@azure/msal-browser 5.9.0 → 5.10.0

package/dist/custom_auth/core/interaction_client/CustomAuthInteractionClientBase.mjs

@@ -0,0 +1,69 @@
+/*! @azure/msal-browser v5.10.0 2026-05-07 */
+'use strict';
+import { MethodNotImplementedError } from '../error/MethodNotImplementedError.mjs';
+import { ChallengeType } from '../../CustomAuthConstants.mjs';
+import { StandardInteractionClient } from '../../../interaction_client/StandardInteractionClient.mjs';
+import { ResponseHandler, Constants } from '@azure/msal-common/browser';
+
+/*
+ * Copyright (c) Microsoft Corporation. All rights reserved.
+ * Licensed under the MIT License.
+ */
+class CustomAuthInteractionClientBase extends StandardInteractionClient {
+    constructor(config, storageImpl, browserCrypto, logger, eventHandler, navigationClient, performanceClient, customAuthApiClient, customAuthAuthority) {
+        super(config, storageImpl, browserCrypto, logger, eventHandler, navigationClient, performanceClient, "");
+        this.customAuthApiClient = customAuthApiClient;
+        this.customAuthAuthority = customAuthAuthority;
+        this.tokenResponseHandler = new ResponseHandler(this.config.auth.clientId, this.browserStorage, this.browserCrypto, this.logger, this.performanceClient, null, null);
+    }
+    getChallengeTypes(configuredChallengeTypes) {
+        const challengeType = configuredChallengeTypes ?? [];
+        if (!challengeType.some((type) => type.toLowerCase() === ChallengeType.REDIRECT)) {
+            challengeType.push(ChallengeType.REDIRECT);
+        }
+        return challengeType.join(" ");
+    }
+    getScopes(scopes) {
+        if (!!scopes && scopes.length > 0) {
+            return scopes;
+        }
+        return [
+            Constants.OPENID_SCOPE,
+            Constants.PROFILE_SCOPE,
+            Constants.OFFLINE_ACCESS_SCOPE,
+        ];
+    }
+    /**
+     * Common method to handle token response processing.
+     * @param tokenResponse The token response from the API
+     * @param requestScopes Scopes for the token request
+     * @param correlationId Correlation ID for logging
+     * @returns Authentication result from the token response
+     */
+    async handleTokenResponse(tokenResponse, requestScopes, correlationId, apiId) {
+        this.logger.verbose("04a00a", correlationId);
+        const requestTimestamp = Math.round(new Date().getTime() / 1000.0);
+        // Save tokens and create authentication result
+        const result = await this.tokenResponseHandler.handleServerTokenResponse(tokenResponse, this.customAuthAuthority, requestTimestamp, {
+            authority: this.customAuthAuthority.canonicalAuthority,
+            correlationId: tokenResponse.correlation_id ?? correlationId,
+            scopes: requestScopes,
+        }, apiId);
+        return result;
+    }
+    // It is not necessary to implement this method from base class.
+    acquireToken(
+    // eslint-disable-next-line @typescript-eslint/no-unused-vars
+    request) {
+        throw new MethodNotImplementedError("SignInClient.acquireToken");
+    }
+    // It is not necessary to implement this method from base class.
+    logout(
+    // eslint-disable-next-line @typescript-eslint/no-unused-vars
+    request) {
+        throw new MethodNotImplementedError("SignInClient.logout");
+    }
+}
+
+export { CustomAuthInteractionClientBase };
+//# sourceMappingURL=CustomAuthInteractionClientBase.mjs.map

package/dist/custom_auth/core/interaction_client/CustomAuthInteractionClientBase.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"CustomAuthInteractionClientBase.mjs","sources":["../../../../src/custom_auth/core/interaction_client/CustomAuthInteractionClientBase.ts"],"sourcesContent":[null],"names":[],"mappings":";;;;;;;AAAA;;;AAGG;AA0BG,MAAgB,+BAAgC,SAAQ,yBAAyB,CAAA;AAGnF,IAAA,WAAA,CACI,MAA4B,EAC5B,WAAgC,EAChC,aAAsB,EACtB,MAAc,EACd,YAA0B,EAC1B,gBAAmC,EACnC,iBAAqC,EAC3B,mBAAyC,EACzC,mBAAwC,EAAA;AAElD,QAAA,KAAK,CACD,MAAM,EACN,WAAW,EACX,aAAa,EACb,MAAM,EACN,YAAY,EACZ,gBAAgB,EAChB,iBAAiB,EACjB,EAAE,CACL,CAAC;QAZQ,IAAmB,CAAA,mBAAA,GAAnB,mBAAmB,CAAsB;QACzC,IAAmB,CAAA,mBAAA,GAAnB,mBAAmB,CAAqB;AAalD,QAAA,IAAI,CAAC,oBAAoB,GAAG,IAAI,eAAe,CAC3C,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,EACzB,IAAI,CAAC,cAAc,EACnB,IAAI,CAAC,aAAa,EAClB,IAAI,CAAC,MAAM,EACX,IAAI,CAAC,iBAAiB,EACtB,IAAI,EACJ,IAAI,CACP,CAAC;KACL;AAES,IAAA,iBAAiB,CACvB,wBAA8C,EAAA;AAE9C,QAAA,MAAM,aAAa,GAAG,wBAAwB,IAAI,EAAE,CAAC;AACrD,QAAA,IACI,CAAC,aAAa,CAAC,IAAI,CACf,CAAC,IAAI,KAAK,IAAI,CAAC,WAAW,EAAE,KAAK,aAAa,CAAC,QAAQ,CAC1D,EACH;AACE,YAAA,aAAa,CAAC,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC;AAC9C,SAAA;AACD,QAAA,OAAO,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;KAClC;AAES,IAAA,SAAS,CAAC,MAA4B,EAAA;QAC5C,IAAI,CAAC,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE;AAC/B,YAAA,OAAO,MAAM,CAAC;AACjB,SAAA;QAED,OAAO;AACH,YAAA,SAAS,CAAC,YAAY;AACtB,YAAA,SAAS,CAAC,aAAa;AACvB,YAAA,SAAS,CAAC,oBAAoB;SACjC,CAAC;KACL;AAED;;;;;;AAMG;IACO,MAAM,mBAAmB,CAC/B,aAAkC,EAClC,aAAuB,EACvB,aAAqB,EACrB,KAAa,EAAA;QAEb,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,QAA4B,EAAA,aAAA,CAAA,CAAA;AAEhD,QAAA,MAAM,gBAAgB,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,IAAI,EAAE,CAAC,OAAO,EAAE,GAAG,MAAM,CAAC,CAAC;;AAGnE,QAAA,MAAM,MAAM,GACR,MAAM,IAAI,CAAC,oBAAoB,CAAC,yBAAyB,CACrD,aAAa,EACb,IAAI,CAAC,mBAAmB,EACxB,gBAAgB,EAChB;AACI,YAAA,SAAS,EAAE,IAAI,CAAC,mBAAmB,CAAC,kBAAkB;AACtD,YAAA,aAAa,EACT,aAAa,CAAC,cAAc,IAAI,aAAa;AACjD,YAAA,MAAM,EAAE,aAAa;SACxB,EACD,KAAK,CACR,CAAC;AAEN,QAAA,OAAO,MAA8B,CAAC;KACzC;;IAGD,YAAY;;IAER,OAA0D,EAAA;AAE1D,QAAA,MAAM,IAAI,yBAAyB,CAAC,2BAA2B,CAAC,CAAC;KACpE;;IAGD,MAAM;;IAEF,OAA0D,EAAA;AAE1D,QAAA,MAAM,IAAI,yBAAyB,CAAC,qBAAqB,CAAC,CAAC;KAC9D;AACJ;;;;"}

package/dist/custom_auth/core/interaction_client/CustomAuthInterationClientFactory.mjs

@@ -0,0 +1,25 @@
+/*! @azure/msal-browser v5.10.0 2026-05-07 */
+'use strict';
+/*
+ * Copyright (c) Microsoft Corporation. All rights reserved.
+ * Licensed under the MIT License.
+ */
+class CustomAuthInterationClientFactory {
+    constructor(config, storageImpl, browserCrypto, logger, eventHandler, navigationClient, performanceClient, customAuthApiClient, customAuthAuthority) {
+        this.config = config;
+        this.storageImpl = storageImpl;
+        this.browserCrypto = browserCrypto;
+        this.logger = logger;
+        this.eventHandler = eventHandler;
+        this.navigationClient = navigationClient;
+        this.performanceClient = performanceClient;
+        this.customAuthApiClient = customAuthApiClient;
+        this.customAuthAuthority = customAuthAuthority;
+    }
+    create(clientConstructor) {
+        return new clientConstructor(this.config, this.storageImpl, this.browserCrypto, this.logger, this.eventHandler, this.navigationClient, this.performanceClient, this.customAuthApiClient, this.customAuthAuthority);
+    }
+}
+
+export { CustomAuthInterationClientFactory };
+//# sourceMappingURL=CustomAuthInterationClientFactory.mjs.map

package/dist/custom_auth/core/interaction_client/CustomAuthInterationClientFactory.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"CustomAuthInterationClientFactory.mjs","sources":["../../../../src/custom_auth/core/interaction_client/CustomAuthInterationClientFactory.ts"],"sourcesContent":[null],"names":[],"mappings":";;AAAA;;;AAGG;MAeU,iCAAiC,CAAA;AAC1C,IAAA,WAAA,CACY,MAA4B,EAC5B,WAAgC,EAChC,aAAsB,EACtB,MAAc,EACd,YAA0B,EAC1B,gBAAmC,EACnC,iBAAqC,EACrC,mBAAyC,EACzC,mBAAwC,EAAA;QARxC,IAAM,CAAA,MAAA,GAAN,MAAM,CAAsB;QAC5B,IAAW,CAAA,WAAA,GAAX,WAAW,CAAqB;QAChC,IAAa,CAAA,aAAA,GAAb,aAAa,CAAS;QACtB,IAAM,CAAA,MAAA,GAAN,MAAM,CAAQ;QACd,IAAY,CAAA,YAAA,GAAZ,YAAY,CAAc;QAC1B,IAAgB,CAAA,gBAAA,GAAhB,gBAAgB,CAAmB;QACnC,IAAiB,CAAA,iBAAA,GAAjB,iBAAiB,CAAoB;QACrC,IAAmB,CAAA,mBAAA,GAAnB,mBAAmB,CAAsB;QACzC,IAAmB,CAAA,mBAAA,GAAnB,mBAAmB,CAAqB;KAChD;AAEJ,IAAA,MAAM,CACF,iBAUY,EAAA;AAEZ,QAAA,OAAO,IAAI,iBAAiB,CACxB,IAAI,CAAC,MAAM,EACX,IAAI,CAAC,WAAW,EAChB,IAAI,CAAC,aAAa,EAClB,IAAI,CAAC,MAAM,EACX,IAAI,CAAC,YAAY,EACjB,IAAI,CAAC,gBAAgB,EACrB,IAAI,CAAC,iBAAiB,EACtB,IAAI,CAAC,mBAAmB,EACxB,IAAI,CAAC,mBAAmB,CAC3B,CAAC;KACL;AACJ;;;;"}

package/dist/custom_auth/core/interaction_client/jit/JitClient.mjs

@@ -0,0 +1,110 @@
+/*! @azure/msal-browser v5.10.0 2026-05-07 */
+'use strict';
+import { CustomAuthInteractionClientBase } from '../CustomAuthInteractionClientBase.mjs';
+import { createJitVerificationRequiredResult, createJitCompletedResult } from './result/JitActionResult.mjs';
+import { ChallengeType, GrantType, DefaultCustomAuthApiCodeLength } from '../../../CustomAuthConstants.mjs';
+import { JIT_SUBMIT_CHALLENGE, JIT_CHALLENGE_AUTH_METHOD } from '../../telemetry/PublicApiId.mjs';
+import { initializeServerTelemetryManager } from '../../../../interaction_client/BaseInteractionClient.mjs';
+
+/*
+ * Copyright (c) Microsoft Corporation. All rights reserved.
+ * Licensed under the MIT License.
+ */
+/**
+ * JIT client for handling just-in-time authentication method registration flows.
+ */
+class JitClient extends CustomAuthInteractionClientBase {
+    /**
+     * Challenges an authentication method for JIT registration.
+     * @param parameters The parameters for challenging the auth method.
+     * @returns Promise that resolves to either JitVerificationRequiredResult or JitCompletedResult.
+     */
+    async challengeAuthMethod(parameters) {
+        const correlationId = parameters.correlationId || this.correlationId;
+        const apiId = JIT_CHALLENGE_AUTH_METHOD;
+        const telemetryManager = initializeServerTelemetryManager(apiId, this.config.auth.clientId, correlationId, this.browserStorage, this.logger);
+        this.logger.verbose("1kxcgm", correlationId);
+        const challengeReq = {
+            continuation_token: parameters.continuationToken,
+            challenge_type: parameters.authMethod.challenge_type,
+            challenge_target: parameters.verificationContact,
+            challenge_channel: parameters.authMethod.challenge_channel,
+            correlationId: correlationId,
+            telemetryManager: telemetryManager,
+        };
+        const challengeResponse = await this.customAuthApiClient.registerApi.challenge(challengeReq);
+        this.logger.verbose("07vc8z", challengeResponse.correlation_id || correlationId);
+        /*
+         * Handle fast-pass scenario (preverified)
+         * This occurs when the user selects the same email used during sign-up
+         * Since the email was already verified during sign-up, no additional verification is needed
+         */
+        if (challengeResponse.challenge_type === ChallengeType.PREVERIFIED) {
+            this.logger.verbose("0tmt75", challengeResponse.correlation_id || correlationId);
+            // Use submitChallenge for fast-pass scenario with continuation_token grant type
+            const fastPassParams = {
+                correlationId: challengeResponse.correlation_id || correlationId,
+                continuationToken: challengeResponse.continuation_token,
+                grantType: GrantType.CONTINUATION_TOKEN,
+                scopes: parameters.scopes,
+                username: parameters.username,
+                claims: parameters.claims,
+            };
+            const completedResult = await this.submitChallenge(fastPassParams);
+            return completedResult;
+        }
+        // Verification required
+        return createJitVerificationRequiredResult({
+            correlationId: challengeResponse.correlation_id || correlationId,
+            continuationToken: challengeResponse.continuation_token,
+            challengeChannel: challengeResponse.challenge_channel,
+            challengeTargetLabel: challengeResponse.challenge_target,
+            codeLength: challengeResponse.code_length || DefaultCustomAuthApiCodeLength,
+        });
+    }
+    /**
+     * Submits challenge response and completes JIT registration.
+     * @param parameters The parameters for submitting the challenge.
+     * @returns Promise that resolves to JitCompletedResult.
+     */
+    async submitChallenge(parameters) {
+        const correlationId = parameters.correlationId || this.correlationId;
+        const apiId = JIT_SUBMIT_CHALLENGE;
+        const telemetryManager = initializeServerTelemetryManager(apiId, this.config.auth.clientId, correlationId, this.browserStorage, this.logger);
+        this.logger.verbose("1l3zg1", correlationId);
+        // Submit challenge to complete registration
+        const continueReq = {
+            continuation_token: parameters.continuationToken,
+            grant_type: parameters.grantType,
+            ...(parameters.challenge && {
+                oob: parameters.challenge,
+            }),
+            correlationId: correlationId,
+            telemetryManager: telemetryManager,
+        };
+        const continueResponse = await this.customAuthApiClient.registerApi.continue(continueReq);
+        this.logger.verbose("10bc4x", parameters.correlationId);
+        // Use continuation token to get authentication tokens
+        const scopes = this.getScopes(parameters.scopes);
+        const tokenRequest = {
+            continuation_token: continueResponse.continuation_token,
+            scope: scopes.join(" "),
+            correlationId: continueResponse.correlation_id || correlationId,
+            telemetryManager: telemetryManager,
+            ...(parameters.claims && {
+                claims: parameters.claims,
+            }),
+        };
+        const tokenResponse = await this.customAuthApiClient.signInApi.requestTokenWithContinuationToken(tokenRequest);
+        const authResult = await this.handleTokenResponse(tokenResponse, scopes, tokenResponse.correlation_id ||
+            continueResponse.correlation_id ||
+            correlationId, apiId);
+        return createJitCompletedResult({
+            correlationId: continueResponse.correlation_id || correlationId,
+            authenticationResult: authResult,
+        });
+    }
+}
+
+export { JitClient };
+//# sourceMappingURL=JitClient.mjs.map

package/dist/custom_auth/core/interaction_client/jit/JitClient.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"JitClient.mjs","sources":["../../../../../src/custom_auth/core/interaction_client/jit/JitClient.ts"],"sourcesContent":[null],"names":["PublicApiId.JIT_CHALLENGE_AUTH_METHOD","PublicApiId.JIT_SUBMIT_CHALLENGE"],"mappings":";;;;;;;;AAAA;;;AAGG;AA0BH;;AAEG;AACG,MAAO,SAAU,SAAQ,+BAA+B,CAAA;AAC1D;;;;AAIG;IACH,MAAM,mBAAmB,CACrB,UAAwC,EAAA;QAExC,MAAM,aAAa,GAAG,UAAU,CAAC,aAAa,IAAI,IAAI,CAAC,aAAa,CAAC;AACrE,QAAA,MAAM,KAAK,GAAGA,yBAAqC,CAAC;QACpD,MAAM,gBAAgB,GAAG,gCAAgC,CACrD,KAAK,EACL,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,EACzB,aAAa,EACb,IAAI,CAAC,cAAc,EACnB,IAAI,CAAC,MAAM,CACd,CAAC;QAEF,IAAI,CAAC,MAAM,CAAC,OAAO,CACf,QAAqD,EAAA,aAAA,CAAA,CAAA;AAIzD,QAAA,MAAM,YAAY,GAA6B;YAC3C,kBAAkB,EAAE,UAAU,CAAC,iBAAiB;AAChD,YAAA,cAAc,EAAE,UAAU,CAAC,UAAU,CAAC,cAAc;YACpD,gBAAgB,EAAE,UAAU,CAAC,mBAAmB;AAChD,YAAA,iBAAiB,EAAE,UAAU,CAAC,UAAU,CAAC,iBAAiB;AAC1D,YAAA,aAAa,EAAE,aAAa;AAC5B,YAAA,gBAAgB,EAAE,gBAAgB;SACrC,CAAC;AAEF,QAAA,MAAM,iBAAiB,GACnB,MAAM,IAAI,CAAC,mBAAmB,CAAC,WAAW,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;AAEvE,QAAA,IAAI,CAAC,MAAM,CAAC,OAAO,CACf,QAAA,EAAA,iBAAA,CAAA,cAAA,IAAA,aACA,CAAA,CAAA;AAGJ;;;;AAIG;AACH,QAAA,IAAI,iBAAiB,CAAC,cAAc,KAAK,aAAa,CAAC,WAAW,EAAE;AAChE,YAAA,IAAI,CAAC,MAAM,CAAC,OAAO,CACf,QAAA,EAAA,iBAAA,CAAA,cAAA,IAAA,aAAA,CAAA,CAAA;;AAKJ,YAAA,MAAM,cAAc,GAA6B;AAC7C,gBAAA,aAAa,EACT,iBAAiB,CAAC,cAAc,IAAI,aAAa;gBACrD,iBAAiB,EAAE,iBAAiB,CAAC,kBAAkB;gBACvD,SAAS,EAAE,SAAS,CAAC,kBAAkB;gBACvC,MAAM,EAAE,UAAU,CAAC,MAAM;gBACzB,QAAQ,EAAE,UAAU,CAAC,QAAQ;gBAC7B,MAAM,EAAE,UAAU,CAAC,MAAM;aAC5B,CAAC;YAEF,MAAM,eAAe,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,cAAc,CAAC,CAAC;AACnE,YAAA,OAAO,eAAe,CAAC;AAC1B,SAAA;;AAGD,QAAA,OAAO,mCAAmC,CAAC;AACvC,YAAA,aAAa,EAAE,iBAAiB,CAAC,cAAc,IAAI,aAAa;YAChE,iBAAiB,EAAE,iBAAiB,CAAC,kBAAkB;YACvD,gBAAgB,EAAE,iBAAiB,CAAC,iBAAiB;YACrD,oBAAoB,EAAE,iBAAiB,CAAC,gBAAgB;AACxD,YAAA,UAAU,EACN,iBAAiB,CAAC,WAAW,IAAI,8BAA8B;AACtE,SAAA,CAAC,CAAC;KACN;AAED;;;;AAIG;IACH,MAAM,eAAe,CACjB,UAAoC,EAAA;QAEpC,MAAM,aAAa,GAAG,UAAU,CAAC,aAAa,IAAI,IAAI,CAAC,aAAa,CAAC;AACrE,QAAA,MAAM,KAAK,GAAGC,oBAAgC,CAAC;QAC/C,MAAM,gBAAgB,GAAG,gCAAgC,CACrD,KAAK,EACL,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,EACzB,aAAa,EACb,IAAI,CAAC,cAAc,EACnB,IAAI,CAAC,MAAM,CACd,CAAC;QAEF,IAAI,CAAC,MAAM,CAAC,OAAO,CACf,QAAiE,EAAA,aAAA,CAAA,CAAA;;AAKrE,QAAA,MAAM,WAAW,GAA4B;YACzC,kBAAkB,EAAE,UAAU,CAAC,iBAAiB;YAChD,UAAU,EAAE,UAAU,CAAC,SAAS;AAChC,YAAA,IAAI,UAAU,CAAC,SAAS,IAAI;gBACxB,GAAG,EAAE,UAAU,CAAC,SAAS;aAC5B,CAAC;AACF,YAAA,aAAa,EAAE,aAAa;AAC5B,YAAA,gBAAgB,EAAE,gBAAgB;SACrC,CAAC;AAEF,QAAA,MAAM,gBAAgB,GAClB,MAAM,IAAI,CAAC,mBAAmB,CAAC,WAAW,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QAErE,IAAI,CAAC,MAAM,CAAC,OAAO,CACf,QAAgE,EAAA,UAAA,CAAA,aAAA,CAAA,CAAA;;QAKpE,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;AACjD,QAAA,MAAM,YAAY,GAAmC;YACjD,kBAAkB,EAAE,gBAAgB,CAAC,kBAAkB;AACvD,YAAA,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC;AACvB,YAAA,aAAa,EAAE,gBAAgB,CAAC,cAAc,IAAI,aAAa;AAC/D,YAAA,gBAAgB,EAAE,gBAAgB;AAClC,YAAA,IAAI,UAAU,CAAC,MAAM,IAAI;gBACrB,MAAM,EAAE,UAAU,CAAC,MAAM;aAC5B,CAAC;SACL,CAAC;AAEF,QAAA,MAAM,aAAa,GACf,MAAM,IAAI,CAAC,mBAAmB,CAAC,SAAS,CAAC,iCAAiC,CACtE,YAAY,CACf,CAAC;AAEN,QAAA,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAC7C,aAAa,EACb,MAAM,EACN,aAAa,CAAC,cAAc;AACxB,YAAA,gBAAgB,CAAC,cAAc;YAC/B,aAAa,EACjB,KAAK,CACR,CAAC;AAEF,QAAA,OAAO,wBAAwB,CAAC;AAC5B,YAAA,aAAa,EAAE,gBAAgB,CAAC,cAAc,IAAI,aAAa;AAC/D,YAAA,oBAAoB,EAAE,UAAU;AACnC,SAAA,CAAC,CAAC;KACN;AACJ;;;;"}

package/dist/custom_auth/core/interaction_client/jit/result/JitActionResult.mjs

@@ -0,0 +1,24 @@
+/*! @azure/msal-browser v5.10.0 2026-05-07 */
+'use strict';
+/*
+ * Copyright (c) Microsoft Corporation. All rights reserved.
+ * Licensed under the MIT License.
+ */
+// Result type constants
+const JIT_VERIFICATION_REQUIRED_RESULT_TYPE = "JitVerificationRequiredResult";
+const JIT_COMPLETED_RESULT_TYPE = "JitCompletedResult";
+function createJitVerificationRequiredResult(input) {
+    return {
+        type: JIT_VERIFICATION_REQUIRED_RESULT_TYPE,
+        ...input,
+    };
+}
+function createJitCompletedResult(input) {
+    return {
+        type: JIT_COMPLETED_RESULT_TYPE,
+        ...input,
+    };
+}
+
+export { JIT_COMPLETED_RESULT_TYPE, JIT_VERIFICATION_REQUIRED_RESULT_TYPE, createJitCompletedResult, createJitVerificationRequiredResult };
+//# sourceMappingURL=JitActionResult.mjs.map

package/dist/custom_auth/core/interaction_client/jit/result/JitActionResult.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"JitActionResult.mjs","sources":["../../../../../../src/custom_auth/core/interaction_client/jit/result/JitActionResult.ts"],"sourcesContent":[null],"names":[],"mappings":";;AAAA;;;AAGG;AAsBH;AACO,MAAM,qCAAqC,GAC9C,gCAAgC;AAC7B,MAAM,yBAAyB,GAAG,qBAAqB;AAExD,SAAU,mCAAmC,CAC/C,KAAkD,EAAA;IAElD,OAAO;AACH,QAAA,IAAI,EAAE,qCAAqC;AAC3C,QAAA,GAAG,KAAK;KACX,CAAC;AACN,CAAC;AAEK,SAAU,wBAAwB,CACpC,KAAuC,EAAA;IAEvC,OAAO;AACH,QAAA,IAAI,EAAE,yBAAyB;AAC/B,QAAA,GAAG,KAAK;KACX,CAAC;AACN;;;;"}

package/dist/custom_auth/core/interaction_client/mfa/MfaClient.mjs

@@ -0,0 +1,88 @@
+/*! @azure/msal-browser v5.10.0 2026-05-07 */
+'use strict';
+import { CustomAuthInteractionClientBase } from '../CustomAuthInteractionClientBase.mjs';
+import { createMfaVerificationRequiredResult, createMfaCompletedResult } from './result/MfaActionResult.mjs';
+import { ChallengeType, GrantType, DefaultCustomAuthApiCodeLength } from '../../../CustomAuthConstants.mjs';
+import { MFA_SUBMIT_CHALLENGE, MFA_REQUEST_CHALLENGE } from '../../telemetry/PublicApiId.mjs';
+import { ensureArgumentIsNotEmptyString } from '../../utils/ArgumentValidator.mjs';
+import { CustomAuthApiError } from '../../error/CustomAuthApiError.mjs';
+import { UNSUPPORTED_CHALLENGE_TYPE } from '../../network_client/custom_auth_api/types/ApiErrorCodes.mjs';
+import { initializeServerTelemetryManager } from '../../../../interaction_client/BaseInteractionClient.mjs';
+
+/*
+ * Copyright (c) Microsoft Corporation. All rights reserved.
+ * Licensed under the MIT License.
+ */
+/**
+ * MFA client for handling multi-factor authentication flows.
+ */
+class MfaClient extends CustomAuthInteractionClientBase {
+    /**
+     * Requests an MFA challenge to be sent to the user.
+     * @param parameters The parameters for requesting the challenge.
+     * @returns Promise that resolves to either MfaVerificationRequiredResult.
+     */
+    async requestChallenge(parameters) {
+        const apiId = MFA_REQUEST_CHALLENGE;
+        const correlationId = parameters.correlationId || this.correlationId;
+        const telemetryManager = initializeServerTelemetryManager(apiId, this.config.auth.clientId, correlationId, this.browserStorage, this.logger);
+        this.logger.verbose("1cbc4t", correlationId);
+        const challengeReq = {
+            challenge_type: this.getChallengeTypes(parameters.challengeType),
+            continuation_token: parameters.continuationToken,
+            id: parameters.authMethodId,
+            correlationId: correlationId,
+            telemetryManager: telemetryManager,
+        };
+        const challengeResponse = await this.customAuthApiClient.signInApi.requestChallenge(challengeReq);
+        this.logger.verbose("0egw9i", correlationId);
+        if (challengeResponse.challenge_type === ChallengeType.OOB) {
+            // Verification required - code will be sent
+            return createMfaVerificationRequiredResult({
+                correlationId: challengeResponse.correlation_id || correlationId,
+                continuationToken: challengeResponse.continuation_token ?? "",
+                challengeChannel: challengeResponse.challenge_channel ?? "",
+                challengeTargetLabel: challengeResponse.challenge_target_label ?? "",
+                codeLength: challengeResponse.code_length ??
+                    DefaultCustomAuthApiCodeLength,
+                bindingMethod: challengeResponse.binding_method ?? "",
+            });
+        }
+        this.logger.error("1jifg6", challengeResponse.correlation_id || correlationId);
+        throw new CustomAuthApiError(UNSUPPORTED_CHALLENGE_TYPE, `Unsupported challenge type '${challengeResponse.challenge_type}'.`, challengeResponse.correlation_id || correlationId);
+    }
+    /**
+     * Submits the MFA challenge response (e.g., OTP code).
+     * @param parameters The parameters for submitting the challenge.
+     * @returns Promise that resolves to MfaCompletedResult.
+     */
+    async submitChallenge(parameters) {
+        const correlationId = parameters.correlationId || this.correlationId;
+        ensureArgumentIsNotEmptyString("parameters.challenge", parameters.challenge, correlationId);
+        const apiId = MFA_SUBMIT_CHALLENGE;
+        const telemetryManager = initializeServerTelemetryManager(apiId, this.config.auth.clientId, correlationId, this.browserStorage, this.logger);
+        const scopes = this.getScopes(parameters.scopes);
+        const request = {
+            continuation_token: parameters.continuationToken,
+            oob: parameters.challenge,
+            grant_type: GrantType.MFA_OOB,
+            scope: scopes.join(" "),
+            correlationId: correlationId,
+            telemetryManager: telemetryManager,
+            ...(parameters.claims && {
+                claims: parameters.claims,
+            }),
+        };
+        this.logger.verbose("1rkonv", correlationId);
+        const tokenResponse = await this.customAuthApiClient.signInApi.requestTokensWithOob(request);
+        // Save tokens and create authentication result
+        const result = await this.handleTokenResponse(tokenResponse, scopes, tokenResponse.correlation_id || correlationId, apiId);
+        return createMfaCompletedResult({
+            correlationId: tokenResponse.correlation_id || correlationId,
+            authenticationResult: result,
+        });
+    }
+}
+
+export { MfaClient };
+//# sourceMappingURL=MfaClient.mjs.map

package/dist/custom_auth/core/interaction_client/mfa/MfaClient.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"MfaClient.mjs","sources":["../../../../../src/custom_auth/core/interaction_client/mfa/MfaClient.ts"],"sourcesContent":[null],"names":["PublicApiId.MFA_REQUEST_CHALLENGE","CustomAuthApiErrorCode.UNSUPPORTED_CHALLENGE_TYPE","PublicApiId.MFA_SUBMIT_CHALLENGE"],"mappings":";;;;;;;;;;;AAAA;;;AAGG;AA4BH;;AAEG;AACG,MAAO,SAAU,SAAQ,+BAA+B,CAAA;AAC1D;;;;AAIG;IACH,MAAM,gBAAgB,CAClB,UAAqC,EAAA;AAErC,QAAA,MAAM,KAAK,GAAGA,qBAAiC,CAAC;QAChD,MAAM,aAAa,GAAG,UAAU,CAAC,aAAa,IAAI,IAAI,CAAC,aAAa,CAAC;QACrE,MAAM,gBAAgB,GAAG,gCAAgC,CACrD,KAAK,EACL,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,EACzB,aAAa,EACb,IAAI,CAAC,cAAc,EACnB,IAAI,CAAC,MAAM,CACd,CAAC;QAEF,IAAI,CAAC,MAAM,CAAC,OAAO,CACf,QAAqC,EAAA,aAAA,CAAA,CAAA;AAIzC,QAAA,MAAM,YAAY,GAA2B;YACzC,cAAc,EAAE,IAAI,CAAC,iBAAiB,CAAC,UAAU,CAAC,aAAa,CAAC;YAChE,kBAAkB,EAAE,UAAU,CAAC,iBAAiB;YAChD,EAAE,EAAE,UAAU,CAAC,YAAY;AAC3B,YAAA,aAAa,EAAE,aAAa;AAC5B,YAAA,gBAAgB,EAAE,gBAAgB;SACrC,CAAC;AAEF,QAAA,MAAM,iBAAiB,GACnB,MAAM,IAAI,CAAC,mBAAmB,CAAC,SAAS,CAAC,gBAAgB,CACrD,YAAY,CACf,CAAC;QAEN,IAAI,CAAC,MAAM,CAAC,OAAO,CACf,QAAoC,EAAA,aAAA,CAAA,CAAA;AAIxC,QAAA,IAAI,iBAAiB,CAAC,cAAc,KAAK,aAAa,CAAC,GAAG,EAAE;;AAExD,YAAA,OAAO,mCAAmC,CAAC;AACvC,gBAAA,aAAa,EACT,iBAAiB,CAAC,cAAc,IAAI,aAAa;AACrD,gBAAA,iBAAiB,EAAE,iBAAiB,CAAC,kBAAkB,IAAI,EAAE;AAC7D,gBAAA,gBAAgB,EAAE,iBAAiB,CAAC,iBAAiB,IAAI,EAAE;AAC3D,gBAAA,oBAAoB,EAChB,iBAAiB,CAAC,sBAAsB,IAAI,EAAE;gBAClD,UAAU,EACN,iBAAiB,CAAC,WAAW;oBAC7B,8BAA8B;AAClC,gBAAA,aAAa,EAAE,iBAAiB,CAAC,cAAc,IAAI,EAAE;AACxD,aAAA,CAAC,CAAC;AACN,SAAA;AAED,QAAA,IAAI,CAAC,MAAM,CAAC,KAAK,CACb,0CAAgD,IAAA,aAAe,CAAA,CAAA;AAInE,QAAA,MAAM,IAAI,kBAAkB,CACxBC,0BAAiD,EACjD,CAA+B,4BAAA,EAAA,iBAAiB,CAAC,cAAc,CAAA,EAAA,CAAI,EACnE,iBAAiB,CAAC,cAAc,IAAI,aAAa,CACpD,CAAC;KACL;AAED;;;;AAIG;IACH,MAAM,eAAe,CACjB,UAAoC,EAAA;QAEpC,MAAM,aAAa,GAAG,UAAU,CAAC,aAAa,IAAI,IAAI,CAAC,aAAa,CAAC;QAErE,8BAA8B,CAC1B,sBAAsB,EACtB,UAAU,CAAC,SAAS,EACpB,aAAa,CAChB,CAAC;AAEF,QAAA,MAAM,KAAK,GAAGC,oBAAgC,CAAC;QAC/C,MAAM,gBAAgB,GAAG,gCAAgC,CACrD,KAAK,EACL,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,EACzB,aAAa,EACb,IAAI,CAAC,cAAc,EACnB,IAAI,CAAC,MAAM,CACd,CAAC;QACF,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;AAEjD,QAAA,MAAM,OAAO,GAA0B;YACnC,kBAAkB,EAAE,UAAU,CAAC,iBAAiB;YAChD,GAAG,EAAE,UAAU,CAAC,SAAS;YACzB,UAAU,EAAE,SAAS,CAAC,OAAO;AAC7B,YAAA,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC;AACvB,YAAA,aAAa,EAAE,aAAa;AAC5B,YAAA,gBAAgB,EAAE,gBAAgB;AAClC,YAAA,IAAI,UAAU,CAAC,MAAM,IAAI;gBACrB,MAAM,EAAE,UAAU,CAAC,MAAM;aAC5B,CAAC;SACL,CAAC;QAEF,IAAI,CAAC,MAAM,CAAC,OAAO,CACf,QAAsD,EAAA,aAAA,CAAA,CAAA;AAI1D,QAAA,MAAM,aAAa,GACf,MAAM,IAAI,CAAC,mBAAmB,CAAC,SAAS,CAAC,oBAAoB,CACzD,OAAO,CACV,CAAC;;AAGN,QAAA,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,mBAAmB,CACzC,aAAa,EACb,MAAM,EACN,aAAa,CAAC,cAAc,IAAI,aAAa,EAC7C,KAAK,CACR,CAAC;AAEF,QAAA,OAAO,wBAAwB,CAAC;AAC5B,YAAA,aAAa,EAAE,aAAa,CAAC,cAAc,IAAI,aAAa;AAC5D,YAAA,oBAAoB,EAAE,MAAM;AAC/B,SAAA,CAAC,CAAC;KACN;AACJ;;;;"}

package/dist/custom_auth/core/interaction_client/mfa/result/MfaActionResult.mjs

@@ -0,0 +1,24 @@
+/*! @azure/msal-browser v5.10.0 2026-05-07 */
+'use strict';
+/*
+ * Copyright (c) Microsoft Corporation. All rights reserved.
+ * Licensed under the MIT License.
+ */
+// Result type constants
+const MFA_VERIFICATION_REQUIRED_RESULT_TYPE = "MfaVerificationRequiredResult";
+const MFA_COMPLETED_RESULT_TYPE = "MfaCompletedResult";
+function createMfaVerificationRequiredResult(input) {
+    return {
+        type: MFA_VERIFICATION_REQUIRED_RESULT_TYPE,
+        ...input,
+    };
+}
+function createMfaCompletedResult(input) {
+    return {
+        type: MFA_COMPLETED_RESULT_TYPE,
+        ...input,
+    };
+}
+
+export { MFA_COMPLETED_RESULT_TYPE, MFA_VERIFICATION_REQUIRED_RESULT_TYPE, createMfaCompletedResult, createMfaVerificationRequiredResult };
+//# sourceMappingURL=MfaActionResult.mjs.map

package/dist/custom_auth/core/interaction_client/mfa/result/MfaActionResult.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"MfaActionResult.mjs","sources":["../../../../../../src/custom_auth/core/interaction_client/mfa/result/MfaActionResult.ts"],"sourcesContent":[null],"names":[],"mappings":";;AAAA;;;AAGG;AAuBH;AACO,MAAM,qCAAqC,GAC9C,gCAAgC;AAC7B,MAAM,yBAAyB,GAAG,qBAAqB;AAExD,SAAU,mCAAmC,CAC/C,KAAkD,EAAA;IAElD,OAAO;AACH,QAAA,IAAI,EAAE,qCAAqC;AAC3C,QAAA,GAAG,KAAK;KACX,CAAC;AACN,CAAC;AAEK,SAAU,wBAAwB,CACpC,KAAuC,EAAA;IAEvC,OAAO;AACH,QAAA,IAAI,EAAE,yBAAyB;AAC/B,QAAA,GAAG,KAAK;KACX,CAAC;AACN;;;;"}

package/dist/custom_auth/core/network_client/custom_auth_api/BaseApiClient.mjs

@@ -0,0 +1,87 @@
+/*! @azure/msal-browser v5.10.0 2026-05-07 */
+'use strict';
+import { HttpHeaderKeys, DefaultPackageInfo, ChallengeType } from '../../../CustomAuthConstants.mjs';
+import { HTTP_REQUEST_FAILED, CONTINUATION_TOKEN_MISSING, INVALID_RESPONSE_BODY } from './types/ApiErrorCodes.mjs';
+import { parseUrl, buildUrl } from '../../utils/UrlUtils.mjs';
+import { CustomAuthApiError, RedirectError } from '../../error/CustomAuthApiError.mjs';
+import { AADServerParamKeys } from '@azure/msal-common/browser';
+
+/*
+ * Copyright (c) Microsoft Corporation. All rights reserved.
+ * Licensed under the MIT License.
+ */
+class BaseApiClient {
+    constructor(baseUrl, clientId, httpClient, customAuthApiQueryParams) {
+        this.clientId = clientId;
+        this.httpClient = httpClient;
+        this.customAuthApiQueryParams = customAuthApiQueryParams;
+        this.baseRequestUrl = parseUrl(!baseUrl.endsWith("/") ? `${baseUrl}/` : baseUrl);
+    }
+    async request(endpoint, data, telemetryManager, correlationId) {
+        const formData = new URLSearchParams({
+            client_id: this.clientId,
+            ...data,
+        });
+        const headers = this.getCommonHeaders(correlationId, telemetryManager);
+        const url = buildUrl(this.baseRequestUrl.href, endpoint, this.customAuthApiQueryParams);
+        let response;
+        try {
+            response = await this.httpClient.post(url, formData, headers);
+        }
+        catch (e) {
+            throw new CustomAuthApiError(HTTP_REQUEST_FAILED, `Failed to perform '${endpoint}' request: ${e}`, correlationId);
+        }
+        return this.handleApiResponse(response, correlationId);
+    }
+    ensureContinuationTokenIsValid(continuationToken, correlationId) {
+        if (!continuationToken) {
+            throw new CustomAuthApiError(CONTINUATION_TOKEN_MISSING, "Continuation token is missing in the response body", correlationId);
+        }
+    }
+    readResponseCorrelationId(response, requestCorrelationId) {
+        return (response.headers.get(HttpHeaderKeys.X_MS_REQUEST_ID) ||
+            requestCorrelationId);
+    }
+    getCommonHeaders(correlationId, telemetryManager) {
+        return {
+            [HttpHeaderKeys.CONTENT_TYPE]: "application/x-www-form-urlencoded",
+            [AADServerParamKeys.X_CLIENT_SKU]: DefaultPackageInfo.SKU,
+            [AADServerParamKeys.X_CLIENT_VER]: DefaultPackageInfo.VERSION,
+            [AADServerParamKeys.X_CLIENT_OS]: DefaultPackageInfo.OS,
+            [AADServerParamKeys.X_CLIENT_CPU]: DefaultPackageInfo.CPU,
+            [AADServerParamKeys.X_CLIENT_CURR_TELEM]: telemetryManager.generateCurrentRequestHeaderValue(),
+            [AADServerParamKeys.X_CLIENT_LAST_TELEM]: telemetryManager.generateLastRequestHeaderValue(),
+            [AADServerParamKeys.CLIENT_REQUEST_ID]: correlationId,
+        };
+    }
+    async handleApiResponse(response, requestCorrelationId) {
+        if (!response) {
+            throw new CustomAuthApiError("empty_response", "Response is empty", requestCorrelationId);
+        }
+        const correlationId = this.readResponseCorrelationId(response, requestCorrelationId);
+        const responseData = await response.json();
+        if (response.ok) {
+            // Ensure the response doesn't have redirect challenge type
+            if (typeof responseData === "object" &&
+                responseData.challenge_type === ChallengeType.REDIRECT) {
+                throw new RedirectError(correlationId, responseData.redirect_reason);
+            }
+            return {
+                ...responseData,
+                correlation_id: correlationId,
+            };
+        }
+        const responseError = responseData;
+        if (!responseError) {
+            throw new CustomAuthApiError(INVALID_RESPONSE_BODY, "Response error body is empty or invalid", correlationId);
+        }
+        const attributes = !!responseError.required_attributes &&
+            responseError.required_attributes.length > 0
+            ? responseError.required_attributes
+            : responseError.invalid_attributes ?? [];
+        throw new CustomAuthApiError(responseError.error, responseError.error_description, responseError.correlation_id, responseError.error_codes, responseError.suberror, attributes, responseError.continuation_token, responseError.trace_id, responseError.timestamp);
+    }
+}
+
+export { BaseApiClient };
+//# sourceMappingURL=BaseApiClient.mjs.map

package/dist/custom_auth/core/network_client/custom_auth_api/BaseApiClient.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"BaseApiClient.mjs","sources":["../../../../../src/custom_auth/core/network_client/custom_auth_api/BaseApiClient.ts"],"sourcesContent":[null],"names":["CustomAuthApiErrorCode.HTTP_REQUEST_FAILED","CustomAuthApiErrorCode.CONTINUATION_TOKEN_MISSING","CustomAuthApiErrorCode.INVALID_RESPONSE_BODY"],"mappings":";;;;;;;;AAAA;;;AAGG;MAoBmB,aAAa,CAAA;AAG/B,IAAA,WAAA,CACI,OAAe,EACE,QAAgB,EACzB,UAAuB,EACvB,wBAAiD,EAAA;QAFxC,IAAQ,CAAA,QAAA,GAAR,QAAQ,CAAQ;QACzB,IAAU,CAAA,UAAA,GAAV,UAAU,CAAa;QACvB,IAAwB,CAAA,wBAAA,GAAxB,wBAAwB,CAAyB;QAEzD,IAAI,CAAC,cAAc,GAAG,QAAQ,CAC1B,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAA,EAAG,OAAO,CAAA,CAAA,CAAG,GAAG,OAAO,CACnD,CAAC;KACL;IAES,MAAM,OAAO,CACnB,QAAgB,EAChB,IAAsC,EACtC,gBAAwC,EACxC,aAAqB,EAAA;AAErB,QAAA,MAAM,QAAQ,GAAG,IAAI,eAAe,CAAC;YACjC,SAAS,EAAE,IAAI,CAAC,QAAQ;AACxB,YAAA,GAAG,IAAI;AACV,SAAA,CAAC,CAAC;QACH,MAAM,OAAO,GAAG,IAAI,CAAC,gBAAgB,CAAC,aAAa,EAAE,gBAAgB,CAAC,CAAC;AACvE,QAAA,MAAM,GAAG,GAAG,QAAQ,CAChB,IAAI,CAAC,cAAc,CAAC,IAAI,EACxB,QAAQ,EACR,IAAI,CAAC,wBAAwB,CAChC,CAAC;AAEF,QAAA,IAAI,QAAkB,CAAC;QAEvB,IAAI;AACA,YAAA,QAAQ,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;AACjE,SAAA;AAAC,QAAA,OAAO,CAAC,EAAE;AACR,YAAA,MAAM,IAAI,kBAAkB,CACxBA,mBAA0C,EAC1C,CAAsB,mBAAA,EAAA,QAAQ,cAAc,CAAC,CAAA,CAAE,EAC/C,aAAa,CAChB,CAAC;AACL,SAAA;QAED,OAAO,IAAI,CAAC,iBAAiB,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC;KAC1D;IAES,8BAA8B,CACpC,iBAAqC,EACrC,aAAqB,EAAA;QAErB,IAAI,CAAC,iBAAiB,EAAE;YACpB,MAAM,IAAI,kBAAkB,CACxBC,0BAAiD,EACjD,oDAAoD,EACpD,aAAa,CAChB,CAAC;AACL,SAAA;KACJ;IAEO,yBAAyB,CAC7B,QAAkB,EAClB,oBAA4B,EAAA;QAE5B,QACI,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,eAAe,CAAC;AACpD,YAAA,oBAAoB,EACtB;KACL;IAEO,gBAAgB,CACpB,aAAqB,EACrB,gBAAwC,EAAA;QAExC,OAAO;AACH,YAAA,CAAC,cAAc,CAAC,YAAY,GAAG,mCAAmC;AAClE,YAAA,CAAC,kBAAkB,CAAC,YAAY,GAAG,kBAAkB,CAAC,GAAG;AACzD,YAAA,CAAC,kBAAkB,CAAC,YAAY,GAAG,kBAAkB,CAAC,OAAO;AAC7D,YAAA,CAAC,kBAAkB,CAAC,WAAW,GAAG,kBAAkB,CAAC,EAAE;AACvD,YAAA,CAAC,kBAAkB,CAAC,YAAY,GAAG,kBAAkB,CAAC,GAAG;YACzD,CAAC,kBAAkB,CAAC,mBAAmB,GACnC,gBAAgB,CAAC,iCAAiC,EAAE;YACxD,CAAC,kBAAkB,CAAC,mBAAmB,GACnC,gBAAgB,CAAC,8BAA8B,EAAE;AACrD,YAAA,CAAC,kBAAkB,CAAC,iBAAiB,GAAG,aAAa;SACxD,CAAC;KACL;AAEO,IAAA,MAAM,iBAAiB,CAC3B,QAA8B,EAC9B,oBAA4B,EAAA;QAE5B,IAAI,CAAC,QAAQ,EAAE;YACX,MAAM,IAAI,kBAAkB,CACxB,gBAAgB,EAChB,mBAAmB,EACnB,oBAAoB,CACvB,CAAC;AACL,SAAA;QAED,MAAM,aAAa,GAAG,IAAI,CAAC,yBAAyB,CAChD,QAAQ,EACR,oBAAoB,CACvB,CAAC;AAEF,QAAA,MAAM,YAAY,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QAE3C,IAAI,QAAQ,CAAC,EAAE,EAAE;;YAEb,IACI,OAAO,YAAY,KAAK,QAAQ;AAChC,gBAAA,YAAY,CAAC,cAAc,KAAK,aAAa,CAAC,QAAQ,EACxD;gBACE,MAAM,IAAI,aAAa,CACnB,aAAa,EACb,YAAY,CAAC,eAAe,CAC/B,CAAC;AACL,aAAA;YAED,OAAO;AACH,gBAAA,GAAG,YAAY;AACf,gBAAA,cAAc,EAAE,aAAa;aAChC,CAAC;AACL,SAAA;QAED,MAAM,aAAa,GAAG,YAAgC,CAAC;QAEvD,IAAI,CAAC,aAAa,EAAE;YAChB,MAAM,IAAI,kBAAkB,CACxBC,qBAA4C,EAC5C,yCAAyC,EACzC,aAAa,CAChB,CAAC;AACL,SAAA;AAED,QAAA,MAAM,UAAU,GACZ,CAAC,CAAC,aAAa,CAAC,mBAAmB;AACnC,YAAA,aAAa,CAAC,mBAAmB,CAAC,MAAM,GAAG,CAAC;cACtC,aAAa,CAAC,mBAAmB;AACnC,cAAE,aAAa,CAAC,kBAAkB,IAAI,EAAE,CAAC;AAEjD,QAAA,MAAM,IAAI,kBAAkB,CACxB,aAAa,CAAC,KAAK,EACnB,aAAa,CAAC,iBAAiB,EAC/B,aAAa,CAAC,cAAc,EAC5B,aAAa,CAAC,WAAW,EACzB,aAAa,CAAC,QAAQ,EACtB,UAAU,EACV,aAAa,CAAC,kBAAkB,EAChC,aAAa,CAAC,QAAQ,EACtB,aAAa,CAAC,SAAS,CAC1B,CAAC;KACL;AACJ;;;;"}

package/dist/custom_auth/core/network_client/custom_auth_api/CustomAuthApiClient.mjs

@@ -0,0 +1,22 @@
+/*! @azure/msal-browser v5.10.0 2026-05-07 */
+'use strict';
+import { ResetPasswordApiClient } from './ResetPasswordApiClient.mjs';
+import { SignupApiClient } from './SignupApiClient.mjs';
+import { SignInApiClient } from './SignInApiClient.mjs';
+import { RegisterApiClient } from './RegisterApiClient.mjs';
+
+/*
+ * Copyright (c) Microsoft Corporation. All rights reserved.
+ * Licensed under the MIT License.
+ */
+class CustomAuthApiClient {
+    constructor(customAuthApiBaseUrl, clientId, httpClient, capabilities, customAuthApiQueryParams) {
+        this.signInApi = new SignInApiClient(customAuthApiBaseUrl, clientId, httpClient, capabilities, customAuthApiQueryParams);
+        this.signUpApi = new SignupApiClient(customAuthApiBaseUrl, clientId, httpClient, capabilities, customAuthApiQueryParams);
+        this.resetPasswordApi = new ResetPasswordApiClient(customAuthApiBaseUrl, clientId, httpClient, capabilities, customAuthApiQueryParams);
+        this.registerApi = new RegisterApiClient(customAuthApiBaseUrl, clientId, httpClient, customAuthApiQueryParams);
+    }
+}
+
+export { CustomAuthApiClient };
+//# sourceMappingURL=CustomAuthApiClient.mjs.map

package/dist/custom_auth/core/network_client/custom_auth_api/CustomAuthApiClient.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"CustomAuthApiClient.mjs","sources":["../../../../../src/custom_auth/core/network_client/custom_auth_api/CustomAuthApiClient.ts"],"sourcesContent":[null],"names":[],"mappings":";;;;;;;AAAA;;;AAGG;MASU,mBAAmB,CAAA;IAM5B,WACI,CAAA,oBAA4B,EAC5B,QAAgB,EAChB,UAAuB,EACvB,YAAqB,EACrB,wBAAiD,EAAA;AAEjD,QAAA,IAAI,CAAC,SAAS,GAAG,IAAI,eAAe,CAChC,oBAAoB,EACpB,QAAQ,EACR,UAAU,EACV,YAAY,EACZ,wBAAwB,CAC3B,CAAC;AACF,QAAA,IAAI,CAAC,SAAS,GAAG,IAAI,eAAe,CAChC,oBAAoB,EACpB,QAAQ,EACR,UAAU,EACV,YAAY,EACZ,wBAAwB,CAC3B,CAAC;AACF,QAAA,IAAI,CAAC,gBAAgB,GAAG,IAAI,sBAAsB,CAC9C,oBAAoB,EACpB,QAAQ,EACR,UAAU,EACV,YAAY,EACZ,wBAAwB,CAC3B,CAAC;AACF,QAAA,IAAI,CAAC,WAAW,GAAG,IAAI,iBAAiB,CACpC,oBAAoB,EACpB,QAAQ,EACR,UAAU,EACV,wBAAwB,CAC3B,CAAC;KACL;AACJ;;;;"}

package/dist/custom_auth/core/network_client/custom_auth_api/CustomAuthApiEndpoint.mjs

@@ -0,0 +1,24 @@
+/*! @azure/msal-browser v5.10.0 2026-05-07 */
+'use strict';
+/*
+ * Copyright (c) Microsoft Corporation. All rights reserved.
+ * Licensed under the MIT License.
+ */
+const SIGNIN_INITIATE = "/oauth2/v2.0/initiate";
+const SIGNIN_CHALLENGE = "/oauth2/v2.0/challenge";
+const SIGNIN_TOKEN = "/oauth2/v2.0/token";
+const SIGNIN_INTROSPECT = "/oauth2/v2.0/introspect";
+const SIGNUP_START = "/signup/v1.0/start";
+const SIGNUP_CHALLENGE = "/signup/v1.0/challenge";
+const SIGNUP_CONTINUE = "/signup/v1.0/continue";
+const RESET_PWD_START = "/resetpassword/v1.0/start";
+const RESET_PWD_CHALLENGE = "/resetpassword/v1.0/challenge";
+const RESET_PWD_CONTINUE = "/resetpassword/v1.0/continue";
+const RESET_PWD_SUBMIT = "/resetpassword/v1.0/submit";
+const RESET_PWD_POLL = "/resetpassword/v1.0/poll_completion";
+const REGISTER_INTROSPECT = "/register/v1.0/introspect";
+const REGISTER_CHALLENGE = "/register/v1.0/challenge";
+const REGISTER_CONTINUE = "/register/v1.0/continue";
+
+export { REGISTER_CHALLENGE, REGISTER_CONTINUE, REGISTER_INTROSPECT, RESET_PWD_CHALLENGE, RESET_PWD_CONTINUE, RESET_PWD_POLL, RESET_PWD_START, RESET_PWD_SUBMIT, SIGNIN_CHALLENGE, SIGNIN_INITIATE, SIGNIN_INTROSPECT, SIGNIN_TOKEN, SIGNUP_CHALLENGE, SIGNUP_CONTINUE, SIGNUP_START };
+//# sourceMappingURL=CustomAuthApiEndpoint.mjs.map

package/dist/custom_auth/core/network_client/custom_auth_api/CustomAuthApiEndpoint.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"CustomAuthApiEndpoint.mjs","sources":["../../../../../src/custom_auth/core/network_client/custom_auth_api/CustomAuthApiEndpoint.ts"],"sourcesContent":[null],"names":[],"mappings":";;AAAA;;;AAGG;AAEI,MAAM,eAAe,GAAG,wBAAwB;AAChD,MAAM,gBAAgB,GAAG,yBAAyB;AAClD,MAAM,YAAY,GAAG,qBAAqB;AAC1C,MAAM,iBAAiB,GAAG,0BAA0B;AAEpD,MAAM,YAAY,GAAG,qBAAqB;AAC1C,MAAM,gBAAgB,GAAG,yBAAyB;AAClD,MAAM,eAAe,GAAG,wBAAwB;AAEhD,MAAM,eAAe,GAAG,4BAA4B;AACpD,MAAM,mBAAmB,GAAG,gCAAgC;AAC5D,MAAM,kBAAkB,GAAG,+BAA+B;AAC1D,MAAM,gBAAgB,GAAG,6BAA6B;AACtD,MAAM,cAAc,GAAG,sCAAsC;AAE7D,MAAM,mBAAmB,GAAG,4BAA4B;AACxD,MAAM,kBAAkB,GAAG,2BAA2B;AACtD,MAAM,iBAAiB,GAAG;;;;"}

package/dist/custom_auth/core/network_client/custom_auth_api/RegisterApiClient.mjs

@@ -0,0 +1,51 @@
+/*! @azure/msal-browser v5.10.0 2026-05-07 */
+'use strict';
+import { BaseApiClient } from './BaseApiClient.mjs';
+import { REGISTER_INTROSPECT, REGISTER_CHALLENGE, REGISTER_CONTINUE } from './CustomAuthApiEndpoint.mjs';
+
+/*
+ * Copyright (c) Microsoft Corporation. All rights reserved.
+ * Licensed under the MIT License.
+ */
+class RegisterApiClient extends BaseApiClient {
+    /**
+     * Gets available authentication methods for registration
+     */
+    async introspect(params) {
+        const result = await this.request(REGISTER_INTROSPECT, {
+            continuation_token: params.continuation_token,
+        }, params.telemetryManager, params.correlationId);
+        this.ensureContinuationTokenIsValid(result.continuation_token, params.correlationId);
+        return result;
+    }
+    /**
+     * Sends challenge to specified authentication method
+     */
+    async challenge(params) {
+        const result = await this.request(REGISTER_CHALLENGE, {
+            continuation_token: params.continuation_token,
+            challenge_type: params.challenge_type,
+            challenge_target: params.challenge_target,
+            ...(params.challenge_channel && {
+                challenge_channel: params.challenge_channel,
+            }),
+        }, params.telemetryManager, params.correlationId);
+        this.ensureContinuationTokenIsValid(result.continuation_token, params.correlationId);
+        return result;
+    }
+    /**
+     * Submits challenge response and continues registration
+     */
+    async continue(params) {
+        const result = await this.request(REGISTER_CONTINUE, {
+            continuation_token: params.continuation_token,
+            grant_type: params.grant_type,
+            ...(params.oob && { oob: params.oob }),
+        }, params.telemetryManager, params.correlationId);
+        this.ensureContinuationTokenIsValid(result.continuation_token, params.correlationId);
+        return result;
+    }
+}
+
+export { RegisterApiClient };
+//# sourceMappingURL=RegisterApiClient.mjs.map

package/dist/custom_auth/core/network_client/custom_auth_api/RegisterApiClient.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"RegisterApiClient.mjs","sources":["../../../../../src/custom_auth/core/network_client/custom_auth_api/RegisterApiClient.ts"],"sourcesContent":[null],"names":["CustomAuthApiEndpoint.REGISTER_INTROSPECT","CustomAuthApiEndpoint.REGISTER_CHALLENGE","CustomAuthApiEndpoint.REGISTER_CONTINUE"],"mappings":";;;;;AAAA;;;AAGG;AAeG,MAAO,iBAAkB,SAAQ,aAAa,CAAA;AAChD;;AAEG;IACH,MAAM,UAAU,CACZ,MAAiC,EAAA;QAEjC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAC7BA,mBAAyC,EACzC;YACI,kBAAkB,EAAE,MAAM,CAAC,kBAAkB;SAChD,EACD,MAAM,CAAC,gBAAgB,EACvB,MAAM,CAAC,aAAa,CACvB,CAAC;QAEF,IAAI,CAAC,8BAA8B,CAC/B,MAAM,CAAC,kBAAkB,EACzB,MAAM,CAAC,aAAa,CACvB,CAAC;AAEF,QAAA,OAAO,MAAM,CAAC;KACjB;AAED;;AAEG;IACH,MAAM,SAAS,CACX,MAAgC,EAAA;QAEhC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAC7BC,kBAAwC,EACxC;YACI,kBAAkB,EAAE,MAAM,CAAC,kBAAkB;YAC7C,cAAc,EAAE,MAAM,CAAC,cAAc;YACrC,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;AACzC,YAAA,IAAI,MAAM,CAAC,iBAAiB,IAAI;gBAC5B,iBAAiB,EAAE,MAAM,CAAC,iBAAiB;aAC9C,CAAC;SACL,EACD,MAAM,CAAC,gBAAgB,EACvB,MAAM,CAAC,aAAa,CACvB,CAAC;QAEF,IAAI,CAAC,8BAA8B,CAC/B,MAAM,CAAC,kBAAkB,EACzB,MAAM,CAAC,aAAa,CACvB,CAAC;AAEF,QAAA,OAAO,MAAM,CAAC;KACjB;AAED;;AAEG;IACH,MAAM,QAAQ,CACV,MAA+B,EAAA;QAE/B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAC7BC,iBAAuC,EACvC;YACI,kBAAkB,EAAE,MAAM,CAAC,kBAAkB;YAC7C,UAAU,EAAE,MAAM,CAAC,UAAU;AAC7B,YAAA,IAAI,MAAM,CAAC,GAAG,IAAI,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,CAAC;SACzC,EACD,MAAM,CAAC,gBAAgB,EACvB,MAAM,CAAC,aAAa,CACvB,CAAC;QAEF,IAAI,CAAC,8BAA8B,CAC/B,MAAM,CAAC,kBAAkB,EACzB,MAAM,CAAC,aAAa,CACvB,CAAC;AAEF,QAAA,OAAO,MAAM,CAAC;KACjB;AACJ;;;;"}