@azure/msal-common 14.0.0 → 14.0.2

package/dist/error/JoseHeaderError.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"JoseHeaderError.mjs","sources":["../../src/error/JoseHeaderError.ts"],"sourcesContent":[null],"names":[],"mappings":";;;;AAAA;;;AAGG;AAIH;;AAEG;AACU,MAAA,sBAAsB,GAAG;AAClC,IAAA,eAAe,EAAE;AACb,QAAA,IAAI,EAAE,mBAAmB;AACzB,QAAA,IAAI,EAAE,oJAAoJ;AAC7J,KAAA;AACD,IAAA,eAAe,EAAE;AACb,QAAA,IAAI,EAAE,mBAAmB;AACzB,QAAA,IAAI,EAAE,wJAAwJ;AACjK,KAAA;EACH;AAEF;;AAEG;AACG,MAAO,eAAgB,SAAQ,SAAS,CAAA;IAC1C,WAAY,CAAA,SAAiB,EAAE,YAAqB,EAAA;AAChD,QAAA,KAAK,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC;AAC/B,QAAA,IAAI,CAAC,IAAI,GAAG,iBAAiB,CAAC;QAE9B,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,eAAe,CAAC,SAAS,CAAC,CAAC;KAC1D;AAED;;AAEG;AACH,IAAA,OAAO,qBAAqB,GAAA;AACxB,QAAA,OAAO,IAAI,eAAe,CACtB,sBAAsB,CAAC,eAAe,CAAC,IAAI,EAC3C,sBAAsB,CAAC,eAAe,CAAC,IAAI,CAC9C,CAAC;KACL;AAED;;AAEG;AACH,IAAA,OAAO,qBAAqB,GAAA;AACxB,QAAA,OAAO,IAAI,eAAe,CACtB,sBAAsB,CAAC,eAAe,CAAC,IAAI,EAC3C,sBAAsB,CAAC,eAAe,CAAC,IAAI,CAC9C,CAAC;KACL;AACJ;;;;"}

package/dist/error/{ServerError.js → ServerError.mjs}

@@ -1,6 +1,6 @@
-/*! @azure/msal-common v14.0.0 2023-08-08 */
+/*! @azure/msal-common v14.0.2 2023-08-18 */
 'use strict';
-import { AuthError } from './AuthError.js';
+import { AuthError } from './AuthError.mjs';
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -18,4 +18,4 @@ class ServerError extends AuthError {
 }
 
 export { ServerError };
-//# sourceMappingURL=ServerError.js.map
+//# sourceMappingURL=ServerError.mjs.map

package/dist/error/ServerError.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"ServerError.mjs","sources":["../../src/error/ServerError.ts"],"sourcesContent":[null],"names":[],"mappings":";;;;AAAA;;;AAGG;AAIH;;AAEG;AACG,MAAO,WAAY,SAAQ,SAAS,CAAA;AACtC,IAAA,WAAA,CAAY,SAAkB,EAAE,YAAqB,EAAE,QAAiB,EAAA;AACpE,QAAA,KAAK,CAAC,SAAS,EAAE,YAAY,EAAE,QAAQ,CAAC,CAAC;AACzC,QAAA,IAAI,CAAC,IAAI,GAAG,aAAa,CAAC;QAE1B,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,WAAW,CAAC,SAAS,CAAC,CAAC;KACtD;AACJ;;;;"}

package/dist/{index.cjs.js → index.cjs}

@@ -1,4 +1,4 @@
-/*! @azure/msal-common v14.0.0 2023-08-08 */
+/*! @azure/msal-common v14.0.2 2023-08-18 */
 'use strict';
 'use strict';
 
@@ -1302,7 +1302,7 @@ class Logger {
 
 /* eslint-disable header/header */
 const name = "@azure/msal-common";
-const version = "14.0.0";
+const version = "14.0.2";
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1890,6 +1890,7 @@ const ProtocolMode = {
  *      idTokenClaims: Object containing claims parsed from ID token
  *      nativeAccountId: Account identifier on the native device
  * }
+ * @internal
  */
 class AccountEntity {
     /**
@@ -2141,6 +2142,7 @@ class AuthToken {
  */
 /**
  * Interface class which implement cache storage functions used by MSAL to perform validity checks, and store tokens.
+ * @internal
  */
 class CacheManager {
     constructor(clientId, cryptoImpl, logger) {
@@ -2627,7 +2629,11 @@ class CacheManager {
             return null;
         }
         else if (numIdTokens > 1) {
-            throw ClientAuthError.createMultipleMatchingTokensInCacheError();
+            this.commonLogger.info("CacheManager:getIdToken - Multiple id tokens found, clearing them");
+            idTokens.forEach((idToken) => {
+                this.removeIdToken(idToken.generateCredentialKey());
+            });
+            return null;
         }
         this.commonLogger.info("CacheManager:getIdToken - Returning id token");
         return idTokens[0];
@@ -2737,7 +2743,11 @@ class CacheManager {
             return null;
         }
         else if (numAccessTokens > 1) {
-            throw ClientAuthError.createMultipleMatchingTokensInCacheError();
+            this.commonLogger.info("CacheManager:getAccessToken - Multiple access tokens found, clearing them");
+            accessTokens.forEach((accessToken) => {
+                this.removeAccessToken(accessToken.generateCredentialKey());
+            });
+            return null;
         }
         this.commonLogger.info("CacheManager:getAccessToken - Returning access token");
         return accessTokens[0];
@@ -3049,6 +3059,7 @@ class CacheManager {
         return obj;
     }
 }
+/** @internal */
 class DefaultStorageClass extends CacheManager {
     setAccount() {
         const notImplErr = "Storage interface - setAccount() has not been implemented for the cacheStorage interface.";
@@ -3267,6 +3278,7 @@ class ServerError extends AuthError {
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
  */
+/** @internal */
 class ThrottlingUtils {
     /**
      * Prepares a RequestThumbprint to be stored as a key.
@@ -3362,6 +3374,7 @@ class ThrottlingUtils {
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
  */
+/** @internal */
 class NetworkManager {
     constructor(networkClient, cacheManager) {
         this.networkClient = networkClient;
@@ -3488,6 +3501,7 @@ class RequestValidator {
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
  */
+/** @internal */
 class RequestParameterBuilder {
     constructor() {
         this.parameters = new Map();
@@ -3871,6 +3885,7 @@ class RequestParameterBuilder {
  */
 /**
  * Base application class which will construct requests to send to and handle responses from the Microsoft STS using the authorization code flow.
+ * @internal
  */
 class BaseClient {
     constructor(configuration, performanceClient) {
@@ -4453,6 +4468,7 @@ class InteractionRequiredAuthError extends AuthError {
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
  */
+/** @internal */
 class CacheRecord {
     constructor(accountEntity, idTokenEntity, accessTokenEntity, refreshTokenEntity, appMetadataEntity) {
         this.account = accountEntity || null;
@@ -5052,6 +5068,7 @@ const KeyLocation = {
     SW: "sw",
     UHW: "uhw",
 };
+/** @internal */
 class PopTokenGenerator {
     constructor(cryptoUtils, performanceClient) {
         this.cryptoUtils = cryptoUtils;
@@ -5226,6 +5243,7 @@ class AppMetadataEntity {
  */
 /**
  * Class that handles response parsing.
+ * @internal
  */
 class ResponseHandler {
     constructor(clientId, cacheStorage, cryptoObj, logger, serializableCache, persistencePlugin, performanceClient) {
@@ -5518,6 +5536,7 @@ class ResponseHandler {
  */
 /**
  * Oauth2.0 Authorization Code client
+ * @internal
  */
 class AuthorizationCodeClient extends BaseClient {
     constructor(configuration, performanceClient) {
@@ -5671,7 +5690,8 @@ class AuthorizationCodeClient extends BaseClient {
     async createTokenRequestBody(request) {
         this.performanceClient?.addQueueMeasurement(PerformanceEvents.AuthClientCreateTokenRequestBody, request.correlationId);
         const parameterBuilder = new RequestParameterBuilder();
-        parameterBuilder.addClientId(this.config.authOptions.clientId);
+        parameterBuilder.addClientId(request.tokenBodyParameters?.[AADServerParamKeys.CLIENT_ID] ||
+            this.config.authOptions.clientId);
         /*
          * For hybrid spa flow, there will be a code but no verifier
          * In this scenario, don't include redirect uri as auth code will not be bound to redirect URI
@@ -5786,7 +5806,8 @@ class AuthorizationCodeClient extends BaseClient {
     async createAuthCodeUrlQueryString(request) {
         this.performanceClient?.addQueueMeasurement(PerformanceEvents.AuthClientCreateQueryString, request.correlationId);
         const parameterBuilder = new RequestParameterBuilder();
-        parameterBuilder.addClientId(this.config.authOptions.clientId);
+        parameterBuilder.addClientId(request.extraQueryParameters?.[AADServerParamKeys.CLIENT_ID] ||
+            this.config.authOptions.clientId);
         const requestScopes = [
             ...(request.scopes || []),
             ...(request.extraScopesToConsent || []),
@@ -5954,6 +5975,7 @@ class AuthorizationCodeClient extends BaseClient {
  */
 /**
  * OAuth2.0 refresh token client
+ * @internal
  */
 class RefreshTokenClient extends BaseClient {
     constructor(configuration, performanceClient) {
@@ -6192,6 +6214,7 @@ class RefreshTokenClient extends BaseClient {
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
  */
+/** @internal */
 class SilentFlowClient extends BaseClient {
     constructor(configuration, performanceClient) {
         super(configuration, performanceClient);
@@ -7189,6 +7212,7 @@ for (const key in InstanceDiscoveryMetadata) {
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
  */
+/** @internal */
 class AuthorityMetadataEntity {
     constructor() {
         this.expiresAt =
@@ -7397,6 +7421,7 @@ RegionDiscovery.IMDS_OPTIONS = {
 /**
  * The authority class validates the authority URIs used by the user, and retrieves the OpenID Configuration Data from the
  * endpoint. It will store the pertinent config data in this object for use during token calls.
+ * @internal
  */
 class Authority {
     constructor(authority, networkInterface, cacheManager, authorityOptions, logger, performanceClient, correlationId) {
@@ -7610,7 +7635,8 @@ class Authority {
     get defaultOpenIdConfigurationEndpoint() {
         const canonicalAuthorityHost = this.hostnameAndPort;
         if (this.authorityType === AuthorityType.Adfs ||
-            !this.isAliasOfKnownMicrosoftAuthority(canonicalAuthorityHost)) {
+            (this.protocolMode !== ProtocolMode.AAD &&
+                !this.isAliasOfKnownMicrosoftAuthority(canonicalAuthorityHost))) {
             return `${this.canonicalAuthority}.well-known/openid-configuration`;
         }
         return `${this.canonicalAuthority}v2.0/.well-known/openid-configuration`;
@@ -8156,6 +8182,7 @@ Authority.reservedTenantDomains = new Set([
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
  */
+/** @internal */
 class AuthorityFactory {
     /**
      * Create an authority object of the correct type based on the url
@@ -8311,6 +8338,7 @@ class JoseHeaderError extends AuthError {
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
  */
+/** @internal */
 class JoseHeader {
     constructor(options) {
         this.typ = options.typ;
@@ -8404,6 +8432,7 @@ class AuthenticationHeaderParser {
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
  */
+/** @internal */
 class ServerTelemetryManager {
     constructor(telemetryRequest, cacheManager) {
         this.cacheOutcome = CacheOutcome.NO_CACHE_HIT;
@@ -9145,4 +9174,4 @@ exports.UrlString = UrlString;
 exports.buildClientInfo = buildClientInfo;
 exports.buildClientInfoFromHomeAccountId = buildClientInfoFromHomeAccountId;
 exports.version = version;
-//# sourceMappingURL=index.cjs.js.map
+//# sourceMappingURL=index.cjs.map