@microsoft/teamsfx 0.4.1-alpha.fa070464.0 → 0.4.2-alpha.01a113d2.0

package/dist/index.esm5.js

@@ -1,9 +1,8 @@
 import { __extends, __awaiter, __generator } from 'tslib';
 import jwt_decode from 'jwt-decode';
 import * as microsoftTeams from '@microsoft/teams-js';
-import axios from 'axios';
+import { PublicClientApplication } from '@azure/msal-browser';
 import { Client } from '@microsoft/microsoft-graph-client';
-import { ManagedIdentityCredential } from '@azure/identity';
 
 // Copyright (c) Microsoft Corporation.
 /**
@@ -56,6 +55,10 @@ var ErrorCode;
      * Operation failed.
      */
     ErrorCode["FailedOperation"] = "FailedOperation";
+    /**
+     * Version of SDK and project does not match.
+     */
+    ErrorCode["ProjectNeedUpgrade"] = "ProjectNeedUpgrade";
 })(ErrorCode || (ErrorCode = {}));
 /**
  * @internal
@@ -176,7 +179,7 @@ function getLogLevel() {
     return internalLogger.level;
 }
 var InternalLogger = /** @class */ (function () {
-    function InternalLogger() {
+    function InternalLogger(name, logLevel) {
         this.level = undefined;
         this.defaultLogger = {
             verbose: console.debug,
@@ -184,6 +187,8 @@ var InternalLogger = /** @class */ (function () {
             warn: console.warn,
             error: console.error,
         };
+        this.name = name;
+        this.level = logLevel;
     }
     InternalLogger.prototype.error = function (message) {
         this.log(LogLevel.Error, function (x) { return x.error; }, message);
@@ -202,7 +207,13 @@ var InternalLogger = /** @class */ (function () {
             return;
         }
         var timestamp = new Date().toUTCString();
-        var logHeader = "[" + timestamp + "] : @microsoft/teamsfx : " + LogLevel[logLevel] + " - ";
+        var logHeader;
+        if (this.name) {
+            logHeader = "[" + timestamp + "] : @microsoft/teamsfx - " + this.name + " : " + LogLevel[logLevel] + " - ";
+        }
+        else {
+            logHeader = "[" + timestamp + "] : @microsoft/teamsfx : " + LogLevel[logLevel] + " - ";
+        }
         var logMessage = "" + logHeader + message;
         if (this.level !== undefined && this.level <= logLevel) {
             if (this.customLogger) {
@@ -311,6 +322,57 @@ function getUserInfoFromSsoToken(ssoToken) {
     }
     return userInfo;
 }
+/**
+ * @internal
+ */
+function getTenantIdAndLoginHintFromSsoToken(ssoToken) {
+    if (!ssoToken) {
+        var errorMsg = "SSO token is undefined.";
+        internalLogger.error(errorMsg);
+        throw new ErrorWithCode(errorMsg, ErrorCode.InvalidParameter);
+    }
+    var tokenObject = parseJwt(ssoToken);
+    var userInfo = {
+        tid: tokenObject.tid,
+        loginHint: tokenObject.ver === "2.0"
+            ? tokenObject.preferred_username
+            : tokenObject.upn,
+    };
+    return userInfo;
+}
+/**
+ * @internal
+ */
+function parseAccessTokenFromAuthCodeTokenResponse(tokenResponse) {
+    try {
+        var tokenResponseObject = typeof tokenResponse == "string"
+            ? JSON.parse(tokenResponse)
+            : tokenResponse;
+        if (!tokenResponseObject || !tokenResponseObject.accessToken) {
+            var errorMsg = "Get empty access token from Auth Code token response.";
+            internalLogger.error(errorMsg);
+            throw new Error(errorMsg);
+        }
+        var token = tokenResponseObject.accessToken;
+        var tokenObject = parseJwt(token);
+        if (tokenObject.ver !== "1.0" && tokenObject.ver !== "2.0") {
+            var errorMsg = "SSO token is not valid with an unknown version: " + tokenObject.ver;
+            internalLogger.error(errorMsg);
+            throw new Error(errorMsg);
+        }
+        var accessToken = {
+            token: token,
+            expiresOnTimestamp: tokenObject.exp * 1000,
+        };
+        return accessToken;
+    }
+    catch (error) {
+        var errorMsg = "Parse access token failed from Auth Code token response in node env with error: " +
+            error.message;
+        internalLogger.error(errorMsg);
+        throw new ErrorWithCode(errorMsg, ErrorCode.InternalError);
+    }
+}
 /**
  * Format string template with replacements
  *
@@ -565,46 +627,10 @@ var OnBehalfOfUserCredential = /** @class */ (function () {
 }());
 
 // Copyright (c) Microsoft Corporation.
-// Licensed under the MIT license.
-/**
- * Configuration used in initialization.
- * @internal
- */
-var Cache = /** @class */ (function () {
-    function Cache() {
-    }
-    Cache.get = function (key) {
-        return sessionStorage.getItem(key);
-    };
-    Cache.set = function (key, value) {
-        sessionStorage.setItem(key, value);
-    };
-    Cache.remove = function (key) {
-        sessionStorage.removeItem(key);
-    };
-    return Cache;
-}());
-
-// Copyright (c) Microsoft Corporation.
-// Licensed under the MIT license.
-/**
- * @internal
- */
-var GrantType;
-(function (GrantType) {
-    GrantType["authCode"] = "authorization_code";
-    GrantType["ssoToken"] = "sso_token";
-})(GrantType || (GrantType = {}));
-
-// Copyright (c) Microsoft Corporation.
-var accessTokenCacheKeyPrefix = "accessToken";
-var separator = "-";
 var tokenRefreshTimeSpanInMillisecond = 5 * 60 * 1000;
 var initializeTeamsSdkTimeoutInMillisecond = 5000;
 var loginPageWidth = 600;
 var loginPageHeight = 535;
-var maxRetryCount = 3;
-var retryTimeSpanInMillisecond = 3000;
 /**
  * Represent Teams current user's identity, and it is used within Teams tab application.
  *
@@ -622,7 +648,6 @@ var TeamsUserCredential = /** @class */ (function () {
      * ```typescript
      * const config = {
      *  authentication: {
-     *    runtimeConnectorEndpoint: "https://xxx.xxx.com",
      *    initiateLoginEndpoint: "https://localhost:3000/auth-start.html",
      *    clientId: "xxx"
      *   }
@@ -640,6 +665,7 @@ var TeamsUserCredential = /** @class */ (function () {
         internalLogger.info("Create teams user credential");
         this.config = this.loadAndValidateConfig();
         this.ssoToken = null;
+        this.initialized = false;
     }
     /**
      * Popup login page to get user's access token with specific scopes.
@@ -657,7 +683,6 @@ var TeamsUserCredential = /** @class */ (function () {
      * @param scopes - The list of scopes for which the token will have access, before that, we will request user to consent.
      *
      * @throws {@link ErrorCode|InternalError} when failed to login with unknown error.
-     * @throws {@link ErrorCode|ServiceError} when simple auth server failed to exchange access token.
      * @throws {@link ErrorCode|ConsentFailed} when user canceled or failed to consent.
      * @throws {@link ErrorCode|InvalidParameter} when scopes is not a valid string or string array.
      * @throws {@link ErrorCode|RuntimeNotSupported} when runtime is nodeJS.
@@ -669,57 +694,73 @@ var TeamsUserCredential = /** @class */ (function () {
             var scopesStr;
             var _this = this;
             return __generator(this, function (_a) {
-                validateScopesType(scopes);
-                scopesStr = typeof scopes === "string" ? scopes : scopes.join(" ");
-                internalLogger.info("Popup login page to get user's access token with scopes: " + scopesStr);
-                return [2 /*return*/, new Promise(function (resolve, reject) {
-                        microsoftTeams.initialize(function () {
-                            microsoftTeams.authentication.authenticate({
-                                url: _this.config.initiateLoginEndpoint + "?clientId=" + _this.config.clientId + "&scope=" + encodeURI(scopesStr),
-                                width: loginPageWidth,
-                                height: loginPageHeight,
-                                successCallback: function (result) { return __awaiter(_this, void 0, void 0, function () {
-                                    var errorMsg, authCodeResult, err_1;
-                                    return __generator(this, function (_a) {
-                                        switch (_a.label) {
-                                            case 0:
-                                                if (!result) {
-                                                    errorMsg = "Get empty authentication result from Teams";
-                                                    internalLogger.error(errorMsg);
-                                                    reject(new ErrorWithCode(errorMsg, ErrorCode.InternalError));
-                                                    return [2 /*return*/];
-                                                }
-                                                authCodeResult = JSON.parse(result);
-                                                _a.label = 1;
-                                            case 1:
-                                                _a.trys.push([1, 3, , 4]);
-                                                return [4 /*yield*/, this.exchangeAccessTokenFromSimpleAuthServer(scopesStr, authCodeResult)];
-                                            case 2:
-                                                _a.sent();
+                switch (_a.label) {
+                    case 0:
+                        validateScopesType(scopes);
+                        scopesStr = typeof scopes === "string" ? scopes : scopes.join(" ");
+                        internalLogger.info("Popup login page to get user's access token with scopes: " + scopesStr);
+                        if (!!this.initialized) return [3 /*break*/, 2];
+                        return [4 /*yield*/, this.init()];
+                    case 1:
+                        _a.sent();
+                        _a.label = 2;
+                    case 2: return [2 /*return*/, new Promise(function (resolve, reject) {
+                            microsoftTeams.initialize(function () {
+                                microsoftTeams.authentication.authenticate({
+                                    url: _this.config.initiateLoginEndpoint + "?clientId=" + _this.config.clientId + "&scope=" + encodeURI(scopesStr) + "&loginHint=" + _this.loginHint,
+                                    width: loginPageWidth,
+                                    height: loginPageHeight,
+                                    successCallback: function (result) { return __awaiter(_this, void 0, void 0, function () {
+                                        var errorMsg, resultJson, failedToParseResult, helpLink, usingPreviousAuthPage;
+                                        return __generator(this, function (_a) {
+                                            if (!result) {
+                                                errorMsg = "Get empty authentication result from MSAL";
+                                                internalLogger.error(errorMsg);
+                                                reject(new ErrorWithCode(errorMsg, ErrorCode.InternalError));
+                                                return [2 /*return*/];
+                                            }
+                                            resultJson = {};
+                                            try {
+                                                resultJson = JSON.parse(result);
+                                            }
+                                            catch (error) {
+                                                failedToParseResult = "Failed to parse result to Json.";
+                                                internalLogger.verbose(failedToParseResult);
                                                 resolve();
-                                                return [3 /*break*/, 4];
-                                            case 3:
-                                                err_1 = _a.sent();
-                                                reject(this.generateAuthServerError(err_1));
-                                                return [3 /*break*/, 4];
-                                            case 4: return [2 /*return*/];
-                                        }
-                                    });
-                                }); },
-                                failureCallback: function (reason) {
-                                    var errorMsg = "Consent failed for the scope " + scopesStr + " with error: " + reason;
-                                    internalLogger.error(errorMsg);
-                                    reject(new ErrorWithCode(errorMsg, ErrorCode.ConsentFailed));
-                                },
+                                                return [2 /*return*/];
+                                            }
+                                            // If code exists in result, user may using previous auth-start and auth-end page.
+                                            if (resultJson.code) {
+                                                helpLink = "https://aka.ms/teamsfx-auth-code-flow";
+                                                usingPreviousAuthPage = "Found auth code in response. You may be using the latest TeamsFx SDK on an old project." +
+                                                    ("Please refer to the help link for how to fix the issue: " + helpLink + ".");
+                                                reject(new ErrorWithCode(usingPreviousAuthPage, ErrorCode.ProjectNeedUpgrade));
+                                            }
+                                            // If sessionStorage exists in result, set the values in current session storage.
+                                            if (resultJson.sessionStorage) {
+                                                this.setSessionStorage(resultJson.sessionStorage);
+                                            }
+                                            resolve();
+                                            return [2 /*return*/];
+                                        });
+                                    }); },
+                                    failureCallback: function (reason) {
+                                        var errorMsg = "Consent failed for the scope " + scopesStr + " with error: " + reason;
+                                        internalLogger.error(errorMsg);
+                                        reject(new ErrorWithCode(errorMsg, ErrorCode.ConsentFailed));
+                                    },
+                                });
                             });
-                        });
-                    })];
+                        })];
+                }
             });
         });
     };
     /**
      * Get access token from credential.
      *
+     * Important: Access tokens are stored in sessionStorage, read more here: https://aka.ms/teamsfx-session-storage-notice
+     *
      * @example
      * ```typescript
      * await credential.getToken([]) // Get SSO token using empty string array
@@ -739,7 +780,6 @@ var TeamsUserCredential = /** @class */ (function () {
      *
      * @throws {@link ErrorCode|InternalError} when failed to get access token with unknown error.
      * @throws {@link ErrorCode|UiRequiredError} when need user consent to get access token.
-     * @throws {@link ErrorCode|ServiceError} when failed to get access token from simple auth server.
      * @throws {@link ErrorCode|InvalidParameter} when scopes is not a valid string or string array.
      * @throws {@link ErrorCode|RuntimeNotSupported} when runtime is nodeJS.
      *
@@ -752,7 +792,7 @@ var TeamsUserCredential = /** @class */ (function () {
      */
     TeamsUserCredential.prototype.getToken = function (scopes, options) {
         return __awaiter(this, void 0, void 0, function () {
-            var ssoToken, scopeStr, cachedKey, cachedToken, accessToken;
+            var ssoToken, scopeStr, tokenResponse, scopesArray, domain, account, scopesRequestForAcquireTokenSilent, error_1, acquireTokenSilentFailedMessage, scopesRequestForSsoSilent, error_2, ssoSilentFailedMessage, errorMsg, accessToken;
             return __generator(this, function (_a) {
                 switch (_a.label) {
                     case 0:
@@ -766,25 +806,59 @@ var TeamsUserCredential = /** @class */ (function () {
                         return [2 /*return*/, ssoToken];
                     case 2:
                         internalLogger.info("Get access token with scopes: " + scopeStr);
-                        return [4 /*yield*/, this.getAccessTokenCacheKey(scopeStr)];
+                        if (!!this.initialized) return [3 /*break*/, 4];
+                        return [4 /*yield*/, this.init()];
                     case 3:
-                        cachedKey = _a.sent();
-                        cachedToken = this.getTokenCache(cachedKey);
-                        if (cachedToken) {
-                            if (!this.isAccessTokenNearExpired(cachedToken)) {
-                                internalLogger.verbose("Get access token from cache");
-                                return [2 /*return*/, cachedToken];
-                            }
-                            else {
-                                internalLogger.verbose("Cached access token is expired");
-                            }
-                        }
-                        else {
-                            internalLogger.verbose("No cached access token");
-                        }
-                        return [4 /*yield*/, this.getAndCacheAccessTokenFromSimpleAuthServer(scopeStr)];
+                        _a.sent();
+                        _a.label = 4;
                     case 4:
-                        accessToken = _a.sent();
+                        tokenResponse = void 0;
+                        scopesArray = typeof scopes === "string" ? scopes.split(" ") : scopes;
+                        domain = window.location.origin;
+                        _a.label = 5;
+                    case 5:
+                        _a.trys.push([5, 7, , 8]);
+                        account = this.msalInstance.getAccountByUsername(this.loginHint);
+                        scopesRequestForAcquireTokenSilent = {
+                            scopes: scopesArray,
+                            account: account !== null && account !== void 0 ? account : undefined,
+                            redirectUri: domain + "/blank-auth-end.html",
+                        };
+                        return [4 /*yield*/, this.msalInstance.acquireTokenSilent(scopesRequestForAcquireTokenSilent)];
+                    case 6:
+                        tokenResponse = _a.sent();
+                        return [3 /*break*/, 8];
+                    case 7:
+                        error_1 = _a.sent();
+                        acquireTokenSilentFailedMessage = "Failed to call acquireTokenSilent. Reason: " + (error_1 === null || error_1 === void 0 ? void 0 : error_1.message) + ". ";
+                        internalLogger.verbose(acquireTokenSilentFailedMessage);
+                        return [3 /*break*/, 8];
+                    case 8:
+                        if (!!tokenResponse) return [3 /*break*/, 12];
+                        _a.label = 9;
+                    case 9:
+                        _a.trys.push([9, 11, , 12]);
+                        scopesRequestForSsoSilent = {
+                            scopes: scopesArray,
+                            loginHint: this.loginHint,
+                            redirectUri: domain + "/blank-auth-end.html",
+                        };
+                        return [4 /*yield*/, this.msalInstance.ssoSilent(scopesRequestForSsoSilent)];
+                    case 10:
+                        tokenResponse = _a.sent();
+                        return [3 /*break*/, 12];
+                    case 11:
+                        error_2 = _a.sent();
+                        ssoSilentFailedMessage = "Failed to call ssoSilent. Reason: " + (error_2 === null || error_2 === void 0 ? void 0 : error_2.message) + ". ";
+                        internalLogger.verbose(ssoSilentFailedMessage);
+                        return [3 /*break*/, 12];
+                    case 12:
+                        if (!tokenResponse) {
+                            errorMsg = "Failed to get access token cache silently, please login first: you need login first before get access token.";
+                            internalLogger.error(errorMsg);
+                            throw new ErrorWithCode(errorMsg, ErrorCode.UiRequiredError);
+                        }
+                        accessToken = parseAccessTokenFromAuthCodeTokenResponse(tokenResponse);
                         return [2 /*return*/, accessToken];
                 }
             });
@@ -821,91 +895,29 @@ var TeamsUserCredential = /** @class */ (function () {
             });
         });
     };
-    TeamsUserCredential.prototype.exchangeAccessTokenFromSimpleAuthServer = function (scopesStr, authCodeResult) {
-        var _a, _b;
+    TeamsUserCredential.prototype.init = function () {
         return __awaiter(this, void 0, void 0, function () {
-            var axiosInstance, retryCount, response, tokenResult, key, err_2;
-            return __generator(this, function (_c) {
-                switch (_c.label) {
-                    case 0: return [4 /*yield*/, this.getAxiosInstance()];
-                    case 1:
-                        axiosInstance = _c.sent();
-                        retryCount = 0;
-                        _c.label = 2;
-                    case 2:
-                        _c.label = 3;
-                    case 3:
-                        _c.trys.push([3, 6, , 9]);
-                        return [4 /*yield*/, axiosInstance.post("/auth/token", {
-                                scope: scopesStr,
-                                code: authCodeResult.code,
-                                code_verifier: authCodeResult.codeVerifier,
-                                redirect_uri: authCodeResult.redirectUri,
-                                grant_type: GrantType.authCode,
-                            })];
-                    case 4:
-                        response = _c.sent();
-                        tokenResult = response.data;
-                        return [4 /*yield*/, this.getAccessTokenCacheKey(scopesStr)];
-                    case 5:
-                        key = _c.sent();
-                        this.setTokenCache(key, {
-                            token: tokenResult.access_token,
-                            expiresOnTimestamp: tokenResult.expires_on,
-                        });
-                        return [2 /*return*/];
-                    case 6:
-                        err_2 = _c.sent();
-                        if (!(((_b = (_a = err_2.response) === null || _a === void 0 ? void 0 : _a.data) === null || _b === void 0 ? void 0 : _b.type) && err_2.response.data.type === "AadUiRequiredException")) return [3 /*break*/, 8];
-                        internalLogger.warn("Exchange access token failed, retry...");
-                        if (!(retryCount < maxRetryCount)) return [3 /*break*/, 8];
-                        return [4 /*yield*/, this.sleep(retryTimeSpanInMillisecond)];
-                    case 7:
-                        _c.sent();
-                        retryCount++;
-                        return [3 /*break*/, 2];
-                    case 8: throw err_2;
-                    case 9: return [3 /*break*/, 2];
-                    case 10: return [2 /*return*/];
-                }
-            });
-        });
-    };
-    /**
-     * Get access token cache from authentication server
-     * @returns Access token
-     */
-    TeamsUserCredential.prototype.getAndCacheAccessTokenFromSimpleAuthServer = function (scopesStr) {
-        return __awaiter(this, void 0, void 0, function () {
-            var axiosInstance, response, accessTokenResult, accessToken, cacheKey, err_3;
+            var ssoToken, info, msalConfig;
             return __generator(this, function (_a) {
                 switch (_a.label) {
-                    case 0:
-                        _a.trys.push([0, 4, , 5]);
-                        internalLogger.verbose("Get access token from authentication server with scopes: " + scopesStr);
-                        return [4 /*yield*/, this.getAxiosInstance()];
+                    case 0: return [4 /*yield*/, this.getSSOToken()];
                     case 1:
-                        axiosInstance = _a.sent();
-                        return [4 /*yield*/, axiosInstance.post("/auth/token", {
-                                scope: scopesStr,
-                                grant_type: GrantType.ssoToken,
-                            })];
-                    case 2:
-                        response = _a.sent();
-                        accessTokenResult = response.data;
-                        accessToken = {
-                            token: accessTokenResult.access_token,
-                            expiresOnTimestamp: accessTokenResult.expires_on,
+                        ssoToken = _a.sent();
+                        info = getTenantIdAndLoginHintFromSsoToken(ssoToken.token);
+                        this.loginHint = info.loginHint;
+                        this.tid = info.tid;
+                        msalConfig = {
+                            auth: {
+                                clientId: this.config.clientId,
+                                authority: "https://login.microsoftonline.com/" + this.tid,
+                            },
+                            cache: {
+                                cacheLocation: "sessionStorage",
+                            },
                         };
-                        return [4 /*yield*/, this.getAccessTokenCacheKey(scopesStr)];
-                    case 3:
-                        cacheKey = _a.sent();
-                        this.setTokenCache(cacheKey, accessToken);
-                        return [2 /*return*/, accessToken];
-                    case 4:
-                        err_3 = _a.sent();
-                        throw this.generateAuthServerError(err_3);
-                    case 5: return [2 /*return*/];
+                        this.msalInstance = new PublicClientApplication(msalConfig);
+                        this.initialized = true;
+                        return [2 /*return*/];
                 }
             });
         });
@@ -979,16 +991,13 @@ var TeamsUserCredential = /** @class */ (function () {
             internalLogger.error(ErrorMessage.AuthenticationConfigurationNotExists);
             throw new ErrorWithCode(ErrorMessage.AuthenticationConfigurationNotExists, ErrorCode.InvalidConfiguration);
         }
-        if (config.initiateLoginEndpoint && config.simpleAuthEndpoint && config.clientId) {
+        if (config.initiateLoginEndpoint && config.clientId) {
             return config;
         }
         var missingValues = [];
         if (!config.initiateLoginEndpoint) {
             missingValues.push("initiateLoginEndpoint");
         }
-        if (!config.simpleAuthEndpoint) {
-            missingValues.push("simpleAuthEndpoint");
-        }
         if (!config.clientId) {
             missingValues.push("clientId");
         }
@@ -996,129 +1005,20 @@ var TeamsUserCredential = /** @class */ (function () {
         internalLogger.error(errorMsg);
         throw new ErrorWithCode(errorMsg, ErrorCode.InvalidConfiguration);
     };
-    /**
-     * Get axios instance with sso token bearer header
-     * @returns AxiosInstance
-     */
-    TeamsUserCredential.prototype.getAxiosInstance = function () {
-        return __awaiter(this, void 0, void 0, function () {
-            var ssoToken, axiosInstance;
-            return __generator(this, function (_a) {
-                switch (_a.label) {
-                    case 0: return [4 /*yield*/, this.getSSOToken()];
-                    case 1:
-                        ssoToken = _a.sent();
-                        axiosInstance = axios.create({
-                            baseURL: this.config.simpleAuthEndpoint,
-                        });
-                        axiosInstance.interceptors.request.use(function (config) {
-                            config.headers.Authorization = "Bearer " + ssoToken.token;
-                            return config;
-                        });
-                        return [2 /*return*/, axiosInstance];
-                }
-            });
-        });
-    };
-    /**
-     * Set access token to cache
-     * @param key
-     * @param token
-     */
-    TeamsUserCredential.prototype.setTokenCache = function (key, token) {
-        Cache.set(key, JSON.stringify(token));
-    };
-    /**
-     * Get access token from cache.
-     * If there is no cache or cannot be parsed, then it will return null
-     * @param key
-     * @returns Access token or null
-     */
-    TeamsUserCredential.prototype.getTokenCache = function (key) {
-        var value = Cache.get(key);
-        if (value === null) {
-            return null;
-        }
-        var accessToken = this.validateAndParseJson(value);
-        return accessToken;
-    };
-    /**
-     * Parses passed value as JSON access token, if value is not a valid json string JSON.parse() will throw an error.
-     * @param jsonValue
-     */
-    TeamsUserCredential.prototype.validateAndParseJson = function (jsonValue) {
+    TeamsUserCredential.prototype.setSessionStorage = function (sessonStorageValues) {
         try {
-            var parsedJson = JSON.parse(jsonValue);
-            /**
-             * There are edge cases in which JSON.parse will successfully parse a non-valid JSON object
-             * (e.g. JSON.parse will parse an escaped string into an unescaped string), so adding a type check
-             * of the parsed value is necessary in order to be certain that the string represents a valid JSON object.
-             *
-             */
-            return parsedJson && typeof parsedJson === "object" ? parsedJson : null;
-        }
-        catch (error) {
-            return null;
-        }
-    };
-    /**
-     * Generate cache key
-     * @param scopesStr
-     * @returns Access token cache key, a key example: accessToken-userId-clientId-tenantId-scopes
-     */
-    TeamsUserCredential.prototype.getAccessTokenCacheKey = function (scopesStr) {
-        return __awaiter(this, void 0, void 0, function () {
-            var ssoToken, ssoTokenObj, clientId, userObjectId, tenantId, key;
-            return __generator(this, function (_a) {
-                switch (_a.label) {
-                    case 0: return [4 /*yield*/, this.getSSOToken()];
-                    case 1:
-                        ssoToken = _a.sent();
-                        ssoTokenObj = parseJwt(ssoToken.token);
-                        clientId = this.config.clientId;
-                        userObjectId = ssoTokenObj.oid;
-                        tenantId = ssoTokenObj.tid;
-                        key = [accessTokenCacheKeyPrefix, userObjectId, clientId, tenantId, scopesStr]
-                            .join(separator)
-                            .replace(/" "/g, "_");
-                        return [2 /*return*/, key];
-                }
+            var sessionStorageKeys = Object.keys(sessonStorageValues);
+            sessionStorageKeys.forEach(function (key) {
+                sessionStorage.setItem(key, sessonStorageValues[key]);
             });
-        });
-    };
-    /**
-     * Check whether the token is about to expire (within 5 minutes)
-     * @returns Boolean value indicate whether the token is about to expire
-     */
-    TeamsUserCredential.prototype.isAccessTokenNearExpired = function (token) {
-        var expireDate = new Date(token.expiresOnTimestamp);
-        if (expireDate.getTime() - Date.now() > tokenRefreshTimeSpanInMillisecond) {
-            return false;
         }
-        return true;
-    };
-    TeamsUserCredential.prototype.generateAuthServerError = function (err) {
-        var _a, _b;
-        var errorMessage = err.message;
-        if ((_b = (_a = err.response) === null || _a === void 0 ? void 0 : _a.data) === null || _b === void 0 ? void 0 : _b.type) {
-            errorMessage = err.response.data.detail;
-            if (err.response.data.type === "AadUiRequiredException") {
-                var fullErrorMsg_1 = "Failed to get access token from authentication server, please login first: " +
-                    errorMessage;
-                internalLogger.warn(fullErrorMsg_1);
-                return new ErrorWithCode(fullErrorMsg_1, ErrorCode.UiRequiredError);
-            }
-            else {
-                var fullErrorMsg_2 = "Failed to get access token from authentication server: " + errorMessage;
-                internalLogger.error(fullErrorMsg_2);
-                return new ErrorWithCode(fullErrorMsg_2, ErrorCode.ServiceError);
-            }
+        catch (error) {
+            // Values in result.sessionStorage can not be set into session storage.
+            // Throw error since this may block user.
+            var errorMessage = "Failed to set values in session storage. Error: " + error.message;
+            internalLogger.error(errorMessage);
+            throw new ErrorWithCode(errorMessage, ErrorCode.InternalError);
         }
-        var fullErrorMsg = "Failed to get access token with error: " + errorMessage;
-        return new ErrorWithCode(fullErrorMsg, ErrorCode.InternalError);
-    };
-    TeamsUserCredential.prototype.sleep = function (ms) {
-        return new Promise(function (resolve) { return setTimeout(resolve, ms); });
     };
     return TeamsUserCredential;
 }());
@@ -1256,201 +1156,31 @@ function createMicrosoftGraphClient(credential, scopes) {
     return graphClient;
 }
 
-// Copyright (c) Microsoft Corporation.
 /**
- * SQL connection configuration instance.
+ * Generate connection configuration consumed by tedious.
  * @remarks
  * Only works in in server side.
- *
  * @beta
- *
  */
 var DefaultTediousConnectionConfiguration = /** @class */ (function () {
     function DefaultTediousConnectionConfiguration() {
-        /**
-         * MSSQL default scope
-         * https://docs.microsoft.com/en-us/azure/app-service/app-service-web-tutorial-connect-msi
-         */
-        this.defaultSQLScope = "https://database.windows.net/";
+        throw new ErrorWithCode(formatString(ErrorMessage.BrowserRuntimeNotSupported, "DefaultTediousConnectionConfiguration"), ErrorCode.RuntimeNotSupported);
     }
     /**
      * Generate connection configuration consumed by tedious.
-     *
-     * @returns Connection configuration of tedious for the SQL.
-     *
-     * @throws {@link ErrorCode|InvalidConfiguration} when SQL config resource configuration is invalid.
-     * @throws {@link ErrorCode|InternalError} when get user MSI token failed or MSI token is invalid.
-     * @throws {@link ErrorCode|RuntimeNotSupported} when runtime is browser.
-     *
+     * @remarks
+     * Only works in in server side.
      * @beta
      */
-    DefaultTediousConnectionConfiguration.prototype.getConfig = function () {
-        return __awaiter(this, void 0, void 0, function () {
-            var configuration, errMsg, configWithUPS, configWithToken, error_1;
-            return __generator(this, function (_a) {
-                switch (_a.label) {
-                    case 0:
-                        internalLogger.info("Get SQL configuration");
-                        configuration = getResourceConfiguration(ResourceType.SQL);
-                        if (!configuration) {
-                            errMsg = "SQL resource configuration not exist";
-                            internalLogger.error(errMsg);
-                            throw new ErrorWithCode(errMsg, ErrorCode.InvalidConfiguration);
-                        }
-                        try {
-                            this.isSQLConfigurationValid(configuration);
-                        }
-                        catch (err) {
-                            throw err;
-                        }
-                        if (!this.isMsiAuthentication()) {
-                            configWithUPS = this.generateDefaultConfig(configuration);
-                            internalLogger.verbose("SQL configuration with username and password generated");
-                            return [2 /*return*/, configWithUPS];
-                        }
-                        _a.label = 1;
-                    case 1:
-                        _a.trys.push([1, 3, , 4]);
-                        return [4 /*yield*/, this.generateTokenConfig(configuration)];
-                    case 2:
-                        configWithToken = _a.sent();
-                        internalLogger.verbose("SQL configuration with MSI token generated");
-                        return [2 /*return*/, configWithToken];
-                    case 3:
-                        error_1 = _a.sent();
-                        throw error_1;
-                    case 4: return [2 /*return*/];
-                }
-            });
-        });
-    };
-    /**
-     * Check SQL use MSI identity or username and password.
-     *
-     * @returns false - login with SQL MSI identity, true - login with username and password.
-     * @internal
-     */
-    DefaultTediousConnectionConfiguration.prototype.isMsiAuthentication = function () {
-        internalLogger.verbose("Check connection config using MSI access token or username and password");
-        var configuration = getResourceConfiguration(ResourceType.SQL);
-        if ((configuration === null || configuration === void 0 ? void 0 : configuration.sqlUsername) != null && (configuration === null || configuration === void 0 ? void 0 : configuration.sqlPassword) != null) {
-            internalLogger.verbose("Login with username and password");
-            return false;
-        }
-        internalLogger.verbose("Login with MSI identity");
-        return true;
-    };
-    /**
-     * check configuration is an available configurations.
-     * @param { SqlConfiguration } sqlConfig
-     *
-     * @returns true - SQL configuration has a valid SQL endpoints, SQL username with password or identity ID.
-     *          false - configuration is not valid.
-     * @internal
-     */
-    DefaultTediousConnectionConfiguration.prototype.isSQLConfigurationValid = function (sqlConfig) {
-        internalLogger.verbose("Check SQL configuration if valid");
-        if (!sqlConfig.sqlServerEndpoint) {
-            internalLogger.error("SQL configuration is not valid without SQL server endpoint exist");
-            throw new ErrorWithCode("SQL configuration error without SQL server endpoint exist", ErrorCode.InvalidConfiguration);
-        }
-        if (!(sqlConfig.sqlUsername && sqlConfig.sqlPassword) && !sqlConfig.sqlIdentityId) {
-            var errMsg = "SQL configuration is not valid without " + (sqlConfig.sqlIdentityId ? "" : "identity id ") + " " + (sqlConfig.sqlUsername ? "" : "SQL username ") + " " + (sqlConfig.sqlPassword ? "" : "SQL password") + " exist";
-            internalLogger.error(errMsg);
-            throw new ErrorWithCode(errMsg, ErrorCode.InvalidConfiguration);
-        }
-        internalLogger.verbose("SQL configuration is valid");
-    };
-    /**
-     * Generate tedious connection configuration with default authentication type.
-     *
-     * @param { SqlConfiguration } SQL configuration with username and password.
-     *
-     * @returns Tedious connection configuration with username and password.
-     * @internal
-     */
-    DefaultTediousConnectionConfiguration.prototype.generateDefaultConfig = function (sqlConfig) {
-        internalLogger.verbose("SQL server " + sqlConfig.sqlServerEndpoint + ", user name " + sqlConfig.sqlUsername + ", database name " + sqlConfig.sqlDatabaseName);
-        var config = {
-            server: sqlConfig.sqlServerEndpoint,
-            authentication: {
-                type: TediousAuthenticationType.default,
-                options: {
-                    userName: sqlConfig.sqlUsername,
-                    password: sqlConfig.sqlPassword,
-                },
-            },
-            options: {
-                database: sqlConfig.sqlDatabaseName,
-                encrypt: true,
-            },
-        };
-        return config;
-    };
-    /**
-     * Generate tedious connection configuration with azure-active-directory-access-token authentication type.
-     *
-     * @param { SqlConfiguration } SQL configuration with AAD access token.
-     *
-     * @returns Tedious connection configuration with access token.
-     * @internal
-     */
-    DefaultTediousConnectionConfiguration.prototype.generateTokenConfig = function (sqlConfig) {
+    DefaultTediousConnectionConfiguration.prototype.getConfig = function (databaseName) {
         return __awaiter(this, void 0, void 0, function () {
-            var token, credential, errMsg, config;
             return __generator(this, function (_a) {
-                switch (_a.label) {
-                    case 0:
-                        internalLogger.verbose("Generate tedious config with MSI token");
-                        _a.label = 1;
-                    case 1:
-                        _a.trys.push([1, 3, , 4]);
-                        credential = new ManagedIdentityCredential(sqlConfig.sqlIdentityId);
-                        return [4 /*yield*/, credential.getToken(this.defaultSQLScope)];
-                    case 2:
-                        token = _a.sent();
-                        return [3 /*break*/, 4];
-                    case 3:
-                        _a.sent();
-                        errMsg = "Get user MSI token failed";
-                        internalLogger.error(errMsg);
-                        throw new ErrorWithCode(errMsg, ErrorCode.InternalError);
-                    case 4:
-                        if (token) {
-                            config = {
-                                server: sqlConfig.sqlServerEndpoint,
-                                authentication: {
-                                    type: TediousAuthenticationType.MSI,
-                                    options: {
-                                        token: token.token,
-                                    },
-                                },
-                                options: {
-                                    database: sqlConfig.sqlDatabaseName,
-                                    encrypt: true,
-                                },
-                            };
-                            internalLogger.verbose("Generate token configuration success, server endpoint is " + sqlConfig.sqlServerEndpoint + ", database name is " + sqlConfig.sqlDatabaseName);
-                            return [2 /*return*/, config];
-                        }
-                        internalLogger.error("Generate token configuration, server endpoint is " + sqlConfig.sqlServerEndpoint + ", MSI token is not valid");
-                        throw new ErrorWithCode("MSI token is not valid", ErrorCode.InternalError);
-                }
+                throw new ErrorWithCode(formatString(ErrorMessage.BrowserRuntimeNotSupported, "DefaultTediousConnectionConfiguration"), ErrorCode.RuntimeNotSupported);
             });
         });
     };
     return DefaultTediousConnectionConfiguration;
-}());
-/**
- * tedious connection config authentication type.
- * https://tediousjs.github.io/tedious/api-connection.html
- * @internal
- */
-var TediousAuthenticationType;
-(function (TediousAuthenticationType) {
-    TediousAuthenticationType["default"] = "default";
-    TediousAuthenticationType["MSI"] = "azure-active-directory-access-token";
-})(TediousAuthenticationType || (TediousAuthenticationType = {}));
+}());
 
 // Copyright (c) Microsoft Corporation.
 /**