@azure/msal-common 15.13.3 → 16.0.0-beta.0

package/src/error/ClientConfigurationError.ts

@@ -7,213 +7,12 @@ import { AuthError } from "./AuthError.js";
 import * as ClientConfigurationErrorCodes from "./ClientConfigurationErrorCodes.js";
 export { ClientConfigurationErrorCodes };
 
-export const ClientConfigurationErrorMessages = {
-    [ClientConfigurationErrorCodes.redirectUriEmpty]:
-        "A redirect URI is required for all calls, and none has been set.",
-    [ClientConfigurationErrorCodes.claimsRequestParsingError]:
-        "Could not parse the given claims request object.",
-    [ClientConfigurationErrorCodes.authorityUriInsecure]:
-        "Authority URIs must use https.  Please see here for valid authority configuration options: https://docs.microsoft.com/en-us/azure/active-directory/develop/msal-js-initializing-client-applications#configuration-options",
-    [ClientConfigurationErrorCodes.urlParseError]:
-        "URL could not be parsed into appropriate segments.",
-    [ClientConfigurationErrorCodes.urlEmptyError]: "URL was empty or null.",
-    [ClientConfigurationErrorCodes.emptyInputScopesError]:
-        "Scopes cannot be passed as null, undefined or empty array because they are required to obtain an access token.",
-    [ClientConfigurationErrorCodes.invalidClaims]:
-        "Given claims parameter must be a stringified JSON object.",
-    [ClientConfigurationErrorCodes.tokenRequestEmpty]:
-        "Token request was empty and not found in cache.",
-    [ClientConfigurationErrorCodes.logoutRequestEmpty]:
-        "The logout request was null or undefined.",
-    [ClientConfigurationErrorCodes.invalidCodeChallengeMethod]:
-        'code_challenge_method passed is invalid. Valid values are "plain" and "S256".',
-    [ClientConfigurationErrorCodes.pkceParamsMissing]:
-        "Both params: code_challenge and code_challenge_method are to be passed if to be sent in the request",
-    [ClientConfigurationErrorCodes.invalidCloudDiscoveryMetadata]:
-        "Invalid cloudDiscoveryMetadata provided. Must be a stringified JSON object containing tenant_discovery_endpoint and metadata fields",
-    [ClientConfigurationErrorCodes.invalidAuthorityMetadata]:
-        "Invalid authorityMetadata provided. Must by a stringified JSON object containing authorization_endpoint, token_endpoint, issuer fields.",
-    [ClientConfigurationErrorCodes.untrustedAuthority]:
-        "The provided authority is not a trusted authority. Please include this authority in the knownAuthorities config parameter.",
-    [ClientConfigurationErrorCodes.missingSshJwk]:
-        "Missing sshJwk in SSH certificate request. A stringified JSON Web Key is required when using the SSH authentication scheme.",
-    [ClientConfigurationErrorCodes.missingSshKid]:
-        "Missing sshKid in SSH certificate request. A string that uniquely identifies the public SSH key is required when using the SSH authentication scheme.",
-    [ClientConfigurationErrorCodes.missingNonceAuthenticationHeader]:
-        "Unable to find an authentication header containing server nonce. Either the Authentication-Info or WWW-Authenticate headers must be present in order to obtain a server nonce.",
-    [ClientConfigurationErrorCodes.invalidAuthenticationHeader]:
-        "Invalid authentication header provided",
-    [ClientConfigurationErrorCodes.cannotSetOIDCOptions]:
-        "Cannot set OIDCOptions parameter. Please change the protocol mode to OIDC or use a non-Microsoft authority.",
-    [ClientConfigurationErrorCodes.cannotAllowPlatformBroker]:
-        "Cannot set allowPlatformBroker parameter to true when not in AAD protocol mode.",
-    [ClientConfigurationErrorCodes.authorityMismatch]:
-        "Authority mismatch error. Authority provided in login request or PublicClientApplication config does not match the environment of the provided account. Please use a matching account or make an interactive request to login to this authority.",
-    [ClientConfigurationErrorCodes.invalidAuthorizePostBodyParameters]:
-        "Invalid authorize post body parameters provided. If you are using authorizePostBodyParameters, the request method must be POST. Please check the request method and parameters.",
-    [ClientConfigurationErrorCodes.invalidRequestMethodForEAR]:
-        "Invalid request method for EAR protocol mode. The request method cannot be GET when using EAR protocol mode. Please change the request method to POST.",
-    [ClientConfigurationErrorCodes.invalidPlatformBrokerConfiguration]:
-        "Invalid platform broker configuration. `allowPlatformBrokerWithDOM` can only be enabled when `allowPlatformBroker` is enabled.",
-};
-
-/**
- * ClientConfigurationErrorMessage class containing string constants used by error codes and messages.
- * @deprecated Use ClientConfigurationErrorCodes instead
- */
-export const ClientConfigurationErrorMessage = {
-    redirectUriNotSet: {
-        code: ClientConfigurationErrorCodes.redirectUriEmpty,
-        desc: ClientConfigurationErrorMessages[
-            ClientConfigurationErrorCodes.redirectUriEmpty
-        ],
-    },
-    claimsRequestParsingError: {
-        code: ClientConfigurationErrorCodes.claimsRequestParsingError,
-        desc: ClientConfigurationErrorMessages[
-            ClientConfigurationErrorCodes.claimsRequestParsingError
-        ],
-    },
-    authorityUriInsecure: {
-        code: ClientConfigurationErrorCodes.authorityUriInsecure,
-        desc: ClientConfigurationErrorMessages[
-            ClientConfigurationErrorCodes.authorityUriInsecure
-        ],
-    },
-    urlParseError: {
-        code: ClientConfigurationErrorCodes.urlParseError,
-        desc: ClientConfigurationErrorMessages[
-            ClientConfigurationErrorCodes.urlParseError
-        ],
-    },
-    urlEmptyError: {
-        code: ClientConfigurationErrorCodes.urlEmptyError,
-        desc: ClientConfigurationErrorMessages[
-            ClientConfigurationErrorCodes.urlEmptyError
-        ],
-    },
-    emptyScopesError: {
-        code: ClientConfigurationErrorCodes.emptyInputScopesError,
-        desc: ClientConfigurationErrorMessages[
-            ClientConfigurationErrorCodes.emptyInputScopesError
-        ],
-    },
-    invalidClaimsRequest: {
-        code: ClientConfigurationErrorCodes.invalidClaims,
-        desc: ClientConfigurationErrorMessages[
-            ClientConfigurationErrorCodes.invalidClaims
-        ],
-    },
-    tokenRequestEmptyError: {
-        code: ClientConfigurationErrorCodes.tokenRequestEmpty,
-        desc: ClientConfigurationErrorMessages[
-            ClientConfigurationErrorCodes.tokenRequestEmpty
-        ],
-    },
-    logoutRequestEmptyError: {
-        code: ClientConfigurationErrorCodes.logoutRequestEmpty,
-        desc: ClientConfigurationErrorMessages[
-            ClientConfigurationErrorCodes.logoutRequestEmpty
-        ],
-    },
-    invalidCodeChallengeMethod: {
-        code: ClientConfigurationErrorCodes.invalidCodeChallengeMethod,
-        desc: ClientConfigurationErrorMessages[
-            ClientConfigurationErrorCodes.invalidCodeChallengeMethod
-        ],
-    },
-    invalidCodeChallengeParams: {
-        code: ClientConfigurationErrorCodes.pkceParamsMissing,
-        desc: ClientConfigurationErrorMessages[
-            ClientConfigurationErrorCodes.pkceParamsMissing
-        ],
-    },
-    invalidCloudDiscoveryMetadata: {
-        code: ClientConfigurationErrorCodes.invalidCloudDiscoveryMetadata,
-        desc: ClientConfigurationErrorMessages[
-            ClientConfigurationErrorCodes.invalidCloudDiscoveryMetadata
-        ],
-    },
-    invalidAuthorityMetadata: {
-        code: ClientConfigurationErrorCodes.invalidAuthorityMetadata,
-        desc: ClientConfigurationErrorMessages[
-            ClientConfigurationErrorCodes.invalidAuthorityMetadata
-        ],
-    },
-    untrustedAuthority: {
-        code: ClientConfigurationErrorCodes.untrustedAuthority,
-        desc: ClientConfigurationErrorMessages[
-            ClientConfigurationErrorCodes.untrustedAuthority
-        ],
-    },
-    missingSshJwk: {
-        code: ClientConfigurationErrorCodes.missingSshJwk,
-        desc: ClientConfigurationErrorMessages[
-            ClientConfigurationErrorCodes.missingSshJwk
-        ],
-    },
-    missingSshKid: {
-        code: ClientConfigurationErrorCodes.missingSshKid,
-        desc: ClientConfigurationErrorMessages[
-            ClientConfigurationErrorCodes.missingSshKid
-        ],
-    },
-    missingNonceAuthenticationHeader: {
-        code: ClientConfigurationErrorCodes.missingNonceAuthenticationHeader,
-        desc: ClientConfigurationErrorMessages[
-            ClientConfigurationErrorCodes.missingNonceAuthenticationHeader
-        ],
-    },
-    invalidAuthenticationHeader: {
-        code: ClientConfigurationErrorCodes.invalidAuthenticationHeader,
-        desc: ClientConfigurationErrorMessages[
-            ClientConfigurationErrorCodes.invalidAuthenticationHeader
-        ],
-    },
-    cannotSetOIDCOptions: {
-        code: ClientConfigurationErrorCodes.cannotSetOIDCOptions,
-        desc: ClientConfigurationErrorMessages[
-            ClientConfigurationErrorCodes.cannotSetOIDCOptions
-        ],
-    },
-    cannotAllowPlatformBroker: {
-        code: ClientConfigurationErrorCodes.cannotAllowPlatformBroker,
-        desc: ClientConfigurationErrorMessages[
-            ClientConfigurationErrorCodes.cannotAllowPlatformBroker
-        ],
-    },
-    authorityMismatch: {
-        code: ClientConfigurationErrorCodes.authorityMismatch,
-        desc: ClientConfigurationErrorMessages[
-            ClientConfigurationErrorCodes.authorityMismatch
-        ],
-    },
-    invalidAuthorizePostBodyParameters: {
-        code: ClientConfigurationErrorCodes.invalidAuthorizePostBodyParameters,
-        desc: ClientConfigurationErrorMessages[
-            ClientConfigurationErrorCodes.invalidAuthorizePostBodyParameters
-        ],
-    },
-    invalidRequestMethodForEAR: {
-        code: ClientConfigurationErrorCodes.invalidRequestMethodForEAR,
-        desc: ClientConfigurationErrorMessages[
-            ClientConfigurationErrorCodes.invalidRequestMethodForEAR
-        ],
-    },
-    invalidPlatformBrokerConfiguration: {
-        code: ClientConfigurationErrorCodes.invalidPlatformBrokerConfiguration,
-        desc: ClientConfigurationErrorMessages[
-            ClientConfigurationErrorCodes.invalidPlatformBrokerConfiguration
-        ],
-    },
-};
-
 /**
  * Error thrown when there is an error in configuration of the MSAL.js library.
  */
 export class ClientConfigurationError extends AuthError {
     constructor(errorCode: string) {
-        super(errorCode, ClientConfigurationErrorMessages[errorCode]);
+        super(errorCode);
         this.name = "ClientConfigurationError";
         Object.setPrototypeOf(this, ClientConfigurationError.prototype);
     }

package/src/error/ClientConfigurationErrorCodes.ts

@@ -26,7 +26,3 @@ export const cannotSetOIDCOptions = "cannot_set_OIDCOptions";
 export const cannotAllowPlatformBroker = "cannot_allow_platform_broker";
 export const authorityMismatch = "authority_mismatch";
 export const invalidRequestMethodForEAR = "invalid_request_method_for_EAR";
-export const invalidAuthorizePostBodyParameters =
-    "invalid_authorize_post_body_parameters";
-export const invalidPlatformBrokerConfiguration =
-    "invalid_platform_broker_configuration";

package/src/error/InteractionRequiredAuthError.ts

@@ -3,7 +3,6 @@
  * Licensed under the MIT License.
  */
 
-import { Constants } from "../utils/Constants.js";
 import { AuthError } from "./AuthError.js";
 import * as InteractionRequiredAuthErrorCodes from "./InteractionRequiredAuthErrorCodes.js";
 export { InteractionRequiredAuthErrorCodes };
@@ -26,46 +25,9 @@ export const InteractionRequiredAuthSubErrorMessage = [
     "user_password_expired",
     "consent_required",
     "bad_token",
+    "ux_not_allowed",
 ];
 
-const InteractionRequiredAuthErrorMessages = {
-    [InteractionRequiredAuthErrorCodes.noTokensFound]:
-        "No refresh token found in the cache. Please sign-in.",
-    [InteractionRequiredAuthErrorCodes.nativeAccountUnavailable]:
-        "The requested account is not available in the native broker. It may have been deleted or logged out. Please sign-in again using an interactive API.",
-    [InteractionRequiredAuthErrorCodes.refreshTokenExpired]:
-        "Refresh token has expired.",
-    [InteractionRequiredAuthErrorCodes.badToken]:
-        "Identity provider returned bad_token due to an expired or invalid refresh token. Please invoke an interactive API to resolve.",
-    [InteractionRequiredAuthErrorCodes.uxNotAllowed]:
-        "`canShowUI` flag in Edge was set to false. User interaction required on web page. Please invoke an interactive API to resolve.",
-};
-
-/**
- * Interaction required errors defined by the SDK
- * @deprecated Use InteractionRequiredAuthErrorCodes instead
- */
-export const InteractionRequiredAuthErrorMessage = {
-    noTokensFoundError: {
-        code: InteractionRequiredAuthErrorCodes.noTokensFound,
-        desc: InteractionRequiredAuthErrorMessages[
-            InteractionRequiredAuthErrorCodes.noTokensFound
-        ],
-    },
-    native_account_unavailable: {
-        code: InteractionRequiredAuthErrorCodes.nativeAccountUnavailable,
-        desc: InteractionRequiredAuthErrorMessages[
-            InteractionRequiredAuthErrorCodes.nativeAccountUnavailable
-        ],
-    },
-    bad_token: {
-        code: InteractionRequiredAuthErrorCodes.badToken,
-        desc: InteractionRequiredAuthErrorMessages[
-            InteractionRequiredAuthErrorCodes.badToken
-        ],
-    },
-};
-
 /**
  * Error thrown when user interaction is required.
  */
@@ -109,10 +71,10 @@ export class InteractionRequiredAuthError extends AuthError {
         super(errorCode, errorMessage, subError);
         Object.setPrototypeOf(this, InteractionRequiredAuthError.prototype);
 
-        this.timestamp = timestamp || Constants.EMPTY_STRING;
-        this.traceId = traceId || Constants.EMPTY_STRING;
-        this.correlationId = correlationId || Constants.EMPTY_STRING;
-        this.claims = claims || Constants.EMPTY_STRING;
+        this.timestamp = timestamp || "";
+        this.traceId = traceId || "";
+        this.correlationId = correlationId || "";
+        this.claims = claims || "";
         this.name = "InteractionRequiredAuthError";
         this.errorNo = errorNo;
     }
@@ -152,10 +114,8 @@ export function isInteractionRequiredError(
  * Creates an InteractionRequiredAuthError
  */
 export function createInteractionRequiredAuthError(
-    errorCode: string
+    errorCode: string,
+    errorMessage?: string
 ): InteractionRequiredAuthError {
-    return new InteractionRequiredAuthError(
-        errorCode,
-        InteractionRequiredAuthErrorMessages[errorCode]
-    );
+    return new InteractionRequiredAuthError(errorCode, errorMessage);
 }

package/src/error/JoseHeaderError.ts

@@ -7,13 +7,6 @@ import { AuthError } from "./AuthError.js";
 import * as JoseHeaderErrorCodes from "./JoseHeaderErrorCodes.js";
 export { JoseHeaderErrorCodes };
 
-export const JoseHeaderErrorMessages = {
-    [JoseHeaderErrorCodes.missingKidError]:
-        "The JOSE Header for the requested JWT, JWS or JWK object requires a keyId to be configured as the 'kid' header claim. No 'kid' value was provided.",
-    [JoseHeaderErrorCodes.missingAlgError]:
-        "The JOSE Header for the requested JWT, JWS or JWK object requires an algorithm to be specified as the 'alg' header claim. No 'alg' value was provided.",
-};
-
 /**
  * Error thrown when there is an error in the client code running on the browser.
  */
@@ -28,5 +21,5 @@ export class JoseHeaderError extends AuthError {
 
 /** Returns JoseHeaderError object */
 export function createJoseHeaderError(code: string): JoseHeaderError {
-    return new JoseHeaderError(code, JoseHeaderErrorMessages[code]);
+    return new JoseHeaderError(code);
 }

package/src/error/PlatformBrokerError.ts

@@ -6,7 +6,8 @@
 import { AuthError } from "./AuthError.js";
 
 /**
- * Converts a numeric tag to a string representation
+ * Converts a numeric tag from MSAL Runtime to a 5-character string representation.
+ * Tags are encoded as 30-bit values (6 bits per character) using a custom symbol space.
  * @param tag - The numeric tag to convert
  * @returns The string representation of the tag
  */

package/src/exports-browser-only.ts

@@ -10,20 +10,16 @@ export {
     IPerformanceClient,
     PerformanceCallbackFunction,
     InProgressPerformanceEvent,
-    QueueMeasurement,
 } from "./telemetry/performance/IPerformanceClient.js";
 export {
     IntFields,
     PerformanceEvent,
-    PerformanceEvents,
     PerformanceEventStatus,
     SubMeasurement,
 } from "./telemetry/performance/PerformanceEvent.js";
+export * as PerformanceEvents from "./telemetry/performance/PerformanceEvents.js";
 export { IPerformanceMeasurement } from "./telemetry/performance/IPerformanceMeasurement.js";
-export {
-    PerformanceClient,
-    PreQueueEvent,
-} from "./telemetry/performance/PerformanceClient.js";
+export { PerformanceClient } from "./telemetry/performance/PerformanceClient.js";
 export { StubPerformanceClient } from "./telemetry/performance/StubPerformanceClient.js";
 
 export { PopTokenGenerator } from "./crypto/PopTokenGenerator.js";

package/src/exports-common.ts

@@ -9,6 +9,7 @@ import * as CacheHelpers from "./cache/utils/CacheHelpers.js";
 import * as TimeUtils from "./utils/TimeUtils.js";
 import * as UrlUtils from "./utils/UrlUtils.js";
 import * as AADServerParamKeys from "./constants/AADServerParamKeys.js";
+import * as AccountEntityUtils from "./cache/utils/AccountEntityUtils.js";
 
 export { AuthToken };
 export { AuthorityFactory };
@@ -16,16 +17,15 @@ export { CacheHelpers };
 export { TimeUtils };
 export { UrlUtils };
 export { AADServerParamKeys };
+export { AccountEntityUtils };
 
 export { AuthorizationCodeClient } from "./client/AuthorizationCodeClient.js";
 export { RefreshTokenClient } from "./client/RefreshTokenClient.js";
 export { SilentFlowClient } from "./client/SilentFlowClient.js";
-export { BaseClient } from "./client/BaseClient.js";
 export {
     AuthOptions,
     SystemOptions,
     LoggerOptions,
-    CacheOptions,
     DEFAULT_SYSTEM_OPTIONS,
     AzureCloudOptions,
     ApplicationTelemetry,
@@ -107,6 +107,8 @@ export {
 } from "./crypto/ICrypto.js";
 
 export * as AuthorizeProtocol from "./protocol/Authorize.js";
+export * as TokenProtocol from "./protocol/Token.js";
+
 export { BaseAuthRequest } from "./request/BaseAuthRequest.js";
 export { CommonAuthorizationUrlRequest } from "./request/CommonAuthorizationUrlRequest.js";
 export { CommonAuthorizationCodeRequest } from "./request/CommonAuthorizationCodeRequest.js";
@@ -131,12 +133,10 @@ export { ILoggerCallback, LogLevel, Logger } from "./logger/Logger.js";
 export {
     InteractionRequiredAuthError,
     InteractionRequiredAuthErrorCodes,
-    InteractionRequiredAuthErrorMessage,
     createInteractionRequiredAuthError,
 } from "./error/InteractionRequiredAuthError.js";
 export {
     AuthError,
-    AuthErrorMessage,
     AuthErrorCodes,
     createAuthError,
 } from "./error/AuthError.js";
@@ -150,52 +150,20 @@ export {
 } from "./error/CacheError.js";
 export {
     ClientAuthError,
-    ClientAuthErrorMessage,
     ClientAuthErrorCodes,
     createClientAuthError,
 } from "./error/ClientAuthError.js";
 export {
     ClientConfigurationError,
-    ClientConfigurationErrorMessage,
     ClientConfigurationErrorCodes,
     createClientConfigurationError,
 } from "./error/ClientConfigurationError.js";
-export {
-    Constants,
-    OIDC_DEFAULT_SCOPES,
-    PromptValue,
-    PersistentCacheKeys,
-    OAuthResponseType,
-    ServerResponseType,
-    ResponseMode,
-    CacheOutcome,
-    CredentialType,
-    CacheType,
-    CacheAccountType,
-    AuthenticationScheme,
-    CodeChallengeMethodValues,
-    PasswordGrantConstants,
-    ThrottlingConstants,
-    ClaimsRequestKeys,
-    HeaderNames,
-    Errors,
-    THE_FAMILY_ID,
-    ONE_DAY_IN_MS,
-    GrantType,
-    AADAuthorityConstants,
-    HttpStatus,
-    HttpMethod,
-    DEFAULT_TOKEN_RENEWAL_OFFSET_SEC,
-    JsonWebTokenTypes,
-    EncodingTypes,
-} from "./utils/Constants.js";
+export * as Constants from "./utils/Constants.js";
+
 export { StringUtils } from "./utils/StringUtils.js";
 export { StringDict } from "./utils/MsalTypes.js";
-export {
-    ProtocolUtils,
-    RequestStateObject,
-    LibraryStateObject,
-} from "./utils/ProtocolUtils.js";
+export { RequestStateObject, LibraryStateObject } from "./utils/StateTypes.js";
+export * as ProtocolUtils from "./utils/ProtocolUtils.js";
 export * from "./utils/FunctionWrappers.js";
 export { ServerTelemetryManager } from "./telemetry/server/ServerTelemetryManager.js";
 export { ServerTelemetryRequest } from "./telemetry/server/ServerTelemetryRequest.js";

package/src/exports-node-only.ts

@@ -16,10 +16,6 @@ export { INativeBrokerPlugin } from "./broker/nativeBroker/INativeBrokerPlugin.j
 export { ICachePlugin } from "./cache/interface/ICachePlugin.js";
 export { TokenCacheContext } from "./cache/persistence/TokenCacheContext.js";
 export { ISerializableTokenCache } from "./cache/interface/ISerializableTokenCache.js";
-export { CommonClientCredentialRequest } from "./request/CommonClientCredentialRequest.js";
-export { CommonOnBehalfOfRequest } from "./request/CommonOnBehalfOfRequest.js";
-export { CommonDeviceCodeRequest } from "./request/CommonDeviceCodeRequest.js";
-export { CommonUsernamePasswordRequest } from "./request/CommonUsernamePasswordRequest.js";
 export { NativeRequest } from "./request/NativeRequest.js";
 export { NativeSignOutRequest } from "./request/NativeSignOutRequest.js";
 export {
@@ -33,3 +29,8 @@ export {
 } from "./response/DeviceCodeResponse.js";
 export { getClientAssertion } from "./utils/ClientAssertionUtils.js";
 export { IGuidGenerator } from "./crypto/IGuidGenerator.js";
+export { StubPerformanceClient } from "./telemetry/performance/StubPerformanceClient.js";
+export {
+    buildClientConfiguration,
+    CommonClientConfiguration,
+} from "./config/ClientConfiguration.js";