@azure/msal-browser 4.27.0 → 5.0.0-beta.0

package/dist/redirect-bridge/crypto/BrowserCrypto.d.ts

@@ -0,0 +1,96 @@
+/**
+ * Check whether browser crypto is available.
+ */
+export declare function validateCryptoAvailable(skipValidateSubtleCrypto: boolean): void;
+/**
+ * Returns a sha-256 hash of the given dataString as an ArrayBuffer.
+ * @param dataString {string} data string
+ * @param performanceClient {?IPerformanceClient}
+ * @param correlationId {?string} correlation id
+ */
+export declare function sha256Digest(dataString: string): Promise<ArrayBuffer>;
+/**
+ * Populates buffer with cryptographically random values.
+ * @param dataBuffer
+ */
+export declare function getRandomValues(dataBuffer: Uint8Array): Uint8Array;
+/**
+ * Creates a UUID v7 from the current timestamp.
+ * Implementation relies on the system clock to guarantee increasing order of generated identifiers.
+ * @returns {number}
+ */
+export declare function createNewGuid(): string;
+/**
+ * Generates a keypair based on current keygen algorithm config.
+ * @param extractable
+ * @param usages
+ */
+export declare function generateKeyPair(extractable: boolean, usages: Array<KeyUsage>): Promise<CryptoKeyPair>;
+/**
+ * Export key as Json Web Key (JWK)
+ * @param key
+ */
+export declare function exportJwk(key: CryptoKey): Promise<JsonWebKey>;
+/**
+ * Imports key as Json Web Key (JWK), can set extractable and usages.
+ * @param key
+ * @param extractable
+ * @param usages
+ */
+export declare function importJwk(key: JsonWebKey, extractable: boolean, usages: Array<KeyUsage>): Promise<CryptoKey>;
+/**
+ * Signs given data with given key
+ * @param key
+ * @param data
+ */
+export declare function sign(key: CryptoKey, data: ArrayBuffer): Promise<ArrayBuffer>;
+/**
+ * Generates Base64 encoded jwk used in the Encrypted Authorize Response (EAR) flow
+ */
+export declare function generateEarKey(): Promise<string>;
+/**
+ * Parses earJwk for encryption key and returns CryptoKey object
+ * @param earJwk
+ * @returns
+ */
+export declare function importEarKey(earJwk: string): Promise<CryptoKey>;
+/**
+ * Decrypt ear_jwe response returned in the Encrypted Authorize Response (EAR) flow
+ * @param earJwk
+ * @param earJwe
+ * @returns
+ */
+export declare function decryptEarResponse(earJwk: string, earJwe: string): Promise<string>;
+/**
+ * Generates symmetric base encryption key. This may be stored as all encryption/decryption keys will be derived from this one.
+ */
+export declare function generateBaseKey(): Promise<ArrayBuffer>;
+/**
+ * Returns the raw key to be passed into the key derivation function
+ * @param baseKey
+ * @returns
+ */
+export declare function generateHKDF(baseKey: ArrayBuffer): Promise<CryptoKey>;
+/**
+ * Encrypt the given data given a base key. Returns encrypted data and a nonce that must be provided during decryption
+ * @param key
+ * @param rawData
+ */
+export declare function encrypt(baseKey: CryptoKey, rawData: string, context: string): Promise<{
+    data: string;
+    nonce: string;
+}>;
+/**
+ * Decrypt data with the given key and nonce
+ * @param key
+ * @param nonce
+ * @param encryptedData
+ * @returns
+ */
+export declare function decrypt(baseKey: CryptoKey, nonce: string, context: string, encryptedData: string): Promise<string>;
+/**
+ * Returns the SHA-256 hash of an input string
+ * @param plainText
+ */
+export declare function hashString(plainText: string): Promise<string>;
+//# sourceMappingURL=BrowserCrypto.d.ts.map

package/dist/redirect-bridge/crypto/BrowserCrypto.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"BrowserCrypto.d.ts","sourceRoot":"","sources":["../../../src/crypto/BrowserCrypto.ts"],"names":[],"mappings":"AAqDA;;GAEG;AACH,wBAAgB,uBAAuB,CACnC,wBAAwB,EAAE,OAAO,GAClC,IAAI,CAeN;AAED;;;;;GAKG;AACH,wBAAsB,YAAY,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC,CAO3E;AAED;;;GAGG;AACH,wBAAgB,eAAe,CAAC,UAAU,EAAE,UAAU,GAAG,UAAU,CAElE;AAWD;;;;GAIG;AACH,wBAAgB,aAAa,IAAI,MAAM,CAuCtC;AAED;;;;GAIG;AACH,wBAAsB,eAAe,CACjC,WAAW,EAAE,OAAO,EACpB,MAAM,EAAE,KAAK,CAAC,QAAQ,CAAC,GACxB,OAAO,CAAC,aAAa,CAAC,CAMxB;AAED;;;GAGG;AACH,wBAAsB,SAAS,CAAC,GAAG,EAAE,SAAS,GAAG,OAAO,CAAC,UAAU,CAAC,CAKnE;AAED;;;;;GAKG;AACH,wBAAsB,SAAS,CAC3B,GAAG,EAAE,UAAU,EACf,WAAW,EAAE,OAAO,EACpB,MAAM,EAAE,KAAK,CAAC,QAAQ,CAAC,GACxB,OAAO,CAAC,SAAS,CAAC,CAQpB;AAED;;;;GAIG;AACH,wBAAsB,IAAI,CACtB,GAAG,EAAE,SAAS,EACd,IAAI,EAAE,WAAW,GAClB,OAAO,CAAC,WAAW,CAAC,CAMtB;AAED;;GAEG;AACH,wBAAsB,cAAc,IAAI,OAAO,CAAC,MAAM,CAAC,CAWtD;AAED;;;;GAIG;AACH,wBAAsB,YAAY,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC,CASrE;AAED;;;;;GAKG;AACH,wBAAsB,kBAAkB,CACpC,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,MAAM,GACf,OAAO,CAAC,MAAM,CAAC,CA8CjB;AAED;;GAEG;AACH,wBAAsB,eAAe,IAAI,OAAO,CAAC,WAAW,CAAC,CAU5D;AAED;;;;GAIG;AACH,wBAAsB,YAAY,CAAC,OAAO,EAAE,WAAW,GAAG,OAAO,CAAC,SAAS,CAAC,CAI3E;AA4BD;;;;GAIG;AACH,wBAAsB,OAAO,CACzB,OAAO,EAAE,SAAS,EAClB,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,MAAM,GAChB,OAAO,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC,CAkB1C;AAED;;;;;;GAMG;AACH,wBAAsB,OAAO,CACzB,OAAO,EAAE,SAAS,EAClB,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,MAAM,EACf,aAAa,EAAE,MAAM,GACtB,OAAO,CAAC,MAAM,CAAC,CAajB;AAED;;;GAGG;AACH,wBAAsB,UAAU,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAInE"}

package/dist/redirect-bridge/crypto/CryptoOps.d.ts

@@ -0,0 +1,77 @@
+import { ICrypto, IPerformanceClient, Logger, ShrOptions, SignedHttpRequest, SignedHttpRequestParameters } from "@azure/msal-common/browser";
+export type CachedKeyPair = {
+    publicKey: CryptoKey;
+    privateKey: CryptoKey;
+    requestMethod?: string;
+    requestUri?: string;
+};
+/**
+ * This class implements MSAL's crypto interface, which allows it to perform base64 encoding and decoding, generating cryptographically random GUIDs and
+ * implementing Proof Key for Code Exchange specs for the OAuth Authorization Code Flow using PKCE (rfc here: https://tools.ietf.org/html/rfc7636).
+ */
+export declare class CryptoOps implements ICrypto {
+    private logger;
+    /**
+     * CryptoOps can be used in contexts outside a PCA instance,
+     * meaning there won't be a performance manager available.
+     */
+    private performanceClient;
+    private static POP_KEY_USAGES;
+    private static EXTRACTABLE;
+    private cache;
+    constructor(logger: Logger, performanceClient?: IPerformanceClient, skipValidateSubtleCrypto?: boolean);
+    /**
+     * Creates a new random GUID - used to populate state and nonce.
+     * @returns string (GUID)
+     */
+    createNewGuid(): string;
+    /**
+     * Encodes input string to base64.
+     * @param input
+     */
+    base64Encode(input: string): string;
+    /**
+     * Decodes input string from base64.
+     * @param input
+     */
+    base64Decode(input: string): string;
+    /**
+     * Encodes input string to base64 URL safe string.
+     * @param input
+     */
+    base64UrlEncode(input: string): string;
+    /**
+     * Stringifies and base64Url encodes input public key
+     * @param inputKid
+     * @returns Base64Url encoded public key
+     */
+    encodeKid(inputKid: string): string;
+    /**
+     * Generates a keypair, stores it and returns a thumbprint
+     * @param request
+     */
+    getPublicKeyThumbprint(request: SignedHttpRequestParameters): Promise<string>;
+    /**
+     * Removes cryptographic keypair from key store matching the keyId passed in
+     * @param kid
+     * @param correlationId
+     */
+    removeTokenBindingKey(kid: string, correlationId: string): Promise<void>;
+    /**
+     * Removes all cryptographic keys from IndexedDB storage
+     * @param correlationId
+     */
+    clearKeystore(correlationId: string): Promise<boolean>;
+    /**
+     * Signs the given object as a jwt payload with private key retrieved by given kid.
+     * @param payload
+     * @param kid
+     */
+    signJwt(payload: SignedHttpRequest, kid: string, shrOptions?: ShrOptions, correlationId?: string): Promise<string>;
+    /**
+     * Returns the SHA-256 hash of an input string
+     * @param plainText
+     */
+    hashString(plainText: string): Promise<string>;
+}
+//# sourceMappingURL=CryptoOps.d.ts.map

package/dist/redirect-bridge/crypto/CryptoOps.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"CryptoOps.d.ts","sourceRoot":"","sources":["../../../src/crypto/CryptoOps.ts"],"names":[],"mappings":"AAKA,OAAO,EAGH,OAAO,EACP,kBAAkB,EAElB,MAAM,EACN,UAAU,EACV,iBAAiB,EACjB,2BAA2B,EAC9B,MAAM,4BAA4B,CAAC;AAepC,MAAM,MAAM,aAAa,GAAG;IACxB,SAAS,EAAE,SAAS,CAAC;IACrB,UAAU,EAAE,SAAS,CAAC;IACtB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,UAAU,CAAC,EAAE,MAAM,CAAC;CACvB,CAAC;AAEF;;;GAGG;AACH,qBAAa,SAAU,YAAW,OAAO;IACrC,OAAO,CAAC,MAAM,CAAS;IAEvB;;;OAGG;IACH,OAAO,CAAC,iBAAiB,CAAiC;IAE1D,OAAO,CAAC,MAAM,CAAC,cAAc,CAAuC;IACpE,OAAO,CAAC,MAAM,CAAC,WAAW,CAAiB;IAC3C,OAAO,CAAC,KAAK,CAAoC;gBAG7C,MAAM,EAAE,MAAM,EACd,iBAAiB,CAAC,EAAE,kBAAkB,EACtC,wBAAwB,CAAC,EAAE,OAAO;IAWtC;;;OAGG;IACH,aAAa,IAAI,MAAM;IAIvB;;;OAGG;IACH,YAAY,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM;IAInC;;;OAGG;IACH,YAAY,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM;IAInC;;;OAGG;IACH,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM;IAItC;;;;OAIG;IACH,SAAS,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM;IAInC;;;OAGG;IACG,sBAAsB,CACxB,OAAO,EAAE,2BAA2B,GACrC,OAAO,CAAC,MAAM,CAAC;IAyDlB;;;;OAIG;IACG,qBAAqB,CACvB,GAAG,EAAE,MAAM,EACX,aAAa,EAAE,MAAM,GACtB,OAAO,CAAC,IAAI,CAAC;IAUhB;;;OAGG;IACG,aAAa,CAAC,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IA4B5D;;;;OAIG;IACG,OAAO,CACT,OAAO,EAAE,iBAAiB,EAC1B,GAAG,EAAE,MAAM,EACX,UAAU,CAAC,EAAE,UAAU,EACvB,aAAa,CAAC,EAAE,MAAM,GACvB,OAAO,CAAC,MAAM,CAAC;IA6DlB;;;OAGG;IACG,UAAU,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;CAGvD"}

package/dist/redirect-bridge/crypto/PkceGenerator.d.ts

@@ -0,0 +1,9 @@
+import { IPerformanceClient, Logger, PkceCodes } from "@azure/msal-common/browser";
+/**
+ * This file defines APIs to generate PKCE codes and code verifiers.
+ */
+/**
+ * Generates PKCE Codes. See the RFC for more information: https://tools.ietf.org/html/rfc7636
+ */
+export declare function generatePkceCodes(performanceClient: IPerformanceClient, logger: Logger, correlationId: string): Promise<PkceCodes>;
+//# sourceMappingURL=PkceGenerator.d.ts.map

package/dist/redirect-bridge/crypto/PkceGenerator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"PkceGenerator.d.ts","sourceRoot":"","sources":["../../../src/crypto/PkceGenerator.ts"],"names":[],"mappings":"AAKA,OAAO,EACH,kBAAkB,EAClB,MAAM,EACN,SAAS,EAGZ,MAAM,4BAA4B,CAAC;AAYpC;;GAEG;AAEH;;GAEG;AACH,wBAAsB,iBAAiB,CACnC,iBAAiB,EAAE,kBAAkB,EACrC,MAAM,EAAE,MAAM,EACd,aAAa,EAAE,MAAM,GACtB,OAAO,CAAC,SAAS,CAAC,CAmBpB"}

package/dist/redirect-bridge/crypto/SignedHttpRequest.d.ts

@@ -0,0 +1,32 @@
+import { LoggerOptions, SignedHttpRequestParameters } from "@azure/msal-common/browser";
+export type SignedHttpRequestOptions = {
+    loggerOptions: LoggerOptions;
+};
+export declare class SignedHttpRequest {
+    private popTokenGenerator;
+    private cryptoOps;
+    private shrParameters;
+    private logger;
+    constructor(shrParameters: SignedHttpRequestParameters, shrOptions?: SignedHttpRequestOptions);
+    /**
+     * Generates and caches a keypair for the given request options.
+     * @returns Public key digest, which should be sent to the token issuer.
+     */
+    generatePublicKeyThumbprint(): Promise<string>;
+    /**
+     * Generates a signed http request for the given payload with the given key.
+     * @param payload Payload to sign (e.g. access token)
+     * @param publicKeyThumbprint Public key digest (from generatePublicKeyThumbprint API)
+     * @param claims Additional claims to include/override in the signed JWT
+     * @returns Pop token signed with the corresponding private key
+     */
+    signRequest(payload: string, publicKeyThumbprint: string, claims?: object): Promise<string>;
+    /**
+     * Removes cached keys from browser for given public key thumbprint
+     * @param publicKeyThumbprint Public key digest (from generatePublicKeyThumbprint API)
+     * @param correlationId
+     * @returns If keys are properly deleted
+     */
+    removeKeys(publicKeyThumbprint: string, correlationId: string): Promise<void>;
+}
+//# sourceMappingURL=SignedHttpRequest.d.ts.map

package/dist/redirect-bridge/crypto/SignedHttpRequest.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"SignedHttpRequest.d.ts","sourceRoot":"","sources":["../../../src/crypto/SignedHttpRequest.ts"],"names":[],"mappings":"AAMA,OAAO,EAEH,aAAa,EAEb,2BAA2B,EAE9B,MAAM,4BAA4B,CAAC;AAGpC,MAAM,MAAM,wBAAwB,GAAG;IACnC,aAAa,EAAE,aAAa,CAAC;CAChC,CAAC;AAEF,qBAAa,iBAAiB;IAC1B,OAAO,CAAC,iBAAiB,CAAoB;IAC7C,OAAO,CAAC,SAAS,CAAY;IAC7B,OAAO,CAAC,aAAa,CAA8B;IACnD,OAAO,CAAC,MAAM,CAAS;gBAGnB,aAAa,EAAE,2BAA2B,EAC1C,UAAU,CAAC,EAAE,wBAAwB;IAYzC;;;OAGG;IACG,2BAA2B,IAAI,OAAO,CAAC,MAAM,CAAC;IAQpD;;;;;;OAMG;IACG,WAAW,CACb,OAAO,EAAE,MAAM,EACf,mBAAmB,EAAE,MAAM,EAC3B,MAAM,CAAC,EAAE,MAAM,GAChB,OAAO,CAAC,MAAM,CAAC;IASlB;;;;;OAKG;IACG,UAAU,CACZ,mBAAmB,EAAE,MAAM,EAC3B,aAAa,EAAE,MAAM,GACtB,OAAO,CAAC,IAAI,CAAC;CAMnB"}

package/dist/redirect-bridge/custom_auth/CustomAuthActionInputs.d.ts

@@ -0,0 +1,29 @@
+import { UserAccountAttributes } from "./UserAccountAttributes.js";
+export type CustomAuthActionInputs = {
+    correlationId?: string;
+};
+export type AccountRetrievalInputs = CustomAuthActionInputs;
+export type SignInInputs = CustomAuthActionInputs & {
+    username: string;
+    password?: string;
+    scopes?: Array<string>;
+    claims?: string;
+};
+export type SignUpInputs = CustomAuthActionInputs & {
+    username: string;
+    password?: string;
+    attributes?: UserAccountAttributes;
+};
+export type ResetPasswordInputs = CustomAuthActionInputs & {
+    username: string;
+};
+export type AccessTokenRetrievalInputs = {
+    forceRefresh: boolean;
+    scopes?: Array<string>;
+    claims?: string;
+};
+export type SignInWithContinuationTokenInputs = {
+    scopes?: Array<string>;
+    claims?: string;
+};
+//# sourceMappingURL=CustomAuthActionInputs.d.ts.map

package/dist/redirect-bridge/custom_auth/CustomAuthActionInputs.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"CustomAuthActionInputs.d.ts","sourceRoot":"","sources":["../../../src/custom_auth/CustomAuthActionInputs.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AAEnE,MAAM,MAAM,sBAAsB,GAAG;IACjC,aAAa,CAAC,EAAE,MAAM,CAAC;CAC1B,CAAC;AAEF,MAAM,MAAM,sBAAsB,GAAG,sBAAsB,CAAC;AAE5D,MAAM,MAAM,YAAY,GAAG,sBAAsB,GAAG;IAChD,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IACvB,MAAM,CAAC,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF,MAAM,MAAM,YAAY,GAAG,sBAAsB,GAAG;IAChD,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,qBAAqB,CAAC;CACtC,CAAC;AAEF,MAAM,MAAM,mBAAmB,GAAG,sBAAsB,GAAG;IACvD,QAAQ,EAAE,MAAM,CAAC;CACpB,CAAC;AAEF,MAAM,MAAM,0BAA0B,GAAG;IACrC,YAAY,EAAE,OAAO,CAAC;IACtB,MAAM,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IACvB,MAAM,CAAC,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF,MAAM,MAAM,iCAAiC,GAAG;IAC5C,MAAM,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IACvB,MAAM,CAAC,EAAE,MAAM,CAAC;CACnB,CAAC"}

package/dist/redirect-bridge/custom_auth/CustomAuthConstants.d.ts

@@ -0,0 +1,35 @@
+export declare const GrantType: {
+    readonly PASSWORD: "password";
+    readonly OOB: "oob";
+    readonly CONTINUATION_TOKEN: "continuation_token";
+    readonly REDIRECT: "redirect";
+    readonly ATTRIBUTES: "attributes";
+    readonly MFA_OOB: "mfa_oob";
+};
+export declare const ChallengeType: {
+    readonly PASSWORD: "password";
+    readonly OOB: "oob";
+    readonly REDIRECT: "redirect";
+    readonly PREVERIFIED: "preverified";
+};
+export declare const DefaultScopes: readonly ["openid", "profile", "offline_access"];
+export declare const HttpHeaderKeys: {
+    readonly CONTENT_TYPE: "Content-Type";
+    readonly X_MS_REQUEST_ID: "x-ms-request-id";
+};
+export declare const DefaultPackageInfo: {
+    readonly SKU: "msal.browser";
+    readonly VERSION: "5.0.0-beta.0";
+    readonly OS: "";
+    readonly CPU: "";
+};
+export declare const ResetPasswordPollStatus: {
+    readonly IN_PROGRESS: "in_progress";
+    readonly SUCCEEDED: "succeeded";
+    readonly FAILED: "failed";
+    readonly NOT_STARTED: "not_started";
+};
+export declare const DefaultCustomAuthApiCodeLength = -1;
+export declare const DefaultCustomAuthApiCodeResendIntervalInSec = 300;
+export declare const PasswordResetPollingTimeoutInMs = 300000;
+//# sourceMappingURL=CustomAuthConstants.d.ts.map

package/dist/redirect-bridge/custom_auth/CustomAuthConstants.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"CustomAuthConstants.d.ts","sourceRoot":"","sources":["../../../src/custom_auth/CustomAuthConstants.ts"],"names":[],"mappings":"AAQA,eAAO,MAAM,SAAS;;;;;;;CAOZ,CAAC;AAEX,eAAO,MAAM,aAAa;;;;;CAKhB,CAAC;AAEX,eAAO,MAAM,aAAa,kDAIhB,CAAC;AAEX,eAAO,MAAM,cAAc;;;CAGjB,CAAC;AAEX,eAAO,MAAM,kBAAkB;;;;;CAKrB,CAAC;AAEX,eAAO,MAAM,uBAAuB;;;;;CAK1B,CAAC;AAEX,eAAO,MAAM,8BAA8B,KAAK,CAAC;AACjD,eAAO,MAAM,2CAA2C,MAAM,CAAC;AAC/D,eAAO,MAAM,+BAA+B,SAAS,CAAC"}

package/dist/redirect-bridge/custom_auth/CustomAuthPublicClientApplication.d.ts

@@ -0,0 +1,55 @@
+import { GetAccountResult } from "./get_account/auth_flow/result/GetAccountResult.js";
+import { SignInResult } from "./sign_in/auth_flow/result/SignInResult.js";
+import { SignUpResult } from "./sign_up/auth_flow/result/SignUpResult.js";
+import { ICustomAuthPublicClientApplication } from "./ICustomAuthPublicClientApplication.js";
+import { AccountRetrievalInputs, SignInInputs, SignUpInputs, ResetPasswordInputs } from "./CustomAuthActionInputs.js";
+import { CustomAuthConfiguration } from "./configuration/CustomAuthConfiguration.js";
+import { ResetPasswordStartResult } from "./reset_password/auth_flow/result/ResetPasswordStartResult.js";
+import { PublicClientApplication } from "../app/PublicClientApplication.js";
+export declare class CustomAuthPublicClientApplication extends PublicClientApplication implements ICustomAuthPublicClientApplication {
+    private readonly customAuthController;
+    /**
+     * Creates a new instance of a PublicClientApplication with the given configuration and controller to start Native authentication flows
+     * @param {CustomAuthConfiguration} config - A configuration object for the PublicClientApplication instance
+     * @returns {Promise<ICustomAuthPublicClientApplication>} - A promise that resolves to a CustomAuthPublicClientApplication instance
+     */
+    static create(config: CustomAuthConfiguration): Promise<ICustomAuthPublicClientApplication>;
+    private constructor();
+    /**
+     * Gets the current account from the browser cache.
+     * @param {AccountRetrievalInputs} accountRetrievalInputs?:AccountRetrievalInputs
+     * @returns {GetAccountResult} - The result of the get account operation
+     */
+    getCurrentAccount(accountRetrievalInputs?: AccountRetrievalInputs): GetAccountResult;
+    /**
+     * Initiates the sign-in flow.
+     * This method results in sign-in completion, or extra actions (password, code, etc.) required to complete the sign-in.
+     * Create result with error details if any exception thrown.
+     * @param {SignInInputs} signInInputs - Inputs for the sign-in flow
+     * @returns {Promise<SignInResult>} - A promise that resolves to SignInResult
+     */
+    signIn(signInInputs: SignInInputs): Promise<SignInResult>;
+    /**
+     * Initiates the sign-up flow.
+     * This method results in sign-up completion, or extra actions (password, code, etc.) required to complete the sign-up.
+     * Create result with error details if any exception thrown.
+     * @param {SignUpInputs} signUpInputs
+     * @returns {Promise<SignUpResult>} - A promise that resolves to SignUpResult
+     */
+    signUp(signUpInputs: SignUpInputs): Promise<SignUpResult>;
+    /**
+     * Initiates the reset password flow.
+     * This method results in triggering extra action (submit code) to complete the reset password.
+     * Create result with error details if any exception thrown.
+     * @param {ResetPasswordInputs} resetPasswordInputs - Inputs for the reset password flow
+     * @returns {Promise<ResetPasswordStartResult>} - A promise that resolves to ResetPasswordStartResult
+     */
+    resetPassword(resetPasswordInputs: ResetPasswordInputs): Promise<ResetPasswordStartResult>;
+    /**
+     * Validates the configuration to ensure it is a valid CustomAuthConfiguration object.
+     * @param {CustomAuthConfiguration} config - The configuration object for the PublicClientApplication.
+     * @returns {void}
+     */
+    private static validateConfig;
+}
+//# sourceMappingURL=CustomAuthPublicClientApplication.d.ts.map

package/dist/redirect-bridge/custom_auth/CustomAuthPublicClientApplication.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"CustomAuthPublicClientApplication.d.ts","sourceRoot":"","sources":["../../../src/custom_auth/CustomAuthPublicClientApplication.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,gBAAgB,EAAE,MAAM,oDAAoD,CAAC;AACtF,OAAO,EAAE,YAAY,EAAE,MAAM,4CAA4C,CAAC;AAC1E,OAAO,EAAE,YAAY,EAAE,MAAM,4CAA4C,CAAC;AAG1E,OAAO,EAAE,kCAAkC,EAAE,MAAM,yCAAyC,CAAC;AAC7F,OAAO,EACH,sBAAsB,EACtB,YAAY,EACZ,YAAY,EACZ,mBAAmB,EACtB,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAAE,uBAAuB,EAAE,MAAM,4CAA4C,CAAC;AAErF,OAAO,EAAE,wBAAwB,EAAE,MAAM,+DAA+D,CAAC;AAGzG,OAAO,EAAE,uBAAuB,EAAE,MAAM,mCAAmC,CAAC;AAO5E,qBAAa,iCACT,SAAQ,uBACR,YAAW,kCAAkC;IAE7C,OAAO,CAAC,QAAQ,CAAC,oBAAoB,CAAgC;IAErE;;;;OAIG;WACU,MAAM,CACf,MAAM,EAAE,uBAAuB,GAChC,OAAO,CAAC,kCAAkC,CAAC;IAiB9C,OAAO;IASP;;;;OAIG;IACH,iBAAiB,CACb,sBAAsB,CAAC,EAAE,sBAAsB,GAChD,gBAAgB;IAMnB;;;;;;OAMG;IACH,MAAM,CAAC,YAAY,EAAE,YAAY,GAAG,OAAO,CAAC,YAAY,CAAC;IAIzD;;;;;;OAMG;IACH,MAAM,CAAC,YAAY,EAAE,YAAY,GAAG,OAAO,CAAC,YAAY,CAAC;IAIzD;;;;;;OAMG;IACH,aAAa,CACT,mBAAmB,EAAE,mBAAmB,GACzC,OAAO,CAAC,wBAAwB,CAAC;IAIpC;;;;OAIG;IACH,OAAO,CAAC,MAAM,CAAC,cAAc;CAoChC"}

package/dist/redirect-bridge/custom_auth/ICustomAuthPublicClientApplication.d.ts

@@ -0,0 +1,33 @@
+import { GetAccountResult } from "./get_account/auth_flow/result/GetAccountResult.js";
+import { SignInResult } from "./sign_in/auth_flow/result/SignInResult.js";
+import { SignUpResult } from "./sign_up/auth_flow/result/SignUpResult.js";
+import { AccountRetrievalInputs, ResetPasswordInputs, SignInInputs, SignUpInputs } from "./CustomAuthActionInputs.js";
+import { ResetPasswordStartResult } from "./reset_password/auth_flow/result/ResetPasswordStartResult.js";
+import { IPublicClientApplication } from "../app/IPublicClientApplication.js";
+export interface ICustomAuthPublicClientApplication extends IPublicClientApplication {
+    /**
+     * Gets the current account from the cache.
+     * @param {AccountRetrievalInputs} accountRetrievalInputs - Inputs for getting the current cached account
+     * @returns {GetAccountResult} The result of the operation
+     */
+    getCurrentAccount(accountRetrievalInputs?: AccountRetrievalInputs): GetAccountResult;
+    /**
+     * Initiates the sign-in flow.
+     * @param {SignInInputs} signInInputs - Inputs for the sign-in flow
+     * @returns {Promise<SignInResult>} A promise that resolves to SignInResult
+     */
+    signIn(signInInputs: SignInInputs): Promise<SignInResult>;
+    /**
+     * Initiates the sign-up flow.
+     * @param {SignUpInputs} signUpInputs - Inputs for the sign-up flow
+     * @returns {Promise<SignUpResult>} A promise that resolves to SignUpResult
+     */
+    signUp(signUpInputs: SignUpInputs): Promise<SignUpResult>;
+    /**
+     * Initiates the reset password flow.
+     * @param {ResetPasswordInputs} resetPasswordInputs - Inputs for the reset password flow
+     * @returns {Promise<ResetPasswordStartResult>} A promise that resolves to ResetPasswordStartResult
+     */
+    resetPassword(resetPasswordInputs: ResetPasswordInputs): Promise<ResetPasswordStartResult>;
+}
+//# sourceMappingURL=ICustomAuthPublicClientApplication.d.ts.map

package/dist/redirect-bridge/custom_auth/ICustomAuthPublicClientApplication.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ICustomAuthPublicClientApplication.d.ts","sourceRoot":"","sources":["../../../src/custom_auth/ICustomAuthPublicClientApplication.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,gBAAgB,EAAE,MAAM,oDAAoD,CAAC;AACtF,OAAO,EAAE,YAAY,EAAE,MAAM,4CAA4C,CAAC;AAC1E,OAAO,EAAE,YAAY,EAAE,MAAM,4CAA4C,CAAC;AAC1E,OAAO,EACH,sBAAsB,EACtB,mBAAmB,EACnB,YAAY,EACZ,YAAY,EACf,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAAE,wBAAwB,EAAE,MAAM,+DAA+D,CAAC;AACzG,OAAO,EAAE,wBAAwB,EAAE,MAAM,oCAAoC,CAAC;AAE9E,MAAM,WAAW,kCACb,SAAQ,wBAAwB;IAChC;;;;OAIG;IACH,iBAAiB,CACb,sBAAsB,CAAC,EAAE,sBAAsB,GAChD,gBAAgB,CAAC;IAEpB;;;;OAIG;IACH,MAAM,CAAC,YAAY,EAAE,YAAY,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC;IAE1D;;;;OAIG;IACH,MAAM,CAAC,YAAY,EAAE,YAAY,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC;IAE1D;;;;OAIG;IACH,aAAa,CACT,mBAAmB,EAAE,mBAAmB,GACzC,OAAO,CAAC,wBAAwB,CAAC,CAAC;CACxC"}

package/dist/redirect-bridge/custom_auth/UserAccountAttributes.d.ts

@@ -0,0 +1,12 @@
+export type UserAccountAttributes = Record<string, string> & {
+    city?: string;
+    country?: string;
+    displayName?: string;
+    givenName?: string;
+    jobTitle?: string;
+    postalCode?: string;
+    state?: string;
+    streetAddress?: string;
+    surname?: string;
+};
+//# sourceMappingURL=UserAccountAttributes.d.ts.map

package/dist/redirect-bridge/custom_auth/UserAccountAttributes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"UserAccountAttributes.d.ts","sourceRoot":"","sources":["../../../src/custom_auth/UserAccountAttributes.ts"],"names":[],"mappings":"AAKA,MAAM,MAAM,qBAAqB,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG;IACzD,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,OAAO,CAAC,EAAE,MAAM,CAAC;CACpB,CAAC"}

package/dist/redirect-bridge/custom_auth/configuration/CustomAuthConfiguration.d.ts

@@ -0,0 +1,14 @@
+import { BrowserConfiguration, Configuration } from "../../config/Configuration.js";
+export type CustomAuthOptions = {
+    challengeTypes?: Array<string>;
+    authApiProxyUrl: string;
+    customAuthApiQueryParams?: Record<string, string>;
+    capabilities?: Array<string>;
+};
+export type CustomAuthConfiguration = Configuration & {
+    customAuth: CustomAuthOptions;
+};
+export type CustomAuthBrowserConfiguration = BrowserConfiguration & {
+    customAuth: CustomAuthOptions;
+};
+//# sourceMappingURL=CustomAuthConfiguration.d.ts.map

package/dist/redirect-bridge/custom_auth/configuration/CustomAuthConfiguration.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"CustomAuthConfiguration.d.ts","sourceRoot":"","sources":["../../../../src/custom_auth/configuration/CustomAuthConfiguration.ts"],"names":[],"mappings":"AAKA,OAAO,EACH,oBAAoB,EACpB,aAAa,EAChB,MAAM,+BAA+B,CAAC;AAEvC,MAAM,MAAM,iBAAiB,GAAG;IAC5B,cAAc,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IAC/B,eAAe,EAAE,MAAM,CAAC;IACxB,wBAAwB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAClD,YAAY,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;CAChC,CAAC;AAEF,MAAM,MAAM,uBAAuB,GAAG,aAAa,GAAG;IAClD,UAAU,EAAE,iBAAiB,CAAC;CACjC,CAAC;AAEF,MAAM,MAAM,8BAA8B,GAAG,oBAAoB,GAAG;IAChE,UAAU,EAAE,iBAAiB,CAAC;CACjC,CAAC"}

package/dist/redirect-bridge/custom_auth/controller/CustomAuthStandardController.d.ts

@@ -0,0 +1,27 @@
+import { GetAccountResult } from "../get_account/auth_flow/result/GetAccountResult.js";
+import { SignInResult } from "../sign_in/auth_flow/result/SignInResult.js";
+import { SignUpResult } from "../sign_up/auth_flow/result/SignUpResult.js";
+import { AccountRetrievalInputs, SignInInputs, SignUpInputs, ResetPasswordInputs } from "../CustomAuthActionInputs.js";
+import { CustomAuthOperatingContext } from "../operating_context/CustomAuthOperatingContext.js";
+import { ICustomAuthStandardController } from "./ICustomAuthStandardController.js";
+import { ResetPasswordStartResult } from "../reset_password/auth_flow/result/ResetPasswordStartResult.js";
+import { ICustomAuthApiClient } from "../core/network_client/custom_auth_api/ICustomAuthApiClient.js";
+import { StandardController } from "../../controllers/StandardController.js";
+export declare class CustomAuthStandardController extends StandardController implements ICustomAuthStandardController {
+    private readonly signInClient;
+    private readonly signUpClient;
+    private readonly resetPasswordClient;
+    private readonly jitClient;
+    private readonly mfaClient;
+    private readonly cacheClient;
+    private readonly customAuthConfig;
+    private readonly authority;
+    constructor(operatingContext: CustomAuthOperatingContext, customAuthApiClient?: ICustomAuthApiClient);
+    getCurrentAccount(accountRetrievalInputs?: AccountRetrievalInputs): GetAccountResult;
+    signIn(signInInputs: SignInInputs): Promise<SignInResult>;
+    signUp(signUpInputs: SignUpInputs): Promise<SignUpResult>;
+    resetPassword(resetPasswordInputs: ResetPasswordInputs): Promise<ResetPasswordStartResult>;
+    private getCorrelationId;
+    private ensureUserNotSignedIn;
+}
+//# sourceMappingURL=CustomAuthStandardController.d.ts.map

package/dist/redirect-bridge/custom_auth/controller/CustomAuthStandardController.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"CustomAuthStandardController.d.ts","sourceRoot":"","sources":["../../../../src/custom_auth/controller/CustomAuthStandardController.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,gBAAgB,EAAE,MAAM,qDAAqD,CAAC;AACvF,OAAO,EAAE,YAAY,EAAE,MAAM,6CAA6C,CAAC;AAC3E,OAAO,EAAE,YAAY,EAAE,MAAM,6CAA6C,CAAC;AAM3E,OAAO,EACH,sBAAsB,EACtB,YAAY,EACZ,YAAY,EACZ,mBAAmB,EAEtB,MAAM,8BAA8B,CAAC;AAEtC,OAAO,EAAE,0BAA0B,EAAE,MAAM,oDAAoD,CAAC;AAChG,OAAO,EAAE,6BAA6B,EAAE,MAAM,oCAAoC,CAAC;AAGnF,OAAO,EAAE,wBAAwB,EAAE,MAAM,gEAAgE,CAAC;AAgB1G,OAAO,EAAE,oBAAoB,EAAE,MAAM,gEAAgE,CAAC;AAmBtG,OAAO,EAAE,kBAAkB,EAAE,MAAM,yCAAyC,CAAC;AAK7E,qBAAa,4BACT,SAAQ,kBACR,YAAW,6BAA6B;IAExC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAe;IAC5C,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAe;IAC5C,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAsB;IAC1D,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAY;IACtC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAY;IACtC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAA8B;IAC1D,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAiC;IAClE,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAsB;gBAQ5C,gBAAgB,EAAE,0BAA0B,EAC5C,mBAAmB,CAAC,EAAE,oBAAoB;IA+D9C,iBAAiB,CACb,sBAAsB,CAAC,EAAE,sBAAsB,GAChD,gBAAgB;IAqCb,MAAM,CAAC,YAAY,EAAE,YAAY,GAAG,OAAO,CAAC,YAAY,CAAC;IAiOzD,MAAM,CAAC,YAAY,EAAE,YAAY,GAAG,OAAO,CAAC,YAAY,CAAC;IAkHzD,aAAa,CACf,mBAAmB,EAAE,mBAAmB,GACzC,OAAO,CAAC,wBAAwB,CAAC;IAsDpC,OAAO,CAAC,gBAAgB;IAQxB,OAAO,CAAC,qBAAqB;CAWhC"}

package/dist/redirect-bridge/custom_auth/controller/ICustomAuthStandardController.d.ts

@@ -0,0 +1,13 @@
+import { GetAccountResult } from "../get_account/auth_flow/result/GetAccountResult.js";
+import { SignInResult } from "../sign_in/auth_flow/result/SignInResult.js";
+import { SignUpResult } from "../sign_up/auth_flow/result/SignUpResult.js";
+import { AccountRetrievalInputs, ResetPasswordInputs, SignInInputs, SignUpInputs } from "../CustomAuthActionInputs.js";
+import { ResetPasswordStartResult } from "../reset_password/auth_flow/result/ResetPasswordStartResult.js";
+import { IController } from "../../controllers/IController.js";
+export interface ICustomAuthStandardController extends IController {
+    getCurrentAccount(accountRetrievalInputs?: AccountRetrievalInputs): GetAccountResult;
+    signIn(signInInputs: SignInInputs): Promise<SignInResult>;
+    signUp(signUpInputs: SignUpInputs): Promise<SignUpResult>;
+    resetPassword(resetPasswordInputs: ResetPasswordInputs): Promise<ResetPasswordStartResult>;
+}
+//# sourceMappingURL=ICustomAuthStandardController.d.ts.map

package/dist/redirect-bridge/custom_auth/controller/ICustomAuthStandardController.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ICustomAuthStandardController.d.ts","sourceRoot":"","sources":["../../../../src/custom_auth/controller/ICustomAuthStandardController.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,gBAAgB,EAAE,MAAM,qDAAqD,CAAC;AACvF,OAAO,EAAE,YAAY,EAAE,MAAM,6CAA6C,CAAC;AAC3E,OAAO,EAAE,YAAY,EAAE,MAAM,6CAA6C,CAAC;AAC3E,OAAO,EACH,sBAAsB,EACtB,mBAAmB,EACnB,YAAY,EACZ,YAAY,EACf,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAE,wBAAwB,EAAE,MAAM,gEAAgE,CAAC;AAC1G,OAAO,EAAE,WAAW,EAAE,MAAM,kCAAkC,CAAC;AAK/D,MAAM,WAAW,6BAA8B,SAAQ,WAAW;IAM9D,iBAAiB,CACb,sBAAsB,CAAC,EAAE,sBAAsB,GAChD,gBAAgB,CAAC;IAOpB,MAAM,CAAC,YAAY,EAAE,YAAY,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC;IAO1D,MAAM,CAAC,YAAY,EAAE,YAAY,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC;IAO1D,aAAa,CACT,mBAAmB,EAAE,mBAAmB,GACzC,OAAO,CAAC,wBAAwB,CAAC,CAAC;CACxC"}

package/dist/redirect-bridge/custom_auth/core/CustomAuthAuthority.d.ts

@@ -0,0 +1,29 @@
+import { Authority, INetworkModule, IPerformanceClient, Logger } from "@azure/msal-common/browser";
+import { BrowserConfiguration } from "../../config/Configuration.js";
+import { BrowserCacheManager } from "../../cache/BrowserCacheManager.js";
+/**
+ * Authority class which can be used to create an authority object for Custom Auth features.
+ */
+export declare class CustomAuthAuthority extends Authority {
+    private customAuthProxyDomain?;
+    /**
+     * Constructor for the Custom Auth Authority.
+     * @param authority - The authority URL for the authority.
+     * @param networkInterface - The network interface implementation to make requests.
+     * @param cacheManager - The cache manager.
+     * @param authorityOptions - The options for the authority.
+     * @param logger - The logger for the authority.
+     * @param customAuthProxyDomain - The custom auth proxy domain.
+     */
+    constructor(authority: string, config: BrowserConfiguration, networkInterface: INetworkModule, cacheManager: BrowserCacheManager, logger: Logger, performanceClient: IPerformanceClient, customAuthProxyDomain?: string | undefined);
+    /**
+     * Gets the custom auth endpoint.
+     * The open id configuration doesn't have the correct endpoint for the auth APIs.
+     * We need to generate the endpoint manually based on the authority URL.
+     * @returns The custom auth endpoint
+     */
+    getCustomAuthApiDomain(): string;
+    getPreferredCache(): string;
+    get tokenEndpoint(): string;
+}
+//# sourceMappingURL=CustomAuthAuthority.d.ts.map

package/dist/redirect-bridge/custom_auth/core/CustomAuthAuthority.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"CustomAuthAuthority.d.ts","sourceRoot":"","sources":["../../../../src/custom_auth/core/CustomAuthAuthority.ts"],"names":[],"mappings":"AAKA,OAAO,EACH,SAAS,EAET,cAAc,EACd,kBAAkB,EAClB,MAAM,EACT,MAAM,4BAA4B,CAAC;AAGpC,OAAO,EAAE,oBAAoB,EAAE,MAAM,+BAA+B,CAAC;AACrE,OAAO,EAAE,mBAAmB,EAAE,MAAM,oCAAoC,CAAC;AAEzE;;GAEG;AACH,qBAAa,mBAAoB,SAAQ,SAAS;IAiB1C,OAAO,CAAC,qBAAqB,CAAC;IAhBlC;;;;;;;;OAQG;gBAEC,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,oBAAoB,EAC5B,gBAAgB,EAAE,cAAc,EAChC,YAAY,EAAE,mBAAmB,EACjC,MAAM,EAAE,MAAM,EACd,iBAAiB,EAAE,kBAAkB,EAC7B,qBAAqB,CAAC,oBAAQ;IAqD1C;;;;;OAKG;IACH,sBAAsB,IAAI,MAAM;IAUvB,iBAAiB,IAAI,MAAM;IAIpC,IAAa,aAAa,IAAI,MAAM,CAOnC;CACJ"}

package/dist/redirect-bridge/custom_auth/core/auth_flow/AuthFlowErrorBase.d.ts

@@ -0,0 +1,40 @@
+import { CustomAuthError } from "../error/CustomAuthError.js";
+/**
+ * Base class for all auth flow errors.
+ */
+export declare abstract class AuthFlowErrorBase {
+    errorData: CustomAuthError;
+    constructor(errorData: CustomAuthError);
+    protected isUserNotFoundError(): boolean;
+    protected isUserInvalidError(): boolean;
+    protected isUnsupportedChallengeTypeError(): boolean;
+    protected isPasswordIncorrectError(): boolean;
+    protected isInvalidCodeError(): boolean;
+    protected isRedirectError(): boolean;
+    protected isInvalidNewPasswordError(): boolean;
+    protected isUserAlreadyExistsError(): boolean;
+    protected isAttributeRequiredError(): boolean;
+    protected isAttributeValidationFailedError(): boolean;
+    protected isNoCachedAccountFoundError(): boolean;
+    protected isTokenExpiredError(): boolean;
+    /**
+     * @todo verify the password change required error can be detected once the MFA is in place.
+     * This error will be raised during signin and refresh tokens when calling /token endpoint.
+     */
+    protected isPasswordResetRequiredError(): boolean;
+    protected isInvalidInputError(): boolean;
+    protected isVerificationContactBlockedError(): boolean;
+}
+export declare abstract class AuthActionErrorBase extends AuthFlowErrorBase {
+    /**
+     * Checks if the error is due to the expired continuation token.
+     * @returns {boolean} True if the error is due to the expired continuation token, false otherwise.
+     */
+    isTokenExpired(): boolean;
+    /**
+     * Check if client app supports the challenge type configured in Entra.
+     * @returns {boolean} True if client app doesn't support the challenge type configured in Entra, "loginPopup" function is required to continue the operation.
+     */
+    isRedirectRequired(): boolean;
+}
+//# sourceMappingURL=AuthFlowErrorBase.d.ts.map

package/dist/redirect-bridge/custom_auth/core/auth_flow/AuthFlowErrorBase.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"AuthFlowErrorBase.d.ts","sourceRoot":"","sources":["../../../../../src/custom_auth/core/auth_flow/AuthFlowErrorBase.ts"],"names":[],"mappings":"AASA,OAAO,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAC;AAK9D;;GAEG;AACH,8BAAsB,iBAAiB;IAChB,SAAS,EAAE,eAAe;gBAA1B,SAAS,EAAE,eAAe;IAE7C,SAAS,CAAC,mBAAmB,IAAI,OAAO;IAIxC,SAAS,CAAC,kBAAkB,IAAI,OAAO;IAYvC,SAAS,CAAC,+BAA+B,IAAI,OAAO;IAYpD,SAAS,CAAC,wBAAwB,IAAI,OAAO;IAa7C,SAAS,CAAC,kBAAkB,IAAI,OAAO;IAavC,SAAS,CAAC,eAAe,IAAI,OAAO;IAIpC,SAAS,CAAC,yBAAyB,IAAI,OAAO;IAiB9C,SAAS,CAAC,wBAAwB,IAAI,OAAO;IAO7C,SAAS,CAAC,wBAAwB,IAAI,OAAO;IAO7C,SAAS,CAAC,gCAAgC,IAAI,OAAO;IAYrD,SAAS,CAAC,2BAA2B,IAAI,OAAO;IAIhD,SAAS,CAAC,mBAAmB,IAAI,OAAO;IAOxC;;;OAGG;IACH,SAAS,CAAC,4BAA4B,IAAI,OAAO;IAQjD,SAAS,CAAC,mBAAmB,IAAI,OAAO;IAQxC,SAAS,CAAC,iCAAiC,IAAI,OAAO;CAQzD;AAED,8BAAsB,mBAAoB,SAAQ,iBAAiB;IAC/D;;;OAGG;IACH,cAAc,IAAI,OAAO;IAIzB;;;OAGG;IACH,kBAAkB,IAAI,OAAO;CAGhC"}

package/dist/redirect-bridge/custom_auth/core/auth_flow/AuthFlowResultBase.d.ts

@@ -0,0 +1,11 @@
+import { CustomAuthError } from "../error/CustomAuthError.js";
+import { AuthFlowErrorBase } from "./AuthFlowErrorBase.js";
+import { AuthFlowStateBase } from "./AuthFlowState.js";
+export declare abstract class AuthFlowResultBase<TState extends AuthFlowStateBase, TError extends AuthFlowErrorBase, TData = void> {
+    state: TState;
+    data?: TData | undefined;
+    constructor(state: TState, data?: TData | undefined);
+    error?: TError;
+    protected static createErrorData(error: unknown): CustomAuthError;
+}
+//# sourceMappingURL=AuthFlowResultBase.d.ts.map

package/dist/redirect-bridge/custom_auth/core/auth_flow/AuthFlowResultBase.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"AuthFlowResultBase.d.ts","sourceRoot":"","sources":["../../../../../src/custom_auth/core/auth_flow/AuthFlowResultBase.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAC;AAG9D,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAC3D,OAAO,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAQvD,8BAAsB,kBAAkB,CACpC,MAAM,SAAS,iBAAiB,EAChC,MAAM,SAAS,iBAAiB,EAChC,KAAK,GAAG,IAAI;IAOO,KAAK,EAAE,MAAM;IAAS,IAAI,CAAC;gBAA3B,KAAK,EAAE,MAAM,EAAS,IAAI,CAAC,mBAAO;IAKrD,KAAK,CAAC,EAAE,MAAM,CAAC;IAOf,SAAS,CAAC,MAAM,CAAC,eAAe,CAAC,KAAK,EAAE,OAAO,GAAG,eAAe;CA4BpE"}

package/dist/redirect-bridge/custom_auth/core/auth_flow/AuthFlowState.d.ts

@@ -0,0 +1,31 @@
+import { CustomAuthBrowserConfiguration } from "../../configuration/CustomAuthConfiguration.js";
+import { Logger } from "@azure/msal-common/browser";
+export interface AuthFlowActionRequiredStateParameters {
+    correlationId: string;
+    logger: Logger;
+    config: CustomAuthBrowserConfiguration;
+    continuationToken?: string;
+}
+/**
+ * Base class for the state of an authentication flow.
+ */
+export declare abstract class AuthFlowStateBase {
+    /**
+     * The type of the state.
+     */
+    abstract stateType: string;
+}
+/**
+ * Base class for the action requried state in an authentication flow.
+ */
+export declare abstract class AuthFlowActionRequiredStateBase<TParameter extends AuthFlowActionRequiredStateParameters> extends AuthFlowStateBase {
+    protected readonly stateParameters: TParameter;
+    /**
+     * Creates a new instance of AuthFlowActionRequiredStateBase.
+     * @param stateParameters The parameters for the auth state.
+     */
+    constructor(stateParameters: TParameter);
+    protected ensureCodeIsValid(code: string, codeLength: number): void;
+    protected ensurePasswordIsNotEmpty(password: string): void;
+}
+//# sourceMappingURL=AuthFlowState.d.ts.map