@azure/msal-common 14.16.0 → 15.0.1

package/lib/index-browser.cjs

@@ -1,8 +1,8 @@
-/*! @azure/msal-common v14.16.0 2024-11-05 */
+/*! @azure/msal-common v15.0.1 2025-01-15 */
 'use strict';
 'use strict';
 
-var indexNode = require('./index-node-C9XsExml.js');
+var indexNode = require('./index-node-uiuRUOAe.js');
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.

package/lib/{index-node-C9XsExml.js → index-node-uiuRUOAe.js}

@@ -1,4 +1,4 @@
-/*! @azure/msal-common v14.16.0 2024-11-05 */
+/*! @azure/msal-common v15.0.1 2025-01-15 */
 'use strict';
 'use strict';
 
@@ -108,12 +108,6 @@ const HeaderNames = {
  * Persistent cache keys MSAL which stay while user is logged in.
  */
 const PersistentCacheKeys = {
-    ID_TOKEN: "idtoken",
-    CLIENT_INFO: "client.info",
-    ADAL_ID_TOKEN: "adal.idtoken",
-    ERROR: "error",
-    ERROR_DESC: "error.description",
-    ACTIVE_ACCOUNT: "active-account",
     ACTIVE_ACCOUNT_FILTERS: "active-account-filters", // new cache entry for active_account for a more robust version for browser
 };
 /**
@@ -851,14 +845,14 @@ const missingSshKid = "missing_ssh_kid";
 const missingNonceAuthenticationHeader = "missing_nonce_authentication_header";
 const invalidAuthenticationHeader = "invalid_authentication_header";
 const cannotSetOIDCOptions = "cannot_set_OIDCOptions";
-const cannotAllowNativeBroker = "cannot_allow_native_broker";
+const cannotAllowPlatformBroker = "cannot_allow_platform_broker";
 const authorityMismatch = "authority_mismatch";
 
 var ClientConfigurationErrorCodes = /*#__PURE__*/Object.freeze({
     __proto__: null,
     authorityMismatch: authorityMismatch,
     authorityUriInsecure: authorityUriInsecure,
-    cannotAllowNativeBroker: cannotAllowNativeBroker,
+    cannotAllowPlatformBroker: cannotAllowPlatformBroker,
     cannotSetOIDCOptions: cannotSetOIDCOptions,
     claimsRequestParsingError: claimsRequestParsingError,
     emptyInputScopesError: emptyInputScopesError,
@@ -905,7 +899,7 @@ const ClientConfigurationErrorMessages = {
     [missingNonceAuthenticationHeader]: "Unable to find an authentication header containing server nonce. Either the Authentication-Info or WWW-Authenticate headers must be present in order to obtain a server nonce.",
     [invalidAuthenticationHeader]: "Invalid authentication header provided",
     [cannotSetOIDCOptions]: "Cannot set OIDCOptions parameter. Please change the protocol mode to OIDC or use a non-Microsoft authority.",
-    [cannotAllowNativeBroker]: "Cannot set allowNativeBroker parameter to true when not in AAD protocol mode.",
+    [cannotAllowPlatformBroker]: "Cannot set allowPlatformBroker parameter to true when not in AAD protocol mode.",
     [authorityMismatch]: "Authority mismatch error. Authority provided in login request or PublicClientApplication config does not match the environment of the provided account. Please use a matching account or make an interactive request to login to this authority.",
 };
 /**
@@ -993,9 +987,9 @@ const ClientConfigurationErrorMessage = {
         code: cannotSetOIDCOptions,
         desc: ClientConfigurationErrorMessages[cannotSetOIDCOptions],
     },
-    cannotAllowNativeBroker: {
-        code: cannotAllowNativeBroker,
-        desc: ClientConfigurationErrorMessages[cannotAllowNativeBroker],
+    cannotAllowPlatformBroker: {
+        code: cannotAllowPlatformBroker,
+        desc: ClientConfigurationErrorMessages[cannotAllowPlatformBroker],
     },
     authorityMismatch: {
         code: authorityMismatch,
@@ -1669,6 +1663,7 @@ const PerformanceEvents = {
      */
     InitializeSilentRequest: "initializeSilentRequest",
     InitializeClientApplication: "initializeClientApplication",
+    InitializeCache: "initializeCache",
     /**
      * Helper function in SilentIframeClient class (msal-browser).
      */
@@ -1746,6 +1741,8 @@ const PerformanceEvents = {
      */
     ClearTokensAndKeysWithClaims: "clearTokensAndKeysWithClaims",
     CacheManagerGetRefreshToken: "cacheManagerGetRefreshToken",
+    ImportExistingCache: "importExistingCache",
+    SetUserData: "setUserData",
     /**
      * Crypto Operations
      */
@@ -1754,6 +1751,12 @@ const PerformanceEvents = {
     GenerateCodeChallengeFromVerifier: "generateCodeChallengeFromVerifier",
     Sha256Digest: "sha256Digest",
     GetRandomValues: "getRandomValues",
+    GenerateHKDF: "generateHKDF",
+    GenerateBaseKey: "generateBaseKey",
+    Base64Decode: "base64Decode",
+    UrlEncodeArr: "urlEncodeArr",
+    Encrypt: "encrypt",
+    Decrypt: "decrypt",
 };
 const PerformanceEventAbbreviations = new Map([
     [PerformanceEvents.AcquireTokenByCode, "ATByCode"],
@@ -1838,6 +1841,9 @@ const PerformanceEventAbbreviations = new Map([
         PerformanceEvents.InitializeClientApplication,
         "InitClientApplication",
     ],
+    [PerformanceEvents.InitializeCache, "InitCache"],
+    [PerformanceEvents.ImportExistingCache, "importCache"],
+    [PerformanceEvents.SetUserData, "setUserData"],
     [PerformanceEvents.SilentIframeClientTokenHelper, "SIClientTHelper"],
     [
         PerformanceEvents.SilentHandlerInitiateAuthRequest,
@@ -1971,6 +1977,12 @@ const PerformanceEventAbbreviations = new Map([
     ],
     [PerformanceEvents.Sha256Digest, "Sha256Digest"],
     [PerformanceEvents.GetRandomValues, "GetRandomValues"],
+    [PerformanceEvents.GenerateHKDF, "genHKDF"],
+    [PerformanceEvents.GenerateBaseKey, "genBaseKey"],
+    [PerformanceEvents.Base64Decode, "b64Decode"],
+    [PerformanceEvents.UrlEncodeArr, "urlEncArr"],
+    [PerformanceEvents.Encrypt, "encrypt"],
+    [PerformanceEvents.Decrypt, "decrypt"],
 ]);
 /**
  * State of the performance event.
@@ -1996,6 +2008,8 @@ const IntFields = new Set([
     "multiMatchedAT",
     "multiMatchedID",
     "multiMatchedRT",
+    "unencryptedCacheCount",
+    "encryptedCacheExpiredCount",
 ]);
 
 /*
@@ -3816,7 +3830,7 @@ class Logger {
 
 /* eslint-disable header/header */
 const name = "@azure/msal-common";
-const version = "14.16.0";
+const version = "15.0.1";
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4595,24 +4609,24 @@ class CacheManager {
      * @param storeInCache {?StoreInCache}
      * @param correlationId {?string} correlation id
      */
-    async saveCacheRecord(cacheRecord, storeInCache, correlationId) {
+    async saveCacheRecord(cacheRecord, correlationId, storeInCache) {
         if (!cacheRecord) {
             throw createClientAuthError(invalidCacheRecord);
         }
         try {
             if (!!cacheRecord.account) {
-                this.setAccount(cacheRecord.account);
+                await this.setAccount(cacheRecord.account, correlationId);
             }
             if (!!cacheRecord.idToken && storeInCache?.idToken !== false) {
-                this.setIdTokenCredential(cacheRecord.idToken);
+                await this.setIdTokenCredential(cacheRecord.idToken, correlationId);
             }
             if (!!cacheRecord.accessToken &&
                 storeInCache?.accessToken !== false) {
-                await this.saveAccessToken(cacheRecord.accessToken);
+                await this.saveAccessToken(cacheRecord.accessToken, correlationId);
             }
             if (!!cacheRecord.refreshToken &&
                 storeInCache?.refreshToken !== false) {
-                this.setRefreshTokenCredential(cacheRecord.refreshToken);
+                await this.setRefreshTokenCredential(cacheRecord.refreshToken, correlationId);
             }
             if (!!cacheRecord.appMetadata) {
                 this.setAppMetadata(cacheRecord.appMetadata);
@@ -4642,7 +4656,7 @@ class CacheManager {
      * saves access token credential
      * @param credential
      */
-    async saveAccessToken(credential) {
+    async saveAccessToken(credential, correlationId) {
         const accessTokenFilter = {
             clientId: credential.clientId,
             credentialType: credential.credentialType,
@@ -4669,7 +4683,7 @@ class CacheManager {
             }
         });
         await Promise.all(removedAccessTokens);
-        this.setAccessTokenCredential(credential);
+        await this.setAccessTokenCredential(credential, correlationId);
     }
     /**
      * Retrieve account entities matching all provided tenant-agnostic filters; if no filter is set, get all account entities in the cache
@@ -4955,61 +4969,6 @@ class CacheManager {
         });
         await Promise.all(removedCredentials);
     }
-    /**
-     * Migrates a single-tenant account and all it's associated alternate cross-tenant account objects in the
-     * cache into a condensed multi-tenant account object with tenant profiles.
-     * @param accountKey
-     * @param accountEntity
-     * @param logger
-     * @returns
-     */
-    updateOutdatedCachedAccount(accountKey, accountEntity, logger) {
-        // Only update if account entity is defined and has no tenantProfiles object (is outdated)
-        if (accountEntity && accountEntity.isSingleTenant()) {
-            this.commonLogger?.verbose("updateOutdatedCachedAccount: Found a single-tenant (outdated) account entity in the cache, migrating to multi-tenant account entity");
-            // Get keys of all accounts belonging to user
-            const matchingAccountKeys = this.getAccountKeys().filter((key) => {
-                return key.startsWith(accountEntity.homeAccountId);
-            });
-            // Get all account entities belonging to user
-            const accountsToMerge = [];
-            matchingAccountKeys.forEach((key) => {
-                const account = this.getCachedAccountEntity(key);
-                if (account) {
-                    accountsToMerge.push(account);
-                }
-            });
-            // Set base account to home account if available, any account if not
-            const baseAccount = accountsToMerge.find((account) => {
-                return tenantIdMatchesHomeTenant(account.realm, account.homeAccountId);
-            }) || accountsToMerge[0];
-            // Populate tenant profiles built from each account entity belonging to the user
-            baseAccount.tenantProfiles = accountsToMerge.map((account) => {
-                return {
-                    tenantId: account.realm,
-                    localAccountId: account.localAccountId,
-                    name: account.name,
-                    isHomeTenant: tenantIdMatchesHomeTenant(account.realm, account.homeAccountId),
-                };
-            });
-            const updatedAccount = CacheManager.toObject(new AccountEntity(), {
-                ...baseAccount,
-            });
-            const newAccountKey = updatedAccount.generateAccountKey();
-            // Clear cache of legacy account objects that have been collpsed into tenant profiles
-            matchingAccountKeys.forEach((key) => {
-                if (key !== newAccountKey) {
-                    this.removeOutdatedAccount(accountKey);
-                }
-            });
-            // Cache updated account object
-            this.setAccount(updatedAccount);
-            logger?.verbose("Updated an outdated account entity in the cache");
-            return updatedAccount;
-        }
-        // No update is necessary
-        return accountEntity;
-    }
     /**
      * returns a boolean if the given credential is removed
      * @param credential
@@ -5605,28 +5564,25 @@ class CacheManager {
 }
 /** @internal */
 class DefaultStorageClass extends CacheManager {
-    setAccount() {
+    async setAccount() {
         throw createClientAuthError(methodNotImplemented);
     }
     getAccount() {
         throw createClientAuthError(methodNotImplemented);
     }
-    getCachedAccountEntity() {
-        throw createClientAuthError(methodNotImplemented);
-    }
-    setIdTokenCredential() {
+    async setIdTokenCredential() {
         throw createClientAuthError(methodNotImplemented);
     }
     getIdTokenCredential() {
         throw createClientAuthError(methodNotImplemented);
     }
-    setAccessTokenCredential() {
+    async setAccessTokenCredential() {
         throw createClientAuthError(methodNotImplemented);
     }
     getAccessTokenCredential() {
         throw createClientAuthError(methodNotImplemented);
     }
-    setRefreshTokenCredential() {
+    async setRefreshTokenCredential() {
         throw createClientAuthError(methodNotImplemented);
     }
     getRefreshTokenCredential() {
@@ -5671,12 +5627,6 @@ class DefaultStorageClass extends CacheManager {
     getTokenKeys() {
         throw createClientAuthError(methodNotImplemented);
     }
-    updateCredentialCacheKey() {
-        throw createClientAuthError(methodNotImplemented);
-    }
-    removeOutdatedAccount() {
-        throw createClientAuthError(methodNotImplemented);
-    }
 }
 
 /*
@@ -6992,13 +6942,13 @@ class ResponseHandler {
                 !forceCacheRefreshTokenResponse &&
                 cacheRecord.account) {
                 const key = cacheRecord.account.generateAccountKey();
-                const account = this.cacheStorage.getAccount(key, this.logger);
+                const account = this.cacheStorage.getAccount(key);
                 if (!account) {
                     this.logger.warning("Account used to refresh tokens not in persistence, refreshed tokens will not be stored in the cache");
                     return await ResponseHandler.generateAuthenticationResult(this.cryptoObj, authority, cacheRecord, false, request, idTokenClaims, requestStateObj, undefined, serverRequestId);
                 }
             }
-            await this.cacheStorage.saveCacheRecord(cacheRecord, request.storeInCache, request.correlationId);
+            await this.cacheStorage.saveCacheRecord(cacheRecord, request.correlationId, request.storeInCache);
         }
         finally {
             if (this.persistencePlugin &&
@@ -7184,7 +7134,7 @@ function buildAccountToCache(cacheStorage, authority, homeAccountId, base64Decod
     });
     let cachedAccount = null;
     if (baseAccountKey) {
-        cachedAccount = cacheStorage.getAccount(baseAccountKey, logger);
+        cachedAccount = cacheStorage.getAccount(baseAccountKey);
     }
     const baseAccount = cachedAccount ||
         AccountEntity.createAccount({
@@ -7603,7 +7553,7 @@ class AuthorizationCodeClient extends BaseClient {
             });
         }
         this.addExtraQueryParams(request, parameterBuilder);
-        if (request.nativeBroker) {
+        if (request.platformBroker) {
             // signal ests that this is a WAM call
             parameterBuilder.addNativeBroker();
             // pass the req_cnf for POP
@@ -8449,4 +8399,4 @@ exports.invokeAsync = invokeAsync;
 exports.tenantIdMatchesHomeTenant = tenantIdMatchesHomeTenant;
 exports.updateAccountTenantProfileData = updateAccountTenantProfileData;
 exports.version = version;
-//# sourceMappingURL=index-node-C9XsExml.js.map
+//# sourceMappingURL=index-node-uiuRUOAe.js.map