@azure/msal-common 14.3.0 → 14.4.0

package/dist/index.cjs

@@ -1,4 +1,4 @@
-/*! @azure/msal-common v14.3.0 2023-10-30 */
+/*! @azure/msal-common v14.4.0 2023-11-07 */
 'use strict';
 'use strict';
 
@@ -53,7 +53,6 @@ const Constants = {
     IMDS_TIMEOUT: 2000,
     AZURE_REGION_AUTO_DISCOVER_FLAG: "TryAutoDetect",
     REGIONAL_AUTH_PUBLIC_CLOUD_SUFFIX: "login.microsoft.com",
-    REGIONAL_AUTH_NON_MSI_QUERY_STRING: "allowestsrnonmsi=true",
     KNOWN_PUBLIC_CLOUDS: [
         "login.microsoftonline.com",
         "login.windows.net",
@@ -372,7 +371,7 @@ const CacheOutcome = {
     // When the token request goes to the identity provider because refresh_in was used and the existing token needs to be refreshed
     PROACTIVELY_REFRESHED: "4",
 };
-const JsonTypes = {
+const JsonWebTokenTypes = {
     Jwt: "JWT",
     Jwk: "JWK",
     Pop: "pop",
@@ -1011,7 +1010,7 @@ class Logger {
 
 /* eslint-disable header/header */
 const name = "@azure/msal-common";
-const version = "14.3.0";
+const version = "14.4.0";
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1359,6 +1358,22 @@ function generateScheme(credentialEntity) {
         ? credentialEntity.tokenType.toLowerCase()
         : "";
 }
+/**
+ * validates if a given cache entry is "Telemetry", parses <key,value>
+ * @param key
+ * @param entity
+ */
+function isServerTelemetryEntity(key, entity) {
+    const validateKey = key.indexOf(SERVER_TELEM_CONSTANTS.CACHE_KEY) === 0;
+    let validateEntity = true;
+    if (entity) {
+        validateEntity =
+            entity.hasOwnProperty("failedRequests") &&
+                entity.hasOwnProperty("errors") &&
+                entity.hasOwnProperty("cacheHits");
+    }
+    return validateKey && validateEntity;
+}
 
 var CacheHelpers = /*#__PURE__*/Object.freeze({
     __proto__: null,
@@ -1369,7 +1384,8 @@ var CacheHelpers = /*#__PURE__*/Object.freeze({
     isAccessTokenEntity: isAccessTokenEntity,
     isCredentialEntity: isCredentialEntity,
     isIdTokenEntity: isIdTokenEntity,
-    isRefreshTokenEntity: isRefreshTokenEntity
+    isRefreshTokenEntity: isRefreshTokenEntity,
+    isServerTelemetryEntity: isServerTelemetryEntity
 });
 
 /*
@@ -2138,6 +2154,57 @@ class AccountEntity {
     }
 }
 
+/*
+ * Copyright (c) Microsoft Corporation. All rights reserved.
+ * Licensed under the MIT License.
+ */
+/**
+ * Parses hash string from given string. Returns empty string if no hash symbol is found.
+ * @param hashString
+ */
+function stripLeadingHashOrQuery(responseString) {
+    if (responseString.startsWith("#/")) {
+        return responseString.substring(2);
+    }
+    else if (responseString.startsWith("#") ||
+        responseString.startsWith("?")) {
+        return responseString.substring(1);
+    }
+    return responseString;
+}
+/**
+ * Returns URL hash as server auth code response object.
+ */
+function getDeserializedResponse(responseString) {
+    // Check if given hash is empty
+    if (!responseString || responseString.indexOf("=") < 0) {
+        return null;
+    }
+    try {
+        // Strip the # or ? symbol if present
+        const normalizedResponse = stripLeadingHashOrQuery(responseString);
+        // If # symbol was not present, above will return empty string, so give original hash value
+        const deserializedHash = Object.fromEntries(new URLSearchParams(normalizedResponse));
+        // Check for known response properties
+        if (deserializedHash.code ||
+            deserializedHash.error ||
+            deserializedHash.error_description ||
+            deserializedHash.state) {
+            return deserializedHash;
+        }
+    }
+    catch (e) {
+        throw createClientAuthError(hashNotDeserialized);
+    }
+    return null;
+}
+
+var UrlUtils = /*#__PURE__*/Object.freeze({
+    __proto__: null,
+    getDeserializedResponse: getDeserializedResponse,
+    stripLeadingHashOrQuery: stripLeadingHashOrQuery
+});
+
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -2155,7 +2222,7 @@ class UrlString {
             // Throws error if url is empty
             throw createClientConfigurationError(urlEmptyError);
         }
-        if (!this.getHash()) {
+        if (!url.includes("#")) {
             this._urlString = UrlString.canonicalizeUri(url);
         }
     }
@@ -2237,12 +2304,6 @@ class UrlString {
         }
         return UrlString.constructAuthorityUriFromObject(urlObject);
     }
-    /**
-     * Returns the anchor part(#) of the URL
-     */
-    getHash() {
-        return UrlString.parseHash(this.urlString);
-    }
     /**
      * Parses out the components from a url string.
      * @returns An object with the various components. Please cache this value insted of calling this multiple times on the same url.
@@ -2290,60 +2351,6 @@ class UrlString {
         }
         return relativeUrl;
     }
-    /**
-     * Parses hash string from given string. Returns empty string if no hash symbol is found.
-     * @param hashString
-     */
-    static parseHash(hashString) {
-        const hashIndex1 = hashString.indexOf("#");
-        const hashIndex2 = hashString.indexOf("#/");
-        if (hashIndex2 > -1) {
-            return hashString.substring(hashIndex2 + 2);
-        }
-        else if (hashIndex1 > -1) {
-            return hashString.substring(hashIndex1 + 1);
-        }
-        return Constants.EMPTY_STRING;
-    }
-    /**
-     * Parses query string from given string. Returns empty string if no query symbol is found.
-     * @param queryString
-     */
-    static parseQueryString(queryString) {
-        const queryIndex1 = queryString.indexOf("?");
-        const queryIndex2 = queryString.indexOf("/?");
-        if (queryIndex2 > -1) {
-            return queryString.substring(queryIndex2 + 2);
-        }
-        else if (queryIndex1 > -1) {
-            return queryString.substring(queryIndex1 + 1);
-        }
-        return Constants.EMPTY_STRING;
-    }
-    /**
-     * Parses query server response string from given string.
-     * Extract hash between '?code=' and '#' if trailing '# is present.
-     * Returns empty string if no query symbol is found.
-     * @param queryString
-     */
-    static parseQueryServerResponse(queryString) {
-        const queryIndex1 = queryString.indexOf("?code");
-        const queryIndex2 = queryString.indexOf("/?code");
-        const hashIndex = queryString.indexOf("#");
-        if (queryIndex2 > -1 && hashIndex > -1) {
-            return queryString.substring(queryIndex2 + 2, hashIndex);
-        }
-        else if (queryIndex2 > -1) {
-            return queryString.substring(queryIndex2 + 2);
-        }
-        else if (queryIndex1 > -1 && hashIndex > -1) {
-            return queryString.substring(queryIndex1 + 1, hashIndex);
-        }
-        else if (queryIndex1 > -1) {
-            return queryString.substring(queryIndex1 + 1);
-        }
-        return Constants.EMPTY_STRING;
-    }
     static constructAuthorityUriFromObject(urlObject) {
         return new UrlString(urlObject.Protocol +
             "//" +
@@ -2351,70 +2358,12 @@ class UrlString {
             "/" +
             urlObject.PathSegments.join("/"));
     }
-    /**
-     * Returns URL hash as server auth code response object.
-     */
-    static getDeserializedHash(hash) {
-        // Check if given hash is empty
-        if (!hash) {
-            return {};
-        }
-        // Strip the # symbol if present
-        const parsedHash = UrlString.parseHash(hash);
-        // If # symbol was not present, above will return empty string, so give original hash value
-        const deserializedHash = StringUtils.queryStringToObject(parsedHash || hash);
-        // Check if deserialization didn't work
-        if (!deserializedHash) {
-            throw createClientAuthError(hashNotDeserialized);
-        }
-        return deserializedHash;
-    }
-    /**
-     * Returns URL query string as server auth code response object.
-     */
-    static getDeserializedQueryString(query) {
-        // Check if given query is empty
-        if (!query) {
-            return {};
-        }
-        // Strip the ? symbol if present
-        const parsedQueryString = UrlString.parseQueryString(query);
-        // If ? symbol was not present, above will return empty string, so give original query value
-        const deserializedQueryString = StringUtils.queryStringToObject(parsedQueryString || query);
-        // Check if deserialization didn't work
-        if (!deserializedQueryString) {
-            throw createClientAuthError(hashNotDeserialized);
-        }
-        return deserializedQueryString;
-    }
-    /**
-     * Returns either deserialized query string or deserialized hash, depending on the serverResponseType
-     * as a server auth code response object.
-     */
-    static getDeserializedCodeResponse(serverResponseType, hashFragment) {
-        const hashUrlString = new UrlString(hashFragment);
-        let serverParams;
-        if (serverResponseType === ServerResponseType.QUERY) {
-            serverParams = UrlString.getDeserializedQueryString(hashFragment);
-        }
-        else {
-            serverParams = UrlString.getDeserializedHash(hashUrlString.getHash());
-        }
-        return serverParams;
-    }
     /**
      * Check if the hash of the URL string contains known properties
+     * @deprecated This API will be removed in a future version
      */
-    static hashContainsKnownProperties(hash) {
-        if (!hash || hash.indexOf("=") < 0) {
-            // Hash doesn't contain key/value pairs
-            return false;
-        }
-        const parameters = UrlString.getDeserializedHash(hash);
-        return !!(parameters.code ||
-            parameters.error_description ||
-            parameters.error ||
-            parameters.state);
+    static hashContainsKnownProperties(response) {
+        return !!getDeserializedResponse(response);
     }
 }
 
@@ -3500,18 +3449,18 @@ class CacheManager {
     }
     /**
      * Retrieve the cached credentials into a cacherecord
-     * @param account
-     * @param clientId
-     * @param scopes
-     * @param environment
-     * @param authScheme
+     * @param account {AccountInfo}
+     * @param request {BaseAuthRequest}
+     * @param environment {string}
+     * @param performanceClient {?IPerformanceClient}
+     * @param correlationId {?string}
      */
-    readCacheRecord(account, request, environment) {
+    readCacheRecord(account, request, environment, performanceClient, correlationId) {
         const tokenKeys = this.getTokenKeys();
         const cachedAccount = this.readAccountFromCache(account);
-        const cachedIdToken = this.getIdToken(account, tokenKeys);
-        const cachedAccessToken = this.getAccessToken(account, request, tokenKeys);
-        const cachedRefreshToken = this.getRefreshToken(account, false, tokenKeys);
+        const cachedIdToken = this.getIdToken(account, tokenKeys, performanceClient, correlationId);
+        const cachedAccessToken = this.getAccessToken(account, request, tokenKeys, performanceClient, correlationId);
+        const cachedRefreshToken = this.getRefreshToken(account, false, tokenKeys, performanceClient, correlationId);
         const cachedAppMetadata = this.readAppMetadataFromCache(environment);
         if (cachedAccount && cachedIdToken) {
             cachedAccount.idTokenClaims = extractTokenClaims(cachedIdToken.secret, this.cryptoImpl.base64Decode);
@@ -3534,11 +3483,12 @@ class CacheManager {
     }
     /**
      * Retrieve IdTokenEntity from cache
-     * @param clientId
-     * @param account
-     * @param inputRealm
+     * @param account {AccountInfo}
+     * @param tokenKeys {?TokenKeys}
+     * @param performanceClient {?IPerformanceClient}
+     * @param correlationId {?string}
      */
-    getIdToken(account, tokenKeys) {
+    getIdToken(account, tokenKeys, performanceClient, correlationId) {
         this.commonLogger.trace("CacheManager - getIdToken called");
         const idTokenFilter = {
             homeAccountId: account.homeAccountId,
@@ -3558,6 +3508,9 @@ class CacheManager {
             idTokens.forEach((idToken) => {
                 this.removeIdToken(generateCredentialKey(idToken));
             });
+            if (performanceClient && correlationId) {
+                performanceClient.addFields({ multiMatchedID: idTokens.length }, correlationId);
+            }
             return null;
         }
         this.commonLogger.info("CacheManager:getIdToken - Returning id token");
@@ -3619,12 +3572,13 @@ class CacheManager {
     }
     /**
      * Retrieve AccessTokenEntity from cache
-     * @param clientId
-     * @param account
-     * @param scopes
-     * @param authScheme
+     * @param account {AccountInfo}
+     * @param request {BaseAuthRequest}
+     * @param tokenKeys {?TokenKeys}
+     * @param performanceClient {?IPerformanceClient}
+     * @param correlationId {?string}
      */
-    getAccessToken(account, request, tokenKeys) {
+    getAccessToken(account, request, tokenKeys, performanceClient, correlationId) {
         this.commonLogger.trace("CacheManager - getAccessToken called");
         const scopes = ScopeSet.createSearchScopes(request.scopes);
         const authScheme = request.authenticationScheme || AuthenticationScheme.BEARER;
@@ -3672,6 +3626,9 @@ class CacheManager {
             accessTokens.forEach((accessToken) => {
                 void this.removeAccessToken(generateCredentialKey(accessToken));
             });
+            if (performanceClient && correlationId) {
+                performanceClient.addFields({ multiMatchedAT: accessTokens.length }, correlationId);
+            }
             return null;
         }
         this.commonLogger.info("CacheManager:getAccessToken - Returning access token");
@@ -3740,11 +3697,13 @@ class CacheManager {
     }
     /**
      * Helper to retrieve the appropriate refresh token from cache
-     * @param clientId
-     * @param account
-     * @param familyRT
+     * @param account {AccountInfo}
+     * @param familyRT {boolean}
+     * @param tokenKeys {?TokenKeys}
+     * @param performanceClient {?IPerformanceClient}
+     * @param correlationId {?string}
      */
-    getRefreshToken(account, familyRT, tokenKeys) {
+    getRefreshToken(account, familyRT, tokenKeys, performanceClient, correlationId) {
         this.commonLogger.trace("CacheManager - getRefreshToken called");
         const id = familyRT ? THE_FAMILY_ID : undefined;
         const refreshTokenFilter = {
@@ -3774,6 +3733,9 @@ class CacheManager {
             return null;
         }
         // address the else case after remove functions address environment aliases
+        if (numRefreshTokens > 1 && performanceClient && correlationId) {
+            performanceClient.addFields({ multiMatchedRT: numRefreshTokens }, correlationId);
+        }
         this.commonLogger.info("CacheManager:getRefreshToken - returning refresh token");
         return refreshTokens[0];
     }
@@ -5106,7 +5068,7 @@ const PerformanceEvents = {
      * Functions from InteractionHandler (msal-browser)
      */
     HandleCodeResponseFromServer: "handleCodeResponseFromServer",
-    HandleCodeResponseFromHash: "handleCodeResponseFromHash",
+    HandleCodeResponse: "handleCodeResponse",
     UpdateTokenEndpointAuthority: "updateTokenEndpointAuthority",
     /**
      * APIs in Authorization Code Client (msal-common)
@@ -5124,6 +5086,7 @@ const PerformanceEvents = {
      * handleServerTokenResponse API in ResponseHandler (msal-common)
      */
     HandleServerTokenResponse: "handleServerTokenResponse",
+    DeserializeResponse: "deserializeResponse",
     /**
      * Authority functions
      */
@@ -5185,6 +5148,9 @@ const IntFields = new Set([
     "queuedTimeMs",
     "startTimeMs",
     "status",
+    "multiMatchedAT",
+    "multiMatchedID",
+    "multiMatchedRT",
 ]);
 
 /*
@@ -6105,9 +6071,8 @@ class Authority {
         const regionalMetadata = { ...metadata };
         regionalMetadata.authorization_endpoint =
             Authority.buildRegionalAuthorityString(regionalMetadata.authorization_endpoint, azureRegion);
-        // TODO: Enquire on whether we should leave the query string or remove it before releasing the feature
         regionalMetadata.token_endpoint =
-            Authority.buildRegionalAuthorityString(regionalMetadata.token_endpoint, azureRegion, Constants.REGIONAL_AUTH_NON_MSI_QUERY_STRING);
+            Authority.buildRegionalAuthorityString(regionalMetadata.token_endpoint, azureRegion);
         if (regionalMetadata.end_session_endpoint) {
             regionalMetadata.end_session_endpoint =
                 Authority.buildRegionalAuthorityString(regionalMetadata.end_session_endpoint, azureRegion);
@@ -6563,7 +6528,7 @@ class PopTokenGenerator {
      */
     async signPayload(payload, keyId, request, claims) {
         // Deconstruct request to extract SHR parameters
-        const { resourceRequestMethod, resourceRequestUri, shrClaims, shrNonce, } = request;
+        const { resourceRequestMethod, resourceRequestUri, shrClaims, shrNonce, shrOptions, } = request;
         const resourceUrlString = resourceRequestUri
             ? new UrlString(resourceRequestUri)
             : undefined;
@@ -6580,7 +6545,7 @@ class PopTokenGenerator {
                 : undefined,
             client_claims: shrClaims || undefined,
             ...claims,
-        }, keyId, request.correlationId);
+        }, keyId, shrOptions, request.correlationId);
     }
 }
 
@@ -7045,22 +7010,16 @@ class AuthorizationCodeClient extends BaseClient {
      * the client to exchange for a token in acquireToken.
      * @param hashFragment
      */
-    handleFragmentResponse(hashFragment, cachedState) {
+    handleFragmentResponse(serverParams, cachedState) {
         // Handle responses.
         const responseHandler = new ResponseHandler(this.config.authOptions.clientId, this.cacheManager, this.cryptoUtils, this.logger, null, null);
-        const serverParams = UrlString.getDeserializedCodeResponse(this.config.authOptions.authority.options.OIDCOptions
-            ?.serverResponseType, hashFragment);
         // Get code response
         responseHandler.validateServerAuthorizationCodeResponse(serverParams, cachedState);
         // throw when there is no auth code in the response
         if (!serverParams.code) {
             throw createClientAuthError(authorizationCodeMissingFromServerResponse);
         }
-        return {
-            ...serverParams,
-            // Code param is optional in ServerAuthorizationCodeResponse but required in AuthorizationCodePaylod
-            code: serverParams.code,
-        };
+        return serverParams;
     }
     /**
      * Used to log out the current user, and redirect the user to the postLogoutRedirectUri.
@@ -7469,7 +7428,7 @@ class RefreshTokenClient extends BaseClient {
     async acquireTokenWithCachedRefreshToken(request, foci) {
         this.performanceClient?.addQueueMeasurement(PerformanceEvents.RefreshTokenClientAcquireTokenWithCachedRefreshToken, request.correlationId);
         // fetches family RT or application RT based on FOCI value
-        const refreshToken = invoke(this.cacheManager.getRefreshToken.bind(this.cacheManager), PerformanceEvents.CacheManagerGetRefreshToken, this.logger, this.performanceClient, request.correlationId)(request.account, foci);
+        const refreshToken = invoke(this.cacheManager.getRefreshToken.bind(this.cacheManager), PerformanceEvents.CacheManagerGetRefreshToken, this.logger, this.performanceClient, request.correlationId)(request.account, foci, undefined, this.performanceClient, request.correlationId);
         if (!refreshToken) {
             throw createInteractionRequiredAuthError(noTokensFound);
         }
@@ -7647,7 +7606,7 @@ class SilentFlowClient extends BaseClient {
             throw createClientAuthError(noAccountInSilentRequest);
         }
         const environment = request.authority || this.authority.getPreferredCache();
-        const cacheRecord = this.cacheManager.readCacheRecord(request.account, request, environment);
+        const cacheRecord = this.cacheManager.readCacheRecord(request.account, request, environment, this.performanceClient, request.correlationId);
         if (!cacheRecord.accessToken) {
             // must refresh due to non-existent access_token
             this.setCacheOutcome(CacheOutcome.NO_CACHED_ACCESS_TOKEN, request.correlationId);
@@ -7679,7 +7638,9 @@ class SilentFlowClient extends BaseClient {
         this.performanceClient?.addFields({
             cacheOutcome: cacheOutcome,
         }, correlationId);
-        this.logger.info(`Token refresh is required due to cache outcome: ${cacheOutcome}`);
+        if (cacheOutcome !== CacheOutcome.NOT_APPLICABLE) {
+            this.logger.info(`Token refresh is required due to cache outcome: ${cacheOutcome}`);
+        }
     }
     /**
      * Helper function to build response object from the CacheRecord
@@ -7703,34 +7664,6 @@ class SilentFlowClient extends BaseClient {
     }
 }
 
-/*
- * Copyright (c) Microsoft Corporation. All rights reserved.
- * Licensed under the MIT License.
- */
-class ServerTelemetryEntity {
-    constructor() {
-        this.failedRequests = [];
-        this.errors = [];
-        this.cacheHits = 0;
-    }
-    /**
-     * validates if a given cache entry is "Telemetry", parses <key,value>
-     * @param key
-     * @param entity
-     */
-    static isServerTelemetryEntity(key, entity) {
-        const validateKey = key.indexOf(SERVER_TELEM_CONSTANTS.CACHE_KEY) === 0;
-        let validateEntity = true;
-        if (entity) {
-            validateEntity =
-                entity.hasOwnProperty("failedRequests") &&
-                    entity.hasOwnProperty("errors") &&
-                    entity.hasOwnProperty("cacheHits");
-        }
-        return validateKey && validateEntity;
-    }
-}
-
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -7828,7 +7761,7 @@ class JoseHeader {
         }
         const shrHeader = new JoseHeader({
             // Access Token PoP headers must have type pop, but the type header can be overriden for special cases
-            typ: shrHeaderOptions.typ || JsonTypes.Pop,
+            typ: shrHeaderOptions.typ || JsonWebTokenTypes.Pop,
             kid: shrHeaderOptions.kid,
             alg: shrHeaderOptions.alg,
         });
@@ -8002,7 +7935,11 @@ class ServerTelemetryManager {
      * Get the server telemetry entity from cache or initialize a new one
      */
     getLastRequests() {
-        const initialValue = new ServerTelemetryEntity();
+        const initialValue = {
+            failedRequests: [],
+            errors: [],
+            cacheHits: 0,
+        };
         const lastRequests = this.cacheManager.getServerTelemetry(this.telemetryCacheKey);
         return lastRequests || initialValue;
     }
@@ -8019,11 +7956,11 @@ class ServerTelemetryManager {
         }
         else {
             // Partial data was flushed to server, construct a new telemetry cache item with errors that were not flushed
-            const serverTelemEntity = new ServerTelemetryEntity();
-            serverTelemEntity.failedRequests =
-                lastRequests.failedRequests.slice(numErrorsFlushed * 2); // failedRequests contains 2 items for each error
-            serverTelemEntity.errors =
-                lastRequests.errors.slice(numErrorsFlushed);
+            const serverTelemEntity = {
+                failedRequests: lastRequests.failedRequests.slice(numErrorsFlushed * 2),
+                errors: lastRequests.errors.slice(numErrorsFlushed),
+                cacheHits: 0,
+            };
             this.cacheManager.setServerTelemetry(this.telemetryCacheKey, serverTelemEntity);
         }
     }
@@ -8623,6 +8560,7 @@ exports.InteractionRequiredAuthError = InteractionRequiredAuthError;
 exports.InteractionRequiredAuthErrorCodes = InteractionRequiredAuthErrorCodes;
 exports.InteractionRequiredAuthErrorMessage = InteractionRequiredAuthErrorMessage;
 exports.JoseHeader = JoseHeader;
+exports.JsonWebTokenTypes = JsonWebTokenTypes;
 exports.Logger = Logger;
 exports.NetworkManager = NetworkManager;
 exports.OIDC_DEFAULT_SCOPES = OIDC_DEFAULT_SCOPES;
@@ -8644,7 +8582,6 @@ exports.SSOTypes = SSOTypes;
 exports.ScopeSet = ScopeSet;
 exports.ServerError = ServerError;
 exports.ServerResponseType = ServerResponseType;
-exports.ServerTelemetryEntity = ServerTelemetryEntity;
 exports.ServerTelemetryManager = ServerTelemetryManager;
 exports.SilentFlowClient = SilentFlowClient;
 exports.StringUtils = StringUtils;
@@ -8657,6 +8594,7 @@ exports.ThrottlingUtils = ThrottlingUtils;
 exports.TimeUtils = TimeUtils;
 exports.TokenCacheContext = TokenCacheContext;
 exports.UrlString = UrlString;
+exports.UrlUtils = UrlUtils;
 exports.buildClientInfo = buildClientInfo;
 exports.buildClientInfoFromHomeAccountId = buildClientInfoFromHomeAccountId;
 exports.buildStaticAuthorityOptions = buildStaticAuthorityOptions;