@azure/msal-common 14.7.0 → 14.7.2-alpha.0

package/dist/index.cjs

@@ -1,4 +1,4 @@
-/*! @azure/msal-common v14.7.0 2024-02-07 */
+/*! @azure/msal-common v14.7.2-alpha.0 2024-03-04 */
 'use strict';
 'use strict';
 
@@ -66,11 +66,20 @@ const Constants = {
 };
 const HttpStatus = {
     SUCCESS_RANGE_START: 200,
+    SUCCESS: 200,
     SUCCESS_RANGE_END: 299,
     REDIRECT: 302,
     CLIENT_ERROR_RANGE_START: 400,
+    BAD_REQUEST: 400,
+    UNAUTHORIZED: 401,
+    NOT_FOUND: 404,
+    REQUEST_TIMEOUT: 408,
+    TOO_MANY_REQUESTS: 429,
     CLIENT_ERROR_RANGE_END: 499,
     SERVER_ERROR_RANGE_START: 500,
+    INTERNAL_SERVER_ERROR: 500,
+    SERVICE_UNAVAILABLE: 503,
+    GATEWAY_TIMEOUT: 504,
     SERVER_ERROR_RANGE_END: 599,
 };
 const OIDC_DEFAULT_SCOPES = [
@@ -310,6 +319,8 @@ const JsonWebTokenTypes = {
     Pop: "pop",
 };
 const ONE_DAY_IN_MS = 86400000;
+// Token renewal offset default in seconds
+const DEFAULT_TOKEN_RENEWAL_OFFSET_SEC = 300;
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -943,7 +954,7 @@ class Logger {
 
 /* eslint-disable header/header */
 const name = "@azure/msal-common";
-const version = "14.7.0";
+const version = "14.7.2-alpha.0";
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1986,7 +1997,7 @@ function buildTenantProfileFromIdTokenClaims(homeAccountId, idTokenClaims) {
  * @param idTokenClaims
  * @returns
  */
-function updateAccountTenantProfileData(baseAccountInfo, tenantProfile, idTokenClaims) {
+function updateAccountTenantProfileData(baseAccountInfo, tenantProfile, idTokenClaims, idTokenSecret) {
     let updatedAccountInfo = baseAccountInfo;
     // Tenant Profile overrides passed in account info
     if (tenantProfile) {
@@ -2003,6 +2014,7 @@ function updateAccountTenantProfileData(baseAccountInfo, tenantProfile, idTokenC
             ...updatedAccountInfo,
             ...claimsSourcedTenantProfile,
             idTokenClaims: idTokenClaims,
+            idToken: idTokenSecret,
         };
         return updatedAccountInfo;
     }
@@ -2741,7 +2753,7 @@ class CacheManager {
             }
         }
         // Expand tenant profile into account info based on matching tenant profile and if available matching ID token claims
-        tenantedAccountInfo = updateAccountTenantProfileData(accountInfo, tenantProfile, idTokenClaims);
+        tenantedAccountInfo = updateAccountTenantProfileData(accountInfo, tenantProfile, idTokenClaims, idToken?.secret);
         return tenantedAccountInfo;
     }
     getTenantProfilesFromAccountEntity(accountEntity, targetTenantId, tenantProfileFilter) {
@@ -3057,14 +3069,6 @@ class CacheManager {
      * @param filter
      */
     getAppMetadataFilteredBy(filter) {
-        return this.getAppMetadataFilteredByInternal(filter.environment, filter.clientId);
-    }
-    /**
-     * Support function to help match appMetadata
-     * @param environment
-     * @param clientId
-     */
-    getAppMetadataFilteredByInternal(environment, clientId) {
         const allCacheKeys = this.getKeys();
         const matchingAppMetadata = {};
         allCacheKeys.forEach((cacheKey) => {
@@ -3077,10 +3081,12 @@ class CacheManager {
             if (!entity) {
                 return;
             }
-            if (!!environment && !this.matchEnvironment(entity, environment)) {
+            if (!!filter.environment &&
+                !this.matchEnvironment(entity, filter.environment)) {
                 return;
             }
-            if (!!clientId && !this.matchClientId(entity, clientId)) {
+            if (!!filter.clientId &&
+                !this.matchClientId(entity, filter.clientId)) {
                 return;
             }
             matchingAppMetadata[cacheKey] = entity;
@@ -3867,9 +3873,6 @@ class DefaultStorageClass extends CacheManager {
     removeItem() {
         throw createClientAuthError(methodNotImplemented);
     }
-    containsKey() {
-        throw createClientAuthError(methodNotImplemented);
-    }
     getKeys() {
         throw createClientAuthError(methodNotImplemented);
     }
@@ -3894,8 +3897,6 @@ class DefaultStorageClass extends CacheManager {
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
  */
-// Token renewal offset default in seconds
-const DEFAULT_TOKEN_RENEWAL_OFFSET_SEC = 300;
 const DEFAULT_SYSTEM_OPTIONS = {
     tokenRenewalOffsetSeconds: DEFAULT_TOKEN_RENEWAL_OFFSET_SEC,
     preventCorsPreflight: false,
@@ -5221,7 +5222,7 @@ RegionDiscovery.IMDS_OPTIONS = {
  * @internal
  */
 class Authority {
-    constructor(authority, networkInterface, cacheManager, authorityOptions, logger, correlationId, performanceClient) {
+    constructor(authority, networkInterface, cacheManager, authorityOptions, logger, correlationId, performanceClient, managedIdentity) {
         this.canonicalAuthority = authority;
         this._canonicalAuthority.validateAsUri();
         this.networkInterface = networkInterface;
@@ -5235,6 +5236,7 @@ class Authority {
         this.logger = logger;
         this.performanceClient = performanceClient;
         this.correlationId = correlationId;
+        this.managedIdentity = managedIdentity || false;
         this.regionDiscovery = new RegionDiscovery(networkInterface, this.logger, this.performanceClient, this.correlationId);
     }
     /**
@@ -5440,7 +5442,7 @@ class Authority {
         return `${this.canonicalAuthority}v2.0/.well-known/openid-configuration`;
     }
     /**
-     * Boolean that returns whethr or not tenant discovery has been completed.
+     * Boolean that returns whether or not tenant discovery has been completed.
      */
     discoveryComplete() {
         return !!this.metadata;
@@ -5892,7 +5894,10 @@ class Authority {
      * helper function to generate environment from authority object
      */
     getPreferredCache() {
-        if (this.discoveryComplete()) {
+        if (this.managedIdentity) {
+            return Constants.DEFAULT_AUTHORITY_HOST;
+        }
+        else if (this.discoveryComplete()) {
             return this.metadata.preferred_cache;
         }
         else {
@@ -6006,8 +6011,10 @@ function getTenantFromAuthorityString(authority) {
      *  AAD Authority - domain/tenantId -> Credentials are cached with realm = tenantId
      *  B2C Authority - domain/{tenantId}?/.../policy -> Credentials are cached with realm = policy
      *  tenantId is downcased because B2C policies can have mixed case but tfp claim is downcased
+     *
+     * Note that we may not have any path segments in certain OIDC scenarios.
      */
-    const tenantId = authorityUrlComponents.PathSegments.slice(-1)[0].toLowerCase();
+    const tenantId = authorityUrlComponents.PathSegments.slice(-1)[0]?.toLowerCase();
     switch (tenantId) {
         case AADAuthorityConstants.COMMON:
         case AADAuthorityConstants.ORGANIZATIONS:
@@ -6769,7 +6776,7 @@ class ResponseHandler {
         }
         const accountInfo = cacheRecord.account
             ? updateAccountTenantProfileData(cacheRecord.account.getAccountInfo(), undefined, // tenantProfile optional
-            idTokenClaims)
+            idTokenClaims, cacheRecord.idToken?.secret)
             : null;
         return {
             authority: authority.canonicalAuthority,
@@ -7456,7 +7463,12 @@ class SilentFlowClient extends BaseClient {
      */
     async acquireToken(request) {
         try {
-            const [authResponse, cacheOutcome] = await this.acquireCachedToken(request);
+            const [authResponse, cacheOutcome] = await this.acquireCachedToken({
+                ...request,
+                scopes: request.scopes?.length
+                    ? request.scopes
+                    : [...OIDC_DEFAULT_SCOPES],
+            });
             // if the token is not expired but must be refreshed; get a new one in the background
             if (cacheOutcome === CacheOutcome.PROACTIVELY_REFRESHED) {
                 this.logger.info("SilentFlowClient:acquireCachedToken - Cached access token's refreshOn property has been exceeded'. It's not expired, but must be refreshed.");
@@ -8432,6 +8444,7 @@ exports.Constants = Constants;
 exports.CredentialType = CredentialType;
 exports.DEFAULT_CRYPTO_IMPLEMENTATION = DEFAULT_CRYPTO_IMPLEMENTATION;
 exports.DEFAULT_SYSTEM_OPTIONS = DEFAULT_SYSTEM_OPTIONS;
+exports.DEFAULT_TOKEN_RENEWAL_OFFSET_SEC = DEFAULT_TOKEN_RENEWAL_OFFSET_SEC;
 exports.DefaultStorageClass = DefaultStorageClass;
 exports.Errors = Errors;
 exports.GrantType = GrantType;