@azure/msal-browser 5.6.3 → 5.8.0

package/lib/redirect-bridge/types/cache/IWindowStorage.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"IWindowStorage.d.ts","sourceRoot":"","sources":["../../../../src/cache/IWindowStorage.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAEnD,MAAM,WAAW,cAAc,CAAC,CAAC;IAC7B;;OAEG;IACH,UAAU,CAAC,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACjD;;;OAGG;IACH,OAAO,CAAC,GAAG,EAAE,MAAM,GAAG,CAAC,GAAG,IAAI,CAAC;IAE/B;;OAEG;IACH,WAAW,CAAC,GAAG,EAAE,MAAM,GAAG,CAAC,GAAG,IAAI,CAAC;IAEnC;;;;OAIG;IACH,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,GAAG,IAAI,CAAC;IAErC;;OAEG;IACH,WAAW,CACP,GAAG,EAAE,MAAM,EACX,KAAK,EAAE,CAAC,EACR,aAAa,EAAE,MAAM,EACrB,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE,OAAO,GACd,OAAO,CAAC,IAAI,CAAC,CAAC;IAEjB;;;OAGG;IACH,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IAE9B;;OAEG;IACH,OAAO,IAAI,MAAM,EAAE,CAAC;IAEpB;;;OAGG;IACH,WAAW,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;IAElC,WAAW,CACP,GAAG,EAAE,MAAM,EACX,IAAI,EAAE,aAAa,EACnB,aAAa,EAAE,MAAM,GACtB,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;CAC7B"}

package/lib/redirect-bridge/types/cache/LocalStorage.d.ts

@@ -0,0 +1,51 @@
+import { IPerformanceClient, Logger } from "@azure/msal-common/browser";
+import { IWindowStorage } from "./IWindowStorage.js";
+import { EncryptedData } from "./EncryptedData.js";
+export declare class LocalStorage implements IWindowStorage<string> {
+    private clientId;
+    private initialized;
+    private memoryStorage;
+    private performanceClient;
+    private logger;
+    private encryptionCookie?;
+    private broadcast;
+    constructor(clientId: string, logger: Logger, performanceClient: IPerformanceClient);
+    initialize(correlationId: string): Promise<void>;
+    getItem(key: string): string | null;
+    getUserData(key: string): string | null;
+    decryptData(key: string, data: EncryptedData, correlationId: string): Promise<object | null>;
+    setItem(key: string, value: string): void;
+    setUserData(key: string, value: string, correlationId: string, timestamp: string, kmsi: boolean): Promise<void>;
+    removeItem(key: string): void;
+    getKeys(): string[];
+    containsKey(key: string): boolean;
+    /**
+     * Removes all known MSAL keys from the cache
+     */
+    clear(): void;
+    /**
+     * Helper to decrypt all known MSAL keys in localStorage and save them to inMemory storage
+     * @returns
+     */
+    private importExistingCache;
+    /**
+     * Helper to decrypt and save cache entries
+     * @param key
+     * @returns
+     */
+    private getItemFromEncryptedCache;
+    /**
+     * Helper to decrypt and save an array of cache keys
+     * @param arr
+     * @returns Array of keys successfully imported
+     */
+    private importArray;
+    /**
+     * Gets encryption context for a given cache entry. This is clientId for app specific entries, empty string for shared entries
+     * @param key
+     * @returns
+     */
+    private getContext;
+    private updateCache;
+}
+//# sourceMappingURL=LocalStorage.d.ts.map

package/lib/redirect-bridge/types/cache/LocalStorage.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"LocalStorage.d.ts","sourceRoot":"","sources":["../../../../src/cache/LocalStorage.ts"],"names":[],"mappings":"AAKA,OAAO,EAEH,kBAAkB,EAElB,MAAM,EAET,MAAM,4BAA4B,CAAC;AAqBpC,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAIrD,OAAO,EAAE,aAAa,EAAe,MAAM,oBAAoB,CAAC;AAUhE,qBAAa,YAAa,YAAW,cAAc,CAAC,MAAM,CAAC;IACvD,OAAO,CAAC,QAAQ,CAAS;IACzB,OAAO,CAAC,WAAW,CAAU;IAC7B,OAAO,CAAC,aAAa,CAAwB;IAC7C,OAAO,CAAC,iBAAiB,CAAqB;IAC9C,OAAO,CAAC,MAAM,CAAS;IACvB,OAAO,CAAC,gBAAgB,CAAC,CAAmB;IAC5C,OAAO,CAAC,SAAS,CAAmB;gBAGhC,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,MAAM,EACd,iBAAiB,EAAE,kBAAkB;IAenC,UAAU,CAAC,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAsFtD,OAAO,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI;IAInC,WAAW,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI;IASjC,WAAW,CACb,GAAG,EAAE,MAAM,EACX,IAAI,EAAE,aAAa,EACnB,aAAa,EAAE,MAAM,GACtB,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IA+CzB,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI;IAInC,WAAW,CACb,GAAG,EAAE,MAAM,EACX,KAAK,EAAE,MAAM,EACb,aAAa,EAAE,MAAM,EACrB,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE,OAAO,GACd,OAAO,CAAC,IAAI,CAAC;IAoChB,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI;IAY7B,OAAO,IAAI,MAAM,EAAE;IAInB,WAAW,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO;IAIjC;;OAEG;IACH,KAAK,IAAI,IAAI;IAsBb;;;OAGG;YACW,mBAAmB;IA6CjC;;;;OAIG;YACW,yBAAyB;IA0DvC;;;;OAIG;YACW,WAAW;IA0BzB;;;;OAIG;IACH,OAAO,CAAC,UAAU;IASlB,OAAO,CAAC,WAAW;CA4CtB"}

package/lib/redirect-bridge/types/cache/MemoryStorage.d.ts

@@ -0,0 +1,16 @@
+import { IWindowStorage } from "./IWindowStorage.js";
+export declare class MemoryStorage<T> implements IWindowStorage<T> {
+    private cache;
+    constructor();
+    initialize(): Promise<void>;
+    getItem(key: string): T | null;
+    getUserData(key: string): T | null;
+    setItem(key: string, value: T): void;
+    setUserData(key: string, value: T): Promise<void>;
+    removeItem(key: string): void;
+    getKeys(): string[];
+    containsKey(key: string): boolean;
+    clear(): void;
+    decryptData(): Promise<object | null>;
+}
+//# sourceMappingURL=MemoryStorage.d.ts.map

package/lib/redirect-bridge/types/cache/MemoryStorage.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"MemoryStorage.d.ts","sourceRoot":"","sources":["../../../../src/cache/MemoryStorage.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAErD,qBAAa,aAAa,CAAC,CAAC,CAAE,YAAW,cAAc,CAAC,CAAC,CAAC;IACtD,OAAO,CAAC,KAAK,CAAiB;;IAMxB,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC;IAIjC,OAAO,CAAC,GAAG,EAAE,MAAM,GAAG,CAAC,GAAG,IAAI;IAI9B,WAAW,CAAC,GAAG,EAAE,MAAM,GAAG,CAAC,GAAG,IAAI;IAIlC,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,GAAG,IAAI;IAI9B,WAAW,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;IAIvD,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI;IAI7B,OAAO,IAAI,MAAM,EAAE;IAQnB,WAAW,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO;IAIjC,KAAK,IAAI,IAAI;IAIb,WAAW,IAAI,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;CAIxC"}

package/lib/redirect-bridge/types/cache/SessionStorage.d.ts

@@ -0,0 +1,14 @@
+import { IWindowStorage } from "./IWindowStorage.js";
+export declare class SessionStorage implements IWindowStorage<string> {
+    constructor();
+    initialize(): Promise<void>;
+    getItem(key: string): string | null;
+    getUserData(key: string): string | null;
+    setItem(key: string, value: string): void;
+    setUserData(key: string, value: string): Promise<void>;
+    removeItem(key: string): void;
+    getKeys(): string[];
+    containsKey(key: string): boolean;
+    decryptData(): Promise<object | null>;
+}
+//# sourceMappingURL=SessionStorage.d.ts.map

package/lib/redirect-bridge/types/cache/SessionStorage.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"SessionStorage.d.ts","sourceRoot":"","sources":["../../../../src/cache/SessionStorage.ts"],"names":[],"mappings":"AASA,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAErD,qBAAa,cAAe,YAAW,cAAc,CAAC,MAAM,CAAC;;IASnD,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC;IAIjC,OAAO,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI;IAInC,WAAW,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI;IAIvC,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI;IAInC,WAAW,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAI5D,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI;IAI7B,OAAO,IAAI,MAAM,EAAE;IAInB,WAAW,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO;IAIjC,WAAW,IAAI,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;CAIxC"}

package/lib/redirect-bridge/types/cache/TokenCache.d.ts

@@ -0,0 +1,20 @@
+import { ExternalTokenResponse, IPerformanceClient } from "@azure/msal-common/browser";
+import { Configuration } from "../config/Configuration.js";
+import type { SilentRequest } from "../request/SilentRequest.js";
+import type { AuthenticationResult } from "../response/AuthenticationResult.js";
+export type LoadTokenOptions = {
+    clientInfo?: string;
+    expiresOn?: number;
+    extendedExpiresOn?: number;
+};
+/**
+ * API to load tokens to msal-browser cache.
+ * @param config - Object to configure the MSAL app.
+ * @param request - Silent request containing authority, scopes, and account.
+ * @param response - External token response to load into the cache.
+ * @param options - Options controlling how tokens are loaded into the cache.
+ * @param performanceClient - Optional performance client used for telemetry measurements.
+ * @returns `AuthenticationResult` for the response that was loaded.
+ */
+export declare function loadExternalTokens(config: Configuration, request: SilentRequest, response: ExternalTokenResponse, options: LoadTokenOptions, performanceClient?: IPerformanceClient): Promise<AuthenticationResult>;
+//# sourceMappingURL=TokenCache.d.ts.map

package/lib/redirect-bridge/types/cache/TokenCache.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"TokenCache.d.ts","sourceRoot":"","sources":["../../../../src/cache/TokenCache.ts"],"names":[],"mappings":"AAKA,OAAO,EAYH,qBAAqB,EAIrB,kBAAkB,EAOrB,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAsB,aAAa,EAAE,MAAM,4BAA4B,CAAC;AAS/E,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AACjE,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,qCAAqC,CAAC;AAOhF,MAAM,MAAM,gBAAgB,GAAG;IAC3B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC9B,CAAC;AAEF;;;;;;;;GAQG;AACH,wBAAsB,kBAAkB,CACpC,MAAM,EAAE,aAAa,EACrB,OAAO,EAAE,aAAa,EACtB,QAAQ,EAAE,qBAAqB,EAC/B,OAAO,EAAE,gBAAgB,EACzB,iBAAiB,GAAE,kBAAgD,GACpE,OAAO,CAAC,oBAAoB,CAAC,CAoJ/B"}

package/lib/redirect-bridge/types/config/Configuration.d.ts

@@ -0,0 +1,198 @@
+import { SystemOptions, LoggerOptions, INetworkModule, ProtocolMode, OIDCOptions, AzureCloudOptions, ApplicationTelemetry, IPerformanceClient } from "@azure/msal-common/browser";
+import { BrowserCacheLocation } from "../utils/BrowserConstants.js";
+import { INavigationClient } from "../navigation/INavigationClient.js";
+export declare const DEFAULT_POPUP_TIMEOUT_MS = 60000;
+export declare const DEFAULT_IFRAME_TIMEOUT_MS = 10000;
+export declare const DEFAULT_REDIRECT_TIMEOUT_MS = 30000;
+export declare const DEFAULT_NATIVE_BROKER_HANDSHAKE_TIMEOUT_MS = 2000;
+/**
+ * Use this to configure the auth options in the Configuration object
+ */
+export type BrowserAuthOptions = {
+    /**
+     * Client ID of your app registered with our Application registration portal : https://portal.azure.com/#blade/Microsoft_AAD_IAM/ActiveDirectoryMenuBlade/RegisteredAppsPreview in Microsoft Identity Platform
+     */
+    clientId: string;
+    /**
+     * You can configure a specific authority, defaults to " " or "https://login.microsoftonline.com/common"
+     */
+    authority?: string;
+    /**
+     * An array of URIs that are known to be valid. Used in B2C scenarios.
+     */
+    knownAuthorities?: Array<string>;
+    /**
+     * A string containing the cloud discovery response. Used in AAD scenarios.
+     */
+    cloudDiscoveryMetadata?: string;
+    /**
+     * A string containing the .well-known/openid-configuration endpoint response
+     */
+    authorityMetadata?: string;
+    /**
+     * The redirect URI where authentication responses can be received by your application. It must exactly match one of the redirect URIs registered in the Azure portal.
+     */
+    redirectUri?: string;
+    /**
+     * The redirect URI where the window navigates after a successful logout.
+     */
+    postLogoutRedirectUri?: string | null;
+    /**
+     * Array of capabilities which will be added to the claims.access_token.xms_cc request property on every network request.
+     */
+    clientCapabilities?: Array<string>;
+    /**
+     * Enum that configures options for the OIDC protocol mode.
+     */
+    OIDCOptions?: OIDCOptions;
+    /**
+     * Enum that represents the Azure Cloud to use.
+     */
+    azureCloudOptions?: AzureCloudOptions;
+    /**
+     * Callback that will be passed the url that MSAL will navigate to in redirect flows. Returning false in the callback will stop navigation.
+     */
+    onRedirectNavigate?: (url: string) => boolean | void;
+    /**
+     * Flag of whether the STS will send back additional parameters to specify where the tokens should be retrieved from.
+     */
+    instanceAware?: boolean;
+    /**
+     * Flag on whether a resource parameter is required for token requests. Used for MCP flows.
+     */
+    isMcp?: boolean;
+    /**
+     * If set to true, MSAL will make a background SSO verification call after successful interactive authentication.
+     * This adds an extra network call, so it is recommended to leave this set to false unless your application has a specific need for it.
+     * Additional network calls may occur after interactive authentication flows such as acquireTokenPopup and handleRedirectPromise.
+     * This is a boolean flag and defaults to false if not specified.
+     */
+    verifySSO?: boolean;
+};
+/** @internal */
+export type InternalAuthOptions = Omit<Required<BrowserAuthOptions>, "onRedirectNavigate"> & {
+    OIDCOptions: Required<OIDCOptions>;
+    onRedirectNavigate?: (url: string) => boolean | void;
+};
+/**
+ * Use this to configure the below cache configuration options:
+ */
+export type CacheOptions = {
+    /**
+     * Used to specify the cacheLocation user wants to set. Valid values are "localStorage", "sessionStorage" and "memoryStorage".
+     */
+    cacheLocation?: BrowserCacheLocation | string;
+    /**
+     * Used to specify the number of days cache entries written by previous versions of MSAL.js should be retained in the browser. Defaults to 5 days.
+     */
+    cacheRetentionDays?: number;
+};
+export type BrowserSystemOptions = SystemOptions & {
+    /**
+     * Used to initialize the Logger object (See ClientConfiguration.ts)
+     */
+    loggerOptions?: LoggerOptions;
+    /**
+     * Network interface implementation
+     */
+    networkClient?: INetworkModule;
+    /**
+     * Override the methods used to navigate to other webpages. Particularly useful if you are using a client-side router
+     */
+    navigationClient?: INavigationClient;
+    /**
+     * Sets the timeout for waiting for response from a popup using BroadcastChannel
+     */
+    popupBridgeTimeout?: number;
+    /**
+     * Sets the timeout for waiting for response from an iframe using BroadcastChannel
+     */
+    iframeBridgeTimeout?: number;
+    /**
+     * Time to wait for redirection to occur before resolving promise
+     */
+    redirectNavigationTimeout?: number;
+    /**
+     * Sets whether popups are opened and navigated to later. By default, this flag is set to true. When set to true, blank popups are opened and navigates to login domain. When set to false, popups are opened directly to the login domain.
+     */
+    navigatePopups?: boolean;
+    /**
+     * Flag to enable redirect opertaions when the app is rendered in an iframe (to support scenarios such as embedded B2C login).
+     */
+    allowRedirectInIframe?: boolean;
+    /**
+     * Flag to enable native broker support (e.g. acquiring tokens from WAM on Windows, MacBroker on Mac)
+     */
+    allowPlatformBroker?: boolean;
+    /**
+     * Sets the timeout for waiting for the native broker handshake to resolve
+     */
+    nativeBrokerHandshakeTimeout?: number;
+    /**
+     * Enum that represents the protocol that msal follows. Used for configuring proper endpoints.
+     */
+    protocolMode?: ProtocolMode;
+};
+/** @internal */
+export type BrowserExperimentalOptions = {
+    /**
+     * Enables iframe timeout telemetry experiment for silent iframe bridge monitoring.
+     */
+    iframeTimeoutTelemetry?: boolean;
+};
+/**
+ * Telemetry Options
+ */
+export type BrowserTelemetryOptions = {
+    /**
+     * Telemetry information sent on request
+     * - appName: Unique string name of an application
+     * - appVersion: Version of the application using MSAL
+     */
+    application?: ApplicationTelemetry;
+    client?: IPerformanceClient;
+};
+/**
+ * This object allows you to configure important elements of MSAL functionality and is passed into the constructor of PublicClientApplication
+ */
+export type Configuration = {
+    /**
+     * This is where you configure auth elements like clientID, authority used for authenticating against the Microsoft Identity Platform
+     */
+    auth: BrowserAuthOptions;
+    /**
+     * This is where you configure cache location and whether to store cache in cookies
+     */
+    cache?: CacheOptions;
+    /**
+     * This is where you can configure the network client, logger, token renewal offset
+     */
+    system?: BrowserSystemOptions;
+    /**
+     * This is where you can configure experimental features. These do not follow semver and may be changed or removed without a major version bump. Use with caution.
+     */
+    experimental?: BrowserExperimentalOptions;
+    /**
+     * This is where you can configure telemetry data and options
+     */
+    telemetry?: BrowserTelemetryOptions;
+};
+/** @internal */
+export type BrowserConfiguration = {
+    auth: InternalAuthOptions;
+    cache: Required<CacheOptions>;
+    system: Required<BrowserSystemOptions>;
+    experimental: Required<BrowserExperimentalOptions>;
+    telemetry: Required<BrowserTelemetryOptions>;
+};
+/**
+ * MSAL function that sets the default options when not explicitly configured from app developer
+ *
+ * @param auth
+ * @param cache
+ * @param system
+ *
+ * @returns Configuration object
+ */
+export declare function buildConfiguration({ auth: userInputAuth, cache: userInputCache, system: userInputSystem, experimental: userInputExperimental, telemetry: userInputTelemetry, }: Configuration, isBrowserEnvironment: boolean): BrowserConfiguration;
+//# sourceMappingURL=Configuration.d.ts.map

package/lib/redirect-bridge/types/config/Configuration.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"Configuration.d.ts","sourceRoot":"","sources":["../../../../src/config/Configuration.ts"],"names":[],"mappings":"AAKA,OAAO,EACH,aAAa,EACb,aAAa,EACb,cAAc,EAEd,YAAY,EACZ,WAAW,EAIX,iBAAiB,EACjB,oBAAoB,EAGpB,kBAAkB,EAIrB,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAC;AACpE,OAAO,EAAE,iBAAiB,EAAE,MAAM,oCAAoC,CAAC;AAKvE,eAAO,MAAM,wBAAwB,QAAQ,CAAC;AAC9C,eAAO,MAAM,yBAAyB,QAAQ,CAAC;AAC/C,eAAO,MAAM,2BAA2B,QAAQ,CAAC;AACjD,eAAO,MAAM,0CAA0C,OAAO,CAAC;AAE/D;;GAEG;AACH,MAAM,MAAM,kBAAkB,GAAG;IAC7B;;OAEG;IACH,QAAQ,EAAE,MAAM,CAAC;IACjB;;OAEG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;OAEG;IACH,gBAAgB,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IACjC;;OAEG;IACH,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC;;OAEG;IACH,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B;;OAEG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;OAEG;IACH,qBAAqB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAEtC;;OAEG;IACH,kBAAkB,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IACnC;;OAEG;IACH,WAAW,CAAC,EAAE,WAAW,CAAC;IAC1B;;OAEG;IACH,iBAAiB,CAAC,EAAE,iBAAiB,CAAC;IACtC;;OAEG;IACH,kBAAkB,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,GAAG,IAAI,CAAC;IACrD;;OAEG;IACH,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB;;OAEG;IACH,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB;;;;;OAKG;IACH,SAAS,CAAC,EAAE,OAAO,CAAC;CACvB,CAAC;AAEF,gBAAgB;AAChB,MAAM,MAAM,mBAAmB,GAAG,IAAI,CAClC,QAAQ,CAAC,kBAAkB,CAAC,EAC5B,oBAAoB,CACvB,GAAG;IACA,WAAW,EAAE,QAAQ,CAAC,WAAW,CAAC,CAAC;IACnC,kBAAkB,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,GAAG,IAAI,CAAC;CACxD,CAAC;AAEF;;GAEG;AACH,MAAM,MAAM,YAAY,GAAG;IACvB;;OAEG;IACH,aAAa,CAAC,EAAE,oBAAoB,GAAG,MAAM,CAAC;IAC9C;;OAEG;IACH,kBAAkB,CAAC,EAAE,MAAM,CAAC;CAC/B,CAAC;AAEF,MAAM,MAAM,oBAAoB,GAAG,aAAa,GAAG;IAC/C;;OAEG;IACH,aAAa,CAAC,EAAE,aAAa,CAAC;IAC9B;;OAEG;IACH,aAAa,CAAC,EAAE,cAAc,CAAC;IAC/B;;OAEG;IACH,gBAAgB,CAAC,EAAE,iBAAiB,CAAC;IACrC;;OAEG;IACH,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B;;OAEG;IACH,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B;;OAEG;IACH,yBAAyB,CAAC,EAAE,MAAM,CAAC;IACnC;;OAEG;IACH,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB;;OAEG;IACH,qBAAqB,CAAC,EAAE,OAAO,CAAC;IAChC;;OAEG;IACH,mBAAmB,CAAC,EAAE,OAAO,CAAC;IAC9B;;OAEG;IACH,4BAA4B,CAAC,EAAE,MAAM,CAAC;IACtC;;OAEG;IACH,YAAY,CAAC,EAAE,YAAY,CAAC;CAC/B,CAAC;AAEF,gBAAgB;AAChB,MAAM,MAAM,0BAA0B,GAAG;IACrC;;OAEG;IACH,sBAAsB,CAAC,EAAE,OAAO,CAAC;CACpC,CAAC;AAEF;;GAEG;AACH,MAAM,MAAM,uBAAuB,GAAG;IAClC;;;;OAIG;IACH,WAAW,CAAC,EAAE,oBAAoB,CAAC;IAEnC,MAAM,CAAC,EAAE,kBAAkB,CAAC;CAC/B,CAAC;AAEF;;GAEG;AACH,MAAM,MAAM,aAAa,GAAG;IACxB;;OAEG;IACH,IAAI,EAAE,kBAAkB,CAAC;IACzB;;OAEG;IACH,KAAK,CAAC,EAAE,YAAY,CAAC;IACrB;;OAEG;IACH,MAAM,CAAC,EAAE,oBAAoB,CAAC;IAC9B;;OAEG;IACH,YAAY,CAAC,EAAE,0BAA0B,CAAC;IAC1C;;OAEG;IACH,SAAS,CAAC,EAAE,uBAAuB,CAAC;CACvC,CAAC;AAEF,gBAAgB;AAChB,MAAM,MAAM,oBAAoB,GAAG;IAC/B,IAAI,EAAE,mBAAmB,CAAC;IAC1B,KAAK,EAAE,QAAQ,CAAC,YAAY,CAAC,CAAC;IAC9B,MAAM,EAAE,QAAQ,CAAC,oBAAoB,CAAC,CAAC;IACvC,YAAY,EAAE,QAAQ,CAAC,0BAA0B,CAAC,CAAC;IACnD,SAAS,EAAE,QAAQ,CAAC,uBAAuB,CAAC,CAAC;CAChD,CAAC;AAEF;;;;;;;;GAQG;AACH,wBAAgB,kBAAkB,CAC9B,EACI,IAAI,EAAE,aAAa,EACnB,KAAK,EAAE,cAAc,EACrB,MAAM,EAAE,eAAe,EACvB,YAAY,EAAE,qBAAqB,EACnC,SAAS,EAAE,kBAAkB,GAChC,EAAE,aAAa,EAChB,oBAAoB,EAAE,OAAO,GAC9B,oBAAoB,CAqItB"}

package/lib/redirect-bridge/types/controllers/IController.d.ts

@@ -0,0 +1,3 @@
+import { IPublicClientApplication } from "../app/IPublicClientApplication.js";
+export type IController = IPublicClientApplication;
+//# sourceMappingURL=IController.d.ts.map

package/lib/redirect-bridge/types/controllers/IController.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"IController.d.ts","sourceRoot":"","sources":["../../../../src/controllers/IController.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,wBAAwB,EAAE,MAAM,oCAAoC,CAAC;AAE9E,MAAM,MAAM,WAAW,GAAG,wBAAwB,CAAC"}

package/lib/redirect-bridge/types/controllers/NestedAppAuthController.d.ts

@@ -0,0 +1,159 @@
+import { CommonAuthorizationUrlRequest, PerformanceCallbackFunction, AccountInfo, Logger, ICrypto, IPerformanceClient, AccountFilter } from "@azure/msal-common/browser";
+import { BrowserConfiguration } from "../config/Configuration.js";
+import { INavigationClient } from "../navigation/INavigationClient.js";
+import { AuthorizationCodeRequest } from "../request/AuthorizationCodeRequest.js";
+import { EndSessionPopupRequest } from "../request/EndSessionPopupRequest.js";
+import { EndSessionRequest } from "../request/EndSessionRequest.js";
+import { PopupRequest } from "../request/PopupRequest.js";
+import { RedirectRequest } from "../request/RedirectRequest.js";
+import { SilentRequest } from "../request/SilentRequest.js";
+import { SsoSilentRequest } from "../request/SsoSilentRequest.js";
+import { WrapperSKU } from "../utils/BrowserConstants.js";
+import { IController } from "./IController.js";
+import { NestedAppOperatingContext } from "../operatingcontext/NestedAppOperatingContext.js";
+import { IBridgeProxy } from "../naa/IBridgeProxy.js";
+import { NestedAppAuthAdapter } from "../naa/mapping/NestedAppAuthAdapter.js";
+import { EventHandler } from "../event/EventHandler.js";
+import { EventType } from "../event/EventType.js";
+import { EventCallbackFunction } from "../event/EventMessage.js";
+import { AuthenticationResult } from "../response/AuthenticationResult.js";
+import { BrowserCacheManager } from "../cache/BrowserCacheManager.js";
+import { ClearCacheRequest } from "../request/ClearCacheRequest.js";
+import { AccountContext } from "../naa/BridgeAccountContext.js";
+import { InitializeApplicationRequest } from "../request/InitializeApplicationRequest.js";
+import { HandleRedirectPromiseOptions } from "../request/HandleRedirectPromiseOptions.js";
+export declare class NestedAppAuthController implements IController {
+    protected readonly operatingContext: NestedAppOperatingContext;
+    protected readonly bridgeProxy: IBridgeProxy;
+    protected readonly browserCrypto: ICrypto;
+    protected readonly config: BrowserConfiguration;
+    protected readonly browserStorage: BrowserCacheManager;
+    protected logger: Logger;
+    protected readonly performanceClient: IPerformanceClient;
+    protected readonly eventHandler: EventHandler;
+    protected readonly nestedAppAuthAdapter: NestedAppAuthAdapter;
+    protected currentAccountContext: AccountContext | null;
+    constructor(operatingContext: NestedAppOperatingContext);
+    /**
+     * Factory function to create a new instance of NestedAppAuthController
+     * @param operatingContext
+     * @returns Promise<IController>
+     */
+    static createController(operatingContext: NestedAppOperatingContext): Promise<IController>;
+    /**
+     * Specific implementation of initialize function for NestedAppAuthController
+     * @returns
+     */
+    initialize(request?: InitializeApplicationRequest, isBroker?: boolean): Promise<void>;
+    /**
+     * Validate the incoming request and add correlationId if not present
+     * @param request
+     * @returns
+     */
+    private ensureValidRequest;
+    /**
+     * Internal implementation of acquireTokenInteractive flow
+     * @param request
+     * @returns
+     */
+    private acquireTokenInteractive;
+    /**
+     * Internal implementation of acquireTokenSilent flow
+     * @param request
+     * @returns
+     */
+    private acquireTokenSilentInternal;
+    /**
+     * acquires tokens from cache
+     * @param request
+     * @returns
+     */
+    private acquireTokenFromCache;
+    /**
+     *
+     * @param request
+     * @returns
+     */
+    private acquireTokenFromCacheInternal;
+    /**
+     * acquireTokenPopup flow implementation
+     * @param request
+     * @returns
+     */
+    acquireTokenPopup(request: PopupRequest): Promise<AuthenticationResult>;
+    /**
+     * acquireTokenRedirect flow is not supported in nested app auth
+     * @param request
+     */
+    acquireTokenRedirect(request: RedirectRequest): Promise<void>;
+    /**
+     * acquireTokenSilent flow implementation
+     * @param silentRequest
+     * @returns
+     */
+    acquireTokenSilent(silentRequest: SilentRequest): Promise<AuthenticationResult>;
+    /**
+     * Hybrid flow is not currently supported in nested app auth
+     * @param request
+     */
+    acquireTokenByCode(request: AuthorizationCodeRequest): Promise<AuthenticationResult>;
+    /**
+     * Adds event callbacks to array
+     * @param callback
+     * @param eventTypes
+     */
+    addEventCallback(callback: EventCallbackFunction, eventTypes?: Array<EventType>): string | null;
+    /**
+     * Removes callback with provided id from callback array
+     * @param callbackId
+     */
+    removeEventCallback(callbackId: string): void;
+    addPerformanceCallback(callback: PerformanceCallbackFunction): string;
+    removePerformanceCallback(callbackId: string): boolean;
+    /**
+     * Returns all the accounts in the cache that match the optional filter. If no filter is provided, all accounts are returned.
+     * @param accountFilter - (Optional) filter to narrow down the accounts returned
+     * @returns Array of AccountInfo objects in cache
+     */
+    getAllAccounts(accountFilter?: AccountFilter): AccountInfo[];
+    /**
+     * Returns the first account found in the cache that matches the account filter passed in.
+     * @param accountFilter
+     * @returns The first account found in the cache matching the provided filter or null if no account could be found.
+     */
+    getAccount(accountFilter: AccountFilter): AccountInfo | null;
+    /**
+     * Sets the account to use as the active account. If no account is passed to the acquireToken APIs, then MSAL will use this active account.
+     * @param account
+     */
+    setActiveAccount(account: AccountInfo | null): void;
+    /**
+     * Gets the currently active account
+     */
+    getActiveAccount(): AccountInfo | null;
+    handleRedirectPromise(options?: HandleRedirectPromiseOptions): Promise<AuthenticationResult | null>;
+    loginPopup(request?: PopupRequest | undefined): Promise<AuthenticationResult>;
+    loginRedirect(request?: RedirectRequest | undefined): Promise<void>;
+    logoutRedirect(logoutRequest?: EndSessionRequest | undefined): Promise<void>;
+    logoutPopup(logoutRequest?: EndSessionPopupRequest | undefined): Promise<void>;
+    ssoSilent(request: Partial<Omit<CommonAuthorizationUrlRequest, "responseMode" | "earJwk" | "codeChallenge" | "codeChallengeMethod" | "platformBroker">>): Promise<AuthenticationResult>;
+    /**
+     * Returns the logger instance
+     */
+    getLogger(): Logger;
+    /**
+     * Replaces the default logger set in configurations with new Logger with new configurations
+     * @param logger Logger instance
+     */
+    setLogger(logger: Logger): void;
+    initializeWrapperLibrary(sku: WrapperSKU, version: string): void;
+    setNavigationClient(navigationClient: INavigationClient): void;
+    getConfiguration(): BrowserConfiguration;
+    isBrowserEnv(): boolean;
+    getBrowserCrypto(): ICrypto;
+    getPerformanceClient(): IPerformanceClient;
+    getRedirectResponse(): Map<string, Promise<AuthenticationResult | null>>;
+    clearCache(logoutRequest?: ClearCacheRequest): Promise<void>;
+    hydrateCache(result: AuthenticationResult, request: SilentRequest | SsoSilentRequest | RedirectRequest | PopupRequest): Promise<void>;
+}
+//# sourceMappingURL=NestedAppAuthController.d.ts.map

package/lib/redirect-bridge/types/controllers/NestedAppAuthController.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"NestedAppAuthController.d.ts","sourceRoot":"","sources":["../../../../src/controllers/NestedAppAuthController.ts"],"names":[],"mappings":"AAKA,OAAO,EACH,6BAA6B,EAC7B,2BAA2B,EAC3B,WAAW,EACX,MAAM,EACN,OAAO,EACP,kBAAkB,EAMlB,aAAa,EAKhB,MAAM,4BAA4B,CAAC;AAEpC,OAAO,EAAE,oBAAoB,EAAE,MAAM,4BAA4B,CAAC;AAClE,OAAO,EAAE,iBAAiB,EAAE,MAAM,oCAAoC,CAAC;AACvE,OAAO,EAAE,wBAAwB,EAAE,MAAM,wCAAwC,CAAC;AAClF,OAAO,EAAE,sBAAsB,EAAE,MAAM,sCAAsC,CAAC;AAC9E,OAAO,EAAE,iBAAiB,EAAE,MAAM,iCAAiC,CAAC;AACpE,OAAO,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAC;AAC1D,OAAO,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AAChE,OAAO,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AAC5D,OAAO,EAAE,gBAAgB,EAAE,MAAM,gCAAgC,CAAC;AAClE,OAAO,EACH,UAAU,EAKb,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAC/C,OAAO,EAAE,yBAAyB,EAAE,MAAM,kDAAkD,CAAC;AAC7F,OAAO,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AAEtD,OAAO,EAAE,oBAAoB,EAAE,MAAM,wCAAwC,CAAC;AAE9E,OAAO,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AACxD,OAAO,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAClD,OAAO,EAAE,qBAAqB,EAAc,MAAM,0BAA0B,CAAC;AAC7E,OAAO,EAAE,oBAAoB,EAAE,MAAM,qCAAqC,CAAC;AAC3E,OAAO,EACH,mBAAmB,EAEtB,MAAM,iCAAiC,CAAC;AACzC,OAAO,EAAE,iBAAiB,EAAE,MAAM,iCAAiC,CAAC;AAEpE,OAAO,EAAE,cAAc,EAAE,MAAM,gCAAgC,CAAC;AAChE,OAAO,EAAE,4BAA4B,EAAE,MAAM,4CAA4C,CAAC;AAE1F,OAAO,EAAE,4BAA4B,EAAE,MAAM,4CAA4C,CAAC;AAE1F,qBAAa,uBAAwB,YAAW,WAAW;IAEvD,SAAS,CAAC,QAAQ,CAAC,gBAAgB,EAAE,yBAAyB,CAAC;IAG/D,SAAS,CAAC,QAAQ,CAAC,WAAW,EAAE,YAAY,CAAC;IAG7C,SAAS,CAAC,QAAQ,CAAC,aAAa,EAAE,OAAO,CAAC;IAG1C,SAAS,CAAC,QAAQ,CAAC,MAAM,EAAE,oBAAoB,CAAC;IAGhD,SAAS,CAAC,QAAQ,CAAC,cAAc,EAAG,mBAAmB,CAAC;IAGxD,SAAS,CAAC,MAAM,EAAE,MAAM,CAAC;IAGzB,SAAS,CAAC,QAAQ,CAAC,iBAAiB,EAAE,kBAAkB,CAAC;IAGzD,SAAS,CAAC,QAAQ,CAAC,YAAY,EAAE,YAAY,CAAC;IAG9C,SAAS,CAAC,QAAQ,CAAC,oBAAoB,EAAE,oBAAoB,CAAC;IAG9D,SAAS,CAAC,qBAAqB,EAAE,cAAc,GAAG,IAAI,CAAC;gBAE3C,gBAAgB,EAAE,yBAAyB;IAsDvD;;;;OAIG;WACU,gBAAgB,CACzB,gBAAgB,EAAE,yBAAyB,GAC5C,OAAO,CAAC,WAAW,CAAC;IAKvB;;;OAGG;IACG,UAAU,CACZ,OAAO,CAAC,EAAE,4BAA4B,EAEtC,QAAQ,CAAC,EAAE,OAAO,GACnB,OAAO,CAAC,IAAI,CAAC;IAMhB;;;;OAIG;IACH,OAAO,CAAC,kBAAkB;IAgB1B;;;;OAIG;YACW,uBAAuB;IAqGrC;;;;OAIG;YACW,0BAA0B;IAgHxC;;;;OAIG;YACW,qBAAqB;IA0FnC;;;;OAIG;YACW,6BAA6B;IAmG3C;;;;OAIG;IACG,iBAAiB,CACnB,OAAO,EAAE,YAAY,GACtB,OAAO,CAAC,oBAAoB,CAAC;IAIhC;;;OAGG;IAEH,oBAAoB,CAAC,OAAO,EAAE,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC;IAI7D;;;;OAIG;IACG,kBAAkB,CACpB,aAAa,EAAE,aAAa,GAC7B,OAAO,CAAC,oBAAoB,CAAC;IAIhC;;;OAGG;IAEH,kBAAkB,CACd,OAAO,EAAE,wBAAwB,GAClC,OAAO,CAAC,oBAAoB,CAAC;IAIhC;;;;OAIG;IACH,gBAAgB,CACZ,QAAQ,EAAE,qBAAqB,EAC/B,UAAU,CAAC,EAAE,KAAK,CAAC,SAAS,CAAC,GAC9B,MAAM,GAAG,IAAI;IAIhB;;;OAGG;IACH,mBAAmB,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI;IAK7C,sBAAsB,CAAC,QAAQ,EAAE,2BAA2B,GAAG,MAAM;IAKrE,yBAAyB,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO;IAMtD;;;;OAIG;IACH,cAAc,CAAC,aAAa,CAAC,EAAE,aAAa,GAAG,WAAW,EAAE;IAU5D;;;;OAIG;IACH,UAAU,CAAC,aAAa,EAAE,aAAa,GAAG,WAAW,GAAG,IAAI;IAS5D;;;OAGG;IACH,gBAAgB,CAAC,OAAO,EAAE,WAAW,GAAG,IAAI,GAAG,IAAI;IAYnD;;OAEG;IACH,gBAAgB,IAAI,WAAW,GAAG,IAAI;IAStC,qBAAqB,CACjB,OAAO,CAAC,EAAE,4BAA4B,GACvC,OAAO,CAAC,oBAAoB,GAAG,IAAI,CAAC;IAGvC,UAAU,CACN,OAAO,CAAC,EAAE,YAAY,GAAG,SAAS,GACnC,OAAO,CAAC,oBAAoB,CAAC;IAIhC,aAAa,CAAC,OAAO,CAAC,EAAE,eAAe,GAAG,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC;IAGnE,cAAc,CACV,aAAa,CAAC,EAAE,iBAAiB,GAAG,SAAS,GAC9C,OAAO,CAAC,IAAI,CAAC;IAGhB,WAAW,CACP,aAAa,CAAC,EAAE,sBAAsB,GAAG,SAAS,GACnD,OAAO,CAAC,IAAI,CAAC;IAGhB,SAAS,CAEL,OAAO,EAAE,OAAO,CACZ,IAAI,CACA,6BAA6B,EAC3B,cAAc,GACd,QAAQ,GACR,eAAe,GACf,qBAAqB,GACrB,gBAAgB,CACrB,CACJ,GACF,OAAO,CAAC,oBAAoB,CAAC;IAIhC;;OAEG;IACI,SAAS,IAAI,MAAM;IAI1B;;;OAGG;IACH,SAAS,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI;IAK/B,wBAAwB,CAAC,GAAG,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,GAAG,IAAI;IAShE,mBAAmB,CAAC,gBAAgB,EAAE,iBAAiB,GAAG,IAAI;IAO9D,gBAAgB,IAAI,oBAAoB;IAIxC,YAAY,IAAI,OAAO;IAIvB,gBAAgB,IAAI,OAAO;IAI3B,oBAAoB,IAAI,kBAAkB;IAI1C,mBAAmB,IAAI,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,oBAAoB,GAAG,IAAI,CAAC,CAAC;IAKlE,UAAU,CAAC,aAAa,CAAC,EAAE,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC;IAI5D,YAAY,CACd,MAAM,EAAE,oBAAoB,EAC5B,OAAO,EACD,aAAa,GACb,gBAAgB,GAChB,eAAe,GACf,YAAY,GACnB,OAAO,CAAC,IAAI,CAAC;CAiBnB"}