@azure/msal-browser 4.27.0 → 5.0.0-beta.0

package/src/custom_auth/core/auth_flow/jit/state/AuthMethodRegistrationState.ts

@@ -124,7 +124,7 @@ abstract class AuthMethodRegistrationState<
             }
         } catch (error) {
             this.stateParameters.logger.errorPii(
-                `Failed to challenge authentication method for auth method registration. Error: ${error}.`,
+                `Failed to challenge authentication method for auth method registration. Error: '${error}'.`,
                 this.stateParameters.correlationId
             );
             return AuthMethodRegistrationChallengeMethodResult.createWithError(
@@ -146,6 +146,7 @@ export class AuthMethodRegistrationRequiredState extends AuthMethodRegistrationS
     /**
      * Gets the available authentication methods for registration.
      * @returns Array of available authentication methods.
+     * @warning This API is experimental. It may be changed in the future without notice. Do not use in production applications.
      */
     getAuthMethods(): AuthenticationMethod[] {
         return this.stateParameters.authMethods;
@@ -155,6 +156,7 @@ export class AuthMethodRegistrationRequiredState extends AuthMethodRegistrationS
      * Challenges an authentication method for registration.
      * @param authMethodDetails The authentication method details to challenge.
      * @returns Promise that resolves to AuthMethodRegistrationChallengeMethodResult.
+     * @warning This API is experimental. It may be changed in the future without notice. Do not use in production applications.
      */
     async challengeAuthMethod(
         authMethodDetails: AuthMethodDetails
@@ -175,6 +177,7 @@ export class AuthMethodVerificationRequiredState extends AuthMethodRegistrationS
     /**
      * Gets the length of the expected verification code.
      * @returns The code length.
+     * @warning This API is experimental. It may be changed in the future without notice. Do not use in production applications.
      */
     getCodeLength(): number {
         return this.stateParameters.codeLength;
@@ -183,6 +186,7 @@ export class AuthMethodVerificationRequiredState extends AuthMethodRegistrationS
     /**
      * Gets the channel through which the challenge was sent.
      * @returns The challenge channel (e.g., "email").
+     * @warning This API is experimental. It may be changed in the future without notice. Do not use in production applications.
      */
     getChannel(): string {
         return this.stateParameters.challengeChannel;
@@ -191,6 +195,7 @@ export class AuthMethodVerificationRequiredState extends AuthMethodRegistrationS
     /**
      * Gets the target label indicating where the challenge was sent.
      * @returns The challenge target label (e.g., masked email address).
+     * @warning This API is experimental. It may be changed in the future without notice. Do not use in production applications.
      */
     getSentTo(): string {
         return this.stateParameters.challengeTargetLabel;
@@ -200,6 +205,7 @@ export class AuthMethodVerificationRequiredState extends AuthMethodRegistrationS
      * Submits the verification challenge to complete the authentication method registration.
      * @param code The verification code entered by the user.
      * @returns Promise that resolves to AuthMethodRegistrationSubmitChallengeResult.
+     * @warning This API is experimental. It may be changed in the future without notice. Do not use in production applications.
      */
     async submitChallenge(
         code: string
@@ -245,7 +251,7 @@ export class AuthMethodVerificationRequiredState extends AuthMethodRegistrationS
             );
         } catch (error) {
             this.stateParameters.logger.errorPii(
-                `Failed to submit auth method challenge. Error: ${error}.`,
+                `Failed to submit auth method challenge. Error: '${error}'.`,
                 this.stateParameters.correlationId
             );
             return AuthMethodRegistrationSubmitChallengeResult.createWithError(
@@ -258,6 +264,7 @@ export class AuthMethodVerificationRequiredState extends AuthMethodRegistrationS
      * Challenges a different authentication method for registration.
      * @param authMethodDetails The authentication method details to challenge.
      * @returns Promise that resolves to AuthMethodRegistrationChallengeMethodResult.
+     * @warning This API is experimental. It may be changed in the future without notice. Do not use in production applications.
      */
     async challengeAuthMethod(
         authMethodDetails: AuthMethodDetails

package/src/custom_auth/core/auth_flow/mfa/result/MfaRequestChallengeResult.ts

@@ -36,6 +36,7 @@ export class MfaRequestChallengeResult extends AuthFlowResultBase<
     /**
      * Checks if the result indicates that verification is required.
      * @returns true if verification is required, false otherwise.
+     * @warning This API is experimental. It may be changed in the future without notice. Do not use in production applications.
      */
     isVerificationRequired(): this is MfaRequestChallengeResult & {
         state: MfaVerificationRequiredState;
@@ -46,6 +47,7 @@ export class MfaRequestChallengeResult extends AuthFlowResultBase<
     /**
      * Checks if the result is in a failed state.
      * @returns true if the result is failed, false otherwise.
+     * @warning This API is experimental. It may be changed in the future without notice. Do not use in production applications.
      */
     isFailed(): this is MfaRequestChallengeResult & {
         state: MfaFailedState;

package/src/custom_auth/core/auth_flow/mfa/result/MfaSubmitChallengeResult.ts

@@ -37,6 +37,7 @@ export class MfaSubmitChallengeResult extends AuthFlowResultBase<
     /**
      * Checks if the MFA flow is completed successfully.
      * @returns true if completed, false otherwise.
+     * @warning This API is experimental. It may be changed in the future without notice. Do not use in production applications.
      */
     isCompleted(): this is MfaSubmitChallengeResult & {
         state: MfaCompletedState;
@@ -47,6 +48,7 @@ export class MfaSubmitChallengeResult extends AuthFlowResultBase<
     /**
      * Checks if the result is in a failed state.
      * @returns true if the result is failed, false otherwise.
+     * @warning This API is experimental. It may be changed in the future without notice. Do not use in production applications.
      */
     isFailed(): this is MfaSubmitChallengeResult & {
         state: MfaFailedState;

package/src/custom_auth/core/auth_flow/mfa/state/MfaState.ts

@@ -31,6 +31,7 @@ abstract class MfaState<
      * Requests an MFA challenge for a specific authentication method.
      * @param authMethodId The authentication method ID to use for the challenge.
      * @returns Promise that resolves to MfaRequestChallengeResult.
+     * @warning This API is experimental. It may be changed in the future without notice. Do not use in production applications.
      */
     async requestChallenge(
         authMethodId: string
@@ -78,7 +79,7 @@ abstract class MfaState<
             );
         } catch (error) {
             this.stateParameters.logger.errorPii(
-                `Failed to request MFA challenge. Error: ${error}.`,
+                `Failed to request MFA challenge. Error: '${error}'.`,
                 this.stateParameters.correlationId
             );
 
@@ -100,6 +101,7 @@ export class MfaAwaitingState extends MfaState<MfaAwaitingStateParameters> {
     /**
      * Gets the available authentication methods for MFA.
      * @returns Array of available authentication methods.
+     * @warning This API is experimental. It may be changed in the future without notice. Do not use in production applications.
      */
     getAuthMethods(): AuthenticationMethod[] {
         return this.stateParameters.authMethods;
@@ -119,6 +121,7 @@ export class MfaVerificationRequiredState extends MfaState<MfaVerificationRequir
     /**
      * Gets the length of the code that the user needs to provide.
      * @returns The expected code length.
+     * @warning This API is experimental. It may be changed in the future without notice. Do not use in production applications.
      */
     getCodeLength(): number {
         return this.stateParameters.codeLength;
@@ -127,6 +130,7 @@ export class MfaVerificationRequiredState extends MfaState<MfaVerificationRequir
     /**
      * Gets the channel through which the challenge was sent.
      * @returns The challenge channel (e.g., "email").
+     * @warning This API is experimental. It may be changed in the future without notice. Do not use in production applications.
      */
     getChannel(): string {
         return this.stateParameters.challengeChannel;
@@ -135,6 +139,7 @@ export class MfaVerificationRequiredState extends MfaState<MfaVerificationRequir
     /**
      * Gets the target label indicating where the challenge was sent.
      * @returns The challenge target label (e.g., masked email address).
+     * @warning This API is experimental. It may be changed in the future without notice. Do not use in production applications.
      */
     getSentTo(): string {
         return this.stateParameters.challengeTargetLabel;
@@ -144,6 +149,7 @@ export class MfaVerificationRequiredState extends MfaState<MfaVerificationRequir
      * Submits the MFA challenge (e.g., OTP code) to complete the authentication.
      * @param challenge The challenge code (e.g., OTP code) entered by the user.
      * @returns Promise that resolves to MfaSubmitChallengeResult.
+     * @warning This API is experimental. It may be changed in the future without notice. Do not use in production applications.
      */
     async submitChallenge(
         challenge: string
@@ -186,7 +192,7 @@ export class MfaVerificationRequiredState extends MfaState<MfaVerificationRequir
             );
         } catch (error) {
             this.stateParameters.logger.errorPii(
-                `Failed to submit MFA challenge. Error: ${error}.`,
+                `Failed to submit MFA challenge. Error: '${error}'.`,
                 this.stateParameters.correlationId
             );
 

package/src/custom_auth/core/interaction_client/CustomAuthInteractionClientBase.ts

@@ -48,7 +48,8 @@ export abstract class CustomAuthInteractionClientBase extends StandardInteractio
             logger,
             eventHandler,
             navigationClient,
-            performanceClient
+            performanceClient,
+            ""
         );
 
         this.tokenResponseHandler = new ResponseHandler(
@@ -56,6 +57,7 @@ export abstract class CustomAuthInteractionClientBase extends StandardInteractio
             this.browserStorage,
             this.browserCrypto,
             this.logger,
+            this.performanceClient,
             null,
             null
         );

package/src/custom_auth/core/interaction_client/jit/JitClient.ts

@@ -25,6 +25,7 @@ import {
     RegisterContinueRequest,
     SignInContinuationTokenRequest,
 } from "../../network_client/custom_auth_api/types/ApiRequestTypes.js";
+import { initializeServerTelemetryManager } from "../../../../interaction_client/BaseInteractionClient.js";
 
 /**
  * JIT client for handling just-in-time authentication method registration flows.
@@ -38,12 +39,19 @@ export class JitClient extends CustomAuthInteractionClientBase {
     async challengeAuthMethod(
         parameters: JitChallengeAuthMethodParams
     ): Promise<JitVerificationRequiredResult | JitCompletedResult> {
+        const correlationId = parameters.correlationId || this.correlationId;
         const apiId = PublicApiId.JIT_CHALLENGE_AUTH_METHOD;
-        const telemetryManager = this.initializeServerTelemetryManager(apiId);
+        const telemetryManager = initializeServerTelemetryManager(
+            apiId,
+            this.config.auth.clientId,
+            correlationId,
+            this.browserStorage,
+            this.logger
+        );
 
         this.logger.verbose(
             "Calling challenge endpoint for getting auth method.",
-            parameters.correlationId
+            correlationId
         );
 
         const challengeReq: RegisterChallengeRequest = {
@@ -51,7 +59,7 @@ export class JitClient extends CustomAuthInteractionClientBase {
             challenge_type: parameters.authMethod.challenge_type,
             challenge_target: parameters.verificationContact,
             challenge_channel: parameters.authMethod.challenge_channel,
-            correlationId: parameters.correlationId,
+            correlationId: correlationId,
             telemetryManager: telemetryManager,
         };
 
@@ -60,7 +68,7 @@ export class JitClient extends CustomAuthInteractionClientBase {
 
         this.logger.verbose(
             "Challenge endpoint called for auth method registration.",
-            parameters.correlationId
+            challengeResponse.correlation_id || correlationId
         );
 
         /*
@@ -71,12 +79,13 @@ export class JitClient extends CustomAuthInteractionClientBase {
         if (challengeResponse.challenge_type === ChallengeType.PREVERIFIED) {
             this.logger.verbose(
                 "Fast-pass scenario detected - completing registration without additional verification.",
-                challengeResponse.correlation_id
+                challengeResponse.correlation_id || correlationId
             );
 
             // Use submitChallenge for fast-pass scenario with continuation_token grant type
             const fastPassParams: JitSubmitChallengeParams = {
-                correlationId: challengeResponse.correlation_id,
+                correlationId:
+                    challengeResponse.correlation_id || correlationId,
                 continuationToken: challengeResponse.continuation_token,
                 grantType: GrantType.CONTINUATION_TOKEN,
                 scopes: parameters.scopes,
@@ -90,7 +99,7 @@ export class JitClient extends CustomAuthInteractionClientBase {
 
         // Verification required
         return createJitVerificationRequiredResult({
-            correlationId: challengeResponse.correlation_id,
+            correlationId: challengeResponse.correlation_id || correlationId,
             continuationToken: challengeResponse.continuation_token,
             challengeChannel: challengeResponse.challenge_channel,
             challengeTargetLabel: challengeResponse.challenge_target,
@@ -107,12 +116,19 @@ export class JitClient extends CustomAuthInteractionClientBase {
     async submitChallenge(
         parameters: JitSubmitChallengeParams
     ): Promise<JitCompletedResult> {
+        const correlationId = parameters.correlationId || this.correlationId;
         const apiId = PublicApiId.JIT_SUBMIT_CHALLENGE;
-        const telemetryManager = this.initializeServerTelemetryManager(apiId);
+        const telemetryManager = initializeServerTelemetryManager(
+            apiId,
+            this.config.auth.clientId,
+            correlationId,
+            this.browserStorage,
+            this.logger
+        );
 
         this.logger.verbose(
             "Calling continue endpoint for auth method challenge submission.",
-            parameters.correlationId
+            correlationId
         );
 
         // Submit challenge to complete registration
@@ -122,7 +138,7 @@ export class JitClient extends CustomAuthInteractionClientBase {
             ...(parameters.challenge && {
                 oob: parameters.challenge,
             }),
-            correlationId: parameters.correlationId,
+            correlationId: correlationId,
             telemetryManager: telemetryManager,
         };
 
@@ -139,7 +155,7 @@ export class JitClient extends CustomAuthInteractionClientBase {
         const tokenRequest: SignInContinuationTokenRequest = {
             continuation_token: continueResponse.continuation_token,
             scope: scopes.join(" "),
-            correlationId: continueResponse.correlation_id,
+            correlationId: continueResponse.correlation_id || correlationId,
             telemetryManager: telemetryManager,
             ...(parameters.claims && {
                 claims: parameters.claims,
@@ -154,11 +170,13 @@ export class JitClient extends CustomAuthInteractionClientBase {
         const authResult = await this.handleTokenResponse(
             tokenResponse,
             scopes,
-            tokenResponse.correlation_id || continueResponse.correlation_id
+            tokenResponse.correlation_id ||
+                continueResponse.correlation_id ||
+                correlationId
         );
 
         return createJitCompletedResult({
-            correlationId: continueResponse.correlation_id,
+            correlationId: continueResponse.correlation_id || correlationId,
             authenticationResult: authResult,
         });
     }

package/src/custom_auth/core/interaction_client/mfa/MfaClient.ts

@@ -27,6 +27,7 @@ import {
 import { ensureArgumentIsNotEmptyString } from "../../utils/ArgumentValidator.js";
 import { CustomAuthApiError } from "../../error/CustomAuthApiError.js";
 import * as CustomAuthApiErrorCode from "../../network_client/custom_auth_api/types/ApiErrorCodes.js";
+import { initializeServerTelemetryManager } from "../../../../interaction_client/BaseInteractionClient.js";
 
 /**
  * MFA client for handling multi-factor authentication flows.
@@ -41,18 +42,25 @@ export class MfaClient extends CustomAuthInteractionClientBase {
         parameters: MfaRequestChallengeParams
     ): Promise<MfaVerificationRequiredResult> {
         const apiId = PublicApiId.MFA_REQUEST_CHALLENGE;
-        const telemetryManager = this.initializeServerTelemetryManager(apiId);
+        const correlationId = parameters.correlationId || this.correlationId;
+        const telemetryManager = initializeServerTelemetryManager(
+            apiId,
+            this.config.auth.clientId,
+            correlationId,
+            this.browserStorage,
+            this.logger
+        );
 
         this.logger.verbose(
             "Calling challenge endpoint for MFA.",
-            parameters.correlationId
+            correlationId
         );
 
         const challengeReq: SignInChallengeRequest = {
             challenge_type: this.getChallengeTypes(parameters.challengeType),
             continuation_token: parameters.continuationToken,
             id: parameters.authMethodId,
-            correlationId: parameters.correlationId,
+            correlationId: correlationId,
             telemetryManager: telemetryManager,
         };
 
@@ -63,13 +71,14 @@ export class MfaClient extends CustomAuthInteractionClientBase {
 
         this.logger.verbose(
             "Challenge endpoint called for MFA.",
-            parameters.correlationId
+            correlationId
         );
 
         if (challengeResponse.challenge_type === ChallengeType.OOB) {
             // Verification required - code will be sent
             return createMfaVerificationRequiredResult({
-                correlationId: challengeResponse.correlation_id,
+                correlationId:
+                    challengeResponse.correlation_id || correlationId,
                 continuationToken: challengeResponse.continuation_token ?? "",
                 challengeChannel: challengeResponse.challenge_channel ?? "",
                 challengeTargetLabel:
@@ -83,13 +92,13 @@ export class MfaClient extends CustomAuthInteractionClientBase {
 
         this.logger.error(
             `Unsupported challenge type '${challengeResponse.challenge_type}' for MFA.`,
-            parameters.correlationId
+            challengeResponse.correlation_id || correlationId
         );
 
         throw new CustomAuthApiError(
             CustomAuthApiErrorCode.UNSUPPORTED_CHALLENGE_TYPE,
             `Unsupported challenge type '${challengeResponse.challenge_type}'.`,
-            challengeResponse.correlation_id
+            challengeResponse.correlation_id || correlationId
         );
     }
 
@@ -101,14 +110,22 @@ export class MfaClient extends CustomAuthInteractionClientBase {
     async submitChallenge(
         parameters: MfaSubmitChallengeParams
     ): Promise<MfaCompletedResult> {
+        const correlationId = parameters.correlationId || this.correlationId;
+
         ensureArgumentIsNotEmptyString(
             "parameters.challenge",
             parameters.challenge,
-            parameters.correlationId
+            correlationId
         );
 
         const apiId = PublicApiId.MFA_SUBMIT_CHALLENGE;
-        const telemetryManager = this.initializeServerTelemetryManager(apiId);
+        const telemetryManager = initializeServerTelemetryManager(
+            apiId,
+            this.config.auth.clientId,
+            correlationId,
+            this.browserStorage,
+            this.logger
+        );
         const scopes = this.getScopes(parameters.scopes);
 
         const request: SignInOobTokenRequest = {
@@ -116,7 +133,7 @@ export class MfaClient extends CustomAuthInteractionClientBase {
             oob: parameters.challenge,
             grant_type: GrantType.MFA_OOB,
             scope: scopes.join(" "),
-            correlationId: parameters.correlationId,
+            correlationId: correlationId,
             telemetryManager: telemetryManager,
             ...(parameters.claims && {
                 claims: parameters.claims,
@@ -125,7 +142,7 @@ export class MfaClient extends CustomAuthInteractionClientBase {
 
         this.logger.verbose(
             "Calling token endpoint for MFA challenge submission.",
-            parameters.correlationId
+            correlationId
         );
 
         const tokenResponse =
@@ -137,11 +154,11 @@ export class MfaClient extends CustomAuthInteractionClientBase {
         const result = await this.handleTokenResponse(
             tokenResponse,
             scopes,
-            tokenResponse.correlation_id ?? parameters.correlationId
+            tokenResponse.correlation_id || correlationId
         );
 
         return createMfaCompletedResult({
-            correlationId: parameters.correlationId,
+            correlationId: tokenResponse.correlation_id || correlationId,
             authenticationResult: result,
         });
     }

package/src/custom_auth/core/network_client/http_client/FetchHttpClient.ts

@@ -23,26 +23,29 @@ export class FetchHttpClient implements IHttpClient {
     ): Promise<Response> {
         const headers = options.headers as Record<string, string>;
         const correlationId =
-            headers?.[AADServerParamKeys.CLIENT_REQUEST_ID] || undefined;
+            headers?.[AADServerParamKeys.CLIENT_REQUEST_ID] || "";
 
         try {
-            this.logger.verbosePii(`Sending request to ${url}`, correlationId);
+            this.logger.verbosePii(
+                `Sending request to '${url}'`,
+                correlationId
+            );
 
             const startTime = performance.now();
             const response = await fetch(url, options);
             const endTime = performance.now();
 
             this.logger.verbosePii(
-                `Request to '${url}' completed in ${
+                `Request to '${url}' completed in '${
                     endTime - startTime
-                }ms with status code ${response.status}`,
+                }'ms with status code '${response.status}'`,
                 correlationId
             );
 
             return response;
         } catch (e) {
             this.logger.errorPii(
-                `Failed to send request to ${url}: ${e}`,
+                `Failed to send request to '${url}': '${e}'`,
                 correlationId
             );
 

package/src/custom_auth/get_account/auth_flow/CustomAuthAccountData.ts

@@ -12,8 +12,8 @@ import { DefaultScopes } from "../../CustomAuthConstants.js";
 import { AccessTokenRetrievalInputs } from "../../CustomAuthActionInputs.js";
 import {
     AccountInfo,
-    AuthenticationScheme,
     CommonSilentFlowRequest,
+    Constants,
     Logger,
     TokenClaims,
 } from "@azure/msal-common/browser";
@@ -70,7 +70,7 @@ export class CustomAuthAccountData {
             return new SignOutResult();
         } catch (error) {
             this.logger.errorPii(
-                `An error occurred during sign out: ${error}`,
+                `An error occurred during sign out: '${error}'`,
                 this.correlationId
             );
 
@@ -190,7 +190,7 @@ export class CustomAuthAccountData {
 
         return {
             ...silentRequest,
-            authenticationScheme: AuthenticationScheme.BEARER,
+            authenticationScheme: Constants.AuthenticationScheme.BEARER,
         } as CommonSilentFlowRequest;
     }
 }

package/src/custom_auth/get_account/interaction_client/CustomAuthSilentCacheClient.ts

@@ -22,6 +22,10 @@ import { AuthenticationResult } from "../../../response/AuthenticationResult.js"
 import { ClearCacheRequest } from "../../../request/ClearCacheRequest.js";
 import { ApiId } from "../../../utils/BrowserConstants.js";
 import { getCurrentUri } from "../../../utils/BrowserUtils.js";
+import {
+    clearCacheOnLogout,
+    initializeServerTelemetryManager,
+} from "../../../interaction_client/BaseInteractionClient.js";
 
 export class CustomAuthSilentCacheClient extends CustomAuthInteractionClientBase {
     /**
@@ -38,8 +42,13 @@ export class CustomAuthSilentCacheClient extends CustomAuthInteractionClientBase
         silentRequest: CommonSilentFlowRequest
     ): Promise<AuthenticationResult> {
         const correlationId = silentRequest.correlationId || this.correlationId;
-        const telemetryManager = this.initializeServerTelemetryManager(
-            PublicApiId.ACCOUNT_GET_ACCESS_TOKEN
+        const telemetryManager = initializeServerTelemetryManager(
+            PublicApiId.ACCOUNT_GET_ACCESS_TOKEN,
+            this.config.auth.clientId,
+            correlationId,
+            this.browserStorage,
+            this.logger,
+            silentRequest.forceRefresh
         );
         const clientConfig = this.getCustomAuthClientConfiguration(
             telemetryManager,
@@ -105,13 +114,16 @@ export class CustomAuthSilentCacheClient extends CustomAuthInteractionClientBase
     }
 
     override async logout(logoutRequest?: ClearCacheRequest): Promise<void> {
+        const validLogoutRequest = this.initializeLogoutRequest(logoutRequest);
         const correlationId =
             logoutRequest?.correlationId || this.correlationId;
-        const validLogoutRequest = this.initializeLogoutRequest(logoutRequest);
 
         // Clear the cache
         this.logger.verbose("Start to clear the cache", correlationId);
-        await this.clearCacheOnLogout(
+        await clearCacheOnLogout(
+            this.browserStorage,
+            this.browserCrypto,
+            this.logger,
             correlationId,
             validLogoutRequest?.account
         );
@@ -197,10 +209,6 @@ export class CustomAuthSilentCacheClient extends CustomAuthInteractionClientBase
                 logLevel: logger.logLevel,
                 correlationId: correlationId,
             },
-            cacheOptions: {
-                claimsBasedCachingEnabled:
-                    this.config.cache.claimsBasedCachingEnabled,
-            },
             cryptoInterface: this.browserCrypto,
             networkInterface: this.networkClient,
             storageInterface: this.browserStorage,

package/src/custom_auth/reset_password/auth_flow/state/ResetPasswordCodeRequiredState.ts

@@ -68,7 +68,7 @@ export class ResetPasswordCodeRequiredState extends ResetPasswordState<ResetPass
             );
         } catch (error) {
             this.stateParameters.logger.errorPii(
-                `Failed to submit code for password reset. Error: ${error}.`,
+                `Failed to submit code for password reset. Error: '${error}'.`,
                 this.stateParameters.correlationId
             );
 
@@ -122,7 +122,7 @@ export class ResetPasswordCodeRequiredState extends ResetPasswordState<ResetPass
             );
         } catch (error) {
             this.stateParameters.logger.errorPii(
-                `Failed to resend code for password reset. Error: ${error}.`,
+                `Failed to resend code for password reset. Error: '${error}'.`,
                 this.stateParameters.correlationId
             );
 

package/src/custom_auth/reset_password/auth_flow/state/ResetPasswordPasswordRequiredState.ts

@@ -71,7 +71,7 @@ export class ResetPasswordPasswordRequiredState extends ResetPasswordState<Reset
             );
         } catch (error) {
             this.stateParameters.logger.errorPii(
-                `Failed to submit password for password reset. Error: ${error}.`,
+                `Failed to submit password for password reset. Error: '${error}'.`,
                 this.stateParameters.correlationId
             );