjs","sources":["../../../../../../../../src/custom_auth/core/auth_flow/mfa/state/MfaState.ts"],"sourcesContent":[null],"names":[],"mappings":";;;;;;;;;AAAA;;;AAGG;AAmBH,MAAe,QAEb,SAAQ,+BAA4C,CAAA;AAClD;;;;;AAKG;IACH,MAAM,gBAAgB,CAClB,YAAoB,EAAA;QAEpB,IAAI;AACA,YAAA,8BAA8B,CAAC,cAAc,EAAE,YAAY,CAAC,CAAC;AAE7D,YAAA,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,OAAO,CAC/B,CAAA,uDAAA,EAA0D,YAAY,CAAA,EAAA,CAAI,EAC1E,IAAI,CAAC,eAAe,CAAC,aAAa,CACrC,CAAC;AAEF,YAAA,MAAM,aAAa,GAA8B;AAC7C,gBAAA,aAAa,EAAE,IAAI,CAAC,eAAe,CAAC,aAAa;AACjD,gBAAA,iBAAiB,EAAE,IAAI,CAAC,eAAe,CAAC,iBAAiB,IAAI,EAAE;gBAC/D,aAAa,EACT,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,UAAU,CAAC,cAAc,IAAI,EAAE;AAC/D,gBAAA,YAAY,EAAE,YAAY;aAC7B,CAAC;AAEF,YAAA,MAAM,MAAM,GACR,MAAM,IAAI,CAAC,eAAe,CAAC,SAAS,CAAC,gBAAgB,CACjD,aAAa,CAChB,CAAC;AAEN,YAAA,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,OAAO,CAC/B,uCAAuC,EACvC,IAAI,CAAC,eAAe,CAAC,aAAa,CACrC,CAAC;AAEF,YAAA,OAAO,IAAI,yBAAyB,CAChC,IAAI,4BAA4B,CAAC;gBAC7B,aAAa,EAAE,MAAM,CAAC,aAAa;gBACnC,iBAAiB,EAAE,MAAM,CAAC,iBAAiB;AAC3C,gBAAA,MAAM,EAAE,IAAI,CAAC,eAAe,CAAC,MAAM;AACnC,gBAAA,MAAM,EAAE,IAAI,CAAC,eAAe,CAAC,MAAM;AACnC,gBAAA,SAAS,EAAE,IAAI,CAAC,eAAe,CAAC,SAAS;AACzC,gBAAA,WAAW,EAAE,IAAI,CAAC,eAAe,CAAC,WAAW;gBAC7C,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;gBACzC,oBAAoB,EAAE,MAAM,CAAC,oBAAoB;gBACjD,UAAU,EAAE,MAAM,CAAC,UAAU;AAC7B,gBAAA,oBAAoB,EAAE,YAAY;AAClC,gBAAA,MAAM,EAAE,IAAI,CAAC,eAAe,CAAC,MAAM,IAAI,EAAE;AAC5C,aAAA,CAAC,CACL,CAAC;AACL,SAAA;AAAC,QAAA,OAAO,KAAK,EAAE;AACZ,YAAA,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,QAAQ,CAChC,CAAA,wCAAA,EAA2C,KAAK,CAAA,CAAA,CAAG,EACnD,IAAI,CAAC,eAAe,CAAC,aAAa,CACrC,CAAC;AAEF,YAAA,OAAO,yBAAyB,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;AAC3D,SAAA;KACJ;AACJ,CAAA;AAED;;;AAGG;AACG,MAAO,gBAAiB,SAAQ,QAAoC,CAAA;AACtE;;;;AAIG;IACH,cAAc,GAAA;AACV,QAAA,OAAO,IAAI,CAAC,eAAe,CAAC,WAAW,CAAC;KAC3C;AACJ,CAAA;AAED;;;AAGG;AACG,MAAO,4BAA6B,SAAQ,QAAgD,CAAA;AAC9F;;;;AAIG;IACH,aAAa,GAAA;AACT,QAAA,OAAO,IAAI,CAAC,eAAe,CAAC,UAAU,CAAC;KAC1C;AAED;;;;AAIG;IACH,UAAU,GAAA;AACN,QAAA,OAAO,IAAI,CAAC,eAAe,CAAC,gBAAgB,CAAC;KAChD;AAED;;;;AAIG;IACH,SAAS,GAAA;AACL,QAAA,OAAO,IAAI,CAAC,eAAe,CAAC,oBAAoB,CAAC;KACpD;AAED;;;;;AAKG;IACH,MAAM,eAAe,CACjB,SAAiB,EAAA;QAEjB,IAAI;YACA,IAAI,CAAC,iBAAiB,CAAC,SAAS,EAAE,IAAI,CAAC,aAAa,EAAE,CAAC,CAAC;AAExD,YAAA,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,OAAO,CAC/B,2BAA2B,EAC3B,IAAI,CAAC,eAAe,CAAC,aAAa,CACrC,CAAC;AAEF,YAAA,MAAM,YAAY,GAA6B;AAC3C,gBAAA,aAAa,EAAE,IAAI,CAAC,eAAe,CAAC,aAAa;AACjD,gBAAA,iBAAiB,EAAE,IAAI,CAAC,eAAe,CAAC,iBAAiB,IAAI,EAAE;AAC/D,gBAAA,MAAM,EAAE,IAAI,CAAC,eAAe,CAAC,MAAM,IAAI,EAAE;AACzC,gBAAA,SAAS,EAAE,SAAS;aACvB,CAAC;AAEF,YAAA,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,SAAS,CAAC,eAAe,CAC/D,YAAY,CACf,CAAC;AAEF,YAAA,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,OAAO,CAC/B,uCAAuC,EACvC,IAAI,CAAC,eAAe,CAAC,aAAa,CACrC,CAAC;AAEF,YAAA,MAAM,WAAW,GAAG,IAAI,qBAAqB,CACzC,MAAM,CAAC,oBAAoB,CAAC,OAAO,EACnC,IAAI,CAAC,eAAe,CAAC,MAAM,EAC3B,IAAI,CAAC,eAAe,CAAC,WAAW,EAChC,IAAI,CAAC,eAAe,CAAC,MAAM,EAC3B,IAAI,CAAC,eAAe,CAAC,aAAa,CACrC,CAAC;YAEF,OAAO,IAAI,wBAAwB,CAC/B,IAAI,iBAAiB,EAAE,EACvB,WAAW,CACd,CAAC;AACL,SAAA;AAAC,QAAA,OAAO,KAAK,EAAE;AACZ,YAAA,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,QAAQ,CAChC,CAAA,uCAAA,EAA0C,KAAK,CAAA,CAAA,CAAG,EAClD,IAAI,CAAC,eAAe,CAAC,aAAa,CACrC,CAAC;AAEF,YAAA,OAAO,wBAAwB,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;AAC1D,SAAA;KACJ;AACJ;;;;"}

package/dist/custom-auth-path/custom_auth/core/error/CustomAuthApiError.mjs

@@ -1,4 +1,4 @@
-/*! @azure/msal-browser v4.24.0 2025-09-24 */
+/*! @azure/msal-browser v4.25.0 2025-10-09 */
 'use strict';
 import { CustomAuthError } from './CustomAuthError.mjs';
 

package/dist/custom-auth-path/custom_auth/core/error/CustomAuthError.mjs

@@ -1,4 +1,4 @@
-/*! @azure/msal-browser v4.24.0 2025-09-24 */
+/*! @azure/msal-browser v4.25.0 2025-10-09 */
 'use strict';
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.

package/dist/custom-auth-path/custom_auth/core/error/HttpError.mjs

@@ -1,4 +1,4 @@
-/*! @azure/msal-browser v4.24.0 2025-09-24 */
+/*! @azure/msal-browser v4.25.0 2025-10-09 */
 'use strict';
 import { CustomAuthError } from './CustomAuthError.mjs';
 

package/dist/custom-auth-path/custom_auth/core/error/HttpErrorCodes.mjs

@@ -1,4 +1,4 @@
-/*! @azure/msal-browser v4.24.0 2025-09-24 */
+/*! @azure/msal-browser v4.25.0 2025-10-09 */
 'use strict';
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.

package/dist/custom-auth-path/custom_auth/core/error/InvalidArgumentError.mjs

@@ -1,4 +1,4 @@
-/*! @azure/msal-browser v4.24.0 2025-09-24 */
+/*! @azure/msal-browser v4.25.0 2025-10-09 */
 'use strict';
 import { CustomAuthError } from './CustomAuthError.mjs';
 

package/dist/custom-auth-path/custom_auth/core/error/InvalidConfigurationError.mjs

@@ -1,4 +1,4 @@
-/*! @azure/msal-browser v4.24.0 2025-09-24 */
+/*! @azure/msal-browser v4.25.0 2025-10-09 */
 'use strict';
 import { CustomAuthError } from './CustomAuthError.mjs';
 

package/dist/custom-auth-path/custom_auth/core/error/InvalidConfigurationErrorCodes.mjs

@@ -1,4 +1,4 @@
-/*! @azure/msal-browser v4.24.0 2025-09-24 */
+/*! @azure/msal-browser v4.25.0 2025-10-09 */
 'use strict';
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.

package/dist/custom-auth-path/custom_auth/core/error/MethodNotImplementedError.mjs

@@ -1,4 +1,4 @@
-/*! @azure/msal-browser v4.24.0 2025-09-24 */
+/*! @azure/msal-browser v4.25.0 2025-10-09 */
 'use strict';
 import { CustomAuthError } from './CustomAuthError.mjs';
 

package/dist/custom-auth-path/custom_auth/core/error/MsalCustomAuthError.mjs

@@ -1,4 +1,4 @@
-/*! @azure/msal-browser v4.24.0 2025-09-24 */
+/*! @azure/msal-browser v4.25.0 2025-10-09 */
 'use strict';
 import { CustomAuthError } from './CustomAuthError.mjs';
 

package/dist/custom-auth-path/custom_auth/core/error/NoCachedAccountFoundError.mjs

@@ -1,4 +1,4 @@
-/*! @azure/msal-browser v4.24.0 2025-09-24 */
+/*! @azure/msal-browser v4.25.0 2025-10-09 */
 'use strict';
 import { CustomAuthError } from './CustomAuthError.mjs';
 

package/dist/custom-auth-path/custom_auth/core/error/ParsedUrlError.mjs

@@ -1,4 +1,4 @@
-/*! @azure/msal-browser v4.24.0 2025-09-24 */
+/*! @azure/msal-browser v4.25.0 2025-10-09 */
 'use strict';
 import { CustomAuthError } from './CustomAuthError.mjs';
 

package/dist/custom-auth-path/custom_auth/core/error/ParsedUrlErrorCodes.mjs

@@ -1,4 +1,4 @@
-/*! @azure/msal-browser v4.24.0 2025-09-24 */
+/*! @azure/msal-browser v4.25.0 2025-10-09 */
 'use strict';
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.

package/dist/custom-auth-path/custom_auth/core/error/UnexpectedError.mjs

@@ -1,4 +1,4 @@
-/*! @azure/msal-browser v4.24.0 2025-09-24 */
+/*! @azure/msal-browser v4.25.0 2025-10-09 */
 'use strict';
 import { CustomAuthError } from './CustomAuthError.mjs';
 

package/dist/custom-auth-path/custom_auth/core/error/UnsupportedEnvironmentError.mjs

@@ -1,4 +1,4 @@
-/*! @azure/msal-browser v4.24.0 2025-09-24 */
+/*! @azure/msal-browser v4.25.0 2025-10-09 */
 'use strict';
 import { CustomAuthError } from './CustomAuthError.mjs';
 

package/dist/custom-auth-path/custom_auth/core/error/UserAccountAttributeError.mjs

@@ -1,4 +1,4 @@
-/*! @azure/msal-browser v4.24.0 2025-09-24 */
+/*! @azure/msal-browser v4.25.0 2025-10-09 */
 'use strict';
 import { CustomAuthError } from './CustomAuthError.mjs';
 

package/dist/custom-auth-path/custom_auth/core/error/UserAlreadySignedInError.mjs

@@ -1,4 +1,4 @@
-/*! @azure/msal-browser v4.24.0 2025-09-24 */
+/*! @azure/msal-browser v4.25.0 2025-10-09 */
 'use strict';
 import { CustomAuthError } from './CustomAuthError.mjs';
 

package/dist/custom-auth-path/custom_auth/core/interaction_client/CustomAuthInteractionClientBase.mjs

@@ -1,4 +1,4 @@
-/*! @azure/msal-browser v4.24.0 2025-09-24 */
+/*! @azure/msal-browser v4.25.0 2025-10-09 */
 'use strict';
 import { MethodNotImplementedError } from '../error/MethodNotImplementedError.mjs';
 import { ChallengeType } from '../../CustomAuthConstants.mjs';

package/dist/custom-auth-path/custom_auth/core/interaction_client/CustomAuthInterationClientFactory.mjs

@@ -1,4 +1,4 @@
-/*! @azure/msal-browser v4.24.0 2025-09-24 */
+/*! @azure/msal-browser v4.25.0 2025-10-09 */
 'use strict';
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.

package/dist/custom-auth-path/custom_auth/core/interaction_client/jit/JitClient.mjs

@@ -1,4 +1,4 @@
-/*! @azure/msal-browser v4.24.0 2025-09-24 */
+/*! @azure/msal-browser v4.25.0 2025-10-09 */
 'use strict';
 import { CustomAuthInteractionClientBase } from '../CustomAuthInteractionClientBase.mjs';
 import { createJitVerificationRequiredResult, createJitCompletedResult } from './result/JitActionResult.mjs';

package/dist/custom-auth-path/custom_auth/core/interaction_client/jit/result/JitActionResult.mjs

@@ -1,4 +1,4 @@
-/*! @azure/msal-browser v4.24.0 2025-09-24 */
+/*! @azure/msal-browser v4.25.0 2025-10-09 */
 'use strict';
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.

package/dist/custom-auth-path/custom_auth/core/interaction_client/mfa/MfaClient.mjs

@@ -0,0 +1,85 @@
+/*! @azure/msal-browser v4.25.0 2025-10-09 */
+'use strict';
+import { CustomAuthInteractionClientBase } from '../CustomAuthInteractionClientBase.mjs';
+import { createMfaVerificationRequiredResult, createMfaCompletedResult } from './result/MfaActionResult.mjs';
+import { ChallengeType, GrantType, DefaultCustomAuthApiCodeLength } from '../../../CustomAuthConstants.mjs';
+import { MFA_REQUEST_CHALLENGE, MFA_SUBMIT_CHALLENGE } from '../../telemetry/PublicApiId.mjs';
+import { ensureArgumentIsNotEmptyString } from '../../utils/ArgumentValidator.mjs';
+import { CustomAuthApiError } from '../../error/CustomAuthApiError.mjs';
+import { UNSUPPORTED_CHALLENGE_TYPE } from '../../network_client/custom_auth_api/types/ApiErrorCodes.mjs';
+
+/*
+ * Copyright (c) Microsoft Corporation. All rights reserved.
+ * Licensed under the MIT License.
+ */
+/**
+ * MFA client for handling multi-factor authentication flows.
+ */
+class MfaClient extends CustomAuthInteractionClientBase {
+    /**
+     * Requests an MFA challenge to be sent to the user.
+     * @param parameters The parameters for requesting the challenge.
+     * @returns Promise that resolves to either MfaVerificationRequiredResult.
+     */
+    async requestChallenge(parameters) {
+        const apiId = MFA_REQUEST_CHALLENGE;
+        const telemetryManager = this.initializeServerTelemetryManager(apiId);
+        this.logger.verbose("Calling challenge endpoint for MFA.", parameters.correlationId);
+        const challengeReq = {
+            challenge_type: this.getChallengeTypes(parameters.challengeType),
+            continuation_token: parameters.continuationToken,
+            id: parameters.authMethodId,
+            correlationId: parameters.correlationId,
+            telemetryManager: telemetryManager,
+        };
+        const challengeResponse = await this.customAuthApiClient.signInApi.requestChallenge(challengeReq);
+        this.logger.verbose("Challenge endpoint called for MFA.", parameters.correlationId);
+        if (challengeResponse.challenge_type === ChallengeType.OOB) {
+            // Verification required - code will be sent
+            return createMfaVerificationRequiredResult({
+                correlationId: challengeResponse.correlation_id,
+                continuationToken: challengeResponse.continuation_token ?? "",
+                challengeChannel: challengeResponse.challenge_channel ?? "",
+                challengeTargetLabel: challengeResponse.challenge_target_label ?? "",
+                codeLength: challengeResponse.code_length ??
+                    DefaultCustomAuthApiCodeLength,
+                bindingMethod: challengeResponse.binding_method ?? "",
+            });
+        }
+        this.logger.error(`Unsupported challenge type '${challengeResponse.challenge_type}' for MFA.`, parameters.correlationId);
+        throw new CustomAuthApiError(UNSUPPORTED_CHALLENGE_TYPE, `Unsupported challenge type '${challengeResponse.challenge_type}'.`, challengeResponse.correlation_id);
+    }
+    /**
+     * Submits the MFA challenge response (e.g., OTP code).
+     * @param parameters The parameters for submitting the challenge.
+     * @returns Promise that resolves to MfaCompletedResult.
+     */
+    async submitChallenge(parameters) {
+        ensureArgumentIsNotEmptyString("parameters.challenge", parameters.challenge, parameters.correlationId);
+        const apiId = MFA_SUBMIT_CHALLENGE;
+        const telemetryManager = this.initializeServerTelemetryManager(apiId);
+        const scopes = this.getScopes(parameters.scopes);
+        const request = {
+            continuation_token: parameters.continuationToken,
+            oob: parameters.challenge,
+            grant_type: GrantType.MFA_OOB,
+            scope: scopes.join(" "),
+            correlationId: parameters.correlationId,
+            telemetryManager: telemetryManager,
+            ...(parameters.claims && {
+                claims: parameters.claims,
+            }),
+        };
+        this.logger.verbose("Calling token endpoint for MFA challenge submission.", parameters.correlationId);
+        const tokenResponse = await this.customAuthApiClient.signInApi.requestTokensWithOob(request);
+        // Save tokens and create authentication result
+        const result = await this.handleTokenResponse(tokenResponse, scopes, tokenResponse.correlation_id ?? parameters.correlationId);
+        return createMfaCompletedResult({
+            correlationId: parameters.correlationId,
+            authenticationResult: result,
+        });
+    }
+}
+
+export { MfaClient };
+//# sourceMappingURL=MfaClient.mjs.map

package/dist/custom-auth-path/custom_auth/core/interaction_client/mfa/MfaClient.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"MfaClient.mjs","sources":["../../../../../../../src/custom_auth/core/interaction_client/mfa/MfaClient.ts"],"sourcesContent":[null],"names":["PublicApiId.MFA_REQUEST_CHALLENGE","CustomAuthApiErrorCode.UNSUPPORTED_CHALLENGE_TYPE","PublicApiId.MFA_SUBMIT_CHALLENGE"],"mappings":";;;;;;;;;;AAAA;;;AAGG;AA2BH;;AAEG;AACG,MAAO,SAAU,SAAQ,+BAA+B,CAAA;AAC1D;;;;AAIG;IACH,MAAM,gBAAgB,CAClB,UAAqC,EAAA;AAErC,QAAA,MAAM,KAAK,GAAGA,qBAAiC,CAAC;QAChD,MAAM,gBAAgB,GAAG,IAAI,CAAC,gCAAgC,CAAC,KAAK,CAAC,CAAC;QAEtE,IAAI,CAAC,MAAM,CAAC,OAAO,CACf,qCAAqC,EACrC,UAAU,CAAC,aAAa,CAC3B,CAAC;AAEF,QAAA,MAAM,YAAY,GAA2B;YACzC,cAAc,EAAE,IAAI,CAAC,iBAAiB,CAAC,UAAU,CAAC,aAAa,CAAC;YAChE,kBAAkB,EAAE,UAAU,CAAC,iBAAiB;YAChD,EAAE,EAAE,UAAU,CAAC,YAAY;YAC3B,aAAa,EAAE,UAAU,CAAC,aAAa;AACvC,YAAA,gBAAgB,EAAE,gBAAgB;SACrC,CAAC;AAEF,QAAA,MAAM,iBAAiB,GACnB,MAAM,IAAI,CAAC,mBAAmB,CAAC,SAAS,CAAC,gBAAgB,CACrD,YAAY,CACf,CAAC;QAEN,IAAI,CAAC,MAAM,CAAC,OAAO,CACf,oCAAoC,EACpC,UAAU,CAAC,aAAa,CAC3B,CAAC;AAEF,QAAA,IAAI,iBAAiB,CAAC,cAAc,KAAK,aAAa,CAAC,GAAG,EAAE;;AAExD,YAAA,OAAO,mCAAmC,CAAC;gBACvC,aAAa,EAAE,iBAAiB,CAAC,cAAc;AAC/C,gBAAA,iBAAiB,EAAE,iBAAiB,CAAC,kBAAkB,IAAI,EAAE;AAC7D,gBAAA,gBAAgB,EAAE,iBAAiB,CAAC,iBAAiB,IAAI,EAAE;AAC3D,gBAAA,oBAAoB,EAChB,iBAAiB,CAAC,sBAAsB,IAAI,EAAE;gBAClD,UAAU,EACN,iBAAiB,CAAC,WAAW;oBAC7B,8BAA8B;AAClC,gBAAA,aAAa,EAAE,iBAAiB,CAAC,cAAc,IAAI,EAAE;AACxD,aAAA,CAAC,CAAC;AACN,SAAA;AAED,QAAA,IAAI,CAAC,MAAM,CAAC,KAAK,CACb,CAA+B,4BAAA,EAAA,iBAAiB,CAAC,cAAc,YAAY,EAC3E,UAAU,CAAC,aAAa,CAC3B,CAAC;AAEF,QAAA,MAAM,IAAI,kBAAkB,CACxBC,0BAAiD,EACjD,CAAA,4BAAA,EAA+B,iBAAiB,CAAC,cAAc,CAAI,EAAA,CAAA,EACnE,iBAAiB,CAAC,cAAc,CACnC,CAAC;KACL;AAED;;;;AAIG;IACH,MAAM,eAAe,CACjB,UAAoC,EAAA;QAEpC,8BAA8B,CAC1B,sBAAsB,EACtB,UAAU,CAAC,SAAS,EACpB,UAAU,CAAC,aAAa,CAC3B,CAAC;AAEF,QAAA,MAAM,KAAK,GAAGC,oBAAgC,CAAC;QAC/C,MAAM,gBAAgB,GAAG,IAAI,CAAC,gCAAgC,CAAC,KAAK,CAAC,CAAC;QACtE,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;AAEjD,QAAA,MAAM,OAAO,GAA0B;YACnC,kBAAkB,EAAE,UAAU,CAAC,iBAAiB;YAChD,GAAG,EAAE,UAAU,CAAC,SAAS;YACzB,UAAU,EAAE,SAAS,CAAC,OAAO;AAC7B,YAAA,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC;YACvB,aAAa,EAAE,UAAU,CAAC,aAAa;AACvC,YAAA,gBAAgB,EAAE,gBAAgB;AAClC,YAAA,IAAI,UAAU,CAAC,MAAM,IAAI;gBACrB,MAAM,EAAE,UAAU,CAAC,MAAM;aAC5B,CAAC;SACL,CAAC;QAEF,IAAI,CAAC,MAAM,CAAC,OAAO,CACf,sDAAsD,EACtD,UAAU,CAAC,aAAa,CAC3B,CAAC;AAEF,QAAA,MAAM,aAAa,GACf,MAAM,IAAI,CAAC,mBAAmB,CAAC,SAAS,CAAC,oBAAoB,CACzD,OAAO,CACV,CAAC;;AAGN,QAAA,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,mBAAmB,CACzC,aAAa,EACb,MAAM,EACN,aAAa,CAAC,cAAc,IAAI,UAAU,CAAC,aAAa,CAC3D,CAAC;AAEF,QAAA,OAAO,wBAAwB,CAAC;YAC5B,aAAa,EAAE,UAAU,CAAC,aAAa;AACvC,YAAA,oBAAoB,EAAE,MAAM;AAC/B,SAAA,CAAC,CAAC;KACN;AACJ;;;;"}