@microsoft/rayfin-auth-provider-fabric 1.32.0 → 1.33.0-beta.0

package/dist/PostMessageAuthTransport.d.ts

@@ -16,13 +16,14 @@ export interface PostMessageHandoffResult {
  * Delegates the low-level postMessage send/receive/correlate to
  * `sendBridgeRequest` from `@microsoft/fabric-embedded-host`.
  *
- * @param params.callbackUrl  The callback origin where the SPA is hosted.
- * @param params.codeChallenge  PKCE S256 code challenge.
- * @param params.codeChallengeMethod  Always `"S256"`.
- * @param params.state  Opaque nonce for CSRF/correlation.
- * @param params.timeoutMs  Response timeout in milliseconds (default 30 000).
+ * @param params - Handoff request parameters:
+ *   - `callbackUrl`: The callback origin where the SPA is hosted.
+ *   - `codeChallenge`: PKCE S256 code challenge.
+ *   - `codeChallengeMethod`: Always `"S256"`.
+ *   - `state`: Opaque nonce for CSRF/correlation.
+ *   - `timeoutMs`: Response timeout in milliseconds (default 30 000).
  * @returns Promise resolving with the handoff code and state.
- * @throws {AuthError} On timeout, error response, or missing parent.
+ * @throws `AuthError` - On timeout, error response, or missing parent.
  */
 export declare function requestHandoff(params: {
     callbackUrl: string;

package/dist/PostMessageAuthTransport.js

@@ -9,13 +9,14 @@ import { AuthError } from '@microsoft/rayfin-lib';
  * Delegates the low-level postMessage send/receive/correlate to
  * `sendBridgeRequest` from `@microsoft/fabric-embedded-host`.
  *
- * @param params.callbackUrl  The callback origin where the SPA is hosted.
- * @param params.codeChallenge  PKCE S256 code challenge.
- * @param params.codeChallengeMethod  Always `"S256"`.
- * @param params.state  Opaque nonce for CSRF/correlation.
- * @param params.timeoutMs  Response timeout in milliseconds (default 30 000).
+ * @param params - Handoff request parameters:
+ *   - `callbackUrl`: The callback origin where the SPA is hosted.
+ *   - `codeChallenge`: PKCE S256 code challenge.
+ *   - `codeChallengeMethod`: Always `"S256"`.
+ *   - `state`: Opaque nonce for CSRF/correlation.
+ *   - `timeoutMs`: Response timeout in milliseconds (default 30 000).
  * @returns Promise resolving with the handoff code and state.
- * @throws {AuthError} On timeout, error response, or missing parent.
+ * @throws `AuthError` - On timeout, error response, or missing parent.
  */
 export function requestHandoff(params) {
     const { callbackUrl, codeChallenge, codeChallengeMethod, state, timeoutMs } = params;

package/dist/brokerUrl.d.ts

@@ -5,9 +5,9 @@ import type { FabricAuthOptions } from './types.js';
  * Preserves any existing path and query parameters on `fabricPortalUrl`,
  * appends the artifact deep-link path, and adds PKCE query parameters.
  *
- * @param options Auth options (workspace/project IDs, portal URL).
- * @param codeChallenge PKCE S256 code challenge.
- * @param state CSRF/correlation state nonce.
+ * @param options - Auth options (workspace/project IDs, portal URL).
+ * @param codeChallenge - PKCE S256 code challenge.
+ * @param state - CSRF/correlation state nonce.
  * @returns Fully constructed broker URL.
  */
 export declare function buildBrokerUrl(options: FabricAuthOptions, codeChallenge: string, state: string): string;

package/dist/brokerUrl.js

@@ -4,16 +4,18 @@
  * Preserves any existing path and query parameters on `fabricPortalUrl`,
  * appends the artifact deep-link path, and adds PKCE query parameters.
  *
- * @param options Auth options (workspace/project IDs, portal URL).
- * @param codeChallenge PKCE S256 code challenge.
- * @param state CSRF/correlation state nonce.
+ * @param options - Auth options (workspace/project IDs, portal URL).
+ * @param codeChallenge - PKCE S256 code challenge.
+ * @param state - CSRF/correlation state nonce.
  * @returns Fully constructed broker URL.
  */
 export function buildBrokerUrl(options, codeChallenge, state) {
     const portalUrl = new URL(options.fabricPortalUrl);
-    // Append artifact deep-link path
+    // Append artifact deep-link path with /BrokeredAuth route segment.
+    // Query params are preserved for backward compatibility with older
+    // AppBackend versions that detect broker mode via parseBrokerParams.
     const basePath = portalUrl.pathname.replace(/\/$/, '');
-    const artifactPath = `/groups/${encodeURIComponent(options.workspaceId)}/appbackends/${encodeURIComponent(options.projectId)}`;
+    const artifactPath = `/groups/${encodeURIComponent(options.workspaceId)}/appbackends/${encodeURIComponent(options.projectId)}/brokeredauth`;
     portalUrl.pathname = `${basePath}${artifactPath}`;
     // `returnOrigin` must be a bare origin (scheme + host + port) — used as
     // the postMessage targetOrigin and the redirect target for legacy brokers.

package/dist/embeddedFabricLogin.d.ts

@@ -15,9 +15,9 @@ import type { FabricAuthOptions } from './types.js';
  *
  * The session is stored in the iframe's own `localStorage`.
  *
- * @param auth Auth instance for token exchange and session management.
- * @param options Fabric auth options (`returnOrigin` required).
- * @throws {AuthError} On missing options, transport failure, or token exchange error.
+ * @param auth - Auth instance for token exchange and session management.
+ * @param options - Fabric auth options (`returnOrigin` required).
+ * @throws `AuthError` - On missing options, transport failure, or token exchange error.
  */
 export declare function embeddedFabricLogin(auth: Auth, options: FabricAuthOptions): Promise<void>;
 //# sourceMappingURL=embeddedFabricLogin.d.ts.map

package/dist/embeddedFabricLogin.js

@@ -17,9 +17,9 @@ import { markEmbeddedHandoffCompleted } from './fabricAuthHelpers.js';
  *
  * The session is stored in the iframe's own `localStorage`.
  *
- * @param auth Auth instance for token exchange and session management.
- * @param options Fabric auth options (`returnOrigin` required).
- * @throws {AuthError} On missing options, transport failure, or token exchange error.
+ * @param auth - Auth instance for token exchange and session management.
+ * @param options - Fabric auth options (`returnOrigin` required).
+ * @throws `AuthError` - On missing options, transport failure, or token exchange error.
  */
 export async function embeddedFabricLogin(auth, options) {
     if (!options.returnOrigin) {

package/dist/ensureSignedInWithFabric.d.ts

@@ -25,10 +25,10 @@ import type { FabricAuthOptions } from './types.js';
  * from inside a synchronous user-gesture handler (e.g., a button click).
  * Steps 1–3 do not open windows and are safe to call on page load.
  *
- * @param auth The Auth instance.
- * @param options Fabric authentication options (workspaceId, projectId, returnOrigin).
+ * @param auth - The Auth instance.
+ * @param options - Fabric authentication options (workspaceId, projectId, returnOrigin).
  * @returns A promise that resolves with the authenticated session.
- * @throws {AuthError} If all steps fail or the broker tab is blocked.
+ * @throws `AuthError` - If all steps fail or the broker tab is blocked.
  */
 export declare function ensureSignedInWithFabric(auth: Auth, options: FabricAuthOptions): Promise<OpaqueSession>;
 //# sourceMappingURL=ensureSignedInWithFabric.d.ts.map

package/dist/ensureSignedInWithFabric.js

@@ -27,10 +27,10 @@ import { initiateFabricLogin } from './initiateFabricLogin.js';
  * from inside a synchronous user-gesture handler (e.g., a button click).
  * Steps 1–3 do not open windows and are safe to call on page load.
  *
- * @param auth The Auth instance.
- * @param options Fabric authentication options (workspaceId, projectId, returnOrigin).
+ * @param auth - The Auth instance.
+ * @param options - Fabric authentication options (workspaceId, projectId, returnOrigin).
  * @returns A promise that resolves with the authenticated session.
- * @throws {AuthError} If all steps fail or the broker tab is blocked.
+ * @throws `AuthError` - If all steps fail or the broker tab is blocked.
  */
 export async function ensureSignedInWithFabric(auth, options) {
     // Steps 1-2: existing session or refresh.

package/dist/initEmbeddedAuth.d.ts

@@ -23,8 +23,8 @@ import type { FabricAuthOptions } from './types.js';
  * {@link ensureSignedInWithFabric} from a user-gesture handler for the
  * non-embedded case.
  *
- * @param auth  The Auth instance.
- * @param options  Fabric authentication options.
+ * @param auth - The Auth instance.
+ * @param options - Fabric authentication options.
  * @returns The authenticated session, or `null` if not in embedded mode.
  */
 export declare function initEmbeddedAuth(auth: Auth, options: FabricAuthOptions): Promise<OpaqueSession | null>;

package/dist/initEmbeddedAuth.js

@@ -23,8 +23,8 @@ import { hasEmbeddedHandoffCompleted, isEmbeddedMode, tryResumeSession, } from '
  * {@link ensureSignedInWithFabric} from a user-gesture handler for the
  * non-embedded case.
  *
- * @param auth  The Auth instance.
- * @param options  Fabric authentication options.
+ * @param auth - The Auth instance.
+ * @param options - Fabric authentication options.
  * @returns The authenticated session, or `null` if not in embedded mode.
  */
 export async function initEmbeddedAuth(auth, options) {

package/dist/initiateFabricLogin.d.ts

@@ -9,10 +9,10 @@ import type { FabricAuthOptions } from './types.js';
  * `brokeredAuth.handoff` postMessage. On handoff, exchanges the code for
  * tokens and creates a session. The `code_verifier` is kept in closure only.
  *
- * @param auth Auth instance for token exchange.
- * @param options Broker auth options (`returnOrigin` required).
+ * @param auth - Auth instance for token exchange.
+ * @param options - Broker auth options (`returnOrigin` required).
  * @returns Resolves when the session is established.
- * @throws {AuthError} On missing options, blocked popup, or auth failure.
+ * @throws `AuthError` - On missing options, blocked popup, or auth failure.
  */
 export declare function initiateFabricLogin(auth: Auth, options: FabricAuthOptions): Promise<void>;
 //# sourceMappingURL=initiateFabricLogin.d.ts.map

package/dist/initiateFabricLogin.js

@@ -11,10 +11,10 @@ import { buildBrokerUrl } from './brokerUrl.js';
  * `brokeredAuth.handoff` postMessage. On handoff, exchanges the code for
  * tokens and creates a session. The `code_verifier` is kept in closure only.
  *
- * @param auth Auth instance for token exchange.
- * @param options Broker auth options (`returnOrigin` required).
+ * @param auth - Auth instance for token exchange.
+ * @param options - Broker auth options (`returnOrigin` required).
  * @returns Resolves when the session is established.
- * @throws {AuthError} On missing options, blocked popup, or auth failure.
+ * @throws `AuthError` - On missing options, blocked popup, or auth failure.
  */
 export async function initiateFabricLogin(auth, options) {
     // Validate required params

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@microsoft/rayfin-auth-provider-fabric",
-  "version": "1.32.0",
+  "version": "1.33.0-beta.0",
   "description": "Fabric brokered authentication provider for Rayfin SDK",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
@@ -13,9 +13,9 @@
   ],
   "type": "module",
   "dependencies": {
-    "@microsoft/rayfin-auth": "1.32.0",
-    "@microsoft/rayfin-lib": "1.32.0",
-    "@microsoft/fabric-embedded-host": "1.32.0"
+    "@microsoft/rayfin-auth": "1.33.0-beta.0",
+    "@microsoft/rayfin-lib": "1.33.0-beta.0",
+    "@microsoft/fabric-embedded-host": "1.33.0-beta.0"
   },
   "devDependencies": {
     "typescript": "^5.8.3",