@azure/msal-node-extensions 5.2.4 → 5.3.0

package/lib/msal-node-extensions.cjs

@@ -1,4 +1,4 @@
-/*! @azure/msal-node-extensions v5.2.4 2026-06-10 */
+/*! @azure/msal-node-extensions v5.3.0 2026-06-23 */
 'use strict';
 'use strict';
 
@@ -343,7 +343,7 @@ class PersistenceCachePlugin {
     }
 }
 
-/*! @azure/msal-common v16.8.0 2026-06-10 */
+/*! @azure/msal-common v16.10.0 2026-06-23 */
 /**
  * we considered making this "enum" in the request instead of string, however it looks like the allowed list of
  * prompt values kept changing over past couple of years. There are some undocumented prompt values for some
@@ -380,11 +380,11 @@ const CacheOutcome = {
     // When a token is found in the cache or the cache is not supposed to be hit when making the request
     NOT_APPLICABLE: "0"};
 
-/*! @azure/msal-common v16.8.0 2026-06-10 */
+/*! @azure/msal-common v16.10.0 2026-06-23 */
 const X_CLIENT_EXTRA_SKU = "x-client-xtra-sku";
 const RESOURCE = "resource";
 
-/*! @azure/msal-common v16.8.0 2026-06-10 */
+/*! @azure/msal-common v16.10.0 2026-06-23 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -396,7 +396,7 @@ function getDefaultErrorMessage(code) {
  * General error class thrown by the MSAL.js library.
  */
 class AuthError extends Error {
-    constructor(errorCode, errorMessage, suberror) {
+    constructor(errorCode, correlationId, errorMessage, suberror) {
         const message = errorMessage ||
             (errorCode ? getDefaultErrorMessage(errorCode) : "");
         const errorString = message ? `${errorCode}: ${message}` : errorCode;
@@ -405,14 +405,12 @@ class AuthError extends Error {
         this.errorCode = errorCode || "";
         this.errorMessage = message || "";
         this.subError = suberror || "";
-        this.name = "AuthError";
-    }
-    setCorrelationId(correlationId) {
         this.correlationId = correlationId;
+        this.name = "AuthError";
     }
 }
 
-/*! @azure/msal-common v16.8.0 2026-06-10 */
+/*! @azure/msal-common v16.10.0 2026-06-23 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -422,17 +420,17 @@ class AuthError extends Error {
  * Error thrown when there is an error in configuration of the MSAL.js library.
  */
 class ClientConfigurationError extends AuthError {
-    constructor(errorCode) {
-        super(errorCode);
+    constructor(errorCode, correlationId) {
+        super(errorCode, correlationId);
         this.name = "ClientConfigurationError";
         Object.setPrototypeOf(this, ClientConfigurationError.prototype);
     }
 }
-function createClientConfigurationError(errorCode) {
-    return new ClientConfigurationError(errorCode);
+function createClientConfigurationError(errorCode, correlationId) {
+    return new ClientConfigurationError(errorCode, correlationId);
 }
 
-/*! @azure/msal-common v16.8.0 2026-06-10 */
+/*! @azure/msal-common v16.10.0 2026-06-23 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -445,26 +443,26 @@ function createClientConfigurationError(errorCode) {
  * Error thrown when there is an error in the client code running on the browser.
  */
 class ClientAuthError extends AuthError {
-    constructor(errorCode, additionalMessage) {
-        super(errorCode, additionalMessage);
+    constructor(errorCode, correlationId, additionalMessage) {
+        super(errorCode, correlationId, additionalMessage);
         this.name = "ClientAuthError";
         Object.setPrototypeOf(this, ClientAuthError.prototype);
     }
 }
-function createClientAuthError(errorCode, additionalMessage) {
-    return new ClientAuthError(errorCode, additionalMessage);
+function createClientAuthError(errorCode, correlationId, additionalMessage) {
+    return new ClientAuthError(errorCode, correlationId, additionalMessage);
 }
 
-/*! @azure/msal-common v16.8.0 2026-06-10 */
+/*! @azure/msal-common v16.10.0 2026-06-23 */
 const untrustedAuthority = "untrusted_authority";
 
-/*! @azure/msal-common v16.8.0 2026-06-10 */
+/*! @azure/msal-common v16.10.0 2026-06-23 */
 const noAccountFound = "no_account_found";
 const noNetworkConnectivity = "no_network_connectivity";
 const userCanceled = "user_canceled";
 const platformBrokerError = "platform_broker_error";
 
-/*! @azure/msal-common v16.8.0 2026-06-10 */
+/*! @azure/msal-common v16.10.0 2026-06-23 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -527,22 +525,36 @@ function addLogToCache(correlationId, loggedMessage) {
     }
 }
 /**
- * Checks if a string is already a hashed logging string (6 alphanumeric characters)
+ * Extracts the leading minification hash from a log message, if present.
+ *
+ * Minified messages are produced by the logger-minify rollup plugin and are
+ * either a bare 6-character alphanumeric hash, or that hash followed by a space
+ * and runtime variables appended for local (console) logging, e.g.
+ * "abc123 user-1 popup". Only the leading hash is returned so that telemetry
+ * never captures the appended variables. Returns null when the message is not
+ * a minified message.
  */
-function isHashedString(str) {
-    if (str.length !== 6) {
-        return false;
+function getMessageHash(str) {
+    if (str.length < 6) {
+        return null;
     }
-    for (let i = 0; i < str.length; i++) {
+    /*
+     * If the message is longer than the hash, the hash must be delimited by a
+     * space (the separator the plugin inserts before appended variables).
+     */
+    if (str.length > 6 && str[6] !== " ") {
+        return null;
+    }
+    for (let i = 0; i < 6; i++) {
         const char = str[i];
         const isAlphaNumeric = (char >= "a" && char <= "z") ||
             (char >= "A" && char <= "Z") ||
             (char >= "0" && char <= "9");
         if (!isAlphaNumeric) {
-            return false;
+            return null;
         }
     }
-    return true;
+    return str.substring(0, 6);
 }
 /**
  * Class which facilitates logging of messages to a specific place.
@@ -589,10 +601,10 @@ class Logger {
      */
     logMessage(logMessage, options) {
         const correlationId = options.correlationId;
-        const isHashedInput = isHashedString(logMessage);
-        if (isHashedInput) {
+        const messageHash = getMessageHash(logMessage);
+        if (messageHash) {
             const loggedMessage = {
-                hash: logMessage,
+                hash: messageHash,
                 level: options.logLevel,
                 containsPii: options.containsPii || false,
                 milliseconds: 0, // Will be calculated in addLogToCache
@@ -725,7 +737,7 @@ class Logger {
     }
 }
 
-/*! @azure/msal-common v16.8.0 2026-06-10 */
+/*! @azure/msal-common v16.10.0 2026-06-23 */
 /**
  * Convert seconds to JS Date object. Seconds can be in a number or string format or undefined (will still return a date).
  * @param seconds
@@ -737,24 +749,23 @@ function toDateFromSeconds(seconds) {
     return new Date();
 }
 
-/*! @azure/msal-common v16.8.0 2026-06-10 */
+/*! @azure/msal-common v16.10.0 2026-06-23 */
 /**
  * Error thrown when user interaction is required.
  */
 class InteractionRequiredAuthError extends AuthError {
-    constructor(errorCode, errorMessage, subError, timestamp, traceId, correlationId, claims, errorNo) {
-        super(errorCode, errorMessage, subError);
+    constructor(errorCode, correlationId, errorMessage, subError, timestamp, traceId, claims, errorNo) {
+        super(errorCode, correlationId, errorMessage, subError);
         Object.setPrototypeOf(this, InteractionRequiredAuthError.prototype);
         this.timestamp = timestamp || "";
         this.traceId = traceId || "";
-        this.correlationId = correlationId || "";
         this.claims = claims || "";
         this.name = "InteractionRequiredAuthError";
         this.errorNo = errorNo;
     }
 }
 
-/*! @azure/msal-common v16.8.0 2026-06-10 */
+/*! @azure/msal-common v16.10.0 2026-06-23 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -764,8 +775,8 @@ class InteractionRequiredAuthError extends AuthError {
  * Error thrown when there is an error with the server code, for example, unavailability.
  */
 class ServerError extends AuthError {
-    constructor(errorCode, errorMessage, subError, errorNo, status) {
-        super(errorCode, errorMessage, subError);
+    constructor(errorCode, correlationId, errorMessage, subError, errorNo, status) {
+        super(errorCode, correlationId, errorMessage, subError);
         this.name = "ServerError";
         this.errorNo = errorNo;
         this.status = status;
@@ -773,7 +784,7 @@ class ServerError extends AuthError {
     }
 }
 
-/*! @azure/msal-common v16.8.0 2026-06-10 */
+/*! @azure/msal-common v16.10.0 2026-06-23 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -805,12 +816,12 @@ function tagToString(tag) {
  * Error class for MSAL Runtime errors that preserves detailed broker information
  */
 class PlatformBrokerError extends AuthError {
-    constructor(errorStatus, errorContext, errorCode, errorTag) {
+    constructor(errorStatus, correlationId, errorContext, errorCode, errorTag) {
         const tagString = tagToString(errorTag);
         const enhancedErrorContext = errorContext
             ? `${errorContext} (Error Code: ${errorCode}, Tag: ${tagString})`
             : `(Error Code: ${errorCode}, Tag: ${tagString})`;
-        super(errorStatus, enhancedErrorContext);
+        super(errorStatus, correlationId, enhancedErrorContext);
         this.name = "PlatformBrokerError";
         this.statusCode = errorCode;
         this.tag = tagString;
@@ -818,7 +829,7 @@ class PlatformBrokerError extends AuthError {
     }
 }
 
-/*! @azure/msal-common v16.8.0 2026-06-10 */
+/*! @azure/msal-common v16.10.0 2026-06-23 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1734,7 +1745,7 @@ class PersistenceCreator {
 
 /* eslint-disable header/header */
 const name = "@azure/msal-node-extensions";
-const version = "5.2.4";
+const version = "5.3.0";
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1817,7 +1828,7 @@ class NativeBrokerPlugin {
             msalNodeRuntime.msalNodeRuntime.RegisterLogger(logCallback, loggerOptions.piiLoggingEnabled || false);
         }
         catch (e) {
-            const wrappedError = this.wrapError(e);
+            const wrappedError = this.wrapError(e, "");
             if (wrappedError) {
                 throw wrappedError;
             }
@@ -1836,7 +1847,7 @@ class NativeBrokerPlugin {
                     result.CheckError();
                 }
                 catch (e) {
-                    const wrappedError = this.wrapError(e);
+                    const wrappedError = this.wrapError(e, correlationId);
                     if (wrappedError) {
                         reject(wrappedError);
                         return;
@@ -1852,7 +1863,7 @@ class NativeBrokerPlugin {
                 msalNodeRuntime.msalNodeRuntime.DiscoverAccountsAsync(clientId, correlationId, resultCallback);
             }
             catch (e) {
-                const wrappedError = this.wrapError(e);
+                const wrappedError = this.wrapError(e, correlationId);
                 if (wrappedError) {
                     reject(wrappedError);
                 }
@@ -1875,7 +1886,7 @@ class NativeBrokerPlugin {
                     result.CheckError();
                 }
                 catch (e) {
-                    const wrappedError = this.wrapError(e);
+                    const wrappedError = this.wrapError(e, request.correlationId);
                     if (wrappedError) {
                         reject(wrappedError);
                         return;
@@ -1893,7 +1904,7 @@ class NativeBrokerPlugin {
                 }
             }
             catch (e) {
-                const wrappedError = this.wrapError(e);
+                const wrappedError = this.wrapError(e, request.correlationId);
                 if (wrappedError) {
                     reject(wrappedError);
                 }
@@ -1917,7 +1928,7 @@ class NativeBrokerPlugin {
                     result.CheckError();
                 }
                 catch (e) {
-                    const wrappedError = this.wrapError(e);
+                    const wrappedError = this.wrapError(e, request.correlationId);
                     if (wrappedError) {
                         reject(wrappedError);
                         return;
@@ -1959,7 +1970,7 @@ class NativeBrokerPlugin {
                 }
             }
             catch (e) {
-                const wrappedError = this.wrapError(e);
+                const wrappedError = this.wrapError(e, request.correlationId);
                 if (wrappedError) {
                     reject(wrappedError);
                 }
@@ -1970,7 +1981,7 @@ class NativeBrokerPlugin {
         this.logger.trace("NativeBrokerPlugin - signOut called", request.correlationId);
         const account = await this.getAccount(request);
         if (!account) {
-            throw createClientAuthError(noAccountFound);
+            throw createClientAuthError(noAccountFound, request.correlationId);
         }
         return new Promise((resolve, reject) => {
             const resultCallback = (result) => {
@@ -1978,7 +1989,7 @@ class NativeBrokerPlugin {
                     result.CheckError();
                 }
                 catch (e) {
-                    const wrappedError = this.wrapError(e);
+                    const wrappedError = this.wrapError(e, request.correlationId);
                     if (wrappedError) {
                         reject(wrappedError);
                         return;
@@ -1990,7 +2001,7 @@ class NativeBrokerPlugin {
                 msalNodeRuntime.msalNodeRuntime.SignOutSilentlyAsync(request.clientId, request.correlationId, account, resultCallback);
             }
             catch (e) {
-                const wrappedError = this.wrapError(e);
+                const wrappedError = this.wrapError(e, request.correlationId);
                 if (wrappedError) {
                     reject(wrappedError);
                 }
@@ -2012,7 +2023,7 @@ class NativeBrokerPlugin {
                     result.CheckError();
                 }
                 catch (e) {
-                    const wrappedError = this.wrapError(e);
+                    const wrappedError = this.wrapError(e, correlationId);
                     if (wrappedError) {
                         reject(wrappedError);
                         return;
@@ -2024,7 +2035,7 @@ class NativeBrokerPlugin {
                 msalNodeRuntime.msalNodeRuntime.ReadAccountByIdAsync(accountId, correlationId, resultCallback);
             }
             catch (e) {
-                const wrappedError = this.wrapError(e);
+                const wrappedError = this.wrapError(e, correlationId);
                 if (wrappedError) {
                     reject(wrappedError);
                 }
@@ -2070,7 +2081,7 @@ class NativeBrokerPlugin {
             }));
         }
         catch (e) {
-            const wrappedError = this.wrapError(e);
+            const wrappedError = this.wrapError(e, request.correlationId);
             if (wrappedError) {
                 throw wrappedError;
             }
@@ -2161,39 +2172,39 @@ class NativeBrokerPlugin {
             result.hasOwnProperty("errorContext") ||
             result.hasOwnProperty("errorTag"));
     }
-    wrapError(error) {
+    wrapError(error, correlationId) {
         if (error &&
             typeof error === "object" &&
             this.isMsalRuntimeError(error)) {
             const { errorCode, errorStatus, errorContext, errorTag } = error;
-            const msalNodeRuntimeError = new PlatformBrokerError(msalNodeRuntime.ErrorStatus[errorStatus], errorContext, errorCode, errorTag);
+            const msalNodeRuntimeError = new PlatformBrokerError(msalNodeRuntime.ErrorStatus[errorStatus], correlationId, errorContext, errorCode, errorTag);
             let wrappedError;
             switch (errorStatus) {
                 case msalNodeRuntime.ErrorStatus.InteractionRequired:
                 case msalNodeRuntime.ErrorStatus.AccountUnusable:
-                    wrappedError = new InteractionRequiredAuthError(ErrorCodes.INTERATION_REQUIRED_ERROR_CODE, msalNodeRuntimeError.message);
+                    wrappedError = new InteractionRequiredAuthError(ErrorCodes.INTERATION_REQUIRED_ERROR_CODE, correlationId, msalNodeRuntimeError.message);
                     break;
                 case msalNodeRuntime.ErrorStatus.NoNetwork:
                 case msalNodeRuntime.ErrorStatus.NetworkTemporarilyUnavailable:
-                    wrappedError = createClientAuthError(noNetworkConnectivity);
+                    wrappedError = createClientAuthError(noNetworkConnectivity, correlationId);
                     break;
                 case msalNodeRuntime.ErrorStatus.ServerTemporarilyUnavailable:
-                    wrappedError = new ServerError(ErrorCodes.SERVER_UNAVAILABLE, msalNodeRuntimeError.message);
+                    wrappedError = new ServerError(ErrorCodes.SERVER_UNAVAILABLE, correlationId, msalNodeRuntimeError.message);
                     break;
                 case msalNodeRuntime.ErrorStatus.UserCanceled:
-                    wrappedError = createClientAuthError(userCanceled);
+                    wrappedError = createClientAuthError(userCanceled, correlationId);
                     break;
                 case msalNodeRuntime.ErrorStatus.AuthorityUntrusted:
-                    wrappedError = createClientConfigurationError(untrustedAuthority);
+                    wrappedError = createClientConfigurationError(untrustedAuthority, correlationId);
                     break;
                 case msalNodeRuntime.ErrorStatus.UserSwitched:
                     // Not an error case, if there's customer demand we can surface this as a response property
                     return null;
                 case msalNodeRuntime.ErrorStatus.AccountNotFound:
-                    wrappedError = createClientAuthError(noAccountFound);
+                    wrappedError = createClientAuthError(noAccountFound, correlationId);
                     break;
                 default:
-                    wrappedError = createClientAuthError(platformBrokerError);
+                    wrappedError = createClientAuthError(platformBrokerError, correlationId);
             }
             wrappedError.platformBrokerError = msalNodeRuntimeError;
             return wrappedError;