@microsoft/managed-apps 0.5.13 → 0.5.15

package/README.md

@@ -12,6 +12,36 @@ The package has no root entry; import from one of the subpaths below. Usage and
 
 `getUser`, `IUser`.
 
+`getUser()` returns the signed-in user's `fullName`, `objectId`, and `tenantId` supplied
+by the host:
+
+```typescript
+import { getUser } from '@microsoft/managed-apps/auth';
+
+const user = await getUser();
+// Example host-supplied identity:
+// {
+//   fullName: 'Alex Example',
+//   objectId: '11111111-1111-4111-8111-111111111111',
+//   tenantId: '22222222-2222-4222-8222-222222222222'
+// }
+```
+
+Results are cached for the app-frame session only when both IDs contain
+non-whitespace characters. The SDK relies on the host's typed response contract;
+these checks determine cache eligibility, not response validation. An empty
+`fullName` is valid when both IDs are present. Subsequent calls return the same
+cached object without another host request; field values are never trimmed or normalized.
+
+For compatibility, blank or partial identities still resolve successfully but are
+not cached. A later explicit `getUser()` call requests identity from the host again;
+there are no automatic retries. Genuine host/channel failures still reject.
+
+An SDK-only update cannot supply IDs omitted by an older host or missing from the
+signed-in account. Upgrade the host to receive its identity-wiring fix and open a
+fresh host/app frame. Identity belongs to that lifetime; account changes also require
+a fresh host/frame.
+
 ### `@microsoft/managed-apps/data`
 
 `getClient`, `DataClient`, `IOperationOptions`, `IOperationResult`, `serializeMultiSelectPicklistFields`, `deserializeMultiSelectPicklistFields`.

package/dist/auth/UserProvider.d.ts

@@ -5,8 +5,8 @@ import type { IUser } from './Auth.Types';
 /**
  * Returns the identity of the signed-in user from the host.
  *
- * The result is cached for the session — subsequent calls return the same
- * object without a round-trip to the host.
+ * Results with nonblank IDs are cached for the app-frame session.
+ * Incomplete identities are returned unchanged without caching.
  */
 export declare function getUser(): Promise<IUser>;
 //# sourceMappingURL=UserProvider.d.ts.map

package/dist/auth/UserProvider.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"UserProvider.d.ts","sourceRoot":"","sources":["../../src/auth/UserProvider.ts"],"names":[],"mappings":"AAAA;;GAEG;AAKH,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,cAAc,CAAC;AAI1C;;;;;GAKG;AACH,wBAAsB,OAAO,IAAI,OAAO,CAAC,KAAK,CAAC,CAe9C"}
+{"version":3,"file":"UserProvider.d.ts","sourceRoot":"","sources":["../../src/auth/UserProvider.ts"],"names":[],"mappings":"AAAA;;GAEG;AAMH,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,cAAc,CAAC;AAK1C;;;;;GAKG;AACH,wBAAsB,OAAO,IAAI,OAAO,CAAC,KAAK,CAAC,CAyB9C"}

package/dist/auth/UserProvider.js

@@ -2,13 +2,15 @@
  * Copyright (C) Microsoft Corporation. All rights reserved.
  */
 import { Methods } from '@microsoft/managed-apps-common/communication';
+import { trackEvent } from '../internal/communication/trackEvent';
 import { getSdkChannel } from '../internal/sdkChannel';
 let user;
+let hasReportedInvalidIdentity = false;
 /**
  * Returns the identity of the signed-in user from the host.
  *
- * The result is cached for the session — subsequent calls return the same
- * object without a round-trip to the host.
+ * Results with nonblank IDs are cached for the app-frame session.
+ * Incomplete identities are returned unchanged without caching.
  */
 export async function getUser() {
     if (user) {
@@ -16,11 +18,20 @@ export async function getUser() {
     }
     const channel = await getSdkChannel();
     const response = await channel.send(Methods.Auth.getUser);
-    user = {
+    const result = {
         fullName: response.fullName,
         objectId: response.objectId,
         tenantId: response.tenantId,
     };
-    return user;
+    const hasObjectId = (result.objectId?.trim().length ?? 0) > 0;
+    const hasTenantId = (result.tenantId?.trim().length ?? 0) > 0;
+    if (hasObjectId && hasTenantId) {
+        user = result;
+    }
+    else if (!hasReportedInvalidIdentity) {
+        hasReportedInvalidIdentity = true;
+        trackEvent('Auth.GetUser.InvalidIdentity', { hasObjectId, hasTenantId });
+    }
+    return result;
 }
 //# sourceMappingURL=UserProvider.js.map

package/dist/auth/UserProvider.js.map

@@ -1 +1 @@
-{"version":3,"file":"UserProvider.js","sourceRoot":"","sources":["../../src/auth/UserProvider.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,8CAA8C,CAAC;AAEvE,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AAGvD,IAAI,IAAuB,CAAC;AAE5B;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,OAAO;IAC3B,IAAI,IAAI,EAAE,CAAC;QACT,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,aAAa,EAAE,CAAC;IACtC,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAE1D,IAAI,GAAG;QACL,QAAQ,EAAE,QAAQ,CAAC,QAAQ;QAC3B,QAAQ,EAAE,QAAQ,CAAC,QAAQ;QAC3B,QAAQ,EAAE,QAAQ,CAAC,QAAQ;KAC5B,CAAC;IAEF,OAAO,IAAI,CAAC;AACd,CAAC"}
+{"version":3,"file":"UserProvider.js","sourceRoot":"","sources":["../../src/auth/UserProvider.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,8CAA8C,CAAC;AAEvE,OAAO,EAAE,UAAU,EAAE,MAAM,sCAAsC,CAAC;AAClE,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AAGvD,IAAI,IAAuB,CAAC;AAC5B,IAAI,0BAA0B,GAAG,KAAK,CAAC;AAEvC;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,OAAO;IAC3B,IAAI,IAAI,EAAE,CAAC;QACT,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,aAAa,EAAE,CAAC;IACtC,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAE1D,MAAM,MAAM,GAAU;QACpB,QAAQ,EAAE,QAAQ,CAAC,QAAQ;QAC3B,QAAQ,EAAE,QAAQ,CAAC,QAAQ;QAC3B,QAAQ,EAAE,QAAQ,CAAC,QAAQ;KAC5B,CAAC;IAEF,MAAM,WAAW,GAAG,CAAC,MAAM,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;IAC9D,MAAM,WAAW,GAAG,CAAC,MAAM,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;IAE9D,IAAI,WAAW,IAAI,WAAW,EAAE,CAAC;QAC/B,IAAI,GAAG,MAAM,CAAC;IAChB,CAAC;SAAM,IAAI,CAAC,0BAA0B,EAAE,CAAC;QACvC,0BAA0B,GAAG,IAAI,CAAC;QAClC,UAAU,CAAC,8BAA8B,EAAE,EAAE,WAAW,EAAE,WAAW,EAAE,CAAC,CAAC;IAC3E,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@microsoft/managed-apps",
-  "version": "0.5.13",
+  "version": "0.5.15",
   "type": "module",
   "description": "Client SDK for Microsoft Managed Apps",
   "license": "MIT",
@@ -36,7 +36,7 @@
     "clean": "bun ../../scripts/clean.ts dist .turbo tsconfig.tsbuildinfo tsconfig.build.tsbuildinfo"
   },
   "dependencies": {
-    "@microsoft/managed-apps-common": "0.21.0"
+    "@microsoft/managed-apps-common": "0.22.1"
   },
   "devDependencies": {
     "@repo/repo-config": "0.0.0",