@azure/msal-common 14.0.3 → 14.1.0

package/dist/error/ClientAuthError.mjs

@@ -1,6 +1,9 @@
-/*! @azure/msal-common v14.0.3 2023-09-05 */
+/*! @azure/msal-common v14.1.0 2023-10-05 */
 'use strict';
 import { AuthError } from './AuthError.mjs';
+import { clientInfoDecodingError, clientInfoEmptyError, tokenParsingError, nullOrEmptyToken, endpointResolutionError, networkError, openIdConfigError, hashNotDeserialized, invalidState, stateMismatch, stateNotFound, nonceMismatch, authTimeNotFound, maxAgeTranspired, multipleMatchingTokens, multipleMatchingAccounts, multipleMatchingAppMetadata, requestCannotBeMade, cannotRemoveEmptyScope, cannotAppendScopeSet, emptyInputScopeSet, deviceCodePollingCancelled, deviceCodeExpired, deviceCodeUnknownError, noAccountInSilentRequest, invalidCacheRecord, invalidCacheEnvironment, noAccountFound, noCryptoObject, unexpectedCredentialType, invalidAssertion, invalidClientCredential, tokenRefreshRequired, userTimeoutReached, tokenClaimsCnfRequiredForSignedJwt, authorizationCodeMissingFromServerResponse, bindingKeyNotRemoved, endSessionEndpointNotSupported, keyIdMissing, noNetworkConnectivity, userCanceled, missingTenantIdError, methodNotImplemented } from './ClientAuthErrorCodes.mjs';
+import * as ClientAuthErrorCodes from './ClientAuthErrorCodes.mjs';
+export { ClientAuthErrorCodes };
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -9,518 +12,243 @@ import { AuthError } from './AuthError.mjs';
 /**
  * ClientAuthErrorMessage class containing string constants used by error codes and messages.
  */
+const ClientAuthErrorMessages = {
+    [clientInfoDecodingError]: "The client info could not be parsed/decoded correctly",
+    [clientInfoEmptyError]: "The client info was empty",
+    [tokenParsingError]: "Token cannot be parsed",
+    [nullOrEmptyToken]: "The token is null or empty",
+    [endpointResolutionError]: "Endpoints cannot be resolved",
+    [networkError]: "Network request failed",
+    [openIdConfigError]: "Could not retrieve endpoints. Check your authority and verify the .well-known/openid-configuration endpoint returns the required endpoints.",
+    [hashNotDeserialized]: "The hash parameters could not be deserialized",
+    [invalidState]: "State was not the expected format",
+    [stateMismatch]: "State mismatch error",
+    [stateNotFound]: "State not found",
+    [nonceMismatch]: "Nonce mismatch error",
+    [authTimeNotFound]: "Max Age was requested and the ID token is missing the auth_time variable." +
+        " auth_time is an optional claim and is not enabled by default - it must be enabled." +
+        " See https://aka.ms/msaljs/optional-claims for more information.",
+    [maxAgeTranspired]: "Max Age is set to 0, or too much time has elapsed since the last end-user authentication.",
+    [multipleMatchingTokens]: "The cache contains multiple tokens satisfying the requirements. " +
+        "Call AcquireToken again providing more requirements such as authority or account.",
+    [multipleMatchingAccounts]: "The cache contains multiple accounts satisfying the given parameters. Please pass more info to obtain the correct account",
+    [multipleMatchingAppMetadata]: "The cache contains multiple appMetadata satisfying the given parameters. Please pass more info to obtain the correct appMetadata",
+    [requestCannotBeMade]: "Token request cannot be made without authorization code or refresh token.",
+    [cannotRemoveEmptyScope]: "Cannot remove null or empty scope from ScopeSet",
+    [cannotAppendScopeSet]: "Cannot append ScopeSet",
+    [emptyInputScopeSet]: "Empty input ScopeSet cannot be processed",
+    [deviceCodePollingCancelled]: "Caller has cancelled token endpoint polling during device code flow by setting DeviceCodeRequest.cancel = true.",
+    [deviceCodeExpired]: "Device code is expired.",
+    [deviceCodeUnknownError]: "Device code stopped polling for unknown reasons.",
+    [noAccountInSilentRequest]: "Please pass an account object, silent flow is not supported without account information",
+    [invalidCacheRecord]: "Cache record object was null or undefined.",
+    [invalidCacheEnvironment]: "Invalid environment when attempting to create cache entry",
+    [noAccountFound]: "No account found in cache for given key.",
+    [noCryptoObject]: "No crypto object detected.",
+    [unexpectedCredentialType]: "Unexpected credential type.",
+    [invalidAssertion]: "Client assertion must meet requirements described in https://tools.ietf.org/html/rfc7515",
+    [invalidClientCredential]: "Client credential (secret, certificate, or assertion) must not be empty when creating a confidential client. An application should at most have one credential",
+    [tokenRefreshRequired]: "Cannot return token from cache because it must be refreshed. This may be due to one of the following reasons: forceRefresh parameter is set to true, claims have been requested, there is no cached access token or it is expired.",
+    [userTimeoutReached]: "User defined timeout for device code polling reached",
+    [tokenClaimsCnfRequiredForSignedJwt]: "Cannot generate a POP jwt if the token_claims are not populated",
+    [authorizationCodeMissingFromServerResponse]: "Server response does not contain an authorization code to proceed",
+    [bindingKeyNotRemoved]: "Could not remove the credential's binding key from storage.",
+    [endSessionEndpointNotSupported]: "The provided authority does not support logout",
+    [keyIdMissing]: "A keyId value is missing from the requested bound token's cache record and is required to match the token to it's stored binding key.",
+    [noNetworkConnectivity]: "No network connectivity. Check your internet connection.",
+    [userCanceled]: "User cancelled the flow.",
+    [missingTenantIdError]: "A tenant id - not common, organizations, or consumers - must be specified when using the client_credentials flow.",
+    [methodNotImplemented]: "This method has not been implemented",
+};
+/**
+ * String constants used by error codes and messages.
+ * @deprecated Use ClientAuthErrorCodes instead
+ */
 const ClientAuthErrorMessage = {
     clientInfoDecodingError: {
-        code: "client_info_decoding_error",
-        desc: "The client info could not be parsed/decoded correctly. Please review the trace to determine the root cause.",
+        code: clientInfoDecodingError,
+        desc: ClientAuthErrorMessages[clientInfoDecodingError],
     },
     clientInfoEmptyError: {
-        code: "client_info_empty_error",
-        desc: "The client info was empty. Please review the trace to determine the root cause.",
+        code: clientInfoEmptyError,
+        desc: ClientAuthErrorMessages[clientInfoEmptyError],
     },
     tokenParsingError: {
-        code: "token_parsing_error",
-        desc: "Token cannot be parsed. Please review stack trace to determine root cause.",
+        code: tokenParsingError,
+        desc: ClientAuthErrorMessages[tokenParsingError],
     },
     nullOrEmptyToken: {
-        code: "null_or_empty_token",
-        desc: "The token is null or empty. Please review the trace to determine the root cause.",
+        code: nullOrEmptyToken,
+        desc: ClientAuthErrorMessages[nullOrEmptyToken],
     },
     endpointResolutionError: {
-        code: "endpoints_resolution_error",
-        desc: "Error: could not resolve endpoints. Please check network and try again.",
+        code: endpointResolutionError,
+        desc: ClientAuthErrorMessages[endpointResolutionError],
     },
     networkError: {
-        code: "network_error",
-        desc: "Network request failed. Please check network trace to determine root cause.",
+        code: networkError,
+        desc: ClientAuthErrorMessages[networkError],
     },
     unableToGetOpenidConfigError: {
-        code: "openid_config_error",
-        desc: "Could not retrieve endpoints. Check your authority and verify the .well-known/openid-configuration endpoint returns the required endpoints.",
+        code: openIdConfigError,
+        desc: ClientAuthErrorMessages[openIdConfigError],
     },
     hashNotDeserialized: {
-        code: "hash_not_deserialized",
-        desc: "The hash parameters could not be deserialized. Please review the trace to determine the root cause.",
-    },
-    blankGuidGenerated: {
-        code: "blank_guid_generated",
-        desc: "The guid generated was blank. Please review the trace to determine the root cause.",
+        code: hashNotDeserialized,
+        desc: ClientAuthErrorMessages[hashNotDeserialized],
     },
     invalidStateError: {
-        code: "invalid_state",
-        desc: "State was not the expected format. Please check the logs to determine whether the request was sent using ProtocolUtils.setRequestState().",
+        code: invalidState,
+        desc: ClientAuthErrorMessages[invalidState],
     },
     stateMismatchError: {
-        code: "state_mismatch",
-        desc: "State mismatch error. Please check your network. Continued requests may cause cache overflow.",
+        code: stateMismatch,
+        desc: ClientAuthErrorMessages[stateMismatch],
     },
     stateNotFoundError: {
-        code: "state_not_found",
-        desc: "State not found",
+        code: stateNotFound,
+        desc: ClientAuthErrorMessages[stateNotFound],
     },
     nonceMismatchError: {
-        code: "nonce_mismatch",
-        desc: "Nonce mismatch error. This may be caused by a race condition in concurrent requests.",
-    },
-    nonceNotFoundError: {
-        code: "nonce_not_found",
-        desc: "nonce not found",
+        code: nonceMismatch,
+        desc: ClientAuthErrorMessages[nonceMismatch],
     },
     authTimeNotFoundError: {
-        code: "auth_time_not_found",
-        desc: "Max Age was requested and the ID token is missing the auth_time variable." +
-            " auth_time is an optional claim and is not enabled by default - it must be enabled." +
-            " See https://aka.ms/msaljs/optional-claims for more information.",
-    },
-    maxAgeTranspiredError: {
-        code: "max_age_transpired",
-        desc: "Max Age is set to 0, or too much time has elapsed since the last end-user authentication.",
+        code: authTimeNotFound,
+        desc: ClientAuthErrorMessages[authTimeNotFound],
     },
-    noTokensFoundError: {
-        code: "no_tokens_found",
-        desc: "No tokens were found for the given scopes, and no authorization code was passed to acquireToken. You must retrieve an authorization code before making a call to acquireToken().",
+    maxAgeTranspired: {
+        code: maxAgeTranspired,
+        desc: ClientAuthErrorMessages[maxAgeTranspired],
     },
     multipleMatchingTokens: {
-        code: "multiple_matching_tokens",
-        desc: "The cache contains multiple tokens satisfying the requirements. " +
-            "Call AcquireToken again providing more requirements such as authority or account.",
+        code: multipleMatchingTokens,
+        desc: ClientAuthErrorMessages[multipleMatchingTokens],
     },
     multipleMatchingAccounts: {
-        code: "multiple_matching_accounts",
-        desc: "The cache contains multiple accounts satisfying the given parameters. Please pass more info to obtain the correct account",
+        code: multipleMatchingAccounts,
+        desc: ClientAuthErrorMessages[multipleMatchingAccounts],
     },
     multipleMatchingAppMetadata: {
-        code: "multiple_matching_appMetadata",
-        desc: "The cache contains multiple appMetadata satisfying the given parameters. Please pass more info to obtain the correct appMetadata",
+        code: multipleMatchingAppMetadata,
+        desc: ClientAuthErrorMessages[multipleMatchingAppMetadata],
     },
     tokenRequestCannotBeMade: {
-        code: "request_cannot_be_made",
-        desc: "Token request cannot be made without authorization code or refresh token.",
-    },
-    appendEmptyScopeError: {
-        code: "cannot_append_empty_scope",
-        desc: "Cannot append null or empty scope to ScopeSet. Please check the stack trace for more info.",
+        code: requestCannotBeMade,
+        desc: ClientAuthErrorMessages[requestCannotBeMade],
     },
     removeEmptyScopeError: {
-        code: "cannot_remove_empty_scope",
-        desc: "Cannot remove null or empty scope from ScopeSet. Please check the stack trace for more info.",
+        code: cannotRemoveEmptyScope,
+        desc: ClientAuthErrorMessages[cannotRemoveEmptyScope],
     },
     appendScopeSetError: {
-        code: "cannot_append_scopeset",
-        desc: "Cannot append ScopeSet due to error.",
+        code: cannotAppendScopeSet,
+        desc: ClientAuthErrorMessages[cannotAppendScopeSet],
     },
     emptyInputScopeSetError: {
-        code: "empty_input_scopeset",
-        desc: "Empty input ScopeSet cannot be processed.",
+        code: emptyInputScopeSet,
+        desc: ClientAuthErrorMessages[emptyInputScopeSet],
     },
     DeviceCodePollingCancelled: {
-        code: "device_code_polling_cancelled",
-        desc: "Caller has cancelled token endpoint polling during device code flow by setting DeviceCodeRequest.cancel = true.",
+        code: deviceCodePollingCancelled,
+        desc: ClientAuthErrorMessages[deviceCodePollingCancelled],
     },
     DeviceCodeExpired: {
-        code: "device_code_expired",
-        desc: "Device code is expired.",
+        code: deviceCodeExpired,
+        desc: ClientAuthErrorMessages[deviceCodeExpired],
     },
     DeviceCodeUnknownError: {
-        code: "device_code_unknown_error",
-        desc: "Device code stopped polling for unknown reasons.",
+        code: deviceCodeUnknownError,
+        desc: ClientAuthErrorMessages[deviceCodeUnknownError],
     },
     NoAccountInSilentRequest: {
-        code: "no_account_in_silent_request",
-        desc: "Please pass an account object, silent flow is not supported without account information",
+        code: noAccountInSilentRequest,
+        desc: ClientAuthErrorMessages[noAccountInSilentRequest],
     },
     invalidCacheRecord: {
-        code: "invalid_cache_record",
-        desc: "Cache record object was null or undefined.",
+        code: invalidCacheRecord,
+        desc: ClientAuthErrorMessages[invalidCacheRecord],
     },
     invalidCacheEnvironment: {
-        code: "invalid_cache_environment",
-        desc: "Invalid environment when attempting to create cache entry",
+        code: invalidCacheEnvironment,
+        desc: ClientAuthErrorMessages[invalidCacheEnvironment],
     },
     noAccountFound: {
-        code: "no_account_found",
-        desc: "No account found in cache for given key.",
-    },
-    CachePluginError: {
-        code: "no cache plugin set on CacheManager",
-        desc: "ICachePlugin needs to be set before using readFromStorage or writeFromStorage",
+        code: noAccountFound,
+        desc: ClientAuthErrorMessages[noAccountFound],
     },
     noCryptoObj: {
-        code: "no_crypto_object",
-        desc: "No crypto object detected. This is required for the following operation: ",
-    },
-    invalidCacheType: {
-        code: "invalid_cache_type",
-        desc: "Invalid cache type",
-    },
-    unexpectedAccountType: {
-        code: "unexpected_account_type",
-        desc: "Unexpected account type.",
+        code: noCryptoObject,
+        desc: ClientAuthErrorMessages[noCryptoObject],
     },
     unexpectedCredentialType: {
-        code: "unexpected_credential_type",
-        desc: "Unexpected credential type.",
+        code: unexpectedCredentialType,
+        desc: ClientAuthErrorMessages[unexpectedCredentialType],
     },
     invalidAssertion: {
-        code: "invalid_assertion",
-        desc: "Client assertion must meet requirements described in https://tools.ietf.org/html/rfc7515",
+        code: invalidAssertion,
+        desc: ClientAuthErrorMessages[invalidAssertion],
     },
     invalidClientCredential: {
-        code: "invalid_client_credential",
-        desc: "Client credential (secret, certificate, or assertion) must not be empty when creating a confidential client. An application should at most have one credential",
+        code: invalidClientCredential,
+        desc: ClientAuthErrorMessages[invalidClientCredential],
     },
     tokenRefreshRequired: {
-        code: "token_refresh_required",
-        desc: "Cannot return token from cache because it must be refreshed. This may be due to one of the following reasons: forceRefresh parameter is set to true, claims have been requested, there is no cached access token or it is expired.",
+        code: tokenRefreshRequired,
+        desc: ClientAuthErrorMessages[tokenRefreshRequired],
     },
     userTimeoutReached: {
-        code: "user_timeout_reached",
-        desc: "User defined timeout for device code polling reached",
+        code: userTimeoutReached,
+        desc: ClientAuthErrorMessages[userTimeoutReached],
     },
     tokenClaimsRequired: {
-        code: "token_claims_cnf_required_for_signedjwt",
-        desc: "Cannot generate a POP jwt if the token_claims are not populated",
+        code: tokenClaimsCnfRequiredForSignedJwt,
+        desc: ClientAuthErrorMessages[tokenClaimsCnfRequiredForSignedJwt],
     },
     noAuthorizationCodeFromServer: {
-        code: "authorization_code_missing_from_server_response",
-        desc: "Server response does not contain an authorization code to proceed",
-    },
-    noAzureRegionDetected: {
-        code: "no_azure_region_detected",
-        desc: "No azure region was detected and no fallback was made available",
-    },
-    accessTokenEntityNullError: {
-        code: "access_token_entity_null",
-        desc: "Access token entity is null, please check logs and cache to ensure a valid access token is present.",
+        code: authorizationCodeMissingFromServerResponse,
+        desc: ClientAuthErrorMessages[authorizationCodeMissingFromServerResponse],
     },
     bindingKeyNotRemovedError: {
-        code: "binding_key_not_removed",
-        desc: "Could not remove the credential's binding key from storage.",
+        code: bindingKeyNotRemoved,
+        desc: ClientAuthErrorMessages[bindingKeyNotRemoved],
     },
     logoutNotSupported: {
-        code: "end_session_endpoint_not_supported",
-        desc: "Provided authority does not support logout.",
+        code: endSessionEndpointNotSupported,
+        desc: ClientAuthErrorMessages[endSessionEndpointNotSupported],
     },
     keyIdMissing: {
-        code: "key_id_missing",
-        desc: "A keyId value is missing from the requested bound token's cache record and is required to match the token to it's stored binding key.",
+        code: keyIdMissing,
+        desc: ClientAuthErrorMessages[keyIdMissing],
     },
     noNetworkConnectivity: {
-        code: "no_network_connectivity",
-        desc: "No network connectivity. Check your internet connection.",
+        code: noNetworkConnectivity,
+        desc: ClientAuthErrorMessages[noNetworkConnectivity],
     },
     userCanceledError: {
-        code: "user_canceled",
-        desc: "User canceled the flow.",
+        code: userCanceled,
+        desc: ClientAuthErrorMessages[userCanceled],
     },
     missingTenantIdError: {
-        code: "missing_tenant_id_error",
-        desc: "A tenant id - not common, organizations, or consumers - must be specified when using the client_credentials flow.",
+        code: missingTenantIdError,
+        desc: ClientAuthErrorMessages[missingTenantIdError],
     },
 };
 /**
  * Error thrown when there is an error in the client code running on the browser.
  */
 class ClientAuthError extends AuthError {
-    constructor(errorCode, errorMessage) {
-        super(errorCode, errorMessage);
+    constructor(errorCode, additionalMessage) {
+        super(errorCode, additionalMessage
+            ? `${ClientAuthErrorMessages[errorCode]}: ${additionalMessage}`
+            : ClientAuthErrorMessages[errorCode]);
         this.name = "ClientAuthError";
         Object.setPrototypeOf(this, ClientAuthError.prototype);
     }
-    /**
-     * Creates an error thrown when client info object doesn't decode correctly.
-     * @param caughtError
-     */
-    static createClientInfoDecodingError(caughtError) {
-        return new ClientAuthError(ClientAuthErrorMessage.clientInfoDecodingError.code, `${ClientAuthErrorMessage.clientInfoDecodingError.desc} Failed with error: ${caughtError}`);
-    }
-    /**
-     * Creates an error thrown if the client info is empty.
-     * @param rawClientInfo
-     */
-    static createClientInfoEmptyError() {
-        return new ClientAuthError(ClientAuthErrorMessage.clientInfoEmptyError.code, `${ClientAuthErrorMessage.clientInfoEmptyError.desc}`);
-    }
-    /**
-     * Creates an error thrown when the id token extraction errors out.
-     * @param err
-     */
-    static createTokenParsingError(caughtExtractionError) {
-        return new ClientAuthError(ClientAuthErrorMessage.tokenParsingError.code, `${ClientAuthErrorMessage.tokenParsingError.desc} Failed with error: ${caughtExtractionError}`);
-    }
-    /**
-     * Creates an error thrown when the id token string is null or empty.
-     * @param invalidRawTokenString
-     */
-    static createTokenNullOrEmptyError(invalidRawTokenString) {
-        return new ClientAuthError(ClientAuthErrorMessage.nullOrEmptyToken.code, `${ClientAuthErrorMessage.nullOrEmptyToken.desc} Raw Token Value: ${invalidRawTokenString}`);
-    }
-    /**
-     * Creates an error thrown when the endpoint discovery doesn't complete correctly.
-     */
-    static createEndpointDiscoveryIncompleteError(errDetail) {
-        return new ClientAuthError(ClientAuthErrorMessage.endpointResolutionError.code, `${ClientAuthErrorMessage.endpointResolutionError.desc} Detail: ${errDetail}`);
-    }
-    /**
-     * Creates an error thrown when the fetch client throws
-     */
-    static createNetworkError(endpoint, errDetail) {
-        return new ClientAuthError(ClientAuthErrorMessage.networkError.code, `${ClientAuthErrorMessage.networkError.desc} | Fetch client threw: ${errDetail} | Attempted to reach: ${endpoint.split("?")[0]}`);
-    }
-    /**
-     * Creates an error thrown when the openid-configuration endpoint cannot be reached or does not contain the required data
-     */
-    static createUnableToGetOpenidConfigError(errDetail) {
-        return new ClientAuthError(ClientAuthErrorMessage.unableToGetOpenidConfigError.code, `${ClientAuthErrorMessage.unableToGetOpenidConfigError.desc} Attempted to retrieve endpoints from: ${errDetail}`);
-    }
-    /**
-     * Creates an error thrown when the hash cannot be deserialized.
-     * @param hashParamObj
-     */
-    static createHashNotDeserializedError(hashParamObj) {
-        return new ClientAuthError(ClientAuthErrorMessage.hashNotDeserialized.code, `${ClientAuthErrorMessage.hashNotDeserialized.desc} Given Object: ${hashParamObj}`);
-    }
-    /**
-     * Creates an error thrown when the state cannot be parsed.
-     * @param invalidState
-     */
-    static createInvalidStateError(invalidState, errorString) {
-        return new ClientAuthError(ClientAuthErrorMessage.invalidStateError.code, `${ClientAuthErrorMessage.invalidStateError.desc} Invalid State: ${invalidState}, Root Err: ${errorString}`);
-    }
-    /**
-     * Creates an error thrown when two states do not match.
-     */
-    static createStateMismatchError() {
-        return new ClientAuthError(ClientAuthErrorMessage.stateMismatchError.code, ClientAuthErrorMessage.stateMismatchError.desc);
-    }
-    /**
-     * Creates an error thrown when the state is not present
-     * @param missingState
-     */
-    static createStateNotFoundError(missingState) {
-        return new ClientAuthError(ClientAuthErrorMessage.stateNotFoundError.code, `${ClientAuthErrorMessage.stateNotFoundError.desc}:  ${missingState}`);
-    }
-    /**
-     * Creates an error thrown when the nonce does not match.
-     */
-    static createNonceMismatchError() {
-        return new ClientAuthError(ClientAuthErrorMessage.nonceMismatchError.code, ClientAuthErrorMessage.nonceMismatchError.desc);
-    }
-    /**
-     * Creates an error thrown when max_age was provided in the request, but auth_time is not in the token claims
-     * @param missingNonce
-     */
-    static createAuthTimeNotFoundError() {
-        return new ClientAuthError(ClientAuthErrorMessage.authTimeNotFoundError.code, ClientAuthErrorMessage.authTimeNotFoundError.desc);
-    }
-    /**
-     * Creates an error thrown when too much time has elapsed since the last end-user authentication
-     */
-    static createMaxAgeTranspiredError() {
-        return new ClientAuthError(ClientAuthErrorMessage.maxAgeTranspiredError.code, ClientAuthErrorMessage.maxAgeTranspiredError.desc);
-    }
-    /**
-     * Creates an error thrown when the mnonce is not present
-     * @param missingNonce
-     */
-    static createNonceNotFoundError(missingNonce) {
-        return new ClientAuthError(ClientAuthErrorMessage.nonceNotFoundError.code, `${ClientAuthErrorMessage.nonceNotFoundError.desc}:  ${missingNonce}`);
-    }
-    /**
-     * Throws error when multiple tokens are in cache.
-     */
-    static createMultipleMatchingTokensInCacheError() {
-        return new ClientAuthError(ClientAuthErrorMessage.multipleMatchingTokens.code, `${ClientAuthErrorMessage.multipleMatchingTokens.desc}.`);
-    }
-    /**
-     * Throws error when multiple accounts are in cache for the given params
-     */
-    static createMultipleMatchingAccountsInCacheError() {
-        return new ClientAuthError(ClientAuthErrorMessage.multipleMatchingAccounts.code, ClientAuthErrorMessage.multipleMatchingAccounts.desc);
-    }
-    /**
-     * Throws error when multiple appMetada are in cache for the given clientId.
-     */
-    static createMultipleMatchingAppMetadataInCacheError() {
-        return new ClientAuthError(ClientAuthErrorMessage.multipleMatchingAppMetadata.code, ClientAuthErrorMessage.multipleMatchingAppMetadata.desc);
-    }
-    /**
-     * Throws error when no auth code or refresh token is given to ServerTokenRequestParameters.
-     */
-    static createTokenRequestCannotBeMadeError() {
-        return new ClientAuthError(ClientAuthErrorMessage.tokenRequestCannotBeMade.code, ClientAuthErrorMessage.tokenRequestCannotBeMade.desc);
-    }
-    /**
-     * Throws error when attempting to append a null, undefined or empty scope to a set
-     * @param givenScope
-     */
-    static createAppendEmptyScopeToSetError(givenScope) {
-        return new ClientAuthError(ClientAuthErrorMessage.appendEmptyScopeError.code, `${ClientAuthErrorMessage.appendEmptyScopeError.desc} Given Scope: ${givenScope}`);
-    }
-    /**
-     * Throws error when attempting to append a null, undefined or empty scope to a set
-     * @param givenScope
-     */
-    static createRemoveEmptyScopeFromSetError(givenScope) {
-        return new ClientAuthError(ClientAuthErrorMessage.removeEmptyScopeError.code, `${ClientAuthErrorMessage.removeEmptyScopeError.desc} Given Scope: ${givenScope}`);
-    }
-    /**
-     * Throws error when attempting to append null or empty ScopeSet.
-     * @param appendError
-     */
-    static createAppendScopeSetError(appendError) {
-        return new ClientAuthError(ClientAuthErrorMessage.appendScopeSetError.code, `${ClientAuthErrorMessage.appendScopeSetError.desc} Detail Error: ${appendError}`);
-    }
-    /**
-     * Throws error if ScopeSet is null or undefined.
-     * @param givenScopeSet
-     */
-    static createEmptyInputScopeSetError() {
-        return new ClientAuthError(ClientAuthErrorMessage.emptyInputScopeSetError.code, `${ClientAuthErrorMessage.emptyInputScopeSetError.desc}`);
-    }
-    /**
-     * Throws error if user sets CancellationToken.cancel = true during polling of token endpoint during device code flow
-     */
-    static createDeviceCodeCancelledError() {
-        return new ClientAuthError(ClientAuthErrorMessage.DeviceCodePollingCancelled.code, `${ClientAuthErrorMessage.DeviceCodePollingCancelled.desc}`);
-    }
-    /**
-     * Throws error if device code is expired
-     */
-    static createDeviceCodeExpiredError() {
-        return new ClientAuthError(ClientAuthErrorMessage.DeviceCodeExpired.code, `${ClientAuthErrorMessage.DeviceCodeExpired.desc}`);
-    }
-    /**
-     * Throws error if device code is expired
-     */
-    static createDeviceCodeUnknownError() {
-        return new ClientAuthError(ClientAuthErrorMessage.DeviceCodeUnknownError.code, `${ClientAuthErrorMessage.DeviceCodeUnknownError.desc}`);
-    }
-    /**
-     * Throws error when silent requests are made without an account object
-     */
-    static createNoAccountInSilentRequestError() {
-        return new ClientAuthError(ClientAuthErrorMessage.NoAccountInSilentRequest.code, `${ClientAuthErrorMessage.NoAccountInSilentRequest.desc}`);
-    }
-    /**
-     * Throws error when cache record is null or undefined.
-     */
-    static createNullOrUndefinedCacheRecord() {
-        return new ClientAuthError(ClientAuthErrorMessage.invalidCacheRecord.code, ClientAuthErrorMessage.invalidCacheRecord.desc);
-    }
-    /**
-     * Throws error when provided environment is not part of the CloudDiscoveryMetadata object
-     */
-    static createInvalidCacheEnvironmentError() {
-        return new ClientAuthError(ClientAuthErrorMessage.invalidCacheEnvironment.code, ClientAuthErrorMessage.invalidCacheEnvironment.desc);
-    }
-    /**
-     * Throws error when account is not found in cache.
-     */
-    static createNoAccountFoundError() {
-        return new ClientAuthError(ClientAuthErrorMessage.noAccountFound.code, ClientAuthErrorMessage.noAccountFound.desc);
-    }
-    /**
-     * Throws error if ICachePlugin not set on CacheManager.
-     */
-    static createCachePluginError() {
-        return new ClientAuthError(ClientAuthErrorMessage.CachePluginError.code, `${ClientAuthErrorMessage.CachePluginError.desc}`);
-    }
-    /**
-     * Throws error if crypto object not found.
-     * @param operationName
-     */
-    static createNoCryptoObjectError(operationName) {
-        return new ClientAuthError(ClientAuthErrorMessage.noCryptoObj.code, `${ClientAuthErrorMessage.noCryptoObj.desc}${operationName}`);
-    }
-    /**
-     * Throws error if cache type is invalid.
-     */
-    static createInvalidCacheTypeError() {
-        return new ClientAuthError(ClientAuthErrorMessage.invalidCacheType.code, `${ClientAuthErrorMessage.invalidCacheType.desc}`);
-    }
-    /**
-     * Throws error if unexpected account type.
-     */
-    static createUnexpectedAccountTypeError() {
-        return new ClientAuthError(ClientAuthErrorMessage.unexpectedAccountType.code, `${ClientAuthErrorMessage.unexpectedAccountType.desc}`);
-    }
-    /**
-     * Throws error if unexpected credential type.
-     */
-    static createUnexpectedCredentialTypeError() {
-        return new ClientAuthError(ClientAuthErrorMessage.unexpectedCredentialType.code, `${ClientAuthErrorMessage.unexpectedCredentialType.desc}`);
-    }
-    /**
-     * Throws error if client assertion is not valid.
-     */
-    static createInvalidAssertionError() {
-        return new ClientAuthError(ClientAuthErrorMessage.invalidAssertion.code, `${ClientAuthErrorMessage.invalidAssertion.desc}`);
-    }
-    /**
-     * Throws error if client assertion is not valid.
-     */
-    static createInvalidCredentialError() {
-        return new ClientAuthError(ClientAuthErrorMessage.invalidClientCredential.code, `${ClientAuthErrorMessage.invalidClientCredential.desc}`);
-    }
-    /**
-     * Throws error if token cannot be retrieved from cache due to refresh being required.
-     */
-    static createRefreshRequiredError() {
-        return new ClientAuthError(ClientAuthErrorMessage.tokenRefreshRequired.code, ClientAuthErrorMessage.tokenRefreshRequired.desc);
-    }
-    /**
-     * Throws error if the user defined timeout is reached.
-     */
-    static createUserTimeoutReachedError() {
-        return new ClientAuthError(ClientAuthErrorMessage.userTimeoutReached.code, ClientAuthErrorMessage.userTimeoutReached.desc);
-    }
-    /*
-     * Throws error if token claims are not populated for a signed jwt generation
-     */
-    static createTokenClaimsRequiredError() {
-        return new ClientAuthError(ClientAuthErrorMessage.tokenClaimsRequired.code, ClientAuthErrorMessage.tokenClaimsRequired.desc);
-    }
-    /**
-     * Throws error when the authorization code is missing from the server response
-     */
-    static createNoAuthCodeInServerResponseError() {
-        return new ClientAuthError(ClientAuthErrorMessage.noAuthorizationCodeFromServer.code, ClientAuthErrorMessage.noAuthorizationCodeFromServer.desc);
-    }
-    static createBindingKeyNotRemovedError() {
-        return new ClientAuthError(ClientAuthErrorMessage.bindingKeyNotRemovedError.code, ClientAuthErrorMessage.bindingKeyNotRemovedError.desc);
-    }
-    /**
-     * Thrown when logout is attempted for an authority that doesnt have an end_session_endpoint
-     */
-    static createLogoutNotSupportedError() {
-        return new ClientAuthError(ClientAuthErrorMessage.logoutNotSupported.code, ClientAuthErrorMessage.logoutNotSupported.desc);
-    }
-    /**
-     * Create an error when kid attribute is missing from a PoP token's cache record
-     */
-    static createKeyIdMissingError() {
-        return new ClientAuthError(ClientAuthErrorMessage.keyIdMissing.code, ClientAuthErrorMessage.keyIdMissing.desc);
-    }
-    /**
-     * Create an error when the client does not have network connectivity
-     */
-    static createNoNetworkConnectivityError() {
-        return new ClientAuthError(ClientAuthErrorMessage.noNetworkConnectivity.code, ClientAuthErrorMessage.noNetworkConnectivity.desc);
-    }
-    /**
-     * Create an error when the user cancels the flow
-     */
-    static createUserCanceledError() {
-        return new ClientAuthError(ClientAuthErrorMessage.userCanceledError.code, ClientAuthErrorMessage.userCanceledError.desc);
-    }
-    /**
-     * Creates an error for during acquireTokenByClientCredential when TenantId is set to "common" or "organizations"
-     */
-    static createMissingTenantIdError() {
-        return new AuthError(ClientAuthErrorMessage.missingTenantIdError.code, ClientAuthErrorMessage.missingTenantIdError.desc);
-    }
+}
+function createClientAuthError(errorCode, additionalMessage) {
+    return new ClientAuthError(errorCode, additionalMessage);
 }
 
-export { ClientAuthError, ClientAuthErrorMessage };
+export { ClientAuthError, ClientAuthErrorMessage, ClientAuthErrorMessages, createClientAuthError };
 //# sourceMappingURL=ClientAuthError.mjs.map