@azure/msal-browser 4.28.0 → 4.28.2

package/lib/types/cache/TokenCache.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"TokenCache.d.ts","sourceRoot":"","sources":["../../../src/cache/TokenCache.ts"],"names":[],"mappings":"AAKA,OAAO,EAEH,OAAO,EAEP,MAAM,EAIN,qBAAqB,EASrB,kBAAkB,EAGrB,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAE,oBAAoB,EAAE,MAAM,4BAA4B,CAAC;AAClE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AACjE,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAC/D,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAKpD,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,qCAAqC,CAAC;AAKhF,MAAM,MAAM,gBAAgB,GAAG;IAC3B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC9B,CAAC;AAEF;;GAEG;AACH,qBAAa,UAAW,YAAW,WAAW;IAEnC,oBAAoB,EAAE,OAAO,CAAC;IAErC,SAAS,CAAC,MAAM,EAAE,oBAAoB,CAAC;IAEvC,OAAO,CAAC,OAAO,CAAsB;IAErC,OAAO,CAAC,MAAM,CAAS;IAEvB,OAAO,CAAC,SAAS,CAAU;IAE3B,OAAO,CAAC,iBAAiB,CAAqB;gBAG1C,aAAa,EAAE,oBAAoB,EACnC,OAAO,EAAE,mBAAmB,EAC5B,MAAM,EAAE,MAAM,EACd,SAAS,EAAE,OAAO,EAClB,iBAAiB,EAAE,kBAAkB;IAYzC;;;;;;OAMG;IACG,kBAAkB,CACpB,OAAO,EAAE,aAAa,EACtB,QAAQ,EAAE,qBAAqB,EAC/B,OAAO,EAAE,gBAAgB,GAC1B,OAAO,CAAC,oBAAoB,CAAC;IA8HhC;;;;;;;;OAQG;YACW,WAAW;IA+DzB;;;;;;;OAOG;YACW,WAAW;IA8BzB;;;;;;;;OAQG;YACW,eAAe;IA+D7B;;;;;;;OAOG;YACW,gBAAgB;IAiC9B;;;;;;;OAOG;IACH,OAAO,CAAC,4BAA4B;CAiDvC"}
+{"version":3,"file":"TokenCache.d.ts","sourceRoot":"","sources":["../../../src/cache/TokenCache.ts"],"names":[],"mappings":"AAKA,OAAO,EAEH,OAAO,EAEP,MAAM,EAKN,qBAAqB,EASrB,kBAAkB,EAGrB,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAE,oBAAoB,EAAE,MAAM,4BAA4B,CAAC;AAClE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AACjE,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAC/D,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAKpD,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,qCAAqC,CAAC;AAKhF,MAAM,MAAM,gBAAgB,GAAG;IAC3B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC9B,CAAC;AAEF;;GAEG;AACH,qBAAa,UAAW,YAAW,WAAW;IAEnC,oBAAoB,EAAE,OAAO,CAAC;IAErC,SAAS,CAAC,MAAM,EAAE,oBAAoB,CAAC;IAEvC,OAAO,CAAC,OAAO,CAAsB;IAErC,OAAO,CAAC,MAAM,CAAS;IAEvB,OAAO,CAAC,SAAS,CAAU;IAE3B,OAAO,CAAC,iBAAiB,CAAqB;gBAG1C,aAAa,EAAE,oBAAoB,EACnC,OAAO,EAAE,mBAAmB,EAC5B,MAAM,EAAE,MAAM,EACd,SAAS,EAAE,OAAO,EAClB,iBAAiB,EAAE,kBAAkB;IAYzC;;;;;;OAMG;IACG,kBAAkB,CACpB,OAAO,EAAE,aAAa,EACtB,QAAQ,EAAE,qBAAqB,EAC/B,OAAO,EAAE,gBAAgB,GAC1B,OAAO,CAAC,oBAAoB,CAAC;IA+HhC;;;;;;;;OAQG;YACW,WAAW;IA+DzB;;;;;;;OAOG;YACW,WAAW;IA8BzB;;;;;;;;OAQG;YACW,eAAe;IA+D7B;;;;;;;OAOG;YACW,gBAAgB;IA2C9B;;;;;;;OAOG;IACH,OAAO,CAAC,4BAA4B;CAiDvC"}

package/lib/types/custom_auth/CustomAuthConstants.d.ts

@@ -19,7 +19,7 @@ export declare const HttpHeaderKeys: {
 };
 export declare const DefaultPackageInfo: {
     readonly SKU: "msal.browser";
-    readonly VERSION: "4.28.0";
+    readonly VERSION: "4.28.2";
     readonly OS: "";
     readonly CPU: "";
 };

package/lib/types/packageMetadata.d.ts

@@ -1,3 +1,3 @@
 export declare const name = "@azure/msal-browser";
-export declare const version = "4.28.0";
+export declare const version = "4.28.2";
 //# sourceMappingURL=packageMetadata.d.ts.map

package/lib/types/protocol/Authorize.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"Authorize.d.ts","sourceRoot":"","sources":["../../../src/protocol/Authorize.ts"],"names":[],"mappings":"AAKA,OAAO,EAEH,SAAS,EAGT,6BAA6B,EAG7B,kBAAkB,EAClB,MAAM,EAQN,uBAAuB,EAGvB,iBAAiB,EAKpB,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAE,oBAAoB,EAAE,MAAM,4BAA4B,CAAC;AAClE,OAAO,EAAE,KAAK,EAAoB,MAAM,8BAA8B,CAAC;AAOvE,OAAO,EAAE,oBAAoB,EAAE,MAAM,qCAAqC,CAAC;AAE3E,OAAO,EAAE,mBAAmB,EAAE,MAAM,iCAAiC,CAAC;AAEtE,OAAO,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AAExD,OAAO,EAAE,oBAAoB,EAAE,MAAM,gDAAgD,CAAC;AAiFtF;;;;;;;;GAQG;AACH,wBAAsB,qBAAqB,CACvC,MAAM,EAAE,oBAAoB,EAC5B,SAAS,EAAE,SAAS,EACpB,OAAO,EAAE,6BAA6B,EACtC,MAAM,EAAE,MAAM,EACd,iBAAiB,EAAE,kBAAkB,GACtC,OAAO,CAAC,MAAM,CAAC,CAiCjB;AAED;;GAEG;AACH,wBAAsB,UAAU,CAC5B,KAAK,EAAE,QAAQ,EACf,MAAM,EAAE,oBAAoB,EAC5B,SAAS,EAAE,SAAS,EACpB,OAAO,EAAE,6BAA6B,EACtC,MAAM,EAAE,MAAM,EACd,iBAAiB,EAAE,kBAAkB,GACtC,OAAO,CAAC,eAAe,CAAC,CAuC1B;AAED;;GAEG;AACH,wBAAsB,WAAW,CAC7B,KAAK,EAAE,QAAQ,EACf,MAAM,EAAE,oBAAoB,EAC5B,SAAS,EAAE,SAAS,EACpB,OAAO,EAAE,6BAA6B,EACtC,MAAM,EAAE,MAAM,EACd,iBAAiB,EAAE,kBAAkB,GACtC,OAAO,CAAC,eAAe,CAAC,CAoC1B;AA+BD;;;;;;;;;;;;;GAaG;AACH,wBAAsB,4BAA4B,CAC9C,OAAO,EAAE,6BAA6B,EACtC,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,KAAK,EACZ,MAAM,EAAE,oBAAoB,EAC5B,cAAc,EAAE,mBAAmB,EACnC,aAAa,EAAE,mBAAmB,EAClC,YAAY,EAAE,YAAY,EAC1B,MAAM,EAAE,MAAM,EACd,iBAAiB,EAAE,kBAAkB,EACrC,oBAAoB,CAAC,EAAE,oBAAoB,GAC5C,OAAO,CAAC,oBAAoB,CAAC,CAsC/B;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,kBAAkB,CACpC,OAAO,EAAE,6BAA6B,EACtC,QAAQ,EAAE,iBAAiB,EAC3B,YAAY,EAAE,MAAM,EACpB,KAAK,EAAE,KAAK,EACZ,MAAM,EAAE,oBAAoB,EAC5B,UAAU,EAAE,uBAAuB,EACnC,cAAc,EAAE,mBAAmB,EACnC,aAAa,EAAE,mBAAmB,EAClC,YAAY,EAAE,YAAY,EAC1B,MAAM,EAAE,MAAM,EACd,iBAAiB,EAAE,kBAAkB,EACrC,oBAAoB,CAAC,EAAE,oBAAoB,GAC5C,OAAO,CAAC,oBAAoB,CAAC,CAkD/B;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAsB,iBAAiB,CACnC,OAAO,EAAE,6BAA6B,EACtC,QAAQ,EAAE,iBAAiB,EAC3B,KAAK,EAAE,KAAK,EACZ,MAAM,EAAE,oBAAoB,EAC5B,SAAS,EAAE,SAAS,EACpB,cAAc,EAAE,mBAAmB,EACnC,aAAa,EAAE,mBAAmB,EAClC,YAAY,EAAE,YAAY,EAC1B,MAAM,EAAE,MAAM,EACd,iBAAiB,EAAE,kBAAkB,EACrC,oBAAoB,CAAC,EAAE,oBAAoB,GAC5C,OAAO,CAAC,oBAAoB,CAAC,CA6F/B"}
+{"version":3,"file":"Authorize.d.ts","sourceRoot":"","sources":["../../../src/protocol/Authorize.ts"],"names":[],"mappings":"AAKA,OAAO,EAEH,SAAS,EAGT,6BAA6B,EAG7B,kBAAkB,EAClB,MAAM,EAQN,uBAAuB,EAGvB,iBAAiB,EAKpB,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAE,oBAAoB,EAAE,MAAM,4BAA4B,CAAC;AAClE,OAAO,EAAE,KAAK,EAAoB,MAAM,8BAA8B,CAAC;AAOvE,OAAO,EAAE,oBAAoB,EAAE,MAAM,qCAAqC,CAAC;AAE3E,OAAO,EAAE,mBAAmB,EAAE,MAAM,iCAAiC,CAAC;AAEtE,OAAO,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AAExD,OAAO,EAAE,oBAAoB,EAAE,MAAM,gDAAgD,CAAC;AAiFtF;;;;;;;;GAQG;AACH,wBAAsB,qBAAqB,CACvC,MAAM,EAAE,oBAAoB,EAC5B,SAAS,EAAE,SAAS,EACpB,OAAO,EAAE,6BAA6B,EACtC,MAAM,EAAE,MAAM,EACd,iBAAiB,EAAE,kBAAkB,GACtC,OAAO,CAAC,MAAM,CAAC,CAiCjB;AAED;;GAEG;AACH,wBAAsB,UAAU,CAC5B,KAAK,EAAE,QAAQ,EACf,MAAM,EAAE,oBAAoB,EAC5B,SAAS,EAAE,SAAS,EACpB,OAAO,EAAE,6BAA6B,EACtC,MAAM,EAAE,MAAM,EACd,iBAAiB,EAAE,kBAAkB,GACtC,OAAO,CAAC,eAAe,CAAC,CA8C1B;AAED;;GAEG;AACH,wBAAsB,WAAW,CAC7B,KAAK,EAAE,QAAQ,EACf,MAAM,EAAE,oBAAoB,EAC5B,SAAS,EAAE,SAAS,EACpB,OAAO,EAAE,6BAA6B,EACtC,MAAM,EAAE,MAAM,EACd,iBAAiB,EAAE,kBAAkB,GACtC,OAAO,CAAC,eAAe,CAAC,CA2C1B;AA+BD;;;;;;;;;;;;;GAaG;AACH,wBAAsB,4BAA4B,CAC9C,OAAO,EAAE,6BAA6B,EACtC,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,KAAK,EACZ,MAAM,EAAE,oBAAoB,EAC5B,cAAc,EAAE,mBAAmB,EACnC,aAAa,EAAE,mBAAmB,EAClC,YAAY,EAAE,YAAY,EAC1B,MAAM,EAAE,MAAM,EACd,iBAAiB,EAAE,kBAAkB,EACrC,oBAAoB,CAAC,EAAE,oBAAoB,GAC5C,OAAO,CAAC,oBAAoB,CAAC,CAsC/B;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,kBAAkB,CACpC,OAAO,EAAE,6BAA6B,EACtC,QAAQ,EAAE,iBAAiB,EAC3B,YAAY,EAAE,MAAM,EACpB,KAAK,EAAE,KAAK,EACZ,MAAM,EAAE,oBAAoB,EAC5B,UAAU,EAAE,uBAAuB,EACnC,cAAc,EAAE,mBAAmB,EACnC,aAAa,EAAE,mBAAmB,EAClC,YAAY,EAAE,YAAY,EAC1B,MAAM,EAAE,MAAM,EACd,iBAAiB,EAAE,kBAAkB,EACrC,oBAAoB,CAAC,EAAE,oBAAoB,GAC5C,OAAO,CAAC,oBAAoB,CAAC,CAkD/B;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAsB,iBAAiB,CACnC,OAAO,EAAE,6BAA6B,EACtC,QAAQ,EAAE,iBAAiB,EAC3B,KAAK,EAAE,KAAK,EACZ,MAAM,EAAE,oBAAoB,EAC5B,SAAS,EAAE,SAAS,EACpB,cAAc,EAAE,mBAAmB,EACnC,aAAa,EAAE,mBAAmB,EAClC,YAAY,EAAE,YAAY,EAC1B,MAAM,EAAE,MAAM,EACd,iBAAiB,EAAE,kBAAkB,EACrC,oBAAoB,CAAC,EAAE,oBAAoB,GAC5C,OAAO,CAAC,oBAAoB,CAAC,CA6F/B"}

package/package.json

@@ -10,7 +10,7 @@
     "type": "git",
     "url": "https://github.com/AzureAD/microsoft-authentication-library-for-js.git"
   },
-  "version": "4.28.0",
+  "version": "4.28.2",
   "description": "Microsoft Authentication Library for js",
   "keywords": [
     "implicit",
@@ -114,6 +114,6 @@
     "typescript": "^4.9.5"
   },
   "dependencies": {
-    "@azure/msal-common": "15.14.0"
+    "@azure/msal-common": "15.14.2"
   }
 }

package/src/cache/BrowserCacheManager.ts

@@ -2238,8 +2238,8 @@ export class BrowserCacheManager extends CacheManager {
             | PopupRequest
     ): Promise<void> {
         const idTokenEntity = CacheHelpers.createIdTokenEntity(
-            result.account?.homeAccountId,
-            result.account?.environment,
+            result.account.homeAccountId,
+            result.account.environment,
             result.idToken,
             this.clientId,
             result.tenantId
@@ -2259,7 +2259,7 @@ export class BrowserCacheManager extends CacheManager {
          */
 
         const accessTokenEntity = CacheHelpers.createAccessTokenEntity(
-            result.account?.homeAccountId,
+            result.account.homeAccountId,
             result.account.environment,
             result.accessToken,
             this.clientId,

package/src/cache/TokenCache.ts

@@ -10,6 +10,7 @@ import {
     Logger,
     ScopeSet,
     Authority,
+    AuthorityFactory,
     AuthorityOptions,
     ExternalTokenResponse,
     AccountEntity,
@@ -117,19 +118,20 @@ export class TokenCache implements ITokenCache {
                 skipAuthorityMetadataCache:
                     this.config.auth.skipAuthorityMetadataCache,
             };
-            const authority = request.authority
-                ? new Authority(
-                      Authority.generateAuthority(
-                          request.authority,
-                          request.azureCloudOptions
-                      ),
-                      this.config.system.networkClient,
-                      this.storage,
-                      authorityOptions,
-                      this.logger,
-                      request.correlationId || BrowserCrypto.createNewGuid()
-                  )
-                : undefined;
+            const authorityString =
+                request.authority || this.config.auth.authority;
+            const authority = await AuthorityFactory.createDiscoveredInstance(
+                Authority.generateAuthority(
+                    authorityString,
+                    request.azureCloudOptions
+                ),
+                this.config.system.networkClient,
+                this.storage,
+                authorityOptions,
+                this.logger,
+                correlationId,
+                this.performanceClient
+            );
 
             const cacheRecordAccount: AccountEntity = await invokeAsync(
                 this.loadAccount.bind(this),
@@ -141,8 +143,8 @@ export class TokenCache implements ITokenCache {
                 request,
                 options.clientInfo || response.client_info || "",
                 correlationId,
-                idTokenClaims,
-                authority
+                authority,
+                idTokenClaims
             );
 
             const idToken = await invokeAsync(
@@ -205,8 +207,8 @@ export class TokenCache implements ITokenCache {
                     accessToken,
                     refreshToken,
                 },
-                idTokenClaims,
-                authority
+                authority,
+                idTokenClaims
             );
         } catch (error) {
             rootMeasurement.end({ success: false }, error);
@@ -227,8 +229,8 @@ export class TokenCache implements ITokenCache {
         request: SilentRequest,
         clientInfo: string,
         correlationId: string,
-        idTokenClaims?: TokenClaims,
-        authority?: Authority
+        authority: Authority,
+        idTokenClaims?: TokenClaims
     ): Promise<AccountEntity> {
         this.logger.verbose("TokenCache - loading account");
 
@@ -243,9 +245,9 @@ export class TokenCache implements ITokenCache {
                 ApiId.loadExternalTokens
             );
             return accountEntity;
-        } else if (!authority || (!clientInfo && !idTokenClaims)) {
+        } else if (!clientInfo && !idTokenClaims) {
             this.logger.error(
-                "TokenCache - if an account is not provided on the request, authority and either clientInfo or idToken must be provided instead."
+                "TokenCache - if an account is not provided on the request, clientInfo or idToken must be provided instead."
             );
             throw createBrowserAuthError(
                 BrowserAuthErrorCodes.unableToLoadToken
@@ -270,7 +272,7 @@ export class TokenCache implements ITokenCache {
             correlationId,
             idTokenClaims,
             clientInfo,
-            authority.hostnameAndPort,
+            authority.getPreferredCache(),
             claimsTenantId,
             undefined, // authCodePayload
             undefined, // nativeAccountId
@@ -418,6 +420,16 @@ export class TokenCache implements ITokenCache {
             return null;
         }
 
+        const expiresOn = response.refresh_token_expires_in
+            ? response.refresh_token_expires_in + TimeUtils.nowSeconds()
+            : undefined;
+        this.performanceClient.addFields(
+            {
+                extRtExpiresOnSeconds: expiresOn,
+            },
+            correlationId
+        );
+
         this.logger.verbose("TokenCache - loading refresh token");
         const refreshTokenEntity = CacheHelpers.createRefreshTokenEntity(
             homeAccountId,
@@ -426,7 +438,7 @@ export class TokenCache implements ITokenCache {
             this.config.auth.clientId,
             response.foci,
             undefined, // userAssertionHash
-            response.refresh_token_expires_in
+            expiresOn
         );
 
         await this.storage.setRefreshTokenCredential(
@@ -448,8 +460,8 @@ export class TokenCache implements ITokenCache {
     private generateAuthenticationResult(
         request: SilentRequest,
         cacheRecord: CacheRecord & { account: AccountEntity },
-        idTokenClaims?: TokenClaims,
-        authority?: Authority
+        authority: Authority,
+        idTokenClaims?: TokenClaims
     ): AuthenticationResult {
         let accessToken: string = "";
         let responseScopes: Array<string> = [];

package/src/packageMetadata.ts

@@ -1,3 +1,3 @@
 /* eslint-disable header/header */
 export const name = "@azure/msal-browser";
-export const version = "4.28.0";
+export const version = "4.28.2";

package/src/protocol/Authorize.ts

@@ -215,6 +215,13 @@ export async function getEARForm(
         queryParams,
         request.extraQueryParameters || {}
     );
+
+    // Add correlationId to query params so gateway can propagate it to IDPs
+    RequestParameterBuilder.addCorrelationId(
+        queryParams,
+        request.correlationId
+    );
+
     const url = AuthorizeProtocol.getAuthorizeUrl(
         authority,
         queryParams,
@@ -258,11 +265,18 @@ export async function getCodeForm(
     );
 
     const queryParams = new Map<string, string>();
+
     RequestParameterBuilder.addExtraQueryParameters(
         queryParams,
         request.extraQueryParameters || {}
     );
 
+    // Add correlationId to query params so gateway can propagate it to IDPs
+    RequestParameterBuilder.addCorrelationId(
+        queryParams,
+        request.correlationId
+    );
+
     const url = AuthorizeProtocol.getAuthorizeUrl(
         authority,
         queryParams,