@azure/msal-browser 4.24.0 → 5.0.0-alpha.0

package/src/telemetry/BrowserPerformanceEvents.ts

@@ -0,0 +1,182 @@
+/*
+ * Copyright (c) Microsoft Corporation. All rights reserved.
+ * Licensed under the MIT License.
+ */
+
+/**
+ * acquireTokenFromCache (msal-browser).
+ * Internal API for acquiring token from cache
+ */
+export const AcquireTokenFromCache = "acquireTokenFromCache";
+
+/**
+ * acquireTokenByRefreshToken API (msal-browser and msal-node).
+ * Used to renew an access token using a refresh token against the token endpoint.
+ */
+export const AcquireTokenByRefreshToken = "acquireTokenByRefreshToken";
+
+/**
+ * acquireTokenSilentAsync (msal-browser).
+ * Internal API for acquireTokenSilent.
+ */
+export const AcquireTokenSilentAsync = "acquireTokenSilentAsync";
+
+/**
+ * getPublicKeyThumbprint API in CryptoOpts class (msal-browser).
+ * Used to generate a public/private keypair and generate a public key thumbprint for pop requests.
+ */
+export const CryptoOptsGetPublicKeyThumbprint =
+    "cryptoOptsGetPublicKeyThumbprint";
+
+/**
+ * signJwt API in CryptoOpts class (msal-browser).
+ * Used to signed a pop token.
+ */
+export const CryptoOptsSignJwt = "cryptoOptsSignJwt";
+
+/**
+ * acquireToken API in the SilentCacheClient class (msal-browser).
+ * Used to read access tokens from the cache.
+ */
+export const SilentCacheClientAcquireToken = "silentCacheClientAcquireToken";
+
+/**
+ * acquireToken API in the SilentIframeClient class (msal-browser).
+ * Used to acquire a new set of tokens from the authorize endpoint in a hidden iframe.
+ */
+export const SilentIframeClientAcquireToken = "silentIframeClientAcquireToken";
+
+export const AwaitConcurrentIframe = "awaitConcurrentIframe"; // Time spent waiting for a concurrent iframe to complete
+
+/**
+ * acquireToken API in SilentRereshClient (msal-browser).
+ * Used to acquire a new set of tokens from the token endpoint using a refresh token.
+ */
+export const SilentRefreshClientAcquireToken =
+    "silentRefreshClientAcquireToken";
+
+/**
+ * getDiscoveredAuthority API in StandardInteractionClient class (msal-browser).
+ * Used to load authority metadata for a request.
+ */
+export const StandardInteractionClientGetDiscoveredAuthority =
+    "standardInteractionClientGetDiscoveredAuthority";
+
+/**
+ * acquireToken APIs in msal-browser.
+ * Used to make an /authorize endpoint call with native brokering enabled.
+ */
+export const FetchAccountIdWithNativeBroker = "fetchAccountIdWithNativeBroker";
+
+/**
+ * acquireToken API in NativeInteractionClient class (msal-browser).
+ * Used to acquire a token from Native component when native brokering is enabled.
+ */
+export const NativeInteractionClientAcquireToken =
+    "nativeInteractionClientAcquireToken";
+
+/**
+ * Time spent creating default headers for requests to token endpoint
+ */
+export const BaseClientCreateTokenRequestHeaders =
+    "baseClientCreateTokenRequestHeaders";
+
+/**
+ * acquireTokenByRefreshToken API in RefreshTokenClient (msal-common).
+ */
+export const RefreshTokenClientAcquireTokenByRefreshToken =
+    "refreshTokenClientAcquireTokenByRefreshToken";
+
+/**
+ * acquireTokenBySilentIframe (msal-browser).
+ * Internal API for acquiring token by silent Iframe
+ */
+export const AcquireTokenBySilentIframe = "acquireTokenBySilentIframe";
+
+/**
+ * Internal API for initializing base request in BaseInteractionClient (msal-browser)
+ */
+export const InitializeBaseRequest = "initializeBaseRequest";
+
+/**
+ * Internal API for initializing silent request in SilentCacheClient (msal-browser)
+ */
+export const InitializeSilentRequest = "initializeSilentRequest";
+
+export const InitializeCache = "initializeCache";
+
+/**
+ * Helper function in SilentIframeClient class (msal-browser).
+ */
+export const SilentIframeClientTokenHelper = "silentIframeClientTokenHelper";
+
+/**
+ * SilentHandler
+ */
+export const SilentHandlerInitiateAuthRequest =
+    "silentHandlerInitiateAuthRequest";
+export const SilentHandlerMonitorIframeForHash =
+    "silentHandlerMonitorIframeForHash";
+export const SilentHandlerLoadFrame = "silentHandlerLoadFrame";
+export const SilentHandlerLoadFrameSync = "silentHandlerLoadFrameSync";
+
+/**
+ * Helper functions in StandardInteractionClient class (msal-browser)
+ */
+export const StandardInteractionClientCreateAuthCodeClient =
+    "standardInteractionClientCreateAuthCodeClient";
+export const StandardInteractionClientGetClientConfiguration =
+    "standardInteractionClientGetClientConfiguration";
+export const StandardInteractionClientInitializeAuthorizationRequest =
+    "standardInteractionClientInitializeAuthorizationRequest";
+
+export const SilentFlowClientAcquireCachedToken =
+    "silentFlowClientAcquireCachedToken";
+
+export const GetStandardParams = "getStandardParams";
+
+export const HandleCodeResponse = "handleCodeResponse";
+export const HandleResponseEar = "handleResponseEar";
+export const HandleResponsePlatformBroker = "handleResponsePlatformBroker";
+export const HandleResponseCode = "handleResponseCode";
+export const UpdateTokenEndpointAuthority = "updateTokenEndpointAuthority";
+
+export const AuthClientAcquireToken = "authClientAcquireToken";
+
+export const DeserializeResponse = "deserializeResponse";
+
+export const AuthorityFactoryCreateDiscoveredInstance =
+    "authorityFactoryCreateDiscoveredInstance";
+export const AuthorityResolveEndpointsFromLocalSources =
+    "authorityResolveEndpointsFromLocalSources";
+
+export const AcquireTokenByCodeAsync = "acquireTokenByCodeAsync";
+
+export const HandleRedirectPromiseMeasurement = "handleRedirectPromise";
+export const HandleNativeRedirectPromiseMeasurement =
+    "handleNativeRedirectPromise";
+
+export const NativeMessageHandlerHandshake = "nativeMessageHandlerHandshake";
+export const NativeGenerateAuthResult = "nativeGenerateAuthResult";
+export const RemoveHiddenIframe = "removeHiddenIframe";
+
+export const ImportExistingCache = "importExistingCache";
+export const SetUserData = "setUserData";
+
+/**
+ * Crypto Operations
+ */
+export const GeneratePkceCodes = "generatePkceCodes";
+export const GenerateCodeVerifier = "generateCodeVerifier";
+export const GenerateCodeChallengeFromVerifier =
+    "generateCodeChallengeFromVerifier";
+export const Sha256Digest = "sha256Digest";
+export const GetRandomValues = "getRandomValues";
+export const GenerateHKDF = "generateHKDF";
+export const GenerateBaseKey = "generateBaseKey";
+export const Base64Decode = "base64Decode";
+export const UrlEncodeArr = "urlEncodeArr";
+export const Encrypt = "encrypt";
+export const Decrypt = "decrypt";
+export const GenerateEarKey = "generateEarKey";
+export const DecryptEarResponse = "decryptEarResponse";

package/src/telemetry/BrowserRootPerformanceEvents.ts

@@ -0,0 +1,41 @@
+/*
+ * Copyright (c) Microsoft Corporation. All rights reserved.
+ * Licensed under the MIT License.
+ */
+
+/**
+ * acquireTokenSilent API (msal-browser and msal-node).
+ * Used to silently acquire a new access token (from the cache or the network).
+ */
+export const AcquireTokenSilent = "acquireTokenSilent";
+/**
+ * acquireTokenByCode API (msal-browser and msal-node).
+ * Used to acquire tokens by trading an authorization code against the token endpoint.
+ */
+export const AcquireTokenByCode = "acquireTokenByCode";
+/**
+ * acquireTokenPopup (msal-browser).
+ * Used to acquire a new access token interactively through pop ups
+ */
+export const AcquireTokenPopup = "acquireTokenPopup";
+/**
+ * acquireTokenPreRedirect (msal-browser).
+ * First part of the redirect flow.
+ * Used to acquire a new access token interactively through redirects.
+ */
+export const AcquireTokenPreRedirect = "acquireTokenPreRedirect";
+/**
+ * acquireTokenRedirect (msal-browser).
+ * Second part of the redirect flow.
+ * Used to acquire a new access token interactively through redirects.
+ */
+export const AcquireTokenRedirect = "acquireTokenRedirect";
+/**
+ * ssoSilent API (msal-browser).
+ * Used to silently acquire an authorization code and set of tokens using a hidden iframe.
+ */
+export const SsoSilent = "ssoSilent";
+// Initialize client application
+export const InitializeClientApplication = "initializeClientApplication";
+// Update cache storage
+export const LocalStorageUpdated = "localStorageUpdated";

package/src/utils/BrowserConstants.ts

@@ -3,7 +3,7 @@
  * Licensed under the MIT License.
  */
 
-import { OIDC_DEFAULT_SCOPES } from "@azure/msal-common/browser";
+import { Constants } from "@azure/msal-common/browser";
 import { PopupRequest } from "../request/PopupRequest.js";
 import { RedirectRequest } from "../request/RedirectRequest.js";
 
@@ -148,10 +148,6 @@ export const InteractionStatus = {
      * Initial status before interaction occurs
      */
     Startup: "startup",
-    /**
-     * Status set when all login calls occuring
-     */
-    Login: "login",
     /**
      * Status set when logout call occuring
      */
@@ -160,10 +156,6 @@ export const InteractionStatus = {
      * Status set for acquireToken calls
      */
     AcquireToken: "acquireToken",
-    /**
-     * Status set for ssoSilent calls
-     */
-    SsoSilent: "ssoSilent",
     /**
      * Status set when handleRedirect in progress
      */
@@ -177,7 +169,7 @@ export type InteractionStatus =
     (typeof InteractionStatus)[keyof typeof InteractionStatus];
 
 export const DEFAULT_REQUEST: RedirectRequest | PopupRequest = {
-    scopes: OIDC_DEFAULT_SCOPES,
+    scopes: Constants.OIDC_DEFAULT_SCOPES,
 };
 
 /**

package/src/utils/BrowserUtils.ts

@@ -7,6 +7,7 @@ import {
     UrlString,
     invoke,
     invokeAsync,
+    UrlUtils,
     RequestParameterBuilder,
 } from "@azure/msal-common/browser";
 import {
@@ -91,7 +92,7 @@ export function getHomepage(): string {
  * attempting another auth request inside an iframe.
  */
 export function blockReloadInHiddenIframes(): void {
-    const isResponseHash = UrlString.hashContainsKnownProperties(
+    const isResponseHash = UrlUtils.getDeserializedResponse(
         window.location.hash
     );
     // return an error if called from the hidden iframe created by the msal js silent calls
@@ -175,11 +176,8 @@ export function redirectPreflightCheck(
 ): void {
     preflightCheck(initialized);
     blockRedirectInIframe(config.system.allowRedirectInIframe);
-    // Block redirects if memory storage is enabled but storeAuthStateInCookie is not
-    if (
-        config.cache.cacheLocation === BrowserCacheLocation.MemoryStorage &&
-        !config.cache.storeAuthStateInCookie
-    ) {
+    // Block redirects if memory storage is enabled
+    if (config.cache.cacheLocation === BrowserCacheLocation.MemoryStorage) {
         throw createBrowserConfigurationAuthError(
             BrowserConfigurationAuthErrorCodes.inMemRedirectUnavailable
         );

package/src/utils/MsalFrameStatsUtils.ts

@@ -8,7 +8,8 @@ import { InProgressPerformanceEvent, Logger } from "@azure/msal-common/browser";
 export function collectInstanceStats(
     currentClientId: string,
     performanceEvent: InProgressPerformanceEvent,
-    logger: Logger
+    logger: Logger,
+    correlationId: string
 ): void {
     const frameInstances: string[] =
         // @ts-ignore
@@ -22,7 +23,8 @@ export function collectInstanceStats(
 
     if (sameClientIdInstanceCount > 1) {
         logger.warning(
-            "There is already an instance of MSAL.js in the window with the same client id."
+            "There is already an instance of MSAL.js in the window with the same client id.",
+            correlationId
         );
     }
     performanceEvent.add({

package/src/utils/PopupUtils.ts

@@ -0,0 +1,117 @@
+/*
+ * Copyright (c) Microsoft Corporation. All rights reserved.
+ * Licensed under the MIT License.
+ */
+
+import { Constants, Logger } from "@azure/msal-common/browser";
+import {
+    BrowserAuthErrorCodes,
+    createBrowserAuthError,
+} from "../error/BrowserAuthError.js";
+
+/**
+ * Monitors a popup window for a URL change to the same origin as the parent application.
+ * Polls the popup at a specified interval until it is redirected back to the application,
+ * closed by the user, or a navigation to a same-origin URL is detected. Once a same-origin
+ * URL is detected, extracts the response string (query or hash) and resolves the promise.
+ * Performs cleanup by closing the popup and removing event listeners when done.
+ *
+ * @param popupWindow - The popup window to monitor for navigation.
+ * @param popupWindowParent - The parent window that opened the popup.
+ * @param responseMode - The response mode to use when extracting the response string (query or hash).
+ * @param pollIntervalMilliseconds - The interval, in milliseconds, at which to poll the popup window.
+ * @param logger - Logger instance for logging monitoring events.
+ * @param unloadWindow - Event handler to remove from the parent window on cleanup.
+ * @param correlationId
+ * @returns Promise<string> - Resolves with the response string (query or hash) from the popup window,
+ * or rejects if the popup is closed before a response is received.
+ *
+ * Monitoring behavior: Polls the popup window at the specified interval to detect navigation to a same-origin URL.
+ * Timeout handling: If the popup is closed before a response is detected, the promise is rejected with a user cancellation error.
+ * Cleanup process: On completion (success or failure), closes the popup and removes the unload event listener from the parent window.
+ */
+export async function monitorPopupForHash(
+    popupWindow: Window,
+    popupWindowParent: Window,
+    responseMode: Constants.ResponseMode,
+    pollIntervalMilliseconds: number,
+    logger: Logger,
+    unloadWindow: (e: Event) => void,
+    correlationId: string
+): Promise<string> {
+    return new Promise<string>((resolve, reject) => {
+        logger.verbose(
+            "PopupHandler.monitorPopupForHash - polling started",
+            correlationId
+        );
+
+        const intervalId = setInterval(() => {
+            // Window is closed
+            if (popupWindow.closed) {
+                logger.error(
+                    "PopupHandler.monitorPopupForHash - window closed",
+                    correlationId
+                );
+                clearInterval(intervalId);
+                reject(
+                    createBrowserAuthError(BrowserAuthErrorCodes.userCancelled)
+                );
+                return;
+            }
+
+            let href = "";
+            try {
+                /*
+                 * Will throw if cross origin,
+                 * which should be caught and ignored
+                 * since we need the interval to keep running while on STS UI.
+                 */
+                href = popupWindow.location.href;
+            } catch (e) {}
+
+            // Don't process blank pages or cross domain
+            if (!href || href === "about:blank") {
+                return;
+            }
+            clearInterval(intervalId);
+
+            let responseString = "";
+            if (popupWindow) {
+                if (responseMode === Constants.ResponseMode.QUERY) {
+                    responseString = popupWindow.location.search;
+                } else {
+                    responseString = popupWindow.location.hash;
+                }
+            }
+
+            logger.verbose(
+                "PopupHandler.monitorPopupForHash - popup window is on same origin as caller",
+                correlationId
+            );
+
+            resolve(responseString);
+        }, pollIntervalMilliseconds);
+    }).finally(() => {
+        cleanPopup(popupWindow, popupWindowParent, unloadWindow);
+    });
+}
+
+/**
+ * Performs cleanup operations after popup authentication.
+ * Closes the popup window and removes the 'beforeunload' event listener from the parent window.
+ *
+ * @param popupWindow - The popup window to be closed.
+ * @param popupWindowParent - The parent window from which the event listener will be removed.
+ * @param unloadWindow - The event handler function to remove from the parent window's 'beforeunload' event.
+ */
+export function cleanPopup(
+    popupWindow: Window,
+    popupWindowParent: Window,
+    unloadWindow: (e: Event) => void
+): void {
+    // Close window.
+    popupWindow.close();
+
+    // Remove window unload function
+    popupWindowParent.removeEventListener("beforeunload", unloadWindow);
+}

package/dist/cache/ITokenCache.d.ts

@@ -1,12 +0,0 @@
-import type { ExternalTokenResponse } from "@azure/msal-common/browser";
-import type { SilentRequest } from "../request/SilentRequest.js";
-import type { LoadTokenOptions } from "./TokenCache.js";
-import type { AuthenticationResult } from "../response/AuthenticationResult.js";
-export interface ITokenCache {
-    /**
-     * API to side-load tokens to MSAL cache
-     * @returns `AuthenticationResult` for the response that was loaded.
-     */
-    loadExternalTokens(request: SilentRequest, response: ExternalTokenResponse, options: LoadTokenOptions): Promise<AuthenticationResult>;
-}
-//# sourceMappingURL=ITokenCache.d.ts.map

package/dist/cache/ITokenCache.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"ITokenCache.d.ts","sourceRoot":"","sources":["../../src/cache/ITokenCache.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AACxE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AACjE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AACxD,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,qCAAqC,CAAC;AAEhF,MAAM,WAAW,WAAW;IACxB;;;OAGG;IACH,kBAAkB,CACd,OAAO,EAAE,aAAa,EACtB,QAAQ,EAAE,qBAAqB,EAC/B,OAAO,EAAE,gBAAgB,GAC1B,OAAO,CAAC,oBAAoB,CAAC,CAAC;CACpC"}

package/dist/custom-auth-path/cache/ITokenCache.d.ts

@@ -1,12 +0,0 @@
-import type { ExternalTokenResponse } from "@azure/msal-common/browser";
-import type { SilentRequest } from "../request/SilentRequest.js";
-import type { LoadTokenOptions } from "./TokenCache.js";
-import type { AuthenticationResult } from "../response/AuthenticationResult.js";
-export interface ITokenCache {
-    /**
-     * API to side-load tokens to MSAL cache
-     * @returns `AuthenticationResult` for the response that was loaded.
-     */
-    loadExternalTokens(request: SilentRequest, response: ExternalTokenResponse, options: LoadTokenOptions): Promise<AuthenticationResult>;
-}
-//# sourceMappingURL=ITokenCache.d.ts.map

package/dist/custom-auth-path/cache/ITokenCache.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"ITokenCache.d.ts","sourceRoot":"","sources":["../../../src/cache/ITokenCache.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AACxE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AACjE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AACxD,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,qCAAqC,CAAC;AAEhF,MAAM,WAAW,WAAW;IACxB;;;OAGG;IACH,kBAAkB,CACd,OAAO,EAAE,aAAa,EACtB,QAAQ,EAAE,qBAAqB,EAC/B,OAAO,EAAE,gBAAgB,GAC1B,OAAO,CAAC,oBAAoB,CAAC,CAAC;CACpC"}

package/dist/custom-auth-path/cache/TokenCache.mjs

@@ -1,207 +0,0 @@
-/*! @azure/msal-browser v4.24.0 2025-09-24 */
-'use strict';
-import { AuthToken, Authority, AccountEntity, buildAccountToCache, CacheHelpers, ScopeSet, TimeUtils } from '@azure/msal-common/browser';
-import { createBrowserAuthError } from '../error/BrowserAuthError.mjs';
-import { base64Decode } from '../encode/Base64Decode.mjs';
-import { createNewGuid } from '../crypto/BrowserCrypto.mjs';
-import { nonBrowserEnvironment, unableToLoadToken } from '../error/BrowserAuthErrorCodes.mjs';
-
-/*
- * Copyright (c) Microsoft Corporation. All rights reserved.
- * Licensed under the MIT License.
- */
-/**
- * Token cache manager
- */
-class TokenCache {
-    constructor(configuration, storage, logger, cryptoObj) {
-        this.isBrowserEnvironment = typeof window !== "undefined";
-        this.config = configuration;
-        this.storage = storage;
-        this.logger = logger;
-        this.cryptoObj = cryptoObj;
-    }
-    // Move getAllAccounts here and cache utility APIs
-    /**
-     * API to load tokens to msal-browser cache.
-     * @param request
-     * @param response
-     * @param options
-     * @returns `AuthenticationResult` for the response that was loaded.
-     */
-    async loadExternalTokens(request, response, options) {
-        if (!this.isBrowserEnvironment) {
-            throw createBrowserAuthError(nonBrowserEnvironment);
-        }
-        const correlationId = request.correlationId || createNewGuid();
-        const idTokenClaims = response.id_token
-            ? AuthToken.extractTokenClaims(response.id_token, base64Decode)
-            : undefined;
-        const authorityOptions = {
-            protocolMode: this.config.auth.protocolMode,
-            knownAuthorities: this.config.auth.knownAuthorities,
-            cloudDiscoveryMetadata: this.config.auth.cloudDiscoveryMetadata,
-            authorityMetadata: this.config.auth.authorityMetadata,
-            skipAuthorityMetadataCache: this.config.auth.skipAuthorityMetadataCache,
-        };
-        const authority = request.authority
-            ? new Authority(Authority.generateAuthority(request.authority, request.azureCloudOptions), this.config.system.networkClient, this.storage, authorityOptions, this.logger, request.correlationId || createNewGuid())
-            : undefined;
-        const cacheRecordAccount = await this.loadAccount(request, options.clientInfo || response.client_info || "", correlationId, idTokenClaims, authority);
-        const idToken = await this.loadIdToken(response, cacheRecordAccount.homeAccountId, cacheRecordAccount.environment, cacheRecordAccount.realm, correlationId);
-        const accessToken = await this.loadAccessToken(request, response, cacheRecordAccount.homeAccountId, cacheRecordAccount.environment, cacheRecordAccount.realm, options, correlationId);
-        const refreshToken = await this.loadRefreshToken(response, cacheRecordAccount.homeAccountId, cacheRecordAccount.environment, correlationId);
-        return this.generateAuthenticationResult(request, {
-            account: cacheRecordAccount,
-            idToken,
-            accessToken,
-            refreshToken,
-        }, idTokenClaims, authority);
-    }
-    /**
-     * Helper function to load account to msal-browser cache
-     * @param idToken
-     * @param environment
-     * @param clientInfo
-     * @param authorityType
-     * @param requestHomeAccountId
-     * @returns `AccountEntity`
-     */
-    async loadAccount(request, clientInfo, correlationId, idTokenClaims, authority) {
-        this.logger.verbose("TokenCache - loading account");
-        if (request.account) {
-            const accountEntity = AccountEntity.createFromAccountInfo(request.account);
-            await this.storage.setAccount(accountEntity, correlationId);
-            return accountEntity;
-        }
-        else if (!authority || (!clientInfo && !idTokenClaims)) {
-            this.logger.error("TokenCache - if an account is not provided on the request, authority and either clientInfo or idToken must be provided instead.");
-            throw createBrowserAuthError(unableToLoadToken);
-        }
-        const homeAccountId = AccountEntity.generateHomeAccountId(clientInfo, authority.authorityType, this.logger, this.cryptoObj, idTokenClaims);
-        const claimsTenantId = idTokenClaims?.tid;
-        const cachedAccount = buildAccountToCache(this.storage, authority, homeAccountId, base64Decode, correlationId, idTokenClaims, clientInfo, authority.hostnameAndPort, claimsTenantId, undefined, // authCodePayload
-        undefined, // nativeAccountId
-        this.logger);
-        await this.storage.setAccount(cachedAccount, correlationId);
-        return cachedAccount;
-    }
-    /**
-     * Helper function to load id tokens to msal-browser cache
-     * @param idToken
-     * @param homeAccountId
-     * @param environment
-     * @param tenantId
-     * @returns `IdTokenEntity`
-     */
-    async loadIdToken(response, homeAccountId, environment, tenantId, correlationId) {
-        if (!response.id_token) {
-            this.logger.verbose("TokenCache - no id token found in response");
-            return null;
-        }
-        this.logger.verbose("TokenCache - loading id token");
-        const idTokenEntity = CacheHelpers.createIdTokenEntity(homeAccountId, environment, response.id_token, this.config.auth.clientId, tenantId);
-        await this.storage.setIdTokenCredential(idTokenEntity, correlationId);
-        return idTokenEntity;
-    }
-    /**
-     * Helper function to load access tokens to msal-browser cache
-     * @param request
-     * @param response
-     * @param homeAccountId
-     * @param environment
-     * @param tenantId
-     * @returns `AccessTokenEntity`
-     */
-    async loadAccessToken(request, response, homeAccountId, environment, tenantId, options, correlationId) {
-        if (!response.access_token) {
-            this.logger.verbose("TokenCache - no access token found in response");
-            return null;
-        }
-        else if (!response.expires_in) {
-            this.logger.error("TokenCache - no expiration set on the access token. Cannot add it to the cache.");
-            return null;
-        }
-        else if (!response.scope &&
-            (!request.scopes || !request.scopes.length)) {
-            this.logger.error("TokenCache - scopes not specified in the request or response. Cannot add token to the cache.");
-            return null;
-        }
-        this.logger.verbose("TokenCache - loading access token");
-        const scopes = response.scope
-            ? ScopeSet.fromString(response.scope)
-            : new ScopeSet(request.scopes);
-        const expiresOn = options.expiresOn || response.expires_in + TimeUtils.nowSeconds();
-        const extendedExpiresOn = options.extendedExpiresOn ||
-            (response.ext_expires_in || response.expires_in) +
-                TimeUtils.nowSeconds();
-        const accessTokenEntity = CacheHelpers.createAccessTokenEntity(homeAccountId, environment, response.access_token, this.config.auth.clientId, tenantId, scopes.printScopes(), expiresOn, extendedExpiresOn, base64Decode);
-        await this.storage.setAccessTokenCredential(accessTokenEntity, correlationId);
-        return accessTokenEntity;
-    }
-    /**
-     * Helper function to load refresh tokens to msal-browser cache
-     * @param request
-     * @param response
-     * @param homeAccountId
-     * @param environment
-     * @returns `RefreshTokenEntity`
-     */
-    async loadRefreshToken(response, homeAccountId, environment, correlationId) {
-        if (!response.refresh_token) {
-            this.logger.verbose("TokenCache - no refresh token found in response");
-            return null;
-        }
-        this.logger.verbose("TokenCache - loading refresh token");
-        const refreshTokenEntity = CacheHelpers.createRefreshTokenEntity(homeAccountId, environment, response.refresh_token, this.config.auth.clientId, response.foci, undefined, // userAssertionHash
-        response.refresh_token_expires_in);
-        await this.storage.setRefreshTokenCredential(refreshTokenEntity, correlationId);
-        return refreshTokenEntity;
-    }
-    /**
-     * Helper function to generate an `AuthenticationResult` for the result.
-     * @param request
-     * @param idTokenObj
-     * @param cacheRecord
-     * @param authority
-     * @returns `AuthenticationResult`
-     */
-    generateAuthenticationResult(request, cacheRecord, idTokenClaims, authority) {
-        let accessToken = "";
-        let responseScopes = [];
-        let expiresOn = null;
-        let extExpiresOn;
-        if (cacheRecord?.accessToken) {
-            accessToken = cacheRecord.accessToken.secret;
-            responseScopes = ScopeSet.fromString(cacheRecord.accessToken.target).asArray();
-            // Access token expiresOn stored in seconds, converting to Date for AuthenticationResult
-            expiresOn = TimeUtils.toDateFromSeconds(cacheRecord.accessToken.expiresOn);
-            extExpiresOn = TimeUtils.toDateFromSeconds(cacheRecord.accessToken.extendedExpiresOn);
-        }
-        const accountEntity = cacheRecord.account;
-        return {
-            authority: authority ? authority.canonicalAuthority : "",
-            uniqueId: cacheRecord.account.localAccountId,
-            tenantId: cacheRecord.account.realm,
-            scopes: responseScopes,
-            account: accountEntity.getAccountInfo(),
-            idToken: cacheRecord.idToken?.secret || "",
-            idTokenClaims: idTokenClaims || {},
-            accessToken: accessToken,
-            fromCache: true,
-            expiresOn: expiresOn,
-            correlationId: request.correlationId || "",
-            requestId: "",
-            extExpiresOn: extExpiresOn,
-            familyId: cacheRecord.refreshToken?.familyId || "",
-            tokenType: cacheRecord?.accessToken?.tokenType || "",
-            state: request.state || "",
-            cloudGraphHostName: accountEntity.cloudGraphHostName || "",
-            msGraphHost: accountEntity.msGraphHost || "",
-            fromNativeBroker: false,
-        };
-    }
-}
-
-export { TokenCache };
-//# sourceMappingURL=TokenCache.mjs.map