@azure/msal-common 15.6.0 → 15.7.1

package/lib/{index-node-CnK83wp7.js → index-node-B6ITzmFz.js}

@@ -1,4 +1,4 @@
-/*! @azure/msal-common v15.6.0 2025-05-06 */
+/*! @azure/msal-common v15.7.1 2025-06-18 */
 'use strict';
 'use strict';
 
@@ -276,13 +276,6 @@ const PasswordGrantConstants = {
     username: "username",
     password: "password",
 };
-/**
- * Response codes
- */
-const ResponseCodes = {
-    httpSuccess: 200,
-    httpBadRequest: 400,
-};
 /**
  * Region Discovery Sources
  */
@@ -324,7 +317,12 @@ const JsonWebTokenTypes = {
 };
 const ONE_DAY_IN_MS = 86400000;
 // Token renewal offset default in seconds
-const DEFAULT_TOKEN_RENEWAL_OFFSET_SEC = 300;
+const DEFAULT_TOKEN_RENEWAL_OFFSET_SEC = 300;
+const EncodingTypes = {
+    BASE64: "base64",
+    HEX: "hex",
+    UTF8: "utf-8",
+};
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -2174,15 +2172,13 @@ class RegionDiscovery {
             const options = RegionDiscovery.IMDS_OPTIONS;
             try {
                 const localIMDSVersionResponse = await invokeAsync(this.getRegionFromIMDS.bind(this), PerformanceEvents.RegionDiscoveryGetRegionFromIMDS, this.logger, this.performanceClient, this.correlationId)(Constants.IMDS_VERSION, options);
-                if (localIMDSVersionResponse.status ===
-                    ResponseCodes.httpSuccess) {
+                if (localIMDSVersionResponse.status === HttpStatus.SUCCESS) {
                     autodetectedRegionName = localIMDSVersionResponse.body;
                     regionDiscoveryMetadata.region_source =
                         RegionDiscoverySources.IMDS;
                 }
                 // If the response using the local IMDS version failed, try to fetch the current version of IMDS and retry.
-                if (localIMDSVersionResponse.status ===
-                    ResponseCodes.httpBadRequest) {
+                if (localIMDSVersionResponse.status === HttpStatus.BAD_REQUEST) {
                     const currentIMDSVersion = await invokeAsync(this.getCurrentVersion.bind(this), PerformanceEvents.RegionDiscoveryGetCurrentVersion, this.logger, this.performanceClient, this.correlationId)(options);
                     if (!currentIMDSVersion) {
                         regionDiscoveryMetadata.region_source =
@@ -2190,8 +2186,7 @@ class RegionDiscovery {
                         return null;
                     }
                     const currentIMDSVersionResponse = await invokeAsync(this.getRegionFromIMDS.bind(this), PerformanceEvents.RegionDiscoveryGetRegionFromIMDS, this.logger, this.performanceClient, this.correlationId)(currentIMDSVersion, options);
-                    if (currentIMDSVersionResponse.status ===
-                        ResponseCodes.httpSuccess) {
+                    if (currentIMDSVersionResponse.status === HttpStatus.SUCCESS) {
                         autodetectedRegionName =
                             currentIMDSVersionResponse.body;
                         regionDiscoveryMetadata.region_source =
@@ -2236,7 +2231,7 @@ class RegionDiscovery {
         try {
             const response = await this.networkInterface.sendGetRequestAsync(`${Constants.IMDS_ENDPOINT}?format=json`, options);
             // When IMDS endpoint is called without the api version query param, bad request response comes back with latest version.
-            if (response.status === ResponseCodes.httpBadRequest &&
+            if (response.status === HttpStatus.BAD_REQUEST &&
                 response.body &&
                 response.body["newest-versions"] &&
                 response.body["newest-versions"].length > 0) {
@@ -3898,7 +3893,7 @@ class Logger {
 
 /* eslint-disable header/header */
 const name = "@azure/msal-common";
-const version = "15.6.0";
+const version = "15.7.1";
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4514,11 +4509,12 @@ class CacheError extends Error {
  * @internal
  */
 class CacheManager {
-    constructor(clientId, cryptoImpl, logger, staticAuthorityOptions) {
+    constructor(clientId, cryptoImpl, logger, performanceClient, staticAuthorityOptions) {
         this.clientId = clientId;
         this.cryptoImpl = cryptoImpl;
         this.commonLogger = logger.clone(name, version);
         this.staticAuthorityOptions = staticAuthorityOptions;
+        this.performanceClient = performanceClient;
     }
     /**
      * Returns all the accounts in the cache that match the optional filter. If no filter is provided, all accounts are returned.
@@ -4727,7 +4723,6 @@ class CacheManager {
         };
         const tokenKeys = this.getTokenKeys();
         const currentScopes = ScopeSet.fromString(credential.target);
-        const removedAccessTokens = [];
         tokenKeys.accessToken.forEach((key) => {
             if (!this.accessTokenKeyMatchesFilter(key, accessTokenFilter, false)) {
                 return;
@@ -4737,11 +4732,10 @@ class CacheManager {
                 this.credentialMatchesFilter(tokenEntity, accessTokenFilter)) {
                 const tokenScopeSet = ScopeSet.fromString(tokenEntity.target);
                 if (tokenScopeSet.intersectingScopeSets(currentScopes)) {
-                    removedAccessTokens.push(this.removeAccessToken(key));
+                    this.removeAccessToken(key, correlationId);
                 }
             }
         });
-        await Promise.all(removedAccessTokens);
         await this.setAccessTokenCredential(credential, correlationId);
     }
     /**
@@ -4983,34 +4977,31 @@ class CacheManager {
     /**
      * Removes all accounts and related tokens from cache.
      */
-    async removeAllAccounts() {
+    removeAllAccounts(correlationId) {
         const allAccountKeys = this.getAccountKeys();
-        const removedAccounts = [];
         allAccountKeys.forEach((cacheKey) => {
-            removedAccounts.push(this.removeAccount(cacheKey));
+            this.removeAccount(cacheKey, correlationId);
         });
-        await Promise.all(removedAccounts);
     }
     /**
      * Removes the account and related tokens for a given account key
      * @param account
      */
-    async removeAccount(accountKey) {
+    removeAccount(accountKey, correlationId) {
         const account = this.getAccount(accountKey, this.commonLogger);
         if (!account) {
             return;
         }
-        await this.removeAccountContext(account);
+        this.removeAccountContext(account, correlationId);
         this.removeItem(accountKey);
     }
     /**
      * Removes credentials associated with the provided account
      * @param account
      */
-    async removeAccountContext(account) {
+    removeAccountContext(account, correlationId) {
         const allTokenKeys = this.getTokenKeys();
         const accountId = account.generateAccountId();
-        const removedCredentials = [];
         allTokenKeys.idToken.forEach((key) => {
             if (key.indexOf(accountId) === 0) {
                 this.removeIdToken(key);
@@ -5018,7 +5009,7 @@ class CacheManager {
         });
         allTokenKeys.accessToken.forEach((key) => {
             if (key.indexOf(accountId) === 0) {
-                removedCredentials.push(this.removeAccessToken(key));
+                this.removeAccessToken(key, correlationId);
             }
         });
         allTokenKeys.refreshToken.forEach((key) => {
@@ -5026,17 +5017,17 @@ class CacheManager {
                 this.removeRefreshToken(key);
             }
         });
-        await Promise.all(removedCredentials);
     }
     /**
      * returns a boolean if the given credential is removed
      * @param credential
      */
-    async removeAccessToken(key) {
+    removeAccessToken(key, correlationId) {
         const credential = this.getAccessTokenCredential(key);
         if (!credential) {
             return;
         }
+        this.removeItem(key);
         // Remove Token Binding Key from key store for PoP Tokens Credentials
         if (credential.credentialType.toLowerCase() ===
             CredentialType.ACCESS_TOKEN_WITH_AUTH_SCHEME.toLowerCase()) {
@@ -5044,16 +5035,15 @@ class CacheManager {
                 const accessTokenWithAuthSchemeEntity = credential;
                 const kid = accessTokenWithAuthSchemeEntity.keyId;
                 if (kid) {
-                    try {
-                        await this.cryptoImpl.removeTokenBindingKey(kid);
-                    }
-                    catch (error) {
-                        throw createClientAuthError(bindingKeyNotRemoved);
-                    }
+                    void this.cryptoImpl
+                        .removeTokenBindingKey(kid)
+                        .catch(() => {
+                        this.commonLogger.error(`Failed to remove token binding key ${kid}`, correlationId);
+                        this.performanceClient?.incrementFields({ removeTokenBindingKeyFailure: 1 }, correlationId);
+                    });
                 }
             }
         }
-        return this.removeItem(key);
     }
     /**
      * Removes all app metadata objects from cache.
@@ -5195,10 +5185,10 @@ class CacheManager {
      * @param request {BaseAuthRequest}
      * @param tokenKeys {?TokenKeys}
      * @param performanceClient {?IPerformanceClient}
-     * @param correlationId {?string}
      */
-    getAccessToken(account, request, tokenKeys, targetRealm, performanceClient, correlationId) {
-        this.commonLogger.trace("CacheManager - getAccessToken called");
+    getAccessToken(account, request, tokenKeys, targetRealm) {
+        const correlationId = request.correlationId;
+        this.commonLogger.trace("CacheManager - getAccessToken called", correlationId);
         const scopes = ScopeSet.createSearchScopes(request.scopes);
         const authScheme = request.authenticationScheme || AuthenticationScheme.BEARER;
         /*
@@ -5237,20 +5227,18 @@ class CacheManager {
         });
         const numAccessTokens = accessTokens.length;
         if (numAccessTokens < 1) {
-            this.commonLogger.info("CacheManager:getAccessToken - No token found");
+            this.commonLogger.info("CacheManager:getAccessToken - No token found", correlationId);
             return null;
         }
         else if (numAccessTokens > 1) {
-            this.commonLogger.info("CacheManager:getAccessToken - Multiple access tokens found, clearing them");
+            this.commonLogger.info("CacheManager:getAccessToken - Multiple access tokens found, clearing them", correlationId);
             accessTokens.forEach((accessToken) => {
-                void this.removeAccessToken(generateCredentialKey(accessToken));
+                this.removeAccessToken(generateCredentialKey(accessToken), correlationId);
             });
-            if (performanceClient && correlationId) {
-                performanceClient.addFields({ multiMatchedAT: accessTokens.length }, correlationId);
-            }
+            this.performanceClient.addFields({ multiMatchedAT: accessTokens.length }, correlationId);
             return null;
         }
-        this.commonLogger.info("CacheManager:getAccessToken - Returning access token");
+        this.commonLogger.info("CacheManager:getAccessToken - Returning access token", correlationId);
         return accessTokens[0];
     }
     /**
@@ -5688,6 +5676,83 @@ class DefaultStorageClass extends CacheManager {
     }
 }
 
+/*
+ * Copyright (c) Microsoft Corporation. All rights reserved.
+ * Licensed under the MIT License.
+ */
+class StubPerformanceMeasurement {
+    startMeasurement() {
+        return;
+    }
+    endMeasurement() {
+        return;
+    }
+    flushMeasurement() {
+        return null;
+    }
+}
+class StubPerformanceClient {
+    generateId() {
+        return "callback-id";
+    }
+    startMeasurement(measureName, correlationId) {
+        return {
+            end: () => null,
+            discard: () => { },
+            add: () => { },
+            increment: () => { },
+            event: {
+                eventId: this.generateId(),
+                status: PerformanceEventStatus.InProgress,
+                authority: "",
+                libraryName: "",
+                libraryVersion: "",
+                clientId: "",
+                name: measureName,
+                startTimeMs: Date.now(),
+                correlationId: correlationId || "",
+            },
+            measurement: new StubPerformanceMeasurement(),
+        };
+    }
+    startPerformanceMeasurement() {
+        return new StubPerformanceMeasurement();
+    }
+    calculateQueuedTime() {
+        return 0;
+    }
+    addQueueMeasurement() {
+        return;
+    }
+    setPreQueueTime() {
+        return;
+    }
+    endMeasurement() {
+        return null;
+    }
+    discardMeasurements() {
+        return;
+    }
+    removePerformanceCallback() {
+        return true;
+    }
+    addPerformanceCallback() {
+        return "";
+    }
+    emitEvents() {
+        return;
+    }
+    addFields() {
+        return;
+    }
+    incrementFields() {
+        return;
+    }
+    cacheEventByCorrelationId() {
+        return;
+    }
+}
+
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -5753,7 +5818,7 @@ function buildClientConfiguration({ authOptions: userAuthOptions, systemOptions:
         loggerOptions: loggerOptions,
         cacheOptions: { ...DEFAULT_CACHE_OPTIONS, ...userCacheOptions },
         storageInterface: storageImplementation ||
-            new DefaultStorageClass(userAuthOptions.clientId, DEFAULT_CRYPTO_IMPLEMENTATION, new Logger(loggerOptions)),
+            new DefaultStorageClass(userAuthOptions.clientId, DEFAULT_CRYPTO_IMPLEMENTATION, new Logger(loggerOptions), new StubPerformanceClient()),
         networkInterface: networkImplementation || DEFAULT_NETWORK_IMPLEMENTATION,
         cryptoInterface: cryptoImplementation || DEFAULT_CRYPTO_IMPLEMENTATION,
         clientCredentials: clientCredentials || DEFAULT_CLIENT_CREDENTIALS,
@@ -6550,6 +6615,7 @@ class BaseClient {
 const noTokensFound = "no_tokens_found";
 const nativeAccountUnavailable = "native_account_unavailable";
 const refreshTokenExpired = "refresh_token_expired";
+const uxNotAllowed = "ux_not_allowed";
 // Codes potentially returned by server
 const interactionRequired = "interaction_required";
 const consentRequired = "consent_required";
@@ -6564,7 +6630,8 @@ var InteractionRequiredAuthErrorCodes = /*#__PURE__*/Object.freeze({
     loginRequired: loginRequired,
     nativeAccountUnavailable: nativeAccountUnavailable,
     noTokensFound: noTokensFound,
-    refreshTokenExpired: refreshTokenExpired
+    refreshTokenExpired: refreshTokenExpired,
+    uxNotAllowed: uxNotAllowed
 });
 
 /*
@@ -6579,6 +6646,7 @@ const InteractionRequiredServerErrorMessage = [
     consentRequired,
     loginRequired,
     badToken,
+    uxNotAllowed,
 ];
 const InteractionRequiredAuthSubErrorMessage = [
     "message_only",
@@ -6593,6 +6661,7 @@ const InteractionRequiredAuthErrorMessages = {
     [nativeAccountUnavailable]: "The requested account is not available in the native broker. It may have been deleted or logged out. Please sign-in again using an interactive API.",
     [refreshTokenExpired]: "Refresh token has expired.",
     [badToken]: "Identity provider returned bad_token due to an expired or invalid refresh token. Please invoke an interactive API to resolve.",
+    [uxNotAllowed]: "`canShowUI` flag in Edge was set to false. User interaction required on web page. Please invoke an interactive API to resolve.",
 };
 /**
  * Interaction required errors defined by the SDK
@@ -7715,7 +7784,7 @@ class SilentFlowClient extends BaseClient {
         const requestTenantId = request.account.tenantId ||
             getTenantFromAuthorityString(request.authority);
         const tokenKeys = this.cacheManager.getTokenKeys();
-        const cachedAccessToken = this.cacheManager.getAccessToken(request.account, request, tokenKeys, requestTenantId, this.performanceClient, request.correlationId);
+        const cachedAccessToken = this.cacheManager.getAccessToken(request.account, request, tokenKeys, requestTenantId);
         if (!cachedAccessToken) {
             // must refresh due to non-existent access_token
             this.setCacheOutcome(CacheOutcome.NO_CACHED_ACCESS_TOKEN, request.correlationId);
@@ -8380,6 +8449,7 @@ exports.DEFAULT_CRYPTO_IMPLEMENTATION = DEFAULT_CRYPTO_IMPLEMENTATION;
 exports.DEFAULT_SYSTEM_OPTIONS = DEFAULT_SYSTEM_OPTIONS;
 exports.DEFAULT_TOKEN_RENEWAL_OFFSET_SEC = DEFAULT_TOKEN_RENEWAL_OFFSET_SEC;
 exports.DefaultStorageClass = DefaultStorageClass;
+exports.EncodingTypes = EncodingTypes;
 exports.Errors = Errors;
 exports.GrantType = GrantType;
 exports.HeaderNames = HeaderNames;
@@ -8413,6 +8483,8 @@ exports.ServerResponseType = ServerResponseType;
 exports.ServerTelemetryManager = ServerTelemetryManager;
 exports.SilentFlowClient = SilentFlowClient;
 exports.StringUtils = StringUtils;
+exports.StubPerformanceClient = StubPerformanceClient;
+exports.StubPerformanceMeasurement = StubPerformanceMeasurement;
 exports.StubbedNetworkModule = StubbedNetworkModule;
 exports.THE_FAMILY_ID = THE_FAMILY_ID;
 exports.ThrottlingConstants = ThrottlingConstants;
@@ -8440,4 +8512,4 @@ exports.invokeAsync = invokeAsync;
 exports.tenantIdMatchesHomeTenant = tenantIdMatchesHomeTenant;
 exports.updateAccountTenantProfileData = updateAccountTenantProfileData;
 exports.version = version;
-//# sourceMappingURL=index-node-CnK83wp7.js.map
+//# sourceMappingURL=index-node-B6ITzmFz.js.map