@azure/msal-common 16.14.2 → 16.15.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (212) hide show
  1. package/dist/account/AccountInfo.mjs +1 -1
  2. package/dist/account/AuthToken.mjs +1 -1
  3. package/dist/account/CcsCredential.mjs +1 -1
  4. package/dist/account/ClientInfo.mjs +1 -1
  5. package/dist/account/TokenClaims.mjs +1 -1
  6. package/dist/authority/Authority.mjs +1 -1
  7. package/dist/authority/AuthorityFactory.mjs +1 -1
  8. package/dist/authority/AuthorityMetadata.mjs +1 -1
  9. package/dist/authority/AuthorityOptions.mjs +1 -1
  10. package/dist/authority/AuthorityType.mjs +1 -1
  11. package/dist/authority/CloudInstanceDiscoveryErrorResponse.mjs +1 -1
  12. package/dist/authority/CloudInstanceDiscoveryResponse.mjs +1 -1
  13. package/dist/authority/OpenIdConfigResponse.mjs +1 -1
  14. package/dist/authority/ProtocolMode.mjs +1 -1
  15. package/dist/authority/RegionDiscovery.mjs +1 -1
  16. package/dist/cache/CacheManager.mjs +1 -1
  17. package/dist/cache/persistence/TokenCacheContext.mjs +1 -1
  18. package/dist/cache/utils/AccountEntityUtils.mjs +1 -1
  19. package/dist/cache/utils/CacheHelpers.mjs +1 -1
  20. package/dist/client/AuthorizationCodeClient.mjs +5 -2
  21. package/dist/client/AuthorizationCodeClient.mjs.map +1 -1
  22. package/dist/client/RefreshTokenClient.mjs +1 -1
  23. package/dist/client/SilentFlowClient.mjs +1 -1
  24. package/dist/config/ClientConfiguration.mjs +1 -1
  25. package/dist/constants/AADServerParamKeys.mjs +9 -3
  26. package/dist/constants/AADServerParamKeys.mjs.map +1 -1
  27. package/dist/crypto/DpopProofGenerator.mjs +1 -1
  28. package/dist/crypto/ICrypto.mjs +1 -1
  29. package/dist/crypto/ITokenBindingKeyManager.mjs +1 -1
  30. package/dist/crypto/JoseHeader.mjs +1 -1
  31. package/dist/crypto/PopTokenGenerator.mjs +1 -1
  32. package/dist/error/AuthError.mjs +1 -1
  33. package/dist/error/AuthErrorCodes.mjs +1 -1
  34. package/dist/error/CacheError.mjs +1 -1
  35. package/dist/error/CacheErrorCodes.mjs +1 -1
  36. package/dist/error/ClientAuthError.mjs +1 -1
  37. package/dist/error/ClientAuthErrorCodes.mjs +1 -1
  38. package/dist/error/ClientConfigurationError.mjs +1 -1
  39. package/dist/error/ClientConfigurationErrorCodes.mjs +1 -1
  40. package/dist/error/InteractionRequiredAuthError.mjs +1 -1
  41. package/dist/error/InteractionRequiredAuthErrorCodes.mjs +1 -1
  42. package/dist/error/JoseHeaderError.mjs +1 -1
  43. package/dist/error/JoseHeaderErrorCodes.mjs +1 -1
  44. package/dist/error/NetworkError.mjs +1 -1
  45. package/dist/error/PlatformBrokerError.mjs +1 -1
  46. package/dist/error/ServerError.mjs +1 -1
  47. package/dist/index-node.mjs +1 -1
  48. package/dist/index.mjs +1 -1
  49. package/dist/logger/Logger.mjs +1 -1
  50. package/dist/network/INetworkModule.mjs +1 -1
  51. package/dist/network/RequestThumbprint.mjs +1 -1
  52. package/dist/network/ResponseHeaders.mjs +43 -0
  53. package/dist/network/ResponseHeaders.mjs.map +1 -0
  54. package/dist/network/ThrottlingUtils.mjs +16 -11
  55. package/dist/network/ThrottlingUtils.mjs.map +1 -1
  56. package/dist/packageMetadata.mjs +2 -2
  57. package/dist/protocol/Authorize.mjs +5 -2
  58. package/dist/protocol/Authorize.mjs.map +1 -1
  59. package/dist/protocol/Token.mjs +9 -7
  60. package/dist/protocol/Token.mjs.map +1 -1
  61. package/dist/request/AuthenticationHeaderParser.mjs +6 -4
  62. package/dist/request/AuthenticationHeaderParser.mjs.map +1 -1
  63. package/dist/request/BaseAuthRequest.mjs +1 -1
  64. package/dist/request/RequestParameterBuilder.mjs +17 -3
  65. package/dist/request/RequestParameterBuilder.mjs.map +1 -1
  66. package/dist/request/ScopeSet.mjs +1 -1
  67. package/dist/response/ResponseHandler.mjs +1 -1
  68. package/dist/telemetry/performance/PerformanceClient.mjs +1 -1
  69. package/dist/telemetry/performance/PerformanceEvent.mjs +1 -1
  70. package/dist/telemetry/performance/PerformanceEvent.mjs.map +1 -1
  71. package/dist/telemetry/performance/PerformanceEvents.mjs +1 -1
  72. package/dist/telemetry/performance/StubPerformanceClient.mjs +1 -1
  73. package/dist/telemetry/server/ServerTelemetryManager.mjs +1 -1
  74. package/dist/url/UrlString.mjs +1 -1
  75. package/dist/utils/ClientAssertionUtils.mjs +1 -1
  76. package/dist/utils/Constants.mjs +1 -1
  77. package/dist/utils/FunctionWrappers.mjs +1 -1
  78. package/dist/utils/ObjectUtils.mjs +1 -1
  79. package/dist/utils/ProtocolUtils.mjs +1 -1
  80. package/dist/utils/StringUtils.mjs +1 -1
  81. package/dist/utils/TimeUtils.mjs +1 -1
  82. package/dist/utils/UrlUtils.mjs +12 -3
  83. package/dist/utils/UrlUtils.mjs.map +1 -1
  84. package/dist-browser/account/AccountInfo.mjs +1 -1
  85. package/dist-browser/account/AuthToken.mjs +1 -1
  86. package/dist-browser/account/CcsCredential.mjs +1 -1
  87. package/dist-browser/account/ClientInfo.mjs +1 -1
  88. package/dist-browser/account/TokenClaims.mjs +1 -1
  89. package/dist-browser/authority/Authority.mjs +1 -1
  90. package/dist-browser/authority/AuthorityFactory.mjs +1 -1
  91. package/dist-browser/authority/AuthorityMetadata.mjs +1 -1
  92. package/dist-browser/authority/AuthorityOptions.mjs +1 -1
  93. package/dist-browser/authority/AuthorityType.mjs +1 -1
  94. package/dist-browser/authority/CloudInstanceDiscoveryErrorResponse.mjs +1 -1
  95. package/dist-browser/authority/CloudInstanceDiscoveryResponse.mjs +1 -1
  96. package/dist-browser/authority/OpenIdConfigResponse.mjs +1 -1
  97. package/dist-browser/authority/ProtocolMode.mjs +1 -1
  98. package/dist-browser/authority/RegionDiscovery.mjs +1 -1
  99. package/dist-browser/cache/CacheManager.mjs +1 -1
  100. package/dist-browser/cache/persistence/TokenCacheContext.mjs +1 -1
  101. package/dist-browser/cache/utils/AccountEntityUtils.mjs +1 -1
  102. package/dist-browser/cache/utils/CacheHelpers.mjs +1 -1
  103. package/dist-browser/client/AuthorizationCodeClient.mjs +5 -2
  104. package/dist-browser/client/AuthorizationCodeClient.mjs.map +1 -1
  105. package/dist-browser/client/RefreshTokenClient.mjs +1 -1
  106. package/dist-browser/client/SilentFlowClient.mjs +1 -1
  107. package/dist-browser/config/ClientConfiguration.mjs +1 -1
  108. package/dist-browser/constants/AADServerParamKeys.mjs +9 -3
  109. package/dist-browser/constants/AADServerParamKeys.mjs.map +1 -1
  110. package/dist-browser/crypto/DpopProofGenerator.mjs +1 -1
  111. package/dist-browser/crypto/ICrypto.mjs +1 -1
  112. package/dist-browser/crypto/ITokenBindingKeyManager.mjs +1 -1
  113. package/dist-browser/crypto/JoseHeader.mjs +1 -1
  114. package/dist-browser/crypto/PopTokenGenerator.mjs +1 -1
  115. package/dist-browser/error/AuthError.mjs +1 -1
  116. package/dist-browser/error/AuthErrorCodes.mjs +1 -1
  117. package/dist-browser/error/CacheError.mjs +1 -1
  118. package/dist-browser/error/CacheErrorCodes.mjs +1 -1
  119. package/dist-browser/error/ClientAuthError.mjs +1 -1
  120. package/dist-browser/error/ClientAuthErrorCodes.mjs +1 -1
  121. package/dist-browser/error/ClientConfigurationError.mjs +1 -1
  122. package/dist-browser/error/ClientConfigurationErrorCodes.mjs +1 -1
  123. package/dist-browser/error/InteractionRequiredAuthError.mjs +1 -1
  124. package/dist-browser/error/InteractionRequiredAuthErrorCodes.mjs +1 -1
  125. package/dist-browser/error/JoseHeaderError.mjs +1 -1
  126. package/dist-browser/error/JoseHeaderErrorCodes.mjs +1 -1
  127. package/dist-browser/error/NetworkError.mjs +1 -1
  128. package/dist-browser/error/PlatformBrokerError.mjs +1 -1
  129. package/dist-browser/error/ServerError.mjs +1 -1
  130. package/dist-browser/index-browser.mjs +1 -1
  131. package/dist-browser/index.mjs +1 -1
  132. package/dist-browser/log-strings-mapping.json +54 -54
  133. package/dist-browser/logger/Logger.mjs +1 -1
  134. package/dist-browser/network/INetworkModule.mjs +1 -1
  135. package/dist-browser/network/RequestThumbprint.mjs +1 -1
  136. package/dist-browser/network/ResponseHeaders.mjs +43 -0
  137. package/dist-browser/network/ResponseHeaders.mjs.map +1 -0
  138. package/dist-browser/network/ThrottlingUtils.mjs +16 -11
  139. package/dist-browser/network/ThrottlingUtils.mjs.map +1 -1
  140. package/dist-browser/packageMetadata.mjs +2 -2
  141. package/dist-browser/protocol/Authorize.mjs +5 -2
  142. package/dist-browser/protocol/Authorize.mjs.map +1 -1
  143. package/dist-browser/protocol/Token.mjs +9 -7
  144. package/dist-browser/protocol/Token.mjs.map +1 -1
  145. package/dist-browser/request/AuthenticationHeaderParser.mjs +6 -4
  146. package/dist-browser/request/AuthenticationHeaderParser.mjs.map +1 -1
  147. package/dist-browser/request/BaseAuthRequest.mjs +1 -1
  148. package/dist-browser/request/RequestParameterBuilder.mjs +17 -3
  149. package/dist-browser/request/RequestParameterBuilder.mjs.map +1 -1
  150. package/dist-browser/request/ScopeSet.mjs +1 -1
  151. package/dist-browser/response/ResponseHandler.mjs +1 -1
  152. package/dist-browser/telemetry/performance/PerformanceClient.mjs +1 -1
  153. package/dist-browser/telemetry/performance/PerformanceEvent.mjs +1 -1
  154. package/dist-browser/telemetry/performance/PerformanceEvent.mjs.map +1 -1
  155. package/dist-browser/telemetry/performance/PerformanceEvents.mjs +1 -1
  156. package/dist-browser/telemetry/performance/StubPerformanceClient.mjs +1 -1
  157. package/dist-browser/telemetry/server/ServerTelemetryManager.mjs +1 -1
  158. package/dist-browser/url/UrlString.mjs +1 -1
  159. package/dist-browser/utils/ClientAssertionUtils.mjs +1 -1
  160. package/dist-browser/utils/Constants.mjs +1 -1
  161. package/dist-browser/utils/FunctionWrappers.mjs +1 -1
  162. package/dist-browser/utils/ObjectUtils.mjs +1 -1
  163. package/dist-browser/utils/ProtocolUtils.mjs +1 -1
  164. package/dist-browser/utils/StringUtils.mjs +1 -1
  165. package/dist-browser/utils/TimeUtils.mjs +1 -1
  166. package/dist-browser/utils/UrlUtils.mjs +12 -3
  167. package/dist-browser/utils/UrlUtils.mjs.map +1 -1
  168. package/lib/index-browser.cjs +2 -2
  169. package/lib/{index-node-DnqAD5_i.js → index-node-DD4RzKVr.js} +106 -24
  170. package/lib/index-node-DD4RzKVr.js.map +1 -0
  171. package/lib/index-node.cjs +2 -2
  172. package/lib/index.cjs +2 -2
  173. package/package.json +1 -1
  174. package/src/client/AuthorizationCodeClient.ts +4 -0
  175. package/src/constants/AADServerParamKeys.ts +6 -0
  176. package/src/network/NetworkResponse.ts +3 -0
  177. package/src/network/ResponseHeaders.ts +52 -0
  178. package/src/network/ThrottlingUtils.ts +20 -15
  179. package/src/packageMetadata.ts +1 -1
  180. package/src/protocol/Authorize.ts +4 -0
  181. package/src/protocol/Token.ts +19 -6
  182. package/src/request/AuthenticationHeaderParser.ts +14 -3
  183. package/src/request/CommonAuthorizationUrlRequest.ts +8 -0
  184. package/src/request/CommonEndSessionRequest.ts +8 -0
  185. package/src/request/RequestParameterBuilder.ts +15 -0
  186. package/src/telemetry/performance/PerformanceEvent.ts +13 -0
  187. package/src/utils/UrlUtils.ts +12 -2
  188. package/types/client/AuthorizationCodeClient.d.ts.map +1 -1
  189. package/types/constants/AADServerParamKeys.d.ts +6 -0
  190. package/types/constants/AADServerParamKeys.d.ts.map +1 -1
  191. package/types/network/NetworkResponse.d.ts +3 -0
  192. package/types/network/NetworkResponse.d.ts.map +1 -1
  193. package/types/network/ResponseHeaders.d.ts +13 -0
  194. package/types/network/ResponseHeaders.d.ts.map +1 -0
  195. package/types/network/ThrottlingUtils.d.ts +2 -2
  196. package/types/network/ThrottlingUtils.d.ts.map +1 -1
  197. package/types/packageMetadata.d.ts +1 -1
  198. package/types/protocol/Authorize.d.ts.map +1 -1
  199. package/types/protocol/Token.d.ts.map +1 -1
  200. package/types/request/AuthenticationHeaderParser.d.ts +1 -0
  201. package/types/request/AuthenticationHeaderParser.d.ts.map +1 -1
  202. package/types/request/CommonAuthorizationUrlRequest.d.ts +8 -0
  203. package/types/request/CommonAuthorizationUrlRequest.d.ts.map +1 -1
  204. package/types/request/CommonEndSessionRequest.d.ts +8 -0
  205. package/types/request/CommonEndSessionRequest.d.ts.map +1 -1
  206. package/types/request/RequestParameterBuilder.d.ts +10 -0
  207. package/types/request/RequestParameterBuilder.d.ts.map +1 -1
  208. package/types/telemetry/performance/PerformanceEvent.d.ts +11 -0
  209. package/types/telemetry/performance/PerformanceEvent.d.ts.map +1 -1
  210. package/types/utils/UrlUtils.d.ts +2 -1
  211. package/types/utils/UrlUtils.d.ts.map +1 -1
  212. package/lib/index-node-DnqAD5_i.js.map +0 -1
@@ -597,6 +597,10 @@ export class AuthorizationCodeClient {
597
597
  );
598
598
  }
599
599
 
600
+ if (request.popupOriginCheckDone) {
601
+ RequestParameterBuilder.addPopupOriginCheckDone(parameters);
602
+ }
603
+
600
604
  if (request.extraQueryParameters) {
601
605
  RequestParameterBuilder.addExtraParameters(
602
606
  parameters,
@@ -70,3 +70,9 @@ export const USERNAME = "username";
70
70
  export const USER_ID = "user_id";
71
71
  export const FMI_PATH = "fmi_path";
72
72
  export const ATTRIBUTE_TOKENS = "attribute_tokens";
73
+ /**
74
+ * Popup-origin-check-done. Signals to the STS that the client verified the
75
+ * popup cannot be reached by an untrusted window, so the
76
+ * Cross-Origin-Opener-Policy response header may be omitted.
77
+ */
78
+ export const POPUP_ORIGIN_CHECK_DONE = "pocd";
@@ -4,6 +4,9 @@
4
4
  */
5
5
 
6
6
  export type NetworkResponse<T> = {
7
+ /**
8
+ * Header names are case-insensitive. Built-in clients return lowercase keys.
9
+ */
7
10
  headers: Record<string, string>;
8
11
  body: T;
9
12
  status: number;
@@ -0,0 +1,52 @@
1
+ /*
2
+ * Copyright (c) Microsoft Corporation. All rights reserved.
3
+ * Licensed under the MIT License.
4
+ */
5
+
6
+ // Track only our normalized copies, never caller-owned mutable inputs.
7
+ const normalizedHeaderRecords = new WeakSet<Record<string, string>>();
8
+
9
+ /**
10
+ * Creates a lowercase-keyed snapshot without changing header values or the input.
11
+ * Reuses snapshots produced by this function to avoid repeated normalization.
12
+ * @internal
13
+ */
14
+ export function normalizeResponseHeaders(
15
+ headers: Record<string, string>
16
+ ): Record<string, string> {
17
+ if (normalizedHeaderRecords.has(headers)) {
18
+ return headers;
19
+ }
20
+
21
+ const normalized = Object.fromEntries<string>(
22
+ Object.entries(headers).map(([name, value]): [string, string] => [
23
+ name.toLowerCase(),
24
+ value,
25
+ ])
26
+ );
27
+ normalizedHeaderRecords.add(normalized);
28
+ return normalized;
29
+ }
30
+
31
+ /**
32
+ * Reads a response header case-insensitively.
33
+ * Normalized snapshots are never scanned, even when a header is missing.
34
+ * @internal
35
+ */
36
+ export function getResponseHeader(
37
+ headers: Record<string, string>,
38
+ name: string
39
+ ): string | undefined {
40
+ const key = name.toLowerCase();
41
+ if (Object.prototype.hasOwnProperty.call(headers, key)) {
42
+ return headers[key];
43
+ }
44
+ if (normalizedHeaderRecords.has(headers)) {
45
+ return undefined;
46
+ }
47
+
48
+ const headerName = Object.keys(headers).find(
49
+ (header) => header.toLowerCase() === key
50
+ );
51
+ return headerName === undefined ? undefined : headers[headerName];
52
+ }
@@ -14,6 +14,7 @@ import {
14
14
  } from "./RequestThumbprint.js";
15
15
  import { ThrottlingEntity } from "../cache/entities/ThrottlingEntity.js";
16
16
  import { BaseAuthRequest } from "../request/BaseAuthRequest.js";
17
+ import { getResponseHeader } from "./ResponseHeaders.js";
17
18
 
18
19
  /** @internal */
19
20
  export class ThrottlingUtils {
@@ -56,7 +57,7 @@ export class ThrottlingUtils {
56
57
  * Performs necessary throttling checks after a network request.
57
58
  * @param cacheManager
58
59
  * @param thumbprint
59
- * @param response
60
+ * @param response - Token response with case-insensitive header names.
60
61
  */
61
62
  static postProcess(
62
63
  cacheManager: CacheManager,
@@ -64,15 +65,14 @@ export class ThrottlingUtils {
64
65
  response: NetworkResponse<ServerAuthorizationTokenResponse>,
65
66
  correlationId: string
66
67
  ): void {
68
+ const retryAfter = getRetryAfterHeader(response);
67
69
  if (
68
70
  ThrottlingUtils.checkResponseStatus(response) ||
69
- ThrottlingUtils.checkResponseForRetryAfter(response)
71
+ retryAfter !== undefined
70
72
  ) {
71
73
  const thumbprintValue: ThrottlingEntity = {
72
74
  throttleTime: ThrottlingUtils.calculateThrottleTime(
73
- parseInt(
74
- response.headers[Constants.HeaderNames.RETRY_AFTER]
75
- )
75
+ parseInt(retryAfter || "")
76
76
  ),
77
77
  error: response.body.error,
78
78
  errorCodes: response.body.error_codes,
@@ -102,20 +102,12 @@ export class ThrottlingUtils {
102
102
 
103
103
  /**
104
104
  * Checks a NetworkResponse object's RetryAfter header
105
- * @param response
105
+ * @param response - Token response with case-insensitive header names.
106
106
  */
107
107
  static checkResponseForRetryAfter(
108
108
  response: NetworkResponse<ServerAuthorizationTokenResponse>
109
109
  ): boolean {
110
- if (response.headers) {
111
- return (
112
- response.headers.hasOwnProperty(
113
- Constants.HeaderNames.RETRY_AFTER
114
- ) &&
115
- (response.status < 200 || response.status >= 300)
116
- );
117
- }
118
- return false;
110
+ return getRetryAfterHeader(response) !== undefined;
119
111
  }
120
112
 
121
113
  /**
@@ -150,3 +142,16 @@ export class ThrottlingUtils {
150
142
  cacheManager.removeItem(key, request.correlationId);
151
143
  }
152
144
  }
145
+
146
+ /** Reads Retry-After only for non-success responses. */
147
+ function getRetryAfterHeader(
148
+ response: NetworkResponse<ServerAuthorizationTokenResponse>
149
+ ): string | undefined {
150
+ if ((response.status < 200 || response.status >= 300) && response.headers) {
151
+ return getResponseHeader(
152
+ response.headers,
153
+ Constants.HeaderNames.RETRY_AFTER
154
+ );
155
+ }
156
+ return undefined;
157
+ }
@@ -1,3 +1,3 @@
1
1
  /* eslint-disable header/header */
2
2
  export const name = "@azure/msal-common";
3
- export const version = "16.14.2";
3
+ export const version = "16.15.0";
@@ -267,6 +267,10 @@ export function getStandardAuthorizeRequestParameters(
267
267
  RequestParameterBuilder.addInstanceAware(parameters);
268
268
  }
269
269
 
270
+ if (request.popupOriginCheckDone) {
271
+ RequestParameterBuilder.addPopupOriginCheckDone(parameters);
272
+ }
273
+
270
274
  return parameters;
271
275
  }
272
276
 
@@ -23,6 +23,10 @@ import {
23
23
  NetworkRequestOptions,
24
24
  } from "../network/INetworkModule.js";
25
25
  import { NetworkResponse } from "../network/NetworkResponse.js";
26
+ import {
27
+ getResponseHeader,
28
+ normalizeResponseHeaders,
29
+ } from "../network/ResponseHeaders.js";
26
30
  import { ThrottlingUtils } from "../network/ThrottlingUtils.js";
27
31
  import { NetworkError } from "../error/NetworkError.js";
28
32
  import { AuthError } from "../error/AuthError.js";
@@ -223,7 +227,10 @@ export async function sendPostRequest<
223
227
  performanceClient,
224
228
  correlationId
225
229
  )(tokenEndpoint, { ...options, correlationId, performanceClient });
226
- const responseHeaders = response.headers || {};
230
+ const responseHeaders = normalizeResponseHeaders(
231
+ response.headers || {}
232
+ );
233
+ response = { ...response, headers: responseHeaders };
227
234
  performanceClient?.addFields(
228
235
  {
229
236
  refreshTokenSize: response.body.refresh_token?.length || 0,
@@ -235,7 +242,9 @@ export async function sendPostRequest<
235
242
  );
236
243
  } catch (e) {
237
244
  if (e instanceof NetworkError) {
238
- const responseHeaders = e.responseHeaders;
245
+ const responseHeaders = e.responseHeaders
246
+ ? normalizeResponseHeaders(e.responseHeaders)
247
+ : undefined;
239
248
  if (responseHeaders) {
240
249
  performanceClient?.addFields(
241
250
  {
@@ -245,11 +254,15 @@ export async function sendPostRequest<
245
254
  requestId:
246
255
  responseHeaders[HeaderNames.X_MS_REQUEST_ID] || "",
247
256
  contentTypeHeader:
248
- responseHeaders[HeaderNames.CONTENT_TYPE] ||
249
- undefined,
257
+ getResponseHeader(
258
+ responseHeaders,
259
+ HeaderNames.CONTENT_TYPE
260
+ ) || undefined,
250
261
  contentLengthHeader:
251
- responseHeaders[HeaderNames.CONTENT_LENGTH] ||
252
- undefined,
262
+ getResponseHeader(
263
+ responseHeaders,
264
+ HeaderNames.CONTENT_LENGTH
265
+ ) || undefined,
253
266
  httpStatus: e.httpStatus,
254
267
  },
255
268
  correlationId
@@ -8,6 +8,10 @@ import {
8
8
  ClientConfigurationErrorCodes,
9
9
  } from "../error/ClientConfigurationError.js";
10
10
  import { HeaderNames } from "../utils/Constants.js";
11
+ import {
12
+ getResponseHeader,
13
+ normalizeResponseHeaders,
14
+ } from "../network/ResponseHeaders.js";
11
15
 
12
16
  type WWWAuthenticateChallenges = {
13
17
  nonce?: string;
@@ -24,8 +28,9 @@ type AuthenticationInfoChallenges = {
24
28
  export class AuthenticationHeaderParser {
25
29
  private headers: Record<string, string>;
26
30
 
31
+ /** Captures a case-insensitive snapshot of the response headers. */
27
32
  constructor(headers: Record<string, string>) {
28
- this.headers = headers;
33
+ this.headers = normalizeResponseHeaders(headers);
29
34
  }
30
35
 
31
36
  /**
@@ -34,7 +39,10 @@ export class AuthenticationHeaderParser {
34
39
  */
35
40
  getShrNonce(): string {
36
41
  // Attempt to parse nonce from Authentiacation-Info
37
- const authenticationInfo = this.headers[HeaderNames.AuthenticationInfo];
42
+ const authenticationInfo = getResponseHeader(
43
+ this.headers,
44
+ HeaderNames.AuthenticationInfo
45
+ );
38
46
  if (authenticationInfo) {
39
47
  const authenticationInfoChallenges =
40
48
  this.parseChallenges<AuthenticationInfoChallenges>(
@@ -50,7 +58,10 @@ export class AuthenticationHeaderParser {
50
58
  }
51
59
 
52
60
  // Attempt to parse nonce from WWW-Authenticate
53
- const wwwAuthenticate = this.headers[HeaderNames.WWWAuthenticate];
61
+ const wwwAuthenticate = getResponseHeader(
62
+ this.headers,
63
+ HeaderNames.WWWAuthenticate
64
+ );
54
65
  if (wwwAuthenticate) {
55
66
  const wwwAuthenticateChallenges =
56
67
  this.parseChallenges<WWWAuthenticateChallenges>(
@@ -78,4 +78,12 @@ export type CommonAuthorizationUrlRequest = BaseAuthRequest & {
78
78
  * @internal
79
79
  */
80
80
  reqCnf?: string;
81
+ /**
82
+ * Adds `pocd=1`, signalling that no untrusted window can reach the window
83
+ * driving this request. msal-browser computes this for every authorize
84
+ * request; a flow sets it explicitly only to assert a value the current
85
+ * window cannot be measured for, such as the popup-relay topology.
86
+ * @internal
87
+ */
88
+ popupOriginCheckDone?: boolean;
81
89
  };
@@ -38,4 +38,12 @@ export type CommonEndSessionRequest = {
38
38
  * String to string map of custom query parameters added to the /authorize call
39
39
  */
40
40
  extraQueryParameters?: StringDict;
41
+ /**
42
+ * Adds `pocd=1`, signalling that no untrusted window can reach the window
43
+ * driving this request. msal-browser computes this for every end-session
44
+ * request; a flow sets it explicitly only to assert a value the current
45
+ * window cannot be measured for, such as the popup-relay topology.
46
+ * @internal
47
+ */
48
+ popupOriginCheckDone?: boolean;
41
49
  };
@@ -474,6 +474,21 @@ export function addInstanceAware(parameters: Map<string, string>): void {
474
474
  }
475
475
  }
476
476
 
477
+ /**
478
+ * Adds `pocd=1`, telling the STS that the client verified the popup driving
479
+ * this request cannot be reached by an untrusted window, so the
480
+ * Cross-Origin-Opener-Policy response header may be omitted.
481
+ *
482
+ * Only ever added when the check passed — a negative result is signalled by
483
+ * omitting the parameter, which keeps the STS default (apply COOP) and stays
484
+ * compatible with library versions that never send it.
485
+ */
486
+ export function addPopupOriginCheckDone(parameters: Map<string, string>): void {
487
+ if (!parameters.has(AADServerParamKeys.POPUP_ORIGIN_CHECK_DONE)) {
488
+ parameters.set(AADServerParamKeys.POPUP_ORIGIN_CHECK_DONE, "1");
489
+ }
490
+ }
491
+
477
492
  /**
478
493
  * Add extraParameters
479
494
  * @param extraParams - String dictionary containing extra parameters to be added.
@@ -326,6 +326,7 @@ export type PerformanceEvent = {
326
326
  * Nested App Auth Fields
327
327
  */
328
328
  nestedAppAuthRequest?: boolean;
329
+ bridgeType?: "NAA" | "PWB";
329
330
 
330
331
  /**
331
332
  * Multiple matched access/id/refresh tokens in the cache
@@ -371,6 +372,18 @@ export type PerformanceEvent = {
371
372
 
372
373
  isAsyncPopup?: boolean;
373
374
 
375
+ /**
376
+ * Whether the auth response was collected via the legacy (non-COOP)
377
+ * location-polling flow rather than the BroadcastChannel redirect bridge.
378
+ */
379
+ usesLegacyPolling?: boolean;
380
+
381
+ /**
382
+ * Timeout, in milliseconds, applied while polling a silent iframe for the
383
+ * auth response under the legacy polling flow.
384
+ */
385
+ iframePollTimeout?: number;
386
+
374
387
  cacheRtExpiresOnSeconds?: number;
375
388
  ntwkRtExpiresOnSeconds?: number;
376
389
  extRtExpiresOnSeconds?: number;
@@ -32,7 +32,8 @@ export function stripLeadingHashOrQuery(responseString: string): string {
32
32
  }
33
33
 
34
34
  /**
35
- * Returns URL hash as server auth code response object.
35
+ * Returns flat fragment or query parameters as an authorization response.
36
+ * Application routes and unrecognized responses return null.
36
37
  */
37
38
  export function getDeserializedResponse(
38
39
  responseString: string
@@ -44,7 +45,16 @@ export function getDeserializedResponse(
44
45
  try {
45
46
  // Strip the # or ? symbol if present
46
47
  const normalizedResponse = stripLeadingHashOrQuery(responseString);
47
- // If # symbol was not present, above will return empty string, so give original hash value
48
+ /*
49
+ * Require a flat parameter name, not an application route.
50
+ * Reject routes like #/dashboard?tab=orders&code=... and
51
+ * #/dashboard/orders&state=..., where ?, /, or # appears before
52
+ * the first = or &. These characters are allowed in parameter values.
53
+ */
54
+ if (!/^[^=&?#/]+(?:=|&|$)/.test(normalizedResponse)) {
55
+ return null;
56
+ }
57
+
48
58
  const deserializedHash: AuthorizeResponse = Object.fromEntries(
49
59
  new URLSearchParams(normalizedResponse)
50
60
  );
@@ -1 +1 @@
1
- {"version":3,"file":"AuthorizationCodeClient.d.ts","sourceRoot":"","sources":["../../src/client/AuthorizationCodeClient.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,8BAA8B,EAAE,MAAM,8CAA8C,CAAC;AAC9F,OAAO,EAAE,SAAS,EAAE,MAAM,2BAA2B,CAAC;AAKtD,OAAO,EAEH,mBAAmB,EACnB,yBAAyB,EAE5B,MAAM,kCAAkC,CAAC;AAI1C,OAAO,EAAE,oBAAoB,EAAE,MAAM,qCAAqC,CAAC;AAM3E,OAAO,EAAE,uBAAuB,EAAE,MAAM,uCAAuC,CAAC;AAEhF,OAAO,EAAE,wBAAwB,EAAE,MAAM,yCAAyC,CAAC;AAWnF,OAAO,EAAE,kBAAkB,EAAE,MAAM,gDAAgD,CAAC;AAapF,OAAO,EAAE,sBAAsB,EAAE,MAAM,+CAA+C,CAAC;AACvF,OAAO,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAC;AAC7C,OAAO,EAAE,OAAO,EAAE,MAAM,sBAAsB,CAAC;AAC/C,OAAO,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AACxD,OAAO,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AAG9D;;;GAGG;AACH,qBAAa,uBAAuB;IAEhC,SAAS,CAAC,kBAAkB,EAAE,OAAO,CAAQ;IAC7C,OAAO,CAAC,iBAAiB,CAAC;IAGnB,MAAM,EAAE,MAAM,CAAC;IAGtB,SAAS,CAAC,MAAM,EAAE,yBAAyB,CAAC;IAG5C,SAAS,CAAC,WAAW,EAAE,OAAO,CAAC;IAG/B,SAAS,CAAC,YAAY,EAAE,YAAY,CAAC;IAGrC,SAAS,CAAC,aAAa,EAAE,cAAc,CAAC;IAGxC,SAAS,CAAC,sBAAsB,EAAE,sBAAsB,GAAG,IAAI,CAAC;IAGzD,SAAS,EAAE,SAAS,CAAC;IAG5B,SAAS,CAAC,iBAAiB,EAAE,kBAAkB,CAAC;gBAG5C,aAAa,EAAE,mBAAmB,EAClC,iBAAiB,EAAE,kBAAkB;IA6BzC;;;;OAIG;IACG,YAAY,CACd,OAAO,EAAE,8BAA8B,EACvC,KAAK,EAAE,MAAM,EACb,eAAe,CAAC,EAAE,wBAAwB,GAC3C,OAAO,CAAC,oBAAoB,CAAC;IAqEhC;;;;OAIG;IACH,YAAY,CAAC,aAAa,EAAE,uBAAuB,GAAG,MAAM;IAiB5D;;;;OAIG;YACW,mBAAmB;IAgFjC;;;OAGG;YACW,sBAAsB;IAsPpC;;;OAGG;IACH,OAAO,CAAC,0BAA0B;IAmDlC;;;;OAIG;YACW,4BAA4B;CAgB7C"}
1
+ {"version":3,"file":"AuthorizationCodeClient.d.ts","sourceRoot":"","sources":["../../src/client/AuthorizationCodeClient.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,8BAA8B,EAAE,MAAM,8CAA8C,CAAC;AAC9F,OAAO,EAAE,SAAS,EAAE,MAAM,2BAA2B,CAAC;AAKtD,OAAO,EAEH,mBAAmB,EACnB,yBAAyB,EAE5B,MAAM,kCAAkC,CAAC;AAI1C,OAAO,EAAE,oBAAoB,EAAE,MAAM,qCAAqC,CAAC;AAM3E,OAAO,EAAE,uBAAuB,EAAE,MAAM,uCAAuC,CAAC;AAEhF,OAAO,EAAE,wBAAwB,EAAE,MAAM,yCAAyC,CAAC;AAWnF,OAAO,EAAE,kBAAkB,EAAE,MAAM,gDAAgD,CAAC;AAapF,OAAO,EAAE,sBAAsB,EAAE,MAAM,+CAA+C,CAAC;AACvF,OAAO,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAC;AAC7C,OAAO,EAAE,OAAO,EAAE,MAAM,sBAAsB,CAAC;AAC/C,OAAO,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AACxD,OAAO,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AAG9D;;;GAGG;AACH,qBAAa,uBAAuB;IAEhC,SAAS,CAAC,kBAAkB,EAAE,OAAO,CAAQ;IAC7C,OAAO,CAAC,iBAAiB,CAAC;IAGnB,MAAM,EAAE,MAAM,CAAC;IAGtB,SAAS,CAAC,MAAM,EAAE,yBAAyB,CAAC;IAG5C,SAAS,CAAC,WAAW,EAAE,OAAO,CAAC;IAG/B,SAAS,CAAC,YAAY,EAAE,YAAY,CAAC;IAGrC,SAAS,CAAC,aAAa,EAAE,cAAc,CAAC;IAGxC,SAAS,CAAC,sBAAsB,EAAE,sBAAsB,GAAG,IAAI,CAAC;IAGzD,SAAS,EAAE,SAAS,CAAC;IAG5B,SAAS,CAAC,iBAAiB,EAAE,kBAAkB,CAAC;gBAG5C,aAAa,EAAE,mBAAmB,EAClC,iBAAiB,EAAE,kBAAkB;IA6BzC;;;;OAIG;IACG,YAAY,CACd,OAAO,EAAE,8BAA8B,EACvC,KAAK,EAAE,MAAM,EACb,eAAe,CAAC,EAAE,wBAAwB,GAC3C,OAAO,CAAC,oBAAoB,CAAC;IAqEhC;;;;OAIG;IACH,YAAY,CAAC,aAAa,EAAE,uBAAuB,GAAG,MAAM;IAiB5D;;;;OAIG;YACW,mBAAmB;IAgFjC;;;OAGG;YACW,sBAAsB;IAsPpC;;;OAGG;IACH,OAAO,CAAC,0BAA0B;IAuDlC;;;;OAIG;YACW,4BAA4B;CAgB7C"}
@@ -64,4 +64,10 @@ export declare const USERNAME = "username";
64
64
  export declare const USER_ID = "user_id";
65
65
  export declare const FMI_PATH = "fmi_path";
66
66
  export declare const ATTRIBUTE_TOKENS = "attribute_tokens";
67
+ /**
68
+ * Popup-origin-check-done. Signals to the STS that the client verified the
69
+ * popup cannot be reached by an untrusted window, so the
70
+ * Cross-Origin-Opener-Policy response header may be omitted.
71
+ */
72
+ export declare const POPUP_ORIGIN_CHECK_DONE = "pocd";
67
73
  //# sourceMappingURL=AADServerParamKeys.d.ts.map
@@ -1 +1 @@
1
- {"version":3,"file":"AADServerParamKeys.d.ts","sourceRoot":"","sources":["../../src/constants/AADServerParamKeys.ts"],"names":[],"mappings":"AAKA,eAAO,MAAM,SAAS,cAAc,CAAC;AACrC,eAAO,MAAM,YAAY,iBAAiB,CAAC;AAC3C,eAAO,MAAM,aAAa,kBAAkB,CAAC;AAC7C,eAAO,MAAM,aAAa,kBAAkB,CAAC;AAC7C,eAAO,MAAM,UAAU,eAAe,CAAC;AACvC,eAAO,MAAM,MAAM,WAAW,CAAC;AAC/B,eAAO,MAAM,KAAK,UAAU,CAAC;AAC7B,eAAO,MAAM,KAAK,UAAU,CAAC;AAC7B,eAAO,MAAM,iBAAiB,sBAAsB,CAAC;AACrD,eAAO,MAAM,YAAY,iBAAiB,CAAC;AAC3C,eAAO,MAAM,QAAQ,aAAa,CAAC;AACnC,eAAO,MAAM,aAAa,kBAAkB,CAAC;AAC7C,eAAO,MAAM,UAAU,eAAe,CAAC;AACvC,eAAO,MAAM,wBAAwB,6BAA6B,CAAC;AACnE,eAAO,MAAM,KAAK,UAAU,CAAC;AAC7B,eAAO,MAAM,KAAK,UAAU,CAAC;AAC7B,eAAO,MAAM,MAAM,WAAW,CAAC;AAC/B,eAAO,MAAM,aAAa,kBAAkB,CAAC;AAC7C,eAAO,MAAM,WAAW,gBAAgB,CAAC;AACzC,eAAO,MAAM,IAAI,SAAS,CAAC;AAC3B,eAAO,MAAM,cAAc,mBAAmB,CAAC;AAC/C,eAAO,MAAM,qBAAqB,0BAA0B,CAAC;AAC7D,eAAO,MAAM,aAAa,kBAAkB,CAAC;AAC7C,eAAO,MAAM,iBAAiB,sBAAsB,CAAC;AACrD,eAAO,MAAM,YAAY,iBAAiB,CAAC;AAC3C,eAAO,MAAM,YAAY,iBAAiB,CAAC;AAC3C,eAAO,MAAM,WAAW,gBAAgB,CAAC;AACzC,eAAO,MAAM,YAAY,iBAAiB,CAAC;AAC3C,eAAO,MAAM,mBAAmB,+BAA+B,CAAC;AAChE,eAAO,MAAM,mBAAmB,4BAA4B,CAAC;AAC7D,eAAO,MAAM,mBAAmB,wBAAwB,CAAC;AACzD,eAAO,MAAM,UAAU,eAAe,CAAC;AACvC,eAAO,MAAM,SAAS,cAAc,CAAC;AACrC,eAAO,MAAM,eAAe,6BAA6B,CAAC;AAC1D,eAAO,MAAM,aAAa,kBAAkB,CAAC;AAC7C,eAAO,MAAM,WAAW,gBAAgB,CAAC;AACzC,eAAO,MAAM,aAAa,kBAAkB,CAAC;AAC7C,eAAO,MAAM,gBAAgB,qBAAqB,CAAC;AACnD,eAAO,MAAM,qBAAqB,0BAA0B,CAAC;AAC7D,eAAO,MAAM,UAAU,eAAe,CAAC;AACvC,eAAO,MAAM,OAAO,YAAY,CAAC;AACjC,eAAO,MAAM,QAAQ,aAAa,CAAC;AACnC,eAAO,MAAM,aAAa,cAAc,CAAC;AACzC,eAAO,MAAM,mBAAmB,wBAAwB,CAAC;AACzD,eAAO,MAAM,YAAY,iBAAiB,CAAC;AAC3C,eAAO,MAAM,IAAI,SAAS,CAAC;AAC3B,eAAO,MAAM,UAAU,oBAAoB,CAAC;AAC5C,eAAO,MAAM,eAAe,oBAAoB,CAAC;AACjD,eAAO,MAAM,aAAa,iBAAiB,CAAC;AAC5C,eAAO,MAAM,WAAW,gBAAgB,CAAC;AACzC,eAAO,MAAM,GAAG,QAAQ,CAAC;AACzB,eAAO,MAAM,UAAU,eAAe,CAAC;AACvC,eAAO,MAAM,WAAW,gBAAgB,CAAC;AACzC,eAAO,MAAM,kBAAkB,sBAAsB,CAAC;AACtD,eAAO,MAAM,gBAAgB,kBAAkB,CAAC;AAChD,eAAO,MAAM,mBAAmB,qBAAqB,CAAC;AACtD,eAAO,MAAM,cAAc,mBAAmB,CAAC;AAC/C,eAAO,MAAM,OAAO,YAAY,CAAC;AACjC,eAAO,MAAM,cAAc,mBAAmB,CAAC;AAC/C,eAAO,MAAM,QAAQ,aAAa,CAAC;AACnC,eAAO,MAAM,QAAQ,YAAY,CAAC;AAClC,eAAO,MAAM,kCAAkC,uCACP,CAAC;AACzC,eAAO,MAAM,QAAQ,aAAa,CAAC;AACnC,eAAO,MAAM,OAAO,YAAY,CAAC;AACjC,eAAO,MAAM,QAAQ,aAAa,CAAC;AACnC,eAAO,MAAM,gBAAgB,qBAAqB,CAAC"}
1
+ {"version":3,"file":"AADServerParamKeys.d.ts","sourceRoot":"","sources":["../../src/constants/AADServerParamKeys.ts"],"names":[],"mappings":"AAKA,eAAO,MAAM,SAAS,cAAc,CAAC;AACrC,eAAO,MAAM,YAAY,iBAAiB,CAAC;AAC3C,eAAO,MAAM,aAAa,kBAAkB,CAAC;AAC7C,eAAO,MAAM,aAAa,kBAAkB,CAAC;AAC7C,eAAO,MAAM,UAAU,eAAe,CAAC;AACvC,eAAO,MAAM,MAAM,WAAW,CAAC;AAC/B,eAAO,MAAM,KAAK,UAAU,CAAC;AAC7B,eAAO,MAAM,KAAK,UAAU,CAAC;AAC7B,eAAO,MAAM,iBAAiB,sBAAsB,CAAC;AACrD,eAAO,MAAM,YAAY,iBAAiB,CAAC;AAC3C,eAAO,MAAM,QAAQ,aAAa,CAAC;AACnC,eAAO,MAAM,aAAa,kBAAkB,CAAC;AAC7C,eAAO,MAAM,UAAU,eAAe,CAAC;AACvC,eAAO,MAAM,wBAAwB,6BAA6B,CAAC;AACnE,eAAO,MAAM,KAAK,UAAU,CAAC;AAC7B,eAAO,MAAM,KAAK,UAAU,CAAC;AAC7B,eAAO,MAAM,MAAM,WAAW,CAAC;AAC/B,eAAO,MAAM,aAAa,kBAAkB,CAAC;AAC7C,eAAO,MAAM,WAAW,gBAAgB,CAAC;AACzC,eAAO,MAAM,IAAI,SAAS,CAAC;AAC3B,eAAO,MAAM,cAAc,mBAAmB,CAAC;AAC/C,eAAO,MAAM,qBAAqB,0BAA0B,CAAC;AAC7D,eAAO,MAAM,aAAa,kBAAkB,CAAC;AAC7C,eAAO,MAAM,iBAAiB,sBAAsB,CAAC;AACrD,eAAO,MAAM,YAAY,iBAAiB,CAAC;AAC3C,eAAO,MAAM,YAAY,iBAAiB,CAAC;AAC3C,eAAO,MAAM,WAAW,gBAAgB,CAAC;AACzC,eAAO,MAAM,YAAY,iBAAiB,CAAC;AAC3C,eAAO,MAAM,mBAAmB,+BAA+B,CAAC;AAChE,eAAO,MAAM,mBAAmB,4BAA4B,CAAC;AAC7D,eAAO,MAAM,mBAAmB,wBAAwB,CAAC;AACzD,eAAO,MAAM,UAAU,eAAe,CAAC;AACvC,eAAO,MAAM,SAAS,cAAc,CAAC;AACrC,eAAO,MAAM,eAAe,6BAA6B,CAAC;AAC1D,eAAO,MAAM,aAAa,kBAAkB,CAAC;AAC7C,eAAO,MAAM,WAAW,gBAAgB,CAAC;AACzC,eAAO,MAAM,aAAa,kBAAkB,CAAC;AAC7C,eAAO,MAAM,gBAAgB,qBAAqB,CAAC;AACnD,eAAO,MAAM,qBAAqB,0BAA0B,CAAC;AAC7D,eAAO,MAAM,UAAU,eAAe,CAAC;AACvC,eAAO,MAAM,OAAO,YAAY,CAAC;AACjC,eAAO,MAAM,QAAQ,aAAa,CAAC;AACnC,eAAO,MAAM,aAAa,cAAc,CAAC;AACzC,eAAO,MAAM,mBAAmB,wBAAwB,CAAC;AACzD,eAAO,MAAM,YAAY,iBAAiB,CAAC;AAC3C,eAAO,MAAM,IAAI,SAAS,CAAC;AAC3B,eAAO,MAAM,UAAU,oBAAoB,CAAC;AAC5C,eAAO,MAAM,eAAe,oBAAoB,CAAC;AACjD,eAAO,MAAM,aAAa,iBAAiB,CAAC;AAC5C,eAAO,MAAM,WAAW,gBAAgB,CAAC;AACzC,eAAO,MAAM,GAAG,QAAQ,CAAC;AACzB,eAAO,MAAM,UAAU,eAAe,CAAC;AACvC,eAAO,MAAM,WAAW,gBAAgB,CAAC;AACzC,eAAO,MAAM,kBAAkB,sBAAsB,CAAC;AACtD,eAAO,MAAM,gBAAgB,kBAAkB,CAAC;AAChD,eAAO,MAAM,mBAAmB,qBAAqB,CAAC;AACtD,eAAO,MAAM,cAAc,mBAAmB,CAAC;AAC/C,eAAO,MAAM,OAAO,YAAY,CAAC;AACjC,eAAO,MAAM,cAAc,mBAAmB,CAAC;AAC/C,eAAO,MAAM,QAAQ,aAAa,CAAC;AACnC,eAAO,MAAM,QAAQ,YAAY,CAAC;AAClC,eAAO,MAAM,kCAAkC,uCACP,CAAC;AACzC,eAAO,MAAM,QAAQ,aAAa,CAAC;AACnC,eAAO,MAAM,OAAO,YAAY,CAAC;AACjC,eAAO,MAAM,QAAQ,aAAa,CAAC;AACnC,eAAO,MAAM,gBAAgB,qBAAqB,CAAC;AACnD;;;;GAIG;AACH,eAAO,MAAM,uBAAuB,SAAS,CAAC"}
@@ -1,4 +1,7 @@
1
1
  export type NetworkResponse<T> = {
2
+ /**
3
+ * Header names are case-insensitive. Built-in clients return lowercase keys.
4
+ */
2
5
  headers: Record<string, string>;
3
6
  body: T;
4
7
  status: number;
@@ -1 +1 @@
1
- {"version":3,"file":"NetworkResponse.d.ts","sourceRoot":"","sources":["../../src/network/NetworkResponse.ts"],"names":[],"mappings":"AAKA,MAAM,MAAM,eAAe,CAAC,CAAC,IAAI;IAC7B,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,IAAI,EAAE,CAAC,CAAC;IACR,MAAM,EAAE,MAAM,CAAC;CAClB,CAAC"}
1
+ {"version":3,"file":"NetworkResponse.d.ts","sourceRoot":"","sources":["../../src/network/NetworkResponse.ts"],"names":[],"mappings":"AAKA,MAAM,MAAM,eAAe,CAAC,CAAC,IAAI;IAC7B;;OAEG;IACH,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,IAAI,EAAE,CAAC,CAAC;IACR,MAAM,EAAE,MAAM,CAAC;CAClB,CAAC"}
@@ -0,0 +1,13 @@
1
+ /**
2
+ * Creates a lowercase-keyed snapshot without changing header values or the input.
3
+ * Reuses snapshots produced by this function to avoid repeated normalization.
4
+ * @internal
5
+ */
6
+ export declare function normalizeResponseHeaders(headers: Record<string, string>): Record<string, string>;
7
+ /**
8
+ * Reads a response header case-insensitively.
9
+ * Normalized snapshots are never scanned, even when a header is missing.
10
+ * @internal
11
+ */
12
+ export declare function getResponseHeader(headers: Record<string, string>, name: string): string | undefined;
13
+ //# sourceMappingURL=ResponseHeaders.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"ResponseHeaders.d.ts","sourceRoot":"","sources":["../../src/network/ResponseHeaders.ts"],"names":[],"mappings":"AAQA;;;;GAIG;AACH,wBAAgB,wBAAwB,CACpC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAChC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAaxB;AAED;;;;GAIG;AACH,wBAAgB,iBAAiB,CAC7B,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAC/B,IAAI,EAAE,MAAM,GACb,MAAM,GAAG,SAAS,CAapB"}
@@ -20,7 +20,7 @@ export declare class ThrottlingUtils {
20
20
  * Performs necessary throttling checks after a network request.
21
21
  * @param cacheManager
22
22
  * @param thumbprint
23
- * @param response
23
+ * @param response - Token response with case-insensitive header names.
24
24
  */
25
25
  static postProcess(cacheManager: CacheManager, thumbprint: RequestThumbprint, response: NetworkResponse<ServerAuthorizationTokenResponse>, correlationId: string): void;
26
26
  /**
@@ -30,7 +30,7 @@ export declare class ThrottlingUtils {
30
30
  static checkResponseStatus(response: NetworkResponse<ServerAuthorizationTokenResponse>): boolean;
31
31
  /**
32
32
  * Checks a NetworkResponse object's RetryAfter header
33
- * @param response
33
+ * @param response - Token response with case-insensitive header names.
34
34
  */
35
35
  static checkResponseForRetryAfter(response: NetworkResponse<ServerAuthorizationTokenResponse>): boolean;
36
36
  /**
@@ -1 +1 @@
1
- {"version":3,"file":"ThrottlingUtils.d.ts","sourceRoot":"","sources":["../../src/network/ThrottlingUtils.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AACvD,OAAO,EAAE,gCAAgC,EAAE,MAAM,iDAAiD,CAAC;AAEnG,OAAO,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AAExD,OAAO,EAEH,iBAAiB,EACpB,MAAM,wBAAwB,CAAC;AAEhC,OAAO,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AAEhE,gBAAgB;AAChB,qBAAa,eAAe;IACxB;;;OAGG;IACH,MAAM,CAAC,4BAA4B,CAAC,UAAU,EAAE,iBAAiB,GAAG,MAAM;IAI1E;;;;OAIG;IACH,MAAM,CAAC,UAAU,CACb,YAAY,EAAE,YAAY,EAC1B,UAAU,EAAE,iBAAiB,EAC7B,aAAa,EAAE,MAAM,GACtB,IAAI;IAkBP;;;;;OAKG;IACH,MAAM,CAAC,WAAW,CACd,YAAY,EAAE,YAAY,EAC1B,UAAU,EAAE,iBAAiB,EAC7B,QAAQ,EAAE,eAAe,CAAC,gCAAgC,CAAC,EAC3D,aAAa,EAAE,MAAM,GACtB,IAAI;IAwBP;;;OAGG;IACH,MAAM,CAAC,mBAAmB,CACtB,QAAQ,EAAE,eAAe,CAAC,gCAAgC,CAAC,GAC5D,OAAO;IAOV;;;OAGG;IACH,MAAM,CAAC,0BAA0B,CAC7B,QAAQ,EAAE,eAAe,CAAC,gCAAgC,CAAC,GAC5D,OAAO;IAYV;;;OAGG;IACH,MAAM,CAAC,qBAAqB,CAAC,YAAY,EAAE,MAAM,GAAG,MAAM;IAa1D,MAAM,CAAC,cAAc,CACjB,YAAY,EAAE,YAAY,EAC1B,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,eAAe,EACxB,qBAAqB,CAAC,EAAE,MAAM,GAC/B,IAAI;CASV"}
1
+ {"version":3,"file":"ThrottlingUtils.d.ts","sourceRoot":"","sources":["../../src/network/ThrottlingUtils.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AACvD,OAAO,EAAE,gCAAgC,EAAE,MAAM,iDAAiD,CAAC;AAEnG,OAAO,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AAExD,OAAO,EAEH,iBAAiB,EACpB,MAAM,wBAAwB,CAAC;AAEhC,OAAO,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AAGhE,gBAAgB;AAChB,qBAAa,eAAe;IACxB;;;OAGG;IACH,MAAM,CAAC,4BAA4B,CAAC,UAAU,EAAE,iBAAiB,GAAG,MAAM;IAI1E;;;;OAIG;IACH,MAAM,CAAC,UAAU,CACb,YAAY,EAAE,YAAY,EAC1B,UAAU,EAAE,iBAAiB,EAC7B,aAAa,EAAE,MAAM,GACtB,IAAI;IAkBP;;;;;OAKG;IACH,MAAM,CAAC,WAAW,CACd,YAAY,EAAE,YAAY,EAC1B,UAAU,EAAE,iBAAiB,EAC7B,QAAQ,EAAE,eAAe,CAAC,gCAAgC,CAAC,EAC3D,aAAa,EAAE,MAAM,GACtB,IAAI;IAuBP;;;OAGG;IACH,MAAM,CAAC,mBAAmB,CACtB,QAAQ,EAAE,eAAe,CAAC,gCAAgC,CAAC,GAC5D,OAAO;IAOV;;;OAGG;IACH,MAAM,CAAC,0BAA0B,CAC7B,QAAQ,EAAE,eAAe,CAAC,gCAAgC,CAAC,GAC5D,OAAO;IAIV;;;OAGG;IACH,MAAM,CAAC,qBAAqB,CAAC,YAAY,EAAE,MAAM,GAAG,MAAM;IAa1D,MAAM,CAAC,cAAc,CACjB,YAAY,EAAE,YAAY,EAC1B,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,eAAe,EACxB,qBAAqB,CAAC,EAAE,MAAM,GAC/B,IAAI;CASV"}
@@ -1,3 +1,3 @@
1
1
  export declare const name = "@azure/msal-common";
2
- export declare const version = "16.14.2";
2
+ export declare const version = "16.15.0";
3
3
  //# sourceMappingURL=packageMetadata.d.ts.map
@@ -1 +1 @@
1
- {"version":3,"file":"Authorize.d.ts","sourceRoot":"","sources":["../../src/protocol/Authorize.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,6BAA6B,EAAE,MAAM,6CAA6C,CAAC;AAE5F,OAAO,EAAE,kBAAkB,EAAE,MAAM,gDAAgD,CAAC;AAEpF,OAAO,EAAE,WAAW,EAAE,MAAM,kCAAkC,CAAC;AAG/D,OAAO,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAC;AAE7C,OAAO,EAAE,SAAS,EAAE,MAAM,2BAA2B,CAAC;AAGtD,OAAO,EAAE,wBAAwB,EAAE,MAAM,yCAAyC,CAAC;AACnF,OAAO,EAAE,iBAAiB,EAAE,MAAM,kCAAkC,CAAC;AAWrE;;;;;;;;GAQG;AACH,wBAAgB,qCAAqC,CACjD,WAAW,EAAE,WAAW,EACxB,OAAO,EAAE,6BAA6B,EACtC,MAAM,EAAE,MAAM,EACd,iBAAiB,CAAC,EAAE,kBAAkB,GACvC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAmOrB;AAED;;;;;;GAMG;AACH,wBAAgB,eAAe,CAC3B,SAAS,EAAE,SAAS,EACpB,iBAAiB,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,GACvC,MAAM,CAMR;AAED;;;;;;GAMG;AACH,wBAAgB,2BAA2B,CACvC,YAAY,EAAE,iBAAiB,EAC/B,WAAW,EAAE,MAAM,EACnB,aAAa,EAAE,MAAM,GACtB,wBAAwB,CAa1B;AAED;;;;;GAKG;AACH,wBAAgB,6BAA6B,CACzC,cAAc,EAAE,iBAAiB,EACjC,YAAY,EAAE,MAAM,EACpB,aAAa,EAAE,MAAM,GACtB,IAAI,CA+EN"}
1
+ {"version":3,"file":"Authorize.d.ts","sourceRoot":"","sources":["../../src/protocol/Authorize.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,6BAA6B,EAAE,MAAM,6CAA6C,CAAC;AAE5F,OAAO,EAAE,kBAAkB,EAAE,MAAM,gDAAgD,CAAC;AAEpF,OAAO,EAAE,WAAW,EAAE,MAAM,kCAAkC,CAAC;AAG/D,OAAO,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAC;AAE7C,OAAO,EAAE,SAAS,EAAE,MAAM,2BAA2B,CAAC;AAGtD,OAAO,EAAE,wBAAwB,EAAE,MAAM,yCAAyC,CAAC;AACnF,OAAO,EAAE,iBAAiB,EAAE,MAAM,kCAAkC,CAAC;AAWrE;;;;;;;;GAQG;AACH,wBAAgB,qCAAqC,CACjD,WAAW,EAAE,WAAW,EACxB,OAAO,EAAE,6BAA6B,EACtC,MAAM,EAAE,MAAM,EACd,iBAAiB,CAAC,EAAE,kBAAkB,GACvC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAuOrB;AAED;;;;;;GAMG;AACH,wBAAgB,eAAe,CAC3B,SAAS,EAAE,SAAS,EACpB,iBAAiB,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,GACvC,MAAM,CAMR;AAED;;;;;;GAMG;AACH,wBAAgB,2BAA2B,CACvC,YAAY,EAAE,iBAAiB,EAC/B,WAAW,EAAE,MAAM,EACnB,aAAa,EAAE,MAAM,GACtB,wBAAwB,CAa1B;AAED;;;;;GAKG;AACH,wBAAgB,6BAA6B,CACzC,cAAc,EAAE,iBAAiB,EACjC,YAAY,EAAE,MAAM,EACpB,aAAa,EAAE,MAAM,GACtB,IAAI,CA+EN"}
@@ -1 +1 @@
1
- {"version":3,"file":"Token.d.ts","sourceRoot":"","sources":["../../src/protocol/Token.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,aAAa,EAAqB,MAAM,6BAA6B,CAAC;AAG/E,OAAO,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAC;AAC7C,OAAO,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AAQhE,OAAO,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAChE,OAAO,EAAE,gCAAgC,EAAE,MAAM,iDAAiD,CAAC;AACnG,OAAO,EAAE,iBAAiB,EAAE,MAAM,iCAAiC,CAAC;AACpE,OAAO,EACH,cAAc,EACd,qBAAqB,EACxB,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AAUhE,OAAO,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AACxD,OAAO,EAAE,sBAAsB,EAAE,MAAM,+CAA+C,CAAC;AACvF,OAAO,EAAE,OAAO,EAAE,MAAM,sBAAsB,CAAC;AAC/C,OAAO,EAAE,uBAAuB,EAAE,MAAM,sCAAsC,CAAC;AAE/E;;GAEG;AACH,wBAAgB,yBAAyB,CACrC,MAAM,EAAE,MAAM,EACd,oBAAoB,EAAE,OAAO,EAC7B,OAAO,CAAC,EAAE,aAAa,GACxB,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CA0BxB;AAED;;;GAGG;AACH,wBAAsB,uBAAuB,CACzC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAC/B,OAAO,EAAE,eAAe,EACxB,aAAa,EAAE,MAAM,EACrB,WAAW,EAAE,OAAO,EACpB,sBAAsB,EAAE,uBAAuB,GAChD,OAAO,CAAC,IAAI,CAAC,CAwBf;AAED;;;GAGG;AACH,wBAAgB,0BAA0B,CACtC,OAAO,EAAE,eAAe,EACxB,QAAQ,EAAE,MAAM,EAChB,WAAW,EAAE,MAAM,EACnB,iBAAiB,EAAE,kBAAkB,GACtC,MAAM,CA0BR;AAED;;;;;;;GAOG;AACH,wBAAsB,0BAA0B,CAC5C,aAAa,EAAE,MAAM,EACrB,WAAW,EAAE,MAAM,EACnB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAC/B,UAAU,EAAE,iBAAiB,EAC7B,aAAa,EAAE,MAAM,EACrB,YAAY,EAAE,YAAY,EAC1B,aAAa,EAAE,cAAc,EAC7B,MAAM,EAAE,MAAM,EACd,iBAAiB,EAAE,kBAAkB,EACrC,sBAAsB,EAAE,sBAAsB,GAAG,IAAI,GACtD,OAAO,CAAC,eAAe,CAAC,gCAAgC,CAAC,CAAC,CAsB5D;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,eAAe,CACjC,CAAC,SAAS,gCAAgC,EAE1C,UAAU,EAAE,iBAAiB,EAC7B,aAAa,EAAE,MAAM,EACrB,OAAO,EAAE,qBAAqB,EAC9B,aAAa,EAAE,MAAM,EACrB,YAAY,EAAE,YAAY,EAC1B,aAAa,EAAE,cAAc,EAC7B,MAAM,EAAE,MAAM,EACd,iBAAiB,EAAE,kBAAkB,GACtC,OAAO,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,CAgE7B"}
1
+ {"version":3,"file":"Token.d.ts","sourceRoot":"","sources":["../../src/protocol/Token.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,aAAa,EAAqB,MAAM,6BAA6B,CAAC;AAG/E,OAAO,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAC;AAC7C,OAAO,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AAQhE,OAAO,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAChE,OAAO,EAAE,gCAAgC,EAAE,MAAM,iDAAiD,CAAC;AACnG,OAAO,EAAE,iBAAiB,EAAE,MAAM,iCAAiC,CAAC;AACpE,OAAO,EACH,cAAc,EACd,qBAAqB,EACxB,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AAchE,OAAO,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AACxD,OAAO,EAAE,sBAAsB,EAAE,MAAM,+CAA+C,CAAC;AACvF,OAAO,EAAE,OAAO,EAAE,MAAM,sBAAsB,CAAC;AAC/C,OAAO,EAAE,uBAAuB,EAAE,MAAM,sCAAsC,CAAC;AAE/E;;GAEG;AACH,wBAAgB,yBAAyB,CACrC,MAAM,EAAE,MAAM,EACd,oBAAoB,EAAE,OAAO,EAC7B,OAAO,CAAC,EAAE,aAAa,GACxB,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CA0BxB;AAED;;;GAGG;AACH,wBAAsB,uBAAuB,CACzC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAC/B,OAAO,EAAE,eAAe,EACxB,aAAa,EAAE,MAAM,EACrB,WAAW,EAAE,OAAO,EACpB,sBAAsB,EAAE,uBAAuB,GAChD,OAAO,CAAC,IAAI,CAAC,CAwBf;AAED;;;GAGG;AACH,wBAAgB,0BAA0B,CACtC,OAAO,EAAE,eAAe,EACxB,QAAQ,EAAE,MAAM,EAChB,WAAW,EAAE,MAAM,EACnB,iBAAiB,EAAE,kBAAkB,GACtC,MAAM,CA0BR;AAED;;;;;;;GAOG;AACH,wBAAsB,0BAA0B,CAC5C,aAAa,EAAE,MAAM,EACrB,WAAW,EAAE,MAAM,EACnB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAC/B,UAAU,EAAE,iBAAiB,EAC7B,aAAa,EAAE,MAAM,EACrB,YAAY,EAAE,YAAY,EAC1B,aAAa,EAAE,cAAc,EAC7B,MAAM,EAAE,MAAM,EACd,iBAAiB,EAAE,kBAAkB,EACrC,sBAAsB,EAAE,sBAAsB,GAAG,IAAI,GACtD,OAAO,CAAC,eAAe,CAAC,gCAAgC,CAAC,CAAC,CAsB5D;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,eAAe,CACjC,CAAC,SAAS,gCAAgC,EAE1C,UAAU,EAAE,iBAAiB,EAC7B,aAAa,EAAE,MAAM,EACrB,OAAO,EAAE,qBAAqB,EAC9B,aAAa,EAAE,MAAM,EACrB,YAAY,EAAE,YAAY,EAC1B,aAAa,EAAE,cAAc,EAC7B,MAAM,EAAE,MAAM,EACd,iBAAiB,EAAE,kBAAkB,GACtC,OAAO,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,CAyE7B"}
@@ -4,6 +4,7 @@
4
4
  */
5
5
  export declare class AuthenticationHeaderParser {
6
6
  private headers;
7
+ /** Captures a case-insensitive snapshot of the response headers. */
7
8
  constructor(headers: Record<string, string>);
8
9
  /**
9
10
  * This method parses the SHR nonce value out of either the Authentication-Info or WWW-Authenticate authentication headers.
@@ -1 +1 @@
1
- {"version":3,"file":"AuthenticationHeaderParser.d.ts","sourceRoot":"","sources":["../../src/request/AuthenticationHeaderParser.ts"],"names":[],"mappings":"AAmBA;;;GAGG;AACH,qBAAa,0BAA0B;IACnC,OAAO,CAAC,OAAO,CAAyB;gBAE5B,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC;IAI3C;;;OAGG;IACH,WAAW,IAAI,MAAM;IAwCrB;;;;OAIG;IACH,OAAO,CAAC,eAAe;CAa1B"}
1
+ {"version":3,"file":"AuthenticationHeaderParser.d.ts","sourceRoot":"","sources":["../../src/request/AuthenticationHeaderParser.ts"],"names":[],"mappings":"AAuBA;;;GAGG;AACH,qBAAa,0BAA0B;IACnC,OAAO,CAAC,OAAO,CAAyB;IAExC,oEAAoE;gBACxD,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC;IAI3C;;;OAGG;IACH,WAAW,IAAI,MAAM;IA8CrB;;;;OAIG;IACH,OAAO,CAAC,eAAe;CAa1B"}
@@ -72,5 +72,13 @@ export type CommonAuthorizationUrlRequest = BaseAuthRequest & {
72
72
  * @internal
73
73
  */
74
74
  reqCnf?: string;
75
+ /**
76
+ * Adds `pocd=1`, signalling that no untrusted window can reach the window
77
+ * driving this request. msal-browser computes this for every authorize
78
+ * request; a flow sets it explicitly only to assert a value the current
79
+ * window cannot be measured for, such as the popup-relay topology.
80
+ * @internal
81
+ */
82
+ popupOriginCheckDone?: boolean;
75
83
  };
76
84
  //# sourceMappingURL=CommonAuthorizationUrlRequest.d.ts.map
@@ -1 +1 @@
1
- {"version":3,"file":"CommonAuthorizationUrlRequest.d.ts","sourceRoot":"","sources":["../../src/request/CommonAuthorizationUrlRequest.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AACrD,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AACvD,OAAO,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAC;AAExD;;GAEG;AACH,MAAM,MAAM,6BAA6B,GAAG,eAAe,GAAG;IAC1D;;OAEG;IACH,WAAW,EAAE,MAAM,CAAC;IACpB;;OAEG;IACH,YAAY,EAAE,YAAY,CAAC;IAC3B;;OAEG;IACH,OAAO,CAAC,EAAE,WAAW,CAAC;IACtB;;OAEG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;;OAEG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB;;OAEG;IACH,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B;;OAEG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;;OAEG;IACH,oBAAoB,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IACrC;;OAEG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;OAEG;IACH,KAAK,EAAE,MAAM,CAAC;IACd;;;;;;;;OAQG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;;OAEG;IACH,GAAG,CAAC,EAAE,MAAM,CAAC;IACb;;OAEG;IACH,KAAK,EAAE,MAAM,CAAC;IACd;;OAEG;IACH,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB;;;OAGG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;CACnB,CAAC"}
1
+ {"version":3,"file":"CommonAuthorizationUrlRequest.d.ts","sourceRoot":"","sources":["../../src/request/CommonAuthorizationUrlRequest.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AACrD,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AACvD,OAAO,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAC;AAExD;;GAEG;AACH,MAAM,MAAM,6BAA6B,GAAG,eAAe,GAAG;IAC1D;;OAEG;IACH,WAAW,EAAE,MAAM,CAAC;IACpB;;OAEG;IACH,YAAY,EAAE,YAAY,CAAC;IAC3B;;OAEG;IACH,OAAO,CAAC,EAAE,WAAW,CAAC;IACtB;;OAEG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;;OAEG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB;;OAEG;IACH,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B;;OAEG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;;OAEG;IACH,oBAAoB,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IACrC;;OAEG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;OAEG;IACH,KAAK,EAAE,MAAM,CAAC;IACd;;;;;;;;OAQG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;;OAEG;IACH,GAAG,CAAC,EAAE,MAAM,CAAC;IACb;;OAEG;IACH,KAAK,EAAE,MAAM,CAAC;IACd;;OAEG;IACH,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB;;;OAGG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;;;;;;OAMG;IACH,oBAAoB,CAAC,EAAE,OAAO,CAAC;CAClC,CAAC"}
@@ -32,5 +32,13 @@ export type CommonEndSessionRequest = {
32
32
  * String to string map of custom query parameters added to the /authorize call
33
33
  */
34
34
  extraQueryParameters?: StringDict;
35
+ /**
36
+ * Adds `pocd=1`, signalling that no untrusted window can reach the window
37
+ * driving this request. msal-browser computes this for every end-session
38
+ * request; a flow sets it explicitly only to assert a value the current
39
+ * window cannot be measured for, such as the popup-relay topology.
40
+ * @internal
41
+ */
42
+ popupOriginCheckDone?: boolean;
35
43
  };
36
44
  //# sourceMappingURL=CommonEndSessionRequest.d.ts.map
@@ -1 +1 @@
1
- {"version":3,"file":"CommonEndSessionRequest.d.ts","sourceRoot":"","sources":["../../src/request/CommonEndSessionRequest.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAC;AACxD,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AAEnD;;GAEG;AACH,MAAM,MAAM,uBAAuB,GAAG;IAClC;;OAEG;IACH,aAAa,EAAE,MAAM,CAAC;IACtB;;OAEG;IACH,OAAO,CAAC,EAAE,WAAW,GAAG,IAAI,CAAC;IAC7B;;OAEG;IACH,qBAAqB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtC;;OAEG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;OAEG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC;IACf;;OAEG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;;OAEG;IACH,oBAAoB,CAAC,EAAE,UAAU,CAAC;CACrC,CAAC"}
1
+ {"version":3,"file":"CommonEndSessionRequest.d.ts","sourceRoot":"","sources":["../../src/request/CommonEndSessionRequest.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAC;AACxD,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AAEnD;;GAEG;AACH,MAAM,MAAM,uBAAuB,GAAG;IAClC;;OAEG;IACH,aAAa,EAAE,MAAM,CAAC;IACtB;;OAEG;IACH,OAAO,CAAC,EAAE,WAAW,GAAG,IAAI,CAAC;IAC7B;;OAEG;IACH,qBAAqB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtC;;OAEG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;OAEG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC;IACf;;OAEG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;;OAEG;IACH,oBAAoB,CAAC,EAAE,UAAU,CAAC;IAClC;;;;;;OAMG;IACH,oBAAoB,CAAC,EAAE,OAAO,CAAC;CAClC,CAAC"}
@@ -179,6 +179,16 @@ export declare function addClientInfo(parameters: Map<string, string>): void;
179
179
  */
180
180
  export declare function addCliData(parameters: Map<string, string>): void;
181
181
  export declare function addInstanceAware(parameters: Map<string, string>): void;
182
+ /**
183
+ * Adds `pocd=1`, telling the STS that the client verified the popup driving
184
+ * this request cannot be reached by an untrusted window, so the
185
+ * Cross-Origin-Opener-Policy response header may be omitted.
186
+ *
187
+ * Only ever added when the check passed — a negative result is signalled by
188
+ * omitting the parameter, which keeps the STS default (apply COOP) and stays
189
+ * compatible with library versions that never send it.
190
+ */
191
+ export declare function addPopupOriginCheckDone(parameters: Map<string, string>): void;
182
192
  /**
183
193
  * Add extraParameters
184
194
  * @param extraParams - String dictionary containing extra parameters to be added.
@@ -1 +1 @@
1
- {"version":3,"file":"RequestParameterBuilder.d.ts","sourceRoot":"","sources":["../../src/request/RequestParameterBuilder.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,SAAS,MAAM,uBAAuB,CAAC;AAQnD,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AACnD,OAAO,EACH,oBAAoB,EACpB,WAAW,EACd,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EAAE,sBAAsB,EAAE,MAAM,+CAA+C,CAAC;AACvF,OAAO,EAAE,UAAU,EAAE,MAAM,0BAA0B,CAAC;AACtD,OAAO,EAAE,kBAAkB,EAAE,MAAM,gDAAgD,CAAC;AAEpF,wBAAgB,sBAAsB,CAClC,UAAU,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,EAC/B,aAAa,CAAC,EAAE,MAAM,EACtB,iBAAiB,CAAC,EAAE,kBAAkB,GACvC,IAAI,CAiBN;AAED;;;;GAIG;AACH,wBAAgB,eAAe,CAC3B,UAAU,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,EAC/B,YAAY,EAAE,SAAS,CAAC,iBAAiB,GAC1C,IAAI,CAEN;AAED;;;GAGG;AACH,wBAAgB,eAAe,CAC3B,UAAU,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,EAC/B,YAAY,CAAC,EAAE,SAAS,CAAC,YAAY,GACtC,IAAI,CAKN;AAED;;GAEG;AACH,wBAAgB,eAAe,CAAC,UAAU,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,IAAI,CAErE;AAED;;;;GAIG;AACH,wBAAgB,SAAS,CACrB,UAAU,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,EAC/B,MAAM,EAAE,MAAM,EAAE,EAChB,aAAa,EAAE,MAAM,EACrB,aAAa,GAAE,OAAc,EAC7B,aAAa,GAAE,KAAK,CAAC,MAAM,CAAiC,GAC7D,IAAI,CAcN;AAED;;;GAGG;AACH,wBAAgB,WAAW,CACvB,UAAU,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,EAC/B,QAAQ,EAAE,MAAM,GACjB,IAAI,CAEN;AAED;;;GAGG;AACH,wBAAgB,cAAc,CAC1B,UAAU,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,EAC/B,WAAW,EAAE,MAAM,GACpB,IAAI,CAEN;AAED;;;GAGG;AACH,wBAAgB,wBAAwB,CACpC,UAAU,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,EAC/B,WAAW,EAAE,MAAM,GACpB,IAAI,CAEN;AAED;;;GAGG;AACH,wBAAgB,cAAc,CAC1B,UAAU,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,EAC/B,WAAW,EAAE,MAAM,GACpB,IAAI,CAEN;AAED;;;GAGG;AACH,wBAAgB,aAAa,CACzB,UAAU,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,EAC/B,UAAU,EAAE,MAAM,GACnB,IAAI,CAEN;AAED;;;GAGG;AACH,wBAAgB,YAAY,CACxB,UAAU,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,EAC/B,SAAS,EAAE,MAAM,GAClB,IAAI,CAEN;AAED;;;GAGG;AACH,wBAAgB,SAAS,CACrB,UAAU,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,EAC/B,SAAS,EAAE,MAAM,GAClB,IAAI,CAEN;AAED;;;GAGG;AACH,wBAAgB,SAAS,CACrB,UAAU,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,EAC/B,UAAU,EAAE,UAAU,GACvB,IAAI,CAKN;AAED;;;GAGG;AACH,wBAAgB,MAAM,CAAC,UAAU,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,GAAG,EAAE,MAAM,GAAG,IAAI,CAEzE;AAED;;;;;;;;;GASG;AACH,wBAAgB,SAAS,CACrB,UAAU,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,EAC/B,aAAa,EAAE,MAAM,EACrB,MAAM,CAAC,EAAE,MAAM,EACf,kBAAkB,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,EAClC,gBAAgB,CAAC,EAAE,OAAO,EAC1B,aAAa,CAAC,EAAE,MAAM,GACvB,IAAI,CAcN;AAED;;;GAGG;AACH,wBAAgB,gBAAgB,CAC5B,UAAU,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,EAC/B,aAAa,EAAE,MAAM,GACtB,IAAI,CAEN;AAED;;;GAGG;AACH,wBAAgB,cAAc,CAC1B,UAAU,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,EAC/B,WAAW,EAAE,WAAW,GACzB,IAAI,CAUN;AAED;;;GAGG;AACH,wBAAgB,uBAAuB,CACnC,UAAU,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,EAC/B,YAAY,EAAE,oBAAoB,GACnC,IAAI,CAQN;AAED;;;GAGG;AACH,wBAAgB,SAAS,CACrB,UAAU,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,EAC/B,MAAM,EAAE,MAAM,GACf,IAAI,CAEN;AAED;;;GAGG;AACH,wBAAgB,QAAQ,CAAC,UAAU,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAI7E;AAED;;;GAGG;AACH,wBAAgB,QAAQ,CAAC,UAAU,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAE7E;AAED;;;;;GAKG;AACH,wBAAgB,sBAAsB,CAClC,UAAU,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,EAC/B,aAAa,CAAC,EAAE,MAAM,EACtB,mBAAmB,CAAC,EAAE,MAAM,GAC7B,IAAI,CAaN;AAED;;;GAGG;AACH,wBAAgB,oBAAoB,CAChC,UAAU,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,EAC/B,IAAI,EAAE,MAAM,GACb,IAAI,CAEN;AAED;;;GAGG;AACH,wBAAgB,aAAa,CACzB,UAAU,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,EAC/B,IAAI,EAAE,MAAM,GACb,IAAI,CAEN;AAED;;;GAGG;AACH,wBAAgB,eAAe,CAC3B,UAAU,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,EAC/B,YAAY,EAAE,MAAM,GACrB,IAAI,CAEN;AAED;;;GAGG;AACH,wBAAgB,eAAe,CAC3B,UAAU,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,EAC/B,YAAY,EAAE,MAAM,GACrB,IAAI,CAEN;AAED;;;GAGG;AACH,wBAAgB,eAAe,CAC3B,UAAU,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,EAC/B,YAAY,EAAE,MAAM,GACrB,IAAI,CAEN;AAED;;;GAGG;AACH,wBAAgB,kBAAkB,CAC9B,UAAU,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,EAC/B,eAAe,EAAE,MAAM,GACxB,IAAI,CAIN;AAED;;;GAGG;AACH,wBAAgB,sBAAsB,CAClC,UAAU,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,EAC/B,mBAAmB,EAAE,MAAM,GAC5B,IAAI,CAON;AAED;;;GAGG;AACH,wBAAgB,eAAe,CAC3B,UAAU,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,EAC/B,YAAY,EAAE,MAAM,GACrB,IAAI,CAEN;AAED;;;GAGG;AACH,wBAAgB,kBAAkB,CAC9B,UAAU,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,EAC/B,QAAQ,EAAE,MAAM,GACjB,IAAI,CAEN;AAED;;;GAGG;AACH,wBAAgB,YAAY,CACxB,UAAU,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,EAC/B,SAAS,EAAE,MAAM,GAClB,IAAI,CAEN;AAED;;;GAGG;AACH,wBAAgB,aAAa,CAAC,UAAU,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,IAAI,CAEnE;AAED;;GAEG;AACH,wBAAgB,UAAU,CAAC,UAAU,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,IAAI,CAEhE;AAED,wBAAgB,gBAAgB,CAAC,UAAU,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,IAAI,CAItE;AAED;;;GAGG;AACH,wBAAgB,kBAAkB,CAC9B,UAAU,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,EAC/B,WAAW,EAAE,UAAU,GACxB,IAAI,CAMN;AAoFD;;;;;;;;;;;;;GAaG;AACH,wBAAgB,iBAAiB,CAC7B,MAAM,CAAC,EAAE,MAAM,EACf,kBAAkB,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,EAClC,aAAa,GAAE,MAAW,EAC1B,aAAa,CAAC,EAAE,MAAM,GACvB,MAAM,CAiDR;AAED;;;GAGG;AACH,wBAAgB,WAAW,CACvB,UAAU,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,EAC/B,QAAQ,EAAE,MAAM,GACjB,IAAI,CAEN;AAED;;;GAGG;AACH,wBAAgB,WAAW,CACvB,UAAU,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,EAC/B,QAAQ,EAAE,MAAM,GACjB,IAAI,CAEN;AAED;;;GAGG;AACH,wBAAgB,WAAW,CACvB,UAAU,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,EAC/B,SAAS,EAAE,MAAM,GAClB,IAAI,CAQN;AAED;;GAEG;AACH,wBAAgB,SAAS,CACrB,UAAU,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,EAC/B,YAAY,EAAE,MAAM,GACrB,IAAI,CAQN;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,CAC9B,UAAU,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,EAC/B,sBAAsB,EAAE,sBAAsB,GAC/C,IAAI,CASN;AAED;;GAEG;AACH,wBAAgB,aAAa,CAAC,UAAU,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,IAAI,CAKnE;AAED;;GAEG;AACH,wBAAgB,aAAa,CACzB,UAAU,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,EAC/B,UAAU,EAAE,MAAM,GACnB,IAAI,CAEN;AAED,wBAAgB,mBAAmB,CAC/B,UAAU,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,EAC/B,cAAc,EAAE,MAAM,EACtB,iBAAiB,EAAE,MAAM,GAC1B,IAAI,CAUN;AAED;;;;GAIG;AACH,wBAAgB,gBAAgB,CAC5B,UAAU,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,EAC/B,GAAG,EAAE,MAAM,GACZ,IAAI,CAMN;AAED,wBAAgB,WAAW,CACvB,UAAU,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,EAC/B,QAAQ,CAAC,EAAE,MAAM,GAClB,IAAI,CAIN;AAED;;;;;;;;;GASG;AACH,wBAAgB,kBAAkB,CAC9B,UAAU,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,EAC/B,eAAe,EAAE,KAAK,CAAC,MAAM,CAAC,GAC/B,IAAI,CAON"}
1
+ {"version":3,"file":"RequestParameterBuilder.d.ts","sourceRoot":"","sources":["../../src/request/RequestParameterBuilder.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,SAAS,MAAM,uBAAuB,CAAC;AAQnD,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AACnD,OAAO,EACH,oBAAoB,EACpB,WAAW,EACd,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EAAE,sBAAsB,EAAE,MAAM,+CAA+C,CAAC;AACvF,OAAO,EAAE,UAAU,EAAE,MAAM,0BAA0B,CAAC;AACtD,OAAO,EAAE,kBAAkB,EAAE,MAAM,gDAAgD,CAAC;AAEpF,wBAAgB,sBAAsB,CAClC,UAAU,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,EAC/B,aAAa,CAAC,EAAE,MAAM,EACtB,iBAAiB,CAAC,EAAE,kBAAkB,GACvC,IAAI,CAiBN;AAED;;;;GAIG;AACH,wBAAgB,eAAe,CAC3B,UAAU,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,EAC/B,YAAY,EAAE,SAAS,CAAC,iBAAiB,GAC1C,IAAI,CAEN;AAED;;;GAGG;AACH,wBAAgB,eAAe,CAC3B,UAAU,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,EAC/B,YAAY,CAAC,EAAE,SAAS,CAAC,YAAY,GACtC,IAAI,CAKN;AAED;;GAEG;AACH,wBAAgB,eAAe,CAAC,UAAU,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,IAAI,CAErE;AAED;;;;GAIG;AACH,wBAAgB,SAAS,CACrB,UAAU,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,EAC/B,MAAM,EAAE,MAAM,EAAE,EAChB,aAAa,EAAE,MAAM,EACrB,aAAa,GAAE,OAAc,EAC7B,aAAa,GAAE,KAAK,CAAC,MAAM,CAAiC,GAC7D,IAAI,CAcN;AAED;;;GAGG;AACH,wBAAgB,WAAW,CACvB,UAAU,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,EAC/B,QAAQ,EAAE,MAAM,GACjB,IAAI,CAEN;AAED;;;GAGG;AACH,wBAAgB,cAAc,CAC1B,UAAU,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,EAC/B,WAAW,EAAE,MAAM,GACpB,IAAI,CAEN;AAED;;;GAGG;AACH,wBAAgB,wBAAwB,CACpC,UAAU,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,EAC/B,WAAW,EAAE,MAAM,GACpB,IAAI,CAEN;AAED;;;GAGG;AACH,wBAAgB,cAAc,CAC1B,UAAU,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,EAC/B,WAAW,EAAE,MAAM,GACpB,IAAI,CAEN;AAED;;;GAGG;AACH,wBAAgB,aAAa,CACzB,UAAU,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,EAC/B,UAAU,EAAE,MAAM,GACnB,IAAI,CAEN;AAED;;;GAGG;AACH,wBAAgB,YAAY,CACxB,UAAU,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,EAC/B,SAAS,EAAE,MAAM,GAClB,IAAI,CAEN;AAED;;;GAGG;AACH,wBAAgB,SAAS,CACrB,UAAU,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,EAC/B,SAAS,EAAE,MAAM,GAClB,IAAI,CAEN;AAED;;;GAGG;AACH,wBAAgB,SAAS,CACrB,UAAU,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,EAC/B,UAAU,EAAE,UAAU,GACvB,IAAI,CAKN;AAED;;;GAGG;AACH,wBAAgB,MAAM,CAAC,UAAU,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,GAAG,EAAE,MAAM,GAAG,IAAI,CAEzE;AAED;;;;;;;;;GASG;AACH,wBAAgB,SAAS,CACrB,UAAU,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,EAC/B,aAAa,EAAE,MAAM,EACrB,MAAM,CAAC,EAAE,MAAM,EACf,kBAAkB,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,EAClC,gBAAgB,CAAC,EAAE,OAAO,EAC1B,aAAa,CAAC,EAAE,MAAM,GACvB,IAAI,CAcN;AAED;;;GAGG;AACH,wBAAgB,gBAAgB,CAC5B,UAAU,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,EAC/B,aAAa,EAAE,MAAM,GACtB,IAAI,CAEN;AAED;;;GAGG;AACH,wBAAgB,cAAc,CAC1B,UAAU,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,EAC/B,WAAW,EAAE,WAAW,GACzB,IAAI,CAUN;AAED;;;GAGG;AACH,wBAAgB,uBAAuB,CACnC,UAAU,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,EAC/B,YAAY,EAAE,oBAAoB,GACnC,IAAI,CAQN;AAED;;;GAGG;AACH,wBAAgB,SAAS,CACrB,UAAU,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,EAC/B,MAAM,EAAE,MAAM,GACf,IAAI,CAEN;AAED;;;GAGG;AACH,wBAAgB,QAAQ,CAAC,UAAU,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAI7E;AAED;;;GAGG;AACH,wBAAgB,QAAQ,CAAC,UAAU,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAE7E;AAED;;;;;GAKG;AACH,wBAAgB,sBAAsB,CAClC,UAAU,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,EAC/B,aAAa,CAAC,EAAE,MAAM,EACtB,mBAAmB,CAAC,EAAE,MAAM,GAC7B,IAAI,CAaN;AAED;;;GAGG;AACH,wBAAgB,oBAAoB,CAChC,UAAU,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,EAC/B,IAAI,EAAE,MAAM,GACb,IAAI,CAEN;AAED;;;GAGG;AACH,wBAAgB,aAAa,CACzB,UAAU,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,EAC/B,IAAI,EAAE,MAAM,GACb,IAAI,CAEN;AAED;;;GAGG;AACH,wBAAgB,eAAe,CAC3B,UAAU,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,EAC/B,YAAY,EAAE,MAAM,GACrB,IAAI,CAEN;AAED;;;GAGG;AACH,wBAAgB,eAAe,CAC3B,UAAU,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,EAC/B,YAAY,EAAE,MAAM,GACrB,IAAI,CAEN;AAED;;;GAGG;AACH,wBAAgB,eAAe,CAC3B,UAAU,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,EAC/B,YAAY,EAAE,MAAM,GACrB,IAAI,CAEN;AAED;;;GAGG;AACH,wBAAgB,kBAAkB,CAC9B,UAAU,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,EAC/B,eAAe,EAAE,MAAM,GACxB,IAAI,CAIN;AAED;;;GAGG;AACH,wBAAgB,sBAAsB,CAClC,UAAU,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,EAC/B,mBAAmB,EAAE,MAAM,GAC5B,IAAI,CAON;AAED;;;GAGG;AACH,wBAAgB,eAAe,CAC3B,UAAU,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,EAC/B,YAAY,EAAE,MAAM,GACrB,IAAI,CAEN;AAED;;;GAGG;AACH,wBAAgB,kBAAkB,CAC9B,UAAU,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,EAC/B,QAAQ,EAAE,MAAM,GACjB,IAAI,CAEN;AAED;;;GAGG;AACH,wBAAgB,YAAY,CACxB,UAAU,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,EAC/B,SAAS,EAAE,MAAM,GAClB,IAAI,CAEN;AAED;;;GAGG;AACH,wBAAgB,aAAa,CAAC,UAAU,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,IAAI,CAEnE;AAED;;GAEG;AACH,wBAAgB,UAAU,CAAC,UAAU,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,IAAI,CAEhE;AAED,wBAAgB,gBAAgB,CAAC,UAAU,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,IAAI,CAItE;AAED;;;;;;;;GAQG;AACH,wBAAgB,uBAAuB,CAAC,UAAU,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,IAAI,CAI7E;AAED;;;GAGG;AACH,wBAAgB,kBAAkB,CAC9B,UAAU,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,EAC/B,WAAW,EAAE,UAAU,GACxB,IAAI,CAMN;AAoFD;;;;;;;;;;;;;GAaG;AACH,wBAAgB,iBAAiB,CAC7B,MAAM,CAAC,EAAE,MAAM,EACf,kBAAkB,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,EAClC,aAAa,GAAE,MAAW,EAC1B,aAAa,CAAC,EAAE,MAAM,GACvB,MAAM,CAiDR;AAED;;;GAGG;AACH,wBAAgB,WAAW,CACvB,UAAU,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,EAC/B,QAAQ,EAAE,MAAM,GACjB,IAAI,CAEN;AAED;;;GAGG;AACH,wBAAgB,WAAW,CACvB,UAAU,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,EAC/B,QAAQ,EAAE,MAAM,GACjB,IAAI,CAEN;AAED;;;GAGG;AACH,wBAAgB,WAAW,CACvB,UAAU,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,EAC/B,SAAS,EAAE,MAAM,GAClB,IAAI,CAQN;AAED;;GAEG;AACH,wBAAgB,SAAS,CACrB,UAAU,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,EAC/B,YAAY,EAAE,MAAM,GACrB,IAAI,CAQN;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,CAC9B,UAAU,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,EAC/B,sBAAsB,EAAE,sBAAsB,GAC/C,IAAI,CASN;AAED;;GAEG;AACH,wBAAgB,aAAa,CAAC,UAAU,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,IAAI,CAKnE;AAED;;GAEG;AACH,wBAAgB,aAAa,CACzB,UAAU,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,EAC/B,UAAU,EAAE,MAAM,GACnB,IAAI,CAEN;AAED,wBAAgB,mBAAmB,CAC/B,UAAU,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,EAC/B,cAAc,EAAE,MAAM,EACtB,iBAAiB,EAAE,MAAM,GAC1B,IAAI,CAUN;AAED;;;;GAIG;AACH,wBAAgB,gBAAgB,CAC5B,UAAU,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,EAC/B,GAAG,EAAE,MAAM,GACZ,IAAI,CAMN;AAED,wBAAgB,WAAW,CACvB,UAAU,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,EAC/B,QAAQ,CAAC,EAAE,MAAM,GAClB,IAAI,CAIN;AAED;;;;;;;;;GASG;AACH,wBAAgB,kBAAkB,CAC9B,UAAU,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,EAC/B,eAAe,EAAE,KAAK,CAAC,MAAM,CAAC,GAC/B,IAAI,CAON"}