@azure/msal-common 12.0.0 → 12.1.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/_virtual/_tslib.js +1 -1
- package/dist/account/AuthToken.js +1 -1
- package/dist/account/CcsCredential.js +1 -1
- package/dist/account/ClientInfo.js +1 -1
- package/dist/authority/Authority.d.ts +12 -2
- package/dist/authority/Authority.d.ts.map +1 -1
- package/dist/authority/Authority.js +34 -4
- package/dist/authority/Authority.js.map +1 -1
- package/dist/authority/AuthorityFactory.d.ts.map +1 -1
- package/dist/authority/AuthorityFactory.js +4 -3
- package/dist/authority/AuthorityFactory.js.map +1 -1
- package/dist/authority/AuthorityMetadata.js +1 -1
- package/dist/authority/AuthorityOptions.js +1 -1
- package/dist/authority/AuthorityType.d.ts +2 -1
- package/dist/authority/AuthorityType.d.ts.map +1 -1
- package/dist/authority/AuthorityType.js +2 -1
- package/dist/authority/AuthorityType.js.map +1 -1
- package/dist/authority/CloudInstanceDiscoveryErrorResponse.js +1 -1
- package/dist/authority/CloudInstanceDiscoveryResponse.js +1 -1
- package/dist/authority/OpenIdConfigResponse.js +1 -1
- package/dist/authority/ProtocolMode.js +1 -1
- package/dist/authority/RegionDiscovery.js +1 -1
- package/dist/cache/CacheManager.js +1 -1
- package/dist/cache/entities/AccessTokenEntity.js +1 -1
- package/dist/cache/entities/AccountEntity.js +1 -1
- package/dist/cache/entities/AppMetadataEntity.js +1 -1
- package/dist/cache/entities/AuthorityMetadataEntity.js +1 -1
- package/dist/cache/entities/CacheRecord.js +1 -1
- package/dist/cache/entities/CredentialEntity.js +1 -1
- package/dist/cache/entities/IdTokenEntity.js +1 -1
- package/dist/cache/entities/RefreshTokenEntity.js +1 -1
- package/dist/cache/entities/ServerTelemetryEntity.js +1 -1
- package/dist/cache/entities/ThrottlingEntity.js +1 -1
- package/dist/cache/persistence/TokenCacheContext.js +1 -1
- package/dist/client/AuthorizationCodeClient.js +1 -1
- package/dist/client/BaseClient.js +1 -1
- package/dist/client/ClientCredentialClient.js +1 -1
- package/dist/client/DeviceCodeClient.js +1 -1
- package/dist/client/OnBehalfOfClient.js +1 -1
- package/dist/client/RefreshTokenClient.js +1 -1
- package/dist/client/SilentFlowClient.js +1 -1
- package/dist/client/UsernamePasswordClient.js +1 -1
- package/dist/config/ClientConfiguration.js +1 -1
- package/dist/crypto/ICrypto.js +1 -1
- package/dist/crypto/JoseHeader.js +1 -1
- package/dist/crypto/PopTokenGenerator.js +1 -1
- package/dist/error/AuthError.js +1 -1
- package/dist/error/ClientAuthError.js +1 -1
- package/dist/error/ClientConfigurationError.js +1 -1
- package/dist/error/InteractionRequiredAuthError.js +1 -1
- package/dist/error/JoseHeaderError.js +1 -1
- package/dist/error/ServerError.js +1 -1
- package/dist/index.cjs.js +42 -14
- package/dist/index.cjs.js.map +1 -1
- package/dist/index.js +1 -1
- package/dist/logger/Logger.js +1 -1
- package/dist/network/INetworkModule.js +1 -1
- package/dist/network/NetworkManager.js +1 -1
- package/dist/network/ThrottlingUtils.js +1 -1
- package/dist/packageMetadata.d.ts +1 -1
- package/dist/packageMetadata.js +2 -2
- package/dist/packageMetadata.js.map +1 -1
- package/dist/request/AuthenticationHeaderParser.js +1 -1
- package/dist/request/RequestParameterBuilder.js +1 -1
- package/dist/request/RequestValidator.js +1 -1
- package/dist/request/ScopeSet.js +1 -1
- package/dist/response/ResponseHandler.js +1 -1
- package/dist/telemetry/performance/PerformanceClient.js +1 -1
- package/dist/telemetry/performance/PerformanceEvent.js +1 -1
- package/dist/telemetry/performance/StubPerformanceClient.js +1 -1
- package/dist/telemetry/server/ServerTelemetryManager.js +1 -1
- package/dist/url/UrlString.js +1 -1
- package/dist/utils/Constants.d.ts +2 -4
- package/dist/utils/Constants.d.ts.map +1 -1
- package/dist/utils/Constants.js +4 -1
- package/dist/utils/Constants.js.map +1 -1
- package/dist/utils/ProtocolUtils.js +1 -1
- package/dist/utils/StringUtils.js +1 -1
- package/dist/utils/TimeUtils.js +1 -1
- package/package.json +1 -1
|
@@ -1,4 +1,4 @@
|
|
|
1
|
-
/*! @azure/msal-common v12.
|
|
1
|
+
/*! @azure/msal-common v12.1.0 2023-04-18 */
|
|
2
2
|
'use strict';
|
|
3
3
|
import { CredentialType, CacheType, Separators, Constants, AuthenticationScheme } from '../../utils/Constants.js';
|
|
4
4
|
import { ClientAuthError } from '../../error/ClientAuthError.js';
|
package/dist/crypto/ICrypto.js
CHANGED
package/dist/error/AuthError.js
CHANGED
package/dist/index.cjs.js
CHANGED
|
@@ -1,4 +1,4 @@
|
|
|
1
|
-
/*! @azure/msal-common v12.
|
|
1
|
+
/*! @azure/msal-common v12.1.0 2023-04-18 */
|
|
2
2
|
'use strict';
|
|
3
3
|
'use strict';
|
|
4
4
|
|
|
@@ -108,6 +108,9 @@ var Constants = {
|
|
|
108
108
|
DSTS: "dstsv2",
|
|
109
109
|
// Default AAD Instance Discovery Endpoint
|
|
110
110
|
AAD_INSTANCE_DISCOVERY_ENDPT: "https://login.microsoftonline.com/common/discovery/instance?api-version=1.1&authorization_endpoint=",
|
|
111
|
+
// CIAM URL
|
|
112
|
+
CIAM_AUTH_URL: ".ciamlogin.com",
|
|
113
|
+
AAD_TENANT_DOMAIN_SUFFIX: ".onmicrosoft.com",
|
|
111
114
|
// Resource delimiter - used for certain cache entries
|
|
112
115
|
RESOURCE_DELIM: "|",
|
|
113
116
|
// Placeholder for non-existent account ids/objects
|
|
@@ -278,13 +281,6 @@ exports.SSOTypes = void 0;
|
|
|
278
281
|
SSOTypes["ACCOUNT_ID"] = "accountIdentifier";
|
|
279
282
|
SSOTypes["HOMEACCOUNT_ID"] = "homeAccountIdentifier";
|
|
280
283
|
})(exports.SSOTypes || (exports.SSOTypes = {}));
|
|
281
|
-
/**
|
|
282
|
-
* Disallowed extra query parameters.
|
|
283
|
-
*/
|
|
284
|
-
[
|
|
285
|
-
exports.SSOTypes.SID,
|
|
286
|
-
exports.SSOTypes.LOGIN_HINT
|
|
287
|
-
];
|
|
288
284
|
/**
|
|
289
285
|
* allowed values for codeVerifier
|
|
290
286
|
*/
|
|
@@ -1427,7 +1423,7 @@ var Logger = /** @class */ (function () {
|
|
|
1427
1423
|
|
|
1428
1424
|
/* eslint-disable header/header */
|
|
1429
1425
|
var name = "@azure/msal-common";
|
|
1430
|
-
var version = "12.
|
|
1426
|
+
var version = "12.1.0";
|
|
1431
1427
|
|
|
1432
1428
|
/*
|
|
1433
1429
|
* Copyright (c) Microsoft Corporation. All rights reserved.
|
|
@@ -1947,6 +1943,7 @@ exports.AuthorityType = void 0;
|
|
|
1947
1943
|
AuthorityType[AuthorityType["Default"] = 0] = "Default";
|
|
1948
1944
|
AuthorityType[AuthorityType["Adfs"] = 1] = "Adfs";
|
|
1949
1945
|
AuthorityType[AuthorityType["Dsts"] = 2] = "Dsts";
|
|
1946
|
+
AuthorityType[AuthorityType["Ciam"] = 3] = "Ciam";
|
|
1950
1947
|
})(exports.AuthorityType || (exports.AuthorityType = {}));
|
|
1951
1948
|
|
|
1952
1949
|
/*
|
|
@@ -7567,6 +7564,10 @@ var Authority = /** @class */ (function () {
|
|
|
7567
7564
|
Object.defineProperty(Authority.prototype, "authorityType", {
|
|
7568
7565
|
// See above for AuthorityType
|
|
7569
7566
|
get: function () {
|
|
7567
|
+
// CIAM auth url pattern is being standardized as: <tenant>.ciamlogin.com
|
|
7568
|
+
if (this.canonicalAuthorityUrlComponents.HostNameAndPort.endsWith(Constants.CIAM_AUTH_URL)) {
|
|
7569
|
+
return exports.AuthorityType.Ciam;
|
|
7570
|
+
}
|
|
7570
7571
|
var pathSegments = this.canonicalAuthorityUrlComponents.PathSegments;
|
|
7571
7572
|
if (pathSegments.length) {
|
|
7572
7573
|
switch (pathSegments[0].toLowerCase()) {
|
|
@@ -7854,7 +7855,6 @@ var Authority = /** @class */ (function () {
|
|
|
7854
7855
|
// No need to update
|
|
7855
7856
|
return [2 /*return*/, AuthorityMetadataSource.CACHE];
|
|
7856
7857
|
}
|
|
7857
|
-
harcodedMetadata = this.getEndpointMetadataFromHardcodedValues();
|
|
7858
7858
|
(_b = this.performanceClient) === null || _b === void 0 ? void 0 : _b.setPreQueueTime(exports.PerformanceEvents.AuthorityGetEndpointMetadataFromNetwork, this.correlationId);
|
|
7859
7859
|
return [4 /*yield*/, this.getEndpointMetadataFromNetwork()];
|
|
7860
7860
|
case 1:
|
|
@@ -7870,6 +7870,7 @@ var Authority = /** @class */ (function () {
|
|
|
7870
7870
|
metadataEntity.updateEndpointMetadata(metadata, true);
|
|
7871
7871
|
return [2 /*return*/, AuthorityMetadataSource.NETWORK];
|
|
7872
7872
|
case 4:
|
|
7873
|
+
harcodedMetadata = this.getEndpointMetadataFromHardcodedValues();
|
|
7873
7874
|
if (!(harcodedMetadata && !this.authorityOptions.skipAuthorityMetadataCache)) return [3 /*break*/, 7];
|
|
7874
7875
|
if (!((_e = this.authorityOptions.azureRegionConfiguration) === null || _e === void 0 ? void 0 : _e.azureRegion)) return [3 /*break*/, 6];
|
|
7875
7876
|
(_f = this.performanceClient) === null || _f === void 0 ? void 0 : _f.setPreQueueTime(exports.PerformanceEvents.AuthorityUpdateMetadataWithRegionalInformation, this.correlationId);
|
|
@@ -7994,8 +7995,8 @@ var Authority = /** @class */ (function () {
|
|
|
7994
7995
|
/**
|
|
7995
7996
|
* Updates the AuthorityMetadataEntity with new aliases, preferred_network and preferred_cache
|
|
7996
7997
|
* and returns where the information was retrieved from
|
|
7997
|
-
* @param
|
|
7998
|
-
* @
|
|
7998
|
+
* @param metadataEntity
|
|
7999
|
+
* @returns AuthorityMetadataSource
|
|
7999
8000
|
*/
|
|
8000
8001
|
Authority.prototype.updateCloudDiscoveryMetadata = function (metadataEntity) {
|
|
8001
8002
|
var _a, _b;
|
|
@@ -8005,6 +8006,7 @@ var Authority = /** @class */ (function () {
|
|
|
8005
8006
|
switch (_c.label) {
|
|
8006
8007
|
case 0:
|
|
8007
8008
|
(_a = this.performanceClient) === null || _a === void 0 ? void 0 : _a.addQueueMeasurement(exports.PerformanceEvents.AuthorityUpdateCloudDiscoveryMetadata, this.correlationId);
|
|
8009
|
+
// attempt to read metadata from the config
|
|
8008
8010
|
this.logger.verbose("Attempting to get cloud discovery metadata in the config");
|
|
8009
8011
|
this.logger.verbosePii("Known Authorities: " + (this.authorityOptions.knownAuthorities || Constants.NOT_APPLICABLE));
|
|
8010
8012
|
this.logger.verbosePii("Authority Metadata: " + (this.authorityOptions.authorityMetadata || Constants.NOT_APPLICABLE));
|
|
@@ -8054,6 +8056,11 @@ var Authority = /** @class */ (function () {
|
|
|
8054
8056
|
* Parse cloudDiscoveryMetadata config or check knownAuthorities
|
|
8055
8057
|
*/
|
|
8056
8058
|
Authority.prototype.getCloudDiscoveryMetadataFromConfig = function () {
|
|
8059
|
+
// CIAM does not support cloud discovery metadata
|
|
8060
|
+
if (this.authorityType === exports.AuthorityType.Ciam) {
|
|
8061
|
+
this.logger.verbose("CIAM authorities do not support cloud discovery metadata, generate the aliases from authority host.");
|
|
8062
|
+
return Authority.createCloudDiscoveryMetadataFromHost(this.hostnameAndPort);
|
|
8063
|
+
}
|
|
8057
8064
|
// Check if network response was provided in config
|
|
8058
8065
|
if (this.authorityOptions.cloudDiscoveryMetadata) {
|
|
8059
8066
|
this.logger.verbose("The cloud discovery metadata has been provided as a network response, in the config.");
|
|
@@ -8273,6 +8280,26 @@ var Authority = /** @class */ (function () {
|
|
|
8273
8280
|
}
|
|
8274
8281
|
return metadata;
|
|
8275
8282
|
};
|
|
8283
|
+
/**
|
|
8284
|
+
* Transform CIAM_AUTHORIY as per the below rules:
|
|
8285
|
+
* If no path segments found and it is a CIAM authority (hostname ends with .ciamlogin.com), then transform it
|
|
8286
|
+
*
|
|
8287
|
+
* NOTE: The transformation path should go away once STS supports CIAM with the format: `tenantIdorDomain.ciamlogin.com`
|
|
8288
|
+
* `ciamlogin.com` can also change in the future and we should accommodate the same
|
|
8289
|
+
*
|
|
8290
|
+
* @param authority
|
|
8291
|
+
*/
|
|
8292
|
+
Authority.transformCIAMAuthority = function (authority) {
|
|
8293
|
+
var ciamAuthority = authority;
|
|
8294
|
+
var authorityUrl = new UrlString(authority);
|
|
8295
|
+
var authorityUrlComponents = authorityUrl.getUrlComponents();
|
|
8296
|
+
// check if transformation is needed
|
|
8297
|
+
if (authorityUrlComponents.PathSegments.length === 0 && (authorityUrlComponents.HostNameAndPort.endsWith(Constants.CIAM_AUTH_URL))) {
|
|
8298
|
+
var tenantIdOrDomain = authorityUrlComponents.HostNameAndPort.split(".")[0];
|
|
8299
|
+
ciamAuthority = "" + ciamAuthority + tenantIdOrDomain + Constants.AAD_TENANT_DOMAIN_SUFFIX;
|
|
8300
|
+
}
|
|
8301
|
+
return ciamAuthority;
|
|
8302
|
+
};
|
|
8276
8303
|
return Authority;
|
|
8277
8304
|
}());
|
|
8278
8305
|
|
|
@@ -8295,12 +8322,13 @@ var AuthorityFactory = /** @class */ (function () {
|
|
|
8295
8322
|
*/
|
|
8296
8323
|
AuthorityFactory.createDiscoveredInstance = function (authorityUri, networkClient, cacheManager, authorityOptions, logger, performanceClient, correlationId) {
|
|
8297
8324
|
return __awaiter(this, void 0, void 0, function () {
|
|
8298
|
-
var acquireTokenAuthority, e_1;
|
|
8325
|
+
var authorityUriFinal, acquireTokenAuthority, e_1;
|
|
8299
8326
|
return __generator(this, function (_a) {
|
|
8300
8327
|
switch (_a.label) {
|
|
8301
8328
|
case 0:
|
|
8302
8329
|
performanceClient === null || performanceClient === void 0 ? void 0 : performanceClient.addQueueMeasurement(exports.PerformanceEvents.AuthorityFactoryCreateDiscoveredInstance, correlationId);
|
|
8303
|
-
|
|
8330
|
+
authorityUriFinal = Authority.transformCIAMAuthority(authorityUri);
|
|
8331
|
+
acquireTokenAuthority = AuthorityFactory.createInstance(authorityUriFinal, networkClient, cacheManager, authorityOptions, logger, performanceClient, correlationId);
|
|
8304
8332
|
_a.label = 1;
|
|
8305
8333
|
case 1:
|
|
8306
8334
|
_a.trys.push([1, 3, , 4]);
|