@azure/msal-browser 4.8.0 → 4.9.0

package/src/protocol/Authorize.ts

@@ -17,12 +17,33 @@ import {
     PopTokenGenerator,
     ProtocolMode,
     RequestParameterBuilder,
+    OAuthResponseType,
     Constants,
+    CommonAuthorizationCodeRequest,
+    AuthorizationCodeClient,
+    ProtocolUtils,
+    ThrottlingUtils,
+    AuthorizeResponse,
+    ResponseHandler,
+    TimeUtils,
+    AuthorizationCodePayload,
+    ServerAuthorizationTokenResponse,
 } from "@azure/msal-common/browser";
 import { BrowserConfiguration } from "../config/Configuration.js";
-import { BrowserConstants } from "../utils/BrowserConstants.js";
+import { ApiId, BrowserConstants } from "../utils/BrowserConstants.js";
 import { version } from "../packageMetadata.js";
 import { CryptoOps } from "../crypto/CryptoOps.js";
+import {
+    BrowserAuthErrorCodes,
+    createBrowserAuthError,
+} from "../error/BrowserAuthError.js";
+import { AuthenticationResult } from "../response/AuthenticationResult.js";
+import { InteractionHandler } from "../interaction_handler/InteractionHandler.js";
+import { BrowserCacheManager } from "../cache/BrowserCacheManager.js";
+import { NativeInteractionClient } from "../interaction_client/NativeInteractionClient.js";
+import { NativeMessageHandler } from "../broker/nativeBroker/NativeMessageHandler.js";
+import { EventHandler } from "../event/EventHandler.js";
+import { decryptEarResponse } from "../crypto/BrowserCrypto.js";
 
 /**
  * Returns map of parameters that are applicable to all calls to /authorize whether using PKCE or EAR
@@ -124,7 +145,7 @@ export async function getAuthCodeRequestUrl(
         performanceClient,
         request.correlationId
     )(config, authority, request, logger, performanceClient);
-    RequestParameterBuilder.addResponseTypeCode(parameters);
+    RequestParameterBuilder.addResponseType(parameters, OAuthResponseType.CODE);
 
     RequestParameterBuilder.addCodeChallengeParams(
         parameters,
@@ -132,5 +153,338 @@ export async function getAuthCodeRequestUrl(
         Constants.S256_CODE_CHALLENGE_METHOD
     );
 
+    RequestParameterBuilder.addExtraQueryParameters(
+        parameters,
+        request.extraQueryParameters || {}
+    );
+
     return AuthorizeProtocol.getAuthorizeUrl(authority, parameters);
 }
+
+/**
+ * Gets the form that will be posted to /authorize with request parameters when using EAR
+ */
+export async function getEARForm(
+    frame: Document,
+    config: BrowserConfiguration,
+    authority: Authority,
+    request: CommonAuthorizationUrlRequest,
+    logger: Logger,
+    performanceClient: IPerformanceClient
+): Promise<HTMLFormElement> {
+    if (!request.earJwk) {
+        throw createBrowserAuthError(BrowserAuthErrorCodes.earJwkEmpty);
+    }
+
+    const parameters = await getStandardParameters(
+        config,
+        authority,
+        request,
+        logger,
+        performanceClient
+    );
+
+    RequestParameterBuilder.addResponseType(
+        parameters,
+        OAuthResponseType.IDTOKEN_TOKEN_REFRESHTOKEN
+    );
+    RequestParameterBuilder.addEARParameters(parameters, request.earJwk);
+
+    const queryParams = new Map<string, string>();
+    RequestParameterBuilder.addExtraQueryParameters(
+        queryParams,
+        request.extraQueryParameters || {}
+    );
+    const url = AuthorizeProtocol.getAuthorizeUrl(authority, queryParams);
+
+    return createForm(frame, url, parameters);
+}
+
+/**
+ * Creates form element in the provided document with auth parameters in the post body
+ * @param frame
+ * @param authorizeUrl
+ * @param parameters
+ * @returns
+ */
+function createForm(
+    frame: Document,
+    authorizeUrl: string,
+    parameters: Map<string, string>
+): HTMLFormElement {
+    const form = frame.createElement("form");
+    form.method = "post";
+    form.action = authorizeUrl;
+
+    parameters.forEach((value: string, key: string) => {
+        const param = frame.createElement("input");
+        param.hidden = true;
+        param.name = key;
+        param.value = value;
+
+        form.appendChild(param);
+    });
+
+    frame.body.appendChild(form);
+    return form;
+}
+
+/**
+ * Response handler when server returns accountId on the /authorize request
+ * @param request
+ * @param accountId
+ * @param apiId
+ * @param config
+ * @param browserStorage
+ * @param nativeStorage
+ * @param eventHandler
+ * @param logger
+ * @param performanceClient
+ * @param nativeMessageHandler
+ * @returns
+ */
+export async function handleResponsePlatformBroker(
+    request: CommonAuthorizationUrlRequest,
+    accountId: string,
+    apiId: ApiId,
+    config: BrowserConfiguration,
+    browserStorage: BrowserCacheManager,
+    nativeStorage: BrowserCacheManager,
+    eventHandler: EventHandler,
+    logger: Logger,
+    performanceClient: IPerformanceClient,
+    nativeMessageHandler?: NativeMessageHandler
+): Promise<AuthenticationResult> {
+    if (!nativeMessageHandler) {
+        throw createBrowserAuthError(
+            BrowserAuthErrorCodes.nativeConnectionNotEstablished
+        );
+    }
+    const browserCrypto = new CryptoOps(logger, performanceClient);
+    const nativeInteractionClient = new NativeInteractionClient(
+        config,
+        browserStorage,
+        browserCrypto,
+        logger,
+        eventHandler,
+        config.system.navigationClient,
+        apiId,
+        performanceClient,
+        nativeMessageHandler,
+        accountId,
+        nativeStorage,
+        request.correlationId
+    );
+    const { userRequestState } = ProtocolUtils.parseRequestState(
+        browserCrypto,
+        request.state
+    );
+    return invokeAsync(
+        nativeInteractionClient.acquireToken.bind(nativeInteractionClient),
+        PerformanceEvents.NativeInteractionClientAcquireToken,
+        logger,
+        performanceClient,
+        request.correlationId
+    )({
+        ...request,
+        state: userRequestState,
+        prompt: undefined, // Server should handle the prompt, ideally native broker can do this part silently
+    });
+}
+
+/**
+ * Response handler when server returns code on the /authorize request
+ * @param request
+ * @param response
+ * @param codeVerifier
+ * @param authClient
+ * @param browserStorage
+ * @param logger
+ * @param performanceClient
+ * @returns
+ */
+export async function handleResponseCode(
+    request: CommonAuthorizationUrlRequest,
+    response: AuthorizeResponse,
+    codeVerifier: string,
+    apiId: ApiId,
+    config: BrowserConfiguration,
+    authClient: AuthorizationCodeClient,
+    browserStorage: BrowserCacheManager,
+    nativeStorage: BrowserCacheManager,
+    eventHandler: EventHandler,
+    logger: Logger,
+    performanceClient: IPerformanceClient,
+    nativeMessageHandler?: NativeMessageHandler
+): Promise<AuthenticationResult> {
+    // Remove throttle if it exists
+    ThrottlingUtils.removeThrottle(
+        browserStorage,
+        config.auth.clientId,
+        request
+    );
+    if (response.accountId) {
+        return invokeAsync(
+            handleResponsePlatformBroker,
+            PerformanceEvents.HandleResponsePlatformBroker,
+            logger,
+            performanceClient,
+            request.correlationId
+        )(
+            request,
+            response.accountId,
+            apiId,
+            config,
+            browserStorage,
+            nativeStorage,
+            eventHandler,
+            logger,
+            performanceClient,
+            nativeMessageHandler
+        );
+    }
+    const authCodeRequest: CommonAuthorizationCodeRequest = {
+        ...request,
+        code: response.code || "",
+        codeVerifier: codeVerifier,
+    };
+    // Create popup interaction handler.
+    const interactionHandler = new InteractionHandler(
+        authClient,
+        browserStorage,
+        authCodeRequest,
+        logger,
+        performanceClient
+    );
+    // Handle response from hash string.
+    const result = await invokeAsync(
+        interactionHandler.handleCodeResponse.bind(interactionHandler),
+        PerformanceEvents.HandleCodeResponse,
+        logger,
+        performanceClient,
+        request.correlationId
+    )(response, request);
+
+    return result;
+}
+
+/**
+ * Response handler when server returns ear_jwe on the /authorize request
+ * @param request
+ * @param response
+ * @param apiId
+ * @param config
+ * @param authority
+ * @param browserStorage
+ * @param nativeStorage
+ * @param eventHandler
+ * @param logger
+ * @param performanceClient
+ * @param nativeMessageHandler
+ * @returns
+ */
+export async function handleResponseEAR(
+    request: CommonAuthorizationUrlRequest,
+    response: AuthorizeResponse,
+    apiId: ApiId,
+    config: BrowserConfiguration,
+    authority: Authority,
+    browserStorage: BrowserCacheManager,
+    nativeStorage: BrowserCacheManager,
+    eventHandler: EventHandler,
+    logger: Logger,
+    performanceClient: IPerformanceClient,
+    nativeMessageHandler?: NativeMessageHandler
+): Promise<AuthenticationResult> {
+    // Remove throttle if it exists
+    ThrottlingUtils.removeThrottle(
+        browserStorage,
+        config.auth.clientId,
+        request
+    );
+
+    // Validate state & check response for errors
+    AuthorizeProtocol.validateAuthorizationResponse(response, request.state);
+
+    if (!response.ear_jwe) {
+        throw createBrowserAuthError(BrowserAuthErrorCodes.earJweEmpty);
+    }
+
+    if (!request.earJwk) {
+        throw createBrowserAuthError(BrowserAuthErrorCodes.earJwkEmpty);
+    }
+
+    const decryptedData = JSON.parse(
+        await invokeAsync(
+            decryptEarResponse,
+            PerformanceEvents.DecryptEarResponse,
+            logger,
+            performanceClient,
+            request.correlationId
+        )(request.earJwk, response.ear_jwe)
+    ) as AuthorizeResponse & ServerAuthorizationTokenResponse;
+
+    if (decryptedData.accountId) {
+        return invokeAsync(
+            handleResponsePlatformBroker,
+            PerformanceEvents.HandleResponsePlatformBroker,
+            logger,
+            performanceClient,
+            request.correlationId
+        )(
+            request,
+            decryptedData.accountId,
+            apiId,
+            config,
+            browserStorage,
+            nativeStorage,
+            eventHandler,
+            logger,
+            performanceClient,
+            nativeMessageHandler
+        );
+    }
+
+    const responseHandler = new ResponseHandler(
+        config.auth.clientId,
+        browserStorage,
+        new CryptoOps(logger, performanceClient),
+        logger,
+        null,
+        null,
+        performanceClient
+    );
+
+    // Validate response. This function throws a server error if an error is returned by the server.
+    responseHandler.validateTokenResponse(decryptedData);
+
+    // Temporary until response handler is refactored to be more flow agnostic.
+    const additionalData: AuthorizationCodePayload = {
+        code: "",
+        state: request.state,
+        nonce: request.nonce,
+        client_info: decryptedData.client_info,
+        cloud_graph_host_name: decryptedData.cloud_graph_host_name,
+        cloud_instance_host_name: decryptedData.cloud_instance_host_name,
+        cloud_instance_name: decryptedData.cloud_instance_name,
+        msgraph_host: decryptedData.msgraph_host,
+    };
+
+    return (await invokeAsync(
+        responseHandler.handleServerTokenResponse.bind(responseHandler),
+        PerformanceEvents.HandleServerTokenResponse,
+        logger,
+        performanceClient,
+        request.correlationId
+    )(
+        decryptedData,
+        authority,
+        TimeUtils.nowSeconds(),
+        request,
+        additionalData,
+        undefined,
+        undefined,
+        undefined,
+        undefined
+    )) as AuthenticationResult;
+}

package/src/request/AuthorizationUrlRequest.ts

@@ -7,11 +7,9 @@ import { CommonAuthorizationUrlRequest } from "@azure/msal-common/browser";
 
 /**
  * This type is deprecated and will be removed on the next major version update
+ * @deprecated Will be removed in future version
  */
 export type AuthorizationUrlRequest = Omit<
     CommonAuthorizationUrlRequest,
-    "state" | "nonce" | "requestedClaimsHash" | "platformBroker"
-> & {
-    state: string;
-    nonce: string;
-};
+    "requestedClaimsHash" | "platformBroker"
+>;

package/src/request/PopupRequest.ts

@@ -40,6 +40,7 @@ export type PopupRequest = Partial<
         CommonAuthorizationUrlRequest,
         | "responseMode"
         | "scopes"
+        | "earJwk"
         | "codeChallenge"
         | "codeChallengeMethod"
         | "requestedClaimsHash"

package/src/request/RedirectRequest.ts

@@ -38,6 +38,7 @@ export type RedirectRequest = Partial<
         CommonAuthorizationUrlRequest,
         | "responseMode"
         | "scopes"
+        | "earJwk"
         | "codeChallenge"
         | "codeChallengeMethod"
         | "requestedClaimsHash"

package/src/request/SsoSilentRequest.ts

@@ -34,6 +34,7 @@ export type SsoSilentRequest = Partial<
     Omit<
         CommonAuthorizationUrlRequest,
         | "responseMode"
+        | "earJwk"
         | "codeChallenge"
         | "codeChallengeMethod"
         | "requestedClaimsHash"

package/src/utils/BrowserConstants.ts

@@ -78,21 +78,12 @@ export type HTTP_REQUEST_TYPE =
  * Temporary cache keys for MSAL, deleted after any request.
  */
 export const TemporaryCacheKeys = {
-    AUTHORITY: "authority",
-    ACQUIRE_TOKEN_ACCOUNT: "acquireToken.account",
-    SESSION_STATE: "session.state",
-    REQUEST_STATE: "request.state",
-    NONCE_IDTOKEN: "nonce.id_token",
     ORIGIN_URI: "request.origin",
-    RENEW_STATUS: "token.renew.status",
     URL_HASH: "urlHash",
     REQUEST_PARAMS: "request.params",
-    SCOPES: "scopes",
+    VERIFIER: "code.verifier",
     INTERACTION_STATUS_KEY: "interaction.status",
-    CCS_CREDENTIAL: "ccs.credential",
-    CORRELATION_ID: "request.correlationId",
     NATIVE_REQUEST: "request.native",
-    REDIRECT_CONTEXT: "request.redirect.context",
 } as const;
 export type TemporaryCacheKeys =
     (typeof TemporaryCacheKeys)[keyof typeof TemporaryCacheKeys];

package/dist/interaction_handler/RedirectHandler.d.ts

@@ -1,33 +0,0 @@
-import { AuthorizationCodeClient, CommonAuthorizationCodeRequest, Logger, IPerformanceClient, CcsCredential, AuthorizeResponse } from "@azure/msal-common/browser";
-import { BrowserCacheManager } from "../cache/BrowserCacheManager.js";
-import { INavigationClient } from "../navigation/INavigationClient.js";
-import { AuthenticationResult } from "../response/AuthenticationResult.js";
-export type RedirectParams = {
-    navigationClient: INavigationClient;
-    redirectTimeout: number;
-    redirectStartPage: string;
-    onRedirectNavigate?: (url: string) => void | boolean;
-};
-export declare class RedirectHandler {
-    authModule: AuthorizationCodeClient;
-    browserStorage: BrowserCacheManager;
-    authCodeRequest: CommonAuthorizationCodeRequest;
-    logger: Logger;
-    performanceClient: IPerformanceClient;
-    constructor(authCodeModule: AuthorizationCodeClient, storageImpl: BrowserCacheManager, authCodeRequest: CommonAuthorizationCodeRequest, logger: Logger, performanceClient: IPerformanceClient);
-    /**
-     * Redirects window to given URL.
-     * @param urlNavigate
-     */
-    initiateAuthRequest(requestUrl: string, params: RedirectParams): Promise<void>;
-    /**
-     * Handle authorization code response in the window.
-     * @param hash
-     */
-    handleCodeResponse(response: AuthorizeResponse, state: string): Promise<AuthenticationResult>;
-    /**
-     * Looks up ccs creds in the cache
-     */
-    protected checkCcsCredentials(): CcsCredential | null;
-}
-//# sourceMappingURL=RedirectHandler.d.ts.map

package/dist/interaction_handler/RedirectHandler.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"RedirectHandler.d.ts","sourceRoot":"","sources":["../../src/interaction_handler/RedirectHandler.ts"],"names":[],"mappings":"AAKA,OAAO,EACH,uBAAuB,EACvB,8BAA8B,EAC9B,MAAM,EAEN,kBAAkB,EAGlB,aAAa,EAGb,iBAAiB,EAEpB,MAAM,4BAA4B,CAAC;AAMpC,OAAO,EAAE,mBAAmB,EAAE,MAAM,iCAAiC,CAAC;AACtE,OAAO,EAAE,iBAAiB,EAAE,MAAM,oCAAoC,CAAC;AAEvE,OAAO,EAAE,oBAAoB,EAAE,MAAM,qCAAqC,CAAC;AAE3E,MAAM,MAAM,cAAc,GAAG;IACzB,gBAAgB,EAAE,iBAAiB,CAAC;IACpC,eAAe,EAAE,MAAM,CAAC;IACxB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,kBAAkB,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,GAAG,OAAO,CAAC;CACxD,CAAC;AAEF,qBAAa,eAAe;IACxB,UAAU,EAAE,uBAAuB,CAAC;IACpC,cAAc,EAAE,mBAAmB,CAAC;IACpC,eAAe,EAAE,8BAA8B,CAAC;IAChD,MAAM,EAAE,MAAM,CAAC;IACf,iBAAiB,EAAE,kBAAkB,CAAC;gBAGlC,cAAc,EAAE,uBAAuB,EACvC,WAAW,EAAE,mBAAmB,EAChC,eAAe,EAAE,8BAA8B,EAC/C,MAAM,EAAE,MAAM,EACd,iBAAiB,EAAE,kBAAkB;IASzC;;;OAGG;IACG,mBAAmB,CACrB,UAAU,EAAE,MAAM,EAClB,MAAM,EAAE,cAAc,GACvB,OAAO,CAAC,IAAI,CAAC;IA6EhB;;;OAGG;IACG,kBAAkB,CACpB,QAAQ,EAAE,iBAAiB,EAC3B,KAAK,EAAE,MAAM,GACd,OAAO,CAAC,oBAAoB,CAAC;IAgFhC;;OAEG;IACH,SAAS,CAAC,mBAAmB,IAAI,aAAa,GAAG,IAAI;CAoBxD"}

package/dist/interaction_handler/RedirectHandler.mjs

@@ -1,144 +0,0 @@
-/*! @azure/msal-browser v4.8.0 2025-03-20 */
-'use strict';
-import { createClientAuthError, ClientAuthErrorCodes, AuthorizeProtocol, ServerError, invokeAsync, PerformanceEvents } from '@azure/msal-common/browser';
-import { createBrowserAuthError } from '../error/BrowserAuthError.mjs';
-import { TemporaryCacheKeys, ApiId } from '../utils/BrowserConstants.mjs';
-import { emptyNavigateUri, userCancelled } from '../error/BrowserAuthErrorCodes.mjs';
-
-/*
- * Copyright (c) Microsoft Corporation. All rights reserved.
- * Licensed under the MIT License.
- */
-class RedirectHandler {
-    constructor(authCodeModule, storageImpl, authCodeRequest, logger, performanceClient) {
-        this.authModule = authCodeModule;
-        this.browserStorage = storageImpl;
-        this.authCodeRequest = authCodeRequest;
-        this.logger = logger;
-        this.performanceClient = performanceClient;
-    }
-    /**
-     * Redirects window to given URL.
-     * @param urlNavigate
-     */
-    async initiateAuthRequest(requestUrl, params) {
-        this.logger.verbose("RedirectHandler.initiateAuthRequest called");
-        // Navigate if valid URL
-        if (requestUrl) {
-            // Cache start page, returns to this page after redirectUri if navigateToLoginRequestUrl is true
-            if (params.redirectStartPage) {
-                this.logger.verbose("RedirectHandler.initiateAuthRequest: redirectStartPage set, caching start page");
-                this.browserStorage.setTemporaryCache(TemporaryCacheKeys.ORIGIN_URI, params.redirectStartPage, true);
-            }
-            // Set interaction status in the library.
-            this.browserStorage.setTemporaryCache(TemporaryCacheKeys.CORRELATION_ID, this.authCodeRequest.correlationId, true);
-            this.browserStorage.cacheCodeRequest(this.authCodeRequest);
-            this.logger.infoPii(`RedirectHandler.initiateAuthRequest: Navigate to: ${requestUrl}`);
-            const navigationOptions = {
-                apiId: ApiId.acquireTokenRedirect,
-                timeout: params.redirectTimeout,
-                noHistory: false,
-            };
-            // If onRedirectNavigate is implemented, invoke it and provide requestUrl
-            if (typeof params.onRedirectNavigate === "function") {
-                this.logger.verbose("RedirectHandler.initiateAuthRequest: Invoking onRedirectNavigate callback");
-                const navigate = params.onRedirectNavigate(requestUrl);
-                // Returning false from onRedirectNavigate will stop navigation
-                if (navigate !== false) {
-                    this.logger.verbose("RedirectHandler.initiateAuthRequest: onRedirectNavigate did not return false, navigating");
-                    await params.navigationClient.navigateExternal(requestUrl, navigationOptions);
-                    return;
-                }
-                else {
-                    this.logger.verbose("RedirectHandler.initiateAuthRequest: onRedirectNavigate returned false, stopping navigation");
-                    return;
-                }
-            }
-            else {
-                // Navigate window to request URL
-                this.logger.verbose("RedirectHandler.initiateAuthRequest: Navigating window to navigate url");
-                await params.navigationClient.navigateExternal(requestUrl, navigationOptions);
-                return;
-            }
-        }
-        else {
-            // Throw error if request URL is empty.
-            this.logger.info("RedirectHandler.initiateAuthRequest: Navigate url is empty");
-            throw createBrowserAuthError(emptyNavigateUri);
-        }
-    }
-    /**
-     * Handle authorization code response in the window.
-     * @param hash
-     */
-    async handleCodeResponse(response, state) {
-        this.logger.verbose("RedirectHandler.handleCodeResponse called");
-        // Interaction is completed - remove interaction status.
-        this.browserStorage.setInteractionInProgress(false);
-        // Handle code response.
-        const stateKey = this.browserStorage.generateStateKey(state);
-        const requestState = this.browserStorage.getTemporaryCache(stateKey);
-        if (!requestState) {
-            throw createClientAuthError(ClientAuthErrorCodes.stateNotFound, "Cached State");
-        }
-        let authCodeResponse;
-        try {
-            authCodeResponse = AuthorizeProtocol.getAuthorizationCodePayload(response, requestState);
-        }
-        catch (e) {
-            if (e instanceof ServerError &&
-                e.subError === userCancelled) {
-                // Translate server error caused by user closing native prompt to corresponding first class MSAL error
-                throw createBrowserAuthError(userCancelled);
-            }
-            else {
-                throw e;
-            }
-        }
-        // Get cached items
-        const nonceKey = this.browserStorage.generateNonceKey(requestState);
-        const cachedNonce = this.browserStorage.getTemporaryCache(nonceKey);
-        // Assign code to request
-        this.authCodeRequest.code = authCodeResponse.code;
-        // Check for new cloud instance
-        if (authCodeResponse.cloud_instance_host_name) {
-            await invokeAsync(this.authModule.updateAuthority.bind(this.authModule), PerformanceEvents.UpdateTokenEndpointAuthority, this.logger, this.performanceClient, this.authCodeRequest.correlationId)(authCodeResponse.cloud_instance_host_name, this.authCodeRequest.correlationId);
-        }
-        authCodeResponse.nonce = cachedNonce || undefined;
-        authCodeResponse.state = requestState;
-        // Add CCS parameters if available
-        if (authCodeResponse.client_info) {
-            this.authCodeRequest.clientInfo = authCodeResponse.client_info;
-        }
-        else {
-            const cachedCcsCred = this.checkCcsCredentials();
-            if (cachedCcsCred) {
-                this.authCodeRequest.ccsCredential = cachedCcsCred;
-            }
-        }
-        // Acquire token with retrieved code.
-        const tokenResponse = (await this.authModule.acquireToken(this.authCodeRequest, authCodeResponse));
-        this.browserStorage.cleanRequestByState(state);
-        return tokenResponse;
-    }
-    /**
-     * Looks up ccs creds in the cache
-     */
-    checkCcsCredentials() {
-        // Look up ccs credential in temp cache
-        const cachedCcsCred = this.browserStorage.getTemporaryCache(TemporaryCacheKeys.CCS_CREDENTIAL, true);
-        if (cachedCcsCred) {
-            try {
-                return JSON.parse(cachedCcsCred);
-            }
-            catch (e) {
-                this.authModule.logger.error("Cache credential could not be parsed");
-                this.authModule.logger.errorPii(`Cache credential could not be parsed: ${cachedCcsCred}`);
-            }
-        }
-        return null;
-    }
-}
-
-export { RedirectHandler };
-//# sourceMappingURL=RedirectHandler.mjs.map

package/dist/interaction_handler/RedirectHandler.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"RedirectHandler.mjs","sources":["../../src/interaction_handler/RedirectHandler.ts"],"sourcesContent":[null],"names":["BrowserAuthErrorCodes.emptyNavigateUri","BrowserAuthErrorCodes.userCancelled"],"mappings":";;;;;;;AAAA;;;AAGG;MAiCU,eAAe,CAAA;IAOxB,WACI,CAAA,cAAuC,EACvC,WAAgC,EAChC,eAA+C,EAC/C,MAAc,EACd,iBAAqC,EAAA;AAErC,QAAA,IAAI,CAAC,UAAU,GAAG,cAAc,CAAC;AACjC,QAAA,IAAI,CAAC,cAAc,GAAG,WAAW,CAAC;AAClC,QAAA,IAAI,CAAC,eAAe,GAAG,eAAe,CAAC;AACvC,QAAA,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;AACrB,QAAA,IAAI,CAAC,iBAAiB,GAAG,iBAAiB,CAAC;KAC9C;AAED;;;AAGG;AACH,IAAA,MAAM,mBAAmB,CACrB,UAAkB,EAClB,MAAsB,EAAA;AAEtB,QAAA,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,4CAA4C,CAAC,CAAC;;AAElE,QAAA,IAAI,UAAU,EAAE;;YAEZ,IAAI,MAAM,CAAC,iBAAiB,EAAE;AAC1B,gBAAA,IAAI,CAAC,MAAM,CAAC,OAAO,CACf,gFAAgF,CACnF,CAAC;AACF,gBAAA,IAAI,CAAC,cAAc,CAAC,iBAAiB,CACjC,kBAAkB,CAAC,UAAU,EAC7B,MAAM,CAAC,iBAAiB,EACxB,IAAI,CACP,CAAC;AACL,aAAA;;AAGD,YAAA,IAAI,CAAC,cAAc,CAAC,iBAAiB,CACjC,kBAAkB,CAAC,cAAc,EACjC,IAAI,CAAC,eAAe,CAAC,aAAa,EAClC,IAAI,CACP,CAAC;YACF,IAAI,CAAC,cAAc,CAAC,gBAAgB,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;YAC3D,IAAI,CAAC,MAAM,CAAC,OAAO,CACf,CAAqD,kDAAA,EAAA,UAAU,CAAE,CAAA,CACpE,CAAC;AACF,YAAA,MAAM,iBAAiB,GAAsB;gBACzC,KAAK,EAAE,KAAK,CAAC,oBAAoB;gBACjC,OAAO,EAAE,MAAM,CAAC,eAAe;AAC/B,gBAAA,SAAS,EAAE,KAAK;aACnB,CAAC;;AAGF,YAAA,IAAI,OAAO,MAAM,CAAC,kBAAkB,KAAK,UAAU,EAAE;AACjD,gBAAA,IAAI,CAAC,MAAM,CAAC,OAAO,CACf,2EAA2E,CAC9E,CAAC;gBACF,MAAM,QAAQ,GAAG,MAAM,CAAC,kBAAkB,CAAC,UAAU,CAAC,CAAC;;gBAGvD,IAAI,QAAQ,KAAK,KAAK,EAAE;AACpB,oBAAA,IAAI,CAAC,MAAM,CAAC,OAAO,CACf,0FAA0F,CAC7F,CAAC;oBACF,MAAM,MAAM,CAAC,gBAAgB,CAAC,gBAAgB,CAC1C,UAAU,EACV,iBAAiB,CACpB,CAAC;oBACF,OAAO;AACV,iBAAA;AAAM,qBAAA;AACH,oBAAA,IAAI,CAAC,MAAM,CAAC,OAAO,CACf,6FAA6F,CAChG,CAAC;oBACF,OAAO;AACV,iBAAA;AACJ,aAAA;AAAM,iBAAA;;AAEH,gBAAA,IAAI,CAAC,MAAM,CAAC,OAAO,CACf,wEAAwE,CAC3E,CAAC;gBACF,MAAM,MAAM,CAAC,gBAAgB,CAAC,gBAAgB,CAC1C,UAAU,EACV,iBAAiB,CACpB,CAAC;gBACF,OAAO;AACV,aAAA;AACJ,SAAA;AAAM,aAAA;;AAEH,YAAA,IAAI,CAAC,MAAM,CAAC,IAAI,CACZ,4DAA4D,CAC/D,CAAC;AACF,YAAA,MAAM,sBAAsB,CACxBA,gBAAsC,CACzC,CAAC;AACL,SAAA;KACJ;AAED;;;AAGG;AACH,IAAA,MAAM,kBAAkB,CACpB,QAA2B,EAC3B,KAAa,EAAA;AAEb,QAAA,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,2CAA2C,CAAC,CAAC;;AAGjE,QAAA,IAAI,CAAC,cAAc,CAAC,wBAAwB,CAAC,KAAK,CAAC,CAAC;;QAGpD,MAAM,QAAQ,GAAG,IAAI,CAAC,cAAc,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC;QAC7D,MAAM,YAAY,GAAG,IAAI,CAAC,cAAc,CAAC,iBAAiB,CAAC,QAAQ,CAAC,CAAC;QACrE,IAAI,CAAC,YAAY,EAAE;YACf,MAAM,qBAAqB,CACvB,oBAAoB,CAAC,aAAa,EAClC,cAAc,CACjB,CAAC;AACL,SAAA;AAED,QAAA,IAAI,gBAAgB,CAAC;QACrB,IAAI;YACA,gBAAgB,GAAG,iBAAiB,CAAC,2BAA2B,CAC5D,QAAQ,EACR,YAAY,CACf,CAAC;AACL,SAAA;AAAC,QAAA,OAAO,CAAC,EAAE;YACR,IACI,CAAC,YAAY,WAAW;AACxB,gBAAA,CAAC,CAAC,QAAQ,KAAKC,aAAmC,EACpD;;AAEE,gBAAA,MAAM,sBAAsB,CACxBA,aAAmC,CACtC,CAAC;AACL,aAAA;AAAM,iBAAA;AACH,gBAAA,MAAM,CAAC,CAAC;AACX,aAAA;AACJ,SAAA;;QAGD,MAAM,QAAQ,GAAG,IAAI,CAAC,cAAc,CAAC,gBAAgB,CAAC,YAAY,CAAC,CAAC;QACpE,MAAM,WAAW,GAAG,IAAI,CAAC,cAAc,CAAC,iBAAiB,CAAC,QAAQ,CAAC,CAAC;;QAGpE,IAAI,CAAC,eAAe,CAAC,IAAI,GAAG,gBAAgB,CAAC,IAAI,CAAC;;QAGlD,IAAI,gBAAgB,CAAC,wBAAwB,EAAE;YAC3C,MAAM,WAAW,CACb,IAAI,CAAC,UAAU,CAAC,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,EACrD,iBAAiB,CAAC,4BAA4B,EAC9C,IAAI,CAAC,MAAM,EACX,IAAI,CAAC,iBAAiB,EACtB,IAAI,CAAC,eAAe,CAAC,aAAa,CACrC,CACG,gBAAgB,CAAC,wBAAwB,EACzC,IAAI,CAAC,eAAe,CAAC,aAAa,CACrC,CAAC;AACL,SAAA;AAED,QAAA,gBAAgB,CAAC,KAAK,GAAG,WAAW,IAAI,SAAS,CAAC;AAClD,QAAA,gBAAgB,CAAC,KAAK,GAAG,YAAY,CAAC;;QAGtC,IAAI,gBAAgB,CAAC,WAAW,EAAE;YAC9B,IAAI,CAAC,eAAe,CAAC,UAAU,GAAG,gBAAgB,CAAC,WAAW,CAAC;AAClE,SAAA;AAAM,aAAA;AACH,YAAA,MAAM,aAAa,GAAG,IAAI,CAAC,mBAAmB,EAAE,CAAC;AACjD,YAAA,IAAI,aAAa,EAAE;AACf,gBAAA,IAAI,CAAC,eAAe,CAAC,aAAa,GAAG,aAAa,CAAC;AACtD,aAAA;AACJ,SAAA;;AAGD,QAAA,MAAM,aAAa,IAAI,MAAM,IAAI,CAAC,UAAU,CAAC,YAAY,CACrD,IAAI,CAAC,eAAe,EACpB,gBAAgB,CACnB,CAAyB,CAAC;AAE3B,QAAA,IAAI,CAAC,cAAc,CAAC,mBAAmB,CAAC,KAAK,CAAC,CAAC;AAC/C,QAAA,OAAO,aAAa,CAAC;KACxB;AAED;;AAEG;IACO,mBAAmB,GAAA;;AAEzB,QAAA,MAAM,aAAa,GAAG,IAAI,CAAC,cAAc,CAAC,iBAAiB,CACvD,kBAAkB,CAAC,cAAc,EACjC,IAAI,CACP,CAAC;AACF,QAAA,IAAI,aAAa,EAAE;YACf,IAAI;AACA,gBAAA,OAAO,IAAI,CAAC,KAAK,CAAC,aAAa,CAAkB,CAAC;AACrD,aAAA;AAAC,YAAA,OAAO,CAAC,EAAE;gBACR,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,KAAK,CACxB,sCAAsC,CACzC,CAAC;gBACF,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,QAAQ,CAC3B,CAAyC,sCAAA,EAAA,aAAa,CAAE,CAAA,CAC3D,CAAC;AACL,aAAA;AACJ,SAAA;AACD,QAAA,OAAO,IAAI,CAAC;KACf;AACJ;;;;"}

package/lib/types/interaction_handler/RedirectHandler.d.ts

@@ -1,33 +0,0 @@
-import { AuthorizationCodeClient, CommonAuthorizationCodeRequest, Logger, IPerformanceClient, CcsCredential, AuthorizeResponse } from "@azure/msal-common/browser";
-import { BrowserCacheManager } from "../cache/BrowserCacheManager.js";
-import { INavigationClient } from "../navigation/INavigationClient.js";
-import { AuthenticationResult } from "../response/AuthenticationResult.js";
-export type RedirectParams = {
-    navigationClient: INavigationClient;
-    redirectTimeout: number;
-    redirectStartPage: string;
-    onRedirectNavigate?: (url: string) => void | boolean;
-};
-export declare class RedirectHandler {
-    authModule: AuthorizationCodeClient;
-    browserStorage: BrowserCacheManager;
-    authCodeRequest: CommonAuthorizationCodeRequest;
-    logger: Logger;
-    performanceClient: IPerformanceClient;
-    constructor(authCodeModule: AuthorizationCodeClient, storageImpl: BrowserCacheManager, authCodeRequest: CommonAuthorizationCodeRequest, logger: Logger, performanceClient: IPerformanceClient);
-    /**
-     * Redirects window to given URL.
-     * @param urlNavigate
-     */
-    initiateAuthRequest(requestUrl: string, params: RedirectParams): Promise<void>;
-    /**
-     * Handle authorization code response in the window.
-     * @param hash
-     */
-    handleCodeResponse(response: AuthorizeResponse, state: string): Promise<AuthenticationResult>;
-    /**
-     * Looks up ccs creds in the cache
-     */
-    protected checkCcsCredentials(): CcsCredential | null;
-}
-//# sourceMappingURL=RedirectHandler.d.ts.map

package/lib/types/interaction_handler/RedirectHandler.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"RedirectHandler.d.ts","sourceRoot":"","sources":["../../../src/interaction_handler/RedirectHandler.ts"],"names":[],"mappings":"AAKA,OAAO,EACH,uBAAuB,EACvB,8BAA8B,EAC9B,MAAM,EAEN,kBAAkB,EAGlB,aAAa,EAGb,iBAAiB,EAEpB,MAAM,4BAA4B,CAAC;AAMpC,OAAO,EAAE,mBAAmB,EAAE,MAAM,iCAAiC,CAAC;AACtE,OAAO,EAAE,iBAAiB,EAAE,MAAM,oCAAoC,CAAC;AAEvE,OAAO,EAAE,oBAAoB,EAAE,MAAM,qCAAqC,CAAC;AAE3E,MAAM,MAAM,cAAc,GAAG;IACzB,gBAAgB,EAAE,iBAAiB,CAAC;IACpC,eAAe,EAAE,MAAM,CAAC;IACxB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,kBAAkB,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,GAAG,OAAO,CAAC;CACxD,CAAC;AAEF,qBAAa,eAAe;IACxB,UAAU,EAAE,uBAAuB,CAAC;IACpC,cAAc,EAAE,mBAAmB,CAAC;IACpC,eAAe,EAAE,8BAA8B,CAAC;IAChD,MAAM,EAAE,MAAM,CAAC;IACf,iBAAiB,EAAE,kBAAkB,CAAC;gBAGlC,cAAc,EAAE,uBAAuB,EACvC,WAAW,EAAE,mBAAmB,EAChC,eAAe,EAAE,8BAA8B,EAC/C,MAAM,EAAE,MAAM,EACd,iBAAiB,EAAE,kBAAkB;IASzC;;;OAGG;IACG,mBAAmB,CACrB,UAAU,EAAE,MAAM,EAClB,MAAM,EAAE,cAAc,GACvB,OAAO,CAAC,IAAI,CAAC;IA6EhB;;;OAGG;IACG,kBAAkB,CACpB,QAAQ,EAAE,iBAAiB,EAC3B,KAAK,EAAE,MAAM,GACd,OAAO,CAAC,oBAAoB,CAAC;IAgFhC;;OAEG;IACH,SAAS,CAAC,mBAAmB,IAAI,aAAa,GAAG,IAAI;CAoBxD"}