@azure/msal-browser 5.16.0 → 5.17.1

package/src/popup_relay/index.ts

@@ -0,0 +1,221 @@
+/*
+ * Copyright (c) Microsoft Corporation. All rights reserved.
+ * Licensed under the MIT License.
+ */
+
+import { POPUP_RELAY_RESPONSE_TYPE } from "./constants.js";
+import {
+    BrowserAuthErrorCodes,
+    createBrowserAuthError,
+} from "../error/BrowserAuthError.js";
+import { createForm } from "../protocol/Authorize.js";
+import { PopupWindowAttributes } from "../request/PopupWindowAttributes.js";
+
+/** Options for {@link runPopupRelay}. */
+export type PopupRelayOptions = {
+    /**
+     * Sizing/positioning for the IdP child popup the relay page opens. Same
+     * shape as `PopupRequest.popupWindowAttributes` (`popupSize` with width and
+     * height, `popupPosition` with top and left). Defaults to a 520x640 window.
+     */
+    popupWindowAttributes?: PopupWindowAttributes;
+    /**
+     * How long (ms) to wait for the IdP child popup to deliver a response
+     * before giving up. Defaults to 300000 (5 minutes).
+     */
+    timeoutMs?: number;
+};
+
+type PopupRelayRequest = { id: string } & (
+    | { method: "GET"; url: string }
+    | { method: "POST"; action: string; fields: Record<string, string> }
+);
+
+const DEFAULT_POPUP_RELAY_TIMEOUT_MS = 300000;
+const DEFAULT_POPUP_RELAY_WIDTH = 520;
+const DEFAULT_POPUP_RELAY_HEIGHT = 640;
+
+/**
+ * Builds the `window.open` features string for the IdP child popup from a
+ * {@link PopupWindowAttributes}, mirroring the shape used by
+ * `PopupRequest.popupWindowAttributes`.
+ */
+function buildChildPopupFeatures(attributes?: PopupWindowAttributes): string {
+    const width = attributes?.popupSize?.width || DEFAULT_POPUP_RELAY_WIDTH;
+    const height = attributes?.popupSize?.height || DEFAULT_POPUP_RELAY_HEIGHT;
+    const features = [`width=${width}`, `height=${height}`];
+    if (attributes?.popupPosition?.top !== undefined) {
+        features.push(`top=${attributes.popupPosition.top}`);
+    }
+    if (attributes?.popupPosition?.left !== undefined) {
+        features.push(`left=${attributes.popupPosition.left}`);
+    }
+    features.push("scrollbars=yes");
+    return features.join(",");
+}
+
+/**
+ * Entry point for the top-level "popup-relay" page referenced by
+ * `auth.popupRelayUri`. Call this from the relay page (which MSAL opens as a
+ * top-level popup from inside an embedded, cross-origin iframe). It:
+ *
+ *   1. Reads the IdP navigation MSAL passed in this page's hash (a GET URL, or a
+ *      POST form for the form_post / EAR response modes), then scrubs the hash.
+ *   2. Opens the IdP child popup and performs that navigation (the relay page
+ *      stays put, so its `window.opener` link back to the embedded frame
+ *      survives COOP).
+ *   3. Waits for the child's redirect URI page (which must run the redirect
+ *      bridge, `broadcastResponseToMainFrame`) to broadcast the raw auth
+ *      response over a same-origin `BroadcastChannel`.
+ *   4. Relays that raw response back to the embedded frame via
+ *      `opener.postMessage`, posting only to its own (same) origin, then closes.
+ *
+ * The embedded frame keeps the PKCE verifier (and EAR private key) and exchanges
+ * the relayed response itself — no token, verifier, or private key ever crosses
+ * a window boundary.
+ *
+ * Note: the child popup is opened when this function runs, so call it from a
+ * user gesture (e.g. a "Continue" button click) to avoid popup blockers.
+ *
+ * @param options - {@link PopupRelayOptions}
+ */
+export function runPopupRelay(options?: PopupRelayOptions): void {
+    const opener = window.opener as Window | null;
+    const targetOrigin = window.location.origin;
+
+    const hashParams = new URLSearchParams(
+        window.location.hash.replace(/^#/, "")
+    );
+    const rawReq = hashParams.get("req") || "";
+
+    // Scrub the relayed request out of the relay page's own URL immediately.
+    if (typeof window.history.replaceState === "function") {
+        window.history.replaceState(
+            null,
+            "",
+            window.location.origin + window.location.pathname
+        );
+    }
+
+    if (!opener) {
+        throw createBrowserAuthError(
+            BrowserAuthErrorCodes.popupRelayUnsupportedFlow,
+            "",
+            "popup_relay_no_opener"
+        );
+    }
+
+    let request: PopupRelayRequest;
+    try {
+        request = JSON.parse(rawReq) as PopupRelayRequest;
+    } catch (e) {
+        throw createBrowserAuthError(
+            BrowserAuthErrorCodes.popupRelayUnsupportedFlow,
+            "",
+            "popup_relay_bad_request"
+        );
+    }
+    if (!request || !request.id) {
+        throw createBrowserAuthError(
+            BrowserAuthErrorCodes.popupRelayUnsupportedFlow,
+            "",
+            "popup_relay_bad_request"
+        );
+    }
+
+    const id = request.id;
+    const channel = new BroadcastChannel(id);
+    let settled = false;
+    /*
+     * Timer handles are kept on a const holder so relay() (declared before the
+     * timers are created) can clear them — `let` handles trip prefer-const, and
+     * `const` handles can't be referenced before assignment (TDZ).
+     */
+    const timers: {
+        closedPoll?: number;
+        timeoutId?: number;
+    } = {};
+
+    const relay = (message: { payload?: string; error?: string }): void => {
+        if (settled) {
+            return;
+        }
+        settled = true;
+        try {
+            channel.close();
+        } catch (e) {
+            /* ignore */
+        }
+        clearInterval(timers.closedPoll);
+        clearTimeout(timers.timeoutId);
+        opener.postMessage(
+            { type: POPUP_RELAY_RESPONSE_TYPE, id, ...message },
+            targetOrigin
+        );
+        setTimeout(() => {
+            try {
+                window.close();
+            } catch (e) {
+                /* ignore */
+            }
+        }, 0);
+    };
+
+    // The redirect bridge broadcasts the raw auth response payload here.
+    channel.onmessage = (event: MessageEvent): void => {
+        const payload = event.data && event.data.payload;
+        if (payload) {
+            relay({ payload });
+        }
+    };
+
+    const features = buildChildPopupFeatures(options?.popupWindowAttributes);
+    const childPopup =
+        request.method === "POST"
+            ? window.open("about:blank", "msalPopupRelayChild", features)
+            : window.open(request.url, "msalPopupRelayChild", features);
+
+    if (!childPopup) {
+        relay({ error: BrowserAuthErrorCodes.popupWindowError });
+        return;
+    }
+
+    if (request.method === "POST") {
+        createForm(
+            childPopup.document,
+            request.action,
+            request.fields
+        ).submit();
+    }
+
+    timers.closedPoll = window.setInterval(() => {
+        if (childPopup.closed && !settled) {
+            /*
+             * The popup is gone, so the overall timeout no longer applies —
+             * drop it and report cancellation. A successful sign-in settles
+             * first: the redirect bridge broadcasts the response before it
+             * closes the popup, so onmessage runs on the
+             * next event-loop turn, well before this 500ms poll observes the
+             * close — the `!settled` guard then skips cancellation.
+             */
+            clearTimeout(timers.timeoutId);
+            relay({ error: BrowserAuthErrorCodes.userCancelled });
+        }
+    }, 500);
+
+    timers.timeoutId = window.setTimeout(() => {
+        if (!settled) {
+            /*
+             * Stop the close poll before we close the popup ourselves, so it
+             * can't observe the close and report user_cancelled instead.
+             */
+            clearInterval(timers.closedPoll);
+            try {
+                childPopup.close();
+            } catch (e) {
+                /* ignore */
+            }
+            relay({ error: BrowserAuthErrorCodes.timedOut });
+        }
+    }, options?.timeoutMs || DEFAULT_POPUP_RELAY_TIMEOUT_MS);
+}

package/src/popup_relay/relayClient.ts

@@ -0,0 +1,178 @@
+/*
+ * Copyright (c) Microsoft Corporation. All rights reserved.
+ * Licensed under the MIT License.
+ */
+
+import {
+    IPerformanceClient,
+    Logger,
+    ProtocolUtils,
+} from "@azure/msal-common/browser";
+import { base64Decode } from "../encode/Base64Decode.js";
+import {
+    BrowserAuthErrorCodes,
+    createBrowserAuthError,
+} from "../error/BrowserAuthError.js";
+import { redirectBridgeEmptyResponse } from "../error/BrowserAuthErrorCodes.js";
+import type { WaitForBridgeRequest } from "../utils/BrowserUtils.js";
+import { POPUP_RELAY_RESPONSE_TYPE } from "./constants.js";
+
+/**
+ * The navigation the popup-relay page should perform in its IdP child popup:
+ * either a GET navigation to a URL, or a POST form submission (used by the
+ * form_post and EAR response modes).
+ *
+ * @internal
+ */
+export type PopupRelayAction =
+    | { method: "GET"; url: string }
+    | { method: "POST"; action: string; fields: Record<string, string> };
+
+/**
+ * Builds the URL of the popup-relay page to open. The action the relay page
+ * must perform (GET navigation or POST form) is carried in the page's hash
+ * (client-side only, never sent to a server), keyed by the per-request
+ * library-state `id` so the relay page can listen on the right BroadcastChannel
+ * and echo the id back. The relay URI is resolved against the app origin, so it
+ * must be same-origin as the embedded frame. See `runPopupRelay`.
+ *
+ * @internal
+ */
+export function buildPopupRelayUrl(
+    popupRelayUri: string,
+    id: string,
+    action: PopupRelayAction,
+    correlationId: string
+): string {
+    const req = { id, ...action };
+    const target = new URL(popupRelayUri, window.location.origin);
+    /*
+     * The relay page must be same-origin as the embedded frame: the response is
+     * relayed back via postMessage and only accepted from this origin, and a
+     * cross-origin page would also receive the relayed /authorize request. Fail
+     * fast with a clear error instead of silently relaying to (and timing out
+     * against) the wrong origin.
+     */
+    if (target.origin !== window.location.origin) {
+        throw createBrowserAuthError(
+            BrowserAuthErrorCodes.popupRelayUnsupportedFlow,
+            correlationId,
+            "popup_relay_cross_origin"
+        );
+    }
+    const hashParams = new URLSearchParams();
+    hashParams.set("req", JSON.stringify(req));
+    target.hash = hashParams.toString();
+    return target.toString();
+}
+
+/**
+ * Waits for the popup-relay page to relay the raw auth response back to the
+ * embedded frame via postMessage. Used in place of `waitForBridgeResponse`
+ * when `auth.popupRelayUri` is configured, because third-party storage
+ * partitioning blocks the BroadcastChannel the redirect bridge uses from
+ * reaching the embedded frame.
+ *
+ * The response is accepted only from the popup window we opened, on our own
+ * origin (the relay page is same-origin as the embedded frame), and only when
+ * it carries the matching per-request library-state id.
+ *
+ * @internal
+ */
+export async function waitForPopupRelayResponse(
+    timeoutMs: number,
+    logger: Logger,
+    request: WaitForBridgeRequest,
+    popupWindow: Window,
+    performanceClient: IPerformanceClient
+): Promise<string> {
+    return new Promise<string>((resolve, reject) => {
+        const correlationId = request.correlationId;
+        logger.verbose(
+            "PopupRelay.waitForPopupRelayResponse - started",
+            correlationId
+        );
+        performanceClient.addFields(
+            { redirectBridgeTimeoutMs: timeoutMs },
+            correlationId
+        );
+
+        const { libraryState } = ProtocolUtils.parseRequestState(
+            base64Decode,
+            request.state || "",
+            correlationId
+        );
+        const expectedId = libraryState.id;
+        const expectedOrigin = window.location.origin;
+        let settled = false;
+
+        const cleanup = (): void => {
+            window.removeEventListener("message", onMessage);
+            clearTimeout(timeoutId);
+            clearInterval(closedPoll);
+        };
+
+        const onMessage = (event: MessageEvent): void => {
+            if (
+                event.origin !== expectedOrigin ||
+                event.source !== popupWindow
+            ) {
+                return;
+            }
+            const data = event.data;
+            if (
+                !data ||
+                data.type !== POPUP_RELAY_RESPONSE_TYPE ||
+                data.id !== expectedId
+            ) {
+                return;
+            }
+            if (settled) {
+                return;
+            }
+            settled = true;
+            cleanup();
+            if (data.error) {
+                reject(createBrowserAuthError(data.error, correlationId));
+            } else if (data.payload) {
+                resolve(data.payload);
+            } else {
+                reject(
+                    createBrowserAuthError(
+                        redirectBridgeEmptyResponse,
+                        correlationId
+                    )
+                );
+            }
+        };
+        window.addEventListener("message", onMessage);
+
+        const timeoutId = window.setTimeout(() => {
+            if (settled) {
+                return;
+            }
+            settled = true;
+            cleanup();
+            reject(
+                createBrowserAuthError(
+                    BrowserAuthErrorCodes.timedOut,
+                    correlationId,
+                    "popup_relay_timeout"
+                )
+            );
+        }, timeoutMs);
+
+        const closedPoll = window.setInterval(() => {
+            if (popupWindow.closed && !settled) {
+                settled = true;
+                cleanup();
+                reject(
+                    createBrowserAuthError(
+                        BrowserAuthErrorCodes.userCancelled,
+                        correlationId
+                    )
+                );
+            }
+        }, 500);
+    });
+}

package/src/protocol/Authorize.ts

@@ -271,17 +271,22 @@ export async function getAuthCodeRequestUrl(
     return AuthorizeProtocol.getAuthorizeUrl(authority, parameters);
 }
 
+/** Action URL + POST-body fields for a /authorize form submission. */
+export type AuthorizeFormData = {
+    action: string;
+    fields: Record<string, string>;
+};
+
 /**
- * Gets the form that will be posted to /authorize with request parameters when using EAR
+ * Builds the action URL + POST-body fields for the EAR /authorize form.
  */
-export async function getEARForm(
-    frame: Document,
+export async function getEARFormData(
     config: BrowserConfiguration,
     authority: Authority,
     request: CommonAuthorizationUrlRequest,
     logger: Logger,
     performanceClient: IPerformanceClient
-): Promise<HTMLFormElement> {
+): Promise<AuthorizeFormData> {
     if (!request.earJwk) {
         throw createBrowserAuthError(
             BrowserAuthErrorCodes.earJwkEmpty,
@@ -326,15 +331,15 @@ export async function getEARForm(
         request.correlationId
     );
 
-    const url = AuthorizeProtocol.getAuthorizeUrl(authority, queryParams);
+    const action = AuthorizeProtocol.getAuthorizeUrl(authority, queryParams);
 
-    return createForm(frame, url, parameters);
+    return { action, fields: Object.fromEntries(parameters) };
 }
 
 /**
- * Gets the form that will be posted to /authorize with request parameters when using POST method
+ * Gets the form that will be posted to /authorize with request parameters when using EAR
  */
-export async function getCodeForm(
+export async function getEARForm(
     frame: Document,
     config: BrowserConfiguration,
     authority: Authority,
@@ -342,6 +347,26 @@ export async function getCodeForm(
     logger: Logger,
     performanceClient: IPerformanceClient
 ): Promise<HTMLFormElement> {
+    const { action, fields } = await getEARFormData(
+        config,
+        authority,
+        request,
+        logger,
+        performanceClient
+    );
+    return createForm(frame, action, fields);
+}
+
+/**
+ * Builds the action URL + POST-body fields for the auth-code /authorize form.
+ */
+export async function getCodeFormData(
+    config: BrowserConfiguration,
+    authority: Authority,
+    request: CommonAuthorizationUrlRequest,
+    logger: Logger,
+    performanceClient: IPerformanceClient
+): Promise<AuthorizeFormData> {
     const parameters = await getStandardParameters(
         config,
         authority,
@@ -379,34 +404,58 @@ export async function getCodeForm(
         request.correlationId
     );
 
-    const url = AuthorizeProtocol.getAuthorizeUrl(authority, queryParams);
+    const action = AuthorizeProtocol.getAuthorizeUrl(authority, queryParams);
 
-    return createForm(frame, url, parameters);
+    return { action, fields: Object.fromEntries(parameters) };
 }
 
 /**
- * Creates form element in the provided document with auth parameters in the post body
- * @param frame
- * @param authorizeUrl
- * @param parameters
- * @returns
+ * Gets the form that will be posted to /authorize with request parameters when using POST method
+ */
+export async function getCodeForm(
+    frame: Document,
+    config: BrowserConfiguration,
+    authority: Authority,
+    request: CommonAuthorizationUrlRequest,
+    logger: Logger,
+    performanceClient: IPerformanceClient
+): Promise<HTMLFormElement> {
+    const { action, fields } = await getCodeFormData(
+        config,
+        authority,
+        request,
+        logger,
+        performanceClient
+    );
+    return createForm(frame, action, fields);
+}
+
+/**
+ * Creates a POST `<form>` in the provided document with the given auth
+ * parameters as hidden inputs, targeting `action`. Shared by the popup auth
+ * flows (`getEARForm` / `getCodeForm`) and the popup-relay page
+ * (`runPopupRelay`) so the form is built one way only.
+ *
+ * @param frame - document to create the form in
+ * @param action - form action (the /authorize URL)
+ * @param fields - POST-body fields
+ * @internal
  */
-function createForm(
+export function createForm(
     frame: Document,
-    authorizeUrl: string,
-    parameters: Map<string, string>
+    action: string,
+    fields: Record<string, string>
 ): HTMLFormElement {
     const form = frame.createElement("form");
     form.method = "post";
-    form.action = authorizeUrl;
-
-    parameters.forEach((value: string, key: string) => {
-        const param = frame.createElement("input");
-        param.hidden = true;
-        param.name = key;
-        param.value = value;
-
-        form.appendChild(param);
+    form.action = action;
+
+    Object.keys(fields).forEach((name) => {
+        const input = frame.createElement("input");
+        input.hidden = true;
+        input.name = name;
+        input.value = fields[name];
+        form.appendChild(input);
     });
 
     frame.body.appendChild(form);

package/types/config/Configuration.d.ts

@@ -37,6 +37,22 @@ export type BrowserAuthOptions = {
      * The redirect URI where the window navigates after a successful logout.
      */
     postLogoutRedirectUri?: string | null;
+    /**
+     * URI of a first-party, top-level "popup-relay" page used to acquire tokens
+     * interactively from inside a cross-origin iframe that an untrusted host has
+     * embedded (where third-party storage partitioning and COOP break the normal
+     * popup flow). When set, `acquireTokenPopup` opens this page top-level
+     * instead of navigating the popup straight to the IdP, and the page must call
+     * `runPopupRelay()`. Resolved relative to the app origin, so it must be
+     * same-origin as the embedded frame.
+     *
+     * This is a browser SPA-only mechanism (`PublicClientApplication` in
+     * `@azure/msal-browser`): it brokers the standard interactive popup
+     * auth-code flow through a same-origin page. It does not apply to native
+     * app, platform broker (WAM), Nested App Auth, or confidential-client /
+     * server-side scenarios.
+     */
+    popupRelayUri?: string;
     /**
      * Array of capabilities which will be added to the claims.access_token.xms_cc request property on every network request.
      */

package/types/config/Configuration.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"Configuration.d.ts","sourceRoot":"","sources":["../../src/config/Configuration.ts"],"names":[],"mappings":"AAKA,OAAO,EACH,aAAa,EACb,aAAa,EACb,cAAc,EAEd,YAAY,EACZ,WAAW,EAIX,iBAAiB,EACjB,oBAAoB,EAGpB,kBAAkB,EAIrB,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAC;AACpE,OAAO,EAAE,iBAAiB,EAAE,MAAM,oCAAoC,CAAC;AAMvE,eAAO,MAAM,wBAAwB,QAAQ,CAAC;AAC9C,eAAO,MAAM,yBAAyB,QAAQ,CAAC;AAC/C,eAAO,MAAM,2BAA2B,QAAQ,CAAC;AACjD,eAAO,MAAM,0CAA0C,OAAO,CAAC;AAE/D;;GAEG;AACH,MAAM,MAAM,kBAAkB,GAAG;IAC7B;;OAEG;IACH,QAAQ,EAAE,MAAM,CAAC;IACjB;;OAEG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;OAEG;IACH,gBAAgB,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IACjC;;OAEG;IACH,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC;;OAEG;IACH,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B;;OAEG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;OAEG;IACH,qBAAqB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAEtC;;OAEG;IACH,kBAAkB,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IACnC;;OAEG;IACH,WAAW,CAAC,EAAE,WAAW,CAAC;IAC1B;;OAEG;IACH,iBAAiB,CAAC,EAAE,iBAAiB,CAAC;IACtC;;OAEG;IACH,kBAAkB,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,GAAG,IAAI,CAAC;IACrD;;OAEG;IACH,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB;;OAEG;IACH,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB;;;;;OAKG;IACH,SAAS,CAAC,EAAE,OAAO,CAAC;CACvB,CAAC;AAEF,gBAAgB;AAChB,MAAM,MAAM,mBAAmB,GAAG,IAAI,CAClC,QAAQ,CAAC,kBAAkB,CAAC,EAC5B,oBAAoB,CACvB,GAAG;IACA,WAAW,EAAE,QAAQ,CAAC,WAAW,CAAC,CAAC;IACnC,kBAAkB,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,GAAG,IAAI,CAAC;CACxD,CAAC;AAEF;;GAEG;AACH,MAAM,MAAM,YAAY,GAAG;IACvB;;OAEG;IACH,aAAa,CAAC,EAAE,oBAAoB,GAAG,MAAM,CAAC;IAC9C;;OAEG;IACH,kBAAkB,CAAC,EAAE,MAAM,CAAC;CAC/B,CAAC;AAEF,MAAM,MAAM,oBAAoB,GAAG,aAAa,GAAG;IAC/C;;OAEG;IACH,aAAa,CAAC,EAAE,aAAa,CAAC;IAC9B;;OAEG;IACH,aAAa,CAAC,EAAE,cAAc,CAAC;IAC/B;;OAEG;IACH,gBAAgB,CAAC,EAAE,iBAAiB,CAAC;IACrC;;OAEG;IACH,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B;;OAEG;IACH,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B;;OAEG;IACH,yBAAyB,CAAC,EAAE,MAAM,CAAC;IACnC;;OAEG;IACH,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB;;OAEG;IACH,qBAAqB,CAAC,EAAE,OAAO,CAAC;IAChC;;OAEG;IACH,mBAAmB,CAAC,EAAE,OAAO,CAAC;IAC9B;;OAEG;IACH,4BAA4B,CAAC,EAAE,MAAM,CAAC;IACtC;;OAEG;IACH,YAAY,CAAC,EAAE,YAAY,CAAC;IAC5B;;;OAGG;IACH,sBAAsB,CAAC,EAAE,OAAO,CAAC;CACpC,CAAC;AAEF;;;;GAIG;AACH,MAAM,MAAM,0BAA0B,GAAG;IACrC;;OAEG;IACH,sBAAsB,CAAC,EAAE,OAAO,CAAC;IACjC;;OAEG;IACH,0BAA0B,CAAC,EAAE,OAAO,CAAC;CACxC,CAAC;AAEF;;GAEG;AACH,MAAM,MAAM,uBAAuB,GAAG;IAClC;;;;OAIG;IACH,WAAW,CAAC,EAAE,oBAAoB,CAAC;IAEnC,MAAM,CAAC,EAAE,kBAAkB,CAAC;CAC/B,CAAC;AAEF;;GAEG;AACH,MAAM,MAAM,aAAa,GAAG;IACxB;;OAEG;IACH,IAAI,EAAE,kBAAkB,CAAC;IACzB;;OAEG;IACH,KAAK,CAAC,EAAE,YAAY,CAAC;IACrB;;OAEG;IACH,MAAM,CAAC,EAAE,oBAAoB,CAAC;IAC9B;;OAEG;IACH,YAAY,CAAC,EAAE,0BAA0B,CAAC;IAC1C;;OAEG;IACH,SAAS,CAAC,EAAE,uBAAuB,CAAC;CACvC,CAAC;AAEF,gBAAgB;AAChB,MAAM,MAAM,oBAAoB,GAAG;IAC/B,IAAI,EAAE,mBAAmB,CAAC;IAC1B,KAAK,EAAE,QAAQ,CAAC,YAAY,CAAC,CAAC;IAC9B,MAAM,EAAE,QAAQ,CAAC,oBAAoB,CAAC,CAAC;IACvC,YAAY,EAAE,QAAQ,CAAC,0BAA0B,CAAC,CAAC;IACnD,SAAS,EAAE,QAAQ,CAAC,uBAAuB,CAAC,CAAC;CAChD,CAAC;AAEF;;;;;;;;GAQG;AACH,wBAAgB,kBAAkB,CAC9B,EACI,IAAI,EAAE,aAAa,EACnB,KAAK,EAAE,cAAc,EACrB,MAAM,EAAE,eAAe,EACvB,YAAY,EAAE,qBAAqB,EACnC,SAAS,EAAE,kBAAkB,GAChC,EAAE,aAAa,EAChB,oBAAoB,EAAE,OAAO,GAC9B,oBAAoB,CA6ItB"}
+{"version":3,"file":"Configuration.d.ts","sourceRoot":"","sources":["../../src/config/Configuration.ts"],"names":[],"mappings":"AAKA,OAAO,EACH,aAAa,EACb,aAAa,EACb,cAAc,EAEd,YAAY,EACZ,WAAW,EAIX,iBAAiB,EACjB,oBAAoB,EAGpB,kBAAkB,EAIrB,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAC;AACpE,OAAO,EAAE,iBAAiB,EAAE,MAAM,oCAAoC,CAAC;AAMvE,eAAO,MAAM,wBAAwB,QAAQ,CAAC;AAC9C,eAAO,MAAM,yBAAyB,QAAQ,CAAC;AAC/C,eAAO,MAAM,2BAA2B,QAAQ,CAAC;AACjD,eAAO,MAAM,0CAA0C,OAAO,CAAC;AAE/D;;GAEG;AACH,MAAM,MAAM,kBAAkB,GAAG;IAC7B;;OAEG;IACH,QAAQ,EAAE,MAAM,CAAC;IACjB;;OAEG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;OAEG;IACH,gBAAgB,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IACjC;;OAEG;IACH,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC;;OAEG;IACH,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B;;OAEG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;OAEG;IACH,qBAAqB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAEtC;;;;;;;;;;;;;;OAcG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC;IAEvB;;OAEG;IACH,kBAAkB,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IACnC;;OAEG;IACH,WAAW,CAAC,EAAE,WAAW,CAAC;IAC1B;;OAEG;IACH,iBAAiB,CAAC,EAAE,iBAAiB,CAAC;IACtC;;OAEG;IACH,kBAAkB,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,GAAG,IAAI,CAAC;IACrD;;OAEG;IACH,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB;;OAEG;IACH,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB;;;;;OAKG;IACH,SAAS,CAAC,EAAE,OAAO,CAAC;CACvB,CAAC;AAEF,gBAAgB;AAChB,MAAM,MAAM,mBAAmB,GAAG,IAAI,CAClC,QAAQ,CAAC,kBAAkB,CAAC,EAC5B,oBAAoB,CACvB,GAAG;IACA,WAAW,EAAE,QAAQ,CAAC,WAAW,CAAC,CAAC;IACnC,kBAAkB,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,GAAG,IAAI,CAAC;CACxD,CAAC;AAEF;;GAEG;AACH,MAAM,MAAM,YAAY,GAAG;IACvB;;OAEG;IACH,aAAa,CAAC,EAAE,oBAAoB,GAAG,MAAM,CAAC;IAC9C;;OAEG;IACH,kBAAkB,CAAC,EAAE,MAAM,CAAC;CAC/B,CAAC;AAEF,MAAM,MAAM,oBAAoB,GAAG,aAAa,GAAG;IAC/C;;OAEG;IACH,aAAa,CAAC,EAAE,aAAa,CAAC;IAC9B;;OAEG;IACH,aAAa,CAAC,EAAE,cAAc,CAAC;IAC/B;;OAEG;IACH,gBAAgB,CAAC,EAAE,iBAAiB,CAAC;IACrC;;OAEG;IACH,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B;;OAEG;IACH,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B;;OAEG;IACH,yBAAyB,CAAC,EAAE,MAAM,CAAC;IACnC;;OAEG;IACH,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB;;OAEG;IACH,qBAAqB,CAAC,EAAE,OAAO,CAAC;IAChC;;OAEG;IACH,mBAAmB,CAAC,EAAE,OAAO,CAAC;IAC9B;;OAEG;IACH,4BAA4B,CAAC,EAAE,MAAM,CAAC;IACtC;;OAEG;IACH,YAAY,CAAC,EAAE,YAAY,CAAC;IAC5B;;;OAGG;IACH,sBAAsB,CAAC,EAAE,OAAO,CAAC;CACpC,CAAC;AAEF;;;;GAIG;AACH,MAAM,MAAM,0BAA0B,GAAG;IACrC;;OAEG;IACH,sBAAsB,CAAC,EAAE,OAAO,CAAC;IACjC;;OAEG;IACH,0BAA0B,CAAC,EAAE,OAAO,CAAC;CACxC,CAAC;AAEF;;GAEG;AACH,MAAM,MAAM,uBAAuB,GAAG;IAClC;;;;OAIG;IACH,WAAW,CAAC,EAAE,oBAAoB,CAAC;IAEnC,MAAM,CAAC,EAAE,kBAAkB,CAAC;CAC/B,CAAC;AAEF;;GAEG;AACH,MAAM,MAAM,aAAa,GAAG;IACxB;;OAEG;IACH,IAAI,EAAE,kBAAkB,CAAC;IACzB;;OAEG;IACH,KAAK,CAAC,EAAE,YAAY,CAAC;IACrB;;OAEG;IACH,MAAM,CAAC,EAAE,oBAAoB,CAAC;IAC9B;;OAEG;IACH,YAAY,CAAC,EAAE,0BAA0B,CAAC;IAC1C;;OAEG;IACH,SAAS,CAAC,EAAE,uBAAuB,CAAC;CACvC,CAAC;AAEF,gBAAgB;AAChB,MAAM,MAAM,oBAAoB,GAAG;IAC/B,IAAI,EAAE,mBAAmB,CAAC;IAC1B,KAAK,EAAE,QAAQ,CAAC,YAAY,CAAC,CAAC;IAC9B,MAAM,EAAE,QAAQ,CAAC,oBAAoB,CAAC,CAAC;IACvC,YAAY,EAAE,QAAQ,CAAC,0BAA0B,CAAC,CAAC;IACnD,SAAS,EAAE,QAAQ,CAAC,uBAAuB,CAAC,CAAC;CAChD,CAAC;AAEF;;;;;;;;GAQG;AACH,wBAAgB,kBAAkB,CAC9B,EACI,IAAI,EAAE,aAAa,EACnB,KAAK,EAAE,cAAc,EACrB,MAAM,EAAE,eAAe,EACvB,YAAY,EAAE,qBAAqB,EACnC,SAAS,EAAE,kBAAkB,GAChC,EAAE,aAAa,EAChB,oBAAoB,EAAE,OAAO,GAC9B,oBAAoB,CA8ItB"}

package/types/crypto/BrowserCrypto.d.ts

@@ -1,3 +1,7 @@
+export declare const RSA_KEYGEN_ALGORITHM_OPTIONS: RsaHashedKeyGenParams;
+export declare const RSA_SIGN_ALGORITHM_OPTIONS: Algorithm;
+export declare const ECDSA_P256_KEYGEN_ALGORITHM_OPTIONS: EcKeyGenParams;
+export declare const ECDSA_SHA256_SIGN_ALGORITHM_OPTIONS: EcdsaParams;
 /**
  * Check whether browser crypto is available.
  */
@@ -21,11 +25,12 @@ export declare function getRandomValues(dataBuffer: Uint8Array): Uint8Array;
  */
 export declare function createNewGuid(): string;
 /**
- * Generates a keypair based on current keygen algorithm config.
+ * Generates a keypair based on the provided algorithm config.
  * @param extractable
  * @param usages
+ * @param algorithm
  */
-export declare function generateKeyPair(extractable: boolean, usages: Array<KeyUsage>): Promise<CryptoKeyPair>;
+export declare function generateKeyPair(extractable: boolean, usages: Array<KeyUsage>, algorithm: AlgorithmIdentifier): Promise<CryptoKeyPair>;
 /**
  * Export key as Json Web Key (JWK)
  * @param key
@@ -36,14 +41,16 @@ export declare function exportJwk(key: CryptoKey): Promise<JsonWebKey>;
  * @param key
  * @param extractable
  * @param usages
+ * @param algorithm
  */
-export declare function importJwk(key: JsonWebKey, extractable: boolean, usages: Array<KeyUsage>): Promise<CryptoKey>;
+export declare function importJwk(key: JsonWebKey, extractable: boolean, usages: Array<KeyUsage>, algorithm: AlgorithmIdentifier): Promise<CryptoKey>;
 /**
- * Signs given data with given key
+ * Signs given data with given key.
  * @param key
  * @param data
+ * @param algorithm
  */
-export declare function sign(key: CryptoKey, data: ArrayBuffer): Promise<ArrayBuffer>;
+export declare function sign(key: CryptoKey, data: ArrayBuffer, algorithm: AlgorithmIdentifier): Promise<ArrayBuffer>;
 /**
  * Generates Base64 encoded jwk used in the Encrypted Authorize Response (EAR) flow
  */
@@ -93,4 +100,11 @@ export declare function decrypt(baseKey: CryptoKey, nonce: string, context: stri
  * @param plainText
  */
 export declare function hashString(plainText: string): Promise<string>;
+/**
+ * Computes an RFC 7638 JWK thumbprint for a public key.
+ * The required members for the JWK key type are serialised in lexicographic order
+ * and the SHA-256 digest is returned as a base64url string.
+ * @internal
+ */
+export declare function computeJwkThumbprint(publicJwk: JsonWebKey): Promise<string>;
 //# sourceMappingURL=BrowserCrypto.d.ts.map

package/types/crypto/BrowserCrypto.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"BrowserCrypto.d.ts","sourceRoot":"","sources":["../../src/crypto/BrowserCrypto.ts"],"names":[],"mappings":"AAqDA;;GAEG;AACH,wBAAgB,uBAAuB,CACnC,wBAAwB,EAAE,OAAO,GAClC,IAAI,CAoBN;AAED;;;;;GAKG;AACH,wBAAsB,YAAY,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC,CAO3E;AAED;;;GAGG;AACH,wBAAgB,eAAe,CAAC,UAAU,EAAE,UAAU,GAAG,UAAU,CAElE;AAWD;;;;GAIG;AACH,wBAAgB,aAAa,IAAI,MAAM,CAuCtC;AAED;;;;GAIG;AACH,wBAAsB,eAAe,CACjC,WAAW,EAAE,OAAO,EACpB,MAAM,EAAE,KAAK,CAAC,QAAQ,CAAC,GACxB,OAAO,CAAC,aAAa,CAAC,CAMxB;AAED;;;GAGG;AACH,wBAAsB,SAAS,CAAC,GAAG,EAAE,SAAS,GAAG,OAAO,CAAC,UAAU,CAAC,CAKnE;AAED;;;;;GAKG;AACH,wBAAsB,SAAS,CAC3B,GAAG,EAAE,UAAU,EACf,WAAW,EAAE,OAAO,EACpB,MAAM,EAAE,KAAK,CAAC,QAAQ,CAAC,GACxB,OAAO,CAAC,SAAS,CAAC,CAQpB;AAED;;;;GAIG;AACH,wBAAsB,IAAI,CACtB,GAAG,EAAE,SAAS,EACd,IAAI,EAAE,WAAW,GAClB,OAAO,CAAC,WAAW,CAAC,CAMtB;AAED;;GAEG;AACH,wBAAsB,cAAc,IAAI,OAAO,CAAC,MAAM,CAAC,CAWtD;AAED;;;;GAIG;AACH,wBAAsB,YAAY,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC,CASrE;AAED;;;;;GAKG;AACH,wBAAsB,kBAAkB,CACpC,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,MAAM,GACf,OAAO,CAAC,MAAM,CAAC,CAiDjB;AAED;;GAEG;AACH,wBAAsB,eAAe,IAAI,OAAO,CAAC,WAAW,CAAC,CAU5D;AAED;;;;GAIG;AACH,wBAAsB,YAAY,CAAC,OAAO,EAAE,WAAW,GAAG,OAAO,CAAC,SAAS,CAAC,CAI3E;AA4BD;;;;GAIG;AACH,wBAAsB,OAAO,CACzB,OAAO,EAAE,SAAS,EAClB,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,MAAM,GAChB,OAAO,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC,CAkB1C;AAED;;;;;;GAMG;AACH,wBAAsB,OAAO,CACzB,OAAO,EAAE,SAAS,EAClB,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,MAAM,EACf,aAAa,EAAE,MAAM,GACtB,OAAO,CAAC,MAAM,CAAC,CAajB;AAED;;;GAGG;AACH,wBAAsB,UAAU,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAInE"}
+{"version":3,"file":"BrowserCrypto.d.ts","sourceRoot":"","sources":["../../src/crypto/BrowserCrypto.ts"],"names":[],"mappings":"AAsDA,eAAO,MAAM,4BAA4B,EAAE,qBAK1C,CAAC;AAEF,eAAO,MAAM,0BAA0B,EAAE,SAExC,CAAC;AAEF,eAAO,MAAM,mCAAmC,EAAE,cAGjD,CAAC;AAEF,eAAO,MAAM,mCAAmC,EAAE,WAGjD,CAAC;AAEF;;GAEG;AACH,wBAAgB,uBAAuB,CACnC,wBAAwB,EAAE,OAAO,GAClC,IAAI,CAoBN;AAED;;;;;GAKG;AACH,wBAAsB,YAAY,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC,CAO3E;AAED;;;GAGG;AACH,wBAAgB,eAAe,CAAC,UAAU,EAAE,UAAU,GAAG,UAAU,CAElE;AAWD;;;;GAIG;AACH,wBAAgB,aAAa,IAAI,MAAM,CAuCtC;AAED;;;;;GAKG;AACH,wBAAsB,eAAe,CACjC,WAAW,EAAE,OAAO,EACpB,MAAM,EAAE,KAAK,CAAC,QAAQ,CAAC,EACvB,SAAS,EAAE,mBAAmB,GAC/B,OAAO,CAAC,aAAa,CAAC,CAMxB;AAED;;;GAGG;AACH,wBAAsB,SAAS,CAAC,GAAG,EAAE,SAAS,GAAG,OAAO,CAAC,UAAU,CAAC,CAKnE;AAED;;;;;;GAMG;AACH,wBAAsB,SAAS,CAC3B,GAAG,EAAE,UAAU,EACf,WAAW,EAAE,OAAO,EACpB,MAAM,EAAE,KAAK,CAAC,QAAQ,CAAC,EACvB,SAAS,EAAE,mBAAmB,GAC/B,OAAO,CAAC,SAAS,CAAC,CAQpB;AAED;;;;;GAKG;AACH,wBAAsB,IAAI,CACtB,GAAG,EAAE,SAAS,EACd,IAAI,EAAE,WAAW,EACjB,SAAS,EAAE,mBAAmB,GAC/B,OAAO,CAAC,WAAW,CAAC,CAMtB;AAED;;GAEG;AACH,wBAAsB,cAAc,IAAI,OAAO,CAAC,MAAM,CAAC,CAWtD;AAED;;;;GAIG;AACH,wBAAsB,YAAY,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC,CASrE;AAED;;;;;GAKG;AACH,wBAAsB,kBAAkB,CACpC,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,MAAM,GACf,OAAO,CAAC,MAAM,CAAC,CAiDjB;AAED;;GAEG;AACH,wBAAsB,eAAe,IAAI,OAAO,CAAC,WAAW,CAAC,CAU5D;AAED;;;;GAIG;AACH,wBAAsB,YAAY,CAAC,OAAO,EAAE,WAAW,GAAG,OAAO,CAAC,SAAS,CAAC,CAI3E;AA4BD;;;;GAIG;AACH,wBAAsB,OAAO,CACzB,OAAO,EAAE,SAAS,EAClB,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,MAAM,GAChB,OAAO,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC,CAkB1C;AAED;;;;;;GAMG;AACH,wBAAsB,OAAO,CACzB,OAAO,EAAE,SAAS,EAClB,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,MAAM,EACf,aAAa,EAAE,MAAM,GACtB,OAAO,CAAC,MAAM,CAAC,CAajB;AAED;;;GAGG;AACH,wBAAsB,UAAU,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAInE;AAmDD;;;;;GAKG;AACH,wBAAsB,oBAAoB,CACtC,SAAS,EAAE,UAAU,GACtB,OAAO,CAAC,MAAM,CAAC,CAQjB"}

package/types/crypto/CryptoOps.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"CryptoOps.d.ts","sourceRoot":"","sources":["../../src/crypto/CryptoOps.ts"],"names":[],"mappings":"AAKA,OAAO,EAGH,OAAO,EACP,kBAAkB,EAElB,MAAM,EACN,UAAU,EACV,iBAAiB,EACjB,2BAA2B,EAC9B,MAAM,4BAA4B,CAAC;AAepC,MAAM,MAAM,aAAa,GAAG;IACxB,SAAS,EAAE,SAAS,CAAC;IACrB,UAAU,EAAE,SAAS,CAAC;IACtB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,UAAU,CAAC,EAAE,MAAM,CAAC;CACvB,CAAC;AAEF;;;GAGG;AACH,qBAAa,SAAU,YAAW,OAAO;IACrC,OAAO,CAAC,MAAM,CAAS;IAEvB;;;OAGG;IACH,OAAO,CAAC,iBAAiB,CAAiC;IAE1D,OAAO,CAAC,MAAM,CAAC,cAAc,CAAuC;IACpE,OAAO,CAAC,MAAM,CAAC,WAAW,CAAiB;IAC3C,OAAO,CAAC,KAAK,CAAoC;gBAG7C,MAAM,EAAE,MAAM,EACd,iBAAiB,CAAC,EAAE,kBAAkB,EACtC,wBAAwB,CAAC,EAAE,OAAO;IAWtC;;;OAGG;IACH,aAAa,IAAI,MAAM;IAIvB;;;OAGG;IACH,YAAY,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM;IAInC;;;OAGG;IACH,YAAY,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM;IAInC;;;OAGG;IACH,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM;IAItC;;;;OAIG;IACH,SAAS,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM;IAInC;;;OAGG;IACG,sBAAsB,CACxB,OAAO,EAAE,2BAA2B,GACrC,OAAO,CAAC,MAAM,CAAC;IAyDlB;;;;OAIG;IACG,qBAAqB,CACvB,GAAG,EAAE,MAAM,EACX,aAAa,EAAE,MAAM,GACtB,OAAO,CAAC,IAAI,CAAC;IAWhB;;;OAGG;IACG,aAAa,CAAC,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IA4B5D;;;;OAIG;IACG,OAAO,CACT,OAAO,EAAE,iBAAiB,EAC1B,GAAG,EAAE,MAAM,EACX,UAAU,CAAC,EAAE,UAAU,EACvB,aAAa,CAAC,EAAE,MAAM,GACvB,OAAO,CAAC,MAAM,CAAC;IA8DlB;;;OAGG;IACG,UAAU,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;CAGvD"}
+{"version":3,"file":"CryptoOps.d.ts","sourceRoot":"","sources":["../../src/crypto/CryptoOps.ts"],"names":[],"mappings":"AAKA,OAAO,EAGH,OAAO,EACP,kBAAkB,EAElB,MAAM,EACN,UAAU,EACV,iBAAiB,EACjB,2BAA2B,EAC9B,MAAM,4BAA4B,CAAC;AAepC,MAAM,MAAM,aAAa,GAAG;IACxB,SAAS,EAAE,SAAS,CAAC;IACrB,UAAU,EAAE,SAAS,CAAC;IACtB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,UAAU,CAAC,EAAE,MAAM,CAAC;CACvB,CAAC;AAEF;;;GAGG;AACH,qBAAa,SAAU,YAAW,OAAO;IACrC,OAAO,CAAC,MAAM,CAAS;IAEvB;;;OAGG;IACH,OAAO,CAAC,iBAAiB,CAAiC;IAE1D,OAAO,CAAC,MAAM,CAAC,cAAc,CAAuC;IACpE,OAAO,CAAC,MAAM,CAAC,WAAW,CAAiB;IAC3C,OAAO,CAAC,KAAK,CAAoC;gBAG7C,MAAM,EAAE,MAAM,EACd,iBAAiB,CAAC,EAAE,kBAAkB,EACtC,wBAAwB,CAAC,EAAE,OAAO;IAWtC;;;OAGG;IACH,aAAa,IAAI,MAAM;IAIvB;;;OAGG;IACH,YAAY,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM;IAInC;;;OAGG;IACH,YAAY,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM;IAInC;;;OAGG;IACH,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM;IAItC;;;;OAIG;IACH,SAAS,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM;IAInC;;;OAGG;IACG,sBAAsB,CACxB,OAAO,EAAE,2BAA2B,GACrC,OAAO,CAAC,MAAM,CAAC;IAyDlB;;;;OAIG;IACG,qBAAqB,CACvB,GAAG,EAAE,MAAM,EACX,aAAa,EAAE,MAAM,GACtB,OAAO,CAAC,IAAI,CAAC;IAWhB;;;OAGG;IACG,aAAa,CAAC,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IA4B5D;;;;OAIG;IACG,OAAO,CACT,OAAO,EAAE,iBAAiB,EAC1B,GAAG,EAAE,MAAM,EACX,UAAU,CAAC,EAAE,UAAU,EACvB,aAAa,CAAC,EAAE,MAAM,GACvB,OAAO,CAAC,MAAM,CAAC;IA+DlB;;;OAGG;IACG,UAAU,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;CAGvD"}

package/types/custom_auth/CustomAuthConstants.d.ts

@@ -23,7 +23,7 @@ export declare const CustomHeaderConstants: {
 };
 export declare const DefaultPackageInfo: {
     readonly SKU: "msal.browser";
-    readonly VERSION: "5.16.0";
+    readonly VERSION: "5.17.1";
     readonly OS: "";
     readonly CPU: "";
 };