@azure/msal-common 15.8.0 → 15.9.0

package/lib/{index-node-2PsHlOld.js → index-node-C5c-lcoe.js}

@@ -1,4 +1,4 @@
-/*! @azure/msal-common v15.8.0 2025-07-01 */
+/*! @azure/msal-common v15.9.0 2025-07-23 */
 'use strict';
 'use strict';
 
@@ -81,6 +81,10 @@ const HttpStatus = {
     SERVER_ERROR_RANGE_END: 599,
     MULTI_SIDED_ERROR: 600,
 };
+const HttpMethod = {
+    GET: "GET",
+    POST: "POST",
+};
 const OIDC_DEFAULT_SCOPES = [
     Constants.OPENID_SCOPE,
     Constants.PROFILE_SCOPE,
@@ -832,7 +836,6 @@ const authorityUriInsecure = "authority_uri_insecure";
 const urlParseError = "url_parse_error";
 const urlEmptyError = "empty_url_error";
 const emptyInputScopesError = "empty_input_scopes_error";
-const invalidPromptValue = "invalid_prompt_value";
 const invalidClaims = "invalid_claims";
 const tokenRequestEmpty = "token_request_empty";
 const logoutRequestEmpty = "logout_request_empty";
@@ -847,7 +850,9 @@ const missingNonceAuthenticationHeader = "missing_nonce_authentication_header";
 const invalidAuthenticationHeader = "invalid_authentication_header";
 const cannotSetOIDCOptions = "cannot_set_OIDCOptions";
 const cannotAllowPlatformBroker = "cannot_allow_platform_broker";
-const authorityMismatch = "authority_mismatch";
+const authorityMismatch = "authority_mismatch";
+const invalidRequestMethodForEAR = "invalid_request_method_for_EAR";
+const invalidAuthorizePostBodyParameters = "invalid_authorize_post_body_parameters";
 
 var ClientConfigurationErrorCodes = /*#__PURE__*/Object.freeze({
     __proto__: null,
@@ -859,10 +864,11 @@ var ClientConfigurationErrorCodes = /*#__PURE__*/Object.freeze({
     emptyInputScopesError: emptyInputScopesError,
     invalidAuthenticationHeader: invalidAuthenticationHeader,
     invalidAuthorityMetadata: invalidAuthorityMetadata,
+    invalidAuthorizePostBodyParameters: invalidAuthorizePostBodyParameters,
     invalidClaims: invalidClaims,
     invalidCloudDiscoveryMetadata: invalidCloudDiscoveryMetadata,
     invalidCodeChallengeMethod: invalidCodeChallengeMethod,
-    invalidPromptValue: invalidPromptValue,
+    invalidRequestMethodForEAR: invalidRequestMethodForEAR,
     logoutRequestEmpty: logoutRequestEmpty,
     missingNonceAuthenticationHeader: missingNonceAuthenticationHeader,
     missingSshJwk: missingSshJwk,
@@ -886,7 +892,6 @@ const ClientConfigurationErrorMessages = {
     [urlParseError]: "URL could not be parsed into appropriate segments.",
     [urlEmptyError]: "URL was empty or null.",
     [emptyInputScopesError]: "Scopes cannot be passed as null, undefined or empty array because they are required to obtain an access token.",
-    [invalidPromptValue]: "Please see here for valid configuration options: https://azuread.github.io/microsoft-authentication-library-for-js/ref/modules/_azure_msal_common.html#commonauthorizationurlrequest",
     [invalidClaims]: "Given claims parameter must be a stringified JSON object.",
     [tokenRequestEmpty]: "Token request was empty and not found in cache.",
     [logoutRequestEmpty]: "The logout request was null or undefined.",
@@ -902,6 +907,8 @@ const ClientConfigurationErrorMessages = {
     [cannotSetOIDCOptions]: "Cannot set OIDCOptions parameter. Please change the protocol mode to OIDC or use a non-Microsoft authority.",
     [cannotAllowPlatformBroker]: "Cannot set allowPlatformBroker parameter to true when not in AAD protocol mode.",
     [authorityMismatch]: "Authority mismatch error. Authority provided in login request or PublicClientApplication config does not match the environment of the provided account. Please use a matching account or make an interactive request to login to this authority.",
+    [invalidAuthorizePostBodyParameters]: "Invalid authorize post body parameters provided. If you are using authorizePostBodyParameters, the request method must be POST. Please check the request method and parameters.",
+    [invalidRequestMethodForEAR]: "Invalid request method for EAR protocol mode. The request method cannot be GET when using EAR protocol mode. Please change the request method to POST.",
 };
 /**
  * ClientConfigurationErrorMessage class containing string constants used by error codes and messages.
@@ -932,10 +939,6 @@ const ClientConfigurationErrorMessage = {
         code: emptyInputScopesError,
         desc: ClientConfigurationErrorMessages[emptyInputScopesError],
     },
-    invalidPrompt: {
-        code: invalidPromptValue,
-        desc: ClientConfigurationErrorMessages[invalidPromptValue],
-    },
     invalidClaimsRequest: {
         code: invalidClaims,
         desc: ClientConfigurationErrorMessages[invalidClaims],
@@ -996,6 +999,14 @@ const ClientConfigurationErrorMessage = {
         code: authorityMismatch,
         desc: ClientConfigurationErrorMessages[authorityMismatch],
     },
+    invalidAuthorizePostBodyParameters: {
+        code: invalidAuthorizePostBodyParameters,
+        desc: ClientConfigurationErrorMessages[invalidAuthorizePostBodyParameters],
+    },
+    invalidRequestMethodForEAR: {
+        code: invalidRequestMethodForEAR,
+        desc: ClientConfigurationErrorMessages[invalidRequestMethodForEAR],
+    },
 };
 /**
  * Error thrown when there is an error in configuration of the MSAL.js library.
@@ -3889,7 +3900,7 @@ class Logger {
 
 /* eslint-disable header/header */
 const name = "@azure/msal-common";
-const version = "15.8.0";
+const version = "15.9.0";
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6262,6 +6273,18 @@ function addEARParameters(parameters, jwk) {
     // ear_jwe_crypto will always have value: {"alg":"dir","enc":"A256GCM"} so we can hardcode this
     const jweCryptoB64Encoded = "eyJhbGciOiJkaXIiLCJlbmMiOiJBMjU2R0NNIn0";
     parameters.set(EAR_JWE_CRYPTO, jweCryptoB64Encoded);
+}
+/**
+ * Adds authorize body parameters to the request parameters
+ * @param parameters
+ * @param bodyParameters
+ */
+function addPostBodyParameters(parameters, bodyParameters) {
+    Object.entries(bodyParameters).forEach(([key, value]) => {
+        if (value) {
+            parameters.set(key, value);
+        }
+    });
 }
 
 var RequestParameterBuilder = /*#__PURE__*/Object.freeze({
@@ -6296,6 +6319,7 @@ var RequestParameterBuilder = /*#__PURE__*/Object.freeze({
     addOboAssertion: addOboAssertion,
     addPassword: addPassword,
     addPopToken: addPopToken,
+    addPostBodyParameters: addPostBodyParameters,
     addPostLogoutRedirectUri: addPostLogoutRedirectUri,
     addPrompt: addPrompt,
     addRedirectUri: addRedirectUri,
@@ -7230,71 +7254,6 @@ function buildAccountToCache(cacheStorage, authority, homeAccountId, base64Decod
     return baseAccount;
 }
 
-/*
- * Copyright (c) Microsoft Corporation. All rights reserved.
- * Licensed under the MIT License.
- */
-/**
- * Validates server consumable params from the "request" objects
- */
-class RequestValidator {
-    /**
-     * Utility to check if the `redirectUri` in the request is a non-null value
-     * @param redirectUri
-     */
-    static validateRedirectUri(redirectUri) {
-        if (!redirectUri) {
-            throw createClientConfigurationError(redirectUriEmpty);
-        }
-    }
-    /**
-     * Utility to validate prompt sent by the user in the request
-     * @param prompt
-     */
-    static validatePrompt(prompt) {
-        const promptValues = [];
-        for (const value in PromptValue) {
-            promptValues.push(PromptValue[value]);
-        }
-        if (promptValues.indexOf(prompt) < 0) {
-            throw createClientConfigurationError(invalidPromptValue);
-        }
-    }
-    static validateClaims(claims) {
-        try {
-            JSON.parse(claims);
-        }
-        catch (e) {
-            throw createClientConfigurationError(invalidClaims);
-        }
-    }
-    /**
-     * Utility to validate code_challenge and code_challenge_method
-     * @param codeChallenge
-     * @param codeChallengeMethod
-     */
-    static validateCodeChallengeParams(codeChallenge, codeChallengeMethod) {
-        if (!codeChallenge || !codeChallengeMethod) {
-            throw createClientConfigurationError(pkceParamsMissing);
-        }
-        else {
-            this.validateCodeChallengeMethod(codeChallengeMethod);
-        }
-    }
-    /**
-     * Utility to validate code_challenge_method
-     * @param codeChallengeMethod
-     */
-    static validateCodeChallengeMethod(codeChallengeMethod) {
-        if ([
-            CodeChallengeMethodValues.PLAIN,
-            CodeChallengeMethodValues.S256,
-        ].indexOf(codeChallengeMethod) < 0) {
-            throw createClientConfigurationError(invalidCodeChallengeMethod);
-        }
-    }
-}
-
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -7409,7 +7368,9 @@ class AuthorizationCodeClient extends BaseClient {
          */
         if (!this.includeRedirectUri) {
             // Just validate
-            RequestValidator.validateRedirectUri(request.redirectUri);
+            if (!request.redirectUri) {
+                throw createClientConfigurationError(redirectUriEmpty);
+            }
         }
         else {
             // Validate and include redirect uri
@@ -8454,6 +8415,7 @@ exports.EncodingTypes = EncodingTypes;
 exports.Errors = Errors;
 exports.GrantType = GrantType;
 exports.HeaderNames = HeaderNames;
+exports.HttpMethod = HttpMethod;
 exports.HttpStatus = HttpStatus;
 exports.IntFields = IntFields;
 exports.InteractionRequiredAuthError = InteractionRequiredAuthError;
@@ -8514,4 +8476,4 @@ exports.invokeAsync = invokeAsync;
 exports.tenantIdMatchesHomeTenant = tenantIdMatchesHomeTenant;
 exports.updateAccountTenantProfileData = updateAccountTenantProfileData;
 exports.version = version;
-//# sourceMappingURL=index-node-2PsHlOld.js.map
+//# sourceMappingURL=index-node-C5c-lcoe.js.map