@azure/msal-common 14.2.0 → 14.3.0

package/dist/cache/utils/CacheHelpers.mjs

@@ -0,0 +1,226 @@
+/*! @azure/msal-common v14.3.0 2023-10-30 */
+'use strict';
+import { extractTokenClaims } from '../../account/AuthToken.mjs';
+import { createClientAuthError } from '../../error/ClientAuthError.mjs';
+import { Separators, CredentialType, AuthenticationScheme } from '../../utils/Constants.mjs';
+import { TimeUtils } from '../../utils/TimeUtils.mjs';
+import { tokenClaimsCnfRequiredForSignedJwt } from '../../error/ClientAuthErrorCodes.mjs';
+
+/*
+ * Copyright (c) Microsoft Corporation. All rights reserved.
+ * Licensed under the MIT License.
+ */
+/**
+ * Cache Key: <home_account_id>-<environment>-<credential_type>-<client_id or familyId>-<realm>-<scopes>-<claims hash>-<scheme>
+ * IdToken Example: uid.utid-login.microsoftonline.com-idtoken-app_client_id-contoso.com
+ * AccessToken Example: uid.utid-login.microsoftonline.com-accesstoken-app_client_id-contoso.com-scope1 scope2--pop
+ * RefreshToken Example: uid.utid-login.microsoftonline.com-refreshtoken-1-contoso.com
+ * @param credentialEntity
+ * @returns
+ */
+function generateCredentialKey(credentialEntity) {
+    const credentialKey = [
+        generateAccountId(credentialEntity),
+        generateCredentialId(credentialEntity),
+        generateTarget(credentialEntity),
+        generateClaimsHash(credentialEntity),
+        generateScheme(credentialEntity),
+    ];
+    return credentialKey.join(Separators.CACHE_KEY_SEPARATOR).toLowerCase();
+}
+/**
+ * Create IdTokenEntity
+ * @param homeAccountId
+ * @param authenticationResult
+ * @param clientId
+ * @param authority
+ */
+function createIdTokenEntity(homeAccountId, environment, idToken, clientId, tenantId) {
+    const idTokenEntity = {
+        credentialType: CredentialType.ID_TOKEN,
+        homeAccountId: homeAccountId,
+        environment: environment,
+        clientId: clientId,
+        secret: idToken,
+        realm: tenantId,
+    };
+    return idTokenEntity;
+}
+/**
+ * Create AccessTokenEntity
+ * @param homeAccountId
+ * @param environment
+ * @param accessToken
+ * @param clientId
+ * @param tenantId
+ * @param scopes
+ * @param expiresOn
+ * @param extExpiresOn
+ */
+function createAccessTokenEntity(homeAccountId, environment, accessToken, clientId, tenantId, scopes, expiresOn, extExpiresOn, base64Decode, refreshOn, tokenType, userAssertionHash, keyId, requestedClaims, requestedClaimsHash) {
+    const atEntity = {
+        homeAccountId: homeAccountId,
+        credentialType: CredentialType.ACCESS_TOKEN,
+        secret: accessToken,
+        cachedAt: TimeUtils.nowSeconds().toString(),
+        expiresOn: expiresOn.toString(),
+        extendedExpiresOn: extExpiresOn.toString(),
+        environment: environment,
+        clientId: clientId,
+        realm: tenantId,
+        target: scopes,
+        tokenType: tokenType || AuthenticationScheme.BEARER,
+    };
+    if (userAssertionHash) {
+        atEntity.userAssertionHash = userAssertionHash;
+    }
+    if (refreshOn) {
+        atEntity.refreshOn = refreshOn.toString();
+    }
+    if (requestedClaims) {
+        atEntity.requestedClaims = requestedClaims;
+        atEntity.requestedClaimsHash = requestedClaimsHash;
+    }
+    /*
+     * Create Access Token With Auth Scheme instead of regular access token
+     * Cast to lower to handle "bearer" from ADFS
+     */
+    if (atEntity.tokenType?.toLowerCase() !==
+        AuthenticationScheme.BEARER.toLowerCase()) {
+        atEntity.credentialType = CredentialType.ACCESS_TOKEN_WITH_AUTH_SCHEME;
+        switch (atEntity.tokenType) {
+            case AuthenticationScheme.POP:
+                // Make sure keyId is present and add it to credential
+                const tokenClaims = extractTokenClaims(accessToken, base64Decode);
+                if (!tokenClaims?.cnf?.kid) {
+                    throw createClientAuthError(tokenClaimsCnfRequiredForSignedJwt);
+                }
+                atEntity.keyId = tokenClaims.cnf.kid;
+                break;
+            case AuthenticationScheme.SSH:
+                atEntity.keyId = keyId;
+        }
+    }
+    return atEntity;
+}
+/**
+ * Create RefreshTokenEntity
+ * @param homeAccountId
+ * @param authenticationResult
+ * @param clientId
+ * @param authority
+ */
+function createRefreshTokenEntity(homeAccountId, environment, refreshToken, clientId, familyId, userAssertionHash) {
+    const rtEntity = {
+        credentialType: CredentialType.REFRESH_TOKEN,
+        homeAccountId: homeAccountId,
+        environment: environment,
+        clientId: clientId,
+        secret: refreshToken,
+    };
+    if (userAssertionHash) {
+        rtEntity.userAssertionHash = userAssertionHash;
+    }
+    if (familyId) {
+        rtEntity.familyId = familyId;
+    }
+    return rtEntity;
+}
+function isCredentialEntity(entity) {
+    return (entity.hasOwnProperty("homeAccountId") &&
+        entity.hasOwnProperty("environment") &&
+        entity.hasOwnProperty("credentialType") &&
+        entity.hasOwnProperty("clientId") &&
+        entity.hasOwnProperty("secret"));
+}
+/**
+ * Validates an entity: checks for all expected params
+ * @param entity
+ */
+function isAccessTokenEntity(entity) {
+    if (!entity) {
+        return false;
+    }
+    return (isCredentialEntity(entity) &&
+        entity.hasOwnProperty("realm") &&
+        entity.hasOwnProperty("target") &&
+        (entity["credentialType"] === CredentialType.ACCESS_TOKEN ||
+            entity["credentialType"] ===
+                CredentialType.ACCESS_TOKEN_WITH_AUTH_SCHEME));
+}
+/**
+ * Validates an entity: checks for all expected params
+ * @param entity
+ */
+function isIdTokenEntity(entity) {
+    if (!entity) {
+        return false;
+    }
+    return (isCredentialEntity(entity) &&
+        entity.hasOwnProperty("realm") &&
+        entity["credentialType"] === CredentialType.ID_TOKEN);
+}
+/**
+ * Validates an entity: checks for all expected params
+ * @param entity
+ */
+function isRefreshTokenEntity(entity) {
+    if (!entity) {
+        return false;
+    }
+    return (isCredentialEntity(entity) &&
+        entity["credentialType"] === CredentialType.REFRESH_TOKEN);
+}
+/**
+ * Generate Account Id key component as per the schema: <home_account_id>-<environment>
+ */
+function generateAccountId(credentialEntity) {
+    const accountId = [
+        credentialEntity.homeAccountId,
+        credentialEntity.environment,
+    ];
+    return accountId.join(Separators.CACHE_KEY_SEPARATOR).toLowerCase();
+}
+/**
+ * Generate Credential Id key component as per the schema: <credential_type>-<client_id>-<realm>
+ */
+function generateCredentialId(credentialEntity) {
+    const clientOrFamilyId = credentialEntity.credentialType === CredentialType.REFRESH_TOKEN
+        ? credentialEntity.familyId || credentialEntity.clientId
+        : credentialEntity.clientId;
+    const credentialId = [
+        credentialEntity.credentialType,
+        clientOrFamilyId,
+        credentialEntity.realm || "",
+    ];
+    return credentialId.join(Separators.CACHE_KEY_SEPARATOR).toLowerCase();
+}
+/**
+ * Generate target key component as per schema: <target>
+ */
+function generateTarget(credentialEntity) {
+    return (credentialEntity.target || "").toLowerCase();
+}
+/**
+ * Generate requested claims key component as per schema: <requestedClaims>
+ */
+function generateClaimsHash(credentialEntity) {
+    return (credentialEntity.requestedClaimsHash || "").toLowerCase();
+}
+/**
+ * Generate scheme key componenet as per schema: <scheme>
+ */
+function generateScheme(credentialEntity) {
+    /*
+     * PoP Tokens and SSH certs include scheme in cache key
+     * Cast to lowercase to handle "bearer" from ADFS
+     */
+    return credentialEntity.tokenType &&
+        credentialEntity.tokenType.toLowerCase() !==
+            AuthenticationScheme.BEARER.toLowerCase()
+        ? credentialEntity.tokenType.toLowerCase()
+        : "";
+}
+
+export { createAccessTokenEntity, createIdTokenEntity, createRefreshTokenEntity, generateCredentialKey, isAccessTokenEntity, isCredentialEntity, isIdTokenEntity, isRefreshTokenEntity };
+//# sourceMappingURL=CacheHelpers.mjs.map

package/dist/cache/utils/CacheHelpers.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"CacheHelpers.mjs","sources":["../../../src/cache/utils/CacheHelpers.ts"],"sourcesContent":[null],"names":[],"mappings":";;;;;;;;AAWA;AAMA;AACA;AACA;;;;;AAUG;AACH;AAcA;;;;;;AAMG,QAAA,cAAA,CAAA,gBAAA,CAAA;AACH,QAAgB,kBAAA,CAAA,gBAAmB,CAC/B;AAkBJ,QAAA,cAAA,CAAA,gBAAA,CAAA;;;;;;;;;;AAUG;AACH,SAAA,mBAAuC,CAAA,aACtB,EAAA,WAAA,SACb,EAAA,QAAA,EAAa,UACF;AAwEf,IAAA,MAAA,aAAA,GAAA;;;;;;AAMG,QAAA,KAAA,EAAA,QAAA;AACH,KAAA,CAAA;AA2BA,IAAA,OAAA,aAAgB;AAUhB,CAAA;;;AAGG;AACH;AAeA;;;AAGG;AACH;AAYA;;;AAGG,IAAA,MAAA,QAAA,GAAA;AACH,QAAA,aAAA,EAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;"}

package/dist/client/AuthorizationCodeClient.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"AuthorizationCodeClient.d.ts","sourceRoot":"","sources":["../../src/client/AuthorizationCodeClient.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAC1C,OAAO,EAAE,6BAA6B,EAAE,MAAM,0CAA0C,CAAC;AACzF,OAAO,EAAE,8BAA8B,EAAE,MAAM,2CAA2C,CAAC;AAW3F,OAAO,EACH,mBAAmB,EAEtB,MAAM,+BAA+B,CAAC;AAIvC,OAAO,EAAE,oBAAoB,EAAE,MAAM,kCAAkC,CAAC;AAQxE,OAAO,EAAE,uBAAuB,EAAE,MAAM,oCAAoC,CAAC;AAG7E,OAAO,EAAE,wBAAwB,EAAE,MAAM,sCAAsC,CAAC;AAahF,OAAO,EAAE,kBAAkB,EAAE,MAAM,6CAA6C,CAAC;AAIjF;;;GAGG;AACH,qBAAa,uBAAwB,SAAQ,UAAU;IAEnD,SAAS,CAAC,kBAAkB,EAAE,OAAO,CAAQ;IAC7C,OAAO,CAAC,iBAAiB,CAAC;gBAGtB,aAAa,EAAE,mBAAmB,EAClC,iBAAiB,CAAC,EAAE,kBAAkB;IAO1C;;;;;;;;;OASG;IACG,cAAc,CAChB,OAAO,EAAE,6BAA6B,GACvC,OAAO,CAAC,MAAM,CAAC;IAoBlB;;;;OAIG;IACG,YAAY,CACd,OAAO,EAAE,8BAA8B,EACvC,eAAe,CAAC,EAAE,wBAAwB,GAC3C,OAAO,CAAC,oBAAoB,CAAC;IAwDhC;;;;OAIG;IACH,sBAAsB,CAClB,YAAY,EAAE,MAAM,EACpB,WAAW,EAAE,MAAM,GACpB,wBAAwB;IAsC3B;;;;OAIG;IACH,YAAY,CAAC,aAAa,EAAE,uBAAuB,GAAG,MAAM;IAgB5D;;;;OAIG;YACW,mBAAmB;IA0EjC;;;OAGG;YACW,sBAAsB;IAgLpC;;;OAGG;YACW,4BAA4B;IAoM1C;;;OAGG;IACH,OAAO,CAAC,0BAA0B;IAoClC;;;OAGG;IACH,OAAO,CAAC,iBAAiB;IAIzB,OAAO,CAAC,gBAAgB;CAG3B"}
+{"version":3,"file":"AuthorizationCodeClient.d.ts","sourceRoot":"","sources":["../../src/client/AuthorizationCodeClient.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAC1C,OAAO,EAAE,6BAA6B,EAAE,MAAM,0CAA0C,CAAC;AACzF,OAAO,EAAE,8BAA8B,EAAE,MAAM,2CAA2C,CAAC;AAW3F,OAAO,EACH,mBAAmB,EAEtB,MAAM,+BAA+B,CAAC;AAIvC,OAAO,EAAE,oBAAoB,EAAE,MAAM,kCAAkC,CAAC;AAQxE,OAAO,EAAE,uBAAuB,EAAE,MAAM,oCAAoC,CAAC;AAG7E,OAAO,EAAE,wBAAwB,EAAE,MAAM,sCAAsC,CAAC;AAahF,OAAO,EAAE,kBAAkB,EAAE,MAAM,6CAA6C,CAAC;AAIjF;;;GAGG;AACH,qBAAa,uBAAwB,SAAQ,UAAU;IAEnD,SAAS,CAAC,kBAAkB,EAAE,OAAO,CAAQ;IAC7C,OAAO,CAAC,iBAAiB,CAAC;gBAGtB,aAAa,EAAE,mBAAmB,EAClC,iBAAiB,CAAC,EAAE,kBAAkB;IAO1C;;;;;;;;;OASG;IACG,cAAc,CAChB,OAAO,EAAE,6BAA6B,GACvC,OAAO,CAAC,MAAM,CAAC;IAoBlB;;;;OAIG;IACG,YAAY,CACd,OAAO,EAAE,8BAA8B,EACvC,eAAe,CAAC,EAAE,wBAAwB,GAC3C,OAAO,CAAC,oBAAoB,CAAC;IAwDhC;;;;OAIG;IACH,sBAAsB,CAClB,YAAY,EAAE,MAAM,EACpB,WAAW,EAAE,MAAM,GACpB,wBAAwB;IAqC3B;;;;OAIG;IACH,YAAY,CAAC,aAAa,EAAE,uBAAuB,GAAG,MAAM;IAgB5D;;;;OAIG;YACW,mBAAmB;IA0EjC;;;OAGG;YACW,sBAAsB;IAgLpC;;;OAGG;YACW,4BAA4B;IAoM1C;;;OAGG;IACH,OAAO,CAAC,0BAA0B;IAoClC;;;OAGG;IACH,OAAO,CAAC,iBAAiB;IAIzB,OAAO,CAAC,gBAAgB;CAG3B"}

package/dist/client/AuthorizationCodeClient.mjs

@@ -1,4 +1,4 @@
-/*! @azure/msal-common v14.2.0 2023-10-20 */
+/*! @azure/msal-common v14.3.0 2023-10-30 */
 'use strict';
 import { BaseClient } from './BaseClient.mjs';
 import { RequestParameterBuilder } from '../request/RequestParameterBuilder.mjs';
@@ -80,7 +80,7 @@ class AuthorizationCodeClient extends BaseClient {
         const serverParams = UrlString.getDeserializedCodeResponse(this.config.authOptions.authority.options.OIDCOptions
             ?.serverResponseType, hashFragment);
         // Get code response
-        responseHandler.validateServerAuthorizationCodeResponse(serverParams, cachedState, this.cryptoUtils);
+        responseHandler.validateServerAuthorizationCodeResponse(serverParams, cachedState);
         // throw when there is no auth code in the response
         if (!serverParams.code) {
             throw createClientAuthError(authorizationCodeMissingFromServerResponse);

package/dist/client/AuthorizationCodeClient.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"AuthorizationCodeClient.mjs","sources":["../../src/client/AuthorizationCodeClient.ts"],"sourcesContent":[null],"names":["ClientAuthErrorCodes.requestCannotBeMade"],"mappings":";;;;;;;;;;;;;;;;;;;;;AAKA;AACA;AACA;AAWA;;;;;;AA8DO,IAAA,WAAA,CAAA,aAAA,EAAA,iBAAA,EAAA;QACiB,KAAA,CAAA,aACP,EAAA,iBAAA,CAAA,CAAA;AAqBb;;;;AAIG,KAAA;AACG;AA2DN;;;;AAIG;;AA0CH;;;;AAIG,QAAA,IAAA,CAAA,iBAAA,EAAA,mBAAA,CAAA,iBAAA,CAAA,cAAA,EAAA,OAAA,CAAA,aAAA,CAAA,CAAA;AACH,QAAA,MAAA,WAAa,GAAA,MAAe,WAAA,CAAA,IAAA,CAAA,4BAAgC,CAAA,IAAA,CAAA,IAAA,CAAA,EAAA,iBAAA,CAAA,2BAAA,EAAA,IAAA,CAAA,MAAA,EAAA,IAAA,CAAA,iBAAA,EAAA,OAAA,CAAA,aAAA,CAAA,CAAA,OAAA,CAAA,CAAA;AAgB5D,QAAA,OAAA,SAAA,CAAA,iBAAA,CAAA,IAAA,CAAA,SAAA,CAAA,qBAAA,EAAA,WAAA,CAAA,CAAA;;;;AAIG;;AA2EH;;;AAGG,QAAA,IAAA,CAAA,OAAA,CAAA,IAAA,EAAA;YACW,MAAsB,qBAAA,CAAAA,mBAAA,CAAA,CAAA;AAgLpC,SAAA;;;AAGG;cACuC,SAAA,GAAA,QAAA,CAAA,OAAA,GAAA,WAAA,CAAA,eAAA,CAAA,CAAA;AAoM1C,QAAA,MAAA,eAAA,GAAA,IAAA,eAAA,CAAA,IAAA,CAAA,MAAA,CAAA,WAAA,CAAA,QAAA,EAAA,IAAA,CAAA,YAAA,EAAA,IAAA,CAAA,WAAA,EAAA,IAAA,CAAA,MAAA,EAAA,IAAA,CAAA,MAAA,CAAA,iBAAA,EAAA,IAAA,CAAA,MAAA,CAAA,iBAAA,EAAA,IAAA,CAAA,iBAAA,CAAA,CAAA;;;AAGG,QAAA,OAAA,WAAA,CAAA,eAAA,CAAA,yBAAA,CAAA,IAAA,CAAA,eAAA,CAAA,EAAA,iBAAA,CAAA,yBAAA,EAAA,IAAA,CAAA,MAAA,EAAA,IAAA,CAAA,iBAAA,EAAA,OAAA,CAAA,aAAA,CAAA,CAAA,QAAA,CAAA,IAAA,EAAA,IAAA,CAAA,SAAA,EAAA,YAAA,EAAA,OAAA,EAAA,eAAA,EAAA,SAAA,EAAA,SAAA,EAAA,SAAA,EAAA,SAAA,CAAA,CAAA;AACH,KAAA;AAoCA;;;AAGG;AACH;AAIA,IAAA,sBAAwB,CAAA,YAAA,EAAA,WAAA,EAAA;AAG3B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;"}
+{"version":3,"file":"AuthorizationCodeClient.mjs","sources":["../../src/client/AuthorizationCodeClient.ts"],"sourcesContent":[null],"names":["ClientAuthErrorCodes.requestCannotBeMade"],"mappings":";;;;;;;;;;;;;;;;;;;;;AAKA;AACA;AACA;AAWA;;;;;;AA8DO,IAAA,WAAA,CAAA,aAAA,EAAA,iBAAA,EAAA;QACiB,KAAA,CAAA,aACP,EAAA,iBAAA,CAAA,CAAA;AAqBb;;;;AAIG,KAAA;AACG;AA2DN;;;;AAIG;;AAyCH;;;;AAIG,QAAA,IAAA,CAAA,iBAAA,EAAA,mBAAA,CAAA,iBAAA,CAAA,cAAA,EAAA,OAAA,CAAA,aAAA,CAAA,CAAA;AACH,QAAA,MAAA,WAAa,GAAA,MAAe,WAAA,CAAA,IAAA,CAAA,4BAAgC,CAAA,IAAA,CAAA,IAAA,CAAA,EAAA,iBAAA,CAAA,2BAAA,EAAA,IAAA,CAAA,MAAA,EAAA,IAAA,CAAA,iBAAA,EAAA,OAAA,CAAA,aAAA,CAAA,CAAA,OAAA,CAAA,CAAA;AAgB5D,QAAA,OAAA,SAAA,CAAA,iBAAA,CAAA,IAAA,CAAA,SAAA,CAAA,qBAAA,EAAA,WAAA,CAAA,CAAA;;;;AAIG;;AA2EH;;;AAGG,QAAA,IAAA,CAAA,OAAA,CAAA,IAAA,EAAA;YACW,MAAsB,qBAAA,CAAAA,mBAAA,CAAA,CAAA;AAgLpC,SAAA;;;AAGG;cACuC,SAAA,GAAA,QAAA,CAAA,OAAA,GAAA,WAAA,CAAA,eAAA,CAAA,CAAA;AAoM1C,QAAA,MAAA,eAAA,GAAA,IAAA,eAAA,CAAA,IAAA,CAAA,MAAA,CAAA,WAAA,CAAA,QAAA,EAAA,IAAA,CAAA,YAAA,EAAA,IAAA,CAAA,WAAA,EAAA,IAAA,CAAA,MAAA,EAAA,IAAA,CAAA,MAAA,CAAA,iBAAA,EAAA,IAAA,CAAA,MAAA,CAAA,iBAAA,EAAA,IAAA,CAAA,iBAAA,CAAA,CAAA;;;AAGG,QAAA,OAAA,WAAA,CAAA,eAAA,CAAA,yBAAA,CAAA,IAAA,CAAA,eAAA,CAAA,EAAA,iBAAA,CAAA,yBAAA,EAAA,IAAA,CAAA,MAAA,EAAA,IAAA,CAAA,iBAAA,EAAA,OAAA,CAAA,aAAA,CAAA,CAAA,QAAA,CAAA,IAAA,EAAA,IAAA,CAAA,SAAA,EAAA,YAAA,EAAA,OAAA,EAAA,eAAA,EAAA,SAAA,EAAA,SAAA,EAAA,SAAA,EAAA,SAAA,CAAA,CAAA;AACH,KAAA;AAoCA;;;AAGG;AACH;AAIA,IAAA,sBAAwB,CAAA,YAAA,EAAA,WAAA,EAAA;AAG3B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;"}

package/dist/client/BaseClient.d.ts

@@ -42,7 +42,7 @@ export declare abstract class BaseClient {
      * Updates the authority object of the client. Endpoint discovery must be completed.
      * @param updatedAuthority
      */
-    updateAuthority(updatedAuthority: Authority): void;
+    updateAuthority(cloudInstanceHostname: string, correlationId: string): Promise<void>;
     /**
      * Creates query string for the /token request
      * @param request

package/dist/client/BaseClient.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"BaseClient.d.ts","sourceRoot":"","sources":["../../src/client/BaseClient.ts"],"names":[],"mappings":"AAKA,OAAO,EACH,mBAAmB,EAEnB,yBAAyB,EAC5B,MAAM,+BAA+B,CAAC;AACvC,OAAO,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAC3D,OAAO,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAC;AAC5E,OAAO,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAC;AAC5C,OAAO,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAC;AACnD,OAAO,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAE1C,OAAO,EAAE,gCAAgC,EAAE,MAAM,8CAA8C,CAAC;AAChG,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AACrD,OAAO,EAAE,sBAAsB,EAAE,MAAM,4CAA4C,CAAC;AACpF,OAAO,EAAE,iBAAiB,EAAE,MAAM,8BAA8B,CAAC;AAMjE,OAAO,EAAE,aAAa,EAAqB,MAAM,0BAA0B,CAAC;AAE5E,OAAO,EAAE,kBAAkB,EAAE,MAAM,6CAA6C,CAAC;AAEjF,OAAO,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAE7D;;;GAGG;AACH,8BAAsB,UAAU;IAErB,MAAM,EAAE,MAAM,CAAC;IAGtB,SAAS,CAAC,MAAM,EAAE,yBAAyB,CAAC;IAG5C,SAAS,CAAC,WAAW,EAAE,OAAO,CAAC;IAG/B,SAAS,CAAC,YAAY,EAAE,YAAY,CAAC;IAGrC,SAAS,CAAC,aAAa,EAAE,cAAc,CAAC;IAGxC,SAAS,CAAC,sBAAsB,EAAE,sBAAsB,GAAG,IAAI,CAAC;IAGhE,SAAS,CAAC,cAAc,EAAE,cAAc,CAAC;IAGlC,SAAS,EAAE,SAAS,CAAC;IAG5B,SAAS,CAAC,iBAAiB,CAAC,EAAE,kBAAkB,CAAC;IAEjD,SAAS,aACL,aAAa,EAAE,mBAAmB,EAClC,iBAAiB,CAAC,EAAE,kBAAkB;IAiC1C;;OAEG;IACH,SAAS,CAAC,yBAAyB,CAC/B,OAAO,CAAC,EAAE,aAAa,GACxB,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC;IA8BzB;;;;;;OAMG;cACa,0BAA0B,CACtC,aAAa,EAAE,MAAM,EACrB,WAAW,EAAE,MAAM,EACnB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAC/B,UAAU,EAAE,iBAAiB,EAC7B,aAAa,EAAE,MAAM,EACrB,WAAW,CAAC,EAAE,MAAM,GACrB,OAAO,CAAC,eAAe,CAAC,gCAAgC,CAAC,CAAC;IAmC7D;;;OAGG;IACH,eAAe,CAAC,gBAAgB,EAAE,SAAS,GAAG,IAAI;IASlD;;;OAGG;IACH,0BAA0B,CAAC,OAAO,EAAE,eAAe,GAAG,MAAM;CAW/D"}
+{"version":3,"file":"BaseClient.d.ts","sourceRoot":"","sources":["../../src/client/BaseClient.ts"],"names":[],"mappings":"AAKA,OAAO,EACH,mBAAmB,EAEnB,yBAAyB,EAC5B,MAAM,+BAA+B,CAAC;AACvC,OAAO,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAC3D,OAAO,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAC;AAC5E,OAAO,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAC;AAC5C,OAAO,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAC;AACnD,OAAO,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAE1C,OAAO,EAAE,gCAAgC,EAAE,MAAM,8CAA8C,CAAC;AAChG,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AACrD,OAAO,EAAE,sBAAsB,EAAE,MAAM,4CAA4C,CAAC;AACpF,OAAO,EAAE,iBAAiB,EAAE,MAAM,8BAA8B,CAAC;AAEjE,OAAO,EAAE,aAAa,EAAqB,MAAM,0BAA0B,CAAC;AAE5E,OAAO,EAAE,kBAAkB,EAAE,MAAM,6CAA6C,CAAC;AAEjF,OAAO,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAI7D;;;GAGG;AACH,8BAAsB,UAAU;IAErB,MAAM,EAAE,MAAM,CAAC;IAGtB,SAAS,CAAC,MAAM,EAAE,yBAAyB,CAAC;IAG5C,SAAS,CAAC,WAAW,EAAE,OAAO,CAAC;IAG/B,SAAS,CAAC,YAAY,EAAE,YAAY,CAAC;IAGrC,SAAS,CAAC,aAAa,EAAE,cAAc,CAAC;IAGxC,SAAS,CAAC,sBAAsB,EAAE,sBAAsB,GAAG,IAAI,CAAC;IAGhE,SAAS,CAAC,cAAc,EAAE,cAAc,CAAC;IAGlC,SAAS,EAAE,SAAS,CAAC;IAG5B,SAAS,CAAC,iBAAiB,CAAC,EAAE,kBAAkB,CAAC;IAEjD,SAAS,aACL,aAAa,EAAE,mBAAmB,EAClC,iBAAiB,CAAC,EAAE,kBAAkB;IAiC1C;;OAEG;IACH,SAAS,CAAC,yBAAyB,CAC/B,OAAO,CAAC,EAAE,aAAa,GACxB,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC;IA8BzB;;;;;;OAMG;cACa,0BAA0B,CACtC,aAAa,EAAE,MAAM,EACrB,WAAW,EAAE,MAAM,EACnB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAC/B,UAAU,EAAE,iBAAiB,EAC7B,aAAa,EAAE,MAAM,EACrB,WAAW,CAAC,EAAE,MAAM,GACrB,OAAO,CAAC,eAAe,CAAC,gCAAgC,CAAC,CAAC;IAmC7D;;;OAGG;IACG,eAAe,CACjB,qBAAqB,EAAE,MAAM,EAC7B,aAAa,EAAE,MAAM,GACtB,OAAO,CAAC,IAAI,CAAC;IAmBhB;;;OAGG;IACH,0BAA0B,CAAC,OAAO,EAAE,eAAe,GAAG,MAAM;CAW/D"}

package/dist/client/BaseClient.mjs

@@ -1,15 +1,15 @@
-/*! @azure/msal-common v14.2.0 2023-10-20 */
+/*! @azure/msal-common v14.3.0 2023-10-30 */
 'use strict';
 import { buildClientConfiguration } from '../config/ClientConfiguration.mjs';
 import { NetworkManager } from '../network/NetworkManager.mjs';
 import { Logger } from '../logger/Logger.mjs';
 import { HeaderNames, Constants } from '../utils/Constants.mjs';
 import { name, version } from '../packageMetadata.mjs';
-import { createClientAuthError } from '../error/ClientAuthError.mjs';
 import { CcsCredentialType } from '../account/CcsCredential.mjs';
 import { buildClientInfoFromHomeAccountId } from '../account/ClientInfo.mjs';
 import { RequestParameterBuilder } from '../request/RequestParameterBuilder.mjs';
-import { endpointResolutionError } from '../error/ClientAuthErrorCodes.mjs';
+import { AuthorityFactory } from '../authority/AuthorityFactory.mjs';
+import { PerformanceEvents } from '../telemetry/performance/PerformanceEvent.mjs';
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -93,11 +93,11 @@ class BaseClient {
      * Updates the authority object of the client. Endpoint discovery must be completed.
      * @param updatedAuthority
      */
-    updateAuthority(updatedAuthority) {
-        if (!updatedAuthority.discoveryComplete()) {
-            throw createClientAuthError(endpointResolutionError);
-        }
-        this.authority = updatedAuthority;
+    async updateAuthority(cloudInstanceHostname, correlationId) {
+        this.performanceClient?.addQueueMeasurement(PerformanceEvents.UpdateTokenEndpointAuthority, correlationId);
+        const cloudInstanceAuthorityUri = `https://${cloudInstanceHostname}/${this.authority.tenant}/`;
+        const cloudInstanceAuthority = await AuthorityFactory.createDiscoveredInstance(cloudInstanceAuthorityUri, this.networkClient, this.cacheManager, this.authority.options, this.logger, this.performanceClient, correlationId);
+        this.authority = cloudInstanceAuthority;
     }
     /**
      * Creates query string for the /token request

package/dist/client/BaseClient.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"BaseClient.mjs","sources":["../../src/client/BaseClient.ts"],"sourcesContent":[null],"names":[],"mappings":";;;;;;;;;;;;;AAKA;AAKA;AACA;AACA;AAmBA;;;AAGG;AACH,MAAA,UAAA,CAAA;IAEW,yBAAe,EAAA,iBAAA,EAAA;AAGtB;AAGA,QAAA,IAAA,CAAS,MAAC,GAAA,wBAAqB,CAAA,aAAA,CAAA,CAAA;AAG/B;AAGA,QAAA,IAAA,CAAS,MAAC,GAAA,IAAA,MAAe,CAAA,IAAA,CAAA,MAAe,CAAA,aAAA,EAAA,IAAA,EAAA,OAAA,CAAA,CAAA;AAGxC;AAGA,QAAA,IAAA,CAAS,WAAC,GAAA,IAAgB,CAAA,MAAA,CAAA,eAAe,CAAA;;AAMzC,QAAA,IAAA,CAAS,YAAC,GAAA,IAAkB,CAAA,uBAAqB,CAAA;;AAqCjD,QAAA,IAAA,CAAA,aAAA,GAAA,IAAA,CAAA,MAAA,CAAA,gBAAA,CAAA;;AAEG,QAAA,IAAA,CAAA,cAAA,GAAA,IAAA,cAAA,CAAA,IAAA,CAAA,aAAA,EAAA,IAAA,CAAA,YAAA,CAAA,CAAA;AACH;AAgCA,QAAA,IAAA,CAAA,sBAAA,GAAA,IAAA,CAAA,MAAA,CAAA,sBAAA,CAAA;;;;;;AAMG;AACa;AA0ChB;;;AAGG,QAAA,OAAA,CAAA,WAAA,CAAA,YAAA,CAAA,GAAA,SAAA,CAAA,qBAAA,CAAA;AACH,QAAA,IAAA,CAAA,IAAA,CAAA,MAAgB,CAAA,aAAkB,CAAA,oBAAgB,IAAA,OAAA,EAAA;AASlD,YAAA,QAAA,OAAA,CAAA,IAAA;;;AAGG,wBAAA,MAAA,UAAA,GAAA,gCAAA,CAAA,OAAA,CAAA,UAAA,CAAA,CAAA;AACH,wBAAA,OAA2B,CAAA,WAAS,CAAA,UAAA,CAAe,GAAG,CAAM,IAAA,EAAA,UAAA,CAAA,GAAA,CAAA,CAAA,EAAA,UAAA,CAAA,IAAA,CAAA,CAAA,CAAA;AAW/D,qBAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;"}
+{"version":3,"file":"BaseClient.mjs","sources":["../../src/client/BaseClient.ts"],"sourcesContent":[null],"names":[],"mappings":";;;;;;;;;;;;;AAKA;AAKA;AACA;AACA;;;AAoBG;AACH;AAEiB,gBAAS,CAAA;AAGtB,IAAA,WAAU,CAAA,aAAQ,EAAA,iBAA0B,EAAA;AAG5C;AAGA,QAAA,IAAA,CAAS,MAAC,GAAA,wBAA2B,CAAA,aAAA,CAAA,CAAA;AAGrC;AAGA,QAAA,IAAA,CAAS,MAAuB,GAAA,IAAA,MAAA,CAAA,IAAA,CAAE,MAAsB,CAAA,aAAA,EAAA,aAAQ,CAAA,CAAA;AAGhE;QAGgB,IAAA,CAAA,WAAW,GAAC,IAAA,CAAA,MAAA,CAAA,eAAA,CAAA;AAG5B;QAES,IAAA,CAAA,YAAA,cACQ,CAAE,gBAAA,CAAA;AAkCnB;;AAEG;AACH,QAAA,IAAA,CAAS,cAAC,GAAA,IAAA,cACE,CAAA,IAAe,CAAA,aAClB,EAAA,IAAC,CAAM,aAAQ,CAAC;AA8BzB;;;;;;AAMG,KAAA;AACa;AA0ChB;;;AAGG,QAAA,MAAA,OAAA,GAAA,EAAA,CAAA;AACG,QAAA,OAAA,CAAA,WACF,CAAA,YAAA,CAAqB,GAAE,SACvB,CAAA,qBACD,CAAA;AAmBH,QAAA,IAAA,CAAA,IAAA,CAAA,MAAA,CAAA,aAAA,CAAA,oBAAA,IAAA,OAAA,EAAA;;;AAGG,oBAAA,IAAA;AACH,wBAAA,MAA0B,UAAU,GAAA,gCAAwB,CAAA,OAAA,CAAA,UAAA,CAAA,CAAA;AAW/D,wBAAA,OAAA,CAAA,WAAA,CAAA,UAAA,CAAA,GAAA,CAAA,IAAA,EAAA,UAAA,CAAA,GAAA,CAAA,CAAA,EAAA,UAAA,CAAA,IAAA,CAAA,CAAA,CAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;"}

package/dist/client/RefreshTokenClient.mjs

@@ -1,4 +1,4 @@
-/*! @azure/msal-common v14.2.0 2023-10-20 */
+/*! @azure/msal-common v14.3.0 2023-10-30 */
 'use strict';
 import { isOidcProtocolMode } from '../config/ClientConfiguration.mjs';
 import { BaseClient } from './BaseClient.mjs';

package/dist/client/SilentFlowClient.mjs

@@ -1,4 +1,4 @@
-/*! @azure/msal-common v14.2.0 2023-10-20 */
+/*! @azure/msal-common v14.3.0 2023-10-30 */
 'use strict';
 import { BaseClient } from './BaseClient.mjs';
 import { TimeUtils } from '../utils/TimeUtils.mjs';

package/dist/config/ClientConfiguration.mjs

@@ -1,4 +1,4 @@
-/*! @azure/msal-common v14.2.0 2023-10-20 */
+/*! @azure/msal-common v14.3.0 2023-10-30 */
 'use strict';
 import { DEFAULT_CRYPTO_IMPLEMENTATION } from '../crypto/ICrypto.mjs';
 import { Logger, LogLevel } from '../logger/Logger.mjs';

package/dist/crypto/ICrypto.mjs

@@ -1,4 +1,4 @@
-/*! @azure/msal-common v14.2.0 2023-10-20 */
+/*! @azure/msal-common v14.3.0 2023-10-30 */
 'use strict';
 import { createClientAuthError } from '../error/ClientAuthError.mjs';
 import { methodNotImplemented } from '../error/ClientAuthErrorCodes.mjs';

package/dist/crypto/JoseHeader.mjs

@@ -1,4 +1,4 @@
-/*! @azure/msal-common v14.2.0 2023-10-20 */
+/*! @azure/msal-common v14.3.0 2023-10-30 */
 'use strict';
 import { createJoseHeaderError } from '../error/JoseHeaderError.mjs';
 import { JsonTypes } from '../utils/Constants.mjs';

package/dist/crypto/PopTokenGenerator.mjs

@@ -1,4 +1,4 @@
-/*! @azure/msal-common v14.2.0 2023-10-20 */
+/*! @azure/msal-common v14.3.0 2023-10-30 */
 'use strict';
 import { TimeUtils } from '../utils/TimeUtils.mjs';
 import { UrlString } from '../url/UrlString.mjs';

package/dist/error/AuthError.mjs

@@ -1,4 +1,4 @@
-/*! @azure/msal-common v14.2.0 2023-10-20 */
+/*! @azure/msal-common v14.3.0 2023-10-30 */
 'use strict';
 import { Constants } from '../utils/Constants.mjs';
 import { unexpectedError, postRequestFailed } from './AuthErrorCodes.mjs';

package/dist/error/AuthErrorCodes.mjs

@@ -1,4 +1,4 @@
-/*! @azure/msal-common v14.2.0 2023-10-20 */
+/*! @azure/msal-common v14.3.0 2023-10-30 */
 'use strict';
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.

package/dist/error/ClientAuthError.mjs

@@ -1,4 +1,4 @@
-/*! @azure/msal-common v14.2.0 2023-10-20 */
+/*! @azure/msal-common v14.3.0 2023-10-30 */
 'use strict';
 import { AuthError } from './AuthError.mjs';
 import { clientInfoDecodingError, clientInfoEmptyError, tokenParsingError, nullOrEmptyToken, endpointResolutionError, networkError, openIdConfigError, hashNotDeserialized, invalidState, stateMismatch, stateNotFound, nonceMismatch, authTimeNotFound, maxAgeTranspired, multipleMatchingTokens, multipleMatchingAccounts, multipleMatchingAppMetadata, requestCannotBeMade, cannotRemoveEmptyScope, cannotAppendScopeSet, emptyInputScopeSet, deviceCodePollingCancelled, deviceCodeExpired, deviceCodeUnknownError, noAccountInSilentRequest, invalidCacheRecord, invalidCacheEnvironment, noAccountFound, noCryptoObject, unexpectedCredentialType, invalidAssertion, invalidClientCredential, tokenRefreshRequired, userTimeoutReached, tokenClaimsCnfRequiredForSignedJwt, authorizationCodeMissingFromServerResponse, bindingKeyNotRemoved, endSessionEndpointNotSupported, keyIdMissing, noNetworkConnectivity, userCanceled, missingTenantIdError, nestedAppAuthBridgeDisabled, methodNotImplemented } from './ClientAuthErrorCodes.mjs';

package/dist/error/ClientAuthErrorCodes.mjs

@@ -1,4 +1,4 @@
-/*! @azure/msal-common v14.2.0 2023-10-20 */
+/*! @azure/msal-common v14.3.0 2023-10-30 */
 'use strict';
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.

package/dist/error/ClientConfigurationError.mjs

@@ -1,4 +1,4 @@
-/*! @azure/msal-common v14.2.0 2023-10-20 */
+/*! @azure/msal-common v14.3.0 2023-10-30 */
 'use strict';
 import { AuthError } from './AuthError.mjs';
 import { redirectUriEmpty, claimsRequestParsingError, authorityUriInsecure, urlParseError, urlEmptyError, emptyInputScopesError, invalidPromptValue, invalidClaims, tokenRequestEmpty, logoutRequestEmpty, invalidCodeChallengeMethod, pkceParamsMissing, invalidCloudDiscoveryMetadata, invalidAuthorityMetadata, untrustedAuthority, missingSshJwk, missingSshKid, missingNonceAuthenticationHeader, invalidAuthenticationHeader, cannotSetOIDCOptions, cannotAllowNativeBroker, authorityMismatch } from './ClientConfigurationErrorCodes.mjs';

package/dist/error/ClientConfigurationErrorCodes.mjs

@@ -1,4 +1,4 @@
-/*! @azure/msal-common v14.2.0 2023-10-20 */
+/*! @azure/msal-common v14.3.0 2023-10-30 */
 'use strict';
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.

package/dist/error/InteractionRequiredAuthError.mjs

@@ -1,4 +1,4 @@
-/*! @azure/msal-common v14.2.0 2023-10-20 */
+/*! @azure/msal-common v14.3.0 2023-10-30 */
 'use strict';
 import { Constants } from '../utils/Constants.mjs';
 import { AuthError } from './AuthError.mjs';

package/dist/error/InteractionRequiredAuthErrorCodes.mjs

@@ -1,4 +1,4 @@
-/*! @azure/msal-common v14.2.0 2023-10-20 */
+/*! @azure/msal-common v14.3.0 2023-10-30 */
 'use strict';
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.

package/dist/error/JoseHeaderError.mjs

@@ -1,4 +1,4 @@
-/*! @azure/msal-common v14.2.0 2023-10-20 */
+/*! @azure/msal-common v14.3.0 2023-10-30 */
 'use strict';
 import { AuthError } from './AuthError.mjs';
 import { missingKidError, missingAlgError } from './JoseHeaderErrorCodes.mjs';

package/dist/error/JoseHeaderErrorCodes.mjs

@@ -1,4 +1,4 @@
-/*! @azure/msal-common v14.2.0 2023-10-20 */
+/*! @azure/msal-common v14.3.0 2023-10-30 */
 'use strict';
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.

package/dist/error/ServerError.mjs

@@ -1,4 +1,4 @@
-/*! @azure/msal-common v14.2.0 2023-10-20 */
+/*! @azure/msal-common v14.3.0 2023-10-30 */
 'use strict';
 import { AuthError } from './AuthError.mjs';