@azure/msal-common 14.6.0 → 14.6.1

package/dist/index.cjs

@@ -1,4 +1,4 @@
-/*! @azure/msal-common v14.6.0 2024-01-09 */
+/*! @azure/msal-common v14.6.1 2024-01-23 */
 'use strict';
 'use strict';
 
@@ -943,7 +943,7 @@ class Logger {
 
 /* eslint-disable header/header */
 const name = "@azure/msal-common";
-const version = "14.6.0";
+const version = "14.6.1";
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -2514,496 +2514,30 @@ class UrlString {
  */
 const rawMetdataJSON = {
     endpointMetadata: {
-        "https://login.microsoftonline.com/common/": {
-            token_endpoint: "https://login.microsoftonline.com/common/oauth2/v2.0/token",
-            token_endpoint_auth_methods_supported: [
-                "client_secret_post",
-                "private_key_jwt",
-                "client_secret_basic",
-            ],
-            jwks_uri: "https://login.microsoftonline.com/common/discovery/v2.0/keys",
-            response_modes_supported: ["query", "fragment", "form_post"],
-            subject_types_supported: ["pairwise"],
-            id_token_signing_alg_values_supported: ["RS256"],
-            response_types_supported: [
-                "code",
-                "id_token",
-                "code id_token",
-                "id_token token",
-            ],
-            scopes_supported: ["openid", "profile", "email", "offline_access"],
+        "login.microsoftonline.com": {
+            token_endpoint: "https://login.microsoftonline.com/{tenantid}/oauth2/v2.0/token",
+            jwks_uri: "https://login.microsoftonline.com/{tenantid}/discovery/v2.0/keys",
             issuer: "https://login.microsoftonline.com/{tenantid}/v2.0",
-            request_uri_parameter_supported: false,
-            userinfo_endpoint: "https://graph.microsoft.com/oidc/userinfo",
-            authorization_endpoint: "https://login.microsoftonline.com/common/oauth2/v2.0/authorize",
-            device_authorization_endpoint: "https://login.microsoftonline.com/common/oauth2/v2.0/devicecode",
-            http_logout_supported: true,
-            frontchannel_logout_supported: true,
-            end_session_endpoint: "https://login.microsoftonline.com/common/oauth2/v2.0/logout",
-            claims_supported: [
-                "sub",
-                "iss",
-                "cloud_instance_name",
-                "cloud_instance_host_name",
-                "cloud_graph_host_name",
-                "msgraph_host",
-                "aud",
-                "exp",
-                "iat",
-                "auth_time",
-                "acr",
-                "nonce",
-                "preferred_username",
-                "name",
-                "tid",
-                "ver",
-                "at_hash",
-                "c_hash",
-                "email",
-            ],
-            kerberos_endpoint: "https://login.microsoftonline.com/common/kerberos",
-            tenant_region_scope: null,
-            cloud_instance_name: "microsoftonline.com",
-            cloud_graph_host_name: "graph.windows.net",
-            msgraph_host: "graph.microsoft.com",
-            rbac_url: "https://pas.windows.net",
+            authorization_endpoint: "https://login.microsoftonline.com/{tenantid}/oauth2/v2.0/authorize",
+            end_session_endpoint: "https://login.microsoftonline.com/{tenantid}/oauth2/v2.0/logout",
         },
-        "https://login.chinacloudapi.cn/common/": {
-            token_endpoint: "https://login.chinacloudapi.cn/common/oauth2/v2.0/token",
-            token_endpoint_auth_methods_supported: [
-                "client_secret_post",
-                "private_key_jwt",
-                "client_secret_basic",
-            ],
-            jwks_uri: "https://login.chinacloudapi.cn/common/discovery/v2.0/keys",
-            response_modes_supported: ["query", "fragment", "form_post"],
-            subject_types_supported: ["pairwise"],
-            id_token_signing_alg_values_supported: ["RS256"],
-            response_types_supported: [
-                "code",
-                "id_token",
-                "code id_token",
-                "id_token token",
-            ],
-            scopes_supported: ["openid", "profile", "email", "offline_access"],
+        "login.chinacloudapi.cn": {
+            token_endpoint: "https://login.chinacloudapi.cn/{tenantid}/oauth2/v2.0/token",
+            jwks_uri: "https://login.chinacloudapi.cn/{tenantid}/discovery/v2.0/keys",
             issuer: "https://login.partner.microsoftonline.cn/{tenantid}/v2.0",
-            request_uri_parameter_supported: false,
-            userinfo_endpoint: "https://microsoftgraph.chinacloudapi.cn/oidc/userinfo",
-            authorization_endpoint: "https://login.chinacloudapi.cn/common/oauth2/v2.0/authorize",
-            device_authorization_endpoint: "https://login.chinacloudapi.cn/common/oauth2/v2.0/devicecode",
-            http_logout_supported: true,
-            frontchannel_logout_supported: true,
-            end_session_endpoint: "https://login.chinacloudapi.cn/common/oauth2/v2.0/logout",
-            claims_supported: [
-                "sub",
-                "iss",
-                "cloud_instance_name",
-                "cloud_instance_host_name",
-                "cloud_graph_host_name",
-                "msgraph_host",
-                "aud",
-                "exp",
-                "iat",
-                "auth_time",
-                "acr",
-                "nonce",
-                "preferred_username",
-                "name",
-                "tid",
-                "ver",
-                "at_hash",
-                "c_hash",
-                "email",
-            ],
-            kerberos_endpoint: "https://login.chinacloudapi.cn/common/kerberos",
-            tenant_region_scope: null,
-            cloud_instance_name: "partner.microsoftonline.cn",
-            cloud_graph_host_name: "graph.chinacloudapi.cn",
-            msgraph_host: "microsoftgraph.chinacloudapi.cn",
-            rbac_url: "https://pas.chinacloudapi.cn",
+            authorization_endpoint: "https://login.chinacloudapi.cn/{tenantid}/oauth2/v2.0/authorize",
+            end_session_endpoint: "https://login.chinacloudapi.cn/{tenantid}/oauth2/v2.0/logout",
         },
-        "https://login.microsoftonline.us/common/": {
-            token_endpoint: "https://login.microsoftonline.us/common/oauth2/v2.0/token",
-            token_endpoint_auth_methods_supported: [
-                "client_secret_post",
-                "private_key_jwt",
-                "client_secret_basic",
-            ],
-            jwks_uri: "https://login.microsoftonline.us/common/discovery/v2.0/keys",
-            response_modes_supported: ["query", "fragment", "form_post"],
-            subject_types_supported: ["pairwise"],
-            id_token_signing_alg_values_supported: ["RS256"],
-            response_types_supported: [
-                "code",
-                "id_token",
-                "code id_token",
-                "id_token token",
-            ],
-            scopes_supported: ["openid", "profile", "email", "offline_access"],
+        "login.microsoftonline.us": {
+            token_endpoint: "https://login.microsoftonline.us/{tenantid}/oauth2/v2.0/token",
+            jwks_uri: "https://login.microsoftonline.us/{tenantid}/discovery/v2.0/keys",
             issuer: "https://login.microsoftonline.us/{tenantid}/v2.0",
-            request_uri_parameter_supported: false,
-            userinfo_endpoint: "https://graph.microsoft.com/oidc/userinfo",
-            authorization_endpoint: "https://login.microsoftonline.us/common/oauth2/v2.0/authorize",
-            device_authorization_endpoint: "https://login.microsoftonline.us/common/oauth2/v2.0/devicecode",
-            http_logout_supported: true,
-            frontchannel_logout_supported: true,
-            end_session_endpoint: "https://login.microsoftonline.us/common/oauth2/v2.0/logout",
-            claims_supported: [
-                "sub",
-                "iss",
-                "cloud_instance_name",
-                "cloud_instance_host_name",
-                "cloud_graph_host_name",
-                "msgraph_host",
-                "aud",
-                "exp",
-                "iat",
-                "auth_time",
-                "acr",
-                "nonce",
-                "preferred_username",
-                "name",
-                "tid",
-                "ver",
-                "at_hash",
-                "c_hash",
-                "email",
-            ],
-            kerberos_endpoint: "https://login.microsoftonline.us/common/kerberos",
-            tenant_region_scope: null,
-            cloud_instance_name: "microsoftonline.us",
-            cloud_graph_host_name: "graph.windows.net",
-            msgraph_host: "graph.microsoft.com",
-            rbac_url: "https://pasff.usgovcloudapi.net",
-        },
-        "https://login.microsoftonline.com/consumers/": {
-            token_endpoint: "https://login.microsoftonline.com/consumers/oauth2/v2.0/token",
-            token_endpoint_auth_methods_supported: [
-                "client_secret_post",
-                "private_key_jwt",
-                "client_secret_basic",
-            ],
-            jwks_uri: "https://login.microsoftonline.com/consumers/discovery/v2.0/keys",
-            response_modes_supported: ["query", "fragment", "form_post"],
-            subject_types_supported: ["pairwise"],
-            id_token_signing_alg_values_supported: ["RS256"],
-            response_types_supported: [
-                "code",
-                "id_token",
-                "code id_token",
-                "id_token token",
-            ],
-            scopes_supported: ["openid", "profile", "email", "offline_access"],
-            issuer: "https://login.microsoftonline.com/9188040d-6c67-4c5b-b112-36a304b66dad/v2.0",
-            request_uri_parameter_supported: false,
-            userinfo_endpoint: "https://graph.microsoft.com/oidc/userinfo",
-            authorization_endpoint: "https://login.microsoftonline.com/consumers/oauth2/v2.0/authorize",
-            device_authorization_endpoint: "https://login.microsoftonline.com/consumers/oauth2/v2.0/devicecode",
-            http_logout_supported: true,
-            frontchannel_logout_supported: true,
-            end_session_endpoint: "https://login.microsoftonline.com/consumers/oauth2/v2.0/logout",
-            claims_supported: [
-                "sub",
-                "iss",
-                "cloud_instance_name",
-                "cloud_instance_host_name",
-                "cloud_graph_host_name",
-                "msgraph_host",
-                "aud",
-                "exp",
-                "iat",
-                "auth_time",
-                "acr",
-                "nonce",
-                "preferred_username",
-                "name",
-                "tid",
-                "ver",
-                "at_hash",
-                "c_hash",
-                "email",
-            ],
-            kerberos_endpoint: "https://login.microsoftonline.com/consumers/kerberos",
-            tenant_region_scope: null,
-            cloud_instance_name: "microsoftonline.com",
-            cloud_graph_host_name: "graph.windows.net",
-            msgraph_host: "graph.microsoft.com",
-            rbac_url: "https://pas.windows.net",
-        },
-        "https://login.chinacloudapi.cn/consumers/": {
-            token_endpoint: "https://login.chinacloudapi.cn/consumers/oauth2/v2.0/token",
-            token_endpoint_auth_methods_supported: [
-                "client_secret_post",
-                "private_key_jwt",
-                "client_secret_basic",
-            ],
-            jwks_uri: "https://login.chinacloudapi.cn/consumers/discovery/v2.0/keys",
-            response_modes_supported: ["query", "fragment", "form_post"],
-            subject_types_supported: ["pairwise"],
-            id_token_signing_alg_values_supported: ["RS256"],
-            response_types_supported: [
-                "code",
-                "id_token",
-                "code id_token",
-                "id_token token",
-            ],
-            scopes_supported: ["openid", "profile", "email", "offline_access"],
-            issuer: "https://login.partner.microsoftonline.cn/9188040d-6c67-4c5b-b112-36a304b66dad/v2.0",
-            request_uri_parameter_supported: false,
-            userinfo_endpoint: "https://microsoftgraph.chinacloudapi.cn/oidc/userinfo",
-            authorization_endpoint: "https://login.chinacloudapi.cn/consumers/oauth2/v2.0/authorize",
-            device_authorization_endpoint: "https://login.chinacloudapi.cn/consumers/oauth2/v2.0/devicecode",
-            http_logout_supported: true,
-            frontchannel_logout_supported: true,
-            end_session_endpoint: "https://login.chinacloudapi.cn/consumers/oauth2/v2.0/logout",
-            claims_supported: [
-                "sub",
-                "iss",
-                "cloud_instance_name",
-                "cloud_instance_host_name",
-                "cloud_graph_host_name",
-                "msgraph_host",
-                "aud",
-                "exp",
-                "iat",
-                "auth_time",
-                "acr",
-                "nonce",
-                "preferred_username",
-                "name",
-                "tid",
-                "ver",
-                "at_hash",
-                "c_hash",
-                "email",
-            ],
-            kerberos_endpoint: "https://login.chinacloudapi.cn/consumers/kerberos",
-            tenant_region_scope: null,
-            cloud_instance_name: "partner.microsoftonline.cn",
-            cloud_graph_host_name: "graph.chinacloudapi.cn",
-            msgraph_host: "microsoftgraph.chinacloudapi.cn",
-            rbac_url: "https://pas.chinacloudapi.cn",
-        },
-        "https://login.microsoftonline.us/consumers/": {
-            token_endpoint: "https://login.microsoftonline.us/consumers/oauth2/v2.0/token",
-            token_endpoint_auth_methods_supported: [
-                "client_secret_post",
-                "private_key_jwt",
-                "client_secret_basic",
-            ],
-            jwks_uri: "https://login.microsoftonline.us/consumers/discovery/v2.0/keys",
-            response_modes_supported: ["query", "fragment", "form_post"],
-            subject_types_supported: ["pairwise"],
-            id_token_signing_alg_values_supported: ["RS256"],
-            response_types_supported: [
-                "code",
-                "id_token",
-                "code id_token",
-                "id_token token",
-            ],
-            scopes_supported: ["openid", "profile", "email", "offline_access"],
-            issuer: "https://login.microsoftonline.us/9188040d-6c67-4c5b-b112-36a304b66dad/v2.0",
-            request_uri_parameter_supported: false,
-            userinfo_endpoint: "https://graph.microsoft.com/oidc/userinfo",
-            authorization_endpoint: "https://login.microsoftonline.us/consumers/oauth2/v2.0/authorize",
-            device_authorization_endpoint: "https://login.microsoftonline.us/consumers/oauth2/v2.0/devicecode",
-            http_logout_supported: true,
-            frontchannel_logout_supported: true,
-            end_session_endpoint: "https://login.microsoftonline.us/consumers/oauth2/v2.0/logout",
-            claims_supported: [
-                "sub",
-                "iss",
-                "cloud_instance_name",
-                "cloud_instance_host_name",
-                "cloud_graph_host_name",
-                "msgraph_host",
-                "aud",
-                "exp",
-                "iat",
-                "auth_time",
-                "acr",
-                "nonce",
-                "preferred_username",
-                "name",
-                "tid",
-                "ver",
-                "at_hash",
-                "c_hash",
-                "email",
-            ],
-            kerberos_endpoint: "https://login.microsoftonline.us/consumers/kerberos",
-            tenant_region_scope: null,
-            cloud_instance_name: "microsoftonline.us",
-            cloud_graph_host_name: "graph.windows.net",
-            msgraph_host: "graph.microsoft.com",
-            rbac_url: "https://pasff.usgovcloudapi.net",
-        },
-        "https://login.microsoftonline.com/organizations/": {
-            token_endpoint: "https://login.microsoftonline.com/organizations/oauth2/v2.0/token",
-            token_endpoint_auth_methods_supported: [
-                "client_secret_post",
-                "private_key_jwt",
-                "client_secret_basic",
-            ],
-            jwks_uri: "https://login.microsoftonline.com/organizations/discovery/v2.0/keys",
-            response_modes_supported: ["query", "fragment", "form_post"],
-            subject_types_supported: ["pairwise"],
-            id_token_signing_alg_values_supported: ["RS256"],
-            response_types_supported: [
-                "code",
-                "id_token",
-                "code id_token",
-                "id_token token",
-            ],
-            scopes_supported: ["openid", "profile", "email", "offline_access"],
-            issuer: "https://login.microsoftonline.com/{tenantid}/v2.0",
-            request_uri_parameter_supported: false,
-            userinfo_endpoint: "https://graph.microsoft.com/oidc/userinfo",
-            authorization_endpoint: "https://login.microsoftonline.com/organizations/oauth2/v2.0/authorize",
-            device_authorization_endpoint: "https://login.microsoftonline.com/organizations/oauth2/v2.0/devicecode",
-            http_logout_supported: true,
-            frontchannel_logout_supported: true,
-            end_session_endpoint: "https://login.microsoftonline.com/organizations/oauth2/v2.0/logout",
-            claims_supported: [
-                "sub",
-                "iss",
-                "cloud_instance_name",
-                "cloud_instance_host_name",
-                "cloud_graph_host_name",
-                "msgraph_host",
-                "aud",
-                "exp",
-                "iat",
-                "auth_time",
-                "acr",
-                "nonce",
-                "preferred_username",
-                "name",
-                "tid",
-                "ver",
-                "at_hash",
-                "c_hash",
-                "email",
-            ],
-            kerberos_endpoint: "https://login.microsoftonline.com/organizations/kerberos",
-            tenant_region_scope: null,
-            cloud_instance_name: "microsoftonline.com",
-            cloud_graph_host_name: "graph.windows.net",
-            msgraph_host: "graph.microsoft.com",
-            rbac_url: "https://pas.windows.net",
-        },
-        "https://login.chinacloudapi.cn/organizations/": {
-            token_endpoint: "https://login.chinacloudapi.cn/organizations/oauth2/v2.0/token",
-            token_endpoint_auth_methods_supported: [
-                "client_secret_post",
-                "private_key_jwt",
-                "client_secret_basic",
-            ],
-            jwks_uri: "https://login.chinacloudapi.cn/organizations/discovery/v2.0/keys",
-            response_modes_supported: ["query", "fragment", "form_post"],
-            subject_types_supported: ["pairwise"],
-            id_token_signing_alg_values_supported: ["RS256"],
-            response_types_supported: [
-                "code",
-                "id_token",
-                "code id_token",
-                "id_token token",
-            ],
-            scopes_supported: ["openid", "profile", "email", "offline_access"],
-            issuer: "https://login.partner.microsoftonline.cn/{tenantid}/v2.0",
-            request_uri_parameter_supported: false,
-            userinfo_endpoint: "https://microsoftgraph.chinacloudapi.cn/oidc/userinfo",
-            authorization_endpoint: "https://login.chinacloudapi.cn/organizations/oauth2/v2.0/authorize",
-            device_authorization_endpoint: "https://login.chinacloudapi.cn/organizations/oauth2/v2.0/devicecode",
-            http_logout_supported: true,
-            frontchannel_logout_supported: true,
-            end_session_endpoint: "https://login.chinacloudapi.cn/organizations/oauth2/v2.0/logout",
-            claims_supported: [
-                "sub",
-                "iss",
-                "cloud_instance_name",
-                "cloud_instance_host_name",
-                "cloud_graph_host_name",
-                "msgraph_host",
-                "aud",
-                "exp",
-                "iat",
-                "auth_time",
-                "acr",
-                "nonce",
-                "preferred_username",
-                "name",
-                "tid",
-                "ver",
-                "at_hash",
-                "c_hash",
-                "email",
-            ],
-            kerberos_endpoint: "https://login.chinacloudapi.cn/organizations/kerberos",
-            tenant_region_scope: null,
-            cloud_instance_name: "partner.microsoftonline.cn",
-            cloud_graph_host_name: "graph.chinacloudapi.cn",
-            msgraph_host: "microsoftgraph.chinacloudapi.cn",
-            rbac_url: "https://pas.chinacloudapi.cn",
-        },
-        "https://login.microsoftonline.us/organizations/": {
-            token_endpoint: "https://login.microsoftonline.us/organizations/oauth2/v2.0/token",
-            token_endpoint_auth_methods_supported: [
-                "client_secret_post",
-                "private_key_jwt",
-                "client_secret_basic",
-            ],
-            jwks_uri: "https://login.microsoftonline.us/organizations/discovery/v2.0/keys",
-            response_modes_supported: ["query", "fragment", "form_post"],
-            subject_types_supported: ["pairwise"],
-            id_token_signing_alg_values_supported: ["RS256"],
-            response_types_supported: [
-                "code",
-                "id_token",
-                "code id_token",
-                "id_token token",
-            ],
-            scopes_supported: ["openid", "profile", "email", "offline_access"],
-            issuer: "https://login.microsoftonline.us/{tenantid}/v2.0",
-            request_uri_parameter_supported: false,
-            userinfo_endpoint: "https://graph.microsoft.com/oidc/userinfo",
-            authorization_endpoint: "https://login.microsoftonline.us/organizations/oauth2/v2.0/authorize",
-            device_authorization_endpoint: "https://login.microsoftonline.us/organizations/oauth2/v2.0/devicecode",
-            http_logout_supported: true,
-            frontchannel_logout_supported: true,
-            end_session_endpoint: "https://login.microsoftonline.us/organizations/oauth2/v2.0/logout",
-            claims_supported: [
-                "sub",
-                "iss",
-                "cloud_instance_name",
-                "cloud_instance_host_name",
-                "cloud_graph_host_name",
-                "msgraph_host",
-                "aud",
-                "exp",
-                "iat",
-                "auth_time",
-                "acr",
-                "nonce",
-                "preferred_username",
-                "name",
-                "tid",
-                "ver",
-                "at_hash",
-                "c_hash",
-                "email",
-            ],
-            kerberos_endpoint: "https://login.microsoftonline.us/organizations/kerberos",
-            tenant_region_scope: null,
-            cloud_instance_name: "microsoftonline.us",
-            cloud_graph_host_name: "graph.windows.net",
-            msgraph_host: "graph.microsoft.com",
-            rbac_url: "https://pasff.usgovcloudapi.net",
+            authorization_endpoint: "https://login.microsoftonline.us/{tenantid}/oauth2/v2.0/authorize",
+            end_session_endpoint: "https://login.microsoftonline.us/{tenantid}/oauth2/v2.0/logout",
         },
     },
     instanceDiscoveryMetadata: {
         tenant_discovery_endpoint: "https://{canonicalAuthority}/v2.0/.well-known/openid-configuration",
-        "api-version": "1.1",
         metadata: [
             {
                 preferred_network: "login.microsoftonline.com",
@@ -5665,7 +5199,7 @@ RegionDiscovery.IMDS_OPTIONS = {
  * @internal
  */
 class Authority {
-    constructor(authority, networkInterface, cacheManager, authorityOptions, logger, performanceClient, correlationId) {
+    constructor(authority, networkInterface, cacheManager, authorityOptions, logger, correlationId, performanceClient) {
         this.canonicalAuthority = authority;
         this._canonicalAuthority.validateAsUri();
         this.networkInterface = networkInterface;
@@ -5902,6 +5436,10 @@ class Authority {
         this.updateCachedMetadata(metadataEntity, cloudDiscoverySource, {
             source: endpointSource,
         });
+        this.performanceClient?.addFields({
+            cloudDiscoverySource: cloudDiscoverySource,
+            authorityEndpointSource: endpointSource,
+        }, this.correlationId);
     }
     /**
      * Returns metadata entity from cache if it exists, otherwiser returns a new metadata entity built
@@ -6093,8 +5631,8 @@ class Authority {
      * Get OAuth endpoints for common authorities.
      */
     getEndpointMetadataFromHardcodedValues() {
-        if (this.canonicalAuthority in EndpointMetadata) {
-            return EndpointMetadata[this.canonicalAuthority];
+        if (this.hostnameAndPort in EndpointMetadata) {
+            return EndpointMetadata[this.hostnameAndPort];
         }
         return null;
     }
@@ -6486,50 +6024,36 @@ function buildStaticAuthorityOptions(authOptions) {
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
  */
-/** @internal */
-class AuthorityFactory {
-    /**
-     * Create an authority object of the correct type based on the url
-     * Performs basic authority validation - checks to see if the authority is of a valid type (i.e. aad, b2c, adfs)
-     *
-     * Also performs endpoint discovery.
-     *
-     * @param authorityUri
-     * @param networkClient
-     * @param protocolMode
-     */
-    static async createDiscoveredInstance(authorityUri, networkClient, cacheManager, authorityOptions, logger, performanceClient, correlationId) {
-        performanceClient?.addQueueMeasurement(PerformanceEvents.AuthorityFactoryCreateDiscoveredInstance, correlationId);
-        const authorityUriFinal = Authority.transformCIAMAuthority(formatAuthorityUri(authorityUri));
-        // Initialize authority and perform discovery endpoint check.
-        const acquireTokenAuthority = AuthorityFactory.createInstance(authorityUriFinal, networkClient, cacheManager, authorityOptions, logger, performanceClient, correlationId);
-        try {
-            await invokeAsync(acquireTokenAuthority.resolveEndpointsAsync.bind(acquireTokenAuthority), PerformanceEvents.AuthorityResolveEndpointsAsync, logger, performanceClient, correlationId)();
-            return acquireTokenAuthority;
-        }
-        catch (e) {
-            throw createClientAuthError(endpointResolutionError);
-        }
+/**
+ * Create an authority object of the correct type based on the url
+ * Performs basic authority validation - checks to see if the authority is of a valid type (i.e. aad, b2c, adfs)
+ *
+ * Also performs endpoint discovery.
+ *
+ * @param authorityUri
+ * @param networkClient
+ * @param protocolMode
+ * @internal
+ */
+async function createDiscoveredInstance(authorityUri, networkClient, cacheManager, authorityOptions, logger, correlationId, performanceClient) {
+    performanceClient?.addQueueMeasurement(PerformanceEvents.AuthorityFactoryCreateDiscoveredInstance, correlationId);
+    const authorityUriFinal = Authority.transformCIAMAuthority(formatAuthorityUri(authorityUri));
+    // Initialize authority and perform discovery endpoint check.
+    const acquireTokenAuthority = new Authority(authorityUriFinal, networkClient, cacheManager, authorityOptions, logger, correlationId, performanceClient);
+    try {
+        await invokeAsync(acquireTokenAuthority.resolveEndpointsAsync.bind(acquireTokenAuthority), PerformanceEvents.AuthorityResolveEndpointsAsync, logger, performanceClient, correlationId)();
+        return acquireTokenAuthority;
     }
-    /**
-     * Create an authority object of the correct type based on the url
-     * Performs basic authority validation - checks to see if the authority is of a valid type (i.e. aad, b2c, adfs)
-     *
-     * Does not perform endpoint discovery.
-     *
-     * @param authorityUrl
-     * @param networkInterface
-     * @param protocolMode
-     */
-    static createInstance(authorityUrl, networkInterface, cacheManager, authorityOptions, logger, performanceClient, correlationId) {
-        // Throw error if authority url is empty
-        if (!authorityUrl) {
-            throw createClientConfigurationError(urlEmptyError);
-        }
-        return new Authority(authorityUrl, networkInterface, cacheManager, authorityOptions, logger, performanceClient, correlationId);
+    catch (e) {
+        throw createClientAuthError(endpointResolutionError);
     }
 }
 
+var AuthorityFactory = /*#__PURE__*/Object.freeze({
+    __proto__: null,
+    createDiscoveredInstance: createDiscoveredInstance
+});
+
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -6615,7 +6139,7 @@ class BaseClient {
     async updateAuthority(cloudInstanceHostname, correlationId) {
         this.performanceClient?.addQueueMeasurement(PerformanceEvents.UpdateTokenEndpointAuthority, correlationId);
         const cloudInstanceAuthorityUri = `https://${cloudInstanceHostname}/${this.authority.tenant}/`;
-        const cloudInstanceAuthority = await AuthorityFactory.createDiscoveredInstance(cloudInstanceAuthorityUri, this.networkClient, this.cacheManager, this.authority.options, this.logger, this.performanceClient, correlationId);
+        const cloudInstanceAuthority = await createDiscoveredInstance(cloudInstanceAuthorityUri, this.networkClient, this.cacheManager, this.authority.options, this.logger, correlationId, this.performanceClient);
         this.authority = cloudInstanceAuthority;
     }
     /**