@azure/msal-common 16.15.0 → 16.16.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (180) hide show
  1. package/dist/account/AccountInfo.mjs +1 -1
  2. package/dist/account/AuthToken.mjs +1 -1
  3. package/dist/account/CcsCredential.mjs +1 -1
  4. package/dist/account/ClientInfo.mjs +1 -1
  5. package/dist/account/TokenClaims.mjs +1 -1
  6. package/dist/authority/Authority.mjs +1 -1
  7. package/dist/authority/AuthorityFactory.mjs +1 -1
  8. package/dist/authority/AuthorityMetadata.mjs +1 -1
  9. package/dist/authority/AuthorityOptions.mjs +1 -1
  10. package/dist/authority/AuthorityType.mjs +1 -1
  11. package/dist/authority/CloudInstanceDiscoveryErrorResponse.mjs +1 -1
  12. package/dist/authority/CloudInstanceDiscoveryResponse.mjs +1 -1
  13. package/dist/authority/OpenIdConfigResponse.mjs +1 -1
  14. package/dist/authority/ProtocolMode.mjs +1 -1
  15. package/dist/authority/RegionDiscovery.mjs +1 -1
  16. package/dist/cache/CacheManager.mjs +54 -14
  17. package/dist/cache/CacheManager.mjs.map +1 -1
  18. package/dist/cache/persistence/TokenCacheContext.mjs +1 -1
  19. package/dist/cache/utils/AccountEntityUtils.mjs +1 -1
  20. package/dist/cache/utils/CacheHelpers.mjs +1 -1
  21. package/dist/client/AuthorizationCodeClient.mjs +1 -1
  22. package/dist/client/RefreshTokenClient.mjs +1 -1
  23. package/dist/client/SilentFlowClient.mjs +1 -1
  24. package/dist/config/ClientConfiguration.mjs +1 -1
  25. package/dist/constants/AADServerParamKeys.mjs +1 -1
  26. package/dist/crypto/DpopProofGenerator.mjs +17 -7
  27. package/dist/crypto/DpopProofGenerator.mjs.map +1 -1
  28. package/dist/crypto/ICrypto.mjs +1 -1
  29. package/dist/crypto/ITokenBindingKeyManager.mjs +1 -1
  30. package/dist/crypto/ITokenBindingKeyManager.mjs.map +1 -1
  31. package/dist/crypto/JoseHeader.mjs +1 -1
  32. package/dist/crypto/PopTokenGenerator.mjs +1 -1
  33. package/dist/error/AuthError.mjs +1 -1
  34. package/dist/error/AuthErrorCodes.mjs +1 -1
  35. package/dist/error/CacheError.mjs +1 -1
  36. package/dist/error/CacheErrorCodes.mjs +1 -1
  37. package/dist/error/ClientAuthError.mjs +1 -1
  38. package/dist/error/ClientAuthErrorCodes.mjs +1 -1
  39. package/dist/error/ClientConfigurationError.mjs +1 -1
  40. package/dist/error/ClientConfigurationErrorCodes.mjs +1 -1
  41. package/dist/error/InteractionRequiredAuthError.mjs +1 -1
  42. package/dist/error/InteractionRequiredAuthErrorCodes.mjs +1 -1
  43. package/dist/error/JoseHeaderError.mjs +1 -1
  44. package/dist/error/JoseHeaderErrorCodes.mjs +1 -1
  45. package/dist/error/NetworkError.mjs +1 -1
  46. package/dist/error/PlatformBrokerError.mjs +1 -1
  47. package/dist/error/ServerError.mjs +1 -1
  48. package/dist/index-node.mjs +1 -1
  49. package/dist/index.mjs +2 -1
  50. package/dist/index.mjs.map +1 -1
  51. package/dist/logger/Logger.mjs +1 -1
  52. package/dist/network/INetworkModule.mjs +1 -1
  53. package/dist/network/RequestThumbprint.mjs +1 -1
  54. package/dist/network/ResponseHeaders.mjs +1 -1
  55. package/dist/network/ThrottlingUtils.mjs +1 -1
  56. package/dist/packageMetadata.mjs +2 -2
  57. package/dist/protocol/Authorize.mjs +1 -1
  58. package/dist/protocol/Token.mjs +1 -1
  59. package/dist/request/AuthenticationHeaderParser.mjs +1 -1
  60. package/dist/request/BaseAuthRequest.mjs +1 -1
  61. package/dist/request/RequestParameterBuilder.mjs +1 -1
  62. package/dist/request/ScopeSet.mjs +1 -1
  63. package/dist/response/ResponseHandler.mjs +1 -1
  64. package/dist/telemetry/performance/PerformanceClient.mjs +1 -1
  65. package/dist/telemetry/performance/PerformanceEvent.mjs +1 -1
  66. package/dist/telemetry/performance/PerformanceEvents.mjs +1 -1
  67. package/dist/telemetry/performance/StubPerformanceClient.mjs +1 -1
  68. package/dist/telemetry/server/ServerTelemetryManager.mjs +1 -1
  69. package/dist/url/UrlString.mjs +1 -1
  70. package/dist/utils/ClientAssertionUtils.mjs +1 -1
  71. package/dist/utils/Constants.mjs +1 -1
  72. package/dist/utils/FunctionWrappers.mjs +1 -1
  73. package/dist/utils/ObjectUtils.mjs +1 -1
  74. package/dist/utils/ProtocolUtils.mjs +1 -1
  75. package/dist/utils/StringUtils.mjs +1 -1
  76. package/dist/utils/TimeUtils.mjs +1 -1
  77. package/dist/utils/UrlUtils.mjs +1 -1
  78. package/dist-browser/account/AccountInfo.mjs +1 -1
  79. package/dist-browser/account/AuthToken.mjs +1 -1
  80. package/dist-browser/account/CcsCredential.mjs +1 -1
  81. package/dist-browser/account/ClientInfo.mjs +1 -1
  82. package/dist-browser/account/TokenClaims.mjs +1 -1
  83. package/dist-browser/authority/Authority.mjs +1 -1
  84. package/dist-browser/authority/AuthorityFactory.mjs +1 -1
  85. package/dist-browser/authority/AuthorityMetadata.mjs +1 -1
  86. package/dist-browser/authority/AuthorityOptions.mjs +1 -1
  87. package/dist-browser/authority/AuthorityType.mjs +1 -1
  88. package/dist-browser/authority/CloudInstanceDiscoveryErrorResponse.mjs +1 -1
  89. package/dist-browser/authority/CloudInstanceDiscoveryResponse.mjs +1 -1
  90. package/dist-browser/authority/OpenIdConfigResponse.mjs +1 -1
  91. package/dist-browser/authority/ProtocolMode.mjs +1 -1
  92. package/dist-browser/authority/RegionDiscovery.mjs +1 -1
  93. package/dist-browser/cache/CacheManager.mjs +54 -14
  94. package/dist-browser/cache/CacheManager.mjs.map +1 -1
  95. package/dist-browser/cache/persistence/TokenCacheContext.mjs +1 -1
  96. package/dist-browser/cache/utils/AccountEntityUtils.mjs +1 -1
  97. package/dist-browser/cache/utils/CacheHelpers.mjs +1 -1
  98. package/dist-browser/client/AuthorizationCodeClient.mjs +1 -1
  99. package/dist-browser/client/RefreshTokenClient.mjs +1 -1
  100. package/dist-browser/client/SilentFlowClient.mjs +1 -1
  101. package/dist-browser/config/ClientConfiguration.mjs +1 -1
  102. package/dist-browser/constants/AADServerParamKeys.mjs +1 -1
  103. package/dist-browser/crypto/DpopProofGenerator.mjs +17 -7
  104. package/dist-browser/crypto/DpopProofGenerator.mjs.map +1 -1
  105. package/dist-browser/crypto/ICrypto.mjs +1 -1
  106. package/dist-browser/crypto/ITokenBindingKeyManager.mjs +1 -1
  107. package/dist-browser/crypto/ITokenBindingKeyManager.mjs.map +1 -1
  108. package/dist-browser/crypto/JoseHeader.mjs +1 -1
  109. package/dist-browser/crypto/PopTokenGenerator.mjs +1 -1
  110. package/dist-browser/error/AuthError.mjs +1 -1
  111. package/dist-browser/error/AuthErrorCodes.mjs +1 -1
  112. package/dist-browser/error/CacheError.mjs +1 -1
  113. package/dist-browser/error/CacheErrorCodes.mjs +1 -1
  114. package/dist-browser/error/ClientAuthError.mjs +1 -1
  115. package/dist-browser/error/ClientAuthErrorCodes.mjs +1 -1
  116. package/dist-browser/error/ClientConfigurationError.mjs +1 -1
  117. package/dist-browser/error/ClientConfigurationErrorCodes.mjs +1 -1
  118. package/dist-browser/error/InteractionRequiredAuthError.mjs +1 -1
  119. package/dist-browser/error/InteractionRequiredAuthErrorCodes.mjs +1 -1
  120. package/dist-browser/error/JoseHeaderError.mjs +1 -1
  121. package/dist-browser/error/JoseHeaderErrorCodes.mjs +1 -1
  122. package/dist-browser/error/NetworkError.mjs +1 -1
  123. package/dist-browser/error/PlatformBrokerError.mjs +1 -1
  124. package/dist-browser/error/ServerError.mjs +1 -1
  125. package/dist-browser/index-browser.mjs +2 -1
  126. package/dist-browser/index-browser.mjs.map +1 -1
  127. package/dist-browser/index.mjs +2 -1
  128. package/dist-browser/index.mjs.map +1 -1
  129. package/dist-browser/log-strings-mapping.json +2 -2
  130. package/dist-browser/logger/Logger.mjs +1 -1
  131. package/dist-browser/network/INetworkModule.mjs +1 -1
  132. package/dist-browser/network/RequestThumbprint.mjs +1 -1
  133. package/dist-browser/network/ResponseHeaders.mjs +1 -1
  134. package/dist-browser/network/ThrottlingUtils.mjs +1 -1
  135. package/dist-browser/packageMetadata.mjs +2 -2
  136. package/dist-browser/protocol/Authorize.mjs +1 -1
  137. package/dist-browser/protocol/Token.mjs +1 -1
  138. package/dist-browser/request/AuthenticationHeaderParser.mjs +1 -1
  139. package/dist-browser/request/BaseAuthRequest.mjs +1 -1
  140. package/dist-browser/request/RequestParameterBuilder.mjs +1 -1
  141. package/dist-browser/request/ScopeSet.mjs +1 -1
  142. package/dist-browser/response/ResponseHandler.mjs +1 -1
  143. package/dist-browser/telemetry/performance/PerformanceClient.mjs +1 -1
  144. package/dist-browser/telemetry/performance/PerformanceEvent.mjs +1 -1
  145. package/dist-browser/telemetry/performance/PerformanceEvents.mjs +1 -1
  146. package/dist-browser/telemetry/performance/StubPerformanceClient.mjs +1 -1
  147. package/dist-browser/telemetry/server/ServerTelemetryManager.mjs +1 -1
  148. package/dist-browser/url/UrlString.mjs +1 -1
  149. package/dist-browser/utils/ClientAssertionUtils.mjs +1 -1
  150. package/dist-browser/utils/Constants.mjs +1 -1
  151. package/dist-browser/utils/FunctionWrappers.mjs +1 -1
  152. package/dist-browser/utils/ObjectUtils.mjs +1 -1
  153. package/dist-browser/utils/ProtocolUtils.mjs +1 -1
  154. package/dist-browser/utils/StringUtils.mjs +1 -1
  155. package/dist-browser/utils/TimeUtils.mjs +1 -1
  156. package/dist-browser/utils/UrlUtils.mjs +1 -1
  157. package/lib/index-browser.cjs +4 -2
  158. package/lib/index-browser.cjs.map +1 -1
  159. package/lib/{index-node-DD4RzKVr.js → index-node-CLM4E-dZ.js} +73 -21
  160. package/lib/{index-node-DD4RzKVr.js.map → index-node-CLM4E-dZ.js.map} +1 -1
  161. package/lib/index-node.cjs +2 -2
  162. package/lib/index.cjs +4 -2
  163. package/lib/index.cjs.map +1 -1
  164. package/package.json +1 -1
  165. package/src/cache/CacheManager.ts +95 -21
  166. package/src/cache/interface/ICacheManager.ts +2 -2
  167. package/src/crypto/DpopProofGenerator.ts +36 -5
  168. package/src/crypto/ITokenBindingKeyManager.ts +11 -0
  169. package/src/exports-browser-only.ts +5 -0
  170. package/src/packageMetadata.ts +1 -1
  171. package/types/cache/CacheManager.d.ts +11 -1
  172. package/types/cache/CacheManager.d.ts.map +1 -1
  173. package/types/cache/interface/ICacheManager.d.ts +2 -2
  174. package/types/crypto/DpopProofGenerator.d.ts +20 -3
  175. package/types/crypto/DpopProofGenerator.d.ts.map +1 -1
  176. package/types/crypto/ITokenBindingKeyManager.d.ts +8 -0
  177. package/types/crypto/ITokenBindingKeyManager.d.ts.map +1 -1
  178. package/types/exports-browser-only.d.ts +2 -0
  179. package/types/exports-browser-only.d.ts.map +1 -1
  180. package/types/packageMetadata.d.ts +1 -1
@@ -1,8 +1,8 @@
1
- /*! @azure/msal-common v16.15.0 2026-10-27 */
1
+ /*! @azure/msal-common v16.16.1 2026-11-06 */
2
2
  'use strict';
3
3
  'use strict';
4
4
 
5
- var indexNode = require('./index-node-DD4RzKVr.js');
5
+ var indexNode = require('./index-node-CLM4E-dZ.js');
6
6
 
7
7
 
8
8
 
package/lib/index.cjs CHANGED
@@ -1,8 +1,8 @@
1
- /*! @azure/msal-common v16.15.0 2026-10-27 */
1
+ /*! @azure/msal-common v16.16.1 2026-11-06 */
2
2
  'use strict';
3
3
  'use strict';
4
4
 
5
- var indexNode = require('./index-node-DD4RzKVr.js');
5
+ var indexNode = require('./index-node-CLM4E-dZ.js');
6
6
  var indexBrowser = require('./index-browser.cjs');
7
7
 
8
8
 
@@ -34,6 +34,7 @@ exports.DEFAULT_CRYPTO_IMPLEMENTATION = indexNode.DEFAULT_CRYPTO_IMPLEMENTATION;
34
34
  exports.DEFAULT_SYSTEM_OPTIONS = indexNode.DEFAULT_SYSTEM_OPTIONS;
35
35
  exports.DEFAULT_TOKEN_BINDING_KEY_MANAGER = indexNode.DEFAULT_TOKEN_BINDING_KEY_MANAGER;
36
36
  exports.DefaultStorageClass = indexNode.DefaultStorageClass;
37
+ exports.DpopProofGenerator = indexNode.DpopProofGenerator;
37
38
  exports.IntFields = indexNode.IntFields;
38
39
  exports.InteractionRequiredAuthError = indexNode.InteractionRequiredAuthError;
39
40
  exports.InteractionRequiredAuthErrorCodes = indexNode.InteractionRequiredAuthErrorCodes;
@@ -87,6 +88,7 @@ exports.getRequestThumbprint = indexNode.getRequestThumbprint;
87
88
  exports.getTenantIdFromIdTokenClaims = indexNode.getTenantIdFromIdTokenClaims;
88
89
  exports.invoke = indexNode.invoke;
89
90
  exports.invokeAsync = indexNode.invokeAsync;
91
+ exports.normalizeDpopResourceRequestContext = indexNode.normalizeDpopResourceRequestContext;
90
92
  exports.tenantIdMatchesHomeTenant = indexNode.tenantIdMatchesHomeTenant;
91
93
  exports.updateAccountTenantProfileData = indexNode.updateAccountTenantProfileData;
92
94
  exports.version = indexNode.version;
package/lib/index.cjs.map CHANGED
@@ -1 +1 @@
1
- {"version":3,"file":"index.cjs","sources":[],"sourcesContent":[],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;"}
1
+ {"version":3,"file":"index.cjs","sources":[],"sourcesContent":[],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;"}
package/package.json CHANGED
@@ -10,7 +10,7 @@
10
10
  "type": "git",
11
11
  "url": "https://github.com/AzureAD/microsoft-authentication-library-for-js.git"
12
12
  },
13
- "version": "16.15.0",
13
+ "version": "16.16.1",
14
14
  "description": "Microsoft Authentication Library for js",
15
15
  "keywords": [
16
16
  "implicit",
@@ -719,6 +719,7 @@ export abstract class CacheManager implements ICacheManager {
719
719
  correlationId
720
720
  );
721
721
 
722
+ const accessTokenKeysToRemove: string[] = [];
722
723
  tokenKeys.accessToken.forEach((key) => {
723
724
  if (
724
725
  !this.accessTokenKeyMatchesFilter(key, accessTokenFilter, false)
@@ -744,10 +745,17 @@ export abstract class CacheManager implements ICacheManager {
744
745
  correlationId
745
746
  );
746
747
  if (tokenScopeSet.intersectingScopeSets(currentScopes)) {
747
- this.removeAccessToken(key, correlationId);
748
+ accessTokenKeysToRemove.push(key);
748
749
  }
749
750
  }
750
751
  });
752
+ for (const key of accessTokenKeysToRemove) {
753
+ await this.removeAccessTokenAndTokenBindingKey(
754
+ key,
755
+ correlationId,
756
+ credential.keyId
757
+ );
758
+ }
751
759
  await this.setAccessTokenCredential(
752
760
  credential,
753
761
  correlationId,
@@ -1051,7 +1059,6 @@ export abstract class CacheManager implements ICacheManager {
1051
1059
  * @param account
1052
1060
  */
1053
1061
  removeAccount(account: AccountInfo, correlationId: string): void {
1054
- this.removeAccountContext(account, correlationId);
1055
1062
  const accountKeys = this.getAccountKeys();
1056
1063
  const keyFilter = (key: string): boolean => {
1057
1064
  return (
@@ -1059,6 +1066,12 @@ export abstract class CacheManager implements ICacheManager {
1059
1066
  key.includes(account.environment)
1060
1067
  );
1061
1068
  };
1069
+ this.getTokenKeys()
1070
+ .idToken.filter(keyFilter)
1071
+ .forEach((key) => {
1072
+ this.removeIdToken(key, correlationId);
1073
+ });
1074
+ this.removeAccountContext(account, correlationId);
1062
1075
  accountKeys.filter(keyFilter).forEach((key) => {
1063
1076
  this.removeItem(key, correlationId);
1064
1077
  this.performanceClient.incrementFields(
@@ -1069,7 +1082,8 @@ export abstract class CacheManager implements ICacheManager {
1069
1082
  }
1070
1083
 
1071
1084
  /**
1072
- * Removes credentials associated with the provided account
1085
+ * Removes access and refresh tokens associated with the provided account,
1086
+ * preserving the account and its ID tokens.
1073
1087
  * @param account
1074
1088
  */
1075
1089
  removeAccountContext(account: AccountInfo, correlationId: string): void {
@@ -1081,10 +1095,6 @@ export abstract class CacheManager implements ICacheManager {
1081
1095
  );
1082
1096
  };
1083
1097
 
1084
- allTokenKeys.idToken.filter(keyFilter).forEach((key) => {
1085
- this.removeIdToken(key, correlationId);
1086
- });
1087
-
1088
1098
  allTokenKeys.accessToken.filter(keyFilter).forEach((key) => {
1089
1099
  this.removeAccessToken(key, correlationId);
1090
1100
  });
@@ -1100,9 +1110,42 @@ export abstract class CacheManager implements ICacheManager {
1100
1110
  * @param correlationId
1101
1111
  */
1102
1112
  removeAccessToken(key: string, correlationId: string): void {
1113
+ const credential = this.removeAccessTokenCredential(key, correlationId);
1114
+ if (credential) {
1115
+ void this.removeTokenBindingKeyForCredential(
1116
+ credential,
1117
+ correlationId
1118
+ );
1119
+ }
1120
+ }
1121
+
1122
+ /**
1123
+ * Removes an access token and waits for any unreferenced token-binding key
1124
+ * cleanup. Internal callers that require deterministic cleanup should use
1125
+ * this method instead of the synchronous public cache contract.
1126
+ */
1127
+ async removeAccessTokenAndTokenBindingKey(
1128
+ key: string,
1129
+ correlationId: string,
1130
+ preservedKeyId?: string
1131
+ ): Promise<void> {
1132
+ const credential = this.removeAccessTokenCredential(key, correlationId);
1133
+ if (credential) {
1134
+ await this.removeTokenBindingKeyForCredential(
1135
+ credential,
1136
+ correlationId,
1137
+ preservedKeyId
1138
+ );
1139
+ }
1140
+ }
1141
+
1142
+ private removeAccessTokenCredential(
1143
+ key: string,
1144
+ correlationId: string
1145
+ ): AccessTokenEntity | null {
1103
1146
  const credential = this.getAccessTokenCredential(key, correlationId);
1104
1147
  if (!credential) {
1105
- return;
1148
+ return null;
1106
1149
  }
1107
1150
 
1108
1151
  this.removeItem(key, correlationId);
@@ -1110,7 +1153,14 @@ export abstract class CacheManager implements ICacheManager {
1110
1153
  { accessTokensRemoved: 1 },
1111
1154
  correlationId
1112
1155
  );
1156
+ return credential;
1157
+ }
1113
1158
 
1159
+ private async removeTokenBindingKeyForCredential(
1160
+ credential: AccessTokenEntity,
1161
+ correlationId: string,
1162
+ preservedKeyId?: string
1163
+ ): Promise<void> {
1114
1164
  // Remove Token Binding Key from key store for token-bound access token credentials
1115
1165
  if (
1116
1166
  credential.credentialType.toLowerCase() ===
@@ -1124,19 +1174,26 @@ export abstract class CacheManager implements ICacheManager {
1124
1174
  credential as AccessTokenEntity;
1125
1175
  const kid = accessTokenWithAuthSchemeEntity.keyId;
1126
1176
 
1127
- if (kid) {
1128
- void this.tokenBindingKeyManager
1129
- .removeTokenBindingKey(kid, correlationId)
1130
- .catch(() => {
1131
- this.commonLogger.error(
1132
- "Failed to remove token binding key",
1133
- correlationId
1134
- );
1135
- this.performanceClient?.incrementFields(
1136
- { removeTokenBindingKeyFailure: 1 },
1137
- correlationId
1138
- );
1139
- });
1177
+ if (
1178
+ kid &&
1179
+ kid !== preservedKeyId &&
1180
+ !this.isTokenBindingKeyReferenced(kid, correlationId)
1181
+ ) {
1182
+ try {
1183
+ await this.tokenBindingKeyManager.removeTokenBindingKey(
1184
+ kid,
1185
+ correlationId
1186
+ );
1187
+ } catch {
1188
+ this.commonLogger.error(
1189
+ "Failed to remove token binding key",
1190
+ correlationId
1191
+ );
1192
+ this.performanceClient?.incrementFields(
1193
+ { removeTokenBindingKeyFailure: 1 },
1194
+ correlationId
1195
+ );
1196
+ }
1140
1197
  }
1141
1198
  break;
1142
1199
  }
@@ -1144,6 +1201,19 @@ export abstract class CacheManager implements ICacheManager {
1144
1201
  }
1145
1202
  }
1146
1203
 
1204
+ private isTokenBindingKeyReferenced(
1205
+ keyId: string,
1206
+ correlationId: string
1207
+ ): boolean {
1208
+ return this.getTokenKeys().accessToken.some((accessTokenKey) => {
1209
+ const accessToken = this.getAccessTokenCredential(
1210
+ accessTokenKey,
1211
+ correlationId
1212
+ );
1213
+ return accessToken?.keyId === keyId;
1214
+ });
1215
+ }
1216
+
1147
1217
  /**
1148
1218
  * Removes all app metadata objects from cache.
1149
1219
  */
@@ -1358,6 +1428,7 @@ export abstract class CacheManager implements ICacheManager {
1358
1428
  const authScheme =
1359
1429
  request.authenticationScheme ||
1360
1430
  Constants.AuthenticationScheme.BEARER;
1431
+ const normalizedAuthScheme = authScheme.toLowerCase();
1361
1432
  /*
1362
1433
  * Distinguish between Bearer and PoP/SSH token cache types
1363
1434
  * Cast to lowercase to handle "bearer" from ADFS
@@ -1388,6 +1459,9 @@ export abstract class CacheManager implements ICacheManager {
1388
1459
  keyId:
1389
1460
  authScheme === Constants.AuthenticationScheme.SSH
1390
1461
  ? request.sshKid
1462
+ : normalizedAuthScheme ===
1463
+ Constants.AuthenticationScheme.DPOP.toLowerCase()
1464
+ ? request.popKid || request.dpopJkt
1391
1465
  : undefined,
1392
1466
  additionalCacheKeyComponents: additionalCacheKeyComponents,
1393
1467
  };
@@ -260,14 +260,14 @@ export interface ICacheManager {
260
260
  removeAllAccounts(correlationId: string): void;
261
261
 
262
262
  /**
263
- * returns a boolean if the given account is removed
263
+ * Removes the account and its associated tokens.
264
264
  * @param account
265
265
  * @param correlationId
266
266
  */
267
267
  removeAccount(account: AccountInfo, correlationId: string): void;
268
268
 
269
269
  /**
270
- * returns a boolean if the given account is removed
270
+ * Removes access and refresh tokens, preserving the account and its ID tokens.
271
271
  * @param account
272
272
  * @param correlationId
273
273
  */
@@ -47,6 +47,20 @@ export type DpopResourceProofParams = {
47
47
  nonce?: string;
48
48
  };
49
49
 
50
+ /**
51
+ * HTTP resource context used by a DPoP-bound request.
52
+ * @internal
53
+ */
54
+ export type DpopResourceRequestContext = {
55
+ htu: string;
56
+ htm: string;
57
+ };
58
+
59
+ /**
60
+ * Resource request context and access token used to generate a DPoP proof.
61
+ * Exported for use by MSAL Browser and unsupported for direct consumers.
62
+ * @internal
63
+ */
50
64
  export type GenerateDpopResourceProofParams = {
51
65
  htu?: string;
52
66
  htm?: string;
@@ -128,13 +142,26 @@ function validateDpopNonce(
128
142
  }
129
143
  }
130
144
 
145
+ /**
146
+ * Validates and normalizes the HTTP resource context for a DPoP-bound request.
147
+ * @internal
148
+ */
149
+ export function normalizeDpopResourceRequestContext(
150
+ context: DpopResourceRequestContext,
151
+ correlationId: string = ""
152
+ ): DpopResourceRequestContext {
153
+ return {
154
+ htm: normalizeHtm(context.htm, correlationId),
155
+ htu: normalizeHtu(context.htu, correlationId),
156
+ };
157
+ }
158
+
131
159
  /**
132
160
  * Builds RFC 9449 DPoP proof JWT payloads for token-endpoint and
133
161
  * resource-endpoint proof bindings.
134
162
  *
135
- * Not exported from any public package entry point.
136
- * This helper is internal-only until DPoP is wired into acquisition flows
137
- * in a subsequent work item.
163
+ * Exported from package entry points for use by MSAL Browser.
164
+ * This helper remains an unsupported internal API for direct consumers.
138
165
  *
139
166
  * DPoP proofs do not contain SHR fields (at, ts, m, u, p, q).
140
167
  * @internal
@@ -213,10 +240,14 @@ export class DpopProofGenerator {
213
240
  correlationId: string = ""
214
241
  ): DpopProofClaims {
215
242
  validateDpopNonce(params.nonce, correlationId);
243
+ const resourceContext = normalizeDpopResourceRequestContext(
244
+ params,
245
+ correlationId
246
+ );
216
247
  const claims: DpopProofClaims = {
217
248
  jti: this.cryptoUtils.createNewGuid(),
218
- htm: normalizeHtm(params.htm, correlationId),
219
- htu: normalizeHtu(params.htu, correlationId),
249
+ htm: resourceContext.htm,
250
+ htu: resourceContext.htu,
220
251
  ath: params.ath,
221
252
  iat: TimeUtils.nowSeconds(),
222
253
  };
@@ -39,6 +39,17 @@ export interface ITokenBindingKeyManager {
39
39
  * @param correlationId - Request correlation identifier.
40
40
  */
41
41
  removeTokenBindingKey(kid: string, correlationId: string): Promise<void>;
42
+ /**
43
+ * Returns whether a token-binding key is available to the current context.
44
+ */
45
+ hasTokenBindingKey?(kid: string, correlationId: string): Promise<boolean>;
46
+ /**
47
+ * Returns whether a token-binding key is available in persistent storage.
48
+ */
49
+ isTokenBindingKeyPersisted?(
50
+ kid: string,
51
+ correlationId: string
52
+ ): Promise<boolean>;
42
53
  /**
43
54
  * Gets a token-binding public key as a JWK by identifier.
44
55
  * @param kid - Token-binding key identifier.
@@ -23,3 +23,8 @@ export { PerformanceClient } from "./telemetry/performance/PerformanceClient.js"
23
23
  export { StubPerformanceClient } from "./telemetry/performance/StubPerformanceClient.js";
24
24
 
25
25
  export { PopTokenGenerator } from "./crypto/PopTokenGenerator.js";
26
+ export {
27
+ DpopProofGenerator,
28
+ normalizeDpopResourceRequestContext,
29
+ } from "./crypto/DpopProofGenerator.js";
30
+ export type { DpopResourceRequestContext } from "./crypto/DpopProofGenerator.js";
@@ -1,3 +1,3 @@
1
1
  /* eslint-disable header/header */
2
2
  export const name = "@azure/msal-common";
3
- export const version = "16.15.0";
3
+ export const version = "16.16.1";
@@ -235,7 +235,8 @@ export declare abstract class CacheManager implements ICacheManager {
235
235
  */
236
236
  removeAccount(account: AccountInfo, correlationId: string): void;
237
237
  /**
238
- * Removes credentials associated with the provided account
238
+ * Removes access and refresh tokens associated with the provided account,
239
+ * preserving the account and its ID tokens.
239
240
  * @param account
240
241
  */
241
242
  removeAccountContext(account: AccountInfo, correlationId: string): void;
@@ -245,6 +246,15 @@ export declare abstract class CacheManager implements ICacheManager {
245
246
  * @param correlationId
246
247
  */
247
248
  removeAccessToken(key: string, correlationId: string): void;
249
+ /**
250
+ * Removes an access token and waits for any unreferenced token-binding key
251
+ * cleanup. Internal callers that require deterministic cleanup should use
252
+ * this method instead of the synchronous public cache contract.
253
+ */
254
+ removeAccessTokenAndTokenBindingKey(key: string, correlationId: string, preservedKeyId?: string): Promise<void>;
255
+ private removeAccessTokenCredential;
256
+ private removeTokenBindingKeyForCredential;
257
+ private isTokenBindingKeyReferenced;
248
258
  /**
249
259
  * Removes all app metadata objects from cache.
250
260
  */
@@ -1 +1 @@
1
- {"version":3,"file":"CacheManager.d.ts","sourceRoot":"","sources":["../../src/cache/CacheManager.ts"],"names":[],"mappings":"AAKA,OAAO,EACH,WAAW,EAGd,MAAM,2BAA2B,CAAC;AAInC,OAAO,EAAE,sBAAsB,EAAE,MAAM,kCAAkC,CAAC;AAC1E,OAAO,EAAE,OAAO,EAAE,MAAM,sBAAsB,CAAC;AAC/C,OAAO,EAAE,uBAAuB,EAAE,MAAM,sCAAsC,CAAC;AAO/E,OAAO,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAC;AAE7C,OAAO,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AAEhE,OAAO,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAC;AAC1D,OAAO,EAAE,kBAAkB,EAAE,MAAM,gDAAgD,CAAC;AAEpF,OAAO,EAAE,iBAAiB,EAAE,MAAM,iCAAiC,CAAC;AACpE,OAAO,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AAC5D,OAAO,EAAE,iBAAiB,EAAE,MAAM,iCAAiC,CAAC;AACpE,OAAO,EAAE,uBAAuB,EAAE,MAAM,uCAAuC,CAAC;AAChF,OAAO,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAC;AACxD,OAAO,EAAE,gBAAgB,EAAE,MAAM,gCAAgC,CAAC;AAClE,OAAO,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AAC5D,OAAO,EAAE,kBAAkB,EAAE,MAAM,kCAAkC,CAAC;AACtE,OAAO,EAAE,qBAAqB,EAAE,MAAM,qCAAqC,CAAC;AAC5E,OAAO,EAAE,gBAAgB,EAAE,MAAM,gCAAgC,CAAC;AAClE,OAAO,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAG7D,OAAO,EACH,aAAa,EACb,gBAAgB,EAChB,iBAAiB,EACjB,gBAAgB,EAEhB,SAAS,EACT,mBAAmB,EACtB,MAAM,uBAAuB,CAAC;AAE/B;;;GAGG;AACH,8BAAsB,YAAa,YAAW,aAAa;IACvD,SAAS,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC3B,SAAS,CAAC,UAAU,EAAE,OAAO,CAAC;IAC9B,SAAS,CAAC,sBAAsB,EAAE,uBAAuB,CAAC;IAE1D,OAAO,CAAC,YAAY,CAAS;IAC7B,OAAO,CAAC,sBAAsB,CAAC,CAAyB;IACxD,SAAS,CAAC,iBAAiB,EAAE,kBAAkB,CAAC;gBAG5C,QAAQ,EAAE,MAAM,EAChB,UAAU,EAAE,OAAO,EACnB,MAAM,EAAE,MAAM,EACd,iBAAiB,EAAE,kBAAkB,EACrC,sBAAsB,EAAE,sBAAsB,GAAG,SAAS,EAC1D,sBAAsB,EAAE,uBAAuB;IAUnD;;;OAGG;IACH,QAAQ,CAAC,UAAU,CACf,UAAU,EAAE,MAAM,EAClB,aAAa,EAAE,MAAM,GACtB,aAAa,GAAG,IAAI;IAEvB;;;;OAIG;IACH,QAAQ,CAAC,UAAU,CACf,OAAO,EAAE,aAAa,EACtB,aAAa,EAAE,MAAM,EACrB,IAAI,EAAE,OAAO,EACb,KAAK,EAAE,MAAM,GACd,OAAO,CAAC,IAAI,CAAC;IAEhB;;;OAGG;IACH,QAAQ,CAAC,oBAAoB,CACzB,UAAU,EAAE,MAAM,EAClB,aAAa,EAAE,MAAM,GACtB,aAAa,GAAG,IAAI;IAEvB;;;;OAIG;IACH,QAAQ,CAAC,oBAAoB,CACzB,OAAO,EAAE,aAAa,EACtB,aAAa,EAAE,MAAM,EACrB,IAAI,EAAE,OAAO,GACd,OAAO,CAAC,IAAI,CAAC;IAEhB;;;OAGG;IACH,QAAQ,CAAC,wBAAwB,CAC7B,cAAc,EAAE,MAAM,EACtB,aAAa,EAAE,MAAM,GACtB,iBAAiB,GAAG,IAAI;IAE3B;;;;;;OAMG;IACH,QAAQ,CAAC,wBAAwB,CAC7B,WAAW,EAAE,iBAAiB,EAC9B,aAAa,EAAE,MAAM,EACrB,IAAI,EAAE,OAAO,EACb,sBAAsB,CAAC,EAAE,MAAM,GAChC,OAAO,CAAC,IAAI,CAAC;IAEhB;;;OAGG;IACH,QAAQ,CAAC,yBAAyB,CAC9B,eAAe,EAAE,MAAM,EACvB,aAAa,EAAE,MAAM,GACtB,kBAAkB,GAAG,IAAI;IAE5B;;;;OAIG;IACH,QAAQ,CAAC,yBAAyB,CAC9B,YAAY,EAAE,kBAAkB,EAChC,aAAa,EAAE,MAAM,EACrB,IAAI,EAAE,OAAO,GACd,OAAO,CAAC,IAAI,CAAC;IAEhB;;;;OAIG;IACH,QAAQ,CAAC,cAAc,CACnB,cAAc,EAAE,MAAM,EACtB,aAAa,EAAE,MAAM,GACtB,iBAAiB,GAAG,IAAI;IAE3B;;;OAGG;IACH,QAAQ,CAAC,cAAc,CACnB,WAAW,EAAE,iBAAiB,EAC9B,aAAa,EAAE,MAAM,GACtB,IAAI;IAEP;;;;OAIG;IACH,QAAQ,CAAC,kBAAkB,CACvB,kBAAkB,EAAE,MAAM,EAC1B,aAAa,EAAE,MAAM,GACtB,qBAAqB,GAAG,IAAI;IAE/B;;;;;OAKG;IACH,QAAQ,CAAC,kBAAkB,CACvB,kBAAkB,EAAE,MAAM,EAC1B,eAAe,EAAE,qBAAqB,EACtC,aAAa,EAAE,MAAM,GACtB,IAAI;IAEP;;;;OAIG;IACH,QAAQ,CAAC,oBAAoB,CACzB,GAAG,EAAE,MAAM,EACX,aAAa,EAAE,MAAM,GACtB,uBAAuB,GAAG,IAAI;IAEjC;;OAEG;IACH,QAAQ,CAAC,wBAAwB,IAAI,KAAK,CAAC,MAAM,CAAC;IAElD;;;;;OAKG;IACH,QAAQ,CAAC,oBAAoB,CACzB,GAAG,EAAE,MAAM,EACX,KAAK,EAAE,uBAAuB,EAC9B,aAAa,EAAE,MAAM,GACtB,IAAI;IAEP;;;;OAIG;IACH,QAAQ,CAAC,kBAAkB,CACvB,kBAAkB,EAAE,MAAM,EAC1B,aAAa,EAAE,MAAM,GACtB,gBAAgB,GAAG,IAAI;IAE1B;;;;OAIG;IACH,QAAQ,CAAC,kBAAkB,CACvB,kBAAkB,EAAE,MAAM,EAC1B,eAAe,EAAE,gBAAgB,EACjC,aAAa,EAAE,MAAM,GACtB,IAAI;IAEP;;;OAGG;IACH,QAAQ,CAAC,UAAU,CAAC,GAAG,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,GAAG,IAAI;IAE7D;;OAEG;IACH,QAAQ,CAAC,OAAO,IAAI,MAAM,EAAE;IAE5B;;OAEG;IACH,QAAQ,CAAC,cAAc,IAAI,MAAM,EAAE;IAEnC;;OAEG;IACH,QAAQ,CAAC,YAAY,IAAI,SAAS;IAElC;;;;OAIG;IACH,QAAQ,CAAC,qBAAqB,CAC1B,UAAU,EAAE,gBAAgB,EAC5B,sBAAsB,CAAC,EAAE,MAAM,GAChC,MAAM;IAET;;;OAGG;IACH,QAAQ,CAAC,kBAAkB,CAAC,OAAO,EAAE,WAAW,GAAG,MAAM;IAEzD;;;;OAIG;IACH,cAAc,CACV,aAAa,2BAAoB,EACjC,aAAa,EAAE,MAAM,GACtB,WAAW,EAAE;IAQhB;;OAEG;IACH,wBAAwB,CACpB,aAAa,EAAE,aAAa,EAC5B,aAAa,EAAE,MAAM,GACtB,WAAW,GAAG,IAAI;IA8BrB;;;;OAIG;IACH,kBAAkB,CACd,aAAa,EAAE,aAAa,EAC5B,aAAa,EAAE,MAAM,GACtB,WAAW,GAAG,IAAI;IAYrB;;;;;;OAMG;IACH,OAAO,CAAC,mBAAmB;IAe3B,OAAO,CAAC,8BAA8B;IAyDtC,OAAO,CAAC,kCAAkC;IA0C1C,OAAO,CAAC,0BAA0B;IAmElC,OAAO,CAAC,qCAAqC;IA0D7C;;;;;OAKG;IACG,eAAe,CACjB,WAAW,EAAE,WAAW,EACxB,aAAa,EAAE,MAAM,EACrB,IAAI,EAAE,OAAO,EACb,KAAK,EAAE,MAAM,EACb,YAAY,CAAC,EAAE,YAAY,GAC5B,OAAO,CAAC,IAAI,CAAC;IAgEhB;;;;;OAKG;YACW,eAAe;IAmE7B;;;;OAIG;IACH,qBAAqB,CACjB,aAAa,EAAE,aAAa,EAC5B,aAAa,EAAE,MAAM,GACtB,aAAa,EAAE;IA6ElB;;;;;;OAMG;IACH,uBAAuB,CACnB,MAAM,EAAE,mBAAmB,EAC3B,MAAM,EAAE,gBAAgB,EACxB,aAAa,EAAE,MAAM,GACtB,OAAO;IAiGV;;;;OAIG;IACH,wBAAwB,CACpB,MAAM,EAAE,iBAAiB,EACzB,aAAa,EAAE,MAAM,GACtB,gBAAgB;IAyCnB;;;;OAIG;IACH,2BAA2B,CACvB,IAAI,EAAE,MAAM,EACZ,aAAa,EAAE,MAAM,GACtB,uBAAuB,GAAG,IAAI;IA8BjC;;OAEG;IACH,iBAAiB,CAAC,aAAa,EAAE,MAAM,GAAG,IAAI;IAO9C;;;OAGG;IACH,aAAa,CAAC,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,GAAG,IAAI;IAkBhE;;;OAGG;IACH,oBAAoB,CAAC,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,GAAG,IAAI;IAsBvE;;;;OAIG;IACH,iBAAiB,CAAC,GAAG,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,GAAG,IAAI;IA6C3D;;OAEG;IACH,iBAAiB,CAAC,aAAa,EAAE,MAAM,GAAG,OAAO;IAWjD;;;;;;;OAOG;IACH,UAAU,CACN,OAAO,EAAE,WAAW,EACpB,aAAa,EAAE,MAAM,EACrB,SAAS,CAAC,EAAE,SAAS,EACrB,WAAW,CAAC,EAAE,MAAM,GACrB,aAAa,GAAG,IAAI;IAgFvB;;;;OAIG;IACH,mBAAmB,CACf,MAAM,EAAE,gBAAgB,EACxB,aAAa,EAAE,MAAM,EACrB,SAAS,CAAC,EAAE,SAAS,GACtB,GAAG,CAAC,MAAM,EAAE,aAAa,CAAC;IA6B7B;;;;;OAKG;IACH,uBAAuB,CACnB,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,gBAAgB,GACzB,OAAO;IAmBV;;;OAGG;IACH,aAAa,CAAC,GAAG,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,GAAG,IAAI;IAIvD;;;OAGG;IACH,kBAAkB,CAAC,GAAG,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,GAAG,IAAI;IAI5D;;;;;;OAMG;IACH,cAAc,CACV,OAAO,EAAE,WAAW,EACpB,OAAO,EAAE,eAAe,EACxB,SAAS,CAAC,EAAE,SAAS,EACrB,WAAW,CAAC,EAAE,MAAM,GACrB,iBAAiB,GAAG,IAAI;IAyG3B;;;;;;OAMG;IACH,2BAA2B,CACvB,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,gBAAgB,EACxB,uBAAuB,EAAE,OAAO,GACjC,OAAO;IA0CV;;;;OAIG;IACH,uBAAuB,CACnB,MAAM,EAAE,gBAAgB,EACxB,aAAa,EAAE,MAAM,GACtB,iBAAiB,EAAE;IAwBtB;;;;;;;OAOG;IACH,eAAe,CACX,OAAO,EAAE,WAAW,EACpB,QAAQ,EAAE,OAAO,EACjB,aAAa,EAAE,MAAM,EACrB,SAAS,CAAC,EAAE,SAAS,GACtB,kBAAkB,GAAG,IAAI;IAgE5B;;;;OAIG;IACH,4BAA4B,CACxB,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,gBAAgB,GACzB,OAAO;IA4BV;;OAEG;IACH,wBAAwB,CACpB,WAAW,EAAE,MAAM,EACnB,aAAa,EAAE,MAAM,GACtB,iBAAiB,GAAG,IAAI;IA2B3B;;;;OAIG;IACH,iBAAiB,CAAC,WAAW,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,GAAG,OAAO;IAUtE;;;;OAIG;IACH,OAAO,CAAC,kBAAkB;IAU1B;;;;;OAKG;IACH,OAAO,CAAC,kCAAkC;IAQ1C,OAAO,CAAC,oCAAoC;IAO5C;;;;;OAKG;IACH,OAAO,CAAC,SAAS;IAIjB;;;;;OAKG;IACH,OAAO,CAAC,aAAa;IAWrB;;;;;OAKG;IACH,OAAO,CAAC,+BAA+B;IAWvC;;;;OAIG;IACH,OAAO,CAAC,sBAAsB;IAU9B;;;;OAIG;IACH,OAAO,CAAC,gBAAgB;IAkCxB;;;;OAIG;IACH,OAAO,CAAC,mBAAmB;IAU3B;;;;OAIG;IACH,OAAO,CAAC,aAAa;IAOrB;;;;OAIG;IACH,OAAO,CAAC,aAAa;IAOrB;;;;OAIG;IACH,OAAO,CAAC,UAAU;IAOlB;;;;;;;;OAQG;IACH,OAAO,CAAC,6BAA6B;IAwBrC;;;;;OAKG;IACH,OAAO,CAAC,QAAQ;IAIhB,OAAO,CAAC,kBAAkB;IAU1B;;;;OAIG;IACH,OAAO,CAAC,WAAW;IAsBnB;;;;OAIG;IACH,OAAO,CAAC,cAAc;IAUtB,OAAO,CAAC,8BAA8B;IAwBtC,OAAO,CAAC,wBAAwB;IAWhC;;;;OAIG;IACH,OAAO,CAAC,UAAU;IAIlB;;;OAGG;IACH,OAAO,CAAC,aAAa;IAIrB;;;OAGG;IACH,SAAS,CAAC,mBAAmB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO;IAInD;;OAEG;IACH,iCAAiC,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM;IAI5D;;;;OAIG;IACH,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,GAAG,CAAC;CAM9C;AAED,gBAAgB;AAChB,qBAAa,mBAAoB,SAAQ,YAAY;IAC3C,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC;IAMjC,UAAU,IAAI,aAAa;IAMrB,oBAAoB,IAAI,OAAO,CAAC,IAAI,CAAC;IAM3C,oBAAoB,IAAI,aAAa;IAM/B,wBAAwB,IAAI,OAAO,CAAC,IAAI,CAAC;IAM/C,wBAAwB,IAAI,iBAAiB;IAMvC,yBAAyB,IAAI,OAAO,CAAC,IAAI,CAAC;IAMhD,yBAAyB,IAAI,kBAAkB;IAM/C,cAAc,IAAI,IAAI;IAMtB,cAAc,IAAI,iBAAiB;IAMnC,kBAAkB,IAAI,IAAI;IAM1B,kBAAkB,IAAI,qBAAqB;IAM3C,oBAAoB,IAAI,IAAI;IAM5B,oBAAoB,IAAI,uBAAuB,GAAG,IAAI;IAMtD,wBAAwB,IAAI,KAAK,CAAC,MAAM,CAAC;IAMzC,kBAAkB,IAAI,IAAI;IAM1B,kBAAkB,IAAI,gBAAgB;IAMtC,UAAU,IAAI,OAAO;IAMrB,OAAO,IAAI,MAAM,EAAE;IAMnB,cAAc,IAAI,MAAM,EAAE;IAM1B,YAAY,IAAI,SAAS;IAOzB,qBAAqB,CACjB,WAAW,EAAE,gBAAgB,EAC7B,KAAK,CAAC,EAAE,MAAM,GACf,MAAM;IAOT,kBAAkB,IAAI,MAAM;CAM/B"}
1
+ {"version":3,"file":"CacheManager.d.ts","sourceRoot":"","sources":["../../src/cache/CacheManager.ts"],"names":[],"mappings":"AAKA,OAAO,EACH,WAAW,EAGd,MAAM,2BAA2B,CAAC;AAInC,OAAO,EAAE,sBAAsB,EAAE,MAAM,kCAAkC,CAAC;AAC1E,OAAO,EAAE,OAAO,EAAE,MAAM,sBAAsB,CAAC;AAC/C,OAAO,EAAE,uBAAuB,EAAE,MAAM,sCAAsC,CAAC;AAO/E,OAAO,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAC;AAE7C,OAAO,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AAEhE,OAAO,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAC;AAC1D,OAAO,EAAE,kBAAkB,EAAE,MAAM,gDAAgD,CAAC;AAEpF,OAAO,EAAE,iBAAiB,EAAE,MAAM,iCAAiC,CAAC;AACpE,OAAO,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AAC5D,OAAO,EAAE,iBAAiB,EAAE,MAAM,iCAAiC,CAAC;AACpE,OAAO,EAAE,uBAAuB,EAAE,MAAM,uCAAuC,CAAC;AAChF,OAAO,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAC;AACxD,OAAO,EAAE,gBAAgB,EAAE,MAAM,gCAAgC,CAAC;AAClE,OAAO,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AAC5D,OAAO,EAAE,kBAAkB,EAAE,MAAM,kCAAkC,CAAC;AACtE,OAAO,EAAE,qBAAqB,EAAE,MAAM,qCAAqC,CAAC;AAC5E,OAAO,EAAE,gBAAgB,EAAE,MAAM,gCAAgC,CAAC;AAClE,OAAO,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAG7D,OAAO,EACH,aAAa,EACb,gBAAgB,EAChB,iBAAiB,EACjB,gBAAgB,EAEhB,SAAS,EACT,mBAAmB,EACtB,MAAM,uBAAuB,CAAC;AAE/B;;;GAGG;AACH,8BAAsB,YAAa,YAAW,aAAa;IACvD,SAAS,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC3B,SAAS,CAAC,UAAU,EAAE,OAAO,CAAC;IAC9B,SAAS,CAAC,sBAAsB,EAAE,uBAAuB,CAAC;IAE1D,OAAO,CAAC,YAAY,CAAS;IAC7B,OAAO,CAAC,sBAAsB,CAAC,CAAyB;IACxD,SAAS,CAAC,iBAAiB,EAAE,kBAAkB,CAAC;gBAG5C,QAAQ,EAAE,MAAM,EAChB,UAAU,EAAE,OAAO,EACnB,MAAM,EAAE,MAAM,EACd,iBAAiB,EAAE,kBAAkB,EACrC,sBAAsB,EAAE,sBAAsB,GAAG,SAAS,EAC1D,sBAAsB,EAAE,uBAAuB;IAUnD;;;OAGG;IACH,QAAQ,CAAC,UAAU,CACf,UAAU,EAAE,MAAM,EAClB,aAAa,EAAE,MAAM,GACtB,aAAa,GAAG,IAAI;IAEvB;;;;OAIG;IACH,QAAQ,CAAC,UAAU,CACf,OAAO,EAAE,aAAa,EACtB,aAAa,EAAE,MAAM,EACrB,IAAI,EAAE,OAAO,EACb,KAAK,EAAE,MAAM,GACd,OAAO,CAAC,IAAI,CAAC;IAEhB;;;OAGG;IACH,QAAQ,CAAC,oBAAoB,CACzB,UAAU,EAAE,MAAM,EAClB,aAAa,EAAE,MAAM,GACtB,aAAa,GAAG,IAAI;IAEvB;;;;OAIG;IACH,QAAQ,CAAC,oBAAoB,CACzB,OAAO,EAAE,aAAa,EACtB,aAAa,EAAE,MAAM,EACrB,IAAI,EAAE,OAAO,GACd,OAAO,CAAC,IAAI,CAAC;IAEhB;;;OAGG;IACH,QAAQ,CAAC,wBAAwB,CAC7B,cAAc,EAAE,MAAM,EACtB,aAAa,EAAE,MAAM,GACtB,iBAAiB,GAAG,IAAI;IAE3B;;;;;;OAMG;IACH,QAAQ,CAAC,wBAAwB,CAC7B,WAAW,EAAE,iBAAiB,EAC9B,aAAa,EAAE,MAAM,EACrB,IAAI,EAAE,OAAO,EACb,sBAAsB,CAAC,EAAE,MAAM,GAChC,OAAO,CAAC,IAAI,CAAC;IAEhB;;;OAGG;IACH,QAAQ,CAAC,yBAAyB,CAC9B,eAAe,EAAE,MAAM,EACvB,aAAa,EAAE,MAAM,GACtB,kBAAkB,GAAG,IAAI;IAE5B;;;;OAIG;IACH,QAAQ,CAAC,yBAAyB,CAC9B,YAAY,EAAE,kBAAkB,EAChC,aAAa,EAAE,MAAM,EACrB,IAAI,EAAE,OAAO,GACd,OAAO,CAAC,IAAI,CAAC;IAEhB;;;;OAIG;IACH,QAAQ,CAAC,cAAc,CACnB,cAAc,EAAE,MAAM,EACtB,aAAa,EAAE,MAAM,GACtB,iBAAiB,GAAG,IAAI;IAE3B;;;OAGG;IACH,QAAQ,CAAC,cAAc,CACnB,WAAW,EAAE,iBAAiB,EAC9B,aAAa,EAAE,MAAM,GACtB,IAAI;IAEP;;;;OAIG;IACH,QAAQ,CAAC,kBAAkB,CACvB,kBAAkB,EAAE,MAAM,EAC1B,aAAa,EAAE,MAAM,GACtB,qBAAqB,GAAG,IAAI;IAE/B;;;;;OAKG;IACH,QAAQ,CAAC,kBAAkB,CACvB,kBAAkB,EAAE,MAAM,EAC1B,eAAe,EAAE,qBAAqB,EACtC,aAAa,EAAE,MAAM,GACtB,IAAI;IAEP;;;;OAIG;IACH,QAAQ,CAAC,oBAAoB,CACzB,GAAG,EAAE,MAAM,EACX,aAAa,EAAE,MAAM,GACtB,uBAAuB,GAAG,IAAI;IAEjC;;OAEG;IACH,QAAQ,CAAC,wBAAwB,IAAI,KAAK,CAAC,MAAM,CAAC;IAElD;;;;;OAKG;IACH,QAAQ,CAAC,oBAAoB,CACzB,GAAG,EAAE,MAAM,EACX,KAAK,EAAE,uBAAuB,EAC9B,aAAa,EAAE,MAAM,GACtB,IAAI;IAEP;;;;OAIG;IACH,QAAQ,CAAC,kBAAkB,CACvB,kBAAkB,EAAE,MAAM,EAC1B,aAAa,EAAE,MAAM,GACtB,gBAAgB,GAAG,IAAI;IAE1B;;;;OAIG;IACH,QAAQ,CAAC,kBAAkB,CACvB,kBAAkB,EAAE,MAAM,EAC1B,eAAe,EAAE,gBAAgB,EACjC,aAAa,EAAE,MAAM,GACtB,IAAI;IAEP;;;OAGG;IACH,QAAQ,CAAC,UAAU,CAAC,GAAG,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,GAAG,IAAI;IAE7D;;OAEG;IACH,QAAQ,CAAC,OAAO,IAAI,MAAM,EAAE;IAE5B;;OAEG;IACH,QAAQ,CAAC,cAAc,IAAI,MAAM,EAAE;IAEnC;;OAEG;IACH,QAAQ,CAAC,YAAY,IAAI,SAAS;IAElC;;;;OAIG;IACH,QAAQ,CAAC,qBAAqB,CAC1B,UAAU,EAAE,gBAAgB,EAC5B,sBAAsB,CAAC,EAAE,MAAM,GAChC,MAAM;IAET;;;OAGG;IACH,QAAQ,CAAC,kBAAkB,CAAC,OAAO,EAAE,WAAW,GAAG,MAAM;IAEzD;;;;OAIG;IACH,cAAc,CACV,aAAa,2BAAoB,EACjC,aAAa,EAAE,MAAM,GACtB,WAAW,EAAE;IAQhB;;OAEG;IACH,wBAAwB,CACpB,aAAa,EAAE,aAAa,EAC5B,aAAa,EAAE,MAAM,GACtB,WAAW,GAAG,IAAI;IA8BrB;;;;OAIG;IACH,kBAAkB,CACd,aAAa,EAAE,aAAa,EAC5B,aAAa,EAAE,MAAM,GACtB,WAAW,GAAG,IAAI;IAYrB;;;;;;OAMG;IACH,OAAO,CAAC,mBAAmB;IAe3B,OAAO,CAAC,8BAA8B;IAyDtC,OAAO,CAAC,kCAAkC;IA0C1C,OAAO,CAAC,0BAA0B;IAmElC,OAAO,CAAC,qCAAqC;IA0D7C;;;;;OAKG;IACG,eAAe,CACjB,WAAW,EAAE,WAAW,EACxB,aAAa,EAAE,MAAM,EACrB,IAAI,EAAE,OAAO,EACb,KAAK,EAAE,MAAM,EACb,YAAY,CAAC,EAAE,YAAY,GAC5B,OAAO,CAAC,IAAI,CAAC;IAgEhB;;;;;OAKG;YACW,eAAe;IA2E7B;;;;OAIG;IACH,qBAAqB,CACjB,aAAa,EAAE,aAAa,EAC5B,aAAa,EAAE,MAAM,GACtB,aAAa,EAAE;IA6ElB;;;;;;OAMG;IACH,uBAAuB,CACnB,MAAM,EAAE,mBAAmB,EAC3B,MAAM,EAAE,gBAAgB,EACxB,aAAa,EAAE,MAAM,GACtB,OAAO;IAiGV;;;;OAIG;IACH,wBAAwB,CACpB,MAAM,EAAE,iBAAiB,EACzB,aAAa,EAAE,MAAM,GACtB,gBAAgB;IAyCnB;;;;OAIG;IACH,2BAA2B,CACvB,IAAI,EAAE,MAAM,EACZ,aAAa,EAAE,MAAM,GACtB,uBAAuB,GAAG,IAAI;IA8BjC;;OAEG;IACH,iBAAiB,CAAC,aAAa,EAAE,MAAM,GAAG,IAAI;IAO9C;;;OAGG;IACH,aAAa,CAAC,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,GAAG,IAAI;IAuBhE;;;;OAIG;IACH,oBAAoB,CAAC,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,GAAG,IAAI;IAkBvE;;;;OAIG;IACH,iBAAiB,CAAC,GAAG,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,GAAG,IAAI;IAU3D;;;;OAIG;IACG,mCAAmC,CACrC,GAAG,EAAE,MAAM,EACX,aAAa,EAAE,MAAM,EACrB,cAAc,CAAC,EAAE,MAAM,GACxB,OAAO,CAAC,IAAI,CAAC;IAWhB,OAAO,CAAC,2BAA2B;YAiBrB,kCAAkC;IA6ChD,OAAO,CAAC,2BAA2B;IAanC;;OAEG;IACH,iBAAiB,CAAC,aAAa,EAAE,MAAM,GAAG,OAAO;IAWjD;;;;;;;OAOG;IACH,UAAU,CACN,OAAO,EAAE,WAAW,EACpB,aAAa,EAAE,MAAM,EACrB,SAAS,CAAC,EAAE,SAAS,EACrB,WAAW,CAAC,EAAE,MAAM,GACrB,aAAa,GAAG,IAAI;IAgFvB;;;;OAIG;IACH,mBAAmB,CACf,MAAM,EAAE,gBAAgB,EACxB,aAAa,EAAE,MAAM,EACrB,SAAS,CAAC,EAAE,SAAS,GACtB,GAAG,CAAC,MAAM,EAAE,aAAa,CAAC;IA6B7B;;;;;OAKG;IACH,uBAAuB,CACnB,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,gBAAgB,GACzB,OAAO;IAmBV;;;OAGG;IACH,aAAa,CAAC,GAAG,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,GAAG,IAAI;IAIvD;;;OAGG;IACH,kBAAkB,CAAC,GAAG,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,GAAG,IAAI;IAI5D;;;;;;OAMG;IACH,cAAc,CACV,OAAO,EAAE,WAAW,EACpB,OAAO,EAAE,eAAe,EACxB,SAAS,CAAC,EAAE,SAAS,EACrB,WAAW,CAAC,EAAE,MAAM,GACrB,iBAAiB,GAAG,IAAI;IA6G3B;;;;;;OAMG;IACH,2BAA2B,CACvB,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,gBAAgB,EACxB,uBAAuB,EAAE,OAAO,GACjC,OAAO;IA0CV;;;;OAIG;IACH,uBAAuB,CACnB,MAAM,EAAE,gBAAgB,EACxB,aAAa,EAAE,MAAM,GACtB,iBAAiB,EAAE;IAwBtB;;;;;;;OAOG;IACH,eAAe,CACX,OAAO,EAAE,WAAW,EACpB,QAAQ,EAAE,OAAO,EACjB,aAAa,EAAE,MAAM,EACrB,SAAS,CAAC,EAAE,SAAS,GACtB,kBAAkB,GAAG,IAAI;IAgE5B;;;;OAIG;IACH,4BAA4B,CACxB,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,gBAAgB,GACzB,OAAO;IA4BV;;OAEG;IACH,wBAAwB,CACpB,WAAW,EAAE,MAAM,EACnB,aAAa,EAAE,MAAM,GACtB,iBAAiB,GAAG,IAAI;IA2B3B;;;;OAIG;IACH,iBAAiB,CAAC,WAAW,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,GAAG,OAAO;IAUtE;;;;OAIG;IACH,OAAO,CAAC,kBAAkB;IAU1B;;;;;OAKG;IACH,OAAO,CAAC,kCAAkC;IAQ1C,OAAO,CAAC,oCAAoC;IAO5C;;;;;OAKG;IACH,OAAO,CAAC,SAAS;IAIjB;;;;;OAKG;IACH,OAAO,CAAC,aAAa;IAWrB;;;;;OAKG;IACH,OAAO,CAAC,+BAA+B;IAWvC;;;;OAIG;IACH,OAAO,CAAC,sBAAsB;IAU9B;;;;OAIG;IACH,OAAO,CAAC,gBAAgB;IAkCxB;;;;OAIG;IACH,OAAO,CAAC,mBAAmB;IAU3B;;;;OAIG;IACH,OAAO,CAAC,aAAa;IAOrB;;;;OAIG;IACH,OAAO,CAAC,aAAa;IAOrB;;;;OAIG;IACH,OAAO,CAAC,UAAU;IAOlB;;;;;;;;OAQG;IACH,OAAO,CAAC,6BAA6B;IAwBrC;;;;;OAKG;IACH,OAAO,CAAC,QAAQ;IAIhB,OAAO,CAAC,kBAAkB;IAU1B;;;;OAIG;IACH,OAAO,CAAC,WAAW;IAsBnB;;;;OAIG;IACH,OAAO,CAAC,cAAc;IAUtB,OAAO,CAAC,8BAA8B;IAwBtC,OAAO,CAAC,wBAAwB;IAWhC;;;;OAIG;IACH,OAAO,CAAC,UAAU;IAIlB;;;OAGG;IACH,OAAO,CAAC,aAAa;IAIrB;;;OAGG;IACH,SAAS,CAAC,mBAAmB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO;IAInD;;OAEG;IACH,iCAAiC,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM;IAI5D;;;;OAIG;IACH,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,GAAG,CAAC;CAM9C;AAED,gBAAgB;AAChB,qBAAa,mBAAoB,SAAQ,YAAY;IAC3C,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC;IAMjC,UAAU,IAAI,aAAa;IAMrB,oBAAoB,IAAI,OAAO,CAAC,IAAI,CAAC;IAM3C,oBAAoB,IAAI,aAAa;IAM/B,wBAAwB,IAAI,OAAO,CAAC,IAAI,CAAC;IAM/C,wBAAwB,IAAI,iBAAiB;IAMvC,yBAAyB,IAAI,OAAO,CAAC,IAAI,CAAC;IAMhD,yBAAyB,IAAI,kBAAkB;IAM/C,cAAc,IAAI,IAAI;IAMtB,cAAc,IAAI,iBAAiB;IAMnC,kBAAkB,IAAI,IAAI;IAM1B,kBAAkB,IAAI,qBAAqB;IAM3C,oBAAoB,IAAI,IAAI;IAM5B,oBAAoB,IAAI,uBAAuB,GAAG,IAAI;IAMtD,wBAAwB,IAAI,KAAK,CAAC,MAAM,CAAC;IAMzC,kBAAkB,IAAI,IAAI;IAM1B,kBAAkB,IAAI,gBAAgB;IAMtC,UAAU,IAAI,OAAO;IAMrB,OAAO,IAAI,MAAM,EAAE;IAMnB,cAAc,IAAI,MAAM,EAAE;IAM1B,YAAY,IAAI,SAAS;IAOzB,qBAAqB,CACjB,WAAW,EAAE,gBAAgB,EAC7B,KAAK,CAAC,EAAE,MAAM,GACf,MAAM;IAOT,kBAAkB,IAAI,MAAM;CAM/B"}
@@ -161,13 +161,13 @@ export interface ICacheManager {
161
161
  */
162
162
  removeAllAccounts(correlationId: string): void;
163
163
  /**
164
- * returns a boolean if the given account is removed
164
+ * Removes the account and its associated tokens.
165
165
  * @param account
166
166
  * @param correlationId
167
167
  */
168
168
  removeAccount(account: AccountInfo, correlationId: string): void;
169
169
  /**
170
- * returns a boolean if the given account is removed
170
+ * Removes access and refresh tokens, preserving the account and its ID tokens.
171
171
  * @param account
172
172
  * @param correlationId
173
173
  */
@@ -31,19 +31,36 @@ export type DpopResourceProofParams = {
31
31
  ath: string;
32
32
  nonce?: string;
33
33
  };
34
+ /**
35
+ * HTTP resource context used by a DPoP-bound request.
36
+ * @internal
37
+ */
38
+ export type DpopResourceRequestContext = {
39
+ htu: string;
40
+ htm: string;
41
+ };
42
+ /**
43
+ * Resource request context and access token used to generate a DPoP proof.
44
+ * Exported for use by MSAL Browser and unsupported for direct consumers.
45
+ * @internal
46
+ */
34
47
  export type GenerateDpopResourceProofParams = {
35
48
  htu?: string;
36
49
  htm?: string;
37
50
  nonce?: string;
38
51
  accessToken: string;
39
52
  };
53
+ /**
54
+ * Validates and normalizes the HTTP resource context for a DPoP-bound request.
55
+ * @internal
56
+ */
57
+ export declare function normalizeDpopResourceRequestContext(context: DpopResourceRequestContext, correlationId?: string): DpopResourceRequestContext;
40
58
  /**
41
59
  * Builds RFC 9449 DPoP proof JWT payloads for token-endpoint and
42
60
  * resource-endpoint proof bindings.
43
61
  *
44
- * Not exported from any public package entry point.
45
- * This helper is internal-only until DPoP is wired into acquisition flows
46
- * in a subsequent work item.
62
+ * Exported from package entry points for use by MSAL Browser.
63
+ * This helper remains an unsupported internal API for direct consumers.
47
64
  *
48
65
  * DPoP proofs do not contain SHR fields (at, ts, m, u, p, q).
49
66
  * @internal
@@ -1 +1 @@
1
- {"version":3,"file":"DpopProofGenerator.d.ts","sourceRoot":"","sources":["../../src/crypto/DpopProofGenerator.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,OAAO,EAA0B,MAAM,cAAc,CAAC;AAC/D,OAAO,EAAE,uBAAuB,EAAE,MAAM,8BAA8B,CAAC;AASvE;;;;GAIG;AACH,MAAM,MAAM,eAAe,GAAG;IAC1B,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,GAAG,CAAC,EAAE,MAAM,CAAC;CAChB,CAAC;AAEF;;;GAGG;AACH,MAAM,MAAM,oBAAoB,GAAG;IAC/B,aAAa,EAAE,MAAM,CAAC;IACtB,KAAK,CAAC,EAAE,MAAM,CAAC;CAClB,CAAC;AAEF;;;GAGG;AACH,MAAM,MAAM,uBAAuB,GAAG;IAClC,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,CAAC,EAAE,MAAM,CAAC;CAClB,CAAC;AAEF,MAAM,MAAM,+BAA+B,GAAG;IAC1C,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,MAAM,CAAC;CACvB,CAAC;AA4EF;;;;;;;;;;GAUG;AACH,qBAAa,kBAAkB;IAC3B,OAAO,CAAC,WAAW,CAAU;IAC7B,OAAO,CAAC,sBAAsB,CAA0B;gBAGpD,WAAW,EAAE,OAAO,EACpB,sBAAsB,EAAE,uBAAuB;IAMnD;;;OAGG;IACG,WAAW,CAAC,aAAa,GAAE,MAAW,GAAG,OAAO,CAAC,MAAM,CAAC;IAQ9D;;;;;OAKG;IACH,qBAAqB,CACjB,MAAM,EAAE,oBAAoB,EAC5B,aAAa,GAAE,MAAW,GAC3B,eAAe;IAclB;;OAEG;IACG,kBAAkB,CACpB,MAAM,EAAE,oBAAoB,EAC5B,KAAK,EAAE,MAAM,EACb,aAAa,GAAE,MAAW,GAC3B,OAAO,CAAC,MAAM,CAAC;IAQlB;;;;;;OAMG;IACH,wBAAwB,CACpB,MAAM,EAAE,uBAAuB,EAC/B,aAAa,GAAE,MAAW,GAC3B,eAAe;IAelB;;OAEG;IACG,qBAAqB,CACvB,MAAM,EAAE,+BAA+B,EACvC,KAAK,EAAE,MAAM,EACb,aAAa,GAAE,MAAW,GAC3B,OAAO,CAAC,MAAM,CAAC;YAyBJ,aAAa;CAkB9B"}
1
+ {"version":3,"file":"DpopProofGenerator.d.ts","sourceRoot":"","sources":["../../src/crypto/DpopProofGenerator.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,OAAO,EAA0B,MAAM,cAAc,CAAC;AAC/D,OAAO,EAAE,uBAAuB,EAAE,MAAM,8BAA8B,CAAC;AASvE;;;;GAIG;AACH,MAAM,MAAM,eAAe,GAAG;IAC1B,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,GAAG,CAAC,EAAE,MAAM,CAAC;CAChB,CAAC;AAEF;;;GAGG;AACH,MAAM,MAAM,oBAAoB,GAAG;IAC/B,aAAa,EAAE,MAAM,CAAC;IACtB,KAAK,CAAC,EAAE,MAAM,CAAC;CAClB,CAAC;AAEF;;;GAGG;AACH,MAAM,MAAM,uBAAuB,GAAG;IAClC,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,CAAC,EAAE,MAAM,CAAC;CAClB,CAAC;AAEF;;;GAGG;AACH,MAAM,MAAM,0BAA0B,GAAG;IACrC,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;CACf,CAAC;AAEF;;;;GAIG;AACH,MAAM,MAAM,+BAA+B,GAAG;IAC1C,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,MAAM,CAAC;CACvB,CAAC;AA4EF;;;GAGG;AACH,wBAAgB,mCAAmC,CAC/C,OAAO,EAAE,0BAA0B,EACnC,aAAa,GAAE,MAAW,GAC3B,0BAA0B,CAK5B;AAED;;;;;;;;;GASG;AACH,qBAAa,kBAAkB;IAC3B,OAAO,CAAC,WAAW,CAAU;IAC7B,OAAO,CAAC,sBAAsB,CAA0B;gBAGpD,WAAW,EAAE,OAAO,EACpB,sBAAsB,EAAE,uBAAuB;IAMnD;;;OAGG;IACG,WAAW,CAAC,aAAa,GAAE,MAAW,GAAG,OAAO,CAAC,MAAM,CAAC;IAQ9D;;;;;OAKG;IACH,qBAAqB,CACjB,MAAM,EAAE,oBAAoB,EAC5B,aAAa,GAAE,MAAW,GAC3B,eAAe;IAclB;;OAEG;IACG,kBAAkB,CACpB,MAAM,EAAE,oBAAoB,EAC5B,KAAK,EAAE,MAAM,EACb,aAAa,GAAE,MAAW,GAC3B,OAAO,CAAC,MAAM,CAAC;IAQlB;;;;;;OAMG;IACH,wBAAwB,CACpB,MAAM,EAAE,uBAAuB,EAC/B,aAAa,GAAE,MAAW,GAC3B,eAAe;IAmBlB;;OAEG;IACG,qBAAqB,CACvB,MAAM,EAAE,+BAA+B,EACvC,KAAK,EAAE,MAAM,EACb,aAAa,GAAE,MAAW,GAC3B,OAAO,CAAC,MAAM,CAAC;YAyBJ,aAAa;CAkB9B"}
@@ -26,6 +26,14 @@ export interface ITokenBindingKeyManager {
26
26
  * @param correlationId - Request correlation identifier.
27
27
  */
28
28
  removeTokenBindingKey(kid: string, correlationId: string): Promise<void>;
29
+ /**
30
+ * Returns whether a token-binding key is available to the current context.
31
+ */
32
+ hasTokenBindingKey?(kid: string, correlationId: string): Promise<boolean>;
33
+ /**
34
+ * Returns whether a token-binding key is available in persistent storage.
35
+ */
36
+ isTokenBindingKeyPersisted?(kid: string, correlationId: string): Promise<boolean>;
29
37
  /**
30
38
  * Gets a token-binding public key as a JWK by identifier.
31
39
  * @param kid - Token-binding key identifier.
@@ -1 +1 @@
1
- {"version":3,"file":"ITokenBindingKeyManager.d.ts","sourceRoot":"","sources":["../../src/crypto/ITokenBindingKeyManager.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAE9D;;;;;GAKG;AACH,MAAM,MAAM,qCAAqC,GAAG;IAChD,mBAAmB,EAAE,MAAM,CAAC;IAC5B,wBAAwB,EAAE,MAAM,CAAC;IACjC,aAAa,EAAE,MAAM,CAAC;CACzB,CAAC;AAEF;;;GAGG;AACH,MAAM,WAAW,uBAAuB;IACpC;;;OAGG;IACH,wBAAwB,CACpB,OAAO,EAAE,qCAAqC,GAC/C,OAAO,CAAC,MAAM,CAAC,CAAC;IACnB;;;;OAIG;IACH,qBAAqB,CAAC,GAAG,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACzE;;;;OAIG;IACH,2BAA2B,CACvB,GAAG,EAAE,MAAM,EACX,aAAa,EAAE,MAAM,GACtB,OAAO,CAAC,gBAAgB,CAAC,CAAC;CAChC;AAED;;;;GAIG;AACH,eAAO,MAAM,iCAAiC,EAAE,uBA2B/C,CAAC"}
1
+ {"version":3,"file":"ITokenBindingKeyManager.d.ts","sourceRoot":"","sources":["../../src/crypto/ITokenBindingKeyManager.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAE9D;;;;;GAKG;AACH,MAAM,MAAM,qCAAqC,GAAG;IAChD,mBAAmB,EAAE,MAAM,CAAC;IAC5B,wBAAwB,EAAE,MAAM,CAAC;IACjC,aAAa,EAAE,MAAM,CAAC;CACzB,CAAC;AAEF;;;GAGG;AACH,MAAM,WAAW,uBAAuB;IACpC;;;OAGG;IACH,wBAAwB,CACpB,OAAO,EAAE,qCAAqC,GAC/C,OAAO,CAAC,MAAM,CAAC,CAAC;IACnB;;;;OAIG;IACH,qBAAqB,CAAC,GAAG,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACzE;;OAEG;IACH,kBAAkB,CAAC,CAAC,GAAG,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAC1E;;OAEG;IACH,0BAA0B,CAAC,CACvB,GAAG,EAAE,MAAM,EACX,aAAa,EAAE,MAAM,GACtB,OAAO,CAAC,OAAO,CAAC,CAAC;IACpB;;;;OAIG;IACH,2BAA2B,CACvB,GAAG,EAAE,MAAM,EACX,aAAa,EAAE,MAAM,GACtB,OAAO,CAAC,gBAAgB,CAAC,CAAC;CAChC;AAED;;;;GAIG;AACH,eAAO,MAAM,iCAAiC,EAAE,uBA2B/C,CAAC"}
@@ -8,4 +8,6 @@ export { IPerformanceMeasurement } from "./telemetry/performance/IPerformanceMea
8
8
  export { PerformanceClient } from "./telemetry/performance/PerformanceClient.js";
9
9
  export { StubPerformanceClient } from "./telemetry/performance/StubPerformanceClient.js";
10
10
  export { PopTokenGenerator } from "./crypto/PopTokenGenerator.js";
11
+ export { DpopProofGenerator, normalizeDpopResourceRequestContext, } from "./crypto/DpopProofGenerator.js";
12
+ export type { DpopResourceRequestContext } from "./crypto/DpopProofGenerator.js";
11
13
  //# sourceMappingURL=exports-browser-only.d.ts.map
@@ -1 +1 @@
1
- {"version":3,"file":"exports-browser-only.d.ts","sourceRoot":"","sources":["../src/exports-browser-only.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,iBAAiB,EAAE,UAAU,EAAE,MAAM,+BAA+B,CAAC;AAC9E,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AACpD,OAAO,EAAE,qBAAqB,EAAE,MAAM,qCAAqC,CAAC;AAC5E,OAAO,EACH,kBAAkB,EAClB,2BAA2B,EAC3B,0BAA0B,GAC7B,MAAM,+CAA+C,CAAC;AACvD,OAAO,EACH,SAAS,EACT,gBAAgB,EAChB,sBAAsB,EACtB,cAAc,GACjB,MAAM,6CAA6C,CAAC;AACrD,OAAO,KAAK,iBAAiB,MAAM,8CAA8C,CAAC;AAClF,OAAO,EAAE,uBAAuB,EAAE,MAAM,oDAAoD,CAAC;AAC7F,OAAO,EAAE,iBAAiB,EAAE,MAAM,8CAA8C,CAAC;AACjF,OAAO,EAAE,qBAAqB,EAAE,MAAM,kDAAkD,CAAC;AAEzF,OAAO,EAAE,iBAAiB,EAAE,MAAM,+BAA+B,CAAC"}
1
+ {"version":3,"file":"exports-browser-only.d.ts","sourceRoot":"","sources":["../src/exports-browser-only.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,iBAAiB,EAAE,UAAU,EAAE,MAAM,+BAA+B,CAAC;AAC9E,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AACpD,OAAO,EAAE,qBAAqB,EAAE,MAAM,qCAAqC,CAAC;AAC5E,OAAO,EACH,kBAAkB,EAClB,2BAA2B,EAC3B,0BAA0B,GAC7B,MAAM,+CAA+C,CAAC;AACvD,OAAO,EACH,SAAS,EACT,gBAAgB,EAChB,sBAAsB,EACtB,cAAc,GACjB,MAAM,6CAA6C,CAAC;AACrD,OAAO,KAAK,iBAAiB,MAAM,8CAA8C,CAAC;AAClF,OAAO,EAAE,uBAAuB,EAAE,MAAM,oDAAoD,CAAC;AAC7F,OAAO,EAAE,iBAAiB,EAAE,MAAM,8CAA8C,CAAC;AACjF,OAAO,EAAE,qBAAqB,EAAE,MAAM,kDAAkD,CAAC;AAEzF,OAAO,EAAE,iBAAiB,EAAE,MAAM,+BAA+B,CAAC;AAClE,OAAO,EACH,kBAAkB,EAClB,mCAAmC,GACtC,MAAM,gCAAgC,CAAC;AACxC,YAAY,EAAE,0BAA0B,EAAE,MAAM,gCAAgC,CAAC"}
@@ -1,3 +1,3 @@
1
1
  export declare const name = "@azure/msal-common";
2
- export declare const version = "16.15.0";
2
+ export declare const version = "16.16.1";
3
3
  //# sourceMappingURL=packageMetadata.d.ts.map