@azure/msal-common 14.4.0 → 14.4.1-beta.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (202) hide show
  1. package/dist/account/AccountInfo.d.ts +31 -31
  2. package/dist/account/AuthToken.d.ts +17 -17
  3. package/dist/account/AuthToken.mjs +58 -58
  4. package/dist/account/CcsCredential.d.ts +9 -9
  5. package/dist/account/CcsCredential.mjs +8 -8
  6. package/dist/account/ClientCredentials.d.ts +14 -14
  7. package/dist/account/ClientInfo.d.ts +19 -19
  8. package/dist/account/ClientInfo.mjs +37 -37
  9. package/dist/account/TokenClaims.d.ts +65 -65
  10. package/dist/authority/Authority.d.ts +249 -249
  11. package/dist/authority/Authority.mjs +788 -788
  12. package/dist/authority/AuthorityFactory.d.ts +31 -31
  13. package/dist/authority/AuthorityFactory.mjs +47 -47
  14. package/dist/authority/AuthorityMetadata.d.ts +503 -503
  15. package/dist/authority/AuthorityMetadata.mjs +603 -603
  16. package/dist/authority/AuthorityOptions.d.ts +27 -27
  17. package/dist/authority/AuthorityOptions.mjs +18 -18
  18. package/dist/authority/AuthorityType.d.ts +10 -10
  19. package/dist/authority/AuthorityType.mjs +13 -13
  20. package/dist/authority/AzureRegion.d.ts +1 -1
  21. package/dist/authority/AzureRegionConfiguration.d.ts +5 -5
  22. package/dist/authority/CloudDiscoveryMetadata.d.ts +5 -5
  23. package/dist/authority/CloudInstanceDiscoveryErrorResponse.d.ts +13 -13
  24. package/dist/authority/CloudInstanceDiscoveryErrorResponse.mjs +8 -8
  25. package/dist/authority/CloudInstanceDiscoveryResponse.d.ts +9 -9
  26. package/dist/authority/CloudInstanceDiscoveryResponse.mjs +8 -8
  27. package/dist/authority/ImdsOptions.d.ts +5 -5
  28. package/dist/authority/OIDCOptions.d.ts +8 -8
  29. package/dist/authority/OpenIdConfigResponse.d.ts +11 -11
  30. package/dist/authority/OpenIdConfigResponse.mjs +10 -10
  31. package/dist/authority/ProtocolMode.d.ts +8 -8
  32. package/dist/authority/ProtocolMode.mjs +11 -11
  33. package/dist/authority/RegionDiscovery.d.ts +32 -32
  34. package/dist/authority/RegionDiscovery.mjs +106 -106
  35. package/dist/authority/RegionDiscoveryMetadata.d.ts +6 -6
  36. package/dist/broker/nativeBroker/INativeBrokerPlugin.d.ts +15 -15
  37. package/dist/cache/CacheManager.d.ts +485 -485
  38. package/dist/cache/CacheManager.mjs +1102 -1102
  39. package/dist/cache/entities/AccessTokenEntity.d.ts +25 -25
  40. package/dist/cache/entities/AccountEntity.d.ts +101 -101
  41. package/dist/cache/entities/AccountEntity.mjs +218 -218
  42. package/dist/cache/entities/AppMetadataEntity.d.ts +39 -39
  43. package/dist/cache/entities/AppMetadataEntity.mjs +66 -66
  44. package/dist/cache/entities/AuthorityMetadataEntity.d.ts +48 -48
  45. package/dist/cache/entities/AuthorityMetadataEntity.mjs +78 -78
  46. package/dist/cache/entities/CacheRecord.d.ts +14 -14
  47. package/dist/cache/entities/CacheRecord.mjs +14 -14
  48. package/dist/cache/entities/CredentialEntity.d.ts +30 -30
  49. package/dist/cache/entities/IdTokenEntity.d.ts +8 -8
  50. package/dist/cache/entities/RefreshTokenEntity.d.ts +7 -5
  51. package/dist/cache/entities/RefreshTokenEntity.d.ts.map +1 -1
  52. package/dist/cache/entities/ServerTelemetryEntity.d.ts +5 -5
  53. package/dist/cache/entities/ThrottlingEntity.d.ts +13 -13
  54. package/dist/cache/entities/ThrottlingEntity.mjs +23 -23
  55. package/dist/cache/interface/ICacheManager.d.ts +166 -166
  56. package/dist/cache/interface/ICachePlugin.d.ts +5 -5
  57. package/dist/cache/interface/ISerializableTokenCache.d.ts +4 -4
  58. package/dist/cache/persistence/TokenCacheContext.d.ts +23 -23
  59. package/dist/cache/persistence/TokenCacheContext.mjs +25 -25
  60. package/dist/cache/utils/CacheHelpers.d.ts +64 -64
  61. package/dist/cache/utils/CacheHelpers.d.ts.map +1 -1
  62. package/dist/cache/utils/CacheHelpers.mjs +234 -231
  63. package/dist/cache/utils/CacheHelpers.mjs.map +1 -1
  64. package/dist/cache/utils/CacheTypes.d.ts +67 -67
  65. package/dist/client/AuthorizationCodeClient.d.ts +74 -74
  66. package/dist/client/AuthorizationCodeClient.d.ts.map +1 -1
  67. package/dist/client/AuthorizationCodeClient.mjs +402 -402
  68. package/dist/client/AuthorizationCodeClient.mjs.map +1 -1
  69. package/dist/client/BaseClient.d.ts +51 -51
  70. package/dist/client/BaseClient.mjs +100 -100
  71. package/dist/client/RefreshTokenClient.d.ts +35 -35
  72. package/dist/client/RefreshTokenClient.d.ts.map +1 -1
  73. package/dist/client/RefreshTokenClient.mjs +193 -187
  74. package/dist/client/RefreshTokenClient.mjs.map +1 -1
  75. package/dist/client/SilentFlowClient.d.ts +27 -27
  76. package/dist/client/SilentFlowClient.mjs +118 -118
  77. package/dist/config/AppTokenProvider.d.ts +38 -38
  78. package/dist/config/ClientConfiguration.d.ts +150 -150
  79. package/dist/config/ClientConfiguration.mjs +97 -97
  80. package/dist/crypto/ICrypto.d.ts +58 -58
  81. package/dist/crypto/ICrypto.mjs +30 -30
  82. package/dist/crypto/IGuidGenerator.d.ts +4 -4
  83. package/dist/crypto/JoseHeader.d.ts +22 -22
  84. package/dist/crypto/JoseHeader.mjs +37 -37
  85. package/dist/crypto/PopTokenGenerator.d.ts +60 -60
  86. package/dist/crypto/PopTokenGenerator.mjs +82 -82
  87. package/dist/crypto/SignedHttpRequest.d.ts +15 -15
  88. package/dist/error/AuthError.d.ts +44 -44
  89. package/dist/error/AuthError.mjs +46 -46
  90. package/dist/error/AuthErrorCodes.d.ts +5 -5
  91. package/dist/error/AuthErrorCodes.mjs +9 -9
  92. package/dist/error/ClientAuthError.d.ts +237 -237
  93. package/dist/error/ClientAuthError.mjs +249 -249
  94. package/dist/error/ClientAuthErrorCodes.d.ts +44 -44
  95. package/dist/error/ClientAuthErrorCodes.mjs +48 -48
  96. package/dist/error/ClientConfigurationError.d.ts +128 -128
  97. package/dist/error/ClientConfigurationError.mjs +135 -135
  98. package/dist/error/ClientConfigurationErrorCodes.d.ts +22 -22
  99. package/dist/error/ClientConfigurationErrorCodes.mjs +26 -26
  100. package/dist/error/InteractionRequiredAuthError.d.ts +57 -57
  101. package/dist/error/InteractionRequiredAuthError.d.ts.map +1 -1
  102. package/dist/error/InteractionRequiredAuthError.mjs +78 -77
  103. package/dist/error/InteractionRequiredAuthError.mjs.map +1 -1
  104. package/dist/error/InteractionRequiredAuthErrorCodes.d.ts +6 -5
  105. package/dist/error/InteractionRequiredAuthErrorCodes.d.ts.map +1 -1
  106. package/dist/error/InteractionRequiredAuthErrorCodes.mjs +13 -12
  107. package/dist/error/InteractionRequiredAuthErrorCodes.mjs.map +1 -1
  108. package/dist/error/JoseHeaderError.d.ts +15 -15
  109. package/dist/error/JoseHeaderError.mjs +22 -22
  110. package/dist/error/JoseHeaderErrorCodes.d.ts +2 -2
  111. package/dist/error/JoseHeaderErrorCodes.mjs +6 -6
  112. package/dist/error/ServerError.d.ts +7 -7
  113. package/dist/error/ServerError.mjs +14 -14
  114. package/dist/index.cjs +8290 -8278
  115. package/dist/index.cjs.map +1 -1
  116. package/dist/index.d.ts +98 -98
  117. package/dist/index.mjs +1 -1
  118. package/dist/logger/Logger.d.ts +95 -95
  119. package/dist/logger/Logger.mjs +188 -188
  120. package/dist/network/INetworkModule.d.ts +29 -29
  121. package/dist/network/INetworkModule.mjs +12 -12
  122. package/dist/network/NetworkManager.d.ts +33 -33
  123. package/dist/network/NetworkManager.mjs +34 -34
  124. package/dist/network/RequestThumbprint.d.ts +18 -18
  125. package/dist/network/ThrottlingUtils.d.ts +42 -42
  126. package/dist/network/ThrottlingUtils.mjs +95 -95
  127. package/dist/packageMetadata.d.ts +2 -2
  128. package/dist/packageMetadata.d.ts.map +1 -1
  129. package/dist/packageMetadata.mjs +4 -4
  130. package/dist/packageMetadata.mjs.map +1 -1
  131. package/dist/request/AuthenticationHeaderParser.d.ts +19 -19
  132. package/dist/request/AuthenticationHeaderParser.mjs +55 -55
  133. package/dist/request/BaseAuthRequest.d.ts +43 -43
  134. package/dist/request/CommonAuthorizationCodeRequest.d.ts +27 -27
  135. package/dist/request/CommonAuthorizationUrlRequest.d.ts +50 -50
  136. package/dist/request/CommonClientCredentialRequest.d.ts +17 -17
  137. package/dist/request/CommonDeviceCodeRequest.d.ts +21 -21
  138. package/dist/request/CommonEndSessionRequest.d.ts +21 -21
  139. package/dist/request/CommonOnBehalfOfRequest.d.ts +13 -13
  140. package/dist/request/CommonRefreshTokenRequest.d.ts +23 -22
  141. package/dist/request/CommonRefreshTokenRequest.d.ts.map +1 -1
  142. package/dist/request/CommonSilentFlowRequest.d.ts +21 -20
  143. package/dist/request/CommonSilentFlowRequest.d.ts.map +1 -1
  144. package/dist/request/CommonUsernamePasswordRequest.d.ts +17 -17
  145. package/dist/request/NativeRequest.d.ts +19 -19
  146. package/dist/request/NativeSignOutRequest.d.ts +5 -5
  147. package/dist/request/RequestParameterBuilder.d.ts +217 -217
  148. package/dist/request/RequestParameterBuilder.mjs +381 -381
  149. package/dist/request/RequestValidator.d.ts +33 -33
  150. package/dist/request/RequestValidator.mjs +81 -81
  151. package/dist/request/ScopeSet.d.ts +88 -88
  152. package/dist/request/ScopeSet.mjs +197 -197
  153. package/dist/request/StoreInCache.d.ts +8 -8
  154. package/dist/response/AuthenticationResult.d.ts +41 -41
  155. package/dist/response/AuthorizationCodePayload.d.ts +13 -13
  156. package/dist/response/DeviceCodeResponse.d.ts +25 -25
  157. package/dist/response/ExternalTokenResponse.d.ts +15 -15
  158. package/dist/response/IMDSBadResponse.d.ts +4 -4
  159. package/dist/response/ResponseHandler.d.ts +67 -67
  160. package/dist/response/ResponseHandler.d.ts.map +1 -1
  161. package/dist/response/ResponseHandler.mjs +312 -312
  162. package/dist/response/ResponseHandler.mjs.map +1 -1
  163. package/dist/response/ServerAuthorizationCodeResponse.d.ts +25 -25
  164. package/dist/response/ServerAuthorizationTokenResponse.d.ts +46 -46
  165. package/dist/telemetry/performance/IPerformanceClient.d.ts +51 -51
  166. package/dist/telemetry/performance/IPerformanceMeasurement.d.ts +5 -5
  167. package/dist/telemetry/performance/PerformanceClient.d.ts +191 -191
  168. package/dist/telemetry/performance/PerformanceClient.mjs +409 -409
  169. package/dist/telemetry/performance/PerformanceEvent.d.ts +464 -464
  170. package/dist/telemetry/performance/PerformanceEvent.mjs +253 -253
  171. package/dist/telemetry/performance/StubPerformanceClient.d.ts +24 -24
  172. package/dist/telemetry/performance/StubPerformanceClient.mjs +76 -76
  173. package/dist/telemetry/server/ServerTelemetryManager.d.ts +66 -66
  174. package/dist/telemetry/server/ServerTelemetryManager.mjs +201 -201
  175. package/dist/telemetry/server/ServerTelemetryRequest.d.ts +8 -8
  176. package/dist/url/IUri.d.ts +12 -12
  177. package/dist/url/UrlString.d.ts +48 -48
  178. package/dist/url/UrlString.mjs +161 -161
  179. package/dist/utils/Constants.d.ts +365 -365
  180. package/dist/utils/Constants.mjs +375 -375
  181. package/dist/utils/FunctionWrappers.d.ts +27 -27
  182. package/dist/utils/FunctionWrappers.mjs +84 -84
  183. package/dist/utils/MsalTypes.d.ts +6 -6
  184. package/dist/utils/ProtocolUtils.d.ts +42 -42
  185. package/dist/utils/ProtocolUtils.mjs +69 -69
  186. package/dist/utils/StringUtils.d.ts +40 -40
  187. package/dist/utils/StringUtils.mjs +95 -95
  188. package/dist/utils/TimeUtils.d.ts +27 -27
  189. package/dist/utils/TimeUtils.mjs +45 -45
  190. package/dist/utils/UrlUtils.d.ts +10 -10
  191. package/dist/utils/UrlUtils.mjs +44 -44
  192. package/package.json +92 -92
  193. package/src/cache/entities/RefreshTokenEntity.ts +3 -1
  194. package/src/cache/utils/CacheHelpers.ts +6 -1
  195. package/src/client/AuthorizationCodeClient.ts +2 -1
  196. package/src/client/RefreshTokenClient.ts +13 -1
  197. package/src/error/InteractionRequiredAuthError.ts +2 -0
  198. package/src/error/InteractionRequiredAuthErrorCodes.ts +1 -0
  199. package/src/packageMetadata.ts +1 -1
  200. package/src/request/CommonRefreshTokenRequest.ts +1 -0
  201. package/src/request/CommonSilentFlowRequest.ts +1 -0
  202. package/src/response/ResponseHandler.ts +8 -4
@@ -1,4 +1,4 @@
1
- /*! @azure/msal-common v14.4.0 2023-11-07 */
1
+ /*! @azure/msal-common v14.4.1-beta.1 2023-11-14 */
2
2
  'use strict';
3
3
  import { Separators, CacheAccountType, Constants } from '../../utils/Constants.mjs';
4
4
  import { buildClientInfo } from '../../account/ClientInfo.mjs';
@@ -7,223 +7,223 @@ import { AuthorityType } from '../../authority/AuthorityType.mjs';
7
7
  import { ProtocolMode } from '../../authority/ProtocolMode.mjs';
8
8
  import { invalidCacheEnvironment } from '../../error/ClientAuthErrorCodes.mjs';
9
9
 
10
- /*
11
- * Copyright (c) Microsoft Corporation. All rights reserved.
12
- * Licensed under the MIT License.
13
- */
14
- /**
15
- * Type that defines required and optional parameters for an Account field (based on universal cache schema implemented by all MSALs).
16
- *
17
- * Key : Value Schema
18
- *
19
- * Key: <home_account_id>-<environment>-<realm*>
20
- *
21
- * Value Schema:
22
- * {
23
- * homeAccountId: home account identifier for the auth scheme,
24
- * environment: entity that issued the token, represented as a full host
25
- * realm: Full tenant or organizational identifier that the account belongs to
26
- * localAccountId: Original tenant-specific accountID, usually used for legacy cases
27
- * username: primary username that represents the user, usually corresponds to preferred_username in the v2 endpt
28
- * authorityType: Accounts authority type as a string
29
- * name: Full name for the account, including given name and family name,
30
- * lastModificationTime: last time this entity was modified in the cache
31
- * lastModificationApp:
32
- * idTokenClaims: Object containing claims parsed from ID token
33
- * nativeAccountId: Account identifier on the native device
34
- * }
35
- * @internal
36
- */
37
- class AccountEntity {
38
- /**
39
- * Generate Account Id key component as per the schema: <home_account_id>-<environment>
40
- */
41
- generateAccountId() {
42
- const accountId = [this.homeAccountId, this.environment];
43
- return accountId.join(Separators.CACHE_KEY_SEPARATOR).toLowerCase();
44
- }
45
- /**
46
- * Generate Account Cache Key as per the schema: <home_account_id>-<environment>-<realm*>
47
- */
48
- generateAccountKey() {
49
- return AccountEntity.generateAccountCacheKey({
50
- homeAccountId: this.homeAccountId,
51
- environment: this.environment,
52
- tenantId: this.realm,
53
- username: this.username,
54
- localAccountId: this.localAccountId,
55
- });
56
- }
57
- /**
58
- * Returns the AccountInfo interface for this account.
59
- */
60
- getAccountInfo() {
61
- return {
62
- homeAccountId: this.homeAccountId,
63
- environment: this.environment,
64
- tenantId: this.realm,
65
- username: this.username,
66
- localAccountId: this.localAccountId,
67
- name: this.name,
68
- idTokenClaims: this.idTokenClaims,
69
- nativeAccountId: this.nativeAccountId,
70
- authorityType: this.authorityType,
71
- };
72
- }
73
- /**
74
- * Generates account key from interface
75
- * @param accountInterface
76
- */
77
- static generateAccountCacheKey(accountInterface) {
78
- const accountKey = [
79
- accountInterface.homeAccountId,
80
- accountInterface.environment || Constants.EMPTY_STRING,
81
- accountInterface.tenantId || Constants.EMPTY_STRING,
82
- ];
83
- return accountKey.join(Separators.CACHE_KEY_SEPARATOR).toLowerCase();
84
- }
85
- /**
86
- * Build Account cache from IdToken, clientInfo and authority/policy. Associated with AAD.
87
- * @param accountDetails
88
- */
89
- static createAccount(accountDetails, authority) {
90
- const account = new AccountEntity();
91
- if (authority.authorityType === AuthorityType.Adfs) {
92
- account.authorityType = CacheAccountType.ADFS_ACCOUNT_TYPE;
93
- }
94
- else if (authority.protocolMode === ProtocolMode.AAD) {
95
- account.authorityType = CacheAccountType.MSSTS_ACCOUNT_TYPE;
96
- }
97
- else {
98
- account.authorityType = CacheAccountType.GENERIC_ACCOUNT_TYPE;
99
- }
100
- account.clientInfo = accountDetails.clientInfo;
101
- account.homeAccountId = accountDetails.homeAccountId;
102
- account.nativeAccountId = accountDetails.nativeAccountId;
103
- const env = accountDetails.environment ||
104
- (authority && authority.getPreferredCache());
105
- if (!env) {
106
- throw createClientAuthError(invalidCacheEnvironment);
107
- }
108
- account.environment = env;
109
- // non AAD scenarios can have empty realm
110
- account.realm =
111
- accountDetails.idTokenClaims.tid || Constants.EMPTY_STRING;
112
- // How do you account for MSA CID here?
113
- account.localAccountId =
114
- accountDetails.idTokenClaims.oid ||
115
- accountDetails.idTokenClaims.sub ||
116
- Constants.EMPTY_STRING;
117
- /*
118
- * In B2C scenarios the emails claim is used instead of preferred_username and it is an array.
119
- * In most cases it will contain a single email. This field should not be relied upon if a custom
120
- * policy is configured to return more than 1 email.
121
- */
122
- const preferredUsername = accountDetails.idTokenClaims.preferred_username ||
123
- accountDetails.idTokenClaims.upn;
124
- const email = accountDetails.idTokenClaims.emails
125
- ? accountDetails.idTokenClaims.emails[0]
126
- : null;
127
- account.username = preferredUsername || email || Constants.EMPTY_STRING;
128
- account.name = accountDetails.idTokenClaims.name;
129
- account.cloudGraphHostName = accountDetails.cloudGraphHostName;
130
- account.msGraphHost = accountDetails.msGraphHost;
131
- return account;
132
- }
133
- /**
134
- * Creates an AccountEntity object from AccountInfo
135
- * @param accountInfo
136
- * @param cloudGraphHostName
137
- * @param msGraphHost
138
- * @returns
139
- */
140
- static createFromAccountInfo(accountInfo, cloudGraphHostName, msGraphHost) {
141
- const account = new AccountEntity();
142
- account.authorityType =
143
- accountInfo.authorityType || CacheAccountType.GENERIC_ACCOUNT_TYPE;
144
- account.homeAccountId = accountInfo.homeAccountId;
145
- account.localAccountId = accountInfo.localAccountId;
146
- account.nativeAccountId = accountInfo.nativeAccountId;
147
- account.realm = accountInfo.tenantId;
148
- account.environment = accountInfo.environment;
149
- account.username = accountInfo.username;
150
- account.name = accountInfo.name;
151
- account.cloudGraphHostName = cloudGraphHostName;
152
- account.msGraphHost = msGraphHost;
153
- return account;
154
- }
155
- /**
156
- * Generate HomeAccountId from server response
157
- * @param serverClientInfo
158
- * @param authType
159
- */
160
- static generateHomeAccountId(serverClientInfo, authType, logger, cryptoObj, idTokenClaims) {
161
- const accountId = idTokenClaims?.sub
162
- ? idTokenClaims.sub
163
- : Constants.EMPTY_STRING;
164
- // since ADFS does not have tid and does not set client_info
165
- if (authType === AuthorityType.Adfs ||
166
- authType === AuthorityType.Dsts) {
167
- return accountId;
168
- }
169
- // for cases where there is clientInfo
170
- if (serverClientInfo) {
171
- try {
172
- const clientInfo = buildClientInfo(serverClientInfo, cryptoObj);
173
- if (clientInfo.uid && clientInfo.utid) {
174
- return `${clientInfo.uid}${Separators.CLIENT_INFO_SEPARATOR}${clientInfo.utid}`;
175
- }
176
- }
177
- catch (e) { }
178
- }
179
- // default to "sub" claim
180
- logger.verbose("No client info in response");
181
- return accountId;
182
- }
183
- /**
184
- * Validates an entity: checks for all expected params
185
- * @param entity
186
- */
187
- static isAccountEntity(entity) {
188
- if (!entity) {
189
- return false;
190
- }
191
- return (entity.hasOwnProperty("homeAccountId") &&
192
- entity.hasOwnProperty("environment") &&
193
- entity.hasOwnProperty("realm") &&
194
- entity.hasOwnProperty("localAccountId") &&
195
- entity.hasOwnProperty("username") &&
196
- entity.hasOwnProperty("authorityType"));
197
- }
198
- /**
199
- * Helper function to determine whether 2 accountInfo objects represent the same account
200
- * @param accountA
201
- * @param accountB
202
- * @param compareClaims - If set to true idTokenClaims will also be compared to determine account equality
203
- */
204
- static accountInfoIsEqual(accountA, accountB, compareClaims) {
205
- if (!accountA || !accountB) {
206
- return false;
207
- }
208
- let claimsMatch = true; // default to true so as to not fail comparison below if compareClaims: false
209
- if (compareClaims) {
210
- const accountAClaims = (accountA.idTokenClaims ||
211
- {});
212
- const accountBClaims = (accountB.idTokenClaims ||
213
- {});
214
- // issued at timestamp and nonce are expected to change each time a new id token is acquired
215
- claimsMatch =
216
- accountAClaims.iat === accountBClaims.iat &&
217
- accountAClaims.nonce === accountBClaims.nonce;
218
- }
219
- return (accountA.homeAccountId === accountB.homeAccountId &&
220
- accountA.localAccountId === accountB.localAccountId &&
221
- accountA.username === accountB.username &&
222
- accountA.tenantId === accountB.tenantId &&
223
- accountA.environment === accountB.environment &&
224
- accountA.nativeAccountId === accountB.nativeAccountId &&
225
- claimsMatch);
226
- }
10
+ /*
11
+ * Copyright (c) Microsoft Corporation. All rights reserved.
12
+ * Licensed under the MIT License.
13
+ */
14
+ /**
15
+ * Type that defines required and optional parameters for an Account field (based on universal cache schema implemented by all MSALs).
16
+ *
17
+ * Key : Value Schema
18
+ *
19
+ * Key: <home_account_id>-<environment>-<realm*>
20
+ *
21
+ * Value Schema:
22
+ * {
23
+ * homeAccountId: home account identifier for the auth scheme,
24
+ * environment: entity that issued the token, represented as a full host
25
+ * realm: Full tenant or organizational identifier that the account belongs to
26
+ * localAccountId: Original tenant-specific accountID, usually used for legacy cases
27
+ * username: primary username that represents the user, usually corresponds to preferred_username in the v2 endpt
28
+ * authorityType: Accounts authority type as a string
29
+ * name: Full name for the account, including given name and family name,
30
+ * lastModificationTime: last time this entity was modified in the cache
31
+ * lastModificationApp:
32
+ * idTokenClaims: Object containing claims parsed from ID token
33
+ * nativeAccountId: Account identifier on the native device
34
+ * }
35
+ * @internal
36
+ */
37
+ class AccountEntity {
38
+ /**
39
+ * Generate Account Id key component as per the schema: <home_account_id>-<environment>
40
+ */
41
+ generateAccountId() {
42
+ const accountId = [this.homeAccountId, this.environment];
43
+ return accountId.join(Separators.CACHE_KEY_SEPARATOR).toLowerCase();
44
+ }
45
+ /**
46
+ * Generate Account Cache Key as per the schema: <home_account_id>-<environment>-<realm*>
47
+ */
48
+ generateAccountKey() {
49
+ return AccountEntity.generateAccountCacheKey({
50
+ homeAccountId: this.homeAccountId,
51
+ environment: this.environment,
52
+ tenantId: this.realm,
53
+ username: this.username,
54
+ localAccountId: this.localAccountId,
55
+ });
56
+ }
57
+ /**
58
+ * Returns the AccountInfo interface for this account.
59
+ */
60
+ getAccountInfo() {
61
+ return {
62
+ homeAccountId: this.homeAccountId,
63
+ environment: this.environment,
64
+ tenantId: this.realm,
65
+ username: this.username,
66
+ localAccountId: this.localAccountId,
67
+ name: this.name,
68
+ idTokenClaims: this.idTokenClaims,
69
+ nativeAccountId: this.nativeAccountId,
70
+ authorityType: this.authorityType,
71
+ };
72
+ }
73
+ /**
74
+ * Generates account key from interface
75
+ * @param accountInterface
76
+ */
77
+ static generateAccountCacheKey(accountInterface) {
78
+ const accountKey = [
79
+ accountInterface.homeAccountId,
80
+ accountInterface.environment || Constants.EMPTY_STRING,
81
+ accountInterface.tenantId || Constants.EMPTY_STRING,
82
+ ];
83
+ return accountKey.join(Separators.CACHE_KEY_SEPARATOR).toLowerCase();
84
+ }
85
+ /**
86
+ * Build Account cache from IdToken, clientInfo and authority/policy. Associated with AAD.
87
+ * @param accountDetails
88
+ */
89
+ static createAccount(accountDetails, authority) {
90
+ const account = new AccountEntity();
91
+ if (authority.authorityType === AuthorityType.Adfs) {
92
+ account.authorityType = CacheAccountType.ADFS_ACCOUNT_TYPE;
93
+ }
94
+ else if (authority.protocolMode === ProtocolMode.AAD) {
95
+ account.authorityType = CacheAccountType.MSSTS_ACCOUNT_TYPE;
96
+ }
97
+ else {
98
+ account.authorityType = CacheAccountType.GENERIC_ACCOUNT_TYPE;
99
+ }
100
+ account.clientInfo = accountDetails.clientInfo;
101
+ account.homeAccountId = accountDetails.homeAccountId;
102
+ account.nativeAccountId = accountDetails.nativeAccountId;
103
+ const env = accountDetails.environment ||
104
+ (authority && authority.getPreferredCache());
105
+ if (!env) {
106
+ throw createClientAuthError(invalidCacheEnvironment);
107
+ }
108
+ account.environment = env;
109
+ // non AAD scenarios can have empty realm
110
+ account.realm =
111
+ accountDetails.idTokenClaims.tid || Constants.EMPTY_STRING;
112
+ // How do you account for MSA CID here?
113
+ account.localAccountId =
114
+ accountDetails.idTokenClaims.oid ||
115
+ accountDetails.idTokenClaims.sub ||
116
+ Constants.EMPTY_STRING;
117
+ /*
118
+ * In B2C scenarios the emails claim is used instead of preferred_username and it is an array.
119
+ * In most cases it will contain a single email. This field should not be relied upon if a custom
120
+ * policy is configured to return more than 1 email.
121
+ */
122
+ const preferredUsername = accountDetails.idTokenClaims.preferred_username ||
123
+ accountDetails.idTokenClaims.upn;
124
+ const email = accountDetails.idTokenClaims.emails
125
+ ? accountDetails.idTokenClaims.emails[0]
126
+ : null;
127
+ account.username = preferredUsername || email || Constants.EMPTY_STRING;
128
+ account.name = accountDetails.idTokenClaims.name;
129
+ account.cloudGraphHostName = accountDetails.cloudGraphHostName;
130
+ account.msGraphHost = accountDetails.msGraphHost;
131
+ return account;
132
+ }
133
+ /**
134
+ * Creates an AccountEntity object from AccountInfo
135
+ * @param accountInfo
136
+ * @param cloudGraphHostName
137
+ * @param msGraphHost
138
+ * @returns
139
+ */
140
+ static createFromAccountInfo(accountInfo, cloudGraphHostName, msGraphHost) {
141
+ const account = new AccountEntity();
142
+ account.authorityType =
143
+ accountInfo.authorityType || CacheAccountType.GENERIC_ACCOUNT_TYPE;
144
+ account.homeAccountId = accountInfo.homeAccountId;
145
+ account.localAccountId = accountInfo.localAccountId;
146
+ account.nativeAccountId = accountInfo.nativeAccountId;
147
+ account.realm = accountInfo.tenantId;
148
+ account.environment = accountInfo.environment;
149
+ account.username = accountInfo.username;
150
+ account.name = accountInfo.name;
151
+ account.cloudGraphHostName = cloudGraphHostName;
152
+ account.msGraphHost = msGraphHost;
153
+ return account;
154
+ }
155
+ /**
156
+ * Generate HomeAccountId from server response
157
+ * @param serverClientInfo
158
+ * @param authType
159
+ */
160
+ static generateHomeAccountId(serverClientInfo, authType, logger, cryptoObj, idTokenClaims) {
161
+ const accountId = idTokenClaims?.sub
162
+ ? idTokenClaims.sub
163
+ : Constants.EMPTY_STRING;
164
+ // since ADFS does not have tid and does not set client_info
165
+ if (authType === AuthorityType.Adfs ||
166
+ authType === AuthorityType.Dsts) {
167
+ return accountId;
168
+ }
169
+ // for cases where there is clientInfo
170
+ if (serverClientInfo) {
171
+ try {
172
+ const clientInfo = buildClientInfo(serverClientInfo, cryptoObj);
173
+ if (clientInfo.uid && clientInfo.utid) {
174
+ return `${clientInfo.uid}${Separators.CLIENT_INFO_SEPARATOR}${clientInfo.utid}`;
175
+ }
176
+ }
177
+ catch (e) { }
178
+ }
179
+ // default to "sub" claim
180
+ logger.verbose("No client info in response");
181
+ return accountId;
182
+ }
183
+ /**
184
+ * Validates an entity: checks for all expected params
185
+ * @param entity
186
+ */
187
+ static isAccountEntity(entity) {
188
+ if (!entity) {
189
+ return false;
190
+ }
191
+ return (entity.hasOwnProperty("homeAccountId") &&
192
+ entity.hasOwnProperty("environment") &&
193
+ entity.hasOwnProperty("realm") &&
194
+ entity.hasOwnProperty("localAccountId") &&
195
+ entity.hasOwnProperty("username") &&
196
+ entity.hasOwnProperty("authorityType"));
197
+ }
198
+ /**
199
+ * Helper function to determine whether 2 accountInfo objects represent the same account
200
+ * @param accountA
201
+ * @param accountB
202
+ * @param compareClaims - If set to true idTokenClaims will also be compared to determine account equality
203
+ */
204
+ static accountInfoIsEqual(accountA, accountB, compareClaims) {
205
+ if (!accountA || !accountB) {
206
+ return false;
207
+ }
208
+ let claimsMatch = true; // default to true so as to not fail comparison below if compareClaims: false
209
+ if (compareClaims) {
210
+ const accountAClaims = (accountA.idTokenClaims ||
211
+ {});
212
+ const accountBClaims = (accountB.idTokenClaims ||
213
+ {});
214
+ // issued at timestamp and nonce are expected to change each time a new id token is acquired
215
+ claimsMatch =
216
+ accountAClaims.iat === accountBClaims.iat &&
217
+ accountAClaims.nonce === accountBClaims.nonce;
218
+ }
219
+ return (accountA.homeAccountId === accountB.homeAccountId &&
220
+ accountA.localAccountId === accountB.localAccountId &&
221
+ accountA.username === accountB.username &&
222
+ accountA.tenantId === accountB.tenantId &&
223
+ accountA.environment === accountB.environment &&
224
+ accountA.nativeAccountId === accountB.nativeAccountId &&
225
+ claimsMatch);
226
+ }
227
227
  }
228
228
 
229
229
  export { AccountEntity };
@@ -1,40 +1,40 @@
1
- /**
2
- * APP_METADATA Cache
3
- *
4
- * Key:Value Schema:
5
- *
6
- * Key: appmetadata-<environment>-<client_id>
7
- *
8
- * Value:
9
- * {
10
- * clientId: client ID of the application
11
- * environment: entity that issued the token, represented as a full host
12
- * familyId: Family ID identifier, '1' represents Microsoft Family
13
- * }
14
- */
15
- export declare class AppMetadataEntity {
16
- clientId: string;
17
- environment: string;
18
- familyId?: string;
19
- /**
20
- * Generate AppMetadata Cache Key as per the schema: appmetadata-<environment>-<client_id>
21
- */
22
- generateAppMetadataKey(): string;
23
- /**
24
- * Generate AppMetadata Cache Key
25
- */
26
- static generateAppMetadataCacheKey(environment: string, clientId: string): string;
27
- /**
28
- * Creates AppMetadataEntity
29
- * @param clientId
30
- * @param environment
31
- * @param familyId
32
- */
33
- static createAppMetadataEntity(clientId: string, environment: string, familyId?: string): AppMetadataEntity;
34
- /**
35
- * Validates an entity: checks for all expected params
36
- * @param entity
37
- */
38
- static isAppMetadataEntity(key: string, entity: object): boolean;
39
- }
1
+ /**
2
+ * APP_METADATA Cache
3
+ *
4
+ * Key:Value Schema:
5
+ *
6
+ * Key: appmetadata-<environment>-<client_id>
7
+ *
8
+ * Value:
9
+ * {
10
+ * clientId: client ID of the application
11
+ * environment: entity that issued the token, represented as a full host
12
+ * familyId: Family ID identifier, '1' represents Microsoft Family
13
+ * }
14
+ */
15
+ export declare class AppMetadataEntity {
16
+ clientId: string;
17
+ environment: string;
18
+ familyId?: string;
19
+ /**
20
+ * Generate AppMetadata Cache Key as per the schema: appmetadata-<environment>-<client_id>
21
+ */
22
+ generateAppMetadataKey(): string;
23
+ /**
24
+ * Generate AppMetadata Cache Key
25
+ */
26
+ static generateAppMetadataCacheKey(environment: string, clientId: string): string;
27
+ /**
28
+ * Creates AppMetadataEntity
29
+ * @param clientId
30
+ * @param environment
31
+ * @param familyId
32
+ */
33
+ static createAppMetadataEntity(clientId: string, environment: string, familyId?: string): AppMetadataEntity;
34
+ /**
35
+ * Validates an entity: checks for all expected params
36
+ * @param entity
37
+ */
38
+ static isAppMetadataEntity(key: string, entity: object): boolean;
39
+ }
40
40
  //# sourceMappingURL=AppMetadataEntity.d.ts.map
@@ -1,72 +1,72 @@
1
- /*! @azure/msal-common v14.4.0 2023-11-07 */
1
+ /*! @azure/msal-common v14.4.1-beta.1 2023-11-14 */
2
2
  'use strict';
3
3
  import { Separators, APP_METADATA } from '../../utils/Constants.mjs';
4
4
 
5
- /*
6
- * Copyright (c) Microsoft Corporation. All rights reserved.
7
- * Licensed under the MIT License.
8
- */
9
- /**
10
- * APP_METADATA Cache
11
- *
12
- * Key:Value Schema:
13
- *
14
- * Key: appmetadata-<environment>-<client_id>
15
- *
16
- * Value:
17
- * {
18
- * clientId: client ID of the application
19
- * environment: entity that issued the token, represented as a full host
20
- * familyId: Family ID identifier, '1' represents Microsoft Family
21
- * }
22
- */
23
- class AppMetadataEntity {
24
- /**
25
- * Generate AppMetadata Cache Key as per the schema: appmetadata-<environment>-<client_id>
26
- */
27
- generateAppMetadataKey() {
28
- return AppMetadataEntity.generateAppMetadataCacheKey(this.environment, this.clientId);
29
- }
30
- /**
31
- * Generate AppMetadata Cache Key
32
- */
33
- static generateAppMetadataCacheKey(environment, clientId) {
34
- const appMetaDataKeyArray = [
35
- APP_METADATA,
36
- environment,
37
- clientId,
38
- ];
39
- return appMetaDataKeyArray
40
- .join(Separators.CACHE_KEY_SEPARATOR)
41
- .toLowerCase();
42
- }
43
- /**
44
- * Creates AppMetadataEntity
45
- * @param clientId
46
- * @param environment
47
- * @param familyId
48
- */
49
- static createAppMetadataEntity(clientId, environment, familyId) {
50
- const appMetadata = new AppMetadataEntity();
51
- appMetadata.clientId = clientId;
52
- appMetadata.environment = environment;
53
- if (familyId) {
54
- appMetadata.familyId = familyId;
55
- }
56
- return appMetadata;
57
- }
58
- /**
59
- * Validates an entity: checks for all expected params
60
- * @param entity
61
- */
62
- static isAppMetadataEntity(key, entity) {
63
- if (!entity) {
64
- return false;
65
- }
66
- return (key.indexOf(APP_METADATA) === 0 &&
67
- entity.hasOwnProperty("clientId") &&
68
- entity.hasOwnProperty("environment"));
69
- }
5
+ /*
6
+ * Copyright (c) Microsoft Corporation. All rights reserved.
7
+ * Licensed under the MIT License.
8
+ */
9
+ /**
10
+ * APP_METADATA Cache
11
+ *
12
+ * Key:Value Schema:
13
+ *
14
+ * Key: appmetadata-<environment>-<client_id>
15
+ *
16
+ * Value:
17
+ * {
18
+ * clientId: client ID of the application
19
+ * environment: entity that issued the token, represented as a full host
20
+ * familyId: Family ID identifier, '1' represents Microsoft Family
21
+ * }
22
+ */
23
+ class AppMetadataEntity {
24
+ /**
25
+ * Generate AppMetadata Cache Key as per the schema: appmetadata-<environment>-<client_id>
26
+ */
27
+ generateAppMetadataKey() {
28
+ return AppMetadataEntity.generateAppMetadataCacheKey(this.environment, this.clientId);
29
+ }
30
+ /**
31
+ * Generate AppMetadata Cache Key
32
+ */
33
+ static generateAppMetadataCacheKey(environment, clientId) {
34
+ const appMetaDataKeyArray = [
35
+ APP_METADATA,
36
+ environment,
37
+ clientId,
38
+ ];
39
+ return appMetaDataKeyArray
40
+ .join(Separators.CACHE_KEY_SEPARATOR)
41
+ .toLowerCase();
42
+ }
43
+ /**
44
+ * Creates AppMetadataEntity
45
+ * @param clientId
46
+ * @param environment
47
+ * @param familyId
48
+ */
49
+ static createAppMetadataEntity(clientId, environment, familyId) {
50
+ const appMetadata = new AppMetadataEntity();
51
+ appMetadata.clientId = clientId;
52
+ appMetadata.environment = environment;
53
+ if (familyId) {
54
+ appMetadata.familyId = familyId;
55
+ }
56
+ return appMetadata;
57
+ }
58
+ /**
59
+ * Validates an entity: checks for all expected params
60
+ * @param entity
61
+ */
62
+ static isAppMetadataEntity(key, entity) {
63
+ if (!entity) {
64
+ return false;
65
+ }
66
+ return (key.indexOf(APP_METADATA) === 0 &&
67
+ entity.hasOwnProperty("clientId") &&
68
+ entity.hasOwnProperty("environment"));
69
+ }
70
70
  }
71
71
 
72
72
  export { AppMetadataEntity };