@equinor/fusion-framework-module-msal 10.0.0 → 10.0.2

package/dist/types/MsalClient.d.ts

@@ -100,6 +100,8 @@ export declare class MsalClient extends PublicClientApplication implements IMsal
      * - **Redirect**: Navigates browser to Microsoft login page. Returns `void` because the browser
      *   navigates to a new page. After redirect completes, the result will be available via
      *   `handleRedirectPromise()` when the app loads on the new page.
+     *
+     * @throws {Error} If an invalid `options.behavior` value is provided.
      */
     login(options: Required<LoginOptions>): Promise<LoginResult>;
     /**
@@ -153,6 +155,8 @@ export declare class MsalClient extends PublicClientApplication implements IMsal
      *
      * The default silent behavior is determined by presence of account in the request.
      * This provides optimal UX by minimizing unnecessary user interactions.
+     *
+     * @throws {Error} If no `request` is provided in `options`.
      */
     acquireToken(options: AcquireTokenOptions): Promise<AcquireTokenResult>;
 }

package/dist/types/MsalConfigurator.d.ts

@@ -37,6 +37,7 @@ export declare class MsalConfigurator extends BaseConfigBuilder<MsalConfig> {
      * The MSAL module version being configured.
      *
      * @default Latest
+     * @returns The configured MSAL module version.
      */
     get version(): string;
     /**

package/dist/types/MsalProvider.d.ts

@@ -37,6 +37,8 @@ export declare class MsalProvider extends BaseModuleProvider<MsalConfig> impleme
      * Default OAuth scopes used when the caller provides no scopes.
      *
      * Resolves to the app's Entra ID configured permissions via the `/.default` scope.
+     *
+     * @returns The default OAuth scopes derived from the configured client ID.
      */
     get defaultScopes(): string[];
     /**
@@ -54,6 +56,8 @@ export declare class MsalProvider extends BaseModuleProvider<MsalConfig> impleme
      *
      * Provides access to the underlying MSAL PublicClientApplication for advanced use cases.
      * Prefer using provider methods for standard authentication operations.
+     *
+     * @returns The underlying MSAL client instance.
      */
     get client(): IMsalClient;
     /**
@@ -61,6 +65,8 @@ export declare class MsalProvider extends BaseModuleProvider<MsalConfig> impleme
      *
      * Returns the active account if a user is authenticated, or null if no user is logged in.
      * This is a shorthand for `client.getActiveAccount()`.
+     *
+     * @returns The currently authenticated account, or `null` if no user is logged in.
      */
     get account(): AccountInfo | null;
     /**
@@ -93,6 +99,8 @@ export declare class MsalProvider extends BaseModuleProvider<MsalConfig> impleme
      *
      * The provider will attempt automatic login with empty scopes if requiresAuth is true.
      * Apps should call acquireToken with actual scopes after initialization completes.
+     *
+     * @throws {Error} If auth code exchange requires a client ID but none is configured.
      */
     initialize(): Promise<void>;
     /**
@@ -126,6 +134,8 @@ export declare class MsalProvider extends BaseModuleProvider<MsalConfig> impleme
      * @remark Empty scopes are currently tracked as telemetry exceptions but execution continues for monitoring purposes.
      * This behavior will be changed to throw exceptions once sufficient metrics are collected.
      *
+     * @throws {Error} Re-throws any error encountered during token acquisition after tracking it via telemetry.
+     *
      * @example
      * ```typescript
      * // Modern API format
@@ -257,6 +267,9 @@ export declare class MsalProvider extends BaseModuleProvider<MsalConfig> impleme
      * - Version compatibility is tracked via telemetry
      * - Throws error if unsupported version is requested
      *
+     * @template T - The provider interface type expected by the target version.
+     * @throws {Error} If the requested version cannot be resolved or the proxy fails to create.
+     *
      * @example
      * ```typescript
      * // Create v2-compatible proxy

package/dist/types/create-proxy-provider.d.ts

@@ -10,6 +10,9 @@ import type { IMsalProvider } from './MsalProvider.interface';
  * @param version - The target version string (e.g., '2.0.0', '4.0.0')
  * @returns A proxy provider compatible with the specified version
  *
+ * @template T - The provider interface type expected by the target version.
+ * @throws {Error} If the resolved version is not supported.
+ *
  * @example
  * ```typescript
  * const baseProvider = new MsalProvider(config);

package/dist/types/static.d.ts

@@ -3,7 +3,7 @@
  *
  * This constant is used to register and identify the MSAL module within the Fusion Framework.
  */
-export declare const ModuleName: "msal";
+export declare const ModuleName: 'msal';
 /**
  * Enumeration of supported MSAL module versions.
  *

package/dist/types/v2/IAuthClient.interface.d.ts

@@ -79,7 +79,7 @@ export interface IAuthClient extends IPublicClientApplication {
      * @param silent - Whether to attempt silent authentication first
      * @returns Promise resolving to authentication result or void
      */
-    login(options?: AuthRequest, behavior?: AuthBehavior, silent?: boolean): Promise<AuthenticationResult | void>;
+    login(options?: AuthRequest, behavior?: AuthBehavior, silent?: boolean): Promise<AuthenticationResult | undefined>;
     /**
      * Acquire access token with optional silent authentication fallback
      * @param options - Authentication request options
@@ -87,5 +87,5 @@ export interface IAuthClient extends IPublicClientApplication {
      * @param silent - Whether to attempt silent authentication first
      * @returns Promise resolving to authentication result or void
      */
-    acquireToken(options?: AuthRequest, behavior?: AuthBehavior, silent?: boolean): Promise<AuthenticationResult | void>;
+    acquireToken(options?: AuthRequest, behavior?: AuthBehavior, silent?: boolean): Promise<AuthenticationResult | undefined>;
 }

package/dist/types/v2/Logger.d.ts

@@ -0,0 +1,92 @@
+import { LogLevel, type LoggerOptions } from './types.js';
+/**
+ * Class which facilitates logging of messages to a specific place
+ */
+export declare class Logger {
+    private correlationId;
+    private level;
+    private piiLoggingEnabled;
+    private localCallback;
+    private packageName;
+    private packageVersion;
+    /**
+     * Creates a new `Logger`.
+     *
+     * @param loggerOptions - Logger configuration, including callback, PII, and log level settings.
+     * @param packageName - Name of the package implementing this logger.
+     * @param packageVersion - Version of the package implementing this logger.
+     */
+    constructor(loggerOptions: LoggerOptions, packageName?: string, packageVersion?: string);
+    /**
+     * Creates the default logger options used when none are provided.
+     *
+     * @returns Default logger options with a no-op callback, PII logging disabled, and Info level.
+     */
+    private static createDefaultLoggerOptions;
+    /**
+     * Create new Logger with existing configurations.
+     *
+     * @param packageName - Name of the package implementing this logger.
+     * @param packageVersion - Version of the package implementing this logger.
+     * @param correlationId - Correlation ID to use, falling back to this logger's own if omitted.
+     * @returns A new `Logger` instance cloned from this one.
+     */
+    clone(packageName: string, packageVersion: string, correlationId?: string): Logger;
+    /**
+     * Logs error messages.
+     *
+     * @param message - The message to log.
+     * @param correlationId - Correlation ID to attach to the log entry, if any.
+     */
+    error(message: string, correlationId?: string): void;
+    /**
+     * Logs warning messages.
+     *
+     * @param message - The message to log.
+     * @param correlationId - Correlation ID to attach to the log entry, if any.
+     */
+    warning(message: string, correlationId?: string): void;
+    /**
+     * Logs info messages.
+     *
+     * @param message - The message to log.
+     * @param correlationId - Correlation ID to attach to the log entry, if any.
+     */
+    info(message: string, correlationId?: string): void;
+    /**
+     * Logs verbose messages.
+     *
+     * @param message - The message to log.
+     * @param correlationId - Correlation ID to attach to the log entry, if any.
+     */
+    verbose(message: string, correlationId?: string): void;
+    /**
+     * Logs trace messages.
+     *
+     * @param message - The message to log.
+     * @param correlationId - Correlation ID to attach to the log entry, if any.
+     */
+    trace(message: string, correlationId?: string): void;
+    /**
+     * Returns whether PII Logging is enabled or not.
+     *
+     * @returns `true` when PII logging is enabled, otherwise `false`.
+     */
+    isPiiLoggingEnabled(): boolean;
+    /**
+     * Formats and dispatches a log message to the configured callback, unless it
+     * is below the configured log level or contains PII while PII logging is disabled.
+     *
+     * @param logMessage - The raw message to log.
+     * @param options - Log level, PII flag, and correlation ID for this message.
+     */
+    private logMessage;
+    /**
+     * Execute callback with message.
+     *
+     * @param level - The log level of the message.
+     * @param message - The formatted message to send to the callback.
+     * @param containsPii - Whether the message contains personally identifiable information.
+     */
+    executeCallback(level: LogLevel, message: string, containsPii: boolean): void;
+}

package/dist/types/v2/MsalProvider.interface.d.ts

@@ -81,7 +81,7 @@ export interface IMsalProvider {
     /**
      * Handle authentication redirect
      */
-    handleRedirect(): Promise<void | null>;
+    handleRedirect(): Promise<undefined | null>;
     /**
      * Create a proxy provider for version compatibility
      * @param version - Version string

package/dist/types/v2/types.d.ts

@@ -4,6 +4,7 @@
  * This file contains all types required to type IPublicClientApplication
  * from MSAL v2.38.4 to maintain backward compatibility while using MSAL v4 implementation.
  */
+import type { Logger } from './Logger.js';
 /**
  * Key-Value type to support queryParams, extraQueryParams and claims
  */
@@ -291,9 +292,7 @@ export declare enum LogLevel {
 /**
  * Callback to send the messages to
  */
-export interface ILoggerCallback {
-    (level: LogLevel, message: string, containsPii: boolean): void;
-}
+export type ILoggerCallback = (level: LogLevel, message: string, containsPii: boolean) => void;
 /**
  * Options for logger messages
  */
@@ -303,52 +302,7 @@ export type LoggerOptions = {
     logLevel?: LogLevel;
     correlationId?: string;
 };
-/**
- * Class which facilitates logging of messages to a specific place
- */
-export declare class Logger {
-    private correlationId;
-    private level;
-    private piiLoggingEnabled;
-    private localCallback;
-    private packageName;
-    private packageVersion;
-    constructor(loggerOptions: LoggerOptions, packageName?: string, packageVersion?: string);
-    private static createDefaultLoggerOptions;
-    /**
-     * Create new Logger with existing configurations.
-     */
-    clone(packageName: string, packageVersion: string, correlationId?: string): Logger;
-    /**
-     * Logs error messages.
-     */
-    error(message: string, correlationId?: string): void;
-    /**
-     * Logs warning messages.
-     */
-    warning(message: string, correlationId?: string): void;
-    /**
-     * Logs info messages.
-     */
-    info(message: string, correlationId?: string): void;
-    /**
-     * Logs verbose messages.
-     */
-    verbose(message: string, correlationId?: string): void;
-    /**
-     * Logs trace messages.
-     */
-    trace(message: string, correlationId?: string): void;
-    /**
-     * Returns whether PII Logging is enabled or not.
-     */
-    isPiiLoggingEnabled(): boolean;
-    private logMessage;
-    /**
-     * Execute callback with message.
-     */
-    executeCallback(level: LogLevel, message: string, containsPii: boolean): void;
-}
+export { Logger } from './Logger.js';
 /**
  * Performance event type
  */

package/dist/types/v4/types.d.ts

@@ -395,9 +395,7 @@ export declare enum LogLevel {
 /**
  * Callback to send the messages to
  */
-export interface ILoggerCallback {
-    (level: LogLevel, message: string, containsPii: boolean): void;
-}
+export type ILoggerCallback = (level: LogLevel, message: string, containsPii: boolean) => void;
 /**
  * Event callback function type
  */

package/dist/types/version.d.ts

@@ -1 +1 @@
-export declare const version = "10.0.0";
+export declare const version = "10.0.2";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@equinor/fusion-framework-module-msal",
-  "version": "10.0.0",
+  "version": "10.0.2",
   "description": "Microsoft Authentication Library (MSAL) integration module for Fusion Framework",
   "main": "dist/esm/index.js",
   "types": "dist/types/index.d.ts",
@@ -48,18 +48,18 @@
   "devDependencies": {
     "@types/semver": "^7.7.1",
     "semver": "^7.7.4",
-    "typescript": "^6.0.3",
+    "typescript": "^7.0.2",
     "zod": "^4.4.3",
-    "@equinor/fusion-framework-module": "^6.1.0",
-    "@equinor/fusion-framework-module-telemetry": "^7.0.0"
+    "@equinor/fusion-framework-module": "^6.1.1",
+    "@equinor/fusion-framework-module-telemetry": "^7.0.1"
   },
   "peerDependencies": {
     "@types/semver": "^7.0.0",
     "semver": "^7.0.0",
-    "typescript": "^5.0.0",
+    "typescript": ">=5.0.0",
     "zod": "^4.0.0",
-    "@equinor/fusion-framework-module": "^6.1.0",
-    "@equinor/fusion-framework-module-telemetry": "^7.0.0"
+    "@equinor/fusion-framework-module": "^6.1.1",
+    "@equinor/fusion-framework-module-telemetry": "^7.0.1"
   },
   "peerDependenciesMeta": {
     "@equinor/fusion-framework-module-telemetry": {

package/src/MsalClient.ts

@@ -145,11 +145,14 @@ export class MsalClient extends PublicClientApplication implements IMsalClient {
    * - **Redirect**: Navigates browser to Microsoft login page. Returns `void` because the browser
    *   navigates to a new page. After redirect completes, the result will be available via
    *   `handleRedirectPromise()` when the app loads on the new page.
+   *
+   * @throws {Error} If an invalid `options.behavior` value is provided.
    */
   async login(options: Required<LoginOptions>): Promise<LoginResult> {
     // Attempt silent authentication first if enabled
     // This provides better UX by avoiding unnecessary popups/redirects
     if (options.silent) {
+      // Warn early when neither an account nor login hint is available for silent SSO
       if (!options.request.account && !options.request.loginHint) {
         this.getLogger().warning(
           'No account or login hint provided, please provide an account or login hint in the request',
@@ -216,6 +219,7 @@ export class MsalClient extends PublicClientApplication implements IMsalClient {
    * ```
    */
   async logout(options?: LogoutOptions): Promise<void> {
+    // Warn when no account was supplied since the active account will be used instead
     if (!options?.account) {
       this.getLogger().warning(
         'No account available for logout, please provide an account in the options',
@@ -253,14 +257,18 @@ export class MsalClient extends PublicClientApplication implements IMsalClient {
    *
    * The default silent behavior is determined by presence of account in the request.
    * This provides optimal UX by minimizing unnecessary user interactions.
+   *
+   * @throws {Error} If no `request` is provided in `options`.
    */
   async acquireToken(options: AcquireTokenOptions): Promise<AcquireTokenResult> {
     const { behavior = 'redirect', silent = !!options.request?.account, request } = options;
 
+    // A request is required to know which scopes/account to acquire a token for
     if (!request) {
       throw new Error('No request provided, please provide a request in the options');
     }
 
+    // Warn when no scopes are requested, since MSAL requires at least one scope
     if (request.scopes.length === 0) {
       this.getLogger().warning(
         'No scopes provided, please provide scopes in the request option, see options.request for more information.',
@@ -271,6 +279,7 @@ export class MsalClient extends PublicClientApplication implements IMsalClient {
     // Attempt silent token acquisition first
     // This fetches from cache or uses refresh token without user interaction
     if (silent) {
+      // Only silent-acquire when an account is available to look up cached tokens for
       if (request.account) {
         try {
           this.getLogger().verbose(

package/src/MsalConfigurator.ts

@@ -84,6 +84,7 @@ export class MsalConfigurator extends BaseConfigBuilder<MsalConfig> {
    * The MSAL module version being configured.
    *
    * @default Latest
+   * @returns The configured MSAL module version.
    */
   public get version(): string {
     return version;
@@ -100,6 +101,7 @@ export class MsalConfigurator extends BaseConfigBuilder<MsalConfig> {
     this._set('version', async () => this.version);
     // Auto-detect and integrate telemetry module if available
     this._set('telemetry.provider', async (args) => {
+      // Only resolve the telemetry instance when the telemetry module is registered
       if (args.hasModule('telemetry')) {
         const telemetry = await args.requireInstance('telemetry');
         return telemetry;
@@ -335,7 +337,7 @@ export class MsalConfigurator extends BaseConfigBuilder<MsalConfig> {
 
     // Auto-create client if config provided but no client instance
     // This allows users to provide configuration without manually instantiating the client
-    if (!config.client && !!this.#msalConfig) {
+    if (!config.client && this.#msalConfig) {
       const clientConfig = this.#msalConfig;
 
       config.telemetry.provider?.trackEvent({

package/src/MsalProvider.ts

@@ -67,6 +67,8 @@ export class MsalProvider extends BaseModuleProvider<MsalConfig> implements IMsa
    * Default OAuth scopes used when the caller provides no scopes.
    *
    * Resolves to the app's Entra ID configured permissions via the `/.default` scope.
+   *
+   * @returns The default OAuth scopes derived from the configured client ID.
    */
   get defaultScopes(): string[] {
     const clientId = this.#client.clientId;
@@ -91,6 +93,8 @@ export class MsalProvider extends BaseModuleProvider<MsalConfig> implements IMsa
    *
    * Provides access to the underlying MSAL PublicClientApplication for advanced use cases.
    * Prefer using provider methods for standard authentication operations.
+   *
+   * @returns The underlying MSAL client instance.
    */
   get client(): IMsalClient {
     return this.#client;
@@ -101,6 +105,8 @@ export class MsalProvider extends BaseModuleProvider<MsalConfig> implements IMsa
    *
    * Returns the active account if a user is authenticated, or null if no user is logged in.
    * This is a shorthand for `client.getActiveAccount()`.
+   *
+   * @returns The currently authenticated account, or `null` if no user is logged in.
    */
   get account(): AccountInfo | null {
     return this.#client.getActiveAccount();
@@ -175,6 +181,8 @@ export class MsalProvider extends BaseModuleProvider<MsalConfig> implements IMsa
    *
    * The provider will attempt automatic login with empty scopes if requiresAuth is true.
    * Apps should call acquireToken with actual scopes after initialization completes.
+   *
+   * @throws {Error} If auth code exchange requires a client ID but none is configured.
    */
   async initialize(): Promise<void> {
     // Guard: skip authentication when running inside MSAL's hidden iframe.
@@ -204,6 +212,7 @@ export class MsalProvider extends BaseModuleProvider<MsalConfig> implements IMsa
         // Use MSAL's acquireTokenByCode to exchange backend auth code for tokens
         // This follows Microsoft's standard SPA Auth Code Flow pattern
         const clientId = this.#client.clientId;
+        // A client ID is required to build the default scope used for the auth code exchange
         if (!clientId) {
           throw new Error('Client ID is required for auth code exchange');
         }
@@ -248,6 +257,7 @@ export class MsalProvider extends BaseModuleProvider<MsalConfig> implements IMsa
       // Priority 1: Check if returning from redirect-based authentication
       // This handles cases where user just completed a login/acquireToken via redirect
       const handleRedirectResult = await this.handleRedirect();
+      // A returned account means the user just completed a redirect-based login
       if (handleRedirectResult?.account) {
         // Successfully authenticated via redirect - set as active account
         // This means the user was redirected to Microsoft and came back authenticated
@@ -263,6 +273,7 @@ export class MsalProvider extends BaseModuleProvider<MsalConfig> implements IMsa
         // Note: Using default scopes here as we don't know what scopes the app needs yet
         // App should call acquireToken with actual scopes after initialization
         const loginResult = await this.login({ request: { scopes: this.defaultScopes } });
+        // Only set the active account when the automatic login actually returned one
         if (loginResult?.account) {
           // Automatic login successful - set as active account
           this.#client.setActiveAccount(loginResult.account);
@@ -315,6 +326,8 @@ export class MsalProvider extends BaseModuleProvider<MsalConfig> implements IMsa
    * @remark Empty scopes are currently tracked as telemetry exceptions but execution continues for monitoring purposes.
    * This behavior will be changed to throw exceptions once sufficient metrics are collected.
    *
+   * @throws {Error} Re-throws any error encountered during token acquisition after tracking it via telemetry.
+   *
    * @example
    * ```typescript
    * // Modern API format
@@ -371,6 +384,7 @@ export class MsalProvider extends BaseModuleProvider<MsalConfig> implements IMsa
 
     // Handle empty scopes - currently monitoring for telemetry, will throw in future
     if (candidateScopes.length === 0) {
+      // Fall back to the client-id-derived default scope when one is available
       if (defaultScopes.length > 0) {
         this._trackEvent('acquireToken.missing-scope.defaulted', TelemetryLevel.Warning, {
           properties: { ...telemetryProperties, defaultScopes },
@@ -383,7 +397,7 @@ export class MsalProvider extends BaseModuleProvider<MsalConfig> implements IMsa
           exception,
           properties: telemetryProperties,
         });
-        // TODO: throw exception when sufficient metrics are collected
+        // TODO(#5113): throw exception when sufficient metrics are collected
         // This allows us to monitor how often empty scopes are provided before enforcing validation
       }
     }
@@ -521,6 +535,7 @@ export class MsalProvider extends BaseModuleProvider<MsalConfig> implements IMsa
       }
     }
 
+    // Perform interactive authentication based on specified behavior
     switch (behavior) {
       case 'popup':
         return await this.#client.loginPopup(request);
@@ -606,6 +621,7 @@ export class MsalProvider extends BaseModuleProvider<MsalConfig> implements IMsa
   async handleRedirect(): Promise<AuthenticationResult | null> {
     // Process any pending redirect from authentication flow
     const result = await this.client.handleRedirectPromise();
+    // Only track/log when a redirect result is actually returned
     if (result) {
       // Track successful redirect completion for monitoring
       this._trackEvent('handleRedirect.success', TelemetryLevel.Information, {
@@ -632,6 +648,9 @@ export class MsalProvider extends BaseModuleProvider<MsalConfig> implements IMsa
    * - Version compatibility is tracked via telemetry
    * - Throws error if unsupported version is requested
    *
+   * @template T - The provider interface type expected by the target version.
+   * @throws {Error} If the requested version cannot be resolved or the proxy fails to create.
+   *
    * @example
    * ```typescript
    * // Create v2-compatible proxy

package/src/create-client-log-callback.ts

@@ -32,6 +32,7 @@ const parseMsalMessage = (message: string) => {
     /^\[([^\]]+)\]\s*:\s*\[([^\]]*)\]\s*:\s*([^:]+)\s*:\s*(\w+)\s*-\s*([^-]+)\s*-\s*(.*)$/,
   );
 
+  // A structured match means we can extract package/component/message parts
   if (match) {
     const [, _timestamp, _correlationId, packageInfo, _logLevel, component, logMessage] = match;
     return {

package/src/create-proxy-provider.ts

@@ -15,6 +15,9 @@ import { createProxyProvider as createProxyProvider_v4 } from './v4/create-proxy
  * @param version - The target version string (e.g., '2.0.0', '4.0.0')
  * @returns A proxy provider compatible with the specified version
  *
+ * @template T - The provider interface type expected by the target version.
+ * @throws {Error} If the resolved version is not supported.
+ *
  * @example
  * ```typescript
  * const baseProvider = new MsalProvider(config);
@@ -28,6 +31,7 @@ export function createProxyProvider<T = IMsalProvider>(
   // Resolve the requested version to determine which proxy to create
   const { enumVersion } = resolveVersion(version);
 
+  // Build the version-appropriate proxy based on the resolved MSAL module version
   switch (enumVersion) {
     case MsalModuleVersion.V2:
       // Create v2-compatible proxy with legacy API adapters
@@ -39,6 +43,7 @@ export function createProxyProvider<T = IMsalProvider>(
       // Create transparent proxy for v5 - passes through to original provider
       return new Proxy(provider, {
         get: (target: IMsalProvider, prop: keyof IMsalProvider) => {
+          // Delegate every known property/method to the underlying provider
           switch (prop) {
             case 'version': {
               return target.version;

package/src/module.ts

@@ -45,6 +45,7 @@ export const module: MsalModule = {
     // Priority 2: Check if provider exists in parent module (proxy compatibility)
     // This allows child applications to reuse parent's authentication provider
     const hostProvider = init.ref?.auth;
+    // Reuse the parent's provider (via a version-compatible proxy) when available
     if (hostProvider) {
       try {
         const proxyProvider = hostProvider.createProxyProvider(config.version);
@@ -52,7 +53,7 @@ export const module: MsalModule = {
       } catch (error) {
         console.error('MsalModule::Failed to create proxy provider', error);
         // Fallback to host provider to prevent app breakage during migration
-        // TODO: Consider throwing error instead once all apps are migrated to v4
+        // TODO(#5114): Consider throwing error instead once all apps are migrated to v4
         return hostProvider;
       }
     }
@@ -105,7 +106,7 @@ export type AuthConfigFn<TRef = unknown> = (
  * ```
  */
 export const enableMSAL = (
-  // @biome-ignore lint/suspicious/noExplicitAny: must be any to support all module types
+  // biome-ignore lint/suspicious/noExplicitAny: must be any to support all module types
   configurator: IModulesConfigurator<any, any>,
   configure?: AuthConfigFn,
 ): void => {

package/src/v2/IAuthClient.interface.ts

@@ -97,7 +97,7 @@ export interface IAuthClient extends IPublicClientApplication {
     options?: AuthRequest,
     behavior?: AuthBehavior,
     silent?: boolean,
-  ): Promise<AuthenticationResult | void>;
+  ): Promise<AuthenticationResult | undefined>;
 
   /**
    * Acquire access token with optional silent authentication fallback
@@ -110,5 +110,5 @@ export interface IAuthClient extends IPublicClientApplication {
     options?: AuthRequest,
     behavior?: AuthBehavior,
     silent?: boolean,
-  ): Promise<AuthenticationResult | void>;
+  ): Promise<AuthenticationResult | undefined>;
 }