@azure/msal-common 14.1.0-alpha.0 → 14.2.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (234) hide show
  1. package/dist/account/AccountInfo.d.ts +31 -32
  2. package/dist/account/AccountInfo.d.ts.map +1 -1
  3. package/dist/account/AuthToken.d.ts +17 -17
  4. package/dist/account/AuthToken.mjs +58 -58
  5. package/dist/account/CcsCredential.d.ts +9 -9
  6. package/dist/account/CcsCredential.mjs +8 -8
  7. package/dist/account/ClientCredentials.d.ts +14 -14
  8. package/dist/account/ClientInfo.d.ts +19 -19
  9. package/dist/account/ClientInfo.mjs +37 -37
  10. package/dist/account/TokenClaims.d.ts +65 -65
  11. package/dist/authority/Authority.d.ts +249 -235
  12. package/dist/authority/Authority.d.ts.map +1 -1
  13. package/dist/authority/Authority.mjs +791 -740
  14. package/dist/authority/Authority.mjs.map +1 -1
  15. package/dist/authority/AuthorityFactory.d.ts +31 -31
  16. package/dist/authority/AuthorityFactory.d.ts.map +1 -1
  17. package/dist/authority/AuthorityFactory.mjs +48 -48
  18. package/dist/authority/AuthorityMetadata.d.ts +646 -623
  19. package/dist/authority/AuthorityMetadata.d.ts.map +1 -1
  20. package/dist/authority/AuthorityMetadata.mjs +941 -885
  21. package/dist/authority/AuthorityMetadata.mjs.map +1 -1
  22. package/dist/authority/AuthorityOptions.d.ts +27 -21
  23. package/dist/authority/AuthorityOptions.d.ts.map +1 -1
  24. package/dist/authority/AuthorityOptions.mjs +18 -18
  25. package/dist/authority/AuthorityOptions.mjs.map +1 -1
  26. package/dist/authority/AuthorityType.d.ts +10 -10
  27. package/dist/authority/AuthorityType.mjs +13 -13
  28. package/dist/authority/AzureRegion.d.ts +1 -1
  29. package/dist/authority/AzureRegionConfiguration.d.ts +5 -5
  30. package/dist/authority/CloudDiscoveryMetadata.d.ts +5 -5
  31. package/dist/authority/CloudInstanceDiscoveryErrorResponse.d.ts +13 -13
  32. package/dist/authority/CloudInstanceDiscoveryErrorResponse.mjs +8 -8
  33. package/dist/authority/CloudInstanceDiscoveryResponse.d.ts +9 -9
  34. package/dist/authority/CloudInstanceDiscoveryResponse.mjs +8 -8
  35. package/dist/authority/ImdsOptions.d.ts +5 -5
  36. package/dist/authority/OIDCOptions.d.ts +8 -8
  37. package/dist/authority/OpenIdConfigResponse.d.ts +11 -11
  38. package/dist/authority/OpenIdConfigResponse.mjs +10 -10
  39. package/dist/authority/ProtocolMode.d.ts +8 -8
  40. package/dist/authority/ProtocolMode.mjs +11 -11
  41. package/dist/authority/RegionDiscovery.d.ts +32 -32
  42. package/dist/authority/RegionDiscovery.mjs +106 -106
  43. package/dist/authority/RegionDiscoveryMetadata.d.ts +6 -6
  44. package/dist/broker/nativeBroker/INativeBrokerPlugin.d.ts +15 -15
  45. package/dist/cache/CacheManager.d.ts +480 -446
  46. package/dist/cache/CacheManager.d.ts.map +1 -1
  47. package/dist/cache/CacheManager.mjs +1086 -998
  48. package/dist/cache/CacheManager.mjs.map +1 -1
  49. package/dist/cache/entities/AccessTokenEntity.d.ts +56 -56
  50. package/dist/cache/entities/AccessTokenEntity.mjs +109 -109
  51. package/dist/cache/entities/AccountEntity.d.ts +101 -101
  52. package/dist/cache/entities/AccountEntity.d.ts.map +1 -1
  53. package/dist/cache/entities/AccountEntity.mjs +218 -220
  54. package/dist/cache/entities/AccountEntity.mjs.map +1 -1
  55. package/dist/cache/entities/AppMetadataEntity.d.ts +39 -39
  56. package/dist/cache/entities/AppMetadataEntity.mjs +66 -66
  57. package/dist/cache/entities/AuthorityMetadataEntity.d.ts +48 -48
  58. package/dist/cache/entities/AuthorityMetadataEntity.mjs +78 -78
  59. package/dist/cache/entities/CacheRecord.d.ts +14 -14
  60. package/dist/cache/entities/CacheRecord.mjs +14 -14
  61. package/dist/cache/entities/CredentialEntity.d.ts +88 -88
  62. package/dist/cache/entities/CredentialEntity.mjs +136 -136
  63. package/dist/cache/entities/IdTokenEntity.d.ts +34 -34
  64. package/dist/cache/entities/IdTokenEntity.mjs +56 -56
  65. package/dist/cache/entities/RefreshTokenEntity.d.ts +36 -36
  66. package/dist/cache/entities/RefreshTokenEntity.mjs +59 -59
  67. package/dist/cache/entities/ServerTelemetryEntity.d.ts +12 -12
  68. package/dist/cache/entities/ServerTelemetryEntity.mjs +27 -27
  69. package/dist/cache/entities/ThrottlingEntity.d.ts +13 -13
  70. package/dist/cache/entities/ThrottlingEntity.mjs +23 -23
  71. package/dist/cache/interface/ICacheManager.d.ts +166 -166
  72. package/dist/cache/interface/ICachePlugin.d.ts +5 -5
  73. package/dist/cache/interface/ISerializableTokenCache.d.ts +4 -4
  74. package/dist/cache/persistence/TokenCacheContext.d.ts +23 -23
  75. package/dist/cache/persistence/TokenCacheContext.mjs +25 -25
  76. package/dist/cache/utils/CacheTypes.d.ts +67 -69
  77. package/dist/cache/utils/CacheTypes.d.ts.map +1 -1
  78. package/dist/client/AuthorizationCodeClient.d.ts +73 -73
  79. package/dist/client/AuthorizationCodeClient.d.ts.map +1 -1
  80. package/dist/client/AuthorizationCodeClient.mjs +408 -407
  81. package/dist/client/AuthorizationCodeClient.mjs.map +1 -1
  82. package/dist/client/BaseClient.d.ts +51 -51
  83. package/dist/client/BaseClient.d.ts.map +1 -1
  84. package/dist/client/BaseClient.mjs +100 -99
  85. package/dist/client/BaseClient.mjs.map +1 -1
  86. package/dist/client/RefreshTokenClient.d.ts +35 -35
  87. package/dist/client/RefreshTokenClient.d.ts.map +1 -1
  88. package/dist/client/RefreshTokenClient.mjs +188 -180
  89. package/dist/client/RefreshTokenClient.mjs.map +1 -1
  90. package/dist/client/SilentFlowClient.d.ts +27 -26
  91. package/dist/client/SilentFlowClient.d.ts.map +1 -1
  92. package/dist/client/SilentFlowClient.mjs +118 -125
  93. package/dist/client/SilentFlowClient.mjs.map +1 -1
  94. package/dist/config/AppTokenProvider.d.ts +38 -38
  95. package/dist/config/ClientConfiguration.d.ts +150 -150
  96. package/dist/config/ClientConfiguration.mjs +97 -97
  97. package/dist/crypto/ICrypto.d.ts +58 -62
  98. package/dist/crypto/ICrypto.d.ts.map +1 -1
  99. package/dist/crypto/ICrypto.mjs +30 -33
  100. package/dist/crypto/ICrypto.mjs.map +1 -1
  101. package/dist/crypto/IGuidGenerator.d.ts +4 -4
  102. package/dist/crypto/JoseHeader.d.ts +22 -22
  103. package/dist/crypto/JoseHeader.mjs +37 -37
  104. package/dist/crypto/PopTokenGenerator.d.ts +60 -60
  105. package/dist/crypto/PopTokenGenerator.mjs +82 -82
  106. package/dist/crypto/SignedHttpRequest.d.ts +11 -11
  107. package/dist/error/AuthError.d.ts +44 -44
  108. package/dist/error/AuthError.mjs +46 -46
  109. package/dist/error/AuthErrorCodes.d.ts +5 -5
  110. package/dist/error/AuthErrorCodes.mjs +9 -9
  111. package/dist/error/ClientAuthError.d.ts +237 -232
  112. package/dist/error/ClientAuthError.d.ts.map +1 -1
  113. package/dist/error/ClientAuthError.mjs +250 -245
  114. package/dist/error/ClientAuthError.mjs.map +1 -1
  115. package/dist/error/ClientAuthErrorCodes.d.ts +44 -43
  116. package/dist/error/ClientAuthErrorCodes.d.ts.map +1 -1
  117. package/dist/error/ClientAuthErrorCodes.mjs +49 -48
  118. package/dist/error/ClientAuthErrorCodes.mjs.map +1 -1
  119. package/dist/error/ClientConfigurationError.d.ts +128 -128
  120. package/dist/error/ClientConfigurationError.mjs +135 -135
  121. package/dist/error/ClientConfigurationErrorCodes.d.ts +22 -22
  122. package/dist/error/ClientConfigurationErrorCodes.mjs +26 -26
  123. package/dist/error/InteractionRequiredAuthError.d.ts +57 -57
  124. package/dist/error/InteractionRequiredAuthError.mjs +76 -76
  125. package/dist/error/InteractionRequiredAuthErrorCodes.d.ts +5 -5
  126. package/dist/error/InteractionRequiredAuthErrorCodes.mjs +11 -11
  127. package/dist/error/JoseHeaderError.d.ts +15 -15
  128. package/dist/error/JoseHeaderError.mjs +22 -22
  129. package/dist/error/JoseHeaderErrorCodes.d.ts +2 -2
  130. package/dist/error/JoseHeaderErrorCodes.mjs +6 -6
  131. package/dist/error/ServerError.d.ts +7 -7
  132. package/dist/error/ServerError.mjs +14 -14
  133. package/dist/index.cjs +8830 -8612
  134. package/dist/index.cjs.map +1 -1
  135. package/dist/index.d.ts +96 -96
  136. package/dist/index.d.ts.map +1 -1
  137. package/dist/index.mjs +2 -2
  138. package/dist/logger/Logger.d.ts +95 -95
  139. package/dist/logger/Logger.mjs +188 -188
  140. package/dist/network/INetworkModule.d.ts +29 -29
  141. package/dist/network/INetworkModule.mjs +12 -12
  142. package/dist/network/NetworkManager.d.ts +33 -33
  143. package/dist/network/NetworkManager.mjs +34 -34
  144. package/dist/network/RequestThumbprint.d.ts +16 -16
  145. package/dist/network/ThrottlingUtils.d.ts +42 -42
  146. package/dist/network/ThrottlingUtils.mjs +95 -95
  147. package/dist/packageMetadata.d.ts +2 -2
  148. package/dist/packageMetadata.mjs +4 -4
  149. package/dist/request/AuthenticationHeaderParser.d.ts +19 -19
  150. package/dist/request/AuthenticationHeaderParser.mjs +55 -55
  151. package/dist/request/BaseAuthRequest.d.ts +40 -40
  152. package/dist/request/CommonAuthorizationCodeRequest.d.ts +27 -27
  153. package/dist/request/CommonAuthorizationUrlRequest.d.ts +50 -50
  154. package/dist/request/CommonClientCredentialRequest.d.ts +17 -17
  155. package/dist/request/CommonDeviceCodeRequest.d.ts +21 -21
  156. package/dist/request/CommonEndSessionRequest.d.ts +21 -21
  157. package/dist/request/CommonOnBehalfOfRequest.d.ts +13 -13
  158. package/dist/request/CommonRefreshTokenRequest.d.ts +22 -19
  159. package/dist/request/CommonRefreshTokenRequest.d.ts.map +1 -1
  160. package/dist/request/CommonSilentFlowRequest.d.ts +20 -18
  161. package/dist/request/CommonSilentFlowRequest.d.ts.map +1 -1
  162. package/dist/request/CommonUsernamePasswordRequest.d.ts +17 -17
  163. package/dist/request/NativeRequest.d.ts +19 -19
  164. package/dist/request/NativeSignOutRequest.d.ts +5 -5
  165. package/dist/request/RequestParameterBuilder.d.ts +217 -217
  166. package/dist/request/RequestParameterBuilder.mjs +381 -381
  167. package/dist/request/RequestValidator.d.ts +33 -33
  168. package/dist/request/RequestValidator.mjs +81 -81
  169. package/dist/request/ScopeSet.d.ts +88 -88
  170. package/dist/request/ScopeSet.mjs +197 -197
  171. package/dist/request/StoreInCache.d.ts +8 -8
  172. package/dist/response/AuthenticationResult.d.ts +41 -41
  173. package/dist/response/AuthorizationCodePayload.d.ts +13 -13
  174. package/dist/response/DeviceCodeResponse.d.ts +25 -25
  175. package/dist/response/ExternalTokenResponse.d.ts +15 -15
  176. package/dist/response/IMDSBadResponse.d.ts +4 -4
  177. package/dist/response/ResponseHandler.d.ts +67 -67
  178. package/dist/response/ResponseHandler.d.ts.map +1 -1
  179. package/dist/response/ResponseHandler.mjs +315 -311
  180. package/dist/response/ResponseHandler.mjs.map +1 -1
  181. package/dist/response/ServerAuthorizationCodeResponse.d.ts +25 -25
  182. package/dist/response/ServerAuthorizationTokenResponse.d.ts +46 -46
  183. package/dist/telemetry/performance/IPerformanceClient.d.ts +51 -51
  184. package/dist/telemetry/performance/IPerformanceMeasurement.d.ts +5 -5
  185. package/dist/telemetry/performance/PerformanceClient.d.ts +191 -191
  186. package/dist/telemetry/performance/PerformanceClient.mjs +409 -409
  187. package/dist/telemetry/performance/PerformanceEvent.d.ts +457 -433
  188. package/dist/telemetry/performance/PerformanceEvent.d.ts.map +1 -1
  189. package/dist/telemetry/performance/PerformanceEvent.mjs +249 -234
  190. package/dist/telemetry/performance/PerformanceEvent.mjs.map +1 -1
  191. package/dist/telemetry/performance/StubPerformanceClient.d.ts +24 -24
  192. package/dist/telemetry/performance/StubPerformanceClient.mjs +76 -76
  193. package/dist/telemetry/server/ServerTelemetryManager.d.ts +66 -66
  194. package/dist/telemetry/server/ServerTelemetryManager.mjs +197 -197
  195. package/dist/telemetry/server/ServerTelemetryRequest.d.ts +8 -8
  196. package/dist/url/IUri.d.ts +12 -12
  197. package/dist/url/UrlString.d.ts +83 -83
  198. package/dist/url/UrlString.mjs +279 -279
  199. package/dist/utils/Constants.d.ts +366 -366
  200. package/dist/utils/Constants.mjs +376 -376
  201. package/dist/utils/FunctionWrappers.d.ts +27 -27
  202. package/dist/utils/FunctionWrappers.d.ts.map +1 -1
  203. package/dist/utils/FunctionWrappers.mjs +84 -85
  204. package/dist/utils/FunctionWrappers.mjs.map +1 -1
  205. package/dist/utils/MsalTypes.d.ts +6 -6
  206. package/dist/utils/ProtocolUtils.d.ts +42 -42
  207. package/dist/utils/ProtocolUtils.mjs +69 -69
  208. package/dist/utils/StringUtils.d.ts +40 -40
  209. package/dist/utils/StringUtils.mjs +95 -95
  210. package/dist/utils/TimeUtils.d.ts +27 -27
  211. package/dist/utils/TimeUtils.mjs +45 -45
  212. package/package.json +1 -1
  213. package/src/account/AccountInfo.ts +0 -1
  214. package/src/authority/Authority.ts +207 -127
  215. package/src/authority/AuthorityFactory.ts +4 -4
  216. package/src/authority/AuthorityMetadata.ts +87 -0
  217. package/src/authority/AuthorityOptions.ts +9 -0
  218. package/src/cache/CacheManager.ts +187 -46
  219. package/src/cache/entities/AccountEntity.ts +0 -3
  220. package/src/cache/utils/CacheTypes.ts +7 -6
  221. package/src/client/AuthorizationCodeClient.ts +12 -3
  222. package/src/client/BaseClient.ts +9 -6
  223. package/src/client/RefreshTokenClient.ts +36 -9
  224. package/src/client/SilentFlowClient.ts +49 -49
  225. package/src/crypto/ICrypto.ts +0 -7
  226. package/src/error/ClientAuthError.ts +8 -0
  227. package/src/error/ClientAuthErrorCodes.ts +1 -0
  228. package/src/index.ts +7 -1
  229. package/src/packageMetadata.ts +1 -1
  230. package/src/request/CommonRefreshTokenRequest.ts +3 -0
  231. package/src/request/CommonSilentFlowRequest.ts +2 -0
  232. package/src/response/ResponseHandler.ts +9 -3
  233. package/src/telemetry/performance/PerformanceEvent.ts +33 -2
  234. package/src/utils/FunctionWrappers.ts +0 -1
@@ -1,4 +1,4 @@
1
- /*! @azure/msal-common v14.1.0-alpha.0 2023-09-20 */
1
+ /*! @azure/msal-common v14.2.0 2023-10-20 */
2
2
  'use strict';
3
3
  import { Separators, CacheAccountType, Constants } from '../../utils/Constants.mjs';
4
4
  import { buildClientInfo } from '../../account/ClientInfo.mjs';
@@ -7,225 +7,223 @@ import { AuthorityType } from '../../authority/AuthorityType.mjs';
7
7
  import { ProtocolMode } from '../../authority/ProtocolMode.mjs';
8
8
  import { invalidCacheEnvironment } from '../../error/ClientAuthErrorCodes.mjs';
9
9
 
10
- /*
11
- * Copyright (c) Microsoft Corporation. All rights reserved.
12
- * Licensed under the MIT License.
13
- */
14
- /**
15
- * Type that defines required and optional parameters for an Account field (based on universal cache schema implemented by all MSALs).
16
- *
17
- * Key : Value Schema
18
- *
19
- * Key: <home_account_id>-<environment>-<realm*>
20
- *
21
- * Value Schema:
22
- * {
23
- * homeAccountId: home account identifier for the auth scheme,
24
- * environment: entity that issued the token, represented as a full host
25
- * realm: Full tenant or organizational identifier that the account belongs to
26
- * localAccountId: Original tenant-specific accountID, usually used for legacy cases
27
- * username: primary username that represents the user, usually corresponds to preferred_username in the v2 endpt
28
- * authorityType: Accounts authority type as a string
29
- * name: Full name for the account, including given name and family name,
30
- * lastModificationTime: last time this entity was modified in the cache
31
- * lastModificationApp:
32
- * idTokenClaims: Object containing claims parsed from ID token
33
- * nativeAccountId: Account identifier on the native device
34
- * }
35
- * @internal
36
- */
37
- class AccountEntity {
38
- /**
39
- * Generate Account Id key component as per the schema: <home_account_id>-<environment>
40
- */
41
- generateAccountId() {
42
- const accountId = [this.homeAccountId, this.environment];
43
- return accountId.join(Separators.CACHE_KEY_SEPARATOR).toLowerCase();
44
- }
45
- /**
46
- * Generate Account Cache Key as per the schema: <home_account_id>-<environment>-<realm*>
47
- */
48
- generateAccountKey() {
49
- return AccountEntity.generateAccountCacheKey({
50
- homeAccountId: this.homeAccountId,
51
- environment: this.environment,
52
- tenantId: this.realm,
53
- username: this.username,
54
- localAccountId: this.localAccountId,
55
- });
56
- }
57
- /**
58
- * Returns the AccountInfo interface for this account.
59
- */
60
- getAccountInfo() {
61
- return {
62
- homeAccountId: this.homeAccountId,
63
- environment: this.environment,
64
- tenantId: this.realm,
65
- username: this.username,
66
- localAccountId: this.localAccountId,
67
- name: this.name,
68
- idTokenClaims: this.idTokenClaims,
69
- nativeAccountId: this.nativeAccountId,
70
- authorityType: this.authorityType,
71
- };
72
- }
73
- /**
74
- * Generates account key from interface
75
- * @param accountInterface
76
- */
77
- static generateAccountCacheKey(accountInterface) {
78
- const accountKey = [
79
- accountInterface.homeAccountId,
80
- accountInterface.environment || Constants.EMPTY_STRING,
81
- accountInterface.tenantId || Constants.EMPTY_STRING,
82
- ];
83
- return accountKey.join(Separators.CACHE_KEY_SEPARATOR).toLowerCase();
84
- }
85
- /**
86
- * Build Account cache from IdToken, clientInfo and authority/policy. Associated with AAD.
87
- * @param accountDetails
88
- */
89
- static createAccount(accountDetails, authority) {
90
- const account = new AccountEntity();
91
- if (authority.authorityType === AuthorityType.Adfs) {
92
- account.authorityType = CacheAccountType.ADFS_ACCOUNT_TYPE;
93
- }
94
- else if (authority.protocolMode === ProtocolMode.AAD) {
95
- account.authorityType = CacheAccountType.MSSTS_ACCOUNT_TYPE;
96
- }
97
- else {
98
- account.authorityType = CacheAccountType.GENERIC_ACCOUNT_TYPE;
99
- }
100
- account.clientInfo = accountDetails.clientInfo;
101
- account.homeAccountId = accountDetails.homeAccountId;
102
- account.nativeAccountId = accountDetails.nativeAccountId;
103
- const env = accountDetails.environment ||
104
- (authority && authority.getPreferredCache());
105
- if (!env) {
106
- throw createClientAuthError(invalidCacheEnvironment);
107
- }
108
- account.environment = env;
109
- // non AAD scenarios can have empty realm
110
- account.realm =
111
- accountDetails.idTokenClaims.tid || Constants.EMPTY_STRING;
112
- account.idTokenClaims = accountDetails.idTokenClaims;
113
- // How do you account for MSA CID here?
114
- account.localAccountId =
115
- accountDetails.idTokenClaims.oid ||
116
- accountDetails.idTokenClaims.sub ||
117
- Constants.EMPTY_STRING;
118
- /*
119
- * In B2C scenarios the emails claim is used instead of preferred_username and it is an array.
120
- * In most cases it will contain a single email. This field should not be relied upon if a custom
121
- * policy is configured to return more than 1 email.
122
- */
123
- const preferredUsername = accountDetails.idTokenClaims.preferred_username ||
124
- accountDetails.idTokenClaims.upn;
125
- const email = accountDetails.idTokenClaims.emails
126
- ? accountDetails.idTokenClaims.emails[0]
127
- : null;
128
- account.username = preferredUsername || email || Constants.EMPTY_STRING;
129
- account.name = accountDetails.idTokenClaims.name;
130
- account.cloudGraphHostName = accountDetails.cloudGraphHostName;
131
- account.msGraphHost = accountDetails.msGraphHost;
132
- return account;
133
- }
134
- /**
135
- * Creates an AccountEntity object from AccountInfo
136
- * @param accountInfo
137
- * @param cloudGraphHostName
138
- * @param msGraphHost
139
- * @returns
140
- */
141
- static createFromAccountInfo(accountInfo, cloudGraphHostName, msGraphHost) {
142
- const account = new AccountEntity();
143
- account.authorityType =
144
- accountInfo.authorityType || CacheAccountType.GENERIC_ACCOUNT_TYPE;
145
- account.homeAccountId = accountInfo.homeAccountId;
146
- account.localAccountId = accountInfo.localAccountId;
147
- account.nativeAccountId = accountInfo.nativeAccountId;
148
- account.realm = accountInfo.tenantId;
149
- account.environment = accountInfo.environment;
150
- account.username = accountInfo.username;
151
- account.name = accountInfo.name;
152
- account.idTokenClaims = accountInfo.idTokenClaims;
153
- account.cloudGraphHostName = cloudGraphHostName;
154
- account.msGraphHost = msGraphHost;
155
- return account;
156
- }
157
- /**
158
- * Generate HomeAccountId from server response
159
- * @param serverClientInfo
160
- * @param authType
161
- */
162
- static generateHomeAccountId(serverClientInfo, authType, logger, cryptoObj, idTokenClaims) {
163
- const accountId = idTokenClaims?.sub
164
- ? idTokenClaims.sub
165
- : Constants.EMPTY_STRING;
166
- // since ADFS does not have tid and does not set client_info
167
- if (authType === AuthorityType.Adfs ||
168
- authType === AuthorityType.Dsts) {
169
- return accountId;
170
- }
171
- // for cases where there is clientInfo
172
- if (serverClientInfo) {
173
- try {
174
- const clientInfo = buildClientInfo(serverClientInfo, cryptoObj);
175
- if (clientInfo.uid && clientInfo.utid) {
176
- return `${clientInfo.uid}${Separators.CLIENT_INFO_SEPARATOR}${clientInfo.utid}`;
177
- }
178
- }
179
- catch (e) { }
180
- }
181
- // default to "sub" claim
182
- logger.verbose("No client info in response");
183
- return accountId;
184
- }
185
- /**
186
- * Validates an entity: checks for all expected params
187
- * @param entity
188
- */
189
- static isAccountEntity(entity) {
190
- if (!entity) {
191
- return false;
192
- }
193
- return (entity.hasOwnProperty("homeAccountId") &&
194
- entity.hasOwnProperty("environment") &&
195
- entity.hasOwnProperty("realm") &&
196
- entity.hasOwnProperty("localAccountId") &&
197
- entity.hasOwnProperty("username") &&
198
- entity.hasOwnProperty("authorityType"));
199
- }
200
- /**
201
- * Helper function to determine whether 2 accountInfo objects represent the same account
202
- * @param accountA
203
- * @param accountB
204
- * @param compareClaims - If set to true idTokenClaims will also be compared to determine account equality
205
- */
206
- static accountInfoIsEqual(accountA, accountB, compareClaims) {
207
- if (!accountA || !accountB) {
208
- return false;
209
- }
210
- let claimsMatch = true; // default to true so as to not fail comparison below if compareClaims: false
211
- if (compareClaims) {
212
- const accountAClaims = (accountA.idTokenClaims ||
213
- {});
214
- const accountBClaims = (accountB.idTokenClaims ||
215
- {});
216
- // issued at timestamp and nonce are expected to change each time a new id token is acquired
217
- claimsMatch =
218
- accountAClaims.iat === accountBClaims.iat &&
219
- accountAClaims.nonce === accountBClaims.nonce;
220
- }
221
- return (accountA.homeAccountId === accountB.homeAccountId &&
222
- accountA.localAccountId === accountB.localAccountId &&
223
- accountA.username === accountB.username &&
224
- accountA.tenantId === accountB.tenantId &&
225
- accountA.environment === accountB.environment &&
226
- accountA.nativeAccountId === accountB.nativeAccountId &&
227
- claimsMatch);
228
- }
10
+ /*
11
+ * Copyright (c) Microsoft Corporation. All rights reserved.
12
+ * Licensed under the MIT License.
13
+ */
14
+ /**
15
+ * Type that defines required and optional parameters for an Account field (based on universal cache schema implemented by all MSALs).
16
+ *
17
+ * Key : Value Schema
18
+ *
19
+ * Key: <home_account_id>-<environment>-<realm*>
20
+ *
21
+ * Value Schema:
22
+ * {
23
+ * homeAccountId: home account identifier for the auth scheme,
24
+ * environment: entity that issued the token, represented as a full host
25
+ * realm: Full tenant or organizational identifier that the account belongs to
26
+ * localAccountId: Original tenant-specific accountID, usually used for legacy cases
27
+ * username: primary username that represents the user, usually corresponds to preferred_username in the v2 endpt
28
+ * authorityType: Accounts authority type as a string
29
+ * name: Full name for the account, including given name and family name,
30
+ * lastModificationTime: last time this entity was modified in the cache
31
+ * lastModificationApp:
32
+ * idTokenClaims: Object containing claims parsed from ID token
33
+ * nativeAccountId: Account identifier on the native device
34
+ * }
35
+ * @internal
36
+ */
37
+ class AccountEntity {
38
+ /**
39
+ * Generate Account Id key component as per the schema: <home_account_id>-<environment>
40
+ */
41
+ generateAccountId() {
42
+ const accountId = [this.homeAccountId, this.environment];
43
+ return accountId.join(Separators.CACHE_KEY_SEPARATOR).toLowerCase();
44
+ }
45
+ /**
46
+ * Generate Account Cache Key as per the schema: <home_account_id>-<environment>-<realm*>
47
+ */
48
+ generateAccountKey() {
49
+ return AccountEntity.generateAccountCacheKey({
50
+ homeAccountId: this.homeAccountId,
51
+ environment: this.environment,
52
+ tenantId: this.realm,
53
+ username: this.username,
54
+ localAccountId: this.localAccountId,
55
+ });
56
+ }
57
+ /**
58
+ * Returns the AccountInfo interface for this account.
59
+ */
60
+ getAccountInfo() {
61
+ return {
62
+ homeAccountId: this.homeAccountId,
63
+ environment: this.environment,
64
+ tenantId: this.realm,
65
+ username: this.username,
66
+ localAccountId: this.localAccountId,
67
+ name: this.name,
68
+ idTokenClaims: this.idTokenClaims,
69
+ nativeAccountId: this.nativeAccountId,
70
+ authorityType: this.authorityType,
71
+ };
72
+ }
73
+ /**
74
+ * Generates account key from interface
75
+ * @param accountInterface
76
+ */
77
+ static generateAccountCacheKey(accountInterface) {
78
+ const accountKey = [
79
+ accountInterface.homeAccountId,
80
+ accountInterface.environment || Constants.EMPTY_STRING,
81
+ accountInterface.tenantId || Constants.EMPTY_STRING,
82
+ ];
83
+ return accountKey.join(Separators.CACHE_KEY_SEPARATOR).toLowerCase();
84
+ }
85
+ /**
86
+ * Build Account cache from IdToken, clientInfo and authority/policy. Associated with AAD.
87
+ * @param accountDetails
88
+ */
89
+ static createAccount(accountDetails, authority) {
90
+ const account = new AccountEntity();
91
+ if (authority.authorityType === AuthorityType.Adfs) {
92
+ account.authorityType = CacheAccountType.ADFS_ACCOUNT_TYPE;
93
+ }
94
+ else if (authority.protocolMode === ProtocolMode.AAD) {
95
+ account.authorityType = CacheAccountType.MSSTS_ACCOUNT_TYPE;
96
+ }
97
+ else {
98
+ account.authorityType = CacheAccountType.GENERIC_ACCOUNT_TYPE;
99
+ }
100
+ account.clientInfo = accountDetails.clientInfo;
101
+ account.homeAccountId = accountDetails.homeAccountId;
102
+ account.nativeAccountId = accountDetails.nativeAccountId;
103
+ const env = accountDetails.environment ||
104
+ (authority && authority.getPreferredCache());
105
+ if (!env) {
106
+ throw createClientAuthError(invalidCacheEnvironment);
107
+ }
108
+ account.environment = env;
109
+ // non AAD scenarios can have empty realm
110
+ account.realm =
111
+ accountDetails.idTokenClaims.tid || Constants.EMPTY_STRING;
112
+ // How do you account for MSA CID here?
113
+ account.localAccountId =
114
+ accountDetails.idTokenClaims.oid ||
115
+ accountDetails.idTokenClaims.sub ||
116
+ Constants.EMPTY_STRING;
117
+ /*
118
+ * In B2C scenarios the emails claim is used instead of preferred_username and it is an array.
119
+ * In most cases it will contain a single email. This field should not be relied upon if a custom
120
+ * policy is configured to return more than 1 email.
121
+ */
122
+ const preferredUsername = accountDetails.idTokenClaims.preferred_username ||
123
+ accountDetails.idTokenClaims.upn;
124
+ const email = accountDetails.idTokenClaims.emails
125
+ ? accountDetails.idTokenClaims.emails[0]
126
+ : null;
127
+ account.username = preferredUsername || email || Constants.EMPTY_STRING;
128
+ account.name = accountDetails.idTokenClaims.name;
129
+ account.cloudGraphHostName = accountDetails.cloudGraphHostName;
130
+ account.msGraphHost = accountDetails.msGraphHost;
131
+ return account;
132
+ }
133
+ /**
134
+ * Creates an AccountEntity object from AccountInfo
135
+ * @param accountInfo
136
+ * @param cloudGraphHostName
137
+ * @param msGraphHost
138
+ * @returns
139
+ */
140
+ static createFromAccountInfo(accountInfo, cloudGraphHostName, msGraphHost) {
141
+ const account = new AccountEntity();
142
+ account.authorityType =
143
+ accountInfo.authorityType || CacheAccountType.GENERIC_ACCOUNT_TYPE;
144
+ account.homeAccountId = accountInfo.homeAccountId;
145
+ account.localAccountId = accountInfo.localAccountId;
146
+ account.nativeAccountId = accountInfo.nativeAccountId;
147
+ account.realm = accountInfo.tenantId;
148
+ account.environment = accountInfo.environment;
149
+ account.username = accountInfo.username;
150
+ account.name = accountInfo.name;
151
+ account.cloudGraphHostName = cloudGraphHostName;
152
+ account.msGraphHost = msGraphHost;
153
+ return account;
154
+ }
155
+ /**
156
+ * Generate HomeAccountId from server response
157
+ * @param serverClientInfo
158
+ * @param authType
159
+ */
160
+ static generateHomeAccountId(serverClientInfo, authType, logger, cryptoObj, idTokenClaims) {
161
+ const accountId = idTokenClaims?.sub
162
+ ? idTokenClaims.sub
163
+ : Constants.EMPTY_STRING;
164
+ // since ADFS does not have tid and does not set client_info
165
+ if (authType === AuthorityType.Adfs ||
166
+ authType === AuthorityType.Dsts) {
167
+ return accountId;
168
+ }
169
+ // for cases where there is clientInfo
170
+ if (serverClientInfo) {
171
+ try {
172
+ const clientInfo = buildClientInfo(serverClientInfo, cryptoObj);
173
+ if (clientInfo.uid && clientInfo.utid) {
174
+ return `${clientInfo.uid}${Separators.CLIENT_INFO_SEPARATOR}${clientInfo.utid}`;
175
+ }
176
+ }
177
+ catch (e) { }
178
+ }
179
+ // default to "sub" claim
180
+ logger.verbose("No client info in response");
181
+ return accountId;
182
+ }
183
+ /**
184
+ * Validates an entity: checks for all expected params
185
+ * @param entity
186
+ */
187
+ static isAccountEntity(entity) {
188
+ if (!entity) {
189
+ return false;
190
+ }
191
+ return (entity.hasOwnProperty("homeAccountId") &&
192
+ entity.hasOwnProperty("environment") &&
193
+ entity.hasOwnProperty("realm") &&
194
+ entity.hasOwnProperty("localAccountId") &&
195
+ entity.hasOwnProperty("username") &&
196
+ entity.hasOwnProperty("authorityType"));
197
+ }
198
+ /**
199
+ * Helper function to determine whether 2 accountInfo objects represent the same account
200
+ * @param accountA
201
+ * @param accountB
202
+ * @param compareClaims - If set to true idTokenClaims will also be compared to determine account equality
203
+ */
204
+ static accountInfoIsEqual(accountA, accountB, compareClaims) {
205
+ if (!accountA || !accountB) {
206
+ return false;
207
+ }
208
+ let claimsMatch = true; // default to true so as to not fail comparison below if compareClaims: false
209
+ if (compareClaims) {
210
+ const accountAClaims = (accountA.idTokenClaims ||
211
+ {});
212
+ const accountBClaims = (accountB.idTokenClaims ||
213
+ {});
214
+ // issued at timestamp and nonce are expected to change each time a new id token is acquired
215
+ claimsMatch =
216
+ accountAClaims.iat === accountBClaims.iat &&
217
+ accountAClaims.nonce === accountBClaims.nonce;
218
+ }
219
+ return (accountA.homeAccountId === accountB.homeAccountId &&
220
+ accountA.localAccountId === accountB.localAccountId &&
221
+ accountA.username === accountB.username &&
222
+ accountA.tenantId === accountB.tenantId &&
223
+ accountA.environment === accountB.environment &&
224
+ accountA.nativeAccountId === accountB.nativeAccountId &&
225
+ claimsMatch);
226
+ }
229
227
  }
230
228
 
231
229
  export { AccountEntity };
@@ -1 +1 @@
1
- {"version":3,"file":"AccountEntity.mjs","sources":["../../../src/cache/entities/AccountEntity.ts"],"sourcesContent":[null],"names":[],"mappings":";;;;;;;;;AAMA;AACA;AAEA;AAKA;;;;;;;;;;;;;;;;;;;;AA2BG;AACH;;;AAGS,mBAAS,CAAA;;;;IAId,iBAAa,GAAO;QAChB,MAAG,SAAO,GAAA,CAAA,IAAA,CAAA,aAAA,EAAA,IAAA,CAAA,WAAA,CAAA,CAAA;QACM,OAAA,SAAA,CAAC,IAAE,CAAA,UAAO,CAAA,mBAAA,CAAA,CAAA,WAAA,EAAA,CAAA;KACX;;;;IAInB,kBAAkB,GAAA;AAElB,QAAA,OAAA,aAAA,CAAA,uBAAA,CAAA;;AAEG,YAAA,WAAA,EAAA,IAAA,CAAA,WAAA;AACH,YAAA,QAAA,MAA2B,CAAA,KAAA;AAK3B,YAAA,QAAA,EAAA,IAAA,CAAA,QAAA;;AAEG,SAAA,CAAA,CAAA;AACH,KAAA;AAUA;;AAEG;AACH,IAAA,cAAc;AAcd,QAAA,OAAA;;;AAGG,YAAA,QAAA,EAAA,IAAA,CAAA,KAAA;AACH,YAA8B,QAAA,EAAA,IAAA,CAAA,QAAC;AAU/B,YAAA,cAAA,EAAA,IAAA,CAAA,cAAA;;;AAGG,YAAA,eAAA,EAAA,IAAA,CAAA,eAAA;AACH,YAAO,aACH,EAAA,IAAA,CAAA,aAAgB;SACC,CAAA;;;;;;WAME,uBAAU,CAAA,gBAAA,EAAA;AAC5B,QACQ,MAAA,UAAW,GAAA;AA4DxB,YAAA,gBAAA,CAAA,aAAA;;;;;;AAMG;AACH;AA0BA;;;;AAIG,QAAA,IAAA,SAAA,CAAA,aAAA,KAAA,aAAA,CAAA,IAAA,EAAA;YACyB,OAAA,CAAA,aACxB,GAAgB,kCACN,CAAA;AAgCd,SAAA;;;AAGG,SAAA;AACH,aAAsB;AAetB,YAAA,OAAA,CAAA,aAAA,GAAA,gBAAA,CAAA,oBAAA,CAAA;;;;;AAKG,QAAA,MAAA,GAAA,GAAA,cAAA,CAAA,WAAA;mCAEC,CAAA,iBAAqB;AA+B5B,QAAA,IAAA,CAAA,GAAA,EAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;"}
1
+ {"version":3,"file":"AccountEntity.mjs","sources":["../../../src/cache/entities/AccountEntity.ts"],"sourcesContent":[null],"names":[],"mappings":";;;;;;;;;AAMA;AACA;AAEA;AAKA;;;;;;;;;;;;;;;;;;;;AA2BG;AACH;;;AAGS,mBAAS,CAAA;;;;IAId,iBAAa,GAAO;QAChB,MAAG,SAAO,GAAA,CAAA,IAAA,CAAA,aAAA,EAAA,IAAA,CAAA,WAAA,CAAA,CAAA;QACM,OAAA,SAAA,CAAC,IAAE,CAAA,UAAO,CAAA,mBAAA,CAAA,CAAA,WAAA,EAAA,CAAA;KACX;;;;IAInB,kBAAkB,GAAA;AAElB,QAAA,OAAA,aAAA,CAAA,uBAAA,CAAA;;AAEG,YAAA,WAAA,EAAA,IAAA,CAAA,WAAA;AACH,YAAA,QAAA,MAA2B,CAAA,KAAA;AAK3B,YAAA,QAAA,EAAA,IAAA,CAAA,QAAA;;AAEG,SAAA,CAAA,CAAA;AACH,KAAA;AAUA;;AAEG;AACH,IAAA,cAAc;AAcd,QAAA,OAAA;;;AAGG,YAAA,QAAA,EAAA,IAAA,CAAA,KAAA;AACH,YAA8B,QAAA,EAAA,IAAA,CAAA,QAAC;AAU/B,YAAA,cAAA,EAAA,IAAA,CAAA,cAAA;;;AAGG,YAAA,eAAA,EAAA,IAAA,CAAA,eAAA;AACH,YAAO,aACH,EAAA,IAAA,CAAA,aAAgB;SACC,CAAA;;;;;;WAME,uBAAU,CAAA,gBAAA,EAAA;AAC5B,QACQ,MAAA,UAAW,GAAA;AA0DxB,YAAA,gBAAA,CAAA,aAAA;;;;;;AAMG;AACH;AAyBA;;;;AAIG,QAAA,IAAA,SAAA,CAAA,aAAA,KAAA,aAAA,CAAA,IAAA,EAAA;YACyB,OAAA,CAAA,aACxB,GAAgB,kCACN,CAAA;AAgCd,SAAA;;;AAGG,SAAA;AACH,aAAsB;AAetB,YAAA,OAAA,CAAA,aAAA,GAAA,gBAAA,CAAA,oBAAA,CAAA;;;;;AAKG,QAAA,MAAA,GAAA,GAAA,cAAA,CAAA,WAAA;mCAEC,CAAA,iBAAqB;AA+B5B,QAAA,IAAA,CAAA,GAAA,EAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;"}
@@ -1,40 +1,40 @@
1
- /**
2
- * APP_METADATA Cache
3
- *
4
- * Key:Value Schema:
5
- *
6
- * Key: appmetadata-<environment>-<client_id>
7
- *
8
- * Value:
9
- * {
10
- * clientId: client ID of the application
11
- * environment: entity that issued the token, represented as a full host
12
- * familyId: Family ID identifier, '1' represents Microsoft Family
13
- * }
14
- */
15
- export declare class AppMetadataEntity {
16
- clientId: string;
17
- environment: string;
18
- familyId?: string;
19
- /**
20
- * Generate AppMetadata Cache Key as per the schema: appmetadata-<environment>-<client_id>
21
- */
22
- generateAppMetadataKey(): string;
23
- /**
24
- * Generate AppMetadata Cache Key
25
- */
26
- static generateAppMetadataCacheKey(environment: string, clientId: string): string;
27
- /**
28
- * Creates AppMetadataEntity
29
- * @param clientId
30
- * @param environment
31
- * @param familyId
32
- */
33
- static createAppMetadataEntity(clientId: string, environment: string, familyId?: string): AppMetadataEntity;
34
- /**
35
- * Validates an entity: checks for all expected params
36
- * @param entity
37
- */
38
- static isAppMetadataEntity(key: string, entity: object): boolean;
39
- }
1
+ /**
2
+ * APP_METADATA Cache
3
+ *
4
+ * Key:Value Schema:
5
+ *
6
+ * Key: appmetadata-<environment>-<client_id>
7
+ *
8
+ * Value:
9
+ * {
10
+ * clientId: client ID of the application
11
+ * environment: entity that issued the token, represented as a full host
12
+ * familyId: Family ID identifier, '1' represents Microsoft Family
13
+ * }
14
+ */
15
+ export declare class AppMetadataEntity {
16
+ clientId: string;
17
+ environment: string;
18
+ familyId?: string;
19
+ /**
20
+ * Generate AppMetadata Cache Key as per the schema: appmetadata-<environment>-<client_id>
21
+ */
22
+ generateAppMetadataKey(): string;
23
+ /**
24
+ * Generate AppMetadata Cache Key
25
+ */
26
+ static generateAppMetadataCacheKey(environment: string, clientId: string): string;
27
+ /**
28
+ * Creates AppMetadataEntity
29
+ * @param clientId
30
+ * @param environment
31
+ * @param familyId
32
+ */
33
+ static createAppMetadataEntity(clientId: string, environment: string, familyId?: string): AppMetadataEntity;
34
+ /**
35
+ * Validates an entity: checks for all expected params
36
+ * @param entity
37
+ */
38
+ static isAppMetadataEntity(key: string, entity: object): boolean;
39
+ }
40
40
  //# sourceMappingURL=AppMetadataEntity.d.ts.map