@azure/msal-common 14.14.2 → 14.15.0

package/lib/types/url/UrlString.d.ts

@@ -0,0 +1,49 @@
+import { IUri } from "./IUri.js";
+/**
+ * Url object class which can perform various transformations on url strings.
+ */
+export declare class UrlString {
+    private _urlString;
+    get urlString(): string;
+    constructor(url: string);
+    /**
+     * Ensure urls are lower case and end with a / character.
+     * @param url
+     */
+    static canonicalizeUri(url: string): string;
+    /**
+     * Throws if urlString passed is not a valid authority URI string.
+     */
+    validateAsUri(): void;
+    /**
+     * Given a url and a query string return the url with provided query string appended
+     * @param url
+     * @param queryString
+     */
+    static appendQueryString(url: string, queryString: string): string;
+    /**
+     * Returns a url with the hash removed
+     * @param url
+     */
+    static removeHashFromUrl(url: string): string;
+    /**
+     * Given a url like https://a:b/common/d?e=f#g, and a tenantId, returns https://a:b/tenantId/d
+     * @param href The url
+     * @param tenantId The tenant id to replace
+     */
+    replaceTenantPath(tenantId: string): UrlString;
+    /**
+     * Parses out the components from a url string.
+     * @returns An object with the various components. Please cache this value insted of calling this multiple times on the same url.
+     */
+    getUrlComponents(): IUri;
+    static getDomainFromUrl(url: string): string;
+    static getAbsoluteUrl(relativeUrl: string, baseUrl: string): string;
+    static constructAuthorityUriFromObject(urlObject: IUri): UrlString;
+    /**
+     * Check if the hash of the URL string contains known properties
+     * @deprecated This API will be removed in a future version
+     */
+    static hashContainsKnownProperties(response: string): boolean;
+}
+//# sourceMappingURL=UrlString.d.ts.map

package/lib/types/url/UrlString.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"UrlString.d.ts","sourceRoot":"","sources":["../../../src/url/UrlString.ts"],"names":[],"mappings":"AAUA,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAIjC;;GAEG;AACH,qBAAa,SAAS;IAElB,OAAO,CAAC,UAAU,CAAS;IAC3B,IAAW,SAAS,IAAI,MAAM,CAE7B;gBAEW,GAAG,EAAE,MAAM;IAcvB;;;OAGG;IACH,MAAM,CAAC,eAAe,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM;IAoB3C;;OAEG;IACH,aAAa,IAAI,IAAI;IA6BrB;;;;OAIG;IACH,MAAM,CAAC,iBAAiB,CAAC,GAAG,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,MAAM;IAUlE;;;OAGG;IACH,MAAM,CAAC,iBAAiB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM;IAI7C;;;;OAIG;IACH,iBAAiB,CAAC,QAAQ,EAAE,MAAM,GAAG,SAAS;IAc9C;;;OAGG;IACH,gBAAgB,IAAI,IAAI;IAsCxB,MAAM,CAAC,gBAAgB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM;IAc5C,MAAM,CAAC,cAAc,CAAC,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM;IAgBnE,MAAM,CAAC,+BAA+B,CAAC,SAAS,EAAE,IAAI,GAAG,SAAS;IAUlE;;;OAGG;IACH,MAAM,CAAC,2BAA2B,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO;CAGhE"}

package/lib/types/utils/ClientAssertionUtils.d.ts

@@ -0,0 +1,3 @@
+import { ClientAssertionCallback } from "../account/ClientCredentials.js";
+export declare function getClientAssertion(clientAssertion: string | ClientAssertionCallback, clientId: string, tokenEndpoint?: string): Promise<string>;
+//# sourceMappingURL=ClientAssertionUtils.d.ts.map

package/lib/types/utils/ClientAssertionUtils.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ClientAssertionUtils.d.ts","sourceRoot":"","sources":["../../../src/utils/ClientAssertionUtils.ts"],"names":[],"mappings":"AAKA,OAAO,EACH,uBAAuB,EAE1B,MAAM,iCAAiC,CAAC;AAEzC,wBAAsB,kBAAkB,CACpC,eAAe,EAAE,MAAM,GAAG,uBAAuB,EACjD,QAAQ,EAAE,MAAM,EAChB,aAAa,CAAC,EAAE,MAAM,GACvB,OAAO,CAAC,MAAM,CAAC,CAUjB"}

package/lib/types/utils/Constants.d.ts

@@ -0,0 +1,310 @@
+export declare const Constants: {
+    LIBRARY_NAME: string;
+    SKU: string;
+    CACHE_PREFIX: string;
+    DEFAULT_AUTHORITY: string;
+    DEFAULT_AUTHORITY_HOST: string;
+    DEFAULT_COMMON_TENANT: string;
+    ADFS: string;
+    DSTS: string;
+    AAD_INSTANCE_DISCOVERY_ENDPT: string;
+    CIAM_AUTH_URL: string;
+    AAD_TENANT_DOMAIN_SUFFIX: string;
+    RESOURCE_DELIM: string;
+    NO_ACCOUNT: string;
+    CLAIMS: string;
+    CONSUMER_UTID: string;
+    OPENID_SCOPE: string;
+    PROFILE_SCOPE: string;
+    OFFLINE_ACCESS_SCOPE: string;
+    EMAIL_SCOPE: string;
+    CODE_RESPONSE_TYPE: string;
+    CODE_GRANT_TYPE: string;
+    RT_GRANT_TYPE: string;
+    FRAGMENT_RESPONSE_MODE: string;
+    S256_CODE_CHALLENGE_METHOD: string;
+    URL_FORM_CONTENT_TYPE: string;
+    AUTHORIZATION_PENDING: string;
+    NOT_DEFINED: string;
+    EMPTY_STRING: string;
+    NOT_APPLICABLE: string;
+    NOT_AVAILABLE: string;
+    FORWARD_SLASH: string;
+    IMDS_ENDPOINT: string;
+    IMDS_VERSION: string;
+    IMDS_TIMEOUT: number;
+    AZURE_REGION_AUTO_DISCOVER_FLAG: string;
+    REGIONAL_AUTH_PUBLIC_CLOUD_SUFFIX: string;
+    KNOWN_PUBLIC_CLOUDS: string[];
+    TOKEN_RESPONSE_TYPE: string;
+    ID_TOKEN_RESPONSE_TYPE: string;
+    SHR_NONCE_VALIDITY: number;
+    INVALID_INSTANCE: string;
+};
+export declare const HttpStatus: {
+    readonly SUCCESS: 200;
+    readonly SUCCESS_RANGE_START: 200;
+    readonly SUCCESS_RANGE_END: 299;
+    readonly REDIRECT: 302;
+    readonly CLIENT_ERROR: 400;
+    readonly CLIENT_ERROR_RANGE_START: 400;
+    readonly BAD_REQUEST: 400;
+    readonly UNAUTHORIZED: 401;
+    readonly NOT_FOUND: 404;
+    readonly REQUEST_TIMEOUT: 408;
+    readonly TOO_MANY_REQUESTS: 429;
+    readonly CLIENT_ERROR_RANGE_END: 499;
+    readonly SERVER_ERROR: 500;
+    readonly SERVER_ERROR_RANGE_START: 500;
+    readonly SERVICE_UNAVAILABLE: 503;
+    readonly GATEWAY_TIMEOUT: 504;
+    readonly SERVER_ERROR_RANGE_END: 599;
+    readonly MULTI_SIDED_ERROR: 600;
+};
+export type HttpStatus = (typeof HttpStatus)[keyof typeof HttpStatus];
+export declare const OIDC_DEFAULT_SCOPES: string[];
+export declare const OIDC_SCOPES: string[];
+/**
+ * Request header names
+ */
+export declare const HeaderNames: {
+    readonly CONTENT_TYPE: "Content-Type";
+    readonly RETRY_AFTER: "Retry-After";
+    readonly CCS_HEADER: "X-AnchorMailbox";
+    readonly WWWAuthenticate: "WWW-Authenticate";
+    readonly AuthenticationInfo: "Authentication-Info";
+    readonly X_MS_REQUEST_ID: "x-ms-request-id";
+    readonly X_MS_HTTP_VERSION: "x-ms-httpver";
+};
+export type HeaderNames = (typeof HeaderNames)[keyof typeof HeaderNames];
+/**
+ * Persistent cache keys MSAL which stay while user is logged in.
+ */
+export declare const PersistentCacheKeys: {
+    readonly ID_TOKEN: "idtoken";
+    readonly CLIENT_INFO: "client.info";
+    readonly ADAL_ID_TOKEN: "adal.idtoken";
+    readonly ERROR: "error";
+    readonly ERROR_DESC: "error.description";
+    readonly ACTIVE_ACCOUNT: "active-account";
+    readonly ACTIVE_ACCOUNT_FILTERS: "active-account-filters";
+};
+export type PersistentCacheKeys = (typeof PersistentCacheKeys)[keyof typeof PersistentCacheKeys];
+/**
+ * String constants related to AAD Authority
+ */
+export declare const AADAuthorityConstants: {
+    readonly COMMON: "common";
+    readonly ORGANIZATIONS: "organizations";
+    readonly CONSUMERS: "consumers";
+};
+export type AADAuthorityConstants = (typeof AADAuthorityConstants)[keyof typeof AADAuthorityConstants];
+/**
+ * Claims request keys
+ */
+export declare const ClaimsRequestKeys: {
+    readonly ACCESS_TOKEN: "access_token";
+    readonly XMS_CC: "xms_cc";
+};
+export type ClaimsRequestKeys = (typeof ClaimsRequestKeys)[keyof typeof ClaimsRequestKeys];
+/**
+ * we considered making this "enum" in the request instead of string, however it looks like the allowed list of
+ * prompt values kept changing over past couple of years. There are some undocumented prompt values for some
+ * internal partners too, hence the choice of generic "string" type instead of the "enum"
+ */
+export declare const PromptValue: {
+    LOGIN: string;
+    SELECT_ACCOUNT: string;
+    CONSENT: string;
+    NONE: string;
+    CREATE: string;
+    NO_SESSION: string;
+};
+/**
+ * allowed values for codeVerifier
+ */
+export declare const CodeChallengeMethodValues: {
+    PLAIN: string;
+    S256: string;
+};
+/**
+ * allowed values for server response type
+ */
+export declare const ServerResponseType: {
+    readonly QUERY: "query";
+    readonly FRAGMENT: "fragment";
+};
+export type ServerResponseType = (typeof ServerResponseType)[keyof typeof ServerResponseType];
+/**
+ * allowed values for response_mode
+ */
+export declare const ResponseMode: {
+    readonly FORM_POST: "form_post";
+    readonly QUERY: "query";
+    readonly FRAGMENT: "fragment";
+};
+export type ResponseMode = (typeof ResponseMode)[keyof typeof ResponseMode];
+/**
+ * allowed grant_type
+ */
+export declare const GrantType: {
+    readonly IMPLICIT_GRANT: "implicit";
+    readonly AUTHORIZATION_CODE_GRANT: "authorization_code";
+    readonly CLIENT_CREDENTIALS_GRANT: "client_credentials";
+    readonly RESOURCE_OWNER_PASSWORD_GRANT: "password";
+    readonly REFRESH_TOKEN_GRANT: "refresh_token";
+    readonly DEVICE_CODE_GRANT: "device_code";
+    readonly JWT_BEARER: "urn:ietf:params:oauth:grant-type:jwt-bearer";
+};
+export type GrantType = (typeof GrantType)[keyof typeof GrantType];
+/**
+ * Account types in Cache
+ */
+export declare const CacheAccountType: {
+    readonly MSSTS_ACCOUNT_TYPE: "MSSTS";
+    readonly ADFS_ACCOUNT_TYPE: "ADFS";
+    readonly MSAV1_ACCOUNT_TYPE: "MSA";
+    readonly GENERIC_ACCOUNT_TYPE: "Generic";
+};
+export type CacheAccountType = (typeof CacheAccountType)[keyof typeof CacheAccountType];
+/**
+ * Separators used in cache
+ */
+export declare const Separators: {
+    readonly CACHE_KEY_SEPARATOR: "-";
+    readonly CLIENT_INFO_SEPARATOR: ".";
+};
+export type Separators = (typeof Separators)[keyof typeof Separators];
+/**
+ * Credential Type stored in the cache
+ */
+export declare const CredentialType: {
+    readonly ID_TOKEN: "IdToken";
+    readonly ACCESS_TOKEN: "AccessToken";
+    readonly ACCESS_TOKEN_WITH_AUTH_SCHEME: "AccessToken_With_AuthScheme";
+    readonly REFRESH_TOKEN: "RefreshToken";
+};
+export type CredentialType = (typeof CredentialType)[keyof typeof CredentialType];
+/**
+ * Combine all cache types
+ */
+export declare const CacheType: {
+    readonly ADFS: 1001;
+    readonly MSA: 1002;
+    readonly MSSTS: 1003;
+    readonly GENERIC: 1004;
+    readonly ACCESS_TOKEN: 2001;
+    readonly REFRESH_TOKEN: 2002;
+    readonly ID_TOKEN: 2003;
+    readonly APP_METADATA: 3001;
+    readonly UNDEFINED: 9999;
+};
+export type CacheType = (typeof CacheType)[keyof typeof CacheType];
+/**
+ * More Cache related constants
+ */
+export declare const APP_METADATA = "appmetadata";
+export declare const CLIENT_INFO = "client_info";
+export declare const THE_FAMILY_ID = "1";
+export declare const AUTHORITY_METADATA_CONSTANTS: {
+    CACHE_KEY: string;
+    REFRESH_TIME_SECONDS: number;
+};
+export declare const AuthorityMetadataSource: {
+    readonly CONFIG: "config";
+    readonly CACHE: "cache";
+    readonly NETWORK: "network";
+    readonly HARDCODED_VALUES: "hardcoded_values";
+};
+export type AuthorityMetadataSource = (typeof AuthorityMetadataSource)[keyof typeof AuthorityMetadataSource];
+export declare const SERVER_TELEM_CONSTANTS: {
+    SCHEMA_VERSION: number;
+    MAX_CUR_HEADER_BYTES: number;
+    MAX_LAST_HEADER_BYTES: number;
+    MAX_CACHED_ERRORS: number;
+    CACHE_KEY: string;
+    CATEGORY_SEPARATOR: string;
+    VALUE_SEPARATOR: string;
+    OVERFLOW_TRUE: string;
+    OVERFLOW_FALSE: string;
+    UNKNOWN_ERROR: string;
+};
+/**
+ * Type of the authentication request
+ */
+export declare const AuthenticationScheme: {
+    readonly BEARER: "Bearer";
+    readonly POP: "pop";
+    readonly SSH: "ssh-cert";
+};
+export type AuthenticationScheme = (typeof AuthenticationScheme)[keyof typeof AuthenticationScheme];
+/**
+ * Constants related to throttling
+ */
+export declare const ThrottlingConstants: {
+    DEFAULT_THROTTLE_TIME_SECONDS: number;
+    DEFAULT_MAX_THROTTLE_TIME_SECONDS: number;
+    THROTTLING_PREFIX: string;
+    X_MS_LIB_CAPABILITY_VALUE: string;
+};
+export declare const Errors: {
+    INVALID_GRANT_ERROR: string;
+    CLIENT_MISMATCH_ERROR: string;
+};
+/**
+ * Password grant parameters
+ */
+export declare const PasswordGrantConstants: {
+    readonly username: "username";
+    readonly password: "password";
+};
+export type PasswordGrantConstants = (typeof PasswordGrantConstants)[keyof typeof PasswordGrantConstants];
+/**
+ * Response codes
+ */
+export declare const ResponseCodes: {
+    readonly httpSuccess: 200;
+    readonly httpBadRequest: 400;
+};
+export type ResponseCodes = (typeof ResponseCodes)[keyof typeof ResponseCodes];
+/**
+ * Region Discovery Sources
+ */
+export declare const RegionDiscoverySources: {
+    readonly FAILED_AUTO_DETECTION: "1";
+    readonly INTERNAL_CACHE: "2";
+    readonly ENVIRONMENT_VARIABLE: "3";
+    readonly IMDS: "4";
+};
+export type RegionDiscoverySources = (typeof RegionDiscoverySources)[keyof typeof RegionDiscoverySources];
+/**
+ * Region Discovery Outcomes
+ */
+export declare const RegionDiscoveryOutcomes: {
+    readonly CONFIGURED_MATCHES_DETECTED: "1";
+    readonly CONFIGURED_NO_AUTO_DETECTION: "2";
+    readonly CONFIGURED_NOT_DETECTED: "3";
+    readonly AUTO_DETECTION_REQUESTED_SUCCESSFUL: "4";
+    readonly AUTO_DETECTION_REQUESTED_FAILED: "5";
+};
+export type RegionDiscoveryOutcomes = (typeof RegionDiscoveryOutcomes)[keyof typeof RegionDiscoveryOutcomes];
+/**
+ * Specifies the reason for fetching the access token from the identity provider
+ */
+export declare const CacheOutcome: {
+    readonly NOT_APPLICABLE: "0";
+    readonly FORCE_REFRESH_OR_CLAIMS: "1";
+    readonly NO_CACHED_ACCESS_TOKEN: "2";
+    readonly CACHED_ACCESS_TOKEN_EXPIRED: "3";
+    readonly PROACTIVELY_REFRESHED: "4";
+};
+export type CacheOutcome = (typeof CacheOutcome)[keyof typeof CacheOutcome];
+export declare const JsonWebTokenTypes: {
+    readonly Jwt: "JWT";
+    readonly Jwk: "JWK";
+    readonly Pop: "pop";
+};
+export type JsonWebTokenTypes = (typeof JsonWebTokenTypes)[keyof typeof JsonWebTokenTypes];
+export declare const ONE_DAY_IN_MS = 86400000;
+export declare const DEFAULT_TOKEN_RENEWAL_OFFSET_SEC = 300;
+//# sourceMappingURL=Constants.d.ts.map

package/lib/types/utils/Constants.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"Constants.d.ts","sourceRoot":"","sources":["../../../src/utils/Constants.ts"],"names":[],"mappings":"AAKA,eAAO,MAAM,SAAS;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA2DrB,CAAC;AAEF,eAAO,MAAM,UAAU;;;;;;;;;;;;;;;;;;;CAmBb,CAAC;AACX,MAAM,MAAM,UAAU,GAAG,CAAC,OAAO,UAAU,CAAC,CAAC,MAAM,OAAO,UAAU,CAAC,CAAC;AAEtE,eAAO,MAAM,mBAAmB,UAI/B,CAAC;AAEF,eAAO,MAAM,WAAW,UAAkD,CAAC;AAE3E;;GAEG;AACH,eAAO,MAAM,WAAW;;;;;;;;CAQd,CAAC;AACX,MAAM,MAAM,WAAW,GAAG,CAAC,OAAO,WAAW,CAAC,CAAC,MAAM,OAAO,WAAW,CAAC,CAAC;AAEzE;;GAEG;AACH,eAAO,MAAM,mBAAmB;;;;;;;;CAQtB,CAAC;AACX,MAAM,MAAM,mBAAmB,GAC3B,CAAC,OAAO,mBAAmB,CAAC,CAAC,MAAM,OAAO,mBAAmB,CAAC,CAAC;AAEnE;;GAEG;AACH,eAAO,MAAM,qBAAqB;;;;CAIxB,CAAC;AACX,MAAM,MAAM,qBAAqB,GAC7B,CAAC,OAAO,qBAAqB,CAAC,CAAC,MAAM,OAAO,qBAAqB,CAAC,CAAC;AAEvE;;GAEG;AACH,eAAO,MAAM,iBAAiB;;;CAGpB,CAAC;AACX,MAAM,MAAM,iBAAiB,GACzB,CAAC,OAAO,iBAAiB,CAAC,CAAC,MAAM,OAAO,iBAAiB,CAAC,CAAC;AAE/D;;;;GAIG;AACH,eAAO,MAAM,WAAW;;;;;;;CAOvB,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,yBAAyB;;;CAGrC,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,kBAAkB;;;CAGrB,CAAC;AACX,MAAM,MAAM,kBAAkB,GAC1B,CAAC,OAAO,kBAAkB,CAAC,CAAC,MAAM,OAAO,kBAAkB,CAAC,CAAC;AAEjE;;GAEG;AACH,eAAO,MAAM,YAAY;;;;CAGf,CAAC;AACX,MAAM,MAAM,YAAY,GAAG,CAAC,OAAO,YAAY,CAAC,CAAC,MAAM,OAAO,YAAY,CAAC,CAAC;AAE5E;;GAEG;AACH,eAAO,MAAM,SAAS;;;;;;;;CAQZ,CAAC;AACX,MAAM,MAAM,SAAS,GAAG,CAAC,OAAO,SAAS,CAAC,CAAC,MAAM,OAAO,SAAS,CAAC,CAAC;AAEnE;;GAEG;AACH,eAAO,MAAM,gBAAgB;;;;;CAKnB,CAAC;AACX,MAAM,MAAM,gBAAgB,GACxB,CAAC,OAAO,gBAAgB,CAAC,CAAC,MAAM,OAAO,gBAAgB,CAAC,CAAC;AAE7D;;GAEG;AACH,eAAO,MAAM,UAAU;;;CAGb,CAAC;AACX,MAAM,MAAM,UAAU,GAAG,CAAC,OAAO,UAAU,CAAC,CAAC,MAAM,OAAO,UAAU,CAAC,CAAC;AAEtE;;GAEG;AACH,eAAO,MAAM,cAAc;;;;;CAKjB,CAAC;AACX,MAAM,MAAM,cAAc,GACtB,CAAC,OAAO,cAAc,CAAC,CAAC,MAAM,OAAO,cAAc,CAAC,CAAC;AAEzD;;GAEG;AACH,eAAO,MAAM,SAAS;;;;;;;;;;CAUZ,CAAC;AACX,MAAM,MAAM,SAAS,GAAG,CAAC,OAAO,SAAS,CAAC,CAAC,MAAM,OAAO,SAAS,CAAC,CAAC;AAEnE;;GAEG;AACH,eAAO,MAAM,YAAY,gBAAgB,CAAC;AAC1C,eAAO,MAAM,WAAW,gBAAgB,CAAC;AACzC,eAAO,MAAM,aAAa,MAAM,CAAC;AAEjC,eAAO,MAAM,4BAA4B;;;CAGxC,CAAC;AAEF,eAAO,MAAM,uBAAuB;;;;;CAK1B,CAAC;AACX,MAAM,MAAM,uBAAuB,GAC/B,CAAC,OAAO,uBAAuB,CAAC,CAAC,MAAM,OAAO,uBAAuB,CAAC,CAAC;AAE3E,eAAO,MAAM,sBAAsB;;;;;;;;;;;CAWlC,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,oBAAoB;;;;CAIvB,CAAC;AACX,MAAM,MAAM,oBAAoB,GAC5B,CAAC,OAAO,oBAAoB,CAAC,CAAC,MAAM,OAAO,oBAAoB,CAAC,CAAC;AAErE;;GAEG;AACH,eAAO,MAAM,mBAAmB;;;;;CAS/B,CAAC;AAEF,eAAO,MAAM,MAAM;;;CAGlB,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,sBAAsB;;;CAGzB,CAAC;AACX,MAAM,MAAM,sBAAsB,GAC9B,CAAC,OAAO,sBAAsB,CAAC,CAAC,MAAM,OAAO,sBAAsB,CAAC,CAAC;AAEzE;;GAEG;AACH,eAAO,MAAM,aAAa;;;CAGhB,CAAC;AACX,MAAM,MAAM,aAAa,GAAG,CAAC,OAAO,aAAa,CAAC,CAAC,MAAM,OAAO,aAAa,CAAC,CAAC;AAE/E;;GAEG;AACH,eAAO,MAAM,sBAAsB;;;;;CAKzB,CAAC;AACX,MAAM,MAAM,sBAAsB,GAC9B,CAAC,OAAO,sBAAsB,CAAC,CAAC,MAAM,OAAO,sBAAsB,CAAC,CAAC;AAEzE;;GAEG;AACH,eAAO,MAAM,uBAAuB;;;;;;CAM1B,CAAC;AACX,MAAM,MAAM,uBAAuB,GAC/B,CAAC,OAAO,uBAAuB,CAAC,CAAC,MAAM,OAAO,uBAAuB,CAAC,CAAC;AAE3E;;GAEG;AACH,eAAO,MAAM,YAAY;;;;;;CAWf,CAAC;AACX,MAAM,MAAM,YAAY,GAAG,CAAC,OAAO,YAAY,CAAC,CAAC,MAAM,OAAO,YAAY,CAAC,CAAC;AAE5E,eAAO,MAAM,iBAAiB;;;;CAIpB,CAAC;AACX,MAAM,MAAM,iBAAiB,GACzB,CAAC,OAAO,iBAAiB,CAAC,CAAC,MAAM,OAAO,iBAAiB,CAAC,CAAC;AAE/D,eAAO,MAAM,aAAa,WAAW,CAAC;AAGtC,eAAO,MAAM,gCAAgC,MAAM,CAAC"}

package/lib/types/utils/FunctionWrappers.d.ts

@@ -0,0 +1,28 @@
+import { Logger } from "../logger/Logger.js";
+import { IPerformanceClient } from "../telemetry/performance/IPerformanceClient.js";
+/**
+ * Wraps a function with a performance measurement.
+ * Usage: invoke(functionToCall, performanceClient, "EventName", "correlationId")(...argsToPassToFunction)
+ * @param callback
+ * @param eventName
+ * @param logger
+ * @param telemetryClient
+ * @param correlationId
+ * @returns
+ * @internal
+ */
+export declare const invoke: <T extends any[], U>(callback: (...args: T) => U, eventName: string, logger: Logger, telemetryClient?: IPerformanceClient, correlationId?: string) => (...args: T) => U;
+/**
+ * Wraps an async function with a performance measurement.
+ * Usage: invokeAsync(functionToCall, performanceClient, "EventName", "correlationId")(...argsToPassToFunction)
+ * @param callback
+ * @param eventName
+ * @param logger
+ * @param telemetryClient
+ * @param correlationId
+ * @returns
+ * @internal
+ *
+ */
+export declare const invokeAsync: <T extends any[], U>(callback: (...args: T) => Promise<U>, eventName: string, logger: Logger, telemetryClient?: IPerformanceClient, correlationId?: string) => (...args: T) => Promise<U>;
+//# sourceMappingURL=FunctionWrappers.d.ts.map

package/lib/types/utils/FunctionWrappers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"FunctionWrappers.d.ts","sourceRoot":"","sources":["../../../src/utils/FunctionWrappers.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAC;AAC7C,OAAO,EAAE,kBAAkB,EAAE,MAAM,gDAAgD,CAAC;AAEpF;;;;;;;;;;GAUG;AAEH,eAAO,MAAM,MAAM,+DAEJ,MAAM,UACT,MAAM,oBACI,kBAAkB,kBACpB,MAAM,sBAuCzB,CAAC;AAEF;;;;;;;;;;;GAWG;AAEH,eAAO,MAAM,WAAW,wEAET,MAAM,UACT,MAAM,oBACI,kBAAkB,kBACpB,MAAM,+BAyCzB,CAAC"}

package/lib/types/utils/MsalTypes.d.ts

@@ -0,0 +1,7 @@
+/**
+ * Key-Value type to support queryParams, extraQueryParams and claims
+ */
+export type StringDict = {
+    [key: string]: string;
+};
+//# sourceMappingURL=MsalTypes.d.ts.map

package/lib/types/utils/MsalTypes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"MsalTypes.d.ts","sourceRoot":"","sources":["../../../src/utils/MsalTypes.ts"],"names":[],"mappings":"AAKA;;GAEG;AACH,MAAM,MAAM,UAAU,GAAG;IAAE,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAAA;CAAE,CAAC"}

package/lib/types/utils/ProtocolUtils.d.ts

@@ -0,0 +1,43 @@
+import { ICrypto } from "../crypto/ICrypto.js";
+/**
+ * Type which defines the object that is stringified, encoded and sent in the state value.
+ * Contains the following:
+ * - id - unique identifier for this request
+ * - ts - timestamp for the time the request was made. Used to ensure that token expiration is not calculated incorrectly.
+ * - platformState - string value sent from the platform.
+ */
+export type LibraryStateObject = {
+    id: string;
+    meta?: Record<string, string>;
+};
+/**
+ * Type which defines the stringified and encoded object sent to the service in the authorize request.
+ */
+export type RequestStateObject = {
+    userRequestState: string;
+    libraryState: LibraryStateObject;
+};
+/**
+ * Class which provides helpers for OAuth 2.0 protocol specific values
+ */
+export declare class ProtocolUtils {
+    /**
+     * Appends user state with random guid, or returns random guid.
+     * @param userState
+     * @param randomGuid
+     */
+    static setRequestState(cryptoObj: ICrypto, userState?: string, meta?: Record<string, string>): string;
+    /**
+     * Generates the state value used by the common library.
+     * @param randomGuid
+     * @param cryptoObj
+     */
+    static generateLibraryState(cryptoObj: ICrypto, meta?: Record<string, string>): string;
+    /**
+     * Parses the state into the RequestStateObject, which contains the LibraryState info and the state passed by the user.
+     * @param state
+     * @param cryptoObj
+     */
+    static parseRequestState(cryptoObj: ICrypto, state: string): RequestStateObject;
+}
+//# sourceMappingURL=ProtocolUtils.d.ts.map

package/lib/types/utils/ProtocolUtils.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ProtocolUtils.d.ts","sourceRoot":"","sources":["../../../src/utils/ProtocolUtils.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,OAAO,EAAE,MAAM,sBAAsB,CAAC;AAM/C;;;;;;GAMG;AACH,MAAM,MAAM,kBAAkB,GAAG;IAC7B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACjC,CAAC;AAEF;;GAEG;AACH,MAAM,MAAM,kBAAkB,GAAG;IAC7B,gBAAgB,EAAE,MAAM,CAAC;IACzB,YAAY,EAAE,kBAAkB,CAAC;CACpC,CAAC;AAEF;;GAEG;AACH,qBAAa,aAAa;IACtB;;;;OAIG;IACH,MAAM,CAAC,eAAe,CAClB,SAAS,EAAE,OAAO,EAClB,SAAS,CAAC,EAAE,MAAM,EAClB,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAC9B,MAAM;IAUT;;;;OAIG;IACH,MAAM,CAAC,oBAAoB,CACvB,SAAS,EAAE,OAAO,EAClB,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAC9B,MAAM;IAmBT;;;;OAIG;IACH,MAAM,CAAC,iBAAiB,CACpB,SAAS,EAAE,OAAO,EAClB,KAAK,EAAE,MAAM,GACd,kBAAkB;CA6BxB"}

package/lib/types/utils/StringUtils.d.ts

@@ -0,0 +1,41 @@
+/**
+ * @hidden
+ */
+export declare class StringUtils {
+    /**
+     * Check if stringified object is empty
+     * @param strObj
+     */
+    static isEmptyObj(strObj?: string): boolean;
+    static startsWith(str: string, search: string): boolean;
+    static endsWith(str: string, search: string): boolean;
+    /**
+     * Parses string into an object.
+     *
+     * @param query
+     */
+    static queryStringToObject<T>(query: string): T;
+    /**
+     * Trims entries in an array.
+     *
+     * @param arr
+     */
+    static trimArrayEntries(arr: Array<string>): Array<string>;
+    /**
+     * Removes empty strings from array
+     * @param arr
+     */
+    static removeEmptyStringsFromArray(arr: Array<string>): Array<string>;
+    /**
+     * Attempts to parse a string into JSON
+     * @param str
+     */
+    static jsonParseHelper<T>(str: string): T | null;
+    /**
+     * Tests if a given string matches a given pattern, with support for wildcards and queries.
+     * @param pattern Wildcard pattern to string match. Supports "*" for wildcards and "?" for queries
+     * @param input String to match against
+     */
+    static matchPattern(pattern: string, input: string): boolean;
+}
+//# sourceMappingURL=StringUtils.d.ts.map

package/lib/types/utils/StringUtils.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"StringUtils.d.ts","sourceRoot":"","sources":["../../../src/utils/StringUtils.ts"],"names":[],"mappings":"AAKA;;GAEG;AACH,qBAAa,WAAW;IACpB;;;OAGG;IACH,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO;IAU3C,MAAM,CAAC,UAAU,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO;IAIvD,MAAM,CAAC,QAAQ,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO;IAOrD;;;;OAIG;IACH,MAAM,CAAC,mBAAmB,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,GAAG,CAAC;IAe/C;;;;OAIG;IACH,MAAM,CAAC,gBAAgB,CAAC,GAAG,EAAE,KAAK,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC;IAI1D;;;OAGG;IACH,MAAM,CAAC,2BAA2B,CAAC,GAAG,EAAE,KAAK,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC;IAMrE;;;OAGG;IACH,MAAM,CAAC,eAAe,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,GAAG,CAAC,GAAG,IAAI;IAQhD;;;;OAIG;IACH,MAAM,CAAC,YAAY,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO;CAe/D"}

package/lib/types/utils/TimeUtils.d.ts

@@ -0,0 +1,26 @@
+/**
+ * Utility functions for managing date and time operations.
+ */
+/**
+ * return the current time in Unix time (seconds).
+ */
+export declare function nowSeconds(): number;
+/**
+ * check if a token is expired based on given UTC time in seconds.
+ * @param expiresOn
+ */
+export declare function isTokenExpired(expiresOn: string, offset: number): boolean;
+/**
+ * If the current time is earlier than the time that a token was cached at, we must discard the token
+ * i.e. The system clock was turned back after acquiring the cached token
+ * @param cachedAt
+ * @param offset
+ */
+export declare function wasClockTurnedBack(cachedAt: string): boolean;
+/**
+ * Waits for t number of milliseconds
+ * @param t number
+ * @param value T
+ */
+export declare function delay<T>(t: number, value?: T): Promise<T | void>;
+//# sourceMappingURL=TimeUtils.d.ts.map

package/lib/types/utils/TimeUtils.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"TimeUtils.d.ts","sourceRoot":"","sources":["../../../src/utils/TimeUtils.ts"],"names":[],"mappings":"AAKA;;GAEG;AAEH;;GAEG;AACH,wBAAgB,UAAU,IAAI,MAAM,CAGnC;AAED;;;GAGG;AACH,wBAAgB,cAAc,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAOzE;AAED;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAI5D;AAED;;;;GAIG;AACH,wBAAgB,KAAK,CAAC,CAAC,EAAE,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,CAAC,GAAG,IAAI,CAAC,CAEhE"}

package/lib/types/utils/UrlUtils.d.ts

@@ -0,0 +1,11 @@
+import { ServerAuthorizationCodeResponse } from "../response/ServerAuthorizationCodeResponse.js";
+/**
+ * Parses hash string from given string. Returns empty string if no hash symbol is found.
+ * @param hashString
+ */
+export declare function stripLeadingHashOrQuery(responseString: string): string;
+/**
+ * Returns URL hash as server auth code response object.
+ */
+export declare function getDeserializedResponse(responseString: string): ServerAuthorizationCodeResponse | null;
+//# sourceMappingURL=UrlUtils.d.ts.map

package/lib/types/utils/UrlUtils.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"UrlUtils.d.ts","sourceRoot":"","sources":["../../../src/utils/UrlUtils.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,+BAA+B,EAAE,MAAM,gDAAgD,CAAC;AAMjG;;;GAGG;AACH,wBAAgB,uBAAuB,CAAC,cAAc,EAAE,MAAM,GAAG,MAAM,CAWtE;AAED;;GAEG;AACH,wBAAgB,uBAAuB,CACnC,cAAc,EAAE,MAAM,GACvB,+BAA+B,GAAG,IAAI,CA0BxC"}

package/node/README.md

@@ -0,0 +1 @@
+Do not remove or rename. This folder allows subpath imports in environments that don't understand the exports field.

package/node/package.json

@@ -0,0 +1,5 @@
+{
+  "main": "../lib/index-node.cjs",
+  "module": "../dist/index-node.mjs",
+  "types": "../lib/types/index-node.d.ts"
+}

package/package.json

@@ -10,7 +10,7 @@
     "type": "git",
     "url": "https://github.com/AzureAD/microsoft-authentication-library-for-js.git"
   },
-  "version": "14.14.2",
+  "version": "14.15.0",
   "description": "Microsoft Authentication Library for js",
   "keywords": [
     "implicit",
@@ -22,16 +22,40 @@
     "oauth"
   ],
   "sideEffects": false,
-  "main": "./dist/index.cjs",
+  "type": "module",
+  "main": "./lib/index.cjs",
   "module": "./dist/index.mjs",
   "types": "./dist/index.d.ts",
   "exports": {
+    "./browser": {
+      "import": {
+        "types": "./dist/index-browser.d.ts",
+        "default": "./dist/index-browser.mjs"
+      },
+      "require": {
+        "types": "./lib/types/index-browser.d.ts",
+        "default": "./lib/index-browser.cjs"
+      }
+    },
+    "./node": {
+      "import": {
+        "types": "./dist/index-node.d.ts",
+        "default": "./dist/index-node.mjs"
+      },
+      "require": {
+        "types": "./lib/types/index-node.d.ts",
+        "default": "./lib/index-node.cjs"
+      }
+    },
     ".": {
-      "types": "./dist/index.d.ts",
-      "module": "./dist/index.mjs",
-      "import": "./dist/index.mjs",
-      "require": "./dist/index.cjs",
-      "default": "./dist/index.mjs"
+      "import": {
+        "types": "./dist/index.d.ts",
+        "default": "./dist/index.mjs"
+      },
+      "require": {
+        "types": "./lib/types/index.d.ts",
+        "default": "./lib/index.cjs"
+      }
     },
     "./package.json": "./package.json"
   },
@@ -43,7 +67,10 @@
   },
   "files": [
     "dist",
-    "src"
+    "lib",
+    "src",
+    "node",
+    "browser"
   ],
   "scripts": {
     "clean": "shx rm -rf dist lib",
@@ -88,9 +115,11 @@
     "prettier": "2.8.7",
     "rimraf": "^3.0.2",
     "rollup": "^3.14.0",
+    "rollup-msal": "file:../../shared-configs/rollup-msal",
     "shx": "^0.3.2",
     "sinon": "^7.5.0",
     "ts-jest": "^29.1.0",
+    "ts-jest-resolver": "^2.0.1",
     "ts-node": "^10.9.1",
     "tslib": "^1.10.0",
     "typescript": "^4.9.5",

package/src/account/AccountInfo.ts

@@ -3,7 +3,7 @@
  * Licensed under the MIT License.
  */
 
-import { TokenClaims } from "./TokenClaims";
+import { TokenClaims } from "./TokenClaims.js";
 /**
  * Account object with the following signature:
  * - homeAccountId          - Home account identifier for this account object