@microsoft/rayfin-auth-provider-fabric 1.34.0 → 1.35.0-alpha.1276

package/dist/brokerUrl.d.ts

@@ -9,6 +9,14 @@ import type { FabricAuthOptions } from './types.js';
  * PKCE parameters are no longer included in the URL — they are delivered to
  * the extension via the postMessage challenge flow (`brokeredAuth.challenge`).
  *
+ * **Local-manifest debugging:** when `fabricPortalUrl` carries
+ * `debug.useLocalManifests=1`, the chromeless SecureItemEmbed host is bypassed
+ * in favor of the full-portal artifact deep-link. The SecureItemEmbed host
+ * does not propagate `debug.useLocalManifests` to the loaded extension
+ * manifest, whereas the portal shell honors it — so this fallback renders the
+ * usual portal chrome but loads local manifests. PKCE/state are still
+ * delivered via postMessage in both cases, so no auth params are added here.
+ *
  * @param options - Auth options (workspace/project IDs, portal URL).
  * @returns Fully constructed broker URL.
  */

package/dist/brokerUrl.js

@@ -8,14 +8,33 @@
  * PKCE parameters are no longer included in the URL — they are delivered to
  * the extension via the postMessage challenge flow (`brokeredAuth.challenge`).
  *
+ * **Local-manifest debugging:** when `fabricPortalUrl` carries
+ * `debug.useLocalManifests=1`, the chromeless SecureItemEmbed host is bypassed
+ * in favor of the full-portal artifact deep-link. The SecureItemEmbed host
+ * does not propagate `debug.useLocalManifests` to the loaded extension
+ * manifest, whereas the portal shell honors it — so this fallback renders the
+ * usual portal chrome but loads local manifests. PKCE/state are still
+ * delivered via postMessage in both cases, so no auth params are added here.
+ *
  * @param options - Auth options (workspace/project IDs, portal URL).
  * @returns Fully constructed broker URL.
  */
 export function buildBrokerUrl(options) {
     const portalUrl = new URL(options.fabricPortalUrl);
+    const basePath = portalUrl.pathname.replace(/\/$/, '');
+    // Local-manifest debugging bypasses the chromeless SecureItemEmbed host,
+    // which does not honor `debug.useLocalManifests=1`. Fall back to the
+    // full-portal artifact deep-link (usual portal chrome) so local manifests
+    // load. The `debug.useLocalManifests` flag comes from `fabricPortalUrl` and
+    // is preserved automatically since only the path is rewritten.
+    if (portalUrl.searchParams.get('debug.useLocalManifests') === '1') {
+        portalUrl.pathname =
+            `${basePath}/groups/${encodeURIComponent(options.workspaceId)}` +
+                `/appbackends/${encodeURIComponent(options.projectId)}/brokeredauth`;
+        return portalUrl.toString();
+    }
     // Use the chromeless SecureItemEmbed path instead of the full portal
     // deep-link so the popup renders without Fabric navigation chrome.
-    const basePath = portalUrl.pathname.replace(/\/$/, '');
     portalUrl.pathname = `${basePath}/secureItemEmbed`;
     // Artifact identification for SecureItemEmbed
     portalUrl.searchParams.set('workspaceId', options.workspaceId);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@microsoft/rayfin-auth-provider-fabric",
-  "version": "1.34.0",
+  "version": "1.35.0-alpha.1276",
   "description": "Fabric brokered authentication provider for Rayfin SDK",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
@@ -13,9 +13,9 @@
   ],
   "type": "module",
   "dependencies": {
-    "@microsoft/rayfin-auth": "1.34.0",
-    "@microsoft/fabric-embedded-host": "1.34.0",
-    "@microsoft/rayfin-lib": "1.34.0"
+    "@microsoft/rayfin-auth": "1.35.0-alpha.1276",
+    "@microsoft/rayfin-lib": "1.35.0-alpha.1276",
+    "@microsoft/fabric-embedded-host": "1.35.0-alpha.1276"
   },
   "devDependencies": {
     "typescript": "^5.8.3",