@microsoft/rayfin-auth-provider-fabric 1.35.0-beta.0 → 1.36.0-alpha.1588

package/dist/brokerUrl.d.ts

@@ -9,13 +9,7 @@ import type { FabricAuthOptions } from './types.js';
  * PKCE parameters are no longer included in the URL — they are delivered to
  * the extension via the postMessage challenge flow (`brokeredAuth.challenge`).
  *
- * **Local-manifest debugging:** when `fabricPortalUrl` carries
- * `debug.useLocalManifests=1`, the chromeless SecureItemEmbed host is bypassed
- * in favor of the full-portal artifact deep-link. The SecureItemEmbed host
- * does not propagate `debug.useLocalManifests` to the loaded extension
- * manifest, whereas the portal shell honors it — so this fallback renders the
- * usual portal chrome but loads local manifests. PKCE/state are still
- * delivered via postMessage in both cases, so no auth params are added here.
+ * edog lacks SecureItemEmbed, so it falls back to the full-portal deep-link.
  *
  * @param options - Auth options (workspace/project IDs, portal URL).
  * @returns Fully constructed broker URL.

package/dist/brokerUrl.js

@@ -1,3 +1,12 @@
+/** edog (dogfood) portal domain; unlike prod/daily/dxt it lacks SecureItemEmbed. */
+const EDOG_PORTAL_DOMAIN_SUFFIX = '.analysis-df.windows.net';
+/** `true` when `host` is the edog portal (`*.analysis-df.windows.net`). */
+function isEdogPortal(host) {
+    return host
+        .toLowerCase()
+        .replace(/\.$/, '')
+        .endsWith(EDOG_PORTAL_DOMAIN_SUFFIX);
+}
 /**
  * Constructs the broker launch URL for the chromeless SecureItemEmbed view.
  *
@@ -8,13 +17,7 @@
  * PKCE parameters are no longer included in the URL — they are delivered to
  * the extension via the postMessage challenge flow (`brokeredAuth.challenge`).
  *
- * **Local-manifest debugging:** when `fabricPortalUrl` carries
- * `debug.useLocalManifests=1`, the chromeless SecureItemEmbed host is bypassed
- * in favor of the full-portal artifact deep-link. The SecureItemEmbed host
- * does not propagate `debug.useLocalManifests` to the loaded extension
- * manifest, whereas the portal shell honors it — so this fallback renders the
- * usual portal chrome but loads local manifests. PKCE/state are still
- * delivered via postMessage in both cases, so no auth params are added here.
+ * edog lacks SecureItemEmbed, so it falls back to the full-portal deep-link.
  *
  * @param options - Auth options (workspace/project IDs, portal URL).
  * @returns Fully constructed broker URL.
@@ -22,27 +25,21 @@
 export function buildBrokerUrl(options) {
     const portalUrl = new URL(options.fabricPortalUrl);
     const basePath = portalUrl.pathname.replace(/\/$/, '');
-    // Local-manifest debugging bypasses the chromeless SecureItemEmbed host,
-    // which does not honor `debug.useLocalManifests=1`. Fall back to the
-    // full-portal artifact deep-link (usual portal chrome) so local manifests
-    // load. The `debug.useLocalManifests` flag comes from `fabricPortalUrl` and
-    // is preserved automatically since only the path is rewritten.
-    if (portalUrl.searchParams.get('debug.useLocalManifests') === '1') {
+    // edog lacks SecureItemEmbed: use the full-portal deep-link. Query params
+    // are preserved since only the path is rewritten.
+    if (isEdogPortal(portalUrl.hostname)) {
         portalUrl.pathname =
             `${basePath}/groups/${encodeURIComponent(options.workspaceId)}` +
                 `/appbackends/${encodeURIComponent(options.projectId)}/brokeredauth`;
         return portalUrl.toString();
     }
-    // Use the chromeless SecureItemEmbed path instead of the full portal
-    // deep-link so the popup renders without Fabric navigation chrome.
+    // Chromeless SecureItemEmbed path (no Fabric navigation chrome).
     portalUrl.pathname = `${basePath}/secureItemEmbed`;
     // Artifact identification for SecureItemEmbed
     portalUrl.searchParams.set('workspaceId', options.workspaceId);
     portalUrl.searchParams.set('itemType', 'AppBackend');
     portalUrl.searchParams.set('itemId', options.projectId);
-    // Route the extension to the dedicated BrokeredAuthPage.
-    // PKCE parameters are delivered via postMessage (brokeredAuth.challenge),
-    // not through the URL, so only the path is needed here.
+    // Route the extension to the BrokeredAuthPage; PKCE goes via postMessage.
     portalUrl.searchParams.set('extensionPath', '/brokeredauth');
     return portalUrl.toString();
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@microsoft/rayfin-auth-provider-fabric",
-  "version": "1.35.0-beta.0",
+  "version": "1.36.0-alpha.1588",
   "description": "Fabric brokered authentication provider for Rayfin SDK",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
@@ -13,9 +13,9 @@
   ],
   "type": "module",
   "dependencies": {
-    "@microsoft/rayfin-auth": "1.35.0-beta.0",
-    "@microsoft/fabric-embedded-host": "1.35.0-beta.0",
-    "@microsoft/rayfin-lib": "1.35.0-beta.0"
+    "@microsoft/fabric-embedded-host": "1.36.0-alpha.1588",
+    "@microsoft/rayfin-auth": "1.36.0-alpha.1588",
+    "@microsoft/rayfin-lib": "1.36.0-alpha.1588"
   },
   "devDependencies": {
     "typescript": "^5.8.3",