@microsoft/teamsfx 0.4.1-alpha.fcc60ca0.0 → 0.4.2-alpha.7b2fe9ea.0

package/dist/index.esm5.js

@@ -1,7 +1,7 @@
 import { __extends, __awaiter, __generator } from 'tslib';
 import jwt_decode from 'jwt-decode';
 import * as microsoftTeams from '@microsoft/teams-js';
-import axios from 'axios';
+import { PublicClientApplication } from '@azure/msal-browser';
 import { Client } from '@microsoft/microsoft-graph-client';
 
 // Copyright (c) Microsoft Corporation.
@@ -318,6 +318,57 @@ function getUserInfoFromSsoToken(ssoToken) {
     }
     return userInfo;
 }
+/**
+ * @internal
+ */
+function getTenantIdAndLoginHintFromSsoToken(ssoToken) {
+    if (!ssoToken) {
+        var errorMsg = "SSO token is undefined.";
+        internalLogger.error(errorMsg);
+        throw new ErrorWithCode(errorMsg, ErrorCode.InvalidParameter);
+    }
+    var tokenObject = parseJwt(ssoToken);
+    var userInfo = {
+        tid: tokenObject.tid,
+        loginHint: tokenObject.ver === "2.0"
+            ? tokenObject.preferred_username
+            : tokenObject.upn,
+    };
+    return userInfo;
+}
+/**
+ * @internal
+ */
+function parseAccessTokenFromAuthCodeTokenResponse(tokenResponse) {
+    try {
+        var tokenResponseObject = typeof tokenResponse == "string"
+            ? JSON.parse(tokenResponse)
+            : tokenResponse;
+        if (!tokenResponseObject || !tokenResponseObject.accessToken) {
+            var errorMsg = "Get empty access token from Auth Code token response.";
+            internalLogger.error(errorMsg);
+            throw new Error(errorMsg);
+        }
+        var token = tokenResponseObject.accessToken;
+        var tokenObject = parseJwt(token);
+        if (tokenObject.ver !== "1.0" && tokenObject.ver !== "2.0") {
+            var errorMsg = "SSO token is not valid with an unknown version: " + tokenObject.ver;
+            internalLogger.error(errorMsg);
+            throw new Error(errorMsg);
+        }
+        var accessToken = {
+            token: token,
+            expiresOnTimestamp: tokenObject.exp * 1000,
+        };
+        return accessToken;
+    }
+    catch (error) {
+        var errorMsg = "Parse access token failed from Auth Code token response in node env with error: " +
+            error.message;
+        internalLogger.error(errorMsg);
+        throw new ErrorWithCode(errorMsg, ErrorCode.InternalError);
+    }
+}
 /**
  * Format string template with replacements
  *
@@ -572,46 +623,10 @@ var OnBehalfOfUserCredential = /** @class */ (function () {
 }());
 
 // Copyright (c) Microsoft Corporation.
-// Licensed under the MIT license.
-/**
- * Configuration used in initialization.
- * @internal
- */
-var Cache = /** @class */ (function () {
-    function Cache() {
-    }
-    Cache.get = function (key) {
-        return sessionStorage.getItem(key);
-    };
-    Cache.set = function (key, value) {
-        sessionStorage.setItem(key, value);
-    };
-    Cache.remove = function (key) {
-        sessionStorage.removeItem(key);
-    };
-    return Cache;
-}());
-
-// Copyright (c) Microsoft Corporation.
-// Licensed under the MIT license.
-/**
- * @internal
- */
-var GrantType;
-(function (GrantType) {
-    GrantType["authCode"] = "authorization_code";
-    GrantType["ssoToken"] = "sso_token";
-})(GrantType || (GrantType = {}));
-
-// Copyright (c) Microsoft Corporation.
-var accessTokenCacheKeyPrefix = "accessToken";
-var separator = "-";
 var tokenRefreshTimeSpanInMillisecond = 5 * 60 * 1000;
 var initializeTeamsSdkTimeoutInMillisecond = 5000;
 var loginPageWidth = 600;
 var loginPageHeight = 535;
-var maxRetryCount = 3;
-var retryTimeSpanInMillisecond = 3000;
 /**
  * Represent Teams current user's identity, and it is used within Teams tab application.
  *
@@ -629,7 +644,6 @@ var TeamsUserCredential = /** @class */ (function () {
      * ```typescript
      * const config = {
      *  authentication: {
-     *    runtimeConnectorEndpoint: "https://xxx.xxx.com",
      *    initiateLoginEndpoint: "https://localhost:3000/auth-start.html",
      *    clientId: "xxx"
      *   }
@@ -647,6 +661,7 @@ var TeamsUserCredential = /** @class */ (function () {
         internalLogger.info("Create teams user credential");
         this.config = this.loadAndValidateConfig();
         this.ssoToken = null;
+        this.initialized = false;
     }
     /**
      * Popup login page to get user's access token with specific scopes.
@@ -664,7 +679,6 @@ var TeamsUserCredential = /** @class */ (function () {
      * @param scopes - The list of scopes for which the token will have access, before that, we will request user to consent.
      *
      * @throws {@link ErrorCode|InternalError} when failed to login with unknown error.
-     * @throws {@link ErrorCode|ServiceError} when simple auth server failed to exchange access token.
      * @throws {@link ErrorCode|ConsentFailed} when user canceled or failed to consent.
      * @throws {@link ErrorCode|InvalidParameter} when scopes is not a valid string or string array.
      * @throws {@link ErrorCode|RuntimeNotSupported} when runtime is nodeJS.
@@ -676,51 +690,58 @@ var TeamsUserCredential = /** @class */ (function () {
             var scopesStr;
             var _this = this;
             return __generator(this, function (_a) {
-                validateScopesType(scopes);
-                scopesStr = typeof scopes === "string" ? scopes : scopes.join(" ");
-                internalLogger.info("Popup login page to get user's access token with scopes: " + scopesStr);
-                return [2 /*return*/, new Promise(function (resolve, reject) {
-                        microsoftTeams.initialize(function () {
-                            microsoftTeams.authentication.authenticate({
-                                url: _this.config.initiateLoginEndpoint + "?clientId=" + _this.config.clientId + "&scope=" + encodeURI(scopesStr),
-                                width: loginPageWidth,
-                                height: loginPageHeight,
-                                successCallback: function (result) { return __awaiter(_this, void 0, void 0, function () {
-                                    var errorMsg, authCodeResult, err_1;
-                                    return __generator(this, function (_a) {
-                                        switch (_a.label) {
-                                            case 0:
-                                                if (!result) {
-                                                    errorMsg = "Get empty authentication result from Teams";
-                                                    internalLogger.error(errorMsg);
-                                                    reject(new ErrorWithCode(errorMsg, ErrorCode.InternalError));
-                                                    return [2 /*return*/];
-                                                }
-                                                authCodeResult = JSON.parse(result);
-                                                _a.label = 1;
-                                            case 1:
-                                                _a.trys.push([1, 3, , 4]);
-                                                return [4 /*yield*/, this.exchangeAccessTokenFromSimpleAuthServer(scopesStr, authCodeResult)];
-                                            case 2:
-                                                _a.sent();
+                switch (_a.label) {
+                    case 0:
+                        validateScopesType(scopes);
+                        scopesStr = typeof scopes === "string" ? scopes : scopes.join(" ");
+                        internalLogger.info("Popup login page to get user's access token with scopes: " + scopesStr);
+                        if (!!this.initialized) return [3 /*break*/, 2];
+                        return [4 /*yield*/, this.init()];
+                    case 1:
+                        _a.sent();
+                        _a.label = 2;
+                    case 2: return [2 /*return*/, new Promise(function (resolve, reject) {
+                            microsoftTeams.initialize(function () {
+                                microsoftTeams.authentication.authenticate({
+                                    url: _this.config.initiateLoginEndpoint + "?clientId=" + _this.config.clientId + "&scope=" + encodeURI(scopesStr) + "&loginHint=" + _this.loginHint,
+                                    width: loginPageWidth,
+                                    height: loginPageHeight,
+                                    successCallback: function (result) { return __awaiter(_this, void 0, void 0, function () {
+                                        var errorMsg, resultJson, failedToParseResult;
+                                        return __generator(this, function (_a) {
+                                            if (!result) {
+                                                errorMsg = "Get empty authentication result from MSAL";
+                                                internalLogger.error(errorMsg);
+                                                reject(new ErrorWithCode(errorMsg, ErrorCode.InternalError));
+                                                return [2 /*return*/];
+                                            }
+                                            resultJson = {};
+                                            try {
+                                                resultJson = JSON.parse(result);
+                                            }
+                                            catch (error) {
+                                                failedToParseResult = "Failed to parse result to Json.";
+                                                internalLogger.verbose(failedToParseResult);
                                                 resolve();
-                                                return [3 /*break*/, 4];
-                                            case 3:
-                                                err_1 = _a.sent();
-                                                reject(this.generateAuthServerError(err_1));
-                                                return [3 /*break*/, 4];
-                                            case 4: return [2 /*return*/];
-                                        }
-                                    });
-                                }); },
-                                failureCallback: function (reason) {
-                                    var errorMsg = "Consent failed for the scope " + scopesStr + " with error: " + reason;
-                                    internalLogger.error(errorMsg);
-                                    reject(new ErrorWithCode(errorMsg, ErrorCode.ConsentFailed));
-                                },
+                                                return [2 /*return*/];
+                                            }
+                                            // If sessionStorage exists in result, set the values in current session storage.
+                                            if (resultJson.sessionStorage) {
+                                                this.setSessionStorage(resultJson.sessionStorage);
+                                            }
+                                            resolve();
+                                            return [2 /*return*/];
+                                        });
+                                    }); },
+                                    failureCallback: function (reason) {
+                                        var errorMsg = "Consent failed for the scope " + scopesStr + " with error: " + reason;
+                                        internalLogger.error(errorMsg);
+                                        reject(new ErrorWithCode(errorMsg, ErrorCode.ConsentFailed));
+                                    },
+                                });
                             });
-                        });
-                    })];
+                        })];
+                }
             });
         });
     };
@@ -748,7 +769,6 @@ var TeamsUserCredential = /** @class */ (function () {
      *
      * @throws {@link ErrorCode|InternalError} when failed to get access token with unknown error.
      * @throws {@link ErrorCode|UiRequiredError} when need user consent to get access token.
-     * @throws {@link ErrorCode|ServiceError} when failed to get access token from simple auth server.
      * @throws {@link ErrorCode|InvalidParameter} when scopes is not a valid string or string array.
      * @throws {@link ErrorCode|RuntimeNotSupported} when runtime is nodeJS.
      *
@@ -761,7 +781,7 @@ var TeamsUserCredential = /** @class */ (function () {
      */
     TeamsUserCredential.prototype.getToken = function (scopes, options) {
         return __awaiter(this, void 0, void 0, function () {
-            var ssoToken, scopeStr, cachedKey, cachedToken, accessToken;
+            var ssoToken, scopeStr, tokenResponse, scopesArray, domain, account, scopesRequestForAcquireTokenSilent, error_1, acquireTokenSilentFailedMessage, scopesRequestForSsoSilent, error_2, ssoSilentFailedMessage, errorMsg, accessToken;
             return __generator(this, function (_a) {
                 switch (_a.label) {
                     case 0:
@@ -775,25 +795,59 @@ var TeamsUserCredential = /** @class */ (function () {
                         return [2 /*return*/, ssoToken];
                     case 2:
                         internalLogger.info("Get access token with scopes: " + scopeStr);
-                        return [4 /*yield*/, this.getAccessTokenCacheKey(scopeStr)];
+                        if (!!this.initialized) return [3 /*break*/, 4];
+                        return [4 /*yield*/, this.init()];
                     case 3:
-                        cachedKey = _a.sent();
-                        cachedToken = this.getTokenCache(cachedKey);
-                        if (cachedToken) {
-                            if (!this.isAccessTokenNearExpired(cachedToken)) {
-                                internalLogger.verbose("Get access token from cache");
-                                return [2 /*return*/, cachedToken];
-                            }
-                            else {
-                                internalLogger.verbose("Cached access token is expired");
-                            }
-                        }
-                        else {
-                            internalLogger.verbose("No cached access token");
-                        }
-                        return [4 /*yield*/, this.getAndCacheAccessTokenFromSimpleAuthServer(scopeStr)];
+                        _a.sent();
+                        _a.label = 4;
                     case 4:
-                        accessToken = _a.sent();
+                        tokenResponse = void 0;
+                        scopesArray = typeof scopes === "string" ? scopes.split(" ") : scopes;
+                        domain = window.location.origin;
+                        _a.label = 5;
+                    case 5:
+                        _a.trys.push([5, 7, , 8]);
+                        account = this.msalInstance.getAccountByUsername(this.loginHint);
+                        scopesRequestForAcquireTokenSilent = {
+                            scopes: scopesArray,
+                            account: account !== null && account !== void 0 ? account : undefined,
+                            redirectUri: domain + "/blank-auth-end.html",
+                        };
+                        return [4 /*yield*/, this.msalInstance.acquireTokenSilent(scopesRequestForAcquireTokenSilent)];
+                    case 6:
+                        tokenResponse = _a.sent();
+                        return [3 /*break*/, 8];
+                    case 7:
+                        error_1 = _a.sent();
+                        acquireTokenSilentFailedMessage = "Failed to call acquireTokenSilent. Reason: " + (error_1 === null || error_1 === void 0 ? void 0 : error_1.message) + ". ";
+                        internalLogger.verbose(acquireTokenSilentFailedMessage);
+                        return [3 /*break*/, 8];
+                    case 8:
+                        if (!!tokenResponse) return [3 /*break*/, 12];
+                        _a.label = 9;
+                    case 9:
+                        _a.trys.push([9, 11, , 12]);
+                        scopesRequestForSsoSilent = {
+                            scopes: scopesArray,
+                            loginHint: this.loginHint,
+                            redirectUri: domain + "/blank-auth-end.html",
+                        };
+                        return [4 /*yield*/, this.msalInstance.ssoSilent(scopesRequestForSsoSilent)];
+                    case 10:
+                        tokenResponse = _a.sent();
+                        return [3 /*break*/, 12];
+                    case 11:
+                        error_2 = _a.sent();
+                        ssoSilentFailedMessage = "Failed to call ssoSilent. Reason: " + (error_2 === null || error_2 === void 0 ? void 0 : error_2.message) + ". ";
+                        internalLogger.verbose(ssoSilentFailedMessage);
+                        return [3 /*break*/, 12];
+                    case 12:
+                        if (!tokenResponse) {
+                            errorMsg = "Failed to get access token cache silently, please login first: you need login first before get access token.";
+                            internalLogger.error(errorMsg);
+                            throw new ErrorWithCode(errorMsg, ErrorCode.UiRequiredError);
+                        }
+                        accessToken = parseAccessTokenFromAuthCodeTokenResponse(tokenResponse);
                         return [2 /*return*/, accessToken];
                 }
             });
@@ -830,92 +884,29 @@ var TeamsUserCredential = /** @class */ (function () {
             });
         });
     };
-    TeamsUserCredential.prototype.exchangeAccessTokenFromSimpleAuthServer = function (scopesStr, authCodeResult) {
-        var _a, _b;
-        return __awaiter(this, void 0, void 0, function () {
-            var axiosInstance, retryCount, response, tokenResult, key, err_2;
-            return __generator(this, function (_c) {
-                switch (_c.label) {
-                    case 0: return [4 /*yield*/, this.getAxiosInstance()];
-                    case 1:
-                        axiosInstance = _c.sent();
-                        retryCount = 0;
-                        _c.label = 2;
-                    case 2:
-                        _c.label = 3;
-                    case 3:
-                        _c.trys.push([3, 6, , 9]);
-                        return [4 /*yield*/, axiosInstance.post("/auth/token", {
-                                scope: scopesStr,
-                                code: authCodeResult.code,
-                                code_verifier: authCodeResult.codeVerifier,
-                                redirect_uri: authCodeResult.redirectUri,
-                                grant_type: GrantType.authCode,
-                            })];
-                    case 4:
-                        response = _c.sent();
-                        tokenResult = response.data;
-                        return [4 /*yield*/, this.getAccessTokenCacheKey(scopesStr)];
-                    case 5:
-                        key = _c.sent();
-                        // Important: tokens are stored in sessionStorage, read more here: https://aka.ms/teamsfx-session-storage-notice
-                        this.setTokenCache(key, {
-                            token: tokenResult.access_token,
-                            expiresOnTimestamp: tokenResult.expires_on,
-                        });
-                        return [2 /*return*/];
-                    case 6:
-                        err_2 = _c.sent();
-                        if (!(((_b = (_a = err_2.response) === null || _a === void 0 ? void 0 : _a.data) === null || _b === void 0 ? void 0 : _b.type) && err_2.response.data.type === "AadUiRequiredException")) return [3 /*break*/, 8];
-                        internalLogger.warn("Exchange access token failed, retry...");
-                        if (!(retryCount < maxRetryCount)) return [3 /*break*/, 8];
-                        return [4 /*yield*/, this.sleep(retryTimeSpanInMillisecond)];
-                    case 7:
-                        _c.sent();
-                        retryCount++;
-                        return [3 /*break*/, 2];
-                    case 8: throw err_2;
-                    case 9: return [3 /*break*/, 2];
-                    case 10: return [2 /*return*/];
-                }
-            });
-        });
-    };
-    /**
-     * Get access token cache from authentication server
-     * @returns Access token
-     */
-    TeamsUserCredential.prototype.getAndCacheAccessTokenFromSimpleAuthServer = function (scopesStr) {
+    TeamsUserCredential.prototype.init = function () {
         return __awaiter(this, void 0, void 0, function () {
-            var axiosInstance, response, accessTokenResult, accessToken, cacheKey, err_3;
+            var ssoToken, info, msalConfig;
             return __generator(this, function (_a) {
                 switch (_a.label) {
-                    case 0:
-                        _a.trys.push([0, 4, , 5]);
-                        internalLogger.verbose("Get access token from authentication server with scopes: " + scopesStr);
-                        return [4 /*yield*/, this.getAxiosInstance()];
+                    case 0: return [4 /*yield*/, this.getSSOToken()];
                     case 1:
-                        axiosInstance = _a.sent();
-                        return [4 /*yield*/, axiosInstance.post("/auth/token", {
-                                scope: scopesStr,
-                                grant_type: GrantType.ssoToken,
-                            })];
-                    case 2:
-                        response = _a.sent();
-                        accessTokenResult = response.data;
-                        accessToken = {
-                            token: accessTokenResult.access_token,
-                            expiresOnTimestamp: accessTokenResult.expires_on,
+                        ssoToken = _a.sent();
+                        info = getTenantIdAndLoginHintFromSsoToken(ssoToken.token);
+                        this.loginHint = info.loginHint;
+                        this.tid = info.tid;
+                        msalConfig = {
+                            auth: {
+                                clientId: this.config.clientId,
+                                authority: "https://login.microsoftonline.com/" + this.tid,
+                            },
+                            cache: {
+                                cacheLocation: "sessionStorage",
+                            },
                         };
-                        return [4 /*yield*/, this.getAccessTokenCacheKey(scopesStr)];
-                    case 3:
-                        cacheKey = _a.sent();
-                        this.setTokenCache(cacheKey, accessToken);
-                        return [2 /*return*/, accessToken];
-                    case 4:
-                        err_3 = _a.sent();
-                        throw this.generateAuthServerError(err_3);
-                    case 5: return [2 /*return*/];
+                        this.msalInstance = new PublicClientApplication(msalConfig);
+                        this.initialized = true;
+                        return [2 /*return*/];
                 }
             });
         });
@@ -989,16 +980,13 @@ var TeamsUserCredential = /** @class */ (function () {
             internalLogger.error(ErrorMessage.AuthenticationConfigurationNotExists);
             throw new ErrorWithCode(ErrorMessage.AuthenticationConfigurationNotExists, ErrorCode.InvalidConfiguration);
         }
-        if (config.initiateLoginEndpoint && config.simpleAuthEndpoint && config.clientId) {
+        if (config.initiateLoginEndpoint && config.clientId) {
             return config;
         }
         var missingValues = [];
         if (!config.initiateLoginEndpoint) {
             missingValues.push("initiateLoginEndpoint");
         }
-        if (!config.simpleAuthEndpoint) {
-            missingValues.push("simpleAuthEndpoint");
-        }
         if (!config.clientId) {
             missingValues.push("clientId");
         }
@@ -1006,129 +994,20 @@ var TeamsUserCredential = /** @class */ (function () {
         internalLogger.error(errorMsg);
         throw new ErrorWithCode(errorMsg, ErrorCode.InvalidConfiguration);
     };
-    /**
-     * Get axios instance with sso token bearer header
-     * @returns AxiosInstance
-     */
-    TeamsUserCredential.prototype.getAxiosInstance = function () {
-        return __awaiter(this, void 0, void 0, function () {
-            var ssoToken, axiosInstance;
-            return __generator(this, function (_a) {
-                switch (_a.label) {
-                    case 0: return [4 /*yield*/, this.getSSOToken()];
-                    case 1:
-                        ssoToken = _a.sent();
-                        axiosInstance = axios.create({
-                            baseURL: this.config.simpleAuthEndpoint,
-                        });
-                        axiosInstance.interceptors.request.use(function (config) {
-                            config.headers.Authorization = "Bearer " + ssoToken.token;
-                            return config;
-                        });
-                        return [2 /*return*/, axiosInstance];
-                }
-            });
-        });
-    };
-    /**
-     * Set access token to cache
-     * @param key
-     * @param token
-     */
-    TeamsUserCredential.prototype.setTokenCache = function (key, token) {
-        Cache.set(key, JSON.stringify(token));
-    };
-    /**
-     * Get access token from cache.
-     * If there is no cache or cannot be parsed, then it will return null
-     * @param key
-     * @returns Access token or null
-     */
-    TeamsUserCredential.prototype.getTokenCache = function (key) {
-        var value = Cache.get(key);
-        if (value === null) {
-            return null;
-        }
-        var accessToken = this.validateAndParseJson(value);
-        return accessToken;
-    };
-    /**
-     * Parses passed value as JSON access token, if value is not a valid json string JSON.parse() will throw an error.
-     * @param jsonValue
-     */
-    TeamsUserCredential.prototype.validateAndParseJson = function (jsonValue) {
+    TeamsUserCredential.prototype.setSessionStorage = function (sessonStorageValues) {
         try {
-            var parsedJson = JSON.parse(jsonValue);
-            /**
-             * There are edge cases in which JSON.parse will successfully parse a non-valid JSON object
-             * (e.g. JSON.parse will parse an escaped string into an unescaped string), so adding a type check
-             * of the parsed value is necessary in order to be certain that the string represents a valid JSON object.
-             *
-             */
-            return parsedJson && typeof parsedJson === "object" ? parsedJson : null;
-        }
-        catch (error) {
-            return null;
-        }
-    };
-    /**
-     * Generate cache key
-     * @param scopesStr
-     * @returns Access token cache key, a key example: accessToken-userId-clientId-tenantId-scopes
-     */
-    TeamsUserCredential.prototype.getAccessTokenCacheKey = function (scopesStr) {
-        return __awaiter(this, void 0, void 0, function () {
-            var ssoToken, ssoTokenObj, clientId, userObjectId, tenantId, key;
-            return __generator(this, function (_a) {
-                switch (_a.label) {
-                    case 0: return [4 /*yield*/, this.getSSOToken()];
-                    case 1:
-                        ssoToken = _a.sent();
-                        ssoTokenObj = parseJwt(ssoToken.token);
-                        clientId = this.config.clientId;
-                        userObjectId = ssoTokenObj.oid;
-                        tenantId = ssoTokenObj.tid;
-                        key = [accessTokenCacheKeyPrefix, userObjectId, clientId, tenantId, scopesStr]
-                            .join(separator)
-                            .replace(/" "/g, "_");
-                        return [2 /*return*/, key];
-                }
+            var sessionStorageKeys = Object.keys(sessonStorageValues);
+            sessionStorageKeys.forEach(function (key) {
+                sessionStorage.setItem(key, sessonStorageValues[key]);
             });
-        });
-    };
-    /**
-     * Check whether the token is about to expire (within 5 minutes)
-     * @returns Boolean value indicate whether the token is about to expire
-     */
-    TeamsUserCredential.prototype.isAccessTokenNearExpired = function (token) {
-        var expireDate = new Date(token.expiresOnTimestamp);
-        if (expireDate.getTime() - Date.now() > tokenRefreshTimeSpanInMillisecond) {
-            return false;
         }
-        return true;
-    };
-    TeamsUserCredential.prototype.generateAuthServerError = function (err) {
-        var _a, _b;
-        var errorMessage = err.message;
-        if ((_b = (_a = err.response) === null || _a === void 0 ? void 0 : _a.data) === null || _b === void 0 ? void 0 : _b.type) {
-            errorMessage = err.response.data.detail;
-            if (err.response.data.type === "AadUiRequiredException") {
-                var fullErrorMsg_1 = "Failed to get access token from authentication server, please login first: " +
-                    errorMessage;
-                internalLogger.warn(fullErrorMsg_1);
-                return new ErrorWithCode(fullErrorMsg_1, ErrorCode.UiRequiredError);
-            }
-            else {
-                var fullErrorMsg_2 = "Failed to get access token from authentication server: " + errorMessage;
-                internalLogger.error(fullErrorMsg_2);
-                return new ErrorWithCode(fullErrorMsg_2, ErrorCode.ServiceError);
-            }
+        catch (error) {
+            // Values in result.sessionStorage can not be set into session storage.
+            // Throw error since this may block user.
+            var errorMessage = "Failed to set values in session storage. Error: " + error.message;
+            internalLogger.error(errorMessage);
+            throw new ErrorWithCode(errorMessage, ErrorCode.InternalError);
         }
-        var fullErrorMsg = "Failed to get access token with error: " + errorMessage;
-        return new ErrorWithCode(fullErrorMsg, ErrorCode.InternalError);
-    };
-    TeamsUserCredential.prototype.sleep = function (ms) {
-        return new Promise(function (resolve) { return setTimeout(resolve, ms); });
     };
     return TeamsUserCredential;
 }());