@azure/msal-common 14.3.0 → 14.4.1-beta.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (246) hide show
  1. package/dist/account/AccountInfo.d.ts +31 -31
  2. package/dist/account/AuthToken.d.ts +17 -17
  3. package/dist/account/AuthToken.mjs +58 -58
  4. package/dist/account/CcsCredential.d.ts +9 -9
  5. package/dist/account/CcsCredential.mjs +8 -8
  6. package/dist/account/ClientCredentials.d.ts +14 -14
  7. package/dist/account/ClientInfo.d.ts +19 -19
  8. package/dist/account/ClientInfo.mjs +37 -37
  9. package/dist/account/TokenClaims.d.ts +65 -65
  10. package/dist/authority/Authority.d.ts +249 -249
  11. package/dist/authority/Authority.d.ts.map +1 -1
  12. package/dist/authority/Authority.mjs +788 -789
  13. package/dist/authority/Authority.mjs.map +1 -1
  14. package/dist/authority/AuthorityFactory.d.ts +31 -31
  15. package/dist/authority/AuthorityFactory.mjs +47 -47
  16. package/dist/authority/AuthorityMetadata.d.ts +503 -503
  17. package/dist/authority/AuthorityMetadata.mjs +603 -603
  18. package/dist/authority/AuthorityOptions.d.ts +27 -27
  19. package/dist/authority/AuthorityOptions.mjs +18 -18
  20. package/dist/authority/AuthorityType.d.ts +10 -10
  21. package/dist/authority/AuthorityType.mjs +13 -13
  22. package/dist/authority/AzureRegion.d.ts +1 -1
  23. package/dist/authority/AzureRegionConfiguration.d.ts +5 -5
  24. package/dist/authority/CloudDiscoveryMetadata.d.ts +5 -5
  25. package/dist/authority/CloudInstanceDiscoveryErrorResponse.d.ts +13 -13
  26. package/dist/authority/CloudInstanceDiscoveryErrorResponse.mjs +8 -8
  27. package/dist/authority/CloudInstanceDiscoveryResponse.d.ts +9 -9
  28. package/dist/authority/CloudInstanceDiscoveryResponse.mjs +8 -8
  29. package/dist/authority/ImdsOptions.d.ts +5 -5
  30. package/dist/authority/OIDCOptions.d.ts +8 -8
  31. package/dist/authority/OpenIdConfigResponse.d.ts +11 -11
  32. package/dist/authority/OpenIdConfigResponse.mjs +10 -10
  33. package/dist/authority/ProtocolMode.d.ts +8 -8
  34. package/dist/authority/ProtocolMode.mjs +11 -11
  35. package/dist/authority/RegionDiscovery.d.ts +32 -32
  36. package/dist/authority/RegionDiscovery.mjs +106 -106
  37. package/dist/authority/RegionDiscoveryMetadata.d.ts +6 -6
  38. package/dist/broker/nativeBroker/INativeBrokerPlugin.d.ts +15 -15
  39. package/dist/cache/CacheManager.d.ts +485 -480
  40. package/dist/cache/CacheManager.d.ts.map +1 -1
  41. package/dist/cache/CacheManager.mjs +1102 -1089
  42. package/dist/cache/CacheManager.mjs.map +1 -1
  43. package/dist/cache/entities/AccessTokenEntity.d.ts +25 -25
  44. package/dist/cache/entities/AccountEntity.d.ts +101 -101
  45. package/dist/cache/entities/AccountEntity.mjs +218 -218
  46. package/dist/cache/entities/AppMetadataEntity.d.ts +39 -39
  47. package/dist/cache/entities/AppMetadataEntity.mjs +66 -66
  48. package/dist/cache/entities/AuthorityMetadataEntity.d.ts +48 -48
  49. package/dist/cache/entities/AuthorityMetadataEntity.mjs +78 -78
  50. package/dist/cache/entities/CacheRecord.d.ts +14 -14
  51. package/dist/cache/entities/CacheRecord.mjs +14 -14
  52. package/dist/cache/entities/CredentialEntity.d.ts +30 -30
  53. package/dist/cache/entities/IdTokenEntity.d.ts +8 -8
  54. package/dist/cache/entities/RefreshTokenEntity.d.ts +7 -5
  55. package/dist/cache/entities/RefreshTokenEntity.d.ts.map +1 -1
  56. package/dist/cache/entities/ServerTelemetryEntity.d.ts +5 -12
  57. package/dist/cache/entities/ServerTelemetryEntity.d.ts.map +1 -1
  58. package/dist/cache/entities/ThrottlingEntity.d.ts +13 -13
  59. package/dist/cache/entities/ThrottlingEntity.mjs +23 -23
  60. package/dist/cache/interface/ICacheManager.d.ts +166 -166
  61. package/dist/cache/interface/ICachePlugin.d.ts +5 -5
  62. package/dist/cache/interface/ISerializableTokenCache.d.ts +4 -4
  63. package/dist/cache/persistence/TokenCacheContext.d.ts +23 -23
  64. package/dist/cache/persistence/TokenCacheContext.mjs +25 -25
  65. package/dist/cache/utils/CacheHelpers.d.ts +64 -58
  66. package/dist/cache/utils/CacheHelpers.d.ts.map +1 -1
  67. package/dist/cache/utils/CacheHelpers.mjs +236 -217
  68. package/dist/cache/utils/CacheHelpers.mjs.map +1 -1
  69. package/dist/cache/utils/CacheTypes.d.ts +67 -67
  70. package/dist/client/AuthorizationCodeClient.d.ts +74 -73
  71. package/dist/client/AuthorizationCodeClient.d.ts.map +1 -1
  72. package/dist/client/AuthorizationCodeClient.mjs +402 -408
  73. package/dist/client/AuthorizationCodeClient.mjs.map +1 -1
  74. package/dist/client/BaseClient.d.ts +51 -51
  75. package/dist/client/BaseClient.mjs +100 -100
  76. package/dist/client/RefreshTokenClient.d.ts +35 -35
  77. package/dist/client/RefreshTokenClient.d.ts.map +1 -1
  78. package/dist/client/RefreshTokenClient.mjs +193 -187
  79. package/dist/client/RefreshTokenClient.mjs.map +1 -1
  80. package/dist/client/SilentFlowClient.d.ts +27 -27
  81. package/dist/client/SilentFlowClient.d.ts.map +1 -1
  82. package/dist/client/SilentFlowClient.mjs +118 -116
  83. package/dist/client/SilentFlowClient.mjs.map +1 -1
  84. package/dist/config/AppTokenProvider.d.ts +38 -38
  85. package/dist/config/ClientConfiguration.d.ts +150 -150
  86. package/dist/config/ClientConfiguration.mjs +97 -97
  87. package/dist/crypto/ICrypto.d.ts +58 -58
  88. package/dist/crypto/ICrypto.d.ts.map +1 -1
  89. package/dist/crypto/ICrypto.mjs +30 -30
  90. package/dist/crypto/ICrypto.mjs.map +1 -1
  91. package/dist/crypto/IGuidGenerator.d.ts +4 -4
  92. package/dist/crypto/JoseHeader.d.ts +22 -22
  93. package/dist/crypto/JoseHeader.d.ts.map +1 -1
  94. package/dist/crypto/JoseHeader.mjs +38 -38
  95. package/dist/crypto/JoseHeader.mjs.map +1 -1
  96. package/dist/crypto/PopTokenGenerator.d.ts +60 -60
  97. package/dist/crypto/PopTokenGenerator.d.ts.map +1 -1
  98. package/dist/crypto/PopTokenGenerator.mjs +82 -82
  99. package/dist/crypto/PopTokenGenerator.mjs.map +1 -1
  100. package/dist/crypto/SignedHttpRequest.d.ts +15 -11
  101. package/dist/crypto/SignedHttpRequest.d.ts.map +1 -1
  102. package/dist/error/AuthError.d.ts +44 -44
  103. package/dist/error/AuthError.mjs +46 -46
  104. package/dist/error/AuthErrorCodes.d.ts +5 -5
  105. package/dist/error/AuthErrorCodes.mjs +9 -9
  106. package/dist/error/ClientAuthError.d.ts +237 -237
  107. package/dist/error/ClientAuthError.mjs +249 -249
  108. package/dist/error/ClientAuthErrorCodes.d.ts +44 -44
  109. package/dist/error/ClientAuthErrorCodes.mjs +48 -48
  110. package/dist/error/ClientConfigurationError.d.ts +128 -128
  111. package/dist/error/ClientConfigurationError.mjs +135 -135
  112. package/dist/error/ClientConfigurationErrorCodes.d.ts +22 -22
  113. package/dist/error/ClientConfigurationErrorCodes.mjs +26 -26
  114. package/dist/error/InteractionRequiredAuthError.d.ts +57 -57
  115. package/dist/error/InteractionRequiredAuthError.d.ts.map +1 -1
  116. package/dist/error/InteractionRequiredAuthError.mjs +78 -77
  117. package/dist/error/InteractionRequiredAuthError.mjs.map +1 -1
  118. package/dist/error/InteractionRequiredAuthErrorCodes.d.ts +6 -5
  119. package/dist/error/InteractionRequiredAuthErrorCodes.d.ts.map +1 -1
  120. package/dist/error/InteractionRequiredAuthErrorCodes.mjs +13 -12
  121. package/dist/error/InteractionRequiredAuthErrorCodes.mjs.map +1 -1
  122. package/dist/error/JoseHeaderError.d.ts +15 -15
  123. package/dist/error/JoseHeaderError.mjs +22 -22
  124. package/dist/error/JoseHeaderErrorCodes.d.ts +2 -2
  125. package/dist/error/JoseHeaderErrorCodes.mjs +6 -6
  126. package/dist/error/ServerError.d.ts +7 -7
  127. package/dist/error/ServerError.mjs +14 -14
  128. package/dist/index.cjs +8300 -8350
  129. package/dist/index.cjs.map +1 -1
  130. package/dist/index.d.ts +98 -97
  131. package/dist/index.d.ts.map +1 -1
  132. package/dist/index.mjs +4 -3
  133. package/dist/index.mjs.map +1 -1
  134. package/dist/logger/Logger.d.ts +95 -95
  135. package/dist/logger/Logger.mjs +188 -188
  136. package/dist/network/INetworkModule.d.ts +29 -29
  137. package/dist/network/INetworkModule.mjs +12 -12
  138. package/dist/network/NetworkManager.d.ts +33 -33
  139. package/dist/network/NetworkManager.mjs +34 -34
  140. package/dist/network/RequestThumbprint.d.ts +18 -16
  141. package/dist/network/RequestThumbprint.d.ts.map +1 -1
  142. package/dist/network/ThrottlingUtils.d.ts +42 -42
  143. package/dist/network/ThrottlingUtils.mjs +95 -95
  144. package/dist/packageMetadata.d.ts +2 -2
  145. package/dist/packageMetadata.mjs +4 -4
  146. package/dist/request/AuthenticationHeaderParser.d.ts +19 -19
  147. package/dist/request/AuthenticationHeaderParser.mjs +55 -55
  148. package/dist/request/BaseAuthRequest.d.ts +43 -40
  149. package/dist/request/BaseAuthRequest.d.ts.map +1 -1
  150. package/dist/request/CommonAuthorizationCodeRequest.d.ts +27 -27
  151. package/dist/request/CommonAuthorizationUrlRequest.d.ts +50 -50
  152. package/dist/request/CommonClientCredentialRequest.d.ts +17 -17
  153. package/dist/request/CommonDeviceCodeRequest.d.ts +21 -21
  154. package/dist/request/CommonEndSessionRequest.d.ts +21 -21
  155. package/dist/request/CommonOnBehalfOfRequest.d.ts +13 -13
  156. package/dist/request/CommonRefreshTokenRequest.d.ts +23 -22
  157. package/dist/request/CommonRefreshTokenRequest.d.ts.map +1 -1
  158. package/dist/request/CommonSilentFlowRequest.d.ts +21 -20
  159. package/dist/request/CommonSilentFlowRequest.d.ts.map +1 -1
  160. package/dist/request/CommonUsernamePasswordRequest.d.ts +17 -17
  161. package/dist/request/NativeRequest.d.ts +19 -19
  162. package/dist/request/NativeSignOutRequest.d.ts +5 -5
  163. package/dist/request/RequestParameterBuilder.d.ts +217 -217
  164. package/dist/request/RequestParameterBuilder.mjs +381 -381
  165. package/dist/request/RequestValidator.d.ts +33 -33
  166. package/dist/request/RequestValidator.mjs +81 -81
  167. package/dist/request/ScopeSet.d.ts +88 -88
  168. package/dist/request/ScopeSet.mjs +197 -197
  169. package/dist/request/StoreInCache.d.ts +8 -8
  170. package/dist/response/AuthenticationResult.d.ts +41 -41
  171. package/dist/response/AuthorizationCodePayload.d.ts +13 -13
  172. package/dist/response/DeviceCodeResponse.d.ts +25 -25
  173. package/dist/response/ExternalTokenResponse.d.ts +15 -15
  174. package/dist/response/IMDSBadResponse.d.ts +4 -4
  175. package/dist/response/ResponseHandler.d.ts +67 -67
  176. package/dist/response/ResponseHandler.d.ts.map +1 -1
  177. package/dist/response/ResponseHandler.mjs +312 -312
  178. package/dist/response/ResponseHandler.mjs.map +1 -1
  179. package/dist/response/ServerAuthorizationCodeResponse.d.ts +25 -25
  180. package/dist/response/ServerAuthorizationTokenResponse.d.ts +46 -46
  181. package/dist/telemetry/performance/IPerformanceClient.d.ts +51 -51
  182. package/dist/telemetry/performance/IPerformanceMeasurement.d.ts +5 -5
  183. package/dist/telemetry/performance/PerformanceClient.d.ts +191 -191
  184. package/dist/telemetry/performance/PerformanceClient.mjs +409 -409
  185. package/dist/telemetry/performance/PerformanceEvent.d.ts +464 -457
  186. package/dist/telemetry/performance/PerformanceEvent.d.ts.map +1 -1
  187. package/dist/telemetry/performance/PerformanceEvent.mjs +253 -249
  188. package/dist/telemetry/performance/PerformanceEvent.mjs.map +1 -1
  189. package/dist/telemetry/performance/StubPerformanceClient.d.ts +24 -24
  190. package/dist/telemetry/performance/StubPerformanceClient.mjs +76 -76
  191. package/dist/telemetry/server/ServerTelemetryManager.d.ts +66 -66
  192. package/dist/telemetry/server/ServerTelemetryManager.d.ts.map +1 -1
  193. package/dist/telemetry/server/ServerTelemetryManager.mjs +201 -198
  194. package/dist/telemetry/server/ServerTelemetryManager.mjs.map +1 -1
  195. package/dist/telemetry/server/ServerTelemetryRequest.d.ts +8 -8
  196. package/dist/url/IUri.d.ts +12 -12
  197. package/dist/url/UrlString.d.ts +48 -83
  198. package/dist/url/UrlString.d.ts.map +1 -1
  199. package/dist/url/UrlString.mjs +163 -282
  200. package/dist/url/UrlString.mjs.map +1 -1
  201. package/dist/utils/Constants.d.ts +365 -366
  202. package/dist/utils/Constants.d.ts.map +1 -1
  203. package/dist/utils/Constants.mjs +376 -377
  204. package/dist/utils/Constants.mjs.map +1 -1
  205. package/dist/utils/FunctionWrappers.d.ts +27 -27
  206. package/dist/utils/FunctionWrappers.mjs +84 -84
  207. package/dist/utils/MsalTypes.d.ts +6 -6
  208. package/dist/utils/ProtocolUtils.d.ts +42 -42
  209. package/dist/utils/ProtocolUtils.mjs +69 -69
  210. package/dist/utils/StringUtils.d.ts +40 -40
  211. package/dist/utils/StringUtils.mjs +95 -95
  212. package/dist/utils/TimeUtils.d.ts +27 -27
  213. package/dist/utils/TimeUtils.mjs +45 -45
  214. package/dist/utils/UrlUtils.d.ts +11 -0
  215. package/dist/utils/UrlUtils.d.ts.map +1 -0
  216. package/dist/utils/UrlUtils.mjs +52 -0
  217. package/dist/utils/UrlUtils.mjs.map +1 -0
  218. package/package.json +92 -92
  219. package/src/authority/Authority.ts +2 -3
  220. package/src/cache/CacheManager.ts +63 -22
  221. package/src/cache/entities/RefreshTokenEntity.ts +3 -1
  222. package/src/cache/entities/ServerTelemetryEntity.ts +2 -30
  223. package/src/cache/utils/CacheHelpers.ts +27 -1
  224. package/src/client/AuthorizationCodeClient.ts +5 -14
  225. package/src/client/RefreshTokenClient.ts +20 -2
  226. package/src/client/SilentFlowClient.ts +8 -4
  227. package/src/crypto/ICrypto.ts +7 -2
  228. package/src/crypto/JoseHeader.ts +4 -4
  229. package/src/crypto/PopTokenGenerator.ts +2 -0
  230. package/src/crypto/SignedHttpRequest.ts +6 -0
  231. package/src/error/InteractionRequiredAuthError.ts +2 -0
  232. package/src/error/InteractionRequiredAuthErrorCodes.ts +1 -0
  233. package/src/index.ts +3 -1
  234. package/src/network/RequestThumbprint.ts +2 -0
  235. package/src/packageMetadata.ts +1 -1
  236. package/src/request/BaseAuthRequest.ts +3 -0
  237. package/src/request/CommonRefreshTokenRequest.ts +1 -0
  238. package/src/request/CommonSilentFlowRequest.ts +1 -0
  239. package/src/response/ResponseHandler.ts +8 -4
  240. package/src/telemetry/performance/PerformanceEvent.ts +12 -1
  241. package/src/telemetry/server/ServerTelemetryManager.ts +12 -6
  242. package/src/url/UrlString.ts +6 -153
  243. package/src/utils/Constants.ts +3 -3
  244. package/src/utils/UrlUtils.ts +60 -0
  245. package/dist/cache/entities/ServerTelemetryEntity.mjs +0 -34
  246. package/dist/cache/entities/ServerTelemetryEntity.mjs.map +0 -1
@@ -1,4 +1,4 @@
1
- /*! @azure/msal-common v14.3.0 2023-10-30 */
1
+ /*! @azure/msal-common v14.4.1-beta.0 2023-11-14 */
2
2
  'use strict';
3
3
  import { Separators, CacheAccountType, Constants } from '../../utils/Constants.mjs';
4
4
  import { buildClientInfo } from '../../account/ClientInfo.mjs';
@@ -7,223 +7,223 @@ import { AuthorityType } from '../../authority/AuthorityType.mjs';
7
7
  import { ProtocolMode } from '../../authority/ProtocolMode.mjs';
8
8
  import { invalidCacheEnvironment } from '../../error/ClientAuthErrorCodes.mjs';
9
9
 
10
- /*
11
- * Copyright (c) Microsoft Corporation. All rights reserved.
12
- * Licensed under the MIT License.
13
- */
14
- /**
15
- * Type that defines required and optional parameters for an Account field (based on universal cache schema implemented by all MSALs).
16
- *
17
- * Key : Value Schema
18
- *
19
- * Key: <home_account_id>-<environment>-<realm*>
20
- *
21
- * Value Schema:
22
- * {
23
- * homeAccountId: home account identifier for the auth scheme,
24
- * environment: entity that issued the token, represented as a full host
25
- * realm: Full tenant or organizational identifier that the account belongs to
26
- * localAccountId: Original tenant-specific accountID, usually used for legacy cases
27
- * username: primary username that represents the user, usually corresponds to preferred_username in the v2 endpt
28
- * authorityType: Accounts authority type as a string
29
- * name: Full name for the account, including given name and family name,
30
- * lastModificationTime: last time this entity was modified in the cache
31
- * lastModificationApp:
32
- * idTokenClaims: Object containing claims parsed from ID token
33
- * nativeAccountId: Account identifier on the native device
34
- * }
35
- * @internal
36
- */
37
- class AccountEntity {
38
- /**
39
- * Generate Account Id key component as per the schema: <home_account_id>-<environment>
40
- */
41
- generateAccountId() {
42
- const accountId = [this.homeAccountId, this.environment];
43
- return accountId.join(Separators.CACHE_KEY_SEPARATOR).toLowerCase();
44
- }
45
- /**
46
- * Generate Account Cache Key as per the schema: <home_account_id>-<environment>-<realm*>
47
- */
48
- generateAccountKey() {
49
- return AccountEntity.generateAccountCacheKey({
50
- homeAccountId: this.homeAccountId,
51
- environment: this.environment,
52
- tenantId: this.realm,
53
- username: this.username,
54
- localAccountId: this.localAccountId,
55
- });
56
- }
57
- /**
58
- * Returns the AccountInfo interface for this account.
59
- */
60
- getAccountInfo() {
61
- return {
62
- homeAccountId: this.homeAccountId,
63
- environment: this.environment,
64
- tenantId: this.realm,
65
- username: this.username,
66
- localAccountId: this.localAccountId,
67
- name: this.name,
68
- idTokenClaims: this.idTokenClaims,
69
- nativeAccountId: this.nativeAccountId,
70
- authorityType: this.authorityType,
71
- };
72
- }
73
- /**
74
- * Generates account key from interface
75
- * @param accountInterface
76
- */
77
- static generateAccountCacheKey(accountInterface) {
78
- const accountKey = [
79
- accountInterface.homeAccountId,
80
- accountInterface.environment || Constants.EMPTY_STRING,
81
- accountInterface.tenantId || Constants.EMPTY_STRING,
82
- ];
83
- return accountKey.join(Separators.CACHE_KEY_SEPARATOR).toLowerCase();
84
- }
85
- /**
86
- * Build Account cache from IdToken, clientInfo and authority/policy. Associated with AAD.
87
- * @param accountDetails
88
- */
89
- static createAccount(accountDetails, authority) {
90
- const account = new AccountEntity();
91
- if (authority.authorityType === AuthorityType.Adfs) {
92
- account.authorityType = CacheAccountType.ADFS_ACCOUNT_TYPE;
93
- }
94
- else if (authority.protocolMode === ProtocolMode.AAD) {
95
- account.authorityType = CacheAccountType.MSSTS_ACCOUNT_TYPE;
96
- }
97
- else {
98
- account.authorityType = CacheAccountType.GENERIC_ACCOUNT_TYPE;
99
- }
100
- account.clientInfo = accountDetails.clientInfo;
101
- account.homeAccountId = accountDetails.homeAccountId;
102
- account.nativeAccountId = accountDetails.nativeAccountId;
103
- const env = accountDetails.environment ||
104
- (authority && authority.getPreferredCache());
105
- if (!env) {
106
- throw createClientAuthError(invalidCacheEnvironment);
107
- }
108
- account.environment = env;
109
- // non AAD scenarios can have empty realm
110
- account.realm =
111
- accountDetails.idTokenClaims.tid || Constants.EMPTY_STRING;
112
- // How do you account for MSA CID here?
113
- account.localAccountId =
114
- accountDetails.idTokenClaims.oid ||
115
- accountDetails.idTokenClaims.sub ||
116
- Constants.EMPTY_STRING;
117
- /*
118
- * In B2C scenarios the emails claim is used instead of preferred_username and it is an array.
119
- * In most cases it will contain a single email. This field should not be relied upon if a custom
120
- * policy is configured to return more than 1 email.
121
- */
122
- const preferredUsername = accountDetails.idTokenClaims.preferred_username ||
123
- accountDetails.idTokenClaims.upn;
124
- const email = accountDetails.idTokenClaims.emails
125
- ? accountDetails.idTokenClaims.emails[0]
126
- : null;
127
- account.username = preferredUsername || email || Constants.EMPTY_STRING;
128
- account.name = accountDetails.idTokenClaims.name;
129
- account.cloudGraphHostName = accountDetails.cloudGraphHostName;
130
- account.msGraphHost = accountDetails.msGraphHost;
131
- return account;
132
- }
133
- /**
134
- * Creates an AccountEntity object from AccountInfo
135
- * @param accountInfo
136
- * @param cloudGraphHostName
137
- * @param msGraphHost
138
- * @returns
139
- */
140
- static createFromAccountInfo(accountInfo, cloudGraphHostName, msGraphHost) {
141
- const account = new AccountEntity();
142
- account.authorityType =
143
- accountInfo.authorityType || CacheAccountType.GENERIC_ACCOUNT_TYPE;
144
- account.homeAccountId = accountInfo.homeAccountId;
145
- account.localAccountId = accountInfo.localAccountId;
146
- account.nativeAccountId = accountInfo.nativeAccountId;
147
- account.realm = accountInfo.tenantId;
148
- account.environment = accountInfo.environment;
149
- account.username = accountInfo.username;
150
- account.name = accountInfo.name;
151
- account.cloudGraphHostName = cloudGraphHostName;
152
- account.msGraphHost = msGraphHost;
153
- return account;
154
- }
155
- /**
156
- * Generate HomeAccountId from server response
157
- * @param serverClientInfo
158
- * @param authType
159
- */
160
- static generateHomeAccountId(serverClientInfo, authType, logger, cryptoObj, idTokenClaims) {
161
- const accountId = idTokenClaims?.sub
162
- ? idTokenClaims.sub
163
- : Constants.EMPTY_STRING;
164
- // since ADFS does not have tid and does not set client_info
165
- if (authType === AuthorityType.Adfs ||
166
- authType === AuthorityType.Dsts) {
167
- return accountId;
168
- }
169
- // for cases where there is clientInfo
170
- if (serverClientInfo) {
171
- try {
172
- const clientInfo = buildClientInfo(serverClientInfo, cryptoObj);
173
- if (clientInfo.uid && clientInfo.utid) {
174
- return `${clientInfo.uid}${Separators.CLIENT_INFO_SEPARATOR}${clientInfo.utid}`;
175
- }
176
- }
177
- catch (e) { }
178
- }
179
- // default to "sub" claim
180
- logger.verbose("No client info in response");
181
- return accountId;
182
- }
183
- /**
184
- * Validates an entity: checks for all expected params
185
- * @param entity
186
- */
187
- static isAccountEntity(entity) {
188
- if (!entity) {
189
- return false;
190
- }
191
- return (entity.hasOwnProperty("homeAccountId") &&
192
- entity.hasOwnProperty("environment") &&
193
- entity.hasOwnProperty("realm") &&
194
- entity.hasOwnProperty("localAccountId") &&
195
- entity.hasOwnProperty("username") &&
196
- entity.hasOwnProperty("authorityType"));
197
- }
198
- /**
199
- * Helper function to determine whether 2 accountInfo objects represent the same account
200
- * @param accountA
201
- * @param accountB
202
- * @param compareClaims - If set to true idTokenClaims will also be compared to determine account equality
203
- */
204
- static accountInfoIsEqual(accountA, accountB, compareClaims) {
205
- if (!accountA || !accountB) {
206
- return false;
207
- }
208
- let claimsMatch = true; // default to true so as to not fail comparison below if compareClaims: false
209
- if (compareClaims) {
210
- const accountAClaims = (accountA.idTokenClaims ||
211
- {});
212
- const accountBClaims = (accountB.idTokenClaims ||
213
- {});
214
- // issued at timestamp and nonce are expected to change each time a new id token is acquired
215
- claimsMatch =
216
- accountAClaims.iat === accountBClaims.iat &&
217
- accountAClaims.nonce === accountBClaims.nonce;
218
- }
219
- return (accountA.homeAccountId === accountB.homeAccountId &&
220
- accountA.localAccountId === accountB.localAccountId &&
221
- accountA.username === accountB.username &&
222
- accountA.tenantId === accountB.tenantId &&
223
- accountA.environment === accountB.environment &&
224
- accountA.nativeAccountId === accountB.nativeAccountId &&
225
- claimsMatch);
226
- }
10
+ /*
11
+ * Copyright (c) Microsoft Corporation. All rights reserved.
12
+ * Licensed under the MIT License.
13
+ */
14
+ /**
15
+ * Type that defines required and optional parameters for an Account field (based on universal cache schema implemented by all MSALs).
16
+ *
17
+ * Key : Value Schema
18
+ *
19
+ * Key: <home_account_id>-<environment>-<realm*>
20
+ *
21
+ * Value Schema:
22
+ * {
23
+ * homeAccountId: home account identifier for the auth scheme,
24
+ * environment: entity that issued the token, represented as a full host
25
+ * realm: Full tenant or organizational identifier that the account belongs to
26
+ * localAccountId: Original tenant-specific accountID, usually used for legacy cases
27
+ * username: primary username that represents the user, usually corresponds to preferred_username in the v2 endpt
28
+ * authorityType: Accounts authority type as a string
29
+ * name: Full name for the account, including given name and family name,
30
+ * lastModificationTime: last time this entity was modified in the cache
31
+ * lastModificationApp:
32
+ * idTokenClaims: Object containing claims parsed from ID token
33
+ * nativeAccountId: Account identifier on the native device
34
+ * }
35
+ * @internal
36
+ */
37
+ class AccountEntity {
38
+ /**
39
+ * Generate Account Id key component as per the schema: <home_account_id>-<environment>
40
+ */
41
+ generateAccountId() {
42
+ const accountId = [this.homeAccountId, this.environment];
43
+ return accountId.join(Separators.CACHE_KEY_SEPARATOR).toLowerCase();
44
+ }
45
+ /**
46
+ * Generate Account Cache Key as per the schema: <home_account_id>-<environment>-<realm*>
47
+ */
48
+ generateAccountKey() {
49
+ return AccountEntity.generateAccountCacheKey({
50
+ homeAccountId: this.homeAccountId,
51
+ environment: this.environment,
52
+ tenantId: this.realm,
53
+ username: this.username,
54
+ localAccountId: this.localAccountId,
55
+ });
56
+ }
57
+ /**
58
+ * Returns the AccountInfo interface for this account.
59
+ */
60
+ getAccountInfo() {
61
+ return {
62
+ homeAccountId: this.homeAccountId,
63
+ environment: this.environment,
64
+ tenantId: this.realm,
65
+ username: this.username,
66
+ localAccountId: this.localAccountId,
67
+ name: this.name,
68
+ idTokenClaims: this.idTokenClaims,
69
+ nativeAccountId: this.nativeAccountId,
70
+ authorityType: this.authorityType,
71
+ };
72
+ }
73
+ /**
74
+ * Generates account key from interface
75
+ * @param accountInterface
76
+ */
77
+ static generateAccountCacheKey(accountInterface) {
78
+ const accountKey = [
79
+ accountInterface.homeAccountId,
80
+ accountInterface.environment || Constants.EMPTY_STRING,
81
+ accountInterface.tenantId || Constants.EMPTY_STRING,
82
+ ];
83
+ return accountKey.join(Separators.CACHE_KEY_SEPARATOR).toLowerCase();
84
+ }
85
+ /**
86
+ * Build Account cache from IdToken, clientInfo and authority/policy. Associated with AAD.
87
+ * @param accountDetails
88
+ */
89
+ static createAccount(accountDetails, authority) {
90
+ const account = new AccountEntity();
91
+ if (authority.authorityType === AuthorityType.Adfs) {
92
+ account.authorityType = CacheAccountType.ADFS_ACCOUNT_TYPE;
93
+ }
94
+ else if (authority.protocolMode === ProtocolMode.AAD) {
95
+ account.authorityType = CacheAccountType.MSSTS_ACCOUNT_TYPE;
96
+ }
97
+ else {
98
+ account.authorityType = CacheAccountType.GENERIC_ACCOUNT_TYPE;
99
+ }
100
+ account.clientInfo = accountDetails.clientInfo;
101
+ account.homeAccountId = accountDetails.homeAccountId;
102
+ account.nativeAccountId = accountDetails.nativeAccountId;
103
+ const env = accountDetails.environment ||
104
+ (authority && authority.getPreferredCache());
105
+ if (!env) {
106
+ throw createClientAuthError(invalidCacheEnvironment);
107
+ }
108
+ account.environment = env;
109
+ // non AAD scenarios can have empty realm
110
+ account.realm =
111
+ accountDetails.idTokenClaims.tid || Constants.EMPTY_STRING;
112
+ // How do you account for MSA CID here?
113
+ account.localAccountId =
114
+ accountDetails.idTokenClaims.oid ||
115
+ accountDetails.idTokenClaims.sub ||
116
+ Constants.EMPTY_STRING;
117
+ /*
118
+ * In B2C scenarios the emails claim is used instead of preferred_username and it is an array.
119
+ * In most cases it will contain a single email. This field should not be relied upon if a custom
120
+ * policy is configured to return more than 1 email.
121
+ */
122
+ const preferredUsername = accountDetails.idTokenClaims.preferred_username ||
123
+ accountDetails.idTokenClaims.upn;
124
+ const email = accountDetails.idTokenClaims.emails
125
+ ? accountDetails.idTokenClaims.emails[0]
126
+ : null;
127
+ account.username = preferredUsername || email || Constants.EMPTY_STRING;
128
+ account.name = accountDetails.idTokenClaims.name;
129
+ account.cloudGraphHostName = accountDetails.cloudGraphHostName;
130
+ account.msGraphHost = accountDetails.msGraphHost;
131
+ return account;
132
+ }
133
+ /**
134
+ * Creates an AccountEntity object from AccountInfo
135
+ * @param accountInfo
136
+ * @param cloudGraphHostName
137
+ * @param msGraphHost
138
+ * @returns
139
+ */
140
+ static createFromAccountInfo(accountInfo, cloudGraphHostName, msGraphHost) {
141
+ const account = new AccountEntity();
142
+ account.authorityType =
143
+ accountInfo.authorityType || CacheAccountType.GENERIC_ACCOUNT_TYPE;
144
+ account.homeAccountId = accountInfo.homeAccountId;
145
+ account.localAccountId = accountInfo.localAccountId;
146
+ account.nativeAccountId = accountInfo.nativeAccountId;
147
+ account.realm = accountInfo.tenantId;
148
+ account.environment = accountInfo.environment;
149
+ account.username = accountInfo.username;
150
+ account.name = accountInfo.name;
151
+ account.cloudGraphHostName = cloudGraphHostName;
152
+ account.msGraphHost = msGraphHost;
153
+ return account;
154
+ }
155
+ /**
156
+ * Generate HomeAccountId from server response
157
+ * @param serverClientInfo
158
+ * @param authType
159
+ */
160
+ static generateHomeAccountId(serverClientInfo, authType, logger, cryptoObj, idTokenClaims) {
161
+ const accountId = idTokenClaims?.sub
162
+ ? idTokenClaims.sub
163
+ : Constants.EMPTY_STRING;
164
+ // since ADFS does not have tid and does not set client_info
165
+ if (authType === AuthorityType.Adfs ||
166
+ authType === AuthorityType.Dsts) {
167
+ return accountId;
168
+ }
169
+ // for cases where there is clientInfo
170
+ if (serverClientInfo) {
171
+ try {
172
+ const clientInfo = buildClientInfo(serverClientInfo, cryptoObj);
173
+ if (clientInfo.uid && clientInfo.utid) {
174
+ return `${clientInfo.uid}${Separators.CLIENT_INFO_SEPARATOR}${clientInfo.utid}`;
175
+ }
176
+ }
177
+ catch (e) { }
178
+ }
179
+ // default to "sub" claim
180
+ logger.verbose("No client info in response");
181
+ return accountId;
182
+ }
183
+ /**
184
+ * Validates an entity: checks for all expected params
185
+ * @param entity
186
+ */
187
+ static isAccountEntity(entity) {
188
+ if (!entity) {
189
+ return false;
190
+ }
191
+ return (entity.hasOwnProperty("homeAccountId") &&
192
+ entity.hasOwnProperty("environment") &&
193
+ entity.hasOwnProperty("realm") &&
194
+ entity.hasOwnProperty("localAccountId") &&
195
+ entity.hasOwnProperty("username") &&
196
+ entity.hasOwnProperty("authorityType"));
197
+ }
198
+ /**
199
+ * Helper function to determine whether 2 accountInfo objects represent the same account
200
+ * @param accountA
201
+ * @param accountB
202
+ * @param compareClaims - If set to true idTokenClaims will also be compared to determine account equality
203
+ */
204
+ static accountInfoIsEqual(accountA, accountB, compareClaims) {
205
+ if (!accountA || !accountB) {
206
+ return false;
207
+ }
208
+ let claimsMatch = true; // default to true so as to not fail comparison below if compareClaims: false
209
+ if (compareClaims) {
210
+ const accountAClaims = (accountA.idTokenClaims ||
211
+ {});
212
+ const accountBClaims = (accountB.idTokenClaims ||
213
+ {});
214
+ // issued at timestamp and nonce are expected to change each time a new id token is acquired
215
+ claimsMatch =
216
+ accountAClaims.iat === accountBClaims.iat &&
217
+ accountAClaims.nonce === accountBClaims.nonce;
218
+ }
219
+ return (accountA.homeAccountId === accountB.homeAccountId &&
220
+ accountA.localAccountId === accountB.localAccountId &&
221
+ accountA.username === accountB.username &&
222
+ accountA.tenantId === accountB.tenantId &&
223
+ accountA.environment === accountB.environment &&
224
+ accountA.nativeAccountId === accountB.nativeAccountId &&
225
+ claimsMatch);
226
+ }
227
227
  }
228
228
 
229
229
  export { AccountEntity };
@@ -1,40 +1,40 @@
1
- /**
2
- * APP_METADATA Cache
3
- *
4
- * Key:Value Schema:
5
- *
6
- * Key: appmetadata-<environment>-<client_id>
7
- *
8
- * Value:
9
- * {
10
- * clientId: client ID of the application
11
- * environment: entity that issued the token, represented as a full host
12
- * familyId: Family ID identifier, '1' represents Microsoft Family
13
- * }
14
- */
15
- export declare class AppMetadataEntity {
16
- clientId: string;
17
- environment: string;
18
- familyId?: string;
19
- /**
20
- * Generate AppMetadata Cache Key as per the schema: appmetadata-<environment>-<client_id>
21
- */
22
- generateAppMetadataKey(): string;
23
- /**
24
- * Generate AppMetadata Cache Key
25
- */
26
- static generateAppMetadataCacheKey(environment: string, clientId: string): string;
27
- /**
28
- * Creates AppMetadataEntity
29
- * @param clientId
30
- * @param environment
31
- * @param familyId
32
- */
33
- static createAppMetadataEntity(clientId: string, environment: string, familyId?: string): AppMetadataEntity;
34
- /**
35
- * Validates an entity: checks for all expected params
36
- * @param entity
37
- */
38
- static isAppMetadataEntity(key: string, entity: object): boolean;
39
- }
1
+ /**
2
+ * APP_METADATA Cache
3
+ *
4
+ * Key:Value Schema:
5
+ *
6
+ * Key: appmetadata-<environment>-<client_id>
7
+ *
8
+ * Value:
9
+ * {
10
+ * clientId: client ID of the application
11
+ * environment: entity that issued the token, represented as a full host
12
+ * familyId: Family ID identifier, '1' represents Microsoft Family
13
+ * }
14
+ */
15
+ export declare class AppMetadataEntity {
16
+ clientId: string;
17
+ environment: string;
18
+ familyId?: string;
19
+ /**
20
+ * Generate AppMetadata Cache Key as per the schema: appmetadata-<environment>-<client_id>
21
+ */
22
+ generateAppMetadataKey(): string;
23
+ /**
24
+ * Generate AppMetadata Cache Key
25
+ */
26
+ static generateAppMetadataCacheKey(environment: string, clientId: string): string;
27
+ /**
28
+ * Creates AppMetadataEntity
29
+ * @param clientId
30
+ * @param environment
31
+ * @param familyId
32
+ */
33
+ static createAppMetadataEntity(clientId: string, environment: string, familyId?: string): AppMetadataEntity;
34
+ /**
35
+ * Validates an entity: checks for all expected params
36
+ * @param entity
37
+ */
38
+ static isAppMetadataEntity(key: string, entity: object): boolean;
39
+ }
40
40
  //# sourceMappingURL=AppMetadataEntity.d.ts.map
@@ -1,72 +1,72 @@
1
- /*! @azure/msal-common v14.3.0 2023-10-30 */
1
+ /*! @azure/msal-common v14.4.1-beta.0 2023-11-14 */
2
2
  'use strict';
3
3
  import { Separators, APP_METADATA } from '../../utils/Constants.mjs';
4
4
 
5
- /*
6
- * Copyright (c) Microsoft Corporation. All rights reserved.
7
- * Licensed under the MIT License.
8
- */
9
- /**
10
- * APP_METADATA Cache
11
- *
12
- * Key:Value Schema:
13
- *
14
- * Key: appmetadata-<environment>-<client_id>
15
- *
16
- * Value:
17
- * {
18
- * clientId: client ID of the application
19
- * environment: entity that issued the token, represented as a full host
20
- * familyId: Family ID identifier, '1' represents Microsoft Family
21
- * }
22
- */
23
- class AppMetadataEntity {
24
- /**
25
- * Generate AppMetadata Cache Key as per the schema: appmetadata-<environment>-<client_id>
26
- */
27
- generateAppMetadataKey() {
28
- return AppMetadataEntity.generateAppMetadataCacheKey(this.environment, this.clientId);
29
- }
30
- /**
31
- * Generate AppMetadata Cache Key
32
- */
33
- static generateAppMetadataCacheKey(environment, clientId) {
34
- const appMetaDataKeyArray = [
35
- APP_METADATA,
36
- environment,
37
- clientId,
38
- ];
39
- return appMetaDataKeyArray
40
- .join(Separators.CACHE_KEY_SEPARATOR)
41
- .toLowerCase();
42
- }
43
- /**
44
- * Creates AppMetadataEntity
45
- * @param clientId
46
- * @param environment
47
- * @param familyId
48
- */
49
- static createAppMetadataEntity(clientId, environment, familyId) {
50
- const appMetadata = new AppMetadataEntity();
51
- appMetadata.clientId = clientId;
52
- appMetadata.environment = environment;
53
- if (familyId) {
54
- appMetadata.familyId = familyId;
55
- }
56
- return appMetadata;
57
- }
58
- /**
59
- * Validates an entity: checks for all expected params
60
- * @param entity
61
- */
62
- static isAppMetadataEntity(key, entity) {
63
- if (!entity) {
64
- return false;
65
- }
66
- return (key.indexOf(APP_METADATA) === 0 &&
67
- entity.hasOwnProperty("clientId") &&
68
- entity.hasOwnProperty("environment"));
69
- }
5
+ /*
6
+ * Copyright (c) Microsoft Corporation. All rights reserved.
7
+ * Licensed under the MIT License.
8
+ */
9
+ /**
10
+ * APP_METADATA Cache
11
+ *
12
+ * Key:Value Schema:
13
+ *
14
+ * Key: appmetadata-<environment>-<client_id>
15
+ *
16
+ * Value:
17
+ * {
18
+ * clientId: client ID of the application
19
+ * environment: entity that issued the token, represented as a full host
20
+ * familyId: Family ID identifier, '1' represents Microsoft Family
21
+ * }
22
+ */
23
+ class AppMetadataEntity {
24
+ /**
25
+ * Generate AppMetadata Cache Key as per the schema: appmetadata-<environment>-<client_id>
26
+ */
27
+ generateAppMetadataKey() {
28
+ return AppMetadataEntity.generateAppMetadataCacheKey(this.environment, this.clientId);
29
+ }
30
+ /**
31
+ * Generate AppMetadata Cache Key
32
+ */
33
+ static generateAppMetadataCacheKey(environment, clientId) {
34
+ const appMetaDataKeyArray = [
35
+ APP_METADATA,
36
+ environment,
37
+ clientId,
38
+ ];
39
+ return appMetaDataKeyArray
40
+ .join(Separators.CACHE_KEY_SEPARATOR)
41
+ .toLowerCase();
42
+ }
43
+ /**
44
+ * Creates AppMetadataEntity
45
+ * @param clientId
46
+ * @param environment
47
+ * @param familyId
48
+ */
49
+ static createAppMetadataEntity(clientId, environment, familyId) {
50
+ const appMetadata = new AppMetadataEntity();
51
+ appMetadata.clientId = clientId;
52
+ appMetadata.environment = environment;
53
+ if (familyId) {
54
+ appMetadata.familyId = familyId;
55
+ }
56
+ return appMetadata;
57
+ }
58
+ /**
59
+ * Validates an entity: checks for all expected params
60
+ * @param entity
61
+ */
62
+ static isAppMetadataEntity(key, entity) {
63
+ if (!entity) {
64
+ return false;
65
+ }
66
+ return (key.indexOf(APP_METADATA) === 0 &&
67
+ entity.hasOwnProperty("clientId") &&
68
+ entity.hasOwnProperty("environment"));
69
+ }
70
70
  }
71
71
 
72
72
  export { AppMetadataEntity };