@azure/msal-common 14.4.1-beta.1 → 14.5.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/account/AccountInfo.d.ts +58 -31
- package/dist/account/AccountInfo.d.ts.map +1 -1
- package/dist/account/AccountInfo.mjs +64 -0
- package/dist/account/AccountInfo.mjs.map +1 -0
- package/dist/account/AuthToken.d.ts +17 -17
- package/dist/account/AuthToken.mjs +58 -58
- package/dist/account/AuthToken.mjs.map +1 -1
- package/dist/account/CcsCredential.d.ts +9 -9
- package/dist/account/CcsCredential.mjs +8 -8
- package/dist/account/CcsCredential.mjs.map +1 -1
- package/dist/account/ClientCredentials.d.ts +14 -14
- package/dist/account/ClientInfo.d.ts +18 -19
- package/dist/account/ClientInfo.d.ts.map +1 -1
- package/dist/account/ClientInfo.mjs +37 -37
- package/dist/account/ClientInfo.mjs.map +1 -1
- package/dist/account/TokenClaims.d.ts +83 -65
- package/dist/account/TokenClaims.d.ts.map +1 -1
- package/dist/account/TokenClaims.mjs +25 -0
- package/dist/account/TokenClaims.mjs.map +1 -0
- package/dist/authority/Authority.d.ts +253 -249
- package/dist/authority/Authority.d.ts.map +1 -1
- package/dist/authority/Authority.mjs +812 -789
- package/dist/authority/Authority.mjs.map +1 -1
- package/dist/authority/AuthorityFactory.d.ts +31 -31
- package/dist/authority/AuthorityFactory.mjs +47 -47
- package/dist/authority/AuthorityFactory.mjs.map +1 -1
- package/dist/authority/AuthorityMetadata.d.ts +503 -503
- package/dist/authority/AuthorityMetadata.mjs +603 -603
- package/dist/authority/AuthorityMetadata.mjs.map +1 -1
- package/dist/authority/AuthorityOptions.d.ts +27 -27
- package/dist/authority/AuthorityOptions.mjs +18 -18
- package/dist/authority/AuthorityOptions.mjs.map +1 -1
- package/dist/authority/AuthorityType.d.ts +10 -10
- package/dist/authority/AuthorityType.mjs +13 -13
- package/dist/authority/AuthorityType.mjs.map +1 -1
- package/dist/authority/AzureRegion.d.ts +1 -1
- package/dist/authority/AzureRegionConfiguration.d.ts +5 -5
- package/dist/authority/CloudDiscoveryMetadata.d.ts +5 -5
- package/dist/authority/CloudInstanceDiscoveryErrorResponse.d.ts +13 -13
- package/dist/authority/CloudInstanceDiscoveryErrorResponse.mjs +8 -8
- package/dist/authority/CloudInstanceDiscoveryErrorResponse.mjs.map +1 -1
- package/dist/authority/CloudInstanceDiscoveryResponse.d.ts +9 -9
- package/dist/authority/CloudInstanceDiscoveryResponse.mjs +8 -8
- package/dist/authority/CloudInstanceDiscoveryResponse.mjs.map +1 -1
- package/dist/authority/ImdsOptions.d.ts +5 -5
- package/dist/authority/OIDCOptions.d.ts +8 -8
- package/dist/authority/OpenIdConfigResponse.d.ts +11 -11
- package/dist/authority/OpenIdConfigResponse.mjs +10 -10
- package/dist/authority/OpenIdConfigResponse.mjs.map +1 -1
- package/dist/authority/ProtocolMode.d.ts +8 -8
- package/dist/authority/ProtocolMode.mjs +11 -11
- package/dist/authority/ProtocolMode.mjs.map +1 -1
- package/dist/authority/RegionDiscovery.d.ts +32 -32
- package/dist/authority/RegionDiscovery.mjs +106 -106
- package/dist/authority/RegionDiscovery.mjs.map +1 -1
- package/dist/authority/RegionDiscoveryMetadata.d.ts +6 -6
- package/dist/broker/nativeBroker/INativeBrokerPlugin.d.ts +15 -15
- package/dist/cache/CacheManager.d.ts +517 -485
- package/dist/cache/CacheManager.d.ts.map +1 -1
- package/dist/cache/CacheManager.mjs +1264 -1102
- package/dist/cache/CacheManager.mjs.map +1 -1
- package/dist/cache/entities/AccessTokenEntity.d.ts +25 -25
- package/dist/cache/entities/AccountEntity.d.ts +106 -101
- package/dist/cache/entities/AccountEntity.d.ts.map +1 -1
- package/dist/cache/entities/AccountEntity.mjs +247 -219
- package/dist/cache/entities/AccountEntity.mjs.map +1 -1
- package/dist/cache/entities/AppMetadataEntity.d.ts +39 -39
- package/dist/cache/entities/AppMetadataEntity.mjs +66 -66
- package/dist/cache/entities/AppMetadataEntity.mjs.map +1 -1
- package/dist/cache/entities/AuthorityMetadataEntity.d.ts +48 -48
- package/dist/cache/entities/AuthorityMetadataEntity.mjs +78 -78
- package/dist/cache/entities/AuthorityMetadataEntity.mjs.map +1 -1
- package/dist/cache/entities/CacheRecord.d.ts +14 -14
- package/dist/cache/entities/CacheRecord.mjs +14 -14
- package/dist/cache/entities/CacheRecord.mjs.map +1 -1
- package/dist/cache/entities/CredentialEntity.d.ts +30 -30
- package/dist/cache/entities/IdTokenEntity.d.ts +8 -8
- package/dist/cache/entities/RefreshTokenEntity.d.ts +5 -7
- package/dist/cache/entities/RefreshTokenEntity.d.ts.map +1 -1
- package/dist/cache/entities/ServerTelemetryEntity.d.ts +5 -5
- package/dist/cache/entities/ThrottlingEntity.d.ts +13 -13
- package/dist/cache/entities/ThrottlingEntity.mjs +23 -23
- package/dist/cache/entities/ThrottlingEntity.mjs.map +1 -1
- package/dist/cache/interface/ICacheManager.d.ts +166 -166
- package/dist/cache/interface/ICachePlugin.d.ts +5 -5
- package/dist/cache/interface/ISerializableTokenCache.d.ts +4 -4
- package/dist/cache/persistence/TokenCacheContext.d.ts +23 -23
- package/dist/cache/persistence/TokenCacheContext.mjs +25 -25
- package/dist/cache/persistence/TokenCacheContext.mjs.map +1 -1
- package/dist/cache/utils/CacheHelpers.d.ts +64 -64
- package/dist/cache/utils/CacheHelpers.d.ts.map +1 -1
- package/dist/cache/utils/CacheHelpers.mjs +231 -234
- package/dist/cache/utils/CacheHelpers.mjs.map +1 -1
- package/dist/cache/utils/CacheTypes.d.ts +69 -67
- package/dist/cache/utils/CacheTypes.d.ts.map +1 -1
- package/dist/client/AuthorizationCodeClient.d.ts +74 -74
- package/dist/client/AuthorizationCodeClient.d.ts.map +1 -1
- package/dist/client/AuthorizationCodeClient.mjs +404 -403
- package/dist/client/AuthorizationCodeClient.mjs.map +1 -1
- package/dist/client/BaseClient.d.ts +51 -51
- package/dist/client/BaseClient.mjs +100 -100
- package/dist/client/BaseClient.mjs.map +1 -1
- package/dist/client/RefreshTokenClient.d.ts +35 -35
- package/dist/client/RefreshTokenClient.d.ts.map +1 -1
- package/dist/client/RefreshTokenClient.mjs +189 -194
- package/dist/client/RefreshTokenClient.mjs.map +1 -1
- package/dist/client/SilentFlowClient.d.ts +27 -27
- package/dist/client/SilentFlowClient.mjs +118 -118
- package/dist/client/SilentFlowClient.mjs.map +1 -1
- package/dist/config/AppTokenProvider.d.ts +38 -38
- package/dist/config/ClientConfiguration.d.ts +150 -150
- package/dist/config/ClientConfiguration.mjs +97 -97
- package/dist/config/ClientConfiguration.mjs.map +1 -1
- package/dist/constants/AADServerParamKeys.d.ts +52 -0
- package/dist/constants/AADServerParamKeys.d.ts.map +1 -0
- package/dist/constants/AADServerParamKeys.mjs +60 -0
- package/dist/constants/AADServerParamKeys.mjs.map +1 -0
- package/dist/crypto/ICrypto.d.ts +58 -58
- package/dist/crypto/ICrypto.mjs +30 -30
- package/dist/crypto/ICrypto.mjs.map +1 -1
- package/dist/crypto/IGuidGenerator.d.ts +4 -4
- package/dist/crypto/JoseHeader.d.ts +22 -22
- package/dist/crypto/JoseHeader.mjs +37 -37
- package/dist/crypto/JoseHeader.mjs.map +1 -1
- package/dist/crypto/PopTokenGenerator.d.ts +60 -60
- package/dist/crypto/PopTokenGenerator.mjs +82 -82
- package/dist/crypto/PopTokenGenerator.mjs.map +1 -1
- package/dist/crypto/SignedHttpRequest.d.ts +15 -15
- package/dist/error/AuthError.d.ts +44 -44
- package/dist/error/AuthError.mjs +46 -46
- package/dist/error/AuthError.mjs.map +1 -1
- package/dist/error/AuthErrorCodes.d.ts +5 -5
- package/dist/error/AuthErrorCodes.mjs +9 -9
- package/dist/error/AuthErrorCodes.mjs.map +1 -1
- package/dist/error/ClientAuthError.d.ts +237 -237
- package/dist/error/ClientAuthError.mjs +249 -249
- package/dist/error/ClientAuthError.mjs.map +1 -1
- package/dist/error/ClientAuthErrorCodes.d.ts +44 -44
- package/dist/error/ClientAuthErrorCodes.mjs +48 -48
- package/dist/error/ClientAuthErrorCodes.mjs.map +1 -1
- package/dist/error/ClientConfigurationError.d.ts +128 -128
- package/dist/error/ClientConfigurationError.mjs +135 -135
- package/dist/error/ClientConfigurationError.mjs.map +1 -1
- package/dist/error/ClientConfigurationErrorCodes.d.ts +22 -22
- package/dist/error/ClientConfigurationErrorCodes.mjs +26 -26
- package/dist/error/ClientConfigurationErrorCodes.mjs.map +1 -1
- package/dist/error/InteractionRequiredAuthError.d.ts +57 -57
- package/dist/error/InteractionRequiredAuthError.d.ts.map +1 -1
- package/dist/error/InteractionRequiredAuthError.mjs +77 -78
- package/dist/error/InteractionRequiredAuthError.mjs.map +1 -1
- package/dist/error/InteractionRequiredAuthErrorCodes.d.ts +5 -6
- package/dist/error/InteractionRequiredAuthErrorCodes.d.ts.map +1 -1
- package/dist/error/InteractionRequiredAuthErrorCodes.mjs +12 -13
- package/dist/error/InteractionRequiredAuthErrorCodes.mjs.map +1 -1
- package/dist/error/JoseHeaderError.d.ts +15 -15
- package/dist/error/JoseHeaderError.mjs +22 -22
- package/dist/error/JoseHeaderError.mjs.map +1 -1
- package/dist/error/JoseHeaderErrorCodes.d.ts +2 -2
- package/dist/error/JoseHeaderErrorCodes.mjs +6 -6
- package/dist/error/JoseHeaderErrorCodes.mjs.map +1 -1
- package/dist/error/ServerError.d.ts +7 -7
- package/dist/error/ServerError.mjs +14 -14
- package/dist/error/ServerError.mjs.map +1 -1
- package/dist/index.cjs +8645 -8295
- package/dist/index.cjs.map +1 -1
- package/dist/index.d.ts +99 -98
- package/dist/index.d.ts.map +1 -1
- package/dist/index.mjs +7 -3
- package/dist/index.mjs.map +1 -1
- package/dist/logger/Logger.d.ts +95 -95
- package/dist/logger/Logger.mjs +188 -188
- package/dist/logger/Logger.mjs.map +1 -1
- package/dist/network/INetworkModule.d.ts +29 -29
- package/dist/network/INetworkModule.mjs +12 -12
- package/dist/network/INetworkModule.mjs.map +1 -1
- package/dist/network/NetworkManager.d.ts +33 -33
- package/dist/network/NetworkManager.mjs +34 -34
- package/dist/network/NetworkManager.mjs.map +1 -1
- package/dist/network/RequestThumbprint.d.ts +18 -18
- package/dist/network/ThrottlingUtils.d.ts +42 -42
- package/dist/network/ThrottlingUtils.mjs +95 -95
- package/dist/network/ThrottlingUtils.mjs.map +1 -1
- package/dist/packageMetadata.d.ts +2 -2
- package/dist/packageMetadata.d.ts.map +1 -1
- package/dist/packageMetadata.mjs +4 -4
- package/dist/packageMetadata.mjs.map +1 -1
- package/dist/request/AuthenticationHeaderParser.d.ts +19 -19
- package/dist/request/AuthenticationHeaderParser.mjs +55 -55
- package/dist/request/AuthenticationHeaderParser.mjs.map +1 -1
- package/dist/request/BaseAuthRequest.d.ts +43 -43
- package/dist/request/CommonAuthorizationCodeRequest.d.ts +27 -27
- package/dist/request/CommonAuthorizationUrlRequest.d.ts +50 -50
- package/dist/request/CommonClientCredentialRequest.d.ts +17 -17
- package/dist/request/CommonDeviceCodeRequest.d.ts +21 -21
- package/dist/request/CommonEndSessionRequest.d.ts +21 -21
- package/dist/request/CommonOnBehalfOfRequest.d.ts +13 -13
- package/dist/request/CommonRefreshTokenRequest.d.ts +22 -23
- package/dist/request/CommonRefreshTokenRequest.d.ts.map +1 -1
- package/dist/request/CommonSilentFlowRequest.d.ts +20 -21
- package/dist/request/CommonSilentFlowRequest.d.ts.map +1 -1
- package/dist/request/CommonUsernamePasswordRequest.d.ts +17 -17
- package/dist/request/NativeRequest.d.ts +19 -19
- package/dist/request/NativeSignOutRequest.d.ts +5 -5
- package/dist/request/RequestParameterBuilder.d.ts +217 -217
- package/dist/request/RequestParameterBuilder.d.ts.map +1 -1
- package/dist/request/RequestParameterBuilder.mjs +383 -382
- package/dist/request/RequestParameterBuilder.mjs.map +1 -1
- package/dist/request/RequestValidator.d.ts +33 -33
- package/dist/request/RequestValidator.mjs +81 -81
- package/dist/request/RequestValidator.mjs.map +1 -1
- package/dist/request/ScopeSet.d.ts +88 -88
- package/dist/request/ScopeSet.mjs +197 -197
- package/dist/request/ScopeSet.mjs.map +1 -1
- package/dist/request/StoreInCache.d.ts +8 -8
- package/dist/response/AuthenticationResult.d.ts +41 -41
- package/dist/response/AuthorizationCodePayload.d.ts +13 -13
- package/dist/response/DeviceCodeResponse.d.ts +25 -25
- package/dist/response/ExternalTokenResponse.d.ts +15 -15
- package/dist/response/IMDSBadResponse.d.ts +4 -4
- package/dist/response/ResponseHandler.d.ts +69 -67
- package/dist/response/ResponseHandler.d.ts.map +1 -1
- package/dist/response/ResponseHandler.mjs +339 -313
- package/dist/response/ResponseHandler.mjs.map +1 -1
- package/dist/response/ServerAuthorizationCodeResponse.d.ts +25 -25
- package/dist/response/ServerAuthorizationTokenResponse.d.ts +46 -46
- package/dist/telemetry/performance/IPerformanceClient.d.ts +51 -51
- package/dist/telemetry/performance/IPerformanceMeasurement.d.ts +5 -5
- package/dist/telemetry/performance/PerformanceClient.d.ts +191 -191
- package/dist/telemetry/performance/PerformanceClient.mjs +409 -409
- package/dist/telemetry/performance/PerformanceClient.mjs.map +1 -1
- package/dist/telemetry/performance/PerformanceEvent.d.ts +464 -464
- package/dist/telemetry/performance/PerformanceEvent.mjs +253 -253
- package/dist/telemetry/performance/PerformanceEvent.mjs.map +1 -1
- package/dist/telemetry/performance/StubPerformanceClient.d.ts +24 -24
- package/dist/telemetry/performance/StubPerformanceClient.mjs +76 -76
- package/dist/telemetry/performance/StubPerformanceClient.mjs.map +1 -1
- package/dist/telemetry/server/ServerTelemetryManager.d.ts +66 -66
- package/dist/telemetry/server/ServerTelemetryManager.mjs +201 -201
- package/dist/telemetry/server/ServerTelemetryManager.mjs.map +1 -1
- package/dist/telemetry/server/ServerTelemetryRequest.d.ts +8 -8
- package/dist/url/IUri.d.ts +12 -12
- package/dist/url/UrlString.d.ts +48 -48
- package/dist/url/UrlString.mjs +161 -161
- package/dist/url/UrlString.mjs.map +1 -1
- package/dist/utils/Constants.d.ts +296 -365
- package/dist/utils/Constants.d.ts.map +1 -1
- package/dist/utils/Constants.mjs +309 -376
- package/dist/utils/Constants.mjs.map +1 -1
- package/dist/utils/FunctionWrappers.d.ts +27 -27
- package/dist/utils/FunctionWrappers.mjs +84 -84
- package/dist/utils/FunctionWrappers.mjs.map +1 -1
- package/dist/utils/MsalTypes.d.ts +6 -6
- package/dist/utils/ProtocolUtils.d.ts +42 -42
- package/dist/utils/ProtocolUtils.mjs +69 -69
- package/dist/utils/ProtocolUtils.mjs.map +1 -1
- package/dist/utils/StringUtils.d.ts +40 -40
- package/dist/utils/StringUtils.mjs +95 -95
- package/dist/utils/StringUtils.mjs.map +1 -1
- package/dist/utils/TimeUtils.d.ts +27 -27
- package/dist/utils/TimeUtils.mjs +45 -45
- package/dist/utils/TimeUtils.mjs.map +1 -1
- package/dist/utils/UrlUtils.d.ts +10 -10
- package/dist/utils/UrlUtils.mjs +44 -44
- package/dist/utils/UrlUtils.mjs.map +1 -1
- package/package.json +93 -92
- package/src/account/AccountInfo.ts +96 -0
- package/src/account/ClientInfo.ts +2 -3
- package/src/account/TokenClaims.ts +28 -0
- package/src/authority/Authority.ts +29 -2
- package/src/cache/CacheManager.ts +416 -114
- package/src/cache/entities/AccountEntity.ts +84 -33
- package/src/cache/entities/RefreshTokenEntity.ts +1 -3
- package/src/cache/utils/CacheHelpers.ts +1 -6
- package/src/cache/utils/CacheTypes.ts +11 -0
- package/src/client/AuthorizationCodeClient.ts +4 -5
- package/src/client/RefreshTokenClient.ts +3 -15
- package/src/client/SilentFlowClient.ts +1 -1
- package/src/constants/AADServerParamKeys.ts +56 -0
- package/src/crypto/PopTokenGenerator.ts +1 -1
- package/src/error/InteractionRequiredAuthError.ts +0 -2
- package/src/error/InteractionRequiredAuthErrorCodes.ts +0 -1
- package/src/index.ts +17 -5
- package/src/packageMetadata.ts +1 -1
- package/src/request/CommonRefreshTokenRequest.ts +0 -1
- package/src/request/CommonSilentFlowRequest.ts +0 -1
- package/src/request/RequestParameterBuilder.ts +7 -5
- package/src/response/ResponseHandler.ts +95 -27
- package/src/utils/Constants.ts +0 -72
|
@@ -1,45 +1,45 @@
|
|
|
1
|
-
/*! @azure/msal-common v14.
|
|
1
|
+
/*! @azure/msal-common v14.5.0 2023-12-01 */
|
|
2
2
|
'use strict';
|
|
3
3
|
import { createJoseHeaderError } from '../error/JoseHeaderError.mjs';
|
|
4
4
|
import { JsonWebTokenTypes } from '../utils/Constants.mjs';
|
|
5
5
|
import { missingKidError, missingAlgError } from '../error/JoseHeaderErrorCodes.mjs';
|
|
6
6
|
|
|
7
|
-
/*
|
|
8
|
-
* Copyright (c) Microsoft Corporation. All rights reserved.
|
|
9
|
-
* Licensed under the MIT License.
|
|
10
|
-
*/
|
|
11
|
-
/** @internal */
|
|
12
|
-
class JoseHeader {
|
|
13
|
-
constructor(options) {
|
|
14
|
-
this.typ = options.typ;
|
|
15
|
-
this.alg = options.alg;
|
|
16
|
-
this.kid = options.kid;
|
|
17
|
-
}
|
|
18
|
-
/**
|
|
19
|
-
* Builds SignedHttpRequest formatted JOSE Header from the
|
|
20
|
-
* JOSE Header options provided or previously set on the object and returns
|
|
21
|
-
* the stringified header object.
|
|
22
|
-
* Throws if keyId or algorithm aren't provided since they are required for Access Token Binding.
|
|
23
|
-
* @param shrHeaderOptions
|
|
24
|
-
* @returns
|
|
25
|
-
*/
|
|
26
|
-
static getShrHeaderString(shrHeaderOptions) {
|
|
27
|
-
// KeyID is required on the SHR header
|
|
28
|
-
if (!shrHeaderOptions.kid) {
|
|
29
|
-
throw createJoseHeaderError(missingKidError);
|
|
30
|
-
}
|
|
31
|
-
// Alg is required on the SHR header
|
|
32
|
-
if (!shrHeaderOptions.alg) {
|
|
33
|
-
throw createJoseHeaderError(missingAlgError);
|
|
34
|
-
}
|
|
35
|
-
const shrHeader = new JoseHeader({
|
|
36
|
-
// Access Token PoP headers must have type pop, but the type header can be overriden for special cases
|
|
37
|
-
typ: shrHeaderOptions.typ || JsonWebTokenTypes.Pop,
|
|
38
|
-
kid: shrHeaderOptions.kid,
|
|
39
|
-
alg: shrHeaderOptions.alg,
|
|
40
|
-
});
|
|
41
|
-
return JSON.stringify(shrHeader);
|
|
42
|
-
}
|
|
7
|
+
/*
|
|
8
|
+
* Copyright (c) Microsoft Corporation. All rights reserved.
|
|
9
|
+
* Licensed under the MIT License.
|
|
10
|
+
*/
|
|
11
|
+
/** @internal */
|
|
12
|
+
class JoseHeader {
|
|
13
|
+
constructor(options) {
|
|
14
|
+
this.typ = options.typ;
|
|
15
|
+
this.alg = options.alg;
|
|
16
|
+
this.kid = options.kid;
|
|
17
|
+
}
|
|
18
|
+
/**
|
|
19
|
+
* Builds SignedHttpRequest formatted JOSE Header from the
|
|
20
|
+
* JOSE Header options provided or previously set on the object and returns
|
|
21
|
+
* the stringified header object.
|
|
22
|
+
* Throws if keyId or algorithm aren't provided since they are required for Access Token Binding.
|
|
23
|
+
* @param shrHeaderOptions
|
|
24
|
+
* @returns
|
|
25
|
+
*/
|
|
26
|
+
static getShrHeaderString(shrHeaderOptions) {
|
|
27
|
+
// KeyID is required on the SHR header
|
|
28
|
+
if (!shrHeaderOptions.kid) {
|
|
29
|
+
throw createJoseHeaderError(missingKidError);
|
|
30
|
+
}
|
|
31
|
+
// Alg is required on the SHR header
|
|
32
|
+
if (!shrHeaderOptions.alg) {
|
|
33
|
+
throw createJoseHeaderError(missingAlgError);
|
|
34
|
+
}
|
|
35
|
+
const shrHeader = new JoseHeader({
|
|
36
|
+
// Access Token PoP headers must have type pop, but the type header can be overriden for special cases
|
|
37
|
+
typ: shrHeaderOptions.typ || JsonWebTokenTypes.Pop,
|
|
38
|
+
kid: shrHeaderOptions.kid,
|
|
39
|
+
alg: shrHeaderOptions.alg,
|
|
40
|
+
});
|
|
41
|
+
return JSON.stringify(shrHeader);
|
|
42
|
+
}
|
|
43
43
|
}
|
|
44
44
|
|
|
45
45
|
export { JoseHeader };
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"JoseHeader.mjs","sources":["../../src/crypto/JoseHeader.ts"],"sourcesContent":[null],"names":[],"mappings":";;;;;;
|
|
1
|
+
{"version":3,"file":"JoseHeader.mjs","sources":["../../src/crypto/JoseHeader.ts"],"sourcesContent":[null],"names":["JoseHeaderErrorCodes.missingKidError","JoseHeaderErrorCodes.missingAlgError"],"mappings":";;;;;;AAAA;;;AAGG;AAcH;MACa,UAAU,CAAA;AAKnB,IAAA,WAAA,CAAY,OAA0B,EAAA;AAClC,QAAA,IAAI,CAAC,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC;AACvB,QAAA,IAAI,CAAC,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC;AACvB,QAAA,IAAI,CAAC,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC;KAC1B;AAED;;;;;;;AAOG;IACH,OAAO,kBAAkB,CAAC,gBAAmC,EAAA;;AAEzD,QAAA,IAAI,CAAC,gBAAgB,CAAC,GAAG,EAAE;AACvB,YAAA,MAAM,qBAAqB,CAACA,eAAoC,CAAC,CAAC;AACrE,SAAA;;AAGD,QAAA,IAAI,CAAC,gBAAgB,CAAC,GAAG,EAAE;AACvB,YAAA,MAAM,qBAAqB,CAACC,eAAoC,CAAC,CAAC;AACrE,SAAA;AAED,QAAA,MAAM,SAAS,GAAG,IAAI,UAAU,CAAC;;AAE7B,YAAA,GAAG,EAAE,gBAAgB,CAAC,GAAG,IAAI,iBAAiB,CAAC,GAAG;YAClD,GAAG,EAAE,gBAAgB,CAAC,GAAG;YACzB,GAAG,EAAE,gBAAgB,CAAC,GAAG;AAC5B,SAAA,CAAC,CAAC;AAEH,QAAA,OAAO,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;KACpC;AACJ;;;;"}
|
|
@@ -1,61 +1,61 @@
|
|
|
1
|
-
import { ICrypto, SignedHttpRequestParameters } from "./ICrypto";
|
|
2
|
-
import { IPerformanceClient } from "../telemetry/performance/IPerformanceClient";
|
|
3
|
-
import { Logger } from "../logger/Logger";
|
|
4
|
-
/**
|
|
5
|
-
* See eSTS docs for more info.
|
|
6
|
-
* - A kid element, with the value containing an RFC 7638-compliant JWK thumbprint that is base64 encoded.
|
|
7
|
-
* - xms_ksl element, representing the storage location of the key's secret component on the client device. One of two values:
|
|
8
|
-
* - sw: software storage
|
|
9
|
-
* - uhw: hardware storage
|
|
10
|
-
*/
|
|
11
|
-
type ReqCnf = {
|
|
12
|
-
kid: string;
|
|
13
|
-
xms_ksl: KeyLocation;
|
|
14
|
-
};
|
|
15
|
-
export type ReqCnfData = {
|
|
16
|
-
kid: string;
|
|
17
|
-
reqCnfString: string;
|
|
18
|
-
reqCnfHash: string;
|
|
19
|
-
};
|
|
20
|
-
declare const KeyLocation: {
|
|
21
|
-
readonly SW: "sw";
|
|
22
|
-
readonly UHW: "uhw";
|
|
23
|
-
};
|
|
24
|
-
export type KeyLocation = (typeof KeyLocation)[keyof typeof KeyLocation];
|
|
25
|
-
/** @internal */
|
|
26
|
-
export declare class PopTokenGenerator {
|
|
27
|
-
private cryptoUtils;
|
|
28
|
-
private performanceClient?;
|
|
29
|
-
constructor(cryptoUtils: ICrypto, performanceClient?: IPerformanceClient);
|
|
30
|
-
/**
|
|
31
|
-
* Generates the req_cnf validated at the RP in the POP protocol for SHR parameters
|
|
32
|
-
* and returns an object containing the keyid, the full req_cnf string and the req_cnf string hash
|
|
33
|
-
* @param request
|
|
34
|
-
* @returns
|
|
35
|
-
*/
|
|
36
|
-
generateCnf(request: SignedHttpRequestParameters, logger: Logger): Promise<ReqCnfData>;
|
|
37
|
-
/**
|
|
38
|
-
* Generates key_id for a SHR token request
|
|
39
|
-
* @param request
|
|
40
|
-
* @returns
|
|
41
|
-
*/
|
|
42
|
-
generateKid(request: SignedHttpRequestParameters): Promise<ReqCnf>;
|
|
43
|
-
/**
|
|
44
|
-
* Signs the POP access_token with the local generated key-pair
|
|
45
|
-
* @param accessToken
|
|
46
|
-
* @param request
|
|
47
|
-
* @returns
|
|
48
|
-
*/
|
|
49
|
-
signPopToken(accessToken: string, keyId: string, request: SignedHttpRequestParameters): Promise<string>;
|
|
50
|
-
/**
|
|
51
|
-
* Utility function to generate the signed JWT for an access_token
|
|
52
|
-
* @param payload
|
|
53
|
-
* @param kid
|
|
54
|
-
* @param request
|
|
55
|
-
* @param claims
|
|
56
|
-
* @returns
|
|
57
|
-
*/
|
|
58
|
-
signPayload(payload: string, keyId: string, request: SignedHttpRequestParameters, claims?: object): Promise<string>;
|
|
59
|
-
}
|
|
60
|
-
export {};
|
|
1
|
+
import { ICrypto, SignedHttpRequestParameters } from "./ICrypto";
|
|
2
|
+
import { IPerformanceClient } from "../telemetry/performance/IPerformanceClient";
|
|
3
|
+
import { Logger } from "../logger/Logger";
|
|
4
|
+
/**
|
|
5
|
+
* See eSTS docs for more info.
|
|
6
|
+
* - A kid element, with the value containing an RFC 7638-compliant JWK thumbprint that is base64 encoded.
|
|
7
|
+
* - xms_ksl element, representing the storage location of the key's secret component on the client device. One of two values:
|
|
8
|
+
* - sw: software storage
|
|
9
|
+
* - uhw: hardware storage
|
|
10
|
+
*/
|
|
11
|
+
type ReqCnf = {
|
|
12
|
+
kid: string;
|
|
13
|
+
xms_ksl: KeyLocation;
|
|
14
|
+
};
|
|
15
|
+
export type ReqCnfData = {
|
|
16
|
+
kid: string;
|
|
17
|
+
reqCnfString: string;
|
|
18
|
+
reqCnfHash: string;
|
|
19
|
+
};
|
|
20
|
+
declare const KeyLocation: {
|
|
21
|
+
readonly SW: "sw";
|
|
22
|
+
readonly UHW: "uhw";
|
|
23
|
+
};
|
|
24
|
+
export type KeyLocation = (typeof KeyLocation)[keyof typeof KeyLocation];
|
|
25
|
+
/** @internal */
|
|
26
|
+
export declare class PopTokenGenerator {
|
|
27
|
+
private cryptoUtils;
|
|
28
|
+
private performanceClient?;
|
|
29
|
+
constructor(cryptoUtils: ICrypto, performanceClient?: IPerformanceClient);
|
|
30
|
+
/**
|
|
31
|
+
* Generates the req_cnf validated at the RP in the POP protocol for SHR parameters
|
|
32
|
+
* and returns an object containing the keyid, the full req_cnf string and the req_cnf string hash
|
|
33
|
+
* @param request
|
|
34
|
+
* @returns
|
|
35
|
+
*/
|
|
36
|
+
generateCnf(request: SignedHttpRequestParameters, logger: Logger): Promise<ReqCnfData>;
|
|
37
|
+
/**
|
|
38
|
+
* Generates key_id for a SHR token request
|
|
39
|
+
* @param request
|
|
40
|
+
* @returns
|
|
41
|
+
*/
|
|
42
|
+
generateKid(request: SignedHttpRequestParameters): Promise<ReqCnf>;
|
|
43
|
+
/**
|
|
44
|
+
* Signs the POP access_token with the local generated key-pair
|
|
45
|
+
* @param accessToken
|
|
46
|
+
* @param request
|
|
47
|
+
* @returns
|
|
48
|
+
*/
|
|
49
|
+
signPopToken(accessToken: string, keyId: string, request: SignedHttpRequestParameters): Promise<string>;
|
|
50
|
+
/**
|
|
51
|
+
* Utility function to generate the signed JWT for an access_token
|
|
52
|
+
* @param payload
|
|
53
|
+
* @param kid
|
|
54
|
+
* @param request
|
|
55
|
+
* @param claims
|
|
56
|
+
* @returns
|
|
57
|
+
*/
|
|
58
|
+
signPayload(payload: string, keyId: string, request: SignedHttpRequestParameters, claims?: object): Promise<string>;
|
|
59
|
+
}
|
|
60
|
+
export {};
|
|
61
61
|
//# sourceMappingURL=PopTokenGenerator.d.ts.map
|
|
@@ -1,91 +1,91 @@
|
|
|
1
|
-
/*! @azure/msal-common v14.
|
|
1
|
+
/*! @azure/msal-common v14.5.0 2023-12-01 */
|
|
2
2
|
'use strict';
|
|
3
3
|
import { TimeUtils } from '../utils/TimeUtils.mjs';
|
|
4
4
|
import { UrlString } from '../url/UrlString.mjs';
|
|
5
5
|
import { PerformanceEvents } from '../telemetry/performance/PerformanceEvent.mjs';
|
|
6
6
|
import { invokeAsync } from '../utils/FunctionWrappers.mjs';
|
|
7
7
|
|
|
8
|
-
/*
|
|
9
|
-
* Copyright (c) Microsoft Corporation. All rights reserved.
|
|
10
|
-
* Licensed under the MIT License.
|
|
11
|
-
*/
|
|
12
|
-
const KeyLocation = {
|
|
13
|
-
SW: "sw",
|
|
14
|
-
UHW: "uhw",
|
|
15
|
-
};
|
|
16
|
-
/** @internal */
|
|
17
|
-
class PopTokenGenerator {
|
|
18
|
-
constructor(cryptoUtils, performanceClient) {
|
|
19
|
-
this.cryptoUtils = cryptoUtils;
|
|
20
|
-
this.performanceClient = performanceClient;
|
|
21
|
-
}
|
|
22
|
-
/**
|
|
23
|
-
* Generates the req_cnf validated at the RP in the POP protocol for SHR parameters
|
|
24
|
-
* and returns an object containing the keyid, the full req_cnf string and the req_cnf string hash
|
|
25
|
-
* @param request
|
|
26
|
-
* @returns
|
|
27
|
-
*/
|
|
28
|
-
async generateCnf(request, logger) {
|
|
29
|
-
this.performanceClient?.addQueueMeasurement(PerformanceEvents.PopTokenGenerateCnf, request.correlationId);
|
|
30
|
-
const reqCnf = await invokeAsync(this.generateKid.bind(this), PerformanceEvents.PopTokenGenerateCnf, logger, this.performanceClient, request.correlationId)(request);
|
|
31
|
-
const reqCnfString = this.cryptoUtils.base64Encode(JSON.stringify(reqCnf));
|
|
32
|
-
return {
|
|
33
|
-
kid: reqCnf.kid,
|
|
34
|
-
reqCnfString,
|
|
35
|
-
reqCnfHash: await this.cryptoUtils.hashString(reqCnfString),
|
|
36
|
-
};
|
|
37
|
-
}
|
|
38
|
-
/**
|
|
39
|
-
* Generates key_id for a SHR token request
|
|
40
|
-
* @param request
|
|
41
|
-
* @returns
|
|
42
|
-
*/
|
|
43
|
-
async generateKid(request) {
|
|
44
|
-
this.performanceClient?.addQueueMeasurement(PerformanceEvents.PopTokenGenerateKid, request.correlationId);
|
|
45
|
-
const kidThumbprint = await this.cryptoUtils.getPublicKeyThumbprint(request);
|
|
46
|
-
return {
|
|
47
|
-
kid: kidThumbprint,
|
|
48
|
-
xms_ksl: KeyLocation.SW,
|
|
49
|
-
};
|
|
50
|
-
}
|
|
51
|
-
/**
|
|
52
|
-
* Signs the POP access_token with the local generated key-pair
|
|
53
|
-
* @param accessToken
|
|
54
|
-
* @param request
|
|
55
|
-
* @returns
|
|
56
|
-
*/
|
|
57
|
-
async signPopToken(accessToken, keyId, request) {
|
|
58
|
-
return this.signPayload(accessToken, keyId, request);
|
|
59
|
-
}
|
|
60
|
-
/**
|
|
61
|
-
* Utility function to generate the signed JWT for an access_token
|
|
62
|
-
* @param payload
|
|
63
|
-
* @param kid
|
|
64
|
-
* @param request
|
|
65
|
-
* @param claims
|
|
66
|
-
* @returns
|
|
67
|
-
*/
|
|
68
|
-
async signPayload(payload, keyId, request, claims) {
|
|
69
|
-
// Deconstruct request to extract SHR parameters
|
|
70
|
-
const { resourceRequestMethod, resourceRequestUri, shrClaims, shrNonce, shrOptions, } = request;
|
|
71
|
-
const resourceUrlString = resourceRequestUri
|
|
72
|
-
? new UrlString(resourceRequestUri)
|
|
73
|
-
: undefined;
|
|
74
|
-
const resourceUrlComponents = resourceUrlString?.getUrlComponents();
|
|
75
|
-
return
|
|
76
|
-
at: payload,
|
|
77
|
-
ts: TimeUtils.nowSeconds(),
|
|
78
|
-
m: resourceRequestMethod?.toUpperCase(),
|
|
79
|
-
u: resourceUrlComponents?.HostNameAndPort,
|
|
80
|
-
nonce: shrNonce || this.cryptoUtils.createNewGuid(),
|
|
81
|
-
p: resourceUrlComponents?.AbsolutePath,
|
|
82
|
-
q: resourceUrlComponents?.QueryString
|
|
83
|
-
? [[], resourceUrlComponents.QueryString]
|
|
84
|
-
: undefined,
|
|
85
|
-
client_claims: shrClaims || undefined,
|
|
86
|
-
...claims,
|
|
87
|
-
}, keyId, shrOptions, request.correlationId);
|
|
88
|
-
}
|
|
8
|
+
/*
|
|
9
|
+
* Copyright (c) Microsoft Corporation. All rights reserved.
|
|
10
|
+
* Licensed under the MIT License.
|
|
11
|
+
*/
|
|
12
|
+
const KeyLocation = {
|
|
13
|
+
SW: "sw",
|
|
14
|
+
UHW: "uhw",
|
|
15
|
+
};
|
|
16
|
+
/** @internal */
|
|
17
|
+
class PopTokenGenerator {
|
|
18
|
+
constructor(cryptoUtils, performanceClient) {
|
|
19
|
+
this.cryptoUtils = cryptoUtils;
|
|
20
|
+
this.performanceClient = performanceClient;
|
|
21
|
+
}
|
|
22
|
+
/**
|
|
23
|
+
* Generates the req_cnf validated at the RP in the POP protocol for SHR parameters
|
|
24
|
+
* and returns an object containing the keyid, the full req_cnf string and the req_cnf string hash
|
|
25
|
+
* @param request
|
|
26
|
+
* @returns
|
|
27
|
+
*/
|
|
28
|
+
async generateCnf(request, logger) {
|
|
29
|
+
this.performanceClient?.addQueueMeasurement(PerformanceEvents.PopTokenGenerateCnf, request.correlationId);
|
|
30
|
+
const reqCnf = await invokeAsync(this.generateKid.bind(this), PerformanceEvents.PopTokenGenerateCnf, logger, this.performanceClient, request.correlationId)(request);
|
|
31
|
+
const reqCnfString = this.cryptoUtils.base64Encode(JSON.stringify(reqCnf));
|
|
32
|
+
return {
|
|
33
|
+
kid: reqCnf.kid,
|
|
34
|
+
reqCnfString,
|
|
35
|
+
reqCnfHash: await this.cryptoUtils.hashString(reqCnfString),
|
|
36
|
+
};
|
|
37
|
+
}
|
|
38
|
+
/**
|
|
39
|
+
* Generates key_id for a SHR token request
|
|
40
|
+
* @param request
|
|
41
|
+
* @returns
|
|
42
|
+
*/
|
|
43
|
+
async generateKid(request) {
|
|
44
|
+
this.performanceClient?.addQueueMeasurement(PerformanceEvents.PopTokenGenerateKid, request.correlationId);
|
|
45
|
+
const kidThumbprint = await this.cryptoUtils.getPublicKeyThumbprint(request);
|
|
46
|
+
return {
|
|
47
|
+
kid: kidThumbprint,
|
|
48
|
+
xms_ksl: KeyLocation.SW,
|
|
49
|
+
};
|
|
50
|
+
}
|
|
51
|
+
/**
|
|
52
|
+
* Signs the POP access_token with the local generated key-pair
|
|
53
|
+
* @param accessToken
|
|
54
|
+
* @param request
|
|
55
|
+
* @returns
|
|
56
|
+
*/
|
|
57
|
+
async signPopToken(accessToken, keyId, request) {
|
|
58
|
+
return this.signPayload(accessToken, keyId, request);
|
|
59
|
+
}
|
|
60
|
+
/**
|
|
61
|
+
* Utility function to generate the signed JWT for an access_token
|
|
62
|
+
* @param payload
|
|
63
|
+
* @param kid
|
|
64
|
+
* @param request
|
|
65
|
+
* @param claims
|
|
66
|
+
* @returns
|
|
67
|
+
*/
|
|
68
|
+
async signPayload(payload, keyId, request, claims) {
|
|
69
|
+
// Deconstruct request to extract SHR parameters
|
|
70
|
+
const { resourceRequestMethod, resourceRequestUri, shrClaims, shrNonce, shrOptions, } = request;
|
|
71
|
+
const resourceUrlString = resourceRequestUri
|
|
72
|
+
? new UrlString(resourceRequestUri)
|
|
73
|
+
: undefined;
|
|
74
|
+
const resourceUrlComponents = resourceUrlString?.getUrlComponents();
|
|
75
|
+
return this.cryptoUtils.signJwt({
|
|
76
|
+
at: payload,
|
|
77
|
+
ts: TimeUtils.nowSeconds(),
|
|
78
|
+
m: resourceRequestMethod?.toUpperCase(),
|
|
79
|
+
u: resourceUrlComponents?.HostNameAndPort,
|
|
80
|
+
nonce: shrNonce || this.cryptoUtils.createNewGuid(),
|
|
81
|
+
p: resourceUrlComponents?.AbsolutePath,
|
|
82
|
+
q: resourceUrlComponents?.QueryString
|
|
83
|
+
? [[], resourceUrlComponents.QueryString]
|
|
84
|
+
: undefined,
|
|
85
|
+
client_claims: shrClaims || undefined,
|
|
86
|
+
...claims,
|
|
87
|
+
}, keyId, shrOptions, request.correlationId);
|
|
88
|
+
}
|
|
89
89
|
}
|
|
90
90
|
|
|
91
91
|
export { PopTokenGenerator };
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"PopTokenGenerator.mjs","sources":["../../src/crypto/PopTokenGenerator.ts"],"sourcesContent":[null],"names":[],"mappings":";;;;;;;
|
|
1
|
+
{"version":3,"file":"PopTokenGenerator.mjs","sources":["../../src/crypto/PopTokenGenerator.ts"],"sourcesContent":[null],"names":[],"mappings":";;;;;;;AAAA;;;AAGG;AA4BH,MAAM,WAAW,GAAG;AAChB,IAAA,EAAE,EAAE,IAAI;AACR,IAAA,GAAG,EAAE,KAAK;CACJ,CAAC;AAGX;MACa,iBAAiB,CAAA;IAI1B,WAAY,CAAA,WAAoB,EAAE,iBAAsC,EAAA;AACpE,QAAA,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;AAC/B,QAAA,IAAI,CAAC,iBAAiB,GAAG,iBAAiB,CAAC;KAC9C;AAED;;;;;AAKG;AACH,IAAA,MAAM,WAAW,CACb,OAAoC,EACpC,MAAc,EAAA;AAEd,QAAA,IAAI,CAAC,iBAAiB,EAAE,mBAAmB,CACvC,iBAAiB,CAAC,mBAAmB,EACrC,OAAO,CAAC,aAAa,CACxB,CAAC;AAEF,QAAA,MAAM,MAAM,GAAG,MAAM,WAAW,CAC5B,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAC3B,iBAAiB,CAAC,mBAAmB,EACrC,MAAM,EACN,IAAI,CAAC,iBAAiB,EACtB,OAAO,CAAC,aAAa,CACxB,CAAC,OAAO,CAAC,CAAC;AACX,QAAA,MAAM,YAAY,GAAW,IAAI,CAAC,WAAW,CAAC,YAAY,CACtD,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CACzB,CAAC;QAEF,OAAO;YACH,GAAG,EAAE,MAAM,CAAC,GAAG;YACf,YAAY;YACZ,UAAU,EAAE,MAAM,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,YAAY,CAAC;SAC9D,CAAC;KACL;AAED;;;;AAIG;IACH,MAAM,WAAW,CAAC,OAAoC,EAAA;AAClD,QAAA,IAAI,CAAC,iBAAiB,EAAE,mBAAmB,CACvC,iBAAiB,CAAC,mBAAmB,EACrC,OAAO,CAAC,aAAa,CACxB,CAAC;QAEF,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,sBAAsB,CAC/D,OAAO,CACV,CAAC;QAEF,OAAO;AACH,YAAA,GAAG,EAAE,aAAa;YAClB,OAAO,EAAE,WAAW,CAAC,EAAE;SAC1B,CAAC;KACL;AAED;;;;;AAKG;AACH,IAAA,MAAM,YAAY,CACd,WAAmB,EACnB,KAAa,EACb,OAAoC,EAAA;QAEpC,OAAO,IAAI,CAAC,WAAW,CAAC,WAAW,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;KACxD;AAED;;;;;;;AAOG;IACH,MAAM,WAAW,CACb,OAAe,EACf,KAAa,EACb,OAAoC,EACpC,MAAe,EAAA;;AAGf,QAAA,MAAM,EACF,qBAAqB,EACrB,kBAAkB,EAClB,SAAS,EACT,QAAQ,EACR,UAAU,GACb,GAAG,OAAO,CAAC;QAEZ,MAAM,iBAAiB,GAAG,kBAAkB;AACxC,cAAE,IAAI,SAAS,CAAC,kBAAkB,CAAC;cACjC,SAAS,CAAC;AAChB,QAAA,MAAM,qBAAqB,GAAG,iBAAiB,EAAE,gBAAgB,EAAE,CAAC;AACpE,QAAA,OAAO,IAAI,CAAC,WAAW,CAAC,OAAO,CAC3B;AACI,YAAA,EAAE,EAAE,OAAO;AACX,YAAA,EAAE,EAAE,SAAS,CAAC,UAAU,EAAE;AAC1B,YAAA,CAAC,EAAE,qBAAqB,EAAE,WAAW,EAAE;YACvC,CAAC,EAAE,qBAAqB,EAAE,eAAe;YACzC,KAAK,EAAE,QAAQ,IAAI,IAAI,CAAC,WAAW,CAAC,aAAa,EAAE;YACnD,CAAC,EAAE,qBAAqB,EAAE,YAAY;YACtC,CAAC,EAAE,qBAAqB,EAAE,WAAW;AACjC,kBAAE,CAAC,EAAE,EAAE,qBAAqB,CAAC,WAAW,CAAC;AACzC,kBAAE,SAAS;YACf,aAAa,EAAE,SAAS,IAAI,SAAS;AACrC,YAAA,GAAG,MAAM;SACZ,EACD,KAAK,EACL,UAAU,EACV,OAAO,CAAC,aAAa,CACxB,CAAC;KACL;AACJ;;;;"}
|
|
@@ -1,16 +1,16 @@
|
|
|
1
|
-
import { JoseHeaderOptions } from "./JoseHeader";
|
|
2
|
-
export type SignedHttpRequest = {
|
|
3
|
-
at?: string;
|
|
4
|
-
cnf?: object;
|
|
5
|
-
m?: string;
|
|
6
|
-
u?: string;
|
|
7
|
-
p?: string;
|
|
8
|
-
q?: [Array<string>, string];
|
|
9
|
-
ts?: number;
|
|
10
|
-
nonce?: string;
|
|
11
|
-
client_claims?: string;
|
|
12
|
-
};
|
|
13
|
-
export type ShrOptions = {
|
|
14
|
-
header: JoseHeaderOptions;
|
|
15
|
-
};
|
|
1
|
+
import { JoseHeaderOptions } from "./JoseHeader";
|
|
2
|
+
export type SignedHttpRequest = {
|
|
3
|
+
at?: string;
|
|
4
|
+
cnf?: object;
|
|
5
|
+
m?: string;
|
|
6
|
+
u?: string;
|
|
7
|
+
p?: string;
|
|
8
|
+
q?: [Array<string>, string];
|
|
9
|
+
ts?: number;
|
|
10
|
+
nonce?: string;
|
|
11
|
+
client_claims?: string;
|
|
12
|
+
};
|
|
13
|
+
export type ShrOptions = {
|
|
14
|
+
header: JoseHeaderOptions;
|
|
15
|
+
};
|
|
16
16
|
//# sourceMappingURL=SignedHttpRequest.d.ts.map
|
|
@@ -1,45 +1,45 @@
|
|
|
1
|
-
import * as AuthErrorCodes from "./AuthErrorCodes";
|
|
2
|
-
export { AuthErrorCodes };
|
|
3
|
-
export declare const AuthErrorMessages: {
|
|
4
|
-
unexpected_error: string;
|
|
5
|
-
post_request_failed: string;
|
|
6
|
-
};
|
|
7
|
-
/**
|
|
8
|
-
* AuthErrorMessage class containing string constants used by error codes and messages.
|
|
9
|
-
* @deprecated Use AuthErrorCodes instead
|
|
10
|
-
*/
|
|
11
|
-
export declare const AuthErrorMessage: {
|
|
12
|
-
unexpectedError: {
|
|
13
|
-
code: string;
|
|
14
|
-
desc: string;
|
|
15
|
-
};
|
|
16
|
-
postRequestFailed: {
|
|
17
|
-
code: string;
|
|
18
|
-
desc: string;
|
|
19
|
-
};
|
|
20
|
-
};
|
|
21
|
-
/**
|
|
22
|
-
* General error class thrown by the MSAL.js library.
|
|
23
|
-
*/
|
|
24
|
-
export declare class AuthError extends Error {
|
|
25
|
-
/**
|
|
26
|
-
* Short string denoting error
|
|
27
|
-
*/
|
|
28
|
-
errorCode: string;
|
|
29
|
-
/**
|
|
30
|
-
* Detailed description of error
|
|
31
|
-
*/
|
|
32
|
-
errorMessage: string;
|
|
33
|
-
/**
|
|
34
|
-
* Describes the subclass of an error
|
|
35
|
-
*/
|
|
36
|
-
subError: string;
|
|
37
|
-
/**
|
|
38
|
-
* CorrelationId associated with the error
|
|
39
|
-
*/
|
|
40
|
-
correlationId: string;
|
|
41
|
-
constructor(errorCode?: string, errorMessage?: string, suberror?: string);
|
|
42
|
-
setCorrelationId(correlationId: string): void;
|
|
43
|
-
}
|
|
44
|
-
export declare function createAuthError(code: string, additionalMessage?: string): AuthError;
|
|
1
|
+
import * as AuthErrorCodes from "./AuthErrorCodes";
|
|
2
|
+
export { AuthErrorCodes };
|
|
3
|
+
export declare const AuthErrorMessages: {
|
|
4
|
+
unexpected_error: string;
|
|
5
|
+
post_request_failed: string;
|
|
6
|
+
};
|
|
7
|
+
/**
|
|
8
|
+
* AuthErrorMessage class containing string constants used by error codes and messages.
|
|
9
|
+
* @deprecated Use AuthErrorCodes instead
|
|
10
|
+
*/
|
|
11
|
+
export declare const AuthErrorMessage: {
|
|
12
|
+
unexpectedError: {
|
|
13
|
+
code: string;
|
|
14
|
+
desc: string;
|
|
15
|
+
};
|
|
16
|
+
postRequestFailed: {
|
|
17
|
+
code: string;
|
|
18
|
+
desc: string;
|
|
19
|
+
};
|
|
20
|
+
};
|
|
21
|
+
/**
|
|
22
|
+
* General error class thrown by the MSAL.js library.
|
|
23
|
+
*/
|
|
24
|
+
export declare class AuthError extends Error {
|
|
25
|
+
/**
|
|
26
|
+
* Short string denoting error
|
|
27
|
+
*/
|
|
28
|
+
errorCode: string;
|
|
29
|
+
/**
|
|
30
|
+
* Detailed description of error
|
|
31
|
+
*/
|
|
32
|
+
errorMessage: string;
|
|
33
|
+
/**
|
|
34
|
+
* Describes the subclass of an error
|
|
35
|
+
*/
|
|
36
|
+
subError: string;
|
|
37
|
+
/**
|
|
38
|
+
* CorrelationId associated with the error
|
|
39
|
+
*/
|
|
40
|
+
correlationId: string;
|
|
41
|
+
constructor(errorCode?: string, errorMessage?: string, suberror?: string);
|
|
42
|
+
setCorrelationId(correlationId: string): void;
|
|
43
|
+
}
|
|
44
|
+
export declare function createAuthError(code: string, additionalMessage?: string): AuthError;
|
|
45
45
|
//# sourceMappingURL=AuthError.d.ts.map
|
package/dist/error/AuthError.mjs
CHANGED
|
@@ -1,55 +1,55 @@
|
|
|
1
|
-
/*! @azure/msal-common v14.
|
|
1
|
+
/*! @azure/msal-common v14.5.0 2023-12-01 */
|
|
2
2
|
'use strict';
|
|
3
3
|
import { Constants } from '../utils/Constants.mjs';
|
|
4
4
|
import { unexpectedError, postRequestFailed } from './AuthErrorCodes.mjs';
|
|
5
5
|
import * as AuthErrorCodes from './AuthErrorCodes.mjs';
|
|
6
6
|
export { AuthErrorCodes };
|
|
7
7
|
|
|
8
|
-
/*
|
|
9
|
-
* Copyright (c) Microsoft Corporation. All rights reserved.
|
|
10
|
-
* Licensed under the MIT License.
|
|
11
|
-
*/
|
|
12
|
-
const AuthErrorMessages = {
|
|
13
|
-
[unexpectedError]: "Unexpected error in authentication.",
|
|
14
|
-
[postRequestFailed]: "Post request failed from the network, could be a 4xx/5xx or a network unavailability. Please check the exact error code for details.",
|
|
15
|
-
};
|
|
16
|
-
/**
|
|
17
|
-
* AuthErrorMessage class containing string constants used by error codes and messages.
|
|
18
|
-
* @deprecated Use AuthErrorCodes instead
|
|
19
|
-
*/
|
|
20
|
-
const AuthErrorMessage = {
|
|
21
|
-
unexpectedError: {
|
|
22
|
-
code: unexpectedError,
|
|
23
|
-
desc: AuthErrorMessages[unexpectedError],
|
|
24
|
-
},
|
|
25
|
-
postRequestFailed: {
|
|
26
|
-
code: postRequestFailed,
|
|
27
|
-
desc: AuthErrorMessages[postRequestFailed],
|
|
28
|
-
},
|
|
29
|
-
};
|
|
30
|
-
/**
|
|
31
|
-
* General error class thrown by the MSAL.js library.
|
|
32
|
-
*/
|
|
33
|
-
class AuthError extends Error {
|
|
34
|
-
constructor(errorCode, errorMessage, suberror) {
|
|
35
|
-
const errorString = errorMessage
|
|
36
|
-
? `${errorCode}: ${errorMessage}`
|
|
37
|
-
: errorCode;
|
|
38
|
-
super(errorString);
|
|
39
|
-
Object.setPrototypeOf(this, AuthError.prototype);
|
|
40
|
-
this.errorCode = errorCode || Constants.EMPTY_STRING;
|
|
41
|
-
this.errorMessage = errorMessage || Constants.EMPTY_STRING;
|
|
42
|
-
this.subError = suberror || Constants.EMPTY_STRING;
|
|
43
|
-
this.name = "AuthError";
|
|
44
|
-
}
|
|
45
|
-
setCorrelationId(correlationId) {
|
|
46
|
-
this.correlationId = correlationId;
|
|
47
|
-
}
|
|
48
|
-
}
|
|
49
|
-
function createAuthError(code, additionalMessage) {
|
|
50
|
-
return new AuthError(code, additionalMessage
|
|
51
|
-
? `${AuthErrorMessages[code]} ${additionalMessage}`
|
|
52
|
-
: AuthErrorMessages[code]);
|
|
8
|
+
/*
|
|
9
|
+
* Copyright (c) Microsoft Corporation. All rights reserved.
|
|
10
|
+
* Licensed under the MIT License.
|
|
11
|
+
*/
|
|
12
|
+
const AuthErrorMessages = {
|
|
13
|
+
[unexpectedError]: "Unexpected error in authentication.",
|
|
14
|
+
[postRequestFailed]: "Post request failed from the network, could be a 4xx/5xx or a network unavailability. Please check the exact error code for details.",
|
|
15
|
+
};
|
|
16
|
+
/**
|
|
17
|
+
* AuthErrorMessage class containing string constants used by error codes and messages.
|
|
18
|
+
* @deprecated Use AuthErrorCodes instead
|
|
19
|
+
*/
|
|
20
|
+
const AuthErrorMessage = {
|
|
21
|
+
unexpectedError: {
|
|
22
|
+
code: unexpectedError,
|
|
23
|
+
desc: AuthErrorMessages[unexpectedError],
|
|
24
|
+
},
|
|
25
|
+
postRequestFailed: {
|
|
26
|
+
code: postRequestFailed,
|
|
27
|
+
desc: AuthErrorMessages[postRequestFailed],
|
|
28
|
+
},
|
|
29
|
+
};
|
|
30
|
+
/**
|
|
31
|
+
* General error class thrown by the MSAL.js library.
|
|
32
|
+
*/
|
|
33
|
+
class AuthError extends Error {
|
|
34
|
+
constructor(errorCode, errorMessage, suberror) {
|
|
35
|
+
const errorString = errorMessage
|
|
36
|
+
? `${errorCode}: ${errorMessage}`
|
|
37
|
+
: errorCode;
|
|
38
|
+
super(errorString);
|
|
39
|
+
Object.setPrototypeOf(this, AuthError.prototype);
|
|
40
|
+
this.errorCode = errorCode || Constants.EMPTY_STRING;
|
|
41
|
+
this.errorMessage = errorMessage || Constants.EMPTY_STRING;
|
|
42
|
+
this.subError = suberror || Constants.EMPTY_STRING;
|
|
43
|
+
this.name = "AuthError";
|
|
44
|
+
}
|
|
45
|
+
setCorrelationId(correlationId) {
|
|
46
|
+
this.correlationId = correlationId;
|
|
47
|
+
}
|
|
48
|
+
}
|
|
49
|
+
function createAuthError(code, additionalMessage) {
|
|
50
|
+
return new AuthError(code, additionalMessage
|
|
51
|
+
? `${AuthErrorMessages[code]} ${additionalMessage}`
|
|
52
|
+
: AuthErrorMessages[code]);
|
|
53
53
|
}
|
|
54
54
|
|
|
55
55
|
export { AuthError, AuthErrorMessage, AuthErrorMessages, createAuthError };
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"AuthError.mjs","sources":["../../src/error/AuthError.ts"],"sourcesContent":[null],"names":["AuthErrorCodes.postRequestFailed"],"mappings":";;;;;;;
|
|
1
|
+
{"version":3,"file":"AuthError.mjs","sources":["../../src/error/AuthError.ts"],"sourcesContent":[null],"names":["AuthErrorCodes.unexpectedError","AuthErrorCodes.postRequestFailed"],"mappings":";;;;;;;AAAA;;;AAGG;AAMU,MAAA,iBAAiB,GAAG;AAC7B,IAAA,CAACA,eAA8B,GAAG,qCAAqC;AACvE,IAAA,CAACC,iBAAgC,GAC7B,sIAAsI;EAC5I;AAEF;;;AAGG;AACU,MAAA,gBAAgB,GAAG;AAC5B,IAAA,eAAe,EAAE;QACb,IAAI,EAAED,eAA8B;AACpC,QAAA,IAAI,EAAE,iBAAiB,CAACA,eAA8B,CAAC;AAC1D,KAAA;AACD,IAAA,iBAAiB,EAAE;QACf,IAAI,EAAEC,iBAAgC;AACtC,QAAA,IAAI,EAAE,iBAAiB,CAACA,iBAAgC,CAAC;AAC5D,KAAA;EACH;AAEF;;AAEG;AACG,MAAO,SAAU,SAAQ,KAAK,CAAA;AAqBhC,IAAA,WAAA,CAAY,SAAkB,EAAE,YAAqB,EAAE,QAAiB,EAAA;QACpE,MAAM,WAAW,GAAG,YAAY;AAC5B,cAAE,CAAA,EAAG,SAAS,CAAA,EAAA,EAAK,YAAY,CAAE,CAAA;cAC/B,SAAS,CAAC;QAChB,KAAK,CAAC,WAAW,CAAC,CAAC;QACnB,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,SAAS,CAAC,SAAS,CAAC,CAAC;QAEjD,IAAI,CAAC,SAAS,GAAG,SAAS,IAAI,SAAS,CAAC,YAAY,CAAC;QACrD,IAAI,CAAC,YAAY,GAAG,YAAY,IAAI,SAAS,CAAC,YAAY,CAAC;QAC3D,IAAI,CAAC,QAAQ,GAAG,QAAQ,IAAI,SAAS,CAAC,YAAY,CAAC;AACnD,QAAA,IAAI,CAAC,IAAI,GAAG,WAAW,CAAC;KAC3B;AAED,IAAA,gBAAgB,CAAC,aAAqB,EAAA;AAClC,QAAA,IAAI,CAAC,aAAa,GAAG,aAAa,CAAC;KACtC;AACJ,CAAA;AAEe,SAAA,eAAe,CAC3B,IAAY,EACZ,iBAA0B,EAAA;AAE1B,IAAA,OAAO,IAAI,SAAS,CAChB,IAAI,EACJ,iBAAiB;UACX,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAA,CAAA,EAAI,iBAAiB,CAAE,CAAA;AACnD,UAAE,iBAAiB,CAAC,IAAI,CAAC,CAChC,CAAC;AACN;;;;"}
|
|
@@ -1,6 +1,6 @@
|
|
|
1
|
-
/**
|
|
2
|
-
* AuthErrorMessage class containing string constants used by error codes and messages.
|
|
3
|
-
*/
|
|
4
|
-
export declare const unexpectedError = "unexpected_error";
|
|
5
|
-
export declare const postRequestFailed = "post_request_failed";
|
|
1
|
+
/**
|
|
2
|
+
* AuthErrorMessage class containing string constants used by error codes and messages.
|
|
3
|
+
*/
|
|
4
|
+
export declare const unexpectedError = "unexpected_error";
|
|
5
|
+
export declare const postRequestFailed = "post_request_failed";
|
|
6
6
|
//# sourceMappingURL=AuthErrorCodes.d.ts.map
|