@azure/msal-browser 5.16.0 → 5.17.0

package/src/protocol/Authorize.ts

@@ -271,17 +271,22 @@ export async function getAuthCodeRequestUrl(
     return AuthorizeProtocol.getAuthorizeUrl(authority, parameters);
 }
 
+/** Action URL + POST-body fields for a /authorize form submission. */
+export type AuthorizeFormData = {
+    action: string;
+    fields: Record<string, string>;
+};
+
 /**
- * Gets the form that will be posted to /authorize with request parameters when using EAR
+ * Builds the action URL + POST-body fields for the EAR /authorize form.
  */
-export async function getEARForm(
-    frame: Document,
+export async function getEARFormData(
     config: BrowserConfiguration,
     authority: Authority,
     request: CommonAuthorizationUrlRequest,
     logger: Logger,
     performanceClient: IPerformanceClient
-): Promise<HTMLFormElement> {
+): Promise<AuthorizeFormData> {
     if (!request.earJwk) {
         throw createBrowserAuthError(
             BrowserAuthErrorCodes.earJwkEmpty,
@@ -326,15 +331,15 @@ export async function getEARForm(
         request.correlationId
     );
 
-    const url = AuthorizeProtocol.getAuthorizeUrl(authority, queryParams);
+    const action = AuthorizeProtocol.getAuthorizeUrl(authority, queryParams);
 
-    return createForm(frame, url, parameters);
+    return { action, fields: Object.fromEntries(parameters) };
 }
 
 /**
- * Gets the form that will be posted to /authorize with request parameters when using POST method
+ * Gets the form that will be posted to /authorize with request parameters when using EAR
  */
-export async function getCodeForm(
+export async function getEARForm(
     frame: Document,
     config: BrowserConfiguration,
     authority: Authority,
@@ -342,6 +347,26 @@ export async function getCodeForm(
     logger: Logger,
     performanceClient: IPerformanceClient
 ): Promise<HTMLFormElement> {
+    const { action, fields } = await getEARFormData(
+        config,
+        authority,
+        request,
+        logger,
+        performanceClient
+    );
+    return createForm(frame, action, fields);
+}
+
+/**
+ * Builds the action URL + POST-body fields for the auth-code /authorize form.
+ */
+export async function getCodeFormData(
+    config: BrowserConfiguration,
+    authority: Authority,
+    request: CommonAuthorizationUrlRequest,
+    logger: Logger,
+    performanceClient: IPerformanceClient
+): Promise<AuthorizeFormData> {
     const parameters = await getStandardParameters(
         config,
         authority,
@@ -379,34 +404,58 @@ export async function getCodeForm(
         request.correlationId
     );
 
-    const url = AuthorizeProtocol.getAuthorizeUrl(authority, queryParams);
+    const action = AuthorizeProtocol.getAuthorizeUrl(authority, queryParams);
 
-    return createForm(frame, url, parameters);
+    return { action, fields: Object.fromEntries(parameters) };
 }
 
 /**
- * Creates form element in the provided document with auth parameters in the post body
- * @param frame
- * @param authorizeUrl
- * @param parameters
- * @returns
+ * Gets the form that will be posted to /authorize with request parameters when using POST method
+ */
+export async function getCodeForm(
+    frame: Document,
+    config: BrowserConfiguration,
+    authority: Authority,
+    request: CommonAuthorizationUrlRequest,
+    logger: Logger,
+    performanceClient: IPerformanceClient
+): Promise<HTMLFormElement> {
+    const { action, fields } = await getCodeFormData(
+        config,
+        authority,
+        request,
+        logger,
+        performanceClient
+    );
+    return createForm(frame, action, fields);
+}
+
+/**
+ * Creates a POST `<form>` in the provided document with the given auth
+ * parameters as hidden inputs, targeting `action`. Shared by the popup auth
+ * flows (`getEARForm` / `getCodeForm`) and the popup-relay page
+ * (`runPopupRelay`) so the form is built one way only.
+ *
+ * @param frame - document to create the form in
+ * @param action - form action (the /authorize URL)
+ * @param fields - POST-body fields
+ * @internal
  */
-function createForm(
+export function createForm(
     frame: Document,
-    authorizeUrl: string,
-    parameters: Map<string, string>
+    action: string,
+    fields: Record<string, string>
 ): HTMLFormElement {
     const form = frame.createElement("form");
     form.method = "post";
-    form.action = authorizeUrl;
-
-    parameters.forEach((value: string, key: string) => {
-        const param = frame.createElement("input");
-        param.hidden = true;
-        param.name = key;
-        param.value = value;
-
-        form.appendChild(param);
+    form.action = action;
+
+    Object.keys(fields).forEach((name) => {
+        const input = frame.createElement("input");
+        input.hidden = true;
+        input.name = name;
+        input.value = fields[name];
+        form.appendChild(input);
     });
 
     frame.body.appendChild(form);

package/types/config/Configuration.d.ts

@@ -37,6 +37,22 @@ export type BrowserAuthOptions = {
      * The redirect URI where the window navigates after a successful logout.
      */
     postLogoutRedirectUri?: string | null;
+    /**
+     * URI of a first-party, top-level "popup-relay" page used to acquire tokens
+     * interactively from inside a cross-origin iframe that an untrusted host has
+     * embedded (where third-party storage partitioning and COOP break the normal
+     * popup flow). When set, `acquireTokenPopup` opens this page top-level
+     * instead of navigating the popup straight to the IdP, and the page must call
+     * `runPopupRelay()`. Resolved relative to the app origin, so it must be
+     * same-origin as the embedded frame.
+     *
+     * This is a browser SPA-only mechanism (`PublicClientApplication` in
+     * `@azure/msal-browser`): it brokers the standard interactive popup
+     * auth-code flow through a same-origin page. It does not apply to native
+     * app, platform broker (WAM), Nested App Auth, or confidential-client /
+     * server-side scenarios.
+     */
+    popupRelayUri?: string;
     /**
      * Array of capabilities which will be added to the claims.access_token.xms_cc request property on every network request.
      */

package/types/config/Configuration.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"Configuration.d.ts","sourceRoot":"","sources":["../../src/config/Configuration.ts"],"names":[],"mappings":"AAKA,OAAO,EACH,aAAa,EACb,aAAa,EACb,cAAc,EAEd,YAAY,EACZ,WAAW,EAIX,iBAAiB,EACjB,oBAAoB,EAGpB,kBAAkB,EAIrB,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAC;AACpE,OAAO,EAAE,iBAAiB,EAAE,MAAM,oCAAoC,CAAC;AAMvE,eAAO,MAAM,wBAAwB,QAAQ,CAAC;AAC9C,eAAO,MAAM,yBAAyB,QAAQ,CAAC;AAC/C,eAAO,MAAM,2BAA2B,QAAQ,CAAC;AACjD,eAAO,MAAM,0CAA0C,OAAO,CAAC;AAE/D;;GAEG;AACH,MAAM,MAAM,kBAAkB,GAAG;IAC7B;;OAEG;IACH,QAAQ,EAAE,MAAM,CAAC;IACjB;;OAEG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;OAEG;IACH,gBAAgB,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IACjC;;OAEG;IACH,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC;;OAEG;IACH,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B;;OAEG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;OAEG;IACH,qBAAqB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAEtC;;OAEG;IACH,kBAAkB,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IACnC;;OAEG;IACH,WAAW,CAAC,EAAE,WAAW,CAAC;IAC1B;;OAEG;IACH,iBAAiB,CAAC,EAAE,iBAAiB,CAAC;IACtC;;OAEG;IACH,kBAAkB,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,GAAG,IAAI,CAAC;IACrD;;OAEG;IACH,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB;;OAEG;IACH,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB;;;;;OAKG;IACH,SAAS,CAAC,EAAE,OAAO,CAAC;CACvB,CAAC;AAEF,gBAAgB;AAChB,MAAM,MAAM,mBAAmB,GAAG,IAAI,CAClC,QAAQ,CAAC,kBAAkB,CAAC,EAC5B,oBAAoB,CACvB,GAAG;IACA,WAAW,EAAE,QAAQ,CAAC,WAAW,CAAC,CAAC;IACnC,kBAAkB,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,GAAG,IAAI,CAAC;CACxD,CAAC;AAEF;;GAEG;AACH,MAAM,MAAM,YAAY,GAAG;IACvB;;OAEG;IACH,aAAa,CAAC,EAAE,oBAAoB,GAAG,MAAM,CAAC;IAC9C;;OAEG;IACH,kBAAkB,CAAC,EAAE,MAAM,CAAC;CAC/B,CAAC;AAEF,MAAM,MAAM,oBAAoB,GAAG,aAAa,GAAG;IAC/C;;OAEG;IACH,aAAa,CAAC,EAAE,aAAa,CAAC;IAC9B;;OAEG;IACH,aAAa,CAAC,EAAE,cAAc,CAAC;IAC/B;;OAEG;IACH,gBAAgB,CAAC,EAAE,iBAAiB,CAAC;IACrC;;OAEG;IACH,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B;;OAEG;IACH,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B;;OAEG;IACH,yBAAyB,CAAC,EAAE,MAAM,CAAC;IACnC;;OAEG;IACH,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB;;OAEG;IACH,qBAAqB,CAAC,EAAE,OAAO,CAAC;IAChC;;OAEG;IACH,mBAAmB,CAAC,EAAE,OAAO,CAAC;IAC9B;;OAEG;IACH,4BAA4B,CAAC,EAAE,MAAM,CAAC;IACtC;;OAEG;IACH,YAAY,CAAC,EAAE,YAAY,CAAC;IAC5B;;;OAGG;IACH,sBAAsB,CAAC,EAAE,OAAO,CAAC;CACpC,CAAC;AAEF;;;;GAIG;AACH,MAAM,MAAM,0BAA0B,GAAG;IACrC;;OAEG;IACH,sBAAsB,CAAC,EAAE,OAAO,CAAC;IACjC;;OAEG;IACH,0BAA0B,CAAC,EAAE,OAAO,CAAC;CACxC,CAAC;AAEF;;GAEG;AACH,MAAM,MAAM,uBAAuB,GAAG;IAClC;;;;OAIG;IACH,WAAW,CAAC,EAAE,oBAAoB,CAAC;IAEnC,MAAM,CAAC,EAAE,kBAAkB,CAAC;CAC/B,CAAC;AAEF;;GAEG;AACH,MAAM,MAAM,aAAa,GAAG;IACxB;;OAEG;IACH,IAAI,EAAE,kBAAkB,CAAC;IACzB;;OAEG;IACH,KAAK,CAAC,EAAE,YAAY,CAAC;IACrB;;OAEG;IACH,MAAM,CAAC,EAAE,oBAAoB,CAAC;IAC9B;;OAEG;IACH,YAAY,CAAC,EAAE,0BAA0B,CAAC;IAC1C;;OAEG;IACH,SAAS,CAAC,EAAE,uBAAuB,CAAC;CACvC,CAAC;AAEF,gBAAgB;AAChB,MAAM,MAAM,oBAAoB,GAAG;IAC/B,IAAI,EAAE,mBAAmB,CAAC;IAC1B,KAAK,EAAE,QAAQ,CAAC,YAAY,CAAC,CAAC;IAC9B,MAAM,EAAE,QAAQ,CAAC,oBAAoB,CAAC,CAAC;IACvC,YAAY,EAAE,QAAQ,CAAC,0BAA0B,CAAC,CAAC;IACnD,SAAS,EAAE,QAAQ,CAAC,uBAAuB,CAAC,CAAC;CAChD,CAAC;AAEF;;;;;;;;GAQG;AACH,wBAAgB,kBAAkB,CAC9B,EACI,IAAI,EAAE,aAAa,EACnB,KAAK,EAAE,cAAc,EACrB,MAAM,EAAE,eAAe,EACvB,YAAY,EAAE,qBAAqB,EACnC,SAAS,EAAE,kBAAkB,GAChC,EAAE,aAAa,EAChB,oBAAoB,EAAE,OAAO,GAC9B,oBAAoB,CA6ItB"}
+{"version":3,"file":"Configuration.d.ts","sourceRoot":"","sources":["../../src/config/Configuration.ts"],"names":[],"mappings":"AAKA,OAAO,EACH,aAAa,EACb,aAAa,EACb,cAAc,EAEd,YAAY,EACZ,WAAW,EAIX,iBAAiB,EACjB,oBAAoB,EAGpB,kBAAkB,EAIrB,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAC;AACpE,OAAO,EAAE,iBAAiB,EAAE,MAAM,oCAAoC,CAAC;AAMvE,eAAO,MAAM,wBAAwB,QAAQ,CAAC;AAC9C,eAAO,MAAM,yBAAyB,QAAQ,CAAC;AAC/C,eAAO,MAAM,2BAA2B,QAAQ,CAAC;AACjD,eAAO,MAAM,0CAA0C,OAAO,CAAC;AAE/D;;GAEG;AACH,MAAM,MAAM,kBAAkB,GAAG;IAC7B;;OAEG;IACH,QAAQ,EAAE,MAAM,CAAC;IACjB;;OAEG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;OAEG;IACH,gBAAgB,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IACjC;;OAEG;IACH,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC;;OAEG;IACH,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B;;OAEG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;OAEG;IACH,qBAAqB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAEtC;;;;;;;;;;;;;;OAcG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC;IAEvB;;OAEG;IACH,kBAAkB,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IACnC;;OAEG;IACH,WAAW,CAAC,EAAE,WAAW,CAAC;IAC1B;;OAEG;IACH,iBAAiB,CAAC,EAAE,iBAAiB,CAAC;IACtC;;OAEG;IACH,kBAAkB,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,GAAG,IAAI,CAAC;IACrD;;OAEG;IACH,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB;;OAEG;IACH,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB;;;;;OAKG;IACH,SAAS,CAAC,EAAE,OAAO,CAAC;CACvB,CAAC;AAEF,gBAAgB;AAChB,MAAM,MAAM,mBAAmB,GAAG,IAAI,CAClC,QAAQ,CAAC,kBAAkB,CAAC,EAC5B,oBAAoB,CACvB,GAAG;IACA,WAAW,EAAE,QAAQ,CAAC,WAAW,CAAC,CAAC;IACnC,kBAAkB,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,GAAG,IAAI,CAAC;CACxD,CAAC;AAEF;;GAEG;AACH,MAAM,MAAM,YAAY,GAAG;IACvB;;OAEG;IACH,aAAa,CAAC,EAAE,oBAAoB,GAAG,MAAM,CAAC;IAC9C;;OAEG;IACH,kBAAkB,CAAC,EAAE,MAAM,CAAC;CAC/B,CAAC;AAEF,MAAM,MAAM,oBAAoB,GAAG,aAAa,GAAG;IAC/C;;OAEG;IACH,aAAa,CAAC,EAAE,aAAa,CAAC;IAC9B;;OAEG;IACH,aAAa,CAAC,EAAE,cAAc,CAAC;IAC/B;;OAEG;IACH,gBAAgB,CAAC,EAAE,iBAAiB,CAAC;IACrC;;OAEG;IACH,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B;;OAEG;IACH,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B;;OAEG;IACH,yBAAyB,CAAC,EAAE,MAAM,CAAC;IACnC;;OAEG;IACH,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB;;OAEG;IACH,qBAAqB,CAAC,EAAE,OAAO,CAAC;IAChC;;OAEG;IACH,mBAAmB,CAAC,EAAE,OAAO,CAAC;IAC9B;;OAEG;IACH,4BAA4B,CAAC,EAAE,MAAM,CAAC;IACtC;;OAEG;IACH,YAAY,CAAC,EAAE,YAAY,CAAC;IAC5B;;;OAGG;IACH,sBAAsB,CAAC,EAAE,OAAO,CAAC;CACpC,CAAC;AAEF;;;;GAIG;AACH,MAAM,MAAM,0BAA0B,GAAG;IACrC;;OAEG;IACH,sBAAsB,CAAC,EAAE,OAAO,CAAC;IACjC;;OAEG;IACH,0BAA0B,CAAC,EAAE,OAAO,CAAC;CACxC,CAAC;AAEF;;GAEG;AACH,MAAM,MAAM,uBAAuB,GAAG;IAClC;;;;OAIG;IACH,WAAW,CAAC,EAAE,oBAAoB,CAAC;IAEnC,MAAM,CAAC,EAAE,kBAAkB,CAAC;CAC/B,CAAC;AAEF;;GAEG;AACH,MAAM,MAAM,aAAa,GAAG;IACxB;;OAEG;IACH,IAAI,EAAE,kBAAkB,CAAC;IACzB;;OAEG;IACH,KAAK,CAAC,EAAE,YAAY,CAAC;IACrB;;OAEG;IACH,MAAM,CAAC,EAAE,oBAAoB,CAAC;IAC9B;;OAEG;IACH,YAAY,CAAC,EAAE,0BAA0B,CAAC;IAC1C;;OAEG;IACH,SAAS,CAAC,EAAE,uBAAuB,CAAC;CACvC,CAAC;AAEF,gBAAgB;AAChB,MAAM,MAAM,oBAAoB,GAAG;IAC/B,IAAI,EAAE,mBAAmB,CAAC;IAC1B,KAAK,EAAE,QAAQ,CAAC,YAAY,CAAC,CAAC;IAC9B,MAAM,EAAE,QAAQ,CAAC,oBAAoB,CAAC,CAAC;IACvC,YAAY,EAAE,QAAQ,CAAC,0BAA0B,CAAC,CAAC;IACnD,SAAS,EAAE,QAAQ,CAAC,uBAAuB,CAAC,CAAC;CAChD,CAAC;AAEF;;;;;;;;GAQG;AACH,wBAAgB,kBAAkB,CAC9B,EACI,IAAI,EAAE,aAAa,EACnB,KAAK,EAAE,cAAc,EACrB,MAAM,EAAE,eAAe,EACvB,YAAY,EAAE,qBAAqB,EACnC,SAAS,EAAE,kBAAkB,GAChC,EAAE,aAAa,EAChB,oBAAoB,EAAE,OAAO,GAC9B,oBAAoB,CA8ItB"}

package/types/custom_auth/CustomAuthConstants.d.ts

@@ -23,7 +23,7 @@ export declare const CustomHeaderConstants: {
 };
 export declare const DefaultPackageInfo: {
     readonly SKU: "msal.browser";
-    readonly VERSION: "5.16.0";
+    readonly VERSION: "5.17.0";
     readonly OS: "";
     readonly CPU: "";
 };

package/types/error/BrowserAuthErrorCodes.d.ts

@@ -17,6 +17,7 @@ export declare const redirectBridgeEmptyResponse = "redirect_bridge_empty_respon
 export declare const redirectInIframe = "redirect_in_iframe";
 export declare const blockIframeReload = "block_iframe_reload";
 export declare const blockNestedPopups = "block_nested_popups";
+export declare const popupRelayUnsupportedFlow = "popup_relay_unsupported_flow";
 export declare const iframeClosedPrematurely = "iframe_closed_prematurely";
 export declare const silentLogoutUnsupported = "silent_logout_unsupported";
 export declare const noAccountError = "no_account_error";

package/types/error/BrowserAuthErrorCodes.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"BrowserAuthErrorCodes.d.ts","sourceRoot":"","sources":["../../src/error/BrowserAuthErrorCodes.ts"],"names":[],"mappings":"AAKA,eAAO,MAAM,cAAc,qBAAqB,CAAC;AACjD,eAAO,MAAM,WAAW,kBAAkB,CAAC;AAC3C,eAAO,MAAM,WAAW,kBAAkB,CAAC;AAC3C,eAAO,MAAM,iBAAiB,uBAAuB,CAAC;AACtD,eAAO,MAAM,gBAAgB,uBAAuB,CAAC;AACrD,eAAO,MAAM,cAAc,qBAAqB,CAAC;AACjD,eAAO,MAAM,aAAa,qBAAqB,CAAC;AAChD,eAAO,MAAM,iCAAiC,2CACF,CAAC;AAC7C,eAAO,MAAM,kBAAkB,0BAA0B,CAAC;AAC1D,eAAO,MAAM,4BAA4B,oCAAoC,CAAC;AAC9E,eAAO,MAAM,qBAAqB,4BAA4B,CAAC;AAC/D,eAAO,MAAM,8BAA8B,sCACJ,CAAC;AACxC,eAAO,MAAM,gBAAgB,uBAAuB,CAAC;AACrD,eAAO,MAAM,gBAAgB,uBAAuB,CAAC;AACrD,eAAO,MAAM,aAAa,mBAAmB,CAAC;AAC9C,eAAO,MAAM,2BAA2B,mCAAmC,CAAC;AAC5E,eAAO,MAAM,gBAAgB,uBAAuB,CAAC;AACrD,eAAO,MAAM,iBAAiB,wBAAwB,CAAC;AACvD,eAAO,MAAM,iBAAiB,wBAAwB,CAAC;AACvD,eAAO,MAAM,uBAAuB,8BAA8B,CAAC;AACnE,eAAO,MAAM,uBAAuB,8BAA8B,CAAC;AACnE,eAAO,MAAM,cAAc,qBAAqB,CAAC;AACjD,eAAO,MAAM,sBAAsB,8BAA8B,CAAC;AAClE,eAAO,MAAM,wBAAwB,iCAAiC,CAAC;AACvE,eAAO,MAAM,mCAAmC,8CACD,CAAC;AAChD,eAAO,MAAM,sBAAsB,+BAA+B,CAAC;AACnE,eAAO,MAAM,gBAAgB,uBAAuB,CAAC;AACrD,eAAO,MAAM,qBAAqB,4BAA4B,CAAC;AAC/D,eAAO,MAAM,eAAe,sBAAsB,CAAC;AACnD,eAAO,MAAM,qBAAqB,4BAA4B,CAAC;AAC/D,eAAO,MAAM,iBAAiB,wBAAwB,CAAC;AACvD,eAAO,MAAM,gBAAgB,uBAAuB,CAAC;AACrD,eAAO,MAAM,qBAAqB,6BAA6B,CAAC;AAChE,eAAO,MAAM,iBAAiB,yBAAyB,CAAC;AACxD,eAAO,MAAM,iBAAiB,yBAAyB,CAAC;AACxD,eAAO,MAAM,gBAAgB,uBAAuB,CAAC;AACrD,eAAO,MAAM,iCAAiC,0CACH,CAAC;AAC5C,eAAO,MAAM,gCAAgC,yCACH,CAAC;AAC3C,eAAO,MAAM,mBAAmB,yBAAyB,CAAC;AAC1D,eAAO,MAAM,sCAAsC,iDACD,CAAC;AACnD,eAAO,MAAM,sBAAsB,6BAA6B,CAAC;AACjE,eAAO,MAAM,2BAA2B,mCAAmC,CAAC;AAC5E,eAAO,MAAM,8BAA8B,sCACJ,CAAC;AACxC,eAAO,MAAM,oCAAoC,4CACJ,CAAC;AAC9C,eAAO,MAAM,wBAAwB,gCAAgC,CAAC;AACtE,eAAO,MAAM,mBAAmB,0BAA0B,CAAC;AAC3D,eAAO,MAAM,sBAAsB,8BAA8B,CAAC;AAClE,eAAO,MAAM,oBAAoB,4BAA4B,CAAC;AAC9D,eAAO,MAAM,oBAAoB,4BAA4B,CAAC;AAC9D,eAAO,MAAM,0BAA0B,mCAAmC,CAAC;AAC3E,eAAO,MAAM,QAAQ,cAAc,CAAC;AACpC,eAAO,MAAM,aAAa,mBAAmB,CAAC"}
+{"version":3,"file":"BrowserAuthErrorCodes.d.ts","sourceRoot":"","sources":["../../src/error/BrowserAuthErrorCodes.ts"],"names":[],"mappings":"AAKA,eAAO,MAAM,cAAc,qBAAqB,CAAC;AACjD,eAAO,MAAM,WAAW,kBAAkB,CAAC;AAC3C,eAAO,MAAM,WAAW,kBAAkB,CAAC;AAC3C,eAAO,MAAM,iBAAiB,uBAAuB,CAAC;AACtD,eAAO,MAAM,gBAAgB,uBAAuB,CAAC;AACrD,eAAO,MAAM,cAAc,qBAAqB,CAAC;AACjD,eAAO,MAAM,aAAa,qBAAqB,CAAC;AAChD,eAAO,MAAM,iCAAiC,2CACF,CAAC;AAC7C,eAAO,MAAM,kBAAkB,0BAA0B,CAAC;AAC1D,eAAO,MAAM,4BAA4B,oCAAoC,CAAC;AAC9E,eAAO,MAAM,qBAAqB,4BAA4B,CAAC;AAC/D,eAAO,MAAM,8BAA8B,sCACJ,CAAC;AACxC,eAAO,MAAM,gBAAgB,uBAAuB,CAAC;AACrD,eAAO,MAAM,gBAAgB,uBAAuB,CAAC;AACrD,eAAO,MAAM,aAAa,mBAAmB,CAAC;AAC9C,eAAO,MAAM,2BAA2B,mCAAmC,CAAC;AAC5E,eAAO,MAAM,gBAAgB,uBAAuB,CAAC;AACrD,eAAO,MAAM,iBAAiB,wBAAwB,CAAC;AACvD,eAAO,MAAM,iBAAiB,wBAAwB,CAAC;AACvD,eAAO,MAAM,yBAAyB,iCAAiC,CAAC;AACxE,eAAO,MAAM,uBAAuB,8BAA8B,CAAC;AACnE,eAAO,MAAM,uBAAuB,8BAA8B,CAAC;AACnE,eAAO,MAAM,cAAc,qBAAqB,CAAC;AACjD,eAAO,MAAM,sBAAsB,8BAA8B,CAAC;AAClE,eAAO,MAAM,wBAAwB,iCAAiC,CAAC;AACvE,eAAO,MAAM,mCAAmC,8CACD,CAAC;AAChD,eAAO,MAAM,sBAAsB,+BAA+B,CAAC;AACnE,eAAO,MAAM,gBAAgB,uBAAuB,CAAC;AACrD,eAAO,MAAM,qBAAqB,4BAA4B,CAAC;AAC/D,eAAO,MAAM,eAAe,sBAAsB,CAAC;AACnD,eAAO,MAAM,qBAAqB,4BAA4B,CAAC;AAC/D,eAAO,MAAM,iBAAiB,wBAAwB,CAAC;AACvD,eAAO,MAAM,gBAAgB,uBAAuB,CAAC;AACrD,eAAO,MAAM,qBAAqB,6BAA6B,CAAC;AAChE,eAAO,MAAM,iBAAiB,yBAAyB,CAAC;AACxD,eAAO,MAAM,iBAAiB,yBAAyB,CAAC;AACxD,eAAO,MAAM,gBAAgB,uBAAuB,CAAC;AACrD,eAAO,MAAM,iCAAiC,0CACH,CAAC;AAC5C,eAAO,MAAM,gCAAgC,yCACH,CAAC;AAC3C,eAAO,MAAM,mBAAmB,yBAAyB,CAAC;AAC1D,eAAO,MAAM,sCAAsC,iDACD,CAAC;AACnD,eAAO,MAAM,sBAAsB,6BAA6B,CAAC;AACjE,eAAO,MAAM,2BAA2B,mCAAmC,CAAC;AAC5E,eAAO,MAAM,8BAA8B,sCACJ,CAAC;AACxC,eAAO,MAAM,oCAAoC,4CACJ,CAAC;AAC9C,eAAO,MAAM,wBAAwB,gCAAgC,CAAC;AACtE,eAAO,MAAM,mBAAmB,0BAA0B,CAAC;AAC3D,eAAO,MAAM,sBAAsB,8BAA8B,CAAC;AAClE,eAAO,MAAM,oBAAoB,4BAA4B,CAAC;AAC9D,eAAO,MAAM,oBAAoB,4BAA4B,CAAC;AAC9D,eAAO,MAAM,0BAA0B,mCAAmC,CAAC;AAC3E,eAAO,MAAM,QAAQ,cAAc,CAAC;AACpC,eAAO,MAAM,aAAa,mBAAmB,CAAC"}

package/types/interaction_client/PopupClient.d.ts

@@ -111,6 +111,19 @@ export declare class PopupClient extends StandardInteractionClient {
      * @param request
      */
     generateLogoutPopupName(request: CommonEndSessionRequest): string;
+    /**
+     * Decodes the per-request library-state id from the encoded request state.
+     */
+    private getRelayStateId;
+    /**
+     * Opens the interactive popup for a POST-form /authorize request. Shared by
+     * the auth-code POST and EAR flows, which are identical apart from the form
+     * builder (`isEAR` selects the EAR vs auth-code builders). When a
+     * popup-relay page is configured the form is carried to the relay page
+     * (which opens the IdP child popup); otherwise the form is submitted
+     * directly into the popup.
+     */
+    private openPostFormPopup;
     protected waitForPopupResponse(request: CommonAuthorizationUrlRequest | CommonEndSessionRequest, popupWindow: Window, popupWindowParent: Window): Promise<string>;
 }
 //# sourceMappingURL=PopupClient.d.ts.map

package/types/interaction_client/PopupClient.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"PopupClient.d.ts","sourceRoot":"","sources":["../../src/interaction_client/PopupClient.ts"],"names":[],"mappings":"AAKA,OAAO,EACH,uBAAuB,EACvB,uBAAuB,EAGvB,kBAAkB,EAClB,MAAM,EACN,OAAO,EAMP,SAAS,EACT,6BAA6B,EAEhC,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAEH,yBAAyB,EAC5B,MAAM,gCAAgC,CAAC;AAQxC,OAAO,EAAE,sBAAsB,EAAE,MAAM,sCAAsC,CAAC;AAG9E,OAAO,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAC;AAK1D,OAAO,EAAE,iBAAiB,EAAE,MAAM,oCAAoC,CAAC;AACvE,OAAO,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AACxD,OAAO,EAAE,mBAAmB,EAAE,MAAM,iCAAiC,CAAC;AACtE,OAAO,EAAE,oBAAoB,EAAE,MAAM,4BAA4B,CAAC;AAClE,OAAO,EAAE,qBAAqB,EAAE,MAAM,qCAAqC,CAAC;AAE5E,OAAO,EAAE,oBAAoB,EAAE,MAAM,qCAAqC,CAAC;AAM3E,OAAO,EAAE,oBAAoB,EAAE,MAAM,gDAAgD,CAAC;AAQtF;;;;;;GAMG;AACH,MAAM,MAAM,sBAAsB,GAAG,CACjC,OAAO,EAAE,6BAA6B,GAAG,uBAAuB,EAChE,WAAW,EAAE,MAAM,EACnB,iBAAiB,EAAE,MAAM,KACxB,OAAO,CAAC,MAAM,CAAC,CAAC;AAErB,MAAM,MAAM,WAAW,GAAG;IACtB,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;IAClB,qBAAqB,EAAE,qBAAqB,CAAC;IAC7C,iBAAiB,EAAE,MAAM,CAAC;CAC7B,CAAC;AAEF,qBAAa,WAAY,SAAQ,yBAAyB;IACtD,OAAO,CAAC,aAAa,CAAqB;IAC1C,SAAS,CAAC,aAAa,EAAE,mBAAmB,CAAC;IAC7C,OAAO,CAAC,QAAQ,CAAC,wBAAwB,CAEzB;gBAGZ,MAAM,EAAE,oBAAoB,EAC5B,WAAW,EAAE,mBAAmB,EAChC,aAAa,EAAE,OAAO,EACtB,MAAM,EAAE,MAAM,EACd,YAAY,EAAE,YAAY,EAC1B,gBAAgB,EAAE,iBAAiB,EACnC,iBAAiB,EAAE,kBAAkB,EACrC,iBAAiB,EAAE,mBAAmB,EACtC,aAAa,EAAE,MAAM,EACrB,mBAAmB,CAAC,EAAE,oBAAoB,EAC1C,wBAAwB,CAAC,EAAE,sBAAsB;IAkBrD;;;;OAIG;IACH,YAAY,CACR,OAAO,EAAE,YAAY,EACrB,SAAS,CAAC,EAAE,SAAS,GACtB,OAAO,CAAC,oBAAoB,CAAC;IA6DhC;;;OAGG;IACH,MAAM,CAAC,aAAa,CAAC,EAAE,sBAAsB,GAAG,OAAO,CAAC,IAAI,CAAC;IAmD7D;;;;;;;OAOG;cACa,sBAAsB,CAClC,OAAO,EAAE,YAAY,EACrB,WAAW,EAAE,WAAW,EACxB,SAAS,CAAC,EAAE,SAAS,GACtB,OAAO,CAAC,oBAAoB,CAAC;IA+ChC;;;;;;OAMG;IACG,eAAe,CACjB,OAAO,EAAE,6BAA6B,EACtC,WAAW,EAAE,WAAW,EACxB,SAAS,CAAC,EAAE,SAAS,GACtB,OAAO,CAAC,oBAAoB,CAAC;IAoIhC;;;OAGG;IACG,cAAc,CAChB,OAAO,EAAE,6BAA6B,EACtC,WAAW,EAAE,WAAW,EACxB,SAAS,CAAC,EAAE,SAAS,GACtB,OAAO,CAAC,oBAAoB,CAAC;IAsJ1B,uBAAuB,CACzB,OAAO,EAAE,6BAA6B,EACtC,WAAW,EAAE,WAAW,EACxB,UAAU,EAAE,uBAAuB,EACnC,YAAY,EAAE,MAAM,GACrB,OAAO,CAAC,oBAAoB,CAAC;IA2EhC;;;;;;;;OAQG;cACa,gBAAgB,CAC5B,YAAY,EAAE,uBAAuB,EACrC,WAAW,EAAE,WAAW,EACxB,gBAAgB,CAAC,EAAE,MAAM,EACzB,qBAAqB,CAAC,EAAE,MAAM,GAC/B,OAAO,CAAC,IAAI,CAAC;IAmLhB;;;OAGG;IACH,mBAAmB,CAAC,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,GAAG,MAAM;IAmBpE;;;;;;;;;;;;OAYG;IACH,SAAS,CAAC,WAAW,EAAE,MAAM,EAAE,WAAW,EAAE,WAAW,GAAG,MAAM;IA6DhE;;;;;;OAMG;IACH,cAAc,CACV,WAAW,EAAE,MAAM,EACnB,EAAE,SAAS,EAAE,qBAAqB,EAAE,iBAAiB,EAAE,EAAE,WAAW,GACrE,MAAM,GAAG,IAAI;IA0EhB;;;;OAIG;IACH,iBAAiB,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,MAAM,GAAG,MAAM;IAMnE;;;;OAIG;IACH,uBAAuB,CAAC,OAAO,EAAE,uBAAuB,GAAG,MAAM;cAKjD,oBAAoB,CAChC,OAAO,EAAE,6BAA6B,GAAG,uBAAuB,EAChE,WAAW,EAAE,MAAM,EACnB,iBAAiB,EAAE,MAAM,GAC1B,OAAO,CAAC,MAAM,CAAC;CAerB"}
+{"version":3,"file":"PopupClient.d.ts","sourceRoot":"","sources":["../../src/interaction_client/PopupClient.ts"],"names":[],"mappings":"AAKA,OAAO,EACH,uBAAuB,EACvB,uBAAuB,EAGvB,kBAAkB,EAClB,MAAM,EACN,OAAO,EAMP,SAAS,EACT,6BAA6B,EAGhC,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAEH,yBAAyB,EAC5B,MAAM,gCAAgC,CAAC;AAQxC,OAAO,EAAE,sBAAsB,EAAE,MAAM,sCAAsC,CAAC;AAK9E,OAAO,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAC;AAK1D,OAAO,EAAE,iBAAiB,EAAE,MAAM,oCAAoC,CAAC;AACvE,OAAO,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AACxD,OAAO,EAAE,mBAAmB,EAAE,MAAM,iCAAiC,CAAC;AACtE,OAAO,EAAE,oBAAoB,EAAE,MAAM,4BAA4B,CAAC;AAClE,OAAO,EAAE,qBAAqB,EAAE,MAAM,qCAAqC,CAAC;AAE5E,OAAO,EAAE,oBAAoB,EAAE,MAAM,qCAAqC,CAAC;AAM3E,OAAO,EAAE,oBAAoB,EAAE,MAAM,gDAAgD,CAAC;AAQtF;;;;;;GAMG;AACH,MAAM,MAAM,sBAAsB,GAAG,CACjC,OAAO,EAAE,6BAA6B,GAAG,uBAAuB,EAChE,WAAW,EAAE,MAAM,EACnB,iBAAiB,EAAE,MAAM,KACxB,OAAO,CAAC,MAAM,CAAC,CAAC;AAErB,MAAM,MAAM,WAAW,GAAG;IACtB,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;IAClB,qBAAqB,EAAE,qBAAqB,CAAC;IAC7C,iBAAiB,EAAE,MAAM,CAAC;CAC7B,CAAC;AAEF,qBAAa,WAAY,SAAQ,yBAAyB;IACtD,OAAO,CAAC,aAAa,CAAqB;IAC1C,SAAS,CAAC,aAAa,EAAE,mBAAmB,CAAC;IAC7C,OAAO,CAAC,QAAQ,CAAC,wBAAwB,CAEzB;gBAGZ,MAAM,EAAE,oBAAoB,EAC5B,WAAW,EAAE,mBAAmB,EAChC,aAAa,EAAE,OAAO,EACtB,MAAM,EAAE,MAAM,EACd,YAAY,EAAE,YAAY,EAC1B,gBAAgB,EAAE,iBAAiB,EACnC,iBAAiB,EAAE,kBAAkB,EACrC,iBAAiB,EAAE,mBAAmB,EACtC,aAAa,EAAE,MAAM,EACrB,mBAAmB,CAAC,EAAE,oBAAoB,EAC1C,wBAAwB,CAAC,EAAE,sBAAsB;IAkBrD;;;;OAIG;IACH,YAAY,CACR,OAAO,EAAE,YAAY,EACrB,SAAS,CAAC,EAAE,SAAS,GACtB,OAAO,CAAC,oBAAoB,CAAC;IA6DhC;;;OAGG;IACH,MAAM,CAAC,aAAa,CAAC,EAAE,sBAAsB,GAAG,OAAO,CAAC,IAAI,CAAC;IAmD7D;;;;;;;OAOG;cACa,sBAAsB,CAClC,OAAO,EAAE,YAAY,EACrB,WAAW,EAAE,WAAW,EACxB,SAAS,CAAC,EAAE,SAAS,GACtB,OAAO,CAAC,oBAAoB,CAAC;IA+ChC;;;;;;OAMG;IACG,eAAe,CACjB,OAAO,EAAE,6BAA6B,EACtC,WAAW,EAAE,WAAW,EACxB,SAAS,CAAC,EAAE,SAAS,GACtB,OAAO,CAAC,oBAAoB,CAAC;IAqJhC;;;OAGG;IACG,cAAc,CAChB,OAAO,EAAE,6BAA6B,EACtC,WAAW,EAAE,WAAW,EACxB,SAAS,CAAC,EAAE,SAAS,GACtB,OAAO,CAAC,oBAAoB,CAAC;IAiJ1B,uBAAuB,CACzB,OAAO,EAAE,6BAA6B,EACtC,WAAW,EAAE,WAAW,EACxB,UAAU,EAAE,uBAAuB,EACnC,YAAY,EAAE,MAAM,GACrB,OAAO,CAAC,oBAAoB,CAAC;IAqEhC;;;;;;;;OAQG;cACa,gBAAgB,CAC5B,YAAY,EAAE,uBAAuB,EACrC,WAAW,EAAE,WAAW,EACxB,gBAAgB,CAAC,EAAE,MAAM,EACzB,qBAAqB,CAAC,EAAE,MAAM,GAC/B,OAAO,CAAC,IAAI,CAAC;IAyMhB;;;OAGG;IACH,mBAAmB,CAAC,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,GAAG,MAAM;IAmBpE;;;;;;;;;;;;OAYG;IACH,SAAS,CAAC,WAAW,EAAE,MAAM,EAAE,WAAW,EAAE,WAAW,GAAG,MAAM;IA6DhE;;;;;;OAMG;IACH,cAAc,CACV,WAAW,EAAE,MAAM,EACnB,EAAE,SAAS,EAAE,qBAAqB,EAAE,iBAAiB,EAAE,EAAE,WAAW,GACrE,MAAM,GAAG,IAAI;IA0EhB;;;;OAIG;IACH,iBAAiB,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,MAAM,GAAG,MAAM;IAMnE;;;;OAIG;IACH,uBAAuB,CAAC,OAAO,EAAE,uBAAuB,GAAG,MAAM;IAKjE;;OAEG;IACH,OAAO,CAAC,eAAe;IAQvB;;;;;;;OAOG;YACW,iBAAiB;cA+Cf,oBAAoB,CAChC,OAAO,EAAE,6BAA6B,GAAG,uBAAuB,EAChE,WAAW,EAAE,MAAM,EACnB,iBAAiB,EAAE,MAAM,GAC1B,OAAO,CAAC,MAAM,CAAC;CAgCrB"}

package/types/packageMetadata.d.ts

@@ -1,3 +1,3 @@
 export declare const name = "@azure/msal-browser";
-export declare const version = "5.16.0";
+export declare const version = "5.17.0";
 //# sourceMappingURL=packageMetadata.d.ts.map

package/types/popup_relay/constants.d.ts

@@ -0,0 +1,13 @@
+/**
+ * postMessage envelope type used to relay an auth response from a popup-relay
+ * page (see `runPopupRelay`) back to the embedded frame that opened it. See
+ * {@link BrowserAuthOptions.popupRelayUri}.
+ *
+ * Kept dependency-free so both the relay-page entry (`./index.js`) and the
+ * client-side helpers (`./relayClient.js`) can import it without either bundle
+ * pulling in the other's dependencies.
+ *
+ * @internal
+ */
+export declare const POPUP_RELAY_RESPONSE_TYPE = "msal:popup-relay-response:v1";
+//# sourceMappingURL=constants.d.ts.map

package/types/popup_relay/constants.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"constants.d.ts","sourceRoot":"","sources":["../../src/popup_relay/constants.ts"],"names":[],"mappings":"AAKA;;;;;;;;;;GAUG;AACH,eAAO,MAAM,yBAAyB,iCAAiC,CAAC"}

package/types/popup_relay/index.d.cts

@@ -0,0 +1 @@
+export * from "./index.js";

package/types/popup_relay/index.d.ts

@@ -0,0 +1,42 @@
+import { PopupWindowAttributes } from "../request/PopupWindowAttributes.js";
+/** Options for {@link runPopupRelay}. */
+export type PopupRelayOptions = {
+    /**
+     * Sizing/positioning for the IdP child popup the relay page opens. Same
+     * shape as `PopupRequest.popupWindowAttributes` (`popupSize` with width and
+     * height, `popupPosition` with top and left). Defaults to a 520x640 window.
+     */
+    popupWindowAttributes?: PopupWindowAttributes;
+    /**
+     * How long (ms) to wait for the IdP child popup to deliver a response
+     * before giving up. Defaults to 300000 (5 minutes).
+     */
+    timeoutMs?: number;
+};
+/**
+ * Entry point for the top-level "popup-relay" page referenced by
+ * `auth.popupRelayUri`. Call this from the relay page (which MSAL opens as a
+ * top-level popup from inside an embedded, cross-origin iframe). It:
+ *
+ *   1. Reads the IdP navigation MSAL passed in this page's hash (a GET URL, or a
+ *      POST form for the form_post / EAR response modes), then scrubs the hash.
+ *   2. Opens the IdP child popup and performs that navigation (the relay page
+ *      stays put, so its `window.opener` link back to the embedded frame
+ *      survives COOP).
+ *   3. Waits for the child's redirect URI page (which must run the redirect
+ *      bridge, `broadcastResponseToMainFrame`) to broadcast the raw auth
+ *      response over a same-origin `BroadcastChannel`.
+ *   4. Relays that raw response back to the embedded frame via
+ *      `opener.postMessage`, posting only to its own (same) origin, then closes.
+ *
+ * The embedded frame keeps the PKCE verifier (and EAR private key) and exchanges
+ * the relayed response itself — no token, verifier, or private key ever crosses
+ * a window boundary.
+ *
+ * Note: the child popup is opened when this function runs, so call it from a
+ * user gesture (e.g. a "Continue" button click) to avoid popup blockers.
+ *
+ * @param options - {@link PopupRelayOptions}
+ */
+export declare function runPopupRelay(options?: PopupRelayOptions): void;
+//# sourceMappingURL=index.d.ts.map

package/types/popup_relay/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/popup_relay/index.ts"],"names":[],"mappings":"AAWA,OAAO,EAAE,qBAAqB,EAAE,MAAM,qCAAqC,CAAC;AAE5E,yCAAyC;AACzC,MAAM,MAAM,iBAAiB,GAAG;IAC5B;;;;OAIG;IACH,qBAAqB,CAAC,EAAE,qBAAqB,CAAC;IAC9C;;;OAGG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;CACtB,CAAC;AA8BF;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,wBAAgB,aAAa,CAAC,OAAO,CAAC,EAAE,iBAAiB,GAAG,IAAI,CA2I/D"}

package/types/popup_relay/relayClient.d.ts

@@ -0,0 +1,43 @@
+import { IPerformanceClient, Logger } from "@azure/msal-common/browser";
+import type { WaitForBridgeRequest } from "../utils/BrowserUtils.js";
+/**
+ * The navigation the popup-relay page should perform in its IdP child popup:
+ * either a GET navigation to a URL, or a POST form submission (used by the
+ * form_post and EAR response modes).
+ *
+ * @internal
+ */
+export type PopupRelayAction = {
+    method: "GET";
+    url: string;
+} | {
+    method: "POST";
+    action: string;
+    fields: Record<string, string>;
+};
+/**
+ * Builds the URL of the popup-relay page to open. The action the relay page
+ * must perform (GET navigation or POST form) is carried in the page's hash
+ * (client-side only, never sent to a server), keyed by the per-request
+ * library-state `id` so the relay page can listen on the right BroadcastChannel
+ * and echo the id back. The relay URI is resolved against the app origin, so it
+ * must be same-origin as the embedded frame. See `runPopupRelay`.
+ *
+ * @internal
+ */
+export declare function buildPopupRelayUrl(popupRelayUri: string, id: string, action: PopupRelayAction, correlationId: string): string;
+/**
+ * Waits for the popup-relay page to relay the raw auth response back to the
+ * embedded frame via postMessage. Used in place of `waitForBridgeResponse`
+ * when `auth.popupRelayUri` is configured, because third-party storage
+ * partitioning blocks the BroadcastChannel the redirect bridge uses from
+ * reaching the embedded frame.
+ *
+ * The response is accepted only from the popup window we opened, on our own
+ * origin (the relay page is same-origin as the embedded frame), and only when
+ * it carries the matching per-request library-state id.
+ *
+ * @internal
+ */
+export declare function waitForPopupRelayResponse(timeoutMs: number, logger: Logger, request: WaitForBridgeRequest, popupWindow: Window, performanceClient: IPerformanceClient): Promise<string>;
+//# sourceMappingURL=relayClient.d.ts.map

package/types/popup_relay/relayClient.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"relayClient.d.ts","sourceRoot":"","sources":["../../src/popup_relay/relayClient.ts"],"names":[],"mappings":"AAKA,OAAO,EACH,kBAAkB,EAClB,MAAM,EAET,MAAM,4BAA4B,CAAC;AAOpC,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAC;AAGrE;;;;;;GAMG;AACH,MAAM,MAAM,gBAAgB,GACtB;IAAE,MAAM,EAAE,KAAK,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,GAC9B;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;CAAE,CAAC;AAEzE;;;;;;;;;GASG;AACH,wBAAgB,kBAAkB,CAC9B,aAAa,EAAE,MAAM,EACrB,EAAE,EAAE,MAAM,EACV,MAAM,EAAE,gBAAgB,EACxB,aAAa,EAAE,MAAM,GACtB,MAAM,CAqBR;AAED;;;;;;;;;;;;GAYG;AACH,wBAAsB,yBAAyB,CAC3C,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,oBAAoB,EAC7B,WAAW,EAAE,MAAM,EACnB,iBAAiB,EAAE,kBAAkB,GACtC,OAAO,CAAC,MAAM,CAAC,CA0FjB"}

package/types/protocol/Authorize.d.ts

@@ -47,14 +47,39 @@ export declare function parseClientData(clientdata?: string): ClientData | null;
  * @returns
  */
 export declare function getAuthCodeRequestUrl(config: BrowserConfiguration, authority: Authority, request: CommonAuthorizationUrlRequest, logger: Logger, performanceClient: IPerformanceClient): Promise<string>;
+/** Action URL + POST-body fields for a /authorize form submission. */
+export type AuthorizeFormData = {
+    action: string;
+    fields: Record<string, string>;
+};
+/**
+ * Builds the action URL + POST-body fields for the EAR /authorize form.
+ */
+export declare function getEARFormData(config: BrowserConfiguration, authority: Authority, request: CommonAuthorizationUrlRequest, logger: Logger, performanceClient: IPerformanceClient): Promise<AuthorizeFormData>;
 /**
  * Gets the form that will be posted to /authorize with request parameters when using EAR
  */
 export declare function getEARForm(frame: Document, config: BrowserConfiguration, authority: Authority, request: CommonAuthorizationUrlRequest, logger: Logger, performanceClient: IPerformanceClient): Promise<HTMLFormElement>;
+/**
+ * Builds the action URL + POST-body fields for the auth-code /authorize form.
+ */
+export declare function getCodeFormData(config: BrowserConfiguration, authority: Authority, request: CommonAuthorizationUrlRequest, logger: Logger, performanceClient: IPerformanceClient): Promise<AuthorizeFormData>;
 /**
  * Gets the form that will be posted to /authorize with request parameters when using POST method
  */
 export declare function getCodeForm(frame: Document, config: BrowserConfiguration, authority: Authority, request: CommonAuthorizationUrlRequest, logger: Logger, performanceClient: IPerformanceClient): Promise<HTMLFormElement>;
+/**
+ * Creates a POST `<form>` in the provided document with the given auth
+ * parameters as hidden inputs, targeting `action`. Shared by the popup auth
+ * flows (`getEARForm` / `getCodeForm`) and the popup-relay page
+ * (`runPopupRelay`) so the form is built one way only.
+ *
+ * @param frame - document to create the form in
+ * @param action - form action (the /authorize URL)
+ * @param fields - POST-body fields
+ * @internal
+ */
+export declare function createForm(frame: Document, action: string, fields: Record<string, string>): HTMLFormElement;
 /**
  * Response handler when server returns accountId on the /authorize request
  * @param request

package/types/protocol/Authorize.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"Authorize.d.ts","sourceRoot":"","sources":["../../src/protocol/Authorize.ts"],"names":[],"mappings":"AAKA,OAAO,EACH,SAAS,EAGT,6BAA6B,EAG7B,kBAAkB,EAClB,MAAM,EAMN,uBAAuB,EAGvB,iBAAiB,EAMpB,MAAM,4BAA4B,CAAC;AAEpC,OAAO,EAAE,oBAAoB,EAAE,MAAM,4BAA4B,CAAC;AAClE,OAAO,EAAE,KAAK,EAAoB,MAAM,8BAA8B,CAAC;AAOvE,OAAO,EAAE,oBAAoB,EAAE,MAAM,qCAAqC,CAAC;AAE3E,OAAO,EAAE,mBAAmB,EAAE,MAAM,iCAAiC,CAAC;AAEtE,OAAO,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AAExD,OAAO,EAAE,oBAAoB,EAAE,MAAM,gDAAgD,CAAC;AAEtF;;;;GAIG;AACH,KAAK,UAAU,GAAG;IACd,6BAA6B;IAC7B,WAAW,EAAE,MAAM,CAAC;IACpB,oDAAoD;IACpD,KAAK,EAAE,MAAM,CAAC;IACd,wDAAwD;IACxD,QAAQ,EAAE,MAAM,CAAC;IACjB,iEAAiE;IACjE,aAAa,EAAE,MAAM,CAAC;IACtB,iDAAiD;IACjD,kBAAkB,EAAE,MAAM,CAAC;CAC9B,CAAC;AAOF;;;;;;;;;;;;;GAaG;AACH,wBAAgB,eAAe,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,UAAU,GAAG,IAAI,CA4BtE;AAgHD;;;;;;;;GAQG;AACH,wBAAsB,qBAAqB,CACvC,MAAM,EAAE,oBAAoB,EAC5B,SAAS,EAAE,SAAS,EACpB,OAAO,EAAE,6BAA6B,EACtC,MAAM,EAAE,MAAM,EACd,iBAAiB,EAAE,kBAAkB,GACtC,OAAO,CAAC,MAAM,CAAC,CAiCjB;AAED;;GAEG;AACH,wBAAsB,UAAU,CAC5B,KAAK,EAAE,QAAQ,EACf,MAAM,EAAE,oBAAoB,EAC5B,SAAS,EAAE,SAAS,EACpB,OAAO,EAAE,6BAA6B,EACtC,MAAM,EAAE,MAAM,EACd,iBAAiB,EAAE,kBAAkB,GACtC,OAAO,CAAC,eAAe,CAAC,CAgD1B;AAED;;GAEG;AACH,wBAAsB,WAAW,CAC7B,KAAK,EAAE,QAAQ,EACf,MAAM,EAAE,oBAAoB,EAC5B,SAAS,EAAE,SAAS,EACpB,OAAO,EAAE,6BAA6B,EACtC,MAAM,EAAE,MAAM,EACd,iBAAiB,EAAE,kBAAkB,GACtC,OAAO,CAAC,eAAe,CAAC,CAyC1B;AA+BD;;;;;;;;;;;;;GAaG;AACH,wBAAsB,4BAA4B,CAC9C,OAAO,EAAE,6BAA6B,EACtC,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,KAAK,EACZ,MAAM,EAAE,oBAAoB,EAC5B,cAAc,EAAE,mBAAmB,EACnC,aAAa,EAAE,mBAAmB,EAClC,YAAY,EAAE,YAAY,EAC1B,MAAM,EAAE,MAAM,EACd,iBAAiB,EAAE,kBAAkB,EACrC,oBAAoB,CAAC,EAAE,oBAAoB,GAC5C,OAAO,CAAC,oBAAoB,CAAC,CA2C/B;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,kBAAkB,CACpC,OAAO,EAAE,6BAA6B,EACtC,QAAQ,EAAE,iBAAiB,EAC3B,YAAY,EAAE,MAAM,EACpB,KAAK,EAAE,KAAK,EACZ,MAAM,EAAE,oBAAoB,EAC5B,UAAU,EAAE,uBAAuB,EACnC,cAAc,EAAE,mBAAmB,EACnC,aAAa,EAAE,mBAAmB,EAClC,YAAY,EAAE,YAAY,EAC1B,MAAM,EAAE,MAAM,EACd,iBAAiB,EAAE,kBAAkB,EACrC,oBAAoB,CAAC,EAAE,oBAAoB,GAC5C,OAAO,CAAC,oBAAoB,CAAC,CAsD/B;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAsB,iBAAiB,CACnC,OAAO,EAAE,6BAA6B,EACtC,QAAQ,EAAE,iBAAiB,EAC3B,KAAK,EAAE,KAAK,EACZ,MAAM,EAAE,oBAAoB,EAC5B,SAAS,EAAE,SAAS,EACpB,cAAc,EAAE,mBAAmB,EACnC,aAAa,EAAE,mBAAmB,EAClC,YAAY,EAAE,YAAY,EAC1B,MAAM,EAAE,MAAM,EACd,iBAAiB,EAAE,kBAAkB,EACrC,oBAAoB,CAAC,EAAE,oBAAoB,GAC5C,OAAO,CAAC,oBAAoB,CAAC,CA0G/B"}
+{"version":3,"file":"Authorize.d.ts","sourceRoot":"","sources":["../../src/protocol/Authorize.ts"],"names":[],"mappings":"AAKA,OAAO,EACH,SAAS,EAGT,6BAA6B,EAG7B,kBAAkB,EAClB,MAAM,EAMN,uBAAuB,EAGvB,iBAAiB,EAMpB,MAAM,4BAA4B,CAAC;AAEpC,OAAO,EAAE,oBAAoB,EAAE,MAAM,4BAA4B,CAAC;AAClE,OAAO,EAAE,KAAK,EAAoB,MAAM,8BAA8B,CAAC;AAOvE,OAAO,EAAE,oBAAoB,EAAE,MAAM,qCAAqC,CAAC;AAE3E,OAAO,EAAE,mBAAmB,EAAE,MAAM,iCAAiC,CAAC;AAEtE,OAAO,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AAExD,OAAO,EAAE,oBAAoB,EAAE,MAAM,gDAAgD,CAAC;AAEtF;;;;GAIG;AACH,KAAK,UAAU,GAAG;IACd,6BAA6B;IAC7B,WAAW,EAAE,MAAM,CAAC;IACpB,oDAAoD;IACpD,KAAK,EAAE,MAAM,CAAC;IACd,wDAAwD;IACxD,QAAQ,EAAE,MAAM,CAAC;IACjB,iEAAiE;IACjE,aAAa,EAAE,MAAM,CAAC;IACtB,iDAAiD;IACjD,kBAAkB,EAAE,MAAM,CAAC;CAC9B,CAAC;AAOF;;;;;;;;;;;;;GAaG;AACH,wBAAgB,eAAe,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,UAAU,GAAG,IAAI,CA4BtE;AAgHD;;;;;;;;GAQG;AACH,wBAAsB,qBAAqB,CACvC,MAAM,EAAE,oBAAoB,EAC5B,SAAS,EAAE,SAAS,EACpB,OAAO,EAAE,6BAA6B,EACtC,MAAM,EAAE,MAAM,EACd,iBAAiB,EAAE,kBAAkB,GACtC,OAAO,CAAC,MAAM,CAAC,CAiCjB;AAED,sEAAsE;AACtE,MAAM,MAAM,iBAAiB,GAAG;IAC5B,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAClC,CAAC;AAEF;;GAEG;AACH,wBAAsB,cAAc,CAChC,MAAM,EAAE,oBAAoB,EAC5B,SAAS,EAAE,SAAS,EACpB,OAAO,EAAE,6BAA6B,EACtC,MAAM,EAAE,MAAM,EACd,iBAAiB,EAAE,kBAAkB,GACtC,OAAO,CAAC,iBAAiB,CAAC,CAgD5B;AAED;;GAEG;AACH,wBAAsB,UAAU,CAC5B,KAAK,EAAE,QAAQ,EACf,MAAM,EAAE,oBAAoB,EAC5B,SAAS,EAAE,SAAS,EACpB,OAAO,EAAE,6BAA6B,EACtC,MAAM,EAAE,MAAM,EACd,iBAAiB,EAAE,kBAAkB,GACtC,OAAO,CAAC,eAAe,CAAC,CAS1B;AAED;;GAEG;AACH,wBAAsB,eAAe,CACjC,MAAM,EAAE,oBAAoB,EAC5B,SAAS,EAAE,SAAS,EACpB,OAAO,EAAE,6BAA6B,EACtC,MAAM,EAAE,MAAM,EACd,iBAAiB,EAAE,kBAAkB,GACtC,OAAO,CAAC,iBAAiB,CAAC,CAyC5B;AAED;;GAEG;AACH,wBAAsB,WAAW,CAC7B,KAAK,EAAE,QAAQ,EACf,MAAM,EAAE,oBAAoB,EAC5B,SAAS,EAAE,SAAS,EACpB,OAAO,EAAE,6BAA6B,EACtC,MAAM,EAAE,MAAM,EACd,iBAAiB,EAAE,kBAAkB,GACtC,OAAO,CAAC,eAAe,CAAC,CAS1B;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,UAAU,CACtB,KAAK,EAAE,QAAQ,EACf,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAC/B,eAAe,CAejB;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAsB,4BAA4B,CAC9C,OAAO,EAAE,6BAA6B,EACtC,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,KAAK,EACZ,MAAM,EAAE,oBAAoB,EAC5B,cAAc,EAAE,mBAAmB,EACnC,aAAa,EAAE,mBAAmB,EAClC,YAAY,EAAE,YAAY,EAC1B,MAAM,EAAE,MAAM,EACd,iBAAiB,EAAE,kBAAkB,EACrC,oBAAoB,CAAC,EAAE,oBAAoB,GAC5C,OAAO,CAAC,oBAAoB,CAAC,CA2C/B;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,kBAAkB,CACpC,OAAO,EAAE,6BAA6B,EACtC,QAAQ,EAAE,iBAAiB,EAC3B,YAAY,EAAE,MAAM,EACpB,KAAK,EAAE,KAAK,EACZ,MAAM,EAAE,oBAAoB,EAC5B,UAAU,EAAE,uBAAuB,EACnC,cAAc,EAAE,mBAAmB,EACnC,aAAa,EAAE,mBAAmB,EAClC,YAAY,EAAE,YAAY,EAC1B,MAAM,EAAE,MAAM,EACd,iBAAiB,EAAE,kBAAkB,EACrC,oBAAoB,CAAC,EAAE,oBAAoB,GAC5C,OAAO,CAAC,oBAAoB,CAAC,CAsD/B;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAsB,iBAAiB,CACnC,OAAO,EAAE,6BAA6B,EACtC,QAAQ,EAAE,iBAAiB,EAC3B,KAAK,EAAE,KAAK,EACZ,MAAM,EAAE,oBAAoB,EAC5B,SAAS,EAAE,SAAS,EACpB,cAAc,EAAE,mBAAmB,EACnC,aAAa,EAAE,mBAAmB,EAClC,YAAY,EAAE,YAAY,EAC1B,MAAM,EAAE,MAAM,EACd,iBAAiB,EAAE,kBAAkB,EACrC,oBAAoB,CAAC,EAAE,oBAAoB,GAC5C,OAAO,CAAC,oBAAoB,CAAC,CA0G/B"}