@azure/msal-browser 5.13.0 → 5.15.0

package/package.json

@@ -10,7 +10,7 @@
     "type": "git",
     "url": "https://github.com/AzureAD/microsoft-authentication-library-for-js.git"
   },
-  "version": "5.13.0",
+  "version": "5.15.0",
   "description": "Microsoft Authentication Library for js",
   "keywords": [
     "implicit",
@@ -98,15 +98,14 @@
     "apiExtractor": "api-extractor run"
   },
   "devDependencies": {
-    "@azure/storage-blob": "^12.2.1",
     "@babel/core": "^7.7.2",
     "@babel/plugin-proposal-class-properties": "^7.7.0",
     "@babel/plugin-proposal-object-rest-spread": "^7.6.2",
     "@babel/preset-env": "^7.7.1",
     "@babel/preset-typescript": "^7.7.2",
-    "@microsoft/api-extractor": "^7.43.4",
+    "@microsoft/api-extractor": "^7.58.7",
     "@rollup/plugin-node-resolve": "^15.0.1",
-    "@rollup/plugin-terser": "^0.4.0",
+    "@rollup/plugin-terser": "^1.0.0",
     "@rollup/plugin-typescript": "^11.0.0",
     "@types/jest": "^29.5.0",
     "@types/node": "^20.3.1",
@@ -124,12 +123,12 @@
     "rollup-msal": "file:../../shared-configs/rollup-msal",
     "shx": "^0.3.2",
     "ssri": "^8.0.1",
-    "ts-jest": "^29.2.5",
+    "ts-jest": "^29.4.11",
     "ts-jest-resolver": "^2.0.1",
     "tslib": "^1.10.0",
     "typescript": "^4.9.5"
   },
   "dependencies": {
-    "@azure/msal-common": "16.8.0"
+    "@azure/msal-common": "16.10.0"
   }
 }

package/src/app/IPublicClientApplication.ts

@@ -81,35 +81,40 @@ export const stubbedPublicClientApplication: IPublicClientApplication = {
     initialize: () => {
         return Promise.reject(
             createBrowserConfigurationAuthError(
-                BrowserConfigurationAuthErrorCodes.stubbedPublicClientApplicationCalled
+                BrowserConfigurationAuthErrorCodes.stubbedPublicClientApplicationCalled,
+                ""
             )
         );
     },
     acquireTokenPopup: () => {
         return Promise.reject(
             createBrowserConfigurationAuthError(
-                BrowserConfigurationAuthErrorCodes.stubbedPublicClientApplicationCalled
+                BrowserConfigurationAuthErrorCodes.stubbedPublicClientApplicationCalled,
+                ""
             )
         );
     },
     acquireTokenRedirect: () => {
         return Promise.reject(
             createBrowserConfigurationAuthError(
-                BrowserConfigurationAuthErrorCodes.stubbedPublicClientApplicationCalled
+                BrowserConfigurationAuthErrorCodes.stubbedPublicClientApplicationCalled,
+                ""
             )
         );
     },
     acquireTokenSilent: () => {
         return Promise.reject(
             createBrowserConfigurationAuthError(
-                BrowserConfigurationAuthErrorCodes.stubbedPublicClientApplicationCalled
+                BrowserConfigurationAuthErrorCodes.stubbedPublicClientApplicationCalled,
+                ""
             )
         );
     },
     acquireTokenByCode: () => {
         return Promise.reject(
             createBrowserConfigurationAuthError(
-                BrowserConfigurationAuthErrorCodes.stubbedPublicClientApplicationCalled
+                BrowserConfigurationAuthErrorCodes.stubbedPublicClientApplicationCalled,
+                ""
             )
         );
     },
@@ -122,42 +127,48 @@ export const stubbedPublicClientApplication: IPublicClientApplication = {
     handleRedirectPromise: () => {
         return Promise.reject(
             createBrowserConfigurationAuthError(
-                BrowserConfigurationAuthErrorCodes.stubbedPublicClientApplicationCalled
+                BrowserConfigurationAuthErrorCodes.stubbedPublicClientApplicationCalled,
+                ""
             )
         );
     },
     loginPopup: () => {
         return Promise.reject(
             createBrowserConfigurationAuthError(
-                BrowserConfigurationAuthErrorCodes.stubbedPublicClientApplicationCalled
+                BrowserConfigurationAuthErrorCodes.stubbedPublicClientApplicationCalled,
+                ""
             )
         );
     },
     loginRedirect: () => {
         return Promise.reject(
             createBrowserConfigurationAuthError(
-                BrowserConfigurationAuthErrorCodes.stubbedPublicClientApplicationCalled
+                BrowserConfigurationAuthErrorCodes.stubbedPublicClientApplicationCalled,
+                ""
             )
         );
     },
     logoutRedirect: () => {
         return Promise.reject(
             createBrowserConfigurationAuthError(
-                BrowserConfigurationAuthErrorCodes.stubbedPublicClientApplicationCalled
+                BrowserConfigurationAuthErrorCodes.stubbedPublicClientApplicationCalled,
+                ""
             )
         );
     },
     logoutPopup: () => {
         return Promise.reject(
             createBrowserConfigurationAuthError(
-                BrowserConfigurationAuthErrorCodes.stubbedPublicClientApplicationCalled
+                BrowserConfigurationAuthErrorCodes.stubbedPublicClientApplicationCalled,
+                ""
             )
         );
     },
     ssoSilent: () => {
         return Promise.reject(
             createBrowserConfigurationAuthError(
-                BrowserConfigurationAuthErrorCodes.stubbedPublicClientApplicationCalled
+                BrowserConfigurationAuthErrorCodes.stubbedPublicClientApplicationCalled,
+                ""
             )
         );
     },
@@ -175,7 +186,8 @@ export const stubbedPublicClientApplication: IPublicClientApplication = {
     },
     getLogger: () => {
         throw createBrowserConfigurationAuthError(
-            BrowserConfigurationAuthErrorCodes.stubbedPublicClientApplicationCalled
+            BrowserConfigurationAuthErrorCodes.stubbedPublicClientApplicationCalled,
+            ""
         );
     },
     setLogger: () => {
@@ -195,20 +207,23 @@ export const stubbedPublicClientApplication: IPublicClientApplication = {
     },
     getConfiguration: () => {
         throw createBrowserConfigurationAuthError(
-            BrowserConfigurationAuthErrorCodes.stubbedPublicClientApplicationCalled
+            BrowserConfigurationAuthErrorCodes.stubbedPublicClientApplicationCalled,
+            ""
         );
     },
     hydrateCache: () => {
         return Promise.reject(
             createBrowserConfigurationAuthError(
-                BrowserConfigurationAuthErrorCodes.stubbedPublicClientApplicationCalled
+                BrowserConfigurationAuthErrorCodes.stubbedPublicClientApplicationCalled,
+                ""
             )
         );
     },
     clearCache: () => {
         return Promise.reject(
             createBrowserConfigurationAuthError(
-                BrowserConfigurationAuthErrorCodes.stubbedPublicClientApplicationCalled
+                BrowserConfigurationAuthErrorCodes.stubbedPublicClientApplicationCalled,
+                ""
             )
         );
     },

package/src/broker/nativeBroker/PlatformAuthDOMHandler.ts

@@ -208,6 +208,7 @@ export class PlatformAuthDOMHandler implements IPlatformAuthHandler {
                     );
                     throw createNativeAuthError(
                         errorResponse.error.code,
+                        correlationId,
                         errorResponse.error.description,
                         {
                             error: parseInt(errorResponse.error.errorCode),
@@ -221,6 +222,7 @@ export class PlatformAuthDOMHandler implements IPlatformAuthHandler {
         }
         throw createAuthError(
             AuthErrorCodes.unexpectedError,
+            correlationId,
             "Response missing expected properties."
         );
     }

package/src/broker/nativeBroker/PlatformAuthExtensionHandler.ts

@@ -211,7 +211,8 @@ export class PlatformAuthExtensionHandler implements IPlatformAuthHandler {
                 });
                 reject(
                     createBrowserAuthError(
-                        BrowserAuthErrorCodes.nativeHandshakeTimeout
+                        BrowserAuthErrorCodes.nativeHandshakeTimeout,
+                        ""
                     )
                 );
                 this.handshakeResolvers.delete(req.responseId);
@@ -280,7 +281,8 @@ export class PlatformAuthExtensionHandler implements IPlatformAuthHandler {
             });
             handshakeResolver.reject(
                 createBrowserAuthError(
-                    BrowserAuthErrorCodes.nativeExtensionNotInstalled
+                    BrowserAuthErrorCodes.nativeExtensionNotInstalled,
+                    ""
                 )
             );
         }
@@ -327,6 +329,7 @@ export class PlatformAuthExtensionHandler implements IPlatformAuthHandler {
                     resolver.reject(
                         createNativeAuthError(
                             response.code,
+                            correlationId,
                             response.description,
                             response.ext
                         )
@@ -339,6 +342,7 @@ export class PlatformAuthExtensionHandler implements IPlatformAuthHandler {
                         resolver.reject(
                             createNativeAuthError(
                                 response.result["code"],
+                                correlationId,
                                 response.result["description"],
                                 response.result["ext"]
                             )
@@ -349,6 +353,7 @@ export class PlatformAuthExtensionHandler implements IPlatformAuthHandler {
                 } else {
                     throw createAuthError(
                         AuthErrorCodes.unexpectedError,
+                        correlationId,
                         "Event does not contain result."
                     );
                 }
@@ -420,6 +425,7 @@ export class PlatformAuthExtensionHandler implements IPlatformAuthHandler {
         } else {
             throw createAuthError(
                 AuthErrorCodes.unexpectedError,
+                "",
                 "Response missing expected properties."
             );
         }

package/src/broker/nativeBroker/PlatformAuthProvider.ts

@@ -128,7 +128,8 @@ export function isPlatformAuthAllowed(
         config.experimental.allowPlatformBrokerWithDOM
     ) {
         throw createClientConfigurationError(
-            ClientConfigurationErrorCodes.invalidPlatformBrokerConfiguration
+            ClientConfigurationErrorCodes.invalidPlatformBrokerConfiguration,
+            ""
         );
     }
 

package/src/cache/BrowserCacheManager.ts

@@ -446,7 +446,8 @@ export class BrowserCacheManager extends CacheManager {
                 const idToken = JSON.parse(rawValue) as IdTokenEntity;
                 const claims = AuthToken.extractTokenClaims(
                     idToken.secret,
-                    base64Decode
+                    base64Decode,
+                    ""
                 );
                 if (claims) {
                     kmsiMap[idToken.homeAccountId] = AuthToken.isKmsi(claims);
@@ -561,7 +562,8 @@ export class BrowserCacheManager extends CacheManager {
 
             const claims = AuthToken.extractTokenClaims(
                 oldSchemaData.secret,
-                base64Decode
+                base64Decode,
+                correlationId
             );
 
             const newIdTokenKey = this.generateCredentialKey(oldSchemaData);
@@ -576,7 +578,8 @@ export class BrowserCacheManager extends CacheManager {
                 Object.keys(
                     AuthToken.extractTokenClaims(
                         currentIdToken.secret,
-                        base64Decode
+                        base64Decode,
+                        correlationId
                     ) || {}
                 ).includes("signin_state");
 
@@ -603,6 +606,7 @@ export class BrowserCacheManager extends CacheManager {
                         account.homeAccountId,
                         account.localAccountId,
                         tenantId,
+                        account.nativeAccountId,
                         claims
                     );
                     tenantProfiles.push(newTenantProfile);
@@ -2236,7 +2240,8 @@ export class BrowserCacheManager extends CacheManager {
         );
         if (!encodedTokenRequest) {
             throw createBrowserAuthError(
-                BrowserAuthErrorCodes.noTokenRequestCacheError
+                BrowserAuthErrorCodes.noTokenRequestCacheError,
+                ""
             );
         }
         const encodedVerifier = this.getTemporaryCache(
@@ -2262,7 +2267,8 @@ export class BrowserCacheManager extends CacheManager {
                 correlationId
             );
             throw createBrowserAuthError(
-                BrowserAuthErrorCodes.unableToParseTokenRequestCacheError
+                BrowserAuthErrorCodes.unableToParseTokenRequestCacheError,
+                ""
             );
         }
 
@@ -2363,7 +2369,8 @@ export class BrowserCacheManager extends CacheManager {
                     this.removeTemporaryItem(key);
                 } else {
                     throw createBrowserAuthError(
-                        BrowserAuthErrorCodes.interactionInProgress
+                        BrowserAuthErrorCodes.interactionInProgress,
+                        ""
                     );
                 }
             }
@@ -2425,6 +2432,7 @@ export class BrowserCacheManager extends CacheManager {
                 ? TimeUtils.toSecondsFromDate(result.extExpiresOn)
                 : 0,
             base64Decode,
+            request.correlationId || "",
             undefined, // refreshOn
             result.tokenType as Constants.AuthenticationScheme,
             undefined, // userAssertionHash
@@ -2443,7 +2451,11 @@ export class BrowserCacheManager extends CacheManager {
             cacheRecord,
             result.correlationId,
             AuthToken.isKmsi(
-                AuthToken.extractTokenClaims(result.idToken, base64Decode)
+                AuthToken.extractTokenClaims(
+                    result.idToken,
+                    base64Decode,
+                    result.correlationId
+                )
             ),
             ApiId.hydrateCache
         );

package/src/cache/CookieStorage.ts

@@ -46,7 +46,10 @@ export class CookieStorage implements IWindowStorage<string> {
     }
 
     getUserData(): string | null {
-        throw createClientAuthError(ClientAuthErrorCodes.methodNotImplemented);
+        throw createClientAuthError(
+            ClientAuthErrorCodes.methodNotImplemented,
+            ""
+        );
     }
 
     setItem(
@@ -73,9 +76,16 @@ export class CookieStorage implements IWindowStorage<string> {
         document.cookie = cookieStr;
     }
 
-    async setUserData(): Promise<void> {
+    async setUserData(
+        _key: string,
+        _value: string,
+        correlationId: string
+    ): Promise<void> {
         return Promise.reject(
-            createClientAuthError(ClientAuthErrorCodes.methodNotImplemented)
+            createClientAuthError(
+                ClientAuthErrorCodes.methodNotImplemented,
+                correlationId
+            )
         );
     }
 

package/src/cache/DatabaseStorage.ts

@@ -65,7 +65,8 @@ export class DatabaseStorage<T> implements IAsyncStorage<T> {
             openDB.addEventListener("error", () =>
                 reject(
                     createBrowserAuthError(
-                        BrowserAuthErrorCodes.databaseUnavailable
+                        BrowserAuthErrorCodes.databaseUnavailable,
+                        ""
                     )
                 )
             );
@@ -104,7 +105,8 @@ export class DatabaseStorage<T> implements IAsyncStorage<T> {
             if (!this.db) {
                 return reject(
                     createBrowserAuthError(
-                        BrowserAuthErrorCodes.databaseNotOpen
+                        BrowserAuthErrorCodes.databaseNotOpen,
+                        ""
                     )
                 );
             }
@@ -140,7 +142,8 @@ export class DatabaseStorage<T> implements IAsyncStorage<T> {
             if (!this.db) {
                 return reject(
                     createBrowserAuthError(
-                        BrowserAuthErrorCodes.databaseNotOpen
+                        BrowserAuthErrorCodes.databaseNotOpen,
+                        ""
                     )
                 );
             }
@@ -175,7 +178,8 @@ export class DatabaseStorage<T> implements IAsyncStorage<T> {
             if (!this.db) {
                 return reject(
                     createBrowserAuthError(
-                        BrowserAuthErrorCodes.databaseNotOpen
+                        BrowserAuthErrorCodes.databaseNotOpen,
+                        ""
                     )
                 );
             }
@@ -208,7 +212,8 @@ export class DatabaseStorage<T> implements IAsyncStorage<T> {
             if (!this.db) {
                 return reject(
                     createBrowserAuthError(
-                        BrowserAuthErrorCodes.databaseNotOpen
+                        BrowserAuthErrorCodes.databaseNotOpen,
+                        ""
                     )
                 );
             }
@@ -244,7 +249,8 @@ export class DatabaseStorage<T> implements IAsyncStorage<T> {
             if (!this.db) {
                 return reject(
                     createBrowserAuthError(
-                        BrowserAuthErrorCodes.databaseNotOpen
+                        BrowserAuthErrorCodes.databaseNotOpen,
+                        ""
                     )
                 );
             }

package/src/cache/LocalStorage.ts

@@ -60,7 +60,8 @@ export class LocalStorage implements IWindowStorage<string> {
     ) {
         if (!window.localStorage) {
             throw createBrowserConfigurationAuthError(
-                BrowserConfigurationAuthErrorCodes.storageNotSupported
+                BrowserConfigurationAuthErrorCodes.storageNotSupported,
+                ""
             );
         }
         this.memoryStorage = new MemoryStorage<string>();
@@ -164,7 +165,8 @@ export class LocalStorage implements IWindowStorage<string> {
     getUserData(key: string): string | null {
         if (!this.initialized) {
             throw createBrowserAuthError(
-                BrowserAuthErrorCodes.uninitializedPublicClientApplication
+                BrowserAuthErrorCodes.uninitializedPublicClientApplication,
+                ""
             );
         }
         return this.memoryStorage.getItem(key);
@@ -177,7 +179,8 @@ export class LocalStorage implements IWindowStorage<string> {
     ): Promise<object | null> {
         if (!this.initialized || !this.encryptionCookie) {
             throw createBrowserAuthError(
-                BrowserAuthErrorCodes.uninitializedPublicClientApplication
+                BrowserAuthErrorCodes.uninitializedPublicClientApplication,
+                ""
             );
         }
 
@@ -234,7 +237,8 @@ export class LocalStorage implements IWindowStorage<string> {
     ): Promise<void> {
         if (!this.initialized || !this.encryptionCookie) {
             throw createBrowserAuthError(
-                BrowserAuthErrorCodes.uninitializedPublicClientApplication
+                BrowserAuthErrorCodes.uninitializedPublicClientApplication,
+                ""
             );
         }
 

package/src/cache/SessionStorage.ts

@@ -13,7 +13,8 @@ export class SessionStorage implements IWindowStorage<string> {
     constructor() {
         if (!window.sessionStorage) {
             throw createBrowserConfigurationAuthError(
-                BrowserConfigurationAuthErrorCodes.storageNotSupported
+                BrowserConfigurationAuthErrorCodes.storageNotSupported,
+                ""
             );
         }
     }

package/src/cache/TokenCache.ts

@@ -43,6 +43,7 @@ import * as BrowserRootPerformanceEvents from "../telemetry/BrowserRootPerforman
 import { ApiId } from "../utils/BrowserConstants.js";
 import * as BrowserUtils from "../utils/BrowserUtils.js";
 import { BrowserCacheManager } from "./BrowserCacheManager.js";
+import { name, version } from "../packageMetadata.js";
 
 export type LoadTokenOptions = {
     clientInfo?: string;
@@ -80,7 +81,11 @@ export async function loadExternalTokens(
 
     try {
         const idTokenClaims = response.id_token
-            ? AuthToken.extractTokenClaims(response.id_token, base64Decode)
+            ? AuthToken.extractTokenClaims(
+                  response.id_token,
+                  base64Decode,
+                  correlationId
+              )
             : undefined;
         const kmsi = AuthToken.isKmsi(idTokenClaims || {});
 
@@ -91,7 +96,11 @@ export async function loadExternalTokens(
             authorityMetadata: browserConfig.auth.authorityMetadata,
         };
 
-        const logger = new Logger(browserConfig.system.loggerOptions || {});
+        const logger = new Logger(
+            browserConfig.system.loggerOptions || {},
+            name,
+            version
+        );
         const cryptoOps = new CryptoOps(logger, browserConfig.telemetry.client);
         const storage = new BrowserCacheManager(
             browserConfig.auth.clientId,
@@ -102,6 +111,7 @@ export async function loadExternalTokens(
             new EventHandler(logger),
             buildStaticAuthorityOptions(browserConfig.auth)
         );
+        await storage.initialize(correlationId);
 
         const authorityString =
             request.authority || browserConfig.auth.authority;
@@ -254,7 +264,10 @@ async function loadAccount(
             "TokenCache - if an account is not provided on the request, clientInfo or idToken must be provided instead.",
             correlationId
         );
-        throw createBrowserAuthError(BrowserAuthErrorCodes.unableToLoadToken);
+        throw createBrowserAuthError(
+            BrowserAuthErrorCodes.unableToLoadToken,
+            ""
+        );
     }
 
     const homeAccountId = AccountEntityUtils.generateHomeAccountId(
@@ -378,8 +391,8 @@ async function loadAccessToken(
     logger.verbose("TokenCache - loading access token", correlationId);
 
     const scopes = response.scope
-        ? ScopeSet.fromString(response.scope)
-        : new ScopeSet(request.scopes);
+        ? ScopeSet.fromString(response.scope, correlationId)
+        : new ScopeSet(request.scopes, correlationId);
     const expiresOn =
         options.expiresOn || response.expires_in + TimeUtils.nowSeconds();
 
@@ -397,7 +410,8 @@ async function loadAccessToken(
         scopes.printScopes(),
         expiresOn,
         extendedExpiresOn,
-        base64Decode
+        base64Decode,
+        correlationId
     );
 
     await storage.setAccessTokenCredential(
@@ -486,7 +500,8 @@ function generateAuthenticationResult(
     if (cacheRecord?.accessToken) {
         accessToken = cacheRecord.accessToken.secret;
         responseScopes = ScopeSet.fromString(
-            cacheRecord.accessToken.target
+            cacheRecord.accessToken.target,
+            request.correlationId || ""
         ).asArray();
         // Access token expiresOn stored in seconds, converting to Date for AuthenticationResult
         expiresOn = TimeUtils.toDateFromSeconds(

package/src/config/Configuration.ts

@@ -26,6 +26,7 @@ import { BrowserCacheLocation } from "../utils/BrowserConstants.js";
 import { INavigationClient } from "../navigation/INavigationClient.js";
 import { NavigationClient } from "../navigation/NavigationClient.js";
 import { FetchClient } from "../network/FetchClient.js";
+import { name, version } from "../packageMetadata.js";
 
 // Default timeout for popup windows and iframes in milliseconds
 export const DEFAULT_POPUP_TIMEOUT_MS = 60000;
@@ -174,7 +175,11 @@ export type BrowserSystemOptions = SystemOptions & {
     serverTelemetryEnabled?: boolean;
 };
 
-/** @internal */
+/**
+ * Options for configuring experimental features. These features do not follow
+ * semver and may be changed or removed without a major version bump. Use with caution.
+ * @public
+ */
 export type BrowserExperimentalOptions = {
     /**
      * Enables iframe timeout telemetry experiment for silent iframe bridge monitoring.
@@ -347,11 +352,16 @@ export function buildConfiguration(
         userInputSystem?.protocolMode !== ProtocolMode.OIDC &&
         userInputAuth?.OIDCOptions
     ) {
-        const logger = new Logger(providedSystemOptions.loggerOptions);
+        const logger = new Logger(
+            providedSystemOptions.loggerOptions,
+            name,
+            version
+        );
         logger.warning(
             JSON.stringify(
                 createClientConfigurationError(
-                    ClientConfigurationErrorCodes.cannotSetOIDCOptions
+                    ClientConfigurationErrorCodes.cannotSetOIDCOptions,
+                    ""
                 )
             ),
             ""
@@ -365,7 +375,8 @@ export function buildConfiguration(
         providedSystemOptions?.allowPlatformBroker
     ) {
         throw createClientConfigurationError(
-            ClientConfigurationErrorCodes.cannotAllowPlatformBroker
+            ClientConfigurationErrorCodes.cannotAllowPlatformBroker,
+            ""
         );
     }