@azure/msal-common 16.5.2 → 16.6.0

package/lib/index-node.cjs

@@ -1,8 +1,8 @@
-/*! @azure/msal-common v16.5.2 2026-04-28 */
+/*! @azure/msal-common v16.6.0 2026-05-07 */
 'use strict';
 'use strict';
 
-var indexNode = require('./index-node-ByMjZ1FK.js');
+var indexNode = require('./index-node-BtcbvYTx.js');
 
 
 

package/lib/index.cjs

@@ -1,8 +1,8 @@
-/*! @azure/msal-common v16.5.2 2026-04-28 */
+/*! @azure/msal-common v16.6.0 2026-05-07 */
 'use strict';
 'use strict';
 
-var indexNode = require('./index-node-ByMjZ1FK.js');
+var indexNode = require('./index-node-BtcbvYTx.js');
 var indexBrowser = require('./index-browser.cjs');
 
 

package/node/package.json

@@ -1,5 +1,5 @@
 {
   "main": "../lib/index-node.cjs",
   "module": "../dist/index-node.mjs",
-  "types": "../lib/types/index-node.d.ts"
+  "types": "../types/index-node.d.ts"
 }

package/package.json

@@ -10,7 +10,7 @@
     "type": "git",
     "url": "https://github.com/AzureAD/microsoft-authentication-library-for-js.git"
   },
-  "version": "16.5.2",
+  "version": "16.6.0",
   "description": "Microsoft Authentication Library for js",
   "keywords": [
     "implicit",
@@ -25,35 +25,35 @@
   "type": "module",
   "main": "./lib/index.cjs",
   "module": "./dist/index.mjs",
-  "types": "./dist/index.d.ts",
+  "types": "./types/index.d.ts",
   "exports": {
     "./browser": {
       "import": {
-        "types": "./dist-browser/index-browser.d.ts",
+        "types": "./types/index-browser.d.ts",
         "default": "./dist-browser/index-browser.mjs"
       },
       "require": {
-        "types": "./lib/types/index-browser.d.ts",
+        "types": "./types/index-browser.d.cts",
         "default": "./lib/index-browser.cjs"
       }
     },
     "./node": {
       "import": {
-        "types": "./dist/index-node.d.ts",
+        "types": "./types/index-node.d.ts",
         "default": "./dist/index-node.mjs"
       },
       "require": {
-        "types": "./lib/types/index-node.d.ts",
+        "types": "./types/index-node.d.cts",
         "default": "./lib/index-node.cjs"
       }
     },
     ".": {
       "import": {
-        "types": "./dist/index.d.ts",
+        "types": "./types/index.d.ts",
         "default": "./dist/index.mjs"
       },
       "require": {
-        "types": "./lib/types/index.d.ts",
+        "types": "./types/index.d.cts",
         "default": "./lib/index.cjs"
       }
     },
@@ -68,20 +68,22 @@
   "files": [
     "dist",
     "dist-browser",
+    "types",
     "lib",
     "src",
     "node",
     "browser"
   ],
   "scripts": {
-    "clean": "shx rm -rf dist dist-browser lib",
+    "clean": "shx rm -rf dist dist-browser types lib",
     "clean:coverage": "rimraf ../../.nyc_output/*",
     "lint": "eslint src --ext .ts",
     "lint:fix": "npm run lint -- --fix",
     "test": "jest",
     "test:coverage": "jest --coverage",
     "test:coverage:only": "npm run clean:coverage && npm run test:coverage",
-    "build:modules": "rollup -c --strictDeprecations --bundleConfigAsCjs",
+    "build:modules": "rollup -c --strictDeprecations --bundleConfigAsCjs && npm run build:types",
+    "build:types": "tsc -p tsconfig.build.types.json",
     "build:modules:watch": "rollup -cw --bundleConfigAsCjs",
     "build": "npm run clean && npm run build:modules",
     "build:debug": "npm run clean && cross-env MSAL_MINIFY_LOGS=false npm run build:modules",

package/src/packageMetadata.ts

@@ -1,3 +1,3 @@
 /* eslint-disable header/header */
 export const name = "@azure/msal-common";
-export const version = "16.5.2";
+export const version = "16.6.0";

package/types/index-browser.d.cts

@@ -0,0 +1 @@
+export * from "./index-browser.js";

package/types/index-node.d.cts

@@ -0,0 +1 @@
+export * from "./index-node.js";

package/types/index.d.cts

@@ -0,0 +1 @@
+export * from "./index.js";

package/types/packageMetadata.d.ts

@@ -0,0 +1,3 @@
+export declare const name = "@azure/msal-common";
+export declare const version = "16.6.0";
+//# sourceMappingURL=packageMetadata.d.ts.map

package/dist/account/AccountInfo.d.ts

@@ -1,73 +0,0 @@
-import { TokenClaims } from "./TokenClaims.js";
-export type DataBoundary = "EU" | "None";
-/**
- * Account object with the following signature:
- * - homeAccountId          - Home account identifier for this account object
- * - environment            - Entity which issued the token represented by the domain of the issuer (e.g. login.microsoftonline.com)
- * - tenantId               - Full tenant or organizational id that this account belongs to
- * - username               - preferred_username claim of the id_token that represents this account
- * - upn                    - The user's UPN used to populate the account username in cases where preferred_username is not present in the ID token claims.
- * - localAccountId         - Local, tenant-specific account identifer for this account object, usually used in legacy cases
- * - name                   - Full name for the account, including given name and family name
- * - idToken                - raw ID token
- * - idTokenClaims          - Object contains claims from ID token
- * - nativeAccountId        - The user's native account ID
- * - tenantProfiles         - Map of tenant profile objects for each tenant that the account has authenticated with in the browser
- * - dataBoundary           - Data boundary extracted from clientInfo
- */
-export type AccountInfo = {
-    homeAccountId: string;
-    environment: string;
-    tenantId: string;
-    username: string;
-    localAccountId: string;
-    loginHint?: string;
-    name?: string;
-    upn?: string;
-    idToken?: string;
-    idTokenClaims?: TokenClaims & {
-        [key: string]: string | number | string[] | object | undefined | unknown;
-    };
-    nativeAccountId?: string;
-    authorityType?: string;
-    tenantProfiles?: Map<string, TenantProfile>;
-    dataBoundary?: DataBoundary;
-};
-/**
- * Account details that vary across tenants for the same user
- */
-export type TenantProfile = Pick<AccountInfo, "tenantId" | "localAccountId" | "name" | "username" | "loginHint" | "upn"> & {
-    /**
-     * - isHomeTenant           - True if this is the home tenant profile of the account, false if it's a guest tenant profile
-     */
-    isHomeTenant?: boolean;
-};
-export type ActiveAccountFilters = {
-    homeAccountId: string;
-    localAccountId: string;
-    tenantId?: string;
-};
-/**
- * Returns true if tenantId matches the utid portion of homeAccountId
- * @param tenantId
- * @param homeAccountId
- * @returns
- */
-export declare function tenantIdMatchesHomeTenant(tenantId?: string, homeAccountId?: string): boolean;
-/**
- * Build tenant profile
- * @param homeAccountId - Home account identifier for this account object
- * @param localAccountId - Local account identifer for this account object
- * @param tenantId - Full tenant or organizational id that this account belongs to
- * @param idTokenClaims - Claims from the ID token
- * @returns
- */
-export declare function buildTenantProfile(homeAccountId: string, localAccountId: string, tenantId: string, idTokenClaims?: TokenClaims): TenantProfile;
-/**
- * Replaces account info that varies by tenant profile sourced from the ID token claims passed in with the tenant-specific account info
- * @param baseAccountInfo
- * @param idTokenClaims
- * @returns
- */
-export declare function updateAccountTenantProfileData(baseAccountInfo: AccountInfo, tenantProfile?: TenantProfile, idTokenClaims?: TokenClaims, idTokenSecret?: string): AccountInfo;
-//# sourceMappingURL=AccountInfo.d.ts.map

package/dist/account/AccountInfo.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"AccountInfo.d.ts","sourceRoot":"","sources":["../../src/account/AccountInfo.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAE/C,MAAM,MAAM,YAAY,GAAG,IAAI,GAAG,MAAM,CAAC;AAEzC;;;;;;;;;;;;;;GAcG;AACH,MAAM,MAAM,WAAW,GAAG;IACtB,aAAa,EAAE,MAAM,CAAC;IACtB,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,cAAc,EAAE,MAAM,CAAC;IACvB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,aAAa,CAAC,EAAE,WAAW,GAAG;QAC1B,CAAC,GAAG,EAAE,MAAM,GACN,MAAM,GACN,MAAM,GACN,MAAM,EAAE,GACR,MAAM,GACN,SAAS,GACT,OAAO,CAAC;KACjB,CAAC;IACF,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,cAAc,CAAC,EAAE,GAAG,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;IAC5C,YAAY,CAAC,EAAE,YAAY,CAAC;CAC/B,CAAC;AAEF;;GAEG;AACH,MAAM,MAAM,aAAa,GAAG,IAAI,CAC5B,WAAW,EACX,UAAU,GAAG,gBAAgB,GAAG,MAAM,GAAG,UAAU,GAAG,WAAW,GAAG,KAAK,CAC5E,GAAG;IACA;;OAEG;IACH,YAAY,CAAC,EAAE,OAAO,CAAC;CAC1B,CAAC;AAEF,MAAM,MAAM,oBAAoB,GAAG;IAC/B,aAAa,EAAE,MAAM,CAAC;IACtB,cAAc,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACrB,CAAC;AAEF;;;;;GAKG;AACH,wBAAgB,yBAAyB,CACrC,QAAQ,CAAC,EAAE,MAAM,EACjB,aAAa,CAAC,EAAE,MAAM,GACvB,OAAO,CAMT;AAED;;;;;;;GAOG;AACH,wBAAgB,kBAAkB,CAC9B,aAAa,EAAE,MAAM,EACrB,cAAc,EAAE,MAAM,EACtB,QAAQ,EAAE,MAAM,EAChB,aAAa,CAAC,EAAE,WAAW,GAC5B,aAAa,CAuCf;AAED;;;;;GAKG;AACH,wBAAgB,8BAA8B,CAC1C,eAAe,EAAE,WAAW,EAC5B,aAAa,CAAC,EAAE,aAAa,EAC7B,aAAa,CAAC,EAAE,WAAW,EAC3B,aAAa,CAAC,EAAE,MAAM,GACvB,WAAW,CAgCb"}

package/dist/account/AuthToken.d.ts

@@ -1,24 +0,0 @@
-import { TokenClaims } from "./TokenClaims.js";
-/**
- * Extract token by decoding the rawToken
- *
- * @param encodedToken
- */
-export declare function extractTokenClaims(encodedToken: string, base64Decode: (input: string) => string): TokenClaims;
-/**
- * Check if the signin_state claim contains "kmsi"
- * @param idTokenClaims
- * @returns
- */
-export declare function isKmsi(idTokenClaims: TokenClaims): boolean;
-/**
- * decode a JWT
- *
- * @param authToken
- */
-export declare function getJWSPayload(authToken: string): string;
-/**
- * Determine if the token's max_age has transpired
- */
-export declare function checkMaxAge(authTime: number, maxAge: number): void;
-//# sourceMappingURL=AuthToken.d.ts.map

package/dist/account/AuthToken.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"AuthToken.d.ts","sourceRoot":"","sources":["../../src/account/AuthToken.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAM/C;;;;GAIG;AACH,wBAAgB,kBAAkB,CAC9B,YAAY,EAAE,MAAM,EACpB,YAAY,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,MAAM,GACxC,WAAW,CAWb;AAED;;;;GAIG;AACH,wBAAgB,MAAM,CAAC,aAAa,EAAE,WAAW,GAAG,OAAO,CAe1D;AAED;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAkBvD;AAED;;GAEG;AACH,wBAAgB,WAAW,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI,CAUlE"}

package/dist/account/CcsCredential.d.ts

@@ -1,10 +0,0 @@
-export type CcsCredential = {
-    credential: string;
-    type: CcsCredentialType;
-};
-export declare const CcsCredentialType: {
-    readonly HOME_ACCOUNT_ID: "home_account_id";
-    readonly UPN: "UPN";
-};
-export type CcsCredentialType = (typeof CcsCredentialType)[keyof typeof CcsCredentialType];
-//# sourceMappingURL=CcsCredential.d.ts.map

package/dist/account/CcsCredential.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"CcsCredential.d.ts","sourceRoot":"","sources":["../../src/account/CcsCredential.ts"],"names":[],"mappings":"AAKA,MAAM,MAAM,aAAa,GAAG;IACxB,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,iBAAiB,CAAC;CAC3B,CAAC;AAEF,eAAO,MAAM,iBAAiB;;;CAGpB,CAAC;AACX,MAAM,MAAM,iBAAiB,GACzB,CAAC,OAAO,iBAAiB,CAAC,CAAC,MAAM,OAAO,iBAAiB,CAAC,CAAC"}

package/dist/account/ClientCredentials.d.ts

@@ -1,20 +0,0 @@
-export type ClientAssertionConfig = {
-    clientId: string;
-    tokenEndpoint?: string;
-};
-export type ClientAssertionCallback = (config: ClientAssertionConfig) => Promise<string>;
-/**
- * Client Assertion credential for Confidential Clients
- */
-export type ClientAssertion = {
-    assertion: string | ClientAssertionCallback;
-    assertionType: string;
-};
-/**
- * Client Credentials set for Confidential Clients
- */
-export type ClientCredentials = {
-    clientSecret?: string;
-    clientAssertion?: ClientAssertion;
-};
-//# sourceMappingURL=ClientCredentials.d.ts.map

package/dist/account/ClientCredentials.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"ClientCredentials.d.ts","sourceRoot":"","sources":["../../src/account/ClientCredentials.ts"],"names":[],"mappings":"AAKA,MAAM,MAAM,qBAAqB,GAAG;IAChC,QAAQ,EAAE,MAAM,CAAC;IACjB,aAAa,CAAC,EAAE,MAAM,CAAC;CAC1B,CAAC;AAEF,MAAM,MAAM,uBAAuB,GAAG,CAClC,MAAM,EAAE,qBAAqB,KAC5B,OAAO,CAAC,MAAM,CAAC,CAAC;AAErB;;GAEG;AACH,MAAM,MAAM,eAAe,GAAG;IAC1B,SAAS,EAAE,MAAM,GAAG,uBAAuB,CAAC;IAC5C,aAAa,EAAE,MAAM,CAAC;CACzB,CAAC;AAEF;;GAEG;AACH,MAAM,MAAM,iBAAiB,GAAG;IAC5B,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,eAAe,CAAC,EAAE,eAAe,CAAC;CACrC,CAAC"}

package/dist/account/ClientInfo.d.ts

@@ -1,23 +0,0 @@
-/**
- * Client info object which consists of:
- * uid: user id
- * utid: tenant id
- * xms_tdbr: optional, only for non-US tenants
- */
-export type ClientInfo = {
-    uid: string;
-    utid: string;
-    xms_tdbr?: string;
-};
-/**
- * Function to build a client info object from server clientInfo string
- * @param rawClientInfo
- * @param crypto
- */
-export declare function buildClientInfo(rawClientInfo: string, base64Decode: (input: string) => string): ClientInfo;
-/**
- * Function to build a client info object from cached homeAccountId string
- * @param homeAccountId
- */
-export declare function buildClientInfoFromHomeAccountId(homeAccountId: string): ClientInfo;
-//# sourceMappingURL=ClientInfo.d.ts.map

package/dist/account/ClientInfo.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"ClientInfo.d.ts","sourceRoot":"","sources":["../../src/account/ClientInfo.ts"],"names":[],"mappings":"AAWA;;;;;GAKG;AACH,MAAM,MAAM,UAAU,GAAG;IACrB,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,CAAC,EAAE,MAAM,CAAC;CACrB,CAAC;AAEF;;;;GAIG;AACH,wBAAgB,eAAe,CAC3B,aAAa,EAAE,MAAM,EACrB,YAAY,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,MAAM,GACxC,UAAU,CAaZ;AAED;;;GAGG;AACH,wBAAgB,gCAAgC,CAC5C,aAAa,EAAE,MAAM,GACtB,UAAU,CAcZ"}

package/dist/account/TokenClaims.d.ts

@@ -1,88 +0,0 @@
-/**
- * Type which describes Id Token claims known by MSAL.
- */
-export type TokenClaims = {
-    /**
-     * Audience
-     */
-    aud?: string;
-    /**
-     * Issuer
-     */
-    iss?: string;
-    /**
-     * Issued at
-     */
-    iat?: number;
-    /**
-     * Not valid before
-     */
-    nbf?: number;
-    /**
-     * Immutable object identifier, this ID uniquely identifies the user across applications
-     */
-    oid?: string;
-    /**
-     * Immutable subject identifier, this is a pairwise identifier - it is unique to a particular application ID
-     */
-    sub?: string;
-    /**
-     * Users' tenant or '9188040d-6c67-4c5b-b112-36a304b66dad' for personal accounts.
-     */
-    tid?: string;
-    /**
-     * Trusted Framework Policy (B2C) The name of the policy that was used to acquire the ID token.
-     */
-    tfp?: string;
-    /**
-     * Authentication Context Class Reference (B2C) Used only with older policies.
-     */
-    acr?: string;
-    ver?: string;
-    upn?: string;
-    preferred_username?: string;
-    login_hint?: string;
-    /**
-     * Contains KMSI (Keep Me Signed In) status among other things
-     */
-    signin_state?: Array<string>;
-    emails?: string[];
-    name?: string;
-    nonce?: string;
-    /**
-     * Expiration
-     */
-    exp?: number;
-    home_oid?: string;
-    sid?: string;
-    cloud_instance_host_name?: string;
-    cnf?: {
-        kid: string;
-    };
-    x5c_ca?: string[];
-    ts?: number;
-    at?: string;
-    u?: string;
-    p?: string;
-    m?: string;
-    roles?: string[];
-    amr?: string[];
-    idp?: string;
-    auth_time?: number;
-    /**
-     * 	Region of the resource tenant
-     */
-    tenant_region_scope?: string;
-    tenant_region_sub_scope?: string;
-};
-/**
- * Gets tenantId from available ID token claims to set as credential realm with the following precedence:
- * 1. tid - if the token is acquired from an Azure AD tenant tid will be present
- * 2. tfp - if the token is acquired from a modern B2C tenant tfp should be present
- * 3. acr - if the token is acquired from a legacy B2C tenant acr should be present
- * Downcased to match the realm case-insensitive comparison requirements
- * @param idTokenClaims
- * @returns
- */
-export declare function getTenantIdFromIdTokenClaims(idTokenClaims?: TokenClaims): string | null;
-//# sourceMappingURL=TokenClaims.d.ts.map

package/dist/account/TokenClaims.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"TokenClaims.d.ts","sourceRoot":"","sources":["../../src/account/TokenClaims.ts"],"names":[],"mappings":"AAKA;;GAEG;AACH,MAAM,MAAM,WAAW,GAAG;IACtB;;OAEG;IACH,GAAG,CAAC,EAAE,MAAM,CAAC;IACb;;OAEG;IACH,GAAG,CAAC,EAAE,MAAM,CAAC;IACb;;OAEG;IACH,GAAG,CAAC,EAAE,MAAM,CAAC;IACb;;OAEG;IACH,GAAG,CAAC,EAAE,MAAM,CAAC;IACb;;OAEG;IACH,GAAG,CAAC,EAAE,MAAM,CAAC;IACb;;OAEG;IACH,GAAG,CAAC,EAAE,MAAM,CAAC;IACb;;OAEG;IACH,GAAG,CAAC,EAAE,MAAM,CAAC;IACb;;OAEG;IACH,GAAG,CAAC,EAAE,MAAM,CAAC;IACb;;OAEG;IACH,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;;OAEG;IACH,YAAY,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IAC7B,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;IACf;;OAEG;IACH,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,wBAAwB,CAAC,EAAE,MAAM,CAAC;IAClC,GAAG,CAAC,EAAE;QACF,GAAG,EAAE,MAAM,CAAC;KACf,CAAC;IACF,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,CAAC,CAAC,EAAE,MAAM,CAAC;IACX,CAAC,CAAC,EAAE,MAAM,CAAC;IACX,CAAC,CAAC,EAAE,MAAM,CAAC;IACX,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;IACjB,GAAG,CAAC,EAAE,MAAM,EAAE,CAAC;IACf,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;OAEG;IACH,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,uBAAuB,CAAC,EAAE,MAAM,CAAC;CACpC,CAAC;AAEF;;;;;;;;GAQG;AACH,wBAAgB,4BAA4B,CACxC,aAAa,CAAC,EAAE,WAAW,GAC5B,MAAM,GAAG,IAAI,CAOf"}

package/dist/authority/Authority.d.ts

@@ -1,255 +0,0 @@
-import { AuthorityType } from "./AuthorityType.js";
-import { OpenIdConfigResponse } from "./OpenIdConfigResponse.js";
-import { IUri } from "../url/IUri.js";
-import { INetworkModule } from "../network/INetworkModule.js";
-import { ProtocolMode } from "./ProtocolMode.js";
-import { ICacheManager } from "../cache/interface/ICacheManager.js";
-import { AuthorityOptions, StaticAuthorityOptions } from "./AuthorityOptions.js";
-import { CloudDiscoveryMetadata } from "./CloudDiscoveryMetadata.js";
-import { RegionDiscoveryMetadata } from "./RegionDiscoveryMetadata.js";
-import type { AzureCloudOptions } from "../config/ClientConfiguration.js";
-import { Logger } from "../logger/Logger.js";
-import { IPerformanceClient } from "../telemetry/performance/IPerformanceClient.js";
-/**
- * The authority class validates the authority URIs used by the user, and retrieves the OpenID Configuration Data from the
- * endpoint. It will store the pertinent config data in this object for use during token calls.
- * @internal
- */
-export declare class Authority {
-    private _canonicalAuthority;
-    private _canonicalAuthorityUrlComponents;
-    protected networkInterface: INetworkModule;
-    protected cacheManager: ICacheManager;
-    private authorityOptions;
-    private metadata;
-    private regionDiscovery;
-    regionDiscoveryMetadata: RegionDiscoveryMetadata;
-    private logger;
-    protected performanceClient: IPerformanceClient;
-    protected correlationId: string;
-    private managedIdentity;
-    private static reservedTenantDomains;
-    constructor(authority: string, networkInterface: INetworkModule, cacheManager: ICacheManager, authorityOptions: AuthorityOptions, logger: Logger, correlationId: string, performanceClient: IPerformanceClient, managedIdentity?: boolean);
-    /**
-     * Get {@link AuthorityType}
-     * @param authorityUri {@link IUri}
-     * @private
-     */
-    private getAuthorityType;
-    get authorityType(): AuthorityType;
-    /**
-     * ProtocolMode enum representing the way endpoints are constructed.
-     */
-    get protocolMode(): ProtocolMode;
-    /**
-     * Returns authorityOptions which can be used to reinstantiate a new authority instance
-     */
-    get options(): AuthorityOptions;
-    /**
-     * A URL that is the authority set by the developer
-     */
-    get canonicalAuthority(): string;
-    /**
-     * Sets canonical authority.
-     */
-    set canonicalAuthority(url: string);
-    /**
-     * Get authority components.
-     */
-    get canonicalAuthorityUrlComponents(): IUri;
-    /**
-     * Get hostname and port i.e. login.microsoftonline.com
-     */
-    get hostnameAndPort(): string;
-    /**
-     * Get tenant for authority.
-     */
-    get tenant(): string;
-    /**
-     * OAuth /authorize endpoint for requests
-     */
-    get authorizationEndpoint(): string;
-    /**
-     * OAuth /token endpoint for requests
-     */
-    get tokenEndpoint(): string;
-    get deviceCodeEndpoint(): string;
-    /**
-     * OAuth logout endpoint for requests
-     */
-    get endSessionEndpoint(): string;
-    /**
-     * OAuth issuer for requests
-     */
-    get selfSignedJwtAudience(): string;
-    /**
-     * Jwks_uri for token signing keys
-     */
-    get jwksUri(): string;
-    /**
-     * Returns a flag indicating that tenant name can be replaced in authority {@link IUri}
-     * @param authorityUri {@link IUri}
-     * @private
-     */
-    private canReplaceTenant;
-    /**
-     * Replaces tenant in url path with current tenant. Defaults to common.
-     * @param urlString
-     */
-    private replaceTenant;
-    /**
-     * Replaces path such as tenant or policy with the current tenant or policy.
-     * @param urlString
-     */
-    private replacePath;
-    /**
-     * The default open id configuration endpoint for any canonical authority.
-     */
-    protected get defaultOpenIdConfigurationEndpoint(): string;
-    /**
-     * Boolean that returns whether or not tenant discovery has been completed.
-     */
-    discoveryComplete(): boolean;
-    /**
-     * Perform endpoint discovery to discover aliases, preferred_cache, preferred_network
-     * and the /authorize, /token and logout endpoints.
-     */
-    resolveEndpointsAsync(): Promise<void>;
-    /**
-     * Returns metadata entity from cache if it exists, otherwiser returns a new metadata entity built
-     * from the configured canonical authority
-     * @returns
-     */
-    private getCurrentMetadataEntity;
-    /**
-     * Updates cached metadata based on metadata source and sets the instance's metadata
-     * property to the same value
-     * @param metadataEntity
-     * @param cloudDiscoverySource
-     * @param endpointMetadataResult
-     */
-    private updateCachedMetadata;
-    /**
-     * Update AuthorityMetadataEntity with new endpoints and return where the information came from
-     * @param metadataEntity
-     */
-    private updateEndpointMetadata;
-    /**
-     * Updates endpoint metadata from local sources and returns where the information was retrieved from and the metadata config
-     * response if the source is hardcoded metadata
-     * @param metadataEntity
-     * @returns
-     */
-    private updateEndpointMetadataFromLocalSources;
-    /**
-     * Compares the number of url components after the domain to determine if the cached
-     * authority metadata can be used for the requested authority. Protects against same domain different
-     * authority such as login.microsoftonline.com/tenant and login.microsoftonline.com/tfp/tenant/policy
-     * @param metadataEntity
-     */
-    private isAuthoritySameType;
-    /**
-     * Parse authorityMetadata config option
-     */
-    private getEndpointMetadataFromConfig;
-    /**
-     * Gets OAuth endpoints from the given OpenID configuration endpoint.
-     *
-     * @param hasHardcodedMetadata boolean
-     */
-    private getEndpointMetadataFromNetwork;
-    /**
-     * Get OAuth endpoints for common authorities.
-     */
-    private getEndpointMetadataFromHardcodedValues;
-    /**
-     * Update the retrieved metadata with regional information.
-     * User selected Azure region will be used if configured.
-     */
-    private updateMetadataWithRegionalInformation;
-    /**
-     * Updates the AuthorityMetadataEntity with new aliases, preferred_network and preferred_cache
-     * and returns where the information was retrieved from
-     * @param metadataEntity
-     * @returns AuthorityMetadataSource
-     */
-    private updateCloudDiscoveryMetadata;
-    private updateCloudDiscoveryMetadataFromLocalSources;
-    /**
-     * Parse cloudDiscoveryMetadata config or check knownAuthorities
-     */
-    private getCloudDiscoveryMetadataFromConfig;
-    /**
-     * Called to get metadata from network if CloudDiscoveryMetadata was not populated by config
-     *
-     * @param hasHardcodedMetadata boolean
-     */
-    private getCloudDiscoveryMetadataFromNetwork;
-    /**
-     * Helper function to determine if this host is included in the knownAuthorities config option
-     */
-    private isInKnownAuthorities;
-    /**
-     * helper function to populate the authority based on azureCloudOptions
-     * @param authorityString
-     * @param azureCloudOptions
-     */
-    static generateAuthority(authorityString: string, azureCloudOptions?: AzureCloudOptions): string;
-    /**
-     * Creates cloud discovery metadata object from a given host
-     * @param host
-     */
-    static createCloudDiscoveryMetadataFromHost(host: string): CloudDiscoveryMetadata;
-    /**
-     * helper function to generate environment from authority object
-     */
-    getPreferredCache(): string;
-    /**
-     * Returns whether or not the provided host is an alias of this authority instance
-     * @param host
-     */
-    isAlias(host: string): boolean;
-    /**
-     * Returns whether or not the provided host is an alias of a known Microsoft authority for purposes of endpoint discovery
-     * @param host
-     */
-    isAliasOfKnownMicrosoftAuthority(host: string): boolean;
-    /**
-     * Checks whether the provided host is that of a public cloud authority
-     *
-     * @param authority string
-     * @returns bool
-     */
-    static isPublicCloudAuthority(host: string): boolean;
-    /**
-     * Rebuild the authority string with the region
-     *
-     * @param host string
-     * @param region string
-     */
-    static buildRegionalAuthorityString(host: string, region: string, queryString?: string): string;
-    /**
-     * Replace the endpoints in the metadata object with their regional equivalents.
-     *
-     * @param metadata OpenIdConfigResponse
-     * @param azureRegion string
-     */
-    static replaceWithRegionalInformation(metadata: OpenIdConfigResponse, azureRegion: string): OpenIdConfigResponse;
-    /**
-     * Transform CIAM_AUTHORIY as per the below rules:
-     * If no path segments found and it is a CIAM authority (hostname ends with .ciamlogin.com), then transform it
-     *
-     * NOTE: The transformation path should go away once STS supports CIAM with the format: `tenantIdorDomain.ciamlogin.com`
-     * `ciamlogin.com` can also change in the future and we should accommodate the same
-     *
-     * @param authority
-     */
-    static transformCIAMAuthority(authority: string): string;
-}
-/**
- * Extract tenantId from authority
- */
-export declare function getTenantFromAuthorityString(authority: string): string | undefined;
-export declare function formatAuthorityUri(authorityUri: string): string;
-export declare function buildStaticAuthorityOptions(authOptions: Partial<AuthorityOptions>): StaticAuthorityOptions;
-//# sourceMappingURL=Authority.d.ts.map

package/dist/authority/Authority.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"Authority.d.ts","sourceRoot":"","sources":["../../src/authority/Authority.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACnD,OAAO,EAEH,oBAAoB,EACvB,MAAM,2BAA2B,CAAC;AAEnC,OAAO,EAAE,IAAI,EAAE,MAAM,gBAAgB,CAAC;AAKtC,OAAO,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AAY9D,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACjD,OAAO,EAAE,aAAa,EAAE,MAAM,qCAAqC,CAAC;AAEpE,OAAO,EACH,gBAAgB,EAEhB,sBAAsB,EACzB,MAAM,uBAAuB,CAAC;AAS/B,OAAO,EAAE,sBAAsB,EAAE,MAAM,6BAA6B,CAAC;AAErE,OAAO,EAAE,uBAAuB,EAAE,MAAM,8BAA8B,CAAC;AAEvE,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,kCAAkC,CAAC;AAC1E,OAAO,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAC;AAE7C,OAAO,EAAE,kBAAkB,EAAE,MAAM,gDAAgD,CAAC;AAKpF;;;;GAIG;AACH,qBAAa,SAAS;IAElB,OAAO,CAAC,mBAAmB,CAAY;IAEvC,OAAO,CAAC,gCAAgC,CAAc;IAEtD,SAAS,CAAC,gBAAgB,EAAE,cAAc,CAAC;IAE3C,SAAS,CAAC,YAAY,EAAE,aAAa,CAAC;IAEtC,OAAO,CAAC,gBAAgB,CAAmB;IAE3C,OAAO,CAAC,QAAQ,CAA0B;IAE1C,OAAO,CAAC,eAAe,CAAkB;IAElC,uBAAuB,EAAE,uBAAuB,CAAC;IAExD,OAAO,CAAC,MAAM,CAAS;IAEvB,SAAS,CAAC,iBAAiB,EAAE,kBAAkB,CAAC;IAEhD,SAAS,CAAC,aAAa,EAAE,MAAM,CAAC;IAEhC,OAAO,CAAC,eAAe,CAAU;IAEjC,OAAO,CAAC,MAAM,CAAC,qBAAqB,CAMjC;gBAGC,SAAS,EAAE,MAAM,EACjB,gBAAgB,EAAE,cAAc,EAChC,YAAY,EAAE,aAAa,EAC3B,gBAAgB,EAAE,gBAAgB,EAClC,MAAM,EAAE,MAAM,EACd,aAAa,EAAE,MAAM,EACrB,iBAAiB,EAAE,kBAAkB,EACrC,eAAe,CAAC,EAAE,OAAO;IAwB7B;;;;OAIG;IACH,OAAO,CAAC,gBAAgB;IAqBxB,IAAW,aAAa,IAAI,aAAa,CAExC;IAED;;OAEG;IACH,IAAW,YAAY,IAAI,YAAY,CAEtC;IAED;;OAEG;IACH,IAAW,OAAO,IAAI,gBAAgB,CAErC;IAED;;OAEG;IACH,IAAW,kBAAkB,IAAI,MAAM,CAEtC;IAED;;OAEG;IACH,IAAW,kBAAkB,CAAC,GAAG,EAAE,MAAM,EAIxC;IAED;;OAEG;IACH,IAAW,+BAA+B,IAAI,IAAI,CAOjD;IAED;;OAEG;IACH,IAAW,eAAe,IAAI,MAAM,CAEnC;IAED;;OAEG;IACH,IAAW,MAAM,IAAI,MAAM,CAE1B;IAED;;OAEG;IACH,IAAW,qBAAqB,IAAI,MAAM,CAQzC;IAED;;OAEG;IACH,IAAW,aAAa,IAAI,MAAM,CAQjC;IAED,IAAW,kBAAkB,IAAI,MAAM,CAUtC;IAED;;OAEG;IACH,IAAW,kBAAkB,IAAI,MAAM,CActC;IAED;;OAEG;IACH,IAAW,qBAAqB,IAAI,MAAM,CAQzC;IAED;;OAEG;IACH,IAAW,OAAO,IAAI,MAAM,CAQ3B;IAED;;;;OAIG;IACH,OAAO,CAAC,gBAAgB;IAWxB;;;OAGG;IACH,OAAO,CAAC,aAAa;IAIrB;;;OAGG;IACH,OAAO,CAAC,WAAW;IA4CnB;;OAEG;IACH,SAAS,KAAK,kCAAkC,IAAI,MAAM,CAWzD;IAED;;OAEG;IACH,iBAAiB,IAAI,OAAO;IAI5B;;;OAGG;IACU,qBAAqB,IAAI,OAAO,CAAC,IAAI,CAAC;IAiCnD;;;;OAIG;IACH,OAAO,CAAC,wBAAwB;IA0BhC;;;;;;OAMG;IACH,OAAO,CAAC,oBAAoB;IA+B5B;;;OAGG;YACW,sBAAsB;IA0EpC;;;;;OAKG;IACH,OAAO,CAAC,sCAAsC;IAmE9C;;;;;OAKG;IACH,OAAO,CAAC,mBAAmB;IAc3B;;OAEG;IACH,OAAO,CAAC,6BAA6B;IAgBrC;;;;OAIG;YACW,8BAA8B;IAwC5C;;OAEG;IACH,OAAO,CAAC,sCAAsC;IAQ9C;;;OAGG;YACW,qCAAqC;IAmDnD;;;;;OAKG;YACW,4BAA4B;IAiC1C,OAAO,CAAC,4CAA4C;IAwFpD;;OAEG;IACH,OAAO,CAAC,mCAAmC;IAoE3C;;;;OAIG;YACW,oCAAoC;IA6GlD;;OAEG;IACH,OAAO,CAAC,oBAAoB;IAa5B;;;;OAIG;IACH,MAAM,CAAC,iBAAiB,CACpB,eAAe,EAAE,MAAM,EACvB,iBAAiB,CAAC,EAAE,iBAAiB,GACtC,MAAM;IAkBT;;;OAGG;IACH,MAAM,CAAC,oCAAoC,CACvC,IAAI,EAAE,MAAM,GACb,sBAAsB;IAQzB;;OAEG;IACH,iBAAiB,IAAI,MAAM;IAY3B;;;OAGG;IACH,OAAO,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO;IAI9B;;;OAGG;IACH,gCAAgC,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO;IAIvD;;;;;OAKG;IACH,MAAM,CAAC,sBAAsB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO;IAIpD;;;;;OAKG;IACH,MAAM,CAAC,4BAA4B,CAC/B,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,MAAM,EACd,WAAW,CAAC,EAAE,MAAM,GACrB,MAAM;IAyBT;;;;;OAKG;IACH,MAAM,CAAC,8BAA8B,CACjC,QAAQ,EAAE,oBAAoB,EAC9B,WAAW,EAAE,MAAM,GACpB,oBAAoB;IAyBvB;;;;;;;;OAQG;IACH,MAAM,CAAC,sBAAsB,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM;CAmB3D;AAED;;GAEG;AACH,wBAAgB,4BAA4B,CACxC,SAAS,EAAE,MAAM,GAClB,MAAM,GAAG,SAAS,CAsBpB;AAED,wBAAgB,kBAAkB,CAAC,YAAY,EAAE,MAAM,GAAG,MAAM,CAI/D;AAED,wBAAgB,2BAA2B,CACvC,WAAW,EAAE,OAAO,CAAC,gBAAgB,CAAC,GACvC,sBAAsB,CAoBxB"}