@azure/msal-common 14.6.2-beta.0 → 14.7.1

package/dist/crypto/PopTokenGenerator.mjs

@@ -1,4 +1,4 @@
-/*! @azure/msal-common v14.6.2-beta.0 2024-02-07 */
+/*! @azure/msal-common v14.7.1 2024-02-17 */
 'use strict';
 import { nowSeconds } from '../utils/TimeUtils.mjs';
 import { UrlString } from '../url/UrlString.mjs';

package/dist/error/AuthError.mjs

@@ -1,4 +1,4 @@
-/*! @azure/msal-common v14.6.2-beta.0 2024-02-07 */
+/*! @azure/msal-common v14.7.1 2024-02-17 */
 'use strict';
 import { Constants } from '../utils/Constants.mjs';
 import { unexpectedError, postRequestFailed } from './AuthErrorCodes.mjs';

package/dist/error/AuthErrorCodes.mjs

@@ -1,4 +1,4 @@
-/*! @azure/msal-common v14.6.2-beta.0 2024-02-07 */
+/*! @azure/msal-common v14.7.1 2024-02-17 */
 'use strict';
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.

package/dist/error/ClientAuthError.mjs

@@ -1,4 +1,4 @@
-/*! @azure/msal-common v14.6.2-beta.0 2024-02-07 */
+/*! @azure/msal-common v14.7.1 2024-02-17 */
 'use strict';
 import { AuthError } from './AuthError.mjs';
 import { clientInfoDecodingError, clientInfoEmptyError, tokenParsingError, nullOrEmptyToken, endpointResolutionError, networkError, openIdConfigError, hashNotDeserialized, invalidState, stateMismatch, stateNotFound, nonceMismatch, authTimeNotFound, maxAgeTranspired, multipleMatchingTokens, multipleMatchingAccounts, multipleMatchingAppMetadata, requestCannotBeMade, cannotRemoveEmptyScope, cannotAppendScopeSet, emptyInputScopeSet, deviceCodePollingCancelled, deviceCodeExpired, deviceCodeUnknownError, noAccountInSilentRequest, invalidCacheRecord, invalidCacheEnvironment, noAccountFound, noCryptoObject, unexpectedCredentialType, invalidAssertion, invalidClientCredential, tokenRefreshRequired, userTimeoutReached, tokenClaimsCnfRequiredForSignedJwt, authorizationCodeMissingFromServerResponse, bindingKeyNotRemoved, endSessionEndpointNotSupported, keyIdMissing, noNetworkConnectivity, userCanceled, missingTenantIdError, nestedAppAuthBridgeDisabled, methodNotImplemented } from './ClientAuthErrorCodes.mjs';

package/dist/error/ClientAuthErrorCodes.mjs

@@ -1,4 +1,4 @@
-/*! @azure/msal-common v14.6.2-beta.0 2024-02-07 */
+/*! @azure/msal-common v14.7.1 2024-02-17 */
 'use strict';
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.

package/dist/error/ClientConfigurationError.mjs

@@ -1,4 +1,4 @@
-/*! @azure/msal-common v14.6.2-beta.0 2024-02-07 */
+/*! @azure/msal-common v14.7.1 2024-02-17 */
 'use strict';
 import { AuthError } from './AuthError.mjs';
 import { redirectUriEmpty, claimsRequestParsingError, authorityUriInsecure, urlParseError, urlEmptyError, emptyInputScopesError, invalidPromptValue, invalidClaims, tokenRequestEmpty, logoutRequestEmpty, invalidCodeChallengeMethod, pkceParamsMissing, invalidCloudDiscoveryMetadata, invalidAuthorityMetadata, untrustedAuthority, missingSshJwk, missingSshKid, missingNonceAuthenticationHeader, invalidAuthenticationHeader, cannotSetOIDCOptions, cannotAllowNativeBroker, authorityMismatch } from './ClientConfigurationErrorCodes.mjs';

package/dist/error/ClientConfigurationErrorCodes.mjs

@@ -1,4 +1,4 @@
-/*! @azure/msal-common v14.6.2-beta.0 2024-02-07 */
+/*! @azure/msal-common v14.7.1 2024-02-17 */
 'use strict';
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.

package/dist/error/InteractionRequiredAuthError.mjs

@@ -1,4 +1,4 @@
-/*! @azure/msal-common v14.6.2-beta.0 2024-02-07 */
+/*! @azure/msal-common v14.7.1 2024-02-17 */
 'use strict';
 import { Constants } from '../utils/Constants.mjs';
 import { AuthError } from './AuthError.mjs';

package/dist/error/InteractionRequiredAuthErrorCodes.mjs

@@ -1,4 +1,4 @@
-/*! @azure/msal-common v14.6.2-beta.0 2024-02-07 */
+/*! @azure/msal-common v14.7.1 2024-02-17 */
 'use strict';
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.

package/dist/error/JoseHeaderError.mjs

@@ -1,4 +1,4 @@
-/*! @azure/msal-common v14.6.2-beta.0 2024-02-07 */
+/*! @azure/msal-common v14.7.1 2024-02-17 */
 'use strict';
 import { AuthError } from './AuthError.mjs';
 import { missingKidError, missingAlgError } from './JoseHeaderErrorCodes.mjs';

package/dist/error/JoseHeaderErrorCodes.mjs

@@ -1,4 +1,4 @@
-/*! @azure/msal-common v14.6.2-beta.0 2024-02-07 */
+/*! @azure/msal-common v14.7.1 2024-02-17 */
 'use strict';
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.

package/dist/error/ServerError.mjs

@@ -1,4 +1,4 @@
-/*! @azure/msal-common v14.6.2-beta.0 2024-02-07 */
+/*! @azure/msal-common v14.7.1 2024-02-17 */
 'use strict';
 import { AuthError } from './AuthError.mjs';
 

package/dist/index.cjs

@@ -1,4 +1,4 @@
-/*! @azure/msal-common v14.6.2-beta.0 2024-02-07 */
+/*! @azure/msal-common v14.7.1 2024-02-17 */
 'use strict';
 'use strict';
 
@@ -943,7 +943,7 @@ class Logger {
 
 /* eslint-disable header/header */
 const name = "@azure/msal-common";
-const version = "14.6.2-beta.0";
+const version = "14.7.1";
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1986,7 +1986,7 @@ function buildTenantProfileFromIdTokenClaims(homeAccountId, idTokenClaims) {
  * @param idTokenClaims
  * @returns
  */
-function updateAccountTenantProfileData(baseAccountInfo, tenantProfile, idTokenClaims) {
+function updateAccountTenantProfileData(baseAccountInfo, tenantProfile, idTokenClaims, idTokenSecret) {
     let updatedAccountInfo = baseAccountInfo;
     // Tenant Profile overrides passed in account info
     if (tenantProfile) {
@@ -2003,6 +2003,7 @@ function updateAccountTenantProfileData(baseAccountInfo, tenantProfile, idTokenC
             ...updatedAccountInfo,
             ...claimsSourcedTenantProfile,
             idTokenClaims: idTokenClaims,
+            idToken: idTokenSecret,
         };
         return updatedAccountInfo;
     }
@@ -2741,7 +2742,7 @@ class CacheManager {
             }
         }
         // Expand tenant profile into account info based on matching tenant profile and if available matching ID token claims
-        tenantedAccountInfo = updateAccountTenantProfileData(accountInfo, tenantProfile, idTokenClaims);
+        tenantedAccountInfo = updateAccountTenantProfileData(accountInfo, tenantProfile, idTokenClaims, idToken?.secret);
         return tenantedAccountInfo;
     }
     getTenantProfilesFromAccountEntity(accountEntity, targetTenantId, tenantProfileFilter) {
@@ -6006,8 +6007,10 @@ function getTenantFromAuthorityString(authority) {
      *  AAD Authority - domain/tenantId -> Credentials are cached with realm = tenantId
      *  B2C Authority - domain/{tenantId}?/.../policy -> Credentials are cached with realm = policy
      *  tenantId is downcased because B2C policies can have mixed case but tfp claim is downcased
+     *
+     * Note that we may not have any path segments in certain OIDC scenarios.
      */
-    const tenantId = authorityUrlComponents.PathSegments.slice(-1)[0].toLowerCase();
+    const tenantId = authorityUrlComponents.PathSegments.slice(-1)[0]?.toLowerCase();
     switch (tenantId) {
         case AADAuthorityConstants.COMMON:
         case AADAuthorityConstants.ORGANIZATIONS:
@@ -6769,7 +6772,7 @@ class ResponseHandler {
         }
         const accountInfo = cacheRecord.account
             ? updateAccountTenantProfileData(cacheRecord.account.getAccountInfo(), undefined, // tenantProfile optional
-            idTokenClaims)
+            idTokenClaims, cacheRecord.idToken?.secret)
             : null;
         return {
             authority: authority.canonicalAuthority,