@azure/msal-browser 4.27.0 → 5.0.0-beta.0

package/src/request/AuthorizationCodeRequest.ts

@@ -6,10 +6,7 @@
 import { CommonAuthorizationCodeRequest } from "@azure/msal-common/browser";
 
 export type AuthorizationCodeRequest = Partial<
-    Omit<
-        CommonAuthorizationCodeRequest,
-        "code" | "enableSpaAuthorizationCode" | "requestedClaimsHash"
-    >
+    Omit<CommonAuthorizationCodeRequest, "code" | "enableSpaAuthorizationCode">
 > & {
     code?: string;
     nativeAccountId?: string;

package/src/request/EndSessionPopupRequest.ts

@@ -18,9 +18,7 @@ import { PopupWindowAttributes } from "./PopupWindowAttributes.js";
  * - logoutHint             - A string that specifies the account that is being logged out in order to skip the server account picker on logout
  * - popupWindowParent      - Optional window object to use as the parent when opening popup windows. Uses global `window` if not given.
  */
-export type EndSessionPopupRequest = Partial<
-    Omit<CommonEndSessionRequest, "tokenQueryParameters">
-> & {
+export type EndSessionPopupRequest = Partial<CommonEndSessionRequest> & {
     authority?: string;
     mainWindowRedirectUri?: string;
     popupWindowAttributes?: PopupWindowAttributes;

package/src/request/EndSessionRequest.ts

@@ -12,12 +12,8 @@ import { CommonEndSessionRequest } from "@azure/msal-common/browser";
  * - authority              - Authority to send logout request to.
  * - correlationId          - Unique GUID set per request to trace a request end-to-end for telemetry purposes.
  * - idTokenHint            - ID Token used by B2C to validate logout if required by the policy
- * - onRedirectNavigate     - Callback that will be passed the url that MSAL will navigate to. Returning false in the callback will stop navigation.
  * - logoutHint             - A string that specifies the account that is being logged out in order to skip the server account picker on logout
  */
-export type EndSessionRequest = Partial<
-    Omit<CommonEndSessionRequest, "tokenQueryParameters">
-> & {
+export type EndSessionRequest = Partial<CommonEndSessionRequest> & {
     authority?: string;
-    onRedirectNavigate?: (url: string) => boolean | void;
 };

package/src/request/HandleRedirectPromiseOptions.ts

@@ -0,0 +1,9 @@
+/*
+ * Copyright (c) Microsoft Corporation. All rights reserved.
+ * Licensed under the MIT License.
+ */
+
+export type HandleRedirectPromiseOptions = {
+    hash?: string;
+    navigateToLoginRequestUrl?: boolean;
+};

package/src/request/PopupRequest.ts

@@ -26,13 +26,13 @@ import { PopupWindowAttributes } from "./PopupWindowAttributes.js";
  * - loginHint                  - Can be used to pre-fill the username/email address field of the sign-in page for the user, if you know the username/email address ahead of time. Often apps use this parameter during re-authentication, having already extracted the username from a previous sign-in using the login_hint or preferred_username claim.
  * - sid                        - Session ID, unique identifier for the session. Available as an optional claim on ID tokens.
  * - domainHint                 - Provides a hint about the tenant or domain that the user should use to sign in. The value of the domain hint is a registered domain for the tenant.
- * - extraQueryParameters       - String to string map of custom query parameters added to the /authorize call
- * - tokenBodyParameters        - String to string map of custom token request body parameters added to the /token call. Only used when renewing access tokens.
- * - tokenQueryParameters       - String to string map of custom query parameters added to the /token call
+ * - extraQueryParameters       - String to string map of custom query parameters added to outgoing token service requests
+ * - extraParameters            - String to string map of custom query parameters added to outgoing token service requests
  * - claims                     - In cases where Azure AD tenant admin has enabled conditional access policies, and the policy has not been met, exceptions will contain claims that need to be consented to.
  * - nonce                      - A value included in the request that is returned in the id token. A randomly generated unique value is typically used to mitigate replay attacks.
  * - popupWindowAttributes      - Optional popup window attributes. popupSize with height and width, and popupPosition with top and left can be set.
  * - popupWindowParent          - Optional window object to use as the parent when opening popup windows. Uses global `window` if not given.
+ * - overrideInteractionInProgress - Optional flag to allow overriding an existing interaction_in_progress state for popup flows. **WARNING**: Use with caution! For usage details and examples, see the [login-user.md](../../../docs/login-user.md#handling-interaction_in_progress-errors) documentation.
  */
 
 export type PopupRequest = Partial<
@@ -43,11 +43,11 @@ export type PopupRequest = Partial<
         | "earJwk"
         | "codeChallenge"
         | "codeChallengeMethod"
-        | "requestedClaimsHash"
         | "platformBroker"
     >
 > & {
     scopes: Array<string>;
     popupWindowAttributes?: PopupWindowAttributes;
     popupWindowParent?: Window;
+    overrideInteractionInProgress?: boolean;
 };

package/src/request/RedirectRequest.ts

@@ -25,13 +25,11 @@ import { CommonAuthorizationUrlRequest } from "@azure/msal-common/browser";
  * - loginHint                  - Can be used to pre-fill the username/email address field of the sign-in page for the user, if you know the username/email address ahead of time. Often apps use this parameter during re-authentication, having already extracted the username from a previous sign-in using the login_hint or preferred_username claim.
  * - sid                        - Session ID, unique identifier for the session. Available as an optional claim on ID tokens.
  * - domainHint                 - Provides a hint about the tenant or domain that the user should use to sign in. The value of the domain hint is a registered domain for the tenant.
- * - extraQueryParameters       - String to string map of custom query parameters added to the /authorize call
- * - tokenBodyParameters        - String to string map of custom token request body parameters added to the /token call. Only used when renewing access tokens.
- * - tokenQueryParameters       - String to string map of custom query parameters added to the /token call
+ * - extraQueryParameters       - String to string map of custom query parameters added to outgoing token service requests
+ * - extraParameters            - String to string map of custom query parameters added to outgoing token service requests
  * - claims                     - In cases where Azure AD tenant admin has enabled conditional access policies, and the policy has not been met, exceptions will contain claims that need to be consented to.
  * - nonce                      - A value included in the request that is returned in the id token. A randomly generated unique value is typically used to mitigate replay attacks.
  * - redirectStartPage          - The page that should be returned to after loginRedirect or acquireTokenRedirect. This should only be used if this is different from the redirectUri and will default to the page that initiates the request. When the navigateToLoginRequestUrl config option is set to false this parameter will be ignored.
- * - onRedirectNavigate         - Callback that will be passed the url that MSAL will navigate to. Returning false in the callback will stop navigation.
  */
 export type RedirectRequest = Partial<
     Omit<
@@ -41,16 +39,9 @@ export type RedirectRequest = Partial<
         | "earJwk"
         | "codeChallenge"
         | "codeChallengeMethod"
-        | "requestedClaimsHash"
         | "platformBroker"
     >
 > & {
     scopes: Array<string>;
     redirectStartPage?: string;
-    /**
-     * @deprecated
-     * onRedirectNavigate is deprecated and will be removed in the next major version.
-     * Set onRedirectNavigate in Configuration instead.
-     */
-    onRedirectNavigate?: (url: string) => boolean | void;
 };

package/src/request/RequestHelpers.ts

@@ -5,39 +5,37 @@
 
 import {
     AccountInfo,
-    AuthenticationScheme,
+    Constants,
     BaseAuthRequest,
     ClientConfigurationErrorCodes,
     CommonSilentFlowRequest,
-    HttpMethod,
     IPerformanceClient,
     Logger,
-    PerformanceEvents,
     ProtocolMode,
-    StringUtils,
     createClientConfigurationError,
     invokeAsync,
 } from "@azure/msal-common/browser";
+import * as BrowserPerformanceEvents from "../telemetry/BrowserPerformanceEvents.js";
 import { BrowserConfiguration } from "../config/Configuration.js";
 import { SilentRequest } from "./SilentRequest.js";
-import { hashString } from "../crypto/BrowserCrypto.js";
 import { PopupRequest } from "./PopupRequest.js";
 import { RedirectRequest } from "./RedirectRequest.js";
 
 /**
  * Initializer function for all request APIs
  * @param request
+ * @param config
+ * @param performanceClient
+ * @param logger
+ * @param correlationId
  */
 export async function initializeBaseRequest(
     request: Partial<BaseAuthRequest> & { correlationId: string },
     config: BrowserConfiguration,
     performanceClient: IPerformanceClient,
-    logger: Logger
+    logger: Logger,
+    correlationId: string
 ): Promise<BaseAuthRequest> {
-    performanceClient.addQueueMeasurement(
-        PerformanceEvents.InitializeBaseRequest,
-        request.correlationId
-    );
     const authority = request.authority || config.auth.authority;
 
     const scopes = [...((request && request.scopes) || [])];
@@ -51,13 +49,16 @@ export async function initializeBaseRequest(
 
     // Set authenticationScheme to BEARER if not explicitly set in the request
     if (!validatedRequest.authenticationScheme) {
-        validatedRequest.authenticationScheme = AuthenticationScheme.BEARER;
+        validatedRequest.authenticationScheme =
+            Constants.AuthenticationScheme.BEARER;
         logger.verbose(
-            'Authentication Scheme wasn\'t explicitly set in request, defaulting to "Bearer" request'
+            'Authentication Scheme was not explicitly set in request, defaulting to "Bearer" request',
+            correlationId
         );
     } else {
         if (
-            validatedRequest.authenticationScheme === AuthenticationScheme.SSH
+            validatedRequest.authenticationScheme ===
+            Constants.AuthenticationScheme.SSH
         ) {
             if (!request.sshJwk) {
                 throw createClientConfigurationError(
@@ -71,20 +72,11 @@ export async function initializeBaseRequest(
             }
         }
         logger.verbose(
-            `Authentication Scheme set to "${validatedRequest.authenticationScheme}" as configured in Auth request`
+            `Authentication Scheme set to "'${validatedRequest.authenticationScheme}'" as configured in Auth request`,
+            correlationId
         );
     }
 
-    // Set requested claims hash if claims-based caching is enabled and claims were requested
-    if (
-        config.cache.claimsBasedCachingEnabled &&
-        request.claims &&
-        // Checks for empty stringified object "{}" which doesn't qualify as requested claims
-        !StringUtils.isEmptyObj(request.claims)
-    ) {
-        validatedRequest.requestedClaimsHash = await hashString(request.claims);
-    }
-
     return validatedRequest;
 }
 
@@ -95,18 +87,13 @@ export async function initializeSilentRequest(
     performanceClient: IPerformanceClient,
     logger: Logger
 ): Promise<CommonSilentFlowRequest> {
-    performanceClient.addQueueMeasurement(
-        PerformanceEvents.InitializeSilentRequest,
-        request.correlationId
-    );
-
     const baseRequest = await invokeAsync(
         initializeBaseRequest,
-        PerformanceEvents.InitializeBaseRequest,
+        BrowserPerformanceEvents.InitializeBaseRequest,
         logger,
         performanceClient,
         request.correlationId
-    )(request, config, performanceClient, logger);
+    )(request, config, performanceClient, logger, request.correlationId);
     return {
         ...request,
         ...baseRequest,
@@ -125,32 +112,22 @@ export async function initializeSilentRequest(
 export function validateRequestMethod(
     interactionRequest: BaseAuthRequest | PopupRequest | RedirectRequest,
     protocolMode: ProtocolMode
-): HttpMethod {
-    let httpMethod: HttpMethod | undefined;
+): Constants.HttpMethod {
+    let httpMethod: Constants.HttpMethod | undefined;
     const requestMethod = interactionRequest.httpMethod;
 
     if (protocolMode === ProtocolMode.EAR) {
-        // Don't override httpMethod if it is already set, default to POST if not set
-        httpMethod = requestMethod || HttpMethod.POST;
-        // Validate that method is not GET if protocol mode is EAR
-        if (httpMethod !== HttpMethod.POST) {
+        // Validate that method can only be POST when protocol mode is EAR
+        if (requestMethod && requestMethod !== Constants.HttpMethod.POST) {
             throw createClientConfigurationError(
                 ClientConfigurationErrorCodes.invalidRequestMethodForEAR
             );
+        } else {
+            httpMethod = Constants.HttpMethod.POST;
         }
     } else {
         // For non-EAR protocol modes, default to GET if httpMethod is not set
-        httpMethod = requestMethod || HttpMethod.GET;
-    }
-
-    // Regardless of protocolMode, if there are authorizePostBodyParameters, validate the request method is POST
-    if (
-        interactionRequest.authorizePostBodyParameters &&
-        httpMethod !== HttpMethod.POST
-    ) {
-        throw createClientConfigurationError(
-            ClientConfigurationErrorCodes.invalidAuthorizePostBodyParameters
-        );
+        httpMethod = requestMethod || Constants.HttpMethod.GET;
     }
 
     return httpMethod;

package/src/request/SilentRequest.ts

@@ -20,9 +20,8 @@ import { CacheLookupPolicy } from "../utils/BrowserConstants.js";
  * - correlationId          - Unique GUID set per request to trace a request end-to-end for telemetry purposes.
  * - account                - Account entity to lookup the credentials.
  * - forceRefresh           - Forces silent requests to make network calls if true.
- * - extraQueryParameters   - String to string map of custom query parameters added to the /authorize call. Only used when renewing the refresh token.
- * - tokenBodyParameters    - String to string map of custom token request body parameters added to the /token call. Only used when renewing access tokens.
- * - tokenQueryParameters   - String to string map of custom query parameters added to the /token call. Only used when renewing access tokens.
+ * - extraQueryParameters   - String to string map of custom query parameters added to outgoing token service requests. Only used when renewing access tokens.
+ * - extraParameters        - String to string map of custom query parameters added to outgoing token service requests. only used when renewing access tokens.
  * - redirectUri            - The redirect URI where authentication responses can be received by your application. It must exactly match one of the redirect URIs registered in the Azure portal. Only used for cases where refresh token is expired.
  * - cacheLookupPolicy      - Enum of different ways the silent token can be retrieved.
  * - prompt                 - Indicates the type of user interaction that is required.
@@ -31,11 +30,7 @@ import { CacheLookupPolicy } from "../utils/BrowserConstants.js";
  */
 export type SilentRequest = Omit<
     CommonSilentFlowRequest,
-    | "authority"
-    | "correlationId"
-    | "forceRefresh"
-    | "account"
-    | "requestedClaimsHash"
+    "authority" | "correlationId" | "forceRefresh" | "account"
 > & {
     redirectUri?: string;
     extraQueryParameters?: StringDict;

package/src/request/SsoSilentRequest.ts

@@ -25,9 +25,8 @@ import { CommonAuthorizationUrlRequest } from "@azure/msal-common/browser";
  * - loginHint                  - Can be used to pre-fill the username/email address field of the sign-in page for the user, if you know the username/email address ahead of time. Often apps use this parameter during re-authentication, having already extracted the username from a previous sign-in using the login_hint or preferred_username claim.
  * - sid                        - Session ID, unique identifier for the session. Available as an optional claim on ID tokens.
  * - domainHint                 - Provides a hint about the tenant or domain that the user should use to sign in. The value of the domain hint is a registered domain for the tenant.
- * - extraQueryParameters       - String to string map of custom query parameters added to the /authorize call
- * - tokenBodyParameters        - String to string map of custom token request body parameters added to the /token call. Only used when renewing access tokens.
- * - tokenQueryParameters       - String to string map of custom query parameters added to the /token call
+ * - extraQueryParameters       - String to string map of custom query parameters added to outgoing token service requests. Only used when renewing access tokens.
+ * - extraParameters            - String to string map of custom query parameters added to outgoing token service requests. Only used when renewing access tokens.
  * - nonce                      - A value included in the request that is returned in the id token. A randomly generated unique value is typically used to mitigate replay attacks.
  */
 export type SsoSilentRequest = Partial<
@@ -37,7 +36,6 @@ export type SsoSilentRequest = Partial<
         | "earJwk"
         | "codeChallenge"
         | "codeChallengeMethod"
-        | "requestedClaimsHash"
         | "platformBroker"
     >
 >;

package/src/response/ResponseHandler.ts

@@ -19,7 +19,8 @@ import { InteractionType } from "../utils/BrowserConstants.js";
 export function deserializeResponse(
     responseString: string,
     responseLocation: string,
-    logger: Logger
+    logger: Logger,
+    correlationId: string
 ): AuthorizeResponse {
     // Deserialize hash fragment response parameters.
     const serverParams = UrlUtils.getDeserializedResponse(responseString);
@@ -27,15 +28,18 @@ export function deserializeResponse(
         if (!UrlUtils.stripLeadingHashOrQuery(responseString)) {
             // Hash or Query string is empty
             logger.error(
-                `The request has returned to the redirectUri but a ${responseLocation} is not present. It's likely that the ${responseLocation} has been removed or the page has been redirected by code running on the redirectUri page.`
+                `The request has returned to the redirectUri but a '${responseLocation}' is not present. It's likely that the '${responseLocation}' has been removed or the page has been redirected by code running on the redirectUri page.`,
+                correlationId
             );
             throw createBrowserAuthError(BrowserAuthErrorCodes.hashEmptyError);
         } else {
             logger.error(
-                `A ${responseLocation} is present in the iframe but it does not contain known properties. It's likely that the ${responseLocation} has been replaced by code running on the redirectUri page.`
+                `A '${responseLocation}' is present in the iframe but it does not contain known properties. It's likely that the '${responseLocation}' has been replaced by code running on the redirectUri page.`,
+                correlationId
             );
             logger.errorPii(
-                `The ${responseLocation} detected is: ${responseString}`
+                `The '${responseLocation}' detected is: '${responseString}'`,
+                correlationId
             );
             throw createBrowserAuthError(
                 BrowserAuthErrorCodes.hashDoesNotContainKnownProperties

package/src/telemetry/BrowserPerformanceClient.ts

@@ -11,8 +11,6 @@ import {
     Logger,
     PerformanceClient,
     PerformanceEvent,
-    PerformanceEvents,
-    PreQueueEvent,
     SubMeasurement,
 } from "@azure/msal-common/browser";
 import { Configuration } from "../config/Configuration.js";
@@ -68,11 +66,7 @@ export class BrowserPerformanceClient
     extends PerformanceClient
     implements IPerformanceClient
 {
-    constructor(
-        configuration: Configuration,
-        intFields?: Set<string>,
-        abbreviations?: Map<string, string>
-    ) {
+    constructor(configuration: Configuration, intFields?: Set<string>) {
         super(
             configuration.auth.clientId,
             configuration.auth.authority || `${Constants.DEFAULT_AUTHORITY}`,
@@ -87,8 +81,7 @@ export class BrowserPerformanceClient
                 appName: "",
                 appVersion: "",
             },
-            intFields,
-            abbreviations
+            intFields
         );
     }
 
@@ -193,98 +186,4 @@ export class BrowserPerformanceClient
             },
         };
     }
-
-    /**
-     * Adds pre-queue time to preQueueTimeByCorrelationId map.
-     * @param {PerformanceEvents} eventName
-     * @param {?string} correlationId
-     * @returns
-     */
-    setPreQueueTime(
-        eventName: PerformanceEvents,
-        correlationId?: string
-    ): void {
-        if (!supportsBrowserPerformanceNow()) {
-            this.logger.trace(
-                `BrowserPerformanceClient: window performance API not available, unable to set telemetry queue time for ${eventName}`
-            );
-            return;
-        }
-
-        if (!correlationId) {
-            this.logger.trace(
-                `BrowserPerformanceClient: correlationId for ${eventName} not provided, unable to set telemetry queue time`
-            );
-            return;
-        }
-
-        const preQueueEvent: PreQueueEvent | undefined =
-            this.preQueueTimeByCorrelationId.get(correlationId);
-        /**
-         * Manually complete queue measurement if there is an incomplete pre-queue event.
-         * Incomplete pre-queue events are instrumentation bugs that should be fixed.
-         */
-        if (preQueueEvent) {
-            this.logger.trace(
-                `BrowserPerformanceClient: Incomplete pre-queue ${preQueueEvent.name} found`,
-                correlationId
-            );
-            this.addQueueMeasurement(
-                preQueueEvent.name,
-                correlationId,
-                undefined,
-                true
-            );
-        }
-        this.preQueueTimeByCorrelationId.set(correlationId, {
-            name: eventName,
-            time: window.performance.now(),
-        });
-    }
-
-    /**
-     * Calculates and adds queue time measurement for given performance event.
-     *
-     * @param {PerformanceEvents} eventName
-     * @param {?string} correlationId
-     * @param {?number} queueTime
-     * @param {?boolean} manuallyCompleted - indicator for manually completed queue measurements
-     * @returns
-     */
-    addQueueMeasurement(
-        eventName: string,
-        correlationId?: string,
-        queueTime?: number,
-        manuallyCompleted?: boolean
-    ): void {
-        if (!supportsBrowserPerformanceNow()) {
-            this.logger.trace(
-                `BrowserPerformanceClient: window performance API not available, unable to add queue measurement for ${eventName}`
-            );
-            return;
-        }
-
-        if (!correlationId) {
-            this.logger.trace(
-                `BrowserPerformanceClient: correlationId for ${eventName} not provided, unable to add queue measurement`
-            );
-            return;
-        }
-
-        const preQueueTime = super.getPreQueueTime(eventName, correlationId);
-        if (!preQueueTime) {
-            return;
-        }
-
-        const currentTime = window.performance.now();
-        const resQueueTime =
-            queueTime || super.calculateQueuedTime(preQueueTime, currentTime);
-
-        return super.addQueueMeasurement(
-            eventName,
-            correlationId,
-            resQueueTime,
-            manuallyCompleted
-        );
-    }
 }

package/src/telemetry/BrowserPerformanceEvents.ts

@@ -0,0 +1,181 @@
+/*
+ * Copyright (c) Microsoft Corporation. All rights reserved.
+ * Licensed under the MIT License.
+ */
+
+/**
+ * acquireTokenFromCache (msal-browser).
+ * Internal API for acquiring token from cache
+ */
+export const AcquireTokenFromCache = "acquireTokenFromCache";
+
+/**
+ * acquireTokenByRefreshToken API (msal-browser and msal-node).
+ * Used to renew an access token using a refresh token against the token endpoint.
+ */
+export const AcquireTokenByRefreshToken = "acquireTokenByRefreshToken";
+
+/**
+ * acquireTokenSilentAsync (msal-browser).
+ * Internal API for acquireTokenSilent.
+ */
+export const AcquireTokenSilentAsync = "acquireTokenSilentAsync";
+
+/**
+ * getPublicKeyThumbprint API in CryptoOpts class (msal-browser).
+ * Used to generate a public/private keypair and generate a public key thumbprint for pop requests.
+ */
+export const CryptoOptsGetPublicKeyThumbprint =
+    "cryptoOptsGetPublicKeyThumbprint";
+
+/**
+ * signJwt API in CryptoOpts class (msal-browser).
+ * Used to signed a pop token.
+ */
+export const CryptoOptsSignJwt = "cryptoOptsSignJwt";
+
+/**
+ * acquireToken API in the SilentCacheClient class (msal-browser).
+ * Used to read access tokens from the cache.
+ */
+export const SilentCacheClientAcquireToken = "silentCacheClientAcquireToken";
+
+/**
+ * acquireToken API in the SilentIframeClient class (msal-browser).
+ * Used to acquire a new set of tokens from the authorize endpoint in a hidden iframe.
+ */
+export const SilentIframeClientAcquireToken = "silentIframeClientAcquireToken";
+
+export const AwaitConcurrentIframe = "awaitConcurrentIframe"; // Time spent waiting for a concurrent iframe to complete
+
+/**
+ * acquireToken API in SilentRereshClient (msal-browser).
+ * Used to acquire a new set of tokens from the token endpoint using a refresh token.
+ */
+export const SilentRefreshClientAcquireToken =
+    "silentRefreshClientAcquireToken";
+
+/**
+ * getDiscoveredAuthority API in StandardInteractionClient class (msal-browser).
+ * Used to load authority metadata for a request.
+ */
+export const StandardInteractionClientGetDiscoveredAuthority =
+    "standardInteractionClientGetDiscoveredAuthority";
+
+/**
+ * acquireToken APIs in msal-browser.
+ * Used to make an /authorize endpoint call with native brokering enabled.
+ */
+export const FetchAccountIdWithNativeBroker = "fetchAccountIdWithNativeBroker";
+
+/**
+ * acquireToken API in NativeInteractionClient class (msal-browser).
+ * Used to acquire a token from Native component when native brokering is enabled.
+ */
+export const NativeInteractionClientAcquireToken =
+    "nativeInteractionClientAcquireToken";
+
+/**
+ * Time spent creating default headers for requests to token endpoint
+ */
+export const BaseClientCreateTokenRequestHeaders =
+    "baseClientCreateTokenRequestHeaders";
+
+/**
+ * acquireTokenByRefreshToken API in RefreshTokenClient (msal-common).
+ */
+export const RefreshTokenClientAcquireTokenByRefreshToken =
+    "refreshTokenClientAcquireTokenByRefreshToken";
+
+/**
+ * acquireTokenBySilentIframe (msal-browser).
+ * Internal API for acquiring token by silent Iframe
+ */
+export const AcquireTokenBySilentIframe = "acquireTokenBySilentIframe";
+
+/**
+ * Internal API for initializing base request in BaseInteractionClient (msal-browser)
+ */
+export const InitializeBaseRequest = "initializeBaseRequest";
+
+/**
+ * Internal API for initializing silent request in SilentCacheClient (msal-browser)
+ */
+export const InitializeSilentRequest = "initializeSilentRequest";
+
+export const InitializeCache = "initializeCache";
+
+/**
+ * Helper function in SilentIframeClient class (msal-browser).
+ */
+export const SilentIframeClientTokenHelper = "silentIframeClientTokenHelper";
+
+/**
+ * SilentHandler
+ */
+export const SilentHandlerInitiateAuthRequest =
+    "silentHandlerInitiateAuthRequest";
+export const SilentHandlerMonitorIframeForHash =
+    "silentHandlerMonitorIframeForHash";
+export const SilentHandlerLoadFrame = "silentHandlerLoadFrame";
+export const SilentHandlerLoadFrameSync = "silentHandlerLoadFrameSync";
+
+/**
+ * Helper functions in StandardInteractionClient class (msal-browser)
+ */
+export const StandardInteractionClientCreateAuthCodeClient =
+    "standardInteractionClientCreateAuthCodeClient";
+export const StandardInteractionClientGetClientConfiguration =
+    "standardInteractionClientGetClientConfiguration";
+export const StandardInteractionClientInitializeAuthorizationRequest =
+    "standardInteractionClientInitializeAuthorizationRequest";
+
+export const SilentFlowClientAcquireCachedToken =
+    "silentFlowClientAcquireCachedToken";
+
+export const GetStandardParams = "getStandardParams";
+
+export const HandleCodeResponse = "handleCodeResponse";
+export const HandleResponseEar = "handleResponseEar";
+export const HandleResponsePlatformBroker = "handleResponsePlatformBroker";
+export const HandleResponseCode = "handleResponseCode";
+
+export const AuthClientAcquireToken = "authClientAcquireToken";
+
+export const DeserializeResponse = "deserializeResponse";
+
+export const AuthorityFactoryCreateDiscoveredInstance =
+    "authorityFactoryCreateDiscoveredInstance";
+export const AuthorityResolveEndpointsFromLocalSources =
+    "authorityResolveEndpointsFromLocalSources";
+
+export const AcquireTokenByCodeAsync = "acquireTokenByCodeAsync";
+
+export const HandleRedirectPromiseMeasurement = "handleRedirectPromise";
+export const HandleNativeRedirectPromiseMeasurement =
+    "handleNativeRedirectPromise";
+
+export const NativeMessageHandlerHandshake = "nativeMessageHandlerHandshake";
+export const NativeGenerateAuthResult = "nativeGenerateAuthResult";
+export const RemoveHiddenIframe = "removeHiddenIframe";
+
+export const ImportExistingCache = "importExistingCache";
+export const SetUserData = "setUserData";
+
+/**
+ * Crypto Operations
+ */
+export const GeneratePkceCodes = "generatePkceCodes";
+export const GenerateCodeVerifier = "generateCodeVerifier";
+export const GenerateCodeChallengeFromVerifier =
+    "generateCodeChallengeFromVerifier";
+export const Sha256Digest = "sha256Digest";
+export const GetRandomValues = "getRandomValues";
+export const GenerateHKDF = "generateHKDF";
+export const GenerateBaseKey = "generateBaseKey";
+export const Base64Decode = "base64Decode";
+export const UrlEncodeArr = "urlEncodeArr";
+export const Encrypt = "encrypt";
+export const Decrypt = "decrypt";
+export const GenerateEarKey = "generateEarKey";
+export const DecryptEarResponse = "decryptEarResponse";