@azure/msal-common 14.14.2 → 14.16.0

package/src/index.ts

@@ -8,253 +8,10 @@
  * @module @azure/msal-common
  */
 
-import * as AuthToken from "./account/AuthToken";
-import * as AuthorityFactory from "./authority/AuthorityFactory";
-import * as CacheHelpers from "./cache/utils/CacheHelpers";
-import * as TimeUtils from "./utils/TimeUtils";
-import * as UrlUtils from "./utils/UrlUtils";
-import * as ClientAssertionUtils from "./utils/ClientAssertionUtils";
-import * as AADServerParamKeys from "./constants/AADServerParamKeys";
-export { AuthorizationCodeClient } from "./client/AuthorizationCodeClient";
-export { RefreshTokenClient } from "./client/RefreshTokenClient";
-export { SilentFlowClient } from "./client/SilentFlowClient";
-export { BaseClient } from "./client/BaseClient";
-export {
-    AuthOptions,
-    SystemOptions,
-    LoggerOptions,
-    CacheOptions,
-    DEFAULT_SYSTEM_OPTIONS,
-    AzureCloudOptions,
-    ApplicationTelemetry,
-} from "./config/ClientConfiguration";
-export {
-    IAppTokenProvider,
-    AppTokenProviderParameters,
-    AppTokenProviderResult,
-} from "./config/AppTokenProvider";
-export { ClientConfiguration } from "./config/ClientConfiguration";
-// Account
-export {
-    AccountInfo,
-    ActiveAccountFilters,
-    TenantProfile,
-    updateAccountTenantProfileData,
-    tenantIdMatchesHomeTenant,
-    buildTenantProfile,
-} from "./account/AccountInfo";
-export { AuthToken };
-export {
-    TokenClaims,
-    getTenantIdFromIdTokenClaims,
-} from "./account/TokenClaims";
-export { TokenClaims as IdTokenClaims } from "./account/TokenClaims";
-export { CcsCredential, CcsCredentialType } from "./account/CcsCredential";
-export {
-    ClientInfo,
-    buildClientInfo,
-    buildClientInfoFromHomeAccountId,
-} from "./account/ClientInfo";
-// Authority
-export {
-    Authority,
-    formatAuthorityUri,
-    buildStaticAuthorityOptions,
-} from "./authority/Authority";
-export {
-    AuthorityOptions,
-    AzureCloudInstance,
-    StaticAuthorityOptions,
-} from "./authority/AuthorityOptions";
-export { AuthorityFactory };
-export { AuthorityType } from "./authority/AuthorityType";
-export { ProtocolMode } from "./authority/ProtocolMode";
-export { OIDCOptions } from "./authority/OIDCOptions";
-// Broker
-export { INativeBrokerPlugin } from "./broker/nativeBroker/INativeBrokerPlugin";
-// Cache
-export { CacheManager, DefaultStorageClass } from "./cache/CacheManager";
-export {
-    AccountCache,
-    AccountFilter,
-    AccessTokenCache,
-    IdTokenCache,
-    RefreshTokenCache,
-    AppMetadataCache,
-    CredentialFilter,
-    ValidCacheType,
-    ValidCredentialType,
-    TokenKeys,
-} from "./cache/utils/CacheTypes";
-export { CacheRecord } from "./cache/entities/CacheRecord";
-export { CredentialEntity } from "./cache/entities/CredentialEntity";
-export { CacheHelpers };
-export { AppMetadataEntity } from "./cache/entities/AppMetadataEntity";
-export { AccountEntity } from "./cache/entities/AccountEntity";
-export { IdTokenEntity } from "./cache/entities/IdTokenEntity";
-export { AccessTokenEntity } from "./cache/entities/AccessTokenEntity";
-export { RefreshTokenEntity } from "./cache/entities/RefreshTokenEntity";
-export { ServerTelemetryEntity } from "./cache/entities/ServerTelemetryEntity";
-export { AuthorityMetadataEntity } from "./cache/entities/AuthorityMetadataEntity";
-export { ThrottlingEntity } from "./cache/entities/ThrottlingEntity";
-export { ICachePlugin } from "./cache/interface/ICachePlugin";
-export { TokenCacheContext } from "./cache/persistence/TokenCacheContext";
-export { ISerializableTokenCache } from "./cache/interface/ISerializableTokenCache";
-// Network Interface
-export {
-    INetworkModule,
-    NetworkRequestOptions,
-    StubbedNetworkModule,
-} from "./network/INetworkModule";
-export {
-    NetworkManager,
-    NetworkResponse,
-    UrlToHttpRequestOptions,
-} from "./network/NetworkManager";
-export { ThrottlingUtils } from "./network/ThrottlingUtils";
-export { RequestThumbprint } from "./network/RequestThumbprint";
-export { IUri } from "./url/IUri";
-export { UrlString } from "./url/UrlString";
-// Crypto Interface
-export {
-    ICrypto,
-    PkceCodes,
-    DEFAULT_CRYPTO_IMPLEMENTATION,
-    SignedHttpRequestParameters,
-} from "./crypto/ICrypto";
-export { SignedHttpRequest, ShrOptions } from "./crypto/SignedHttpRequest";
-export { IGuidGenerator } from "./crypto/IGuidGenerator";
-export { JoseHeader } from "./crypto/JoseHeader";
-// Request
-export { BaseAuthRequest } from "./request/BaseAuthRequest";
-export { CommonAuthorizationUrlRequest } from "./request/CommonAuthorizationUrlRequest";
-export { CommonAuthorizationCodeRequest } from "./request/CommonAuthorizationCodeRequest";
-export { CommonRefreshTokenRequest } from "./request/CommonRefreshTokenRequest";
-export { CommonClientCredentialRequest } from "./request/CommonClientCredentialRequest";
-export { CommonOnBehalfOfRequest } from "./request/CommonOnBehalfOfRequest";
-export { CommonSilentFlowRequest } from "./request/CommonSilentFlowRequest";
-export { CommonDeviceCodeRequest } from "./request/CommonDeviceCodeRequest";
-export { CommonEndSessionRequest } from "./request/CommonEndSessionRequest";
-export { CommonUsernamePasswordRequest } from "./request/CommonUsernamePasswordRequest";
-export { NativeRequest } from "./request/NativeRequest";
-export { NativeSignOutRequest } from "./request/NativeSignOutRequest";
-export { RequestParameterBuilder } from "./request/RequestParameterBuilder";
-export { StoreInCache } from "./request/StoreInCache";
-export {
-    ClientAssertion,
-    ClientAssertionConfig,
-    ClientAssertionCallback,
-} from "./account/ClientCredentials";
-// Response
-export { AzureRegion } from "./authority/AzureRegion";
-export { AzureRegionConfiguration } from "./authority/AzureRegionConfiguration";
-export { AuthenticationResult } from "./response/AuthenticationResult";
-export { AuthorizationCodePayload } from "./response/AuthorizationCodePayload";
-export { ServerAuthorizationCodeResponse } from "./response/ServerAuthorizationCodeResponse";
-export { ServerAuthorizationTokenResponse } from "./response/ServerAuthorizationTokenResponse";
-export { ExternalTokenResponse } from "./response/ExternalTokenResponse";
-export {
-    DeviceCodeResponse,
-    ServerDeviceCodeResponse,
-} from "./response/DeviceCodeResponse";
-export {
-    ResponseHandler,
-    buildAccountToCache,
-} from "./response/ResponseHandler";
-export { ScopeSet } from "./request/ScopeSet";
-export { AuthenticationHeaderParser } from "./request/AuthenticationHeaderParser";
-// Logger Callback
-export { ILoggerCallback, LogLevel, Logger } from "./logger/Logger";
-// Errors
-export {
-    InteractionRequiredAuthError,
-    InteractionRequiredAuthErrorCodes,
-    InteractionRequiredAuthErrorMessage,
-    createInteractionRequiredAuthError,
-} from "./error/InteractionRequiredAuthError";
-export {
-    AuthError,
-    AuthErrorMessage,
-    AuthErrorCodes,
-    createAuthError,
-} from "./error/AuthError";
-export { ServerError } from "./error/ServerError";
-export { CacheError, CacheErrorCodes } from "./error/CacheError";
-export {
-    ClientAuthError,
-    ClientAuthErrorMessage,
-    ClientAuthErrorCodes,
-    createClientAuthError,
-} from "./error/ClientAuthError";
-export {
-    ClientConfigurationError,
-    ClientConfigurationErrorMessage,
-    ClientConfigurationErrorCodes,
-    createClientConfigurationError,
-} from "./error/ClientConfigurationError";
-// Constants and Utils
-export { getClientAssertion } from "./utils/ClientAssertionUtils";
-export {
-    Constants,
-    OIDC_DEFAULT_SCOPES,
-    PromptValue,
-    PersistentCacheKeys,
-    ServerResponseType,
-    ResponseMode,
-    CacheOutcome,
-    CredentialType,
-    CacheType,
-    CacheAccountType,
-    AuthenticationScheme,
-    CodeChallengeMethodValues,
-    PasswordGrantConstants,
-    ThrottlingConstants,
-    ClaimsRequestKeys,
-    HeaderNames,
-    Errors,
-    THE_FAMILY_ID,
-    ONE_DAY_IN_MS,
-    GrantType,
-    AADAuthorityConstants,
-    HttpStatus,
-    DEFAULT_TOKEN_RENEWAL_OFFSET_SEC,
-    JsonWebTokenTypes,
-} from "./utils/Constants";
-export { AADServerParamKeys };
-export { StringUtils } from "./utils/StringUtils";
-export { StringDict } from "./utils/MsalTypes";
-export {
-    ProtocolUtils,
-    RequestStateObject,
-    LibraryStateObject,
-} from "./utils/ProtocolUtils";
-export { TimeUtils, UrlUtils, ClientAssertionUtils };
-export * from "./utils/FunctionWrappers";
-// Server Telemetry
-export { ServerTelemetryManager } from "./telemetry/server/ServerTelemetryManager";
-export { ServerTelemetryRequest } from "./telemetry/server/ServerTelemetryRequest";
-
-// Performance Telemetry
-export {
-    IPerformanceClient,
-    PerformanceCallbackFunction,
-    InProgressPerformanceEvent,
-    QueueMeasurement,
-} from "./telemetry/performance/IPerformanceClient";
-export {
-    IntFields,
-    PerformanceEvent,
-    PerformanceEvents,
-    PerformanceEventStatus,
-    SubMeasurement,
-} from "./telemetry/performance/PerformanceEvent";
-export { IPerformanceMeasurement } from "./telemetry/performance/IPerformanceMeasurement";
-export {
-    PerformanceClient,
-    PreQueueEvent,
-} from "./telemetry/performance/PerformanceClient";
-export { StubPerformanceClient } from "./telemetry/performance/StubPerformanceClient";
-
-export { PopTokenGenerator } from "./crypto/PopTokenGenerator";
-
-export { version } from "./packageMetadata";
+/**
+ * This file is the entrypoint when importing without a specific subpath e.g. "import { someExport } from @azure/msal-common"
+ *  Additional exports should be added to the applicable exports-*.ts files
+ */
+export * from "./exports-common.js";
+export * from "./exports-browser-only.js";
+export * from "./exports-node-only.js";

package/src/logger/Logger.ts

@@ -3,8 +3,8 @@
  * Licensed under the MIT License.
  */
 
-import { LoggerOptions } from "../config/ClientConfiguration";
-import { Constants } from "../utils/Constants";
+import { LoggerOptions } from "../config/ClientConfiguration.js";
+import { Constants } from "../utils/Constants.js";
 
 /**
  * Options for logger messages.

package/src/network/INetworkModule.ts

@@ -6,8 +6,8 @@
 import {
     ClientAuthErrorCodes,
     createClientAuthError,
-} from "../error/ClientAuthError";
-import { NetworkResponse } from "./NetworkManager";
+} from "../error/ClientAuthError.js";
+import { NetworkResponse } from "./NetworkResponse.js";
 
 /**
  * Options allowed by network request APIs.

package/src/network/NetworkResponse.ts

@@ -0,0 +1,10 @@
+/*
+ * Copyright (c) Microsoft Corporation. All rights reserved.
+ * Licensed under the MIT License.
+ */
+
+export type NetworkResponse<T> = {
+    headers: Record<string, string>;
+    body: T;
+    status: number;
+};

package/src/network/RequestThumbprint.ts

@@ -3,8 +3,8 @@
  * Licensed under the MIT License.
  */
 
-import { ShrOptions } from "../crypto/SignedHttpRequest";
-import { AuthenticationScheme } from "../utils/Constants";
+import { ShrOptions } from "../crypto/SignedHttpRequest.js";
+import { AuthenticationScheme } from "../utils/Constants.js";
 
 /**
  * Type representing a unique request thumbprint.

package/src/network/ThrottlingUtils.ts

@@ -3,18 +3,18 @@
  * Licensed under the MIT License.
  */
 
-import { NetworkResponse } from "./NetworkManager";
-import { ServerAuthorizationTokenResponse } from "../response/ServerAuthorizationTokenResponse";
+import { NetworkResponse } from "./NetworkResponse.js";
+import { ServerAuthorizationTokenResponse } from "../response/ServerAuthorizationTokenResponse.js";
 import {
     HeaderNames,
     ThrottlingConstants,
     Constants,
-} from "../utils/Constants";
-import { CacheManager } from "../cache/CacheManager";
-import { ServerError } from "../error/ServerError";
-import { RequestThumbprint } from "./RequestThumbprint";
-import { ThrottlingEntity } from "../cache/entities/ThrottlingEntity";
-import { BaseAuthRequest } from "../request/BaseAuthRequest";
+} from "../utils/Constants.js";
+import { CacheManager } from "../cache/CacheManager.js";
+import { ServerError } from "../error/ServerError.js";
+import { RequestThumbprint } from "./RequestThumbprint.js";
+import { ThrottlingEntity } from "../cache/entities/ThrottlingEntity.js";
+import { BaseAuthRequest } from "../request/BaseAuthRequest.js";
 
 /** @internal */
 export class ThrottlingUtils {

package/src/packageMetadata.ts

@@ -1,3 +1,3 @@
 /* eslint-disable header/header */
 export const name = "@azure/msal-common";
-export const version = "14.14.2";
+export const version = "14.16.0";

package/src/request/AuthenticationHeaderParser.ts

@@ -6,8 +6,8 @@
 import {
     createClientConfigurationError,
     ClientConfigurationErrorCodes,
-} from "../error/ClientConfigurationError";
-import { Constants, HeaderNames } from "../utils/Constants";
+} from "../error/ClientConfigurationError.js";
+import { Constants, HeaderNames } from "../utils/Constants.js";
 
 type WWWAuthenticateChallenges = {
     nonce?: string;

package/src/request/BaseAuthRequest.ts

@@ -3,11 +3,11 @@
  * Licensed under the MIT License.
  */
 
-import { AuthenticationScheme } from "../utils/Constants";
-import { AzureCloudOptions } from "../config/ClientConfiguration";
-import { StringDict } from "../utils/MsalTypes";
-import { StoreInCache } from "./StoreInCache";
-import { ShrOptions } from "../crypto/SignedHttpRequest";
+import { AuthenticationScheme } from "../utils/Constants.js";
+import { AzureCloudOptions } from "../config/ClientConfiguration.js";
+import { StringDict } from "../utils/MsalTypes.js";
+import { StoreInCache } from "./StoreInCache.js";
+import { ShrOptions } from "../crypto/SignedHttpRequest.js";
 
 /**
  * BaseAuthRequest
@@ -29,6 +29,7 @@ import { ShrOptions } from "../crypto/SignedHttpRequest";
  * - storeInCache            - Object containing boolean values indicating whether to store tokens in the cache or not (default is true)
  * - scenarioId              - Scenario id to track custom user prompts
  * - popKid                  - Key ID to identify the public key for PoP token request
+ * - embeddedClientId        - Embedded client id. When specified, broker client id (brk_client_id) and redirect uri (brk_redirect_uri) params are set with values from the config, overriding the corresponding extra parameters, if present.
  */
 export type BaseAuthRequest = {
     authority: string;
@@ -50,4 +51,5 @@ export type BaseAuthRequest = {
     storeInCache?: StoreInCache;
     scenarioId?: string;
     popKid?: string;
+    embeddedClientId?: string;
 };

package/src/request/CommonAuthorizationCodeRequest.ts

@@ -3,9 +3,9 @@
  * Licensed under the MIT License.
  */
 
-import { BaseAuthRequest } from "./BaseAuthRequest";
-import { StringDict } from "../utils/MsalTypes";
-import { CcsCredential } from "../account/CcsCredential";
+import { BaseAuthRequest } from "./BaseAuthRequest.js";
+import { StringDict } from "../utils/MsalTypes.js";
+import { CcsCredential } from "../account/CcsCredential.js";
 
 /**
  * Request object passed by user to acquire a token from the server exchanging a valid authorization code (second leg of OAuth2.0 Authorization Code flow)

package/src/request/CommonAuthorizationUrlRequest.ts

@@ -3,10 +3,10 @@
  * Licensed under the MIT License.
  */
 
-import { ResponseMode } from "../utils/Constants";
-import { StringDict } from "../utils/MsalTypes";
-import { BaseAuthRequest } from "./BaseAuthRequest";
-import { AccountInfo } from "../account/AccountInfo";
+import { ResponseMode } from "../utils/Constants.js";
+import { StringDict } from "../utils/MsalTypes.js";
+import { BaseAuthRequest } from "./BaseAuthRequest.js";
+import { AccountInfo } from "../account/AccountInfo.js";
 
 /**
  * Request object passed by user to retrieve a Code from the server (first leg of authorization code grant flow)

package/src/request/CommonClientCredentialRequest.ts

@@ -3,9 +3,9 @@
  * Licensed under the MIT License.
  */
 
-import { BaseAuthRequest } from "./BaseAuthRequest";
-import { AzureRegion } from "../authority/AzureRegion";
-import { ClientAssertion } from "../account/ClientCredentials";
+import { BaseAuthRequest } from "./BaseAuthRequest.js";
+import { AzureRegion } from "../authority/AzureRegion.js";
+import { ClientAssertion } from "../account/ClientCredentials.js";
 
 /**
  * CommonClientCredentialRequest

package/src/request/CommonDeviceCodeRequest.ts

@@ -3,9 +3,9 @@
  * Licensed under the MIT License.
  */
 
-import { DeviceCodeResponse } from "../response/DeviceCodeResponse";
-import { StringDict } from "../utils/MsalTypes";
-import { BaseAuthRequest } from "./BaseAuthRequest";
+import { DeviceCodeResponse } from "../response/DeviceCodeResponse.js";
+import { StringDict } from "../utils/MsalTypes.js";
+import { BaseAuthRequest } from "./BaseAuthRequest.js";
 
 /**
  * Parameters for Oauth2 device code flow.

package/src/request/CommonEndSessionRequest.ts

@@ -3,8 +3,8 @@
  * Licensed under the MIT License.
  */
 
-import { AccountInfo } from "../account/AccountInfo";
-import { StringDict } from "../utils/MsalTypes";
+import { AccountInfo } from "../account/AccountInfo.js";
+import { StringDict } from "../utils/MsalTypes.js";
 
 /**
  * CommonEndSessionRequest

package/src/request/CommonOnBehalfOfRequest.ts

@@ -3,7 +3,7 @@
  * Licensed under the MIT License.
  */
 
-import { BaseAuthRequest } from "./BaseAuthRequest";
+import { BaseAuthRequest } from "./BaseAuthRequest.js";
 
 /**
  * - scopes                  - Array of scopes the application is requesting access to.

package/src/request/CommonRefreshTokenRequest.ts

@@ -3,9 +3,9 @@
  * Licensed under the MIT License.
  */
 
-import { BaseAuthRequest } from "./BaseAuthRequest";
-import { CcsCredential } from "../account/CcsCredential";
-import { StringDict } from "../utils/MsalTypes";
+import { BaseAuthRequest } from "./BaseAuthRequest.js";
+import { CcsCredential } from "../account/CcsCredential.js";
+import { StringDict } from "../utils/MsalTypes.js";
 
 /**
  * CommonRefreshTokenRequest

package/src/request/CommonSilentFlowRequest.ts

@@ -3,9 +3,9 @@
  * Licensed under the MIT License.
  */
 
-import { AccountInfo } from "../account/AccountInfo";
-import { StringDict } from "../utils/MsalTypes";
-import { BaseAuthRequest } from "./BaseAuthRequest";
+import { AccountInfo } from "../account/AccountInfo.js";
+import { StringDict } from "../utils/MsalTypes.js";
+import { BaseAuthRequest } from "./BaseAuthRequest.js";
 
 /**
  * SilentFlow parameters passed by the user to retrieve credentials silently

package/src/request/CommonUsernamePasswordRequest.ts

@@ -3,7 +3,7 @@
  * Licensed under the MIT License.
  */
 
-import { BaseAuthRequest } from "./BaseAuthRequest";
+import { BaseAuthRequest } from "./BaseAuthRequest.js";
 
 /**
  * CommonUsernamePassword parameters passed by the user to retrieve credentials

package/src/request/NativeRequest.ts

@@ -3,7 +3,7 @@
  * Licensed under the MIT License.
  */
 
-import { StringDict } from "../utils/MsalTypes";
+import { StringDict } from "../utils/MsalTypes.js";
 
 export type NativeRequest = {
     clientId: string;

package/src/request/RequestParameterBuilder.ts

@@ -13,28 +13,59 @@ import {
     OIDC_DEFAULT_SCOPES,
     ThrottlingConstants,
     HeaderNames,
-} from "../utils/Constants";
-import * as AADServerParamKeys from "../constants/AADServerParamKeys";
-import { ScopeSet } from "./ScopeSet";
+} from "../utils/Constants.js";
+import * as AADServerParamKeys from "../constants/AADServerParamKeys.js";
+import { ScopeSet } from "./ScopeSet.js";
 import {
     createClientConfigurationError,
     ClientConfigurationErrorCodes,
-} from "../error/ClientConfigurationError";
-import { StringDict } from "../utils/MsalTypes";
-import { RequestValidator } from "./RequestValidator";
+} from "../error/ClientConfigurationError.js";
+import { StringDict } from "../utils/MsalTypes.js";
+import { RequestValidator } from "./RequestValidator.js";
 import {
     ApplicationTelemetry,
     LibraryInfo,
-} from "../config/ClientConfiguration";
-import { ServerTelemetryManager } from "../telemetry/server/ServerTelemetryManager";
-import { ClientInfo } from "../account/ClientInfo";
+} from "../config/ClientConfiguration.js";
+import { ServerTelemetryManager } from "../telemetry/server/ServerTelemetryManager.js";
+import { ClientInfo } from "../account/ClientInfo.js";
+import { IPerformanceClient } from "../telemetry/performance/IPerformanceClient.js";
+
+function instrumentBrokerParams(
+    parameters: Map<string, string>,
+    correlationId?: string,
+    performanceClient?: IPerformanceClient
+) {
+    if (!correlationId) {
+        return;
+    }
+
+    const clientId = parameters.get(AADServerParamKeys.CLIENT_ID);
+    if (clientId && parameters.has(AADServerParamKeys.BROKER_CLIENT_ID)) {
+        performanceClient?.addFields(
+            {
+                embeddedClientId: clientId,
+                embeddedRedirectUri: parameters.get(
+                    AADServerParamKeys.REDIRECT_URI
+                ),
+            },
+            correlationId
+        );
+    }
+}
 
 /** @internal */
 export class RequestParameterBuilder {
     private parameters: Map<string, string>;
+    private readonly performanceClient?: IPerformanceClient;
+    private readonly correlationId?: string;
 
-    constructor() {
+    constructor(
+        correlationId?: string,
+        performanceClient?: IPerformanceClient
+    ) {
         this.parameters = new Map<string, string>();
+        this.performanceClient = performanceClient;
+        this.correlationId = correlationId;
     }
 
     /**
@@ -598,6 +629,19 @@ export class RequestParameterBuilder {
         );
     }
 
+    addBrokerParameters(params: {
+        brokerClientId: string;
+        brokerRedirectUri: string;
+    }): void {
+        const brokerParams: StringDict = {};
+        brokerParams[AADServerParamKeys.BROKER_CLIENT_ID] =
+            params.brokerClientId;
+        brokerParams[AADServerParamKeys.BROKER_REDIRECT_URI] =
+            params.brokerRedirectUri;
+
+        this.addExtraQueryParameters(brokerParams);
+    }
+
     /**
      * Utility to create a URL from the params map
      */
@@ -608,6 +652,12 @@ export class RequestParameterBuilder {
             queryParameterArray.push(`${key}=${value}`);
         });
 
+        instrumentBrokerParams(
+            this.parameters,
+            this.correlationId,
+            this.performanceClient
+        );
+
         return queryParameterArray.join("&");
     }
 }

package/src/request/RequestValidator.ts

@@ -6,8 +6,8 @@
 import {
     createClientConfigurationError,
     ClientConfigurationErrorCodes,
-} from "../error/ClientConfigurationError";
-import { PromptValue, CodeChallengeMethodValues } from "../utils/Constants";
+} from "../error/ClientConfigurationError.js";
+import { PromptValue, CodeChallengeMethodValues } from "../utils/Constants.js";
 
 /**
  * Validates server consumable params from the "request" objects

package/src/request/ScopeSet.ts

@@ -6,13 +6,13 @@
 import {
     createClientConfigurationError,
     ClientConfigurationErrorCodes,
-} from "../error/ClientConfigurationError";
-import { StringUtils } from "../utils/StringUtils";
+} from "../error/ClientConfigurationError.js";
+import { StringUtils } from "../utils/StringUtils.js";
 import {
     ClientAuthErrorCodes,
     createClientAuthError,
-} from "../error/ClientAuthError";
-import { Constants, OIDC_SCOPES } from "../utils/Constants";
+} from "../error/ClientAuthError.js";
+import { Constants, OIDC_SCOPES } from "../utils/Constants.js";
 
 /**
  * The ScopeSet class creates a set of scopes. Scopes are case-insensitive, unique values, so the Set object in JS makes

package/src/response/AuthenticationResult.ts

@@ -3,7 +3,7 @@
  * Licensed under the MIT License.
  */
 
-import { AccountInfo } from "../account/AccountInfo";
+import { AccountInfo } from "../account/AccountInfo.js";
 
 /**
  * Result returned from the authority's token endpoint.