@azure/msal-common 8.0.0 → 9.0.1

package/dist/authority/CloudInstanceDiscoveryErrorResponse.d.ts

@@ -0,0 +1,14 @@
+/**
+ * The OpenID Configuration Endpoint Response type. Used by the authority class to get relevant OAuth endpoints.
+ */
+export declare type CloudInstanceDiscoveryErrorResponse = {
+    error: String;
+    error_description: String;
+    error_codes?: Array<Number>;
+    timestamp?: String;
+    trace_id?: String;
+    correlation_id?: String;
+    error_uri?: String;
+};
+export declare function isCloudInstanceDiscoveryErrorResponse(response: object): boolean;
+//# sourceMappingURL=CloudInstanceDiscoveryErrorResponse.d.ts.map

package/dist/authority/CloudInstanceDiscoveryErrorResponse.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"CloudInstanceDiscoveryErrorResponse.d.ts","sourceRoot":"","sources":["../../src/authority/CloudInstanceDiscoveryErrorResponse.ts"],"names":[],"mappings":"AAKA;;GAEG;AACH,oBAAY,mCAAmC,GAAG;IAC9C,KAAK,EAAE,MAAM,CAAC;IACd,iBAAiB,EAAE,MAAM,CAAC;IAC1B,WAAW,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IAC5B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,SAAS,CAAC,EAAE,MAAM,CAAC;CACtB,CAAC;AAEF,wBAAgB,qCAAqC,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAK/E"}

package/dist/authority/CloudInstanceDiscoveryErrorResponse.js

@@ -0,0 +1,13 @@
+/*! @azure/msal-common v9.0.1 2022-12-07 */
+'use strict';
+/*
+ * Copyright (c) Microsoft Corporation. All rights reserved.
+ * Licensed under the MIT License.
+ */
+function isCloudInstanceDiscoveryErrorResponse(response) {
+    return (response.hasOwnProperty("error") &&
+        response.hasOwnProperty("error_description"));
+}
+
+export { isCloudInstanceDiscoveryErrorResponse };
+//# sourceMappingURL=CloudInstanceDiscoveryErrorResponse.js.map

package/dist/authority/CloudInstanceDiscoveryErrorResponse.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"CloudInstanceDiscoveryErrorResponse.js","sources":["../../src/authority/CloudInstanceDiscoveryErrorResponse.ts"],"sourcesContent":["/*\n * Copyright (c) Microsoft Corporation. All rights reserved.\n * Licensed under the MIT License.\n */\n\n/**\n * The OpenID Configuration Endpoint Response type. Used by the authority class to get relevant OAuth endpoints.\n */\nexport type CloudInstanceDiscoveryErrorResponse = {\n    error: String;\n    error_description: String;\n    error_codes?: Array<Number>;\n    timestamp?: String;\n    trace_id?: String;\n    correlation_id?: String;\n    error_uri?: String;\n};\n\nexport function isCloudInstanceDiscoveryErrorResponse(response: object): boolean {\n    return (\n        response.hasOwnProperty(\"error\") &&\n        response.hasOwnProperty(\"error_description\")\n    );\n}\n"],"names":[],"mappings":";;AAAA;;;AAGG;AAeG,SAAU,qCAAqC,CAAC,QAAgB,EAAA;AAClE,IAAA,QACI,QAAQ,CAAC,cAAc,CAAC,OAAO,CAAC;AAChC,QAAA,QAAQ,CAAC,cAAc,CAAC,mBAAmB,CAAC,EAC9C;AACN;;;;"}

package/dist/authority/CloudInstanceDiscoveryResponse.js

@@ -1,4 +1,4 @@
-/*! @azure/msal-common v8.0.0 2022-11-07 */
+/*! @azure/msal-common v9.0.1 2022-12-07 */
 'use strict';
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.

package/dist/authority/OpenIdConfigResponse.js

@@ -1,4 +1,4 @@
-/*! @azure/msal-common v8.0.0 2022-11-07 */
+/*! @azure/msal-common v9.0.1 2022-12-07 */
 'use strict';
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.

package/dist/authority/ProtocolMode.js

@@ -1,4 +1,4 @@
-/*! @azure/msal-common v8.0.0 2022-11-07 */
+/*! @azure/msal-common v9.0.1 2022-12-07 */
 'use strict';
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.

package/dist/authority/RegionDiscovery.js

@@ -1,4 +1,4 @@
-/*! @azure/msal-common v8.0.0 2022-11-07 */
+/*! @azure/msal-common v9.0.1 2022-12-07 */
 'use strict';
 import { __awaiter, __generator } from '../_virtual/_tslib.js';
 import { RegionDiscoverySources, ResponseCodes, Constants } from '../utils/Constants.js';

package/dist/cache/CacheManager.js

@@ -1,4 +1,4 @@
-/*! @azure/msal-common v8.0.0 2022-11-07 */
+/*! @azure/msal-common v9.0.1 2022-12-07 */
 'use strict';
 import { __awaiter, __generator, __extends } from '../_virtual/_tslib.js';
 import { Constants, CredentialType, AuthenticationScheme, CacheSchemaType, THE_FAMILY_ID, APP_METADATA, AUTHORITY_METADATA_CONSTANTS } from '../utils/Constants.js';

package/dist/cache/entities/AccessTokenEntity.js

@@ -1,4 +1,4 @@
-/*! @azure/msal-common v8.0.0 2022-11-07 */
+/*! @azure/msal-common v9.0.1 2022-12-07 */
 'use strict';
 import { __extends } from '../../_virtual/_tslib.js';
 import { CredentialEntity } from './CredentialEntity.js';

package/dist/cache/entities/AccountEntity.js

@@ -1,4 +1,4 @@
-/*! @azure/msal-common v8.0.0 2022-11-07 */
+/*! @azure/msal-common v9.0.1 2022-12-07 */
 'use strict';
 import { Separators, CacheAccountType, CacheType, Constants } from '../../utils/Constants.js';
 import { buildClientInfo } from '../../account/ClientInfo.js';

package/dist/cache/entities/AppMetadataEntity.js

@@ -1,4 +1,4 @@
-/*! @azure/msal-common v8.0.0 2022-11-07 */
+/*! @azure/msal-common v9.0.1 2022-12-07 */
 'use strict';
 import { Separators, APP_METADATA } from '../../utils/Constants.js';
 

package/dist/cache/entities/AuthorityMetadataEntity.js

@@ -1,4 +1,4 @@
-/*! @azure/msal-common v8.0.0 2022-11-07 */
+/*! @azure/msal-common v9.0.1 2022-12-07 */
 'use strict';
 import { AUTHORITY_METADATA_CONSTANTS } from '../../utils/Constants.js';
 import { TimeUtils } from '../../utils/TimeUtils.js';

package/dist/cache/entities/CacheRecord.js

@@ -1,4 +1,4 @@
-/*! @azure/msal-common v8.0.0 2022-11-07 */
+/*! @azure/msal-common v9.0.1 2022-12-07 */
 'use strict';
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.

package/dist/cache/entities/CredentialEntity.js

@@ -1,4 +1,4 @@
-/*! @azure/msal-common v8.0.0 2022-11-07 */
+/*! @azure/msal-common v9.0.1 2022-12-07 */
 'use strict';
 import { CredentialType, CacheType, Constants, Separators, AuthenticationScheme } from '../../utils/Constants.js';
 import { ClientAuthError } from '../../error/ClientAuthError.js';

package/dist/cache/entities/IdTokenEntity.js

@@ -1,4 +1,4 @@
-/*! @azure/msal-common v8.0.0 2022-11-07 */
+/*! @azure/msal-common v9.0.1 2022-12-07 */
 'use strict';
 import { __extends } from '../../_virtual/_tslib.js';
 import { CredentialEntity } from './CredentialEntity.js';

package/dist/cache/entities/RefreshTokenEntity.js

@@ -1,4 +1,4 @@
-/*! @azure/msal-common v8.0.0 2022-11-07 */
+/*! @azure/msal-common v9.0.1 2022-12-07 */
 'use strict';
 import { __extends } from '../../_virtual/_tslib.js';
 import { CredentialEntity } from './CredentialEntity.js';

package/dist/cache/entities/ServerTelemetryEntity.js

@@ -1,4 +1,4 @@
-/*! @azure/msal-common v8.0.0 2022-11-07 */
+/*! @azure/msal-common v9.0.1 2022-12-07 */
 'use strict';
 import { SERVER_TELEM_CONSTANTS } from '../../utils/Constants.js';
 

package/dist/cache/entities/ThrottlingEntity.js

@@ -1,4 +1,4 @@
-/*! @azure/msal-common v8.0.0 2022-11-07 */
+/*! @azure/msal-common v9.0.1 2022-12-07 */
 'use strict';
 import { ThrottlingConstants } from '../../utils/Constants.js';
 

package/dist/cache/persistence/TokenCacheContext.js

@@ -1,4 +1,4 @@
-/*! @azure/msal-common v8.0.0 2022-11-07 */
+/*! @azure/msal-common v9.0.1 2022-12-07 */
 'use strict';
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.

package/dist/client/AuthorizationCodeClient.js

@@ -1,4 +1,4 @@
-/*! @azure/msal-common v8.0.0 2022-11-07 */
+/*! @azure/msal-common v9.0.1 2022-12-07 */
 'use strict';
 import { __extends, __awaiter, __generator, __assign, __spreadArrays } from '../_virtual/_tslib.js';
 import { BaseClient } from './BaseClient.js';

package/dist/client/BaseClient.js

@@ -1,4 +1,4 @@
-/*! @azure/msal-common v8.0.0 2022-11-07 */
+/*! @azure/msal-common v9.0.1 2022-12-07 */
 'use strict';
 import { __awaiter, __generator } from '../_virtual/_tslib.js';
 import { buildClientConfiguration } from '../config/ClientConfiguration.js';

package/dist/client/ClientCredentialClient.js

@@ -1,4 +1,4 @@
-/*! @azure/msal-common v8.0.0 2022-11-07 */
+/*! @azure/msal-common v9.0.1 2022-12-07 */
 'use strict';
 import { __extends, __awaiter, __generator } from '../_virtual/_tslib.js';
 import { BaseClient } from './BaseClient.js';

package/dist/client/DeviceCodeClient.js

@@ -1,4 +1,4 @@
-/*! @azure/msal-common v8.0.0 2022-11-07 */
+/*! @azure/msal-common v9.0.1 2022-12-07 */
 'use strict';
 import { __extends, __awaiter, __generator } from '../_virtual/_tslib.js';
 import { BaseClient } from './BaseClient.js';

package/dist/client/OnBehalfOfClient.js

@@ -1,4 +1,4 @@
-/*! @azure/msal-common v8.0.0 2022-11-07 */
+/*! @azure/msal-common v9.0.1 2022-12-07 */
 'use strict';
 import { __extends, __awaiter, __generator } from '../_virtual/_tslib.js';
 import { BaseClient } from './BaseClient.js';

package/dist/client/RefreshTokenClient.js

@@ -1,4 +1,4 @@
-/*! @azure/msal-common v8.0.0 2022-11-07 */
+/*! @azure/msal-common v9.0.1 2022-12-07 */
 'use strict';
 import { __extends, __awaiter, __generator, __assign } from '../_virtual/_tslib.js';
 import { BaseClient } from './BaseClient.js';

package/dist/client/SilentFlowClient.js

@@ -1,4 +1,4 @@
-/*! @azure/msal-common v8.0.0 2022-11-07 */
+/*! @azure/msal-common v9.0.1 2022-12-07 */
 'use strict';
 import { __extends, __awaiter, __generator } from '../_virtual/_tslib.js';
 import { BaseClient } from './BaseClient.js';

package/dist/client/UsernamePasswordClient.js

@@ -1,4 +1,4 @@
-/*! @azure/msal-common v8.0.0 2022-11-07 */
+/*! @azure/msal-common v9.0.1 2022-12-07 */
 'use strict';
 import { __extends, __awaiter, __generator } from '../_virtual/_tslib.js';
 import { BaseClient } from './BaseClient.js';

package/dist/config/ClientConfiguration.js

@@ -1,4 +1,4 @@
-/*! @azure/msal-common v8.0.0 2022-11-07 */
+/*! @azure/msal-common v9.0.1 2022-12-07 */
 'use strict';
 import { __assign, __awaiter, __generator } from '../_virtual/_tslib.js';
 import { DEFAULT_CRYPTO_IMPLEMENTATION } from '../crypto/ICrypto.js';

package/dist/crypto/ICrypto.js

@@ -1,4 +1,4 @@
-/*! @azure/msal-common v8.0.0 2022-11-07 */
+/*! @azure/msal-common v9.0.1 2022-12-07 */
 'use strict';
 import { __awaiter, __generator } from '../_virtual/_tslib.js';
 import { AuthError } from '../error/AuthError.js';

package/dist/crypto/JoseHeader.js

@@ -1,4 +1,4 @@
-/*! @azure/msal-common v8.0.0 2022-11-07 */
+/*! @azure/msal-common v9.0.1 2022-12-07 */
 'use strict';
 import { JoseHeaderError } from '../error/JoseHeaderError.js';
 import { JsonTypes } from '../utils/Constants.js';

package/dist/crypto/PopTokenGenerator.js

@@ -1,4 +1,4 @@
-/*! @azure/msal-common v8.0.0 2022-11-07 */
+/*! @azure/msal-common v9.0.1 2022-12-07 */
 'use strict';
 import { __awaiter, __generator, __assign } from '../_virtual/_tslib.js';
 import { TimeUtils } from '../utils/TimeUtils.js';

package/dist/error/AuthError.js

@@ -1,4 +1,4 @@
-/*! @azure/msal-common v8.0.0 2022-11-07 */
+/*! @azure/msal-common v9.0.1 2022-12-07 */
 'use strict';
 import { __extends } from '../_virtual/_tslib.js';
 import { Constants } from '../utils/Constants.js';

package/dist/error/ClientAuthError.js

@@ -1,4 +1,4 @@
-/*! @azure/msal-common v8.0.0 2022-11-07 */
+/*! @azure/msal-common v9.0.1 2022-12-07 */
 'use strict';
 import { __extends } from '../_virtual/_tslib.js';
 import { AuthError } from './AuthError.js';

package/dist/error/ClientConfigurationError.js

@@ -1,4 +1,4 @@
-/*! @azure/msal-common v8.0.0 2022-11-07 */
+/*! @azure/msal-common v9.0.1 2022-12-07 */
 'use strict';
 import { __extends } from '../_virtual/_tslib.js';
 import { ClientAuthError } from './ClientAuthError.js';

package/dist/error/InteractionRequiredAuthError.js

@@ -1,4 +1,4 @@
-/*! @azure/msal-common v8.0.0 2022-11-07 */
+/*! @azure/msal-common v9.0.1 2022-12-07 */
 'use strict';
 import { __extends } from '../_virtual/_tslib.js';
 import { AuthError } from './AuthError.js';

package/dist/error/JoseHeaderError.js

@@ -1,4 +1,4 @@
-/*! @azure/msal-common v8.0.0 2022-11-07 */
+/*! @azure/msal-common v9.0.1 2022-12-07 */
 'use strict';
 import { __extends } from '../_virtual/_tslib.js';
 import { AuthError } from './AuthError.js';

package/dist/error/ServerError.js

@@ -1,4 +1,4 @@
-/*! @azure/msal-common v8.0.0 2022-11-07 */
+/*! @azure/msal-common v9.0.1 2022-12-07 */
 'use strict';
 import { __extends } from '../_virtual/_tslib.js';
 import { AuthError } from './AuthError.js';

package/dist/index.cjs.js

@@ -1,4 +1,4 @@
-/*! @azure/msal-common v8.0.0 2022-11-07 */
+/*! @azure/msal-common v9.0.1 2022-12-07 */
 'use strict';
 'use strict';
 
@@ -131,6 +131,7 @@ var Constants = {
     AUTHORIZATION_PENDING: "authorization_pending",
     NOT_DEFINED: "not_defined",
     EMPTY_STRING: "",
+    NOT_APPLICABLE: "N/A",
     FORWARD_SLASH: "/",
     IMDS_ENDPOINT: "http://169.254.169.254/metadata/instance/compute/location",
     IMDS_VERSION: "2020-06-01",
@@ -141,7 +142,8 @@ var Constants = {
     KNOWN_PUBLIC_CLOUDS: ["login.microsoftonline.com", "login.windows.net", "login.microsoft.com", "sts.windows.net"],
     TOKEN_RESPONSE_TYPE: "token",
     ID_TOKEN_RESPONSE_TYPE: "id_token",
-    SHR_NONCE_VALIDITY: 240
+    SHR_NONCE_VALIDITY: 240,
+    INVALID_INSTANCE: "invalid_instance",
 };
 var OIDC_DEFAULT_SCOPES = [
     Constants.OPENID_SCOPE,
@@ -1409,7 +1411,7 @@ var Logger = /** @class */ (function () {
 
 /* eslint-disable header/header */
 var name = "@azure/msal-common";
-var version = "8.0.0";
+var version = "9.0.1";
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7023,6 +7025,15 @@ function isCloudInstanceDiscoveryResponse(response) {
         response.hasOwnProperty("metadata"));
 }
 
+/*
+ * Copyright (c) Microsoft Corporation. All rights reserved.
+ * Licensed under the MIT License.
+ */
+function isCloudInstanceDiscoveryErrorResponse(response) {
+    return (response.hasOwnProperty("error") &&
+        response.hasOwnProperty("error_description"));
+}
+
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -7152,7 +7163,7 @@ var RegionDiscovery = /** @class */ (function () {
  * endpoint. It will store the pertinent config data in this object for use during token calls.
  */
 var Authority = /** @class */ (function () {
-    function Authority(authority, networkInterface, cacheManager, authorityOptions, proxyUrl) {
+    function Authority(authority, networkInterface, cacheManager, authorityOptions, logger, proxyUrl) {
         this.canonicalAuthority = authority;
         this._canonicalAuthority.validateAsUri();
         this.networkInterface = networkInterface;
@@ -7161,6 +7172,7 @@ var Authority = /** @class */ (function () {
         this.regionDiscovery = new RegionDiscovery(networkInterface);
         this.regionDiscoveryMetadata = { region_used: undefined, region_source: undefined, region_outcome: undefined };
         this.proxyUrl = proxyUrl || Constants.EMPTY_STRING;
+        this.logger = logger;
     }
     Object.defineProperty(Authority.prototype, "authorityType", {
         // See above for AuthorityType
@@ -7587,36 +7599,50 @@ var Authority = /** @class */ (function () {
      */
     Authority.prototype.updateCloudDiscoveryMetadata = function (metadataEntity) {
         return __awaiter(this, void 0, void 0, function () {
-            var metadata, harcodedMetadata;
+            var metadata, metadataEntityExpired, harcodedMetadata;
             return __generator(this, function (_a) {
                 switch (_a.label) {
                     case 0:
+                        this.logger.verbose("Attempting to get cloud discovery metadata in the config");
+                        this.logger.verbosePii("Known Authorities: " + (this.authorityOptions.knownAuthorities || Constants.NOT_APPLICABLE));
+                        this.logger.verbosePii("Authority Metadata: " + (this.authorityOptions.authorityMetadata || Constants.NOT_APPLICABLE));
+                        this.logger.verbosePii("Canonical Authority: " + (metadataEntity.canonical_authority || Constants.NOT_APPLICABLE));
                         metadata = this.getCloudDiscoveryMetadataFromConfig();
                         if (metadata) {
+                            this.logger.verbose("Found cloud discovery metadata in the config.");
                             metadataEntity.updateCloudDiscoveryMetadata(metadata, false);
                             return [2 /*return*/, AuthorityMetadataSource.CONFIG];
                         }
-                        // If The cached metadata came from config but that config was not passed to this instance, we must go to the network
-                        if (this.isAuthoritySameType(metadataEntity) && metadataEntity.aliasesFromNetwork && !metadataEntity.isExpired()) {
+                        // If the cached metadata came from config but that config was not passed to this instance, we must go to the network
+                        this.logger.verbose("Did not find cloud discovery metadata in the config... Attempting to get cloud discovery metadata from the cache.");
+                        metadataEntityExpired = metadataEntity.isExpired();
+                        if (this.isAuthoritySameType(metadataEntity) && metadataEntity.aliasesFromNetwork && !metadataEntityExpired) {
+                            this.logger.verbose("Found metadata in the cache.");
                             // No need to update
                             return [2 /*return*/, AuthorityMetadataSource.CACHE];
                         }
-                        harcodedMetadata = this.getCloudDiscoveryMetadataFromHarcodedValues();
+                        else if (metadataEntityExpired) {
+                            this.logger.verbose("The metadata entity is expired.");
+                        }
+                        this.logger.verbose("Did not find cloud discovery metadata in the cache... Attempting to get cloud discovery metadata from the network.");
                         return [4 /*yield*/, this.getCloudDiscoveryMetadataFromNetwork()];
                     case 1:
                         metadata = _a.sent();
                         if (metadata) {
+                            this.logger.verbose("cloud discovery metadata was successfully returned from getCloudDiscoveryMetadataFromNetwork()");
                             metadataEntity.updateCloudDiscoveryMetadata(metadata, true);
                             return [2 /*return*/, AuthorityMetadataSource.NETWORK];
                         }
+                        this.logger.verbose("Did not find cloud discovery metadata from the network... Attempting to get cloud discovery metadata from hardcoded values.");
+                        harcodedMetadata = this.getCloudDiscoveryMetadataFromHarcodedValues();
                         if (harcodedMetadata && !this.options.skipAuthorityMetadataCache) {
+                            this.logger.verbose("Found cloud discovery metadata from hardcoded values.");
                             metadataEntity.updateCloudDiscoveryMetadata(harcodedMetadata, false);
                             return [2 /*return*/, AuthorityMetadataSource.HARDCODED_VALUES];
                         }
-                        else {
-                            // Metadata could not be obtained from config, cache or network
-                            throw ClientConfigurationError.createUntrustedAuthorityError();
-                        }
+                        // Metadata could not be obtained from the config, cache, network or hardcoded values
+                        this.logger.error("Did not find cloud discovery metadata from hardcoded values... Metadata could not be obtained from config, cache, network or hardcoded values. Throwing Untrusted Authority Error.");
+                        throw ClientConfigurationError.createUntrustedAuthorityError();
                 }
             });
         });
@@ -7627,19 +7653,28 @@ var Authority = /** @class */ (function () {
     Authority.prototype.getCloudDiscoveryMetadataFromConfig = function () {
         // Check if network response was provided in config
         if (this.authorityOptions.cloudDiscoveryMetadata) {
+            this.logger.verbose("The cloud discovery metadata has been provided as a network response, in the config.");
             try {
+                this.logger.verbose("Attempting to parse the cloud discovery metadata.");
                 var parsedResponse = JSON.parse(this.authorityOptions.cloudDiscoveryMetadata);
                 var metadata = Authority.getCloudDiscoveryMetadataFromNetworkResponse(parsedResponse.metadata, this.hostnameAndPort);
+                this.logger.verbose("Parsed the cloud discovery metadata.");
                 if (metadata) {
+                    this.logger.verbose("There is returnable metadata attached to the parsed cloud discovery metadata.");
                     return metadata;
                 }
+                else {
+                    this.logger.verbose("There is no metadata attached to the parsed cloud discovery metadata.");
+                }
             }
             catch (e) {
+                this.logger.verbose("Unable to parse the cloud discovery metadata. Throwing Invalid Cloud Discovery Metadata Error.");
                 throw ClientConfigurationError.createInvalidCloudDiscoveryMetadataError();
             }
         }
         // If cloudDiscoveryMetadata is empty or does not contain the host, check knownAuthorities
         if (this.isInKnownAuthorities()) {
+            this.logger.verbose("The host is included in knownAuthorities. Creating new cloud discovery metadata from the host.");
             return Authority.createCloudDiscoveryMetadataFromHost(this.hostnameAndPort);
         }
         return null;
@@ -7651,7 +7686,7 @@ var Authority = /** @class */ (function () {
      */
     Authority.prototype.getCloudDiscoveryMetadataFromNetwork = function () {
         return __awaiter(this, void 0, void 0, function () {
-            var instanceDiscoveryEndpoint, options, match, response, metadata;
+            var instanceDiscoveryEndpoint, options, match, response, typedResponseBody, metadata, error_1, typedError;
             return __generator(this, function (_a) {
                 switch (_a.label) {
                     case 0:
@@ -7667,21 +7702,47 @@ var Authority = /** @class */ (function () {
                         return [4 /*yield*/, this.networkInterface.sendGetRequestAsync(instanceDiscoveryEndpoint, options)];
                     case 2:
                         response = _a.sent();
-                        metadata = isCloudInstanceDiscoveryResponse(response.body)
-                            ? response.body.metadata
-                            : [];
-                        if (metadata.length === 0) {
-                            // If no metadata is returned, authority is untrusted
+                        typedResponseBody = void 0;
+                        metadata = void 0;
+                        if (isCloudInstanceDiscoveryResponse(response.body)) {
+                            typedResponseBody = response.body;
+                            metadata = typedResponseBody.metadata;
+                            this.logger.verbosePii("tenant_discovery_endpoint is: " + typedResponseBody.tenant_discovery_endpoint);
+                        }
+                        else if (isCloudInstanceDiscoveryErrorResponse(response.body)) {
+                            this.logger.warning("A CloudInstanceDiscoveryErrorResponse was returned. The cloud instance discovery network request's status code is: " + response.status);
+                            typedResponseBody = response.body;
+                            if (typedResponseBody.error === Constants.INVALID_INSTANCE) {
+                                this.logger.error("The CloudInstanceDiscoveryErrorResponse error is invalid_instance.");
+                                return [2 /*return*/, null];
+                            }
+                            this.logger.warning("The CloudInstanceDiscoveryErrorResponse error is " + typedResponseBody.error);
+                            this.logger.warning("The CloudInstanceDiscoveryErrorResponse error description is " + typedResponseBody.error_description);
+                            this.logger.warning("Setting the value of the CloudInstanceDiscoveryMetadata (returned from the network) to []");
+                            metadata = [];
+                        }
+                        else {
+                            this.logger.error("AAD did not return a CloudInstanceDiscoveryResponse or CloudInstanceDiscoveryErrorResponse");
                             return [2 /*return*/, null];
                         }
+                        this.logger.verbose("Attempting to find a match between the developer's authority and the CloudInstanceDiscoveryMetadata returned from the network request.");
                         match = Authority.getCloudDiscoveryMetadataFromNetworkResponse(metadata, this.hostnameAndPort);
                         return [3 /*break*/, 4];
                     case 3:
-                        _a.sent();
+                        error_1 = _a.sent();
+                        if (error_1 instanceof AuthError) {
+                            this.logger.error("There was a network error while attempting to get the cloud discovery instance metadata.\nError: " + error_1.errorCode + "\nError Description: " + error_1.errorMessage);
+                        }
+                        else {
+                            typedError = error_1;
+                            this.logger.error("A non-MSALJS error was thrown while attempting to get the cloud instance discovery metadata.\nError: " + typedError.name + "\nError Description: " + typedError.message);
+                        }
                         return [2 /*return*/, null];
                     case 4:
+                        // Custom Domain scenario, host is trusted because Instance Discovery call succeeded
                         if (!match) {
-                            // Custom Domain scenario, host is trusted because Instance Discovery call succeeded
+                            this.logger.warning("The developer's authority was not found within the CloudInstanceDiscoveryMetadata returned from the network request.");
+                            this.logger.verbose("Creating custom Authority for custom domain scenario.");
                             match = Authority.createCloudDiscoveryMetadataFromHost(this.hostnameAndPort);
                         }
                         return [2 /*return*/, match];
@@ -7830,13 +7891,13 @@ var AuthorityFactory = /** @class */ (function () {
      * @param networkClient
      * @param protocolMode
      */
-    AuthorityFactory.createDiscoveredInstance = function (authorityUri, networkClient, cacheManager, authorityOptions, proxyUrl) {
+    AuthorityFactory.createDiscoveredInstance = function (authorityUri, networkClient, cacheManager, authorityOptions, logger, proxyUrl) {
         return __awaiter(this, void 0, void 0, function () {
             var acquireTokenAuthority, e_1;
             return __generator(this, function (_a) {
                 switch (_a.label) {
                     case 0:
-                        acquireTokenAuthority = AuthorityFactory.createInstance(authorityUri, networkClient, cacheManager, authorityOptions, proxyUrl);
+                        acquireTokenAuthority = AuthorityFactory.createInstance(authorityUri, networkClient, cacheManager, authorityOptions, logger, proxyUrl);
                         _a.label = 1;
                     case 1:
                         _a.trys.push([1, 3, , 4]);
@@ -7862,12 +7923,12 @@ var AuthorityFactory = /** @class */ (function () {
      * @param networkInterface
      * @param protocolMode
      */
-    AuthorityFactory.createInstance = function (authorityUrl, networkInterface, cacheManager, authorityOptions, proxyUrl) {
+    AuthorityFactory.createInstance = function (authorityUrl, networkInterface, cacheManager, authorityOptions, logger, proxyUrl) {
         // Throw error if authority url is empty
         if (StringUtils.isEmpty(authorityUrl)) {
             throw ClientConfigurationError.createUrlEmptyError();
         }
-        return new Authority(authorityUrl, networkInterface, cacheManager, authorityOptions, proxyUrl);
+        return new Authority(authorityUrl, networkInterface, cacheManager, authorityOptions, logger, proxyUrl);
     };
     return AuthorityFactory;
 }());