@azure/msal-common 14.9.0 → 14.9.1-alpha.0

package/dist/index.cjs

@@ -1,4 +1,4 @@
-/*! @azure/msal-common v14.9.0 2024-04-11 */
+/*! @azure/msal-common v14.9.1-alpha.0 2024-05-01 */
 'use strict';
 'use strict';
 
@@ -65,10 +65,11 @@ const Constants = {
     INVALID_INSTANCE: "invalid_instance",
 };
 const HttpStatus = {
-    SUCCESS_RANGE_START: 200,
     SUCCESS: 200,
+    SUCCESS_RANGE_START: 200,
     SUCCESS_RANGE_END: 299,
     REDIRECT: 302,
+    CLIENT_ERROR: 400,
     CLIENT_ERROR_RANGE_START: 400,
     BAD_REQUEST: 400,
     UNAUTHORIZED: 401,
@@ -76,11 +77,12 @@ const HttpStatus = {
     REQUEST_TIMEOUT: 408,
     TOO_MANY_REQUESTS: 429,
     CLIENT_ERROR_RANGE_END: 499,
+    SERVER_ERROR: 500,
     SERVER_ERROR_RANGE_START: 500,
-    INTERNAL_SERVER_ERROR: 500,
     SERVICE_UNAVAILABLE: 503,
     GATEWAY_TIMEOUT: 504,
     SERVER_ERROR_RANGE_END: 599,
+    MULTI_SIDED_ERROR: 600,
 };
 const OIDC_DEFAULT_SCOPES = [
     Constants.OPENID_SCOPE,
@@ -954,7 +956,7 @@ class Logger {
 
 /* eslint-disable header/header */
 const name = "@azure/msal-common";
-const version = "14.9.0";
+const version = "14.9.1-alpha.0";
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4059,9 +4061,10 @@ function isOidcProtocolMode(config) {
  * Error thrown when there is an error with the server code, for example, unavailability.
  */
 class ServerError extends AuthError {
-    constructor(errorCode, errorMessage, subError) {
+    constructor(errorCode, errorMessage, subError, errorNo) {
         super(errorCode, errorMessage, subError);
         this.name = "ServerError";
+        this.errorNo = errorNo;
         Object.setPrototypeOf(this, ServerError.prototype);
     }
 }
@@ -6534,7 +6537,7 @@ const InteractionRequiredAuthErrorMessage = {
  * Error thrown when user interaction is required.
  */
 class InteractionRequiredAuthError extends AuthError {
-    constructor(errorCode, errorMessage, subError, timestamp, traceId, correlationId, claims) {
+    constructor(errorCode, errorMessage, subError, timestamp, traceId, correlationId, claims, errorNo) {
         super(errorCode, errorMessage, subError);
         Object.setPrototypeOf(this, InteractionRequiredAuthError.prototype);
         this.timestamp = timestamp || Constants.EMPTY_STRING;
@@ -6542,6 +6545,7 @@ class InteractionRequiredAuthError extends AuthError {
         this.correlationId = correlationId || Constants.EMPTY_STRING;
         this.claims = claims || Constants.EMPTY_STRING;
         this.name = "InteractionRequiredAuthError";
+        this.errorNo = errorNo;
     }
 }
 /**
@@ -6768,6 +6772,13 @@ class PopTokenGenerator {
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
  */
+function parseServerErrorNo(serverResponse) {
+    const errorCodePrefix = "code=";
+    const errorCodePrefixIndex = serverResponse.error_uri?.lastIndexOf(errorCodePrefix);
+    return errorCodePrefixIndex && errorCodePrefixIndex >= 0
+        ? serverResponse.error_uri?.substring(errorCodePrefixIndex + errorCodePrefix.length)
+        : undefined;
+}
 /**
  * Class that handles response parsing.
  * @internal
@@ -6815,10 +6826,11 @@ class ResponseHandler {
         if (serverResponse.error ||
             serverResponse.error_description ||
             serverResponse.suberror) {
+            const serverErrorNo = parseServerErrorNo(serverResponse);
             if (isInteractionRequiredError(serverResponse.error, serverResponse.error_description, serverResponse.suberror)) {
-                throw new InteractionRequiredAuthError(serverResponse.error || "", serverResponse.error_description, serverResponse.suberror, serverResponse.timestamp || "", serverResponse.trace_id || "", serverResponse.correlation_id || "", serverResponse.claims || "");
+                throw new InteractionRequiredAuthError(serverResponse.error || "", serverResponse.error_description, serverResponse.suberror, serverResponse.timestamp || "", serverResponse.trace_id || "", serverResponse.correlation_id || "", serverResponse.claims || "", serverErrorNo);
             }
-            throw new ServerError(serverResponse.error || "", serverResponse.error_description, serverResponse.suberror);
+            throw new ServerError(serverResponse.error || "", serverResponse.error_description, serverResponse.suberror, serverErrorNo);
         }
     }
     /**
@@ -6832,7 +6844,10 @@ class ResponseHandler {
             serverResponse.error_description ||
             serverResponse.suberror) {
             const errString = `${serverResponse.error_codes} - [${serverResponse.timestamp}]: ${serverResponse.error_description} - Correlation ID: ${serverResponse.correlation_id} - Trace ID: ${serverResponse.trace_id}`;
-            const serverError = new ServerError(serverResponse.error, errString, serverResponse.suberror);
+            const serverErrorNo = serverResponse.error_codes?.length
+                ? serverResponse.error_codes[0]
+                : undefined;
+            const serverError = new ServerError(serverResponse.error, errString, serverResponse.suberror, serverErrorNo);
             // check if 500 error
             if (refreshAccessToken &&
                 serverResponse.status &&
@@ -6852,7 +6867,7 @@ class ResponseHandler {
                 return;
             }
             if (isInteractionRequiredError(serverResponse.error, serverResponse.error_description, serverResponse.suberror)) {
-                throw new InteractionRequiredAuthError(serverResponse.error, serverResponse.error_description, serverResponse.suberror, serverResponse.timestamp || Constants.EMPTY_STRING, serverResponse.trace_id || Constants.EMPTY_STRING, serverResponse.correlation_id || Constants.EMPTY_STRING, serverResponse.claims || Constants.EMPTY_STRING);
+                throw new InteractionRequiredAuthError(serverResponse.error, serverResponse.error_description, serverResponse.suberror, serverResponse.timestamp || Constants.EMPTY_STRING, serverResponse.trace_id || Constants.EMPTY_STRING, serverResponse.correlation_id || Constants.EMPTY_STRING, serverResponse.claims || Constants.EMPTY_STRING, serverErrorNo);
             }
             throw serverError;
         }
@@ -7115,6 +7130,28 @@ function buildAccountToCache(cacheStorage, authority, homeAccountId, idTokenClai
     return baseAccount;
 }
 
+/*
+ * Copyright (c) Microsoft Corporation. All rights reserved.
+ * Licensed under the MIT License.
+ */
+async function getClientAssertion(clientAssertion, clientId, tokenEndpoint) {
+    if (typeof clientAssertion === "string") {
+        return clientAssertion;
+    }
+    else {
+        const config = {
+            clientId: clientId,
+            tokenEndpoint: tokenEndpoint,
+        };
+        return clientAssertion(config);
+    }
+}
+
+var ClientAssertionUtils = /*#__PURE__*/Object.freeze({
+    __proto__: null,
+    getClientAssertion: getClientAssertion
+});
+
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -7274,7 +7311,7 @@ class AuthorizationCodeClient extends BaseClient {
         }
         if (this.config.clientCredentials.clientAssertion) {
             const clientAssertion = this.config.clientCredentials.clientAssertion;
-            parameterBuilder.addClientAssertion(clientAssertion.assertion);
+            parameterBuilder.addClientAssertion(await getClientAssertion(clientAssertion.assertion, this.config.authOptions.clientId, request.resourceRequestUri));
             parameterBuilder.addClientAssertionType(clientAssertion.assertionType);
         }
         parameterBuilder.addGrantType(GrantType.AUTHORIZATION_CODE_GRANT);
@@ -7680,7 +7717,7 @@ class RefreshTokenClient extends BaseClient {
         }
         if (this.config.clientCredentials.clientAssertion) {
             const clientAssertion = this.config.clientCredentials.clientAssertion;
-            parameterBuilder.addClientAssertion(clientAssertion.assertion);
+            parameterBuilder.addClientAssertion(await getClientAssertion(clientAssertion.assertion, this.config.authOptions.clientId, request.resourceRequestUri));
             parameterBuilder.addClientAssertionType(clientAssertion.assertionType);
         }
         if (request.authenticationScheme === AuthenticationScheme.POP) {
@@ -8373,6 +8410,10 @@ function addError(error, logger, event, stackMaxSize = 5) {
     else if (error instanceof AuthError) {
         event.errorCode = error.errorCode;
         event.subErrorCode = error.subError;
+        if (error instanceof ServerError ||
+            error instanceof InteractionRequiredAuthError) {
+            event.serverErrorNo = error.errorNo;
+        }
         return;
     }
     else if (error instanceof CacheError) {
@@ -8655,7 +8696,7 @@ class PerformanceClient {
         const context = JSON.stringify(endContext(event, this.abbreviations, this.eventStack.get(rootEvent.correlationId), error));
         if (isRoot) {
             queueInfo = this.getQueueInfo(event.correlationId);
-            this.discardCache(rootEvent.correlationId);
+            this.discardMeasurements(rootEvent.correlationId);
         }
         else {
             rootEvent.incompleteSubMeasurements?.delete(event.eventId);
@@ -8777,21 +8818,13 @@ class PerformanceClient {
         };
     }
     /**
-     * Removes measurements for a given correlation id.
+     * Removes measurements and aux data for a given correlation id.
      *
      * @param {string} correlationId
      */
     discardMeasurements(correlationId) {
         this.logger.trace("PerformanceClient: Performance measurements discarded", correlationId);
         this.eventsByCorrelationId.delete(correlationId);
-    }
-    /**
-     * Removes cache for a given correlation id.
-     *
-     * @param {string} correlationId correlation identifier
-     */
-    discardCache(correlationId) {
-        this.discardMeasurements(correlationId);
         this.logger.trace("PerformanceClient: QueueMeasurements discarded", correlationId);
         this.queueMeasurements.delete(correlationId);
         this.logger.trace("PerformanceClient: Pre-queue times discarded", correlationId);
@@ -8888,6 +8921,7 @@ exports.CacheRecord = CacheRecord;
 exports.CacheType = CacheType;
 exports.CcsCredentialType = CcsCredentialType;
 exports.ClaimsRequestKeys = ClaimsRequestKeys;
+exports.ClientAssertionUtils = ClientAssertionUtils;
 exports.ClientAuthError = ClientAuthError;
 exports.ClientAuthErrorCodes = ClientAuthErrorCodes;
 exports.ClientAuthErrorMessage = ClientAuthErrorMessage;
@@ -8953,6 +8987,7 @@ exports.createClientAuthError = createClientAuthError;
 exports.createClientConfigurationError = createClientConfigurationError;
 exports.createInteractionRequiredAuthError = createInteractionRequiredAuthError;
 exports.formatAuthorityUri = formatAuthorityUri;
+exports.getClientAssertion = getClientAssertion;
 exports.getTenantIdFromIdTokenClaims = getTenantIdFromIdTokenClaims;
 exports.invoke = invoke;
 exports.invokeAsync = invokeAsync;