@azure/msal-common 1.6.3 → 2.0.0

package/dist/src/request/BaseAuthRequest.d.ts

@@ -8,10 +8,10 @@
  * - resourceRequestUri         - URI that token will be used for. Used for proof-of-possession flows.
  */
 export declare type BaseAuthRequest = {
+    authority: string;
+    correlationId: string;
     scopes: Array<string>;
     claims?: string;
-    authority?: string;
-    correlationId?: string;
     resourceRequestMethod?: string;
     resourceRequestUri?: string;
 };

package/dist/src/request/ClientCredentialRequest.d.ts

@@ -1,6 +1,6 @@
 import { BaseAuthRequest } from "./BaseAuthRequest";
 /**
- * RefreshTokenRequest
+ * ClientCredentialRequest
  * - scopes                  - Array of scopes the application is requesting access to.
  * - authority               - URL of the authority, the security token service (STS) from which MSAL will acquire tokens.
  * - correlationId           - Unique GUID set per request to trace a request end-to-end for telemetry purposes.

package/dist/src/request/EndSessionRequest.d.ts

@@ -3,12 +3,12 @@ import { AccountInfo } from "../account/AccountInfo";
  * EndSessionRequest
  * - account                - Account object that will be logged out of. All tokens tied to this account will be cleared.
  * - postLogoutRedirectUri  - URI to navigate to after logout page.
- * - authority              - Authority to send logout request to.
  * - correlationId          - Unique GUID set per request to trace a request end-to-end for telemetry purposes.
+ * - idTokenHint            - ID Token used by B2C to validate logout if required by the policy
  */
 export declare type EndSessionRequest = {
+    correlationId: string;
     account?: AccountInfo;
     postLogoutRedirectUri?: string;
-    authority?: string;
-    correlationId?: string;
+    idTokenHint?: string;
 };

package/dist/src/request/RefreshTokenRequest.d.ts

@@ -12,5 +12,5 @@ import { AuthenticationScheme } from "../utils/Constants";
  */
 export declare type RefreshTokenRequest = BaseAuthRequest & {
     refreshToken: string;
-    authenticationScheme?: AuthenticationScheme;
+    authenticationScheme: AuthenticationScheme;
 };

package/dist/src/request/RequestParameterBuilder.d.ts

@@ -29,6 +29,16 @@ export declare class RequestParameterBuilder {
      * @param redirectUri
      */
     addRedirectUri(redirectUri: string): void;
+    /**
+     * add post logout redirectUri
+     * @param redirectUri
+     */
+    addPostLogoutRedirectUri(redirectUri: string): void;
+    /**
+     * add id_token_hint to logout request
+     * @param idTokenHint
+     */
+    addIdTokenHint(idTokenHint: string): void;
     /**
      * add domain_hint
      * @param domainHint
@@ -48,7 +58,7 @@ export declare class RequestParameterBuilder {
      * add claims
      * @param claims
      */
-    addClaims(claims: string, clientCapabilities: Array<string>): void;
+    addClaims(claims?: string, clientCapabilities?: Array<string>): void;
     /**
      * add correlationId
      * @param correlationId
@@ -141,7 +151,17 @@ export declare class RequestParameterBuilder {
      * @param eQparams
      */
     addExtraQueryParameters(eQparams: StringDict): void;
-    addClientCapabilitiesToClaims(claims: string, clientCapabilities: Array<string>): string;
+    addClientCapabilitiesToClaims(claims?: string, clientCapabilities?: Array<string>): string;
+    /**
+     * adds `username` for Password Grant flow
+     * @param username
+     */
+    addUsername(username: string): void;
+    /**
+     * adds `password` for Password Grant flow
+     * @param password
+     */
+    addPassword(password: string): void;
     /**
      * add pop_jwk to query params
      * @param cnfString

package/dist/src/request/SilentFlowRequest.d.ts

@@ -13,5 +13,5 @@ import { BaseAuthRequest } from "./BaseAuthRequest";
  */
 export declare type SilentFlowRequest = BaseAuthRequest & {
     account: AccountInfo;
-    forceRefresh?: boolean;
+    forceRefresh: boolean;
 };

package/dist/src/request/UsernamePasswordRequest.d.ts

@@ -0,0 +1,16 @@
+import { BaseAuthRequest } from "./BaseAuthRequest";
+/**
+ * UsernamePassword parameters passed by the user to retrieve credentials
+ * Note: The latest OAuth 2.0 Security Best Current Practice disallows the password grant entirely. This flow is added for internal testing.
+ *
+ * - scopes                 - Array of scopes the application is requesting access to.
+ * - claims                 - A stringified claims request which will be added to all /authorize and /token calls. When included on a silent request, cache lookup will be skipped and token will be refreshed.
+ * - authority              - Url of the authority which the application acquires tokens from.
+ * - correlationId          - Unique GUID set per request to trace a request end-to-end for telemetry purposes.
+ * - username               - username of the client
+ * - password               - credentials
+ */
+export declare type UsernamePasswordRequest = BaseAuthRequest & {
+    username: string;
+    password: string;
+};

package/dist/src/response/AuthenticationResult.d.ts

@@ -15,17 +15,20 @@ import { AccountInfo } from "../account/AccountInfo";
  * - familyId               - Family ID identifier, usually only used for refresh tokens
  */
 export declare type AuthenticationResult = {
+    authority: string;
     uniqueId: string;
     tenantId: string;
     scopes: Array<string>;
-    account: AccountInfo;
+    account: AccountInfo | null;
     idToken: string;
     idTokenClaims: object;
     accessToken: string;
     fromCache: boolean;
-    expiresOn: Date;
+    expiresOn: Date | null;
     tokenType: string;
     extExpiresOn?: Date;
     state?: string;
     familyId?: string;
+    cloudGraphHostName?: string;
+    msGraphHost?: string;
 };

package/dist/src/response/AuthorizationCodePayload.d.ts

@@ -0,0 +1,12 @@
+/**
+ * Response returned after processing the code response query string or fragment.
+ */
+export declare type AuthorizationCodePayload = {
+    code: string;
+    cloud_instance_name?: string;
+    cloud_instance_host_name?: string;
+    cloud_graph_host_name?: string;
+    msgraph_host?: string;
+    state?: string;
+    nonce?: string;
+};

package/dist/src/response/ResponseHandler.d.ts

@@ -10,6 +10,7 @@ import { CacheManager } from "../cache/CacheManager";
 import { RequestStateObject } from "../utils/ProtocolUtils";
 import { ICachePlugin } from "../cache/interface/ICachePlugin";
 import { ISerializableTokenCache } from "../cache/interface/ISerializableTokenCache";
+import { AuthorizationCodePayload } from "./AuthorizationCodePayload";
 /**
  * Class that handles response parsing.
  */
@@ -18,11 +19,10 @@ export declare class ResponseHandler {
     private cacheStorage;
     private cryptoObj;
     private logger;
-    private clientInfo;
     private homeAccountIdentifier;
     private serializableCache;
     private persistencePlugin;
-    constructor(clientId: string, cacheStorage: CacheManager, cryptoObj: ICrypto, logger: Logger, serializableCache?: ISerializableTokenCache, persistencePlugin?: ICachePlugin);
+    constructor(clientId: string, cacheStorage: CacheManager, cryptoObj: ICrypto, logger: Logger, serializableCache: ISerializableTokenCache | null, persistencePlugin: ICachePlugin | null);
     /**
      * Function which validates server authorization code response.
      * @param serverResponseHash
@@ -40,7 +40,7 @@ export declare class ResponseHandler {
      * @param serverTokenResponse
      * @param authority
      */
-    handleServerTokenResponse(serverTokenResponse: ServerAuthorizationTokenResponse, authority: Authority, resourceRequestMethod?: string, resourceRequestUri?: string, cachedNonce?: string, cachedState?: string, requestScopes?: string[], oboAssertion?: string, handlingRefreshTokenResponse?: boolean): Promise<AuthenticationResult>;
+    handleServerTokenResponse(serverTokenResponse: ServerAuthorizationTokenResponse, authority: Authority, resourceRequestMethod?: string, resourceRequestUri?: string, authCodePayload?: AuthorizationCodePayload, requestScopes?: string[], oboAssertion?: string, handlingRefreshTokenResponse?: boolean): Promise<AuthenticationResult | null>;
     /**
      * Generates CacheRecord
      * @param serverTokenResponse
@@ -65,5 +65,5 @@ export declare class ResponseHandler {
      * @param fromTokenCache
      * @param stateString
      */
-    static generateAuthenticationResult(cryptoObj: ICrypto, cacheRecord: CacheRecord, idTokenObj: AuthToken, fromTokenCache: boolean, requestState?: RequestStateObject, resourceRequestMethod?: string, resourceRequestUri?: string): Promise<AuthenticationResult>;
+    static generateAuthenticationResult(cryptoObj: ICrypto, authority: Authority, cacheRecord: CacheRecord, fromTokenCache: boolean, idTokenObj?: AuthToken, requestState?: RequestStateObject, resourceRequestMethod?: string, resourceRequestUri?: string): Promise<AuthenticationResult>;
 }

package/dist/src/response/ServerAuthorizationCodeResponse.d.ts

@@ -10,6 +10,10 @@ export declare type ServerAuthorizationCodeResponse = {
     code?: string;
     client_info?: string;
     state?: string;
+    cloud_instance_name?: string;
+    cloud_instance_host_name?: string;
+    cloud_graph_host_name?: string;
+    msgraph_host?: string;
     error?: string;
     error_description?: string;
     suberror?: string;

package/dist/src/url/UrlString.d.ts

@@ -39,6 +39,7 @@ export declare class UrlString {
      */
     getUrlComponents(): IUri;
     static getDomainFromUrl(url: string): string;
+    static getAbsoluteUrl(relativeUrl: string, baseUrl: string): string;
     /**
      * Parses hash string from given string. Returns empty string if no hash symbol is found.
      * @param hashString

package/dist/src/utils/Constants.d.ts

@@ -22,6 +22,7 @@ export declare const Constants: {
     AUTHORIZATION_PENDING: string;
     NOT_DEFINED: string;
     EMPTY_STRING: string;
+    FORWARD_SLASH: string;
 };
 /**
  * Request header names
@@ -84,6 +85,7 @@ export declare enum AADServerParamKeys {
     X_CLIENT_OS = "x-client-OS",
     X_CLIENT_CPU = "x-client-CPU",
     POST_LOGOUT_URI = "post_logout_redirect_uri",
+    ID_TOKEN_HINT = "id_token_hint",
     DEVICE_CODE = "device_code",
     CLIENT_SECRET = "client_secret",
     CLIENT_ASSERTION = "client_assertion",
@@ -252,3 +254,10 @@ export declare const Errors: {
     INVALID_GRANT_ERROR: string;
     CLIENT_MISMATCH_ERROR: string;
 };
+/**
+ * Password grant parameters
+ */
+export declare enum PasswordGrantConstants {
+    username = "username",
+    password = "password"
+}

package/dist/src/utils/StringUtils.d.ts

@@ -14,7 +14,7 @@ export declare class StringUtils {
      *
      * @param str
      */
-    static isEmpty(str: string): boolean;
+    static isEmpty(str?: string): boolean;
     static startsWith(str: string, search: string): boolean;
     static endsWith(str: string, search: string): boolean;
     /**
@@ -38,5 +38,11 @@ export declare class StringUtils {
      * Attempts to parse a string into JSON
      * @param str
      */
-    static jsonParseHelper<T>(str: string): T;
+    static jsonParseHelper<T>(str: string): T | null;
+    /**
+     * Tests if a given string matches a given pattern, with support for wildcards.
+     * @param pattern Wildcard pattern to string match. Supports "*" for wildcards
+     * @param input String to match against
+     */
+    static matchPattern(pattern: string, input: string): boolean;
 }

package/package.json

@@ -10,7 +10,7 @@
     "type": "git",
     "url": "https://github.com/AzureAD/microsoft-authentication-library-for-js.git"
   },
-  "version": "1.6.3",
+  "version": "2.0.0",
   "description": "Microsoft Authentication Library for js",
   "keywords": [
     "implicit",
@@ -48,11 +48,12 @@
     "lint": "cd ../../ && npm run lint:common",
     "lint:fix": "npm run lint -- -- --fix",
     "test": "mocha",
-    "test:coverage": "nyc --reporter=text mocha --exit",
+    "test:coverage": "nyc mocha",
     "test:coverage:only": "npm run clean:coverage && npm run test:coverage",
     "build:modules": "rollup -c",
     "build:modules:watch": "rollup -cw",
     "build": "npm run clean && npm run build:modules",
+    "build:all": "npm run build",
     "prepack": "npm run build"
   },
   "devDependencies": {
@@ -77,7 +78,7 @@
     "gh-pages": "^3.1.0",
     "husky": "^3.0.9",
     "mocha": "^6.2.2",
-    "nyc": "^14.1.1",
+    "nyc": "^15.0.0",
     "rimraf": "^3.0.2",
     "rollup": "^1.24.0",
     "rollup-plugin-typescript2": "^0.24.3",