@azure/msal-browser 4.27.0 → 5.0.0-beta.0

package/src/custom_auth/reset_password/interaction_client/ResetPasswordClient.ts

@@ -33,6 +33,7 @@ import {
     ResetPasswordPasswordRequiredResult,
 } from "./result/ResetPasswordActionResult.js";
 import { ensureArgumentIsNotEmptyString } from "../../core/utils/ArgumentValidator.js";
+import { initializeServerTelemetryManager } from "../../../interaction_client/BaseInteractionClient.js";
 
 export class ResetPasswordClient extends CustomAuthInteractionClientBase {
     /**
@@ -43,9 +44,15 @@ export class ResetPasswordClient extends CustomAuthInteractionClientBase {
     async start(
         parameters: ResetPasswordStartParams
     ): Promise<ResetPasswordCodeRequiredResult> {
-        const correlationId = parameters.correlationId;
+        const correlationId = parameters.correlationId || this.correlationId;
         const apiId = PublicApiId.PASSWORD_RESET_START;
-        const telemetryManager = this.initializeServerTelemetryManager(apiId);
+        const telemetryManager = initializeServerTelemetryManager(
+            apiId,
+            this.config.auth.clientId,
+            correlationId,
+            this.browserStorage,
+            this.logger
+        );
 
         const startRequest: ResetPasswordStartRequest = {
             challenge_type: this.getChallengeTypes(parameters.challengeType),
@@ -70,7 +77,7 @@ export class ResetPasswordClient extends CustomAuthInteractionClientBase {
         const challengeRequest: ResetPasswordChallengeRequest = {
             continuation_token: startResponse.continuation_token ?? "",
             challenge_type: this.getChallengeTypes(parameters.challengeType),
-            correlationId: correlationId,
+            correlationId: startResponse.correlation_id || correlationId,
             telemetryManager: telemetryManager,
         };
 
@@ -85,7 +92,7 @@ export class ResetPasswordClient extends CustomAuthInteractionClientBase {
     async submitCode(
         parameters: ResetPasswordSubmitCodeParams
     ): Promise<ResetPasswordPasswordRequiredResult> {
-        const correlationId = parameters.correlationId;
+        const correlationId = parameters.correlationId || this.correlationId;
         ensureArgumentIsNotEmptyString(
             "parameters.code",
             parameters.code,
@@ -93,7 +100,13 @@ export class ResetPasswordClient extends CustomAuthInteractionClientBase {
         );
 
         const apiId = PublicApiId.PASSWORD_RESET_SUBMIT_CODE;
-        const telemetryManager = this.initializeServerTelemetryManager(apiId);
+        const telemetryManager = initializeServerTelemetryManager(
+            apiId,
+            this.config.auth.clientId,
+            correlationId,
+            this.browserStorage,
+            this.logger
+        );
 
         const continueRequest: ResetPasswordContinueRequest = {
             continuation_token: parameters.continuationToken,
@@ -118,7 +131,7 @@ export class ResetPasswordClient extends CustomAuthInteractionClientBase {
         );
 
         return {
-            correlationId: response.correlation_id,
+            correlationId: response.correlation_id || correlationId,
             continuationToken: response.continuation_token ?? "",
         };
     }
@@ -131,13 +144,20 @@ export class ResetPasswordClient extends CustomAuthInteractionClientBase {
     async resendCode(
         parameters: ResetPasswordResendCodeParams
     ): Promise<ResetPasswordCodeRequiredResult> {
+        const correlationId = parameters.correlationId || this.correlationId;
         const apiId = PublicApiId.PASSWORD_RESET_RESEND_CODE;
-        const telemetryManager = this.initializeServerTelemetryManager(apiId);
+        const telemetryManager = initializeServerTelemetryManager(
+            apiId,
+            this.config.auth.clientId,
+            correlationId,
+            this.browserStorage,
+            this.logger
+        );
 
         const challengeRequest: ResetPasswordChallengeRequest = {
             continuation_token: parameters.continuationToken,
             challenge_type: this.getChallengeTypes(parameters.challengeType),
-            correlationId: parameters.correlationId,
+            correlationId: correlationId,
             telemetryManager: telemetryManager,
         };
 
@@ -152,7 +172,7 @@ export class ResetPasswordClient extends CustomAuthInteractionClientBase {
     async submitNewPassword(
         parameters: ResetPasswordSubmitNewPasswordParams
     ): Promise<ResetPasswordCompletedResult> {
-        const correlationId = parameters.correlationId;
+        const correlationId = parameters.correlationId || this.correlationId;
 
         ensureArgumentIsNotEmptyString(
             "parameters.newPassword",
@@ -161,7 +181,13 @@ export class ResetPasswordClient extends CustomAuthInteractionClientBase {
         );
 
         const apiId = PublicApiId.PASSWORD_RESET_SUBMIT_PASSWORD;
-        const telemetryManager = this.initializeServerTelemetryManager(apiId);
+        const telemetryManager = initializeServerTelemetryManager(
+            apiId,
+            this.config.auth.clientId,
+            correlationId,
+            this.browserStorage,
+            this.logger
+        );
 
         const submitRequest: ResetPasswordSubmitRequest = {
             continuation_token: parameters.continuationToken,
@@ -182,13 +208,13 @@ export class ResetPasswordClient extends CustomAuthInteractionClientBase {
 
         this.logger.verbose(
             "Submit endpoint called successfully with new password for password reset.",
-            correlationId
+            submitResponse.correlation_id || correlationId
         );
 
         return this.performPollCompletionRequest(
             submitResponse.continuation_token ?? "",
             submitResponse.poll_interval,
-            correlationId,
+            submitResponse.correlation_id || correlationId,
             telemetryManager
         );
     }
@@ -209,18 +235,18 @@ export class ResetPasswordClient extends CustomAuthInteractionClientBase {
 
         this.logger.verbose(
             "Challenge endpoint for password reset returned successfully.",
-            correlationId
+            response.correlation_id || correlationId
         );
 
         if (response.challenge_type === ChallengeType.OOB) {
             // Code is required
             this.logger.verbose(
                 "Code is required for password reset flow.",
-                correlationId
+                response.correlation_id || correlationId
             );
 
             return {
-                correlationId: response.correlation_id,
+                correlationId: response.correlation_id || correlationId,
                 continuationToken: response.continuation_token ?? "",
                 challengeChannel: response.challenge_channel ?? "",
                 challengeTargetLabel: response.challenge_target_label ?? "",
@@ -232,13 +258,13 @@ export class ResetPasswordClient extends CustomAuthInteractionClientBase {
 
         this.logger.error(
             `Unsupported challenge type '${response.challenge_type}' returned from challenge endpoint for password reset.`,
-            correlationId
+            response.correlation_id || correlationId
         );
 
         throw new CustomAuthApiError(
             CustomAuthApiErrorCode.UNSUPPORTED_CHALLENGE_TYPE,
             `Unsupported challenge type '${response.challenge_type}'.`,
-            correlationId
+            response.correlation_id || correlationId
         );
     }
 
@@ -289,7 +315,7 @@ export class ResetPasswordClient extends CustomAuthInteractionClientBase {
             }
 
             this.logger.verbose(
-                `Poll completion endpoint for password reset is not started or in progress, waiting ${pollInterval} seconds for next check.`,
+                `Poll completion endpoint for password reset is not started or in progress, waiting '${pollInterval}' seconds for next check.`,
                 correlationId
             );
 

package/src/custom_auth/sign_in/auth_flow/result/SignInResult.ts

@@ -83,6 +83,7 @@ export class SignInResult extends AuthFlowResultBase<
 
     /**
      * Checks if the result requires authentication method registration.
+     * @warning This API is experimental. It may be changed in the future without notice. Do not use in production applications.
      */
     isAuthMethodRegistrationRequired(): this is SignInResult & {
         state: AuthMethodRegistrationRequiredState;
@@ -95,6 +96,7 @@ export class SignInResult extends AuthFlowResultBase<
 
     /**
      * Checks if the result requires MFA.
+     * @warning This API is experimental. It may be changed in the future without notice. Do not use in production applications.
      */
     isMfaRequired(): this is SignInResult & { state: MfaAwaitingState } {
         return this.state.stateType === MFA_AWAITING_STATE_TYPE;

package/src/custom_auth/sign_in/auth_flow/result/SignInSubmitCodeResult.ts

@@ -57,6 +57,7 @@ export class SignInSubmitCodeResult extends AuthFlowResultBase<
 
     /**
      * Checks if the result requires authentication method registration.
+     * @warning This API is experimental. It may be changed in the future without notice. Do not use in production applications.
      */
     isAuthMethodRegistrationRequired(): this is SignInSubmitCodeResult & {
         state: AuthMethodRegistrationRequiredState;
@@ -69,6 +70,7 @@ export class SignInSubmitCodeResult extends AuthFlowResultBase<
 
     /**
      * Checks if the result requires MFA.
+     * @warning This API is experimental. It may be changed in the future without notice. Do not use in production applications.
      */
     isMfaRequired(): this is SignInSubmitCodeResult & {
         state: MfaAwaitingState;

package/src/custom_auth/sign_in/auth_flow/result/SignInSubmitPasswordResult.ts

@@ -54,6 +54,7 @@ export class SignInSubmitPasswordResult extends AuthFlowResultBase<
 
     /**
      * Checks if the result requires authentication method registration.
+     * @warning This API is experimental. It may be changed in the future without notice. Do not use in production applications.
      */
     isAuthMethodRegistrationRequired(): this is SignInSubmitPasswordResult & {
         state: AuthMethodRegistrationRequiredState;
@@ -66,6 +67,7 @@ export class SignInSubmitPasswordResult extends AuthFlowResultBase<
 
     /**
      * Checks if the result requires MFA.
+     * @warning This API is experimental. It may be changed in the future without notice. Do not use in production applications.
      */
     isMfaRequired(): this is SignInSubmitPasswordResult & {
         state: MfaAwaitingState;

package/src/custom_auth/sign_in/auth_flow/state/SignInCodeRequiredState.ts

@@ -74,7 +74,7 @@ export class SignInCodeRequiredState extends SignInState<SignInCodeRequiredState
             );
         } catch (error) {
             this.stateParameters.logger.errorPii(
-                `Failed to submit code for sign-in. Error: ${error}.`,
+                `Failed to submit code for sign-in. Error: '${error}'.`,
                 this.stateParameters.correlationId
             );
 

package/src/custom_auth/sign_in/auth_flow/state/SignInContinuationState.ts

@@ -76,7 +76,7 @@ export class SignInContinuationState extends SignInState<SignInContinuationState
             return new SignInResult(nextState.state, nextState.accountInfo);
         } catch (error) {
             this.stateParameters.logger.errorPii(
-                `Failed to sign in with continuation token. Error: ${error}.`,
+                `Failed to sign in with continuation token. Error: '${error}'.`,
                 this.stateParameters.correlationId
             );
 

package/src/custom_auth/sign_in/auth_flow/state/SignInPasswordRequiredState.ts

@@ -73,7 +73,7 @@ export class SignInPasswordRequiredState extends SignInState<SignInPasswordRequi
             );
         } catch (error) {
             this.stateParameters.logger.errorPii(
-                `Failed to sign in after submitting password. Error: ${error}.`,
+                `Failed to sign in after submitting password. Error: '${error}'.`,
                 this.stateParameters.correlationId
             );
 

package/src/custom_auth/sign_in/interaction_client/SignInClient.ts

@@ -54,6 +54,7 @@ import {
 import { UnexpectedError } from "../../core/error/UnexpectedError.js";
 import { ensureArgumentIsNotEmptyString } from "../../core/utils/ArgumentValidator.js";
 import { ServerTelemetryManager } from "@azure/msal-common/browser";
+import { initializeServerTelemetryManager } from "../../../interaction_client/BaseInteractionClient.js";
 
 export class SignInClient extends CustomAuthInteractionClientBase {
     /**
@@ -64,20 +65,27 @@ export class SignInClient extends CustomAuthInteractionClientBase {
     async start(
         parameters: SignInStartParams
     ): Promise<SignInPasswordRequiredResult | SignInCodeSendResult> {
+        const correlationId = parameters.correlationId || this.correlationId;
         const apiId = !parameters.password
             ? PublicApiId.SIGN_IN_WITH_CODE_START
             : PublicApiId.SIGN_IN_WITH_PASSWORD_START;
-        const telemetryManager = this.initializeServerTelemetryManager(apiId);
+        const telemetryManager = initializeServerTelemetryManager(
+            apiId,
+            this.config.auth.clientId,
+            correlationId,
+            this.browserStorage,
+            this.logger
+        );
 
         this.logger.verbose(
             "Calling initiate endpoint for sign in.",
-            parameters.correlationId
+            correlationId
         );
 
         const initReq: SignInInitiateRequest = {
             challenge_type: this.getChallengeTypes(parameters.challengeType),
             username: parameters.username,
-            correlationId: parameters.correlationId,
+            correlationId: correlationId,
             telemetryManager: telemetryManager,
         };
 
@@ -86,13 +94,13 @@ export class SignInClient extends CustomAuthInteractionClientBase {
 
         this.logger.verbose(
             "Initiate endpoint called for sign in.",
-            parameters.correlationId
+            initiateResponse.correlation_id || correlationId
         );
 
         const challengeReq: SignInChallengeRequest = {
             challenge_type: this.getChallengeTypes(parameters.challengeType),
             continuation_token: initiateResponse.continuation_token ?? "",
-            correlationId: initiateResponse.correlation_id,
+            correlationId: initiateResponse.correlation_id || correlationId,
             telemetryManager: telemetryManager,
         };
 
@@ -107,13 +115,20 @@ export class SignInClient extends CustomAuthInteractionClientBase {
     async resendCode(
         parameters: SignInResendCodeParams
     ): Promise<SignInCodeSendResult> {
+        const correlationId = parameters.correlationId || this.correlationId;
         const apiId = PublicApiId.SIGN_IN_RESEND_CODE;
-        const telemetryManager = this.initializeServerTelemetryManager(apiId);
+        const telemetryManager = initializeServerTelemetryManager(
+            apiId,
+            this.config.auth.clientId,
+            correlationId,
+            this.browserStorage,
+            this.logger
+        );
 
         const challengeReq: SignInChallengeRequest = {
             challenge_type: this.getChallengeTypes(parameters.challengeType),
             continuation_token: parameters.continuationToken ?? "",
-            correlationId: parameters.correlationId,
+            correlationId: correlationId,
             telemetryManager: telemetryManager,
         };
 
@@ -122,13 +137,13 @@ export class SignInClient extends CustomAuthInteractionClientBase {
         if (result.type === SIGN_IN_PASSWORD_REQUIRED_RESULT_TYPE) {
             this.logger.error(
                 "Resend code operation failed due to the challenge type 'password' is not supported.",
-                parameters.correlationId
+                result.correlationId || correlationId
             );
 
             throw new CustomAuthApiError(
                 CustomAuthApiErrorCode.UNSUPPORTED_CHALLENGE_TYPE,
                 "Unsupported challenge type 'password'.",
-                result.correlationId
+                result.correlationId || correlationId
             );
         }
 
@@ -147,14 +162,21 @@ export class SignInClient extends CustomAuthInteractionClientBase {
         | SignInJitRequiredResult
         | SignInMfaRequiredResult
     > {
+        const correlationId = parameters.correlationId || this.correlationId;
         ensureArgumentIsNotEmptyString(
             "parameters.code",
             parameters.code,
-            parameters.correlationId
+            correlationId
         );
 
         const apiId = PublicApiId.SIGN_IN_SUBMIT_CODE;
-        const telemetryManager = this.initializeServerTelemetryManager(apiId);
+        const telemetryManager = initializeServerTelemetryManager(
+            apiId,
+            this.config.auth.clientId,
+            correlationId,
+            this.browserStorage,
+            this.logger
+        );
         const scopes = this.getScopes(parameters.scopes);
 
         const request: SignInOobTokenRequest = {
@@ -162,7 +184,7 @@ export class SignInClient extends CustomAuthInteractionClientBase {
             oob: parameters.code,
             grant_type: GrantType.OOB,
             scope: scopes.join(" "),
-            correlationId: parameters.correlationId,
+            correlationId: correlationId,
             telemetryManager: telemetryManager,
             ...(parameters.claims && {
                 claims: parameters.claims,
@@ -175,7 +197,7 @@ export class SignInClient extends CustomAuthInteractionClientBase {
                     request
                 ),
             scopes,
-            parameters.correlationId,
+            correlationId,
             telemetryManager
         );
     }
@@ -192,21 +214,28 @@ export class SignInClient extends CustomAuthInteractionClientBase {
         | SignInJitRequiredResult
         | SignInMfaRequiredResult
     > {
+        const correlationId = parameters.correlationId || this.correlationId;
         ensureArgumentIsNotEmptyString(
             "parameters.password",
             parameters.password,
-            parameters.correlationId
+            correlationId
         );
 
         const apiId = PublicApiId.SIGN_IN_SUBMIT_PASSWORD;
-        const telemetryManager = this.initializeServerTelemetryManager(apiId);
+        const telemetryManager = initializeServerTelemetryManager(
+            apiId,
+            this.config.auth.clientId,
+            correlationId,
+            this.browserStorage,
+            this.logger
+        );
         const scopes = this.getScopes(parameters.scopes);
 
         const request: SignInPasswordTokenRequest = {
             continuation_token: parameters.continuationToken,
             password: parameters.password,
             scope: scopes.join(" "),
-            correlationId: parameters.correlationId,
+            correlationId: correlationId,
             telemetryManager: telemetryManager,
             ...(parameters.claims && {
                 claims: parameters.claims,
@@ -219,7 +248,7 @@ export class SignInClient extends CustomAuthInteractionClientBase {
                     request
                 ),
             scopes,
-            parameters.correlationId,
+            correlationId,
             telemetryManager
         );
     }
@@ -236,18 +265,25 @@ export class SignInClient extends CustomAuthInteractionClientBase {
         | SignInJitRequiredResult
         | SignInMfaRequiredResult
     > {
+        const correlationId = parameters.correlationId || this.correlationId;
         const apiId = this.getPublicApiIdBySignInScenario(
             parameters.signInScenario,
-            parameters.correlationId
+            correlationId
+        );
+        const telemetryManager = initializeServerTelemetryManager(
+            apiId,
+            this.config.auth.clientId,
+            correlationId,
+            this.browserStorage,
+            this.logger
         );
-        const telemetryManager = this.initializeServerTelemetryManager(apiId);
         const scopes = this.getScopes(parameters.scopes);
 
         // Create token request.
         const request: SignInContinuationTokenRequest = {
             continuation_token: parameters.continuationToken,
             username: parameters.username,
-            correlationId: parameters.correlationId,
+            correlationId: correlationId,
             telemetryManager: telemetryManager,
             scope: scopes.join(" "),
             ...(parameters.claims && {
@@ -262,7 +298,7 @@ export class SignInClient extends CustomAuthInteractionClientBase {
                     request
                 ),
             scopes,
-            parameters.correlationId,
+            correlationId,
             telemetryManager
         );
     }
@@ -295,17 +331,17 @@ export class SignInClient extends CustomAuthInteractionClientBase {
 
             this.logger.verbose(
                 "Token endpoint response received for sign in.",
-                correlationId
+                tokenResponse.correlation_id || correlationId
             );
 
             const authResult = await this.handleTokenResponse(
                 tokenResponse,
                 scopes,
-                correlationId
+                tokenResponse.correlation_id || correlationId
             );
 
             return createSignInCompleteResult({
-                correlationId: tokenResponse.correlation_id ?? correlationId,
+                correlationId: tokenResponse.correlation_id || correlationId,
                 authenticationResult: authResult,
             });
         } catch (error) {
@@ -316,7 +352,7 @@ export class SignInClient extends CustomAuthInteractionClientBase {
                 return this.handleJitRequiredError(
                     error,
                     telemetryManager,
-                    correlationId
+                    error.correlationId || correlationId
                 );
             } else if (
                 error instanceof CustomAuthApiError &&
@@ -325,7 +361,7 @@ export class SignInClient extends CustomAuthInteractionClientBase {
                 return this.handleMfaRequiredError(
                     error,
                     telemetryManager,
-                    correlationId
+                    error.correlationId || correlationId
                 );
             }
 
@@ -347,18 +383,19 @@ export class SignInClient extends CustomAuthInteractionClientBase {
 
         this.logger.verbose(
             "Challenge endpoint called for sign in.",
-            request.correlationId
+            challengeResponse.correlation_id || request.correlationId
         );
 
         if (challengeResponse.challenge_type === ChallengeType.OOB) {
             // Code is required
             this.logger.verbose(
                 "Challenge type is oob for sign in.",
-                request.correlationId
+                challengeResponse.correlation_id || request.correlationId
             );
 
             return createSignInCodeSendResult({
-                correlationId: challengeResponse.correlation_id,
+                correlationId:
+                    challengeResponse.correlation_id || request.correlationId,
                 continuationToken: challengeResponse.continuation_token ?? "",
                 challengeChannel: challengeResponse.challenge_channel ?? "",
                 challengeTargetLabel:
@@ -374,24 +411,25 @@ export class SignInClient extends CustomAuthInteractionClientBase {
             // Password is required
             this.logger.verbose(
                 "Challenge type is password for sign in.",
-                request.correlationId
+                challengeResponse.correlation_id || request.correlationId
             );
 
             return createSignInPasswordRequiredResult({
-                correlationId: challengeResponse.correlation_id,
+                correlationId:
+                    challengeResponse.correlation_id || request.correlationId,
                 continuationToken: challengeResponse.continuation_token ?? "",
             });
         }
 
         this.logger.error(
             `Unsupported challenge type '${challengeResponse.challenge_type}' for sign in.`,
-            request.correlationId
+            challengeResponse.correlation_id || request.correlationId
         );
 
         throw new CustomAuthApiError(
             CustomAuthApiErrorCode.UNSUPPORTED_CHALLENGE_TYPE,
             `Unsupported challenge type '${challengeResponse.challenge_type}'.`,
-            challengeResponse.correlation_id
+            challengeResponse.correlation_id || request.correlationId
         );
     }
 
@@ -425,7 +463,7 @@ export class SignInClient extends CustomAuthInteractionClientBase {
         // Call register introspect endpoint to get available authentication methods
         const introspectRequest: RegisterIntrospectRequest = {
             continuation_token: error.continuationToken ?? "",
-            correlationId: error.correlationId ?? correlationId,
+            correlationId: correlationId,
             telemetryManager,
         };
 
@@ -441,11 +479,11 @@ export class SignInClient extends CustomAuthInteractionClientBase {
 
         this.logger.verbose(
             "Introspect endpoint called for getting auth methods.",
-            introspectResponse.correlation_id ?? correlationId
+            introspectResponse.correlation_id || correlationId
         );
 
         return createSignInJitRequiredResult({
-            correlationId: introspectResponse.correlation_id ?? correlationId,
+            correlationId: introspectResponse.correlation_id || correlationId,
             continuationToken: introspectResponse.continuation_token ?? "",
             authMethods: introspectResponse.methods,
         });
@@ -461,7 +499,7 @@ export class SignInClient extends CustomAuthInteractionClientBase {
         // Call sign-in introspect endpoint to get available MFA methods
         const introspectRequest: SignInIntrospectRequest = {
             continuation_token: error.continuationToken ?? "",
-            correlationId: error.correlationId ?? correlationId,
+            correlationId: correlationId,
             telemetryManager,
         };
 
@@ -477,11 +515,11 @@ export class SignInClient extends CustomAuthInteractionClientBase {
 
         this.logger.verbose(
             "Introspect endpoint called for MFA auth methods.",
-            introspectResponse.correlation_id ?? correlationId
+            introspectResponse.correlation_id || correlationId
         );
 
         return createSignInMfaRequiredResult({
-            correlationId: introspectResponse.correlation_id ?? correlationId,
+            correlationId: introspectResponse.correlation_id || correlationId,
             continuationToken: introspectResponse.continuation_token ?? "",
             authMethods: introspectResponse.methods,
         });

package/src/custom_auth/sign_up/auth_flow/state/SignUpAttributesRequiredState.ts

@@ -105,7 +105,7 @@ export class SignUpAttributesRequiredState extends SignUpState<SignUpAttributesR
             );
         } catch (error) {
             this.stateParameters.logger.errorPii(
-                `Failed to submit attributes for sign up. Error: ${error}.`,
+                `Failed to submit attributes for sign up. Error: '${error}'.`,
                 this.stateParameters.correlationId
             );
 

package/src/custom_auth/sign_up/auth_flow/state/SignUpCodeRequiredState.ts

@@ -133,7 +133,7 @@ export class SignUpCodeRequiredState extends SignUpState<SignUpCodeRequiredState
             );
         } catch (error) {
             this.stateParameters.logger.errorPii(
-                `Failed to submit code for sign up. Error: ${error}.`,
+                `Failed to submit code for sign up. Error: '${error}'.`,
                 this.stateParameters.correlationId
             );
 
@@ -184,7 +184,7 @@ export class SignUpCodeRequiredState extends SignUpState<SignUpCodeRequiredState
             );
         } catch (error) {
             this.stateParameters.logger.errorPii(
-                `Failed to resend code for sign up. Error: ${error}.`,
+                `Failed to resend code for sign up. Error: '${error}'.`,
                 this.stateParameters.correlationId
             );
 

package/src/custom_auth/sign_up/auth_flow/state/SignUpPasswordRequiredState.ts

@@ -112,7 +112,7 @@ export class SignUpPasswordRequiredState extends SignUpState<SignUpPasswordRequi
             );
         } catch (error) {
             this.stateParameters.logger.errorPii(
-                `Failed to submit password for sign up. Error: ${error}.`,
+                `Failed to submit password for sign up. Error: '${error}'.`,
                 this.stateParameters.correlationId
             );