@azure/msal-common 13.0.0 → 14.0.0-alpha.2
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/account/AccountInfo.d.ts +31 -31
- package/dist/account/AccountInfo.d.ts.map +1 -1
- package/dist/account/AuthToken.d.ts +20 -20
- package/dist/account/AuthToken.d.ts.map +1 -1
- package/dist/account/AuthToken.js +49 -50
- package/dist/account/AuthToken.js.map +1 -1
- package/dist/account/CcsCredential.d.ts +8 -8
- package/dist/account/CcsCredential.d.ts.map +1 -1
- package/dist/account/CcsCredential.js +9 -9
- package/dist/account/CcsCredential.js.map +1 -1
- package/dist/account/ClientCredentials.d.ts +14 -14
- package/dist/account/ClientCredentials.d.ts.map +1 -1
- package/dist/account/ClientInfo.d.ts +19 -19
- package/dist/account/ClientInfo.d.ts.map +1 -1
- package/dist/account/ClientInfo.js +37 -35
- package/dist/account/ClientInfo.js.map +1 -1
- package/dist/account/DecodedAuthToken.d.ts +8 -8
- package/dist/account/DecodedAuthToken.d.ts.map +1 -1
- package/dist/account/TokenClaims.d.ts +65 -65
- package/dist/account/TokenClaims.d.ts.map +1 -1
- package/dist/authority/Authority.d.ts +228 -215
- package/dist/authority/Authority.d.ts.map +1 -1
- package/dist/authority/Authority.js +717 -765
- package/dist/authority/Authority.js.map +1 -1
- package/dist/authority/AuthorityFactory.d.ts +30 -30
- package/dist/authority/AuthorityFactory.d.ts.map +1 -1
- package/dist/authority/AuthorityFactory.js +48 -63
- package/dist/authority/AuthorityFactory.js.map +1 -1
- package/dist/authority/AuthorityMetadata.d.ts +622 -622
- package/dist/authority/AuthorityMetadata.d.ts.map +1 -1
- package/dist/authority/AuthorityMetadata.js +877 -8
- package/dist/authority/AuthorityMetadata.js.map +1 -1
- package/dist/authority/AuthorityOptions.d.ts +18 -18
- package/dist/authority/AuthorityOptions.d.ts.map +1 -1
- package/dist/authority/AuthorityOptions.js +19 -19
- package/dist/authority/AuthorityOptions.js.map +1 -1
- package/dist/authority/AuthorityType.d.ts +9 -9
- package/dist/authority/AuthorityType.js +14 -14
- package/dist/authority/AuthorityType.js.map +1 -1
- package/dist/authority/AzureRegion.d.ts +1 -1
- package/dist/authority/AzureRegion.d.ts.map +1 -1
- package/dist/authority/AzureRegionConfiguration.d.ts +5 -5
- package/dist/authority/AzureRegionConfiguration.d.ts.map +1 -1
- package/dist/authority/CloudDiscoveryMetadata.d.ts +5 -5
- package/dist/authority/CloudDiscoveryMetadata.d.ts.map +1 -1
- package/dist/authority/CloudInstanceDiscoveryErrorResponse.d.ts +13 -13
- package/dist/authority/CloudInstanceDiscoveryErrorResponse.d.ts.map +1 -1
- package/dist/authority/CloudInstanceDiscoveryErrorResponse.js +8 -8
- package/dist/authority/CloudInstanceDiscoveryErrorResponse.js.map +1 -1
- package/dist/authority/CloudInstanceDiscoveryResponse.d.ts +9 -9
- package/dist/authority/CloudInstanceDiscoveryResponse.d.ts.map +1 -1
- package/dist/authority/CloudInstanceDiscoveryResponse.js +8 -8
- package/dist/authority/CloudInstanceDiscoveryResponse.js.map +1 -1
- package/dist/authority/ImdsOptions.d.ts +5 -5
- package/dist/authority/ImdsOptions.d.ts.map +1 -1
- package/dist/authority/OpenIdConfigResponse.d.ts +11 -11
- package/dist/authority/OpenIdConfigResponse.d.ts.map +1 -1
- package/dist/authority/OpenIdConfigResponse.js +10 -10
- package/dist/authority/OpenIdConfigResponse.js.map +1 -1
- package/dist/authority/ProtocolMode.d.ts +7 -7
- package/dist/authority/ProtocolMode.js +12 -12
- package/dist/authority/ProtocolMode.js.map +1 -1
- package/dist/authority/RegionDiscovery.d.ts +30 -30
- package/dist/authority/RegionDiscovery.d.ts.map +1 -1
- package/dist/authority/RegionDiscovery.js +110 -132
- package/dist/authority/RegionDiscovery.js.map +1 -1
- package/dist/authority/RegionDiscoveryMetadata.d.ts +6 -6
- package/dist/authority/RegionDiscoveryMetadata.d.ts.map +1 -1
- package/dist/broker/nativeBroker/INativeBrokerPlugin.d.ts +15 -15
- package/dist/broker/nativeBroker/INativeBrokerPlugin.d.ts.map +1 -1
- package/dist/cache/CacheManager.d.ts +443 -443
- package/dist/cache/CacheManager.d.ts.map +1 -1
- package/dist/cache/CacheManager.js +1012 -1047
- package/dist/cache/CacheManager.js.map +1 -1
- package/dist/cache/entities/AccessTokenEntity.d.ts +56 -56
- package/dist/cache/entities/AccessTokenEntity.d.ts.map +1 -1
- package/dist/cache/entities/AccessTokenEntity.js +112 -113
- package/dist/cache/entities/AccessTokenEntity.js.map +1 -1
- package/dist/cache/entities/AccountEntity.d.ts +99 -99
- package/dist/cache/entities/AccountEntity.d.ts.map +1 -1
- package/dist/cache/entities/AccountEntity.js +249 -237
- package/dist/cache/entities/AccountEntity.js.map +1 -1
- package/dist/cache/entities/AppMetadataEntity.d.ts +39 -39
- package/dist/cache/entities/AppMetadataEntity.d.ts.map +1 -1
- package/dist/cache/entities/AppMetadataEntity.js +67 -68
- package/dist/cache/entities/AppMetadataEntity.js.map +1 -1
- package/dist/cache/entities/AuthorityMetadataEntity.d.ts +47 -47
- package/dist/cache/entities/AuthorityMetadataEntity.d.ts.map +1 -1
- package/dist/cache/entities/AuthorityMetadataEntity.js +78 -75
- package/dist/cache/entities/AuthorityMetadataEntity.js.map +1 -1
- package/dist/cache/entities/CacheRecord.d.ts +13 -13
- package/dist/cache/entities/CacheRecord.d.ts.map +1 -1
- package/dist/cache/entities/CacheRecord.js +14 -15
- package/dist/cache/entities/CacheRecord.js.map +1 -1
- package/dist/cache/entities/CredentialEntity.d.ts +88 -88
- package/dist/cache/entities/CredentialEntity.d.ts.map +1 -1
- package/dist/cache/entities/CredentialEntity.js +137 -136
- package/dist/cache/entities/CredentialEntity.js.map +1 -1
- package/dist/cache/entities/IdTokenEntity.d.ts +34 -34
- package/dist/cache/entities/IdTokenEntity.d.ts.map +1 -1
- package/dist/cache/entities/IdTokenEntity.js +57 -63
- package/dist/cache/entities/IdTokenEntity.js.map +1 -1
- package/dist/cache/entities/RefreshTokenEntity.d.ts +36 -36
- package/dist/cache/entities/RefreshTokenEntity.d.ts.map +1 -1
- package/dist/cache/entities/RefreshTokenEntity.js +60 -66
- package/dist/cache/entities/RefreshTokenEntity.js.map +1 -1
- package/dist/cache/entities/ServerTelemetryEntity.d.ts +12 -12
- package/dist/cache/entities/ServerTelemetryEntity.d.ts.map +1 -1
- package/dist/cache/entities/ServerTelemetryEntity.js +28 -29
- package/dist/cache/entities/ServerTelemetryEntity.js.map +1 -1
- package/dist/cache/entities/ThrottlingEntity.d.ts +13 -13
- package/dist/cache/entities/ThrottlingEntity.js +24 -26
- package/dist/cache/entities/ThrottlingEntity.js.map +1 -1
- package/dist/cache/interface/ICacheManager.d.ts +165 -165
- package/dist/cache/interface/ICacheManager.d.ts.map +1 -1
- package/dist/cache/interface/ICachePlugin.d.ts +5 -5
- package/dist/cache/interface/ISerializableTokenCache.d.ts +4 -4
- package/dist/cache/persistence/TokenCacheContext.d.ts +23 -23
- package/dist/cache/persistence/TokenCacheContext.d.ts.map +1 -1
- package/dist/cache/persistence/TokenCacheContext.js +26 -35
- package/dist/cache/persistence/TokenCacheContext.js.map +1 -1
- package/dist/cache/utils/CacheTypes.d.ts +62 -62
- package/dist/cache/utils/CacheTypes.d.ts.map +1 -1
- package/dist/client/AuthorizationCodeClient.d.ts +71 -71
- package/dist/client/AuthorizationCodeClient.d.ts.map +1 -1
- package/dist/client/AuthorizationCodeClient.js +435 -478
- package/dist/client/AuthorizationCodeClient.js.map +1 -1
- package/dist/client/BaseClient.d.ts +50 -50
- package/dist/client/BaseClient.d.ts.map +1 -1
- package/dist/client/BaseClient.js +93 -101
- package/dist/client/BaseClient.js.map +1 -1
- package/dist/client/RefreshTokenClient.d.ts +34 -34
- package/dist/client/RefreshTokenClient.d.ts.map +1 -1
- package/dist/client/RefreshTokenClient.js +241 -274
- package/dist/client/RefreshTokenClient.js.map +1 -1
- package/dist/client/SilentFlowClient.d.ts +24 -24
- package/dist/client/SilentFlowClient.d.ts.map +1 -1
- package/dist/client/SilentFlowClient.js +95 -123
- package/dist/client/SilentFlowClient.js.map +1 -1
- package/dist/config/AppTokenProvider.d.ts +38 -38
- package/dist/config/AppTokenProvider.d.ts.map +1 -1
- package/dist/config/ClientConfiguration.d.ts +133 -133
- package/dist/config/ClientConfiguration.d.ts.map +1 -1
- package/dist/config/ClientConfiguration.js +88 -91
- package/dist/config/ClientConfiguration.js.map +1 -1
- package/dist/crypto/ICrypto.d.ts +62 -62
- package/dist/crypto/ICrypto.d.ts.map +1 -1
- package/dist/crypto/ICrypto.js +42 -73
- package/dist/crypto/ICrypto.js.map +1 -1
- package/dist/crypto/IGuidGenerator.d.ts +4 -4
- package/dist/crypto/JoseHeader.d.ts +21 -21
- package/dist/crypto/JoseHeader.d.ts.map +1 -1
- package/dist/crypto/JoseHeader.js +37 -38
- package/dist/crypto/JoseHeader.js.map +1 -1
- package/dist/crypto/PopTokenGenerator.d.ts +57 -57
- package/dist/crypto/PopTokenGenerator.d.ts.map +1 -1
- package/dist/crypto/PopTokenGenerator.js +84 -108
- package/dist/crypto/PopTokenGenerator.js.map +1 -1
- package/dist/crypto/SignedHttpRequest.d.ts +11 -11
- package/dist/crypto/SignedHttpRequest.d.ts.map +1 -1
- package/dist/error/AuthError.d.ts +47 -47
- package/dist/error/AuthError.d.ts.map +1 -1
- package/dist/error/AuthError.js +52 -55
- package/dist/error/AuthError.js.map +1 -1
- package/dist/error/ClientAuthError.d.ts +412 -404
- package/dist/error/ClientAuthError.d.ts.map +1 -1
- package/dist/error/ClientAuthError.js +520 -514
- package/dist/error/ClientAuthError.js.map +1 -1
- package/dist/error/ClientConfigurationError.d.ts +198 -198
- package/dist/error/ClientConfigurationError.d.ts.map +1 -1
- package/dist/error/ClientConfigurationError.js +250 -254
- package/dist/error/ClientConfigurationError.js.map +1 -1
- package/dist/error/InteractionRequiredAuthError.d.ts +59 -59
- package/dist/error/InteractionRequiredAuthError.d.ts.map +1 -1
- package/dist/error/InteractionRequiredAuthError.js +79 -78
- package/dist/error/InteractionRequiredAuthError.js.map +1 -1
- package/dist/error/JoseHeaderError.d.ts +28 -28
- package/dist/error/JoseHeaderError.d.ts.map +1 -1
- package/dist/error/JoseHeaderError.js +40 -44
- package/dist/error/JoseHeaderError.js.map +1 -1
- package/dist/error/ServerError.d.ts +7 -7
- package/dist/error/ServerError.d.ts.map +1 -1
- package/dist/error/ServerError.js +15 -19
- package/dist/error/ServerError.js.map +1 -1
- package/dist/index.cjs.js +8890 -9111
- package/dist/index.cjs.js.map +1 -1
- package/dist/index.d.ts +93 -94
- package/dist/index.d.ts.map +1 -1
- package/dist/index.js +5 -6
- package/dist/index.js.map +1 -1
- package/dist/logger/Logger.d.ts +95 -95
- package/dist/logger/Logger.d.ts.map +1 -1
- package/dist/logger/Logger.js +198 -188
- package/dist/logger/Logger.js.map +1 -1
- package/dist/network/INetworkModule.d.ts +29 -29
- package/dist/network/INetworkModule.d.ts.map +1 -1
- package/dist/network/INetworkModule.js +14 -14
- package/dist/network/INetworkModule.js.map +1 -1
- package/dist/network/NetworkManager.d.ts +32 -31
- package/dist/network/NetworkManager.d.ts.map +1 -1
- package/dist/network/NetworkManager.js +34 -48
- package/dist/network/NetworkManager.js.map +1 -1
- package/dist/network/RequestThumbprint.d.ts +16 -16
- package/dist/network/RequestThumbprint.d.ts.map +1 -1
- package/dist/network/ThrottlingUtils.d.ts +41 -41
- package/dist/network/ThrottlingUtils.d.ts.map +1 -1
- package/dist/network/ThrottlingUtils.js +95 -94
- package/dist/network/ThrottlingUtils.js.map +1 -1
- package/dist/packageMetadata.d.ts +2 -2
- package/dist/packageMetadata.d.ts.map +1 -1
- package/dist/packageMetadata.js +4 -4
- package/dist/packageMetadata.js.map +1 -1
- package/dist/request/AuthenticationHeaderParser.d.ts +19 -19
- package/dist/request/AuthenticationHeaderParser.d.ts.map +1 -1
- package/dist/request/AuthenticationHeaderParser.js +56 -57
- package/dist/request/AuthenticationHeaderParser.js.map +1 -1
- package/dist/request/BaseAuthRequest.d.ts +37 -37
- package/dist/request/BaseAuthRequest.d.ts.map +1 -1
- package/dist/request/CommonAuthorizationCodeRequest.d.ts +27 -27
- package/dist/request/CommonAuthorizationCodeRequest.d.ts.map +1 -1
- package/dist/request/CommonAuthorizationUrlRequest.d.ts +50 -50
- package/dist/request/CommonAuthorizationUrlRequest.d.ts.map +1 -1
- package/dist/request/CommonClientCredentialRequest.d.ts +17 -17
- package/dist/request/CommonClientCredentialRequest.d.ts.map +1 -1
- package/dist/request/CommonDeviceCodeRequest.d.ts +21 -21
- package/dist/request/CommonDeviceCodeRequest.d.ts.map +1 -1
- package/dist/request/CommonEndSessionRequest.d.ts +21 -21
- package/dist/request/CommonEndSessionRequest.d.ts.map +1 -1
- package/dist/request/CommonOnBehalfOfRequest.d.ts +13 -13
- package/dist/request/CommonOnBehalfOfRequest.d.ts.map +1 -1
- package/dist/request/CommonRefreshTokenRequest.d.ts +19 -19
- package/dist/request/CommonRefreshTokenRequest.d.ts.map +1 -1
- package/dist/request/CommonSilentFlowRequest.d.ts +18 -18
- package/dist/request/CommonSilentFlowRequest.d.ts.map +1 -1
- package/dist/request/CommonUsernamePasswordRequest.d.ts +17 -17
- package/dist/request/CommonUsernamePasswordRequest.d.ts.map +1 -1
- package/dist/request/NativeRequest.d.ts +19 -19
- package/dist/request/NativeRequest.d.ts.map +1 -1
- package/dist/request/NativeSignOutRequest.d.ts +5 -5
- package/dist/request/NativeSignOutRequest.d.ts.map +1 -1
- package/dist/request/RequestParameterBuilder.d.ts +216 -216
- package/dist/request/RequestParameterBuilder.d.ts.map +1 -1
- package/dist/request/RequestParameterBuilder.js +376 -378
- package/dist/request/RequestParameterBuilder.js.map +1 -1
- package/dist/request/RequestValidator.d.ts +33 -33
- package/dist/request/RequestValidator.d.ts.map +1 -1
- package/dist/request/RequestValidator.js +84 -89
- package/dist/request/RequestValidator.js.map +1 -1
- package/dist/request/ScopeSet.d.ts +88 -88
- package/dist/request/ScopeSet.d.ts.map +1 -1
- package/dist/request/ScopeSet.js +198 -198
- package/dist/request/ScopeSet.js.map +1 -1
- package/dist/response/AuthenticationResult.d.ts +39 -39
- package/dist/response/AuthenticationResult.d.ts.map +1 -1
- package/dist/response/AuthorizationCodePayload.d.ts +13 -13
- package/dist/response/AuthorizationCodePayload.d.ts.map +1 -1
- package/dist/response/DeviceCodeResponse.d.ts +25 -25
- package/dist/response/DeviceCodeResponse.d.ts.map +1 -1
- package/dist/response/ExternalTokenResponse.d.ts +15 -15
- package/dist/response/ExternalTokenResponse.d.ts.map +1 -1
- package/dist/response/IMDSBadResponse.d.ts +4 -4
- package/dist/response/IMDSBadResponse.d.ts.map +1 -1
- package/dist/response/ResponseHandler.d.ts +72 -72
- package/dist/response/ResponseHandler.d.ts.map +1 -1
- package/dist/response/ResponseHandler.js +301 -286
- package/dist/response/ResponseHandler.js.map +1 -1
- package/dist/response/ServerAuthorizationCodeResponse.d.ts +25 -25
- package/dist/response/ServerAuthorizationCodeResponse.d.ts.map +1 -1
- package/dist/response/ServerAuthorizationTokenResponse.d.ts +44 -44
- package/dist/response/ServerAuthorizationTokenResponse.d.ts.map +1 -1
- package/dist/telemetry/performance/IPerformanceClient.d.ts +42 -43
- package/dist/telemetry/performance/IPerformanceClient.d.ts.map +1 -1
- package/dist/telemetry/performance/IPerformanceMeasurement.d.ts +5 -5
- package/dist/telemetry/performance/PerformanceClient.d.ts +189 -197
- package/dist/telemetry/performance/PerformanceClient.d.ts.map +1 -1
- package/dist/telemetry/performance/PerformanceClient.js +407 -402
- package/dist/telemetry/performance/PerformanceClient.js.map +1 -1
- package/dist/telemetry/performance/PerformanceEvent.d.ts +439 -439
- package/dist/telemetry/performance/PerformanceEvent.d.ts.map +1 -1
- package/dist/telemetry/performance/PerformanceEvent.js +227 -227
- package/dist/telemetry/performance/PerformanceEvent.js.map +1 -1
- package/dist/telemetry/performance/StubPerformanceClient.d.ts +19 -17
- package/dist/telemetry/performance/StubPerformanceClient.d.ts.map +1 -1
- package/dist/telemetry/performance/StubPerformanceClient.js +37 -46
- package/dist/telemetry/performance/StubPerformanceClient.js.map +1 -1
- package/dist/telemetry/server/ServerTelemetryManager.d.ts +65 -66
- package/dist/telemetry/server/ServerTelemetryManager.d.ts.map +1 -1
- package/dist/telemetry/server/ServerTelemetryManager.js +199 -161
- package/dist/telemetry/server/ServerTelemetryManager.js.map +1 -1
- package/dist/telemetry/server/ServerTelemetryRequest.d.ts +8 -8
- package/dist/telemetry/server/ServerTelemetryRequest.d.ts.map +1 -1
- package/dist/url/IUri.d.ts +12 -12
- package/dist/url/UrlString.d.ts +70 -70
- package/dist/url/UrlString.d.ts.map +1 -1
- package/dist/url/UrlString.js +243 -232
- package/dist/url/UrlString.js.map +1 -1
- package/dist/utils/Constants.d.ts +331 -331
- package/dist/utils/Constants.d.ts.map +1 -1
- package/dist/utils/Constants.js +374 -373
- package/dist/utils/Constants.js.map +1 -1
- package/dist/utils/MsalTypes.d.ts +6 -6
- package/dist/utils/MsalTypes.d.ts.map +1 -1
- package/dist/utils/ProtocolUtils.d.ts +42 -42
- package/dist/utils/ProtocolUtils.d.ts.map +1 -1
- package/dist/utils/ProtocolUtils.js +72 -69
- package/dist/utils/ProtocolUtils.js.map +1 -1
- package/dist/utils/StringUtils.d.ts +53 -53
- package/dist/utils/StringUtils.d.ts.map +1 -1
- package/dist/utils/StringUtils.js +125 -123
- package/dist/utils/StringUtils.js.map +1 -1
- package/dist/utils/TimeUtils.d.ts +27 -27
- package/dist/utils/TimeUtils.d.ts.map +1 -1
- package/dist/utils/TimeUtils.js +46 -49
- package/dist/utils/TimeUtils.js.map +1 -1
- package/package.json +10 -7
- package/dist/_virtual/_tslib.js +0 -90
- package/dist/_virtual/_tslib.js.map +0 -1
- package/dist/client/ClientCredentialClient.d.ts +0 -38
- package/dist/client/ClientCredentialClient.d.ts.map +0 -1
- package/dist/client/ClientCredentialClient.js +0 -203
- package/dist/client/ClientCredentialClient.js.map +0 -1
- package/dist/client/DeviceCodeClient.d.ts +0 -57
- package/dist/client/DeviceCodeClient.d.ts.map +0 -1
- package/dist/client/DeviceCodeClient.js +0 -250
- package/dist/client/DeviceCodeClient.js.map +0 -1
- package/dist/client/OnBehalfOfClient.d.ts +0 -51
- package/dist/client/OnBehalfOfClient.d.ts.map +0 -1
- package/dist/client/OnBehalfOfClient.js +0 -248
- package/dist/client/OnBehalfOfClient.js.map +0 -1
- package/dist/client/UsernamePasswordClient.d.ts +0 -29
- package/dist/client/UsernamePasswordClient.d.ts.map +0 -1
- package/dist/client/UsernamePasswordClient.js +0 -129
- package/dist/client/UsernamePasswordClient.js.map +0 -1
|
@@ -1,387 +1,385 @@
|
|
|
1
|
-
/*! @azure/msal-common
|
|
1
|
+
/*! @azure/msal-common v14.0.0-alpha.2 2023-05-17 */
|
|
2
2
|
'use strict';
|
|
3
|
-
import {
|
|
4
|
-
import { AADServerParamKeys, Constants, ResponseMode, OIDC_DEFAULT_SCOPES, SSOTypes, HeaderNames, CLIENT_INFO, ClaimsRequestKeys, PasswordGrantConstants, AuthenticationScheme, ThrottlingConstants } from '../utils/Constants.js';
|
|
3
|
+
import { AADServerParamKeys, Constants, ResponseMode, SSOTypes, HeaderNames, CLIENT_INFO, ClaimsRequestKeys, PasswordGrantConstants, AuthenticationScheme, ThrottlingConstants, OIDC_DEFAULT_SCOPES } from '../utils/Constants.js';
|
|
5
4
|
import { ScopeSet } from './ScopeSet.js';
|
|
6
5
|
import { ClientConfigurationError } from '../error/ClientConfigurationError.js';
|
|
7
6
|
import { RequestValidator } from './RequestValidator.js';
|
|
8
7
|
import { StringUtils } from '../utils/StringUtils.js';
|
|
9
8
|
|
|
10
|
-
/*
|
|
11
|
-
* Copyright (c) Microsoft Corporation. All rights reserved.
|
|
12
|
-
* Licensed under the MIT License.
|
|
13
|
-
*/
|
|
14
|
-
|
|
15
|
-
|
|
16
|
-
this.parameters = new Map();
|
|
17
|
-
}
|
|
18
|
-
/**
|
|
19
|
-
* add response_type = code
|
|
20
|
-
*/
|
|
21
|
-
|
|
22
|
-
this.parameters.set(AADServerParamKeys.RESPONSE_TYPE, encodeURIComponent(Constants.CODE_RESPONSE_TYPE));
|
|
23
|
-
}
|
|
24
|
-
/**
|
|
25
|
-
* add response_type = token id_token
|
|
26
|
-
*/
|
|
27
|
-
|
|
28
|
-
this.parameters.set(AADServerParamKeys.RESPONSE_TYPE, encodeURIComponent(Constants.TOKEN_RESPONSE_TYPE
|
|
29
|
-
}
|
|
30
|
-
/**
|
|
31
|
-
* add response_mode. defaults to query.
|
|
32
|
-
* @param responseMode
|
|
33
|
-
*/
|
|
34
|
-
|
|
35
|
-
this.parameters.set(AADServerParamKeys.RESPONSE_MODE, encodeURIComponent(
|
|
36
|
-
}
|
|
37
|
-
/**
|
|
38
|
-
* Add flag to indicate STS should attempt to use WAM if available
|
|
39
|
-
*/
|
|
40
|
-
|
|
41
|
-
this.parameters.set(AADServerParamKeys.NATIVE_BROKER, encodeURIComponent("1"));
|
|
42
|
-
}
|
|
43
|
-
/**
|
|
44
|
-
* add scopes. set addOidcScopes to false to prevent default scopes in non-user scenarios
|
|
45
|
-
* @param scopeSet
|
|
46
|
-
* @param addOidcScopes
|
|
47
|
-
*/
|
|
48
|
-
|
|
49
|
-
|
|
50
|
-
|
|
51
|
-
|
|
52
|
-
|
|
53
|
-
|
|
54
|
-
|
|
55
|
-
|
|
56
|
-
*
|
|
57
|
-
|
|
58
|
-
|
|
59
|
-
|
|
60
|
-
|
|
61
|
-
|
|
62
|
-
|
|
63
|
-
*
|
|
64
|
-
|
|
65
|
-
|
|
66
|
-
|
|
67
|
-
|
|
68
|
-
|
|
69
|
-
|
|
70
|
-
|
|
71
|
-
*
|
|
72
|
-
|
|
73
|
-
|
|
74
|
-
|
|
75
|
-
|
|
76
|
-
|
|
77
|
-
|
|
78
|
-
|
|
79
|
-
*
|
|
80
|
-
|
|
81
|
-
|
|
82
|
-
|
|
83
|
-
|
|
84
|
-
|
|
85
|
-
|
|
86
|
-
*
|
|
87
|
-
|
|
88
|
-
|
|
89
|
-
|
|
90
|
-
|
|
91
|
-
|
|
92
|
-
|
|
93
|
-
*
|
|
94
|
-
|
|
95
|
-
|
|
96
|
-
|
|
97
|
-
|
|
98
|
-
|
|
99
|
-
|
|
100
|
-
*
|
|
101
|
-
|
|
102
|
-
|
|
103
|
-
|
|
104
|
-
|
|
105
|
-
|
|
106
|
-
|
|
107
|
-
*
|
|
108
|
-
|
|
109
|
-
|
|
110
|
-
|
|
111
|
-
|
|
112
|
-
|
|
113
|
-
|
|
114
|
-
*
|
|
115
|
-
|
|
116
|
-
|
|
117
|
-
|
|
118
|
-
|
|
119
|
-
|
|
120
|
-
|
|
121
|
-
*
|
|
122
|
-
|
|
123
|
-
|
|
124
|
-
|
|
125
|
-
|
|
126
|
-
|
|
127
|
-
|
|
128
|
-
|
|
129
|
-
|
|
130
|
-
*
|
|
131
|
-
|
|
132
|
-
|
|
133
|
-
|
|
134
|
-
|
|
135
|
-
|
|
136
|
-
|
|
137
|
-
*
|
|
138
|
-
|
|
139
|
-
|
|
140
|
-
|
|
141
|
-
|
|
142
|
-
this.parameters.set(AADServerParamKeys.
|
|
143
|
-
|
|
144
|
-
|
|
145
|
-
|
|
146
|
-
|
|
147
|
-
|
|
148
|
-
|
|
149
|
-
|
|
150
|
-
|
|
151
|
-
|
|
152
|
-
*
|
|
153
|
-
|
|
154
|
-
|
|
155
|
-
|
|
156
|
-
|
|
157
|
-
|
|
158
|
-
|
|
159
|
-
|
|
160
|
-
|
|
161
|
-
|
|
162
|
-
|
|
163
|
-
|
|
164
|
-
*
|
|
165
|
-
|
|
166
|
-
|
|
167
|
-
|
|
168
|
-
|
|
169
|
-
|
|
170
|
-
|
|
171
|
-
|
|
172
|
-
*
|
|
173
|
-
|
|
174
|
-
|
|
175
|
-
|
|
176
|
-
|
|
177
|
-
|
|
178
|
-
|
|
179
|
-
|
|
180
|
-
|
|
181
|
-
*
|
|
182
|
-
|
|
183
|
-
|
|
184
|
-
|
|
185
|
-
|
|
186
|
-
|
|
187
|
-
|
|
188
|
-
*
|
|
189
|
-
*
|
|
190
|
-
* @param
|
|
191
|
-
|
|
192
|
-
|
|
193
|
-
|
|
194
|
-
|
|
195
|
-
|
|
196
|
-
this.parameters.set(AADServerParamKeys.
|
|
197
|
-
|
|
198
|
-
|
|
199
|
-
|
|
200
|
-
|
|
201
|
-
|
|
202
|
-
|
|
203
|
-
|
|
204
|
-
*
|
|
205
|
-
|
|
206
|
-
|
|
207
|
-
|
|
208
|
-
|
|
209
|
-
|
|
210
|
-
|
|
211
|
-
*
|
|
212
|
-
|
|
213
|
-
|
|
214
|
-
|
|
215
|
-
|
|
216
|
-
|
|
217
|
-
|
|
218
|
-
*
|
|
219
|
-
|
|
220
|
-
|
|
221
|
-
|
|
222
|
-
|
|
223
|
-
|
|
224
|
-
|
|
225
|
-
*
|
|
226
|
-
|
|
227
|
-
|
|
228
|
-
|
|
229
|
-
|
|
230
|
-
|
|
231
|
-
|
|
232
|
-
*
|
|
233
|
-
|
|
234
|
-
|
|
235
|
-
|
|
236
|
-
|
|
237
|
-
|
|
238
|
-
|
|
239
|
-
*
|
|
240
|
-
|
|
241
|
-
|
|
242
|
-
|
|
243
|
-
|
|
244
|
-
|
|
245
|
-
|
|
246
|
-
|
|
247
|
-
|
|
248
|
-
*
|
|
249
|
-
|
|
250
|
-
|
|
251
|
-
|
|
252
|
-
|
|
253
|
-
|
|
254
|
-
|
|
255
|
-
|
|
256
|
-
|
|
257
|
-
*
|
|
258
|
-
|
|
259
|
-
|
|
260
|
-
|
|
261
|
-
|
|
262
|
-
|
|
263
|
-
|
|
264
|
-
*
|
|
265
|
-
|
|
266
|
-
|
|
267
|
-
|
|
268
|
-
|
|
269
|
-
|
|
270
|
-
|
|
271
|
-
*
|
|
272
|
-
|
|
273
|
-
|
|
274
|
-
|
|
275
|
-
|
|
276
|
-
|
|
277
|
-
|
|
278
|
-
*
|
|
279
|
-
|
|
280
|
-
|
|
281
|
-
|
|
282
|
-
|
|
283
|
-
|
|
284
|
-
|
|
285
|
-
*
|
|
286
|
-
|
|
287
|
-
|
|
288
|
-
|
|
289
|
-
|
|
290
|
-
Object.keys(sanitizedEQParams).forEach(
|
|
291
|
-
|
|
292
|
-
});
|
|
293
|
-
}
|
|
294
|
-
|
|
295
|
-
|
|
296
|
-
// Parse provided claims into JSON object or initialize empty object
|
|
297
|
-
if (!claims) {
|
|
298
|
-
mergedClaims = {};
|
|
299
|
-
}
|
|
300
|
-
else {
|
|
301
|
-
try {
|
|
302
|
-
mergedClaims = JSON.parse(claims);
|
|
303
|
-
}
|
|
304
|
-
catch (e) {
|
|
305
|
-
throw ClientConfigurationError.createInvalidClaimsRequestError();
|
|
306
|
-
}
|
|
307
|
-
}
|
|
308
|
-
if (clientCapabilities && clientCapabilities.length > 0) {
|
|
309
|
-
if (!mergedClaims.hasOwnProperty(ClaimsRequestKeys.ACCESS_TOKEN)) {
|
|
310
|
-
// Add access_token key to claims object
|
|
311
|
-
mergedClaims[ClaimsRequestKeys.ACCESS_TOKEN] = {};
|
|
312
|
-
}
|
|
313
|
-
// Add xms_cc claim with provided clientCapabilities to access_token key
|
|
314
|
-
mergedClaims[ClaimsRequestKeys.ACCESS_TOKEN][ClaimsRequestKeys.XMS_CC] = {
|
|
315
|
-
values: clientCapabilities
|
|
316
|
-
};
|
|
317
|
-
}
|
|
318
|
-
return JSON.stringify(mergedClaims);
|
|
319
|
-
}
|
|
320
|
-
/**
|
|
321
|
-
* adds `username` for Password Grant flow
|
|
322
|
-
* @param username
|
|
323
|
-
*/
|
|
324
|
-
|
|
325
|
-
this.parameters.set(PasswordGrantConstants.username, encodeURIComponent(username));
|
|
326
|
-
}
|
|
327
|
-
/**
|
|
328
|
-
* adds `password` for Password Grant flow
|
|
329
|
-
* @param password
|
|
330
|
-
*/
|
|
331
|
-
|
|
332
|
-
this.parameters.set(PasswordGrantConstants.password, encodeURIComponent(password));
|
|
333
|
-
}
|
|
334
|
-
/**
|
|
335
|
-
* add pop_jwk to query params
|
|
336
|
-
* @param cnfString
|
|
337
|
-
*/
|
|
338
|
-
|
|
339
|
-
if (!StringUtils.isEmpty(cnfString)) {
|
|
340
|
-
this.parameters.set(AADServerParamKeys.TOKEN_TYPE, AuthenticationScheme.POP);
|
|
341
|
-
this.parameters.set(AADServerParamKeys.REQ_CNF, encodeURIComponent(cnfString));
|
|
342
|
-
}
|
|
343
|
-
}
|
|
344
|
-
/**
|
|
345
|
-
* add SSH JWK and key ID to query params
|
|
346
|
-
*/
|
|
347
|
-
|
|
348
|
-
if (!StringUtils.isEmpty(sshJwkString)) {
|
|
349
|
-
this.parameters.set(AADServerParamKeys.TOKEN_TYPE, AuthenticationScheme.SSH);
|
|
350
|
-
this.parameters.set(AADServerParamKeys.REQ_CNF, encodeURIComponent(sshJwkString));
|
|
351
|
-
}
|
|
352
|
-
}
|
|
353
|
-
/**
|
|
354
|
-
* add server telemetry fields
|
|
355
|
-
* @param serverTelemetryManager
|
|
356
|
-
*/
|
|
357
|
-
|
|
358
|
-
this.parameters.set(AADServerParamKeys.X_CLIENT_CURR_TELEM, serverTelemetryManager.generateCurrentRequestHeaderValue());
|
|
359
|
-
this.parameters.set(AADServerParamKeys.X_CLIENT_LAST_TELEM, serverTelemetryManager.generateLastRequestHeaderValue());
|
|
360
|
-
}
|
|
361
|
-
/**
|
|
362
|
-
* Adds parameter that indicates to the server that throttling is supported
|
|
363
|
-
*/
|
|
364
|
-
|
|
365
|
-
this.parameters.set(AADServerParamKeys.X_MS_LIB_CAPABILITY, ThrottlingConstants.X_MS_LIB_CAPABILITY_VALUE);
|
|
366
|
-
}
|
|
367
|
-
/**
|
|
368
|
-
* Adds logout_hint parameter for "silent" logout which prevent server account picker
|
|
369
|
-
*/
|
|
370
|
-
|
|
371
|
-
this.parameters.set(AADServerParamKeys.LOGOUT_HINT, encodeURIComponent(logoutHint));
|
|
372
|
-
}
|
|
373
|
-
/**
|
|
374
|
-
* Utility to create a URL from the params map
|
|
375
|
-
*/
|
|
376
|
-
|
|
377
|
-
|
|
378
|
-
this.parameters.forEach(
|
|
379
|
-
queryParameterArray.push(key
|
|
380
|
-
});
|
|
381
|
-
return queryParameterArray.join("&");
|
|
382
|
-
}
|
|
383
|
-
|
|
384
|
-
}());
|
|
9
|
+
/*
|
|
10
|
+
* Copyright (c) Microsoft Corporation. All rights reserved.
|
|
11
|
+
* Licensed under the MIT License.
|
|
12
|
+
*/
|
|
13
|
+
class RequestParameterBuilder {
|
|
14
|
+
constructor() {
|
|
15
|
+
this.parameters = new Map();
|
|
16
|
+
}
|
|
17
|
+
/**
|
|
18
|
+
* add response_type = code
|
|
19
|
+
*/
|
|
20
|
+
addResponseTypeCode() {
|
|
21
|
+
this.parameters.set(AADServerParamKeys.RESPONSE_TYPE, encodeURIComponent(Constants.CODE_RESPONSE_TYPE));
|
|
22
|
+
}
|
|
23
|
+
/**
|
|
24
|
+
* add response_type = token id_token
|
|
25
|
+
*/
|
|
26
|
+
addResponseTypeForTokenAndIdToken() {
|
|
27
|
+
this.parameters.set(AADServerParamKeys.RESPONSE_TYPE, encodeURIComponent(`${Constants.TOKEN_RESPONSE_TYPE} ${Constants.ID_TOKEN_RESPONSE_TYPE}`));
|
|
28
|
+
}
|
|
29
|
+
/**
|
|
30
|
+
* add response_mode. defaults to query.
|
|
31
|
+
* @param responseMode
|
|
32
|
+
*/
|
|
33
|
+
addResponseMode(responseMode) {
|
|
34
|
+
this.parameters.set(AADServerParamKeys.RESPONSE_MODE, encodeURIComponent(responseMode ? responseMode : ResponseMode.QUERY));
|
|
35
|
+
}
|
|
36
|
+
/**
|
|
37
|
+
* Add flag to indicate STS should attempt to use WAM if available
|
|
38
|
+
*/
|
|
39
|
+
addNativeBroker() {
|
|
40
|
+
this.parameters.set(AADServerParamKeys.NATIVE_BROKER, encodeURIComponent("1"));
|
|
41
|
+
}
|
|
42
|
+
/**
|
|
43
|
+
* add scopes. set addOidcScopes to false to prevent default scopes in non-user scenarios
|
|
44
|
+
* @param scopeSet
|
|
45
|
+
* @param addOidcScopes
|
|
46
|
+
*/
|
|
47
|
+
addScopes(scopes, addOidcScopes = true) {
|
|
48
|
+
const requestScopes = addOidcScopes
|
|
49
|
+
? [...(scopes || []), ...OIDC_DEFAULT_SCOPES]
|
|
50
|
+
: scopes || [];
|
|
51
|
+
const scopeSet = new ScopeSet(requestScopes);
|
|
52
|
+
this.parameters.set(AADServerParamKeys.SCOPE, encodeURIComponent(scopeSet.printScopes()));
|
|
53
|
+
}
|
|
54
|
+
/**
|
|
55
|
+
* add clientId
|
|
56
|
+
* @param clientId
|
|
57
|
+
*/
|
|
58
|
+
addClientId(clientId) {
|
|
59
|
+
this.parameters.set(AADServerParamKeys.CLIENT_ID, encodeURIComponent(clientId));
|
|
60
|
+
}
|
|
61
|
+
/**
|
|
62
|
+
* add redirect_uri
|
|
63
|
+
* @param redirectUri
|
|
64
|
+
*/
|
|
65
|
+
addRedirectUri(redirectUri) {
|
|
66
|
+
RequestValidator.validateRedirectUri(redirectUri);
|
|
67
|
+
this.parameters.set(AADServerParamKeys.REDIRECT_URI, encodeURIComponent(redirectUri));
|
|
68
|
+
}
|
|
69
|
+
/**
|
|
70
|
+
* add post logout redirectUri
|
|
71
|
+
* @param redirectUri
|
|
72
|
+
*/
|
|
73
|
+
addPostLogoutRedirectUri(redirectUri) {
|
|
74
|
+
RequestValidator.validateRedirectUri(redirectUri);
|
|
75
|
+
this.parameters.set(AADServerParamKeys.POST_LOGOUT_URI, encodeURIComponent(redirectUri));
|
|
76
|
+
}
|
|
77
|
+
/**
|
|
78
|
+
* add id_token_hint to logout request
|
|
79
|
+
* @param idTokenHint
|
|
80
|
+
*/
|
|
81
|
+
addIdTokenHint(idTokenHint) {
|
|
82
|
+
this.parameters.set(AADServerParamKeys.ID_TOKEN_HINT, encodeURIComponent(idTokenHint));
|
|
83
|
+
}
|
|
84
|
+
/**
|
|
85
|
+
* add domain_hint
|
|
86
|
+
* @param domainHint
|
|
87
|
+
*/
|
|
88
|
+
addDomainHint(domainHint) {
|
|
89
|
+
this.parameters.set(SSOTypes.DOMAIN_HINT, encodeURIComponent(domainHint));
|
|
90
|
+
}
|
|
91
|
+
/**
|
|
92
|
+
* add login_hint
|
|
93
|
+
* @param loginHint
|
|
94
|
+
*/
|
|
95
|
+
addLoginHint(loginHint) {
|
|
96
|
+
this.parameters.set(SSOTypes.LOGIN_HINT, encodeURIComponent(loginHint));
|
|
97
|
+
}
|
|
98
|
+
/**
|
|
99
|
+
* Adds the CCS (Cache Credential Service) query parameter for login_hint
|
|
100
|
+
* @param loginHint
|
|
101
|
+
*/
|
|
102
|
+
addCcsUpn(loginHint) {
|
|
103
|
+
this.parameters.set(HeaderNames.CCS_HEADER, encodeURIComponent(`UPN:${loginHint}`));
|
|
104
|
+
}
|
|
105
|
+
/**
|
|
106
|
+
* Adds the CCS (Cache Credential Service) query parameter for account object
|
|
107
|
+
* @param loginHint
|
|
108
|
+
*/
|
|
109
|
+
addCcsOid(clientInfo) {
|
|
110
|
+
this.parameters.set(HeaderNames.CCS_HEADER, encodeURIComponent(`Oid:${clientInfo.uid}@${clientInfo.utid}`));
|
|
111
|
+
}
|
|
112
|
+
/**
|
|
113
|
+
* add sid
|
|
114
|
+
* @param sid
|
|
115
|
+
*/
|
|
116
|
+
addSid(sid) {
|
|
117
|
+
this.parameters.set(SSOTypes.SID, encodeURIComponent(sid));
|
|
118
|
+
}
|
|
119
|
+
/**
|
|
120
|
+
* add claims
|
|
121
|
+
* @param claims
|
|
122
|
+
*/
|
|
123
|
+
addClaims(claims, clientCapabilities) {
|
|
124
|
+
const mergedClaims = this.addClientCapabilitiesToClaims(claims, clientCapabilities);
|
|
125
|
+
RequestValidator.validateClaims(mergedClaims);
|
|
126
|
+
this.parameters.set(AADServerParamKeys.CLAIMS, encodeURIComponent(mergedClaims));
|
|
127
|
+
}
|
|
128
|
+
/**
|
|
129
|
+
* add correlationId
|
|
130
|
+
* @param correlationId
|
|
131
|
+
*/
|
|
132
|
+
addCorrelationId(correlationId) {
|
|
133
|
+
this.parameters.set(AADServerParamKeys.CLIENT_REQUEST_ID, encodeURIComponent(correlationId));
|
|
134
|
+
}
|
|
135
|
+
/**
|
|
136
|
+
* add library info query params
|
|
137
|
+
* @param libraryInfo
|
|
138
|
+
*/
|
|
139
|
+
addLibraryInfo(libraryInfo) {
|
|
140
|
+
// Telemetry Info
|
|
141
|
+
this.parameters.set(AADServerParamKeys.X_CLIENT_SKU, libraryInfo.sku);
|
|
142
|
+
this.parameters.set(AADServerParamKeys.X_CLIENT_VER, libraryInfo.version);
|
|
143
|
+
if (libraryInfo.os) {
|
|
144
|
+
this.parameters.set(AADServerParamKeys.X_CLIENT_OS, libraryInfo.os);
|
|
145
|
+
}
|
|
146
|
+
if (libraryInfo.cpu) {
|
|
147
|
+
this.parameters.set(AADServerParamKeys.X_CLIENT_CPU, libraryInfo.cpu);
|
|
148
|
+
}
|
|
149
|
+
}
|
|
150
|
+
/**
|
|
151
|
+
* Add client telemetry parameters
|
|
152
|
+
* @param appTelemetry
|
|
153
|
+
*/
|
|
154
|
+
addApplicationTelemetry(appTelemetry) {
|
|
155
|
+
if (appTelemetry?.appName) {
|
|
156
|
+
this.parameters.set(AADServerParamKeys.X_APP_NAME, appTelemetry.appName);
|
|
157
|
+
}
|
|
158
|
+
if (appTelemetry?.appVersion) {
|
|
159
|
+
this.parameters.set(AADServerParamKeys.X_APP_VER, appTelemetry.appVersion);
|
|
160
|
+
}
|
|
161
|
+
}
|
|
162
|
+
/**
|
|
163
|
+
* add prompt
|
|
164
|
+
* @param prompt
|
|
165
|
+
*/
|
|
166
|
+
addPrompt(prompt) {
|
|
167
|
+
RequestValidator.validatePrompt(prompt);
|
|
168
|
+
this.parameters.set(`${AADServerParamKeys.PROMPT}`, encodeURIComponent(prompt));
|
|
169
|
+
}
|
|
170
|
+
/**
|
|
171
|
+
* add state
|
|
172
|
+
* @param state
|
|
173
|
+
*/
|
|
174
|
+
addState(state) {
|
|
175
|
+
if (!StringUtils.isEmpty(state)) {
|
|
176
|
+
this.parameters.set(AADServerParamKeys.STATE, encodeURIComponent(state));
|
|
177
|
+
}
|
|
178
|
+
}
|
|
179
|
+
/**
|
|
180
|
+
* add nonce
|
|
181
|
+
* @param nonce
|
|
182
|
+
*/
|
|
183
|
+
addNonce(nonce) {
|
|
184
|
+
this.parameters.set(AADServerParamKeys.NONCE, encodeURIComponent(nonce));
|
|
185
|
+
}
|
|
186
|
+
/**
|
|
187
|
+
* add code_challenge and code_challenge_method
|
|
188
|
+
* - throw if either of them are not passed
|
|
189
|
+
* @param codeChallenge
|
|
190
|
+
* @param codeChallengeMethod
|
|
191
|
+
*/
|
|
192
|
+
addCodeChallengeParams(codeChallenge, codeChallengeMethod) {
|
|
193
|
+
RequestValidator.validateCodeChallengeParams(codeChallenge, codeChallengeMethod);
|
|
194
|
+
if (codeChallenge && codeChallengeMethod) {
|
|
195
|
+
this.parameters.set(AADServerParamKeys.CODE_CHALLENGE, encodeURIComponent(codeChallenge));
|
|
196
|
+
this.parameters.set(AADServerParamKeys.CODE_CHALLENGE_METHOD, encodeURIComponent(codeChallengeMethod));
|
|
197
|
+
}
|
|
198
|
+
else {
|
|
199
|
+
throw ClientConfigurationError.createInvalidCodeChallengeParamsError();
|
|
200
|
+
}
|
|
201
|
+
}
|
|
202
|
+
/**
|
|
203
|
+
* add the `authorization_code` passed by the user to exchange for a token
|
|
204
|
+
* @param code
|
|
205
|
+
*/
|
|
206
|
+
addAuthorizationCode(code) {
|
|
207
|
+
this.parameters.set(AADServerParamKeys.CODE, encodeURIComponent(code));
|
|
208
|
+
}
|
|
209
|
+
/**
|
|
210
|
+
* add the `authorization_code` passed by the user to exchange for a token
|
|
211
|
+
* @param code
|
|
212
|
+
*/
|
|
213
|
+
addDeviceCode(code) {
|
|
214
|
+
this.parameters.set(AADServerParamKeys.DEVICE_CODE, encodeURIComponent(code));
|
|
215
|
+
}
|
|
216
|
+
/**
|
|
217
|
+
* add the `refreshToken` passed by the user
|
|
218
|
+
* @param refreshToken
|
|
219
|
+
*/
|
|
220
|
+
addRefreshToken(refreshToken) {
|
|
221
|
+
this.parameters.set(AADServerParamKeys.REFRESH_TOKEN, encodeURIComponent(refreshToken));
|
|
222
|
+
}
|
|
223
|
+
/**
|
|
224
|
+
* add the `code_verifier` passed by the user to exchange for a token
|
|
225
|
+
* @param codeVerifier
|
|
226
|
+
*/
|
|
227
|
+
addCodeVerifier(codeVerifier) {
|
|
228
|
+
this.parameters.set(AADServerParamKeys.CODE_VERIFIER, encodeURIComponent(codeVerifier));
|
|
229
|
+
}
|
|
230
|
+
/**
|
|
231
|
+
* add client_secret
|
|
232
|
+
* @param clientSecret
|
|
233
|
+
*/
|
|
234
|
+
addClientSecret(clientSecret) {
|
|
235
|
+
this.parameters.set(AADServerParamKeys.CLIENT_SECRET, encodeURIComponent(clientSecret));
|
|
236
|
+
}
|
|
237
|
+
/**
|
|
238
|
+
* add clientAssertion for confidential client flows
|
|
239
|
+
* @param clientAssertion
|
|
240
|
+
*/
|
|
241
|
+
addClientAssertion(clientAssertion) {
|
|
242
|
+
if (!StringUtils.isEmpty(clientAssertion)) {
|
|
243
|
+
this.parameters.set(AADServerParamKeys.CLIENT_ASSERTION, encodeURIComponent(clientAssertion));
|
|
244
|
+
}
|
|
245
|
+
}
|
|
246
|
+
/**
|
|
247
|
+
* add clientAssertionType for confidential client flows
|
|
248
|
+
* @param clientAssertionType
|
|
249
|
+
*/
|
|
250
|
+
addClientAssertionType(clientAssertionType) {
|
|
251
|
+
if (!StringUtils.isEmpty(clientAssertionType)) {
|
|
252
|
+
this.parameters.set(AADServerParamKeys.CLIENT_ASSERTION_TYPE, encodeURIComponent(clientAssertionType));
|
|
253
|
+
}
|
|
254
|
+
}
|
|
255
|
+
/**
|
|
256
|
+
* add OBO assertion for confidential client flows
|
|
257
|
+
* @param clientAssertion
|
|
258
|
+
*/
|
|
259
|
+
addOboAssertion(oboAssertion) {
|
|
260
|
+
this.parameters.set(AADServerParamKeys.OBO_ASSERTION, encodeURIComponent(oboAssertion));
|
|
261
|
+
}
|
|
262
|
+
/**
|
|
263
|
+
* add grant type
|
|
264
|
+
* @param grantType
|
|
265
|
+
*/
|
|
266
|
+
addRequestTokenUse(tokenUse) {
|
|
267
|
+
this.parameters.set(AADServerParamKeys.REQUESTED_TOKEN_USE, encodeURIComponent(tokenUse));
|
|
268
|
+
}
|
|
269
|
+
/**
|
|
270
|
+
* add grant type
|
|
271
|
+
* @param grantType
|
|
272
|
+
*/
|
|
273
|
+
addGrantType(grantType) {
|
|
274
|
+
this.parameters.set(AADServerParamKeys.GRANT_TYPE, encodeURIComponent(grantType));
|
|
275
|
+
}
|
|
276
|
+
/**
|
|
277
|
+
* add client info
|
|
278
|
+
*
|
|
279
|
+
*/
|
|
280
|
+
addClientInfo() {
|
|
281
|
+
this.parameters.set(CLIENT_INFO, "1");
|
|
282
|
+
}
|
|
283
|
+
/**
|
|
284
|
+
* add extraQueryParams
|
|
285
|
+
* @param eQParams
|
|
286
|
+
*/
|
|
287
|
+
addExtraQueryParameters(eQParams) {
|
|
288
|
+
const sanitizedEQParams = RequestValidator.sanitizeEQParams(eQParams, this.parameters);
|
|
289
|
+
Object.keys(sanitizedEQParams).forEach((key) => {
|
|
290
|
+
this.parameters.set(key, eQParams[key]);
|
|
291
|
+
});
|
|
292
|
+
}
|
|
293
|
+
addClientCapabilitiesToClaims(claims, clientCapabilities) {
|
|
294
|
+
let mergedClaims;
|
|
295
|
+
// Parse provided claims into JSON object or initialize empty object
|
|
296
|
+
if (!claims) {
|
|
297
|
+
mergedClaims = {};
|
|
298
|
+
}
|
|
299
|
+
else {
|
|
300
|
+
try {
|
|
301
|
+
mergedClaims = JSON.parse(claims);
|
|
302
|
+
}
|
|
303
|
+
catch (e) {
|
|
304
|
+
throw ClientConfigurationError.createInvalidClaimsRequestError();
|
|
305
|
+
}
|
|
306
|
+
}
|
|
307
|
+
if (clientCapabilities && clientCapabilities.length > 0) {
|
|
308
|
+
if (!mergedClaims.hasOwnProperty(ClaimsRequestKeys.ACCESS_TOKEN)) {
|
|
309
|
+
// Add access_token key to claims object
|
|
310
|
+
mergedClaims[ClaimsRequestKeys.ACCESS_TOKEN] = {};
|
|
311
|
+
}
|
|
312
|
+
// Add xms_cc claim with provided clientCapabilities to access_token key
|
|
313
|
+
mergedClaims[ClaimsRequestKeys.ACCESS_TOKEN][ClaimsRequestKeys.XMS_CC] = {
|
|
314
|
+
values: clientCapabilities,
|
|
315
|
+
};
|
|
316
|
+
}
|
|
317
|
+
return JSON.stringify(mergedClaims);
|
|
318
|
+
}
|
|
319
|
+
/**
|
|
320
|
+
* adds `username` for Password Grant flow
|
|
321
|
+
* @param username
|
|
322
|
+
*/
|
|
323
|
+
addUsername(username) {
|
|
324
|
+
this.parameters.set(PasswordGrantConstants.username, encodeURIComponent(username));
|
|
325
|
+
}
|
|
326
|
+
/**
|
|
327
|
+
* adds `password` for Password Grant flow
|
|
328
|
+
* @param password
|
|
329
|
+
*/
|
|
330
|
+
addPassword(password) {
|
|
331
|
+
this.parameters.set(PasswordGrantConstants.password, encodeURIComponent(password));
|
|
332
|
+
}
|
|
333
|
+
/**
|
|
334
|
+
* add pop_jwk to query params
|
|
335
|
+
* @param cnfString
|
|
336
|
+
*/
|
|
337
|
+
addPopToken(cnfString) {
|
|
338
|
+
if (!StringUtils.isEmpty(cnfString)) {
|
|
339
|
+
this.parameters.set(AADServerParamKeys.TOKEN_TYPE, AuthenticationScheme.POP);
|
|
340
|
+
this.parameters.set(AADServerParamKeys.REQ_CNF, encodeURIComponent(cnfString));
|
|
341
|
+
}
|
|
342
|
+
}
|
|
343
|
+
/**
|
|
344
|
+
* add SSH JWK and key ID to query params
|
|
345
|
+
*/
|
|
346
|
+
addSshJwk(sshJwkString) {
|
|
347
|
+
if (!StringUtils.isEmpty(sshJwkString)) {
|
|
348
|
+
this.parameters.set(AADServerParamKeys.TOKEN_TYPE, AuthenticationScheme.SSH);
|
|
349
|
+
this.parameters.set(AADServerParamKeys.REQ_CNF, encodeURIComponent(sshJwkString));
|
|
350
|
+
}
|
|
351
|
+
}
|
|
352
|
+
/**
|
|
353
|
+
* add server telemetry fields
|
|
354
|
+
* @param serverTelemetryManager
|
|
355
|
+
*/
|
|
356
|
+
addServerTelemetry(serverTelemetryManager) {
|
|
357
|
+
this.parameters.set(AADServerParamKeys.X_CLIENT_CURR_TELEM, serverTelemetryManager.generateCurrentRequestHeaderValue());
|
|
358
|
+
this.parameters.set(AADServerParamKeys.X_CLIENT_LAST_TELEM, serverTelemetryManager.generateLastRequestHeaderValue());
|
|
359
|
+
}
|
|
360
|
+
/**
|
|
361
|
+
* Adds parameter that indicates to the server that throttling is supported
|
|
362
|
+
*/
|
|
363
|
+
addThrottling() {
|
|
364
|
+
this.parameters.set(AADServerParamKeys.X_MS_LIB_CAPABILITY, ThrottlingConstants.X_MS_LIB_CAPABILITY_VALUE);
|
|
365
|
+
}
|
|
366
|
+
/**
|
|
367
|
+
* Adds logout_hint parameter for "silent" logout which prevent server account picker
|
|
368
|
+
*/
|
|
369
|
+
addLogoutHint(logoutHint) {
|
|
370
|
+
this.parameters.set(AADServerParamKeys.LOGOUT_HINT, encodeURIComponent(logoutHint));
|
|
371
|
+
}
|
|
372
|
+
/**
|
|
373
|
+
* Utility to create a URL from the params map
|
|
374
|
+
*/
|
|
375
|
+
createQueryString() {
|
|
376
|
+
const queryParameterArray = new Array();
|
|
377
|
+
this.parameters.forEach((value, key) => {
|
|
378
|
+
queryParameterArray.push(`${key}=${value}`);
|
|
379
|
+
});
|
|
380
|
+
return queryParameterArray.join("&");
|
|
381
|
+
}
|
|
382
|
+
}
|
|
385
383
|
|
|
386
384
|
export { RequestParameterBuilder };
|
|
387
385
|
//# sourceMappingURL=RequestParameterBuilder.js.map
|