@azure/msal-browser 4.24.0 → 5.0.0-alpha.0

package/src/controllers/UnknownOperatingContextController.ts

@@ -14,7 +14,6 @@ import {
     DEFAULT_CRYPTO_IMPLEMENTATION,
     AccountFilter,
 } from "@azure/msal-common/browser";
-import { ITokenCache } from "../cache/ITokenCache.js";
 import { BrowserConfiguration } from "../config/Configuration.js";
 import {
     BrowserCacheManager,
@@ -30,7 +29,7 @@ import { SilentRequest } from "../request/SilentRequest.js";
 import { SsoSilentRequest } from "../request/SsoSilentRequest.js";
 import { AuthenticationResult } from "../response/AuthenticationResult.js";
 import { ApiId, WrapperSKU } from "../utils/BrowserConstants.js";
-import { IController } from "./IController.js";
+import { IController, HandleRedirectPromiseOptions } from "./IController.js";
 import { UnknownOperatingContext } from "../operatingcontext/UnknownOperatingContext.js";
 import { CryptoOps } from "../crypto/CryptoOps.js";
 import {
@@ -112,8 +111,7 @@ export class UnknownOperatingContextController implements IController {
                   this.browserCrypto,
                   this.logger,
                   this.performanceClient,
-                  this.eventHandler,
-                  undefined
+                  this.eventHandler
               )
             : DEFAULT_BROWSER_CACHE_MANAGER(
                   this.config.auth.clientId,
@@ -189,7 +187,6 @@ export class UnknownOperatingContextController implements IController {
                       | "earJwk"
                       | "codeChallenge"
                       | "codeChallengeMethod"
-                      | "requestedClaimsHash"
                       | "platformBroker"
                   >
               >,
@@ -236,18 +233,10 @@ export class UnknownOperatingContextController implements IController {
         blockNonBrowserEnvironment();
         return true;
     }
-    enableAccountStorageEvents(): void {
-        blockAPICallsBeforeInitialize(this.initialized);
-        blockNonBrowserEnvironment();
-    }
-    disableAccountStorageEvents(): void {
-        blockAPICallsBeforeInitialize(this.initialized);
-        blockNonBrowserEnvironment();
-    }
 
     handleRedirectPromise(
         // eslint-disable-next-line @typescript-eslint/no-unused-vars
-        hash?: string | undefined
+        options?: HandleRedirectPromiseOptions
     ): Promise<AuthenticationResult | null> {
         blockAPICallsBeforeInitialize(this.initialized);
         return Promise.resolve(null);
@@ -297,7 +286,6 @@ export class UnknownOperatingContextController implements IController {
                 | "earJwk"
                 | "codeChallenge"
                 | "codeChallengeMethod"
-                | "requestedClaimsHash"
                 | "platformBroker"
             >
         >
@@ -306,11 +294,6 @@ export class UnknownOperatingContextController implements IController {
         blockNonBrowserEnvironment();
         return {} as Promise<AuthenticationResult>;
     }
-    getTokenCache(): ITokenCache {
-        blockAPICallsBeforeInitialize(this.initialized);
-        blockNonBrowserEnvironment();
-        return {} as ITokenCache;
-    }
     getLogger(): Logger {
         return this.logger;
     }

package/src/crypto/BrowserCrypto.ts

@@ -7,10 +7,6 @@ import {
     createBrowserAuthError,
     BrowserAuthErrorCodes,
 } from "../error/BrowserAuthError.js";
-import {
-    IPerformanceClient,
-    PerformanceEvents,
-} from "@azure/msal-common/browser";
 import { KEY_FORMAT_JWK } from "../utils/BrowserConstants.js";
 import { base64Encode, urlEncodeArr } from "../encode/Base64Encode.js";
 import { base64Decode, base64DecToArr } from "../encode/Base64Decode.js";
@@ -83,15 +79,7 @@ export function validateCryptoAvailable(
  * @param performanceClient {?IPerformanceClient}
  * @param correlationId {?string} correlation id
  */
-export async function sha256Digest(
-    dataString: string,
-    performanceClient?: IPerformanceClient,
-    correlationId?: string
-): Promise<ArrayBuffer> {
-    performanceClient?.addQueueMeasurement(
-        PerformanceEvents.Sha256Digest,
-        correlationId
-    );
+export async function sha256Digest(dataString: string): Promise<ArrayBuffer> {
     const encoder = new TextEncoder();
     const data = encoder.encode(dataString);
     return window.crypto.subtle.digest(

package/src/crypto/CryptoOps.ts

@@ -10,11 +10,11 @@ import {
     IPerformanceClient,
     JoseHeader,
     Logger,
-    PerformanceEvents,
     ShrOptions,
     SignedHttpRequest,
     SignedHttpRequestParameters,
 } from "@azure/msal-common/browser";
+import * as BrowserPerformanceEvents from "../telemetry/BrowserPerformanceEvents.js";
 import {
     base64Encode,
     urlEncode,
@@ -116,7 +116,7 @@ export class CryptoOps implements ICrypto {
     ): Promise<string> {
         const publicKeyThumbMeasurement =
             this.performanceClient?.startMeasurement(
-                PerformanceEvents.CryptoOptsGetPublicKeyThumbprint,
+                BrowserPerformanceEvents.CryptoOptsGetPublicKeyThumbprint,
                 request.correlationId
             );
 
@@ -150,12 +150,16 @@ export class CryptoOps implements ICrypto {
             await BrowserCrypto.importJwk(privateKeyJwk, false, ["sign"]);
 
         // Store Keypair data in keystore
-        await this.cache.setItem(publicJwkHash, {
-            privateKey: unextractablePrivateKey,
-            publicKey: keyPair.publicKey,
-            requestMethod: request.resourceRequestMethod,
-            requestUri: request.resourceRequestUri,
-        });
+        await this.cache.setItem(
+            publicJwkHash,
+            {
+                privateKey: unextractablePrivateKey,
+                publicKey: keyPair.publicKey,
+                requestMethod: request.resourceRequestMethod,
+                requestUri: request.resourceRequestUri,
+            },
+            request.correlationId
+        );
 
         if (publicKeyThumbMeasurement) {
             publicKeyThumbMeasurement.end({
@@ -169,10 +173,14 @@ export class CryptoOps implements ICrypto {
     /**
      * Removes cryptographic keypair from key store matching the keyId passed in
      * @param kid
+     * @param correlationId
      */
-    async removeTokenBindingKey(kid: string): Promise<void> {
-        await this.cache.removeItem(kid);
-        const keyFound = await this.cache.containsKey(kid);
+    async removeTokenBindingKey(
+        kid: string,
+        correlationId: string
+    ): Promise<void> {
+        await this.cache.removeItem(kid, correlationId);
+        const keyFound = await this.cache.containsKey(kid, correlationId);
         if (keyFound) {
             throw createClientAuthError(
                 ClientAuthErrorCodes.bindingKeyNotRemoved
@@ -182,26 +190,29 @@ export class CryptoOps implements ICrypto {
 
     /**
      * Removes all cryptographic keys from IndexedDB storage
+     * @param correlationId
      */
-    async clearKeystore(): Promise<boolean> {
+    async clearKeystore(correlationId: string): Promise<boolean> {
         // Delete in-memory keystores
-        this.cache.clearInMemory();
+        this.cache.clearInMemory(correlationId);
 
         /**
          * There is only one database, so calling clearPersistent on asymmetric keystore takes care of
          * every persistent keystore
          */
         try {
-            await this.cache.clearPersistent();
+            await this.cache.clearPersistent(correlationId);
             return true;
         } catch (e) {
             if (e instanceof Error) {
                 this.logger.error(
-                    `Clearing keystore failed with error: ${e.message}`
+                    `Clearing keystore failed with error: '${e.message}'`,
+                    correlationId
                 );
             } else {
                 this.logger.error(
-                    "Clearing keystore failed with unknown error"
+                    "Clearing keystore failed with unknown error",
+                    correlationId
                 );
             }
 
@@ -221,10 +232,13 @@ export class CryptoOps implements ICrypto {
         correlationId?: string
     ): Promise<string> {
         const signJwtMeasurement = this.performanceClient?.startMeasurement(
-            PerformanceEvents.CryptoOptsSignJwt,
+            BrowserPerformanceEvents.CryptoOptsSignJwt,
             correlationId
         );
-        const cachedKeyPair = await this.cache.getItem(kid);
+        const cachedKeyPair = await this.cache.getItem(
+            kid,
+            correlationId || ""
+        );
 
         if (!cachedKeyPair) {
             throw createBrowserAuthError(

package/src/crypto/PkceGenerator.ts

@@ -6,11 +6,11 @@
 import {
     IPerformanceClient,
     Logger,
-    PerformanceEvents,
     PkceCodes,
     invoke,
     invokeAsync,
 } from "@azure/msal-common/browser";
+import * as BrowserPerformanceEvents from "../telemetry/BrowserPerformanceEvents.js";
 import {
     createBrowserAuthError,
     BrowserAuthErrorCodes,
@@ -33,20 +33,16 @@ export async function generatePkceCodes(
     logger: Logger,
     correlationId: string
 ): Promise<PkceCodes> {
-    performanceClient.addQueueMeasurement(
-        PerformanceEvents.GeneratePkceCodes,
-        correlationId
-    );
     const codeVerifier = invoke(
         generateCodeVerifier,
-        PerformanceEvents.GenerateCodeVerifier,
+        BrowserPerformanceEvents.GenerateCodeVerifier,
         logger,
         performanceClient,
         correlationId
     )(performanceClient, logger, correlationId);
     const codeChallenge = await invokeAsync(
         generateCodeChallengeFromVerifier,
-        PerformanceEvents.GenerateCodeChallengeFromVerifier,
+        BrowserPerformanceEvents.GenerateCodeChallengeFromVerifier,
         logger,
         performanceClient,
         correlationId
@@ -71,7 +67,7 @@ function generateCodeVerifier(
         const buffer: Uint8Array = new Uint8Array(RANDOM_BYTE_ARR_LENGTH);
         invoke(
             getRandomValues,
-            PerformanceEvents.GetRandomValues,
+            BrowserPerformanceEvents.GetRandomValues,
             logger,
             performanceClient,
             correlationId
@@ -94,19 +90,15 @@ async function generateCodeChallengeFromVerifier(
     logger: Logger,
     correlationId: string
 ): Promise<string> {
-    performanceClient.addQueueMeasurement(
-        PerformanceEvents.GenerateCodeChallengeFromVerifier,
-        correlationId
-    );
     try {
         // hashed verifier
         const pkceHashedCodeVerifier = await invokeAsync(
             sha256Digest,
-            PerformanceEvents.Sha256Digest,
+            BrowserPerformanceEvents.Sha256Digest,
             logger,
             performanceClient,
             correlationId
-        )(pkceCodeVerifier, performanceClient, correlationId);
+        )(pkceCodeVerifier);
         // encode hash as base64
         return urlEncodeArr(new Uint8Array(pkceHashedCodeVerifier));
     } catch (e) {

package/src/crypto/SignedHttpRequest.ts

@@ -5,12 +5,11 @@
 
 import { CryptoOps } from "./CryptoOps.js";
 import {
-    ClientAuthError,
-    ClientAuthErrorCodes,
     Logger,
     LoggerOptions,
     PopTokenGenerator,
     SignedHttpRequestParameters,
+    StubPerformanceClient,
 } from "@azure/msal-common/browser";
 import { version, name } from "../packageMetadata.js";
 
@@ -31,7 +30,10 @@ export class SignedHttpRequest {
         const loggerOptions = (shrOptions && shrOptions.loggerOptions) || {};
         this.logger = new Logger(loggerOptions, name, version);
         this.cryptoOps = new CryptoOps(this.logger);
-        this.popTokenGenerator = new PopTokenGenerator(this.cryptoOps);
+        this.popTokenGenerator = new PopTokenGenerator(
+            this.cryptoOps,
+            new StubPerformanceClient()
+        );
         this.shrParameters = shrParameters;
     }
 
@@ -70,25 +72,16 @@ export class SignedHttpRequest {
     /**
      * Removes cached keys from browser for given public key thumbprint
      * @param publicKeyThumbprint Public key digest (from generatePublicKeyThumbprint API)
+     * @param correlationId
      * @returns If keys are properly deleted
      */
-    async removeKeys(publicKeyThumbprint: string): Promise<boolean> {
-        return this.cryptoOps
-            .removeTokenBindingKey(publicKeyThumbprint)
-            .then(() => true)
-            .catch((error) => {
-                /*
-                 * @deprecated - To maintain public API signature, we return false if the error is due to the key still being present in indexedDB.
-                 */
-                if (
-                    error instanceof ClientAuthError &&
-                    error.errorCode ===
-                        ClientAuthErrorCodes.bindingKeyNotRemoved
-                ) {
-                    return false;
-                }
-
-                throw error;
-            });
+    async removeKeys(
+        publicKeyThumbprint: string,
+        correlationId: string
+    ): Promise<void> {
+        return this.cryptoOps.removeTokenBindingKey(
+            publicKeyThumbprint,
+            correlationId
+        );
     }
 }

package/src/custom_auth/CustomAuthConstants.ts

@@ -12,7 +12,6 @@ export const GrantType = {
     CONTINUATION_TOKEN: "continuation_token",
     REDIRECT: "redirect",
     ATTRIBUTES: "attributes",
-    MFA_OOB: "mfa_oob",
 } as const;
 
 export const ChallengeType = {

package/src/custom_auth/controller/CustomAuthStandardController.ts

@@ -85,7 +85,8 @@ export class CustomAuthStandardController
 
         if (!this.isBrowserEnvironment) {
             this.logger.verbose(
-                "The SDK can only be used in a browser environment."
+                "The SDK can only be used in a browser environment.",
+                ""
             );
             throw new UnsupportedEnvironmentError();
         }
@@ -165,7 +166,7 @@ export class CustomAuthStandardController
             throw new NoCachedAccountFoundError(correlationId);
         } catch (error) {
             this.logger.errorPii(
-                `An error occurred during getting current account: ${error}`,
+                `An error occurred during getting current account: '${error}'`,
                 correlationId
             );
 
@@ -214,9 +215,9 @@ export class CustomAuthStandardController
             };
 
             this.logger.verbose(
-                `Starting sign-in flow ${
+                `Starting sign-in flow '${
                     !!signInInputs.password ? "with" : "without"
-                } password.`,
+                }' password.`,
                 correlationId
             );
 
@@ -365,7 +366,7 @@ export class CustomAuthStandardController
             );
         } catch (error) {
             this.logger.errorPii(
-                `An error occurred during starting sign-in: ${error}`,
+                `An error occurred during starting sign-in: '${error}'`,
                 correlationId
             );
 
@@ -396,7 +397,7 @@ export class CustomAuthStandardController
             this.ensureUserNotSignedIn(correlationId);
 
             this.logger.verbose(
-                `Starting sign-up flow${
+                `Starting sign-up flow'${
                     !!signUpInputs.password
                         ? ` with ${
                               !!signUpInputs.attributes
@@ -404,7 +405,7 @@ export class CustomAuthStandardController
                                   : "password"
                           }`
                         : ""
-                }.`,
+                }'.`,
                 correlationId
             );
 
@@ -477,7 +478,7 @@ export class CustomAuthStandardController
             );
         } catch (error) {
             this.logger.errorPii(
-                `An error occurred during starting sign-up: ${error}`,
+                `An error occurred during starting sign-up: '${error}'`,
                 correlationId
             );
 
@@ -537,7 +538,7 @@ export class CustomAuthStandardController
             );
         } catch (error) {
             this.logger.errorPii(
-                `An error occurred during starting reset-password: ${error}`,
+                `An error occurred during starting reset-password: '${error}'`,
                 correlationId
             );
 

package/src/custom_auth/core/CustomAuthAuthority.ts

@@ -8,6 +8,7 @@ import {
     AuthorityOptions,
     INetworkModule,
     Logger,
+    StubPerformanceClient,
 } from "@azure/msal-common/browser";
 import * as CustomAuthApiEndpoint from "./network_client/custom_auth_api/CustomAuthApiEndpoint.js";
 import { buildUrl } from "./utils/UrlUtils.js";
@@ -39,12 +40,11 @@ export class CustomAuthAuthority extends Authority {
             CustomAuthAuthority.transformCIAMAuthority(authority);
 
         const authorityOptions: AuthorityOptions = {
-            protocolMode: config.auth.protocolMode,
+            protocolMode: config.system.protocolMode,
             OIDCOptions: config.auth.OIDCOptions,
             knownAuthorities: config.auth.knownAuthorities,
             cloudDiscoveryMetadata: config.auth.cloudDiscoveryMetadata,
             authorityMetadata: config.auth.authorityMetadata,
-            skipAuthorityMetadataCache: config.auth.skipAuthorityMetadataCache,
         };
 
         super(
@@ -53,7 +53,8 @@ export class CustomAuthAuthority extends Authority {
             cacheManager,
             authorityOptions,
             logger,
-            ""
+            "",
+            new StubPerformanceClient()
         );
 
         // Set the metadata for the authority
@@ -76,9 +77,14 @@ export class CustomAuthAuthority extends Authority {
             jwks_uri: "",
         };
         const cacheKey = this.cacheManager.generateAuthorityMetadataCacheKey(
-            metadataEntity.preferred_cache
+            metadataEntity.preferred_cache,
+            this.correlationId
+        );
+        cacheManager.setAuthorityMetadata(
+            cacheKey,
+            metadataEntity,
+            this.correlationId
         );
-        cacheManager.setAuthorityMetadata(cacheKey, metadataEntity);
     }
 
     /**

package/src/custom_auth/core/auth_flow/AuthFlowErrorBase.ts

@@ -66,9 +66,7 @@ export abstract class AuthFlowErrorBase {
                 this.errorData.subError ===
                     CustomAuthApiSuberror.INVALID_OOB_VALUE) ||
             (this.errorData instanceof InvalidArgumentError &&
-                (this.errorData.errorDescription?.includes("code") ||
-                    this.errorData.errorDescription?.includes("challenge")) ===
-                    true)
+                this.errorData.errorDescription?.includes("code") === true)
         );
     }
 
@@ -142,24 +140,13 @@ export abstract class AuthFlowErrorBase {
         );
     }
 
-    protected isInvalidInputError(): boolean {
+    protected isInvalidAuthMethodRegistrationInputError(): boolean {
         return (
             this.errorData instanceof CustomAuthApiError &&
             this.errorData.error === CustomAuthApiErrorCode.INVALID_REQUEST &&
             this.errorData.errorCodes?.includes(901001) === true
         );
     }
-
-    protected isVerificationContactBlockedError(): boolean {
-        return (
-            this.errorData instanceof CustomAuthApiError &&
-            this.errorData.error === CustomAuthApiErrorCode.INVALID_REQUEST &&
-            this.errorData.errorCodes?.includes(550024) === true &&
-            this.errorData.errorDescription?.includes(
-                "multi-factor authentication method is blocked"
-            ) === true
-        );
-    }
 }
 
 export abstract class AuthActionErrorBase extends AuthFlowErrorBase {

package/src/custom_auth/core/auth_flow/jit/error_type/AuthMethodRegistrationError.ts

@@ -14,15 +14,7 @@ export class AuthMethodRegistrationChallengeMethodError extends AuthActionErrorB
      * @returns true if the input is incorrect, false otherwise.
      */
     isInvalidInput(): boolean {
-        return this.isInvalidInputError();
-    }
-
-    /**
-     * Checks if the error is due to the verification contact (e.g., phone number or email) being blocked. Consider using a different email/phone number or a different authentication method.
-     * @returns true if the error is due to the verification contact being blocked, false otherwise.
-     */
-    isVerificationContactBlocked(): boolean {
-        return this.isVerificationContactBlockedError();
+        return this.isInvalidAuthMethodRegistrationInputError();
     }
 }
 

package/src/custom_auth/core/interaction_client/CustomAuthInteractionClientBase.ts

@@ -48,7 +48,8 @@ export abstract class CustomAuthInteractionClientBase extends StandardInteractio
             logger,
             eventHandler,
             navigationClient,
-            performanceClient
+            performanceClient,
+            ""
         );
 
         this.tokenResponseHandler = new ResponseHandler(
@@ -56,6 +57,7 @@ export abstract class CustomAuthInteractionClientBase extends StandardInteractio
             this.browserStorage,
             this.browserCrypto,
             this.logger,
+            this.performanceClient,
             null,
             null
         );
@@ -103,7 +105,7 @@ export abstract class CustomAuthInteractionClientBase extends StandardInteractio
 
         const requestTimestamp = Math.round(new Date().getTime() / 1000.0);
 
-        // Save tokens and create authentication result
+        // Save tokens and create authentication result 44s
         const result =
             await this.tokenResponseHandler.handleServerTokenResponse(
                 tokenResponse,

package/src/custom_auth/core/interaction_client/jit/JitClient.ts

@@ -5,12 +5,15 @@
 
 import { CustomAuthInteractionClientBase } from "../CustomAuthInteractionClientBase.js";
 import {
+    JitGetAuthMethodsParams,
     JitChallengeAuthMethodParams,
     JitSubmitChallengeParams,
 } from "./parameter/JitParams.js";
 import {
+    JitGetAuthMethodsResult,
     JitVerificationRequiredResult,
     JitCompletedResult,
+    createJitGetAuthMethodsResult,
     createJitVerificationRequiredResult,
     createJitCompletedResult,
 } from "./result/JitActionResult.js";
@@ -21,15 +24,60 @@ import {
 } from "../../../CustomAuthConstants.js";
 import * as PublicApiId from "../../telemetry/PublicApiId.js";
 import {
+    RegisterIntrospectRequest,
     RegisterChallengeRequest,
     RegisterContinueRequest,
     SignInContinuationTokenRequest,
 } from "../../network_client/custom_auth_api/types/ApiRequestTypes.js";
+import { initializeServerTelemetryManager } from "../../../../interaction_client/BaseInteractionClient.js";
 
 /**
  * JIT client for handling just-in-time authentication method registration flows.
  */
 export class JitClient extends CustomAuthInteractionClientBase {
+    /**
+     * Gets available authentication methods for JIT registration.
+     * @param parameters The parameters for getting auth methods.
+     * @returns Promise that resolves to JitGetAuthMethodsResult.
+     */
+    async getAuthMethods(
+        parameters: JitGetAuthMethodsParams
+    ): Promise<JitGetAuthMethodsResult> {
+        const apiId = PublicApiId.JIT_GET_AUTH_METHODS;
+        const telemetryManager = initializeServerTelemetryManager(
+            apiId,
+            this.config.auth.clientId,
+            this.correlationId,
+            this.browserStorage,
+            this.logger
+        );
+
+        this.logger.verbose(
+            "Calling introspect endpoint for getting auth methods.",
+            parameters.correlationId
+        );
+
+        const request: RegisterIntrospectRequest = {
+            continuation_token: parameters.continuationToken,
+            correlationId: parameters.correlationId,
+            telemetryManager: telemetryManager,
+        };
+
+        const introspectResponse =
+            await this.customAuthApiClient.registerApi.introspect(request);
+
+        this.logger.verbose(
+            "Introspect endpoint called for getting auth methods.",
+            parameters.correlationId
+        );
+
+        return createJitGetAuthMethodsResult({
+            correlationId: introspectResponse.correlation_id,
+            continuationToken: introspectResponse.continuation_token,
+            authMethods: introspectResponse.methods,
+        });
+    }
+
     /**
      * Challenges an authentication method for JIT registration.
      * @param parameters The parameters for challenging the auth method.
@@ -39,7 +87,13 @@ export class JitClient extends CustomAuthInteractionClientBase {
         parameters: JitChallengeAuthMethodParams
     ): Promise<JitVerificationRequiredResult | JitCompletedResult> {
         const apiId = PublicApiId.JIT_CHALLENGE_AUTH_METHOD;
-        const telemetryManager = this.initializeServerTelemetryManager(apiId);
+        const telemetryManager = initializeServerTelemetryManager(
+            apiId,
+            this.config.auth.clientId,
+            this.correlationId,
+            this.browserStorage,
+            this.logger
+        );
 
         this.logger.verbose(
             "Calling challenge endpoint for getting auth method.",
@@ -108,7 +162,13 @@ export class JitClient extends CustomAuthInteractionClientBase {
         parameters: JitSubmitChallengeParams
     ): Promise<JitCompletedResult> {
         const apiId = PublicApiId.JIT_SUBMIT_CHALLENGE;
-        const telemetryManager = this.initializeServerTelemetryManager(apiId);
+        const telemetryManager = initializeServerTelemetryManager(
+            apiId,
+            this.config.auth.clientId,
+            this.correlationId,
+            this.browserStorage,
+            this.logger
+        );
 
         this.logger.verbose(
             "Calling continue endpoint for auth method challenge submission.",
@@ -154,7 +214,7 @@ export class JitClient extends CustomAuthInteractionClientBase {
         const authResult = await this.handleTokenResponse(
             tokenResponse,
             scopes,
-            tokenResponse.correlation_id || continueResponse.correlation_id
+            continueResponse.correlation_id
         );
 
         return createJitCompletedResult({

package/src/custom_auth/core/interaction_client/jit/parameter/JitParams.ts

@@ -10,6 +10,8 @@ export interface JitClientParametersBase {
     continuationToken: string;
 }
 
+export type JitGetAuthMethodsParams = JitClientParametersBase;
+
 export interface JitChallengeAuthMethodParams extends JitClientParametersBase {
     authMethod: AuthenticationMethod;
     verificationContact: string;