@azure/msal-common 14.14.2 → 14.15.0

package/src/client/AuthorizationCodeClient.ts

@@ -3,55 +3,55 @@
  * Licensed under the MIT License.
  */
 
-import { BaseClient } from "./BaseClient";
-import { CommonAuthorizationUrlRequest } from "../request/CommonAuthorizationUrlRequest";
-import { CommonAuthorizationCodeRequest } from "../request/CommonAuthorizationCodeRequest";
-import { Authority } from "../authority/Authority";
-import { RequestParameterBuilder } from "../request/RequestParameterBuilder";
+import { BaseClient } from "./BaseClient.js";
+import { CommonAuthorizationUrlRequest } from "../request/CommonAuthorizationUrlRequest.js";
+import { CommonAuthorizationCodeRequest } from "../request/CommonAuthorizationCodeRequest.js";
+import { Authority } from "../authority/Authority.js";
+import { RequestParameterBuilder } from "../request/RequestParameterBuilder.js";
 import {
     GrantType,
     AuthenticationScheme,
     PromptValue,
     Separators,
     HeaderNames,
-} from "../utils/Constants";
-import * as AADServerParamKeys from "../constants/AADServerParamKeys";
+} from "../utils/Constants.js";
+import * as AADServerParamKeys from "../constants/AADServerParamKeys.js";
 import {
     ClientConfiguration,
     isOidcProtocolMode,
-} from "../config/ClientConfiguration";
-import { ServerAuthorizationTokenResponse } from "../response/ServerAuthorizationTokenResponse";
-import { NetworkResponse } from "../network/NetworkManager";
-import { ResponseHandler } from "../response/ResponseHandler";
-import { AuthenticationResult } from "../response/AuthenticationResult";
-import { StringUtils } from "../utils/StringUtils";
+} from "../config/ClientConfiguration.js";
+import { ServerAuthorizationTokenResponse } from "../response/ServerAuthorizationTokenResponse.js";
+import { NetworkResponse } from "../network/NetworkManager.js";
+import { ResponseHandler } from "../response/ResponseHandler.js";
+import { AuthenticationResult } from "../response/AuthenticationResult.js";
+import { StringUtils } from "../utils/StringUtils.js";
 import {
     ClientAuthErrorCodes,
     createClientAuthError,
-} from "../error/ClientAuthError";
-import { UrlString } from "../url/UrlString";
-import { ServerAuthorizationCodeResponse } from "../response/ServerAuthorizationCodeResponse";
-import { CommonEndSessionRequest } from "../request/CommonEndSessionRequest";
-import { PopTokenGenerator } from "../crypto/PopTokenGenerator";
-import { RequestThumbprint } from "../network/RequestThumbprint";
-import { AuthorizationCodePayload } from "../response/AuthorizationCodePayload";
-import * as TimeUtils from "../utils/TimeUtils";
-import { AccountInfo } from "../account/AccountInfo";
+} from "../error/ClientAuthError.js";
+import { UrlString } from "../url/UrlString.js";
+import { ServerAuthorizationCodeResponse } from "../response/ServerAuthorizationCodeResponse.js";
+import { CommonEndSessionRequest } from "../request/CommonEndSessionRequest.js";
+import { PopTokenGenerator } from "../crypto/PopTokenGenerator.js";
+import { RequestThumbprint } from "../network/RequestThumbprint.js";
+import { AuthorizationCodePayload } from "../response/AuthorizationCodePayload.js";
+import * as TimeUtils from "../utils/TimeUtils.js";
+import { AccountInfo } from "../account/AccountInfo.js";
 import {
     buildClientInfoFromHomeAccountId,
     buildClientInfo,
-} from "../account/ClientInfo";
-import { CcsCredentialType, CcsCredential } from "../account/CcsCredential";
+} from "../account/ClientInfo.js";
+import { CcsCredentialType, CcsCredential } from "../account/CcsCredential.js";
 import {
     createClientConfigurationError,
     ClientConfigurationErrorCodes,
-} from "../error/ClientConfigurationError";
-import { RequestValidator } from "../request/RequestValidator";
-import { IPerformanceClient } from "../telemetry/performance/IPerformanceClient";
-import { PerformanceEvents } from "../telemetry/performance/PerformanceEvent";
-import { invokeAsync } from "../utils/FunctionWrappers";
-import { ClientAssertion } from "../account/ClientCredentials";
-import { getClientAssertion } from "../utils/ClientAssertionUtils";
+} from "../error/ClientConfigurationError.js";
+import { RequestValidator } from "../request/RequestValidator.js";
+import { IPerformanceClient } from "../telemetry/performance/IPerformanceClient.js";
+import { PerformanceEvents } from "../telemetry/performance/PerformanceEvent.js";
+import { invokeAsync } from "../utils/FunctionWrappers.js";
+import { ClientAssertion } from "../account/ClientCredentials.js";
+import { getClientAssertion } from "../utils/ClientAssertionUtils.js";
 
 /**
  * Oauth2.0 Authorization Code client
@@ -674,11 +674,7 @@ export class AuthorizationCodeClient extends BaseClient {
             );
         }
 
-        if (request.extraQueryParameters) {
-            parameterBuilder.addExtraQueryParameters(
-                request.extraQueryParameters
-            );
-        }
+        this.addExtraQueryParams(request, parameterBuilder);
 
         if (request.nativeBroker) {
             // signal ests that this is a WAM call
@@ -742,13 +738,30 @@ export class AuthorizationCodeClient extends BaseClient {
             parameterBuilder.addLogoutHint(request.logoutHint);
         }
 
+        this.addExtraQueryParams(request, parameterBuilder);
+
+        return parameterBuilder.createQueryString();
+    }
+
+    private addExtraQueryParams(
+        request: CommonAuthorizationUrlRequest | CommonEndSessionRequest,
+        parameterBuilder: RequestParameterBuilder
+    ) {
+        const hasRequestInstanceAware =
+            request.extraQueryParameters &&
+            request.extraQueryParameters.hasOwnProperty("instance_aware");
+
+        // Set instance_aware flag if config auth param is set
+        if (!hasRequestInstanceAware && this.config.authOptions.instanceAware) {
+            request.extraQueryParameters = request.extraQueryParameters || {};
+            request.extraQueryParameters["instance_aware"] = "true";
+        }
+
         if (request.extraQueryParameters) {
             parameterBuilder.addExtraQueryParameters(
                 request.extraQueryParameters
             );
         }
-
-        return parameterBuilder.createQueryString();
     }
 
     /**

package/src/client/BaseClient.ts

@@ -7,25 +7,25 @@ import {
     ClientConfiguration,
     buildClientConfiguration,
     CommonClientConfiguration,
-} from "../config/ClientConfiguration";
-import { INetworkModule } from "../network/INetworkModule";
-import { NetworkManager, NetworkResponse } from "../network/NetworkManager";
-import { ICrypto } from "../crypto/ICrypto";
-import { Authority } from "../authority/Authority";
-import { Logger } from "../logger/Logger";
-import { Constants, HeaderNames } from "../utils/Constants";
-import { ServerAuthorizationTokenResponse } from "../response/ServerAuthorizationTokenResponse";
-import { CacheManager } from "../cache/CacheManager";
-import { ServerTelemetryManager } from "../telemetry/server/ServerTelemetryManager";
-import { RequestThumbprint } from "../network/RequestThumbprint";
-import { version, name } from "../packageMetadata";
-import { CcsCredential, CcsCredentialType } from "../account/CcsCredential";
-import { buildClientInfoFromHomeAccountId } from "../account/ClientInfo";
-import { IPerformanceClient } from "../telemetry/performance/IPerformanceClient";
-import { RequestParameterBuilder } from "../request/RequestParameterBuilder";
-import { BaseAuthRequest } from "../request/BaseAuthRequest";
-import { createDiscoveredInstance } from "../authority/AuthorityFactory";
-import { PerformanceEvents } from "../telemetry/performance/PerformanceEvent";
+} from "../config/ClientConfiguration.js";
+import { INetworkModule } from "../network/INetworkModule.js";
+import { NetworkManager, NetworkResponse } from "../network/NetworkManager.js";
+import { ICrypto } from "../crypto/ICrypto.js";
+import { Authority } from "../authority/Authority.js";
+import { Logger } from "../logger/Logger.js";
+import { Constants, HeaderNames } from "../utils/Constants.js";
+import { ServerAuthorizationTokenResponse } from "../response/ServerAuthorizationTokenResponse.js";
+import { CacheManager } from "../cache/CacheManager.js";
+import { ServerTelemetryManager } from "../telemetry/server/ServerTelemetryManager.js";
+import { RequestThumbprint } from "../network/RequestThumbprint.js";
+import { version, name } from "../packageMetadata.js";
+import { CcsCredential, CcsCredentialType } from "../account/CcsCredential.js";
+import { buildClientInfoFromHomeAccountId } from "../account/ClientInfo.js";
+import { IPerformanceClient } from "../telemetry/performance/IPerformanceClient.js";
+import { RequestParameterBuilder } from "../request/RequestParameterBuilder.js";
+import { BaseAuthRequest } from "../request/BaseAuthRequest.js";
+import { createDiscoveredInstance } from "../authority/AuthorityFactory.js";
+import { PerformanceEvents } from "../telemetry/performance/PerformanceEvent.js";
 
 /**
  * Base application class which will construct requests to send to and handle responses from the Microsoft STS using the authorization code flow.

package/src/client/RefreshTokenClient.ts

@@ -6,50 +6,50 @@
 import {
     ClientConfiguration,
     isOidcProtocolMode,
-} from "../config/ClientConfiguration";
-import { BaseClient } from "./BaseClient";
-import { CommonRefreshTokenRequest } from "../request/CommonRefreshTokenRequest";
-import { Authority } from "../authority/Authority";
-import { ServerAuthorizationTokenResponse } from "../response/ServerAuthorizationTokenResponse";
-import { RequestParameterBuilder } from "../request/RequestParameterBuilder";
+} from "../config/ClientConfiguration.js";
+import { BaseClient } from "./BaseClient.js";
+import { CommonRefreshTokenRequest } from "../request/CommonRefreshTokenRequest.js";
+import { Authority } from "../authority/Authority.js";
+import { ServerAuthorizationTokenResponse } from "../response/ServerAuthorizationTokenResponse.js";
+import { RequestParameterBuilder } from "../request/RequestParameterBuilder.js";
 import {
     GrantType,
     AuthenticationScheme,
     Errors,
     HeaderNames,
-} from "../utils/Constants";
-import * as AADServerParamKeys from "../constants/AADServerParamKeys";
-import { ResponseHandler } from "../response/ResponseHandler";
-import { AuthenticationResult } from "../response/AuthenticationResult";
-import { PopTokenGenerator } from "../crypto/PopTokenGenerator";
-import { StringUtils } from "../utils/StringUtils";
-import { RequestThumbprint } from "../network/RequestThumbprint";
-import { NetworkResponse } from "../network/NetworkManager";
-import { CommonSilentFlowRequest } from "../request/CommonSilentFlowRequest";
+} from "../utils/Constants.js";
+import * as AADServerParamKeys from "../constants/AADServerParamKeys.js";
+import { ResponseHandler } from "../response/ResponseHandler.js";
+import { AuthenticationResult } from "../response/AuthenticationResult.js";
+import { PopTokenGenerator } from "../crypto/PopTokenGenerator.js";
+import { StringUtils } from "../utils/StringUtils.js";
+import { RequestThumbprint } from "../network/RequestThumbprint.js";
+import { NetworkResponse } from "../network/NetworkManager.js";
+import { CommonSilentFlowRequest } from "../request/CommonSilentFlowRequest.js";
 import {
     createClientConfigurationError,
     ClientConfigurationErrorCodes,
-} from "../error/ClientConfigurationError";
+} from "../error/ClientConfigurationError.js";
 import {
     createClientAuthError,
     ClientAuthErrorCodes,
-} from "../error/ClientAuthError";
-import { ServerError } from "../error/ServerError";
-import * as TimeUtils from "../utils/TimeUtils";
-import { UrlString } from "../url/UrlString";
-import { CcsCredentialType } from "../account/CcsCredential";
-import { buildClientInfoFromHomeAccountId } from "../account/ClientInfo";
+} from "../error/ClientAuthError.js";
+import { ServerError } from "../error/ServerError.js";
+import * as TimeUtils from "../utils/TimeUtils.js";
+import { UrlString } from "../url/UrlString.js";
+import { CcsCredentialType } from "../account/CcsCredential.js";
+import { buildClientInfoFromHomeAccountId } from "../account/ClientInfo.js";
 import {
     InteractionRequiredAuthError,
     InteractionRequiredAuthErrorCodes,
     createInteractionRequiredAuthError,
-} from "../error/InteractionRequiredAuthError";
-import { PerformanceEvents } from "../telemetry/performance/PerformanceEvent";
-import { IPerformanceClient } from "../telemetry/performance/IPerformanceClient";
-import { invoke, invokeAsync } from "../utils/FunctionWrappers";
-import { generateCredentialKey } from "../cache/utils/CacheHelpers";
-import { ClientAssertion } from "../account/ClientCredentials";
-import { getClientAssertion } from "../utils/ClientAssertionUtils";
+} from "../error/InteractionRequiredAuthError.js";
+import { PerformanceEvents } from "../telemetry/performance/PerformanceEvent.js";
+import { IPerformanceClient } from "../telemetry/performance/IPerformanceClient.js";
+import { invoke, invokeAsync } from "../utils/FunctionWrappers.js";
+import { generateCredentialKey } from "../cache/utils/CacheHelpers.js";
+import { ClientAssertion } from "../account/ClientCredentials.js";
+import { getClientAssertion } from "../utils/ClientAssertionUtils.js";
 
 const DEFAULT_REFRESH_TOKEN_EXPIRATION_OFFSET_SECONDS = 300; // 5 Minutes
 

package/src/client/SilentFlowClient.ts

@@ -3,27 +3,27 @@
  * Licensed under the MIT License.
  */
 
-import { BaseClient } from "./BaseClient";
-import { ClientConfiguration } from "../config/ClientConfiguration";
-import { CommonSilentFlowRequest } from "../request/CommonSilentFlowRequest";
-import { AuthenticationResult } from "../response/AuthenticationResult";
-import * as TimeUtils from "../utils/TimeUtils";
-import { RefreshTokenClient } from "./RefreshTokenClient";
+import { BaseClient } from "./BaseClient.js";
+import { ClientConfiguration } from "../config/ClientConfiguration.js";
+import { CommonSilentFlowRequest } from "../request/CommonSilentFlowRequest.js";
+import { AuthenticationResult } from "../response/AuthenticationResult.js";
+import * as TimeUtils from "../utils/TimeUtils.js";
+import { RefreshTokenClient } from "./RefreshTokenClient.js";
 import {
     ClientAuthError,
     ClientAuthErrorCodes,
     createClientAuthError,
-} from "../error/ClientAuthError";
-import { ResponseHandler } from "../response/ResponseHandler";
-import { CacheRecord } from "../cache/entities/CacheRecord";
-import { CacheOutcome, OIDC_DEFAULT_SCOPES } from "../utils/Constants";
-import { IPerformanceClient } from "../telemetry/performance/IPerformanceClient";
-import { StringUtils } from "../utils/StringUtils";
-import { checkMaxAge, extractTokenClaims } from "../account/AuthToken";
-import { TokenClaims } from "../account/TokenClaims";
-import { PerformanceEvents } from "../telemetry/performance/PerformanceEvent";
-import { invokeAsync } from "../utils/FunctionWrappers";
-import { getTenantFromAuthorityString } from "../authority/Authority";
+} from "../error/ClientAuthError.js";
+import { ResponseHandler } from "../response/ResponseHandler.js";
+import { CacheRecord } from "../cache/entities/CacheRecord.js";
+import { CacheOutcome, OIDC_DEFAULT_SCOPES } from "../utils/Constants.js";
+import { IPerformanceClient } from "../telemetry/performance/IPerformanceClient.js";
+import { StringUtils } from "../utils/StringUtils.js";
+import { checkMaxAge, extractTokenClaims } from "../account/AuthToken.js";
+import { TokenClaims } from "../account/TokenClaims.js";
+import { PerformanceEvents } from "../telemetry/performance/PerformanceEvent.js";
+import { invokeAsync } from "../utils/FunctionWrappers.js";
+import { getTenantFromAuthorityString } from "../authority/Authority.js";
 
 /** @internal */
 export class SilentFlowClient extends BaseClient {

package/src/config/ClientConfiguration.ts

@@ -3,26 +3,26 @@
  * Licensed under the MIT License.
  */
 
-import { INetworkModule } from "../network/INetworkModule";
-import { DEFAULT_CRYPTO_IMPLEMENTATION, ICrypto } from "../crypto/ICrypto";
-import { ILoggerCallback, Logger, LogLevel } from "../logger/Logger";
+import { INetworkModule } from "../network/INetworkModule.js";
+import { DEFAULT_CRYPTO_IMPLEMENTATION, ICrypto } from "../crypto/ICrypto.js";
+import { ILoggerCallback, Logger, LogLevel } from "../logger/Logger.js";
 import {
     Constants,
     DEFAULT_TOKEN_RENEWAL_OFFSET_SEC,
-} from "../utils/Constants";
-import { version } from "../packageMetadata";
-import { Authority } from "../authority/Authority";
-import { AzureCloudInstance } from "../authority/AuthorityOptions";
-import { CacheManager, DefaultStorageClass } from "../cache/CacheManager";
-import { ServerTelemetryManager } from "../telemetry/server/ServerTelemetryManager";
-import { ICachePlugin } from "../cache/interface/ICachePlugin";
-import { ISerializableTokenCache } from "../cache/interface/ISerializableTokenCache";
-import { ClientCredentials } from "../account/ClientCredentials";
-import { ProtocolMode } from "../authority/ProtocolMode";
+} from "../utils/Constants.js";
+import { version } from "../packageMetadata.js";
+import { Authority } from "../authority/Authority.js";
+import { AzureCloudInstance } from "../authority/AuthorityOptions.js";
+import { CacheManager, DefaultStorageClass } from "../cache/CacheManager.js";
+import { ServerTelemetryManager } from "../telemetry/server/ServerTelemetryManager.js";
+import { ICachePlugin } from "../cache/interface/ICachePlugin.js";
+import { ISerializableTokenCache } from "../cache/interface/ISerializableTokenCache.js";
+import { ClientCredentials } from "../account/ClientCredentials.js";
+import { ProtocolMode } from "../authority/ProtocolMode.js";
 import {
     ClientAuthErrorCodes,
     createClientAuthError,
-} from "../error/ClientAuthError";
+} from "../error/ClientAuthError.js";
 
 /**
  * Use the configuration object to configure MSAL Modules and initialize the base interfaces for MSAL.
@@ -80,7 +80,8 @@ export type CommonClientConfiguration = {
  * - cloudDiscoveryMetadata      - A string containing the cloud discovery response. Used in AAD scenarios.
  * - clientCapabilities          - Array of capabilities which will be added to the claims.access_token.xms_cc request property on every network request.
  * - protocolMode                - Enum that represents the protocol that msal follows. Used for configuring proper endpoints.
- * - skipAuthorityMetadataCache      - A flag to choose whether to use or not use the local metadata cache during authority initialization. Defaults to false.
+ * - skipAuthorityMetadataCache  - A flag to choose whether to use or not use the local metadata cache during authority initialization. Defaults to false.
+ * - instanceAware               - A flag of whether the STS will send back additional parameters to specify where the tokens should be retrieved from.
  * @internal
  */
 export type AuthOptions = {
@@ -89,6 +90,7 @@ export type AuthOptions = {
     clientCapabilities?: Array<string>;
     azureCloudOptions?: AzureCloudOptions;
     skipAuthorityMetadataCache?: boolean;
+    instanceAware?: boolean;
 };
 
 /**
@@ -271,6 +273,7 @@ function buildAuthOptions(authOptions: AuthOptions): Required<AuthOptions> {
         clientCapabilities: [],
         azureCloudOptions: DEFAULT_AZURE_CLOUD_OPTIONS,
         skipAuthorityMetadataCache: false,
+        instanceAware: false,
         ...authOptions,
     };
 }

package/src/crypto/ICrypto.ts

@@ -6,9 +6,9 @@
 import {
     ClientAuthErrorCodes,
     createClientAuthError,
-} from "../error/ClientAuthError";
-import { BaseAuthRequest } from "../request/BaseAuthRequest";
-import { ShrOptions, SignedHttpRequest } from "./SignedHttpRequest";
+} from "../error/ClientAuthError.js";
+import { BaseAuthRequest } from "../request/BaseAuthRequest.js";
+import { ShrOptions, SignedHttpRequest } from "./SignedHttpRequest.js";
 
 /**
  * The PkceCodes type describes the structure

package/src/crypto/JoseHeader.ts

@@ -6,8 +6,8 @@
 import {
     JoseHeaderErrorCodes,
     createJoseHeaderError,
-} from "../error/JoseHeaderError";
-import { JsonWebTokenTypes } from "../utils/Constants";
+} from "../error/JoseHeaderError.js";
+import { JsonWebTokenTypes } from "../utils/Constants.js";
 
 export type JoseHeaderOptions = {
     typ?: JsonWebTokenTypes;

package/src/crypto/PopTokenGenerator.ts

@@ -3,13 +3,13 @@
  * Licensed under the MIT License.
  */
 
-import { ICrypto, SignedHttpRequestParameters } from "./ICrypto";
-import * as TimeUtils from "../utils/TimeUtils";
-import { UrlString } from "../url/UrlString";
-import { IPerformanceClient } from "../telemetry/performance/IPerformanceClient";
-import { PerformanceEvents } from "../telemetry/performance/PerformanceEvent";
-import { invokeAsync } from "../utils/FunctionWrappers";
-import { Logger } from "../logger/Logger";
+import { ICrypto, SignedHttpRequestParameters } from "./ICrypto.js";
+import * as TimeUtils from "../utils/TimeUtils.js";
+import { UrlString } from "../url/UrlString.js";
+import { IPerformanceClient } from "../telemetry/performance/IPerformanceClient.js";
+import { PerformanceEvents } from "../telemetry/performance/PerformanceEvent.js";
+import { invokeAsync } from "../utils/FunctionWrappers.js";
+import { Logger } from "../logger/Logger.js";
 
 /**
  * See eSTS docs for more info.

package/src/crypto/SignedHttpRequest.ts

@@ -3,7 +3,7 @@
  * Licensed under the MIT License.
  */
 
-import { JoseHeaderOptions } from "./JoseHeader";
+import { JoseHeaderOptions } from "./JoseHeader.js";
 
 export type SignedHttpRequest = {
     at?: string;

package/src/error/AuthError.ts

@@ -3,8 +3,8 @@
  * Licensed under the MIT License.
  */
 
-import { Constants } from "../utils/Constants";
-import * as AuthErrorCodes from "./AuthErrorCodes";
+import { Constants } from "../utils/Constants.js";
+import * as AuthErrorCodes from "./AuthErrorCodes.js";
 export { AuthErrorCodes };
 
 export const AuthErrorMessages = {

package/src/error/CacheError.ts

@@ -3,7 +3,7 @@
  * Licensed under the MIT License.
  */
 
-import * as CacheErrorCodes from "./CacheErrorCodes";
+import * as CacheErrorCodes from "./CacheErrorCodes.js";
 export { CacheErrorCodes };
 
 export const CacheErrorMessages = {

package/src/error/ClientAuthError.ts

@@ -3,8 +3,8 @@
  * Licensed under the MIT License.
  */
 
-import { AuthError } from "./AuthError";
-import * as ClientAuthErrorCodes from "./ClientAuthErrorCodes";
+import { AuthError } from "./AuthError.js";
+import * as ClientAuthErrorCodes from "./ClientAuthErrorCodes.js";
 export { ClientAuthErrorCodes }; // Allow importing as "ClientAuthErrorCodes";
 
 /**

package/src/error/ClientConfigurationError.ts

@@ -3,8 +3,8 @@
  * Licensed under the MIT License.
  */
 
-import { AuthError } from "./AuthError";
-import * as ClientConfigurationErrorCodes from "./ClientConfigurationErrorCodes";
+import { AuthError } from "./AuthError.js";
+import * as ClientConfigurationErrorCodes from "./ClientConfigurationErrorCodes.js";
 export { ClientConfigurationErrorCodes };
 
 export const ClientConfigurationErrorMessages = {

package/src/error/InteractionRequiredAuthError.ts

@@ -3,9 +3,9 @@
  * Licensed under the MIT License.
  */
 
-import { Constants } from "../utils/Constants";
-import { AuthError } from "./AuthError";
-import * as InteractionRequiredAuthErrorCodes from "./InteractionRequiredAuthErrorCodes";
+import { Constants } from "../utils/Constants.js";
+import { AuthError } from "./AuthError.js";
+import * as InteractionRequiredAuthErrorCodes from "./InteractionRequiredAuthErrorCodes.js";
 export { InteractionRequiredAuthErrorCodes };
 
 /**

package/src/error/JoseHeaderError.ts

@@ -3,8 +3,8 @@
  * Licensed under the MIT License.
  */
 
-import { AuthError } from "./AuthError";
-import * as JoseHeaderErrorCodes from "./JoseHeaderErrorCodes";
+import { AuthError } from "./AuthError.js";
+import * as JoseHeaderErrorCodes from "./JoseHeaderErrorCodes.js";
 export { JoseHeaderErrorCodes };
 
 export const JoseHeaderErrorMessages = {

package/src/error/ServerError.ts

@@ -3,7 +3,7 @@
  * Licensed under the MIT License.
  */
 
-import { AuthError } from "./AuthError";
+import { AuthError } from "./AuthError.js";
 
 /**
  * Error thrown when there is an error with the server code, for example, unavailability.

package/src/exports-browser-only.ts

@@ -0,0 +1,29 @@
+/*
+ * Copyright (c) Microsoft Corporation. All rights reserved.
+ * Licensed under the MIT License.
+ */
+
+export { SignedHttpRequest, ShrOptions } from "./crypto/SignedHttpRequest.js";
+export { JoseHeader } from "./crypto/JoseHeader.js";
+export { ExternalTokenResponse } from "./response/ExternalTokenResponse.js";
+export {
+    IPerformanceClient,
+    PerformanceCallbackFunction,
+    InProgressPerformanceEvent,
+    QueueMeasurement,
+} from "./telemetry/performance/IPerformanceClient.js";
+export {
+    IntFields,
+    PerformanceEvent,
+    PerformanceEvents,
+    PerformanceEventStatus,
+    SubMeasurement,
+} from "./telemetry/performance/PerformanceEvent.js";
+export { IPerformanceMeasurement } from "./telemetry/performance/IPerformanceMeasurement.js";
+export {
+    PerformanceClient,
+    PreQueueEvent,
+} from "./telemetry/performance/PerformanceClient.js";
+export { StubPerformanceClient } from "./telemetry/performance/StubPerformanceClient.js";
+
+export { PopTokenGenerator } from "./crypto/PopTokenGenerator.js";