@azure/msal-browser 5.0.0-alpha.0 → 5.0.0-beta.0

package/src/utils/BrowserUtils.ts

@@ -9,18 +9,130 @@ import {
     invokeAsync,
     UrlUtils,
     RequestParameterBuilder,
+    ICrypto,
+    Logger,
+    CommonAuthorizationUrlRequest,
+    CommonEndSessionRequest,
+    ProtocolUtils,
 } from "@azure/msal-common/browser";
 import {
     createBrowserAuthError,
     BrowserAuthErrorCodes,
 } from "../error/BrowserAuthError.js";
-import { BrowserConstants, BrowserCacheLocation } from "./BrowserConstants.js";
+import { BrowserCacheLocation, InteractionType } from "./BrowserConstants.js";
 import * as BrowserCrypto from "../crypto/BrowserCrypto.js";
 import {
     BrowserConfigurationAuthErrorCodes,
     createBrowserConfigurationAuthError,
 } from "../error/BrowserConfigurationAuthError.js";
-import type { BrowserConfiguration } from "../config/Configuration.js";
+import { BrowserConfiguration } from "../config/Configuration.js";
+import { redirectBridgeEmptyResponse } from "../error/BrowserAuthErrorCodes.js";
+import { base64Decode } from "../encode/Base64Decode.js";
+
+/**
+ * Extracts and parses the authentication response from URL (hash and/or query string).
+ * This is a shared utility used across multiple components in msal-browser.
+ *
+ * @returns {Object} An object containing the parsed state information and URL parameters.
+ * @returns {URLSearchParams} params - The parsed URL parameters from the payload.
+ * @returns {string} payload - The combined query string and hash content.
+ * @returns {string} urlHash - The original URL hash.
+ * @returns {string} urlQuery - The original URL query string.
+ * @returns {LibraryStateObject} libraryState - The decoded library state from the state parameter.
+ *
+ * @throws {AuthError} If no authentication payload is found in the URL.
+ * @throws {AuthError} If the state parameter is missing.
+ * @throws {AuthError} If the state is missing required 'id' or 'meta' attributes.
+ */
+export function parseAuthResponseFromUrl(): {
+    params: URLSearchParams;
+    payload: string;
+    urlHash: string;
+    urlQuery: string;
+    hasResponseInHash: boolean;
+    hasResponseInQuery: boolean;
+    libraryState: {
+        id: string;
+        meta: Record<string, string>;
+    };
+} {
+    // Extract both hash and query string to support hybrid response format
+    const urlHash = window.location.hash;
+    const urlQuery = window.location.search;
+
+    // Determine which part contains the auth response by checking for 'state' parameter
+    let hasResponseInHash = false;
+    let hasResponseInQuery = false;
+    let payload = "";
+    let params: URLSearchParams | undefined = undefined;
+
+    if (urlHash && urlHash.length > 1) {
+        const hashContent =
+            urlHash.charAt(0) === "#" ? urlHash.substring(1) : urlHash;
+        const hashParams = new URLSearchParams(hashContent);
+        if (hashParams.has("state")) {
+            hasResponseInHash = true;
+            payload = hashContent;
+            params = hashParams;
+        }
+    }
+
+    if (urlQuery && urlQuery.length > 1) {
+        const queryContent =
+            urlQuery.charAt(0) === "?" ? urlQuery.substring(1) : urlQuery;
+        const queryParams = new URLSearchParams(queryContent);
+        if (queryParams.has("state")) {
+            hasResponseInQuery = true;
+            payload = queryContent;
+            params = queryParams;
+        }
+    }
+
+    // If response is in both, combine them (hybrid format)
+    if (hasResponseInHash && hasResponseInQuery) {
+        const queryContent =
+            urlQuery.charAt(0) === "?" ? urlQuery.substring(1) : urlQuery;
+        const hashContent =
+            urlHash.charAt(0) === "#" ? urlHash.substring(1) : urlHash;
+        payload = `${queryContent}${hashContent}`;
+        params = new URLSearchParams(payload);
+    }
+
+    if (!payload || !params) {
+        throw createBrowserAuthError(BrowserAuthErrorCodes.emptyResponse);
+    }
+
+    const state = params.get("state");
+    if (!state) {
+        throw createBrowserAuthError(BrowserAuthErrorCodes.noStateInHash);
+    }
+
+    const { libraryState } = ProtocolUtils.parseRequestState(
+        base64Decode,
+        state
+    );
+
+    const { id, meta } = libraryState;
+    if (!id || !meta) {
+        throw createBrowserAuthError(
+            BrowserAuthErrorCodes.unableToParseState,
+            "missing_library_state"
+        );
+    }
+
+    return {
+        params,
+        payload,
+        urlHash,
+        urlQuery,
+        hasResponseInHash,
+        hasResponseInQuery,
+        libraryState: {
+            id,
+            meta,
+        },
+    };
+}
 
 /**
  * Clears hash from window url.
@@ -58,13 +170,120 @@ export function isInIframe(): boolean {
  * Returns boolean of whether or not the current window is a popup opened by msal
  */
 export function isInPopup(): boolean {
-    return (
-        typeof window !== "undefined" &&
-        !!window.opener &&
-        window.opener !== window &&
-        typeof window.name === "string" &&
-        window.name.indexOf(`${BrowserConstants.POPUP_NAME_PREFIX}.`) === 0
-    );
+    if (isInIframe()) {
+        return false;
+    }
+
+    try {
+        const { libraryState } = parseAuthResponseFromUrl();
+        const { meta } = libraryState;
+        return meta["interactionType"] === InteractionType.Popup;
+    } catch (e) {
+        // If parsing fails (no state, invalid URL, etc.), we're not in a popup
+        return false;
+    }
+}
+
+/**
+ * Await a response from a redirect bridge using BroadcastChannel.
+ * This unified function works for both popup and iframe scenarios by listening on a
+ * BroadcastChannel for the server payload.
+ *
+ * @param timeoutMs - Timeout in milliseconds.
+ * @param logger - Logger instance for logging monitoring events.
+ * @param browserCrypto - Browser crypto instance for decoding state.
+ * @param request - The authorization or end session request.
+ * @returns Promise<string> - Resolves with the response string (query or hash) from the window.
+ */
+
+// Track the active bridge monitor to allow cancellation when overriding interactions
+let activeBridgeMonitor: {
+    timeoutId: number;
+    channel: BroadcastChannel;
+    reject: (reason?: unknown) => void;
+} | null = null;
+
+/**
+ * Cancels the pending bridge response monitor if one exists.
+ * This is called when overrideInteractionInProgress is used to cancel
+ * any pending popup interaction before starting a new one.
+ */
+export function cancelPendingBridgeResponse(
+    logger: Logger,
+    correlationId: string
+): void {
+    if (activeBridgeMonitor) {
+        logger.verbose(
+            "BrowserUtils.cancelPendingBridgeResponse - Cancelling pending bridge monitor",
+            correlationId
+        );
+
+        clearTimeout(activeBridgeMonitor.timeoutId);
+        activeBridgeMonitor.channel.close();
+        activeBridgeMonitor.reject(
+            createBrowserAuthError(
+                BrowserAuthErrorCodes.interactionInProgressCancelled
+            )
+        );
+
+        activeBridgeMonitor = null;
+    }
+}
+
+export async function waitForBridgeResponse(
+    timeoutMs: number,
+    logger: Logger,
+    browserCrypto: ICrypto,
+    request: CommonAuthorizationUrlRequest | CommonEndSessionRequest
+): Promise<string> {
+    return new Promise<string>((resolve, reject) => {
+        logger.verbose(
+            "BrowserUtils.waitForBridgeResponse - started",
+            request.correlationId
+        );
+
+        const { libraryState } = ProtocolUtils.parseRequestState(
+            browserCrypto.base64Decode,
+            request.state || ""
+        );
+        const channel = new BroadcastChannel(libraryState.id);
+        let responseString: string | undefined = undefined;
+
+        const timeoutId = window.setTimeout(() => {
+            // Clear the active monitor
+            activeBridgeMonitor = null;
+
+            channel.close();
+            reject(
+                createBrowserAuthError(
+                    BrowserAuthErrorCodes.timedOut,
+                    "redirect_bridge_timeout"
+                )
+            );
+        }, timeoutMs);
+
+        // Track this monitor so it can be cancelled if needed
+        activeBridgeMonitor = {
+            timeoutId,
+            channel,
+            reject,
+        };
+
+        channel.onmessage = (event) => {
+            responseString = event.data.payload;
+
+            // Clear the active monitor
+            activeBridgeMonitor = null;
+
+            clearTimeout(timeoutId);
+            channel.close();
+            if (responseString) {
+                resolve(responseString);
+            } else {
+                reject(createBrowserAuthError(redirectBridgeEmptyResponse));
+            }
+        };
+    });
 }
 
 // #endregion

package/dist/app/PublicClientNext.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"PublicClientNext.d.ts","sourceRoot":"","sources":["../../src/app/PublicClientNext.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,iBAAiB,EAAE,MAAM,oCAAoC,CAAC;AACvE,OAAO,EAAE,wBAAwB,EAAE,MAAM,wCAAwC,CAAC;AAClF,OAAO,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAC;AAC1D,OAAO,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AAChE,OAAO,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AAC5D,OAAO,EAAE,UAAU,EAAE,MAAM,8BAA8B,CAAC;AAC1D,OAAO,EAAE,wBAAwB,EAAE,MAAM,+BAA+B,CAAC;AACzE,OAAO,EACH,4BAA4B,EAC5B,WAAW,EACd,MAAM,+BAA+B,CAAC;AACvC,OAAO,EACH,2BAA2B,EAC3B,WAAW,EACX,aAAa,EACb,MAAM,EACT,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAE,iBAAiB,EAAE,MAAM,iCAAiC,CAAC;AACpE,OAAO,EAAE,gBAAgB,EAAE,MAAM,gCAAgC,CAAC;AAElE,OAAO,EACH,oBAAoB,EACpB,aAAa,EAChB,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAE,qBAAqB,EAAE,MAAM,0BAA0B,CAAC;AACjE,OAAO,EAAE,iBAAiB,EAAE,MAAM,iCAAiC,CAAC;AACpE,OAAO,EAAE,oBAAoB,EAAE,MAAM,qCAAqC,CAAC;AAG3E,OAAO,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAElD;;;;;;;;;;GAUG;AACH,qBAAa,gBAAiB,YAAW,wBAAwB;IAK7D,SAAS,CAAC,UAAU,EAAG,WAAW,CAAC;IACnC,SAAS,CAAC,aAAa,EAAE,aAAa,CAAC;WAEnB,6BAA6B,CAC7C,aAAa,EAAE,aAAa,GAC7B,OAAO,CAAC,wBAAwB,CAAC;IAapC;;;;;;;;;;;;;;;;;;;;;OAqBG;IACH,OAAO;IAeP;;OAEG;IACG,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC;IAajC;;;;;;OAMG;IACG,iBAAiB,CACnB,OAAO,EAAE,YAAY,GACtB,OAAO,CAAC,oBAAoB,CAAC;IAIhC;;;;;;;;OAQG;IACH,oBAAoB,CAAC,OAAO,EAAE,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC;IAI7D;;;;;OAKG;IACH,kBAAkB,CACd,aAAa,EAAE,aAAa,GAC7B,OAAO,CAAC,oBAAoB,CAAC;IAIhC;;;;;;;;;OASG;IACH,kBAAkB,CACd,OAAO,EAAE,wBAAwB,GAClC,OAAO,CAAC,oBAAoB,CAAC;IAIhC;;;OAGG;IACH,gBAAgB,CACZ,QAAQ,EAAE,qBAAqB,EAC/B,UAAU,CAAC,EAAE,KAAK,CAAC,SAAS,CAAC,GAC9B,MAAM,GAAG,IAAI;IAIhB;;;OAGG;IACH,mBAAmB,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI;IAI7C;;;;;OAKG;IACH,sBAAsB,CAAC,QAAQ,EAAE,2BAA2B,GAAG,MAAM;IAIrE;;;;;OAKG;IACH,yBAAyB,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO;IAItD;;;;OAIG;IACH,UAAU,CAAC,aAAa,EAAE,aAAa,GAAG,WAAW,GAAG,IAAI;IAI5D;;;;OAIG;IACH,cAAc,CAAC,aAAa,CAAC,EAAE,aAAa,GAAG,WAAW,EAAE;IAI5D;;;;;;OAMG;IACH,qBAAqB,CACjB,OAAO,CAAC,EAAE,4BAA4B,GACvC,OAAO,CAAC,oBAAoB,GAAG,IAAI,CAAC;IAIvC;;;;;;OAMG;IACH,UAAU,CACN,OAAO,CAAC,EAAE,YAAY,GAAG,SAAS,GACnC,OAAO,CAAC,oBAAoB,CAAC;IAIhC;;;;;;;;OAQG;IACH,aAAa,CAAC,OAAO,CAAC,EAAE,eAAe,GAAG,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC;IAInE;;;;OAIG;IACH,cAAc,CAAC,aAAa,CAAC,EAAE,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC;IAIhE;;;OAGG;IACH,WAAW,CAAC,aAAa,CAAC,EAAE,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC;IAI7D;;;;;;;;;;;;;;OAcG;IACH,SAAS,CAAC,OAAO,EAAE,gBAAgB,GAAG,OAAO,CAAC,oBAAoB,CAAC;IAInE;;OAEG;IACH,SAAS,IAAI,MAAM;IAInB;;;OAGG;IACH,SAAS,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI;IAI/B;;;OAGG;IACH,gBAAgB,CAAC,OAAO,EAAE,WAAW,GAAG,IAAI,GAAG,IAAI;IAInD;;OAEG;IACH,gBAAgB,IAAI,WAAW,GAAG,IAAI;IAItC;;;;OAIG;IACH,wBAAwB,CAAC,GAAG,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,GAAG,IAAI;IAIhE;;;OAGG;IACH,mBAAmB,CAAC,gBAAgB,EAAE,iBAAiB,GAAG,IAAI;IAI9D;;;OAGG;IACH,gBAAgB,IAAI,oBAAoB;IAIxC;;;;;OAKG;IACG,YAAY,CACd,MAAM,EAAE,oBAAoB,EAC5B,OAAO,EACD,aAAa,GACb,gBAAgB,GAChB,eAAe,GACf,YAAY,GACnB,OAAO,CAAC,IAAI,CAAC;IAIhB;;;OAGG;IACH,UAAU,CAAC,aAAa,CAAC,EAAE,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC;CAG/D"}

package/dist/app/PublicClientNext.mjs

@@ -1,303 +0,0 @@
-/*! @azure/msal-browser v5.0.0-alpha.0 2025-10-02 */
-'use strict';
-import { createController } from '../controllers/ControllerFactory.mjs';
-import { UnknownOperatingContextController } from '../controllers/UnknownOperatingContextController.mjs';
-import { UnknownOperatingContext } from '../operatingcontext/UnknownOperatingContext.mjs';
-
-/*
- * Copyright (c) Microsoft Corporation. All rights reserved.
- * Licensed under the MIT License.
- */
-/**
- * PublicClientNext is an early look at the planned implementation of PublicClientApplication in the next major version of MSAL.js.
- * It contains support for multiple API implementations based on the runtime environment that it is running in.
- *
- * The goals of these changes are to provide a clean separation of behavior between different operating contexts (Nested App Auth, Platform Brokers, Plain old Browser, etc.)
- * while still providing a consistent API surface for developers.
- *
- * Please use PublicClientApplication for any prod/real-world scenarios.
- * Note: PublicClientNext is experimental and subject to breaking changes without following semver
- *
- */
-class PublicClientNext {
-    static async createPublicClientApplication(configuration) {
-        const controller = await createController(configuration);
-        let pca;
-        if (controller !== null) {
-            pca = new PublicClientNext(configuration, controller);
-        }
-        else {
-            pca = new PublicClientNext(configuration);
-        }
-        return pca;
-    }
-    /**
-     * @constructor
-     * Constructor for the PublicClientNext used to instantiate the PublicClientNext object
-     *
-     * Important attributes in the Configuration object for auth are:
-     * - clientID: the application ID of your application. You can obtain one by registering your application with our Application registration portal : https://portal.azure.com/#blade/Microsoft_AAD_IAM/ActiveDirectoryMenuBlade/RegisteredAppsPreview
-     * - authority: the authority URL for your application.
-     * - redirect_uri: the uri of your application registered in the portal.
-     *
-     * In Azure AD, authority is a URL indicating the Azure active directory that MSAL uses to obtain tokens.
-     * It is of the form https://login.microsoftonline.com/{Enter_the_Tenant_Info_Here}
-     * If your application supports Accounts in one organizational directory, replace "Enter_the_Tenant_Info_Here" value with the Tenant Id or Tenant name (for example, contoso.microsoft.com).
-     * If your application supports Accounts in any organizational directory, replace "Enter_the_Tenant_Info_Here" value with organizations.
-     * If your application supports Accounts in any organizational directory and personal Microsoft accounts, replace "Enter_the_Tenant_Info_Here" value with common.
-     * To restrict support to Personal Microsoft accounts only, replace "Enter_the_Tenant_Info_Here" value with consumers.
-     *
-     * In Azure B2C, authority is of the form https://{instance}/tfp/{tenant}/{policyName}/
-     * Full B2C functionality will be available in this library in future versions.
-     *
-     * @param configuration Object for the MSAL PublicClientApplication instance
-     * @param IController Optional parameter to explictly set the controller. (Will be removed when we remove public constructor)
-     */
-    constructor(configuration, controller) {
-        this.configuration = configuration;
-        if (controller) {
-            this.controller = controller;
-        }
-        else {
-            const operatingContext = new UnknownOperatingContext(configuration);
-            this.controller = new UnknownOperatingContextController(operatingContext);
-        }
-    }
-    /**
-     * Initializer function to perform async startup tasks such as connecting to WAM extension
-     */
-    async initialize() {
-        if (this.controller instanceof UnknownOperatingContextController) {
-            const result = await createController(this.configuration);
-            if (result !== null) {
-                this.controller = result;
-            }
-            return this.controller.initialize();
-        }
-        return Promise.resolve();
-    }
-    /**
-     * Use when you want to obtain an access_token for your API via opening a popup window in the user's browser
-     *
-     * @param request
-     *
-     * @returns A promise that is fulfilled when this function has completed, or rejected if an error was raised.
-     */
-    async acquireTokenPopup(request) {
-        return this.controller.acquireTokenPopup(request);
-    }
-    /**
-     * Use when you want to obtain an access_token for your API by redirecting the user's browser window to the authorization endpoint. This function redirects
-     * the page, so any code that follows this function will not execute.
-     *
-     * IMPORTANT: It is NOT recommended to have code that is dependent on the resolution of the Promise. This function will navigate away from the current
-     * browser window. It currently returns a Promise in order to reflect the asynchronous nature of the code running in this function.
-     *
-     * @param request
-     */
-    acquireTokenRedirect(request) {
-        return this.controller.acquireTokenRedirect(request);
-    }
-    /**
-     * Silently acquire an access token for a given set of scopes. Returns currently processing promise if parallel requests are made.
-     *
-     * @param {@link (SilentRequest:type)}
-     * @returns {Promise.<AuthenticationResult>} - a promise that is fulfilled when this function has completed, or rejected if an error was raised. Returns the {@link AuthenticationResult} object
-     */
-    acquireTokenSilent(silentRequest) {
-        return this.controller.acquireTokenSilent(silentRequest);
-    }
-    /**
-     * This function redeems an authorization code (passed as code) from the eSTS token endpoint.
-     * This authorization code should be acquired server-side using a confidential client to acquire a spa_code.
-     * This API is not indended for normal authorization code acquisition and redemption.
-     *
-     * Redemption of this authorization code will not require PKCE, as it was acquired by a confidential client.
-     *
-     * @param request {@link AuthorizationCodeRequest}
-     * @returns A promise that is fulfilled when this function has completed, or rejected if an error was raised.
-     */
-    acquireTokenByCode(request) {
-        return this.controller.acquireTokenByCode(request);
-    }
-    /**
-     * Adds event callbacks to array
-     * @param callback
-     */
-    addEventCallback(callback, eventTypes) {
-        return this.controller.addEventCallback(callback, eventTypes);
-    }
-    /**
-     * Removes callback with provided id from callback array
-     * @param callbackId
-     */
-    removeEventCallback(callbackId) {
-        return this.controller.removeEventCallback(callbackId);
-    }
-    /**
-     * Registers a callback to receive performance events.
-     *
-     * @param {PerformanceCallbackFunction} callback
-     * @returns {string}
-     */
-    addPerformanceCallback(callback) {
-        return this.controller.addPerformanceCallback(callback);
-    }
-    /**
-     * Removes a callback registered with addPerformanceCallback.
-     *
-     * @param {string} callbackId
-     * @returns {boolean}
-     */
-    removePerformanceCallback(callbackId) {
-        return this.controller.removePerformanceCallback(callbackId);
-    }
-    /**
-     * Returns the first account found in the cache that matches the account filter passed in.
-     * @param accountFilter
-     * @returns The first account found in the cache matching the provided filter or null if no account could be found.
-     */
-    getAccount(accountFilter) {
-        return this.controller.getAccount(accountFilter);
-    }
-    /**
-     * Returns all the accounts in the cache that match the optional filter. If no filter is provided, all accounts are returned.
-     * @param accountFilter - (Optional) filter to narrow down the accounts returned
-     * @returns Array of AccountInfo objects in cache
-     */
-    getAllAccounts(accountFilter) {
-        return this.controller.getAllAccounts(accountFilter);
-    }
-    /**
-     * Event handler function which allows users to fire events after the PublicClientApplication object
-     * has loaded during redirect flows. This should be invoked on all page loads involved in redirect
-     * auth flows.
-     * @param hash Hash to process. Defaults to the current value of window.location.hash. Only needs to be provided explicitly if the response to be handled is not contained in the current value.
-     * @returns Token response or null. If the return value is null, then no auth redirect was detected.
-     */
-    handleRedirectPromise(options) {
-        return this.controller.handleRedirectPromise(options);
-    }
-    /**
-     * Use when initiating the login process via opening a popup window in the user's browser
-     *
-     * @param request
-     *
-     * @returns A promise that is fulfilled when this function has completed, or rejected if an error was raised.
-     */
-    loginPopup(request) {
-        return this.controller.loginPopup(request);
-    }
-    /**
-     * Use when initiating the login process by redirecting the user's browser to the authorization endpoint. This function redirects the page, so
-     * any code that follows this function will not execute.
-     *
-     * IMPORTANT: It is NOT recommended to have code that is dependent on the resolution of the Promise. This function will navigate away from the current
-     * browser window. It currently returns a Promise in order to reflect the asynchronous nature of the code running in this function.
-     *
-     * @param request
-     */
-    loginRedirect(request) {
-        return this.controller.loginRedirect(request);
-    }
-    /**
-     * Use to log out the current user, and redirect the user to the postLogoutRedirectUri.
-     * Default behaviour is to redirect the user to `window.location.href`.
-     * @param logoutRequest
-     */
-    logoutRedirect(logoutRequest) {
-        return this.controller.logoutRedirect(logoutRequest);
-    }
-    /**
-     * Clears local cache for the current user then opens a popup window prompting the user to sign-out of the server
-     * @param logoutRequest
-     */
-    logoutPopup(logoutRequest) {
-        return this.controller.logoutPopup(logoutRequest);
-    }
-    /**
-     * This function uses a hidden iframe to fetch an authorization code from the eSTS. There are cases where this may not work:
-     * - Any browser using a form of Intelligent Tracking Prevention
-     * - If there is not an established session with the service
-     *
-     * In these cases, the request must be done inside a popup or full frame redirect.
-     *
-     * For the cases where interaction is required, you cannot send a request with prompt=none.
-     *
-     * If your refresh token has expired, you can use this function to fetch a new set of tokens silently as long as
-     * you session on the server still exists.
-     * @param request {@link SsoSilentRequest}
-     *
-     * @returns A promise that is fulfilled when this function has completed, or rejected if an error was raised.
-     */
-    ssoSilent(request) {
-        return this.controller.ssoSilent(request);
-    }
-    /**
-     * Returns the logger instance
-     */
-    getLogger() {
-        return this.controller.getLogger();
-    }
-    /**
-     * Replaces the default logger set in configurations with new Logger with new configurations
-     * @param logger Logger instance
-     */
-    setLogger(logger) {
-        this.controller.setLogger(logger);
-    }
-    /**
-     * Sets the account to use as the active account. If no account is passed to the acquireToken APIs, then MSAL will use this active account.
-     * @param account
-     */
-    setActiveAccount(account) {
-        this.controller.setActiveAccount(account);
-    }
-    /**
-     * Gets the currently active account
-     */
-    getActiveAccount() {
-        return this.controller.getActiveAccount();
-    }
-    /**
-     * Called by wrapper libraries (Angular & React) to set SKU and Version passed down to telemetry, logger, etc.
-     * @param sku
-     * @param version
-     */
-    initializeWrapperLibrary(sku, version) {
-        return this.controller.initializeWrapperLibrary(sku, version);
-    }
-    /**
-     * Sets navigation client
-     * @param navigationClient
-     */
-    setNavigationClient(navigationClient) {
-        this.controller.setNavigationClient(navigationClient);
-    }
-    /**
-     * Returns the configuration object
-     * @internal
-     */
-    getConfiguration() {
-        return this.controller.getConfiguration();
-    }
-    /**
-     * Hydrates cache with the tokens and account in the AuthenticationResult object
-     * @param result
-     * @param request - The request object that was used to obtain the AuthenticationResult
-     * @returns
-     */
-    async hydrateCache(result, request) {
-        return this.controller.hydrateCache(result, request);
-    }
-    /**
-     * Clears tokens and account from the browser cache.
-     * @param logoutRequest
-     */
-    clearCache(logoutRequest) {
-        return this.controller.clearCache(logoutRequest);
-    }
-}
-
-export { PublicClientNext };
-//# sourceMappingURL=PublicClientNext.mjs.map

package/dist/app/PublicClientNext.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"PublicClientNext.mjs","sources":["../../src/app/PublicClientNext.ts"],"sourcesContent":[null],"names":["ControllerFactory.createController"],"mappings":";;;;;;AAAA;;;AAGG;AAiCH;;;;;;;;;;AAUG;MACU,gBAAgB,CAAA;AAQlB,IAAA,aAAa,6BAA6B,CAC7C,aAA4B,EAAA;QAE5B,MAAM,UAAU,GAAG,MAAMA,gBAAkC,CACvD,aAAa,CAChB,CAAC;AACF,QAAA,IAAI,GAAG,CAAC;QACR,IAAI,UAAU,KAAK,IAAI,EAAE;YACrB,GAAG,GAAG,IAAI,gBAAgB,CAAC,aAAa,EAAE,UAAU,CAAC,CAAC;AACzD,QAAA,CAAA;AAAM,aAAA;AACH,YAAA,GAAG,GAAG,IAAI,gBAAgB,CAAC,aAAa,CAAC,CAAC;AAC7C,QAAA,CAAA;AACD,QAAA,OAAO,GAAG,CAAC;IACf,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;AAqBG;IACH,WAAA,CACI,aAA4B,EAC5B,UAAwB,EAAA;AAExB,QAAA,IAAI,CAAC,aAAa,GAAG,aAAa,CAAC;AACnC,QAAA,IAAI,UAAU,EAAE;AACZ,YAAA,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;AAChC,QAAA,CAAA;AAAM,aAAA;AACH,YAAA,MAAM,gBAAgB,GAAG,IAAI,uBAAuB,CAAC,aAAa,CAAC,CAAC;YACpE,IAAI,CAAC,UAAU,GAAG,IAAI,iCAAiC,CACnD,gBAAgB,CACnB,CAAC;AACL,QAAA,CAAA;IACL,CAAC;AAED;;AAEG;AACH,IAAA,MAAM,UAAU,GAAA;AACZ,QAAA,IAAI,IAAI,CAAC,UAAU,YAAY,iCAAiC,EAAE;YAC9D,MAAM,MAAM,GAAG,MAAMA,gBAAkC,CACnD,IAAI,CAAC,aAAa,CACrB,CAAC;YACF,IAAI,MAAM,KAAK,IAAI,EAAE;AACjB,gBAAA,IAAI,CAAC,UAAU,GAAG,MAAM,CAAC;AAC5B,YAAA,CAAA;AACD,YAAA,OAAO,IAAI,CAAC,UAAU,CAAC,UAAU,EAAE,CAAC;AACvC,QAAA,CAAA;AACD,QAAA,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;IAC7B,CAAC;AAED;;;;;;AAMG;IACH,MAAM,iBAAiB,CACnB,OAAqB,EAAA;QAErB,OAAO,IAAI,CAAC,UAAU,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC;IACtD,CAAC;AAED;;;;;;;;AAQG;AACH,IAAA,oBAAoB,CAAC,OAAwB,EAAA;QACzC,OAAO,IAAI,CAAC,UAAU,CAAC,oBAAoB,CAAC,OAAO,CAAC,CAAC;IACzD,CAAC;AAED;;;;;AAKG;AACH,IAAA,kBAAkB,CACd,aAA4B,EAAA;QAE5B,OAAO,IAAI,CAAC,UAAU,CAAC,kBAAkB,CAAC,aAAa,CAAC,CAAC;IAC7D,CAAC;AAED;;;;;;;;;AASG;AACH,IAAA,kBAAkB,CACd,OAAiC,EAAA;QAEjC,OAAO,IAAI,CAAC,UAAU,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC;IACvD,CAAC;AAED;;;AAGG;IACH,gBAAgB,CACZ,QAA+B,EAC/B,UAA6B,EAAA;QAE7B,OAAO,IAAI,CAAC,UAAU,CAAC,gBAAgB,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;IAClE,CAAC;AAED;;;AAGG;AACH,IAAA,mBAAmB,CAAC,UAAkB,EAAA;QAClC,OAAO,IAAI,CAAC,UAAU,CAAC,mBAAmB,CAAC,UAAU,CAAC,CAAC;IAC3D,CAAC;AAED;;;;;AAKG;AACH,IAAA,sBAAsB,CAAC,QAAqC,EAAA;QACxD,OAAO,IAAI,CAAC,UAAU,CAAC,sBAAsB,CAAC,QAAQ,CAAC,CAAC;IAC5D,CAAC;AAED;;;;;AAKG;AACH,IAAA,yBAAyB,CAAC,UAAkB,EAAA;QACxC,OAAO,IAAI,CAAC,UAAU,CAAC,yBAAyB,CAAC,UAAU,CAAC,CAAC;IACjE,CAAC;AAED;;;;AAIG;AACH,IAAA,UAAU,CAAC,aAA4B,EAAA;QACnC,OAAO,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;IACrD,CAAC;AAED;;;;AAIG;AACH,IAAA,cAAc,CAAC,aAA6B,EAAA;QACxC,OAAO,IAAI,CAAC,UAAU,CAAC,cAAc,CAAC,aAAa,CAAC,CAAC;IACzD,CAAC;AAED;;;;;;AAMG;AACH,IAAA,qBAAqB,CACjB,OAAsC,EAAA;QAEtC,OAAO,IAAI,CAAC,UAAU,CAAC,qBAAqB,CAAC,OAAO,CAAC,CAAC;IAC1D,CAAC;AAED;;;;;;AAMG;AACH,IAAA,UAAU,CACN,OAAkC,EAAA;QAElC,OAAO,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;IAC/C,CAAC;AAED;;;;;;;;AAQG;AACH,IAAA,aAAa,CAAC,OAAqC,EAAA;QAC/C,OAAO,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;IAClD,CAAC;AAED;;;;AAIG;AACH,IAAA,cAAc,CAAC,aAAiC,EAAA;QAC5C,OAAO,IAAI,CAAC,UAAU,CAAC,cAAc,CAAC,aAAa,CAAC,CAAC;IACzD,CAAC;AAED;;;AAGG;AACH,IAAA,WAAW,CAAC,aAAiC,EAAA;QACzC,OAAO,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,aAAa,CAAC,CAAC;IACtD,CAAC;AAED;;;;;;;;;;;;;;AAcG;AACH,IAAA,SAAS,CAAC,OAAyB,EAAA;QAC/B,OAAO,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;IAC9C,CAAC;AAED;;AAEG;IACH,SAAS,GAAA;AACL,QAAA,OAAO,IAAI,CAAC,UAAU,CAAC,SAAS,EAAE,CAAC;IACvC,CAAC;AAED;;;AAGG;AACH,IAAA,SAAS,CAAC,MAAc,EAAA;AACpB,QAAA,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IACtC,CAAC;AAED;;;AAGG;AACH,IAAA,gBAAgB,CAAC,OAA2B,EAAA;AACxC,QAAA,IAAI,CAAC,UAAU,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC;IAC9C,CAAC;AAED;;AAEG;IACH,gBAAgB,GAAA;AACZ,QAAA,OAAO,IAAI,CAAC,UAAU,CAAC,gBAAgB,EAAE,CAAC;IAC9C,CAAC;AAED;;;;AAIG;IACH,wBAAwB,CAAC,GAAe,EAAE,OAAe,EAAA;QACrD,OAAO,IAAI,CAAC,UAAU,CAAC,wBAAwB,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IAClE,CAAC;AAED;;;AAGG;AACH,IAAA,mBAAmB,CAAC,gBAAmC,EAAA;AACnD,QAAA,IAAI,CAAC,UAAU,CAAC,mBAAmB,CAAC,gBAAgB,CAAC,CAAC;IAC1D,CAAC;AAED;;;AAGG;IACH,gBAAgB,GAAA;AACZ,QAAA,OAAO,IAAI,CAAC,UAAU,CAAC,gBAAgB,EAAE,CAAC;IAC9C,CAAC;AAED;;;;;AAKG;AACH,IAAA,MAAM,YAAY,CACd,MAA4B,EAC5B,OAIkB,EAAA;QAElB,OAAO,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACzD,CAAC;AAED;;;AAGG;AACH,IAAA,UAAU,CAAC,aAAiC,EAAA;QACxC,OAAO,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;IACrD,CAAC;AACJ;;;;"}

package/dist/controllers/ControllerFactory.d.ts

@@ -1,6 +0,0 @@
-import { IController } from "./IController.js";
-import { Configuration } from "../config/Configuration.js";
-import { InitializeApplicationRequest } from "../request/InitializeApplicationRequest.js";
-export declare function createV3Controller(config: Configuration, request?: InitializeApplicationRequest): Promise<IController>;
-export declare function createController(config: Configuration, request?: InitializeApplicationRequest): Promise<IController | null>;
-//# sourceMappingURL=ControllerFactory.d.ts.map

package/dist/controllers/ControllerFactory.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"ControllerFactory.d.ts","sourceRoot":"","sources":["../../src/controllers/ControllerFactory.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAC/C,OAAO,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC;AAG3D,OAAO,EAAE,4BAA4B,EAAE,MAAM,4CAA4C,CAAC;AAG1F,wBAAsB,kBAAkB,CACpC,MAAM,EAAE,aAAa,EACrB,OAAO,CAAC,EAAE,4BAA4B,GACvC,OAAO,CAAC,WAAW,CAAC,CAMtB;AAED,wBAAsB,gBAAgB,CAClC,MAAM,EAAE,aAAa,EACrB,OAAO,CAAC,EAAE,4BAA4B,GACvC,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC,CAoB7B"}

package/dist/controllers/ControllerFactory.mjs

@@ -1,41 +0,0 @@
-/*! @azure/msal-browser v5.0.0-alpha.0 2025-10-02 */
-'use strict';
-import { NestedAppOperatingContext } from '../operatingcontext/NestedAppOperatingContext.mjs';
-import { StandardOperatingContext } from '../operatingcontext/StandardOperatingContext.mjs';
-import { StandardController } from './StandardController.mjs';
-import { NestedAppAuthController } from './NestedAppAuthController.mjs';
-import { createNewGuid } from '../crypto/BrowserCrypto.mjs';
-
-/*
- * Copyright (c) Microsoft Corporation. All rights reserved.
- * Licensed under the MIT License.
- */
-async function createV3Controller(config, request) {
-    const correlationId = createNewGuid();
-    const standard = new StandardOperatingContext(config);
-    await standard.initialize(correlationId);
-    return StandardController.createController(standard, { correlationId });
-}
-async function createController(config, request) {
-    const correlationId = createNewGuid();
-    const standard = new StandardOperatingContext(config);
-    const nestedApp = new NestedAppOperatingContext(config);
-    const operatingContexts = [
-        standard.initialize(correlationId),
-        nestedApp.initialize(correlationId),
-    ];
-    await Promise.all(operatingContexts);
-    if (nestedApp.isAvailable()) {
-        return NestedAppAuthController.createController(nestedApp);
-    }
-    else if (standard.isAvailable()) {
-        return StandardController.createController(standard, { correlationId });
-    }
-    else {
-        // Since neither of the actual operating contexts are available keep the UnknownOperatingContextController
-        return null;
-    }
-}
-
-export { createController, createV3Controller };
-//# sourceMappingURL=ControllerFactory.mjs.map

package/dist/controllers/ControllerFactory.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"ControllerFactory.mjs","sources":["../../src/controllers/ControllerFactory.ts"],"sourcesContent":[null],"names":[],"mappings":";;;;;;;;AAAA;;;AAGG;AAWI,eAAe,kBAAkB,CACpC,MAAqB,EACrB,OAAsC,EAAA;IAEtC,MAAM,aAAa,GAA6B,aAAa,EAAE,CAAC;AAChE,IAAA,MAAM,QAAQ,GAAG,IAAI,wBAAwB,CAAC,MAAM,CAAC,CAAC;AAEtD,IAAA,MAAM,QAAQ,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;IACzC,OAAO,kBAAkB,CAAC,gBAAgB,CAAC,QAAQ,EAAE,EAAE,aAAa,EAAE,CAAC,CAAC;AAC5E,CAAC;AAEM,eAAe,gBAAgB,CAClC,MAAqB,EACrB,OAAsC,EAAA;IAEtC,MAAM,aAAa,GAA6B,aAAa,EAAE,CAAC;AAChE,IAAA,MAAM,QAAQ,GAAG,IAAI,wBAAwB,CAAC,MAAM,CAAC,CAAC;AACtD,IAAA,MAAM,SAAS,GAAG,IAAI,yBAAyB,CAAC,MAAM,CAAC,CAAC;AAExD,IAAA,MAAM,iBAAiB,GAAG;AACtB,QAAA,QAAQ,CAAC,UAAU,CAAC,aAAa,CAAC;AAClC,QAAA,SAAS,CAAC,UAAU,CAAC,aAAa,CAAC;KACtC,CAAC;AAEF,IAAA,MAAM,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;AAErC,IAAA,IAAI,SAAS,CAAC,WAAW,EAAE,EAAE;AACzB,QAAA,OAAO,uBAAuB,CAAC,gBAAgB,CAAC,SAAS,CAAC,CAAC;AAC9D,IAAA,CAAA;AAAM,SAAA,IAAI,QAAQ,CAAC,WAAW,EAAE,EAAE;QAC/B,OAAO,kBAAkB,CAAC,gBAAgB,CAAC,QAAQ,EAAE,EAAE,aAAa,EAAE,CAAC,CAAC;AAC3E,IAAA,CAAA;AAAM,SAAA;;AAEH,QAAA,OAAO,IAAI,CAAC;AACf,IAAA,CAAA;AACL;;;;"}