@azure/msal-node-extensions 1.5.16 → 1.5.18

package/lib/msal-node-extensions.cjs

@@ -1,4 +1,4 @@
-/*! @azure/msal-node-extensions v1.5.16 2025-07-01 */
+/*! @azure/msal-node-extensions v1.5.18 2025-07-23 */
 'use strict';
 'use strict';
 
@@ -343,7 +343,7 @@ class PersistenceCachePlugin {
     }
 }
 
-/*! @azure/msal-common v15.8.0 2025-07-01 */
+/*! @azure/msal-common v15.9.0 2025-07-23 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -446,7 +446,7 @@ const CacheOutcome = {
     // When a token is found in the cache or the cache is not supposed to be hit when making the request
     NOT_APPLICABLE: "0"};
 
-/*! @azure/msal-common v15.8.0 2025-07-01 */
+/*! @azure/msal-common v15.9.0 2025-07-23 */
 /**
  * General error class thrown by the MSAL.js library.
  */
@@ -467,7 +467,7 @@ class AuthError extends Error {
     }
 }
 
-/*! @azure/msal-common v15.8.0 2025-07-01 */
+/*! @azure/msal-common v15.9.0 2025-07-23 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -517,7 +517,7 @@ const missingTenantIdError = "missing_tenant_id_error";
 const methodNotImplemented = "method_not_implemented";
 const nestedAppAuthBridgeDisabled = "nested_app_auth_bridge_disabled";
 
-/*! @azure/msal-common v15.8.0 2025-07-01 */
+/*! @azure/msal-common v15.9.0 2025-07-23 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -591,7 +591,7 @@ function createClientAuthError(errorCode, additionalMessage) {
     return new ClientAuthError(errorCode, additionalMessage);
 }
 
-/*! @azure/msal-common v15.8.0 2025-07-01 */
+/*! @azure/msal-common v15.9.0 2025-07-23 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -782,7 +782,7 @@ class Logger {
     }
 }
 
-/*! @azure/msal-common v15.8.0 2025-07-01 */
+/*! @azure/msal-common v15.9.0 2025-07-23 */
 /**
  * Convert seconds to JS Date object. Seconds can be in a number or string format or undefined (will still return a date).
  * @param seconds
@@ -794,7 +794,7 @@ function toDateFromSeconds(seconds) {
     return new Date();
 }
 
-/*! @azure/msal-common v15.8.0 2025-07-01 */
+/*! @azure/msal-common v15.9.0 2025-07-23 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -805,7 +805,6 @@ const authorityUriInsecure = "authority_uri_insecure";
 const urlParseError = "url_parse_error";
 const urlEmptyError = "empty_url_error";
 const emptyInputScopesError = "empty_input_scopes_error";
-const invalidPromptValue = "invalid_prompt_value";
 const invalidClaims = "invalid_claims";
 const tokenRequestEmpty = "token_request_empty";
 const logoutRequestEmpty = "logout_request_empty";
@@ -820,9 +819,11 @@ const missingNonceAuthenticationHeader = "missing_nonce_authentication_header";
 const invalidAuthenticationHeader = "invalid_authentication_header";
 const cannotSetOIDCOptions = "cannot_set_OIDCOptions";
 const cannotAllowPlatformBroker = "cannot_allow_platform_broker";
-const authorityMismatch = "authority_mismatch";
+const authorityMismatch = "authority_mismatch";
+const invalidRequestMethodForEAR = "invalid_request_method_for_EAR";
+const invalidAuthorizePostBodyParameters = "invalid_authorize_post_body_parameters";
 
-/*! @azure/msal-common v15.8.0 2025-07-01 */
+/*! @azure/msal-common v15.9.0 2025-07-23 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -835,7 +836,6 @@ const ClientConfigurationErrorMessages = {
     [urlParseError]: "URL could not be parsed into appropriate segments.",
     [urlEmptyError]: "URL was empty or null.",
     [emptyInputScopesError]: "Scopes cannot be passed as null, undefined or empty array because they are required to obtain an access token.",
-    [invalidPromptValue]: "Please see here for valid configuration options: https://azuread.github.io/microsoft-authentication-library-for-js/ref/modules/_azure_msal_common.html#commonauthorizationurlrequest",
     [invalidClaims]: "Given claims parameter must be a stringified JSON object.",
     [tokenRequestEmpty]: "Token request was empty and not found in cache.",
     [logoutRequestEmpty]: "The logout request was null or undefined.",
@@ -851,6 +851,8 @@ const ClientConfigurationErrorMessages = {
     [cannotSetOIDCOptions]: "Cannot set OIDCOptions parameter. Please change the protocol mode to OIDC or use a non-Microsoft authority.",
     [cannotAllowPlatformBroker]: "Cannot set allowPlatformBroker parameter to true when not in AAD protocol mode.",
     [authorityMismatch]: "Authority mismatch error. Authority provided in login request or PublicClientApplication config does not match the environment of the provided account. Please use a matching account or make an interactive request to login to this authority.",
+    [invalidAuthorizePostBodyParameters]: "Invalid authorize post body parameters provided. If you are using authorizePostBodyParameters, the request method must be POST. Please check the request method and parameters.",
+    [invalidRequestMethodForEAR]: "Invalid request method for EAR protocol mode. The request method cannot be GET when using EAR protocol mode. Please change the request method to POST.",
 };
 /**
  * Error thrown when there is an error in configuration of the MSAL.js library.
@@ -866,10 +868,10 @@ function createClientConfigurationError(errorCode) {
     return new ClientConfigurationError(errorCode);
 }
 
-/*! @azure/msal-common v15.8.0 2025-07-01 */
+/*! @azure/msal-common v15.9.0 2025-07-23 */
 const X_CLIENT_EXTRA_SKU = "x-client-xtra-sku";
 
-/*! @azure/msal-common v15.8.0 2025-07-01 */
+/*! @azure/msal-common v15.9.0 2025-07-23 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -888,7 +890,7 @@ class ServerError extends AuthError {
     }
 }
 
-/*! @azure/msal-common v15.8.0 2025-07-01 */
+/*! @azure/msal-common v15.9.0 2025-07-23 */
 /**
  * Error thrown when user interaction is required.
  */
@@ -905,7 +907,7 @@ class InteractionRequiredAuthError extends AuthError {
     }
 }
 
-/*! @azure/msal-common v15.8.0 2025-07-01 */
+/*! @azure/msal-common v15.9.0 2025-07-23 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1805,7 +1807,7 @@ class NativeAuthError extends AuthError {
 
 /* eslint-disable header/header */
 const name = "@azure/msal-node-extensions";
-const version = "1.5.16";
+const version = "1.5.18";
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1932,8 +1934,11 @@ class NativeBrokerPlugin {
     }
     async acquireTokenSilent(request) {
         this.logger.trace("NativeBrokerPlugin - acquireTokenSilent called", request.correlationId);
-        const authParams = this.generateRequestParameters(request);
-        const account = await this.getAccount(request);
+        const platformRequest = request;
+        const authParams = this.generateRequestParameters(platformRequest);
+        const account = await this.getAccount(platformRequest);
+        platformRequest.redirectUri =
+            this.chooseRedirectUriByPlatform(platformRequest);
         return new Promise((resolve, reject) => {
             const resultCallback = (result) => {
                 try {
@@ -1946,15 +1951,15 @@ class NativeBrokerPlugin {
                         return;
                     }
                 }
-                const authenticationResult = this.getAuthenticationResult(request, result);
+                const authenticationResult = this.getAuthenticationResult(platformRequest, result);
                 resolve(authenticationResult);
             };
             try {
                 if (account) {
-                    msalNodeRuntime.msalNodeRuntime.AcquireTokenSilentlyAsync(authParams, request.correlationId, account, resultCallback);
+                    msalNodeRuntime.msalNodeRuntime.AcquireTokenSilentlyAsync(authParams, platformRequest.correlationId, account, resultCallback);
                 }
                 else {
-                    msalNodeRuntime.msalNodeRuntime.SignInSilentlyAsync(authParams, request.correlationId, resultCallback);
+                    msalNodeRuntime.msalNodeRuntime.SignInSilentlyAsync(authParams, platformRequest.correlationId, resultCallback);
                 }
             }
             catch (e) {
@@ -1967,8 +1972,11 @@ class NativeBrokerPlugin {
     }
     async acquireTokenInteractive(request, providedWindowHandle) {
         this.logger.trace("NativeBrokerPlugin - acquireTokenInteractive called", request.correlationId);
-        const authParams = this.generateRequestParameters(request);
-        const account = await this.getAccount(request);
+        const platformRequest = request;
+        const authParams = this.generateRequestParameters(platformRequest);
+        platformRequest.redirectUri =
+            this.chooseRedirectUriByPlatform(platformRequest);
+        const account = await this.getAccount(platformRequest);
         const windowHandle = providedWindowHandle || Buffer.from([0]);
         return new Promise((resolve, reject) => {
             const resultCallback = (result) => {
@@ -1982,37 +1990,39 @@ class NativeBrokerPlugin {
                         return;
                     }
                 }
-                const authenticationResult = this.getAuthenticationResult(request, result);
+                const authenticationResult = this.getAuthenticationResult(platformRequest, result);
                 resolve(authenticationResult);
             };
             try {
-                switch (request.prompt) {
+                switch (platformRequest.prompt) {
                     case PromptValue.LOGIN:
                     case PromptValue.SELECT_ACCOUNT:
                     case PromptValue.CREATE:
-                        this.logger.info("Calling native interop SignInInteractively API", request.correlationId);
-                        const loginHint = request.loginHint || Constants.EMPTY_STRING;
-                        msalNodeRuntime.msalNodeRuntime.SignInInteractivelyAsync(windowHandle, authParams, request.correlationId, loginHint, resultCallback);
+                        this.logger.info("Calling native interop SignInInteractively API", platformRequest.correlationId);
+                        const loginHint = platformRequest.loginHint ||
+                            Constants.EMPTY_STRING;
+                        msalNodeRuntime.msalNodeRuntime.SignInInteractivelyAsync(windowHandle, authParams, platformRequest.correlationId, loginHint, resultCallback);
                         break;
                     case PromptValue.NONE:
                         if (account) {
-                            this.logger.info("Calling native interop AcquireTokenSilently API", request.correlationId);
-                            msalNodeRuntime.msalNodeRuntime.AcquireTokenSilentlyAsync(authParams, request.correlationId, account, resultCallback);
+                            this.logger.info("Calling native interop AcquireTokenSilently API", platformRequest.correlationId);
+                            msalNodeRuntime.msalNodeRuntime.AcquireTokenSilentlyAsync(authParams, platformRequest.correlationId, account, resultCallback);
                         }
                         else {
-                            this.logger.info("Calling native interop SignInSilently API", request.correlationId);
-                            msalNodeRuntime.msalNodeRuntime.SignInSilentlyAsync(authParams, request.correlationId, resultCallback);
+                            this.logger.info("Calling native interop SignInSilently API", platformRequest.correlationId);
+                            msalNodeRuntime.msalNodeRuntime.SignInSilentlyAsync(authParams, platformRequest.correlationId, resultCallback);
                         }
                         break;
                     default:
                         if (account) {
-                            this.logger.info("Calling native interop AcquireTokenInteractively API", request.correlationId);
-                            msalNodeRuntime.msalNodeRuntime.AcquireTokenInteractivelyAsync(windowHandle, authParams, request.correlationId, account, resultCallback);
+                            this.logger.info("Calling native interop AcquireTokenInteractively API", platformRequest.correlationId);
+                            msalNodeRuntime.msalNodeRuntime.AcquireTokenInteractivelyAsync(windowHandle, authParams, platformRequest.correlationId, account, resultCallback);
                         }
                         else {
-                            this.logger.info("Calling native interop SignIn API", request.correlationId);
-                            const loginHint = request.loginHint || Constants.EMPTY_STRING;
-                            msalNodeRuntime.msalNodeRuntime.SignInAsync(windowHandle, authParams, request.correlationId, loginHint, resultCallback);
+                            this.logger.info("Calling native interop SignIn API", platformRequest.correlationId);
+                            const loginHint = platformRequest.loginHint ||
+                                Constants.EMPTY_STRING;
+                            msalNodeRuntime.msalNodeRuntime.SignInAsync(windowHandle, authParams, platformRequest.correlationId, loginHint, resultCallback);
                         }
                         break;
                 }
@@ -2095,7 +2105,7 @@ class NativeBrokerPlugin {
         const authParams = new msalNodeRuntime.msalNodeRuntime.AuthParameters();
         try {
             authParams.CreateAuthParameters(request.clientId, request.authority);
-            authParams.SetRedirectUri(request.redirectUri);
+            authParams.SetRedirectUri(this.chooseRedirectUriByPlatform(request));
             authParams.SetRequestedScopes(request.scopes.join(" "));
             if (request.claims) {
                 authParams.SetDecodedClaims(request.claims);
@@ -2132,6 +2142,22 @@ class NativeBrokerPlugin {
         }
         return authParams;
     }
+    chooseRedirectUriByPlatform(request) {
+        this.logger.trace("NativeBrokerPlugin - chooseRedirectUriByPlatform called", request.correlationId);
+        let redirectUri;
+        switch (process.platform) {
+            case "darwin":
+                redirectUri = "msauth.com.msauth.unsignedapp://auth";
+                break;
+            case "win32":
+                redirectUri = `ms-appx-web://Microsoft.AAD.BrokerPlugin/${request.clientId}`;
+                break;
+            default:
+                redirectUri =
+                    "https://login.microsoftonline.com/common/oauth2/nativeclient";
+        }
+        return redirectUri;
+    }
     getAuthenticationResult(request, authResult) {
         this.logger.trace("NativeBrokerPlugin - getAuthenticationResult called", request.correlationId);
         let fromCache = false;